From b442137db288567e44eac410061fe9ce13c1c46c Mon Sep 17 00:00:00 2001 From: "Yann Esposito (Yogsototh)" Date: Sat, 20 May 2023 10:43:38 +0200 Subject: [PATCH] :construction: WIP :construction: --- .orgids | 2 +- Cisco.org.gpg | Bin 49404 -> 54946 bytes RBAC-tech-changes.pdf | Bin 0 -> 197860 bytes archives/TODO.archive.org | 450 ++++++ famille.html | 472 ------ inbox.org | 1011 +++++++++--- journal.org.gpg | Bin 21404 -> 0 bytes notes.org.gpg | Bin 10488 -> 10490 bytes notes/capt_website.org | 68 + notes/cisco_qdd.org | 72 + notes/maison_martigues.org | 45 + notes/rbac_for_clients.org | 129 ++ tracker.org | 2991 ++++++------------------------------ tracker.org_archive | 2451 +++++++++++++++++++++++++++++ 14 files changed, 4505 insertions(+), 3186 deletions(-) create mode 100644 RBAC-tech-changes.pdf delete mode 100644 famille.html delete mode 100644 journal.org.gpg create mode 100644 notes/capt_website.org create mode 100644 notes/cisco_qdd.org create mode 100644 notes/maison_martigues.org create mode 100644 notes/rbac_for_clients.org diff --git a/.orgids b/.orgids index 2c3ae21d..eb24e9c1 100644 --- a/.orgids +++ b/.orgids @@ -1,2 +1,2 @@ -(("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/permission_outside_scopes.org" "8c6d80b5-dc83-40ee-b187-4b0427c77f78") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org" "8163f2ed-7106-4b4a-93b0-7009fe316172" "1644E007-AFBE-4F4B-9307-B007C60548E8" "8B092321-BA1F-47F9-A927-76D2E232CF51" "49981B50-AFBD-4C93-A9C2-8D88550AB425" "90110976-520D-4B0C-B1D9-3798323C370E" "2110820C-4877-40B3-A351-2DEDE0F222C6" "a4ebd43b-b589-499e-85e1-7ebea0abf3af" "9207b53a-e38e-4996-abc6-140c31f2960a") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/archives/TODO.archive.org" "96343FD2-E7A9-4AAA-A40A-8D048DA340E9" "B72E4288-E96B-4099-8684-37DDF3395C50" "797ba971-6ae3-49a1-9499-928572760d09") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/composable_shell_nix.org" "8c33ebae-bccf-4e73-837b-f52fa4c5e4c6") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/what_i_forsee_about_the_future_of_developers.org" "16bbfe28-ea40-437f-861d-1eacb408d34f") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/custom_routes.org" "0dceeeca-7c23-41a8-b9dc-4642a09618db") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/html_css_web_techs.org" "7431e4a3-4359-4dcb-89e6-c1c700cd4355") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/either_in_clojure.org" "b413e4db-1367-4936-8a46-cd5b86178e29") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/chien_d_assistance.org" "2a3d68cc-4a14-442c-b7f9-c602a2cd25bf") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/template_information_chien_d_assistance.org" "b0b0b46f-a11e-4c4b-8d1f-0d444847aeae") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/browserless_software_project_management_with_git.org" "13c23225-379a-45a8-bed1-24fb6a054454") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/hacker_culture.org" "0caa54f7-bbac-486c-855c-f299943f4226") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/one_hacker_way_by_erik_meijer_goto_2015.org" "02bd2e1e-cd10-4b29-bd03-611edf0c7eab") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/lgtm.org" "cc2e9340-1340-4d28-8f54-47080a569c7e") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_org_level_entities.org" "b30f9e63-e655-40e6-9a58-5a390a7921bb") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco.org" "ce893df9-32a4-44e0-9eb5-b9817141ee6a") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/iroh_auth_ui_enhancements.org" "fe9118f2-3cf1-4a9c-b97d-d5d58f9d0769") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_user_data.org" "e6db475b-9ccc-43b2-bcfe-057215ddc1d1") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/high_iq_captcha.org" "b6402aa6-3315-4317-82a5-367af38f0ead") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/management.org" "719fabee-1094-4596-b26e-55fe7a512113") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/one_one_meetings.org" "cd101af9-2dd7-41b7-85d6-4de5c0c594df") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/redirect_to_new_page_with_useridentity_jwt.org" "f46a4a9e-6a06-4b9e-8764-30cd8c501d7e") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/encryption.org" "80630a59-70f2-435b-967b-abb162324be8") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/chat.org" "fb32a68e-b32c-4ce5-9c6a-cc141a122708") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/security.org" "2351f4cb-85a3-45ca-9bb5-f13a559afcfe") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/simplex_chat.org" "5a711803-6a92-40e3-817d-40f564ac5cf8") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_ft_securex_registration.org" "1208f09c-d37d-4e6b-9110-151f3c6b7d34") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/how_to_speak.org" "4ad5f64e-c330-4f36-8f8a-d82a1ae993a0") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/interview_certification.org" "93027c33-dcf8-4bda-8aee-60f507e0ff4a") ("../y/her.esy.fun/src/posts/0019-utopia-tv-show/index.org" "88e25182-ee54-4d2e-b373-b4e06fc292c8") ("../y/her.esy.fun/src/posts/0013-how-to-choose-your-tools/index.org" "c2e61938-8493-434a-9ffa-9fd4698d9863") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_team_history.org" "e3296579-2f2e-4f23-92e2-1ce9fef6fe04") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/customer_manager.org" "99fd9444-ae5d-4d51-a295-a936fc01928a") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/artificial_life_game_approach.org" "8a37b5d3-8ee5-45cd-8c32-021b8d42210f") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/factorio_maps.org" "e5c17702-09d5-4d7d-97ff-95a8de353ea0") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/interview_shafiq.org" "094630db-95cf-416f-a147-ca5fdeddd902") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/remove_securex_tg_login_button.org" "3290e028-b7a6-4be3-a5d2-45bf89ff2f0d") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/new_iroh_auth_apis.org" "2c317dbe-4fca-444b-b0bc-f9174522e106") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_securex_ips.org" "c9e0342f-f082-4c9b-9dcd-f1629124ac71") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/deep_merge_exploration.org" "c1dbe471-a470-4d44-a91c-0bfda0d47d21") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/impots_2021.org" "8daf6185-ad0e-40c2-af79-0bb885505303") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/characteristics_of_pseudoscience.org" "509cbe3e-cf95-4bcd-9f61-9cc74aa35a8c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/presentation_leads.org" "22d031b5-ff8e-46df-a306-0ca30ab7358b") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/vigiglobe.org" "07412c20-49d3-4616-957f-5ddd246ed080") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/weekly_iroh_auth_notes.org" "8ddf9276-6888-4502-9dd9-943769726ca1") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/weekly_platform.org" "1194cbe4-b31c-4b17-9e0a-f0ee8422292c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/positive_attitude.org" "8deaa4e4-a96c-4d3c-96df-8f23e0d90f1e") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/amstrad.org" "a9971a5b-6565-4835-9c49-c968011bbc21") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/duo.org" "e9d79b8d-3779-45b7-9360-7bb5558ffbeb") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/one_one_v2.org" "9699f986-29ad-429f-9ca9-1080062ae11c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/brut_css.org" "cfd05ee0-488d-4b28-ab97-5fe6fe4a5cae") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/maintenance_questions.org" "b55abfad-ea21-4e81-8017-e99b8af33f9c")) +(("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/maison_martigues.org" "bac1c907-5733-4837-83bb-747e189432b5") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_qdd.org" "32684342-7935-41c3-b855-4a748662b15d") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/permission_outside_scopes.org" "8c6d80b5-dc83-40ee-b187-4b0427c77f78") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org" "8163f2ed-7106-4b4a-93b0-7009fe316172" "1644E007-AFBE-4F4B-9307-B007C60548E8" "8B092321-BA1F-47F9-A927-76D2E232CF51" "49981B50-AFBD-4C93-A9C2-8D88550AB425" "90110976-520D-4B0C-B1D9-3798323C370E" "2110820C-4877-40B3-A351-2DEDE0F222C6" "a4ebd43b-b589-499e-85e1-7ebea0abf3af" "9207b53a-e38e-4996-abc6-140c31f2960a") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/archives/TODO.archive.org" "96343FD2-E7A9-4AAA-A40A-8D048DA340E9" "B72E4288-E96B-4099-8684-37DDF3395C50" "797ba971-6ae3-49a1-9499-928572760d09") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/composable_shell_nix.org" "8c33ebae-bccf-4e73-837b-f52fa4c5e4c6") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/what_i_forsee_about_the_future_of_developers.org" "16bbfe28-ea40-437f-861d-1eacb408d34f") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/custom_routes.org" "0dceeeca-7c23-41a8-b9dc-4642a09618db") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/html_css_web_techs.org" "7431e4a3-4359-4dcb-89e6-c1c700cd4355") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/either_in_clojure.org" "b413e4db-1367-4936-8a46-cd5b86178e29") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/chien_d_assistance.org" "2a3d68cc-4a14-442c-b7f9-c602a2cd25bf") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/template_information_chien_d_assistance.org" "b0b0b46f-a11e-4c4b-8d1f-0d444847aeae") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/browserless_software_project_management_with_git.org" "13c23225-379a-45a8-bed1-24fb6a054454") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/hacker_culture.org" "0caa54f7-bbac-486c-855c-f299943f4226") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/one_hacker_way_by_erik_meijer_goto_2015.org" "02bd2e1e-cd10-4b29-bd03-611edf0c7eab") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/lgtm.org" "cc2e9340-1340-4d28-8f54-47080a569c7e") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_org_level_entities.org" "b30f9e63-e655-40e6-9a58-5a390a7921bb") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco.org" "ce893df9-32a4-44e0-9eb5-b9817141ee6a") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/iroh_auth_ui_enhancements.org" "fe9118f2-3cf1-4a9c-b97d-d5d58f9d0769") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_user_data.org" "e6db475b-9ccc-43b2-bcfe-057215ddc1d1") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/high_iq_captcha.org" "b6402aa6-3315-4317-82a5-367af38f0ead") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/management.org" "719fabee-1094-4596-b26e-55fe7a512113") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/one_one_meetings.org" "cd101af9-2dd7-41b7-85d6-4de5c0c594df") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/redirect_to_new_page_with_useridentity_jwt.org" "f46a4a9e-6a06-4b9e-8764-30cd8c501d7e") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/encryption.org" "80630a59-70f2-435b-967b-abb162324be8") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/chat.org" "fb32a68e-b32c-4ce5-9c6a-cc141a122708") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/security.org" "2351f4cb-85a3-45ca-9bb5-f13a559afcfe") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/simplex_chat.org" "5a711803-6a92-40e3-817d-40f564ac5cf8") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_ft_securex_registration.org" "1208f09c-d37d-4e6b-9110-151f3c6b7d34") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/how_to_speak.org" "4ad5f64e-c330-4f36-8f8a-d82a1ae993a0") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/interview_certification.org" "93027c33-dcf8-4bda-8aee-60f507e0ff4a") ("../y/her.esy.fun/src/posts/0019-utopia-tv-show/index.org" "88e25182-ee54-4d2e-b373-b4e06fc292c8") ("../y/her.esy.fun/src/posts/0013-how-to-choose-your-tools/index.org" "c2e61938-8493-434a-9ffa-9fd4698d9863") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_team_history.org" "e3296579-2f2e-4f23-92e2-1ce9fef6fe04") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/customer_manager.org" "99fd9444-ae5d-4d51-a295-a936fc01928a") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/artificial_life_game_approach.org" "8a37b5d3-8ee5-45cd-8c32-021b8d42210f") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/factorio_maps.org" "e5c17702-09d5-4d7d-97ff-95a8de353ea0") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/interview_shafiq.org" "094630db-95cf-416f-a147-ca5fdeddd902") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/remove_securex_tg_login_button.org" "3290e028-b7a6-4be3-a5d2-45bf89ff2f0d") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/new_iroh_auth_apis.org" "2c317dbe-4fca-444b-b0bc-f9174522e106") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/cisco_securex_ips.org" "c9e0342f-f082-4c9b-9dcd-f1629124ac71") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/deep_merge_exploration.org" "c1dbe471-a470-4d44-a91c-0bfda0d47d21") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/impots_2021.org" "8daf6185-ad0e-40c2-af79-0bb885505303") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/characteristics_of_pseudoscience.org" "509cbe3e-cf95-4bcd-9f61-9cc74aa35a8c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/presentation_leads.org" "22d031b5-ff8e-46df-a306-0ca30ab7358b") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/vigiglobe.org" "07412c20-49d3-4616-957f-5ddd246ed080") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/weekly_iroh_auth_notes.org" "8ddf9276-6888-4502-9dd9-943769726ca1") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/weekly_platform.org" "1194cbe4-b31c-4b17-9e0a-f0ee8422292c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/positive_attitude.org" "8deaa4e4-a96c-4d3c-96df-8f23e0d90f1e") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/amstrad.org" "a9971a5b-6565-4835-9c49-c968011bbc21") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/duo.org" "e9d79b8d-3779-45b7-9360-7bb5558ffbeb") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/one_one_v2.org" "9699f986-29ad-429f-9ca9-1080062ae11c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/brut_css.org" "cfd05ee0-488d-4b28-ab97-5fe6fe4a5cae") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/maintenance_questions.org" "b55abfad-ea21-4e81-8017-e99b8af33f9c") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/rbac_for_clients.org" "8f30dbd3-8c24-4fd6-b784-2753130453ec") ("../Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/notes/capt_website.org" "54f15fc7-8c85-4bde-a15a-ea9fe94e7c2f")) diff --git a/Cisco.org.gpg b/Cisco.org.gpg index e5b2171ae62c65c61f788d4b73108d85097da6c9..afef4f602aad59f4388a9484a9b79a311f9afb03 100644 GIT binary patch literal 54946 zcmV(nK=QwZ0t^FvF6E%v-!tL?5B@!Y6V~o;il7z3AGwB;&<-+}%RgiP{#vgpmWIXe z5{Wmo0idwJqUd?)aV}KAlHXlHc=mYB(4Iyk8E4ODVHk7Go9#G~QGUBwb0Td+CipEW zb#K}>yZ!2Pu`OAmmBK7%PSbzN%xdSEzO!o3@|eE@@C+de!6=k_pthNgl%;_}D^yo4 z*%Cr`c^vZwIZ0F9DIddh?(Y%f+W~)#yrI=9Q)LaC@+I0*sPBP-v&*aOex)nQLx-jT zI%{_U203qbEb^$@wU{~LI#N4Lz6kn(aN@xTc0z8MT}wMHy{yN{bAzz>6Dmtu{0Wa$ zzS|DPUYxKh?2A8=tDU@pq~x8AKcC>~FN~KYX!_|A+?;RoOk-cSpIN|S`5)AV3uv@z z*Ww_ajqC~&OqAbQ+*YvY6((iPQns8kYJ{7eJasz4H1(L4ZDT~U>~7fO8gq-Ii##67 zG?QX=EN0NGcICU&1=K-SbU{cs@k%(V2CyPVS}j#ws^14}v~{lonfUVWsB-r2;$=Ph zG>pqs*QXENQI{6q@caW_K%5ZToGJ&)d54p0uPL@N0yU3xW%*=!+&tNFLWn-L?n0i| zYDyN%2f0;h0M|04ceZC%fFBe3%Bg9vUu@EQ0L+;*|K!4WG3XcqV)3cFW}YF0lz90RAX}~2d+KK0yz%VO)1nxVyr4HH^Km(cRI*CmZ)JtoDT0Mhiau#FTKkw zxH8EUlNt{GH}zPaJj|W0uFi%;yr;K`DVE4+*19V?khR4pNY6hH`MNc56y2`B!yHNW zOHDGtE$8znA(`q?I*2^yuFya)9MkT<-!L+9C-i8Ohr8qKc~JEoi^t)@Z!;aqpW@L~T!V@A?>Hoy`lviJgp5{QF9@ zMNLl%Ol5p%^Bg~|lS-Z1O$!7yymOqeU&}|BX~){vJo{+HNNn$JD2R#KNJHg5ulvOm z$1?Ty>$_F0(AQRn9iifmK(!CDTm({nydij~Bxr?BUJ#z~(c$@>sqqyv#W_-L%#4K= zLW!?UMky<`^flW*UvFhA*1g>^hu@+9FmV$Wh%o*BWe1O3caRf=OQJ(fts>}33yBuL z^1b9+@6z}y0^%0Y<5@TVVF6vRiI^_NqwoCCdJ7cg%JZnn@|QTo={wS{nV0(c-lSB| zc+_kI+1GN^c}4*wQ@}jv-f)&)w1F-L#!==y?SAziSH)R>ZSR4l`v-9}57Ur0R0q@8?pv?&bmN5{@3Ao=LKeXPBhbRPcz$1S- zVtflr`5d21@&V2CW>S4DOoB!K^vb!iZUB@DzRx~j*DhMRntDb<6wvli)2B9f*5DX( zaO}+yT}HCUKBL@Kw~N}uScP$G{YtT ze)n2VzJ13Zk5G<)rpP6jGNx#r>A(sCX`ce=o}Dg36s-aWAwz}R-trIKnR^{}B^_%Q zhf|%EAsVo{V7p9K?~Oc26t_(%INprf}oM2>H+DKt_oXQJLW7@M~F~F+jY&S)0BPCv1~4kZ5(Y z>gCPd|KrgijWjTUqffVr@-YhK7XO&mk2R1Vsh^vQwRndgH!#r!1W$B?Y1-4NUBkC} z!zBK8j{?iFdOaD0XJ|>cJ72ivVv}^TTMOz=<`2Q0eg|6_9HLk9h9$5I7z!SS5UNUs zSs1q8`mT}0Po9y|6@e&T6s5hF!oyMeNhbbKk3V zh4ASa$@ZRZkJ#w>&%$I3y3UAyJ%J+IP09NevYqKzG@jbOjryT^Eu0$Vwq5}$iC+IZ zMA6=!Q1yN_W`~Urs%*OnpWTW_JnHa}7w5%YD=)#A)Q@ehiG51e54TS?SGfFzrkR5? zBOAQEf<0xx{J5)`xKoCl3fq727v9sso>8wPw1(Q7?@M<&2?n+YcE@ZtDPf9C`StL1 znPgw^-D(*IX$8NG^}nFY)}@xXcQnffd_(eD!KZp;AbV;G3SuOoKNJ?v%ndUXguK{4s0YvFslM4UaAYd}h< z0jAVoO?a=SrwhNN)w$3U%Xm5kD$Gnn}vhA4g0#z_r_$HDasbWaWj`i zh=n7%utzP4qv}WWSJuRsJ*SjNnIuH}g2Ic)@ymW3N-INcGJe?{ESXjj+@`DKBx%aA zqL}f;ReD`=@5|~|!`1MGK|Bb+oQuqUoPQW!Zx(lxy9Oz;4h29N$mQtC9@ldVj;XkS z8QAVGi>#^{f3b-Z>=9cWw$4-YxK!&+(BG>t6vA-z70ClS+*8$aLHA@wt2L3%uvqg~ zHIWRbQHCNWCevdMweHODG!RLd3&z6;8jeUUevN!azQJ9`Qffcf2le?d(DI=qZaoIbty~{i>C9 z{{`}9FG^QV7}}7CJkvY4D=dsgJZ4k%f?GUi8UnY)x|?djwlv6x28V5> zAmCUrFV-{uBsx9r5ET^}tvo-`)zx@n4tCs*PCt;dm(_b?BzUPW<`u#fF9L|?3x4b< z$6+R0E+y_b!mn62VL5v7WgHrX#+{{aXtyb$Un-B9 z9D^fOx}TbCJ%1YRLE_o4r}a+8h-b8dK^k zN{+g5$;O1vl4ThU7}yEJML7_be?#RyQDZ7X9##SMlX9tWzCWVSH6EuK3--Z1TSHHDLWF84m-QbcMm|EK1 zF1^0q%spq9N0^kRa>nr=C;u2#1G5@uef8(*^@aGn;_6pRqFD z!IZWTy+yh;-;hy|#s2^sfi(K_Y(+}|fd8#3xC}v~hIkf{aQUDhHnnSWH^)yNO8sy@ z^XT=ckhdUIyyLg;}YG`vj}xDSd~%X65==9p=|!ewpCel&|j`+s{| z=RevPfOQMe#4chi9*zpF*Nlyxp-dLf{6It1d5_u|0BiN3U^$kTt(TZ@%A)IKtzl7j z912zalsIU1hH85X{cziJS{Rb!ROU+T9q@bUP%N&mUp%j*+yI1$mpK|WLOGND#9#~V? z`XN+kQoskX4azz%QULU>+R^D2W!C~bAX*xBFhYBg!S6F@>Hp|E@qI#6CrWFQw|;0{ zQG1+?QDYCzL0*t~OeQmzN2tWJ0;8h=QsZ$eX41MH!97$&JDU%tLSnEf_vv zW2I*h#1gJCCv0gQw!roqWPo@9``2G{m3e=3^1?w}k7E$ZU^UZsU);ILq&n7k*f=VK zWmi9<=XF{#9o$@gf4is3hqht3?jVZiuVQnS9)Z)syo=|b#50cX86vMk@sXuD`BN=< zNnY~KWtGGS+gK{UGHjj9jN-g+c@zad=!7iXl*DFks1iU%>V7hsAwvxj4kd)^K%}C$ zS?Qeq3IAHa@0)%HWEU^#;nm@%9X5({;hqK!Xtd-Q%=;bEH<41!`wweR7n;sCuEX(; zqtUUzbDo_7nNtO?z=}!KqOn%3y;WVTOcb3Uct|>Pdx(mk^$J*DyQ=BQ%=l1>8}=^$%aLI9YHH^%S{HOl5Xls# zmf!MltaAa}24ODw1VWr&aLS_q+!l;&9^|^-(E~OCbt$9%H`;#?{EMmD(cYsaMM&&M z@fTChst%^6qRwnhOL;)>1x*g#2|V^=JPDOs6t6YQ)KQ!XVlntCUP(tq%Kx59gC7{i ztD#ElK#IKyVXIT*q6tXN8GskM4BhRsQbJ|~7Gf0IAPX%=$Qux7Gw|vq3B`GN(s??s zJvPhE-MA&_Ow4%0an5bk|KGi$L z7p<`AE{>#WG%T{^3ImGUB0*W%s)LV0rICW~J?%tsbi))EODgD(A%c1SFQJcuW^4B+Zy_AF!-;@EMeU05i26SBQ9D_F6Qej zh7C*^b5n{dmr-OMwUWz+MPbZ7quxt)P++gU-~hr*;see0ggXF8lWY(rGm32YzlSwB zF6X+?CoXx*{8lEI(BJXHUNgXgXIh!$h#pKhErt`-fB{=R z5l>9#X>mMi7)t)(WC5*(F4w)nC`^W=zCS zuEf~cggfh-l$q6$C?%+iLjwfwkJ^JmNlC*abQx+jf8f~OO|!ue897@7Qh#hb~dTbd}h3@_<{a$$^JLNVs8^l?J>dk-(3-!le zLHcTkn1A}d{AggHA*BSYDR2AQ3x?-UJO+Vl(Xf5YuAyjSujZYqjw~m9c2qXo=#D~W zyFGNF>$!Ex%XBi5#vLCkxzpS>cbiHjV|elV7-I@?Y?+2X%`0+nGHJyg9IB0Z?8%EJ z@Ug8T66%2N>P?%VO$wT?VEpFe!^7EN9QqmuPDw5wZZMN11Q*dIr)0%u&1^hdZMA6N zaM1Ew?Gf4X*1ecU{Z<*N1(K-wtSew6+%-X4!U4TW${3ZafxbroJRG(oDq~7QNp8th zlMj5qu_U-+%h4VR>_qTpT1g?tFo}^}LmxT>e7d=lm?!de3Z@FuknO7+YOggF)2aI9 zcoFWVa8M@g)*&+@26;5@+m;>Yd8z`#?Gg$wXJ75reLo`4zUJi6pg$iE*FM8P8P^Q^<@jj># zix6mJG@EK-90hSQR@X&0HW-C%z`~eAv|hsEMi&!-sP1Rnp1Y;ZHYbuc>AYb8zTJ7( zrM@HK<*$S$3gzsO89H&(n5ZuzZUv?L(tu9l-H8>)FL)|4(F7`GOTg;rwzo4c*DCRsHD+$M-6!e6T_gN*@%=nUGZ1-{G! zpz)!!<#bE94V-i_3GrTdKdFr6hVEL&Yo(=-|NBqa_2WLNeNglfg8)ckbJDou%upDs z-ufLcJ6}1UuK+b}I-AYgtZQgld6 z7&G`n2=3BHY((504*AukK?(a0UB~n$f;4Oasl@_E~xr;fL?k%=!$!C zHTMvoNjrRbQS5k!#LMW?zoVm$Fmt$Gk|%;}@vv>VMm>|=1NEf)bY^zAuL!qdl4o{a zSW2$3x*oRpu=Oh*{~*i)3?%Y>-M;gO~% z=OH|HaTW#2FloKo={|+?Q@yV2@|fLXT%)FlUKUX3;gFILxaonTN1GE=J_~3pbwJl` zgPsSa3L_fI6#*-QE|MnwJ^Ru2?cu|_uV*(@#CuN!>U0*dx8K|kAMp=m2fJiAQ!fi% zKDfq^iPhWx6UZZx^Wg!sG)z^lkwKJ@@?>(rqsx1CjDyYYPN$504JxmmOXv}0BgTKe6wabI*zoMJ9{!q|+|5TQl3h^A?U6_{SswnCmsXUL0bb(wHF$=mJ`V&Nx=PW|;1W>8cFX{U6*F@7)}@z`SB2!S&`nBjdII{oo6XWr3-R^o=dI2g)Z@i7<@p*Uw^bN)0Ri{ty4IR)ZDbi!){=Ep9I{O+1kifo+9R{SEvb$;~k;vHnNlgc5ZEf|8F4lvR~o zcmG2$uB9qVlG7NvOVpIQ>6;^~#v2@@+;kozHPa@clweq&HYX|B3%V=%38b2 zI?h{zQb`?xDCFA;QJc{|(TDZNoq|RtGt8PJ^NIf(7Dz*G9a3#YIzd9hpA`uXCpBK!fy15Un_`PGi46zA`;rds`fFJ+#`H~?H(%gvHvjhXKj#Zc z0~E5@B99zYA=gan)QMV+-&##8NHkxvQ!dvETP^*6%SWHTGwzBe>|u|L8w?fX`pQ05 zffL*38_%kdl_&^`E(TAF#>7-R2S{aEY&&1&!XXI8^H;D5MD@IOO$fwYF=l@HFd7?@ zs%Dm~nb|DlRdAJ#xtfb9AGIW#fz`-k(Ni#V8)>eA{UKL9D4qJ^$Me!GaRStuRzR(l z6olfdX4QqZVIpU|I>=5ZjJZByLQ~bHi(KLj=`q({)6|f+MLv6D{gX$v61X=?ZxfDd# zy2Ua$D}22z>nt#(h8V~xi$fbg=6`UylYzY_cM0lN3yd;!25!dAZAE1uqnsj zwZP^h=_^XmmRBCht@2Ux;Pqq62S?!w_5};H(dg# zR{=oTc})=ULgc?;kkJjzv9ji4TRtG>D(#=+m&6Op5?57kLzAbmPXd&WMSgOV^`&uvYha%&NdO(W&79lh` zMyQU)jzi4~|?zY|88>%oH zm}oj6Vs5|-#MbpZ#cL z%K&4V`+R+^WKG~Spy2hX_5oOGxOYI-%9Ll$UZ10&8w~}y!B4lXBG8Yg8V|Z*Tvye( zsEcJd`IdBp%?l>vrY@~uyfu^Q-)pk8i=bpa-7NVFDNwoWB8AS3AjJ^|Y|!S&0+xM4 zem9d|Sh*EPydWgZ=82!Y*n=?0VL@osr_o{QaSgENtN}U(;7gMWk3mrPKB^F7oyQRy^&Y0kMFI#i#Ac$=>e>S!@2AFNANe=bvP!cBz$4g8w^2JlX2ae z^CM8a%%9X*l3>SCdpk>>MQGC=5lq!Yu2MBIy^~Ikm3^xlq%zv#({X0yrqFoH1^0h4 zt-5f}a9_Z}a>pq1jL%r#T6HNBIu~jB`6M&%0YucEJ?Z+jmSe*8OH3F%&%YG!`8lo;#PQWc0f$v3!AC-#Y`CGs9>=Q0r` zVl{I?r-b+~-d-z)feQ%ka6_QtPSBtnUU&BJE!Un+w<-I{2C)A8O?NE$Z`X8Q!ueJ0 z=AnOSjd@gL?ngSi?;;)c1&gnY@A52O3HXc8<2$)DIhVMe<|{D+94t*W`IMxmi^?=< z%;V?!!oa>ZM`t!2F}N>y8xp}F$hnsapCEc_a_X4i!EIDMzj0ewZam8_?~72AFeUUG zA0%9JYsFcb=_p>fgVMA_NT7)+{-`au*-Dm@I=72DO+)bDw3kx&znrzKnx{WcvyF9A3P6K8_N&A(; z9T_++l^HYB>X%5}^t`3dLTAP72)8(KG=r7PPiYgZ2I(3%Z%O9jm}gKulQ3jr`H$x> zP8k`Z9Xb4vsf2c!uMwuvim*}D6*LfIuPl$ryHi9R8#b@&`qsTKEdJdrXkuLI5-S&W zIGfna5@h>(Xd`FW|C!gD0nn)sH@05ny*3o)fwni2%qIrE7Yp&u>r2$CKb!RhYz#{* zm*@(&`Q%wAVzxwl=&1Ue2A}5nipoZ7_G2EC>%aoCdZMi(McSPmX#kWv!+3+J-;YxN zDIM9;qv+=aX5iG=jy*9Ec%2@(J7GDtim z7K)@7s*UK^=x_+!73Mxj;Nk#-CkBo67~k|@vmJ(|%&w+AO4G6#w80o-$|1FZ+hz}& z(Di2-L|RVQuOaJa^NERi8-sA;uzS@a_$2+M#SmeE!{Fm>*LV5(m6--R+W@Z13<3P@ zEWKGe=mPLlAg$}Pj%VuoL|$;49V+YXyy|XiRdSQ9wea(|gniP+C!P8nBOC${8{syA znNwaQZs$tDH7nmuzO+_G2p3L`6JL%nj_Q2=2W|sL7GKHiCLq;u9Aj|Ms6Zdr^m6#U zPxRd{3IbrrPeL*_=UrZxDvTSO(T9*udw|rzOmQU1rfq{J$B*l%*9JI{f~G!$JWM6k zMxL3sr2#x!$MgmixvA&3EEWWAeURG1BT(bB{slG}nz&`H$s;3?>O|5gNiT40hn8PK zTAh-t-g1SwOmo3ATakL*R;rLa+w!F0zWwT~?fQ#k0mizOzNRBrG zdNZVy1Y|??9X;|>Ij;;m@Qa9f^m7*LffJX5?nW~G@0OIy0yvmYC`w>tL|-+#DRRcJ zCjhcN&VRv{$H23EpVkk+?3AK_r3B@F!w>;rx(WzuRLrNL(#fUZ+Rra~I17McKN#sN z-;2K-QZhlu^yp6gR&3QkV|x!Tg>DST60(mP`N}N8SMUges@U4p49%?tmlQHv!{u~F z(f_qv4xRxvvFxmv{4UuqVAAE@%gEzXf9oBWAZNc_@eqq_*4#^?QrxX`AXal;S`>n} z?6OP;RJMwV=LMpR?SFYAaB5)ouxl zm%B#I->>&1%|p$vtT*9=5wc%$%T%4?&6Nfw(jJjFT7W=l;Q){C z(iOfcgKGHZ(ExNwK`iL|T6sPqT+7-e8co{K_=-Ebq?^K&ui11I(Sv(GV=_qCXa0p| z3cy*jvKW*1(sn``(odNJ(Kd)JN&KyWb9vT&JUZ6CNvTe0s1S#R@p4)z&0L zkpQK!styUZq-d*kGzdflC;6@1E$cl<;Bl{-D=)xt?tABL^KHtfp9Oq!MEiAxXAkEPicg9?|vuBFo%XPMHCux_{8e$*jknJ4>run+~qjzas9Xhp#4*lP=`N`tLY6;s-_>YpW;? z7a7FZfU7?3xt-4#{1;|~yy03EUTYlOzy3u@x^`=gFJJV!2VIOvsqp?U%yH^{4+$>f zOj#29kP{zTptpQ0y!-5u=phx4Fk}j@rJ&;RnU#UX4kWWgI@OdZ@x#K9^co!H6R3SeC^Nr(FS zb9ZCL_eIskb{X^#A+(%&m2z=+{RwR}Jk#yGZYax9Eop#v_ z*ckvsEBu&7G`h^Xp$SstjWP9yQYTg=XkZjzOhGy31e&GvYL_VU0PMc(Xsqml>w;<3 zXJ1)(yD_Drjxv|yKrnGKnGN3~r_P5^VlEN8!EXvYM+c-Dfdb6s;Rf^8-JP-c2!K$NiUsLA0m!@Mn3O9 zHi=bUZBP2D?UA4N&2?3WTVP#MMs(yzNWc zS;0T*MQXyVoOLr}KNr;$KkZ`R@QV21Qj9Zr?JwuPh@9RkR(ZBWh_C-+16Y#`8QgG` z3KpuF1OPy#n5k2ORP0*oyYuW&ekt@na1XY3)#gDs+BV0*1#T7l(sDx+j(oQv|I-;* zyVjEXjN8o}&t#cIk+E?Twd_+q{^A?y`O$;mk|VSfbeHoG}5@6+w*@ytkBKAqAOA;hFw+SRB-maZozBQa&Xs~cz8&0 zw&m=eIFxg+Y2?S3aJqM^*m?-CPG_L=I3R*52L%o44=;j=z2CO7Nkpn1WT zt1?TB1Tu1;_}l&PuPva6BzOc9q9A!T2VhL7$eKFMuq2pf{K zcfBs6bLLNIw4rSZu9NElF1Y2#SXSL*2m#zceZ-aQ3w*NP!tqna0K-quw-&F_%QUV;=$G zV98`sXZe3QY($MtY-+r~e{2UduyM+cK%9LniK82H%jKLGLb6{Q=8)hXE}@vB2L%Ss zTuzbTDZ}C#=fg$3#z^%YjpoTSuF%;Amj2PX-CvTo4OE5m^FBpbpsK18Gp!z*f7=HH zETQIS0>T`k+8WTRF<66zXlfZ*KF6DEGztrg0C%o^ub?l@?kYMo@ zd(H_`bmwh=N3pYmgj1ln$u4x(PvS3ipZNGXEn>fX$vpgBB-q_e4 zeIa&tFSm_=;Cj7HPX;HPu{u!(Nj;PI`pHk?rhyqiuDthC=S~ z>Vwi(P3cxjSA?jQ2}|bDroX#&H?I|hB#(gHn&gSQ zRGq(K)^P1Z2}p3~)Iy}^d;8tl-af0DRW(dP!tRrmn$4kHY4x%_j}e76GeuMdcH~OL z+c~j2qv9cmaz^Wfsju;ACt2cdiaN#G#QhiU+*kC2;OOR;RXWiv> zK6r-3-O#H0!U%uloE-k^u1LG7$VmW0;ri{+7kb_%GOJS^DvYoDov~DfBfAhTGCZ26 zNU5D&57wik!cYLv*-r{v^$eGosb=*11D`|}=O6q`eQ{9&_|LYJOrQQ<3$Z)YtvN#w zhxua|19iKzs&%&idVsC>;TxaLPhYGN4PEyfv8{IUhv~AmBvB-i z3eqB|Khm#?>E0JRQF*vFGZu*t;fSH!G*=$dL@;)^*PO#Ww+7-O@I8Qke5 zaPPq_DZ0vJSjqi*QB+T71jZO%_~%c|uyMTS6JFfO3XuO_^0rs~fTt~VkIJ3F0bS@{ z)g-GS1)-DKbnh1cU&d{uq!_lz_jo_6fDW=3~!J& z6CAN?e*$M6V^v?^U{57RPeetu?xl@OByQkUn88;(E4C{~XXDIaqAn3l0;BBUgVn1L z}c!)wb-V0_axdyfvNU+_h#Ymbnhn(^#wNfGFV;TrsoP{=xkctQ0QvYy-!?MN0kpSFcSBw49C0|4kQ zjw2JB`lBhOz9ysZi%0${~3j+?MT&E)j@JQz;hW!$#Dxott<| z+(wjULq>L<*$i)09vBQi0IYtVr46t=I(mL{cT!rx4F1Bxv{eXN7yf$%g0zU8nva{!EqR0~m)^slH`XU7Aynd1EUbs6Q0wJaUD?=W$P(q#XbK7NhdM6(h7Tu?5K3Z z{L+q_UKS1d{<=zfz+q&zA^xde8KR&f0#i^tf`-hs zpEgTJ0N1>mj3B|yWD|MGpF*i+HoDMMNALmou0rYc8JWPdS5yxO*>t!wUdtEVpzVQ{ zi^v82VSA6!9PiS=RVWHiyJFaWA&>U3URb;thLR9`OM|{33b`#NDJ=X9QBou&UY>W& z6~}lve*VfCc{?+gC7;19kn2KxZ}_Usu)b4?K~!UhU=M^Kr{@FLAN*Rr^M{45T`uwe zT*fuORz)rW_-9+t`cC2in~RlRzoz*|Zk6vXq4!{|V6moiwL3e*t7ITU!_brXWP8M{2@~Qm55}iJ`U`#*H z>$ylHeH-tzr$WW2@8jIOwlX>>6K$d$e!f^Y=>(Wa^lJ!?GKAKTaZDrSOCZsQ5}cZ$z^ZrK!*p&DOp6$~s5FN-R!LlS z(SST})V)Ln%_B{(Wo>H@PF_{E6nqN-C zD#ems?Jfa(V>9ZAuQvg!bWb^;sp zMs)K7g6qP>FTK;V>PmSvSG&m)6}}xq!NP=LoDxR)nG=FIJFpYTN18Sy=#Jq^pOKfu zh}@E7uoQg@t{qNbZ6h$F)hO7tz@o^Uq;Mfkh?v=esQo+-IS;Dk_5}uLXvhBF2St3< zcRPpA=|>E2uoflsZYc6hae6?sJZ<|sdRt?4KiwJGK zRgbg6-H5!n^Msesmmj-dpUJI6A-5jNTVZfnE``ZemI89*x7c3NXNw@o;4J3}0##h8 zJDFCGl5SP-`q4JwL%{?BUN5?I?&6K+39?yv3O5t(0?P{u z@JavJ`bKRj@dCm%_cr81TI#gcGz-0z)&gX@V%A9G!or%S1uOZ(GnYmz)S5&2=z5O( zR7m95{+!JbWGS|quEgTRJGPd**si{k(Kcy#b{8(-16;*F-?{SPNztIW@G=6yuh$P? zWlI80MwW5(-FpYwKaorfOh)~Vi@fW6n6a^zb^P6~kL+)7Ir<13wfQTav4%>>NLbo< z6MSXWcSEi(vh;f_EEyC$+QI7rw|61(3r(gP@ZmB#eEBqbZG$RgsF?i`;ZQHQ9n!bv zYQzT9?dk(fa9%Rr<3eRFVGC`Qvph1$YzB`q)ml!=B3MR@^c&S@r0`)@^;=GY z%+IO1zA{^2!=yJ_zAzsBszBzV2EL#C3gX7vS#+)H@D9|ufr1RetJ4efA(WOl=JfUh{^)!_HO??Kp#bd$|n6dt7j$(Bw zaLh)$i-KuFh9iU@8;}3(vZ6@OWc5N)7pt+8ot^Itb{^y1QGEh7oj$9P;>F z3pbB2a$w^tq1$Qc`Wk@Tu!M;_bav*1MlLc^#Xg@TTq8^tNS4_Dl}%t79Phyrf>^8> z3!M8>Z$3V@USaR1VZO#aq?+|*jJE(9V79L)?skxCewgK9I3XpY^_)JO{o97{0mtC? zvsN=F&>q(*YeID_lO{9Y2CGWOGqd95e8c>H#r{zs?5PqTkrVxTktP3cXEG39El>8X zC5|j?fy8IQT>)FHdvkuA_;*e@hUMX3rqwBHB91!P^4&QBs0+`?z+#S*Re))`^aRLy zObuS9L2_snILSt{)jz#)%{v#xN?JhHvthN$7=LX1smC0{3=U)!Hn`|J89t-SKi<^H zx&F%6!f^bph#}yYSrixKXVjsWT)<2jpXD`oU zc9cpEt4Dz%U26$~0sHfF!`iXr>kPNxg#d_*NfV3l82L%AF$%gt+<>!ln8VsoeUgFh zL}Vt{-4I;8c?a^E^r$_3WxqiPu*3-PN2y9{IZXd9Qs+8}$B^0C8X}3k(PxiLX>^96ccQqp6PO zrcd_I)D1OxP}1&;Z$jhV+PkbIrqq2#%>zfl{GCl@#txQ zrLv;u@nKYt`9c6qqva_prg(vH8ha}lzGj6Kx3MT-I^W!?*{5tYvuK3&Jaa2P4>qa? zN0l*7?NwRLq#y8d3B9Y`OEWN-dr0gYhb^iCD4;ko!6pq1+g3>b01$a7zAsi+prrZs zQs3|X;m3!vZ^YishAbl{>mXl|qDC+tG{*&xn0Q!yN-VYF_GzmY9fF5iE=s7 zhfKC~??+0$QXDDvv6zq575RBmtJkXASpr8q|Zlvj~;5>%tT9eP2IFq z$9x*lf_s26tUoWh$xk78iAGLfd$aT2G<6vEUV(RT*&Y zoc{=AEb?NQ%dF#`LvMU=p6HLY;S$q`03|@$zr?r{IDgFiA+_CJ8y2M6pW@PG(Q{Rh8 zDQ{wUI(OsVH~;rNUi>-eIut;+U@@M;L-Zj@BSJ+*10FkHvLO{WNzpXMQZ7!*5U=Z| zd?kpdxELJ?MQST-^T`F5%hBf4(fQ;uMWDcbE&Ti-<6T{zK4xoOS`74MXe5XC$YAbh z8-nX0s`~%{u!=AcnDK)XO^9UvCkb(61Ev-)H$z9^LTE~1OBZsd5Trjc!G(|7Y3__N z)xZDTo3mYJ_7HD6G@NU!%KltGLZ*a)gO#01RulBja$J={l=0*v6?04E#f&~2U|ujJ zKUZGqAgMfJf+W6nUMVtHR%DZ38&ZI+ zdw^zFXf#=hb^Ieyi9B}twFyK+N7tdgJRkz8R*hwA3N~u|(Z||Bwu!Y9= zL1*D^^be5=5H9-kr^CAX*?s*OyUt3NJ=E|UH)bV+>b3(y2crpLv8{}F^7@&mHxQ}{rLs{g=Nt~1@UI_ybZof|2@F3 z1*ui3h+Lpr;z-|U`3Oc%?z6-Z>9ui7BApBKqe>(PI&Vwt9+M$KN*Kg(Gsb%{t-*)3J|7q75*|LMT!JE0AQ`84%Ez z&-Ud=SaHe2I97zk_cPhyc+$a8w&jstO;tnoRo)ePlDBJED0APrYppUd11~TPd#rI@R?cp%*mHa&s(pU(?&woqU$rc9jYv3xKeMJy*Z=GPYzD(IQ4k#;vS z=BZ#E8M^*VgEP=Yxrk)1aPvgi5l5gHz9LkL*sC}I>C&J0#N7=8FOCnM>PDUDL$pr~ z1JHWI#EBKPJna7*hK3T0 zqEda4_K7M@0_#3j=61_3+g*`xoG8`!k2r1B+rOv^(sL?blYSjOt4KA$*duKx7mGi) z_6N5x@Z=7%Ook!+ zZB@wAAP(`5yfKtWEe>l0{nDt(RK!P)sFq@HR}45TD2Ytn8VaB8o`@m2MQ-ZD%cQM2VdCtpZSFC0`1!hgFY76; zlZ|NL!wGbf{f8Q>)b~fIdL)zntUU)Qw18A68cHQnnV!3up*G`PO!Ue0#$9YJh?R>S z?ZKT0X?$r#%hQcPQ841FTagE5#{P6M=#Xe8Ta|OoxaRG^WpymF=veBjHOcc_MVu7} z-$o*5k8pNIxT-M$usQdl$V3MQM3#JJ&sMlaIEWL{h>bXAkN04?dP_CDPUmh8Uve1i z-8!v};Xb`TlMAPUm}Dk&1rNyjeUk%JFjTPG*iKHCOmcos1B?JHE<4Uj)K16jc{3Rr zK~&n;sPA@-NPR6;=f0|ff7RAm8FoCHdKb7{XKjh4bJoHLg!DXmynhqhM30v_57d=7 za&A-W6kkO%(W&@_-OlyQSXUYH)!5BwiyWGqz)TtoUazHA7fbJ&IuOF7dP(`o_|sHb zEi4St09P%N1NC}y5(d4m;Eek~vp%P?GjR8DrtoD( zaHcD#LMFv=&fW$j<&0tjH%$%IbBq^M_9&XM*BRv-(@3`v9REkz`O(F)hvE*cvpQzh0y7oavXmn|zeFYuXhXQ?;$Sv@(BpacU`zpF3 z)7?8=veaHEyVTMtH)j3!vR3c~)j};T^hQa{6Zx{px`%y}=2A%MBuilj?1dcYDgWdd z5<(yEtoyIX(=msMzy=P-U3xv9eBFW*>F%~`eU%|2GlYrB9T+J_eKdNd&2iv=i4VEko$(9x{$;{{=DuKxVaKTcQP3G$ zC9U4nzsoRK=dUsL9&^iNsG?pg;NDR`5|*yvH@FGi#>i*K0a9}R)dP;vj3|AqIyY(9 zuf`lBh=Iir6pW$LX`GpaorAJz$)pr%d^srdIt>ggDH`hSCuTEHGT97{eAGPT<7ciP z@bZLm?uxlC&=z4V1XtBfu9>c6lwEs+VVa&vvwGb)-{vI zBtw$IbTRsT5|xCjzg)7nraXeyktQ*SO3#QFil-Tk`2eUk?C{VS)jB{XeZfXq@Fpu{ zV)B%10_eb9-*-Ei!SW|bS8hlyqOTu-wb`9mqK)?6*Of?OnxK*I_1pXN1Y+gkbfi^* zpq(N$5Cm`oMs8O)jaxe_q1R`yqoC)*^>O*ta2TpZKLEGN=WjCYO|p=!4Fp4J163V& zpv&WeMw^9&x`_$~#od%Yfxj&| zz#L2s-k^cADk(W-uy zRek;ME-LoEm1FwYNNF1GkaL(-`ELF|UO!f>nR=nqfblv;3?GsFNZlX~%W?VK>u=wD ze%t{pY45s~8uoapU>}2;E;+ha*C$}`h&KPG7Dl~@$N@L4Vd!BgHtft$-VBqLdt^5I zpkM_5%7WMlE(CTW90!8$Xsff7t!-Z_*_dsV(RYsYMNF?86B8=)NP0Mn^XRjpDX$=b zE#8%FQy&mzXZvqo1haGB4@?pDw>@+aX5XawWV%#%PjKz$s+ z!S&?qvBc&00hS()xuHLyl2-wkJAPgKzKo0ezv?|Uq z#ptD}7i^pa3?`~3{Ytq(MXBX#DLg&yH=Nm@U);b!+`T>K8MOC`zT5KN6nr8s_Ko%{ zA%E=luaH}IYslQnZ3zn=JRgL3u1j}2xjlD?=nhZD zPdX;{+tbi%twe+w>2dDO?G)W*O)U6oXg*oP>QW5cIUw&2bWuGm>sb)oSb7yct$2H)jOOq8<8swCRnF~^@t@7(f$JwtVh9<$4OD<-- zs4BA~m(FZBQlI0IZQZuJPj-vTE}Q9Zsw=^8`N9oE^~-}9N*}5sR_f4xi^fU!sB3tA zfUk5a0e*DgU7pJ>Y~=fi=xbEze^e|E98~$G~gJDinIK zXJcK}X~Vk``c$P0mxpK2F%eL?I$jZFZ#y$9sRYN_yAUc&i}FKnM}#&fA2jj10VQi^ zrC6a6sp`u|+fO&|OPqxB2J$L`I zXyY`YnT_>pn0?G@O32cis9slJ+w}gy_n+D@UCrMmxMpcOkajO`4~{WXwDTCwaFcZA z{CJx9NRECz zE#hR$wLh0eGfA8;$f+Osy9S7_T;x6xzQK$xdx0cd*~JjvMqUbO+LD6^w|53=sf`$l zk5a3FS84weFbrpE4oT^Zc9`pBZ}q`2z+jn2C@588RgVWQ-M`NrI}@SKj@?c#$N1S_ zw<3Fa#1GWw!Q2k%JirCuQ7d9LPocwretExD-2eQ?Pu$3}pnQixgO3uAnuCy^aMU&y z9o+e*Vi7OmcrH(7j)oxbH-1xw3kxEJPK12zfL_)c!HV? z<|CT|T24=Ay=7B!nInsYkX|5BqLx4f$?=mry67E>DvP*Lpo|uAcX?5MQ$t`_LziI!eL@I7+1zI1Gg^Qn z_to-_b9v74igQSJt(VI)(Zj=b)02M73P{$N5T^6#GZ+Tt6j(KLPelg5zOF&&4(?PJ zg|dUbLzV5*P0{fg|Dw8YHCj;3SG=_iz5MG8qO|Zft+{uj<}zO)^t!3<9)`Waz;Yo? zKr}#BK{qh=cRE#I*>vp&Gx`oGG)XJ{7osTC5gR#JRShIj*RY6?VFBy_RZag&$PbO* zR1#I~noPj(BL~t+MYhv;qu>8B7f!kR(i`K@cI+@VT$6HljX2P!A@Y~PUFz7QgRIN;Nd|8l;3`rO;2_S^RAU6eHPnFTqkW(DlY!%y5o4B~7i&N4$b^(|uT$bHd+DjT` zXv~GJY#$3P<>gw8b-$1gH}qvwwDXEy19G|`?oNTyNl*0O!GIrz-x96o5ck;0US_%z zgktHcltyYNX5Bh@iI^@@ZU6=D4i2pE?zCJ0H^+SI`rUbAJ*#E?zK2f9by!L(U6d|+ zVXW4P&%*>h7N=ImkoV_X^k^b%Ga31tuAoE%0p{x89DcQ>LKRUU-}c9l;byAH&RB?@ zVj0X-6cd^d9BF8hXTGElcahyrOfzioOHQe9RY}F~^%#_D%ml^eU4-_`@*Md>X$jnV zI24E&aUGl(`jGGz+*o8z|L%T65P~5&-wusP zkqkl}L7P7MT$(3t*5~@BO}m{7`R=05MVCyw-C-6R%_GtlrJ8}r#C!ZUg5+thwP!9c zrdlK+UuW2%YYjL9i-szb_aLB$hrQl|qidrpy*C?{XF6{;)I%pCp0u~-u{X z@`qr;JPT>5dHseaQlVEtq=lXpq$+ivyL!KwuKfAeZ-7 zGnj8!FM3v1yxT-;74pHc*-a_uKCpq*EF9YmTC41pwil$iXrpw58nA0ZC%TN&Ow*(& z-7BHDS1_?r*&=wz$`(dfSg8E*^tj9=j3i)I`g-{4{6^b;%Tm$zGEKWFq#||{ z`@0SU$b9kc%!fUG9wr4POEqg9Cfz?o#Ws_q6Cs{x6vDXOHj2m&Jz;Rkn~sTV8U=l7 zxW6f??~4D9ZFPz7xCuPA?`xRbv3 zpB;Lf|Dd`EZlJn!wW_$r z*7ix(Q#fN}7i*Y2mdvMh zhOu8mDsW=XW4u3DQBcd9s!Yo9u(Ghmt?w&yfX4i+CwwSvi3T}N?c*XEDfvpw?REBb zL!hH>9DNH^TDpS}!baZbSgC1-Tt1`jT~TEwF|7Xp?FjeCRz%aZq<`IV3W~eZ*d!XD zc)33>A}~4iYR(V3So^&m`apqi+=!)knLf@%^+v)2X~3`@5QQ+`6%KP>BUksV2LKF| zk1BJ3MDmpMBE#=kgeXLgh5flfjBLPXAm*ZQNQUh?wOW5iet*!}jmvj9Uxl!6;2zUk z0R5QzE+cD@6l{}DwE1(?|m)8+*!5$cW!j(;Ms5_S&0_q8sg5gvY^p8|f+mpw`Q+HbS}yyw(I%2BSwN z>^_C@K^PWY>VEqQD=2L)NoT=G)WoM#YzjADX#FZ}^n1ZeRbz9|dHWrfTlDxe1<;cH zw0Ch;4=~?5NMbu38zm@o5l*vbq$#M~%KZwa4SL`H8NVf+c4A10@lUyKgdWbv+F3;J z4^CiW=X&4KY(;gqBl%iSeg;^RBO0qJ%|Hm{&!OER)X~roUaplq?Xad)G(XKA21Lbl z9)u5(6B7&O+u-l-OX_abyfzr7yVijRz5uzv-5gCmiZP?xH6qNRoebb6a*b|E!6!1I zw^sG-;`UI!!0wv5A{ug%?aIU{BQzlkE`l7EjP8Uu)vC|N{#ImDWaxpndmTh{^_}T&*pEz+G3wJcItGttb7bNVLBH6Ia5a zhq5R3Rk~{=tw{l-rh?s6A{AKBbwakxe!0EN@BQexD98@=26z<(Rbr=xq5lPQ(2E1G>F-I_!6%PvC zc&^Fkv{WV6Oe<@@neqcuh^=idmw$;If5gwlTpS^3hw5r9hdX|P>!PT=0~!aB{wc9;UgdK zYXpM!A&y<=7IO}wfvN`Z3eps^p9Q6h-t2OPNwF75E|yG4;aHPc7J{;pL?v=&KFLPy zc4D^XWENw2^cZiBi7Y|L*4^vTs~&S>rOC9;b?wZHD%{g^mj+UDbU|;<|W}I1kZp zb+a)BM}U*A8%J3H@7^4Mb2;hC7BY&g271-z@!jR91b)rw|Y2X01o}hjVmS zcs=gKlmK*CUwMdp zv&|G*9y6ejtD~{o!sf95R)nxIsAu{4Y2`I`5w+#L5gbt+b_R7|fMbC63qjp=*c^DHkBGrYJiQCCmkAV^e zNU69osuDy^RvAu6YTbENcGbX$m|u-Nix9>p9aa#1xYE|hORh$Mc<6-~le?4)Trqxb zO9qIob>_e%LqI~Ua>NnBti@`pN75sTFOV2*9S(YjW(pACX<-A410GzGm37rOJMb#< z43%$zdqPcp6#kYG7(?n$L3iJ|<>G;=s_elFjXX>g=2^^*a9p|R78Gw{;^#e%9_Sj+ ztU(nY5LMab=0u)!AoLIeNNOo4-DhBaIrXQRus>iT4GfYwu$ZU2g!w!iBH*}sL4Use zo_(0KWMY@xGlb9E)|k;Dw4T!9tSnx|7Ew^Iii|i&=;XrGf8<8T(OF>3HO-YE2XAWT z`+0A$How@~pe|TNHwNXT6 zrS|Tb?2kTqJZzW8m5UH1kM1iW^gPa*Ex%H{s|*(Nk!fo$q#=Q4J{C^9#6QcN9JX4< z%D!n4L6D|)7F79ZyA<@9C)uTvdx_eg!ahkdhs1AfG6HVSeB*Jhy>FeBl_jt_rVwK5 zggH;tRV!VU8?%U;@Jj!A=PT|(vkYR;G>v90-&9kX(L=ubtMwzmXH#O^(s6$D@>?K7 z`;(@~Mmr_JRN>txj>i7|&Fd{~Rgk>+KWV?&{}%7Zi`V=n*g%2epZp#br)-Oo8tk3C z4=3}HeA%t)C5M!K>P2}@-KV#4MPRQi;{CZS{r1b}HX82@C}_WuTkta&?-e|Hn|T>4L> zMPw%}#>m^an{b~at9V%#)^SW$S1F&Lwt5g!Xy&j9#k|T4Ob1RVL$0-XQbI2yHU{Wo zQqbLwt60>;KgYq2ZH-_k@h36pA*T(qY)EqUehc=2FW|yfs>`%s++J+(ioh!{qM8qQ zJ?KSz0@ZST{p|z!0274@p`Ao?2S!-UvTUkrEvI?@upv43Z?r7@b+qz-Xj{BMZcd_z z{Rp8Dk2w~Oy~CT>?<_RUgY*z2^Z#16(P2FZr(WUB+=x4<$-z?ZDJ=88w!^MXxp(FT zCk37_oNx?&UIpI(b5m<_sy9HpR;W*H2i40H!F-vG7yJu$+eKl4Ap=Jj$mB$ftdxvq zVk=E4)zGhOWsX9>`;?3oKd_l-rKSn=JK4xwYx@Ujh^?^Yytsg62oey|1SBteb!jhn zkoKZNk5gYt(pjNwkjl40d=ZZ$I(36=oLJJ2U73*1Vt$w;S1Y}QQ_X8S-JWOkz4L*y zV{rVVvmo_3GpvSOcHfU{}H0q8xDota*-H90NznkXm#X z9ocK|=#7kjV~N+tYg?9}cITiWXt@7UB;$Tg8g&*&@y zEasc9DQ`oEBHg2SBBot8VI~5+2B{ZS*}%yjt6YoPUt{mxh%B+gBxo zdvtsbpkTcb^xGC)yqYSc*IytyqvJ7TE^9a_m}Nu1Zd%rqgTW2lDL~Ra&}eTgUb$1q z^XI1Mx~P=|hnr)(cx7eW0|`_~-Y&QkvoxLE7syafZZK>)b~ZS3>B@|Cg0?lzthDN-YC2* z3VnGF0V;(ABfjB^ourp)J{I5kqYf3kJEyr2MVbL7P}`$4D&hXA2MA?!gMZT2gUNm` zZ|gUSMDA)6O#sJAj?hkGZ8PX?Cv+nfM`yTy0+;_wAqflo8&-D%NUoE8A`-K^En);owYWoEgJoS-L@a5t)2;*@e7sG1it?PaLMedZc28p(PN!g zPzg@^f76pWRiiGtB*MlCT0#5M&lTJ?=K&W>MmqCQX(dK%Fd90%0{6+QK&ikWJK~~V zUd~;(jh%LnVBE8k%vp)VXLXxX!AE@N{Ltfz6H}p(qR`Srk?KP5ui7FBM@EZ`;l~Dw zzGuND_z#X;dClhqLYVrm(lSf5uuCR|*A7-+Y4BMQYx7?l1Z(RGgC=<9M@OzMm=#|- zyZ!pA47R|%Hg9#8`OH*M{=Qyb^qrHX@ER`YKGWj>@iIXb z6Wr>@1(IJ-&~!SopY1K?ZV9o^xo3jzD{4MlnY>XM>(J_kL37iAErWvuCRDc=gTWZQ zy)RXXu8akL;ZQ2!dCYHM{Q{vRZ?n?afKDP8RDYS@xRs!v)-Gl8e<=ssHK?P$d*Iml zjU!`RYB^;SQ}Qq^J07lRQ&^!mxAB4Fmdi*@(u*0^FK8sq;{cX@XZ;lYwef};lQ)+F zyP}v^#vlYzmgW#3psEaiF9DhqPo(S|OvSZ)ZJn_|nJWV4qKJR4t&p5l41Nt1mT zLlL8Jb9+Y^${qW5oBiwaqEnIgEi`RA>&1EkFrv0S9oJK9E;ai(%-`*X3;h)?*$#xqg0kGE)Kz3HbAlsm{*B6K* z-9uOF8B_z92XRD#cdv= zlGkk!xCRWayD1?V;(M{|6bhph_(TotHR<+XsO`dtnNyY%pZ%vsvn~k2`+3f+d2Ki{ z7x#~W0_~}e#( zrO1F$H3W2dYv0(mC3nR63_#y7i>K$;c}N}vKN-Jj+wfZj@Fe|%pFqPC3~9)!|1%K; zx=g1dr3F;}y4Lab?-d8Q_y8yX}nD1>UY-8o?NkVylcV4y+6=bjdrV@a*6TYrs6 zUd-`Y0ffL8Z1C{_)BFDKK)vhh-C`+kKJ<5X>OpJAZjWb{il~c_s_ly0uNr< z444?3_a35yhZG#8fHT^9k;)LZ>strC)O!#(s4fHQDDCh(WYc%e8nfTyxQI;(lPr5? z`J5|0t@7WiBJPuRrnRlQ)ownJQcF#zNcjaee(s_c@u_dp%>+3qw(VjgZe^^xn7(n8 zCaf|pwvpg)t)aN!9uXicyGeeKig}Wd<_}Coi0FS+<8_ld!5B3$45Nw;X7Xia1j;i% zQys`}ZzB7A;|A65jdv(+oOar1EwJpIB8KCOA(J{G_RZvr@D8~&{+Q-QIw=jqWzRDM z&{O9SYqc=ud}HubsH$LTnCZ*vD5Qs3p`reB44xI5CK#6I>-lQ#F}GM$vJ!1&dF9*6 zq2PMnB+RmD~DpEMGWKh{-y(1kgwjvmC;K~gI~_`#~wC*{mM6Cz8AQHN1OoSZfp8H|WL|I2#RTuPX+)=~Zof=_;UmpT_aU$5lo9c}20;sq#y8Y@kJy1I{JP#!*20zN z`^5$QDo=7k04QLl1@jpQZ89KovL<0sWbj4A>p-|Pj%YWzqj3(h0>W=>g8E?L=~+nF zNT9FenW7C1j-7085>Qwu@>Qc+qKUxM-nlXiZEX5Ig_2n)t*HILBbsPgub%02?y zDr;MdF$7$!LN^7EIk!At*E{PVI_{!j6GUR@jM2rZ#lK)$>WzB4oh3wUDRcfT0bMz1 zZ5Tbb04x0-n%kOMTdUWua`g9V%77K~kx}G_80dKcC|G_e@5VvEtIV#22{=w7I1I_alhcaZV^7jT0t^i%L??AWADvx=g1$p-X2DFG^J%lS3a+d;PS` zQZFhm1>j9xxJog5qrOYi3b*TIfGd#`jrc^G0fK83it>rdIGYZVgR*Zgxs*9M;2CJa zWd_Gn?0Sh1xsIa|2X{QUX}%J7f9f_MM9mn_lN(+ip4gjsd_X{~`CTXw*N4%h-0BVB z9bKc$FTmw@tAe|t1KH)!>I@p)BHn=IP_@LK2u4kb)HfKd!S=nwjHKA>-U>S`0TnnL`mqIdsWKO`OvaIcDJWGqfa3Jkk80AWL${8c>Y4yHIMy~N{ zXtC%~rE!_PW!0^hGIvl@ePq6i_#HaPsOTNGpK`#2_CA=FRp3hx=Kp0Jk|^@6&TBhE zH?&yCoX;O8AV$rXaKcskD(%Z=&Ui(!%GH0cD&4sZ?33ddWX?+jk<5uX=8EW=OQvUZ zeyC)x*F={Xvi~vY+=7wJ#7_LTTagjjq>?l0;+@C()OHi2!fA&I_VtMW4tbNr1QA%z?8)j?7pv-~^DYvNiUE9i`!!Eoe4+80VKV4y} zB6==qxq#>AJ(ySOEyqxiHK81bIHD>$J^73& z)9UVwW`nrniHu@_!9OG&E8&|=iIq1Ux^ExB=9vh`FE(mNMZRT1yCjcpY)Oit>u~q8 zOb;|j5`)j+qlR!lHlM!kKGF3Dz;*y<+q|3S;X;n>wPfhDyC8}y*U9s51iVo>8Aerw zWK6Ima(KSf&6787h?D=Ll2ML`p+cE{iO1UgG^ar7<4rZ#hNGAFiH$ptw=FjISBCJT zyELQzTa8s$;2*DyqH9lh%hUKtcyqyF7L9HjK!(Q07Slb4T4=N#d5ibrVQ@JyonZ~@ zO=$-}>rJ!=)0Bv2C&V*X3^E6MRtj*#_rXYq>#zu=pM5v7kag`8#;f0mL3#%)p}o6i zy{sQN56)()5jW(OJDs&oIL-=OyfO*8o~aUQZFo={zO8*wIo$6hxHdePN5AJ2(s?5R z367VM{;up8mzMuIA(7+1^<5T$o$k~Zcc)9dpa&oI09Iz|6E2OA2T~&2yJLK^Zl{*Bow50jiP|$kS`x@+a#2g#k`b3HLgwR;6STpCaXCaB# ze#@waa1(CMF^Lv(NjixwSi6|AtEkMiL!9zx>6KLx{k^{1yS}4i_(N*~_7U7@Z_DD0 zgC)e{ObYJpUi$Gpsg_;`MDoRR;!2x*)Yy%S}^)B=dsdxB)lDpEkuh3{nY5KC& z>FEAxE4mYOD|(V^K*-v`kVRC4;)db!(aD6iWRcaje}at6qoAmcinmNJhoD z=^RXJ1nn4I89?u8PUilZxT#hNQ(L0a@yHQ>V;txe0v2pI6vcy5koF$(CvT~pgliqc zOT*%cI`qF@l}B_Je1qHz+!e*cu3Ifu-az|=@69Twk z0t7dV2nNw;o%lW`+$(z`*kq*p-LDi&Xh;0QS$;wft#w!(}u!LO`-(9=?; zE8!#yjhGrHjFdX>`6CPt5=_Xuy++{H?%H)#Vzc-;`Vv6}Q3bPx z3zbN~5OKlBuqx-ErKHhBMwIJk{@Ww;GlB`M%r*{|MCgz;NakJ#Kv2jZc#JpxtEXVy zhVnyK7R1+q)zs@r73+JT`}g@<+r!x#(veBGa9{|NG`q+nmKo}qkCgqDU*s)a@2cFit6CaoiV#EG^4-gBU zo;7tcFqX=qAnyQr5CYEpb-7)2t~h*i>Koe=cKN%cLpt+zVHZt;oHqFhj;Teb;YbmYQIgv6bVFLawif<0B+83_Wxq74Y2ot8|KPAKOoe&#em&?wSrlFXp-N!>h=$V_ z1m2jqMsi7`J~U_-?oYiW_~R=I3)6|&%xXqmo$~rggvb^+o5%vi_&}IiQG5%zB_%Nn z+0qjbCA)JIESE#N7p|MDQ%l3B;^ypX;~bU3DNR+P6TsUM+0;$?Cxv&9A18UhT3jjj zHQ=E7vsakUFgDh1_B@D|H_EfTYuHS^9*wvJK~zzi=A<=;V)EW5QFGdF4HE5uX8X|W z_J#>E6xtB!Tj_+1v{d-`&(O(9a&FyvI+kx55C12SGkvi=RR?l-2lnfZbKy=EZMYt| zWhB-%Ko506pbG~vK`cX*LPpaRy@E|9ogC}Drm#Qo=Z4yL`V%Dwl4M)7r4d@Jm6AOk zKfK#H1eCR@6y&&N(LNca6ZmU$G?@yXfMi$SdG?hAU+#h+oH#DKpqC1N=(Fw}SOsJv zfvG2z6Fdhc36U%))mGkqH7Gq`gYeZVPwkmf5cY3REAbKi(4~+aLHhlt5=F3v_FW1C zZmO$j$O~4-<+4Ywj+Xk#4Ch$&bTc`00-mygRu;qJ#WGT3Hl!G8on9na zN0|ku>%5XLcQ{6t@N}FbVMkpHI|aJ6RfFCISa=u^qS^`Ao3Eq_@!zLtb49KSL@Ab! zuVD`+CU1SjSq@NZ2`n5!8NN3S4V-+?Rws8%(~;Xq^8WYADAU?{+E0?Hix$2U)h#W)$ zWu)r7XhRKNG3{PJ2yQpzP8#=zkNh%!1Ke9^LxfyarzqM`F|s zP**rtv$yvieTo_sBi}YU1kGt1xeai|w;Um|f!>*YEE$=4iF;G;2eZst?`1Y)jS-t` zQbs0kYbpItHu;r**(`&nwqNaH$cAW+48U5dg9}5fuNQm(#D#785?`gTW;_1fg9hBI z0+Dt`$^MgZ@jp*iqlP?jgh(V1~sOzL9WcRoy8=EX~io0qeq%dcNZjkz z&h)J3%{cFf)KvQzbS7EaD3Z(+Hby^6h0@RvDRytP0y2dO9V%<6W3cz%!Hw>W#m>ic z9sXr7p&)%$2j82K)w4*?40q4bhfZbRYu213n@D2Am+Wlwd5D?%N%8Jf3P4Z8kc@D6 z`6)e{7rrZ(tS%MdWc99iVW_Hkf%!ovyL`$3>PlZtp)T4BJ?B}ESONYJRCort(2iMK z^Bx{|O24%^VnS!dB_i&(Rks*f4)DHMC_JwfvJ&~tT_NfiWd5c$Y(QfL}JJjrsT$u7z14ohuaeQJB! z5S&Osvf#U-C$20QjJg;TX9334=M3A{%UOM+Pktm5O&XcJ;@+i;Qu>lXG90JLTZh85 zFTz&k$qcDva9d)qaAEr0ZYFqyIbUS*O`ESs$NhuAbj~AgDHr zt{b?!YfOYWRCJ2-_8U)d5C;N8NdU8CrT{Wy_{v2?4Wk4Goh8^`fQ~QNhlR#vy=7sN zaJ8&8>Mo<$M*P*|s@$8-1aIWRgBWu}rTC0$JS#LbQz4XV#EApodC^t7K-Rxa?e~MR z0dvgHA6++BRZGXrP{(t!J8e!H>CvvFr`r z>?$*X+ds#DU(qPWAwe*&04Sc1(}1G>)=kNk^F_aY0&;EWkavP5rM^wmoQ(q*bIO zpYR|AfB5|?g&rF$)U1&ylbx?u))o5wEEZ--NTkwS>#p$;RaT3Han?RHWa;{Fvrno` zgFF0ftFJ84ra|}?0~QlJ%d!{zojP#aNH7$#}7-B4bXQ5U$t;@Bhg<@ATepj9YO)tb7O@mnLoH-#)3? zKxf0evDayS;c7e7n!SbNS_A&St(yJO9s$HAd5sH~5G4N$6tm7j@9R*cfu;FiY-{vp zr9HuRaSTPz`xu$mmIHd%E$!~-brd^YS{T6J66mGuMNCxKR!9kp=!o#%S{;&B+CKBVa$<$k z1B)$b{gPmGOeXt4J{hKXA9FRx4NyHYngq|dvLA#+3`mH_H=a$-~D~h zguVqoN9A$DNCu6k=!*`v-9)DY1D{C9J?CNtf-Je}PK?+1Sa1_gC8p;ui|+<-gL?u{ z`IiZamXckW3k-w#=FYYsL!G2$gLw9+6n0Lxk>29LK6=9{nw8yGe0+d_xC=}sI!?ZJ zchK2il`WE?laVG0!9a~ELD>sSCgIbEKGUbR|E1(ZnyO2B2o;X7HX<27kCCL70k*?NQPn6{le4EP>P#Zn?9 z-zv_iTz0Lq)Gv*g@BzJ2`jXN_&-q&F4)gVGxo3XeIN+iD19WDjHXI2wQJ)BXF2O{m z2I?v^f{TuJjnwT>omV&YacWzdRV)D_#2wV)i{?PU4DIHCyq^h3$)SlukOD!O6-^>U zL$zrmuDZ&0fk`eK+{#>I0_Y3IVM19JIA0vG6W`qPbO2(hiL)8tRSPm{<#(Lt1`vSt zzKuY=N&L&~?M^urSA#Lp(nvBuZCSKBdLlnSnfaQi7?xMZ36mIfj0F78tarWL14%-p4C4iy zo|bx=&7-O4J}z$A4{r(H>g^VT6wmGcQSnbkk|<=by!%VIAEz=Cu(Lu=BPLE6pxoLsDhb8zkv1J&)ffa~XBZ+Fb= zX>zkykT!8~pM;6lkiayr#0??E+gDRj|vVRMI&NSjzH*<2mEc|mKd1Fo#M+?|* z=*cTJ%=p)^VCii8h@iy}XOWn%Wloa3SF8QtdU*dj^zz_9n}9N3{oVAFd$`DIlxwJb z;=P$aKgH!zkS&ktT&$=Hhk|KEbno*Y6n)rG`~y7a|6kJ_q1@1&1M%1BsnljCa4P2E zubVARIh~LM0_YW z{Ui1@mCOl;>b@zfpuV<@hJstxWZxwsXtOkWc|^-by`bV7cY)+k6+rc54O7=xmDZjJ zH>u*qcKH={eH+L<&4NB*x383bl7DLR@O4roBNP|UGurzzp)7`W83nWCU2))L_>v0 zr$Y-9Z;B87K^UZw>jLHpA4^JGk*O?Ko47%ABA;A_2aXq#!Pa!CG9_^pqsJQ08bh^+ zNmd9Wh($$UGizO<;b{dj^wwOQAKCb`qjb08e8nO&bGN4OK!RqC*@YIJ|DOBC^YIoM zj#b2`gN}9^HI!DQjCG5U^F#}JCk#=oY z*86MEG>mi$$F%h%Mss}pVY0hvNH#Fx1f-KJ3^ls)u`4BZ3$!*8ej0uA(5!r{MXL49 zKqIZaa(~HZff3!>_QSEVW9Nx&ceHf+to+Bpi;ozSovhK-=H&Go;XRMtg@5*yIyQmV zW($@+7`1ywUoCaZ{1}A%GUbq@%C{zFG!-pIQ|(BjbLGknQ0#ATL5y9h`DKBb{l!2| zEb6NryEb_LL%!Ebh#40|F1VT3xw9+u`wZQ`m9GCFPtp8M7fyF!A$T}hScb#wG96Ys zVBeda@A?bE5zv+*z+eIKAv#dLe*X&M5Y|>moKjfgnu^l-V(My{AB=hE_`jh{pt4_l z#J9}Jmo`wMbM#;O!PtHutZ~bst;z9eycQfP#6A9yq(PSsLo-} zlldXQeX>0xojn=p23b7|`5#2tI3*5N z+kx*?vFLC!1$`Su)TO0Ze{Zmu)XP*e%H%kObS?IL8LnMRpXBCcMQfFY4LGvJ<~EcFAf>^FhAfV@4IBR$fET;3v99Hon1CIsV8Lg^Pl zK~rw9;p`ZaEPrKP#8xK%iq!!jM3nB2mjkruhf~_k)cE(AH0vcdmwh=b17d9UfBlQ3 z?Whpg{)NZO+3?OJ)q6^zq*5J~$CI7sc}|YhcbQms0GgPPSI>4YS%(2qQo%^IZ8unk zH2`-QTX0$&E2dOeDXfTxkx(n>z$iAj%iYrkufEiQ#%>SfIBiBLWKVe)HB!sef{mjg z!w9ygjRmn-%_uMY|C#bSr(o$O`pRB+EazA7Jl9B$DbpL+SuBDcYz5wRzER4Umb7_4 zf{&06pNd4$k{nfq)s4Q>suM_r)<5QeBl=iYK-H$vZjh)08TiLYSB8#>AQ# zBGthDVxnGcWgc@>n7DUyh45S*`{f!JL1>hO`!!2>H;B-Ou)=?P2mfOWkM|jKekx+e z9eg>W*0rIm(Ll?1k76&qSHURop`dr57GG$Zk8c~@8noTt$RDpgx#^z0mDR`;48%w> zf?841Mw0Af;%*6-617&wY>gE%u{69rN1elfJJrK?5tz_^slF-BK+tkHk9#{CZTn;z z>_VS4=S?S;5qliL*-QEQ$5Ebxv!GF$0<$7CZ;K01Qojb$ zs=UvZZp!pA3^|6SfFP(=R>@H6nPnPh5lIQaV69q=11jYEZ@r$#z9S1qWC0MIRvx#j z5E@8h`yco!rmF~k6U?F27Uak1TBn)r;5|oqJJch=jvcmX33SusWAcX64KBSJ8Z&;J zPBs|2)d}^v!eE~>s~?9;;Bd!cPP9P3^pXrUAJhem9b_3Dk2%A_$3ZqY8SzncEU%YP zg>j`79WO3RsFz2D?tmrfB*hHqDYFFVfPZR_`&c>vwA_=<;n{VQZ_sN=BT*iZ5f?fb zu|GjLz*qVnaf+d1o(R(HU7pWMtx92iWF5rwMcPk&G1TfOtT^0sf7BMQ+jsmDjj1O$ zB(pdO8DrZ$`qs)0%IXLGnxhZ<70N?(c3iL|;0xXCKk3C-v6@RG{DI{6i;8~s_fzh# z;k61!TaaHuu!2IC@s0}0}SkXxH62+RO}zBI3{+_pWY2H zRRH{JzA``y56s-=tW!*Lh0OBAwAj9|3XEVWi%$JY%kf&VM!ZSU2u^_Znive7G%1Jb zn5sLq3kk5##dB5i499x{l$3y3+iNgKen zoN~xa6v1D$)ckMQAzB}0NewTeiK@K&WJl`GW_m(L;z-P>Tc0wSWz@%z4H(c4(|jYk+Vm7M&tM>z7?o z!VRW`HtdF8Qd@fOS1pV(vVOPo2P{Tm)jobvgvP@nq=ebS15j0?(kZFQ`3O}>LNM1K z&0(dTMjR^Fa<3s|f2uJlyK}-g6ku{8KS)BD4*yO2?uTI1-PC_pa-~$ysgRDS;&(}S zvdsbp&SM;;lYOj@HCgxC2PRb!N&xtn^cLS*q(;%Ex1bKmH1vwTgdH%3P(V|y4C}S5 z)pro)K$H)?6zs~23h_RyDZ3S@pmCTeYzXeCSbia}= zd+h%$diT*`X6ySI;*s<`mRzV9_~vh^OqsH_=8pYmKg{5m}X35)D9OK{2ZzD z`(|-ao=Uz!Cit5wCd5lPt3v|*O#`x5JmqmEy&tqU_KiUU?9FO9q{Cnqg6eqi&HIHk z5Ns-vy*a@HUfJm~BvT}_P6Hqi44E`%%%X%#)xb5rN~+X>Vja-wTCko!7+!rEAKow> zILpsInJ!*1w#7asDB5)x?{z$2MPm;w2?BA}A&(5}3od1zy8A=jX!EkdQC&B!5k{_L zBCT9jEwDW72QP!w>kloJ!j?pLM=yq54MVs-j3#K#cCwy++K)LLz(lM-^mdi6Ys}p@ z?Dalrc?x@;>R_Cja5yEgF)hV)x8%Fw0ZH0O!?ak0i)J+P1G*YWsZ&cWFDm6G%@J?2 zV0uRUOKWY`Ufn+&@xqr+ddhrGJ9(Ll?GYrXD1~W7m@3x{Qqc%dZJ~;(I{PYX(P zhS5xUcUW=c6l<*BferlJ?nVC0TSIKKsAi|Fe4pq~G}qI-rDh!KCch?KMdx6W#U=@X zG8b%EUhx7^5(-FN2gp(2nGGX}?5_{-Q2TX=H_}{Uj?Ty5e86J;>_nZ8JjF8PC6r;F z1x|ver}wKgbzmnUetctCvVyvl5X^XORlEl$oXZ%O4oId(|@0)rT_fd;@1LBRYO zWX)~YOyg8oG>Z`^l%K6a4{Zl?{SO~e$gUn1!!W8{Gda1Tvm?V}#7iLJQEu3pT2`36 zEnxu~C+ItnZS(8sfMFaLD4POMLbjbc)BFAeEOA5ROegc$WeN7$@>v0!C95-wS|fN+ zc4bX|Ms??GA0|})$Hf|ZJ?FkIC^~ftUjz%AaAmEShFVT`CQV$YqDzEM7{ zu9B8hO$?@>J9X|O0!WMzs|3QlVU9@>PxgX;K%??b%?!t4Q&uu*Y+;WQq@ zCOrx^g9}FLm&V%9Kz^SzoseQ^V)4cJ+}otSHF*@r`?U8FYOO8oobeSrturG|Q6bH?;g z8lk&@yGbJY#ygoC0T0Y{#Re-+esN#f(*$zI&V~_5f&`sQIWDc#F0VrcPRHMk0HGez znEd|f&9~xQojOy;&jPW)IFl-Qg9&AIC#)_136|-iRdsdC4S?7;d%+-1@2|c0$?>!< zziu2GRs35}dU13+6+!{8&Bj1_2h@%~!A}w_S6FD_f>j+zWz>CEnu&14!4#%@0Y78~ z%8;~_(CvEs>SS8yx)&ms{ufXAj}kZOJGjQ?=e zE3k*JyNg8#d(1$@C|QWUIZf%HFB~rmhWQduMzRKdm}jyQ_eU@DVMjf;8E6>6QZn=i zJqz#Knj>+>?kZgjUNoMkW`~>{*!L73S9-Ybi@YTH{0&SUFp@Q^aXwK76H{zmjG^o8 z6I=lpoHrVw-cDK5j9S;NDEOJ8(X7|>cgmyUvGosC|G(=$zj%AThj0kf{gFbIUq-be z4du#gM^=Cd0cuiO)WpuxG)eLN@5);?p*1v;U__nrcGeo{jJ?R6Na0w7@OalK+c-7F z3v4;rk;Vmw@2^So5{f?XK-(My7-O|NAO>u4Y1jLDl}RY57!j=V%E`K#xA{ERA|4c`zD5(F zaHl$St_>IM|-^*=dvkNpl3ws_|2pRximh z&t9q+!k!W~pOuZCJ(=1Bfwts%I0Br$F9YMa4)i_SXpSWH(@L`_skX%6L0p z#)O)~^*OTHuzkgKzjNWk?7U+mIni!=6hc{+ud6lWAGKmkrrk6Yo9iwv1YMa&UaT{C z@r^P!R%Y*aHc&WAghH`O-vzAtC1u`=k&}9s*_a$hK4QmO$WvzyDNjUOE!qIaOT#tO zCg(T^OgBJ+Ld$F+;GcC8=@ffW1v@;GOflcD(nFH_K4FG*1{C$<%*3u$9q;wfU)Y;@ z`_W1_UioD<wC*}BmP`NPGX9}wA(0?PJ;IOB|627T&!?z3hFJ{hv$P zXd4?I=ngRO*enGZZCE``tDvu_%f6u#9@6?kV9w7OrWf*aSU=l5Zo)Q&qEF96udlWs zM8`B5wl?CWQWw3yq3p3JZil=uy~Rx300Z#O>~&j$1?l8AHk8)|s>IpBl+CGgGXw%D5v01mL7e7-`9()1KV z?+1lDQm4()9+e;=X(6?^|DU#1Xrs9w;~Q)>DR0<}_}`JIDJ}NMt8}esM=V?T#z#*J z`AH2-)Gb;5=?@5s$a^K1#aH(GIYEUX3C0o{=_7MKJM+5lZhXAl>-Z~FJXf+OU{t=t zn3w*5c0{^B;2^cY{GuUlJ=Ht|;rz8YMN+TxffsIi3+1eAWP;t;=FKJyWV-ExQnpj# ztsUA>3Gp~#g;NO(G_(>N5cVN6LT=%EyynFtz8I+ab2uo)7|0r<>SftLSZclQLlW^(iEDV<7*)h_ zz|&$5Twa@W(9q+&1t8IpC&0NCZMW(q&h-#5S1p~sD~y(w4gbM*{iR-dCs1BD3P$=B zfCV1fa42kTPjrXhO(!j+uZeOTHBM_HpU3XK9phrO*;@OhEr)d7Ex#_l%cY<@YXVx% zHPLCK-7$m2=B22Du%OWm-sHoI?T|_WPfj$E`7J zqZj`1uG`R&$^IGGRC2}xQMe3idW?T){}Q!vSYqMK_kflJrXc z;0yNh0beE#P-;6sB|3mLp50iwDEW;0N3qy>^OyKID-pYka<+hYiX)cb^ZtOCu3`M4 zLh9`%H_Vy*e(QLi=jv74#z9ef3S$LQQ8xLwzFK&1Zak*tMLX_^G1z#|tEni}w;(NR zgtXE_6MPQfdC9snX`-|U1aM`Jbj#Q|b|CPws^-)@g}y@#Qlc1f zSoH6D%^<@7l}Wo6S@czWE4&`AB*51?s)$qT(Bbp zuxO+C^rP~yd&XNE74&hbFzyZofuaV2ZD9F$)#=FW<2_J&9B^*biw)FR#JjNgJTfOF zqm_s+$5gnbTU+TB4L3mK(TwO1@lrRs)iJT}*67_q%lAJD5#k_}VnvT=rlnTb=ba5VY(4ZMyt zL-Y}P*?8Nk5C%Fji&P5<18Hg#GvAB_No?#2`xXn>Mbj!@Rh;3G$~Bs?sy71M zKVUG4dCql#hjdhK*{(v#83b@CkcZ1N8(6?gQHtyIA9bdYmQ{!HwE!KsP<`cY^1Mfe z53THy$V@V%a8Yo@3IE0!LHqN*^sTooL)DvQ>}_xgJkg}ppE;HKI8eIvcExw(S7)~$ zmlF_@7L%Kz@}89Qg6XXFFZg-IAyooR6*XIBK@<8yT5yd1qctw{{W{d7D$Zipz!TQIH`H9uv_v&hy2%WfZsDYh^i5z z!&DO!^fqG)WcukMiCpF$NXP)YS{r-c`sP?C`e5a4MjonW)Pge-)jXTh^ zKVw0~GX~j!h{?UQ2hmnXz-FTFdn@gb{cDOE@jsmj{Z-wMbqb$@XmH!E$0SQ<-jGA9 zJO4alSf&Xn_tamASp@S61sMM&3?Vn$StT`I2Dj@q*h8=~d!TQZL=~PI^RAmZN(dpc zpwJ$w;-=J8Gqgtn^;8cuv%IhnqYqTTLXFqyLGZ^&>4}`djGF3;nI~Q}LtM!**iw4i z18&Ir{&bqh7a3I&^hhv8uaP52TVmgd3heF`u_3#s(qY;?A_@Gl>f{4wAW1y4%&dOP z(z#)7)P~x;&Tpf$$NDN{M~V>wA{wQ0C7znoinf4WzN*>i&44u7*?2*Li9UQs13RbR zY(?`kK{!V5z<2{?sXg{!hqibtLOe$Uai$puCpt#joMvL{;GBsDN7yFKCholFE;~Jo zfGQd9+4XTqB*gCr z6irhI(d2h04Ixi=i!fi1H%`BxMrya^ALp`S5)lXwbO581^0Ku==KEJ$H1F}{ycDAj ztNOZ>xZVn!yR4MIuoTWyRK;55m!|T9iP`j-ifx=q#1=Enp1G;JsKqK>0w|liue15q zVwUejAr#>6yonOIkQq;T0;4{g)%BWUFWTxHGt}N2tO->g4?3qPrdb|2R>y5jCw7m3 zKT<@zfoX8)k)+BZvR%$D%}kd# zrHp(loUb6Zf$KCdF?PAdDTJY?qGS-0lfZcURFJugpt=9ViyHN7>dXE|at$BOXr#ZA zc5_t_Q(@A%_kqBc(UroG^fQbKaw5iAL6Iuv%%Rp5<+rVJveh_cmF(Qtnu4$>MGaav z$?trPcspvq#Eu!5>PyiZ$LZQv^u?a@R!_NkXSh2r(Sytos%MD%wk%9hM3k0^O9(xJ zb^8oRO$Y6j{Yb?F7W@bla~1o{ykF$K-Q=w>woKbj{l6aksaYm7sD}gB&#woLX=my* zy2ddkhkce8riwe8fG-+dwlx6^ja)^DETR%#J*H4BetA+0-WE3)jns3JZ%6mlukg=j z9B(lgp~O(>Z3+cA*gU{+KzSNuVBK{z5da6!=692Y>RW>LmpR>2Ths@e@b;Tb z)C0JE`zU?^pp`1r!_{~Tv2TdkDePrV>!}zNi<;hb!GcS*VA?UXaUfttqKjr+zx8QV zLijLxZ5Lcl>bt@{EPNke7vt%cnEvt^4ijDc6es2aE~PQb+y!{)Tku^mT>Lg09DYG@ zMxJZNBqYRb3)Rzp@1#AO=#z`d(4E~~z+8~!j}EP`g+B)F`Jp?Pg6~s~RZ#$;a9ku! zvNkVJcCZurtg6uj$%z*2asFd?O4zyu%&dGoZ~Gz>y0j1?TU`bz+pzk87w`uEQFAv8 z8i4QhTrc?t%nG75sI*4jG{5okO_ch#n}L(vWKUZ7!hm}R>HdU4CCQS9g=33j5x)%| z)%q>@a4yoxFk0VyPFbl=IL$Vx@9B}Q86H~>Y{>K&@9tMKG#A~RJJ{S8w{Ifi3d8^0 zmu|y|l5v3Q#%Bp1gOX3?DaC}HKYfe0vPL9})t1mz32t*08Y>fo&rWF1o)Er7qT34} z{tUCEWE4YrVqxn2;@$w0mcH1q%ku7LW{;yNXEb0|T2qE_?ankOF9cI50S?bTHqe<9 z<}W{TdG7*qRh`c&ej8d!CJ8@|jw&a?_IDlF>TnuV8b6ZQ3n=FWPWVseMP4^2WCHP0 zowFD{b)5sBVZQe{*=@wrC9l;Wb0jG(H%yb#?3X`geuav8D=T}b>@`~sE=J_#Ch zSmM6vPli{C`tchVE>*xTdZHiIHjmC~A(46hv#~9{-f@%oT0oxF+(dOi6tLWD{aDZc zn&Zrl364X9%$-5CIcs~#+zi)a&_fJ$JyziC&mJ!c97=&Hk;K`%{e+H-S#Rr@3k@eo zgQzaxJ0WoKP#_|&*c4YJ2ljP#FSQcZ1VNIz z+)qWhCiGUQI9fJyX_jD_1o9*4Yb%+nB{C3lRPO0;t@mw6jmzF&1>lTSoE`ySjMOKx zusEC{b#hK{Tb)Fe5mtc_QV0zz9oPo&}%`7z!o|aNLxL2{KpOPFT!` zmDcPoJ;wVAo+(R};7zT5r7ilCRd;O!*!I3OwYBOm+R>Y_W)$53q`+Q3vz-iVdtck? zT-Ffon~lB6I@J>-y$o`OTs-#1PBpc@al{JLO>HYh3G|nN+Q}>X37}O8I+XI@#F!u_ zm7fnTK!m;3Y|SB8esI!2)0BX?!^4)N>+LpB0)5xc6C$JLarvH7lt7d^_myz8RRs8u zF;T5^lI=9aF;OJVZpc8Xi;_tTRJkHW`!e^L0n!V5*@T85r&3~RK+*dm`_><{47O^M z2bnGG2F7diONA=+3;NMddjlQslxKQiSvBfo89q?2&K&Y_h=u*QBwG8U&826FD6+`0 z&q={SH@@4%f##n8V;7Dt_eSCmgya7g??Y|iN1-xVG|2VV?OyQNn?9=~U+b~XMQQS#pGD3&4UsdzvW`;;<*@-9VFfZr_`bs>}EiK}} z+0)>VYZ#<6$Mu!cWE*sZlf3vlc9vt+dHBaf#L}1M{n%Cs3$G*jI1{FEBS0NBqMNSi zPEh4DxUm)qw=)5N_&HxSNcd76I(rnG(%uSa-o3^BYS*UDE#|Bx$!VpEAwz_OIe8$& zLoct_N`)(h4rD=i=rskIP8`|iU9&g3zfHEA=opXTR{QRNUhQTNJhHVg8L$%Uq&e*z zCy{?+8*8ILm&OfjpnK$h;T1t%dlWwncE8Dtuxy}AYLAdEHKQ@`|7YC;%moQpj=Llh zRWkFh(?D}SoSCIpSStKAUH(|oz;3=-$Si_F8lFc>LTZ@dt(KKejkDeL-t>9Zm$sL) znB_tTvhTtf0`^2W3H8m4Vn7P~QcP}K4tT>%z9r_C0F;9T(=nOcMdr=4^tbIQ`zyT^ zHqz8G`W84+nRX0{?d6k=KgfmcnY?R?UyUIjBDaTz3|Qzji%y-e`B@bWM(M zV6fFh4-qfJs;(!q0?3WG%$xEdKe$&86m0f=!n~Sx9^M8jj;Cm=7Hjzy-D|#o|J~<5 zz70*VYl#{143B0b7lOpMl%{=z6Vg+^AEuT=?9UyPb72S(>djvVHCUL+$;O{1ev?Z> zn7uBS9`LFMn#R6}!7Hk)n|EUZV-9{$AU<12eA?DvLdAD`iMfd*}>#d0usd$v8G#7wHwq@Sbp?r;ZaK{ zC42XrQ%h-TUjLf$pQe$|0LjA%rTK?vgB5=!epGr=ofR?sjKX}%`0Dj!gZn9a=rIBU z7Qk~}kDURfF=_e4q_+7RV+fnnJ>>w^*vN+?D%oogb!Fq{mg^bHsV<+(Ssl#*Xdima zJgsk1vxk#urho3&)H?M+E<811Mq`ykJr#ZXYpKy(*BxwgefXJ%J!$^T(>q*a=We8N zpWHYd7&Z1oDuVqdAFEiWN`!T9fXSUS&~_gi2f(zxp-JT$aESO^Er}0n0wv z`2*t&$knSJzh~e;dX*?!0jb_btuKjX%%%o89PrtEi6^H!s_I%+0+H|!$7?vGw;YUX zwgRSp?}WmCCZAxOf!~+~g%a5801>JW9$N}Ls8T&hp* zlXhnTq2KCt&_pEB8esw}(}dF9q?FeAd~5zmW8yj7zr-`U<#EQ>X(Sne_Sc9*d2*th zhVqVyXg_G)>4@Z(u`dy^z?qE?8Pzo?5`Yvb%ucQIt2spDU*?*P#?u6j2z7YmZu`p1 zGxxW zq+h&)l;4vI>K~utZ=+C?4@{=!%#Dd}&!gp2m)~Umv;a%6z`sLz842N|xoj}(GiYxJ zc5W#Vbknm@kGKwOVfv7_8IkXaoYvT>(3lNPm@34YPH-e>*voxX3KdFfV`SE zYdPPtcxc?LoMmgQEawcUt<7;;8i9?aSX#bytpl9*Vsb_TZ*u=MjH_KFX#|PEl#0bQ zev)tIpUopeERy`g=TGMf@j|nlq6=s#jqyHr{DeAzX9ZHeg6b|h@wtFcq=zc%; ziWQ7dODmAdw8ZV9CMN*brWNCo+)ZJ6(f||NveR^jo{ym+}l#ubTN+GadEKj-+nUBN79&3@o}#5=kzWvCYrM> zIW1)lr%)X_JqsI_b{LE?>CKvmOj^c;fz-QcEAD0!3a#gX!o2Xofho--7rAjZWGG|q za)&E7Vhute(cAh4a{N_73)IUJe4iQ8N>}<#sq+8c>h!9Lz??E%N|M;+;WKHrb-|Ch z_6s_xW8TFoTIdt^IK}|$3%DWRnjF;gFfRcuy{&t=ktG)3-DC=DRQnyE3~mHZ_UCd| zN>*JvWpgHc?|x^BojJ^$>#+d~>7f$lgsNo@A1j+Rh#p*ocF_RtJC>{Ky`Mgjg?o*j zTBLu0nc~yD%^gAP92@w>)jWHGKPN4EU{HL0D`N~!EAnU1q!=Kyn5iTH`E1~mv+=kV zhz`MQ?C^>Xs8X$_w@jbVMd>{3voRAhEG_`+c=S^(g#Cl;+#t<+P780aVa&&RRlB;0+%0_osQQOHd~R4! zjQm}P+4Uza>_8*YA1k5MF%#p{ZTn`k~~b+R6k=9NBfX0)@% zho=E{%K4~VaUdd3P8=~G5*3>VmzzeWlh_#sH4kvj&rFd(@Iwa@Ww%^b2vl90Y*>Qu zh0IhFcT+NHYC<5nzJIoZc$5uheH5(D#5z?4eMk5FC;V$u&1r_p1F+)EQKVzqI ziMv;0aC2z3g+WX3MCVTFPfPFQ)~I?OOB1LI(u$M=^1jqNYQ6=<-ZYD96zVo+w<_6u z=o%VJZ!JPM3No=T#${RNT*(+7wZev;>MWr;#c4yhsvNQQb+wbAEOKy+l+= zc}k%*;Nx-P>>+hl7rwr_)cZGml#UxE!Y|zxNmSX(5emA^)?N&OYK>-nE*v@-Ha3rG zO%`W}*XFN7c;FdjN<}ZIG`qhug$;B6(T7n^lZ1sDb3D|z5OQBc{vcJl*i!V-MLlJJ z{31w_1o|OhWzP_%J~+h7x2mP}I}WZ*N4`f$wWmw{aiH|y!$h15hRN>LTmh(QeLV&2 z2OzSLoIzd9z_@seCpF&!{R2us2i_{{a@}sg7I=fzwSadAFb#;Z8;4 z8CF#KUP6Hkhn(9@SwV01M+spv7O}WChjU$BlM0m9F7n&c6snk4FsG;j&{-R%(e}2g ze~OcEyAB>p(Huzz8d(MIa&P`vNcS9Ova$a?7)=o?3N;+M0@m4}S3VjQ;e0+y=JxC= zX45hgM)6`)r3_qe;Os^hlGqv|^ahmvTPaWaS{@iv)vbV+n|QgZ9*&$(DnT%91&V>WsPu1-aV5C+FLaDE5f{q!y9UJ3tolT&-x?pL zxxcN*dU;3MRG`G*y}8wnq}+ocj7vgd3C}qJX)E1avQN0#rZu7yjl1i47r6u3KMaGi zbNSZbJbHY)`QSU+=2-quVloyjg!SjM09Gt&W}V~QSx$gL2cJL21bJBIM`r04G%Xh` zJd(yq7}8QmGDt2nSf%bQKJhR!HU{MRVOk-mX&AI+K(45L47t}Dr_eq`bs_gZgIwyV zoOzehN-Cz#moDRW4O}do)YYg7tz`Soj5dYiWab!dg&WoVWprc7zdx@6I)9BQ&+JvpR) zja+9A*cSoN)(h#}vUU(@kg1p$IDJQax)XgbX_xr&t8UD9W>7AtVnXpCQAKZ=UvHxu`{qid)%Sd8hB>}8F&3eCf#%;xw2`i0 z9K;cCV?h6fSU#2Ffs(*QkV|zF1Ih(O*5cOpPbM`9_{!cDWoJQ#pleh#;`=HrdQd;=^e(p3lK|a@Cz0GBj5iJE#RR}u7 zIidrqaN8m5deZH<5s}B{tNxPn$QHdmwW=psE}qb~@NG>tC~N5FcT1f;gKZW?`D7z# zURk>vehDs5WM|{X=Ufk$Eg1vQ@@s-K$v~Z&lN>d`HDCtPD<(;wUuo?9eYgDyjR|;K z65*)^t8-{zcHDy~NSa>sk<%WCHv z4^(jqBe=3>iK5UG{hz0p%vDIpC{RM-m)t~T!(>0IsOO3{<8G_G9pSe;WyfONuEzIl zk-Di%LfabzX>PB#qnnX8XzsYn_htbW^ zC??VKt&2DPwDci6RVhxTb$pIHbPOnQd8lYoZB}7St+1#!YR4mIO)l69hCEIbnEt&J zNSSM+HKan|bpc%F<7C&pp`){+f<*U#)Q4h*@I4|+v_u`|VvugTMfAph*5GPT#?#zU zkCje|ObVz{ub8Jl+5!oB6{8X8*&i@u0)bE160G==W$ z(x3-{3RPh9aF&vL&X5GPX?5zA@f+jXdshd#1X0|PA#R+rA2}09sfnslR1qC^Qnu!-VE8K7d zKFKZ{DmQuGssm;kUsXyL39r$#PK6QCO#qzwl;FT&scgB+8Mc$kp2gIr=1Z z#b`3M6+*l`>wBZZl+r_NnXfR(4i@_)Fg2l1DTBC2#X6>(g67tQqs8*K{A1OT7-S1t zF?dj9>(uQ=t$OJKAn+F$xmCPw3TgekTB#16q0mN2HRuT##~ z>9~@^j^XX1#y$GGC*1D_`--x~r~8$;6{%Z2DEpqD%k~xJ1?k=VH!>PQi^OL^3^U?o zAf3pd6PiC+?o7-o+H2j@L-^a=5HPc9vgJFtsRBDNI$l0D9zCeM=yPo>voS%}ONQCwoHsN-R`}keAFDgCsvBcY z>J^2R(0R)ZC_1dU>Lg#va67xCRA&h6%o%@gXHD`741R(oJZ!PhsonQrEqxOYxpo4r z@$^Z`tdnuJB9%f`C8O~FAD5{&1~bzy4R%9a1vmiqXU~-ioa9Bcl+iN{4;C255!U*hb{z;Aj zIx)v}DehP|v$M6+npa(BXXE?2coo1NrVs%=7Q*SUzW7C6@40H~1ldqLI-`?Me3ZA6 zN3&Q3hC-ZN3titaC=!xW=&Nqw(xq^xdvHbqsoj@_P%rQEkzOpj>^;8qH-I-;P?5$e zsfv)!2!)*$C9if)r|#d{FD3arvN*r6TEgP)1Ii^TM{Ml;6`*)@`}*if$ss`e2XqD0 zco!Q8lXZtXcO>D%c2JfD7i7J+AE5BX3ERlsM|=_#hyu25ykfJmmdWP&Pxui6y>-{8 zyT;LQ*DcgDvBhl$8t7tX`!yDRuV{F|^+uLs9YKq?BD4}cpii06AZh*z-}t)0W*y-n zjAQZW42Vufuxt6Zv0iudCWG>wA~RGAo0kS3;YV>QhzAor#xsg0n8z&=cqe7SR<{-O)6>fSv^bQ= z79WIrao|S2Z|8%PER}*(goqJBgHlVYz0)A* zWJJGeHwj#8n`l(zk~lGONn>d-ImCbU-&NR=L~ouIiXF8n|6(TP+6dqZ{8}IvmIEIE zLmeMm!3u^VS&;AEyAZErVDZ@NAt5iYIwMMi0Cx1a5HKqgUQpWlp~jpajrTD4q>f%C z0DyWz*)vz<1{JWb1bvQC48UJ6t^Afw zDB@hYfSS6SMDk3tO{YJTzI{nUh2(QoU=B?;O$#V5`#?yKZ3j@8XWhZjXrK8d%ShVt z;7_*6Wb@_3(_GTR3BEH5gN=BMBJt+R7nDY3b_qm>o|#b)9s z^71MK#g$N4`w8YOuDyN_ezEolVx(CK(cw%<55Deewjhq1RqHk!bU}VqL(MCEU^xRu zFlOc5CN4WH-gWL<<*gh3fL9rjYZGS}F!yo9nyBO2t=|)nw3ZMKrX~N_Bui+wHjmfU zy=)-UwfWYB&3MyNj`vk*!QGzYbjsbh_%+S~1IW=x6-i z#CX$pJvc4r?knyyut|=;(a?d~c6XVmU@ahzbC9~tcv7#W)<93DOizm7y?ojPS8<%Q z#)*&e^+ePMW6#usczK(T(dK35g)*3R)E4|H{HZ}vxdb1=9O~{j9VNCBG&lhuL%mF7 z`lCqg=8F?hhx?K=M&p50^87Yq$GUgLM6-8KfKp4vJ>&)2uzzjs#$2$|B!y&8Sd|R3 znF7AWPshHi)0)ucQj)lo8wCtLd%4T|Qop@|Gq3Pv+?mtKJ`>2PqpB$!gOe5c)S{W; zrVS7-hdjSse;k~0xf<^a2WkNCbS#!w`SD$DDhq{Wpwem7Qd+R0&(59qKlZ*%+mj>* z6;Z=!9=oBj?;V+KI3c{8ez~h_!uHPaG+K9#iu@NS_G>4Jl>eJ8`<}KV{Cj*B4rE?_ ziN_EP{yLg=-W%}D=W$0Y_4uss!shv4+bAs%79YXsoY23k!I&iI$ERzA6j6>n zCwyxwjvruXI^?bC;%d*E{)jTq7abNFMhDkQj?^95^`TKJ?f4EYH z15Asm-3Fh&lMB2_dhTofY1Fe5S>N;7)D1bnJKk<&lm7gY2^=v2{8|fUXQ30oGcz0A%X_-M{xrxTJ%Lw>pGzjRxypTNXKAk=O6kxFsLN&(_g*j z)sd=}eQdzgDeaO^9nshL>4#Pqf7F7p{Nf)>S|E7(HdKnLP9-Z0_T|-m-U{WbAZ`gx zE8>~s-rMMyfjxPyc{@&T$7*vmR4t%ppj~6wxqUeic4yuB%aB2KVMqA?fni6SUqb34 z>tC58`ykl8-Lnf<|5tC>KpU|GyvHh2Q#9*4qjE0@Q z*W#bSzvj%MefR6u5`gHwp}|dwvP`yxUJvfR;(=za6C#|lQ0-v)^H>zmskw5rHT)vm zw!{P5auG;}W2_6^Z++}KS|cQZybqQ0#TU$Ekkpk>k#X$ozMz$wT1C7qG1MMJr$_^V zh#k7uVkPeZRxqHycWAI(kvsG+PIy344_N@i;B>-3pfh&31}HiE6-@VLZh$$%Dd+xH zx4>!d5Ep1|@#pn+J42I%hr0(Wqx(H~GaqbLSv^ZA);W&AP4kEdqWWJJs(^0t48UIM zaP8sU!z|vq--Zq|wVa>06g)h#i-Q>zuf^@Qm!T~wMVE)}extI555=}rn862_w3A5v zr|l|x%|*_$(}`kzXPlv56)!qNbv;|fauPuDtYY%DhRK@D4w z=&<68{RoY+S+)<*^*vPfuXL998pMe>?NWxlE2=@~l|!{ckRk#UJVdYX8o4Y!8c&5o zsEFamNu=VvhS%!qV<8jkee=M>?!HGYPFD`s{|w80S4NQ;8co2(fZ5~!dXv- zRz5QJgQnL)MV3}W2Zd}uoTjyCMr%Bks(VZ{wT*4YBN*Yl#_&Us>Kg?2}HhOTFm4lS|p=wHk zj1IU)#Y$^lo|M(@QB;RES5T!B&+X?E0r4pVaLLaRqs{qvF8Bd}DU<1_SnJ#j{R{^y z>dUvtwUSsw$|S1JxiOtQ_05I!uUjp2Ej0Pel^supjfjvn z>y7b+!|NgR7l))50s3^fs9Ci3+<-6`(SEBd`kO776FOcVCnf97Xm6;=I%w5+Qy#<) z(sCp#uj}vz;Lqi&+U-?F1s;*+_q~$i+bl2!{?zHYn}GRF1xXN>0TPzV_+b%F&1y!O z5H1&orro*DeFn0zC`*Et3WXQ+{kG>*c2M7JwsfRYz6HCy>xWGX6Qyc>}?1oD;ypMK-751&bWMrPd!zwHB@>-^>=T7Ws1 zT@rXG)`i8NbuT~776!K=pnD;6v}GrOsxoORKm@c@Psm;)Pk9{|Zk%FWrg6Xg+0?04 z=>6S&#h&{jBZ!-;aIAI-&#Kl1BW(W5)bv56rM6;7!iR)&h=!BtaryFI{enjy8V_nT zZBB)~)98{d@yiZ`tr`KXxHOJqZvH|nDDMfBBK-Xw8j`$P_rJWendz1*)WvB*E;?G| zNj}JEWk)=ajjwXTkcecJG@60F;t<`3vsT>qeOB#RDZ`JCm5yss3!qo;egQ*rq5T+g zw_Mj`Y$?zPXx9IoYNq#JaVRc%D-@KP?jT<+pNWg82b^6lZ~BP;4P{P`Yq1tCv8@_p zSN&Pz;$P67-r$vMew>k>tOAPpl%ivjT7OTot6`PF?X{NZ4TmVE0>kVCcc+Tdlq6I! z^>8Dck3`5)LUmu?M7@O8Ryj{*uve3dJBA;k)!qs`#g!Uy1KHChu&8d!J{Nt0)@f@fLvy z{Y9j0*@%ZQSIgE2j*4Rg<38^=QcdV`9YpJSSpcb^JhJ>v#Ab{14QPa^`%gHpB$<~z zpK=8@mba##pRmq={(fA}skV0FX13VB5NSpmCW$u{6#J@|iVK)X3yBM4^>dnGFutkU z5utre+#D1DuExS-W-XDIadIWiC=CL*j?DA&r!V@GS}=?@Y`LZJrJpoSH9^k|H9`fS ziWrHM^b{>|j{^s&K7b&v63HU!kS;WqurUP|LwZ11W`W3#j0}D}6wbr1WZE(w8F?&I zb@fr#b{|wEC#c!y(|m1a#mJXo_`3rkB&G6jM+FNmY;LF?fZ?8g{OBrX{uo!$63md) zK93&FGPov3R~lT`ag+yrhy&)z4B&XqqABNAVbkPa3_&>!if(6J+jrNayR(CY;~eM9ZIl@fyNG+_hUwOvSMK##m*D zmDG;l-Z8|Pczh^a_98vcY6FLh&S;l^sNvb>`{B5XTxxCaPJN}U+?Bd#; zz5NrgQyCW?29OEiz|&_-5XrOQ^ZCY$0X5uv>>Fv3UIx`j*-lirB^_=cY`VJ}NUV)9 z6i#!>LETdF8dsH}!(XgLtD)f^!`o#VIKsvTSPk8;;5Wq3AHEpc5mBYe?3z7|^60qC z!pV7GdkhlLbSRK`2Mv{78t-?7h#8O{VVMNzLUhYWvuIkd|(YJnfYb3@UsY-^WPDI-b6k7$)@~>@%3`c6RN>LP1s6yt;O++ z>zh8@82XOP?f*AFfOwn}_}x_lPU*OowR`d+uz?aH1^coVF5WCqXf53h@j={EqXJAp zWn{pB59Ez2^3VW>C%%Q|3QVkET7DFly%}0^w`Ly7J7R3v(oG05Efe%F1=y}6Y-tmP ziKu2+@T)mF7fx?WIX@rsc2SX6;ekO{;Gexk)zWrxB!^(N^3UoC*(4V9N|>13rOJZl z2gZvjYbC(?t(djOO)+0RISX?!od}Yda=(|%qpPW7@Obha2*@KOR{h#D41uAiYX^}k zR#w0_ZkU-J6%JToezEyiUbvL;lK@twIU#WNN#;&EWtF2k^5k()2;(BY&_XVpN-3&~ zS|O&tp`YqlvGR&98>BKncaSe&DQFHa=)MpR5#TI@2ZCdzvRk!lb3f083~?P$*v z4M!8A`Kue)U|q95+Hq_LL!9w$K}eKYJ(551g-!(3;g@ zYn=@us|A_+6~I0ahrf1RRl$e?(>f$Py6m0hy=Ra&_PQSYiADX$mZ%EZ2+j@&WkMl? zRIF|y4H~88s*FmdBznb_52C0kGLgpMYwIYlr$w1Dcd1-$fnjr6j-tuLHZ!kz9 zkTg%KlH~rpz!U-0fLn#e8pnx}z2-=1eAS*i*ZCQxG8|HgMv9)&=h&{|a_Bjk2?V18 zzufyhe#T5aj~K|wy*S{cH_AZEZAZa-4Ykp_3mR$RPs$%PeD;2`@C=q|%ztPXfA|Cg z?eA{DUS9SFPF)!=oN>|1{JrA%Nfum9G2{b**udgav2xi4%dhSkE1d;33#ac=5EZ9x z+qoHBzX*el{oh~qNe}Q`uKgyXWg%`Y5u+$CPa6b3;wz4k)T$+?c$h3W&dhKn4`i?e znBt#@R*wuap;aa5=RxB7UVVDG1g6P!t&cX+kP*{(SpSDCeMzHBv7O}GLGdr1u+$lqBLr#LhSgadYZZbv{HfLafw+2Yx!_~T7 z0%a|)q5-VK8|OjY*I6E8BBEnKM{EYZVN^M5s?JRSrU){pb~SI=;MXU;8=Q4yJ+*Td z_h%{huh13!@Vy3&z?LI{y1CiRd-13IydBs%*V#vnJ}*xV{*6@i)BZdjcrC9oPob_< z8CwSNfYO=0IZykN$Lx!US`vC$$PTf#b;;)=w}e~;pWOL}!bU@lGz%t8QGX2DxO6X+ ztWpdh-$nS;)(OR+{<*MH+0lgz$|hWZhzd+)O2;8`&ULV^y*i}pJ4SVhU2aYvma>uN z1%Vsd-w8Q6%IaAs2xX$!<&_afw?R`HWma6ZED^0Kio%QZy<$i3oftF5LhC)=hI&{}?(e@uBSH zdcGMgzm%^!qAqsJ8ca7@9$@0dS9c)Iy`Kn8*3WP%1KAhh3Q;8c2?rZ=sEH$FUNjk9 zo7r4wnR<;py^j@RhWTp?M8j_VnAvUIVsUTm9E_pqwT7RdGr;pz>h02NxyoYI>=69+ z;y&O#=OSY2rz*Qr4h^o%%=4*O5nZa{%q6wD z0qJ+VvU< zWW);o`1HrNjHP|%RvcFv>p_c{;4VO9A4S@VmO=O}vm*HRO*n?>$6zJywxsMMPTEfi zdCfbCIqwv`ji2BP-UDQKc$K083-jWC*n{QP9^7449k%{!4msWvKtU) z#E9Op*Z#L^DxP}0AziANx$}?MqjvR&s){j`z-KNONLBtF#DhOiE!OXd2zr@zRaQWO z0ThM^?|l)Te4U;?SEWyX?hIoDHxFq(1l)Apf%HYOaU=H+H);-W(r!dvuTU?wN!sK) z7U2K9W1?^S$E?p=>;Ig;^C_SfX{ttglA5%z__mmh(cC{&@2&TYZQIMHn4k*dbk=A@ zn$U4z{7`dNzP&K|@Rqn5o>nQ)lj1xfVl@lC@$^78P)7}|-$Z)O2Z6D1`@A~@B%csk zIGx~GEn9TRcc2v31p(6P0V86}A10HZo`Ae=5$*=sAq=w2!kod@9X902+lNN+S%QsS z(ieEP49TdH?~|xV#+Eo_r^en~wPnd7Rl>n=2jiuo*?%&yEa7kI<)7px)e4LQl3Mfl z%vB;bq{_I;O|HSd`X#0Jum;bdza7PVd30JnwdPKw3JwilXuMDDE4KJC1)oGdKw8@@ z%s;2Fu$g^O82cv*IezxjFNR-}@f|J=$?Lh#@oTg}UDZ9dPcLIbVA3Z)#Tl&Asus3q zJE^QXS{6541sp8AehiU0jjLi0J^x6=s0Z2!vE=IAPlVu2K3}2eu%;0N9x3VQC3l_y0&BNgXX}IbU+(1uVN{?!t;t;CJ^4y!s1oiDdH)Tl5q&RuiCXr41YM8le6QOWcPyTA zV*(ypMoQ|+YXuo2JW+T`kQGS^U@JaFr~Z3yB(~Wnrv=pxvfelkK1>cz?~F zU=PJmLr*~~{&`;B36B&1;zqkK=*r+;y#Or>f9N7qKkP+=yz` z<38qDN20h5J<8I~HMKt$xgrpbz%mR}T8b!)4`$rqRO~ zdwwmK9-~-C)-=#rNBH39+60HLe3O2$vsgLxuV&dDAImReLNfWij%&F;tC`@soO{Uc z2j&3`tbulqcbb7aCXWOJ5cl>JJxAf+q7lf;C6YX(r?Sg^SUDIMqzTUl z4peUFb0%EVZU_i4X0ce`h?Hl8^zZZ4%iajCXJR@pFL1TUZ4eqlV-vyPwwf$httgv7 zC<)5PO~bq*)lAyIE!F9L_+X#8x?n&+LT)V(SjJq*^0q!6v*IK3r{D;dKXz2<3KY(eRYal(*SduE+YnQo zbB`2h(8M1K-T?^+|Ah+g3~*!&wI;jN%%}?d?q?ObNWTQUuJ`S-XV*Ne?5YO$}-KWnhqJp!xO4SNGvP#B8L9^=P?f7+2z1b++$f!^tW$+5Ln~qAYhRCf{4mUK zTClp2nip?6EGl>ws+?qjH%YSWRj-aoa%7=pg$(4)8z0B~>4yr*OE| z>QR9bRJ>yFE=Woef9iD@MMkG11*&p&_Aj$#(`)zGF2rzYGNJ_!?+Jil>*SL%E_I&JCE--KgOE9<$5c`68ey^=I*#Da3dxcb5}OpE>|b);oD;kZFG$ z6T6zCi=pmPL9{irc=^rXgy+PEGTwekhA^I4`s9jv)(Z&s9hr!-r4C-PAF{NsM{n?yQ0nA!7~+6mx1#)cUk@MpbO%0^TO`ut+_nHQRSlo;!93rd;3>7a=RyR zmhZiFcuCji#k11pVXxCAPiolG!HodU$*?1s-?KY3f8TD?HFb?0ZnWiihl35E%MeJ@ z>W7bk28v0mGw<0!1YVt@pxC)mttGYYYX)dKnexT8K_<0@ZAgmUvc)AY<;j==1_o;A zY<~UgM5pyFHfc|KJNZH@0D;01e~&!a%yqg_#zb-9$Mp^Hs>ae;1`PScpnrJ+`!WIqDw_XK_4(%_=7> zy<~(RkE)o}Bas@H_JY(%P6obzO--`=Uc=OUV4!{rv1?Tnk@HxZHWSaWgD|?pqFCj!!<1LH?xZ0gE2~z=mn>fS^H$K zY3c-DMreP{FjlLfz4H2a`NZK(s{6u<`1>vkrQ#Prf$IZH;Y-8&cL?-jPqxPQd7c`$V_iI7x9Q?+(a`jKH3Ipj~>{QJH&*Zt?<7&n|uh+DZ&X=0tzRxi4x7CXXH?mNTc_!ti7H%zlnTY=?iWJ3B%IRohxYJYsa;jV1e=@J2iLHd`HCU&zKzX); zj71bDO`d8Bdi>310kc=+gMI{R-tenC6E2~jxUg=$E$&=w?^H+^h-F< zM)qO>Z2_|kK_uW$XQ5X+JhKrYNAr4XPg^x9XoeRaKC&otlRXnof-J%2VX1l#Z(EXZ&#Z@PrNiRd-#zMzMQNBu^qn)Df?YjWW4RdU_t58~-4lvW$=Zqm8qz^sNv*HaCeEG* z-^61W!_5=2!~6_uB(iKgXv|zAS6+Ioms7vlDF>LTNvkEZfBXVQLqpJNqwLDqJ?I{VSsqHtosZ_lD0R1h`R11XLPTaMAxdL z{n+Zo9$-t1Q{lc6O%v6yj<%I#MI>l#J8tvPMnu6)xF&G;hk)X<9N+5j~{~9QNrFJUm zsI8G&+;)4neo5AjpReei-6#qu?=q=zkRB~*4%qB&mIBdDOR&($H`0{hSszBs{ zO#ljSvU2Ag3dC~W=&f44oO!85>#Z7L)gLLWA^j4`)H^Bkdl|eXyO{FvM7nJ~*ozeo zs34xWDKHyjJD!~lEG)c-JG;g*P^jcF)Y4}Btl%HA5#%@~l#e5>G3Lh&Es!>nZe~8d zPE_rrWhFF?AYKrCho}0^FWTd~0b~>yVK6G>>}R~b4FR{2k9jn88qabEPHA+^S6x09 zkEW>~t?3WgnB>8Lpi?ZwLY9_+GlH7y_N+(-8&5G^eutL5RME)`S@ZArzjm04@Q_QpRnuM;`ENwu>=gkQ#VvlOa%hh)y4(vbP2QP*Eq8s z^)W!c^c*i-kvA*b^&=J(3eyNg{|mZ0bhOt8j{UxOE#~~_FnS)01_|dEW`vTg*vFtI zW03*wW9t#$9)nb{cess#f>bf4k0|s4OPKe3fuZ6BB)54Ct{&1o2DPCs8FCw7nJglsO zSu5=E+s_6(xLTU^fti&-{G0mNuBB~)vK~rVI1{LqK?Jf#3*a`)*qEDB_wCn{JMvp? zHX=eG_U7>E48AE`hf~)7oGBgd-XQBf9c2`!*o-L(UYm`C(o*#G_{#ST6=bgq)xL1A z)m*L7tplHB3J$`Tp1;1vnw|>m_epWXGrAM$=v_Dm5boTFm+9W+qTei z%yptai;dEqHiJs!3x%K3E%@wo4o*Ca9>LP!SJniy@G52r`-YR6X1 zx2=er4J-;Q_HgQ}qfW=GO7C=4)5d~?FVoO(@U|!hOZu#Z;dq{(n-qk}RwH}LSk!do zPAR!3ICdS#`CGtx(O21o6tGGRm`Xu83}x-4Pw-~fdC)C0 zq5NBG^zil$fvLrO9?5S!7%Cx21?^CpSNF?z`Wv7z4`_Itcf&4KBrG4C1+Ip2&!0!Iv65 z8K;C2HmrVwyR`skBqVIxp<{EfSk~-RMR4#jvg-Di5t3Aw(!;{m>Zvvk+{FR{^(=s( z)=8h>^X9OM*i6F`v_M(0WdF6{oU}Fx<*AlHKv@=X5zivqPCKr4|s;S9v%lMO=pqEtVE7jHzB+}ed2eDZSPe4#J>y6j8W+pk>qn?;6<xO=2)V-1Vh&?~1w`P1@Xfv!@y+(*sIZ#iHj*zd1 z0BQvu6ev$a*N35KgSoz&Qmk5L-y2%x8V0BE8p{bo4AUnxfTc(~i#8JO?z=cY5;&=l z;&o}m5RJ!AN`Q0{gv*=hQ4RJL!#tp*Xg|674^^`V?Gk@H5C=c}kDlW3L~MuZ>Fm=| z{EI(o^ED$uBa7&8$aWfo(U(RF@r)Q?jfWU~mWBCucwz)W)qLhx9?5iL9oj$JwtrEk zA6A3Y#&)w2`agCc+0{2`V(fYDA?i-=<%c3Ff3&+SF)Yw4OpfDhCe+ z@vw$tR})RfxeT);J6hSi$6Gx5H7Idr!^Nubis=CGPY!AOrbcBz1|9q@ct!KTlyzBK z>0Sk?*>@eA?@^bpdg2HU87Z#qP>!hKWT|sEm`abhARaU&+(fr!yg;H>)uf6N`xxQBU9nAvVvd>h&}gGE zH0wy0d4~FhVCvFiXm~M^ZHRB80-Cu*2FmZ8--n9>Es}`w`5M{+((jf!5xU}p=Mzqn zjRr^dh%o}xoL5XXN*Ok&HcBJ$BEE!g;_>u{$?D3{WQSBGFuNQ)PyDIHvF$izEfj1- z5a*HsC{t5o6oYX9Rsm+lelG(K8ut*I&8xsJbhbG49M`U|l6VT!(WrL2LZ(t;5`4M2 zd}I{pXIPA%*-qb1hI}S=HUa#xdC+)z6AM~EApU1!LqSSn#v{@b%sZ*uHmf@@vGy^!dZ%yT5|u9!SR4Nv?)IrsiIfOz;{eK z_0GCt7}>p#fp`MjfatSBi4Feo6RyIpz+($X$H=}<2Yn15C!pFg6kaB00 zfqxzLoJ6WHDElNW%B#m%JAA^1oIk<@#9hE694D@!**2|?A6({agE!u&a%lL8E%Y_- zu&OCx4$S%Ya=4Pi39z~nHqygC6@PXlH-4d^2wuEU>)c0u&yIx`x78O1PQQ|ivQs)e zh&;dar!q8&9&ixZvgim9@p4aLwe$M`2;QXjO^+K|=%uWv*A)MMtV_J*I}7iM#1mE> z&w)M7hrRfV?to)!cO}(CLd$bbhjgDdBO%T})0nTmCs z^h?czv9@~jd_rJoAg}+4Y1y7RIi|@xvks|24?4k0^6Os-N_N+JgO{j$JXwPBbCxjT zDxXe)0K=+ex2rzQSPy(-g5v#)Ls*T25uxIq>4htw<>{y5MXvB|!m_O{PFSc+J5?Gj zXi(JPjkwuB3r>$uxKBww6shTCLI(WkO@J;hp#w6ZD@N^aNBm9SrTx%V6ahxj1cUU} zCu-4EYjdh3BA|ON&&qr(o9BD2{KI5mDoJqt*n(+qaA>hb@iy#+ez&Bv8xN`mYrxWiv`yGVgi`N@H}B8v}o7i zizS2ExE_pmORMWY*(-bp_af7CaF&!2+|J>%c8knvQp!*s9KK^$FTZ>#Jt@et^yYFccOd-P2#j&$p*XqRlk$6 zh)A9qwY1Hjk^Y1}kwwL~|3^sI2q6Q8cvC$m{y`o!V~$ga1=UEo)R)%L!67`A1kt``|GhEh*3sYgYf7m> z0qH8LP)p1<=q@*GdvE{Ycib_(UtI)DY;%q=x6UwwdS9M%wV|Xo!D64<@Nci;0I6*d zlw=>)v{gbPTEE=hVywQTz-3_(oKw|1lm)=$9I262`#jali5@L-=Y&$KFA57%qm`#qc>8kkw?{`sSdx5yQK zMev1e_)B{&e06pe15wbHsNIa%$6WBUDchANf(RJM*-Q6W3ez1C>`5u7rgD%JG2v9xxaKx za>d0?#OjqewnI)zYGP+mnrrb;lClCZ`R8>3t-C>PR79Lywr38-;n1Kk$DK0nRd{0 z$j(fkTP|p5r|@AcgVQjr!d~q``~uK9nm-#TE5~mdEG^;|E3d*fKuvtdUDmDO5ubA7xvByAAvw}z zL*7-;2CqhkR_v)BruP3!KZmHX%62n?E)kWIF)E61pSG1646$q@D z(Ejk>2I^5o>9=q+Mz>Kp>4LPJT#Sw5^B>c;y!U=7BtSBrukY4YnIPYj8Lf`%E7tBD zzKVdR=qF7$qa6OOL^f0k(N*!rcQ%obtptBUZSNC6+ptRna(`^mnZ_BUOJhRuhqJA3 zF47+uYd#$Dm&gpByKd9Mdk1)RFVPebDEykf-{5{s5K=o%qQvx;Ho&d#z1=y@JHC$- zCg?H%n`0lK`1-B}U{5>Ret^aoP*!qvah7B%WZBOM!y3R!ClP@B>7{-lRy<_r?HXC` z&VvnMkY-aVItr2&1PyDOL>|why{RYcdVP|~ZGbw@NfG4LcvR*BW(O`3)PR_AN+iiw z3R3EE1e#dfyeK9-usLcbzIps)wso$z#R+mreh_yv1{z-}9jA{;;IgWvO>;sSa=p2T z6a^55$wYTTKLffL@}A;(__yV|??pBXMbT8^&kbm@62=E91MeIscgit{S8y>;mGtiW z1CS5dqZXF%3T_J`x?cF+3ZZ>^S;><0oOgr82!oUvZ;d2g-folzM07Pa2Qz+k1TXp;YD2dHkPE8OT2S)z_pgQ$C0Dz7&T^4LKv@XTK$@4pbDK3~PkE~M z^D1JM3HuqYZypbIKPUuKrkUe!VEk1N7XRz18G`XtCDdUg-O^hI_zQy3gZksLZfVeZ z0riI*%&Z$L(-eP7yS()eJx)zYXwKZI^*ma7z*C-Dc0BK$l+R1cUvg47JC{!an)6us zqX%9%WO4t){0x7VX@7h-<;AIg8rf93&Z>pcl>dp~)#!4lhZoFW?j7G7i|f}}FSr`5#%*w2#@7l#>XqJXE6)}A~{V`~Y z1=S=p6Ax&#EMM$h8~o~N7$TC+k-!J;FFq8{C+<5G)H{uHPOy+iK8VC2Wtwo_=13E; z&(Jwe5L-xF2F%`Fw@%!$V-K{w3CS%Vn)cW1^W64zjum3Zf`lXy+jjXVkca7VMG0wg zg?0#!5xqdjDHFAsZ!q4pzko!Yq*tcCV&}FC&hMn&W;KzK$G443*SrD5hrk&&G@guj zQ>_dv0BaO*F(N){11W0(J}G$0lt1|caZxmd@?Efvn#ci6bUMn;`E7yHlpG<0)4$vh z`1(G`v**@<>@;OaO{A*xbaZ!hoO$;%=+_WcKAOBfX+ZGC+Jx&1vxbL_(gJcIes zmC%ipB`eFTN*dp|41R9rg*~i;v>?0i&QT8j!QA`Ib*|oP5VnXZy* zGU~U_&rr*_3p!-rkqN?M_QEu%MfulR$@>M=_2+iQFBO?yc2UB4j&xji2?=dQIWR+W zbhw5JSxkww`D6j%?@!A?eYYio+#X1H-^cqi6MeLv>Ki~2k#J&J# z;mm`IT@yZxaG@(Vr{elSO`Hn#%_Dc?0QoG|=aWf$8DyV7tc&mX2cZp8+@TeDr*Pj{ z!mKwnf7Cxs)uJWIsTrevWY8?!*;w(+sM?Bet~72W{xUqo z-)Z198{Kj|I&evCFMkw^guhSXKJOvWv;3^)gH2Gwz%12%SrCZHrV zMMPDq-H3$DOJmULitj(>s`7l7pmg++nl%Ao#jiZZ?(1v@hR5mX08D0QMTbUYFH80O zODi-&&jM!yyp4E_$ckGuy~5?VrV}h6yWq%JJb4unq{ayfm+*FpjwAUC=*Qho+)2xqNrI3yh1b7h_4Wf>( z)F5z@Q*QG(Wbhr?J}V|yynu~<gW~p8y1jhXaEx(tB|;DR=ZOC1aaV>#BM=$*2197Y`7kVR|$hCu~kTdYcaVk zPW*Mx)ZKgRyh`F=IIG`(9?FLLmDBnYOJ0#jKt}kK!H+ablUlvclb6p9UH21{uNcw+ z&ORpL+rO?gB}l0EP$*xcT_)4BJ5d-t;H)5lI3Fk7y626*^eh2HYA-wrDXM1g*W1aE zIKpBl%9%Usp@0$RA04a3y77o8(cVbZS;NH-QNRAeNCQo{z*R&h3g*CBg#CLX$$Yis zv+Z<;*e1JPZ^I+d3eyf35AcRaio8C(Y@a|H3oZ$Sft~EH0puqjLL2>M)H5vnD3r0D z?6aT}h*wk780mzy3M`@a#FK`|OZm13IVIDnn? z6=T_i^tZ(1R5W&Q6-FR5Ij_-M?eG!s|N?7(ZJmmEC^La;t z7a}NWnv7o>Oi%whS%$n7Ys=t2d6IA)Y;cAYePBKTr{lJAN8UtPE%%)z;VFcdy+Fsx z3>4yb+`2~Wp~u6N#lb6PqdcXispv>JU3o&@5w=pRb^Uk2Dn;*=JZoD%M9N<{3rhH5LJ3`LlYHvYgt6~ zNA9OHWcS6ytXYR{=Hc!JES6VcWGN3nTAcdS=pt>lHI7;c^QSV=2}h{3Odrh%S}x22 zk@Q_<&fhHm*oeefA*}5~NKYk501%#SOYDTg?eff60oz=GN;7bMqql)rxZReLw1=&? zE2_EC)HYwAT6phmztu1fr0rOuyJ0?PQdR35WGJX|De143$g>rP4COtWqW`g_LpHXk+J%$}Z!KS8jkmpPoOH>ZWicE_65YWL~nD zHv)me8uJwrHM{4fEqwONV?FnZbPF3~u(&xHZm@e=o7+A@ zE8J8oMNE>YRgUGRSdZc+Sh`zLwF@}bur= z{j6+rjje3Sc z56pMouqIv6anF9o((>AtXf!Yj3z>Dgc#!IqA8PMyaLGuC=*vm`kW7SYwm6M|h{1C2 zo>=?T!tR@O7{yLL(rYc8d&xI_Mnt+S1Gv>3zV@;ZS9L9eYL8z~6Hz86sbJ0RW&VMH zt9aC`Z*ZxA>w5sFUx^1lU!HsJ?N19$Zo86NNT0)|WH#}WoLDanYS5zhGdD zuLam#Pg4OW-E{@;0y1KogL<-`LFVkuAZ2bLC}$<$;|x)cCZUG@gl?Q#LvK{pToyIN z9m>l5)3?F_c+uKnxIg=kd?@)dtdt%;R$fqxmKA-PVG6Ld}9He~OMC;K$yZM8x1u%ns)hi=r$WJ=F2)SabJWu0? zR1&Trh$QKul_jo8cOq$^r!=r1;7k<8kAsAN6dC4ml7LcqqJ5C^%Xqyj&2i9u z7>Fpo8bZ`TMcUOBr*Pced2$33pR7pT*j;w?kb5Oyc8^!+c}Zx#%lU=mFm9tJGZaW+ z{zc3R_NKow+{I7~;I$~hjz=qLb29Lnv#^R(7}dJKyacX(djSx(;nz+ z{t{Y}{u=OT8zJ$ffF=hnk}LRS%AN$6B)cx)b0{r|a!p~WOVyVTweeDVY+W) zWtnrMBoPYo*s6cx-qMUmmJCTVlq=hF!xxjHCI?E+lOn93dhJ9O(7nuD(l;W zFHnMHG#n5u;%=G=kmw<3u~-TUq`l*OiSSQ=ZB~%x5n+6>bn-;<*{WW743}zlO<>4> zO9Llvy2*jku<6EB5Ahf3b;BSXd@>NgXA?C~?4zualQ(yO&0wifO^KR}_{hulj6^W8 zC$GKkx=z)ybhRC%Q>R;A^M7~8hYzC}8SM%XnCF)pIvQNfI6xsW2F=M^C6DY=hp~)l z3^(w#eL+1EzfMQ*dAzZjawZ+l6ia@lm1e{JR4e@(AlFk%bcawy5M6y88c&_b6f#l7 zp|A>`J2u1DklG-JUin2rv~Bwk&n`bjWpJ?2>MiECvf4m4gTeBRjUcTc^>XwwM|*$w zj8)1&GG#kkqInK1oi{ufHL=~lr2=PFeoa)^lvgr=n;1u5tegA|#>z*N98sszE}+0@ z5FEsotpto!JfaV#KvD1?I0VpLoq{C6x5Q8q#YCU3C)lGnY&UXFAMo?ar9x(z&OPtK(Df zhqW88IPKqV1_d~+=@>zMV4mWPy-xHq{C@-mKEnpuGnQQ?OX|ady-&ykiCq@+Q(mRF zDq(Vp`er%lmX2g^p-Sf=hvvoiNoVb=2TRV10YWwy3IDeVdqSbvRv?2e)SCyh$K6ZT z{kenlko(t6*iF}%)QxTcpYS1v=!{`hJ|=8qn}1m*cfhjdwKQRM45c{7S#pFL? zf#_12M{et2B=D`tn&F3i2bl4B!iZ9PMvBF&sEQ-;Fr!wh@b60*khXx5AZjuPhK8_7 zu>+vpGkN15!bKvGs{eO}zK9t3hcp!7nXwX?kegk>j5}u4t{pS+D%)q%}I$^2q;m-<`tWIp}9^ ze$q@N_;9dL8#x=^W!yG3R#ky{N*Lf8mxku^dPt6Hhti3`${5OeUC84zkX@3v?0P2B z^CbWfAsCO~K}~U~1In0-cr{)XZqYLngm&Jfi@^29o53xMLcgY+(pHidV4Q;%FOa_X zx;?>P7{;6pX~> zrI{XSgKS-xh!t)xDhv2dI5qF)K$c!F?D~f#cEOp&dG-q}C3bTuFvsDL2P6cC&*g=B z1G)ItJ*+!b@kql}s?mkO? zK@8*OdB*%K@<4Vc-aZQ~4rNGHHKk%)&e&Hi{! zdSCXxW21@mV?pfe@v)Ma9mqk9*pgsz|rtD?Wr9BLM)`6kh9;T zs6^BtA*cG)%pHGASQM7iDQ*oIsVIe@@lkzV(cmR=w`%Qkcc3IjG>&;r0VvO zD4mC)bx6X|=$y6Y4E$R(3px~^Fj+VNDnX{kZ?CeBGNA){iDB{O4Ls6EIYaA6YZMC% zYlJdMuho3F+1RrfL+4^`72IG%Qp0S5f)Oo? zLe87Y46Oa6?Bk&4=PrZw9DxUX<@0Jz#ylBxQYWSf+~AOSm+IuL*PwNN$1B;f{9`N{ zzNW$Gru{MGRA^C4V`s6uMP;=B+7uIn+`-wuA~*{|QIcq&5ri?)p8HI`$fR+%NUccH z)(&?Q2`>xuilNS|K# zZU(BZA2cVoo?MXtC^^8}iC0()p70~?EcpVKP+P!3wZ7lFL#|SPBcx?gig+N?G;Jo5 zuF>voZ9t<|Xt9t2Pe|Hm&*`T;tN@C9{WEH!0Q9qK-mQ6^p3@9x=5@YDN(6JBx3zXj zkRDAF$D%&l2)5lj*12pKNhdh+n#I$dfh5oQX8$r`%K4l>0QZ$N)3OZIkt+>>{dfHWB+zrOv|@n=4g zGnvwz=QvuClkDSyE5sGQYRQ(=^E@JYZA3x`+q7sKCG2qcD=STE+jF2h+&q>-Kx3T8 zp1EJLeWB0UrIO%tBQYvXe_9APhk|0Ir3=i#!P)Y`Z@ykoxd6k6_+K2bCvH@8J_kq& z+J(+DiZcltxPY3=iS3Sn2L(fk?r+lO)nMu)1;L80d0p*7f;Q_St59FJ4$Rm#Hp-w3 zCni(B7x1Pwoah0SEN4y6gi@R*@5|nn0HMuZPTJft#7IKkJb1Wedhq74U|2RWiH0dA z@!b#-R%mpWT9Fv5Hc2Zaqp}nkfq6jQDzyLOJ$L)>l8b$)L+3JHn@2t*A9{4rl8)!} z&335Qk_aH?SZAC+?z`FN>r)qK+GGzgNYR- zHW=bm5meb>O?io_q(kN2pAakn_Gzrv>Vf|BQ=v9t$cuUDz;koPks03CdPv}#x%{<~ z!gW~zlwLi#T{J}Y4;5?p>?DV(hWuPX#V8XTWF7dcmL&+2!5qje%7<;SR2e*}Zf^hF zRp4WsfId;92)(GxO<5u^kET&9FX`SiX{hLOG$xrsD`}olx)?iN>8ZhC)W#!*bLIio zPa7sgQ>rAv+=(QS2Su{q957Jmmt2Y(8~+|pq=mTmr#www|I%z+cZT8qXDJwVv5`Gr#Z z2?81P4z8Ss(#-!cLRwKo0mFcl(k3z9CEvgwby5+uR0$SCJ8vcR(+G0;#w+C0ZA1is z7=tJOUQs7cAl|J~2#DRF*wJ<#>mAcuK#ui-ODx>D8N~1TA#r;$Lm;x8Fw>JqKBivTjAz)pNQ(jDEuK0VsD8&V?dKYiVYFVaSG)WNg zRRyOY5M!Yw!ayx8e2U=hzT|8Zca9^{?^)LGPC?&H-&Uo6F@iOQsNrR=ZcgjB7dw@?+k{c2|n*PsC;a7)dY5j=&|)0DzUKB69MWE!+LN^W4)h>o1L z&uWKVJF}F>!lI!b$rEQeu9{%HL*@Cspb^PyzJ1HBSE!q9VE2jr8HG6%4hRlIJYd5Gs0C zW@ly>{YuZ8xPI=f9-ke8{sNC>iR%3$t+zcH)M0gr>V^_|B;p|f)AIij$Rq$|17r2W zaexCK&p#tqYqFXaJ^>|E6sfz=%D%86K3|e1xNVSm^MO{bbPM!XhyQty<3ms(%(uqM z@DZ6WZkKBeiEkKCyy>a80gqN_c$E?ci^Bjzu znndlQORi+eAf}+|jw)^_rq)m9^J1Befg%(<5Bi?=s zGydUy%AI$bD{xaS2lrv}C4}#qKR@4);48-7h_&Ie6@=BJQ#JY-17)xMOqK%3rE~0` zrxq5SKUP840x#EM2ps@;Z4H1HHCC%84l#F+@_g2x1>S>;h zpIIwdU}(uoNj3FJTDU+1KeBHh^Shm+0^;=`8zxn6nCH$;7ro=09#qnwe*U*a_Bu9% z)JP%+QkVb*A8odW+y*bngSYygr)Y&yg>l-)sK}NepJGRe=JN5a)io2rsoO{|ifC`E zz=!_>|8*(2>&9Uf-dwe+GrPHHeqV6yKvT@F);4Tif@w3uRC8GA{{sE_HTAO`EhFKW z!xh*n`BpR!u)fHNkhB$c+hj-zsIsCPr&x!L!T+lVO8^TrX9EPtl}L8iCW7(mH=`1j zYt&)Fh?>O%fL_#R(HkGzhtv|npSA;%Qjo)4jxRP~K<<2|F&<)G`xOvom*Cr_hSgx=gv9>F2O3t6==qI=HFjhEOC~h^lurM7Gj#nuQk| z>P)D%QptkMkbEALk3Uo6q$A@{`<-mt;D`869jog2oyZbm9V%jxQ3hiSuXx2_-pt;bAkf;03~tgMU{Qjnq4*j+e*kOu1}1`KTwutS>u zHsw5!HV5CsQE7^`-_G_=szQ*+6C1z)tKCu85uk~31iK*DZ36SHnbg64Z`#3|w=&e< zG^}v^Y$5^uQaufZIfd{vXfhNk0P zckx-C#mJo@zl^hS^i*8$y6V|W>D{|BTQ3qEj z=zlO52Xf;@S|;}w{h4iIL;}AokF6?+gG2C@ymRRqG$sG7tH!I?huyIpLd8j1ibngu z)Jf^X$*nb0O6nnVB(d;#7jKB^oGBVO_^1we@=0~EBUC02`*SojJ6hvo%UuSn>i2_6 zlc8XTPdl~i=5khSFBJTAq!$~&Y*yYQ042zOAfb*Iq?c&2rZ61s#hA;cBb%_b7QG@g zE+lm#5T8xm4+hth?62ldM2XRrdadsA4t7xE64h*-^a6M_@t-rF`;gKfU9Iv*R|Zp4 zx+-=2&hNw9k&lmww;Kgil|=Q)&(sMa@-4tTb6(EqI1MgaAvl_r0Apap8(=+z1yAbJ zTV5VcfPh-;wy?o^g-pB&;y-4fl=>ge+F$-4rO>}os(F&YWMo}$+J62XOdZdLGp?G* zF73|81`m7l+JzgO@+12JK)P^SDJOx#`XGQr6amW4qtK+wlW-rkjxm(`Yka)CBGW_z zG>qD7#p;m2Z{0j$BsG(IB09qkA&~4wg-3$8Ddap$gMF!KV#UO#TLX{_k>SO)_@>O*lUED0CIa!79=?HXaU$vkbxFO6 zv_PGz-rS~UdQ<-rny*f54r^*6pmEzD=Tne}gjSWUf~vS+-%Gz7gSBCG65|e~g_x&y~qFq8WeB;2$fM#FxJ zt9^XsJvGd+woz%VpNH&GZPRz?h|8N=LZST54!B3lfZ#YrS^II|tLJYdMJ=X6or1ah z?g~F%_D_SkdKp;>H-jP+r-!bFstZBiEZzc0sviOu?Of*gq`VdSXPNDM5u!A>^kjmw zkcJv^$7mh&juzlY{PbDLHG@rA%h4I1&_izkaCQJg6#*eZVIQsF*r$zXqd>mXFjqn0 z1<1Ql+E_MMszpsD;@&E=8E z@U*LUJ#9mmG+F>)9@OIu4jDl!z4CP4kN~TEQ-@*N2A-T$tM+;o8fk7O{@<7`4yQ3+ ztU@F7Ux!_%39&=ER0p-Hv(F&>*T^asadl=JYe_lzFhxZ+dL{@2Ka$E{1Mm62P8xkzuf z`0~0^@NPPKoUiQ7>k~dX(68P~j!ZCF0j!tqh|C>K**&>3YiM~Gc(&XYvU?N>E+^%V z@SwpUnNB`~5>-~a&R_fo@+EgH0$V0L<(4QJku#O+Jfx#SqN#95eoRdtV%+c6A{0;Rj%hHmZ*+@y--xitp&`E4jFm!nfNqzu_4TdQJ1fF^zFzFHj7kcN8 z4>&zGdao|t(Ai6>dGNhqClUb_?}!+3d>G44&c;Q|J<42gpQIDu@|>66ik=D6cv68s zz2R_5q}s2p*yFMh(bL4oDnkZ<6_MsU_~Z$f>LmDhRSD$H1GC_t@$e@!Kl=6)!;q!u zIcl8fI_H}Dgd1HoOh0~3?c1Qt`gc&U_H~@arHWCeUjpS5_7||6$5}U4 zvt)$W=!K3cps83tLxX3!4AV5o724DZAf@4z%NB{Gc(3&C4;v{;#0pAAd@W_w{TYyM4 z1YGlU&Qe8aR@?~ieHeZac2Pns!=zt|F7xf9w&Bwu0RqIS(ifO&`<5}4|7Tu=FIM(V zNJxlUe71n3Y@93C^6gm?V(2n2OOw$qSb^fAOJig49pXQkZ zD;cWeBjJpHme)gVgQjwry-TA=vWzPF&heS}?IEv`<7q)^ij`vqJM3Vs+ZmobjHMY1 z$}VgEl07h zT2WTZts=?~Y!`-5p9E01@b0IIPyPl^rSdeBo8VV!uB1g{>fq%$EX zwC73m#mKTdVo%*3Z2%7QW9@=e?2N(DJ|^#-Mj;)f=F8v<(h>mgSofV}vedq(Gxh|t zni1KD#!I)K;0=Ah@ahhH&Rg`l!u+O#<6=qwLt)(_{PZaix!`6OpKO?bO+02z>N@nU zFg8-ct6n0=!y~K^?u$Q_ccmNnyRA#8n zX)|(KW&^Runw)VPjcV#W9PdA)3&mWdwjdpd_GBQVBkiIZPP0H1Ws_vg%ui7FEE_B* zI!HQVxoFrT|J_0JaEfJFDGam9lr@)_pw;UoC=A5Os+TZ^WtR~)21IEB?X7ClGGf*= z{r^=Cbqc&#`hp`FmdE=9k+s_a^FQzw>zNY`^AspyWoBP-_8}tOP`7}R87ue<8F^H% z?&=D>Srjqk>>ZS!k6*|5o6oKLG%T!fnT}nLqDB(>n*3Nwp6XG??gP1s;{!~d7^5BV z7-w}MaM-^wCfD@?S9+1xrz%YqraCu*mDWm9UKHnOA}f8XHC+G%KJLyF7*y zd}HUD%&1>PpCv;hUA}MeBYn$rhD9EsJ%kKzaCSj?=VD>lx0*3AiYW_UVI3Z4{{sb@ zn$lZPwpwNfBeQz;wS+{ZZ*(dcaomNO>rHu+(SI_3MmAa}7;lPK8TCP0w*Yg+LE_Gd zdsBLAfDo|wDEp}7CRUj16BJU;C)bbR$8ro0E-6{X2Lt@9gPY?U9jJnrdf8>mjG%s= z&0MTfM1^&vHVA1h;|Sd`QE+2gM{?q*k@v30b2T|%VNyEe3zWn~dyIlln!L{4vo{Qo z@$q>|YKkMOxTi4096=C~FJhg3*jF#o`9#+lk?t+R?Rb+3iiM^TATlW{nLL1DUG}ib zU<6FEUNuj?dmBLE&Gvjw+{&hMHPRCA z{)e9wRD)d9$u(gJ?I|id$qFS2&PJ{Vred_cjcYK6ELQ+m&9#r-Nosr=T7J1 zonq8RIR#uAj-Xw@+X2zagP2WL%}{I(MIicukX11;KS^8^GZEGX>jga~@4o~#LYr#& z_p7sbQgw?0))}@}Er&HPArfOe5=V0bu6B0FW}pZm2NSvWEc+Z0qNsgQa6$56Cs$?sN<2_rg|?!sY(fzz*kL9MwH|Xyn$P zxt~lhbYXqeOxtpEyB*yZtUP(BbshAh1fZ;s=66!%4;h)Jlg|!BP$W5*)nM{#9vM*4 zt2L!r0cOW*E!}o{E{GdHDw+<;{-~(1Gf%|4+T&K4E^5QR=KfcxlxIQlS$~utXN}g8 zHq{h~oHBBoi;2!8@^8s>mu6%B{N(4ZldKRKgh!m@5Eyi-0DS^eV+!AD#C5LijmGTS z>_c_$Y*R%9qi*aCcJ(r0C5yBhvy8kO316EPialEpnI&Eu?X+r2O0PbKC5$r!1BFcz zg0OD|h-RDLGYxqruQmOH2_WbajIhS%@>69vZ*ov_{7GFpWZNs;nh$!)V;sg&o#;LV z2*m1ik_&Tee(+EAZbu8$&_m$$xFpQH;ou%TJZbv@h%bU}5toOIAEe+8no&uvj|C~Q~*Kn9f7cm9i+(jddF_v)jVklbmL7gWu5r! z}Y@HlrtAmLruk)Dos23?nY6$MC)GL)nTkpf6rfP4g#b#Ay)XQM8ohxJkkMB%g9f$?&AZ)A zwr3M!nuoVnI=SzjI_~GAPINk09g{W(S*4Y!OW%_2j8iqIXE9`>_8gwRFH$)%Nmlp= z+uV1Jc+$ah93gksBQ~g};m;W{*{=FxZN8$Ll#=I!psmHJFzwKf@szy=kq&@l|a zkROTMTV!QgbU+?);XS!Lep8rfs;w8>>hZ*Y}bH5B{}96}R$LZW#Jg zZIWoQ_}@OW&Aad0V6ba}pCcY)u-gV?dC6b42CDrGS(NPXY9myGkz0ee4L3Jc!NsH} zbn1|wr~y!(>Hn7Af8Br5m1xi3cTBtoi5PmlnKkRo5I@pCRjkfM{}bwiU4Wa%KrAa? zsVA8$u^M174&QUjF;xPF*k?peZHgEodoK=s^mtFrmRlzgUiw2)02NX?pm6ea2uwu= z9zRKsEqJ5OUVMYY26OS3tc;1+A84jAi#t~}YA(I!Pqhy#pB~vR|0F@KKglFoQLeFB zaDqRK?o2{@L$6|k*OlR);#0&0cwehk+Cd6FvYE=R@6LlW{*T%QI9flL@h7J{7-Yul zp#QD9%2z;^aOaE=r#CWp<*`WD*Z5~whx&a-YYsk%2L^J{SSKsVxB>(;oT8}tx#@Lz zz(dp>W(agbv=B<)!QRXq@-Gr)&?ymmfYxFb3HfA^9@wKSSycOR&dz`97OZpQZ)moH3`t&UTZ0XZcoPFybR}fYdatu5G$PkGVW4zoxQ$l{$AKu_GRGa5ZOObI}~r ze2}4lwN0>rhgd`V3a=Y_=kSnRdMDaXRv1?j62)kpzn~)zFb8hgTIV6C*c)N@rA1u4 zfvX1KD4rJ(=h6oV@1uV_U>k=k#c&p5F$M@!g+>ZHq)vJayi=MSe!7X?3+H+tI1(T- zu+H1Y3G^(}u3L=-;zAmDRWJy19x+$6t&H|2JFA0;X5h>kT%BE(=-Q2}Q*O4@%zv*34p(V4ZkL zMl7>t3d)gdo!pdrGt(0y=VtW%dX^=XdpeyrKwzYc(0Qp-g-6HGjAtH~op2dZ5ZnN^ zqDwhes^Exn!{qPAU|}n}9-D=^!=1^MUG5XS9Rb|VyBes{6#%?4&`wF^DSi%be+sZL zUEh}aralz5TBJ^>70{ih*=ebfWT+$+5mZzMi)rCk@mAg`X8uD2`v+p-D((jkDoBKE z!~<8_U_^_zw5~|aBL)37PexPTu*iiOP>r810`QwluHlpUN!pUPiG|$Xm$-Q_Kgc9`=oa4PZnbpJ$1SpgnG@>k(+g zjp;)cf82oerTBaP}j7T#Xq&eCH>*9S~UFbmqJGWJMnVp%lqQ z(?O!^cxGE{66U)t3;Sx|Bq- zd?ms{oA@;nLc<3%9Q9m2smk#`wDJ7ZmD zwvubC)`y7QSEb^`iY8P(w0!Fk%W<6)eNszafWL-2C~3p^mXr06wwj*-G!hOfTW_wY z7f&JHPB8?CB4o{yUoL5fRH%gwB@4x&D9pc47a-t~%VuBDPxf@9e{KakRjJ4O%g-mg zFtEFT@wb~M*Z<>~HB}1C1Vi!H5lVc^=`ncUN)kI48pSFDe!vOf-_o}(tCi#b#cc9t z#kED847_?&jCdhd+9Hr1DOP2<9`o#-a;a-(9w#42#I%^cA}`_v+%qH+%USNSECddF z@|TA@{ju#;UD05?_Z3CrS(bsu+KXT$O#Y%9%g%1$g^5L1J+1$nZ)Ci6%3RF~Ny0nQ z@Yjen@oKpp$)jV=ZEM&ZppnS&q2?W|N(ST3@4Y3_zQH!E*Diz+X=YiJjk zHyX5KFbTT;)1^?yHW}-s)!vc%N_7LeQvnH99h@}2G0R!lzbnVsD9#&_BX>7hI+?cq{o8I@eJuAK*6s?+H<2>PR}oFGJ}CMg*GE9&^ZDbV zTJ94ZL6JQA#uIt;>N|C1oaK*1CTJj~<4UwSf2B)Ke1lrFeDX@Pf@fbI7+UkM>VGRU zCef1lqDCs2gddyg3BJ9i!K-qna)|_zonqL_S|LDo!{X0-B;z}GwMm=M=5xJ5;rxi6 z3Q9o9??(!$;>MG2$cqG1&E3bt*mP|oZ7jgoQ-3uX=j$gh6-WDWye(5h2Ny`rCrEKY zF`I(wf!6C~6aBkuOZ%)8B@5|qn9e^{eNwWumu_qw2Rdatb)&&Alo^_ep?*nb6TG+j zY=*MXGQ#Bur;Fd&ut+baEqLc{L6ErU>M*liofV?(YdA z=6knkSQ2h^(>j*c)j?9znnxtIr2(d;Udh;LdMIVCpD zn?nwCZ?^%sDLzFOzb&ZHAbvBKn^T&VVTq zyRHbp^<01kcgPf|_uE$(I^wiN%^Zs?Z-@$$l&=N%L;HZP+4!GYBb^LhTWGp2D%zpw#O|z?CQnNUCy`C zGWOebnT!Hd8XqRbm@9+003sZ`#{J`^vijd1$@%&fS?=u($VyDCmVg!kg-ssnbV@i5)aQU;Qvg#p z1GPMPtHG-ne(gBtHjvRJpAoSjkk|HEx!#N0F#}_rMtu7KM=E;69Dlv@rz<7?cp$D< zwOHZXKI?1aYge;OI1k#UPr@8$jlcwGaJ1I^<{naK?u8luhBEuo2Pqt&qTPJqqiB2a z53gWXyBi6Hl!MJ#t`e@)PalV5mM|DImVbujglGmjDQ<@Q1GA_(Np5(>9SwfWXg;z0 zXVa3o1G7or|8}QN+Etl}CkQ^>6CUyT>WimA@6(_Iksiy;93&X%K=;8BB*sX8BI+s3 zt37XGB6T$Fu(jRV<^B-AVOBXR)1Gr516aJi7E56f%os0$$(bae^0s z-&U?(iFRtmFS8pva#KL7V?&^gn7u)zfa$e>eE0X5EvtlNUK~C=;y&!U=52S7QOySK*jagtKrURTIU{ms;92@?Cy=l>Quv+!E%y5ygtq zQiOL}tMYpCt(L1#JdM1KK-JJe(SyR7y=C)}XKeE?=4%}t!EGaOG~WYNnENmom2~+O z{@Hnbd9ay_YxCM-r_o0fJhYa9 zfaG|of`^mYhsheCJ2)dUp+G`#kNx8`Xwtp|I4ElAr+oT{0J(Z_@mbj}8St^>U$eA5Xel4S?}ZHu9~vDpUP1d4XIE5y39t)}2;M4& z$a3`NK6jxl&4)5OH)TV4F}7OS;}x>vh#Xb)Jc7}*$vq01ipmcQs47fRpH(?0?0@idh!t5jc54}vwX$gnAv275B3PVM_Hq)E8YMdJF206ClOS{56Z>#JU0DUgXg zl+W1vKzJvg!Pre`S961g!;dM8kbz!b1^>jlV$HW7?=Qi}c)gOZrLOl7QE!Gvuisq= zhGw8DTf4p#0NcxbY&fPHHRt)-6c$HJFyrs0>lO+b$uLk4oZOQ+LU~yp$Dyiw+(+4+Oz*&lhPJfAuQr5ZAng zk>L;94bn@c!B`#^rKhnXG!?R&ei9|difKo z?QjEe2dGY+RI+rK$+_iQ?T1wW@1|Sb?q#W`2}^w9@?8);d|p;(ng#86Q|c_kqtmj* z0(8NnzF=wvQs2B_G!`3+T_i5o_mj$?Krbv|G0*sm^Swfu=!E3#yqZlI#%`b0VUjCG zPGLVI`B`OlS*8ym-Lj9ku?P~*bzErT6_rfjpk#T5aaP8^BJlox-X7|xUY$jpsD+eP?|=<~%Ttrg zV8B3?QD0u%{ajI1!)=2ckoySg)Tl<0E$XG1Cu=va{xEV{I!Uj55`WZY7j&!L5`N)= z2snrw9CHFVzFl;xq(|?QWmWiSMnlCH`PQ(jL2Sbx!_7#Rk4J)VJq6i$!+zt=AAD^_ zw&56SS&9vkqMl4_HKepN?=Vqtap#dj%qLDIE|Y*aBgOIKIt>xGTd| zVipbob`zB-+3W^9Ju_WrzlHj{>JbS>X7cltxUF4?`zmdEmV)C3e}(!csz;^wy%ElK zLyN!;60%2)$K1>^`Y8>)oRTi*r!iDufmYF`i4G`hFd8n?VNfu zhDY`wh;i-+^1HMHIU#8U*0Kdr$k*#B2KtW?1>-#9^%yI zP975o9wwiWBnuPm3)N~A+GW#Efj-jmvIM_pz0}rsF%h_c{I$$*Z>K`GnTaD zj7&kZk$ou;&;_zEcBNLH1XacIm6pNkU=!9HwBp<0JK=kpMEHxPIE(^^hl(|fUF_Zv z0>GC?ya!XUt$a`Vp@XUj(oDO+b23?b90Y(Bo63t0#GxKA>8!%$9`F=qH+eHURSyKA z)4q}gS#{rS#F{TZb3q-338KU5-zGKZE~YmCEbv)hI=a8zKulg*62LQx*ltGhS%r(% z=%-c}1I5DeI_D~p-2Md`;AQb3-kj{rHNc{JCX5aopmAeTiiw76sWNdnFHPB=dv@)Pp>ZE7uGq ziPRQfDKFu&iWQdaRM`Q*IA^6DnLVT=w|ZOpXjamns$`KSq*XP?Ez#}>E-?AKE;vXO zy!)xfa|Vsz_;&E%NuAUH6bPW7rvU5si=7iXi5T_v<Gd+XAfkp8qe%`hO=vZaAdIzO@c!KJI|_^=W(A^bYC(ApNe`mRRj4BQdnW>KxS@ zfgoTa2V+$&{d)cY3Woldw2kA&YC0zK3maBhkb^Gi(rN-zWzv*k;1@4&3Tm9n;IXjX z*Yr!Mm49leVt+e-le*gsPbYt@A>I zuM!V`=uF}hX<=)TkT8|x%qJkHdUEQ}O+IfPCU>L_H!<%cPH#1W3c=zIkna8{BRfE8 zla$*P>1rjQ!-{tem2AoQ5%Q?Y@iVS+qzS-uO8OY0%E4megBVWa5NS-7U(g*m@o?&! zP+*r&N6;+2nNI2d$gJJhG@9k*f(_4q1evay0D5m4Deg&8 zT>lr{s{OHiu!XQ&0_hhxlW?NXg@`RwbL4!+hw&`DSNY3NFa*G8Xyw@sYQqWKs1=(M87E)Lg zjE_w6;#pyO?Y;uwCVc@xk>v}0+>qK7jHb#Lx%9R(J06lAwICb1{&wZeEr-pxUw6Cx z*ZSwdCK2+_QLcWFe1TGeu7~d=GnsZQvTvV;5q^GUn)yRmj(laZK+f%{P!O=3xw^*0 zsy(8@!R&9wxtzEXxt+^Z4#NPQ2ztxwQ>6$|1QPODhUt+`D~6YzVsxBd9zx!Oqh*dv z3#YNQh?Wg|xHtYEvRNY*xm_b(vruCF%7h!;h9aT(*pZZ~55pA-EO`=*E*r+W3BvBh}Jq zd)UVYYrPqJ=4(iT<_@Vp%;^qPz5FMQ692cs?%m_oB;An(w*uf`Tl-gn-Fz>% z#g`^tKBv`CzLj#iHFWH4^r6JL21+%Hro*fEDs$xfqE3qI?W0a^f%4q%1?mj@PnZW< z=I8zFYxpW`@5ftj=V+5no&jntw{Z4RU}1}oe1<1v+oWpw_%fLJ(lO||5*aX3cUPv) z`PPepQaDm&+Di-yQ~_C#E`CDpUDUH`V{aAa>Iv(+v_Q(gt!GQaNy+n&h9Zx6k<+R` z#=tche%PdrGq*u&J}9ews6jC@6$cbAPe<|8PcW9=!0D=^{p>EASW^=FJwV2L}LYz-b|M}pJ6)O|8VBMa^B@2LUI&r(Ibp zQ1sZK+9?Chn}7m5B8vKbJ5J%qjY3v+i695tSSV-X_gQuXBQg=Ym3R@qj@V^ne-ww?N}Xi_Sx##J*|=`34um)}rd0 zuEw^WgTq-b?R7n(Rs@v}oN7a|%x%}kt62lPV2mKEX!sd04@r96Er(Eo7@trT_prAA zqKJ5-!|sz)L_wLbZ?a^c{mH{AE#2kS%Vu`s0`X5HA#|_#0pOux$#f>+n0=*fYF=Sn zysKIwYYk+r4$()hY@7SN&}zylWE`Y-BhYjv?#O1f>X}ps@^e^~Mwg&FzmaiN>8}E* z`6nhk5~&(q#fAZVo|YE0tf!lLdFzq5V9L z6X+Y_Z@tV9{)&?9lI=$V-ydT^Q^6AU-%{TH$OQ?rwS1nB>LDB9evAco{$kJ3NsuEnwGnVe(!?B+iS6FO2NCzU04mKuY#E2}>)Q z#d3TnuM;+}uUyK!^U&MG17E1zdwtA}ekz;8 zeTz>0Ns zA8h?U**|5~v-0U+p4jMio9JC=(yDY^nLN-$HL7KR10HcZ4KnJ|`iTWcRI zj2Jyb{(FO&n&F2u{$xh6D$Vnvcq4mOz{*?=#FN5<_q|;if!+7)-(540JT@x2frvi- zC)u_Y_`9I-LaD>;zonVR8K?wAp{(dbLR1Ho@#Uc8WPBuIX8(+Ho=T z92_qNfU<+v8#sKep0-i=Nl(ULzD#YcMGx(!Mfo~$*sxT_X3<$gqPPIC*(}L6ifCGli3!x2GGA!ym)~0@x#wBY8`bT-_Odg^JhA zmHi5%dY*v=V_D3~ggCzV$xAq+0@s4ys&CA!(P)_Gg4PrwF~Yez6hP*`&d0~O%DI76 zh{i^#jMRB4HBZ`tir1Fu|43TSwq36a5p_VuyBtI9`CgXtO#%$M1pC%tc>N>CGCmp$ zOF=0*t;r1Gdj>@0nSv%XWx77i`W)SYR96QsRDPveq5`! z>t=XCE|_ebaR4xAr&sXAQ|LVoHETEl9jAR`&wKXaIC?^4dB7RhW!vfiP6w>bRmg4T z8L=M#3c_RM8k;u!iJ3tQhsW_KNWeoM?9wsg%xM1-#iv)LJA`N1A%uCz`Ra3Le^aUV zJ<+^lQiuK7!x=S&Rq~MEoB!72x;t3$aJh06K&zuAw_fJEy_BR9y6}iU9yQp46Ay9A zk2HmSnbgu4-WSgr>S!7y;tW|i&5_)9dy#@tXmWL`pnHN{#9|k4yWo^+=86{@dQR$g zg(u_J#d`lDUakd#2X;!_%-e8KgGa30-yX(8fnBbDF679K>+DeP!pyhq!itA)&Qv({FO z@^lOTY?94<3bPWKex3BaH2I;c3F1VOk6xeaADTjzP1;ei$qr^sB0oeq1tD9n zru!R44W5IeZZ6a73nwS#!m$?`dOMt_q!#EZ2Cf|ADP zf|pKBld^Rp2`&69a(JgR=jBmW*B6X|rautxT*2w&!!@Irc(qLnED$?`j}^RX1HF%AlPjeD-fGVr_8FO&>Dn+ z!Af-5{3BN^n2Vx$eAXL8;#~-6gdM#f}? z^Gm)WPXO}rbS8FCdnpd8-nwG0D?TpW4=o>e3lpTc{(cGtj`NQn$mXmMK%Fz{8`JlB6 z>dhg)_5|<|R{Kc|(9Ol^jtJ+wXUMBuw(vowzYi{y_$jGMou~^1O~>$zF`5k{RL2I1 z#b`!QOW3eIo|K9tABkt^97*?TJ5RdZr0%+1oBlctKCrwCfIfX~aIcRfm$Bd*`PyCjp9SmZ;;o%g zH|*+X%nEH-p24Qf8WiM%QqL^Q%EJ`Lzk2_o%ZiZ9b^s`S&n}iyvzW9u*&^ny!F$W@ zjwXwe2fywL&YM|eF6@nD#Gbhl__Rr-KKhPH^x22`4wP}rMiFiLJ^M7S~0|%g+Wgh!wfLqVant1 zsGds=(8SCG1nBTC>vs1#8>tYyUEyR#LRex+{`1!GZ2WRX?-nfnDf8l5AY>m$7%Jd< z!1iZ2&S~dN95=ZUOJ$~y&={|6=Qd_wfOCHeF3NW}wjo?JP<`SwHxe=vmH@+vPS5$` zz&l!cdGB+~#dF6sY9-3!$3}x8sxDZA%@b?z7l1%-R$ms=WHf>k^@O9^a(l4}RTg~J znxXoejC=VS#VWrSiy%s1O11bZ&$SMe`R3v=ih!1C9!eS&F9P8!(0vBCMi4?)gX=>; zS1m}9cci(@L@9wqpxhCwax;^KcM!7)KPOSoVW3d-%WZu7^EHAha#$dUB#UP@FFM|$ zUYrbb6swwGFrp^KVf51OOd(Fti_hy}V=2+E-ds9yMu^7A*g_#Jquug!x@##)WScMr zw>+GxUxQzF_>6XU2>meXsve% z+Iy&8qK%TQs^Z_$Me5j=1_Q!2%W0WUE&t6f?<;jlGnj}_A`Qh-0Rr^+osj++rYb#P zaSThA0{=$t*&cL99hi(Ff{Dj+57d#<&jAPPR&5D#F6uwdb(ny$T|x|WjlLqkt50r| zS4G5%Wn_3~Y=~TTvTtHYGOfP45`a}WY9i(Q;#T*7KCH)5(W^uSVu`s*b|U` z!I%K9qN2*4x~Q-yl@RzuS~RNe&3oMa4?+aT9H>ZpF87}`O}zKr!cV)-_1`Kdj6aaL z{{lvo1q{Hk&t4MNZQ!O_(uWA;+Cb|}W!n#ZmjDzX@h84XbArOf{kJ9LhFdpMf5fa& zmDz;+EFmgKOKxdAtJLCIUfBj^z%JW=%%&hQ&I|$h3cYtYpl^@c!K>l6)IBsI9Sl6%l?5SU{unyK#-2Q1!KJk3GHoQ9DwzSuOr zc*76W+fq~gyDeajQ5ppw-V7s?l4#lf@tzFXFXvk<5l-jDBC? z1QbgOZ7>TJ|DJ)R5!!_hkDbI>m=R`xAy3pQjL=%heo8QHZp6T8*S@BKKtzwDs^kT+ z(fR{G+FWh3i&IZR`wU3ln8r3C+4zDn>E7)Oxbgy7RK&7WH{1Fj%1vL9)WC@Gx>%oI z;il)30@P3w5@#zw;mR9Q=l-i{m5eF0l}Bo~;z`TcCW|W@=U5s~Zn(Ip_G0xoL3a`~ zxJlpbuZ}YVUF&zi)d@EyV`qS^!y$n5;oE+{tc5G%Se_>%xd z0(#_KA11%go(`#=-?=`1HZ>${rH**qII9I|Cz=cB>mgtC3#dC46jS|9D)5hn7%2%L z?DT`O)3zqU*B1R_-PmmczZY2{s}bMaqxOATjeeQYRX!<;8d>f%dPLN)I=?iQV?atRijxW0+dlgJYpzl=$d{ab>mxNln zh!OOQOjh4#L(VG*towE$)3w%VxIuKYHiD=UTpda42d%&ALS^d^c@QBce^(| z2ez3BDy|JIm(&lmaF*f-Z#Gj>L1cqpN5G`+jJY=I_OR&SC9m%=CCx3&F0o7LwJY_p zC|Je9%bd+r`poXYMa|Qr#c}IQbV-(vviWa;ep`Fv?Z$@r-hE1m$Nzf|P2`@f#-QhZ zz$8?G-0|o57l_`WvOtB@b?ZIqUpu1jQxDCXKFl6UEn)UfUR4{fyiATvF(F*tZw5gu z(V+0D8X$+OyMVUo!FQ1)7TsC$HsWaJ&_B@uK()H`%#`>u(ZU;WMWdL-f?KxcnLHIfeX>FNSa%Q>>oQq0#RTg@;Z`bP2t5d}-F(dvHClaAOA%Zzv0d}Vx^ zqzw$Yn#%X~RKm{`2-oNR8{_~Hl7L^RU(%@h+exuxIlXawBW@Ug!jK=El1cre>gCO3 zex>En;aqC6YYfY5%3g;g9YFo~leas(0u`l}JDco5)IV7@m0MJW;f6t*-uteb(h>w> z;5q?JnLz3@51Wxr@>6KK2I8lNNJ!EmU_dj&HnH!f6J_qS*zo&PMJujd2MnU7=F@7T zl`8HKOs*>&3^6jYlt7*U)WfyH2(VSNvJ}J}wEB#IA0D;Awo$ z@2AgVj)+HpNsyd^3)F+r&+7@5nj0?ABYer}6$~S!G?$LiGkBJ76)-d|N=%Hvv_t8@ z6+zD@AF9DnFLADbB8+gAv_AXo=$k3YSsf&e!w`X;q();#kLS*t1sd9I2^{8^#HCRQ zS5^b@#;JWIvgd(19r1;~vSO@Sff$-7j_$;>AHAtlIZH;*alGHcae821LG(b(4R4d- z^qpUmgdf3Wb5WPeDTn>{rF1_q(lm1=cdaYN%o?7yZk`Q&r2}#Ta-P>ev;bRQ1MdKj zLni?4kJ%_tMb-~d$(@Ci$8CaZ&q*7z>8OLFs6_E<7WMh8vV9qD)2hjpTBxcJ5gQ!c zOKKwUQe63kI&(<^Bf#5s$TT@q<*KIj9zPz=#iI~<#@BP*z4I`r%FFkJbq-%Ib(Z8_u{H4P z0o-c<>T0XWlFkx|Iqvg%IDg4nWCqkxLo>Y(4q;H$oD;Y>MEtkzIIiz!5Oy1))Cq$n zqo&5FM7cM?i*#o@N5rSG0z}pV?{k9Jg!LaZ{xM1Yxg>i!CwO82KdEA&m$hF<`D}+p z6o)G?_ci;V`jG^Ml#V$i^4Pnn$IzK46-W2q_8p4oWC9C?jD6I=rx{cD{0!s-=F>ZQ zJYM~FKvAdflt++dKU(G*-nxI~-HOFp)D%1%%~exUrF$dLw1=i}$*BvP3?Ud-ikZNw zv!~j_U#1g3@=AO(Gf>5pEGH1<#%fW~e=&w5*nR)3dA%BNBfM;0jyjlVJYBsD1v!NZ zl{6W~^%Ls@9rGZQs9pn77}PEC$+b--t(|GH#s4;1BjrErKc?zNM~PO$l|@mH3OD2O50erH$6_{pvc?_( zAGRb_V0!8v9@>rxksY_(@6qS8f8UMFz#;H$AS>zv1EJ^Z7TeEKdYt*Cl~Rzw8!gXj zq2aGs@Eu2DEpJIV$7tD@JiVBsvbT)G578&Y0k=ro1}%}o&cH{){HPc@0XK`)`Ju9! z>QPF9C@4Kqo?QSPtqJ`+RTUe+my{LN(C^8-cK+7YpD;4|R41(nww#9=FbbQ|B)o|l zT|6!bHRVMPJUH4OR#jH~TXArbqBfSy^oCgAh3Pgok|1Lu0XiT}b`z|056Hb7sqdY` z=M(x+@XFe>JMz8qBiGYMrr+oR?eqId1Eh~Zts$Qnw}JMzE5C!-BAM}ggy$;VK9HTU zPN*~n023cbOADUP6^MgR(=HTJ4pZQ+R+&})nHo*oABupTaPt<@3M7Z|k;oqq=wb&; z*VEj26e}GT)mJ`048+L&X2Jr{l~$D3{ekp}^gEMX=2;PFRZjUu&UHN04xA=B4&x|)YV~_ z(z3$KFUj}iQ68uey|l`OL8!i%>wjcR*x4S4W2JRS&k9&-Cnv&Wf3Fe<4?+Qtdg~F= zrtH85W_9NJodugb9Lz7HZ+y4m1=hN061{>6d{t|8&KZUTr+KcLFM>b{=>RAgP||ah zA=p$cCXWM|p2aLiKnrA=At5P&UsX7ba~)sbFSOG2!I!$6e)}=`<2l$C(0_F6NepQvZ;M#2UJUHf`{I z@i?}Z{P&zMmRsdhA55z0L&)0hnKyn@gyxm8ej)S=Io7Q$mX1mw=j?nfeMA)2tT708 zCHU1Ez1zLcej;b=sP^_-CUG{ZjT%{6bZr!&N5aDC!Ui9Kd6z|zLXd=%n(^R8jOw2; z9OCn3l^cQ%#7;?O8MV-!#;rW|_e$YxAK;y?0C0mdiWteeP*MyZ{TEvbqP@q?4bH?i zZ>y?_KWh+y@yK_k{g##Y{TtXc?OWv-bS%N$idr>RtM56N(a)jp-;{lFpKqx2iip`W zI$mWz8m!J#S>Dbzt8sFhCqMo<(}L?})B&twLycq2v`!!op4o=6wQobg8`MiASw?Zh zIZ&rHCTuCdqoNXWcgMrd*5JBnSZDhd!q}-vz%}yi5`^`_j>VxJrq+J; z`(#Jz1LaU>JJRv(@VIyWB)pcqRAf`dxT{(uFf`_pagZX<1TXIgyTEcbTh;)FL^Jj+ zSFHwXGHv5M$53Pn^J>uESN|we z&=Q}Mit{C(M(!1c{@ywfnzJq_Z`Wq=tvQ zm_Hft6gjS=YS+7ze*w(*)X_jsCUA524gI<;)!m5@-hkqaY3Hxv`OzT3XJayMCBE|k z)>kQK$jaV?R$@L~0DYWlDbpd|f<`2(ak9L_3hRtX(7#5@g}ewc$V zW13dZ+-Gp%fE<5nz$9OKXNU|wx&SERvLfM#rSX#$LDWXXvfHvMgu29=`7FNi8n}6D z9UrqtgCzfy1#as1Z>bo6NdAuIzZu%|Yn&$kE zL0EX}7UstXgOOc&1?!n*Xe@!luqO4<^l`(1_zU*oq)KpB?;A$Wueg)E2V z5*ELDqrh12UBmjR=qNq-Pd^S;{~8Nk9kf~%8GP@G52`DT9CAYUcG;x z(tMb|TwgR)5o*HE3}gZW!mRpHD|TrZFO0fo+=n?AREf;9cBTNU%ZX9g77+WF%jo4O zq(|&MBN5G5pIt3*pmXeUbE0DR34+&yb$w7ZC?|Pp1Qm2H?yN^l6SFM$(?^aqfA|3PAE`{v| zA^v!$;%a2sQkfojYr3etv=A#HdzU-8B@972fAA82*CamI#4dWK{Ow&v4iBWZ5uF6W za~et`#g~pXlj(n{|Mbt?wx|BNGC_c9R|7Wu5>JKj{EZllX*QV9f@fLN3p8nOnoFeE zz3)BcHWh_^2$dpNbV7)K+(^6Vcux%bz#~M2=Fd%I!5)bd?e5823~&Qpc!(mlD^9_~ zhm{d;aNai|0{i`F6%aeDP)&>ZUxz;B`)^R`BA4s>iA0>G8`9g*ewp*drISRTEkeJe z1ncyLJ`tu7$fh-vI89G<<YWTL4pQAw+r%{I*Q!ykOT()$6H#1M?l01$k2&Vzz1O<0PCnum*4S)XEOZj58s$ep0OK)g!NIj)a9Zhg zc@wZD;_luT2vw8M+*^K~Q!#tR>-vweIk|>g6?<$YNnEZtU>Dr0(G*z|Mjj#-fYM8R z_Jvj|maCxe7U+CWBOh$BxI1S?CLG}UXTsin$%`Wc_9XOTn!NTTo{V&7{!P^_k6`xJ zQ$Q0dAT!2Py0wMQohOwsDq+V=Es+F#H9->7RkVpXE`6@c``KPH8~>X%`ZqCrTyQR5 z4x7UbL36=_ox&s)IJB%B9#chv=FFASskGqEfo0UT#5(W$i4*^kgrYGPalDR3|MPerogRB^w7BtBjC|A8_bekGJ4lL#n8w4Z|*Lk7y9?VXi>hde@jwnWEj-swK8 zzsrsMTIKqP3$|(r_EFL~JNNnX2wvy$*KlMs>vUCdfRu0x3d*9>TFcU3urI5G{vdnr z+42T992%91*XFpjDE-uNpm1GW?f!YRvX<3Rz0DxgFLj#f{QvSvHLBG_)_UXA3>zG)*yl0p6UoWn1Y5*TsG793f5B2o8 zmPEj;RRr_mhbTS2;bKM+LAgSC?{0EqDanOFVf};)3N4g78GJ1_oxQb~EUfE{jGtW@ zHo1NhiloF|Q^Ri!MG=O!UVHYJlH$H07(26vROI?pdvre43!?4m6`|;30@Lw?9jQgX zwB@0zt2gk1>9z3f3qK`34Co(J{N#$jOHaM2IF|e=@+dL{^?H)L&F>}x9ZAwBHzOlD}z$SY9=+uagt{O{4xAP(T*dB8WD=De8!bqJLF#U$PEg#y9;K~*cq0#1(xOYxc-8(0J^hK@0x*Avc9 z4c}}u2#)fm&cC;3Svd6^u+tgqpQ<7d3HqrM`q<{1&sdu)Jl#%kZ`SvI^szvW$X_kl z*mh?`A>AeJhM>WQ;*OE}X~r7ihowA?&xABaH}rJdR_G%rEtQ0P{~gU^42y<)U|sYJ zUN7t>j6Y@IJ5J(l#xkB=?3FG(l`@Hoc36Ic!-%Rvg#)>9}jw%C0 z5Jd#CMxt7{N#P=o!Ma8PQ7s-*@T}P`l>3i)Na+|lyQR)zRYA0ZzR4af`thuZ?~EX* zi*D{046J@nz=TC1+qL(%?5Zn)0)n+Tat$L2-$Mz*W*u?H8ZmU9C0BcghCj|YeNHrH$uPV)_e2>Tp5XAf%=mQ$+TSDhI8dk3wbb6SG8x@TFEw_m7`f)Tw z;kX=zcJR0#>57_5RKMK*lULvza9_X|Vf}9d5{l4Yof63(8w0I}D1fLXv)i0&z0-sktK{?hg>X8$y~U{5~N_zx0q2@ZIU z^zN}Ml{W;XhcqqQV<-;x9;;44aQmgjTf46!gK?|4uo`~^JFpm9Sj3sxE6^b0o$d1MLMVohA? zNOwFBzJ?g^oDG1dY1SrnP{66E-J+e0xd$M_{4zB0$s!%Y{Yjl6(%Pi#>X^el##-Eo z{;j|O-~M1m-Vt{WO69=qE$2rmQ|P|SC&QhnAI+0Ws-Yd@J3V#bTrm-99*sicqC3|Y z6HNnE!`ojiHse6w7&vW^ZeeIH4GXJf*n~>WS-6=^XW4|c>p|cRO?_^$7i!I7tkTm zBL36j&i4-S85F!K_Da-K^<2lQkSZC_VNQ}h0p1Evv)D5*2iNG`D}gjmyz7O8uZ`-E*wt+>8&kt$5^v7?j)`X+u?oT^gOk^Cw%0A+d_$LMyg$<-*#+ z=At#1Vyw~Qx4i&&YLKAK8+K0!NsWNA7IfJ zjMv^E{ilXio_C-^yF+@*jy4Ow+6`TM!$c* z*q5wI(B<~e`{({vJRlFnH;-z-Mqj`)c>eR|&`W%ks`OWZZt8oiaSlB##uE7(0~(E3mgGEGk!fV(ZVvY=6$v147q z9OT@~sMcqJnCf2t#9n#)teG*?b)x!Jk7)9Z%hP%19mWtaq8M34a(WN)iygs4Y@=iIg^C}t%3LrjB*I7ZH58GZ&wBphTZ(4_kf<@0zV4$58!xNBa^h=XXeItJ^pg`wyPoq;+u%P=2yvi7YZVZ<_E~7@*ge z(;v{d0z%9BpOWpVdIU#elYX_^&G*a}izjek^^;gWwyxUUj+oY*kD=SEP1o3sAFz_Y z8SxZEm9`2&Mm7ID{lX{@d4&@@096V(vlVEH+u33}F>jRN<7-7PLr}pwR_}@P{V+0S zs_cX{mIcd2?K$Ret#MQp@PY#PA}6(Sss+FfTHRCKO?vCV=C2R1<M9o}0|ry4ZqbmJ z!LlDiqAbM1!K73L3Hq?-mGquxyEpd>S?QPoWKBJ<@=(22PlM1y9pgu(6pt8pUJ}SD zoKhJ{?iN#GSy*=%t-!neCTPs$C6_VsO=Y@H^#!vgg9kDnWXFpwvl*0KgG>%=!Owo? zyD5izzzTgu?A3L}z&nh(OXm>ZNY;Fb*`%FtDVbD6+jU-UGrb0`2WnTb^xRrHJw~rX zQrMW1$e)!lZ3gL;pd7Pu5y8=>V9ICFR#ui|#zahCafBd+C$mdNBXjF*A0ZgXA>nXb z2NEF!L4F5yhI*HRuGvmzC+wfYZE!$og=f2hFf~zG3?8s#-@oT685E~#qt^!lyD~% z;6-@$-gucE+IC%S_@&a{HOSlgfu!h8Tu=ZaVWy`oEcb=T^wVqEuuqj~9T_B2yQ%3S zSP_;cLFz)MR=9~DhFpo&B#jjs!aok90n6gFh0!0!>f5Wit=m&&X&vsfOLRt0DGu@D z;Oqqvqd7DUeBWmODQ#_KPo_pwCNBScA4i^rwKvaj&G4Zvx>VZ=rXL=n_uV?bU7k9O z+^ZMuq5s6y=M!Me(O^BaKg07(LOJdEJ}^y+P;X4mn&Z#@uF;KWT{89PIkZm=I%SJZ z+;8oR@RBnOxau_#&^a7mF_?B%b!_Z{4a&tbTq+zWgh-V4`@HrUuLPZkNYd7Uk#Mit zRil9=(lTxL*npl2w3Wf5!)G`$5b?)$GTr!{ zaX|qBO#eoZe|cUk`Agf95#FRdgc+I|E_=&5P%e5tJt@GG=EXkh zeN8VSpVl+Ym#7`LJX0qwR0K)EA&z$k6DgBncF0F@g74{Ez7y3=!)_}nmg0|+i>g@} z`xea@9U(gf_%MQFZM}oLXo68|ruxtt+H;x#zM_UDM%BPFH)*vLtRmiHe}NcUy#1Yx zHn7ujiR=G`)7JekRppeN-$svVAJj{VeSIDPv;(T|pwnzK`LejhNHF@wK;4?}=e9%q zOZp8&0wjNbvlICcR9H6*(*k5{T_Fg zJWnCuN(NAcq1x2?O=bAScu|87_@)28Td(V&4>g=4{<8(mKJjpFeI-<3&`8?`%n|4UIyDl|Qr_ zgvF&Am3h>$9+BP0?Wd9+oFP2|g=X@+*>sz`z0`L|j*0dez^|bwB`mPT zp#%oDTOey-ZQJFSq@(_79igr*@ncKP8FdZThr<;Ofu4n{iX{^SzfN^KMkJcc#gT6k zl^h>eu+4wBGg2dQ`?+8`^-%bER&bqUX-5zy3$!hRE)z91n;^PZARP?^51#7Tthzx8Tb~}b+Sbh;7+?&c zo=T41Z~1n0E*4$y%^P#yVVn!CM-II!W@}DPZf|D6-cL_xR_+3nJ;z2^})Q}-p@053_W?5AptmSqmH1fpaT9ExB*uy>W<)oaM; z`{E#cw%m~GcZpnvkju5|NmyCX10;_&h}GU*G=)mSb3YpBXDpqw)eb*UIX$DX?6qDl zv^a$aAOzvx?;-Rls9~Lpg8=QLf}2)Y%HPMEn9FUCy(H{DcZ}7Ji5?;RH^CJ@%>j_w z;iZ+=sH0ewM;}3@aX3`HsHT}Xs70ZgO^a-VH_Txi7!Iwh>c7)DE3qQtgEq@~7$vV4 zzj`TB4n^4B(7#OudONy2I`V9(Uv4b0P?V{7Wienf+l%o@{dIoL4(k3AL>k(0zK})v zP1l+65fpWgq18$-MV)OK**jTf2i?}4H%^y(X!a8FSh?LKj>?SPzRw@%5(n(VbjB$v zHfp1ep-6{Y2me|4LfE6?7)X!?W~_ zyx#Z2lycr0hJkL`c4jFFL}aSb$sqtO%R`iu@7gt?kh4}a^+_vle-xK?>wCunZKDbL z+1RxECWKQyWZ#3J0RgW(l@>p?VlPNIqEEttS(o8Pgt4S!fu}1GB`CfMG(xrnC5b}# zn5gmFlh?qZ^#lV`J}Nf;V`%ZaK#e~!#(3Byd&^5S}lI!hAUw*%&OVfB0w zMH;`lnS}*4sE!bLvT26`2TaS~=87plMe!SMWU7IO7qd(E!TjwO;d*WiL?)t$JCCl1 z#_(v^BiEr~e$$x7k2W4Fiy|Xx5C$+M>tsQ}LkokIr=F`U(Mr5wGKIxc{@B0EsTF=) zsQ*oN3&pZxw;t+Y`o$;~{-5_yim-!ar~qK5(u(y{pTP|U?%*b$4>?%TqyYEBu8JvK zGp*)BU;Z&#m{Eb_2Ub@8!B(yK34dq<(Z?tR=Qo+Iip|YBDy7f9zI>yk_$Yie#9m2X z1W8GLid|FZWo+%|EZM50#DD$m{6%@~qC2roq+AL5ZxI;qA3x-53uaI9$QYsR`^#=# zC0I?_1VR#1Ys_KKHSDcuXz;K(M~ig10K{DaGO)7<6^@dBNKYCGGOKmSTsl>hv^qE> z&E_b;6U_+t^}j-ph|>o#SUBm#+qgm%tAkAxhk{L+^_dQ+S^;lO(p-^N4gQ_OC+@|z zsQXY2?#y$O6qm(VlK1NYDss1=(**(}+#TyMJTqDrkt0z|spwA@#?_zjh~jz~N~Lz& zKs%9`R=~HlPBHlug37d$`q2SJmLax1|a_rg#nM{w3 z9S&>6#!>1WspfD7WE{hj!xbfGzZ)#0gg$f+^38rJ6xJ!yYYLFhN?CQOdp44^L;!xE zEP~K2M(;ZKo1KtWo{QEZe|;FVfm6bWXl-6b9+BWv&!#WErH zs8U(rN4lk||7j7ibH?^{Fb|4Jv#tHK2ocB1nIBLI-ZAH^e_B@*Q*X7=?oq^PIqb5iSd=DR*WmF9KoKp9~Rpy}n55X6chWxw9q6u0oAAWYP{!YXAjB<;< zQLP^YxyXS{&>Q3f7^r-Hx*8jwL1#N8AS_Rmz-_)g-&^#39RnNYwpSiOyvfQfTtg*x znZ8Pcn|J^S5S!P!sHPYEO%H2n5EIY@gn844ylORQ72g0Bijmx%0I7T)`Lsh_Jw@u~ zZF;rMR2lP_RL`IlYTUi<=9HJ~NY11dfOGBENfT)30)=WfK=>wYUJX;Wqg$8FVoQlN zxz8_$81lPu1rOz482G!DLr0JZ{8$+7;G{ogw!u}Zt^fSw+QC|M^^}(}$mc*c<}U+l zHjVYexY@V7X6zx*UfR=L1?9FMIQ6Jz3*dg(KpgqLO^VBB0!lz0+Zk)_ckJGBg^8bq zHff?A9Zf><%CUTVA{A2fM#sQK&04W-al9Md%3d3u(QE?{ChN%d>Q23FcsAy(zDc^o znvzw###_McQJsuMC#wfSnT#;gLUpoIo2CSzmhNYRrewvq(E~;9H(DFwdTgK}XL7KL zhJweml4EFUVPSo*jaX+ONt~Lycn(nCOHCvs>rBv??K}9wjV+0oF>oX8URZ--D6)YH$f@2o+4iG$odUw8Cbhv1!f(oNG=%=x*=0+^5ru#a74)XZmp zh}C<*d%qiyK0IWBoyFo9CSj(;YHU<l;hCnt zzTKvp(c)GI;NLY`)|S`tj3iy+F|4qsDTWMpwH+>XUzSE7nJxJ4S%NE^x|oLu$|cRed~B@wSD~ zGoViP$wB(sO`I-Ny&2J5*9xakU9j=}ucdABGts3$}PhjwO5t}4TrI9P90gjE6C z|3UtwD+gom64Y~Ezxs*Qog|#^U5=B|>~D38$DEJWc3JbLq#?7tMWt)lPWZF)196KR zRD?1EsB;pz?nM9q1LQNl45D=6J3r?ykzGT&ld(F&gzQQ7J^*5huQzUJ*t5>h=;M#= zZ|1GWAhG1x*oUV5MED6qWdtuWjJ91P7^d@L?jQ&U!cHt3WDnJ8$Zads#&-*Y12~=; z&}#&l&GqVokl4TQzExx;eqb*vm$;4c%qq>K^e`80ND6q%oI#Q~pds4z#rRC*Yz9Z( zAz-J6^%pfCA)D*dY_pCC>A#mPimo~}jsI^Je>bxbR41)HxSt5ixR5{GF0Uv~$eS2z zzn6u$NS?0~PV!1VLO3;gFzJ7In43pDhZ-F-QtAPfcUs93`U#UZp~2zsn9peT5cwlb zK5ZwD8T;l3;NL6^b&ULw6+??Auez9-P|Cmj&|y#mBgHF66S7fxU<$`O%PlP)z$9hu zjLjE^-kKaCPrfQ-|>_XFFo5d; z1+E#Ho!)B-)8$!G8|OISl@dXS0Q_jBHt^({lpZRURH|{6+!U>j;k?EO9$nMOY5#}9 zD0f4%T4tEBXrrGD{;no z-mT%PZv(_Sug>~7l(a7E633w61W+V{Q!WVA{N0d9f+sU7Zc1L##9pkCY&7co44UtQ zF=*kjaqcN?fr|ZP+DQ2Ot`f(OU?8kk3^+j_HYi64E<-) zk%U5lq}8e+RaS$h(E{9Ty4Y1l?(E+*K29R8Z5v(1!0h>FA%ThwgA#HvRA+U$te_J6NA zRUkY2$z5h9b|tfh*_e4=y+rwQe+2s!;TdSM;Cm15n#7y1iiU2bqPqU-6S&|#WshyV zM^uQ34Y6(IHU5O36{i@iIDSR+uvyeY%DIWe<}`97UtoKv3rF2kv|rEs3Al)*Z7 zb7~zij1@<=a2V&yXgy|cWA)JU;9Y5X*J!nns!)e&Ud)0sQQ8~21d&^K{YVObS~3nU z!K`D4m&snp@hH#p?30xp1Q;w#m|&{_+Fv?r*Ig|Qah5N>W@1#Z3E9E@+O+i@QV^;& z5?!%GhuM1gRzl?=P?Sl9s2pC42-TyUbO6wCNzm2%dzJ!+{kqpwLcM}3fU?QM-QXfY z8}PrA1+j?y5R$2=hMp4YwNj3FZ|{Rvdkc7bEQH*p5G zR8c=t)(_n#`g%2OXP)zTuq1h?+~zV0bA2s%tk8S$b!3t*l;r|^@&oG_MaDm?dqq48;wcASn>j9pv%TJX(oJP* z3k>|R;hpTavl7n}Np@^suAE-~{fIT~S*3IRVW4lkSq6wY2MJ2_tYxU_NH!J8I{IrZ zR_KJ!)-zMnB_g3ChQl*{!KvbrboAnIFjhm(!{iya+D-{V6^;!^I=lq#zM)t_C@@_) z!c@5>e$EQ4Sd%k^{pNSz==CN*0UKKG3gp|WeBRN&C$VW2io|UX$U0h?68Ac-g!91g zH9Ezo{CMnY{6&h~zD>!}fh#|;=dby;b6Idd3)o$4MpVN0tO}wX?4+;s=e%-$fC4~M zE!XuOZNeUVPUd@;v*U*J7#tPscZ_4AFD0dRP62g~3Rl=!2BP$?CN$DqQ{Rq#E6o7; z4MD(IrRj!T@1=_8VEwc~oR7EN=*cwxHK`iT4s`I8&rX1)QgOq&nDyij5dePwj8h{{ic zb1THH-SY8k9-|Sp@_UL}WJ`+?u|O7S<5c`hlpeOad%Jg$C=-@#-qD*8pUdZs$DaeHrcScn- ziL4Y!Lf$Xcw4jjmD@X42PbL>Tu_|;z)#vQJKei{v05+p9uhtJ%UiHq5@lEwec1mA( zwIdaOm4ImrYcD^AfN2R1BP#om{%w_D`-rp-=|9x-!2?0Rth--$UA;_)2WN%_RSe!T>Tev%ZQ#|tFo2xQDvodk#|e~HdG&@6C(Eaxq#bU@ zvh~CB(LaF`#n#39kW-?GJT3Y76_bQyU_X)0XHs8 z^cM=+fTo@gxS4%_QE`<2=x3wto&V6I_!Fuei-s_mGIBZOWO)F6_2Va561{M7ZE_8p zYBEH%7j)cG&R!_M0`uW3JJEY$@F{-d^q~=0;H=>!jxtwdr;d9LOrxoHJP}%W;6JH@tQGiX?tdu!Sj$PD7oaXp=NJM?C!gH9@TX48M=;$7YAXDbvZ9u$8KMY_2? zS;Wy3oCmyl3HDN_&}vsUbvG(Wv^$*Bm>rwKU=E#5C9F_yQwL(h<^WX%yL$3iuDv7({X?%2O}pQz1$6jv@#hr21V dydtVK_<7q=D4|~k-brJvmi+sX1{hbyx9^H;JdOYW diff --git a/RBAC-tech-changes.pdf b/RBAC-tech-changes.pdf new file mode 100644 index 0000000000000000000000000000000000000000..addbea00bad8b8054b31f3fbb97e8de273b99e60 GIT binary patch literal 197860 zcma&NQ;;r9&@?!O;;dO^iEf!K zTkuFDuz_p;AyXly=KXoy8TtERdZid%zkwq(9u z2nwE9PB+nL=TqBIOnq5MLNStK66I*IrGZQB+QU&lo=6_*EHPMO;V?36PC`^_yNxEC zkZ$z@C!7&!=nH$tx%VRR!NuWuS=8L#y-sHex$e+0 zmC^cDW~TIeEU*5IsIJVLE6t~zNaeA#aepY|VelzAm~8eb^ZM{6=9zHuOtO1xo5(H0 z8oNI&b^Kc`I|~F~`B(P%)w8p3`;itj?EQ1Hf2`}@D>6iw3&a%FRwegOupMBVp9tie zd(J4TdDu4Ve)wB={@K>cL+>`xuli`pL(gR_20KO^fKd*Bk!cZe7ZOsukIhb{{DE_s&zZo&TC+2?C-4g=CK zKdByYGmLoM?wxRXb3&!F{LOvjh_v}^GbL}(R<(4>99j{P-MK}yVFG%`Cxx&m@nVfuSC|f*JM+ZAqtIk`)w}Zn zj>1hIc9$14j>20`#>6Vz+YmQrx!eLu4Y0-Gh39%++vqb~20ip)pdbmmLy{P`*F9^>+N17b5WhCYlh%I2$ibkES`UmcFZ|{-LDy+HS*R>Tg#UNQY z(djQK?!~Q#_YKa5ar>gOx@{7#r~Cehfitq>+iD}4y0`B)KY z>X6Zh&&-r(|8vKU<-k)40~AF#tJgEbw0+cZbIxl$#~`SddWSlyB~%JkR)r_vp(!I$ zI_&znr!&UrwBB_;q;h{rD%(Rx4-w4mPjAso64YWa=s zsjv!h>YH~Jf$c5QCr?znbD+F48{rT@&Y3t3{>-^?#P04jdJhzAkc-6XzQ0}xK)%n9 zhb%H}M;5e@W{ZebH0MXZya$D=MYng7H>Lku5seX`TZfy8a-vvJ0c4PQ~!kXHf)tn zloAq@-|V}@ZHwEo6BN#Umz8;=)j6$_^4{BcZfszhLTMLH)18ZqlfjN4fS6wDMa8L> z>I+5yj-7+xskA!wzI3m}wWjL_k9-W}xp-j;K7y1$P*ufH`lw~#c=hKah9Azj|AOn@6l&%_$_^(Iwh!eRcr3KDx?t1~T3S@&J;Y&Z z&eQ#%xQR7V+o9dVi7(JZ^9vrx{v^gTh#@_ALQ~17+H~~3g^@w8k;JF46ulNL0^eJK z{L1+n{`-^f`co_z!JPjPBif`~poKg$(8)G6bei^z@GU24FZv7q4G+p=4^O6W4Qce} z$#rk_vmS>3lr56@n^a|OObB;7@Ujzz-?%!Af;|TDJcL<5fve6%bhV$;8wt)p-sK2# zh;2@EZYX&GEE`1(rx*IZw1H{h%C2Qprau^x?1}Wp^f$G==CXbdr1xVbl2=&>#d*~PB!1Q z!YNkDUW4%m)K*^}7slM)?EmJh|7QP-?^xOXC-JecuyX(J65ovWPW)Coa=@IS@l`UM zShH9ZNeh+IQ($QtpI%gSbpH5GFx^6HXXEh&X_no>Zx1WpWNPz^y}MKR%Ls|&v7-eS zVP9hKh&?jh&jUp|e}Gn>cF&P>Vm%q)-lRuAB+*Qo46{Kk2DU@%G@8+1JhiV@Fx#EJ z_l*Ur`)KiWlXa%x&z1?cx7!MXA2G?C8h5X%fxeoo)*|wInh-?n#KjOW2G)84D7n~d zbOJb@7G$&|vdoMa7Nbcb6LQ4J2M|d0EBM2z^{B4)u8;r+d+t-qc&u*v;t>I6$=jn) zNUi(r7H?bO*-J9Lo$|Ge=n>)CW#1x|>{OBj?e(z-?21Cpv;cJTCt$Z!p{f zvyJ&a>+0{xdT*zNK{qSt{u(0EV-`M={xcU3i*BQo96%R-;xcjilSADO%=Iq5c z?1{SF$L2~Noh{yb0JJrfLYd!*xLAOfH*ID%U*aA)Ou4pslOb5Y62hEHU*D4lKb@Fl zCbI-oI!|IFrn`mfK?GeUsb(4zbQFEPC7H1)*tl6OMvWV$sd!s$h3aMiMZUI?x z0R(-;u85#~V`eq})1=6=`65^*?b@tNmY#$0mi~H9PTEzJ2Tu)Os z^*{7tC;UO0S&0Bfm4y^1&8tsEBB%vl+&v{ox*-ZDfjU5LF2d=Qai@Lso z{(ZpSeHC@oXO{Q=GEo$2Wj`w3wphpI8osRMXUs=Fn+$g`Ra&{Zn8O$8ZH5U0U0w06 zH7p-!<34}gz0sVtzc}XF47$cic!A*3F+)^aG#v2KS52?O&_o^SNa7i?8*_GXrZ_nv zq7XJYT`BUru~-q4H(#mFlKqZTr-;xl*IROY@wVkvumf6VppwOmT6BEOwkhSxW6?#I z?=cj9vyEP?rrZ3(2zf`8jKr*Z5HnLW8;v&-ZwB_A5#1}Q(=Gy&Bkv#~{u;GO5{Y%{ zdzPZ`l4No$JK05wJ6;f(uuU7?N~+RRLRl%XyNy!tC!C+7(rD>3FL7&(u+DaUOX2<) zF6jgJcpmF0ZDeP0bdp`4&63YuUlx{{T@(onj`*q##K2n#+VkpjIW zPD$kq2)w3bK_{{Wqg(o1T)F_bSN1ru`o*omY7r1babC)%+R8udzvRA(z}2>5GA}Z{ z(mx08T<^tkjJ=Kxe#+};|6yN2zMf>DBFKnxsw{L)<#0{g%mXt5YAts};)=H`Kj&*cThT|aJ@O#%Z>-Cs+K z`SjrZ`l-63A7dj04NXY%3U~O)_g5&sG=@pBMD&oq4xhIhAzcp42+9-Ywc&tYtUv<< z7M|~(Hh~>E)#&pc+zPt~4?L5eU#g)kFj!e>S0M2s(f>I)77?5n*9;*>pW)L!e8m; zP511u=iA@JYAKAq?`)5w~#| z@~TgkGWFB9!#DDETX|D$9*Zqt*H|*}b!a1M3mzFMmCE;68+0AlkSe!a$OIKp%WLf( z@Uoz!mBL>&jE<|UPMRNcA5f?suE+)$C*4rTlK0d@<$PnZW1fS>nyKhpWq>3FoVqpmm;p zI0paCeaN%!XKlq)!5A)1(2{1rpXeXYm6XDe&_vefvZY`4z;?Yf!NArdWEa-I(kd9t z8@nYSAa3mT?PcfOto_AhnKl!aKUV%!G~qWKev+Vz&&++zg*j`@NKv7i`h;9jBUeGq z8Uy>91KOO$dx**qM{r+_E=T_e;(5Wza<^jut4~~9expPfl7F}Vlw1aZtp9Zq;y@ih zL=?F4rzj{-m(G#nob^5X*9roBK!(9%OyVvStC;%Z^$qA#G2H3?pK^$e{r^J_v2pxw z*8xhfH{!O&?{^G|uTa6Yu6sS7j;&0Fy9|ix*Lb7ljc{Rgj$^Q7i-lAO6nh2K^;giO z7f=ZqO$b+Z+zgYdx>EGMzr-G1Z#flnd*<&aq0`RH++4a;M6B17Xj@dAD3aI=$en1K zBQ-h0SGLaHE9|DcYnICQ1gkkmJE&fln5Yrddv>*`i|B3NTI_TIe$vs#*XX$&qj{=* zOK@#d2YH8`5;EDC@G-Dx)*jo4F=Mb+m+@(A=DYnc<*YQoS3|^D%gxj7oLV~h z#O^ZdF&%S&MS{v&(Pj0J7!HofE`)UG?JbRc5Ez}OFLnwVK`(U&!av>|yaTBMtsAke zgA-`I4dZxp=yx}ls%@eI4ssTOLPgp#8L>idOxIJbv#-qoVk11H8w=Lz9_q@AZzs5X zj~8j+Y0RsFrec|9RqLf99Sz3jPD<#R39E<<@EQicO+`Vcz`j%6Row;V1M?3bwPxw~ zh;g~0s?$f{yNAj9tX9kHkODXKuJ&R8_(-Ywn@tpzb`le zA_;6FxDbXtjDIpc2+z+7iW!rl_qwS(g#z8Y6kRa3J@@_r2abEQSy&FSVEa%f07|WP6w*rT#%X%4!N5 zO@>83SV*_+*NFK&<8J|KYdu=i{-904OiS`(*h0Ux1k7GR{dfBYD(k83PL+; z>%Vp6>!I+u+DZ#Bt{R{tI_B_D1=m>;2z~!B@;yY6zj6!Wy`HT6 zWf@g{SE%g7yFwPC+;n@cjk|{`1hwV6YJ(-zP1p0unYb{14u0!jW1%iM_i!4Y^ zMh|c{WhZkLe24m8dd-d}7JP$7EB^jj(%)4?d>r**B)p510CxE2h!hgRIh|SO1@gxR zQ0@mWiwugb-}1WWqCpw>qs~i8^KpqQ*0~@vIl{|9qX6o19M25Ue(%`M{dnlYDn3SJ zJ@aR9C;6xg8h?c~Fh-5$a#6ME*Z^8n9zZw^a`JWKn6oH_Y;c_)D2M)!erw!jl_T$b6^dO;Aco zFsX!!jV>H#U^}R$(1^J`dUY~2QW=y@tL*-9!y-91jssf=v6F!}h*m~L%p~&hI_{HD zS;mpk=MgH#_fx)tE!KN=s4Q+qpi5`XpH@k-%=;)Z&^Md%9Abx5+q%_gid$ID39C=2 zP@N@AlRo4&BR5tNGCD|d#wGqCOp#W-(14;{ICp{9y$B*`LLY;-EW=mXEJ3c6Gc1_j zij=O&1r7;oD|bD!I>FtP5h{^pa{G<9B*pwFF@@yKHjkn z#G$BlrNC;6I6UXn{EsUG+J$&Wi45{{;-rNs;9Os7_^(R9(@iifij4ie(q$Kd5qpW2 zOfEeSG=1@Lak6ME03l3c0M3YwrqJnE2#Vb<4^g{(b=v`&A0A7Hq`EMSSIgJx?48QK ztlubzPwQlKg@ds6l934y2Qt6IVpfwrv^o1WOtYyRRQa}J;e?mPYaUVy>%JQ5x@lg~ zxhU@6ExkqZE{WV;cmMmNlO}!i%Sypv>b6KEzjfb?{g+6GsToDFX`<6F4AbMex9vEA z9L6Sr0s118Zng*SCh_xl*e*H(F9@tMFD~!+KmIe-P2*Qc-)Y2?5&3YKT;tF{>daBS z6M77VNTsly=lMRY$#|u#m=NT}=qO!*Ku8J-wpBEv-CbJ^G;_K>>KE_|tX|0ct=`-Oc37RTU% z+?Bwg3i@A&2RG^}q+t^Up9lUkx6=B+R_Nu({ge8S77Z2jHUK^3ZgJr*;&qbG7&1jF z8%gavlrGt5(2ILF*vg&b^%;zYYTE1sQ$pBe$auLZCW1D0yv}03X1UDMM|tm#)2GH>}8VH&@6gZJf0Q1=SOOR^P#K@ z4B17$P!ASwGone+IL0D9{(32Q^+4cL1mldCQ^I#PC5)}E2sMBj2O8%AtbNnNqCQQ@ zbxLCx<9Ph9K>@h_5#ko{I`VTlaz-46{VIa{VUSL= zK_9?Sdgco0A>bAi`M>R64}!3GU}OJN@Uj1Y2tGDuuK%n2MfCq~{J5#|yJRyVUEgZ{ z(TfDZmX;z)dl}9smXkVh5*89j2R;_=B>QAiYxQT#&Hj4q1Z$@;pEz{LXdy62 z#k$@B>vG%bV&Mv(!fy0DUT%50*14yMB)P{160ZuK_Zfg+;=hs3x!(LS@+T?FNj| zK8Klwm#}_KxG`#iL(D$RGOE%LzFKZXCic<4VT{9yh$aXp`2HHTTME{{ZIh!oThNVZ zBXD+}@Ta|x0C^v-�ct2-7Ghmg>NsL})`BEW%*QpLsGA46Xt*3I5*4xkoe3* zEKD5C|Bvy<8JN7H5hpmJBbZug5%_qr ze{g&nHbGO#t)3IOfr&MOXFUT{3p*oY1DT3?Bs++rb`^oh300GbF>q=HCf^M3L2w3V zWNrZv&IgkM78W{v6?X}&z!U;Lvo5?jfieSD%K8GIL|~|eE2Ut#of1kYVTY1>Bp?Co zpPks+S)F`PLgIoB<;evUiem#eQdqPi5HPf^0-+{w3#BRtA?Kg%-`h7sDDegYl?u_K z^1=oNgA3u8!_O-vE2)D@RnS;bRV^^}Qfj!kxVk$25Yn4iU*M=b0XZRyyFmjfB@+;p z6qNp)mhm7x)$Sz`+R?PjRtJ&_5}e5f60-ckX&5ce^f;e z_GD*&bpd;e;`qCHa(lC5bHhh{9@AjQfWzOR$rC7@Y|Ar)8(r`2M?DI^Y@zC)?Yk6A%S1JmU@T`-LLb`jx5q-i1Ez{cq-B# z!QNYnkUqOqAx$7wpffNa?@VpxZ|di@;xFc=FXq0s{<*P*0c0a%lT(nVrdFWd0HU|{ z^mb6-+F5%c!Mp&5FG}KiN8st28NI#mukU=KuM~X5mo?^CJ z%H?ffvr}*;NF5?3YM%C9M9}BoJk}S(7P6hID>V75pyl6<`QI0ohPKwn55>M;=LL|T zM49gZFx@UG9UqXHlp6h+>YtUBfDLm!`Q2~>Ff%Ji-@U{>Ih=sm#GTLnUPGSMfEzj> zP*~p6fSR7U!VG$-vqO;mFHNkw9?0L4*Pi=;Wsr0;_Tm?Kxu%3Nx<4YrxR#8+AjqGQ1aq03MXrz^t*%iT*U`xkEQZ&78kHw zX24PxM$IpIt_RC|*6wA-kNoZP^iP^r`W|fNFQ_((;59l7a_BSXu zklgBTzXx*be}L}(A7H-(kWO{M%?sY?hYkHNI1;?;seSxkF!diW*Z!|F_5q}qJ{EO- zcY=@-?{o6+YvTQ1uVCMEw8xAZE^hAi;MUq%eSHGI2Zct57q-_GV_*JJ+Pl}chQB{E z`+_h^KYqa9q&jNL154pS-+qkPT3%d0blJD^rpCsmkDu{cO#wTAfE}XSq92DJmlTjd zA;o;`!Hc9|Y{PPSZ&}aKKCuNkayD|rBQN&W{8n3%W$RTrO5j@09|CNpa;`HQBM$Y3 z;BL0Mpa5&6ah+?BOL}^zfCz{WyERf$n5EJVzQzlT zSu7m0Pts#P6$@#`<$M|TfkU_m~8%f=Nr4{1XUcNWwL6WHUbweX%y9qcwEL}|*!Ofao#=+1+^ixW{jjLN;B z(eoN}T0rwPU%GvBQUEe;AvGS5qlw~S%~RxFiA0<_JV!|}CV;tf^kdY< zxh9U@@Q)jbry^ym&!8yvn+hhv69=H%5tUP1wFsTv_we78PGp!sTft)|=6S+6ohxG= zrKc(RcDHCz*V!#ESe!r2tp2Mj_4J%Ln4_=YwqSv0y}W}A!jHHNXIZpJyYIwi^S={z z)Ykd+r!E>Q7j3`ty%M0?^O8egQ$#x#ZyNNDFh>q7iw-dFmz%;WQ=|1vfln^O0=7a{ z_^ktV9Ji)AfPWUdg~{twcswtUP8mrsW{(F8iR3$ziEnO`zjd6F(#PI7!RA#k&=RCn zO$p%WP2A6`kB;|IE(!Rd0mWXbL!o80x7P@Jh9Njynpa<`S*T8!X%L-(f5 zC}WpIl))!;s)w_Q5Zzg5xQs-Qc2Q%5Fme?XgqzW=EbUoswaDowriOOLWI!af0)WK9 zb4hR@`oz<8BgWuUB+1I%tkkQN(3#;4Q=89iky4~B3L19EJ3ZB{(q>;sH5siYkEQ)% zJ3INRQaJOlNL6wHH()*y(ee~OBJR8Ah1!F3K;8u;R6H0DVI-`TzLXwKf!3K>UswH( zT^J`U3Yun32X6Sl@;Ox7lj=@P9Q!DrBidrKI$qH;3hnKYWaRu(dEub!j+ooDgI7*Pa49Wx2XtvO2W=g z)fX|PzhZC@UGv&ije7O6bCVj8A@vkO(YZCf7i^OaEN!; zyFVnI)tKB~K$_PJJr{|VBB|Y3C){_BRq}6&CVBUZiraXAa~7G5R1p5rSN{@ATJNNQ zvoIB|39U1c*;vS`HrB&Is}bEt?0hK8jCWsZR2i=Eq(R5cvM9S$>Ep;AVUVxbsp-Y&zkn9zf)6;3c!*%Ja;o>Jt70i9rDCELYg2`A72#yx?d0jG+FlHP!EG4kz$2m_YvyDgwV zZk2$}w0w#2+-LuB3Hs0c$g6-4F_fnf)77$^mDqpjnBpCmgmU*PB-AMC+8(*IM!2rr z)YFMp2ZsyYR5dmh1iT&R8*ufHI??K9+tYn5!HIdeP{-fEk7{ArT#*zGyRqiWXMdS?_? zzwCH#avWSHkr>xrqQ;OxhB%2zj8S=O&rDy2XIyW`s64)D@$~Hj(`8EQtIw!T6}B3txsUt|$DjX*AP?n@X~p z+(5dGNHF3TxMcpX>7IfLKC2b2Lo>ZbYC9KfocYzZP0v3E2hHl7rtxgESf#Jbx7US+ zhqg*y6#vTE(r@1`9sUm<^hZZ|J7rda7p}y5FU53tYXbvVZy`<5@KGRE>J1oNplWFR~d7`vK)Y1dLEWON;8+QqH9H-%hLO()Vv41E^D^GIPvh;f!NL{F| zS&8iU`Uf7PhJ#?n|JCmL*ZhV9ZCnko;IpAOYEw}y{8&n&1|9#bC+R1G3= zNk-Rt7g`Jr+S2wo$xUGe2BuQ6DnGK?_$8Xfu>OOy8`={{G zTIXUd(|053&lWp^1TP!3PI?u zA*8stSyD@ph(~I4$o#UExY?OvgtY5VJg_2W){Ly322@3o$-3Ho*RJpp8os_=rzT2d z9G*WD{D5^KNEPm*MKk#@vf>fcLsSt{8o$Cn9wV?YPzQ1A{^{o+VRbLZy!!Q4kcDJzYTJ74BLu6jN z*s3j#gG7)^JV?Maikr+y5Im$qh+Z1q6)bD3Uvzd71MBRh&4^JDL=u-{qp{0EqY!`P2@#tG7ts1;=}sy*;>PJ zsNac32?}%zQkE&kVOv0T9<#cO`jFtK#(CEXc{|BOuGGK2n~PlGc?6RxMHi7TG9pMI znR?Qux9W-t&#|dTB9G5DmtYvX*LQ3~*i#XP1UhuBi=tTa5OSe>c;QNf-E6x|XRVaq zSuDS$t%8zEizg=z2V$c!snXu0EwbacWp|}kH%`-3R6ORC@Qj-l_FSc(v5J)9 zDIO76Z}86!%;C2VKsREvYN*|aH~m+dkY5p_0CtTWw|o~3u1p&}6OYVSY*J{u|F4(N z-Or%NoUzn%?r={jy)0JYI98y8U3UGl!O9elN2|%hfGvwze;{Jx^h8 zgTA3DN4$E2;kq1#EpTr3>3U#CUlV$;0yxk(tXRf3DE8E#RF^piXmL3G-06ylU^VBV}s zNDta!QAZ@)_D6w%3ty?LIzS<32!XLrK<8fM!`5Z?V)e`+ zbXtv&xprvYJ^mN=F;#bK2l}OyzDZ0(?5D-gsiis~0%G=0JtZb=#b)N`i z)_G;LNF17_-Ajhw&tlrNizi!fL&b1@+I0S7cC6uYcvJsw`y}D=1rE7YH3qu}L!kTD z%_}N&lKGb8xawL(3&XD;7fs;4u7ehK{bt{Yvwos3gXh zK>h~;9P1OqJ!o}aIkM{FuTO_IJ0%xB@(c@+EEoTxnWc?W&zGG6LfK*p>9xqwG;~z~ zQGAX0z6VC2q5zsSL(&RMdfykn{X)FHIsjw36#zw>wE^8*05Uys{l8%SA^#r!@Ja_Sk9 zMLw&%Zk}FE^sZtZ!z(~dUjfgU@%eMp#FXiM^JBM^_m8BmDTv6aUiad~13Zi1nG}JS zMSdx4)P7lgvuD#NHt8#FnMoBsGsY}6a^BmcCkPa{z{Kq%C?58W}NAAWXEam-@us}n)I!lM@6*w>EN@QL$WdUL0M`Ix-u z>V(cvwglTo6b2R;K~Dlwa4KR^_@=|1POyFemMc-`Du89ve~D3dzs~y3K&!XuOy-~H z9C{!S$jST}|I$Bn0-QM@E{8NUE1Cg0_0)L^mOH#ITclE{OD!NQymnje8B|+` z{cc@ZtG)97N~?7|ysNEPU~EMH)@Kc}R|7tB7Kzjjv9zifZP96EIj=GH0>V3cBqGYY z;#^Njnvh+26|{=`aISWUviTJxeGx9t!q_p^R&EKvcuBV4yvhrIk5hyM=ZswJ(GitL zD=ZIA+I(PyKY6bEA=Ieh8-h)06Rz}`$3!8ZgJ!ij>{yYUuvdx{HE2^-T*eUiVGz`mj1QbCcsj4uxcvixN{Y=SKDwci~D%W-iIFQmQo=#h1rJdO)&v@bKtyuMrmll}421EB7>r#f>| zxZJ1b&ElG^kQLX$AQpu%c9l{z2K4_h_k~Pp>=hiMmU8*I6D@zf&UflK;h;?#7e8wq z@M|hs_e}Lj9%m$R{%$;TyEDueOVFX*Sw_C zM0Hrqi`L27yNI;u&XYNp5=Em)TPt_%8MDZZOLUbMrsv?1rOdMJGg(BE-gj6jJtv^Ab2Bb3+;6#+X@vbiVlVuAJ`n6Z2ncX zEjSilBcam*rt#OqE{pI`h)KNyPlx1{(gL52JaT7I%ZVb!Aka~6$LfV34h*b3BUndMsxutTs5+IBm$zQLC&{>tyVrrUsR^8l$&1Q$=;lU% z@6Nx2)$%t$y^{0M)gXkLYO;>@IaI;Cz)msK?}%*Su9hn;S$#}>uZ zH}Ohy^x4}glx))pL!h}&Qgr06YL^^Of1pqck$fh3HaHP(QbPlDXxD8fh4!wcW*+dt zRLRrFkODrzi)bs6oy|IWo~rb507w0n5RNK-O`ZmeT)mYt&G z-NEx4NQ~TtTxMH_e1i>M-+jaFy65oL=in5f!+*`+cMBhF`+}NYrk)vtID(n5Mi!3T zyX3(+;V+(wu1onS;at6M)JYk;<}{v)u(Cvl@ms%7IziHJmyhrNR33QtfmY9?B|0q{Q#~7r>y zvRki;)r8N__Y*+J_Dt4`Pp$=mwu^7hA|2Lvk`~U8bpMp^Rfv#i9fl($-!(K1T~n9H zUzl5~tD2+M;YqFf9;>*25n#HcGuey5^<7m{Vvso+{pCwuCi+N-Why)N(9F{sRrC#q z*5Xv6y%-3KTfc_W!y?GOF5j0tjh1~!(g=rKz#8*Nsf=2mdHknmdeaT+`K5ub5;6nD z$r{=xe-mD-vlGVCD!6S*W#*+d;!y#6Oed`oh=2;4>%Ya^Tq~5@R zfm@!`a%8l)rpAQ=9v4HDPsKSy0Cb@K;NWl~#fiVf*{M^av18=dUV1P$Ci)`9L@)y7 zJO9PsW7vqFWa=a`&qhv0o>s#Ea~Sv7iH6~ru@eNmYL!Zls;Re&`rKC?a6{{{PPZHu zQG?w1Lt{c~J&5iSYsrM8VAM;|YocUkQ=dJZ~zN{Jw!3>LIn4BAOobanS{GlvocG^*{?8yZWVD zAQ9Aa#{O`-9^a58%%Lm5SrN|{kEVcQ0fwmRq|9){2poigh-@E;lzNh7-$?yJajySA# zt0c(khwtd%-ugw(w&0vpo_SO15r02Kx<$W?>~!)+0n~ZabCcT`k28igHkNp^XsPMKC*-Jx0kHGq*x4cDZrO z(|a7(7mI$$>)1IHJvawL{!Jv}aZ-pW6kEOJ&4iG(OH)L^wYmI@%YHYE z06kAJK3?SlZ)%}vYdF{$0Huc@=Y_Ognme}fX+SV=9%8{)q`@+HZ#r#fjU@cgsxTAg zu{+;tw+J%z-&wHsbHvj;MQ!x~tBZMhaTL5IZO)hcoi!ewe z8w(X_g4oH_L9z`sxW}4$_#8*VA)D9W^BkLcN#`nx3QZQXgE5N;6TIJ4 zlJZrA@21cZ6}&*fmw`vDi+~jF%IK`lVX|{H{tN*sD-~T#K7<-PtVX1K{-{Z(>bnglsR+J!fBYvE-8IkFWoaSCH;K%T?LP4nm8L%9B`RLskC=S>-|$$EyD{aLfBnQ{ z&o!;(4jDSPbmJX-`I#&?qJn``d~_Q;nGY-E`4$m$0K`x({yXpinsHj-#8!EX-0QYI zE%zE7Ny`@5FG&vHUg1dn8jwZpU$iEN)8l|6^e){oW3 zFQK!um1Kt^a9kg9R}Fv#b2}{no%0^3o{a;>ke`nGX$s!fAAXr!kvc46In>sUkhZsZ z&z3ssUmucx5rSGuNEI*IgbYr?!Rm09-jg?k{sK3c!EU4YUOdX&qSki!(2*6kfW`6;Iud6H>d}1nv;c(kuH2S%xm z0#9ZG->bX~#7SKlh?ymx{s-UCa)nw}8M*iN0suY6|6^hDg!g>@p9|N^xT4b|@=+NK3{{0TMh=2OR>L0{XOsDCDMof>(a z3|^~Cnhm^5afqaz8b(>yP_d@h z57P4u5fmdiPT@$!%igwg#gr!zx3ASNT7FmEhJ8|7&<`J4)C1F|Mp8zW5`DSLYYB`R zD4UmjMd?OM1(_O`I)`l9I}XjGe|xX0n{aC+>k06Sl#V0#RB)p+?!&(aCbGi6e{SEh zmqJb!FYS3#`a(O=PmyPdjJssyyf?0nd#q5ZVAW-=lw`$0nOJv62v2_qP_?H`7h+gj zw$HQ1v|%*073G2v4dfbElL*_WrA@j&u+VFbW^_?0APN^({MR2#2UYJhP>Cui#XGdD zk3p(I7a>-R$xE7bvl&0ULC^kc1{)8Aq{oo-77M?4>wS1w0rV~+E{grIyD!v!@VL*c zNILuP+VZvFkmudmNB->&24R)+8g5m-Ih4Vb^mP;z#4ve&RUo73RL)kp`1+0{D(%uY z6-J{*6D)w^KYDd4#Ku0Qh(Q*4K1YceHoZd7^gA; zoV74YI%`&FTfxK7zM=lcxlIeW(=#$2mG*RfBw!C-X6;cAl9o+BSp>UR^Rw3KE-xDH zdGz#?iIJ%reD{O)$M{wfQN$=&ZWrATQd^(MS~P-7VHZ_CInwQlV72`Ih;B^#X)l0yGg)PEWYW- zc@``=&b|hx$s_r)@E^i6$7A+wx|@)R^FvqoBtUx0&$)g0DO2R;BFlM$ffN2?dxxK) zj|S2r3^GXZjf!0Og=ioXhLSA@PiUMx<&M355xIcD*)X{l`P!;IvSP4Q-K;B_lDor6 zN^CXSiy@5Pqs#kkMv|o89qo)05Tym2a|%IzO~X&1lbH#y?$d2_N~Qi38AuYI>x8Wb z0OB>H%6@yHE}LEgSX1~KO^@kd=3e>mzfL&OMJg2!+SV)1r?>1i zrm!Aq2hRL~`&UocJqp~JY1Xy?|yx#>WPe z&*=(d%6sYLH=mv{O+3HL=?WuYSz9>$y;FCmn0o`CFhl%my!gZU^^Xaz9BA$~>cTMq zAo-EC0%Ax_OKS-=tUIj_A~9p2#PCRT##v2nGIEAfC0O3MCYCZunK(aZy%iHwfJ0W4 zW4ahZQQY92E{m>Joj#wYclJwG@*9rSMxJh00CDbV_mD+95C)l=D*`8PTX^DWV@w<1 zOIH8QwJeit+~}(I%B95&H`TbgbOuI#Ul_{@co35vRR67lu^Lt}gMB&@dk#;?FgKk$ z*SlQM2SF|3PV?Gs8Bvh>KcAGHrI&@EhLz$;cy8#gt0iCZUeg}7Cj~;ImQ_`!;5F4y z%d^XwrFU~tu(`&3MWB`$Joj4E{|*$<1y{_avuU2`ktk)MCw#tHGyn zEo(C^FvX=fm}`iBvLkd{J_UD`pH*zqv~tE1skzOdbzl#RFY3O*WH;s}R3_Tmg3M;; zBDuZtWSbYLzp@ugv7lj9V9WEV_b`DmkGhYHak^dE&QS0JABAI4EqD^FA`oc2O7&`hw-n`Yl=yvK?f7FXp z$+xkj*ibqxga24KFh`6DO!FwqkD)T`;#(<^5*HwWFbpgF;ySNDX)X)#U)fz~0`J!F z5Cl^y$`W>jMAky2o1E7ZVdH(a!g7{`4JVoeFCJ@Z^C&?sI(zG9u_c~GXj8$b({A6j+<+g$;_? z8BsB?u)fdFS<62hjUNC+5&HL!^JuPdW{XAvz97f-j+o_Uuf#u@D1QWy{h}k|nzsf* z9|{7{r5?bt`M-kYJNG^5=w+gx;>uQ{`TcCECfIwi@jhx_XE-FVVkZL(h^<|a3(~;Ds>&NwWYriCy+=uhbbKSB|z!x>PD@7xk23)z4;)lmb+#hkl z$c&7^d(QB&C>^kxn}y__V-9!0-rBTptmtn}=O7DQx`C)gdg-6Ja(N?bBg|%<3XjNy*S}IjFUoz@jD)idmaDyu(Xt{=H--{# z|8#)QSf8jjD4 zpwrOo1c~HB2&|wtJXjjh&I!(HQ>z*%=r|08wHAg1@x#g7oL2f9zUO(SnNj!!>YDO> zVX8^%F4Aw$K1M-ud6-Ei*QD5Tp*UW%lML-nn^n zHLiz?#B&HD2*&p9!gIY8GY=J(FOy6y^qib2po@fs;mLCMk1`%&(Mu|xk?6WmVdr*8 z3p*^`mLjF%0=roe!|e5$WVrcz_#a~B z5&O#vZak7{J%D4VP>Drt!Z$tawlJpgv8io*m9Za z49Pl)S=E?|kSx@1BI|edWKUU6yMVjQbK<6j*HG+z^YzeK<#a1YOgxHkt&-=RD&EwK zNU2kTh!wvMP3_HmvZFP)!BiS&qeE4*S$ z_1zLf-#Yi?6)$*NCD_`NBQS*bsUDrmpfl3Uq`Hu8GPYiEk{=pt)9H|IW9{ zQSwe7B;p#|T*5ECZkP&cfa{v6Fj?KSr%3MUDU6f}xeU7~mlhyk;0$&m2n8^N6&HE#}?*1+}YTB?CU-N8S|JvMG_iLR3z+=^4fmU6xEh=86wPVI_ zezY>kQP_1w_Ce@U^u}>6O9E*juRXBt_#%wgaZXBEdBD`%7d{o7n^m@G?={?{_?l4N z;hE-&kqFmyfvqrSkPy6uBP-B;X8gFdIX1#`)ETc@NSi=ob@P9MPi~=s%#(1bKTSft zaJB0O*iR%o&OSwd&5g&MwKRiw?cF)~1{M^Egu9@hLp#G9cTQfn)lvca3g*7+?QI`r z`)qVgx$%~gQs?o1hMMgX&>1%dg#~rRGIKnSwI8LCggYg)II6Gv9oQ6N$6}v0TGAg_ zG1-`@lk&6t%RyyhE}whbIfu-Xd3?Z1a+0t@-aX96Ci+-hpnkW^ygcZJf^JX|zS`EJ zzB-5snG8e9xJTc_olDqvn3d!I8D;iAsHgI6J~K*%Null>BwSvzStuDnOZp{S;@l}B zdkHe`{CA5minc$L449E`Yb+90eI|q_I=48d6j96q_vL=Wf(T zWVrPHo=6XQxx~bgdnqvFwm0ciyRJ_WG|X?sHnSC^rQ0Ildf4I+GVvBceiXlz^H&nquZKo% znU(&)^gmKkUcdJgy&zPf%;|za++lbxYH7Z9V;FI5k(na9s&7Ll7QBbNO$0v8kG$=2 z6cZvuxas_zkH}Pk%=^rBGVRJWnXRn>-z9pJ{$ww})zjq23EzQAR!6M3?!CgAcgrgj z1=StW1-^bxwk znru2gNMc9sRXnNT&-Ui5`}h|u&s!ezGcZEvM;&Wz-T67^%!bUCuheWG*MxeRAOv|p zb4s7y3kEt;8xAD`$^9;Z=;C*&)Lk>|@&bdtQ!_Ar(_UBE%nW=-Ap$YFI(PVSf?#WbC z4pj8&Qu|E-S>^H3_!%nVn_hEH{g5VzVp*eXsyAS_iP0NlW0u1&{8*}mK5^*ASy?|v z8Z95s#BVs+P&IjqqjIJXHf!9SO5Z9U!hETmOOn(cm`#Xu%J)T!oRAweZ~v2MI$D0v zr2Ru9{^_}UqOHt2vZxRP@>WXnv|Ep4n-=0x%uN@e#yxvw2xI2l?;0Fi$x2jHS!JQ3Px*V3I_Xd^JsK_BcF?35t^H(#q{Qq^E(2<1xg0oHH@n zas~0{K_SJ8bt?`xz#aY&(L$%Bau1Eui7tz-DD1xP>$e(k!;~( z8?>P(8hrqVBqRBx(*(Jnl7>!xbJ$1nnaMrvAeaUq$=d~;8mi^=I4{1@Hf7s?YE<7qh ziG42a1ghAvxgVA`3K?AhhVT?uIS1j3ZCds%q=bFxOD3BOhGMc>=3*r4bNl;LNqj<{y;CS>HSG+t-hQksKg*glhNPR5^$ z?Pl#KMtC^aE8-#84}q0sGVhYHkF{u%B0oV&OgtO?{EVvW0On?73j3cb0C3=^BL$@9{*b3`^!*SudD1-om(T)v%)o&~(r$Yrx5_OZ7dI_y<6^2iZ(pM6^m-K-QxC0PWAd&hfG8@8o= zKg+2cmSn%M^c}7-XSEK-k*aIZwTpI6mX;=R*lN&+&GI@I6~t0cwbNM^u75*`#&kjI z8U_^PW9CrFw@CqW!soie!|Iokd4Wf&^x+U936UJ0)s+I!>q+ZdAd~Iy_T^(b6Zn-) zvP^RQNA$pR=o2(uPWu%;PQ;O4!!B^dcGH|k#@&{H75U0WFH;BTS@4S<-D~6$QGG)w z;UL>HefNjk7!P_L`|hB-&Y!D;-U1iNVrQ+9u**Y&a)osbYc#!wh#Xg|9Q;^K1{!|& zpqCRnP?@M>AQXISy2$}DlNxW3w+9w8KQd|y51$%-b=lBn4}Fti+-%7{mhk5@i_ zvwl0uKBRmkW{LiQh?f1I5^Roy3K{y=sd!Pn)u>N|9fmx!56jOU2;PTD;NRKc$q1X5{qT6X$1Pome<; z0R@th3tRQ0DuXj3@mcS)8MT%U(@6`)<*<{&L2TfY>PK3{#H0f-DQF=zw+B=0DnC3o zVfmJmSSE4^6-~uR#R?O#s;agY9cTtCW%c&#eLE$HnLNGglTQtr)=wpd-Es>TzeQEt zPzV`GTv^h*^I|YC{F~0YN8`kNi_}d8yN{M@pSe|f$p6r!wC&a8J-s7nyl4WMsK21j zoR@Y!i$>6Rz;l!31Uc4F_?b>J<#Q%+$!KhxoUlTeQ8t9$jlu{R8ZU5SbNR$6SOHM$ zWllx#j3|%^O*LGNsh{3m^jqd5BEtQ)LRnf*8iKw@YaS^g zcC2k|Yqax`_FH?I-xYc;_KWBh;O^+ScI?&8?70SmUT=$#5N*E-&zr~1 zoOdEs@&($SXU<{WYg_dcf9}tY_puI*^=9f1;NZAxp~HJII?f z!MfRvBLKACHs=sbqJ=oC$UK#YDFqm!9YKHq`7aW=BmlAuU=t0gC>BII96}cP9S=tv z!-?_9v%l?bes)BUq|rdPBvd_^B{2YZ<9XK`&pG6qWCNQZe2*=OZLCOEEgBC)Fc<%Z zkgfTMY(L?l8w#4`?XEfrI&p*9yZEI27ahQl$$8qg!qV0Ur3kcYx&+qt9OK5^D+J;f z4wD1*4blXvowE}61IG~Dl4^ZF#E@)-RMV*9*h|JRec;6WuMW_YRv6+>CbWvn4NrwN zssQ2Bjb0yhY<{4)x$y2sr!hwCR%Bb6`_AGr<_G~yRZtF_aZ{1%Oaxi-Gs@MucB-p~@suy9_3hhUl!WUtRS2G`e7&C>+ zRZ&b*ug$8?miN>7`)AcgIrT%iZmhz!0P~o^1M{*T$3I^>2apeW$XI7Cqvh0Z;+&Cc z@TRYDSz(^2I;9v~i>;gj89gqij0jX(*={nntHwubF%>)#jY6L-#Zu{UaJ*rGnsXBv zsMbu{S3LmRI81aT4Lj5ftzheG;0mu#Hevao9-q7(%@*H`Y#^nacA=(e7|b>+9;0U~9UluzFkdOI9>S=`&^lQG0@|WL2&CRn zMK(mDi^wr`NAZ+_JeUX>S`TA7+c=a2Ob^S+J4lM<;uNY2aNVInLO)seZT0cAiSti~ zz9Yw2!qBkNFvl|Wh&17te&IF4P9C-T~_cdcn}|OrHUk zZ|!vBy zk{@Wc4+;Dl2&%=z1AEGT5>js}i2`r31k}$Mu=jyVmBF zXtjV#q+@!#s1p?B<>1SfMMMZCJLOh@u#4>vGx9?u-<3Qm*bu_#q0wkL`bOS6CfPI4 z9PFE(+9HDoQ(3lST-ypOH)|Rb7!T*tq;Z^vA>TH{hH*nMno4BlQsSyC@FIjcUU5u7 zB!|TdF$7{afeejGGCh1gv&^8)&2T&fxEu4r3+R+Tn&Ij; ze-b;|TlA|5372$szRa&P&{Dvnc$9qTw(4RVBDeviKWI8vKkwMYg3C;D{p!Uhl0laO zegobAGco@QSUu$Wb;_(y(|eb{ia^JCE@jycLf2aHhi|9&Y7wWk)o~H`{mT&#H5U0r zi%P@EupW!nuW5fb@zA<@vbx)cU~WvzDK2$HULt%fI`$GQ zKQg9aO`MQ%FP{{g8|Is>3@CSMq!I}_72=Q724@ai7R1_Q6YfepqwqdjhNmJ} zDPC-j$7NDn48T+vbW6Zv-0ML?ZufI^MliL}rd7)oeR$A>QY0L9;$!#eUE-pQ6!mI7Y480)k2 za%&6FKly_Hn21WgLmDS6wrOx&C#Nd)S2sn-e6bo?AEu!CT|(DPwLl~1pLe3Dw6y-o z&sTXbkwOq>I@(vXJqLg=EsP|8t-!e-Sc4Q{x`K;j4?;er4JsUxwy~saj(h-RxZU$^1o^b}3WzwWz;g z_8M#jP~4}`XYM3HNuX$^IKT4nXLF%{70t)=KD|R`r!W|TRtKDUHPfP@!&B@h z2F}1<+Y4~<0D*DmQHz%utL+cBUgs5`eegrD-2-q4VW!j`#fcmmFM8PnD++{v7Gda{X52Z*5;D~dZzb{fB=v2bMZf13xK ztYLQx1W)8y%afT^5tejzw9z0QxwbSM5`lx*z`Wl(iK6elI^VP!CbwHr_a}4l*?4pp z(@P?O1!Akv8tf|&G+Z{NG$m-HB>_gb;z(1u`(275DHYIL_)~o2W?1VIr(U;~cVj#Y zq|8gNeFb00E!4U1bh_i1X}s~}5S2`(5DB%tk4^06AYKo^D7^i$+Iq_CYH^;3!Fdfj z@v_t*3A8927XuPTFP&?L7~!r7W0nI5hC1ZCTwrC=sfVHGwaF_Mt^i`Mz*rjv|40*J z2$XzSAGzrpOwumJXb2eBz`us4h#3qRT;zHFeUJ7qN0?yGI5S+tzcwoIwwiVi72aZ^ zgJuk0NNWYj3L*h*{hN<~@MY#lg?=2vhmAVOwmM`a=)|*^Vt5EHvz`HdL-P2dz8^2; zAeLW%9YlfnzO;4m!Awu(rQKIWLAXZ-6&X%~8EiNF5GUUg_l<3LKqpI7QRQW3rM$P_ zn?z#+;^7wE$oTIWb*K^aHV6DmV}$5rn*2OX;!C&pu)XP=s65ec&{jU^{5R&-*Xz%j$Gg1eerrQ{~A9d0u#N;D4xE?`onEJgK#H1OD?eVb1hfQr6B z#s6;*W_#3sQ(OPEJ?_gumLctaC0%C4eeo#(em-ny zCBx7U4a8-U1WmSa@>+rR2BH^vCB5ViYjHL=sBS!*YwUD-Y0+uKX+y+KB3B}=j+U+# zhs4V_Ct)k=wK@m+U?|J$_R*>IG59(NLNMui>TKM61^lK0-xo)O{=|^XhgcWYo5+gm zzS}I0^hum=tfD20aUx+53f#dQs-Q#eR8!!}Jk2iK9zlNR&*+>QZR%(lu2^e+%C zM;EILs$ue_kAKruZZoVqmzNg5MKk}T9^pul7X^oL#}Trp{9@y(^u8nOOr_612>5H(S|FGWyJ(WaxKm_9y;ar$;=?e&IQaGqnVXf*NrMfq=%Hs>Q7>WLtQ7SGkM% zSgq+UrfcsJMbZfn;0&0rUy?*aGfTwkTZ{7(i!%77Nv+EvXp23Q58915>8&$TZwtKT z!NENR<+M2v$!>3=WJWRhSMkBt#^#s@TskhNl1cPYO$+t4t+sB#?Q%&GsLqnE z612d9elL27fQOvCf@AsH4(X1sFHgO+t5uSVY+cZn-&pKiYEWVr^Qf)ZR3}?^3*};Q z66cx3r#-Gfv#u4vD4517-iDrc%k|q9JL7@`?RU*W&jff_T#RlqV;R>i1jJg`1IK?K zn?B%q&i=v~*|Nc|Am4A9WqZ<(r?eTu^<)q{qau^Ts4WmbTRVBbg*NajNGF3k zm8{Yn9!mgG)_$-qxBAz9pHlTLOyTf<2pn?42)RG}-E_)r%%Y@$W^kE7IEGhO6}Hr| z9HPdH90hU9jQaFJQ53w42DBh`MEjK|0qdvAVH3eCsr97DPrfa)Dq>e&&M&gieV&Uc z3}bHNifp+IJr~Te$3>3zo5D${Wl(ZER^%=4K@3v>eoR2_t=Uh448j<20=*0@1#93* z3?!px5JcH5E$MwjEf8;aikyYaSWz!2!hFSffh13Tx?kORKiPdq21m+%!HJpGCBc|N z{uyhqutr+TnQ{e`%6Y0gq^-I=+KFT$et4H(gnT?ShM zWu33VojKh~nG;`8F-q+Z3haluTAW~(ESWxyU0JX0Z&H^I6jJMM5~3YZfx+Zgyq`vl zK5;MOhTy+=v>OkD!^)lMWaPP!2L`uX*Hz4*{11Y6H1^ReAibroTVnl>&*q1IwPTep zV}C%aQz(MnfQc-buJGq-hAML7P0s$R^hpY@vf-ykfe9hIgcncJ(@qehvTSYdSgs7> ze`^il>9g&O-NVf-M98ngv(Q%9Pu25RU&DV&3O+2(`J-nUV*c&8HG1DlWjW4;4(c?z z-{Uz{gBGa!J#(L8JDRggs5D*AHqMwYNCiQLJY)C|LnZpX+$AE&DMSbC?-1L6%*$X*puw2jMt}z&&#GNj zC&6KBWy>qlkS4|lPi=ahotCWQCE}{c++3~nbfS`pW%La!&XsXsvk~3Rv383;O)_>> z`&*LFjl&N^0hDuS3WrLI)hd*IZU^P_Q9UIhTzwC4ju|hKJ|l&`dbB;VI@k-?>N(1% zzQ+i@3#2Q7)g3@|$o+@MUkr-P7IIR|97Q^zKz)HA0f;t2xAVQIYZPnithGD>r4U(B zluB`;!~T#XRx2DieCK=Tntsw|eyIf3Xy^6Xg4V68lFCjn8S}f>Nyuj+`AYz=h*%1U z0VB2#irPoZ7j&6OY7n@vK0f{1%-m!Uz=5pP$i*ZtWYO?vTuu8TXW;U)o7e8a-S z?`?&SI($~`x$H;JN*{`bB;-ZXnf6)u>Da!`(Fji<7wAfn`B^+zrRo$q(elObNj$t( zyg*@MkY?JCmRcgq#Mkk&CIf4VRBZ?U6?2TamwOVfuDYu(4XS}78-D*mlWlS*6VOq^C}SwjVoKdOm_!4$WlF^HpH57$S~0EKY_ZN~9v~MAx5DWNQekTxW%^@?IKX zXt;#m`PPVw&xMA~_y$ghS_0biXP5pTz>I?$B#P`~FqXrQu^2tg{DSl9E=HfrwbM3Z zz-v%B!MdnsTg+jinsS3GR?dPFd zMDzhB+Ke^cA`DdX1@=zmMil$uCMHh*X50LCTar9j^TU@^qfvkXt}w(G^N~?<6YJ1J zDF^fJrEsq*78z33XYNA;iBcE;b^Ze%|C1x0Wntk-%51QT&fEOTttIQbcl%oL#M488#PUvzmkmjZ)|0)YgDa4Ad(uX=Muhw9Bw&s0&8l);0_AoO9Mlb1?AG z@*bv*7^U}8B|gN^%J5-Z_Hxm9G1pc76zEP&b1eAK8ld65lYr`3MCQ&@&yXw%rd^S# zcUC42NdzAf=?^1RSN2ahGj}}bnypq7u?YtuT4{0#7pX~!;>2L<`F$M^F^Rnp9Mz}> zZc37xEf%&6wL_{cgli0_U9}UZAR~*&Wsud5{`#j##{)ld*RayR=vI+duQ~esb3Q%` zglr5_$v^6EM}OgCb5f_ydJBaMt=zoQ4b)q(cx=9Wbxx1^&2ZQO2?mtqA*orrj``ke zSo)_?o13?DvL%wscAa}0YR-cAf*V%!q79ts?haS}q~`sZ(nV9^4k<^Dh=7&D#*J~G zJ+!(o5N}?a4&E$3k0JkQSkP0%SQS=v>xppWkO!VkXagpw0MmQY5Ni0u*JB819$P6X z$wwAvKKkY0lgvKOkb7vtcqV!lgH`I{h3uvZyprx{D#dFyN%qfARFt*y!*4WQur+c5 z^AS-N@0TZ|W#A9&!jry?^n)r(f2I3;<%aO$6AEb@!O#qdK_B1mnKi$5wCgn;E1PABy6Io~tJtAxS|mZS{n%2bCin4j-Ws=xoC0bM_f~fCB}TI4WAY!b zu3s&u3BwwHCtiP;cJS)yCSFbd3ts*Z6L(Z8$QOT8NdsQWwNRwHdib7S*tRzp2RXULZR-C{y!VYax?^xe)zx;!z;$(Il(MF(! zseSehz5z4jj#}LaYwz+xKRv<^EWkiitvV^=H{3iXtRXl5-2AHMrtzQ73g3toYKu*E zNT0Z!)M6~3HR1))3vQ(H%+7g2I6+jCyNEN*5cA=7>O)8tGIP&}_nLhFnf=Z2uA?<2 zTtyD7_`_u4O(To=#Gx$fq^;xzNe%Mm19%$ zfwqrLQt0D}M1OA9W&Uzq6){ftr z&TY~u@E>w7GW87LT@4q=uu3z(-+*#lil<6I_W*#rkEvh1Pe0b3Ix8cps|r4GZ-8PY zuNL}5e$oo!iWomN^1uCzbmSOvcTj{4UE9oNr+MXDR9g3i z2yj7FeQAhvkCg+EY09$;y_*CI3s{p&quFODFRv^4VzKK`@Zha;I7?;{>EQfwto*r* z=MM$kIm_=IujbH^zRR2V<~;XbJvPImfAB54%+S&`sW6MJuHNe9FOuOlBji#M9c(cx zM2n|RF%7LMCb1_-w!fgj41)2M3_f7$6O30%S+ON^g1)s-~uKsseZPPRS%bvPGj`_yvY| zDIS9cS`N9DmC^&Tii2gB!HAn#htuVC2w|wN3$PV+(-Q=#scCt|L`?p?s4r&zw|iJ0 z#cb^SjnHrmhbG{{{GCN;J68W6_BuObn;QAB1|-ybWZn=91m5$<86R)>2> z{$HvAoDEj-YQQ;{GnAOntW*GcdluyUrf_rHd@@1;J4xQI?5qGo*R4kxct5){^-4O0 zW*f4rRxu?-xdwatyv)7p8&q_s_6uKh@vp=T5+6y)k1)ivY;d2p5(QwC z?F-q;s8v2DoZrBO6U9}6$zcXw(J9R z<^zE3XhMT^{aSN1!lK@++wM#os>@U2A^<2)u;o3M);enTD%g0~A$-bYj-x<(_YnUS zp32cplv~Lx*ctc2wKvmf>l4z@DU zRqDq%ANvDVkCD)9)dn{0If%kw!MCM9jN%86KuzM z31VSV=t^bL&DUWH^XShM!{^GaP#~s8sZ>cgR>20u5cn~2dMtj?j;%j{)p9{(X#`wo zZs3f6N?FXg*Y3SEkl-yhWWLmyw9HoqCSsYAfw-bx{zXgq#484N_=l0iwZ*DVDtJJV z1ZNi{+-!1+sHyOsIKQGBJNj@A0h3cA{ppSELDAkg9V#l#S z#w+KZsiJco&T;x)Np!f*=_xZRU0`%JN_VSq+sE7Jm|SBlROzI#-38+o__=$F-bap2 zi(pL+S9M~auUo^L1&TGww07&_$ew$cf{KK!q3=$ZBN7xH9#@A)0t4}#HuvV6h8G9r znqlglPo46i-(~s1J`-ey!~}(EVe;vGsRFQaR5kg+f7RofF%mgGpNx#TBc{u=dTVEW zi%1-1Zck7#Pn*?PU~CkV`e48UmDhU6nk|VZo={VK3 z(H0y}n38dZ=_`f}hUDu<0Iq|##R+4bZj@|-jUcN|H=VWn-7_nEC(cC*I(BVT+tSMC zYa|aho=&(e1pbv}apf#0>%cd<#++%HDUQ;Y)cYzDnpIQ^Bg5kn{%sz4_npQ6L4GZn zY6I0RN*ovkPjfHOnp5$~Zk#nO7CE%>nUe`pGNVzX$9|e&ImG(_DeIZTK^LOOH_&qy zSyN(@0pDc!!#<-35dRzvMjvxSO+h%&dRYu-OkCuHYcGC3S|)lo-4u>a!us(HDU=DQr zey(-UDwkK)Q|hp3<-;_>Y~t`|wZMo1G8rqcSMavdAr}un$V(dsMvxz0fP0&n+Bc74 zgLhjC7ZXP;$Livf7oGhy);mV8W&SANrXtr?n%r=2t^Oz9W4C#Fk3);8goQ6jadOe7_LnpUNbT7A;*xuURyhd!Eisvb?F5$j$zCEFf(Q(*{ zYl}$+C?scQ>Fk!p6od|zSOvsK?ef0j=g@Czxga*;$bgNFT_^KjE>(6Pb|V7rX-)Lx zwT<_$#5tZeOC9Nh{Z}CrQ#O1#x)$jehF}vl%IdejC6G0WLBU>-Rh*dT5MUt#e_ig}!+kd5Yy7!R~= zrX#Vt-m5(f9?&GGlglG+?HS$xz>gLEn0U=-b>4j^fwZ-B7M;UKc6TLo%WD_ zIeC6UrWs_+VoMie1WBW2)2>OYS=THtjTo4_@v{pRW}}o3Ogj;*KPyjmoD%3E+*{~I zF2H5b1!dg^eJjlwJaJ7bloi@AU8A(D*l;pu_uSJrtjR--Z771*8QOZQ;yub`hjla%fao?w@?W**?6sXUu$V!tR zeH%llJwLcxP!MwYus8_Z2KbYhH1rs%^?S-uQj(ik(T(^u;E0f~&Y28-*pjcW zt6Ll&*;btswUGThnO0VJg6Os_j)7G&f?ZaIlZKx-qypC$D@Z2Rjaux+O2}iM)RltG zNfKrw8e9CCChbkwsbO!QCNvJI()*JvSIyC+Gq5dE`#5Bz zEBdCgC0XxY+u?9$wxYTxzCxv8fYPPZ?~6rbKRYqG+nxEj8Ms&Tb&-NLIcyk#GpWb2 znq24jmyEAAGXZ1n;Bew9^Cxi9tIHtuA++S0>qr#50F`Wvs^FQo5v(ftLuurY5(4i8 zpTR7UGxymuxC+m*f9g_sSYq)F%5%FSj_pMUE^EpYc@u|GdaIU3mD*-_{5F*G3#jSo z^+MRc2p`+{XiKahYrdi>qN~&mm24#kcM|G3*~!%l>f%Brh&sST&pj0_br0E~WF)oQ z=o1>e8a4#$YQc9pwtVKKX?qYT;)PHz+6n-usM_?4mq#W8kJD-aAPqaYd}BJ*M1WvN z{-|83spR_fCp8yoyq@9k)Kqh)D%{9-l*kL3RZ z6{itWbsr4K<)7m$6rXc2z+9uLh&;r=sGYPb{t+uTWP~!wSKAGH>2cJ(8#vKG-k=>Y zpgqvzrqp?6D$X-mDKyXcNKvg%L$dEZf>jX#;b#ul3o$vQ{oy2qMv`R^uKO6y1mQ^ zHBLEZK`58uMX>TGN*^C5ipQN6iZ$-_DO%}Eqc)%ZNc)~qKYPtjsiJ}Pmy;sA63bfR z**wB<#m!ORsI<$sW(EhiPorpcC3i2JgDoB19>nW>?J(OFY18i*n95eW5#9qS$k*rx zeB&xjZ#|rs*snypNMCZFXmsuNR%oL&RLjb8$XErNkmk%vFT+(&RO=(JSGW|iodt+R z^*=`wDu1a$hm*|!u{>+IquxpCx>&5%BSrJ`0wydFO*2CYflBa+!7SvyV?%n>_AZd4wAY2jJ>vk#)4Fy~7IzFwK9X=hY zNtmPhmD^56bCa|qa-7Qe#4qPUf8-GIMH50@&e3TJ%WN6&-o_AFiD#9(@&I)7-*a6w zt-#kyqgA+!CI1g&%Kz<%{?C}g$jbh|yeR+En8L*JzcnfUr!j?<<^S85(qXEiqrJ)+ zW1X-scK|oAv$LZM^`AGTegC#@KsQ)8V1IzLquclRb;;NM&EwCnSZt-T)8)2xP47%4 z5s{K&2{LOP6L93(Ciep4qR#=)#3c3F2F4aM^E~9bMixNkS--cTKQR%K8wfU+_J064 zK*zuAY()&6fm{G~XLEqOvGa$cBY^447fv`bfH=?===h;D0T_7zWP#3xDjxPgMgXPZ zUqHdm$(hc`(CI@Bv^BG^1yX&u2;13vI9iyQJO7EnOh@-8(jRXjdVrLnv6Y>hla&R) z(AESXMK4Pakh6395Ly5z?Q8)?KyyQDQ-GZ*Kn17)P*oOHQU-`C$*U?TQ_+6}R(7$s zw{!eIF2c$xs^YW&5kWZ>Q2ilB<7 zf+!=ypEUp&0j@wtCyPI6|A!m-2Q$Fm)IMBI9qnxXN&uiVcXqbtVqkD{bE7wNadM`& zb2Ov3xBiQtin)aoz|GFl3h;4t1X=_CDvXP*$wxVz&4K?4@MlW^G8V=_TPNTjCo#K! zDQ!MV`Qh{-cm5Btk3u;AiD~^WbAS^N_+M$v4W0h-l~GWT0oWK?*g6Ak4Q-7-44n;~ zU7P?0f5|@HKog385d;E+T^t?%5+I>{VmfqRj z`7i4~@dQO=xBwhq*Z_>2EPyW`O)6?@B5Y@4^TFB)?oatdEI#VwZ0G2~@IPH`WozeV z>-E18Rr0CWHV-Hpu|{-pY=Q~rn< z|A;?I;NxX)XAdwnv~~jeSeODoE^uB>hOR(>v!e^p$LpVp|3+|(>;MxBW9N@1|2Qac ze?^zHHMIk9{!9G9p}DfRz7T(EqhEw6U=E_;0)aF;NHpp-TDxaJFy~vv3ERC|EcfoByk-|B_2O8-6ss zpskrT@MA~*5~=<&@@9V0vI|L8t?(b&os=;Q=oWBW@5{HVeI@ck(K zAGQDnF*#*vbq$*TX_vo@L~V`jOe}2808FfG07FMdLl3wwA3eat$_nse{Agtpp!;7< z0$`xGwR8S(0oc1Z`v6Ss9O3?KBpWM$LGX|0Ux*FBAoMq42QUc#jW_`eqW?kcUp`p< zjXrep|3MrdI)%RxBY;8iZ^Q&(Q2HCO02oyMgE&9(8UBqv{EQqwx&i2H4K#KBTh9C+ z`M>(=KZ*|$#{WT#Uq1YS|9~HfP5%Q~{~$XT$A9QQsF?o;vV4@q+{4}+X!{R~51GY3 z;0If)e?SfZgZ1B#@uLR+@MZiUWA_jEk>36v@FVv>s4#vca{8O<9|Uy$ClkhxZTfrN ztRJzR%^iV%FP8NqxwG3p^L=o2`3L-{l-u8s=_7#0-%I~kh$qnTU*7-SkP3e$@n3`H z%ikUPf48W=u(GqGofS~s!sO%j{0|dZ!;h_U*Z%S`B^W>CAFqFZ)BUdmWPcC1e|QTC z*|~esv9PlN=$JS-0gSBd>>o>DX7~9oU*mt>E&iHNA4lom_|K>Y0DfUPWqE73_cC11c>E~nND0Rk-TkUAb(LntA8eWk)4bLm#**E0NWA` zvS4)UxAnH<>ggL3MS&edUs+#VL{Y)nMYXU}5{)71Ots}y3LiuSd9NVnp7#uhY3YZUh-WSlPCrI{{J=l4gnxM;(E!DZ?> zgMv_uaVaSKz8+*v{A-c~62j%`i_}4%i&pRMDck^Z5#JhglfJ$(hVy1Tee~)E1yXfr z*{RL1D!I!`of?7)J;3xY-bgRW&^D0HLr(y; zN#x!a!G*)eaplWL-xmJ-(J){j3W(-llhYrKeuuupa*dRVDO z_2>x3gJ?-#Ze@ZUqE8J?s{L6f36i4R$j8~ndsx;--R7xOen*g<#513vwGTfoG|7eZ z9&w&?nG)=_(%Ho*Ws8icHVduqR-3_)mf1m3`s{=y`h{L3rlpX+tM3E~<)X!NbNFVo zxqGh^9dkoni*p$_;$d2YKa4UKw=@lUZ)`*PJDw{cu&RDBK%j)sl#R`Mw?PGC?0_Nm zlBsr8_aKZ=$xZy;JL8K2A$`4kEO_VxCHp;KXm8O@U!}XIo@9tu(3JZVSu(3U=iJZ2 zEl$7LT?9QtWlieBo71xN&N4eH*5}^im_ReMRnfvE+60dHSfMniLTcwh6O0tHO9+m8 z7_Y0)-iRX}bJOY@X*4g_xvP}eREUw<+(42wv@ot&(kVjIY@3bBg#xRU?MC$VaspAh zl{qN8fFm&tS|%AFYKjz$1XzI{5i;y=IY)+f!|xVD@N-nHk=h#1w49CwoQ3Krd3Kk@ zcOzE69d<~9_J5?9^V4pB9YN&(Dw@VzK_^oJr9-13Ei)CjCcFSm8Or(-pMhWY7Z2hh z+i8>N9@W_AoFq>A%S=|`325viD1P>f0IlJvLRRR zpdBxyU(<~*-LJUx38xkKkVBdTr+qC-iaihNc6eDsy?aEQ)C>svp}CPoMvdWIW?ZSp zlv@`o1vLKSZtUx1><3NqdKkhxAY#A0uVXSq%bi@j`mBc_A;1~QW=kURQpaF*)EXBk zf>NOU8!?hJ%`Kj8EvU<$Ood+-Z}l9LW9WvoUKB8%X(ej2L$FDbh67tTkA=sU23`e} z8-DUUerBboDf0wABxk~VU>!O7?B>O6dO5IZ$1x%^YToI7DJ{h6gS5Kim;`jFE!h#D z@>LDmxgZJX*QSui`WL}YMs8kPnO8*X&u;#9Se-SBJb|&S9leklWf9matE=i;t8Q@* zax!4fAnT3g{&ZkYii8+__@0y_jbjWnm8!IG#r4ec`r1WRmze~Q5O_6^o7vkYr#2Wf zPP}w6W^K&9AFJth%o~o(C-h}FFY4R#r}ff#F*am6@yhr%h9Y9&WWL4&U+aOG(+;}U zZa4QNEBmJ{`ugnzZddDq_JJo=o%WTh@w=7+jF%*FNEO;(bfHedRr1xHh^Ze*+mYB) zS?wk-$Kr#_-y<*uH}grJyHg34`8~YBj)I`v8J(3R2wP&_UK_O7M5{SHW^XDmhe^j8 zwL?;PY);9kPjwH8-LG-!)%ll9QL+d z4eCrKuxtSybdbIG_U%EXCwXB7y|7HZQneqPZo13CKAy|;#)UJcQ605B&f}})>!A5B zg{EtT;;*`2Hq@pv<|;!iN)m|bt(hm2vxj$w(Hef_ouc@it_g?zYS==&e&P%{9kC*1 zHh&mPvb0KCcT7$?9ezIp&sq)Q`BYd(%w^n;4Bzn0L8?u41$w~wA~oJ}GCmF`NVQ9V zf~zg`0nvbH2aTfU7KK<+!BDpVJX@}@K02(EXbD{Ow9X{yFgV@plHM4bN*`J7$)S%5 zbK|fsO2z4yVj*#L3qw~}a^o!yL7r=A#BC<8rtX|LbWXmilo-rgvOvZEqZx8Bj(fDe ztK&ku_a4qFYpg&uAZ)PSd?G;u*H`KT79{|FGE<|P7&iFgo8TslDUAbzo@DGyx+qWV zf^xqu$}vgD zD%CqFcz#MpJ5-43hibX+x<~HMjt_2w1u9_4r2zX->B^CxXf@{L%@2{or%j@pCSQnl zc%!OS{Fsndn7L1VKi%Ho)>>j6j9RN=##t%$1vF}3yjNlwAns0VV{fghpanI54!Zm{ zspFwrk(^&u$*-8nD%*=4N2Q(*KF)wZs9J$SP8q`FHuD5v(Lv*Dy()+}vgaW+Ze=3FX^j@3twcXX#-1?|U7^rW;8ZzPjIAkU(69&VR1f{=MI=k~4IwFYErEGabomU?k#h9FC`Up( zsD5IYf*yn-OgbTnQx03bHao*HfGPbg4l&r~dg^5})yur&oMn?4_=G#)f(tx5XqNrRu_c*3#0nmXhtSqHJTeO5wZdhtO=PRAeG1ZZ2 zXq+sFL^O2`DKYBdP{mc)kViSQc4Q^8|MpZ5?pK%Y#pWC|JJLHZXZU$)`&`(*O6KQ+ zKg2@=C=Jf1EC2+k%b*s>LVOoDZ1j}!hG`=cIFf16CuN7F5(OXDi^M05hA=n3(~1Ly zdgzJo0~rVXj?X!1>a5msQyXJ7&YJMNvoPf@vJl-E+&L-oW=36CU2s##Z8_+cW@9sj z>+J~1K5+RL{9_f*r1tI(+0C)Uv6iEIIJcf&48+bE%G+c?y*1i=E>LB2l-M~_Bz<@K z$2_8{@}?utFNB<5T3`+jcyn?sUL3?19-u_S6|a|*UFp-Y28n;Ta{qokrB!6hK{%2N zL^ezG9W+xm(GQ3J!O_{iQjvU)Cg3@J^PZ{)u>&Hy@Lc3(>Z-W(oh=G6XA0983I&5>2TSCBH$a|H$Wp|~2GR52|sTsXsWE=%!*p+-XAlrSj;FZ4=kMi^d-EAed z&#bZX$RX+;>XaE>Iq2L3Wb!b;qkLcv!Ur;F%`L#A@f^{csgJZX8&EIn- zV`W~7t^+K+qHcmyWW7P~@-;)hd$0b=2tGi*p!`N?ggWx(1j*cFs_d8EGGRu+xd^`AKIA+2bd*-)A326-WH@>}#6j}jlU+TzM$dnZ z{+V3+FqE4$tFH9O#H5g;lnfnYJ&-8h(=opl49!vw*^Y;$36~X}Px=E>IpFk7vkNg% z+Zw`$?w!5C;^{SQ+|d=bax}-*VFJhon5hB4mZr=R@6GH|xgxX@qTxwFEF`-uj!bQl z>5Q}es>)22pC3A&4iIvEykgb?o4>k_w;{qZsvZ^9nEfGIu#B;F?a6;xE>;+yrC!U_cza%VZ+N=x?J zoHyQ~aY*U+2d_bHSJ#8YnDUcDqGQbxhs4hE(L*)j@RKG+Kxs zGBUuTFJJF3dSdC-znb$?ELtf^s}3aRK8~X>#sZrCixKVNGa#EpEE)|n1r$}4SNR<- zj>w6Ua#XjGxSP98MEF`}?gqknvDFO6xNzH#yv8N9s#Fj*E>j}C@6RwJ1Sd*uM|lmF`x=vYH2o52H;|pT5DM|xt*RC;%93D? z7d!vC+~eJ=5~{wEs0tF}#8>E2>`D0*lb0CW5f61M&4A``StYDktkCAQ)GWnQxbesJ zi@YZ88)E((1*{L2D^d1~4YlNaV-xc}byXEExRB}yF1N_?-hD(%nCC_plJ>=tEyDNa zSjXn&J^{XRnaq?4Mf1w)xb^aK8c~Jt6q{~-8T!%iD78Z)!8y_KU5EEN1{X-5H5*dv z6rXhBQa=rP8o@9WD-B4ts$Gz~7W^hRiu0Ir0XGacC{hISOU~Z>w|e6s~{p$DVn%FlRf%yIwd5~ zp^f1-NG6f!s&r1eqt1l@QXB1`<-vuh78Jg@3n<@R=|e4TWrAj^DVrji9!Vxpnu()9 zA#3!b@xl4wI!m=5)zOhHt)i_KDt?J-tB9=?(Wm>B$?=I*v zIg*>i_yxPx3vM+8SwHQLrO_b=Ez%26)fM~U@tEpa!MtA)FdC--c0tGI#ki65B4R7W zIJwrd0LAQaEdR=1J1;YT+c$MFTaXKf9uz{ICk4+$#}V9j=Hqn;cKFQnkUTgofG#2( zv>l;kVOeu=yj9N3b-R2sL>{0$+YwJau|djYy|m3t?0Q|G-;2HpV!5oP+`>gzZYvQ# zQ&`1@S?xBG{ua6?9kq%UU*-B9yt!gc8x8E1`Ht7F(G{EC_iK$1CFeeXX@kqi^jnS! zf(J4jBKv1-TcJ;(HP%ZTLSDtzx@joS*(rf7QM1FyIlM|rHkTL#h=Ex4foA#%(_XD^ zow&;`fp?tq9YByAe|G(Jj|OFJ@=wdP25Lo@p1suMXorvh-d2syd%dqrI1Y>|zMn#I zoOXq7e0~SMishHYT0JFa+G$cx%>q#+ZYqk=>WflpEjIg$tw`Q^+ery#1Smyt zsO-*`$%9Ow4y`4NVruY9P=6`pM!62SvNPjS;DBOMJhdv|7aof;B<5nA9jC@Besy+f za`5cykUCxRoJaWavb|}igX*JX0BPV|i`Ina=A z8Y(7+`Y041E@`;W&8IrgH3OHI)E&tMw*Ip)5vLs;`t1S|DP$a57lR~q?bfI|2TwXC z+RtJWL^m^y5h=`N^J&B#77Dsg&`%A4Fm$KnKNOqv^(23mXyF!C)lxWJg$zevt*(Bj zX|+c5;H^IUf|*!)F0%#Ujm{G`g#W8pt?rC)lH|d_QK*iYbh*cFlTbB+eM9fFFwL!u z|320A7fZ#UP9y$=LU@fl0@_38fO%R zv8so(SFoW(nA%^^*>RtuafJ8z77e~dT17PX{a|hW-3A_W;#xPZL%*}3WdBac;Tmwyr00Z|&DxaRS{pP)!f9Qa>!>v4mZK6o(nLQ2acyLG) z`miCB@0s7=#P>t0OvAKyeiF}M}@TbPS-^>g%a)_aPoyAy;KV$;>z5F1JWI!Yu0b9xO z(ctl~_nrL7$do(c;x6v%$2OHdgI}U+W<58OpcQ7+_Zrp)DRcfy^I86oPVn)mq+LH5 zWTi7Iw#2D~w!w&{jXqE=dhX{7>lB-u}(QPKSrZRS$g zLysB>?hBK0BBFNN^p#9j6@2+V&apMD5sY`%x4^<);FQC#l)_XSnSZSMc#4&;*IY(N ze^X3q&+Aec2PiBN&~S*$CGR=FS<8o(J0e}d+aQB}!FX#{K26m>vLM31K`93j+wu77 zxeX5yAF<=*T5-#JmXx6uTi-RjvMRtWD(i>8h;9J*5MJ9Y1av10SoJjizyEQlP8^_r z(-4j$*e0v8eGXpuUd1PR!0tf3=DT$7`__T`gkcF26-NR4g}wsF}vMENPcRd-75^AEDjkcJG+hEjL`%ed1uc7Embps9Y+ z&}1znn-Q!&S7{a# z)g~b-1(ZS7DDgFNJ)H{MfsE>NTiD6YeM0KLH>n!KD8ei{Y`lRF>lw~t#8%aawnGpG zpGk5S7Y4n0I!ee7&yrmIidPSHVH=(TDJYe%Cnrxf=Wx}9%jaL$PbZO?O5kM3LH{1^PzNYxTQwSdkN;xH`8f19%rk#1=izb}bmMeyUWJ=uXhtFPN{> zRwf|4`ZFs6(pt8I?Md}-yR|}}_ZiF$w`H$g*L~aDsVV`y*J$oP1+AJG)wgR^^19F!P_h=wC zVc*@vz0s(a^etf59|jeR3*#&?)Y_Aj(?4Cm+ME`J;vb&yCK%RH+#B0MjV@C;TCLAE zIUZf{hyD1r!#kPcgW;ROTm?P2u<{n((4^qvG{ZT3EU~pvW=bk6TN42V=poG@irK`C zN<@M^e2U$PTtb)zTc4gMUa42B+;AE%U1!B|xy9xn#pe?8%fy+romAEn>tlzJ3es7^ zjH3wXK(TwX+U7()xD1$)xZ()R7KhBZG!rSgTK0OC1H?A;oGi4+urfmb2HT5&>L?g2 z!Q&aG^&lX-ou_kSh0sIt8X&VmUT7Q0vmv;Qj);w8?+v0AEQn5|ih(*mi#?uuvStVl zkPW7~IV}&L<+fZI`~+#%``UyEVQcxaCzI(IYyz z7Fwql#W&B^!wG>Aos%@^Z5+F;Qd*IUZvNx4{T9t?6061|9~LQj6l7+SMssc}|LKl+2G>+B>>UTXfa_?bF}Sn;=LZb0WUsP z-+5iilDZxps`>zIoIbkny|wyhzc?6l7rKnV*EuJ$_@)E12`sr(&6@5){+=^|;$_`e zN$jFuf`Nqd=3;Y|AlW%_{Ew9SDFRC0mlQ~uE8C5or&31MI_{?kQ!vDqmAQK-MvkY3 zlGavJmx5lx1Y^rOO~K_fkUN=1NLsOvIrDXp$hu?w)HkZ3oTY1AqQqn0bUG>(ITm&+ z%V3~NlJCbMkoJ=+B_6f(3Wj*pT(KT;Piv!i`<%6yifw|+Mp35_pZv<~!|wsR2Q8~a zhsKOiC%4~koomxKtgp>{sT6xCE_kPIqkOB)*%77S>{jaq5(57XK(V7=jdTlPPvJ z>;e}_%nNoE2_G(+mkT=p0JM1=FNq}cdcAux#XhQ!ypl3GBWn2W)xZnqyaaiteewsPyvxie7n>cn6vTVb(J8v=r4i;a>lk4aDP419vqzc6a8yY58j)c!`kak^x zNVd!_7_IO`2^lOso8iZWcmi&tAoKwtR`5dNv-DFey~KJ}Rk*l_M1w&>k8LF>oK{FG za?;jkhy^JsLG*D@5o3>KuHY4)bqmTbQ^#wRX#ucPzOnuTBX|eHO=&_N805dDjkubu zWD}@*Iwz|xAPgu-Fe!F?F=`|2ZK=PM&B%Kn@rVn@sk-8d&k|bt$bIc^psrUtbLIWYDdAmL>R1tA#dsl-(n)%vDP5(;xseu7Yr$^e!P*!z6aah{J}=SSK_6 zLaB;@r|mZVUg0$cQ&ufp)G_VT=!PxhM#0O`%eQ9MiR|#DbEw|nk@Z5#qeiUr-rtcI zS+S-iSH9cozvEc;fpRM%kQG+hMb?U!=Z!OHM7hr?w$KPs`$p+0A(huahfP2u)=hBB zy(9?u!=B~^@$*5zRO$v)5Yk{;SDjNeZSe_Pog5==Z@`<<8H!7tE;hPrzAV(su2>TU zjIX9m^FlpwTU5dEm#>i4-@4oq9xbjXj~{Doiaj;^wQqaXQ&d)=cdL%rOh3cztuI3c zKg=A_<-W+=F8k_`@ePlU>bM!IH<-u;*W-n?cIw>bnzY2PtjB1$7^*|^2exa{-udiU z&7kJ#e!~S-fi*_Y;d}0cTVwbn=E?=XpE&Q5CPHBUc@W1!&9(uTAra0R?^bgN{XFEm zv-hjv`H~!!xNGNesH_Abi{7;Sf?U3hG158~xL7M5HM*m|wYERpos|fSJpNq(Q40BJ zg>7Lr~$IaBwdK3oEPwK{Awf2C%oNz|Njl-?{1A1UfM7gH$; z3s|D?!Q=zWG z4XoOK?K+X=PTal(9}bvayglQ9FXv>ys))Ml81oaO&D_U+j8VFla${3$ItqzmddiDN znGiDAYQRdi)q;Oq$IY1S{velq_~kKJm|o}=b6$a}q~m9BQ{QmZ7;)b5*D`gE7y6t8 zflZYFT)x8FS?)wYiRP|2=2cZxB#IVA`$bPvbZeG~yr@avNvBM4W#p%4=gh&@DVleN za;E95?sN+_qtEU+QOb^R-rtPs`4i;nAn^*4c{j&mW8gV z_&g>-6KY}@VWo;nWo>JCZ=Yj}JJ!V~QQ8m)AIRlGcw|iYBar4j0!R>$BF(H4Bg2DX zuv6a3YtDt>3L7e0?JpKpz2=zPOla<0M%`b^;JizV5GycaK6m@EIN$(8m{y2fT$jTL zZ^i_Kf-^r!i&Nj|jg5SV-3~PB^G4bk9FkW4^*TvD!7i*|aAN=kHRr>dF>9^`LZ0v~ z(12A`t}QOx&*|sUN}$>L(?Cgd<&Hv}(V6+iiuAf!B(gASLt}hw%>0;)UHWtnt z%xo43w5UiwHs9VYIm&ndNzpsKCfvLeGL(hNF?wQ3F!e2b_e{r5I|5A3=dP%euTH_H zJy*J#)T^L9Ha{p2{qu}8;B)f{CW$m7RlBMM5l|Tsn2AuU)}r=MGPs2+qfHqFt%>3r zt-mCC3sS>|4^ag>bOz|YzApr$(3bCwM>(1Bi|JD&G1i{WE-xkp-oAk@j7;N)`>sp zKy}onT<2Q!!)I8MI74f~rAyN<(&R-`cY{1Xzls)iC0Ii=E#4&GsxojI=AL{HlX7v8 zpCf%;G8L5jdGU)HJL+KU@G4jqvttc2^1W{Tnh4`81j+L`XKMQ<_vF&Kucx>i!l7l}VW6wkPBBL_@B8Ou$>w5DX>}oBi3hW+ zUT2-tyM<|25@6OhqGRim75qhsz|~5X+j0$1dSRF45Xw&E$ZBpXhTkpjxA%7cN!jQA zT60>kE|2VvB2l#+sr0Mm>b4ggerk~fv+!rDON)8Z^LlE6g;SECVg0+44U?n2@t7UV z`#zBzdF#l71<$k0!%5K-7NTQFvf}fAr&o*g+I2;Znx3$zSDz8>nfnJ0pQSO8Vv+7` zWDdGICVZF?x^Md@l%Yg@^zVC9&Xonx(dr?R?@muysq{mQ5nr{EaM*h-=U63fZmO_C zo?)XwTOJ|Z?%CHN?NsU@B`o0fh^lSvDe?l(gh( zb<IJif8%Z zal82z2|qmkwROm5#)fnS_CYk+mu5m09=im&Dr|nft_(W0o96o%(>E1t&F@E*o2*y) z87sfjS}v^jOq-057SXpmDMmt%IISa|1!Zcw^Nt4xj~DJWN3k0$w}6qV7`rqtQaLY3 z4oSMFI?AtpvjQB!F{Y`*(Td4ov%NoJU)%zHXPoP8Nvtp-MiyqRn8??3*LxPsLD+Jm z3Pv8vq?Ts;Y1g8SG7?}uZ?bY}7G3%j!o9T+zYW>rHCo_6%tYAXSZ#Jrt#|_7GZsrU z$~g4&wYMvKLl7@R!e8ez2gzQ2eD}U`2|RRedk4U8Bt~L1$VBIdDR-Ob+p&p~j>OoSBrG16aveHy^7b2%srswKO#7!YStKhi zVj1p(;D@PW)hB0@)I2S9{9JD6!Ai8HV8K@u5Z~=c+^-|NHKAquaotoQ&C0KGS6gR+ zlMVnTN<_`OIzK-q^etc+au7zVNkfHwPPt4`M)q&O;yRtl{6*VcFhL-orkaQ`D28$~ zmuaIvv?aZIT$!%>pxPVS(CasW0J;A;Muk<~YBUTr_>yM@-UOoUhuexKqLU_&yMrU-B6IcEnxL#tKMK#YF142pU`m>p zsF*$F-IHF|cZLc1dVZmo5u-+8o?`dXKM-W4!(px>ZcxL>dGa-&_qo_Vt?@ckPtMLx zCQ@SqH8saPS|q-XMA`4Ixs(rwg->;~yA_q8^o%)`?ToQC2K3N}5Q)o=n=j296yX}O zWv<+TQ&Fe38$SCDf2&g1yQa~VlVgJ5Ub$e4PPPGI^d>~gs4r{f0uwbfft;ML~iJHpz!6W zA;_PJJ9fazELwIZ%4H#c@q!JoS8Y9JhZg#(F`S!!-K-`EchTnAtI>%H%9or>yY{e+ zaH2DBVWv5zDu0bvMne(l)Hx$k8g6LvKC3so7HW4navLh)kc{kY+@oW87uPGpj>n+x zkkpep#069TW9+~gXnEn%gkLr1@Is4W&f$876btO^C$jo0ZBgOAl~n z!60?uts7OsI~qG+r{Dt`AF?zb-_tM;zSm$ z^YskeZJ)R|b7Kw&DTL!VuxI=(#^))j4v5Ha3v7@2$ydhQv z`-E99Z}^ivkf~?UVIcgqk5NQsO5YDBt%EDX@e1*BSSS0t9}{8AK~05d!>vu?%vY;x zqH6zSsOQEovNOMn)O(9w%u8TeD{EdGHwOFV)d-I`Mkr7-J2^b%S$KfZo(VJv)Ehus z{dL4G>F0gi75zFXB%~}B? z-f~#9^>g5D`N|`TA8eo9cGuRID3ZfG|5`Dzxge*Lx{|<7qi;!*P>r16tw$3W2m6et zV5fzL^yIv#`v!DTRH%GGs!}h9^E;oEc3UrqyUY~-?NFx|xe_GjrnQh9wM*c=pDBf^ zAw&kDWi!6^mDL-eouBo*4*S8JM>MMqX-TU=qN}1L(S&Bs9-s5Qtb&G)WL0okht2A% zKO`R+NOI_aTM0aNAm+?o+~{dwkJwnrs!>1mbLqj%<}#uvzdkxR=`BmtS^I6bHiyI- zZ#w=2O_f(>uHN9S2UjnZ0!Xr>O02R6AsZxMslN zBf2TY+0C~L@AqUb`wAyS8oA1pcx1XA)2<#6ZwD@)l(6$}Xu0@K)J)4Xvv7PwC^zDu z$0nwI>oIp?%j8NN6HHcj-1*G7S@>CRnPGZy$#lkXi(4Y5JuFbOwKjX-Z>$b)eu7%o zVi9?#_Ai2FW&3>FtUrY}N2-JPHA=xoJ3WLy>%WdXo0lMJ18|^Mj^*zu7{sH&&@Y6{rx#loIQm7 z*knbxmfKPdU^GU>eOYlB^qvwD2uOOWd8te)$m}|}1RQeMHY2ZVun4zaB`Ccf%)aMAI(BC*%v)6{o)y=gjNcZoZ zFnUqttIQsaeyRGL=he*6O$r7W*W$_rxVN+l%K7Vz%(f59;bBG_y@fwR-h$reU&MIq znB2z1HQzDH`Dcmm8m9|I2kHFmpmCK;Um-2|GyxC2ns%*R9WZV3y!~@?QRGv*|AA8s zpqNR4N@eXkPg?Y~{e=Up$otzD=*c&|aB2{xb=M-7MPk?O;j+O%5+k|$pR8}eOZ9h; z)rpfemDNIJ9hJd0HC=6LCAA5cm80iK>Pv}M&_XUL1qax&X0#3Ol@~n-5%!1KfyDt* zHQjIh{%=cq#NL&!Wv%myKe0!Y1?kL7O5$}Zf@UQLLet@uJP9H)%a-QON)li60|}ss z&u4zE{;Za+q=z#B_WqO=d@4!r8d}Pw*KR(G`mBualOx7YWPitDQh!#}P3J%;*D&?; zEHf~OeR_bhWV0YoK3|X}E?SG75arp$j!L`hd+wJXS|`_fs@tAQ-2-)U%lI+L6WXGu zpkq6Dia?WW!-loYMq#w)H|Dk)Vn(G)6r~hsypGWqzm)=Nc;i;AhlwJDw;Ib8uG5(jPlqaZ#9?LKv~hH_=Wo z9(E|(ba)+cO=_2|G1GoLggQgF3eJ&fENG@uu~*6-H$>))Q+H%3&1SicT=@0gDIQL@ zBRDcT<&)?D@pZ8fj1#lb+x9B!_k;khbrC`*6G$YDE(jEN zU><;){>(1@Zc{66-nj0kI1sbS1}fC=CA*2y-)}@+I5# zYimX?K)+uD@rL|#xDu||&4Ai4Nga=4zuFM;^((10vLS*qHxKr!>kkH8=6cY~Y07dN ztu%mnm-!AX{8#f}*~cJdj|(yD<4Rob)aCknZY}c17L?GD0vHcv<8{ef!o?Uh$D8if z84R%B(25sQBqvh))c#eE$H&?w@1QfGi}XOdY&&;UmN4e943=c1p|%z_UkDw%{r2v}ly-4vZx5xqKW?sO*k| z5+wtPb5oxGLJ&ESVCrIKtIys#PW0&;?;)LaS<~unH#!Mu&$Df^JjogP(yEHeD4CD? zxcf5p?yX-yhV@a!K-MSk1j6#iLBjoo$_+CEso_pA%9+QcC*JsTYI^zIZ;N8NTszSV?nXkhHuC}-3=BED=@fc79EK-Y<|nD;$OuGVZp^)fVV-%=#;tjP2I6n( z&HRLEP23n@G0C{&WY3ROH}U4b@6?T_$>Q0T;4~h5P%xCU$FU-nMO3HpH-e@8UsH{# zz%8Yj8YOXk2Dw@df@V2o(TFt_v!6UHs%bWxE{%wm>eXPhd&+do~vu$iDQyl z1<@>reJ^mR760Oy^_x6xGgw4rUmEQoDB|0&*(;x6{`WzK4GOsar!qtAwnOy=1M#&l z5Wiy-E+sB>r{un88{VF+Hm8WP5p2y^Pu98uEJ5vm<@7l(yW`pFCRGuCo@kBF$%;9l zEP3)5`eyiS&80Bg#Y0)78)B}`dQn&8bsL4~?-L)!5t*lB+*;4!f_ma1j9K$TgSF;J zpX%$;cD%NzfURXi#CGg2C=bo8GE=E(c=(#$QES#dRSU(FWZPIf<8Eg#ve@Q!Q-~6+ zmU|&x^SiDn*gMURydBSpreg~1W}-CECT4`m@2(G{7?n$3FQYEZW+Z%YtZ zxKy4l(8iVTyO^-Dg-S_xWJn&G?S9*k+?FLjoDJ1c_>cD&@qk?Y*wbX1V`i9zYVpaj znJ~K&@?u|+mRyBkvD(VcA7u_U1^L$NXV@{m*L`E?djEe#^&BoXkuaO5t}JytiI{0G|T`L%`&n{;iRwL+Y}xG4n0*)m%now{hIrg&Z;CK_2vOk z;9XX@c(BT`4qGnPql4e8NUJR3d@|}N8QA_&-%L;n>JZ0%dVs2=882`4o9q|VM7Rf@ zH5WD?eNBrXy%;|NMTmV<=@b}4nQWQ>0U&zoZP^3yQV$*L z&KTjT_=87E+3pn)l2n_?uzet+4=(4@Yd?(Tae_+Py<^y&Tre{=yo#wUZ%;#97!EBH z0UOu7rsDP5{9mO{yE60^%J^ivZihMWlwnj1`F8cRx83EEeCtOq1p=8nw(4MOKbz1K zR}U8(_e)-L{N9XXLPO$6I)9LSlfx{@1v~gQoK?=AWop4~fyIA73`SUOznsG`vHwJr z;W~U$*cj~W)T}VKqqXUe8LX`TkV>bSmn%OPyyXSKMZ~cLes-1ehT${}TPT_L7ZA7v7Uk!a7 z%L#qwj`J(7Vk}tRLy>(JQn<4Lj0t|zGY`x6%emIvhhe=Sqg)np@sH@9n8Lo+{0`?fsyytBJ}#NZ^_(R;y2j_(W71Sb{zmxXDC60i?TW$4W$>$n<9y?{p6<%K z7w24GwOia>S0$zutn2?wY&gTkw%W_+?ob5q`QZD9*b(1o>xjy!zO8e(P3$JC|o-IjA$}K2=MEb?tWCFnGw8WGAUoVyHFYt$Tc;7WRs| z43JWc3T&`Cu#_&IfhEM^J9UWG{})9fy4}Rs;IFc392}a?^ZfAlZPf0a;5Fw8(HVmW zI^IL_`k;-;x9Eu^Upi8|HANk}R^FR}Otpn;^p6d}oB|Ld1J z?DoGSP-$?l;u<-2_n3~z7X|gm9%K2cK(2$&ZB4{(dWOpDKT--JgB}QJ(C+DkyF>g& zcAd2+_uV?xXciU8w@t=lVt8f80yT7(r$M6}!NZ>ms-m0t@#sL+XUCC`yOVVJbT8h*$8fI3xELLlQfJO^j z3h3rCs(c9`41)z3O&zIwrPe(n0w((F=xzpmLQ`&IbSND6Z8LH!L8EXT=$})<4;_L( zF7{2gec!f?c|^#;BuzRFheevV2~Nz=Ao4McpKX3R9*lK~6?jhdR11Znt?py>I5Wj? z>YA`k59giPFatb%D#olNZeHScMj;F!gpzwEXtikodV~+-`jVjbpbSIWy`4xCV`mWA z?Ubhs54XMmeiGZ@4wkG7lLnKwf_6kAX)T!ggJ2Tzx_7RE5SdTlLop|FgH0_T1m&m% ziQD=@GgR7=hF1i$%sJX(aNn$`!(krVw%T@h7scJ6SMyQVNLXUTKpJ;IU+`Cl6Rc74 zLfZDmScyIR@Y{>(c6fld22BN`Rw05zKJPHDU-JDLCX;|1We0Tl*a`znH_9Q*U)lM6 z=*aK#+unww-b;uO_~84EWj#1~^&nM-Ze+WLj^G}x#!b^HYUf_?9_G{jtodkmXrY5L zU?ko9$2ntLN?IRpa>X(LMgKpjtvD9SU&%348j7SgK&!87akfk)ByEf0an@fv0*zw@ zBKG{LrkREbk)|uY{k-4;c}GDBtY^2-pfoisYojwk2vzl2JrpFOdvt=*?_d^l<>+1d zY~iVsPy$~Q9cg^Ptlo^x6=j=LO&_>?9WX*-n~I*9iOja>IgorvyA$Oif7&oA!p7$5)Sr z6>`My<{zJqh=V6L7+^Q~<*ODOiX`G@T#p(cb4VVmP&KDAVP4A=D-h{Q@he8u_7PM8 zny@(R^FhgA4Y`Oe6cM^?SI>KJem`=a*;eANK@COQWE~!)kIF@WH&Gc$Y}C&1n-0+V zEBEE$d)2}I|2QwFxv;cgbJX@`Tx8L+?_b{(6;y}ZWs{!--z8u^P9aq_5<)>g?sf`{ zfUBg-%1kCuo?3(y@!mBV(xOWflTD@JtKnZ0s^X zor`CS8WkIu8jno*|7Y$QG$1g}YmHpABRMV$-Ed2GRmuHG_~$q=6=!-7L@D8bjBnHh zjvD@UP%9l%<*j)QWz%gVZN|%D5HAW|o221%Y|?bV;sdgta)MB9**Y3uH<89vpMpaFkn{%pyoT z56)m8yb4etz0kMEkNJ@8n|p7}S4+KERXPn`)^IHz08dyDw{reBQfjdIMH$C1P%7KP;Viljp)Kj_XX)YV{^hB+UK_oX)cOYLrvUeX9G zbWKD8d?ycXU_FrnF(m;~0>QwK1HOiMqAo9>Pzb1TOUi}*5$LuaEk;BNI0!qOw>>Uo zkrf3C_rr*flHe7}U6He6`JP43Ii7yOWKiG;xuU7Yop3>9!)uH#)~?KYXLbP)Y$r(6FWq@=R|QOtC#8@K?nvke1D?vm?PDI_P1_|{Mc48oE#a=@r? z{MSV_4BiK>N@|Ap?#v?Gtni(-b}K*8nO>=c&GhW*i2v%B062}-MyZU+*+E6xA7&>H zvnS z9(K}fN019P_x&IXNMuj-v+9g%HM{$&n(kQ5;nOM|ip9+;YxJ|0{BJ%AK^M`qw*GC{ zTs=xqmc;c@cMK>8|Fv={%C@`smiB=;+Ior&N-`_OfQ=L#uz&T+e={@S!G;&Dq!nKO zW3IXKZ4R=To>B)XQ7Xg8xwMVcayYcXikf+s;^A!r4R7~pRSMHe1byF4%G8W`!8~@o zz4?QM8ltMg+_ioTYR9ZkqKvH$Tz@~s7GY)V_0<}A)$R26lV|9@9uhV9XFU2zKT zh*w1Hm$o}g`bymV~#u0{n`~6&i6l~tWc$?JuzT;&<4j# z;IK(#x1T$6fKC2WlMU^AAJqZbP45I>*7o#VWWcnNP_$zNPSjpZFWYEO#iET^lHw(2 z-N|RaKnnE}?d|LJ3}M-)*?2w%@9_RYQ8=jtgmEpOIN3I9$02p03pD>`j=P6=`@&QM z-+1->uVNNJ-9s2kwf#Lr$V3zXv38Ns;Bg6=2JO?&AGvMETJ1l4HqOZ zSqMK~2j)xn+|PvhuuTZ*`bh(*?L1(NMoDij0I=`kUSgCK?6{!Do$_1Qy2kWU)2>{w zLSNFyQQ80ry z;k6Am9hVz(TlOBrnd|sX-40Qlgxq{21gpyJ53G!b@jnv^;(hl3mKVMZKb-LMx#cpx zLO)&y(68iyC&cHr2S=*Pd3ayXHNbQ!Hpr;Qkbml6F=&K1oL|uG>y}Zy1i+I#)H=aMOfqOa_}2KL_b%1ESaVB zT?_`hSSO-l*hW;FuC+ObczVgNa`=S_J5jm6$ z6wINQ=ttX=8^8aK5uN3vs@gc z3zQe3+Z)Nx*QX}sg+J45>;l6k@4lV_#vOFt6MBjbYr4k$c=|S9z_Nj~vqG^*s*|WY zcW$J6IwTRRHlZ~->>>9iUiObaGf!Gddc{S?g~Rg=7*Xa0>1ZW$j81?6V00>bbc?M_ zdd1#%krl;z^V~jT9Lc+GZd@MQAYvkyPYrYz&FMG%Qsyc$x#pFt5UJWS(ghAk+x~JxKZN?naSG5jjZ`j*Vw=1?ZY_oA-n4MS z`Nwi*AWHNh0;zkzKe%o~A=*jiGsM0fG1?2L)eR$7?CwF-1)>i@^JDS8h{6h4u0ZFf z-1T?zEg|B&FCdKeu5Oe+elKFmowzV0?XHs^;=M z7KXP|7!2Mj=V8*GdM;ryg;l9S3>BhPf(gmvmU(TDB!AN9Zs3<27uxG7?)0v zRZR%>LI9#0>h1tLgUphagX(1ZkQbFa!kX3wd|=VcdPr&BPp%^xaYP?o!TkS+uci=6 zQU!88@ZETNKc>cM4Xlm)u$-GO3;J+SNYVpu7;iGyUJzStsg8;p6aEa9AGQ4UuotU8 ze1Hmp=3>-(tkkV{@Ue|1FCU zLf%@NYYGrOH~gJ>@ad*PR4Cvs>?DV>A-Vx14j*KE?F$L|r-M&z%mf~OfyoRx%%%qb zM&d3M|0jnmGMr@EWbpx{?$skOJZ~{h#<3Q8=@zQJTt;{(?7A&yHG>2IM}`1dEHCn< z8Re{@4`X;Tqu0_50A)X^Wit8z_>Vj%-xN3sCaxey9Vml4B-hfZ8Te8C3;aGOMGYFl z$Q*}m+lz=2^(@sZ=5KsR^AhAgzh`tN#?bDAb#S=DB;!e(74yNzTk-@t!q(4%DW84qRhL~u&tuw^Bl=po9jXe%Wh z^<^r)vaI-3m1&_M`MR-IAzr6a^u@=|FOj>`zM?J?>BJd*4>&czlq%Lpe^Xi+AP}0j zV;eFOSSTH;+9DiH1G=HkPTOI0cgtS24-C%R*PW^i_9aYWdLJH&eiXK3zZKnypv2yI zwcW3&v!SXC8e>quDD1=&sC>v$$zAO{nyx$ zH9ahq4y;;`D=4bdMgzp;G`POl2V$&q``hPTI}yIz)#-b;-x!9RGM@uaHj zD5Gh#X1x7bq6JwJJ1?fv1xOrT)MK~EZD^WFoK!#h1)nXt9#sO)E_TC=sd|rb3|;xp z^b8YFDN7m};ZwdwPL0M8>^~qHk2A+!Xi;rChrk?ea=ptGGm8#()b$Xzh@8Co)gJX! zVjrfmF9SyT=F~#eplUkNx_!6*mYjeGYI>U zybIJ$_`aQ6rjUEdOjXo-T>3_@t!R+$4m5)sApniaQ8iW0-w;$Z7pcAM@RK*JCcCiY zT&~EzN0NCqPq;bJc~?)&R&y`@H?>~X%~JdWQ(SrO3PI5u#pohZI*%ez^4)Yp-jX_J~1%#**ZP~~6z zhlh)%&C$5jzt4nIIBGvalkJ@(B0Rn|p^ppUSzHjiapiw->Fv~c-XYU&8+RwYllu)l z3HY%d`{3};gly%9-~BzcKRDC8&qG?Ka2)B2NcZH?6kPid-Q9^OY&*i$jwl*uEa`AR ziUgkpe;0ti9sEJlYF2j-es_@w0vS0>bQa zis@ng9=4xjZvGg4x14iNV zKdpBbrBVSvM8gzJTpNDsN3qt{tgSf{3t7FJy|(>p5Bt`i<>MvtU;RxKOI~dZC03$U&?QF|LK3RfpP9Rxt4)gw?QB%!uq~0ox`<%K`LCp zU#D4_PM8QPPJAf|CfiaaijM8ZX8`+Dnv#bf=p07X7cxp-Z}Agd-lu#zfn!4?x-59> z+J=56SAv69C2MK8ohM%Z<-Q&xHc%#WnL3t@vB+CnnnU5ihei;g>g3Y>$N309pG0d} z3UL+DJJmj~sO{=n5W2!RxxqZ@i-$y_D>r6FhN5J~h=Xt z&eLNUJ}~8eh!2f0yg0q2NSD4Q{X$R{!>}@ zA4MubgjI1ug+A5Lwj<9MWL3I!$fOKnQ*+dAWUSDexk{f_&Y+OGaI1X#&m<2b*jkw{C z8f2qMgnG6bhutb5WesH$>kax>f26GNAq?m#F4>-3kzQFOYB(w`^gt65ZkI&^0dWW# z1a(}7@U|u|rnwRu#7tU_C{9Rozb5>zZ_y%c85p1SM|b0MH&aXK>NDAuS)q%&;1RP# zB-TiOxI2B7d-={g379%SV$}Oxyb%KuKWiXvc;%P2#4gcDgs*?$shtD(QNMv2u7rz^ ze|OafUFzZs1h&|r0VkKssFs!y!|Y^KGLfW|h-lVtVtSXO&VvK-w72~(3P?F9|IZWb z+(j3kawWEh8&?j#1=$h6oQ~0F1!Gf8cBN{IYK65^pP9nURI1)po+MLjp^FnE$ zvVcQfqg7f1*^0U-Xk~>axA?iVEuJtj`tjV|$Y_*uw>dS@6p=(Pk2cP^%<=Se6T%A@ ztkn!{iHWo5XpJg#>B;$}sDmeOHGYITq#x3!+yX?au$dM7o z)z8p5lQ_!*nJ&~_4sA7d%ua^z{&OP?i3zb;e1bxyjF9p1kadNZpA~rP{&$e4s!aFr z!BP_^Fd>f)Xwd)3%;H6qbAhl6E2$1I8f+!P`#fkw?E~}G-QWGP_u6ArtxAg=zPX_G5Kq9D-xgfAO{`rNeL9OLse@_6`qe zT-{;V{@UQ#r6DO`=xRJs8 zf4eKl>8bz}eqWPROiGT$WeeZ_{TR*i@fB}jxQeFTAs~Z93_M|RrT{RA;y0A;FL{|b zqeuWFl_h?c{#a-zPga0icN}|B`j0aEsflK8u6)LK;)51g8r&as`Lqz1N}|?2;dRi) zwgZDy77>=P$@=3t5NU11?QeC9e^hTUgAqALyg&+J8RU%?r84o0Nu~%;<%!AS1fYqU zm_#vBSvRl}$wwDxJ7+Vm-tOSVv?X!%+4x5ae zUCvwAr*!z*M`iiP20#tJ5;TRZ*FW(6rC0ESbPzCx=fmQkya)*(Qtkt4C6m*ob47R5 zrCQ(#f)80IPk5upes;A;4 z{3e#A#DhOQwhJusA+@flDfh-;@ml!`4cPa8PO_2|*t{YGN^Q4NXTN20BkAK;C^)Hs zaG+t;nGM;r%9kd}WTp0+KG*SNu8AMF;VoCSF{J*x&3kT`P3}ob#pb#!3 zYOguu6L0xu_v~E_UjV6XPIRN;p#%@FE#duYL!!22%A30KbNnxXaDWx;X*i@pn=;iq z(Rro~kl$iC<%kx?s7N^i*?n!(@|OBz*nn>zAAqA2oPLSJ zE^q0IJw%@L9=4IFYA`=zpyzTR&d^mQPhlpSrfZa_RJ>{rsrM}8)Xk~z(0{&5@EUr} za+b*EMFZ%$g`V>ddff?g;wi5Ie34H6NN6YZOj zU?Oinz$;EaqRnQ7JVGpUzW-^I!CfOK>|X_eSdsoXuSRpsvquNy!qJQ^SD;j$Ced0l z3phzS+iMzu9nkM(qf>;YG^Wx4x4%&ss$JlRPs23K^#GZcP&QKk1c#7=7?I}}>KaaN6^*Ln` zZ8U2=$-J8Y9Sq0D)>}8*V$UR#0o{r1#0oRW5qpEGAef;8xOpC0NviMv302j3HhC(5 zEgXqVZ+;w4fFtsA^Y*KhL=P9O^f_3yLROHyw~!86nr*|wx@plEzD%<^CdRC*gRC;v z!p=sjv#jmbLZ#xm8hT=?qRXFO29{=`)3UN;{dZken?<`8kj;d2^Ok;o+9-5tE5Lk6 zQv+0dShn#~4NMMRIOELw*B~r?48!+%bT#}^55?S}T%4}!Csf(S2Wy>lu_59gnyy6S z>G1zKC=pKDu%^fWbbO}{p#`Lk&`0E^zUveQZd(A*cTWr3Kg|E!&{c;-(%!3l3jhtE zNZ(eyjBmLb{1(_P>}U@Qi&=J$hzKC$l=*qmtZi_OH|}_1oqv08x$#d*bT2BYIl%pd_?f7(7 z?JT^3YZp7eeq_zq>^z68^H*r&&sTC-bK{CJX&`0M2Z*6H<>}8)LdU>m)~Gg?_@Q+Z^Wjp`;=41T~*Xj1R6sk z*x%X|32k%KS6bHMv5X7xa>4k~-p&SnUs+rX#;9OW8A>-v8L1burSfcYW*F%%56k&N z>r2fSeWvnI^7QL~_K)mUX(1*C&>t?Rk<;wxG-Y_eF?!%N-w1drTp^)fM~o3;V=;O^ zCcdWgmJ9tu!NsqWa>e^;AO*BV>Z_RTh7&mwWuk`~hg0>wpOA|vt`J3DXub64eYP_0 z!N4WN%_>3OP0)Fd%PYY6?6&3NK7$ZfA68 zF(5KFH8Tn?Ol59obZ9alGchwXFbXeBWo~D5Xfq%%3NK7$ZfA68ATu&JG&dk1ARr(L zFGgu>bY*fNFGg%(bY(T0b01(8ao467?_yY;K|8Foq@)#Ru1-J#;!mf0H>=Z zK+)6{pvAr2UhC!YIpy1#E5?TSM z9P9xmKucp=bAW?6Kn zKe>|pm70f5TV)zy)QktRO8RuBt{a2O2zkdU*#>ckCHlJzf8@{vA(POpXV@#l!(%=4Jyh zfreDv-b~cN&JL8d3;gf)iCKaA^5g06k4D8GjT0H7~!#%)iB;M)>(SIyeH%jcr|kepco{ z&Y(ic|5tQrdvgZ>_upbrCjVCbYY3?R z+N#u`eQM@lZ|emx1DeA#Dmb`;MuO`9pPlwUToP`!whG2}K&t=K)BiOzwzIPJ`fte0FG|1egJa^ zXZYU>%E1m`6#gyx8*u;_MgAa80Hf$1#06j!`-8XvjN<=6oJ;^li9d)1z$ogNkwdqXzjp8iQ^HTcG)${<1OuOZxW-^B*xNYe%57mBT+8$qed*)1O>_ zBR8PSUmNq^LRPllLI==AU}F1^W##yn^uIZnnL*b7=rl8^aeqo@2UX(&w6pr3G!q!*L}kD=M4JSd*m;y>gw!Z1JtxK1HHxmVIptr>TKny%LKX% zm_c&T&%giE|1SdaKlj)_yhTJDJbmcdSeXFyEZm@@iw#sMXb3p{{>#_&@2A0E7ZK>N z{5Sr6F9U!;PoOFM(!7HyZ>V*~m+(q|@#3i}XmW0blWHshEtw>!rR=Frd>pZYEfSz$ zNlKBoD`3~e_D`znHG5{rtRx`TWZbZwVATewz0pwKR&X!@aRVk2KC?^`NhDh zZW8K4nU6)< zUHFSrUEr>75APFVjr)X`Xl9Ly!m&nW-Z}R6VC;a$mI^+{Q0?UK++&DSJvgl|s~^JX zM!9q$5P*FMAS0-!3jewVd*8fd1RI@7XrFW3!vHZ_9R6~~C<8Cfla3TP3@*~B_!Iw*(E`-~ z5=|cGgEe;|qz=cg>T`*M&8QlX%hLY@ zO@i$=A!$ zuOD-tQ!#wmAH!Tk65}W3!Ek}^%oHim-V`kAlgY51D0Y5oFZ5Lk7vL|tz1C2L3rT%g z*C=y(>Q~0|+C3M<6reC%6q1xRZ)F1Do7XCbe+;9D0`p0s`MZq!jG2_+J z*R_vM;Lrwu@ysTGxI8?auPirfXHYfD1;Gd98I$=|orN|>H^iy=OC{u$Pvrd)57tIh zg{XG)WdfxzeG6jJBYj9+Ypj6-qIshn2Q)g)TO!(r?xxh7LZp(f$bb(xa6@X=aSoQA`>|Lu)OeaX_qye+ignK^s*L}&BXaE3l$^la3;he%;E2FJ|54V$nA50uDQ?c*%Y$zeY6T z+xUFJI0YY(2j1oS?)cTPF337pbPED@Dc}emc z>yI3#_uA4sLS#SL=Om(chnP679A&Xch`l<|4L_HFO*Zr15i?M;5)X1aPvVLc+}(bV zaLj7PJjG}d1%FaZ?EADc&a3SAiov}zI1!hle2Wj>9+I5?ty`(g!^~Ep(+6SKSP?cL z^7MWERuuBNG|TbUwhwaD+a+WE3IC~f0M4su4km4 zaa5@8gh5BAl3zSsQpl^bqKUpIGYQ zsLJu(Q=C3?*o=?dEnbzDTb-s8Ihtso-8qsqCG@ zGjS$zg-RrrpD@E~z5ERkYztw1=y@jVPT~3T1(n>pv2cyT+Q3Eny&0!6NQx<_^O>)XN|RV22!i3S{PV*{nSZb1^$# ztdGYQr7CGdN_iw!0&c|O_NpGa55gneFuKv;G1DW3nhbO0AvwFvw7!BleEnvyc1X3A`5uDFM{^xw90!SYE}z%0&}8= zESIrFoh0xQnv&rvO9TO&-Oe%lQ2JNgZWeC`ZyZS0858_I2l8W2i$LRJr_B$7SaAgN z5sGOY1(e<8XKrd_;Pspzn_^}K@yi$)<3urswn8V;_Hj||wG~6)j~wn0wFyyoh*;XC z8;nSPTD#)`M}N^{bvAbEDl}s`)uw1-+v)U*gX2aueu3c}kT@*B(}nMtFWLORsOoiKh`~h-pYMK z*Yg%IT#a#yKKvMh0iby1`VbfK0V!R>0a+S#+6ge)F!>|@xcp|74!_k{_FhHyJtZ%! z4J7>YuCJz^AlZS)c5XAi(kENfMoa)GlT#4@T0 z;f!?2O!;7!sZ^UiZFabsoL87M`bQK7Gv30uIqX1_gX!kCP)|X@Fb~GH2iYZ8w3J17 zeQP@gLJC*w)N-#gA-ov<1_FL2OFWE-8fxH+YNw9i$y{{C5bY|7esf2vBkkRf)d0pd2-~!_02Tz- z0t@c^l>YP?@}fCfW;I7fV=&2s{adHF6DftbZmnyI3@CAnPB45pg`_!g%*0Ova5AF z%k8W~6-YTP;F&9rcdT4tOhvUmE4H)NP3?*fe$`0v4LX60Ye_B}sVrt4_BpkqX{BeA zm-Drs|LU{gP|s=crh!_YtpPfR@=-^jy3L3${%ZM|S30`+%o-B6aO?ZlwF4vxhHr0g zR4!IsM;Oz!L6s*weunI6H&iWY;MWg9ZTDQg>@*KkQ~`BroF>w|?k$1RY;VQqGFWLh zwg?4+=E21MGx#txDznGSG-d~V%MtXRQXXLjnC9j9us&`qT-)L9b>oLM8X>r=4q3Tb|0EB@`?{Le* z5YzTGv6#wqc4h zAD@luMeFv4p`0s=hJ+>_z(03j2n~=9ZAnscLe&}E7inkBquQA^Qt!NROsjR=pam>q zxY(bJ^t6olb>tgT&=gaC-^1?y<&$@P^}g8lO47^kCU6-UUJ>Kz5`lc)n*ajezjeUJ5yef0W(E2@@6u!ok&k-`3YP z6$>X{9x?@?2~w{VmljE9Lz2tw09J3G611(<<5hmv?_UH{mo4b>pa9BG2Jd)}+9X+c zV5`074vGEilIX%mZGUuZL^yC;AbFAIFZJBCf4i>0^eX(8q!{1CNgk ziRsR;bYUc>Ia9QE!FRcfZkIEzYB=5ZKJ`?*Zs5r3BE?ZhjGo>SDO+mE_)#_TZerRV zEux;|m9`-dBoZo_^*Wkc*Hd~3Lmz=DIWR@WGA?`L@Zn0Q^OyH?UliGYHlmF05Nt-$ zxYo~x6v2iwGdn06)|Dl!k<^G#S#3p9VfZ@QAbvIUJ980JfISL+KQ19jQ2-P8L$?s7 z3VmeWPf>Q@Xqad}nyi?2HFrB~2}X+s1FBtQcZ2_(vFfK|sV%{K@kteZrvNNi)|sXa zXrwQK$&#_DcieoX^Z?(h{0j2DHT1YeP4ZxtyyzXD=w#ZL&!_K9p~5N4KDT6Vl5@V6 z5;ddr;9?z=a*rq4xC5CiXYV9+bKGtWKBF(?wtlW+D|~`cm)3-8-WQY@XM$)nC{`s|gQV4R|;ARbi=L znK-{6h7B^OOwO3jm~?~q_9b`@%I`knyE<(x<055PW*o%!+kjwKPNpn0=?GIeDb6FN zf?gzTbE+hNaM}$Dk%=f}#_E}K2^4O=nx*DSN9Y$uWc`iyFH*_VkYlHjTEZv$Cfohp zkVE}^&GKrxhcxBe^XYAVwsCm=ALTwzLS0jAH>TMG)tS)C`nli+5jU{+=6CjE+vbS`XOTS@&REwE(6T+)2yjpO z_7iMM_p_ALa#klVX<#ZB(-q*?*%|cwgI7M8j__g=T4x`4Gf%PNyI4PIHG9Mw?Q9UL zXV-x12#gN8e2YnLABMta^<>}fhu=5n>`!=P!vn565uClq*mxO#uolpyFWjGu`YbXQ zZXc}iB3Ww_;C$Ao7Bg&_hHzV~duuo?Nar4bx@;h1sKFw#dopXE%WasG zm^Lm`ac5{reSyz`uO-uT9_}b(2J4)rq^F)JzXDDHO*_|(rpPMC&Kpc=L4K@7@@zwU z;5z|!jT+0T&$aB(P^(m|cG7f;*6!@B29u8GnyjavEtsdJ3N~Cw`d^Qv2Aejzni2wD zq&+yc0ewd-uXHR9)Nn9RQ`V)tZrWorwmj(0lSO?A9i1xh)jeHzGN%aaZiTsTU4Z^n zD$#)aYp+6N~@&x8wp>7nk@pA>3*-gDy8{lKtlT)Ow88Z<*GFTT2bAIf1m(x)nm?R!jjK;9=Fox z(3G=<>+$|Xd?);(|JBRcvY2E!&35ydvkB?pcvIcn$H^#nVgU6%irL_h&O%SxqEzkb z<{h+!Fkxy;B;wQHv3;C^BCQ}7od9dTnuE;Hb3y7AS=QJ4D%P2yDTt6j#i>(Pd6IbA z6;hKE>|AsKQyflVWCg#5&FoKCG-BPhxkoe5E=s(SP=0<-D+}{Ib)~M~a|Qt{*G7HS zHJ3OUni@3cbA95I?lGSrR~<3HwNeBlH9x3F?rtc2VfsOB3@64K53oe){q-HO!~P&! zP|@g0*zdhxANqp z#9DLiQ?D@O>wA$l>yYu3j6?Mwo`q+vH9S!KJ(6G{2zg#LLp1MJa%Tb=SbC90$BMOv zi@`mdL%zmu;-}8U>ac85tlKY9E}~x`|)J8RWB_VvI2>vn|@I4G>J)ch{NE|@to7G)6Ow<~G{WVcc z34U|hWY?Lk6!hwS7N!BC*I9LvpPmj)rT+B6< zVK{3>3a=KJH?SEOZb~1`4)YP;(7b1CS9P|+kbfcXs5E8QJ~4)!Vczp{&0~o2cagl5 zB3+B}B1E5Bo3=8M_ZY~zEwqU^2xl{Q-YLmo))VXU;!1Lt~^ ziRGo?X5KEOv2TM%e8-&Kim_FAw94Ij?0rJOI%Yhr-%bB8l8j7{Px)$_Cm)KTy~H>C z(cXt76dd|<5Jqz|;XCW3)&(}d3a1@#5@w9k6c63kYc=>R;WsjruPZZUhOY(RhD?d0 zFsrguex9_Mky_Tm@!cchBhRv3ws5;*1b!qul@RzDrBQ5xTS%27W{_ZZnNrQ|4E|Hb z!UVc_A+=@tnP03UtdsdJEtOv1W4p%dnAi3Wdk1I6+2^@xNqzZTYUIG^+h+BTS3im8f)md|stO@|#*y$SZtA1Z_wogsIV-3~BN2ax` zF`>HEZg|UyA_}D-f>b7&@>0Or@KM>IYdjpU^d1&LHLt(yr5)wWnV+{f=@$S>KnXR@q4(?-6Y%T&t;_ z8CnmkVLG+vr(ox59u8>#k;|uIh+lM|zh$7b_|tYdfIT!k%i2Y*8n5nMfxWye5uK)t zK6v-8`S}2kty2l+7zy8JeQ55}`YCFs5@@t(^>*X)YAYq84;`~~t14LP?=T8!V4Y*r z(eye(43n#;#6tFBlj@q5=<%14HwpEKi%|DyzDA|eB5 zh^)(A&}(6j#i+;532l`U)*vzN6ZuK$*Jtv)4|3Y<&}-epbH*iiB4;}#S`%rEoT&9O zi@)5x6(nn`WRvSFf!)RUghP;eG$xj+!zlVjJ%&0PB~$(1L}nFkw#6!NC#(CRZ$p`0 zRS|mVxel6=BMKK25611U$X9C>B_${PW5mRM$ptR#Qo!6RgJVXq%kC8% z^hj0H+cajV%|q<`T5K;eIw!s>HkCWa0np3SYfT?n58Un)0Dj?HOXE<$^ED4ulC%SY zLatXe-SLzL;1X;ld|0&vRiL+`YejQMIvgdB9nkS>*^d;BDEFsQi5>Rx`#Mwhh3}z| z%Kcr&92Xo!6kW{XLwX_J@uoL*D-)0h34mzmCOmSOvc1GGqc6VATXbFrldg*J5$yeB zZc5zoG)6ZB#t;NEv8Q$g=n>WFd(f*|77)Paglf%pRY)dMCiCa^kTY9xcK9NU8V&Z1 z1xVA9R%=EnpL*>zZ{Fz%GlCGXfeeU1Hj4|&@cKT)dDNtlpv8K$c%{naMlvD7h7%EZ zC%mE|zLHs&1UN9mashASYn<~kmonj>mW&AvBf)9CcxjYhfWehox9uw3 zxOb(L?SXotE^xNaZ{gnSL-{xH`@X}q$D;R8k&NSf?H!hkdzq#)nWmlLZvdjY^YiSu zy#g6<)OBWSthS1>17>bZjM*ENPlt>@?6T>_;oWq0*qdD0X@Fnd90FZ$_R7N5HmwY! zv})z8c42IHn7}z(Gw;+D=P^_F*4F98hDH;-mS&>!U^%C3;PZE*c z1-EfUGhxLs4Q@XB)y#JE9$vR?U`~TgU*LLM)JSf)x$i*5c;KCxMae$G;gsramUP9A z*{Ni7JY+xvN2|wSBxE->_QFdV*j@~s$I7zw;LylL(KvYe!VzgScjqSoMb~X2vmAaU z+~qROB;a5T2A$(Prt6_~;k!i9>n_bSBI98~B&M;#!OL053x$l7W$}pm!hQC$pXIpM zgj$K2=Pzyt;Jzg_iid)y_>PSbA~k+6edpSFRM_wj+&Pnp}pwF~d+Tq#%~Df;wX~EheX8 zp&?DuFo?$KuVdt`_BL{GFasR+L)6Y6%Ve3`o%miR>9C`2=HhDbldRU>Q(a5@ET(Y`t$($FNJ4s_{h94@zg1Ut)Z5w#u7zoZ!;PKTSwd zk*Q1KZc~^GsV{wMUCM_-U)S;6_XRRlY#kvg8#pm^E1x?|V+^x+f<$g-NdR(~YM6%!Z?_XCZzeW>{x_ z7tW|wJT27~DWWNPyeNCE$)7a2w9KeaTsYB^Km6z+wD5(W!7+OnR>luAXZaB>lFP;C z(rnCSIU7?5&0s!!<@WnbXF(QB5c|s=$=q=E=coxWvdNDK3%;q^^F)2yg#oZ&x{9nK$!TsVzJr>m8RoZ2TS{Al`e+guklT1+}#GWiDp5F7JD$W%E&(%#H z%4EMSkR-A;E&uuTBE%ID2bXB-5@S;?8JDCGxt;%h6JiBkG|$wsvk8+-tt(Iea0+65 zgYlM)p%g!e?iMZ${3a0is6Wc&J|)~=xQ+{H;GR{q+YyR zSJsF+d-KW7^R%U2W0XOaF6AS%IY;eJl4t;DD_P_qf0LoMP=26iBTn;%#*#p#6mBSJ9zcYk zy+wFkzx6D{gp?jQCJW_!OoODzY0Fav9=TWD<8qtQvP{Ubq7N(2-x*UdknJzfk|nH? zHbEEYlB=^|%&;H81g~aV@a~CZYu&_yI;&$~!i9`-+Dk0OLdYg|PZ`$^Hk9~-)J8M$ z3nnX;nNW>YLGwAKrHtvqQ~HtkVp^`gO&?g2rL-5Oe5Rt;$vQ1 zm6dtFd!CBy*SsayFVy~DNf49nJF;J087s{+Hkku>dIqc$mR>##-xBv~KCA1>X9$o% zA(+Z2Vk(=rb8MA8Mu_(XdDe4O2feE>(7xNojmXjO3b=ZaIUItfEY;_EI+2FuurWTz zF;fWK^&8gbQC5o4XOPW<>D;N3M0^uwqi!5sr=V&o2LD!j_R9-z*@zZGZvi*p^XV1| zL~Eft(;U86@Qz&HTZA^+!o%u~Mfmes^-9PS;WTdwf|ZEE_)O1u2!ZP^1sT(!ryoH* z5#cXfmmu3b@`uPaZwS3i=!qtqO@czCDn7&kL~ru!D@M7XrN&gpr7XT~Yv!yg)~|H< zqmB~GLvP(YKd=vmR3O9^5Y^`LRNkRs>C|ze)kD|tKkYiqrIspZZ;wP8ey3Qdd~U!> z{gSE_U1FDK);IDibD}A!{fEj6VkP=QApn zX5H+gq6z`v_Dh{VCXshPPf%(=^$et^ZLGa}rE&zXaJp4*5@`!rqw1)>wCV6vS!GX^ z^u4d**K#r(*iX^YJgBU!oVDs#xdzlf=2);%IvaB2s3!<=g}Us%l$RpF%(e>%cVe&n zkUOVK9Ne&5_3AYXmbDk)6R_g2am!(6w7%)~fS<3@B+>-8dO8S)YO`&mrYv^2X=AIJ z@G1eMTCctC$ah2FeCnnDA=#M1cr9QRVVB(h<4vScd6M2guuXTqU_An+aQ!L{tUqQA-T zpLe!B4s7O+=1&N|&8qsSiMYt;x<}hqo<3a4=q@{{1vXMgGgahnuy?vB)QD&_RBMIl z05l+*Z08#pXBaT6v`}rWpp);)X+d)S$o#QVrzvmX%J7xfU~S?rjjXl zAMa14!Uf23kToX?aD1rJ?PaltigdQ8cd#H;Db#ZlZ%@GRWVWbW<}BM{@KuU^O>ud; zGXOHr9cf4h$zZFV*mtMmPMf1Q9*yaB&(e3RN>!KzDeo0l9@4@R=zVRMMErj}f>&%3 zf#oE$BkXtvLqPX3eN`X?)j(l#qlzSuxzT!1JWM&wwjfBOE|+!oR}#CGPQ4+Ckvtd5 ztR|UMc{N7N1S16+%-a~MaM|lo!gU&!{=HT<5W%YaFl}ad)+)@0bFw z>d0V{;)@d!EsAKAMTev}fWkdN!HU?F!L<;CZ7t{@rY%oS$(8Myv2VDmD@%w9eyu?PmxOhMuKRb)8kD5#4 zI*|-llD#^#R#JP0!$ed9{y23;YCcQ@lp2_m82vFc*IhkLt@Jh8kiz*W= zz^hFGI*x#V$0()F9CE)qZKmy@?FRW3qEa}sJn`pJ8KiXTO)*!ip3E9N)lkKgyPgcV z6zA@=9>%E3n*4Frg7$S!tnR>S;a9Z;!hZW69k=f9w`+#>mZIr$;$QqiM;~w>kgyDX z^%Yp>xPcAU;OGitdU&lZfs<0Yh54^{fq7SMc5mMr>56~;EL0teuQ@$*kxqej%(Gl2 z1@Vxz!2L*=Igu-voCD2K>yu9v?f=={^oTI?Dz_c1XEyW8^@l1XOXET7@|$hy+=ya! z|9BD)AnvD8s!twXk0bc$Aq3c6*{!=Fo3nm7(~?CCU*~aHJYS>bc%3Y|@9Cyn8pIJF z-seit6GsrxIvuqS+<&^LzOcyUWa7JT&-!@fKqAQ(jlshI@;PB?1pfPz4g*?V)yF_s zzMKI?@sQ$PW?D#O5i0W9j6JSh?&&RhdI=`+Q=*(qkNr>53V0=QlEvRc)?fAvAnI%z zG=1xA`6PlqmC8vFU+B_~f8%M9ZNuw06d3u(8rW@VHda0|T#NmMg zS*@BK(`!s|*lE$hlz2m5xN8$ZlUdGF_6$5gD50?L*rpqAk!rQ#%#jzr?G|R2T&3*i zr?Ir3Kck%m?E`-yNvcg*JPY+RNBUq&DERdqTwk~Hy~Pj~`Cc0KLb*M`Cm~nHKQk8y z3AYySRDx3}YUPaV>X>|qcY>j6LgH4xOp_&cHuLs(PtbfaBdmH^`5L_IRbUs*!@{N& z7*hi;DbXcJc#hxlVXu$)x-(x8zKQFr{hp5*o*w({6d$xXppVIqF+j*&vKZC;4mlam3c7_f7L6?|-teSCf{BYCzZ^h#qek#SNztq5Jx8diO;wi}fRXzm z92K4mwwgTDxyUxR87TEq5x!kvAzq7sQMy~YfkoifD4w!*H;y-9UP})*Tw`K!iOzWE z#oMMvY!BE;drtcw(>WuCRS2-KVgY@2v!!U2?psJ?hv$oiJ{BxwmycXcOTb!fqGw-o zIqJi9LSf4j{D7xiQv7mVm;Xk@ZOROY2^0Hlm3HBw0!_o&^h!e!f2QXFgc*HX4C{qE zW|>enaU^2FKSst-9v}8v9T*Is8$L8w+Ie(Lyi9>ZcY_O)$I|4*W5@84Y@MF!8iXl# z$aB=itFZD`LQEBOWDG`}Fb?{HrY~%JjhG@Ph|>1#y2rWU?JEg~ zO*Zv%=07MMD;u%rr38LaCd=7+S|h(9)E~(BDk<&?e@av;YR_bzy9{(?n2MKBfo>3E z;rkl0^y6ZTbV!;%gCKf=yYuY$Ch5nM$Twn)0j_K~4i-Wm>_MRQJMf_$o71R4A zLMQ=-u{g<$4O&zOu9w{R1p%PSt90_dgvIM8rO}l?W^RUgbEOc{&-}K&b3dj2vRgUM zP$#$KBF5bs8gU-t&z~F$Ytd<#pqlW9!@ysNyDON9XSLJfqclU?7R1N`zOAXdF~{R6 zP0dibh#qXW6Dly~#hoyZ63l{( zHSm2=?ugC{I_9FJI?~q*yXkwuQg|Avf=e*$T;cIq1;>7_B3=^LkipQx2v1 zT#?A^8w~nz1PNMzs_r+hW>(HN6BTlwy?*#5Dw95w&Y6UdcRBWM>lf5I)|GxM&~g3{ zOzcj9<$~WoVAeWC^@9|?4^&6%x zyKS5@Kb7%BWoF|gTynK@uQ~L3lJKaMX*87j#jNoAn5g;{N@J48`Y0ymBp2F8Z&4bA zcsOUM)B7RLD+e-thge6NS~D~RUvefr0o1xaY; ze8}&Sx*6-Z5+58Q4$3qCCsIl+{n))=@tO_JNI6okaFrXCDlF5MDl6qyV0OquBc zU`-}~$=h*$rLyFBl3&ippDops*Y0=Bu2>KcL&7}2OT(~8QhPrh9F zW;D;e{x053yFq57@=;1Bn{)AkJ@X_G`FVav`CBt`NRGby5Z8}L+8A>Um);39#i=2T zm**PoI7(LO8!I3Xut<-S%%a!K{W#2&^gX7Qw{3;vdrFc z|JB%f@&-iM(nj^3D_fk829O@yo5JP7t}Nc7X#W1onQIULL1#A8DFUKbQ(UA@k0rX{ z+lmlx@jMD`z=Vd-gA@7 zR$}C_DMOAzk~m1g5;EidbXoB`TUeEWN{_L+OEy!i_(C$!?UnmcN{jLnDl6?HG<5TM z$<07Eyrf^PeVV3ifHw_!Fh@w2^1Qp$h3?qyha+N&t4bIXtG3KYqa2f#(bB;(%P`UJ z&{066Ot1YTO&c)7 zE(wH6O+Ae!T!uMoSo)ha#J+g-wj8-cAghcmDXmSai9N8@g&^=b!tsLF6jy(+hz25| z)Q7VQYL~7&qNh+cpGSrux6lj5?qiL&E1B2&yD}l}OJgx=%n``4vY=&fc;yFs^_Xl{ ziqu|>3wj7lK#ivgRDm5NSLia<-348at2BAXuG=6*0KPwr!3L8R%tWfs)|Ii&lXaoh zJB}n+6zsI#;I$@jI(3n3^fI`G5LpfDQCvfdoXQKHVnrLHwUYQXMTY~AdS_ZGQg>5) zk0LmmI&VJoddyj@8ox5=j^IWi^|J#+MYWv+KD=J^Z`lT+*m*yt&wp$xY}9EN{pAja zwxO`v1MWnWohY%gC~{5mwp}SgUsq|QB!2~zg&iAdzdO0h1_l4$Cv_ZXW>|_ew*y-3+kC{PE`bW)_eWT?qAFG3?<|^KP zq2?8Yjbi@6^U}0~>96NGi-;DsFN%^L61ov#x9?R|U)N^|z^~2TrwmF)1j1lRT5TA= zxPpxWrl4=R8xxVnR70TyZ@E54<@7-@Msw~`6!Ih%3@~ul=8b>}Z9bGj+j&IBV#GP^ zwk%GGjK&H*Hkrw-RVCeCEMQ!fzQdu*e&0sGh!@A!APQSjoiv@SKnSy`X>X9HrQhw) zYDh7o>*m5G@r0*JP-LsvLkH=9uucJ1wDUBS754=fnvA~Y<8qs80t)%E$+2<*&(Mgg z{{gn(Dv=#Zcr|$1&5E@~d8Ax>@sjxH=LMTUd*BxI6|KM+;ivlQsh6^=nJH}IS0@4b znE5whF>jsf}GoP&+EfbXlzvugk49ReU%H6G$LCo-kQXGWGi{jgx`^p&FSDy2Q z;BDo-)Tk}ma^3-R$S}p^R!Dd^mfTJsq*BM(n}uzA@_2pCTx;DxguhGEjboZc-w6T7Q)F7!C*DOe4?Ec*id>YsKk5L^`5?A~ z6>Jt-aoZ_euY0UzxDwaM4^w68Xc@AljZ1uBcr)_;7MLY|dAmC&bOVX{CfLICs@UvF zloUtoie&kvcbR30nuBgb){Y*}>=nS$Ldp~tEGnrft7#W1}3qQ>`&ZMqJ*Pz`FYAo>iv@U1Br(&@V9SNpD1U3 zu?U8f^G-@h$uNO)5;Mi4TVJwP)LX^^0_u`7-s?}oqVf6>cSw9TmP!H8f$GljZJgJvzIE!N4A4 zNmIULs~KsW9-AX|iY{p`S~*TEc#R!>(ZQHhO+qP}n zw(V86ZQHJQI{UTmKV&0gM2z|ANu!80^95k9<4dRbx%i5lONGWn<`J5)#d1t0*$V1twrSf(wWw4b|4@NgFP9r`Wj={ z+K2F~rVrYCM~-3hGHA<|^1d^RCoQkS_g;pO7)PXCJpYgbmnF0pY2`+F0(Jd;8g3`& z4zm`0kDj79E`K=r*|a+k`j|!7S4kRypX{*!p$nynWqBF|rr*hRSwmLQvK=cVE3G23 z^7KbJQ}*JJiYDI9h(uw*gsLLx09_aYxlM7$h4`xI#NKUb_uLmc5L|z{X7eJN8Dx%q z^8pm^0vP*f!>x#|BBF1Q085Trf*i#2^i;KfE&KQ*Vh?-$f7S3_s!Q4P50YYt{= zs)VlYo7;`~?TC4xT@J9;O30*@#3tY>&lQ^Z^>4NDfy92PXa9yc2uxI96b$S+Tifvz z_~Cj=B$eEHK2ncrFwI)V1tU44{eoW$FZc)=+IyoW^UrmiIs77AuG}oD1@aii4m#%Y zTF6};Bx*ZOfIiAqqDJWZQPji?2N!{`$r(28?gmS}MsD~;Z%?2%z~1x#v(&E~#5hE6Z-e&vU5})=h$vy7>k}8d%&ufudMQ)mVfbe~iaF^Oe4k zgsmoT!YuH!dJNFdEi2Y}jw(SBWjOBfxu(1X@({o=2C!nAmYy#o{kbikZ;A4Ys7E}# zq&S|Rf}HmaUUT4t)7X*9t`?p!ww63F$uy+|G2>)J58X-gNrtX=A0Ky+8jndH9ia(; zlkNbZrj61=U3RywO~GYWd~-}+=Jpo%5D&v6{6mVkd{dkd(xhZ@!dTyV@QHj2(u8eNmPxX1Q*^6PpU2II5LbnizDnhKk9yTr7@0~KZQ}9+X*BRq2_{h$2fl9~wkf-g&FeVB_cm2dg z@XH)kon+EE)#F0#*0T>Z3bD-D3yxF0Gz7VyE=kCoqYerGo ze6{XFK`QA>^UEW$L#c_)ruM+*(?BH<8FBy*+&#CvP>XN87T8PcxzAw#R|ii-g8mlE z<7-B>e&vfHMeg_^$OIo0GccJo=&=G+;iw|3qA*Sh;EaIj@>vE8K6we{EWn?@4hFf( zf-}mF;>(lB4G5Z}B!DsVrgY(;0N%*thr+UHW@Sb4|MEt8^xVTVn+a{bTZPR1qgMhfMwTJF~=!0icp!jyj1- zek4X~%VTjX9*FU3d0h7ADREG0F0BJTlmtgRGU=UiN7V+baZqeLahOdI0e0yY2%pwT2yPH z7JM^A7OPjSWy;6FRkPPbfGP%ML((*cml`vDc+~?eGPO4q@cX+&^9JwAYt%^#i=;qu zNlME$94tA0@u>wa?~U8?)g^nLZ!vEaT}-Y|oV}5cEKSXqgHK$swlei3+9*QD8O6)G zd-j<$1I{W*zUr&M1zvjlXy;N}Sy)+g-Ok}z&4P*=noPh=L5KsA#y0VKLgu{WIYdzq z`9Co3x=tPB1dEbHBrE|XG?ActHZMBy-jN$*zLnuIe)67mR)1r$iYESqK#4b!(nTCa zzj|Xumx99-L)&N8z0eb8n@?fP4ysJ+$J-!4bf}WPNr~ejhjjpan{Im6n8V5vvSKq* zAKQrIKg{R^fdn1G>BTzr*~w!sEwv~^z&EF{5i!e1qf4P-1st3BK}L|!`+?XvMaftW zx;GcG!QB^mkT>QCg;k7AWtJ)9&RD64zp9c35i~~V!U5YwDl7Gy$bW{iAIdPt&e<`D z&)Zgb2hpEWS8?%ksHPGy10BXt@-2k(o=+~=lvWz|D=o*q*DoPfluot*qyKH&ZB6=6 zK=8}0#}6ED;(*bHI6j2{(?q^Is9aLkHm9r}>3TBpE<5#$T_GaUI|s$i8o$+aP|MO~ zg90dKIFoO{lYr@&kjQMq&WymT(z5M2g2SGtO$ved>?_7h*Xlz7B7HgVCUF`vp_A$j z%z0P9eyQ(@7r=61s*DZw4<~N^794`jc?Mu&xg<s~>w5Ct7*|;WUC)sbs<+*kC%~ z;X(})oCo;`c@AgNcre~Mq7iqWVfTYtMOx|~$^&^(QKrbWIdj0}G}@eXPG`3NIYLa@ z&G}9B+6uA5hm>>~ue*117$zN!r+AK}=P3YO5=A)Bcy(!i*fpPURJT6}NfAJuM||uF z3)07ZUE0MS#lr6w)GS$p^VnCXO4k`EF;f3%e6R3&{vGj-Q1J$slW0Ne$0SmYt-6`m z8-y+gK-6O!QWM-@m?~po)p;j7*D2pj=8qIL`+$Tws;&?d#sZhl6n|7-#D>yZ=l}~W zUYs%h6MKp261R5*BFu|V+3G$}|52b*i>>}wbL}; zr2_EMm&o)ix!5SUOox1kMa;D=pFP8 zrB9y#oOyG|Vzm|qbR~+m5X2UZbkFOee@WiIQWaOQ@7MwC_v}yAs`B7r0NTg)^YLE< z9I<5Z{^U{W=Eb(#f!OC7eVOUCVQ8@c5AfXPSLFHy!5aOI$g)4S^COJnuqgDf@n^~Y zl~1L_oGl*H2VB}t z5PhGb|Dkhy1g#20A{#X{NE9+_T#R+W(1wGriR_yMCh)OXpsfUPbCf3&w2H!?ZKypb z_pUofENKTgl23$FGtLL}EFL_8k_ts0pP=@$D z>(5&IRuJb&jaNC;W1r;!SFnFlPf?KG8RJpR{2N6gTRK3f&UHk!f@n+$uAJ$L8(fam zd&5G?-Ri8)8XCi@|*h4e;Ct;8H_yn?{iIdNMSrSE3Aa}7-2zX3+|@c+_M zhF~sC>|$vJDH0^2;3;Iu;%t5?Ds3E}3`nCTGsEbcahbVWI$0b4RpHtYsh=o6p(oQ~ z%Dh_wP^Zh}oo@uWGOF){&PrVL;eNO~^S~N$w;wUoa_sPLXcq*UrJ^5Iz_>sRGdHxn z*qAz5i%PuHw&;M!P!vR}s;K=DGEI(X>fEfu5p5>RmbR5ck*pm2o-okV(<_4~qRz7> zH$Ky^S;+>g0Z&_!H5>X}wRvyh&%OBf!n5$wo}gG%eGziY&fwVu0p`u<9QXxSX22>S zLCz8)4Po-FJD8S-RP_B_m4j#K0zkfTA|fK?fSgYx3k2ZT5^F8CPn#TfMNCS9Vy4;f zXVR^kA}XzzWb<^tjdKVqWEA4pM%5SfrbC-L#Klsgr@63#rbb-vIJt7KWSmDp0q}g zF1JCFH=BR{J!GHB1*2ka!=Jo~5p&Beb5U z0x3+I>tx5m)i>1m#Ze6O^G{I7fRejcpD4>k8^{Wu_aEI@Wf-zbc1T*eNjP( zCw+eUI|UeKoZ20XylU!U=8v z8e=iZ)}m?DSq)9g%&sNFN`lRlM&W3wE2kZ{fSK=OfGFPqOCV|w^URVC0rH)kA!d(> z&-%~KdiCoR_e%e6oy&9kfh)PtpvC9dheZFkEb)4+qqmRlKlc8F2Hlt8@Q z^-VcI>DUAEAG?Jc^*m@#hsiK|;F+6dIid3xdX&*Ow-k%vTv*#8I5;re?FJ%(fjy^g zS}JGgizc0`kBJbSyOE_MeF{G{qTxg=6M)$OQ!bjG6p z*0Y-2##sXjX8;HQO=BS;>Z?rk@VIkdHb+UhT$G2<)&SM98)N=DX5*G_k;#Zw14stoCfF|Ud~ zIfAhTY0~9LOf(OGi$O5biMFJn7`Q4APgVhkd(@|;WNqdK&j#*F`j?bFZY+%1@fb_J z6|&3DtDB`|`SUaA;|SX(?0}|n^gjLK>486h%DKK{aYPL%BzLZ!&O=&46bMxX+eBO? z;y3`<6fR9z`WZx82g2Ky`cU&IXM}1y$2zqvkD18b&)0umZC^E=11nN3ZHsU$kdSz7 z+|-&^kZ&Fnp}@-G-a`XYi07XEUdNGZ-;*5R=vptoD7RPGEj=B8mD(ntEL2PL1j9MK zPsQJPT7aoehxO$!^T(8KupRg)*cq+*T8W%zp=$2UJ$H1|uz$XojG_V8%FI%K2hzCJ zGbJ&~7x}hEx|(`P={ronv-Du$-uzk+^PSX~>5&7$J4cGUNZpcO5r_yR^-TEQqE!u! zs0QewQ6-=(bqhz++1wC{B|;!=qNj}5N{Kl%{$T_e4bEVRr8|3B6HC)z35``J!UI0^ zsEzG}Ksz!7hA9-gO&GLZ+A=fTo=0NrF1vffNs*EddADGL1t)#zd0b}`VFw{SOiOhW zNo@p`!5kk(Gia8}2ny;h>{OgDeS}_tTIV`y6Fw~7XAhcM4=_aPz`H9I?# z;tQm&^<;xuKq`HQ8ldMUFHQWE4m?5Db??hJP5@i;qyv4;m>%3scURG82?SiJKcq4e z=nR5PcGrhV@F6(zXlsaE1FC!a@%)|<0GR^w+R*)M20U*NqDrDorV_KsXB@$oiD(-b!6n2rEO#~7 zlH8b7M@5sMpNyL%t=G&Xnst$_F42fQeC43e6@hF=Au7<0GW#UND`8OdVXBf)J(0bp zmR?doaD{<;f$anI2YXu(#crsfgHUn#pJrq}-080i>061lIwd3{m$Ic{KOY??&^$-c z7Qv`fvSJf^bz<;De?RM^h=zhO-;&VAmQ^ZDBI7RJ8UMHtHAH?Yi#F({rqdnfk;y35 zCJ!Rdcch-I?Nn5_1yMp(497VFXP#4r+C@-2W>eqo8upt-ks_kaXCN=Qg-^TFN(S7GV281#{oXkpDI%S9?aG5#4j@UA>f#Gi{w9r&lDI21rRdT+ zI8EUN%(0ee+-*)(NpSwU3qQ2xPo#h7+-)X~ol+>XWS0r$px;Nt6~L>^x_?E?FWXNV zOEQtm5frlgH0>6&Va%#Tjo0H|HUhy$>LIyTh148Dy{}wSIx!a@ujv6BEq}g0MFb$F zbJIrun&7Q>9tqHMgcQz!3t2hFR7pf~r9hIGeaw}_l-@yF)YR6fG%bZDgRDPVqqIk5N2fAcs~b+K~ev2cp+%O0ZRdYN|Cb^P&M} zS*24VY}WtYRl(3lbVE4$qnS@*`k1>GqKkK~ytn#9npXFmIv;hiF(?Y|^}Fa3oTv)V zrU-p@wfaT4QwS~Il){81@Z&2Bj)b|f(BOEHB=&fqQSWVp6~Eo4zlh`d&(xb`EQWf_^hnW#Ap2l|pOWnvXM!;fFGe>}FGygoAdj+>gljxR zIo>`Sj|e^H{j=HSqRVQUVst^t`mQNNmt5UbiBiQhNPhugiWUub;|Q2*HIlPO-tZ{j zb1CWFQXc4h@5jGZ7y^X}MqlB;jQM*pxy=!W44y2(1Jjj%C^qZi7WwrQ2*FT1k(+OS z@zT(w=hHqPQ6sviGYWlPHdB}H*HJ5OOY!311NQyv77R3Y9-8dTh)DLygSY#!)Xwh! zXtEQ_SkZe&L0}qF-DU}T?G4P{O#-@FxJ%15E`MPP;A3or$wyaQ5Qb&S&oBFqN$ZvJ zBmG*)VyUepWdm-8f11kOGI0A2`c^=q8>SJbZF2eVcR$A(lSj_Z42A9uaz`uIZRDEv z<4=R}QK+M};46VXn^^UkVyJR1sI?w103!ib0Y>IXGfNu7+|c;+=rSk6J&{!wG^@#?14xc%?R&ld<`k)-H}oL>^9r(CFjD8ncm*tQZ+ zW2cFk9HU+c9NA;j&Ha)>LDFRxj=9-S zV0O}IWSm#N9dO&J3+fUEvESf2rYle;*^%S}DpKVADRorEC};WXqY?3Hg|2zWg{b~- zQ2TxvX?yOL?-<-tFqo_UvjRDa?Ew+nBB}5vowBAwe{_2`EaR@HsBJ-A8}-L~wzQlN z=KJP@ujodQ{9X0`vaaC{>yH8-Fd*n&>!z+gwWzSGl+*PiG_w-`SjPKcH@iKd6&2znw)Z>orPwfhtN5oba8v{q}x z_AY5|_+(x0{9qd3%a6ETFQkZSr;rAZ->>V&?RdQ}pk~{|p%h!~{Po?rY(h}=eGj>l zSBlbQ>Jx2=G@1~Z>h`|n$ijq$bL9**B^F|J4=Z$k9aNK0U>aWqJN446SRtPs08)m8 zhMSHK17J%}u69>Ab72FPeFtTz^AH_K5GOF}H;pnD#{A`UhcXYFl~!3M&>r-av}!Tk z9!D(tK|nKrdY7&(JpTd8+Ol{n*lp~0Ad3@-=&h4|wLTx6Y@J#AAC(fkM^ZuSx_@I> zx$C7NMVee+n>!O}7dOW#dY|PKBZW}{-qU2p){*c|;`}5}KD&17pinuP7qf+)wU*v_ zik!}SDbuvi}m!n7@29z|@oOWI=^3azl)> zs&)5%Db#7S{S#K!zU{MJ>pXo2f21fWQRDml64Fo(q$q=`D6JXWz38FE!%vD~8D=bn!{9ksS zv;tUR4iaHi-3?%&IVhQe9clxeIy5#laYClhps@i zAT#AMB@~p|erwqmZuryF>QvJr0o&@aIy9{8WHLe&=f`s&0=fOr0)XTw^q)(`N?8PO1$diKpf=4~52 ztcQskkU~>P>XWz3CT_vMYYhY6>4oJsJ;D$1kw1m8y%GI9yneFnlVj0?5taGo=8lZi z{Fc2xq>Wd-5|NXzYKW^bOq2e|&H3vBAnLEk36_f0iL%6PQMtSJv9q^+r&a5{vWxT` zK73J|Bmp}r90bh=XI8+kO4Cww;gwINLW@OXVKB0d4#VTj3OPzq%#ouEsq2p+xmkX9 z|2j|(3QkJvVZL4Rs}-3*?2&1q8B(nYu2RMKSy)_GQq0^4| z%9H$H=n1}$v5{68A&6o7%=A)q8x0KKs4J|VHP1)e&$M2DSeWumqlRr#!>9gQ4}!a& ztv6oPH{8(>Qay%=FJTSlS&BFnp)NkBZag+sLy@d8-^1VFfYKN3*lkcgGTUROyrW-^ z4kwZi|0rOX8c2uUo@j^`iePSuGfHe{S_@sXH#urBF0roVZQIAexbCbFktt?db04pX z-0$1eUmQ5{OwCh4scjfr8wK*A8YxR2n%yAt&8{+c!7GS#=o|(672Uh&VkR@;s%8k@ zw!+}jC`^-HxhmNxVkB3XfEO~4!K=A@x)iKO`Kwt3`{IUzxEVMdM_(>+^JZ?9lnb?F z^3p8hxF^~}PCk(jC#S=%kT$&SpZu`ibU2Ixw3bBYP{P6GUek)dh#1Oy=pHnKTPo~ zuhyxSjzm3LjRU8?HMG<
HZyh>aFAb(ML8UdzT1>rcKabda$q)?`egc%J~?3ZHo z`&zl#er*>X@`?96PFUq=oNy{^X&y7tMVg0sN?98d7?TjNSfHsdW(;!h?eLW#81%`xycD9@xv$XnFpI0PZ(*YeH*KiFzSY$xtIo2<#G)?M;gWk#>B$zOs~Mtlq** zHr8OQLU~zrkfaORJ*TI-L)GTI(m?X){1&Q%mlHBH=;=wtZOp3x#=rfV6JP}%efVSA zxs+aJ30lM~YbBj4$(bDT=)ugSwE?UMTD&5xyb7!$C{wiYx#ndc;1|jL~5zP?BXR z@Mt$snn*IZLpqu%FcQX1XlN!SR5;U~2HyK5N`UNEAL^JI;iAcj`FL9~ZljzrDv;A# zywFeVb1{5mOw>fCI=TnIqu$h!|Dr)eL#U zci-y(8aizLX;Q~*4Ab9jyya55mf_M2P>YO2xZ^)`S_7h(73AJ9U;9ygev0B3M@0D{ z&&>vl?+fj7igiSnSH+XbJAhaVLX5+S-$Zl6g&6==$Uig~W@o(WoypkR zaQFoo9b1t1G!m&KBgaxn;j>rRLkE`H0iU{U65h7d;O&oqzCJ9@w!KC*J!D)g{s`;Ads%#*=qO6!elqSt_(9X zI(|#b&F*+D-ts8;dq(FV+(YCFOlzM$($^N6g+b!KvlyEux(KNhSWWO)&mv$@l22BG zb9Nz6n1TA14c3NywmNcNeP0E-OLuoZ^M>Gg%Ogf=___RM-A&G@p; zD4phd{A|2*wBHc`o*|+^Xxr~1e3oMwc{h8|{lGI8T0b+MZQQh%#j%vu9{q)$6^;Dd><2bM{5dtXRBK*c_(L)sRCIn=%r+__yWNjOuwsYB{89PpI}g? z>whY7@}4e<4H9-fCFG%=VvA4nhjf534@ASX{d9u=DH+F<)##3ao2p#0YjKDnR!1<# z9k)Zd4|P0^Jv)K~mk%n+N1RO|;H`GdSC8=CGJ!8{k8TU!RJ{e{ILt`mY|#ERw;HuM zci2q&)+mAUrEm{@T?(lnT3wz>qJBol5V&e_nES7$n1H%FcVdqeU!PgjntqSOfOkSW zaY0#GPHsbzNBHmWH#o=|@}v0RUS;1ps(&Zh^tzP{)uTTt?XT!gj(CswCCL|YdN8h- zj!cvC8R+yF`r`?R7Gkg00It%c#0SqynEb0wNxYG(oMzt{8v%lk-gVCjEhGYgT5t2y zl|=FwAb_46HQu;B?2;iOi2i3Rm6~4ADUj&3_fSs|wYum=q9&|P{{&yi?p%0(UzGUY zq&jU=^nhE$8Rm8*|Mo6oy|1Ak=BIg(cBL(n3cxAg3T~lU?7BNLA3hMl^fLk>*!nHb z9{Nj+GG}xR(mfKgVf1gfy0(e>ut5Pv{$nyAv0f~8%a*xpvdL()>!nuDRbJN0whS$A zf}3WL{EDSXW7Rg!7$$C4<31yUpRX(Tk;GDL#sleQAyH16|UYkq;#S;8K);QM~8EB<taHzC(%v z11o`~rKY>6W4eOa(K(?tmvcZ0&caxUQI@{azggU^CkBfabzQo*23Z1Eyxk-Z4|R&m zkCbx^kepePa>~j=#S`jT!Paho>&d1zKl4qPf&X(IwIaq>!_$CWKqylQNXH>g1{idp^?kG}J%}=>E?_t-Ub-+MBDgQ1LARCxxj^nAS6{$d-JEc+#Rg#oAny6EwD{>LPOZswnu1{1qOwRuV0g1jW+kmZ}#~$ z-()$iMJ{}qC@yEaT?dn`S!%7`^1`kl)r){=U7wDaN(9UKKpv{%WQGZ+egif%tpRD? z^T_Gxd_()IN|$zd#^<#T$1He9ydgUp!rLS?(l)PE7KX>wN9`4L<$jQCzaT=TtN%(e zFzhbvMQb|uP}Y03;ZY7p>E+czfKBQ?xFV@RCJxW_3Zb{H7SDmDh5{gS*}T&G}kbKS(MSt$1rMo?-YPXyz6e4Vy@eOWKmv zlc4XoAQ_Wjik9RnS64Ygo@?Pe@3)SuLE*=K>V|_K86g)EYb;`=q4tk7k*i;~A;6MVIOU?K7Vqi-)-@ znq@P@06TZ!9>r~Gp}+lkv>7zCIk2&o1sgsJeV(cff`#9pkC|5|yz?PbNM5@GPLY_@ zVNXpO*CCvE@;`J2cty^z>+ubhpv43y1JX2P7(^^^paLu zt%XVJ33}BVZKU9wMF({ezUp79067jm!0G|1*dwM=|Dg>n_A+Y1s5KhC`{9^xz{lfn z9mJioX47Ver^`eg%PuP^t*Az4jL}RaBElcy$QVHTD zbvjSEDWGa}x}nqET_>627PL+WaQRSh3bS=M({vs1la?)Sb5{kyqmnf2_4t9I;@{VK ziq94ejpCn~We?+UsM6etd4qq9lXKhzFi7XZ2*Q%hUj0nV9dJ^2p8M8$`*3o4^GsHr z@P+-ASAWlXx3q`mi~_?so|E*kxy>s8|AhY70h}q%HjorIK$r*k*|{Shj_1%ndd4V= zQXnLc`0WwKPD#&)^@=NS5?2*l~e9Nf6VOrX%sN<~%we$Bs# zSg99YdHjW_HOuxb5>h5Ew2LDFf{l20dT1fOKd;5%uu&qg-ZJrIx007 z#f%0sn56&W`trxFKN|J;ADUYqb@dY*<%~3P?_6O_(Lg(ue6;ZiKk=|~F*A3dpDOq^ zwy%KiPp_bALIJa>WKwA<1x|V*1G=XIVyK*@|1G@2eD;J)CyTacp7|}4pT_LoiY<(f ztduCh!ojiXv`=}S$qxahL6C&*oyU}HKaF<>y=P#QJ$##FY-~W&CaF<1N)3eE zaSk3zon|orEepXzgkk!eNob}TLw=)TRNdvPC2>H51r(;Dwy*5j`Grp5@n(K%#wY_u z*sLs!hfB~KuK^d?o zCbdzV7Hy7}zdSkP=@jg1i<=6k8an?_{E1Z~!%AmUu;{d%o)zN+%J`m*pk8qF)cLay z&{l1Y!P7dHH8I}|zb!%62zSLPQq?iu4ZDW-k?Gz0-+@GCUL@)vdEc`n;lEgb10|AcqHRaU;Rl3^XN6+ zJ3u|ck}ra}RegRr_`+!Ym=Qr1_@@!q3=D)~t}o;O@Uf-3rGy=v_f!XTYSFu2^MT|( z4&@^J`ataiI#pt(_o6I5|(I;o{Ri523PR!djQUl|1~%pk+gtSQpv6t#&?E8v3DkrNtP|n zz@QhT(&}|i_5bStlaUo~09GGCOhX5BYWm+4VeCTYmJKysqL3&&yz?yV@&vwV?>5UN zMBp7*@b#Zy)hkm^o57!6i4|Ixh^~9DwGCjU*T*Di1%;}Fb3IQMSgjTu3|M#jw(zZT z;Ctu5Y*RIxp80iU7NmAh7IBp13MK+9JIHnM>3qO>3>F%aKjY9P3)KuBZS^YtiSUI< zQi3yBPu(?cFnSB+O$q`?yQH|1yUf+`yN=8l?YVZY)ghjX_zoEC_7;m?9w+n?KHT_e z;AEwBujAqof^E)Iz4WOJo%<>>W!2i`Sh0B{Z^gV2KuLT(;Z8WxEov@jVS$vs#&Rti zrTgQ)&=)9^f6pliN1LZFcy)eK_-x3+j_s<-b_c+d*JM$2C}L;l`Yy{o{iQ+{5lSk> ztOmWeaGy&)M*xZ?dU`;HBrU5ZQwOmuXG7JNWSx}aN3=p1;P(+%6yj|VYQpgHNr9BM z4p6;8iT2#u{_(#_xb;X);#>Bc8Yii?+wJ?+C{@JB6*Dp4^99ROY64nguAP zup6Uj2u(kz9FNeDpw^?bk4t!9XTtj-XZ;OFV03Y9&k!cbJ89|CH+oWqv}V#B;5-L) z0TlX)s1KRD);M53{^mc;4*`5W&nWCMrld0`|D?L|gONt6mYh}kV-;5rL-N)Zrt$$) zjg&S=K9i;v&&2wI;4cZ!aLwEE-4m^?)WF%P*F=_cuQS0I1zHmwh!1T)wGTg}d?r{< zHPMoShlojhOg}SgULodoXHm~bBG9x)j7>6jI4tXe1rn=-e^Q`!XC~(1R!sp-gCycA z+{{4(7d|0yvw})3HhM7lsDW~AiR-8A|A5unZWf7) zswTBKbIaq)ZY*9`(f*^aW5S+?jspAS)n3d14txpYyT?3}gXmryn>9yai3GSbIjlkk z7p!zNqUscAmQ#0qiU1|w+=tR^XV4VMJ$d&@gD<>&ZVk})LLhm9Jp9GwPSHi1%kDii zqqTVojjGF?uc5ndPq|1kI7q?|)83kvvy6p0U6SQ4foh@8u8wcB3Vq@HlEbp%B5dWy zFZU}K51;VWz>vvm15pOB_@zDj(EY8F)@=aJ)F4*J@1w=LAdu5@j0ZldnQ|V~-C(OBI~OD=Mvt2?T-wL`nD!0o+@tD7L7$(bF@0|SOV)UTDuax9@? z1KD$Uj7RylQoAjwG99Cab{hC3UvETH0D%Cu3*pD3+p1NxoIctI$_36PHE?W7RBd6W0e;PY_#G~{>D zzIGfNOq;kMY(7KXW-`bVweOp zTp#Yd^{qQ@@Ty>y;-yUs4J`Pf36#{JPkP9oHuk~7YePu=SVEE-*FwK63~lOgWhXYN zcp1H@`qY{#wd9{s`pN7a?n7HcSuNgXgY~rqyLyNg&aCkR_-aki#bJoyZ>{5tfCl& zO-$RvHF1p45bv}CUZ`2NE4kjU@A`BAwF|acf7uV`g$O^Dy%m~mEEfK4J<#_6p@jf# zb{vPrO_ex6tdRc0UB}E&@wc53p7do1<~k;X@YO)lOH5uDL6#NxqCRls6}&f;i+Hkw)F|b? zV1-eK-QQo<$Pd*~y?V~AiQN<05Ruvq7Fj7;ewNmKszxF)OpIxX2?aJPaiktUWuWb! z+nas7FW%1M`fz6Q#X-ko5(1l)gEDs-N+BvNe-%YlIAooAqZbA`n&5n&pB8qD@y7jV zPcSLO4V~7_Y#^W!IUEhjK~YS(IJBVu={<=i`_s+t|8^?KJz5l71v&H?A%_A#9yKtR zwjz$4K*Qll+#JE|rVa5dF!Z0jZuX6W(BR>#umh`rK%HF7H6fpX z@TS}G#DX+7v^5O$m29nnz#F3?5zG~DcIVAfF`@<0x%#ZFu^M5p537c~Yw{Y}L1dal zbu<*it%@4(>aC}^-i+AtT3v)m%?G4!m7VNojQ0&o(|SK)1@M3w1;}Y(VTSD?W{m61 zM58f;rp~usU)WE}v@4KjsiJXs`a+>LI33Dj{UL;06Wo? z0C?XSj3J^+tbqXh-){_sjQkb^0wrsru*}daF&%}7ZyiRcM2+qGLWvl(+AVnVoSbi1 zY-<;1^L^Z-EfJpxCc4_GsF#qx7Fup41J0?b5c3kK2p+8L4VQ zCsD>60*ZER9-@iRJ=;`r+oz5LW&*%APwa;gSZcVMpLr4Syni-olk8TQfZcdqW;1OY z7f-AAsBsKq_ZyF0Lapff?NC$wI4N0tiWTp`c5S-x4MMnvc>*yMu@;GF@Fgab^i-Cq z?eoD(y;849{{EAne&Yn2FK~T8=)X#6~AJ3n6D2^&5HI8^0RVHF2FOZCyFfx1u|7TrVJkBwo08b@b;u*R!3! z!m`8M-|KN;+eZg(^0X6U7u^2?{Kpd-3T19&b98cLVQmU!Ze(v_Y6>|xATS_rVrmLJ zJPI#NWo~D5XfYr$H#Ip5FHB`_XLM*XATc>NFgFS>Ol59obZ9dmFbXeBWo~D5Xdp5$ zI5jvRARr(h3NJ=!Y;cXxLu6i~Rky9IZ*;1D3VYjAgmU?I3$@JGIV&OQ6=d;h*xt!mZqG5hReuC^8> zsfs$IsF{NaNXo(9m64T+g%6;hsODe?v}a{wR0CPK*#eybY)mXH90-(@;?5wTtCfSj z1ke@42jF(K1Sp%je#Cxwu(0qVPy(bu_8{jEqZz=&3!n&c1!{OXf>;4Gz<&f42NzdH z6QIk78Dwu^We=kL2oZO1^m4Ycuyp;KgPoD_Z>GP|VoU%zps9_6hl`CB0BCOpkYiG0 z0w_6nd?>8|G!FIv6Obj))*Rqq4$uJU05sJl)zksfYRZ}_>a1jRM+_Xs{ykA=-+|?prr9(|6Aw7@o%`Iq=u-5u8Jfp^WQZ9 zSOM-JXBVr#W&fi$s*lb9|I^w>sJXL)-9H5YG?uQej(p6_9v&V{7H%%COb*T#Opdny z^rvBIqEm`)@u` z2?ag?4+|H7m6rp+@x0ldFTX7xVv3Y#VzA4||{ghr!&+ z-pu?j_GWI5%$oLAPHrGsiT`r{P$B$}&I05LU;%)f03c6OOXj}?|KZDDHS1sX2M~Tf zjt-6hbD*sY$j{0g^l?G(aRIu60Itq%AU~gfH~eo2ft4FzW@YO7LG_PuLHH-Tti8Dd zfcIbOk52yE^j{>P`DavVKjzfT!QR#jUFD;Fs%Pmr04m8+@czo7k>Ue*=(!GBSE z3tP~~w)~^g{5w*%AKd*of2{r#vbJ20^s2I#{~KS;y*h6K>u&Q z0A^89MJX{^`v03Y|M*GTn>v_T*;@eEIJp2oXJ?=n0?P*%*f==>KCBk$AZQ%)tL6v9fRin63UtWMu&` z+y9%$3Sf5lH<1m%?D%iuN36@giCh3?*MG$Sy=axcgZ~esS^fuw|2h%>k=0$D9c)0_ zR%Rb}gMV{T1iCs~dFr!#(2?~+|MB_ne}@070OkKo(!WKEi8*-sFmkZ50T|hMKEPxD znC*`RaQpqQSkr$UPXCO;$9Da<{P$!4fIyxgQ-swe2UGq~>-6UE3V+F>nM!C%UZ&G3 z93dUKM5xuQnNC7HiGp1+kZ^HOYhX52v4esPpP_$hkbS8RWhl1o+t0R?>giiERgpcQ zzoI`Oilpdxz7~^aaJJ$~U}ZNM?U7u5p>7$+Ty}e6I|)E@{8*f~v*$6EZR#EUI*rVr zvVG$#v`5JTYYUdMEr#a`8bKG~%1jry>-!^Cd<^i1=qla3abY;lxEzdQUk~O%m60We zaPHGAHtHLu?w23*qV%TSqnK+z35|ScESzC{$Q?FrPXfbblo0km$oVL;ToEbd{LD~! zSnecm;<_Qjbct-ZBPsTZCu9}t%uCVgZH*A_xUSm=m?v_|qk|Del%qJw)tx3=AX;Lh zmaY(Z*?!I~IGWr9W^4=w6)Kc-dg*QP>VidzVI?P%Oi^`eIJdOWLV~2-uV^Dr8q}Z- z42dxssZ>!C-n|+^sGtxiEPQ90%*@F;N)ni-csuNl) zNdY<%o@XyfD#mT(s|lm#t^A^IUAI^w!l4p=`juzldA>ksu74eyx9= zMt$5uE0mOCA{BGOqq28-$zT^f4i!_@8~42CKqtPWGh(i{iJ1s9^2n-pxSCD1WiuImf&v5l3|DM; zLbE+sQc*4#{q0=iLFG{AI6+0XDXSG*_@@hL4GTKtJ6T=-_hXLmdhn$kF+8ZC>!2@J zC5C6~^f8$<@(a#bZiMZocq#d-JpqlNte;{JIMr&xd9s%=(GL2>!lx7XOUa3o4^4_T zCkd2c7RB@DbK28pEoARob3lQ^~zQb7`QP48xwFyezL59GSe@qW##>wB#~Rr6_jc z<#Abr7z5>I-a?J}2-txU7}xpF)mO_g9@P{=*2DAYN3I^gJpuLBmYj#W$pm#Yd+*)2 zWG{LV+(Rl(Cbw|V>Q}`w{Jz5@-YG8}u!scraGVt2U$4k2+Oo|8I|#Z`R2HG_v@Xh z!@%_mX9(yVmZ|ac0b87lAq5`IO-{xk=60PJgkM1@eM1MIQu)ug2KiQkgZ6A%d_J12 zys}g5FpNS=QD>-2X?TAq`X>4{grYN?MpiY6y$(r&%zE_m!mCLHZTPB~7oqknB+14v zl#K!lqHeg;4q_AnxP~odp|@j6u^HMt#;uvr zJiuFcgu>GD-B|pO@#3OPo%s)4(v{6>_6*uw@>Ma&v$y*4FWIo+8LY~18JOv;*5_N_ zWgK+guGK=Dnt)LjCTX5zKiY`Jhy`NqmhE7Pxn=t4uZF#jFmWIcd(U>4(tabq?Oz!h z6(ns8EM((w3ok~(4#>lR+u!Y4AS4p(NKfdcYyENj>SUwXzhc?7&kLLCzCZb1#jykG zHFb}hPw_yybaw-}MT|#j=~_y2(Ssd1NBch99csD!Y8|+xSWJ23vjhgmo2XvHv|$pZ z5|b=&$>mI`hxBeH?d{P{59~JBJ1XljWtNRknJBMjSxeHd`R?ZCAv`c6d^6wbh>6<7 z=>V-nc~>W=;k*A#_yrzu>|rpRKW>7le}%IdMPAK7&pQR)^(ZAo5SJ|QvN_?*mo&IS z$RBIuGe3g08&Lb86!j2@#1 zpS61tF}cd`i4POA^Ysi_*1mnwX3@b#%aN#f$e~u<5qhvBXbus|xYc)GjSoQAv(S!7 zm|`iysU?33q|7(rl3D@N>#;IHBK~}Y07gJVCyL6E4&rG57_=i~!>YBY$k%vM7`bxl}g3c)?Li!y9+6*`W#1xTel7e$_Vp5h^z z`zhE0rL(H-4257w*=q(TVVj^DDWZ3@eI!ar=@o))@w(X1ZpE<_{``6UJcDWtd^5h} zlt(Gs^GVOYt+O|i$LYu^%5Cd?SUk0ft>jBcEnW~G*(LAT7=WOuQ*}B2&kEjg-ZKPl z6zpxeg5m0y0q4k{^*<92N{Xk}Q|i^%JC^Q@zJi@`>&|HH-6D0dih>SQ)VpT(PcS6d z33o7KfbB)uC`dLTL`m~|`A(lqcl3g97pgRSnpnw=PN(!-mwtckX5IFjDL|(T#b|R| z08MA?GCYe^wESK?voK})h48YlBVTx# zl#MFP<0V3UVay3l^B_$0sIn@b3YkTh$n6O%V)Umij6a z!KY<9Z)|0Z=R3q=c0YgLLT9@xeA^A~yaq2of(cI5si%l}T#7L5_2}*EUmA<8UP~{g zGW=B1-{8j3oXd^FP(<&OF@%!BsUz1_gN0xlViSQuR`i@i+LALWG&t~z$h=?vgCiqg zr~F+qU4NhFd4-TXN20dbn&@yqd5`Ekuvg~*F1*#%fqnz)J+t@q&GBLVzG}lG-}1T; zk8L32)YYdIGb|u7l%IIy5T&o@#O70N=BgFX&Fc+u!b0X=UdXTN#F{sQ+Fb^(!)aG# zgb2=l3O5zrI6C7y92w=`&S-dNTjXrC%S#9^(dx2ECh7jE_ibE3VlNF+mfukHls$EAFGTd#ga|KLe*5}FPX_WUuX4!zfz^7gDGL&YKIUyUWhqG$?{ZW~Q1i zN++RZabT}w^a5|Y1Q=9}n!3Tmgab&*ziS^oz*wQPfRY5g&9uQ8{dC)RW$ukloy$!x zjf#8DyA03DlrjW#!zL+#|u<|~H`#0|G=BT!6IF5V`YPeNe?t(?#;{9E# zrn7e5B5s6>opkyKX_HG!rKZw|SZ(D`>_XnJ7)28XUUg**pc3+x<}x!$y-Ki`Ss468 z?^grHb8Y%Htd*{Mw(-iB3&kMw)p2nS3t#7(*IR3_eeT&#T81y|=;M#m$mbmX|puLkkz z9t=2c__H5CsjCucC1IoiODhgGan~?vI0z7)d{3KD4~>7Z(-DNY(DNlzQ&N7t+|Q;6 zR;IK1Y^e*wt!zP3ac1+K2M@(u`Ss5H*@5cf#6UME{q$nfX(99PjPo-c@s_KJyT5u1 zlR{q^vLZynNH!!W5}pqEHF&ijM|fsp4msWRn#1Q#iKhs^6yg94vN#(FaeAz|Zq4NckHl?TLQ-{CW1M+i zaPm{cWR0_D-n=evUih$g@-Wa9;-dC6i>#}~)Af2D7vJb-8>dBcm5gFt64xWD`j>XA z6oY>Q_lphMATIK#a37>++L+^A!1-1uTIzFBIkZlu;rC60PZshZ;q38*+dgxlo~d7b z{e3XSabAKE<8&Y}D-S@vm3_{If5hD%a}@ATKz!wGIh9*s3DhBP;enF>3Sl?}pZ(zV z%f129fBGs0lfn=4BqS944H^+H1vVmACAVm5Se`Id7-ODnZ+eYiHz-Yziwh-jEUc?)<9=kRK@Y zJF|G`fM&__%*TkNY_x;#q+g~ne=R7z*>GHJ$_9Dk#SmStOINnWg@2`gGJ$03!NVoE z#o6qLHEGWqwsb7O{g<2({5vr_f zyB(QMX_Nkko{zL0D6{w~t_7b@6F08oboShLr}5Cr&gO`}+z3DHLTCeZjjPz@j0DD+ zW5-OPQaavd+G+Gk2L`@+e+a_0>FzS_8Es+%Q?tWz zrz2{Xj*>~l$9L?#JS6VEJ@*PjGY{3XMFci8d4Qkd=2|UqOVvq{8Aj3zya=pLM*rq) zQ0+uogueB;+MG~@noxU*#l7Yk2mH*uf& z6G0AB#~S9z@;(%mGpJjF1mlO+y!;I+V;fESt+5iU`Rxf3ItG>W_LJP3RiuNE{(Rnl zj05nM*QMb%+*Tq6(2M)RT0L9Agm8n8ie!|(XwMrUw2qn zlL#+*)W>G4-+pI$M17-LP`F_dDDp)RNVS7dE%M6u9yx5dYE$23O*clOsFp8xQr3l_ z8v2=*$Mn6OIZm6y@Jhmkc#fSOHNYrz!1~@BuCSEYZ3qYy1jjZ4K(rsWh=8nNXP2D6 zDVS}J$S1?45;F-x?mQ+$7bL6_?_HH6{%8k(YBmx`{2sgrz{241sWiqER$50KBGlwq zUZE*aZ{`zT7`L%5Qz?q6^nTyArq*4Pe1l#vODVBqT&%P$G6%0j3RFwc;{h#vvUCQ| z*<4cgbnJ0Dlj=ne3@YOV5a4asw@B`NJ|9=B=niXDXl3(c9;~gWcbt0C<}!1EM7Zb7 z)cnOx;RBTiwdHX%jrw&vr#V#f;DWKQ--;W9oi z4sMuv^@f_Y@iTLnxs)kha?erHe9aZq-egm(xTHvq#x3YdAD_9)Mdw z?!MI8eL$xqSx!d;o+B^>FV+%8>Yllrj-L_hIAzTvf<(x$+2qj4vg(BChT1BQ94Cy7 ztZ(GKvAJO!qNunOTu=Q>MndP*TRO~slUX8ojO3)!fc$34Unzkb-+l0D$HdSiB2Qi~ z0F65;ix)S*?%5uU3T5Lg%VA`{r48GOiDHY2otsw|tW=>ccIjd3H$5)kVnNjiT4uEC zBurHlp{K8XbvX}m>_E|iB1wr7mNG}HpX9oATWhjLmJ{~#IOoJe;)W|a{;&A4ku!%8 zFyaQQ5qO$EqUN>BwLkc$jW3PdUmL>v2|3F~w}vVr(|oBAKC92BJ-e?8a8E9EMYZQ2 z+%oG$VnpBJ4vn<1Q22e}z#=jXQXLc|6FiI0y7U%1rJdTwwc8F8oCh7XsvmKtH?>pa zU?|)1^@Vn|CKPNc`kK@k4yWUllPt!U>&9rpA;2s~bWeJ@YJT8XLsQ@F6`=omGQQPZO;R-E1xzgN zuM_N?3DOczua%ujZ@m(3UXN%ARzezo$|Jl?^oRw~>&k@Ps`p^tpPEjQ8#Jgosci-G z$tEmc6f$gJv`>Ho&LF6~yEK}OXsBU)#4#qa>oZ!nQ{;O4*P_zga8fxZY~e@$&+a}! zSKN2Yq$dYiCZBE`*~dhgw)G_QbW#Gb3!^Wylk8siZ&FG`!cPh6eTxl6qUc)=u$J1 zH-n4gLT;ia_Aogk$wIkX>cTCHNxM-JtULV(YJ%gkHDi7PQ|6?6K-1Png{&_yas2Aw zb6g6*r}N--n?Afq}PGGMegHcMH% z{!9!kvP|s<=Mycph>NyxRAjZ%;zqMjgV2`jKG?$&#E#=C)%`y7$D*LLKC`VWOz@ck zOK>@iP_ton-u+#&8C$s=$SkxQoP2Lk@TV3% zGiPyV?6}6Lhs%)RFk*F@r8(%UEKoZ!M7dkUhMx$_9$*klJzGVN^^Dy^voK239pGcz zwr$(CZQHhO+qQk)W81cE=VtH?Qpq60{sUdrtM`6ZcR@Tkq1Y8PyUtLd!LY32B=p>! zOf&-EFdrw4mA^{^-tg2q z47jwFdR2A{2l1Klyec#U&m$EKTh5Otj+d`z`E{gt$U!ALrNn&IgddW{S|Vklqr9LY zT6QV4Vl&RHS$HKYcI$8=S>`SgC%w6Z0@jx8ubFn;D1E%B}$c?O9Wxn$an4~|7Kvrkqa_*~D(Y33&&pvBRG&vbf`XVZCqw5oPQl{DRl~yn$AIbsNS3W(J=lhc5SAR)s0A9xNOZfDp>p2beS`z+M4al3n>=9KzL7WNfV>oHotJtBh zvqQKXUr#Y>w&z&k_C}D^Y2pQ&Y0+sH0Y5vF25~vxJ>XzmepIJO)%PLs-T$&)1NT^F zfh{bOow3(MH{{YdVlExaV7TE}3Wn};>o#kh@Ddm!XX2!%F;5|p2PGDtUJ7!cNwc%9 zK9{1v!;Y$pHn$g_Zj6ljjyB{rZbIge>rqnkogZEP4|8Ug zH5O?9tk|3yMOY7~KbB{RawX(a>AvNTViu0<5SE50877q*^1lS`HtswzGVLQ$GPavx z#%o`K(#0T9(>@^Jt55vPkQT##7mjRoys=K6Z8Ef20}y>?W3;J6=EaZi@&?^uOw}Y^ z%~=bNV7Z7EIq>}FqsNd^7l`;XYmn?X#Ro$?^-vQxu9;im3CMZ$DGMx_FsY?9;3VNi zbxU2k$-X?y;bDmTq|m~Ax#HJ{`ZC}9_zFg03OK3ZA7D3E{{iZjL<#yEje0HaH-Sxt@H$lE@)CY}dys7wBSl#W+4XpRT_o?oY}S7dKhgd5`&L}>%eB)K4a zb!s}%Z*~+V|Fep5BM+=v$9U)D$}&kPQf5v_-T}Wc4qdn?ZHGGEf}86GQxV49N+(G$ zKYw1Aomj&c)ic35i6uWGLFWSf9NzsisA?7FRe+phbvwUUagKCf3$;yJJtOJgUNMud zpE_Sjj*zqf%O;xK2Jz`}o3#);WzGSfFLx4eOJ0VfYracyNko2oMyhV>NHWL1Tel!# zar}u;uP0kyD_2^INL}*cOR;t2otRZE2XTBvXxGw|Yr2D9`u*9QH@eCo7uBsnn$*^j zY~0kUEfCVveLu%iQ|Fb0gDZBX{JRf>jmnhsr0^+^i-wR%tpGHc(^?bC)K@;YB$^ES?{M!bZ~l%Co7DgfQDwsE92Sdu3!2Yx=+rIQ_2L$`mZyDwWFzO{}P z2=cOFL7yc?oq>z!ZSs=CGk!pF<7|uoRVlC~WFO(Q?v&H-0;Advt%(VAsEr)kP2x<_ zOcn&n*iqnZ#IdfA-%6p!CNNvoSa}P;p$Km>xmV&7LDih2ly$fz44cV})_PH}Ex)eZ zD5mcQJaC>^cb_jKika1>&v2WRo;i~$xHCdesn49w&6As+AlAxHq@D@&1Mg>X5GVWQ z6YoF{9+y*{`db+zI8-S`w2YrIQOL%SLgw56hrKV%KN% zlqFcg#QOP)GlE=?>K8a)Ve8uY>0B^a>jo(&yb|YjKp0B=WJSH#5JPt-_*pI`C`j+* z`s;AywuB7_FQ^5)5+Cxu|C)L#Iu+e&Psg@`AvMv3tF{wKZa!YkaWy1EJ3TiLa%v~0 z6(v5Dko$N!6i)sFkqW>GsNRRsp_sOb@4r2i%Kvl)wnNs@K4IV)tXz&Okh|(-zn}mC zSuVLi%GBIm&Zzsg_j+V8GjA8lV6smmMtMLSJu<6KTF?yJDOcJp1(G*K*}Z0E9K6mL zUP4^W45Fx)@mVHo)8+K*m+>r|p50p&D{C~?W5X)bRkSxAzwM6LnMYEI{d$>*yw_(bx~)%P%QLek-EXPMfnLEgiJKVnv;PqnOCuxskfpFr^mP zyj=i=r4I+ge@c<&P>lPKr?04^~+X)&<8?EaBiD}?wLju zfNm4_*N;&zK_E!L_VJaFnfD2-3jthl&{L&N@AB})~AKOg)pq* zM^A;9pp)U?shLCD2ACjJnxu&hXL94gneFvmSNfTKP*Jxws(rkXvdpLx8a zY)dWvx1$WgX5BpM?{XI8TRt-uO3VdBA!iFFNMlxPWek^Wvhhn)^e(n_!BH`jHRC<> zWbdmEED9-DY56rcj_#Lh^I8s0DA9t$R)X^NIIc(etrrwB#7&Jinvke_>9?q9aLAsm zNt5@^>-vk-_SC#r%LaN0)}XjM#HvXcJ>HAwD^H7gC6vtad=FafQH0HX`|?^S4&yLsFSE9z-ngD-Sb+dazbX$*p>ze z5@zj#q3Y9nEYqUUO`PuRxg=UR7~M73ps^Kp5Y0fS&set#?vEcHg>mt@rW#o#0_F&u zB|z-BPF02`q-SogEG*y}6V>bmYndcdAYWtZF{&GeP4eSAW{V21=q}+FIU#__YG=>x zN|tdbvJ5PMpB)bM42HpWNS!URAvEh!>k)`Nbc%OKbRllF26#=)GxO{hMM3ea%rL`x zH~a7;T1?O4D8NYe>1&HpY*tK z?SqOb4_h;C%sm;Lq|@?@qJz!{A4?S_G&(B?xDEA4RhA^E^$*TOO8-Fo#$l1mDob`9 zl9HTGFDD&$zmB(bT*UG0ou9)L*1+c-vzokf!F3Vlu^K>hlkzw8IU4Wn0xTFD^FZvM zJrQH7H%>kH$x6M26~3JSRHHkmbF!Ij?zNmX8i)AP=;2)LCDH2Fs|#!qRyc!2>JE@q z2+y>^ijMN^53=*i^L8O9tDj3qyHz}sS1$e_Tbo0gRoWm{I;H8Y{o#jkcf%P! ze@+Zb4Q&vcc*=mDBeVMfD>ir-D|F054PLFW+TIGqbw+v=M>IbQNTR{sa;GPaM>k_jVIn($?@xyjA zMVxWl85?bYP~!6Z)id<#78LH3Jf=WJ)zbpX(L3tlD{G+G-`GFOlgnWZ*-xP&e6i`X3st^l-bb>(}B}th(tHWno0n!5u&OJ@CQ%vQT zoL@#Gs|^qGXJjgc6cvl62dUNzIZXO=cUkhQq~J>(Qm|7@qiTF9V6%mA>v6)fvKB@! zZ8f}}MD7%I>d|d9fYUA?_C}1a^Ys+0ttvaRt}o_lT$P9;3k{ojrP`8bR1P0B?7%Di zr-qu#Icm%RjDXhQD&qF7FL+bm*Mxg)jKvlVRWTSe|0>zCC`+GDI}+b=$!w7fiQ>jy zappRcjH009>KW44N^3CKRib)yq4I*U?xql~&Za5Hzgg30ci20)b{EWZ4Ra!bD!^wz z38My#lt<_gH%3HK+-9S$ig@tSC{XT<{d6UvUKxeW=)r0?TO|05Nj)}p&xNl=`JH3+ z|ME1=5YsW{$;vcg2|jcuAJs18!O(XV4wZ?%bjb1Z_l&sCb$0Q9K6GKac_Wu+~WJ_xvurWRuTT%WONXpU-$U#M|x z>@wvyBONVa9ZUph{|mBzKo{{}eSvb0y`mJ;CdN>Ed&zu%bu3VWhLgy{-RVJimzX!j zXk9`v;&=|8k%`_^c?0>rtLy8;pziyw*v8ha9?B~Y1S+EFCh#{mTefaI2ZvFNy2FyU z%E7fG6&mwgyA<2ozEqiJ>7@1%Mn{T`dNNeGv}0lMh5-uagWnCo)uPy#(jU50@4ha=dK1nDA{AXYkVC2ip@D_Y|5mZZBwN3y`sS+(4>qYHo;7WOO~Z9 zznIUcE3=PH(6u1EcV2drr484hJXe8$)LvWt<;fPnH~Y{S5w0+tZ{EWaoGuu|(B04fau}xK=+{|z^=FrWnqMb{ut+s{$>~Ee8s)a^<<{o1X2|q2|@bAjab4(2& ztHZ^GMWxv(fmjePH~}`+&Kj*JgZ*St?h!^IMCp9-s=n)}l2)m<>A<6vZob+=y53NG zU~V60NV!#0_yRKU% zU0qko-RaA|bHF(EMvcYr4Q9y(6U55;l_M;TFRH)#nZU!;8T=ZIa1zL#i3g+w>>t?G zeln9^nejZLXX#aB9{7bdcKFKOn$M^|x%>u)o|WdhVv9&13QcRxe)()Jtk(HE!T%}8M;$km2O*Io1|oy&{kO(Sv7Hdt>P)CS z{}nesaDaHs0}uK*R9^D zUigCG)sUYaP{{aDMQX@`-5FT*Oh@@~`f;b^P1Rc>OkdUjX>ie;%U5Vb4#Ci8W3U-b z4F-e9A$ZkxV5M5jo%NFhSWJv0BK=*ww3n*(~$7m?ckE55gEtZ zxYNG&AB;YT4_}zbneUf`8qt7oxm7uqXPwQ|`a^uPT!E052yt~tV%CKXI@Pf`5vgp5 zzIcC44w0;an7%l=WHeKrlpAAhNOdg-5ijqbM{eZ6f5OUr}H}a;}1-Hm776zWwSI*zeOV2Q=-(e&9W#aQG zCpT6eNt98I5;PxWe>#si1j0EWwKhc|5x@{x4$3@j>wCjeY z^F>J-zaYL}rmWCa1ZiUXoY67zRuFw%;(q$^CJ~Oc2O7rYe~n`c?CkDm6B$92B|q6F zP}sNaqT2pt3K^`r?6|zD_q7~2V>(13uXDAsnr_1zxWiwCVzGRlj+rvJY=oC?)|!8t zH7sdB835V7MGSUoDbm8bR;44{64I<0NdS zo*jl6)cQj)v|wZu%bn+RaEI}i}pREX7@>Cj4snfc#QX2&DMVTDUt2~<<9 zckz=Zg{A+y5%7d@$pt!8(ajM07RspITyZ^cTk_l`P(a)pb8n&SMy#e=o41qA4l>;d zU3`NXEf8CVt6yDipdUP16}!L~AeqL@Eu+HQJY8>XzL2`x#Dp`99hku7(q*?g*?t5R zwyC#O#epjI7tU@SJQnuX3kPl_C)#{9gcPY@3 zJF64$S*WANBo@F2kqUjtmo^S90oF)7I6e;>W&``MraM z!%-f*2&#i8Z>&J|0(F(UM_`Bi-|u*jIqAr19=+dq)K`xqmq@yNcBaPZcV>}fd!!=U|suiVR zBnJnJTHEntaT3foVQ}1DC+fP7)pgy_c;Ejk!S4f)+z!3-K7By>Zs4rpVvt zZ_n$t@v$*Ct~zzdsLeb6fl#Io;ZJj<ZN66mu5bpDmQ4qGji zxUw7->-EWL;hnMdq>*mti}RT*bYJGfA>7P7tpB`Wd+f6Hh;sV9rm&U6j$|!yAH2*O z&$qE30E~vdMIZD%rwfG3!}1pqG0SU%CMHQMWy*cDLVn-qg*ahNlj?Enr2&qOz2xpz zGI!zFF!>qJfv!fW{F({Q^58I5v1Lm1+ZbEj#dF&xWmSb&qBQN`LkN3E8bfH330ltK z4u@uWZg*a0${pGyW8RkWhJJXDaF4YS;#BF#=PPg45R>wVEImvt7vnk58ExSqE2oSq zw;7VA_`=sqFJH7I$aH*OtPZ5}Nz*?Nh?`=b z-HbdtvLj7o@g3u;k=;3>I()_ih1(T!kINx8n_nI7lg|d|mPmp}zpQ0PPBXU~4fG$| z%YaDhAnPjl%-eOkbP^3e@E^$%ka1?Rw3!G{u%dzFr>>gHdK<3q zp>cB!a@Lw2*ee*&6co#6L-t0crvb&+8~`z55RMyB!a7tABj(hEhYXp`hL`CTI;oOAn$+Gu;o=Ke}pNPwa#-sS^p#ah3ej~3SZkJt%Bk|9h4j-~t`D$-5nbMAz+ zUA^C9{;nVXUD&eGxVUXCs;5uC{t;cQ^_!e>{<5c_r!2OLh{A5Vom)c>`|Cw14DzuE z40QO^!)N*1iB2 z*uT|FcfotLWFc9-19L4;7e8z@SL`sl2;?+A`b!dR?0jITA*fU)u?w6`Qu!R|&dlCe znL)q5l;-@ty`}|7ZdhM4l)Cn;AxLqUIO6yNIzvPG75B1*Qe|1m_eL7uM-Ip@BVj`x zoTUG{MESV44wct|OuUypmXJv^$|KWR^6Bn+h^-DN)~L!d8|)pR97Y_uoFCV?O{S}!=})l-F`J_mxcd;HB) zaf~(n(LOZKtqj}~5THaqdBWaZqC2=W;EW_n8`y*;i?3}k+BxCK1b(Ez<%yNZoS19I z7S-vs8dTYqyod?C>F8!VZQ!A|=HPEwD^-S0<99#9LM%wrdlN%u{!^<#uM)OO?w47m zi=Y(o{?g!QW(X0DX$+q=uQw@Ao&(#`mB&Q_6S;msR9;ihEUioK1c6(_=CXqpsml8EO?!l zQMIy7kc&wKg)v@OfCX)~TioGlVnvbnA0EGCV53b#Zy2fn8^P&(Ke zs<#-CUK5A^an9iy4$#sPnu;5g1+(vURCKvg4lzX?En$n>d{loU`Q4NuVyj_WF zcS$S?JUGX|p)&^%A@D;(pE#nezEZ7kQx`bd46Hqw^5LrCnbOuD!0}TZQ4LIcvB`7|<2REpNHSOLB z)wUo~{?Sb`26`c8ZdgnMG>L{RqJp($6WC8M5lh24H!jf!t{V^(Rwea3Uxzt;y~?0# z?lMqT=R`}UwwR6T|B(*`bH959=B5L-(0A-PB2>Vb{TfMDuf!YYl}OAllSZ5#0(n!W z<4!}YbzUbR;X=jL(Q`W?q3BaLrFO7MA2y@{nF=6v%_OGJ_^X5^W#o(Ef$p*`addgB zeh|ZISvf*C&^|5}<6IhA;S=sI+%ia+kYzKAjkunH{qshk;xq6u?O6t)b%Ysk_eK~i<7;y+TtroS}Bik7bWi^ zotwl(JzIo|Ta8Ai#|qA{UfwqXwz!1z@svF9wc1$aJQh|-unIuSXfU(yMd z#F%4{tHSP23&U<%yH&3{`9u(X;3^Ulja7M@wH_Kw?XElOAV?|FP4e76r-flt!V^ok zDw?;(VvuAHChuQou6)~kT{D+q@05kbzf=Ue1kAKu($o&}xa*4|F&KN)0+ydzf};*Jt$%TmmR|CHQKv_osAorCMv&q<{B zj@g?d86scK6}5o+=BWI zpux=J5~)(r#&qi{4G>fTz@!i0#HVe8lu29l3cC3{y<+37mlQ7v*SwTJz}u5Kv*80h1+kP zB)!~tp#%lB%C&@jMNPtB%;LZX|E%Bb+Q_)KD+$w56FTrb*E^l z8Jh}b@FVEfIfSt0D#8}>Qqgj&`vYF{*BBT3 za~2xOt@mSqSp*s?LNh*JP$z(o^4x82KlKYQD)>?;hkZ)MF7?pVgBVq~GG$<@+Nh3v zicYH!i$>*!JAqB&aKI2=>wMfL6cL6{`1xQNpc?Re^%ver1t%cz@luAZ8l#xcmrVW@ z=D3}YZ8t?Xb}PZkc(j-Ed=yE>=x){s@DHzh+QurYYK8PSfZ%?)7--^Qs@aJ?8&aLu zt=}q1TuKae66s^+ol0fsHb}j^Sj*GM4CHLtY58!XI{y7`e3NC|`NWr_0rxqa-3i&r z4T<*cXJ_b$#O&kU$*jA#6;e!?O7gh8$he(Jo)|YHW2v*y!ijxYAtm=`ND(b4f&1`j zlB&jg$gHj-R4Y)=RB?i@B`3OzKENrY!+m=!s?jk}EB1aI2Eiw|jnzsX8<5evh3b;9K2x)X2IztQdSCcz-=%N1h`&C@jK=x_p{gc}g`&3eoA;`3GHAUub?@CXM2 zMMDsh;y65Y0u?c5|0uh`xFW6wpKj|7&4azz_p#eDtwnU3aemZT&>w0sVctY2 zQ}G9#E0p{y^DPVxpIC_0K7(vzwbbMyOs35)!=a`u?yl+#0jFM__bwUO75Zn5Da!u< z`F~DKN0DfcHWm?_6kqZ{@e_oer~u@^1y%;&5(c|@H3kb&o3q{SJn4O=9N`OBRy+7GhJ=bo+~Ry0OT8vj14mFuCv?#q$) z;nIo@Ecz0@Cw0~(olC%LM^QC)_>_k#wb$2ymAm0hp@ggoJC2F;_&%0Vhx*!hf20Dd zfQ<^M?5_84Ah8YmiI)?I_kDLBBwI)zfuOv=lJP?i~8KuwP=Fc#70?qC!u1rzdT z!+X_&@V>M|emuHCfOBiWO^Jf?!&4bX+uaA*UZ+cb^==}@&shtnU%Dby$W+&!`f{bT z^rZS5l_>+pWfX8bStvTE)D3u(Hi^XITu<4&U}4+Fwh_VUwep$!9zq!HC3@vB>+7 z*paf;M8EtR$-WnmV%w4e&-tMGUDV9@G=8J(GkZ3AM*l{=_1uW2NBt`&$9oCHa3}vZUnPL8^ z-sJfOXY{kUqv2Q8;?B5X0Ean|hJO-(s}zaOssEH7)Mk)z5i7^iyjN@X2XHBXu(FCt zXv+{j7TyDgpqR6z`!E#3791J74~~0xU>+(w(>;UBXrv9PSMe{EF(5lYAiA>+hjw{5 zZ*!X-3h<+U8xxMQi<#4YTr*BBY}Om73>dSCyad<+HLf?|68%E*di;8_Uu`+(g3yHu zX#pRC%l7?-GP~N6{z=%j+7F+b8UUrj6+ah6cYGm&@rRB3~00 zpA{&nhE|Q&FnL77v*Hqn1TkUon(PI1OO^=w`ae$-k|0EzSkA^GciIr($~9+=o3V-! zY;d1}LOGd(i65-FK6lT^mHiEAh|GxVH-Y8E8CcS@ZT@YQfN)=zjA(gsOqE7THp#u9 zSFX_joP3WgG}+Wc5tIs(3ESsG@4=Y(v(zHkZf>~(d8InwW|R!Xv`jrIw^qLJZe97_ z3b7$vL=S&vod+w$dFPc>#t4vq0hn2lN@TLhDxq5kZpQNE@Qz`6)bj5vWNYS{Dkstxk?%_Mp6bz}@eI8W~K z!0v{OyuhjI%|2B=AIxtm28|7DC=^+>rabRu1ejOao5#~SrZcsH?>sjMLz`R9-7Nup ztcRRjlkLxtad~Pz0v-fF!YLN+0FipykL)#hI=L=^8)VyIwvp_}KiguPP)Y3Yl2_aZ zgt@jht3XEDDo>3?6nt+K$3|~B^GX*!C^wQ5)`9E65r@z+_tqW7_tdlygA@m-0Ui1t zr~BTJZ?}^ha&=E6H45J?_4=GBZ4Z{5#*w?Y4P9{AjYlfSX5SDE>?77D@jtYEOlQZ;Y+}@M9m5fXu%UDUpl`{bOURv_i(d3@NKde&cM*jAu-<#^h-#u0L9@)n2ek{OKXBKUld!vJJraXEx!mrf6B)BzG+&Q>PP@ zC&A&vNbrbc>sa6H;8Bywtrae8f5p5ldY+MT@3h6qyyz3Gpg?rRW_@9J6-dmzIH&Io zaLpI=yG@=9Yn?_S3K2m6taH}N1>uMUuy}6_^0ytL`}EzVzC^fsa`rDi*dh24fozU} zw?TO(DL6UedJ|{%QLjMeZHpRoy0W+9C_Q-T06m8j`k%li7*4KoHo^1vm(vc!jt9J> zrf`hV7tY@lL_-xO1Fl=UD5O(p8*!m9Bi?w@LU*dllBjr~rK+&Je&^T%qShYme$-nt zip1XFMBHguOO=*JZzdqbQi%O=ls81E;0rE;SBXh4uWJzm6wkZJGF0bKd7yB3H?=YsWgjbq%dSAns|BW4hPleg|)x<@hmsjJvz#<-{H27YLH5!+mB{Df9oje>dZ>tWv42ebHgqLET+Z5e(Ozk0SYb1H1<}}X z1B-#zU&I@aPV6odHvU6)0CgzQOu8$D&h+5A8IC*{qF`IuthoD-EB5KLYD;vB()wlN ztZ_RV0WQOxP9cE#Rw}u@HUz-|=Zda{jbGYH)nl*_eexC-A&ez@w-v~Fj;Mn7K|{;x z2wKo0SKq%w`3lxOay%Y(Ypv;e{mGJXaORt7qYSC)bn--O-Yg{*v>5N42m{97>OWf5%nLq& zv<7FUYa&8eJo#3{VkhzrVuMf>uV|W1)WI`y%WOL6`mE))0YK6TLP9T$-Hrs zCT0@K2{Wu5%5bfjlz+V-fG#j_f?IcoNRT_o-E#RP27RhTJZcHC0GQdhv?&N~jia*p z%58}PC~;oz4-3-Z2V)dI%3}8`M_Z+%ETm96hXRG@D1!6+YZ{18j?Ixe7&T77UXhS$ zaC*$)ArP0v=*!fvr9MqenQt6?%5tw0Y|*&By<86 z1n8jS)+(*Rw_|GQZ?V>AwwbNWF@h6zyZxW3|H zY<1O$L-#gLft;74BK4xX)m9HN z)APW%IYPT}9Zm%M$9)aD_!IF{lRD7G$a;70cFj++w0$}V7SrO|>8Lbw_Q;0}+Ob4| z4XIaJ&-LN7M&rXh!8{RyAYc>XOyqibxAigi;I=&e*_H54;9qe#)iW?{ZY24zY`V)# zx5L0B4ri&S1dl*kzgT-q{}@%R11!nrR{E*S)?fB~Y5r`b3F8D@WfY(M-{K=91H=E5 zd}LwyAJ~!Uf6I={Z2xooKgdT$PELmZZ}QRD1;=KMEvKY$XB2tM%y{c{xNV8U(uOn92VRE!j-=#|Lv~b47M%a`OY}s+DroSB-H{m#uhfPsEtjoCB_9t2fz|jRNERD zTg**Mw4ky%H4r!;GA=L>G%ZDC9MEFl#Lk-7W*_7jsDV2Z@Hi%i&zPSV1B1g*63|Eh zyI`n%0mI-NE&-4WlcIYI5EBpu><{9xEl#c_3@k3+tRS|s6E@+IS!8^5c4u&VdHTX0 z&P;2wKl4`%dJ&KWHipJl7ngPh5R7dUK#~iSE1;(Ks(cYgz|b0)0VE4kBNM)eo`P? z{=19?K=VZYYmX~G&VR^MBn32u^;i_+;x7+y0Kx%~izDlg_RD^KoG%gZ7kksZA~Lx4 zv$yv!r}TOl~#~;K$!3U%r6xqaOeWP-qqo&fj|cyL{rHfAX8$ zMR02_*;3on3%ld@YZ%5R2bcF(-2V5iG1kTwX9hPH=Pwlzf`PFe=vVaa-QDbz?eE+K z#Dr8tG$qBdlt0p3nA-Sj0~ec%oW0z?=kF95A?*~%fuR8igHsa_CZ7bgkrAz_we45r z2I8yT_upy0uTzt&L-}9-a9c~GYwN?eKZeY-ZH(;i>+bqSoZiUj_AVv`;Wz$mKGpi) zY9>%F01Q9@FTlB(iP&HJKEKaLwb^&|uT4mMd2TK4!0^B%;<>FI(6>+UiwlbbAW#lY zPT+3d-_m_QsfL(aKx1d(68Q@M8t7~OH4+C42<+}GIm-3w@e zsgda?`xZHEERAhITpU1~e<&b7_Je%{fA=3ceSn^xijbgE(&yjeDLy|UHnFy`Gqy4S zGBx(Vz~JBjZrVXIv`kG6fc&Vu5jOD7FClb5-t6e=1v7}j+4V6jL!)cJ54QrF8$j>8 z{t7=5H+X>FYd?vc96;}azhn$d41m}EAA%;}^XVTglb@FDU--MF>o-0TcEIih{)2zM z((hf_pRi%rAK$CLPT=3TlpI`JngFZw(cIOaf5$im2WLjNC8N({{Dbn}$NQW-*MH38 zg@66*Uj!OTi|bQ~siDDp4lFo!Kw@U*5i${S_1j+*>*t#7GyEI>*;D@GUNry!NEcwN zfjXLPYzHuH5_Yh(kH}-WG@%6N#q1R0$1~MqEo{eNhMi;Z%{vPvv;=`aI3L?goTB-7be7feZ;-;jCCsAf@x#BQW z_Ab^|6ubf^H|n9yomZ4e*0(^XB+(+Bt?pc?!w>7+ddRIo=w(|>%uZl4&ko?_^Fs(8 zuHig&gAi+ZK6(r%8KmXfQfN(aR9cZz3#%j>J$c6*HzDYf-j?o@@3-98u%H;7Z&{Lf zIZwXD0Xs?NbUW6Dek9Faxt*IrW+vY05u?KvNL!hz8#zf$rGHazIXCYd*h-oXvtuLi-#VEwRm>&t%F?+qneQpmgoMp|7><;_I%xc^`4K*c%zx;wAJcn z_VoweYk!ezqMI+JiQztzEIHNE+LkvX>GF?=hiZhI$us=s0CI5CS=Jw0ADE9HmNC0A zC2&A8$~*F8aVqbr4h$=pJ%bqRtO)wEmofJ>(x$Q$pTRu)<0D7MK2?o!1{8&1!|mPP zQ!+4;Vg;7sSdoP0EGly$M1pL04e7vb7rm{W7>hQe#4|se3M&f)8lmhT?>(AqjG0*# z=%4lQ`t~`K(wbmmHGs!CT5FZo&1K!A&PV#xrmJQ-6CV=GORGY!2E!6pwzxRmGEN-ITnO{-G!ENI!zTPu%NEQR2v>)L=N~{IyGm>Q z@9?BcgjeO*(PAJIIv^TN;xCI4v{0eB&S*T9COJ2}{EqB*+3v;7$C>WKsd1W#FfsQH zf+bw27YB9CCOt)0ZN;FTxMeecX;((IA|yLgw#x|GLSFW(amqo9i-6!u+h&QrEYcP# z^eL5vG9eSZULFI>9lv2Bfq1(bmZFmGY+JfSV^fOF2 zX2?lvyV^<4G|nVrR4j1-JBZIg+VZhuhbwXdQ1x3OY* zTxgzwgCI+FKyg6%2~>tAcWEWa<^4`xJ0mchYpk}cbje8ieGjK`5Ccut#2TE$l9r2~ z)^?7-X~MF%)33bGc0O|0vFIQ=Ft!`0R2PoryCRms+c$6QJnEVGi`WfTgv4NX!;_rv zw#|1;zFwq6tPESr#7o5s&y&6hCn`s!Vr1d$NuN5t-LREEyX3(B@7XWBn;%>OtQf|K zzEUJMfu|voNv*kAfb`xrQ@zYGUHb1eQB{tU<$eq?vsi@uM|@d(C#ZHl2dx4PBzsm| z9V-9MhmIFP#c-hK^zB(@-d}mDhDRyt#{|G+xzOl2#1!6suxc45x470xcuWLVwok37 z7Y`L(G%U0kO6i)@O^R`O>x<@p@jM~hkNeY{ae5Fs`fWL1Aa*+BI(vI(jOK4Vux7dE zJOgqFE4ql|%+6Am&40-Y9JqUdvs4XmF9ngn$cjxn-eUl^arT`?DJ;hK#9Z}I!*4&i zvbDS&E*q0CUrnxFM$JA{hWe8OBHBo%-@G~_A}9Vi8oJwDi44^y3v_6s$_9C%D9Y#_ zh3bdn6uKld{PXFOG;`rQKyN(8UDFLI$;&_PwZ`^84UJjJ!KNJ0^6Kv@Ss0Xz7~GS+ z*jh^5VcNQ9b_<3Vo^P0S9zATQx)jy&e+T{+pU+G&CtaZ=oNPtZ))y+2@6C;~vl2vI zFtbe&J`3h`c7q`juuCm3X?J|}Wq@U<d;--;=2iHcWs$tNKqL;oy#jKz=4zanV&>D3F|?8qJAUQ@1ZRa4{sf(3O|zJ#hqQ`hF#RrF^(GE2{7l&MPd*nu#Ie zlFeYk10#+L(LE?D8K5@X8nbBmLU4p+;Urv81jk)781_m8*c}pG%z2&7kuDAu^~xE4 zM)E2kD%@7)_kRIBK*GO7c0J483`yWNANt6|hRx>7Jf8Q=8uhIf&g^%B`&2ARaEadW zb~wmMuDb#KEeS341wQ-8FsEqXe?{ce_!>jZUkUjkpPv~?VbM6E<-ksX z3NDuQ&So8d(-B<1Z%m{|f_vV7JjnCwVVu=|1{4Qzytnq&zD6Z8{ES5JxhPRl{yHjJ z=h`HA565J=XX$vg@P}lj&JM?MKE{VYLk!~N(ffwS?~1Uz{td#m8X@bB=#_RZmyTCg z9xSz8X0iUENO*RTxq-v;$X>b4>gEN`Y4_K4)suFqZyeeVb=cM04mb}r()3J;em;(Q z{N((9$_zZqQ1X9WwACHu8-Uu{|0&CIzoPoi9NlWr+Fyez~IS?S2K25 zE{l;rzZ}0+@ZXVvUN6&oJvUItmXf}}?U!oIoX0zW81v!lR`Gc^FpfgaPvUqHtkfVl z0M9d?Mn%~av?u4ejYY0Ux_oFc5TQrkpMY7n%xlCNSL(UuQF}|-sWM9=T9%Z+{zfl5 zap8c!r_0>knEu0TVeZfcde-mWg=$mYinhQZxHylI8f8SS zAJUv}e7FcbHx(N{HSNwx>~K7r(zpP5e~+5Mw5C^J$f~7oT-#Ob-&R1 zmv|($`Ve>F^m2v>TcLNWN^TqtE@O=N{47yf(Ke_YrV*r?L{b$(F8-sYQT9M{#iP}& znIjF&WmhwqxUnMtX=qEq#=->3HdLl!hYN+cfD$PwZ6)Z)i9Z3IxBECqJd!%g4KW+U znz~G@o<#$)XW40v_)sa%lv~6xkr7f0t`Am{QnY%xL|5rcE@<0lIjNH$t2GeY%K8jm zz}GJG9BFF?x<9czmW^QFC@M>R{hTSa_Kfd7Vk*`%8!%orH==s#rxvQji(`qzi)G(9 ztSk+F9h2ZkmWZU76SxXP#VC@MOBQmy5Nd3?XH10k&+1Kdy3+bT5y!ONO7LF>nt9VuR`+__M(d5L1H8^bHNb|KSBb^8l;Z=4@OVR}*2}=O4>L*wTL;AD7 zu&nNmBWt_4AId3FDM~?Dvj>j_AS$D}4#{JD)Pou~qQXj|6xead`!aRbp`FK~U#QHo zETQBvM!;B{ML_VK9hFhfp5C`-k7fH}z2e7R8znkM%7FhGo$AuxA> z73Sbx<;nKDl#AG&DXO>_&twipZVT>uMFC&DkoL!4LUCa0O^XLmq$sDlI~2*asj0V(Uh?-_imQk*d7CWd#E25-ry@sRacF(cX|)w0M&D1s#Z8!Af$l z9|4%_Jo36d&oAe+;c+l&W~C9Fa4k53G@b_4k+H z428a;Dp(F{4W|+JPI3!Wtw|<^))vyEfw6YC?#^SN)tynX!t$M;0lZ3aY5Xqyb$X93 z4`*b%s{LGFKEH)CtdWPL-C&`JeEweG&`ryCpi8dEwn)I&R^bOJ@M&1tb8YJ}tnwIK z!JRnL+TzO~m+QH{&-4gh#CnIKJW}m;^2)REPXU>ftVnqnn|N7)GtWzr)$pUYTKV&x zaB7Fp>&C$;yk)}Kh5a5v7?qyQkX6X#DP>n>b0V&?N;mggeaak7Ldc|i*yDwa|JUEw zYwUYZa%K>~;K`vs7hZ;ZDqkIJ^(iRABVMwQ2J)d$6#bc;3RRrEQofBG5jDXMq~IE4 zNuW98E*+TSd5d#BgV!C|5REsNzhP|>wcheK(rWge2tXIB{((|R;c&TJ;;>iCc97vZ zh+0)k5T=CuCPKBOr~u45k_^#qM)~RiC{AF-bFM$K`Le|xfMB*sh;3dG`aO(1wA_wn z@l5e;aC&G`Ff;v+hwHau;kLY9#W!Ri&K}I96i9?q_ZQ7ot@i38lB%40oG5DPiYqbC zo$ooz!__=Ki3Z&fZp{=V_JyIf=4hwZzbz5^*yjiGd2C}%>Oox0Ya6Y^3IJMH>?1|Q zBR=@vElXJ@%|)Oyh@9`ZaEq1EGB-`0;fM<1-IPbE|#9M*GOyUG$lZ zLdX5@p$M%|%}hCHfml(H;py6tG*(A(EN(etA4Y_?8Jbph>1Fcu@o;~(ZZ z-)qq?7`#uxi0Bi-&4OP*22OAl9JEJd zH7#ic2BhU@jUGB>1KlXDLgXlJQd24WvNdWDmtb_ZX#uGpCR$f^N7mWzgu$o38T|FQ z-d*&A6Q@o*>ISQZ@6mvP3Yf~7^fwd*yGjyB*u7a|=`e_B(s1K^d}Fkx_-7lZsMFW>xLNCR&RgHL*|c z+U~eSL9B82>S3*@$_x2fZv0Sd#jWD5D#gkN|TqOf{mL$shKIHTwp8LJEtIS zpAYFeKJxquqrujJj$i|)7|}yGIWsmWH5+-N;00?%8%Nff-UO zMqH!-o=yNecS2JcDf4D=^M$mY%H0%3GZV!@3;lb%&Ud-DI)ZinZXJ&6Z$llOQ2BL2 zgWnFO^$CMPp<&|_pI#rkteC*Sjy##qz3%KIXH73Zq(MM#ZogLAUWnjXgaH*@EpEXZuTdwV+~wdU~W6ovZ?qd~+tnuU^rxxn+? zC--FS5Jc1C9MJSEtv^VF{}{ ziu+GP3rcCrG3||67Vs%7xzCte%taSwa?=V zhG()c<2+}iL3hBs$tw?YL>5z4lJbcu6o>k~>F9d3I>A{;Dhs#|G&QXAkvM}ndD}|o zw%Q>iPvC^*si6o`L@Y{}cM5=RZTup7r6O|WQV`#AtFHK{^yWkg2{7vt2!AzEa0tpS zVeOP}-+5^15a5;W(F&4Jmah`mIbJ_rd}L&*;SCFhplEOicNfHDBEPiPq&^gM$GKLp zlt>jkuz4}yREYGa?KXnZ>Dr{PXYDl`Yy-^Yg>K_h$2zKbPG`?|`7i#dEIXu)!Vi^k zivKz=y6@&lS}|;53O-!0uNUslS|0UjGXX3z>>7NCkg^WdBJQSrhly zMkBQuNB=}r7p!2`uYw)hriG~*ukVaL$P6z+wuV_1RCQfe?0z%EOEuqfOaP+v9@}mv zHP`(06cTNi1QGJ;tAP7bccccC@69eM=fT?Crz@LJH-8jyDN#vTWD$4j`6&gjt5Zz1 zZo#SeRELGq^=_|@jCczs!tW1oHVNWwrTt$`O{5-(47q)Aid#N7(I5{#HCY^9u1A8h#W*lDIlFwP^#ga6+BwN zE^Mt8o+nbtu_uHZk$ul$C$>mnkVJZD^zd@^z$ZB=)cf7F>0XvSn{RxmRr==QJG}b7 z=qhEF z%B+=T1FX(GM~y?(8H5LPwt}|9hZR_&l`5`hQ;@gz&>@P{Ay-78ythsM(oK_1)1v+n z8dJcV<*R`#Suy4A>RmnBu0c_0#?Li0`&Fu9zb0uj%b*Y6>D(q?kUHFMrWuu>x)zsis$@8& zfom1#$-XvjqDwqamDXwW*-7&{NdknCM9DPd@Uc^!Nw`pKK_EU-CeE^9?U@JrmesR zPIR9wZ>U#^p|2-R@{}o-}W02OYg1>6Uu%pZq8^Z|F zTp4e^er|9Vn}4`Das)>kez-oLcVxf#N`=mk+BOs+RsVs zSc2xv!Wr@YEm7Ap^)}QpHOZgU7W1AyD~D43S?6?K+qISEh!GwMMU5I! zwf%~xlq$~Y)Es}vr-+^=+sv80T~kq3s8wZ7C2SXfLNbQK^ypAN22N>D(e$*X0`Pw* z#hu?SUzu6Gsz46)=vij!4rW9KB6}dceq3jdRa)URfDCi4la4{Xk$aFS#x|Ek`tL!9 zn+*Rn$lO|NN&g*9zFxAM-MM&+!>I~rre+dS&0AQ`T~$U1$NHtQYZ_KVw_&3;w#+O} z5#bt*Br$6U-P`M~I&bVvYbcWx+Mk_)OWzLo@#Q0B#rz=EAml9ItDIAGwziE|mPoH` z^qH2$6LUc4M`bH+;Q(;WS9}RE%OVj5rHcZt%qG+Y?FUX_W|(%nNmEaMH&@B}_^AChk>MU{b+8KiGF(oCT`@;}pWP~xR{uYu zDYiJ(ykwy0qH7kz;7UZ}*vTc;X^b$Gg7$9E^jSmims*iwSlcs)=>)ql1CP=o;VYh# zwW!;7^tOqcj&|cWhat-0*I;D3V$ijwaTbaDgv9YwOFWW8V-9OIHmQ%{Le_qepJ(Hcz3J5ixlh=P%eH zws!cM_Ntsgu#blUY(ztp&~KDBNw$483kZNBHWMioH3W?doNCKh! z@uQ}eHL~p1xu;E!#}E^_DH6pm!=kV-L5WSBI)_ROP`%#ovp&2Plezvg1CD*6TuZ4V}OhitA%}TMC#}TjUn6AX1gs%ckrvjupc3)w=v>D2k@q08dG(DK7h zlm4!7h_|yC;pIz1I}4}&VVRBm^P6Edf^n;}-*T+I{iBu(B*N}(>b6gttk`w~e+W1& z_=itgh{6nra|Xa_#Zbw`@PzMWZZz@sm28243a@Gz*Gw#n(0h48KXlF z^9RF{Ur6Ynqv-EmM!RVhy`vM8Kb@!E@ps-Ryjw3s}GP*I|PGkpTL!vgIda8o^*A_v*}K_38x#Z$K9%L zZD8r@#dw@+&F)CNq0HC*2a zBZDd7JCcp#a?axw86TF!kv=-{t)?oN&U*MSe?sZjd2^Dqhm^M$+lyxbda78@!*8Z`yD-@eDRd4!ttZ`a&|cabi-q})MlgQ6 z(P?|czIJvKP~isHs02q%k-Itit<9rz{+z%foGNH>wcBCLKk}X=`5)|vSM3Y@oPemM zRW7S<7;M*HViZwjkrj$CIMX|@t=Ylb+jc(wq>mh{qje%}Slh{Vq55Uk6~!zN7TJJ{ z2Nz0C@JU3OIJiabLin5AM-#K)fRGYs%5tq_iF`SKfDZW0sJMg>;j-O^A{Q7;XX#H9 zjocQxS5(8wc>+qvJU9A9I?;d<2NcXW*%0E3FI4yTvk}q}p@UAe7VHlW(9VrF6(0;~ zZwbcM_q15HzS3>`YWP$^eOu2zH{DM(qZ0jL<*IFRmGuI<$QbHFs!vnPZ^wud3i2}| zq7}sG(}YJLVF<@44gC-fFifH`8jNi(RH0Nnkz?1aou!4#PU_<~dRRYy>9ouJd?8`K zr3(j+$ZdOa%gInE;Z&c>bYp#kNoz!zyIP@E?JJd=WFSYondWnRC3*(>#U;;-fbnP1 za^ll3KN|NACZKt&OVInKpt9`|ptncowR4xw7;fg7dJ8)c{aDd=(eBOW@?(&U>x2p& ztR9pxQ?3r1vc#%Z=oM1Nh;0?Dc8p*{6iXYUcxGTsk1+f5xPF_Z_jta#7b>&7&k=u= zk#?fURk+rsXr9>9o&OTfT~CgDm2}_NYGbufiWZI;LF^}(SlynR!c+^U+^|s7*sn3+ z)TCUDT<&+kY^xJ(I*&|W;vXf?ORuKCBV6KgCsh__>e26mL$}E-{B1(G?-jn-h4mxu zH#$s)fpX4_)kdTJxJIXSc)SiailzKR*PR7a+yy0Q5k??2 zm6I8AH0r@{cQxsbPQNrMKD`^3JaZ8-K)X)fiX0YgA^2@K?a5=Mr??)KNyuUsNQ>nU z2W-9_>Vg%Ao*P$Z#m1_ny2p_F2xyIEAl$G}+oirYJ_(m@-uO)mnn7P(ckZ!@tW$7GZ)P#82`mQl0oizW@gE#Z z-l7StIUyM}VVWbje?!)Jnw=N#eH~zr-AP_D``P~t_nvPKKA}PZ)4qmJmANUnYqHkw zf%OAFIH*JM!1_DHD8h$kO)D;fv2fK>sjp)UTSc*gwxonZ>=)%SzzFO1DMt9uoR3Rz zz8WazZmZ#7(tJNY9`=n{`_X`5=(M%-dNR83u0zrjf3vk!R2BDf>8JefitNz`qnXIy zds$I&nI*7s6QWbfngk1ruKt=NjYY-4#9;ohzne3ekGx{J zwH#nfy{4k5qzOtMbD75rT~YL4!8;^lK-SzI#c*y_6ngTdaKh!MU;@u`fa@9GcWL8` zj?gOrTA4WImHHy>L;r-T`ts(1`hpDxvZnLz^k|EbW*A?wV6I`Mo%18o5arHzTqQdz zS=7Nhz6J-PKx!i)MuBdCk2nQm@S-F6gt%vN^a4WqC@D0nwwlG_5BSy+B<^c4I+I^g zI}qs$vm}kq+LpiJB24vTo_H<1(9Vmb-MKlx_Ftad?8VaCAquN`1mimH2FAu0)?}^A zR;;baCUA{Uu!gY(A4f-{dheem@d5niaG0^dYD zuPz85Hbn&I`pdPlbi?-UJPh~*t9=KpTV-)b6xV*w-52Zj&pu*I$ysDl*4vXeckNkS zWf;$bH#f$UzL(1upb0@&jQdcs32agYrtH0i*xb?T6Gor{Dr;Y)e%?8TKVUb(&I}r8 zDTER<^9e;4p=gk7fHNg^_ewwtGlyZ?`lhp7wGUf_0>CyI#g6J9{86lvmUosdl&@xb z2;hToJdS~AFyiZRejMrr#%PFz!5B47c+p>cs;&qz1J0stZx}3{a1&JOeLc=-n4Doxv=sapJ&|!&dCnbrV&?0%KO_VSM&@ahF@B~U)1f?B3VG$|4 zs!)pI{42dGco#}I(*u^$y=_qxiIW)!6H)Z_3F92FSY5xLv)Sx4QKJUMS(BTGMn)$i z*&cZ4gsevpw6{wzdBs?;;0y}!-gw=olPn4)^w>JZxC! z2(`$3e+&b6l6cOiwX*QIhymg9`wCR_h2xP@%bc1kUU8j@8&z-pa0F(fnsr5mjHn+jf0ULZxJ>u5K>DRq8If_q; zLr#Vcj(xT%bGmD6J80oq%OlqcPTmUVN5ql{BQFI_{cU%{NMQ8SdWBwIBIk;ZA}870 zcNOK(M8`@_)QhbfeZ?{(J37x%g_!Ag_FiLyrGK8fV-}G;kyLG(fCh5s>F0}?(Sg-( zY#fI}e`v%+2l6DKc!#K~CBG~y@drs%9eZaHG;)Vlod(pmiWOt=y5lGIc~o3eh%c=WmU5`MVb*BuS(qZ>XN;0;Zm-!ep$ z{n~+ZRpx3A4d}z42c9jKvJ3s@;0*3Z8@mZ8mBldt>*+8}@CrcxIdKSb#X1XnG&%IG zAJk)`Z?4?~16i7HrN-0%`Dr+!{nquR-1B1bY)45rAtY)KGD)@pu&+UBw;Mg)o zi>k_Nqy_q8Cm$h77ns4q=maVqI4n{m-vkbX1#6$1V1L}2dP=B6sFR(M-?mkm+!c!s z8@}ax^}{UGJ6_`XyLc>)T;PX&QJ(%G{GjtmqIOHak_IKm0hAJJB(iON2w6U!7rIXX z-X%FVoj2``xZ7yHY=vLPkU{dY_@CG|S*G*fB0BASG4xb@7Yg}x=FHP{;laJUPkL6T zqJlU4S@Je(?`gS#X=|7ZaSC@2qff33c)4>F3q;zS_R;ox(tdA*9A?J_M&$xYg_#)OV3iC!ZsQShd<#S|3 zmY{gq8z#NdN+P4oIu`HCXFQt}2!3CNXzFiK@Nj~Ye(%HYA|vmW4vTxGT^O8}Wt~lA zaKg)IjY|3jokS(NZpO{gAB~>~l7Gnb7POc(gf_NGV5%6476mt2_aU{Z6@>pxzKfOU z=_Ig*4r`8018tH-)UalCvNp#*+BITbMIb4?@xm{j79hi?pOIuqB>C>0y}W!T84^wU zD0|N5q>t~stPwu!javR{Q6268EXdr?ngVvckMHOA6l7R4i!~>Bk?Ao^&$Cdq zhvOASazw#w5$m0#6u!46rtA~|#r)wI$kUm6z4nCI86PH+OMZoNZ}(u$e@AVamQABJob zuFS!EhUe~7vO}G5o8mOl4N9ItM1X{GieEe(acb~_N<{4U0%lZ_%d+^e$%w$!n8K?h zn4V+T1hk9Z>GDPVKo~q!sy2L%_}E^wtr+(=E+sh=>p8tTtDI#r*;3w#o!qz(-{|xV zKCLYQ>g(eXDq^YOFIO?mMMslfUA=pgB4Zpbd7LNIwqCr`ZqD~g7!^FD$lipMTNFTa z`r{b}xPTrw^gD+!IX=AbAd;Xbr@UEot!<3`wTTH7fvXTM8Sn841-nuuZbljAaA#-l z8dC-c{MA?F*^+>Uyh#X%2~zCW`5^|m=O02?3|d}YwUxUO+l;d$R=M!Eob|kJ8WkY1Lf|n;-DsUz2E>iUUxRBVK*~wz zt1l8+tu|Ce=Of;<7nttuU9eXQQ`!2b+F|Rm? z*h3yw46j$#YMGTH@Dst%QnaO#YU+huP|QJ+6ZB2lT2xC?LXa2z9y%b8n2$2u{&?&5 zS*D*Y7Ng3JD2y-gWluJG@!}Bnz1)1lPxoisxN~GYKbizy^Lf7pL%5Iy} zeB1O=bo<#6!^4|8I44vG;i!qABuHSkGf_ag&*bRZB7#8`#)75&9_lE!9nN!Hd#t~x zZ@NM)5)NG9#>K<(&$sFlW+>McCSaK(CqHu}cQdo*u;l8$L zFg2@4c8&qSZka_SNz`OBhx>G+t^yH!F#Y$tdt$Zs09O?9z*qUY-2^xUh6czNF=ihL zx1UvKbP#RsCZqB!%~uQ2-4VFBW@Hu!u4XM^Cc~Ux17_S`s?o%ZSQp#}Snh7?*m>;q zws7l8DNa{@{x&tIFL9B;u-9^9WuI;Ey4r0OS(9lPx(+sx(O8l6$=I!Qm~q5=nK6;6 zeBw5O@S&0$te9?L6Q0D6-RTC2`;O23XX;WEYAGi)g8KCO`Ej)Uhbz=83Oj>MccFtW zg;uZNYt}7{i@+}N8g)BB+C~KIqizj^?_x1Jd4vI8ireT1}&#P=10jq35 zR~Qiht77W;R&wiT)X^gyk*VpG2CDnijls}7b8XpfX3~KJV%9XZ4ispof6mfAO^;7M zrMH*qGRb0^gN#^XS2vg!|Mt^ne9&X2Mp(*g#SwV!7agi@p6M@Uh;i35NUE0JA>H^3 zhx@5bbwiR<#;GR z3)D|%uf6E|sFw#bYZAU7ZpvN-qi+;UqwEDVyIday6F)5qoBl>8uHyn}MCR4|GC~`w zp|oW+)BWA6>UjXv3Wbad4rOSWaSZpH!Qqzg%_*~m`Y4F2tO8*^&foH{~Gi7oMe>|hDb4op#u}gW!#QSTw=d9!% zo(h)r!wWqPO0W89HmD9`eoI)PGRMMiD#aAUW< zf1-c<`{SW0jCg3jgD1c|vXEdj5w2U!X_zhN7eaU&9pWFsBjLpx^~m2eA%H~Ht=ZS;u#O@usVEo#^p{IAijqXS;S^7ISd|jPCm}5|MI~?PBH68}* zhW{|6*rYW^OKqC+-Cgax!;l2bxLA*=&frT5uXIr1jJ0SQV3HRcw5SGnPmZImbAt?s z$9CW%wz&9Ebt&JpIl>#c>_LOre^-BZZrx+!i%Y~cOJ%8w}d&O);{>XS9p_Ud}71;uqRlJ1S|1ra1Xhr!o zq!4>y&?!R^bysTa7BM}DO3i|tRwrxkpCIKxwx1?W_u*aW9U?;x8Ez+7l}e ze|HjxQ~Yrs@|Dzvw5BvM@8D}MrM8XJ90Z+ZjilE<5?JiUGF7xpV6;&!lG%|&{8?dd zw7Amb&*`T5|M*kf#`$#XPKy|lcq3H+CHJ_#>*=)N@K`b7pnjv(KyF&khn9}B_$YZj zG#pqO^YW~b2cdz=OH}2v@eYd;2;`UEEM`wnerPn|aeczy>d7+^z3#t?xWk zBH>Z;G=ysD`4)rc>v~d8Z09x%O8Ka-Y_Y=XO4GFF*S5U~-h1vi(G8M~sn#C0S4L4W z*ym}68gSEm)uN)CMd$IH^LdIwz$hP zNThsomH9gPCpGiq!pqSnK`&6LtUV|7^msA{GVwi+SQTDrzt>xkMTYy`D&-R3XU9*v z4g`?xs=xyh=O|}&_r=(5P4LZ8B z4u+`a^SjsaH&9SPnRPxe#Mp%L1|tf2OBna(ONC3e=WT>S{r*;P?HPD$m47Lg_ zJ~+bN#!yQ3;`OU%MN~P^ua;-)1bC$?n5B4$Kh#|1O7hqSxE~ASE4t~bUjW-nfIkHx zpVSdP31fC_K4+fgUq8g(f{j{AIl3Qvt!gt_jZ+;e*z}RyVVq4?2TkvUg1HyGz0`TZ z#fGg%{1L?NB(*&B`T#Y(0W1%;kmR9{LBftruTx}N!(!`0$2(LEcd{h@zfd}=6i?`;`2>i6YwfLZ0&QFj(0 zfd(|MOnB$hHKTS_FW>yrSQ}lb<55aLn2YLew5)Khg~Ce@61~*)nUnKg(y#(%<=l?4 zrlZwIxPoG5!XOVpAgP-A2YKn4dJudQw2J9N#dj(8APkemv_gp|x1PA$E2(8WwmdO4 zJTi)jG;CFRbiaedUdt*KDMf=Y0epU^myR08}ufaD0Qw=Crq;PJci_ zuQ+3jS^Y-sEzYDB_Opp`LahM~_ZJ_pke|;rY%{@|l4CT!PO3;GitF}btqhNn9wvlt z8RK(7dmy$a$y-}isPU-P)BYlK5ixqm@|Gooa3Sg&(mheH?S^RQalXsG+9QvKew*d~ zz3_nT-LN%9B2Nz2r1$MB_$${c230x-{rEOXUzG_$>7amWdmXsnStJbL@Ey`6viR9% zu~?mY)in0npQ8eF5U7|4ZWv!>^5v*Aakk~SnM5<|I>~=0@}AyQ5<#}hQ$n4n~=K&wgrsa>&>$# z-AT2W`zthy`6ZiI&xhIC^1Y3(w4cnQ#)u(YE!>{*Q;K;6!<8=0^gFJfVNFSRjQK|B z7Yf;+BtmcsY0@7Zg_epMGU|Yp3@@6LZuhM6CZTC6EZZa{VLY8wRj$Pxj8rw_`(sz} z4A5ENB+Jh2oJ&Y4H`R~#U5#}FvBZ37;;s7n8cM6w(w&^9uWZp7H|I=OZ3#$HSzq;x zO2nUz-MnPRdGDFR(=g(+3{8rs!@R0Z0ul6os|;zB1u^S%D;(N~A1Pp;5u_q?V{YKR zCP_&Hg2!ns>%U(#4dV?_3vQ$$^KZ$1nKBNbCoKi73>G#dIK~!&YBA<{>lWbv`BE){ zaWIn86pTE(l(?Ok0UA2G>b7syZ^yrniLeRG4l1v?RxeY|?yS707#WI};|i29*(&`I z)0Tk4I2glO_AvMY=4N=m+UInV>(S_z$b7%}4WFg@t9-eJT~fMcMHxm)4sr>0mjTc8 z&qB3obrr~}SbnZz?>{p%b*K7q+39L8PL!&R!(Hv$3eDXy$qrzg)7CU#XNhCoHSRNE9W#bT%d&qxCuSx8zNf8?HO1?GH3!J{4HZ zFjO0$3L`r++DHaHD;sTiKk)98fURPI{(k|j6jJLjr*SLew{FvBCdoPmH#T|5!)ID& zK5k`H*L2qvNggBz?nn{G_X-v*ujN|TfqJGVbIukIV-M8~hnGS}s41O~OY|b|#EHhD zR{USG;k0UcbTS5UQc5XuyiiYj*{y!c%-+Yz@z|NP(ZfZ-iEsg)28Of}8R7x`{<*#e zPq&m+HS+nwhuLwyWvPOW?X>KshF~wv3*mguXg4DglZDZ0P5N@(#MJZTKhI|c3o2Bn zU~I$46Da{))D#W2g^{x3W>vz3FI<0aJLRX|WI$O6r^#f9H1qgVog&&x5Hj9a z({m|tP@%mgR3}EQ`r=lIi|y@2ptZ+cTO`f6w-iP~fiJ_txumT9W~Ao}>CjX5nMtVR zWbH?ajst(OGJSP}dQgtPQx%c%rEYy5BBo!seN? zO0F=3c}oVef_x-Z1`3N$Eu?@~d<##^0uQX0l7$}}!~}t3Om}b?!sYnv@hRlbK!Oyc zs)y3jOO?}HI2xzY-O%VYa60p&VMcuqOWiQr&=zILYHIu{cYyAYDqqcWE+`ShIy7k6 zKGG`)(pJ@FUxfm{fdqgNY(nnPz7^Lf*Vr|!JV9lksXQ5mZM~J`90a@F z;ozRInwLNUH#GJ-&s3`g-WFp9W( zaQLW+bP0M7J}~jH0uV8Gcx`V98Xa6W+=H&-V%z67(Q6&-azhGh%b1Be23+9;|CDBmoeD#dghvBq8_@Q zJxvJ9$!!+htad$+x(6BValEnBWHUwqUbx-?=&$*0*=2uk~Z9Jo&Wo zu%o50^o-KKlpE*I=XPVc@HU%fx@;6rgUn};WsTi+>z4)YQz!b3W}0JIV#l=2$|V|E zLU?W@CT3aXm^BJV3^iWfXK{m-FyGyaoS8M}w}H8e>$_Iin?+a087$2qr6ndf4^#4B)OJOpgX25U~EjX)8~We}Xa69(kk) z$-N!Y{oLibu$Ej>v5~F;avg}EJN5da#?(6Bm%YpKG2ocXsOe8ch5}7Lh3yrd?mhjO zEf_9_v&&=2XhR5g&2FBj5mPvu0MG;7^t0SmD&&9XNJtYWvSR0kZXb7!=9r>&GW8UH|wJa|0^9ay(#QRU@ATgsod47AAKI%Ez?g_NX$s#X66yY&|+u4g1R z442L)zYW|~5n$388;CgvPjmVGVTi`GycZy^`BQhe&%cK7cb7qx57T)FVUPbaWu7Im&6g{=YkX0hYkv|fcG7)oTi=- zJ8<|pQuPdQiK1DI$7c$6C)?&E6yqDX6Yy+Kp(BOH8GW6i{pP98yv8&0(~Z8RzwOHG z(*Z1A)v58We%OORhnp_H1m4Vrc{dB9(`o75p5B_lPEXL5mAl*5nNQfHn*@96*Zr>j zH?J0UZBJW=!=U%=)O*9_3~g_2F+Rct0Ys|>+?4vCleYiB0>&_%)8u^d`b6)#r&h2o zgPLIl0d6F+`h^H74lHeermh5d0v-_>$1?f?)jt{lM75)ZH|mu}9_kuA$GntjKAAkV zCYT0NUThmYhM-vII0BteUX8xmju$b!Uv11FDG zpnNnSzto2eXf(Lb$f!t*OX};oTy#98K91Wigk=vT*e1Ja1TtV6gj@-$Zl4|Z4#g!e zhyhU7>GM6pu8l)9s7=%*K@=P5(_n1xwn?#DkX}JF`-%?Ag%AiNp-2E<7bR^8 zJA+EWyClW(_;UICK2f>!I`=G3NrkxyPl15g6Dv62b;SlB6xXdx(2 z3RRosDTvALQqcqsv}iCa3XA7n!zVzl$0i1^Ta`^tBr+ig-s#*}TIuIoOg6&A&lze8 z1Y%zFbPT#Sicxc_wL7TGjAifxlK^iW=Y2H1RnYgARkuR};;99>53YoAO;q|5_7Okr z_Y4QN&}}xHm!{z@s4tWAp#gyN_y3CcQOjJFr6X}otKh;Dy%AfGt_w2TE;vPRE3pn< z_wu+dGK~YK_uM*z&#uh_88tR6%E@b~-j6)v%pcqyy7Q>bCk^g@{AiKyP+E5jaq}Mu z__GHEKYSFBr$B>60pX_}pGfaKRZ7l}MSs!>@Mb7abObpVNia<gdJN-@IlMd@fX^X{IXh@W zA~`$=fNC3tIjC=z8l@<274*fu6$-;-oG|>`=9ob1z1#MqKXuASZr?d99e2Uq11k>s zNeb?}kNu#t`=r1?mwz{z&8jt%Q?Hw~Y8>UPLY!3Gco?eADDe6~MFy}Q9q{D%nTi_@ z>F=Jzd-yj;MdOQ3%O9g5-r9V`F9b)8MB%msr2*$TwI#+wEL#q3YCILcp4J*23I70h zOP{m7gxF~ENJZb6S5CSLH73wH{y}|&lA$2!A*sdP6qJc@+-*Tusi}4Y-3<7iJ!ZIw zst`12GxlG_B!HU_rChf=Y_BH+Pf!t_LK)_x0JT+5hi#!VK0J`Xd)P6SWw4{*kq6>f zGh0gYr$^OK+<+bKafs$Qree}pPNh#q2C|AlBSC$xHTtfLj!BVL{&6IU^$yn{>9^WW zB2}262>(}j!-@@m96f;zD^fGy3KLrIDw4JMXGXg(G8`|%u2n6+Thak`uJRKgvVV$% zOC6P_I-0Mz{HvpId^Rk1y=WTe+U#Nv9?>XtJr4z6BIU1_<<*)q=6_Kb+*CeV`n7)W znYNe+YLSttS%YGs1Cj%^cT~sMeSM$AUQO0jf2>nG{$J?ClTE%|bo5zVyvpz@tZrD_ z;Y#RzCcm>ib7to8d69P7rY6UVS(|#UbRM8=#Pibb{(-q>V@%yz;@Y^m672FxMzvzk zOS_3pr+ii0B_8(RGNmK%tNVOiZ1Yq$Tb!f=|6bUuvojMG80|esv@AgFt1llq8YkK# zP7)`{Ll_j#jBE<@iKeUV$d7(lHeBu?keVNr&-fQoD|{M}I|6#eojqpb6Z)NbedZav`k9;|V+@9zZ(1{5ltk1s$vlcY~3Iwz65r zR!wUq|LVmz@sX`+u6!Bf(iR&r>?2#|oZp4X1}$XddM2Vi6F05DB}f~9(SXBe9fUC# z@(}Rl0rogl-YZUNnXfLRuoPsgeB1^hx44&sC_R1{FhAOd^uT}lCvq5XIjq^1>ns$9 zd-#uAE-*LShB1xuH7zDY`vKuWNBOV(uIMId#fj!xFE%DCZE4*`+m#MYd9E9K;0^Tq z@h+GqBp9AGVUJv4<$Xx(uXqACtG^53a3Gc^(<{4o<8n-Y9&8N;nrYLi1e-1!&D05< z^d^Dso}9MpM+_K@=b7j|f#&;Ygino1boP^RwaK63_q4sh>DF5BPL}j|S&|w>zDk@~VD8e5fb6-3fOkNz zkWTAw?2=@-Nd|vsU|T2`tf7c|X@Ffa<%XCHMe0p7%$7NenUE)@F9qGEBHat)+4s33 zS+g@orIz{<%uZQT{8OPI!Pj;t+^Ic;Q<_yKP(b4{e!C)yV?j~|777!-*hR$bB#&dp ztEnD9$!IMAWG(zu4_Vtmm}@+zIcPlAwKTM?h(t4cVN)dfx%Ihb8b_ItC2=6 z+gy7FG!lc5K;<#XJJ{3f;P9A>q0}U{Lp@5F|3osPGw_Yz#@Xe1(Aiy_ozOBE`KaF^ z7sN|Wqc(u}fuRZvlpQq(8SH}+J?6dLrw0@=OGYhvPJNc>jHk4>Qk`tf6gNu2L)&`SPbxm6zNaBk@8>`P6Kecz{oZY?)-L9Dw!(%M1lvt&Da{R3tkj!95;5 z2v;}Kl#YGYE(8OvE$(*ey*LJbm?N#)Ys`aI(A(I!iWXC3NaQPGE; zy=y$blY0$lX^Dnvn)+UHVNw5F7fr z_3tF(&S~J3nOPqsa-M^cq6o7+FKDlJ2G^p>xs`$q%0q;!YoVU?X)FzI^y*z}RaOl( zsS8EQGBwK03^G28Hr+oxN~)omzhq5d7Zg}Rh{x`9@;P-M>i)ztshU2zM6WYd z%JqOs;in1dqH|O2@QTr<(z98`2YYiVw8Vqjfad$w^bNa=3n!d_Q zkj)BUp$F|7izgehvynW<%N76Js`i}>^mw&p@ReowvhXGwX*3GVV_5*)JxI9OIRq^$ zSt}5+Vfkt%#x==J=x|#yDVp&$VXRpL8g3OP_2MwtbSGVlk)Z=Ge5iQmYyaI%29YF_ z&#ExC5)M^+KBvemo1!!b*=rOx7!f?ES|D zY^4@)HyLM#etVqmVJb;bNd$~IJ$JZ)r>@||2Zl;Pv<`>(8NMRn!l7|&(_bbOt9esT z7MsEI-W*3SGkGZ=EcyO#dReCbRWHlR_&+{bCIZg?uJ-@u_5a#s85!7^SpPrmvMnB_ zDkxTKtrG6Ul)ylX|6C;9(~bdznT26?B;45-33do^7io70B`9|YeD*ybdG7Y?XEN7) zcf9q#a#@9C3#vy+te_adB!&7F$k@!(_yW3vsD{xX%#2MF1A%O5WC5!9y z0W{4(%>syqPb4iN^Zy$oM+u13A`%@$_&9*a-Zmmjz+-wIW{zdR7lQD*!mAl@%}$pLdQYIi@eVQKrrd z%6*>q2lTcAdFCve(Z2-{M>y}B)BwQ!8=j=5o&vTBOf{f@fC0(k;S>r~AQula?`pDni3MQ=6kM~!_-UO1B$?Lwm zJP|7jY-4!`l8E>h{+0xFvd86&fYJ{IumLPkONK@>ck)|*qB-+g?PnF77LGd%X8_jh z2;!-k8JN4Pz=IPwO8~Gu0C{}!kQerss<7S;Sei;UPhQAR3q6^4&1Ap~5%5O;f}H4| z`6~#x$saBC)?8AGQ2!6RAH^hWun;1U4>9QVZ!Y(zCbc-}-#?;xG?A~j)ZZO=3v0`x z*S%bS=LI0%;1bmkj&&g0U$Z8cxuFr<_wlah@(}zHHUev0 z{|fs=Iefz>VD}$Bi+|rGQSsY<<1;n=ex3idL;a0gDS$_?N=z+2Us&(+>!1WEfJ>|E zu9B1ex0cMq`};2b(+4g8>k;`w{Q2b_UI~s&iU#i=p8Z;8g3EQE1K)rAtkX#9vn%1( zzGo@&pPW+%0swIW&B&*j7Ls`fu1>@bis~VKB$L{&@XYW}MTD@N8Xcr9mTgW%h%&cV z3JQ7p$@E#Wd?b8a^!eP4^xGG*y#(;d3SXgzJUKcmr6Sr3+=bdD!9Xe;(#)L3`n`a9 z>LtBNcJXf1?BEj3-doHv&e8{F340sy(B`%y+8D!YkWZp`k;+VS-q(dH-N1Ulv2oBj zYlzsAI3?dS$d6<9SU~KzTLAr}EZQarGSmd=s)gI8O^*ON_;T2+aar9#fA%P6t+s}& z2jR^l&cc^7wF`Xdbjs|ZTw*cEuBtQ!;W7N@%-na4I}S#e2OW^VIQ*Zu)j1fj>_i}7 z(YpG?IBErY7TSOQ_Nf* zj=&W_s%k1}9=tSF5=TQ+pFb@Ik^mfv54?%vb8y0Re`eM}ZDwwiG!-4{s43NK)lx;L z+U_%P>u35tBXU4kfVqP6SmDVRBsgoR{xh%mq#Bd?;=PKeqAzHpj0l6x;>`~1gO_Jg z$uBfq6ZFYVwD|lih}!75!csmzaFIzIKjq-Si2XWUV$SdF${;11PRK+PYb#vGp(Nx( zgkp~^6gs#kpgU4}1k61HNzU^m6jtl-(XWz|)&{ z&|OkoQVGj&C{iDZX9L6qua0NZHILKxtEJT-@PN1LQm9-?4)WUfte*v)=FO~|NJLes z;*H$|5IJT7LRV>BG!__KcpylsR7H9H=@ex4h$#=c0(oM346NlgdmS-7O8K-6W4-gD zA|zkJK2iH@DhVWgTGfcirIaQ-ipH|`N&A-g(QDF1&V|Izyom0!e<9>>GPX@g-7SPr zE|m%as&xfi?^&%jv(QLs$9Qqzy;Y8@gR_+Uq;g9>4;=$XTx;KGWly-P(hq3pk}wom z)7AGRNwnzGp)0o)wpXbGdDMZ?6{BwNE;gG^?lxQqoNhT_EBxdxdF3Q7=5$dmw_9QH zOTqecdP=I=@O-*zo|E*;Rn|%qDyDhSP{QQ{AX*3o`v;ez-P@LsHnFW#bK@88VQ4l3 z>_Z+7an(v0(pB;CT@3tOqyI<4^x??g?8s{JK5PW&V*j5JzvmejC+QA;YUI3zC>%jqsrG!4kw*)&EL!yhi;Aa8vBS)r`KntwfnPGv+Smv0EFMnP)XEgi$7kSpkuLxukSv*w>oe$|g;> zl@f4tCh`q;*CCq~pmaL!(wWN9N-uqLtJoegoQRrDbL?@xyL%K5-XlJwWGcz$IdbUn zjQ%7#HUkEmcnu-DY8ykVR9Ztf`@OQ>+>PH#+t(8<{n1M-z~QvCb|2BIW-e*GF>jja zgK2!<;LGB}g3W)^E3U%}xX z=rQQBV-5<$>QCz6#MVG5k>rmZ?K$QiPJb1t#}_f9=AeMIM@b|(F3F*Pd2wqr%6jC( zHK(g@ZV6>K*?MtjSCpO+laFe+r^MSx9lNP8m3_*T1I1|%^ejx027p7?`DW|g1+urW6SG=_%r6TXTI4q=!ixy1ISM-dRG+P8!3=uu!Ok#IsD3>Uct3Zk7j14Nqo6`4e8-6u6P@jFRmT;uZIzp!^=lP zNa)$@cfs?d(UqO+0_?%+3$!kE3iqb?r0Fw= zp>ieBdBtz4Svni?5s#D<+WgtH{x9h(^wZz&L)PlOYO}R5<|J5bHPJf}=X_#)W0QG9 zWB^>-)}Bg5ZDc|*27^J+GW`=@PlRz8{n9h0 z4lg{s)34gWE80H1ZIb+2&W7(qes555R+$swj7wJ5GOaC1QEhmrlN&i^eJ`8Z8*>TR zpP~8N;n$YKlI?vYF1Q;AKoftRpR1}vaZ?5ZBiO)`@OO~uNT#_%ciMX=<*a62-cSbk z775YQm9?6|=4q)mRr)AeFn!eFcPrq(?2gNn8Wa5%S&I2D$etSBtRCoAPzcrDw$7Or zh?m!}J>V^inRxSPMKHA$S7w-P$qi!IWV4*S{`)rxtAP1MlaptR&B4qK_Zsd4`DWCQ zkmwuDS10;gox!#nU1xqdeAkgE zESB0c1tL6t?`xSb#ZQ}cFTAtSTYS|?RUmm#^|89iqfqsU$0Bw8htzD3yRQ_tM4Ap-#V z9TFQTT_2TdJJ|eu`5OZ31DFax&Wz;KhTG#$5`?EW;pI88dWzK;vg9)?U3Hug{mpDKeKN>pe5<8uU&76vD7_VJ+}?v7{7 zu8j59oQZ{RzmSGGTLZKrdgMuiGTaNGRu1k9%NTTA(e*D47PMfUVSrno8@DO?T^6T! zCsI`;ab$Mb>T)RsRM9~KsxGrCYTa+%Zb=#J9=MXbDet@$SFi2-ZZh*^wPtI=nA>@z zxeTi=9bDlNdS<+O>TwUnH?Dn?ht>EDPWP!IA_h?Lw*AjR-@Lmq0P&!Dn{lcnWIx{? zUz1WkncL?GZ+9G?Fc)qPC>bl;BJ3)sQtq^oVBaf8RHhA9I%p79+*T~hVSi;nm7Lhc z!?zQ6Wn?rN(njl5(*Z7#HS4;o2Y_ctg8>pxv2{%k9-S)TGsu4l-p%iw8U1S#T=b+w ziLdq7IEIFsp%b$b=B9m!A6!mQ2`5DPzdMj zIJAhA7&Hv0;xeaOVM|RlybFD3L6A73vL7qP{gj0)V#|Xv5hcMkz>n)nQzd;xIWP?P zh~6$*?}-cFpmH#g@KC03E70cUk6JP(qFfQF;*Kjm4fo@(GjmCPp>x{-H)0g4RlsC{ zP%r;2beM%NlGeL-QH+IB4T$QnhT4Ug_-Wer6~A-6EZZzBnP|S1A!HQvu&!XQf9RQj z0_AsYXZ<=c^z7b9Flp}WFsf*)=%S)WyqNGHtZVJdVJ?NqT09DQR=~j);M$)2NCH}k zYeDF`aQE>1hC6%VXJxZ;mXg>sck?#fpNvF)@WAQwB~Ubq4+cpQd&3}7FfT@6bS~|0 zX-YJPr0=^?eJtvZe7JX#*UXqn(C}7C(gFb@;sH0RA_|ecGvn=q*+1{jnz>Fa-<_VC zh;^t8`?xa%V-2 zxH=vUKug4ImALgFtCPv%3>3f-EsUaVs-WYd?h^WZ0d}HBei@b`QE6viG zH3MAAzRd=s(@afMdi4W;mcCQ>djkHky;&KoXzN?4qAhtT4#s^87B1hzzJZo>0zceB z$1PGqyQ$^YxH0mPy#vvPR!UwZ2A?um)8+~Jh`v~YeqWSaA~t64{&s&Ix0brNC$c`Q zOS?#{ebUYdx?Pn7-GWnJmhE-b&c;MMhQXiGHSHC+rth3+OAz)<^&SXVtZRLSLyg&p zUWY6MYmTvrUGjoBYUAlvE4O8{2j$={{hBEwT;da#=|!~e>DH5vAJk+t8Q z5XnLCKdkr({K#AowHJvV(et2nC-fg}H_Nyz)_-$f97CBUs(boIR1A}@FE|Lql0_lI z-~z!nq8JKYrd}RymDD;pV6C;{1IlYu-($NFlvHbYc|EHBs{zk} zM3yw@`y}-$2aJ{Gq>b_xpAOHT>7`={3Sm}-u<}k$C0_$2a#LD!0ze$OOFJ(b$~4hfGmr8j{ndO61H00 zSRak6%m4~Z2s1iv&F;gp6%11Oa8X66%seU!OXjxfwjosicfpiH4%CjqjEsg5Gi&=Q zV|<7hg=A}7V@R51xG+eB|0h4l=2||)33&g&c!cxt8q@5BcdVgwR*T=kN4et*@4_!n z!&Rd?h;1jcgj;kz-iDc1GX$^S<{0b1WA?8pV1dc$g!8Xc@kJ<}$Dj?U|6BR!tCRsR zabh~GTaUx-JbX3>Mg>YK!`6of&h*86{t2SW|K$9N^4O+V zPL{BC_R?k7W*)~J=ERq53<%}4<8TU(?Fnvvy*q#BJswTV2fDNJRXd;iaa3x*ggJ~p zzzrNhlD=I@J^xv3M=yywuYTL6$7R#=Py%vCu#54%3r7!%g#`=fAxTb4^&W67!khRJ8(A_JZ+xEHDr)DoRr_K`?KgH6Kwm5vU$EbfD)n}`l-(R1 zdX7pjaPeC{A_`Ts*Q%OwDCP%2ON!P78mSQ5_Kjm6HcBpTEiWXIpr!*<>4pw0tz2}FYjK6f| zmK`dTqesc&yZb2oso_cXMVNw&$e5ac{9x*YeVPW>SXTN%nk3CkMQ;c6_P zez9`G3uBunO{|v6k&~3_5Q)y;G>U2<*&aC%wIqEh6Hbisn;8NDH;wXx+0sSj`i2?# zXl+jqqz1-tS1aMmAAIDjUE6Jcv2v3Jt;7zgcOy8j%U=aLtf2p!hgM8r?5rU=($U3y z(^Ym%nm){mctaA0{0+2x&j_y>tgyO@Cl4&V%A-CE0^X=&?#=Pr#`Lz1J^6XS5|FJS zu74D3vDmwta7~^Zyw+3AQRz7sJCdVk5p6<@`}vN5u-Z{K4h+bsmPM}UMZY?@2Eswo z`685qGG} z^$z802GwYrBg;-QaO@`^0iKNpYbVv$mdm!&UE)E|V4`1PW46TtvtvO=fr4$Kh7}pj zFTYx4__)ABAQfUHKIYK$E!}eJ3&u6|DkvY;M>V~>$Ue4XV+yc(;>SaxPhWfv#q4%n zOh5q%0vNiijm^(a|WN ze>(P-c3kQ`D5hcyj}0=Zr7x*dfPv}X-u#$K#z4h{(?7mrXLIWGxzr_v1ag! zN)M=!y7YU}<-7jLv?W&7sNJ;mMITx8S859XNA9rZ$puJxAu*F5t-KwoMiw)EZa^Qd z&-B~L&-@-$=<=s0lJwW*oaQd+Ks&Qd<&o6aJttvC{aayOV~Xm?XDz)_{|mhkw+klm zLXN^@#yvhZVolIGS~m3c9gZgGDIA8+=OXq1dG%xr7#xvVsUY$N$4{^ko`Ti&xE_M7 zs?JaG;tPLz*8ERH-M`F5Xi{V+Q@ibitkNRmRvcLaA!^sTD7sC17Fys3wu+ZOT0orW zGE}NYPCgz7&WE;sz-Tzpt2e9c(!ZYNpB0>bW0Ch>S7*&%t?I=McZ#EgreC&~2pZ%3 zN0s!~f2%>)2L=3wn}gj}BMcdwhI*UHN-_EyB?a+-aH6cBq?sQY^R7sKf zQ|?Urs0=+xuJ%Gl?NN^ywZ)1Wd`^ZZhFXOw|CkfP(`0Il$VBAY2_vo7*$TzZ>j(O| zDa9BErzCbU-=Rp+us6}Kz}0ukB6H>&o3OS|BVPl|-HG>w zLwQh=8YExl{(Pp9%yUud+gy7O^iZ$~_J~6dIC4K`#Tx9nSlyhopPAs0?q?^;H3ZMS zRG@`MpxNfHz^-2{e@yp-LABIl1S)+|DMs^LQ*koDp_2|ouZL0fix!R0HnS7EZ)BcT zXO9dQL^4yBaCHlKz!uy#jV~vJg#@b?58xb&b0&?c7g>@k$R$(}i{~NDjlY)ljxSV! zumoDU8zFI5SABgB?{{|XOPpeBCd<3RZk9~(jbJ6|5Rw;>F20Y9wpSR5DaUYG@oH8H z9<$g45(_^*_TU&stubr!X}0D2Xp`sI#6X8uKY* zMdk8+YihNTWRl-r*E@#Hd3GJk#Z*6#T27UnWDj-n>!>#)cQiE@4eR1So_|{v!)AU= z*p>P+`b=bSXg6M1kb!|JjcCha&`;xZ3p|&=TPa+wk@j8p zFIB1=wk6WubZnugcO99WbTmSR27G-CTKLa7K<+>jSZk$@dNq`B?3PvC-WkiamHN^I z1_4#_8s-xpl`F>W@6tC4{I4m5AG@=6vARW4xG)fem8o*rZ-Qs+Rd3Jt1X8>qx1XGt za@Wq@h>15cvYV5&wo$KwWnjX3zt$gh8L(p-L2KgSWZ=ItZ}CmTc$yuZ76X|M)LhWU z3N4S$pyM`d@G?1N$>Sz zE>S9^Ru#tE3MF^$T`1uuu`elt?%1R^4{eqPoaa;`1O??Yo7T&T|J%ZYA&hR4^tS8&3hH|+p_pcaCGO(QlHJ`+Y2}B zQ9h^v_4sx%>Te<%TNY$(3sHe&$LIohu$_jpYyjhMFu!`}rAx^d<&F*$uUajB#B?tLx-KRa0yDcU`Nv=$601{eanKxc*|P2%A*Xy!lY zlrkcA`W|#cPV} zg0FosHgN8BU~iBC~kj>HVW=7dl+Dr+00N51pYhP)fabcKa$ifoRsL z#BlX^luKMUbNm?mu8EWKUus6pq!6Dkf6Xqg^15*#Z48a3-H}LY74d0jO+q7G;P(jj z^XSRlz!UbfN!vgW#WZDYm-RWg9T0+)Ro*K8|K??XhN|61%b z%6caD_AU5!i}$uv@yOfLlDCDbn88|A)g-N*)C~fNznjpW#_j}nbXVZY$hG=_HzGab zmb#QW*=6q**4bwTx@N2G^%ILOR5T5Q{%}hNyKrCt{NnL&hsm6EeeP+RTBds=$G?z|$LF}L!Q6rnB?mHk!G!}T2bNFx&L#QaiKTqN*P+j_v zy3)n>x|=E+^!4{{oV)pzmIfg2FnPB>PG55E{5rF6&+GW;SpReq3Jf3qNPY~d(PHt) zY>(sBivohi*6Ds?;IQ2XmiWBSI8kc7x8Ao+iRl^LnKVrGBrNznMB}VSUIzUEQdH(K zi<9c^VPgW6j-~w60$6vA(4Ng^<{{4+BC>-K+cQeTpGYtb%%76gg*)WdTAU&GB1%Wv zBx8dWV57>jh{fvM71`hC+qysgm*t&@3Qe*~e>0;-w=+kuPT13!JrDtS2hi?}GqcG$ znL7)Mu!ufg7iB0kbz;3xWUvWSNaV3a1jOwUjD1)b5E(H>IahcRCnMKqe-`Q7&}eLm ztIp8gq98E_859zqG{)QwBBwfCJ({IWk}l^DCv?J`e83vV$I3B92?~kNO)HKgXo0Y- ze>dJA&a#TdnjS?gp3z`e4m~_t-(yi3(WdhY$rCs8)!^p7Rl}gH@tYuDdk^+FbOwIC zL1jh%W_vFE9skb2Cmj8Gg0EyZYvEBh|EUc?ajsGX@S_W^572H)^N0gMcg?N#Q2?A4 z7a?0f1ap>s+46?<^o?5)XA2+Rp0X(A7-R?nkdS5Voo3lG#IivNTN1m4nWF9*^6{jJ z>8lUWor*~DnAzqys-U5cyJ#2IZ*GUSHMJjB7OxnZjL4leL@AYukm?=Gm?fJG0?mwU zql@8fxgX(wb89~%jw`i9*=7H2`&$h$$MW}fhK+5egHiL}G0kK-1GwcX=Q}{DZ2Q#L zUMFnG0JSTGz$k3M{me^e4LeVvhYvfx`ZLE@BF0;^@3V(`&PRPUp+`yGm~=c!!*ea^|+YinR>X)Z5%4SgcoT`zj5F0n*EgXho|Fxm%RKHO0F z>4n-sW1Q~S(YN$y&qND+kl=R`{E1qSbe-?CH&uEmoe-~ogtmVj3Z7n07^h(!30l!W zPD1zmu<)vPQNg-aQCc~&h$)|!<*@F~Hm^>RXAN)ag0*eQV8L}+EuW&A#eL9b8?#h& zY-uJRiFS@Sp<7*`G->qbqf@@sfn9j?c~Xo0*+TnYNa4Y}#;x!eG@0FmH$<)<&mYS_ zFqLyPj1a7-n3BQn_Kb6>_x0Qid{{@7z7_Bi(}7(Yq?x;YVd+l!du!3q6*+=a6CNa0WhB;v{nD+Wz% z)Uax9|Kd)S5YLs&VD<847fyY~U0e7!a=K1%<@iV-{ZHzfP*c?Z);DTp8jOlByJ97c zfV9A|ZH4+IGpDFTe*UAT#t8m5@RQ|#1wWboFY3uez{JSJ@_#wd|Cjt^Vq)fC`~M_A zn>$Svbaqm0HM0OTFf%eX z4k#%^a0La-p}Dmg^O+;i`=@8d2dBp;r>BAC0pme7f^hf^kOLOn19-+U%U^f!hJo_I zeu*hII60Xy0CV`33ACA^wGn2*qsw!C+{K}poz45jVc5XJ`VxM z0P<@f1;P|_5%UesJ^{4=%5Q7{#R#19TPXWyQS!kSfy%3*s>*>#R8dw^R4g(0fvP&! zx3)Nc)oBYWtu7Ov0T>NISsei+g7F9{YAavg)L~7mL7Z5Mz$wao&;L$87{0IQ=xfQU zOKV7G2cO+x0nqx{51#0IZzN&As)=$kf%<#hB5_ z&BeIInZ>-X{4bT6+Z=$}H#xNc`D$YctmpavIX18Yasp+~2>wCcyR!p0p^Xw~lh5mu zLw5O7+VW|A96Sed|LqO(VI6$4m%j8(1IiK1|4A9cxqObP%SlSY82~reyMk>1+5Y2) z$qAgLlLHv?uaBc254qF_4FV{ni;eYn9{+2beE2KlP_2>^cOKUwd{r9FTGMYE3vnDhcT0-l(FNUAs{cm7eU>3j(U>p#@iJ8s(GwT|^ z_B&MbcMxCp{;|HT2|OLBCPzRItu#Llx;q^C9vfo+`W)!-@!fsoFLhtD9e@mNbQYiG z4+HhxzfgKBa}&_x7t~+naj)`^2;hYuSn7!}hs>>Ybq|n?K-q%~l=}>xOX2U2+4L_# zdT?Y@3(x|%@HZ~@w+wTBbnx@bALBRtAKAHm!}1@zJv2Gwe{*(ZVrWyt2fyq$I?WBt z_kK@(O$O_^vGi}?@?UJ?3%EJ|EN*lkI9fnpXwnV83%(0WYa=KpCt$ngpJE_i<~{z4 zpUba(3jmoSDlDz3ZRa1!G{4$m>!=$UTB{j=8k`)!`~u=TZth1gXf+NF0DLMuS60CG zZvkXL+JrR4r#HYUq znj1jUQC}nu09lzoGAE$S>>rsQiPMMp_gW{wo9)DwHQ&A48#M0pK z#`m7=ao}t$nqB8K{JfWU2m(fcWAw^1L!RLOsWq`QZn$|VXYJTYY_8bDf1 z4e?VI$~W&EMjKnj1Oq;MW_c`=KHQv?dcJpgy{(~ID1hm!_Sm$Ls7dT(lS14A_MY}W zCXNRSG_Yc>eJmfOd5dyNnZy~@IyXeG8O^KfYD58_=M5C{-fPArSHs+!szeofmRDME z$<_ln(#T;&FXnBeD&273B^7WEXK&&$=MV;Q_e?j{hIR<6PA|0?des(-3#+PYLs5rin8L(mcb_D;Lu;=TEp(qV>S^Wc4gi3*k?S8A%w6uTFl1 z^0MD0ob#x_h7xM>O4lybWt6`9w?{ACoM$c2br+0?Sm4PcU1A?W3V>EWpaW$xyj#*} z{+0@vtJ;)*tAFJ`9BuU1p$)Qeg%`OXebh9{^+ z4jtVy>}671d-yg<9{eZ?Z4Eo^`0BNXMpiI*`9j*nCRdV zZn@$`{k&$hV3t@3+66(_4fumcp@@u3&Bw9Rlt*-4f@m{=-e|5%VETB-p*__D(tIj( zZpm3t?ufY%v25=ZY-()nS9sbgEW~w|jGThvrWbf16Sm^Sc{EF|^h5bE2XS}Nu29g; z3logQPJTo@u#ml|zs(Ah0<>A}+WfjQr^9i4Nxy@vOPBcgCk#}x`>htDV^(B?HN{fmWOceU));wIf5^}Ca8FHS32B1W)tL%6WODH!z@?E&NQeVE??Lz(1d<-oX<;81WxtE4X646o0*N^;yG% zTzt_F3xoT;M&-;~WsjY>RS6++X!LO4HH)nY6J!6!s<(YNd`Pbj-9>XL8f1C~l$xY? z9|mS>^&Do2oTmga+mfTSL0@w*xNQPWmhXc%7W&Z^phTDwFfWGHrEK0yl@S%GYYZl# z5m$Qqd#gkVmtA8(u3Y~pUyE#gHgPmE&`H^A=IsJ_?B^LaoM$OxU$Os^$|#B2LrI5T zL#5PBm$AKj7+*^kJw#8DK|rFtnFt>i=7<*{?AD79<{j-G1;DLr>4V3$p!T=Hk@?N- zrpL}Ya>oZxYX+tNBE*3GydVEO$>-4{=&TWi4D7SF%Br<3^=qY7xf&-i{Fb&A^w^U^ zWl&?lP2{bDm;m(>(HM1etMZyOd8WMJ@8#fwQt9YXWQ`)$Pn{v!3JG7q%@AAW#D(EQ zM*$-z^K{A*^LJUx|9#SFF+iMO4X;hCDl2*_cGTaj;aIU4jwi5|)9xH?rlDp6gZ!GshOYhTmar~z;1jS>2`!$Elr5dYzCK$(<8ZY1;9)u~ z>{@E*U)K@9PM~pH^tM3;6lhv#Y7OOkk!f=<+&YxV>h(x&`XzuV30|J)L)l7R*DZ_D zw=zzVVQXfp3Lo{aCWo0)g22CH9 z^75kgbQKsDZ>NhXYMN1KzAqQ&Yz$cno+R3a^ZXps4XKaD4|?MBQexzCo{m`1?54tc zooD(85Khe^m&IM(Iv6(MFl-DDG!}XJIq`_pcJHPaQ()KL8+u1pf?r5bbbu#rrCt8z z1Nr+en8D{Btw~cmBttnqK%Bs(G#QX*7tX}7zLNC~Q(Yb;}h3oQ)`FU`bYV73w;oPb)4Y+hLphcvs;$EAjjt|33gsK(oK8o8r$6gs!|}o3Xn#gQQmu3YtTArSV3G#RHib zPG}rIZPv$I!8+2M_Lbh72#;R_DbIsjmbIO*2e|?eooEyns04xJ-f0{Nx>e`Pnlq;K zy^jQbnJCQq49;9COlv|v9-6dOx0|6A2y3z)ebQKQChJcn3HhHK%U5ut(eGTy18yn3 z?%KM;@)ntPo$0L_R{zXeL^n}`n0P@B6HleyzlFpy1t3!dH`hqVqJOdOg!>xwxg4VV zswx3%$5P~lFD!p~Xm}MNQH%qcOMHm10!5|Zc?zI;cRrhL26{Vk+7DPp@gFZ&G%lC* z#IN7G5gCYjlG-e_y3l&!@HD{a`D65egK(J;aZ|v1ylP^Dz8~zU6|8iHdZkC*<|tM* z?Ke?|PtwV+6gZu7#D=Mmvq-z5%;?+HK@z-;4Vr6(&qkwcUqZD_q;o=;hCxy&SAS3a zCNbBldw9mj|BEpzJ*k76o2fE7zRGo3I<(Y+PaQhLg#}!urZh5n0mX!(>d%I*33UQW zT_XucG>78=`q)5|sCB)V9x7y>vJO9RN77Z$n}w9?3DzIQlhTl z`>%6P6PC^S);jJiH_OHg=&fvvCVFQVE!*|emQYGlz_WJCTd!c7gE{0aHF>qTUco%2 zJ2&@sDweNaN{q*@uIQZL1@Em@c3mRead;9iD6pLvP0sESOu~!BlD`Ad+=UK@i8QHf zq>TB;Pkv;O)Ui%T`xS1Pw9b;v4uiqvbK0>hf3aJo{lq%mdS%Bkd5Tph3QKna)AQ?+ z1WE~)EAY59c=rjHmAlr`YoLvlkZkO?we)=FdBI&VEWLiL7-LQY@;5v*GpP%#r!i|^ za;_T?Q}5L@pXO7sxWWmgf{lN>txa|*&2e~QOH_I}N)oq+6R|>hN-w+`_hjzlEEW8m zeBX(5NXvLJ2l?j-d85~Cgh^eq&l0qa?Mzt>Y%7(VSdI4ga0%W*p}yxQ z)lY%-cGB>!XkiSX!@`i>Db{gWh4oKY2OagtJG2(@w3VN`9Sh=}n8C$)^=cSMltXH=cfbR+N+ZVi%-TwF8zVtE-#9DbS1$TqG3{D!1h>UWlCn7xvEr zW7UB5J=eNH$Ko86(QlqJB2|Qy?-6Zu8jcJ>hi=XH+6XNwO5NEjnL>YrbVVR$OtW`Z zeK@vlPGxzCEV#+TJ}?oJsF!U9ryHvZFRiEMa{)(I7s(4fW^!|vh~HL=!w;==JqIDNPf15|w(l&!RoYfBd8Ws6)>rKHwl6VdeJ*12AqfXY0H^B*2VMKJK~*GGJf?#$b@7%w2+xpBOjuTYD2KJNG}V+-HpOx2Mo$4&wjOv*2;O4?4jvGrUO;EFm-aYG$-Wm_Q;78Qr(_#+#hyAqyE7p z5z7jfQ~~Z%jZ&`&hVvQ?3($GQ-e)&|Xd+U#)qv@*ema`pPAqsU@G00c`}p&G@%%6M zBz}!z$*;+rClGZKftD?O?z1+GU%Y5#GF7cUY3Y$JuW{m`yweX1r&v@xHMqe_rqfJ8 z_buLyf>IE?9HK3;9@*B{LWwdr5H_b$^uYrAF+h>-r~w-Vy)VmpwRKlu_U+NOzMral zBy+?sv6Hw`w*^WqCeG9y={^r_*}olAN|jXpR8ay=PTQKEBdox|**{kBJGn;Et$VA} z>i%vkvO?7!NE}_0$zKpE^Cog$&r9TIoveKQ)0bT|vGBcCAFl@spH#V)Lz$6iRC^qQ zJHo-_$nyFCe@mhqLwBE$*tM{xFw$Sjk-tjjTgb!H=Wo@_hYmy}tlWv%EVHCom|(wk zR=D_;I8=T$*$t>IY>H!X{!Sa7DEe7Na>1&#M;3|s>Q}^@k69k#s5$F>I*9qLNF_dP zD&3i@%#~;0dP*)e90&XmhSZCOI~I5#2`R3335IDVtfI(g-lO=;AtV-zImWYK)ENr& z9Im(PVsiZcYKezu-iM3de*c9}K7qSuUKr%nt98e$rqovq7;>WG1O+nS>3+V{%OMuL z)p|yO!Av^iij${uvd#pq{y-UnW>8>lnIWk2Oc9w5b|ra*WH%|&&qT0}D?ky#6o%5` zRO_fYG0$%JlH>$4p+S-LAaX?Dx64$>)ash|5b_w)IydbLA0t5>na;Kg)xx)LG3N-* zcQdfVF;Hd$$&m$gQB|iBsZi;qyq^oo(tTOM$vVUm_GchoDP>}g)YK8md@kKvwgI^c zbVgbfLKoy|cDJ4NYVTuJyGhb4iD{T8L*m5u`~fgWEHDl#ZVry1#QOS^)SWw8o8r9H z=iSpPJ@kpTv2O%033TjenuOPTdCJTW$dD%*coYui_h~AHB@02qXGG4% zBqi#+X;WzN)-A}8$d_6`6vJLl%uku_Z$pk_Et%ImIc8<9piYuirpX+)cehkzaYoki z-m63q&3y6qOsOY*xkzjne8iO!)7U-wJoy^OZRnMUrGCo>x1*yDVbsO@&e1-?2=?k+pOTcE3-|D0K{A_ghH!GW2tRlBCM-qy)ry+bEk59W z`P|QvBfxDW6#{Lkc3BZeGyo5zd48YKXpY zM{*0{FmasLa3!HXjuPYOZ95CS*@>&GcT$xYrf#j zNA9u6nA77laCydh6aIK{hT-=d>6)$$CCyn_JgKg`5+|WEeBdFjlVwqW3kI`fKJn1Jx^nJ{#&a0?TlRvidI3dLD76EG^8L zC58Pq!GSLS#qR=lq=_>v83(LS=E$3M(I^mKJmOXkx|!(4W{5dZ&ZO3R+$gm#Z;=Cw z%W>`4iHj}>@9D&qoXsL%I~S4EtOmFHk>}RbH&F-!*({nXwrZjxUk?I9`3znSaSPIf zv#N(aDWky=tN978lxJ+NzYMHnVV>>bg`dheQ+@t}fK~WC(#&xAZBJtl{W}>Otaozp zfRO*d9x*b)Ei8>2?^l$1RwUKYWWlt81CP495+h#?dGBGlk&A5cANV5hg+wds3y`Se zw<8k2NS0W=sB=SapR?h{7jn?Xy`0jTrzo>iM-|?$2h{);kiZ#rCTA;{tD0qNa`zgA|24+-pv^E$Oq|X(Nn%{E_ zkHX|69ObrC@h825eU5Nhp4UW^Ggb3X%ju5i_ld8yi zhf3c5I=P?wsfuKuPwfe4)q8jyev?Dwi)u8MBY`V9#5RjhMA@bW2wFt&R}k&G8yv!3 zzbEF$p(Bq@-e2!U?zB(1btb(waC4-HB{IUP5x2R6{j|Xw@roeRP`&j>J5o0$Y?MOW z9;?{8WKG~bSAVXe9Njh9fGoKFdcz6Bv-X5TIL|W*9<=t;T~7oT`g?Y(R24f=`KgqR zxrvXb)PBTXemXiNpm3J>aiFgQ;$X_Warh9i20P3(|2vaK&rp##j6Vl$+yarH0~}ZL z?gYLH`#I?WjCOdK%o^l%~J zVC(p`U4Svpl6BmB$wTP43R^v_lMden9fw2RJ@X=P7PTF!V_{kO=fo_AsenK87E+AND((E4$W$Q74S^Qgj?>OnNG=qqt znHaF1W68HauLfj#K|Ocr<0onTQHsx3{zE_wH%<=gj$54WTH(hiIa}Y2sOOH^UiAY3 z?sus_FT8wkfQHIyF9^qq23#`!xi%u!9p(sVpfB1O@AetVx596XiD5$KqAgF7BN5i~ zr<-qjS+f((MuXWIuog5%M%Z^(gztgr6!ul)8ZiSa=MO;446E|{<6P*O*gOfmf@yIb zQ}7UHEUi|{>Kj2pH%z+L=m}>SpzA!gpazV2UGXXBKO)a zKd^2);L|6We^`rHYJbJw$e%H?gkKQs3GQd74s|>ZSuUIv>RM|pHQ>1tn1ZzC239f4 zEk=dQ%$RTxmNhBUA%e&2X@AnZxmpsLOYOH>*6Xk|z8>XQ7a_PFPD~NJba|=8S4qk0 z<#LwvO)>C`4dTJEjElOYedj8#algBX+mZFXPW+1+%DbA(?|YH=gt*z|Kzui;J; z_P#0()TRMq0)@D*)~dCW7n=D<#ak8VXou4oon``rp5HXR*~<=*Cz`946sXu_qKO;pEZ_z8N$7)xW4^m3G_jxfH^s=}Z6{w`$Vj z%m@@n$8($D^hmII^!2Et);B2O77$?+j9xaww+mgWvyPvhz$dp6w7!)dRE0M{lA1K0 z5LG)l#j5LsX&R_8ZuCr1N$4w?6fW)OVWv_+CiTf9>a)KHSqHlxi(=sYaUYKLIG7jV z?}YjGv}NGV9B0V|ePCh3G9Hb?@DwfU0L-j5wtbu#i5kku5a$@ZC>T!3@`UDk9U!Jd zhShBRs<=YRKEIX;fw;Md5_*dpFf4D14%xyETS|Rc)5~@VS!p^U=0LWoCn~K$(C&eG zu;p-3N8R8*By{0`JW96u+v?;De5_^FF2&97iB>og4KXk~lrnSOobBcS6(Iv&Fz>L{ zG>^%RXIB_OO5Iue1dhNNfb-do!}ZX8Bi_;ywF@`(C)GTXx9mzNIiE0W}stbJ9dR+S><&$*1DAcL=y zUN>Dgs&9r*!vrV<#f8RSANMt~LQJd1sGL-$*mCpCV77=fVqkN1U z9e>#7Jj&tZ?fZR+sLp6;Yg35lAx+Ic5+;4!HW`z{E4u^Y?2!b@}keaDRx& z1z_1@5q<8)KHDnL`gkZ05xnl2U4tF&LVB?~6?0^=9ZoTKHWkv&^^i8;`z(mNrfg^< zRyjmS=V3VAfBujTj;-YlcS1tAOu$H~Y%kQxcoEhq4 zZ}CGk?4#016fdXM&l8YlH-G*(9BX&)k57&YF4KLlIbJpBv~nn*kO`Vmgm)uiDuZ;x zou@;J>C`d`S(Mfwn?2hiINUKQ2{QT`QHKv6T02R%vfYjot3)Z&rV1{K9Wn{jc3S&m6{hd%} zGf9Q?j;R0s7fHp2iS*Xr}w9Mcy^R1O(GQz(1Q-w4^fIUpvIW8KXv0oBN z(JhnDib1q2fqY#{o?B@+A;Dx0T>TtOFF>TK(Jbg0G^CZ#ypgRuSh^Hf1}#-Of`q{h z&XI-Hw~5V*B+EUR&txMuX0A4rH{yB{KutnMU3wz1(Y+)I1>) zqg*OaaSsj}mQDgEZ=?h6U3i~O>2;Jstio>kTHdg~0B41#V21|GxH2gDB>*{EZ zQ24JI1}ow?t2wA4fCx+ikAHl+oe=Pl&I{_*{YwC{i3!8s4hZ8gI$>P`QaND7eYKqS z>r+Xab`}*{AF3VMb+>KHn!J`UbNg96erWCDgI+53|L z1K4IOVf3osrUMKsHn*o0uZ8RBzF6VHZ5JD3eq6|qvhxdTA-a#tA|DmCo+dVM#_CSYZX8th>aMO5V=&+iI7Y{Yf&SbDiB|ON7*&8>HiuUktGj zPP2+zTXKi;Toxd*yxDsB1gzTnQF+)1`*sQoHM4J=9qH*m0Z%F}_|p4UB<->>j8&}^ z4LtUoIJ3tT)Gjp&OAyBt;9X#xXPFx_7(f@%FAF9 zaLK{IHDk;#J6p&|05{jX*INuvRhKqhW5n@Qo!R?WN_ZP2Ps(yunHO?ekO!~N4O6*D zs~8u#U>vGI@~zE8^>kfbecOHd zNi8MwcJEmOt_cnR8miJsB}B+lED_(8r1G^cW*|s_6E0LB%34FqIPLzBcYnxUdwk%W z7VjAnyvSSrEjSxpNxWpiX$72hUpxlS@!l^R z(BfJ=-b}Y%Ih7b&_%i#9QC{5L9cNY{hUvSQFVM>>_s(DDjp}h~^OF92=5(@%^qXDu zVO-;IRvC$J7A2{Ks`8zfIR9M~Rcp*s&Aiqfy}NCNh!b4SKvvEAR7^Aeb1b@gW~}$` zRB~j0;|7` zb#5q}nupwNgy7&sxo-a*nS_C_OLVcZo0J}hJGV;Dv#h3&tp#PkIO@|TWc}u7DMWut z*jrqwcOzqRIMSB`R4JaMU=ojsTu5mCCwOPNr^=3440+0`lVkx0O})AM$9)CHldVJA z`0j-fgR}f6W^GJDhmo`r3R*)xfuARVmVvY1nA~;Tcm-XnDYWdzfkTt-#Ty!4*b2jN z;zDxTERKMS(@iS^>L2-mzLSbgWZPt64LXH>q(@bxeBRk6n`1{R9pEwsiDs$ouaBCV ztdM-J;xJA6`E%(%##LUb3NJR+n2I(CfMbZBzQ;i` z4I5Xfr|ZjNk~JJ^*pyD-+}HR$PfZo6qdVS*V9zsQmVZk~k6OXz`bmju$*ikfAAp7H z6kFU%>Hb;#wOEq76HCW1>-*?UhH_c>*q}Zet=~AxDJz?pPG* z*+Jcv!01X4-^*5V<@UFRcTO4VIMV$&3c?#AD4cRiIFDa8K6r)b7jW&hTE{0EfR{&H zZsqz7$oj8~wFd=5MJ^m7XU$30E=u=acD~q@yXeY0(v4W21yE6k@}IRXdf#Oei;FhS z6VDSpf^Au~eY!+AQfv!upj_brjLyngkY7BPo*1p2GeX?bl`y?|%!}mF=!8l{zL#nd z_r2DT*WjB>d1xXl3}HFfBp!iRpKtWpCiExF#s6A$iV)Ij$H>>Z2}t-Bi}gDxS5-ZM zNaC{ZtF<=Cb>okSxU+bQP&5VV{N3XxB6s_S{kTBNhhscK#|{Rb@SWbRys=C;K2RxC zEYFV5JsSB&F#eb6<{~8wQ6i%>BZ(DRYyn_!y3}2rJai5ANW)r6Z3SUoo&f}16d}N* z6@l>_Ec*=7=z0*G=achIE?ZL%QCYu{!`6&NY`+f@-+Z*b*q<8fkgA+K!BqZ;jIFaW zmo1MVJEntI)`Uyb%n}d2^OG?Wi?G>KY4H6VElU6F)TcnBBzk4v>A)g>NS!iMEKFbc z`!i2aeCMjkou2X3t{&9H?0_kg&Z(}zQ*nqEMXVEnkA?+2idQIl{gK);jjqAGbcBp~ z6Pr*zvz;P!m0Mm4VU2WGj+r7NENb*jXDt&-47}QMv&)fQF_u-p*hW?h(*=Pa32lKa z=@&(zZl1DGJmJClR#onGrR@>y$*TP2e$fdID=zG@VijKBA|(CgFIT zEF$6ttq)fY64u2ml$l4WB+r2Rq+e;@Q!k~ND)o<2yq%~<%A$JRdmv z)K1lYv5ikFU2A}tWJyoTlvSU0p;BhPeVgwQV$87HRrtrpIaN(aA2$YYA-ko!(utyE zO=%UsvGXQuGOp_b#Sre1Q&PgqF`+@|7)%4*9NdG@k;2|Ih)alXOzUP zIqt9_8AF`v(jZPVUI+q(>d}$t?fxhJlBaRBhJ#Xxq6Dz*??Ue4_=G`rIZ4^-=R|&m zLRW0rk114@uMImqvzWNd5bdjK+X~X#f)C=8D*6uomx$#7#4gYUee@wx_3+C@bzG0u zc>}+f3{?zC&LK--A<&I%5lQpFm1L~>oNa%k2GPfhh69;>iqr+hsp_bY1AM1cS=3dp z`+GYL=H}A*G-A8UsWQ<{@~L$Tk;-_!Kal3mwsg!!dm3w+ssGl+nc_;Dg z3c0!I#;0EBN9+cyp?2+yw58yYmxqrgF|b6cScWl>|5rY|(a@fiF9>YZOuU7^dwz9a!;iRCH7Th-rJ`%7jU} z&l=z~=nT!(Wkbg;<~hZQIK>OULOKw{=`YEL{x)*P(?a(1P71}xfL)=HUp@SXCW-d< zCyfPRdwl2B-tw*@s7z^w5t;0s29&Ce1I$BX7hiie(5~+@Zga3l+Z~2SvMeqidkt13 zGO$gNlJD_C4$2D9x*re2Ou#r{o#8~&)MlZs&cRIjcE{L7CH+rMS3X^WVoX;p|L44|>`Rbn+OwU7c?dxyQ z5KdmDOf3>2VO168QaCZdkt=jRp)! za2Eu=?dwxPj?+tX(?hsMo4ua)uF7`7CXL9(qz4T{jGoWLM6?Rd=7ww$(ZxEcdrW0b zlQGJv3Gd{){fQT-p*h|a3)l+i*l?px&BmeYoQ157@cY_UdPm?iL!t1*u!5XA*d0F< z1}S$fXvxDJZAoJ%GQb>JI&zG!-e}BO0#L%KB$z_aF$y={M<%bNbo&DpcKRSi8=W=I z*8UZd-?$u*jLAl1AYR3eg%-4B_zgO|;FvU4i3}ylW39akaZ;aj-}PN~K^jVMCO&|# zw=624zD>Hs@g{>3`M#j=8;knEGvwDRPAAf!ZbzJ)-rH$%2ljfeZoqhJHO%@MI7|3& z$xzARB1TQlLRaYA$Qj^tc;^+Dtd}aZUJbRfI|!;TrXcK>g&eIYBPNEah)}Di8>x*# z)R->ju?dWYY@NizA{a#6ipM5lJ z;?L?_&7^Q6_6u)-KTyLXDF~y-mJ#UIBG}=ASBm(PGNxU-WJ(M|R*yOFTyd#rD#vWE z@_Z{p?@#nBy1{gVWagVR2Y{FAEC(Fd2E_dgLFB(*3S=8xZ@}wkSc_XN;XyFkx>J;h zXqxKkla11+EsG{wP+%rqkbTZtD_E-#V1dhB8L7p*8@TZ zf#k?MlQD*G!Eq;26dGfnxD%qk5PS2NRS$u%(*(=>k%>xs;w!n%;o@hbPRCoxrbkLU zjQcW84KmY6g~Qnp$g?#N(}sdNYiGQo7N1#|`Y^Lwfs*^6PYPk7p*|GH!91KN7VX%o zsm}@qwrJO#RS`W_Lo0HWO@J(qb?5b%{uJ2bWMgM@hdWS9(-TDomBoJUJ~Q)*{Oc$8)hOXC>YX4>K&tokCwdsaBE4%Ym|kx zxrWtf?uE27SalTc5K~#w3h6Q zIGiS?*8s)l*jN{qbOhu>lo9*`^?vBrDG^2OanA71rs?b-fA0A{`40sMq%woIaIyYK zP;nWRk%;3F)WGZI`D&9Ew);5hC~M^2(@k`@qA_fwJ^br3^BIhTt$lXUY1$+6eN!6s z8C%$0sC*m#r;SK?opZnt=SYSaB=9UJ-}eAkx%kSTXC&v~2jefMmmFK=W_aZc@|x{j zH&?>B&fKhT!+K1SUj%NtaS@F9l1(9qE>HkPhR;i_k3K2Piy`bqa~=GmbG2q!&LP6o z`-+FxxA01>kq~w`lMgcj86$w$aW#7em@DF+aVK8v-PIUhIE!HpG&&g`N8*qPGO6CI zGvou%wU@sPC;Jh0z)L~lh2?JuboJhCpSm^jVfPBl6L4&3%A^D2p(hr@Pp@TPZU{dO zp1Tfg($q4AXovJdLq#pJlRPeRuP$~NQJ_p)qjc*bjml}aRq`V8eX|Yd$J2}l)-L6m zXOMZTYaQ%Pl;j~SX<;j^*VyWUckY>9^z&Mys9Ab573ceE;VmLuZsnI|p3m8aICMmh zw3Zz#!T}J!Oeh>ai&l7^loEvvLp&4RGR0@cIus|y61hFbkfEA}MD&i3EH|sS2*-m@ zQ0vaNeS$3(z?VWap=U=;W3WjuBobumL}Xc7Nu|dui3&EnUj`3|cAEc>*LxpDpg1iVX6aF6 z1}0>x_PIH8PE~hBdm!Q2rAgHEmopm7=A~>NdXi0y@M{Zanx0@<8b3?h6ukBNko6+6 z4c5w77DrJj(bcPx*Q~K-I_*6%T>1ad;9H3(iD$`h0oDt0YhU|)Hd)ar+4=%V>`W9@ zt8|6kn(c-r9t(z?Yf^bQBNH6%`00OVNC_-d1I1fi(I_m)fozY%#6w>ScOh9v;npVg zsBH|Y6?D9QGCEkw)aND-;s}Ec`nTKWi2S;@YmTAZAtkm7y;~~;EwuG= zbD~g|ozcH?&kKRebDt%ZON->)Be<{D8K7VZ-_W~ZqCjT~~(*~jIN*Q?aT9ZuHg4v34SkOtM}>9o6KA&dQ-EGDDt<08VZFTrYR zQ{{yQU=*GR$2k{*%|?%vin}DD2`Ad{#V-`&R2>#Yty6CbO@d8cjhlb&Y zC)rkzU49dmBymf1(Ya|H@4+&Vw!81as>^wi_>o++eWOfxlGR%Kw#G`}K*+KJGT9dp zlj;a6y>n}?Zm@b6{n`UQy)0{R%QHx`nn`+NW9GS4HXs}xTG)tdsfJ$23eXk~P`d6X zu+xp+8TgEh-fWP0uEhXN8NV4t`ehxnxhAkQ;Vfm|=ojsiIX$QkZ86}tD7AiLK?B!U zXr=mx@@;aQKf&r9BKly{^9_8D)=bw{o!3F1JvtirDfR=TN?gV@I^h#08FSlDX@W~f z>4+2_e^a}`UlN)B=xU4F`T>Ka3vor&v>3I2xBOYUrv$48@qWW z(ELJ^1l=G?8p~H}=OS~PqB#ZFykJq43sN>cnTJ+{uIJ@`v;=@UMPyS)8NHFA0 z+*np{!J)H}tQ<7fFVN&Av1&SCO_{2GW48lCf%IMx{Kzd#2S|p3Utu~kbQxSqQ;5rX z&V4G>?W0Dvg2PEm9n+{ChFV%G=FV|F;CfSZnf%X+_GX!Djgvx2!Vlgt>Xo6SrU?I?LxxQ_vqu{NS$;E=T16cFGt3aIzmOel-g z*JBnT%8O*6>oS#$!i4(P)?=EuYpkE8CGr@}pDkl2jo)YKH2PYSzY_j{s6mC-M)V_R z@i-z}AfM60{zYJ0s~Em$s-&R`UOpgX9Ft*9I3!0U7Xzj!ob&qW&P>sI^YhH>Zj0|p zGG6rw39|6G+P))hpFLHD9%EJt%uE)!aEQKy8aYgQ()JVCCvA^+l+TNsdfT`TW|%N6 z_U(FMywS1z0ZT?s{r;(+0n4>xd1B8u@X@F`1$`^2tDDDOs}T~-pTM*OPHp66P>?^4u366C&DCCJC!Ugj^Ci3DBvj1k=# z0mHqpZa(&`uZtHWU4GT85nwtDfrO8g^@pYrlqS^0zg)qPHu233AKLMt?gGZVuSOq4 zT-*d$BiVpaKi|KF?}Q5cBE6GD;uGFDhkxQ8CU5b*_uaM8sOgU5FV4TqK8hbc~?x-{$NDZ=fi@txajKebsMD@;~Af&+z6x^D|6 ztd;t$YC7XC@lpPA)v@nzVUb;tc!;_!T!(0(v6MfT35fq-FPsTX5;tsLl_w1rzp^cC z_})~^9(cUb{=s|-X#Y}ZlN*Xs*9evgts6y0ALY594kQUHh9lSCdx;OJ-5}i!&@=YQ znD(OpeaQgeT4QOei!5C;CNc<<2w0gF1Y#j?EuHj2W!tNC_*H@NBA;9?ymQwUKgYLM z2e$g^KbS0;S7>rFj4U3Lpd#4c*Vk*tAp0Fm*@#0Q3H0(aOa4{vLwN?J& ztUB$zjlT`5`K-7GGGg2;-ak9a_bQ~+s{hj7ZV*lYUC$fpIjWj73qUn>R&ej=Hx$mU zcganY?0@rer(*0J*+tIx&2r zO42Raomu%m0W%iN={;foh8LT|`>_<_-ckL95N#HpALpad73ocb5@R;pxQ2RpU!toV z*M{2L!r2_)wno^iP;;Sq?hW7oTPX>usPsx}w4+ZPH4#p_z_9XTtmxGZDj2cvV5HDO zyL2l|2z5=L0K&=o28sC)bq-VJ8g#x415D)ewZ&}%8w~x|aRK(M;{Z|C=hh0GLKuk# zY9gx!FY8G+CB>)F7i9ulnQJ7)5vnO9>#7_4CGBL@YErvm4Jj2m8dAz-Fgmm&1F1Ku zSUI7A=H*y5+CG8EglT~6ToHM6z0AlgU^ikm!V+PUr!r<1%|zS$x_V;{jMk#$(Kh6;CJwAy>DZ|SbPc3uu?H?O_t?!K+w!> zxQhlF*{s*IW2*05q}mUOhU*&b7xThs@UTHsBhsoK6NzBsqWgEwm#lZQisBTQuT{70 zT4H?1>P+4Y)!^>1`b`VG1+~iJ^6}k3w!Ayt++DD=}bS9Cn3xK3c;Qbndf)NZW)Xm z@1{<^kQBb-gS@hU+>Y1Kp81^O)8FuzCCS*DSF72@i?2dL&PodVr!9Wu4{WOx1%jjwjRb-5vFf1RK3fHhhEq7eyl^hv-MlqRs(#Dd8#og8G$@Xaz{Y;i6(u~H$VLfTc=gD&|BSGSW3 z!L8!+v|RJV=qZA_x{BInm5Ly#L3aDk$?ee@U6JlZV%i85cebuX#^eAGj)UO(6TT$Q zNqeEDem-w7tAokcw-oq@M4=BGx6f~Xt`R0uFEo07RLLD_pbX{DKU{Sv=cnSlAv6v= zC_eeU+LTBrK5kTf|F5O?Yp4ygPB%Ls_>nd^SSPob3@_lUvBN;)v-!>sB|o-+4P9%u zQ_s0G`;!Bx);hKsw#SH~*Rr9a9HIRsDs)K=zUA8g`ATLOY!`I_MLg5~HG&5{*lz?u zAgA``P*R#!k7lQH?P*nr*O5vIz#HF6gKV7i_XiDNw7`c0I-#T40w(H;{Z{RPOv4nC^H%ZwoJ6}S~Gw&IQ`sa#*yE$8M7_|#ts zJV8+dm*7)HvX=-Xz#R_Nvq3}|_2^PWtqvGI%}WV>Bymi-R6i=QT%)ZHc*U_g`Ju`|-5Nb%2yr`)I$Ls_Cx6b7^N@D#2EWt5Px&*>NUmY+Ue%#aBs~b-ysHZI!yM|G_$uP6T&Yr^ zdEw&ruxYHGN#dMQ_|m1a1-)u>INf+O*pM9b zoU_Q?pl?{)xtnq#Lr}?GaKq7@^kH zFoG?V!e)@l!Lbt~dbP|0{3HU_F$5cjjZE2J+zgFd^5@V>_453toHu>mjtSYR?{cE# z`$iR>%&)#6^ID47aw5P&W(Ai`0;tx>Usn{eh;0fuCKi|L`1g@5sB4Sknyic6-SuKz zVV5m6?cFI$nSwU2a5NQIaCCpl5m5hRw;5FnwmSVxt%rcYiV1YuR1iFrbXQcE*4;_& zpR}@_^jMW}u?(1aft!H$yk>iptHmGUoGVB3I3Ds=!11I>4&w31-a^&LR5*RVe_4i{ z$)eTfnSu{Y`78;?zA9C}0n8VTtvxko4<(FUIUzXbgnsF+Mn&+#oAK$FxgcZfPN%3> zcpqNi7w2<7#pxCT$_gJ<1FB~nNZ)%vUXjS>zAI`WtCNhnZI!`Gg8N-F+kN0zOrz1c zn0+vDC4DiX(|19|DJmNTL|O!G}hUI^R6J9R4(# z?Ez>0wpl*xyqR&6zQwqq59 zkJUWEOsD_!s6P{+qm9asnW7i!ERHiC7+?983drK7)#&;IP;U1XPJgooEga(v|f@~R)eoj0(z_UeDr97HT9uiU z#)BD4zg3``$>`XQ@XSOTx!BB7X#eGe0U~nZF_=8H>2}-OEfc5tAL@Gnqf&DaqCiOm zgKk`l+V5HQd9Z|^Npzd*kFC$UyTZ7M+iyr$my=?2DUy*^;x;G|7-yOgMo1Q} zm~vbZ)58={Tj@szGB4PHE3$bvui0cD5a}yS_ycDy@T?k7cF3}zHNU5J17td;XIxS` zSwq{d=aX`p_%JWHwcPwGPuehTGnX8R`D|Ftue}|pC-^`mqOGkqH;;)~X~1)QLNj68 zr6|Uu@xo*k!t}l54qf}fp>d}u4v+M#4NQt5nd+sbxl$G)yJ@y!ZX39O9#KDwF=MYM?}v^>;Ls%WXquOxgLa9V`!ZMhtL z3IPD|mw?%GHI@4WHeA%SrT-yo*i%eS*7Qm1%H0}$bf;~ud@nekcyPJ2APsUCTgomd zx0mMT@`loVa~|WV!suN@wMEgrae!>XOsL*GLt%^tGBh-H-xj+V~VlstQ){0XGobYqqJ`Lkq#m*J8WC1n}(bK2w^qrp? zhvUJ&I&?;7mPaDCoz$4=UIeEmsgHTDz8xzF%n)!Irh6c%uo=f-vb(F?pNMhMB{6=C z-9wNdVYUU}>auOywr$(CtIM`++qP}nwr%V6>P1Y%EM}RD+~uEtC-2Sa}Ii#h`|TsR`)w_;DxL%~?B( zfDhxuz_Pga<`&sjg`<0RBKRn??2MEPM(W8HX&bA_rhWAtPqWD+quXJ}Z4K)mrK%xA*#rscdhX*G3LuV3IhoH-7^s z+is<=z%~vxs<#UjS|(6*V87#cZVB>}-L=(?Fi=%TskaJZ5;v=NdkgyQE(uzsV0(#x)^m-&-9eJ4IAMOL2t4vSG*lNWFEz$f|2dH394 z_dM1LJGmAJ2~duKMiA3QdVj7xICPzu0jifQUv5v14AJnUO0+{P^?vOk4(n5`K6NrC8t&Oe((kS&7-fsOZ$icPZAB@Af}CBo}(`n598;QNN2`rCWhC z&fgzvm<8~ava}0e{(9~=FQoaTX8?K=u2+p{bh^~hFtGfZCyG3Mla2b)Z@?MOL|HQJ zaisj~(S)(;&aAdOr8_9v`eQlW+t)NsHTX*nDZq0CZIgIx!q*x@S>TNOjR~~zsmT`d zbLIIskpk_*ME;YfCJ|>$PD=xea-(6Eqw;d8=6`sx{RM0qm5Q!-LxVW7_Qw7_PoY1M z8u&*cy(j!gQ!Pyd9qfvwf7BSjFB3+N&s?P!_bG&sl_*;^sU2Dewa z5|m^_yb_NfHxqJTHYWcSMK9Z#xLa_y$Sd`#f>Jo_XlVz2x};e0TKAeo{!GxkMc#{( zM?G8Qz2LUdKm`vOW=~JKiQo*$3!0HE>M|F^SybTmhQ8`8eau+468GDH&`BQY)~)55I#ceurCM`FZtVg@-Z5 zagWM^tWIYePS;(RRN|b}3O?Ys`4Yx+3W*gd5@}$F5TbesU5=$*Q`^?s(<8WA^?$A5 zz8A#vTk@|z!65dnY_FVUaFvKg8WG;&E;row8nE{&`#fp!_#@QFLif(%Xvu)0*&T@;8Vazv`s}z$ zi6z`t!36c$@L={40U=uClJi4hcMv;jOaO*KoWGkJM22VE= zT5%4^FX+(r7?j9Qi{nmE!xY#V{)q4x<0tgN$}<6$5B(5n==-l+e3&Lj1ZMzQ{+p*0 z-CpzKn+K_HLam6`i3C)~x^onO zZeLf2QtL?c1|W1Z**Ij}La^F|Dn9JtH(x?IF*Shvr=Hn0=J-PHAQ8Z}t-txHi{FrX;pP3h)#`DWm zH$C$PkA37&I5ENYU4t!Qr334QqqNs*0m60dk(5^Izns@0;|TYfg}4H^)aFjLn?Nfa z+X$#^p7w~}iuK1bvZWDa$07K>er#-;h{`jWK(&?>9^3-PP?jv8mRL`phHHdHcZO?lF*QwF9})MG8FJ!}NV2h#=v z?j!FDl2NKpDhra&nczPhaPVQV#+UQ@8#01$fZSs)3ogO!+46f1VNNXTqm&j3j~7)K zun>|vyF>{~lDt5ALN6)*SfFaOSEES4`fZVn8Y?^7|1!4GI|rdsoYVjz|0gj-hqxRv8P|F6qcC1V zfL_)q%T)kd+RPF*D|OJfh48K`%27 zQP6FVzHrRGzIHmq(~o2@u4p?>bLEq&EgGY?0%`%6^x?ajx}dWD@k?l6L}q$z}i zUzuM~T_Q32fU3SYxQ=o4AxD#tp}El@4M1U!LSq3S9}0nASzZ2ossjb?v1m64EI;p| z^_zG)eHYu=(3H}a(v!i=b(zZpu=Xd1UyZGk&*E1MYdVv$&$p<%U9&SF`$rNWuhH4n z6;pV5LvEsEW&9k*9sC{L=O&)l?_UwW{%KmNbTBP(0ibb2H#EF^x3 z?KopN;EZ4zJs2ICot|xfrhX1~e*9FMe&NA^#XZ_Oe#Y~^YDrdoOW#wSAnrD2qOiXK zr@DV$ho%H@ZF_txr+w`<5uqI#9UWai#f0(uHf9js#JV?gnHqtL1BJS!8q z)|Nw`f1jFxz^_0aK6|^GamFS-tMGk14=Y+XSETW1H{ojIbD{G7FM@Uq%$oi}Jcej(0@m>7@83s&DIJ|@@3^&{ z55K@nti92nl?7G)+g?nNz6n6U&fa!_ES@bOfE9hUBEHb^Stxy$U!iZH`#Tu>7yT4X3AHY`=W4UjV9;zC<^zTPgaZtsdWz z`v)I`>>S@>cwAUme#;kjcQhn-c5y&`mfvh|DQhSHuCuOv1A1)+Rz}xR!9OyGvCLlC z-b%*q?e1i17JczQGn0DX8+s-F{E~fS(x5-FSzOsIWc|W$>=w1T`R#_p4DTY=_14$; z2HII}{UF_6=WSt6Z(IMG_5taC%dxcYKDBxJ|F(Rc?BC}a_KJL3&2?%7=={=N*(B!t zyJw*L$7RV*p!*kem-YM+?dw)o<&&x6H$%|+*J8()ckpK*{b(7>1?T2aN4}Tup9HNB@f;9!YZSMS6521XAaR*{bM(%MDq@1uE0fs4wXGdTd zf5qQOKyppY2Nw3w667jkGJWhcTtLdzLfBE~ukM|U7n6$(NgeA=Zh4M4a2ZXnD*jLr zE@m-zj<$x#fFJq%JoR6qRcl!-2P_JH&nxkS-oj6U9HR%6#|NNb1(QungetXlZcnI~ zN}`lkMoIMm3jFFSnJ;4r?(KQZEW7$j!8nsNp#+Wyi1d9@uc`r4) z1$>6iRbmmQIA}(Hc57H95q6daGFQWjGnf`Whdt&D)Clau5$2N0`7>EIn1c!2b0xa7 z8Be?0-N*D$sfT9fsJcASEI+rgY}b_SI(f#JbVdgUiZ&Paz#6Se67VDcx8q^qPOO#CB(Kc*HmJLQhsF z$b>+!hgUvOKg;veFTNK%i5IWO4TuCZ2;Ep+8=uP{6@{sokAUtnL7(p{bkkquCmA>X zQ~ub#}m*cT6 z#(E#^V0)d-W?OQ~=nxD(FsK0jW51yi;f0vKCARs2^)pE}ONyP)@vFzAV8~e;PL;6S zD0nMAQJ{v?H^@Aypb`*7)MoDs>^<**_zifUKYGY_WaiRNA8EDfHr&P5O99p|2xxZ~ z>7+vpS{3MNu62d~wit8wSqQ?JCNaEWx|&nZqJvzPn1(}D-Jl)NjfZzaf4c$%uYc9y zz#>@9^GS$D$enT$dt&D;NkzYWvQMC!H#ix_cFA2Ws_fij;NuR~;hIS0wHyRzDeNg{ zyDUTrE*>E(ozmS(SJ+RQ}_zqVEtk;@+WWwd|X)AXR9Pv8Z9 z^>x5@Dx4Q*$>|(A3U+wA{)@S_g42gbT0sGbBGJr06MaVwH|i>?N~^ZQ40C=sE*WLM zmhu)sS{F;j9~r8;p+4=5JG_Ee>Czq-O`i?4z@Y86YqX`{L%7XpfM;8D#ywOi!HKY- ztBQI3{i8}XuANxZkb<~qW1B939^*+Y+Int6ivK6J_`dKh=35a~%LQFkcERsX6SMub zDx^BQFTP)OiOj34Bsj#G|H^I1vaeBVs(dDS02Y>+r6j=zSUljW(^%mEvv;kY-}CL} z-x#qPU$P0PN})EkaV`BdAHbTWhSU-5U*Yzk5h?@=i8*ZINUeZ+f}faA19Sm6;~^78 z*ufP4t(K5d`M2lO0j9aqwVUW5bdnt;STKYWN&ka(ElDr(-9jzZrmc=;`VL%VaAoHu zSHRfAs+YUNjuO~WQUn}R1G{T6yKLJ4V`T^lNqh~TVAwW78Q2P1G~|?Z<I|RD>gC z3SQ+K+W5th4=Wqv@4KdYbB?o&%u4Vbaw$8_$fA+nML#&4s;uB7H+MdPhGrxD{9B5i z4V!AcWGFSUu%G&z6N(L%`wtKajQc)W!g)``GS~rlh}Eer!4*ta8AP8D1uaoF%jL5~M>k2|y$aEtOynqA3`2COk%c_s7MjwzM} z%e$JeV=%a+`bNXxe8E5uo8a?nC2wWL4J*Ed(P@P)Dj7>Y_uqS3;ep(1iK=!(A;L_x z^Mz1{Ga}oYH6F4!-h>0Qpx?_uS1 zF#Ak`qkPW_4Ea@qQES=yV$j~+ySzUi!kjelyIiWRxs`FiR6gQ{zn&t=Z>c>S%WjG4 zg;xc3U7CdiL(Htz@lU-MfqWRbgms*(9#hdEI=>Z!{eT$A^DM=I^ORZ%r|_bFZnYZG z`@BCW)P03=5&JvEeYj#W2`j~k3*uuX?#>OKR^^u2R+CQjcgax4z=GXRS1rsuNjxTe z=x>J6@f#o-F*R9GdJWAO1=qfU=4g*jq9S!=RQC%($f8kA)H=5Q8q8Gq84t^G^+aeS z=ztaT-;bNr#OC2CqkVT8)KKJ>7%+TXzT7Dsc3+qY3$}Wv2v8{%cx%m6759^n4$Ukz zS33?eVUgm*^iOq-V?6?wZG$HJ!zyC8tetfVmvVmw6Y{QeXhp+e3@W{*A?bSg>ky1k z-j+2wb%%QUdt>J~c?6OmY$%{VY7zZ;t7gbm=+Foa}|6Gs?djOq011dg!k>6--8QJoz&gCkuur z+!y$QdJ1XM&KQ0u%E@(l^T{+Ye^B0g+5o#m)-^F>%2xyOU*)-r#NkEO$>pWv3?iX+ zTkSiThsrO#JPT*AKaH3hFe?S`Zcm1EWR#hx>A98Fuow~;V$9rdo$$<~P`yEuh|M*o z_=NZi6oiVTseg%xW)An3_5ZO12j{}+EX47_T*XZe10=`Z9bYh(Usk%`2#n3slPg4~ z5~;wtOe^CIWhg8j+8HpZh9I`^@7hh-QTy(8l)%t$OL-ZWe@a;!)0AhL(E5#<6K$~J zLAgIXb3T}|IfvVt!OfU&(S*x*oR2z>#s#r2l|w$ru1=+IX*owL-xKq18}7kmP}2C< zGU`vay5M!X5SC_&^|(Ak(|;}7vnz29VbgO8^J+K^VW2F^W(>uY&4n}M=6(~ok3UmI z0!SS@QwfYC;ljKNvODHs(|K=6iHmJtQ-r0L1YVrn^z&DfbF34$szl+43gj$=w!vxg zIX}jvn_hL(QuKp(@Fex&;P&H+GOJ>MMVp%MSr@+w0jeKv^*!9*mHayO#zB8&<1-v`Gh#*_S9my>r51(8X0cGA+3x|kM^y#^aDTU+Yh2WWQ z@CZ!C8+nl?4fnu_VhL9x(j7PE_!tvbT*?x0{qh2pg{iF#?Foc?Z``W{@`*M|aU%Cd zbMLr;UF`w%==ct4St-uLp{Q$p5BimGvqH_7Od2Rfs9KqJ^|`TV2)Ubdi}u0TwZg6< zlJ<|J4Qu15X6?_mWZokshOW1)zy=Jl`xf+DyfvIDt)*@W)T%pJD6>84@8^d=`C0d{ zoJMEK9j4qPnkb2vJRp$dMDJhKG<5iv(agU+Ts9f?qp6~pNwn0SH3^crRzgzHsh`!( z7oRExDL=x&Db*DgvrA$^7sPM4`Mt*D>~ez0n%GpW*Vdlr-r_bd#*^R@;YewCY}sl| z)hcIoMv&QoZAYg@n(3M6|5%N+)}$`$C#x=!%Fo4SO3xpCHLO1>q>dvA5AfdITLahJ z%5xdSD3?xj_1iaj*Srw+r))#Es(*KRV2&a|fUbnOfwMtcXw@=*1F)Qx!WDmo*p0uy z)#Q4!6}U?BdWk})U6(?m z6?kY|4w7bUVX^2O)C}5<%rsu+;?j_B!IS0a_`p6uNIRDyEYNH!29bG-&Wr`sg+LoG zQaFZv*L!Ezz%lG5-vtf zP;hi}Rg%t62~=&tBEQ=6d0S`L!XCT0@3{SPg@k=Mledram>P@_?&X%G=5No?ZnkVL z?O;ij=aS>*sYG=9gD^FeF9vAZVFNoZQrWIGl(JO$)6fMBf?E6I_BJFz=%6ARc{vr2 z8#<*8*_n|tYS33mcDNb9^h)6_%5;Fugc>fFE6qJoC zY=Lt+*Io^Ok|X3i)Kv(9+()zqh7MiSh!RB*S?MC|8{xJn^jPLzag{Pwc=Vdqfau2a4W4&$>z!GZO!`?ZDj^OZy??1Frg zHWfrG_O%YpHq6Xp<__WE6=rS!onH6R<(+j!uVsniRF~!y3<*LlT~RqXGN0@FGz0`h zv*`pV_lVyqwNzAQ1AP|)-&E+nu6dsah9f+C;Q=5;a*f_Io(LuBYNH5$j35U<5!7K0 z*S7Jj0cviO^LhL}+nB4B3K~Sb8kU%p6Itsa^E8&H?tI+gr^OWN});x4%tI zjKYs=ok}1Venv@eauVfqK%wLp&Iqor)OI6(oO|CRv9iY44}Qa0B9Gj~NLf@vc{Y+i zWN#%jGe7h6YoN66R}q5sBxnq4q>@Is}I)7$eD6Bn`3f5z-`IJi;K?uq&r!XI+*3lg# zOoafd6mU9hA01nEQBTTVSrK)I$5(afYp2K*T zMk`vdNIZbt4VHssru8m!q1?SBl0`JJc7^M^E$3Oxne=G}B~UZwlW!IS}|_ z9Keba@S{B6jtHh6LprB@7t92!K8vnTDoU{G)_1uL+9bfePw zR1_Li#Tmu*Evo*mi|V0@-XqaI`;?iw9_gQ|f;4c}hB8|d>Gz(>I++lJT1%mu9FJ4F z83#G+48}_#mdhz^6*TbRS{5#{aop}`+qskYMOiD7SP}|?*Mqg;o+_HB(;}ld;e8&7R^tMB|+k4q2#NDsS zgK!eGh;}Egv>pq0spnVdz?ChtFwd*t{7iBzsh_wxH$_{lA&RfMpI4P654ASd8(uy| z#z)*7{h$z^W{e;1)UF636y%CgvsHYw9x44L^Kr?+Qk59)Nxpt->;bDanrKaI7P~I}fdM|1uPNi+^sTEV9A2;r@%AbvJjT8&3`D8> z$CNXg$Wh09vOl}`?`Djmg;5RJBGhVCv&bb*9giU&>pr_6x!etw8qjrFg(f1jXcR-$ zO>>|+B!Ok7(OE&S=8V=A2Z&3EQ~0zWoM{NCC~P0)`uoQ!f%KRJVi7jr-Pay`1-}V8 zWD=>;7NpH6Rf*7=I(u$=Q@U?KoZ1R6>!Ew~EAM9P+G=oygAqw~_)xeuVsC3~I~+}4 z1Mhd#ksW`h)|T8TS+O|ofgl|v^)`~E1ukm!#Pr>BPR~mRR2SlZ zs$^J5eZzEvn|n+51vuNW%;lj>D!}JbWpJIV(o;+5Oo>TI6nR=cqRLJT-If5mX+APe ztK~ep^s@JCF~4=UDIvzKh_iBiKsgh6SqRqaaOGKx+_mc-kYAoX8`Z$}Wj~vYwN{XS zrP7Un!NWy|-75?^xxYmYb68Ga$EZ?8EM~K*K7=P7=Fa-Np`hl&E3G&sZu%tH9*Jqv zU)vMM_)@r@SKfvc?Eu+6QVc34ZUIIl}Q{cnIIhqTUQ9isM##>joxvdUXuSdbkoRQ3P zBoof}5&u03!gq_MU9SG_Q?o-S#4PvW= zSBWYIm9RYv=6~-;wgkL(<+T7Lj-=m~pOut#b?FcRKImjgv%mpc4$fnj>n-Ocvh+zE zkF-0qOSaWxe*o&)RM6uj@}iB+4vwc7lKH{ej2=9kS|7AE5Zkg*TW}U5_e>diDHX8xNnCJ_ibXAFdyPHp{Xf zJq0jA!fw5p@9+*Kr{?jm$Canx6o)OZ&Ikk;Q+K5&sLeFH*c$+rhGiX{ebw}mq*u|G z@YOBGzrtpXe<>mX_Ea~Eubs2JP;Y%oP&T)&JW2WQ{v8mIy}j-=59{6B!@47nx?>go zHJUG_qqYJxO8~)*7?aL$(T2Y|LmR!04)l%%HJg=`$n|fWDDudvY=z0b?P(l&nW8P0 zZ4m(seEo5C?I|^L-8P}iyi(eX}G~N|=%t)>Ok_rHoV3c}un`*m)==*>3CVv;cf;OeL)Tiet519%;1a4i?^m z?#bxyL*i+>3k1s-dg~16&KKy;QpMP^4YE3jp5Y$fg`7aF(9QB1{mbGJA}Yuay;ARb za};Kd_D!T^^^q&>fwzZAr8-fF6TV7)IV^Chr=Tf%IkeD0eR?L=-H;~8o1d#@8h=*WKKu5Gj}-~vO^O+J=_)q{SVGFAj!H@dK(+0Y zOS4L#rkdQE-Qym_!&w~`#F@>>78eZFEAWv% zN_lLHSkhkoGT*&J7c3TH{|Qj1?ICQyk*maB2$|*o>G{d_fG3mKFQ9N&|54kXyPG1T z8j;!r`I8nMe@1~QmNa#Ld?DUm8U-``LRFh2AM z6seeKt7jEl(rDHzuO7>RQ!&bzW*+jgYg$}nGH`;M0TuY;T(guBijfNk%`WtyP9T8~ zoCGt~P@>Ar(z)RW$R-y0tVuZX(wiC^ymBrtl-J9^qHB-<-z}$k;%C5|Qv0_(uO#ZX zydneHx_i%feWZL>p`I_ecA<{gEM+IfAv;~m)OfAh_XtwxLSgBo7MMnxyW|6jq6O&S-V8YbS60j9lWlcCx#4v7PJ(KW67xx zIKeW=*eFnetdl}4y~GKcLu7oi$7;*iZCA~Q&w_$ZU;+6IS^UYZi&7~l^g@uQdFaHL zMWJ&F_dW9&?*dP2jkZURsT6gbpv%G_6LR7O_3s1Y z!D#wZ9=4$N&dAGo$sXa<--c8hyfUAB7$#J0L45OSRqf?M`4R)b6ESu!FH*{LJv)z# zR8zOFo@2mR5IjhHoe`-8%~{(bTrC{85-k{JmCF`AiznqRV8J|v15uW3DsVXj&T4zuht8&#J(kOphY$|a_?X6PVr>g*g}v~M}4@mQTT)*qcROI|bjy>T*z zFJ9`!DkqIei+jJTO13>iP(c>iNDj*JzkZR}vvy`t=2G35i&=G}%5qlxx^Dv>8L1U< ziT+@w6LJUhf4@i8a-ZEAx3+4sxEU}7c%rk0!~Yf)k?Uu-8OU$ya^ZP*xQ^!3M?WnVYpp4y9^)~(xC%~kwDlA)>!7Tm2U@S_ z^co(ydJoErutB3dNS(VtE)0$n*`coHA4KIlnsPV%m|U zXDZL`mmJW$4Nh-}Sg)FVl_zhb!BY^MYmO*NsBVBVefl8Z|0~vfK1FNU#m$4u=>ERL zbgg2)_dJ@in+{{IBmwUy7#rnWKj;FBe&hclWOdK|}(m@64eqCv*#;g&mwTLItwlnz0$6LdPR)#vbIL7Wv_ z9*BB}u-D`{pA;Ge3~@UqEE>rEh^?WM-GKD(Xezb;!AjBh8zwr=B&99koaZ64x|t)i z-UV^rgyu+XYL0+-{ zTO=(p-phv+C7c=41afMKLq5w6bc}BF)xGAgeI&!XuB{bblHnaEa@6tYiAq`K^u~K> z`K;zxw3`sQ)ug7D&aKFxvb7o#KHj~i8D*>_6c=Dw=cbh4Lw*N0|sERC4#+*kf6g9 zkXF+`XzV#?xznkQZ`__r(^Z1xkMqi6=sB3N7occ5$l+Ob%y0ztF41FppDmZDdTKWW z*<;XqwQ6=#(Wvb~dPmm~PU$)GTSk&4e@pZZ2%SrH$nKlMeK&r7=7E6^rCaENtC{@MdAt>RoXCDtA2WA3%+r*o*MT*c55KMOLK z<%@s*AZ)^xxKPl5*z$sguO9|>86iXwRg z6ubg^pf?|F)K|v;SOJdogv)InFQd7jInl%$b!DYb^YNQ}Hpyz+8JA1n=vb!sDhc=? zTkW4g6hHd+?bK^}O>0HMRa~jNe_j{}YC|NUmZ8REW;dYt~SQs$lJMDV?BLbSTscbr`3X$_ph zHIyYWPfam~xYs*4OHicZ)!_gWy0@OQP9{4{yhto4)7LJ|v}Ek%h7Wt?z(ZNXeh^n8 zEZ8TEeL`SJX_Qc{)E4xky}X~!!782i5jZEdLPD&vbV z&pprvMy|JbXE~=KwtjbLM_iR17#(ONmC3zhOY=eCon}3o*Fl`{Eir&DuEj+RSx)1N z1s=c3{>F;~%s42F`wyr-SOQyv1~JxEM_&0$hCi7B)u6J)CV6$?oHR)8exT^m!BC%m z8*4CWG2J1-kQO!0!^OP$mSPO#wkUr1tRR@QpU9pEN7y;)(yF19ap|zZSY<(+3BHdW zb$B*&PU19<8N?IuXw2M&QyVGE+bq%eb?ww#Vfjp6(Tcq8;%`AFIp4rva@C&Y(AB5+ z4basRWe_N^ta~^nGE|k>RO}hBlogv{T;)A+4q?XYre`M+_^Hgdi#gdDH9&q8#)AJ) zjOi_A`oTF=F}}a1fO{tc!zqLgx2|x;|hkGvgQyF3OnYYu(iZI-GV%(`A6Jj;mh!N*Ytc(C0|+?}yP| z`qd|vDfZ0S9guP^KBm%NoYaJ%FcO~wTv)(0w@?Jm^JS(cMs(3Sz-%*lVEq|J?1FdQ ziQ$no?v*u4{mn3lr+A0Mh%(bV79m;ROV@Hs8mJK%RU+C=#2nu!9U6Y`7;kT6y zpAcb9Ou`zj1Cf;{O^!xrQm~2qfYYUUQ7{kTw}G>Et#@ zNGqxfm)kMnHx*K&PP0s)HfU;&mKGb=>}OAi})i<(4Kzk<~Sb;wjI zJ6`uMi>&G)uB^vpnO}%e!nMa-gkJ>iJZbj)SiNQYOgPX3VJn~gTceBEUBc&EMXgx^ zC9S7(CQ9ysGyJtdFO^b&?Y z5v2NU0`D8T#nZ(jwCSlnQwhGg-(1AH{fk4bHf3B-ZE#q|o6y7mG}GNib@YBU+N;w68TG@oaNtr$p7 z;q4O}aZKPe=7IsESA^FOL66Le=2AD9=}h1h+zrDoRwZM-HM5OM8KpZ2! zx@mq$_`diaY!lnX?9G$$d13ACssDIWoV`8~?qHzXzEUE_ zuK>=|&BvhN67l}*h_=tDki=9De7e9ik^oykbt*Q73=ItHR$A*rKiA*3v>)P#;~!l3 z)Ix6V3XGUG$jhWOtoK&vbR>kRQlY52(JRgzDVwOp_m`5vw~2IChv3b&+P#CQJLFw5 z`0M6nTtO%O!RS1?Y25Gm{gzDdEcwe?n8w16NJ;@R>)g@9c=CnfTO&I8%<#Rt{_DMS z;aLCoONRnnBr3rE#OiMZA@)851~o!H%aonj63-xOU?sMs?=*+Q>@=sIQl5Z~Xr_8N z?gDjAqRWyR-t>vo-xi;G#DZw)Wfbd*XOj!A0~#GWRms12-u{Ic$iz)(2OBHAP&@P! z;unGDes_&6{2is_FQ-j50 z-|sHIgE!>mMW^XQ#cp};DDKk z+hJ#rKLaZ~3a>8_kdGjj*yv|kwq&Li)E}%QCrTrdav=B1DHiP7Qh3GV^9|G}Z4^9i z;W|&n7Z%lxg{^kCi1VqGH_$qDUUEJ8I)5(Nl)mNbzyAsZcTzni@#o$`9pj*fK%l05 zqit7VG_q-^AGEngE-&>a%wmFugOJ3kix&2MJn)M9M<9&BLR^sn(_j~+pp-_;!jfE# zNYehOO?b1FEjW(H=7&*nI#>(y+e(571E!yetdg;o+}`lX8@EY-2O^|5bTWe#ujKzL zdjm{hH2Jn*#K4xpJ3mrP%$KlJ(?}SCjiOL0&OX%A6+!z1@CiaZ*M*{rd^yW+c}zB& zE)^aKgsNy5U`?hRgKx8D>(;BZb5Z4O<#Dp6OJsy`Ye)P5X$~sL;GQJ1eqr;y#*bHDv$YC$82udMVbop*1|??%nzi_z|@ZQQeCQFI05Zf#63De z)5d@mbYSgwbDTk$rrgVe)^S^i>ft97t{;dAFDXU)#=Z6y^C&4dsviLN_0~>WV}}+% zw-7P_WccObK`p*=?3i~nKNJ&~P&VL33z~;K(g3eUX(8rS@^ukVp(4X>QyQt-5+$4I zVu5_g!ex`p@BtE7Ksvt%2V)xDNfKXIH*q-Jz^BXbubS6^jpK{(@V|yViJ?CRrk<>a>IqFNBKvx$8$&!2BkN-)C)_i54z{6wpO~5^Gzls zOO79M;_20K>h+*aU+Zt|#Vy`T*%7?>+p`&!7#5M%SI}msUw(4!M)mqt4CCRPfA$edRP#!F%G`B;08^xUvwQG(NIZIU*%H!+Z`oeaDW-Q32z< zfaD}YfiTbL@_R$ujx%ml*X2M*c}Ha=xlIgdTlu?!DvVfxF>FOWz5kKxhB>yT*gmKK zHm8|aW$8&`JvaTD#Y%j=PRNJ9%J8K39=N(X8fK+j6_Ekj-kB$TINaOR?f{@P0F-1O zf47SBaIoN2enbHhG!{Ox*y^Uo<=@B*fpu`zr zG!gf^NDV1kNR&|e4G%4hQOv{=XNt%&pQuY}*)7%Tzg4mlRzu|!p6IvP1&qv6^Dx#1 zJ#u30P`UD?1)2@BF`u%Mj`=WEYj@{}*Z9_}4~Bza^tTruh0 zxa7mKV-<7SO`TGe&4Fmje#MlJW3>aUtQNi+wDinku$;23Q&ZhB&%i}mL$+Y2pOL>p zYfaZMUDO3E3_s*tgHAZlAa7-LA@5!zp_&Yh496}=UVqWwZ*h{y2Ti@m7$_oJI6Do^ z8*kLS&=~3auBi$tX)reF&;&O*g9yV&A|4eK+V={YO>KuACY9)YrLu-{Q#qkk%0Fq0 zJ#C^qK=;8pX^T`OcN`3R=vobf3C7@bc&`GzBq%Zke@}O{3rpUCSjv2~ua}F>Dd`tU z?IzT)Q3eR%@+=n!)8RiKt26uOjF^H&zbSq!hC`Dr_vT)(*L90dUTvLYJD_1b2;R6T-N$;VsNzuJgJE5F{_mfZ)9MA zi&+zqq%~pYDN-+G{2xotJ}K#kefk>FSp()$$pkCBWj23ud*5t;;Z31EIX;{ zV-`AqCg~T#B*fF(CoOHYuva`CCeYT!>o|_2dc;xv=%z~SC6Sxj+0N9;v)ddrs<><$ zW#qY+Hp(>6*qtNL*sX0Vs)7|mx681#eMVIPB?bh^-E;Ke=gL-DF?*cSdzBDVY2U#D z{zSmCxT5-%3QVQCzfoc}7W}coj`Oxo3j?F@nS*apAnK9yQ}6f{b4S)_H14=DXdvQY z=iy$(V3BQG20lfDVhP73J(&E&ZAlEUxpLFA9P$Q%1p)DPOcUvrb$o(^@H_QG@X8Ku1hB@%u7JY)dyloZjg_WgZ)W5#7)DN3VYRv?D0t-nOdOH z4?Ro=Hw(B|+4e-m?A)7Mc5_{%Sz^UT6+numAc@h?{9WrHOJ<=5eCyfFkmta zFkNHno!XhnuY=oVzRRQI=}uR?+BGC=0FK+B>`=r z;;PCNuO&^5lAWlu7D4xpdFqcE=6*kXj4Z6H%Ilq0+xc^Y$>X2wCtGi;?OudTR6`t= znNkPwchSn+x1KfTg^Up_5`&L+XS8lOQ}2(nxkU*=I_jh3hSmyU_C6De#}5Op;A2GR z&$ZJHqJlf568YRipK&RoW7-1m*ih1Q^em%%itNHTLsg#f9Rn%71u3UP`YG)&BM?|` zpa`IHYTBFvK3PVq+RXZu1Mm;s05y!pGmn@A5lyXW$6DZD3<#+CU%pcG;-oOvz{C(9KVGQ<*RQ7H zNb8%OVZ)h~d`>ZTU&gI|uFDLb#Zm%8SEys_se79noN-^YSW}vJUa4P%oKyk(!UslltCSfB$=Ez4(kN@n&YG1@Wi!?aXt^GrUd z87&#`KuL!pBc!4)RrxLfb@2JM9vrfdCxFJ4znXK#pX1-Sd54-k^6TdRX0dcFCOOsU z9N`y4ND8o;7TptuSq@;a#!{1kXgk`q7Ge{*hdd8PseQ+!8RLPl!dN5(S(SCe?dC|koctc-5r zh5OA$6D1TZ+IRrsyC{?uy$P@HpUR1P)?S#Gv zTz+rwkDAsaMeeFZ7vjz44Hi$4R^8)%>ozc{th}|*Dlj)%*yAUp9pfl-#BUvCqLr4J zldFLzwl^S8P-GI<#cs2DT@{T6W;5j{!SRrr;2#50m7zI3I~cK1SSb*-2Gah z@&Dnsrb3hiAP+@AlSM0f zx2r{X)xmeMg50AsYR0obbl6`!+*Q^jPd^2g?%xrWXxGwJlB!)RkdCH zQsuN>8PH+2@gE4k{i5_-@p|$eAm#3H#~h;1PE4>-MmtpG$@0X(bVyN?1qX9W#m9qZ zEcqK%pXAAH9^|?h^3ITknsqn>h_ycQ2b?Z`G%<8@x(8|=-y?=p*PrOP-8wma1I}u_ zW&_Y3PMky)nBK%K`o@({S#5u&X~m5oTvefSeO0WXlo4*0{ zv2(Y3fR(geTWTE9$tbPijS=FV9Bm3hv+bku6_AI6h&Xc5&Y0;ZP5#fCb_B*fa8PRh;aJ2jx-5XBNhr}559fn`+ zcx(`(v&%;xWIY%Fhnl9o=LH%Cu4(sOyq)zuutAnXSmV1Uig$_I4&W)!Fp1(Ih`yH7 zLOg5`B2HVYyAc$mH0`DM)gj#zs~xj0k+`^?JhYg0nJw_NC5Oc6Jql42mT%f4I5=~W z098?blQ1CIdtqfW8*}M0Ss>mM^E6Mk8i6Q2A@jMA=RB^U*faDwpaC+%CW05*{fb_; z;ad0gXfe`pPwIna5s($}YnW~CQ>MGm)e_O_CDS4 zwaVPH&01~8J100D;nwhAGlX0kDbVU!q1s} z7-+e8s4%hSJohBROl|?051lyA3&k=u8YPzH?_f7C;7-%889n)Ug1)jJpp17WsxKn} zGij_l4%g|~#8U#94y-+5)I%54Rc~v1bi4|!O!_!YXF|!m>}{~1qf4q962nE` zne_M)t9KaQ%W=@{Ru|Te*%w_G%DYOy!t}77&~80?%$6o%nVb&AWab()cA!#Erpg4d zFNsxYOi@HPcn?4E+v>EKwpg)wALj$fK;} zg0LkA)lGI7Hj+ODrr9YgJGQw;9Kukf!HeI)wzl)>{CGv)<@spdGxIRBX4hl|icS5h zStYyHfvESqZ#_GEuYDqPKlSu8lFU&yS~7l+C|=)h*%8^)ZQguE9PJ?3F!f(dll+_NO?`0@hb%hlK39k;BfLA<;`L#P5-p;F#pda$VLJ zXFzt2-`|;E3Q=4x2x^ShZ*_&2;t{%$w&~khHYiZ&dX0vGKs?I%tF?6biR#&zWjQaD z)Zvvv>_D3;Vv(4(V;zsf62_KWuZ3}~9Z?r_B$v@FzTdtBr&u~eqLc`Ht4By?0*i!Z zrlx(D`6K<`iohj*DqbEZPT`Azw9YBqunU$N+HJ{)$=M9YuMBY zB})g8ZUK@^Kut>iVX8Mx7H1)hHy~H5yxKj<-w_;!+%8C8ECJ5!0cy%FjpJ)hW@Z;^ z;Fv#HXkZqRKL6{Y+__urxaX=ucRuDd0hTM}6_1@V6nd;T3mOCJ3K(UN@s1z6`xL1o zD8Xo_1G6uGz)lk$c^i$hQgoMAaW^58ak%|`*6EA==U z#o1SUNdR|crS9+ajgv?7If^t;i;GF9;)D2KQN|))Zey{5u^BZuO0n51!ea`>$ZfvJ!B3=q;m<}|GMuf;}M zN{V9Lb`>2GnGcp}NoUu%n`!(01p}=+NPTA`)K-vC7sz0V#VztrLP58>6^c7D&J)ds z6nrJ16hxj4MFCAMmQ%Fob|>oI{phcccJORLE5z?A-kpk90OY06n0dh2H@UOr0Hu6^ zdO=0;IdQL?&VNOG|_ zlzWBFtqb#U`D8E;2!T-cB!8A-hOXQN&UdW@Q?F-}ea}<_BlNjw$cGg&|NZD%q$m6( z^4{ezUF`RHJ*6n%%xuVbhHPh$LL4-#s6Zwq!Wbq9+r4DcC_Kbdb*7{Qyn@fya!cpr zhD!o+=VmDDec*j#?Eae^N{tN*8E;*S59dS@O^0ILm+GrJ(Q?ht%gH^dZV?{D#M<7$sMUb zug+&Y4fmARPW&Sh84#eGA3qC#B6q|kU?h9U0Hx+b3s9FjK}ey7=lY_Cu3X-@^rkVI z^(@Qjaz_WcXIfUtiazF=vEBLRN}(R{pgBcsX1QOcog6Rl&duEnOu<6n35nK%zenqZ z>&j07WYTxSkvHuSW{xy1tV>v+2lp_PgN5;64Us{3MKOE_B*=84VNrWN1<5hRY>9^P zm^efqz)%J`)EBkw%&^XOxM_8Qf~N;16Uj6XnzUS9nnXQM zBpiuftXITy1M0OSow{{*NDQ8Ms^a&R=2o4cs8&=>e(Cmae0juJnybSvj(K<=9zTjb zaU$UjPOpHbA!ykQ2{d#x&;OUnHk?C=b~kAs4i!@NAsKo^qT zT+*-04qtmlve6M;#hoR$$h5U9zZ-NO$`d z0&!WIVgRI6N@paV-Lw1dFIeUj9>mm%FJkp{UQK9JABwx-D(PZB24Qf2`2hmS77}AD zzz30JVAYipe=NaVXQ#CY(4jU!gJrxoQ=LU(WdYl})aglUHX5yQJO5eQs%Uplsb;JL zV|K*e+hx#W+nXrc{FOI{2GC%4)`&R}ur|eGrXP;<@WwFpq1mdkWNn4Zy&F+`7Re#^ z2lUQ$ukVGu4s@-#BV%4vT-7KliaQ-f}tIm4j5`1U2PwA&yb_hMs4af0D1(bBf`5C z6(Aaa_lYh}`1IXZZEG@r&6G7@_9&!fzehT1Bm5)H)frOg^M_3kj=@uAa@hxHvZFMB z5F0k?SvTSY@Yv_fHakGqdd)J<5|tn3>)#6IdQ}Xw@-wqysdaw2v5iXsV=T<|P#7m; zZw#-`%-XG&45~kz30-@btWozVM>oT^`)pLesnv8C-b9ZQ*xYgGO6+!Ru{CkA!RzcVtc-gy6iM zj69oqoppA%YWNS4jRoaXpt1p0A?w=|y~Cc)FG!XLs^K@$l{kTZYfW1Z6R`xNVjRUG zU&lJ+V5M1RcS3FS4w$?IGKd~0M@aDTxMZ)!lTwJ(HgbrSZ+G#)l@FNnFCbx}9<#(^ zRN|KS8qoe)EZ<_9^(9*hQkk|?mzHm8j1!Lv*S^MuQ6)Eb3Wzad6*%6w9d(IzLP*L6 z$wJK=C|-yU9kT<@IAr073$V`|Q1=~}vZ;hRl}oS^C~I4jr+BYG$EgJ+Sth)PIxOzk z=n)vk{`X3>D_^e2b;XTy#zrYUK-!&%_Mw06>7j|DU9b7>U+F?hQ=eL~ni`TYCE%iD z^KD~=G%BfZl25)D^{sL`{K_8TP}20fvBrh2 zV}g+kCd=$g*lQrzfbZFm(|9ZDSW_!-3IoN;}+gD1MvK#1rCok8Z6t0Vf z1EXiJgCMK$i$;Acl~=NoH@a5!Abcl;I3T28WqHNQp8}8MmRh9#~TuzkBc{mUBpzEf}9%SMuClL zzUHmVSq$SR1EGX2Z(tevZ@a^Q9V7i7!_tK(XBk^sBk@s1sNrSbf@?!75Ff!FrR{LTKOBN7B z3)nS8H67VMYbx}YK*9Hs%HMmA@+e??jDT^nGmiU#ii9ntE9FjiH)eMpx;CpbDs6$h z^CTCi1bSpj!w}a4tD<%EoGwG>?{RX-q7#tg8|CHP+v(RK3mnz4fq=<=~0;8fMiB;v_j6CZj?;xds%A&$jT>hcnglf zTg$qE6c^_t_VR0=nj>Hu8YiipaCv#X@|jP0*^@?lg|ViP+CPj}sl@uWFPE(3qR(0Z zf#Yn29W37KFmzm%jk7g|A*#H;9|JAPre3OX-vg}xHxg4cY7@@%jqTSt7+=o@w5+ZV zi%QB6Gl6R25E4RyOH1wYcMB)?dbWw>5-^HQz9>?ZaoW%FeZ$Cicg$1cOV|Z6)C-(D z@>ucYnxF+%=EvV*~+TjD%6X3G;l2#|1h8pq^OMRSua+yg+h5cHGWp;PZDgdJ9li(6MVBwbICCaBuYj zcII2)YQU7m!8_2nNMbVxeoch?Bj)nceNE0#?$XN@Xy$96#dOfHyEe;!u-!iSO@D`0 z;v24&9hRo&*;}%VjTQ)(gu|Sw3Tn+54w?p)VePjEbyM63&?K~EM!^4k%({^(d@tt& zm-t>lIQ+GX9pH7}Je;k2a?uGmAVNA92~!ik|7GE;?iDAjYSueH5BA`$1!P8BPm$}@tt{i@^U%! z2W+*`BK3YFYHC}w@c}_o#&y*?D2#4Z@7)ngZ=$dY2j3pj)YkHnZ6NmRD8l;zY0O=t zoz^1L5Ms8*3QVVooH)%t$YI&Dq0_*P_>tLMT^w|LIDmJ4P3sa2YejRgDQXUZWMe?2!0 zG7B+I)j_N4`E<2%*`!|T$AaXGV5BABkq4$oeai3fze~m6%21(>iTB^OYrCp~s3f;l zG<j3)kIwq|xGb)xyzx)XcYQLP&l-$Y3*dCo- zq4Agk#ya=xO*V=4-Djr6pz_t+db$HNRBGA=Ji(HDTKmJkK434UnqSWtpQ_k%ae)lh zr^JxSbjlim)Q^lUIt*^2B9a^Rv=ZT;_ZuX8I>J94ss2igt9$~dC=*8yK!A=ny~kp* zq$M`@!PbWEXNw|zEr=2;%K$V*t~EZ_OzjE;*mCuQ|6Zpkbie^4=l1w)2FFYgG#A%<9ogtULH=5?Bk=CiJ;XSNMF5ox@)TavtWl$4u0G|MA^x$3RhKZS!@ zw+K8l=bN&&tgNSShCYQOg0!iNmi!(;0(HY2Kw~ ze|SfZtKA3l8Ezt?oJK=lS;0J5C2Mb2Einwqm&i`(W551K7AjlG^oAs-YaJ+>fd7t) zP!6Yc7SzjZ70fO@>Y*O8(*EeWq!syAO%LV+;)CUD>;pG0@fG>R5o*Jn41jk@jPqZi zu(ny)V!DB{N~S6!XEWTh3JZ7eYgDpOXCl4%vxTOi3!R+s)hdj*BXt1hvp4Bbef&!- zTOEk28xWL)>L$D~otIsuyNy=m!5+3^Q+XAIAV3ng7%)w#E%nY3n%bJVi{PoWCFa|t z2)4g|bjEac*Ln-t6EEL<9ZM?{jRVfRgIY&8wE|B@Z>3gDGG}a%2%<{`*;Di^v#s)- zQSz5Wrvia8*HWX=Y%R6=!Y}$uOA>Xa{ThU;Th+{I^b*viL90M4&DWD|b4J0wMhjyV zg0yIw)~RMwMB~0-#hAzOeu7Nvc8SRpDXM@P@|(wx5LB*u)hz8rW^=Ak;GzuA5QX=- zZ3{avPn{T1{0&bz-a%_|$k2xt^5f0`gYM`ML6qLWH2wjM_6_;^Rv;E4$&BHqhJH-(-$- zJR-PvDM%ujs<1pc=LfBtBf2RrkC2HTJ&$uB*cZ zAHK%SZlho1VSjJf36hO}HM@3azGrIonUE(a9b;x_m>n?o-AASV9f^(8Ix0udW;AZ> zsuDdq0mpPnZkALkr$lG8&sr^(bJJ)&RR=CBw^3wo9{*FT-~Qw`)q~`}=vjq+ASGV3 z0PJN#z?Q}Y8`bIq7*XFr9DA>MfZtx{rl@kyLk{Nut0!dg(I9~3G6thbr59a2yGJP4 zILX38zxUgCpRgN>_%4>?*tA#22Q*Z>PWaU-CEe4SYba|F*M)q6@_ynwD)kO*yWBE2 znFGROC$GqB6evQ0q|#rrd~Op1?*tWOPNg>Xq$E49+VVy9^ZWB-)WRI1ckH^CPu}ZF zRVRlQw?r0!PIK3I_>eE?Vp!Hj{IW{<&NyXh|>`HK!ae#v0b#X763 zzZA50%%26&r#=pb*7m(PpGa+nE(sPsBQ@kG9SG!b(c?6WM*_P~dJ7p56X_tt)E<^a zl-;714L`}XV9G_Pj)>SF&j>{jpyZE9x{bAe-|11MTB!* zX+@MuJP$NYs}pz=oB_7nib;bcXRLE5i2 z8^6PSWkfMPf~H5vn8$SRX=aBjmM$w;Sh0YiXbcwJ<2x|mss~M#g73elA6L`|nCxg` z+O^)F;O9dTOwAfzN67|IvylO`wv-mqX33AQhnSs3b!vfPaIIC$9|A99HC z9)U;OCR95Wcj;7F@VYIu7fdsmpLM)dE)23soFBMTGNzJ?oC?1i7Ts@{y z&KUb3?~fzn+3J&fJmbzq(KFk~6ziq?E%v|)w0SJuuHyxmI?B=D25ft zD*^P2ygB5Bgj0@b%=M#**XwB9K{ojK#)ezYjs$Xv;xlZxP?e!@xc z(65*(3X!VW$mbJ(3%-%2I@Dw*5Fhr_P`&-P5r_8eiH`K?G`=FkjeZpr&kJ7@SHrn+ zL;|c}G3!=J7dFX+hICsSNYD2HSpf~!LM{W?5D2O6E(Sr{P{E`Ei69Exv0uxysb=#0 zyJF$BA7vn9%y6T%vX^<7=*Kc=C8=t3eV!5tx>h+dM7@GCvGJ>oVOL`ah+O^du-$KN zvQYF(83cT2@FozGSFBOt(v9y=>ab;*=i34Sd93D-!g{*|YDoixz2SvAQ~_s!nR z_9b+ztgTd}oVtky$G{}$Xxh%90~g6v3D%`=2$fGA3Jn5ZuJ3ma;AihJ$8Aq?){j;iH{O2-_P1sCE2KMwOD60jM zqOe&M22f>-kyE8}8XQ(Ei;_+AqVN9FEjgvY&(_YlR%k|tFvgxYHpcp^R-F6OwJ9S?|*rxVmjE_`{3|0VIj zJ+?>$v27eahjwj8p9+bQ56Q1FwT;f_tYu(+@#vG?fM`C5K?dCxsvvJ1 z?W(o>%)ro9`jx9$B(dJ+J*m^sI7C_IIP;-+`QdgW?y-|NLc5@s%|-#%Pd@8jW)AkTqm-3CQbmgsmC&} z-Gy)nT!pM@H?6yH5)_@u;molW=Ek0C0SJj=s|W&UqR#c%XG1EzXd!KMcSQ{3i(L~bF` zt2w(`ZZ8S}`lnlbG_fvSlLh-B4sMnld$f#+~XVo8mjKc;VXWd~U#5U;5zOQ&aMe^+!4keGN_h0$mu zxDi^w-6A$LYW(UeV}jBDolP7G=*6rJoJ~YbjO>g}p!oQpoSYp^3~Zp>*RQm+oHm9N zd{1iA#I0H+CO_+wxl|HxvsdeIclJ3hP6G-E5E(^BK`=&6R&G|93FwL_l$vL*CsZW| z`efYXpI1^bf%5dTC`&*VWXvau45X-z)8GO;OdIuu7!DYz)05#uCb_1A4dlw=|4d>I z1RK%0lX2eb$0c|$2*>~gEz^J|(BM!_pTE`WYm(eKr1C5#iz#MYmr-fwg;^Y}bIL*+=?DjE0j1VBwu2BasTLe60&v7j4laPB{rJ$+R_rfrDuDbiabgT* z6zHlVf;x53ILK>6`ag>PnhT_lJRuldLc&G}kdQ-J1u+Z65fb_O=-SXoG8(eDy_S@L zuq7~K;e?ZtamWs!A6~+Z1VIvpp~GQ_nn8g|9Sm=K;3-|EYy1=Jq!V~`&rp*05hkUg zKEq$P@G`OW?74Q1DP3v0M}?OLZB_RsI*iiJg_kP2$rnpBwFr+6yBfZVGVkp3VgOi>|Wi{o+Y+c!~XfVUY)+F27N7WSZ_$PeF@yy^I01Kzh zKY!jM(zWEjf60`G7b`pZ762B{n;IsAZCyNiz^1P)7`_s6f9-{~3c2!BMmnZ)&)GDb{a5^Lr z{E{yUd$d3bj0UrR?#Z(|IdkjzW{*54h{a_`wq0}VQqQ_7RF0q5WJi=Z29}6MM2;rl z4ORw!p~exB8qIIS6QLrLI25KZ;3pjuEc!E!Q$$sP@rNr4MLk~vUnoM8i&5f0SYnUH z2|*bNlK4~5Hu;6cRr;KA9JnySQ3|w`lC+MD&4;Q!6G^zEa%UE!qI`ZV)_pS13NU@h#YRMvgF5uuHrT0Zn>4*t`vM(LW5bxMI?d z#htZbc01e0h$JD^RI2Zugdp<_o2;Ih`yD0B@<3>lXvEdv<)8Kv- zX16zAyIDO2$H5s!mUzGJ!B?{Q=*ua~H6BCF7HP^T%f`wzekmy_JxcB<5tr}T$SX42 zjy(LGe_WH_XgZKG6MvUY>?rwMUAJF5=j_m#;Z5m|g4(XDSl4;9skB{sn${Y;>wbZF z%F3{a+*6TO*{ZAA)_I0x?NPih=@}NKuC+yv;G(@ouzMPm+|F=uf-cA;)oXM@oV*|; zz@;*=dZ?jSrR{U^tFaB`hY`M^`*T^tsyO7*@zA+ce&1(0HglD5k^MsPJAY@b)4ERg z;mocZHr9(JiT70uv?AmMaQG3vDjp5JhP=qKMpc9If>m% zI8XkuJb9^F9j<9L&b95ijbFQ|Psg=}8>@>w!IsEp<-1|dD}LY})lxWFg9&b#66qk%WPKl4R?+!TG^-Sz_NgLX0^3&NQKMco-CpdP{@}-}C3A z(7~N50^nP9$Z^vU5zGw)2|2$(C{{&m5{{h*nUOVdNiDqZj!Kq|=*PM|MT=1|`XA<+ zNCF9N0Vq*i>zixshbc!6fl4x`67d)#>{>GxI4@kC-7Pvk)p8hzIE()4E{3FHwl5*R|lnfWiQ)CoO%?g=S`BSXqwY<^)N4 zuF)R;wv8oy50Q@{HZIFn9sYaa3dXaQpk-KTM;!W0bHr+^@bp-DLz;PKo(;+9Vowrx zMUuA=#D>SY8j=tlsEukaFf#{ZkTz@tcKkvDca%>MUTW8|2-Zf~ROtDj$_kPvkY@06 zip8f^2smpXRoSs8#<`J!*WA3lylJ~hGZQWv1vS0^Gv8}dk-|juLk1hanPY`Opb!?y zf<+-yEJ2M(Pdf9sDPP6;a28i3OB$ls*P4>fItn^DN^C5z)IN;j5RccRE|_Hr`q0sS ziYI!WnI2m@Eeum)&h!E7UZVK49IkuAmQIGCRDwLSfS8?Byjbx{m{^2b7^;yMa}<1w zN3oPK$n*4|2_4o>I{6qyTb7m*`+d$_{9<1jfSDxSCVu)MZTeS5$SIU0%Q_?!1EOKU zd=SU>FzXmb>RjnSo94fr=C z!Ao$K@Jh^B6`E)c@`D&8k9Q_w*sY$T1QcoX#~IHSk<*yL!p@B9h|G5FVs4a~(v>ui zy9@anx!CXfvj(-JM`y~Hmm+O#e|^TTiZr<-@>{$yb+3tGrdeXW>;0h421QrxsZ-q_ z67eM7tnH5^bhZ2A1hk^IItYY^)*QNswc9((cxJwF-IdozEzc+R@oiR_RRRJdKAkzA zc<{9W_xC5sC!TjwulTOUqni;x=O6wfdwNUGL9kYq5N!xlARTG!y zX+C_?DS7BBG~;i+=~MttpRc!*o$V(7(GCCykg!s-JvyL$Pk(n_fM7a!z~Im>e;hM% zfTNL17N9#OAs`Obg|*O5-NV$!k{%-4JP{0?{aWo>|HY5{DIPsGe;0d|S3QjCgRTpn zO8#X38>J`CceQRRaEkNyyqA};L_a>yZRkq1*CkIzoh!g!4iPjs&ilmHgkA!7d{Ldi z@i&6APk_pX=)K~I{U};98K*=Hdcf0qhz2+HJ4Q*_wdj#q`dP`5j^R&lp6eiZ0h%P* zwQr+em~}dbDoY~9ZIgiauv_v`a1mXHIho!nN$6`Mmj_(6`-LH~7xmNh)9B@iWeK4* zkwwByX{z_MdY_W_y<{M>H3qCcXHoU{z}u z4fuuZ5oG%DTfoepK9k-KZ!brQCKv#KH^ z5OoJhd~LzPiIBwjOI3UEK0>!UvItxBOtwvn`JS%&2^YPkk!eG7tV=WGCT|IMq?UGQ z6CEWn+whv3!gWN^NV@LN!N{zd%&KZ#Z%>e+8xGv>h&k$1H!*cR=388rjh=iv>SpA( zbr=+pdp6KgU0$-~)G@Bi6n*szjD9txDQ4?oG8C zw5HJ?q(nq-M5^+^tv}jY%h>GtS?RA?YF&!laGIs==`TDLX(WXf!?x$5trCQ;M3Lw; zr-8H(x)8Fr*$UN)jA}jF35tKDsw{@ew1z~c#WD#?tvO$-1xi?L=npkr z3WBgJvA|;=6*?iYZ--$A7qIty;tS}RU_>gSCAjX181Q+h%nnu_omKGb9(-qmMmS>T zu^AGcYmN{KY19s4)m4g&J^!ARdV0sNEEqb7@Hd7T9XadF9Jx1BoIVyg==hGN zF1;uz&P=%Q=FsuSo^ADgg!w)oVA{rY8nh%%hDYgLL%Qka%LRXcy2GF!udrFqdFwYSEAM!duoOgZ{x!E!#K+( zCPlZDcERX&Fro4@57o7LlfrX!54R}oqb1m0d~=sJs#}H|qo3%S!rs_a*+iX|k&cCdj){>H zieAvg+1$>NLYtYL?dQ*~&A`B*@sBY0N7(+C&}Lv^_(u`_M>zc>?EevV|D{^|Q*!>d zj*?#4!r9v7|I?@NKS%zx`M0srzlQ&a|Lj=qziR&N#N;20fh(`6T?rEK^8_PMs@~H7Dj3YCUOP_@*g`{JLCV8iL#@C zy}gO?558ew?PLN)ub?cdPABGKZEa{^Yx|F9l+7)i2!4M5;UO9VRTD?2pP>nu=@?lU zSvi^5SZSH)*#6UVKlUc-1Tq$`CIml|VxT0jvNv!xcQP>`aQ%PUvC%QpF;V^lp_tej z+ZkFyF*36Lw_DsJ!C=jnpp$ zgd}3Nd_kT}I8-dFAex4i;osZE{Ra0YW@cQVVU(o+(iwwcsMCQ(lm^@?TAtuJyKMr= zvBB~8@pHWif4a_-1_o)^Roor+kAS$|DJt=*VJb^!qZnD41q$5rL9u1M`_H-3l zQ)ijW3a@JD2a9#5{aM&(k}3r7{#1)8z*hZe*8_j=TTIxh%9_NuDBf0dt^BO$MsSFWnv0NFKKIR;!dE&K)}evpaVs(WZ`M@PZ5e4*n_c*o?iPA{YS~!1Whf$2FE<$8o*SnC1t+CKV%UH)8iKp}n+Kww z>`)jGMF`Ql7Y${AFPH!Z5uz7RBp<|e4`DnXY+N}|@Ld{)$^gD152%6=4$?eCGueEy zW=W8jMSz$^khxKSn?z;*8@@>pTw9R5XcwtH51TFz+;b1-Ef0TM9{_9*Wu5_qoB@W| z9tKlAND(8*1tSzPEtoRxH)fiOR2;+*_R#sPI`CXPjW=n|I`0Y&IXRo?v6hW SXXIpOW@3dRB^8wygZf`Rhv>!t literal 0 HcmV?d00001 diff --git a/archives/TODO.archive.org b/archives/TODO.archive.org index e7b376f3..cc9c83f4 100644 --- a/archives/TODO.archive.org +++ b/archives/TODO.archive.org @@ -9573,3 +9573,453 @@ DEADLINE: <2023-03-06 Mon> Les nouveaux propriétaires vont déplacer les contrats. :END: [2023-01-31 Tue 12:04] + +* DONE Answer to Austin Haas about clients :chore: +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +:LOGBOOK: +CLOCK: [2023-03-09 Thu 11:03]--[2023-03-09 Thu 17:06] => 6:03 +:END: +[2023-03-09 Thu 11:03] + +Just by looking I think some client probably disappeared (in TEST). +From what I looking for, most clients belongs to Chris Sims who created specific +Orgs in all ENV to create the modules. + +#+begin_src +NAM +module-id: d80e8041-e8ed-4d42-9b4c-7b0a7a4a6d1b +client-id: client-d8d91871-2735-43e6-bfca-ed4cb6b89f23 + +{ + "scopes": [ + "integration/module-type", + "admin/integration/module-type:write" + ], + "description": "Used to create and update the Threat Grid SecureX module type.", + "approved?": true, + "redirects": [], + "availability": "org", + "password": "$s0$f0801$MG1GFImf7eHwuRKfqg8H+w==$W2h47bWx0Q3rTRjfidgSXvA+cGCC7b1AeqCh+z30978=", + "name": "TG Module Creation/Updates", + "org-id": "964a8c3b-9aef-4e1d-aadf-e2754004d230", + "enabled?": true, + "grants": [ + "client-creds" + ], + "client-type": "confidential", + "id": "client-d8d91871-2735-43e6-bfca-ed4cb6b89f23", + "approval-status": "approved", + "owner-id": "2f6ccd76-270e-4785-a33f-ea24400bc5a5", + "created-at": "2020-05-11T22:13:49.892Z" +} +belongs to Chris Sims +#+end_src + +#+begin_src +EU +module-id: 28ef9a98-cd14-4a11-a2eb-6b80c5bb82fe +client-id: client-6f81864f-04e1-444a-ac92-e242797ed12f + + +{ + "scopes": [ + "integration/module-type", + "admin/integration/module-type:write" + ], + "description": "Used to create and update the Threat Grid SecureX module type.", + "approved?": true, + "redirects": [], + "availability": "org", + "password": "$s0$f0801$7G0SDYzMCP2zNbDhi37Ahg==$ijMPk/LtBcTZlsifNl571QDOfxX4lQzcsIOFJYgnF3A=", + "name": "TG Module Creation/Updates", + "org-id": "99c5cf95-7788-4ce1-906f-86811aa57752", + "enabled?": true, + "grants": [ + "client-creds" + ], + "client-type": "confidential", + "id": "client-6f81864f-04e1-444a-ac92-e242797ed12f", + "approval-status": "approved", + "owner-id": "3f6edf85-9ad3-4098-be43-0b46d117f9ca", + "created-at": "2020-05-11T22:08:04.428Z" +} +#+end_src + +#+begin_src +APJC +module-id: f82062a6-5b17-4943-b67e-2555bbcc95d4 +client-id: client-73096290-4908-4a9a-bf0c-b29337ae58f6 + +{ + "scopes": [ + "integration/module-type", + "admin/integration/module-type:write" + ], + "description": "Used to create and update the Threat Grid SecureX module type.", + "approved?": true, + "redirects": [], + "availability": "org", + "password": "$s0$f0801$qCVLku7mTWOAdzqWoMV/yA==$BTeIKEL2EcHdL0/wR4Q5CfYHjDlinDhiTSaGN0fXJKg=", + "name": "TG Module Creation/Updates", + "org-id": "4f169b08-bb0d-4e97-a358-8fd3fd819066", + "enabled?": true, + "grants": [ + "client-creds" + ], + "client-type": "confidential", + "id": "client-73096290-4908-4a9a-bf0c-b29337ae58f6", + "approval-status": "approved", + "owner-id": "fe332b50-62ae-4ac9-8eb0-4b9b39565bfc", + "created-at": "2020-05-11T22:17:37.247Z" +} + +owned by: + + "user-email": "chrsims+apjc_modules@cisco.com", + "user-name": "Chris Sims" +from Org: 4f169b08-bb0d-4e97-a358-8fd3fd819066 +named: "Cisco Modules" +#+end_src + +* DONE commander gâteau +SCHEDULED: <2023-04-06 Thu 11:30> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-04-06 Thu 07:23] + +* DONE goûter chocolat +SCHEDULED: <2023-04-06 Thu 11:30> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-04-06 Thu 07:24] + +* DONE acheter lapins lindt +CLOSED: [2023-04-09 Sun 09:17] SCHEDULED: <2023-04-06 Thu 11:30> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +:LOGBOOK: +- State "DONE" from "TODO" [2023-04-09 Sun 09:17] +:END: +[2023-04-06 Thu 07:25] + +* DONE Appeler pour https://www.seloger.com/annonces/achat/maison/martigues-13/199825337.htm +DEADLINE: <2023-04-17 Mon 09:10>--<2023-04-17 Mon 19:12> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-04-15 Sat 18:12] + +* TODO Appeler pour https://www.seloger.com/annonces/achat/maison/martigues-13/199825337.htm +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: TODO +:END: +[2023-04-15 Sat 18:11] + +* DONE [#B] Payer le loyer +DEADLINE: <2023-03-31 Fri 16:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-31 Fri 14:08] + +* DONE Récupérer tous les documents pour le courtier +CLOSED: [2023-04-06 Thu 07:26] DEADLINE: <2023-04-05 Wed 16:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +:LOGBOOK: +- State "DONE" from "TODO" [2023-04-06 Thu 07:26] +:END: +[2023-03-31 Fri 14:06] + +* DONE Appeler Orange +DEADLINE: <2023-03-20 Mon 11:45> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 11:44] + +* DONE Envoyer demande de remboursement +DEADLINE: <2023-03-20 Mon 12:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 11:41] + +* DONE Envoyer justificatif de domicile +DEADLINE: <2023-03-20 Mon 12:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 11:40] + +* DONE Acheter croquettes chats +DEADLINE: <2023-03-20 Mon 16:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 10:01] + +* DONE Passer grain fin sur la table +DEADLINE: <2023-03-20 Mon 15:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 09:58] + +* DONE Appeler le banquier, envoyer les documents +DEADLINE: <2023-03-20 Mon 10:30> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 09:57] + +* DONE étendre le linge +DEADLINE: <2023-03-20 Mon 11:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-20 Mon 09:56] + +* DONE Payer le peintre +DEADLINE: <2023-04-06 Thu 15:00> SCHEDULED: <2023-03-30 Thu> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: + +[2023-03-16 Thu 17:03] + +* DONE Publish composable nix-shell +SCHEDULED: <2023-03-06 Mon 15:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-03-01 Wed 10:15] + +* DONE [#B] Payer le loyer +DEADLINE: <2023-02-28 Tue 17:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-02-27 Mon 10:54] + +* DONE Appeler l'assurance pour les cartes des voitures +DEADLINE: <2023-02-24 Fri 10:30> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-02-23 Thu 19:49] + +* DONE Appeler Bastien pour samedi +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-02-17 Fri 08:56] + +* DONE Supprimer Assurance Habitation Valbonne +DEADLINE: <2023-03-22 Wed 16:00> SCHEDULED: <2023-03-20 Mon 11:45> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-01-31 Tue 12:05] + +* DONE DL The good place +SCHEDULED: <2023-03-01 Wed> +:PROPERTIES: +:ARCHIVE_TIME: 2023-04-18 Tue 09:41 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: + +* DONE Check ~nix-portable~ to create fully portable scripts +SCHEDULED: <2023-05-03 Wed 14:20> +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-05-02 Tue 11:08] + +* DONE Envoyer un mail au notaire pour la date +DEADLINE: <2023-05-02 Tue 11:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-05-02 Tue 10:42] + +* DONE Regarder sans soleil https://www.youtube.com/watch?v=fdusEgrbhgA +SCHEDULED: <2023-05-05 Fri 21:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_OLPATH: Inbox +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2022-11-26 Sat 11:04] + +* DONE Envoyer mail au notaire :chore: +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +:LOGBOOK: +CLOCK: [2023-05-02 Tue 11:09]--[2023-05-02 Tue 11:28] => 0:19 +:END: +[2023-05-02 Tue 11:09] + +helped with chatGPT + +Madame Moreira, + +Mon épouse et moi-même sommes actuellement en train d'organiser les préparatifs +de notre acquisition immobilière. +Nous souhaiterions savoir s'il serait possible d'organiser une signature +définitive avant début août. +En effet, cela simplifierait grandement notre organisation. + +Nous avons conscience que les délais sont assez longs, et nous craignons que la +période estivale ne complique encore davantage les choses. +Nous sommes conscients qu'il est difficile de prévoir avec précision les délais +nécessaires, mais nous espérons qu'il sera possible de conclure cette +transaction avant septembre. + +Nous sommes également conscients qu'il est nécessaire de signer un compromis +avant de commencer notre dossier de prêt. +Nous nous demandons donc si, étant donné l'avancement actuel de notre dossier et +si tout se passe sans anicroche, nous pourrions envisager d'eménager début août. + +Nous vous remercions par avance de votre réponse, et nous restons à votre +disposition pour tout renseignement complémentaire. + +Bien cordialement, +Yann Esposito + +* DONE Répondre au notaire pour le RDV :chore: +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +:LOGBOOK: +CLOCK: [2023-05-02 Tue 16:51]--[2023-05-02 Tue 16:54] => 0:03 +:END: +[2023-05-02 Tue 16:51] + +* DONE Inside Man (TV Mini Series 2022) - IMDb +CLOSED: [2023-05-06 Sat 09:05] SCHEDULED: <2023-04-30 Sun 19:00> +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +:LOGBOOK: +- State "DONE" from "TODO" [2023-05-06 Sat 09:05] +:END: +[2023-04-30 Sun 14:18] +https://www.imdb.com/title/tt10948716/ + +* DONE Check projet zomboid +SCHEDULED: <2023-05-06 Sat> +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-09 Tue 18:37 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org +:ARCHIVE_CATEGORY: inbox +:ARCHIVE_TODO: DONE +:END: +[2023-05-06 Sat 18:10] diff --git a/famille.html b/famille.html deleted file mode 100644 index a6d98b15..00000000 --- a/famille.html +++ /dev/null @@ -1,472 +0,0 @@ - - - - - - - -Vers l'autonomie - - - - - - - -
-

Author: Yann Esposito

-

Created: 2019-09-05 Thu 16:06

-

Validate

-
- - diff --git a/inbox.org b/inbox.org index 0a4dcade..917a726a 100644 --- a/inbox.org +++ b/inbox.org @@ -10,61 +10,109 @@ SPC y o c => DISPLAY org columns #+end_comment * Inbox -** DONE [#B] Payer le loyer -DEADLINE: <2023-03-31 Fri 16:00> -[2023-03-31 Fri 14:08] -** DONE Récupérer tous les documents pour le courtier -CLOSED: [2023-04-06 Thu 07:26] DEADLINE: <2023-04-05 Wed 16:00> +** DONE Réserver le camion pour ce week-end +SCHEDULED: <2023-05-16 Tue 19:00> +[2023-05-16 Tue 15:42] +** DONE [#B] Signature notaire +SCHEDULED: <2023-05-15 Mon 13:20> +[2023-05-15 Mon 09:18] +** DONE Aller récupérer dernière quittance de loyer sur foncia.fr +SCHEDULED: <2023-05-08 Mon 10:00> +[2023-05-06 Sat 13:02] +** DONE Demander aux notaires et banquier, virement 24k +SCHEDULED: <2023-05-10 Wed 15:00> +[2023-05-06 Sat 12:23] +** DONE Dossier Courtier prêt +SCHEDULED: <2023-05-10 Wed 11:30> DEADLINE: <2023-05-12 Fri> :LOGBOOK: -- State "DONE" from "TODO" [2023-04-06 Thu 07:26] +CLOCK: [2023-05-11 Thu 09:04]--[2023-05-11 Thu 10:24] => 1:20 :END: -[2023-03-31 Fri 14:06] -** DONE Appeler Orange -DEADLINE: <2023-03-20 Mon 11:45> -[2023-03-20 Mon 11:44] -** DONE Envoyer demande de remboursement -DEADLINE: <2023-03-20 Mon 12:00> -[2023-03-20 Mon 11:41] -** DONE Envoyer justificatif de domicile -DEADLINE: <2023-03-20 Mon 12:00> -[2023-03-20 Mon 11:40] -** DONE Acheter croquettes chats -DEADLINE: <2023-03-20 Mon 16:00> -[2023-03-20 Mon 10:01] -** DONE Passer grain fin sur la table -DEADLINE: <2023-03-20 Mon 15:00> -[2023-03-20 Mon 09:58] -** DONE Appeler le banquier, envoyer les documents -DEADLINE: <2023-03-20 Mon 10:30> -[2023-03-20 Mon 09:57] -** DONE étendre le linge -DEADLINE: <2023-03-20 Mon 11:00> -[2023-03-20 Mon 09:56] -** TODO Payer le peintre -DEADLINE: <2023-04-06 Thu 15:00> SCHEDULED: <2023-03-30 Thu> +[2023-05-06 Sat 10:10] -[2023-03-16 Thu 17:03] -** DONE Publish composable nix-shell -SCHEDULED: <2023-03-06 Mon 15:00> -[2023-03-01 Wed 10:15] -** DONE [#B] Payer le loyer -DEADLINE: <2023-02-28 Tue 17:00> -[2023-02-27 Mon 10:54] -** DONE Appeler l'assurance pour les cartes des voitures -DEADLINE: <2023-02-24 Fri 10:30> -[2023-02-23 Thu 19:49] -** TODO Appeler Bastien pour samedi -[2023-02-17 Fri 08:56] -** DONE Supprimer Assurance Habitation Valbonne -DEADLINE: <2023-03-22 Wed 16:00> SCHEDULED: <2023-03-20 Mon 11:45> -[2023-01-31 Tue 12:05] -** TODO Regarder sans soleil https://www.youtube.com/watch?v=fdusEgrbhgA -SCHEDULED: <2023-04-07 Fri 21:00> -[2022-11-26 Sat 11:04] -** DONE DL The good place -SCHEDULED: <2023-03-01 Wed> +Bonjour Monsieur Pau, + +Voici un lien qui vous permet d'accéder à l'ensemble des documents que j'ai +rassemblé pour le dossier de crédit. + +Veuillez noter: + +1. Nous n'arrivons pas à retrouver la fiche de paye de décembre de mon épouse de + son emploi précédent. Et nous ne pensons pas pouvoir retrouver ce document. +2. Un de nos véhicule est en LOA et donc il n'y a pas de prêt. Sans avoir le + tableau d'amortissement j'ai tout de même ajouté les documents relatifs à + cette LOA. + +Bien entendu j'ajouterai dans le dossier le compromis signé aussitôt que +possible et je vous en informerai quand je le ferai. + +Très bonne journée à vous, +Yann Esposito + +DONE: +- tableau d'amortissement +- titre de propriété de Duflot +- 3 derniers relevés de comptes. +- RIB compte principal + - Dernière quitance de loyer +- revenus fonciers +- récapitulatif de l'agence +- bulletin de paye d'avril de Krystelle + +TODO: + +- Allocations familiales + +- Banques + - documents pouvant justifier l'apport ; Relevés d'épargne financière + +- tableaux credits des deux voiture +- Dernière quitance de prime assurance habitation + +- compromis de vente +** TODO Rappeler mairie de Valbonne pour suivi dossier juré. +DEADLINE: <2023-05-10 Wed 12:00> +[2023-05-02 Tue 10:40] +** DONE Finir dossier changement d'addresse carte Grise +DEADLINE: <2023-05-02 Tue 18:00> +[2023-05-02 Tue 10:39] +** TODO [#B] Préparer une TODO list post-mortem pour la famille :family: +SCHEDULED: <2023-05-19 Fri 10:00> +[2023-04-30 Sun 09:06] + +1. Fermer mes serveurs +2. Trouver mes comptes +3. Récupérer mes access (mots de passe, keychain, etc…) +** TODO Renvoyer ficher de renseignement et changer de ville +DEADLINE: <2023-05-10 Wed 16:30> +[2023-04-24 Mon 15:11] + +Changer d'addresse dans la nouvelle commune. + +Renvoyer le courier et je ne suis plus sur la commune. +notifier que je n'habite plus sur la commune. +Avec justificatif. + +Envoyer par mail: election@ville-valbonne.fr +Envoyer: cmazzocco@ville-valbonne.fr * Perso :perso: ** Habits :habit: +*** TODO [create-tasks] Personal Flagged emails +SCHEDULED: <2023-05-18 Thu 08:50 .+1d> +:PROPERTIES: +:LAST_REPEAT: [2023-05-17 Wed 11:21] +:END: +:LOGBOOK: +- State "DONE" from "TODO" [2023-05-17 Wed 11:21] +- State "DONE" from "TODO" [2023-05-16 Tue 15:41] +- State "DONE" from "TODO" [2023-05-12 Fri 13:44] +- State "DONE" from "TODO" [2023-05-11 Thu 10:09] +- State "DONE" from "TODO" [2023-05-10 Wed 09:44] +- State "DONE" from "TODO" [2023-05-09 Tue 11:00] +- State "DONE" from "" [2023-05-06 Sat 09:06] +- State "DONE" from "" [2023-05-04 Thu 11:34] +- State "DONE" from "" [2023-05-03 Wed 10:17] +- State "DONE" from "" [2023-05-02 Tue 17:50] +:END: *** TODO Reading List notes SCHEDULED: <2023-03-21 Tue 09:00 .+1d> :PROPERTIES: @@ -137,11 +185,21 @@ CLOCK: [2022-06-08 Wed 09:37]--[2022-06-08 Wed 09:59] => 0:22 * Famille :family: ** Daily :daily: *** TODO Attention gentille -SCHEDULED: <2023-04-05 Wed .+1d> +SCHEDULED: <2023-05-18 Thu .+1d> :PROPERTIES: -:LAST_REPEAT: [2023-04-04 Tue 22:57] +:LAST_REPEAT: [2023-05-17 Wed 15:58] :END: :LOGBOOK: +- State "DONE" from "TODO" [2023-05-17 Wed 15:58] +- State "DONE" from "TODO" [2023-05-16 Tue 15:41] +- State "DONE" from "TODO" [2023-05-12 Fri 13:56] +- State "DONE" from "TODO" [2023-05-10 Wed 10:34] +- State "DONE" from "TODO" [2023-05-09 Tue 10:51] +- State "DONE" from "TODO" [2023-05-05 Fri 16:55] +- State "DONE" from "TODO" [2023-05-04 Thu 11:42] +- State "DONE" from "TODO" [2023-05-02 Tue 17:49] +- State "DONE" from "TODO" [2023-04-28 Fri 10:11] +- State "DONE" from "TODO" [2023-04-20 Thu 15:43] - State "DONE" from "TODO" [2023-04-04 Tue 22:57] - State "DONE" from "TODO" [2023-03-31 Fri 14:07] - State "DONE" from "TODO" [2023-03-27 Mon 10:57] @@ -165,64 +223,14 @@ SCHEDULED: <2023-04-05 Wed .+1d> - State "DONE" from "TODO" [2022-11-17 Thu 18:10] :END: ** Weekly :weekly: -*** TODO litieres -DEADLINE: <2023-04-18 Tue .+2w -1d> -:PROPERTIES: -:LAST_REPEAT: [2023-04-04 Tue 22:57] -:STYLE: habit -:END: -:LOGBOOK: -- State "CANCELED" from "TODO" [2023-04-04 Tue 22:57] -- State "DONE" from "TODO" [2023-03-20 Mon 09:59] -- State "DONE" from "TODO" [2023-02-17 Fri 14:33] -- State "DONE" from "TODO" [2023-01-23 Mon 17:33] -- State "DONE" from "TODO" [2023-01-04 Wed 10:50] -- State "CANCELED" from "TODO" [2022-11-28 Mon 12:05] -- State "CANCELED" from "TODO" [2022-11-14 Mon 10:42] -- State "DONE" from "TODO" [2022-10-26 Wed 12:15] -- State "DONE" from "TODO" [2022-10-12 Wed 10:02] -- State "DONE" from "TODO" [2022-09-17 Sat 08:57] -- State "DONE" from "TODO" [2022-09-02 Fri 08:19] -- State "DONE" from "TODO" [2022-07-27 Wed 08:53] -- State "DONE" from "TODO" [2022-06-08 Wed 17:06] -- State "DONE" from "TODO" [2022-05-17 Tue 19:02] -- State "DONE" from "TODO" [2022-05-03 Tue 10:45] -- State "DONE" from "TODO" [2022-04-19 Tue 09:54] -- State "DONE" from "TODO" [2022-03-24 Thu 17:21] -- State "DONE" from "TODO" [2022-03-01 Tue 10:55] -- State "DONE" from "TODO" [2022-02-09 Wed 09:23] -- State "DONE" from "TODO" [2022-01-18 Tue 09:42] -- State "DONE" from "TODO" [2021-12-01 Wed 14:11] -- State "DONE" from "TODO" [2021-10-18 Mon 10:00] -- State "DONE" from "TODO" [2021-09-24 Fri 09:44] -- State "DONE" from "TODO" [2021-08-29 Sun 11:33] -- State "CANCELED" from "TODO" [2021-08-11 Wed 18:52] -- State "DONE" from "TODO" [2021-07-08 Thu 09:26] -- State "DONE" from "TODO" [2021-05-27 Thu 08:09] -- State "CANCELED" from "TODO" [2021-05-05 Wed 10:18] -- State "DONE" from "TODO" [2021-04-07 Wed 16:30] -- State "DONE" from "TODO" [2021-02-28 Sun 12:01] -- State "DONE" from "TODO" [2021-01-18 Mon 14:26] -- State "DONE" from "TODO" [2021-01-04 Mon 15:49] -- State "DONE" from "TODO" [2020-11-27 Fri 10:32] -- State "DONE" from "TODO" [2020-11-05 Thu 15:43] -- State "DONE" from "TODO" [2020-10-23 Fri 10:22] -- State "DONE" from "TODO" [2020-10-08 Thu 11:18] -- State "DONE" from "TODO" [2020-09-11 Fri 09:07] -- State "DONE" from "TODO" [2020-06-08 Mon 23:00] -- State "DONE" from "TODO" [2020-05-19 Tue 22:04] -- State "DONE" from "TODO" [2020-08-22 Sat 09:18] -- State "DONE" from "TODO" [2020-06-21 Sun 16:00] -- State "CANCELED" from "TODO" [2020-06-15 Mon 10:28] \\ - Done not so long ago -:END: *** TODO Appeler Papa -SCHEDULED: <2023-03-14 Tue 14:00 .+1w> +SCHEDULED: <2023-05-04 Thu 14:00 .+1w> :PROPERTIES: :STYLE: habit -:LAST_REPEAT: [2023-03-07 Tue 17:09] +:LAST_REPEAT: [2023-04-27 Thu 16:45] :END: :LOGBOOK: +- State "DONE" from "TODO" [2023-04-27 Thu 16:45] - State "DONE" from "TODO" [2023-03-07 Tue 17:09] - State "DONE" from "TODO" [2023-02-13 Mon 10:02] - State "DONE" from "TODO" [2023-01-23 Mon 17:31] @@ -230,12 +238,13 @@ SCHEDULED: <2023-03-14 Tue 14:00 .+1w> - State "DONE" from "TODO" [2022-12-02 Fri 19:10] :END: *** TODO Appeler Maman -SCHEDULED: <2023-04-07 Fri 12:00 .+1w> +SCHEDULED: <2023-05-09 Tue 12:00 .+1w> :PROPERTIES: :STYLE: habit -:LAST_REPEAT: [2023-03-31 Fri 14:07] +:LAST_REPEAT: [2023-05-02 Tue 17:50] :END: :LOGBOOK: +- State "DONE" from "TODO" [2023-05-02 Tue 17:50] - State "DONE" from "TODO" [2023-03-31 Fri 14:07] - State "DONE" from "TODO" [2023-03-20 Mon 10:00] - State "DONE" from "TODO" [2023-03-07 Tue 17:10] @@ -298,11 +307,12 @@ DEADLINE: <2023-08-12 Sat +1y -2w> - State "DONE" from "TODO" [2020-08-10 Mon 12:19] :END: *** TODO [#A] Cadeau Anniversaire Krystelle :yearly: -DEADLINE: <2023-04-26 Wed +1y -2w> +DEADLINE: <2024-04-26 Fri +1y -2w> :PROPERTIES: -:LAST_REPEAT: [2022-04-26 Tue 18:53] +:LAST_REPEAT: [2023-04-20 Thu 15:42] :END: :LOGBOOK: +- State "DONE" from "TODO" [2023-04-20 Thu 15:42] - State "DONE" from "TODO" [2022-04-26 Tue 18:53] :END: *** Fête des mères @@ -370,6 +380,15 @@ Autres infos : A bientôt Françoise ** Bastien :bastien: +** CANCELED Appeler Mr Niss Dominique (fosse septique) :maison: +DEADLINE: <2023-04-25 Tue> +:LOGBOOK: +- State "CANCELED" from "TODO" [2023-05-04 Thu 21:57] +- State "TODO" from "CANCELED" [2023-05-04 Thu 21:57] +- State "CANCELED" from "TODO" [2023-05-04 Thu 21:56] \\ + Pas besoin pour l'instant +:END: +[2023-04-18 Tue 09:39] * Memory :PROPERTIES: :ID: 1644E007-AFBE-4F4B-9307-B007C60548E8 @@ -454,122 +473,670 @@ CLOCK: [2020-09-01 Tue 12:13]--[2020-09-01 Tue 12:13] => 0:00 =org-clone-subtree-with-time-shift= * Work :work: + #+begin_comment - =SPC m s c= =- org-clone-subtree-with-time-shift= #+end_comment -* IN-PROGRESS Answer to Austin Haas about clients :chore: +** W19 +*** Wednesday +**** DONE [create-tasks] Webex +SCHEDULED: <2023-05-10 Wed 09:00> +**** DONE [create-tasks] Agenda +SCHEDULED: <2023-05-10 Wed 09:10> +**** DONE [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-10 Wed 09:20> +**** DONE [create-tasks] Outlooks emails +SCHEDULED: <2023-05-10 Wed 09:25> +**** DONE [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-10 Wed 09:30> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-10 Wed 09:45> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-10 Wed 09:50> +**** DONE [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-10 Wed 10:00> +*** Thursday +**** DONE [create-tasks] Webex +SCHEDULED: <2023-05-11 Thu 09:00> +**** DONE [create-tasks] Agenda +SCHEDULED: <2023-05-11 Thu 09:10> +**** DONE [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-11 Thu 09:20> +**** DONE [create-tasks] Outlooks emails +SCHEDULED: <2023-05-11 Thu 09:25> +**** DONE [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-11 Thu 09:30> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-11 Thu 09:45> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-11 Thu 09:50> +**** DONE [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-11 Thu 10:00> +*** Friday +**** DONE [create-tasks] Webex +SCHEDULED: <2023-05-12 Fri 09:00> +**** DONE [create-tasks] Agenda +SCHEDULED: <2023-05-12 Fri 09:10> +**** DONE [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-12 Fri 09:20> +**** DONE [create-tasks] Outlooks emails +SCHEDULED: <2023-05-12 Fri 09:25> +**** DONE [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-12 Fri 09:30> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-12 Fri 09:45> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-12 Fri 09:50> +**** DONE [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-12 Fri 10:00> +** W20 +*** Monday +**** DONE [create-tasks] Webex +SCHEDULED: <2023-05-15 Mon 09:00> +**** DONE [create-tasks] Agenda +SCHEDULED: <2023-05-15 Mon 09:10> +**** DONE [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-15 Mon 09:20> +**** DONE [create-tasks] Outlooks emails +SCHEDULED: <2023-05-15 Mon 09:25> +**** DONE [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-15 Mon 09:30> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-15 Mon 09:45> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-15 Mon 09:50> +**** DONE [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-15 Mon 10:00> +*** Tuesday +**** DONE [create-tasks] Webex +SCHEDULED: <2023-05-16 Tue 09:00> +**** DONE [create-tasks] Agenda +SCHEDULED: <2023-05-16 Tue 09:10> +**** DONE [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-16 Tue 09:20> +**** DONE [create-tasks] Outlooks emails +SCHEDULED: <2023-05-16 Tue 09:25> +**** DONE [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-16 Tue 09:30> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-16 Tue 09:45> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-16 Tue 09:50> +**** DONE [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-16 Tue 10:00> +*** Wednesday +**** DONE [create-tasks] Webex +SCHEDULED: <2023-05-17 Wed 09:00> +**** DONE [create-tasks] Agenda +SCHEDULED: <2023-05-17 Wed 09:10> +**** DONE [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-17 Wed 09:20> +**** DONE [create-tasks] Outlooks emails +SCHEDULED: <2023-05-17 Wed 09:25> +**** DONE [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-17 Wed 09:30> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-17 Wed 09:45> +**** DONE [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-17 Wed 09:50> +**** DONE [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-17 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-18 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-18 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-18 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-18 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-18 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-18 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-18 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-18 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-19 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-19 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-19 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-19 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-19 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-19 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-19 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-19 Fri 10:00> +** W21 +*** Monday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-22 Mon 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-22 Mon 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-22 Mon 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-22 Mon 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-22 Mon 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-22 Mon 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-22 Mon 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-22 Mon 10:00> +*** Tuesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-23 Tue 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-23 Tue 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-23 Tue 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-23 Tue 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-23 Tue 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-23 Tue 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-23 Tue 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-23 Tue 10:00> +*** Wednesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-24 Wed 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-24 Wed 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-24 Wed 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-24 Wed 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-24 Wed 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-24 Wed 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-24 Wed 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-24 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-25 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-25 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-25 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-25 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-25 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-25 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-25 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-25 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-26 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-26 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-26 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-26 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-26 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-26 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-26 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-26 Fri 10:00> +** W22 +*** Monday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-29 Mon 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-29 Mon 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-29 Mon 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-29 Mon 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-29 Mon 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-29 Mon 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-29 Mon 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-29 Mon 10:00> +*** Tuesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-30 Tue 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-30 Tue 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-30 Tue 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-30 Tue 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-30 Tue 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-30 Tue 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-30 Tue 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-30 Tue 10:00> +*** Wednesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-05-31 Wed 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-05-31 Wed 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-05-31 Wed 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-05-31 Wed 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-05-31 Wed 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-05-31 Wed 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-05-31 Wed 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-05-31 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-01 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-01 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-01 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-01 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-01 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-01 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-01 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-01 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-02 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-02 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-02 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-02 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-02 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-02 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-02 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-02 Fri 10:00> +** W23 +*** Monday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-05 Mon 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-05 Mon 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-05 Mon 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-05 Mon 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-05 Mon 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-05 Mon 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-05 Mon 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-05 Mon 10:00> +*** Tuesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-06 Tue 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-06 Tue 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-06 Tue 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-06 Tue 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-06 Tue 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-06 Tue 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-06 Tue 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-06 Tue 10:00> +*** Wednesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-07 Wed 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-07 Wed 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-07 Wed 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-07 Wed 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-07 Wed 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-07 Wed 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-07 Wed 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-07 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-08 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-08 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-08 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-08 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-08 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-08 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-08 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-08 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-09 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-09 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-09 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-09 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-09 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-09 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-09 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-09 Fri 10:00> +** W24 +*** Monday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-12 Mon 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-12 Mon 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-12 Mon 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-12 Mon 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-12 Mon 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-12 Mon 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-12 Mon 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-12 Mon 10:00> +*** Tuesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-13 Tue 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-13 Tue 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-13 Tue 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-13 Tue 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-13 Tue 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-13 Tue 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-13 Tue 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-13 Tue 10:00> +*** Wednesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-14 Wed 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-14 Wed 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-14 Wed 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-14 Wed 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-14 Wed 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-14 Wed 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-14 Wed 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-14 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-15 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-15 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-15 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-15 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-15 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-15 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-15 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-15 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-16 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-16 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-16 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-16 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-16 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-16 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-16 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-16 Fri 10:00> +** W25 +*** Monday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-19 Mon 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-19 Mon 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-19 Mon 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-19 Mon 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-19 Mon 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-19 Mon 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-19 Mon 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-19 Mon 10:00> +*** Tuesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-20 Tue 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-20 Tue 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-20 Tue 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-20 Tue 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-20 Tue 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-20 Tue 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-20 Tue 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-20 Tue 10:00> +*** Wednesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-21 Wed 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-21 Wed 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-21 Wed 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-21 Wed 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-21 Wed 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-21 Wed 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-21 Wed 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-21 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-22 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-22 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-22 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-22 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-22 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-22 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-22 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-22 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-23 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-23 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-23 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-23 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-23 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-23 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-23 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-23 Fri 10:00> +** W26 +*** Monday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-26 Mon 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-26 Mon 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-26 Mon 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-26 Mon 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-26 Mon 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-26 Mon 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-26 Mon 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-26 Mon 10:00> +*** Tuesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-27 Tue 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-27 Tue 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-27 Tue 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-27 Tue 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-27 Tue 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-27 Tue 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-27 Tue 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-27 Tue 10:00> +*** Wednesday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-28 Wed 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-28 Wed 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-28 Wed 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-28 Wed 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-28 Wed 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-28 Wed 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-28 Wed 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-28 Wed 10:00> +*** Thursday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-29 Thu 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-29 Thu 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-29 Thu 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-29 Thu 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-29 Thu 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-29 Thu 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-29 Thu 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-29 Thu 10:00> +*** Friday +**** TODO [create-tasks] Webex +SCHEDULED: <2023-06-30 Fri 09:00> +**** TODO [create-tasks] Agenda +SCHEDULED: <2023-06-30 Fri 09:10> +**** TODO [create-tasks] Outlooks Flagged emails +SCHEDULED: <2023-06-30 Fri 09:20> +**** TODO [create-tasks] Outlooks emails +SCHEDULED: <2023-06-30 Fri 09:25> +**** TODO [create-tasks] Create [[https://github.com/notifications][Github notifications]] tasks +SCHEDULED: <2023-06-30 Fri 09:30> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/obarbeau][Olivier's PRs]] +SCHEDULED: <2023-06-30 Fri 09:45> +**** TODO [create-tasks] [[https://github.com/advthreat/iroh/pulls/wandersoncferreira][Wanderson's PRs]] +SCHEDULED: <2023-06-30 Fri 09:50> +**** TODO [create-tasks] [[https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aadvthreat+author%3Ayogsototh][My PRs]] +SCHEDULED: <2023-06-30 Fri 10:00> +* DONE [#A] Appeler notaire procuration +SCHEDULED: <2023-05-11 Thu 09:20> +[2023-05-10 Wed 20:18] +* DONE Compte Livret A Krystelle :chore: :LOGBOOK: -CLOCK: [2023-03-09 Thu 11:03]--[2023-03-09 Thu 17:06] => 6:03 +CLOCK: [2023-05-12 Fri 14:11]--[2023-05-12 Fri 14:33] => 0:22 :END: -[2023-03-09 Thu 11:03] - -Just by looking I think some client probably disappeared (in TEST). -From what I looking for, most clients belongs to Chris Sims who created specific -Orgs in all ENV to create the modules. - -#+begin_src -NAM -module-id: d80e8041-e8ed-4d42-9b4c-7b0a7a4a6d1b -client-id: client-d8d91871-2735-43e6-bfca-ed4cb6b89f23 - -{ - "scopes": [ - "integration/module-type", - "admin/integration/module-type:write" - ], - "description": "Used to create and update the Threat Grid SecureX module type.", - "approved?": true, - "redirects": [], - "availability": "org", - "password": "$s0$f0801$MG1GFImf7eHwuRKfqg8H+w==$W2h47bWx0Q3rTRjfidgSXvA+cGCC7b1AeqCh+z30978=", - "name": "TG Module Creation/Updates", - "org-id": "964a8c3b-9aef-4e1d-aadf-e2754004d230", - "enabled?": true, - "grants": [ - "client-creds" - ], - "client-type": "confidential", - "id": "client-d8d91871-2735-43e6-bfca-ed4cb6b89f23", - "approval-status": "approved", - "owner-id": "2f6ccd76-270e-4785-a33f-ea24400bc5a5", - "created-at": "2020-05-11T22:13:49.892Z" -} -belongs to Chris Sims -#+end_src - -#+begin_src -EU -module-id: 28ef9a98-cd14-4a11-a2eb-6b80c5bb82fe -client-id: client-6f81864f-04e1-444a-ac92-e242797ed12f - - -{ - "scopes": [ - "integration/module-type", - "admin/integration/module-type:write" - ], - "description": "Used to create and update the Threat Grid SecureX module type.", - "approved?": true, - "redirects": [], - "availability": "org", - "password": "$s0$f0801$7G0SDYzMCP2zNbDhi37Ahg==$ijMPk/LtBcTZlsifNl571QDOfxX4lQzcsIOFJYgnF3A=", - "name": "TG Module Creation/Updates", - "org-id": "99c5cf95-7788-4ce1-906f-86811aa57752", - "enabled?": true, - "grants": [ - "client-creds" - ], - "client-type": "confidential", - "id": "client-6f81864f-04e1-444a-ac92-e242797ed12f", - "approval-status": "approved", - "owner-id": "3f6edf85-9ad3-4098-be43-0b46d117f9ca", - "created-at": "2020-05-11T22:08:04.428Z" -} -#+end_src - -#+begin_src -APJC -module-id: f82062a6-5b17-4943-b67e-2555bbcc95d4 -client-id: client-73096290-4908-4a9a-bf0c-b29337ae58f6 - -{ - "scopes": [ - "integration/module-type", - "admin/integration/module-type:write" - ], - "description": "Used to create and update the Threat Grid SecureX module type.", - "approved?": true, - "redirects": [], - "availability": "org", - "password": "$s0$f0801$qCVLku7mTWOAdzqWoMV/yA==$BTeIKEL2EcHdL0/wR4Q5CfYHjDlinDhiTSaGN0fXJKg=", - "name": "TG Module Creation/Updates", - "org-id": "4f169b08-bb0d-4e97-a358-8fd3fd819066", - "enabled?": true, - "grants": [ - "client-creds" - ], - "client-type": "confidential", - "id": "client-73096290-4908-4a9a-bf0c-b29337ae58f6", - "approval-status": "approved", - "owner-id": "fe332b50-62ae-4ac9-8eb0-4b9b39565bfc", - "created-at": "2020-05-11T22:17:37.247Z" -} - -owned by: - - "user-email": "chrsims+apjc_modules@cisco.com", - "user-name": "Chris Sims" -from Org: 4f169b08-bb0d-4e97-a358-8fd3fd819066 -named: "Cisco Modules" -#+end_src -* *Declarer sinistre Aygo Assurance -* DONE commander gâteau -SCHEDULED: <2023-04-06 Thu 11:30> -[2023-04-06 Thu 07:23] -* DONE goûter chocolat -SCHEDULED: <2023-04-06 Thu 11:30> -[2023-04-06 Thu 07:24] -* TODO acheter lapins lindt -SCHEDULED: <2023-04-06 Thu 11:30> -[2023-04-06 Thu 07:25] +[2023-05-12 Fri 14:11] diff --git a/journal.org.gpg b/journal.org.gpg deleted file mode 100644 index f6a1be55b818fb3d654c3617f266340d2abc89d0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 21404 zcmV(tKdkciG|Bx}3X(k|3}raHY=LI71dt!6DPb`g z28qd~tXVZ^{_npQpBukF)8bb#&ha@JO&>&ySIOPYXwq%=wk{7&y@(K}8#AJhns-7` zqHyZwBraAo2F3{ul48Any>G?BXZ=RBmNh%F>LF1jEw3C%>FV+Vawu=<;6Ja!-hhKg zNwg#i_BZwd??YBA<5nTlZ83QB$w=ulS1eVR7S>1ynpJ$IaUpo3WM06GY6W!F3n(~z z-RzGZhn&EE@0Xur89IX2PA%)kXF8=?n0_7wC&X%;Zkpp9{}e?R-0Eh_U{rUJ9)zh= zYz&3iqUorV4il|l%o}krK_b935>gA7+cgwO;KlXlJMsD1C0$jNq>|7ht^1D7X<9{N zp5h&374Ug`3^h}hIv4u$<;#smv+# z2d&(Tz_VK##+h0!r0Q8>T(rRDIl7U1*I&2`1=oBW8MV@DY_})ACfZ*z_(=SwmuIAKBoxn>itfe2< z0pAMFY|uV~ZP-z8D0~c={s*hyc@Ivv(>jlhwpvkQrSYN<>f> zYRE|Df5W$b-!hMI;`eA$W6+!s-2}ITJTE5wjkRMtztv*F=?XjJU*W%{c?H#?0Fb=t z!2)%9Yfh}dA*aS`3;>VdQ*(tXs=tC4^Us^aq%$7OoR{%2!&2baO2Y-|3Uhykyli=D z#>#UIGXZ?Z2VOk;qlm)#&Dh(rhATr|Ngchf+E&_{_{jzYD_X5hM2KY8vL7tvd;9y2 zyFcKK-)a>km8#gPL@2n?ae7C`<4<$>6>nSOgaV&$_S7~~aF}TJO~so@!EFlz{jh<0 zZf-FhOn5V~aqe520~>UmUhh#p69pa~0ZEDH zPY8j%sn#f~ikc5j952#=A+%8Ki%Zv?`?3i>qj{AS)kxn^$5n5k_8)yvup znV9-l2mWy?_A2v?6LMaHT=&9_%--rR7 z_;rDP(4U}1T3~?TOmXHBx?)ma4~|>tL+(s)tD#-{abeWeS2Bg**OQ%alj`7~hj?Lk zNX7&82gHxxxa-;VIcN_|E3HTlM7_6S>1Y}T;mcFRNrLY8kp=1PYx;wu$|UThwgglI zMT;M8t|qa1!mPr$^&aDw*I38j?3NeMk8%oaE{;S7vyAo|Hlce7pu1>w{d-eD%s2U& zXF)`=(v_$yN)H7MbA+4Y0Afe**iGuQs#@NO{JjKvx0nN@!UR+1sIgoQY1v&g(`h1f zK}GEJhr8^918=O$8@+Bx=L=bIOcSV@nI(4lJ=`xr)wyn)Z9nH!3kpeT09Etu^$lEPuf8-~Fp)(4^d%lJgvHUEIX za>80sDY|LvWHqae?anPL*b6E_TK~m4^7gG^+aHh#`$4WT%cTzH3z+utxUp=8Y5qr7 zPmG6a?9JtLGIGNX7}^;jtnX04>M(m&RVY}$T4KH*BrY+EuB8>z0jT~g7xHqqM&f@v ztRlQrYfxfeMvJTuMSK)^r$j;_bdY>E+%NvehUc<7|0FtCZP3&0qJY&DUg8`{p71}L zaq^AJh_yky0w3{BmsL*;!uZXySpncA72s>4+=6L#4cq(5?%|lIJu!JcM zCsuugumm(B!RCM)*YSpR^_tQ$@z(Cdai67Gt-1aCzVD(&m!jUVHTsag&T*hj?MuZD z=5-Hk(Z8DoVm6(eJ77hQ9C6fl4P_uQVRPGf`O#P&2ux8lo@MTqUSPyeZ8$vL+3cdy zswy~;9T@B<Z(A!V;zDun~4J$yh{zMGZQ9?fN+9#jwG69KKB11yn+Z?=-Il9W1g zod*!|T-|Zz0=x*WEsb4~w$ES7`Uvlc`VkS>ED5|iZ+`rWeC-I;lKf5_J~J1Gh~VMv z_Hr(3!g}l6ad-k<=4@$Cs21O9t}#sYBJy47L$!FLE^-k2(0hDaf4|l9xK0pKS9|er zOI7IDGQ$a@QHqBlrQ|k8nw=NGHc7S?V%rbGmE6Px$=oOv^yXF%GNt-x4S>NNA3E(m z{uJ4HqwrRIh0qPENs^coj#J~^BdREay(B$TZZ(kFoW$O;2Ck;KI)qWX5|^iyVs@C> zUEj348(&_IXBK zbm)O+P`Hi9yRA=v21v~-VeETzKbC*{Hi$6QGv(vjst|LR)&7&+F)AskPOQ~Rk#c49#HUdQ=R-7m zHq)iBne8MeU>BeY31Du>w=~;%YX+BUv99>4M!xOD>v-c-?oE;4_2$TixRNxqk>lmM z$yXc#DNx`*7Gzi2C8AQ9BrCeCn0Lafjm)p|@VZQms&VWx66_DZ3L2MJh|r{1EE-XU zxk+V8@bTgC^U!Mm))F0L&>QESGs1wGdWJ$68d=(!S~_Vg8(5nm2C=v)80>CxlS*zU z1D>Q5{RDzYNvo{YAh{U8CMtx3cB%5tx?x$o%njwlM8*T+N%&vVA=1@i;lLH!+26?} zV;8=peuE*;qCDr2^al6AE2t|n7{&DcgLA#EJRUCh_h_I+O_VZQ?I%_>R^wQ(Z99=$ zSc^gn@?s(oAx+z5*|bOTDDL$_sKoYrUej1T2<(GJ`F=kC7~d0((0DqI2=SD43PL>t zpX+Cc%{a%`(%9xh)`#0^1x_2*=m6};ZFo_6lOWCtQ!$vK6f+De{`2Hy(7AiVCXz(A zC{{4>jzhu~9s zDbjww*?OW?-pdH{OnArEa@Q`%?`seVpk?>|B$GZG`|P%esUIE2a)FJLl)QiFIbJkh zEUD8&w-LLBD8A6}b1=a#(S#guxLxA1|0~dcEw+=*H;+Z+USkPs8fn81ZPR7@V1S&t zq(ZKKIJe1*b75g-8430JHIRfYnk@uWR?r?AC=|R?)85@M3lCcvrGZ2jViyNGgqID~>(9TQJ=nv|S zOO~0uH+ES9Q|zy2PN1SRL+)@ni`0hc;-R?!bB7`f&T_$iSA0amU zl0PcSlxm6*&T6#92I`#rfVwnRXpb{)j<_T`z)LnNhkBVav831htl*EkKyoC^m+8(W zt6tz&h1;7o1!r5Gh&@hwO&f)^B@*5Z9ZZlKL(r-jVzjXO-wZzI&74->zD#ytUI{%+ z7aImX`>+mZhJGZ(V7~S_grL4V)b%4!_@k07d#ivg%&G3WJr-O1tK( zJ5b&D>|@RVzytBO(io*|+hlsRM>ILBWuQ_jAw4-WS1LAMGnk_)!2q~T)U)EkxBtXx zaI8#0w}q#v-J!md4T>Q6CUhR~(rQ@FaUa(SuXQpmv`2WU(Hp-Y5lVfND!mXWFbI94 z5D4@OQxSau8NM0SDqjeJyVOl%i#mcD`0DWjL-Y~iD|Hsm4hjyV@M89)=R%xz@S1Wm zQ9i{zT2s`e#^&Easjun16xP2?`!(YSnR{-SD2j0S&*@?^pb$dI@i(^$q+%oT4-6g# zN|?TCq~EXEADSQhX5elB=TM`b0;K^0SP7G|r7LVL?4`X4RPvgj)`dMY%cfytvr|y3 z9P_-PND2MP}u=XspQEAqUKHL#vk#n5foC{IS0+}P?3&pAE;5e{1Q zFt$;2L*c|>{vh; z>?Zy!ZjDws`io?M`B|(c0ew|2srtr-qJ`)`2FcomdS>ctHc&Dfr1l>zlX`Ac?T*qQ z!lq(^?wt=PGzhTKNO{(FDzcXJ^C^c0DT$S!R1qGfeAuy34o zB|^X>iIwsti^ueYexV5Zht>3&qkYngOoVB;<+^#uuhG$BzPyNwKcNGF13%9ok2$UN z4pn@Lc9J$_a`}F_665{^I-z%|NL}#tuM6HRk?d;)(b`cy-rutMm3QVR)jn?b5wb_7 z)nvm>$DoBZ?q9aUYPQHw2tKVP(uPdnmIuu}Br2$&rWm2vSUtS9JS)wcbhn1VgF4~8sK4Hv#=^@s5uTVa&G4hM8>?BU9NT5GjFMS8zglL z;ixA-rhO!~KAI$XZwQ!1=;AEE8BI{TxyfntA^lhI`5wR4SJV3Hnz zqha8=CInI&a*kMsg35n=B7pHMy?y{wEluXkjBc)a7C$k};+kM;@bljs)u3s=Vw zC*~UW9JR+85>`LMA4!{gqV@l(vb5jM>h;;XUtdq4_QXBH+C@9UwP1JL*S0ev%!dikKsU zv3eOp{=7bXs6b1}!o5G>{BC>VLb(C-UI|OX<+hzaHc)5tLy2jO0QQ?n{_n+8wfK>_ zx6Z~*K{?<6M?vp$$>GAxj26GMKEi4h#RdS3Qb3;k2oE5~b88zYG)idg6t_YPq!+>& z;#Cw((A|pJlG&q9(=)TDfD8Tn7wdY`rf))GhO0>wMp7{NQcMeLc=H*g+6RL>K%|J% z#tCYpH9s4CG%%`xeip-CMvIeY>WolmYvj6LUh`CFQ_I0EH=b<`)M4zz|9it%P*Oeb z7vt@NM-&XLXCMb&Wp&phE)%84W2V0Wnw$b#*ZqMEG-ZTlSp`WvEuzbodrM+4;@<#) z-9~t7*Rl*gV)-ID5Kf^S7Do0(hYFFe*;l?ari>Z2r!u2Tt?~+Y+(>V${&gr{3(FYe z)pZv^7)&SdqU2|BRqa{f?T4>PQ!#bVNeZGZ7A(=K=Wm)tishyRTnedpDMkRhjpPF; zyOBqLVu16MddY}p3vo*|b@b#&$3>o((j1KgE3p7D^+{@_$z|uUTO06U(yo03H-dU- ztoZ7uw)^BkG%1|x>@Q2E0ZR1-U`tl?8yGpSLrtZ6UIMBB-gX7R^|}cS#Ighjxj*wfC(AZDyDL;~k}6 zIk^b8SR|M$7gFuB>n8l7^K)I61Jq{WDbwKHYja>Xf2`l4{o%niW&~D6YX`iJ0J)EmV zBC0;~Fbo$cx8K#D{A7n{SVuPP#< z9^=uBr~Vn2s!UQsBBE_XTvdACanvDUeBS$qggK5^u#3?pstOQ+IH;qO0`u}@QSfR^ z+k|RA=&AK2hvZdf?4BrT6K~ZZLvTzoqsXkmc*?`F^KP8kje?7!IT=~r?S2uE*8fh8 zmt4dZUXv-V*23@7FHOP?RSb=F<4O(3^v{*98>4_k3Ygn!6O7E7zwr27 z8b$auJ54-}!@Qrc3%HVIdQT{0R-QALCk9Jf-0xsglc037RBqlDsNWWDxTKzJpoN{TN7b z*ZBR)cv{w^Bq|f91F^<0{Rnr4fZN%GZ942Ei!ubkBeo+SHq%5q%a#lG+E^mNrJnLa z(P6z|teTqa5LW12P5+8V81OdA~r6pJ~u_LS127nu_w4G=8rIPBL5z1+{V$wTgVDKAn zM5$ZvZT-Ey2^hpFYq!~9!OT@1MNj>yOH@&wWwEk?#>3;Wq^0HYV+)4)g#Snm_}{76 zt<*=d(i z)@n~_)Z;k1CRB?Kdua*cpkN1xQ`;=C5%L(&;xs3h0)(-`AhH5uCno5L0SMOhgxp&g z#QZ;*=DKaMQNJ7x4{3~Svj(M`AjGWjmSCBf!Q%froPhc;;vO%zBY^K-1hjW-)Ix0h zu@_b*Wvo6q_r8NtS0yn}hlbM+XHo8wVE9A3Oao!K*peNY8Sh(Yb0)i+y)s^sG{Ln+ zq_4QQY*(%X?>U;xSJ1?q62NH!(c%;~IFL@S3KS3Bj3HW&Ebm!@O=+QG7a{>Rn&B!OY7b_Maz=Rw3m zGMXKql^GY1f;zTAx^VGC2m{3=7(!bhlzgt@vx)OPqIchB>oRk};uEjo^A1b3ourHS zKqi-Hf#*GvrjngTvsttTSRpc1q(gR>x^_{&QXf{2WN{Cl*k^0bW1MFfQOI5P%4vU7 z%xOz>tTc!;ur0JO#7YYMnEDJ#@oTJW_YZ#oZ6+5e!0lx0`=L@#1vJn7pSE(5(^sM2kk-XRSa z=Vae~$@84o#{80Y{?`Y@CM1y42$N2SC3IOFRp&xthG?ige!Q~x+!H^Fm&|qrG>XYY^_6!kDjTifGH5w9di|eeP6*hu1cD z;?ZKcyz(_c!*L9fz&u2a{sZjGf`tuAW=Db~F*4bR-BfPuD8cO-R0>?*2U0-+Jk)A{ zpA_D6zn;r7RlmYuFztQgMxRymr5uLEh>m34^H(U*=kL->W!A7b-P z3b05(Q&2i??Fya8Zn_?^xWbe8a{3r$WY8wLLMfdK6z2CAHqb<8CF0s_5P65e1Lx$< z_p<>tYd9Fx)r3}MLfgD54Z%F~Fm`)+;Z)zH%fWJGh28s31K}CXiZ5CIZ9T-Yn%B!T zXxCY6+*Uf`;p(L)hPUZ4&e@{ELU(N$635o5GmJZ94?g9#o(>Tq+xuAsK7#mM&(ni; zjYA=Se^es3*|(Ec|JRq*tlOt)a~lm5PZWPBG017fTn>Hag!nzZAT;L}dWcBIUrBL1 z*Q=QA7|Xpe&}OCB+??L625QmwVHWQ&_ zIr5M{J?l(s3R1WM1~!C`;7}=(EC^ zTX;z|e6w8&&WZLJNS8K~G0i$+GmOW=Y))vK+06=Jcx5iqp9TC8kZTk2lraJ+JkyIp z-oH)Rpk+-;8!qF)J6p5z`7MlzE{$rF_Xfp~8;{VhHK)#CTFb$4|}k5gvUO7eN#iU8ie zWA4gh*^$2t;#;3a=uD5i4h4b?odjwUKnbc>`%(GEiVZ~b$Y0nmMn%Fg37(&}WC|np z+0DYl`YX-`egU9s?U<5BYp7+7^+Jk%INYy0X8#~ypy%Lz97cHAoYn!4c5A|#>Msni zseFW1Q|Ug_j8%k#`w5Ug3@LGGSvUWGKs%l_WCP)6r)#n&P9fYbAPQ9^WwniX%EKd$ zQJE)Aqm@JvL)3x$>5Ar_t>p3A-Kaghmp)AxxxYNLS#4Pzu59S(Nzm0)jv!L9nEU$S zME-ss2z8a4d^1|l7y-W_wCQXk7;&Wk7O>KU%NR`c!ECJ#F#%)6#SGJ zafqu-)|-H9d0OqEpVzsFKy#CpQs3GIKlp(*IwP(sc#peLFCa3GdWQkPjwVsH`36K+ zmGieXTKUfFx_23leVN)KxhZ!EMn$bd)S(MZWIETF2k}SPS(Jf}spOM37i6O*Qt~9g z2i=e#1 z_--YO&6x5ju|aVR1vni^tq1Y-rwuh{HJMT(Gx$%9IJ8$y%!-#Lf5f5CC$E^X8^B}@ zS?pX&??9@ZkfDmPd997$z5Y8Vgjp`yYUN5rQ#}6X(ihF1V`u-p*ws44FlVJ1b~Mn+ zY~J*=|o5R2}8;t9#h?c%!O0rGsz zmVbRsLlejVrlHLk)a+3_aDo?1{yT<~Y#>%&e_RIfo?-Y$T$EWUDR-IHWY&APiWNm6Sw{XbR|5 zrLBkK3Hd!aEKUN*%9MCbrqC=pKU&FI7y6A`IzbdhGX(hZk#qn?d99Jj2^5Yc&)Jg;W0A3^RiS5##`-K9&j$gx zA-t2hqlqH>`ke7ddpBo+@Poic()UGA}Bl!Tj?y;5D0B-%}_Fj6Y&*I zdZnR9qWIFGLnCgYbO@(j>}E#BHQV(P&xWQLelu9hl@A?w!(jFK_GkO^xeuqpsRL0*FXm)cw6A?LFh-Uy>VKF`<5h=#kV+*GPm+V!`Pimx6R z)uwY@v0-GfSx6T8EiLsg!H~`$I}p6kSGNRVH_;d4P2QbKjE@z{X)bIicp|e}xj4Em z7zJ_&HS}~&T|qf@?csiRsPWuMD%yt)^EZ8S6J4K+NRQ#}4~a2LaVMPRARS3G^I=vP z;slq9F9fURrSR*Y_}};t&ramUfz&hYrKTLW4HBBXzrE-T^zqW@0l!|!7TpTSY=g3< zTdBz>>&NN+-s6S-1vr`N>EB5s4b%G3!30Oh8&O;`yoL&dF5BG(ra6y&39q=6YwVGAIa}S$ap2lUr~O@4=kQ;Ags|^5O%bRKnw_8Em#3SVQ07WGjGf!<$`98B!y;z#p_Eq z{f}?im*#U0FQ4n$RK4;^^N2ol3z$8Nn9n%Zz_4~o!-Qs?{?0qzISdc3oPMo-or)cA zFb(X+O9zl+%O0ZuTlARjTmQ^!j`kk(*E?-G@Y<3F{R4LCHdcCLu;s{K{_X9UT^(b@ z+7Vb9OjRZ)5u9-;K4IXG`E=a(%VC}4WeGPRyN9+hw+&1|e$F9Sr2E$zq7cH2@S$d7 zv~X38kS_lZuC8>nzNDfBtDKF(zfv@>BQ6t=bi0OCyF0kmeBLs-5}cjKMc(tABZ8T* ztl^9QVu?Y?pZUs4148sVw!w5)ZC=~RL~b=-wMOTv=RO6G2gv1QBtqPVGl>YUJZKM4 zGP@Y^sqFJ2FuQ0X^kJ;sk;OgTcbbqE_`y1$N46#A?5&Cx5FjLm`kNaEDUgE3g~RBB z)V0+%9oJ_1(0+ZE*mrOnwiCK~o+)#X9#J^@}iO% zu+J*(C^jD~!c;%X)TDfHTqoj8@@enf`W_AmG@H7RR9pdhjLgo}1q6G(YHY2jitcII znIT8R1c{Xpdo7iMYxQh0rpM?vx-2KKGY+!h{9LtLdJTEY>iqHY4^BEp5FN*7tQ4CM zzfV=4^O;5%=_4|6T-ml_$%payE|IIOAb^`!RLD6Z1_~A&Ac1Y-_?UfM!%UnD<&$0THf4Xhsg}D?Tt+`GH&W-n(;18dCnHT=-I@3v8*aa7&;eC$H zvC9EjLT{97V?Z{a)DdBeWAh{$;uNP?-}8NVk@SIZv+H~R>M|f>H?S!&7AjfLI%E5% z`Ai*Y0{|FGdT66TCR7UEd>_~~KOWm#D(53(hJ<(pOVT6D4a(6vR**lH4-ruNmEa%H zWpTJIe^jZMkHzJ`0iDc2_^t@=Zc*n>vO=a;Ag*vJ9Zwv-I*lE~7j7_X9>(GRFU` z#MmtLvs~#Xf{_$E^iqFY_G*eZM$edOa>CNMnYug6kXugev^>gk(X%9+%7Ir1CiL@R z6AYygaTUNuE7^F{xOUmr8HC3zY9YCD`o(9DhAA`_j;H}V5HlwHjn8BF3phpVK zORO5oL=aXI1o`tHl`<^j!(1)Xiz^$Si9GA=$9h{?yB%c$zB7^kAS?6yxEuw z>o;2?PeyOZvLsm34NR@a6k1_%ONW;A?|bAA|Ip>Uk7kX!0)Cc{H(m@UcOlNf+vsuS zkOJU^?_s~C1_V~slLd`@lBm70N zo~%s1F1l2xkJw9erE2rG@YK@C-;+$Wvxr9qv9u1pjJ1bnjalV^?uG_f3nS>jf3|(T zYKJHz^ZuC%V(tvXi2$#~@~JxOiD2dmyem>R(?dZWIaZ7Z--`eXoheZ|;;F(@+m1nm z!O(AVG4-qs{hG{q%av$wU5Qzj5&M{SX;7m!a8yG&SZlPd^jF5S0AaS>y7!;wdW`^t3rXW$%}`HqhTjEN_NB{ zYt=Ccy3TWNcFc%?k#Y59zg3jEwI9bQAnH0kRT7Ie$lh5Kq#pD<!!D0STkTv)N53BUG9zR)O|6YW`zouR&frUYCsBvfNS%1IXAQ5tZM~HCv45Vw}kNzqiiPZ!a*}(#E&9Oqrx5^*?Cj;Ig}HVoHTgCq%9j(zuH z2qegEhVIe&srl$g0e`jI$fsS~F!GTSTyYgjIfjA*1%ggAAZL(LjN2SM??*A5 zc|00oWk@MAq4M5@pcf6U+)f*>?(^!QM*|ht`Rs<;O6q)A@&zx1IS<8Va7`J4jFtRr zB(ZrFf&u7RXJTEmY&%$IYe4mf9}up2awD+%2e3a`i(bbO04=1W&Ynhs0gmr1S0 z@^#DwmwZLSb*Ypyc}t!1efl7ejH8iIZ#M zXX|XfTEgxLSb(udPB_j{dLUuo!_RYR%2%Y9Y0{+tG=A}eyV2Bx31catz@k)rkvoqR zDitI}G+1mo1#~2_l{$~&E=?@f5Dx46tTbWXg3Owz<(SA@w+WUw(RY`@#a3-fOK2Kt z?@YWVN#K!axe>p0Ch}LJR?QtCqoefEgX;tReD8gPKL9LDMUnhC?~S$1!<9ZRtVY|w_tY*(ta4dh5U_IoZfrF1q#C=>ZDVW>n93D_b!3;0wBpXDu~)cUBK zA)qYfO6)UO{+||`kc<8xp(nBm(C8!(Z2EJ{|3CFZFQxb^=mpJhUAVIzN`+R13vO*E zQ1kfE<4!ndSuZgMco~F8@rV{!D_M0?PiPQ&c;IZBAYTp9Z%rFFDm?dPY(7kWsN(I5=asL9YRIs2 zT#p_BDj&(8k~!Z^8LFZZ#g#qMMywsN`dJzfs}(|ri*KV;UIB>lKoMuUM+bP#sC(+j z{;QH=nrdg_S4i&>F^MLjM8ZmLRZnD&7r&YqfIpCpfeMSv1o>+d1C`X>faDe|lN52u zG|deO*A+!j>f4`NdZa2DmXM9njKL!BstyXLWKh>w_~laUBdcayeNp<%^8}4?-ih?a zcB`@@t6dS5SNKR1(00ZFb__y3`b2us#K6PSYICeeqvOM_*2<7S+e`Z;Q)#-C?;NA3 zfJEgqTx*qgjv3}&cx7;)q7G%NFzDNcJ4;4g1#5M$>PaI<` zfs#3X{LliNQ6TL``VX}UJjpFqh^&}P$6UJqRfTH>D?qJOL;X2H;x7q6>rK)mvk`vy zULUjt4fGDSM(FAv!q?x-1I4mm>&@7M$NkV!hd(}L#FkAhD^aW$6{|Ax_})KJ`&K=* zA}PT*h*|F|4RTGtg3aU{J6BM%X>nhZ@m^H9zov~RgYT*0hOP=jUUD!fvd%0>o?}8y zlOJ!GBU~PyLHhHPE^M*lXKQ}T+}=O> z2<(F`>=*(f@A-h3RGZQX4F0T1(bhsQfJx`_ZU6IKQ~r#vhV}HsL}u#oV>+4cx1$m3 z;xgI^pM05I06bCPSz5;0&(n|FeBZ2AkE+%JB47zfVeADg$8^+4O}T?NH1M!>syF>J z6;H_#`jIhdUe`OI6(z(s3JdV%)Fww+HP+n3COJ7}p>1Hel>Yx;n(S;>jlfgQ`$_V@ z)Df=ar4*x^5_Xy8yozZCjuyUPVw?9~hzh1u3v(4#tTnVu9dHU*#a?HE5ZFvzbvP48 z=^dh*sE9{Y-y1zRnTGx16j};``(xRh3x~U54wEMt;EUECbKg2d`aihiphHq^0LS*# zc6>T7Mw(WrI$;cCZKTTW7c06_uSR78EsKkL04i8*bvEq)>-VS@4=BmkRBh|~!PdhC zfFYEpcYOk|?hGLd1|X{se&$2+zpsNM;Jo}aULg9Dk4hkwebw+HCrNaQ_i z7E2XVvm7YYv9qshg%69V+U;253;qrTA1EJgZl10AqS5uC-#7ib!kyqWD{qBw7_vlP2h~v(1m%!#$b751bjVU#sfU+( zKjQslu5h5=HP&`T>0X*fV3s}DDu>4mR>Kq%BvzRQ7kH3B8 z#5e8rjGm|ci>Y*Z`l@AZfel1XzwPN%O-;%Og7KH{){LVfLSfitpOPw}t&tn{`1_;j?Ks{}Os zM6XN3pyJ`e9VHN%2!xAbD9bvhl8!VNd_wS`?s6pYL`6O9@?-gL{QG+Ut)Z0kqj0Y* zA;a{RT<^symq85AcXm%-tBX=L!D5P7hn2l8lEUJ$lW>Z zSKFpSY}-A7(!N$pp-2CC{4d2zC}S;sEt# zMHt;i866;DuREL;sMDdh6%jJ{lxc<`^@$*kK7K<8ZX0HK(tsPQqDbxUz*(*c%l?>Z# zx4rMSO0kDa(df>;G)W|Nw;X=10~1I@c1>UxOnD$}ZtQrC=j8bNbnB_CuMG?4RkW*P z$%sDYpoFJ+j;gC@lXQf~Eq}L08+5EvUGGKP3_7r5h*GZgU1NRhE8O&dv3&lfTSi-p z04dkNE#3J&P{PsyTgoLBkt{n z*Ng;!HShW8oIw73i zpvy8W1m&hqqGMhpsQ4M~Mfke6F=6CXi<6$!7}-(!I$A1Nvx|#qRe@`*B2c<4(343Z<6mQEE`P`}PzVnww zlvK594U4>{5;*^TB!z8x;YqMLh$ zwKN9mOhJ_P4J4Cs$rTY+&T^r9Qg0CfrgizIn)}7XC9omWn!T zkGYp*EuC(on|C2<4{QZ(9N-vnb4nX%$+~a}(cKHVp}NnFLE-l#Hxbs|k+N}Z*2SB# zCz4oRQhpitcaOP_@DFx))K)9)E<*wMhC&Vzw>M0SNvdHk!za0?F}+6BX@U11t18CP z-p;cYxD%#meyg!3>%kMg78L+Yd~W-I5&tp;-H0$1y&vuO%Ya;ZhKHlxa@x2#)>ZCx zozX$E<)h4)Jl#=`OG`b~A{S)eYD z84PM3x;eXoNe5*TTgiUh#QCH+o^So!L+WTm72kwm_}dLJTj^1d>FduVA^v(!hA5qp zoJoRL-E~}2p0f7aZMl%TQqN#I*~=DFw|pMxfCP?m(l_7;gI>S$IIN5Ep%#9gi0Q!9 zF{O^lXN~?2Xf0^{2Qo~OX`Nb;;QADD^#qLRPZeF3`S_S$NOrn^$5|D)wr4<9mA>OT z2siP=_hsxiG*k-C_-j*#4-`eEw8!vSJgPCMUuy3(f$MTnIFq$2Z~~a_H5@wtv|b{k zecx~B)0vH>gt)uK=&e)*(TzMCq_#&suWcS{Dsz`K|L_I(3!_HFhD*KPm!tv;L<_cWhOed&Hg}cTU z{8<}_7+M)7Dz9~f{9V?hh^Rb^T2Apk^1m<}lo%~tK<^4{<5)HZqKA0MKuMQUHHff) z8W~3+>1H3GR(l=}$&)4g^8UALM-j&_}x$ zEEofG>>P8;_V?PBUaICB6cZHd11E0XMQrF$Y(u@a}R%EO#mK4X>f_LldvyJJMaOe_+KM?Y-OT+Rdv2cYMRs((ot zoG@A_`&G@NQf!`Qk6lRxp8}|40>)D+4@U~J$-P&F+2e?sntkxXAI<*gc;^OSwQSh zJ6Y3M`sx-NayeDwq|{Og{pzI_HN)aeOi%bP48b_W5#JR7mL2OX*zl9}H8EIDlUxWX z=c>qC&RCOL!g}bKhoN9<9v3dwLrck5zvYyrdJvLEVAQ{DGuejf{X4$zO1le49$~-J zyw#y}_&Z^Bc(Dho=m3U%zctVgu;zUL_Q-JqTJgI_g#{LW@}zr+ag7W8Q+{3#j%BsU zuSF8xNDQ&ntmkKx50#OY8)juDzu%11072n|4VRo`;bNK9yXHVN4wlnmcj1kHqS{4U zlv~eL-y_~w&YVa3Fs-3cTli4S_vjX!_R+-HDbt1u>RH+TD3AJVU$NmdvCEPxsx0YD z+u}myxHY>zXh~*f!R1qG35Lt_f|h(5Ekbm?)gJTO|527J9pO4)?NfGX$u1Qb8@lu| z)vWn!rT~N)-5QlAHvjM%B)-Sx%z9~?Jhf{BQCg>HIWS%wRKD58A@W|ciY;t8^)`O;nf?qzh8WIl(8)>Zi&x;q> zZ}*FkAIFTX%4L6y#Ttz`qI~=93sVcBf<+A_B<@^PKoQnNLe};Hza8A#puwQ7sV@o>y2a~E zj-N`Q5m6H*;SMP=z+n1m##Q#HV8*3>zu3F#ZuL;9FtRoc8`I&`-%=-`cgYJ7Tu?K& zvDz##h9}8Lte$k>_%tgWqy=pz!cZJ$rCWluSy)7B@ZPYQoonfDQ2GBhf@c`zu2abj z2hHOhU#!@>4(ianUnaRLAH3Mh@rhT<&^}0kT5cr$pi?c?NaBr3xvV~4b*Q&#IgHMe`VWp&61eq21R(f;GBjS@Sgwo832`M*QRY{j576u_NPMH z+6>`6NM#_ZXOnxh^-m!{`!%Z~HRuTguWxBwoV8?apPnUCL_hS)!nzj~Cfb!YjjuEh|SX~(ucz3zjEDmq!7(;hK5 zghsaTlq`sj*u|xI`fILfSz*+=koit2iyJp+A?Ig5=pRC=ty~D;u(&)-a3$zr&|$G? zkId>PJ3^tXetCjD2$_i%4yWEl09y&=%=6J&$cazx$3)2#CjM3F21EB#jTVd?VzEq%x%T#_ZTn|-rr3t?j%&7Z z@S2331!)naN5`QN5y>Ytp5zq99IYSgvAXKrkoy+wM9xa*faoM9?Ts8B*CGaxJB z03KE~;(MJXV;1qtc#EH%(Ef{b>#g-b0Y$TF@yige28{P~^~f!1tRvc}w5xapq+wjY zqb0+}`N-tr=#`Vj`**8d{?0|_dlHWvKa~y&WW!F77bckD3#`7o?m{WOyeqTZSp3bU zps2P#C^A~BrU&RFV>s#6J^ji6=(sf!Mn?2_dNgz>>8|7q8>ar**%20ltKo{$pdALR zMT)_)55GqrsG?Ft zjEt0s096A$jKAK($R+jSp}ACpcfjMCMfhxNBzxNh8_Cvf-;vILgI{E}EjBfk$hF@d zUGN3WKX@aX!s?XSlUtLecO?|%u%Pw9uLr#t2BPs@-FBfIpv zy0f7hkxWPRLk*$gKmpL+jawt-h$2;`mYEvyJGF7^FVf&{P6&l^`a3Y2e7p|&BKsU~ zij{A8E|#3m@RAK2Gighd<;Z{ss55t0K4o^(<>P(SP+OK327U_|E;)#6}p>W(0-D+^>(!xMs&<=(g zvzIZ;b~NKpG!s5f3yS$rlygdiM$M*$KfX4od_G%9 z_em41K$YxEWps=mUBsU%-gm*k2D$NUD%=}FEYtL=qw=O)K$ouC-^wNSTxw5G zzZgZvmn89AS}+2?QMx`rIB@WqN#OXHKO?x7J!>_}-n$~I;bS{3Wxjw;KYjMLQmhxU->MwMN?a-?@MXu zkb82Yj&u6_9~-HBGU~~$sUVx_`UOqpfw(YxFjC$CyRu=9s>7u9=DenC*+~&+8ja03 zWPd<3DEA95cDm*v+(eRIu>u!zVvyglKv0FD2T> ze3s3?g5moaAcFw%$0`-0vVFm#-O@FoPvQZNt)z~uQpqYCJ zWqCe_BnM3y{2RC+t@uR9!IO3ZRDHTSVd+H0}p*OZw1KuJi^M`|Wo7*l-3gHjw3vvLyPpO|UpR5#V?ei&D`FvpqUOI_5 zMPL{+!tg{8DzO!$9rjH-URL%d!~q=IWaC4_p`mJ~6q~NMIX|U{Jp%lY=G<*QA_n%8 z++yYs+|-X>^n;o5L2{s?2R1w6p{&)5f(-7hXzVv6XJf}Wt{B3Sd}}h6RSz4%Xq+k4 zz;?7L&+a9=&I#l+n7&`;Vi`R{ua z+I6d7IRXo;u>3p}xF36!BL>`PZjL2KNy(R|fjMGw0`&i>i+8$2osMo0USo=(!e+}m z;$Z(O^O+IFp?JN3wP7DRBW)KWnjQ!kb+^>076;~I6cm+z zGZ=5y(A4uLI~BCuz0<&>B|%n{9bA|!1F!#*%lQo=7ukSeFSiEZgZDw$vSU?LkViWD+T>v~?0X2l!F``3?Az*>m z;SfNI;^PLH^pQhLp1j3&Rk&~s9>`sdG&z1LFB*uLb|Hv(Z9M;0bHLi6)_Q~YyJjiH zPVi3eVZ|%GmPET%9J5$LGkpZjQL*K?LqGEV?mdouXlP;Z`bBRz5j9(CZc4hIE7cyQ z?6Rq~&*DgTH0E0|SCuXqJ5<6n)$t&zJ>72E5`|l&v z+W!j*aa!1|Z$*VHa9DQdRk{M3*MN5$Q8dMEy}Vz!Cls_w1I9TRBi3BQI>T9nz&15! zaWb(1LyodqvZR`m#QrUnIpuVQ`?OV5^s*q|_wIBm0XnGKI1dUqI@0_HDkM65qg+=J zG8bPkD%-9b#4DK^U$Bk);oOD+CeQ}+Fx4{HvP*Zc&u-HZ9bACKukYy5fn%a~cad^j`TSCeihx%v;}Rfr5=$h-m{5?pv;bUU{wl# zXN>N#s;h?PW_=_Uj@gL|m|WLSofSA3f9(q$@|h~oya==OY9XZRqPQs-ZkB=kCpt#j z0AN_@_h+*fiP>*YS~c)eR;3?5OD0sE*hDN1E&p`I)6YZ5j*n5wt}YFLG_(d{-;;UP zW3FoeUXLz+LkoxuR|ey1NJ@`)bbP;aIukiiYe%x7ejkcRb)EEr&Dj%>PVF-4@Bi?6 za79am7BJHyZTh}T2+Sqg1crKd7=%g`kk;_p#t5{Lk!z8TI|}m4yb&|za~->#)Hq|w z9CU=YsEPMiPsasuy0uGP!El9EbmOy6p5Cycrr_LX^Y3>JjXVxN;s?m>gzT&e0{ z&4t&oTEX)8q>{&u;O~lEfpT%qk~g}OxO`#q_Q2W>6tM6rYO$+Nc7D##DgC+&*{f8_ z={Kd|&4`EcfHg~bcGi&)UNf(`f0_$9pOdV!{$=kt!E$AL8a{`%iBVWTE zR=`z|8K-TsbBxytH24=#f?duoWbrLX3Xd=GWsGc@`-kvY30{a&#j9YZFtonXci-CG z_-TqO>h#0WWC&9Je7sqkW-fUQ6e=c2)qk4@G+i$dSeT%6y2KWc}J+NZE@n}tc`C1o_(D{rhKpy%go?142x;RgP zuyNLmC8T$C!;#34({>c-Z5yD67C*7ps3O_nkY6a04|{;V5^%0upUzp@vvz@}$!lji zSs4l9ejjM8t+g{$#h1F!zFTL+J^lYr{hITfP!28LL;{Q_-a$QUvQ`VqZT0-?4@Nx zN3p0PSdGTAdlOFYU7I_UqG;0%H*$h0z+JuA3_J(9ppGhn=TS3jkhbK!Nj1@jIV7T=lk-ehHEZ=KCJmmc!t)Duv< z5VuP+UP|$Y!40h|C_lAc?-5_dx?O!Q7TDvd?a;3ojbiWJo|cKBLD!*VNwuX;wzLLOs&%W3xq?3scWYIJ^WoB~z>$J^ zkPZT*9s_H`A;&WuM>~TH3558qrIW2&wsnxyt?pd(Inxh`76OqhJYTmF3eJZ%yMT@` z9gMNCkW+UE_GXk&6O97*StA3wf}YCr1@XO&J?6;y4@{0k`MR1@_Qv(w#-Sl?9{JPQ ztTCt=t{!+VLOcrODP1orCR{%6= z0=>qLl4QqvN})gW$bW z{*hL4uQjl^6Uy~yk4HCCi2dl&Ds^6l#wAjU!Qv^CERA2+m;Q0`i8Fr z3aA_^&o(JYX-=8rFjM;pw69w|NQElbV!9{F&^d)UkoK#Zhl2aBk2ZN6mSHZMT~4ys zmyIAS5+Eq$&t~xX+a&tEd7dT1{rC+uLSQ+1g3XKa@H{ouH!WLKY~FU zI0wnxJpXZ7KUORWg$nNO_II2ud2#N8 z2y@L?6$wv?bAyS1y>dBZrs%OL)HkyheT`%wOS>A4REo_@n- v-JKgCPmg2d$zMt6uB#x!odk~Sz#;wBXnD@!zYZXOgzz{{4X(NQpCXwF)WDZ*TMl%IFl) z69qy8{a|+Nt;kH;X=gqUZ7ir53eyDxGsD(g*lVP#$`L@$1Kb!>49cMyK<}(bBS$hY zE-(c?dfUzYOjAnJ3PB<|RNkkO$Ew$}JL`}t>#RN^S* z*=b~)SuVCb_qH+$7z`e)#^zFZmJ|KK&T4nWASu54S_`d`PMR^un-YowbIsotdM2GQ zN2Q^1>!pb#tdJO}dse_VYXv6oEt`H8gL6%CIxr8M%m)Q#NB9`ZQCVCGM)u;xLge=f z_{IBt4@=ZDNH~h~{L8d4DX?%bI~u8i{24?A|L_q=GM5)uo~d z-zgLdS-CAsL%RhavR=}M_8kBDBt*NIW0d*FyeQ5=!8ShQMK~U~UHdzc(Vi zg9;ofAbjQP^)1gfi+h?jC}%aIB!dVW?3LbwWbdCNtIqJf&{Gh}UXw6s&^ z5+8Glu3Pc7=fWpVN)2tfd-%NT3#Qgi#0ai^c4+272S1Jhs;4CFTvSvIysMo9_EHfZ z-vG=azg`wkYLf6;fQlo2K(1j#Ye59=&{YY@TXTuFa`w$GR8cHXaXuzH2`a5q*{b25 zKDhda?7W(L;lk4pVmY&fuct-AzcF0)n@aDHMdCm>6TPKbh5^tZf}i&OUS{3|Zd$+f z4i`MoEKJUTrI$-_DpgiqC%d_X1-$MtH5~ni1Ftb>e`9pLLe5K6~Vt!6e(%@W|}c zKvoHoxp=pd$m~WG>XPh(7SM1SX1y<(eS60#sUn4!N!Z+Yu-`4*<;h~8DSz>OCnKqN zxiYW7d2tHiAf>COGUA$j!=YU5MKe+KJtOMmj4bq_OpQ-WV~=b#aj@+24m=;9h3oq{ zH6!f^Exd*9Sm#k)Z%iN%batRQR=KJ^LaB6dTnm1{z!R|!HdKdN%ytBLV*J%KzSSv9 z>b~G$edTDZ+}mJWWofveg)}JlDF%cXiO<%0j+58$hJ_%MUG)HwW}j<`TvD3=yA8Dq zCK=+4YCGKP)s*n)0C;v>;)Ob6&2@5yNMC#s@8$E{vBnH6oCBm5Q7z!ea5~<;nY|H& z6uoQYSw}F&8LWfHm)P{{BrQ8rR^r$XEo=x1>uQ(LtPaCyzwa?H%ARRw;zHxQ*t5u* zCcPj%o~3YM(Dh>|GF-`iiS^baD7)tt3{)wF5ZZ7(_#cZJf~R1ai04Rv zrHUI&Z*KY~tfZZTTcGzOSk+gK`isQhpN{m=mL8{eHD~cC*Z$SFy`j)cLbR7@T0ZbEj9~ku?;`2Lyl9k(J`3^t}X1R@kRhVNGHMdfhTW`cV$Z zWS9ZdqASV%q}4XBaJw7F$}Y^fu;lRO(du54H`F~U@UJP zazBe+LWb7|`s}2}Az6#BqURK3j;CAwVLUdQ3w0s8bF2i__PgHE}C}^1=dnq$nhE6A8TU>EY$BhY z0+UWEYjV2#lWr}&krB>9qJvW}dH$mI8WMZZa@p$iCtMO6xB3W|Zw8`aPU_h|O2)3Y zMXi>wzmJ{=4FEg_7?!ddJ~gV!E@%5n`Pw0A3Vx$Y^mH*iOcAuc&^w-rK8uK_uXyh% zLpS(#Z`J>RV;dDy8m;b*bjn4Y4caxxKe~CR?H}KF$~}cz0x82JPiM1Y+q$#oYPwdY zKl3FNA_sY2BPz7YwHaLzA&}=PSDT;hm)qMM2}~zsDquE$}kAgMj%ViN764j zzL;6SD?cfx`!2y666C5DV4cQsRMzoYva=nTU&{Kr%S6;f`2s0FAmL#;r4l)Y#y8eX!wHR z!quZkMnUGbR2}4d4 zR1NYA4j-}uYdA9Vk7?h}qAl1v?HzY0DNdVSdldi&IcKG!pe9g6)UY2csjBR2(tY#Qih;Llup`GxnPPAkm7^D3ei6H) zdK9Eq0LPXuzdquFEK^_7QQ+M^XoY~hM?24 zVD>N7AXDQ|R)%AnVfS-<=V2*0WS*8xPJ&Ux2V-oPxlw}fn>(#J&BMY8+n^Vq0 za4$WeNUlT`NEvBRhEp=ymM~bzq!3g#0Nwx%2_S9nu>KLJMp`AI4l7>UI|mmG9eqg} zt#8{yBYe>;=`>IJ;(OyC?SK23c)1}D*k~i{0m2q61zl~gQ*1Q}(7m4vAy++YE#MEI z*D~M&yL3N!583l3-?=mOh3ODv)11FNt@^t3cKb1khF7(obphd);T*8 zWcj%~xGizQry=UdTfrRY>Cf{HS7cnb;w=SLe_UEkmkl=x|6!Z3bBF*Q3krTUaPpid9%4Zi8fOQk)v?bXmw0vTezxDgvwRRFC6 zNa%k6?EqOp|R2qeq9Vu0IIC1q6FB`F#?bFf-H3j>7vQl=Nj-#qM{f&|B0T#=fmHr(Yo zygAR?)DjHtYz$S)HJskqj;yYeC16G-D*w+sknk6wvXA;6J}`#Opyb^w+6oYhCKk2& zivrV`X~-e$AMz3({vJ%hfGuziTqzb{aMm`dUdU|*4=Pe?5~g$2lLSnEbn8GFFCQOD zrb4lI!mM9nb`j4CGo`A#{8yWTa-uUxPf5S%CXjhTfylB9HYXZS!mSVe(8!nbVq&+k zt#PYtxdB)v2|t2Hvzwl=^zx}q+(ZPT0%)PQ84yZY8SxDuCQT2;;T%r>y4KlhY$@vO z^+WZixu_i#r+mFw;9Gs%kZ7;Y#l()h-3;vIx1IREZyxJBHGA;%_G0CzvumA_pe4wM zh%NW^AcK8a$yZ<`;ZDy}x_XX5OT)@fX08%MlX}VLM@9m=rBh`3WXf}C#Umg+%Xvd7 zOAI#|&9C`%zlL$%rX7rEgl!&JJqtL?UZeyJmpEhPZ@u~j58k*`^h~k1ZyDQ=o_9(< zIyyZ}FELoSYZ0P(hpkm)o(EMN*X+NANOzmbH0ibMwf1?N@Q~_hS_?lc4(7`TI%|-h zJdr090l*!Niab0eI+-bK+lOLAz;MAHWz|y>)<-c2WJwsO;0ppf!`AJlmF~A{glw-z zaHg!m3c^=$HDdpbK3fJE-PGbAsm9MCUYpJd*KZdRV1=sIb8gkmu@~|DyJLgehJL~J zkcLYTl-(sKa)ThBX|wA43qqi?Bw@Cj4&zejmJny${JNeWj1KT4Owa*vG*kkxi=gp%@%UXJ z>f;;-SLql zjxaafHrO@iPjx#e{5k}LFV)a+*Dq{!Z}8HK1XT%POobOM=vyo=;5A|}P@7#Y@LVta z22t_Npxnh@r{pW!IX(Vrcbzd7cgDSYIOq~Bp;7LdJIFT0DvCbEvw1Bbz#WLGQOc#S zfZ@!QD?!sauB;?wRk@td2mvl>Vm$@!kD(nalG?6N3RKJYCD-l^87TUfRGlB;LjTA_ zWv1xRD`QPr0XO*m-68a)RT$q(5Ui*!BOpT;9$P2$I?<#2kZUgtsm(LH1lrV!4BB)a z2PJOF-M=3Ucj!cIaKMU48OwHR$xh3V)TAhgFLg$-S&s*=i2hlPhm&j-cE)V|KGnA4 z2<^zMDJCovwwzY_O}I^DcD^VPHe6d@2+TjG^cIqS{qccp8$Xw`)w_T6IRB;4=RI7} z|MCW~_F#5}_Mrn97)^_hVP#%e6b<;h(CTThI+g}xp4vJ+GjNR{R8KvwVZYPIFx5>W z{r;ja05oa|r?vyMU}APCh)(jMe`brLoa?n6 zCn!-`0ty3B{dv6+q57fOL+li%#-;f%TY}!qF^ut0R4!pJF`stw$D}-u`tMMuM)N+w7eoS+c5wrSpy&V zbn*Ui+AIJ-MU&!AwSL+-xo(oF?Nhk@tiAv!>z*2#Z>vfz-Yr<*w(M9{T)7XmOtM}A zce>JRqH=ZOPrcXXJVKRQ0>sX1vo-`okJW=Lp2^#RyvG+Ls_oVSg0;h`BXeBPiLO9- zz78AxLEK8pCNs*2E9b-t6YVHZn>Okj+eG37Xcm5d;SV35v72ZXK-GC3uui~LTPJy` zSg%VrvmvW8S%8 z|EXM-TR-UbM|y!#3*-=pCM*6EQhlfds_({rR%x%7n2t}Fn>%JVcTn~DF9pB(d;!45 zT5;n#-S7v*)BIE~M_W>yVk9C9vOFz>!esf+X%X~88g=SK?CKVnG#2~nghLw6JKOK4 z*CKJ+(flTneJ+93_PgmeAqw>ug1)S7_j^;-H418G`09}u_t`a>WIfk#Mw-jpDv#@S z?;l70)n^I)X;wBiLoKckii`ks_}9-buF+Uw+ZJ5OAQNpWvpNjahFpEePrqc=+k1R* z=Rf^*0c_U}Zu-DosyG=-&=gdHTtRtF)mx2`E9)$4fD66cvIENs7jeFjW;d4I6$Cu* zD$z?qM$C}|Cpe)NLb(Crtysm`Crly760Z8cRAODUCeOB=@TC`?3rFCsX{Vw&BXxo{ z8ik;C{VsyOF9`n3$gmwLR_r1(Nkhj%sN=sQG7TM~_Hv7S_YDwvfDF~Rl-OssnC4q| z6LKtx>@nQ{%MVi5O98+v*s$s%_iG)hIE4bxQ=rA6dd+ExaJ9>g|=>2Z~g@k)P;ju1rH=F|=hQ{b6FldLaqy&W=Zu zkIy#Zdmlr~Eb>K#CALzpe9sLDE`?fPyjSVeqIN>qg*fIbvS~3z1Ujjtw3lIHxe~NE z*NGfKGsZpBLG(<*yC|NTUbT)oY(zaY5djyO8sT?n=THar`D?_6gXvJTW3Sq@j`2>h z^@qfh7%mSFRDx-GHXq+rXy}H$5yG^^BC4sp#%DG;qc+PKIH52_T>-ogVN%g&WP|Mu=e%F%(Y|ysu%H=n7 zfa^IR+qA7R)@DT9j~U+ef4$jG&ya+Tlszsrcnf!>(4`|+fg&tL5m2gRrrcciDT}w* zE<&OM4`U=s6MC`D|Ie(TXeC4O+%`csh)m4QyJlP)wg41!95oa_lpbB0J)s&B zDQg6UGzJ+ssU!}H@z4|``h&H;st7-WI76B8I3HI$Hryz+Enbi_8;TG%LH=DMnt!RS zo{ycO?)7Z4u#=V!pr0Nh$iW^q&5w&2{K{w}yq9x+krFoA96;E_|2j}DE|9Ubx= zTF;LZ+b`FsgrJm}hBnz3`;0_L;bi#oOLo->4F2i9^h0w+x1C)`>q8DYt4@?vB-6D% zmNAviWFFcHhn3pO?GpU^%O@gA!U?mkSbyu@`XW-4%fG3rIn(fByrX11xcX<|Ryp>J zYJN>S#54p+B25_diV(PQ^m{|eK3vk91H$l$pQ@M%z|bjpp=6##!8%a%j(y z)3i1gkSYvJxxtUC-^I2fX;sJ=E-11zluhFx8OFV7ft?KKhIar7-qk2x+5(<~P=BhZ z&=kV8MXK_jYZ*11bvuV(FH>w5&a|?OJv$ZPzOsZ$4NOF1P8rs}17&7VS=FUEn*n7=HNmIVRd1u!+nJeDO*s1 zk=4QheRs*pt;UO)U8f6C*ibHRdswGyrijJ;cIW9Z2DyN(iGg5(-U+s&8czK-)8fs=-`JMw+iPYRlib z6NYaIeRHuW69o;SwH|y=z|~d9IiD!#wt~j)%k{1p%Dm;mA64Nd|EH(nF-$*MfT2Tv=E z{62*;kKu$5{NS1PvUvS{n&!4^!@%yMs%yoft_$$$iqYe19poy_I{7`dxRRwLFnjvP zI4(-VpW4!>_wg3nTB;asP5c9_U1Rl{TJ+dgYzhefnM4T3;>Ae|R*BncPv0^W6EODm7eN#KsL1FOXk2 zjtQ)kv>^pF8>nVP5dib>KTYa3jJc}l>_C<89KIACfB6UFC)!jG7WS%`N8Q1RRV)1G zC7%lMI`DhO@(dH(SQ4dwd}=>y1!|P++@F>gBhd2Vy$qtI!q+RRVN0o-OclsG?itZ7 zKr0P1M-UUtB8Dh2&LbsKZKs1l1l2-q)0@CY~Bt)MJ5=BEP8?oF?tregzQ!$`@I zQ3~x87Vkh=WG24Y(>gY#uuWe!<7_sP*`El?jaPPYsIQ^@1^O@W$q5VE-i;LkWO0BS!9#a~#frk7xLCcjE$5B&OHo*C zWs#AA;M~wHKafH12DYH+O0e3wTZK8cx?@p?62$FZp5&he188vG?yL=(nFQ8SCTN%7 zLzzY0|0@r9B*G=j^$TOX!*?k{AXz!VL-l#H@In30OJaxGwMczs4e|Vt*=Gye-20na zj!kL!`98j{yIPc18bl;GC)N>z+A%YcAHH@pIO>!iJg)h#um9)Iv^5q(Hs5@PVy2AG@~!Ow zmER_03H$!}sIuhmUxge}{AjIZ^!nmkK!;Fx$DtXVAAx`xyX=rq0hG$y0WfnfPXU&@E+HecrESL5Y0FEB;!7|z!SVwOO894%-YJ@UstNZ zXd_^)hqxuL>t;@)+ayaj8_wfkr*rE8jnQ{Ae;t4Q+g@i!x+=DT*nlD(9}m;7=>$(p z9igaBPtgR&Z^ymDqvVBaKH?O#V6jo((MR^L_pICv7~txpfF2j+1KzsN12F#TOw}3E z#!7~W906SL!`a>QdkKIGblZSSJ#o>;3@{{29=| zX!i|P3YzqnwA5@k&qnhSDZ&_E#77ZeG?_qY+=#dP?|>$X`&zqG0a(B{%AIZIZz~Aq z+8hd+%_KCh5EQS8%&euc(e1#(yg;BxB3j3PKWU?utig)ACc=Cm@tBk(^WoD@SNwIg zux_gKqMj_x*qLI*j4<~Whxd_FQK=imoO*}){x{>%OI72Ojy%QHdJ}FtB=ZdXX0GxA z41@(wu4r4Pzzy_qyuhs#Q$1-rAu$Dm`dXUG6oIr?PM2T?az;4ESOFv#O{Idpz?5yf z8pB$H$L~z36j>6Lu}lfE2`hX8InaysY5?$PDdvZ#r z?BP`7Xc=f-DTi@h%;Gz}{3kQ(cRSciOV2^6k1ld2?C*acPSX~@0MuK=J6~UTk$F!b zi@shM+u!xLYd5daDAGIcN7v9hn@(g$CpaXe7$9w&+k{8V)F0}0tawMDds)NmGb}7J z_{UY=F`z8j+jDcZduWqj4sNWn9)sibqF}9$y%f&BTuQLdHP8{SJS^TDwjDX`sNTI< z3Z;F{N|&JuZoIw!xA+aL3IaOipaZxhv-jSk+RB@xdepFR@w5&S$S@l~4fzcYcF?u# z0vByL!qd^KN)*XnBSG|Is1ib|hD{G*f8CV*GvH~tf zIt!*h`vH6(KfBo$nCUVuc}sM}{3>-yr=ad!UKne`v#<-f?f~P6c_)TMS|1Wan(YGm zJ}gg5Q!ehAyvmi#<~9P4(Vt66OyQeDq*lf@EboeVC83`rN;(L_L8^s%#te3|rSm)) z_L{pkshj>{8d@J)U?oRlgsNmV7R$*v>T(#31dh@N-s3Yq(ubm zX?lrv3l=Zjp9zgm48d9*QMtPj4@BI3I7lQyu5bhfJr7%vaHL%Wp|Keot60obn)r6^ z)Eq;>#B$%)r7$NP@zGOGv6BsLWjhp$lv)_a^V*VC`gaU!tLge(O-E0p#+#)|U@$l2 zsmgU?7%{D)--yyl9U3s*b@}pJb|6^K;#i8;;AioC`wx*F)S&ZJ3KdCmiO8y01T*+n zg4sa+2Qt;-Z~Tpff9jVTL3CU<;0*>AAX8}|b8`rA&E%1-^g)ftS~wIlSuFep?lI+= zNKmagCxHq@kjB~M@8qDbpU)F7Zc3MzFgzk!Iaa@Kjo&k_J7Tj7^1kR8U@;TC@efm5 zFd^woa)WoS)`?-U-pvF|u1W?Kr}4Q=hV;@Ad^vz6$$ah><77&qik0AHokv)+n~h%K zw0-G({e~z8RA|Nn_kJV*$6d!yavwfIv%$xjX4>TI3qx}nc+%*8-!g%D~^1V$e3XsS) zLK#3@>M}Sqc$jqnZTq;A5>fjnQ{h?%a<&->s4n`;m7I3k#+Ka;R}kE;&0cXzwv1z= zt4K<(_CFM0x7iRzYr>*XWypGzL?VFhJ-{Lf2=5j-s|Qix^`4GpOn+g(EOa_)O~(glw^PeAI&WZI^g?qHjS!uZ;FSrI51t}D-Vjt z>G37Kd$>=vb$n}4GxVG!BVKH6pto4BI&V$P3CzFW=(1X)Ah&0ayOFdwnp>l(bE@OD wVtI-NOeh2h=dHRzcs51?E@Qr?A9mUu{$_WW5~cFmHfbQOs$p5jYB6d^*>%|Io#}k z71KoY7)@kTo*7Ef{B&5t&Yrdgec^c`>Y=C5hO|OY-(Z&=AN=Bov{>CYI?o_#cjE+K z#hDEVO({NGio9;q3(yy%r3pS4<<{6w)kgG2KG}l_MxjxyXse>5JAJSa++?VSleV;= z<%L(JN>(QUdHAiKS>#ho3+2m}^w!>!j2Bf-aW~Kc@5=rd5#4;PTd?xHXAbHx??`xu zj{HCq;g679;Uo3La&mo6ggXk`I{{ei4{rVODqLIvX_Qd{`jABy2d|cokSfWzcpZHf<+;WuDX$Gj9|LHw}(xW0G=p&`=_ec19&gC!|R&f#N5 z4fO}u3kYRE|5Kux9#;hirh1_&KU5G9p}rtkQ}zQXUQAs;{dnjwUP=JmOQh13D}4(Rb3T+qAV| z!+*=8)?3Nl!Gguju8{ky0~%w`y&z?OcUMJF%O%{qU*BQY5!Gv zo}ophQn2&*c$-(7svqrrL}q=5!u#z^3@W(WC*Tysjv(*VX8K=%B0k71rOO37BGgPb z!qv(j84@HBLX-?A^q1ZvbFyQ;7L=URy8cH6v9!gS&uJNvOHy@vk)NS!IH%R+ ze!|g-$5C8$pZ&W`OY8IR5&Q|P8mmU=1jWnRmb zddy0HE#tq;ZHRc0^v=c!Tx|*+&(aI3V=KS+{J)NB!C<%JVy1!GtXkm(hnXEZqd8w! z(mV%p-^&A@;IDl4w0H+hCh}E0+xHY4Qpuy$;v|cF45*u^aJ4SlzGSg7uiKD}+1ZgI z392bOh_UJ*V3F$pEj;MUU9j*&j^5Ust3^b;Lh1>}8f>7+>ZAqh72%sxlk)I z+&EV-8V)7AmIV?hhVQPm3lJ@ML8Er_xCL_!AnZq(tnb!t!D!WYbQ&$dFqE7Gc5Npt6 zTb}?@wx8=NG{9PpeIi`7?UI|9kN*sR1UrpxAR_y&!S0MFvy{ZZQumBGQ)WSOvImnT z@^_!wwoS0Vp^QWVt&5P%j0Ju_Vq|K zwTHSTjH_N%ZrbrLa1(8MJc_QMTAn8$5)*?basMrNvQ?Eiog-Gh(*2CYJWVQ$c^#E4 z3aetp_6sKS5z66P>9J+kiX6OO8#dVDOR!D1icpB82vkn}1N2P*QK7{Mo1+}{)O6oA z`U`PvLY_oZ*=?PYEl?2~3ZgzEzn2i=8WSV*B?Ch@2B&`1(47mUHnF=Uy$Aww&tPw& zkFV7g0L3-q4Kvf6t!Q7pr&jRGuENPeRdtgo2`&EFJ*LLBUhjb(DjkBC9qqJSixlKo znRc47<_JSvRXIvHceq|noS0UJR_F`;l}mh@5<9g6h9Og)X*SbACGH^s4WSlISNJ78 z|5{f_C?3ck#sc&n1WP+Qa0tyKhC7qbnX(^vW8pD`UP>?e1A5-hcf<~6#cAs}&wJl!O?QJ;tv;OhU+Y+P%12EcIF*gESyO`ox8n4k+k+J@%d1D3uPqw#n3eyBcQMCAX z)3t>XF#v`8!6;Y)QtO!@PA8+KL8cI4wMlIhHMOw=yK`En8DQ%7JFlohdZ5>|(G{f83MZH{x;sgQR5&s-EV>IGK#ZJs#xik0 z2AvX<&WwK93;O*a5KROK40PJgL7!|5uB!X#Ha;`NFUwn`?m-sdOkjC{7_VO`AD8S9n?+qAoCmw9h<*>z+vKK3Ou{WlOHPjum* zStnaxtISka+cELUXt9C4pZr4@0)sV4H%8Vd_KZ?C8PZDF z>geHGqFRPa20-~kNxc+fUOh{N&2xrThTCN{Dp{H}3?BMp16z#PYK40=tyyd^av7C* z1&g0-u_=|>dKRaRR$Mj--EC||2dY*h$tDK+l*>8U@j08(JssJOo3Gae17t1FOAz!jYMFU`a-hiyl8X!|MT6PQ5-A!0_xDXFYwL9t2^4R< zc|(@!rq&e;$5Lv}&=eQlw_Ww^YqS|1+vWZ8;x1hr(*H)0LGX%{_ifgi_4KOM3`w{_ z#K9&Fe93|HwhG~XlP$u8zNhdreOy-qAspN$@nAe<@HepwsU)3#RURglGZQ{02Kc=N zDZmn4<>Kh-2E3R8^E}Am1zowF8UmFSQmNZMmv7!=*CJEKe{0GX*#j$`I|_oZLXT=04I!ckeVyCbsgXGfl#c%CMUviGk5Dp&IFbh^d=d>Tk-~Mh{W; zr&TP7?7N6XS8I57!OC1>$DEMFDm$md$_ZWyUqx6F(A5PciT%7E+9zruZ zRD1vCF_KDX6hHhTD!4@@Saqzrwic~|%K$fZODG-b)>gmj2qA?nPym?<*>~M##oD^Di?Hekim%?n~oLJkBFg~#AVn02VEvXBn(S9Y=vy&FiQRfUa_5E zw}^F%Nfxq3R=v>SyXwj9o_FC=)NRJYa-^59WIzeu^L*diw5gl8c>bMpYxj-r+kaaz zgST)=p!-}Ln8@hSsD!Y0#o`q)a{e7=Ju%KM;{?2=6l6&(RW9{qNOmEmUZh|V9#gugESC&WAS_s}ioM1?Rd#8u3QfN@9ny_Lv%V39| z@Gdtd4zRa84!1tr3pwRIb#3PGhr=baBTRK+90Xe5LH_(($dN>?cbjN9Ot^x-bY2Rf zm8`FpYh%lNY&*K+im8VMi~j6lP3vb7D24xQ$@wV-@V*|olG1Y;`G616VMDsy+|87ryB99^2aK$JU-`QN9FHPr!s7v4^8vB!MIP^gv z^JB7?P0viA$gep&r-zhSAcVs9T^X=gR6U38;}~LC4w-Nl3&RYplTLmkP>D}R?-@Na zMFN8$a-0HQSV^kx^G`-O3>uUyO-Z(VtFvs%UW%u2r^{%;PO0-r&MN%2<*;6>jV${X znc8xDZ(j#5;~7Tj+grsBrLJnmr6p-D^WYxqU+ZtG!{l4H%4>VpLbdnk7-tcF0AcEc zT`hi@EDuV@>MgP60Ar(ky2Z1b9mVN4#sx813w?9ddV+_Db8~f?<`Ayac*6>4_7wO= zp3C*<+Z-1(>48z>4|hwI=^%1M17BzWCKeTcOmhSk!x*c=`|=B>6>UO;ZYh?lFUA1X z4xW-di@m4Dwz*r7NSLbP)(1ou8@cik-b7NHqv5|EH;g4Ai;GsTp8o?i8lj9R%mMoz z^3v}%HPjeGNX*oxJi_b=vX!`sW&fw$e#2r%;XkqiI;-YBsD(93ls(9!?ndC|*o3`p zs-BqJcG#e>xcv*8P({WMT{I`LdD)Uxy#~QQ?ok|~xQI@u+G$H9m#E<6cg!moG z1VN>I>u-E*l|b}BE8|RI?YLAa5jnd!x*MZdWa)OE4}6%Lwe{q^+^ym<-SAu2Fu^r* z%|kmU*H=M%sErp){*-se4|v|6VBVzQhdw+@Auw_4Z@Dj7VHeeNz{nv$|07P(j}&6G zy*Hn(WUeNlWNltM=ZdlP`id(t3W!mf95s2wtcra)2m9dM^0Rr4o$Gi!1SVjj{I6<} zZ@*XDMj#y;FiQaQIE+P*{%oXmNZ8aC8gMXyfO1(Ws&=j-5!S@!Oyl5}bjFM4YGC7i z-NS7Rlz};JvUm0ym406*X9ocmCnr zN>)wW@L#r{+4m>d0iNrQHNuw4hc9j`$+t;SXM$1j9-fV!20~z*|&0k6RFKj=FZ{8c@mG- z_1g=6qfS!I=T0x);&L3F0X_+SfAt*xL3Su)@K^+QjD^S6NivG8x|uao8=MD98&)ex zpYc~7xe=Z;hR)C_-D0sO1Y#L|p!$$MQNf^Hs-P?w>I|N=VS3rf>EwIXlP1FuE%6j? z_MsSe)NaufZbRU}1}ZA^fLhe0$XbW%_#I%nD>u?nrEHqzxt5a3uTUub;1nfjT@dRb zW=3%yD^FW)bw>-^OaYm_B)gRQ-0zMmkEdJw@^lUmzYg!*Ke>RGT~e^o2pdua*m^Ko&hviDDaWkCfv zelJH7J&K1dEd)o&XvvzHg?bVp8e~%qE3jSnL17;k+-f&D_7s zDK;`W%+5&0jyJpF7Df*O`?`7*+LXVu`RoCaUM%Je$YN8{__H{(Er->-r^ao(XigPt z-6O98F>`s~q4BX6HfGkT?p+$DaR66BGi-VV%lQ`1KIMY)Y03YZN&nJeiPBCJmp&yI z>DDce1ho0pf>0PQ3C}Mdi4h}PuS=z^_dj_B0w9M1p(9J)S-hC2#A~JO(TAxv6O=XL_!QF zT!^3g5$ObRgCqNQNXMsbLPCBG`Q_<;WCypG3-e@2VoRqK;5>%ou+4Em7?spLg5)Bc z7+kg7A7v%?|+XkZs0Y*O2^XF@-ve+t>XHnCQtk+zT9+x|Sk)$2Y#1-5f@|}B_ui3x(d4kR z?^69K2GkEo_f@95l=S=pS^#YW5ERjk0qmSMvNX7HPL^P%BY*$}(_&0#rYu0iDoC;j zH|fd!;)yVIf+AgG|C>bctNJ}_yAMg1K?Ze!i%SR{>p5P)5VPi!j^%YZ2oE4j}M~ZSLY5C6v3J z%mDw6R;`oO-vjr4*Tw`>EP$UpO8z=?zy^k9_7$?qL|R2TZ5FijP>qGB+@R^bv!Boqhls}bdM zK~j}+4r_M}wzVND(UyaYARK-^ys5L7_$g|y9GN+8&hX63)2-18yC$lv`kiB?cINT# z9uD>WgW}%7gV?W1^ejV=YYjcT-(mO{{S%u6sE?HJXAg2j&RH2uAxEql3!wHC>C&*a zL_jBn^5(BDAGhNod!(*bghfW#^^Hp*OFo+G^WD7R&g>B|r=W@oM-ihcX(vcD!4$!E z!c9%Rk9?wiWFW%#A09QD*%q0Hh;h=`z!O3iwX3c{5drM?NrLXf@XKgZttyD==P@J&>S!&HWn@( z>Jac2oUkmvLxfy?c7J2GjSX=`nsoMrN5Jd8ssnZrRSB9yEP9KEyHq#kTuxFH!lbN_ z?^rF{KaQPZCbTLuEplF1k$r$~X1pPoF}3@0VJ}=9RukbU!w?n!EegHsnzAS-!&t8# zW1C)>pvmU)Xc9h;JCykpe|fDvK4)YzFYe@$vtxx8dyPbIia8%#Sc4nmZAwLomhYNN z0#xPNlo4J^%G{@3MlNU+Ob2bX`4M6^JPU*6U!j_{7dN1!AaWwbI^{XA;c0Jp(j-ojW!M+Oe^7Cf&*f}TL7^vwW4 z92X^Oyo?xe@^5DE>TS}DLMowcHA@#?@Ylo4a9>UruN7!!ADY>IHiO#ypH>5P_N5nR zZmnxa!CqYr>0CVrB)`X_*LtA#w0lKSMf9gT9=w>1fNbQ2WHPkt=ik|m$~_>ajQ3RA zaPr{C?W(Xy7h@xN<)Gb*_$)yo=mG{bOlZ8swg}w<&uJtHBMNqg#%#a&f%Q4|jHT$@ zO0djO=0q?aQqubbeMa5&s**?gdSUcH7Gr)EwlqJq1A%kD$@DNHi}B}|^huilAC@f- zbGk9wcZYtTv%%9_ct~grU+*=pn>%(f?KvrW@7bij*AS2j(wl-ht+fi2k1wT=w%xFV zd9Iln3$l28>KMM@c}+x|vIW}mnFBi--Au%nXHN?NAXDMHL6?H!WlW=WV$(wDE?QE; z7bvy(;tWdyt1j%(q^Zb~^HqV>ma@%}<7M{NfwCw+*<`@$X%SlKbx}CPGhSbEe$L>D zLeI8*E0Pr6HyX@7gBrr<`>q-lRO?z5Qi{urlVv8+!m3J-11@MzPf;Cjpy6(&-g|cQ zti@4VpndwGf@X4nbb|vjJ~A|Cs~(zu&jTlp(}j}C3kZ$r$PyOT%su&t!OkHx)FOr{ z1M083C6LOB?bUfK!kNJjZO*|m#s>k5!Itd%Sz~CpLhNOFSUZAizn^1AN`oJh*_p{IlVjDO-H# zq8mlML$h;C-Os7pl*7QHnQ0kY>RUND3i^k#=t)6G>;5S04PW6G5QqqKhx^Akz{J{7 zTwL>b82eKh3S5P`uP?xxaX+)1y$If3sDxpzmE5Y3r@C!1=Mz>|MvGfZgHHg3_bf)_ zn8#fVbHIch6gKOA1t63gvE)cUL&GF)+@*zV!O1G(KPy6gLKs7t8dkZlA3!AJ`;BQS8_TlgpTid0GkK82tPWX7k-D1lZO)Q?n$I0VD`FyNDdl9!=z zKWt+G!}pmDp6rY%L9EvI!%b<W^rpT-F~-(?&l8Gdld?Q2Cy4n!FT{5xMqJgf^husE@XJoj2^`sp0C zj05=)AS$@nfEwkPJ>nAzkOY1i+!QftCS-6Kdq6Zg@}dN6Ra~7W%k&ql89DH)EVHF` zL4;#j?}iW3_=QRN^>dz;c+d_++nTNF)8W%nwM}+{?}=M-Sq26&)pTI^p7*UjW+T_u zY^7i>8D2OA6jkqDGj0A4#O;PU`ef4kAL>*&@nA=y455wY)-p=rQj@q5G8auk-ptqM z%vJWt-6krvG-fOB3OUj!JT!^97sdr$NI=XvR8XM2$gcf7Kq-1*D&B?N{sGr$=h00~ ztSc$aJVo7&8OidH6-SUKC9+=b>bXv$t#rn3Mm~K?w{@ih@n{ci9UvB^jFo+b5~0uU zJtYL}eUgMD(bk!Af7bEp0)#Rf+gUe15)L(F)<0`XrV;3fiN*Yv3)3R6VzsyvZh-UiFq0h+f%!iNK@B;vCVW zsZigXuv-2w*u{P_`pawN!yN2N!tvA`FPqZUlQxArIsFt@NO0kB5qengs`}p6sI7XW z^ojFknr^GluO_<59=XWrlNpi{2X+%;}`yy--=zU8=KnIHw@eM3=J z)KK+Nn`K}vMvT%Vg?)MlYy&5h6YO+h-mGvfiUHUwXy6BN$ua!488?hc0{6Y8T#rTv zSM`VZ*hB7wG?*;!>Zybv>4Q&UusxdID&*>)i)_*&Y%8nV;oV2wf^H1^xM@7AB*^S( z$*7Jt*4Ze^`z5=1M-N`DxG6Zp+B3MM`q|CZJ`@Mz1Jg74xr)4^q z%(7FKMFwWY|1hcdKdp`fr9}CftsQJ{2w3I>bwiB_6`*L4P@JC#q9e z28Dtq)nUKW0!L6O=5ULwthtaPY$bG9rpEQ@X&5_Y)W-EAqc9=K5Hu9eSxv<1GEua1 zR|j{@bDijC^!#~MJBqI>um};S1PqKIi(im!SqKjhDSny+*bCNTTzx1V2fTRS8y4Rv zI%=HL>1q*~E7Pu}LgDwjSNYxdqL6^*^iIC;l2F226SE2Q>Y{sJMTRzIBNOw}nx~PN zzT&le$vx^YtX$L1bF3v8#sTpoIts6h>iA=@mg+hpM_|=_ue=tay>hZ&RK=Kv3{}?v zL(*`vm+k~YmKH=KYIucG<}!Nm96=|AVMsCppXfE+Ohu7pAu=b448Cg&F=$RPFWBZB z0*^KWu~2#xc9T}SiOof<;#hFtDycKi73%N2IL`{BToeBm9FSl%pXllg=-0M=h=kbt zf;U^8VKILtNy7u1m42w8Jh?n8&nRBpvgOZIO3jeL!aK7t1vG7a9JRlU*JL|*UydJo z0wp-#($*q~qsvp*e29YBW-vWzr+HpV??hUa5H7=vwTbxRB~O7)k)1{iSyO=53#AKB zHSmRKYCv*Ej zNI%Ik*d{w@D8i)fv^hxzrrjK4m7^=~=_P!Mh9!FH2PC`2#lk+-NsLWkg;G(B$I}!o zi-m+2a=WKg{@$#W_WVWe-I?9g!D?GiD1c<_WZ0`JuJw&P3iGA*LkJ7(zuYcO|8;-V zWR25;kQbe5-vP<*LP_|ik4%G5#XSKz8e?bg`d4;VGb?ewFqMP}PTS7zz1L)*WW(~t zsj6QvdtErVA_;}EYL%=@V+!~}455lTo)DtH!!s_NJX;*?jrDRsPgz*Q8?UjOv6Ca_ zM?y-%M*ag1+4))odiPu^>oBtT;h6@Z@BqsY7%FxS#Wgw_V&PYg|0=eGU_ulOHC@2Z)n8`~l?1oa+wI<{$no>P!| zgl0W*M0fkfXnltLh8@)W5-v9B7d$dBZY?wQo*lJ0ynjP+h9rhcI_var6VdK-Z94jGv8e$K4Mg5Pa z#K`LEv@!F&Q~7OZi4gPzoX)IUsf6W}mR1d`(s|rpm&wc6IgjlQUpLKTFcCSw@Ow0u z;0u3H5K3`&h^KJYW-)6oPWsLxel=Z2%(Pa`k>DWx8=Lp4Fn$7G3W`Qw;M|~g3CUC? zQFX)4v^tGGCnTLIpNPKewc`i&*}}I^Pj3-ce~V8g`a(6|m0mOp1=X)BelbKBb%$5A z)KO888)F=FmEadCHE!Sc?p(SgOzfd~;Aw~c?XXsNzhz3VtDh0UMqM^w1bU#$CmV|L zDChLb(yzB26iP{)t~;D7Daj(35rko!$XA2m%95h})eO?E&NOFc4cVDRs~al~u%ZoGy2;M^2P#L#SjG_!!-Ie>rL z3gL@-(4-&65Yfku+n$bTp${#a3Z8n4V-hsBG*9V19A_-9Z+uY;h{Um^tf~PJV%S?) zD)PK+3ZC=-HN59m>N2Vwgv$PuFPUw?>NGyVarMr~H!c>Zf;EK6e&3TrifUv>E2KB( z$Jilx7sKEVqUE1hPykl5NLN>=ntHP3uZileMTxWVLQa0!`$3kD-)q<(-Slm3mby3Z z&&-A1sISB=zdtSGj)D3a5KjriwcUlcEWjX}!=2kKGONV$FN<4nOW}s$w;T>YJTf+H zM}P*^6uaR`p|8F`O`mo=JlCd6`pAN3YGHogzr5E~7HjgY?5>C*IG4a{=Ors_>)$*_&tHPw!kpZS`v&l#fVuf7-aGQ diff --git a/notes/capt_website.org b/notes/capt_website.org new file mode 100644 index 00000000..c9d22378 --- /dev/null +++ b/notes/capt_website.org @@ -0,0 +1,68 @@ +:PROPERTIES: +:ID: 54f15fc7-8c85-4bde-a15a-ea9fe94e7c2f +:END: +#+title: CAPT website +#+Author: Yann Esposito +#+Date: [2023-05-12] + +- tags :: +- source :: + +* Features + +Base statique + +* Workflows ideals + +- B: beneficiaire +- L: lionel +- P: psychologue +- E: educateur + +** Beneficiaire + +1. B: Cliquer devenir beneficiaire. => Explication, etc….. +2. B: Action "je suis intéresser" => Formulaire +3. B: Formulaire: questionnaire, envoie un email/notification + creation de compte (bloqué). +4. L: check oui/non répond; si oui envoie du docusign si non envoie mail. +5. L: Après signature déblocage du compte (sans paiement). +6. L,B,E,P: Synchronisation date de réunion de visio avec Psychologue, Educateur et bénéficiaire. + - possibilité d'arreter le process ici. +7. L: Après debrief de l'entretient déblocage du paiement du compte, lien avec + le compte de l'educateur. +8. B: Selection de la prestation (envoie notif à L et E) + mail à B (veuillez + payer etc…) +9. B: Paiement de l'éducateur (via le site) +10. (optionel) B,E: mise à jour de l'état d'avancement + - E: test habitation du beneficiaire + - E: selection du chien + - B & E: validation du chien + - B & E: sceances d'éducation (pack 4 sceances) + - E: validation intermédiaires (après 12 sceances) +11. L: remise diplôme + +** Educateur + +1. E: Click devenir Educateur +2. E: formulaire avec nom de l'entreprise, expérience, nom, ville, num tel/mail, + etc… (=> notif L) +3. L: contact direct +4. L: envoie contrat (Docusign) +5. E: (depuis le mail ou direct compte) remplir le RIB/coordonnées banquaires pour paiement. +6. E: voit le beneficiaire dans son compte + +** Lionel + +- Liste des educateurs avec facture non payées > seuil +- cliquer sur "il a payé X a telle date" + +* Plan + +1. Partie statique, pas de création de compte, juste un formulaire de contact. +2. Pour les beneficiaires, une fois le formulaire rempli envoie vers le lien du questionnaire + 1. Auto-création de compte. + 2. Logique dans le questionnaire pour arréter en cas de pb discriminant + Questions obligatoires. +3. Dashboard liste des comptes, et les reponses aux questionnaires +4. Pour les educateurs, formulaire similaire que pour les beneficiaires mais + specifique aux educateurs. diff --git a/notes/cisco_qdd.org b/notes/cisco_qdd.org new file mode 100644 index 00000000..59110194 --- /dev/null +++ b/notes/cisco_qdd.org @@ -0,0 +1,72 @@ +:PROPERTIES: +:ID: 32684342-7935-41c3-b855-4a748662b15d +:END: +#+title: Cisco QDD +#+Author: Yann Esposito +#+Date: [2023-05-04] + +- tags :: +- source :: + +* Individual Development Plan Template +** Results +*** Accomplishments +*** Improvements/opportunities for development: +** Principles & Behaviors +*** Accomplishments +[[https://www.cisco.com/c/dam/r/team-development/performance/assets/Leader_Expectations.pdf][Learder Expectations]] +- Advocate +- Customer value +- Learn +- Team for Results +*** Improvements/opportunities for development: +** Team Impact +*** Accomplishments +*** Improvements/opportunities for development: + +* Quarterly Development Discussion Template +** Performance reflections and feedback +*** Team member result perceptions +**** What have you done? +**** How do you feel about it? +**** Is there room for improvement? +***** From you? +***** From me? +***** From the rest of the team? +***** From Cisco +*** Lead perception on Performance & Feedback + +1. Show the quarter report +2. Add non code accomplishments +3. How I (the lead) feel about it +4. Room for improvement? + - for the team member + - for the lead + - for the rest of the team + - for Cisco + +** Short-term goal setting and development priorities + +Next quarter: + +1. P1. XXX +2. P2. XXX +3. P3. XXX +4. P4. optionally XXX +5. P4. XXX + +** Long-term career and development priorities + +How do you see yourself next year? +In three years? +Would you like to change anything, or are you happy as you are right now? + +Do you want to be promoted to G11, take more responsibilities? +Or are you happy just working as we do now, and have a discussion about +progression later? + +** Agreed upon outcomes + +- Short term (next quarter): +- Longer term (> 6 months): + - Save these reflections in the long-term priorities field in Team Space. diff --git a/notes/maison_martigues.org b/notes/maison_martigues.org new file mode 100644 index 00000000..6d1426f2 --- /dev/null +++ b/notes/maison_martigues.org @@ -0,0 +1,45 @@ +:PROPERTIES: +:ID: bac1c907-5733-4837-83bb-747e189432b5 +:END: +#+title: Maison Martigues +#+Author: Yann Esposito +#+Date: [2023-05-15] + +- tags :: +- source :: + +* Dates + +- Attendre l'offre de prêt: réunion 15j après. +- Avant le 19 juillet, envoyer les demandes de dossier ouvert des banques. +- Aller à Martigues seulement après avoir reçu l'offre de prêt + +* TODO faire le virement de 24250€ +DEADLINE: <2023-05-22 Mon> + +* Conseils + + +** Cabanon piscine + +Pas de régularisation. +Imprimer le PLU de la commune avant toute construction. +Si aucun doute sur l'acceptation le déposer. +Attention au PLU principal et annexes. + +** Cheminée + +Faire l'entretient de la cheminé avant de la remettre en marche ne serait-ce que +pour l'assurance. + +** Assainissement + +Voir avec les voisins, servitude pour les canalisations de la fosse. + +** Checker les mails + +Société AR 24 + +* Vente + +RIB + Carte id pour Krystelle encore. diff --git a/notes/rbac_for_clients.org b/notes/rbac_for_clients.org new file mode 100644 index 00000000..755998b6 --- /dev/null +++ b/notes/rbac_for_clients.org @@ -0,0 +1,129 @@ +:PROPERTIES: +:ID: 8f30dbd3-8c24-4fd6-b784-2753130453ec +:END: +#+title: RBAC For Clients +#+Author: Yann Esposito +#+Date: [2023-04-11] + +- tags :: +- source :: + +** RBAC for clients [2023-04-07 Fri] + +*** Visible Changes + +Which changes to expects: + +1. The User model field ~role~ could have more than just ~admin~ or ~user~. +2. The access tokens (JWT) claim for ~role~ + will also have the same new potential value. + +*** JWT detail + +Claim prefix for unique identifier: +"https://schemas.cisco.com/iroh/identity/claims" + +The claim +.../role will have more values than just ~user~ and ~admin~. + +Expect this to change, and potentially, the roles could be entirely random ids +without any central static table. + +- 1st step: from: ~admin,user~ to ~admin,user,sat~ +- Then more roles will be added; for now ~admin,user,sat,sec-eng,it-ops,observer~ +- Future; potentially, custom roles, which will mean that the list of role will + never be fixed and the relation between a role and a set of permission could + be dynamically changed. + +*** Respect Permissions from tokens + +Roles should be easily added/removed, and we even prepared the ability to add +"custom roles". +We potentially want to easily changes the permissions associated to roles. +Thus all user's permissions should pass via /scopes/. + +To check if a token provide some permission you should only check the scopes +of this token. +The recommended way to do that is to use the ~/iroh/profile/permissions~ endpoint. + +**** permissions endpoint (recommended) + +This endpoint provides a way to ask with a single HTTP call multiple different +permissions questions using a token: + +You provide the endpoint a body with a JSON Object with the following format: + +#+begin_src javascript +{"widget-1": ["inspect", "response:read"], + "can-do-x":["scope-1", "scope-2/sub-scope"]} +#+end_src + +And you get back a JSON Object with boolean values: + +#+begin_src javascript +{"widget-1": true, + "can-do-x": false} +#+end_src + +Using this endpoint will also provide you the opportunity to change your client +configuration to use a new JWT format that is a lot smaller (guaranteed to be <4kB). + +**** check scopes directly (not recommended) + +It is also possible to retrieve the tokens by decoding the JWT directly (or also +calling the ~/iroh/profile/scopes~ endpoint). +The main issue with directly checking the list of scopes is that IROH scopes +have a tree-like structure with specific rules and in order to duplicate the +permissions endpoint you need to have a local duplicate library able to +understand this scope structure. +For all the technical details see https://github.com/threatgrid/scopula/ + +*Note*: +While this is not recommend in general, this could be preferred for very simple +permission synchronization. For example, for ~orbital~ we only have 3 cases, +~orbital~, ~orbital:read~, nothing. No sub-scopes involved, not many specific +permission to manage. + +**** Why not check for roles in the JWT? + +Say your application should allow be used by admins but not allow any other role. +Say we create a specific scope for your application ~my-app~. +Currently any admin can create an OAuth2 client without the ~my-app~ scope and +thus expect this client not to be allowed to use your application. + +If your application only check the role there is no way to construct a client +for an admin that is not allowed to use your application. +Worse during Client creation and Client Authorization, we display a UI that +explain the permissions associated to every scope. + +*** Pushing your internal permissions inside IROH + +If you want PMs to easily change the permissions associated with some role for +your API/Application. +You should ask me to add a new scope for your Application (many already exists, +~orbital~, ~ao~, ~cognitive~, ~sse~, etc…) + +From there you can use the notion of /sub-scopes/ to associate different +permission to different roles. +Here is an SXO example: + +#+begin_src clojure + [[:scope "admin" "user" "sat" ] + ["ao" :rw :r_ :r_ ] + ["ao/execute" :rw :rw :__ ] +#+end_src + +This mean: + +- ~admin~ will have the full root scope ~ao~ granting everything +- ~user~ will have only read-only scope for ~ao~ (denoted ~ao:read~) providing + read-only access to SXO but will also have the sub-scope ~ao/execute~. +- ~sat~ will only have read-only for ~ao~. + +So SXO team can, just by looking at the scopes (and not the role anymore) decide +what permissions a token can provide. + +This is also very important to use scopes only for permissions because this is +the only single way provided by the OAuth2 RFC to limit permissions to OAuth2 clients. +So even though an admin as full SXO access, the same admin might not want to +provide this full access to a 3rd party that uses an OAuth2 client. diff --git a/tracker.org b/tracker.org index 61c3028e..a13304d6 100644 --- a/tracker.org +++ b/tracker.org @@ -1,2448 +1,3 @@ -* 2022 -** 2022-W05 -*** 2022-02-03 Thursday -**** DONE activate logout issue :work: -:LOGBOOK: -CLOCK: [2022-02-03 Thu 17:17]--[2022-02-03 Thu 19:02] => 1:45 -:END: -[2022-02-03 Thu 17:17] -- ref :: [[id:7fa185e4-9866-4ce8-ab60-d62d8c80b041][Mode d'évaluation au paradis]] - -For https://github.com/advthreat/iroh/issues/6250 - -The fix (https://github.com/advthreat/iroh/pull/6194) has been reverted -(https://github.com/advthreat/iroh/pull/6246) because SecureX and CTR work -differently. - -GLaDOS and CTR must find a common solution, for now, we are blocked. -I think the technical solution to return a 401 when the org change from -unactivated to activated was proposed by @alucigna but I couldn't find the link -to the discussion. - -cc: @alucigna @DarMontou @sabrinamokerji -*** 2022-02-04 Friday -**** MEETING Weekly Kirill Presentation :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-04 Fri 17:04]--[2022-02-04 Fri 20:24] => 3:20 -:END: -[2022-02-04 Fri 17:04] -- ref :: -***** Notes -**** MEETING Simplify Registration :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-04 Fri 16:37]--[2022-02-04 Fri 17:04] => 0:27 -:END: -[2022-02-04 Fri 16:37] -- ref :: https://cisco-my.sharepoint.com/:w:/p/prdass/EXwUr_HCwOVNte7KFcFzUeABxvTZiL8vZTgd8-5WInt4hA?e=4%3an55ogS&at=9 - -Add your status in - -https://cisco-my.sharepoint.com/:w:/p/prdass/EXwUr_HCwOVNte7KFcFzUeABxvTZiL8vZTgd8-5WInt4hA?e=4%3an55ogS&at=9 -***** Agenda (to discuss about) -***** Notes -***** Actions -** 2022-W06 -*** 2022-02-07 Monday -**** REVIEW Github tour :work:review: -:LOGBOOK: -CLOCK: [2022-02-07 Mon 10:54]--[2022-02-08 Tue 09:49] => 22:55 -:END: -[2022-02-07 Mon 10:54] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Webex tour][Webex tour]] -**** CHAT Webex tour :work:chat: -:LOGBOOK: -CLOCK: [2022-02-07 Mon 10:33]--[2022-02-07 Mon 10:54] => 0:21 -:END: -[2022-02-07 Mon 10:53] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Check Customer bug with tiles.][Check Customer bug with tiles.]] -**** DONE Check Customer bug with tiles. :work: -:LOGBOOK: -CLOCK: [2022-02-07 Mon 09:52]--[2022-02-07 Mon 10:33] => 0:41 -:END: -[2022-02-07 Mon 10:52] -- ref :: https://github.com/advthreat/response/issues/1076 - -Confirmed this is UI for now. -*** 2022-02-08 Tuesday -**** CHAT random rambling :work:chat: -:LOGBOOK: -CLOCK: [2022-02-08 Tue 10:47]--[2022-02-08 Tue 17:32] => 6:45 -:END: -[2022-02-08 Tue 10:47] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Email tour][Email tour]] -**** EMAIL Email tour :work:email: -:LOGBOOK: -CLOCK: [2022-02-08 Tue 10:13]--[2022-02-08 Tue 10:47] => 0:34 -:END: -[2022-02-08 Tue 10:13] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Replace SSE IDB with SXSO][Replace SSE IDB with SXSO]] -**** CHAT Webex tour :work:chat: -:LOGBOOK: -CLOCK: [2022-02-08 Tue 09:49]--[2022-02-08 Tue 10:13] => 0:24 -:END: -[2022-02-08 Tue 09:49] -***** IROH -Remark about deps in IROH for Ag (pb with the formatting-stack and clojurescript) -***** IROH-Social -***** OPs General -***** DI Integration -***** Replace SSE IDB with SXSO -Jason Chamber links: - -- A-Ha link (Epic) https://ciscosecurity.aha.io/epics/SECUREX-E-471 -- A-Ha link (Feature) https://ciscosecurity.aha.io/features/SECUREX-557 -- Jira link https://jira-eng-rtp3.cisco.com/jira/projects/SSO/issues/SSO-458?filter=myopenissues - -Demand A-HA access -***** SecureX + ThreatGrid - -Follow 1-click deactivation discussion. -*** 2022-02-09 Wednesday -**** MEETING API Design Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-09 Wed 17:30]--[2022-02-09 Wed 18:16] => 0:46 -:END: -[2022-02-09 Wed 17:30] -- ref :: -***** Agenda (to discuss about) -***** Notes -***** Actions -**** MEETING Sync on the IROH Team capacity :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-09 Wed 15:26]--[2022-02-09 Wed 17:30] => 2:04 -:END: -[2022-02-09 Wed 15:26] - -- participants :: Prerna -***** notes -*** 2022-02-10 Thursday -**** MEETING Town Hall Namrata :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-10 Thu 20:02]--[2022-02-10 Fri 21:09] => 1:07 -:END: -[2022-02-10 Thu 20:02] - -Really excited for our session today. -Really candid feedback from you. -Every Quarter. - -What we are working on and why and where we're headed. -***** Intro - -- Business Result (Martin) -- Product Strategy (demos) -- Product Demonstrations - - -Leave a few minutes at the end for some Q&A. -***** Business update & strategy discussion -****** Made a sell by showing SecureX -****** XDR FY23 (top priority for Cisco) -****** 10k customers -****** Improve Renewals Rates -****** Customer with EndPoint + Umbrella lot of usage. -****** Big Users use SecureX more than small ones -**** MEETING Farewell Alex :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-10 Thu 19:01]--[2022-02-10 Thu 20:02] => 1:01 -:END: -[2022-02-10 Thu 19:01] - -Expertise and broad culture. - -You have always been extremely helpful. -Your insights were essential. -Without them I wouldn't have been able to grasp the scope about what we are building. - -And thanks for helping me remember about Gundam and all the first times. -**** MEETING Weekly Team Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-10 Thu 17:00]--[2022-02-10 Thu 19:01] => 2:01 -:END: -[2022-02-10 Thu 17:00] - -Waiting - -Discussion about updating doc in the response repository. -***** Ag -- Module Type Patch UI -***** Ambrose -- put something in TEST might break something -***** G2 -Description of lot of work for Q3, etc… -***** Irina -- soft delete -***** Kirill -Improve timeouts. Started a work around =pmap=. -***** Mark - -OIDC with AO. -***** Matt - -Addressing security issue discovered by the Engine team. -***** Olivier - -Emails of users in lower-case. -Done in the code. -Rollback system. -And maintenance service that could update the stores. - -Adding a new search function. -***** Rob - -Support all modules that have a module-type in App Links. -Integrating SXSO into that. -SecureX endpoint. -***** Wanderson - -Simplification Registration FT - -Adding a new session to a new frontend. -***** Yann - -- customer session to fix a bug -- IDB decommission must take the time, probably ask Matt some help. -- Registration Simplification - - Wanderson work make it possible to finally have an IROH-Auth Application Session. - - Olivier is working on improving our textual search services and API. - - Reduction of the scope should make it possible to finish for Q3 - - The current work will make it a lot easier to provide a better UI to - manage your multiple orgs (like hide/disable/rename etc…) -- (background) fix the issue related to refresh token state in the DB, most - of the work is now done for the new services, just need to populate the - data during OAuth2 Code flow. -***** Guillaume - -Removed the arrow, and now, design with OIDC to propose trial. -*** 2022-02-11 Friday -**** MEETING Registration Simlification :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-11 Fri 16:31]--[2022-02-11 Fri 17:48] => 1:17 -:END: -[2022-02-11 Fri 16:31] -- ref :: -***** Agenda (to discuss about) -***** Notes -***** Actions -**** CHAT Olivier Question like-match rule :work:chat: -:LOGBOOK: -CLOCK: [2022-02-11 Fri 15:19]--[2022-02-11 Fri 16:31] => 1:12 -:END: -[2022-02-11 Fri 15:19] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Security Training][Security Training]] -**** DONE Security Training :work: -:LOGBOOK: -CLOCK: [2022-02-11 Fri 11:24]--[2022-02-11 Fri 11:50] => 0:26 -:END: -[2022-02-11 Fri 11:24] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*github notifications morning tour][github notifications morning tour]] -**** DISC github notifications morning tour :work:discussion: -:LOGBOOK: -CLOCK: [2022-02-11 Fri 10:15]--[2022-02-11 Fri 11:23] => 1:08 -:END: -[2022-02-11 Fri 10:15] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Webex morning tour][Webex morning tour]] -**** CHAT Webex morning tour :work:chat: -:LOGBOOK: -CLOCK: [2022-02-11 Fri 10:00]--[2022-02-11 Fri 10:15] => 0:15 -:END: -[2022-02-11 Fri 10:14] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Morning Email Tour][Morning Email Tour]] -**** EMAIL Morning Email Tour :work:email: -:LOGBOOK: -CLOCK: [2022-02-11 Fri 10:11]--[2022-02-11 Fri 10:14] => 0:03 -:END: -[2022-02-11 Fri 10:11] -** 2022-W07 -*** 2022-02-14 Monday -**** MEETING Simplify Registration :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-14 Mon 16:30]--[2022-02-14 Mon 17:19] => 0:49 -:END: -[2022-02-14 Mon 16:30] -*** 2022-02-17 Thursday -**** MEETING Weekly Team Meetings :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-17 Thu 17:00]--[2022-02-17 Thu 20:45] => 3:45 -:END: -[2022-02-17 Thu 17:00] -- ref :: -***** Ag - -index page is always tk-server -*** 2022-02-18 Friday -**** DONE Fix module-type :work: -:LOGBOOK: -CLOCK: [2022-02-18 Fri 12:21]--[2022-02-18 Fri 15:51] => 3:30 -:END: -[2022-02-18 Fri 12:21] -- ref :: [[file:~/dev/iroh/lib/iroh-core/test/iroh_core/test_helpers_test.clj::(deftest is-similar?-test]] - - -APJC SCA - -#+begin_src js -{ - "description": "Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) improves security and incident response across the distributed network, from the private network and branch office to the public cloud. This solution addresses the need for digital businesses to quickly identify threats posed by their network devices and cloud resources, and to do so with minimal management, oversight, and security manpower.\n\nThe network is evolving. IT resources are frequently being moved into the cloud. At the same time, the number of connected devices on the private network is increasing dramatically. Security personnel are struggling just to know what entities are operating in their environment, let alone whether they pose a threat to the organization.\n\nSecure Cloud Analytics addresses this problem by providing comprehensive visibility and high-precision alerts with low noise, without the use of agents. Organizations can accurately detect threats in real time, regardless of whether an attack is taking place on the network, in the cloud, or across both environments. Secure Cloud Analytics is a cloud-based, Software-as-a-Service (SaaS)-delivered solution. It detects ransomware and other malware, data exfiltration, network vulnerabilities, and role changes that indicate compromise.\n\nAlso, developer teams are continuously adopting new and more dynamic compute environments like serverless and containers such as AWS Lambda and Kubernetes. Secure Cloud Analytics provides visibility into these environments as well, so that organizations don’t have to compromise on security on their path to digital transformation.", - "properties": "2MGqPrzLNIrfFeFK/UUzdpA98pKEUHLvd6d7+snqeh1lXokV9n6J8lKeAwp7tRdCSHT+crPhmilCkfBXkvfT+8NLp/rq+4TD32EkYqcYNngmgsAji/UJ6NuChgJnPd+FwwembDj2iPh7vFXHnGmLKlgOkweQzokI2CUROgbTw2JNruDhL47ws3LhMl2LRqlbJQP83yeGMmwjV0mjFSth/w25D1oIHR+mnYH7mrcKUH0XT/6xQzqJ3l6URkbun6wvzLycJhqtOtqtJSdB3cAfYlhfkpCY8ZXt9IO8/MyOeGJ6Qf2iz9gXIFAgtNBBz9bkZAPk4Uv0nei39F4lwFv9lmUdVGuHIHtHJKf4sn/qB40=", - "capabilities": [ - { - "id": "health", - "description": "Healthcheck" - }, - { - "id": "deliberate", - "description": "Deliberation" - }, - { - "id": "observe", - "description": "Enrichments" - }, - { - "id": "refer", - "description": "Reference links" - }, - { - "id": "tiles", - "description": "Dashboard Tiles" - } - ], - "app_link_meta": { - "url": "https://portal-anz.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex", - "meta": { - "x_okta_bookmark_id": "0oa1idxamsrOKeFuN357" - }, - "title": "Stealthwatch Cloud (ANZ)" - }, - "tips": "If the Secure Cloud Analytics (formerly Stealthwatch Cloud) integration module displays a **Bidirectional** icon on the module panel, it indicates that the integration was enabled in Secure Cloud Analytics or SecureX. \n\nFor information on the Secure Cloud Analytics integration with SecureX, see [Secure Cloud Analytics SecureX integration Guide](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/SecureX/SecureX_Integration_Guide_DV_2_0.pdf).", - "logo": "data:image/svg+xml;base64,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", - "org_id": "4f169b08-bb0d-4e97-a358-8fd3fd819066", - "configuration_spec": [ - { - "key": "token", - "type": "api_key", - "label": "Authorization Token", - "required": true - } - ], - "short_description": "Gain the visibility and continuous threat detection needed to secure your public cloud, private network, and hybrid environments.", - "title": "Secure Cloud Analytics", - "external_references": [ - { - "link": "https://info.securexanalytics.com/SecureX-Trial-Request.html", - "label": "Free Trial" - }, - { - "link": "https://www.cisco.com/c/en/us/products/security/stealthwatch-cloud/index.html", - "label": "Product Information" - }, - { - "link": "https://www.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-stealthwatch-cloud-privacy-data-sheet.pdf", - "label": "Privacy Policy" - }, - { - "link": "https://portal-anz.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex%3Fstatus%3Dtrue", - "class": "activation", - "label": "Activate" - } - ], - "updated_at": "2022-02-18T10:17:14.710Z", - "id": "f31e83d1-48e7-4384-9c6a-64a5c9cee05b", - "record": "relay-module.module/RelayModule", - "user_id": "207347d9-65c0-402b-88ce-ef028989e95f", - "client_id": "iroh-ui", - "default_name": "Secure Cloud Analytics", - "flags": [ - "default" - ], - "enabled": true, - "visibility": "global", - "created_at": "2020-05-15T17:45:46.904Z", - "former_title": "Stealthwatch Cloud" -} -#+end_src - -NAM: - - -#+begin_src js -{ - "description": "Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) improves security and incident response across the distributed network, from the private network and branch office to the public cloud. This solution addresses the need for digital businesses to quickly identify threats posed by their network devices and cloud resources, and to do so with minimal management, oversight, and security manpower.\n\nThe network is evolving. IT resources are frequently being moved into the cloud. At the same time, the number of connected devices on the private network is increasing dramatically. Security personnel are struggling just to know what entities are operating in their environment, let alone whether they pose a threat to the organization.\n\nSecure Cloud Analytics addresses this problem by providing comprehensive visibility and high-precision alerts with low noise, without the use of agents. Organizations can accurately detect threats in real time, regardless of whether an attack is taking place on the network, in the cloud, or across both environments. Secure Cloud Analytics is a cloud-based, Software-as-a-Service (SaaS)-delivered solution. It detects ransomware and other malware, data exfiltration, network vulnerabilities, and role changes that indicate compromise.\n\nAlso, developer teams are continuously adopting new and more dynamic compute environments like serverless and containers such as AWS Lambda and Kubernetes. Secure Cloud Analytics provides visibility into these environments as well, so that organizations don’t have to compromise on security on their path to digital transformation.", - "properties": "yUY5o15RUpAfB7Lk3RxosIJYx2JpDTaf4TkddVzepwSbz3A9m9b+/KyHxuiSH1SbTf6r5qk2SgaSKA8efk3pbDqL2RQC248eQoez0EI0GaAmnXnnhuEH91ZFtddwyQdvX+tUY+vxbHfdkES6rKP0hLWxMMZcYikD5ONBfNwak3kqlq0g07c52Gnx9Qgg5UOdzwBqTVb883tJZ+fRAFhYU7Hu7DNZDRDnccTOUFNJw84hmg7NEFMjK5Z48BG51qBgW50u/Wxv7+ceCUFUYrwbFzQLB/zbspQcFJtlUwZHZ7jl/VQbLT5QqJLthRnphAIGE/xIsEeCG66fZg1Ds60Vwp/c12ueYJVsVZyhHBIG0wk=", - "capabilities": [ - { - "id": "health", - "description": "Healthcheck" - }, - { - "id": "deliberate", - "description": "Deliberation" - }, - { - "id": "observe", - "description": "Enrichments" - }, - { - "id": "refer", - "description": "Reference links" - }, - { - "id": "tiles", - "description": "Dashboard Tiles" - } - ], - "app_link_meta": { - "url": "https://portal-staging.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex", - "meta": { - "x_okta_bookmark_id": "0oa1hyf3xtXD6Xqxg357" - }, - "title": "Stealthwatch Cloud (US)" - }, - "tips": "If the Secure Cloud Analytics (formerly Stealthwatch Cloud) integration module displays a **Bidirectional** icon on the module panel, it indicates that the integration was enabled in Secure Cloud Analytics or SecureX. \n\nFor information on the Secure Cloud Analytics integration with SecureX, see [Secure Cloud Analytics SecureX integration Guide](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/SecureX/SecureX_Integration_Guide_DV_2_0.pdf).", - "logo": "data:image/svg+xml;base64,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", - "org_id": "964a8c3b-9aef-4e1d-aadf-e2754004d230", - "configuration_spec": [ - { - "key": "token", - "type": "api_key", - "label": "Authorization Token", - "required": true - } - ], - "short_description": "Gain the visibility and continuous threat detection needed to secure your public cloud, private network, and hybrid environments.", - "title": "Secure Cloud Analytics", - "external_references": [ - { - "link": "https://info.securexanalytics.com/SecureX-Trial-Request.html", - "label": "Free Trial" - }, - { - "link": "https://www.cisco.com/c/en/us/products/security/stealthwatch-cloud/index.html", - "label": "Product Information" - }, - { - "link": "https://www.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-stealthwatch-cloud-privacy-data-sheet.pdf", - "label": "Privacy Policy" - } - ], - "updated_at": "2022-02-18T08:55:49.295Z", - "id": "b3874a82-1967-4f9c-a42a-47f1d61ab835", - "record": "relay-module.module/RelayModule", - "user_id": "dcffe020-1c6a-4d78-ba09-f21674a59c9c", - "client_id": "iroh-ui", - "default_name": "Secure Cloud Analytics", - "flags": [ - "default" - ], - "enabled": true, - "visibility": "global", - "created_at": "2020-05-15T17:38:39.788Z", - "former_title": "Stealthwatch Cloud" -} -#+end_src -EU - -#+begin_src js -{ - "description": "Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) improves security and incident response across the distributed network, from the private network and branch office to the public cloud. This solution addresses the need for digital businesses to quickly identify threats posed by their network devices and cloud resources, and to do so with minimal management, oversight, and security manpower.\n\nThe network is evolving. IT resources are frequently being moved into the cloud. At the same time, the number of connected devices on the private network is increasing dramatically. Security personnel are struggling just to know what entities are operating in their environment, let alone whether they pose a threat to the organization.\n\nSecure Cloud Analytics addresses this problem by providing comprehensive visibility and high-precision alerts with low noise, without the use of agents. Organizations can accurately detect threats in real time, regardless of whether an attack is taking place on the network, in the cloud, or across both environments. Secure Cloud Analytics is a cloud-based, Software-as-a-Service (SaaS)-delivered solution. It detects ransomware and other malware, data exfiltration, network vulnerabilities, and role changes that indicate compromise.\n\nAlso, developer teams are continuously adopting new and more dynamic compute environments like serverless and containers such as AWS Lambda and Kubernetes. Secure Cloud Analytics provides visibility into these environments as well, so that organizations don’t have to compromise on security on their path to digital transformation.", - "properties": "Y+2BcDiVdoyWy7JxQwcOXuCG+S/JH98ncFxmwhz27utYxlhrSNQIHGTGGifUZx4Yw2GQe5oy2051VjsrcTrXVCmXAEVpU7NVqLwjmgT01zoDkE1o2lO3bMQbLTZLkNnUKAnaef/4UFqlcorJ0CGfhQPvWZG6OnAPx5PLzbS0TjsRfSGpVSRPeW+aANy+CEXul1l6FKzHohgTelMZuYNGYncHEa+eqtpSVvFl5HITj7rx7NMPWWeRaqN3Ljnbs3l26picBEvRfPzXeAT26gh0gdieWYtB2xnUU8gFUx4MNcqyMVNwGYbtLQ150uQYbOxuoiVZ41ujCWgt0Eksa/g0MkLg+QC5QBHgquwpVdMDDSE=", - "capabilities": [ - { - "id": "health", - "description": "Healthcheck" - }, - { - "id": "deliberate", - "description": "Deliberation" - }, - { - "id": "observe", - "description": "Enrichments" - }, - { - "id": "refer", - "description": "Reference links" - }, - { - "id": "tiles", - "description": "Dashboard Tiles" - } - ], - "app_link_meta": { - "url": "https://portal-eu.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex", - "meta": { - "x_okta_bookmark_id": "0oa1idwgt8itDu9jQ357" - }, - "title": "Stealthwatch Cloud (EU)" - }, - "tips": "If the Secure Cloud Analytics (formerly Stealthwatch Cloud) integration module displays a **Bidirectional** icon on the module panel, it indicates that the integration was enabled in Secure Cloud Analytics or SecureX. \n\nFor information on the Secure Cloud Analytics integration with SecureX, see [Secure Cloud Analytics SecureX integration Guide](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/SecureX/SecureX_Integration_Guide_DV_2_0.pdf).", - "logo": "data:image/svg+xml;base64,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", - "org_id": "99c5cf95-7788-4ce1-906f-86811aa57752", - "configuration_spec": [ - { - "key": "token", - "type": "api_key", - "label": "Authorization Token", - "required": true - } - ], - "short_description": "Gain the visibility and continuous threat detection needed to secure your public cloud, private network, and hybrid environments.", - "title": "Secure Cloud Analytics", - "external_references": [ - { - "link": "https://info.securexanalytics.com/SecureX-Trial-Request.html", - "label": "Free Trial" - }, - { - "link": "https://www.cisco.com/c/en/us/products/security/stealthwatch-cloud/index.html", - "label": "Product Information" - }, - { - "link": "https://www.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-stealthwatch-cloud-privacy-data-sheet.pdf", - "label": "Privacy Policy" - } - ], - "updated_at": "2022-02-18T09:00:11.280Z", - "id": "7739968f-4259-49c2-8c14-21e569a11d1c", - "record": "relay-module.module/RelayModule", - "user_id": "be72933d-8e87-4430-8b33-870e3db35bce", - "client_id": "iroh-ui", - "default_name": "Secure Cloud Analytics", - "flags": [ - "default" - ], - "enabled": true, - "visibility": "global", - "created_at": "2020-05-15T17:44:34.285Z", - "former_title": "Stealthwatch Cloud" -} -#+end_src -** 2022-W08 -*** 2022-02-22 Tuesday -**** CANCELED SXO Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-02- Tue 18:00]--[2022-02-22 Tue 18:02] => 0:02 -:END: -[2022-02-22 Tue 18:00] -- ref :: -*** 2022-02-23 Wednesday -**** MEETING SXO Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-23 Wed 19:39]--[2022-02-23 Wed 21:09] => 1:30 -:END: -[2022-02-23 Wed 19:39] -- ref :: - -1. Tenant Provisioning -2. Create CTR Client -**** MEETING Ribbon SCI :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-23 Wed 19:23]--[2022-02-23 Wed 19:39] => 0:16 -:END: -[2022-02-23 Wed 19:23] -- ref :: - -- client-6ff982a1-cc5a-4121-8f8c-b0f5b08c8860 -- client-c4d3554b-452e-49e2-b76e-41458610adc1 - -Patched with availability everyone. -**** MEETING API Design :work:meeting: -:LOGBOOK: -CLOCK: [2022-02-23 Wed 17:33]--[2022-02-23 Wed 19:23] => 1:50 -:END: -[2022-02-23 Wed 17:33] - -Two subjects - -- Data Deletion -- Logs / debugging - -***** -**** DONE IDB Decomissioning :work: -:LOGBOOK: -CLOCK: [2022-02-23 Wed 14:48]--[2022-02-23 Wed 15:18] => 0:30 -:END: -[2022-02-23 Wed 14:48] - -Found in tenzin repository very old commit (ce43ddb) -The configs details are in: =saltstack/pillar/*/iroh/init.sls= -***** INT - -#+begin_src yaml - idps: - amp: - kind: saml - authorize_uri: https://auth.amp.cisco.com/auth/session/new - cert_path: /srv/iroh/resources/cert/amp_idp.cert - threatgrid: - kind: oidc - authorize_uri: https://int.threatgrid.com/oauth2/authorize - token_uri: https://int.threatgrid.com/api/v3/oauth/token - org_id_key: :tg_org - client_id: 884a152d-e2a2-4552-b56b-7618274ab988 - client_secret: | - -----BEGIN PGP MESSAGE----- - Version: GnuPG v1 - hQIMA84RaiSk55caAQ/+NXy974NKjfdujj01jODDqqIIp4QXdGH8pC4LcHDW9rwx - EE1XELuP+7eZ1+UA2+qhPwcT+kOCEJteXGJt00FoL4bjfOTHqV6Zjl+KySGGYsHw - LQRQhI+odKpakGmtnMD7Zjf14phfUTHKs4Zs6EjLP0rm5LMw+eo3PhQ4zNGfoF1G - W3S7J+dmjNc0ZEsgOStxAmQ5SZM6nIoOo8qJY5p8LujbAzPTGq1hKYVjxM2FnuoQ - SkoIA77z9twJpFMqr3TgOPI/IZqu8rAAVEeAZHRP0W4j4Wk/PetmG4mJrJT5hFqV - Z6iOChTL8t2lbSd/QkwoxD2cZzZlY4c3Pe2JqtdfffhaF7LXcOtHm8R2cv2kjEm3 - gdAw2EZucYZa2n78vxofXrLWayltFTzM9hmn616Yy3UtExOHv/ydj0xhLGEx+Woc - X0LS0La8ElNOMnp99x+9y1xmShlZMsRNOm5kjTFMtLry4K3QKTZLAzVa2835RV3e - Tb6T2tdkK5fIVpIQpv3E6meAmkFHWHl3rZw4qdPaPbDWctPDt8TxyX4LQ555ED2N - roCuBSWsu7Efz8s+oUgK3GleSj37O7kIyJq+GxOayyepU8D6WJqqh6TbeFQlyUBJ - YYrFxd+wUAEdeq4LoTxGrZp4jDopg9wVVdEmlcltJ79GbpOGf9uo0nyrlVRXDoHS - WwFPEYM+r1FWnWhrH+zbE3LwvVBMi8KluExN8KcilTnzhISrhR40J/HvEBXMM2DV - 7TnS+FyxWHu0vBzIg2y7DdGh4SYw7ru35wH9V8x6L449ffD6diMaXLGoBAU= - =0OIa - -----END PGP MESSAGE----- -#+end_src -***** TEST - -#+begin_src yaml - idps: - amp: - kind: saml - authorize_uri: https://auth.amp.cisco.com/auth/session/new - cert_path: /srv/iroh/resources/cert/amp_idp.cert - threatgrid: - kind: oidc - authorize_uri: https://test.threatgrid.com/oauth2/authorize - token_uri: https://test.threatgrid.com/api/v3/oauth/token - org_id_key: :tg_org - client_id: d1f5cbd2-610c-44b9-b5dd-92ecc7ef7f24 - client_secret: | - -----BEGIN PGP MESSAGE----- - Version: GnuPG v1 - hQIMA84RaiSk55caAQ//czS1KlsdqexkdpO7KizewEY5Wy2rBIT74FYJaJRPOh2k - YDTs1pxbu4SY/PWmyNVh97UAGVjwMAOEJvMaZt2fOA0EqHVwaPqe5xV1pS9eIAIf - JfmQyAzaCADaFvLpVwF7yuzJzUhrPq1JBbwssXh0YLnEOfEandspL6Tw2JunK67A - 9GfPiSRNPr90wflsOAObuxRqtThw6usQKDVh8r5lSTpfLN/3gyDX/BNwYOBIgY/D - TvTtX9zYAKwb9lyvvAjVPueHwLBwwLJ0J2C4soKKM/xyqRfllFzWHAuF8dKAmsNO - t1HGcSmHh1mT8hLnZf453PHbItVc8gvyeEcFAtWmGI3hB8JGIFLrzSoO3Vu/opRy - 5xovtKDbAcB6xjvkix6s4ppim2lunPa4uzni1XcXUZ5iF424SSSooWmySmFuYniS - pr5t2sulSWr4ptR5e/jWLr6hx6rkLntvJHf99DkK2MeAe35+lkvnKu4algH0Bul6 - r3eXvtSZl+Ejwy8fLGv3Zkj12xL3eIZ5PIihAqmJ8cPcY8mZfoz7BjpfXLL0ykuY - HPeAU2YzG9+1TiZk/hADsb6B558nj9DjFbi5P1CyCCWvIAdN+lq3BWaU8VsphC5A - w8L7DGUSlVQXuvHzvuFktYG5z/2FL4Oil924/jiTMiyglcq0qUqTIaR6F/5UdMfS - WwFQJ7Mco7nkak9JMzCos+h/l4IpeM0nSK/5ANzXeNRq5TzGXCYsNZhRtH2JNa1d - Et1dSAy0iR+v5wyozjppTC/o6vOkIVhvYoiDaT9ZVx4/t5552/qGRIdIH8c= - =RJtM - -----END PGP MESSAGE----- -#+end_src -***** PROD - -#+begin_src yaml - idps: - amp: - kind: saml - authorize_uri: https://auth.amp.cisco.com/auth/session/new - cert_path: /srv/iroh/resources/cert/amp_idp.cert - threatgrid: - kind: oidc - authorize_uri: https://panacea.threatgrid.com/oauth2/authorize - token_uri: https://panacea.threatgrid.com/api/v3/oauth/token - org_id_key: :tg_org - client_id: 4fe0068b-eb2a-4918-871f-dd9c9592990e - client_secret: | - -----BEGIN PGP MESSAGE----- - Version: GnuPG v1 - hQIMA84RaiSk55caAQ/+JHsdFHlM0yxwYJTMgzCPp0wOJozy1/lB4I3pdk/mQlA3 - KX0D9VahiZatTG+N0z2dx+rDs/T3XJIShwJsDbO0kBN18kOSEIU5eFZGTj1u7ev1 - vPAq+ekmxfRnYsQ0CRdp45uM8jhrO19zbJVu7oL1XaLGFYJxzt6BIkCExSnEBA/i - T3nNxa0CNw7sYUjw0kxDkCwl2RpdmMJ6QWNuqKqRc5olzz0mnu0ioCMXnPu1w4oD - Sck0pZQYacnr8/bCWsLR7kLA9GFHcApT1DoLDhOr8PB6/blpCd+t+nHflUx5SCgn - rqeeA8PaFCZ7wBRa8WuVZXmSll8/siSlTUyBxDKq9y5EjhJBFVRgCRjd4WzwGaMn - F3soOMKKpM1Dj1u3+PkgIprV6nWSUvEOrYxtUEWfBeVdD7Kng57AG+Xz8k1e9ium - s+ITYdo5oG5O4ks5bXuO9ILpt92GLoKC/TAbo2doxiGk63rBxu9HsUTMZVC96FzE - PkWXQxD4LDXlFTqIlCQmjUq6Q6K71t0+pvAS0x4dKHhvuJdAJEHrZe6nnLtiBcjA - TcYoFGHqx32mqbvq7LThoRYFVXvO2tMDoRrDjYKRKNpmTfHNDjhGf+TOhHiw7Rnf - TAJLWCyHrpupu47NPtqAN1fnY9m6yjNGRe6tzgG78vsdCSR6QdAHILwMjUR1QULS - WwHmb/heYDgwuhzbcwDAQuiotWA++xYzAy52cXNuunkC+e/4qob7iIN/ifcPDH3z - rEmF6TVvvE0tzW81X7tdyaOf3Q8rmwMSZzhK7HUhgWIdDhf3Dl6FrrdFoi0= - =srU6 - -----END PGP MESSAGE----- -#+end_src -** 2022-W10 -*** 2022-03-07 Monday -**** DONE Big PR Refresh Tokens :work: -:LOGBOOK: -CLOCK: [2022-03-07 Mon 09:47]--[2022-03-07 Mon 18:17] => 8:30 -:END: -[2022-03-07 Mon 09:47] - -This PR is big, due to different changes. - -So the main goal is to fix a bug in our OAuth2 Provider related to scopes -associated to refresh tokens. -See: - -- https://github.com/advthreat/iroh/issues/5877 -- https://github.com/threatgrid/response/issues/950 -- https://github.com/advthreat/iroh/issues/3189 - -Related to the discussion in this thread we should fix the issue correctly. -Before this PR, refresh tokens are only JWT, so the "state" and "trust" -that a refresh token is valid, as well as the scopes associated to this -refresh token are put inside this JWT. - -For different reason we want to be able to change for some client, the -scopes associated to some existing refresh tokens. Typical example, the -ribbon support more scopes than the one at the time the user granted the -ribbon. -So to update the ribbon, not only the ribbon client need to be updated, but -the user need to grant the scopes again interactively. - -Most of the ribbon clients are /trusted/ which mean that we bypass the list -of scopes authorized to return access tokens with the maximal number of -scopes. -Still there are some exceptions. -Also this is a missing piece of the OAuth2 provider to have refresh-tokens -administration endpoints for our end-users. - -Before this PR we only have a notion of "granted client" at the client -level, not for every different refresh token provided. - -After this PR we will keep track in our DB the exhaustive list of scopes -associated to refresh tokens. - -Some details: - -This create two new services, ~RefreshGrantService~ and -~RefreshGrantWebService~. -I preferred not to use ~RefreshTokenService~ because the word refresh token -is already used at different places. -And the object we save in DB is not a refresh token but a really just an -object keeping the scopes granted to some refresh token for some client and -for some user. - -I have added a few common helpers in this PR: - -1. ~mandatory-get-in-config~ -2. Small improvements about ~match?~: - 1. ~str-uuid?~ because we use strings and not proper UUID for which the clojure core function ~uuid?~ would be more suitable. - 2. check the length equality between two sequences during ~match?~ -3. Fixed a problem related to requesting ~edn~ in our http client helpers. - Now the read-string is done for you. -4. Centralized ~pure-crud-store-svc~ to be used in our tests to the - test-helpers of crud-store service. -5. added an ~iroh-web.request-identity~ ns that is useful to manipulate the - ~(:identity request)~ generated by the JWT middleware -6. by default the time ~svc-helper~ will use a fixed date. - -Also some non trivial changes made to achieve the goal of this PR: - -1. Add a ~realized-client~ to the ~OAuth2ClientService~. What is this about? So - ~get-client~ of the ~OAuth2ClientService~ is purely about search clients in - DB, just a think layer around CRUD. Before this PR there was also a - ~get-client~ method exposed by the ~OAuthService~ which act differently. - This second get client take care of looking at the client saved in the - ~config.edn~ file (yes we have some of them) and also applying the - ~ClientPreset~ logic to the resulting client. The ~realized-client~ of - ~OAuth2ClientService~ replace the old ~get-client~ from ~OAuth2Service~. The - method is still exposed to prevent any bug and as the PR is already big - I didn't want to also make a refactorization to remove it. But this would be a - nice idea. -2. Now ~check-app-authorization~ of the ~GrantService~ can be called with either 4 or 5 arguments. - If called with 4 argument, no refresh token is involved. We just try to - remember if the user already granted a set of scopes (every time the - user manually grant different scopes we add them up, so we make a - union). This is useful to see if we need to automatically redirect the - user in many interactive workflows. - If it is called with 5 argument, one of the new argument will be the - refresh token id (the ~jti~ claim of the refresh token which is a JWT). - In that case we also use the ~RefreshGrantSerice~ to verify the refresh - token associated has granted the scopes we are going to provide. - -Another few important notes: - -This change made again pretty clear why it really helps to use the -~with-tk~ pattern. A lot of manual changes was made because we have a lot of -tests that have not be migrated to this new pattern. -The main consequence for IROH-Auth dev, is that many changes will break -tests far away with almost not real related issue. -So I will probably take the time to really invest in using the new pattern for -IROH-Auth + IROH-Web. Because it really took me days to just fix these manually. - -After going full to the "test the service/core.clj" function by providing -pure contexts. I think that while valuable, it is probably a bit too much -work regarding the potential gain. And we should probably focus a lot more -on the "semi-integration" tests of the services themselves with the ~with-tk~ macros. -Looking at the ~core_test.clj~ tests will show that these tests are often a -bit verbose, and difficult to initialized when your service works with big contexts. - -The main test testing the feature is: - -~iroh-auth.oauth2_web_service_test/multiple-authorizations-with-different-scopes~ - -https://github.com/advthreat/iroh/pull/5885/files?diff=split&w=1#diff-3cbfae4301cdb80a669f13ea2861423140c52cd424a8b8e99617c2fae729117fR364 -*** 2022-03-10 Thursday -**** MEETING Weekly :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-10 Thu 17:43]--[2022-03-10 Thu 19:18] => 1:35 -:END: -[2022-03-10 Thu 17:43] - -- Work on Registration => Olivier -- like-search -- Work on Registration => Generated some interesting stats about SecureX orgs/user/domain email -- TG IdB decomission => Wait and ask Prerna -- Work on the TG bug => maybe split some part before merging, because this is a risky PR -- Idea about Tenzin-Config. - Use Ambrose work to find the common bootstrap+config.edn on all our current envs and - use that into the new `iroh.main` and change in tenzin how we start the application to - have a merge of both the config and the bootstrap. - - This should reduce the size, and we could but inside the IROH repository - changes that should be shared accross all deployed env. -***** ops in our team -*** 2022-03-11 Friday -**** MEETING Simplified Registration :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-11 Fri 16:29]--[2022-03-11 Fri 17:59] => 1:30 -:END: -[2022-03-11 Fri 16:29] -- ref :: -***** Agenda (to discuss about) -***** Notes -***** Actions -** 2022-W11 -*** 2022-03-15 Tuesday -**** DONE IDB Decommission CSA :work: -:LOGBOOK: -CLOCK: [2022-03-15 Tue 17:35]--[2022-03-16 Wed 15:31] => 21:56 -:END: -[2022-03-15 Tue 17:35] - -INT -{ - "client_id": "0oa2ovopagy06D2IV1d7", - "client_secret": "N7yEnBQWMHohD0LbwzXwsjuOUI9pVlbzI5lH28O9" -} -*** 2022-03-16 Wednesday -**** MEETING API Design Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-16 Wed 16:32]--[2022-03-18 Fri 11:55] => 43:23 -:END: -[2022-03-16 Wed 16:32] - -IROH-Auth login -**** MEETING Registration Simplification :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-16 Wed 15:31]--[2022-03-16 Wed 15:57] => 0:26 -:END: -[2022-03-16 Wed 15:31] -- ref :: -** 2022-W13 -*** 2022-03-28 Monday -**** MEETING Workshop :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-28 Mon 17:52]--[2022-03-30 Wed 16:20] => 46:28 -CLOCK: [2022-03-28 Mon 17:30]--[2022-03-28 Mon 17:52] => 0:22 -:END: -[2022-03-28 Mon 17:30] -**** MEETING Registration :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-28 Mon 16:29]--[2022-03-28 Mon 16:54] => 0:25 -:END: -[2022-03-28 Mon 16:29] -- ref :: - - -Chris Duan concerns: - -- email domain check in the UI -- risk of email domain mismatch, for now, just one admin is enough to match - the org, etc… -*** 2022-03-30 Wednesday -**** MEETING Registration FT :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-30 Wed 16:20]--[2022-03-30 Wed 22:07] => 5:47 -:END: -[2022-03-30 Wed 16:20] -- ref :: -***** Testing - -Only safe solution involve the Ops. - -Have a specific domain for us. -I suggest: ~qa.security.cisco.com~ -so every mail sent to ~foo@qa.security.cisco.com~ should be redirected to ~foo@cisco.com~. -That way we could create a few testing org without being polluted by all -the other cisco activity. -We could test the emails, etc… -*** 2022-03-31 Thursday -**** MEETING :work:meeting: -:LOGBOOK: -CLOCK: [2022-03-31 Thu 13:52]--[2022-03-31 Thu 15:30] => 1:38 -:END: -[2022-03-31 Thu 13:52] -***** Agenda - -What to do next? - -- Important potential refacto to help Matt add a the ccoId -- Refacto the tests (tried and it is a lot of work) -***** Notes -***** Actions -** 2022-W15 -*** 2022-04-11 Monday -**** MEETING Q4: Limited Demo Mode XP/Detail Design Discussion :work:meeting: -:LOGBOOK: -CLOCK: [2022-04-11 Mon 15:59]--[2022-04-15 Fri 17:14] => 97:15 -:END: -[2022-04-11 Mon 15:59] -- ref :: -***** Agenda (to discuss about) - -Agenda for this meeting is to go over the ideas/design proposed by MA/PO/PM -team for a limited SecureX Demo Mode experience. -We want the Engineering team to weigh in feasibility and discuss the -options in detail. -Below AHA ticket has been updated with details discussed. -Next, we want an estimate of the effort and since this is in the Q4 -Priority list get commitment if this can be done in Q4 or not. -***** Notes - -AHA shared screen: - -Requirement. -SecureX demo giving away too much information. - -Expiry dates to SecureX demo (30 days) -Limit the number of investigations (50 investigations). -***** Actions -** 2022-W16 -*** 2022-04-19 Tuesday -**** MEETING Switch Tenants :work:meeting: -:LOGBOOK: -CLOCK: [2022-04-19 Tue 17:02]--[2022-04-19 Tue 18:12] => 1:10 -:END: -[2022-04-19 Tue 17:02] - -- Hide/Disable Orgs -- Login workflow -- Petr, make an org default for users. -- Just hide/unhide the org for the UI. -. -***** UI demo - -List orgs / hide/ switch - -Also cross regions - -+ remarks - - default not auto-login - - login -**** MEETING Umbrella Deep Dive 1-click module setup :work:meeting: -:LOGBOOK: -CLOCK: [2022-04-19 Tue 16:33]--[2022-04-19 Tue 17:02] => 0:29 -:END: -[2022-04-19 Tue 16:33] -- ref :: - -+ Matt: describe The modules -+ Aaron Woland: for the diff function in SecureX we use every exposed API -+ Rajendra Shirhatti: - requirement, single API key -*** 2022-04-20 Wednesday -**** MEETING Cisco Leader Fundamental Program :work:meeting: -:LOGBOOK: -CLOCK: [2022-04-20 Wed 10:03]--[2022-04-20 Wed 18:47] => 8:44 -:END: -[2022-04-20 Wed 10:03] -- ref :: - -- First Next Steps writeable PDF: -https://cisco.sharepoint.com/:b:/s/GLOTeam/Ef_alzOAOoVHqHmmZ8dZYscBbHsYA5tLWgfj0tZL6iXvZQ?e=LFMQl3 - -Miro board- https://miro.com/app/board/o9J_lZRkMM8=/ -Password - CiscoLF2020 - -- Consciously Create Culture: https://wwwin.cisco.com/c/cec/cisco/conscious-culture.html -***** Come to me when - -- Come to me when you need to design a new abstraction to improve the code reliability -- Come to me when you need to write a code refactorisation -- Come to me when you need to build a new OAuth2 RFC from scratch -- Come to me when you need to improve CI reliability - -With: - -- Alex Cruz Farmer -*** 2022-04-21 Thursday -**** MEETING Leader :meeting: -:LOGBOOK: -CLOCK: [2022-04-21 Thu 10:38]--[2022-05-05 Thu 13:11] => 338:33 -:END: -[2022-04-21 Thu 10:38] -- ref :: -- Register for Cisco Mind Set: http://learn.cisco.com/?courseID=COT00305503 -- Mindfulness & Resilience SharePoint: https://cisco.sharepoint.com/Sites/ -- MindfulnessandResilienceatCisco -- Expert Medical Opinion Program: https://cisco.service-now.com/helpzone?id=kb_article&sysparm_article=KB0047880 -- Mental Health Awareness: https://cisco.sharepoint.com/Sites/SafetoTalkMentalHealthAwareness -- Employee Assistance Program: https://cisco.service-now.com/helpzone?id=kb_article&sysparm_article=KB0047879 -- Cisco Global Wellbeing: https://cisco.sharepoint.com/sites/GlobalWellbeing -Prepare meetings: -https://www.cisco.com/c/r/team-development/performance/team-leader-index.html -Reward: -https://cisco.sharepoint.com/sites/RewardsCentral -Further: -https://cisco.sharepoint.com/sites/NewLeaderJourneyRegistration -Talent Space -***** Analyze - -Ask her how to develop other in the team. -***** Says - -I *noticed* this or that, no judgement. -Wait for their perspective. - -I wouldn't want to demotivate you by blocking your PR. -** 2022-W18 -*** 2022-05-05 Thursday -**** MEETING Weekly Platform Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-05-05 Thu 17:10]--[2022-05-09 Mon 17:04] => 95:54 -:END: -[2022-05-05 Thu 17:10] -**** MEETING Registration FT :work:meeting: -:LOGBOOK: -CLOCK: [2022-05-05 Thu 16:52]--[2022-05-05 Thu 17:10] => 0:18 -CLOCK: [2022-05-05 Thu 16:30]--[2022-05-05 Thu 16:51] => 0:21 -:END: -[2022-05-05 Thu 16:30] - -** -** - -*Prerna* love to Sing, Adele, indian songs, Karaoke, (feel bad at gardening) -Hamed Saadi: wanted to be professional soccer, love orchid -*Jilian*: two young children, love gardening (strawberries, 12ft tall sun -flower etc…). During Cisco has a full orchid division. -*Hissan*: not much -*Olivier*: make italian food, watch video on climate change. Fan of -Jancovici, Aurelien Barrault. -** 2022-W19 -*** 2022-05-09 Monday -**** MEETING Umbrella 1-click :work:meeting: -:LOGBOOK: -CLOCK: [2022-05-09 Mon 17:04]--[2022-05-10 Tue 09:47] => 16:43 -:END: -[2022-05-09 Mon 17:04] -***** Presenting SecureX -*** 2022-05-11 Wednesday -**** MEETING Tenant switching :work:meeting: -:LOGBOOK: -CLOCK: [2022-05-11 Wed 16:28]--[2022-05-11 Wed 17:09] => 0:41 -:END: -[2022-05-11 Wed 16:28] - -How to have errors shared. - -Proposal, - -1. host on the same URL as IROH (so both CTR and Visibility) -2. Use query parameters + localStorage might not be enough because there is a huge risk of attack. -*** 2022-05-12 Thursday -**** DISC Topo for meeting :work:discussion: -:LOGBOOK: -CLOCK: [2022-05-12 Thu 11:21]--[2022-05-12 Thu 15:39] => 4:18 -:END: -[2022-05-12 Thu 11:21] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org::*preparer topo pour l’equipe][preparer topo pour l’equipe]] - -Go to the dashboard page - -Invisible work: - -- Olivier will start on org-level client -- UI design discussion about tenant switching even if we agree about most - of the backend work that could be done concurrently. -- Discussion about "bugs" that were just wording issue -** 2022-W20 -*** 2022-05-17 Tuesday -**** MEETING Devin Walters :work:meeting: -:LOGBOOK: -CLOCK: [2022-05-17 Tue 17:03]--[2022-05-17 Tue 19:03] => 2:00 -:END: -[2022-05-17 Tue 17:03] -- ref :: -***** Agenda (to discuss about) -***** Notes -***** Actions -*** 2022-05-18 Wednesday -**** MEETING API Design Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-05-18 Wed 17:42]--[2022-05-18 Wed 19:35] => 1:53 -:END: -[2022-05-18 Wed 17:42] -- ref :: - -Umbrella talk, hunting, etc… - -Check Token Exchange Okta token exchange for a IROH Auth exchange. - -DONE Create a new Epic for IROH Auth Token Exchange. -*** 2022-05-19 Thursday -**** DONE [#6740] Analyze Token Exchange RFC [[https://github.com/advthreat/iroh/issues/6740]] :work: -SCHEDULED: <2022-05-30 Mon 14:00-16:00> -:LOGBOOK: -- State "DONE" from "HOLD" [2022-05-30 Mon 17:16] -- State "HOLD" from "TODO" [2022-05-30 Mon 17:15] \\ - Appear to be ok, need to write the doc -CLOCK: [2022-05-30 Mon 16:15]--[2022-05-30 Mon 17:15] => 1:00 -:END: -[2022-05-19 Thu 09:27] -- ref :: [[https://github.com/advthreat/iroh/issues/6740][#6740]] -SCHEDULED: <2022-05-19 Thu> -** 2022-W21 -*** 2022-05-24 Tuesday -**** CHAT Work on BUG for the UI :work:chat: -:LOGBOOK: -CLOCK: [2022-05-24 Tue 17:06]--[2022-05-25 Wed 10:27] => 17:21 -:END: -[2022-05-24 Tue 17:06] -- ref :: - -on NAM backup value with idp-mapping from Rekha and probably Dar. - -#+begin_src json -{ - "role": "admin", - "scopes": [ - "event:read", - "vault/configs:read", - "integration", - "private-intel", - "admin", - "profile", - "inspect", - "asset", - "feedback", - "sse", - "registry", - "users", - "investigation", - "invite", - "casebook", - "vault/config/metadata:read", - "orbital", - "enrich", - "oauth", - "collect", - "response", - "ui-settings", - "telemetry:write", - "openid", - "notification", - "global-intel:read", - "webhook", - "vault/config/posture:read", - "ao" - ], - "updated-at": "2022-04-04T19:02:50.007Z", - "idp-mappings": [ - { - "idp": "sxso", - "enabled?": true, - "user-identity-id": "00u4b0w7zx5wOv6bP357" - }, - { - "idp": "sxso", - "cco-id": "DiogenesDavili83107", - "enabled?": true, - "user-identity-id": "00uh73n7l8T19iA80357" - }, - { - "idp": "sxso", - "enabled?": true, - "user-identity-id": "00u4fiegn96MYiUVb357" - } - ], - "user-email": "diogenes_davoli@hstsoft.com", - "user-name": "Diogenes Davoli", - "org-id": "0217a770-8d36-4934-9a4f-e136aac10e39", - "user-id": "fcc3ef21-ea15-4774-822a-7dcc5a642750", - "enabled?": true, - "last-logged-at": [ - "2022-04-13T19:16:18.315Z", - "2022-04-13T19:15:24.239Z", - "2022-04-13T19:15:15.552Z", - "2022-04-13T19:15:05.421Z", - "2022-04-13T18:45:13.063Z" - ], - "created-at": "2022-04-01T13:24:27.909Z", - "user-nick": "Diogenes Davoli" -} -#+end_src -** 2022-W22 -*** 2022-05-30 Monday -**** DONE Help Michael Simonson [[https://github.com/advthreat/response/issues/1315][#response/1315]] :work: -SCHEDULED: <2022-05-29 Sun 10:30-10:40> -:LOGBOOK: -CLOCK: [2022-05-30 Mon 10:30]--[2022-05-30 Mon 10:34] => 0:04 -:END: -[2022-05-30 Mon 10:15] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org::*Create Tasks from \[\[https://github.com/notifications\]\[Github notifications\]\]][Create Tasks from Github notifications]] -**** DONE Reply to Rekha [[https://github.com/advthreat/GLaDOS/pull/3239][GlaDoS#3239]] :work: -SCHEDULED: <2022-05-30 Mon 10:20-10:30> -:LOGBOOK: -CLOCK: [2022-05-30 Mon 10:25]--[2022-05-30 Mon 10:29] => 0:04 -:END: -[2022-05-30 Mon 10:12] -**** DONE Reset https://pwreset.cisco.com :work: -SCHEDULED: <2022-05-30 Mon 10:30-10:40> -:LOGBOOK: -CLOCK: [2022-05-30 Mon 10:34]--[2022-05-30 Mon 10:37] => 0:03 -:END: -[2022-05-30 Mon 09:38] -- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org::*Create Tasks from Webex][Create Tasks from Webex]] -*** 2022-06-01 Wednesday -**** DONE Document what need to be done for Token Exchange :work: -SCHEDULED: <2022-06-01 Wed 10:35-11:30> -:LOGBOOK: -CLOCK: [2022-06-01 Wed 11:26]--[2022-06-01 Wed 11:59] => 0:33 -CLOCK: [2022-06-01 Wed 10:35]--[2022-06-01 Wed 11:25] => 0:50 -:END: -[2022-06-01 Wed 10:32] -*** 2022-06-02 Thursday -**** MEETING Town Hall :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 18:00]--[2022-06-02 Thu 19:20] => 1:20 -:END: -[2022-06-02 Thu 20:13] -**** MEETING Weekly meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 17:06]--[2022-06-02 Thu 17:55] => 0:49 -:END: -[2022-06-02 Thu 17:06] -- ref :: -***** Notes - -- org-level clients (security concerns and complex technical details) -- tenant switching should be good for 6th of July -- token exchange issue -- maximal session time issue -- refresh token revocation with a grace period - -- configuration issues fix incoming using ~iroh.main~ - -=> on hold - -- oauth2 client password update -- simplification -**** MEETING Tenant Switching :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 16:32]--[2022-06-02 Thu 17:06] => 0:34 -:END: -[2022-06-02 Thu 16:32] -- ref :: -***** Agenda (to discuss about) -***** Notes -***** Actions -**** DONE Fix config issue :work: -SCHEDULED: <2022-06-02 Thu> -:LOGBOOK: -CLOCK: [2022-06-03 Fri 17:00]--[2022-06-03 Fri 17:55] => 0:55 -CLOCK: [2022-06-02 Thu 15:34]--[2022-06-02 Thu 16:30] => 0:56 -:END: -[2022-06-02 Thu 15:34] -**** PAUSE sortir le chien :pause: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 14:25]--[2022-06-02 Thu 15:33] => 1:08 -:END: -[2022-06-02 Thu 15:32] -**** MEETING Meeting with Olivier :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 09:55]--[2022-06-02 Thu 11:58] => 2:03 -:END: -[2022-06-02 Thu 09:55] -- ref :: -***** Agenda (to discuss about) -***** Notes -***** Actions -**** GEEK org-mode / org-calendar tweaking :perso: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 09:32]--[2022-06-02 Thu 09:55] => 0:23 -:END: -[2022-06-02 Thu 09:38] -**** DISC answered to Jyoti :work:discussion: -:LOGBOOK: -CLOCK: [2022-06-02 Thu 09:02]--[2022-06-02 Thu 09:32] => 0:30 -:END: -[2022-06-02 Thu 09:32] -*** 2022-06-03 Friday -**** MEETING Tenant Switching :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-03 Fri 16:31]--[2022-06-03 Fri 16:42] => 0:11 -:END: -[2022-06-03 Fri 16:31] - -- Accept invitation redundancy: https://github.com/advthreat/GLaDOS/issues/3273 - To be moved to the IROH repository as enhancement. -**** CHAT Rekha discussion with access/refresh tokens :work:chat: -:LOGBOOK: -CLOCK: [2022-06-03 Fri 16:45]--[2022-06-03 Fri 16:59] => 0:14 -CLOCK: [2022-06-03 Fri 14:36]--[2022-06-03 Fri 16:31] => 1:55 -:END: -[2022-06-03 Fri 14:36] -**** DONE Check duplicate user by org :work: -SCHEDULED: <2022-06-03 Fri> -:LOGBOOK: -CLOCK: [2022-06-03 Fri 13:50]--[2022-06-03 Fri 14:36] => 0:46 -:END: -[2022-06-03 Fri 13:49] - -- ref :: https://github.com/advthreat/response/issues/1331#event-6730353206 -** 2022-W23 -*** 2022-06-07 Tuesday -**** CANCELED PR to have 5min expiration time for iroh-ui client :work: -SCHEDULED: <2022-06-08 Wed 14:30-16:00> -:LOGBOOK: -- State "CANCELED" from "TODO" [2022-06-08 Wed 17:06] \\ - we'll work on that later -:END: -[2022-06-07 Tue 18:02] -**** CHAT Rekha ask for 5min expiration access tokens :work:chat: -:LOGBOOK: -CLOCK: [2022-06-07 Tue 17:58]--[2022-06-07 Tue 18:58] => 1:00 -:END: -[2022-06-07 Tue 17:58] -**** CHAT Rekha questions :work:chat: -:LOGBOOK: -CLOCK: [2022-06-07 Tue 16:40]--[2022-06-07 Tue 17:00] => 0:20 -:END: -[2022-06-07 Tue 16:40] -**** DONE Propose a technical solution for [[https://github.com/advthreat/iroh/issues/6770][6770]] :work: -SCHEDULED: <2022-06-08 Wed 11:00> -:LOGBOOK: -CLOCK: [2022-06-08 Wed 11:20]--[2022-06-08 Wed 11:49] => 0:29 -:END: -[2022-06-07 Tue 15:23] -**** DONE Remove duplicates [[https://github.com/advthreat/iroh/issues/6769#issuecomment-1148580667][duplicate]] :work: -SCHEDULED: <2022-06-16 Thu 11:00-11:20> -:LOGBOOK: -CLOCK: [2022-06-09 Thu 10:43]--[2022-06-09 Thu 10:44] => 0:01 -:END: -[2022-06-07 Tue 15:14] -**** DONE Weekly Leads :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-07 Tue 15:14]--[2022-06-07 Tue 16:30] => 1:16 -:END: -[2022-06-07 Tue 15:14] -**** PAUSE pause :pause: -:LOGBOOK: -CLOCK: [2022-06-07 Tue 11:17]--[2022-06-07 Tue 14:38] => 3:21 -:END: -[2022-06-07 Tue 11:17] -**** DONE discuss [[https://github.com/advthreat/iroh/issues/6740#issuecomment-1148013914][Wanderson comment on Refresh Token]] :work: -SCHEDULED: <2022-06-07 Tue 14:30-14:45> -[2022-06-07 Tue 10:02] -**** DONE Jeetu/Shaila keynote [[https://www.youtube.com/watch?v=PrgXKtTqDMI][RSA keynote]] start 1:15/1:28 :work: -SCHEDULED: <2022-06-07 Tue 10:50-11:20> -:LOGBOOK: -CLOCK: [2022-06-07 Tue 10:58]--[2022-06-07 Tue 11:03] => 0:05 -:END: -[2022-06-07 Tue 09:47] -**** DONE Check Wanderson discussion [[https://github.com/advthreat/iroh/pull/6773][switch-tenant jwt endpoint]] :work: -SCHEDULED: <2022-06-07 Tue 10:30-10:50> -:LOGBOOK: -CLOCK: [2022-06-07 Tue 10:41]--[2022-06-07 Tue 10:58] => 0:17 -CLOCK: [2022-06-07 Tue 10:19]--[2022-06-07 Tue 10:40] => 0:21 -:END: -[2022-06-07 Tue 09:45] -**** DONE Team Space [[https://teamspace.cisco.com/sso/cisco/redirect/L215Y2hlY2tpbnMvd2l6YXJk][check-in]] :work: -SCHEDULED: <2022-06-07 Tue 10:00> -:LOGBOOK: -CLOCK: [2022-06-07 Tue 10:07]--[2022-06-07 Tue 10:12] => 0:05 -:END: -[2022-06-07 Tue 09:42] -**** DONE pwreset :work: -:LOGBOOK: -CLOCK: [2022-06-07 Tue 09:30]--[2022-06-07 Tue 09:41] => 0:11 -:END: -[2022-06-07 Tue 09:38] -*** 2022-06-08 Wednesday -**** IN-PROGRESS Create issue about filtering matching orgs with already existing user email :work: -:LOGBOOK: -CLOCK: [2022-06-08 Wed 16:56]--[2022-06-08 Wed 17:06] => 0:10 -:END: -[2022-06-08 Wed 16:56] -**** MEETING Tenant Switching sync :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-08 Wed 16:45]--[2022-06-08 Wed 16:56] => 0:11 -:END: -[2022-06-08 Wed 16:45] - -remove matched orgs if user already exists (with same email) -**** CHAT Discussion about session token lifetime :work:chat: -:LOGBOOK: -CLOCK: [2022-06-08 Wed 16:09]--[2022-06-08 Wed 16:45] => 0:36 -CLOCK: [2022-06-08 Wed 15:32]--[2022-06-08 Wed 16:09] => 0:37 -:END: -[2022-06-08 Wed 15:32] -**** DONE meeting things to talk about :work: -SCHEDULED: <2022-06-08 Wed 16:30-17:00> -[2022-06-08 Wed 11:37] -***** Invitations UI/UX improvements - -- https://github.com/advthreat/iroh/issues/6770 -- https://github.com/advthreat/iroh/issues/6778 -**** DONE Check [[https://github.com/advthreat/iroh/pull/6773#event-6763342426][Doc for tenant switching]] :work: -SCHEDULED: <2022-06-08 Wed 14:00-14:15> -:LOGBOOK: -CLOCK: [2022-06-08 Wed 14:02]--[2022-06-08 Wed 14:16] => 0:14 -:END: -[2022-06-08 Wed 10:42] -**** CHAT Answered [[webexteams://im?space=331b38f0-6218-11e9-9aae-c5b8cb291b23][SecureX / CTR Support]] :work:chat: -:LOGBOOK: -CLOCK: [2022-06-08 Wed 10:25]--[2022-06-08 Wed 10:32] => 0:07 -:END: -[2022-06-08 Wed 10:31] -**** DONE Answer to Refresh Session Tokens chat [[webexteams://im?space=5b29b980-e351-11ec-8033-13a2eb8092c0][Refresh Token room]] :work: -SCHEDULED: <2022-06-08 Wed 14:15-14:30> -[2022-06-08 Wed 10:19] - -Adding a new temporary route is not straightforward, because it would mean -supporting multiple clients depending on the route, then also adding a feature -flag, and also adding a different config, etc… - -But notice that you can refresh after 5min even if the access token is still -valid. -So you should probably start with that. -*** 2022-06-09 Thursday -**** MEETING weekly meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-09 Thu 17:15]--[2022-06-09 Thu 18:08] => 0:53 -:END: -[2022-06-09 Thu 17:14] -***** Agenda (to discuss about) -***** Notes -***** Actions -**** CHAT Houman :work:chat: -:LOGBOOK: -CLOCK: [2022-06-09 Thu 15:10]--[2022-06-09 Thu 15:27] => 0:17 -:END: -[2022-06-09 Thu 15:10] -**** CANCELED Add refresh token / client info in the access tokens :work: -SCHEDULED: <2022-06-14 Tue 15:30-16:30> -:LOGBOOK: -- State "CANCELED" from "IN-PROGRESS" [2022-06-16 Thu 10:52] \\ - Other priorities -CLOCK: [2022-06-15 Wed 07:06]--[2022-06-15 Wed 18:12] => 11:06 -CLOCK: [2022-06-09 Thu 15:27]--[2022-06-09 Thu 17:15] => 1:48 -CLOCK: [2022-06-09 Thu 14:12]--[2022-06-09 Thu 15:10] => 0:58 -:END: -[2022-06-09 Thu 14:12] -**** DONE Check [[https://github.com/advthreat/iroh/pull/6764][Free Trial Design Doc]] :work: -SCHEDULED: <2022-06-22 Wed 16:00-16:30> -[2022-06-09 Thu 11:45] -**** CHAT Chris Duane PenTest :work:chat: -:LOGBOOK: -CLOCK: [2022-06-09 Thu 11:17]--[2022-06-09 Thu 11:54] => 0:37 -:END: -[2022-06-09 Thu 11:17] -**** DONE impression chiens :interruption:work: -:LOGBOOK: -CLOCK: [2022-06-09 Thu 10:32]--[2022-06-09 Thu 10:42] => 0:10 -:END: -[2022-06-09 Thu 10:32] -**** DONE Answer to Ag :work: -SCHEDULED: <2022-06-09 Thu 10:45-10:55> -:LOGBOOK: -CLOCK: [2022-06-09 Thu 11:54]--[2022-06-09 Thu 12:02] => 0:08 -CLOCK: [2022-06-09 Thu 10:44]--[2022-06-09 Thu 11:17] => 0:33 -:END: -[2022-06-09 Thu 10:18] - -ann, my current work for module-patching-ui for the Doc team is now on halt, -since our Ops is a huge clusterfuck right now. -I can't believe it, but they can't figure out provisioning a simple server with -a configuration similar to CTIA. -Since March. - -Anyway, I've been tasked with some other things and I need your help (because -Rob has no clue, and Mark is mumbling in a language I can't comprehend. -Not to throw my colleagues under the bus, I don't get it due to my own -cretinism). -I literally have no idea what's being asked here: -https://github.com/advthreat/iroh/issues/6688 - -Can you tell me what you know about the tac-web-service? -My understanding that it's only available through /admin/tac -• Who consumes these routes? -• Are they actively being used? -• Does the ticket mean that we're going to have to copy some of the -functionality out of admin zone and make it avaliable for non-admins? -• Could you point me to the similar things somewhere in the repo? - - -Basically, can you help me start on this? -I know, you've probably (as always) super-busy with other things, and the last -thing you need is to hold someone's hand, but it's been ages since I contributed -any code to the repo. -It would take me forever on my own. -Thanks a lot. -***** Answer - -Hi Ag! - -Yep, I am pretty blocked myself with this password reset. - -Regarding the issue, I didn't hear about that one. -So to answer your questions. - -- who consumes these routes? Mainly people from TAC so they could help - customers. I manually created an Org so all users of this orgs have the scope ~iroh-master/tac~. - This way the TAC team could access only the routes for TAC without giving them - access to more dangerous routes like direct store access (where a manual - mistake could really break the entire PROD). -- are they actively being used? YES -- Does the ticket mean that we're going to have to copy some of the - functionality out of admin zone and make it available for non-admins? - NO, the routes will stay under the admin zone, but only under the TAC Web - Services that only requires ~iroh-master/tac~ scope. - -So you should start at ~iroh-admin.tac-web-service.routes~ -Mainly you should add a few functions so they could provide the functionalities -they would like. -But beware that, unlike the direct store functions, you should take great care -of not breaking the expected schemas in the DB. - -But you could probably just provide a few new routes, to search users by email, -enable/disable users. For that you should use the ~UserService~ the current route -already use the ~OrgService~ to update orgs. - -For enabling a module by id I don't know much, this is probably a method from ~ModuleInstanceService~. - -Cheers, -Yann. -*** 2022-06-10 Friday -**** DISC Chien Espoir & Handicap :work:discussion: -:LOGBOOK: -CLOCK: [2022-06-10 Fri 10:41]--[2022-06-10 Fri 14:35] => 3:54 -:END: -[2022-06-10 Fri 10:41] -***** Acceuil - - -[À propos](/about): - -Handicap supportés: - -- handicap moteur -- troubles autistiques -- troubles visuels -**** CHAT Allison Walters role sync :work:chat: -:LOGBOOK: -CLOCK: [2022-06-10 Fri 09:05]--[2022-06-10 Fri 09:41] => 0:36 -:END: -[2022-06-10 Fri 09:05] - -Hi Allison, the confusion is expected unfortunately, the current state of affair -is the result of a very long and painful work that was called "IdP -Migration"/"SXSO Migration"/"Account Migration" mainly, I will try to give the -most exhaustive answer I can about this. - -First, SecureX and Threat Response are two Cisco products that have different -URL, different UI, but behind the hood both use the same and single API which is -called IROH. So both SecureX and Cisco Threat Response (and in fact a few other -products like the Ribbon, etc…) use the IROH API. - -Inside the IROH API, there is a big component dedicated to everything related to -Authentication, OAuth2 management, etc… This component is called IROH-Auth. - -So before the "migration", when a customer wanted to login into Threat Response -or SecureX he saw 2 buttons (one for AMP which is now CSA and one for -Threatgrid now called Secure Malware Analytics). - -So took place a huge concerted effort to only show 1 button. -After more than one and half a year of effort from multiple teams and lot of -people involved we finally had 3 buttons (both older 2 buttons + SecureX Sign-On). - -:) - -Today we still have 3 login choices to login, but the UI subtly hide 2 buttons -by making the default login (SXSO) more prominent. - -That was for the small story. -Now, let's talk about the technical details: - -The goal of the migration (let's call it that way) was to force every CSA user -to migrate toward using SecureX Sign-On to login. -So one more complexity, CSA accounts could or could not be directly related to an -active AMP (Secure Endpoint) account. So this add a layer on complexity for the -CSA team. - -IROH-Auth provided multiple different mechanisms to minimize the inevitable -friction that would occurs when user will change their login system. So -technically this is not that complex, we "just" needed from the CSA team to add -the "link" from the previous account and new account. -IROH-Auth exposes a provisioning API for this purpose. - -Mainly, every time a user perform a migration from CSA to SXSO in CSA (using the -CSA URL, workflow, etc…) -as IROH could not know that, CSA team call the provisioning API when: - -- a user perform a migration, so we could link the old CSA user-identity to the - new SXSO user-identity in SecureX as well as it is done in CSA -- a new user is created into a CSA organization and login via SXSO, in that case - the CSA team create a new user inside SecureX, with the SXSO identity. So if - this user login in SecureX it is automatically put in the correct org. - -This is what should occurs when user only uses CSA. -And this is the responsibility of CSA to perform these call to the provisioning API. -But the provisioning API is not called when the user's role is changed in SE. - -So once an org is marked to have migrated, they should no more be able to login -via CSA, but should be forced to pass through SXSO. - -OK. That's the first migration path. - -Now, what about a user that has a CSA/SE account but before migrating the org -uses SecureX but create an SXSO account without passing through the migration workflow? - -In that case, IROH-Auth tries to be "smart" about it. -So we try to detect email matches. -If a user login via SXSO and we have known users with the same email, we links -all these accounts together. - -Note, SXSO do not provide any info about the role, nor the org. - -So the role in SecureX could change only via: - -- an admin in some non migrated SE org change the SE user role and later that - user login via a CSA button on a non migrated org in SE -- Inside SecureX, an admin could change the role of another user in SecureX -- The provisioning API during user migration or user creation - -To give an example about how role could be updated: - -- on a non migrated org in SE: - + user-1 logged in a long time ago in SecureX with some role - + user-2 never logged into SecureX - + admin perform a role change for both user-1 and user-2; (in that step user-1 - role in SecureX and SE are different, SecureX could only sync the role if - user-1 login via CSA) - + admin perform the migration of its org in CSA => CSA call the provisioning - API, that should sync all users from CSA/SE into SecureX - + after the migration users should not be able to login again via CSA so the - link between the role is cut. And a change of role in SE will not result in - a change of role in SecureX. - -And I think there are missing workflow paths about it. -But to try to put it more simply, "most of the time", once an org migrate from -CSA to SXSO the link between the role is cut and the role are expected not to be -synchronized. - -I hope it could help a little. I think I left a lot more specific details some -of them I forgotten, some of them I cannot know about because it depends on the -CSA team. The doc related to this is probably long deprecated now, because so -many last minute bug fix occurred that we lost track of some minor details that -could potential make the simple rule (no relation between user's role once -migrated to SXSO) not work. - -For example, one detail I forgot to mention, when CSA call the provisioning API -to mark an Org as being migrated, SecureX will no more accept login via CSA for -this org. -So things are more complex when user create SXSO account before officially -migrating their org for example. - -Cheers. -**** DONE Review [[https://github.com/advthreat/iroh/pull/6791][#6791 Wanderson access/refresh]] :work: -SCHEDULED: <2022-06-10 Fri 14:00-14:30> -[2022-06-10 Fri 09:00] -** 2022-W24 -*** 2022-06-13 Monday -**** DONE Krystelle rescrit :interruption: -:LOGBOOK: -CLOCK: [2022-06-13 Mon 16:55]--[2022-06-13 Mon 17:02] => 0:07 -:END: -[2022-06-13 Mon 16:55] -**** DONE Lionel Rebière :interruption: -:LOGBOOK: -CLOCK: [2022-06-13 Mon 16:43]--[2022-06-13 Mon 16:55] => 0:12 -:END: -[2022-06-13 Mon 16:43] -**** MEETING weekly Account Switching :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-13 Mon 16:32]--[2022-06-13 Mon 16:43] => 0:11 -:END: -[2022-06-13 Mon 16:32] - -Maison - -Relancer le rescrit, dons défiscalisés. - -- 2 premiers benef test. -**** IN-PROGRESS telephone :interruption:work: -:LOGBOOK: -CLOCK: [2022-06-13 Mon 15:24]--[2022-06-13 Mon 16:32] => 1:08 -:END: -[2022-06-13 Mon 15:24] -**** IN-PROGRESS Security Fix (revocation on disable) :work: -:LOGBOOK: -CLOCK: [2022-06-13 Mon 15:10]--[2022-06-13 Mon 15:24] => 0:14 -:END: -[2022-06-13 Mon 15:10] -*** 2022-06-14 Tuesday -**** DONE Review [[https://github.com/advthreat/iroh/pull/6785][Tenant switching route to return JWT of other account]] :work: -SCHEDULED: <2022-06-14 Tue 15:00-15:30> -:LOGBOOK: -CLOCK: [2022-06-14 Tue 15:20]--[2022-06-14 Tue 16:50] => 1:30 -:END: -[2022-06-14 Tue 14:52] -*** 2022-06-15 Wednesday -**** GEEK Chien Espoir Handicap site :perso: -:LOGBOOK: -CLOCK: [2022-06-15 Wed 18:27]--[2022-06-15 Wed 22:15] => 3:48 -:END: -[2022-06-15 Wed 18:27] -**** DONE check time2give and click2give :work: -SCHEDULED: <2022-06-27 Mon 16:30-17:00> -[2022-06-15 Wed 15:13] -**** DONE Webex Olivier :work: -SCHEDULED: <2022-06-14 Tue 15:00-15:30> -[2022-06-15 Wed 14:42] -*** 2022-06-16 Thursday -**** DONE [#B] List of technical issues to add to the next quarter :work: -SCHEDULED: <2022-06-17 Fri 10:30-11:00> -:LOGBOOK: -CLOCK: [2022-06-17 Fri 10:04]--[2022-06-17 Fri 11:06] => 1:02 -:END: -[2022-06-16 Thu 17:25] -**** MEETING weekly meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-16 Thu 17:13]--[2022-06-16 Thu 20:19] => 3:06 -:END: -[2022-06-16 Thu 17:13] - -- org-level client continue -- work continue on Tenant switching, I expect Wanderson PR to be merged either - today or probably at the beginning of next week. -- auto revoke disabled users ; problems with the linter (disable, revert, fix, etc…) -- Next => help UI by adding a new parameter to generate short lived tokens (need - the PR from Wanderson first) -- waiting the VPN to fix duplicate accounts (one user has 200 duplicates) -- started to work on iroh.main, but I was interrupted by other things, but I am - not far from giving a good result in my branch. -- The most important work is probably support Token Exchange compatible with - SecureX Sign-On user identities when used as subject. -**** IN-PROGRESS revoke JWT when disabling users :work: -:LOGBOOK: -CLOCK: [2022-06-16 Thu 10:52]--[2022-06-16 Thu 17:13] => 6:21 -:END: -[2022-06-16 Thu 10:52] -*** 2022-06-17 Friday -**** IN-PROGRESS Revoke on disable :work: -:LOGBOOK: -CLOCK: [2022-06-17 Fri 11:06]--[2022-06-17 Fri 17:32] => 6:26 -:END: -[2022-06-17 Fri 11:06] -** 2022-W25 -*** 2022-06-23 Thursday -**** MEETING API Design Meeting (with Jyoti) :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-23 Thu 17:59]--[2022-06-24 Fri 17:55] => 23:56 -:END: -[2022-06-23 Thu 17:59] -***** Talos Mapping - -Michael Simonson data mapping from Talos. -**** MEETING weekly :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-23 Thu 17:30]--[2022-06-23 Thu 17:59] => 0:29 -:END: -[2022-06-23 Thu 17:30] - -Work done - -In my current PR changed the iroh-auth-service protocol and it didn't break -iroh-int !!!! Thanks Matt! -**** IN-PROGRESS Anticorruption & Bribery training :work: -:LOGBOOK: -CLOCK: [2022-06-23 Thu 10:49]--[2022-06-23 Thu 17:30] => 6:41 -:END: -[2022-06-23 Thu 10:48] -*** 2022-06-24 Friday -**** MEETING Monthly Engineering :work:meeting: -:LOGBOOK: -CLOCK: [2022-06-24 Fri 17:55]--[2022-06-24 Fri 19:11] => 1:16 -:END: -[2022-06-24 Fri 17:55] - -- Switch tenant; - - ability to change your account, generate JWT from other JWT. - - new UI that will help managing your accounts, orgs, discover new orgs, etc… -- Token Exchange; exchange an email or user-id for a SecureX JWT. -- Org-level clients; handle OAuth2 clients when their owner leave the company -***** Intro - -Just 1h. Lineup demos: - -Carlos Diaz Secure Endpoint, show us. Investigation. - -Michael and Mark present something with Jira. -***** Tour -****** Ops -John: pivot openVPN back to using certs -****** Release status -Houman: asking Neel - -1.99 is in production 1 day late. -Same with 1.98. -****** Business Updates -****** Team - -Guillaume: - -- New team members: - - Shafiq is in Sweden - - Johnatan will start next week, Toronto / Berlin ; under G2 - - Jerome Shneider; join mid-july, dedicated ops for IROH -- Tenant Switching -- Improvements -- -**** DONE Answer ETA https://github.com/advthreat/iroh/issues/6769 :work: -DEADLINE: <2022-06-24 Fri 16:00> SCHEDULED: <2022-06-24 Fri> -[2022-06-24 Fri 10:38] -** 2022-W32 -*** 2022-08-09 Tuesday -**** DONE Answer to Jyoti :work: -SCHEDULED: <2022-08-09 Tue 11:00> -[2022-08-09 Tue 09:47] -**** DONE Answer to question from Ben :work: -SCHEDULED: <2022-08-09 Tue 10:00> -[2022-08-09 Tue 09:45] - -So we could probably add a parameter to create links that would auto-select the -tenant during login and bypass the redirection to the Registration UI. - -But I am not sure this would be desirable, because it would introduce potential -inconsistency. -The main issue is that we use many different URLs, for different component/products. -The state (the user-identity and the tenant) must be saved for every URL of -every component/product if we want to synchronize the tenancy everywhere. - -For example think about this scenario: - -1. login to SecureX as user1@company.com using org Company -2. click to login to CTR (say the user login into the same user/org in CTR) -3. open a new tab and open SecureX, then inside SecureX switch tenant to Company2 -4. without clicking to back to CTR => the tenant is Company not Company2 - -Now it might also be more difficult to use different tenant between product. -I don't know if this is what we want or not. - -The question is probably more, do we want to sync the tenant on all our product -all the time? aka, à la google. -Or do we want to be able to have different tenant on different URL? - -If we want to sync the tenancy everywhere, this could be done, but this is not -free. -Mainly we want a solution similar to how Google handle your Google account. -Notice how, when you switch your Google account, you wait a few seconds on a -webpage? -This is Google opening a few iframes to pass the state between different URLs -(like google.com and youtube.com etc…) - -Google have it easy, because they just care about the User Identity. And once -they know your user identity, they don't need to clear it, as it never changes. -So your Google account session is infinite. - -In the Cisco case, the User Identity state is saved in a cookie at the SXSO URL. -But, unlike Google Cisco, need to ask confirmation of the User Identity to 3rd -party IdPs so we do not allow a login from a user that was fired from a company. -So SXSO sessions are a lot shorter (a few hours). - -The Tenancy state is not saved into the Registration UI URL for now but it could -be. -But this must be dependent on the session lifetime of SXSO for the same security -reason. - -But as we use 3rd party IdPs, and thus depends on IdP of our customers, it -means, that our User Identity session must be short enough to be somehow secure -and it means that if we were to sync the account state on all products we will -need to present a similar page to the Google account switching everytime the -session ends. So once a day, we would force our customer to see that page that -could take a few seconds to load because it is loading in the background many -different URLs. -*** 2022-08-12 Friday -**** DONE Check clients qui seront disabled en PROD -SCHEDULED: <2022-08-16 Tue> -[2022-08-12 Fri 16:10] - -APJC -user-id org-id enabled? user-email -x b4194bf2-4baa-4583-a3f4-1adbf711b4c8 6053ec8b-e546-4938-85ae-89bfa25df8e1 not-enabled yvaisman@cisco.com -x b4194bf2-4baa-4583-a3f4-1adbf711b4c8 6053ec8b-e546-4938-85ae-89bfa25df8e1 not-enabled yvaisman@cisco.com - -owner 6ee52ee9-2e3a-4e1b-977d-961facb5fd84 from org 63489cf9-561c-4958-a13d-6d84b7ef09d4 not found -owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found -owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found - -EU -user-id org-id enabled? user-email -x ce157e8d-c7da-4284-afc1-cb9f83c7d4c8 4c2bfb38-b4be-4752-9eee-d98a0d6c0d6a not-enabled yvaisman@cisco.com - -x owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found -x owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found -owner d697511a-9164-49d0-8c7b-a5c1a11fb25d from org 576c9ad4-7820-44ca-9d5e-6ca678eadcd1 not found - -NAM -user-id org-id enabled? user-email -x 3933f5e0-50bb-49a7-bbf4-5944e0b709fd 2e0e9eaf-eaf7-4449-9c07-9fb1828aec78 not-enabled yana@securitydemo.net -x 7ef6da70-eeef-4a18-83ea-2e94dd6f9ba2 d76c035d-e896-438c-8d75-158be85fc958 not-enabled aklager+orbital_dev@cisco.com - -x owner d697511a-9164-49d0-8c7b-a5c1a11fb25d from org 576c9ad4-7820-44ca-9d5e-6ca678eadcd1 not found -***** Fixes -****** NAM -Replaced -3933f5e0-50bb-49a7-bbf4-5944e0b709fd by 9992027f-a88b-4b0e-8a38-58ad317c58af -7ef6da70-eeef-4a18-83ea-2e94dd6f9ba2 by dbc2d227-ba79-47e8-ae21-b4da6e1727f8 - -For client: client-3e55e6a3-4561-4733-b380-ffbd94733ba1 -from d697511a-9164-49d0-8c7b-a5c1a11fb25d to me {"owner-id":"f0010924-e1bc-4b03-b600-89c6cf52757c", "org-id":"f47a89bf-5d2e-4392-b770-ad4821a82acf"} -****** EU - -no org found: - -client-01c25de8-50a7-4ed8-b260-b1ebee977fda (CSC backend client) -client-8dae4eda-3b9a-48b1-8cdc-e7e1963465a3 (CSC Backend) -client-3e55e6a3-4561-4733-b380-ffbd94733ba1 (SSE UI Client; "PROD EU Environment for Security Services Exchange Admin Console") - -Replace by me: - -{"owner-id":"080c8271-e1c7-4fe6-b6e2-bc1fda123432", -"org-id":"bfb43d46-4fc3-43e7-93bf-a1fbe020593b"} -****** APJC - -client-92258bc0-196a-4f6c-a0b5-fe105de5f505 (SSE UI dev client) -client-ff492465-48c7-4aab-b9c7-feb3569226a7 (CSC backend) -client-b0d51eb1-e03f-4671-aa99-8fb4927ae88b (CSC backend) - -Replace by me: - -{"owner-id":"b19d5dea-5aa4-4265-b42d-9acc1e913f01", -"org-id":"d461811f-e6ce-477c-bae3-1d7527f4e80b"} -** 2022-W33 -*** 2022-08-17 Wednesday -**** CANCELED Reward Sofiia for helping with creds :work: -SCHEDULED: <2022-08-17 Wed> -:LOGBOOK: -- State "CANCELED" from "TODO" [2022-09-09 Fri 09:56] -:END: -[2022-08-17 Wed 11:54] -** 2022-W35 -*** 2022-08-31 Wednesday -**** MEETING API Design Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-08-31 Wed 18:33]--[2022-09-01 Thu 16:02] => 21:29 -:END: -[2022-08-31 Wed 18:33] -***** IROH Proxy for Orchestration -**** DONE Answer Chakrapani Chitnis :work: -SCHEDULED: <2022-08-31 Wed> -[2022-08-31 Wed 09:27] -**** DONE Answer to Prerna in Switch Tenant Discussion :work: -SCHEDULED: <2022-08-31 Wed 10:00> -[2022-08-31 Wed 09:24] - -webexteams://im?space=3fda2de0-7876-11ec-b589-2d17b011a78b -***** Answer - -Hi Prerna, you are totally right, as CTR do not implement the switch user this -PR will probably break CTR workflow. - -I should probably have asked to split this feature in two steps: - -1. Ability to create a link that will ensure the user will be presented the - Registration UI -2. Change the login behavior to match the one asked by Ben. - -Note, that CTR might not need to implement the full user switching from within -CTR and simply use (1) to redirect user to the Registration UI, so the user will -be able to switch their account from there. - -I think (1) would not break anything and will be retro-compatible. -Also I think both CTR and SecureX should provide a way to redirect the user to -the Registration UI. -Currently user with a single account never reach the Registration UI unless they -have a pending invite, which means for these users, creating a new Organization -is probably almost impossible. - -That being said, I didn't want to change the behaviour before asking everyone in -this FT if this is desirable, as it appears to me that automatically redirecting -the users to the dashboard (or CTR) with the latest login account, goes a bit -against some discussion we had to present the Registration UI as often as possible. - -So, sorry @wanderson, could you split your PR? Or maybe create a new PR with -just (1) implemented? As I think this is needed to fix this bug: - -https://github.com/advthreat/GLaDOS/issues/3404 - -So at least for now, I don't think we need to go further, the PR will be put -on-hold until further discussion. -*** 2022-09-01 Thursday -**** MEETING Weekly :work:meeting: -[2022-09-01 Thu 17:07] -***** Y - -Code cleaning: -- use iroh-crud for Users -- use tk-test - -Help fix the missing events with Matt - -Discuss about improving login workflow, was refused because it will break CTR. - -Idea occurred to me to split the test between integration one and the other. -We could gain the docker init time for them ;) -**** MEETING AO Meeting :work:meeting: -:LOGBOOK: -CLOCK: [2022-09-01 Thu 16:02]--[2022-09-03 Sat 13:16] => 45:14 -:END: -[2022-09-01 Thu 16:02] -***** Lisa & Craig - -Leverage SX Module Integration - -- Lisa Hart PO of SXO -- Briana Farro, presentation; -***** Plan -- Chris (PM); desired outcome -- Pior Proposed Engineering Solutions -- New Proposed Engineering Solution -***** Product Statement Overview -****** Christopher Van Der Made -open API (very few cisco product provide it) -** 2022-W41 -*** 2022-10-12 Wednesday -**** DONE Add Allison Walters to the org of the demo client :work: -SCHEDULED: <2022-10-12 Wed> -[2022-10-12 Wed 09:58] -TEST ~client-2f0c934c-ce46-4187-afed-4cdcff937679~ -email: allwalte@cisco.com -** 2022-W42 -*** 2022-10-19 Wednesday -**** CANCELED Ask Robert Harris to update doc for ribbon :work: -SCHEDULED: <2022-10-19 Wed> -:LOGBOOK: -- State "CANCELED" from "TODO" [2022-10-19 Wed 15:52] -:END: -[2022-10-19 Wed 06:56] - -ref :: https://github.com/advthreat/pabst/blob/master/docs/ribbon2migration.md#oauth2-configuration -**** DONE Talk with Olivier about doc template :work: -SCHEDULED: <2022-10-19 Wed> -:LOGBOOK: -CLOCK: [2022-10-19 Wed 10:07]--[2022-10-19 Wed 11:55] => 1:48 -:END: -[2022-10-19 Wed 06:56] -**** DONE Replace the scopes for Rooshan :work: -SCHEDULED: <2022-10-19 Wed> -:LOGBOOK: -CLOCK: [2022-10-19 Wed 14:55]--[2022-10-19 Wed 15:52] => 0:57 -:END: -[2022-10-19 Wed 06:53] - -ref :: https://github.com/advthreat/pabst/blob/master/docs/ribbon2migration.md#oauth2-configuration - -New scopes: - -#+begin_src javascript -{"scopes": ["admin/csc", - "admin/integration/module-instance:write", - "casebook", - "enrich:read", - "global-intel:read" - "inspect:read", - "integration/api-gateway/proxy:write", - "integration/module-instance", - "integration/module-type:read", - "integration/sxso/app-links:read", - "integration:read" - "investigation", - "notification", - "orbital", - "private-intel", - "profile", - "registry/user/ribbon", - "registry/user:read", - "response", - "telemetry:write", - "users", - "vault/config/metadata:read", - "vault/configs:read", - ]} -#+end_src -** 2022-W43 -*** 2022-10-24 Monday -**** DONE Faire l'ESTA :work: -DEADLINE: <2022-10-25 Tue 18:00> SCHEDULED: <2022-10-24 Mon> -[2022-10-24 Mon 15:59] -**** DONE [#B] Réserver vols Concur :work: -DEADLINE: <2022-10-24 Mon 15:15> SCHEDULED: <2022-10-24 Mon> -[2022-10-24 Mon 11:02] - -#+begin_quote -CISCO EMERGENCY TRAVEL NUMBER *88* OPTION 6 -### PLEASE READ THIS IMPORTANT MESSAGE -PLEASE CALL THE CISCO TRAVEL TEAM TO -UPDATE CHANGE OR CANCEL THIS RESERVATION -PLEASE CALL *88* PROMPT 6 FROM ANY CISCO IP PHONE -OR 00 31 36 711 7711 PROMPT 6 ------PLEASE NOTE THESE IMPORTANT NUMBERS----- -----MEDICAL AND SECURITY TRAVEL EMERGENCY---- -US 1 800 206 5647 / TOLL FREE -AMER WEST AND WORLDWIDE COLLECT 1 408 525 1111 -AMER EAST 919 392 2222 OR 1 888 302 9081 -EMEA 44 20 8824 3434 -INDIA 91 80 4426 4111 / ASIA PAC 86 21 2407 3333 - -QI 8 COMPANY CISCOBE -QI 8 FORM AXQIITNBEEN -#+end_quote -**** DONE Update clients scopes :work: -SCHEDULED: <2022-10-24 Mon 16:00> -:LOGBOOK: -CLOCK: [2022-10-24 Mon 15:43]--[2022-10-24 Mon 16:27] => 0:44 -:END: -[2022-10-24 Mon 10:57] - -Webex link: webexteams://im?space=26a6e900-fe90-11ea-8c35-195a5dc6b463 -Contact: Rooshan Aslam - -Env: amp/nam -"RIBBON_CLIENT_ID":"client-ead5586b-a545-423e-857f-3c65841067ef" - - Env: eu - "RIBBON_CLIENT_ID":"client-ce13991c-6049-48ee-8e33-e4d059a153bf" - -Env: apjc -"RIBBON_CLIENT_ID":"client-2fbb67f0-a6b4-41b4-b4ce-62a8b89fe606" - -PATCH: - -#+begin_src js -{"scopes": [ - "admin/csc", - "admin/integration/module-instance:write", - "casebook", - "enrich:read", - "global-intel:read", - "inspect:read", - "integration/api-gateway/proxy:write", - "integration/module-instance", - "integration/module-type:read", - "integration/sxso/app-links:read", - "integration:read", - "investigation", - "notification", - "orbital", - "private-intel", - "profile", - "registry/user/ribbon", - "registry/user:read", - "response", - "telemetry:write", - "users", - "vault/config/metadata:read", - "vault/configs:read"]} -#+end_src -***** NAM Backup - -#+begin_src json -{ "scopes": [ - "admin/csc", - "vault/configs:read", - "private-intel", - "profile", - "integration/module-type:read", - "enrich:read", - "admin/integration/module-instance:write", - "users", - "casebook", - "vault/config/metadata:read", - "inspect:read", - "orbital", - "integration/module-instance", - "integration/api-gateway/proxy:write", - "integration/sxso/app-links:read", - "notification:read", - "response", - "telemetry:write", - "registry/user/ribbon", - "global-intel:read" - ], - "description": "Used to communicate with IROH API endpoints", - "approved?": true, - "redirects": [ - "https://console.amp.cisco.com/visibility_oauth/new", - "https://console.amp.cisco.com/securex_modules/new", - "https://support-portal.amp.cisco.com/securex_modules/new" - ], - "availability": "everyone", - "password": "$s0$f0801$lbvAxwkfQhlCZNJxbkDdLQ==$MMrH+2eTLqtOqc8P1tNwTyKIgvNYePVMK6Sq3Brt+D0=", - "name": "AMP for Endpoints", - "allow-partial-user-scopes?": true, - "org-id": "a2ea8cbf-7540-4860-9050-7a24c3c8e0b6", - "enabled?": true, - "grants": [ - "auth-code" - ], - "client-type": "confidential", - "id": "client-ead5586b-a545-423e-857f-3c65841067ef", - "approval-status": "approved", - "owner-id": "e9a61ce5-e49c-4809-ad14-8230fd12ddd4", - "created-at": "2020-04-16T20:40:37.541Z" -} -#+end_src -***** EU Backup - -#+begin_src -{ - "scopes": [ - "admin/csc", - "vault/configs:read", - "private-intel", - "profile", - "integration/module-type:read", - "enrich:read", - "admin/integration/module-instance:write", - "users", - "casebook", - "vault/config/metadata:read", - "inspect:read", - "orbital", - "integration/module-instance", - "integration/api-gateway/proxy:write", - "integration/sxso/app-links:read", - "notification:read", - "response", - "telemetry:write", - "registry/user/ribbon", - "global-intel:read" - ], - "description": "A client used to make API requests to IROH", - "approved?": true, - "redirects": [ - "https://console.eu.amp.cisco.com/visibility_oauth/new", - "https://console.eu.amp.cisco.com/securex_modules/new", - "https://support-portal.eu.amp.cisco.com/securex_modules/new" - ], - "availability": "everyone", - "password": "$s0$f0801$HJcAh0nXy6kwQ+C6/JvJ5g==$wtPYiPYjxYiB31i2Yapaynh/90GI4gfD4ePZZ21Utlw=", - "name": "AMP for endpoints", - "allow-partial-user-scopes?": true, - "org-id": "a5a47f61-9d42-49fc-a1e9-36b09fe8e95e", - "enabled?": true, - "grants": [ - "auth-code" - ], - "client-type": "confidential", - "id": "client-ce13991c-6049-48ee-8e33-e4d059a153bf", - "approval-status": "approved", - "owner-id": "32060e21-abcb-45c6-923d-dac334805d1d", - "created-at": "2020-04-16T21:08:15.035Z" -} -#+end_src -***** APJC Backup - -#+begin_src json -{ - "scopes": [ - "admin/csc", - "vault/configs:read", - "private-intel", - "profile", - "integration/module-type:read", - "enrich:read", - "admin/integration/module-instance:write", - "users", - "casebook", - "vault/config/metadata:read", - "inspect:read", - "orbital", - "integration/module-instance", - "integration/api-gateway/proxy:write", - "integration/sxso/app-links:read", - "notification:read", - "response", - "telemetry:write", - "registry/user/ribbon", - "global-intel:read" - ], - "description": "A client used to make API requests to IROH", - "approved?": true, - "redirects": [ - "https://console.apjc.amp.cisco.com/visibility_oauth/new", - "https://console.apjc.amp.cisco.com/securex_modules/new", - "https://support-portal.apjc.amp.cisco.com/securex_modules/new" - ], - "availability": "everyone", - "password": "$s0$f0801$IHYBwP+MKF+cjke2H9blhw==$BNEdX+cKmVT6DkW3zq2yvZEaTG7SRM/d+TEeuSsLRac=", - "name": "AMP for endpoints", - "allow-partial-user-scopes?": true, - "org-id": "778298b5-cb3e-4d0c-a8fb-4df2bdf9c665", - "enabled?": true, - "grants": [ - "auth-code" - ], - "client-type": "confidential", - "id": "client-2fbb67f0-a6b4-41b4-b4ce-62a8b89fe606", - "approval-status": "approved", - "owner-id": "92e47cc3-d027-4e2c-88ba-d141bc369883", - "created-at": "2020-04-16T20:50:51.948Z" -} -#+end_src -**** DONE Nag team :work: -DEADLINE: <2022-10-24 Mon 14:30> SCHEDULED: <2022-10-24 Mon> -[2022-10-24 Mon 10:49] -**** DONE Team Space :work: -DEADLINE: <2022-10-24 Mon 15:00> SCHEDULED: <2022-10-24 Mon> -[2022-10-24 Mon 10:49] -*** 2022-10-25 Tuesday -**** DONE Answer Krithika :work: -DEADLINE: <2022-10-25 Tue 15:00> SCHEDULED: <2022-10-25 Tue> -[2022-10-25 Tue 10:51] -** 2022-W44 -*** 2022-11-01 Tuesday -**** DONE POST Off-site Discussion :work: -SCHEDULED: <2022-11-07 Mon> -[2022-11-01 Tue 17:17] - -Incident View discussion: https://github.com/advthreat/iroh/issues/6976 -** 2022-W45 -*** 2022-11-09 Wednesday -**** DONE Handle Flagged emails :work: -SCHEDULED: <2022-11-10 Thu 11:00> -[2022-11-09 Wed 18:36] -** 2022-W46 -*** 2022-11-14 Monday -**** DONE Write RBAC Epic(s) :work: -SCHEDULED: <2022-11-14 Mon 14:00> -:LOGBOOK: -CLOCK: [2022-11-14 Mon 16:29]--[2022-11-14 Mon 18:05] => 1:36 -:END: -[2022-11-14 Mon 10:41] -**** DONE [#B] Comment on Jyoti doc :work: -DEADLINE: <2022-11-14 Mon 11:30> SCHEDULED: <2022-11-14 Mon> -:LOGBOOK: -CLOCK: [2022-11-14 Mon 11:30]--[2022-11-14 Mon 15:42] => 4:12 -:END: -[2022-11-14 Mon 10:41] -- https://github.com/advthreat/response/pull/1601 -*** 2022-11-16 Wednesday -**** DONE Préparation 1-1 Wanderson :work: -SCHEDULED: <2022-11-16 Wed> -:LOGBOOK: -CLOCK: [2022-11-16 Wed 11:24]--[2022-11-17 Thu 18:09] => 30:45 -:END: -[2022-11-16 Wed 11:24] -** 2022-W47 -*** 2022-11-23 Wednesday -**** DONE SCA issues :work: -SCHEDULED: <2022-11-24 Thu 11:00> -[2022-11-23 Wed 19:40] -***** Actions - -- [ ] Onboard API -- [ ] Webhook on role change. -- [ ] ENV/Region in the JWT at least id_token. -- [ ] Time of provisioning 5 to 10 min. -**** DONE TAC Impersonation doc :work: -SCHEDULED: <2022-11-24 Thu 10:00> -:LOGBOOK: -CLOCK: [2022-11-24 Thu 14:06]--[2022-11-24 Thu 14:13] => 0:07 -:END: -[2022-11-23 Wed 19:11] -- take care of scopes -- take care of user-switching or any other kind of JWT generation to keep track - of act and scopes -** 2022-W48 -*** 2022-11-29 Tuesday -**** IN-PROGRESS Put beta-flag :work: -:LOGBOOK: -CLOCK: [2022-11-29 Tue 15:32]--[2022-11-29 Tue 16:32] => 1:00 -:END: -[2022-11-29 Tue 15:32] - -https://github.com/advthreat/iroh/issues/7309 - -=cisco/feature-flag/xdr= - -- SX Test org- PROD NA: b5935c68-c16a-4290-a49a-aad9bb2ea733 -- Cisco SBG Customer Insights (NA): 40f4c64b-7934-4dc6-87d9-5ebf36c13d54 -- DPD Group UK LTD (EU): cee614cb-f35b-4147-bd27-9968d173c3ce -- Jazz Air (NA) - Org ID - 1b7024af-bc0a-4de1-8ce6-f093340ed5fb -- MEMIC (NA) – Org ID - b62f0113-f26e-42f1-89e3-b45254c416a7 -- Opus Holding (NA) - Org ID: 4b1b4bba-f310-4251-88c3-bdf3b93d6456 -- Room & Board (NA) - Org ID: 794047a5-b023-489e-b5ee-6407fcdf0daa -- Talos Energy (NA) - Org ID: c074a67d-1e57-4e4f-9f9d-0b9ed7847bf8 -** 2022-W49 -*** 2022-12-05 Monday -**** DONE Review RoleService :work: -SCHEDULED: <2022-12-04 Sun 11:45> -[2022-12-05 Mon 09:56] -*** 2022-12-06 Tuesday -**** DONE Finir et merger la PR de scopula :work: -SCHEDULED: <2022-12-06 Tue> -:LOGBOOK: -- Note taken on [2022-12-07 Wed 10:48] -CLOCK: [2022-12-06 Tue 11:11]--[2022-12-06 Tue 12:11] => 1:00 -:END: -[2022-12-06 Tue 11:11] -*** 2022-12-09 Friday -**** MEETING Monthly :work:meeting: -:LOGBOOK: -CLOCK: [2022-12-09 Fri 18:32]--[2022-12-09 Fri 19:08] => 0:36 -:END: -[2022-12-09 Fri 18:31] -***** Service Team Pres - -Guillaume is at Black Hat: - -Data API Services Team: - -1. Working on design for the incident management for next XDR product in RSA -Cannot talk much more into details about it. - - -General API services team: -1. Design of the the Audit Trail service -2. CTIM changes for non security related events - -Auth Services Team: -1. Focus on RBAC work - - Design and plan to add new roles - - Olivier is focusing on adding new roles in the code - - Wanderson focus on improving JWT size wich is related to adding new roles and scopes. - -New member in the team that will work with Jerome Patrick Patat. -***** Demos -****** Matt -** 2022-W50 -*** 2022-12-12 Monday -**** IN-PROGRESS Revoke Trusted clients grants :work: -:LOGBOOK: -CLOCK: [2022-12-12 Mon 16:14]--[2022-12-13 Tue 17:44] => 25:30 -:END: -[2022-12-12 Mon 16:14] - -https://github.com/advthreat/iroh/pull/7394 -*** 2022-12-14 Wednesday -**** MEETING API Design Meeting :work:meeting: -[2022-12-14 Wed 18:34] - -- on Incident Creation -- Trigger SXO event, decide if there is any automated workflow to trigger. - -Design for the Rule System. * 2023 ** 2023-W01 *** 2023-01-03 Tuesday @@ -2544,7 +99,6 @@ Probably one solution is to have a "Playbook Instance", which will be a specific instance for an incident of a global Playbook. So this will contains, run-ids for workflow ids, state of the playbook from user interactions, actions, notes, etc… - ** 2023-W04 *** 2023-01-24 Tuesday **** MEETING 1-1 Wanderson :work:meeting: @@ -2988,12 +542,9 @@ CLOCK: [2023-02-16 Thu 17:04]--[2023-02-17 Fri 10:22] => 17:18 Address rumors: 1. Earnings, yesterday, 133M$ -**** TODO Ecrire doc pour expliquer les changements RBAC à SXO :work: +**** DONE Ecrire doc pour expliquer les changements RBAC à SXO :work: SCHEDULED: <2023-03-27 Mon 16:00> [2023-02-16 Thu 10:20] - - - **** DONE Upgrade Client to ribbon 2 in TEST :work: DEADLINE: <2023-02-16 Thu 12:00> SCHEDULED: <2023-02-16 Thu> [2023-02-16 Thu 09:15] @@ -3032,18 +583,16 @@ CLOCK: [2023-02-22 Wed 17:03]--[2023-02-22 Wed 17:34] => 0:31 ***** Actions Look deeper into dependencies (3rd party scopes like sse, ao, etc…) *** 2023-02-23 Thursday -**** HOLD Check Secure Endpoint error logs :work: -DEADLINE: <2023-02-24 Fri 10:30> SCHEDULED: <2023-02-23 Thu> +**** DONE Check Secure Endpoint error logs :work: +CLOSED: [2023-05-06 Sat 09:06] DEADLINE: <2023-02-24 Fri 10:30> SCHEDULED: <2023-02-23 Thu> :LOGBOOK: +- State "DONE" from "HOLD" [2023-05-06 Sat 09:06] - State "HOLD" from "TODO" [2023-02-24 Fri 14:19] \\ En attente du retour de Matt pour tester :END: [2023-02-23 Thu 19:00] - Discussion in "SecureX Secure Endpoint" - webexteams://im?space=d42b0de0-48b3-11ec-924a-a3c1923cd1c3 - Fix PR https://github.com/advthreat/iroh/pull/7473 **** MEETING Weekly IROH Services Meeting :work:meeting: :LOGBOOK: @@ -3139,25 +688,25 @@ Leave with a common understanding, but not precise technical specification. - Simplification of Sources - P2: - Unified view of users and associated devices - ** 2023-W10 - *** 2023-03-06 Monday -**** DONE Add scope to TAC-OPS orgs :work:meeting: +**** DONE Add scope to TAC-OPS orgs :work:meeting: :LOGBOOK: CLOCK: [2023-03-06 Mon 16:50]--[2023-03-06 Mon 20:50] => 4:00 :END: [2023-03-06 Mon 17:01] -**** MEETING RBAC Workshop :work:meeting: +**** MEETING RBAC Workshop :work:meeting: :LOGBOOK: CLOCK: [2023-03-06 Mon 17:02]--[2023-03-06 Mon 17:15] => 0:13 :END: [2023-03-06 Mon 17:01] ***** New tile to measure time of incident resolution - *** 2023-03-07 Tuesday -**** TODO Create a new Epic for Registration UI admin/impersonate :work: +**** CANCELED Create a new Epic for Registration UI admin/impersonate :work: SCHEDULED: <2023-03-28 Tue 11:30> +:LOGBOOK: +- State "CANCELED" from "TODO" [2023-04-20 Thu 15:43] +:END: [2023-03-07 Tue 14:54] - https://github.com/advthreat/iroh/pull/6927 @@ -3177,26 +726,23 @@ new features. Once we have that we will be able to use the Swagger UI for the iroh-auth-ui API. And once we have the second we could provide an impersonate for the Registration UI. - *** 2023-03-08 Wednesday -**** IN-PROGRESS Entitlements :work: +**** IN-PROGRESS Entitlements :work: :LOGBOOK: CLOCK: [2023-03-08 Wed 10:43]--[2023-03-08 Wed 11:43] => 1:00 :END: [2023-03-08 Wed 10:42] - *** 2023-03-09 Thursday -**** DONE Review Mark PRs :work: +**** DONE Review Mark PRs :work: SCHEDULED: <2023-03-09 Thu> [2023-03-09 Thu 18:01] https://github.com/advthreat/iroh/pull/7315 -**** MEETING Weekly :work:meeting: +**** MEETING Weekly :work:meeting: :LOGBOOK: CLOCK: [2023-03-09 Thu 17:13]--[2023-03-09 Thu 18:26] => 1:13 :END: [2023-03-09 Thu 17:13] - ***** Status *Progress*: PIAM provisioning/entitlement/demo plan seems to be ok with all teams @@ -3204,18 +750,19 @@ involved (PIAM, IROH, SCA, Secure Client, DI, SXO) Open question: - where should we put the onboarding configuration (URLs?) - ** 2023-W12 - *** 2023-03-20 Monday -**** CANCELED Add org-habit+ for daily work tasks :work: +**** CANCELED Add org-habit+ for daily work tasks :work: DEADLINE: <2023-03-21 Tue 10:00> SCHEDULED: <2023-03-20 Mon> :LOGBOOK: - State "CANCELED" from "TODO" [2023-03-21 Tue 10:47] :END: [2023-03-20 Mon 10:07] -**** IN-PROGRESS Clients TG :work: -SCHEDULED: <2023-03-29 Wed 11:00> +**** CANCELED Améliorer issue Clients TG / Config :work: +SCHEDULED: <2023-04-19 Wed 11:00> +:LOGBOOK: +- State "CANCELED" from "IN-PROGRESS" [2023-04-20 Thu 15:43] +:END: [2023-03-20 Mon 09:57] INT: @@ -3265,17 +812,16 @@ Austin Haas user-id: 553788bd-25a4-543d-b6c3-cf7dddcfda5a :approved-at #inst "2018-02-27t10:00:00" } #+end_src - *** 2023-03-25 Saturday -**** DONE Add orgs to beta :work: +**** DONE Add orgs to beta :work: DEADLINE: <2023-03-27 Mon 10:00> SCHEDULED: <2023-03-25 Sat> [2023-03-25 Sat 09:51] See webexteams://im?space=d6d28420-c403-11ed-8526-0db030ef0b12 -**** DONE Support body for onboardings :work: +**** DONE Support body for onboardings :work: SCHEDULED: <2023-03-27 Mon 11:00> [2023-03-25 Sat 09:47] -**** DONE recursive search data-structure :work: +**** DONE recursive search data-structure :work: SCHEDULED: <2023-03-27 Mon 16:00> [2023-03-25 Sat 09:44] @@ -3285,7 +831,7 @@ Search | [:or Search*] | [:and Search*] | [:not Search*] by using the trick return {:query ... :args [...]} instead of just query ** 2023-W13 *** 2023-03-28 Tuesday -**** DONE Create issues for SSE onboarding :work: +**** DONE Create issues for SSE onboarding :work: SCHEDULED: <2023-03-28 Tue> [2023-03-28 Tue 18:35] @@ -3294,7 +840,7 @@ SCHEDULED: <2023-03-28 Tue> 2. Support provisioning for free Org (empty entitlement or entitlement.tier = free) and should only onboard CSC and DI. -**** MEETING Performance Management :work:meeting: +**** MEETING Performance Management :work:meeting: :LOGBOOK: CLOCK: [2023-03-28 Tue 18:05]--[2023-03-30 Thu 11:46] => 41:41 :END: @@ -3345,14 +891,12 @@ Core Career Beliefs (illuminate.cisco.com) Please do engage. Slido.com event code: SBGPerfMgmt pass: lift - ***** Goals 1. Understand where each of your team members perf is today 2. if some are underperforming, reach out to perf consultants for support (by 31th March) 3. Plan for Quarterly Developement discussions - ***** Performance at Cisco @Shelly_Collins @@ -3365,7 +909,6 @@ Slido.com event code: SBGPerfMgmt pass: lift - seek feedback from peers, stakeholders - connected recognition - expectations set in your quarterly development - ****** Performing Thinking about their carreer? @@ -3374,8 +917,6 @@ Thinking about their carreer? 3. Achieving (find ways to grow) 4. Excelling (broaden opportunity) 5. Reinventing (build new skillset) - - ****** Underperformance @Felicia_Glace @@ -3390,8 +931,6 @@ Thinking about their carreer? - Employee dealing with personal loss, life event - Behavorial concerns - - ****** Lifting Low Performance Open a case with the Performance Management team @@ -3406,8 +945,6 @@ From a case: - Provide notice to the team member they are not meeting expectations. Be specific about where performance is falling short. - Provide an opportunity for the team member to improve their performance. - - ****** Coaching conversation BEFORE @@ -3424,15 +961,12 @@ AFTER - Follow up with an email to the employee outlining progress and summarizing discussion point - Document feedback regularly - - ****** Individual Dev Template - short-term goals - long-term carreer - *** 2023-03-30 Thursday -**** MEETING weekly :work:meeting: +**** MEETING weekly :work:meeting: :LOGBOOK: CLOCK: [2023-03-30 Thu 17:01]--[2023-04-05 Wed 18:37] => 145:36 :END: @@ -3443,3 +977,478 @@ CLOCK: [2023-03-30 Thu 17:01]--[2023-04-05 Wed 18:37] => 145:36 - Work on configs - Entitlement brainstorm - Lot of XDR beta-flag requests +** 2023-W14 +*** 2023-04-07 Friday +**** MEETING Weekly meeting :work:meeting: +:LOGBOOK: +CLOCK: [2023-04-07 Fri 16:28]--[2023-04-07 Fri 16:30] => 0:02 +:END: +[2023-04-07 Fri 16:28] +***** Agenda (to discuss about) +***** Notes +***** Actions +** 2023-W16 +*** 2023-04-18 Tuesday +**** DONE Créer issue pour la route de description des roles :work: +SCHEDULED: <2023-04-18 Tue> +[2023-04-18 Tue 16:41] +**** MEETING RBAC Weekly Feature Sync :work:meeting: +:LOGBOOK: +CLOCK: [2023-04-18 Tue 16:01]--[2023-04-18 Tue 16:40] => 0:39 +:END: +[2023-04-18 Tue 16:01] + +- Name from "admin" to "Administrator" +- Name from "user" to "Incident Responder" +- new role "sat" named "Security Analyst" +*** 2023-04-19 Wednesday +**** DONE Create the SSE (0 Trust) scripts :work: +SCHEDULED: <2023-04-21 Fri 10:00> +:LOGBOOK: +CLOCK: [2023-04-21 Fri 09:42]--[2023-04-21 Fri 19:46] => 10:04 +:END: +[2023-04-19 Wed 20:01] +**** MEETING API Design Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2023-04-19 Wed 18:30]--[2023-04-20 Thu 16:26] => 21:56 +:END: +[2023-04-19 Wed 18:30] +***** Confs +Create project board about configurations. +***** Entitlements + +PIAM Entitlements: + +#+begin_src clojure +[{:entitlement-name "tier" + :value "essential" + :quantity 4000 + :created-at ,,,} + {:entitlement-name "extra-data-retention" + :quantity 90 + :created-at ,,,}] +#+end_src + +Entitlement ids, + +In the config + +#+begin_src clojure +{:free {,,,} + :essential {:allowed-modules [?] + :apps [:sxo :di :csc :sca :ssx] + :additional-scopes [,,,] + :data-retention-in-GB 200 + :rate-limits-per-hour 8000 + ,,,} + :advantage {:allowed-modules [?] + :apps [:sxo :di :csc :sca :ssx] + :additional-scopes [,,,] + :data-retention-in-GB 1000 + :rate-limits-per-hour 8000 + ,,,} + :premier {:allowed-modules [?] + :apps [:sxo :di :csc :sca :ssx] + :additional-scopes [,,,] + :data-retention-in-GB 2000 + :rate-limits-per-hour 8000 + ,,,}} +#+end_src + +An Entitlements data-store. + +#+begin_src clojure +{:id 0001 + :org-id 0001 + :created-at ,,, + :entitlement {:tier :premier + :seat-count 4000} + :entitlement-capabilities-snapshot {:allowed-modules [?] + :apps [:sxo :di :csc :sca :ssx] + :additional-scopes [,,,] + :data-retention-in-GB 2000 + :rate-limits-per-hour 8000 + ,,,}} + +{:id 0002 + :org-id 0001 + :created-at ,,, + :entitlement {:extra-data-retention-in-GB 90} } +#+end_src + +FOR org 0001 +#+begin_src clojure +{:summary {:tier :premier + :allowed-modules [?] + :apps [:sxo :di :csc :sca :ssx] + :data-retention-in-GB 2090 ;; <---- 2000 + 90 + :rate-limits-per-hour 8000 + ,,,} + :history [{:id 0001 :org-id 0001 + :created-at ,,, + :entitlement-view {:allowed-modules [?] + :apps [:sxo :di :csc :sca :ssx] + :data-retention-in-GB 2000 + :rate-limits-per-hour 8000 + ,,,}} + {:id 0002 :org-id 0001 + :created-at ,,, + :entitlement-view {:data-retention-in-GB 200}}]}} +#+end_src +***** SSE (0-Trust) + +Free Entitlement + +apps: Secure Client and Device Insight. + +Write the doc with an example. + +1.a Prior change the scopes required for =POST /iroh/provisioning/platform/org= +1.b Prior change the scopes required for =POST /iroh/provisioning/platform/user= + +2. Create a client with that scope + => get a client-id/client-secret + +3. Write a script (python/bash/maybe HTML+JS): + input: user-email/user-name/org-name/org-address etc… + 1. get the JWT from client-id/client-secret + 2. create the ORG + 3. create the User +****** Think about onboarding + +Onboard only DI and Secure Client +*** 2023-04-20 Thursday +**** DONE Create todo list for work :work: +SCHEDULED: <2023-04-28 Fri> +[2023-04-20 Thu 16:30] +1. prepare 1-1 tasks +2. select to make a iroh-auth call to prevent repeat myself (better group feeling) +**** MEETING RBAC UI meeting :work:meeting: +:LOGBOOK: +CLOCK: [2023-04-20 Thu 16:26]--[2023-04-20 Thu 17:40] => 1:14 +:END: +[2023-04-20 Thu 16:26] +***** Agenda +***** Notes +***** Actions +** 2023-W18 +*** 2023-05-02 Tuesday +**** DONE Prepare Quaterly Meeting! [[https://www.cisco.com/c/dam/r/team-development/performance/assets/Guide_to_Quarterly_Development_Discussions-for_Team_Leaders.pdf][quarterly pdf]] :work: +SCHEDULED: <2023-05-03 Wed 15:00> +[2023-05-02 Tue 17:37] +**** DONE [#7835] Create and Estimate all tasks related to [[https://github.com/advthreat/iroh/issues/7835]] :work: +SCHEDULED: <2023-05-03 Wed 11:30> +[2023-05-02 Tue 17:36] +**** MEETING Epic PIAM :work:meeting: +[2023-05-02 Tue 15:30] +**** MEETING Weekly lead :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-02 Tue 15:04]--[2023-05-02 Tue 16:51] => 1:47 +:END: +[2023-05-02 Tue 15:04] +***** Agenda (to discuss about) +***** Notes +@GB: travaille sur la nouvelle API de l'incident manager. +***** Actions +**** DONE Prepare Quarterly development :work: +SCHEDULED: <2023-05-02 Tue 17:00> DEADLINE: <2023-05-05 Fri 12:00> +[2023-05-02 Tue 14:44] +**** DONE Add an XDR beta flag to an Org :work: +:LOGBOOK: +CLOCK: [2023-05-02 Tue 14:34]--[2023-05-02 Tue 14:37] => 0:03 +:END: +[2023-05-02 Tue 14:34] +**** DONE Epic Provisioning :work: +DEADLINE: <2023-05-02 Tue 15:30> SCHEDULED: <2023-05-02 Tue> +[2023-05-02 Tue 12:40] +**** DONE Weekly Leads :work: +SCHEDULED: <2023-05-02 Tue 15:00> +[2023-05-02 Tue 12:40] +**** DONE Review O's PR about services :work: +DEADLINE: <2023-05-03 Wed 15:00> SCHEDULED: <2023-05-02 Tue> +:LOGBOOK: +CLOCK: [2023-05-03 Wed 17:33]--[2023-05-04 Thu 09:28] => 15:55 +:END: +[2023-05-02 Tue 10:41] +**** DONE Discuss with Wanderson about short-token strategy :work: +DEADLINE: <2023-05-02 Tue 14:40> SCHEDULED: <2023-05-02 Tue> +[2023-05-02 Tue 10:41] +*** 2023-05-03 Wednesday +**** DONE Election CSE :work: +SCHEDULED: <2023-05-03 Wed 14:00> +[2023-05-03 Wed 10:45] +**** DONE API Design Meeting :work: +SCHEDULED: <2023-05-03 Wed 18:30> +[2023-05-03 Wed 10:29] +**** DONE Ajouter les beta flags [[webexteams://im?space=d6d28420-c403-11ed-8526-0db030ef0b12][beta-room]] :work: +SCHEDULED: <2023-05-03 Wed 11:10> +[2023-05-03 Wed 10:19] +**** DONE Répondre à Paul [[webexteams://im?space=7e5c4ac0-b232-11ed-8863-ef048e50358a][room]] :work: +SCHEDULED: <2023-05-03 Wed 11:00> [2023-05-03 Wed 10:17] +*** 2023-05-04 Thursday +**** MEETING Weekly IROH :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-04 Thu 17:01]--[2023-05-04 Thu 17:59] => 0:58 +:END: +[2023-05-04 Thu 17:21] +***** Agenda (to discuss about) +***** Notes +***** Actions +**** DONE IROH Weekly :work: +SCHEDULED: <2023-05-04 Thu 17:00> [2023-05-04 Thu 11:36] +- Next week Response API in IROH with UI +- Problem with backfill for Jon +**** DONE QDD Olivier :work: +SCHEDULED: <2023-05-04 Thu 15:35> +[2023-05-04 Thu 11:35] +**** DONE QDD Wanderson :work: +SCHEDULED: <2023-05-04 Thu 14:35> +[2023-05-04 Thu 11:35] +**** IN-PROGRESS Personal QDD FY23Q3 :work: +:LOGBOOK: +CLOCK: [2023-05-04 Thu 09:28]--[2023-05-04 Thu 09:59] => 0:31 +:END: +[2023-05-04 Thu 09:28] +***** Results +****** Accomplishments +Accomplishments: +- Added support for AND/OR queries in tk-store. Should help +- PIAM (Provisioning / Entitlement start) +- Free Tier Provisioning +- XDR Flags via scopes +****** Improvements/opportunities for development: +- Work closer to PIAM +- Entitlement will be a nice beast +***** Principles & Behaviors +****** Accomplishments +- Advocate (only positive XDR feedback to the team) +- Customer value (AND/OR queries) +- Learn (clojure in scripts) +- Team for results: engaged team for iroh config issue +****** Improvements/opportunities for development: +***** Team Impact +****** Accomplishments +- admin-clj scripts should be helpful +- IROH default config should help ops +- PIAM +****** Improvements/opportunities for development: +*** 2023-05-05 Friday +**** DONE Change the scope for feature-flag API to use cisco/tac :work: +SCHEDULED: <2023-05-09 Tue 10:00> +[2023-05-05 Fri 22:41] +**** DONE IMPORTANT QDD Returns Actions :work: +SCHEDULED: <2023-05-11 Thu 10:00> +[2023-05-05 Fri 16:24] + +Both of you are tagged with not enough implication. + +- Lack of visibility! + - Webex support ! + - Webex implication in external discussions with UI, PO, PMs, etc… + - Everyday messages + +** 2023-W19 +*** 2023-05-10 Wednesday +**** IN-PROGRESS Ecrire un kudos pour la team. :work: +:LOGBOOK: +CLOCK: [2023-05-10 Wed 16:13]--[2023-05-10 Wed 16:38] => 0:25 +:END: +[2023-05-10 Wed 16:13] + +Thanks Wanderson and Olivier for your dedication. +You prepared the RBAC work for the next quarter so most backend work is already done. + +Olivier you managed to update and refactor all the IROH-Auth code to introduce +new roles everywhere in the code. +You also improved the work so now it is possible to launch specialized IROH nodes. +**** DONE Merge [[https://github.com/advthreat/iroh/pull/7857][7857]] :work: +SCHEDULED: <2023-05-10 Wed> +[2023-05-10 Wed 12:04] +**** DONE Prepare some kudos messages for your teams. :work: +SCHEDULED: <2023-05-10 Wed 17:00> +:LOGBOOK: +CLOCK: [2023-05-10 Wed 16:38]--[2023-05-10 Wed 17:38] => 1:00 +:END: +[2023-05-10 Wed 10:41] +**** TODO Fill Talent Assessments in workday :work: +SCHEDULED: <2023-05-24 Wed 15:40> DEADLINE: <2023-05-26 Fri> +[2023-05-10 Wed 10:33] +**** DONE API Design Meeting :work: +SCHEDULED: <2023-05-10 Wed 19:00> +[2023-05-10 Wed 09:51] +**** DONE RSA Celebration :work: +SCHEDULED: <2023-05-10 Wed 18:00> +[2023-05-10 Wed 09:50] +**** DONE Check with Hissan who to contact for Provisioning bug :work: +SCHEDULED: <2023-05-10 Wed 16:20> +[2023-05-10 Wed 09:48] +**** DONE Propose options for FF in [[webexteams://im?space=93aefba0-e28c-11ec-bfd4-93d97d332464][XDR RBAC]] :work: +SCHEDULED: <2023-05-10 Wed 16:00> +[2023-05-10 Wed 09:47] +**** DONE Add Jeffrey Zankowits to the XDR beta :work: +SCHEDULED: <2023-05-10 Wed 16:00> +[2023-05-10 Wed 09:46] +*** 2023-05-11 Thursday +**** MEETING 1-1 Olivier :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-11 Thu 15:03]--[2023-05-12 Fri 08:49] => 17:46 +:END: +[2023-05-11 Thu 15:03] +***** Agenda (to discuss about) +***** Notes +***** Actions +**** DONE Performance Training :work: +SCHEDULED: <2023-05-11 Thu 17:00> +[2023-05-11 Thu 10:10] +**** DONE Weekly Team :work: +SCHEDULED: <2023-05-11 Thu 17:00> +[2023-05-11 Thu 10:10] +**** DONE 1-1 Olivier :work: +SCHEDULED: <2023-05-11 Thu 15:05> +[2023-05-11 Thu 10:09] +**** DONE 1-1 Wanderson :work: +SCHEDULED: <2023-05-11 Thu 14:35> +[2023-05-11 Thu 10:09] +*** 2023-05-12 Friday +**** MEETING Orbital :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-12 Fri 17:01]--[2023-05-12 Fri 17:39] => 0:38 +:END: +[2023-05-12 Fri 17:01] +***** Agenda (to discuss about) +***** Notes +Purpose EOL of SecureX. +Starting after GA. +Only supporting existing subscribers. + +User management and onboarding. + +Ask Eduardo for use cases: + +@Eduardo: + +After GA, advantage and premier. +Access Orbital without. + +Flexibility on how to use Orbital. + +***** Actions + +Consider all use cases and review them with Engineering. +**** MEETING PenTest with Chris Duane :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-12 Fri 15:45]--[2023-05-12 Fri 16:19] => 0:34 +:END: +[2023-05-12 Fri 15:45] +***** Agenda (to discuss about) +***** Notes +***** Actions +** 2023-W20 +*** 2023-05-15 Monday +**** MEETING Q1 priority :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-15 Mon 16:52]--[2023-05-15 Mon 17:52] => 1:00 +:END: +[2023-05-15 Mon 16:52] +***** Notes + +Access Control to allow for feature restriction per monetization option. + +****** Q1FY24 + +- ACL additional roles and more granular. +- Additional Integrations + - Data Loss Prevention + - IDM solutions + - ISE + - CNAPP solutions + - App Discovery / Insights / AppSec solutions + - Kenna +- Localization: Language Support and internationalization +- Assess existing integrations for relevancy and functionality + - convert existing into data warehouse +- Assess existing Orchestration content for relevancy and functionality; prune + and enhance +- Usage Reporting to support Common Platform display requirements and monetization + +****** Q2FY24 + +- Continue convert integrations +- Continue SCA and XDR convergence +- Ensure continuous analysis of generated incidents against existing data +- Ability for other TD&R solution to poll the XDR data warehouse for conviction +- Incorporate vuln, etc…... into event analysis +- Email security detection enhancement, insight identity potential + +****** Q3FY24 + +- Continue SCA and XDR convergence +- Multi-tenancy for Managed Detection and Response +- OS event logs (windows/linux) +- continue +- telemetry +- AI for playbook + +****** Q4FY24 + +- CSC Management +- Proxying communication traffic and on - premises solutions telemetry +- Mult- tenancy for Managed Detection and Response +- Role - Based Access Control +- Notification Options Improvements +- Common Integrations management +- Data Enhancement for enhanced correlation across Cisco data source +****** Potentially related items + +- ACL, Monetization restriction, and multi-tenancy for MDR +****** FY24 Dependencies for other components' roadmap + +- Secure Client Management +- Proxying comm +- Multi tenancy +- Role +- Notification +- Common Integrations management +- Data Enhancements for enhanced correlation across Cisco data sources + +**** DONE Q1 Priorities :work: +SCHEDULED: <2023-05-15 Mon 16:00> +[2023-05-15 Mon 10:36] + +*** 2023-05-16 Tuesday +**** DONE Cisco Performance Training for Leaders :work: +SCHEDULED: <2023-05-16 Tue 17:00> +[2023-05-16 Tue 15:34] +*** 2023-05-17 Wednesday +**** MEETING RBAC Weekly :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-17 Wed 16:31]--[2023-05-17 Wed 17:15] => 0:44 +:END: +[2023-05-17 Wed 16:31] +- invitation workflow tickets +- revocation endpoint on role change +**** MEETING SCA Provisioning :work:meeting: +:LOGBOOK: +CLOCK: [2023-05-17 Wed 15:58]--[2023-05-17 Wed 16:31] => 0:33 +:END: +[2023-05-17 Wed 15:58] +People: Yann Esposito, Brandon Thacker, Jeff Markey, Michael Schultz, Paul Cichonski +***** Agenda (to discuss about) +- questions for IROH +***** Notes +@Jeff: number of tickets, understanding high level +@Paul: no push entitlements +@Michael: we'll do pull first +@Paul: no requirement to enforce requirements for GA +***** Actions +- [optional] Webhooks for update entitlements? + +**** MEETING API Design Meeting :work: +SCHEDULED: <2023-05-17 Wed 18:30> +[2023-05-17 Wed 11:27] +**** MEETING RBAC Weekly :work: +SCHEDULED: <2023-05-17 Wed 16:30> +[2023-05-17 Wed 11:24] +**** MEETING SCA/IROH design discussions :work: +SCHEDULED: <2023-05-17 Wed 16:00> +[2023-05-17 Wed 11:22] diff --git a/tracker.org_archive b/tracker.org_archive index c47a4f9e..740835c1 100644 --- a/tracker.org_archive +++ b/tracker.org_archive @@ -317,3 +317,2454 @@ CLOCK: [2020-05-04 Mon 18:24]--[2020-05-04 Mon 19:37] => 1:13 :END: [2020-05-04 Mon 18:24] [[file:~/.org/tracker.org::*Craig ask for list of scopes][Craig ask for list of scopes]] + +* 2022 +:PROPERTIES: +:ARCHIVE_TIME: 2023-05-02 Tue 10:40 +:ARCHIVE_FILE: ~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org +:ARCHIVE_CATEGORY: tracker +:END: +** 2022-W05 +*** 2022-02-03 Thursday +**** DONE activate logout issue :work: +:LOGBOOK: +CLOCK: [2022-02-03 Thu 17:17]--[2022-02-03 Thu 19:02] => 1:45 +:END: +[2022-02-03 Thu 17:17] +- ref :: [[id:7fa185e4-9866-4ce8-ab60-d62d8c80b041][Mode d'évaluation au paradis]] + +For https://github.com/advthreat/iroh/issues/6250 + +The fix (https://github.com/advthreat/iroh/pull/6194) has been reverted +(https://github.com/advthreat/iroh/pull/6246) because SecureX and CTR work +differently. + +GLaDOS and CTR must find a common solution, for now, we are blocked. +I think the technical solution to return a 401 when the org change from +unactivated to activated was proposed by @alucigna but I couldn't find the link +to the discussion. + +cc: @alucigna @DarMontou @sabrinamokerji +*** 2022-02-04 Friday +**** MEETING Weekly Kirill Presentation :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-04 Fri 17:04]--[2022-02-04 Fri 20:24] => 3:20 +:END: +[2022-02-04 Fri 17:04] +- ref :: +***** Notes +**** MEETING Simplify Registration :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-04 Fri 16:37]--[2022-02-04 Fri 17:04] => 0:27 +:END: +[2022-02-04 Fri 16:37] +- ref :: https://cisco-my.sharepoint.com/:w:/p/prdass/EXwUr_HCwOVNte7KFcFzUeABxvTZiL8vZTgd8-5WInt4hA?e=4%3an55ogS&at=9 + +Add your status in + +https://cisco-my.sharepoint.com/:w:/p/prdass/EXwUr_HCwOVNte7KFcFzUeABxvTZiL8vZTgd8-5WInt4hA?e=4%3an55ogS&at=9 +***** Agenda (to discuss about) +***** Notes +***** Actions +** 2022-W06 +*** 2022-02-07 Monday +**** REVIEW Github tour :work:review: +:LOGBOOK: +CLOCK: [2022-02-07 Mon 10:54]--[2022-02-08 Tue 09:49] => 22:55 +:END: +[2022-02-07 Mon 10:54] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Webex tour][Webex tour]] +**** CHAT Webex tour :work:chat: +:LOGBOOK: +CLOCK: [2022-02-07 Mon 10:33]--[2022-02-07 Mon 10:54] => 0:21 +:END: +[2022-02-07 Mon 10:53] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Check Customer bug with tiles.][Check Customer bug with tiles.]] +**** DONE Check Customer bug with tiles. :work: +:LOGBOOK: +CLOCK: [2022-02-07 Mon 09:52]--[2022-02-07 Mon 10:33] => 0:41 +:END: +[2022-02-07 Mon 10:52] +- ref :: https://github.com/advthreat/response/issues/1076 + +Confirmed this is UI for now. +*** 2022-02-08 Tuesday +**** CHAT random rambling :work:chat: +:LOGBOOK: +CLOCK: [2022-02-08 Tue 10:47]--[2022-02-08 Tue 17:32] => 6:45 +:END: +[2022-02-08 Tue 10:47] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Email tour][Email tour]] +**** EMAIL Email tour :work:email: +:LOGBOOK: +CLOCK: [2022-02-08 Tue 10:13]--[2022-02-08 Tue 10:47] => 0:34 +:END: +[2022-02-08 Tue 10:13] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Replace SSE IDB with SXSO][Replace SSE IDB with SXSO]] +**** CHAT Webex tour :work:chat: +:LOGBOOK: +CLOCK: [2022-02-08 Tue 09:49]--[2022-02-08 Tue 10:13] => 0:24 +:END: +[2022-02-08 Tue 09:49] +***** IROH +Remark about deps in IROH for Ag (pb with the formatting-stack and clojurescript) +***** IROH-Social +***** OPs General +***** DI Integration +***** Replace SSE IDB with SXSO +Jason Chamber links: + +- A-Ha link (Epic) https://ciscosecurity.aha.io/epics/SECUREX-E-471 +- A-Ha link (Feature) https://ciscosecurity.aha.io/features/SECUREX-557 +- Jira link https://jira-eng-rtp3.cisco.com/jira/projects/SSO/issues/SSO-458?filter=myopenissues + +Demand A-HA access +***** SecureX + ThreatGrid + +Follow 1-click deactivation discussion. +*** 2022-02-09 Wednesday +**** MEETING API Design Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-09 Wed 17:30]--[2022-02-09 Wed 18:16] => 0:46 +:END: +[2022-02-09 Wed 17:30] +- ref :: +***** Agenda (to discuss about) +***** Notes +***** Actions +**** MEETING Sync on the IROH Team capacity :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-09 Wed 15:26]--[2022-02-09 Wed 17:30] => 2:04 +:END: +[2022-02-09 Wed 15:26] + +- participants :: Prerna +***** notes +*** 2022-02-10 Thursday +**** MEETING Town Hall Namrata :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-10 Thu 20:02]--[2022-02-10 Fri 21:09] => 1:07 +:END: +[2022-02-10 Thu 20:02] + +Really excited for our session today. +Really candid feedback from you. +Every Quarter. + +What we are working on and why and where we're headed. +***** Intro + +- Business Result (Martin) +- Product Strategy (demos) +- Product Demonstrations + + +Leave a few minutes at the end for some Q&A. +***** Business update & strategy discussion +****** Made a sell by showing SecureX +****** XDR FY23 (top priority for Cisco) +****** 10k customers +****** Improve Renewals Rates +****** Customer with EndPoint + Umbrella lot of usage. +****** Big Users use SecureX more than small ones +**** MEETING Farewell Alex :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-10 Thu 19:01]--[2022-02-10 Thu 20:02] => 1:01 +:END: +[2022-02-10 Thu 19:01] + +Expertise and broad culture. + +You have always been extremely helpful. +Your insights were essential. +Without them I wouldn't have been able to grasp the scope about what we are building. + +And thanks for helping me remember about Gundam and all the first times. +**** MEETING Weekly Team Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-10 Thu 17:00]--[2022-02-10 Thu 19:01] => 2:01 +:END: +[2022-02-10 Thu 17:00] + +Waiting + +Discussion about updating doc in the response repository. +***** Ag +- Module Type Patch UI +***** Ambrose +- put something in TEST might break something +***** G2 +Description of lot of work for Q3, etc… +***** Irina +- soft delete +***** Kirill +Improve timeouts. Started a work around =pmap=. +***** Mark + +OIDC with AO. +***** Matt + +Addressing security issue discovered by the Engine team. +***** Olivier + +Emails of users in lower-case. +Done in the code. +Rollback system. +And maintenance service that could update the stores. + +Adding a new search function. +***** Rob + +Support all modules that have a module-type in App Links. +Integrating SXSO into that. +SecureX endpoint. +***** Wanderson + +Simplification Registration FT + +Adding a new session to a new frontend. +***** Yann + +- customer session to fix a bug +- IDB decommission must take the time, probably ask Matt some help. +- Registration Simplification + - Wanderson work make it possible to finally have an IROH-Auth Application Session. + - Olivier is working on improving our textual search services and API. + - Reduction of the scope should make it possible to finish for Q3 + - The current work will make it a lot easier to provide a better UI to + manage your multiple orgs (like hide/disable/rename etc…) +- (background) fix the issue related to refresh token state in the DB, most + of the work is now done for the new services, just need to populate the + data during OAuth2 Code flow. +***** Guillaume + +Removed the arrow, and now, design with OIDC to propose trial. +*** 2022-02-11 Friday +**** MEETING Registration Simlification :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-11 Fri 16:31]--[2022-02-11 Fri 17:48] => 1:17 +:END: +[2022-02-11 Fri 16:31] +- ref :: +***** Agenda (to discuss about) +***** Notes +***** Actions +**** CHAT Olivier Question like-match rule :work:chat: +:LOGBOOK: +CLOCK: [2022-02-11 Fri 15:19]--[2022-02-11 Fri 16:31] => 1:12 +:END: +[2022-02-11 Fri 15:19] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Security Training][Security Training]] +**** DONE Security Training :work: +:LOGBOOK: +CLOCK: [2022-02-11 Fri 11:24]--[2022-02-11 Fri 11:50] => 0:26 +:END: +[2022-02-11 Fri 11:24] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*github notifications morning tour][github notifications morning tour]] +**** DISC github notifications morning tour :work:discussion: +:LOGBOOK: +CLOCK: [2022-02-11 Fri 10:15]--[2022-02-11 Fri 11:23] => 1:08 +:END: +[2022-02-11 Fri 10:15] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Webex morning tour][Webex morning tour]] +**** CHAT Webex morning tour :work:chat: +:LOGBOOK: +CLOCK: [2022-02-11 Fri 10:00]--[2022-02-11 Fri 10:15] => 0:15 +:END: +[2022-02-11 Fri 10:14] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/tracker.org::*Morning Email Tour][Morning Email Tour]] +**** EMAIL Morning Email Tour :work:email: +:LOGBOOK: +CLOCK: [2022-02-11 Fri 10:11]--[2022-02-11 Fri 10:14] => 0:03 +:END: +[2022-02-11 Fri 10:11] +** 2022-W07 +*** 2022-02-14 Monday +**** MEETING Simplify Registration :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-14 Mon 16:30]--[2022-02-14 Mon 17:19] => 0:49 +:END: +[2022-02-14 Mon 16:30] +*** 2022-02-17 Thursday +**** MEETING Weekly Team Meetings :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-17 Thu 17:00]--[2022-02-17 Thu 20:45] => 3:45 +:END: +[2022-02-17 Thu 17:00] +- ref :: +***** Ag + +index page is always tk-server +*** 2022-02-18 Friday +**** DONE Fix module-type :work: +:LOGBOOK: +CLOCK: [2022-02-18 Fri 12:21]--[2022-02-18 Fri 15:51] => 3:30 +:END: +[2022-02-18 Fri 12:21] +- ref :: [[file:~/dev/iroh/lib/iroh-core/test/iroh_core/test_helpers_test.clj::(deftest is-similar?-test]] + + +APJC SCA + +#+begin_src js +{ + "description": "Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) improves security and incident response across the distributed network, from the private network and branch office to the public cloud. This solution addresses the need for digital businesses to quickly identify threats posed by their network devices and cloud resources, and to do so with minimal management, oversight, and security manpower.\n\nThe network is evolving. IT resources are frequently being moved into the cloud. At the same time, the number of connected devices on the private network is increasing dramatically. Security personnel are struggling just to know what entities are operating in their environment, let alone whether they pose a threat to the organization.\n\nSecure Cloud Analytics addresses this problem by providing comprehensive visibility and high-precision alerts with low noise, without the use of agents. Organizations can accurately detect threats in real time, regardless of whether an attack is taking place on the network, in the cloud, or across both environments. Secure Cloud Analytics is a cloud-based, Software-as-a-Service (SaaS)-delivered solution. It detects ransomware and other malware, data exfiltration, network vulnerabilities, and role changes that indicate compromise.\n\nAlso, developer teams are continuously adopting new and more dynamic compute environments like serverless and containers such as AWS Lambda and Kubernetes. Secure Cloud Analytics provides visibility into these environments as well, so that organizations don’t have to compromise on security on their path to digital transformation.", + "properties": "2MGqPrzLNIrfFeFK/UUzdpA98pKEUHLvd6d7+snqeh1lXokV9n6J8lKeAwp7tRdCSHT+crPhmilCkfBXkvfT+8NLp/rq+4TD32EkYqcYNngmgsAji/UJ6NuChgJnPd+FwwembDj2iPh7vFXHnGmLKlgOkweQzokI2CUROgbTw2JNruDhL47ws3LhMl2LRqlbJQP83yeGMmwjV0mjFSth/w25D1oIHR+mnYH7mrcKUH0XT/6xQzqJ3l6URkbun6wvzLycJhqtOtqtJSdB3cAfYlhfkpCY8ZXt9IO8/MyOeGJ6Qf2iz9gXIFAgtNBBz9bkZAPk4Uv0nei39F4lwFv9lmUdVGuHIHtHJKf4sn/qB40=", + "capabilities": [ + { + "id": "health", + "description": "Healthcheck" + }, + { + "id": "deliberate", + "description": "Deliberation" + }, + { + "id": "observe", + "description": "Enrichments" + }, + { + "id": "refer", + "description": "Reference links" + }, + { + "id": "tiles", + "description": "Dashboard Tiles" + } + ], + "app_link_meta": { + "url": "https://portal-anz.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex", + "meta": { + "x_okta_bookmark_id": "0oa1idxamsrOKeFuN357" + }, + "title": "Stealthwatch Cloud (ANZ)" + }, + "tips": "If the Secure Cloud Analytics (formerly Stealthwatch Cloud) integration module displays a **Bidirectional** icon on the module panel, it indicates that the integration was enabled in Secure Cloud Analytics or SecureX. \n\nFor information on the Secure Cloud Analytics integration with SecureX, see [Secure Cloud Analytics SecureX integration Guide](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/SecureX/SecureX_Integration_Guide_DV_2_0.pdf).", + "logo": "data:image/svg+xml;base64,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", + "org_id": "4f169b08-bb0d-4e97-a358-8fd3fd819066", + "configuration_spec": [ + { + "key": "token", + "type": "api_key", + "label": "Authorization Token", + "required": true + } + ], + "short_description": "Gain the visibility and continuous threat detection needed to secure your public cloud, private network, and hybrid environments.", + "title": "Secure Cloud Analytics", + "external_references": [ + { + "link": "https://info.securexanalytics.com/SecureX-Trial-Request.html", + "label": "Free Trial" + }, + { + "link": "https://www.cisco.com/c/en/us/products/security/stealthwatch-cloud/index.html", + "label": "Product Information" + }, + { + "link": "https://www.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-stealthwatch-cloud-privacy-data-sheet.pdf", + "label": "Privacy Policy" + }, + { + "link": "https://portal-anz.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex%3Fstatus%3Dtrue", + "class": "activation", + "label": "Activate" + } + ], + "updated_at": "2022-02-18T10:17:14.710Z", + "id": "f31e83d1-48e7-4384-9c6a-64a5c9cee05b", + "record": "relay-module.module/RelayModule", + "user_id": "207347d9-65c0-402b-88ce-ef028989e95f", + "client_id": "iroh-ui", + "default_name": "Secure Cloud Analytics", + "flags": [ + "default" + ], + "enabled": true, + "visibility": "global", + "created_at": "2020-05-15T17:45:46.904Z", + "former_title": "Stealthwatch Cloud" +} +#+end_src + +NAM: + + +#+begin_src js +{ + "description": "Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) improves security and incident response across the distributed network, from the private network and branch office to the public cloud. This solution addresses the need for digital businesses to quickly identify threats posed by their network devices and cloud resources, and to do so with minimal management, oversight, and security manpower.\n\nThe network is evolving. IT resources are frequently being moved into the cloud. At the same time, the number of connected devices on the private network is increasing dramatically. Security personnel are struggling just to know what entities are operating in their environment, let alone whether they pose a threat to the organization.\n\nSecure Cloud Analytics addresses this problem by providing comprehensive visibility and high-precision alerts with low noise, without the use of agents. Organizations can accurately detect threats in real time, regardless of whether an attack is taking place on the network, in the cloud, or across both environments. Secure Cloud Analytics is a cloud-based, Software-as-a-Service (SaaS)-delivered solution. It detects ransomware and other malware, data exfiltration, network vulnerabilities, and role changes that indicate compromise.\n\nAlso, developer teams are continuously adopting new and more dynamic compute environments like serverless and containers such as AWS Lambda and Kubernetes. Secure Cloud Analytics provides visibility into these environments as well, so that organizations don’t have to compromise on security on their path to digital transformation.", + "properties": "yUY5o15RUpAfB7Lk3RxosIJYx2JpDTaf4TkddVzepwSbz3A9m9b+/KyHxuiSH1SbTf6r5qk2SgaSKA8efk3pbDqL2RQC248eQoez0EI0GaAmnXnnhuEH91ZFtddwyQdvX+tUY+vxbHfdkES6rKP0hLWxMMZcYikD5ONBfNwak3kqlq0g07c52Gnx9Qgg5UOdzwBqTVb883tJZ+fRAFhYU7Hu7DNZDRDnccTOUFNJw84hmg7NEFMjK5Z48BG51qBgW50u/Wxv7+ceCUFUYrwbFzQLB/zbspQcFJtlUwZHZ7jl/VQbLT5QqJLthRnphAIGE/xIsEeCG66fZg1Ds60Vwp/c12ueYJVsVZyhHBIG0wk=", + "capabilities": [ + { + "id": "health", + "description": "Healthcheck" + }, + { + "id": "deliberate", + "description": "Deliberation" + }, + { + "id": "observe", + "description": "Enrichments" + }, + { + "id": "refer", + "description": "Reference links" + }, + { + "id": "tiles", + "description": "Dashboard Tiles" + } + ], + "app_link_meta": { + "url": "https://portal-staging.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex", + "meta": { + "x_okta_bookmark_id": "0oa1hyf3xtXD6Xqxg357" + }, + "title": "Stealthwatch Cloud (US)" + }, + "tips": "If the Secure Cloud Analytics (formerly Stealthwatch Cloud) integration module displays a **Bidirectional** icon on the module panel, it indicates that the integration was enabled in Secure Cloud Analytics or SecureX. \n\nFor information on the Secure Cloud Analytics integration with SecureX, see [Secure Cloud Analytics SecureX integration Guide](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/SecureX/SecureX_Integration_Guide_DV_2_0.pdf).", + "logo": "data:image/svg+xml;base64,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", + "org_id": "964a8c3b-9aef-4e1d-aadf-e2754004d230", + "configuration_spec": [ + { + "key": "token", + "type": "api_key", + "label": "Authorization Token", + "required": true + } + ], + "short_description": "Gain the visibility and continuous threat detection needed to secure your public cloud, private network, and hybrid environments.", + "title": "Secure Cloud Analytics", + "external_references": [ + { + "link": "https://info.securexanalytics.com/SecureX-Trial-Request.html", + "label": "Free Trial" + }, + { + "link": "https://www.cisco.com/c/en/us/products/security/stealthwatch-cloud/index.html", + "label": "Product Information" + }, + { + "link": "https://www.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-stealthwatch-cloud-privacy-data-sheet.pdf", + "label": "Privacy Policy" + } + ], + "updated_at": "2022-02-18T08:55:49.295Z", + "id": "b3874a82-1967-4f9c-a42a-47f1d61ab835", + "record": "relay-module.module/RelayModule", + "user_id": "dcffe020-1c6a-4d78-ba09-f21674a59c9c", + "client_id": "iroh-ui", + "default_name": "Secure Cloud Analytics", + "flags": [ + "default" + ], + "enabled": true, + "visibility": "global", + "created_at": "2020-05-15T17:38:39.788Z", + "former_title": "Stealthwatch Cloud" +} +#+end_src +EU + +#+begin_src js +{ + "description": "Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) improves security and incident response across the distributed network, from the private network and branch office to the public cloud. This solution addresses the need for digital businesses to quickly identify threats posed by their network devices and cloud resources, and to do so with minimal management, oversight, and security manpower.\n\nThe network is evolving. IT resources are frequently being moved into the cloud. At the same time, the number of connected devices on the private network is increasing dramatically. Security personnel are struggling just to know what entities are operating in their environment, let alone whether they pose a threat to the organization.\n\nSecure Cloud Analytics addresses this problem by providing comprehensive visibility and high-precision alerts with low noise, without the use of agents. Organizations can accurately detect threats in real time, regardless of whether an attack is taking place on the network, in the cloud, or across both environments. Secure Cloud Analytics is a cloud-based, Software-as-a-Service (SaaS)-delivered solution. It detects ransomware and other malware, data exfiltration, network vulnerabilities, and role changes that indicate compromise.\n\nAlso, developer teams are continuously adopting new and more dynamic compute environments like serverless and containers such as AWS Lambda and Kubernetes. Secure Cloud Analytics provides visibility into these environments as well, so that organizations don’t have to compromise on security on their path to digital transformation.", + "properties": "Y+2BcDiVdoyWy7JxQwcOXuCG+S/JH98ncFxmwhz27utYxlhrSNQIHGTGGifUZx4Yw2GQe5oy2051VjsrcTrXVCmXAEVpU7NVqLwjmgT01zoDkE1o2lO3bMQbLTZLkNnUKAnaef/4UFqlcorJ0CGfhQPvWZG6OnAPx5PLzbS0TjsRfSGpVSRPeW+aANy+CEXul1l6FKzHohgTelMZuYNGYncHEa+eqtpSVvFl5HITj7rx7NMPWWeRaqN3Ljnbs3l26picBEvRfPzXeAT26gh0gdieWYtB2xnUU8gFUx4MNcqyMVNwGYbtLQ150uQYbOxuoiVZ41ujCWgt0Eksa/g0MkLg+QC5QBHgquwpVdMDDSE=", + "capabilities": [ + { + "id": "health", + "description": "Healthcheck" + }, + { + "id": "deliberate", + "description": "Deliberation" + }, + { + "id": "observe", + "description": "Enrichments" + }, + { + "id": "refer", + "description": "Reference links" + }, + { + "id": "tiles", + "description": "Dashboard Tiles" + } + ], + "app_link_meta": { + "url": "https://portal-eu.obsrvbl.com/auth/?next=%2Fv2%2F%23%2Fsettings%2Fintegrations%2Fsecurex", + "meta": { + "x_okta_bookmark_id": "0oa1idwgt8itDu9jQ357" + }, + "title": "Stealthwatch Cloud (EU)" + }, + "tips": "If the Secure Cloud Analytics (formerly Stealthwatch Cloud) integration module displays a **Bidirectional** icon on the module panel, it indicates that the integration was enabled in Secure Cloud Analytics or SecureX. \n\nFor information on the Secure Cloud Analytics integration with SecureX, see [Secure Cloud Analytics SecureX integration Guide](https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/SecureX/SecureX_Integration_Guide_DV_2_0.pdf).", + "logo": "data:image/svg+xml;base64,PHN2ZyBkYXRhLW5hbWU9IkxheWVyIDEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgdmlld0JveD0iMCAwIDM0LjEgMzIuMiI+PHBhdGggZmlsbD0iIzI3NGJhMCIgZD0iTTAgMGgzNC4xdjMyLjE2SDB6Ii8+PHBhdGggZD0iTTIyLjcgMTYuOGEzIDMgMCAwMC0zLTNoLS4xYTQuMyA0LjMgMCAwMC04LjEgMS41IDIuMyAyLjMgMCAwMC0yLjYgMS44LjkuOSAwIDAwLS4xLjUgMi4yIDIuMiAwIDAwMi40IDIuMkgyMGEzIDMgMCAwMDIuNy0zeiIgZmlsbD0iI2ZmZiIvPjxwYXRoIGQ9Ik0yMC4zIDhhOC43IDguNyAwIDAwLTUuOC0yLjIgMTEuNyAxMS43IDAgMDAtNS4xIDEuNk0xMC4xIDIzLjZoMTMuM3M1LjctLjcgNS43LTYuM2E2LjUgNi41IDAgMDAtMi45LTUuNCIgZmlsbD0ibm9uZSIgc3Ryb2tlPSIjZmZmIiBzdHJva2UtbGluZWNhcD0icm91bmQiIHN0cm9rZS1taXRlcmxpbWl0PSIxMCIvPjxjaXJjbGUgY3g9IjIyLjciIGN5PSIxMC44IiByPSIxLjciIGZpbGw9IiNmZmYiLz48Y2lyY2xlIGN4PSI2LjMiIGN5PSIyMy42IiByPSIxLjgiIGZpbGw9IiNmZmYiLz48Y2lyY2xlIGN4PSI4IiBjeT0iOC43IiByPSIxLjQiIGZpbGw9Im5vbmUiIHN0cm9rZT0iI2ZmZiIgc3Ryb2tlLW1pdGVybGltaXQ9IjEwIi8+PC9zdmc+", + "org_id": "99c5cf95-7788-4ce1-906f-86811aa57752", + "configuration_spec": [ + { + "key": "token", + "type": "api_key", + "label": "Authorization Token", + "required": true + } + ], + "short_description": "Gain the visibility and continuous threat detection needed to secure your public cloud, private network, and hybrid environments.", + "title": "Secure Cloud Analytics", + "external_references": [ + { + "link": "https://info.securexanalytics.com/SecureX-Trial-Request.html", + "label": "Free Trial" + }, + { + "link": "https://www.cisco.com/c/en/us/products/security/stealthwatch-cloud/index.html", + "label": "Product Information" + }, + { + "link": "https://www.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-stealthwatch-cloud-privacy-data-sheet.pdf", + "label": "Privacy Policy" + } + ], + "updated_at": "2022-02-18T09:00:11.280Z", + "id": "7739968f-4259-49c2-8c14-21e569a11d1c", + "record": "relay-module.module/RelayModule", + "user_id": "be72933d-8e87-4430-8b33-870e3db35bce", + "client_id": "iroh-ui", + "default_name": "Secure Cloud Analytics", + "flags": [ + "default" + ], + "enabled": true, + "visibility": "global", + "created_at": "2020-05-15T17:44:34.285Z", + "former_title": "Stealthwatch Cloud" +} +#+end_src +** 2022-W08 +*** 2022-02-22 Tuesday +**** CANCELED SXO Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-02- Tue 18:00]--[2022-02-22 Tue 18:02] => 0:02 +:END: +[2022-02-22 Tue 18:00] +- ref :: +*** 2022-02-23 Wednesday +**** MEETING SXO Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-23 Wed 19:39]--[2022-02-23 Wed 21:09] => 1:30 +:END: +[2022-02-23 Wed 19:39] +- ref :: + +1. Tenant Provisioning +2. Create CTR Client +**** MEETING Ribbon SCI :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-23 Wed 19:23]--[2022-02-23 Wed 19:39] => 0:16 +:END: +[2022-02-23 Wed 19:23] +- ref :: + +- client-6ff982a1-cc5a-4121-8f8c-b0f5b08c8860 +- client-c4d3554b-452e-49e2-b76e-41458610adc1 + +Patched with availability everyone. +**** MEETING API Design :work:meeting: +:LOGBOOK: +CLOCK: [2022-02-23 Wed 17:33]--[2022-02-23 Wed 19:23] => 1:50 +:END: +[2022-02-23 Wed 17:33] + +Two subjects + +- Data Deletion +- Logs / debugging + +***** +**** DONE IDB Decomissioning :work: +:LOGBOOK: +CLOCK: [2022-02-23 Wed 14:48]--[2022-02-23 Wed 15:18] => 0:30 +:END: +[2022-02-23 Wed 14:48] + +Found in tenzin repository very old commit (ce43ddb) +The configs details are in: =saltstack/pillar/*/iroh/init.sls= +***** INT + +#+begin_src yaml + idps: + amp: + kind: saml + authorize_uri: https://auth.amp.cisco.com/auth/session/new + cert_path: /srv/iroh/resources/cert/amp_idp.cert + threatgrid: + kind: oidc + authorize_uri: https://int.threatgrid.com/oauth2/authorize + token_uri: https://int.threatgrid.com/api/v3/oauth/token + org_id_key: :tg_org + client_id: 884a152d-e2a2-4552-b56b-7618274ab988 + client_secret: | + -----BEGIN PGP MESSAGE----- + Version: GnuPG v1 + hQIMA84RaiSk55caAQ/+NXy974NKjfdujj01jODDqqIIp4QXdGH8pC4LcHDW9rwx + EE1XELuP+7eZ1+UA2+qhPwcT+kOCEJteXGJt00FoL4bjfOTHqV6Zjl+KySGGYsHw + LQRQhI+odKpakGmtnMD7Zjf14phfUTHKs4Zs6EjLP0rm5LMw+eo3PhQ4zNGfoF1G + W3S7J+dmjNc0ZEsgOStxAmQ5SZM6nIoOo8qJY5p8LujbAzPTGq1hKYVjxM2FnuoQ + SkoIA77z9twJpFMqr3TgOPI/IZqu8rAAVEeAZHRP0W4j4Wk/PetmG4mJrJT5hFqV + Z6iOChTL8t2lbSd/QkwoxD2cZzZlY4c3Pe2JqtdfffhaF7LXcOtHm8R2cv2kjEm3 + gdAw2EZucYZa2n78vxofXrLWayltFTzM9hmn616Yy3UtExOHv/ydj0xhLGEx+Woc + X0LS0La8ElNOMnp99x+9y1xmShlZMsRNOm5kjTFMtLry4K3QKTZLAzVa2835RV3e + Tb6T2tdkK5fIVpIQpv3E6meAmkFHWHl3rZw4qdPaPbDWctPDt8TxyX4LQ555ED2N + roCuBSWsu7Efz8s+oUgK3GleSj37O7kIyJq+GxOayyepU8D6WJqqh6TbeFQlyUBJ + YYrFxd+wUAEdeq4LoTxGrZp4jDopg9wVVdEmlcltJ79GbpOGf9uo0nyrlVRXDoHS + WwFPEYM+r1FWnWhrH+zbE3LwvVBMi8KluExN8KcilTnzhISrhR40J/HvEBXMM2DV + 7TnS+FyxWHu0vBzIg2y7DdGh4SYw7ru35wH9V8x6L449ffD6diMaXLGoBAU= + =0OIa + -----END PGP MESSAGE----- +#+end_src +***** TEST + +#+begin_src yaml + idps: + amp: + kind: saml + authorize_uri: https://auth.amp.cisco.com/auth/session/new + cert_path: /srv/iroh/resources/cert/amp_idp.cert + threatgrid: + kind: oidc + authorize_uri: https://test.threatgrid.com/oauth2/authorize + token_uri: https://test.threatgrid.com/api/v3/oauth/token + org_id_key: :tg_org + client_id: d1f5cbd2-610c-44b9-b5dd-92ecc7ef7f24 + client_secret: | + -----BEGIN PGP MESSAGE----- + Version: GnuPG v1 + hQIMA84RaiSk55caAQ//czS1KlsdqexkdpO7KizewEY5Wy2rBIT74FYJaJRPOh2k + YDTs1pxbu4SY/PWmyNVh97UAGVjwMAOEJvMaZt2fOA0EqHVwaPqe5xV1pS9eIAIf + JfmQyAzaCADaFvLpVwF7yuzJzUhrPq1JBbwssXh0YLnEOfEandspL6Tw2JunK67A + 9GfPiSRNPr90wflsOAObuxRqtThw6usQKDVh8r5lSTpfLN/3gyDX/BNwYOBIgY/D + TvTtX9zYAKwb9lyvvAjVPueHwLBwwLJ0J2C4soKKM/xyqRfllFzWHAuF8dKAmsNO + t1HGcSmHh1mT8hLnZf453PHbItVc8gvyeEcFAtWmGI3hB8JGIFLrzSoO3Vu/opRy + 5xovtKDbAcB6xjvkix6s4ppim2lunPa4uzni1XcXUZ5iF424SSSooWmySmFuYniS + pr5t2sulSWr4ptR5e/jWLr6hx6rkLntvJHf99DkK2MeAe35+lkvnKu4algH0Bul6 + r3eXvtSZl+Ejwy8fLGv3Zkj12xL3eIZ5PIihAqmJ8cPcY8mZfoz7BjpfXLL0ykuY + HPeAU2YzG9+1TiZk/hADsb6B558nj9DjFbi5P1CyCCWvIAdN+lq3BWaU8VsphC5A + w8L7DGUSlVQXuvHzvuFktYG5z/2FL4Oil924/jiTMiyglcq0qUqTIaR6F/5UdMfS + WwFQJ7Mco7nkak9JMzCos+h/l4IpeM0nSK/5ANzXeNRq5TzGXCYsNZhRtH2JNa1d + Et1dSAy0iR+v5wyozjppTC/o6vOkIVhvYoiDaT9ZVx4/t5552/qGRIdIH8c= + =RJtM + -----END PGP MESSAGE----- +#+end_src +***** PROD + +#+begin_src yaml + idps: + amp: + kind: saml + authorize_uri: https://auth.amp.cisco.com/auth/session/new + cert_path: /srv/iroh/resources/cert/amp_idp.cert + threatgrid: + kind: oidc + authorize_uri: https://panacea.threatgrid.com/oauth2/authorize + token_uri: https://panacea.threatgrid.com/api/v3/oauth/token + org_id_key: :tg_org + client_id: 4fe0068b-eb2a-4918-871f-dd9c9592990e + client_secret: | + -----BEGIN PGP MESSAGE----- + Version: GnuPG v1 + hQIMA84RaiSk55caAQ/+JHsdFHlM0yxwYJTMgzCPp0wOJozy1/lB4I3pdk/mQlA3 + KX0D9VahiZatTG+N0z2dx+rDs/T3XJIShwJsDbO0kBN18kOSEIU5eFZGTj1u7ev1 + vPAq+ekmxfRnYsQ0CRdp45uM8jhrO19zbJVu7oL1XaLGFYJxzt6BIkCExSnEBA/i + T3nNxa0CNw7sYUjw0kxDkCwl2RpdmMJ6QWNuqKqRc5olzz0mnu0ioCMXnPu1w4oD + Sck0pZQYacnr8/bCWsLR7kLA9GFHcApT1DoLDhOr8PB6/blpCd+t+nHflUx5SCgn + rqeeA8PaFCZ7wBRa8WuVZXmSll8/siSlTUyBxDKq9y5EjhJBFVRgCRjd4WzwGaMn + F3soOMKKpM1Dj1u3+PkgIprV6nWSUvEOrYxtUEWfBeVdD7Kng57AG+Xz8k1e9ium + s+ITYdo5oG5O4ks5bXuO9ILpt92GLoKC/TAbo2doxiGk63rBxu9HsUTMZVC96FzE + PkWXQxD4LDXlFTqIlCQmjUq6Q6K71t0+pvAS0x4dKHhvuJdAJEHrZe6nnLtiBcjA + TcYoFGHqx32mqbvq7LThoRYFVXvO2tMDoRrDjYKRKNpmTfHNDjhGf+TOhHiw7Rnf + TAJLWCyHrpupu47NPtqAN1fnY9m6yjNGRe6tzgG78vsdCSR6QdAHILwMjUR1QULS + WwHmb/heYDgwuhzbcwDAQuiotWA++xYzAy52cXNuunkC+e/4qob7iIN/ifcPDH3z + rEmF6TVvvE0tzW81X7tdyaOf3Q8rmwMSZzhK7HUhgWIdDhf3Dl6FrrdFoi0= + =srU6 + -----END PGP MESSAGE----- +#+end_src +** 2022-W10 +*** 2022-03-07 Monday +**** DONE Big PR Refresh Tokens :work: +:LOGBOOK: +CLOCK: [2022-03-07 Mon 09:47]--[2022-03-07 Mon 18:17] => 8:30 +:END: +[2022-03-07 Mon 09:47] + +This PR is big, due to different changes. + +So the main goal is to fix a bug in our OAuth2 Provider related to scopes +associated to refresh tokens. +See: + +- https://github.com/advthreat/iroh/issues/5877 +- https://github.com/threatgrid/response/issues/950 +- https://github.com/advthreat/iroh/issues/3189 + +Related to the discussion in this thread we should fix the issue correctly. +Before this PR, refresh tokens are only JWT, so the "state" and "trust" +that a refresh token is valid, as well as the scopes associated to this +refresh token are put inside this JWT. + +For different reason we want to be able to change for some client, the +scopes associated to some existing refresh tokens. Typical example, the +ribbon support more scopes than the one at the time the user granted the +ribbon. +So to update the ribbon, not only the ribbon client need to be updated, but +the user need to grant the scopes again interactively. + +Most of the ribbon clients are /trusted/ which mean that we bypass the list +of scopes authorized to return access tokens with the maximal number of +scopes. +Still there are some exceptions. +Also this is a missing piece of the OAuth2 provider to have refresh-tokens +administration endpoints for our end-users. + +Before this PR we only have a notion of "granted client" at the client +level, not for every different refresh token provided. + +After this PR we will keep track in our DB the exhaustive list of scopes +associated to refresh tokens. + +Some details: + +This create two new services, ~RefreshGrantService~ and +~RefreshGrantWebService~. +I preferred not to use ~RefreshTokenService~ because the word refresh token +is already used at different places. +And the object we save in DB is not a refresh token but a really just an +object keeping the scopes granted to some refresh token for some client and +for some user. + +I have added a few common helpers in this PR: + +1. ~mandatory-get-in-config~ +2. Small improvements about ~match?~: + 1. ~str-uuid?~ because we use strings and not proper UUID for which the clojure core function ~uuid?~ would be more suitable. + 2. check the length equality between two sequences during ~match?~ +3. Fixed a problem related to requesting ~edn~ in our http client helpers. + Now the read-string is done for you. +4. Centralized ~pure-crud-store-svc~ to be used in our tests to the + test-helpers of crud-store service. +5. added an ~iroh-web.request-identity~ ns that is useful to manipulate the + ~(:identity request)~ generated by the JWT middleware +6. by default the time ~svc-helper~ will use a fixed date. + +Also some non trivial changes made to achieve the goal of this PR: + +1. Add a ~realized-client~ to the ~OAuth2ClientService~. What is this about? So + ~get-client~ of the ~OAuth2ClientService~ is purely about search clients in + DB, just a think layer around CRUD. Before this PR there was also a + ~get-client~ method exposed by the ~OAuthService~ which act differently. + This second get client take care of looking at the client saved in the + ~config.edn~ file (yes we have some of them) and also applying the + ~ClientPreset~ logic to the resulting client. The ~realized-client~ of + ~OAuth2ClientService~ replace the old ~get-client~ from ~OAuth2Service~. The + method is still exposed to prevent any bug and as the PR is already big + I didn't want to also make a refactorization to remove it. But this would be a + nice idea. +2. Now ~check-app-authorization~ of the ~GrantService~ can be called with either 4 or 5 arguments. + If called with 4 argument, no refresh token is involved. We just try to + remember if the user already granted a set of scopes (every time the + user manually grant different scopes we add them up, so we make a + union). This is useful to see if we need to automatically redirect the + user in many interactive workflows. + If it is called with 5 argument, one of the new argument will be the + refresh token id (the ~jti~ claim of the refresh token which is a JWT). + In that case we also use the ~RefreshGrantSerice~ to verify the refresh + token associated has granted the scopes we are going to provide. + +Another few important notes: + +This change made again pretty clear why it really helps to use the +~with-tk~ pattern. A lot of manual changes was made because we have a lot of +tests that have not be migrated to this new pattern. +The main consequence for IROH-Auth dev, is that many changes will break +tests far away with almost not real related issue. +So I will probably take the time to really invest in using the new pattern for +IROH-Auth + IROH-Web. Because it really took me days to just fix these manually. + +After going full to the "test the service/core.clj" function by providing +pure contexts. I think that while valuable, it is probably a bit too much +work regarding the potential gain. And we should probably focus a lot more +on the "semi-integration" tests of the services themselves with the ~with-tk~ macros. +Looking at the ~core_test.clj~ tests will show that these tests are often a +bit verbose, and difficult to initialized when your service works with big contexts. + +The main test testing the feature is: + +~iroh-auth.oauth2_web_service_test/multiple-authorizations-with-different-scopes~ + +https://github.com/advthreat/iroh/pull/5885/files?diff=split&w=1#diff-3cbfae4301cdb80a669f13ea2861423140c52cd424a8b8e99617c2fae729117fR364 +*** 2022-03-10 Thursday +**** MEETING Weekly :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-10 Thu 17:43]--[2022-03-10 Thu 19:18] => 1:35 +:END: +[2022-03-10 Thu 17:43] + +- Work on Registration => Olivier +- like-search +- Work on Registration => Generated some interesting stats about SecureX orgs/user/domain email +- TG IdB decomission => Wait and ask Prerna +- Work on the TG bug => maybe split some part before merging, because this is a risky PR +- Idea about Tenzin-Config. + Use Ambrose work to find the common bootstrap+config.edn on all our current envs and + use that into the new `iroh.main` and change in tenzin how we start the application to + have a merge of both the config and the bootstrap. + + This should reduce the size, and we could but inside the IROH repository + changes that should be shared accross all deployed env. +***** ops in our team +*** 2022-03-11 Friday +**** MEETING Simplified Registration :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-11 Fri 16:29]--[2022-03-11 Fri 17:59] => 1:30 +:END: +[2022-03-11 Fri 16:29] +- ref :: +***** Agenda (to discuss about) +***** Notes +***** Actions +** 2022-W11 +*** 2022-03-15 Tuesday +**** DONE IDB Decommission CSA :work: +:LOGBOOK: +CLOCK: [2022-03-15 Tue 17:35]--[2022-03-16 Wed 15:31] => 21:56 +:END: +[2022-03-15 Tue 17:35] + +INT +{ + "client_id": "0oa2ovopagy06D2IV1d7", + "client_secret": "N7yEnBQWMHohD0LbwzXwsjuOUI9pVlbzI5lH28O9" +} +*** 2022-03-16 Wednesday +**** MEETING API Design Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-16 Wed 16:32]--[2022-03-18 Fri 11:55] => 43:23 +:END: +[2022-03-16 Wed 16:32] + +IROH-Auth login +**** MEETING Registration Simplification :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-16 Wed 15:31]--[2022-03-16 Wed 15:57] => 0:26 +:END: +[2022-03-16 Wed 15:31] +- ref :: +** 2022-W13 +*** 2022-03-28 Monday +**** MEETING Workshop :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-28 Mon 17:52]--[2022-03-30 Wed 16:20] => 46:28 +CLOCK: [2022-03-28 Mon 17:30]--[2022-03-28 Mon 17:52] => 0:22 +:END: +[2022-03-28 Mon 17:30] +**** MEETING Registration :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-28 Mon 16:29]--[2022-03-28 Mon 16:54] => 0:25 +:END: +[2022-03-28 Mon 16:29] +- ref :: + + +Chris Duan concerns: + +- email domain check in the UI +- risk of email domain mismatch, for now, just one admin is enough to match + the org, etc… +*** 2022-03-30 Wednesday +**** MEETING Registration FT :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-30 Wed 16:20]--[2022-03-30 Wed 22:07] => 5:47 +:END: +[2022-03-30 Wed 16:20] +- ref :: +***** Testing + +Only safe solution involve the Ops. + +Have a specific domain for us. +I suggest: ~qa.security.cisco.com~ +so every mail sent to ~foo@qa.security.cisco.com~ should be redirected to ~foo@cisco.com~. +That way we could create a few testing org without being polluted by all +the other cisco activity. +We could test the emails, etc… +*** 2022-03-31 Thursday +**** MEETING :work:meeting: +:LOGBOOK: +CLOCK: [2022-03-31 Thu 13:52]--[2022-03-31 Thu 15:30] => 1:38 +:END: +[2022-03-31 Thu 13:52] +***** Agenda + +What to do next? + +- Important potential refacto to help Matt add a the ccoId +- Refacto the tests (tried and it is a lot of work) +***** Notes +***** Actions +** 2022-W15 +*** 2022-04-11 Monday +**** MEETING Q4: Limited Demo Mode XP/Detail Design Discussion :work:meeting: +:LOGBOOK: +CLOCK: [2022-04-11 Mon 15:59]--[2022-04-15 Fri 17:14] => 97:15 +:END: +[2022-04-11 Mon 15:59] +- ref :: +***** Agenda (to discuss about) + +Agenda for this meeting is to go over the ideas/design proposed by MA/PO/PM +team for a limited SecureX Demo Mode experience. +We want the Engineering team to weigh in feasibility and discuss the +options in detail. +Below AHA ticket has been updated with details discussed. +Next, we want an estimate of the effort and since this is in the Q4 +Priority list get commitment if this can be done in Q4 or not. +***** Notes + +AHA shared screen: + +Requirement. +SecureX demo giving away too much information. + +Expiry dates to SecureX demo (30 days) +Limit the number of investigations (50 investigations). +***** Actions +** 2022-W16 +*** 2022-04-19 Tuesday +**** MEETING Switch Tenants :work:meeting: +:LOGBOOK: +CLOCK: [2022-04-19 Tue 17:02]--[2022-04-19 Tue 18:12] => 1:10 +:END: +[2022-04-19 Tue 17:02] + +- Hide/Disable Orgs +- Login workflow +- Petr, make an org default for users. +- Just hide/unhide the org for the UI. +. +***** UI demo + +List orgs / hide/ switch + +Also cross regions + ++ remarks + - default not auto-login + - login +**** MEETING Umbrella Deep Dive 1-click module setup :work:meeting: +:LOGBOOK: +CLOCK: [2022-04-19 Tue 16:33]--[2022-04-19 Tue 17:02] => 0:29 +:END: +[2022-04-19 Tue 16:33] +- ref :: + ++ Matt: describe The modules ++ Aaron Woland: for the diff function in SecureX we use every exposed API ++ Rajendra Shirhatti: + requirement, single API key +*** 2022-04-20 Wednesday +**** MEETING Cisco Leader Fundamental Program :work:meeting: +:LOGBOOK: +CLOCK: [2022-04-20 Wed 10:03]--[2022-04-20 Wed 18:47] => 8:44 +:END: +[2022-04-20 Wed 10:03] +- ref :: + +- First Next Steps writeable PDF: +https://cisco.sharepoint.com/:b:/s/GLOTeam/Ef_alzOAOoVHqHmmZ8dZYscBbHsYA5tLWgfj0tZL6iXvZQ?e=LFMQl3 + +Miro board- https://miro.com/app/board/o9J_lZRkMM8=/ +Password - CiscoLF2020 + +- Consciously Create Culture: https://wwwin.cisco.com/c/cec/cisco/conscious-culture.html +***** Come to me when + +- Come to me when you need to design a new abstraction to improve the code reliability +- Come to me when you need to write a code refactorisation +- Come to me when you need to build a new OAuth2 RFC from scratch +- Come to me when you need to improve CI reliability + +With: + +- Alex Cruz Farmer +*** 2022-04-21 Thursday +**** MEETING Leader :meeting: +:LOGBOOK: +CLOCK: [2022-04-21 Thu 10:38]--[2022-05-05 Thu 13:11] => 338:33 +:END: +[2022-04-21 Thu 10:38] +- ref :: +- Register for Cisco Mind Set: http://learn.cisco.com/?courseID=COT00305503 +- Mindfulness & Resilience SharePoint: https://cisco.sharepoint.com/Sites/ +- MindfulnessandResilienceatCisco +- Expert Medical Opinion Program: https://cisco.service-now.com/helpzone?id=kb_article&sysparm_article=KB0047880 +- Mental Health Awareness: https://cisco.sharepoint.com/Sites/SafetoTalkMentalHealthAwareness +- Employee Assistance Program: https://cisco.service-now.com/helpzone?id=kb_article&sysparm_article=KB0047879 +- Cisco Global Wellbeing: https://cisco.sharepoint.com/sites/GlobalWellbeing +Prepare meetings: +https://www.cisco.com/c/r/team-development/performance/team-leader-index.html +Reward: +https://cisco.sharepoint.com/sites/RewardsCentral +Further: +https://cisco.sharepoint.com/sites/NewLeaderJourneyRegistration +Talent Space +***** Analyze + +Ask her how to develop other in the team. +***** Says + +I *noticed* this or that, no judgement. +Wait for their perspective. + +I wouldn't want to demotivate you by blocking your PR. +** 2022-W18 +*** 2022-05-05 Thursday +**** MEETING Weekly Platform Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-05-05 Thu 17:10]--[2022-05-09 Mon 17:04] => 95:54 +:END: +[2022-05-05 Thu 17:10] +**** MEETING Registration FT :work:meeting: +:LOGBOOK: +CLOCK: [2022-05-05 Thu 16:52]--[2022-05-05 Thu 17:10] => 0:18 +CLOCK: [2022-05-05 Thu 16:30]--[2022-05-05 Thu 16:51] => 0:21 +:END: +[2022-05-05 Thu 16:30] + +** +** + +*Prerna* love to Sing, Adele, indian songs, Karaoke, (feel bad at gardening) +Hamed Saadi: wanted to be professional soccer, love orchid +*Jilian*: two young children, love gardening (strawberries, 12ft tall sun +flower etc…). During Cisco has a full orchid division. +*Hissan*: not much +*Olivier*: make italian food, watch video on climate change. Fan of +Jancovici, Aurelien Barrault. +** 2022-W19 +*** 2022-05-09 Monday +**** MEETING Umbrella 1-click :work:meeting: +:LOGBOOK: +CLOCK: [2022-05-09 Mon 17:04]--[2022-05-10 Tue 09:47] => 16:43 +:END: +[2022-05-09 Mon 17:04] +***** Presenting SecureX +*** 2022-05-11 Wednesday +**** MEETING Tenant switching :work:meeting: +:LOGBOOK: +CLOCK: [2022-05-11 Wed 16:28]--[2022-05-11 Wed 17:09] => 0:41 +:END: +[2022-05-11 Wed 16:28] + +How to have errors shared. + +Proposal, + +1. host on the same URL as IROH (so both CTR and Visibility) +2. Use query parameters + localStorage might not be enough because there is a huge risk of attack. +*** 2022-05-12 Thursday +**** DISC Topo for meeting :work:discussion: +:LOGBOOK: +CLOCK: [2022-05-12 Thu 11:21]--[2022-05-12 Thu 15:39] => 4:18 +:END: +[2022-05-12 Thu 11:21] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org::*preparer topo pour l’equipe][preparer topo pour l’equipe]] + +Go to the dashboard page + +Invisible work: + +- Olivier will start on org-level client +- UI design discussion about tenant switching even if we agree about most + of the backend work that could be done concurrently. +- Discussion about "bugs" that were just wording issue +** 2022-W20 +*** 2022-05-17 Tuesday +**** MEETING Devin Walters :work:meeting: +:LOGBOOK: +CLOCK: [2022-05-17 Tue 17:03]--[2022-05-17 Tue 19:03] => 2:00 +:END: +[2022-05-17 Tue 17:03] +- ref :: +***** Agenda (to discuss about) +***** Notes +***** Actions +*** 2022-05-18 Wednesday +**** MEETING API Design Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-05-18 Wed 17:42]--[2022-05-18 Wed 19:35] => 1:53 +:END: +[2022-05-18 Wed 17:42] +- ref :: + +Umbrella talk, hunting, etc… + +Check Token Exchange Okta token exchange for a IROH Auth exchange. + +DONE Create a new Epic for IROH Auth Token Exchange. +*** 2022-05-19 Thursday +**** DONE [#6740] Analyze Token Exchange RFC [[https://github.com/advthreat/iroh/issues/6740]] :work: +SCHEDULED: <2022-05-30 Mon 14:00-16:00> +:LOGBOOK: +- State "DONE" from "HOLD" [2022-05-30 Mon 17:16] +- State "HOLD" from "TODO" [2022-05-30 Mon 17:15] \\ + Appear to be ok, need to write the doc +CLOCK: [2022-05-30 Mon 16:15]--[2022-05-30 Mon 17:15] => 1:00 +:END: +[2022-05-19 Thu 09:27] +- ref :: [[https://github.com/advthreat/iroh/issues/6740][#6740]] +SCHEDULED: <2022-05-19 Thu> +** 2022-W21 +*** 2022-05-24 Tuesday +**** CHAT Work on BUG for the UI :work:chat: +:LOGBOOK: +CLOCK: [2022-05-24 Tue 17:06]--[2022-05-25 Wed 10:27] => 17:21 +:END: +[2022-05-24 Tue 17:06] +- ref :: + +on NAM backup value with idp-mapping from Rekha and probably Dar. + +#+begin_src json +{ + "role": "admin", + "scopes": [ + "event:read", + "vault/configs:read", + "integration", + "private-intel", + "admin", + "profile", + "inspect", + "asset", + "feedback", + "sse", + "registry", + "users", + "investigation", + "invite", + "casebook", + "vault/config/metadata:read", + "orbital", + "enrich", + "oauth", + "collect", + "response", + "ui-settings", + "telemetry:write", + "openid", + "notification", + "global-intel:read", + "webhook", + "vault/config/posture:read", + "ao" + ], + "updated-at": "2022-04-04T19:02:50.007Z", + "idp-mappings": [ + { + "idp": "sxso", + "enabled?": true, + "user-identity-id": "00u4b0w7zx5wOv6bP357" + }, + { + "idp": "sxso", + "cco-id": "DiogenesDavili83107", + "enabled?": true, + "user-identity-id": "00uh73n7l8T19iA80357" + }, + { + "idp": "sxso", + "enabled?": true, + "user-identity-id": "00u4fiegn96MYiUVb357" + } + ], + "user-email": "diogenes_davoli@hstsoft.com", + "user-name": "Diogenes Davoli", + "org-id": "0217a770-8d36-4934-9a4f-e136aac10e39", + "user-id": "fcc3ef21-ea15-4774-822a-7dcc5a642750", + "enabled?": true, + "last-logged-at": [ + "2022-04-13T19:16:18.315Z", + "2022-04-13T19:15:24.239Z", + "2022-04-13T19:15:15.552Z", + "2022-04-13T19:15:05.421Z", + "2022-04-13T18:45:13.063Z" + ], + "created-at": "2022-04-01T13:24:27.909Z", + "user-nick": "Diogenes Davoli" +} +#+end_src +** 2022-W22 +*** 2022-05-30 Monday +**** DONE Help Michael Simonson [[https://github.com/advthreat/response/issues/1315][#response/1315]] :work: +SCHEDULED: <2022-05-29 Sun 10:30-10:40> +:LOGBOOK: +CLOCK: [2022-05-30 Mon 10:30]--[2022-05-30 Mon 10:34] => 0:04 +:END: +[2022-05-30 Mon 10:15] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org::*Create Tasks from \[\[https://github.com/notifications\]\[Github notifications\]\]][Create Tasks from Github notifications]] +**** DONE Reply to Rekha [[https://github.com/advthreat/GLaDOS/pull/3239][GlaDoS#3239]] :work: +SCHEDULED: <2022-05-30 Mon 10:20-10:30> +:LOGBOOK: +CLOCK: [2022-05-30 Mon 10:25]--[2022-05-30 Mon 10:29] => 0:04 +:END: +[2022-05-30 Mon 10:12] +**** DONE Reset https://pwreset.cisco.com :work: +SCHEDULED: <2022-05-30 Mon 10:30-10:40> +:LOGBOOK: +CLOCK: [2022-05-30 Mon 10:34]--[2022-05-30 Mon 10:37] => 0:03 +:END: +[2022-05-30 Mon 09:38] +- ref :: [[file:~/Library/Mobile Documents/iCloud~com~appsonthemove~beorg/Documents/org/inbox.org::*Create Tasks from Webex][Create Tasks from Webex]] +*** 2022-06-01 Wednesday +**** DONE Document what need to be done for Token Exchange :work: +SCHEDULED: <2022-06-01 Wed 10:35-11:30> +:LOGBOOK: +CLOCK: [2022-06-01 Wed 11:26]--[2022-06-01 Wed 11:59] => 0:33 +CLOCK: [2022-06-01 Wed 10:35]--[2022-06-01 Wed 11:25] => 0:50 +:END: +[2022-06-01 Wed 10:32] +*** 2022-06-02 Thursday +**** MEETING Town Hall :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 18:00]--[2022-06-02 Thu 19:20] => 1:20 +:END: +[2022-06-02 Thu 20:13] +**** MEETING Weekly meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 17:06]--[2022-06-02 Thu 17:55] => 0:49 +:END: +[2022-06-02 Thu 17:06] +- ref :: +***** Notes + +- org-level clients (security concerns and complex technical details) +- tenant switching should be good for 6th of July +- token exchange issue +- maximal session time issue +- refresh token revocation with a grace period + +- configuration issues fix incoming using ~iroh.main~ + +=> on hold + +- oauth2 client password update +- simplification +**** MEETING Tenant Switching :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 16:32]--[2022-06-02 Thu 17:06] => 0:34 +:END: +[2022-06-02 Thu 16:32] +- ref :: +***** Agenda (to discuss about) +***** Notes +***** Actions +**** DONE Fix config issue :work: +SCHEDULED: <2022-06-02 Thu> +:LOGBOOK: +CLOCK: [2022-06-03 Fri 17:00]--[2022-06-03 Fri 17:55] => 0:55 +CLOCK: [2022-06-02 Thu 15:34]--[2022-06-02 Thu 16:30] => 0:56 +:END: +[2022-06-02 Thu 15:34] +**** PAUSE sortir le chien :pause: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 14:25]--[2022-06-02 Thu 15:33] => 1:08 +:END: +[2022-06-02 Thu 15:32] +**** MEETING Meeting with Olivier :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 09:55]--[2022-06-02 Thu 11:58] => 2:03 +:END: +[2022-06-02 Thu 09:55] +- ref :: +***** Agenda (to discuss about) +***** Notes +***** Actions +**** GEEK org-mode / org-calendar tweaking :perso: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 09:32]--[2022-06-02 Thu 09:55] => 0:23 +:END: +[2022-06-02 Thu 09:38] +**** DISC answered to Jyoti :work:discussion: +:LOGBOOK: +CLOCK: [2022-06-02 Thu 09:02]--[2022-06-02 Thu 09:32] => 0:30 +:END: +[2022-06-02 Thu 09:32] +*** 2022-06-03 Friday +**** MEETING Tenant Switching :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-03 Fri 16:31]--[2022-06-03 Fri 16:42] => 0:11 +:END: +[2022-06-03 Fri 16:31] + +- Accept invitation redundancy: https://github.com/advthreat/GLaDOS/issues/3273 + To be moved to the IROH repository as enhancement. +**** CHAT Rekha discussion with access/refresh tokens :work:chat: +:LOGBOOK: +CLOCK: [2022-06-03 Fri 16:45]--[2022-06-03 Fri 16:59] => 0:14 +CLOCK: [2022-06-03 Fri 14:36]--[2022-06-03 Fri 16:31] => 1:55 +:END: +[2022-06-03 Fri 14:36] +**** DONE Check duplicate user by org :work: +SCHEDULED: <2022-06-03 Fri> +:LOGBOOK: +CLOCK: [2022-06-03 Fri 13:50]--[2022-06-03 Fri 14:36] => 0:46 +:END: +[2022-06-03 Fri 13:49] + +- ref :: https://github.com/advthreat/response/issues/1331#event-6730353206 +** 2022-W23 +*** 2022-06-07 Tuesday +**** CANCELED PR to have 5min expiration time for iroh-ui client :work: +SCHEDULED: <2022-06-08 Wed 14:30-16:00> +:LOGBOOK: +- State "CANCELED" from "TODO" [2022-06-08 Wed 17:06] \\ + we'll work on that later +:END: +[2022-06-07 Tue 18:02] +**** CHAT Rekha ask for 5min expiration access tokens :work:chat: +:LOGBOOK: +CLOCK: [2022-06-07 Tue 17:58]--[2022-06-07 Tue 18:58] => 1:00 +:END: +[2022-06-07 Tue 17:58] +**** CHAT Rekha questions :work:chat: +:LOGBOOK: +CLOCK: [2022-06-07 Tue 16:40]--[2022-06-07 Tue 17:00] => 0:20 +:END: +[2022-06-07 Tue 16:40] +**** DONE Propose a technical solution for [[https://github.com/advthreat/iroh/issues/6770][6770]] :work: +SCHEDULED: <2022-06-08 Wed 11:00> +:LOGBOOK: +CLOCK: [2022-06-08 Wed 11:20]--[2022-06-08 Wed 11:49] => 0:29 +:END: +[2022-06-07 Tue 15:23] +**** DONE Remove duplicates [[https://github.com/advthreat/iroh/issues/6769#issuecomment-1148580667][duplicate]] :work: +SCHEDULED: <2022-06-16 Thu 11:00-11:20> +:LOGBOOK: +CLOCK: [2022-06-09 Thu 10:43]--[2022-06-09 Thu 10:44] => 0:01 +:END: +[2022-06-07 Tue 15:14] +**** DONE Weekly Leads :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-07 Tue 15:14]--[2022-06-07 Tue 16:30] => 1:16 +:END: +[2022-06-07 Tue 15:14] +**** PAUSE pause :pause: +:LOGBOOK: +CLOCK: [2022-06-07 Tue 11:17]--[2022-06-07 Tue 14:38] => 3:21 +:END: +[2022-06-07 Tue 11:17] +**** DONE discuss [[https://github.com/advthreat/iroh/issues/6740#issuecomment-1148013914][Wanderson comment on Refresh Token]] :work: +SCHEDULED: <2022-06-07 Tue 14:30-14:45> +[2022-06-07 Tue 10:02] +**** DONE Jeetu/Shaila keynote [[https://www.youtube.com/watch?v=PrgXKtTqDMI][RSA keynote]] start 1:15/1:28 :work: +SCHEDULED: <2022-06-07 Tue 10:50-11:20> +:LOGBOOK: +CLOCK: [2022-06-07 Tue 10:58]--[2022-06-07 Tue 11:03] => 0:05 +:END: +[2022-06-07 Tue 09:47] +**** DONE Check Wanderson discussion [[https://github.com/advthreat/iroh/pull/6773][switch-tenant jwt endpoint]] :work: +SCHEDULED: <2022-06-07 Tue 10:30-10:50> +:LOGBOOK: +CLOCK: [2022-06-07 Tue 10:41]--[2022-06-07 Tue 10:58] => 0:17 +CLOCK: [2022-06-07 Tue 10:19]--[2022-06-07 Tue 10:40] => 0:21 +:END: +[2022-06-07 Tue 09:45] +**** DONE Team Space [[https://teamspace.cisco.com/sso/cisco/redirect/L215Y2hlY2tpbnMvd2l6YXJk][check-in]] :work: +SCHEDULED: <2022-06-07 Tue 10:00> +:LOGBOOK: +CLOCK: [2022-06-07 Tue 10:07]--[2022-06-07 Tue 10:12] => 0:05 +:END: +[2022-06-07 Tue 09:42] +**** DONE pwreset :work: +:LOGBOOK: +CLOCK: [2022-06-07 Tue 09:30]--[2022-06-07 Tue 09:41] => 0:11 +:END: +[2022-06-07 Tue 09:38] +*** 2022-06-08 Wednesday +**** IN-PROGRESS Create issue about filtering matching orgs with already existing user email :work: +:LOGBOOK: +CLOCK: [2022-06-08 Wed 16:56]--[2022-06-08 Wed 17:06] => 0:10 +:END: +[2022-06-08 Wed 16:56] +**** MEETING Tenant Switching sync :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-08 Wed 16:45]--[2022-06-08 Wed 16:56] => 0:11 +:END: +[2022-06-08 Wed 16:45] + +remove matched orgs if user already exists (with same email) +**** CHAT Discussion about session token lifetime :work:chat: +:LOGBOOK: +CLOCK: [2022-06-08 Wed 16:09]--[2022-06-08 Wed 16:45] => 0:36 +CLOCK: [2022-06-08 Wed 15:32]--[2022-06-08 Wed 16:09] => 0:37 +:END: +[2022-06-08 Wed 15:32] +**** DONE meeting things to talk about :work: +SCHEDULED: <2022-06-08 Wed 16:30-17:00> +[2022-06-08 Wed 11:37] +***** Invitations UI/UX improvements + +- https://github.com/advthreat/iroh/issues/6770 +- https://github.com/advthreat/iroh/issues/6778 +**** DONE Check [[https://github.com/advthreat/iroh/pull/6773#event-6763342426][Doc for tenant switching]] :work: +SCHEDULED: <2022-06-08 Wed 14:00-14:15> +:LOGBOOK: +CLOCK: [2022-06-08 Wed 14:02]--[2022-06-08 Wed 14:16] => 0:14 +:END: +[2022-06-08 Wed 10:42] +**** CHAT Answered [[webexteams://im?space=331b38f0-6218-11e9-9aae-c5b8cb291b23][SecureX / CTR Support]] :work:chat: +:LOGBOOK: +CLOCK: [2022-06-08 Wed 10:25]--[2022-06-08 Wed 10:32] => 0:07 +:END: +[2022-06-08 Wed 10:31] +**** DONE Answer to Refresh Session Tokens chat [[webexteams://im?space=5b29b980-e351-11ec-8033-13a2eb8092c0][Refresh Token room]] :work: +SCHEDULED: <2022-06-08 Wed 14:15-14:30> +[2022-06-08 Wed 10:19] + +Adding a new temporary route is not straightforward, because it would mean +supporting multiple clients depending on the route, then also adding a feature +flag, and also adding a different config, etc… + +But notice that you can refresh after 5min even if the access token is still +valid. +So you should probably start with that. +*** 2022-06-09 Thursday +**** MEETING weekly meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-09 Thu 17:15]--[2022-06-09 Thu 18:08] => 0:53 +:END: +[2022-06-09 Thu 17:14] +***** Agenda (to discuss about) +***** Notes +***** Actions +**** CHAT Houman :work:chat: +:LOGBOOK: +CLOCK: [2022-06-09 Thu 15:10]--[2022-06-09 Thu 15:27] => 0:17 +:END: +[2022-06-09 Thu 15:10] +**** CANCELED Add refresh token / client info in the access tokens :work: +SCHEDULED: <2022-06-14 Tue 15:30-16:30> +:LOGBOOK: +- State "CANCELED" from "IN-PROGRESS" [2022-06-16 Thu 10:52] \\ + Other priorities +CLOCK: [2022-06-15 Wed 07:06]--[2022-06-15 Wed 18:12] => 11:06 +CLOCK: [2022-06-09 Thu 15:27]--[2022-06-09 Thu 17:15] => 1:48 +CLOCK: [2022-06-09 Thu 14:12]--[2022-06-09 Thu 15:10] => 0:58 +:END: +[2022-06-09 Thu 14:12] +**** DONE Check [[https://github.com/advthreat/iroh/pull/6764][Free Trial Design Doc]] :work: +SCHEDULED: <2022-06-22 Wed 16:00-16:30> +[2022-06-09 Thu 11:45] +**** CHAT Chris Duane PenTest :work:chat: +:LOGBOOK: +CLOCK: [2022-06-09 Thu 11:17]--[2022-06-09 Thu 11:54] => 0:37 +:END: +[2022-06-09 Thu 11:17] +**** DONE impression chiens :interruption:work: +:LOGBOOK: +CLOCK: [2022-06-09 Thu 10:32]--[2022-06-09 Thu 10:42] => 0:10 +:END: +[2022-06-09 Thu 10:32] +**** DONE Answer to Ag :work: +SCHEDULED: <2022-06-09 Thu 10:45-10:55> +:LOGBOOK: +CLOCK: [2022-06-09 Thu 11:54]--[2022-06-09 Thu 12:02] => 0:08 +CLOCK: [2022-06-09 Thu 10:44]--[2022-06-09 Thu 11:17] => 0:33 +:END: +[2022-06-09 Thu 10:18] + +ann, my current work for module-patching-ui for the Doc team is now on halt, +since our Ops is a huge clusterfuck right now. +I can't believe it, but they can't figure out provisioning a simple server with +a configuration similar to CTIA. +Since March. + +Anyway, I've been tasked with some other things and I need your help (because +Rob has no clue, and Mark is mumbling in a language I can't comprehend. +Not to throw my colleagues under the bus, I don't get it due to my own +cretinism). +I literally have no idea what's being asked here: +https://github.com/advthreat/iroh/issues/6688 + +Can you tell me what you know about the tac-web-service? +My understanding that it's only available through /admin/tac +• Who consumes these routes? +• Are they actively being used? +• Does the ticket mean that we're going to have to copy some of the +functionality out of admin zone and make it avaliable for non-admins? +• Could you point me to the similar things somewhere in the repo? + + +Basically, can you help me start on this? +I know, you've probably (as always) super-busy with other things, and the last +thing you need is to hold someone's hand, but it's been ages since I contributed +any code to the repo. +It would take me forever on my own. +Thanks a lot. +***** Answer + +Hi Ag! + +Yep, I am pretty blocked myself with this password reset. + +Regarding the issue, I didn't hear about that one. +So to answer your questions. + +- who consumes these routes? Mainly people from TAC so they could help + customers. I manually created an Org so all users of this orgs have the scope ~iroh-master/tac~. + This way the TAC team could access only the routes for TAC without giving them + access to more dangerous routes like direct store access (where a manual + mistake could really break the entire PROD). +- are they actively being used? YES +- Does the ticket mean that we're going to have to copy some of the + functionality out of admin zone and make it available for non-admins? + NO, the routes will stay under the admin zone, but only under the TAC Web + Services that only requires ~iroh-master/tac~ scope. + +So you should start at ~iroh-admin.tac-web-service.routes~ +Mainly you should add a few functions so they could provide the functionalities +they would like. +But beware that, unlike the direct store functions, you should take great care +of not breaking the expected schemas in the DB. + +But you could probably just provide a few new routes, to search users by email, +enable/disable users. For that you should use the ~UserService~ the current route +already use the ~OrgService~ to update orgs. + +For enabling a module by id I don't know much, this is probably a method from ~ModuleInstanceService~. + +Cheers, +Yann. +*** 2022-06-10 Friday +**** DISC Chien Espoir & Handicap :work:discussion: +:LOGBOOK: +CLOCK: [2022-06-10 Fri 10:41]--[2022-06-10 Fri 14:35] => 3:54 +:END: +[2022-06-10 Fri 10:41] +***** Acceuil + + +[À propos](/about): + +Handicap supportés: + +- handicap moteur +- troubles autistiques +- troubles visuels +**** CHAT Allison Walters role sync :work:chat: +:LOGBOOK: +CLOCK: [2022-06-10 Fri 09:05]--[2022-06-10 Fri 09:41] => 0:36 +:END: +[2022-06-10 Fri 09:05] + +Hi Allison, the confusion is expected unfortunately, the current state of affair +is the result of a very long and painful work that was called "IdP +Migration"/"SXSO Migration"/"Account Migration" mainly, I will try to give the +most exhaustive answer I can about this. + +First, SecureX and Threat Response are two Cisco products that have different +URL, different UI, but behind the hood both use the same and single API which is +called IROH. So both SecureX and Cisco Threat Response (and in fact a few other +products like the Ribbon, etc…) use the IROH API. + +Inside the IROH API, there is a big component dedicated to everything related to +Authentication, OAuth2 management, etc… This component is called IROH-Auth. + +So before the "migration", when a customer wanted to login into Threat Response +or SecureX he saw 2 buttons (one for AMP which is now CSA and one for +Threatgrid now called Secure Malware Analytics). + +So took place a huge concerted effort to only show 1 button. +After more than one and half a year of effort from multiple teams and lot of +people involved we finally had 3 buttons (both older 2 buttons + SecureX Sign-On). + +:) + +Today we still have 3 login choices to login, but the UI subtly hide 2 buttons +by making the default login (SXSO) more prominent. + +That was for the small story. +Now, let's talk about the technical details: + +The goal of the migration (let's call it that way) was to force every CSA user +to migrate toward using SecureX Sign-On to login. +So one more complexity, CSA accounts could or could not be directly related to an +active AMP (Secure Endpoint) account. So this add a layer on complexity for the +CSA team. + +IROH-Auth provided multiple different mechanisms to minimize the inevitable +friction that would occurs when user will change their login system. So +technically this is not that complex, we "just" needed from the CSA team to add +the "link" from the previous account and new account. +IROH-Auth exposes a provisioning API for this purpose. + +Mainly, every time a user perform a migration from CSA to SXSO in CSA (using the +CSA URL, workflow, etc…) +as IROH could not know that, CSA team call the provisioning API when: + +- a user perform a migration, so we could link the old CSA user-identity to the + new SXSO user-identity in SecureX as well as it is done in CSA +- a new user is created into a CSA organization and login via SXSO, in that case + the CSA team create a new user inside SecureX, with the SXSO identity. So if + this user login in SecureX it is automatically put in the correct org. + +This is what should occurs when user only uses CSA. +And this is the responsibility of CSA to perform these call to the provisioning API. +But the provisioning API is not called when the user's role is changed in SE. + +So once an org is marked to have migrated, they should no more be able to login +via CSA, but should be forced to pass through SXSO. + +OK. That's the first migration path. + +Now, what about a user that has a CSA/SE account but before migrating the org +uses SecureX but create an SXSO account without passing through the migration workflow? + +In that case, IROH-Auth tries to be "smart" about it. +So we try to detect email matches. +If a user login via SXSO and we have known users with the same email, we links +all these accounts together. + +Note, SXSO do not provide any info about the role, nor the org. + +So the role in SecureX could change only via: + +- an admin in some non migrated SE org change the SE user role and later that + user login via a CSA button on a non migrated org in SE +- Inside SecureX, an admin could change the role of another user in SecureX +- The provisioning API during user migration or user creation + +To give an example about how role could be updated: + +- on a non migrated org in SE: + + user-1 logged in a long time ago in SecureX with some role + + user-2 never logged into SecureX + + admin perform a role change for both user-1 and user-2; (in that step user-1 + role in SecureX and SE are different, SecureX could only sync the role if + user-1 login via CSA) + + admin perform the migration of its org in CSA => CSA call the provisioning + API, that should sync all users from CSA/SE into SecureX + + after the migration users should not be able to login again via CSA so the + link between the role is cut. And a change of role in SE will not result in + a change of role in SecureX. + +And I think there are missing workflow paths about it. +But to try to put it more simply, "most of the time", once an org migrate from +CSA to SXSO the link between the role is cut and the role are expected not to be +synchronized. + +I hope it could help a little. I think I left a lot more specific details some +of them I forgotten, some of them I cannot know about because it depends on the +CSA team. The doc related to this is probably long deprecated now, because so +many last minute bug fix occurred that we lost track of some minor details that +could potential make the simple rule (no relation between user's role once +migrated to SXSO) not work. + +For example, one detail I forgot to mention, when CSA call the provisioning API +to mark an Org as being migrated, SecureX will no more accept login via CSA for +this org. +So things are more complex when user create SXSO account before officially +migrating their org for example. + +Cheers. +**** DONE Review [[https://github.com/advthreat/iroh/pull/6791][#6791 Wanderson access/refresh]] :work: +SCHEDULED: <2022-06-10 Fri 14:00-14:30> +[2022-06-10 Fri 09:00] +** 2022-W24 +*** 2022-06-13 Monday +**** DONE Krystelle rescrit :interruption: +:LOGBOOK: +CLOCK: [2022-06-13 Mon 16:55]--[2022-06-13 Mon 17:02] => 0:07 +:END: +[2022-06-13 Mon 16:55] +**** DONE Lionel Rebière :interruption: +:LOGBOOK: +CLOCK: [2022-06-13 Mon 16:43]--[2022-06-13 Mon 16:55] => 0:12 +:END: +[2022-06-13 Mon 16:43] +**** MEETING weekly Account Switching :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-13 Mon 16:32]--[2022-06-13 Mon 16:43] => 0:11 +:END: +[2022-06-13 Mon 16:32] + +Maison + +Relancer le rescrit, dons défiscalisés. + +- 2 premiers benef test. +**** IN-PROGRESS telephone :interruption:work: +:LOGBOOK: +CLOCK: [2022-06-13 Mon 15:24]--[2022-06-13 Mon 16:32] => 1:08 +:END: +[2022-06-13 Mon 15:24] +**** IN-PROGRESS Security Fix (revocation on disable) :work: +:LOGBOOK: +CLOCK: [2022-06-13 Mon 15:10]--[2022-06-13 Mon 15:24] => 0:14 +:END: +[2022-06-13 Mon 15:10] +*** 2022-06-14 Tuesday +**** DONE Review [[https://github.com/advthreat/iroh/pull/6785][Tenant switching route to return JWT of other account]] :work: +SCHEDULED: <2022-06-14 Tue 15:00-15:30> +:LOGBOOK: +CLOCK: [2022-06-14 Tue 15:20]--[2022-06-14 Tue 16:50] => 1:30 +:END: +[2022-06-14 Tue 14:52] +*** 2022-06-15 Wednesday +**** GEEK Chien Espoir Handicap site :perso: +:LOGBOOK: +CLOCK: [2022-06-15 Wed 18:27]--[2022-06-15 Wed 22:15] => 3:48 +:END: +[2022-06-15 Wed 18:27] +**** DONE check time2give and click2give :work: +SCHEDULED: <2022-06-27 Mon 16:30-17:00> +[2022-06-15 Wed 15:13] +**** DONE Webex Olivier :work: +SCHEDULED: <2022-06-14 Tue 15:00-15:30> +[2022-06-15 Wed 14:42] +*** 2022-06-16 Thursday +**** DONE [#B] List of technical issues to add to the next quarter :work: +SCHEDULED: <2022-06-17 Fri 10:30-11:00> +:LOGBOOK: +CLOCK: [2022-06-17 Fri 10:04]--[2022-06-17 Fri 11:06] => 1:02 +:END: +[2022-06-16 Thu 17:25] +**** MEETING weekly meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-16 Thu 17:13]--[2022-06-16 Thu 20:19] => 3:06 +:END: +[2022-06-16 Thu 17:13] + +- org-level client continue +- work continue on Tenant switching, I expect Wanderson PR to be merged either + today or probably at the beginning of next week. +- auto revoke disabled users ; problems with the linter (disable, revert, fix, etc…) +- Next => help UI by adding a new parameter to generate short lived tokens (need + the PR from Wanderson first) +- waiting the VPN to fix duplicate accounts (one user has 200 duplicates) +- started to work on iroh.main, but I was interrupted by other things, but I am + not far from giving a good result in my branch. +- The most important work is probably support Token Exchange compatible with + SecureX Sign-On user identities when used as subject. +**** IN-PROGRESS revoke JWT when disabling users :work: +:LOGBOOK: +CLOCK: [2022-06-16 Thu 10:52]--[2022-06-16 Thu 17:13] => 6:21 +:END: +[2022-06-16 Thu 10:52] +*** 2022-06-17 Friday +**** IN-PROGRESS Revoke on disable :work: +:LOGBOOK: +CLOCK: [2022-06-17 Fri 11:06]--[2022-06-17 Fri 17:32] => 6:26 +:END: +[2022-06-17 Fri 11:06] +** 2022-W25 +*** 2022-06-23 Thursday +**** MEETING API Design Meeting (with Jyoti) :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-23 Thu 17:59]--[2022-06-24 Fri 17:55] => 23:56 +:END: +[2022-06-23 Thu 17:59] +***** Talos Mapping + +Michael Simonson data mapping from Talos. +**** MEETING weekly :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-23 Thu 17:30]--[2022-06-23 Thu 17:59] => 0:29 +:END: +[2022-06-23 Thu 17:30] + +Work done + +In my current PR changed the iroh-auth-service protocol and it didn't break +iroh-int !!!! Thanks Matt! +**** IN-PROGRESS Anticorruption & Bribery training :work: +:LOGBOOK: +CLOCK: [2022-06-23 Thu 10:49]--[2022-06-23 Thu 17:30] => 6:41 +:END: +[2022-06-23 Thu 10:48] +*** 2022-06-24 Friday +**** MEETING Monthly Engineering :work:meeting: +:LOGBOOK: +CLOCK: [2022-06-24 Fri 17:55]--[2022-06-24 Fri 19:11] => 1:16 +:END: +[2022-06-24 Fri 17:55] + +- Switch tenant; + - ability to change your account, generate JWT from other JWT. + - new UI that will help managing your accounts, orgs, discover new orgs, etc… +- Token Exchange; exchange an email or user-id for a SecureX JWT. +- Org-level clients; handle OAuth2 clients when their owner leave the company +***** Intro + +Just 1h. Lineup demos: + +Carlos Diaz Secure Endpoint, show us. Investigation. + +Michael and Mark present something with Jira. +***** Tour +****** Ops +John: pivot openVPN back to using certs +****** Release status +Houman: asking Neel + +1.99 is in production 1 day late. +Same with 1.98. +****** Business Updates +****** Team + +Guillaume: + +- New team members: + - Shafiq is in Sweden + - Johnatan will start next week, Toronto / Berlin ; under G2 + - Jerome Shneider; join mid-july, dedicated ops for IROH +- Tenant Switching +- Improvements +- +**** DONE Answer ETA https://github.com/advthreat/iroh/issues/6769 :work: +DEADLINE: <2022-06-24 Fri 16:00> SCHEDULED: <2022-06-24 Fri> +[2022-06-24 Fri 10:38] +** 2022-W32 +*** 2022-08-09 Tuesday +**** DONE Answer to Jyoti :work: +SCHEDULED: <2022-08-09 Tue 11:00> +[2022-08-09 Tue 09:47] +**** DONE Answer to question from Ben :work: +SCHEDULED: <2022-08-09 Tue 10:00> +[2022-08-09 Tue 09:45] + +So we could probably add a parameter to create links that would auto-select the +tenant during login and bypass the redirection to the Registration UI. + +But I am not sure this would be desirable, because it would introduce potential +inconsistency. +The main issue is that we use many different URLs, for different component/products. +The state (the user-identity and the tenant) must be saved for every URL of +every component/product if we want to synchronize the tenancy everywhere. + +For example think about this scenario: + +1. login to SecureX as user1@company.com using org Company +2. click to login to CTR (say the user login into the same user/org in CTR) +3. open a new tab and open SecureX, then inside SecureX switch tenant to Company2 +4. without clicking to back to CTR => the tenant is Company not Company2 + +Now it might also be more difficult to use different tenant between product. +I don't know if this is what we want or not. + +The question is probably more, do we want to sync the tenant on all our product +all the time? aka, à la google. +Or do we want to be able to have different tenant on different URL? + +If we want to sync the tenancy everywhere, this could be done, but this is not +free. +Mainly we want a solution similar to how Google handle your Google account. +Notice how, when you switch your Google account, you wait a few seconds on a +webpage? +This is Google opening a few iframes to pass the state between different URLs +(like google.com and youtube.com etc…) + +Google have it easy, because they just care about the User Identity. And once +they know your user identity, they don't need to clear it, as it never changes. +So your Google account session is infinite. + +In the Cisco case, the User Identity state is saved in a cookie at the SXSO URL. +But, unlike Google Cisco, need to ask confirmation of the User Identity to 3rd +party IdPs so we do not allow a login from a user that was fired from a company. +So SXSO sessions are a lot shorter (a few hours). + +The Tenancy state is not saved into the Registration UI URL for now but it could +be. +But this must be dependent on the session lifetime of SXSO for the same security +reason. + +But as we use 3rd party IdPs, and thus depends on IdP of our customers, it +means, that our User Identity session must be short enough to be somehow secure +and it means that if we were to sync the account state on all products we will +need to present a similar page to the Google account switching everytime the +session ends. So once a day, we would force our customer to see that page that +could take a few seconds to load because it is loading in the background many +different URLs. +*** 2022-08-12 Friday +**** DONE Check clients qui seront disabled en PROD +SCHEDULED: <2022-08-16 Tue> +[2022-08-12 Fri 16:10] + +APJC +user-id org-id enabled? user-email +x b4194bf2-4baa-4583-a3f4-1adbf711b4c8 6053ec8b-e546-4938-85ae-89bfa25df8e1 not-enabled yvaisman@cisco.com +x b4194bf2-4baa-4583-a3f4-1adbf711b4c8 6053ec8b-e546-4938-85ae-89bfa25df8e1 not-enabled yvaisman@cisco.com + +owner 6ee52ee9-2e3a-4e1b-977d-961facb5fd84 from org 63489cf9-561c-4958-a13d-6d84b7ef09d4 not found +owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found +owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found + +EU +user-id org-id enabled? user-email +x ce157e8d-c7da-4284-afc1-cb9f83c7d4c8 4c2bfb38-b4be-4752-9eee-d98a0d6c0d6a not-enabled yvaisman@cisco.com + +x owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found +x owner 9ccbb6d3-5ea0-460d-8256-9fe28bdca4be from org 9997a398-1b4c-4d2e-b4da-1285c2ac4ffb not found +owner d697511a-9164-49d0-8c7b-a5c1a11fb25d from org 576c9ad4-7820-44ca-9d5e-6ca678eadcd1 not found + +NAM +user-id org-id enabled? user-email +x 3933f5e0-50bb-49a7-bbf4-5944e0b709fd 2e0e9eaf-eaf7-4449-9c07-9fb1828aec78 not-enabled yana@securitydemo.net +x 7ef6da70-eeef-4a18-83ea-2e94dd6f9ba2 d76c035d-e896-438c-8d75-158be85fc958 not-enabled aklager+orbital_dev@cisco.com + +x owner d697511a-9164-49d0-8c7b-a5c1a11fb25d from org 576c9ad4-7820-44ca-9d5e-6ca678eadcd1 not found +***** Fixes +****** NAM +Replaced +3933f5e0-50bb-49a7-bbf4-5944e0b709fd by 9992027f-a88b-4b0e-8a38-58ad317c58af +7ef6da70-eeef-4a18-83ea-2e94dd6f9ba2 by dbc2d227-ba79-47e8-ae21-b4da6e1727f8 + +For client: client-3e55e6a3-4561-4733-b380-ffbd94733ba1 +from d697511a-9164-49d0-8c7b-a5c1a11fb25d to me {"owner-id":"f0010924-e1bc-4b03-b600-89c6cf52757c", "org-id":"f47a89bf-5d2e-4392-b770-ad4821a82acf"} +****** EU + +no org found: + +client-01c25de8-50a7-4ed8-b260-b1ebee977fda (CSC backend client) +client-8dae4eda-3b9a-48b1-8cdc-e7e1963465a3 (CSC Backend) +client-3e55e6a3-4561-4733-b380-ffbd94733ba1 (SSE UI Client; "PROD EU Environment for Security Services Exchange Admin Console") + +Replace by me: + +{"owner-id":"080c8271-e1c7-4fe6-b6e2-bc1fda123432", +"org-id":"bfb43d46-4fc3-43e7-93bf-a1fbe020593b"} +****** APJC + +client-92258bc0-196a-4f6c-a0b5-fe105de5f505 (SSE UI dev client) +client-ff492465-48c7-4aab-b9c7-feb3569226a7 (CSC backend) +client-b0d51eb1-e03f-4671-aa99-8fb4927ae88b (CSC backend) + +Replace by me: + +{"owner-id":"b19d5dea-5aa4-4265-b42d-9acc1e913f01", +"org-id":"d461811f-e6ce-477c-bae3-1d7527f4e80b"} +** 2022-W33 +*** 2022-08-17 Wednesday +**** CANCELED Reward Sofiia for helping with creds :work: +SCHEDULED: <2022-08-17 Wed> +:LOGBOOK: +- State "CANCELED" from "TODO" [2022-09-09 Fri 09:56] +:END: +[2022-08-17 Wed 11:54] +** 2022-W35 +*** 2022-08-31 Wednesday +**** MEETING API Design Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-08-31 Wed 18:33]--[2022-09-01 Thu 16:02] => 21:29 +:END: +[2022-08-31 Wed 18:33] +***** IROH Proxy for Orchestration +**** DONE Answer Chakrapani Chitnis :work: +SCHEDULED: <2022-08-31 Wed> +[2022-08-31 Wed 09:27] +**** DONE Answer to Prerna in Switch Tenant Discussion :work: +SCHEDULED: <2022-08-31 Wed 10:00> +[2022-08-31 Wed 09:24] + +webexteams://im?space=3fda2de0-7876-11ec-b589-2d17b011a78b +***** Answer + +Hi Prerna, you are totally right, as CTR do not implement the switch user this +PR will probably break CTR workflow. + +I should probably have asked to split this feature in two steps: + +1. Ability to create a link that will ensure the user will be presented the + Registration UI +2. Change the login behavior to match the one asked by Ben. + +Note, that CTR might not need to implement the full user switching from within +CTR and simply use (1) to redirect user to the Registration UI, so the user will +be able to switch their account from there. + +I think (1) would not break anything and will be retro-compatible. +Also I think both CTR and SecureX should provide a way to redirect the user to +the Registration UI. +Currently user with a single account never reach the Registration UI unless they +have a pending invite, which means for these users, creating a new Organization +is probably almost impossible. + +That being said, I didn't want to change the behaviour before asking everyone in +this FT if this is desirable, as it appears to me that automatically redirecting +the users to the dashboard (or CTR) with the latest login account, goes a bit +against some discussion we had to present the Registration UI as often as possible. + +So, sorry @wanderson, could you split your PR? Or maybe create a new PR with +just (1) implemented? As I think this is needed to fix this bug: + +https://github.com/advthreat/GLaDOS/issues/3404 + +So at least for now, I don't think we need to go further, the PR will be put +on-hold until further discussion. +*** 2022-09-01 Thursday +**** MEETING Weekly :work:meeting: +[2022-09-01 Thu 17:07] +***** Y + +Code cleaning: +- use iroh-crud for Users +- use tk-test + +Help fix the missing events with Matt + +Discuss about improving login workflow, was refused because it will break CTR. + +Idea occurred to me to split the test between integration one and the other. +We could gain the docker init time for them ;) +**** MEETING AO Meeting :work:meeting: +:LOGBOOK: +CLOCK: [2022-09-01 Thu 16:02]--[2022-09-03 Sat 13:16] => 45:14 +:END: +[2022-09-01 Thu 16:02] +***** Lisa & Craig + +Leverage SX Module Integration + +- Lisa Hart PO of SXO +- Briana Farro, presentation; +***** Plan +- Chris (PM); desired outcome +- Pior Proposed Engineering Solutions +- New Proposed Engineering Solution +***** Product Statement Overview +****** Christopher Van Der Made +open API (very few cisco product provide it) +** 2022-W41 +*** 2022-10-12 Wednesday +**** DONE Add Allison Walters to the org of the demo client :work: +SCHEDULED: <2022-10-12 Wed> +[2022-10-12 Wed 09:58] +TEST ~client-2f0c934c-ce46-4187-afed-4cdcff937679~ +email: allwalte@cisco.com +** 2022-W42 +*** 2022-10-19 Wednesday +**** CANCELED Ask Robert Harris to update doc for ribbon :work: +SCHEDULED: <2022-10-19 Wed> +:LOGBOOK: +- State "CANCELED" from "TODO" [2022-10-19 Wed 15:52] +:END: +[2022-10-19 Wed 06:56] + +ref :: https://github.com/advthreat/pabst/blob/master/docs/ribbon2migration.md#oauth2-configuration +**** DONE Talk with Olivier about doc template :work: +SCHEDULED: <2022-10-19 Wed> +:LOGBOOK: +CLOCK: [2022-10-19 Wed 10:07]--[2022-10-19 Wed 11:55] => 1:48 +:END: +[2022-10-19 Wed 06:56] +**** DONE Replace the scopes for Rooshan :work: +SCHEDULED: <2022-10-19 Wed> +:LOGBOOK: +CLOCK: [2022-10-19 Wed 14:55]--[2022-10-19 Wed 15:52] => 0:57 +:END: +[2022-10-19 Wed 06:53] + +ref :: https://github.com/advthreat/pabst/blob/master/docs/ribbon2migration.md#oauth2-configuration + +New scopes: + +#+begin_src javascript +{"scopes": ["admin/csc", + "admin/integration/module-instance:write", + "casebook", + "enrich:read", + "global-intel:read" + "inspect:read", + "integration/api-gateway/proxy:write", + "integration/module-instance", + "integration/module-type:read", + "integration/sxso/app-links:read", + "integration:read" + "investigation", + "notification", + "orbital", + "private-intel", + "profile", + "registry/user/ribbon", + "registry/user:read", + "response", + "telemetry:write", + "users", + "vault/config/metadata:read", + "vault/configs:read", + ]} +#+end_src +** 2022-W43 +*** 2022-10-24 Monday +**** DONE Faire l'ESTA :work: +DEADLINE: <2022-10-25 Tue 18:00> SCHEDULED: <2022-10-24 Mon> +[2022-10-24 Mon 15:59] +**** DONE [#B] Réserver vols Concur :work: +DEADLINE: <2022-10-24 Mon 15:15> SCHEDULED: <2022-10-24 Mon> +[2022-10-24 Mon 11:02] + +#+begin_quote +CISCO EMERGENCY TRAVEL NUMBER *88* OPTION 6 +### PLEASE READ THIS IMPORTANT MESSAGE +PLEASE CALL THE CISCO TRAVEL TEAM TO +UPDATE CHANGE OR CANCEL THIS RESERVATION +PLEASE CALL *88* PROMPT 6 FROM ANY CISCO IP PHONE +OR 00 31 36 711 7711 PROMPT 6 +-----PLEASE NOTE THESE IMPORTANT NUMBERS----- +----MEDICAL AND SECURITY TRAVEL EMERGENCY---- +US 1 800 206 5647 / TOLL FREE +AMER WEST AND WORLDWIDE COLLECT 1 408 525 1111 +AMER EAST 919 392 2222 OR 1 888 302 9081 +EMEA 44 20 8824 3434 +INDIA 91 80 4426 4111 / ASIA PAC 86 21 2407 3333 + +QI 8 COMPANY CISCOBE +QI 8 FORM AXQIITNBEEN +#+end_quote +**** DONE Update clients scopes :work: +SCHEDULED: <2022-10-24 Mon 16:00> +:LOGBOOK: +CLOCK: [2022-10-24 Mon 15:43]--[2022-10-24 Mon 16:27] => 0:44 +:END: +[2022-10-24 Mon 10:57] + +Webex link: webexteams://im?space=26a6e900-fe90-11ea-8c35-195a5dc6b463 +Contact: Rooshan Aslam + +Env: amp/nam +"RIBBON_CLIENT_ID":"client-ead5586b-a545-423e-857f-3c65841067ef" + + Env: eu + "RIBBON_CLIENT_ID":"client-ce13991c-6049-48ee-8e33-e4d059a153bf" + +Env: apjc +"RIBBON_CLIENT_ID":"client-2fbb67f0-a6b4-41b4-b4ce-62a8b89fe606" + +PATCH: + +#+begin_src js +{"scopes": [ + "admin/csc", + "admin/integration/module-instance:write", + "casebook", + "enrich:read", + "global-intel:read", + "inspect:read", + "integration/api-gateway/proxy:write", + "integration/module-instance", + "integration/module-type:read", + "integration/sxso/app-links:read", + "integration:read", + "investigation", + "notification", + "orbital", + "private-intel", + "profile", + "registry/user/ribbon", + "registry/user:read", + "response", + "telemetry:write", + "users", + "vault/config/metadata:read", + "vault/configs:read"]} +#+end_src +***** NAM Backup + +#+begin_src json +{ "scopes": [ + "admin/csc", + "vault/configs:read", + "private-intel", + "profile", + "integration/module-type:read", + "enrich:read", + "admin/integration/module-instance:write", + "users", + "casebook", + "vault/config/metadata:read", + "inspect:read", + "orbital", + "integration/module-instance", + "integration/api-gateway/proxy:write", + "integration/sxso/app-links:read", + "notification:read", + "response", + "telemetry:write", + "registry/user/ribbon", + "global-intel:read" + ], + "description": "Used to communicate with IROH API endpoints", + "approved?": true, + "redirects": [ + "https://console.amp.cisco.com/visibility_oauth/new", + "https://console.amp.cisco.com/securex_modules/new", + "https://support-portal.amp.cisco.com/securex_modules/new" + ], + "availability": "everyone", + "password": "$s0$f0801$lbvAxwkfQhlCZNJxbkDdLQ==$MMrH+2eTLqtOqc8P1tNwTyKIgvNYePVMK6Sq3Brt+D0=", + "name": "AMP for Endpoints", + "allow-partial-user-scopes?": true, + "org-id": "a2ea8cbf-7540-4860-9050-7a24c3c8e0b6", + "enabled?": true, + "grants": [ + "auth-code" + ], + "client-type": "confidential", + "id": "client-ead5586b-a545-423e-857f-3c65841067ef", + "approval-status": "approved", + "owner-id": "e9a61ce5-e49c-4809-ad14-8230fd12ddd4", + "created-at": "2020-04-16T20:40:37.541Z" +} +#+end_src +***** EU Backup + +#+begin_src +{ + "scopes": [ + "admin/csc", + "vault/configs:read", + "private-intel", + "profile", + "integration/module-type:read", + "enrich:read", + "admin/integration/module-instance:write", + "users", + "casebook", + "vault/config/metadata:read", + "inspect:read", + "orbital", + "integration/module-instance", + "integration/api-gateway/proxy:write", + "integration/sxso/app-links:read", + "notification:read", + "response", + "telemetry:write", + "registry/user/ribbon", + "global-intel:read" + ], + "description": "A client used to make API requests to IROH", + "approved?": true, + "redirects": [ + "https://console.eu.amp.cisco.com/visibility_oauth/new", + "https://console.eu.amp.cisco.com/securex_modules/new", + "https://support-portal.eu.amp.cisco.com/securex_modules/new" + ], + "availability": "everyone", + "password": "$s0$f0801$HJcAh0nXy6kwQ+C6/JvJ5g==$wtPYiPYjxYiB31i2Yapaynh/90GI4gfD4ePZZ21Utlw=", + "name": "AMP for endpoints", + "allow-partial-user-scopes?": true, + "org-id": "a5a47f61-9d42-49fc-a1e9-36b09fe8e95e", + "enabled?": true, + "grants": [ + "auth-code" + ], + "client-type": "confidential", + "id": "client-ce13991c-6049-48ee-8e33-e4d059a153bf", + "approval-status": "approved", + "owner-id": "32060e21-abcb-45c6-923d-dac334805d1d", + "created-at": "2020-04-16T21:08:15.035Z" +} +#+end_src +***** APJC Backup + +#+begin_src json +{ + "scopes": [ + "admin/csc", + "vault/configs:read", + "private-intel", + "profile", + "integration/module-type:read", + "enrich:read", + "admin/integration/module-instance:write", + "users", + "casebook", + "vault/config/metadata:read", + "inspect:read", + "orbital", + "integration/module-instance", + "integration/api-gateway/proxy:write", + "integration/sxso/app-links:read", + "notification:read", + "response", + "telemetry:write", + "registry/user/ribbon", + "global-intel:read" + ], + "description": "A client used to make API requests to IROH", + "approved?": true, + "redirects": [ + "https://console.apjc.amp.cisco.com/visibility_oauth/new", + "https://console.apjc.amp.cisco.com/securex_modules/new", + "https://support-portal.apjc.amp.cisco.com/securex_modules/new" + ], + "availability": "everyone", + "password": "$s0$f0801$IHYBwP+MKF+cjke2H9blhw==$BNEdX+cKmVT6DkW3zq2yvZEaTG7SRM/d+TEeuSsLRac=", + "name": "AMP for endpoints", + "allow-partial-user-scopes?": true, + "org-id": "778298b5-cb3e-4d0c-a8fb-4df2bdf9c665", + "enabled?": true, + "grants": [ + "auth-code" + ], + "client-type": "confidential", + "id": "client-2fbb67f0-a6b4-41b4-b4ce-62a8b89fe606", + "approval-status": "approved", + "owner-id": "92e47cc3-d027-4e2c-88ba-d141bc369883", + "created-at": "2020-04-16T20:50:51.948Z" +} +#+end_src +**** DONE Nag team :work: +DEADLINE: <2022-10-24 Mon 14:30> SCHEDULED: <2022-10-24 Mon> +[2022-10-24 Mon 10:49] +**** DONE Team Space :work: +DEADLINE: <2022-10-24 Mon 15:00> SCHEDULED: <2022-10-24 Mon> +[2022-10-24 Mon 10:49] +*** 2022-10-25 Tuesday +**** DONE Answer Krithika :work: +DEADLINE: <2022-10-25 Tue 15:00> SCHEDULED: <2022-10-25 Tue> +[2022-10-25 Tue 10:51] +** 2022-W44 +*** 2022-11-01 Tuesday +**** DONE POST Off-site Discussion :work: +SCHEDULED: <2022-11-07 Mon> +[2022-11-01 Tue 17:17] + +Incident View discussion: https://github.com/advthreat/iroh/issues/6976 +** 2022-W45 +*** 2022-11-09 Wednesday +**** DONE Handle Flagged emails :work: +SCHEDULED: <2022-11-10 Thu 11:00> +[2022-11-09 Wed 18:36] +** 2022-W46 +*** 2022-11-14 Monday +**** DONE Write RBAC Epic(s) :work: +SCHEDULED: <2022-11-14 Mon 14:00> +:LOGBOOK: +CLOCK: [2022-11-14 Mon 16:29]--[2022-11-14 Mon 18:05] => 1:36 +:END: +[2022-11-14 Mon 10:41] +**** DONE [#B] Comment on Jyoti doc :work: +DEADLINE: <2022-11-14 Mon 11:30> SCHEDULED: <2022-11-14 Mon> +:LOGBOOK: +CLOCK: [2022-11-14 Mon 11:30]--[2022-11-14 Mon 15:42] => 4:12 +:END: +[2022-11-14 Mon 10:41] +- https://github.com/advthreat/response/pull/1601 +*** 2022-11-16 Wednesday +**** DONE Préparation 1-1 Wanderson :work: +SCHEDULED: <2022-11-16 Wed> +:LOGBOOK: +CLOCK: [2022-11-16 Wed 11:24]--[2022-11-17 Thu 18:09] => 30:45 +:END: +[2022-11-16 Wed 11:24] +** 2022-W47 +*** 2022-11-23 Wednesday +**** DONE SCA issues :work: +SCHEDULED: <2022-11-24 Thu 11:00> +[2022-11-23 Wed 19:40] +***** Actions + +- [ ] Onboard API +- [ ] Webhook on role change. +- [ ] ENV/Region in the JWT at least id_token. +- [ ] Time of provisioning 5 to 10 min. +**** DONE TAC Impersonation doc :work: +SCHEDULED: <2022-11-24 Thu 10:00> +:LOGBOOK: +CLOCK: [2022-11-24 Thu 14:06]--[2022-11-24 Thu 14:13] => 0:07 +:END: +[2022-11-23 Wed 19:11] +- take care of scopes +- take care of user-switching or any other kind of JWT generation to keep track + of act and scopes +** 2022-W48 +*** 2022-11-29 Tuesday +**** IN-PROGRESS Put beta-flag :work: +:LOGBOOK: +CLOCK: [2022-11-29 Tue 15:32]--[2022-11-29 Tue 16:32] => 1:00 +:END: +[2022-11-29 Tue 15:32] + +https://github.com/advthreat/iroh/issues/7309 + +=cisco/feature-flag/xdr= + +- SX Test org- PROD NA: b5935c68-c16a-4290-a49a-aad9bb2ea733 +- Cisco SBG Customer Insights (NA): 40f4c64b-7934-4dc6-87d9-5ebf36c13d54 +- DPD Group UK LTD (EU): cee614cb-f35b-4147-bd27-9968d173c3ce +- Jazz Air (NA) - Org ID - 1b7024af-bc0a-4de1-8ce6-f093340ed5fb +- MEMIC (NA) – Org ID - b62f0113-f26e-42f1-89e3-b45254c416a7 +- Opus Holding (NA) - Org ID: 4b1b4bba-f310-4251-88c3-bdf3b93d6456 +- Room & Board (NA) - Org ID: 794047a5-b023-489e-b5ee-6407fcdf0daa +- Talos Energy (NA) - Org ID: c074a67d-1e57-4e4f-9f9d-0b9ed7847bf8 +** 2022-W49 +*** 2022-12-05 Monday +**** DONE Review RoleService :work: +SCHEDULED: <2022-12-04 Sun 11:45> +[2022-12-05 Mon 09:56] +*** 2022-12-06 Tuesday +**** DONE Finir et merger la PR de scopula :work: +SCHEDULED: <2022-12-06 Tue> +:LOGBOOK: +- Note taken on [2022-12-07 Wed 10:48] +CLOCK: [2022-12-06 Tue 11:11]--[2022-12-06 Tue 12:11] => 1:00 +:END: +[2022-12-06 Tue 11:11] +*** 2022-12-09 Friday +**** MEETING Monthly :work:meeting: +:LOGBOOK: +CLOCK: [2022-12-09 Fri 18:32]--[2022-12-09 Fri 19:08] => 0:36 +:END: +[2022-12-09 Fri 18:31] +***** Service Team Pres + +Guillaume is at Black Hat: + +Data API Services Team: + +1. Working on design for the incident management for next XDR product in RSA +Cannot talk much more into details about it. + + +General API services team: +1. Design of the the Audit Trail service +2. CTIM changes for non security related events + +Auth Services Team: +1. Focus on RBAC work + - Design and plan to add new roles + - Olivier is focusing on adding new roles in the code + - Wanderson focus on improving JWT size wich is related to adding new roles and scopes. + +New member in the team that will work with Jerome Patrick Patat. +***** Demos +****** Matt +** 2022-W50 +*** 2022-12-12 Monday +**** IN-PROGRESS Revoke Trusted clients grants :work: +:LOGBOOK: +CLOCK: [2022-12-12 Mon 16:14]--[2022-12-13 Tue 17:44] => 25:30 +:END: +[2022-12-12 Mon 16:14] + +https://github.com/advthreat/iroh/pull/7394 +*** 2022-12-14 Wednesday +**** MEETING API Design Meeting :work:meeting: +[2022-12-14 Wed 18:34] + +- on Incident Creation +- Trigger SXO event, decide if there is any automated workflow to trigger. + +Design for the Rule System.
-

Vers l'autonomie

- -
-

1 TODO Quotidien [0/3]

-
-
-
-

1.1 TODO Rangement, propreté [0/3]

-
-
-
-

1.1.1 TODO Faire sa chambre le matin [0/6]

-
-
-
    -
  1. TODO Faire le lit
    2. -
  2. TODO mettre ses habits sales au sale
    3. -
  3. TODO ramasser les décher et les mettre à la poubelle
    4. -
  4. TODO ne pas laisser de vaisselle dans la chambre
    5. -
  5. TODO ne pas laisser de bouteille d'eau dans la chambre
    6. -
  6. TODO ne pas laisser de nourriture dans la chambre
    7. -
-
-
-

1.1.2 TODO Repas [0/8]

-
-
-
    -
  1. TODO Participer à mettre la table [0/6]
    -
      -
    1. TODO Assiettes
      2. -
    2. TODO Couverts
      3. -
    3. TODO Verres
      4. -
    4. TODO Plat principal
      5. -
    5. TODO Eau
      6. -
    6. TODO Condiments (sel, poivre, vinaigrette, etc…)
      7. -
    -
    2. -
  2. TODO Nettoyer après avoir manger [0/2]
    -
      -
    1. TODO ranger sa table [0/3]
      -
        -
      1. TODO son assiette / bols / etc…
        2. -
      2. TODO ses couverts
        3. -
      3. TODO son verre
        4. -
      -
      2. -
    2. TODO débarrasser la table [0/6]
      -
        -
      1. TODO l'eau à re-remplir, remettre au frais pour le lendemain
        2. -
      2. TODO débarrasser le plat principal
        -
        -
          -
        • si il reste beaucoup remettre le plat au frigo (le laisser refroidir)
          • -
        • si il en reste peu, ou qu'on n'en remangera pas, vider le reste du plat -principal dans un autre récipient plus petit et le mettre soi au frigo, -soit au congélateur pour le manger plus tard. Et nettoyer, à la main, le -grand récipient (plat à gratin, saladier, marmite, etc…)
          • -
        -
        -
        3. -
      3. TODO débarrasser le pain et le remettre à sa place
        4. -
      4. TODO débarrasser les condiments (sel, moutarde, etc…)
        5. -
      5. TODO essuyer la table
        -
        -
          -
        • vérifier qu'il ne reste plus rien
          • -
        • essuyer sur les rebords de la table
          • -
        • nettoyer les miettes par terre ou essuyer si c'est vraiment sale
          • -
        • après avoir passer l'éponge, essuyer avec une serviette pour ne pas -laisser des traces d'humidité
          • -
        -
        -
        6. -
      6. TODO Mettre au recyclage vs poubelle
        7. -
      -
      3. -
    -
    3. -
  3. TODO Savoir mettre correctement la vaisselle dans le lave vaisselle
    -
    -
      -
    • les verres jamais dans le mauvais sens
      • -
    • les bols et les assiettes creusent ne doivent pas être obstruées
      • -
    • il vaut mieux nettoyer une gros élément à la main que lancer le lave -vaisselle inutilement 2x
      • -
    -
    -
    4. -
  4. TODO Savoir si on doit lancer le lave vaisselle
    5. -
  5. TODO Savoir lancer le lave vaisselle si nécessaire
    6. -
  6. TODO Savoir si on doit débarrasser le lave vaisselle
    7. -
  7. TODO Débarrasser le lave vaisselle
    8. -
-
-
-

1.1.3 TODO Zones communes [0/5]

-
-
-
    -
  1. TODO Salon/cuisine [0/6]
    -
      -
    1. TODO Si le sol est sale lancer le robot
      2. -
    2. TODO Savoir vider et nettoyer le robot
      3. -
    3. TODO Si la poubelle est pleine, jeter la poubelle, savoir la remplacer
      4. -
    4. TODO Si la poubelle coule et salit le sol, savoir nettoyer le sol
      5. -
    5. TODO Savoir nettoyer la poubelle si elle est sale
      6. -
    6. TODO Savoir passer l'aspirateur et la pièce
      7. -
    -
    2. -
  2. TODO Savoir s'il faut arroser les plantes et les arroser si nécessaire
    3. -
  3. TODO Salle de bain [0/7]
    -
      -
    1. TODO Savoir ranger sa sale de bain
      2. -
    2. TODO Savoir plier et ranger sa serviette
      3. -
    3. TODO Nettoyer le sol après la douche
      4. -
    4. TODO Nettoyer le siphon de la douche si nécessaire
      5. -
    5. TODO Nettoyer le lavabo
      6. -
    6. TODO Savoir ranger les produit d'hygiène, jeter et prévoir
      7. -
    7. TODO Savoir utiliser les produits d'entretiens
      8. -
    -
    4. -
  4. TODO Toilettes [0/4]
    -
      -
    1. TODO Jeter les rouleau usagés
      2. -
    2. TODO Nettoyer le sol sale des toilettes si besoin
      3. -
    3. TODO Vérifier et nettoyer les traces sous l'abattant
      4. -
    4. TODO Savoir acheter du papier toilette (ne pas attendre qu'il soit trop tard)
      5. -
    -
    5. -
  5. TODO Entrée [0/4]
    -
      -
    1. TODO ranger ses chaussures dès l'entrée dans l'appartement
      2. -
    2. TODO pendre ses manteaux/gilets dans la penderie
      3. -
    3. TODO ranger ses bonnets / gants / accessoires dans la penderie
      4. -
    4. TODO ramasser et ranger ce qui traîne
      5. -
    -
    6. -
-
-
-
-

1.2 TODO Hygiène [0/4]

-
-
-
-

1.2.1 TODO Se brosser les dents

-
-
-

1.2.2 TODO Se doucher

-
-
-

1.2.3 TODO Dîner si possible en famille

-
-
-

1.2.4 TODO Se laver les mains avant de manger et de mettre la table

-
-
-
-

1.3 TODO Travail scolaire / permis / obligations diverses [0/2]

-
-
-
-

1.3.1 TODO Se lever à l'heure pour [0/7]

-
-
-
    -
  1. TODO prendre le petit déjeuner
    2. -
  2. TODO nettoyer le petit déjeuner
    3. -
  3. TODO faire son lit
    4. -
  4. TODO ranger sa chambre
    5. -
  5. TODO mettre ses affaires sales au sale
    6. -
  6. TODO avoir ses affaires scolaires prêtes
    7. -
  7. TODO préparer sa gamelle/ses en cas
    8. -
-
-
-

1.3.2 TODO Après les cours [0/4]

-
-
-
    -
  1. TODO réviser le code
    2. -
  2. TODO réviser le travail scolaire
    3. -
  3. TODO ranger ses livres et cahier
    4. -
  4. TODO ranger ses affaires de sport
    5. -
-
-
-
-