From 774aff5f7d60725062aed57cdf5733a8ab9b5b11 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 14 Feb 2020 11:22:17 +0100
Subject: [PATCH 01/74] docs: update Light Client Protocol page (#4405)

* docs: update Light Client Protocol page

Closes #4331

* one way to get hash & height
---
 cmd/tendermint/commands/lite.go               | 18 ++----
 docs/tendermint-core/light-client-protocol.md | 57 ++++++++++++++-----
 lite2/doc.go                                  | 15 +++--
 3 files changed, 58 insertions(+), 32 deletions(-)

diff --git a/cmd/tendermint/commands/lite.go b/cmd/tendermint/commands/lite.go
index f27c34cf1..8477b46ed 100644
--- a/cmd/tendermint/commands/lite.go
+++ b/cmd/tendermint/commands/lite.go
@@ -25,13 +25,12 @@ import (
 // LiteCmd represents the base command when called without any subcommands
 var LiteCmd = &cobra.Command{
 	Use:   "lite",
-	Short: "Run lite-client proxy server, verifying tendermint rpc",
-	Long: `This node will run a secure proxy to a tendermint rpc server.
+	Short: "Run a light client proxy server, verifying Tendermint rpc",
+	Long: `Run a light client proxy server, verifying Tendermint rpc.
 
 All calls that can be tracked back to a block header by a proof
-will be verified before passing them back to the caller. Other that
-that it will present the same interface as a full tendermint node,
-just with added trust and running locally.`,
+will be verified before passing them back to the caller. Other than
+that, it will present the same interface as a full Tendermint node.`,
 	RunE:         runProxy,
 	SilenceUsage: true,
 }
@@ -52,27 +51,20 @@ var (
 func init() {
 	LiteCmd.Flags().StringVar(&listenAddr, "laddr", "tcp://localhost:8888",
 		"Serve the proxy on the given address")
-
+	LiteCmd.Flags().StringVar(&chainID, "chain-id", "tendermint", "Specify the Tendermint chain ID")
 	LiteCmd.Flags().StringVar(&primaryAddr, "primary", "tcp://localhost:26657",
 		"Connect to a Tendermint node at this address")
-
 	LiteCmd.Flags().StringVar(&witnessesAddrs, "witnesses", "",
 		"Tendermint nodes to cross-check the primary node, comma-separated")
-
-	LiteCmd.Flags().StringVar(&chainID, "chain-id", "tendermint", "Specify the Tendermint chain ID")
-
 	LiteCmd.Flags().StringVar(&home, "home-dir", ".tendermint-lite", "Specify the home directory")
 	LiteCmd.Flags().IntVar(
 		&maxOpenConnections,
 		"max-open-connections",
 		900,
 		"Maximum number of simultaneous connections (including WebSocket).")
-
 	LiteCmd.Flags().DurationVar(&trustingPeriod, "trusting-period", 168*time.Hour,
 		"Trusting period. Should be significantly less than the unbonding period")
-
 	LiteCmd.Flags().Int64Var(&trustedHeight, "trusted-height", 1, "Trusted header's height")
-
 	LiteCmd.Flags().BytesHexVar(&trustedHash, "trusted-hash", []byte{}, "Trusted header's hash")
 }
 
diff --git a/docs/tendermint-core/light-client-protocol.md b/docs/tendermint-core/light-client-protocol.md
index 1296fa471..4537412c1 100644
--- a/docs/tendermint-core/light-client-protocol.md
+++ b/docs/tendermint-core/light-client-protocol.md
@@ -4,20 +4,19 @@ order: 9
 
 # Light Client Protocol
 
-Light clients are an important part of the complete blockchain system
-for most applications. Tendermint provides unique speed and security
-properties for light client applications.
+Light clients are an important part of the complete blockchain system for most
+applications. Tendermint provides unique speed and security properties for
+light client applications.
 
 See our [lite
-package](https://godoc.org/github.com/tendermint/tendermint/lite).
+package](https://pkg.go.dev/github.com/tendermint/tendermint/lite2?tab=doc).
 
 ## Overview
 
-The objective of the light client protocol is to get a
-commit for a recent block
-hash where the commit includes a
-majority of signatures from the last known validator set. From there,
-all the application state is verifiable with [merkle
+The objective of the light client protocol is to get a commit for a recent
+block hash where the commit includes a majority of signatures from the last
+known validator set. From there, all the application state is verifiable with
+[merkle
 proofs](https://github.com/tendermint/spec/blob/953523c3cb99fdb8c8f7a2d21e3a99094279e9de/spec/blockchain/encoding.md#iavl-tree).
 
 ## Properties
@@ -27,8 +26,38 @@ proofs](https://github.com/tendermint/spec/blob/953523c3cb99fdb8c8f7a2d21e3a9909
 - You get the full speed benefits of Tendermint; transactions
   commit instantly.
 - You can get the most recent version of the application state
-  non-interactively (without committing anything to the blockchain).
-  For example, this means that you can get the most recent value of a
-  name from the name-registry without worrying about fork censorship
-  attacks, without posting a commit and waiting for confirmations.
-  It's fast, secure, and free!
+  non-interactively (without committing anything to the blockchain). For
+  example, this means that you can get the most recent value of a name from the
+  name-registry without worrying about fork censorship attacks, without posting
+  a commit and waiting for confirmations. It's fast, secure, and free!
+
+## Where to obtain trusted height & hash?
+
+https://pkg.go.dev/github.com/tendermint/tendermint/lite2?tab=doc#TrustOptions
+
+One way to obtain semi-trusted hash & height is to query multiple full nodes
+and compare their hashes:
+
+```sh
+$ curl -s https://233.123.0.140:26657:26657/commit | jq "{height: .result.signed_header.header.height, hash: .result.signed_header.commit.block_id.hash}"
+{
+  "height": "273",
+  "hash": "188F4F36CBCD2C91B57509BBF231C777E79B52EE3E0D90D06B1A25EB16E6E23D"
+}
+```
+
+## HTTP proxy
+
+Tendermint comes with a built-in `tendermint lite` command, which can be used
+to run a light client proxy server, verifying Tendermint rpc. All calls that
+can be tracked back to a block header by a proof will be verified before
+passing them back to the caller. Other than that, it will present the same
+interface as a full Tendermint node.
+
+```sh
+$ tendermint lite --chain-id=supernova --primary=tcp://233.123.0.140:26657 \
+  --witnesses=tcp://179.63.29.15:26657,tcp://144.165.223.135:26657 \
+  --trusted-height=10 --trusted-hash=37E9A6DD3FA25E83B22C18835401E8E56088D0D7ABC6FD99FCDC920DD76C1C57
+```
+
+For additional options, run `tendermint lite --help`.
diff --git a/lite2/doc.go b/lite2/doc.go
index 920032f36..aa280e64f 100644
--- a/lite2/doc.go
+++ b/lite2/doc.go
@@ -76,24 +76,29 @@ Example usage:
 				Hash:   header.Hash(),
 			},
 			httpp.New(chainID, "tcp://localhost:26657"),
+			[]provider.Provider{httpp.New(chainID, "tcp://witness1:26657")},
 			dbs.New(db, chainID),
 		)
 
-		err = c.VerifyHeaderAtHeight(101, time.Now())
+		err = c.Start()
 		if err != nil {
-			fmt.Println("retry?")
+			// return err
+			t.Fatal(err)
 		}
+		defer c.Stop()
 
 		h, err := c.TrustedHeader(101)
 		if err != nil {
-			fmt.Println("retry?")
+			// handle error
 		}
 		fmt.Println("got header", h)
 
+Check out other examples in example_test.go
+
 ## 2. Pure functions to verify a new header (see verifier.go)
 
 Verify function verifies a new header against some trusted header. See
-https://github.com/tendermint/spec/blob/master/spec/consensus/light-client.md
+https://github.com/tendermint/spec/blob/master/spec/consensus/light-client/verification.md
 for details.
 
 ## 3. Secure RPC proxy
@@ -105,7 +110,7 @@ as a wrapper, which verifies all the headers, using a light client connected to
 some other node.
 
 See
-https://github.com/tendermint/tendermint/blob/master/cmd/tendermint/commands/lite.go
+https://docs.tendermint.com/master/tendermint-core/light-client-protocol.html
 for usage example.
 */
 package lite

From 3b5794ffe97fd94538eee9e3d013d6046eb72057 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 14 Feb 2020 11:35:14 +0100
Subject: [PATCH 02/74] adr: light client implementation (#4397)

* adr: light client implementation

Closes #2133

* note on chain IDs

* explain why witnesses are required

* if chain forks maliciously, chain ID stays the same

* add a note about min witnesses while cross-checking
---
 docs/architecture/README.md                   |   3 +
 .../adr-046-light-client-implementation.md    | 146 ++++++++++++++++++
 2 files changed, 149 insertions(+)
 create mode 100644 docs/architecture/adr-046-light-client-implementation.md

diff --git a/docs/architecture/README.md b/docs/architecture/README.md
index 7055a3676..9b3c2f661 100644
--- a/docs/architecture/README.md
+++ b/docs/architecture/README.md
@@ -64,5 +64,8 @@ Note the context/background should be written in the present tense.
 - [ADR-039-Peer-Behaviour](./adr-039-peer-behaviour.md)
 - [ADR-041-Proposer-Selection-via-ABCI](./adr-041-proposer-selection-via-abci.md)
 - [ADR-043-Blockchain-RiRi-Org](./adr-043-blockchain-riri-org.md)
+- [ADR-044-Lite-Client-With-Weak-Subjectivity](./adr-044-lite-client-with-weak-subjectivity.md)
+- [ADR-045-ABCI-Evidence](./adr-045-abci-evidence.md)
+- [ADR-046-Light-Client-Implementation](./adr-046-light-client-implementation.md)
 - [ADR-051-Double-Signing-Risk-Reduction](./adr-051-double-signing-risk-reduction.md)
 - [ADR-052-Tendermint-Mode](./adr-052-tendermint-mode.md)
diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
new file mode 100644
index 000000000..11dc79fb9
--- /dev/null
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -0,0 +1,146 @@
+# ADR 046: Lite Client Implementation
+
+## Changelog
+* 13-02-2020: Initial draft
+
+## Context
+
+A `Client` struct represents a light client, connected to a single blockchain.
+As soon as it's started (via `Start`), it tries to update to the latest header
+(using bisection algorithm by default).
+
+Cleaning routine is also started to remove headers outside of trusting period.
+NOTE: since it's periodic, we still need to check header is not expired in
+`TrustedHeader`, `TrustedValidatorSet` methods (and others which are using the
+latest trusted header).
+
+The user has an option to manually verify headers using `VerifyHeader` and
+`VerifyHeaderAtHeight` methods. To avoid races, `UpdatePeriod(0)` needs to be
+passed when initializing the light client (it turns off the auto update).
+
+```go
+type Client interface {
+	// start and stop updating & cleaning goroutines
+	Start() error
+	Stop()
+	Cleanup() error
+
+	// get trusted headers & validators
+	TrustedHeader(height int64, now time.Time) (*types.SignedHeader, error)
+	TrustedValidatorSet(height int64, now time.Time) (*types.ValidatorSet, error)
+	LastTrustedHeight() (int64, error)
+	FirstTrustedHeight() (int64, error)
+
+	// query configuration options
+	ChainID() string
+	Primary() provider.Provider
+	Witnesses() []provider.Provider
+
+	// verify new headers
+	VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error)
+	VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error
+}
+```
+
+A new light client can either be created from scratch (via `NewClient`) or
+using the trusted store (via `NewClientFromTrustedStore`). When there's some
+data in the trusted store and `NewClient` is called, the light client will a)
+check if stored header is more recent b) optionally ask the user whenever it
+should rollback (no confirmation required by default).
+
+```go
+func NewClient(
+	chainID string,
+	trustOptions TrustOptions,
+	primary provider.Provider,
+	witnesses []provider.Provider,
+	trustedStore store.Store,
+	options ...Option) (*Client, error) {
+```
+
+`witnesses` as argument (as opposite to `Option`) is an intentional choice,
+made to increase security by default. At least one witness is required,
+although, right now, the light client does not check that primary != witness.
+When cross-checking a new header with witnesses, minimum number of witnesses
+required to respond: 1.
+
+Due to bisection algorithm nature, some headers might be skipped. If the light
+client does not have a header for height `X` and `TrustedHeader(X)` or
+`TrustedValidatorSet(X)` methods are called, it will download the header from
+primary provider and perform a backwards verification.
+
+```go
+type Provider interface {
+	ChainID() string
+
+	SignedHeader(height int64) (*types.SignedHeader, error)
+	ValidatorSet(height int64) (*types.ValidatorSet, error)
+}
+```
+
+Provider is a full node usually, but can be another light client. The above
+interface is thin and can accommodate many implementations.
+
+If provider (primary or witness) becomes unavailable for a prolonged period of
+time, it will be removed to ensure smooth operation.
+
+Both `Client` and providers expose chain ID to track if there are on the same
+chain. Note, when chain upgrades or intentionally forks, chain ID changes.
+
+The light client stores headers & validators in the trusted store:
+
+```go
+type Store interface {
+	SaveSignedHeaderAndNextValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error
+	DeleteSignedHeaderAndNextValidatorSet(height int64) error
+
+	SignedHeader(height int64) (*types.SignedHeader, error)
+	ValidatorSet(height int64) (*types.ValidatorSet, error)
+
+	LastSignedHeaderHeight() (int64, error)
+	FirstSignedHeaderHeight() (int64, error)
+
+	SignedHeaderAfter(height int64) (*types.SignedHeader, error)
+}
+```
+
+At the moment, the only implementation is the `db` store (wrapper around the KV
+database, used in Tendermint). In the future, remote adapters are possible
+(e.g. `Postgresql`).
+
+```go
+func Verify(
+	chainID string,
+	h1 *types.SignedHeader,
+	h1NextVals *types.ValidatorSet,
+	h2 *types.SignedHeader,
+	h2Vals *types.ValidatorSet,
+	trustingPeriod time.Duration,
+	now time.Time,
+	trustLevel tmmath.Fraction) error {
+```
+
+`Verify` pure function is exposed for a header verification. It handles both
+cases of adjacent and non-adjacent headers. In the former case, it compares the
+hashes directly (2/3+ signed transition). Otherwise, it verifies 1/3+
+(`trustLevel`) of trusted validators are still present in new validators.
+
+## Status
+
+Accepted.
+
+## Consequences
+
+### Positive
+
+* single `Client` struct, which is easy to use
+* flexible interfaces for header providers and trusted storage
+
+### Negative
+
+* `Verify` needs to be aligned with the current spec
+
+### Neutral
+
+* `Verify` function might be misused (called with non-adjacent headers in
+  incorrectly implemented sequential verification)

From 5f5e0e1d027d42d8ed3516d520ddaa10830ffc9e Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 14 Feb 2020 14:41:18 +0100
Subject: [PATCH 03/74] makefile: place phony markers after targets (#4408)

The .PHONY targets in the Makefile are usually placed far away from the actual targets, and thus aren't always updated. Placing the .PHONY targets right next to the targets they cover make them more visible and thus more likely to be updated when necessary.
---
 Makefile | 39 ++++++++++++++++++++++++++++-----------
 tests.mk | 19 +++++++++++++++++--
 tools.mk | 13 +++++++++++--
 3 files changed, 56 insertions(+), 15 deletions(-)

diff --git a/Makefile b/Makefile
index 610a0c6b5..5557a87ae 100644
--- a/Makefile
+++ b/Makefile
@@ -6,6 +6,7 @@ LD_FLAGS = -X github.com/tendermint/tendermint/version.GitCommit=`git rev-parse
 BUILD_FLAGS = -mod=readonly -ldflags "$(LD_FLAGS)"
 
 all: check build test install
+.PHONY: all
 
 # The below include contains the tools.
 include tools.mk
@@ -17,24 +18,30 @@ include tests.mk
 
 build:
 	CGO_ENABLED=0 go build $(BUILD_FLAGS) -tags $(BUILD_TAGS) -o $(OUTPUT) ./cmd/tendermint/
+.PHONY: build
 
 build_c:
 	CGO_ENABLED=1 go build $(BUILD_FLAGS) -tags "$(BUILD_TAGS) cleveldb" -o $(OUTPUT) ./cmd/tendermint/
+.PHONY: build_c
 
 build_race:
 	CGO_ENABLED=1 go build -race $(BUILD_FLAGS) -tags $(BUILD_TAGS) -o $(OUTPUT) ./cmd/tendermint
+.PHONY: build_race
 
 install:
 	CGO_ENABLED=0 go install $(BUILD_FLAGS) -tags $(BUILD_TAGS) ./cmd/tendermint
+.PHONY: install
 
 install_c:
 	CGO_ENABLED=1 go install $(BUILD_FLAGS) -tags "$(BUILD_TAGS) cleveldb" ./cmd/tendermint
+.PHONY: install_c
 
 ###############################################################################
 ###                                Protobuf                                 ###
 ###############################################################################
 
 proto-all: proto-gen proto-lint proto-check-breaking
+.PHONY: proto-all
 
 proto-gen:
 	## If you get the following error,
@@ -43,14 +50,15 @@ proto-gen:
 	## Note the $< here is substituted for the %.proto
 	## Note the $@ here is substituted for the %.pb.go
 	@sh scripts/protocgen.sh
+.PHONY: proto-gen
 
 proto-lint:
 	@buf check lint --error-format=json
+.PHONY: proto-lint
 
 proto-check-breaking:
 	@buf check breaking --against-input '.git#branch=master'
-
-.PHONY: proto-all proto-gen proto-lint proto-check-breaking
+.PHONY: proto-check-breaking
 
 ###############################################################################
 ###                              Build ABCI                                 ###
@@ -58,9 +66,11 @@ proto-check-breaking:
 
 build_abci:
 	@go build -mod=readonly -i ./abci/cmd/...
+.PHONY: build_abci
 
 install_abci:
 	@go install -mod=readonly ./abci/cmd/...
+.PHONY: install_abci
 
 ###############################################################################
 ###                              Distribution                               ###
@@ -70,6 +80,7 @@ install_abci:
 # TODO add abci to these scripts
 dist:
 	@BUILD_TAGS=$(BUILD_TAGS) sh -c "'$(CURDIR)/scripts/dist.sh'"
+.PHONY: dist
 
 go-mod-cache: go.sum
 	@echo "--> Download go modules to local cache"
@@ -85,12 +96,14 @@ draw_deps:
 	@# requires brew install graphviz or apt-get install graphviz
 	go get github.com/RobotsAndPencils/goviz
 	@goviz -i github.com/tendermint/tendermint/cmd/tendermint -d 3 | dot -Tpng -o dependency-graph.png
+.PHONY: draw_deps
 
 get_deps_bin_size:
 	@# Copy of build recipe with additional flags to perform binary size analysis
 	$(eval $(shell go build -work -a $(BUILD_FLAGS) -tags $(BUILD_TAGS) -o $(OUTPUT) ./cmd/tendermint/ 2>&1))
 	@find $(WORK) -type f -name "*.a" | xargs -I{} du -hxs "{}" | sort -rh | sed -e s:${WORK}/::g > deps_bin_size.log
 	@echo "Results can be found here: $(CURDIR)/deps_bin_size.log"
+.PHONY: get_deps_bin_size
 
 ###############################################################################
 ###                                  Libs                                   ###
@@ -104,11 +117,13 @@ gen_certs: clean_certs
 	mv out/server.crt rpc/lib/server/test.crt
 	mv out/server.key rpc/lib/server/test.key
 	rm -rf out
+.PHONY: gen_certs
 
 # deletes generated certificates
 clean_certs:
 	rm -f rpc/lib/server/test.crt
 	rm -f rpc/lib/server/test.key
+.PHONY: clean_certs
 
 ###############################################################################
 ###                  Formatting, linting, and vetting                       ###
@@ -116,10 +131,12 @@ clean_certs:
 
 fmt:
 	@go fmt ./...
+.PHONY: fmt
 
 lint:
 	@echo "--> Running linter"
 	@golangci-lint run
+.PHONY: lint
 
 DESTINATION = ./index.html.md
 
@@ -135,6 +152,7 @@ build-docs:
 		cp -r .vuepress/dist/* ~/output/$${p}/ ; \
 		cp ~/output/$${p}/index.html ~/output ; \
 	done < versions ;
+.PHONY: build-docs
 
 sync-docs:
 	cd ~/output && \
@@ -152,6 +170,7 @@ build-docker:
 	cp $(OUTPUT) DOCKER/tendermint
 	docker build --label=tendermint --tag="tendermint/tendermint" DOCKER
 	rm -rf DOCKER/tendermint
+.PHONY: build-docker
 
 ###############################################################################
 ###                       Local testnet using docker                        ###
@@ -160,9 +179,11 @@ build-docker:
 # Build linux binary on other platforms
 build-linux: tools
 	GOOS=linux GOARCH=amd64 $(MAKE) build
+.PHONY: build-linux
 
 build-docker-localnode:
 	@cd networks/local && make
+.PHONY: build-docker-localnode
 
 # Runs `make build_c` from within an Amazon Linux (v2)-based Docker build
 # container in order to build an Amazon Linux-compatible binary. Produces a
@@ -170,15 +191,18 @@ build-docker-localnode:
 build_c-amazonlinux:
 	$(MAKE) -C ./DOCKER build_amazonlinux_buildimage
 	docker run --rm -it -v `pwd`:/tendermint tendermint/tendermint:build_c-amazonlinux
+.PHONY: build_c-amazonlinux
 
 # Run a 4-node testnet locally
 localnet-start: localnet-stop build-docker-localnode
 	@if ! [ -f build/node0/config/genesis.json ]; then docker run --rm -v $(CURDIR)/build:/tendermint:Z tendermint/localnode testnet --config /etc/tendermint/config-template.toml --v 4 --o . --populate-persistent-peers --starting-ip-address 192.167.10.2; fi
 	docker-compose up
+.PHONY: localnet-start
 
 # Stop testnet
 localnet-stop:
 	docker-compose down
+.PHONY: localnet-stop
 
 # Build hooks for dredd, to skip or add information on some steps
 build-contract-tests-hooks:
@@ -187,6 +211,7 @@ ifeq ($(OS),Windows_NT)
 else
 	go build -mod=readonly $(BUILD_FLAGS) -o build/contract_tests ./cmd/contract_tests
 endif
+.PHONY: build-contract-tests-hooks
 
 # Run a nodejs tool to test endpoints against a localnet
 # The command takes care of starting and stopping the network
@@ -195,12 +220,4 @@ endif
 # The binaries should be built beforehand
 contract-tests:
 	dredd
-
-# To avoid unintended conflicts with file names, always add to .PHONY
-# unless there is a reason not to.
-# https://www.gnu.org/software/make/manual/html_node/Phony-Targets.html
-.PHONY: check build build_race build_abci dist install install_abci check_tools tools update_tools draw_deps \
- 	protoc_abci protoc_libs gen_certs clean_certs grpc_dbserver fmt build-linux localnet-start \
- 	localnet-stop build-docker build-docker-localnode protoc_grpc protoc_all \
- 	build_c install_c test_with_deadlock cleanup_after_test_with_deadlock lint build-contract-tests-hooks contract-tests \
-	build_c-amazonlinux
+.PHONY: contract-tests
diff --git a/tests.mk b/tests.mk
index 72bba47e4..d7e305312 100644
--- a/tests.mk
+++ b/tests.mk
@@ -8,25 +8,30 @@ BINDIR ?= $(GOPATH)/bin
 ## required to be run first by most tests
 build_docker_test_image:
 	docker build -t tester -f ./test/docker/Dockerfile .
+.PHONY: build_docker_test_image
 
 ### coverage, app, persistence, and libs tests
 test_cover:
 	# run the go unit tests with coverage
 	bash test/test_cover.sh
+.PHONY: test_cover
 
 test_apps:
 	# run the app tests using bash
 	# requires `abci-cli` and `tendermint` binaries installed
 	bash test/app/test.sh
+.PHONY: test_apps
 
 test_abci_apps:
 	bash abci/tests/test_app/test.sh
+.PHONY: test_abci_apps
 
 test_abci_cli:
 	# test the cli against the examples in the tutorial at:
 	# ./docs/abci-cli.md
 	# if test fails, update the docs ^
 	@ bash abci/tests/test_cli/test.sh
+.PHONY: test_abci_cli
 
 test_persistence:
 	# run the persistence tests using bash
@@ -35,6 +40,7 @@ test_persistence:
 
 	# TODO undockerize
 	# bash test/persist/test_failure_indices.sh
+.PHONY: test_persistence
 
 test_p2p:
 	docker rm -f rsyslog || true
@@ -45,6 +51,7 @@ test_p2p:
 	# the `docker cp` takes a really long time; uncomment for debugging
 	#
 	# mkdir -p test/p2p/logs && docker cp rsyslog:/var/log test/p2p/logs
+.PHONY: test_p2p
 
 test_p2p_ipv6:
 	# IPv6 tests require Docker daemon with IPv6 enabled, e.g. in daemon.json:
@@ -63,6 +70,7 @@ test_p2p_ipv6:
 	# the `docker cp` takes a really long time; uncomment for debugging
 	#
 	# mkdir -p test/p2p/logs && docker cp rsyslog:/var/log test/p2p/logs
+.PHONY: test_p2p_ipv6
 
 test_integrations:
 	make build_docker_test_image
@@ -77,31 +85,38 @@ test_integrations:
 	make test_p2p
 	# Disabled by default since it requires Docker daemon with IPv6 enabled
 	#make test_p2p_ipv6
+.PHONY: test_integrations
 
 test_release:
 	@go test -tags release $(PACKAGES)
+.PHONY: test_release
 
 test100:
 	@for i in {1..100}; do make test; done
+.PHONY: test100
 
 vagrant_test:
 	vagrant up
 	vagrant ssh -c 'make test_integrations'
+.PHONY: vagrant_test
 
 ### go tests
 test:
 	@echo "--> Running go test"
 	@go test -p 1 $(PACKAGES)
+.PHONY: test
 
 test_race:
 	@echo "--> Running go test --race"
 	@go test -p 1 -v -race $(PACKAGES)
+.PHONY: test_race
 
 # uses https://github.com/sasha-s/go-deadlock/ to detect potential deadlocks
 test_with_deadlock:
 	make set_with_deadlock
 	make test
 	make cleanup_after_test_with_deadlock
+.PHONY: test_with_deadlock
 
 set_with_deadlock:
 	@echo "Get Goid"
@@ -111,6 +126,7 @@ set_with_deadlock:
 	find . -name "*.go" | grep -v "vendor/" | xargs -n 1 sed -i.bak 's/sync.RWMutex/deadlock.RWMutex/'
 	find . -name "*.go" | grep -v "vendor/" | xargs -n 1 sed -i.bak 's/sync.Mutex/deadlock.Mutex/'
 	find . -name "*.go" | grep -v "vendor/" | xargs -n 1 goimports -w
+.PHONY: set_with_deadlock
 
 # cleanes up after you ran test_with_deadlock
 cleanup_after_test_with_deadlock:
@@ -119,5 +135,4 @@ cleanup_after_test_with_deadlock:
 	find . -name "*.go" | grep -v "vendor/" | xargs -n 1 goimports -w
 	# cleans up the deps to not include the need libs
 	go mod tidy
-
-.PHONY: test_cover test_apps test_persistence test_p2p test test_race test_integrations test_release test100 vagrant_test
+.PHONY: cleanup_after_test_with_deadlock
diff --git a/tools.mk b/tools.mk
index 7761311a9..66c6f2978 100644
--- a/tools.mk
+++ b/tools.mk
@@ -51,25 +51,31 @@ PROTOBUF     	= $(TOOLS_DESTDIR)/protoc
 GOODMAN 			= $(TOOLS_DESTDIR)/goodman
 
 all: tools
+.PHONY: all
 
 tools: certstrap protobuf goodman
+.PHONY: tools
 
 check: check_tools
+.PHONY: check
 
 check_tools:
 	@# https://stackoverflow.com/a/25668869
 	@echo "Found tools: $(foreach tool,$(notdir $(GOTOOLS)),\
         $(if $(shell which $(tool)),$(tool),$(error "No $(tool) in PATH")))"
+.PHONY: check_tools
 
 certstrap: $(CERTSTRAP)
 $(CERTSTRAP):
 	@echo "Get Certstrap"
 	@go get github.com/square/certstrap@v1.2.0
+.PHONY: certstrap
 
 protobuf: $(PROTOBUF)
 $(PROTOBUF):
 	@echo "Get GoGo Protobuf"
 	@go get github.com/gogo/protobuf/protoc-gen-gogo@v1.3.1
+.PHONY: protobuf
 
 buf: protoc-gen-buf-check-breaking protoc-gen-buf-check-lint
 	@echo "Installing buf..."
@@ -77,6 +83,7 @@ buf: protoc-gen-buf-check-breaking protoc-gen-buf-check-lint
     "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/buf-${UNAME_S}-${UNAME_M}" \
     -o "${BIN}/buf" && \
 	chmod +x "${BIN}/buf"
+.PHONY: buf
 
 protoc-gen-buf-check-breaking:
 	@echo "Installing protoc-gen-buf-check-breaking..."
@@ -91,17 +98,20 @@ protoc-gen-buf-check-lint:
     "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/protoc-gen-buf-check-lint-${UNAME_S}-${UNAME_M}" \
     -o "${BIN}/protoc-gen-buf-check-lint" && \
 	chmod +x "${BIN}/protoc-gen-buf-check-lint"
+.PHONY: protoc-gen-buf-check-lint
 
 goodman: $(GOODMAN)
 $(GOODMAN):
 	@echo "Get Goodman"
 	@go get github.com/snikch/goodman/cmd/goodman@10e37e294daa3c9a90abded60ff9924bafab3888
+.PHONY: goodman
 
 tools-clean:
 	rm -f $(CERTSTRAP) $(PROTOBUF) $(GOX) $(GOODMAN)
 	rm -f tools-stamp
 	rm -rf /usr/local/include/google/protobuf
 	rm -f /usr/local/bin/protoc
+.PHONY: tooks-clean
 
 ###
 # Non Go tools
@@ -127,5 +137,4 @@ protoc:
 	@unzip -o $(PROTOC_ZIP) -d /usr/local bin/protoc
 	@unzip -o $(PROTOC_ZIP) -d /usr/local 'include/*'
 	@rm -f $(PROTOC_ZIP)
-
-.PHONY: all tools tools-clean protoc
+.PHONY: protoc

From 58620af5e06af709dfce279dc67a4d9b397709de Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Fri, 14 Feb 2020 14:52:50 +0100
Subject: [PATCH 04/74] lite2: modified sequence method to match bisection
 (#4403)

Currently the sequence function always starts from the trustedHeader and trustedNextVals stored in the lite client. Whereas the bisection one allows the method to be started from any combination of header and validator set. I opened up the sequence verification method to do the same
---
 lite2/client.go | 28 +++++++++++++++++-----------
 1 file changed, 17 insertions(+), 11 deletions(-)

diff --git a/lite2/client.go b/lite2/client.go
index 668a46203..ff43581ef 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -617,7 +617,7 @@ func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 	var err error
 	switch c.verificationMode {
 	case sequential:
-		err = c.sequence(newHeader, newVals, now)
+		err = c.sequence(c.trustedHeader, c.trustedNextVals, newHeader, newVals, now)
 	case skipping:
 		err = c.bisection(c.trustedHeader, c.trustedNextVals, newHeader, newVals, now)
 	default:
@@ -697,25 +697,30 @@ func (c *Client) cleanup(stopHeight int64) error {
 }
 
 // see VerifyHeader
-func (c *Client) sequence(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
+func (c *Client) sequence(
+	trustedHeader *types.SignedHeader,
+	trustedNextVals *types.ValidatorSet,
+	newHeader *types.SignedHeader,
+	newVals *types.ValidatorSet,
+	now time.Time) error {
 	// 1) Verify any intermediate headers.
 	var (
-		interimHeader *types.SignedHeader
-		nextVals      *types.ValidatorSet
-		err           error
+		interimHeader   *types.SignedHeader
+		interimNextVals *types.ValidatorSet
+		err             error
 	)
-	for height := c.trustedHeader.Height + 1; height < newHeader.Height; height++ {
+	for height := trustedHeader.Height + 1; height < newHeader.Height; height++ {
 		interimHeader, err = c.signedHeaderFromPrimary(height)
 		if err != nil {
 			return errors.Wrapf(err, "failed to obtain the header #%d", height)
 		}
 
-		c.logger.Debug("Verify newHeader against lastHeader",
+		c.logger.Debug("Verify newHeader against trustedHeader",
 			"lastHeight", c.trustedHeader.Height,
 			"lastHash", c.trustedHeader.Hash(),
 			"newHeight", interimHeader.Height,
 			"newHash", interimHeader.Hash())
-		err = Verify(c.chainID, c.trustedHeader, c.trustedNextVals, interimHeader, c.trustedNextVals,
+		err = Verify(c.chainID, trustedHeader, trustedNextVals, interimHeader, trustedNextVals,
 			c.trustingPeriod, now, c.trustLevel)
 		if err != nil {
 			return errors.Wrapf(err, "failed to verify the header #%d", height)
@@ -723,17 +728,18 @@ func (c *Client) sequence(newHeader *types.SignedHeader, newVals *types.Validato
 
 		// Update trusted header and vals.
 		if height == newHeader.Height-1 {
-			nextVals = newVals
+			interimNextVals = newVals
 		} else {
-			nextVals, err = c.validatorSetFromPrimary(height + 1)
+			interimNextVals, err = c.validatorSetFromPrimary(height + 1)
 			if err != nil {
 				return errors.Wrapf(err, "failed to obtain the vals #%d", height+1)
 			}
 		}
-		err = c.updateTrustedHeaderAndVals(interimHeader, nextVals)
+		err = c.updateTrustedHeaderAndVals(interimHeader, interimNextVals)
 		if err != nil {
 			return errors.Wrapf(err, "failed to update trusted state #%d", height)
 		}
+		trustedHeader, trustedNextVals = interimHeader, interimNextVals
 	}
 
 	// 2) Verify the new header.

From c56fd04ab44e42b9500ed181b483584bf0d5078f Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 14 Feb 2020 17:04:56 +0100
Subject: [PATCH 05/74] lite2: disconnect from bad nodes (#4388)

Closes #4385

* extract TrustOptions into its own file

* print trusted hash before asking whenever to rollback or not

so the user could reset the light client with the trusted header

* do not return an error if rollback is aborted

reason: we trust the old header presumably, so can continue from it.

* add note about time of initial header

* improve logging and add comments

* cross-check newHeader after LC verified it

* check if header is not nil

so we don't crash on the next line

* remove witness if it sends us incorrect header

* require at least one witness

* fix build and tests

* rename tests and assert for specific error

* wrote a test

* fix linter errors

* only check 1/3 if headers diverge
---
 lite2/client.go             | 174 ++++++++++++++++++------------------
 lite2/client_test.go        |  81 +++++++++++------
 lite2/provider/http/http.go |   5 ++
 lite2/trust_options.go      |  53 +++++++++++
 4 files changed, 201 insertions(+), 112 deletions(-)
 create mode 100644 lite2/trust_options.go

diff --git a/lite2/client.go b/lite2/client.go
index ff43581ef..717623cbb 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -9,7 +9,6 @@ import (
 
 	"github.com/pkg/errors"
 
-	"github.com/tendermint/tendermint/crypto/tmhash"
 	"github.com/tendermint/tendermint/libs/log"
 	tmmath "github.com/tendermint/tendermint/libs/math"
 	"github.com/tendermint/tendermint/lite2/provider"
@@ -17,50 +16,6 @@ import (
 	"github.com/tendermint/tendermint/types"
 )
 
-// TrustOptions are the trust parameters needed when a new light client
-// connects to the network or when an existing light client that has been
-// offline for longer than the trusting period connects to the network.
-//
-// The expectation is the user will get this information from a trusted source
-// like a validator, a friend, or a secure website. A more user friendly
-// solution with trust tradeoffs is that we establish an https based protocol
-// with a default end point that populates this information. Also an on-chain
-// registry of roots-of-trust (e.g. on the Cosmos Hub) seems likely in the
-// future.
-type TrustOptions struct {
-	// tp: trusting period.
-	//
-	// Should be significantly less than the unbonding period (e.g. unbonding
-	// period = 3 weeks, trusting period = 2 weeks).
-	//
-	// More specifically, trusting period + time needed to check headers + time
-	// needed to report and punish misbehavior should be less than the unbonding
-	// period.
-	Period time.Duration
-
-	// Header's Height and Hash must both be provided to force the trusting of a
-	// particular header.
-	Height int64
-	Hash   []byte
-}
-
-// ValidateBasic performs basic validation.
-func (opts TrustOptions) ValidateBasic() error {
-	if opts.Period <= 0 {
-		return errors.New("negative or zero period")
-	}
-	if opts.Height <= 0 {
-		return errors.New("negative or zero height")
-	}
-	if len(opts.Hash) != tmhash.Size {
-		return errors.Errorf("expected hash size to be %d bytes, got %d bytes",
-			tmhash.Size,
-			len(opts.Hash),
-		)
-	}
-	return nil
-}
-
 type mode byte
 
 const (
@@ -215,7 +170,7 @@ func NewClient(
 		}
 	}
 
-	if c.trustedHeader == nil || c.trustedHeader.Height != trustOptions.Height {
+	if c.trustedHeader == nil || c.trustedHeader.Height < trustOptions.Height {
 		if err := c.initializeWithTrustOptions(trustOptions); err != nil {
 			return nil, err
 		}
@@ -339,20 +294,21 @@ func (c *Client) checkTrustedHeaderUsingOptions(options TrustOptions) error {
 	case options.Height < c.trustedHeader.Height:
 		c.logger.Info("Client initialized with old header (trusted is more recent)",
 			"old", options.Height,
-			"trusted", c.trustedHeader.Height)
+			"trusted", c.trustedHeader.Height,
+			"trusted-hash", hash2str(c.trustedHeader.Hash()))
 
 		action := fmt.Sprintf(
 			"Rollback to %d (%X)? Note this will remove newer headers up to %d (%X)",
 			options.Height, options.Hash,
 			c.trustedHeader.Height, c.trustedHeader.Hash())
 		if c.confirmationFn(action) {
-			// remove all the headers ( options.Height, trustedHeader.Height ]
+			// remove all the headers (options.Height, trustedHeader.Height]
 			c.cleanup(options.Height + 1)
 
 			c.logger.Info("Rolled back to older header (newer headers were removed)",
 				"old", options.Height)
 		} else {
-			return errors.New("rollback aborted")
+			return nil
 		}
 
 		primaryHash = options.Hash
@@ -386,7 +342,9 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 		return err
 	}
 
-	// NOTE: Verify func will check if it's expired or not.
+	// NOTE: - Verify func will check if it's expired or not.
+	//       - h.Time is not being checked against time.Now() because we don't
+	//         want to add yet another argument to NewClient* functions.
 	if err := h.ValidateBasic(c.chainID); err != nil {
 		return err
 	}
@@ -400,12 +358,14 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 	if err != nil {
 		return err
 	}
+
 	if !bytes.Equal(h.ValidatorsHash, vals.Hash()) {
 		return errors.Errorf("expected header's validators (%X) to match those that were supplied (%X)",
 			h.ValidatorsHash,
 			vals.Hash(),
 		)
 	}
+
 	// Ensure that +2/3 of validators signed correctly.
 	err = vals.VerifyCommit(c.chainID, h.Commit.BlockID, h.Height, h.Commit)
 	if err != nil {
@@ -570,8 +530,6 @@ func (c *Client) ChainID() string {
 // If the header is not found by the primary provider,
 // provider.ErrSignedHeaderNotFound error is returned.
 func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error) {
-	c.logger.Info("VerifyHeaderAtHeight", "height", height)
-
 	if c.trustedHeader.Height >= height {
 		return nil, errors.Errorf("header at more recent height #%d exists", c.trustedHeader.Height)
 	}
@@ -603,17 +561,13 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // provider, provider.ErrSignedHeaderNotFound /
 // provider.ErrValidatorSetNotFound error is returned.
 func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
-	c.logger.Info("VerifyHeader", "height", newHeader.Hash(), "newVals", fmt.Sprintf("%X", newVals.Hash()))
+	c.logger.Info("VerifyHeader", "height", newHeader.Height, "hash", hash2str(newHeader.Hash()),
+		"vals", hash2str(newVals.Hash()))
 
 	if c.trustedHeader.Height >= newHeader.Height {
 		return errors.Errorf("header at more recent height #%d exists", c.trustedHeader.Height)
 	}
 
-	if err := c.compareNewHeaderWithWitnesses(newHeader); err != nil {
-		c.logger.Error("Error when comparing new header with one from a witness", "err", err)
-		return err
-	}
-
 	var err error
 	switch c.verificationMode {
 	case sequential:
@@ -624,6 +578,12 @@ func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 		panic(fmt.Sprintf("Unknown verification mode: %b", c.verificationMode))
 	}
 	if err != nil {
+		c.logger.Error("Can't verify", "err", err)
+		return err
+	}
+
+	if err := c.compareNewHeaderWithWitnesses(newHeader); err != nil {
+		c.logger.Error("Error when comparing new header with witnesses", "err", err)
 		return err
 	}
 
@@ -660,7 +620,9 @@ func (c *Client) Cleanup() error {
 	return c.cleanup(0)
 }
 
-// cleanup deletes all headers & validator sets between +stopHeight+ and latest height included
+// cleanup deletes all headers & validator sets between +stopHeight+ and latest
+// height included. It also sets trustedHeader (vals) to the latest header
+// (vals) if such exists.
 func (c *Client) cleanup(stopHeight int64) error {
 	// 1) Get the oldest height.
 	oldestHeight, err := c.trustedStore.FirstSignedHeaderHeight()
@@ -826,7 +788,8 @@ func (c *Client) updateTrustedHeaderAndVals(h *types.SignedHeader, nextVals *typ
 	return nil
 }
 
-// fetch header and validators for the given height from primary provider.
+// fetch header and validators for the given height (0 - latest) from primary
+// provider.
 func (c *Client) fetchHeaderAndValsAtHeight(height int64) (*types.SignedHeader, *types.ValidatorSet, error) {
 	h, err := c.signedHeaderFromPrimary(height)
 	if err != nil {
@@ -916,49 +879,75 @@ func (c *Client) backwards(toHeight int64, fromHeader *types.SignedHeader, now t
 func (c *Client) compareNewHeaderWithWitnesses(h *types.SignedHeader) error {
 	c.providerMutex.Lock()
 	defer c.providerMutex.Unlock()
-	// 0. Check witnesses exist
-	if len(c.witnesses) == 0 {
-		return errors.New("could not find any witnesses")
-	}
-
-	matchedHeader := false
 
+	// 1. Make sure AT LEAST ONE witness returns the same header.
+	headerMatched := false
+	witnessesToRemove := make([]int, 0)
 	for attempt := uint16(1); attempt <= c.maxRetryAttempts; attempt++ {
-		// 1. Loop through all witnesses.
-		for _, witness := range c.witnesses {
+		if len(c.witnesses) == 0 {
+			return errors.New("could not find any witnesses. please reset the light client")
+		}
 
-			// 2. Fetch the header.
+		for i, witness := range c.witnesses {
 			altH, err := witness.SignedHeader(h.Height)
 			if err != nil {
-				c.logger.Info("No Response from witness ", "witness", witness)
+				c.logger.Error("Failed to get a header from witness", "height", h.Height, "witness", witness)
+				continue
+			}
+
+			if err = altH.ValidateBasic(c.chainID); err != nil {
+				c.logger.Error("Witness sent us incorrect header", "err", err, "witness", witness)
+				witnessesToRemove = append(witnessesToRemove, i)
 				continue
 			}
 
-			// 3. Compare hashes.
 			if !bytes.Equal(h.Hash(), altH.Hash()) {
-				// TODO: One of the providers is lying. Send the evidence to fork
-				// accountability server.
+				if err = c.trustedNextVals.VerifyCommitTrusting(c.chainID, altH.Commit.BlockID,
+					altH.Height, altH.Commit, c.trustLevel); err != nil {
+					c.logger.Error("Witness sent us incorrect header", "err", err, "witness", witness)
+					witnessesToRemove = append(witnessesToRemove, i)
+					continue
+				}
+
+				// TODO: send the diverged headers to primary && all witnesses
+
 				return errors.Errorf(
 					"header hash %X does not match one %X from the witness %v",
 					h.Hash(), altH.Hash(), witness)
 			}
 
-			matchedHeader = true
-
+			headerMatched = true
 		}
 
-		// 4. Check that one responding witness has returned a matching header
-		if matchedHeader {
+		for _, idx := range witnessesToRemove {
+			c.removeWitness(idx)
+		}
+		witnessesToRemove = make([]int, 0)
+
+		if headerMatched {
 			return nil
 		}
 
+		// 2. Otherwise, sleep
 		time.Sleep(backoffTimeout(attempt))
-
 	}
 
 	return errors.New("awaiting response from all witnesses exceeded dropout time")
 }
 
+// NOTE: requires a providerMutex locked.
+func (c *Client) removeWitness(idx int) {
+	switch len(c.witnesses) {
+	case 0:
+		panic(fmt.Sprintf("wanted to remove %d element from empty witnesses slice", idx))
+	case 1:
+		c.witnesses = make([]provider.Provider, 0)
+	default:
+		c.witnesses[idx] = c.witnesses[len(c.witnesses)-1]
+		c.witnesses = c.witnesses[:len(c.witnesses)-1]
+	}
+}
+
 func (c *Client) removeNoLongerTrustedHeadersRoutine() {
 	defer c.routinesWaitGroup.Done()
 
@@ -1001,6 +990,10 @@ func (c *Client) RemoveNoLongerTrustedHeaders(now time.Time) {
 	}
 
 	// 3) Remove all headers that are outside of the trusting period.
+	//
+	// NOTE: even the latest header can be removed. it's okay because
+	// c.trustedHeader will retain it in memory so other funcs like VerifyHeader
+	// don't crash.
 	for height := oldestHeight; height <= latestHeight; height++ {
 		h, err := c.trustedStore.SignedHeader(height)
 		if err != nil {
@@ -1067,27 +1060,31 @@ func (c *Client) Update(now time.Time) error {
 			return err
 		}
 
-		c.logger.Info("Advanced to new state", "height", latestHeader.Height, "hash", latestHeader.Hash())
+		c.logger.Info("Advanced to new state", "height", latestHeader.Height, "hash", hash2str(latestHeader.Hash()))
 	}
 
 	return nil
 }
 
-// replaceProvider takes the first alternative provider and promotes it as the primary provider
+// replaceProvider takes the first alternative provider and promotes it as the
+// primary provider.
 func (c *Client) replacePrimaryProvider() error {
 	c.providerMutex.Lock()
 	defer c.providerMutex.Unlock()
-	if len(c.witnesses) == 0 {
-		return errors.Errorf("no witnesses left")
+
+	if len(c.witnesses) <= 1 {
+		return errors.Errorf("only one witness left. please reset the light client")
 	}
 	c.primary = c.witnesses[0]
 	c.witnesses = c.witnesses[1:]
 	c.logger.Info("New primary", "p", c.primary)
+
 	return nil
 }
 
-// signedHeaderFromPrimary retrieves the SignedHeader from the primary provider at the specified height.
-// Handles dropout by the primary provider by swapping with an alternative provider
+// signedHeaderFromPrimary retrieves the SignedHeader from the primary provider
+// at the specified height. Handles dropout by the primary provider by swapping
+// with an alternative provider.
 func (c *Client) signedHeaderFromPrimary(height int64) (*types.SignedHeader, error) {
 	for attempt := uint16(1); attempt <= c.maxRetryAttempts; attempt++ {
 		c.providerMutex.Lock()
@@ -1115,8 +1112,9 @@ func (c *Client) signedHeaderFromPrimary(height int64) (*types.SignedHeader, err
 	return c.signedHeaderFromPrimary(height)
 }
 
-// validatorSetFromPrimary retrieves the ValidatorSet from the primary provider at the specified height.
-// Handles dropout by the primary provider after 5 attempts by replacing it with an alternative provider
+// validatorSetFromPrimary retrieves the ValidatorSet from the primary provider
+// at the specified height. Handles dropout by the primary provider after 5
+// attempts by replacing it with an alternative provider.
 func (c *Client) validatorSetFromPrimary(height int64) (*types.ValidatorSet, error) {
 	for attempt := uint16(1); attempt <= c.maxRetryAttempts; attempt++ {
 		c.providerMutex.Lock()
@@ -1142,3 +1140,7 @@ func (c *Client) validatorSetFromPrimary(height int64) (*types.ValidatorSet, err
 func backoffTimeout(attempt uint16) time.Duration {
 	return time.Duration(500*attempt*attempt)*time.Millisecond + time.Duration(rand.Intn(1000))*time.Millisecond
 }
+
+func hash2str(hash []byte) string {
+	return fmt.Sprintf("%X", hash)
+}
diff --git a/lite2/client_test.go b/lite2/client_test.go
index b4823eaf9..e2931f323 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -55,7 +55,6 @@ var (
 )
 
 func TestClient_SequentialVerification(t *testing.T) {
-
 	testCases := []struct {
 		otherHeaders map[int64]*types.SignedHeader // all except ^
 		vals         map[int64]*types.ValidatorSet
@@ -176,7 +175,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 }
 
 func TestClient_SkippingVerification(t *testing.T) {
-
 	// required for 2nd test case
 	newKeys := genPrivKeys(4)
 	newVals := newKeys.ToValidators(10, 1)
@@ -249,7 +247,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 }
 
 func TestClientRemovesNoLongerTrustedHeaders(t *testing.T) {
-
 	c, err := NewClient(
 		chainID,
 		trustOptions,
@@ -291,7 +288,6 @@ func TestClientRemovesNoLongerTrustedHeaders(t *testing.T) {
 }
 
 func TestClient_Cleanup(t *testing.T) {
-
 	c, err := NewClient(
 		chainID,
 		trustOptions,
@@ -314,8 +310,7 @@ func TestClient_Cleanup(t *testing.T) {
 }
 
 // trustedHeader.Height == options.Height
-func TestClientRestoreTrustedHeaderAfterStartup1(t *testing.T) {
-
+func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 	// 1. options.Hash == trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
@@ -388,8 +383,7 @@ func TestClientRestoreTrustedHeaderAfterStartup1(t *testing.T) {
 }
 
 // trustedHeader.Height < options.Height
-func TestClientRestoreTrustedHeaderAfterStartup2(t *testing.T) {
-
+func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 	// 1. options.Hash == trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
@@ -472,8 +466,7 @@ func TestClientRestoreTrustedHeaderAfterStartup2(t *testing.T) {
 }
 
 // trustedHeader.Height > options.Height
-func TestClientRestoreTrustedHeaderAfterStartup3(t *testing.T) {
-
+func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 	// 1. options.Hash == trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
@@ -581,7 +574,6 @@ func TestClientRestoreTrustedHeaderAfterStartup3(t *testing.T) {
 }
 
 func TestClient_Update(t *testing.T) {
-
 	c, err := NewClient(
 		chainID,
 		trustOptions,
@@ -606,7 +598,6 @@ func TestClient_Update(t *testing.T) {
 }
 
 func TestClient_Concurrency(t *testing.T) {
-
 	c, err := NewClient(
 		chainID,
 		trustOptions,
@@ -654,8 +645,7 @@ func TestClient_Concurrency(t *testing.T) {
 	wg.Wait()
 }
 
-func TestProvider_Replacement(t *testing.T) {
-
+func TestClientReplacesPrimaryWithWitnessIfPrimaryIsUnavailable(t *testing.T) {
 	c, err := NewClient(
 		chainID,
 		trustOptions,
@@ -666,6 +656,7 @@ func TestProvider_Replacement(t *testing.T) {
 		Logger(log.TestingLogger()),
 		MaxRetryAttempts(1),
 	)
+
 	require.NoError(t, err)
 	err = c.Update(bTime.Add(2 * time.Hour))
 	require.NoError(t, err)
@@ -674,8 +665,7 @@ func TestProvider_Replacement(t *testing.T) {
 	assert.Equal(t, 1, len(c.Witnesses()))
 }
 
-func TestProvider_TrustedHeaderFetchesMissingHeader(t *testing.T) {
-
+func TestClient_TrustedHeaderFetchesMissingHeader(t *testing.T) {
 	c, err := NewClient(
 		chainID,
 		TrustOptions{
@@ -707,31 +697,29 @@ func TestProvider_TrustedHeaderFetchesMissingHeader(t *testing.T) {
 	assert.Nil(t, h)
 }
 
-func Test_NewClientFromTrustedStore(t *testing.T) {
-
+func TestClient_NewClientFromTrustedStore(t *testing.T) {
 	// 1) Initiate DB and fill with a "trusted" header
 	db := dbs.New(dbm.NewMemDB(), chainID)
 	err := db.SaveSignedHeaderAndNextValidatorSet(h1, vals)
 	require.NoError(t, err)
 
-	// 2) Initialize Lite Client from Trusted Store
 	c, err := NewClientFromTrustedStore(
 		chainID,
 		trustPeriod,
-		fullNode,
-		[]provider.Provider{fullNode},
+		deadNode,
+		[]provider.Provider{deadNode},
 		db,
 	)
 	require.NoError(t, err)
 
-	// 3) Check header exists through the lite clients eyes
+	// 2) Check header exists (deadNode is being used to ensure we're not getting
+	// it from primary)
 	h, err := c.TrustedHeader(1, bTime.Add(1*time.Second))
 	assert.NoError(t, err)
 	assert.EqualValues(t, 1, h.Height)
 }
 
-func TestCompareWithWitnesses(t *testing.T) {
-
+func TestClientUpdateErrorsIfAllWitnessesUnavailable(t *testing.T) {
 	c, err := NewClient(
 		chainID,
 		trustOptions,
@@ -743,7 +731,48 @@ func TestCompareWithWitnesses(t *testing.T) {
 		MaxRetryAttempts(1),
 	)
 	require.NoError(t, err)
-	err = c.Update(time.Now())
-	assert.Error(t, err)
 
+	err = c.Update(bTime.Add(2 * time.Hour))
+	if assert.Error(t, err) {
+		assert.Contains(t, err.Error(), "awaiting response from all witnesses exceeded dropout time")
+	}
+}
+
+func TestClientRemovesWitnessIfItSendsUsIncorrectHeader(t *testing.T) {
+	// straight invalid header
+	badProvider1 := mockp.New(
+		chainID,
+		map[int64]*types.SignedHeader{
+			3: {Header: nil, Commit: nil},
+		},
+		map[int64]*types.ValidatorSet{},
+	)
+
+	// less than 1/3 signed
+	badProvider2 := mockp.New(
+		chainID,
+		map[int64]*types.SignedHeader{
+			3: keys.GenSignedHeaderLastBlockID(chainID, 3, bTime.Add(1*time.Hour), nil, vals, vals,
+				[]byte("app_hash2"), []byte("cons_hash"), []byte("results_hash"),
+				len(keys), len(keys), types.BlockID{Hash: h2.Hash()}),
+		},
+		map[int64]*types.ValidatorSet{},
+	)
+
+	c, err := NewClient(
+		chainID,
+		trustOptions,
+		fullNode,
+		[]provider.Provider{badProvider1, badProvider2},
+		dbs.New(dbm.NewMemDB(), chainID),
+		UpdatePeriod(0),
+		Logger(log.TestingLogger()),
+	)
+	require.NoError(t, err)
+
+	err = c.Update(bTime.Add(2 * time.Hour))
+	if assert.Error(t, err) {
+		assert.Contains(t, err.Error(), "could not find any witnesses")
+	}
+	assert.Zero(t, 0, len(c.Witnesses()))
 }
diff --git a/lite2/provider/http/http.go b/lite2/provider/http/http.go
index bbe6e92ae..130bf0a24 100644
--- a/lite2/provider/http/http.go
+++ b/lite2/provider/http/http.go
@@ -1,6 +1,7 @@
 package http
 
 import (
+	"errors"
 	"fmt"
 	"strings"
 
@@ -68,6 +69,10 @@ func (p *http) SignedHeader(height int64) (*types.SignedHeader, error) {
 		return nil, err
 	}
 
+	if commit.Header == nil {
+		return nil, errors.New("header is nil")
+	}
+
 	// Verify we're still on the same chain.
 	if p.chainID != commit.Header.ChainID {
 		return nil, fmt.Errorf("expected chainID %s, got %s", p.chainID, commit.Header.ChainID)
diff --git a/lite2/trust_options.go b/lite2/trust_options.go
new file mode 100644
index 000000000..7bd36fe5c
--- /dev/null
+++ b/lite2/trust_options.go
@@ -0,0 +1,53 @@
+package lite
+
+import (
+	"time"
+
+	"github.com/pkg/errors"
+
+	"github.com/tendermint/tendermint/crypto/tmhash"
+)
+
+// TrustOptions are the trust parameters needed when a new light client
+// connects to the network or when an existing light client that has been
+// offline for longer than the trusting period connects to the network.
+//
+// The expectation is the user will get this information from a trusted source
+// like a validator, a friend, or a secure website. A more user friendly
+// solution with trust tradeoffs is that we establish an https based protocol
+// with a default end point that populates this information. Also an on-chain
+// registry of roots-of-trust (e.g. on the Cosmos Hub) seems likely in the
+// future.
+type TrustOptions struct {
+	// tp: trusting period.
+	//
+	// Should be significantly less than the unbonding period (e.g. unbonding
+	// period = 3 weeks, trusting period = 2 weeks).
+	//
+	// More specifically, trusting period + time needed to check headers + time
+	// needed to report and punish misbehavior should be less than the unbonding
+	// period.
+	Period time.Duration
+
+	// Header's Height and Hash must both be provided to force the trusting of a
+	// particular header.
+	Height int64
+	Hash   []byte
+}
+
+// ValidateBasic performs basic validation.
+func (opts TrustOptions) ValidateBasic() error {
+	if opts.Period <= 0 {
+		return errors.New("negative or zero period")
+	}
+	if opts.Height <= 0 {
+		return errors.New("negative or zero height")
+	}
+	if len(opts.Hash) != tmhash.Size {
+		return errors.Errorf("expected hash size to be %d bytes, got %d bytes",
+			tmhash.Size,
+			len(opts.Hash),
+		)
+	}
+	return nil
+}

From da8813071ba3cb9ecd3a78e5ff2e6ecd1468d4c7 Mon Sep 17 00:00:00 2001
From: Denis Fadeev <denis@fadeev.org>
Date: Sun, 16 Feb 2020 01:07:48 +0500
Subject: [PATCH 06/74] Docs staging (#4407)

* update theme

* Update version

* Updated Questions section in the footer

* Remove links to Riot chat

* Typo

* Add Discord link

Co-authored-by: Marko <marbar3778@yahoo.com>
---
 docs/.vuepress/config.js                      | 16 +----
 .../adr-051-double-signing-risk-reduction.md  |  2 +-
 docs/architecture/adr-052-tendermint-mode.md  |  2 +-
 docs/package-lock.json                        | 62 +++++++++----------
 docs/package.json                             | 11 ++--
 5 files changed, 35 insertions(+), 58 deletions(-)

diff --git a/docs/.vuepress/config.js b/docs/.vuepress/config.js
index dc7a200ce..55613252f 100644
--- a/docs/.vuepress/config.js
+++ b/docs/.vuepress/config.js
@@ -19,12 +19,6 @@ module.exports = {
     gutter: {
       title: "Help & Support",
       editLink: true,
-      chat: {
-        title: "Riot Chat",
-        text: "Chat with Tendermint developers on Riot Chat.",
-        url: "https://riot.im/app/#/room/#tendermint:matrix.org",
-        bg: "#222"
-      },
       forum: {
         title: "Tendermint Forum",
         text: "Join the Tendermint forum to learn more",
@@ -38,6 +32,7 @@ module.exports = {
       }
     },
     footer: {
+      questionsText: "Chat with Cosmos developers in [Discord](https://discordapp.com/channels/669268347736686612) or reach out on the [SDK Developer Forum](https://forum.cosmos.network/c/tendermint) to learn more.",
       logo: "/logo-bw.svg",
       textLink: {
         text: "tendermint.com",
@@ -95,10 +90,6 @@ module.exports = {
             {
               title: "Forum",
               url: "https://forum.cosmos.network/c/tendermint"
-            },
-            {
-              title: "Chat",
-              url: "https://riot.im/app/#/room/#tendermint:matrix.org"
             }
           ]
         },
@@ -138,11 +129,6 @@ module.exports = {
       }
     ]
   },
-  markdown: {
-    anchor: {
-      permalinkSymbol: ""
-    }
-  },
   plugins: [
     [
       "@vuepress/google-analytics",
diff --git a/docs/architecture/adr-051-double-signing-risk-reduction.md b/docs/architecture/adr-051-double-signing-risk-reduction.md
index 04ee41a67..ae663e8b5 100644
--- a/docs/architecture/adr-051-double-signing-risk-reduction.md
+++ b/docs/architecture/adr-051-double-signing-risk-reduction.md
@@ -27,7 +27,7 @@ We would like to suggest a double signing risk reduction method.
     2. If there exists votes from the validator's consensus key, exit state machine program
 - Configuration
     - We would like to suggest by introducing `double_sign_check_height` parameter in `config.toml` and cli, how many blocks state machine looks back to check votes
-    - `double_sign_check_height = {{ .Consensus.DoubleSignCheckHeight }}` in `config.toml`
+    - <span v-pre>`double_sign_check_height = {{ .Consensus.DoubleSignCheckHeight }}`</span> in `config.toml`
     - `tendermint node --double_sign_check_height` in cli
     - State machine ignore checking procedure when `vote-check-height == 0`
 
diff --git a/docs/architecture/adr-052-tendermint-mode.md b/docs/architecture/adr-052-tendermint-mode.md
index edf217a06..acd5028b4 100644
--- a/docs/architecture/adr-052-tendermint-mode.md
+++ b/docs/architecture/adr-052-tendermint-mode.md
@@ -42,7 +42,7 @@ We would like to suggest a simple Tendermint mode abstraction. These modes will
            - p2p/pex
 - Configuration, cli command
     - We would like to suggest by introducing `mode` parameter in `config.toml` and cli
-    - `mode = "{{ .BaseConfig.Mode }}"` in `config.toml`
+    - <span v-pre>`mode = "{{ .BaseConfig.Mode }}"`</span> in `config.toml`
     - `tendermint node --mode validator`  in cli
     - fullnode | validator | seed (default: "fullnode")
 - RPC modification
diff --git a/docs/package-lock.json b/docs/package-lock.json
index e5e653713..a5e8c0880 100644
--- a/docs/package-lock.json
+++ b/docs/package-lock.json
@@ -1157,12 +1157,6 @@
         "lodash.debounce": "^4.0.8"
       }
     },
-    "@vuepress/plugin-google-analytics": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/@vuepress/plugin-google-analytics/-/plugin-google-analytics-1.2.0.tgz",
-      "integrity": "sha512-0zol5D4Efb5GKel7ADO/s65MLtKSLnOEGkeWzuipkWomSQPzP7TJ3+/RcYBnGdyBFHd1BSpTUHGK0b/IGwM3UA==",
-      "dev": true
-    },
     "@vuepress/plugin-last-updated": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/@vuepress/plugin-last-updated/-/plugin-last-updated-1.3.0.tgz",
@@ -2378,9 +2372,9 @@
       }
     },
     "caniuse-lite": {
-      "version": "1.0.30001023",
-      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001023.tgz",
-      "integrity": "sha512-C5TDMiYG11EOhVOA62W1p3UsJ2z4DsHtMBQtjzp3ZsUglcQn62WOUgW0y795c7A5uZ+GCEIvzkMatLIlAsbNTA=="
+      "version": "1.0.30001027",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001027.tgz",
+      "integrity": "sha512-7xvKeErvXZFtUItTHgNtLgS9RJpVnwBlWX8jSo/BO8VsF6deszemZSkJJJA1KOKrXuzZH4WALpAJdq5EyfgMLg=="
     },
     "caseless": {
       "version": "0.12.0",
@@ -3571,9 +3565,9 @@
       "integrity": "sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0="
     },
     "electron-to-chromium": {
-      "version": "1.3.344",
-      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.344.tgz",
-      "integrity": "sha512-tvbx2Wl8WBR+ym3u492D0L6/jH+8NoQXqe46+QhbWH3voVPauGuZYeb1QAXYoOAWuiP2dbSvlBx0kQ1F3hu/Mw=="
+      "version": "1.3.346",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.346.tgz",
+      "integrity": "sha512-Yy4jF5hJd57BWmGPt0KjaXc25AmWZeQK75kdr4zIzksWVtiT6DwaNtvTb9dt+LkQKwUpvBfCyyPsXXtbY/5GYw=="
     },
     "elliptic": {
       "version": "6.5.2",
@@ -6086,9 +6080,9 @@
       "integrity": "sha512-xLIjLQmtym3QpoY9llBgApknl7pxAcN3WDRc2d3rwpl+/YvDZHPmKscGs+L6E05xf2KrCXPBvosWt7MZukwSpQ=="
     },
     "markdown-it-attrs": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/markdown-it-attrs/-/markdown-it-attrs-3.0.1.tgz",
-      "integrity": "sha512-fcpdmxdEsctDVJEunPyrirVtU/6zcTMxPxAu4Ofz51PKAa8vRMpmGQXsmXx1HTdIdUPoDonm/RhS/+jTNywj/Q=="
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/markdown-it-attrs/-/markdown-it-attrs-3.0.2.tgz",
+      "integrity": "sha512-q45vdXU9TSWaHgFkWEFM97YHEoCmOyG9csLLdv3oVC6ARjT77u4wfng9rRtSOMb5UpxzT7zTX5GBbwm15H40dw=="
     },
     "markdown-it-chain": {
       "version": "1.3.0",
@@ -6559,9 +6553,9 @@
       }
     },
     "node-releases": {
-      "version": "1.1.47",
-      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-1.1.47.tgz",
-      "integrity": "sha512-k4xjVPx5FpwBUj0Gw7uvFOTF4Ep8Hok1I6qjwL3pLfwe7Y0REQSAqOwwv9TWBCUtMHxcXfY4PgRLRozcChvTcA==",
+      "version": "1.1.48",
+      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-1.1.48.tgz",
+      "integrity": "sha512-Hr8BbmUl1ujAST0K0snItzEA5zkJTQup8VNTKNfT6Zw8vTJkIiagUPNfxHmgDOyfFYNfKAul40sD0UEYTvwebw==",
       "requires": {
         "semver": "^6.3.0"
       }
@@ -7630,11 +7624,11 @@
       }
     },
     "postcss-safe-parser": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/postcss-safe-parser/-/postcss-safe-parser-4.0.1.tgz",
-      "integrity": "sha512-xZsFA3uX8MO3yAda03QrG3/Eg1LN3EPfjjf07vke/46HERLZyHrTsQ9E1r1w1W//fWEhtYNndo2hQplN2cVpCQ==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/postcss-safe-parser/-/postcss-safe-parser-4.0.2.tgz",
+      "integrity": "sha512-Uw6ekxSWNLCPesSv/cmqf2bY/77z11O7jZGPax3ycZMFU/oi2DMH9i89AdHc1tRwFg/arFoEwX0IS3LCUxJh1g==",
       "requires": {
-        "postcss": "^7.0.0"
+        "postcss": "^7.0.26"
       }
     },
     "postcss-selector-parser": {
@@ -8276,9 +8270,9 @@
       "integrity": "sha1-79qpjqdFEyTQkrKyFjpqHXqaIUc="
     },
     "resolve": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.15.0.tgz",
-      "integrity": "sha512-+hTmAldEGE80U2wJJDC1lebb5jWqvTYAfm3YZ1ckk1gBr0MnCqUKlwK1e+anaFljIl+F5tR5IoZcm4ZDA1zMQw==",
+      "version": "1.15.1",
+      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.15.1.tgz",
+      "integrity": "sha512-84oo6ZTtoTUpjgNEr5SJyzQhzL72gaRodsSfyxC/AXRvwu0Yse9H8eF9IpGo7b8YetZhlI6v7ZQ6bKBFV/6S7w==",
       "requires": {
         "path-parse": "^1.0.6"
       }
@@ -10096,9 +10090,9 @@
       }
     },
     "vuepress-theme-cosmos": {
-      "version": "1.0.148",
-      "resolved": "https://registry.npmjs.org/vuepress-theme-cosmos/-/vuepress-theme-cosmos-1.0.148.tgz",
-      "integrity": "sha512-IVzX339e9k25YNC62UZPfkLg50IGCctvlI/TQF6s63eCdh+ayHOPLTFq5zAiYTpP09Dbz4tSC74cQyO3fUyPOQ==",
+      "version": "1.0.150",
+      "resolved": "https://registry.npmjs.org/vuepress-theme-cosmos/-/vuepress-theme-cosmos-1.0.150.tgz",
+      "integrity": "sha512-f4McVndkB+CqJ6mWpOG4UZSR14LJyXqwcgwoDoDUx149g2PKU3qI/AF5AcrM25+4UKMCXFKcJloQCl/aWq+1ig==",
       "requires": {
         "@cosmos-ui/vue": "^0.5.20",
         "axios": "^0.19.0",
@@ -10181,9 +10175,9 @@
       }
     },
     "webpack-chain": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/webpack-chain/-/webpack-chain-6.3.1.tgz",
-      "integrity": "sha512-PLWPY92p5Vj0hOylUGjRoRY7Kgrns5vmPFAQ9BpSHnBbVbh2akRQVUlbRb2mmGYRSY1FklTULtyVChNmcQjIVg==",
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/webpack-chain/-/webpack-chain-6.4.0.tgz",
+      "integrity": "sha512-f97PYqxU+9/u0IUqp/ekAHRhBD1IQwhBv3wlJo2nvyELpr2vNnUqO3XQEk+qneg0uWGP54iciotszpjfnEExFA==",
       "requires": {
         "deepmerge": "^1.5.2",
         "javascript-stringify": "^2.0.1"
@@ -10209,9 +10203,9 @@
       }
     },
     "webpack-dev-server": {
-      "version": "3.10.2",
-      "resolved": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-3.10.2.tgz",
-      "integrity": "sha512-pxZKPYb+n77UN8u9YxXT4IaIrGcNtijh/mi8TXbErHmczw0DtPnMTTjHj+eNjkqLOaAZM/qD7V59j/qJsEiaZA==",
+      "version": "3.10.3",
+      "resolved": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-3.10.3.tgz",
+      "integrity": "sha512-e4nWev8YzEVNdOMcNzNeCN947sWJNd43E5XvsJzbAL08kGc2frm1tQ32hTJslRS+H65LCb/AaUCYU7fjHCpDeQ==",
       "requires": {
         "ansi-html": "0.0.7",
         "bonjour": "^3.5.0",
diff --git a/docs/package.json b/docs/package.json
index 962531efd..8ce869057 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -4,19 +4,16 @@
   "description": "Welcome to the Tendermint Core documentation!",
   "main": "index.js",
   "dependencies": {
-    "vuepress-theme-cosmos": "^1.0.148"
-  },
-  "devDependencies": {
-    "@vuepress/plugin-google-analytics": "^1.2.0"
+    "vuepress-theme-cosmos": "^1.0.150"
   },
   "scripts": {
     "preserve": "./pre.sh",
-    "serve": "trap 'exit 0' SIGINT; vuepress dev",
+    "serve": "trap 'exit 0' SIGINT; vuepress dev --no-cache",
     "postserve": "./post.sh",
     "prebuild": "./pre.sh",
-    "build": "trap 'exit 0' SIGINT; vuepress build",
+    "build": "trap 'exit 0' SIGINT; vuepress build --no-cache",
     "postbuild": "./post.sh"
   },
   "author": "",
   "license": "ISC"
-}
+}
\ No newline at end of file

From 5ea1ff94d1317f9ea130a36333c27a7dc7a61186 Mon Sep 17 00:00:00 2001
From: Anthony <anthony@mesg.com>
Date: Mon, 17 Feb 2020 14:00:56 +0700
Subject: [PATCH 07/74] rpc: fix issue with multiple subscriptions (#4406)

Using the WebSocket server, when the same client calls multiple time the subscribe method, only the last subscription receives all the events of the previous ones.

example:

    subscription1 = tm.event = 'NewBlock'
    subscription2 = tm.event = 'Tx'

In this case, subscription2 will receive the new blocks but subscription1 will not.

This came from the WebSocket handler that had the declaration of the rpcrequest moved and so overridden for every request and given in the JSONReq client context (so the id of the subscription was not the right one).

This fixes the issue by simply declaring the rpcrequest inside the loop so every request will create a new object without overwriting the previous one.
---
 CHANGELOG_PENDING.md         | 2 ++
 rpc/lib/server/ws_handler.go | 5 ++---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index bf41c1b5b..3eea4b2a0 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -20,3 +20,5 @@ program](https://hackerone.com/tendermint).
 ### IMPROVEMENTS:
 
 ### BUG FIXES:
+
+- [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
diff --git a/rpc/lib/server/ws_handler.go b/rpc/lib/server/ws_handler.go
index 548a244cb..07f424b48 100644
--- a/rpc/lib/server/ws_handler.go
+++ b/rpc/lib/server/ws_handler.go
@@ -299,8 +299,6 @@ func (wsc *wsConnection) Context() context.Context {
 
 // Read from the socket and subscribe to or unsubscribe from events
 func (wsc *wsConnection) readRoutine() {
-	var request types.RPCRequest
-
 	defer func() {
 		if r := recover(); r != nil {
 			err, ok := r.(error)
@@ -308,7 +306,7 @@ func (wsc *wsConnection) readRoutine() {
 				err = fmt.Errorf("WSJSONRPC: %v", r)
 			}
 			wsc.Logger.Error("Panic in WSJSONRPC handler", "err", err, "stack", string(debug.Stack()))
-			wsc.WriteRPCResponse(types.RPCInternalError(request.ID, err))
+			wsc.WriteRPCResponse(types.RPCInternalError(types.JSONRPCIntID(-1), err))
 			go wsc.readRoutine()
 		}
 	}()
@@ -339,6 +337,7 @@ func (wsc *wsConnection) readRoutine() {
 				return
 			}
 
+			var request types.RPCRequest
 			err = json.Unmarshal(in, &request)
 			if err != nil {
 				wsc.WriteRPCResponse(types.RPCParseError(errors.Wrap(err, "error unmarshaling request")))

From f5901ea460e471d926c3f6875c19726526951a79 Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Tue, 18 Feb 2020 16:10:04 +0100
Subject: [PATCH 08/74] lite2: divide verify functions (#4412)

Closes #4398

* divided verify functions

* extacted method

* renamed functions. Created standard Verify function

* checked non-adjacency. separated VerifyCommit

* lint fixes

* fix godoc documentation for VerifyAdjacent and VerifyNonAdjacent

* add a comment about VerifyCommit being the last check

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 lite2/client.go        |   6 +-
 lite2/verifier.go      | 183 +++++++++++++++++++++++++++--------------
 lite2/verifier_test.go |  11 +--
 3 files changed, 131 insertions(+), 69 deletions(-)

diff --git a/lite2/client.go b/lite2/client.go
index 717623cbb..3c0a299d8 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -682,8 +682,8 @@ func (c *Client) sequence(
 			"lastHash", c.trustedHeader.Hash(),
 			"newHeight", interimHeader.Height,
 			"newHash", interimHeader.Hash())
-		err = Verify(c.chainID, trustedHeader, trustedNextVals, interimHeader, trustedNextVals,
-			c.trustingPeriod, now, c.trustLevel)
+		err = VerifyAdjacent(c.chainID, trustedHeader, interimHeader, trustedNextVals,
+			c.trustingPeriod, now)
 		if err != nil {
 			return errors.Wrapf(err, "failed to verify the header #%d", height)
 		}
@@ -705,7 +705,7 @@ func (c *Client) sequence(
 	}
 
 	// 2) Verify the new header.
-	return Verify(c.chainID, c.trustedHeader, c.trustedNextVals, newHeader, newVals, c.trustingPeriod, now, c.trustLevel)
+	return VerifyAdjacent(c.chainID, c.trustedHeader, newHeader, newVals, c.trustingPeriod, now)
 }
 
 // see VerifyHeader
diff --git a/lite2/verifier.go b/lite2/verifier.go
index d2f656e41..5491c8d91 100644
--- a/lite2/verifier.go
+++ b/lite2/verifier.go
@@ -11,106 +11,167 @@ import (
 )
 
 var (
-	// DefaultTrustLevel - new header can be trusted if at least one correct old
+	// DefaultTrustLevel - new header can be trusted if at least one correct
 	// validator signed it.
 	DefaultTrustLevel = tmmath.Fraction{Numerator: 1, Denominator: 3}
 )
 
-// Verify verifies the new header (h2) against the old header (h1). It ensures that:
+// VerifyNonAdjacent verifies non-adjacent untrustedHeader against
+// trustedHeader. It ensures that:
 //
-//	a) h1 can still be trusted (if not, ErrOldHeaderExpired is returned);
-//	b) h2 is valid;
-//	c) either h2.ValidatorsHash equals h1NextVals.Hash()
-//		 OR trustLevel ([1/3, 1]) of last trusted validators (h1NextVals) signed
-//		 correctly  (if not, ErrNewValSetCantBeTrusted is returned);
-//	c) more than 2/3 of new validators (h2Vals) have signed h2 (if not,
-//	   ErrNotEnoughVotingPowerSigned is returned).
-func Verify(
+//	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned);
+//	b) untrustedHeader is valid;
+//	c) trustLevel ([1/3, 1]) of trustedHeaderNextVals signed correctly
+//     (if not, ErrNewValSetCantBeTrusted is returned);
+//	d) more than 2/3 of untrustedVals have signed h2 (if not,
+//	   ErrNotEnoughVotingPowerSigned is returned);
+//  e) headers are non-adjacent.
+func VerifyNonAdjacent(
 	chainID string,
-	h1 *types.SignedHeader,
-	h1NextVals *types.ValidatorSet,
-	h2 *types.SignedHeader,
-	h2Vals *types.ValidatorSet,
+	trustedHeader *types.SignedHeader, // height=X
+	trustedNextVals *types.ValidatorSet, // height=X+1
+	untrustedHeader *types.SignedHeader, // height=Y
+	untrustedVals *types.ValidatorSet, // height=Y
 	trustingPeriod time.Duration,
 	now time.Time,
 	trustLevel tmmath.Fraction) error {
 
-	if err := ValidateTrustLevel(trustLevel); err != nil {
+	if untrustedHeader.Height == trustedHeader.Height+1 {
+		return errors.New("headers must be non adjacent in height")
+	}
+
+	if HeaderExpired(trustedHeader, trustingPeriod, now) {
+		return ErrOldHeaderExpired{trustedHeader.Time.Add(trustingPeriod), now}
+	}
+
+	if err := verifyNewHeaderAndVals(chainID, untrustedHeader, untrustedVals, trustedHeader, now); err != nil {
 		return err
 	}
 
-	// Ensure last header can still be trusted.
-	if HeaderExpired(h1, trustingPeriod, now) {
-		return ErrOldHeaderExpired{h1.Time.Add(trustingPeriod), now}
-	}
-
-	if err := verifyNewHeaderAndVals(chainID, h2, h2Vals, h1, now); err != nil {
-		return err
-	}
-
-	if h2.Height == h1.Height+1 {
-		if !bytes.Equal(h2.ValidatorsHash, h1NextVals.Hash()) {
-			err := errors.Errorf("expected old header next validators (%X) to match those from new header (%X)",
-				h1NextVals.Hash(),
-				h2.ValidatorsHash,
-			)
-			return err
-		}
-	} else {
-		// Ensure that +`trustLevel` (default 1/3) or more of last trusted validators signed correctly.
-		err := h1NextVals.VerifyCommitTrusting(chainID, h2.Commit.BlockID, h2.Height, h2.Commit, trustLevel)
-		if err != nil {
-			switch e := err.(type) {
-			case types.ErrNotEnoughVotingPowerSigned:
-				return ErrNewValSetCantBeTrusted{e}
-			default:
-				return e
-			}
+	// Ensure that +`trustLevel` (default 1/3) or more of last trusted validators signed correctly.
+	err := trustedNextVals.VerifyCommitTrusting(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
+		untrustedHeader.Commit, trustLevel)
+	if err != nil {
+		switch e := err.(type) {
+		case types.ErrNotEnoughVotingPowerSigned:
+			return ErrNewValSetCantBeTrusted{e}
+		default:
+			return e
 		}
 	}
 
 	// Ensure that +2/3 of new validators signed correctly.
-	err := h2Vals.VerifyCommit(chainID, h2.Commit.BlockID, h2.Height, h2.Commit)
-	if err != nil {
+	//
+	// NOTE: this should always be the last check because untrustedVals can be
+	// intentionaly made very large to DOS the light client. not the case for
+	// VerifyAdjacent, where validator set is known in advance.
+	if err := untrustedVals.VerifyCommit(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
+		untrustedHeader.Commit); err != nil {
 		return err
 	}
 
 	return nil
 }
 
-func verifyNewHeaderAndVals(
+// VerifyAdjacent verifies directly adjacent untrustedHeader against
+// trustedHeader. It ensures that:
+//
+//	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned);
+//	b) untrustedHeader is valid;
+//	c) untrustedHeader.ValidatorsHash equals trustedHeaderNextVals.Hash()
+//	d) more than 2/3 of new validators (untrustedVals) have signed h2 (if not,
+//	   ErrNotEnoughVotingPowerSigned is returned);
+//  e) headers are adjacent.
+func VerifyAdjacent(
 	chainID string,
-	h2 *types.SignedHeader,
-	h2Vals *types.ValidatorSet,
-	h1 *types.SignedHeader,
+	trustedHeader *types.SignedHeader, // height=X
+	untrustedHeader *types.SignedHeader, // height=X+1
+	untrustedVals *types.ValidatorSet, // height=X+1
+	trustingPeriod time.Duration,
 	now time.Time) error {
 
-	if err := h2.ValidateBasic(chainID); err != nil {
-		return errors.Wrap(err, "h2.ValidateBasic failed")
+	if untrustedHeader.Height != trustedHeader.Height+1 {
+		return errors.New("headers must be adjacent in height")
 	}
 
-	if h2.Height <= h1.Height {
+	if HeaderExpired(trustedHeader, trustingPeriod, now) {
+		return ErrOldHeaderExpired{trustedHeader.Time.Add(trustingPeriod), now}
+	}
+
+	if err := verifyNewHeaderAndVals(chainID, untrustedHeader, untrustedVals, trustedHeader, now); err != nil {
+		return err
+	}
+
+	// Check the validator hashes are the same
+	if !bytes.Equal(untrustedHeader.ValidatorsHash, trustedHeader.NextValidatorsHash) {
+		err := errors.Errorf("expected old header next validators (%X) to match those from new header (%X)",
+			trustedHeader.NextValidatorsHash,
+			untrustedHeader.ValidatorsHash,
+		)
+		return err
+	}
+
+	// Ensure that +2/3 of new validators signed correctly.
+	if err := untrustedVals.VerifyCommit(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
+		untrustedHeader.Commit); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// Verify combines both VerifyAdjacent and VerifyNonAdjacent functions.
+func Verify(
+	chainID string,
+	trustedHeader *types.SignedHeader, // height=X
+	trustedNextVals *types.ValidatorSet, // height=X+1
+	untrustedHeader *types.SignedHeader, // height=Y
+	untrustedVals *types.ValidatorSet, // height=Y
+	trustingPeriod time.Duration,
+	now time.Time,
+	trustLevel tmmath.Fraction) error {
+
+	if untrustedHeader.Height != trustedHeader.Height+1 {
+		return VerifyNonAdjacent(chainID, trustedHeader, trustedNextVals, untrustedHeader, untrustedVals,
+			trustingPeriod, now, trustLevel)
+	}
+
+	return VerifyAdjacent(chainID, trustedHeader, untrustedHeader, untrustedVals, trustingPeriod, now)
+}
+
+func verifyNewHeaderAndVals(
+	chainID string,
+	untrustedHeader *types.SignedHeader,
+	untrustedVals *types.ValidatorSet,
+	trustedHeader *types.SignedHeader,
+	now time.Time) error {
+
+	if err := untrustedHeader.ValidateBasic(chainID); err != nil {
+		return errors.Wrap(err, "untrustedHeader.ValidateBasic failed")
+	}
+
+	if untrustedHeader.Height <= trustedHeader.Height {
 		return errors.Errorf("expected new header height %d to be greater than one of old header %d",
-			h2.Height,
-			h1.Height)
+			untrustedHeader.Height,
+			trustedHeader.Height)
 	}
 
-	if !h2.Time.After(h1.Time) {
+	if !untrustedHeader.Time.After(trustedHeader.Time) {
 		return errors.Errorf("expected new header time %v to be after old header time %v",
-			h2.Time,
-			h1.Time)
+			untrustedHeader.Time,
+			trustedHeader.Time)
 	}
 
-	if !h2.Time.Before(now) {
+	if !untrustedHeader.Time.Before(now) {
 		return errors.Errorf("new header has a time from the future %v (now: %v)",
-			h2.Time,
+			untrustedHeader.Time,
 			now)
 	}
 
-	if !bytes.Equal(h2.ValidatorsHash, h2Vals.Hash()) {
+	if !bytes.Equal(untrustedHeader.ValidatorsHash, untrustedVals.Hash()) {
 		return errors.Errorf("expected new header validators (%X) to match those that were supplied (%X)",
-			h2.ValidatorsHash,
-			h2Vals.Hash(),
+			untrustedHeader.ValidatorsHash,
+			untrustedVals.Hash(),
 		)
 	}
 
diff --git a/lite2/verifier_test.go b/lite2/verifier_test.go
index 1625213cc..6e118d7ae 100644
--- a/lite2/verifier_test.go
+++ b/lite2/verifier_test.go
@@ -42,7 +42,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			3 * time.Hour,
 			bTime.Add(2 * time.Hour),
 			nil,
-			"expected new header height 1 to be greater than one of old header 1",
+			"headers must be adjacent in height",
 		},
 		// different chainID -> error
 		1: {
@@ -52,7 +52,8 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			3 * time.Hour,
 			bTime.Add(2 * time.Hour),
 			nil,
-			"h2.ValidateBasic failed: signedHeader belongs to another chain 'different-chainID' not 'TestVerifyAdjacentHeaders'",
+			"untrustedHeader.ValidateBasic failed: signedHeader belongs to another chain 'different-chainID' not" +
+				" 'TestVerifyAdjacentHeaders'",
 		},
 		// new header's time is before old header's time -> error
 		2: {
@@ -139,8 +140,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 	for i, tc := range testCases {
 		tc := tc
 		t.Run(fmt.Sprintf("#%d", i), func(t *testing.T) {
-			err := Verify(chainID, header, vals, tc.newHeader, tc.newVals, tc.trustingPeriod, tc.now, DefaultTrustLevel)
-
+			err := VerifyAdjacent(chainID, header, tc.newHeader, tc.newVals, tc.trustingPeriod, tc.now)
 			switch {
 			case tc.expErr != nil && assert.Error(t, err):
 				assert.Equal(t, tc.expErr, err)
@@ -254,7 +254,8 @@ func TestVerifyNonAdjacentHeaders(t *testing.T) {
 	for i, tc := range testCases {
 		tc := tc
 		t.Run(fmt.Sprintf("#%d", i), func(t *testing.T) {
-			err := Verify(chainID, header, vals, tc.newHeader, tc.newVals, tc.trustingPeriod, tc.now, DefaultTrustLevel)
+			err := VerifyNonAdjacent(chainID, header, vals, tc.newHeader, tc.newVals, tc.trustingPeriod, tc.now,
+				DefaultTrustLevel)
 
 			switch {
 			case tc.expErr != nil && assert.Error(t, err):

From 6c67e246c308a1606706d5cf1280ad6f538feecf Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Tue, 18 Feb 2020 16:20:02 +0100
Subject: [PATCH 09/74] dep: bump gokit dep (#4424)

* dep: bump gokitdep: bump gokitdep: bump gokitdep: bump gokitdep: bump gokitdep: bump gokitdep: bump gokitdep: bump gokitdep: bump gokit-

Signedoff-by: Marko Baricevic <marbar3778@yahoo.com>

* go mod tidy

* test go version change

* combination of multiple cmds

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 go.mod |  16 ++--
 go.sum | 247 ++++++++++++++++++++++++++++++++++++++++++++++++++++++---
 2 files changed, 241 insertions(+), 22 deletions(-)

diff --git a/go.mod b/go.mod
index b52f7ca4b..87cab15d0 100644
--- a/go.mod
+++ b/go.mod
@@ -1,36 +1,32 @@
 module github.com/tendermint/tendermint
 
-go 1.12
+go 1.13
 
 require (
 	github.com/ChainSafe/go-schnorrkel v0.0.0-20200102211924-4bcbc698314f
-	github.com/VividCortex/gohistogram v1.0.0 // indirect
 	github.com/Workiva/go-datastructures v1.0.50
 	github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d
 	github.com/btcsuite/btcutil v0.0.0-20180706230648-ab6388e0c60a
 	github.com/fortytw2/leaktest v1.3.0
-	github.com/go-kit/kit v0.9.0
+	github.com/go-kit/kit v0.10.0
 	github.com/go-logfmt/logfmt v0.5.0
 	github.com/gogo/protobuf v1.3.1
 	github.com/golang/protobuf v1.3.3
-	github.com/google/gofuzz v1.0.0 // indirect
 	github.com/gorilla/websocket v1.4.1
 	github.com/gtank/merlin v0.1.1-0.20191105220539-8318aed1a79f
-	github.com/inconshreveable/mousetrap v1.0.0 // indirect
 	github.com/libp2p/go-buffer-pool v0.0.2
 	github.com/magiconair/properties v1.8.1
 	github.com/pkg/errors v0.9.1
-	github.com/prometheus/client_golang v0.9.3
-	github.com/rcrowley/go-metrics v0.0.0-20180503174638-e2704e165165
+	github.com/prometheus/client_golang v1.3.0
+	github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a
 	github.com/rs/cors v1.7.0
 	github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
-	github.com/spf13/cobra v0.0.1
+	github.com/spf13/cobra v0.0.3
 	github.com/spf13/viper v1.6.2
 	github.com/stretchr/testify v1.4.0
 	github.com/tendermint/go-amino v0.14.1
 	github.com/tendermint/tm-db v0.4.0
 	golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413
-	golang.org/x/net v0.0.0-20190628185345-da137c7871d7
-	golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a // indirect
+	golang.org/x/net v0.0.0-20190813141303-74dc4d7220e7
 	google.golang.org/grpc v1.27.1
 )
diff --git a/go.sum b/go.sum
index 19cfd4cb8..eb2868125 100644
--- a/go.sum
+++ b/go.sum
@@ -1,21 +1,40 @@
 cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/ChainSafe/go-schnorrkel v0.0.0-20200102211924-4bcbc698314f h1:4O1om+UVU+Hfcihr1timk8YNXHxzZWgCo7ofnrZRApw=
 github.com/ChainSafe/go-schnorrkel v0.0.0-20200102211924-4bcbc698314f/go.mod h1:URdX5+vg25ts3aCh8H5IFZybJYKWhJHYMTnf+ULtoC4=
+github.com/Knetic/govaluate v3.0.1-0.20171022003610-9aa49832a739+incompatible/go.mod h1:r7JcOSlj0wfOMncg0iLm8Leh48TZaKVeNIfJntJ2wa0=
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
+github.com/Shopify/sarama v1.19.0/go.mod h1:FVkBWblsNy7DGZRfXLU0O9RCGt5g3g3yEuWXgklEdEo=
+github.com/Shopify/toxiproxy v2.1.4+incompatible/go.mod h1:OXgGpZ6Cli1/URJOF1DMxUHB2q5Ap20/P/eIdh4G0pI=
 github.com/VividCortex/gohistogram v1.0.0 h1:6+hBz+qvs0JOrrNhhmR7lFxo5sINxBCGXrdtl/UvroE=
 github.com/VividCortex/gohistogram v1.0.0/go.mod h1:Pf5mBqqDxYaXu3hDrrU+w6nw50o/4+TcAqDqk/vUH7g=
 github.com/Workiva/go-datastructures v1.0.50 h1:slDmfW6KCHcC7U+LP3DDBbm4fqTwZGn1beOFPfGaLvo=
 github.com/Workiva/go-datastructures v1.0.50/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
 github.com/aead/siphash v1.0.1/go.mod h1:Nywa3cDsYNNK3gaciGTWPwHt0wlpNV15vwmswBAUSII=
+github.com/afex/hystrix-go v0.0.0-20180502004556-fa1af6a1f4f5/go.mod h1:SkGFH1ia65gfNATL8TAiHDNxPzPdmEL5uirI2Uyuz6c=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
+github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
+github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
+github.com/apache/thrift v0.12.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ=
+github.com/apache/thrift v0.13.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ=
+github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o=
 github.com/armon/consul-api v0.0.0-20180202201655-eb2c6b5be1b6/go.mod h1:grANhF5doyWs3UAsr3K4I6qtAmlQcZDesFNEHPZAzj8=
+github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod h1:Q73ZrmVTwzkszR9V5SSuryQ31EELlFMUz1kKyl939pY=
+github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
+github.com/aryann/difflib v0.0.0-20170710044230-e206f873d14a/go.mod h1:DAHtR1m6lCRdSC2Tm3DSWRPvIPr6xNKyeHdqDQSQT+A=
+github.com/aws/aws-lambda-go v1.13.3/go.mod h1:4UKl9IzQMoD+QF79YdCuzCwp8VbmG4VAQwij/eHl5CU=
+github.com/aws/aws-sdk-go v1.27.0/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
+github.com/aws/aws-sdk-go-v2 v0.18.0/go.mod h1:JWVYvqSMppoMJC0x5wdwiImzgXTI9FuZwxzkQq9wy+g=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973 h1:xJ4a3vCFaGF/jqvzLMYoU8P317H5OQ+Via4RmuPwCS0=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v1.0.0 h1:HWo1m869IqiPhD389kmkxeTalrjNbbJTC8LXupb+sl0=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
+github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
+github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
+github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
 github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d h1:xG8Pj6Y6J760xwETNmMzmlt38QSwz0BLp1cZ09g27uw=
 github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d/go.mod h1:d3C0AkH6BRcvO8T0UEPu53cnw4IbV63x1bEjildYhO0=
 github.com/btcsuite/btclog v0.0.0-20170628155309-84c8d2346e9f/go.mod h1:TdznJufoqS23FtqVCzL0ZqgP5MqXbb4fg/WgDys70nA=
@@ -26,22 +45,40 @@ github.com/btcsuite/goleveldb v0.0.0-20160330041536-7834afc9e8cd/go.mod h1:F+uVa
 github.com/btcsuite/snappy-go v0.0.0-20151229074030-0bdef8d06723/go.mod h1:8woku9dyThutzjeg+3xrA5iCpBRH8XEEg3lh6TiUghc=
 github.com/btcsuite/websocket v0.0.0-20150119174127-31079b680792/go.mod h1:ghJtEyQwv5/p4Mg4C0fgbePVuGr935/5ddU9Z3TmDRY=
 github.com/btcsuite/winsvc v1.0.0/go.mod h1:jsenWakMcC0zFBFurPLEAyrnc/teJEM1O46fmI40EZs=
+github.com/casbin/casbin/v2 v2.1.2/go.mod h1:YcPU1XXisHhLzuxH9coDNf2FbKpjGlbCg3n9yuLkIJQ=
+github.com/cenkalti/backoff v2.2.1+incompatible/go.mod h1:90ReRw6GdpyfrHakVjL/QHaoyV4aDUVVkXQJJJ3NXXM=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
+github.com/cespare/xxhash v1.1.0 h1:a6HrQnmkObjyL+Gs60czilIUGqrzKutQD6XZog3p+ko=
 github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc=
+github.com/cespare/xxhash/v2 v2.1.1 h1:6MnRN8NT7+YBpUIWxHtefFZOKTAPgGjpQSxqLNn0+qY=
+github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
+github.com/clbanning/x2j v0.0.0-20191024224557-825249438eec/go.mod h1:jMjuTZXRI4dUb/I5gc9Hdhagfvm9+RyrPryS/auMzxE=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cockroachdb/datadriven v0.0.0-20190809214429-80d97fb3cbaa/go.mod h1:zn76sxSg3SzpJ0PPJaLDCu+Bu0Lg3sKTORVIj19EIF8=
+github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE/e/2PUdi/liOCUjSTXgM1o87ZssimdTWN964YiIeI=
 github.com/coreos/bbolt v1.3.2/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
+github.com/coreos/go-systemd v0.0.0-20180511133405-39ca1b05acc7/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4=
 github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4=
+github.com/coreos/pkg v0.0.0-20160727233714-3ac0863d7acf/go.mod h1:E3G3o1h8I7cfcXa63jLwjI0eiQQMgzzUDFVpN/nH/eA=
 github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f/go.mod h1:E3G3o1h8I7cfcXa63jLwjI0eiQQMgzzUDFVpN/nH/eA=
 github.com/cosmos/go-bip39 v0.0.0-20180819234021-555e2067c45d h1:49RLWk1j44Xu4fjHb6JFYmeUnDORVwHNkDxaQ0ctCVU=
 github.com/cosmos/go-bip39 v0.0.0-20180819234021-555e2067c45d/go.mod h1:tSxLoYXyBmiFeKpvmq4dzayMdCjCnu8uqmCysIGBT2Y=
+github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY=
 github.com/davecgh/go-spew v0.0.0-20171005155431-ecdeabc65495/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
 github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
+github.com/dustin/go-humanize v0.0.0-20171111073723-bb3d318650d4/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
+github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs=
+github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21/go.mod h1:+020luEh2TKB4/GOp8oxxtq0Daoen/Cii55CzbTV6DU=
+github.com/eapache/queue v1.1.0/go.mod h1:6eCeP0CKFpHLu8blIFXhExK/dRa7WDZfr6jVFPTqq+I=
+github.com/edsrzf/mmap-go v1.0.0/go.mod h1:YO35OhQPt3KJa3ryjFM5Bs14WD66h8eGKpfaBNrHW5M=
+github.com/envoyproxy/go-control-plane v0.6.9/go.mod h1:SBwIajubJHhxtWwsL9s8ss4safvEdbitLhGGK48rN6g=
 github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
 github.com/etcd-io/bbolt v1.3.3 h1:gSJmxrs37LgTqR/oyJBWok6k6SvXEUerFTbltIhXkBM=
@@ -52,8 +89,11 @@ github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 h1:JWuenKqqX8nojt
 github.com/facebookgo/stack v0.0.0-20160209184415-751773369052/go.mod h1:UbMTZqLaRiH3MsBH8va0n7s1pQYcu3uTb8G4tygF4Zg=
 github.com/facebookgo/subset v0.0.0-20150612182917-8dac2c3c4870 h1:E2s37DuLxFhQDg5gKsWoLBOB0n+ZW8s599zru8FJ2/Y=
 github.com/facebookgo/subset v0.0.0-20150612182917-8dac2c3c4870/go.mod h1:5tD+neXqOorC30/tWg0LCSkrqj/AR6gu8yY8/fpw1q0=
+github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
 github.com/fortytw2/leaktest v1.3.0 h1:u8491cBMTQ8ft8aeV+adlcytMZylmA5nnwwkRZjI8vw=
 github.com/fortytw2/leaktest v1.3.0/go.mod h1:jDsjWgpAGjm2CA7WthBh/CdZYEPF31XHquHwclZch5g=
+github.com/franela/goblin v0.0.0-20200105215937-c9ffbefa60db/go.mod h1:7dvUGVsVBjqR7JHJk0brhHOZYGmfBYOrK0ZhYMEtBr4=
+github.com/franela/goreq v0.0.0-20171204163338-bcd34c9993f8/go.mod h1:ZhphrRTfi2rbfLwlschooIH4+wKKDR4Pdxhh+TRoA20=
 github.com/fsnotify/fsnotify v1.4.7 h1:IXs+QLmnXW2CcXuY+8Mzv/fWEsPGWxqefPtCP5CnV9I=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
@@ -61,22 +101,29 @@ github.com/go-kit/kit v0.8.0 h1:Wz+5lgoB0kkuqLEc6NVmwRknTKP6dTGbSqvhZtBI/j0=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/kit v0.9.0 h1:wDJmvq38kDhkVxi50ni9ykkdUr1PKgqKOoi01fa0Mdk=
 github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
+github.com/go-kit/kit v0.10.0 h1:dXFJfIHVvUcpSgDOV+Ne6t7jXri8Tfv2uOLHUZ2XNuo=
+github.com/go-kit/kit v0.10.0/go.mod h1:xUsJbQ/Fp4kEt7AFgCuvyX4a71u8h9jB8tj/ORgOZ7o=
 github.com/go-logfmt/logfmt v0.3.0 h1:8HUsc87TaSWLKwrnumgC8/YconD2fJQsRJAsWaPg2ic=
 github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
 github.com/go-logfmt/logfmt v0.4.0 h1:MP4Eh7ZCb31lleYCFuwm0oe4/YGak+5l1vA2NOE80nA=
 github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
 github.com/go-logfmt/logfmt v0.5.0 h1:TrB8swr/68K7m9CcGut2g3UOihhbcbiMAYiuTXdEih4=
 github.com/go-logfmt/logfmt v0.5.0/go.mod h1:wCYkCAKZfumFQihp8CzCvQ3paCTfi41vtzG1KdI/P7A=
+github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-stack/stack v1.8.0 h1:5SgMzNM5HxrEjV0ww2lTmX6E2Izsfxas4+YHWRs3Lsk=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
+github.com/gogo/googleapis v1.1.0/go.mod h1:gf4bu3Q80BeJ6H1S1vYPm8/ELATdvryBaNFGgqEef3s=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
+github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.1 h1:/s5zKNz0uPFCZ5hddgPdo2TK2TVrUNMn0OOX8/aZMTE=
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
 github.com/gogo/protobuf v1.3.1 h1:DqDEcV5aeaTmdFBePNpYsp3FlcVH/2ISVVM9Qf8PSls=
 github.com/gogo/protobuf v1.3.1/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b h1:VKtxabqXZkF25pY9ekfRL6a582T4P37/31XEstQ5p58=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/groupcache v0.0.0-20160516000752-02826c3e7903/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
+github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
@@ -84,36 +131,75 @@ github.com/golang/protobuf v1.3.2 h1:6nsPYzhq5kReh6QImI3k5qWzO4PEbvbIW2cwSfR/6xs
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.3 h1:gyjaxf+svBWX08ZjK86iN9geUJF0H6gp2IRKX6Nf6/I=
 github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
+github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/golang/snappy v0.0.1 h1:Qgr9rKW7uDUkrbSmQeiDsGa8SjGyCOGtuasMWwvp2P4=
 github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
+github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/go-cmp v0.2.0 h1:+dTQ8DZQJz0Mb/HjFlkptS1FeQ4cWSnN941F8aEG4SQ=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1 h1:Xye71clBPdm5HgqGwUkwhbynsUJZhDbS20FvLhQ2izg=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/gofuzz v1.0.0 h1:A8PeW59pxE9IoFRqBp37U+mSNaQoZ46F1f0f863XSXw=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
+github.com/google/uuid v1.0.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1 h1:EGx4pi6eqNxGaHF6qqu48+N2wcFQ5qg5FXgOdqsJ5d8=
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
+github.com/gorilla/context v1.1.1/go.mod h1:kBGZzfjB9CEq2AlWe17Uuf7NDRt0dE0s8S51q0aT7Yg=
+github.com/gorilla/mux v1.6.2/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
+github.com/gorilla/mux v1.7.3/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
+github.com/gorilla/websocket v0.0.0-20170926233335-4201258b820c/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
 github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
 github.com/gorilla/websocket v1.4.1 h1:q7AeDBpnBk8AogcD4DSag/Ukw/KV+YhzLj2bP5HvKCM=
 github.com/gorilla/websocket v1.4.1/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
+github.com/grpc-ecosystem/go-grpc-middleware v1.0.1-0.20190118093823-f849b5445de4/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk=
 github.com/grpc-ecosystem/grpc-gateway v1.9.0/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
+github.com/grpc-ecosystem/grpc-gateway v1.9.5/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
 github.com/gtank/merlin v0.1.1-0.20191105220539-8318aed1a79f h1:8N8XWLZelZNibkhM1FuF+3Ad3YIbgirjdMiVA0eUkaM=
 github.com/gtank/merlin v0.1.1-0.20191105220539-8318aed1a79f/go.mod h1:T86dnYJhcGOh5BjZFCJWTDeTK7XW8uE+E21Cy/bIQ+s=
 github.com/gtank/ristretto255 v0.1.2 h1:JEqUCPA1NvLq5DwYtuzigd7ss8fwbYay9fi4/5uMzcc=
 github.com/gtank/ristretto255 v0.1.2/go.mod h1:Ph5OpO6c7xKUGROZfWVLiJf9icMDwUeIvY4OmlYW69o=
+github.com/hashicorp/consul/api v1.3.0/go.mod h1:MmDNSzIMUjNpY/mQ398R4bk2FnqQLoPndWW5VkKPlCE=
+github.com/hashicorp/consul/sdk v0.3.0/go.mod h1:VKf9jXwCTEY1QZP2MOLRhb5i/I/ssyNV1vwHyQBF0x8=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-cleanhttp v0.5.1/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
+github.com/hashicorp/go-immutable-radix v1.0.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
+github.com/hashicorp/go-msgpack v0.5.3/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
+github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
+github.com/hashicorp/go-rootcerts v1.0.0/go.mod h1:K6zTfqpRlCUIjkwsN4Z+hiSfzSTQa6eBIzfwKfwNnHU=
+github.com/hashicorp/go-sockaddr v1.0.0/go.mod h1:7Xibr9yA9JjQq1JpNB2Vw7kxv8xerXegt+ozgdvDeDU=
+github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
+github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
+github.com/hashicorp/go-uuid v1.0.1/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
+github.com/hashicorp/go-version v1.2.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
+github.com/hashicorp/go.net v0.0.1/go.mod h1:hjKkEWcCURg++eb33jQU7oqQcI9XDCnUzHA0oac0k90=
+github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
+github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
 github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
+github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64=
+github.com/hashicorp/mdns v1.0.0/go.mod h1:tL+uN++7HEJ6SQLQ2/p+z2pH24WQKWjBPkE0mNTz8vQ=
+github.com/hashicorp/memberlist v0.1.3/go.mod h1:ajVTdAv/9Im8oMAAj5G31PhhMCZJV2pPBoIllUwCN7I=
+github.com/hashicorp/serf v0.8.2/go.mod h1:6hOLApaqBFA1NXqRQAsxw9QxuDEvNxSQRwA/JwenrHc=
 github.com/hpcloud/tail v1.0.0 h1:nfCOvKYfkgYP8hkirhJocXT2+zOD8yUNjXaWfTlyFKI=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
+github.com/hudl/fargo v1.3.0/go.mod h1:y3CKSmjA+wD2gak7sUSXTAoopbhU08POFhmITJgmKTg=
 github.com/inconshreveable/mousetrap v1.0.0 h1:Z8tu5sraLXCXIcARxBp/8cbvlwVa7Z1NHg9XEKhtSvM=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
+github.com/influxdata/influxdb1-client v0.0.0-20191209144304-8bf82d3c094d/go.mod h1:qj24IKcXYK6Iy9ceXlo3Tc+vtHo9lIhSX5JddghvEPo=
 github.com/jessevdk/go-flags v0.0.0-20141203071132-1679536dcc89/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
+github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmhodges/levigo v1.0.0 h1:q5EC36kV79HWeTBWsod3mG11EgStG3qArTKcvlksN1U=
 github.com/jmhodges/levigo v1.0.0/go.mod h1:Q6Qx+uH3RAqyK4rFQroq9RL7mdkABMcfhEI+nNuzMJQ=
 github.com/jonboulle/clockwork v0.1.0/go.mod h1:Ii8DK3G1RaLaWxj9trq07+26W01tbo22gdxWY5EU2bo=
 github.com/jrick/logrotate v1.0.0/go.mod h1:LNinyqDIJnpAur+b8yyulnQw/wDuN1+BYKlTRt3OuAQ=
+github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
+github.com/json-iterator/go v1.1.7/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
+github.com/json-iterator/go v1.1.8/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
 github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo=
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
@@ -131,56 +217,121 @@ github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/libp2p/go-buffer-pool v0.0.2 h1:QNK2iAFa8gjAe1SPz6mHSMuCcjs+X1wlHzeOSqcmlfs=
 github.com/libp2p/go-buffer-pool v0.0.2/go.mod h1:MvaB6xw5vOrDl8rYZGLFdKAuk/hRoRZd1Vi32+RXyFM=
+github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
+github.com/lightstep/lightstep-tracer-go v0.18.1/go.mod h1:jlF1pusYV4pidLvZ+XD0UBX0ZE6WURAspgAczcDHrL4=
+github.com/lyft/protoc-gen-validate v0.0.13/go.mod h1:XbGvPuh87YZc5TdIa2/I4pLk0QoUACkjt2znoq26NVQ=
 github.com/magiconair/properties v1.8.1 h1:ZC2Vc7/ZFkGmsVC9KvOjumD+G5lXy2RtTKyzRKO2BQ4=
 github.com/magiconair/properties v1.8.1/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
+github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
+github.com/mattn/go-isatty v0.0.3/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
+github.com/mattn/go-isatty v0.0.4/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
+github.com/mattn/go-runewidth v0.0.2/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
 github.com/matttproud/golang_protobuf_extensions v1.0.1 h1:4hp9jkHxhMHkqkrB3Ix0jegS5sx/RkqARlsWZ6pIwiU=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
+github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
 github.com/mimoo/StrobeGo v0.0.0-20181016162300-f8f6d4d2b643 h1:hLDRPB66XQT/8+wG9WsDpiCvZf1yKO7sz7scAjSlBa0=
 github.com/mimoo/StrobeGo v0.0.0-20181016162300-f8f6d4d2b643/go.mod h1:43+3pMjjKimDBf5Kr4ZFNGbLql1zKkbImw+fZbw3geM=
+github.com/mitchellh/cli v1.0.0/go.mod h1:hNIlj7HEI86fIcpObd7a0FcrxTWetlwJDGcceTlRvqc=
+github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
+github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
+github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=
+github.com/mitchellh/iochan v1.0.0/go.mod h1:JwYml1nuB7xOzsp52dPpHFffvOCDupsG0QubkSMEySY=
+github.com/mitchellh/mapstructure v0.0.0-20160808181253-ca63d7c062ee/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/mitchellh/mapstructure v1.1.2 h1:fmNYVwqnSfB9mZU6OS2O6GsXM+wcskZDuKQzvN1EDeE=
 github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
+github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
+github.com/nats-io/jwt v0.3.0/go.mod h1:fRYCDE99xlTsqUzISS1Bi75UBJ6ljOJQOAAu5VglpSg=
+github.com/nats-io/jwt v0.3.2/go.mod h1:/euKqTS1ZD+zzjYrY7pseZrTtWQSjujC7xjPc8wL6eU=
+github.com/nats-io/nats-server/v2 v2.1.2/go.mod h1:Afk+wRZqkMQs/p45uXdrVLuab3gwv3Z8C4HTBu8GD/k=
+github.com/nats-io/nats.go v1.9.1/go.mod h1:ZjDU1L/7fJ09jvUSRVBR2e7+RnLiiIQyqyzEE/Zbp4w=
+github.com/nats-io/nkeys v0.1.0/go.mod h1:xpnFELMwJABBLVhffcfd1MZx6VsNRFpEugbxziKVo7w=
+github.com/nats-io/nkeys v0.1.3/go.mod h1:xpnFELMwJABBLVhffcfd1MZx6VsNRFpEugbxziKVo7w=
+github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c=
+github.com/oklog/oklog v0.3.2/go.mod h1:FCV+B7mhrz4o+ueLpx+KqkyXRGMWOYEvfiXtdGtbWGs=
+github.com/oklog/run v1.0.0/go.mod h1:dlhp/R75TPv97u0XWUtDeV/lRKWPKSdTuV0TZvrmrQA=
 github.com/oklog/ulid v1.3.1/go.mod h1:CirwcVhetQ6Lv90oh/F+FBtV6XMibvdAFo93nm5qn4U=
+github.com/olekukonko/tablewriter v0.0.0-20170122224234-a0225b3f23b5/go.mod h1:vsDQFd/mU46D+Z4whnwzcISnGGzXWMclvtLoiIKAKIo=
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.7.0 h1:WSHQ+IS43OoUrWtD1/bbclrwK8TTH5hzp+umCiuxHgs=
 github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/gomega v1.4.3 h1:RE1xgDvH7imwFD45h+u2SgIfERHlS2yNG4DObb5BSKU=
 github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
+github.com/op/go-logging v0.0.0-20160315200505-970db520ece7/go.mod h1:HzydrMdWErDVzsI23lYNej1Htcns9BCg93Dk0bBINWk=
+github.com/opentracing-contrib/go-observer v0.0.0-20170622124052-a52f23424492/go.mod h1:Ngi6UdF0k5OKD5t5wlmGhe/EDKPoUM3BXZSSfIuJbis=
+github.com/opentracing/basictracer-go v1.0.0/go.mod h1:QfBfYuafItcjQuMwinw9GhYKwFXS9KnPs5lxoYwgW74=
+github.com/opentracing/opentracing-go v1.0.2/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
+github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
+github.com/openzipkin-contrib/zipkin-go-opentracing v0.4.5/go.mod h1:/wsWhb9smxSfWAKL3wpBW7V8scJMt8N8gnaMCS9E/cA=
+github.com/openzipkin/zipkin-go v0.1.6/go.mod h1:QgAqvLzwWbR/WpD4A3cGpPtJrZXNIiJc5AZX7/PBEpw=
+github.com/openzipkin/zipkin-go v0.2.1/go.mod h1:NaW6tEwdmWMaCDZzg8sh+IBNOxHMPnhQw8ySjnjRyN4=
+github.com/openzipkin/zipkin-go v0.2.2/go.mod h1:NaW6tEwdmWMaCDZzg8sh+IBNOxHMPnhQw8ySjnjRyN4=
+github.com/pact-foundation/pact-go v1.0.4/go.mod h1:uExwJY4kCzNPcHRj+hCR/HBbOOIwwtUjcrb0b5/5kLM=
+github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
+github.com/pborman/uuid v1.2.0/go.mod h1:X/NO0urCmaxf9VXbdlT7C2Yzkj2IKimNn4k+gtPdI/k=
 github.com/pelletier/go-toml v1.2.0 h1:T5zMGML61Wp+FlcbWjRDT7yAxhJNAiPPLOFECq181zc=
 github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
+github.com/performancecopilot/speed v3.0.0+incompatible/go.mod h1:/CLtqpZ5gBg1M9iaPbIdPPGyKcA8hKdoy6hAWba7Yac=
+github.com/pierrec/lz4 v1.0.2-0.20190131084431-473cd7ce01a1/go.mod h1:3/3N9NVKO0jef7pBehbT1qWhCMrIgbYNnFAZCqQ5LRc=
+github.com/pierrec/lz4 v2.0.5+incompatible/go.mod h1:pdkljMzZIN41W+lC3N2tnIh5sFi+IEE17M5jbnwPHcY=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1 h1:iURUrRGxPUNPdy5/HRSm+Yj6okJ6UtLINN0Q9M4+h3I=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
-github.com/pkg/errors v0.9.0 h1:J8lpUdobwIeCI7OiSxHqEwJUKvJwicL5+3v1oe2Yb4k=
-github.com/pkg/errors v0.9.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pkg/profile v1.2.1/go.mod h1:hJw3o1OdXxsrSjjVksARp5W95eeEaEfptyVZyv6JUPA=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/prometheus/client_golang v0.9.1 h1:K47Rk0v/fkEfwfQet2KWhscE0cJzjgCCDBG2KHZoVno=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
+github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829/go.mod h1:p2iRAGwDERtqlqzRXnrOVns+ignqQo//hLXqYxZYVNs=
 github.com/prometheus/client_golang v0.9.3 h1:9iH4JKXLzFbOAdtqv/a+j8aewx2Y8lAjAydhbaScPF8=
 github.com/prometheus/client_golang v0.9.3/go.mod h1:/TN21ttK/J9q6uSwhBd54HahCDft0ttaMvbicHlPoso=
+github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
+github.com/prometheus/client_golang v1.3.0 h1:miYCvYqFXtl/J9FIy8eNpBfYthAEFg+Ys0XyUVEcDsc=
+github.com/prometheus/client_golang v1.3.0/go.mod h1:hJaj2vgQTGQmVCsAACORcieXFeDPbaTKGT+JTgUa3og=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910 h1:idejC8f05m9MGOsuEi1ATq9shN03HrxNkD/luQvxCv8=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
+github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90 h1:S/YWwWx/RA8rT8tKFRuGUZhuA90OyIBpPCXkcbwU8DE=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4 h1:gQz4mCbXsO+nc9n1hCxHcGA3Zx3Eo+UHZoInFGUIXNM=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/prometheus/client_model v0.1.0 h1:ElTg5tNp4DqfV7UQjDqv2+RJlNzsDtvNAWccbItceIE=
+github.com/prometheus/client_model v0.1.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
+github.com/prometheus/common v0.2.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.4.0 h1:7etb9YClo3a6HjLzfl6rIQaU+FDfi0VSX39io3aQ+DM=
 github.com/prometheus/common v0.4.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
+github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
+github.com/prometheus/common v0.7.0 h1:L+1lyG48J1zAQXA3RBX/nG/B3gjlHq0zTt2tlbJLyCY=
+github.com/prometheus/common v0.7.0/go.mod h1:DjGbpBbp5NYNiECxcL/VnbXCCaQpKd3tt26CguLLsqA=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d h1:GoAlyOgbOEIFdaDqxJVlbOQ1DtGmZWs/Qau0hIlk+WQ=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
+github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.0-20190507164030-5867b95ac084 h1:sofwID9zm4tzrgykg80hfFph1mryUeLRsUfoocVVmRY=
 github.com/prometheus/procfs v0.0.0-20190507164030-5867b95ac084/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
+github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
+github.com/prometheus/procfs v0.0.8 h1:+fpWZdT24pJBiqJdAwYBjPSk+5YmQzYNPYzQsdzLkt8=
+github.com/prometheus/procfs v0.0.8/go.mod h1:7Qr8sr6344vo1JqZ6HhLceV9o3AJ1Ff+GxbHq6oeK9A=
 github.com/prometheus/tsdb v0.7.1/go.mod h1:qhTCs0VvXwvX/y3TZrWD7rabWM+ijKTux40TwIPHuXU=
-github.com/rcrowley/go-metrics v0.0.0-20180503174638-e2704e165165 h1:nkcn14uNmFEuGCb2mBZbBb24RdNRL08b/wb+xBOYpuk=
-github.com/rcrowley/go-metrics v0.0.0-20180503174638-e2704e165165/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
+github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a h1:9ZKAASQSHhDYGoxY8uLVpewe1GDZ2vu2Tr/vTdVAkFQ=
+github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod h1:XWv6SoW27p1b0cqNHllgS5HIMJraePCO15w5zCzIWYg=
+github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rs/cors v1.7.0 h1:+88SsELBHx5r+hZ8TCkggzSstaWNbDvThkVK8H6f9ik=
 github.com/rs/cors v1.7.0/go.mod h1:gFx+x8UowdsKA9AchylcLynDq+nNFfI8FkUZdN/jGCU=
+github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
+github.com/samuel/go-zookeeper v0.0.0-20190923202752-2cc03de413da/go.mod h1:gi+0XIa01GRL2eRQVjQkKGqKF3SF9vZR/HnPullcV2E=
+github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc=
+github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
+github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d h1:zE9ykElWQ6/NYmHa3jpm/yHnI4xSofP+UP6SpjHcSeM=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
 github.com/smartystreets/goconvey v1.6.4 h1:fv0U8FUIMPNf1L9lnHLvLhgicrIVChEkdzIKYqbNC9s=
@@ -188,26 +339,30 @@ github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9
 github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa h1:YJfZp12Z3AFhSBeXOlv4BO55RMwPn2NoQeDsrdWnBtY=
 github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa/go.mod h1:oJyF+mSPHbB5mVY2iO9KV3pTt/QbIkGaO8gQ2WrDbP4=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
+github.com/sony/gobreaker v0.4.1/go.mod h1:ZKptC7FHNvhBz7dN2LGjPVBz2sZJmc0/PkyDJOjmxWY=
 github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
 github.com/spf13/afero v1.1.2 h1:m8/z1t7/fwjysjQRYbP0RD+bUIF/8tJwPdEZsI83ACI=
 github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
 github.com/spf13/cast v1.3.0 h1:oget//CVOEoFewqQxwr0Ej5yjygnqGkvggSE/gB35Q8=
 github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
-github.com/spf13/cobra v0.0.1 h1:zZh3X5aZbdnoj+4XkaBxKfhO4ot82icYdhhREIAXIj8=
-github.com/spf13/cobra v0.0.1/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
+github.com/spf13/cobra v0.0.3 h1:ZlrZ4XsMRm04Fr5pSFxBgfND2EBVa1nLpiy1stUsX/8=
+github.com/spf13/cobra v0.0.3/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
 github.com/spf13/jwalterweatherman v1.0.0 h1:XHEdyB+EcvlqZamSM4ZOMGlc93t6AcsBEu9Gc1vn7yk=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
+github.com/spf13/pflag v1.0.1/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/pflag v1.0.3 h1:zPAT6CGy6wXeQ7NtTnaTerfKOsV6V6F8agHXFiazDkg=
 github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
-github.com/spf13/viper v1.6.1 h1:VPZzIkznI1YhVMRi6vNFLHSwhnhReBfgTxIPccpfdZk=
-github.com/spf13/viper v1.6.1/go.mod h1:t3iDnF5Jlj76alVNuyFBk5oUMCvsrkbvZK0WQdfDi5k=
 github.com/spf13/viper v1.6.2 h1:7aKfF+e8/k68gda3LOjo5RxiUqddoFxVq4BKBPrxk5E=
 github.com/spf13/viper v1.6.2/go.mod h1:t3iDnF5Jlj76alVNuyFBk5oUMCvsrkbvZK0WQdfDi5k=
+github.com/streadway/amqp v0.0.0-20190404075320-75d898a42a94/go.mod h1:AZpEONHx3DKn8O/DFsRAY58/XVQiIPMTMB1SddzLXVw=
+github.com/streadway/amqp v0.0.0-20190827072141-edfb9018d271/go.mod h1:AZpEONHx3DKn8O/DFsRAY58/XVQiIPMTMB1SddzLXVw=
+github.com/streadway/handy v0.0.0-20190108123426-d5acb3125c2a/go.mod h1:qNTQ5P5JnDBl6z3cMAg/SywNDC5ABu5ApDIw6lUbRmI=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1 h1:2vfRuCMp5sSVIDSqO8oNnWJq7mPa6KVP3iPIwFBuy8A=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0 h1:2E4SXV/wtOkTonXsotYi4li6zVWxYlZuYNCXe9XRJyk=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/subosito/gotenv v1.2.0 h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=
@@ -220,76 +375,136 @@ github.com/tendermint/go-amino v0.14.1 h1:o2WudxNfdLNBwMyl2dqOJxiro5rfrEaU0Ugs6o
 github.com/tendermint/go-amino v0.14.1/go.mod h1:i/UKE5Uocn+argJJBb12qTZsCDBcAYMbR92AaJVmKso=
 github.com/tendermint/tm-db v0.4.0 h1:iPbCcLbf4nwDFhS39Zo1lpdS1X/cT9CkTlUx17FHQgA=
 github.com/tendermint/tm-db v0.4.0/go.mod h1:+Cwhgowrf7NBGXmsqFMbwEtbo80XmyrlY5Jsk95JubQ=
+github.com/tmc/grpc-websocket-proxy v0.0.0-20170815181823-89b8d40f7ca8/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
 github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
 github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGrc=
+github.com/urfave/cli v1.20.0/go.mod h1:70zkFmudgCuE/ngEzBv17Jvp/497gISqfk5gWijbERA=
+github.com/urfave/cli v1.22.1/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
 github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU=
 github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q=
 go.etcd.io/bbolt v1.3.2/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
 go.etcd.io/bbolt v1.3.3 h1:MUGmc65QhB3pIlaQ5bB4LwqSj6GIonVJXpZiaKNyaKk=
 go.etcd.io/bbolt v1.3.3/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
+go.etcd.io/etcd v0.0.0-20191023171146-3cf2f69b5738/go.mod h1:dnLIgRNXwCJa5e+c6mIZCrds/GIG4ncV9HhK5PX7jPg=
+go.opencensus.io v0.20.1/go.mod h1:6WKK9ahsWS3RSO+PY9ZHZUfv2irvY6gN279GOPZjmmk=
+go.opencensus.io v0.20.2/go.mod h1:6WKK9ahsWS3RSO+PY9ZHZUfv2irvY6gN279GOPZjmmk=
+go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
+go.uber.org/atomic v1.3.2/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
 go.uber.org/atomic v1.4.0/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
+go.uber.org/atomic v1.5.0/go.mod h1:sABNBOSYdrvTF6hTgEIbc7YasKWGhgEQZyfxyTvoXHQ=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
+go.uber.org/multierr v1.3.0/go.mod h1:VgVr7evmIr6uPjLBxg28wmKNXyqE9akIJ5XnfpiKl+4=
+go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee/go.mod h1:vJERXedbb3MVM5f9Ejo0C68/HhF8uaILCdgjnY+goOA=
 go.uber.org/zap v1.10.0/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
+go.uber.org/zap v1.13.0/go.mod h1:zwrFLgMcdUuIBviXEYEH1YKNaOBnKXsx2IPda5bBwHM=
 golang.org/x/crypto v0.0.0-20170930174604-9419663f5a44/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
+golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2 h1:VklqNMn3ovrHsnt90PveolxSbWFaJdECFbxSq0Mqo2M=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20190701094942-4def268fd1a4/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413 h1:ULYEB3JvPRE/IfO+9uO7vKV/xzVTO7XPAwm8xbf4w2g=
 golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
+golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
+golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd h1:nTDtHvHSdCn1m6ITfMRqtOd/9+7a3s8RBNOZ3eYZzJA=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20181201002055-351d144fa1fc/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181220203305-927f97764cc3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190125091013-d26f9f9a57f3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190522155817-f3200d17e092/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
+golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
+golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190628185345-da137c7871d7 h1:rTIdg5QFRR7XCaK4LCjBiPbx8j4DQRpdYMnGn/bJUEU=
 golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20190813141303-74dc4d7220e7 h1:fHDIZ2oxGnUZRN6WgWFCbYBjH9uqVPRCUVUDhs0wnbA=
+golang.org/x/net v0.0.0-20190813141303-74dc4d7220e7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
+golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f h1:wMNYb4v58l5UBM7MYRLPG6ZhfOqbKu7X5eyFl8ZhKvA=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20181026203630-95b1ffbd15a5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181107165924-66b7b1311ac8/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20181122145206-62eef0e2fa9b/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a h1:1BGLXjeY4akVXGgbC9HugT3Jv3hCI0z56oJR5vAMgBU=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a h1:aYOabOQFp6Vj6W1F80affTUvO9UxmJRx8K0gsfABByQ=
-golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190502145724-3ef323f4f1fd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191220142924-d4481acd189f h1:68K/z8GLUxV76xGSqwTWw2gyk/jwn79LUL43rES2g8o=
+golang.org/x/sys v0.0.0-20191220142924-d4481acd189f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.2 h1:tW2bmiBqwgJj/UpqtC8EpXEZVYOwU0yG4iWbprSVAcs=
+golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
+golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
+golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/tools v0.0.0-20180221164845-07fd8470d635/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20180828015842-6cd1fcedba52/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20181030221726-6c7e314b6563/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
 golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
+golang.org/x/tools v0.0.0-20191029041327-9cc4af7d6b2c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200103221440-774c71fcf114/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/api v0.3.1/go.mod h1:6wY9I6uQWHQ8EM57III9mq/AjF+i8G65rmVagqKMtkk=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
+google.golang.org/appengine v1.2.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
+google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
+google.golang.org/genproto v0.0.0-20190530194941-fb225487d101/go.mod h1:z3L6/3dTEVtUr6QSP8miRzeRqwQOioJ9I66odjN4I7s=
 google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55 h1:gSJIx1SDwno+2ElGhA4+qG2zF97qiUzTM+rQ0klBOcE=
 google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
+google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
+google.golang.org/grpc v1.20.0/go.mod h1:chYK+tFQF0nDUGJgXMSgLCQk3phJEuONr2DCgLDdAQM=
+google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
 google.golang.org/grpc v1.21.0/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
+google.golang.org/grpc v1.22.1/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
 google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
+google.golang.org/grpc v1.23.1/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
 google.golang.org/grpc v1.26.0 h1:2dTRdpdFEEhJYQD8EMLB61nnrzSCTbG38PhqdhvOltg=
 google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
-google.golang.org/grpc v1.27.0 h1:rRYRFMVgRv6E0D70Skyfsr28tDXIuuPZyWGMPdMcnXg=
-google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
 google.golang.org/grpc v1.27.1 h1:zvIju4sqAGvwKspUQOhwnpcqSbzi7/H6QomNNjTL4sk=
 google.golang.org/grpc v1.27.1/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
@@ -297,13 +512,17 @@ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/cheggaaa/pb.v1 v1.0.25/go.mod h1:V/YB90LKu/1FcN3WVnfiiE5oMCibMjukxqG/qStrOgw=
+gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+gopkg.in/gcfg.v1 v1.2.3/go.mod h1:yesOnuUOFQAhST5vPY4nbZsb/huCgGGXlipJsBn0b3o=
 gopkg.in/ini.v1 v1.51.0 h1:AQvPpx3LzTDM0AjnIRlVFwFFGC+npRopjZxLJj6gdno=
 gopkg.in/ini.v1 v1.51.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/resty.v1 v1.12.0/go.mod h1:mDo4pnntr5jdWRML875a/NmxYqAlA73dVijT2AXvQQo=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
+gopkg.in/warnings.v0 v0.1.2/go.mod h1:jksf8JmL6Qr/oQM2OXTHunEvvTAsrWBLb6OOjuVWRNI=
 gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74=
 gopkg.in/yaml.v2 v2.2.1 h1:mUhvW9EsL+naU5Q3cakzfE91YhliOondGd6ZrsDBHQE=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
@@ -311,5 +530,9 @@ gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4 h1:/eiJrUcujPVeJ3xlSWaiNi3uSVmDGBK1pDHUHAnao1I=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
+sigs.k8s.io/yaml v1.1.0/go.mod h1:UJmg0vDUVViEyp3mgSv9WPwZCDxu4rQW1olrI1uml+o=
+sourcegraph.com/sourcegraph/appdash v0.0.0-20190731080439-ebfcffb1b5c0/go.mod h1:hI742Nqp5OhwiqlzhgfbWU4mW4yO10fP+LoT9WOswdU=

From 68f37fff65102ef9d5ff51df2cd0f43489fc20c1 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Wed, 19 Feb 2020 12:28:34 +0100
Subject: [PATCH 10/74] Use uint64 for consensus.Reactor.SwitchToConsensus()
 blocksSynced (#4433)

---
 blockchain/v0/reactor.go      | 4 ++--
 blockchain/v1/reactor.go      | 4 ++--
 blockchain/v1/reactor_test.go | 2 +-
 consensus/reactor.go          | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/blockchain/v0/reactor.go b/blockchain/v0/reactor.go
index c35a3e6a9..d47e892c2 100644
--- a/blockchain/v0/reactor.go
+++ b/blockchain/v0/reactor.go
@@ -41,7 +41,7 @@ const (
 type consensusReactor interface {
 	// for when we switch from blockchain reactor and fast sync to
 	// the consensus machine
-	SwitchToConsensus(sm.State, int)
+	SwitchToConsensus(sm.State, uint64)
 }
 
 type peerError struct {
@@ -214,7 +214,7 @@ func (bcR *BlockchainReactor) poolRoutine() {
 	statusUpdateTicker := time.NewTicker(statusUpdateIntervalSeconds * time.Second)
 	switchToConsensusTicker := time.NewTicker(switchToConsensusIntervalSeconds * time.Second)
 
-	blocksSynced := 0
+	blocksSynced := uint64(0)
 
 	chainID := bcR.initialState.ChainID
 	state := bcR.initialState
diff --git a/blockchain/v1/reactor.go b/blockchain/v1/reactor.go
index c1932d406..b57901789 100644
--- a/blockchain/v1/reactor.go
+++ b/blockchain/v1/reactor.go
@@ -43,7 +43,7 @@ var (
 type consensusReactor interface {
 	// for when we switch from blockchain reactor and fast sync to
 	// the consensus machine
-	SwitchToConsensus(sm.State, int)
+	SwitchToConsensus(sm.State, uint64)
 }
 
 // BlockchainReactor handles long-term catchup syncing.
@@ -59,7 +59,7 @@ type BlockchainReactor struct {
 	fastSync bool
 
 	fsm          *BcReactorFSM
-	blocksSynced int
+	blocksSynced uint64
 
 	// Receive goroutine forwards messages to this channel to be processed in the context of the poolRoutine.
 	messagesForFSMCh chan bcReactorMessage
diff --git a/blockchain/v1/reactor_test.go b/blockchain/v1/reactor_test.go
index 2add11df1..deb73ad6d 100644
--- a/blockchain/v1/reactor_test.go
+++ b/blockchain/v1/reactor_test.go
@@ -157,7 +157,7 @@ type consensusReactorTest struct {
 	mtx                 sync.Mutex
 }
 
-func (conR *consensusReactorTest) SwitchToConsensus(state sm.State, blocksSynced int) {
+func (conR *consensusReactorTest) SwitchToConsensus(state sm.State, blocksSynced uint64) {
 	conR.mtx.Lock()
 	defer conR.mtx.Unlock()
 	conR.switchedToConsensus = true
diff --git a/consensus/reactor.go b/consensus/reactor.go
index 40868ff9d..0f2dad743 100644
--- a/consensus/reactor.go
+++ b/consensus/reactor.go
@@ -98,7 +98,7 @@ func (conR *Reactor) OnStop() {
 
 // SwitchToConsensus switches from fast_sync mode to consensus mode.
 // It resets the state, turns off fast_sync, and starts the consensus state-machine
-func (conR *Reactor) SwitchToConsensus(state sm.State, blocksSynced int) {
+func (conR *Reactor) SwitchToConsensus(state sm.State, blocksSynced uint64) {
 	conR.Logger.Info("SwitchToConsensus")
 	conR.conS.reconstructLastCommit(state)
 	// NOTE: The line below causes broadcastNewRoundStepRoutine() to

From c680507bab100382ebab5b7d49d1f007b8f5c3cf Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Wed, 19 Feb 2020 13:11:17 +0100
Subject: [PATCH 11/74] dep: maunally bump dep (#4436)

replaces #4434

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>
---
 go.mod |  2 +-
 go.sum | 17 +++++++++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 87cab15d0..7b669b1db 100644
--- a/go.mod
+++ b/go.mod
@@ -17,7 +17,7 @@ require (
 	github.com/libp2p/go-buffer-pool v0.0.2
 	github.com/magiconair/properties v1.8.1
 	github.com/pkg/errors v0.9.1
-	github.com/prometheus/client_golang v1.3.0
+	github.com/prometheus/client_golang v1.4.1
 	github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a
 	github.com/rs/cors v1.7.0
 	github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
diff --git a/go.sum b/go.sum
index eb2868125..e606cd3fa 100644
--- a/go.sum
+++ b/go.sum
@@ -141,6 +141,8 @@ github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5a
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1 h1:Xye71clBPdm5HgqGwUkwhbynsUJZhDbS20FvLhQ2izg=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0 h1:xsAVV57WRhGj6kEIi8ReJzQlHHqcBYCElAvkovg3B/4=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/gofuzz v1.0.0 h1:A8PeW59pxE9IoFRqBp37U+mSNaQoZ46F1f0f863XSXw=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
@@ -200,6 +202,7 @@ github.com/jrick/logrotate v1.0.0/go.mod h1:LNinyqDIJnpAur+b8yyulnQw/wDuN1+BYKlT
 github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
 github.com/json-iterator/go v1.1.7/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
 github.com/json-iterator/go v1.1.8/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
+github.com/json-iterator/go v1.1.9/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
 github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo=
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
@@ -294,6 +297,8 @@ github.com/prometheus/client_golang v0.9.3/go.mod h1:/TN21ttK/J9q6uSwhBd54HahCDf
 github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
 github.com/prometheus/client_golang v1.3.0 h1:miYCvYqFXtl/J9FIy8eNpBfYthAEFg+Ys0XyUVEcDsc=
 github.com/prometheus/client_golang v1.3.0/go.mod h1:hJaj2vgQTGQmVCsAACORcieXFeDPbaTKGT+JTgUa3og=
+github.com/prometheus/client_golang v1.4.1 h1:FFSuS004yOQEtDdTq+TAOLP5xUq63KqAFYyOi8zA+Y8=
+github.com/prometheus/client_golang v1.4.1/go.mod h1:e9GMxYsXl05ICDXkRhurwBS4Q3OK1iX/F2sw+iXX5zU=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910 h1:idejC8f05m9MGOsuEi1ATq9shN03HrxNkD/luQvxCv8=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
@@ -303,6 +308,8 @@ github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4 h1:gQz4mCb
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.1.0 h1:ElTg5tNp4DqfV7UQjDqv2+RJlNzsDtvNAWccbItceIE=
 github.com/prometheus/client_model v0.1.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/prometheus/client_model v0.2.0 h1:uq5h0d+GuxiXLJLNABMgp2qUWDPiLvgCzz2dUR+/W/M=
+github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
 github.com/prometheus/common v0.2.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.4.0 h1:7etb9YClo3a6HjLzfl6rIQaU+FDfi0VSX39io3aQ+DM=
@@ -310,6 +317,8 @@ github.com/prometheus/common v0.4.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y8
 github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.7.0 h1:L+1lyG48J1zAQXA3RBX/nG/B3gjlHq0zTt2tlbJLyCY=
 github.com/prometheus/common v0.7.0/go.mod h1:DjGbpBbp5NYNiECxcL/VnbXCCaQpKd3tt26CguLLsqA=
+github.com/prometheus/common v0.9.1 h1:KOMtN28tlbam3/7ZKEYKHhKoJZYYj3gMH4uc62x7X7U=
+github.com/prometheus/common v0.9.1/go.mod h1:yhUN8i9wzaXS3w1O07YhxHEBxD+W35wd8bs7vj7HSQ4=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d h1:GoAlyOgbOEIFdaDqxJVlbOQ1DtGmZWs/Qau0hIlk+WQ=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
@@ -462,6 +471,8 @@ golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191220142924-d4481acd189f h1:68K/z8GLUxV76xGSqwTWw2gyk/jwn79LUL43rES2g8o=
 golang.org/x/sys v0.0.0-20191220142924-d4481acd189f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200122134326-e047566fdf82 h1:ywK/j/KkyTHcdyYSZNXGjMwgmDSfjglYZ3vStQ/gSCU=
+golang.org/x/sys v0.0.0-20200122134326-e047566fdf82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2 h1:tW2bmiBqwgJj/UpqtC8EpXEZVYOwU0yG4iWbprSVAcs=
@@ -485,6 +496,8 @@ golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.0.0-20200103221440-774c71fcf114/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 h1:E7g+9GITq07hpfrRu66IVDexMakfv52eLZ2CXBWiKr4=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 google.golang.org/api v0.3.1/go.mod h1:6wY9I6uQWHQ8EM57III9mq/AjF+i8G65rmVagqKMtkk=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.2.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -512,6 +525,8 @@ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/cheggaaa/pb.v1 v1.0.25/go.mod h1:V/YB90LKu/1FcN3WVnfiiE5oMCibMjukxqG/qStrOgw=
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4=
@@ -530,6 +545,8 @@ gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4 h1:/eiJrUcujPVeJ3xlSWaiNi3uSVmDGBK1pDHUHAnao1I=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.5 h1:ymVxjfMaHvXD8RqPRmzHHsB3VvucivSkIAvJFDI5O3c=
+gopkg.in/yaml.v2 v2.2.5/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=

From b09cdaf1afc7b8ed9c9a1685b36ac27986da87e3 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Wed, 19 Feb 2020 14:01:42 +0100
Subject: [PATCH 12/74] rpc: fix tx_search pagination with ordered results
 (#4437)

---
 CHANGELOG_PENDING.md   |  2 ++
 rpc/client/rpc_test.go | 57 ++++++++++++++++++++++++++++--------
 rpc/core/tx.go         | 66 ++++++++++++++++++++----------------------
 3 files changed, 79 insertions(+), 46 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index 3eea4b2a0..a2fc85ee0 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -21,4 +21,6 @@ program](https://hackerone.com/tendermint).
 
 ### BUG FIXES:
 
+- [rpc] [\#4437](https://github.com/tendermint/tendermint/pull/4437) Fix tx_search pagination with ordered results (@erikgrinaker)
+
 - [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
diff --git a/rpc/client/rpc_test.go b/rpc/client/rpc_test.go
index 55c7755ac..cd27ee4d7 100644
--- a/rpc/client/rpc_test.go
+++ b/rpc/client/rpc_test.go
@@ -17,6 +17,7 @@ import (
 
 	"github.com/tendermint/tendermint/crypto/ed25519"
 	"github.com/tendermint/tendermint/crypto/tmhash"
+	tmbytes "github.com/tendermint/tendermint/libs/bytes"
 	"github.com/tendermint/tendermint/libs/log"
 	tmmath "github.com/tendermint/tendermint/libs/math"
 	mempl "github.com/tendermint/tendermint/mempool"
@@ -414,14 +415,25 @@ func TestTx(t *testing.T) {
 }
 
 func TestTxSearch(t *testing.T) {
-	// first we broadcast a tx
 	c := getHTTPClient()
-	_, _, tx := MakeTxKV()
-	bres, err := c.BroadcastTxCommit(tx)
-	require.Nil(t, err)
 
-	txHeight := bres.Height
-	txHash := bres.Hash
+	// first we broadcast a few txs
+	var tx []byte
+	var txHeight int64
+	var txHash tmbytes.HexBytes
+	for i := 0; i < 10; i++ {
+		_, _, tx = MakeTxKV()
+		res, err := c.BroadcastTxCommit(tx)
+		require.NoError(t, err)
+		txHeight = res.Height
+		txHash = res.Hash
+	}
+
+	// Since we're not using an isolated test server, we'll have lingering transactions
+	// from other tests as well
+	result, err := c.TxSearch("tx.height >= 0", true, 1, 100, "asc")
+	require.NoError(t, err)
+	txCount := len(result.Txs)
 
 	anotherTxHash := types.Tx("a different tx").Hash()
 
@@ -433,6 +445,7 @@ func TestTxSearch(t *testing.T) {
 		result, err := c.TxSearch(fmt.Sprintf("tx.hash='%v'", txHash), true, 1, 30, "asc")
 		require.Nil(t, err)
 		require.Len(t, result.Txs, 1)
+		require.Equal(t, txHash, result.Txs[0].Hash)
 
 		ptx := result.Txs[0]
 		assert.EqualValues(t, txHeight, ptx.Height)
@@ -476,12 +489,7 @@ func TestTxSearch(t *testing.T) {
 		require.Nil(t, err)
 		require.Len(t, result.Txs, 0)
 
-		// broadcast another transaction to make sure we have at least two.
-		_, _, tx2 := MakeTxKV()
-		_, err = c.BroadcastTxCommit(tx2)
-		require.Nil(t, err)
-
-		// chech sorting
+		// check sorting
 		result, err = c.TxSearch(fmt.Sprintf("tx.height >= 1"), false, 1, 30, "asc")
 		require.Nil(t, err)
 		for k := 0; k < len(result.Txs)-1; k++ {
@@ -495,6 +503,31 @@ func TestTxSearch(t *testing.T) {
 			require.GreaterOrEqual(t, result.Txs[k].Height, result.Txs[k+1].Height)
 			require.GreaterOrEqual(t, result.Txs[k].Index, result.Txs[k+1].Index)
 		}
+
+		// check pagination
+		seen := map[int64]bool{}
+		maxHeight := int64(0)
+		perPage := 3
+		pages := txCount/perPage + 1
+		for page := 1; page <= pages; page++ {
+			result, err = c.TxSearch("tx.height >= 1", false, page, perPage, "asc")
+			require.NoError(t, err)
+			if page < pages {
+				require.Len(t, result.Txs, perPage)
+			} else {
+				require.LessOrEqual(t, len(result.Txs), perPage)
+			}
+			require.Equal(t, txCount, result.TotalCount)
+			for _, tx := range result.Txs {
+				require.False(t, seen[tx.Height],
+					"Found duplicate height %v in page %v", tx.Height, page)
+				require.Greater(t, tx.Height, maxHeight,
+					"Found decreasing height %v (max seen %v) in page %v", tx.Height, maxHeight, page)
+				seen[tx.Height] = true
+				maxHeight = tx.Height
+			}
+		}
+		require.Len(t, seen, txCount)
 	}
 }
 
diff --git a/rpc/core/tx.go b/rpc/core/tx.go
index cd6306060..f894424b7 100644
--- a/rpc/core/tx.go
+++ b/rpc/core/tx.go
@@ -72,6 +72,27 @@ func TxSearch(ctx *rpctypes.Context, query string, prove bool, page, perPage int
 		return nil, err
 	}
 
+	// sort results (must be done before pagination)
+	switch orderBy {
+	case "desc":
+		sort.Slice(results, func(i, j int) bool {
+			if results[i].Height == results[j].Height {
+				return results[i].Index > results[j].Index
+			}
+			return results[i].Height > results[j].Height
+		})
+	case "asc", "":
+		sort.Slice(results, func(i, j int) bool {
+			if results[i].Height == results[j].Height {
+				return results[i].Index < results[j].Index
+			}
+			return results[i].Height < results[j].Height
+		})
+	default:
+		return nil, errors.New("expected order_by to be either `asc` or `desc` or empty")
+	}
+
+	// paginate results
 	totalCount := len(results)
 	perPage = validatePerPage(perPage)
 	page, err = validatePage(page, perPage, totalCount)
@@ -79,49 +100,26 @@ func TxSearch(ctx *rpctypes.Context, query string, prove bool, page, perPage int
 		return nil, err
 	}
 	skipCount := validateSkipCount(page, perPage)
+	pageSize := tmmath.MinInt(perPage, totalCount-skipCount)
 
-	apiResults := make([]*ctypes.ResultTx, tmmath.MinInt(perPage, totalCount-skipCount))
-	var proof types.TxProof
-	// if there's no tx in the results array, we don't need to loop through the apiResults array
-	for i := 0; i < len(apiResults); i++ {
-		r := results[skipCount+i]
-		height := r.Height
-		index := r.Index
+	apiResults := make([]*ctypes.ResultTx, 0, pageSize)
+	for i := skipCount; i < skipCount+pageSize; i++ {
+		r := results[i]
 
+		var proof types.TxProof
 		if prove {
-			block := blockStore.LoadBlock(height)
-			proof = block.Data.Txs.Proof(int(index)) // XXX: overflow on 32-bit machines
+			block := blockStore.LoadBlock(r.Height)
+			proof = block.Data.Txs.Proof(int(r.Index)) // XXX: overflow on 32-bit machines
 		}
 
-		apiResults[i] = &ctypes.ResultTx{
+		apiResults = append(apiResults, &ctypes.ResultTx{
 			Hash:     r.Tx.Hash(),
-			Height:   height,
-			Index:    index,
+			Height:   r.Height,
+			Index:    r.Index,
 			TxResult: r.Result,
 			Tx:       r.Tx,
 			Proof:    proof,
-		}
-	}
-
-	if len(apiResults) > 1 {
-		switch orderBy {
-		case "desc":
-			sort.Slice(apiResults, func(i, j int) bool {
-				if apiResults[i].Height == apiResults[j].Height {
-					return apiResults[i].Index > apiResults[j].Index
-				}
-				return apiResults[i].Height > apiResults[j].Height
-			})
-		case "asc", "":
-			sort.Slice(apiResults, func(i, j int) bool {
-				if apiResults[i].Height == apiResults[j].Height {
-					return apiResults[i].Index < apiResults[j].Index
-				}
-				return apiResults[i].Height < apiResults[j].Height
-			})
-		default:
-			return nil, errors.New("expected order_by to be either `asc` or `desc` or empty")
-		}
+		})
 	}
 
 	return &ctypes.ResultTxSearch{Txs: apiResults, TotalCount: totalCount}, nil

From 1874a971706380275d86a53b337a51f55ad83c17 Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Wed, 19 Feb 2020 15:18:52 +0100
Subject: [PATCH 13/74] lite: modified bisection to loop (#4400)

refs #4329

As opposed to using recursion to implement the bisection method of verifying a header, which could have problems with memory allocation (especially for smaller devices), the bisection algorithm now uses a for loop.

* modified bisection to loop

* made lint changes

* made lint changes

* move note to VerifyHeader

since it applies both for sequence and bisection

* test bisection jumps to header signed by 1/3+

 of old validator set

* update labels in debug log calls

* copy tc

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 lite2/client.go       | 115 +++++++++++++--------------
 lite2/client_test.go  | 179 +++++++++++++++++++++++++++++-------------
 lite2/test_helpers.go |  10 +--
 3 files changed, 184 insertions(+), 120 deletions(-)

diff --git a/lite2/client.go b/lite2/client.go
index 3c0a299d8..2c487f9c9 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -294,8 +294,8 @@ func (c *Client) checkTrustedHeaderUsingOptions(options TrustOptions) error {
 	case options.Height < c.trustedHeader.Height:
 		c.logger.Info("Client initialized with old header (trusted is more recent)",
 			"old", options.Height,
-			"trusted", c.trustedHeader.Height,
-			"trusted-hash", hash2str(c.trustedHeader.Hash()))
+			"trustedHeight", c.trustedHeader.Height,
+			"trustedHash", hash2str(c.trustedHeader.Hash()))
 
 		action := fmt.Sprintf(
 			"Rollback to %d (%X)? Note this will remove newer headers up to %d (%X)",
@@ -373,14 +373,14 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 	}
 
 	// 3) Fetch and verify the next vals (verification happens in
-	// updateTrustedHeaderAndVals).
+	// updateTrustedHeaderAndNextVals).
 	nextVals, err := c.validatorSetFromPrimary(options.Height + 1)
 	if err != nil {
 		return err
 	}
 
 	// 4) Persist both of them and continue.
-	return c.updateTrustedHeaderAndVals(h, nextVals)
+	return c.updateTrustedHeaderAndNextVals(h, nextVals)
 }
 
 // Start starts two processes: 1) auto updating 2) removing outdated headers.
@@ -560,6 +560,10 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // If, at any moment, SignedHeader or ValidatorSet are not found by the primary
 // provider, provider.ErrSignedHeaderNotFound /
 // provider.ErrValidatorSetNotFound error is returned.
+//
+// NOTE: although newVals is entered as input, trustedStore will only store the
+// validator set at height newHeader.Height+1 (i.e.
+// newHeader.NextValidatorsHash).
 func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
 	c.logger.Info("VerifyHeader", "height", newHeader.Height, "hash", hash2str(newHeader.Hash()),
 		"vals", hash2str(newVals.Hash()))
@@ -592,7 +596,7 @@ func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 	if err != nil {
 		return err
 	}
-	return c.updateTrustedHeaderAndVals(newHeader, nextVals)
+	return c.updateTrustedHeaderAndNextVals(newHeader, nextVals)
 }
 
 // Primary returns the primary provider.
@@ -678,10 +682,10 @@ func (c *Client) sequence(
 		}
 
 		c.logger.Debug("Verify newHeader against trustedHeader",
-			"lastHeight", c.trustedHeader.Height,
-			"lastHash", c.trustedHeader.Hash(),
+			"trustedHeight", c.trustedHeader.Height,
+			"trustedHash", hash2str(c.trustedHeader.Hash()),
 			"newHeight", interimHeader.Height,
-			"newHash", interimHeader.Hash())
+			"newHash", hash2str(interimHeader.Hash()))
 		err = VerifyAdjacent(c.chainID, trustedHeader, interimHeader, trustedNextVals,
 			c.trustingPeriod, now)
 		if err != nil {
@@ -697,7 +701,7 @@ func (c *Client) sequence(
 				return errors.Wrapf(err, "failed to obtain the vals #%d", height+1)
 			}
 		}
-		err = c.updateTrustedHeaderAndVals(interimHeader, interimNextVals)
+		err = c.updateTrustedHeaderAndNextVals(interimHeader, interimNextVals)
 		if err != nil {
 			return errors.Wrapf(err, "failed to update trusted state #%d", height)
 		}
@@ -710,62 +714,55 @@ func (c *Client) sequence(
 
 // see VerifyHeader
 func (c *Client) bisection(
-	lastHeader *types.SignedHeader,
-	lastVals *types.ValidatorSet,
-	newHeader *types.SignedHeader,
-	newVals *types.ValidatorSet,
+	trustedHeader *types.SignedHeader, // height h
+	trustedNextVals *types.ValidatorSet, // height h + 1
+	newHeader *types.SignedHeader, // height g
+	newVals *types.ValidatorSet, // height g
 	now time.Time) error {
 
-	c.logger.Debug("Verify newHeader against lastHeader",
-		"lastHeight", lastHeader.Height,
-		"lastHash", lastHeader.Hash(),
-		"newHeight", newHeader.Height,
-		"newHash", newHeader.Hash())
-	err := Verify(c.chainID, lastHeader, lastVals, newHeader, newVals, c.trustingPeriod, now, c.trustLevel)
-	switch err.(type) {
-	case nil:
-		return nil
-	case ErrNewValSetCantBeTrusted:
-		// continue bisection
-	default:
-		return errors.Wrapf(err, "failed to verify the header #%d", newHeader.Height)
-	}
+	interimVals := newVals
+	interimHeader := newHeader
 
-	pivot := (c.trustedHeader.Height + newHeader.Header.Height) / 2
-	pivotHeader, pivotVals, err := c.fetchHeaderAndValsAtHeight(pivot)
-	if err != nil {
-		return err
-	}
+	for trustedHeader.Height < newHeader.Height {
+		c.logger.Debug("Verify newHeader against trustedHeader",
+			"trustedHeight", trustedHeader.Height,
+			"trustedHash", hash2str(trustedHeader.Hash()),
+			"newHeight", newHeader.Height,
+			"newHash", hash2str(newHeader.Hash()))
+		err := Verify(c.chainID, trustedHeader, trustedNextVals, interimHeader, interimVals, c.trustingPeriod, now,
+			c.trustLevel)
+		switch err.(type) {
+		case nil:
+			// Update the lower bound to the previous upper bound
+			trustedHeader = interimHeader
+			trustedNextVals, err = c.validatorSetFromPrimary(interimHeader.Height + 1)
+			if err != nil {
+				return err
+			}
+			if !bytes.Equal(trustedHeader.NextValidatorsHash, trustedNextVals.Hash()) {
+				return errors.Errorf("expected next validator's hash %X, but got %X (height #%d)",
+					trustedHeader.NextValidatorsHash,
+					trustedNextVals.Hash(),
+					trustedHeader.Height)
+			}
 
-	// left branch
-	{
-		err := c.bisection(lastHeader, lastVals, pivotHeader, pivotVals, now)
-		if err != nil {
-			return errors.Wrapf(err, "bisection of #%d and #%d", lastHeader.Height, pivot)
-		}
-	}
+			err = c.updateTrustedHeaderAndNextVals(trustedHeader, trustedNextVals)
+			if err != nil {
+				return err
+			}
 
-	// right branch
-	{
-		nextVals, err := c.validatorSetFromPrimary(pivot + 1)
-		if err != nil {
-			return errors.Wrapf(err, "failed to obtain the vals #%d", pivot+1)
-		}
-		if !bytes.Equal(pivotHeader.NextValidatorsHash, nextVals.Hash()) {
-			return errors.Errorf("expected next validator's hash %X, but got %X (height #%d)",
-				pivotHeader.NextValidatorsHash,
-				nextVals.Hash(),
-				pivot)
-		}
+			// Update the upper bound to the untrustedHeader
+			interimHeader, interimVals = newHeader, newVals
 
-		err = c.updateTrustedHeaderAndVals(pivotHeader, nextVals)
-		if err != nil {
-			return errors.Wrapf(err, "failed to update trusted state #%d", pivot)
-		}
+		case ErrNewValSetCantBeTrusted:
+			pivotHeight := (interimHeader.Height + trustedHeader.Height) / 2
+			interimHeader, interimVals, err = c.fetchHeaderAndValsAtHeight(pivotHeight)
+			if err != nil {
+				return err
+			}
 
-		err = c.bisection(pivotHeader, nextVals, newHeader, newVals, now)
-		if err != nil {
-			return errors.Wrapf(err, "bisection of #%d and #%d", pivot, newHeader.Height)
+		default:
+			return errors.Wrapf(err, "failed to verify the header #%d", newHeader.Height)
 		}
 	}
 
@@ -773,7 +770,7 @@ func (c *Client) bisection(
 }
 
 // persist header and next validators to trustedStore.
-func (c *Client) updateTrustedHeaderAndVals(h *types.SignedHeader, nextVals *types.ValidatorSet) error {
+func (c *Client) updateTrustedHeaderAndNextVals(h *types.SignedHeader, nextVals *types.ValidatorSet) error {
 	if !bytes.Equal(h.NextValidatorsHash, nextVals.Hash()) {
 		return errors.Errorf("expected next validator's hash %X, but got %X", h.NextValidatorsHash, nextVals.Hash())
 	}
diff --git a/lite2/client_test.go b/lite2/client_test.go
index e2931f323..d8f44adc6 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -27,8 +27,10 @@ var (
 	bTime, _ = time.Parse(time.RFC3339, "2006-01-02T15:04:05Z")
 	h1       = keys.GenSignedHeader(chainID, 1, bTime, nil, vals, vals,
 		[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys))
+	// 3/3 signed
 	h2 = keys.GenSignedHeaderLastBlockID(chainID, 2, bTime.Add(30*time.Minute), nil, vals, vals,
 		[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys), types.BlockID{Hash: h1.Hash()})
+	// 3/3 signed
 	h3 = keys.GenSignedHeaderLastBlockID(chainID, 3, bTime.Add(1*time.Hour), nil, vals, vals,
 		[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys), types.BlockID{Hash: h2.Hash()})
 	trustPeriod  = 4 * time.Hour
@@ -56,13 +58,14 @@ var (
 
 func TestClient_SequentialVerification(t *testing.T) {
 	testCases := []struct {
+		name         string
 		otherHeaders map[int64]*types.SignedHeader // all except ^
 		vals         map[int64]*types.ValidatorSet
 		initErr      bool
 		verifyErr    bool
 	}{
-		// good
 		{
+			"good",
 			map[int64]*types.SignedHeader{
 				// trusted header
 				1: h1,
@@ -80,8 +83,8 @@ func TestClient_SequentialVerification(t *testing.T) {
 			false,
 			false,
 		},
-		// bad: different first header
 		{
+			"bad: different first header",
 			map[int64]*types.SignedHeader{
 				// different header
 				1: keys.GenSignedHeader(chainID, 1, bTime.Add(1*time.Hour), nil, vals, vals,
@@ -93,8 +96,8 @@ func TestClient_SequentialVerification(t *testing.T) {
 			true,
 			false,
 		},
-		// bad: 1/3 signed interim header
 		{
+			"bad: 1/3 signed interim header",
 			map[int64]*types.SignedHeader{
 				// trusted header
 				1: h1,
@@ -114,8 +117,8 @@ func TestClient_SequentialVerification(t *testing.T) {
 			false,
 			true,
 		},
-		// bad: 1/3 signed last header
 		{
+			"bad: 1/3 signed last header",
 			map[int64]*types.SignedHeader{
 				// trusted header
 				1: h1,
@@ -138,39 +141,42 @@ func TestClient_SequentialVerification(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		c, err := NewClient(
-			chainID,
-			trustOptions,
-			mockp.New(
+		tc := tc
+		t.Run(tc.name, func(t *testing.T) {
+			c, err := NewClient(
 				chainID,
-				tc.otherHeaders,
-				tc.vals,
-			),
-			[]provider.Provider{mockp.New(
-				chainID,
-				tc.otherHeaders,
-				tc.vals,
-			)},
-			dbs.New(dbm.NewMemDB(), chainID),
-			SequentialVerification(),
-		)
+				trustOptions,
+				mockp.New(
+					chainID,
+					tc.otherHeaders,
+					tc.vals,
+				),
+				[]provider.Provider{mockp.New(
+					chainID,
+					tc.otherHeaders,
+					tc.vals,
+				)},
+				dbs.New(dbm.NewMemDB(), chainID),
+				SequentialVerification(),
+			)
+
+			if tc.initErr {
+				require.Error(t, err)
+				return
+			}
 
-		if tc.initErr {
-			require.Error(t, err)
-			continue
-		} else {
 			require.NoError(t, err)
-		}
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
+			err = c.Start()
+			require.NoError(t, err)
+			defer c.Stop()
 
-		_, err = c.VerifyHeaderAtHeight(3, bTime.Add(3*time.Hour))
-		if tc.verifyErr {
-			assert.Error(t, err)
-		} else {
-			assert.NoError(t, err)
-		}
+			_, err = c.VerifyHeaderAtHeight(3, bTime.Add(3*time.Hour))
+			if tc.verifyErr {
+				assert.Error(t, err)
+			} else {
+				assert.NoError(t, err)
+			}
+		})
 	}
 }
 
@@ -179,12 +185,19 @@ func TestClient_SkippingVerification(t *testing.T) {
 	newKeys := genPrivKeys(4)
 	newVals := newKeys.ToValidators(10, 1)
 
+	// 1/3+ of vals, 2/3- of newVals
+	transitKeys := keys.Extend(3)
+	transitVals := transitKeys.ToValidators(10, 1)
+
 	testCases := []struct {
+		name         string
 		otherHeaders map[int64]*types.SignedHeader // all except ^
 		vals         map[int64]*types.ValidatorSet
+		initErr      bool
+		verifyErr    bool
 	}{
-		// good
 		{
+			"good",
 			map[int64]*types.SignedHeader{
 				// trusted header
 				1: h1,
@@ -197,9 +210,28 @@ func TestClient_SkippingVerification(t *testing.T) {
 				3: vals,
 				4: vals,
 			},
+			false,
+			false,
 		},
-		// good, val set changes 100% at height 2
 		{
+			"good, but val set changes by 2/3 (1/3 of vals is still present)",
+			map[int64]*types.SignedHeader{
+				// trusted header
+				1: h1,
+				3: transitKeys.GenSignedHeader(chainID, 3, bTime.Add(2*time.Hour), nil, transitVals, transitVals,
+					[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(transitKeys)),
+			},
+			map[int64]*types.ValidatorSet{
+				1: vals,
+				2: vals,
+				3: transitVals,
+				4: transitVals,
+			},
+			false,
+			false,
+		},
+		{
+			"good, but val set changes 100% at height 2",
 			map[int64]*types.SignedHeader{
 				// trusted header
 				1: h1,
@@ -216,33 +248,68 @@ func TestClient_SkippingVerification(t *testing.T) {
 				3: newVals,
 				4: newVals,
 			},
+			false,
+			false,
+		},
+		{
+			"bad: last header signed by newVals, interim header has no signers",
+			map[int64]*types.SignedHeader{
+				// trusted header
+				1: h1,
+				// last header (0/4 of the original val set signed)
+				2: keys.GenSignedHeader(chainID, 2, bTime.Add(1*time.Hour), nil, vals, newVals,
+					[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, 0),
+				// last header (0/4 of the original val set signed)
+				3: newKeys.GenSignedHeader(chainID, 3, bTime.Add(2*time.Hour), nil, newVals, newVals,
+					[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(newKeys)),
+			},
+			map[int64]*types.ValidatorSet{
+				1: vals,
+				2: vals,
+				3: newVals,
+				4: newVals,
+			},
+			false,
+			true,
 		},
 	}
 
 	for _, tc := range testCases {
-		c, err := NewClient(
-			chainID,
-			trustOptions,
-			mockp.New(
+		tc := tc
+		t.Run(tc.name, func(t *testing.T) {
+			c, err := NewClient(
 				chainID,
-				tc.otherHeaders,
-				tc.vals,
-			),
-			[]provider.Provider{mockp.New(
-				chainID,
-				tc.otherHeaders,
-				tc.vals,
-			)},
-			dbs.New(dbm.NewMemDB(), chainID),
-			SkippingVerification(DefaultTrustLevel),
-		)
-		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
+				trustOptions,
+				mockp.New(
+					chainID,
+					tc.otherHeaders,
+					tc.vals,
+				),
+				[]provider.Provider{mockp.New(
+					chainID,
+					tc.otherHeaders,
+					tc.vals,
+				)},
+				dbs.New(dbm.NewMemDB(), chainID),
+				SkippingVerification(DefaultTrustLevel),
+			)
+			if tc.initErr {
+				require.Error(t, err)
+				return
+			}
 
-		_, err = c.VerifyHeaderAtHeight(3, bTime.Add(3*time.Hour))
-		assert.NoError(t, err)
+			require.NoError(t, err)
+			err = c.Start()
+			require.NoError(t, err)
+			defer c.Stop()
+
+			_, err = c.VerifyHeaderAtHeight(3, bTime.Add(3*time.Hour))
+			if tc.verifyErr {
+				assert.Error(t, err)
+			} else {
+				assert.NoError(t, err)
+			}
+		})
 	}
 }
 
diff --git a/lite2/test_helpers.go b/lite2/test_helpers.go
index 11074f8c0..cc1bf4eb9 100644
--- a/lite2/test_helpers.go
+++ b/lite2/test_helpers.go
@@ -36,11 +36,11 @@ func genPrivKeys(n int) privKeys {
 // 	return res
 // }
 
-// // Extend adds n more keys (to remove, just take a slice).
-// func (pkz privKeys) Extend(n int) privKeys {
-// 	extra := genPrivKeys(n)
-// 	return append(pkz, extra...)
-// }
+// Extend adds n more keys (to remove, just take a slice).
+func (pkz privKeys) Extend(n int) privKeys {
+	extra := genPrivKeys(n)
+	return append(pkz, extra...)
+}
 
 // // GenSecpPrivKeys produces an array of secp256k1 private keys to generate commits.
 // func GenSecpPrivKeys(n int) privKeys {

From 403f43a4770b74546664f2c77720c64234300717 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Wed, 19 Feb 2020 15:36:15 +0100
Subject: [PATCH 14/74] rpc: fix txsearch tests (#4438)

---
 rpc/client/rpc_test.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rpc/client/rpc_test.go b/rpc/client/rpc_test.go
index cd27ee4d7..c1418c816 100644
--- a/rpc/client/rpc_test.go
+++ b/rpc/client/rpc_test.go
@@ -3,6 +3,7 @@ package client_test
 import (
 	"bytes"
 	"fmt"
+	"math"
 	"math/rand"
 	"net/http"
 	"strings"
@@ -508,7 +509,7 @@ func TestTxSearch(t *testing.T) {
 		seen := map[int64]bool{}
 		maxHeight := int64(0)
 		perPage := 3
-		pages := txCount/perPage + 1
+		pages := int(math.Ceil(float64(txCount) / float64(perPage)))
 		for page := 1; page <= pages; page++ {
 			result, err = c.TxSearch("tx.height >= 1", false, page, perPage, "asc")
 			require.NoError(t, err)

From ee993ba8ff9893ab4c46b269987a3138ead223ff Mon Sep 17 00:00:00 2001
From: Sean Braithwaite <brapse@gmail.com>
Date: Wed, 19 Feb 2020 16:00:15 +0100
Subject: [PATCH 15/74] blockchain: add v2 reactor (#4361)

The work includes the reactor which ties together all the seperate routines involved in the design of the blockchain v2 refactor. This PR replaces #4067 which got far too large and messy after a failed attempt to rebase.

## Commits:

* Blockchainv 2 reactor:

	+ I cleaner copy of the work done in #4067 which fell too far behind and was a nightmare to rebase.
	+ The work includes the reactor which ties together all the seperate routines involved in the design of the blockchain v2 refactor.

* fixes after merge

* reorder iIO interface methodset

* change iO -> IO

* panic before send nil block

* rename switchToConsensus -> trySwitchToConsensus

* rename tdState -> tmState

* Update blockchain/v2/reactor.go

Co-Authored-By: Bot from GolangCI <42910462+golangcibot@users.noreply.github.com>

* remove peer when it sends a block unsolicited

* check for not ready in markReceived

* fix error

* fix the pcFinished event

* typo fix

* add documentation for processor fields

* simplify time.Since

* try and make the linter happy

* some doc updates

* fix channel diagram

* Update adr-043-blockchain-riri-org.md

* panic on nil switch

* liting fixes

* account for nil block in bBlockResponseMessage

* panic on duplicate block enqueued by processor

* linting

* goimport reactor_test.go

Co-authored-by: Bot from GolangCI <42910462+golangcibot@users.noreply.github.com>
Co-authored-by: Anca Zamfir <ancazamfir@users.noreply.github.com>
Co-authored-by: Marko <marbar3778@yahoo.com>
Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 behaviour/reporter.go                         |   2 +-
 blockchain/v1/reactor.go                      |   4 +-
 blockchain/v2/codec.go                        |  13 +
 blockchain/v2/io.go                           | 111 ++++
 blockchain/v2/metrics.go                      |   1 +
 blockchain/v2/processor.go                    | 126 ++---
 blockchain/v2/processor_context.go            |  51 +-
 blockchain/v2/processor_test.go               | 179 +++---
 blockchain/v2/reactor.go                      | 521 ++++++++++++++++--
 blockchain/v2/reactor_test.go                 | 513 ++++++++++++++++-
 blockchain/v2/routine.go                      |   5 +-
 blockchain/v2/scheduler.go                    | 203 +++----
 blockchain/v2/scheduler_test.go               | 519 +++++++----------
 blockchain/v2/types.go                        |   1 +
 .../adr-043-blockchain-riri-org.md            |  11 +-
 .../img/blockchain-reactor-v2.png             | Bin 120617 -> 171024 bytes
 .../img/blockchain-v2-channels.png            | Bin 0 -> 109340 bytes
 17 files changed, 1546 insertions(+), 714 deletions(-)
 create mode 100644 blockchain/v2/codec.go
 create mode 100644 blockchain/v2/io.go
 create mode 100644 docs/architecture/img/blockchain-v2-channels.png

diff --git a/behaviour/reporter.go b/behaviour/reporter.go
index 96ce32994..1f16b9bb3 100644
--- a/behaviour/reporter.go
+++ b/behaviour/reporter.go
@@ -19,7 +19,7 @@ type SwitchReporter struct {
 }
 
 // NewSwitchReporter return a new SwitchReporter instance which wraps the Switch.
-func NewSwitcReporter(sw *p2p.Switch) *SwitchReporter {
+func NewSwitchReporter(sw *p2p.Switch) *SwitchReporter {
 	return &SwitchReporter{
 		sw: sw,
 	}
diff --git a/blockchain/v1/reactor.go b/blockchain/v1/reactor.go
index b57901789..1aba26b35 100644
--- a/blockchain/v1/reactor.go
+++ b/blockchain/v1/reactor.go
@@ -103,7 +103,7 @@ func NewBlockchainReactor(state sm.State, blockExec *sm.BlockExecutor, store *st
 	fsm := NewFSM(startHeight, bcR)
 	bcR.fsm = fsm
 	bcR.BaseReactor = *p2p.NewBaseReactor("BlockchainReactor", bcR)
-	//bcR.swReporter = behaviour.NewSwitcReporter(bcR.BaseReactor.Switch)
+	//bcR.swReporter = behaviour.NewSwitchReporter(bcR.BaseReactor.Switch)
 
 	return bcR
 }
@@ -141,7 +141,7 @@ func (bcR *BlockchainReactor) SetLogger(l log.Logger) {
 
 // OnStart implements service.Service.
 func (bcR *BlockchainReactor) OnStart() error {
-	bcR.swReporter = behaviour.NewSwitcReporter(bcR.BaseReactor.Switch)
+	bcR.swReporter = behaviour.NewSwitchReporter(bcR.BaseReactor.Switch)
 	if bcR.fastSync {
 		go bcR.poolRoutine()
 	}
diff --git a/blockchain/v2/codec.go b/blockchain/v2/codec.go
new file mode 100644
index 000000000..f970d115f
--- /dev/null
+++ b/blockchain/v2/codec.go
@@ -0,0 +1,13 @@
+package v2
+
+import (
+	amino "github.com/tendermint/go-amino"
+	"github.com/tendermint/tendermint/types"
+)
+
+var cdc = amino.NewCodec()
+
+func init() {
+	RegisterBlockchainMessages(cdc)
+	types.RegisterBlockAmino(cdc)
+}
diff --git a/blockchain/v2/io.go b/blockchain/v2/io.go
new file mode 100644
index 000000000..3db48c8c0
--- /dev/null
+++ b/blockchain/v2/io.go
@@ -0,0 +1,111 @@
+package v2
+
+import (
+	"fmt"
+
+	"github.com/tendermint/tendermint/p2p"
+	"github.com/tendermint/tendermint/state"
+	"github.com/tendermint/tendermint/types"
+)
+
+type iIO interface {
+	sendBlockRequest(peerID p2p.ID, height int64) error
+	sendBlockToPeer(block *types.Block, peerID p2p.ID) error
+	sendBlockNotFound(height int64, peerID p2p.ID) error
+	sendStatusResponse(height int64, peerID p2p.ID) error
+
+	broadcastStatusRequest(height int64)
+
+	trySwitchToConsensus(state state.State, blocksSynced int)
+}
+
+type switchIO struct {
+	sw *p2p.Switch
+}
+
+func newSwitchIo(sw *p2p.Switch) *switchIO {
+	return &switchIO{
+		sw: sw,
+	}
+}
+
+const (
+	// BlockchainChannel is a channel for blocks and status updates (`BlockStore` height)
+	BlockchainChannel = byte(0x40)
+)
+
+type consensusReactor interface {
+	// for when we switch from blockchain reactor and fast sync to
+	// the consensus machine
+	SwitchToConsensus(state.State, int)
+}
+
+func (sio *switchIO) sendBlockRequest(peerID p2p.ID, height int64) error {
+	peer := sio.sw.Peers().Get(peerID)
+	if peer == nil {
+		return fmt.Errorf("peer not found")
+	}
+
+	msgBytes := cdc.MustMarshalBinaryBare(&bcBlockRequestMessage{Height: height})
+	queued := peer.TrySend(BlockchainChannel, msgBytes)
+	if !queued {
+		return fmt.Errorf("send queue full")
+	}
+	return nil
+}
+
+func (sio *switchIO) sendStatusResponse(height int64, peerID p2p.ID) error {
+	peer := sio.sw.Peers().Get(peerID)
+	if peer == nil {
+		return fmt.Errorf("peer not found")
+	}
+	msgBytes := cdc.MustMarshalBinaryBare(&bcStatusResponseMessage{Height: height})
+
+	if queued := peer.TrySend(BlockchainChannel, msgBytes); !queued {
+		return fmt.Errorf("peer queue full")
+	}
+
+	return nil
+}
+
+func (sio *switchIO) sendBlockToPeer(block *types.Block, peerID p2p.ID) error {
+	peer := sio.sw.Peers().Get(peerID)
+	if peer == nil {
+		return fmt.Errorf("peer not found")
+	}
+	if block == nil {
+		panic("trying to send nil block")
+	}
+	msgBytes := cdc.MustMarshalBinaryBare(&bcBlockResponseMessage{Block: block})
+	if queued := peer.TrySend(BlockchainChannel, msgBytes); !queued {
+		return fmt.Errorf("peer queue full")
+	}
+
+	return nil
+}
+
+func (sio *switchIO) sendBlockNotFound(height int64, peerID p2p.ID) error {
+	peer := sio.sw.Peers().Get(peerID)
+	if peer == nil {
+		return fmt.Errorf("peer not found")
+	}
+	msgBytes := cdc.MustMarshalBinaryBare(&bcNoBlockResponseMessage{Height: height})
+	if queued := peer.TrySend(BlockchainChannel, msgBytes); !queued {
+		return fmt.Errorf("peer queue full")
+	}
+
+	return nil
+}
+
+func (sio *switchIO) trySwitchToConsensus(state state.State, blocksSynced int) {
+	conR, ok := sio.sw.Reactor("CONSENSUS").(consensusReactor)
+	if ok {
+		conR.SwitchToConsensus(state, blocksSynced)
+	}
+}
+
+func (sio *switchIO) broadcastStatusRequest(height int64) {
+	msgBytes := cdc.MustMarshalBinaryBare(&bcStatusRequestMessage{height})
+	// XXX: maybe we should use an io specific peer list here
+	sio.sw.Broadcast(BlockchainChannel, msgBytes)
+}
diff --git a/blockchain/v2/metrics.go b/blockchain/v2/metrics.go
index d865e7360..c68ec6447 100644
--- a/blockchain/v2/metrics.go
+++ b/blockchain/v2/metrics.go
@@ -37,6 +37,7 @@ type Metrics struct {
 	ErrorsShed metrics.Counter
 }
 
+// PrometheusMetrics returns metrics for in and out events, errors, etc. handled by routines.
 // Can we burn in the routine name here?
 func PrometheusMetrics(namespace string, labelsAndValues ...string) *Metrics {
 	labels := []string{}
diff --git a/blockchain/v2/processor.go b/blockchain/v2/processor.go
index e33b36058..d6a2fe1e8 100644
--- a/blockchain/v2/processor.go
+++ b/blockchain/v2/processor.go
@@ -4,23 +4,12 @@ import (
 	"fmt"
 
 	"github.com/tendermint/tendermint/p2p"
-	tdState "github.com/tendermint/tendermint/state"
+	tmState "github.com/tendermint/tendermint/state"
 	"github.com/tendermint/tendermint/types"
 )
 
-type peerError struct {
-	priorityHigh
-	peerID p2p.ID
-}
-
-type pcDuplicateBlock struct {
-	priorityNormal
-}
-
-type pcShortBlock struct {
-	priorityNormal
-}
-
+// Events generated by the processor:
+// block execution failure, event will indicate the peer(s) that caused the error
 type pcBlockVerificationFailure struct {
 	priorityNormal
 	height       int64
@@ -28,24 +17,18 @@ type pcBlockVerificationFailure struct {
 	secondPeerID p2p.ID
 }
 
+// successful block execution
 type pcBlockProcessed struct {
 	priorityNormal
 	height int64
 	peerID p2p.ID
 }
 
-type pcProcessBlock struct {
-	priorityNormal
-}
-
-type pcStop struct {
-	priorityNormal
-}
-
+// processor has finished
 type pcFinished struct {
 	priorityNormal
-	height       int64
-	blocksSynced int64
+	blocksSynced int
+	tmState      tmState.State
 }
 
 func (p pcFinished) Error() string {
@@ -60,37 +43,38 @@ type queueItem struct {
 type blockQueue map[int64]queueItem
 
 type pcState struct {
-	height       int64      // height of the last synced block
-	queue        blockQueue // blocks waiting to be processed
-	chainID      string
-	blocksSynced int64
-	draining     bool
-	tdState      tdState.State
-	context      processorContext
+	// blocks waiting to be processed
+	queue blockQueue
+
+	// draining indicates that the next rProcessBlock event with a queue miss constitutes completion
+	draining bool
+
+	// the number of blocks successfully synced by the processor
+	blocksSynced int
+
+	// the processorContext which contains the processor dependencies
+	context processorContext
 }
 
 func (state *pcState) String() string {
 	return fmt.Sprintf("height: %d queue length: %d draining: %v blocks synced: %d",
-		state.height, len(state.queue), state.draining, state.blocksSynced)
+		state.height(), len(state.queue), state.draining, state.blocksSynced)
 }
 
 // newPcState returns a pcState initialized with the last verified block enqueued
-func newPcState(initHeight int64, tdState tdState.State, chainID string, context processorContext) *pcState {
+func newPcState(context processorContext) *pcState {
 	return &pcState{
-		height:       initHeight,
 		queue:        blockQueue{},
-		chainID:      chainID,
 		draining:     false,
 		blocksSynced: 0,
 		context:      context,
-		tdState:      tdState,
 	}
 }
 
 // nextTwo returns the next two unverified blocks
 func (state *pcState) nextTwo() (queueItem, queueItem, error) {
-	if first, ok := state.queue[state.height+1]; ok {
-		if second, ok := state.queue[state.height+2]; ok {
+	if first, ok := state.queue[state.height()+1]; ok {
+		if second, ok := state.queue[state.height()+2]; ok {
 			return first, second, nil
 		}
 	}
@@ -102,18 +86,15 @@ func (state *pcState) synced() bool {
 	return len(state.queue) <= 1
 }
 
-func (state *pcState) advance() {
-	state.height++
-	delete(state.queue, state.height)
-	state.blocksSynced++
-}
-
-func (state *pcState) enqueue(peerID p2p.ID, block *types.Block, height int64) error {
+func (state *pcState) enqueue(peerID p2p.ID, block *types.Block, height int64) {
 	if _, ok := state.queue[height]; ok {
-		return fmt.Errorf("duplicate queue item")
+		panic("duplicate block enqueued by processor")
 	}
 	state.queue[height] = queueItem{block: block, peerID: peerID}
-	return nil
+}
+
+func (state *pcState) height() int64 {
+	return state.context.tmState().LastBlockHeight
 }
 
 // purgePeer moves all unprocessed blocks from the queue
@@ -129,23 +110,34 @@ func (state *pcState) purgePeer(peerID p2p.ID) {
 // handle processes FSM events
 func (state *pcState) handle(event Event) (Event, error) {
 	switch event := event.(type) {
-	case *scBlockReceived:
+	case scFinishedEv:
+		if state.synced() {
+			return pcFinished{tmState: state.context.tmState(), blocksSynced: state.blocksSynced}, nil
+		}
+		state.draining = true
+		return noOp, nil
+
+	case scPeerError:
+		state.purgePeer(event.peerID)
+		return noOp, nil
+
+	case scBlockReceived:
 		if event.block == nil {
-			panic("processor received an event with a nil block")
-		}
-		if event.block.Height <= state.height {
-			return pcShortBlock{}, nil
-		}
-		err := state.enqueue(event.peerID, event.block, event.block.Height)
-		if err != nil {
-			return pcDuplicateBlock{}, nil
+			return noOp, nil
 		}
 
-	case pcProcessBlock:
+		// enqueue block if height is higher than state height, else ignore it
+		if event.block.Height > state.height() {
+			state.enqueue(event.peerID, event.block, event.block.Height)
+		}
+		return noOp, nil
+
+	case rProcessBlock:
+		tmState := state.context.tmState()
 		firstItem, secondItem, err := state.nextTwo()
 		if err != nil {
 			if state.draining {
-				return noOp, pcFinished{height: state.height}
+				return pcFinished{tmState: tmState, blocksSynced: state.blocksSynced}, nil
 			}
 			return noOp, nil
 		}
@@ -155,7 +147,7 @@ func (state *pcState) handle(event Event) (Event, error) {
 		firstPartsHeader := firstParts.Header()
 		firstID := types.BlockID{Hash: first.Hash(), PartsHeader: firstPartsHeader}
 
-		err = state.context.verifyCommit(state.chainID, firstID, first.Height, second.LastCommit)
+		err = state.context.verifyCommit(tmState.ChainID, firstID, first.Height, second.LastCommit)
 		if err != nil {
 			state.purgePeer(firstItem.peerID)
 			state.purgePeer(secondItem.peerID)
@@ -166,21 +158,15 @@ func (state *pcState) handle(event Event) (Event, error) {
 
 		state.context.saveBlock(first, firstParts, second.LastCommit)
 
-		state.tdState, err = state.context.applyBlock(state.tdState, firstID, first)
-		if err != nil {
+		if err := state.context.applyBlock(firstID, first); err != nil {
 			panic(fmt.Sprintf("failed to process committed block (%d:%X): %v", first.Height, first.Hash(), err))
 		}
-		state.advance()
+
+		delete(state.queue, first.Height)
+		state.blocksSynced++
+
 		return pcBlockProcessed{height: first.Height, peerID: firstItem.peerID}, nil
 
-	case *peerError:
-		state.purgePeer(event.peerID)
-
-	case pcStop:
-		if state.synced() {
-			return noOp, pcFinished{height: state.height, blocksSynced: state.blocksSynced}
-		}
-		state.draining = true
 	}
 
 	return noOp, nil
diff --git a/blockchain/v2/processor_context.go b/blockchain/v2/processor_context.go
index c4c8770cd..7e96a3a69 100644
--- a/blockchain/v2/processor_context.go
+++ b/blockchain/v2/processor_context.go
@@ -4,37 +4,41 @@ import (
 	"fmt"
 
 	"github.com/tendermint/tendermint/state"
-	"github.com/tendermint/tendermint/store"
 	"github.com/tendermint/tendermint/types"
 )
 
 type processorContext interface {
-	applyBlock(state state.State, blockID types.BlockID, block *types.Block) (state.State, error)
+	applyBlock(blockID types.BlockID, block *types.Block) error
 	verifyCommit(chainID string, blockID types.BlockID, height int64, commit *types.Commit) error
 	saveBlock(block *types.Block, blockParts *types.PartSet, seenCommit *types.Commit)
+	tmState() state.State
 }
 
-// nolint:unused
 type pContext struct {
-	store    *store.BlockStore
-	executor *state.BlockExecutor
-	state    *state.State
+	store   blockStore
+	applier blockApplier
+	state   state.State
 }
 
-// nolint:unused,deadcode
-func newProcessorContext(st *store.BlockStore, ex *state.BlockExecutor, s *state.State) *pContext {
+func newProcessorContext(st blockStore, ex blockApplier, s state.State) *pContext {
 	return &pContext{
-		store:    st,
-		executor: ex,
-		state:    s,
+		store:   st,
+		applier: ex,
+		state:   s,
 	}
 }
 
-func (pc *pContext) applyBlock(state state.State, blockID types.BlockID, block *types.Block) (state.State, error) {
-	return pc.executor.ApplyBlock(state, blockID, block)
+func (pc *pContext) applyBlock(blockID types.BlockID, block *types.Block) error {
+	newState, err := pc.applier.ApplyBlock(pc.state, blockID, block)
+	pc.state = newState
+	return err
 }
 
-func (pc *pContext) verifyCommit(chainID string, blockID types.BlockID, height int64, commit *types.Commit) error {
+func (pc pContext) tmState() state.State {
+	return pc.state
+}
+
+func (pc pContext) verifyCommit(chainID string, blockID types.BlockID, height int64, commit *types.Commit) error {
 	return pc.state.Validators.VerifyCommit(chainID, blockID, height, commit)
 }
 
@@ -45,22 +49,28 @@ func (pc *pContext) saveBlock(block *types.Block, blockParts *types.PartSet, see
 type mockPContext struct {
 	applicationBL  []int64
 	verificationBL []int64
+	state          state.State
 }
 
-func newMockProcessorContext(verificationBlackList []int64, applicationBlackList []int64) *mockPContext {
+func newMockProcessorContext(
+	state state.State,
+	verificationBlackList []int64,
+	applicationBlackList []int64) *mockPContext {
 	return &mockPContext{
 		applicationBL:  applicationBlackList,
 		verificationBL: verificationBlackList,
+		state:          state,
 	}
 }
 
-func (mpc *mockPContext) applyBlock(state state.State, blockID types.BlockID, block *types.Block) (state.State, error) {
+func (mpc *mockPContext) applyBlock(blockID types.BlockID, block *types.Block) error {
 	for _, h := range mpc.applicationBL {
 		if h == block.Height {
-			return state, fmt.Errorf("generic application error")
+			return fmt.Errorf("generic application error")
 		}
 	}
-	return state, nil
+	mpc.state.LastBlockHeight = block.Height
+	return nil
 }
 
 func (mpc *mockPContext) verifyCommit(chainID string, blockID types.BlockID, height int64, commit *types.Commit) error {
@@ -73,4 +83,9 @@ func (mpc *mockPContext) verifyCommit(chainID string, blockID types.BlockID, hei
 }
 
 func (mpc *mockPContext) saveBlock(block *types.Block, blockParts *types.PartSet, seenCommit *types.Commit) {
+
+}
+
+func (mpc *mockPContext) tmState() state.State {
+	return mpc.state
 }
diff --git a/blockchain/v2/processor_test.go b/blockchain/v2/processor_test.go
index 61be23663..fc35c4c72 100644
--- a/blockchain/v2/processor_test.go
+++ b/blockchain/v2/processor_test.go
@@ -5,7 +5,7 @@ import (
 
 	"github.com/stretchr/testify/assert"
 	"github.com/tendermint/tendermint/p2p"
-	tdState "github.com/tendermint/tendermint/state"
+	tmState "github.com/tendermint/tendermint/state"
 	"github.com/tendermint/tendermint/types"
 )
 
@@ -19,7 +19,7 @@ type pcBlock struct {
 type params struct {
 	height       int64
 	items        []pcBlock
-	blocksSynced int64
+	blocksSynced int
 	verBL        []int64
 	appBL        []int64
 	draining     bool
@@ -33,13 +33,13 @@ func makePcBlock(height int64) *types.Block {
 // makeState takes test parameters and creates a specific processor state.
 func makeState(p *params) *pcState {
 	var (
-		tdState = tdState.State{}
-		context = newMockProcessorContext(p.verBL, p.appBL)
+		tmState = tmState.State{LastBlockHeight: p.height}
+		context = newMockProcessorContext(tmState, p.verBL, p.appBL)
 	)
-	state := newPcState(p.height, tdState, "test", context)
+	state := newPcState(context)
 
 	for _, item := range p.items {
-		_ = state.enqueue(p2p.ID(item.pid), makePcBlock(item.height), item.height)
+		state.enqueue(p2p.ID(item.pid), makePcBlock(item.height), item.height)
 	}
 
 	state.blocksSynced = p.blocksSynced
@@ -47,8 +47,8 @@ func makeState(p *params) *pcState {
 	return state
 }
 
-func mBlockResponse(peerID p2p.ID, height int64) *scBlockReceived {
-	return &scBlockReceived{
+func mBlockResponse(peerID p2p.ID, height int64) scBlockReceived {
+	return scBlockReceived{
 		peerID: peerID,
 		block:  makePcBlock(height),
 	}
@@ -101,9 +101,37 @@ func executeProcessorTests(t *testing.T, tests []testFields) {
 	}
 }
 
+func TestRProcessPeerError(t *testing.T) {
+	tests := []testFields{
+		{
+			name: "error for existing peer",
+			steps: []pcFsmMakeStateValues{
+				{
+					currentState:  &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}},
+					event:         scPeerError{peerID: "P2"},
+					wantState:     &params{items: []pcBlock{{"P1", 1}}},
+					wantNextEvent: noOp,
+				},
+			},
+		},
+		{
+			name: "error for unknown peer",
+			steps: []pcFsmMakeStateValues{
+				{
+					currentState:  &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}},
+					event:         scPeerError{peerID: "P3"},
+					wantState:     &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}},
+					wantNextEvent: noOp,
+				},
+			},
+		},
+	}
+
+	executeProcessorTests(t, tests)
+}
+
 func TestPcBlockResponse(t *testing.T) {
 	tests := []testFields{
-
 		{
 			name: "add one block",
 			steps: []pcFsmMakeStateValues{
@@ -113,6 +141,7 @@ func TestPcBlockResponse(t *testing.T) {
 				},
 			},
 		},
+
 		{
 			name: "add two blocks",
 			steps: []pcFsmMakeStateValues{
@@ -126,62 +155,18 @@ func TestPcBlockResponse(t *testing.T) {
 				},
 			},
 		},
-		{
-			name: "add duplicate block from same peer",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{}, event: mBlockResponse("P1", 3),
-					wantState: &params{items: []pcBlock{{"P1", 3}}}, wantNextEvent: noOp,
-				},
-				{ // use previous wantState as currentState,
-					event:     mBlockResponse("P1", 3),
-					wantState: &params{items: []pcBlock{{"P1", 3}}}, wantNextEvent: pcDuplicateBlock{},
-				},
-			},
-		},
-		{
-			name: "add duplicate block from different peer",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{}, event: mBlockResponse("P1", 3),
-					wantState: &params{items: []pcBlock{{"P1", 3}}}, wantNextEvent: noOp,
-				},
-				{ // use previous wantState as currentState,
-					event:     mBlockResponse("P2", 3),
-					wantState: &params{items: []pcBlock{{"P1", 3}}}, wantNextEvent: pcDuplicateBlock{},
-				},
-			},
-		},
-		{
-			name: "attempt to add block with height equal to state.height",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{height: 2, items: []pcBlock{{"P1", 3}}}, event: mBlockResponse("P1", 2),
-					wantState: &params{height: 2, items: []pcBlock{{"P1", 3}}}, wantNextEvent: pcShortBlock{},
-				},
-			},
-		},
-		{
-			name: "attempt to add block with height smaller than state.height",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{height: 2, items: []pcBlock{{"P1", 3}}}, event: mBlockResponse("P1", 1),
-					wantState: &params{height: 2, items: []pcBlock{{"P1", 3}}}, wantNextEvent: pcShortBlock{},
-				},
-			},
-		},
 	}
 
 	executeProcessorTests(t, tests)
 }
 
-func TestPcProcessBlockSuccess(t *testing.T) {
+func TestRProcessBlockSuccess(t *testing.T) {
 	tests := []testFields{
 		{
 			name: "noop - no blocks over current height",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{}, event: pcProcessBlock{},
+					currentState: &params{}, event: rProcessBlock{},
 					wantState: &params{}, wantNextEvent: noOp,
 				},
 			},
@@ -190,7 +175,7 @@ func TestPcProcessBlockSuccess(t *testing.T) {
 			name: "noop - high new blocks",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{height: 5, items: []pcBlock{{"P1", 30}, {"P2", 31}}}, event: pcProcessBlock{},
+					currentState: &params{height: 5, items: []pcBlock{{"P1", 30}, {"P2", 31}}}, event: rProcessBlock{},
 					wantState: &params{height: 5, items: []pcBlock{{"P1", 30}, {"P2", 31}}}, wantNextEvent: noOp,
 				},
 			},
@@ -199,7 +184,7 @@ func TestPcProcessBlockSuccess(t *testing.T) {
 			name: "blocks H+1 and H+2 present",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}}, event: pcProcessBlock{},
+					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}}, event: rProcessBlock{},
 					wantState:     &params{height: 1, items: []pcBlock{{"P2", 2}}, blocksSynced: 1},
 					wantNextEvent: pcBlockProcessed{height: 1, peerID: "P1"},
 				},
@@ -209,20 +194,20 @@ func TestPcProcessBlockSuccess(t *testing.T) {
 			name: "blocks H+1 and H+2 present after draining",
 			steps: []pcFsmMakeStateValues{
 				{ // some contiguous blocks - on stop check draining is set
-					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}, {"P1", 4}}}, event: pcStop{},
+					currentState:  &params{items: []pcBlock{{"P1", 1}, {"P2", 2}, {"P1", 4}}},
+					event:         scFinishedEv{},
 					wantState:     &params{items: []pcBlock{{"P1", 1}, {"P2", 2}, {"P1", 4}}, draining: true},
 					wantNextEvent: noOp,
 				},
 				{
-					event:         pcProcessBlock{},
+					event:         rProcessBlock{},
 					wantState:     &params{height: 1, items: []pcBlock{{"P2", 2}, {"P1", 4}}, blocksSynced: 1, draining: true},
 					wantNextEvent: pcBlockProcessed{height: 1, peerID: "P1"},
 				},
 				{ // finish when H+1 or/and H+2 are missing
-					event:         pcProcessBlock{},
+					event:         rProcessBlock{},
 					wantState:     &params{height: 1, items: []pcBlock{{"P2", 2}, {"P1", 4}}, blocksSynced: 1, draining: true},
-					wantNextEvent: noOp,
-					wantErr:       pcFinished{height: 1},
+					wantNextEvent: pcFinished{tmState: tmState.State{LastBlockHeight: 1}, blocksSynced: 1},
 				},
 			},
 		},
@@ -231,13 +216,13 @@ func TestPcProcessBlockSuccess(t *testing.T) {
 	executeProcessorTests(t, tests)
 }
 
-func TestPcProcessBlockFailures(t *testing.T) {
+func TestRProcessBlockFailures(t *testing.T) {
 	tests := []testFields{
 		{
 			name: "blocks H+1 and H+2 present from different peers - H+1 verification fails ",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}, verBL: []int64{1}}, event: pcProcessBlock{},
+					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}, verBL: []int64{1}}, event: rProcessBlock{},
 					wantState:     &params{items: []pcBlock{}, verBL: []int64{1}},
 					wantNextEvent: pcBlockVerificationFailure{height: 1, firstPeerID: "P1", secondPeerID: "P2"},
 				},
@@ -247,7 +232,7 @@ func TestPcProcessBlockFailures(t *testing.T) {
 			name: "blocks H+1 and H+2 present from same peer - H+1 applyBlock fails ",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}, appBL: []int64{1}}, event: pcProcessBlock{},
+					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}, appBL: []int64{1}}, event: rProcessBlock{},
 					wantState: &params{items: []pcBlock{}, appBL: []int64{1}}, wantPanic: true,
 				},
 			},
@@ -256,9 +241,9 @@ func TestPcProcessBlockFailures(t *testing.T) {
 			name: "blocks H+1 and H+2 present from same peers - H+1 verification fails ",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState:  &params{items: []pcBlock{{"P1", 1}, {"P1", 2}, {"P2", 3}}, verBL: []int64{1}},
-					event:         pcProcessBlock{},
-					wantState:     &params{items: []pcBlock{{"P2", 3}}, verBL: []int64{1}},
+					currentState: &params{height: 0, items: []pcBlock{{"P1", 1}, {"P1", 2}, {"P2", 3}},
+						verBL: []int64{1}}, event: rProcessBlock{},
+					wantState:     &params{height: 0, items: []pcBlock{{"P2", 3}}, verBL: []int64{1}},
 					wantNextEvent: pcBlockVerificationFailure{height: 1, firstPeerID: "P1", secondPeerID: "P1"},
 				},
 			},
@@ -268,7 +253,7 @@ func TestPcProcessBlockFailures(t *testing.T) {
 			steps: []pcFsmMakeStateValues{
 				{
 					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}, {"P2", 3}}, appBL: []int64{1}},
-					event:        pcProcessBlock{},
+					event:        rProcessBlock{},
 					wantState:    &params{items: []pcBlock{{"P2", 3}}, appBL: []int64{1}}, wantPanic: true,
 				},
 			},
@@ -278,53 +263,15 @@ func TestPcProcessBlockFailures(t *testing.T) {
 	executeProcessorTests(t, tests)
 }
 
-func TestPcPeerError(t *testing.T) {
-	tests := []testFields{
-		{
-			name: "peer not present",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}}, event: &peerError{peerID: "P3"},
-					wantState:     &params{items: []pcBlock{{"P1", 1}, {"P2", 2}}},
-					wantNextEvent: noOp,
-				},
-			},
-		},
-		{
-			name: "some blocks are from errored peer",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{items: []pcBlock{{"P1", 100}, {"P1", 99}, {"P2", 101}}}, event: &peerError{peerID: "P1"},
-					wantState:     &params{items: []pcBlock{{"P2", 101}}},
-					wantNextEvent: noOp,
-				},
-			},
-		},
-		{
-			name: "all blocks are from errored peer",
-			steps: []pcFsmMakeStateValues{
-				{
-					currentState: &params{items: []pcBlock{{"P1", 100}, {"P1", 99}}}, event: &peerError{peerID: "P1"},
-					wantState:     &params{},
-					wantNextEvent: noOp,
-				},
-			},
-		},
-	}
-
-	executeProcessorTests(t, tests)
-}
-
-func TestStop(t *testing.T) {
+func TestScFinishedEv(t *testing.T) {
 	tests := []testFields{
 		{
 			name: "no blocks",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{height: 100, items: []pcBlock{}, blocksSynced: 100}, event: pcStop{},
+					currentState: &params{height: 100, items: []pcBlock{}, blocksSynced: 100}, event: scFinishedEv{},
 					wantState:     &params{height: 100, items: []pcBlock{}, blocksSynced: 100},
-					wantNextEvent: noOp,
-					wantErr:       pcFinished{height: 100, blocksSynced: 100},
+					wantNextEvent: pcFinished{tmState: tmState.State{LastBlockHeight: 100}, blocksSynced: 100},
 				},
 			},
 		},
@@ -332,10 +279,10 @@ func TestStop(t *testing.T) {
 			name: "maxHeight+1 block present",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{height: 100, items: []pcBlock{{"P1", 101}}, blocksSynced: 100}, event: pcStop{},
+					currentState: &params{height: 100, items: []pcBlock{
+						{"P1", 101}}, blocksSynced: 100}, event: scFinishedEv{},
 					wantState:     &params{height: 100, items: []pcBlock{{"P1", 101}}, blocksSynced: 100},
-					wantNextEvent: noOp,
-					wantErr:       pcFinished{height: 100, blocksSynced: 100},
+					wantNextEvent: pcFinished{tmState: tmState.State{LastBlockHeight: 100}, blocksSynced: 100},
 				},
 			},
 		},
@@ -343,8 +290,10 @@ func TestStop(t *testing.T) {
 			name: "more blocks present",
 			steps: []pcFsmMakeStateValues{
 				{
-					currentState: &params{height: 100, items: []pcBlock{{"P1", 101}, {"P1", 102}}, blocksSynced: 100}, event: pcStop{},
-					wantState:     &params{height: 100, items: []pcBlock{{"P1", 101}, {"P1", 102}}, blocksSynced: 100, draining: true},
+					currentState: &params{height: 100, items: []pcBlock{
+						{"P1", 101}, {"P1", 102}}, blocksSynced: 100}, event: scFinishedEv{},
+					wantState: &params{height: 100, items: []pcBlock{
+						{"P1", 101}, {"P1", 102}}, blocksSynced: 100, draining: true},
 					wantNextEvent: noOp,
 					wantErr:       nil,
 				},
diff --git a/blockchain/v2/reactor.go b/blockchain/v2/reactor.go
index 8f7143083..767e59819 100644
--- a/blockchain/v2/reactor.go
+++ b/blockchain/v2/reactor.go
@@ -1,118 +1,529 @@
 package v2
 
 import (
+	"errors"
 	"fmt"
+	"sync"
 	"time"
 
+	"github.com/tendermint/go-amino"
+	"github.com/tendermint/tendermint/behaviour"
 	"github.com/tendermint/tendermint/libs/log"
+	"github.com/tendermint/tendermint/p2p"
+	"github.com/tendermint/tendermint/state"
+	"github.com/tendermint/tendermint/types"
 )
 
-type timeCheck struct {
-	priorityHigh
-	time time.Time
+//-------------------------------------
+
+type bcBlockRequestMessage struct {
+	Height int64
 }
 
-func schedulerHandle(event Event) (Event, error) {
-	if _, ok := event.(timeCheck); ok {
-		fmt.Println("scheduler handle timeCheck")
+// ValidateBasic performs basic validation.
+func (m *bcBlockRequestMessage) ValidateBasic() error {
+	if m.Height < 0 {
+		return errors.New("negative Height")
 	}
-	return noOp, nil
+	return nil
 }
 
-func processorHandle(event Event) (Event, error) {
-	if _, ok := event.(timeCheck); ok {
-		fmt.Println("processor handle timeCheck")
+func (m *bcBlockRequestMessage) String() string {
+	return fmt.Sprintf("[bcBlockRequestMessage %v]", m.Height)
+}
+
+type bcNoBlockResponseMessage struct {
+	Height int64
+}
+
+// ValidateBasic performs basic validation.
+func (m *bcNoBlockResponseMessage) ValidateBasic() error {
+	if m.Height < 0 {
+		return errors.New("negative Height")
 	}
-	return noOp, nil
-
+	return nil
 }
 
-type Reactor struct {
-	events    chan Event
+func (m *bcNoBlockResponseMessage) String() string {
+	return fmt.Sprintf("[bcNoBlockResponseMessage %d]", m.Height)
+}
+
+//-------------------------------------
+
+type bcBlockResponseMessage struct {
+	Block *types.Block
+}
+
+// ValidateBasic performs basic validation.
+func (m *bcBlockResponseMessage) ValidateBasic() error {
+	if m.Block == nil {
+		return errors.New("block response message has nil block")
+	}
+
+	return m.Block.ValidateBasic()
+}
+
+func (m *bcBlockResponseMessage) String() string {
+	return fmt.Sprintf("[bcBlockResponseMessage %v]", m.Block.Height)
+}
+
+//-------------------------------------
+
+type bcStatusRequestMessage struct {
+	Height int64
+}
+
+// ValidateBasic performs basic validation.
+func (m *bcStatusRequestMessage) ValidateBasic() error {
+	if m.Height < 0 {
+		return errors.New("negative Height")
+	}
+	return nil
+}
+
+func (m *bcStatusRequestMessage) String() string {
+	return fmt.Sprintf("[bcStatusRequestMessage %v]", m.Height)
+}
+
+//-------------------------------------
+
+type bcStatusResponseMessage struct {
+	Height int64
+}
+
+// ValidateBasic performs basic validation.
+func (m *bcStatusResponseMessage) ValidateBasic() error {
+	if m.Height < 0 {
+		return errors.New("negative Height")
+	}
+	return nil
+}
+
+func (m *bcStatusResponseMessage) String() string {
+	return fmt.Sprintf("[bcStatusResponseMessage %v]", m.Height)
+}
+
+type blockStore interface {
+	LoadBlock(height int64) *types.Block
+	SaveBlock(*types.Block, *types.PartSet, *types.Commit)
+	Height() int64
+}
+
+// BlockchainReactor handles fast sync protocol.
+type BlockchainReactor struct {
+	p2p.BaseReactor
+
+	events    chan Event // XXX: Rename eventsFromPeers
 	stopDemux chan struct{}
 	scheduler *Routine
 	processor *Routine
-	ticker    *time.Ticker
 	logger    log.Logger
+
+	mtx           sync.RWMutex
+	maxPeerHeight int64
+	syncHeight    int64
+
+	reporter behaviour.Reporter
+	io       iIO
+	store    blockStore
 }
 
-func NewReactor(bufferSize int) *Reactor {
-	return &Reactor{
+//nolint:unused,deadcode
+type blockVerifier interface {
+	VerifyCommit(chainID string, blockID types.BlockID, height int64, commit *types.Commit) error
+}
+
+//nolint:deadcode
+type blockApplier interface {
+	ApplyBlock(state state.State, blockID types.BlockID, block *types.Block) (state.State, error)
+}
+
+// XXX: unify naming in this package around tmState
+// XXX: V1 stores a copy of state as initialState, which is never mutated. Is that nessesary?
+func newReactor(state state.State, store blockStore, reporter behaviour.Reporter,
+	blockApplier blockApplier, bufferSize int) *BlockchainReactor {
+	scheduler := newScheduler(state.LastBlockHeight, time.Now())
+	pContext := newProcessorContext(store, blockApplier, state)
+	// TODO: Fix naming to just newProcesssor
+	// newPcState requires a processorContext
+	processor := newPcState(pContext)
+
+	return &BlockchainReactor{
 		events:    make(chan Event, bufferSize),
 		stopDemux: make(chan struct{}),
-		scheduler: newRoutine("scheduler", schedulerHandle, bufferSize),
-		processor: newRoutine("processor", processorHandle, bufferSize),
-		ticker:    time.NewTicker(1 * time.Second),
+		scheduler: newRoutine("scheduler", scheduler.handle, bufferSize),
+		processor: newRoutine("processor", processor.handle, bufferSize),
+		store:     store,
+		reporter:  reporter,
 		logger:    log.NewNopLogger(),
 	}
 }
 
-// nolint:unused
-func (r *Reactor) setLogger(logger log.Logger) {
+// NewBlockchainReactor creates a new reactor instance.
+func NewBlockchainReactor(
+	state state.State,
+	blockApplier blockApplier,
+	store blockStore,
+	fastSync bool) *BlockchainReactor {
+	reporter := behaviour.NewMockReporter()
+	return newReactor(state, store, reporter, blockApplier, 1000)
+}
+
+// SetSwitch implements Reactor interface.
+func (r *BlockchainReactor) SetSwitch(sw *p2p.Switch) {
+	if sw == nil {
+		panic("set nil switch")
+	}
+
+	r.Switch = sw
+	r.io = newSwitchIo(sw)
+}
+
+func (r *BlockchainReactor) setMaxPeerHeight(height int64) {
+	r.mtx.Lock()
+	defer r.mtx.Unlock()
+	if height > r.maxPeerHeight {
+		r.maxPeerHeight = height
+	}
+}
+
+func (r *BlockchainReactor) setSyncHeight(height int64) {
+	r.mtx.Lock()
+	defer r.mtx.Unlock()
+	r.syncHeight = height
+}
+
+// SyncHeight returns the height to which the BlockchainReactor has synced.
+func (r *BlockchainReactor) SyncHeight() int64 {
+	r.mtx.RLock()
+	defer r.mtx.RUnlock()
+	return r.syncHeight
+}
+
+// SetLogger sets the logger of the reactor.
+func (r *BlockchainReactor) SetLogger(logger log.Logger) {
 	r.logger = logger
 	r.scheduler.setLogger(logger)
 	r.processor.setLogger(logger)
 }
 
-func (r *Reactor) Start() {
+// Start implements cmn.Service interface
+func (r *BlockchainReactor) Start() error {
+	r.reporter = behaviour.NewSwitchReporter(r.BaseReactor.Switch)
 	go r.scheduler.start()
 	go r.processor.start()
 	go r.demux()
-
-	<-r.scheduler.ready()
-	<-r.processor.ready()
-
-	go func() {
-		for t := range r.ticker.C {
-			r.events <- timeCheck{time: t}
-		}
-	}()
+	return nil
 }
 
-// XXX: How to make this deterministic?
-// XXX: Would it be possible here to provide some kind of type safety for the types
-// of events that each routine can produce and consume?
-func (r *Reactor) demux() {
+// reactor generated ticker events:
+// ticker for cleaning peers
+type rTryPrunePeer struct {
+	priorityHigh
+	time time.Time
+}
+
+func (e rTryPrunePeer) String() string {
+	return fmt.Sprintf(": %v", e.time)
+}
+
+// ticker event for scheduling block requests
+type rTrySchedule struct {
+	priorityHigh
+	time time.Time
+}
+
+func (e rTrySchedule) String() string {
+	return fmt.Sprintf(": %v", e.time)
+}
+
+// ticker for block processing
+type rProcessBlock struct {
+	priorityNormal
+}
+
+// reactor generated events based on blockchain related messages from peers:
+// blockResponse message received from a peer
+type bcBlockResponse struct {
+	priorityNormal
+	time   time.Time
+	peerID p2p.ID
+	size   int64
+	block  *types.Block
+}
+
+// blockNoResponse message received from a peer
+type bcNoBlockResponse struct {
+	priorityNormal
+	time   time.Time
+	peerID p2p.ID
+	height int64
+}
+
+// statusResponse message received from a peer
+type bcStatusResponse struct {
+	priorityNormal
+	time   time.Time
+	peerID p2p.ID
+	height int64
+}
+
+// new peer is connected
+type bcAddNewPeer struct {
+	priorityNormal
+	peerID p2p.ID
+}
+
+// existing peer is removed
+type bcRemovePeer struct {
+	priorityHigh
+	peerID p2p.ID
+	reason interface{}
+}
+
+func (r *BlockchainReactor) demux() {
+	var lastRate = 0.0
+	var lastHundred = time.Now()
+
+	var (
+		processBlockFreq = 20 * time.Millisecond
+		doProcessBlockCh = make(chan struct{}, 1)
+		doProcessBlockTk = time.NewTicker(processBlockFreq)
+
+		prunePeerFreq = 1 * time.Second
+		doPrunePeerCh = make(chan struct{}, 1)
+		doPrunePeerTk = time.NewTicker(prunePeerFreq)
+
+		scheduleFreq = 20 * time.Millisecond
+		doScheduleCh = make(chan struct{}, 1)
+		doScheduleTk = time.NewTicker(scheduleFreq)
+
+		statusFreq = 10 * time.Second
+		doStatusCh = make(chan struct{}, 1)
+		doStatusTk = time.NewTicker(statusFreq)
+	)
+
+	// XXX: Extract timers to make testing atemporal
 	for {
 		select {
+		// Pacers: send at most per frequency but don't saturate
+		case <-doProcessBlockTk.C:
+			select {
+			case doProcessBlockCh <- struct{}{}:
+			default:
+			}
+		case <-doPrunePeerTk.C:
+			select {
+			case doPrunePeerCh <- struct{}{}:
+			default:
+			}
+		case <-doScheduleTk.C:
+			select {
+			case doScheduleCh <- struct{}{}:
+			default:
+			}
+		case <-doStatusTk.C:
+			select {
+			case doStatusCh <- struct{}{}:
+			default:
+			}
+
+		// Tickers: perform tasks periodically
+		case <-doScheduleCh:
+			r.scheduler.send(rTrySchedule{time: time.Now()})
+		case <-doPrunePeerCh:
+			r.scheduler.send(rTryPrunePeer{time: time.Now()})
+		case <-doProcessBlockCh:
+			r.processor.send(rProcessBlock{})
+		case <-doStatusCh:
+			r.io.broadcastStatusRequest(r.SyncHeight())
+
+		// Events from peers
 		case event := <-r.events:
-			// XXX: check for backpressure
-			r.scheduler.send(event)
-			r.processor.send(event)
+			switch event := event.(type) {
+			case bcStatusResponse:
+				r.setMaxPeerHeight(event.height)
+				r.scheduler.send(event)
+			case bcAddNewPeer, bcRemovePeer, bcBlockResponse, bcNoBlockResponse:
+				r.scheduler.send(event)
+			}
+
+		// Incremental events form scheduler
+		case event := <-r.scheduler.next():
+			switch event := event.(type) {
+			case scBlockReceived:
+				r.processor.send(event)
+			case scPeerError:
+				r.processor.send(event)
+				r.reporter.Report(behaviour.BadMessage(event.peerID, "scPeerError"))
+			case scBlockRequest:
+				r.io.sendBlockRequest(event.peerID, event.height)
+			case scFinishedEv:
+				r.processor.send(event)
+				r.scheduler.stop()
+			}
+
+		// Incremental events from processor
+		case event := <-r.processor.next():
+			switch event := event.(type) {
+			case pcBlockProcessed:
+				r.setSyncHeight(event.height)
+				if r.syncHeight%100 == 0 {
+					lastRate = 0.9*lastRate + 0.1*(100/time.Since(lastHundred).Seconds())
+					r.logger.Info("Fast Syncc Rate", "height", r.syncHeight,
+						"max_peer_height", r.maxPeerHeight, "blocks/s", lastRate)
+					lastHundred = time.Now()
+				}
+				r.scheduler.send(event)
+			case pcBlockVerificationFailure:
+				r.scheduler.send(event)
+			case pcFinished:
+				r.io.trySwitchToConsensus(event.tmState, event.blocksSynced)
+				r.processor.stop()
+			}
+
+		// Terminal events from scheduler
+		case err := <-r.scheduler.final():
+			r.logger.Info(fmt.Sprintf("scheduler final %s", err))
+			// send the processor stop?
+
+		// Terminal event from processor
+		case event := <-r.processor.final():
+			r.logger.Info(fmt.Sprintf("processor final %s", event))
+
 		case <-r.stopDemux:
 			r.logger.Info("demuxing stopped")
 			return
-		case event := <-r.scheduler.next():
-			r.processor.send(event)
-		case event := <-r.processor.next():
-			r.scheduler.send(event)
-		case err := <-r.scheduler.final():
-			r.logger.Info(fmt.Sprintf("scheduler final %s", err))
-		case err := <-r.processor.final():
-			r.logger.Info(fmt.Sprintf("processor final %s", err))
-			// XXX: switch to consensus
 		}
 	}
 }
 
-func (r *Reactor) Stop() {
+// Stop implements cmn.Service interface.
+func (r *BlockchainReactor) Stop() error {
 	r.logger.Info("reactor stopping")
 
-	r.ticker.Stop()
 	r.scheduler.stop()
 	r.processor.stop()
 	close(r.stopDemux)
 	close(r.events)
 
 	r.logger.Info("reactor stopped")
+	return nil
 }
 
-func (r *Reactor) Receive(event Event) {
-	// XXX: decode and serialize write events
-	// TODO: backpressure
+const (
+	// NOTE: keep up to date with bcBlockResponseMessage
+	bcBlockResponseMessagePrefixSize   = 4
+	bcBlockResponseMessageFieldKeySize = 1
+	maxMsgSize                         = types.MaxBlockSizeBytes +
+		bcBlockResponseMessagePrefixSize +
+		bcBlockResponseMessageFieldKeySize
+)
+
+// BlockchainMessage is a generic message for this reactor.
+type BlockchainMessage interface {
+	ValidateBasic() error
+}
+
+// RegisterBlockchainMessages registers the fast sync messages for amino encoding.
+func RegisterBlockchainMessages(cdc *amino.Codec) {
+	cdc.RegisterInterface((*BlockchainMessage)(nil), nil)
+	cdc.RegisterConcrete(&bcBlockRequestMessage{}, "tendermint/blockchain/BlockRequest", nil)
+	cdc.RegisterConcrete(&bcBlockResponseMessage{}, "tendermint/blockchain/BlockResponse", nil)
+	cdc.RegisterConcrete(&bcNoBlockResponseMessage{}, "tendermint/blockchain/NoBlockResponse", nil)
+	cdc.RegisterConcrete(&bcStatusResponseMessage{}, "tendermint/blockchain/StatusResponse", nil)
+	cdc.RegisterConcrete(&bcStatusRequestMessage{}, "tendermint/blockchain/StatusRequest", nil)
+}
+
+func decodeMsg(bz []byte) (msg BlockchainMessage, err error) {
+	if len(bz) > maxMsgSize {
+		return msg, fmt.Errorf("msg exceeds max size (%d > %d)", len(bz), maxMsgSize)
+	}
+	err = cdc.UnmarshalBinaryBare(bz, &msg)
+	return
+}
+
+// Receive implements Reactor by handling different message types.
+func (r *BlockchainReactor) Receive(chID byte, src p2p.Peer, msgBytes []byte) {
+	msg, err := decodeMsg(msgBytes)
+	if err != nil {
+		r.logger.Error("error decoding message",
+			"src", src.ID(), "chId", chID, "msg", msg, "err", err, "bytes", msgBytes)
+		_ = r.reporter.Report(behaviour.BadMessage(src.ID(), err.Error()))
+		return
+	}
+
+	if err = msg.ValidateBasic(); err != nil {
+		r.logger.Error("peer sent us invalid msg", "peer", src, "msg", msg, "err", err)
+		_ = r.reporter.Report(behaviour.BadMessage(src.ID(), err.Error()))
+		return
+	}
+
+	r.logger.Debug("Receive", "src", src.ID(), "chID", chID, "msg", msg)
+
+	switch msg := msg.(type) {
+	case *bcStatusRequestMessage:
+		if err := r.io.sendStatusResponse(r.store.Height(), src.ID()); err != nil {
+			r.logger.Error("Could not send status message to peer", "src", src)
+		}
+
+	case *bcBlockRequestMessage:
+		block := r.store.LoadBlock(msg.Height)
+		if block != nil {
+			if err = r.io.sendBlockToPeer(block, src.ID()); err != nil {
+				r.logger.Error("Could not send block message to peer: ", err)
+			}
+		} else {
+			r.logger.Info("peer asking for a block we don't have", "src", src, "height", msg.Height)
+			peerID := src.ID()
+			if err = r.io.sendBlockNotFound(msg.Height, peerID); err != nil {
+				r.logger.Error("Couldn't send block not found: ", err)
+			}
+		}
+
+	case *bcStatusResponseMessage:
+		r.events <- bcStatusResponse{peerID: src.ID(), height: msg.Height}
+
+	case *bcBlockResponseMessage:
+		r.events <- bcBlockResponse{
+			peerID: src.ID(),
+			block:  msg.Block,
+			size:   int64(len(msgBytes)),
+			time:   time.Now(),
+		}
+
+	case *bcNoBlockResponseMessage:
+		r.events <- bcNoBlockResponse{peerID: src.ID(), height: msg.Height, time: time.Now()}
+	}
+}
+
+// AddPeer implements Reactor interface
+func (r *BlockchainReactor) AddPeer(peer p2p.Peer) {
+	err := r.io.sendStatusResponse(r.store.Height(), peer.ID())
+	if err != nil {
+		r.logger.Error("Could not send status message to peer new", "src", peer.ID, "height", r.SyncHeight())
+	}
+	r.events <- bcAddNewPeer{peerID: peer.ID()}
+}
+
+// RemovePeer implements Reactor interface.
+func (r *BlockchainReactor) RemovePeer(peer p2p.Peer, reason interface{}) {
+	event := bcRemovePeer{
+		peerID: peer.ID(),
+		reason: reason,
+	}
 	r.events <- event
 }
 
-func (r *Reactor) AddPeer() {
-	// TODO: add peer event and send to demuxer
+// GetChannels implements Reactor
+func (r *BlockchainReactor) GetChannels() []*p2p.ChannelDescriptor {
+	return []*p2p.ChannelDescriptor{
+		{
+			ID:                  BlockchainChannel,
+			Priority:            10,
+			SendQueueCapacity:   2000,
+			RecvBufferCapacity:  50 * 4096,
+			RecvMessageCapacity: maxMsgSize,
+		},
+	}
 }
diff --git a/blockchain/v2/reactor_test.go b/blockchain/v2/reactor_test.go
index 46a2e60c6..10457cdb0 100644
--- a/blockchain/v2/reactor_test.go
+++ b/blockchain/v2/reactor_test.go
@@ -1,22 +1,517 @@
 package v2
 
 import (
+	"net"
+	"os"
+	"sort"
+	"sync"
 	"testing"
+	"time"
+
+	"github.com/pkg/errors"
+	"github.com/stretchr/testify/assert"
+	abci "github.com/tendermint/tendermint/abci/types"
+	"github.com/tendermint/tendermint/behaviour"
+	cfg "github.com/tendermint/tendermint/config"
+	"github.com/tendermint/tendermint/libs/log"
+	"github.com/tendermint/tendermint/libs/service"
+	"github.com/tendermint/tendermint/mock"
+	"github.com/tendermint/tendermint/p2p"
+	"github.com/tendermint/tendermint/p2p/conn"
+	"github.com/tendermint/tendermint/proxy"
+	sm "github.com/tendermint/tendermint/state"
+	"github.com/tendermint/tendermint/store"
+	"github.com/tendermint/tendermint/types"
+	tmtime "github.com/tendermint/tendermint/types/time"
+	dbm "github.com/tendermint/tm-db"
 )
 
-func TestReactor(t *testing.T) {
+type mockPeer struct {
+	service.Service
+	id p2p.ID
+}
+
+func (mp mockPeer) FlushStop()           {}
+func (mp mockPeer) ID() p2p.ID           { return mp.id }
+func (mp mockPeer) RemoteIP() net.IP     { return net.IP{} }
+func (mp mockPeer) RemoteAddr() net.Addr { return &net.TCPAddr{IP: mp.RemoteIP(), Port: 8800} }
+
+func (mp mockPeer) IsOutbound() bool   { return true }
+func (mp mockPeer) IsPersistent() bool { return true }
+func (mp mockPeer) CloseConn() error   { return nil }
+
+func (mp mockPeer) NodeInfo() p2p.NodeInfo {
+	return p2p.DefaultNodeInfo{
+		DefaultNodeID: "",
+		ListenAddr:    "",
+	}
+}
+func (mp mockPeer) Status() conn.ConnectionStatus { return conn.ConnectionStatus{} }
+func (mp mockPeer) SocketAddr() *p2p.NetAddress   { return &p2p.NetAddress{} }
+
+func (mp mockPeer) Send(byte, []byte) bool    { return true }
+func (mp mockPeer) TrySend(byte, []byte) bool { return true }
+
+func (mp mockPeer) Set(string, interface{}) {}
+func (mp mockPeer) Get(string) interface{}  { return struct{}{} }
+
+//nolint:unused
+type mockBlockStore struct {
+	blocks map[int64]*types.Block
+}
+
+func (ml *mockBlockStore) Height() int64 {
+	return int64(len(ml.blocks))
+}
+
+func (ml *mockBlockStore) LoadBlock(height int64) *types.Block {
+	return ml.blocks[height]
+}
+
+func (ml *mockBlockStore) SaveBlock(block *types.Block, part *types.PartSet, commit *types.Commit) {
+	ml.blocks[block.Height] = block
+}
+
+type mockBlockApplier struct {
+}
+
+// XXX: Add whitelist/blacklist?
+func (mba *mockBlockApplier) ApplyBlock(state sm.State, blockID types.BlockID, block *types.Block) (sm.State, error) {
+	state.LastBlockHeight++
+	return state, nil
+}
+
+type mockSwitchIo struct {
+	mtx                 sync.Mutex
+	switchedToConsensus bool
+	numStatusResponse   int
+	numBlockResponse    int
+	numNoBlockResponse  int
+}
+
+func (sio *mockSwitchIo) sendBlockRequest(peerID p2p.ID, height int64) error {
+	return nil
+}
+
+func (sio *mockSwitchIo) sendStatusResponse(height int64, peerID p2p.ID) error {
+	sio.mtx.Lock()
+	defer sio.mtx.Unlock()
+	sio.numStatusResponse++
+	return nil
+}
+
+func (sio *mockSwitchIo) sendBlockToPeer(block *types.Block, peerID p2p.ID) error {
+	sio.mtx.Lock()
+	defer sio.mtx.Unlock()
+	sio.numBlockResponse++
+	return nil
+}
+
+func (sio *mockSwitchIo) sendBlockNotFound(height int64, peerID p2p.ID) error {
+	sio.mtx.Lock()
+	defer sio.mtx.Unlock()
+	sio.numNoBlockResponse++
+	return nil
+}
+
+func (sio *mockSwitchIo) trySwitchToConsensus(state sm.State, blocksSynced int) {
+	sio.mtx.Lock()
+	defer sio.mtx.Unlock()
+	sio.switchedToConsensus = true
+}
+
+func (sio *mockSwitchIo) hasSwitchedToConsensus() bool {
+	sio.mtx.Lock()
+	defer sio.mtx.Unlock()
+	return sio.switchedToConsensus
+}
+
+func (sio *mockSwitchIo) broadcastStatusRequest(height int64) {
+}
+
+type testReactorParams struct {
+	logger      log.Logger
+	genDoc      *types.GenesisDoc
+	privVals    []types.PrivValidator
+	startHeight int64
+	bufferSize  int
+	mockA       bool
+}
+
+func newTestReactor(p testReactorParams) *BlockchainReactor {
+	store, state, _ := newReactorStore(p.genDoc, p.privVals, p.startHeight)
+	reporter := behaviour.NewMockReporter()
+
+	var appl blockApplier
+
+	if p.mockA {
+		appl = &mockBlockApplier{}
+	} else {
+		app := &testApp{}
+		cc := proxy.NewLocalClientCreator(app)
+		proxyApp := proxy.NewAppConns(cc)
+		err := proxyApp.Start()
+		if err != nil {
+			panic(errors.Wrap(err, "error start app"))
+		}
+		db := dbm.NewMemDB()
+		appl = sm.NewBlockExecutor(db, p.logger, proxyApp.Consensus(), mock.Mempool{}, sm.MockEvidencePool{})
+		sm.SaveState(db, state)
+	}
+
+	r := newReactor(state, store, reporter, appl, p.bufferSize)
+	logger := log.TestingLogger()
+	r.SetLogger(logger.With("module", "blockchain"))
+
+	return r
+}
+
+func TestReactorTerminationScenarios(t *testing.T) {
+
+	config := cfg.ResetTestRoot("blockchain_reactor_v2_test")
+	defer os.RemoveAll(config.RootDir)
+	genDoc, privVals := randGenesisDoc(config.ChainID(), 1, false, 30)
+	refStore, _, _ := newReactorStore(genDoc, privVals, 20)
+
+	params := testReactorParams{
+		logger:      log.TestingLogger(),
+		genDoc:      genDoc,
+		privVals:    privVals,
+		startHeight: 10,
+		bufferSize:  100,
+		mockA:       true,
+	}
+
+	type testEvent struct {
+		evType string
+		peer   string
+		height int64
+	}
+
+	tests := []struct {
+		name   string
+		params testReactorParams
+		msgs   []testEvent
+	}{
+		{
+			name:   "simple termination on max peer height - one peer",
+			params: params,
+			msgs: []testEvent{
+				{evType: "AddPeer", peer: "P1"},
+				{evType: "ReceiveS", peer: "P1", height: 13},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P1", height: 11},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P1", height: 12},
+				{evType: "Process"},
+				{evType: "ReceiveB", peer: "P1", height: 13},
+				{evType: "Process"},
+			},
+		},
+		{
+			name:   "simple termination on max peer height - two peers",
+			params: params,
+			msgs: []testEvent{
+				{evType: "AddPeer", peer: "P1"},
+				{evType: "AddPeer", peer: "P2"},
+				{evType: "ReceiveS", peer: "P1", height: 13},
+				{evType: "ReceiveS", peer: "P2", height: 15},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P1", height: 11},
+				{evType: "ReceiveB", peer: "P2", height: 12},
+				{evType: "Process"},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P1", height: 13},
+				{evType: "Process"},
+				{evType: "ReceiveB", peer: "P2", height: 14},
+				{evType: "Process"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 15},
+				{evType: "Process"},
+			},
+		},
+		{
+			name:   "termination on max peer height - two peers, noBlock error",
+			params: params,
+			msgs: []testEvent{
+				{evType: "AddPeer", peer: "P1"},
+				{evType: "AddPeer", peer: "P2"},
+				{evType: "ReceiveS", peer: "P1", height: 13},
+				{evType: "ReceiveS", peer: "P2", height: 15},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveNB", peer: "P1", height: 11},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 12},
+				{evType: "ReceiveB", peer: "P2", height: 11},
+				{evType: "Process"},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 13},
+				{evType: "Process"},
+				{evType: "ReceiveB", peer: "P2", height: 14},
+				{evType: "Process"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 15},
+				{evType: "Process"},
+			},
+		},
+		{
+			name:   "termination on max peer height - two peers, remove one peer",
+			params: params,
+			msgs: []testEvent{
+				{evType: "AddPeer", peer: "P1"},
+				{evType: "AddPeer", peer: "P2"},
+				{evType: "ReceiveS", peer: "P1", height: 13},
+				{evType: "ReceiveS", peer: "P2", height: 15},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "RemovePeer", peer: "P1"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 12},
+				{evType: "ReceiveB", peer: "P2", height: 11},
+				{evType: "Process"},
+				{evType: "BlockReq"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 13},
+				{evType: "Process"},
+				{evType: "ReceiveB", peer: "P2", height: 14},
+				{evType: "Process"},
+				{evType: "BlockReq"},
+				{evType: "ReceiveB", peer: "P2", height: 15},
+				{evType: "Process"},
+			},
+		},
+	}
+
+	for _, tt := range tests {
+		tt := tt
+		t.Run(tt.name, func(t *testing.T) {
+			reactor := newTestReactor(params)
+			reactor.Start()
+			reactor.reporter = behaviour.NewMockReporter()
+			mockSwitch := &mockSwitchIo{switchedToConsensus: false}
+			reactor.io = mockSwitch
+			// time for go routines to start
+			time.Sleep(time.Millisecond)
+
+			for _, step := range tt.msgs {
+				switch step.evType {
+				case "AddPeer":
+					reactor.scheduler.send(bcAddNewPeer{peerID: p2p.ID(step.peer)})
+				case "RemovePeer":
+					reactor.scheduler.send(bcRemovePeer{peerID: p2p.ID(step.peer)})
+				case "ReceiveS":
+					reactor.scheduler.send(bcStatusResponse{
+						peerID: p2p.ID(step.peer),
+						height: step.height,
+						time:   time.Now(),
+					})
+				case "ReceiveB":
+					reactor.scheduler.send(bcBlockResponse{
+						peerID: p2p.ID(step.peer),
+						block:  refStore.LoadBlock(step.height),
+						size:   10,
+						time:   time.Now(),
+					})
+				case "ReceiveNB":
+					reactor.scheduler.send(bcNoBlockResponse{
+						peerID: p2p.ID(step.peer),
+						height: step.height,
+						time:   time.Now(),
+					})
+				case "BlockReq":
+					reactor.scheduler.send(rTrySchedule{time: time.Now()})
+				case "Process":
+					reactor.processor.send(rProcessBlock{})
+				}
+				// give time for messages to propagate between routines
+				time.Sleep(time.Millisecond)
+			}
+
+			// time for processor to finish and reactor to switch to consensus
+			time.Sleep(20 * time.Millisecond)
+			assert.True(t, mockSwitch.hasSwitchedToConsensus())
+			reactor.Stop()
+		})
+	}
+}
+
+func TestReactorHelperMode(t *testing.T) {
 	var (
-		bufferSize = 10
-		reactor    = NewReactor(bufferSize)
+		channelID = byte(0x40)
 	)
 
-	reactor.Start()
-	script := []Event{
-		// TODO
+	config := cfg.ResetTestRoot("blockchain_reactor_v2_test")
+	defer os.RemoveAll(config.RootDir)
+	genDoc, privVals := randGenesisDoc(config.ChainID(), 1, false, 30)
+
+	params := testReactorParams{
+		logger:      log.TestingLogger(),
+		genDoc:      genDoc,
+		privVals:    privVals,
+		startHeight: 20,
+		bufferSize:  100,
+		mockA:       true,
 	}
 
-	for _, event := range script {
-		reactor.Receive(event)
+	type testEvent struct {
+		peer  string
+		event interface{}
+	}
+
+	tests := []struct {
+		name   string
+		params testReactorParams
+		msgs   []testEvent
+	}{
+		{
+			name:   "status request",
+			params: params,
+			msgs: []testEvent{
+				{"P1", bcStatusRequestMessage{}},
+				{"P1", bcBlockRequestMessage{Height: 13}},
+				{"P1", bcBlockRequestMessage{Height: 20}},
+				{"P1", bcBlockRequestMessage{Height: 22}},
+			},
+		},
+	}
+
+	for _, tt := range tests {
+		tt := tt
+		t.Run(tt.name, func(t *testing.T) {
+			reactor := newTestReactor(params)
+			reactor.Start()
+			mockSwitch := &mockSwitchIo{switchedToConsensus: false}
+			reactor.io = mockSwitch
+
+			for i := 0; i < len(tt.msgs); i++ {
+				step := tt.msgs[i]
+				switch ev := step.event.(type) {
+				case bcStatusRequestMessage:
+					old := mockSwitch.numStatusResponse
+					reactor.Receive(channelID, mockPeer{id: p2p.ID(step.peer)}, cdc.MustMarshalBinaryBare(ev))
+					assert.Equal(t, old+1, mockSwitch.numStatusResponse)
+				case bcBlockRequestMessage:
+					if ev.Height > params.startHeight {
+						old := mockSwitch.numNoBlockResponse
+						reactor.Receive(channelID, mockPeer{id: p2p.ID(step.peer)}, cdc.MustMarshalBinaryBare(ev))
+						assert.Equal(t, old+1, mockSwitch.numNoBlockResponse)
+					} else {
+						old := mockSwitch.numBlockResponse
+						reactor.Receive(channelID, mockPeer{id: p2p.ID(step.peer)}, cdc.MustMarshalBinaryBare(ev))
+						assert.Equal(t, old+1, mockSwitch.numBlockResponse)
+					}
+				}
+			}
+			reactor.Stop()
+		})
 	}
-	reactor.Stop()
+}
+
+//----------------------------------------------
+// utility funcs
+
+func makeTxs(height int64) (txs []types.Tx) {
+	for i := 0; i < 10; i++ {
+		txs = append(txs, types.Tx([]byte{byte(height), byte(i)}))
+	}
+	return txs
+}
+
+func makeBlock(height int64, state sm.State, lastCommit *types.Commit) *types.Block {
+	block, _ := state.MakeBlock(height, makeTxs(height), lastCommit, nil, state.Validators.GetProposer().Address)
+	return block
+}
+
+type testApp struct {
+	abci.BaseApplication
+}
+
+func randGenesisDoc(chainID string, numValidators int, randPower bool, minPower int64) (
+	*types.GenesisDoc, []types.PrivValidator) {
+	validators := make([]types.GenesisValidator, numValidators)
+	privValidators := make([]types.PrivValidator, numValidators)
+	for i := 0; i < numValidators; i++ {
+		val, privVal := types.RandValidator(randPower, minPower)
+		validators[i] = types.GenesisValidator{
+			PubKey: val.PubKey,
+			Power:  val.VotingPower,
+		}
+		privValidators[i] = privVal
+	}
+	sort.Sort(types.PrivValidatorsByAddress(privValidators))
+
+	return &types.GenesisDoc{
+		GenesisTime: tmtime.Now(),
+		ChainID:     chainID,
+		Validators:  validators,
+	}, privValidators
+}
+
+// Why are we importing the entire blockExecutor dependency graph here
+// when we have the facilities to
+func newReactorStore(
+	genDoc *types.GenesisDoc,
+	privVals []types.PrivValidator,
+	maxBlockHeight int64) (*store.BlockStore, sm.State, *sm.BlockExecutor) {
+	if len(privVals) != 1 {
+		panic("only support one validator")
+	}
+	app := &testApp{}
+	cc := proxy.NewLocalClientCreator(app)
+	proxyApp := proxy.NewAppConns(cc)
+	err := proxyApp.Start()
+	if err != nil {
+		panic(errors.Wrap(err, "error start app"))
+	}
+
+	stateDB := dbm.NewMemDB()
+	blockStore := store.NewBlockStore(dbm.NewMemDB())
+
+	state, err := sm.LoadStateFromDBOrGenesisDoc(stateDB, genDoc)
+	if err != nil {
+		panic(errors.Wrap(err, "error constructing state from genesis file"))
+	}
+
+	db := dbm.NewMemDB()
+	blockExec := sm.NewBlockExecutor(db, log.TestingLogger(), proxyApp.Consensus(),
+		mock.Mempool{}, sm.MockEvidencePool{})
+	sm.SaveState(db, state)
+
+	// add blocks in
+	for blockHeight := int64(1); blockHeight <= maxBlockHeight; blockHeight++ {
+		lastCommit := types.NewCommit(blockHeight-1, 0, types.BlockID{}, nil)
+		if blockHeight > 1 {
+			lastBlockMeta := blockStore.LoadBlockMeta(blockHeight - 1)
+			lastBlock := blockStore.LoadBlock(blockHeight - 1)
+			vote, err := types.MakeVote(
+				lastBlock.Header.Height,
+				lastBlockMeta.BlockID,
+				state.Validators,
+				privVals[0],
+				lastBlock.Header.ChainID)
+			if err != nil {
+				panic(err)
+			}
+			lastCommit = types.NewCommit(vote.Height, vote.Round,
+				lastBlockMeta.BlockID, []types.CommitSig{vote.CommitSig()})
+		}
+
+		thisBlock := makeBlock(blockHeight, state, lastCommit)
+
+		thisParts := thisBlock.MakePartSet(types.BlockPartSizeBytes)
+		blockID := types.BlockID{Hash: thisBlock.Hash(), PartsHeader: thisParts.Header()}
+
+		state, err = blockExec.ApplyBlock(state, blockID, thisBlock)
+		if err != nil {
+			panic(errors.Wrap(err, "error apply block"))
+		}
+
+		blockStore.SaveBlock(thisBlock, thisParts, lastCommit)
+	}
+	return blockStore, state, blockExec
 }
diff --git a/blockchain/v2/routine.go b/blockchain/v2/routine.go
index 897dd738c..1a883c3c4 100644
--- a/blockchain/v2/routine.go
+++ b/blockchain/v2/routine.go
@@ -10,7 +10,7 @@ import (
 
 type handleFunc = func(event Event) (Event, error)
 
-// Routines are a structure which model a finite state machine as serialized
+// Routine is a structure that models a finite state machine as serialized
 // stream of events processed by a handle function. This Routine structure
 // handles the concurrency and messaging guarantees. Events are sent via
 // `send` are handled by the `handle` function to produce an iterator
@@ -80,7 +80,7 @@ func (rt *Routine) start() {
 			return
 		}
 		rt.metrics.EventsOut.With("routine", rt.name).Add(1)
-		rt.logger.Debug(fmt.Sprintf("%s produced %T %+v\n", rt.name, oEvent, oEvent))
+		rt.logger.Debug(fmt.Sprintf("%s: produced %T %+v\n", rt.name, oEvent, oEvent))
 
 		rt.out <- oEvent
 	}
@@ -98,6 +98,7 @@ func (rt *Routine) send(event Event) bool {
 		rt.logger.Info(fmt.Sprintf("%s: send failed, queue was full/stopped \n", rt.name))
 		return false
 	}
+
 	rt.metrics.EventsSent.With("routine", rt.name).Add(1)
 	return true
 }
diff --git a/blockchain/v2/scheduler.go b/blockchain/v2/scheduler.go
index ab3892dc5..3cf0b2468 100644
--- a/blockchain/v2/scheduler.go
+++ b/blockchain/v2/scheduler.go
@@ -11,52 +11,11 @@ import (
 	"github.com/tendermint/tendermint/types"
 )
 
-// Events
-
-// XXX: The handle API would be much simpler if it return a single event, an
-// Event, which embeds a terminationEvent if it wants to terminate the routine.
-
-// Input events into the scheduler:
-// ticker event for cleaning peers
-type tryPrunePeer struct {
-	priorityHigh
-	time time.Time
-}
-
-// ticker event for scheduling block requests
-type trySchedule struct {
-	priorityHigh
-	time time.Time
-}
-
-// blockResponse message received from a peer
-type bcBlockResponse struct {
-	priorityNormal
-	time   time.Time
-	peerID p2p.ID
-	height int64
-	size   int64
-	block  *types.Block
-}
-
-// statusResponse message received from a peer
-type bcStatusResponse struct {
-	priorityNormal
-	time   time.Time
-	peerID p2p.ID
-	height int64
-}
-
-// new peer is connected
-type addNewPeer struct {
-	priorityNormal
-	peerID p2p.ID
-}
-
-// Output events issued by the scheduler:
+// Events generated by the scheduler:
 // all blocks have been processed
 type scFinishedEv struct {
 	priorityNormal
+	reason string
 }
 
 // send a blockRequest message
@@ -80,6 +39,10 @@ type scPeerError struct {
 	reason error
 }
 
+func (e scPeerError) String() string {
+	return fmt.Sprintf("scPeerError - peerID %s, err %s", e.peerID, e.reason)
+}
+
 // scheduler removed a set of peers (timed out or slow peer)
 type scPeersPruned struct {
 	priorityHigh
@@ -160,9 +123,10 @@ func (p scPeer) String() string {
 
 func newScPeer(peerID p2p.ID) *scPeer {
 	return &scPeer{
-		peerID: peerID,
-		state:  peerStateNew,
-		height: -1,
+		peerID:      peerID,
+		state:       peerStateNew,
+		height:      -1,
+		lastTouched: time.Time{},
 	}
 }
 
@@ -176,11 +140,17 @@ type scheduler struct {
 	// in Processed state.
 	height int64
 
+	// lastAdvance tracks the last time a block execution happened.
+	// syncTimeout is the maximum time the scheduler waits to advance in the fast sync process before finishing.
+	// This covers the cases where there are no peers or all peers have a lower height.
+	lastAdvance time.Time
+	syncTimeout time.Duration
+
 	// a map of peerID to scheduler specific peer struct `scPeer` used to keep
 	// track of peer specific state
 	peers       map[p2p.ID]*scPeer
-	peerTimeout time.Duration
-	minRecvRate int64 // minimum receive rate from peer otherwise prune
+	peerTimeout time.Duration // maximum response time from a peer otherwise prune
+	minRecvRate int64         // minimum receive rate from peer otherwise prune
 
 	// the maximum number of blocks that should be New, Received or Pending at any point
 	// in time. This is used to enforce a limit on the blockStates map.
@@ -204,15 +174,20 @@ func (sc scheduler) String() string {
 		sc.initHeight, sc.blockStates, sc.peers, sc.pendingBlocks, sc.pendingTime, sc.receivedBlocks)
 }
 
-func newScheduler(initHeight int64) *scheduler {
+func newScheduler(initHeight int64, startTime time.Time) *scheduler {
 	sc := scheduler{
 		initHeight:     initHeight,
+		lastAdvance:    startTime,
+		syncTimeout:    60 * time.Second,
 		height:         initHeight + 1,
 		blockStates:    make(map[int64]blockState),
 		peers:          make(map[p2p.ID]*scPeer),
 		pendingBlocks:  make(map[int64]p2p.ID),
 		pendingTime:    make(map[int64]time.Time),
 		receivedBlocks: make(map[int64]p2p.ID),
+		targetPending:  10,               // TODO - pass as param
+		peerTimeout:    15 * time.Second, // TODO - pass as param
+		minRecvRate:    0,                //int64(7680), TODO - pass as param
 	}
 
 	return &sc
@@ -316,6 +291,7 @@ func (sc *scheduler) setPeerHeight(peerID p2p.ID, height int64) error {
 	}
 
 	if height < peer.height {
+		sc.removePeer(peerID)
 		return fmt.Errorf("cannot move peer height lower. from %d to %d", peer.height, height)
 	}
 
@@ -327,7 +303,7 @@ func (sc *scheduler) setPeerHeight(peerID p2p.ID, height int64) error {
 }
 
 func (sc *scheduler) getStateAtHeight(height int64) blockState {
-	if height <= sc.initHeight {
+	if height < sc.height {
 		return blockStateProcessed
 	} else if state, ok := sc.blockStates[height]; ok {
 		return state
@@ -349,41 +325,8 @@ func (sc *scheduler) getPeersAtHeightOrAbove(height int64) []p2p.ID {
 	return peers
 }
 
-func (sc *scheduler) peersInactiveSince(duration time.Duration, now time.Time) []p2p.ID {
-	peers := []p2p.ID{}
-	for _, peer := range sc.peers {
-		if peer.state != peerStateReady {
-			continue
-		}
-		if now.Sub(peer.lastTouched) > duration {
-			peers = append(peers, peer.peerID)
-		}
-	}
-
-	// Ensure the order is deterministic for testing
-	sort.Sort(PeerByID(peers))
-	return peers
-}
-
-// will return peers who's lastRate i slower than minSpeed denominated in bytes
-func (sc *scheduler) peersSlowerThan(minSpeed int64) []p2p.ID {
-	peers := []p2p.ID{}
-	for peerID, peer := range sc.peers {
-		if peer.state != peerStateReady {
-			continue
-		}
-		if peer.lastRate < minSpeed {
-			peers = append(peers, peerID)
-		}
-	}
-
-	// Ensure the order is deterministic for testing
-	sort.Sort(PeerByID(peers))
-	return peers
-}
-
 func (sc *scheduler) prunablePeers(peerTimout time.Duration, minRecvRate int64, now time.Time) []p2p.ID {
-	prunable := []p2p.ID{}
+	prunable := make([]p2p.ID, 0)
 	for peerID, peer := range sc.peers {
 		if peer.state != peerStateReady {
 			continue
@@ -407,8 +350,8 @@ func (sc *scheduler) markReceived(peerID p2p.ID, height int64, size int64, now t
 		return fmt.Errorf("couldn't find peer %s", peerID)
 	}
 
-	if peer.state == peerStateRemoved {
-		return fmt.Errorf("cannot receive blocks from removed peer %s", peerID)
+	if peer.state != peerStateReady {
+		return fmt.Errorf("cannot receive blocks from not ready peer %s", peerID)
 	}
 
 	if state := sc.getStateAtHeight(height); state != blockStatePending || sc.pendingBlocks[height] != peerID {
@@ -454,14 +397,13 @@ func (sc *scheduler) markPending(peerID p2p.ID, height int64, time time.Time) er
 
 	sc.setStateAtHeight(height, blockStatePending)
 	sc.pendingBlocks[height] = peerID
-	// XXX: to make this more accurate we can introduce a message from
-	// the IO routine which indicates the time the request was put on the wire
 	sc.pendingTime[height] = time
 
 	return nil
 }
 
 func (sc *scheduler) markProcessed(height int64) error {
+	sc.lastAdvance = time.Now()
 	state := sc.getStateAtHeight(height)
 	if state != blockStateReceived {
 		return fmt.Errorf("cannot mark height %d received from block state %s", height, state)
@@ -476,6 +418,9 @@ func (sc *scheduler) markProcessed(height int64) error {
 }
 
 func (sc *scheduler) allBlocksProcessed() bool {
+	if len(sc.peers) == 0 {
+		return false
+	}
 	return sc.height >= sc.maxHeight()
 }
 
@@ -486,7 +431,7 @@ func (sc *scheduler) maxHeight() int64 {
 		if peer.state != peerStateReady {
 			continue
 		}
-		if peer.height > max {
+		if max < peer.height {
 			max = peer.height
 		}
 	}
@@ -532,15 +477,15 @@ func (sc *scheduler) selectPeer(height int64) (p2p.ID, error) {
 	}
 
 	// find the set of peers with minimum number of pending requests.
-	minPending := math.MaxInt64
+	var minPending int64 = math.MaxInt64
 	for mp := range pendingFrom {
-		if mp < minPending {
-			minPending = mp
+		if int64(mp) < minPending {
+			minPending = int64(mp)
 		}
 	}
 
-	sort.Sort(PeerByID(pendingFrom[minPending]))
-	return pendingFrom[minPending][0], nil
+	sort.Sort(PeerByID(pendingFrom[int(minPending)]))
+	return pendingFrom[int(minPending)][0], nil
 }
 
 // PeerByID is a list of peers sorted by peerID.
@@ -570,12 +515,30 @@ func (sc *scheduler) handleBlockResponse(event bcBlockResponse) (Event, error) {
 
 	err = sc.markReceived(event.peerID, event.block.Height, event.size, event.time)
 	if err != nil {
+		_ = sc.removePeer(event.peerID)
 		return scPeerError{peerID: event.peerID, reason: err}, nil
 	}
 
 	return scBlockReceived{peerID: event.peerID, block: event.block}, nil
 }
 
+func (sc *scheduler) handleNoBlockResponse(event bcNoBlockResponse) (Event, error) {
+	if len(sc.peers) == 0 {
+		return noOp, nil
+	}
+
+	peer, ok := sc.peers[event.peerID]
+	if !ok || peer.state == peerStateRemoved {
+		return noOp, nil
+	}
+	// The peer may have been just removed due to errors, low speed or timeouts.
+	_ = sc.removePeer(event.peerID)
+
+	return scPeerError{peerID: event.peerID,
+		reason: fmt.Errorf("peer %v with height %d claims no block for %d",
+			event.peerID, peer.height, event.height)}, nil
+}
+
 func (sc *scheduler) handleBlockProcessed(event pcBlockProcessed) (Event, error) {
 	if event.height != sc.height {
 		panic(fmt.Sprintf("processed height %d but expected height %d", event.height, sc.height))
@@ -584,12 +547,12 @@ func (sc *scheduler) handleBlockProcessed(event pcBlockProcessed) (Event, error)
 	if err != nil {
 		// It is possible that a peer error or timeout is handled after the processor
 		// has processed the block but before the scheduler received this event,
-		// so when pcBlockProcessed event is received the block had been requested again
+		// so when pcBlockProcessed event is received the block had been requested again.
 		return scSchedulerFail{reason: err}, nil
 	}
 
 	if sc.allBlocksProcessed() {
-		return scFinishedEv{}, nil
+		return scFinishedEv{reason: "processed all blocks"}, nil
 	}
 
 	return noOp, nil
@@ -608,13 +571,13 @@ func (sc *scheduler) handleBlockProcessError(event pcBlockVerificationFailure) (
 	}
 
 	if sc.allBlocksProcessed() {
-		return scFinishedEv{}, nil
+		return scFinishedEv{reason: "error on last block"}, nil
 	}
 
 	return noOp, nil
 }
 
-func (sc *scheduler) handleAddNewPeer(event addNewPeer) (Event, error) {
+func (sc *scheduler) handleAddNewPeer(event bcAddNewPeer) (Event, error) {
 	err := sc.addPeer(event.peerID)
 	if err != nil {
 		return scSchedulerFail{reason: err}, nil
@@ -622,8 +585,7 @@ func (sc *scheduler) handleAddNewPeer(event addNewPeer) (Event, error) {
 	return noOp, nil
 }
 
-// XXX: unify types peerError
-func (sc *scheduler) handlePeerError(event peerError) (Event, error) {
+func (sc *scheduler) handleRemovePeer(event bcRemovePeer) (Event, error) {
 	err := sc.removePeer(event.peerID)
 	if err != nil {
 		// XXX - It is possible that the removePeer fails here for legitimate reasons
@@ -631,12 +593,23 @@ func (sc *scheduler) handlePeerError(event peerError) (Event, error) {
 		return scSchedulerFail{reason: err}, nil
 	}
 	if sc.allBlocksProcessed() {
-		return scFinishedEv{}, nil
+		return scFinishedEv{reason: "removed peer"}, nil
 	}
 	return noOp, nil
 }
 
-func (sc *scheduler) handleTryPrunePeer(event tryPrunePeer) (Event, error) {
+func (sc *scheduler) handleTryPrunePeer(event rTryPrunePeer) (Event, error) {
+
+	// Check behavior of peer responsible to deliver block at sc.height.
+	timeHeightAsked, ok := sc.pendingTime[sc.height]
+	if ok && time.Since(timeHeightAsked) > sc.peerTimeout {
+		// A request was sent to a peer for block at sc.height but a response was not received
+		// from that peer within sc.peerTimeout. Remove the peer. This is to ensure that a peer
+		// will be timed out even if it sends blocks at higher heights but prevents progress by
+		// not sending the block at current height.
+		sc.removePeer(sc.pendingBlocks[sc.height])
+	}
+
 	prunablePeers := sc.prunablePeers(sc.peerTimeout, sc.minRecvRate, event.time)
 	if len(prunablePeers) == 0 {
 		return noOp, nil
@@ -649,17 +622,19 @@ func (sc *scheduler) handleTryPrunePeer(event tryPrunePeer) (Event, error) {
 		}
 	}
 
-	// If all blocks are processed we should finish even some peers were pruned.
+	// If all blocks are processed we should finish.
 	if sc.allBlocksProcessed() {
-		return scFinishedEv{}, nil
+		return scFinishedEv{reason: "after try prune"}, nil
 	}
 
 	return scPeersPruned{peers: prunablePeers}, nil
 
 }
 
-// TODO - Schedule multiple block requests
-func (sc *scheduler) handleTrySchedule(event trySchedule) (Event, error) {
+func (sc *scheduler) handleTrySchedule(event rTrySchedule) (Event, error) {
+	if time.Since(sc.lastAdvance) > sc.syncTimeout {
+		return scFinishedEv{reason: "timeout, no advance"}, nil
+	}
 
 	nextHeight := sc.nextHeightToSchedule()
 	if nextHeight == -1 {
@@ -693,17 +668,20 @@ func (sc *scheduler) handle(event Event) (Event, error) {
 	case bcBlockResponse:
 		nextEvent, err := sc.handleBlockResponse(event)
 		return nextEvent, err
-	case trySchedule:
+	case bcNoBlockResponse:
+		nextEvent, err := sc.handleNoBlockResponse(event)
+		return nextEvent, err
+	case rTrySchedule:
 		nextEvent, err := sc.handleTrySchedule(event)
 		return nextEvent, err
-	case addNewPeer:
+	case bcAddNewPeer:
 		nextEvent, err := sc.handleAddNewPeer(event)
 		return nextEvent, err
-	case tryPrunePeer:
-		nextEvent, err := sc.handleTryPrunePeer(event)
+	case bcRemovePeer:
+		nextEvent, err := sc.handleRemovePeer(event)
 		return nextEvent, err
-	case peerError:
-		nextEvent, err := sc.handlePeerError(event)
+	case rTryPrunePeer:
+		nextEvent, err := sc.handleTryPrunePeer(event)
 		return nextEvent, err
 	case pcBlockProcessed:
 		nextEvent, err := sc.handleBlockProcessed(event)
@@ -714,5 +692,4 @@ func (sc *scheduler) handle(event Event) (Event, error) {
 	default:
 		return scSchedulerFail{reason: fmt.Errorf("unknown event %v", event)}, nil
 	}
-	//return noOp, nil
 }
diff --git a/blockchain/v2/scheduler_test.go b/blockchain/v2/scheduler_test.go
index a3a6db672..445ba51a7 100644
--- a/blockchain/v2/scheduler_test.go
+++ b/blockchain/v2/scheduler_test.go
@@ -23,6 +23,8 @@ type scTestParams struct {
 	peerTimeout   time.Duration
 	minRecvRate   int64
 	targetPending int
+	startTime     time.Time
+	syncTimeout   time.Duration
 }
 
 func verifyScheduler(sc *scheduler) {
@@ -37,8 +39,9 @@ func verifyScheduler(sc *scheduler) {
 
 func newTestScheduler(params scTestParams) *scheduler {
 	peers := make(map[p2p.ID]*scPeer)
+	var maxHeight int64
 
-	sc := newScheduler(params.initHeight)
+	sc := newScheduler(params.initHeight, params.startTime)
 	if params.height != 0 {
 		sc.height = params.height
 	}
@@ -46,6 +49,9 @@ func newTestScheduler(params scTestParams) *scheduler {
 	for id, peer := range params.peers {
 		peer.peerID = p2p.ID(id)
 		peers[p2p.ID(id)] = peer
+		if maxHeight < peer.height {
+			maxHeight = peer.height
+		}
 	}
 	for _, h := range params.allB {
 		sc.blockStates[h] = blockStateNew
@@ -64,6 +70,12 @@ func newTestScheduler(params scTestParams) *scheduler {
 
 	sc.peers = peers
 	sc.peerTimeout = params.peerTimeout
+	if params.syncTimeout == 0 {
+		sc.syncTimeout = 10 * time.Second
+	} else {
+		sc.syncTimeout = params.syncTimeout
+	}
+
 	if params.targetPending == 0 {
 		sc.targetPending = 10
 	} else {
@@ -80,7 +92,7 @@ func newTestScheduler(params scTestParams) *scheduler {
 func TestScInit(t *testing.T) {
 	var (
 		initHeight int64 = 5
-		sc               = newScheduler(initHeight)
+		sc               = newScheduler(initHeight, time.Now())
 	)
 	assert.Equal(t, blockStateProcessed, sc.getStateAtHeight(initHeight))
 	assert.Equal(t, blockStateUnknown, sc.getStateAtHeight(initHeight+1))
@@ -181,21 +193,21 @@ func TestScAddPeer(t *testing.T) {
 			name:       "add first peer",
 			fields:     scTestParams{},
 			args:       args{peerID: "P1"},
-			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew, height: -1}}},
+			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {height: -1, state: peerStateNew}}},
 		},
 		{
 			name:   "add second peer",
-			fields: scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew, height: -1}}},
+			fields: scTestParams{peers: map[string]*scPeer{"P1": {height: -1, state: peerStateNew}}},
 			args:   args{peerID: "P2"},
 			wantFields: scTestParams{peers: map[string]*scPeer{
-				"P1": {state: peerStateNew, height: -1},
-				"P2": {state: peerStateNew, height: -1}}},
+				"P1": {height: -1, state: peerStateNew},
+				"P2": {height: -1, state: peerStateNew}}},
 		},
 		{
 			name:       "attempt to add duplicate peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew, height: -1}}},
+			fields:     scTestParams{peers: map[string]*scPeer{"P1": {height: -1}}},
 			args:       args{peerID: "P1"},
-			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew, height: -1}}},
+			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {height: -1}}},
 			wantErr:    true,
 		},
 		{
@@ -271,8 +283,8 @@ func TestScTouchPeer(t *testing.T) {
 			name:   "touch peer in state Ready",
 			fields: scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady, lastTouched: now}}},
 			args:   args{peerID: "P1", time: now.Add(3 * time.Second)},
-			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady,
-				lastTouched: now.Add(3 * time.Second)}}},
+			wantFields: scTestParams{peers: map[string]*scPeer{
+				"P1": {state: peerStateReady, lastTouched: now.Add(3 * time.Second)}}},
 		},
 	}
 
@@ -289,195 +301,6 @@ func TestScTouchPeer(t *testing.T) {
 	}
 }
 
-func TestScPeersInactiveSince(t *testing.T) {
-	now := time.Now()
-
-	type args struct {
-		threshold time.Duration
-		time      time.Time
-	}
-
-	tests := []struct {
-		name       string
-		fields     scTestParams
-		args       args
-		wantResult []p2p.ID
-	}{
-		{
-			name:       "no peers",
-			fields:     scTestParams{peers: map[string]*scPeer{}},
-			args:       args{threshold: time.Second, time: now},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one active peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady, lastTouched: now}}},
-			args:       args{threshold: time.Second, time: now},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one inactive peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady, lastTouched: now}}},
-			args:       args{threshold: time.Second, time: now.Add(time.Second + time.Millisecond)},
-			wantResult: []p2p.ID{"P1"},
-		},
-		{
-			name: "one active and one inactive peer",
-			fields: scTestParams{peers: map[string]*scPeer{
-				"P1": {state: peerStateReady, lastTouched: now},
-				"P2": {state: peerStateReady, lastTouched: now.Add(time.Second)}}},
-			args:       args{threshold: time.Second, time: now.Add(time.Second + time.Millisecond)},
-			wantResult: []p2p.ID{"P1"},
-		},
-		{
-			name:       "one New peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew}}},
-			args:       args{threshold: time.Second, time: now.Add(time.Millisecond)},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one Removed peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateRemoved, lastTouched: now}}},
-			args:       args{threshold: time.Second, time: now.Add(time.Millisecond)},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name: "one Ready active peer and one New",
-			fields: scTestParams{peers: map[string]*scPeer{
-				"P1": {state: peerStateRemoved, lastTouched: now},
-				"P2": {state: peerStateReady, lastTouched: now.Add(time.Millisecond)}}},
-			args:       args{threshold: time.Second, time: now.Add(2 * time.Millisecond)},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name: "one Ready inactive peer and one New",
-			fields: scTestParams{peers: map[string]*scPeer{
-				"P1": {state: peerStateRemoved, lastTouched: now},
-				"P2": {state: peerStateReady, lastTouched: now.Add(time.Millisecond)}}},
-			args:       args{threshold: time.Second, time: now.Add(time.Second + 2*time.Millisecond)},
-			wantResult: []p2p.ID{"P2"},
-		},
-		{
-			name: "combination of New, Removed and, active and non active Ready peers",
-			fields: scTestParams{peers: map[string]*scPeer{
-				"P1": {state: peerStateNew},
-				"P2": {state: peerStateRemoved, lastTouched: now},
-				"P3": {state: peerStateRemoved, lastTouched: now.Add(time.Second)},
-				"P4": {state: peerStateReady, lastTouched: now.Add(time.Millisecond)},
-				"P5": {state: peerStateReady, lastTouched: now.Add(3 * time.Millisecond)}}},
-			args:       args{threshold: time.Second, time: now.Add(time.Second + 2*time.Millisecond)},
-			wantResult: []p2p.ID{"P4"},
-		},
-	}
-
-	for _, tt := range tests {
-		tt := tt
-		t.Run(tt.name, func(t *testing.T) {
-			sc := newTestScheduler(tt.fields)
-			// peersInactiveSince should not mutate the scheduler
-			wantSc := sc
-			res := sc.peersInactiveSince(tt.args.threshold, tt.args.time)
-			sort.Sort(PeerByID(res))
-			assert.Equal(t, tt.wantResult, res)
-			assert.Equal(t, wantSc, sc)
-		})
-	}
-}
-
-func TestScPeersSlowerThan(t *testing.T) {
-	type args struct {
-		minSpeed int64
-	}
-
-	tests := []struct {
-		name       string
-		fields     scTestParams
-		args       args
-		wantResult []p2p.ID
-	}{
-		{
-			name:       "no peers",
-			fields:     scTestParams{peers: map[string]*scPeer{}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one Ready faster peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady, lastRate: 101}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one Ready equal peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady, lastRate: 100}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one Ready slow peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateReady, lastRate: 99}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{"P1"},
-		},
-		{
-			name:       "one Removed faster peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateRemoved, lastRate: 101}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		}, {
-			name:       "one Removed equal peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateRemoved, lastRate: 100}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one Removed slow peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateRemoved, lastRate: 99}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one New peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name:       "one New peer",
-			fields:     scTestParams{peers: map[string]*scPeer{"P1": {state: peerStateNew}}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{},
-		},
-		{
-			name: "mixed peers",
-			fields: scTestParams{peers: map[string]*scPeer{
-				"P1": {state: peerStateRemoved, lastRate: 101},
-				"P2": {state: peerStateReady, lastRate: 101},
-				"P3": {state: peerStateRemoved, lastRate: 100},
-				"P4": {state: peerStateReady, lastRate: 100},
-				"P5": {state: peerStateReady, lastRate: 99},
-				"P6": {state: peerStateNew},
-				"P7": {state: peerStateRemoved, lastRate: 99},
-				"P8": {state: peerStateReady, lastRate: 99},
-			}},
-			args:       args{minSpeed: 100},
-			wantResult: []p2p.ID{"P5", "P8"},
-		},
-	}
-
-	for _, tt := range tests {
-		tt := tt
-		t.Run(tt.name, func(t *testing.T) {
-			sc := newTestScheduler(tt.fields)
-			// peersSlowerThan should not mutate the scheduler
-			wantSc := sc
-			res := sc.peersSlowerThan(tt.args.minSpeed)
-			assert.Equal(t, tt.wantResult, res)
-			assert.Equal(t, wantSc, sc)
-		})
-	}
-}
-
 func TestScPrunablePeers(t *testing.T) {
 	now := time.Now()
 
@@ -716,8 +539,8 @@ func TestScSetPeerHeight(t *testing.T) {
 				allB:  []int64{1, 2, 3, 4}},
 			args: args{peerID: "P1", height: 2},
 			wantFields: scTestParams{
-				peers: map[string]*scPeer{"P1": {height: 4, state: peerStateReady}},
-				allB:  []int64{1, 2, 3, 4}},
+				peers: map[string]*scPeer{"P1": {height: 4, state: peerStateRemoved}},
+				allB:  []int64{}},
 			wantErr: true,
 		},
 		{
@@ -845,7 +668,7 @@ func TestScGetPeersAtHeight(t *testing.T) {
 		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			sc := newTestScheduler(tt.fields)
-			// getPeersAtHeightOrAbove should not mutate the scheduler
+			// getPeersAtHeight should not mutate the scheduler
 			wantSc := sc
 			res := sc.getPeersAtHeightOrAbove(tt.args.height)
 			sort.Sort(PeerByID(res))
@@ -1082,8 +905,11 @@ func TestScMarkReceived(t *testing.T) {
 		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			sc := newTestScheduler(tt.fields)
-			if err := sc.markReceived(tt.args.peerID,
-				tt.args.height, tt.args.size, now.Add(time.Second)); (err != nil) != tt.wantErr {
+			if err := sc.markReceived(
+				tt.args.peerID,
+				tt.args.height,
+				tt.args.size,
+				now.Add(time.Second)); (err != nil) != tt.wantErr {
 				t.Errorf("markReceived() wantErr %v, error = %v", tt.wantErr, err)
 			}
 			wantSc := newTestScheduler(tt.wantFields)
@@ -1145,11 +971,17 @@ func TestScMarkProcessed(t *testing.T) {
 		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			sc := newTestScheduler(tt.fields)
+			oldBlockState := sc.getStateAtHeight(tt.args.height)
 			if err := sc.markProcessed(tt.args.height); (err != nil) != tt.wantErr {
 				t.Errorf("markProcessed() wantErr %v, error = %v", tt.wantErr, err)
 			}
+			if tt.wantErr {
+				assert.Equal(t, oldBlockState, sc.getStateAtHeight(tt.args.height))
+			} else {
+				assert.Equal(t, blockStateProcessed, sc.getStateAtHeight(tt.args.height))
+			}
 			wantSc := newTestScheduler(tt.wantFields)
-			assert.Equal(t, wantSc, sc)
+			checkSameScheduler(t, wantSc, sc)
 		})
 	}
 }
@@ -1163,9 +995,9 @@ func TestScAllBlocksProcessed(t *testing.T) {
 		wantResult bool
 	}{
 		{
-			name:       "no blocks",
+			name:       "no blocks, no peers",
 			fields:     scTestParams{},
-			wantResult: true,
+			wantResult: false,
 		},
 		{
 			name: "only New blocks",
@@ -1225,7 +1057,7 @@ func TestScAllBlocksProcessed(t *testing.T) {
 			wantSc := sc
 			res := sc.allBlocksProcessed()
 			assert.Equal(t, tt.wantResult, res)
-			assert.Equal(t, wantSc, sc)
+			checkSameScheduler(t, wantSc, sc)
 		})
 	}
 }
@@ -1305,8 +1137,7 @@ func TestScNextHeightToSchedule(t *testing.T) {
 
 			resMin := sc.nextHeightToSchedule()
 			assert.Equal(t, tt.wantHeight, resMin)
-			assert.Equal(t, wantSc, sc)
-
+			checkSameScheduler(t, wantSc, sc)
 		})
 	}
 }
@@ -1414,7 +1245,7 @@ func TestScSelectPeer(t *testing.T) {
 			res, err := sc.selectPeer(tt.args.height)
 			assert.Equal(t, tt.wantResult, res)
 			assert.Equal(t, tt.wantError, err != nil)
-			assert.Equal(t, wantSc, sc)
+			checkSameScheduler(t, wantSc, sc)
 		})
 	}
 }
@@ -1424,6 +1255,20 @@ func makeScBlock(height int64) *types.Block {
 	return &types.Block{Header: types.Header{Height: height}}
 }
 
+// used in place of assert.Equal(t, want, actual) to avoid failures due to
+// scheduler.lastAdvanced timestamp inequalities.
+func checkSameScheduler(t *testing.T, want *scheduler, actual *scheduler) {
+	assert.Equal(t, want.initHeight, actual.initHeight)
+	assert.Equal(t, want.height, actual.height)
+	assert.Equal(t, want.peers, actual.peers)
+	assert.Equal(t, want.blockStates, actual.blockStates)
+	assert.Equal(t, want.pendingBlocks, actual.pendingBlocks)
+	assert.Equal(t, want.pendingTime, actual.pendingTime)
+	assert.Equal(t, want.blockStates, actual.blockStates)
+	assert.Equal(t, want.receivedBlocks, actual.receivedBlocks)
+	assert.Equal(t, want.blockStates, actual.blockStates)
+}
+
 // checkScResults checks scheduler handler test results
 func checkScResults(t *testing.T, wantErr bool, err error, wantEvent Event, event Event) {
 	if (err != nil) != wantErr {
@@ -1439,8 +1284,6 @@ func checkScResults(t *testing.T, wantErr bool, err error, wantEvent Event, even
 		assert.Equal(t, wantEvent.block, event.(scBlockReceived).block)
 	case scSchedulerFail:
 		assert.Equal(t, wantEvent.reason != nil, event.(scSchedulerFail).reason != nil)
-	default:
-		assert.Equal(t, wantEvent, event)
 	}
 }
 
@@ -1449,7 +1292,6 @@ func TestScHandleBlockResponse(t *testing.T) {
 	block6FromP1 := bcBlockResponse{
 		time:   now.Add(time.Millisecond),
 		peerID: p2p.ID("P1"),
-		height: 6,
 		size:   100,
 		block:  makeScBlock(6),
 	}
@@ -1530,6 +1372,82 @@ func TestScHandleBlockResponse(t *testing.T) {
 	}
 }
 
+func TestScHandleNoBlockResponse(t *testing.T) {
+	now := time.Now()
+	noBlock6FromP1 := bcNoBlockResponse{
+		time:   now.Add(time.Millisecond),
+		peerID: p2p.ID("P1"),
+		height: 6,
+	}
+
+	tests := []struct {
+		name       string
+		fields     scTestParams
+		wantEvent  Event
+		wantFields scTestParams
+		wantErr    bool
+	}{
+		{
+			name:       "empty scheduler",
+			fields:     scTestParams{},
+			wantEvent:  noOpEvent{},
+			wantFields: scTestParams{},
+		},
+		{
+			name:       "noBlock from removed peer",
+			fields:     scTestParams{peers: map[string]*scPeer{"P1": {height: 8, state: peerStateRemoved}}},
+			wantEvent:  noOpEvent{},
+			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {height: 8, state: peerStateRemoved}}},
+		},
+		{
+			name: "for block we haven't asked for",
+			fields: scTestParams{
+				peers: map[string]*scPeer{"P1": {height: 8, state: peerStateReady}},
+				allB:  []int64{1, 2, 3, 4, 5, 6, 7, 8}},
+			wantEvent:  scPeerError{peerID: "P1", reason: fmt.Errorf("some error")},
+			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {height: 8, state: peerStateRemoved}}},
+		},
+		{
+			name: "noBlock from peer we don't have",
+			fields: scTestParams{
+				peers:       map[string]*scPeer{"P2": {height: 8, state: peerStateReady}},
+				allB:        []int64{1, 2, 3, 4, 5, 6, 7, 8},
+				pending:     map[int64]p2p.ID{6: "P2"},
+				pendingTime: map[int64]time.Time{6: now},
+			},
+			wantEvent: noOpEvent{},
+			wantFields: scTestParams{
+				peers:       map[string]*scPeer{"P2": {height: 8, state: peerStateReady}},
+				allB:        []int64{1, 2, 3, 4, 5, 6, 7, 8},
+				pending:     map[int64]p2p.ID{6: "P2"},
+				pendingTime: map[int64]time.Time{6: now},
+			},
+		},
+		{
+			name: "noBlock from existing peer",
+			fields: scTestParams{
+				peers:       map[string]*scPeer{"P1": {height: 8, state: peerStateReady}},
+				allB:        []int64{1, 2, 3, 4, 5, 6, 7, 8},
+				pending:     map[int64]p2p.ID{6: "P1"},
+				pendingTime: map[int64]time.Time{6: now},
+			},
+			wantEvent:  scPeerError{peerID: "P1", reason: fmt.Errorf("some error")},
+			wantFields: scTestParams{peers: map[string]*scPeer{"P1": {height: 8, state: peerStateRemoved}}},
+		},
+	}
+
+	for _, tt := range tests {
+		tt := tt
+		t.Run(tt.name, func(t *testing.T) {
+			sc := newTestScheduler(tt.fields)
+			event, err := sc.handleNoBlockResponse(noBlock6FromP1)
+			checkScResults(t, tt.wantErr, err, tt.wantEvent, event)
+			wantSc := newTestScheduler(tt.wantFields)
+			assert.Equal(t, wantSc, sc)
+		})
+	}
+}
+
 func TestScHandleBlockProcessed(t *testing.T) {
 	now := time.Now()
 	processed6FromP1 := pcBlockProcessed{
@@ -1702,11 +1620,11 @@ func TestScHandleBlockVerificationFailure(t *testing.T) {
 }
 
 func TestScHandleAddNewPeer(t *testing.T) {
-	addP1 := addNewPeer{
+	addP1 := bcAddNewPeer{
 		peerID: p2p.ID("P1"),
 	}
 	type args struct {
-		event addNewPeer
+		event bcAddNewPeer
 	}
 
 	tests := []struct {
@@ -1754,76 +1672,14 @@ func TestScHandleAddNewPeer(t *testing.T) {
 	}
 }
 
-func TestScHandlePeerError(t *testing.T) {
-	errP1 := peerError{
-		peerID: p2p.ID("P1"),
-	}
-	type args struct {
-		event peerError
-	}
-
-	tests := []struct {
-		name      string
-		fields    scTestParams
-		args      args
-		wantEvent Event
-		wantErr   bool
-	}{
-		{
-			name:      "no peers",
-			fields:    scTestParams{},
-			args:      args{event: errP1},
-			wantEvent: scSchedulerFail{reason: fmt.Errorf("some error")},
-		},
-		{
-			name: "error finds no peer",
-			fields: scTestParams{
-				height: 6,
-				peers:  map[string]*scPeer{"P2": {height: 8, state: peerStateReady}},
-				allB:   []int64{6, 7, 8},
-			},
-			args:      args{event: errP1},
-			wantEvent: scSchedulerFail{reason: fmt.Errorf("some error")},
-		},
-		{
-			name: "error finds peer, only peer is removed",
-			fields: scTestParams{
-				height: 6,
-				peers:  map[string]*scPeer{"P1": {height: 8, state: peerStateReady}},
-				allB:   []int64{6, 7, 8},
-			},
-			args:      args{event: errP1},
-			wantEvent: scFinishedEv{},
-		},
-		{
-			name: "error finds peer, one of two peers are removed",
-			fields: scTestParams{
-				peers: map[string]*scPeer{"P1": {height: 8, state: peerStateReady}, "P2": {height: 8, state: peerStateReady}},
-				allB:  []int64{1, 2, 3, 4, 5, 6, 7, 8},
-			},
-			args:      args{event: errP1},
-			wantEvent: noOpEvent{},
-		},
-	}
-
-	for _, tt := range tests {
-		tt := tt
-		t.Run(tt.name, func(t *testing.T) {
-			sc := newTestScheduler(tt.fields)
-			event, err := sc.handlePeerError(tt.args.event)
-			checkScResults(t, tt.wantErr, err, tt.wantEvent, event)
-		})
-	}
-}
-
 func TestScHandleTryPrunePeer(t *testing.T) {
 	now := time.Now()
 
-	pruneEv := tryPrunePeer{
+	pruneEv := rTryPrunePeer{
 		time: now.Add(time.Second + time.Millisecond),
 	}
 	type args struct {
-		event tryPrunePeer
+		event rTryPrunePeer
 	}
 
 	tests := []struct {
@@ -1914,14 +1770,14 @@ func TestScHandleTryPrunePeer(t *testing.T) {
 	}
 }
 
-func TestHandleTrySchedule(t *testing.T) {
+func TestScHandleTrySchedule(t *testing.T) {
 	now := time.Now()
-	tryEv := trySchedule{
+	tryEv := rTrySchedule{
 		time: now.Add(time.Second + time.Millisecond),
 	}
 
 	type args struct {
-		event trySchedule
+		event rTrySchedule
 	}
 	tests := []struct {
 		name      string
@@ -1932,41 +1788,44 @@ func TestHandleTrySchedule(t *testing.T) {
 	}{
 		{
 			name:      "no peers",
-			fields:    scTestParams{peers: map[string]*scPeer{}},
+			fields:    scTestParams{startTime: now, peers: map[string]*scPeer{}},
 			args:      args{event: tryEv},
 			wantEvent: noOpEvent{},
 		},
 		{
 			name:      "only new peers",
-			fields:    scTestParams{peers: map[string]*scPeer{"P1": {height: -1, state: peerStateNew}}},
+			fields:    scTestParams{startTime: now, peers: map[string]*scPeer{"P1": {height: -1, state: peerStateNew}}},
 			args:      args{event: tryEv},
 			wantEvent: noOpEvent{},
 		},
 		{
 			name:      "only Removed peers",
-			fields:    scTestParams{peers: map[string]*scPeer{"P1": {height: 4, state: peerStateRemoved}}},
+			fields:    scTestParams{startTime: now, peers: map[string]*scPeer{"P1": {height: 4, state: peerStateRemoved}}},
 			args:      args{event: tryEv},
 			wantEvent: noOpEvent{},
 		},
 		{
 			name: "one Ready shorter peer",
 			fields: scTestParams{
-				height: 6,
-				peers:  map[string]*scPeer{"P1": {height: 4, state: peerStateReady}}},
+				startTime: now,
+				height:    6,
+				peers:     map[string]*scPeer{"P1": {height: 4, state: peerStateReady}}},
 			args:      args{event: tryEv},
 			wantEvent: noOpEvent{},
 		},
 		{
 			name: "one Ready equal peer",
 			fields: scTestParams{
-				peers: map[string]*scPeer{"P1": {height: 4, state: peerStateReady}},
-				allB:  []int64{1, 2, 3, 4}},
+				startTime: now,
+				peers:     map[string]*scPeer{"P1": {height: 4, state: peerStateReady}},
+				allB:      []int64{1, 2, 3, 4}},
 			args:      args{event: tryEv},
 			wantEvent: scBlockRequest{peerID: "P1", height: 1},
 		},
 		{
 			name: "many Ready higher peers with different number of pending requests",
 			fields: scTestParams{
+				startTime: now,
 				peers: map[string]*scPeer{
 					"P1": {height: 4, state: peerStateReady},
 					"P2": {height: 5, state: peerStateReady}},
@@ -1983,6 +1842,7 @@ func TestHandleTrySchedule(t *testing.T) {
 		{
 			name: "many Ready higher peers with same number of pending requests",
 			fields: scTestParams{
+				startTime: now,
 				peers: map[string]*scPeer{
 					"P2": {height: 8, state: peerStateReady},
 					"P1": {height: 8, state: peerStateReady},
@@ -2084,6 +1944,8 @@ func TestScHandleStatusResponse(t *testing.T) {
 }
 
 func TestScHandle(t *testing.T) {
+	now := time.Now()
+
 	type unknownEv struct {
 		priorityNormal
 	}
@@ -2123,24 +1985,27 @@ func TestScHandle(t *testing.T) {
 			name: "single peer, sync 3 blocks",
 			steps: []scStep{
 				{ // add P1
-					currentSc: &scTestParams{peers: map[string]*scPeer{}, height: 1},
-					args:      args{event: addNewPeer{peerID: "P1"}},
+					currentSc: &scTestParams{startTime: now, peers: map[string]*scPeer{}, height: 1},
+					args:      args{event: bcAddNewPeer{peerID: "P1"}},
 					wantEvent: noOpEvent{},
-					wantSc:    &scTestParams{peers: map[string]*scPeer{"P1": {height: -1, state: peerStateNew}}, height: 1},
+					wantSc: &scTestParams{startTime: now, peers: map[string]*scPeer{
+						"P1": {height: -1, state: peerStateNew}}, height: 1},
 				},
 				{ // set height of P1
 					args:      args{event: bcStatusResponse{peerID: "P1", time: tick[0], height: 3}},
 					wantEvent: noOpEvent{},
 					wantSc: &scTestParams{
-						peers:  map[string]*scPeer{"P1": {height: 3, state: peerStateReady}},
-						allB:   []int64{1, 2, 3},
-						height: 1,
+						startTime: now,
+						peers:     map[string]*scPeer{"P1": {height: 3, state: peerStateReady}},
+						allB:      []int64{1, 2, 3},
+						height:    1,
 					},
 				},
 				{ // schedule block 1
-					args:      args{event: trySchedule{time: tick[1]}},
+					args:      args{event: rTrySchedule{time: tick[1]}},
 					wantEvent: scBlockRequest{peerID: "P1", height: 1},
 					wantSc: &scTestParams{
+						startTime:   now,
 						peers:       map[string]*scPeer{"P1": {height: 3, state: peerStateReady}},
 						allB:        []int64{1, 2, 3},
 						pending:     map[int64]p2p.ID{1: "P1"},
@@ -2149,9 +2014,10 @@ func TestScHandle(t *testing.T) {
 					},
 				},
 				{ // schedule block 2
-					args:      args{event: trySchedule{time: tick[2]}},
+					args:      args{event: rTrySchedule{time: tick[2]}},
 					wantEvent: scBlockRequest{peerID: "P1", height: 2},
 					wantSc: &scTestParams{
+						startTime:   now,
 						peers:       map[string]*scPeer{"P1": {height: 3, state: peerStateReady}},
 						allB:        []int64{1, 2, 3},
 						pending:     map[int64]p2p.ID{1: "P1", 2: "P1"},
@@ -2160,9 +2026,10 @@ func TestScHandle(t *testing.T) {
 					},
 				},
 				{ // schedule block 3
-					args:      args{event: trySchedule{time: tick[3]}},
+					args:      args{event: rTrySchedule{time: tick[3]}},
 					wantEvent: scBlockRequest{peerID: "P1", height: 3},
 					wantSc: &scTestParams{
+						startTime:   now,
 						peers:       map[string]*scPeer{"P1": {height: 3, state: peerStateReady}},
 						allB:        []int64{1, 2, 3},
 						pending:     map[int64]p2p.ID{1: "P1", 2: "P1", 3: "P1"},
@@ -2171,9 +2038,10 @@ func TestScHandle(t *testing.T) {
 					},
 				},
 				{ // block response 1
-					args:      args{event: bcBlockResponse{peerID: "P1", height: 1, time: tick[4], size: 100, block: makeScBlock(1)}},
+					args:      args{event: bcBlockResponse{peerID: "P1", time: tick[4], size: 100, block: makeScBlock(1)}},
 					wantEvent: scBlockReceived{peerID: "P1", block: makeScBlock(1)},
 					wantSc: &scTestParams{
+						startTime:   now,
 						peers:       map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[4]}},
 						allB:        []int64{1, 2, 3},
 						pending:     map[int64]p2p.ID{2: "P1", 3: "P1"},
@@ -2183,9 +2051,10 @@ func TestScHandle(t *testing.T) {
 					},
 				},
 				{ // block response 2
-					args:      args{event: bcBlockResponse{peerID: "P1", height: 2, time: tick[5], size: 100, block: makeScBlock(2)}},
+					args:      args{event: bcBlockResponse{peerID: "P1", time: tick[5], size: 100, block: makeScBlock(2)}},
 					wantEvent: scBlockReceived{peerID: "P1", block: makeScBlock(2)},
 					wantSc: &scTestParams{
+						startTime:   now,
 						peers:       map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[5]}},
 						allB:        []int64{1, 2, 3},
 						pending:     map[int64]p2p.ID{3: "P1"},
@@ -2195,33 +2064,36 @@ func TestScHandle(t *testing.T) {
 					},
 				},
 				{ // block response 3
-					args:      args{event: bcBlockResponse{peerID: "P1", height: 3, time: tick[6], size: 100, block: makeScBlock(3)}},
+					args:      args{event: bcBlockResponse{peerID: "P1", time: tick[6], size: 100, block: makeScBlock(3)}},
 					wantEvent: scBlockReceived{peerID: "P1", block: makeScBlock(3)},
 					wantSc: &scTestParams{
-						peers:    map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
-						allB:     []int64{1, 2, 3},
-						received: map[int64]p2p.ID{1: "P1", 2: "P1", 3: "P1"},
-						height:   1,
+						startTime: now,
+						peers:     map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
+						allB:      []int64{1, 2, 3},
+						received:  map[int64]p2p.ID{1: "P1", 2: "P1", 3: "P1"},
+						height:    1,
 					},
 				},
 				{ // processed block 1
 					args:      args{event: pcBlockProcessed{peerID: p2p.ID("P1"), height: 1}},
 					wantEvent: noOpEvent{},
 					wantSc: &scTestParams{
-						peers:    map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
-						allB:     []int64{2, 3},
-						received: map[int64]p2p.ID{2: "P1", 3: "P1"},
-						height:   2,
+						startTime: now,
+						peers:     map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
+						allB:      []int64{2, 3},
+						received:  map[int64]p2p.ID{2: "P1", 3: "P1"},
+						height:    2,
 					},
 				},
 				{ // processed block 2
 					args:      args{event: pcBlockProcessed{peerID: p2p.ID("P1"), height: 2}},
 					wantEvent: scFinishedEv{},
 					wantSc: &scTestParams{
-						peers:    map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
-						allB:     []int64{3},
-						received: map[int64]p2p.ID{3: "P1"},
-						height:   3,
+						startTime: now,
+						peers:     map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
+						allB:      []int64{3},
+						received:  map[int64]p2p.ID{3: "P1"},
+						height:    3,
 					},
 				},
 			},
@@ -2231,6 +2103,7 @@ func TestScHandle(t *testing.T) {
 			steps: []scStep{
 				{ // failure processing block 1
 					currentSc: &scTestParams{
+						startTime: now,
 						peers: map[string]*scPeer{
 							"P1": {height: 4, state: peerStateReady, lastTouched: tick[6]},
 							"P2": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
@@ -2241,6 +2114,7 @@ func TestScHandle(t *testing.T) {
 					args:      args{event: pcBlockVerificationFailure{height: 1, firstPeerID: "P1", secondPeerID: "P1"}},
 					wantEvent: noOpEvent{},
 					wantSc: &scTestParams{
+						startTime: now,
 						peers: map[string]*scPeer{
 							"P1": {height: 4, state: peerStateRemoved, lastTouched: tick[6]},
 							"P2": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
@@ -2249,19 +2123,6 @@ func TestScHandle(t *testing.T) {
 						height:   1,
 					},
 				},
-				/*
-					{ // processed block 2
-						args:      args{event: pcBlockProcessed{peerID: p2p.ID("P1"), height: 2}},
-						wantEvent: scFinishedEv{},
-						wantSc: &scTestParams{
-							peers:    map[string]*scPeer{"P1": {height: 3, state: peerStateReady, lastTouched: tick[6]}},
-							allB:     []int64{3},
-							received: map[int64]p2p.ID{3: "P1"},
-							height:   3,
-						},
-					},
-
-				*/
 			},
 		},
 	}
@@ -2280,8 +2141,10 @@ func TestScHandle(t *testing.T) {
 				}
 
 				nextEvent, err := sc.handle(step.args.event)
-				assert.Equal(t, newTestScheduler(*step.wantSc), sc)
+				wantSc := newTestScheduler(*step.wantSc)
+
 				t.Logf("step %d(%v): %s", i, step.args.event, sc)
+				checkSameScheduler(t, wantSc, sc)
 
 				checkScResults(t, step.wantErr, err, step.wantEvent, nextEvent)
 
diff --git a/blockchain/v2/types.go b/blockchain/v2/types.go
index 836e87fd8..7a73728e4 100644
--- a/blockchain/v2/types.go
+++ b/blockchain/v2/types.go
@@ -4,6 +4,7 @@ import (
 	"github.com/Workiva/go-datastructures/queue"
 )
 
+// Event is the type that can be added to the priority queue.
 type Event queue.Item
 
 type priority interface {
diff --git a/docs/architecture/adr-043-blockchain-riri-org.md b/docs/architecture/adr-043-blockchain-riri-org.md
index 8daef1817..6bb018f51 100644
--- a/docs/architecture/adr-043-blockchain-riri-org.md
+++ b/docs/architecture/adr-043-blockchain-riri-org.md
@@ -4,6 +4,7 @@
 * 18-06-2019: Initial draft
 * 08-07-2019: Reviewed
 * 29-11-2019: Implemented
+* 14-02-2020: Updated with the implementation details
 
 ## Context
 
@@ -27,7 +28,15 @@ This ADR is meant to specify the missing components and control necessary to ach
 Partition the responsibilities of the blockchain reactor into a set of components which communicate exclusively with events. Events will contain timestamps allowing each component to track time as internal state. The internal state will be mutated by a set of `handle*` which will produce event(s). The integration between components will happen in the reactor and reactor tests will then become integration tests between components. This design will be known as `v2`.
 
 ![v2 Blockchain Reactor Architecture
-Diagram](https://github.com/tendermint/tendermint/blob/f9e556481654a24aeb689bdadaf5eab3ccd66829/docs/architecture/img/blockchain-reactor-v2.png)
+Diagram](https://github.com/tendermint/tendermint/blob/584e67ac3fac220c5c3e0652e3582eca8231e814/docs/architecture/img/blockchain-reactor-v2.png)
+
+### Fast Sync Related Communication Channels
+
+The diagram below shows the fast sync routines and the types of channels and queues used to communicate with each other. 
+In addition the per reactor channels used by the sendRoutine to send messages over the Peer MConnection are shown.
+
+![v2 Blockchain Channels and Queues
+Diagram](https://github.com/tendermint/tendermint/blob/5cf570690f989646fb3b615b734da503f038891f/docs/architecture/img/blockchain-v2-channels.png)
 
 ### Reactor changes in detail
 
diff --git a/docs/architecture/img/blockchain-reactor-v2.png b/docs/architecture/img/blockchain-reactor-v2.png
index 086bf71bd88d47e02fc4f47b563ebe365695836a..5f15333a0080cd93d01496d7b711e00d84d2083e 100644
GIT binary patch
literal 171024
zcma%jdtA%W|34{|OCgkNBnq*6TO_SoTWxD=Yi)C>-S2Dd)>b69+=?Q(<}P$0DTFQx
zr6ji^w?d&pq)@2e8O`VW{e2&g-}m>2YTNsL&ilMB&)4&HnJpA@z$lwZHiHHY8b!eS
zg$x>G<veK65Vzq&!8`rGXEzNRWT(*jGqnnXP$Cx$a)JB){mTUg5l3pYE^t2=7%VzE
zdI4X}iC!Ry1h2qHib%dhC=u}gehh=aAnp*DI}|~OL0sTI2)OA7WB~+*VgJ3JBN8YF
z)*?m5NaS*k3k-)`00B$6k~lnxQX8oeyTGyFH9@Hr$iZ*$HuxD#13#GH9~2S}MTSG&
zz@I)Um0S=e;08&wrd8k`3*ad5wrdccP9nO%e8JyxiA(@~1qgVuNYgF8Vs)efyo2+=
zEPyP4V-Uy%P`GJ#8b`=cOa99;rqk&KYK<gP`S);8*a8pJgPJ}NXgQ+4?@|T+0zM&(
zB9$AWLqh$+Jh%vOB-1roqe}4i8ood;;ekzIE^vP!SH6TJQgamG63Kwv0;ozAjv?gw
z1{jqBO%y^Jt`Glvxd#KP<)KIje?0=K)~YcwEKTntMJSXyx*|%!R)(ULp>Q1(??)t(
z{X*FSSs(==)I$Sl!GUC+hJYjlN}(}<JS>eTMF_YmE}R2{Y1F<<9fof@YcS3Q24syj
z=z>_>sAwrg3}rDfoUlL^S>&$=A4D3Vc&H)>Dc8t3WTlLz@n8o;Ln%fkTEz9^BT=+~
zK$g~rEfM2_cphXO*`F6_3<$=Bg(0O%R8S~}OMufbQ9@mGG%Pegg_4j08C=uGOn(7M
z%MtQ)YFG?-?Z+mP7)qGYS43fIsL}wI5J{E<pt+GMK28QV!ZmCbg36W)JfKDfDTo>A
z3!WRt1$KdBDFrAE!>9=M2T$t<m1;x+UNlAMr#EQPL_9i-8N>G%ON{<}uF*pSL-MsE
z9iC2!G(>tt>&0@95G|VKA%`<@EN+m_z(IzH=_(JE3~oAm7~Kz#rZ8pTPh=#+R~7>P
zAdpp9C6E{{(4P|E69WZrQ6&hZDj*uE76d5*d3a;6hnkJ0ihK~@DrAfYoz8&!QB7+g
zd?YFemmuc_U`bd4MHneI=po=#ET)R7#UKO3;07a-8buF)NU(4Wl`Qlpt78a4a4$9h
zi$-#E{@BPEU|m>j5El)81%MlX!Q+UbYOWrm!6>09Bs(}pXAA~!2Elz<2!kdHTo*+Z
zQw_3Eu8<c9KHzfE5{85%AqPbV1qKnwLV`F*#ualAL^dqiPl(i;EJLDG68J*kx4~SN
z4zKVLgc760F>*Z%Ev5zIbhJ<o)(@}uS3q!D7EdJ!2*%5GbX2HBDFrv9L|B56Wn{>t
zieR{y8tosV)C6PXYP5#KM(ODSItw16AczebLLgfaBndNsXOwX;VsbE>DFv><_2Y@9
zzASFE%8wQksMdvPf>dyYfJZ_Gs)CIomIu$56{f)BqC?;zkwg*LF@)wXl`*0*RGF^~
z%Y_SB2uT>08YzTO@yb9f1K}S`6tZM7LJW(?!Uw>qR2~=M!=xb;NRC7k$`1$vrcBf!
z1Tkb9@Jk$$!$U`kqi`@Eya<KmD&SJJUtk~`0`rB^{Gl2EEI5<ZMjBaMgObF@L`PD&
za5h1W3iI&*u8&0oD$sNY--8gS#1kY$tkD>NL&wl4dRYKc$wT@`bYc&jQf(xA2&gJa
zm|CKR3Rxm96UQf^O~=s)B|21CWS~c&%wHNqCk0WJBsCHVRyOTSQec^Ql{8F5f{280
za<GIPP2~u*XnzzNs-pAwVkVmug*67Nu+bDEmX1>MMWHe|mFmyqYvCFK1QtdOCFqG!
z<N!XDW(XBactnU;Db&cMA{{a`Odbk@8Nx!yGPzNV6A0yEj5Y}DtP?OaNP)<MOQHL-
zd>A|pRwUzvMfuSs+#qa}uMjDh`*Fx99#0&oR7vO%6gUW$iU|`28A2JsfmE?jz>LI&
zMWMwK-ype<Qi(N6eFH*ieoUpDhDEAq{9uzktI&FsUd7Q-q<V=_DiY~ASb`i)3zgIO
zeh`$}Ujwc|z%Y816srmb9t2(n!Gl;PGpB%m{!}9rht^QxaEu=Tr4lKzL=ZG^LVqa2
zAObM~tBHzaMT6gJgo*_`3x^Tmf;mBQUt~<M$w}!#ju3~2i4ZbUWH5{n5=Ero)saRc
z3&anJ2R$YP>H}bbK^2M#Y!fiZeejYXgTIn4^;g3X3UQFmH(Doy`qMN<Qdj^}6B5mb
zi^&=h1j_U!APp=I6~@tqP-q4+ELs(<La|jOrIaqivQ-{Ikv^~(7RsOz(4wLPNel+l
z$DhQ-%On)NPZTRUT7;oShVVID(|G_!Vqgp+SEz+@L#ZOPuO65kj>8nf4NSJeCmJgY
z6higB6ikdB0t-g^$fHd*8;R7?gc7bs58?PR(MTPZ1LJ_WjPt|k)gpCtu$Jqq(njML
zApw#8T$03(h46^dYZVNQpEN2=ic{c2nY!SZ7%WDtqAHObidd=&q|=qY3?@|Qq0|c1
zVu}O}kP{cfAq65$n$okCG9A|lWoo(55S$!EMhf9kN(|ZHhvb<QgN^iw4wNwc0k^<G
zqYTJMC6vqb74yP)I<jAYBt{o34hsNwk0am|fhPS(^l}b9T0<oGQi5Q{NR7$JqJhXg
zgc>-R0x_8ZT7e{iU*IObh66{-O>ky16FOYTfcsFTBpQ~FjPe6$j*~KdLfD8fF)<7U
z0xdzLfv^IBXELd1Is+357V%>Q`UH@X3T040Bvm3r@In#6YAykR;p^x!G@OSJMbdc)
zgA7O)OIH&xL@ik(_lKBdz$Ty+fzeS$GF`&K=&3kgABxtO=%+`Av0<jAV_;f1m#QYC
zNPcV&zBV{ihGjr}*m9XF5+jcE(@-_RQVxepmr2ot5Yxjdg+U?Yr~r60gT+E~NphLV
z-U&LBZ_<3I^eDX#6G1SrxH2IDABq+u!E+<IEFMP83*qy)dI=?f3-hHg#U}f~<C*?s
zF`a}6&?AjlB8=jpB58t{!CD#G6e4s{A!3=IF9ajwD8x8)Fik^3D5VINk`^OJMdL6*
z3=CH)V;O>FbS@3S0(U@sOxy`i0Fho9tuVzX3`Af+1<^Uekbpp6KZroDMnN<<xR!?p
zcBvPI@a0PI6Q|UL;)K4w{wg9L!{>$h1Z!DB0|beeLveH?Bq|W78v~~p$i7?;Rt$~>
zu!jdjA)|u*eWidAV(A2y03D@^R7%xgf2>@fg0Zj$Kxh;YdWa!Z7Gn(Y(RqLi!KYdX
zmj}g$sIhckC4(wLhLDg*xKPI9>A6x6{{(a#fdGeu5`EwRZ}H#;q7)UV;R;#)Qh-cY
znuotHR1zZ!!!wCgJxLW3;LjI}cuWq36^t<uWH3G+N<lzTl1PjPRmmpdRV-ZqKu4~R
zF%k|1!5tfj)r5s{l~jWcyihTa8WfBl!U+w=6CwHl0Wf781PAB)$RWZ0c(#x&kzvtc
ziWpj$EL6?Z1ro(ZIti{qkUVHmUzwas3n9RxRKZNNf<b_(aBu-l7Rn1osMtOXKMVos
zi&Sf6NC_MlYFap23`L2hXg>}Mg$@B;f@3I!avflEBAr6VBL{Ikn0|^-rbrfy)cLAo
zWF)mb&_f+Yh(Rj=YT{IQ9TlO#`K$HN7#!CmPc2+aFbIMJm_caZdcg*h*#Ni0sWE<H
zx`swVg=rMbsA!2Y3Km5&otIBU2kK;4UJz7-<LGH2jG!1qn6EYjgXPnFF=#m)j~7U&
zB8`fn;HeA@HcS<$3eu7T0l~qB;`o6mG(khrX(Yy|5UdbR0PhMSY5Hhf7&S}}kLIyx
z^f2%qgUZAz5fT7J(MA+TLdQm-G*L{R50j3CQf1^o22LCmO*JUQcx)66g7Dx(1t<_o
zaO0o2E9N4_P@KX8z&DgB=PFUr7`fiV5KNSFpkl2?N)+IIg&raZ#3xuU<tm~WcmyQI
zWGPevMixL)`YEvz62>ox6eST$rF^Urs^QXP2s8&Jgo8cA9tJ#$0p;R7e1en&I8Pbl
z>w%?6qhVqlTqO!7kij(=1SV1oH%hreAwAF-#1{~-JPlre5EvL#oQdP2eL)U_qv&XO
z4;(Q@6ae?phH*q9oFPaPpjIf2C?wjX2ZoUq%#)&}RF6=!A^-~*A=aRTc%VsaeY6@a
z5rU;~1|3xtrt&8Q8w4^nNa%17BOWbQ`Na_ZAP}7|cn1rCYlEmkvXC&m#00<MU?iZO
zau#1oK*b>Nx*&WomK8{6_{1m?5QLu~iUb%sk0B)xqGO0YL4m{=F1QU)olrC{0BSm)
zkj$o|5cn{Eh7iJG>M?36n@1(n*)T3e7DJ-J>5=k4EgVPD7&tKmaSUHV2=JG}P=Oe5
zuO=GggIH3igh{{}^g&Tju(T?W#S9KIofs3w5_kmq!HfntFOmvj1~L>{f{;$5YD|Gf
ztCOj8YK$~mBPII<@`8iVKqEMwzg`^xHyR+mAsmQSXz&n{!}!r8mKH+u*P6^i1Qjv^
zm{c8=MkAxS94K2Vrb>8Z7L-9plMzwOD4Cw&Z;<M7G$~C7Y$V#C=itd~rIN@e2n9T_
z0!%CogJUAuP@V`TR#FlCNIx`%r51(}$YPb8hJq3i(lCFD7B5iA*bMMY45ON3vMFg$
z3>kwGk)xmtrZ_B2$D+Z*Gy!tcQ}IG04KZAQgHMbP2OSekj*8Lqv0^e04U3|2WE>S%
z&ebZ=EH0m7ioSZ90s+;A3h2_nK!uhb#g@RN5_}{|rZB1vY9eqO9E?Z^3sDhqgisz=
z;~%5<GuaqiLD2dk6wz7=QOiMkkOB8*l6(kaVhA-7Bv~G6f0zsjs0b?Bpfv*S;VX|+
z;XKq>Q<een7K;RHfOHr9G-tej(qHg;pt1n>|Mr!3Z_ps8K?FY^x?$yq7gk#Pu<2Hx
zgQ7-|zchXNbk^nQ<z=eqXzR1rS72Q~F`lp3dUe>k@zLz2Mg0|*S}j;l<ar0u_bqyN
zhw$Xio!E}=LjxBEV^{b6>VX?5@fP++23ff-9c=T99?{u+n^_ctBp*btJr#U-CN9yT
z@{re}xs2@1^*PJ>yW*Tzs#+ho{P^)B;@L$7dQIQrmDda$zoDf3hMPC7S|6SYxV_Vb
zdTyoH3357nT({804J>Qg;a=KO*MyX(ZIJpj^L7;@vcpTJeSCH);O;>T^^$T$bM+qE
z^W2+dZz^^~HI)vYzx=XY#g6Hl_UxHhwP#_+4;xR(7A`9C<zj@aexy>Vtla4`;#k0r
zPbUfl1&6$16KJQ%J}<vJ!iA;f<wL+4b4LC-lxg?jjKK*h*Q;)Cq7EGPh{s^Zy2oc%
zEV^^pd-|tOpC%l*r2oi9i0=*BHJgM@_tbUWvOE3lM^Deuz}<5z4`Sdz5Z4F6C^2`V
z&Rgz!aYa|Y4=&18w*=nUF})Ep_ZHhM#Un<r)BX-D>Yr3&tq(3)%}#pztYnRM=eyee
zhur2X*o`)4?hE$81ih`@G1rzd292HPXx(r%I?@YupQ7mO>bj9IYO?BclaFt~fuxgv
zl|w0wvl!|8QB*yLW<EsJ+RV_b%!nLta>gb8oxM=B_Pt%2`!Zp-SIiYkhOi{|`{;+K
zf*;c^jC?U+pK!Wc$SiULs%u&4t$`)h1;=yvpIMy*vjx1zHvv6Yrnyf(wAeWIG~;$<
z>0T%giwm6%EQ0b~`kUL3Jv;c&V!Ny2`^O|jnC$+3D}L3*tgLz4r+HP86h9bdLD=zu
zAbe&w4>1|m9}75My3T6Eqpn9cw@n;&#fX$XTDs9@{K!js{^2F7Kffv;mN*3iyC=MM
zz0m54{^Qo+V`fHtZn}PV1+{*=*<wyjjBse}T5-cBWIzITV=eL+FModTP}qd?bNu$z
zOY@QAzP_!=T31=Nal|ISJ?DvwY(Bg!n(P(R)$}w)k9d20z#wsBA{->ChlGpF20A=-
zP<iFjs59GEEMMN#-d^qYbnPik?;;|t;IQ|aPhC2JmHA4Q5}fSr3-9cyX8W2k%jsdh
zhw}Mm|7{bjt_;N;%y5?p5=Kv*1Wsm?KQZ!N!qU@}qfWo?tT&&;#?l{1p3-GlXkO#W
z_+%0@PgJ`dnEbHJB;1SA1P=em%5kKXcOW6VUfc>CP}xCpJm<tio%KAwzhXTSe_=R1
zhdtiP#(rtV_Nh5%A3QnFtGg0Yo#uX_cbeDoN=S%p(T_JMNaCY4(=TisP;|g>NTPNF
zta`xlDNA=*0C&gLXS2?)>5l`B*l|jMRyD=jENm$z?t}gAit$=e3JD1=a#SsIz_pd^
zXu$qa>XCS7O9z}McAvnk_am&qtVMagn?~>TUbE!+^XKy~@_@UD?;RODo47arimqLH
zvFIY>Am>Dm`f1?~&Ix_*R^)(%qc039$BRBqtxqzG>6Bgak@Ks6eydDhbjfCtAeEoZ
zJpU+WCv1}XRoO;#Oqc7mYuDl&n4bQ;4|MB<6#Y8gu?kqC_SoHs&;hfXG$F#_%&WV+
zx_{csE<Himl^fG7J&2C72tK^TKhXjDXtu}rc?`b;D8-azj&tTEaZc>gZJwH04tX&8
z^r~5ZRa6=e+;7yARyoY9GM|Y*TK0s02B>$$8$Tx)Y_x0pFCX~-BA-RTdcvdK%JDCX
zUN<5)b58XA-0ObguaBd#K)KGTtfA&Du8fOtxD5%3Uf3Nx=?3J1*z4}M0o(uJTnc%x
z<m{@s=1V<+bAU_Vo%<18!*h`2PZPxsocWu{)~AOp*=-i<sNo|WAcNKq9hG+`1Ln>u
zb6mE)@Apq%ve(pu89Aq3j=bzX(z&~_LOx^Q<YU0eryjin`{&B(g931IFHVkh)_vc)
z=CM;kN^b}6V)EbRn}&k}Zl?$x|6vNS*jc9IKJu2>mE(_hqn`!+wcXquK;b_xcb@ro
z>GD69rk4Q80Nc19bMWJUZ9EA8l3BgHhyK^>23ctrltOlLPTUQTN=U)AM_k-9u)7o3
zee^mZ^xu*}f0hi2>;eY<`O}L<8%9lLq{m>;u#kmbxAg;Ni)8?Jtn9s@H7}2t8*u`n
z29PSQ&vrb9OOl?ybkI2D07CMhsk5azyw1zm+3et<oHCbw+U`SS)61e*>SYzD>;3&9
z<q4xke0#U)(GW*mLh9n`f#-h@9^*uD@2;GqW;FM)z}YxE;}VBEetdj}Hm9qtZeA%R
zWCVx5ZGyYqY@);SqS%R9jGU0jDi9)5&{3}=R?E(=EZTZ|*PP?b^IX04qV)xNYYh$n
zwIaTRn4f#T4J5I-+GhY823g7NAR!KzxL<~@4-GV{on!F?SGN+>bhk4bA)R2|&2}@^
zwS8RG)A{P&QQs%|l5tgO?%M>_X`COQUtQL`8*MXw?gr~|vz>g_S++d|q4l(inz3@v
z!tiN|r}=9Wvlr{y>;YJ37H0$>p0<9NE$;d{tGaW`E-90MqtCtI-S=b2)J1x~-E%`#
zEmh+U2E&o1Yb_k0+#9yl1+NP7+ku^Ztg7BL0Bs{pCJk9plkgAT51M3j)18scG;}s^
znK^Ref`c|LE)nf7u6i8v+hXCqA?01|;V@2fQS5j6pq|c_AY@?Y+nNJ&r=+To0o$iM
zDUeMJIYk~-xDrQUWHCs;i8xA?s8HQf27+YrEW+6C#E_GLoc8*hDqI=PSS;DE2Om;S
z;K$I<t(+Q^HlKPlW5d3&Dq&^vb#CEN0BUz1BbkS8LSRgX9=ibmd}ZZ;o76YnX+W>>
z78i$Gx+G44L<|}_dWtycJXyCxes`v9!GiGO<>NTbmkhA6d9mL=Nxkj>3Q<;35kSgO
zJ~**u60|U~amh$WnBVF(KR$EDW2<Usm1a|q51oXRZn&s;mRT_4-JN~wi&y{5M9y@1
zg4mdH=+GhQhLed^sgO(Dn_Hjca)wM>vg-7@<v}e~@Pi*gq?CJ=^$yr~z8gUA1HW&v
z&D_DR%)-aoSzv#(emjU4!_cq?`3WZ`;BbKuR~ara*VTENpzF=apgojhe%2qJoPTq5
zK}u`g>fWyF-R+O->_38d{WBb{eNP!bJ1(~JN@{`Zai4U^fdwnBEJY38Ic5(Cgc}pn
zo?ni7V_TgQnw9pjXy!=g^s_<C83R(A4WuT`d&ZQQ4HwIHa^>*xkG*nRVvWW#$eG@8
zzfNa}qTk>1QSjfqe*L=N6{tG{>D>SOd-#n+M;hsTT;DIuevioQfKc!Nm6diKUq0v6
z@eR9S(vWpQ`(mapT)CKdc*#`TX^WQvtiP8TIuF^xF7EqU>uu<68~?gu$GQ4+L?dZg
zS?x9B*UT}y0FS6JQIwdSW6|unVP)Z>MIg2<+mX9u08A9XxgH5i&exm4WkYU!N*TU^
zv}_&zq4Me587Iz6&bP+}reEOSUI&O*mfPd@$LGS<o=9Y8hn+jLf4}?j87}nHf*Ar&
z{mH=H$#a6IAzhZCE(0QH0~1tj0OHC_67%g(W=}5U-n1D{-@hq^>)akx^|jgX?Stbn
z|7{udN%?eT*#>LhAEWw<4GAga$1d4+e_<NL@R82Q21Pc)91>=@0}u<zaPUw(?aE3?
zZtRu0C#H^)0}h?IdtO+kZlPdQuw%EY3{wS-{<It+e_{vX;l`_1uTHw}8UP&Z(f%F4
zMsEQs1ywiW$4jeb9G@k4_XRk5W+@Oc%Qs|u-0$8qFD?q;2Z60**3N1wpeykuje~dB
zLLNBAZqyz7>lI?aGf#Z$O+;px(a+j4(H_Sx|9FRU0@>}caXoBi2oAdcoUNPU>({Te
zhnIHE2_D@V`_=bT%8Ofq{NwJMHtZa{TULGHgVDAeAKTX1Frb1rfXE=o;TKMtRbqJ@
z@VIl(Zadu2H|<BO1E7hI1efxt10Qc10eBA@Gh!g#QkL2RnK|OxUU`isPIkZz#cg|R
z2A>E52po;0%=YOTu^t4ggcQ^@)c)d)oD&&WckDj(_cZ7v@X4uG8^#86fOWTqB=Q~3
zocxYNw^c!4X#1X#=5-u!om0)ME8b$QJv#0eI+KyJ74Q$I*l!=!UR!o}kERB{`dgMU
z>wjSq^VS~3Xl4Q=zN~E>3;1_t*2RXW4hbn2t0eE1fMlz6UVZ97RJ;R@nO+#p^e{ih
zLGlsf*SDEuV5I>Ugf&hN3r>*^yw!GVwHtxWv!8!yfhKCNVS)w(^_~h8I4yR!VnCsk
z(ghZ9;hp${fO67m_Y5NA2p7foEl3AY1ws4RM%QwDPFL#3ZoY%$>eLRiu$#O=Y+g0l
z%p#7&kGIGppRn99*6(d)N_qe29^I$sg>~<6E4@KrAHOi=)<TZMnJ=UH-2*&^JQKtR
zg6FzAv;0a6t!8abl{BaU2Bm&vT@X6P{01tz`@3&wz(=6XO*0Swi-hI);vr@mp)}30
zc-!vBzVhgOdjKr)QGcZK|C_>y8BNc0Gu@Fl{$BrKo>F(y5yvLo9AT!FKh^>pD4zCj
zhthTNC&3+S9gU_Z>g`wDfQ0m~zB6IKx~9wkM;TK!|6f8tviT)W#|Mpqwe_X|FYeho
zEc3xg=OH(5ZZq$Y>jVhTxqr;ie)!VT{a}adj#2-gJ6JQXl24q({k?vF%uPk+{Brz(
zCx&rmxM&2v)I9H>#H{XET7WxT7CWDv-un8rMR<6)-?j-!9jSLMLApIOEG%sCn!e>C
zcb>+qQB^(=Lcq2Qi~m^}yEM%tw@Pt)0Eo*IoddS}0p^~5We2OUbi_bnR(gH?upw*U
z9cHb@TL^)*_IR2ziluA&M_3Aga5m%E-gy9_05@50Gt2ls=!op`S-@Z{hT2ZcK9_JF
zX_h`3(8v?zw^>f+lihW-djy`N;5NQJVC5C9H6U--bCz8~hdy%*S5I!|??1M>>pd0J
zES}yv^%-S;de_e&Nt@MZX?{I&VFY_lNU^Z?kk=Eh#QZq^&u<^U07hA9ubb9umwdk{
zWu|}Gk1ub!?>k*wHvk1|?Z!tqI3D{o|DYKgM0Ux#nS!nQhZ&@gjH$=7r@J}(e0^7I
z>*3+i_36bk<)Kx%Jj=yiUgtUGL(h(Hbx@{Z|FSvA1|VHuEqpRzfZfHr47Q%(yU}K&
z<Y7j`)Z4D@0lojNV6pc7{o~JGq*+;>izn86s?V7W>MZL4@Xw6<_2c@oL5FeXbvPyp
zbFsZaWj-lCy%GRFw!TbrW5)5JnwBcTck15l;%!I)@H2oLK3Jxs+dh||2}5_)mu|d=
z9J}<8r_Kh%x=p`ce*XNq>Cp$fwh<EsSpGdzTIcnB!87xIrM6Z>M>@m<Zu!KdR;%jX
z6xhdtHT``F@256Ax>Zpz4Ahp&d%nK=^7`fo-~46UlC)7#KD}M7)I2`nQC8TF19jr_
z<5;4<Pa8iJWT4U`yO{pwr*~btHr`74^4gh<^@}{4Q>kYGbGrrD|C4_P0!(YI9nj10
z`6~klgaDwtX}Ja9-s=tmtI~;Y0vJp^u<>8P$QfXlXB!c<(X2-s2htHx1d)!q%Px>&
z@>@ZQR8>=Ec7=N>;LuZbvkwd?4;XjitfrQhlQ=(RWATeuHA070m3ji+tO7DPMB54H
zhJSIwHDcD<mg+rOV^Tm=@JSfyIOU}lWHxg|Yt2^v-Vazg*>h*je;fxlW-n4U;fl6(
z9Z>Tz!<W}H9>^0?W|ZB<no;DQ38$uNXC4@+%9x&O=DjOA*@tJBY{%l?R_&g5V}A_<
zcH=z@V)mX%AhZ0hIBb6;evIXWg)0+R7R4L|)d2^u7{p9Kw~v8C{Wnt|1)}XE)w}a;
z=0~<X94}uNlE=S&Zrb}#pSEwGy66~4Wv++W9kzE}n>5*j+gzFQ<K5vk_dqG^*SBYp
zYp*n}oCr_M-!uR4fH573e+i7Wt!Puj60^Fq$3D5Jm<;N48v(6;wI@98Ixxgnt*u)C
zRekg6#ns{CW+#T$zVg5B3|Z5+ikR*>e!6#@A22a$N!;%yqYC1+k;8}hbpA^j9ZV&b
zS62>>GP4yYr@=G_w^w^Mq^LnHZxSnyfBg*YR5C^*ymP?A_RX!N@~p6P6i~tJ`uHqt
zW9sxJtCoVLbL9;%za7)2uDGiAui1|bO-@@Fz9e7X5JGYXf<uDL<L2mGC)Mj4)}WkP
z`s~?cVDSORaY>Z(T>n#DT!+@w7iEF}>~Aozze(?BF;dL-_jAPFvPzJOWkNdd9}fUY
zl_f}%277yZ%Nz3iNn;K{I2I311`V^dwM8hN(l;i95*Wqj#Pa^PHIq$s&PCCm{6Mxg
z1|?_uB~1$b*!R46bu7U5n!cp_6zj1+&aw*vF+r!79mkE*f$Z+(nPt}@56)cOwEMW3
z!fgSH@QiwwD>Z8uO)j;^?cd{ie8w=_X^FtSPs5eZFH0wiFmLbdJ6={XV&VcP?fZMo
z+=#W4+}$=2-O|SF<W+1B<upGp)ZEYI_*NiqZ3)_G7YQnOAQ#=`39!wIb%1tvrvFxS
zR87g*N#*z&?f7|SmyO>AXqGl_G)HIly5WvMQAUtzj!(YbB?A$vzX}w4h5{+|WvXGX
z0iJBb?}faI-VG9I&j|~bpDwEe(3^EX73cNs<FidKu106wKekB!fil_Rw$LXJCjy9x
zyj}L+3UIDXmL@WFWE|7VY=PL7PDhZ=H8K~OcU7g=zBKm=K&ztq`&OSI9hg8p=6C&R
zfeiez?uLUHie$qi4^GTYOufHLojztX6r+8g><My|%|nKbK3z)9$euWtK78YdiHzg8
zf;iwmF}8VqW(jXF6)BT<iVDqdpm&$nf&?U6*!tk)lgm-Z*+cRG4chDgojJjseFAlc
zuyd9*(B9elJ@aW9iBF&7P!abv4sKTy`@0{9x24vIwomsyTfh3w?s*f{@9yT@U2N=p
zKXcWuZvufsE4^ej%h7y9#4M0N`ljE^{6~+y*Mj;%)|v9RS0xAbeEZM<r=JP&C&ANv
zEiRdG%Ps`PaSJbA3@F|4IL4U}m-(zbKhpO!kdLUV5s^95KoyxvtEo+2wCRGVHuEdU
zhE2tYr-H?@`fTarFTjdt=-M8!6~ZHJ0FNlkukAHkzReGSE6vsaL9lH5<UwtqZf)rA
zE3$bpOOBY@-}iGN&~avld`@6$Wz`(dS^?}BwZ1x)R(~t?EAWf9UtO)c*k2!LL2f@-
zJv5(@@io7)7|C&vgoiIlH}CY@l<-A1<_XO5rZml4d%z<y6ViPvX>xK$OS>r@c9TV9
z;8U>aZnO-)O!}EeZb!2wl!wMfdx1=4#Md74z3)Q-tgMVp`}mJTLo8sK)cVX+<dl}w
z*4G&{)WZ}SDlNsWCC~SAYw9R{Gcj%czTT?x7~uQ$%f1AfmEjs;Dt>hgF$1){3cGeq
zU(Ybx=}YMEKz3H_>B3C?3Tjeq?N_5a?7ZVv&B7-yO^2<1s;xSW!;G6l&es2UJ7zJk
z<MkCO!T(B92JlAG<9BkXdEwC$Kn&Tqf2jN9>y<q}zVQ0bb^dN#)1R|s*SQ_jyh6fV
z5);SG8U6ZJ($Bh{_H!j=+FRQu+N!H`i>J&3{Pz6I`Tr`pzX7*=6da!CVwQ&Gg?M@3
zS5UIi1s)Oi&TaGtTypj7@S5NT-Lqe*b}-Oz2~UUeZf!UST0))ua~rE27wP4?DzC){
z!+;#Wej6n-^NDzkDXaU`$N6Z+fm|mipQFU!xS!v0`onr&YKx6uhpMa2ks1LkvsW(+
z2Y<wLSM@*cENV?{`T|0R&!f}Sl0~5O9}$P!HepobApohHT1SqXJ@O}21f-&?KPn&n
zPb#1&+X|6R7^uJxj~i_5H$NTJ`a`^Toy&OG)xHA+nC`+~PrLSk6!zTMU$@WIlvI6x
zdx|(OE&RZm-5ubNV*fbz@FAX!C2P(t*>kS((AdRQqR!B}s#j$*up5TAftvKOKTnR^
zYEJ+UT;c_&b2bor20Sp;wJo-1?y2Y1>n#QY0Bnx^4`Y{uCzBkQ+%aHbt6ZF3?Um1-
zIXS5^!8z~KVabZ6`!ZzvAIv-ck>8vyxpC;Z$mTuK=dk6b#%W_$RgMA0%#PwJ(c4pr
zZ{fe6b``BE&{k#4?u35@YQJ<U@zbu_JEn7pK&`3n&yg}{7JfZ1e`T$Tj7zYczVbJ_
zI4(Buv+Lp8VcSv7k!8vDfMf0KoqxdWPwpl{pzb*T>5mmOK?buXe{QSGx*Yf06GRG=
zXT1hE{JFdPX8NLNda3JG$Ld=%^ImP1yUuLyyL}}-@7rPGtKE_!SW6i0`99nS!fBz+
z>sia;RtbZxb`G{m89gMz$NorZ7|>V`_Fw)m_!%HqPv73U`o}z$p0a@L{{r9!9sOy_
z-NW8HKv*)>bfvyKQ{8AF)Y#+G<~#13O|k*;V;1?K1E_yCD{pzOp8jOM4Rb6gvPb{R
z+H9W826m3}c<KL#$9dXaUemt>u$lzWetdJTq^}GVYeV1fb)(G&-MKNQ_9)<H$+Jn5
z#(Q>}SX;!O<<^?T^M5Tj$v!z3M3LX1tC#F~c(HNa@<R0tz_UPm?trJD+1b{F2i`#C
zJ@6TQ|MCkP%lQBtBL60e?-@;9tq-3RYUb!WUM6|Pemh+-WrV$JJgE52h<tfXI<Uw^
z;GOyYN#Fk?GE?GX@dt12CB=VW7a6|_0U}!g)<j#hVB*4+Q-GX&Kq^=Fbo*kHSS>e!
z$kaq>hMQdwatshn=Wm|Rh(I(;11$0i@AP)JpO1QjGcip;RjLmNS=3Cro2gSA;4Ywn
z8%01It;C}1SIp0G#04N9yUo4+Z|fp8{)4tiS~oYFbzx{+TpVb42Y{k4_3UyCC{iZ`
znvCiLK*k53Zp{DJeoZ$)xTGSFW%{&hwyM3}eg29o_SJh9R)DH8rBE%PXEVoudS%@*
zTEjH(s6&A9Any^fXPVue3~Hwj+^%li{nx9;{OD>O2e`v#P~G<Z7`LJ*Mn}(LjB*J|
zn`J7*{m+E&zp>!1xhjxp8e(I4fP6{c>;uf;xUgn_jAFqvU_)XGfVQEFl0wbQv((Mh
zUi0_J9s9>)oGbuc8HqVaHqQc7fC`Z6-QB4sMh8Msz=IQnExthDrLCs>R_w{e{<#k*
zNNma$aGqQ1Ox2hpVS^jug&?Eai_y$BH61}TI}Qlxz+?Q6%%b!a5Xw~YU5h_y#8ON0
zp~YK3w2J`29i%{3`%#Lmz@f%%0)`wv8|*ASc7RDRN2`OTLygnhWSQ`CX{`ld={JGC
zazVK}U-@EE4!Zyg`Yheg`4>U7xOdc)pXlcv7y#EJ@xG>$Y}mK)k4=;U=YlAoqnBSZ
zjQRMqz!%u#7E^|`lx6{#q<_cDBIv3gs_u8p_xFx|X?-}yU^E^L*fGt)Q|s!f|8V*Y
z>U^GAAe7SkrbD^k?KGLJ12F=m^$tj>{n_P(>&WSzM*)u-Ixa#3PFytnn&FGZd0qu>
zFN9+Un&^Nf`6Ydb`}%g&lDJ=+OZxjJQ;*~7f;0`I&1ZIvm<TLa&uQ`fBeA9%TgFMd
z?tvxl<t+0kSTO64>#`>%k4c7A{Vd;P+efkny^Y?AG){Sfq{x`<Z8kpp+^aw!SI1o#
zWLo;xSQ9oT&+yG%)uRR-opAsrQ4<C&1If{Q_EKB`P~*go#**)mB2Xjw^8UW__N|X}
zwHKnyXSUp9^3t8ne=9bo4q(Ws#0{ysI*`5*$D4MzG7d6*>TPPumG+gW&1PI$1YkQK
z4w)WovaI12OO`Bo-&o>p18@YCe`f$+#)(nSKq~7%FI}ab72rRq%O&E1IpfS_0rl5t
zul-G2`g+?J0z?`H$~ZSm*A6iOz%i3%AsgZox2L`+5V+Z#9WU9uK;&$`fB0-5$?KN4
zEB;)zKb}}_N^L-a<UUAPjw277I)oz^I30KPTD%wnrbEE(pQG2-4Af>RPAZ_~A@6Qx
znbvby8S%Tf`~AzJMe4VA&ftc);FC)~&)z<WdChSC>AvN-qku$C1nk@g6u;^Bzr3la
z04YJ;cYrm&4vt<m{m0LBYes*r9bEnkV*-wXGmk*T_|>nOfAvLm%-KIUNGZjb(jrkw
zF2f}BgXAXQmhT^&906K531ggbOZz%&%Zn}E_QR1eUE)>0eo%9&_aSBV9jIX-VM@)s
z0~%T-nfBiOWj@0^_x9gv`dRvYZO8iJzStSgyN`ng0BEe$=j`>=%>`NXx(w2R&grC&
zKf}iV;jHl_a8?EP4au~1qDwA-N^RRC>+y5xrKhRK(N9YUzgXDs+zmR7+K*4`2A@1X
z{I9*n$64Mz<Ynsnohdn2nFkv<NukN}!q()X{+uLmDem>{nB-*_<<~)<f>ON7cq;So
z%6Shjh=QM&teLKOcF`YX0o_lD7q|Vjn~1Q%j!;lI<UWS|_*+>Tehrvk>47hQ+$6yc
zgr!q9<u()M4_~-&;Rf63FYP|+6L3{m!T=<w6Ebs0514Juh$(2*pm~gJ(<}<2al)V3
zn)qqp>DrD?Y#3@f!}a+Pex+Ua#BYRMvybXOKE3`+yX4>4hz*)?MDy;hsagL>4gY&M
zCq7V9Lbi91$xfQ+7J1_|p!V|!=LYkvt*fg$({}1zRpo*f5WfQeOm;sfn!pK2)zyw`
z;lAvm-&Os`WYF!h%NjD`FIN92U{WlAhI~N|Th~ysW=$rV(gcbs(&PJquS6x`hh4eg
z`bX-Jv{KOIu!9SUJmmfyQ=7PH15jUjE{*A8x?uZ+&tMLy`SvcT<}LAZVIk&<p?uGr
zR~?&dr$gjVAmz*K{>8XI>)pEqfMWIch06kfmo{y(h-@tO2h{{8XDbk2HUa>m&9}7N
zJ_WN5WW+N8+nPb~+%`~|cL->z%L<bYtprWrLd@Z)E9vgwc@7eR<L=T8&-xQks1|dA
z5BY)SHZ_|GO`Pm;mwGdA%Abw@NadJ?3CE9OH&Q^)+Ae3<2$NhR=)iSxAB`6Q0fgk2
zf*uE@ByM#9@1mSp{vQtI;J*~rx{LIazi-mt`gxN9+_v3Aw8bQFEIk5r)g2b;=U*!-
z0tLX^b~z(P4D*cslx^_}WSlAg))_W@IjHOw7Z?AEO&*fXvNXlwcwi%)MWzRga9RtP
zrEmS5t}kDFw%WUme58J-kQPYmoSYG_Z)|yUZ8yKhOkGUZ1F*2%1*|n<T{F-00)3$r
z4CYWT2uZ8@emMeD!2%MTUU(%T^I1np|90TP4w*Ib`Tt=1&z{S{Ic|N7y$HA&WOM27
zpWmr~Ebwpdv;r9z0-sgz@D6B|U$3hRT{K=u8o;|r6O-2*bZ6!|ed}mE_a!a2*Cd4h
zv~QjKEQg+poHny1kMhiF+RM1DF6EbI(q5&yvf)=h+N$rRuYQrS==7`!CY_n=Bc5tC
zD{<shPsEbdy?nZbNfSqwZU&raBsFdVd9cD7@4&)*Whz3SmKJy!e?dGE=aSxjymFlJ
zTS#7bzEe8~WLCXOu6g)rzo``1vw&}!>Pj+^dBd>0UVGJv(mfFMLFa9J7RqMIlM7Qn
z9;ox{=Zt&BIFpeS9M!Bi%mM9>K9MV^oLx44&2T=?n($XrrS~j48yi8&I&)3muLOO>
z8<Q0NQ{}jK1lY7f`*gc|`~9<$QN+E4mN$d0N{&B(C>?sL7nYn(+W24R7fmOItOK_=
zcfp?F*P7V1BQaUO>dxCy^X^~ZjUyf`u(z_=lg}eu|1AbV#l7mCxxNOrHQlYk0hQf-
zGB10a)j_(+{PlPGvkD|1VO<^fhwc(B^gX+3WBS#+#=5(gInAK{QF!3ut(OeO-{F&d
z_tF>n1uxcQdjW>E8Z7j*!}nsm#prRvKS4UnH+_GS8)IEn80NoWbISaS<xkt^do_VP
zp>pT*maORk+sBSC?3{qz(dV4vN`P&094hh=j1b&Nf97Gas=2IgQHsm5PaSc3asL9u
znH7CmwcFBujp{y-@Bhhe6eP(JH}u`lQjz&E5$S_Ga?ju05@vcM7sPyg?Cs7%z^#_5
zHl@@a_VQmle@pJ0%Fr9Xk;VQ{*}0!A2aG<`R{hrP^n%!LUDj+P-KWg&?A{{r`q{DV
zUm9&^__TlecmR?sT85C`AETRGz))-%1D{ZqFzWk?tD`?X+mfMsp4<LJSIOQO*?8?%
z*B0ko*|XUn7OTe}E#F{0V+5!{Th?;jBG79=iNb_6nJ)li@&_(7N)#c5xQ~3+oe+sG
z$CsB_SORm$GQl*?@aRF?PQ|BLt{aQHd&qM_R$9!PkIy_#uRI0aU(lKWYGdX1*T*J%
zuE5<{d3o^nPcN?DAskozs*K~`**PR>nI60Sxm6SO!ohysE|I%$1w&W&cK+CiV&m^X
zFHzg`-J8eELs`sy2kLZEesi`r$|-W~vA$+nQ39vuSmBen_j$eYZrF4~?V-&c=fca2
zLP+`I$G#gi&pgg;tbKk4z2@!0f*Hh)>u)~4`n^airw((eW|WRS%xdd9yE@@0ev7*8
zXZkXah+muIF0biW(Am6j-OKg2UO)a}eO~)YzW7?lrbWdbGZw8BRi=*et+-3q*`7Y=
zN<H?vBfu82YH8RM%;jN{2O{jLLx=EtW^9`qfXZrpnlbog$(mv39Jf)ACH}On_Sl$m
zD)Jhgb7IP#g$Mmx@{GBFSY$4ok6~t3Y}A~B@LuEjchg3+Gu%UJt$%UuKz3f04C^Dk
zn!0_WX-X6%yr*oY0aOLF`2CMSOWu|d6Xq`k<fv|3*xBV<KsDX!&BOGs)K1$lQSG77
z-P=H&XY4Hekz$Wy8#UkTWG&*spE5p*qtgCF8yPV6Rn7ntvaIBzoP+yy_KHbi<u@9F
zUcHMQF(l^V&FqcsUpjAU5Lsb^SHdS8Rei}jP4~RC-*ZJl+Avhkvh78SJb2ypJoM%0
zP5rtCO-sO0`PnDeI;M=BP0l=&vXEwhywX|Rm_DeQaM<mDjdKNQ+2(^ro56>@-}Dv)
zy>Bc+cG|mcEk5+-eDvc9`ErW2*Rbul&Q!_$Q$d>09s9fYAEjKJ<p389UViLmscY@D
zA4P#vQ*~ME#u{l^_ws|z&3IB0y{K=m$EcsdJ+JGNWIu}dqaVqh<48V-QJl+}r@nXQ
z?1d?Z&$3j!IAa@fB5*|QlBv`zAI-Lw%C1&+$wVLe9<lh*v2mk28n>`$x0;$9y$>!i
z+Pk-f-OzR*`@i>$#jU)mzR&G}k(S|b(=h!@H>Lz1`junxJZEwk@7;YFIyX8te)QNo
z?97UmZKC@}*pgYKLpIZD799z!Nnn)F`d5gbn>6_B^OesNHrbf?5E%HR2tYg^3;GK>
zanJP?d&dm93}UnsXaj7`18;ur?BqH)K3_QDut`UMf<YZ17&#fQ!4znG4(G&&&(8}(
zz3!~cAA`|Mq;U2nT7m(qUttgP1w+!XH>+pTT_fJ5je39oD0F*xTw-)&V{iCGw-A1F
zje~b7r1Kna*pT^igxToE97jo84Jr1n(|MVCJhw`>9!I8n@1!0a`=Dm|<<TcQPx_zp
z;Ze>@SAc%8eMe)F?~TnVbO#Ch0JU#p(ehWs&r`fc{fv&hnKC5yQEl_(sE@Gc+eGE{
z>nEO9e_4eri|WgBZxgL_{#o8}SD}3mbuCr%n?<@y>z-WezqUVQL5uzEl#u|F$`T3A
zP<7d2BpZHQ#_vx_=_CfVG+v7f-I(%rQ(}VrS>g1pyXQvU=QM9999)0ABl$}esjM>T
zYOpimfjz1Z2Wr30QzDPYzp(0>0Mw-)^<XvzFokuq2s@v=fSeeSYmb|Bf98pw>sri1
zRD(eEZ5fChO!o+xgWJRMUY%?UvU(yGwfzh;XPT#e`sVK)jcdl^7OaE}q1_sFb63TV
zM;Wj@Om%Hp<*DFlSt;9KFc{;*<-uv=P|FSDaaH?M3Ont~M5}HUT`iWzTv~Q>()&d>
zMksIQy?)z0FPw#6VSD)M4kLU{M7}7v8}4|$p{Q}V-)1}N#+0Ar-kC9pd)q{?JXq`}
zi_6+R#Oqr@@ygYkvT7SkVz*6^aCxo0tEIi)yu8B=+Yg<Mo4xi_qN;0uF%aj1L*6+S
z^^vw`mX*v{=^B1Mp*O|o&~Q?>dRq%9%Mv%HjGdBTGd_^y8=U;Pq<_q%W~Uj7rQOM%
zC-CXyoDw(2#p$<3IfGF6F>+ML$hftaA{)5?+Mis}%>&;KI9hfE%r+h2-rSlA`I?e)
zF1+N{<}uE>yo%AFoMqLJC-4QV@!rXxi68@5xuQh!a5iX%o$hG)3c>^r0FpEl%nt6p
zpUr~LXXoS7_bga}1znlYo{V_P**%AELnBHDoe0`PUR@%pokl#gn6<hQOjDYQN=ZL<
z2{6qLXq8h)2GP3bcin||d%Q~o3Vh)^(4_DCuK)Dhu~75w*4Y(TA%J4*(pSyyPK&AX
z3eBWbMIZtEb-nSLaXlDL;DJ8B0nC~Orp@01(zs)wQ{A>7q+Xe|7M{%wfaue_C&Bo`
z)8@0*0UqdD4UT$djdnkjH`LUT+c$Gz0GLiQQAdRQM`NW%rf4p?u6cXs`iF)Kbr&9-
z3f?i+CGbdiNgVh(#j0fYY@_YEep1UgH#-D?*r^Ebmn7i6PN#wEuAf`^(=Ebj@Un7z
z$<<4Bu6T^?r)O(ttX_0<#p6EL(6h(ZIJm7%Pn@6HJ+At4=&hXgusY9#v@-ld*Tt-J
zxlbc|LLGVlTeW18PquXrSq@h}|6GiY>T;Tp{UpJ2{I(gQm+Qn0ebxQ>#fCm&PTgLo
zlzA%`ui0v_9{Z~KOZnc#_2a(0o<na(1v*HUaH%-C{!{CgQ^C{Uye@nwWnZ2Ww&0NO
zNmyaj>#A`Dv)``&8Q13w{!@zP(pS5N%zyViQ&(sI;YCHHle*c}@S|zk{zrP>oZgzI
z`>#uM&+e4t8<KB@^i=GaLgAd~*`M<ET&~NohR+q(rm1%%s&+fkGOocB5%;EB$}^Q#
zptEr*gLfDmRmPnRHUL39RAm6B(s9;(<+aP~ZBTZ;7!2ngv>DNoT*F;iysD?JJ8$J1
z@MVeO-uWQ)0r~6Dnf_Zhyei-HbJG^kBEgv|nFV82^;zFrrb}n#?~0(6-385u)3wiE
zyf_cO8KO&a8@c;)E~r`zKD*16vjX&d-Ro)VDnVL#9enX+?2`%enV%QUIrAOVa_Zo-
zh^b3qM|hwZH}`U??>ZlA%a-Kikadk<lrsVt{NR`K{<J*nYO@QB-#+YH^X$&_xq~}_
zrIjr6hC?RQ7Z1Dgn*<6$jQGh<#24F{QJ}yz2k2k-AVogZYRU|NHmz_`9(z~RqZ>V&
z$JSX*LslKr_5_}$6kcR^Q0q6Qu1FV<u-4-RCtlr)ORswit5~q4%)9^Bn>Fd#7hI2q
zKdfItJ;fO@a`L_L^Y+{c`>trng#lE3Q4x>IO^L}_-j;(}z7HK^$M@`cWSm#`zGkr3
zQ>RrMHcLnOo$1(08dfJJSv%LJ_l)?xiA>?}!E*O9XyFC7P7>$sxwz`b=any<Yj+|S
z2%HaO?O7P{;Dey8FTSkut>Wr1=G|l{{844?f}%~w*y*^_p+|?G4KF%TMcCI{J$we{
zPI={5Q80VH_mNTZJB?F=Mi&j;{^eZ2)E#NkslnDxC#TgOUfr<optJMTFISTVrmw`%
zGKfAP-wqu-Hv9JJo5uroaDhYiZQKvKqBn%Uetc>Bs&1(|3hLd=;#Gx{IIf!#f3(+S
zJr3iXShaw&pO^xSqxu#{ZST&eCy`S{2S!`J0poa5UDIsNi9|-~{e2mtpwI7HThC0}
z=M}3*R#9-CL-U0vjDzMpt`=9V>Hj?uB-x$k9)i+a=(1Df^sS5>cF!WD_})^-^d+mG
z_OoT>_=ls$23A$x0fu%grn{|;XB~NRO2Zd6cEv+Z=B5J9iM^HY>t>VopANt`xitnY
zn}z7p!w;7-nLnpJ>Bwo><rZ-OQ21xh4HHc{ZIdahS-x}CXseM<zz}+VbZn9qT_5)S
zQ|6I{x~GYA_imfuHMA|%&6?F7_4Cy{hbI@@zkT>YBUHUzIGM4~r+D2>2)Ar`fBP)$
z^7Dp6Hr>stbISouToA(HgQDq>`2iLbFc@4D*wFA)n;l-jwAu{2a{s1_rztZmA6EQp
zN4}is>^%9+9DH`hoFIyu%=wDnwzI(IYF!eEhoSRk{o17`9C>ouKLC02?6O6+m6P^%
z8h?Bq12NuJ^Q-p50d@Fr=1pdHeAVs!&I|jNUz)PwDdO|F=%30Vp~IzddpD(c&kaZA
zN<yw)yP1-bcYnLfu%K>$QiIs2>^qPL3Eo34AGkP5eC?*vV(jq1AFi8L?M~UDesqR5
zY|XDPn|fc`<En=HIJUSRJ!vWClx<j>Sh{VDbHbGcVCE~idw5L%t_txAmo({&ss@p?
z?CfqyG0Y|;V?nIJaQdg9>xkv?`k~6PxGGNZ*Grhx#3cyQmp+z51E|^}1?<sZ;~CgW
z&{;p-^r%_e*-QYry#MdQ{+}HsrZ2g)Es>R1f>Gkvwch>o<M@_j$<vIbVHwA&^P@5R
zNtYy<*CdZb5ps(QYm<ziXEQ?9IOJ+k{wj!-+`dWq6jk=+&*a&4&}oP5b?R}jaquav
zhlI%a`Ar}T4Bb0%(cN?5QMXgYJ<CToj9G@Q+MF`;&F`PlKR)*rJtcsLYhPKk>gbYP
zNA82FBF4Mjxo6uMqFevF@?n=}2c4;>Bc{GRTrC=#9q3?u|H13ps-7tT;TX<tHMaXg
z+$Z0gMczrwsS($FQD8D+0h8GnVB5jl@Oa9atixWlX`L<myw%BLvZGf;zItr1&OTdF
z+t$<a?$!!8V5Q5xCw!g@=26zUIHt_Ge(c%-b!FG9#<-uP)eC_WS^nyN+}}54&(a6l
zy%}!R=Un(;h~`Q^LSfy&9~FohJBOSIhEYxzOcUf(MpmcTT>x|TYeze`V8F!6XWMZt
zk3nUBV`3A0s`m(ILH-fq^gTRKhEi#M=C$r|b3)oSO<Qbe>VFRE^*zBg7g34!(;e4J
zJ&Cnx;ni2F0I<`%cedVx^5R&BnHh;cdwYjg-KvLl227~S4873nm7Ke8*uSa`#MDo{
z`iIfkr9vLGVG-)1YaEQ9mH;{+easF%44E?Qdq>$dmvCHC+gDHusf`n4<<E>*!oI)Q
zDYdtHwtGemb5>&Nkp+N6^pSRbh8^*>fIA9AZ1{s!H5K-5A*Z`%3u5xJZ@O+WzIUUQ
zKD!hd303W)re#Pfz-&872S|H}PeyBU^1b|NCsuvC010_IuYG0QvN_hypz?YK_p16!
z&O<Q9Ld{~hcf$d;e9hy3o%-;COB2%8Q&2dT2620tSD1V<C1r5KlS#O~N^C~#vY*rT
z;^L$&--opS8y#E?%AZdk?+HE?e-_lp`W~kPUUq}qvF~)_iBV+<zhUZ|(<=6l9|5hA
zIlNu?Z0qHcTbBaHkUNQQ5>lR%o)K31Fnp8L@Fe-FuJ>cO729*@{KtZZU;d-5on79;
zt#~j`C1~$W=)QAGGHiC@K?rBv(`J8tiSl7aQcSU2%iEtRU($PjabhYp4Gb^-KD*?S
z@<nIk(M7JD6U3>(yJjc#UrB}edx5W=WG-gKQV+SCV6t$_^EtF)k}MdoO6qQxO+8(j
zeODAuNzd7nV>hJ0jy-((J-(#KwMlLP9<d>2LpK;~NHjHQ|9oxAX}F0&#f!>wDn@ts
zzG0VKkG+ZF-%fj$Fh|@vfoJM7&ZrOVw|Fb_t$JSpD28vnU#i>Pj1{>g8O}7Iyv9Rf
zZ7qP?Ti5gR4^GLOaO}gQDUTozR?#y)bh%#@m<AXWN?ztJH!x!_nss_t6M6f<w@dmO
zt7pUWe&HzPc*j=BQ_5_RVv8T2O_ye6FO+zKjJalgI282olJ}o=pWOE0#nmvcmGu`=
z3#JU=@uuMd<LArbt2__;6y$#My4T+^?IJ~H@w^l#^Sadwrg36G1Nh9PX@XeShyaj=
z>u>yid*8O>=TT+L*!TB%c5zvhnkcJHOu|TK-^4>!w5EOwusfBuV~rNfj{&-pReJxy
zj2TCWA1@*k!Pg{?O&VhalS?;t^uM9L%7BEl)fdG^hq_pIGS00`0>geiJGh9PT8Bqq
z<a<X3ao+>)k)tY2Ftv`+I^=7CN6q1d?fzBogIVjL5EN`wIPS`Ri{-`);;u%J71%~U
z?7NRpIJ!tb#+Ekn?NumKwXNPc+ZGgP5#VoJdldL0mycaCWalQH<=gItc>ccE$MH!Y
zw!7UU1h%%LUJ#_O_exbBiVE}v`*th7_V|Z-`84+JNgFbd6G5Xd>2CU>tYJ#i1l&mw
z+4I&6&N~DkU_>3fIk{ju=|DwgWij}QM`rC1HatYXJI#(d`k@fo3AkfB^{QUc?|IvE
zSKgNGZidv9eR;HtJzXEbbinEG1KzYlE(hLzcwRUTbWdn4_z1VF5eGV&i$E4rkX10{
zZ9B6n^$UpnXKDprMAkz!=u5Ue?i^`7M!-KlB_q9j$WD*LF-j%(3Zu>SBQj|NV)cUK
z<dcWMK-$+e*+^8znUAo{{GdGx`o0JLn139<UdpM7jrcvea-Lh0gQ?KsAo?=}T)Gnw
zf#S)agzIFvWY}x=N@-Sn;?SKn)}S`7SiK>k<7ebB%_xtuw#@4Okx?FstU|-l^_KiA
zUrocbU)}^D^C%f#*`Ce&CwnND)-TyTHE)+o(6{n-g<{>Wm4%=(`?Sd)H*CMY_hPrv
zr?9rR))ov2P<JGww(WRSy^8-9bgO?4VJ)lPsaqs?ftO@iW`W@xo6pp>=Tl;;Qx#{<
z$#?ReLMrM#_kYqninV(b(-~)O5ghad<y1}A5SeLOWvO-LW=F@Kna4xdwXYdVXuk$r
zGyPH|6AlI}!2B>}4Y_)TGeW>WO3VUtyoLSmNi=lOf1U5`0PyvH_<HNGs<!uER1lOB
z>28$nmPTL^0@4lA9fEX+^rAt!yE_Dt4y8*%x*O?`IAiVa{{GH6_ul93KlbC}-mvDH
zbIf<V@2AFT1q@_gc?Dl9U<JDBX(C+?qOgz$fOl`$&EFoIH!6OB2bev~UCzv7H4sC&
zGhLSSooM)%qNq8j5IW|hKeqrZk_vl&zOonx0q9u>MbPsS4K@_|!9AVQHvE?eb4LU-
zVxi047iZE<@;F^Ry;w@|XMlV_1g004rSLj4fTv)sJmc}ggi!^b%K>i?b78&<L+%qq
z!Gf9AwgyJOY^49$XR`fBVf7a?DH=u|83ci+${6E@4Eyh%DAG^p1!{lN5tH>{fwrJ;
z&%W_LmU(aoTP+2oM5^(?$2owXCu%w-KFi(zuNGj=5wNq!2rdV+IfWNLh)e)?<r+X#
zgA#=UE-h-x>>mXL>;nIT1#tq+hf}b=0V((^aTL(DJe#XC*VvZ;9^lECXApZXVAX7g
zv-uAb&6n2!6cg;$znGj3X2%K3`uSnd@)+Rrq=#K8iNP<mP=nd-$8#mS!EoI$kMK(%
z6x?KiP`_{gs_6^@{R$TAUw<Y6TznstFc5G}0MKpX5zJ`%=Yl#$VH=TLs0d(=?hpaV
zq3{A_RxP{gw^OTd)=L<j^q)&#wlgqBq3n+&-fo|~tTyZ(12nMFKghQqDfkWZaEa0R
ze)?b)l&8Cw>!<a*1XXwZoXh}C)n@_!-v3$+DGX4kfw8+1@;3GD005<nfAxpsqJnn5
z3GUUb1nd@30yiRu$$}OGA{YH1VCXCQ(NZ@t!t#d@f(FAn>e`da$^W^g9i@)?v_`pp
z{U$rohnwxJs#HP-Rk~z_luA-y<8%g2empQ}N;Q96#h`qPAOR)71U`YcK<PY9$Ze(S
z+|t}k;c>pR2gRg*X4D5Qfgb^eJZfOK-y{5I`4PbQ^H|R;+agg4@X()OL6e@p?Ev%x
zYx`Yp;pY?BO8~nw9X0T*`rj0(sZH<gZtQDr1_nSqTm`f7_4P>}|Lf`ml}b?9g<!Mu
zuY`mb$N+GtP)IpqE`l~EoPkFVb6D~N;aWLF=jW%_&7f)ffC(IQAmD%;8S9lO@SMfc
zDN(@$QI(aId!PQH>dqN}Dzr*y&_$^O9lXMaem|uiJ^&{4!~d4XLRNk&DnI0W><Pt$
zZFzbOuU0nz-}4ddF$=A(F9Ed<e5O(S-rn90e=luuO~4$416HnvIe^|`7}OYGNRIdB
zKSg5@d_=>7XSo0(2@}Q?Ae5YM&Whe6k<vf|tw+|<KY*K(fA=y3>bLS=MVy~80@Gok
zEy`<PQzBk#wHyo`glWt`wcq>ZalrtSdVpnJR?PuSRMJT-q#Py#*&|Rw&eG9;Xr(b2
zm&AOIwJ!}vi-}}K@D&h2ckI6W057@Ji!f6l3bNK<HM+i@^S3)(($itHbNf(!clJl)
z>SsbK(+@oWHaI2}4<t5Wc$|}mNyx+@wlJAD=h);xn?L=9_^D|%d(hUJ4Bjt}q8}~?
z(KHPDUbv6PwdeT6Hx6V}Rbz7vCIjJ2M;*#P#Iq<|H?mi2+GW!dEZLD%Zd4Fb;V4U-
zLgTaAh3K3q;!CzYk^xJlm_ix^S{!PiqJ_mcz{EWyZybv+SlwZ7*+-a|Vq}WA92GHL
zw<FVV17M~Oho^|pWH#P06wqMzD_n?;2qI2@$`bMpP$yH1VT)xnW1Yv?sZC!E?)Mc@
zwZ{LUB<L!OM#4@Q6rQNm9`#=yh#O#0|HA`K<u%#s8{hU|&NkR$yO4d|L&#Gjgz$H_
z_Wsw_1Eu%_n%lBxSh+Ck2*9m-KKR}T0b;Z`n*%f`dqeTGFM*f0tkC-mw!$&uz{3|;
z&N5XIHHPoRgeau3k?eAsb^~TGmfsd~PRtKiGLawRPT+pO_ZsbJ5^j6+F35ylInT2l
zbKnbS*2H|R11=4eC=`D*D<|Dk&1r8ljQaW2bu`rLW(}mj*#wloIqk}Gf6mR}_=}u4
zrb$%E_pn62yV`49*G9xi%e&Dd<>fc?_dRLATcBS;qg}tB)AjW*ZKlioNL4L*tzdD?
z^ADew+ao%u&Xm}XTHNX$^Diy!)>(#h%DL&cKHI-u5QyZGA1${=2;M|wUuD-^bNjqy
z(&Hlrz1nKju{?}6CFC&e9;@NRq*gz8G8l&Sn&H9c{7Lt7C$+<O@xs{r7v~Z!Xj<Pr
ztT|dB!86caI;Fn*kj=ENfk|HdQa0tNLHv<i$2mbO3ClevLT3K|7ZG%8XJWOYZx32s
zP?$g3BUk;aGD8UQv*bOzyE%K_zn*?e$g%hrR3JXb4J34OVJH~JO4?Cne*=0b^q<(0
zgnz0MpE9UQ)D3{g<zm4gF*KQJe4+GkwMVzFkNc@GvU`%&*Le7sak7wYIT7I-w{xxp
z#&qP8NfXgY9=#ghE1v72i~ztGteh-IE0#F1oRjboRm!LsU3XM6@ImpY3sI=?D;NCD
zE_^}|-1Rx}shxJ%7@#D)wv>RQMDTim?$5B~_+I@QP|2pd^@s|AmfFl^$9b6jOZli)
zZ2JHIl0MYNUr2T)tdTB{7o$YB<hvhKzBfCs6Zx>FJiQ=lQW7gcsKSc!U|kNUUk?_2
zJN7H%mO`?${?EZAW&;sdlV+4$R^^2!ri61?Foc<Z_0K~_GPfxjdgh5rRtowV+v$8_
z1m0kh<va(+>A=nNJ=Sc%^+e98^c(H>P0zZY6QLh0l4S>8|6gQ}EMmKw6%Se$vE4sJ
z&-2xW)rx=LdlUq1(O+3WWFrDIDFD@C>9Aus9&_mkm;=k?9sem+)kUCG{o{)rOA-AT
z6dN+KsNtVuX|i;iK|38Pg-pH3I0K1zhU;*B=PeOMqK3Tn1LGw??|J~;^k=3<Jh|N_
z;#L>(ck${>@}T*IE#IE@m5Y2~SG)VW2MIt}PpNL%&p^4H!#<~l>BZ;CuUmx@GNM0=
zOwaYHw<>8u*)?O)4N<<C$eqb%FV<`TjDm0Y)$tOgQI9kOl&fNx?y;6-wPbt8a<<)*
z5jgYnd}#V3t&>*u1&JHUzJ(@6Y?on16}EUr9=vQ9Xd2Jy&weuKes+sn+KSt=b-z8G
z;7DI29c8j3U?M1+SVmw#KtEcq`Y^n&p+;coGhi{$nDIA9v*Z+y6rzx9T|>4;W4O_`
zSQPupGMwW3A(;D+27do5umH`IJUkdTyFgD@{b^ePxZ9rsVU`3exTwX+()nlAKa~<m
z0aVJ)k{{+uqT8^7b32r>M*hqD?&^by45s}3?Vkrd2Ix?15e42zMgaHksK3^~%9ODR
ze9J;rXrqc(6ye{Vb#t{S3CCyIFMNUoWq?uY7j!7G2t#<C^JwuxG7k)(6-F=4N!JjY
zjI<oiZWF6AY10-+gk8zc%oI8-Ml<)!gCdgDCVQzRLV-`ko7Njs2qFhqAFUK2S2$gM
zUm}O~*P>0|yQjASrzRQ2Ra4`1FU;-zH#3V>Q0l#gNPNfH`H#Fm|7Cb0M=JKbuOJu1
zYe9R?Y1h7X!W^~l_HXe9f$|~+h59vLg5;1Xkw?I1nY%3GA7XE{-(5(@@@HuKs+0%#
z5b(m9YB68W>wn#lq6V;?l{DFW=SEx0)e#`Dv$dwEjrPk?wWfo)fZ3q~-jBG~lUvVX
zJdRj_cuE^+!ApAejWg&m-ooyuM<h|G$W^8qbF=pukq=`WA%Lg@t`1}vpyldC?ApAg
z;ZKW>seoO`O2S|XdcwZw*+7KszIq@7L?9B2zL!%Dg3Z48t6fr}#|p#Mj%S8bA6fGY
zrCoQ0rbM83F2m9(6W(h(Vhv@k8R5M#oc3b%Hjl5J5*p}CBYP0SbWhf9RC?aUAkjvX
z_ifZ<hT@ClXg4W!NuOaxD7TLY37wqp8tV$WYRjW0t^e%(RIEzFtDx%+KgWF6=`Hez
znOw-`xbo)*+?O-Y=@tw1DtH(2cK?CcyyER2TsFuUrWrDmhGdYR!CYT{iui2!p->Nl
zm&Z4f>CHf}$d^4zl_d}kGG-6?uSGK3Zy4TVv7^r{hJ4`~$n$LG>t!;Cd29d|(%LHE
z^LXzH^yA}XlBX$P^}>NJmnb`aP67oXN%Z6A*jlrEo94JC10^W&(#s}0-CnsY=Lh0h
zG(v%=h_$aE+xp^)1(2sCvrSJq){Z+$1Y*VmI7%Jn@6@EfP`yZ<c9uE}X2xVx(0zPi
zV`7}{B5z$htZK5MFG@UnJ(L1XeAhP3jV<-E3utKAotI<>LI?gg84yimT4OXR_DVJm
zkc8VKcR>&0w8d<-misIglO?P$VxNqZ2uAD!Ici&rRA!=(hEGH6@bn-)o8={kv#+S3
z$ywv#Qzr9)WJ0T9S!A_+xB8yWHUZT?w43>I89>W@dN&u3H~7-xDe>7=SDbj2zcJIV
z^_x0Yf%s1*CLiz7*Z(7Bg|#*?d+hH-Q=%&{rPi1Y6T!T9zy_&q4$PA_zH~4fIvOoN
zgFfnwJX7g#@n1orHZ{pF54qkrp~iiXsiqS!9USQVx1-bC5YnrFqZjc7?ZmU_)NtA9
z{dLew@61#b%wK3l<-Yb+As$LTE@aN)t=NwO+_=%w#4rOiz0D$T{{Is=cPSws?Bn97
zW%mi_vGS-zNaVQq{aV|pfd$4xnA}3OC|9$ll;C^8hEl4OzBuo0Fgb6!clKwM+Tb*O
zb0C4+9BjDIgM?am1}T@PkDnGDoh&Ci+LsPnU#L<R-xvyWoJwsDKI4(MN@@bxHoxZU
zHw;S1XrstP2ZIv{A@dJ9vTd9kT`RzbE#`(|57QgMrUnW&c*wlG02_;cn>tUs)>p^Z
zfV1>RK*q|3F%@zNbV>%~z5Aea1_Ef5OEaYID-Ke)C;+ll=CBx+F51Gbk+G@elB?m=
zWx8tqUL8?6#N}IY5}k<`q7UNOo#_<>PO#jdmMky+zW#pz(Jzk{f%7k??&{C!<|h#7
zp%a<UB|;|LTm(PUBNJEBKv?nSJ9EF&D3IJZ^k3omL?($M=KdmSOkf?oj}2tLs4lF0
z)H7b-2E&-k$`Xz~j3oujAlvT@dEhn<U@5(Euis5oE&z?+TObwBsLCzJ1aJWk3~I<F
z)<j0J5T|JFlD4hqS<$`?iG5tg)E%^SsB8gt(?Sszn^MDJ({GSE_?(!^1*73#5AS+K
z*1HN*iR_=2J#zXxZGJCbEMHvbWEr`YY@IeAuE0PFs+Skmav)_zwu74!bp(^}^?J0(
zN08+*1w_RF1rP^7L|`kOa5Na4tHD}*;YwDf04D`hbO`$GK4HB}oJ#F7#2}t%WLz(M
z{S-<Jd1l6Ii|oGCb6C25)iEm{asDwup=&_f?e2E4&_M8<7K8Crafcd;7FoX;y;l`D
zOLY-Vh0nY3U`X&|v7YoSR~LvFfLQy_<)ykx6DTK0zzo`tGolQhd=bdS+MQbL{;AaQ
zugrI+jHeGMrGJNje=!zT>=Qz)%G#mYI{zp*nHzq$uql7Ji!BIr<AWH0Z<8$G%7RY9
z=Ld5R00>t)mMX{?#hf18|4EoDvxUVlh;HRyT&Mm6Cor&`Q+7*RC)9hs=$1ab%!sub
zVVjU{tC(&Cfn8gft!^h&K&M(T0%Pld!`v!T227ZKHLzM&);_0=f*>Q>CB4!<tQT<3
zwzznA^T?bVeW>@B5a=C$`?NkgMmw;Z2gZ%rAO6K0|3o59U;to;(CD0L)(URFYv5mv
zp}I&S{<EqM5cLAc4>Y+no)->lJz_w!I;F4xYix}HD#8U3sY?VOPKpRBNeG)^mjUPz
zT$qBQf93goj`g3DPXk#P%K?w`K-9Q=UzYTX9g4P;3An~VE)b&>*qAfY{^%o-%$5__
z<e2I`KMF7s9{D2NBt4is2MXj=IY2CJ0WyCSbbguv<N`L6dEvueM+C7IKxEM==Oe-F
zP%uyLs?4|PP<RhC>S&<c1sYBRkn1LLFaaRV_2D$$*)~sJAl*Okg>~=j4r>xl$4jJu
z*WjG825#M!BcI1rA=zI)&Zc{JmCgJ-!x%oYYR$ET@ck*}xIkSQ{ylR&=_x`bb$6`y
zq1l6_koo*=5lx$73DgDh6!x8xiXL}%n>~*y%_4WL&jLsFzXi+nTCdbCvqy}^RCCzG
z2{t#oB2MIgY;ao~3Mv~b-^W1PSwOoN;5}<UI&8fPP5AaC7ZUavKj~^#SEGMnfNg?(
zr1L}g-J;k7I<UGSg6$m+jNZr(Z?6I7@_(9L{L~Rm_+`L=KGwkK%J<8PJlLe|HFWB?
z-8=v}IzV<q3@}xdbqxSyB@eK04>P|?)lk9QC<Zz^G+w<3!+hs<;^j8q5M}2xBR5yp
z{P&5-k3M(!f1{4NX0^muIel<-v1#g##L!!Q;y}>%xKMge6Hi$i43qYnUG_Qnd5*$<
znp*P}^N6v69KNv^!&xgkY^PnBo6>0<CB2ZLKU!g1i@{W1t>5YjH1|EWT<BbNwTVex
z?2`v&c9t3MPx_ES9C>YZY)L;Y1IUFPBya(69Uk~K%;<IrTmYII0z|k@biAm*PksKX
z+V(e3!}noeoV}Q0YU~X|tY?$|3!bS}(-06!mgvcD{sjRsE5Lgx382n#;MWIg88QwI
zWtVXnP($gTPXd(B#i}J(fO07KE<4)}I$I|FZ<>*DF^ET|J^9f5Z$9@e4C}ztU<G#v
zs$&jd)%M&uS{#8j-R<g#6c|?n04++XO1J%CG!b_DZsZI%5<1Uf=xx=VCyPe26f4Cj
zxvCb?QzlIOuYPJV6fb-;f4UW^AMV}nVtCty>~?((S8F~Lq!8&zrBMC>hBps=V8<?N
zVv?*c9#^W7b5^C-Q4#tyS=pdjyY$?CxlL@hYjeC>mUG~!)idg#<22HDW#R&rE}@Ko
zpJ%rOBB*_<+cjVkrb1y?{?Au*J^GuguH%~jQ9csoby+dn#Kb+XS5>F=2$G=BWm9Q?
zA~F7Wp_qA3B<@S_#kxnPG2)lssY%}dls|Z=<b>Xxc;24hprR27J&l;L5j#j8XaD9(
z+?>RKMwqg*%T27Z&8m^rWTS{{D_APtHLza9O5vCvI_tc`=V+o3fr$N_S{-W9{P>4`
z{))Ilcr;EJ7jkYHVnaAtjKcJxowS=~L~XJ)0)HR~Gk&`)=HuzN0=L_P*SAg<<&|k%
zuJrot?hzxy`=zn5g>0t-AGXI#$J}&VTu@EJw|blXGt^SBARfco(6gkf^{GqAfpnHc
zk0_~r|7N!f8gx>Tyq`5w3MnqaPF*C|<+GtqC2^D*ztBpfgyy+=O63LE4KIzRm%>dW
zj3#1^K8D>cTNv&?AXINL>~~2Y71~Cc4(Qi`WJf5O5D`qz`6x{<@DT>AoP!`5W%Bz0
zSZ*gJ1uX3gwp)>rk-_W%T)BRDpe44P2lcTFh-RijgMs0tboVz%OtqM+EkL18<F+n@
z2m>M0bAV|EL`S~_{7VRMDC7dBh)%Dio`{>?uplBL!sAO?8u8v#$x}kH6dqgc3le*K
zdthCA2D9OT?1V8O*#fZJGa%y)EGnWc1TqScgvNKz2oe}uSU7@W*KZZ1`na_IJah{j
zy!rN&y6B}cHFZ{-TR6`>5v2pX##H6l6T(Ro$+oCOr8Y0p1Uf~$voE6^WxTBH?qj;;
zi;eIqc+hS?^zM_>X;ie#S>kuJ_8k?iykpK5#7-7dq?O3=#ybf<#fr5Y42dOhO%O@7
zVgl}3R2uhav9GyDbUHmk9i!IG(}AC3$);0{Yp*nIE|;REF{zDD`0aI@J@BG41tosK
zZz|@B5=LANBK_q0F_9};nR{(KESTQvrQL9Lk*2Z3o+}jWOdS0;`i{-<)&P3UOA5+z
zJ^Dl+NP2o8usfeZoNc^93O=_85^*Jy$ih_lbF>9Fq*F_#_dL2kmtI^gMx)ABL|3F9
ze7VZ*>>AGTGCgWsE|&w5XT$qyV#k+}F-2ZaC0xV8?J9^3{w`4y2wRe6>Mw+Cv+7e?
z+PT(S>tes*C=#FP)OWkS!p6nAB;dgG6>;AZIn?pFKfNG!d$G4h4(SWs3UJes&9luT
zD&A9vr!I0^?;V_(t+N8KjQM?yc4Vep3K#pWvsJk3u?U4-VcgDgNeT*E0m-|=h1$Ou
zd-X?wbH=wNe`=SDEsOO^n7%!86-$S{u5r2rDDY9h$kYBDF>YQbEB*dH-V>=Nc4+-m
zt59L(2SY~yio+bV9+wA}%_-QF;iFyj2DD&zbP3or20f@Zs`L(JUM+y7%8!F<on3Ip
z)<No;p$VYxVnMbBuJF$qkn7p-X$vOC38kaV`y7iUE4xECGYD*oR6t+JjV1ik0_lc9
zrNi`U7^o0)t)@$7zk3S+A$uA8(6bjr#cZd*j|_5iLQp6`EI}p63-qW2w!KE{56}9$
zLF7}B1(@ZkqA;0hN?WHT7sDez?sXvpg=cCrdf3|QKBx%ITF=+KWS$<KMJh4lMfAjK
zuf41tfkMvHZ8~VMTAHuBR1=eUt;CNSiws_)<{pWwFZa{i#4hE1UEH52;Vh=Vn2zT-
zyu4Gdhu8n+k<&HyXO#-!+C2_IMvdT2^*RzRgr{^#S$^8?R~@>QnnkE7F@7mqt>_39
z+!8svm&DYeCgJ|}!P{9jLp8s-a&tXgh<>{_?tPz2kj5k7Kpe|+yQQzeJ1p#&jKSW^
z&cU%FKJRs|h;kq=N3MuM(JbSPAIDV&GU=Ja)h(Yj#RaK0)An;6<4R}o6E+?Tlm_&9
zTbq@Qz7{;c@XUVOl5V=c+PB&uoyrHd(T;yoo6wnHDD-D-lM$NLfK=4Ttb8@F)8E)8
zrA-QX_<HuFPwuSq(3p5iTAPqGrBM-gLEtN)b<;uLIU?hDlQFi_Rl481zv@PlQBN%<
zJrN3{4<ePhwM!hC8dTo)ss4z&4uRTT2vBHG(GmPAd!hU3tKnLVorUJ&i}#sre&ymf
zc^8Zof3YdE%gRyz5u<idI&Xspjvbh#xW#i_kC*7cXd|r_v<XOaF_<%5LUc(1cmh>K
ze}x?YYA{vyXCQnd%8vI_Vq|QPU{cQG9w#0kt2Ms@;Lr!d4G=RpO%z+}X$E48tF32P
z>g|{HgJNNd?su{V^irJxkH*J>9acWeA`cJRbJRNOjR$QS9Li=cjTo}U<xputOGRy}
z+8;|M(Fd_=mrx11AdZKb`|~niB~|{6(Kp-Qs|KANN4DKF|GEohsbsibS<vT_(d$_Q
zvCA4ahiro_=om4mLH`#4`eQ?2b)}k*+sYpp0(G?TDw)HUBqFv%oRk%!%w^ml>wsC+
z8<8N<SU%S?^9rJ%Wx$Y&@nefmUJUcXh>g^W@_~H$Nx$d#Gr4NAAWP$l_$kMH>u0IX
z{bw;nG9<a7kkt5GA{otB*6QuJG-!1ayK$x}Uc&m&Z&!TMQ=wcuT;j_o9(>JPXiWIY
zNbGSF_3>#}m-nJJb4_H7_`P8YPE}2Z%c7yNrm|nU-(J1p`)Cv$+ITQg*($9vT0-;N
zGoyDvWVwh{zfH_{efRC>{FaD#2ywX6!JV3Rghi*Y-eWtYvRNd_ZEZI~L-WvvnWhkD
zdyx0YNHkhuN5E{}KH@7YG_BR(;oI9;>ei1Jc&U3Y->E~>Z4N`L*lT2{sFVKMV8U-z
zxtz_Kf$}RJ8jJHfrAe7_?9&J%Pqu1UuEk`zu+wc{SS<Zvo!eoQ<|ZGp2S0P~dE+~c
zu!Q4_!EIEy1S-ZKJI+O4<AXk?oLsuHbF9y75OT(M05hNDmN?iE**q_8V!b>25R(0j
zFb&w1Yepj4OyT83;Sq|-NDG3LRq=?iukqo3vOuE1)}}h*Cn3p!g<9gt<NOmE4b3Nt
z24(B1-aBVXQc_Y_z9J=LLL@vm-x~huQ;=Rn|Glv0obvPML6DoW0(jC~ve(1!FX%pP
z3{X<h$lT@EvxE<+eik9ACP-;<RdM8|#*V&IgXX8kyv#)C?(+(3J{Yh2OJKG1yq`z6
z=M}MWy=7^ju->!q83lblhR^cbYN$#YWnyo8OiWY}x<tN7hUF4vS4H5nM5T4|R$E21
z79(2n7-`pzj`HZlU=V7ROCzIYED%%wjg%bg7RZGgZPx03NGe=>Gk21Z+BR!UhF&hr
ze01S@yqw!_K}rc0p;^?yT&$2Mx-R;+Cq;><Y^CjCLjvJ-1UK7%6Zmzkzc2@Z-NR@m
zCq9{NlFU`X4p-g~?Y!R5j7wCm+WV0`VVcfgNJ@crw-798qL=KVMQ}83-s{yn2J(<x
z{jU?RR~tPTD;H7v6v&^S+}$2NXB#k44<I1C<slJPa8PO!3QiNxGpTuH^h(cnN8*Ws
z%^B8APoGbB#Y%{Uss?Hq?=hy)Mxyxs*r*$SsVZGW!4k2<!YDR56%}^RK*FU=Y>aA_
z<3hEtkzM#~KHY%n8MCB^M~ZT<!;x|}hT*O?7Cq;ZCUnTHa3VeS;TmK~=ner=?$<Ae
z0AXTm1Nd+;zh3EHKHAGTWHvZt%wny&!eS|@x5)ol60`CG4yil^I^=vGMe|ibXD=rq
zsVqAU4AJ1j0Ya0fQKg?-#^+rOoWt(|2(*ASCALfc%)-I~yle>X_R3|}s3d7s^khIp
z1*OD<h-@oR&~YmVQT$g6Kw@KS8_R32PwA+P!iSux%!@~@;`-JSm-<+!1y#kGdUo`q
z<e}At1a(?JD;Wy=$H66MJ|_=y8)lL}H-qMADK>tQgD&eUKZN-3K59aLWN=0oOUbN}
zPiN<U^*Z3qQ$3l`{Mt*}`SQ4<c)8gm>x1CpYcZ&ec9rSdo=v&Qo1H0b5iw}FR)I_H
zIxSij715$*R7%k0ut2BrJ;%6BNY6k7FZ{=cc|xUQj`v63lG*yDCESR1`oi>TIq;|-
z<-YW^&ub^LTj$0WPitzvBi49Xg)eVWTr$XW+#4GH5RiI!yS6lUsM&NVT5FV_)RtIW
zV<9q#h7G-4ANYYvk#qd(g!%ez6Se*?fpJnawUt`cXaDu`j~i2nl#n>Z-IcHC4{3`*
z*E88F>1@f(W*c=$RY7C!j;%=+Y{ti15u0UAYn#(gH5)870tmi3N4JNLFzMAMOYaK1
zTq*|;q)Z6wY1sA+XFs1ksKHnz7tYl?X3zDH{(3?YTk3N^0KsG@T5dM4ve(Tw>6>5f
z1r2ycP0!|=-@xq`gdrpHNKY(|>9aH#k6$&6kpC7el#+CWzn!3tyv4}&aGfe}UH<Nk
zvdSt@qKkl2;s3(9r4Ywbwwq>hVgiePW^Zp#rbpW2!?;K|4~t^99|kr3L=6z8=RQz7
zR~E6qVwrf3jzte74NUyblMAH$P93q-QWEmAvcrXa%2Nm--wQ_;rmlmDR-_j-p>m7J
zy+vBI-~!!D492*}y=a8x(<DN^zAIYanG2-K&|(fD!jspbA!_^fNPv#odP30|r=N!;
zllQQGLeGH3nUuW#vm(N1Z!giRqi+EYY&jUtMA6Sl;HFE4(rC%eplP&3yZPr{Ua34`
zv1N^J9p+`vFDv=O;BQcn*lWcHS$5`1?8Dc895)E4hvC>CZjm}1EEw82E(Yqp`P6N(
zC;GV!75BRalZF;j`OO)gH0gkoey`C+Rwt>5rxsGs$vD)z)dgeNq_`7Wxr(6MM)(SL
zb!qg*L3CHA(`lcBIdKSOX09tVp~I~&^V(0KpAioWqx+pESAj|;1OvJ0P=H2%f2kxg
zwCfdn+~+>LMMx-@6&5D<pcPUlhdvaIzfFG1GJifQDs#X0+DLM$W_%cLo|)LN_m*^R
zx%b{d-WEmGHW1K+p$bb<qq-8Kn0TSht|;_}XKFh-L!Y!Mt&AqVC2|jDI|kKKDaU)!
z_{V1!aeX2;x8}0f6v%L0%L*<~fN?7vqOAS&yU|%Vlv*IqWOi;Y$7;HH<jh9S4_P|?
zNkr^~ApT`IvUHr^@KQ7Uqm7)XI)d4*=T9rEf@BTMo`DZylObCm=PbP5Qnseh4B3)<
zFPxN^m~l@mPHB&4I>Y97V?}We80^r6Kyrd&xUg<tPfsYfj2}2<<D+&`{O=1U$WOfc
z-&cmA4<v|@Yo<NkakJ86jGCf)Tw!6nSnT4<-`~pFK#NC{ua~?@FHx4i_l9f7hA|gx
ztF+dA=vR@wo=(FbFRkJE{&*dAMZVnG(afn}(?WHLK};MN!^;}W`d+vgKf!iA^;)Q!
z;O1)b73T4e2n<yw4I+2PZCMUKi7q2alrWsXQ<|#h=7K(W@R4znVtUoszvH(l2TBTq
zv3lctvht2wtCqe=maIuWUJLOaEP8$p4$6x&Biv9Oj3si7(~VycUf<K&5`R5Bp*R@(
zw3|jd&ulupnm|AkT5y}pUQ@$SiktH1NOJ6ZU$NOab+6F)-?ZKVF7mH$(XzMP65faf
zyt)^Qj|4T_5({kUsoP!p>~Jzz6zsJcwzM+0eG2sa{#mnRe1xSm5C&u3!=Ywu8Nd8u
z8HN<aA_Y>+3c23>lF&9P;)vLAFOS-jjH8Rrc+W7p5pA`7qsNnsV#UT<ixz5DV|Hcz
z4P4_z`BwC9$4pL|C?Yy5Ipww=enMrE<|jjSQ<4BYIvf&+9n#+g=+WCyulw7EVp91R
ze`b@PV8`IW;ZYYjlO4Rkj^P4-eC;iWa+JOo9y^r~An{`=nF<0aH2bjomFCqe1Q2`K
z2Qp(M8Sti4@3`lgh0cC{LW_t!&1YR~_z)7ba<Ccic5?fs)IuG2WIY_)X0)IQM{QJy
zqjU_P9>?qWFh5F4IJ)f5YUhWUSKjMEhje}2xZN?c9a+A7`I7s<B`I6W4o5>l3eN<Q
z-Da8vQSt7uKR$%w%!+|M=aU-~q%b&cO~2bHe=ReE!F|LipCO|$_b9PfT2knZ)-@>+
z5d+aOA|hhv__)$kxtTF&pdJu3p$U(K)z9Tb4Uwt|O4y_d{Gv)L31sy0OJ+T+puGcA
zipmStno!k+I+fR>T2R%3N%g6=2R+z(6z<Wud-Z!}1|LXCdO*yK1g9VmO$WlpJ5XkC
zPPeC1{NBQvwVbGTo#|@w>>L##PFJGs_2{enxZxeX#g(lxIf4(1b6FJQ>GEHZRc98<
zSBUSzD2|y>zCU+)97TBeYyC70Jd^IxQC7Xk>E!Q5SRf+}acF2rVqE|qA79Bc6}EhC
zFu;chFSx7GWXB+wyoLySU_k8-_h}84YaF?g<x@}(qi&l$c1dWW2t!pgvhq`Y7Y!hB
zRcK*t!+)Ui^$(Egizb@Fg)54F?Oth?@yuw^jQMwgJ2O36b;=vew3$ljU$|$4jReAG
zYxY&%_osv}N@)(eWJx?;60kg&MwK)Y$Sh`k+K~37ogCsLKH^IyOmL5cQixt?l<1Sf
z`V$%CKUXKq$4Ih^8C;fFJT|i(O%W(qnk`QBOiWBGdwbz9_Y(!&5(jpS2v}m9zRwQe
zuoVg5Yq6-wmtMYg&3HEJ%YhLz6+yA5@=BM~w))dPzb-mTH&Dc|*)_wlEcj%Ysh=2a
z%n`FHW*g+ZT9-l}6K^1DV0Sz)Il0^3q2pstj|}u|T9y5yQ@lBpxOK51M8UB}E$kbG
zXQ!DG4f&yLYG5S%?oPyh$!j2k_Sl}q=Y}LQcsjhxc~gC=at3MH$k^dvKz}If4YFsH
zUZ7boLrOLCG%j^yWF&0l1EH5(*nCCa$XKpG1BJe~H`s@eF9#L@eHQv(8hiM=2Wb!Z
z@$qrDKPzxnGnLH8d8-$j60oQa*s%^)Q^j!L4CmsKk{>^?^}iq&(}0_xcDCR?BS)c!
zpiB+1(`v`E*AH3gJ)`Aw-J`RbDt#`{k4vZ8j6???M|E|y0L5-D9MS*m@gj{<A1dg5
zQPLbW^ti%;`GW8xC&E>L-RscUSD|jL%y1Rh#Mn>oGw%(}-bf*ZTm{-0XC|gJe{XOx
zPfi^T@L0{I;)v@R@VY_m=o~=-?)u=0Jp4YiBmZZSX~qk$$`HtsMzXs8__XkO9kIw-
zCiD*PC)M=0JR=kN7J_H%#O8cygu|2{6&g)mz3>C?xr@Cd<waLA*YGo2=N5yDaMRES
zoUm*G|7M>}c<qM$(A`g@pD~gr9xNld8NcKhCGP$Cy%X3K6wzh%9eZ!eI(?0QgDtG#
zJEI;3DQ-}u(BE#iE-sVdFU*FlG}M2yZEnJoIjnQsSPCxIdj}eR-}So3#6FoWSErXt
z=f{5<43&xP&bmt$v5w>0HV(PW^|S|h#st?Pe-)g22Y~7?&uMoeTZ*2jZ5!nCgw4)s
z(zo;rv-=~!Gd2Dh?m$qciDA~^QN$5$dk?FF*S_$o;-_FE2SF(k!1YD=0xawl3BTR}
zIr!m0HaJs?7$SDZuj^jTta^SY@#X=_74$839b@cNw~9^9%&H~YPxIuM94_-ke%&;$
zc9f*Kkv}L%K;rmPct5~>d+E#A(^tqm-{q0RSg9+RMgfV_G#Bx0!T7<TQQ===Mm?5y
zMFHi>2tXe$&8diDX}KapAb)R8DG`SuWwep9Kf1cvLJ)Fk+kbo5ub8W9sc2$yk?PFm
zSpJnSvwBS9kCWCbD)yI|--7^ooGt%Uo&cRV0$tC;ATcC9bY8daf=%6%S+XO=n60k9
zFC|{8ddP>Ra_MD%?pKv+_YB^08xp1OZ*hk*?83#m`*V*e@^G%my{_;egnN13+jcu5
zZd?oLHoYN1A{C!j7i6HM^VpNyEMh^j(`=JQQ0WpfYaSsjb`F{?>+pRb9F&rPRBE>4
zUl4J1f&e0i^D#Tk_ne(ac^Z-uma-%YS$yfa<ULniU$J*MKOzK2@`%3~mSuv_h#LTA
zwb|>2gU(bs971KX^v(U`VqfE*rv_e_8!`j<5(?1*(cIiziF|?o)E!uO8?fmG$H&Kq
zelda7`%7587c$oON2Yt>KNTK}|5O2)GSX&u?G2Lq37Vegi_a%xWX&J9xxwLNwEEV{
zc?esxU$aZqnJFPWmP_hW!x2$YSg}Fe*1Udc(d2fB`tlgme_gF3@hY4Rtk`viYHTO1
zn&13J9*^sJBfCG6!pN&H>>E%)tlnvn9t8f^7aUzn8ELCck0d`6$|(B!B23%KV%i3+
zc3k!Y8yNK@^YeT~tLf|>Hpabon#v-ulgK-b=iVadw;}2D;})wH@K@@g`>7ANyrnBB
zR(!v#XQUmTzEEq33n2n0&OPG1kTu%q7098Ayd4UoW+NBT%r8)JGIZS6Oh&^s+6O*1
zqYP3VubPQPOwZ^K?`IX(2BcFtUq8%~UVJ7<nYB2ggcPz7nLkLOztSw+cz(iMqC|9-
z<W{&Ql-&{=ixVXKNM|J(ez`e_UtCres60QL?3aN2(Ih|NeTa8FuRn;^T?Zjn1BvfW
zWXDXnV1uFoh@R8@>R4d1&uxC5>HfVP8wm~Vb8IZ;-b@u>h@;zIt}w!0FIupZKVS=!
z4I!vTh+6dyXi$z~BhX<Dz*l|1f?x9>=RG)Wk9%TU?T^myvg^N9;S8>qPhLP++i?UQ
zKNgSl17{q<5Te3TZq19in>tzpF2$F1hhI8pe!mVQkgDpRfkHnxon=lID+yF;DR>P_
z=RHb7Kr}hor@|<yoqY^ULQCG?B*ee&9tH=Zx|3o=eBoj!q^V4HYf}k~OalDHBMpsB
zX?hd~Q&4+|cq{cj8%Db%b1!QRB`!QLDt+Gmyo&t7qw>R>XtB2W^<R^8pTB#g9Pqyi
zkK;?7J>3{i%C9stVvnPeS6O=>8}SMfhx9JedO+4HL9EfnVI13cjqQh<LAVdbhef+K
zl{o|{XE3Ju;@^PqKbQ}EU_iR0_2)wgA8cQ^d$w};7z>WJK@`pSe6|_!H?W!^t)Zb|
z*5@vdp>Cz^QNiF}WZTQj3l{GT=>fwY6!bRq)YXE_*oqMN5?pGTp@`_&2z=`2(FD;a
z)E>Z72`p`h&Mx_(lJA!@29nxW?2TTX?3c~J^S3OHXFEh7usgc>>QNdflZtcfk;o6L
z(@lFw`06dVT`Nt=dtu+ANTDA{xIPuH8Try?E};i0y>E87qF;R)X4?J>D(HNWt-1fR
z&GnC?7PPMDuEyg`tmYRm>3kHqZp1jq6!h?$F#QSW)sG|s-|$hlG(!{2u<qz8xP2aR
zzJ7J8;U-y}DQNbUjVR>W&)Yr@bH<8@y$U>j)jGn2YRqLb&q2wYW~KT41!|Cbg$Htz
zz7hNBX%HuU<p=q)Mht4~8K|7sV+&JC5><$yH-Ev-^OM7gwwGwPFW>e4_V1OJoi2PC
zrUs7eL97~T-2g5naDEzmS9dq3y^?+ya(*Bfh<5$@#8rbu0q=xCLIMSZc-c^9{O=vW
zC>dH>B71sz0<@%<3w6osCj!iw5767di6&=fXF^=COK?zh80Dj7pC-tOY9Zf65bRbj
z;4|+f_}`%E5S$Z-e=?8iG`hn`Z#{v3PbPu^PV76BQmR%oRFvA$`~Ax}z6!tbK!CAD
zw_gfUsnejFufyt~7r6GC8!T~hepPFS0gL)_9lZFWxll9u1eW{FL36n#{kXA?V4{Y4
zdu_xz+oW)!s2^dmu6BC(RCLqH`4EA;=dRs*%pr<p3Qx;Vo%;H?Gx>Z@;AkSbB@(T;
z4Q+T{C}j!fNM=mTwmg#D@swjd9P)W7N#LbM6GJCV2fO>0gnI8k2>S9%f(VRapC6U$
zz6MFfzPsN&1n8*ZCJIWzUP|)z>42y3yJ;3@COR_mCXYZSGE{j@l>U_drqjq|{yR2E
z8T02CP@Ydt08Jno$TE-sw=iMB=tFXcJ*d$eX#vRja@oN6vSyAZ*;3XbDIq}t)Pto_
z{#TFq@W9^O2TUD?#>P*vv9Y&$5t2ngfFe6bp#Q0poM;Miz6SK0^Eyhp;4kC6Dq0(J
zdAv13?f^>vO7msP+`&&xmkuS9Cy-%#y7^dswhwJi=*A%zSo8xp_flQ6ZLLi`1vmve
zTXphN%=ue9uYUH5*zd0dt-Y2-2JbM(89p77J@4~!O}ps8BD=8j?Pv1Z1`9oe$ot9_
zKNOg)k!tEb%`Cm0$`6(0(C%Jxev!&$|FkqhCN{YqzgEGcO@ixHfu+i)lxrNTQtI87
zpD%mEljIy8;mo6o=pcpl=*W#zw&_GYJ;zA|Nla=qhOF%_lL}#vGpt$T*;cVQ)YO(;
z34C`yUSd&Sc$`aC`G~8WG_DLt2S|();c(0O#wLX;;ecp5c?l14V(b_WP&5j>_z%*)
zA%o*@!=pL@@1NAf_)QqrVS`t&Z>2LZr=o(nWO*3p8HK=4ga=X3xPBJ`MOm8Le=0QA
zHx1fTHUlt1xw+HaMk9{{pl8VylfNW+qnK-AIj&2yM0d;1!2vHBktjVn^&`st@rZfp
zyLVviCZni4vw0UcIQEWe<3=Tcz9>xh>sjcw40I@|-A_6T{iSc31WEqPWZmP&ubi*a
z^(gK)Xf^EYxhl>^==8S2Li_!riC7`$*C(yMOprd#ldG$cs3?Wt#r8-3aR6_@G8qMd
zo8?2%+KHTKA#7u(*U!}LM1~!x1%lN@ff@_Pi+1<Z^3V_(5a(?nHJz`j>?%!ljE;>d
zI^`}`8wQ#XqnDmjo^0X9fwvsR-R6J`JLaW76oYzm-F>Tqh!vuc&d+*=rxu<F@T(&N
znJ4)kk*D?9*%YuqOhEG_77>5r!M<h$H~BF<lvU9Xeu^^rr{7fB)nh|}8r<`HvB(LV
z2z*u+ev3MG|8p!hZth-iepNL{9!X%)<8Pb%!v_Y&2PxPs$NlG)!+ulL-g#Izl}D{Z
z-7nwv<SJ=coB6^1Io6}uP_jP=cIW^*f?bI-I0do;n38%}R{%uw6ZZX2cdPABX~t?z
z-;KxQ0p{k^<@Mx@tF|{%^m3W$ZOgapQ_SlWi+7J%Nr*c<j4u}pe=5QIUs`P8Xgmv#
zL>>t5sFktpG|DgEIsGOlii`~A;m;uqDa<tlDGN%1-nTeF;5CrO%L?Aup4TA4R2*co
zie)HqcEh5L!IGn-prGLVvd*0>+5&zy#m-4k5fKTPxRj<|9|5t_#L*?doB6zNxd81j
z4vxr*)qd9~vVz=|=aVZ_Q7hZ(x|Do}q}zOh6Le;##K7(tFp1nu&^z60ZVXQ-BO1E6
z6boK)>XK7kIZ;H|unr%>)Wlp%a6@~pN((AT`C1%IxB?i}>(fnCZE!LiX!9eshlht(
zH#S~<FMP&Fcp+GDt`trz^wa18dK$m|WA>AVL}pY}RIZC1Wa%+{z<;@@_ODOzz?C?V
zs=yAaQgRVj7h&BP4*C8Zh+2qL$v=%{i{<u_N5ne*?Nu<vGh<gajY{QBg#)*L=t-y`
zBDSI={3{3mDzvbY3y$drcioSiFlL+V$zkapV8u8=w<zT(&XDNDO~5~|K$JBLRqom5
zdU3)~t7n350i}3wXtDGjTDetUY;38^T1x8&JZjD)-m1b`@DZv9XU4}Vek91RDif%r
zculJ7GZx_$Wy_0-LeR{%=~doSI3Q+DMXxcMN*Ms1bha-ra>p)G336f&Jc0j70Z{;F
zl%b=eQ#nSa*_w37cdER?AQ15ptgo*ZjV?7~f|SmOnIHMcK)pWx#VQ}ZH9hL$(2f*7
zbVzN4uAJ5zu*ccMgY}x+!HU43Q3(a{pgG{N4+SH$`AZ<cOuHauGF+OOhlauwKAZ)j
ztZD+JiLfpm47Zd_Owc?~in{5O?WZszb8Th*sB;^$V}Y6K`CENK$&!gp(PhR*v*mX0
zZeOk1{Jr^vtz2&3him`xx!QZ%H$grbJp(U<2XpkQOx}9iOD<vj1AI+fW%Nq#W?^~`
zfIWZ)3mn6jRLl;M9G!!`O|l)+)3}|TogW<>47ub)ClGM-ps!*>t(JOwdMIG0h#WCW
zNy*-RQK8!gNeiDrf|4<C@S<$GLiox;jW!;D&&pw_!=!1s#oOGi>b>4B4i+x{Z@KOx
zTjD=Qhr~E6%4ncJVqcsm`+Bw^k7@sCSHW&DK;U#tI)gwb)aVdNJCZIKuvvDeOyaZI
zrIidl2=vpT+|_!EWh@OH!Xow$QVB8W@Pk8Py=E*WaOb^duP3^YaeQx~R`#Uz&HA`r
z)r%1X-H^^~dL(Z*zTvCk{?PYynk~#-S)}4Q0XOl`<5^?DD3aEgjjxc41_R!H1pY&!
zB6nsjG`HJ3To(QBk-|dGChXp+TPExr^3B&q;Nc}?h*s&hWrGz1uzH5S>h8XB6vGJ8
zXgQ(G0s^gE(VK8`6r9L(wFHEinEoJMD6DwEZGC58=o?s_%<td7*KPB_JukK@1otP2
zH4F1(wT-WIc>h}s0A*|zoZsGwgrpLo;4!3^8o$DH+%>W;Uub?w1iCxr4$Glhk_eW?
zzg=E^cR1SvO#gIg1g5jNGh{u7YM9L5%}gpL=EfSVHNfFS#Omtm;mx?Kb-CfOt^s5@
zkoE7)zTVHnaackJ1}ugeFFN)vJTWeA(JFP@QQMZxLXqAiZq<e1Q!fh%J-c`-(>rjf
z*Pm-w!H~>vS)9zvaEn?v?9ln;Pzr<81MjP2Nr8JCl&pHY1E2+aej)y?93FdIqy0uE
zsj(+dV0S4ImY50yTEBsVjpq^sBPFy(W3FE7z?Y`a)9Ta;dP1-j!A*5gH4(&*iW=Gx
zkZ9P>YiS1_Lk6u!4W*ueuaojhIm&9+<g-DU_rcjxS<PnRWo=)K23rzmeHqwRX%xI{
z4{sws?%olWFK$I2%zawXv0-{fSRWFUNZMF_))%q;zS__{Jx0c5Z&nOI1hlzi;B<wT
z`z17dtL@|s`#e2#@$?pRjZdYa<@$N(WC+Whfu6484Kq*VGU^CGKQFn`@J^F&1}mC;
zLA=a`l-)Qp5JQTd+4E~W^QGN#sB*zzt{d_T35X9)Y%I`3`RPZ0x2Raux@PNjN}eT0
zE(_}&01#V8|0nv~JYnR=zW23pUa78Y&v+;)DXBVg01uSCoP{%<{|dt5s2!+g?Miuj
zh7TpQd%`$~c@46kR+`S}%D0&NL!z_BMzf#djdFJ9(XxIfxY-)V#9>yJ&R+ihH#s!e
z>+z1yZpkNx0^;-d@D!EAYh}0Y1v~q)!E6(!jd?VF7o{Gr%LF{aQp?M>5oSZqPvyzc
zRMaw1CQS-fCUchF{V`X~L&M0CHo5UqcOlL9<QX3qXcaz)3AC}hIeNbQnMfZNp<&nE
z^^>skDl1pzZ{bI6i>R(W#2!zxB`W*!^TjZ2?L@^Y1#Yj$2hzGiq8z;>_SvuFa0Rk>
zy+y?q7W;(8S<A|+?_|%~9x>po1z2t7T{MwuQMXgG3)NrmIFUw3z1Q!`ZsocA#qwp}
z_J>iv?#bC2j7tggi;R2$aEfmFVr71uOG#w})vvq$`RD-|H;izSxYYCvwLr_fCN7K|
zbM6bq1z6lGpyRN8nbt?<eT96!udpKA-QP=w^9Yru(uWhgsds&jkp3phCs4|8WA+E#
zhn!lz(v6;ho|#Kxo6q{BX$Hf;x-EXm5^s-Yc3?au#k6%hA0yL*k_P}pH|+f2S)@)b
zfHF?*gKgG!;M^V#*b7JX0^+4!226B=v^Ui5%)^ftYj0*}Ti1VI*(VDO<LtYVg#fhE
zLjT><K&jO1Pa03lKQ{Ciy~lieu+a30(@dMdIAD{cr?1c8#~tC$SV0H|wWo{CXTv;N
zntbocN2xRg$#J9CSUu8MGLg^rjK5THGN@NZS(;IgyT)M34Vi=5d*6_D2?nWgkjh3t
zL}c_cfj;h1=*@OM6-2+;3w7~UzOPaq-R<-M7m_v-@<`^oF_MVgkb2q8;rULrQuCRa
z$`_=QN}mj?w@@c-K0?IPZOPf+FaPK^yg2;L6FkGgm@e$fEC$uB@pwLD&S&V~fNV8g
zj3AzuLSQzFtByylR2eLMF3^PY*z}<VuQwboAaL;&CFHxeBTnNbV~ul>$O!3)Sjt4N
zSZwTtl}2y<k8XsK7!AW@`*tji%0=AR&>Z_NrCepHWTGqa<D<ix**Sd7SS3E^kBBZu
zLjII_=BN%F@4h^;87&B&AIzf*AARcah_*WlHv6i4{f8YZ=x2TR;L6jrwzLVacV8-k
z9#0~wGdR(oM<W;%My5$KUuk}QF=9vTVDOitQzo;|C|_{*Y#z3@!bQPJw-W2AeUSx9
zlj6!BX9;PZ7=YenXW?s|8-Ti$X|jurUOA6u0>utSIGu7kNNK#jIipR_$dEi_*U`}d
zv5Aq$cc}j01TsTln9i0`<CMgrerJ`?+f~3APogAiWU^-6AHDM;a$-{=VJ+Ydo*U^Y
z{5uUBtTV;@&CEk$hrMe`3GZ;6*Om$8|J4Enti^49U#sykb-uPclbXb{6}xzyfj82(
z61#55WA-Gq$%^$eP^P?mj?N8HouVywbnW_47A^UCem$gfXDavE2;z5)2Ks4K{9Z0=
zPxfFhs&^FxmV)^q#g>-)JFok0Y|k-`wsY!SUwIEcFhJt!Kn)72tYm?JG>$NATG{!>
z4;k^{fJP4yxkb+i&huOtZ;|v?B;t`oWI3DtT(@nH#QuI^xu11yE@H-FzPJ#By5Toh
zfOgcuHO>X$%+tW}VzCzoi)+xqnWI;sv5~*g#b`6ksP<xqJckvA^mY)dOgYDU4FaV1
zf%cS^Oyq@s(x?k1R~(;(;KY-CUh<BHI$}kox_W|lMjJKpNj?JWk-{!J_G6gf5w5J%
zqK_UOU>_5PN0tBTcv5vlj%B^|v*cMnqJzk~R8&^T6*<)-9mH<V;Z^UA4W8%vU2mG^
z`Wt-iQVooBX)i&KQ>r3M#;Mkr44Cp~7a11J36N-UQBl8%<3!#8go$^eA3l)x_4Q>-
z{ig$CfY6wEfW&D8cIBVtbG*IOf9`HRaoI1C!1ixxqkR2nA1WfYnu1pln(tqzh-}Mg
z)`lXtEoQ2z%x3wr>%PNL3Hyj<3c5>{au)dNqwpdAp4&3=kh*dnvsNKCuM`ol!77L=
zm$97pej$~s(caAOh7&fYR7Fd+^s=u-ZP2$h=rXg}-{+ROrejX0{9WV3Fq{VK^H+=z
z7fU_j!Y_645)c=woS^=f$FEZa-Y<E@RnexT6Ud}ByB=p=8z0qMPJX5<p`*cNk5ev@
zN!O_}WIf#+j$93F36t(yUEd0~ki`F+uT*pb1W84f?cP^nNC}zm%tPyUu2W-g-Zk{i
z<MP1pz;SH+oJm^}!F2PEac9ziD!ccNy5MKlv%Wb^;J?_n414SY_+T^?&6nI?sqpNC
zV<R#Y%GIEYrZLLgPWm`}mX>2}fFjlU13A)^&g%58Agw(twmv#Hm7j{k(Le8f_!%x!
z3^2I9$EPw0IweXrF+z$T_wMAT#@$@(_u+t}$>u<y^A7M~FXB>#@q=-+un7&bMl$;U
zp4<KaTos2&6XV~f<1_lOW1L){WAx9PC?W|7rR%?WCn!;R9w|j0%jinRRi=e9xy1yz
z5`N5DtRA!%Vv-MDyX}5itW!hbLh|)9QNv!?tuwKDD=PbVPqBTR-TaA>$!wZpy08z@
zz6%L<6XtZ$H*zQ9hCS{cgQuiBE{Bmhc{HIj1JPHj_SikrvWGMd@l@?)Uxrwyc)=aM
znzr`u8=g0~dz`2(@qe$WNoVz|l66;y=QVp=`gf3X2=aZAXlZHDNRqu=ol0yK7(fB?
zQwQ9*mDQZ&d0tqr(NGpQUX^}(?=-PkZYI@SL7D5HHB-7$b(SlgVQG&xu`;opX?fxb
zovC*i)FqkJ1#;2kiyA|#M~5MLe-*-MxaM#BLSMA|f#YGq6ZUOeqYVe12w@Vs-%M%q
zwUkSZwb3@ab>V~72k5P;xT&v5`JdhkW1rj%znNvx3KM^T<Es&2S>wI@&AZTYhB4*P
zYLszA#UHQS^@HZUD-QkciRJthv`9IKquGU;;6jHGg?+-i;6wP?qURs9)XjIRde>4l
zS;${5n?G4Hk_mc@#KtOn=GBORdR)xn|L4y~rMw8T-K0<ddC1uX1+P=d#;E@RVM_BP
zVnxDjKt@bRV`JlW^++EAN2(}DBmD!8x=Q@pCWYH0-J&rBx#;&7^2wcp2L9G|_#3n1
zCh&(y(90D@c7f=%jN;zwRdGI^Lt#YO$igYBQbPBQ4h25e^uYBbvX1H`ms%r}H^V;(
z#y@CGMVG5JQGQDjFldWT3#~lY+YMj*{i}QK6Sa|%k;LN9+sHIj_BgM+`FPayZw?mA
zE}HUW_h|&X-z?D450=7l_pkh@sLZtp#F@=m_}t4!cbeV?k6h8R$KmmNUNSj3IrSVX
zPc1<9z{}}a@)ttF=Y>w}Z6o<&pi!?c6sgNB(mKqH<#}Ukwszv_&aC&h;{MrYu@{t(
zOrcs?2{C0ZYDu-0irH|+q8Unty-xuIGM`jhE()hn6<bu<F>&Y0bOfNBdx2D&zm3Pg
zArtT`l5eRiT;JU=eqm{pwlKgZy+<@Hb@gwZbc$`v042kSJ}g_+IIhLbb<Z#${`t4D
zVxJeYtQWnfxH>`A7A8j2M1v&rt0-2&DpduP+FTWZ|BJ1+jH>Dh*hd9v>F$=0Zl$HW
zC8WC>q`MF0Arz#$8<CbSK^g?4Ly#_MxO0B*`@gZ){pxbD&)$1x_RN!x`-BC-GGwE*
z#5Dh8Jh^mkk8sVMmIKl@{5z0U-yVJef-ndUt(bIy%Ns`nkq%0lnqDap1yWVo3gLKr
znUQ2sAg4+TrblURZQTIgnS3L97~{l@2a>fBs*S&6`u_I`2Egxs)ChbC5PzEj?hAZn
zxg&7t{4m6GLg<pnRUuI5cLPP*oV}sWla*S5Jo`&vK{OS0s<nxegr}N~bC{Ho<t=75
z)W#F2HtMVG%<4OTsqiUs)?e0RYX4=cEfz61L*BZQzeVBtiL0)SW6V2Bl^)shQ#mu!
z=}(8)gtustcOE@qey)6!OMg8=-v7*WIb8|mVN5{5Nv?DX1M#=(A`B`SQD*%LJws~7
zg=U%xEqg<vJv!XDLWbH-Z<*uklR6Eb7-W*p0qhqQ5&{RhpI_D27dmL*(3PDk_VR}T
z4K^9HSebU|XiOzP<8tVfU$-MLvFq2nZ+uOadeMWb#u63kIrKJP%im#7Cg3l4Gpx0i
zB9q{_DR}f8%}h&qj4~83^>^rJsaKW?mbQ%TqBfz9YYsZZYxIW`%a56$5sW5ABvhDw
zvq+WeJreVejBd^3IegMQEt|85c)wgbJc#*#E(o!DlThuNFIZLQnp#!rDDRiS*-t6-
zuW$LhQMO#VC7?rOhs_}5&4=ubo9>4;lf&W%38liLMdmTD`x#4|1^M=&+kbzbInV3S
z_9Ta^m|fYU`C6^UvdUQTyBZ||jm0nytbC}lvQp}s5Nvt_dKg4>O3BKGQ7*tpFhH+t
zPn)h5isu5qU2Rhnl1O<H*s<T#SiAKEi508z;;KWm=(y`Td?-S{nL4Z0De#q+Z7ZFT
z@>Qc^V7vti1gWt28QtqPPA=m&V-WeBf|hKNfM~ORMbuNCy8b?Yf>3j4e!r$cXnv2R
zkuaj6ey2pL)?G4bj-{uvU7y_h40!6&Kziveooe!VW<v<<qxsAKfs~FGS^gQTdb<m*
zK?+34c1nwpOGJi`S-xu&N+&d8gRkmVqkcgrt^J8ronAzfQHbH-&~H*NW2zd221B<<
zabMU{Ij!is9!cb4(+v+Hb3@P{W;MPf3VMq9kcL7C6zEis3{ZPJ1MU*WjXN1oQc0TX
zcvbq$EJ#C6x52W=L<Cp9It5bQU^PZ9`~z*K@FYrWfMc1Mndt)~ipSe3I|0=~7@(d!
z+05gm1_-5A6nu1=DT|&Y(#Bv-q{3o!c;5yeCKLC3*2?0CFpRt!rYomt0YSNH4fSB^
zS!XBP>dJ#}B<XK$h~j5f{S2u%Er{|%Jt`qx>Zz8GD)<?NU%EgMQ2$pDEFyPF-1!l;
zlr{uhJ@!^+1_$hd<+1?!t06}7Pjv+WV4G6I7`|FBH3_&h8Z_QD+AW=aE0udEXzz2t
z$7V)<BRdHV2??R~)Q5oG_`OPmpsi*KJ>PG2Z6LJLQ~h)W<08sYv`W?BK;WV*i0ahz
z6fy2Y&`NzqV3@;g31R94Yk#2%Kzz$`u<sb1;qg;1FZMKF3km&LN>wrhH$9|;I1>Ak
z=A$-O5)u{(H^LkDo$${(22qyGB;aQXVr-vB^vi7vX|CXaC8vxYX8VQdfr;1+<hD^d
z<6z$+fPY7O(BdA0u{i@9o0oWIPg}~ttv61<?eB5<?j`uKsVYL}S6?W(lG<nH=43$0
zOy3{e|Nkp++RZS*Ky`qKsQm90V2Tx}f)s2A^B0CZ-=fw9oiT_9Me_lK8}MJ-hYH2j
zs%Bdu=LU?znt2t!%nZMzMmbHN*)Dp@$)UV&a)^OB3&4TJmXzg3>}J25UUj#71wWi!
z@>d59{rjur_u6$p?bU^#75prqjRlmHI4!qEfOPNDt^}W0rL|QQkUWG8N<QF30N7dv
z$RCZrjD3&88C{@}R~_Is;gOLeO9VzaVDgHmblc9Br+PcgRg&<S!oQLR4?k7VX@wO}
z%@H2dqVxkLj_b+V+gYUUHf!)iIYC_#ufs3wiy_#X5+~^!0tUvsfV+Qdx^QKyj*xw0
zuqg%vG!Q-aFC+N<L`aDauBqYJ8P7=sA<cQ<Os~+$vx0_q%>%~u4W=pBu3Ms9?9XEX
zg={bs3LQB}7XU;{L~v)PXk2{!+y8lrAj~2X6zRw>kBQw5niWb=<w(3X21(uyzngIY
zm7#$Wv>?xri-utJGcyKc>cKk1%4-c*=<u+?3)mtH0XLdTeFBQe@R`(}0m}wn*&<BQ
zd7mZT;d=?|XZmj|A_#s`QJ};@4n7LZzze1#i0%?8T*JJB;kr*KFz5}S=zaOpv1zDy
zYN&vhFYn_zXGnjBmx~__Jf&_rCV;9CCq)4<#`u6hk^!-NQ=AYEOZYPy@V)bIJ}-wz
z2a{gg+Sqjc{%uf4Zta{NoP-CG!RTP!Z6rKaCMRp%3Z42Zlz4!)>O=-Wtr`wIKAd=v
zYl_A<L4vpAOIm6$xm5lK9N4>+hViGgnYedM&hSo7PB8sIR8&;E;rb=`P1h06`06L;
z<_IZ{%NFp-@YJl}$w|saOMdvl)E?Nd`gZJhw6wGzg}j`Kd%)Cug@S;H7{e<H`#?ir
zRG0MYm;cmPU^t7ZwKa0N>Ilqaae*>Hg$~l`!oaMO8-MdJ8r6atwnkwysDk+&%nPeg
zHUV{sxlaE*<HCe4(EGi%wiXPYXNl7@<9>uKnEvYx)iaJ7Yy=Qc!>;kxxYNH3`>{S*
zNt^&xtzir#Wd(=J^E2dD!f^e$<m~`3+&_v3L%v=eE)hjWMk+-BSX~Pj*31OhE70ei
zI)dX*g7=XF{E+P*IXXJz@H0clpgdF!DD%ln7Bm@hB@jA;o)Un!tZQ^si8s^C9DYO&
z{0vLscPn^ctw2R!;%igOlc1Fr0*$yzFxXxTH;v!%%dWUs!0m-r!rG6tV1HDL@ob8^
zy1FyZ4Jw_InFSC8v<ZYdPp|Q?ticY)223It$qfK=P6jYP=@r(%Dr~dV#0E-m(b(A7
zVtj|40M`YhV;>H@>A`i;#9`VU;A}$nn$!+%Fe56G4$hD9yZjsR_;9EAgX>=;YN5Ee
zUY{IrrvPhv*myeXP~5YkV1Bz96!U>N=mM!Q7x*(zDqRZ;Bw(TH0nXy50PgG%RJk~?
za^nhNe~1G268CZfB*cUKY*Ww(KqAC7K7f#tDGn@6>qkfIqP72@p@axe?;`Afjm^%^
zuHhnEEUFe)mp+Y}UfrF{6JnXXID!uU;MxqDNz%lEI!EW^gt@+3b0ap4a7Y}J01?I`
zzsWNtaUaw^KqG+H>V5f_U|w2d#e64gIQrQ<elm`3wzd^Q%G)@=PcjL5>~=w++--{9
zX0+m0=>QT`$y5u3vK#4gQT&2n<)99QchzH*tkX(zar5%x15$;6q6zSqOvxhmuVhqQ
z1mTDZ{JD)|iPS{kH~i|o=)rL5X!t|H1D8q*^Kw_}*1-b{nO0fAxm9}CcU+K8&j+)=
z-Xf;OqcWj^(L%6Y_)FCX59P%RJg7G4>;wESw{cFtTsoch4Wb2`4DK2*xtoFE4(1lV
zVUwlpMYbuI#;5Rieoo+K@9urBU<;Vq)f)vq3bDZU|5?7cL%TpRxrwD^1js6}?(+~v
z#v8&1tA!Psm64P@3Lu*|PS$%%4O;4x4w!Bn0bMsU$PzPV8A&WpRy58t^Lun`Ou6_D
z5NO5T?*iRmPn8h%RQdi}Sb)4-rp0Yr%e=Q;k>TT8g!cA!m(vYtP-ba85ho19$RcnM
z!n`wbh(l&^)lf-^ZYLQrF|61i*VkjjfmP<!`JRHgbNWje0Egs*u+-Xy20RQTOG}_U
zhp>(-!dA??V6b8qF^W^|!dBGa;AcgvEY2TMEqFs<>Oi18sI9FX+AZ@DWuWE(_cemf
zrdk<}0L(5pfEWQKp3Lh<k3ovyQkSO+X71opQ&xaLN_5>ESO+v`K6@u?9QdlKrOssn
zOjowaL2r8lAJB%~KVtzT@G%`hPDx!yhbZ*FgM%$yZbb#lRLI5U<uw1t8Y_4=da&q`
zub)q$$*uvRgG99Ohl8}9n{2`;g12$#0hhQ{e~U8v-H$K7X*s@GyWm1UOm6Is`5+sB
zPR4_ytUpw}<lgRnW+e9RqlJsQ6$HBV2wK@r!EVXh*LTE3z!ho_(c<9_Dw~VG$It4@
zZ<OJRBVEMfDTxCajABs34%E<U2g%tH+wqhPr$Y#67BQ(C3#YFfM=+4BP?3?(F7Ryo
z+Z6fW&$Bh0#UeRA;2T1eEsW7^hqWJ+eKnUARXW>96)0oy_@`xx2M!2m@&?Rd>pT-Y
zNQ?k8k_=YP7IBsVpezj_+QR_V;0d6UP_CQeUkGX;1Wf9(o<1TjxVO~8!UidIF>!HP
zcC?WH7y^ppo(<9g#AVd*N%4S#Hy<z}W?sbpfuu5}mh%V#d2Hn6VYqt;$BFSL)@yPK
zL;*%2a<O_W7+N*wu%N-G>dTRIb-Q<YXFO;Ll*?DKKwExoE&;xQkFyV}11$N(dpo=s
zw^{n@`}4XEs{!bn3><ywy)2W3rph!jD;)<>cJD??(q|jru;()Myllctj*BOv%UM~7
z&9r-Sa?a>-{_nZRt|(?x!=Pzoe>88+WeHqjPUPDDe45AM`n-=`+~`EX`Y?DHFk!UX
zU-$=?!0Qv50<cM-jz=hMvjZ)&AkJWrH(~2XI#`UEVu=^(%w;E{lmVt^4-aVWK43Ie
zuQ3wQ<9PY)rs$Q7(^4ZTN45x@v~-f3jrlP<@iJOF1SqdJ?+<m<I1IFeKVL5%i*;_k
zJ)!vZ%TK&Q+wk<Zoy3Z%L=PvmVh-EPLQM`GbluS!z36nuGyJ-b>UyrdmI~~c)8!F~
zRH7!o3rRK>Ju5!Z2@0YWC>M9xo!M|bb&D*WtgRRV+2V5+GFgkUF9ad;?567mio$^|
zSXGOjeQ`dROuD6<8~sBmb2T6@1DtC^68~sO$p%PVtwa)w4J#ao@$(}o66tMrQHpJG
zs6CU}WX+u~pgQ{9j(Jt|p;Yrb*M}R&u55Fi?GGG9jV@NP(5=Cv<u++%un9S$)<=pR
zJtL&^I(U;{NtxlYy=Ztb;rv1;s%$8SBN6*<K;?aKm;P1We9KD*s|4vHG)r+PwA1Lk
z@2f?P<Z7P9w#w_qX@bQnvX?k?z#E7N`QZP!!Pf}D;Qges+-MnG@;^&8;cefjV1#3x
zOou6VD+f@WH69W32#tOv4g1~V1{oUKooE1JN4E7jn`NIAZ1j##dZ=Qf#q8ZN(>iJ;
z+Lo+egy1g!Y7xxe9txvX`209s-(<Yt*$wVLAN|N<jcL&CMn<Up6Q%PBKWkASVp_r-
zUz;O1wX?0y|DvrsDiP{pz^OOtes@HNPGuk8+xBVm$LBP$>Tg}$$S{cO&S<MKl8)}>
zRaQ8K8QAPFqks?&Vz4U=tEi~ZIEWJHM&M3<<~fxu8XyQNH#5?IJi4-Jmf$6wMo_4$
zz_TY?Wb`xx`2}WXP=4l#w@woEM3J7)F2Az=RwCG>4pHZkdW_g<5YR1W9j-OHG-031
zq$|nG6{x7h-Cw?!6=G?$n@24sY=|h;`DXU^`j(;_EFIw>6muOJhveqbkhtC8(ADPn
zLuSh<xe<G8Ql-z%wJG2+U+BwnxZW%7jEie&(eJRjyalYeD~xt(tHzoCHO4=<2n2Az
zxxiaf6w*znJke4Cr`@~=60uMme)-V8jZ?CHXkbi?E*;lv`dO;mB3PUrFSYtshLbCY
zd5(c*%54rF)D6Tl7x(u2(gy-Ci|`9UMVC$Hn_J?9l;2gau(*<_K{UntnRpKummxKV
zGkiM0Lk0sh_gB3Y4L}>P+*ugWDM}MvWdhXxhaBqT?5(c-UwY`<J}V8#a9Kr+|7%Yp
zc>AL1_)P*4ha?Vht^9AXQz-P}v2?PTgCT(|`msZ(#|rul`=1KcS>)$&Ox>Rz12R-X
z?N8Vt-33;glVi((rBX&oEr`67D&P+@wdF?u>>~{b*ILL5kcf+me~5hX**Wiz_zQ=#
zI>}WdiiyHyHGI}IEX~o#josl`-Q8x=<D6t?XQ?k2{|^}!{YI$K9)g=H*fY~i<?H2~
z*#EOLIy$bWER2P7@F!kkPP^22_2I;i30(D>acZxlOfxLm1mmvZ=SIxcS6mx-BlEiu
z)PaY|Tq952p9T;C({=Dk-))Oz1p8@lm`Dt6YT^f9?!1zcK_!^Pf({P%6r5Txysny=
zFqnyF*|{lxDWFx?VkyW`^N7kN5#QW9G1+a6mxUwvD4u~%>`m*G3U%5svn^1OBQ-Vz
zwmZXqFSzxMN6ZRqzOnp7>XeH%qeo$mfyUGnp$uSDh}1o4QQu=7gcj{_!dxE_?u-#Y
zt6Xk3JJ46=KG~_M^RYDDn-cfg6TM86!?Zd|gauMoM*h>9dNkxV{N0htYoAN5$Gc-O
z;XvXz6*jx*nG?Ua-=3N~Pd`#J85HV<UhjRIl#NbDR#}z!s_`cLM1C^KLQ^S<#`rOG
z;&4ts8Y&APs;1JAG<uXAl>VA0Fp~Zcm1Vt}-YYRNu|~U8*Y9-0nsNUBHuy$t_j)ad
z@zHr^WUuc~0GUgWnB6W#6o!gQOJ2n0cjGV!Z;wYKWA|x3SY|l?`rm_))9-eWwN$@8
z#4dpIhJ-`r*6DZDW(hmpT4`bziN`T&xxfL2!q+1a8;IO_wuobj_n7%Mzs<YpzQ<l`
zSH|5sY*OY>*99}hQ(s`p-t(!lBXGIA5d7VGhmE0+HL$7Qrrznme1Cs~_wtozXvQY5
zLFWf#>+w}=TDo*VH0B1#N(F|7{Sf@vC4bEJf3s4dcM4)OGQO|J#j|nQ>VlTIcR$#$
z_stG7M3(BeDM0oo+hK&{=5Lw0?2389wD+ta)ZTdILiiKdPBDBWhbs?}G7K)r&+jwt
zg*hkW$U;D@P>ftUh_)zp%tfyOJHAL4A3KWyWO;BpmPvjYashz?kq%%kd4R%!Rq<*|
z@LLMd<pzCl(a#81{g3`I{_YzxcRBJR<ma*voZFw_*o6;@c(izXKDazg0pGOto}3ro
z0>aWKkbsV8v`$=UbUqx!??=*2R;;S6uMWW(ijTPfT8eP*_xHsWJb{ycWA;Gn-WXUy
z2qMl-jFR$v&USk9c)m^6J1wm4986VVA;ps?sz(~S9(Mb+tjGqv7Y1*>u(1>5&S-<u
zLLTd%7Q|FO5NIPR?iSO#bfp?iMPM_EGiT)J{U4I)$uZ}9v8^V(`M1Disn!cKvIYdM
zr2H51wQ;Jh3{W1gQ^IC{J2rrGg{A(mE>Km?qCeLJK5gD)b@wmJ85I5VF`x=!q>Le-
zF)^z({H;ubl!xUUtKNjyZsV%Ir`MMRkQo$PszP+fEN>+6zhqT>i%%d=)6oTy8GTU!
z7L|}rp+_=`UXc+;yPq$*tg3;Ms|c>>3&PQiT1wOk<*!jd*k^i7oE;5&b0=c(09EJ%
zTh}^}=VS#tD+{9Vf)f}>fskyl8k^#J&o2p(9t@pqz65bA|Bn`2Nyq$pxN<eb@}jA1
z`r1;m+U4|Pr42#b#c^izTzR~IF|*owXI(|x=MH5GimQ^U7Shs;-ORR@YSmZ`S~U##
zopd?yIm)2aGME6yrqSR69#}s-$n+qV>2g9d`vJ^#CAQ0NH)|iQ2v-tRp_lIc(CN!I
z(X2-n_hj5?*%x&Mjx^H!3h&fQB;dTSkE9y37tMzDKmHj?ddbqW(hdeDhjS>%UJb49
z0a@P{HO@p_M%iXtZ6}Ge%B^uSu9<DvOjF5w_62z&xmC__zfN9&9BUQ{qX^TbBXdrQ
z>Emx-pp8*w4WHM~zP7z??B#nKS11@i?~K&zd}vmuTK-nAO)tnFRVWH`d9W8KKt=~J
zv1`=vGV3iBq8AhJ-^yPy@4d&RlTV2wq6?}bS;(EG_L#Ph2kc0JCKg_MpbPQM*$$!m
z3Tj}uo23GzHATl6!Sv5S^Tn;A&T(|3oA1%bpl2!vi7Xk|cZX!93+P2TOYC~7)H0M8
zVo`bKm8MRDD1SJX`~F@2d+mSV57}?=aqj<0){VMfwdy7wT@139C0E#mQNdnQY3&IW
zol2CPzL?4Vflkz!ftm$gOEv0Cu>b7^>Kk_j#w;-9^s-+6@7YLv5++rDV>3bBXg`lh
zC#z6HXe^T%TMvPf&3SkEmdD8X75jcn!ALQ9p5BKZL_jxR^MQzYzG&xn!vE0%*f&x3
z0KRLYL6VLblj=^Et3K1pGH$mf_EIRZKzljz#ONsaQq(D5-^>4tH&7MD%zGK}A_Lc0
zKjhL+90%IK8khHphX`o6!@@^2NG-X>S16n%j7_D)4C8VfA|UU|LBPXj0SOZmY5**u
zK|I(si$}%2J8m({BvH?6d+}E1EJdSj^8pqi-a*cVMWa)Ma4dt`PELbO9^zndXv)?n
zCuEQ3VKXl!#dNe1ggaB&Z#4(hGP442<KiCgrAL*Sf3juF62v={!l9$asr(QySuTF~
z)fC8;pWm5lmE76v<=AFJj<>4pcjh6BlSk}t*@lgoY;Q7c9{lE&-KPPM^Y#3HMc|O6
zUIG0p`1dM3TA!$C?ff&x#2n8+$RRteZ-e>OX}*d@S(0=_uG}RR*=!BmT~ViQrx}Y8
z5>@b+*)do%{%R7km&6aLPD<#$#Nq3l+sT<*`Z^3CL9L!HsP=2O1Nd0z)4j?%>VId7
z@7NO)6VLe8N_FdK8~*1|0lLHK(ejPkKCs2pS^B++h1PFZ{B39;F8k{xK5+arI8Jqa
zvuRzN8hb;;<<<`&fGKqS0|Iy`!x5}f%8B>tJmA36iR+1rr|)LFIBa;g;~6dINNFxe
zu%q2%1__=X<ZM(Oq+f2t8-Lgrrs2rR`yObow&)d;RHWW&;G<P#w4Z49|01Z&>~JOJ
zl^ho9myPEWL6BQ9-5vGXs4Lf}KBdp8`r#<@hToYfGW==wCyJ0i`8xH*R}h(6l#bgj
z2KjIRS?-JR9I-)=ob+^K$fydK=aP$^DxrHAdxS<f^n%I@xZO3#ShSD3c2Qlg1f^dj
zVaxN8%E!^0vagg1HJKV4jy7-;Uh0-vSxlrlmTHt$VsG%@^h>ksjHKfEHNDPr4I|CZ
zi*>3&m9QwBA05EJp8S|n{IEHw%G#7pP0L@Fy=^i5cEWZ^HyWC=nu*6eeQIT47B>B-
zI_9#;K`ivKcT;dSd0~u%LrUSc_vwH6Fz;+ywlY(!F>}#g)P(B&{`1DC_zDN<D|=ka
z98tfQ|C9)GrYKg2BD0s;4_zSpIMa@88~N#N`(L}O0~qz<?*Dk9sRDo&d`_j-Kos`|
z$DM%liUm82+X#EcR|TLFG|<a3&Gr6+B))W9+!J+L8p7-^QhqBli4v^^b%mu-tmD-P
zr;7LTNbkz?5zk4^Cp+B*3|d?W87}fpwdEEWkg!QkaWKm92a47>0fNjlw#nlM&f%_o
zLKwCoyW{Gp*Rh1`2~L6?oP8!K*mH~joP#eFz49H(8a*9~QAOrCdVv$4%gJSmw}(Z5
z!(^kKOFp4px|e^qLICB`o`2*(pQd+i$;X?8eHkUV%F-Z!OK<6WG!%<cSR6Fi0Bk1{
zrO<)l9oS2}2?Ejf;H3|)yL$oS;kJjWY>%AoE(<=3y24DlQdPwF7rjfh0<Z(Don6^@
zVXh1%4M#R)F=d-YOTK>R%6awVV)(iG^W;8t>AKNtk|a_>0H8*KXt>hncN`4PfcFjp
z@>oEGtGAd<z0aRv%V?GS3<$7g{X%?aTn^??s75Cq8HmF0O?cyGp?Y;6gDfK*G_c7?
zGr{yu%L7@}AtfoB&z=yU^&`jdxvBFi-Gy?qO=q(1u2Q^Y(EH=z2J9^@P05&z2u+^U
z(Q2I4<PN&J|6w&c>1zLDHBy3uv$80FPvV8_;ONb^G3v)t!ZdMQc+lM<4!j$jR!SPK
z;wx#ecc}_3sLp?~91b0yRCjT&?>(ivlS0!6V8&KFw`qW#*+h{i+oVnIM_(K%X=$@P
zT6>4pb|e8x*|iUAvmPY_!2J8xSuHoW)#6`f5?%V~TMZmLnIvLcC*J2{WQ{VT--t6?
zUGOnk4%Vz1NZ+U0qjI@ronxj<Pbi(I`&JqQ?B~1r{l{VX0VB-zV0nJ?TKfpG$2*P}
zo&FDTd`sGEzf(1Tt^3eV)4rH)&-;$92C^-hG(h*f!>?L!_?`V>gYTB3O42{nd-uTv
z!~+jOMUa1MKdnqi9!<O(4f*f&6lw{q0%R9PV2y1v8_^+ho#pU%g}qb;*tI+rme3&B
zi}<3djTJC!f|5HOfeuYzo5-C)u$!xl0d5L~qvvH>{X>o!+ME3ij3@z@8YuCthJH`l
z?Kv9bt#<Rh+2->uEGG&{`&C4(J?;y%4riAV4i4z8B<OvGd;CM`JVZy!9T6ZjKW64@
zlb|7|>tBPE=}P+6)So$T<Y#uuwF~%x&@^1Ts&%9D(#<f=kxXaP-GlcQizL1duOzlK
zc`Li*LL8TFd^Hg9vPZh#`!*ODFg}N^ZWv8effZb;u<=^{9QgQh1%S1Vns7Yh)fa5m
z_pN9P_0~#_Z)G~wc{al=0Kk#)@0#}3o%cu#wdc?;#O8es;;4+0WVV6N$?ie`tDb3W
zl<IMT-h(#hUopxe#S|PUlt+1|;N9j2c<1Y=Z@Z!j$e299u4lDL4_v`N7^NCFGraO>
zLtW2?_HyMET6N@<e*1X8K-*%8rp&tS$#oB+C#0hi?LhXcxgnnPVy(abEFBGH{ANI4
zoIJVT%X({enZ$+?=s^T>Fr;*^$t=c_2zCl8Yd;Js90+bifgtM1ymv%#lqP6j$?cer
zV*l06SaVe`cg87fmzx~q#*|j-DOY|CEW!Fmu^Pi+{5{t%YK3^}hg`e0hVSE1n7;1O
zezY}>>O`}Odm3hgRER&Kxb1@deY?xnC|nAY2CnpM?7HR!V?=ZuJ!WxnaXvJ@sK`>L
z^D8~qXKn~o7VAjH`&wTOlpS^qF&M+ApYqUu6`Gl!mj%_BeSU%+17;S!!>7$NARd96
zFXfsPkQMk4abUWbnVrR<pol-fy|1lM<6O{7r9U}Z76OPhAc`d1?mm|T-NCa=!k;oQ
z)%1u3TA=?Ed*9GLmKczpgG#=&ZM#HCzi+Wf&tb5J!PCL%bJp6X@Q75la;+M~^SZFf
ziYGN1+9pRexI@9+m?u9DW7@xNV_qjx&dXLq#<|oo@!#+-TZ9b>QBO}!d;K^mr=B0#
ze^}c-XH2s-jpNhD3d1!?^2?rDlZ(sb8i%_%BYIZ!+wshhMlk)S@kR*f-T>l6{W+hK
z;c?r!e-d%+-U9eXKVP_*e52w&7K%?QdhDp}WOe#EdQF|aU{=_RrmyC)QV5-ve*d-O
zGls7hN%Ro~`h;I)b#&m2;}Qm$SIyhJ`@d;|9}=+Xgqo%#FBSO0U&}(F&OMTKR>Rtp
zv;3mmNk?Vf$-a3t*))sacH?FPjjr)2Vz$ryYnOt^e$NSZ`))``1ww-3V+opAR~h>x
zabLClz33^mjU=9M1eh#k{PoaKul+cf1Xwu75!l{mp<*9=Z_Jl}zSFInB#7VVk21Yl
z_rAG(V-P^WX|;x+#j20${&`INbJH?sUl-FtfHGHhJQoiVjq{N|@vnf_Ol+Au!nL=J
z*!U%E+`Xa9KfNgkL;JJ&U9u0ES9pd+jN5JGJp}Bqo-f1M%xfX<dsPwI9#)@guY;^1
zv-_b=bDTRi?dX~+GJBRd;ug^7%xc(*|M>V=?;ShrsbYyww~dxU^b{{{b&oF31`{a9
z@*cv%MuGFTjN;RlAR*m!L_Bg4%r{ns(Ek}M>bb8GK+Q8Ma5a+)d#kx-TB)W7hoit6
z_GU-{2lO$#9pWzif1@1O(o>t$jd;&1%irls@iiUK5YQVjbgtyOYXVqJzFnos^Fg7R
zwXWMA8H*TWhG=gJeBuXUtrP2fsssc*`NV4y;$82jp4+4_b4VrceC0Li7<z{<B|tVy
z)fp%|QEJPgM%v`NPTTB%>QFzf`9}+vF5|01)PbE{biysbHJx%lfE~EOH!=|7FON+(
z{r8W}G_yn;Ij0Bu2j`_=!^h9+P3;~T5KC}M_lbtmI2-kJk0}4vr~d?{eqDRVsk@lI
zHq?4PRQ5?zisDGL9>W}+5u_|xaADxgUOn6i2z&ctf%M?0X;!Qhc6ENhgn77eRIhX*
zU@bLAGO8Mj4&=s&tp5qbZXh3xn0Qm^Wl)BUE5)a%Bi{9u$NOvp=jiu$)We-DPS-xI
zQ{Q&t^lK5#Is*dYORA_(7)w1~Z36fIoV$J!Jkq+kU3f_1K;<SgE&LLl2Ft6m)3~j)
z>+kHAl#pdKk<BWW0#lgYE3{j;CfadKO$OcH$1Eg#(iI$h;aM)wl}v=C&iP#sKCJrX
z-TkC{lsHbw(r+xtt~@Re#+Yw3zWcYYKbg|LV=F~|dGWpSU~_7cAkT{ah6E2U3`km{
zH3aquIO(s#HiIzhh?!@T)hWMoZ(7T}w^7%!09{Cc5&rne6m`CyIGx==m?;&|PD(GC
zfJB26uAe4%lvxJij&@K+i<buayJu!*IIVw@4?9YZn9;`sVmjF)Hh6>GKWCCI6eLlk
zyfS1DVT7S#H9BS3pPH+2FwBQG$ks;n50F3<1i7Fe<FFq2uT94Aeq+a@{Ow(#Aru~l
z_?`r|PFlzD+$YXSQ$AVDuNFB$H}`wawu{Hihc%v#K<ZzR>${EsvS|WgBG@bUySx{r
zdL<!SM-|>t+?!#A!hLdI$=~4haVgC5H<8j#Wqv!*kHS#&diX&3AG|>)jq+)hDbY2I
z0c<oXnwkrueYw&wzhb-l$KRlVoZ=IsMmW4mS<^*b`$qdYn&EqVW;vWhi<w-j^_ilL
zeQz$ef*+J>#~{G1K2K^g3Dq2!&(7{?tTNcJ$DxT0N{*BD>iVZo*GR7k3#`q~SH6Bf
z-1qLnp<#Wr>&weXfFo=j?+(H9`zWMC>0vu>C}p5Q(Ycj<rTZt&5n14Yf1XrUEbc2Q
zWN))_vdQ*$C-cUI_6bG=4&Cq{peHe1>k8RjeF6dPNdf1@J$2ruF9|-My;P!JMlfLL
z4^T}CjfjW<B26?D6qIMFtMV16ehgK8*SC$hx!QWayBMlwu6<z?xMD7dv(BG01SyLz
z_vwUS=`Xne*h~}g;|Een`ai|_G0?X(T(lZzI(P5l$bVOe2zv1a1IgaT6o$R9_}4C`
zZNKOc%%je0T08YlAQ6+iYm#g*dj~r$y9*dI%%J*tAG0f@vd41d6hxfJsVC4werAZm
zB^QrL{%E2|3g`^nBm|=5Ey?kO_=!42RbIO}L4cHlI^A1zLMU_z%Q!qS3Xf6*C3H39
zJjqceztU_AXg8#8`ADR(eH}d_F8ic8Glb9>`3-UYoc;?SR>{61DjWO`f%5(g$l?j5
zTEX$81M8J)=G9;rV|Oi=G3`z<X^Q07-P*6n*fb0CIDTc%iIN}Ur;EccWYyc{<TGCf
zNlB?C{1r1YPz2*S2}qAOzCdGE1;F3LtBem{o3C&eb0wKA77o}8ms?kHGPYDmjk>w7
z`*j&~kcF%}c1Sk(z2=?OLLRV5{#db~r^V0HYHW<DUn!lS<fSi2f{u=$L>zQjTj?!8
zQbwOV#U50h)uRXAl>BL_zVdzZef3=U>LDPoBw@T|u>7HvUN3zt4@DV1I|X8t=kJrk
zVH~os-mr)$v&lA56p$!v9Q2Qyq=bVas;1Yj2~#?8#m@zqjo^Jl2l54R(&0D1k9ZoZ
z#nJe2=xAs?Ky$HR&Fo6ru37OqtN7&h>@Hv^b`V)WKmY`s!I23(UL%gwu&y1a8#DLS
z5JkdYWUntbzL1pfMA8XnQOidI^-5GCe*dK0+}vUoy9NHBMVG^;r>B2RNs*F~LAv{1
zi{Tmpwb#C_=iPbvmW*1{n9$ceiW9q3WC7ohV83T>1+idouV=QKkcyj|bE%tR`TelT
zoWH;>sout~yw}A0aedX2pIz@=$T6vYJwM*wSN~d$?=isC5Gk0_nKi!;#)Ji@+hzh?
zsZjyaN=Lwt{8#f)2xfi<By*_0<@^xXfBS@mF5Vo|<{TjLlaTD~F4f^M`6f>_MYu+@
z#QpZN5Sa6JG{tGfr_lYLz#5ipr+M3}HApIX7cV8AM#L=^*ky1YfesQ$8l^seSk?=W
zwbN*D^5ayDp)ANx#h~Ni5$l@j#-?<Cn5?#xog3PDENDaLbXsh|^h-SG*+@4Uy8Z}f
zNQM!9Cu9C6<ZxlR@nOz8l$MZLFgYLjyR*qT4{?jn6;dDNLVxZnzR~m}i_p$xB(uhm
zX5k0!`K)dufehZP*->G?8~OtSR-By<0_&R09xyER0)C97mUr2O(8TT*UL3X?5d|v;
z4bIw>O(3mL=KX474E20iA;tT7{~`0}=NEOHOoyfXFuCp_0Ahu8{!*5g#~Jv>{4Iv1
zi-0K?9sm)NCMLORfx`ykI@gD0<<Fv^X1=w**{a2DHK<>|P9rb`26IVUw~V_H0w!KW
zprS#xwzlpY93)!&64COpwr6Nt(NNs5Oyqu^(+kmd?gj*s1c`YLWCNZ8x7yh1eCfk(
z9Kn9RUIVEesid+ELQUIEq<CHn?FU)M9^T~2QXW#C9rn<eS%-H2Q*`r4kKXAmSysDx
z>53*4wAeln#&+hPb)<7R%|Fk@%<GJ3uBfkOvDu<IXi{1=U}Ew1u#!bn?1c<NdvJ=D
z=bVN0jfT#Fm?uk{yO*gbRZ!cf=AI#U9o5bCWO@eGa|Vb@#$oLHS$lKY-~4J@lo)o}
zlGOE32RtOYGMZQu>;tkXYhv`qQQZz1NSwiUUR<}!t@UOP%nC{Qy|J0$FLT;jHemu~
zHC)pR<ll~#P3D;-l1vziZ1IR0nXZo>z-d-S(Gho%<wGBD$?xSx_v}B5jup`BYf8nj
z;<s6Kj)duT2}|&I%T{-Jty=N^5BcvCF-7(GUfE*1WbrOOtI;&B^G)I~5;1S$Pjwy$
z{`-d`=iI;JJpuD|&8gYm8n2Bie7b^T>&9%x=d>M*(R_AWwa;!-(%2%m-^O=qc8rzB
zg8l7DN<TPXROko!b_6{=roC}zD5c||GJvZNwqe00C56=1astbZcq7I7Tx=CQxeVlR
z(rvIAzDO3%(9jUbOOa({WQqoDkC=6Gu?cd0p)(OHlUx;0NG*nG1T-QKPdZmU?8_O!
zt6HaNEqe`4rgF|h$5(dq4>ggLh6SblQCPU@-;4r~?hrON2bF}CS_h3P-pTHKt|97s
z6sv2X-v7MSv4KWc7S{Nvi#M0o>QwcVjXd>5BW1OuB+u&deGscikvCqugPP7!6uv*a
z|C9!wTBpH{n334`7zDnuH&|7MC05G@$LaU?w;$8Hchuao%Tp^XIh57oE_`Q4-l<F8
zim{#fWicdWBXC<<ZmH$9OZ|I)LFsdUK=Zs4K_J#0pD@m#-U1cKydWShg`nidpQHMj
zPHr?laNHvotL7vC=?lRmroUcwR}M>;=~j;YptT!fGrUB8aAqbsCZ#Y6$ljx=i_YjK
zz-B{i^*Y7`!ZkImI8IF0NN7)~mu-W5rYXJW@Q&m?0TU~6dP+)o0)^1V<^KEz2kF&E
z7Bw{dXb8m2m=~0(cH(>gFvRCWd>x1X6>sw&>@qF*xy~oD@uU$z9^hix3~vx3rnUys
zE^KB>ai*rG9!)-+Dy?(YdwZ}~wMEl`_~I!1uO&0Zinbzi8rxo`-Ez2&U^`IT*l3Yc
zb-jk>f+%GSM?gS8NMZ{R=G&hxSbYj`m~{PrU$^iWgiMu)i;F+oCmhs-D6B5HC%%w{
z`9GvUNC`K0y$d00=)2c(tnlhLNegJ;T3dtqt@unz#4Y|eZsel=Y4hvshKbl$+HnNA
zU!dS*D<>z1ZO+kRpI-`Ak$i8v-&WwkQtQJ3H60AI*Ahs=f<5UqG^K1|62n%Hko0uD
zZbqVMbWFNf`CW}xj3{W)#Tu~d_Jl)I@`2OOaqe9kupF2b;(A4}sQD7)%KhmML+<_k
zyZr*vB|;<!dv2|C>qxHPxgo0O8g=--_Bo^9+TMP_9l!d6U=8iwI0Q78HZT#JR=3#g
z(PbKT-bm7mqFpO<Ec%wUsnXN#Sma-$42a+eB1T@?T+A;wBC1Rhb&QORaB^|s2#U45
z1rtZSo8a|_17ffR0u`(ep{hGP&G6EN;1;FnS&cuz)=^(XcH_=Czzm)>hUI_$a!g%}
zMlKeZDJ=!7T`v{6XPB9D-3*t8gKYR-9W7I(pBrPHi+y?gA^-gj{WvkU*M*PIA80&3
z+n<p&!>_Wa>5g;pb$||{0U*b09)iu?G^X6LvKY{2)3vzxUP*YvDY_LlcW+VM?polB
zbm5FR>hY;Wy*kwJ(*&F;fsh@^+WL=#ULr>i0h2u9Ba+Og!sRzt33SA7{9kkP@I>^}
zJIOM?3ntBQT<y&AoZkrpw}Bmi2s(5_P(dOk7gTmH_R$s+g$yn-_{NO`ED#!Sw-Mj~
zs0NgYsR~am(*_~m-{k@|F;Lq{0lCK02WHV67PSqu=ofKXn^5S>M^@M8!JtLELC&0t
zii#Z>Y#OK;(9}FEz6U;-*xE8PP`V08>4C8*eRI)#Xb_@N4VzzzG<H*k^2|D+ZQ}$?
z&G7TphUPfB_he_GU>2g3fO|&!)8bMgr5WOPb@WzV9+ktmQwp3ZrKV$^^p*MauTH*H
z(FR2JIJMi+%sH?r7z0JrNa*XMm5#e<$7{c0Ce@G{WwZ&u$X>ZeRu?dAXv@SUB;aEq
zTM=o}XV=Y>61iOfm_7v#LvWJTLaAJ5a6x=Df*D`dL8N%lcQsV-Wn2{Iu1CNMcFt0S
zgXHI9w&$-5MRtwsU#(75IZ6ih7=%dZtj(m-&s1s@PmszHw1%v*fpSo}e|`hMe!X6;
z+7&q;AG9ca^^VET{ra{@EoAu*&uOAm04AN{`hxrC7I?EfaTga(u+&5YTo4i=_8VN(
zm1UyE-P+sR8<w=t-@&(<$f8D%=0dDTUw<a8SO?F=#l>oP2h`-WRq#<z+5mqE=l0TW
zx!WoG#YWp^P~95^m3Z=qDG32@^iPXh4S1t6aL=DV$5!Iv<749!b(d{{k0|N_5HqJ)
zA4+z<p>F7zXSf6$Gc$8xaWPs1TacZUg99s*-Ag*UP1Vn9=gsgD<>CON5{F)-#M73C
z^~$M>yqT=kpE02?6LeV<pZH$HppuzZG9=8c!J93j{x#{p|KTJ620|CUnwAz=W)Oe~
zY>;3btWs#D&!k%mOG<jDryGKKZVnCL*53v9%B_o#Ii>Hus&(5|I9UAp0tk9&_YuJD
z`FYTqHZ%1Mfp^kykOpFO+=-cSRnxsmhD{5-vly=;S=7q$<y2H;GWZ=&0L!AWE#UPD
zOf0lUhXq`au>vbSLbI3e#MH^{BUt0C?@J6O1G84GS3DF1-!nrBUYmkk2;(#<OTZh~
zYEg+=P+yMO&s5FlcDdh#Cuxe~o6?s_lUS*!s1SoFP^^v9p&@{EDfIp%m-!T_xg+X^
z*ryc&Of)ngQ5L9Ru{E(;^bJDtHK|2KDS^^-FyaLf#0jsHTPGI*|Kq1mG71U`s0Rk#
z`Wj!FT3ZEU4Zw_~W<>+OtWZ+qDQgaO@_tkx3E-Bk66CJUG<{mqcq!(CGA`|2XRiM`
zW4hVa-9~95sxE@!&hOwzuF+<e5QB{GVeiX#KjXkyr8!cFdDMoRq0>?xkJYGQTy_BR
zW0P3Xp^SP2R4XXwQTZzn{8J@V@^%fy#VKi(FR^?+HcWZnEf>UlS5qr<OoR0L!`T$p
z4-owkmLogo*WQQ$#_Cdxdk`3_g~1?qsa&Tf0hGW)pgO+^s>M&4#Fz01@bOKobp*wp
z5hRZIe@;>h?j1@}%R1I0#rFoK+N8WT!N7<SO1m%Zh$0ks@3o^<*rDA2J@zx0kGRPH
z4#TS=D77PwC05~H5$9DRH0-(O2}+!oOg$Y1+_2@Bydj1-3U&?kd|FO|K4!n2TAs{s
zeRE1d|B?l=I7t-Sk&i|vPwwO613Z?9;8QbP^v*UIy0=HArdKSGPuD(K<xU1DV-oc?
z%x?ckGN;Vt&`)Dz1S98?ob}EeMO4qMzm}(}H$-aX9njdtx)3wlF%BGVgK=6<usdCX
zMNUDHS6Mmw?!S?nD{f`Q0OC(WfCr;4NEb5Fj8pLPRk53pv=*H7Y&31dJ=rssoNHSB
z9F9=}YQ+2ED-I1Ba&mHUOSjO_P>4rPzHWQ7sl~{?4v58Nb~5Nd*ru^dJKlJ~T=o}q
z?7rF==a%fbWZ4z7Aub+s3->oiys*)vT1*}@;o4kvxSEeblBn}UCKs(m{^3t3S)9#k
z@VVLw2lBSFI(o4l4hXxg_J56eh2@lJR^J`1DvR4GpoOLJ&LJXGi#&+LHWi|b)V>RB
z_Pr5Cswg+_Y~U!@szM5dX0=^~Y>(b7e8?0GL`fb%m%3kQE9GEG1h8$_>?GmU@o$M7
zI7!a=;TKc0_OyJL827@NwJhB5v-UGRqd{5e$K4?--cO<!Fvnj+1LLHQ57Pk=hw0sN
zN5FH;2G%qRW&HOh*~tPat^X|iCWIphtLki*U(Hk+lD#mvpUl(z=6^*K_D#C-t=xo0
z;dj-r)?)tAl5xoew{6G<bmVI>Q?DGv7kudWL10hT4@NMOokZ=i+xgM<NT^J>^`4(Q
zl&s|hJ$8Q@dPw_&ADlA7Yh#NZ*_O=L8Tc?_0)i<kCM*2>cEmau*p{f+F$p;ZD5C)T
zX}Z(?Qm#1*AvI)qeN&JQ99z9Sy#J3DAhLQDE+-g6PEj%H=e23=Hy#VWOX5;2O-W_%
z+iFRRW=4h#L9<ag%U`-SPbaK_H)nkF5Bl?MlJho!)i+?f7m^;&^3$-n`x*0s_&=lO
zl;HmC3KBU(BAhVA!3Nq2X;U!J&`SCox4=L<yUu$+OiD_sG`A~KNNtvYZA9Skb7c^~
zhtF~~G<K>Phldi<(Ll=wc6s<s@B#^~1+PsCKN(#1@MqNw5}2S#3HxhqaVCj+sUHr3
zB`4Ov!@{+9=!EZWZIgSrL$8dBXKnw-^#YQ{{nav5By`FIuFcEZS6z5~_Osn)#{{_`
zjLnH|K*=PyMswciW3qG4&riAe>wP%HA}U0S$t4^84J8v~LI|<Kp9{Wtc<Peabq@!S
z;J;_uX?4Ejc5e51NUBl|qa|Pc9)!%Ygt$AWfTXD7WDz{m-%V&fpxm=nHcb+z<*<aq
z@JTNnZ#;*Ar%S%p<*7{H`(}g0x5+VB9*K}xP~thugUH8E{|L!wH|u=Ui4v$568GE*
z*M~wxPF%ARE3j6~>pC#x5)s)uZGJZ*9yluJ+1rGm`Z5sDR3U<(hUc0UZ(iem#{xJ6
z?U4n1*w@=lEl%%WOg8%&J@eBzmLn-Qd!meql;P`Ad`N;B{F;3Z_Rr&{xkeGaWB(3D
zfKm3!QRADF;qNvtj``0s`6zU%Ssf7Qd;aLf-H1NqVa_Il@MemTQZ02{$2R-!`Ch`Y
zFC*QHKk@!GpmSM;bB96e)PGDg=nElnemj1RVqVeT9B9R3r}a5Bt_NFJWj3_<R=k-5
zwRg$u*wuSnp|6i}kQ0NYso3m%AkAUt8C}O@nvgphkTXV>zk6j`JWH>eq1@%7Y(F$S
z*FR+X;3g6(nbIa%{yx><3h!Cftc}UP`?AO{yEC$6j{3~CU$2hDLW+L$xc<?ge_j|6
zMVi+lA^Ge5evg{7mb%DBL??R`G=iPk_#<o=i-}me4>CCUK<TC?`O>LKGrU<5EMy7R
z+7d_1B~f_4!KqQ0ptu#c&8e}K5Jz^O1>X-xXRB!U0h*F>A&H+_OC{$DrX~FE#(m=C
z2wHMf1a?E5pC$`Mch2f{W-o<(U8r#Ebxa4^`-evFgW1SJ>zwC5WWM(OIJQ6QjP3ua
z##%k<&2$a(myfiRODvxK4O_CcyfYF{-MxD8Bbir|**@KJ3f&A$f~!8v12%g!FSq%)
z#Vk10<Ty2IgMRY76pBoolGue5p<rHg=bc~aArOaXq#9MZ-k;GST(b`JyECrukU^~2
z-ml;9ZQ9IM(}mS-?f*Slc8~}0v&2pCGM_$hW^$4f9ksvRe)VqQYXaJA-2@#rpWU1l
z=h?<GzE-&bVieX<#Meph4>g<QKZLK+ow&Kkj;7x0_ec`6F8dw$LdCN4(ZQ!jQBhI*
z5wfxxN(13^JOB4OZaO3WK?q*&{l#U*m0Fv&=QaE4kR3m+R3VPn2`_NrLrzI0iQ`7!
z{GF)|+1tV6T9Tns{Nxz?c~wxjxiePe7~$#thbi&1!wz)axiUkFiu(q;UZk4%$P87c
z>a3N~H8Z(2_+5MJfVpDc!zC{&iKf6T1HXtW7l~M_vzDV0rlHL9t3HaTzr-x<0d8q<
z3Z%1tucSX73pY`A4=oXWlgx`TfQtQzXn_MGqKv^f7B(XI5kdN@%hi$L_1zuOQno)`
zb?|E@aq1wDZqw{@UOd#&Yg#x&kuFCvYFa2qK_tMBg$Q{eV`X7cOX?2xqqMVnZOx|i
zMa-IL{1~Bbo3j5R!ZO6>Do-BZ64b98A?$@r(xd>H`}Ljii!`>~9<f<dm@NB{+?bQU
z!2wQ-k0F0whMC>DBJp0m34>_hXdgV0*eCeIzi9*ya<(h@Ul&T{8!Cr}_$fe^!_d%7
z%6ytYFT!|IPVJCfNy{AT^4(n>&m(TRyu9g`VW}MsX-^gYy2zjS?rM@$p*35`@v(nY
zOn;vkDJ6PVd<L}LkA)vl70FrNiFQk}QO=BTJe?d1Tkjo&fyCV~eO0kd+p_}UEA_ou
zw5#Kl5lhmyD)4F2B2pAGMlEiLl9A}9mc$5>U|U!uOqM2OIu@CQ{#$vDWO%BIG2;!l
z%XL5l@!PSX6Krd>O;S<}OG~v*e{H+(ML_ct#{Y0~ZSaN!4ue7;1UgX9^DUlVhJ~Rs
zXjl}P#SR<@b`RZ8H6os<yF6V5VWF)InEd@Z{j~6Q-!_3XT7?2%Z{}r)f;t)4*DuDn
z`nA9tz!i6a82{Yzax?(xRHMMqT2SPSjy{nu{Q~M>&}(V|hxujoy$Luzv({Sphkj&M
zGvG}6{qNsDq=1%}3frO(GMOZm1Sh?TgulcZDcPx2&pr5%)&~l(DihYvOH^yU=J_v<
z#L}dRa1Zbbt)|<3_y@c%&)$5BlHLi0{yev?9qIyzuP%lxgjmaFK~R-g-gZ{YIw>;!
z5v<Dd&*na0$|?JV`C@DlZ=GMdh<Dt&oxE@29|xgju5G53Jh(bZQ`pUYh_aYR{jG<{
zzrN&%1@wRnuZbpe>)+q~$lNf<*2gk*(2LnK1u(c|tEnAQ#oAOqvUmDC*m<}8>h*eu
zpnv7iqnN^`PY6s)VHypjtf6O;GJ=W?qW(0{!(=>}l~y0N@qisA9;tcC2b0IA)(mIO
zm9_p@Yny46vZ2+gd`vp|T#zhhHdCs8plDAD*8OBk2FZL0L^-(>>&Zkyp5?ls75rgU
z;|&m`5{-Uk)|vGth$4|vENlcAL1yAcZ)$&Wp!KaZ<3+D#z5Ba1{b#({_ksQS=LfC$
z$(nDtU{hx{zf#!VKmDg>qEp!&iO!wB>xP1ux!L#`9b%A}|AFw#fJ$#h)G3pG6S`lH
z9N%t~$kM}GV+(NP+j4g9go7QU2(DE_ij_0W0IGmqe$ov?JhI_oX+o8itiZ1Mlk`{g
z;u@#Mj7p`+zp1EW&=gGQph2@TW@<qLxrtINvTl!(LX<~(c@2)*;D9kKC@n3mRy+c%
zS}&X&P)C`Zh)Fs;pVOL;=lb8A)pBL@{gqNl7o_+f_&#DbsPJMNi-bh?fFN9yVq4Fg
z6h3X{*Y?jUGS2kE1oce@uA$eyazr+J#HQ`lT+hAhF~}Nt_w9Aq#jP8;FXF36EJl5(
zilQ_XF29WVLBD(noeXOe_p4{-WmGYB&%eqsKbfBI#nIu&>V<et`t-;xhV5i`o}z<)
z7)&`W*QN5ob`<g$D1XLLiKQ1=Kt$Cw<wE|x(Qfd|fSTh7JKH`r_dizJxhjOcI+jOT
zV2;LO**vvjT1EJ|!ZImchiNtD)%z<()8)X0yfU6~?O=>3xA@IXw_Iqs&tZe})rUSQ
z=Yf$+A>F>xhtaZ+A1jA6mScURpU1@|Bt(L4&IF1duQ;f|>TYZD+Uy^NtoM+ac5K}f
zCte(d2#QE+Q^eUxS@gorAZZu6x`4GO^<X^Zy(V$XahH5)Tzyww8o_S<3@N2zFLtdP
z4<%zC2=zhacZ}^ns_JA#11trLc1qVG!He^7sG-o;pDIg)!im6i7U}TN+H&+nDWef}
z{N-%qM3)x>sr7HPh&S4M-v&K|otWv*Z{k@03J4ej>=FzI6nyWqE!4$t&WS`EMlR|w
zI1!#n+)!;V01x}b-1i;aC+0eRX;c{vwj3|py@mI~{H48+FHiQ?!8OL;>#(u}#vLs^
zL(v3xUQY<D8?SdxyqcdWU}VovgqT*(+pOZ02dvi(k*2b|W8Kvj>sal!M8r+bruJy*
zHLg)qN7B-LTv}=f>X^%62M>yS?=)ani7e~KwoJXU3HKygN882Vb_UT&%^!5Bnh}V}
zt0C{4?8rRdjyj<W&T{SQPa>XAbs{dh++;#wSZ~YAwf^mAcsU0<M+<Gt<%CKh#uz(Y
z(wsj>+V_xcUd0?58S199p~>HDGK;?=RC4DXkRZcqbe`S&yzd{>J54m)?E2>w(gkr`
z!)Mj*VXvQ5H>&$q;G;r)=;X6l%XmQiN~bdO&)3Ym>g6WVn8f4m6*t$A0OsBBjYueH
z0yo)qW0KIomjN4`P(K}Zs|O`I7eeyR7hm`1%$4m*^)N6(eVjUJ)NHDUG(I!4-Iz{w
z9L(6KuA8rI)u97VVAqcu<GHsPUw&#;z3T6x!YHr$<(&IUF)Lvuh_Wr8-*Q!!@8w{{
zrKRoIOpLyEC(e5&;9y<ES0-sNe^F7VtE@oEuBa_prkKb|yimaLJU8_1C1q+Gzd1Cm
zcV>_)nza3Qlwt7=!W}482u>c{(Az4>ecY^tn(O^fPBY0{G|&AH6gc>V5rW*8BtssV
z=KVYEs(#4UIjIwwoFpK<YMe-B=iB(w48AUD+*q}b{OxVkO86}XDd7#>D@@KLDZAxX
zzE2#+2>^wRrUzD$dp^Od>F$ETaT02W`C^iMI)7@mcZf(kFWxTK*iKj%DBBz8rI;4A
zcDQ*?KR%kKbIl{KJnD&O{FRSH=7@Cr&Mqe(fQ&&QME*Kuwl_Hc<+n<A*?{y#G5?<h
zLvrPMHxCnPIs*gPpAD{Fm{|NAkAY+1uVYd@ixD-h#!O3OPL>H3y;H}d$SyYA`o9Q!
z>!>QjHtJJ4M7kReA|+i4NSB0^bR4?7yFoex32Bg$?rte*q+7aEI_BnmzgRQhnwh`U
zr6A{d?!2zw-rLsxf2@ZuKyCsiE^ZGs<mS2d?ehudwgMEa0vj55YpfS8uV_)`baD_O
zNjF0w^J5>tDKyA>90_W&KKS9lWq)xi)OP44^}hoIpDc{xjEI8GR9e3{=^0lMr5xBc
zZ@4n;=D^N96LtQTNM|V1kiFn83Ok2j6>?xZ8L7l$N<di5k^Te_vF=E#B}&|eUa7a*
z6S?$BLR^-lX%?H&`3PhVUi}Vtpzp`*=+~hNRVW?w9Xs{z^+cOG40gwV$yT%CD_1de
z@Q>=vB&Orglcmo|^+TJ_T{t5TbC&qzG#xNSL5w_(>=3sc%NO_5ZgwU*dqtf4akC@@
zAAzWEggn5u5Q+NU_3zSMz1s;dR_XV8#(wO%D^$OtuTe;v+{4AMX$jeD_p411-J{a(
zLaeoddqQ2=R^~Tjtmyjlz%V!Z9v+S=v(E_%f?tYWJJ{NHN%;r<N!Z#vFJMZ1zkM#k
zMK!sc&(53T=yh{X6hlt?7gXNN=1X4hlczf>JoGYr{-J)sI^~ncd5q`~H9KFf*Xozx
z^vdP!wl~l;gWYui?cV!o=!1Jg&t;Bg90FO*%5Q>Es+9(M8XB7Ff`V4hh(3(3V-<=x
zDkTXB2PhJ%KWT?23e1<U>|!bZPHyypTj-F5%;QMEB}J-arfb#xpja;L@VR&9;|MuI
zqog)8FDZ%Oxw8`+iy0Rb=VWp*x1syjP$j7hF{O#ik!=0vOcB$RhGsFeT~D{g3l28@
z4~>LUmB?l4MT?>ZulICr^z_YxE?s|h!b&T=AW9Xt`JWew3=dZsjFGi62CsBEs%TWU
zJ)iqDzCZk0TLtdywsw*~<EA|~Hdbd)uWxSF`r{z8HM@P(i|rY2NnI0YA{X1%DH+Lq
zj=Ek&D(z$VmTMHM*0KkB=TGX`-RxPTQOuLPeBv^uP@!j!e@`>f%9-)OGuUHTrGjUI
zV$i#JBOq?P86z-<jN*gGV4L~XRT@IL8O>@#zabZ_nze9g>I5s-pP=AV-i@HRn)0w(
z4$|$EEG2Pie4>=c140=bY_z>9sSdl~V}6s+e@vfxDBgjDmG7Oy<EUf{risn7*o_qD
zX|S>Jsfcf*I_+GmOeh*YWj2SToPVo8k7s~u?(TC&w3v?V+N+?eBcEc-!RTLR=C(?=
z<T=u>DuTNdM*u!JF@j5@zZioaa{caI&NY;aA&`~4wvg5t*^5JN%(%O%<pTUBj<ITG
zz02+Eua)XpM=>>5$61TY2qs_i*9NNl&?Ju3y)h@Is)+SS-`8e}i}nVQcP=5-SL@Tj
zgw-ynK^R<Ke(-$^>huojbPISLVbF55%FVCF+`E*wu#^1<DP(<Eu~pL<pGcZDK5Mm#
zm7+!7J**M`<=TO5Ow9#n!|17@XPestsiAC0N8bnJ^aW>8Suaj%mom}bP$#rqKGIv_
z-UA9V<!!mHLaKF4@>WFn>lRh!URX;4CKQ+MwMnG0mN074f@TQi&`U&36NOmYjDi)s
zL7CN^6gR6ytPrG6*yBIEF=VIeOnl@V**m|Q#*DS!QJTf12GlO7>Q|QXoSkR7<@~y*
zCw!-lgT*)fcfBAcnbQOH4`Q_c3khZ|!tlDceD^1TC)2GYvXe4ABe}+t(_`dZM2C2Z
zcIQX`4!jXqCv5h-)ZY<y&Do%Uc*fzHN*B(6J5t{kw|{6(dOuC9E3ZzNgFI{u#?xW+
zmxtQR4n4b+R=Cw@EOZ4EWnd+M*$Xz{vO7S@oC<X0NZXmtDsyO{c?vI;B70GwG|sOG
zW~i81&xXJA6n_4RUsyAm!gqZ7pGL(4(n`<2`v$#V<)G{JtNh(c-1E^>2BDBUE;twg
zAYYFTuRo-N4jr!9a?3m5QxM$dUEL8v7abn}Ql@`oxvUE_rH8f|XR?hVdEiVzO?dIo
zN~f~8Yj}RbY*aeE-T%`txRTK+m44c-K8WsYu~-LYOoGo%j|6@#HJz2bU!L=feX<ER
z);d=xG<$&o@iO{ACm4@vLI3U;TOm}EA^gLD*@q*YFbRbdRYZoU3&~uWcIk@R>EH(@
z(Qn0~tY@A7bkHP}qOz4u%MC7iQf3MNM%o)9<}SPtkdjdgPOl}uq<H^I?O373U8+vN
z)O@0iyv}S|1%28j!)mw_u1QovANl9cyrK`7M>1U}mrI_c%hlK~(*o@TPuV152>saR
z>)f6$=<f0}ys|tbRP^ZE9{^{Qt+<a>k@}uI{XIk1<;oAY$G^@+A#w0|y|SPEb3`nY
z<*GV&W!_Y9(WZ3@!76!hrzUe7<AaEqo(W7>#B1bbtVkM#&p(v#@>;yRp@s!@I{K#U
znZoSCMjO!$)+ZR}2K0+^Bn%znuFN6-C{T1>iJGMrv+oqm`_jM#PyL+o3tmP;gwT`m
zSuK1d<;RNHjF`!imm>m5Q&1_R)EccDaf1!LODJhCV6370R-IOfwqx)kzqbrGve=S2
z=P@7pTt$9_C$j11F-xFN_%)4F0+xlNS?*~nu-l2}V($;e`cP;kr}ani;orwF0--{N
z#i$ota)cdPm7N4po2gx90k64_bz_E`r@I|(UM%Og4$DuDjQXaJBQoh|m$mWd%cVpG
z_Fd@%JZ83i4VSS<Xy$?|N+T~HO2=sd^D#8jtTZ~h^u1vZ<tv5TTY$biQ!v|QX(P*O
zFCeCb!-gI<sI$Qy&cv*RCB-X93u--oPbWjszQn)6k=)BR-S$!7Aw_;Qg+e&yjX5nD
z9I$78%ZKoEA?YgJA;oTXd$G&ZBtI+T2QE|&?Kc<{vw^7C@jJ_m`!C<ylm3N;>{=Dh
z>4Wyqc+-_S=$N1C<6&olhI4%2s>yTbu)X|+x0d8CT!O>kb8qv+5&>DnW~Ge`IJ?~b
z8y4}Bl<w?DipdaZOC-MMKg=pG4VkfBriMVi{&=C7P7V{4TeAs9@akV^C)8+N;?-D|
zuC>?W8A4Loq6F}6$0VtZ6qiSZ8mV71lk$7vzqt%$-Lzf)7-V27r%+s*A5A86o*~Hh
zQ)c~aN^88>*zjQ46%G6crde^+gx*WmbN^Z_BqsJtHMu))Ap3UzdUc$R_)xCOC2|$J
zZ<!M1B!m%ux0tRU1n-x8!xEMt{^K8i?{mleO4nzfa5b-=J3QKIP8x2Y{)!r8MS}wq
zOUm!?c4ZjXsZIeR?b^yQiBOl}^QD++ohl~Mr0CG<hkG@vfK6FfbVxxl^yV+?H&xkf
zj%5e<t<-maH-Zft;_cW-BoyVkOj*9pdBa2aYInoWHW@3-nis-Q6s+cnZ5;2xI#+82
zd~zkfi-W8MNL2b=J(Zgy=7H=15r1BdjWmihji7Jj&TQ!zkw9=~wW4UR!Ajf`^5yIo
zMCZ-fMR4sE8HT<vAsjJ|i@`meDY2JP-y80+;;}^JFil~GULC#14Ev`@rM}-9)!E;;
zC6DG|G81_bC9$N*u8=XC_(OH3oG~IUWDreaYuh!m49;$CUgKh)JJx?_Y*@G<(G3T;
zGnqq<&-AeO{(hx`GaRPx$4ga_A~^!Y2Nfqz{iXQBLam?V&8j-Z5@iYY>59s%R(|i{
zVwVzc{o-rsl^nBI_z~GyRvNA)S(Ow79Vg5FG3_~8u99E2K?qB&1yB_k*A+yYRNDl9
z$e>E(7Zg;71Y~Dt6Y|<+jXmP8u_~FxNHC${ydjiM;Z*VH^xl*QgYxe#uKXJ?C`TOE
zRG%q`8#=rF>9?wxJHV1i8}fW8;lVSTD#imsI5xAftd%sXwE9HcNE$BWe#K(;s5OSx
zwRMX?xX_WV1z$4k5!*ZAisQ)|`gr@iX{T?@hizl;NhFk<s9<D-!#RZI8S;ECPc+d8
zO}bDMlnMIN0w-$df21JdL1Us%OngT)II42;;3G2l?XJ<B&<-`6jOW;mS><gnG3pR+
zhdMhUrWz^*nV~vm``_x0PB3oSYM%xNkgcL44O!zS#@~E@UzK1J5If8l-T5;QZkEFL
z{mKKf*GCz(f#sME3s+;%A1^50us{=ytw=YJT$Bc#3ENcRqjMZkZAr;bzhw@F`KV>+
zsq&Kn;CU$E5Q%4DCAtoTJxo8`^H1Bq%r@e~Z#tk04@-4gGV1Vb6o21o9YkQ!6$~s5
z6Nvb$wN`~5j%ux5v)cVex^X(kOe#E;hEO^-CI`(I3D}d6#1*W-i_Tc-pjf1eo>aID
zH^mm|92c;%3qGNAZCT}shFlRXz))p;r(~Rr)%ndL=Xtj*hdkFpnqcq=GjXEZmq23T
zU6I^wCK*vmb=`LSRM~8k={m;oXN#jrF?p&Lim}%Skbx|~3005Gn~r|d#wpf&*!s(Q
zriOaD@0;t#+bK1XEtAANR_hWRp#3@{|A7YsG4p#lU?R>!|HE(4BXHX+etD}^SMl^8
z^2evNBOH%Wee#WBOgPOaFsPI&9Y22kW~o5X_esZOci_TQv{g|-^?UfI@=w{o;m9ri
z9#$(CqhmsBKQuMY=&9tUjn{Jx@zUmMG$c-?;Ph`Iyp_iO2>MqGg}Qw<atdA2KB%*!
zLXx=UB+3CXSEo7Mn{Ep}CHU7<1$mw*64(j29sS3a5-xkWfpOh;Ig&Fj3Pi^K1+JHs
zHj$iVZx#bvv;|a?o}GxF3uxt;?|jpLBu-j-uFF&UT%lgx7K~;J51Y_EcvYI(aYruV
zxRQF%q9^MY1%5RxgD!Yr9Prt(uRMG!osWE(gk5!|)lMHGJUOu_rxlyu>ON<q;D{R@
znb$9-oNg}Ven*UQWz+GC`Q?|D2FED>j*x#O4+<RdWh6tX9XW_aKG`oE6fX>(jsn?C
z3h}i9m43#gg@xAL8mTt3`mDcG6<Gy^3SKAnXs&|n2en3PXf5v73>t$Uzi$shi2oEV
zEc&ny(aK3~v<=Vh)UQ7|Q#k`o(VK4~a)GIh3Z>ErH~0u4aRg<V!;`j}t{I`Ps!KI;
zzcFzMT<#oYcJ<%i>+w&1hmjP%<t%;RV?8^q4kff@3*b6aJbD)dqyCVx?t=nB7>}tx
zUg^PYK6UTv|4agBcROK!{l3J681xy5uE-aKWrC;a^vb;21g~YVCE^uvXk~?f;C*%D
z!c#8N=Ygce?wFF0$dSF$j$rerJ%R%rYl$SJ(B<ha-=>R_VT!o@{sf0+pB^Rf-6A5}
zXTN2RC$HR3{9eynoi+@WS_g2a<FfeEk@n6pXi>?ATuq1<S3yAmT1$O*Mey)m4h&wD
z{(ov*y}#DiN&=}mr7Vm@J4#h^{ejrefQzQ+8;v-32(v4cbz-g)HW10l5Gx$qYy4Ad
znQC}~8^;^02vagn{Y!yZxz*DN`X8|}j09-5s@L1|)RnpR-Ca?P<uC9qHdRD%MPoTl
z)}^cuQ{&={SR1agmLqcK(hdnt_Esfx7_$HL-mUCUowCSlincH;SlcU->%TsM8SE~g
zHu+8wu}qp{GqNW(U9R>WM!fiGR=kLd|62$Zbkl@i{!6FG)#o`@pjDnuQ0r~3aY9r@
z$w9TSeza;Yj9NBZ(1gKxwMBK=LI0m!Zo&+1x+Pf2kNz;p0uxk{j5=cXD7mf12)QHj
zMU<UkBgFFPr1nJQ6k~CR331xt7Oo_qwOYLF>>O44G~!sj<Z}q2<~B_6c1>SVEWdGR
z8k0thaZFYAj`=_|&Xb2?D4+uFsxELOd&si?n2L_5eppXt+05ofB32d(!M&Zdx|X6m
z><IHdN#2k77@xRCz5ySG8qdT~ofQ{{jg5DHac8Z`;BvGQtuQ*AB{=HDZ5kV`v{;n!
z<98LpEIICPrN(rxZAy<R7<}=Rq$ic;vrkYOu4J~1+-_)&3P4Wbn*;Wgl=3#Gf@B2q
z%onuYaR|JLVuPC2bIztu<>P`ymxxIEpNJ_FdvN=@MGYWhPj(cn7H~SfsG(^qbmoLN
zz!MsnpCbbNMF<!<2CpYU(HXA=U4oCKdL}3t7AVmnuU{j8ZgbbU>8L`k$x-y5zpE5i
z!fv>rWbHN*pw;zU&lZCz7B@0A?Nh4#Z$+of4_xu()8D_IAggioP*-A&x5~QM8eUje
zC~yIt`Om^qS#TaMmZ6E+3;I@xQ)CG_2q<DoQ4#@h@LTYKO@@{+%E6N@MNCzZ781++
z^?1X0#O#>$_A;t9ASEV#wsHUo)LTtn>8SLnv-L~Olnm2Wm`Qz{%<m;WdRc_>e(is<
z0Hx|Zv{ThJm47<39(9N!hunP9e#pKI$^Iom`p(Dyu-;sYsrOUHckf|$|9622f28_4
zyr@KGjsY_~5l?(M_MT(wwqwCpz%%_G14DPHNe?GM&LeinE1ybg7yr*#-VAl!(QjA5
z2`9@xFx+b1Zh~Tm?|bw&RPd$~LYg?0Evhp@uxN|-IZn3ghG3f4b5nF%-(LlOjpB>X
z6!agd8E^E#R4~Nb+mnrp!fll*TK4RYuG|s(E^gBB-6>+}Q<TG^$z7$#7x-~xVpQEs
zOORJ!`A7dmb}Y|C$B1>>Mr(NQJ?eW`Wmnrh)m9&Knuv)!;V6y5?^lgK3#w<dc)KH<
zV`)LNf`?CT!B$drxF1EQDi;TV3$noAGBjyxAuFnwqQVm2ONjS2);ob+KFTeB)}oR)
zh8xkbIveWqsFqNY@Fp@Zdb;Z02Afo~Rt6|__Obn*3h(@M$zjmIZ4lF&<+xx&$PHDw
zY|GR5yY7kB8)Adfwf9BHrTwEG*MUIGSI`SS#!vgY%K9+lR(au0>?DCcsh#~N-?FUw
z@sZ{AE64zOG0E=nG0UIbc|p85y=SVT3U6$3GB7?KyQH+VkwM#^S{YzT)L*{=G6zr;
z`LI(z)sUv5N&tJR&-{A^z>MjzMMXtsiw$g-z!VQ~yy3yVuTdb<9eJSxzzY;7mCHI=
z=F{Fcxuxv=fsGaQziLQA^vm%76<<4|?>Wi+BV|<S7Zf;G+uv?^{2%~#g_D^j{4ig_
z=QbitzYFj({~DDk?eccF8^qC!cF>b>2pCzJyE46d{lN`btD*G&d3#eBK_a=7T}XV&
z$NVrZfSYK%iG%UBanF5(AkX|*!x7hf*BtFyS|zsM*><m4MfL8h&_X6!z{sZzK@-Iw
zXNzfL^Qiz~yI5*QOVy|IZS@L#|MwOZ=ckjB{Zn5@YezF@)00+e`qoWj6v|z^@!v|-
zB{8aHm_G-k;x9=H@oZnGJoy?B47)$>(HDP?3&;}__qtCQX!`hc;MFhxT>Zb<{06V3
zSI`zv5=qLCF#5o>!KFb6rJ4ItUOrl--qKpVH+S~jo%)gw3oJRG5moujkz0o_j4~lb
zx(<CK#lpdv=huV!873fBG!*?;tLGJ}vrZeKnh+`8GsFJD>$-zlrN=mdGZL48tdYW<
zk&=^@9n|c7k;bo6>=Aq<Vf6juz$#;?7tq+$B%-W*?kc-|^}KnB6bnV*zpVgH%T9;4
z=lxbxT$$fr!vb=W9yYW`ZUZ&J1px?V)th#wOSNR0aTk5dIzHhwIPGGC3t}LEu(QBo
zV~~pvbP<jTBD+%3-BNp~a!V<FMZ5Pk(qRhWeNot`2tf!yjDB}{7zli&WM;mBB?{HM
z0qei;upO|O|ITAuVI-{z$MpeVlck`F5?o5B7Xzv&bWR9`=5m{ZiKifH2>*88OBnRn
z>9fkpqJ182J9~R2(iRyiZRQPLQ@hgYA$%m3ILlo_y)T9Bf`<$c03`<LdnaT-1Od$G
z+Upsv4#LeEssUKk-`&ZA*G4cas*3<`R9gI$eAkDE35P%@zR=YLYhhtwu=>i?pHYDm
zwM4I-ysfRR#6GIw6*&>T%^L>oNAPU4w>wMe8(_N-Ap>xrTGT%<&<V)QRrFJ$XB=69
zPUw}`?g}(la@!`E7Pr?PBBuLH@;)Lr!fC^ts{IGWcHBZUGB*CTqH#o}wu*r(_34u&
zxJ_e$=uzQ7#D`AQE`eYu4TZM99-~mH!K3BS+5R1Zs~6)pMDBK5jP|dL3U>ct<*tEi
zZrrzTA;2`x5WEsrR#v*M^y`V|XRAnGVekv}IY9(?{xB84y>0?1G$0dC*BoaWVRN!N
zKx*<BNaUe;^ClvoaZ#d7D2z^MMN`>TTTrkadoI&<5Dya(Vdo{|Z93H;gqax~l(YMQ
zNLGCAl?|VoAH9$>#PjlCU{C7um_@rHfdcEl_k1N~Wl%wjN=U$!l9qn(fNc+aZm@%9
zx}W;J>hnvu#sdLv1Tq4f&Y|IYo^82ibVA2i0dX_sdXm7HM7-O~=CxWDGA<?o;XC~<
z_!hU*9Aw<TG7bpgdN39uyoSAKz*QGMiiC&R2ktuh`Gfl7&3aQ~dCJpPxhFUZt$#X0
zM{QxtRItERI2=a?#A)jKR<r|xm@*6j0m1aZ@Y0eFC)uj1BSN@>Kd{h!_P!}AD{IO4
zgta%6g#QYm@WT>t_!aM-^(x8hmjdtY7P;}%oo;n)%^z5(QUgR4fM@@?J__~YQ4-$#
zmsZAfkZE+!DeO2pPq~)N`S6VRy8*->2!;F}6}i2x?RIu{5@_oi%eDPil%T-76?Cqd
zU}0f>_I-SC)P&OTo<FbsUon2)NA0wj@H<shyo$=oP7t+>g@^a~V0k<8jNx+lCgg_*
zO!%47;j)yK7XXc{qLt{#!0neVCYa<GSVFwYg+L@A7CHGyPWyjuIgiRvU{7x6=-3Sm
zyNO~qz{{A&Gn=iTBIkFboM2ZlqIt%lgBGtd>3}<F1n}Ob<m9YTcc!j5yM5qsvRtT8
zzuNqsh>jqyBP}w_U<}?PS>JFg6a4cVg~z(VetrSt48R2z3Am{u0E~}$KI(c;8wN{x
z7097>{uJQ=!E_jybK%MV7PY~@rK4nFiOI{$%h6~_R((xaR9YHkI+}qu8SO;^*jNTI
zxzTU`X7Q4g*%NBCm}<|vtg}|tr1M@~*@C%xW{bCR4j>MHYBj$mR)EKVD8HBDZ3HU-
zpZ|!8M#$=y$O2Zxe7clj>rGVLBG@QmE)fF*)lP3kGI&T4(*QvI#HSDdX1!W~>h*Ao
z$H2f~w$diRFCY*h{uU@L#J7~1QGn9oa!0)PbTqR)OZ(m0Kn_5=jL6As=+v?<7%;K1
z0|JpSsF|2bE`ZKr8`Z0z103W|&NgKfQn{bCL><0h{T#?d1fn9k*tj@<{qB(GtLd+a
ztk`a;aW`hMsgLN8;NuN;c6P-gn{w?CXGIGH$iw(Sdk%SPDB<etfXv)NKX)OV_aRoY
zb#BaHA_M-vOTiMoQXf6ixn@)ldc|_tdOi=nTQ)DE4gB-G<3M=M4Q+DX?;072e)&8U
zUZ}Tuy#olX-QOOR<+ubvEN%Z|+~>XeXr-NHqDjGMBTxEkY+4%Agpb{NBW%0U>cicY
zg0k}S{tujZeVp&~bO^W!Z*C^vBrxhdmV4b!ZLnkt=2|s62rf#*6|J=S44==JPjAee
zt3I>np6nBof>~9vwqlZQxmw%Y*B84SIWA-YH)uSIyv+!2zY|zjQw79%d(!Kt&cS=#
zA<`_$iwS-<EIF$W^)K_NeA%mSR4FsU^SslE>G%V2N7vwBxVPsBl3G>`BPIz+1hAM}
z0|wJO0KhO$3cMS|yB78bmS3yOt)A4SX#c_b7q4L%glapBLh=Fvz~q8O<-NPIC7>m|
z;k?1R1)*h((&n+TvG?9@9(}iwjsL^k6_g2z2cu%UkF-0V6aTrb?<*}3oYuzB!wJd_
zHNe7bK@gb#Bl%<SbH&}srj^#wQe#+l>%!{&;Y^`Yt)~Cs?|1sZX@J-F*6mV;{htw=
zNej6w)1gA8(q_A+Rx+(4p$31!+Ez7Ur)6$z#wiT#S1#637u3g_Z3?Tf#Ta*a7%6GF
zz;C_K20o3zEWXbE+&k4=wX4e^ArCptIzeqxCa4WRdcmkp_mI0xtQ{Z9|86=NT>bwN
zw`IERFIP56?EmlGHDn2NwcV(99JHnpx$o#18)&KjaLv45>x|GhtHg|3(=F61=bl(D
z5Ou#+Ihe1)z51Hb@!OV6v)(Eo(XuXAzLXgGBqR7pXMW4_%@4z`I@8tsr#q({kuxg(
zU-v(1^Vj)HO5l&?4!S<`-#x-G8X6jix`p&GU^AO2dDfFys^Ab3eql50O)#NvIM(*}
zdS3ga$wD*v-Mc=eGJ=IWYsC^sEqa0eA)?3B-aigyrW_jNAepZ?Hcy8}$j|?&6%`hu
z*Xk8*UY!Qz_GZ@F2T7d@hm&<<P@|+H?`&JEVBlA|_PC@4x<oG`TGgNjJ@n!Z)2}P(
zfH0~2wy0W-P3bqHB1voPH6>B+w+PI72xcO~#~f?dx7QxCIU36E)EC^le7;fjMk<)F
zvU6Jyfm>7Gi>*sCBz>z|!kJMkiKsoLSVcnE-$j~ZDip|9ul3#Tjs(z;HNui-*9r6W
ze@&}cEfannCWYql5IdU63*QhgDb#*^Jyet0Luot-@*Zn?@uq(K)bHh|*pX8Sj0)xs
zj0;R`?wtNepx5T}>n4JS&0vw!?cJw7qx87O=@fo*8e#_YzE;L@GbTL>`l4e69h(;b
zjaj`Nz9THL2^ohVb`04uk!lAh<jbaH&cE}m!>azNF&V;y>Ifhl8KQ00s+~;bHaM_c
zJWGw_T1<vh0V&2~@E6N9knzM66)ehr#M3+b``z>Nx1;!2a~dml5R;aE&Cyo`2ndh<
zIeWd-To?bv^_K!!M(|F)FYD!rC$k%)S}x)O!))O8iC@gpg$#LXG8>qK`%_xluy^qn
zAv^!i=%ozcw!Cf-Q(r_+nEwIY<y@ya7hiy2_}99mG!yk1P(xlb>1CGU48J^c7EfU}
z9?z|3SG{ho?w1Nje0ib~nZD4as8>g|H^|x1>{>Jj@)bn?RJe<>{*|ZA($CEo?CAeL
z(fb4wn;bq=pP$qUdaC4Q=yg&uo}uCyzf*MH=O(U^HK236y<mlou_mhzkJL>9I_j=^
zrC84G=AIt^fsd>pnnL9F^da=FoKdrOc<{d8Qg3&UtJ2w!j$A;hr+TB0Y04{G5}N&i
z(YJ~)G|o3ivvbR8nLO0qqq@>pl2XRE&F7rlVy1W`2OFgZ>;Da8)mZ9%{hPbuOE=Pt
zYvmWo|J7GuhiVkKIDb=;gSc69E_#XBA6}RsVu`{MRNThY#CS1sUAxZ<>uJ3zUui*@
zDz+Mz&FJh;<ARuzg%@h`ub_SYsWMV4zqi1NUwOkpc*A_dTC7qQBw*jiChy9<{Ndfu
zs+BI-mRsPT%gGUU_JyC7i3ylr3l+t1hsGgzZd@-tZ|ml&t6*PG=5u8Rfk2w6#;a|P
z2&`@=P}L3K<kW~;9ESkG^E_{={Bd#;@oSSrQXu@5gvG#T7W~X>+8>|%zl7RS0%r?(
zYhXH`6;A^wAt7+WeR)V3j3rTbI7VbLxkb%Qi@HEPy}Fvh2X*GWs}Ftn`#RQk0xjYx
z9ld(@JgcneRWZz5v#2QkXQ?>F-uIB|T!Kvgk0MVa&memk_hI7d7Vk^kQz=#lH6!@P
z^mllwbuU3Yh9u?~DZiBpcO*@6z2lukUO{^wfaDsX8=)9PJ9Bj~v_$IA9pqOf7gs`>
z^IBG4B2A07s_`4xpv8Ym5SI&DyK6&t8yrqa(P+`S=Yo>P$OT@s-o6USo<s9`I765z
z)Ak#naUQZi=}@<ZGb_G?vQGCe;=hR|6^hLy`7SBM(e4eG#0%Jf4{*5>_%1ukKR2lO
z!L8;}b=Wl<X!5!`7Evs@4~*i%aCM}1r@<mY6nlQ&|L{&xfrFjDhv-j3h=iyHQ36Zm
zXUVCFX|hM*?>@7~pc`PeGy8Ws9jUQwJfoa~)Ce<<nh{Tn(_{w4OsSaX)yLnL_O<$0
zVc?*n`Xgmr-6cwhu2eYiz1Ft&wkL3*{ETYBL!LlJRAhb4lCiYZw?!`KOw@|_sk6S`
zbX>$-Hp4}!sqrqJONzHWYMAP9@bmGYzR|c~z84ZWwhL(kc?B8Bi0A`V^PXR?kHEIv
zfeQSTa$FAQnFN}h(81MWyOAJshExJSbK0vQM_EW4N<&}cw5!CVS@Y$GmGa?97a>?2
zM0pOyN88{uHVg{3xHNj!0`FYykA~O~?+D#^TPQw}3;JyZ4IGSaDRXL+N~KPgDSmcC
z4ARf*6~li^*wjV9hn{A74)i%4=4D)gaW3C(3l*!mP59g@ENc*7f%Zi}ob`Jr1G_j~
z%ZU<km(<H|Cz$X^x2t0}cT64!k4x}{7Zy?LNfe!<mQ;XxjFCp%N@lI1(E6&>_lYc~
z4}i3*M+D)ZFh3!H^RK|*HZ9mK*@*&3?~O6*{Iwz9dgWeBbPiJt#87NCvxwV=l%Dlf
z{*EC`zzgXF4=Yn-qT5JHrSJtx*csF9xIsQ2{@i!!n_Zc-cBijXT6y+c_s*(s6pf)V
z6c!R&H4{FHl$X8fLia}{zNS96_bF2vG<MQaCb$1oyY4k44(7in)Vl#2yZL(a5z3q_
zm=Qqe9HeRoHlblN+o2oy>b83*W^h3e?p{Lkpky$SE#CHgxT*cdlI*CU`6PG07PX`y
zh~v=FPY(BH+uYQ`f*3KH^;f}6fzUsQbhAXMB<Sv5#L%z!gS$2+0YahutEng8vzgk^
z(DMK)K2k6stm9Ic4;*!c&U^MvKuc|(KX{bn`SdE=AdUd8El?VF3Oqc7;`EOSK!07e
z8sNnvN~pi_!?S2kPMg;9l`-^e{>OQt;!pG~K9+}0(}3`}?=!;kZ79u`th?m5=%nGF
z_g%ZDMKC`9lr|l0c6#LOMc*HQ8c7E4*=bav0^oeMW$Jf}-Qz)+HmgHy@%sR{)=Kt{
zuQ1}_>UoIV%gmQ(Rz89*y?P>lm$cBNl>V$&idJ54XR<T>x|O>B5J@QDFYbsPd64xd
z3Py?;lv9CrL4*F9jjyg_ey5L}DcT06A>B@3#rx_wtSeoMXSKG(Y%k(*pt~1n+Y41I
z-l<%%nylCdg))Vx)H3V{4#68rVu-|)S!+}$C0qNHh+bkkJE|f%Ebep)2FKl@rv(kt
zy(A6S@Mr#5x>m`F2E)ixZ6+o;gEw3A7Qeavw#rQ6<3gFbBCMqv(-3G11YG{NDPT5H
z2oo6hr$1yO@7w|kIl1;El%~`z78X?f8gEt5l=QPZrwRf&4~&CXIj?dYc98sI!HGG7
zj-Q;vfh}*tC_L=zHryW|;COHIe8t9P6e=nL_QgTr;UDQ${hM_)pDTN!K#9j~!!)ny
z(pAn98rS73kz-8-E~?%>i?>V&J+CC<KLJH?_r}22agh4aK7x)ZLFj%hLS5L*`D)Li
z)kvIoB#k#<Uv0!t!%Wp<Gcm&S^kM*l$biCtou^`!k?7#DJ?)JD;C4S~7!+FC5yePQ
zwJmPD<d?G5geHNFsX~^GA^>6Jj!~*xY4N#%i_F8dseL4)T&Tc`CSB}<ZWJ5q@;cbD
zOj`?fY$=rj0h`rAC5O!Kqhj@>(xsm(l&T;tz?BC5U?B`b5U)_L3s-k_1qT1|T<&RQ
zGP`c#9LtLYSKB41^IQ5ewsvnd1UCml4K%^)|E(wvS@LQ9RlQw4-k6C_F5olrLcf`N
z7?W%b&b)|$l~u35NpF%cdp?OPfvQ98`DV6M)4pQdt4-l{XF8?xgVSQqqI9wRr6px<
zwqYn}3s+d;zHKy4=iB@J2S{MH8cR!<X<ii@O8;Xr|1gJ*z0*Owb&no7)QIlfOq(oi
zIB~77-fVxxqHpBmqV&E=PXWHfsyZjT===5N&-xVnyzi`$|3mA1e;y?t{!Gn*qnZ(_
z!ka^!H}XP2P2113zGa6Ht_ovqZT&3(kDOe$h9s<K4~QFj*upB}z^_MZ<AVA-rpCaR
z>uC`9@wMImBla~GqLRgzB$TciBO)Ot{@WWxf{cnP0vtJ?q~7WW#i_g*_xJ|qV)e2w
z%{-(bKA~4=g(gZ^y;Yw;CMo}mbn%ROoz*+up}LL~l2OGnFZX<yPSF7Wx=UuWne3O}
z2^viJ0FLV)RfHZ*7H-JOPGg3WQ(x8>pJnHDe~r~d9GLZ|b{m5=ewyE%DMP0~7>I=$
zmC*>xV)&7Z?Hd_7Uha#2Tif}Cg!aJ#?Qq18Ui_mf2v!sIU|?5ox;rth>m7yCz>M3J
z8nIfokvK&$rL?LbInHGNE_o;CbEjlTPEK?qX&VSDhs{kW-D_&%)6?41SK?SJyOi2^
zpPjG^BDaJ9(l}iHU!*aC{4M<rh1-uzfrRC>lp7S#;izIqxOvrd4BTH!z|jWn<4nGA
zTxL6;kI9><j65!Si*wV<rz729cM7nD|4;Fc3W9FCPZW5P5H7A-g_+F=dxRhjm|Mx(
zkPt+0js{*L3`6<&xz>L%AVufY-kzC`WA!Hzx4Cn^!CYs12U3<=$&q*2C!YF;^r-t_
z73M5(IvS*xb!5NMw-*ndX3c;iyjgkoMK=-8I&tPY_68=<xe2mpi)3Vc_Na7ru&HdP
z%T2NH?f8N54Ztg?p!&$T8{eO%-oJjQp{<`Mr0nbKJ3BiI1;YSM9^VNW5_vFPO|efc
zXXqcnQuF3JTf+y}CM-)c(ZKgQEIN%?Cbx!^D-ClPy9-Xot<5MUy?M2#ZU;*#c#7}L
zcBFa^!@&6dRc*8r^;thI0hnSEBce!4PY<V3vlp4r{4jsni&ia-7K<HOqEt(~pFs8>
z+?vyJZ*{5l>cyq2;HNh(hl{0ZXf6uFeQcT@Xt5L5M3H&>&AHq_eAM%FnbAzweC`4W
z8@;`N=6c(%Zb2D{J|VxH7NNZV0x0Z&lIzEUU!bCsz>WZ7WJW$X0bZ{v!F^=uZ7C|K
z5W=qaMu~#Lm+;fhU(qbT>uxFGzP=q~+iCaH$%4@@^Ulay9E(*Ec?7-ZLjMm5v%VEo
zyyf!?=#$8@yA{E)x>)gNf4ZMB%JI5EjV+|~M~cB2Z*p(;;(59~WGq{3@WYqW5>*mm
zAHCy^y#Iu69~!r@3(Cp*`uhHW?W?5ax%jnojIJLL_s&}0=L}OxX-cuk;Yg}5fu|f?
z%rvIWn<&>$yTyPVNRBF5iuPn7&Q)MubD?s*kIP3V;c4%OJp|o0H}socxw+fmckB}@
z>uZ5xe@fLd&Ep(#H`{`D;r=@ee{w$e2F!Vlk05G7VtB~t=)G&*q3%w}Uot3onxUxL
zO-?9a*?@N*adC2Dnl-9y*W%Qt!9&H+B?-QW#9&P+@prFNR{zuge`tUsf{K_X`P6hE
z|DPoY32vdh_tGC=NPs{e9k7W|Thso_JvIf3{E*a>3!Tt@yHB#*&OOO-gB6uyk84FB
z^Tx95uD;AQv~2ud`@Cqi3Fv(pN94u-4j>kbI;|<e;(L~vP&(^~p)r#Yl%4@{<MB2W
zS^Qlu*%F-eK=`b$6$bGDcc<*S?|6j|L?Qe<wUiO7(H1AK_@iOMAg>u383s%wf6cBJ
zGof_zQi~^<WqoOvftIb<FPqNaGoz;)H->4APOxuNYr6O&f(x}P+4EV_!V#vK3w5fQ
zrzJz6Go4ZjJ$biKxt(aXo<_z3ji4W?XJ!ZQT5zU*SaeL!lE3|KGW91SEJmVd#2FY^
zMN@f)it2SI|1ezfbVF+EJaT)yB|^L;4hKXO^66p^1mgQZhy067<&zi4@CJ@0CUfxZ
z96@*zkI{$s<ZEirRWm_|O|~6<hkl-2I#PWIIEM9SKbr<W3+CslO&xWB%(T=m%dikg
zYVzfW_qYcn<q^a%Br@K6;z4SyFl)zOhGE3(TQwrv^T8?><<QK#%mkE&zD?yyG+e?y
zG$k?^LN-Q(80LPf%-M#27TNYU@#qRx6LA&G2m@?$zoPK}j%~74_OZ!!hnE)3wy+hh
z=fo|WO~=KBmng?wrKo;|T64p6bCpuP(IS9^{`>v!%PYmBkv*KvmdqD)&IY(cnHGg%
z^4>M$b&0TAp2v?k>P<|fuFT@>Li4VLSU-!5EK6SkriS_-vLoTm{yO!G-3lXa2{hus
z><0;`s0tn2GP8>ep{#b@G!p1lo-!Z4#lIcy&iB)CyT8DSh^(pCj$}7}jEFp#XnSL`
z(w>r@-|C@E8R(CwnUCh+QSQ*0oUKVHD8j-hx4=VeJE_FBFr0dLb@2<Q0qJc|{Ee_%
z=3~a;c>PcI5XP9U{PcYxti(3-pLS<minH&vpz{eDv9@DDKOAF7IT3GDX~(J*0<Bs@
z&<t#rTglaIbT?SfW@7vmmauSey4lS<{_P=vc+AU`Q&ZsWk^TNdB?oX#spL~SQosVf
zNJdyMhmy8I{p(R1#@X2!)Km;FcDjBhU2adGqyVQ2#g6W7xQmrkE=wRp)a3mB<-Rxv
z2~zZv+F5O}9TNLPT(8|7qt^0s=<!(;aF@Ui{KEMcJ)<{J@)Mh`A#z~cJ0xf0G@B1t
z)z%l4MstX6H>KTy`^|(esIO<Lz9Pok9vgR5$sg{iZ`zLLBmEyb*ci}fm%F=M3XLt*
zdo!b}&zPpJ)}MBzjB7N~ejLV!KE<Z$cDKO_m%v#(bsRyt;%+4n5LeG)V~VgUZVmDb
z_Hl4J`r%0A11Cx{+dWXDibS!Rk7!Cr(Vi)G#2YiQBmVtM%>T&(EJXHJ$(`(;n<Aoa
z?wLB1;zb5?le>Mrr6q`LvHOR1pB^yxmXZ6KZPkp&S(rPrB|X{iX1Pwi35o!`!bJY&
zHpiB!!d+1;8+-PY@xe%kg`){EpQHr0>h}@0l<1ZsngD!p|9{|%cA1BvD5{W34&DrL
z2W-N01D=fTemy}%5mzMf*vX_B%bBv^h=`Y<Ko(yf1?+N`PQwy~f#a5;JZ<>YJA2b0
z8Gn5N;!~UXE@zrW;^zYxuGw7G>pJU&-aXh;;AzE!01Sfkt*jz@dc+i@1Ax3R{Ch<3
zPRtJIx4Uz*x^|_$;v;JKUcwRoL+cZ_qtWWvXg71xhk(?$HL8)UUM^1J!9gGwbT}CO
z59K$15ty$gFCiq_hhKlh-|rlC>GiNm85oAEQ8b&w)-2D;-p*+a<AuBU^so{bP|ud^
zad_eDGUkz*i<qN~B#!Saou!0}6dKq5fh!=+vK|TYhhzVq{<dO;_cfCqDdKnW{ABAr
zKNtbTZOt81^LZz^v5pXGNM^fKFR9}j?#zkG@|8ANPsVL4LXGw^CT%zZN?IQzhR-FD
z`fz{rfe1|vhk4T?$nj<iA$j3bZ`?2e+qfnfMkdW>RoIs1-l$PrI>|Q)<D0X8jJM|W
z_F!c637H)OHy`A!k@N_L&&3@B11P{?<fc;<+!-&gd%9TdgW^_v&W-YZ<k@qq(Ha>!
z%+Nm!@7~ubm30WN6jJa$H&8&eK?*nPRv8$3^#PANb?Y~vG5k00#Y67EpFg<3f9mAl
zKfE_H;r#^TfpO9pU#S$cVQFXvt9K+LQjXM(Y{NGSSnMAs<itWe*-A&!+M^|7GKK%g
zof~)Zf8Dw94vfQjoBzLcr?zQJU3+{J*Z*(Y)1BO0l|Y}_>ZQynG_XQ!#|V0l)t!Zf
ze$zhMLKDBpr@t^pkw7f@H*lnxesTT5DL+ag=t-UzX-KmDD3H}fT~%^XwBRz=rqn~q
z^C?>V?bc_Gv*%jP)cFB&Zwu52xHl;RD@*)DX-99><_@zKguN;A*q`5B<O$z7XE497
z*-Id+ya65VXHm!1u6czEr^J1);{iu6(DV^n=7S1OwjkH9c1kW^tqLd%u<3%@+Qw+s
zS{RcEv&Kuh<2|J$<de}4%G7#JA1_RB_C}LMU_m5+1A9GZ<FNNzn&&<r4b=_%b3t&8
z&ThT;RU|PNDhdipa5be~Fe4=mDo8c%o|?jgfq_ZpG>?x}e|=!`g*;N5m@qooyAO-J
zDtXG_;D6tnv-!Ok4C-#!gm}f4(x&|HDLhSK@Qmkwoj#QXFTvzcx<Fl_Z(N}IS;;}v
z;dF(BUlIrjDXAC`>&kKrpfCo|`T&?5LPF%}+w{AWS1(cDQ+A_uw{9P#IByNCoVT&w
zuaI~=ynj-P<agkQ*SRBJ&uiyP<t%yCw@FfAvE(AQeA;*a`sic<&o7Wq4Vgt2bzvk^
zkb=93MfP)~)qJ6g(rn$vMg%TBvU6<}{rnT1gi`QvJTcj7gBe3_^g*B>&Ni!C!jF><
zH1yU%gAH37h%qLF-ZXFBO6^bi6rrVe(z@H2{(;NO4*93Iyk562tP1!bAE?M71+OsO
z$)z`bGqJJr9z-H{=C>puyu=OI<riHGqaQ$Mv^><ehaLDO6;t}tj{o|Lx+6?tfSsL|
zpO^b*G5fR(!+HICR-B!>V-T#e7{o(MP@#CSf-q6a!p*IU8*qMd;+L5CS?S3BvL!B>
zqW+cx*7rf<%4%+5X^G5qB&`#KF;;Efx{sf|eopVbIX`%g`4aL&^%zU)2VFl7651?W
z_(ILP#>RJN+oLQkRE(cLqJ2018X|Ow16B*Ss9x)Tr<`ZOn8^FnMd98H+6pCRRFPbo
z$i+T#(?6Th@4dbuvvk86YyBw9e}E93&oQg-?J+Lrd&O(DSdC{}<Mgz7$H3g;^ZJ~%
zTt~LNcC~Ww(`=j&(FO&pf_@}viHx{}>N81_u>!a{kA)v*ELf1QS9+UAZ(8`xKOGBt
z1#K5M5_075jKJ&Ri#zek@*VDL5cNng5PxN{{m|lmr>Rn3$F2J%#5pzG_miGgP&0;Y
z7^cNpEGMY}d~t_>vv4mz#8$8YhH+gyOn;t{p0oJ{nkl;I(9dmy=t1Jol}1|*i{5U0
za-&jbLp3h!eZTgz|3WQPi=u+JM(DJP(=Zj1+~*>$00q_;D0x-kk<G(ksq%FzG+v}`
z?sDUmYHF==f9-&wB48Mh1YQ99SZw##Z$4!(#TcKY$qMbFfH31+05iE=9;8ehC-NlU
z0F!7yv++}d&>ml*=S5OcQBl3gX_q3hODDz808_oj3=5xG8@Z`WPF5DzP;t%zZ|+kh
zO-tqn@80e&Qn)Ot@SB6*WQFgi_UoztG^&qx?Y<97PO=ped4m_Gs5tQbPg0L8>Z_-V
z-H1XnIdK~!V;Z0M{^B1R<iJa;-y)TXEXh&gk(?*k-1g2CGCgn8Q=Ke@MgDN5_w>0x
zA4`gkNwo(4Y-8m74u)gw@9(71FCJK7T?j98#VVh=Y<;<Kmq<qSK6C>MPDSC*kYBC9
zPMGO~mlsAY`yP9%DSO2fnzKF|yR+3srFigPp!;~m!NDP$#>*z^)%YAzY>rc?T!0S3
zOq7Rb1{ae%%8@Gw2WF7K-=K;^yMj;(_1fF|fA;mlS26m-A)$Xs`~10B1uJ__Q&V%!
znbASl^%8iuqeT^bLITORz8Esp5={%QJ+`ap$)Er1O$)-??d<J4fj?YNpfCgi*%-cC
z5heS@r>KjC)BgcJUp^i6^XJb)Y414hm{Qe>pTo6Pz8J2GgNQ6jDxqM3LIwli-A0It
z)9(Urv)n=t0&n!%n2J4=3~cKJK?3$h=Gb~$`y23^V<K^W?=M<c<++~C%k8#9Z#P6h
zpv7(l5)x7%>Jo4UdC4*Wl0HS1Ikxf0;-c~E4PYm*X6tP;8_I!qIJFLv%`f=JPvA@1
za6#}3$W8^h-0+`Cr^lp*9DBj%hx6arF`Hdj2*h^R($X>nt&}<axjASQ2<!_K9h{ai
zVq@2$pkR4?dbS;3`5`2Zy|lR4b9?}L;)X-XZ1<S_-pGwyI8xNlga$5)E-8hek5~qO
zmGo3+L*iFpY(MB;*1|{|`xa%4r854t48U7HXq9CWq@N>$d$mZAkD|Pkva+&bW3|)n
z#5;_jA(tV8yrHqPjsWnrUQ~2&;DK|vgkQ8yPEIOsGy}+sL?W6L#oOB(_)Bmb!a1<e
z#)_f<b+M{S#qq=s8T8j33nR$SUnCNB_x!kVVAaZXe^uyr3w_1}N%qt@ZYQfS;3ECH
z*ihL=x%k^~wr&+~r5GD_td1hSMoDU40s&01R{Epm50k4>cAbj6)H>NWYn_h#FlG4<
zrb#b06BiroAwbcQ4R97J(Ga`hL_yKPR!2;KkVU@+@THt^0TP_pZ{WwDi2v&X7Q+6t
z4nR+>t*-|Hzvg}~<_td+qo5ZLm4DaPU<PA2+|P^%Nk~L>bOa!x_7uPgoIT~49Jf1K
zY?LMEvJB<(x#tDvNorK<=hT<jfADngO+laQ<oq0NGnteX`r`KLI3`2D)8xUxO@cO7
z4mpk2Uc^lT5dp#YE8aOfo<I0W!tGF75W%;Ghmn+&R5%g<=o)PoJZ?zGLcMLJ`6Mk>
z!XyPf$frm6><xmE+Pg~P2tan*i?J4W$Dp7fBTHPM(=}EK$AvxzqPM|=;z$61H2ulH
z=>hi@kPMHl`&Gc>LI}Vzo6Wo#=_quV{vh&2R9qYZ7}3xv<$ZxIjZDhvf1U;#lWVnX
zzy{H;OQ*KBHn@)nJS-lVGas5!<g?f;yHapC$O2YwXS(>Kqad<{7+$l+jEX;{sydF)
z9MqSCFu1|zzzyvHpv~#1;1h6Lh07s!4Mit=HfU75&Ifc`c(sBq3eL4CY=Y*7f|OX3
z<XnY51YCu}ffZpvGmC4#JA4z*417e~yW>UoK3O4s6om=H!Pc2tOSNDf2#c&cio%)4
zEhJD(>LZ>|*L9X~U=XH8ju^`367O*&3LT37x3^j*cbIJ0kOH~yA>frW4iuemC;OdY
zfuc(XD3V}dV)}unxdz}Wvzaoo!Y`7bcBJ@I_3h>Y=P_L$X6(khqns3$zJnB=)LM90
z>JR$C8hrSWYJ5HrH~zd@0n|yH-?~h*mLbppRzqYJjGw<4VGzma=NxBBw!p56+snh>
z2<BBA@NU?&vF`BTz!h9=I%=})=Rg?NBjrIyfR9fbI_Lh8HY*Jt9Z}M#e^N%1m}dEY
zWI|7K-xYGU9WIvT`BE;nAc;L$EYiuMuLwC|jUUe%!^v9%zRi?PX&gOdrW@XY9cGX#
zo>7fiF)T_KOdlrX#TIwvAp3Zz{oWsX5Kl=&#^-{Yt-2AXRb?ctA^Y3#IhPs%z8|s+
z%rG@rzaHdMvN`ld5;XwK?tpeJE=33(B4n_!-*9Y}ufrC4m{$KC4}L_)Gbldz(S(hi
z5qeHKmjOoX+#|9(oUG6dGQZo2(8dx-#87J+K8>zQdl9z4W3z~fXHI`b>`tW9U?&`;
zrL6nz%+G2v|CPl|S^B2sI!ek5oY+^-&85>=Dn63WG_Tp>eRM0Ir_a0Rosl$}|KlF`
z%?4v2iq!MsxT|3=1BO-Amkwadu5W7kM#KbsSWbB0X&c<%FQriX`^y((DkET~Mgh!T
zx`BvSu~d^Q?y3^_|5G=5<w`^;lxe>+582`d^W6vxyz)cP<(RYEe0rPGBlYs-%QQjX
z4_e281f%e{VbAl?iFmLcA0Lu<EbA^=1p$YqgW0qG=dX?J0E`ttz+gXp8byolSi+6!
z0Er<dTf-zR-go$5QXxI?0YWh0`T<OU>)U^fg=RzTPmhe><jXI}gZGq4EJz3l-rP<Q
za^j=Jf=#98e0x-}0xAr=>dEmKRQy2s7+jlzKxZ-{Ef*+Cguq<JeT7mU3gRS)FoBzF
z&;8B0F!}h!)7%_Ljsftmh^T1wIk(%PtWY-CMT->rvYjG8vioi{XE(|1<x{)4!^4AX
zNMBa8Uc0xb&1*TWUV{w^9pc3l@EtWUE2^qQ9`A4Tt*z6yPFRkQV}JeOH$g;>tpGo}
zWs5sbM7^z{_-pCgnB{_}4?g!_+8=La(#+euZhCyddWr|D50=3=Mm3xJhpUzAyW@5-
zK6Vc|FP0>;uWv9Ok_c|j#(fzS2Fe3qZ_aZ;tO}h<VXWELIo0C9jv?~+zTb3U9Xf@E
z>PdJywv&oc@>9e5zmflvNd?eU`I!+$4C1u1%U$aO3hcNt=8ZMExaUHzjGCZLS~Uut
z%o>_TdJafkxS;$N>6rI>ucz8Y8_d#gt`eq}f+kD>EP6LZcgu;4c8|BtVq)T*hHY}G
z-4ucZ;fku$ZVnexsn+;q&Y~L;1nPXQ@)Aj5Bv%w!am!E|?Iu5*?ChNn_725{!4#LF
z7P}Kf8IrnW8j%SE?iooatp1$;iCF~8M`&A{PpY-e4Ti*Scxf^<PArOla-XSU^&NLg
z<Zz&gU&qxkFTdLhPObU@A=9HSc%M&{e}~MS{w@5w3-KKb5R0`PAAN+v9}U9$h_CWF
z{4A!Id;V0l;8UHO5NE5TIIyxM=~l23F1|ATL@wtq)$C)KJX$9XoKdPolGf~Tu>UHm
zaTs%%XdXkoMR#^dOx(1^5Bd%As51sfEveb6QtG&A_jZ3=SI7=vyPfWFeek}C+)FiA
z6Z1VkB0CcB2+E(IH@D%f{w0Mi<SCmPxo~&&z-fvw<#4TxA?uz-8WDGvHR1>sjT0Hz
zQq9@`;ObCFY@sP(U^G09FB^~2AJkFGfzBi`7-WTr^w3T?XY=hdBGRgj?CK0W?4eb)
zY~(>sN>WT9iqU(22v#P@77Zw7{}Pvr=pr%v{vX?jTga^aeIGCH+tjGQySjCY9?!zU
zjidmvX|AxCr!O9f;n2enfx?*z`Zk}NfZWh4{k9({=;@8<r3_qEHf-z}VZWq^;N%Uj
zTi?h-r@oaUH#@&<ov-a?|D8goR6$v`(vI=<mrH}sF?mzHO_clBH`xxssFZB+kJfCx
zs|8py$8!-oYUQlXK_A{naRsgU!Kk+l5TIlVc6N2VKzz9U`*--e-N{8Sx2a?-Yh(W~
znNMg;mP)08x{(E%4jEZ2q5JOiTTu6;c*CMC)}6|=+G<Ai5%+EQcDZin;<$8+UcKh$
z+0@h=pQt^9x6RSyfw@UM4x6_mhpC+YlO7anMD$pY-6!9g{%sakw_B%%h1o1s<F}`k
z!RJbaNsLI7Yuy`;bV@@YPzX1+;W^<`L&neH31p+A@9piG%MTeCO=n2Ue~<blg}`Tz
z55YSSO0a#$B*CzfvQ<L{!fKYnK-N9c-7Uz$%dy|T#dF%3z;QfO%`zMR+u*tXerqHx
zl8>i6Tc?0L`Mu)@PKM7gVR2F4>-`5V8l}H~AaKHl+`5Xb1|umb&vZ;xoU60@B6c0G
zh=0G-VfFOq2*+ayD<xUPIz1uRZ4VdjPZ7G<;XwXJ!V?;ylViG7awBiRj7s6ErOz_&
z3siWmNN9m`CBY}^n~_(?2I72Go~|}s4ugblwtPXOnb;Nm^Jq2Sh->!^LjGa@nJB{u
zBW!eDq35)kSGveuT#YJD>~Uh$LgPtJ+wutJtsX{Nw)uU^b_92eMv4yMU>w|r6ZpUQ
z`pU2<!>wIKL_)fyq&uY>grU2;1f)|+>28M(>28pgh9RZ9OIk_kkn^zj_nklIy3T)w
zf%ko4t-IEWCIPn>g`gH|@4<yYPKk!bk4Vvw3b5wLmpMaxaET(%Ncg+ve2^mW=>t;b
z46@hCXleFP#b-!`CO{rf)Snd;IdAS<*YHgW+cYo|XR=_T#rrN_MMEwzK=BtuT;g?X
zR8ZNBZNkTeHyT_F-M!s#0&sAm;^wx}7y;cZw82&_w)1pB-8X&lPE>RR++~`-?4&V>
zTU$+jx1+u5j}dD-m|^c(&_PU3GV9MC8Bn3qZDJdiipJWQi&_1R>3s&j>V55J{iDs8
z(-rZ}Y&p_T^PiZ1Z$BZkPg>U40sH+Y9)jY~9HAd5{#-1=q||!#U6}4XHMEjk;MHGz
z@Gy{n8;X@}N(0i9`+!i#SH`b*fY{6b!$gBl)G)>Pq+*Y0eqDZ(0RmDrL8_SJvVsY?
zFz8oQ=yC~~d;3w<n0DT`<<cb04~ycj_=pSI&Pk&j3jEG}{Hg-pSx{WTP^Vi-3kIc)
zHBTpeJPa`he`2h9u@`Ty%CNh}#r>3Hhfmi!xj(F?Z*SJ-*=#faW>2X5d@C&mBk^v}
zj3;^2$ZqyGYfo*ZEV{mW!z~K&4jJiu_Iqy6&QXgH43x5&>5!XzOjDBjdZNyc!=m~~
zzM=OwD8@6Ydf$X_pRKLXvQ>XZ!J*fE{VU4i?e)1+Q$<~WumCHR*1>RtuzB^E?G2}u
zf6#R-B5#w_@S*SRn+QBc=#G~Xi3og;i4c3g8zF;M1=3G?Gs%xv`SeM}C6xgI!N_KR
zs9d7nSO#=UM##Ej4pietLOFuc`^J@W^Md#GIHuqzy)JMvBTln~$?vVGZc|b=KaCUO
zD65D`e83TOKkOFAHY10`HGXJTEr^3qv%(T<Egz^Lq;7hV4GM35J@m)Yt?0heayxwH
zNg?YDQPeSw9WR?(uQ6^vk$v6n{PMzP+V8Iy88JF)FH#jOpnR55b94XiF53)QOj3{3
z`l!fVc1|G;@{z`$Wn4xJolWoMSLNp`0e_bo!h~%aZn}n7$%6?NvLUicn@Ok#J)V88
z<R6cac_Y?G(yNap-bUHtQ*I8B2cxZl;_de_ekK&$UPc&ApRZV4KYemKUKIl4xn-e5
zpds515xxl5iBhkAq0+t$3W+b4X;W@6(|lLj$}rQdir>i_?(60Ae#f_56kA@+cX;I8
zG7=p{u{||*d9Q{mY=a31zwE%2h}?93qpY+C)~tH-wazxJZxuMI3^U$$k+|Av5Q%AJ
znbyV<1t^le@T8BcFU|`wL5P<amBo5@=WZ2|uC&SCq(xL`wWi@=7H4;L0h28X<|TGj
zLyRO%fAm)jwcpE8!$-g_il}xv_`G@Voluoc508f>VfV*CQs5wdS^61?kO?wP%JBWR
z7quyUc=ZQ?1`iaci}k@WaWK_l8T;W?Y~0aFZ8mtvI?wnL>67f1;pLLeH{*}&bbBVg
zyn!1t>O50OceJ}2yUF&&Equtc+=^~%k^IP$D%;bCxblOLbqz)n4yBSm7)zr@-c(m*
zMF(dzyH#~21{aw2lcbK=zdD7IY`+>{*jPy*JatxN@D<~Y>kV=QE(=wV1_wjol*QKG
zT8Nd}(krFRY_}{Qk9A)R7kz`^-CYVb>>J{+gxc=}^wf0rpwAGU#Q-CzFm5PH0`{t+
zgeYrw1f36<!0A3eSWA$)@#5z4xFh#Ci-sEz(?rg@Lx~%o=)9!BQScBn*&%!ulk>H0
zxMBY47|NqWim8~qTt-v7D|76@1d)}J$Lt;0q?V-)_emBHWXo@i!8rZ0thIi!kS<~;
zANS7r{!xf>t*<>K@djSd7mvF24gPRufP!I}&%u?_Ixg{I#|x+uX_rrM@^!0CnQn@G
zJwe9jb6k@Rp{2S0dMUE;)&_=e`rhL;dJYpYf+SL?fYqNc3U)UY#>FL&Pl;e*w%NQt
z#7E@!CRXc1y|Eg-xhxykatOkplwm69=K5g0%}C*%DY*IQTW=U&6NvF|-9Ex;km#)Y
zkO1s8OKMMfh6pg${DSuM_E2vFwZyQ2NxV|OH=y3WSh<qv_3fqP91`~F#y#KZ!?uq6
zYd121n8Ei5j~td;v8GhGQ4>s6G~7vP1Twf)`!2fu|2pGScGkmw3N)JCZBWveTFJo%
zoL;=jE`qX?z9JUO33v%>Y9tj73Mpk+zHj(-mLV|TKCRQ*F|$UNSFs~a4N<+DrG%KK
zR90%gAFx=<7fjIcWtbcRMVRZiCfuh>TcUGn3LBVQf|Ip2lk@AC1R|h~M?ra-@nZB1
z>SZB#cw_Ix$yOS8vA+<$IA=b&?}EBc`P?17h$w07`Q6{I(yBcq(*EO|OT6>cg}%>r
zvij*0kfKY4DWPO0enGFZ*E#t1#>yRv-wA|Q%)lTz`w!m_v-3@<gi?!W_eB;#4Gfz)
z2`etnr#&cnUPvq%$Cguv_O`Z+Pt`u}2%ENu-{9KBw>XJ~dC5i$l2=PWPg(6uko1r4
zP-I3vXgy=44)fC;s`RZHXWLJtA72Oqi}cn9Ctzzoac-qHKHceSg^76F)j7mw+I^Z7
zD3@OZzkozj5{J@in`#lN;v;eP?_GvTAoK<Q#_SaQ)=&l!Yi^$7btem^SBCEBKxf`7
zcEgTF46He(+Ma#v&>E{NCw3a#sAl&&ggPQlyeuJKJo@goLD24)*o7*t+~s3XqJ|zs
zU^oozN;fQ6GRKfCz8YhG<#Yfu8Rlf~Op&nw6A_6uJr6rmJD)`nPLhbtQAqA_E(EqT
zW)~V_-k{*%n0`3>1|3wgNquPLoD*nu_{?cHfd|={&HdRj&l48z8Ix9jfDD>!<n^Z;
z(mN%!qT7BAlI-*g^T#I?hD6pZbzY0~c*-I7J-Ub<Wi*)~Y8jCpp`E1<rC^?V8ed(R
zW^cJu$Th|lX6c~-BDtflv2m&C)&ZX;MSsD{G(82+R?SzJJsxug7Q3tW_eJoo>1>z+
zNi32Xr5bF`4T;x+p3jM75Z#?aG#E4`{(ZTL>;6GMW^PTIlR7B$uFsU6;~m`@!Bao_
z<_Xpc|B6LKlx`H0O42)!-bj|~rY5x9(n?eyi`N5!0odo<m}l>fr1Z}T^;^H7{CH8c
zZlG?uC+{Us0crPgC8mxj!l4wnObfbQoMD?{VvnLeGJ|8<tq5AHeD>vw4<49OA~&Ya
zVb!wsh*LP~+80>%*_^}2>y<e>M;q+JvSE1dfW_isN^wy#oN;O#^~vUp&6nFV!Wk~E
zsUW%BpKZWpsIDh4!kx+tkuBwmE9#8Z6sun*`)oXPEi3Ed0d5{i;lH~=F8f&ggfac;
z>$Mc>=aVDpA7`@tukE3R0z`Nr?S*O>F8rrg9G(rzxYGrA?@mtk)#^xu5E?HJ#d6@n
zSDDW^@hA)Os=!Uvo{?TdyDoUPH5h0WFBK*THKR$(u^RcF!rqVea1M#kk3%{=?apK8
zVn6GvXFLDB44>1O`Rg`OPMqL;#YNnMLUn@B=y-<L<%V6ed0rN5?~OOQa~zE$bVY?M
ztrRWid!ZA*iV&S@Wkxu{?oLP<g&xK=8bwxHeZnp3hfH?#KSvQ;Qk*Hp@p`RqX+Tl_
zYMJIs49MHHF=pU*`>wf_|6O5~80DLyrO1-?*{B}`$Hd%yRvksnz%(_6;vv>c3rQ~I
z&#Q!vIAHoOhRNt}TifwgLj#Y)#puCEER=T6N&}SNJ4@MxNwW^U(#TbX#4+lfJ5poP
zSTD>BJ7l~Fz-Yyn8~!@ikA^WX_}%d&oqg{ANp^^^thGlo$DqyoY#~ClM-{u9JLjcw
zGIP2W>+sLkseaE?R-80Yv7c$72U;mmg~eT27F4cCdR(4QM8vnht@s_%D=pcU_um>5
zxJ*UC=nytwIWxji#$lga?R{lPbhT;r1&)T`wckt>`zCrO$>*3Z>n;XZ`%+uE$^U8r
z9{jpq@b{Q>;Rr@~Fu(@z(O)S4P<N{7Fu03BaTwrHQe0n*zLR;HTlm;Lx<F*VDsX!9
zSL^lMZ-k|0h&XS)Tm0}J$BSE`JvW=^;MsVX#}=WC>4%!!V74AFzTB*i?%R6qz1cN*
zJ6&$Sk@8a+`4>t?5}#L)!kTKx-r%ZZdYvK^>M{3Ze2yKjH*;xXVwW1klI&&eeR)ZG
zvRwUYvA#50tnE#1_vW|MkdJF-aF@1DA!*iDr&QH}M-s&IHTvb$6{oAP_P`NSciR<D
z3B>PmJ4C<|#jrPRgGCCFFcr;0o3EJ=JJJ$~ggT1^B%ln?m~O3N(^gym)C^kr5o~z4
zXp*`uk3+AGF?YNcI%q1eQ8Lr^$!0iRP-ctlR%4W+be`bh0Jkt^T&k!hBp2@2nL@kt
z^*s_E0s`CK96r9oYEWPiPXnJo1V(|R{n3fQ7x;n*+#U)wv%P~oDo@1!w;N@Uz;%(L
zJ@r|!)(E~5eRwm2?aK|ejuflI*3bnHT}jK7SJqkxlFDj+*Hlr@N*{#EiMH0!5c$G+
z+nE1LN`QeneR6y}OuBTK??WF5Eu1GkT5?CkxSSdu&r=}MZ})z6nVI=9*Wi^N+I1w=
z?c+DWU_M5J({s<dCcLDPZ{cU=KmEk7l07`S?e5T=Mxx0$mA3{dmYN(yG_URZLa$>9
zX7fT%2y)n(>yDsxs~seyXlgCgo0$|Qs}sw_%m;IFpE5XEAIN9T;-HA0zZXlXHFfk%
zrfqGA-HaGZvmtFB{wD);#HdJ^R{^^LH*^}UyaTm;T~jEQ-7JwJ+WWD*SZwi;(DS=$
z+a)(d?M9Y;;eBosECl!83`bI)M1Tj#@S}(T{$qVu{ZD)tLg`#7N)_`f<sapxbQJIT
zum`2p>x?#{8D^|$BB0E!5}8urDvE<>3T4Qr)ly_a<c3}qpD@YPd?3hB`_&(9bjE-4
zEc1K6QBx4>VHJ8mIDI=2<s_JV;cjoJkhbPMCCrYON>!&DHx;)k&@_jxMtgr%yZYsl
zLY}Q&LR?(%z#30+>RsGzVg0JRgPB;)VjOWQ%pZRIyZKBIP-Fi=RWJQ^{aFqZ6olLE
z$gx>MfP^y=H4GR$G!qXPp0aL@jO@uPru$e@7TE3}W2SzZ7I9FVNdKTFi}^;5+DJHo
zSw}T3=er#dK*|m$PP<e6oUxu<x=hT>VpSa+k{Fa@22C-mfkh_AnwAoRJ|U+xk&dp9
zZ*T^x;0|{JYr35fK=`m9J)WX?tBrP52nMA=lKlG#ieQYt9C-GI0uwa`YE4zu-TT?q
zRP4?xw<~N}hj0Q!W&mgp*a(>=5NgFQFN_U_9A@q<RMcNL{yK}MQ~SaD4L==;{mdN3
zKF{xEdY74ph<pNhdGY=2*Z{((vL5HfkN%toI<N8gyf#henK#0(?|W?$$|hgZV81dm
z&Wdr=Zg_sY+P^WK^J)IC(pyMO79(sBz^*7}G_0Z>hKCz%7MUr>8};7B`8gr;jmIjj
z;-7&OK&n!|d6Ia{suw~mgo(W58Sg~*mS7e|D{}m-K2xB^_5$zvSeKl4a0x&NS4j74
zzT6m;M!kIz)kH>j)SGhD!7o&_$Kl(=a)-=fxhvSeyR$M~EQC!`M?@Cw07fR@boFqF
z)=s-#oqmtg{#=bq3c1;-rn)o6?-_Y1ECimM?vL|iyk{~hk(goR-)P!j(#mYMniYLZ
zU*Gb2c=pVClUT%%1bWSsnT6EWVsJA91R))or(EY~k`nudI<rZQx^FL@7M6SoAOneO
zWq?1KG~4n?cgm8|Y}N8kOo^KQU&J7i_WoS5<wF@a@8%KBW&S`C*w0wejPA$e5<D#>
zYQb!cUcWUZGI(RgZRW<E{_u`paNBK3Z|I0yT626MIRD|+wfTuO`&)RwkkERw4UYx0
zUI=O=KIP?u0D<-xE-95e1%<>*wKLLkl@hGJg?VG!4xdd!=|j?q<C64)JM0UD9L=ou
zVzq*ZCZ87p0UJNeQS6Ua0$XB93$%+QUdvzK6OszJnf^=T;;r_=jliXk!zr|D9DTox
z;sS*4sLagDFQ;X^0@*&_^M1Vgjh+FCW-s(Lg6{r4S$M0z*p7-*$b1@=FM?Kf^(R9;
zHL=nX>u(lB1RouK%MP?V?r;$_5LwNKeKk14_OOt&9}r~L)$8ln>yx7j4B9E1Dx=<Y
z^I?>a>ZMU%Zqz523<ST>K;uhI%1Sl94z=+9Gb7Fvj1kq*;KE@}yIwcYm9uHv+919-
z#{{XX@Cp^ysuk}S`QEjVL_$*)68hCF;6RV|cmHfPMU<OLxy|d-pQT3h^IJwWcy{Nz
zqr7n<^Ki4fIng4G_sRs^o-Zr4TW~GkS0b{<M!_2UmGUN9Wk|>&ZXcK6Z_akQLYqAF
z+r3^XyqW0}@%iaU{>LJYV4-eB+VyZ++(Rf190*-N&*Erg5>5I-UQ*lLAC3Xh7w4t>
zv4QwUDksOy`R6AqJF(TZ=_<`}KlbEIw@%}CeY=}`KeLCt-U~1<<LU9-rV(uS6#ddg
zc|7nY8ex5*t;clqp5dl?+CFVhWcK58aNRu?5bQS!yd62k<M((=b^hkd@=l(c0&`b5
ztly0GJ)gV)(Q1`W!<Ow^h;VoeUM{7EDDgyD(TRHgvc!fGWiZ=c{=L`8#l>Mo>zN=s
zCMUcGgK|)h!xQuMnP6T-gb0nY$e#v0yL8UJyI3-nAN6RJe-@u(B~tNG%4j3Cd7+Y`
z?4VS^))}>wJ0PgMRaaf7<I3Mo&T#t8+f1o5g?-V~9yTbhRx*4q#oj9@1l4N(S=I=m
zZi~J1OKjH*(js0+v-4rAb(bcGa2G?*a>RZjTx<xM{lMUKe@QHPvZFBXPJsbwh{SZ-
z`q~}puq(lSmJr*Bcv=JoGdW}^n5N-iQBu#m-~CaEg)39SOo$YHaf=RX3w$)*dyTT8
zAY)3p@PkA^MXd}=pW9XzYkA*0tL<*R&PNEXQYYg;NZhkhwFPVt%88|U9Ck~^oRi0%
zY`Mk>|FT5f>7Pk5HKSW1k#rvveP?Z<yHE)^nNevhN-NfWL2O^1snvmai?&0G4VC4J
zPmDE>zHl#st7QWodx?1BU;}ww<ZLPLc<6npqHAWylsuT$7HJ=GD8Z7yB9c)7w3+5u
z1y05jpXDRoDlAC>cr1zxgsNb`{NT_jKLhj=&VP@5`h+wXU)IQDwqp()+xRiFAR#Kv
z82)MmBMGyrtytVU4$qX!pISBI*{*uRdO?zM&JaA6sjj|HD3T^b-_87U_NG5`%(A3M
z7gVM@?oL+Xn1P>=T^00oe({E<nED_6AR+x})R%`HlD<?X@ek7|8-!LIJ<luceMC0e
z@xG(3yh<_N-?WkmHXpFz*t)OJf=Mq*?aO8aS>~^(9&`3HYSyuZ5Da5c<R@8prVyfs
zo_Yv5j!L)R_{zK`3WL`DGbiHdnlw+Hm%ZYy*!U={5JvWs$4-_DdR^6B=Ziy0y@?T>
zq01$OMRQ>}g7wmgp(HtU|73&WLsDPPvQ$EKhP>*CN|l}#G<i>olALqz3>WGW{{M$-
zXt!BZU4Mp~ewYq7qtMTaf_Fidv!BWKi69QYO{#?v@~6-Wf2Htm^N7?$JX;B?{6%Yg
zxZF%I&Sy^b!jo|I^Eq!XRE>pss3m1lNSyqW)rtVcVOPwfkI013REL_>Moqe4vf0_7
z4>d$M2J9$C!U9rW-@_j#*7?YVk;`*P=*B;M_sF{eo`Dpbe)$;qj);d!L8`g6Z#XqR
zK}|Jtjt|r|6M!e?S6pT=dm>c{c#aa^Jt4pE#xmST;Bn$a<>g<4$&D|)9x~_y02q?}
zcY7ofOtL^cmio1irp;-Il_}W)D`0Gt6qY;<1v!KsZ*GWZ%B=4b-o*(!Ohd>XKD+xV
zmLbTPQf<5Bf3?ax4Zmre_4w1d`hr#xGYw6McJt?Nmw^m{WW?sx=3`z6+6-<c6kpK}
zHksJo<jn(@<4+{f&VxniJ51=genNOo%!zx-8esf;E4)W45YvOL=KE%Hm66lK&I{$<
z!=Z~?#AA76B-(Utn-WBs<RB|G_Dlv{Tnx8uv^NceEU*EtOo2(_<D-ZE;{1{jt*W(%
zhm=uA*vQ`{r^gNK%c%Pm$*g#hF$6$vH#!9K<a;fAM{IW1P+zS0FJ^=rJ|gl>gw}aS
zMNvRjUf6SBeT_yL{XdBRA9d{FQ2UjrWCzoDAS7G%eKvAto&D*nD91<_X0p3IK6w$8
z)iA8ukt3Xd&wl;cIVVToFF#7U^T+((36@IlH8c?4B_A($T^59k^fcVwnbpk@m%ya0
z*SuiTucu~kZL%Zc;sg^Sz950Khof1`mN271ThKh>q*Q_BY{AoG^B_ZjVndj4Tg0xM
zM<V}O_Hxt%znkA_b<Sq3P=9Qmc(XG&-hveKLS#teYmQgL?~Br`txHxZaYi#1+st^g
zJBr!fcylOw%*MT<t#IimV{Cu8V}1`nkk4Wiki}F5v5Hl1$$taS4frE-l@$=sA7rAa
zVlC2VY}7m;adWi6WpaX2+n&)+xQ;jIvwy)VI3S`ry#p+1XRL0iHP{=55sGi$ZenYu
z)b|*z?KcV%0oY4kR1r+L`Vj;szk;xoKaGsa-~zl!V?GhV3SwSupm_D6g%msJl}Tjb
zVs1+0V`XBoiUPL5EkXE~C<US!Jkza(XRI49WmcoMG@89u-1G(8ker-O!D@?E*qGIu
zTM{#<h&qY*v(_R+Lxd(yKN3@IWE`Q=<JG-9^z!sHt9seQOZ9nrEE%?Pjs<$TQz~_L
zgBmtK7^yK6oaI$<k1M^SohH{v6yD5+{5nI`uD5T&z(bA3kLczIb#DoX7~}jXL|l<J
z*E6bsMyK1(Y@tL(c?t1k7vlMY>s`6#^>xSNg_L%-eMV`DnMv3cnQ(4C<dr`EVPx?h
z0W>!5HhzG?;nz3lnXo_E4p?<mxSe|(_JZP#_F@HR+wsW#wl2;RH)tf1P6R{bGR;(j
zEm4BFQ@;pr%((i=dI!X&h9#*b8F0j37N{?|V~DT+>+DqT9hh+`m&g<b6`O?pfEoF2
z(20vx3)!X!b@ozF_<W5k{egN#0JOFOwmawokri)>&%*I+QW>bADo;N{GhE7;jMVF@
zEYIKGl3<TJ^BT?I#9Trr!!sFly>wV@Qy@Q+sr=o>sFiL0aGU#eWaJfkjmv_nO18yM
z|G@c!Ex)E~cuwN{(BGfkx~{TbP&CqC<eXTSevq9DUMPlw)m9fWeMBN+Nn2ch{Ps*Y
z=4eSuKkzmw$pg;=Znx4<p+>P(UY7LR*2)dz*uXSwfDj>X!fT5zi0l$SGuHwwCKrye
zKr_3W56dZul%wt)K|F=!*8Pml$>s%7`S*WS45h7=fa5Hn9QzNjs?mo?mq)NqMhs;q
z81(Xf{KpFPlJJaW3j>LaS7fpMFX-_7NtrnTp;1Y>y~5`IN6Hw?Cw6pqf7SMH6h|y7
zzne9B>EM^u77Ave0>x6h9ZPQ7g?3)B_HlYstl`S1_1#+djaUkmvcYT|y)upWavlP4
zmcLThe^QWb0k>8zmfM_9U#=-Pp(p*nT5rOk1eWIv_U~3XYdqlFlyGZ*mL+0>cOFP@
zSdN&)WDwh{Xh`w;b6A({#wWh9vkvRU1RGVk7M=z#*1q-U1`;*j3M$)8<<ra}lPd=7
zWIn&EcZ3~1(84V1q=qD$f6if|B$fBH_S$bgV7~V<{xusYE}ws}Xcg_gIsI~DL8f)!
z{MJ1r^f&RwhKx9E%^f@ZgZo?nlQ1~{@zfuUhe2UBc|`Ze)3Q?~fkj0;h_9-)2J@w;
z^!!_~kf?}|@^pv5G+o^eTuS=ZG-uwVj|;ju2;^hHMLtEt&bD)rP6f~<<AE3P-6n$w
zu18F*<n;1)Qey)@8y!%Tc(5EH+W%;Cnb^3of-Q@!*$#sRd3(pI-Ry!Jsl%b_dxdwf
z!4guMig0+9vw!8&^(}~Fg{82CF6UeV8BY-z+kBh8$#IOGJV-<UGtPGf@|h1?MQqj$
zi326lhw5h~##bEpoRw;NL7ZxeQiBA2??WSGPu15g23%3#GnIxl<mUtp9JaVpXNBTs
z?{MA-eF_gux$|C@Y8pw8RPpwDtW(6g)SIbdt!!4qXX!Q`C5AGr_kV+mL_ia;oofSy
zZk4zKANSvxwyBp}mOYZY+Rm!0BPO4G4JtM|UkX{&V2Es}v&Rx0oYGnC11pbK)HL6B
zAS;q_a-^@qnc_K?CeW%4hwD9VXQp#n1pxVGwqzvUa0t@9gr5-QP43e<SP2hwn}KCo
zRRM;+mJ#4xyb<xfWfFWP^NdNW;X{PE8XZTlj9MlvieNjR>iIi|Rl#EAcH4*p|E&k<
z%*4`dS@REj>UXf#FO&>6YV-9Gva2|D(oFf@<(Km@*)Cea1Tqktx0GY!WXu((#j5VG
zJUaDRRjDqxoA@8z54WhNNLg_~L-I@72nYZ<elh-GfjT`58svv;`V^_YMV+!NOhXmM
zFf$lA^MU)jyOUFPM2GId0bR;t$LHT#f0cV}7)tXr3+syEGM7IxC4RY4Zul^iWtZA!
zFG;{k8vz|tdKqE!UHx>k+vQXX0{0GADc2@)5|xT)NJ|!X^Y6}J{5f}ciYqHXg<ong
zYRaG9F;;x0s<@I_&gY{`ro{D+OH?tT{qbsVHK%kLDN8s<dn2KvL*Xzf`@=-8xNE`q
zne`7Lr%!W=PYgwwxr`7CsBLmK*+lnwoyzKvg1{X^Etm9`=?@3Utz>ha9z$RGXX+<{
zNg(1QcraHLI~cF#n>{$-%nevhm&=>KN2z|xNZNXOPx{C6TLCp3_A~e2>J4KVnzr)f
z5Qe3HRCho?)uqTy6b?m(#3WNv`+uW@wDWpnNh0GV#9{DI!cDLm<<5jb5tnL!%kU=r
z75XgpzexVCwA292mdV;34TlGjDG^{HgoiQ%@85e6d+$tvP;w<dN|O)~nY%up(i!_C
zaI*;jwRkfY095^AV$k+3+<`dj7;$jNr8Hl`Fizc3D)m3w4uk*IcJP6V8C{A&^#lJG
zZDa??wt&XMpS|G%Ib~Kow4AxBJWD;2R4<!C%U4X0!ce?MbGTHg&YwT!!k|Au?Bh2k
z4TitDNgNJ|XJqueyaZ~6@?sx97T@FdFe>vtHLc6glYkV_QHrNjK=~|T67X=$z_SUu
z{`)_o=XfzAJWBItiJ|g}Z)wA!U(SYr#z1;oP-|7=@+}C~dP~tVTV;eUARrJ0^7%e9
z38H8bl99#cN=9x1otq9Xqf(*)&>W;1C`QZ;!Y3q%9xm3`*e!8Sm#FPF3Q)0sckR{e
zu<J)n5rrVa1cf8hRvOLo8Lyx({U0NtX%$NYrmm#%NdJ{k#oKK=Fnl{@z9pQpfa9Pz
zA!*i_X>tsS+B>V37kvY_^}yq@Bmbm$2EO@X-TG3_6=!*(TRjKxI*NhhIA-CUgE~L>
zuVwqg^?>s5EhXG}<Q)))ZsK1bGwrNiu5k@=XH88_1GP=Aa!vpkZ0yjW)A*gW&UGds
zaV*ih1G%l^c+JUIAhHM98-o13>Ey(bSkMCl0)gxss^GSf?;piyqESICV9U$1rrkl|
zg!@C@&IJA)|KNbK_0O<pON314>MAK1F8yRl!?%@jljsRSeGdeT>|n-tuOP2s;_{O~
zgXdh39h6f}PEK@cg|GLxXcvHG1LW1eJ&p7{-R$MF`rWDp#E~hYh1k4qe^Rb{jz=>D
zQiU5@5vb6CG_-QS#_LJ6_8j~Shp1mfy>bi;jJoTZnbEk<h@Xls{o3JmfgBSP!$<P+
z`0*8ZB4^ZH@F{-Fh+wL#5~4HJ=r&FsEB(XmMPNw@Juti_sWpt;eSmvXPDecphsM(=
zbOR-vIk%K1x;~f%tKa6uRaUfp1LW-B?0buisLUec;NVbh*!ITz_Ixl1v-TJRr@0z<
z;E094@ZQ-6Xt7{}FCBtsL>~fQ%L)G!UyLO(WuwS8ME~AMdVpwhe4LHeHuY)%NS?93
z@;%3*q*eTe=+#-kR0zTYfu)cBr<(^E_<Pv=iKU(d$D3jcdlPvz#$5r#jlP2+AXh8^
zWL=SitiOJa_2?qSC%HYx)9)gB&Y)jwGsmLR30YvKqeBF{M7zfH<*vNSWzWvTlODAI
z9?*_#CIPCR3xISlNXAeC%slucl0Q(`L^3S-K0fe(v^-@XKTaLa+Y3x$&_D+IS5aWR
z$Mr60ZD*qDH2r|ry;A}{BrWsg#}5k&d)CHKn<3&$3X&PI#kYVmKhd+SmFGY2FbP{3
z!u}mRf+n8_ucX?oC#meyWBiLWoGGM-Q+a-RDh5{YJ72h$WHmtJo$}5Sjo<B0@jB!7
zwmCI8;A-Qz$9lnHK!!_7N}|&&C)m@_iOz&`+n;>d(9l339~k{VOCcG&yQf4?kY&i>
zZp;^>+2UrmA=&*TaLxkbF)#m-6PDRN?$-WA<ntGe#Y^j`uvQY^N?|vv27>h0B>d_o
zHD6vCA7B+%|Na$h?hEJpT-#(8C;=@VYqv<){B7m@V0>Pxh2<0^+mIYuzrMacHV%%V
zhFutn<<r`s;{flG{`C>qaS^S<t`!wP^WWt8*W$;mqZxP-s^Fge9~CkbligpQ*70bO
zGJ)y*3UFR&AX;#WLUsrSg9iiK2hQt1^!Z`2I~SO23=_ok8^h5fj$d%~{t^NP1%oGx
zfe{?e4_gb1kV=D=A$M|)ln0=y7ynq$rUE5>601MGPE>!OI7MdX5ERts#vU-425R(8
zka+8yl3MfuZb<6skP}doTvP!Kn=a2o<r|I<h>LYrFKB6LB^M*KQ6izp?o_h%Z-HX?
zfY<Y#{M$P$U||t{It#rtxQPTk*uYTOKoDuiur%u-^0ZQ)2UCDT0!*+N5G!ZW%!8mV
zw|nd9H1ymV!#O{hwDeCIAGY>!L27(|EZNg$PhiwS%goF~?hWge4(3NI(0d&Tm37Z=
zC8zl+gj8Hw3R*1rdkRgO+Un{~upMhG$4Jc=@s6Lc9-8d0@ChnWU<dL8wQk<mR!<fA
zw=I~)>>Mo_+LyWx5Sa8JS|}<JLPX(WgI#*JZ5sFrKI8&@MDP`!<*oEIU)vDBJpLnj
zTI~OTN9g_nzo13~4cN{)&$fSJ;@|{z2lLHEIDca}e!9;jX~4S!L5-(-6O@vM7C&bD
zOh5c^bTWI=ke*>s?%y3=`94ZkE;rw}CVcD60;NcZ;2oI6Uc#pMdO;=X%h@>}D5qlp
z6!GuU8aPUfCTO%OJA9WewNTrA9zvFzT^=R~&i=@Y<bgltbJDSYue4_-|JVpPJ>FuF
zkT7@G?rZ2UfeVhGpC1tkNesxp6U_Bm(VyP6pEx#<e=;NhEwgscTxw>oMwzC9$9yf=
z>nFSLTjUVZ`C3$>HccSeQ&V;5bcladUZf;H(eCtjR(rh~L8EjAwz%!);dsnVY~Y<w
zsy2Btefr)}pOfe=)<||Dx%JFCX)JlO4G7EfbbdBe>o(!wa@I`>X(|3bDKe!xP2+W<
zC_dQ+aj07{tODWCvgL>BMYC7-tBOp<b5f1WNy9v1(bj2J&fgm6QK2fV>l^&EJ>^wv
zU!DQ(<@8}Cn6v+F4Tn;=MU%G^ZK>9bbnQw_r?TsT&`r@;I%j$CcqgjWWo?a%6sQ4f
z(5-fEoU#Fv;k4y}=yt<zkpiZ?0(A(c^)ir?`^!^1UL0ruYkHtz0oNl&@5n2VX|2`N
z(vqi9mL!|{LT&Ng(9z)!9;LgVa&BuxRar=Mj9|~AzJ7hOHHclXU<xK~J}Jlw7SJ7n
zkOtyK-7qN|?et$&)w9g|upzFUk~kQ)!L}w|C~In<t}daOjC}8H^1Z_QrsW{dGrATI
zWfW}4k@?GQx;)QQ#b(%nKF#>C(^5+G$L^373CH^=Dhn{Ap)(SnwfggweKW-{i|H0<
zzdlaQVDw*B`74%%G`al}-eJ-W#AmParQbBKC-D5;9b*)cC#4jW>ykCt<ZB)q_9j8Q
zz11_jP?vwihWuUy2aIQo0;o|C!A*-NV0C`m^~S#g8$=o&goUoJuRrrjoR!yyn~-nG
zts7}3!IsANcbOwKE6{0iz1Zk`y7IF8I3l3Hjn)M&;cfI}txos^KfhMkfQFo%N|E7v
z`0HcI3*E);o*Lcg#p}xpMom_|sFB}uxgO!FK%5G9-cR5Ulg|3Y=yWpei++HwlfGfC
zO?Qv>O@SOD+~khJ{Vv++;eh(1MhRNkOSy?^D>*0K(0>a^_$_=MSKN3)w|iZtM_Atk
zh*ALaeGEcmAb~W@#=M?CPNL2ieBhZEU8VW$w00%mDvhX_gvUH<X}IZJvf~r(^A^qW
z2eXYWsKv)$pdED~#3q`OWVBp$E%!14Ed`wX>x=OMDG}RKC+r7iJK~A<+RE!kv(T%a
zg<0gW+{|pr-<K&ijd0uQGc}(A1u~_iHuirxenWaKdgz6^QQb{MEt{nHDN{T+a(z4U
zBSxN!7_Ca4o566kVSw(Ujvm3gT9~xyd-T}{U-Gs8)dGN55d`8Ve;$s;CllPzT$0%0
zwV3@LrKHpNP5|}+r0R(OEqae+Or|!-^lB9ubbK4t|J$VP*oQzqEp{$8HqWDmB4F;Y
z1@p<x+nn@k@{g41R&TW)oi>{Y9H9O4Zn>(RR>TvSRB$H7j7)~)0S7L0SX!Os5P@(}
z8d>B1hYvx((gAaI1sGK4Tdom-`*ZXQ_8sXgo|&Y8mb(b7x3_0mLL^w4;Qx^g;Je7e
z1{`W~=)uwXviho1hPP^&>h{zAxV|HOl_o+a(PhNNC?^s1j37=@+j!TD^anJtyj+H%
zvZO9BetiC&s=fOgrQ!cnS=YC>o9kVH*;-c7FzG3ia3#Bi6j2Lo?V1}-Kq#Rm_M5@!
zi2A_>fb-=S$eGb$)0>s=0>W>{9UW(c=bqtE3+&K5t;Za34E@F-6%T$=K~LNzp3hxA
zUGh!k7rjgKJSirE$o=n+H~tLfX<LY(PgURtI+sZadB4`$4R+M6e-4D%a#)myNuJqi
zwFkwTWoR_1quu+RlqWika8mD&)@ObaoZD)lyVxd+y)R?1tr%fj7)I`uOTaPBUlS=Z
zVapeg9?&~%!v<b;fZE9_iE!HGQ0{npJff8sM&obhk6>wi)hgJi&NLk!(y#%NZ*5>y
zFm39R;4ITX`#EPPIg#6IV)^dH!v!S!bC%e+RW{P$Z8W<}W*`P0kJpdQ`wILp#Ew`}
z{zU>IA7s}%w7$}U$de-jriMR4;fabUFdqfW`D`#JImN*$U;`n3>YL?xPzk|&+sg<X
z<`5^yJB%;4yvv%4zq&KP(Omw07%0<5yu7^VRC3{GD-F^$^rYEiTVc{gxJ1EhmI4kO
zXfNS=yf&<<VDMnMiKLjcz1C~R4}|}T`D<qrkjPKAo>H#8SZfUi(<Vdr4U&c25;xUV
zX`U*Bl1oZVm#(-^Dd6e8nXW*q)fr7OW_zajt}k2XP6d=>Y)pkw-8Jz!+TUG;Rt5RU
zB?Lwm+l=|05Z`bWhZD~J41NXlrAdD^H@C~?^Q#?hukO&vYL<Px;-sZbt(qAOj5(ax
z5H9x-L(Pd!j=YH#NpzE`Aolu=&zhYdk^|#{`n!XXv&9t*hBK_fEEEomFYh&q4e~hj
zljL87mu_G}PjrQpN<F2wNF2T+{;i+^Z5gZS%7a%uK#Ex036-8IaD5~uy#{$4BH*Bf
zdXazzDLR74!Vj=WgnoSnDSmJmz%e#mtP&O#rS3QLVHAr&t1{{pI_ZZ|V?kh;-GJYs
zhZz32(na(Iiih`AXsC`rv>?y(CipVrbNBqR?zh*T=$a*lDCoy4ecuS<v!`m(JsvfN
zU6z~Pgdi0rv1PT<$wd8mCruXe{u8F#BPv}7rA{D2Z_T(<bjt4LO)XHAE4Pxl9uVYG
zkmbqiXbfkWM?|FQcAGg*9sL@}>hLSxx;Gn@9^4k+w2&MbO5y#^Dx1XcVyWP0Gmk{C
zwPth%bJZtwyb_AH!(tfoFHnk{`;tqT8b;~sA0Qq@<uH01ordIJtM>Om8%Tyh3~XO>
zEdb&^pdYV68fQOYc$|{E*<L~h7O-V(+zoA`i;H57?ak8<1VMwgw^l%}_^l)M441Q4
zkh%V6Pv0u8!KXXR1&yo)Q!3_G(CdAiEhofd)=e<K`zlYx%04-;OiG?JxBiQptlq|Y
z!*&3dvs~-Np;wgDn7v(4BPHQBf4N3p90r-gvKL}i^yiI6foDpTMu?}QGoCbnQIVW-
zqf|R||Fh+(oZ0tIO0d_1YDnezH!GT+32jUG?yBQJASZJYN-UeiElbt~!*9{G8@x~|
z;q5TJ2ks_5{0N*j-O9-m>uxzc9eI)K$mq#8`;qh6*bxcBc2+){9hOG?(k1GpGOH1u
ze-Uf8?=f1K=M4hNpE>eBLnJkq0L3*LF=MynlTBto+wHY5P5akl8KyN#n7Z9apal9g
zzt*R|g(w&q7p_g#2COByh$Zu&r?r&R=bhqrj|4E>l7fQZP;_kUv;P!fmhfBDKu@15
z;hH!8C+&b?a}6P|#iZsZzw0p<TW_B#%2Yefn;`PGPZ+MuSWDhQlB3c?hfQ5QT#~#z
z_4~6f&sdBQ#llt1gG5u7saB)UNs%I-cQpn}GhjaDG{D}S>1<&~5sb@tn2k0X1y@#B
zli!OC1?W-*#1S0SThJ#BH)5#O|DJwPi_iO>+Si9160+(QW7;bhG4?w2N+RB(;>kyo
zpurrg^EU%_hlF%mT&6?N5)-s}z46dZlprC;;jZ;czZoY&!%#pqV|O;1F@?i^Kned<
zh38%|lCRrDeqJLJYycz$<ays+67bj)M@2_Z)uf3yFtD=6!C>SFwLyp_z^HH0*CWa6
zhRH?ZQJEGg_P}2-zZ}{WJCMQ1qpps{_%WVM#*`%3O2pR@UgO|Gp`I+<BbHR82k75&
z*Gz#O39%(O=S7RSL&CPwv$-a!$`b7waqaySkBY1oN0JeNC`FB^Z`?NY!ruSly5Bj^
z@QXD4xOw2btp939F`Wh*nC`Blr=<!mW;JS)^w29!W_=NjTxt~o?MN#!r+u*@$ye<l
zRfBdWfy(cm*gGK7VeSDB%Ioh$&u_OuW2AN}r>SekuBxlL%tHA@J|c1*^}uf_folv(
zDHS1`KV%Bvrk^rr!Z`j<#Z!Tsi{l^t+^{RUdtv^@Vt>YsV>Y*s=o`&E*5695{|xxA
zD63V45oxhLB)mI2T;lnt+Q!L!j0(G1R}+sS=5QA5`+bGCF@Q5GL#mHjmgKja6xfY@
zwo@;s-R6@_aJRUP5*FhX@r8jQ#fl%IK6SKK&*ybM6SyrH3KWk33|5S^_$9tasDi4m
z)QFqb@DU~N@w0P#q<3IS%5H8aYH(^<Qk9?FE>J&BAe36;vYEwXU{J<?W}3WZ+F|NS
zpR02G-Dh5YE{$VxwE80^^YHht+h4rp2JP@;S&}rK#<DPJJ<CS*-TfjSERZCNFJ1wA
zf8MpC7eKw8I?NCc@LQV>&%ZPvoMnA`I~Z8^Eoa=`g4G}h&uCS;0U{o<1;Y#95j*|8
zcau-~PVnN^wKGBH{mVe0n#?l|cGhn9Vm#X!VTP9qmlTW<FW_%;+L(r<=&&f%ulYPq
z{a4W*ZuTnM#>h-!O@u;_sh4oslMdD~L%I|!wVBC0y6J5s;=4yQDueZu_JMlL^%rL8
z9hw&TEoQK%uH<1OuM1HyWzXP#`?uBxrVMVaQU<D=TGVpeW6+6l{=@WKB^pmv#(e98
za+>K@)z1F7OD={hHF1CXV#JB_Wz_I@y+~S9fP<?bo*yo0ZC&STSt+FUN_&|qhIbaQ
z%ZkdIFj^nHDWTy{vWOb~_}<7TFH5L*S1AjI-vP$*X358SgVg2bzgvS*R^M%31B~M}
zml6z~BM~4NPcwUgv6|zPz9*Vyi7GWn+W6^$B*=rU{08m}01TE?+vfSpk%|qqz^0a2
z9C3Kq@cPc}wtL1!0JMOJD-EBVsP>ZRIDQ=+AjXc|y}TQsjomohp$HN_<2cverh-Y|
zZ5w`6t$l4VTHl{-V&-@`ts+k-f`f10@7MZrux!HR@AHou6)df6Qc+xxl1cM;<auI&
zI`nwRRsX+VCKQ5#^>Ex<GtFi{y~qt!N#!2Bmug1cJ1`!0<g>!QFx;4Y<RrO$;5S~Y
zi7d{}3C4~2>+~=r$>gZd43kD?&9XKL^u4sj_GCx@)*1n<|KY-<?T^_iwVHsRYZKt9
zcIzRX5aD8vb2cpGj(tF8h1SOLKFN=r?c=27{;F3PGXAVI(g}yw`GdJZCMWA%yq_<b
z!0?fH>d$e>1TqwcEBqSl{oTqQ&y%M2{N#$fF+D&ix1CT}Mmt(qq?~Amg;x_%gIt(L
zNFRzM*P)x;8xWyTm0SGUQ@A~n|0Q~sP|4*|-H3<=`=oa;uB_Gpe81!qHwkib#$CqM
z^+k3=uY=%S$1}p(^peF}+;CqL*#!Ij+6^LjqI59>yn(V1I`v(J$XlM2hb|aQMYF2I
z;8(hB$&=|>bkuKuUN&ndwMF8q!bHnFHUK!XTxHbY&<>x!cq@156o4o}6yC|OPPwew
z(b;cMIGNuu3suT$_k#^;j{F7=5o&i_B@mS0Cyoimd?pqbDpXCTaYRBBeuu`nt5J8>
zMZwF31}Duoy1X-N`$FDr%m3*(P=`B)PPrO`#YiyJx5Hbmv@m6sce3Gbrg<EHVZSdA
z<7%VrBg9CNo-?!^r@!A<qD@v(g2U}1A~9dcu(=T&dPh>7D8_Jv6xmUx`Gtiv6ckux
z^WUHFh5ue{mQ)&9g~zt%LgDb@r5*~8+{A^9XJV6gTjYG7cD|^zEqdL;aMBAd)#=kC
zy2=ggLtkCl_e{*ZYF{mrM3X*HTI;3z^LbtQ#rTWg3l_g5E^NM|8F)p&y&EjEn!2M>
zoxI`#Rypu|O{AWsHQHx!UagX}i;Gen_W_4n*M~oE;j{S2g^TKyyNK$~a3xdf0Ists
zK#v<;qql>^b%87%Rc_EIHc3jGK7uD{u_ty}Cv(eNZJDm!5+Uo;WVamo12rw50l08z
zJyi<1m3nBH9UZI43Ka>G>g<OqWGFsrrZM$OFNT(tF#`B27L1zTN}6=qP`YGgWj}+J
zpoqVX_n<zwIA)6IR?Z>7+F&tgW)@E8@T9}jRqB3{eNT6*g!yCT5yyk_G)y0AbwOFf
z!Eqp|+C_L4m0#m->)P3nA;kt;@4zvQ+$A(g^4#>6BwrS|BE?s`n6P7P<pC7Q^J<M<
zb_z@CU=^)NI#zhOaLcX3NCB0$QiNg47C)Heca8!%V?ebQ4=LO*3S1}($qN8=>7pwa
z&JD$2RNwFLTz>nXmXv2YQHVUW5Kmdop5q-)ya&}`m%nbN$OJ2u6_Q~BhXRbzl~wel
z$2HyMB>!#|MKI?9lnCrT^4TCAaK6J=1k6LAxftd%h@!%DZVp5hY$O)FL4Lza_C=S9
zzX%NC-i~y>RNg%CbYt`#R9|$nLdA04frp^|d0o0QZ`tX1nvmWeHkxLQSXJ?FQ-&uJ
zs%kX5{1qTKB2)l7Y;PCN&C7dqr0U%tHO=4r_OgoV4*P2;0eudHqHn5yL%ivZ-83jy
zP8udhsuM@Ls2)aht3$=`Q5~!IW1QZfbS+@l*H6{d;IH{{MR}T`q*j(j*G*mnyApY?
zR#xf}c_|6H>6WUKe-C<?916K+&Yv+!f}5JIii=fr4hFKxcA-)DkL+klq*B@CrD??n
z88b9C>~WXxJt;v913Foj1XL%923%s761atwq>?$`llYPGq&-Kz&TAFAI&Bc9EDsQ|
zZ%(}XXk8pos`>cQ>OwBkWVzoXNJ=87Rd+wDFOSXfiEFI1HD#IJy5bA>wk|DDTP6}2
z70aavcGa3F{hILm%-vGvYBlhrD7RP<V4D)=$E}`cZ+-uLv2s(e$*eN!2(S5=fi-dE
z4l;aq0XEI8LK+Jmpey!M?{@^;;Q;UXo=$KBS^zh@B|n5{y)bJar3TYPs_Qcu+9eJy
zNuIjodG|k9rL)DTjkuTdKe|W&R*5&*Gh)GvW3<U65BaqpAC}J$$Vo~~Rdg@#5*a5b
zxWqrjbaGmUz`^!;Bd%Pvd%wk(yGso!+{P3e*0?}g2d!#j^493+mqIl(OI!8GWFmdx
z{~8_iag{be{(TVtC!&bzblJo*Gl|C-3X!ipLl^XyTg{7v2X7Lyr*hIUC>1P*10Pop
zug~e9L#E0l3M3`DFaI~Yr4H#U0UsDR^)yM!ip}cd$8`W5$kvjrB4U4~eeM|nJzH*U
z-AM|A#>sA;>4Ncu>A0p;hXr;^4S?f92LunzRK=iLRKk9rhhy+tfJKWFzhDhO+R}$J
z>hKAUh(O-s5=t_F4G_(BSNHZS1TCqTXrlaFZp;RV7k$HGjSkmGYmKf>6Ejgy&thGQ
zaHv*~_)~j7Rbi`AQOG?^8!h@so+ojQ<_S^cc@vITu@rgo2cn>t=f!LXZ57<Pc{e|r
zN|UKQ_HEZs2?>dSs~823uR;=P+G}FXOMpVGiK4>k*>c!!=<)Z~T=l!7thS<3>0pa$
zTy?8UY`gYxyMEB~W{1UB$n;reEldhdDp-XECC*$=u?YhUqU6r1&S$NjQ$7*NnKoj0
zb|BQ@r3N4s2Qr_4JwV^X04ZXQ9&2d~$M@9q>U<tJ_nvTncms@!X(m-;<p!r&BS{*j
zTYwiFFIJ%h5l?vv>D;~zdq(FL?5Y+YJ&i?iq&L~@{uAf~7^XAB5<oZpcz=MS6Ge60
z;TQP1y34F!U`5*V^Z7Yy@U>JT2HA2mwFf?fDh}{+NhT+8IUQMWMkLb(r_ZtEIqdd{
zN7ZqV#d06EAfG~QTdHU^`I%uQ)v#p~sfR1m$4X}2Pn*>kuVhYKbnC^oj%7%F9@bZx
zH%_&yOw<H@FL7u>0w*eKS>%Uz^FK;$n&|?`V4*@<BPRJe!wt&Y`!0j&S$jXwX;JKZ
z0pE9t;d{WPw5^%cP49<Y9k1r9)W`9<?(o-@PJdncbkzbZ!uKTP|Gpv7(Eu<Qum&Oc
ztcG+uaPO)aK&aER=oXNU0a(ky<PavL4~YaapXckWu>Tw$VuHY%+IuJ<`p&F3YIFeg
z{ltPaV>LPbLO4G^7p>Z7m&Bv2D2(pE95G}|vxuI+F3ca$!S*=ME<Tc)Ew!VC{(>@4
zkP3fRYrO(3095cBY#_&bv3qdl6-f(q1G=!cz6bAW^grYwR0)$A^-t-y-_V6$E;aAu
zl4uCXvp|F+z2E?fI$!G@FO8wdZ82H576EnpTZnQj3oe#s`axc5UD}$d54ZZ5M+y|?
zS}XsmQ(CBcPobi+l5TX*`Gc)q!LNlt3K-}wugc(r_M7oOOeFP6>nLxtr~3Utf`^9>
zW3w~IqGVJr_5;~(1Ei#5o$$`jo-_xY<UgGvb?70J+_Va5RBkO6BX3gw0Fouucw6l8
z|Av2kW%O4oQtVn>d~=>gss@6+IInRu`B-rh5$@0?`;8x*a!o0yuW2^E!V7aCmlS@r
zWq9WD+bRG9kDlDUr7tm<z)GP1^@<m2r(@t??t?{EefH2yrXE_ZBng-HsEcTp*saVw
z)eM?UId~W>nKm&$@!wYu+r68f=90keX5g|eVt}+qdB#xx6zWZhm%5VDnK?`0T0^=z
zUdEbfJ6>t`S6D3z*4o*xmP+9;p#wP(y<KWr@v~w`i%VRSSa8%xC4(sQRQP&2QSxKB
zV|Gs&KOvw(-y$T$#->#GYdaCrJ7DW1-#TC`?gx{8#HduvQix&HW2u!wQE+vrOr^Fd
z;?(-|dp0;aI@<AQz&1V%nkvK++Ye6#Uwn_NHMR5G|7pcw%(s2!;kKQB=A{rz56sdF
z{XKV$8;yh5OWdB>01t}d<b<q=QO31mmyqBVTItr7Bl?oEO+PF9hTpX^BNhhT4S<uh
zm&U^USyF;hHNYZtYjS=~|Adk9REC%whO879>kz8bPXL$_*4N%Q>s=&DKBry-bykm~
zE%fS@O=<DqqYEwY=|D4$qQ~Q=UsO>ftKwogS@0onSnJC*+NB||XOjtoj#wuK{?s+v
zKqUlNRaD<=iSc@AK`#%oHUVy&%(z=Kn!wW53Rm5?t!(e@1z#Y=1I5Pf&`ty3819jt
zo8wT<%*>nuo)bioc!NiIE%F>oYd*!V9O+)mNPqU-bEz2OE<naQKHPr7Vbo+&qfNMY
z*xcXnUtc%&@Sx!ruilo2bM3gl$oLoW0i=Qft0?(%baeEfpddfPDYFH!sDwYXz}awr
zb=(P2(n^uf3I%0k;XFfI$GCN=N30;-@p3B-d~aNVY>%-t`f_vX-Y4me33blG4<#HP
zHxzGn;-wIe<&fJ7zd>;>+W<I+K}x-`erpy5`$7{Et|TXyz!cp;(h^C*LFJ*E_#TU~
zBqImP7jiz0d7P-G5&9#9rgUx^&ty@(E<}*Y>L@74Lwi^!ASaI|jD3)Ds&7)e+`l{^
z1P`!m<JB@K(#{Z4^fuaA>eHxYUqN}CWfk>bY<7}DgogOo*IZ8r5gJKEGOG~-DmaA_
zcj!DR|3k8-Vx$Or^P8HPO+8#C$m7Mwh{ci!Ab=n}VjvA7X=^Isz%pi6B~(hhg2Cf_
z^9u}o0TQLCvDk|GzsD1#elarY_#$>B=;^b_fE$yu$wIZI!rKUwZly%;7xerqu2CT#
zF;+YhxkuL;<>@~(WBt}hI1%TU4*<SB|88Szl+km3TTB8W1$`b53<#2ui5NMXgG*3a
zN{wGEYKn(N&8vOw5Lb1oQuQ)=@u7I4?a(i0yu=J3Dap3^OyojgY=J>s4=8^&a6C}u
z-#!2(0x`#ju<N#5Ce8LQo)Qp%p!`?&a39-N>lZ`u`Ny@v^2!RHfw7a`GFQ_p^rNm7
za$c&Y7KHhA(q$8;(6?PHNS7I2U*dh?kl0KtybAAT`97y*xOSA@YQz^FPk)Yum+tI_
z&o5$nAM*OZ`~T4O)lpS$+uIT%2-30XPU%kR?vU;->26fI!yrYvyBq10?odinLh1U}
zKAzvb=iYI@G4KzD?02ts#awef^O?^a8XO$_lB4I?2q+exy-wBvC87B&-N`(ROoVNc
ze5i*^R>TP2=l4!9*oWDm&8j8!cA;smj_j%VD56UAG>Q;$Ql}$E7UW9r(u)l#{t;4q
z&>Kwc8p~(EJq~gG(e4nri%6r0J_#Wo#rrH4;_@~gKj$6zWG$vPsyr+ex?u43Xd0zf
zxjsOm*^se%Won#G%sG%$qB*f3%Cs;7<YcDiK$8fXjTDI3x#*Tjro#YE;IA7vXLw99
z81Q3&Wj&q+qn57_0c0fk6*4g^6y}uPF}&;U84+Pp4l>Q%N^z0EBn$q8UTE0Xth-hM
zblNPdvLQCO%$fEyFp&wCup7Hn#<cKsQj4<W5QIN3F^U94*05|QbGrtUXlH6)Nmo)x
zMrH**+|%jS7E-<)hLlNwN5AWI(FTwHh6Ii$3Shnj6OFQAQ2sJk!X2T8xu~p}Zr9Ie
zW8%u>TR7F%!{T+jrdbxisjAbvri8(~RD`9F0-QlC<xel}MiUNxoW4cES_dj~=UC{J
z<j^<6tki=AT}rh~H-V_)A$MO;Fqi$j3Q_{-cj*%Dg`evVokvuySUFg#V>nnqJLx`H
zs3DhjweN-@bya#Ob2V!9g7LhFh|kz-U!mG=K-li}P|VVA$Mzs5eFGgq=A&MjRU9f2
zSnwl7OJ<M&1oI@pa}G%)I|A;en-eC9WjUC^6!nz}anQnyBIe2@z^<;Y#^<!93KHcF
zTdwy+oD)!N0EQ$O?IW;MU}(n&3mhxQGVx?E;9UyR{5~T7nNfEn&>{*E@X@*e_*J$)
z0GsnQoe%2?Dp6;tP7Na~L70;UEH))^olA5YJkduWGc-ZIpEfXI$mG1<GY{k*tIY>Z
zE6CZI|EzjsLhBQmAb9AH2u6Gz1e7X21&WF-G@um-E>JI)^G}ia$IulK{jPr_0d2%L
zM29n*X}v%`hk-3o3i{$y#%u7K7E;_&zW29H{!eVB+<=y6Kgj%!Hoh)Me1rrqDWZ9|
z>Nf5%d|Uank4lBR!hhr(;Gaplrh7nN&%+=b8IL&&u&v@LM;pN=B4{`tNr&eoKL*X;
za~0EYU23(S>r_+e>+4U4B69v2{S6H`UG4kbJ2E2jU>A5me#9(yIRq72xSbyeeCvxp
zCn`9vBIft+F6S0uG-?-2Pfv&HKpuXF$LiXjtH59}6dXvf)Ccnwqvva>1e=Q9=yS#(
z_klSEaKWtCAFPzVW(q~A<;iu;&0Sa(oc{Q;#vURfai+Pgxk6sYov1tP@R&~aurzGd
z1}m>)GZ1qc^kA{@j;fxsx%?Q*fGVOh8@5_Ej8IkbI<FUw$?#1^%YrS>wm()XE5ZTW
zA4{yhHa$2&QU*jXE^n_mmY0_g*aZ6|{+iR{XD}F)B`-^$j^j?~vtF5%<irST1@QU4
z$E-oVzF3rxy+Oi2!!vi}ceU0H5S3%|{HYJ#Ndfv!I-Zt_u&EgH?fwEl)fj<qF=r5U
z&Ct+rxv`HVs{12!(a8|OAA0Kng99%eWJ-1P%nqwknoTV;3b^cjAcb0%5fI-0VRsYQ
z4z(}zqaUFQQ}c5q6`qr_(sqWSjxU<%aMZjz6{v?AueJN1;}UHAIdh1iL9K2t%XD!-
z<<#`E9N@aH1Nu_)U|2+akS2JFt>h|iz@ch1_BCLBf*&Roz^Q6s4DER@<m-V$`5)iJ
zYBfd#R9XpLYI*EHQ&zAwLqWgXB|Yotu)lULbl}jV!-1qNAANiI9q!B9XLgpHf(CK$
z2QQ=bn_Q@Al+p`VTMi}=o)Nr_BNY~l<ut?0g4m2SbJ$^yM|WPHYyeGDIKEUnLbU6T
zzJn~E9<F}jp^(1NM@j&lRIj%7y|UX8lSk9UjF8v}F<BqM?1J_!c~8L&n3ra6A^IR4
zN3u&pN+SlVi%}U0@jm+b3VY~1Y=L8|*yS-s0DWEB3oTU&M}Cc>g+~rpRyRg9rW1^e
z2CQ(IX{h&3>Gn3J>t`ho?t!#2AK|(7dBpdX+K#t=S((dV!lYefNDfUO(h$k~9~WRZ
zfIc&bHU@u@5GWjrH3U$?8u%WJznFGrAll(L(JOU(>~{1cG(3SK?NB}rZ@vUVU;1#p
z&jQFQCCswEH7Oic&>T8AW&d1EvbBIgVJ`$!B5Mzn!#?jEjYua;qkd$WZ(4}<Cnq%}
zE9imLmYL$PRF71mHx0mPM<;>-yN`NI($0fIYqg@qm&J$|YZ!OzmYU6_6A=xYNrxmL
z;Hb)?+ZJVK6<5B^gVOGNSuT3H_5wvMPuB5#l+{Ou#Sb*A5W0>-QH%cl!b35l9DoH~
zdB3d23oUKje)2(>1b%ZaeIQ|}1R2-2Q1NZE!9;40umC{)JO(n}L^gd?;QW7dx0<EO
z!iUk)(xOsI*JdiVF9)SX%`zIUEE`u;$MW#aULCoREBRb6Or&`{V1>_LqDhIvo=bG5
znwsm)wQI9G5@bup!OR(os}}p=yt~eK&xG)_0^1N6>Y~K;vj6*COM5X#wbTj?ua7m$
ztoK70kl=lcNx3zAZG*K^>2~ktclj+$Ze}lA{cBe^IypryhfDH}elp#DuAiWf6WUb`
zRo6itVZza;?BJdO&^1r2nfPe6DKB8w@lrxYdZPfa*1T_788ZcN*vxuGSEQI!I%Emq
zu_;+H1!CF_^s@cuV8S76iF?t4TffwLjjNmAMbS;T4(t>$fVL|9-^cF_WIoX&H=pAN
zN2hfBj1^olqZ0fu(!0dtsL~?pTDv!o_2lAbPxFlYORcSIuHkr^R|qHsTsrP<2p=9u
z18;+yl_aMjuKBV3Hy20a)&8E-g>#(R!Y-plSkkPf##;IvE=Z4~-iuX;nxRu#+DENr
zo-<0d`(B_{BUIU&Q>M8sCILmuK<nv3j7=F1s4LJ{Do{fM?zzUsMl$70L6FBySzrUc
z2q8WT>l<)cau}azU{+EBldV~<j}M@y`kcZ5mSn(#+W?nF2M=Ne2$+ModIv@Ve@N`d
zwpF@sbZFPvlX#FcWe1?Wq)Wu{4~vyP)d)1T{-k8RQp8ieHB!<uKpe)BQ?9Pc>1Gp_
zUuFOokuXWk=O?1&wkw2f!(kq3_uNXOYz3XT1x>>=SN+Tf{nOEEd)NE366d3Gmf4?z
z!Q-FBZlV&Z4^*1OQYH$$pCni4BPaEtc17WRt=wEQ(5^Q|SVnN~Z!C&BzFkmvd$pv}
zTjO?*GJ~&E5}>ZZlz}&@>nWNx)@G8L-?o40PAxUWpF$f)Dz)D?!y2$?np~y<H#5Ag
zZdxjzRt|9DC;3e+pqZC+W55}vE_Y!x{V&b#i}z^PZZ;9#&+EU<#@OvlS7)Z08s>#^
zSSk>NsC*VPIbD7kDXDVRV7*4Hqb?;rG;K5CxdU(iTQ?Xd%BsZX6mKl^>7;Tt)nL4^
zt0^zft0;Dy5|hw=x>lbv*r+)#y<5i+!1YYD2QdIT$Ooa1%GL0eK7v~XYOp%h=E47Y
zq=JEq_Zj>v)Tzn;pX-NBc~}TR34uR|hAvjqFb`$m=XK~M=8_vz#((4hqz=ub&#$5k
zZ#*6QiPzEwGAiORDbX_9qOhb<vtH&D$M1dx%7!PO@(s!q46zw?btB?Tt21+NcDm;M
zzeq<U$R_4V+`f&_2+Ij~n$+R*?4_YnPUtg=)(0sF)WfBSt^JE4wsM1}Akc;?&#%r-
z7fVuJQ$%m>#h%sVObU$wXbV}7p~ak`E|%lw5*g2cJDr+v>YZAPUuC(3q2KI;`%->O
zlfr&ImwuYl0prn=MsGSAVtre)`=K&hIiPd%1LL^|5z&iEy@&)Whjyt(r|&N>EWaPn
zJD*-7Pgkfh4&3q_2^aJXTxBlBH;7==dE_6*+w9_f{e(36^*Zo_*?F=vI{C|HstTjF
z@X5#QCJ#kR;aDuel1FO3c$9g+#(|nWU_e(|ufB&cDtu)1x;bb1;=(~E|IMwDjZTVR
ze-Ofo#LFEFZoFd09l(n<^Ps?{9F^)r9)ZRcDB6PW;19yVff8Uq5GRKbpfpxwJKe1N
zai7-6S^iQADG3OnN|*AUj62T16`@ifoDYZKKljk*tT00QPAMVMMUi*gD}ymF<vSvN
z!v1c$ZqjDHQi@)``QoI-W|2as-dY>KXew8_p`G%!cOZiD2}Qt{o*h1?T7r$0mWF{u
z3I@$rd?-JPd)e%lQIgBFg;ea>74`BpqHvzSgi-%dfkY)08Bd>)u>PxaHDhNoKX|Vk
z1&6;D6Sku+*da;dhgpRZvv!-`3kvCoNZUHXuDT1AgZWlmb=qc=!`O{Ib_}K|+NT9Q
z>Lw74dkT$6NYh#8V=CnoDT5E(q7biF!m+|rR!=9t7Iq0$Ii2Sond<%U$F!NUs@^fM
zJu=OudQLcBYd41qSgUo`KRX1pCv#<IQs2Ae;>Up*+n51_nxK4mXm|0(rl!w8aM!Y5
zlx@=9T(d=_{Vw2s564uZ?v@}EjYL>9+FJGG^vtd&7Ngsi&rg80S0?RqJ|$))9q`Wb
z_BQ}C50_YLxXZLRG6cX`*7&ggNkPnr+5i}imDGt+Wn43gU=6s&B;u=l@<WMKYbv%^
z>A@5G;^(qdb9Bm`0HtJftMlDcxo!E1S$4nk-w}(QQaxfRYWfw<cJ7Dk-s)BUNqCk_
z3&$A{dSSe-!;!%p+ZCB91n#ui@-J644_*G-E?lAZyy~BK){3!Ixijev+8GF%Yqf-v
zidNY(yr*=PXG9mOZphrrfm<M#%1_y0z)>w%q)(^Wj9I-k5JgirZ2DkhM9mv%(B@_s
zL$5xV_lwQ`@;LtIxTw%lj(VKvo?t`p%FBj=k43JoH=pI@G*B1<;})L3gV3uF<q2qv
zP)SKefo9Lbo_>xdU&ltZ8-2p~jq*PlwL9Ua)NE-G=e_5YMyCWWZp_*KTsIKFPb_*k
z*9I)OFF;(HTsrjx#9*9;qbY1i)^Z}V2s({UpLHpF^m8CK%xwGVftw@voI5jwP3#t8
z5q{oPUUyRVsoc~OW6PGKeIffVK603k&joU>H3o+Y`I_~o>(EVSVazI|2lbq6gjn0V
zvVbs^nJrTp_FNRW&i>QEs_{WWn3eeu`h6;oofnVnw3tM{#*R)Cgi?6%X+00tiJGIF
z`LwIi@TpYqBga=^KtnazVzWe~i6zLI4aR13S&fc3KGiRsHB*SEi`a`~d|4i;`=HuP
zW8nKtH24ek@yQ15!TdoUKZ=E%=Urdf9l$S78KyF<n03R5yq^}v*n^a5349;lRA2Y7
zD~6zDnTpYBGE4enz4K4~L%puIo>L^N9mw21Wp5Q?UU=?F#DlHupn)@}mK$2S^^w*L
z7V6?5FdtSr&T-G2GzHAjAFQ=KYw@)IGG7#h&SmR1U7@SsZXSvLe5%%p*)UB1>S@ua
zEB9>+k?%uGM2IWRlaxRvs}IJ#1L8MrZ+=q}u7|5I2z)?ZOG)Z8o=6`YQr=-TVe~2C
ze+{80Tp0ME4`6vo&}@P!_2CFbv&vMG({YvPzfKYqIsj2asI@dtWJ2ouv9+t?lp3ew
zP1({+RuZ&KLDdHf*)(p6t{8N-(?zZkVtxq&qkPHdwS_uxFC+1~6Q6;uGfN(&5CIwq
zvov3fUK!Vj6F<yKG!UR1=AcHuhCfJv-ZFw$$R!53z1L`;3i$~v7OUJY2Sd3{Crx-w
z`qUm)Y89tyx2!-zd(qund<>odSa1oCO~=@M=<anbn69J9Ry5iPnRi~NXH%P%<4kcg
zA97ft2o1faOva?-ITDD%E}G1CExEQWu-z3)-kq7ky^UgAaQS|c^Tb-SL2xXS|8oEh
zaUz9fBpIFaaQPab8Av7&6^-Xw&~CD5>qjI|REMIGcCC3Hjg8L4eoH&ge3>@rX0JN;
zU`6q<-g*r#j$~DOM$Ov^L<n2*{Ne?pMsM0y^=2%&F+cQBdPlo`dei!V{fzrTCLsr&
zUaEY>8MbPp4|!7gH>8TyR77helV7Qq2F1d*>9VSp4=fHJkIke6*BiHk`H4wHF~LlG
z>r@`cRrFW(1f~V8;|@?{BTbDJ9g`Iy7#f0o2|<p}5F6!U>KV8Q2sl1H?*oeLsttZk
zBIKTs@1bt=YMpikJn7FhMcSTj&3q+&;r)8ipe4uUB>Q8#Y2NinnJaDbb8YlrZLQxn
ze4n(Vk&r3uuzs8`c_KBI`6eYZ^Z4c%!+q#|S7-ezbT&UPLH`q2;?TIxzBb<kN;4Wa
zn`sqyifbU;E2^IV#dV3hCma(egMeFPbTTjbQ=sS1o?L2q=k;4}4MsKi4PQ6u+JS^O
zceh{8_N_r*8-61f{H?u6zd)-y<}q1+pQ00<qop{@yC>gPZal4xDo9)`hu#v0p_wJy
zS=AD8LIMkv3*dWx&6Vf)3}Ql7>X604o`zuIF&l4|F3kI`3vZ4jt8S^0>2U*3TN%_v
zt}CW}FTYTFi$qLtbbE_V=@@YPqX~9bJs{(~nIbSmip@l6@TJlsJp*#@7>Xp1&rI3O
z`g(wL{aGUFFEZfmYKupse2lj5#1!&T2sg$Z&lK{H20mL!M*e6O0H?m6kM1K9G819a
z$Q5%NAw>u^dOiWJuSE4`QO7<!cCbnhpS+@0z|A(7!^&^fw0%V6q^qkotrn|ct9(T>
z2`ZdmmD%uQgL;d_x`X^z)$yC8$)r<WAP3r$6NVNqXt5{q+E(Txf@e%lctRSFqo#oE
zFhR_@X`Anb6u_Iv{?o>iiM>Viy1(W75{BmJK~#@T>3<~Lxy)t98t`3A0+AGEqs3Fa
zE|D6xm(jp)RXR4yW~O*&I_t$Gm3)2x^ISf&o>GKEw}3}a{hKFj-n(kc3r%ol+oSzK
zvPr7!MlYxb4BFh0SNdbRzj?em(MsjCo^L@T&?pVRFVp)R5SMv;a`sXzKRoDpy?s{-
zSINYhSt2GySiNIh!_n$zn~wW=c7Fo)JlU9@UOD50CB&X++-EEOvEp};I4T`tS7gGD
zIyDIF{4X^FT6kW)F1tbNG#kWBzwvx#S!ReuH}<8;rFhv~sDJh6Pp{)kHmPQhzOJN#
zO6xnHtq$v?eBR?VS+1??i5jaNexK6oR+TZL0sTCNr&|LNG%uf<^=>mUeA;;azU$RF
z(ZiU`?%VYCNh|@Yuctp4=jw{o37NzzZ<?EUApg@o)%D8wjx1!Fv4hwHsTj`{n@!DY
zSc;884#@vaFdr+Y^I`yu7V2hG0{_j6%c>6=xe5ylOT-Z1fQ|@gswlIdYE=EbP=Bo1
zVkFM-a<d{*=xDLlOX8T*(ccMERvOEvKU#Ha3h8@gv1mG@Vea6z%rGfEzoxxePT>&m
z!<kSXOBxf|)o-n`0Br*=Nq-;=#f8V2x@uN*#qUlzn{GYrd9DpfD^LtU3?>!!S6eq8
z2HhX>?Y*flXXr2L)N5qd0&FQ$l%A!ZST#L`%(bQMO(%~HH5{##Fb`+F!24XIwsh{*
z=*g2U6`9)?saJ_E=yTEMZnP%ijG*8&{~N#2`GPtB>?q9p!3V_1^4p_PhNA}4yNPLt
zbulFxeW#;(D%+o6BUktx9XWqap?yXD*?;*M`L1{1K8dCzb|MAt$z@B))*{Y{Y5!~A
zicIomtC6N~(_Fq<FJ`29G-&v)jw~exdoBgN$zN^`<^2LVUDo1RTWh1>J1NdsDybpt
zLjbj9fg{(EP_+eQHQeX{J`4wdHvn<vp4g5>LxHzyj-5||_Yt6EEQ}7p4pd2}&{F6u
zynZlt!_&%DN}U!Svtlu#5dHp8#_?-=$0XTqMoKZxL9I?M%TEDhv@@14p8L3+aTItQ
z&eU#xHEM^~rBv<dSa|a!$28%~UTa1eT8{njEN{ChU-evJ#C{qNg~@W`{l=RAB|5$Q
zhr3v#Gd1ceryeKjpJxyr!#n*`usoAh_|reYaSO<pY&+eLjWV5F(XNwlZUx<bRnlRI
z?`5Lx)tcDTpZgoUZ8lBwpfhUB+Otis_j??w@ac1YWr0E>WX|y>fL3aDck!8xdTwVY
zw~=Q8_CB{|sczC_ZN7Q9L%LBb5dLI&y>3HgYy~e7o!on55ggD4DX`hkOB@lm1GjBm
zdC>ixKq90GRC_iyH?M>GP!H9QpgD^1Ks-6Xjl7^BV8!;xM*spk{n}Q<X4FOpQ4Hc=
zdpD2JX+And`&%6l)7*M3e`Z^#(un>g47p(4AM2YWkJ?*A0HtWAOcwuQ$x7)Nh}v(B
z7gVK~!N;#qF+tfMhl%?nj7D|(&URHSA~4@(pt^5U_sBq-edw9<J^fp_C_D<i>)*B}
zCpOPDi+_GW!O8f>7r+>~Jyy27+8$_BHcY2plSjxddwXen{X45@DxOo+FZytnYv60z
z%aTY2V*d42W=Hon`ms6^lH(UXoD!zyzxHNs1-KPW&5LfY5~|cJMhH03XXM`XY!ULr
zmuO}j^$Z{g`I4K0ac@kTPoAX+nutA&O`xyvc6b40Xe0REDVfeO#2wY>XbegOXzwDc
zTzpg{UJ@9P6%%lE=||4Q5P%OBFL3N^Q^yDkfB9PBJ!490aR#|K!l)Uj>*3s+EkpjV
zy$OJ0agYLVIzL!I?=^nKHi<o*Q=nYswBpmqVi=8AVffkoaM4<~?r9>m0)*~okm=@V
zi{}gt8<XvHXE&|#OlrbPDyLM3CR3H^FUuKc`jyyfe5KBn93fnmuE`j}D&rm}s#rW_
zcgdkXp2NLa$-3AK3|dQ+I_{jg*bE4(#Z%^Ty(m+~RC1j!@W(qV$dmLspB43fyV!&t
z;B#ar%exX8HpA0n(e`~SnsU0m^~Mob`NTrXK@bs%tG=(xU3~EN@Ch0)^dz=$DHE<g
z9!ILrmMCEJl<)n#Rkbo#F*P5HPB~V76Iwj1&MzqtLlm+A^#2F%+dej0S9N?+b=@}Y
z&J+rsjb@y#tkUIBlQ6O)?3J;@+P<VRCI%a{tovO~Vh{;pIHc($D2_zU1l2>~uY3%V
z!MAacQh0++ua*T8ajE^F64T#&G!+LFicbmRA{hIEPrv$_P9ob`36DzpA{sO+6^kWj
z1L1xCJfL?+gJGNY$tmY5W)g`D)IKNyf?s_!=BdI|$<fhyU&)+fGLZF&sg81+9!MC^
z(cx(1wtv*1Q{()-IZpSN>cRa+f8lsDlaf(;>Aewmn~so);Cf$V2&L6nmVU{s*VXki
z%>KBr34`V=xf9d9<)K4?!WfsH^hn%Zv4-!6gfu97?nj?zTax$9Bw}9U!yy!&F}=C*
z+dJLb;Wf>TRK1naG8He7TkEBtYCyid;|Z;G1lU8`#ZMF4j`p=Oe0(rE*jF>L8I{go
z4RIV>eB7(tHfXTFCK2MR<(>YhI_g1sH}__xWqL7j@)<#g6NY^ToA}}6t5?9gdG&?p
z6MU&S@NS;sFue5=GToOr^UbN|IK8+$vHdIC5}bu(zubu7;NSq-GtUww9AuI(>+^zK
zgCLmH7%f+ja{#%9CRbVjvcvO*_SiE?Aw-{a_s7W{+~9C1PT`uU@ju__i7w(!KpK<y
zojhv(CFEI2zIGJ475hS?R5R(DYkiOPSWLD=Oa{1AHyhw5e(Pvy*tP2NXWloF8>xPu
zqafVye$dS&MUI5eRHF6QukMzMqnSPd8Z6X6t&&*hmFCY9?XC09JC%zVx8sSDwl$>x
zW8;9_>La9`B#~q~Rj0#6uAV5oOJcDodyun>k^jIf3Q_|g4{KBE!=Z;co(yea#QJKH
zv(%u4Tf*6zUMdx<Qa0MJ(h4tIGS+@9FI3ob`2G$e;0VL5nD+X#Y$;1VC-mOVOqUS#
z-#gX^n-Y{v$AT(&y(bW9>c6sltenB1g;zHKfX2qgQe9;}FcX8?c;KZ~K_g+!wiG51
z2}5h(wSh*!du9WIY+fQspt-mmvnbT;-_~5blwe5`Y>~#D;}(27-|E<*I2*|+Da|(7
z%70>yS&0YM<S-92`psVnl1>an(BKZP#q+4|^<!jCv<857K=@p!09=a;g=>p>YN%lp
zkw6;miSPMA7f64KV*|)7fm|*Y&qfJcn%mUIkEqZo0ATwbG+zn`2q14>C1EkO$`#TK
zVM~B!t6v~qUS5&`03Y;ADBnf`Ri8+ssa$V>r$Yfe9qlvAda5jXD62xh)eGb2&!6Ox
z;ynXu^j|`DbPXk7g((3&4((?~<n00HeLBdjk0IJG)j!)BdIz?qmAeV=pTyg_JelkE
zNW4@6Xy#-~U=A7_sTQh`gDuDi-GVP2E#+ZTG2?M>!KGe8yewu)h<f>Uv-+r9r)~(V
zNWDN5xB*P;Bu^&Lf?clEc4+Y}#b6Q0!SKjJEK~n{11{xwyT31$Vk$Ne45*v`NRD3!
zHigVbR&sp<192C=3TI>RRm6>6C>iiXF`Yp$aMMZ?ATu$?>83;G4XS(xlIfH3oyYn9
zO4fEBVU6cN@R@WuL4&~ci|<Z<=h`t5Uk9}!4^HY-cNM+|{2bQSfI9-fI-g-jxt<LI
z=+v{UDQYChJCO#56>zocD|Q5fb-_=hl6?&Var`=zku>PKx=DiL3a~-YJOr(IFv>L7
zL2gh2n$_!MMiTV-jaa0XH+dUX0p5Hape!HREg}tEOjTx~uBVSZA3IWfCl5TRVvj<>
zXU_t>yws|b^K&VXRI2nmG8{F{GW(Nc9flqUzV}2Cf3^}YJorWg3^-6?kfSpRy7#Gb
z%>LIt;(WD;4XB+WK<<Jw$_ym8ZLu<BlW1&k;fRy|I(^!);2npnHf5-?q+#Fdy6VT-
ze@wDKyghjW(!v{M0?aWKV9-*auOuTJ1$>VELiJ;CfI|OsGX;aAnGGN}&>l0^(ixg+
z06ZU%Z_Tr08~>X^u?3BPiR5D?V11~_z$NK=arTkGwHg`LC|*z<HVm5*k4g6}sMN;;
zjqm27H$lD4bZHZqOgk`AJ8`h@xtDj}!K27#fr!s~zLFf2@0IG@U!88LueHmD(Zu|j
zkrSkFh)%u&zTfTT#7WZC14_1343uEA_a`HW3Gj~DtD6CArq}OH#v7E7(!K9zO?n4_
z#!<HQL^cp|$hVvUNLZxq1$gpsYOhHDB6=32=$WSvHH<iB{0GSt1eInto6*w`iZGkO
zgp^V!|7&r6%YgBcl-LUM@d2h6HWszqThI=a%=>gRRpecao4Il@2=#5(KPlCL^;Z)(
z|E&NUN~zN5WP(B>2mv|dNvaEw5*IfeKV1@5#4J#UF8(+hunzpp%<7ad$Y4k|FyTZL
z+OV<AQv7^;T?-5NGbLJcxkKzF<fc90m&f1V(A@882!QiZXQup>%9t0nT0O0$MF8Z%
z%Vd8N@;LN>JZlxutx&w3qW?o?*a8fdT0!+#8CV}+Ce)N?YCH6a45E{z5&()}3?7-<
z6@y9r6fhv302c|mBF?s>3bG=uusSuCy}*{mQ_JHjnqrWjF4oz_6W7`NImOoi9akfD
zH^-$iW&*=0lbn6ge|NjZ(e8Ku8gw08q7sqDqXcDT6{(WkuNKX*3`O~5(|M}^>>A6t
z0e#VQT@H23@pKW;X13DfP#5qIG?TP-L0c?^6!s$GCF}q3HL+w;?;TVgIj**!OQZ96
z_-Qbx;yf#EqBALzIV95NG<lXtEoZ`=ZxcncKJ`P{`f!<kyslq~RIFc=3D#ee%*te%
z(TH^6VaTGM)VIla^gRx*%ju&~4`REdcrYWs&(0)46I2bWY|Zy<W>Tg4O_%_F3xfjL
z)2S(mLEG@=CYzuqCmG1%r1q$R28M2ji#U05?<RYMGXVPnTzT4=LE#D2Y>NfTpBRN3
zr6^r^Ud41yl`$jnMnZNMOYu&B(7|`a1<d<f3-paZLI>acpxF47@($AEbZbkcoIZI#
zplHA;dKX|nmF1dc7njNZR_Tr2w>A8w<9^c5$DpnD$glL^yM7O|v)VH5eMU}!&!6;x
zrSZ$Iju`zc9v07OqxOrXz7q!!cVEie3?^6-L5;S$ouwRXDpokD@C&6+FJge1w84}I
znT{&|8;@MMcXC({Zh)5qrI&caf_v0rr4(2|9THq=Di}D-$~s7s+o2!mYK-u~pZVKC
zp87yq*&}|=-QWQX%8kX*VTh0!UHNKbwBG`9w$359Od=V5E=RTU5;@(+mcrukB&)b@
zn`*FT*9xMs9WGBWDKALQLfr&jc=;K*vwAozVol1@zs?Ddu&Za3{$0qX(&VP7@m!q{
z1{_`<W|QgP<e=IKN9+zmE+V1jJ*ie8Zqg^7JvA&>X_o$8yC2RM!7L;%yn{emv3n+u
z2e&jcB(R~p2V71n)y90B6;r6+yF<{pSq9C%q$lt?pVLiJDMx9Z39Nrj-hEdgX}4{B
zH^$|4aZj8srz!oWcofWYApFf$5QVho|8W7Xo?Efn+-onlZoFC6`ITdkQyxyj#c!^A
z-uiB;%Kb=+Dm)3@*{rv_gr{O2-==TP{YtC?+%t4q<>~lZIzKgRuy-f(kO`$2!=}ll
zvLU<Z7N+r3S!l38RjD(EkOy7J$1RO^^T&@cnFI<^5BnVGRS%pe=)Sv~PE3gp;zFF)
zjV9tSqstYjP@l@Q)jccReWTi@Z@~MmG<2_QsQ71pwIqW{#GD`iagbN^&a^<F^?ECT
zT#<%)Ox9}i4ebS+<L{?$pW-YUMc<xoA*TzxlpH-hQ)v~!A2Hw~u2^mD$rW||RyT^3
zgcsc%6ia!0I)jYjaTK$aH2eHS<?T=;b@7)xX`$(&Y4n(4p0FYgm*LlU#T=&#Q3Y~{
z%kI{MvkGgWA$FE#eVAyQ_X5Iud|aVNZF<Kag%Ozc>ZSM0ZCIU5S(2ZtAw4VRLT0aU
zV7mD%S#ceXNzbsy&lReG{DF;UY$XT2m&AdXwROpB+1Kj{Xi?sG88Ah5_4v&Dwh`(3
zbSZD~yRtXg-txv19j-IA9&w^IRsL%<?*3D$Wyjw)o=~^r4jF(NC;Y$^;75=vQUW<6
zjtz$43<d%3xpD)&8savl4@lDN(1~@mKG6qcxHSrNHd6^f-*Xhen|Ua67IQfPY%3K|
zx2F#P4XO{n2>x8p0@UD;DIs@P%5*9rT9ZqydVh;zYomP*OYuH}Ona^fqZ!pMstg&8
zLhKT;cz@ikgjRRjuA*n)?FnW{c{>0})`w!`5wU0(`_3{VsgM${q7u?P%eqf$q*>i}
z{J74at?d`CRXx>IT6o)TrvGkyq40XnolFv4F@*{THGLlW)6$&N&r=)hVIu<KG&e0_
zo`?jP;beYqUCxpff`?7U*H<N$rdy%C+8kzSd+GM8HJN)d$qq_Y?n_!G=aDu$v)PXE
z-Z+C=u%pd$y^({2@njAZ)SUcH*kKCN54T&$*D;5YNOuL4cA-SaP5wA+*}Y$ikZE7v
z`rX`*#>c9ErBBni$PG_9<JZtsAE9M|#6c!ZvtNm8;b<MH8WrTYjt&?-AcImq`-8<g
zWFQB1a~8$uWeHpp70^nQ(_wl3b&d<2FD;nF)#p8zG9uFOVj)jM0I+YDm~a5aHF)h;
zTXp_zhW;IZ8bYT#6b-M-h$yLOk;#`wWhxzr@P_wd-QS@eHcZv#C8_emCs8W}&z=c@
zX|4I7ESj!;GG1<i$JOWCaY3ibf@aywBy|JByfb0@D02HbzO~;jc5<vV+d`J5#0Apc
zR~j~#h#Ott7oqcOK&Zmg#vgPsDE%D_Bs);MXRI*I);z>dl*=jh9ux_`x!J5f8J=aj
zWUk0~QqN#=qKAe0PEMmcoc^wA!k39cGCJBtGDD-^qOtNjn7zF(C&$aRzgw!dV+<lR
z+X%C*_F?D}FYHz)oqe{~WdWV@_VEj^W3t5t#|n?y*)QgiUZ588CCWeV$K*~x7{LJE
z?SLwB8oxV(QaW$2%~Zb4_skcvzzYq6FZ~y}a~uf<RB7tq%H$hG$v*l1o0<eNKJkng
zp}Es{m#vO(B&PtaYX2KI*V&~Wn_78VwUZ#Tp-{nW4CgE34Sy%X@=N_5<GBf2d!0Ac
zpY5I<X!}7j5E>-Dw^FO*=o_5X7=+bR2Bg0|e$n{SU8Q;2A!iJSO-({J34-r5IuJzt
zpc!p1oRxxkTl~H#PbsO6{(|U4Q@!!c&~uw?Y$xK$rw?Pxu`(DGC3d;u>hQ`bktEFa
z+Hao`D)q8C%sMqrJ4EU0{Ca$KbtmoVe7PB*K*TB^L%EVO=U^y$&6$#Xlzk<4^+U*I
zkxVe~<gZg6XtAAY&w9Pyi_B48y<7w^c+KJey7Dl+u1={jX_ZPB#LK~z7XJ)pQwESp
zp<WjnNGn^M_yPt+nP?*6y!IQ0eoh83e*;Xu+{UXP-+|K_y@v_}`yw!DpL5c`26sl5
z!gslkoPj8-H*Mk-+;84N7FrzyHir_m%8uyLrWy5x^Z>m|xA}bs<O*PWwS?m+IX>QG
z^4IpZlxh176%4`7SIr^wtyV&z9{6tn3ZE_d!&aMp0(sw~^n6Wm$$!;ara#-wO77xY
z1L6FwOtgNL30wV7oeGJU3#<iGS-5n`1-!+{<@n}?uLv58zv>Bis@YkR2)U!Lgf?{F
zR%P<~T%)6A&X>$KL=(|JUA%D2=jXS$_E7nh_Es@2xF-I^sFC(M7hVZBlX^>luY-Q}
zDapJI)eFC4^>y=Yw?Or1&R;C8tp&1SxwrzhaS%3Ga6tQyzZ<nU+4MoF5D<6E_f%PY
z!GMTI4hY2YIk=h~0saF@&LFzhZ7fj!V=JHk#f6l6&nU|_Dd)$>h{VeeomMj|)Q#B;
z!lwp{8u;I4%_!D;qND1TG)4I@ddzDGFeuciWb=At7UFx&DbC+9Xrn6H)oJc?$yse?
zBiY4snz*2(kE@r7(@&*Y(Awb(h^KZO|GvU<!=FX?P@VyD@TjsF92Tkdema!d--hQ{
zrY$+@7<hp_v)|#RJ9b!vv1>D)VZ6LFR9CO*HMcq#6W1*vZcsdFIdhU8*{OOxDnIK(
z#QJle;GHQ&BfpkSB<)wyk~1pO7wr|MiW#@c)P(`Jzu5-9=14}M#(A4fyE(C)(2H4~
zcerevOiAzX7B=lQV<#C5g+vwkPA^^@rTlPA0MQR%Gk#etFXa!I$d;UFa5Mtc>yhGs
z*96Pm-Ee?y`nIK|Wz>J_vj>!`*`Jvy+o=K%2;*-6n-Y*=wUSz+u<2jJz#)jl{>{a`
zgT^eMblI^mD-ob)eL=KYH3ru<Z12(;6JAa}pAJ+aKdmzBLvn6r@73!W?m0;+reA|m
zgl~sTn33CmtRyE9ZbX)xP9F6(Kk%yBC>b?Zz|}WATJ3l_H?S?JN-6zI*r*w@^{X%;
zhe9*@p$hS*Ym<ssWPA#hsM=fPn~rB}d1=!Z_e|86k&QO;Q&EuJ_4Vx48ITWkkoOy!
z15#)+2>h<weg;d)mMBoyQ`O2+7Py|rCnv#v8y=uIM9~yPsn5)@2>B+VQFIXeZ)n63
zU^}QF(@6kdi%Dtm!9MjKX-6_Txo8sHoFQpxX`@l~roB%G0zm}X(B#NJ4UKFM=chQ3
zAd#JU@*hC{?=i5BNs<Yq!U56Y7?igE+c@e0-r4qNw?m7E=O2_1*<(mC#-kuj_6zJ@
zK0dY-hz|3WFi`Qx>$83D8hj|@2M#B#C^6_g{1_l81B%vnfZcGTiAxL!Kipyg%3T#0
z3)NrNq>>p%C^7+rwtf3^4|>95&G3BuNIPjkWxX=~Q|2CPnBa@NFON-XZKe=F0A1ys
zU=is7<e$GE9=>v2b1NhUA>d+FffXhzb}$yLQWh}qyaBh3qrY&;Yk^W^JmsG#7?d~A
zN$r(nj)cN9Dt1yy>H6r$O2dkM1M|{6-?@E%cQcUA$3Y_KW&G<4iI5LAAQVqZAl7+T
zyX}DD0xCxYa6;42;~kekAQuK))P)`+5!%yiezzUK399PeZr_dn6KyxcZ+iMgU{X&b
ze>RNHNbo75`c?S^08^7PovHBVq@>boih7p=)tYFeFWw5ivA6jfOP}X8mEZCB20#*G
z>|pZvAPhuks}Z37*AHm)uQGooQp*EDiO2t1c}cMH?R$gve>Orbc|5ZL|JfLov|j2g
zVa6i6*7Y?hn3z^V@c;H=BD0V1d7a2SelFW!1;S(iCKn9w>Hzrlcbo`~ZH>;%x&QpS
zhz`}7^tt#Mv)&uE#Q7+NB9qHb6DWv&%@5dB(1XU$TgpdN#t>M&28Z54)tpMe#ZUXO
zT%b%U5snVylKZz89tF06|4h;X@W{cBwRk6p$U(&Sn&_1ci(#t>pgW!1Ub*Tu=dr|q
zFnhZ3k()BC6nUldh7{len*kCnw{nxk@Ox0(+(9l)0DVS$P&+_OrnQ7pp8ffi8y<ix
zp&*+k5?fyjX0*_q;qLa<e)oMlC!pS|ZNQETAwfcdN`={hfNULVM46(;<a^14E#d#)
z<N9KWqkyEOcx-(=AknUa?(@*gtju8QlN8j@z-Kzhc3Q&&eajHQ3GV_tq3xpKX4*EN
zv+ApBT5jcJRH$Ro83fHhRqiOH{Mi!g@S6sTmQ{ljv$$Ng8sMNm0kJWZXKFT`q63YM
z0cctNb^yHVg5Y}qZkhocaNs>t8nAEVf8Ns_32ZWP|ApUM!+87r)!%p64GsZOiTk&V
z)}J*4WgT|6aYTHWF12;NF@$(vS3$AOe_lO6SJ@b7^lG<yRgId-zGJ}2b)~TwO6I;$
z4EytpS*WMp><5nDUsKJ7cnf9C0zy0Rn@oPawSY^50yeUVRM3z78v^Ra(5^HNzJC7-
z^q%MbDx_Ho$W><yrhU;i;CRaXiH!}QD97-JoImgy<V{d1UJ8rRi{)nb;ccV>*(3x|
z*YWzl#@poj!xZdNpo$thYL*ZZZ{b-FtkuFY5Aol4!3Qvd`ylu5XY_q!$J?WXT#C9;
z7GmrcL-0DY@&GD_f+f-X9P$7x2|CF2-x((dKy!C~72umbMZ%;49PK}!zJ`KMfm{|+
ze|}v=2ZUydOhIp0zQxJLz78gvr7#wd+EslbB?{Y23q{=P?gxO>@vGE*a7M||c>Z-T
zp#%&}YPoMfB)M5OmT-P2KUv`|bRQ5!iU5X^^X;Ycz{Go+sqX$5!mw8FUyGAW{x(o-
zEcAFc6+T+R7<4;?Dtpi<rkYRHg6f250J?2}${_ADd8<F8tA}F3-08a^e{C<32Y7b#
zfgpf&Q3B6`Te05h`xgk1DFt~FbM+3l{C^n8f8g8Pqk7G3K;=Apu-u7TF?kGXM>?~h
z`?mI2;V<-7rgI%0+IcYoi&hMrE?|J5g<-b&aHA0DpXH2=B*JsjvYLE>*Y5}*29?$g
zHjF^wQyr}yxRZ<1EE#{yz<elJrX{C*JWMAESffX^q(2VBKXX_<q4>616b>hOv!No1
zaxjq-HY(W#ifcZD(shu+{pUB3*#&`pf(-H>bvBGpivx6r{$&sDq4vN?F$DujJ2FT%
zy7V1qeqQJ%FBN)tXSJU4XIi%Ee?z18Q*u!qeKCX}sWAw(WdBA2>0r(JqE*udqDh1n
z^Syn&y+u7v-~Zpm5eVLPuOfdW9G($sbn|3f(!U|@C`Ok8RoJ2TOi`c$ZlQLE%XV4>
z+!@dwQEAtC9EZ?x#R>@}1${;YWlB$hZPGA^tgqb~{s7p8SOAu;$<w?3Q&3fj5eyZk
z2GG*7;*wPBZYVra1ei1F;`e4C^TAdP0I7i#4%$s?`4YVbW(LjDaDMl_`TyEBoui}A
zz?I(%u5kO*bAUWfV;_QUpG*IH9YBhp$~G3KX0>M^mRNuSn1P+~&u<iwC$dE0257i}
zQwrT}ivU?KBKGy6ff2`m0D))2cE1Rd?$8BJ$CT`U9i@QX=s#AD8_d&UC`Vg-5GANx
zx%ySy=6yr(y<1WQJUTFd{p)3H&?<1dT4?~+#1>9PPxtQ_x6Xm;Ki8XL69Bzz;9^bd
zWA{EaPZ#pV1%FyyWW@g`{-}HgZnpaG3M^FL!r@B+qHx?6dre#d|0RJ!mZ7$AiR59E
z;k7!RQr1^%Ew9mK6YlCcN5jtw-GP-RKOH1uh(<w^<r{93&Px()9$&m{>6o7nSCP-6
z*qp~??DgCb0qFHm)Zuxw_SyWdReQZ1R~D11x6tOzcYyKy>MNJ%4<2P}{6%Lz`f;OR
z!_W6iTbQTw{SZF(s1~NQGVzzJ2qE$0j_8}!BO$rzVJvf$wCyAD&G3Xbw>lyn$eN?C
z<Bqs~zp}c!Ky8aifI~p(gjP5J_an`p^mgnqJCop_BFU=^6R$EjumHOvy{3g!-v;0%
z-uhhtEjKh0`zcNug^xjClFV)|PyUx#AOcK8piH_n_ieeT81uKOL`*Qxk)he_<ly|b
z!w>+rtgqL(?r^sfbAMg4;$}~RGzE+?OGKRtPn?`B&CyL|J@RQFj%E*eejT^e>_|za
z7>^>fgmO)7^r^$IZ}%5%JhM9usA5ErwENMMO#bUwtGSfdcNaU6Rw;rmA?JQl8%BB2
z(+!Vij5x%CWdHc|40-wYnP`5k&IpM#Gb>X58~!-4>uG$rm;@-8lKj{L=5EZ03+qKg
zdA3p5ck;-t^r+u7QnoW9lg;jS=40vj;AF8s5&r7_kK|TFP<TA)3%|}R(T?*tYWXdi
z7Ed5nLRuY+`nSXP&vX0D%5)Q;+T)%Ic-TYgL;x?<a#-SalDsDhnf}y<=FkfQey_7@
z>c}mYnAtI6=O67An3Qv4ixB{<DgNa_yjb2$4p6o?B|I#k0^^f#VBhPRn&YF{cbAtZ
zaB{eeVcYJDMa+G6JS=9vqdzzLY_OkNu!LLIEs<H)ek|rt>yg2D48o!?+OH&^wU)Xd
z+Y@*IIs7t^`E%$;H!Ye<og{tqzQ8lSn$0dLM;2h^&>h#>M2p0>CJJ?3sh8^x4x@+i
zY)t`78Q#fb*{AaRh?Qu=s>S5uJF!d}0~~?}L4@qD{w$laS(zlkSMlCq$b=-mab9M-
zi&u@_{ZE>zx5bBjh&2p}pVW0`+%%|CIU-G$EW?BC*fU;kHq&P+y2avSx)h+OQe^JV
zsMqo+fb{m8ejXA7cEuixloE*`Udq(N-Ab9$?xHu>_TaDngct5K;0X{N4)gwyk{`Es
zKxYn$Ox^`qLS|nHf(W%_-VL(zIzdS2`1r(sz#IQzBzm-E&g|#TR&k5#<ZTs0$KQx>
zFu&@XW|lLs-gUdypt%CnldXNVG^-YP#}}J{1upO(k4?R(vhaWt9dLVz0i2Lp8#&!q
z>1I<@e{2s5wBRr}>g%-ZH(K}r8mUOKmvt64<}yi0Wf=k+$AfUk%Z(Bd!4xuF2l~VS
z1e8vEJIHD>CPRH3;YDkji}+HNLb9s{Px;;aM@m-*H@gYt2=n~00T5z$ncYLULIm8a
zIU&4NctbcvZxLovKl_wa%l&55%T2_5Y9<vGQvb{V@XV*GepI9e18B>1Z`?Z^PXGp$
zXf3CYOYuAIiQCW@q<K~=p4fE$pz`j;V(lbar4W;(o6l+y#ZKjuD3Z26L~_FuR14JL
zKvw3N5;JwBdG?3MmY1JGA>)J39=l*mjdE{Ia~=X;`$>xD#BH8RnS~8!@v0b-*A$+z
z#87V0ceMgyO@ImE?BkiZRmggs?1emV9)3HmFv=@RWzOVOb#b$wgcG=M>}n=1sq#M|
z_q)H9yem~b+b&k0GPhC7eWMUovDAgMz`iZfi#bC!HHVftA9ZCW<b3ekB(Q^qZE_~B
zVZF(3(uXSggLcG_1tCt)-mczv-=p`K64as1?+7RY$G$k(Y7)&1&5BO6QdjP*HN~HC
z3L%W%e>ceI0ct8qD~--@ASGV2dxTfUJyvCt=!Of86j#xKSHn$CMw|dryVXsAvHxtf
z)%y*o*qo<Q=Ks4wnh9$1w-g<zzRAD`0J%ecxAs)cTi^{(J7{6F>7w;?Vcj@guLs_n
zCYQ>3Jxmz5XND*6-4De8FTTj3W%vbN0=YX)<Cz=StyX}{w=J|^getJ>gRR%#k7HT!
zG1P(Sn&Ctx-(4DzOFc<1zW^M1Ps=8|rv{um<KfI_ABAk`G5eK^%kPf6&~Q?5L+ok{
zi+`!|-`^{wkQ@?th@v&1%8eYX?(Opj?t7MYWe5H+?wWro7kw~e8ILJ+Hy54069S-y
zEbWzLTU+<+OIej79X4tygb$uw%aYFP2dda(>iS42u38G+)Sr;!QTu|XYT?RPAo};9
z;b#eaKhm8Q*^N<C@{U%sC=4S}2f@h(m4<K>zK~`X{l?jI9?_<3CApxHv^FyH>UuX@
zRF9)Fi4pZ556B4+8(m@7t82;P{VCTWni*9FQ@1wMcPB^DuflOCl`0$Bz_t7@;)9WZ
z(<_Ve@^YDUUN(NupZ3o`{LX=9Sqbohe#(k`h4=IKpAnZ-;HTIk^{S?;*6#eIliCGb
z-~?6^F|LD#scuKm897(B<31<$PucaiOW+sq2RuuGLDG)utcXm2;R(e^V3iNGZ(Mg(
zMe-v~J4eLMv;i>aR4uq(^5KWdM{g)}r+4nb$+WMIh_tt-^f>rU&Xw0B|LcWzy#tIy
zGO~3(7p3B-QAic<cyk1R$NIZzFDB|Fjb?gz{4d4KWqy6w!)<l{A(d5?OQ_aNBN>gI
zpxlfSC>gC^=dBa(9R=b4>WW}KMTCL2(H9#B?~HY?5{<$fh+zWfkV_eiS9-#;9c>s3
zvJFL_9`h*ro^5Y^tTAOUk8BGsWEZ;C>XiX~R%s+}1t{Ul5BUOS5xpFAuUE?G(r$9)
zQfcP(G|)_QM+}p=Bzp4|QeJadja@q4d;eVKGarF?9V*$~`hz&^`Fej`93X#cn|a0B
zgh72L6IBQ%(oQf`COw`~8kI^m5uQ>ywg;3(Cqs0~_4(Y6Rt+K&KtZ<nbm2Bj;vMCS
zYBSHVbiSExg<FTkTG=u!b)Y4&r3IQvO2<+7{C;41TK;5pBpB+Rfw%$$K2T98bNX0D
zo$4&m8)MJ2&0cplM;c8=%MVZ)h;U^$2NKA?a)8*l^9bYeC7Vm{=Ck-w)y=iy$&~rx
z0BJ$r6L`FejQ(Q>BOXz~z^zhD*d%JXlNC_2_A7s7zpz|Xr(>MTMfSopp_N*-PJs!e
zr^;4cdkD|c2}<ga+dhzp17GlDXIK1yzftj(66L*BGn1wr{c7XJ8~koOa*aZjJ)ec5
z7R9wbkbg$9t1s<TyQq8UU^a)l&0q^l6=R}FYZ}l^vPmr9(2Evy{%IZWJ>1wP?XFpM
zmqO8&n%eGu6iOPI(6uF8JFHF3o0_jYJl{bfb-mgVviRzGaf~0h-}B(-r3`HEHKIA)
zg$>&SU=*8YP}QQ-o7^x_KP|^az**9V0z1@Gm!=i}LXqa}Gc4|TLRB<Va{w;Rpm6Kh
z88uS?{0d2@yUO!umDlf*)#Gq61aynSGY>p++?^}gS|A41kZ0{u90=gp^c8Z{P{Al7
z4v0&V*n&ivbULq50S}b?0@&1Hem7ixjqV<eN%Y@ODHt9aZ)PhLVB$Y${f$m+V8*kw
zZeFywxd5ym7leWmrP@`~)kLRa)L#kY0~ajhbpc&aHm&`)!Z)xde=sP{Y%{Sx*3Q2h
zB6xdrxB9$GWmZ(-JufvsnoY!>#eSiZ#O~{4gTg#ywPt)CpNihS(P7r%S4e=Gy3Zmd
zhxdI}XrC=BCvA`FfU_`Uk+DE-H?>&2;^iGGoqA*9qTqJhnt+@2@=73F+QrdY(HWz~
zig-#r6HSYWmIwXkX4te@+bxzCk@58#ow(6^Tfrb>VYXQ-ib%@*dT)rcfrH)eGF)`~
zZXI;KTWTk8m97Z7Z5poRmdj0||5=^6bv$@i<+G^C_0D&^C-XS9N!(o(;ax|m0X`<1
z8uv$=)tYuptQ_fxSmzpPk=eXtrC|;{<p3VV7RMWt$O6}y{9+F*%Qy`?_0-vDlzDvm
z{g7r<o5%kJ-t!F#NIK;|VN+`+w;1h1#GoMaIGEovP|VCZr8WXdPd1=KS@Mv&GgI=x
z$Km2&VQQ~^r}G7rrW41{`V@1V8pc~E8jmH@C+jgM1}*SEt?Tf5L3)I~1Jv|9+vL%2
zbn-g>2Gc^}?%lvf4=}?V46ugg!Tx|l|1iCE(OSx5QO43@-}})tw@hX#ZWZaa7($;m
zIlw&1Ue{#8g*WYPoBLL{VGypeYf0XOA-;wc!JQ<c1?^{6KtDt9_+TGHbxDmIx7<ax
z!Wrnw`e{$;KrojJa0qh8KE${z`!trEp-W0&O^pBc26+|?9!){&%oOe-okmM;+|ty%
zS$EFEWu_M2VTYM0no?DRRMTp<sDo|)gAtR56NHvnRRNhOhz<W-U~2u%VuhX5?BLc~
zhP5sSyKAVu=r$AKl#Et>DIUFMog0&kAG?J<_qxqw-Fw}QD%UB)`)p&UE9q!-dKoq~
zk6NWfRzA7v4MP6^;{t$SXp{5RuKwYR>^4l{UfcH-VP(EN6js}UbXv959Y!YG8@`GW
zRjyh}-K7@l(^q-OFFUta_5o*fszuSA9cRjH6~g6js9?*PwSj2<@caS|tP{{ag1692
zX{CM4dG+P!_Uf1BQ6%=K$q@RlFEFV8iGSe-I~w7>I?JZB(~#53M@%wZ*UCSLfv|~j
z;JPXN0jc<4Mg6~99I~`9;@!nbgOa@GlfQF3VLKS498w#g{<_+0qf4jna3<dOr+lDT
z2gjNN$F)(`b0OnNdvO%2;lZV?Zrz{+5hzEPXM3|owx#7Cp+ZY|aOr<6KKXVK?&@lW
z4K@=`V|Bgz;{Fv?befDivfP2mm$xrRa-SPC3rLPXvlbo_rg9$SLL*rduce#7Aor8F
z^!KW0PsSwY<W1u3rI3z1RsTRy|HAto0>V<s#>(KMkSyleC<y&ZLbYMe2rGKh4;uhS
zvf9ng+3e5OgYF~@pQ_=J{~2LZ9v=>8ml<MP3<0GL=erhmkS}l;0aP!WzSpsT5~Gar
zWZ&=%>#wVatMTE52zq7oRPxa%(Jw97T<%{;+)GJtz>;oX-oXE+ka`*sw31MN5Q)78
z+DfSpmxt5I{?qayeKf?SM$}XKl*A<sz||5LE3Mr8hDRAtBrxbDBK+-_VND|s9qI%}
z1i++<47BQCx}A7}wDYd>D*y{{bUm!fbw1yt@z75^C*3{+-$(_TfajK0u&k5<0JI;Z
z6#_}eSz^aK0t07WJ<t9RD1q8|(OM)wZ{9^6W;Yh4F*t_O(K5>hW)~1RgWwN72Kjxb
zHWC~}PR^;ovH7CFHW};48@jCmjUf0n*imMgk#=OGu{*1O-Y3y215oX8S}BeV14FM&
zOKV#h0d}uU$@<ne;Jebm0&?O@ySe#OLhh55QXLMQ*JXFrr~il5kr{b$IV?kfUVPnR
zpLPA<W}qRs>{EH~cHaT-w@q_4;B+z#!e>5!P9)%g0$6wT^qU}YRp=@C&mD{^VGO7+
zP{k!wV*a-PqTT?A8!C32v)DU#4Jh$a(EAjsPE%;mQtzB-l@I-PV}xMfOPB&Voca1!
zgrJky6AUz)b6Jtumt!B<DCLsrV1Sek;Ev6{fV0q`I*x(|g(EDPV^cC@67czMOrN=r
zKQE952OZf1wyY=!!4Ftu-bhKXO=g8yEuKpo1B5=F3pJ0c-C?DfPP>v!EmsES>akpn
zFf0Y;&E=&r(53-kGaJaMWaU43|6FVA{<Vb!bX-{&!QdqdV|#%nR1RP>45V^B2MoQ>
zKpEkN0~UO&8;CJgIjrz2e0pKvo*qjod~fyP<Oh{;11Jc|O$ee!ve)h)0c<j{*YGE*
z1xm!&3>t{wBR>SvsLA!57^ei503)x;d=Rs}MkoI82vrhvzC$|o!K{1)qqA=dB!_@J
zhX^3UGO<#GRdNM`3T!CuxHFj-wU`_Bm)k1!|JZxWs4AmqU06Z|0SW1bO^Vc}M8Kj`
z>5`C?QbG|#N|dfmhlF&epoo-6BPbnG0wOIfednw9-f_+u=Z<lHem}l3{G;2q)|zXr
zIiLB=XL2|$^e|`@>JTBa1IfvBXBEzWq>)Kj87ig&9vG2(E4xa<SFB3Y_P+xy{ue;B
zBkz((emwe(KEfwAH}{!!^g^<|qf-C>O}TMlLys#T$&oAq7S$x-tRIcICHHDFu6bKr
zI!i@Gb-w528)Q}7Y{!RoNoN7P(`_II#Fb&w*Dc$KByy)25#fdCcSKf_@C9PRZ<(1V
zen3Q}xo!`1)FD>fgSRAD{SwK-n1o%bvaet1Tai5C7oQeQ#l}9|663mH5TTm|aTP#N
z1F{1a+-ON6&!z$Aq|h~e_J)=)*BK*#)*q<d%&}?!`HcP?)xSjvG}!1b*I{yBS2)nT
zrU%fuu?a8GjeXr72%B<H0>W_RnLiyl(shd!_|=h5iZ!#9WEE(Ud@I)D4{TVMu=d+L
zfn{4`m(cSNQSbT$3EJX!vVYM$6ltXQKv%0V5Lpl{sIZt1B`&et;}slZkP>{KA6CNi
zWez^|1uL^qs>Q6*+ICUtp|tDoI7`bvJvpjI+;X<fDaMLGYy7CrZwnro?CYye3NrGz
zki*Lw8hQp=PfKiX{xZNpv3#-rJaEH-S)Qe?A*zxJ6l&R*c%%YuzfGIxx@C~9ZyGk0
zrIb~`;{q8ZM16k+HUixi!==s&1Ziwil-z*2RXFBCi$Yu8rOW{qtWhb$A%@WpPYN$q
znkzwqMJt5W<*CCY0T_iGD|44tAPIMENZ+=sDI_wWOzHe^_<*iHlDulXgV&x^gEU2o
z<27to3c!Wc_-5#k->|yqVrAue4D1k3J*iW|@!Qqx-#wbrk*N5#Eq~K>Aa0TVyS|}!
z)!#%#)1^R4URqdvE!<<*J}RncR%I`z{WD({X1cIWEo1RMxGG5=u>01ODiJQ;|IOUS
z!_wEi8)_HvYs<^jb4Op-N*0l5!y1*9c>L=tqK_fC7=z%FSouPK!L(4wAW{%gTqcM7
zu60ZdQ7q?jp-~NtJtW?VfPWub|LDw+?$nN@D}4AAKsNcOwJ*%FPVBk~VNkIzrR!y{
zOT5?_EUEv;y*<Zyvs`IP?96iE`T<%3yrf`^+{g2fR450jE!<F5<c`a|2e!H<|8l#2
zfA2u&vorYAGm!z(Q!NUpNgPO#>pl6Yg5Ao2+-=9&v#OB)Z*se`3IA?U-yTup!BTB~
zcQ`B+vn<ke<RL}ZTsW}I|K9DOvVLqZ-Ym;?WpQ*GmrG~y@EnYVk%^T&cmslcfqTe9
zbW+5leaex$Jw4VpSzS{8%S^U+#3nD?_QWZxKPcg^1TzMV>az#(kiwqVij5=4-D*#Y
zN?mud|KjJOSFwV%59+b>Ogx9<N5L4Og5rl1@(^w79yU{Z<ZedZL%OvG8h?`pbg$2}
zT=twgQ&d{N+_eJM4<oa|h&-e~2=d&b$lXeAz!Z4?Kc)ai#*G*rVm6oviT-5dZo_H+
z|M35hhu?>^r2uHipW52a1Je}ARFiV3P)|&rl`ATJ7}D_>ro=0#5h(N|*B(CrByB&w
zXF)Lz#oRqr=YfbX6`U4<>SwWR+$`*;BRnu)W7=@miQ&N#VwDLrtzy<QDSUIh*hr4@
z4i4mu^m&5!OTQ?}WGQM2mMWq&hVUu@Bxr_$_~ZMnAymY$OG_uBEsJpUX4QA@nS_1o
zlL7}S1x%0Ty#T1eL4mFawkKC_JybuKL0Vubq$Y9<HfRCJps?LZrH6)vtx)}U7wS=9
zo5g`$jd-!_MqRks+#S*lr0gSww5(c>y`j=$XDQn&;&iL`21||@h_wL)QLoNK<iS_w
z5vMtQUThNp=bWY+u_})y>O81`=y0%>1XT`AK+B;)TL{>Fe00Yc2%xb4zJ%(vAK;}d
zbyWc?X9jv>Hi)c6@Kw8d7E`{zcrJ%J-;Wi2wv8>_y1W1s7pa9GkWfPTASAc)&i{Z6
z7U)E1u`7Z5KqBF~a`#p3<3+NQqpdq_SAGy@47qqd(Y?X}Ds-l#aK_=7--BMCwnIfh
zkUmFwpB(*$;wu1791nNF=bv9&V>DYUHLla>9e`x2ImCJIo#!t=hV>=1v&{hgJQl`1
zYbuS<BN|Xc2BpDAxJA4=9TL$WCEPtcGQss@X%z#8CQ>&7^*u-v!Xj3=Nyy_vZq)yI
zIY+P9V&@GYojiM|oGi)<dV179{>*=ZME@+Dw2|I-+D8yXEs8DZnn72Qk%?VPaex!I
z+|rxi?j{y|nE4A_a?t*8sy#t4v)~&rQb^gA$afZCy1*+UU3w!9<b{BunTQwv>8l|w
z34XwlvbD1`*bJY+tn7vWM4nDhAj!Sc$6~ZIUhN=V|9pR-7iciA%FWw;zzY>9fBN!8
z75|YLI2PJQ?3-k4Mgic9s2jcLlj36F>|<yBIX9P;Dgi#DCcj#rKGMch#JEtWIHrt~
zBZa2#zVnaI_%VD&22bdcQq7xMNVUF06^{nL-DU==S5~ki-=ZVxB!zL)jPq00b4DNt
zKdGOi<knzg=exieB%~a7CE<qm^_)9t;h<w)cq%C+70b*$JY1kn;4t>~76cIAz<r*V
zPK9o~4Z7kNBD{_dSRgrhV{WsO&ev?N7Z1F^o7m4#rr~-!nbyjVy_ch@xqClU*$o%4
zi_Pu11MPuAY2Qpa)o4>zr|HF6L8l)wgDG5QDU!1?FGCq5s-LN~3qiX#VVk}@Yh6(F
zn_gK71*PUUpjEt7GY)I#W(uZBiYHsBTq|E=NuQ_kI{=>Adr)fz1w(gxjmx1(?(peB
z^5o7751metrWW>DLOM~EI)0!%kfLjEUgHD7h0;li`I;-eF79z%y_5Bxh0f4UYM&)H
zZ6f05z@D}F#==jeWQmbKRTY~O1=fE#otm3p7o2Q$VhVnKes3?xg51Wi$`(yNdsO}+
zQ9Lqr*^c8vsu~zO2@;M5k8pj;NWgOir$W;^E<Oe-MR>5jT5Q$|gX|`vetMu_{Mq7i
za>C=Gu4@{gNvC<ruh}yvdv~SD@BC7>O8p-)rcK#|kD(nQAu1SABUDCiV8o^d>eDn-
ziVZ5i4rTYUB-Gq{6X@O4;slej{v&SDmX)tF)CZc`=JzO&QqIe2;K~F^8#Bt9Qj}}v
z<S2gc`^L&2&7qc)@39#*RQvSNpb>Yuf_+~~U%9!wNL8<}s$s$_VkToJl5&mIX7ocS
z9E<tN&0lrP2{yIPJL_7(m>aU6FTuw8SPrnP%ln(0@2x|gFH(N5RPx$OsxQ0nhdw%7
z+Fdm0H)lha%Ut`L51iRJ>Zx>4wxhMKJ9S-oexDSyliA0Jpq;I!K4-74yI1fuH?~!y
z%~+GvCAl!#?4u-=lK6$}Kuq5T|BH0IjLp!f#Tm%+FiG(MTa(HDUPYRZWU@@CJycSG
zbbe0iMvl!G$2XlH80#E}tF3dN)6md!>USN;?-uS1jygC{EdnkSf)>C-k$tVyqqrLy
z6HxlRmXm=d=d~(vIOv%aP;tBO_a`sb)ITev*n(6>86lQSi^5`A<U(^Ki}Y8ZHL{O%
zT>Hc-7wp5;1?u!afpJxsEv2G4lEqU76~YCzw~gP+SVZ^Ae2mWTg^X_-c<<^}w%UV=
zto%3nZ2k<Jc<0BzK0P_S^Mojvc;ATEPE2Vy;IX&;#0Tv<Ek*15Af(0|vd~446BtLP
z>*&;8HPz~nlyl5$w88T!@3C=bSIT2A1?#NG&7UKfOj@{l)jDp;jHiEAsNtIyUiGn)
zOZu#^zYna1!LHYH51y&VP}QfuS14h<chb%!XYh0Vf;@bcBRyE9P7pJP(eqnUh8Bwj
z)2Z65my;$_=JdH1f=J$j5GVUp2sx#TYx#R=7N5uW%G|qGZJ+q;XNQZTmsQda`x0uJ
z??SigKS%8e3oiD>^Uux+k)r%6pc~L-%y0Q#`@~g}*9w<29>8QymC)FLwjmAYdTfrq
z>t@kJg{5-YYniMpYMV6gDe#-Eji_U>kn<FFRk;vKB8tme&{7>D=DpG)N#VH`Uen};
z)XtKHgQa}6ZX}v<#_gs6nJkoHwf)s++j&dRBfl8W$ttH3_0_TPbC|Jy?I4H@eA2hU
zIT5jW8@13CZ_wxP;2DjOrTMcU{L8gqfq54d-QNf$s+c1za|>QM(u1sJ4HaA|cX9HK
zEqNzgig${kF$-ydMWF4e!w?Y_@;E$@fAK`1PA{kdV)p#^GDR`mHdtU8j-Y88u@rhl
zA&8#d(w33Yf2w@#s^7SS;roPZPhZsXz@V?K6UYN`#E}r$3eFudoUB&Lrn20UDx8yy
zZs#!ZkL6Oo{p3qmybBy8y1nfE*AB64g5GoY;w0)b_ZKz4#P@^9s=(U%u36S1LE$3_
z)cn?TDt=Ch=i&=V=sE8E2rAlBIf416+iRI<z_%>fd3q;7U?!kfNneQ#+zo*e6AI9l
zlpvLyCs6G_mygz#x~f*;-4xON`rukC!}3*ijnK!h4Fok(NdK*h?r2V8ja;?jg1z4}
z(w~F2yjN1rYH5#-2Y9!JhK)>2T)S3%^;-4F1ePnOs4I`_dA*SdBcF-lk%{1-o#Lm5
z4bP{2uqP!K-VHl*@1<7Gx)blYr5>);%@%rheUX01+E5$VP-RSM5MEk^wr+qO1i-5z
zw8qeln5tB^T4^-#yce@(kBl5`PFzPIVIo=743|D<6btL--SGId`A3O-NXzC}29}Bn
zIBjfc6D??hS7N#q_TMQejrtw{YGQlL(=iuWbg6?p=GlBId&ON>!q|Bk8N5z+)(wl!
zDoMw)!x7U54v`q&;ZR{oNkyGpl|ssWF3;F1p=@fjR@S2mt1Oi-aUx8X6MXu^8jLE^
zJSa=<7{D*`o)MunT6s;#&b6^a=xi(XC5@s}q3a~P{0VquTbJ;Pi=sRN+MA}=c%wX-
z`s$QEn@tnhV|OWZgvaE6tI)}KZo}DMEqg{Or#4Wk=0^Lmas`EDn4*}N7(2>RRk0?%
zliZ;uO^JbZ{zY;QL!Z>GwbBYo%juV7exZa%mhl$*UB^QLDF@bj_RV$Z_g=4b<Y=uF
zapN!*7(<2EguSUOM&fV6O7}}8SKlen<R4SJywp*;*;TRBHu2W7$wHr4Hix%8Ow;u^
zhOU&{T_Ebw@LQd?^d`kE!HCGNz(wD(PK6rI_Lv8WRvg4mtmN#MHson+^m>&TA6pQa
zb?{*V_}%fMiS*~*sO0!})XAY$viS7zOeojl11@3Q;9$_O<LPvYa$wc0p1-fe*bOb6
zKj%TgQ-CCCRt0{zg>k2KP5YNdySwLxiCO-bH~2+kDqJfpUMZN!3I{(Y7v$>Sl<`qw
zviKsv#KgpY`&C2{54S@nEk;8|t~0z4Jo~$Q+U`a}pAVeAv`1QGNk*P)n+N~VmO-#n
zVfN^H86`}D0|_z-`~`E2m%i7@*8jS&Xw1GT$VS7h?Al(Za=mw6`6_7$tK>W*mvU6Q
zhjVXauXjgi3@g|lX-_1J--p~zsV`+}E{<q)mdA_l0cLIC$I3L^`lqZ%b6#`H%XDRY
zPL6v@;v89C9d*W5QteW@Yp*H<lb_$(olU|tbtvcqPg;#dl}GGe3QUD)iPbXgS<9>^
zEq-<1NU?ak3YaVrw$$L5;ijo27c29;wPNM4**E9sRn+|9P!T=7hyPMrt`jFYK0e-d
zq@zQTSBJmLJ#gTXI_L5&MNAdp{Qb_~>~S9{-E1pa`X>dj^~aUays~Q@!lH@w?6PYT
zQI@R4qW&T^gbVE(o4--Z(w#U{&{2KBu);Wwo@ZJ8q=?BsTONDQaIOIFOJgF&pZn)#
z<7NFs^n}V#H8~5nETfLBUa(}W?EX9>w`O&Advl)T%b?I0qh=!F$juK${M?%F*k?6f
z7D+a~Vncbi&g<%838B1Y1J?lydk}V0&q7;ak1|n?0j&RegC&tnM=Mo6muAX*m(czX
zl{I4LhUml0=iD5!7Mb>scY#k_)s%F9R<wq{9nG}q1>o4AptDIdYg^FA7>}3VbFm+p
zUV?QXdjC=)w;flPlv*%7kAA$b5DJGsgjN4dg`AVZp8e==WI9@}`HQ^C=Iy|aeG*E9
z-jr8Ed)%y0oj*N?c41*tYxuy}Og04x=e=e*A2izjqnj{3b(jyMW$gWe<nLK?Z+`32
zP|Nu__y%uNn-G{<MT6g}BLf@LCZJH4h3@u5hduDpW|Nl52~-r#QmMUoZ%)cxA<FU=
zp@bscWPB+8D3@xE_4!F{%{9dewT!?9rs3`=Ld6bA%z;ef@raJX@t;BJ7ak^za}Os!
z<{$9xwK9!EDVGK9M8s^=2bsvu=9Cpm#vwAY__RT38XBEW$y7M%hQJzhj#nl(D?J8#
zuX^rp%38{FeyI0dKkIxNbC_VkaqcNoq(1g$4ews0N$l_Mm%MZqde=s8EXQv*Pfam_
zMEkyW{OOjL!fP)bb-h`-pK2Q~N$~H=ZT?`!A|OpKsvvO_66yMrgfE<ocssP%GZ+l|
zY+{Qm-d(vdwW1NEY8wiei_jP4?TTM*RNb@SLh-hx@-DwVV;Nh`f2LJ;d}IC>?BOTM
z%x}>eIUG#l&N8ZB;us3_?E}tOX03h>mI8eWfs0t3muDT{4jE9JbjkXo`<z!sD|+zn
z>ew7&n?A2%FbN0HhxrH{wPGKST-6#b#fe1*%#O~2-%gdWmB>}W|NT`yXpM+rxP~#a
zM=;u_9=WH)NoeW(4`mt~@m+iU1zfJex1Lx6^<&}u@(5H!liy~CT%^8`pm=i%`IW)D
zb=Y|$8!G!fs*7B(W3<QW&rq8<w8dv4P*Lc>tO#;Zo=Z1d`Xl7m@EfysHGeeZ48j3T
z6o)T!FgX)iT0PtK4S|Z}mNsbNBJ%-pE3&U*$ggc_FmTVg|NDXCLhZN_!9{{g^g>WZ
zfeh<x?;iuc`WQ@{d2iekHJ=KlajG-3g{yy@AA?QCV4i(E2NzL42~Wh`Rz-f@uzt=<
zWdi3=xpmhy&YSw#s{}q9gRVdfhuP~?kTS-Bi$brpsbC*)Aiw?*s*eldx6GO!sk8*X
zR#D&X*~UM%67}>5QU@bhid-a@V$Ol(iTvt%L}Sv`69505;cxh?yXF7^`WRy#MR+*6
z?}FbazD2*kBiH@^{EpB8*CUvM|M57{<o}m(qK395Ym;>Z`^mB%xF1|sgFymA`os#B
z4Kr39Nm*rOGmwG-`LM4e)EAqDi~u{}6t5uFylB-;&xKI*L+QjWLLNTg=u3taHmHc*
zg0gfL@5%(k<lWsXMab}&%OHFQ_1ODB8p+DIg$)HiI$~8o41eJGn4S!|2kxD8)20{H
zQqP3x>FEO%%yB`uJ^*Cno7&ps%~7+CuoM-TEwF)}|LJqkC8X%xtdH3j-sBB1vAIm@
zKc17fo{-K6eY^Ij>?tkB@3jeuSn<v2CLAQ3XhscAeNDaY84OgGycG-p;LF5k<RROd
zZio$GrC&os16kCSG1jlZK|uuOpi{}Wp~kC!3y1&U`vUG=U|o$=%o%@lv&d$_2HwRj
zq-x|~$4(}MQdJsN8TJPD6}i_V%3)+kCj$iMo~RY3G|}hZgtD0g5xclnxz-t^oT0H7
z|6cub8i?W>iw)mh)i#u-3b`M=3orx*^a_Z=LP4Jxs+vtMK_2v#fme_O-)T}TF9XZ6
zY$y5i>y`Q(wy=O^dUO<TlKuv*gP+}rPJpw_eMyej623VN!V!@+!SQ@Xw?UCXSb+87
zU((Gdxpcr5KqUgl3OKCQm)zeD0;A&&d%rgn0_cp(yZ&WPtH@46P0>=~Dqux_mP;E{
z1__r%P`<!-e*^Unk^JhAhp}so8;$WjW64%}maI&`ceK*F@GJ&WCV_C67`_*?KY5DR
z?yW`7z%cj$wMlfD0GZlfm_`^uL_uT6eFP#+Db}w82@nom&=(4`leN8EL{A9GCTe_z
z-Pc8X{Jr)nSMgAiJQCl3cMsKhJiRI*VW_{p-OtdeaQrz5Rb_@<k+};3=z^A=<XWZ1
z6Tu#xC9h;m0epHeRWCJ{)5`GHJq3AcijRs%fqLdS=bzm{(3_xXa?*HR!T#Y9TDdw!
z`u}hNL~2257pZcXW8}1BsYE8oCly}-J4o_fhmc{F?cjFkC#$x42po61IrhZX(j7(x
zV1taiVaVxw2D_rxb$zl9VVn(=nlQBlQ%FPUFR8e*g+|3~Y=oQ(P%8pa0?!E-BCb~8
z#J~5brf3Z|g1D)S9xJh8b#3ip;!mE$D9|;@NO*his@G@*UOPZHh22aY*nlI_<XW9Z
z(Gnxou9vVn$m6Z6!Td8}VK_QE-Yn3{|I=-iP31e2=m3>yzqhyNgpw&*g3x`zFPcgs
zeMs~WNxu@K5I|XHArl!%e3x<=#T=zaSrHdTTcA@M3{^`8CY+-vSnFhE*w__}{ea+=
zxh$vwf8^GxL5Eoi?#jwaB$QpnT-Lq-(C!Z_ks%t6-C#JwFW}*NS=G8MTm)>->};JG
zl@}YypG4IP{pEptX$76zKIlFr?52m2K12A_qQ5Xi#(KyiM#?+%aF33Tw9ZWdO#;D6
z%(d;Rc78d0)S<)sXNkfJjb&?fD|U^yu_1p<W25w;2r5CK@5=dHq&J9ngWJY!D&i1A
zK%S8abH{6cEUw?CEJ_?bkA7>sEoxlc7Crknt7pf;+-na~`MMMC2ix3fqebijw5#VW
zv*d8P?gKX+xg&^^=JD<P`X&u`9QvH*`FG<hCWBva@yVtEHVy<~6{x_;SPbB-3)3we
z=52#4)lKXng`26P7JiJ}6)d@o_0yHDSAS*SfdeT>xJ?n8l9k!cuOmltGo4G8m^g&;
z_7^K8t9SD$E+Mhn$;rtdfVD+Ve`mehSXz7W(+Byj@is0@Cd=<@5981pZA}Yb6&vYs
zv2R>e^myi`CwyMF`WEukXPm!h{i25&e)o;L?Ra^*9KpY_nW|www-VxXsAk9ILb)@*
zpd^IebR<?Y@YWNiQPKHFD<OH=7y<uu`bqiG?EE}nc*uo}$c4n#)nqZqn#Kb&h(^W)
zK-vQPc7&B=JCNsgdQz8E@udo->YqaKmoD)WzuhnTN(B?(selXPK%!h42poe_KcUuW
z$(nby=y=u*%)dm`zkkV1#2d@S=kLR0;d3g_PB!}Y+Ut<B5xKrXYxv!okA#|0ymmiL
zfb%hu?#@V&3Mgu{ns^_-0+g?*rR6M$(lrCXExc3qfav?^dBj$~;y}u?7J5e_>Ri`c
zR{~*a{QzhsLEt|2+#B1Gvir8j3dJ#vv$2PHp@?2j5<{uZk5;F@_EL4}&qksHBr+}s
zWkEvVxmD%v^r+h@7s^4>XXQG+o)8vkI09B0sX&!$FctsBr%#{mxJ>UAxf8C?{WG~I
zmq_q!A~8b~nzK7S%%JLqvV$d!ycmx!sD~Bcl5s<VTnpVdI2hY&|E!L=Tlit8f{?G3
z5L^0FY$#p36?<7*z`T{PE_3=1GW)=cRDcB&D4<XA?+GRNM_i~UM1Fo^+~BrE|FE2g
zF+7J|QLPQz@XXJja$LxmB6BDVzLT7ENASPZ^;iv@zy&HFnt(erHgY5O!MNKh%#hUm
z1%v^RTrRODq?h>j1Pu6ev@~3We-{ebS6+C`g#Y9UPHw2MgtMpu_5lhxMMuWRGl5cu
zwH)y)0vkCqkw;#DN9Lq=Ui<gvps0lSo$tC6z!7OqDUR|f!2^4cUd@`Qak1`HFp^F6
z`zz+we<?jwSjxQm-;0BMN(|;8uu>#63f)JW(Re-5rxo7~@*I#zc64^m2pw=M5|=~<
zRRG*g1(!?K9{)bsfF1nS!FGeG_gtuAevTDV{0HHU!4y2qV%2bfY0BC1eV`{nzELj@
zJP^zMN(97!KdU6*zp7m+_GF8}3^B6oM&JtHG=&${tFonl0xD&id|x+byuTl)3Ja;2
zn|9^z0T$`Q3orh5{@19^6gSF&$9RPoe}v5!3YLC=G#$b?vCLAHi%fxD9L!kD@NzbF
z<@bC4O^1C5yn;hZSDXj<?Oor@rxY9I@U%emt=z2THjr|`=-8}QIFPp;xd2~j7({-k
z_-~L`k#~@~J+{bXndNHMfr<1PBtsY~Fqytk^a96_L(GUE@@ZwNFp||YV!KKI_SXZ5
zatusV-j1O<6^iBJW-IV~S?CP)vy4QQu#Xw6$*_^f{fdG&<7@7@g)C{<F?`^!_~{j$
zrbrm|i5Uw;Mna=6m77dzXQ9pZ+YY<1_c4~`T&eg5vP(E1@q^Vp@yp2L5rhaP_J&Jc
zHJ~%Y?JnOrSYQyyii)<WkPRsad0HaeJ~gwq{NK~4qv5ZDHWejlr0Jn^JGZc*-jT*e
zCZXu^09+v*7JMEdfFNG`IloSpe+7JcFX6AUWy=-nU{d}mexejGUYZ!ox*MpQG#$&J
z;0LsDh#=@a!&8uPD2iyT=b<Y*?UY+yPPq6?OVXVEs>S1hCItuYKo~A2X)qeRkpfWD
z*%x93(WsYmT~xiKkSZE!seZ@$X+_Bqd3mG%`tm+Iq$D)^+pCu>6b%{=uI0`!8ohr?
zjc?A875WxKttmIAkUpY1&TLwUuDDtKS+C6bJle7YE6vYC;8CmFANrBv^o0&xydH<z
zH-8%DXVy<ilZW`E_mxCQMGUq{{K&>;Zx<lN;O((PeC^|cX04y5&W5~+Uw!}$9a=^C
z@Pu|?wWy?zg3sim4YTmJv#d-Lv03nC!862{0*iki@J_q4{dd%?I~xfhmSH?5Un5t#
zz8n8*aj(FD!vJ=valOyNi^K#8PsxwH-~A+iQ*^}A*GAlv{v@M#`{TK}k6-Eccxc4E
z4p`@S?rJe`Bqli|58ed*ZGmBzOQj7rk#Q0KZ^i}QMnwez>1L^q#Ts({@$|hYETJw1
z(ie7d{D=g~-CEyE2G#39aIj3T<eO7V6cIoCV|)wqBYPTcD!elLxn;A(W#i9`=l437
zOOuCBSq#G^sjqv9{`edcQ5er}I@iePw*5P`)A{vvCtMu|sh8j*XWrg;o$&54!6udS
zT@>`RlKQDa7hpj2db%%PJp5oqzV*te;L{BbNjFET%G}VV4U}<vDi8nbvB$ELN3vgw
z9`5_h=Je?M@;T6%^{rScnbvz8p8K+_-MGD9sBQ9sZWwY}+E#O~*^}><wco(X%1+~v
zS}-4e!?RRX#Y1_&>3fIU-Y)ND?ZS{D29Ny3pS9J+Z5jLhPBSZtF;`{->!rU>pKjoM
zc>B;tWB#)FXomRG5#zC3Ug#Ze4_Et7FV%5=|89~Z=ekGlc^;^qY#m;mg700SX8Bd_
z9Y*eY`RBVR%^~_<V;)=;7G0JVQ#5cCys>P7`4+ti$Hlo9pZQ>+MEZmyE1qKn2@M!0
zb+}Q@%Hazb9~#TK#Ax|%llhb!y++}OPaoblUB8%6>4u8pxD)ily+8d{zbKc{o6A4H
zI5v-qdHvQaXV7dT){ZJS8un6%XA$z>U4HRQ)!>b4?j)D)6$$7^6|nRq$@JSto2%~K
z@*VBlG!^M)LEqgrj<`WrIxFk71qba=7<v9^g}SB6>v{ZusQJ6aDqbQ_K3LURja1xc
zzqm5$UnLQq&pqisdvZ`K5InE=%He!3N<Vnux5x2?SI%tOqp`&6Q$()!^j+rE(R~iB
zW?+JZe|Cw6J^4W#jNt<L{`unowMO5%@ozbbBHN6@l+ejUu3@cM>&B9(ZIGF}hS~SG
zugXFg&YS!1-j1auy4zEJ?u0i%U9o@7)4yrCk?)FA8dholQ^#e0{(_j!5IMEg*w-n7
zHd#x#Dn@BPMX%_EvsCqu)Zi>>bBF7>mVf*BM3;VdEYqT-cl2;cM3Wpgox7GPFa_0!
zi>t%h;`Mh5uH)%tB6|q|>?PZ2XB5cV-<3|i@a!GRkfpIPB+U$cTkKZ;PDia#tN-mg
z2ZOMO4s`cR7OdvFOmORU`SXiD71QZ_^4w)x*{&(7V0&cTaG{N?rhIP%%HXaVTK)`5
zh(SBO<yo7m3#&Fd$oO%i#&LSi;d2ljF?7+9E57h5HZ(>Al?GD!JB4wk&9ry!)wrpp
z@VqGYn3_@gdN$Ro&hq#IIgkEDQr0sb)sJqM_NZO;ny0z`(VNNf-u5rSy8<3jrj}U>
zU#D9s#Ef5@7SY(?9mgG8V_3Bf*ahd`H)ZDLzhkr0s<>j!Kk3u=3Z2<I?UZLw$pW#6
zZv-eF6y3pKLWb9Fl}PRn#%yg~6c>2BLg=<S?u(i{9Q4p&>w2rvAvrSRf)9*#+^%w$
z(x#?rRAO2cLx@@O@L7@Udt;>czk841#_*X8vgry~W+|3cXu#P*hnyuSUo)}44m2lj
zk*b_=-D3*v(|rFe;)WaJXZgA$<C;Cvpvp5j&_9-LW)2gL^@vj`3U6>p=atKOYnc$n
zFH4yK`0ub>=)2XaFdj_hVK<Mf0;vh<cr2-L(}~WO$gq2CcI6>m%%M!*n3N^0jsiN9
zR^`h*`)wuPd!LtX>(N>d$&+wd;tGzxl8fdNTNBSV7PF^Bq0vvq2qROfGTQ?4C!-fz
z3*$bRZ;mu2NLq`tbqSV*BCV5hYKYpltnUoupr1aP`jZ{{eB&sw^IlAMyW7U4a}p&t
zPC_#*vWjT-pZc2p@qgszxE`J~xvE!n@qjovFRQS9xKVb5{`%=%{IPOrkHU9se*Kn>
zT!2!jcC`EDuI1URXs}gomLADE?th|TQ+Z7;br_*l+BLBKG4Y4_eygADfvY1uXU{fa
zb&4`o4_DKHIgNlltF72$(GCigzlU@T#2#`8E{Ysn$axMLREBYw{R=;(XXC=OZnqFk
z(LK<p;yxF_6iT~OXy~~Oe#v#2Th|o8t~bmc6~Fe$x0pNjc(<{Trar)w=2t6N<gNR7
zWu^c(W%wk;(WF`%vkzRp665QoIjp@&lC;p=gSeeuxV`;A)u1`w`0VRl&+H-Hm=9g#
zJsD_JZ<@F-e&)UM)6ZX+vt)mWID8|GwG+mR#IUZgRo)$Xb7fhN;a!P|^p5k{+c6mE
z`**8zU=bTFC@bf6a>PC2q+K|1bwmU;A-CHWlzCn6y)7rL7O(H~vmpgG3mV1^&+_MN
z`sVU~9}E((sU^|phBN8(4_@L_%o%csal-A<iwXVmur2`d-`4LRpM)k+^35-0Z{_KT
z-cY;eSu*sQFnl&0qv_|6tMtX+Hu#`^R*YoUTSFJEAI+hhU!kw6&V^FF75fC?Tm2`0
z?ts~pkH&pw<!pD-Rk}7}2Kn&sqca0d`0fOA+L7-beGeav{>cn98?L)=&-_$NEJUL$
z4R#6N(Tu!(CIs8{i<d!{X2Q};ZdzGvXk2{otz7nI`ZbBC>Zhp!ZA5pNZnOk?p`1P+
z;-Rg(UX~nxU{wykvUFU@*=yFFUjE)`^;~cq7j}FTUs;5CgoyI+^xCS2+tGA+(uM1e
zp@kiM*vPRWqSz9H;b`hq+EHrMLOXx^m~R{QSuk3PL@16SX^=YrI;63vj)f{cui>Ba
zr?1&Go9xE_y`2ywC0~;NgxD|ofqAZ5`h&HYUjr`81;Y=EhNQ{WxzT9nxf=sxL3Q`!
zGu1LF1If87qEe!6acO?8wCXJ$@`!oDGS%QwI3!1&&z0!keEzX!au<E=HZGJtUAU??
zR7k!!oMA*P{9ue0b#AwD$&ztNvSX6);k^n*b4R)nynw+jD$|{z=F5hfIi+`=niN;a
zp5L{N;8M?gqhHt)+*`nV9e%Qy+ppxDx%NCN3d1}0ME<bkc#t+8U3{<g$NH&y3hIgC
zZmzwB%W9{rN@DHp6ejvM9fo@^9IQv)>tEi|%&8K4FeF!;#$D^9EU_r$)u2yT3xQKI
z*D?f7W$cLOP0qU;i+G%G?=;>+SD2B?9~u35G+?WDDS7x|ldsYFvWHU!lJED<WN*dZ
zl3qC19><d$^|CkZx-QzeYmC=%^*YI_$6L)_``LgGZ?s-{<5*bC{CM^Cql1fx$J(dS
zkO#wg49_mE_|g*Dra#<&24@?=mvND{H#h-;)|>S7A69U@y}hr_afP2#Bf6WTVbh(A
zCI%jI%Zn<;1o8Wn9AU3tva$y^*3@0vr0RH7K>(+g#RF9h!GBw99hm?e9Z%>j89vDq
zuW@h03A(tlcbbiNo#U;W5%h?<&1c6Ip7`U9Xez#1Mv8>zJ<C&G*R*ibl8Hfa_f3jV
z(EP2;abB%TxjOI@?55{l-gS+k6z3wlqm)UTJ>V}^d(osNeUhQfdvC8uW%S6hf6S6g
z>n*OFY7&#<YX$klCEjC<M*cG?d%e|s3k&GL@`52APZxt>y=i&HzryK@20ICR?YEvD
z#uUTBw)^XKOAa09V$0bTlWwa<Q>t@IT5K`sQ)w7e(Qx11`BbABoQc=+v$!_T22V;t
z)UU{wyHq}ij6!pvSSI}Y{$KCPd4V@?Xme$<Uh!sw#11`qV=s9F-T#ee?O#EZQ7jXD
z{8tsqlSCjsl)PMTWy;KU-DkpZFJ1T0_^Q+LRngMX(6g14W?$9@FZ_veR~9Jhb!10*
zJpC1Rb>qk7Ca!GFEw!cf>7me=;bqZcKealEnI3p6qa4v{rU`!w?x_3)PSQvmxt%sY
z58|2Y6AZO#D_Wj4Gai@1W$DY;yN!zsDriG~UeP#>yP~Q|2|h=kh}T36rq#NW_K6Ct
zPmM^W-N}h@vDkYdY0T;*o&2d%EkN18pr079_ubaCSZx*aD%ILe|1OLj4<6M_&uVfY
zsZdUm@sT-(`<p*QwWYj0CgWR1TO;VKf{$w6Sn|y`!ee&NKpT}I=(s=n-b>_S4SuKa
z)}50Rg;);HNGDt`qa{)d4|?-!&H3M39<P8{RH)L~I1f#qB8eVoWT|B4lm+A*jfBt8
zchJ{)EKriMtI;-I7T$TaKn>x@-C1#PnhfAL&yQ7brvDqW5Mlp}!lbS#3p%U_$L=IZ
zYCC_gd!pN+F#ND2(9$}fzWI<V-CFJSt-1?4v7y~*^=JIms9&JNEeAZda%*M>%A>K+
z=misT^->$79pmqRoJdhtggfgFbk%R{LLQ#te?60^?z*2umU<(u%43*Iamk~FDl<0>
z?e55pQVk!;g9H^V1t(9x1eRu}LS5zY#K!sd_AO#kA*-UP;+}$@+|aiLj%7mds#YA}
zg;-77BP4FfX6NE|v!I}xy`S^hF7wZGGhBu>S03(9-mZ!ogvGSO!k=3AvSV$^y4T@e
z6)E59Gj1Ag39I;GEy^$hVXgI!nAP}Rlb7$UvhJr(denW(c&NN`qn7{X-CzrqC`oS0
zUj3JT9v`R6Ta6e_7W=L5)jp;e-Lh!=n7_r1+CL<_0&%Y~HJhmn>^*WXZRQFl>vx*_
z&Q^XKsgXMQGkXU${BU#$!mzHiVu-f?GYI0Fj=Z^LGqrxRQ*Zu6S%h6_&i&GRZ^_yo
z(Q9s&>WBSI_#sF`Q(<wlS5#`It{1%gvqDs+%>`l9VlG7n%j)5WJl?4$o$XY;Cg~4`
z%zj-@m!PeFkiKL$URG?7sUez6s=inbwFoW?jYs)gWft|EyQyP-;+j7-<Tj~ZqN9cZ
zYDj`5mXBX~G7VnG<_E;%5Q0yVl20>->?lAeDAS8H+<VtY?^#Xt9ACHzUPzhK4hOk2
z*Gr71T)JJ?!;x~QfM=x^HBlpVPu@jg?l4OEYVumM<7Kz6je5(4Ww>_56?HH@?Z2q<
zwCh9hugRsu>)0CC_7=&@wswE{nokQhOV{!B*S7UgXS#00P1Ki~?6kClNicG$^^1y|
zWr{X-D`ft#uzbb|#=6JTh@J&YAbeU43d^Pp5d9XTF0PzKP?N~Ur`SIuG3SPe*Kf$!
zAC3f4O3_~TI>I|8J_)2aJdDzU-i6Z8K!N1O{Uhc#`w$&GociGRGKdUUrRJi;%4CB_
zMD4qER`n<u*wr8N`z-VtPmf0DDkO4b+YWz!h3@<Q*}GJ#vwdo|tx}O04-132!e)w(
zfH(#j`qh7dB1(8in+=jO9ArV=#P-EY(3B%PIz<qx;zD0^U-gfc$tWM~OTWI?2(7HH
z3OY_Vo^HE*O~17y0-b;h8F3_#>@j?pA$-_Ba0@={K?=-~B`bJ{G;1>sv1s(iIX6Z~
z(~w}p$$T4l-A<cxicqo@2Qzy9?@0LQ<BhxsjXB?ctSg%I>O393Qo38Kl4JWXg)4t=
zFACObCC!k<0tsD5;zxxsm>KrAEm%!2ND{7lUV}_Z7zK|GuCjk3=A$XH$b4{BZZ+yy
z%=N#!6UlCarO9lX!a_3b$IVX!Hlhqz-do%!K56^^G2(?hB1<Ia9Y)YkqJ<n|PUu|K
zU(}q<^xxART!=QB27cady%_DofhRyW>3rWp^yB<UK$T@@dl}j62E6GhOPSRdTHxqX
zLI-e`zWY{e{Pc)d%#5W8&lEnZ?J%H7lOJ}~nH>J}PZYD=seB-b@A6SHam_<R04*J$
z@h6!8qc3Q0rGt`Mo^C0lW!6Sn1;^i;_}+z^5T0dAVZ043LmOR2;3hM$x6nL%EGZZY
zGti6|8UU*nm%YrUpJRJ@_>RN9t;$c`3dYFh34d~!;XgksKynBN^E?@HAqQR2#&yqM
zS>H)zaq9aV$cQ@Nk9gOL14b%%dF2vd10ski{QUKx@KFqAESOW?To8Loz{1=vq^ieX
zF}-0{<@VpNGXgM)P<%zRO|7|Zd{5wcp8#?MWu6PYO+37oH<+gr$hmL4AzQjz=QPv(
z%Ez4cn%GU^VaC8Cd5cOT^XrG6Un`3VF1{X*IDEQ3yV6m~WteZDFqRuic!`hkFKi4z
zpR6e#Siw)$FRsFB)3u>Rsr{<6vva?TFpWz>MqtKanEPok@7=e6$zst7;ZifFw|ACe
z+PN<UV$$EDWM>8@xj$cmhSR<k`(1CGi<N#2)Cy(DN93@Xc0DWpnrDf6{A+ZQo<-Z?
zqt_0tSjoiAl8-fIPY;blf88J(zxaqq^DqW;|5J<KU*H-{*Jl*Apd=y@x;|0ZfgIX~
zKgdI%II(em9Wg)Un*icDG*@$(RAFBpe5`dwtmu0nPA#$N_FHu&l5iSfosJI~;8|Ig
z5v<IPn1AULA;H@J(_}6aOph<VIoH_Vb_ei8Tovl;q#c^<^5bg`<rZsXg!Hq)SHvsw
zJ_PL0gvZ!u{3xEHyJGSldpyFPAnI(5$MQpkR*R5uUdQ95CxlKkFSe}txH?Ad$_O^+
zdNU7%n;keR<~xI9Lv&c=Q&*Hsm1^IWOx>1V@P9B^W0@Br;e8-!rTY36BaX+X{J2YN
zlOIC*!m|bMtNm(#*i(3QozV_9*{_UPR&uudIYZZ2I~DB02oEjIk=1|2G--*?GArj(
zM-%J;FEKtkmRTzK^{)H0R{Y7ufeKdUC#?JGwN4KIBX2X@jj5$>{OPw3%65+*jFFzk
z@drKovh=1>lj?~|?V7{J+N#7+3g3;N#jiu=33T#y*aB4PY3<1^zH~UB?L?Umg+3T9
zKl^d_+5MRn*^y@t2>49i6E2ML#t2+7$)@+;W%OUTla@IgX<Sf(IhHru>o8KX^54Ch
zm{T|V%k|3ZIuZga-p?w%H0?<!yS!48&i1>RKYWozl#U!bw*{zR#$7O0612!Bzj4NJ
z=QpgGYmzJUux5hrA85;^UVC<d=(5PmUdu<%H&3&0=j2Mmu9hvI`JP*AJ{*(+9n7&G
z{+WDfPAb15QK?%@Q1hUNb!QziQD&V9`ATx(36j`hg`&5<oD&%&Ut!;hGtECl7fm%>
ztgT+Ty?)Vi+NFc8nC`9I7@^HKj|c0fnXZn#x84>E)5@1H$b}{d4hZh|Q{B~%bNbPu
z9<}i&%v|Zg?mGI6*z-rG-ws~=IoRQGX8VF4QMG1!<&9KNnH5{EP4b`kz(E9IZ#+f5
zQR6>+V>&U-{`{7;Ot5`@%d&{qH);pB|C=_lk3=RK@1ushav_oR_2++l*taCh%?_PK
zvJEVLL|Cp)ioih|k)+0}S(E*e4aFqo_A<)-q=ho=%jIMZ*RC~*kHqI{37a}HIm@l~
zmY4^XQ=%+sxXom)BvtAusz}@D)sS{xjl1RFy@(_F8nc&`2Fza#&32+b=ZZr%b`GK_
z!MAPda%0o{9JR1jm_{SEh_)9UwdqtyCZv;a@WkC_K@nIeho0qm`WHDK;rYe7>%K+R
z<TDc;$tP{qor*qJKg@T3?q$vWi-U9x!(0hc_z1RbWPj+h6|lV=YDv&=NBgk+@v;!%
z7lS7!y~_a~cR$sP`!5XtA1;7b3v=nIW&t*>#M7H6w=dpbORh?VJ*gOTA0hL0--69R
zW2EC*NJaE^^01ffR^q{zW%JFvj;rt62pH|YQ%r*F-RxL)VS6g4#81@}rpq+k3qdkR
z@4h!AT=%+`!<!WR{OnefOMPyVaoy?4_0P&A{LIfiC3c#byic&&Xequ`-<OCjrh%j?
z-XS*41+%yXm5<)1jLxrBTH-P+=9n-u=)BwmeKZ#l8vV9SP^gc-;g&sQJ)q8S*J#uS
zj$PVXgCVL5*eyajFQi-7?RYEoki^+?II)Md5bicRs`s_zg^1DU>6(XW&q&+>wY^rI
z2hK>e*=`0=f{3N?^U`~t^Axw5>2LXkZeR1HDqo$&eZ9VSKml#fbG_Eai`k>tRDE|R
z4hqvir|{J;L9>%wUdU{G&G1F-GS-&l6xMm~Q3`QJe40!#EL&(7`C{P?d4PTNEIzC|
zTGn(+8uyJA*?}uY%CdIgeJUheW%;=GEK_zO&bHHK_q(`&_mbq5#Py)M++EY2n3^|n
z7-gxr{ICZ<S|dX0a`(7u{+vvBXkGac*gcAV)BC$Vkm?4XXz9cYETi+LE#dR+3F4>=
z*4!`Fa6Y_|JEr|TxgPeAx3-XbQvPE^f{NVQcn#C>wLMMqm@xO-hVQK`9w=^Hg;Uua
zGF|^Cp_4FJQDQ<eZC&qR#0rr;1^@1lExukr==0+x_M8ty&2c+CB%BW=A1{jFM&WZ=
zt_I8M2|Ptl)_H~~4K8IoX){)8CHgf=sb8`1Y4?j=?9D3+dN_O~nS;_DfK&)Ln-WVt
zb0ePT8T`B*getRLW(f?vC;aI0(5fUO35FEM19bAt^**}ZA)(<Wb9!$l22m=h(~s5w
zm+^;r`lX52)&Yy6{{HS#$-Qgm0bT$4#?bq7So}>(x!}-HODeiq|Gk#}Hex~hqboAu
zM*-JL>oj?@R8lS?nBWbQ23MLWae$x{vlQb=`EcY|?$qBFXm1x1JBkU7ai0GnuEno=
zrtlr39OO)-=QbCkZ{&p1y>Lh#YV6^w?)-Sgq=pix9xu)fDy6G6Q#z)JU`1Q;OBV<)
z@;<YKY$W*&IyhO%1b_{!aEr%TK)=)C^5NIJa>VpF5j2cT@)!_E3ccl<aaO?YhyA^V
zr4Wo}{S=dB((bXuo*=jzRaO?o{#Dqn3tmUR1(oLb@E0!j{Oa2~wWez48;ZiX_3v5T
z^zdsXx(yrZK(GIbqQ21PYVtekAELN}%i4auUTF}Pa5F{^dT#3i|96%!5z{wJn{E4v
zubM&B{nhpHK;j(AlX;6RwscVShE$p4jjjKfs`6!qzHV|KdXw+~!u*!sc9Z`5JDliN
z!cReky-p(@Ok=|N{*!*KtPTg=zlQ5#$zC{I+mQo|!*MeqB1wanCOq?8t?5Yx@1NRq
zoKA|aa4nm@H_uWy^n@QJT?38)X9Po$1?O*~z4b|*4ClGe?v6zUoPnW_7e@#edQ)Gj
zWP6>iF+6j%57s9bMm_Rn<uc+DI^ou4)V3A<e3W=8CXl>|3%xm=FHw-{kgQ|Au{5FZ
zTG;)}MkBg!>J-%}F?X|7W%O%?Coy2|L9$!9_q$Fi-#_1Y-5DzBJcEhCKxt9S_r=+A
z^DToF@g;(FoZ8!SKSV1U$S_78#7zNv>)&$i2wLV#pTENJ7}<Xgq#;l>biJMVa~1Hv
z6j^U32q=To!jOP6!Dq<QLID^a9=_mpvRWp^07XVAA@lcUi!ynK26=Lw7>o9p)~!?B
ztyMaiGhS||SRI-ir*}j%rg&~hKL1U^t&x2<c`zaK`Tmh?af;2zRZd}t%_d>t7&j!V
z31!XzuRZv+G;8hk>#Ba2I%Mm~@OPVAk#$Hv)<Dqn`s$1Ov(_lj)+<VkR$o%-00vRd
zc=Y?1P4HIIJV8v%`1^&JD9kH{6KyjMrHRgqdD;!)n-pBZ!KZVde52oK$IZ8F<*FCn
zo;gD!p7-=T`C)G8wT03Cw)c)}<OXk-!_}nDpKWhHY36)mTK!q+x)Pm+j9O>RQj{eR
zH>ul7-zAwaN(Kn*J_oaJO@FVhjlw*ky=Fc;W~o;*N(bLY<m?Hx3+MONZZ30ZJN@}2
z4I~+522MM}4;Rxy0UqL^p?R+$Y7y`d=WfPh+1UFu^zl2jYRuM2dP-lf=@b^KtxvSj
zxVr8t#RZ4bUvuR^dbUyw^IB$Uzw}K3U%iY3s}4fKraJR}HSp0dcpq&97__Muz9P;s
z2)hF8q#;#+_|O|O*7g4>75viYNqhTWjE{>9?cOQ;VC6gGPV!rS^PunV-H&Y}8I`T3
zX10i9LyOek+4$($4ZaUf8e?Er(&|p0$$6Pgo~RScQ*0Cn{W?_h?WQ*9^r{AoRQDf#
ztLH3;>&dO4U!DD|y`#c#Ln}x%F|N+EXU^w<C`AYoNq^i&{c+mkwn~{jiLapI`BOt+
z{Ldz$`Hs0X-(2ofuC~CDx1W4^j+9mAZhs#D=`?qB74C_yTn~!cKb6=q$SI3Rx_YNW
zfiw<seHFn|IGqZGcsLRe+L^MzO1^)-0i5QKZYN~(m*a^vbMB8AR;<uG7pS`8U9E=w
zjNQ}@y}6a!YuhYn$bZ!Rt{6{4ZcOLnh+!eSDFa$#$W0}cl>#JXONJiM&x{!<R-Q~4
zqD-1Hutp;)s^|JSBO*oQ83BYO_!f!vAQFR48UNoY3${r}dZ_0(#*tWN4d`FBM!OY_
zgwM)<j0vR|w!OS*sYX(EJ@aL$;kaDE1bxlc8~2G#teqQP+h-)Ii)0})sbw{{8Fqe<
zLtN~6X`{=rSCxPE8!()<i%c@LKSc)D#{E;I=8qByh6+-oWaZ8o3!#6r52V`$nbx#_
zi1xNt4CHpvO*h4O4{#GReb>~ii)O!*ZIOkiEZ#$V!7@uk#@7=u7IJU_lris4T=z|F
zj|I($6>oyR3V>HrbrFys$gt0@kdx);a+*_(CLRyBm)?x&crkE1(=0!ynj+S2H|k<7
zU+gcUUU^?NbGMl~c0*{28Wd)MLbtD1$*y{-43HWL1MBYB48;;VpT@-=-DT5tE*e=0
zOEDbEucFGWE!DAOxVSRNsGcF$oY1kx(y5@YS@9pU1TSOqC;UZF^HV~SLwR|fNf<^K
zj+udt=BsW?)dr{E%95+MJFcrqiq!3|(%sPFi>2C%e+ZuBsMfKO2hpwABq9N;2alfr
z`OR2&KAZ>?^qUW#{&{CAM@TJ7T19v5JP+!I_sL7v8jU;=Zo2^+>~+}N>x|6Z(&|G{
z0T++7<T^jZvpA8eC$i~ZcpsiXNSe({r>&EGf=AG)pn8gSaRkpr6e=tFTCuHK*EX95
zLd!<U0SGyRrP<yNfwGy*DQ3jgtx#R@R7>vUj+UB{z*+Ir&LD6G&G)J&sK@NML>a&P
z2ru?iSMfI((%jhcj!$>*1(Fs2qv{-e>>(CZ#Ge)2QGZtY?3iLbqvA_2o=+cYGX>P`
z6%1D{bP~Ly3Bj=01d~`=)U_6ujd*_OEQw*Q1%;zw0^POGiJJ1UUkUHcd5*RiETu|W
z5<V|A(y-&}++H10E#M~QmKAL#ZQ|4q1=_;-0n`E!ofrXhL(xWSpcz)p#?5=)IweRw
zA*^1zkvrrQvpM^4ES12@Oz*VB_IqDXq+q{#v8y@#<`}`k0flro)TL96KB-l$T#C$J
z*Er$TrJ2p)yNN4v7b+x5bJdcYE|)y8k~5H{9>E8<ih#6?f~MwF>DN==Y7!+?QNzCk
z9KsJ?Z#m9)-U3dK9uby#S3BTeP5&`a4X4|+AIEuj|I+W@C(`6x24{}twq-Nef~Li%
zE&*{xZkex`JOZMr>EqfxN89z6JXED-WnHHCY8=nDD2u22DW8Wd=v_;>>g8{ghQkic
z0B?WGv9r@E*3@<|<5=f4XdrRlTu|TfJU*Z}D@1uazCK00R9`B#SlsHX-uL&eII_y*
zzFnqNBW>lnZ6!w4l#D`D(-Y%Q^Rz0-#va=c$(&izwfFg;x@>wP{Iu%fMnrPnE3rrf
z&9YA1LdY*E#kS$F(<(F_{0w7So2q$5p5Mo8uuYAXHGf|<$H04YPab@xLE7Lq-2ACG
zn&}#JZHYR+rf!+nLF<dg6hkqR8@Dois!&923cHzUQ+90NCJRsCZ%~tlpkuGeb`ID|
zzy2DR<^*V>5TJ?SzrL9>t4F2xQ{Fag5D(7`6+Ul?a79gvaqVxxL7H-fj+OZ3UknaN
ztMZK_XpOAtPoo6orbD;8w_p2msb{2DNK*(u9L1Y2jB5+s5c+*k#Y9<Rn2tN&wZJdn
zc4T_i>gcZ6M~_2FsdKwG^FL;9+*$O#TlJ8lJNX*Z#*a4HwELbhjw&g9A^@?5qKxHZ
z8YSHiaqGSI3nr5*pNnoDrO5O8R@rUwy?12_BsxEYs`j-1?-7KnWrt@Bh9CJ|Z+?by
z@PGSjJU=aIa-u?0c}^u&xmfpmk*cP!{WrYw6*F3PAaThxJ*ZaVLVfX1BC<*L*=bjB
zaQXS`#a}uY2owERI+#znWmc%bZ{bz^W=^ko|76O-CS{!r^KVKc?$6IlF7OlS$Wihe
z-Ro$Y6$@vveVZ3)-$g;7n|DRQ&+*FKT|BSSsdUrU7q+ynQ5K2=9=^(uZ}^s_ZGQEs
zqmJ`{=LZSbl#%=>o&Nv{;45QN&T)Sjb0LC^ZphBz5I2pu{g1n`o;KaLX>3%Ia!Nzc
zecPd<FZdu@Ut;anxu(#mz(Yh>3j||RN;ui9n!4p6_JlvT6&nZ86^31F3JGj1_s;ET
zNulk9E1w@a+Z#6U28PnlUo-d;+LgebnS`$E;Q1BB;-5ca_*@hP&e<R67U#^-^=hzI
zCx5Y@6$Pj_4)hTY##3tU8E-xy)YXsqn;uCAVCMUF9nBnXhyQlXT(L!#g^p5dmLLJb
z)Jv-8>s06$vLg5Z_+x&EfZ-xDH>y}zV1*JqHhly{J1a!@mpV;`$Bw1h)lTzJ$Z7G2
zy~;I<T%VxAAjsC%b|>bW=Eh2gP^>#wwse2ELJS)Vf(lg9esTJ_W`lrcz$0l5SCzP%
z=@rIYYjd6xg;PpHL)|o|9_{29K_xl#zA)a>FWD}>gw-Q;1>q!YQgjAXPmJa5Suk|v
zf-mYaq@pC3WQIczXpeEajx)7oRxIv|iLxg!nAME84A*X0X7S2LctW7^#|ZwdK{;{(
z!As8IQ%C!7Tg=s`9DXZxxv?Tubv~ZoSgzmpi-7sY<0I{9{wlS(s;*(?T4Rq7{Mwqi
z3nd95!_Z$`XK^fVxTs`IFGnFR<JVXNPr*>hi*Gn>c|^A7LYJ5x(k#{u(?S2dmu&`5
zEqYUMwsL!#qxMq^BKliZn}>GBwV2pZ8aWQ~VYFvaxuIF1!arNAnx6m`;`n>yi5=^2
zBe{x5pKQGCr>|}Db4K})H`N2Kc9!f$rPDt^nF%l9www}&d6<UCeX4OaONw3lekAd%
zp24p)z?D$#c-eWb!}t6iW4f=owB)nj3ace4kY}^#j>3YSwYgK4Czd>hwZA0b4lR<G
zJj;U`UNH`fL90qUnS@C=rMAZ;F$zfzbXBBgsVv4#)Eyh|zlqkgroZlXHN6hsWg=2Q
z{nI+S&kog>rR*?Z7m$dNYq8nv1Rg|q0#T&T4w<8?Yb(fE%`7ek$pn!lzRmPIN2IY+
z`{6^<TLztfMD%oin2dv9F?nSK;~r9LB!_zBqxmf=IM{FDD{!-NP1Sn_#N=z_<q!LB
z?kwv{x^I)?U*h~<jJ<VKm0K4+dQ?&oq&uWRYJ+rxY(Qy5y1PM;loBL2E!`pAozh*>
z9SYLj&2Meb_x;9q@3?>5G0r&0;o1A$@4MD|=bG!8&wL&Q;sFGfsOMW3a~P;tfZN~w
zp8|@-ko4@<yu#Z3=ZAfd%NsAT?W+9yar~@LD_*#YASmXU?|?wbtUD$5_=9xo^fW%`
z)R4SB-GTt2naa~h_A#dTSrqtSZ-#-v-WMBw1YaefiUMloRokMPq8k7!q(IT%d~9q)
zpm(Hz_4Dyx^)>+b1IbQ&x6@7inwN@yk>$U<aBV<yolvRcRfEr2nHzZ6SX9jaCsR|;
z7s2g(HwftC0Qw&xy>bprT@t`g9~P|scIP;X1Clj&#<~a`x^ATfZ=43L%>Rq;_Z$;=
zG>HQ3k;s?gNWg&=@%;SU<Nz>2XCo^`;lKP75hR1!ehI#Ri`z+XW>tcMB2>fQ-9_^|
z42_jHRq`>Hm>#fej(=^A1uQC%>FDS}&Jx+j3^r%kzyJ)rxbz29;&~a{>d8@*%>$ke
z6Mq~)ne9bF{J%Slh|${pE8^l(L%vPLBUsEz#Hb=NRrTFVkac^a@jfo3pumW*F3O~P
zSPruFxyE+H=NxdH_(^WL8DfkQU!kJu7RW_|JSF?MMt0?<IlFtA)XJTJYvx8pk}l~z
z)YFS?(dZ5PNBKW@uV0IVm^!ZcnwyCn5rC(o!a}(vG3m4zQkZP@@tr7{E-863_%ks-
zapi9Gy-}z->tDt(3n}(x>W~s3Hir?~ZN^fTUCZGAeY@7-Z<qHd7+9j`#ssg}0p@dk
zj#@#@{GvPc=y3UED}#HBc=!e&_JD?_R-Y#ibX3}BJfFj6;Z>U<lq6YmIK??O%W}^U
zaQ)6v%Dt#xXn={%pfTQErKbv&o#5LB|09g23?D4<8Zez>P6oz1f}lV145i}XKm9Tp
z12$kQVBaOFq6Nob4aOoc#gw*lPM|nB5LXQrp;<Wim2(4&Vk*$=Hq~3E`=8`ACx2fF
zYQdOH0xS9Z#oPZMUlbu`S8`gvJwJN|IEz+>x5b5x>+68krF~>-3))uU)u@sEi{Wh8
zt)S<W8<%l*HPrtOtmm>1;JK!V2=~rH*p=KNe*&4rz@<K3W%3^Kl|92Yb!-1_$YG^X
zE8uMci!X;Ca!*MG$iSuz$X*ifi!_KQcV44%9HC|*!I{pRQ>JPW4%|iOZw^?73I09r
z5*((U(wHB^xkNwZfz_3@AiK$M7)YcH66e`ulGtvAduq+5@8Zt<Tt$SFU&OB-OyMSi
z>bSUgP!FK%zbKO>bOq&;_lzHSQC1uY$1@z#<mlB)sO3n6eB|U(>{k}<*^t`~&WLda
z)m{k2HG{~>GPn_NjvzSD`?J&ZPi72Y<*=a)HzA(1e>(j~s>oC}Idn(W1M;!I_a`L=
z&wlIv69VCh=ax>T=qL3pd_L^Qs(zP3@Q8r`8UXrUwQIpwg+$_>S+e)Jkx@9htiCBe
zaf&vQIQ!k_Qk^%eiQi*-u`}q{E5u?n^1yjJ-f#ziF;S6=H%KvGcT|~0(@K~reml&!
zJu3^xR-I&KXP2(PDPR?TH93GQQi#q%uUXEQ6Gr~@;I5I)?f8}=x3i)$0HED$7rab#
z3Q+&Ac;TSu;?nDJ4Fi=&>18HJ@vM$!VLbM$D?m~sUcln%6pLmE$aH?)CY+d!r!$9X
z@sq6U5gTP+(6Dyagp;nHh`WDDHC{XF=<y;<1Bp<phd*+x&3PyH=Z+9l)}I;XlGJab
zUR1^nbq}IeQcSmPnrDfHB(t**X1n}tFo;hDD|L&o^6LQ@3Rjv4Z$*@Nd8p107d$u-
z8xVLS!MVB)J<V^zoMUC2&P#@n8)2TSSP`onP`Bs-*a!;g-n7;I=}u4RTn1D9KnERT
z0zH-@^(su7s@!$)Bh3vUm^>A3nP%irGBN@TxzWmp3#I_jt&(A}^_gC!<SCyc`HMGD
z9RPfaUw`WUT1gj4s|~F~Bls$C_4L=k#z;J`D^4s+awr&;48TsyTh8WuJka|Je?(v5
z0Nrf5nmkp=)lXd+N+q{&3BYAyI3;rqor&sBr={I)+GeKNBa3gi-kN)&Xc{fL2mOOJ
z&D$s$;}5AkzrQNep&J5N{UN9<@F(whx53r#`pdNgj2??mqxk`^GT(&y|5((>)cT%C
ze=bk>Db>j0L&@krUU%An3Lg5=^)3_31e)l}K2Pz;;RV|dIQ-0+6P6G>WLZnEI8&{Q
zf2+Js&KW-&ZDQEbAG$s8GC&C(P%(&2WaGb1m)@;_N&(;c+#gGjK$EXCB^B?JQ(cF4
zVjfWSCNpC<obSL3ko2fD?8mKFPXdWq!}x4_a#A*TCkO*rZdUrgzj{>hZZ1*K96gp*
zEexDw+sgf^_|EqIfbYXfe^(*FE<1rLi<T&0B5tmXJpu(Pm4rx2D#O{X_L;WT!_y;W
zv@{;H$OpEiD9RdIDreip;<c4fOKyd=wD!%h+CnVf{qe=4^F4koK4;Y2uoSWKsIH%;
zYPOeNr;?@{Ec7ZFII*rw%8+f|GGx%qitY<r02#W*gn5vUp_Yo)ceEW25{B{Y_ebhH
z?wC^ty7-47Y?;d_$%3xv@3@%JDXD0bodO45Bnvw{G9SwoEp21zjTR2)v%Trwi{~-G
zT5A9WM1h9qo5A3$@|YdW=2eDjz*6stvkl1Q@Aq{1OrZB%Vjtk8LJkn=_@31v27vY*
z(Mv0hcL;-YRK)-CNq;X_#FX1Dy>IeZ4KP1ZWoV<Ltgt+Id3ku>+|QQWV)g9fT7SUj
z1Z;Z!S<|09R*Q8{3*%f@E@Mn*nysH81*7basS4t}C4Go3B%z>66ZXh_vlz#kX1~6M
zS)^0*&yEwBWCL0PAOn8iK2unFiOg=&?~k|V-fFol$CN1iT=P7wYq)p^V&kF<OV|wq
z$!MmkDV-I+i;lF2D+O+lTCNg=Mo!at7qJhP%<n<cEpzT|#LJ@7h+KcXhCxXsA(JZX
zt|WW(Kd^J5`9g8hdvSoNDAX#x13dXKX5tT-)*C+_;cNJzD134HzVR7GI0p}7FU51L
z?6xLIR4lpPM^!s@Q35bgG*mPAc6XwN7?7m#S;E%q`WdK(L=&tdym?UwbfLp(>*#4u
zgx+3~E_l3%hRU_~&C}V9U*IKM@aq4Z@hPjU702Hwu_N6pK$^{WrHdIQ;M90ONFe-V
z>Ba+ap-4XsO#5o@s+ld7@S>CQz<8rK=w~l4M-6GHw2>MqVzp%iyw1h?y1#TiEx3MS
zy42^m4D#^wcgw@Q5j0QSYV1X;8&pOs9NvBF*CcxQc8{#G^Pvq;sxVnSwN43Ul>4Mg
zLy%(*=W0BYqI83zX}K&!tfZm+cMV3VUZXXd#A~;&=xEW>yiXIxUfug@`_s?P*uK%t
zmWv~L;*JKdztgX(X{1C8Iy*T!@1Y+w>!=Ahqc*X+{W=XAe^gQD*@Z-}l!-F;$u<P=
z8h#x(UO{aCXf6D(Cys{7eqg_u=U%yAyondG;e*PO=KEE=<oLMh_mW;UU4Y$WC@_{(
zv(>URE-GFV!@8|9cSPYV&EjoX&fBE7L3>l$8XZD5Ry0&`R$4H;Pnwh_Me)GmmJ(<b
zjx2{kjMr?bj1WP}@r$DDpdV?sr2;}?di-sfM&aLvsM|#gmmh@i6Wk;AB+yrR(%1X3
ztAa|`hti_KvC3@JzT@I)#h=?}yyKniy{HaPs1uD&XJ==#-j%k!%>?Fch*!^eSN1f8
zae5O8h@H~js|VVz(ujn6QvDG2t|`d9=Q4t(@@yAVXMN+ZwOv_1D~#tEP!3Y)c)j-~
zC_3X)bOF!jUoQdi`Fj|11T#b{K)(A+eYE23^0C=?eyy8!4r}gE1R?UdmG8miJ06E)
z`hL}dAW()WxB!wxejA%Fo9%inF+NzGDjBG-bEnLoiL_Y-#e8PkJuKyuTr)Z)fc)Y!
zsKAQ%$u*Zx;}Mfq6A!{+h>FVp^ol<{P@I8={CknccF9!S!l%uCR%0VI-o({y0M7lz
zP}V8*J`?g*T__|Ac_MYtJy&ku2F(S%i5!Jd(xtjTpkXZ^S4Mp$-vZcR&wJfEiOM$d
zb9}i`Lw^Bw-%R!=Y@^{+!s>yE?(?kq2qp>k80LeBEFN$y46h;_D_DJs!|W}bb(>Ee
zYqTD8nOI{+G@K@cPtmyjtuO?zO7e;%834A`UR6HMX0{+wRkBPg@&yzcG1xiPDpub>
zr_7a*iB+vT3sPQ1Qhs`xh1?Nqv{o2bYS+0#|5lahduORsTgV2B0pJR}g@W(lR|=Ri
zLN%vs6b)R~CL-TLgL{W!xZ{F#>%aVg08|24X1=5ldbiHprgUM<_~hestoG(&2F7O=
zSHtQJ3mUGFJ58C%8*qHr;&FJy%vYme=}Tl}^hYD+XMv6-Cyg+4kYIb}cI#Q5)xZFL
z$;#Sjv|8Dec=LYcGBU=#;F~XRjv!SRY@izXxK#Iw;fR@XfdKH^2yoN^eN03RHSqtY
z+f&M}x3-`JdvDuX*_!_?63=^>wpyz7Gy8GGw9e`7Pn?l7LD6$9*U=gWa--qcXEZ0d
z4;V8a!#Lp$Cp1*t2mHR@^2hTHD{_N<R5UU2IVl2Q31RHG1^Ls9rm~%Vs{vn9a+nWB
zQu*+Rr(GB`Od}$re$~0$n<ldL|CbB!`YbWyb%EkjW5)Mg-;Tr~E~l@n{S8+r3F94d
z!&O=D08JogP&?zER1Ny$$UXFFmqVuP#uCq`-H52ju*vQG{NKp(i>PYyN>l!zE>Tsm
zDoIE<_S!n~JJrH^x>3Txaw4iSfK=`Gr{*7edl|nUXIjVoc$5&S|Hmw>Fok`L<l8I~
zYP_%ak#Tllw@q=wE7SyVW`AuyNpO}l-P3V{0kQ9VQ>0t|QiO=pdK|&Jv07!kBI`|P
zW>~R8U1lPs$7btGN9)l&;TK3SBJa;%kHOQOhitG;SW;%}uFfI%vS2C$yg`9@K5u0C
zNx;hc0d;G?-w=mKT&{>i)DTd!F>|@9G474sxrsCCW~!m4y1ToBj9cgQ^L)NpXU3wD
z_RD67Lh6;mbY(}>?B80=eK{M(A7(AN_1XBnf4)cZ!47S$%}*rPXSZKlp5EfVAg|YX
zqtSnzMo9o#Wy0XRUdZk0YwP+Pq7OEHccvE%`Ap+yC%A(l5)OFC3B$}i-|U%u$9v?c
zY;NlcezZz(m0@BsODx6J(D08DfI?SydM_V<#oFHjrdUxY%mLJLLpw&bszDeFc|AYM
z^XQ~k%IhJVF^f$(mZZ+<>ahU+U}uRnahdsnIZl7%d(`?b5<f~2&q4Ry8yEp5DmING
z0I?<M-bHFOg9Rae^GS3zc=BhNEC1PbtIpoh@2<)h#%rK5G+LwnoU^OZdYs7ONfIdW
zW@(=!9tt^NM7h$>;vrVjwGAR#{^I)h&)c|CEQJTKK}S%VKebwJf*LzIZF2oH*}txO
zhsQvu27T+rRjTPD>cN*sT5+<@T9or~K<$IAAPlBnQ7GhWIWJY5vNe%onP+TN+3+WZ
zsd&0BroeEveRihVkjjKbE!W8CF2{PpW{EwPB;OF;^9HEUMI=M^zm)$sacpwiVvNd_
z2?J=B*c2hjk~0DqiCXDel#xtW3NMm$G@VK&#ADs@EtG7*LBY5aEG8V&u(a+@SL|QS
z)0(mwxJO34F4$M!s9lwsT+VNW*_F&D8I?7Q73nL+%6vd2U<h;^5KdU03u1fa_pnd0
zZk)@ReaPY+UJwkGilq7lP7gEX=E#iG1)#Gh&Q=#a{Gm9q&M_pnVVR(ECJMGt?;4l*
zmQ}`RZ}`tMRlV_T*+=kVojifS{f)mZC8`8p=|Z`fba!h)F(Nz8o7(&3RWcXfmyrPv
zu{ZdDU)NJ5p&VJN_e0M(yXZ!ZURj?>ZNtY<s0S1=7whomxU6!Wgt>3iMCKx8Wc&P@
z?9M4^8|9Te_?@>&$d<hP=oKH{q=k7*+RRlCOo?6<{2A@2Zd7a^KvvGuGok^TratIP
zCWPui`I6JFppVUSEWoJ_A#upe*E=nZ9PaZCcR&D=%5|Q1d?nhA{)N*endgV?d8y+=
z*-vl@)tTfOtC6zA`#v7>)**uqhK?VG(<(WcMi~8$e|o~n(v7qF-!7>XeBgdV=sIJ`
z%2lEsT&|2S!p@vH%^WV^h5s}HZb|)NJoS6;H;aU+6fO^1nZ#x$3J#?yGp49lUo|?)
zp((V7LUo`B&gp-#)u^^Bq&<1S<q)K?tXM%Lk=&mc;}2Bw_|9u&3(L(%7{F5eP)umv
zTY&>wi=5O+gnxhMDu`UH;;+eja>H{p(al$(WAaDI72>spM?)<^Jyo=<Wj#ej82!>1
z%96;9OFYfeF~dM+(Lua%9R|)=>_oiPsvl2I;zkJgOpu(c)I&fM$h{Ku9+oA|8u*|h
zM`(`T4`@n*qOF$zZ4ih(yP0z|FLtVDNv;pXQjV6Cg;sp)Q;D7XT8aO&N`vFI#ViV`
zTTKt(_9^nb!;JaFtzSY6_Os`Gj!cQw1PvIQVgAfSt?p?UU~)q~-Aomj{{XB>mk!F#
zFw1c6(z`O7D?XQD-C$h)*i}#>0w<Y@9ixV`x&*^WdUMJcT!!`voyrFKsPFU*=Lf+B
z)rEPVXoQ;{yqCn?k*)NoghLdftp@pIEr>ZOK-iP$FVU#b=;KeQSS;|gyglk6w|H73
zGmiJe@}k6Np#xC){BiQ5vK-QegHvP*V+jWQq0Ms_N=MOrKphdYv*J;x5yQS<v!t{{
z<g`Q1U>A&r1Lp$SdB4LW2U(6(@OuTbaVTh<tSFDr;;$f73ccoBX<jB?)NoQ&Ze~qs
z$@V)Lq~VC56(_1zmwS?X9T-QU(~87Jne!(xro8XdO(O_}|G}{RfG(MlOWxf*@9p4&
zhyQvJ;C?4p&Bk`2^p=cLwg`FM7iG@_A?}GZ;7*VqP|0n(1UDIQIorksvPM2YPk0r`
z`M4afp^^aycJRU9z<i(}45&d-0Y%_#`ME0dNZ^QQ)En_==Rk&|9){!nY(uUsuZ_i`
zSaO!3QS%@pZ}BH##j8(ACX+{-ZGv6uT$zO2pB_<*Q`QYi^|8RPS$`y^GR?*+y|IIW
zo*WwvyuxY%?qW@{7nKAM!wj>dF$<5LOH?cdLiKVB>-VMOZ;Z{*cb0KK!cfE#uC+lW
zk~601(`o^rX?$}l)vv6vNP#BgFhekX7>MV;u_P19Ci7DOUW2Gn_G{0xW5oBbPMp1A
z0-#md`aRX2ROGotYk$XB=V*xqW4#gkwN8CrPBL<BQqArhbH#^v>Bz193e*U;v!#}I
z&2$o6Bd%xLU$-mupCpk39l)+p5_|xp^3qp6$6`Z%v^pR)o3Dlt@iM7g>rVxvr5rn{
zv9mD)I0^f7w4g_vJyt!?_$o8Yp0EAwk7);#>*GS~C(Y63$p_P-J`EqrTBD1#w_QKH
zY>3`Az_wNv+E8OGRl0*Z=qA4DsY@z2wa22pn}uk4+^-LZZH4489ML4rgW4IvVMCEa
z0-HT04HeBe;AExDy*8cdoSkuVv1}b)><)x6_eu2;S-<}d(GhUZ@MlraX_v_9)CK2|
z01UEj+2y2dL3MJ+?Jo?B<GM!Kw@j9T{bxT5-o4_fwj`q#`WQB$OX)0Kt&?l@nwrMW
z3a!aFz-pF3(|{gQ?>UJN(gnYb&+^qs*;Oya+ym!dyf0OiUA(w)CiDievw+b^_2Q_q
z2XR(bQ^!^@7jdcOA)Q^&tM;(%6j+{o29j2XaOOKkb;L;IO%G^|o)`>D!}VMzj%&=f
z1Xw(${uDXw<8U%TrQh=Rc$k-`Tgo&@5-$MZObJ!IPY%bG9_t9GLce7M)|-mb&{=&Y
zzl__+2bTeI2Fil9a3l2IG*HQ;(5N!omWL5QUI6d2nc3Nwz*VcPwpJ3Td|<Nb2vAD_
zfDW7X4KM+Tq?X14Qc84wNAaeKH5o^$th)4D^o<&l!6dxt^14D^-FuqTn1XI-F-Q1`
zlpDS4uR(zUea4&i^~RkGY<Wl3!onr^TRvR1fx`Bk?rOKZxA6VtT?*v8L1dY;&7y+R
zgpk|<g*9qYeEF^??^pSfNOxzO-{Ha!Z+=tvshEUkNFf!#=yY!VGNAfQVHq}TKYc(E
zIiuSF=;5G(<8nX!@?~=y;KogMvyNs;K08(42=Bp2qfigd-sVu?5)ZNl+W7K)AHO|U
zGD;DP^!>%KeR6Rwczd)#ZlSu{n${9^xA|{b1Vw)GmrzfvQ8t>=y_dtrI%#!6gg|oN
zTw=RJ)s9(bMaWk!P(s@}k&dEKltHr;C2RPIVtaf0f=)*Z^cmBr>9Bv-t$5GvZmZO&
z6Oen^eB9B2i~;(>gCDG*RA-XG1VGHhYx#8e8wf@@*#ixrLLo+}#{d*oO=k}gbyn{C
z@CDfmU)n{oMz4i*iJ^am5y{lY4Vbu8Aldc5X7Fm<HzpeZy+-eti9xHw$n7%Jdg>|I
zXM>YMfwaG>tmXOH8Ss+lo_KGXaLlBfcCgr(`zAfG1r(DQP=S2iXBwnG;Z1by3ip8m
zp!1{Q8XGRykN*HP`e}%aHKK}Q2rhqhpRNtPqLLLRtI>N0@JMS0jonwMw=i#WBkF{Q
zMDOCh-Uul5c$EZ{h@I$p524Z8ufhP&2HrtXjx4w6V?29c=$H#@$uVt~JZzhAGweu>
z^o~VU(}4DOJCyGkB8x6G<zTa$jucIq#UAf3y4OAb1j>7w_P6UtFIv){$|qAtA9Y4z
z1MP_$uOAUl<vrkYZF08(Fn%wXRYgG5tjqPOIox6zly5q|KEt=$8l#E%O0S$~Y*8s=
z50sENm2zaj(N!sLYvedhcb*9pGzqz_PZQadi0#+trTzg;9uq3*xPXqMJb+(y6|#o$
zMJeYU>nGjd?qZ^c(+7<TlT~m6csYIrx*(Wwu??#Lq=gn-1Q^5=MF?WA053}|ENR*{
zU*^06IXqn}=3{RPD?V-5<&RO-5m7<Krf<I27rWAx<@$f1oKJpceDl>vQhj?D46q_|
z(!sR#FwmQoHv|r*{rJj;$l=NZS-oyQn0KnhmcF=-mblM*{~|dP3eK5K((ftXv*2j_
z|87oZO>5EX_Dk3n!lJVwnbf&kKT{E`IQ8!tL<Bk;q>PhA*;9G<z{fe+vbHsTD+`j>
zL-DOt<57$SU%{#|+Q(8NLF@N{dqIQAzqp<xeXxa&tw~QrF-J{~4EC1k1WkDe0L|K-
z9$GiL@oWs>Uj-LN19E^oz%wCH4(J@(0Ov{ZyFQ?@Q(@GXSwUQ_PES=$s5(!83sihM
zgPN&<Fkd?CmXm6nBm<YwoQSVR^Of=1L%B1ao>Gi0aZAiMoA1hR5VFN1qxSdrS%8c-
z_|N{njRN&|n(vKgjr-HK=PeYk8Y?;YO-=SM8rC&tcx~@eIo#J5Hc&6BQ$Daf-j|_B
zH(1N_$$~f?szqz8hRmcTHT4Z<Eaa<7Vk>#*jXZ+)5SYr}h4KB_PQOXF3B;kn(wMY<
zp7uznH$@nKtn+3{K%ihUkM`{crmsze$BFF*s{yjD*SI^f_8d8HGECQ|^IN#Cl4os}
zn?miydsaJ3=>|yvC?yd#!K?UP4tI?;7DE{-+XmdmAcnJ!3a`JH@!BnjfZA~{j)<n0
zo*+wVqc>1m$WT5AlR7rWa<mym{8JDsQQTcE6VEm7q0lPeyiP(poMyIOtkMwcs`ufC
zo2%D`W}{WH{%DmocC^2>RB1-9=A~p%<o<2OW$PRb)Gc1r*N}g3sLpr*&uaMxDZlf6
zC-9w!VAkX^8cM_k8q8v#DjErt^j6e@zph6Rn7=f1SyZBix~240>xa`&K*m&ZVhFYv
zkB3uK4YD1sEF3Xk_+Vh8zzFJXH-whIXbWfe`@F4Y%si40wf{XGO`p~x;CZ!5P@>gf
z@TPTQOF4-IxS%+!5BMN46A?fvE)I3*)ibjD$OkiRaV_4r7IYPsxr|drvnGZbP(Mp<
zUPcNf4iuw#rVmzYJeLy@7x}EwSc<lQ7pg=HYw%u+jd=97Y~(9lIjY18h!x+Ksx*w-
z<dk4kMqi+Y#v#rCG!B^PBoXu(SgHi8aDLqc!UWa`y(*2W`Wx#h_ru(E8+y_6b=tKx
zCJT7gn(=AJu+t*><W8xPirjIh4z?X&6rm5CMP{nZu`5hR!hnw1OUW>j_2t3o&BZ-(
zh>|RVmPESc=ut_c#!0X@3J=V?Qz{?>ZB3-@C3K&skujoh>{l2?1cxhRP3m6WB|Q-(
z&>IB-*{3xyl8J5F^o?z05#=(zMB#8T44<O;<-0#DU#a3Se7`Im{^%$-`1N)fhlrDS
z@(`Cwbze(g0NdIi+dBN&)JPBavZvwwP7+6jy7tKfNITj$=*X#T#yBdRbA{qLjE7qe
zndWP7RDwT9jARHZq^tQjFKxJiO!sv7VDo$Z>ZOw|B+9^S3GM3VRBkAP0KaL!7Slr6
zO4i94(G>Po$U3*7@~ME+W?pCS3XiL=J$g`N8_N7*4xio1Ke4R3VW5RD{^``$r?_H1
zj}aqSb%mmD6lD<}i>Cvhk##$A^0ZdR@p4Lv$CN7)2&Z}jpStf6v_rxi7EgVW6TV)@
zE5DOPcmo)1t!@a9si60+tFfh~FT0un#QLj8>>xO@!wsW@HNdMY{pg9TP0!Ssr&tA!
zv_}`1w-1!|6`el}*1kM{#^$l$7=2^EG*=IVj{GpGmPZKdJ;u>rm(0zeq+<Kaww4q(
zLOix!KRG?y;pTC^cFukq_w-Z$q{I)(D}`bml@qd%6i6Hu;vj66J@e?nT}J5hA&Rrj
zvgjCV^kr})YBY6cnNWv4sBZ!m1Oey_=DwnpJSX2e_*~sT!PTB?E#z+{T<5H7kbNe1
zMo}zfU=(ras$=RV!lG98&og|M&SkHMP#{s7>2ma&7C}=M;ft7vfsw*yekptn1bTZR
zTzY){P2%PDE}CGAId)1&LIhzU(mSiG_roWRmo{HqHWzZS<;aAC62DtyXxv$tEi^=;
zj(h6Dj2<O{wqOeR2J$0^hcv|u=oLnABuSyxk7L@NwLV?BOr5Ul_#ak8O5bHe^RsgG
zh9~N0oUC4%$ft(JgsAGztYx^|@AAG~V=_M$Em5m`yz`-`r*76Tw1-xr1GpKbZ~RO>
z2#m}POB0*@{0GKROE&*SO}Dc>)!JQ%Z+Yd&w-v`8hi=?djt(+LDvb6}ZW0tpW}@I;
z(-Eu%BsF`A)GKAWc7RY^CQz}(qS*7v7rMuaAjppv|98#_5vZYjz6ISlk1$_6!Yqpu
zQRwVVYp8*yesTTWQ5CMk`$gOxJ;QkMg9)!<mZU@&xkG$}g+G6#8<ztctz2U7G)L4G
zA(cd!pEMPne*0mNTCEr9+-oymFpcq_ztuRM^>gC%YW?HejUkqSg$PNX7g<&8>lWi1
zq)VW2$6IK0z<AEc-PxxrPc#}y7BV!)-LV=FKAI`_ZdvPF{#XwC7n)Z#9Hwh?&6W`q
z_K!KpnuS(r14B?99^y3mTdn{V(7Fi%uu<FVicFWyGJQ6yv7ZmGgN_mA-Mbrd(mJK4
z?P@!VaLDL@-4HM-Ou7vR&V%B>%#pdAi@E&-MGAH*kYphVe>wCJA7fD!>me44{yQ>I
zuq7Gk1&)dzjwID$a(j{}>#Z*>-UO1+M4`4h8LifV-2*~t0Mr+k2otYp7?k{<;`U!$
zG$C;y+)Nfu1EyDox~5*D*GaR-37#s;gO6HT&*@O~Rk=M4)Dsp_y%a}a&g_mbU;)x~
zA0UOBB=#B{O(j$KJ~fqHe=19#qV@#0H?ak74gTt)fxAl)RWSr{4J_E1cddj5+0B+m
zIi6Tlivx4;f9Z&7Fu&3VJ3J0Pi<SsbOdQQqr1C=}WS255s6;{d=H1!r9W`bTzZ%73
zpO+L6cD5?VqJNivC8`w6k?R*mI4fj~b73z<1zdb>A#WKd5|09RPY`JlfpRYtxMD4u
zooN*0zK9^$Vu+m(`WrViz#7sRAkzqiU(1F6QBY(F?-OchgMVXl<y%-)Tr%+~zr#8j
zoaqD1%CmsDE-kg@5HEsUaq&vB4`%@iLPYEI*LCDWDN<Vay`@Ts7-XByDmP-n7o{^D
z*ylL$z7cE@?Vk@bLdJAH;vGy^TdJ-;-&$Su1s)NapR4y<nv^YH{odKNUi6}x^U=ft
z$Gd;PEqvdqG6UB@hTrc$fka~ePOUxyJ$ygt*IzYH_r~r`Xd?JX%}R8L&NpTZ9;E@T
z*?|^rqs8aA>1{PzL0H-gB!>A-DMPQ(!L#wb)RG4G_iD@123%Pc8(i7qnVBd2^?C6~
z{^ieNO>Sk(Bsp0N$`u*-oJn&N^mv|bM)o1sn~spJVyXilX}x4^Wog(1@5)>732kXz
zhY)X+x<s&BscMRxfIq{>@hSMNR0HXq191@3tWQUAOVr9A!zo)}^+JGa;t91lvkRCu
zG@YfyJ#BEEPf+;RIKbDItUUI#|9#X*`1>7|(|yefKCyUvtEZm`9If;w@)VE#9W$5(
zRbZb_)|tip(SC_lB=S*!Pb2w7g@J)Td=I`LI9V|l_jiSe*ntNnT<C0e77B{AvA6+N
zshJ=_4<zAb2b8G*AWB!iB`07wo5~1<21h^PpOzN`cH<H3%Jt5$7<LJ)(<AdQSP~x%
zrk4!qm8(f@QkGws`3ikLMNs_xr@i@=<_pfZ+0NG+tg{HjwYy#$&Ix0=Z^+YfdXxAa
z(l<Ur0|vYnT7AUn6iVLfn4*!VLujB#DADLx;64@L_c>8E7yIvhmcj3Hx3}3z4BV&L
zHM3?-I`AJd`<ea-s6+qu=Ra(sac>|XWPC66Il5lJQ@92Pk}27?+B0(Ka9|(L<xZ2j
zwD7f~M=nEZ7SF}eLoz+o5}WEkXX%TX;xaCk7t<7qxiX#P%?HlGI{CC_5#+Q;wK5~B
z)Wx~b5us<;n^z=@`hVs~&1OB>h94RhM#Yg`1cD+TLBBr%8;U>#m|~3A1vS+FzSCIX
z*0sMZzM=z3oQX*q@UJ1_wt*#Zm}Y`yXH(-gqFwT;tM^_!*RX%^4?v<3i6$6*hpjD>
znlg~l(?pVnJM7jk2IvnBKcMYhU}s8(z>bt-SLQ;6?T^MjS<O^n5RT=vo*pe?azNkT
zIvopWRFV4?PTOP{%s$>6wWSQ(OMQ|=aJBI@be*S$=2Z=WZSRejRo4;r#^<iyTH6P)
z<u+xA=e9wU+ZmEdKmMD8v?PLG5j~t1llU$7=lsDqgJG%KL<vWmgwhc9w`(Y7^Ts?j
zp!eE*wIM@q%jEJ`qvPgO`HzFXO6v{%HI}h|;^d0nv|pCrEpEV-ZprTG^p9c2QYq|&
zV;)J50fj|k`utO5qumpxBz^*WgPzXl+>wY}De)qm*9%2m!ZsJ=0%Em7*le~(NL0P&
zJ4-nEO0?oj2BCJp#yGz*L?VZnpxgCHvp~jZW;pY~YLEc&vnudq723b=W-UCB?8$C&
z5rbEjE9dd``CbUv6AS^O-TRFpnz(r3ByO7#^6?>KS)obHk|~XwAg*LV<j$nI%>0iU
z)tE;llW-zuk#_}+XQ#J5$KmFY@~#>;rjSQBab&rBE|Ol}r|7inEa~Qtm-XU;)UwKt
zb!lb2`6l1#UCz|cG#|t{clKu7X;6L4Myd1Ic+@Sg4kLFk?)Jk>DR&rA)P;QfUG@Dk
ze_R1{G2rC4Nc%H>YD_nYG1y$lLC5k`#*uht!u>$b^O@G53l`kwp+N{a9{xVGDQL%z
z$1?9HNSsUQ*)$?L((7pcLo8s5b4c3puG{*Qh=(vBJe55)u=c)b<3K2`c+P+O%!`Y1
zH#g1m%Uq~?`up;Qc)qEgLFZqWPpRbykTJ-Fpc9w%_IrbX{(#xOe1sGlA0(@ZkzOlr
zSTtXUuk98F$@sHM%i3KAaVU4{L&<*N`ua}JDJYVqtwb6ua=?o-$d*9MFb2^G{8J|g
z0+NlbSnVuW``i$foAW)ml0B1F-3y>m?HsM*KEkd|17*=_K>cIs*t#BL7`b|L%Hw+d
z<!C>t#pnrAc=Fd*bgIOx(r%JDy$VR&p1R@X(fIm1VdBtuqn!zl*DSjAJ~k=aRIUwU
zbsqN7N4Naf1BBTR8U6eQMybgOFK8X<1zfL5dOQVvWe9(?6(DxlZEi~ILf9Qjw&^3d
zlaAbsl3sfdHe4imqf#}b+a;{i7V&G<mDRai@zKg?8~8zkeV^}qYumlDw0FE9p_U~X
zIsHyhZ+z3{l_KSkdoJ3=eg&}_B=NfF;}w2Jj3j<t!*#dwddueqgX|%fpk8ka>eaKu
ztA}+?%45?c)pErbglWMbWV7TcqCdBEqBt!FA2lg3YKWnkG(rE48V!8Z%(-f{s=%nR
zX#%%AJ7E6Dq}_l6jBp)&aov}(z^JiPCsNLz@)o{;i1ADmXe_u;*IW?#D6Zn)4!r2O
z7~)P1P`$4+f5Xe=?>gR5A?346z-GlaOrmb!IZ`eT9on^xKTm1IkRj_k>flc}wACDz
z!fQ_8Ezf1J>Zoy@f3(KDM6l}rsXaom@^eou^KdN3*!hF+yeWlY!?zy>)DF-&0jh&V
zFF&^-w_kH-!l9-{l{HUp7fmzRhuE^^EtlKbPtg~h4=-CfrS_>zem8Y<R2)R)--qGT
ze0=l1XmT_#LK>?}qA*A0XO*Wby=nG^$5OQ+cv&qm!C9Bt-Hh{Z=Cg-TlcpU+YO3nW
zj}*5nY<g_a8`+fiZhb1-hYBPyc1>UI%$`P?4kx$u$GpO1e4nS6ri+aP^DgX^`tT7Q
zo9{Ic{5KX0OsXOD*3l;Z)jye})?&_DQ=Fj3b$C5Q9E}kbljn|+Xwcatoz?Jz3aX@*
zMfZEh{RWfW2*qyq%`(o3D$HmDP58aU)^FE{)f-3f=qJ4FubZUrj!kaMqw(~ww)b*S
zWK%Prd-Rz0p8dwvRA^ShTqSfh>ybet<R#7>(P{Uw=6FHbnQJ0=umRI*_QVg4wG7(u
z+7~?#jlNqn9kYE$a3JIFS6RK!)9F_+-(IB-qf?K%{6UtEL$$@ZO<r5MQ9@y#$y4Wk
zkTENNQuD<ActtF^@i0Ju>d84|RPpaX;ehQV<%^2%e^NwgZ-cdz+}fj0$xKdR={Dyt
zcwDW84I~0-AY)`MESpr2F~pxw_>6(yq21}GVv)Au#M#+@xd4rLFM%P188_+1<Hsdf
zR0-4ed;Ws){MEI6f8q=6o~)u?PR5}srW+|+>GD5H81wS==`hth?flw(6aK549E)m0
zcF&g}$n#B_jjUp$h5hNK@TiOIHM3r&`zp>VqO>j4%`hyX?nQv}aQk@fh)0)HNzkvU
zlbkb&CZ2Mbs?pZ(`q4TYUJlO(vLVH+kBYYwuJozGUO~T}%w6J@xt{ML{`S%)Fbr^d
ztv?TbE&TT5TwwYjq>ph47_!-nr{<ImUVqPO{mrpeq1tw#-qQ73{mBbn8#zY{<@vP<
zt5KU5v?FRZGq+CLO)aZ2#Z&0!N*+Nad)vQ{qD=!+*)YO(0rQpHHtF-XU3tuDTv=W!
zZBcCpFs^D}K@=-g6WjTl?O{@Yx3q*8<9~DA=$o^x@g5g(n}s?|(A#NuY(*rLhoD6R
zt?+)=ovdPiHkU>#lVmU(d?k*_Y(cI3#-ulI*2J>h0NSy@(A<_B&ZKwpgTVE$7gZV6
zZSC@^do?_?owQKrV2*9}{kU90{sMoz+O7Xm*s0Y*^+kLi^3~=wx-x2`NPbQZD{(VK
zm6^n3s`WS5S<=P%o!~2zo>1%o0B;~+bH1fMC1!u_fg}sjpTV{K#I6%3M0&3(n^aF5
zoy~$CoQvDPcHx|6G}g2z!lYe4IVj0BC{b^8E~4BTKr&OH!URh=nIeEhPFCNob_*n(
z?oyl99DhF{JWz6TQQ9=3vC|B6R~X4{J&z+GR5Rey0f0g@{Cq`iX~Ft;dEUcw>u!IL
z@^maNsnbB`-VF!c0Xc93MpN6x2Hd0HcgnruLv!%4is~PTD}^Cbd~ISC3cp9sn|Iz%
z3LZz3L?`BQ^rm1BpcEuez>n;*-8CQNc0D@g^aIWsN2{Lq!#t;+YnSCMf%+pq$#+k5
zZ?e^TKZhIAGIyrlwGcs~LM`>OB)4vcT8`8rZ^!=ZNF`E}wFle`*3Kt!+aBF^z0=JY
z(<gqmB7#Nr1m$f2h{Z0{V2a7iKUlwo=hF+ZVEU)y<qWbd>*o1EfN}5R&0hwkaK$P!
z#odK^Y(fqb$1x_NsZj(i1}L8!YbxJTIwr?5CY7Lh8c0+766Zot0!8%TX*&~yl=a^<
z@ZV#?^g}t#|D2hyueF=qaMdeKx&R8GP-CS|H<<o11%5KB?B%o3`Y@IgNBwNyMFYSU
z=6I8y;N~8S14Kj5Y)kFmbjK9iuA1QLd`L4p=z{sfp3c`!X>3HdM!=cuIm+r$OjmmZ
zY}K&{v5Z|zVeieAGqffv=rt!b62Er#iX_c_Ck2y*^UxTL&!qMO)JP?PzY0?oBQwo^
zj|ld7U|@zR3+>@Ri4PbS=d!3NdiVn^iMO&Ftd+z_B{SKlx7p5@J@;rl@3_9(IsAR~
z%t$I3Gs_evmUwD@czs4}rQU+r%y-(($lrr;`sMMAsDaTxqUvjGL6LY61Vp$gh~a3a
z1fF_iEG7YnZcoJD_3**ZNs`!;F5sv3-+=MpSAS=T3qO2~(5;w3jz>Er2?Xt4PcdnR
z<c(%#ev13h8zUU|sNU+HU4~rv$w;b@czH$F&pZ|J6ZciZs|SOZ%_PW9<bHrRM(MtP
zF#1E%{Y?-N;%Pbwx0S%UY?5hrv0CNhk849g0DE59{!`ei`kMSYbl0-8SN)X<rS`g`
z$!^R2^)vNoQ}M!KX2tvuG^-L<8Ao^8%XA`tC{+eOEBDBB^qNyeut~R5q!D0I`NG)L
zkijXXs7_d57O3|tmg)$S2)f|_SB|RI;3~gXaC)r~(`(#x!L+0IDSbBNyy-$D^LPEh
z!;f?Mw<(6d11;J*YCw(H*vx;CDba&BQ*De7Jtg+ZQVr94D7iBO0yKcX97wH8E4qQF
zEpzF3hj#{GJHSwRDY>1Tr<D8j7=IvuAuDI4FFH5A+=>rxP|aIZ5Xo?*&d23+1(OeW
zkmB-x&>LtNiihaac8`z-Q1?X<Kt7Ir36hFqAO!(AY{-(UBUctkMAbiz%zAU~e4C=_
zbiZ-kE{PJZ5o(cX(QFZT>64l1Bd7@uma*}c;c*088uu=6L#14~P~iEP;kY%%q7#~f
z|7ZhqbE&zJaG|HC$2Ho_=-)+L3U>Ih9hs8ne-FjqQF%0AyOZVkp1ilOu3?*@M!GZ|
zqfaCw*=66}PNYB2><RQI6L%vZd$-Qg1sdq!ay}rh-iX!y4_fUfFLZ?f;5xC<gAjw8
z()pj+Zpv%@aoC}r7Dm@2Kx$FC<?R=`@YLH^GV`p5W{}JbsPA^(d{GG|^Br;8mp@*`
zrT@XmJFFNWWBT;I#uNaI{WAL?oyckFUu(N;Fc=SE(FuY-4}jUWw0;o%J%~5OfQhrM
zZaQa%PuvtWe4$Q-YC>JIQ3zS}1*i}{lxP!5{9p}!x53){#AnIhUH;$*muf>MAq2<>
z-aebCuzsib-Av__WUd3J;Amdx8^_0=bv}B(h-zl+4XKRsBG#9i`Ol7=Z(~1c+-+QM
zs!NB<Npc27hEWm<tb%AmHcXyu3^1WQ<y>^RRDmF12;OK%lc<4^EDv6x6GBTQ_<$cm
z!AsUWx;<A3Pu<nx;P~gV{6m-v>hE7|cgQmpHqWjd_btV;8>@DM|AW+W{THbX{-%2s
z99f80+Wudx7lvpyoN`Z^KlWWL<>RNwQYoSLg{qTHwLsXgGYFr!)^_ne&NO>DInuK)
zd{=mE`N;BH(beeLtg>E@@W4CZYi0Ud{1pgrV(!L$QHXHt12~9i)jgGEe%uBRc87LT
zOn<i)Yp}JrC3RKn!XKiH>yczg<d6lIB<SmxwNK2IPy5}7vurrp{dK0w1beDjE!@7c
z=L=aRS_s%r(5^$bH(o)P>fD~3F;4ZI8jnXXT3g7F3L-k>40qKSYC_zPt%|goo_5e;
zbe))vC{mhA7tK}@#j$8X<6^Z3A*H%4_o|PGTTU;m=2s6c4UxjZjtl^?8!e~xZ2-PR
z?|Z=nKVRBeEj1Co`cPyy`t)@%3IZ#Lo^1n~m4DOyS~xuQAJF+ts~`$k<pQ87*diw1
z8bPw=OV_h_fk@CM3Ju|7mVHUg<*%r$20L>t^6KneER5hWr$pQ2dNJN3%iY7aOeJ1Y
zX*BZ1-FZJl^p8K!)s8d=mmqagwXMIf?R^lt>%f;TTRdAG7+Mf}ld|lM$E!<jPm$>j
z`oeyWF-2-$Qxb4n9akypa0_`r6)*(lmR?|``RqeFg9ODTeBbh1PgI1*q9%CIw=JtU
z{~Pr8#o@8Y`F`yPTkBz!?>Aj=_(;3Q`ZM3@)*aQ-)&BsZ3`!>%P6zwI>%apU6^l*;
z4xaM*@iP1uJhfeJ>I%VU{fziCeDuQh*1P1ua20vY0{|!)Mk$71M{30*<#*}?6-<??
zZp2;A?>ivFa3pmfVuHU`sWM<G(`l-@W5aiY3#t_~$k-h{!b30si-b?o2k9Z~^ryR<
z?t62ba8d+5tIliT$v3T<@GJ%Ion;z)DZOZdLtw17Lw}J-%EM)N(z1>g`9J8R)4An%
z&hyLfu7@ja@Wh&OB^Cam+{G%3zsrvgOznr-h$*_iF&e&OTkbOd53IVo>3nl;-5Ewo
z4E9tpunF%Hh-w$TTd_UWn*7-?Fy7zvMPxd2wb>wTE*t(DUV=iO(uObmkAdDX@COd%
z1iuGIS3SoJjqh6a_KG|yS5O|OzD&QRg2u{mOkhgA_D4ZTY>m>@Y~v7m=d;wn2fppX
z3+_zE^Rd|t{7Lm7k8!A+leLY@Ra|>MexzmfC+Q1u>oHmU90!G2;n)61vK1e2R(<@W
zME3B-BMF1-##G<b3Y)*6<Q}LVP?W((DmFe0A3oZD3y;8WCn>*oZ*`UG4dn_PKTHW$
z_4NW(xZZHgu^Y-4Z163-TUrvHSCN5xNi|j8llm8@<b)5Qe<L>>;3Y1$$q)pue*~lo
zr<N9M0L4SOU0?%104uJSqE%V-@9%+V1!6$9T)+w?I0e>8S*Buuh<k+*%WbPeWz?(C
z<`moHaf0*`V4Ja5WD6|;^1^pGk(83Cu~$u>umDJE;ku^@e%v5?_}>S3glUHcZYu0o
zo}!Rk>qmpNNzK|992W2WP)V;>3o+U;OP8BO>FEL?7vw_i#qQ3S2PY$#FSY6@ihlAp
zyoDjyEY|sxSJL+Us&vMrm6_3le2%sK(F&6wKAN1)C*@i`vsAUaoq35vuQUg%cb@(L
z@BISw7|4Ts9E5nA>mHTYi^&go3>utOT+zQTVrutXf7qZ-@42cC0vpTkdFsd|SN_j_
zfxX|(kR1;Ry<JeT_^lp93C&KfaixHq%Wpavg9|n+sy%3K7?@xiIq+yn#0mrd&QBTq
z*<vAIdssVv8LS-_YerrVutrkrG>Nnk*Xlj$W>xc3#%GE5?E3iUP3ij3p-Sc(a?*|2
z5d6S%ZKq_l9}|JzCsQTj^^dPGS#|@ylFlFHs+Ndk*4Zx+KJ5Iau{+wX#u%<Qynb&a
zcc*{kzf-dK$CO0SW3JXV`YrBgsmi<Dz*O?DziE-d%SHnEIG@7_1f@u)_HLg8K?w0~
z9LSM!?oyswF&UXqU3fi5H?S0VIdihZdDwk)W4o$9;NuW@=4$0N^5OhhuRS?7RRApI
zE1(T0b!_I()_ouZieN9IH%e+c>ApL*F`4}=YA%hi9Lc1H&WX!<fM_KEk5=+!ndg72
zAOE-5bD-wi(bX%1%a|d)$VVT|YU_=<&+CNdYBAl_aAX)M=;3yIe#7fX&W~4nu-H+O
zz#+sp46sYYut*`}w@sg~o|Zdov~`_XV)B~|Vw~TxLXJloFAmR3YjbpeKmN*AV~LM5
zc;9^GbqeHg`6gP#%@2fJym7jMvpz;rZjM%=wtJluqTe|^?n>m6sO*n9a>(*0U-Ydd
zqktTH85m{ZkwUztsIi9^Dm<LmnAINV%H4iJr9!5VZIDr`cVvkznh!4~Ry9<6NV7lb
z<}|uuq2s$C_%dSH!<qZDbJVxYVoU2M6`N%07bqGUCMANWumjdzLv>ei(lm_w_slPk
za+gJ+Rl<7xAte~W3~4x-5ZgiZ{=|Tbnayn3({Z}6R<Pq8X@`-IHi*l2UQ>qg+MNDe
zQfoAL2{c&4K9IWo9w=4Hl>3ue=k|y47?&{!{8hT$@auSXTV^22uRnDTylrHNI0*g}
zOo-m#RomMgpi@8a;nI%i0BTc-!S6gDp3i#RN*+m%J`sUF+rj0m4_#tEdO}mHUKA6l
zb_E8VgnD1?ZedT9yeBZsWf7g&gus5*JGP+-c-^D@DVz|!%h_vfd438@er?KG;h8pY
zVc31gn#hj}91=KNG;8eeOk~J{Oy$!u)$)VQW}19a4TYW0aT=Vh{O7%v-UL;s*sZOQ
zId1XdTpTPy+zB~dGq$`=f9edzzkVv-Gju<4wE2kFa$7A~z!S&y7++!|RUGnZK><cS
zyF61ioqp6CD_E=Tg$`EPSJ@Q!D)R=b41+DR=0B?p6$CtHeWX$~Kk=^KeZ%g|gY3S*
z8&@Wo-KpoQwu_zLEdj7HB7AgS+G2m*?h4ypAT(G0Y`jvlE&Px4YLDa^3Z_D-rt`u~
z4Wc5|9k!C|`WOw<QW@r_{%_EP*kU$Q5ijaMQsTV;w60at5w@InrcIyEo?dNpwr1}y
z{>(FF9o!rzu5NJZ3KI_qbzYydH?%w1*M7Y-j^A>3&;QhT1U;=g6ecAt-(T{48ze}w
zE=Sume3Qi?7F{9DhNop)90qMGqV%aZ<d}w&=cJo_AHU72mdGTq6?wQ<P77fJ06&T*
zJ@@<a&x4rx8e;hor)tYzr(GdtOSR--seHywg2?x$*cIRJrUGL-OoqhzsioOmx0E`A
ziJo`x*Km`?Uyuuml^$W2>D?i924W#LCvr<fl02aBbEp<|2F^Mhu3d4wXVD@c-I?r4
zs<n-*mD8SJRz~VD9pbvNP%Xr>h+#CpMoZ)(9gky0?ouNg&ycg;eK_Mml1uUL>hO;@
zJSV$Bq%s-lUhsKx@8Buv!AA}BieT9&l8>wh{9~Xbnk_ffHaacAM1PK{6r)%b3q{{$
z4@Kb89Gi$#^T~$V@z}f(7Vtd%>8F*(?|}7*5nr^{GYghJ+n}g&c}nU-{tQR5ja=!a
z{_kwyDTHJqOK8~15geK3N%Z*pv8h<kzAq4pU_aeinnJNh436y%SC7h490-$&=EC-W
zekfY8#xQ!naUaj6&vU*%_XW?oQGfb86xy3zOZ9aExESd#z>F^$B^Yt~Ql<i(Xa-a`
zG8qK1tzD@uc4uJMlfj0Ue)Z7T%rU~1s3|O(`FK+$T7D^-(}uI%;<TOfPFmM8%fA8~
zQOiB2Q9DD^dUyFXw|Tl7qmmP+7y=@r@mH?N<3@`OIRLr-DT8t@hXJ)jJ51g4pZj}a
z{NXeo`5W5aV-FU`Jx(<KT5A!Y`iJIA-KUiPE(ytm6epmMPjPH5PvLvXEO9tZt+4H)
zNG-aoN7o>!=2S+wJn<^-_Oc6Z;bafS7M9*&d_o`&FC)_Vwl|h>L44VnKj&M*^5`Cg
zmFiq+SXDscH9S3e3{MI4B=-JOfPV^70*$t(OXWxb!I7q{y3in#A;n@d#n<$@=-BwI
zqP3%j5v-bARr%^qv?W8K_Xiaj?|iRaj&}(Sj7IdEUJ`1g6d0L*PGEb)h|6fyL{*tB
zy_dwzZl2M;IbT83|7RpXjrZg4qj6K0DlgWsWC7zQ4AvsufcRO5m0II>uuJtSY2`t3
zffw~0rrq2$Z!-=tW)+)VAZQ6f*pMuVt_UaVP=dZIH!jQIJ!B01-CIPLI@=Ncdd9op
zNF3bp80K&j6~?U3KDSWs&xe<g8ktl-3sU}Hm1X*n@}v>u5u)H6hIilI6d3jW{2^y;
zwNQzlwLaX{_h-QF_QHXFArHtw4qL~ckqDEec^)%x$)^TpaF`ej+&|e|s)BIs&RVK{
z44p?OV^6LR$AR0U*4pGL7vN}oC|z$X&DfjMAMFl}ud(7K+nx6Xu_4oOU`kEEk&Q*W
z#fP@pO@D8uyzb`kCDFz9*AvU>`0CQd`e((+=$-kv19vIQkyipV@E0YS$35mKIE$NH
zg6pXlkRIVMSWDb%p%l%`CJ<^xMn2zd-8I$>ZQiU_W0L2yT5u-<RE&<SfQv{zYueRE
z(vT=I-AJrIiqzA!Gp?t>m<^lO>LrKH(Dzx+tE1vKY#zV-y*f9wHSJHX$$O()2+;TE
z^_w_=N}Hho!>sN4Z`sYsYFtmjkN-3W$h@go(<RpDFfOQ?sdZ1XjpyoVaNm$GQWNNL
zaZD9FOCoG>TQo5nuMfw>y7Sj{AQfI?2$UCkRAZwSiq5<fPm&1Ij0-^)t-8bBM8<Pu
zfH?ok?Ve<F-6t{{ycHaN@SJmb2Mr-R(dDJGCLaTaT}dRNI1pE@@JEJ&nx`e%aevl$
z3uReGQY2ZD$~VuX6)y}8vb|Pilbf-wD!z;4lKCoDSg8nnb|GigZDJFvY_Dow{Zgn6
zr=bOaO<}`sG7p}019(gl<YgDL3o86hc?5m3m(R!dxm}+^M^XX?h^G=P8gOoDnY8?}
zLh$surmXW$PDbj=tzU`xqxeK`uo9FCJ~f-RxeE&X)j>GY!6*?zFamWW;VMykRBt(b
zC&@;@g)@&q-W}wy!B*fvN7b$fgOTwDgECL4sTX(VVzXeQ%)Qjpm{YxM{FmXn98PG*
zMt!gV`P7vYlKR7eD2ao$ywg|EdjX3o%tr~_QK6|x%dspW%hN?-9b|%`^gMOeNf>kX
z9jSu!OI5r!2Xj7w54sby>lnPSIQoz?1z1z1WdMUqhhbsWf%iPWbGk&!J<s8ez0CF~
zDMK`E+mf!Q=o}7%La{g<RYBNIePM#_^)W8NYipwOkrc!8YR_AqwZU(rE)h!Ee|`{L
z58GR39O9_*Ua*=DU%!H0bGLZa^X%~k{au>^F5B{-@mQML)JiQNMgytH%Q+)f$He=>
z_T#rdWTUrf-!}kDxAg}!kKscVG$ys`0Thc4WT%dP8izJYW-HEZ&K~^oRfGPz47KXB
z_^XuSyk`=e{?JNtMD~`@uZG>g`%_)HXJsq8ht`irZUF%bGipoWlC>njj6&2an6?h?
z=Ok*k9qx@|)%C`0?D!h4=ilsbgNHYg<R9tlrni=jm>!n}&?n#+M8HvnvA@`C-JN}S
z0f8LfH#c^VN2ErM8g{mi>=Ef-WzL!$oOWAH{@@q;if-5`wGJEn_6PYkw8egPj-0ls
z(X8(&u*2gCUYGknlznwnR^7X;A}FPF3DT)_gLESxB7z{&2uLH{C0!Cq3KD_>QW7HF
zAPv$;H%NEh=jHp(@1Ak)xMSS=4>IJ9z4v<7lXK1$szBuFWpYX8rxUX$RBD?cmrQTl
z1b{Ql*A%_q{kFsQtcAvG#+q=5f9GZ-gh~`C*?b^=-J^@OkATwnctP>_JK^8lgbr!E
zC%-A;dv0C{ZGomj_k8m^8W)v<(SnE8zgG<AS1^d!zd5lr22s;glWCd;NW6O6BhuJ=
z@HZ?D=rB|`2bT{_RpZyWY^ez?M}kCoE$cQ6TYKHkq)PHtZj&Bzmh7o!p07Tzn5ZNo
zz#xzc7IG0`l*ykg!h_)5u>DzKvM6fGmk$%q>vUKbHI;+wPG^!IcYDk!`P%cays<Qz
z*`~1I>!PK+o1$LFxGLX0B89)37_9cc8aeDJ;OF<+c)0sy%dm~#?m#8>Gpe~cn7{Z+
zmFR3zX8V&2JEHH(yb&?E>XudfZ`!tU#)>k~K0YR6V@-Vi)mMh#7mdT${-g7q_fCuH
z&TcMqH>V^-CWuH6>pVPSm`U#1Z~ACHcuta5?z%nO^1yy+h6Vt5m@L+OMnQ-N>?xbF
zg-dhEAj9dE#&T#Fu@}tl+=+=N^B1OsR`ml6p8H)&N2e=zjB1oz5oexQlBeeuLWH*>
zQmo!ex}wu7U6i(0gHD0|*_(^BcE7fq;p5uVu^==2zQ^Z|o%8xer+?!bTXLhnNuNKG
znLoS#>MnCK7fEg$3p-35m0Lnnv9ZV}xXw>cO6o(pWNjAuU37cefDUY^;YG2||7PXm
zfPYE=&l->HHm90<vmAPk|C>yiR4P0r=c5ITrLgQzUIv+63cnX;<T-Y_l7><535L0F
zysdH?9x|OAy7l?j^Gm&MfGPZ(ZL6;~7FBz+DASTRs-(e7YG?3NsM>xe8BMGFuMc^;
zXr}V=0~tpv?Wx1+QPBEWobQu?r&GnhjeECekZrc9v8eHs!&Q!r2LF(PLoFpL;w&S*
z2+=o+0C!lxRl$4Jv-v<T1~`U+@gu><gbD=%1B6aHW1dYR*a}d)67y;_%W<ZmJ{Nk<
zO2f-~Po(p$(eUaHmqZ|X@V1EPsX?XtxnRxx7ZX7q!Lv=`$rGZ9>HMO`?Y{4*B=wFz
zSZY)o-eS$u@?(sm_IMH|<hH_z&TSgRaO;qCvjdushAWFKUo?x~3QVdiJ*0$jw*H0d
zVp#iUQ>i4orFTW{(s;bW4x^kU>wMRq^ID1JE%&(})(OR@Nd`!KZa`7Vkye<PsJTrg
za{gPW-sH#eFO>|%3z-1T@rF#u02sPI@(tE(3cI6*y#00yv#F>VL#0*=YrgFr`N!2^
zE<0i8y|($5OsA|Vk7ELw45=_viC#_bz_clrQ!KH=mT>ID-5!<U?4$x<7*4u}C3Cd~
zMO}3DxR4EAWw3dF3JDS~eh&tDYLD}B8;~`N*BZ>XPer7u`}-0<v<%*6HKHOV)YPXU
zASYt;q@G(aeVG5^FTH7Rm2h#kk~iVspK12TtMv1U`fd0$Q&papRmiPMx*<*SwG!t!
z%}*+fX@uNuu<-FU*#l>qZs*2HeR-0m<m|lbO7Kod`aZ}JURO>P;z*xu;Bm7#9lCA*
zdH`DsE4lG==#pYh^Bs{JPtslp1AGLx(#e9ef`sHzSD{rvIv3kKoC&D%RqFBF3^AP<
z_ula_gX+u0-j#9Z^OMp|Tlrc={f3e?p4XxGc}UZ(0R|qvUar578<T50-L?{h%@M61
zTPw#D<F_q|Vgb2!I30#@{CS_29q5z?FbPv9U~npq^z>$`nanNl8?QnZ_?`k!=62ne
zdg0sU%3HxW*x4)^k(s)l;fV{oa|<2N=K_DZcsBo&u;9EkBi3L(cuuzKXd%=+viQAu
zQp3Xo-US4F@dWx+KM=6S4J+|)x`=+2P$<~&@QCWab3kYzSiH|oOy_dwh~=G(^c1G4
zkPCSI{hdOmX`jvOMnRfxjshylk0cVwG?F)~Ja=#UWh==>+Rk}MCVhXN8zIT?cy`P8
z7!^-2ww>eHA)2;jymxV>jr}jNO2%wxa)qtY3=*vZHihl(S<qxxQifSkde+fx;k&Z-
z>)0?ySY8=u(=8DB5J~2<*`LMZZ?Rn8-oU1uDk_`U|0?V`ogEM7Ti2PB+s4XnOP!n*
z)N}LQhC4b>QU6p~i{>~k>q-1x5m-qj*392m&ceoO{FN%?Va(e*lk#6!fQFvKu7vOf
zt+IF<$9#YNsc^Ub78Csjz2u&ri;$>flk*MX_`dRTCgP?BQG6$_ws(_nhpZF1>$f_!
z%4?Y1B{}+Qk1bJx)`eHj4q}LpML9TC%gD0caBD#|{p73b4b|!jm9G98{jsVUv*D@_
z?fY^wVQK}k%9;p~BwuO$7d$xzC$iy$Hw4}g)g`aYg*iK#Ub4>Bw|!tW<V_YnCpBgr
zduyconR}*-Ill4318aR%y@eUS(=R%_sZ3&x>R(+wRE5W~H|1hliyfi8kT#7H63cr`
zsQLS|MVdvH+-=DuCj5(u{Gx)2m3?{JLY)||A(d~6I(VzqE|;5G20Wp4@l(UELk2q*
zlg<+M?v~t>?TbpA#NQqXd7p12(SPjbN)gAF_~-4r7>wqp=q32{OfpZey~4StrB!O5
z(yq`>EgnTJE#3hqxOw&P?($-w6-_Ix^KW;#!_j|SGjnIc&H6iv2Mfcd8sB4?3LB64
z4@L(V!id}5<1fNxt<}&|F~b?Mb^KZq(xp04emz<?QcgMG4vso_qDldsP-RN!kmBWi
z5x(jVFCj(=ceNgc+23|@GjaGq+&&R<BTKP){o>qa;}=14jWe36+y0g|MKvBC5#!sk
zQnN&MeO_1k{x$0}U;moc&k9jU+N3;UGZdcewT5c1171#z)!a^X-$BEjf8f2^9Fp!7
zx(EQ6##)jT#Z83(Ufq|qL-<B%8m%9;lVamXs!4HMf_KGXs}A8`T6964Ub{TB{Co6S
znQ^?`2)n-0<gc)=H5`EyA}+W*51m{X++8h(S!>?swX$gFRWXdlp*Sz2yvUHUo%_6;
zO5ENcxVLUZQO0?^lOPnuoUB@;^bpj3dYyFlM#9MHenA?)v9@d47xm3dZOT3QYt0$1
zLcksACe#@v9VPV4<Uq9sSW<)m{uLe-`K@d)U-?XfAd&h#%W%3^9@Cky+X?bE9xZR$
za9PXC$h{{<a_piEm@E<abU8R{@rK)=o6+(ha`V^{Yh#M5RVoaB^l(^c>GFsBb<lg^
zwi9wWLrs(L=hX32P7&f&%bjCTTu)l+cmFU|RUaDHgClY#D)2y8$SXiJ|E0tcDvsjv
z(P=nUUm5!Ngxfr$N|$q|!13yW!qoneaKxHkM(=XD?dJ1>mz;CWLB}qi9;<G=pIIx=
zt>!ey)fK_K&S0G{s@AY26Lz+`_S@J!z|O8~@9zHig}G4e?$KY#>+x>s_tsxS|2Hj5
z1nP_wF{m>bG*sNKpej9p_wMH@`xiyMYQqtYQE|D2LoFSqS4BQ$jVWN<##2okL+AWF
z`N!ol4y$gh&s$pq8na9%|A0EHchFM!v^1Z=pu8m=M(lHMQMXl9@s)l&?e=U!@1_?T
zw%26KZXDY?Mym<0YGs@#7vh9Vj!)8h<iZ~40eN;cTd5w45AW4F>sHv_VAHK_i9^FZ
zQ+RpOE2BAhI$LTU(6Q8)QES)st<tG$lceQu`7xi@JMoLlYq&J`q@T_KL+7x$Z91Oo
zlO4>T7@6+DWM%p_bO&4$rArZ80LR7}8g1H!qJYMkvD(agj6-v-)mhA<rC3CSu7eR+
zrByvVdHYMM8v?97d9YhHs0>_*=8k8)gO%Tgpv%xj{UQ=@88(1BBYBz01HZ$pMNACR
zWlU7MRtkVhZ7Y5hFenU(Vs3bISbrn7J+)_E@EIP&1i@QUbsTUlf&m#akYwA4!j=5#
zF@8~m_zY)Gctw6u{uK|wX-JQN=C5|<i3=<IZ;H9rU*`Y9Zvz3RP7u-VXeE3ReD&qm
z5X)ua^UoXAVY5f8iUwkDadY%jJ>d>Q9g#=yoE#6H@m<}%F5*jv9bZ&jeJS<Tm*)KY
zUK*LPam{n7Ivix$PyD{=`>lvEyJlu&WaK_kF2O%ou^+eLEmns2S)N@@_Iwf1Enf4V
z=(fh-wM&|uD2axD{~4-MBDXjIGVTfH-^9D_gqY2I{FYsMHJo>V;b2L=WeF$ZimnF9
z+J+AQE(jPU-66#}F2mz6nBvmNM+4GSTQbDk4KX86aU9425Q$XXD&h(Jk$91Mbr(ce
zcTxV|p1^MQ)OV8}Y?c??Ff?nZr!nXMXW{>hd%mbfyhj5uWzT&fvj(_u?CYDf(~k}2
zL7tt%?HAcR(>u~_+?K|%g*EK8(0GJAR=#d^gpxUL#?x;hs08<87s6qpzeDe8;saJ^
zQ83pUnPJcz!f!kK)=zfGhI)DuuI^{~d5J6H{tEBI)v1?;4bfed^zwBdo7!NWNG+L;
zNz7-$?Af+^BZsgcU@u`H0{|!^<#rSZg(DA>Ln?zz)DL`FO>!Mcat4`PN+kx(=!(hw
zI1irZ+b?q8)k2;?q{ro434~Yav6VP%Vy$@j&?|mU0TtX)CIbl!<J>e=Q=;ya4Yx(n
z*e-UGgx%%&_5bid5Ju$)5RCsYDK7TRr)sL(N!nA*z-3$l+Ty9nzmrBT#H8`2TKE;z
zgjx?Vus(>!cmaD%e2!?MnodSA-WkX=DusIDTiFOEU6b6$8~?O8x)IdG3U{8Lh(!q!
zn?~#-GB(+JFa`a0#(ZZn8OC(>%e~jnz9J^AFyOqxy#{&Pff?De>V~r-9xOFBKUnsS
z)(#a}g)n>k_GuDXgG@hxZ26d*U<op-zrWrSDh|NAen|g`-SV(3Rs9N4rH=UeoDY3J
zAybp8dx-WVY{J&@y_3~sb7l8GT#waRHPaJs2$dw*k9_#)A1CwkyC1O|v_{+u(h+=y
zER+g2(^FpLcs1J2M+8`c-#pn@cjL`~3u8`Fk>h#1qoX6|*@F@W3~(DOdWLUrlM-T4
zh)BUuo9y4Kf;U$G%^tkkA8LsGk@KpA6=6R>Ye67e{xC1rtO596Y+TsuV&Yl<qB0MZ
z=}z#<-y~F558!|Bew=Aw8755~hSy<t-l&-R>44Gs@8SUg<PPF-L&FJi`Ab|wnE$NC
zB*KQAMn=&q!TXCnc=^NT`ti;}<MHm&J^q{k-0MA*ls$4ig&B@l->8nbE;GVDSH!~u
zXcuBjIh7`#e$#?4v^*HMu1$OT`4NIVd_#8d3H3CBK;{~7uN32ITiiu#i|;{0H2++D
zK4Q=0E=*YefjwpVT{7@a8W1?A|3B|?bM*Ty%dwK{Ud4ZY*xo2IY;~N*y!!}wBDAj5
zd>EV0>gD(4!)CeK&5Ggtk{ACx-3JH+F`c<7%Ri4`1Az>9sMS+F#LB@LbZ}q$C-)sP
zes6$MQyO>1BTk82>`9HR@i;XAlhP<Q3T~$Xvz(Nf23{64J8r<q*n!t?+|=tz<hdyh
z5x=*_!wo7*uo-HZuw_frk}Kc|@Qe`tOe`KQ?#lFXVIlX-c5kgM0s;Z&@MM2YC0z>b
zEgIfU_!mJnwz<6UfHDbb%6<2C1f0IuMDkl3c_L0M@XkGU(_YHmV>nnXV6+WL+FLsd
z3MH1~LqP|Kje4~;G?4smVaWi7pcfcg+~z}=sh%fHjF0Y6h>%qs?5zyk`u3s}eZBC5
z@Z_c^z#FX&pwr^zvhK-Zj>>X{CKF1AwZ-Bq^e+SQ;PsZaWC5-_<U&W?ax;yAd^%BJ
zAWn6dz?qtexmHbM*c|ezNwzk8b{?cu7YJ5Tj0gYm+6&0e9y5~pP;*m*Y5j0JWQD^C
zBTRZyX5fX3^>GX?leM)|Kt-hjoeJ_w-MCb}7guKL%ml`wW9Cd`fiSI40}qQqz8Mq&
zzHXWV^_g>K92iu8k(bjr?U$bb1?AT#=v8pPD7RuMkh2!$DDgt9G%B^vVF6o;XZUv6
z`OWRUCr($(?{f|JhwFZh{I}+V8se`)m)GBZX+%;2z|f~Cj~_RhWwi(_U8Dt3a{{(e
zkv83Ae?91@>C92O+B_X-?ro=&F$ElxW&iC;uV2?nxdake(r*SJKD98Ux~B_W>gc&W
zw^jjv#5_Ix@TpGJ9p4;%p#bl$BtO#V=b5eXYNUv!+x0lStu>bA+bM_t;}aK-50PlJ
zY(fz`13%;)9NEwcG|kut{XQ>wVo&i37k<vF@+x=CEnE!s-MKO+5459w!abt`xg`H8
z%i0Y$W3vT>Axw)P$1Y8ISS-jtK)4d~V!f^~60SmvQO;WtIcZXLT&Tals<!?(Q%>Y=
z=i<%O{>MpZ_+Aqh48SDu1*>U)u!G|^?#W^s{Tk=$6K4>g*m&Eb{%?g;*hHBnDIv3l
zHz04O&yIJ2K<kgvXDW{$0h-;x0N+cqnQ8c<UCB!=6-3GYn4aBwQi#TMbE=j?k^XG4
zi<F_~%gkS@I`n+Sy<|EC!dPZaTp%o$m=H&9a+&>Rv=gBac!PYnIVB66v?vh|*Vy}N
z=#XY?ADx@~!Nqhlh($)cC^gduEgo_;@o~{N@En&?#S{OT5{bE7INU+z^MTZ=Cq+24
z%yN8oqQdTr=6Cv?g^s|2niKR?j{{AcO|4xN?>Ynr7<NKp&NP6GcxRS`UH8Ox7rSos
zY6T*Hr~?FFZ;_#FQwRYD2$Hv8iJp0b+J;YhT;e|J6WSX46<o)SiC|#QP4|dia+3?-
zZwz{?<*KJiL#zHI<i1)CrB<0m5V^46#$<J<u-k#&!TM;{@-QIn5a?j4D^Suu-U;#3
zhU)slu@jX$Te9FtQ`>D)-cLZ#1yA%HhjwrxvJSjlZ;sjnTKQ;X@Dq-;w>6xbG1*AD
zO|h4y)qmQ*#wd8Eup4=8fScQL3?G~$hqP-|1-PdUp%TQ&vS3MzZ0I7>AYL0Fu*sy6
zbA>beCx9V-{s{2iIjan)EbqR{Y%mY|JxbWkk^QU$Zg}$7nBjqTngq(+47YJ7F`S+E
zfREF5Rtl3`Xv7&9)E_$EEA&l>(~1>XyMmslX0_|SFMpz&qX|v{_v?PW!;L>j8<m?P
zKhel#*`{?pk5Rs=W?w9C3tokje}c-DH47kYOyDKYYAqUaC~-UK(|}jQ1-iPtTi1{<
zr@8@iwtdZzzbNq>Ii8D0Is|{D+&Wc1XYm60Xp7E#D39OcggcsEY4w5>eg4j`4=m<V
zZFSCpPs5f>^ky3TeUg;|A?PB<*1^M56buGsg?M{3cVXwPx+-!JcT`u&t>(ED5f3vR
zI3bL$09yEo!)wC@U7@e<Pu6&Z0-U#_%Hr>UvM7o!mBd?iCK(BT^jA80Z|?D0XzUu8
zrNEjd5$!&a4Z&}(qLz&a0~Mb5s$xitxv+!{n}YP8#xd$T)a5ag-U^F}xJpKy80t=K
zbq0Xs_Sa2&X+QaR^mxEg$?NQ>Xw%`3qmoJWo!Vgsoq^+G?EwK^(lyzU{I#mA@&Eh?
z#31Ufa{d-U%#psy^AYh%7t3<(0nJF?VTXus^hl3Es_5~@5OCRse||co!w7Y#K-ape
z*7Ni)AJ&-KmbE{U2j~IK%+2AQ#hA-vBe1p)5!!8_48(7F=fNHKg<k}4v@szpAI9&U
zqtAh}jRmzAA>i|F<rLf@ypH2t;WOR%4fajq%d#`(3lIg%LLCFbvh7^UZM(Vc<E7N3
z2Ky?e=}<m2_w9gsdh{LR271CBdOx=Da9N;&c6FiZ;*%ZkxJlOca7sU_vEbt?(5c?3
zUMc#6I@<I&#H5UrK8gJoDN~ZhucSP!a;t=6APR#@^=y2D{@KGQN^zu^=K{8~O^fwd
z*6~6W?JX(RhRPydrBDI+)Zt9~H3G{&-uwjGdR-15hwUeIw|;j2yaU~~M61gD@%$BN
zM+`fJ_?4{*qDaDn)_XUsrZZrPb^9ECA|B|u&afpGE&LjiSd}m8cF-wQH_!8NmZ4zH
zz3nxg?A2?IXD?lpmO>BftMYdfQ`q$-?6jA7K2E9phKzBbxeYu|2Aqa~-g8iA7d)v9
zD<OGtb}Ve;)IEiJX|pR)pCsk#^~L4Rbx)sZln+D(I!D!?IiAxF+-9ef)gv7c#b?ub
zSwV9H<8iCoz3U+dih(w(znON^iFh%PcRGaZ1XYvg;#@q7mNt*1Q>n?V<t9qETLOk3
zO}^bW4&!@OC7yBgD~acV)n#X%zJGeHpjPG=&?4`v-H+jHxHs-K8qfE-q`+c*lGm|y
z_o+Fosg2Ne5u3TGGdzaJM>+#N$pVH_B3YYYf=s`+#mNf50(V6kwW~3hY<3bKtGpk!
z77_Y9{cBCIV8#8%qrO=Gh^vQ^&>f7WHYgP6t=cS?Gxx0YYhvYEAmD!f9(~+f9~}_7
zzA{x?J9q2Q7e`ar4J={ghiwMY`p{`vJV;fjZnY=nm>;eVcAQl&_0;ha@@3d`{8Nlz
ze+sMzcDEAB320!=P1pOi-0&rD!yjX;+HPiB-&5Zkl3`PvtWrr9cG=0qG1s(@Bqv5_
zrhH)5+&Vv;N;)f1$2k5Fe#3F-=lAd%Ws>)xR-3+!%qX}qR*C`nNVCt4Tb+%i5W!|3
zt8M0+ayKN;Qt{q(><g!6p(uk}HtuBc0&3LmCmy@S&bALMNnhn9jLkL_>b}CXAiF52
z5o8J{;@+umu=#-58N$<^RxYi>(?hWoxjn1Q(?e629PI8&5<d~V@mL%Hlv+>L%8{<?
z5UJ<CL=!0-E7bSH>3_5E>s5_C7j?avK_Wr?arsRV_RsG+NNX*}%SgoI`pDenp5<w9
z?DCBfDDgUyIpmIw*gpI%2Z3?pu^z-O`ZqzZ*N*reKm!U&!9W)|nHd$9Y2>5csAe`N
z5EcN|e&VJS3I-uJiWHog*XoUxNy8$JxPjUu4yU`y_;8h!r#HK@&MXR<bd7rXUzC>f
zjXl>NQx_&JWp$z~g!*)gs|1pXST<eq&yU`7`jXfQeiaC~w)-+_xBs(3kzPGgEUWfd
zW`JHu(6niB(JoWvSWEX*nlU2C-9o|?07;v&ihM3v8VsQij4BP8*eZ5p*M|zG53>O4
zo3xx~HkgyJCfGPOn1_I(?^_y;5<CjSOnhCXl81hm<8bwF_<`DW(nCSn(ii5~dgA<9
z5A`JufzzF4_2(zKZdfz=ye77Bf2KU~L&rQOBt&YC&-kQ{Ng*Trbbrkx`naRzvG`fN
zxZglaeffhfpkC{}Lh9TfsdTc&yvvQsWA^)6=zHU~clEy%4&qBW?#DGtnsmnd@LG<2
zQq6u$f0&v0Z)bzKmJ@1Ut|-0`HF26no$Bhr8uy)!LcGNeOjE-gq{VK{A2#}8mCO7%
zTc}9*Uz{5`0rgE_{U%L%rJ_Gw8UxaI!h3@DHp`C?%;S2$TOBQTKHoj6PkudDS0Ez{
zK~X5`njP6tzV<kN%1o)SdY(qg52cRH;A3bg7h`ur7N?|R$zu*R#%ra@AI&)czwJ_-
zyswTDo_M-<pnh6RO&MdurA!*5;FY({9}>6Tdfx?dXcpvny99}|ETyEaW+GkZjxv_Y
z9z+)8u3F{uRW0{}<k0Ky9J~H5ZX8H~*KW^Jb{E=W$7ODSiIGcDLa3!DOB%-E8O9@K
z*Yif3S*#97<Uy3OS=ti@YCvW&rne@@^_A)JaCQ6cVM)#ioE<*2&*$dM{q@)%pu+kD
z>$_q2^4l|HGBNMjQ^-i(ahW{66_!OsChk3Do(Po*c?5rYdrQQp<q-}tOT*Uu#~Fx;
z%Y*BSfzTyLVG_$WzJ~-U0LLLQ;Qx!e(@Ss>4KD}I5y<H?|12xYS`)$*bPKz>ReBu1
z3e%4S3O%nb(lQ;1u&ez<wcD^z+I(CYR7;7y&6l{$e;UVLd`3l%xMnx%55<?)<+;<e
z;Hqghu1%&kBK$)s^Q+}?smAmzr_AshqLr?YFgf4%0TGM@_a4acwtutyT&Q`o)NMKR
z&G*+3H^_{bk2SNX({XT`8t*t3-8bFKo6<TsZ<X0QGYDz|C!y$bhcHAgRYdsF2j*Z{
zh!<1uUZkP&2iHL*VSqkdVm{n0&t*DNhpTs|2kJmUDY4AnPEyrT{z7$|jqQk%BD?1~
zeF&meu-L+{_w@#^puFP2ni_nmJPisR^twin^C+p=@vI@rUg4x4T_FhDc!rzn+tRaI
z{c6ffD`+-Us6Nkg(afV>+FN1}k=#OU+0fd03tT38{#TwJH)JS@_0kDagj{?f)#snz
z#J?QsJ5}Q?Ygt(wZh;gES(tY4Ds@vq{^_t5pk3*x59tEp>>tmQ6$aVc-)z?@>yRY0
zf7**f>f7ZIKlS~09s=#MZ!ydJAexwjTU8#mv}o?(2M;=#7w2SyCodI%qzbJzj@SLP
zz?``O=PpQpg_BaD!FP?o>&@TQKVApbZimo_BY?6T4N45})xq2h*!hc75zeLtcr>pJ
zhd(~J7>&n5$bEFPCTb#fQL~(gy@>|<1AeZ1IJ*R#xIv<jmCXc?mvyEf^lKq&PcY5n
zF&~P@S7DZEMS4>b3JtmV)sOzpnZ(CXvz$RXlO;%3yPhim;GMQlw(m6vxINW3Sx!OE
z<U}B6zv9ES+SDTgsU!acf$*bUkW*Wf7qR=sxoHN9U23)uQ5S#O&fSDk9Mcu3cIhT$
z1JZ@Ayw+s9^X-N*<^JjqpN7ST`|14<v)?y2T%^kijP~NqYRv)aUEN?B>^urOJv<uA
z^kMLj^==CQmQ6Hw%an^k#5Ed)56twqzFw)n*BR>elskoMt*1m{LNB0IvG^hdLMpqL
zNxD>U=k(@y^99M^012|tqcAv9ifXLPG8DugPl|KYzulFIB)4q%^qWips^VVfNB_sN
zOnY$jZ<;}dXk25o+i?Kph@yiDq1U4X&d=>$dkb;8)SAUca_``LC3?jmC<!YZxd`LW
zVQqf69~ZlP6!jvny}WqXoh;x78F=EE_Urykaj4+BZc|z#&$Wb~7N|YcLOcS;bpBs0
z2rqJL9}<!yKA*^79e3iEKm$aE1+tg6yYIFUnas|7dlw|WyTD0FGOsK*Ckng&<IMs(
z<Lb^&&y5KIJ0(#l2&^Wng27A9K{%HNwU5plT9;4%xOcJ&#%U|mWi-isut)`ea@>#r
zy~nvMx0wc%jCa-}h4rPG!ZsjaAkLN3l=Er(yQ{TwDcfN)hMNsv_gC!D>8$+YWclgZ
zrZ%iDxAPMRn!;_2ioYGlpB3Ud;~YY`tG>chy#vj|aHtC>s-P-<Ez!u>0%c)W6)c1=
z#ATXiU!HVN=)7wI#v9L(cY<`m(NCw%6dXg6faW%$8fUHsqKYjB6wS%HK2l#kd+3jg
zLqH3+QDD9Px}FL27B9x*rEh`NFL0A8gkiR2i?@PLLJknqlfEim4EP{byMDJ|sqB^+
zMEP69EA4^C@Ly19Gw&8_4_gk~69&xl{8^o)YnC2Iq{lVRN=s92kotP<t}JxlDh9f@
z)Y;K?*Zu^3|IW|HeII5mp^u4VlmbF^Vt%WXfjC>l9MM!t?qgk8)U~kzP>;9=t%!?>
zN3)5%ju&#_gjRw<O0255$$QCw<wCEup>N?q^47>A-x#&Zm=R}#J$C$gEs}(*<ypHy
zEky5xGb{_p*pYL0w~f8^)o5hG*md2rm68Hh2C_4t4AlVP9t6WM;5KQxPPJ<mg}*9!
zV+962qxYSAg2V;4T;D)$INT|#|GpxVUNQa}y#Z9exwYqHj_SxZK+3z0ywIbcf(VWw
zOM4$YE-e)Z3b&JYwH~4g`qYI)UGmU0KMZ+uhTFro=f2$`T)V8=G}l4D4j03Apg%%f
z%eTF7I8`>aZ5+%ePGNo~QdjsTk|#fM>Z`M=fg4B3>iMNA<3bmKZdKoGsPBE<DjazC
zk2fA?-3zF;gM$W{7Gy%aABc~OlyfG5fPu;koHQN$H4Ch9i(z|oC#XWEmK@F@30O?*
zHfK_eJcG_^&9K9G>BJ^aN&~|_ifjqg&dou77ur2AU}m=(D`|Ico#y$7CFP=&9skQ*
zkRl#3)U@}*4oOG94)67mSrW<S$s3+UdIM5~dAR%CIylXQxASE!$?RpcvxtTV5)G-e
z<RYfQoGRM=EquDsFF#eQj0~xtp~t$9b*mQ{NYmVWsxeQ2`csqZ@`mU<38xWz1=W|K
zo=gj=|H1;OuCM>8EH7Zdl9suM2=|gY3iPAU2?>S%WjKyJlhqp$^{I5dU;9N!&r(G^
zdMoTqV!{R&Th7xw>pcv>aPQg%tBKE<>`xYN*0RuY^skzH8zM?ZCS#Hr`wp9TEA5*u
z)z&#Fx+f8O+ih{NX1PhB?T15wZ<WWD@T#et8)rj|Ux9i7dGU7b*U=5MSg!sQu15%Z
z#~F<tO5Yl&xm+?~?%eHR-v-f8{-$@B31tF)#{?o%UUlsaHu+}ig`v3z8+UeH!-(av
zWL*g_o-<OU5`x%HGim@dcDPdlKt#ZEPcf6Y{oMvMffDD?iCDuRU?&oZmYg9e`S^s0
zG)s~9Tyn|MH9xsXeNQ}`uWgQN!i6T>i0;w}`#%iA_g$<<u1|L&Q631{))2D1m<Iav
zr&~zP-4LozAIR*q2YH<zp@{G&L15|o@P7mr@7!j&;f=|}?{0~Z=l#mpeh(wCo#A!r
z>95GNu9^eI#i2ZZ4Yc0FGGjVr$sN|1&`M^nly#CxU=A3M^ut2COBQH;ErxW(bmB)5
z4jvQvPG+gU2UlhyRX<=8ILGc*v$uwmnk;769D62lnMAbzZQ5Q=RHU+p4xH&wUIGp)
zlSKc+7@Y(Qci&zR+M<c5*(8z2>R{FWN!%mns(Uib_Cp!CrQ$TKkn5b~O==yyCw{$e
z_iW9M1zNiK3zuo55Z`;~BXpwvL)E6G?CVHe@>w@fs&q~!c3JMFn!5i8^M(N{k}K&`
zZzDM#X?ZP?HpsY1lx4L{`GhGtVwn(7$e>Kd<>x^9&5c7FH)cEpR~yDa+iK_)pvGm9
zR6&)X5N)TjZp6=HC-O9`#Kqu*fabeVyTMzPMdh&?kIMFY^24v`KQA3&b{TvAg6?I~
zSuDN?lME+LrPsLy-MZgeYz*Wj{fJB{l1lw7k3%`0=8Zp!CC}vsBG}vS34GqZLi?<Z
z0@?=>nPmd`Fney5aF{{EpycNgw9wba0v_zbld;OutM`?u%ZSs5`3j;gqS@l$PE6}L
zYk%@OBmhx68Bj?}AE4b6EU7gx%2ofSs86yOFwc)qxxxb0r%2<>YuZ~!Yn5G2TTRUL
z^3BUdpFJQen93J)085;-M-iQfIa)H!c7JuSr6Z>ORfT#)qYOv1?-#H0_%oh=?CAi%
zD5O2$_*j2|kI-!Pc)gs1$`%F|>=q;JF|&1(Ee058oyF-d+N0@|9uJZUyou+=@Hjmv
zb<)V*w|jmH?SEqE={P-76IlqeA6v=t`Gb(GS|d^Vzu$Yy9O$gXr#~roKYpXTiZ8>s
zsPZY(rtOeK!qU9VJ!0>1=BJVGCdzoYU8_%C4`lK1EkM2}3#udRHq&BLo}GW?IHLK6
z$^2TM$QdPp1eV!Q-s={Fe7OjvzPD<{EB@`rVA57i9T094Mer^7Z%LMDP6z1!VUB2Q
zaZowRAa1ukTO*ptPK51*<Mg~}^;}yu%*aqgby0G`?;1VV1#}~~RtF#0O+HOtst|oM
zFISny(Q{w4wM;@8bceZ8nOwPdca2IH^AFC~zxRk03=DnK$^b*WLqG>s{Fiyq^<Tj^
zFK1vs4t)>Kcn+?sPl_i6HRu|e++Ojb3uUFo0Bf0=ORPzzrD`6zGw2vYqS6{0;#K>n
z)@$lngE6Yp51Sbz3o2JlICY&w*JFRMwm|~U_cRxx)^vEN7|(v4JVrkY-wb-1W^a{X
z%yR$1V^7nn%T=Q3c0cD&aBtT!?-YeBwL{j<?si~-*WW3jq<Fn9#~6PiAtP3F<yc`m
zd2l=--CH7-<y$>SD=87UX0cCKv~k~J{@IiYg%c+eGNT@V4bKUq4Z5E#%6*R8M07w*
zA{%JEdOY#jG`&Mor9(pPmb!V!-|b<ha2N(`OBfe1)ey4jSTu1Q6g){oO5}d+o1>PS
z*r1Z^hlQ<y8Zz09zj4g&ooeT**6$X*f<N*omQi2m^Ge@J9wFI*L(3S5>RVMQG0E*%
z<MyDq#>TikLHIq~XI{#P{o^_mizrz5U8P|RqV#MI>OLqfHv|w{t8C_%5bSB*H$9p#
zUH>%7$=`I}byK}S=MSnU)CoLH*BDm^VX}d`gg?SGYdP_w&murNjxl0j{9QP~JX7&^
z4&m$7xV7g8T63ie);dXi?3W0PZW?_S-zO7Ve`)k|d~A{&rKoL?`<J=)nTWmh69b2E
z$Q0Y8)JzFH1z^fZ&{ii4Jn#6x5^iILF+i`7WUAa3M$ORrxtzoQu~x{<jX(+J;i*D>
z$*_A5c}-=`A}8zhbxl}AAm7p3(B?%i!^e58Jm!10ZizrZWP7F{RG#+pfaB`QYr6+U
znqcCW78ndb)%M2@{^Vc@P?NE;qO(;*{U%jUrLHoc!AI#Y=E_$rhTE9K#NC(iE}g1+
z8X=p4&e!M04)wWASf*UXn}tWJEGdKY0yi5SS8O{E87=xNqc*GAWNMTHs3}pzT(yhu
zx<hHFsOxI}Mi^gurATqJ6Oz7o_jmZDfLC2#;!_;A?v?{}-b1D@kaP{rXB$y{<ud7}
zge+Xf=rbRKFuUsKN3Rx*R&S!mb(_A#WAjew*PsoW+3LhFvyLHt%_gwFD+P7=Hxsr0
zxlIs0B;^MD$($7aR2IJQoB?WOdh|OS(Z`QM2_6`~<>L+U&0Bq}@=nKUlg|}{^DM!D
zHk54}>&Miuoz7Rk+`sPeW)4#cQ>;WC)ey@UMWK9#DT}!f`O0Ux9+^dtJeYH|fB%JT
z#v77gKAg{EK$rXLlz>JPJ4E2+3JD27N2RkI|Bk(C`MgB{n)ozzC(kXDUK1@-t%hBh
z=}!S;5YP|%J96eKbCV}9vq{cGQ*rJmV%k3RJrS;cw5bm&*cH?CyUH-zg_Y_-{HZh?
zO8@beom@l^!9xkukfw?fc(y_yr`+PQyGSA)EkW%s>-vz_YGP#mS>_YyP+7zfy@%$Z
zRKHe#0kOQY0=j4TT^`Pv;ZE~MR69^}!4ia|@?t3lsHwW=y{ss1H*7cFePQ(3c`+=L
zkJe5E=G0T2jmfds;pWy~LzWHL^t_#}iClamQ2sO$qB-7#LoO%{Tf!c9kdlxc+#Vx2
znwbQQ09jP0pThP#s%?C#cJ?nypnZ#$Q_FDGFEEFqHbsf7ni|N@^f}v*P5}<*kPM7c
zd)&E{xc!Nw`q;rZ;}-w`wau3r24!cE`cp2pWn7y_gU{*BBPKIY1OKA9@3<Ij6d{A|
zlV{)6`xgo^Qk*EA2%!KMnw4r|K<#)n%PndEQY8mxm(diKZ@lV4A?#(5fj<+mWM7N~
z4Gd;4N%^eebM`QAPgOb<Y=`ARd#e3GyDwiSPP+^TCun@3QixRHs2-nUQ%RgXFv;`+
zUFyGEyRx=1C|?*0K>~313AT+4#+_3^!#|i>+1Rghv;Lyu^p`ybt(wC47W?N&>V!0w
zD=bK=^F7*sr=0+oaKl8}Nk|#?TX&1#3!t^@A^R%q8Bp~?7bww<tuzu3m9^5{olbC8
z61l3(yQ{$;LrDb-oomYD@FN=E=V@^)&JceZ*$De1k{AIyV=^IU>@({B{a^?rQ<;#S
zvKwVw<AX8woP%6X695U~w@i7pd`JQWRDT-+W?b(37;o+~n0`?}XyhZvCo$`4>A@1^
zvS8LT#5+EBmDw0C#~Lku#buYuZ`&{*0y1zV*3106f=>%G<>ZP|(x%IJZ0`y69F5NV
zAtik=)uNCrPuPvtNycP2fCOT>y_%hmp0u$%j#<+HS=pp?y0Cz2NCY%Qf9F2$p-OqT
zS)dG9B<3uRKkvN<o8(;E21rweZ;nsx1JWZQP>$(oW*tOd#6&r!Cr)P}Wh9SPhSS%3
zn5{OvA{v^|=1&XRv$-hPcYd0NvKO{Ku6oSH$K7htpV|IUl7C0Ywpr2@z(dJ6s{jkx
z;y~&qtX>YPKV>&Vvj}@;NQ)O5dhy&)_?is==+3s61;s_RwH<MqBt~e)$*{$+N>WB}
z^{zlp>i561UmRT5_;uK1P6(7NbZZ!&kn!8p1+hb?oJW)?^GWhdoQ-E2@nb<4R;r@D
zP0KzjmQjhZ1ogK?55lEs3e*rG3_@mh-Q^XW7BWwTI98t7+f#E@dos|1V2j$5nx-Ii
z4IBKXHGGy-yCkG;hUiL!PvhrmkS)SoZBb_7yv1xZF9njO`D@leRDUr09>+39p)K6D
zFbv|hwn(s!=2PE{tS?%LGRb}S*U6pm<1utD)^k=nLuSt==oI67oz(@uqhx!0tiY0u
z04!7#H_wMkyh2Fx6~5L73Z998s5yBj%y19I`@sW0`BZmV>O^1o6knTE!~#9UHzdfH
znL25mdbWYc&l?+G`hb%0lb#%As8}y?6sinbkk5~%Li%4hlu5`qP1C-nQsSCTq23nH
zaZs)k;GggQPMsyqcM{pC9^e|_I#=h^Pgq%9U9xvlt9I!A>exNtd9*c?5Ft8s5U3p{
zMN1FGI<bY6?k{HtXxCWb1aB|d^$0J~e+dqXnjDfszfHn9&#W#!$*`i48AqJ(J~E&6
z5pw@y%7pYd<%H(s;EO|Od$3-L_)F)UEjp2--XUGTQCIbm@q0QUnIO6QmUubQwbzxi
z1i?|#bYxv~)NC@*9abZS`rTa7WX`Htind5p4K$=$l;p*Nil`6#Kf2;jYL%GINZ}*P
zy_KQJS`}{8_-b7D!(mN*$-|$4#7}Z{ZWEI@iPv(qMs~T0CQM1h`G-r}=u717ej-P1
z`bgdQkfye#JgTDm9G?23FAmPj{b}J~=X|x(r}C5*5NlGMb(nQ)CRj3OugjWYw6G`^
z6IV`0`S3m5<m2U<JG2m7Y!zfq=2RbrsZA35HYwrD?Ffeb8{~JL)t<;r`Pc+Jchh*3
z6%;jc>!Awj`xd)F>*){A!)OKdn}TpyC6LBBHeOx-c*r5}z6dYr4~IG^Dd&;~wuD4Y
z+<;zeVba!9EW^o$2?pjmt_wPAo-}_cQS7f`vC@;$CoqQ<)MfCd+{A*CtN)ocv<Fkf
zIGg1NZ=UY07-q<Xzd5J(UoJy5pIjO;n6O6!Zqa%m^%=p`%qc=qCv1KMW|9IXOefb)
zjL`eif43VD;h30G1tsx&_L|U0%$7)?vrL{Z;}7e&eS65}apUh!lyl}SLuI5EzDcg=
zA}LP~(a_gYs~pB+FF!|8nXxQKD^?=^8DbnFa^c`C=xdj4y&=u`baS%0$D*p<Pwog8
z3s2_;X8txdW%*q!Tt5e)GKBK3<4t4A?z)KjYOf#s-Eeel!?cgdu>R_7vrRL>^B=BT
z21)GtzNDEPL35wIZ@m~ntQIr%f34PgVv+;5XMYvgd<ui3GPky3@OVjR_R67hu`=YM
zXM%=D7$?=tdCSqQ?T`lN0BrVOP=;GTZEh7dk5MaYFBNN$tOgotd_xBP60Ea@v5Gh}
znwSihXfXnBrG#ia<Q(#dH9>`|yzsGj-X4=yydtMh(+3^7gEX%&{R+M!ibG^PE#Bxx
znt&k6Dmo0iRM2`G2#ya6*8H+WF0n=XThuWs1)mCLNo~Vu-oe&Sq#?f2sv$7N%sxgT
zIu>;+stRfMCLD&fyESvf{ch%?F*6@K2~$&sKEWsZxNNu`mf7SfTPyyX%;U!9qH$NE
zz@|Lmw`HPbj9x0ny>Y32m1WTpU2l|TlN6U0v`;$2Vp~!Vf(d9mQe(?EW!I*wYS<$*
z%B{4g`P4Z7;yN4BXz0&3%aNPjM4W!*h((0OlH?3WO#E?SSY*LWcKJjihl7Ntg-zqa
zv{gvWx_Fx-{I=}2%OUY6IE-jat#OfB=m@j7J;RT9MHs)q+4@nKV&{F_T--ULgABwp
zK`tdqzt()P<{2((5;2UM<r(fo6W!lL4z*RDWVaNW!2aOAOf)l|Syr!wq<pK1nVupu
znJVP1DUMVZc<Ty#?y$Hs3D&P>4No|w!#X1gQn;KyH-$tg>XCHJk~I1XVk{`iB>XP!
z4R6gkESCChge!l<XOLY^Vfdou7a(OzATDX@Z^nRIuKYqxc!ZPJ&a+s}Z`j&Ae?NQ)
zxlWkiSrjn|zWgA>n|I{}M#*dbwVzfBvELet)vjP{zAix`j2O}Qovot3iBZ)TyeFmg
zNvVcn+6mRinQG@=sNx>Q-Z;O?wpUPSRpr-KS(B4P2mR(YXAjZD(5bg3FhQ`g#oIjo
z6be;I@J%h<`R2Bf<R}rWJAUNqCbq)#MoG8DY&htZ$;pv~;)V8vM%)9VBN?t4(B2T=
z5ii!4flk278re6$i%vSGJKSV;KGBHGdemJDo25_}Vrmx%CQdLd9@Vps`)(dXoItD{
ztQNeDaoSg0(9~8qm0_mqiuP71Y>(UXeE)eITXZny9Q7kBtNf1Cdr4f;rg!M^Jhum}
z)uD#v<4c<<7s<rL5_y|<_6w%4-Ol!z!_<p!d=29$dG9I)EHBu}%;GdQ2rPL&%-d$C
z3dfF7N#%-0BcI)YeuMV2$nqPtbQ5=GI2=_bb`KlAU-HepZ2C2F){RoF{38x^|A2Hr
z#l+Kq)^O7K@ilSR9{NVsl^SaYkV5y_!;|x0_9quN<z1OuPF?YX%wv`;Q;siA_XQtC
zRu_kq5T#jkdPFR#bG4n~BqVlZagY6)8M}k!<TUs_T;W4qQK)8IglUd1ojq!m)mn|e
zyi_fIbbmcMuS_;gCpgNmC0VmxPgeJ31P(C?Kaa&oFVn%i*lgN7mGM^VrwF2JSnL~J
zLcRFBt$GALWVhGF<aOlVDs4J;qI3JnR3Y0G90)LJrioR}UwU|=q;fqqFgg$kz|Acl
zE_<1<?pEfp-7B6+S-_e`d7m2F0ZAW^MpKbaDx~O+04fup#%%BiTSVTfw}wPbDj+G#
zdT!diC<;<AC92)0dilFK%gEV&i?xm`x|SvaC!h2~Ra64COv_@JQ6t}`wl8rz^$#K%
zl7d;L;3W(sj+tHOT-<;_?IiBkv;8<Tbn^VXh8k}rB({oDu`rCNK2{kx=i?uUeATV3
z!8kTdODWtQIr~tQ5;gxcatYbnPwaoX8h)m2R+GK}d{X?$eJL&kXsdc)#f`);hBE?%
zj{8<}N-w(sUm>`T?FibtF)zETHv4!q^fE<+25|&5k#nKsQ0VdDA~c{Cpj)9q?aNBd
zzVkG2o+#^H!DcoaB@tc9A(Wi*V_mU|m9*dbaB}#I4Kk-p>4&)b3s%3Ub$(#cN^Ygj
zz2?ai7npo2-V1N6%M961kev3W833%x1szs@i2vy6ko<x%i88;iO{F-Yo5wk=IZ|P_
z#I-RbbcCAzd!|`#B9nwTps0<DlOtCy?@^fUNF;Rd&8g_UFy9b6v(M~Tv^Q8umMSAh
zU&U^!pNh=bWo=kNM9EWfSU3+D7+M#;7=$&B1Wk+u=?IN8*Ui4K&uq>vY=0obsiNP|
zV8Aw)oF*Cg^Y&TI$?AipaN>YyCIedDhDQI}H``97?IUzMBW@4Kh#6zHZ;lcqbzu;%
z87u+NsREU}rI@*JPP%=BfQ_W(%Sa>#n}IE~2eg-Ymu4=}?NSTddTbSWHSJqf2i#;@
zSo`^)@(X{zYlozlNA}-*5;OpojON|<dcv}|osCp_*qGC3db4MrH9J*}g9l!n9Nlh`
zJNT-HgWBUF_4uuH71c^dAKOtx4N8IRi3hp?t%n4Fdy{1^yszJwka3JXYeIOZpYqTK
zpp}t1;|PIpMqIi3gqnY+?x?{`1k0?{Y_J<$YsT%S;H^7kHn|u<?~D8_fNxcC8m+);
ztESSk@uyPTQ~suF5f!`tYePZL2OOLntN(HNmoI|qG5ys*M&;H|C+d_1*cGo3y8`DE
z_7{!3=9ut?h-5{Jphe1ZUUE$4w&*}~HZ*!FXYHd|Nl%Y>HUoNJI)7B`hME!VcMb8k
z3NSZ4hyvWG)(vQ1yH68p#ba_tH5q<}u*aGh_=QYLpI0MH8+D2Qts$~_m0A^FZb76R
zh36*UYa`sypwX|Y3`FR1DI6Et@uzPO4%UWyJ|c09Tj$jg-?f(8348kEa;vkm2kjFA
zy!nS53OvcLAyCsApwf=th&-pqMoREfMYV2G{bS7-5Lc=Et>KWFeII~I`@{2zw1YR(
zXQ3bT$AFTW9z%F<Jgf(YjVal$nq#Y^6=SOQI|<f1<A}}n^A2kbz4WbzO$sOEC+8!#
zEoS%6oqr8@^|7%V%c;wkX-5xkeEAK}@cxI#4Gs`KF=4dWbmV_-I(m4?(qt5am6m`{
z@9R8<{lfQM8a0v%9X2lq=g^(?&R`9KO4PO5)&XCX-vF<vylnXHi=rX%8m(63xxUJW
zmt)L}H<>s;u2rENi>w<MiRV+*P8IS;I6ZI?(R>-nGXKy-C7HeIZ2i2pTeJ5RIVr|4
zx@yfuVN%+)rUxF%m*JE{e#j%Eo<Z_~RD}GL&b4o8XL9l5$MUUvvlJMrE`0sxx<k}F
zw>Gt(wl$Nto<>)76Wo7h^Yz6JVapBvryM%`&*h&_rQWYhUOU<MK#2OTb~7S)PSP?<
zcVac(6W10}u$(3;$c1kOVUr{=M0=gS)c-|6a_~^|uL7YDduUYq&&9&wq;CdBBNf@j
z9=J5B@>)x{KFio*d+EBZ7%Fr^@R<RvgvX^)21Y;r;;jzJL;4}~uPtU+>83J77g~t8
zU{Fzkprz^sM8!5U-F|2sD&8HVe$LEM+_ucQC>9(=VtAkD88T-GOz>?I6%35{|ITUw
zMq}at&0&pJhTb^kOQ>3KAI4>$O1ZT~N}Kc0(~GvPsa7-nH>ic%s8qjDY3|QZVP`&(
z9?^n+`K!6D_~BAoInu!O{@-K}<G67to!COdEReEr$&p|?z6sZ?bhLE7`}spMknNuG
zNk#!ohM7~)N$+=aPSdjg<uW6Xk^cMl?4WW(;L>qjp^JN>Lq~>8JdE(ymi>5A^(_{R
zHshA%C@LRUQN6`_dGCCZ&w<lRC^1kwQ-sGsao7ahPKR%9dy0ad-N(slH_}Si+_#Z%
zt6QVAhA(Jg_o_;3g7183Om<K0w50=&q{r+RMFPp;_ZK8WJ}_jhy!UQ6Pjil!P(_~2
zXJX=|`JbPqw<$y>P7XII<P44G#Mp1D2bXU{zqxyT>z>9!4k-0e?jT$JT%lis;$=HR
zMPAeg;G-ky(xDdTC;KbbVK3exSVBKJLV#{z6xCO8Bjdh0oeYazL`1qr&wB>Wl>Jyy
zPP+~BQf>{T9+A^LfO)smE2mfhgc!Z-&7is-l5+{1SJR|KN#V9$ghcWD9mTH}l(g8h
zDcXUScI)bHK)b&~Lk5udBH?$l;e1N~E|zq#)e7Myesr)DvR{6urP0~mUIZ%48UVih
zzH#^af-kL%aVXt@%{^QiJU?=2s3;5)9PIJ`YP}PR+RpoO7M0-Om0MbmqfznZb2x?Q
zWCXdencvOZ#ew9mZGfUCoIrb~T7#@1q>uOQxsFRSNX(l+$yE%qJO=*{7RmT|OL^P{
z;W&xorRGlEb9*-s*lx!AK2x5jT`4Y$Bn&bL2W2_ye7-+SR4RDyIVzHriPA^GL2z~p
zghZ*%vuF>X+@&(>RaQkX6mo)1`i>FC*~u897L3!8myuyS<+~UhW+J^1*_n5$_3d^_
z9iXr=H(4&$L2l7uV`5a$aorShO7sgOoNwDu29`jxW=zYv`W3W03gM8JQIEqvCWjMt
z%8!EDTH0Hatw<Rz(H%hW)kl%C(0rJ6I2!=ZYmW6OL_fAHPZEKqVj{82l@$(9ry>BL
zj6=)oHWi$9B9gBQkX_f7my)rhiO)E29bD_Yua`kwWaR1|GdFn>zQ*O1gP(FO%>@p5
zu%mLlKPo%jCreQZ(0F1mV>c$m9usoEkh}PO|4rEx&(9iX<b#brYq-+|8buB2-(I`|
z2<G=91%ze){h(!4guzzzWD8wx8b&DxfHxiwr0_Il{uIr(8u4(W5KsX8X@{%11+02X
z^%sh~cOpzQEXgJaa_ABF#Zc(FZ>Ck_UNJ)#spok5x4g1z&8m7|Js0LWS-Lup#%tjW
ziqqwcNDHtNt3ZnuDJh;p6(#5&JRKwa$ZU%wPe2n%A!-$;?U-;5-;FNtXhJ<LSATt^
zC?Fh-O_fRLI(?#r&KAs;2ru;R;kY6}T~i9&rV4rMvN%$!ANBreTk<80UPkH24(_}-
z{EqAK9$WRdtfs5=8*iS%oN2<C56r&^kPrw2{X}59VlXaU@k&320}BY&mRZ*vx3mqH
zLVx2F?r|NAyoAE@s2+iqV|h_x6H{|}wj}D<Crw0<vte|p!OKcKV>cQfPJ_MHXgcSs
zo#qK(S8Nm{&?+p|qBOK!2Q0fo1QXm~DIC}Hu%LY{zp{IQAC4k2z_)3tZlUlx>%%5r
z8QAumD0v;@vE5A6-8a`lYHg2E%G?iANy`3Y&hy!r`;q>QYuB!!Tggj_Ka)Yq1|StL
zkoaQ#>x_PibACO?JOTLATovXsbY<`N96QhM2|4$|fecTM(Cwv6(a!b;lpPn|KmSQ)
z^VZnNPM%iTNQf1DQkPR$K8p$xW*g2p_T&+}##E7EpxU<=gZUMUcXOe!kD)v}g*gUw
zpT%=+hxhN{c*H){?7z;0B3J-eJ3ZWV!Ykjby_|I1oV0vf54P^KF=atqhkVEOLpvEB
zKD|?dhSA)5xh?%<oEhjEi)|slv9q&;w&i1+T@S%fa|Y#<65xLP^!zAN4Mdafq*VCr
zql*kZ(PHi1+TMy3#`@^@)_wR5FmNTiJ)%=AB`1g%!*Z(wSWU6UqEr~mCo?n(rX?j%
zlRhjrdcRJ!)%|euhjxy}9~CCS>rzDYA<Dx0&-xyKbO4Q5jU0W~yh`U{v?*)}3vh}_
zn|HOfI8mp0TBh&WM$`+<lKHvaJjOgA*^5!YDtP30NNeWbLl^gQR)jfB+kLxv!_QQH
z1djr@c31yt-BQ(Vx19j<cEeukNSC9t<7<pm1cSi?w*CUWn!6|98xN^UK44MLK`Uuh
z1ddF!O+|o90G_rkvK|!dM6+Zx+l(9*OpM3bq)u-dRG>Ig{D<oqZ?`8Y!`z=wf`B~a
zjJbAB(Lm-QC~@yx&_i$+<HSKq@x=DTeyZS9q#CFzCMOQ**WGI){E$6d;e@K5)d9m(
z2gIKTvRe<<!f1|;JU=c!Kd~pXa8HdW7xfUlLsFxBcrG~H6nFuT8*5kZ1YVB(9Pv|N
z)o9T}YebzvJ1kS&xp)8XINv+$ng*Ruo)kjYbshoG$FA}jOu-)<;Yodwp^wZva^GoZ
zi1_+w5s%V~dd9%{L0^KgIof@&FA=b>Z%z^U544fvDX|aUF7e{|q<US9qIoG2#&bKX
zVEgoj`s)bo8KkEMQF2m8oCCscV@_dvwmBTDK@Y<I$Dp=bR59&X6!a20>qfrw(oc|8
z=$|NNu~zRr<!d+Kl=$*uL?U<KRioX<=e#0BR32;ycHXGCcMTk`VB2%JrgJu@Je57b
zcI5fza3v_H==`Uy(4L2&od<e)=H~FqfJf~H5u-<HL|c2H$j6JZ!?ml&;vv|;bS}7`
z6D0PiNsj(o(;h%}m1o8@ZF=^X`x=#Sbv%z3n13Yh={CTe<uAY$or1#)st?BY_~cj^
zIen6o$tq!sCl9kHIlZz&<Af*i_-d!U%m3%F$N#W#D07gXQp+I4-J_~>+O$#@+I|}j
zXL{vSah?2>zu6N&HlGiCB3Bt*g^{~G5o3seOQh@GC+M_6R<`(67=^OXw2#_tK1w$E
zf7Nw0Kuwl$+}0$$MJAR|cj`oJr7?}mEy)2_fLq2?%y2XciNI_Ot_}yzlyRtV&K#i=
zl0}H|72_jx$j5=VR#L~z4;<s8?Z_oDm=F;JG_T*YdE@KYy|;UBw|k$D_y0W4@A*H!
z-~WF-Ni+0~N{&_a>5a!?9}@@IgB>bJS4l9U%%ER%++0QUs<j?NYqgrr1f}j$#$aj2
znMKSlOHp)56_NmV0rlGYOA0g~N1d#y5#01X)NvHdb=81>@6g~9p6N;9?|Ze|(-dwa
zSF7*X^0$5_EY;Qi8gSvC#(2g?G?e!D>KL|=dQ&vcayLg+uEd$LQ}Xuc8xuhIhS16T
zASh00z|w%$M7858-$Xe#yqvz1n!4&Mc#)|}WP*<$73cS^%RhFC8(*FBS4=ltzdPQM
z|M{&)03}oBBNX4dcs$wK{xcHWJ=YxiLSYC_-D==?EPnO+OB3sW01^^L&r+r3Z%wPd
z01j|*x5zGMW|uW{Rpc;nfs1Yj3@$di9hA+k{*2ZHL#W@%%@ue$HQG*H=<M%)B)#&p
zvv$!IF2@7qglgLwxO1!NtSqT-AYfg8oh)+pvtj41D;pwdKaV&=h%=zTtPXe9IA{`Z
z`0W<=cFKa~WKvO1_U2k<IO&sgMs=M2dBob*3!a6P;TDcW;)ta6VMe(l0QsyI(eL5u
zZ7D0P6!J5jLj_MDfvm}3eMe$6+W;bP4Eq|v1U7Sv8AR;7uTS(>xEkQPDTI35?{e|(
z9~=+rp*DG?B1<(RG@O-a5`l@U!6GUE1QZ!61Y=s-CL_2OYRQmk%#yRyKYIkjk#%_V
zfb`yJb_J$I7WgIuowX&qJM?U`hyY74n7W`RRs-<#x)mDcT4&mlXL9jYDMh!Jk)R0J
zw=PY2WyDzXAzw}aE`g{knZg6u#aCnX6+kI0g6;&Z<-osE;O@2gT9)DrXDoMx_k=yM
z#U8h8+i;pXs?iXs5q%7h`28tnLu;tqYd_Na)IfW(v}vAo1t}qn&s%?@-I2j7s2t_{
zjWwmb3ClJ-Xr2;}m+h;$h)&SkW3k%vk3b)K;T(h=?@Mi4`h0oy7*?v2mP@>xd@sUk
z8tAS|EZ@ZIo1=duW<_?5JhuufX(;_Y(oQgUuYk8$KRf`{fU3R+{vspFz0q)F+iC>C
z7K4-b&{GLtMK{)Dl~+AE{|PJep0>kBuTc>NqmDbzNp_@=Qut9O{*cQ#TkF>(HriO8
z%CHGAm|teIJFEuvCpaCs0>m7N!}Q-I&;=!%zP$Tgge1ntl=B}yWZvkcH)5yR#*|tQ
zIt=6^>J8-f5$Mww(?npYGoP?rlRd76l9?rWAgtqsAw+`hZo~)46YH@<=wsCpF_f<L
ztY8<zp$nWb7G&)RPm*`|zJC#UC9#WTAgJ#HBJFv~c$953(q8}6l9}9p`$v;>h%;_R
z9F02Q<vUr5!G_QKR1&b=rg|jfCTW$vAkcgqsZDq<viF-dxa`_>(;0$&#-YwV5e|`l
zq4zMh3`V$z2jTa47du!6YjOliaRHzI1+B9ZuJ+O{^-uE$v=3p%TaxywT@RjrlZvit
z_jN`xm@!#Q|4~6wAnr*QFdS0p8J*#nC!G_}zkzFdvy!aZ?Y@if;f3&nE8mDt{~t$(
B=v@E+

literal 120617
zcmdqJbyrqxw?0fNpdgKupmZx;0@4iv(k0T}(j|>_hjdDpbf_R9-3>}egLLyd7vQs>
zJ>Idu!28GTJz!ne88eT0%()1XmlZ=rAwYqFfkBlJ7gm6QL6C=mfrmr72Yw@K$Sey3
zgUsimq-t;BBxd{8+E~U)-@qIOMn<KhV!s~MBZ(!NelOfb?eqIWwf3o**E{X&L&E{}
zR9*V7)DZ+CNcpg@(=|PD9pbM^<@pUAUjLbV)O}5g1o!ozh4i-$(v^P(Nz7NI=U+QX
z9#TAOy|*`7Thvm~VRO;7a&n>=-cnTC6L7uz@oz~3<JBwSi$@5m*Ux`fJsGnp@Q}wX
zihbM5v-_Y^mtE_*pKj}b&hsO@1G(KUX~p>a&Y7bdS%?(Z>1|o!(ewUSAFLM|3a2~Z
zXym5<PVTk*3>+a@-+5PO`oxu#40D%c^$`lzD#>G)$Aa;B8@y;<elUG@t{jZN>#kZV
zpZrekmqKm3Vn^}!80Guu7Wz|%Htd%k+GUQPGv=GCsZGYY>+YiQnCou+Q|-J{ArU{4
zn4jylDep)TN3WfaHT+$guSEOWcZoK&5o6F>erG>2qG{I6MEok^DGsOjwrj)JSg?D0
zgc8ps)>+H5d^V|OGlbp?F(TJX&9{NxBOd-ZhpkjUc9qh|w>6`bL1cI?LLmEt;NJF(
z-1NLwgsjS8GlTPAdSdt<65qo^&g;~mGV@OCU*Z~nLXTbMI`0V;{J=q>67hP|X|B}U
z8g21C9jo{4@=D%lNGC@adVa#QHdzmb+N!6sN<X5!zHWCt!PF5_-DDgi_I%|^4r{8H
z6u@OxDo!gqy6f`3aC_&4{`(*DSlcJCO&lNe-#h2{wYh1WITv?1Jfuv@PYL)gX5?bK
zKIc$AMmsQ0vO=ikD=Vg){dg_Ild$s2Mjj(?^jGsLqQr>I%k(~}9;WB2WO=#fXqc5p
zE`9|26-$4J#XWHk{c#V<hrJux6zAE#dT8Z*6_h}a;5+0t@42$h4_L+d3F8%PaN;GN
z^6tuA;i$b@wyvyTz`D_hVZgq`m)mO5(Za^3@k!2X!(USmNujDzY3uyF@VBbEZ?Xgh
z8zt$N;M|LfD6kofI47P93f*h${Dz8xaaikr8k@$~^>I*Q118V>jJc~^jr|0TK#z@U
zxZKuY@CQaxp#*k+`q$C3XD%1ip&SvO84S&(#%HqiJaYq8O;+gHMQ4&KFO=%NMeKX&
z3(t|}MBaGj%i<W}pZWhJ$F)WMsUbb;x?uj|Z|vCEh!z~>=ic@m(sKoogd^)Yoa!QC
zTKGI+uhpvWxr6pr_DK}5l<^w@2;K}oIwG|?n|fYG4NV)$pXgh^6R<KzYWjfTI?!Q(
z_frvHKQwGh^*cqJ|J>%<se8DPR)v!-J{O15xsy(E(#m6%uDS?9Gk6mGhQx`Qs7nJK
zc@H1yM&n8qN%kLnlcjhpWksjUSdS}ec1ITxHWJBE=AN?Ba^s+|NEN55_;tw)XiC5=
z>POLi?TPISOt0FEP~&4u{re_dN8=Q^7RH~NgcEHt99K6j$K0`gSE62b*h8e#O>N_V
z({0F5eYCjg8yvbmeTdk-&)KFa<^+CUyx`al@6%{(R?tO+iDW$&NUvN_*RuAhPIYhd
zOJv`4-GJS8M0i*LSDTK+bZC!w+$Ldx0ecXC8Jiy%?mD*q^>Xc}TFC6BF#K!n5Aa*v
zHCaEU@d*r71_j%mTTLfh_H{Q`%(9NVYbbo4-+!M@ZROZ(f6r0f5ZMq`g4XoJX+irn
z*WYA~I<)Lfc{-`X<X(v?WIKndd*`s!pE-s?-0*w?geS%YZ40VDKN1ojVPG4<eJoqx
zxXX-&#0dLgvXG@0hRAkYZNfbP?g`vnd_gEx8jQLvI||%4)2<Zz>OHL_(;p>i526#z
zMmmn4u3FpJqK51!#68z!V9*?%`+e;A*U*#XJy(3p3T0a{2Z@pMK(#jKyhzCcPpe>@
z>`H`8_IA)lmGWUqX*M%^_ld!2=YtbF{^x;dfewD(Ip`BAlqlzmyc1@LqDkMFNaK7S
zk&`rwXv}|yGWHCgYI%Y>It)ucUbGY6U(I}RB_Jn{Gxx_MYsL?HA3sopWm~Jjc2j8(
zJ$;jkQD@Vz!c<l^=tMH2N@FbU1j|%LnH7SVrY_jN7G2(Dy22*q=H5oRoI8TcoA>>`
z*~6b522>?PbE72D8PnPC!qL)vONp=zU#Ju}=9C2m`4wcV`KpCxyg8V`#+h6o2^S^{
zpR5|G;ME(E({%BlRoA00cX6Wru9~)JQEz(SQqj;fkMh*n+;HEIron?R0l(2XzRtHc
ze)*}QB$2RfPLcV`{Il?!X?v$dgu+FcQKRI|hfl*@5FZCq6B4*8u)rlVrCHGQy0~ju
zTqv1v|5fux(%a2`dq6z$e5W7{RVeywk%f&bhSf*3%APJy$84oDE%9JhNzGNSF>+%e
zpU1>EW*e13(Qs*RmsmIOJ;z6^;=GFAM_3=1Hk=sO=$?Pu@jWY_z^C6}E2`ww>~V}c
zE8))lyTltCJ0mbk#ALhja!cRH5>aHaKE89O5glj#J57@M?DLbT`;C@)svmSkEADqr
z2=|GM^TZ|uealvkIOqC=dAe1JnnYv1u=4kK1U4mMRSz@Abnfz?-C=S~1MOYhjD~LB
zDeo&G5i&<{^U-%a3~!OVsbL4rJoI>#VaChj8nwPyc*OL5{6Ui&lOo`h%AHb=op!-7
z_9Ix4;g^0CrnFW|*zcmoF^P%IVyP^d5!3bH{q3%xXEYAAI9;zlb5?f`bJ>LYdFPV8
zoFSZ_DyT(ZdOCK_!Nl;YC-Ya+xXA9xW85)D)eSNt1_dXJqLLCM^)en*61jpSUwr(D
zmr?wWkX-CSUriy`_|`<1J<;Xa;(GdxlY=tJ%lBLK3o_5wk5`4r5M%1dMbnOWk;+D^
z)cqrAjYNN{co9zw$<L|I$L&+F`{Rr(JX!1K`+j^;g;5G`71=m^gc>P&jMO651;ee?
z8ebF9Y-1sVNi+lxLoC+Ju6F7jTcv_zAgMvop*Xk5o;KHtVIELDn)}QDNrSfbCWC@r
zB{xQC*D&{W!N$`D{9&v6W0s;Z+;j}@>NwUdS~6?pb+5Etx?g-i3z*fwb6n0APlap!
z^}_LMyJ`UK<Z&N!-7C&yi+xOG%s+0pPmR(#k?~Q}D7UNjv1pFj#xC<h#JBG^>ypCm
zV}|+?pv@<@nWj9F9+b~5|NFjVi)Zznn)Cu6cIZ*~*JhO>X2iN@!t*1;eVKBo*H+=@
z@4uh({@NiyQ##>r|ANZ{149ZUA^b|oNqch^Ii+{>y5q0hk$Ze~r))+brXck><0O_S
z#iT*6@{xO2vlMoPzo0}^vH7HsW5rIx^`hNb|AnYw?Qx%0^ZbsxJ4v{6e&UX8-+oG+
zUCWMZ-zneW!q*S?zxl(!A(5hE!|`98WSLKYkzv$sq?U*xk8E__mkh$B@X6dxRkGcg
zYht!rkyfj-&Dor)mSWUt-t02r{P745d?HG-&Q_v8AtzhA$tCKgt0TW=tQ4siw5pfD
zb7Wo-FHGrP87&L}QdLBMR6<H2|A&$GYeN#=aERp2drP)g7tWKlHd#dc9-32CCS=9x
z)hNoTNE^jZ6mz8`BO=fX<THGblUeQcDs#R3eF)GP)hdL4gp)9Z60l)z9h-w)ZnpBO
zK|qpkr08-+7l46%fHKqMs$x2l|MdO#OyrZ7E(yC!Ez`L&$vypgKR(jf{ppK+{6bH)
zjPi<ZC<u!x+vRXQis!v0{&QWJjG*h)CPxZXMQ;05QXa?62<QD332?9`M@w1Xo1I|b
zzS0SJVK!RG^@2+wA$(RUc-GH%Ui9(ti{C-jmnVzi%bk&A6}n%2sJ1tjh*5B8$(Mh|
z$Cqd|aMvZhdR+rPD;>wEMY}Ox`Y8BJK>`6fF#`H-F$`?5l{*&?q>ksXpPF~SKjKdy
z6j$LuMU#wYB(55Ewx8-d+!*i0MrSudTE#AM`uqFErw;sH35MGhkn&+*B?V6FIKc`F
zJg~&hnZtO`lD=R~zH#6Vm(>}Jr2hJ4&8Hmk0d7po^;NP751Oglr@rW?LiZ}?9zFQU
zo&UA~1=1P}94tDi05S}Byf8SJ8$-I>^x8~arI;d~J&IHspS#cY8t-hqLv%8SRd=g5
zy!$L~%6vcE)^trgr_FD1U@Dhx28;oBvXaFl6|hk-Q@{h)T)0NGKkLg73eZ2<{biZF
zs!pBAY=Ba4!b?B|?j;wDL$~q;|Guh*Zf_FXQ29Hta5xdO@sC4K?=;Mhh$Mee&|3}N
zmLGXl(IM4kon~#WsbN}WbFwmz*J-zvH<2pgOIr{Yi+e`~>J#qJKSMcEXvI%Q1tAH8
zuX!S&r=JKVnn9QJz#YJ#zW?Zn{n{GOHG}%kIELlAKdBGuF{lYRO|08iq+zGV6SpLb
z@6?kA)Wct0hYJap3U*Auh9rs5{J3}19%0KYZ!ELu)(}+{y<pmtwgd~nx4fwz>|#GT
zMymVj*#Fbgb-3Bl>_vCTt+gHkYb_e5j6s4lAM7Q&c={`VM1O54hcT_x?Q~C}-hM4T
zxj9Q<Mz>)`#=MSf%j~CN*1+8!l3)*o-dAs-lkK1=6)1?<lXnMVkfl25xu5k#l8Nbm
z^+A-I84u#I{;<`ie5v!vSjVV_saohp3aun?2-H{dD+FLQ0WXB@xh6U`(~$_C_uC11
z>)6!t3z1RgQ&n9T^oBhN%<s1~gD}WMy(9@Ie%gK@R`t};`E+zx{rr#E?OLZ`tv;)F
zrh(vEfwF(_ne_v+rQ&5#aOsUjv#X2;1zCByJT7XhOol0`^R|3<2xfG7&hh+?930OT
zcy2BK;;Dew??(nD-e3t;VS%*1N{eZBliB*}hs4}Udn>(k6p}Gz;%jgk4=u~!H+D7(
zhnt&mS1xX4!KnjeacUuriUH&;hESX6R;8%>ds7E{YJ74_YU@sS0g&!u>h1yE>Arxq
zq(qjdAER*BCOT{E530K})G$0?sBTz_ufVCi%35RjT2a5yNgmAx993IQzqY+SYtb_S
zFTL2fbRw|3S2CQ7(Bu3q5JbJ}tNKfRqJHT&X0Xwl8prGvczU~YSvA<XI63?q88En1
zWNVhwd_v09Ly86>k@KmX9BQgte;dOg6)3lymS+aLv>L(9NMoj-6xpdAv>iByus>|S
zwcb`yAZvD0`ru%2VkarDWC=KIE3i~b0H0NSTxQChai{=+)LRI3K?g_!J4$%{uIw`y
z#2Ws?F!db!!L1(<BBQ5I<d;*^Le|W1BavqtQpY><@gOQm6{(i@#4EC&H7cq{x!lHA
zbWT{fnAS-<18_o8UAV9IEclq1&pzCL6z7YK#WyznnGz8NJEAw4BOq2wC=|G(REx)D
zHpmRxJ3=7XG%WR}>9`zi(xiEu6^!?j<YTE<yTdPkbpUFEPSolS3x|E&%Lxa5C~FdU
zJ}dnrlu%`Rwt>oG`b%uzCmu0^Y}HX=_?Tji8p%@aCg~Pnt|<>m_%xw-?s<J#lP#S%
zRCxLKU~QP$Vv3bUAv>_~Xv$3c<$F>&!_gzuY~*p#yBKf`TyJJy&kEWW1G-7UTcM6H
zVv)RD<0g$7OX9Z?dT+2$<sG+YXgDlqkTzT)?*Lh#>+Eo2c~nIwwmk$->Uev0d89y5
zq1O5>K8xYUZ1Ko%o273%%iexpTIo$z_+qYRGMpQlEtjT!v^hye;(1XH<yPC39-0sL
zP^02?Jk*Z1XX$pD&r4WMhJ^Jx!Wgo|!a-K37xzQKSvvW<m^nTc$poUT>!w5TQHb8?
zQFRj5@~hh`cz1$GxJnH9FFFdsbg%y2QrGgu>3(jG1B$fptKc^>tOAqe?*fRp?K@+x
zdlFd`a;5R>Tn;}YOQSvErDkeA$>cqrv7_WYJ=-XykW1yQc>Dbx6o8g`Ip$-`Co3d!
zr4#krgK<C@GEu9w&N!WmrBlf^9sOKkKFM6U9pq0%C7Xhj{4MKk*M2`g(@xWIs&o=7
z^ew$B*X^0Qm6OgAvvwVt!Y`#b#nf20Mvf#*FW@EE4=LP7o|Kj&+NB7K{S#c4&UlFy
z%V<z=5Yx-6hI^8$)gBjr#b~q}Yw=%akxARLc0XWh)D=yTPI&&+m$Aw9nB6<rp9u&(
z24vKv>k_rfTx8jMXhhUIE!WL%=UX*H>964Nxooo&zhHTw#>~{&C8sa%{`#(vCriw-
zE-Xa!2@Pk`p_)i}x@f9d*)Eg!)^AAB>tJ9}n&5!}A_;oyHY8S^BVlX78+1lI-COty
zf4UgXufIN0ppYqytk&dGjVy>uuevMFq+Mkk>2@?}RADyGh~?!wZ?CRcs9gMnOZ0nu
zy~73{cDgZAR!G<ObWMLzh{9(jn$x|XOeC(eAl0dF*U(O!H7*l)!QCdf1sLE1_gSC4
zfh078gOr;rf%<^kVO<|L%AuQp8iE-3h?&Ed2Q)(5O`_kii48F8b0lLW`7U;a5?{RY
zSK}ASV>B7a3~2-KNN0V#l*#@4C|14N)Q>ot`t`HQ=N2az)ZE2XVqru>MQSYg9F{4G
zSBeD+6qTZq`s1N^OsNf8Lx0ZiE2bTDQR3bDC8;>DG@q(p1?+H02sMyja{r>?z19*|
z7V|06sOc;EkeMOg<Z_tpxHUCYYx8bxFe_klzGa>s^ZfF7KG`eV;Afm+`6NJIlI42s
z`fY(2hQCx%Mg7r;X)6tTqb4hjlGnHZ0`pjU@uPmME6wxD#0L*m*WN~r*bj5kA(~u5
zuTG~-cYQzZd!E3pqBw;?fP0E6!3G7m_Xs{~h6-ZF51;UI4t3xK)T@n>XXfoHm1=9P
z^rtbkT<nFYaVn>^vN-SQb2)A%kc&sOe#9O;l(b)$UG9z*8J8NA!Hd$W&<{eETj@z8
zyF5SUQ1q$VCa5q@*gM~8;m1s0701!q&wl&e-|$R+6?f8Mb}i&;YW(xoM(LRyF^D0M
zO9s{h<TZlI1z1p0T^<llNi3Kfl2_j)JtE@N&HcM-|7kb*9vycml~f!(B|UP>T4qJP
z=ttT4zxu8-4llXVO2f)s&(FI3_MhEBoedD`OEk)%^sw+4toI2ooio?&EdSYoGs#z5
z_1kTI#JylB0tu2oL*L4{$r=dLR`Bk86Y42vw<|3`adjuzRul?$dp93ZZH{)S^Ez;5
z`e4g_w~jnm2Z`_#EtI67+yhpD{XbV3g46h79tlM-cB?t_)GyzTN?|xA`nHj)N-L-1
zr|xX|5!lz0+71=kR}hXMb@iS3`<*!pL2P!o7~NHP1nRE?-6I%K=!b!wM**O0EWQ%j
zJ`U4(tSFJDzt(1v{K8Y?a|A5yLyieppW|Tz6CM6ncKEkPCIX@4_ri}HQz!;HdH-GP
z2=VYEamdViEhs41qf%xCU`E6Jf#yC-9n)JR>ctPj{zXO)WH#O~4}`yLBX49}l)kO~
zie^o9_;=YvhXmfv<xU_1kU$6$X(1to6PjQScE;#pFW#G;ES5dzZg4LkzKv*C04Dzp
zU>=8T0FHX0Tb-(86RVZ>WO-;t_uP+57cavdUbNruHpf|i1W@2zQdBUMP{UDbS?b9r
z#)W=?MO$9|U!o(0f!i*z`n`Pxn;#{|)P?#*&Kcgrc8X&`MgaEK^2(aPs$0nsDA1}H
z51g1Y+dg5?$=dz7H*LajX6^oe0Y9%a#LS9Z38k<@JGLelF3Yl}Zj-v`!R9zKOqAO)
z$7>4+%zRuQ`!UdxQ==D$XrvRfOZ)cLH`Fh)8oPg&^V~npHjkj)>hOO7Ys}p-Zpu0C
z@U+icu|LUWQ&g|6&aFUA8KlzJAyGtT{r9&>SH#l~n)UWw+<uwlcL5kU4jlG08$KeG
zsGs5Ou5@Bpebg^k)WD%t5(l}L3M8aT#d4a$2XJO%MUi2|Jl){8S`*1yx1s=g4TSO{
zK3LC72*It~F^H+p<juC_Y<(91CI$<w-pUNmmiOe-L0rV7k|kQ3ZKw$_T6lh|baVj$
zUl>1aAVwrkf!6pekw&i1?cF1;$J?<!h!2=UJGw)cUQG(-?U>KhzOFFp-~NiviEw*)
z1oRVty8Ke1?@nm8j&H=CoLwmYwi^8$tJ&hA#Tub!=Pw{G9@rLwCkIO4m5(T|AKYz<
zlmH?}>uTL|$kT~oJwKxVT}Hy&p?2D#ug8@<-CNEv8!wsTp)o=UY&A-Ar<96kG}wyv
zTD5z9yFdyRaD+zo98pj-3d3D#X0@e_qv&I$a@q)fRw-qyv-=YV3x97{DOG^oKVW>!
zgol{hK7yFXu@jW{<Q7v^Pf~-v|3`e+02K}pLO&*>Am}Lt@{2a8=5X0__s7sE3g>w#
z<;%YUcw8z$FZM@JIuSt<1Zm>v)%0?80YnNk;lZ_J3cjHeyu65kCN?KbWAK5521JTd
zT_i!Ypg-OJbDS);>O%eK3GePS8@%&VEmcPlcPng{B`2%R;x(JyxFXtrO@(8K$52Nu
zb;n9c#?n$8u8+R^s_OFK*6EO(v_Jyb$WB4O75>HpV;DU8R|$t2A29!gPhw!Yn*)+D
zcL9d!0eZR<e$4Q{LUIutj%dD3>2?KgG019g?yS(u%N4}lZRc{1+wH=DkJ|{dC?MY{
zY&Q!y97%Z{_U&V341nAvrR34>9+!oH$6D&aws-MY1lTl_o-OS^b)x_noo;MM8+223
zw0;MB9U$F36li@3K7HIcL3n#JF;J{>X5tqh++F<SHMn^AgeJ=E<3jLQHHU)w{@vpV
z5%8FiL4*s$8*eJ4wlHFiOtEmr!Az0phW9&?0G3gZlM5%YTLcrsg@f-7(EL+8?0-Yz
z3OIsv^NF%o+HQYE6n_BZ`g+c7U*>e9v}I}1D6QJOjz(1%h!<|L@6A8(-VAPWWWggD
z1}?=*zB>;i;+eo=B)c|MT{u##q4LFQo{>SlDgsmsl3h_01^@*_0YG9G#$~r64)}y6
zfb}8J2CCnXRn#M}6C)rKIIdgt+EFB;DN)zafRJs(g%qG{0;SvCWFX}E{5o`S^92p>
zUD$5OzyJPjS7>mw;IjGc3m5<~W}`m(Puvbs0JSETEddY=7#X<J!*QJ)@Ec~wP1UYg
zy7-Y&9UXw`Al8W)79?l2B|y5c&X1dwaR~uw;%|xHaVr9?p5T&Kl`E1^bdf`3ovC#{
zcbs7R-5z2DhehnoZ1Y<<@%dYy#NS!d0M$?c*RuWf4bcQ7GpHUuJKnMK03N`L&+Al%
ztjsC^0XC%)&B;82KTB7j^8DMvr2?@n&;?zAxlS}(QojV(L#IrK4VJAOY=3vS!U;mC
z;VZRSZpTgI+)V&wNX@VJ|MVxX@mjT9e%YLB;xV`H0sxuZWGLHqp%oS@eYKxe_pMzV
zkXGeX^c0jLpwsUFdv~+y!GZQ_K@zS4nA`9CXv<7AZ8hf8fK1-eY7(VEcT8l3!OtWb
zp87TFxS#P%Qo-0XAb}3qde<SrO6tzkL8aqOzyqPLz1c#n3o^R^geQ3E7e~`pdt(|_
zT_8mFU^yH1CQ-a}IfwvJR{|7;5Xo^<Mkq@H%0(tHQ_<tG_wN~5QLo=KUvdoZ+;D*q
zxWas`tul~E>keG_1No}w^|%n-)T>tk3Wn%J79&Yu+RGpX7`~m9NoEf!NzQ}~Dftk^
z?O+Or-BOcz%_#2mo8PSDA8XeKd9o;v0u*{%DPXmDk3gBV^7jV-rY@@q-vb_n@HIi;
znDJA{r%eV>=kFY49sE0vCpgY^vYp7S1;Q}`0&tfy9p>(_E(>^^%=Wll<VJ<9guqtj
z<d-0p01`R6H2C@J$kYhVje@<efx<KB?$iNNJP5nBf7<76Kg}r!<cZNMPI2d*t>NIy
z9&IZMw~tjJFQ;XA#r5woBY5m+LeqU4QM~YgavKA?ApQy3jFcMqs!wKO0r{=E9s%1L
zAiH}A^WTmSK28KNF@c8Jn0M!15ChlZ*R!L!z4d>SAJDaQ@xbGTD(vN3!)*-#C(&+O
zQu=pmZ1D4|!5$^d+gk@fVHV@=;r~CvEV$TiCh#u27hE`Z?ttJ261qGqOYE&s7Ty9G
zx%`XZqzkFw)2`Z^p|_q$29!fI_)!U>Js^EuPy+>snKSy`K7Iop7Y$*?Kt(C^coSlu
z{)g&ug7QH~Ldsn}K=1*ULqVOCD0!265E>xJ(Ub5(2*OSb8ed`tU<?573K6RXIxWo~
zN%;9D67%`*&P|G50P5dQw_ACWqSx9k2b0UCYU;HGKDAl=5eov1RE2&Q6sv8Ix3#zc
z{Xz~(awPKnXa81MNCcNNvLw1Y{T2c!UdbW4f4ashAoitlk?K&c4B^^zP3hLUkoR5k
z0GuoY{}q$XZnHDG04%Xz6tjV3ox_H*Dh<SpTwm-z%94YdVALe|CkSAudf|?lF}K#_
zBtm*YjV+qy<QEft=T!m`Aj2U@2r0_kicabF69ZKLG5v91j+!-ka<|Wko~CEX-+T0g
z9`H>DTUcUM)Ume?^uIY{VDwL+^MM${<*<%zmZqAoMJ>6De8W8}q@Y6QYkdOj{>Ye0
zGRUhKkyfRI9w4|_@SjA3;}*oBD5MK`mvOHViqC?C&~t2qe)hekg@ALRbwhvmQfolF
zG#q<eEUfZI9IA3a#V!_tLFm@LULM~*J%1~x7!MINGqpB3dhNlOfP{mH0kZXf@ggv|
zb++NX0bq_4id0|NB^_-|C$Bm5^X`9y7#aYlaAJq;=pmJP#Y3UuVfPw9zCF}Y5GVv`
z^w+;@b07d!Q-QVOAK)?a9(3Ap$bK!kkvAWp^#5Ye=ZS!hjzW$kMLeTc6zKg(1fUW7
z#Cp3xWgLik6y8`=vf`j~l4XyEcEi2xmH_*B|B{Ok?iEu6nHU<#lX3$*FgG9f^5Q_a
zhe|*W@jE24WjB{cPzLr~cBM&tr*)t@?+z5+%Y$LVw`-nPr}uB-k~a*n9|ZI?DY6A@
zZvr+`agfWiLC%paz&yOYOREALC=lbXF3*38k+|y@*uH)Y)I^#9MaF{a0y;Q8bk#Cl
zZ>2)z-o}FAy!*Gi0|6Z)ezBOQ1k~T*RS*~1jm&-m-7+ecgCB&+BN(-~o!1NUmL|&I
z!Q5fX8^?u#3j>6%jrp*`3xo@@=cXgnU1|I+*tANW{CG>Ww>FDV(E96p00pR}Gv!t#
zBA<yw(8^mt$Fc@Hcvt@EzWvyZIoDD|0KBxH0SX|x8Sb!8H?ETj<sb*4zFYC#1`Hhp
z`;k8dig^%$=u!6s?}jftNrQ+jSXcyJ+(0a<uvP3-N|_`lH#D?=cw-#VurGxM2sH0t
zYkK_f!vxli8PkD-Xun+|M?%OG08GCA)>Jj1JAW-8q>ugA*+|h@!RKBLk0@co?mSo>
zeh-nh1lj*&cqb28Tp$nI4FwJaH~L*b8U6$yZ+o%O`mW$cM`B7R(FINfgMH(U{2)u6
z;HUijFQKC20OXv%Y6F?>0-)-G|2Puero7v$&jVw=knKZ+WJ3mcMltaJa6~8gKQD;y
z-(m6c*7R2&vb7o<pOEx>-&`RTWL~G0AFq)}(~;@z%GU1xuZxjG7aJN-!h+QS!Q@0R
z*6wzpJA=gmI~GmQ#vsEcBY{3oGAnlbjYO?uU`TX1KXVm41l1s*Xxc?XMPC0W+93cG
zlJN*qt2aQk$RBxBZZX46wr(W@*&=*`6Y2^DR)9njgUkgB+KsJ*wF?%mrcWMw1KPVY
zM=HLj9Z+M>Ug)(UNx!1EenU?`fQ0>27mnADO7}n$6zo2lz;!x#U`EAAX~8XC4=$>D
zB5h9B$fbH-IolNgcaX{w4ZW~YOVfG>@R&k|AfnwBo7q?=q?bxFwY4_T+=~OvF>%m{
zg6hOv<FBS~a~w11ZzY5P5V&MnHRqwof3iLw#sCb3>(S=Q4DkCH5IfG7xUaZP%KYyE
zfQ3nHGn6Iv2sG<>V1rw@iN^mi*#W=_SJ8n=%VFex{Y?miza(F%f?3{M{<$}<<B8u?
zq*f{EgMfTNjz95J7&{%IP()Y5r%*%0>(TSO%;+NnuKJJhLc^(jzmp2gSS5}@gA$KP
zJ0^-k3V>KpNVBk^@xzITu^fO-V;qwXW56SlI6Q5qS5SosH5rTtGZQa8&(^5$U%FJC
z?f}BC3$!+Rsv@yz6mBR^z#~*x{}N1OHHk8oS1i+g1vR@)>n!IzubbTdw&Sg|0Psiy
zMcUIHkZz$yXs;*msy|U6)}4ZGE=191a)<!IN9Cn?s55HTl0uyIOpE8dw8kLwYI&Ob
zk=jH#_e;<^kYUzsh1qWcz0&T3HGUp>rhl^l!v>&)%FGY~MRAUDvHFTz#x#i0y@%Cq
zfBHT}gUfVLrMW!=c$lqW)f10aiTay%W=6r->ly%<lPda>Ir=9+gJRsx^T$Vgs8cf8
z?A}n`6HOJ)^&WIxzxS<u4*fEm@Zw$1>F86>tBVyg02wMk!<<^9cIXk&*@j@XIS4#@
z`}eX>Kr++-_Bzc@jCj)xM8X+3e9;|CX9O3y3*y?ObZv%)v6t=nkp<L_L4I=8Fq;2b
zsQF?~3X9JeX?MF}CrOJ{UbV%;ePY{XKl5$KJzRnrU&}h%WoC|}GdnH29JNZr6)`9<
zt@hiWgU@G!*62zLTQ-eyQ35hC0jsfYbKctzPo_(>c%Z`SbS_gQBpakfjFR(mQ0*0{
zSAU+A+c^Bm)WWO8fXZG~^5WeO){Vdz1`TC^M*a@)5wL@7(d}jhiepNrAY(;B)Np%O
z(9VE5Dl09A7l1*oaJ%^1K}jEMyfIP`4cbc`7oBeiQ6mL6aIaFh&xF6HT$kKm4D&0z
zB>mRCD}w+Bm`TiqdkcFY1y(@;Wcomf$UFbR?mfnJ|CFyhaKEfl*fs|ieuwj4J<q~B
z5LK%gfDsWhTcv(5%bGo)t2b7p#%wuL8*uc1BpvD>sn=Kn+7$J%V9g`Glh%*CgSxuc
zSC=c(86gez1enHNnaTdJ+}}jRELQW;h`BNiN&&XRf0L;pY?kg@>N=Dy(JPLFDrw(@
zPOO!sVcd%0p~Fz)&qnYYRK#NT`oWeZ_o(ZwK;=sgMkNdpz;BJRt$%%6A>w8h4YiuB
zrvQ|AJp6sM1eeRJ^Bu$N;6nEL()wo5Tg!D**S;KjP0c;DY6IIHO|Q9ie{L-!1rfBQ
zK{(uTv1NzA&>LVODmfF6U=f~xc$cB5Dk6}VL9g97@$us1Pnst*0+MU|()Eb-m5*fx
zY;YLDWRq(R{+m4zh?3IQ4kEyTl3QQFqoU$`yHCwsv0Pj;$9!(s8SyHNh)XYbX|<((
zEijDPpgZCEYQ3;@>C^i;8!mDrRC!Q)8v5KP*2;MMA&y2SiPi8R*dMn3C5^x!4I6+t
z9OoXORisd?&bB|V<9S(~D43PS#VR~lt%yd<jm<ur4;mNDAiP$V7QzOPz5YPOHeM|I
zi92_@eyxthu*djHLkJ6%*Zu*q)}pBwrs?APvx;BvnN(`EQ;&*<I%xiJG6;ZAq}a6(
zKt?Zv#yc#M`)m-$*`!&G2QVIhUL$H@S_yupqLlqGjL5if5NN^R<7aI6tiH1m;y{(N
z?-q|Dm*{Ev1s}7kXwB+$x>Ym(%?J0T$KsFBy>7bF1jRKQZsLyF2!ZfX2W3G)!EfE!
zW<|!F*f-Z)<H^Vp_!cjbH)q_MktJdu92xg!1AWk03ss)AC?9lYC%7PrXYz|hGIFMU
zo5X7FEBWpinqC4Xb#{iV2KH10>hQ{e-HuU@g<2h4+J9B_6NpQb?g06-Rnch`UKvCD
z6L)nApZnBDxWNMAjOn>1*WPEv^(I~r7ZXIn-+X$l-xUQIn3m)c96+0<io;`nlFd|f
zmW-i(TBuUW9uV+|&b~fWwjqd~eBe-8@I$}=o4nx9^pHaTF#AC-1<ww9t>{3Xuz>=>
zUt(IuUKt@@u4<$+V7u-5UmA%{t|n2@sgykADfLGc3BhH%-ZAw89WYZ;ta=k`+uen)
z0is8~SJEUD#b$%XlT{zLr<^d;dHXU!pkzFTFFdg6_7-r0<!epn|No@q-Au2r`~h?_
zo8N7Q*+Q$)_TT3717v><Qcb1sIxE;u1()DqPU21?#ZVzq*OL}8R)KOyiRHHl2dbvF
z`{A4Y`TAY+WOj=l&wxkrC7N}5srRtC8N@wH!fD4yNr8tOUQ>k%I4gK%ehu>HJIhW7
zX*0pkz+nThX3ozdAiw-2w!CUn&si+%Fl1*+=*y?4R*J<vB!;(kxsq%(^X0FjS7w$C
za69eITu=m-LSQB|3JU^FmJp@T-rjeUt(CC{5VeKAqq{ej@ad_-2Z5QGpMZvzjue8&
z)?!sA*)PmeX0;!zmhMY^X*PC$kkAtq&ffb+J~%+ymn^xW!M(MSr&{Ch0PPZvK+WwS
zmbdH6_e<<&dNSV@)j>-ZLHg>uQ~*rO`=-m@3RMnlfX-(&ux?wxtWhIUpB)gpql8;R
z#53q`C-~_c&X>RINZOH0WNzo3?9@sI@el8knA19)OGSwRTt|6x2Y@O#>@x`2p+ANO
z4{Gh+0Cu94kW-8`i;Om7`29i9bCptUwnJo85m2GN^@-U9G}*@BA-CmRBh8uJC*@4w
zMp#x=a#nMVY5-0AvGKwrSb#bXF=Pj4$XJvyP(_x)X|n{X<41_pzw)+M&u9qdR$ZRf
zcNT}`4n_!xl?k)44s2}vF8C!@XZ*_k<zx5YFw4|1f!F-RudvQopAn;G!v<?BayX13
z8i4LS<MzaAd4^)RJ-KXO3Rmw4C2`Y!ZQd@g32Rv4Wh+JtsnRzafY3T@WF-ASV59`e
zf!%~UILPY`NPg9zbXT$hd3||xFzeo{w6?5pcrc82A_N<J)jw5j);nzKxH*AwFLzkl
zeo6)m-1Qvu5_@CT&jqFmjnfQvV3@ULB{Lcql1bV#;LfrlIIZQx_ozQ3FkL;PuU8I~
zWg0wN9U*roFE3fl3^&lOHhmK#2;Y=@j{<PB&lQ~yX6h|JmUQg_@-CTqZP?X5G$N3_
zI9XP1Xsboh>A>|2ft+{}(}S4cvN>!UfFOm5VPDN^WT0BUF!j8bCaXEg_nuGrzebh^
zD*Sp*C<3PAZb0oq3%Kb4;Lmqe0T_PAjdl>(3d+2m&?df95g}yaE%eFUU*3!^pLNbU
zwX_h}?6<J3@Z|6;M=L=3<J&B6nQQi^`lASc`4Wxfqpzn+DAk{lcVHyM=o`)9h$E8w
zLp$L=cB3ocH-?{MzZBn-&Ip$~s`{AGaau_tTwO#IepiEdgPIJvh+jplbqrF&Sg+Wx
z5Ap)zWcYk;wFRdUPlbd@{uE}3+P{9I^+=Rtt1zT_{eTeUu(A?>=T&PgsPRE(NCRBq
ze+G+?um&9X?JaPKpYF}eh;<s*W-2C60NqZ38;@C%NP^a5A5;liPAjn76gD6U4pb{2
z&<Jz;NRO*Y#L~v9CA=ADbiO<s#{kn=grLrtNROljlnSQ;*eSACG6#J(9L8$lVzKAV
zEp>s!1O?tlz_SJZ!^2zqg5*M$6e)RAF5dm)^#GiLk+dB2P5x){0vt{qPNhWiMYt3R
zzei&=il_;+?0v8?XF5g!9Go}i0u8Ts)SvpB(D9WXeenKcf)s#z!~i>D{v;VnKDv~d
z+u*U6902cb-?}CKtGL+>6*z&RVCBT;w$F!15nn232myfcvz6Z|5dDdy2mG1T((N<U
zEVw<XE<Y@)JQyi87ftcKM^$4r&yFJj0EurnZH*2C%?t1`U8pg#QH@L?*vbx9<gJ&S
zo0)#|Wi-rzyj}a9IV}L--Zft}tj+&{a6A)nBqo{Y!ytT?+|yuUo-e1tpzv)AB^-Ba
z4=0&-qY#e}z@(I>2E(h&I)GGvp#$0sY+t1T=%Ww`#x~@KkPGQ!P~Z8Kj~1}NX+wku
zCVAd%(b6j8eJwkS%n!E=#+(ef`ypE%2N?YOw>S{=f;?s$orjB}GjGOPbU={8d084}
zS!cf%by{!z%jcBa^QsYl64PZHG}R=*>}Zcl601p%3Lr`-wCe4n_}pEbR}zh+S8oP$
zIVFG<NEAzGq3>1#6{mfzBf6E^H3m`}0rhyPPCScIU+3CzUhjBUG*$07sO);jL3mvP
zF~s)z${p&n>h~nPPIcYp>WZO>*6&ME12o<<fUMcF-T_;Mf#m_YVxpj$nhp*Z3+Nu#
z3_bY6P2|Ofb96@OZx6v+24zYdAjp4$QMX=DmR(ZZM<a>=z)%XHd~#6pK^4wE7!hK0
z2IWpK>$4l=7Yxi#*&L_)A94T+6CeleblA^i3R7P!=oUM|YpT-1WG8E^(tsp8+_vVL
zG{77Q1qApLQDUg%p6thRSZO<h+Nu``_eLiJU`=mJ*ph!f4Ot-}oNSsP=x}L6rOfG6
zy+h&Y5SuoL`BV^kKc!VIOILgE2T^moc|e9YGn{Bx)@OvA0c?1qH#)Tr^y2f&1Iz$g
zL8#d%m}2z>9GeK#u>=V`DwL2TDG$EsY`st+U;ZhLW^EaM@r`y)ARmpdPa%X20H}zw
z(YxTut#)v62Wa@gBprv&##nJQxQ|#cE(2|8%T+x#opR4d)wj?jW+M$Cdu3$$`~)I^
z1`yOfC~Dot2zvVTETyp$EjrNVegT5wGA4zjIH>x1<M|K+p?d@dgX&x9fD_l76c1?Z
z)f{X-AGEQ60Ky5(ceW!kv9Qkd(L#gK&u^g4szf4lPUGoHGSrii0M))053(x+5`ICo
zH`<LK-TrgKR#g6&Dtr6E?fUY#!tK;{vd%6qhE7GcJD!ON^x-4OC8C@h6~Y8zywibG
zAb(!Tt@xh>96?_r$mKyQfJe>e+dRO~f=-7bX<}*LMA5$aEDnr4(*qVFtirHCP}Hwf
zpaJw4Nb1*|b~v|J|Mmc3QPIh55*|w9A-D`teh=`vLHoVuSrxcUG@$nqs4j1~r3_#R
z2Z;ZZRQ{1!VD!7;y&N?Bv%k_C4f@|n7&K6O>{JhuIk+%9L^gQwz;<sNRP#2Y-JcR7
zHJao)qF#L`DZyXuj>T6FcQ8zaS^fbLA!R_0q4n|dGtDNKH_fLjgrGJGgS!8w<0T9Z
z>m!lh{2qv%&ZK~KH-Rqo`W>@IkW>X*KjrPNhMM#}Bc^|CiSo<cd$#2vI#uJZyfl{<
zE7i4+2a0sn_Y8uhTVp-e`|dv$cNJS0$Pi*S8>8RH0aFPOHxKFq0YF@=e0pGw3lb1$
zDFibl1qnXW^@O#Q-kSFhFZ8CfI@ux>;I9^<bJi9;D*$ZR8b7Sc84Yak^%Pkq-5Ob>
zQBT6#W&(C|YA`9!ypao}=Cuz(TFU&75p-B7B<pvkL590(Pc@yt?^K4k{%t!@WYSaL
zRXR|7z>Xr~A`Ffv>7^GMX16`VmB{VzSvr+h4HzOhsHGwSyQ7h19Ru1HZlERc8%tR>
zSil;ocK==&p`y_-vdY}<^eZn9(*WhYMsVH!EzTiNxRL|K)NhL|N7jduXVgmofpr25
zN)9^GbDr1k63Ohvg#nc$fH8x{yC_jbUSO0#ofRAnisuHl%c!2Zk}Gp>kip<)#q`{P
z;!e#32)n%!0CwT#M9(+7i-D>iKgW)9SvT)MF|R71;cx<2?ngon*&kuVbkKmJ+sUth
zC=gEG%YDBB8Ra#|C^xgUt!Qwv59P<KW*9^HR%u+n^thU1>GvtB^?hm~H$uDG9Z0^4
zTwLkw*t*}HJ($+*dPp~!f#0Mcn%DU2Sj7vIN93v9cl@maW834omtCLeLVQ_2)5^>j
zug4zku1KVejIZU*ZQ@_27Va$2*!~{jXSPlM6XJXAevpmrTv<*udpY~=K?3#GMuqFX
zrbPVFn)q?@i*p_m^u2<EjY&a1liBCy{HQKN`tDM{+kz;>92pMzeDV5MV?5SHFf~#o
z^Nu0viP`1AxROs2I7~K3e_x6o_=&=J|C{D$eFsa$=l5r<czUmYG9-#mYsqQ=N7{<E
zRI`au@rQl<o)r!<3%xd@u;Uh&{#+wgy3<TGoMSpad<<$~URQ{7MPmKc$-bd;rKH`d
z*}0%IyZgG=D1YVyo`O=I<sTzDmm{%Z#_cdU7Jo9LekHP2nDic$(Oy(JhBVHWWxa#L
ze$UrxokKj?@g5FLeMEri^rTW~J{XKiW`oi7<_1zD&>cvFnm{q}(PUl%`ChSeyZj|@
z9JkM;&K@SwS5kUfIudfa)vxA9Y1C|sf9J+o+Lz;x0VGud%<|#4Q{nkG*{k1*l{<-^
zeNtEB8(j~$D#d$0=SX{1YzFA`a$U{14<ImP-S>P38d-5IXvERS8i$dJdHr1t4s_jP
zTj%=5E$mUxoH6maUE-vZngzgMDNV1CsboX=hDI})&AWANtTiO4!g%s&f0<yYTIgNZ
zwVv$StY>DU`tzC|jao^MGs{M|mNO2MVUs|jmyYU^u}&h*kB43>yu94WV&Ny@R1=ju
zQCG+nrwt`kiVL6j>~Qn!Yuw4{2S%~@gTX|;q0!#tI(4ly^02G3c_+JBmfzi$zsY3_
z(66U{Jvxo*QRK4JLT6thhbXjzs!C0~D&AkuXDV8IXf~*!EV*horyL}bOQXy6>D1Eq
zP9H^Aw^+vhvD1%wdpRxHx7nX)$Dr1%>~er_b*4Y7ZlJ&0nP`a6eL}Op{5z*`DB}%$
z<$P_|{_<I9@=(1qF~Bwk=Y5w$nU?}wPA3U5^vd$056zi^Fn{2INe7ED%t_CMz>7vb
zA7ll4vq29pXBn;2;d?A_%QlCb{Ps!GspSJPhs9BTJ%`g@^6}Po`l8>=PJf5u$?w#H
zH%DV^3eW&3G{VbnF@>J3n)4P6u~-5KTI<~oT1*RdURrQ~@^Cu1SLK>!Q*pA9LCIP$
zS{AKTsyWnHKAzkS+oaJQU~$&<x9KOj=*QKS&})+E<L->_R7+c?IWh}ThwZd`hX)=}
z)NkSJ$X-`U(jc2C$=GL04vuR_(c%OrCohZ4U($=cXJX4zH)TH&j_W6(x&MeHo;$Rm
z^K<(<3XM3UmmSC7BTImf3%$s6L-srzzL_$qG5A}NmUHC#X}PU=*><xHpGKKd7-gxS
zVoQTP0?*bkj@NJQ#pP-a?_`eI4%1TSpyJ+aBgWq749-wphq2mT?{hBK?M$V@={`4|
zJUXS~Vc8#O8{~Di`cY>x4HBPfeu{?}?g&p%5pv{Xn&>zv=;WpGovH}Khv;yaN54v|
zi6ZfsAtkO4eO@Y4`Ny5)t&T>MVf4W&kG3e9ITO=z@6)Fwo|LGjD$l(;l4Fyll16Bx
zpXX;49ULC)_O;t?oyl}X6#CfjjEo>K7IUL9U#h^zq`G(foZQFzo{O+n2PW$+yRit;
z$)z99H{N@1IxYVB4ee9+donLzk9<n+CBqnW_lOv(YyNm>BEw~mAmIOpu5<TlD|?yh
zgR~c>+RO2ay$06P{F<JGfu9IM+(|j=IUM?%WqpxXVZ3UiO)oXq^1y6WqPoQnnECAn
zub)u>h%=NSbe~3H$&*a2SXsFnK+k_O3LtR3pKCqc_%X8BeR1vm3m)5jzclSAzytHM
zx8(KP;icnhog|K(=$2K+muF$oeOq%ZX#;TuQ-V`f`E){}9wu-x>#_3@Ms{)Wf63~_
zLuqrC_F@YS$wR^fx>T}D5=%0sy+4RiY=pe&?fu>i?<uu)T;CaNC6>5G+!2-*DID}W
zSx&jQv2M?QzI*u*LvqVm!9D7;Aoo>VCQBkamVAz+7OQEp(imgvJTy0^u4oE&vP=)P
zmQe(<`cHgz+6qR_ij2fMWTP9^9AwGr?y4OZ=G#7RqFx9Q;Ip66NyM|~9PAvHpI$Zk
z74}kH{9FkStdbKQQBlm3+|Gvrz@8Pr4B@fWEmu!js1Df8LX86>D2Bl>|CAWUQ8kIO
zRRpjKj#rhIX{ZV0Vqu?{OOu%z6{KW|Ro{wMtj3*>sx#Nhnbo<SCb_-%OQ_bQUvzqP
zP#Py0ubriZCU0Lg;#)A^?N5@IxX9)vkzD*ylk+UAN9Q05|K(7YBFoy0T};vW+lq@X
zCIMAztV;d|78bdGjUhGj96qMtsxWw%?4wpH!NIa6_LF#Wr}NIqyA_>gSgP0O>P5S~
zVBxdnGX#eU6sbUQ68<JcvhL<3Fo42PZcx}TJT@vD<;P9h_K+10(d6q11HRGmbTaVv
z!qp#-Q@dlGp_&e{sFykpECe~fr;BC0G8LT+`%Y!KkBJymO6MZfN2R2W!=6^W-Iv9G
z;rOLUotLtQPvl2bg~P0h;a2RCR=`gX)_P(d61Qh^jDm5YEo8hW92Ft=>w!+&6%p+@
zJnvBxL@j&pg(QB9Ah+=;V;=)#JkQqrS#i1X)Nd9$vgs^E@dO#45fOvwvr=he4pZy<
zEWM-`N9%+;-P=t8<Y16&Wg5H<5}hr9+2w8V;Mrz0L5%Q-%J=)!va1^aNnX2XHQI|1
zux~KVySK<{d(gyJU8H|$R9uw7+7lfaw@2w8T+HjOVxF}}`MslYoM6I*WBMgZUji#Y
z>!5qojM>r&Z=WE6-sIWZ>>>PqrThIb@vh(<vB&AFfpo+<I35VWvV|k#0|<W?{XU&v
z_(|DXcRU-!ASXyK(qt7KGGKZKXT>l)OcR~-+A{-IQvcAcK%5x=MS9buO3mxVmbhXN
zINM&&KD#7#uK4Wg%9)c^ud=Z)*Wh`5HB@7zQ=n3s3f|Tf8OlC=zm87`-q8BbL_%4p
z*D!nxZS}NdC@n>fcCl@)O!I|HBE4q4Xmjcq6TLv!g{BLQd}H&$+MK3x>7=>8`-V*M
zJ?d(+MhXtAS?086%gK5TzDx5W{oaeB7>`99lUW<_3Dk-?B64v>VYD61XUJGTScd&F
z#X=|xJ;AK`DogrtheEX;vefYd2!0uP?ac$OnDC?pw!4hUFsP(Ai^IB}nBPWp52x4&
z{IP-ySq&DySL1_&GGb`PtAAfl!zvv0j(-!)T{VvXsZt_w;bcR$8C}0>Bkb;Q;^i2&
z4k@hV<EqkQ)R$E)^qObURh!Snk1qcf`?_5?`?|}Bz4Y@$ku&z%dpk^^&@4*F<?3Xh
z%9$_6D22{nf=uCf;Vh6Fw)GaJ%D$b+P$qwXhS#W1`}u~*TCUv4;Bz%GFJC|)W6%+N
zgC^~^+PXY@>@yPW;u2w&J8~AKPZBuZv*UBGOR1IX#^4uV5~K?&%b~ifdn$>oH*1Zh
z)Jv5zEgdA<8A`s^Zy}RYcCdN`(C)Em?;O<W?B~DM6b&VyfL_f6WY`BE7&u%|XO-(_
z$&-W8p@lX;+opYEv6+IyN^oOaw%eC5Dt^x+QSckFH_K2+EFGIJs$aT>)A_9E;YJ=u
zrIjxtwTO=E;LO5$H0i;QH-Ba}lpdlAGcOmA|NIk<`O;$`5Z`blXpWa&=d`fs+#*?;
zV77P0ezpE_PH>AJ?)~b$l^Bi-<%jb2!75!SB)$xRT!z0jhr{hNWVPNKeT_=%Iis%M
z?%GG3j|=6OWl?-~kgJrp*%m}RU38xQ6c}}2zMRKYxrFchxWIsf`zMdHB^8WM6?>xP
zaE1u8vkk}6=cVe*qV~nnfoDmK69lilm<?6Mx=!3gurAir<+yRg#YERSX;4EQ+JYD(
zib5KjkKf8w!W1{(lfASp|M-bjPMPuQ{Zf$Zd4XbO4<K2?oSX~0#VX!?C)ywRtTs>2
z@nC5C{9UseJO!)3U;$sRx`(CU=GKN$asls+BN1^qhN*d)9*yuB!mh;YlrrT=VzY(|
zhpoOB^Au}rsvDA<J%#x`y}anwj5ASb6n?Ni3h^b+pjk*j=bj(=q=3nm8R-4kkPtA_
z(W(gRIh)|3-aN1fT3u%d$nMcs$Ai%;(Y<X!n4RAyKlCaE?sCLl`b)=ZUs82WelHXr
zuRtR9&g38+-EfGA<+qG*V_HEcW-j5tI*Y;4iWVIIa`I;ekw%-mg<kC{Wb@KJwJjKD
zxF|f6<GYK@<@L@ADhKSxSPoFGY1Cb080@R?hpy7_W*D68AYos6EUq;5P;G#Q>vK6v
z_1#g@{jM{=koaEKAo%;?5}Ok*awI;`?wNGtt`s~SU9XClX}P8WBe*X(688<!ShEzL
zZA3@9&)+I;UQnw)TY5B{TqEwG?Rg(DORR|42jQ{ttMkW;;3ZrFdgFymGVxS*%4%ny
z7+HslG7}laz%v>CSg!q+_^JX$$+{YpWWN|Tfk8Hp;Ks>`Mr~71cRnLSiFnFopgCES
z;ewa&0sZL2h)!EmsEJ(VH8f@?Fd{<VWBOyGlzTVC`}=yIpvXTf%nOSeG>QM|p-S~4
zQ!HNP!BSkd1Qz~>P7krvqV>5aphg7)*wS0I$ACV{0i*wW2g7p70?Rq^SD%!BfYJ8<
zaLA;_2p10T)-B}ST|R`t3{;aJP>w{)gpcp99uUuhNdX2PN8;xj55U`J$MbT|`^xNc
zx`Q(F2OCK++~zM2URS4Tj;D3hf-ID_{P#dzc{`6v?h_kFtjjyXmuKJ2ey{3%pHi_u
zQ#sk%jl^0}bko9Sxj35V!#}Isy;?H<HwyqNh0l4T=iHYg)o~+hJf6h7l#`VP&oit~
z7%G}^CllFvhQ&~foY-Y1^eQsWO|L%^QuUFQ+MT%+DB7}8JI~}Q+S*Gd^I58XH+)|c
zxL)9{Dn_&p*LQZF{YoZDi6+~*b9&|A^(C=Q&c_?csE~gu?+33q_Qa%y^PP#G9jv_@
z>jk`ucPm6-^`+90>AFIYP3`o@$UJHW$9=?LwuoSZkZw9e?FflsJju^_(LeKF5npIw
zmumILa$IOPBs`K6=09XC89f8HXxQ3lt6U>nK78G+HPu3e$D{=;oibrf_>BCSr^PLS
zP&!uj!$CHc*915IayecnTc^bX>f)MVe^ekv_XVWTtBF-5d{`@RA}7Xz@Y9iYyu)E>
z;-EdtS(G@>p}s}ajc!7Z{_2bO<gmfV#l<%Tx|I%9>g)05AvPWGURW={iKi)v7wR$~
zxVB^>cC`aC`WYCHivjZ+$sHtlpm!*4D$9mZ76u3khbf;Z=$$X<)s@74luZ!x5UBY!
zp2cy#xEz6A1WqMghyj08=v-DHZGgpchI24d91t>lvwoZ`U|Jr~CxUr5qe>|!*iXV=
z_*@8p%tj?(<0zJ!23|G#q`;$cR=@)WirW2Lc<IxJok8fJf=Z{SLjKTn-Ba*#Fh4Y&
z1e+)Y$k4#KgbFSVh|&5|N_shRBy-Y+G9Z^G-iC&Y?xe{NNRyJbkNAoQ^MD`LNUy?v
z8UY8rlKb(=OLhD5Nze<sUqP)&=$#Ixl#qiBbEA+>WETL<6$Sb|^IEOBMq#)NNzlMb
zZcg6B74E{YzGsNtOCIE1mosa#HSWiN>icc=@e_A>_|JO7UILTJiX1gUgQd<$OeSq!
z5}n9lGW15Eqp#CPBShf!cxX<a?{o=k4U7WD^e<;)8Cz$jq0KeC@0S?OWaI<c>+e&>
zye~~&VHLG@f5M9Krj88BQh46WLeo8<Q?|ci!W9pX0Q&aL8Dt9JuOw`F5xho3C;~6V
z=ryrt2qR61l7dNgXj~I|AJ(FKGu&sr%=Gf$4;YKQswEn?_5vz|Cy1myktPKbA-0!i
z4&Zfn|NfG%K^WG-tsL`iWMEhz9+yE~yvA}iMS)@6+sgp3i1fqQ*a)!a$gAjj#Oy9>
zLloyYa{(01&ilEEWA=+bP)W4?6nXw}_l*qb9G04cYnj~Zk$}EUrMCvr^K{|Eqn@y{
zswcP!?iKj1qzj+HNeUG<LCYu{X%#61n!VbbC?7<ovOZjYvu_BEMAecmM1fC9NpE6j
z-~8nbXu=XqNBJl%c#fumxg_XaV(9O8fa(g(<q^yirgX)kj&KsIW<cLQ!UJ!OzXIgi
zgTNGM-WZ9=8vN;vt|Yd?RbB^n1Wo823y~mqpEsmnB%{Lf+5_srlwtagYUK5<Z?ppd
z|6vXeW*h;?f*gz&#e(4@i9Fd)nmmC`pjn~-9Do~4JqWAmf{|lP{{KhUTZUEHg<ZR{
zq`RcMLqNJaB&1Us2?^=$5|9olY3Y#eMq0WAq`Q#@={?u;ezEtD{m<h77wew)%xj!u
zOg|s1i5zk8PCw)95$hQs8Huu+OLhT<4_7;Jo?ZveMQRniLufJar@Zk&xw=IpJ{zm(
z!)b6LlO|I!OL3bw1nTPMvRj(}p~q`Jgj+iy40fL$bfDb$jrc8PfEZt3ilLVra8cXf
z-J0U?yX?g!zJ9L;{LP365LPhyn|gbd#F^q4)#={XTPH#N&f-j`oz{m7ct9<|@IrVY
zg!2!Y)dBR3B!EmpUB+vF<oJ+5O&#?8b9AvQtkYyMs6b=tJ)R|eSgyWsEd&tWgfwoO
zA*fMxQ9#Av8CtfQOE3GQuy(tfjqh6{3zYsNO$YhN05~}4W(-I=@!;<%0JABJjzq-g
zfO;r3xGa*04x@)uXEUb+pjWdpj{Dpy0NnAEt=fa+1^lAj40LFP+&E8-wh{?MGKjg9
z?g5DDsNQ*DUkbofZ&1G4uXZde^%efW!_(>TX$C%)RanLr9%Rr)O@PnZXnEyL1(inb
ztiH!|BlauqmH_*uf#2PJk?{`^*K0A*4_<PiBN4$E+(>5A0aUm;r=(WPWu?tit<q3<
zvIsL%#8;sBK*`(}^r6an|5q%!8lk9!8}}$qaIhrMqHkPiJ`tjhoLE>`1BiLZ^1HJl
z6m<KcQLg)2zVE{GJ@B$yi?BeQwd0k2a2Zf%L6loQUI$h&$a5k5jUN?jQm&d8I+7_k
z$6J-by$1(~2uf&C9l*51+D5+SS*N{V!HtDlCBneOrVM+@2y^$VA4I80KZ_k+10zqm
zinQqQ7c$`%<qDgSuLtRIK&l!Bz~B!Rk|E=lpsNvcVN0W?iUDx70C38=&jPN~(!zlI
zV};6BRMHWHz~Pdit9f899tfDYbk{|w1-PY<6f~j~Xhew<FfnH%FLn6pf$Fk(MLbAK
z;rF`yPuCpT6#=mpw|@VWg)&Yb!Giy5wp`B~P}wF8O2sMai;-U8dH&>9M)!^OZ60SM
zxWRx(=Kp&lZTSp_N1kVb0ch#b8Pd##p3neMIG3~xzlpw}(I<^vT{q~S-Ly>A0u=u1
z#DHOD3wVrjpKB=BA_8z^asap^4Xo@eVCW?PKCwm3_FBA)HW1)W@__Z){;DkEXyxw)
z7KL$G7vyU|SlJauzhc#&ul?$P3qc31>FDuNT^Q&lodF%cl#^c*+Fw5^+b=T9MB*v_
zT?GY=bDN)nfZK;gI{^Aw9@N%t4e*ieSzsirZ0ZpT92>fT_m>em0{}Ol0tj%)FnDhr
z7JvYzb+Q~sM4&^R^1=9Ssscdr0{$}^j5h2MS<c?xS0Hx|f%Jxv51;?z`Bn6-Jgyz(
zj354;<;I51`TqgR^bMpXCSBx(*ql^}VSCF7+u$qAs(3KrMH5Blg5E3)TdG-Rfj99R
z{IY{|*I%$@7n$T{l9&^+o-Rbo`(K|ZCW@5J?_78*1*P#HsH?1hGXYj2;{CW{_Dm1x
zQP3effddsj*--Y>L!q0PES}!b0A`3Ax=MGf2vRvS^rKv_9W~cL^Cg2~aKzIv_>WIG
zI*oRjo{(htEi_`D%hix(YzQ9UnyVc)Rk*;*DiQ-x59XlA@V{PGCcw7xlqC*Jl~+FC
zMliFCi&P-~r*mRgfVUYC;19=Rx5V&@S&Iv0lh=A?uoHjR8c_#$vHOCeCE`JItU#bS
zOi*JI`1{cBho<6kDF+p)y)O559Jf>0jCfEOR+}6pp&2d!|1@R6)fRYhFQoO~k_~3Q
z$^V-583I)?K@O2D00+01-B+*tVVbBQc;MtwtzxPIkn5_>E@-gOhctlr)cTtj2d=^%
z5#@aT{CO~nkaL9oD?s3rfc7&8It4VkCpR{$+^ACo#s97xpZ{J0?D{za^+DgyG*AUS
zK^o45Mjk+%X7g1h7MZ*}utAytg45B<0?q(1jM0H5p6tE|+M!DW3_u%Q-R~D=cY}rD
zaMTa6i7AfX+2R(UhSJaG(48gX1IVa==4pK6bIhFqxdm@R)=Cj!0ZKyKh1RtVj!o|&
zUN`_6bO(}lbS;yNtq&8JYt#*u{=NtVbGw1a{SoJX?EuL7JCR)|Kd9WtWYpoahTNTm
zg%}5<)PS{SfR*#9i;>rZYMIl;pdwfgq1=XM#AA@A7<pbPuZ`>BESeVNAQ~+HP;Ile
z>H<UbfdXnte%H)^2>HKO@W33bi2?k>?lb^Cprr|@PZk4hSZX<rlTS}<ZU!Jn)qCpM
zKzOG(g*fkw#Dj@v7<B6qBAri&u)sVjUscC-1;orwL@t}zcZOd3w4OkUeRL9L-9Ux$
zjTi+xxK9S({<CFzY@*eEc})yi!6N_>Bv3Oh(7Fzf)tyDa@K%A2EDnb?F=$$a(8UNR
zSyo67W>pFpPVEbkQ(!pt!9k6k(3q0<vdLhaf`v&x=|iXSE1iZ<-#lBsD#e=t$@CC$
z@5>?}>%v3#00>vD^pgPz@_!5<F9O$a2NP%`_m<XxU=BzBqW&5Ryi@a_BU1$es8bf?
zQ<#AnL|ntBGy;s@%iz4ur#l5aR(;D@h`Ky%E(L&P;e^nk2z)mR*jE}|%KQTcf*qs(
z_X}79)r_5K+g4>)l-cXNl`;H@kSy0ss!Y3q(15Q{MRTcT20GT6ssIE~qEk(k9e1a>
zOo&hYKX$)W<UK^u%%QK`Hd?EOUqH%0z*`7dDN?|aAP4%pus~KYW>qj~7gF7D4$v+v
zurBCTti=sxzp(WZQzUfXf+rHN6_@+L3@|?aix~{x4EFyDVQau;p;l+93U;qW&;{5F
zE??^Zv&B+@F$jMGDKQ)#r^aHK4hrCdSXkZA)dIm<p#UbH0>GV%Gl|t>RdsX$IDiST
zC-L<*bMoumA>~HK@?Sv05G;dTP_-bKR58Da0dRaIJp`CH0zL=mL4V>{?HmUlt`h(X
zLtrZ%tPx;MZHy5JwMK%9q;yXr(AWOtO(bH&KwW|QpFi*dm3>VPQrUJMflAEt4onG`
z`3ATA5DX;X$?bV9@@dx=?5ZvPwz3wEga)v|`rU5hTdj7q|1j!Yf$mB`(N;PT#Hm50
z+mROOPl*4QPZ6WYfj}n$bq_F6;7&L>INpOz*nH(EL-jKpbWaKe<H6$9_l&<A0Y0Yz
zx-8Rz1)sxZPo*(-`vvR|Fm6BmPX4YB)LCX|?@6UUg=UFpZ5LL}g7ZkVjGzkgA&S{h
zq8!+&|NQFlV^t#&6Q<d5Gqeq`8B@8^D22S!<RrlTv5{JsPX*dcHV_;vhJn?6E8V^W
z$&9_JK@l{>rv(Sx#S@5TnN|`&He~_!{^)1R3KFdTqI?3hAjqy_=zP3RzfD1dX$50<
zz8#Jcxa4#s*1+P*uI>&bxewvzDu~|D=PPSxuw8=%`Ej76xsoX2dk0&AsSix=OW3JG
zo;A>bA|P?m00)HAp^lqOmo<28S~gfvm7@W7qL1@xG7W&n_2##XF2-=sC?f!2BYmRG
z^>D?DkEWssYo)0I-H?#mI`Oqp$5O%LA0!yqACx)M9u<b|OdueyS|*SI4nhW&G!Mi9
z6DR`W5eN{C)GK8W`GbTCu>;?~NwFVBoXO#QOYT>uU}J``H;*h_F%RVWmB(@YTt3*k
zOtpDB-)jXWAb>0h`3ZNJ7hrNKg#e&45%3mYSZToGLl3@pR<Yx|Dr5ljg0wMtKwk$X
z1$a>#D+B_swnB%`?T8lxl(%6y6#EVZz5lbgsN$xAS^I}Us}@Lr!RzC6^r!+~71m~0
z-5%`caE_oPYU@eI;jeWP&>}Fn1OQ3fyDtR&8NLb^xc$b#+Y)Nrlm*?k3lW?JbdYfw
zpq>d4Dnt(&@S3rR5#UO?K-!-4+b8g!SpVn2@GNJF<M(EEfq7z~l`2t$0enhO&7Tr3
zaDGr13yb#$v|R$Ai|n(Ko#EmGM3UCPX|SQ<3{1oS1t5XC&z}}D+?Bikl1@NZPs4=b
zLr3%u#|zxQ(s?UU3Eqf7w<4X$DjPXq2Y__2Qv~JxH3I>UkmlJ|q?{ddP{JnyjiU%^
zIxA^;3jz4fSHKs^0VMXn2}g{g3IgoUUqQejl)&CQ;UtE*fp)7_P*7C@3vzxJ0N>5Q
zL~srwnRIG=aEJc4tI&!x5DL>kH?`mhHp_@h3lOG8SZG`!bWaEl8?CM+g4CF@fU^@j
za0Z?-5UBN)PI0Rs#c(6ur@{VLmljw&fv;}a57Oe+-Qjx=05SG!W+7St4ZH~iMGgh<
z%?iYW;fpDZQNT7@j|(RRtVm_ZVCel4QsM;oAT&s$CJ@Y-Xhh*uy7I;Vb2=XrJURX6
zp-_(;BHra22u?_UKst~O5j*X;uV~C^C-~*((Pk*wC?)nhfB5Dcm<ssvWi+T&Ab?kc
zqH}Nu=Z4L!k%L|#@n4%LPmgNHhk%;|YLT-ef$GA>+<^cf9t5_zZEzT>)173%_<sc%
zV8DU%3Dy10$w$QIFh7!OQSi;ZUV<^bN4@2WybYXxTTeepK*(G&_FxKIcAf2_*1>GK
z&3|sdCuXqQ&jwpUSRq`G!}7+hU<{Erc`EaOv<d(f!N<%d?;AS}20lEP6u8T?GhhIK
zo;6y1PzAwy!42nvn^zHB1Aavgq*idF$dzDX##g;4=$puXA>LI4q1MB{*}vuIhdkjn
z`P|k(UA5qpNClSD@XM*ThPztLpbOm&KikK@jXgD=9@p1;3ugVW81xwO61}<e7U!ns
zOne{qf0t>K-wPaFhub>5@Ynk^A<M&-Tlw4|)jM6P$;_Ggd%ExYt+)Aw(#PP9!_~4d
zNMh_EZoPOlV=gJ2%!n>?pa*3`-YfHlur6>yk`jH?uQL8=it@wW$<wy}ZTdoW;**E%
zZ{GafN|88iCsCWXR70N}1JMLyWNToRJwc4s@1bNC<~y!Bz?JE>6|S(5`RlbE{`y0P
zcRH||{AGk&=vO>-SQM$CmWxzgE3tp&(koMccUXyML#&*py#5X{6xf51`Avv31w<LM
z*r2rm9M-4W9Q~L2)Ad^t*x(+{7KVt`j2b9*W2^(9ILn_ptFP}e1-Ogf+%95kj2_<%
z-EG<{m?fnNdpDqx@Tq`G`i5Kkt@kz$Awm=MbP12wDq}zq$JVRLCj3zh_^u5$DNVXR
zJ8cbO0RWB`2APz`7y=%08_lXKjhBIy<o63GXbqhRnt`oL#Un&3;RS7R+Tuyl6?mip
z%~Eh=vk2S+n~zpa_b0<<fYaN7*{cbu|F0?z;w6gXjQsc{BB;r!yMy2}DllfesnG15
zptUwt%+moIW_#JZ2{Dp8sX#!|dj;~Ycu2Y&e+I=v;WIC#KY^VrN>*|<vpwYgdSu!c
zV6*tGMCdNR2MqhxsNPlPl#=;L=ouDcg0I&(P^=Tv+t4XSYE3l|1bRUszHC0<x3OD_
zf1e+qhRe6;<Z*nCn{o$S``aZ&SsbE1r)z;rt=`%ndZXmroz=U@E6dv`U29e6msw!!
zVHv<yf@9hPOv*d6^~Y_T{(AowH-?`MV>?-tnf#%~H5^ZuQGRV+@Yqa!ep!hBSj66+
zj=tNUX$c3p6SAwc!<nt_G`lFC1><pN=lVNG9Og$V{8j$3J|Z3&i&yhaPag>vD${-H
z9Y(1Kc81g5{axx{naq95D;h~I8rT-c+j+SsDnC_N+b`k4oIH|(f4=k8W!wzc^<ZMd
zz-q2O_Os6n<qr|B9#uYNuW(Yqm>;)~af>oq{9VXwy;{{dB-eNoMIvCOlN!qwwSV%R
zvPj`=rdK9O66GmRaY|ZE7Ug-SBh}+ces%cdqjsf#cME7$^QA9-99AQka_LX+`8|({
zX_UXo-^HfB_Plt-HFr2$@$L1kRl35i_mt8fwSl<h0eiX2Xa7fx<>z+yp&>TW$J4>}
z6W<9L0XOo~{Au0uUC^1Xc8I4ED$TxL>^{YVMA;#*z|yMb(ww`s_n)gS+V$TQyp}V+
zUC2yeQWR)xe~W%Vd&gV*n_ie)z-=z3T&>`87@ODdq3VQQAxkYH={0qx7dnT((Qy<1
zwr?;mBvHLc2^y*gtpH#%YrPiaDOxn&v5!Rb*IW9_!%Dse-d6=K9hi@&I{p2@&Nr92
zHInz)@bM;SX<B9l_NSBb;oOVuGAmQ_u>_;2yJbQ5{P)2_;G;efavtkt!!vyS$o3Wg
zqVq$A_r(s{B=7j0h3(PhfGBrQ!Kw<|kw&W%J5F*UgTV?c!=qOnFE9Ru_9sNa`%t4f
z+2O(yu<7`ju1>Lr2F>4s9%2Ao%+H!R#%k|0S82fV(%U`pcGW%+xc|SU>yy%MMB6S6
zKGk?UX>+U(_a)FBbMDZ&_vfpg_f3e@cy0Rq>2yz7g(N1JGs!Kxi=N8Vzjj3TZ~FzB
zSPf0Z>zbTJIwFO~?@nAc_@Kb-DIz+7`6f~XMP-H6NXLz=8E@92NQvw#a-UJ+PI;?r
z-i@AKF3U2@XZ00c4{9;hR<M#NfVz9W-{ak1wFM{tr-m=5jeYJ0b71`GGd@Bqy^nWS
z&Yt4$?Vs8s7{u1Ics8_9lD&0fUnU;TRSd;-EN|Txtjg#1h8L)h|5R(zVa(&V&>{cE
zZyrUXkR@R~>#0n{Wn~f+c$%qrL(E=PbhOfZ6%Xc^RfGbCbj&~1wvlFIX_8)-#O5;5
zd)L!LC;9d_*G`*v+>8bl5p^fC+6~XujGthK0H$7GZ~?DYDB)V7Q{J%mA9<E#y0bOO
z;Xig+6|m77Vl<q(?z=q;f+h<rgl}^+KXT?joJb<%J0BK0?Oe*0s20V4T7F1(IpI|s
zdvcbciy>m@>GwAus&ih%`zGMmgi0j5{NQi4d+&MW^o`Feu33)3urz}|<>~qJWH8P4
zbV<QURk+i`-s<`B-1PQIFv8Ywh^TzaCE*Cax2v7i!NcKrS+`71lXE6urRAmO=1#~(
znvCFmSN{0ir5}dikJ1O+SykD2jl^{rjH=x0UZs6m(MKb=Jwd*SH+Xhr`>f?j>9*aM
z=8Nf(AqFUXXiOkDj=f6BIXb1gIT9@@P}<&by4!NRxFed{z#$ZDt3)N_RNooRVxo^F
zPXd*-1jWwsq;pN{U&EES$uR9A@%K06gGIif3g2_>rS2ATrk#<uWEq1yQ%ww?C3qh@
zI{Z4`cYsH9RcmQLi|2S{Gx+dln#QVTYs$VC_gC`f?Lf!Qo{i2fkD~c=mcdSFn|T;n
z0=v2vK;fjH4S}StE^tL)DRHT0&ZLm(zUrTUT=#nSiJ#iG)yK}y?P1Tv>P8i$FuE5M
z6ye=&)^peJ=1<edaGA{SpmnBpe(jS_PEx*)iJRzT!>S+kf0@Xf!X{V!F#c=gwu~GJ
zusABKe{Hw7!cET?4rxcdgK!zurSJTx9}p9J{Exq~+NR6h_~nft@IIrdT+*<lwXy7H
z`zndt)^+N)co=%Qd@?ym;Pz(SpYr|!`q;F-%}|pGhx@Eqv)^OOjLl^r*Hab91+P*{
zX8ZP0rkPdmU$ogsV&4PH99BV#;=_lykyO5g&+(e8b`-V(S3Hl!7R_@b-e{!4-WUC7
z7w(Nt(Jk?YZ~d#>=g{|m-<n<s7I)e#i;&YHVbgJ(RA!uZ{M3UP0ySIO=^|x!D_f=%
z!#0)<oc~!=SP!6+RI*Wzs_#j`A&Ib+Gd&nvU|hMMSP7%6SSXXTb=n)+hYD8e)vCc?
z{$&t-_R~pbO{EULcS$<q#Qzm?@v*=&kBGx@7MuTaPK1!VsnKWtZdEf;nM9DvNRgZ^
zSVoc49#*30^pcFP--k%!F*8)H*3R^OwMz%;;i^H0QKJH@p%B});W)MAfFC1a*6{00
zUG8`_bLQd5TO)3JiA%J<_h@CZ3zvlXa{+84u3Tcb9}awe-K)V|Jo_K7QfD_ji>-K+
z<$Cs<-xpp@wW+$+`X?XpgFzZf=i$klUtk%Ld~u6k;J1lk-d!vXMk&|r)7-Mt!ItCx
z?-J?xH_oJ_Q=M<UFT!ojcFR`(Q8OAaghi#k(Zi;ZWe^sqkE?lQlbW7LS3f)~h$fN$
z;YuJ^GJ9t{i|LQkPBK^(<77s4zqx|MgK-)IQDUZSS6f>^)mEzKjd^1kc4|Eq(*2mi
zVyh?S`AWMwmTVrmo3^hap!>E6&6md`1H|uX+_~7>NEDLKo_PLP+%%l|aVhbTk8k7`
zBW4DHCY(EM4~2_d{ro+OZtvv!7~cmzBs>pcsJAkC=-1{zcj4*YOuA~YC?{{f0F|^6
zFQ>&A6X5L<vi<cbMJsi$=jX)GWG`JmZT_83ps_kf{KM7jTl7J-WN}Z@v&c`KP%t+e
zDaJMNgIT2~(Zu0u$hqc9@<IJ7ciwxYOg<)@k1S{?pnj@b|Dk#$wNY(@Ue*$VTP|t2
zN3KiIezy9!%X7Qeo>t?xixdvD$7ZWp72|)O|5Wg}id|m}*w~oa%ig=$)7KWpBw^v~
z4my9Ukq?U{{)VAkI%kJ#wFvyt{?A+_(=SY}ZWOkj9=&&7Vl0EcvgGez#FXqI7aE&w
z8<h0@QH1-1{L(iBO#OS0q43W{du`J>B{LNo`nv8%v`M9NSee~<FhhmHA4j+^8Fd%^
zRvE~7%gtBl+jN_nxJor;)C%RP$r}z{6VE=HiR|4vUKlwY4N~4V$+3L9{O#^^IY?=B
z;V1k}<i`8<u*>kGbs~4UNNxN0j>AsMf0B3eE-<2ll2|0CC@Q^L3|a?Zk+dGxdsQko
zy>q;M`*8zIb9nK8ecuk&NIRQv;0JHVzQo^JI~iH``rj--pfHvpecyD6^ypJ;ds%?p
z=3Yyq?Gz0f-^?4n5ma<eu8}BoPEJmNk&%(5Hv(&Kz`x$vPCYNBDBqcX)J`^2NIv@J
z?6WZ6`qJHab*cG8G16^0<WmNZ39O-rKhqUmAU5_<XbzRid?WDC_fF=$jTiDfH~tnI
z^IF4KZ>F&?YjYH96;I*N|6qm@m|ReST#7v5x<CYxKDPRur4@@ZL7dKm!+;}$)&)9O
zpKMO-`Ej~-{Gc#D(Hs*?Q6vpTst3ncitmDU`mIqWj{?MKvyJwK>l@9}mMabEgBED8
z@=0lEeNDoi$03vUkCi_A(pFB#=bjm&&Jw8bbWEau?^j@aQwLCwX%igm?rz<QI^ZGO
zkFAY<3(A|8hk?!#$SUR7f=WKWvcqBfm-bEj{*7hRRukO2aBl4DG$gWD9qwt?!bUVd
zc(m~J+6c%emj{77?2W?|wp^hzHh10HPh<;j$FbEtUZ%H&!F<l=sTm!r+mgIw*bKAD
zJzvGz!L3#&k_{Q2r;GL`4wn;#TxEKOG-LPf_BawFIehQy&Co605z!LtCD}VnP7ynd
z)nV$j7?<thLY}bpfamwq7f@-iVCSna-l}0QWECo8SCP#*U4@?;s0opC;l)izv2Ks(
za~_0Ov9~1<@)8(&^^3|zVZLgi8Y$KP>w>w%!w~2D9?zEX`S&yxSLeqo_PA-knb}TM
z_+>Y;4qlbMEEfA7Wc(C`q|-P(AiH!*?7Vuz3XY(=MbDwisno0SkoU{%jyq0fqu&r*
znedWN2zl?vGDxZ$(x_FkgneJj)6!uRFyoEOY~p3Q+=rTpwf#d9|F8xGt|rgT2%ii7
zj(G%lNXSqG&Olqp8<SjlCgsq7e6EkQ3tSb2R`y5B&C*$dJMHAZt-XhIj5&J6&Q@b-
z#w=bhyeKsq#vS?GvrA49u^8JVV~%1j5es98h(m`e&`?Ybi?P`_c@@UK>=7{4>1{(I
z<g49Jj?~%BpP)ci7gn4K4tY`%<~v)eI-M7vF&WAlN#olHIw|wK%^XczT{lZD_!oI9
zu;1OH;|zGNyhCz4KXCrET7ypc(+*J{5<)*?XJ<#iH(^gg@-eHYVOH_K&OBRf`pY}!
zUxSVsMh_>bwBX#^fD(y?QEjN0s<*B!q;H|!!g67H;ayIf?*-BFqUQ&&d=JJk5)*OR
z(kIxJzP>|C{{mRde}wb8tU`$f(|bE|tLJc>G+%za%?i?K_Ta&*Tr~B`CiWt#q`?L$
zjaG?T#AG=qF6~3o(j3DS4(Zn!9P;HQV&B@$YA0z!WH6NTi#aH*BnVkF8ENEFJ*>C!
zxYJ-0)44qpF$qEwnGN)REIIAbLqhDh4JEyX_R9?YXh?Z}7zS1M+zsw)>__~ThRNfd
z->F;(eE5cA@;J7c%IggI(EEV%NBEo=30H4uk~!N>RcOE6^B6gy;9WGzN2MXUu+R9_
zmdhovVh+bc(skB4?-6mGx6}0|Gi)gvEGD(anP5>70a1nmSOqB{l)r|jr6Fi``JQtR
ztG=B;wm0MarD<ehG(_s=w)MnyE;PDTnaa7QSf|B=yvBR$BA7VbrW9q5Os?^lEyDQl
zYV*3SY9|$XMn_({eQU*IAB*!g-bwad5G?XC1(0i4S3{)!idKkm?RNKcIv;QHepeli
zVfe;N+BSYm)QN@X-V{vk(z{?CBlf)}%=f3%E9qn8kV%^fg5{30lkT1y%OA8#3Hmc6
z@DTIdIf~wJVk5tgvfmO~<otOmG-ak&a!@c{Rn{RDJ8;7m@iM54t$1B*dOts=Go%w~
zu&_FMo({8F8a4_o<;w6TU#&k1st_u;{u&ft{`pm&Y(b;c5Tjh+8va*W^K}1*Uw7^O
z?y{$^^=naBh&8a`=#Po$$nHP`O80XjB?f=|D{uIYU+poRdogy1;5SoP!%KsLr!NG*
zbkLWh-R||n#@Am;<TSM`V<y55fqGtF`#Ct{qi2Q3uqpk|T$?ur=31MB=gWO{=o#2<
z@q;nIyU_x3uj`(bbBcwJpPgZrP7Y|(krMI8v#G3S_Hy&*uWn=<S=Jd%Kp3Z#p>DIx
zOUAE$y_cGFx9g(t$lDt<e3t*nM5+`J6I-&%d&&RQP0^S$tcx`5+UqyF7}|X@rh@5F
zr^{No+@FFFyJcc}+Vz#XM$;?lva1xv5Hr!2aHU$x;xnA5sIvDgz9`oDt}5M_GwMAq
z`~E>#`AdVh5jMnJ?1m@zgNbhYC$i*`%m`P(*u$NH;^)iGkEaWfyGr4D*uIzh$$150
z@9W$e|JfGFrC?oHyz5%p);l}cMxhSO)wXYU@+gbdy1l$8s(#zZkkx$#ACurYH6&x%
z+hv#A#!is!@_R#$_+F;+!E(|x%>W_u|8&(aT|ft@vRf7a4!%hyF^Qn~`>iwTaM$kq
zw>hbL#2y?*%`(2C=_Ym%6m#X!_5u5~>(N8Mpuse32CrKYpS4JyEX}^rpm1Wt7Tihc
z1X$#YOkvj_aY8OE=Ez^f)^AGPiwbjNgd8t1W!|NlY8oL7^u*}sjbbr;;=~|J-Gdh}
zKf;X4;8Sk2uS3Lb(Ph8>lh|Aq4L+vDZ<{JKCX>;VQv?IUu=tch{JXjR8<n$1Z}*9g
z`xl8r+2Z<*92UP!T-MpqsD_1zHJB;GM8MuqvQ}W*;piMEFXHN|3|~Tb!Z)c}p*Z2Y
znzO?R`rfSj=U$O-TihxdwD0Poor+@V?Ic_{3pZvk7tJ=)3g#a{cR-*Hl=v{VHfBMg
z@(&Gk#C+W4XjEkV<g3dwNk`s|bwngw?MC9D1TjjH#5-Qw1>80}5gPg{+i=EGwkzA}
zaR&F^#=eC#3~~_?d{+G~U|DoAs{e0}tS|b#0U0^AvZYh;P)lSsGSMjCM#84#3dQ@e
zLK)gOW=l*ni}0JI0L7v=&GxOszcn)c@C}44IiH!LsGmRE1$$}DpQ6tCZK6=j90&Fo
zQMP76D?~5l3Wbt?t{rHz1e&K`M?QO9c)g-&VpeuQog<hg4WUnt`i9M{Bs5A<!;Ciy
zK_ko}V0YquMc|xlhjoP<o>TekBi+jSs6u70`(wdN$EVIJ&ecv+dGIBX3iuw~vyUIK
zc>Sp2_dEP<B@l7jAJQ8B1|_30nI2!~IfYOuS1a9lm|kwd73-BCT6;H0?VtbdP5EPt
zs0zQ_sGuO_=8QuXCe!{iWMILmm}-(Kn-@caF-cEDOvteSW|$9w>y5jeLF{*5L8O)H
z4+E0vGMcn6SlK6-MRRP5GaV@#+}5?m!|Y%|z;YxMCsD+hrO{@0+D{M*N@c=)W)(`t
zWZ0R7x4R^8aqHiRmd$1_i)&e4^rAXC=^WPGdnPhfhe)#-wMb7bC!E#&Q_L-!+<c2c
z+wht4%Ta4%rK*s&byO-JzO+Iz4usY|@Wc7z8$}nE4U2D%MG;%FF|w+;0jv_C=^uXV
z+rJe({8Im$Bv693KXjRX`+m^gJSw$%!v7!5a>w^ku@Gbf{k`rU0`ASwn<PG~D1Qr;
zoC%gj@!#0}IR{bo-S+gsSQmN~=Jpf6`y8TyN$-?cc`k(+f7}W_{&=RQg2a-`>i7G>
zHWSm2@;=-xblS|B_{29EK{p+leEZG>J^iEDP9cAVeh408^vk^OJp2rsSwLj|d&-l;
zfA4zeB^{ZHgTAY!mcmMjVPiOJV0RO<F1VyCNvZ#M$M+*9n;%uRTyfp{Pfgis;-EA!
zlQ+P^y!&ByEW7fx`{hI3N6&*r4oO+5|GKX;=)TEm>LDEdPd>P>|4FXzioTZw^Jn?O
zw6!D5&UGEwv1(Yx@fmmVVWaa4oe!6DfIJawq@(3UUUNyqawTd<&2@why~WV}Gey&&
zgyW|kI!et2RKE&#!+Mtr22!=6QHDm5Q;kTNwbXy!ca0Y_w5|)NsazkE2-Lx5X}r!(
zLvyHbGPgkNyMCMU?#}$SvtkxCyTjj0B&jc_2phDr44zZ<p&fIa^wBa+r|X#fHN>o0
zqAaZ3iSr5h->HJJ*E2kk*B<saC2~&jDB2(PDiy6XT2SAgf;?YTQb7eCEUtf^5&~9Z
z@<M(dtFk#NR~zv>F~z0~(LA&&pBUd(`Vjf2ux5w@szWv3%=2uzP!R9siE4SR#Vv&L
z7c%anf|6-T8@qN#bI8Pd{119~_E$=KlEwgtbGkqe9@I_O?;G4E8so#%Pfu$+T&Mr?
zgBDg^%;u$i&-y5h+4X9h7h^ucD>4lxu!|hoZUs}FDrJ9kHfDTYlgUF=L5))SO1I=q
z*exghP=E3e+{)30s4AlvRhZRG4%s;xpUdnVLG18?i2K&X|4gR4V<ZEc2sa^3UtZBy
z^uGSyB2j5CoAYJ|5yv#_R8M|R*Y8lan*b5FUnfrwpI3ID!{TRck@6ecC*6Fd6xF$v
zH|-%|o1vxh*qns5TQf8&9>dF5%=lXYALkm-_7)nx_kR37Or)9C_BYM?9g~sl^#h?`
zOz)Wqu_vEYO8T45koX4w$Mg4tr2XUHTZU?77?He&-T8P*3e6w5osn_NojgvvU$nF}
z$C{>BYqb@!;=1#xL;8}ALv!d<_!<)E6p^tR$;ilJGGfqK6nynI5LXTsKV+NiezA{a
z;f7*M#et2s_gEf6Z(t)9rb~s(S5^${KY@Mb8_AZIrB-JYxr8Fz^PgPov$7+p)wUhi
z@t)IrvWYa`^g}GuEE54MWB(xvRx`IPz398#*P`pMv}n1YVm26#@heJGuRYrD(uF*i
z7-zfT>8qh1YQx~PVwT%Cx`vee1j>Kq1;;fFB<<&ajJOUg^Cw^2U!LVX+$^Wh$?j#n
zL)9;hEY4V0L<!B;?l64Jbfs(nmk;Uh$>ab%f<dDg6B<*-jal(wtHwnCM#TS)fp>O3
zZKND+Y36RFIb{B9W4OgsacVf_koPfF&M&Ng>%S?c`^0gY$KdR|j}r-ElNOX~pC#-`
zgMjf@PW?&B5^fgwfDQRXPF7kd8>b0_ew`Eg;p|)B3Cq0O<Q~!(d!5QJz7gy2>0H3f
zj}0w+)!WbA9|K?M2vH$Hi$C;+K<N5cUKn=eJ2nDmF>}7MWn&D8`Ao5D6Nuu-&<LB!
z?_haetvy)8zRX(!+bKPpOj-pzBwPcaWoOq^$pm(%fOG4yRr#N3_z1CT*RIwB?<cSx
z+J+Te75<dJbvjgP->&n>ofE4&no#(FGM|>=N!d`Zc+fr(*afB>l{ODYA-{+Darj?T
zv#km7Hdg5~&SSv=)U&ezh`6PSl6oAN45&n9*q8*ZKgnQ+K!ODn69)P`-mip5L@Ls$
zgu8~%b!4s;*L)j`A8aB4?iB+l+)WS`5J;!;sXVx>qv*OWaB-Rm(iaggYBOYcX3%im
zI}<^b@mF<)NQ~SLTquIiO1P)<Vyq2Qkn~@vgi;7p310jAH%7$QZ%N+VR!yd&{!7Vj
zxp)_rO&M8Ww~obnci7vpCAc3YPG3Bd9o6;>^-8=RF(<QfEI*gK1q&nMHWa;$CHwbq
z%L#6oA;%qcZV>{f|NRykDa}Ew)#R=hAX`xch^yB{#*?#5DiC!9Z6EDptCx*Mny?Yf
zF<$r;wY6-$tf=LsEu>gYZpTD`!3+fl2nvt~#*>sErJruB&i4KbXeKT5INf=|1NL;x
zD*V9n({;&SaIMYk3Apv{j|T5YKRI8$jAnQJPCIZ;gM}{u{F>?B#CNCiYCx)&b>)<<
zpdrFY=fHlByYr5tT025<jN{QV$NPW@4DxUQ=L`Y*_Mas>^Q{HcOs`1@EI8;g1<wS<
zsKm}k1+*jLY83<V1>1CN_;5gTk&>~*UP1Oian~l2x`QRqmfLjtZ0H=oBLub3KbBj%
z!W$Mq7nn<-jyR7KC`XF&htoT$QG!Ai%lJh%fL?yi&EebGH6T<J#+M~XbY&sVd)pR>
zw;T_Wdh>{HlMZ1qBrTE_I5#8kBZHd5+gzz|2avH$^KOrK&@m2wXASjtW8cq!u<nhc
zM_Z)V`2gqZ2Hr|2(jf{Pac2mJ_x`GbANF7S-L`0Ggti=I4yFns1MC9@K(Jpzucq3W
zr$<%_3E)PI%LhVFG<PN6axD~P*24l6>z<3N`YYsiL=dAxN-p9Pm-Cg05f&Fhi2_rq
zlE!Nv1HD1$M`+0`A2%dI%<<r_YLYtm@SvB0fK1E-<O?A4(YpbPN}{P^9?AimD-#_7
za%oy!%3cL-OfBPoV17Q|RzQLsa~1ZzyQFN$EHyz6ocQv>^gEzqNWjHgDAA+Zw&--Q
zxPjR3y2?Jhf*`}}O6R=$#<8XhG6FIh6G|;8k-@9{T>Muf+K~fRCW?Skn}|)XVdR%}
zVQC(CR9L(~P>jj}DV4=QMKG>aJ7I=>Eg^=*fcG<>ObvWl2^0tjiR%S&uYbf5neIa6
z0-+G1R3si6Fgzn?bq5z~FsU$U6jS`g29KVB76`a06HppqcwduWtEu?=Eoe|gSO~M$
zk1lYLU6p-y1V26^!S6CHiX22-<}S5ZCTM$+2ZA4d022%YAQlGge^`H?hW@;0A6YXV
zGolNyF6>rQG$i~^G@lz(xD_Zdy|4yBBG0^C1O-~VX;(apHf#j-q?S3f@s*-qR5EvX
zT`>U$e`DrKBMHS5Q7V><H0t--P&jfT$N}B}f@Z}Ms^$%5)C&Vng+zux0I`IvX_Xc-
z!b*@s!0k#9`)zQsrs<wdn{{;$mI`b{52ZF7^qY=-=>qgZJm4(#TiwtAW9rz?R4Nc+
z41EJZg4*1pR+xOgcU<SY<7`r%fFjH+G%Te;h6xc{!;;P5W7n!Qj0R5uE5ex+EYXDu
zI)!SF<bPf61%q}4i3cg!%lMLfOb0Fq$fxZBTtA7yr?})ITn2IEqM;EbL})szosJ&3
zI4e_L<qz}={S1UMJdTH&d>X|%?0ga0=Al&3FB2i4$E^uIc|yh*&~i?KJs`sQl@xNI
zu{cFOCIj%Abc0DV2u@P7SfWb}mVoU$NLwlfP<cURF(|7c!_dDCSk3CRc9j@LZ_j8e
zEcL3061$Y`?2^r?BQ2uBZ*}_EBC$;G`g#lbw}vaKIU*pviNSe0W$#%2ns7*9H9U=&
z)8d_w|I<>qwVAJGv6w1s#8p!XFG*|{;H@W$RjKux9AMfc^l3u^Bq+=%CQQ~)&Bpa0
zWQ5ouQSc>Ne6Jt_W2-&Nu=1@7x0$60r5uz9f#C`m5?BnBMWT{w3LeL$VPRnzGNt*L
zh^(*@$bo9jPUdaC_dHF;8rw{;uVr#TN}b2`5h2L4u|E?$5C?y!s~JnD?iSV$iChwk
zVQg8ERZmblr|HvNvqc{maA}WtQ#QgDBLolN{w-((%5qxijIUd;midDy?2)2U8T*gW
zw05kj8-m#~f50nGwz%4OczG?fhPw?LjViZ_mvOjF@X|2^u6SLd8+JS^V=;&$l@1Mm
z37}G$F?L{pP5}%{rEgF$`F#Gp0sRnuWhf3<Hc(coj<JXu<(EGayB(AVU^(<Il=eGx
zJ?3Opk;1%<GHG8R1ziSkq<z3^5eNJ@i^Nz__NBLkQEOpAxxvnU3y?}Gl~3Y|?WT<2
zZ&c$lUg^hCtXZQt#Bu4GZ`2|BJl<(;WV(O=JOE$U*$5{&+Gu-7`tE>j;co);tDcdH
z7knR3(`~wdf1n!NHhHw%I#+RAr@dqCw}A3Ki46<!@2!<B8v~?Iw|C}Z7CJI*Ce+5^
ziD0z#0$wf~Ck3igi%ro0TqG43X_gO5qV!rNNlH=v=Ru0eKDgPpQTIEDMFV(+2h0sG
z6BsL!XC7SY$(+mY1bQCo;HxL3a`F}aA%I{}-UpCh`tSOrQ}!F3u=T7>#DQzN&dYCq
zJ`(?a9U^(}=jLobQ-kAmN&d=gyGdTgjantbE5CObe;kwUozBC>xVBU{_N(8AJTmEH
zzHsTUf90*81mj~0+WC}Kr)_Z~0-{zj?C;CRHt+ohLXFp1q*za1EFXL?3H)=7Cp#yc
zbMS#>%ii_<*lG8jX5?hKt)$C7C+g^e3#V2%!PaQ1*h2mDjP1u_>i}1WdN{r=_!0zt
zyg*RXHwBqV=&dz6gpI6%8v3~#|23{#`1iG%B$r+Sbi@pB(wBX621R1@g>bn=Umh4-
z-E>i`p<Ya<-G%W$%&!`#WxtAi6?2*KCKs}K2w5Jepfr5QX%6`UD?iyel&92_JnJI)
z#do#>cBm^}J+4y45oUaM5N4)Q4b`Ucp29YC1T;oz%CAV28xaD*qqDqwz(H{W5e97>
zkJO-sS}rGwVB!@BW9wcx9*DB#bMp{g;4Lpf#7#NU)ZAZ_G6wN<mQ(pidpB9H-*bd%
z^kHu%n>o){bqeN-l*Yw{1W-rmDfCxy<^Zc3ew*Jdq<W**IrN}dKnH9&`m1O)&(6-o
zL71H5>6-Y~udf3M+8G;!<+s0rdFZl~%D^y1g^Y2Cve*VQ<1k!UL=7AiIG>$uzMZ-H
z6y9Ghpip~ryb!Ve*t#)2fWctcLe+9j8gsf%9e|9h4o-VdNo>Npu17!t1A(yx7X&k9
zq&_DrGJhYWC*1cuq#{V9&zD+EXbTkyV%V}p^FGwKSpNBr4~1}NDs&JPbzOhXulv5S
zzvXeUUq$SDDh*gb)3bC7eBNE;t=!&y9M2a0?p|cU=YLI;P#_x(Lrq8RTllHTbrZQT
ziZo*6k5HBGh3;#^#(^nT^x56lR4RC5Su_!`I0NYGBjI@rI(4{rXxR*zZo9Ltmj^Sr
zbCvqoHTk}cFb>LT5RIHvY=)DS4)LF#<f=T5v$7F!<%2?RPNLpooKPzV=0dDTL`_lN
zO!s5-Y<Ny%f-Sm6*)rl)dR<5fWP5DXW^cKfAFwu2{?E4vU>ChJ*&ydiBbx}jd>`GL
zKF7wM^H$GFAwt7y()(10Mj>8iXo{$cKGt*dWYp&L(7w}TF;o+L4U(RLahZqDf6vE`
zN(^<lypb)dG)oQ10W~9&T4kbI?m|ZRc~j=HZ&x{6%2WNjHR-a`KZJG|C5ZX*P)L*a
zA$;<u`N)4r*a{-SUiB$*F8{jh@*vXoR3!5kycWu5-B)EPD#bchm*nhncgiO>N7|L&
z+a2zDRr3|I-ydW%+9)xmoH$5?#GWEp&)5c0BitCz<de@m?<d(4Y*#eAKsY?o2w8*+
z1b1angY0a;(GvpP%RGgnjswl|;`V7-Z%c_BWA~(^u}LYG>@L@Mmd3$368_;F1(ckk
zn$B>(>vdu=sO7!}NBn5?QEQXkcxJp^t2^T%J`;!ApDEc<C!ij+-j#J+Gs_-=MvNzy
zP$0Ft(i6vQPnkZ1e30^Gbbs@$N{fUmfdi9DK8*$2@<vfHPjs2dK(eco+SfOZQ#lo(
zJ?GB73q%tHZaSu}$X;vS2zg<b-G9CgoIc*WKVY$Am(E&Sa*0@F6pSbS{`WXrR#`B<
z-+qF8LEUsOU*-ema)rfq%SkE#!M*@DK1cxH2a7L@PWE(KcF(=Lc$BE=ttuOWhFk#!
z1|sF~a|P~JvgxZC<rbzu35o9pUx`v{KQa59EXx$(xmG(|p?^lhM=wAz>uuUsh~tyv
zxICJG?UUDxYqpio0b$>S-fo|uzv-~|qmrb?S*g)-j+Aytqq`1?`t<x({at1!UQrCW
zxXm~d0hcvXLXmthYdLX_{<f~={Ev1-QXTYH^sh>POGn<l!lJi>Y_aH!C~L>#P!MiD
zd&br|MxCUTsSzhBc;v{B!WU~5u{YSik36HkHx0X?U267y31l#t{*gbE`L6i54CmS^
z7;vpyAF%?v;XL*q_EY)1;Sy*R1MQB5LPm<!hSddX-}N07tCdlLa(L(fhHsyk`Nw!t
zg>M3xn21LsC##(%f6r~FFoRLXZ=O5y^w(dfzHx5GWCs1Ur|16WjrYFAC&NY()6lD*
zBYni6;O$&@{e!7<7e4E=(&(L{YMBqE%MrUQ0Z+?moEX2~c1hwHAfY#o7|H8wbS2@D
z(Y)o;o}x(c%LOjG*-v~^`MfBuvzo&1Z|rQ)=hJyBhSsbX3&@$YD#HkI-fnD$-JGV?
zs0;=n<-vdG&%LS%v|Rmx2Sm@P!t&N3W8mc`zr)D>VoR)TdOgF==ewEo##R@H+TsUa
z%gYRu(}nGecn(GQUgcDRtWm)=aKo?U_fK+@9|!qR_or1s@ibhe(vcW<Jd+6M`)|P!
zggxh@ULuqBD@_~TsR!R^FU1hr{EY&w;GHRqMV|8h8nk<H_;@=>$^MZz#l@<p%#ivm
z_|YXPt|-Hg9C1e+c^ZXE(On=eS_Rn3z-1H=5Zmr#Y4CEv2R>A+dGB5|k$H(rDf<lx
zR4<rB!EoF@_iV*t_*T0sanZ00Cs{E7ij{rm(wytgw~T&|SK478$}|bWmnVb0jgQgE
zDOLU{Zlu*O-(%-CNhfIojQ>k6zxvv7`rN$RX&aRaWUoG;-@(CMAUu-hms)r$^T67-
zuLE1@qBg(i%x(t5bYCGyRKIWXAgtA_zvOp@ji?=uUHi-YkshSmgL9?{Sg_}72e_4_
zf)m74k<W9!QOb*xaq%rAM3!MQyu~<{9>8-o>wK3&;-w}PfeRP8^R6FM#LPs8UDl7}
zmTuaEJBPI5h3Q|7gyK?mlUuG-2!drKT2o=ixNqZ6u8PTqpTJGmVe0>80qhGu^LbwJ
z-+=(`dB=^&gplws1m~jIzKGE<vuqKsa|rHzS=&Q2tI&<_2~~`!`R*x_^Oo`I^F`tF
z&Qsh;cH4Eg2gTbE)Zu6xHki`np=fHL&05zHG`P4{wVAR9o*(U-MrAhWFv&rJGbfv*
z>AA|Z$p$KgaGEg$&5zIFoE9WaxeXsaQ?Q>tF7ht5IZBJAcQ^=d^eb4>s1*O;a~#q8
zf>pRXo<;G$Bw`N^*?QP-Z|IoBv1wceRx<UrnoU>kRm&TS&Rl+BzU&iCFdKj>#jCB2
zDuu>$BqGmUmSQO^iAcim9+cn~qO_OEb{s(K@BcaNUJ$L}gF6<le{QK?R>xo=oBAeR
z<r}{z?(B)sdKlVPAstYLkItH7^mr?*lWT1^nU-NXe1`>oyywBNZM`0tH)*f-nHFb9
zEm_#-cL0-eoY?+UOUI5B#dqneam>nnhW8D~E1mw4l|~(3Akv37{{0cuPtHJ&`Dx!7
z0z>ay+p^uqZT<Y$cD}|hMAfl7oZobc;Yh$sv(ZOMN>UA0zG}o-bMF}w94=`<9(oLL
zDF~2!4dBU!hZLw+Ql<*}l2FM+MP<Ew8@UlHr_l0?I|Ui{WnlL%pF0q;E97$a7<Voc
zKNlh=R`=Wo(Gv?JM8Wfx77|M(djpj=ku5=5Bo2#OnunQ?_E+tPGm?169TpW_P_|A^
z)k=!k?F#xW7=6h3-0rgJH$gC=z861Xv0O|QzOh4R^P#kkP^DFZQpodC?90PgdswdQ
z7%qceHT*dq1D#pZPaO*WHunLGPb=;+VD~(<E*GVB8;X<WIXz%9dVc%w`nZ)L2vugN
zU66OOQjb~4|BfKZhO28k@*`A+m5L;rer>k{Uk)vR^*g92G3g~%K4e`OhlQbrN_kVp
zd#mvergHb8Jani^r%`MBSze8Au?Ig2xgXxW0%xLyf0;%d4uzQZuO*d#5~kjM=gk^f
z7hjZ7AR4WHXKp)%TT<n-{<^7Iy6^PNIZnVprgoEug4Rmqy4K1thM;G5wjH<_J)WP0
z!IApIaT&V5VXWA?tut?>LHF-rd>T3m%@vK0jBw3rabad~&0t*W^U0tep!?Yn4AiP!
zc}aYZI|5$g!g<ao9Hhi%<_1d5w96XpXcF4eGm2pwS+>*rpZxZ+m;Lj{&IZ@9yp={j
zPddZCik`h0VX@}=GkqJYDG%w*K#6_cReWxD998?FFSHozjee6<H$G)Ch+P~k62?~d
z%slY{5(4iC^zUu%QU+^nhS%_`8_nufPLVgtS2sY%Mrit}oI%rE%#YfobV>9XK;OeB
zsEq1ryq^}Fk)v&r#5+xJ;yWFXL~o}<!er2wE%%1GT}DuETg3yNu4mK9U#{Qts!DSe
z>*_1zFgV)(FGYLj1}NI7WWtK5*5xn?n>K&zs&#6fo-6CAf7UvTvi^}$315#d%Gr9$
zQ>EF%#OH7qgUNs}zLfNHJdyf$wodIM19mh0^y`mDRU$1fmv&EKC{_M{S%Vg|eZ|jc
zWhnvX6MW1D)h$h16LB;5!n`&BnCu$0(T;m<ZmrMftcI8fFreWrYXBhBMWz>Op)n7e
zacXzKIDF)a3$i&caUzX;VXys#fSn3}`rGqC&)T|T>B`s)@71O7yYtn@DS_e*uUc^|
z>?g_dNq0(7o<%Ol0que19YLGt6?R$5C=QZE<hAf)(<vBHM2$y3%4oPS8EAyu>{mZa
z+qfa|ch|ES^#8D2s`*+M11spOLoVDzZ$rJ9OHWwvbGA&KlhQ@5w9!`WWk^I)!dLX<
zUFX~IGu)tO5$B6~2Aj+Cym-fhUaWA)NxMJ34BFqob`jnx&qw5uEDoaD6kB$tYr66G
zA@$67#tT8NY9~r8heP}FjSX43Vw8a<iu?#l%ReKeYyFtAJN<z=n)aJ9O!X^1g*+}V
zSEaV<L(J`HDbOKnc8A!`7fVdT5F32L<`0s{Cvsf>+uWfS$ILz~<83qBzHBK?W-?Md
z3e~?wrj{AeQF|S{z+0jT&wa@Ia=Z7TQR_L*htoIaw%zL%@))WZ=cCgfhH)}kKki@v
z_tAJKY}R9E-k5|-nD)(Po0VMNt#6@`0PXx`9=UK`N|V5am|P`E%khC+OZmR2UY2Vw
zK|_Hd@H9(-BQm>5cP#tb54l(|6QgNc!D??O)V)9Ow<t-tNy%z)%y6EvT5+vRf!%TV
zF0qBay)Tb|?wg~xinYP$xIN_wv~ula3hW$Q92J9-S1<djltxqeB-+?fhh9BB?Qe!{
zM2l0tFt9+CfGgFp?3~0ymWOPghty&#1$#?N=6-~=WhWbf>;Em(G;11(gsT<D`{&JB
zuiel*B>}%9*@B1GD|`aF1T2JWJNz3=7D$K;U+}=YZ><aS>?4PFNs$BsZiQPvae4r8
z^`$#l2Jx}pLt>z}i8d;_#_E`3snZ?dxD`XJ<bklacs!LhEM5#M&EF6KX}({hA>+2!
zSitQzJpP;a<3UK3lRmg(^R;RAyK^FjQtU!NWXNYgT9786qax5HKjCnEYJFb$f>fJ4
zY<w-UYqNw1<STUfawl2&eKdyz5*ih}@@1AY!>RmX2JFY?;l>D)k19EFq%&!VZAo8V
zCh}4m2)WBYj1d%tlB<-jeqE-KlM)rQ+hOo$`$k{hYeB$XMa<WXmj8<PwZ@)<+FsH)
z4{<^*k?c=y7|rGw@c>pqaBds`wjNUT92rI!TM;x^<d@Q%Re0*v`X#;6@eyz=`*fSw
z@nVby9clVTH`^EV`a<ryL5|Vs)f$Otp%^#@gmt*ikD*F4n%D_l#u>%8oOH&^O5~ef
z{q^6{{ib`>F-kXU%*M^NI0Sy#yrFtH3ybI4mHC$b-We8I)7}ev=G)h|o4u348(P2g
zmhD#CBBcKQT6gy7B*!P)aJjzL!yVj+@uj!>Pw9T<yhieMmCKpXscs-ixYgYj^}a&{
z=h7q{y`#nJQERG?SwY3iIUzoqI;_(`r8T2g+IU>cI&RrcUtulc{z6*a0M8W~?BwLA
zuT$nzV8d)$s`_VW-WV$DdVju#(|lK0!JjB?bA_=y^)8#*Bv(4;&71bDAkH@zlJ-Ke
zL^B4&vB{aP1(QNuR)&?37<~_hem;yuuR8nBq+x8P-Ni6zn+@KA$_8@oD%bW7(I$Ee
zry!UuN2mG&gG$Z|XokK59=hk-Sg~f`i?pV0&dIF&*2h!F+QcAz#zD!tpe0QtT&8>F
zJCgn?$6B*Wd3Uk}JD@y&_xp{l(_q!vOSQgWSl>`I88YCH`MxJtG8XRdcyY~kw9t~|
zMQi^_SCkyJ^s>;$eZ26b?l?@N=UXOkA<(^%4U?_X_C&^f>-gc2vy0lfy@nuIq)Sb1
z@0V=$m$Bw`e9_<Qb0b%$ihaj6?fLul9P95=X;#L;CAkRFZ7ogc+!mbElw|VZ8Bo-2
zf?<Jk_{gQ@bYi|RR)`wH84v|y**{~cQvaEqk4aev3QCO3NITUuIxoV9FN?od-47zH
zwphese}gthz!{1pnEi5hsLwe~+{|-GwmV0zY>XjMm@qUtlabz^tFA0*EHc_#>8JOq
z(kP6=%g^izvnK+Sp>KXOlqHYhn5GB&%&iiKSgx(D%Y+<nw=a6ZB5zh$Dn{X!OzopP
z+^G<O+C=ERn^pLro!xxfO;po47*Xxv6Lqfmb)QrSZ5qjwn6o^I#G^{6CLeqUR*EJ3
z>rgPHXQel6&QmFK#r`zA3Wr`F)8O!F9eG$z7ni~o(guF8qhf;4HWfB8HJT2@fZH*V
z8-P&j&)B2}79G19LZiKra$c&RW*ZBe@s)9LJz&9+bkI=8Cj$wpxTACjd`v{Bu*kgo
zx)J=?C0_Cp*bJApzPIPi#gLL5(+&9et>~Y=@vP`Blpc3m@jv=@X!10ExE^zM6MXsf
z>%j^;V@Wjd{CL$ro=)6DHD_XN?rY8zZ)!S7yl<qGEc|3SQAawY@q_YbxuR)KoLKYq
zKO;x9?ZUMA*WY**XTtY!q!YP)`*QzirS$w`)ZJF68un60lI;1sszgMFsyo*3TEBgo
z57)UcJQ_6ohqH{5mTd%=S0=JFDnB$k(#C8{lhKb?84*b94|s8Y7cjEt&WXZcF+@%G
z2O}_LUE*d0ek1qV{PsD4jLd6lZ|nb|>Mg^93fi@8>29REyOEG?6eJ|2yQDj$ySuvu
zM7mqL1?ldTP9?s<=h^$)?=L;nLsrdNGjpH!dC^Y~w=H|DXNriYWEVRRBWRZJ*f1-_
zFIu6zd>`shSasW8>4<=eOeBbnTu6`7S(~O*H0%$z)-JdBK2xr(LO+<~FVM?4sFNhJ
zLC%e)+2s1f3F7{22iS0zJI}k)^EgULWV7Bt(Tr(QHw1wv8kg9+v9!1lWk3;I_akn&
zL(mPyt^MAIoLKQ-Hw4Ug*;k5_6pC&l8^THwB7d35AOTL&to;1Tf^+jHlpcl&o3}+M
zt>SnVU-SUl36ebq;|J{nIap84P6v!XP8NP(XNJN7n<p}-T7^Fp8u8H~tqDK36~$!7
z3Chqc19GL@=p(ztl*y>SnL>{K;zRvr!N@da%kpyjmyd5QW)8V9DF?4`NL++wFsMuc
z$n{k=_pBlPNS!6r-{^m_gN<*(Dq4!GWjy+5q|1~nJO<uKl-7I9xKyq+yQ7pmf81v2
zs6}o01{b`C<M2u+Gr_i%;XaBT*jBt?$WB(akz|rbz;?v)%Ye-uEE<WGd}t1d&I-E1
zuN^iOJGxzN(rK}S1)a0faq&CU9Y{RX0w_8BHgvO0darEk0Oo;28%=@<HKu(J_TI}^
z3OVLPb3xQRC<E2S(sn+Rw9P?jiRDfPg|LLe){8b%XtEjhXy3V=PAA%Ml-51t(FOXC
z3PG8eUJja3DavS@)9<F&A61r9QTd7C<}Z94@aM_I`@mjrC~(%#k?o+kWAK6F(^m=9
zy2DAWUqNyL2qj!IBDqBEcQV?f_mAtYf!&R=U{-cjsvAbY-O}qqkvE2gon5iq<RP0N
zlBXQI24N%B9L-7A;wQ4fZ)VLWKt9Ewr|lU{isPSUQ}8g}O#2=pe#a?@YdNxa%x$;O
zCVzXm%Cg$#9#&c2w&tzjCH^EH>TpnKAVfmZuzEk&hBmL)Mt6+X*Qb=bNAH{MIJ!hR
z@EQ)O`x7E+`pBpV5O^9Ebh(wqHxhMtKEsWQ@4JV(PX6=I_kYJBDWGMZOp=<eJXk8?
zdvp5sFP5Je_qW+5YWz~#1JvQCnc)!(BVIP^CZA^^ASsIi`AGSo-`Q_ynC0{kgHA>H
z66YNai9b6FmeJw=U4dklEFZ0Oxa-*DaxcHL(%@>keYl=mGoG-JHymxFjUjob0UOUz
z9Ckz8X$D}A2AcQfIXj}{x1(Y4R0+J9m6=Rxxm5+}4F?R$R<M5D^3Yi&_{J5V<+<#d
zs$CV*FG?6W>FcBLIUCN0<+MiF+6JP8zC-Uaa|SQrUBNOXaUz+1h`pmE(r-gu_!V1Z
zoQiq8_9F<(B9VG%xtEQni+LzxVqYG5HsQL6V1Vo3F}rCReaAG~`RV_1BX+slS>ZUV
zlg2W;H2JlJGRcM&*^b`Or2-&8m<R-HM8aeE`{bdTUs~90Z2X36dpt~>Fd*k`pI8}K
z(VF81nL@bPTk1IoL!)@oT+y^qBvcM#phS+3fGyZZ^x6-+NX3y8U2XLW+$w+JvD>qR
zCo`2ai*6@fP+u1PDEgbzw<4p!!Cxh<MLvL^m^s&}&Ju@ZF=d7WS!8!(yg%zxNGBol
zYicDH8c{+1`oiclGXq)q>;<-RO5q4tD4*T^ghJk5l}e<BEkb=wx2%FQ9)}E?ieGQ0
z7)SYuxSv0y&FsWZ&N1ZlqHkF!{uB}3VW4)*YcNAnsnpejTpZWzc+KaC+m-p%D6p`E
zVg39E9C)#EZ2{N-%tD~b3b=h}{S3cdBq=>oo7;USSH}L086O57Ny!8?9jY5S>xtye
z3n`N_wdbl%xg4X>OcNwi{q8biLw$}_nT6qciJAPO^=;l+3Pq-@mlyD%HnRX8x{3n9
zm>Z1;bhs`b^6YoogNEYg&+fArM)S!Y_thyUtC9;fCQ2nAh_Cj4QdTX%9Q*|zP}}b1
zs-wX9&ux+k#+0^ZDu@nX|8@w`L7hg?-^oBRZ2<<N98fF5V*jX>$WqL0su&xEZ*Q-Y
z$;7eRVe?HwbZa)Msha)$jAh^c;v5I{Yq}2SBb+y%=Y8!qyd`kaPOv9;6QB_h0wXmY
zyKYyBl}wO{*fq6D(&`E`6mkR-Ke~z=dKDE8DZlHznR;FJH%==3<LCiBg1qfU-qH}D
z)`MbmwPK&O++?1Vi5uNkNXTKYu$`%}U~fJ%LX_e2MDPTj1qKl+tYS*slCB2-a3gQa
ziWI6*iP+y6XhKB}Os29xJYN~xh|~K8NoC=7M3Ch2(AXUmqH%sdkt2j35I_izoor>z
z=dnX7?14_4J}3169Y$qmw(8#}dOb3Q;%UEeOm83Mb-xLwV>rF5#9CF4XVm15SHo!L
z5B!GKDCWp;D$-U@A3%k1=P1arBoNR2`3A*sAS`6=yKWDqEjjW{It{Ijij<N(H{kL3
zN`D^Zj2$Ht=Dg45K(S0>z3UXupO?vI$m(6(uvYOv{J;#^H}#)wjy&3^H`2NLNk(Du
zztX+yb~V8+ywzdBZN>NRtbkka1#Up2E?)@IIFs1zJn3Avd8*faRH^PJbX$A>d7n7J
zG*c-08*3`1?UU(a_&ESTI1q_cH*#|_8ILx|h68jsp;^n%S+m*_=Bs3TJKZCtNOXwx
zG57bYB2z^W7LqveL(_eKx;nrD@swLC&b6kO7G+Ny)`8!^G>2pt+fg)+>I$uiPm&la
zP%4}V#wukZg*zD<5i5*}=4ou|;cmSBZDTBz`@8ckZmJd?@24vzcswhR8ht(d^RM7*
zPvpoCI}})#Mfou&lE~O{hC6Gv!YZ7rW?!OI>m<YW0V|fy{uyQU(?mR5mE`@fP|081
z?=~jO9M6>s$Bg|<1xHD0&yy?RK42kx8Qh2y%X^*!W+lmWYw7kl=p+p?1=sz|M<;Z$
zjr1SDUQqH?1oec#mp>|-d2ViQFT%p)Hp5%9(J_UxN4Hl}t{%Ydc+{aB`z-P+*?H+X
zR}pO4X3&I-An-G(eh{Vv7ck%VBRuqL$Vy`}7}X3_p=i-{U_mL>tfc|V-hgIDAMMLs
zxuLiW1v5)m5ob*f+cHu}>fAk@$J6CVb@~Ip9_nF=k8jW_bUAR@pCXyN=b#e6D}mnu
znGil;veava04@&#O*(R;Yn1)@G`{rvr+S7LWC?6w!I;dx+1VMqxA+J{{1C4k`xi!_
zj(!jYIy@jGi-85399?jV^=?P_lk=-zkVN4gLU`$imaxifB8A~~5Pl;mtP!A{9+R34
zBwG?XR6R3VTF>;~Egx*<Pw5|rPsWo7HHG}nm|Z`~%E*`as$Jk$N&@-cBMULzDWBzq
zM{xsHb~w}MgZ7uKKS13;gK2_fo%u6q*F1?y+Q@X=<@8VM+9H7>vS<AI$wD$(zx<3R
zD8THXws=b0*RtT1GaD(jV>w`)iRT6`o0cW>K|v<)<2VFcmhuOpL%aR>(C%?P`CU&K
z$Pvdaw2C6NN`9xKE3r#|76NsC4Dmh-!i`Y&&)@rj;YiES24vU4gPfsib#~KB)k{td
zeKhW%mWzj9hlRkCL<WM3_kn+@^gw)OGFKXKAJAWB8KeP3AwsTC3QZ%IN+$Y%!=yn5
z@tDa+zcriYIdFZn3%{inWiUrdJH8AFhM8xB53mB7uXP9l1|tRtapr63#@c2coOrkM
z%0$$2a-QA-mGf^rUOO^Wz%!NoQR04M4rrTqlbc^1UO=hiND%<zytp>QTmb+|@HPeK
z?$}}(ARkq<kT+_#U)euTtbTOIg7Azn@GNKp3M($lUot9j0k9}FuJ+y+>X*}bb|J$(
z+F!i?oYn#5)JqN{i-CCXFvK2Ylp1t6l2d$HJ~*RSnf%U(;ChIF<L$;0P69|0f*+`1
zgNisI%L)}iVI-10NCZo<2`Ot6>%xJ?Ln{LEuZu&VczXd4wQ7`3=>Ux5BIRrI63_^%
zbEcvUKkpB~j~6WCg|p(t_5<`rK2V{hzOhb^r30{(7y%^kQNGyYbXqh48**^+F$s+V
zdS4gxR;_&l)lV3uN(RCgJf;+VzR{MH-}NLifmQ)lHJKqtF&O;cVwxf4yA06U2oTx(
z&ij)P9UUDn=A=>u@WTTopn=9H3@|XwPSY-@tIUYl<LcnN^6(*G`D}r>taqOP9JzV0
zSiKJUdLn#NYwHWaAd@51{&7}8b-4M3dUCvtDa#Tg`$bXZc5WCJ|3UT&0F>g)sAU^@
zP%og@2H5&wS<%3x%g)Yz36Fl?D6XnYj*boA=JTv;6S_rz3y2aWP;<&1RNKjWq0Jy5
z1u`S>IcWfsgazIFl}U^c5Gx4Qf|ZNq=ynd!ZXPSZMz<j6;qIOXl5{`l8mS8YW2b=4
z1bAOC?;`!#;V|it3*EsZtX~nt@QHj~8=gt4L2enwa;7W@B;-(ln#Q=Qs48KQ2%Utl
zUrwv@Q80*03+b6Hr-8$H!5VQyuRFj!M>mE)^VkHds5~$X9mX=>0kqElm2F}R@XWmD
zNr8R`Zod8AIPrgOI$0@(+vA`5&$9sh2>=1td4S#%)d?I{0E|@?Cd6w04?bC#(szgu
zR_NfuahrcNdx7y<$-34PfEz&^T!UU6=|28yq)~>Cv{Eml>xHGonqylpixaT`)P>Dj
z2l3gDLxg{aU9IGHDGdT_w_CPAf<TZMwo1Zl$Z<arAWDe?YzAN5M_F=xlo!|smifBk
z<zx!s+01uA5aasq-zclviU7_d8`Co>Mz?zn-4xg2cAj6ZqF$R#rHEI%4-9H7E2ygO
zLB8!6ctDTkb@>u0$BsuK9sT)~LiGvYYQDnI4K^zbHqO8aq&`mvT_N@l{A!#i!=3p7
z&JiQ^S9NSXK*hxAAi;{XD-?s0&3;pYodgVLLNTqf^dj^sWQbL0a1UWdNL;2$WO9L$
z4;gsAoTdoMECDD8=Lb+&0}wK+(d<yvRLNo90<Imn)#&p8o@yXgvMKZvS8BIL1z6Y0
zMu>=o`rA%1IdXkmXc`tlc*)#(m`^FgiH(?SY{!61q*fCHR6PcGo>MFX%D};rz#9+7
zLhMcCG)m8+j(o(RLk;-!8rvV8*ZB}T7>zU<G}{+|p<xb8qVSekmf>Pu)$p+*?)Oi^
zZpJd(^Zu$9d60fad#B_cg?a#{WAIo)AON5Y?S7zsMGq*YcD<?wPe;PK`xTF>Xsds<
zxXRBDAtE3a+#V!;m6WG&zozi(8CwHhtqON}!E*5AzXBsThltJY31C=C81$AZbkLtg
z0A~5dw^+9t4?LC{$Vnb-bl~B6r<l9%;m(HB1Kz&u?ia>fpXbrR7ZT2v5P?~?St>X=
z8@0oQUu>bI-~Q~{)|`F;V{2ZuYWunjJmt7z^}sG_K2!FZLLzjXVMhI01s<C5Wr(TW
ziF<8;U(a=pwNX^S(7q07w{ire&S)kd7En+@6=Z_8V}g^DlN*-VgNwcXkIhp2I*oy;
zh<uhhs$0Ch$oM6nLks$=KfYO&D~cu&45$BCtp6hz1u(%u(B>cFD1y#WBtN%&ifPgP
zq7yd{e#B7}r+QhnID8_A)n30I!3Avx*^CAShn8^AiGId#idjq}z{G3t^l+cbV@rZZ
zmE2FV^MFAq<y4c-U&(K|b--I8ZX_H1NqvSFHL765-rD6CuZwnse*;y^)tSgk*f-s$
zIywPCL8W3j{8D%PI^Oc-2a5Hw%PHM|9RT=Z(8up`1<u+7eu{f+91j`YJw3h!y@Cj;
zR@@R>YFRLkph!*erMMzAXYwJe4xk#&79+4pcKQ=8fe3_ZBnX6WnBuA4hk;@qxw`IN
z6UOdOalK3-Z|EXM6}ab4K%mh54=AE(O`!fGn)#^e?>sk^T;{JGsp@i;UKThfHkH&8
z&>zm!4bs&Wo9qnOPk>IE6q(z;gCfcA$m<JcyybSOvue~<ESF{Gcjjn<f$=$qBg-p*
zCl~^h%0cEF0Kkdn?Beu9-vSf`tzjT5`B?+fUs`EL;N;Ecrx%k%$nE2(G#OqnH6Vy&
z9M2ShognZrn2nboJc&cAXTX-IeY2wYQeba4JaF8FPaIuv%yVBlxqw#~96&jZ*oiRh
z*}M4oRm-mAh03{FC(&sAAq}6HPeQ-3i-WS%&PpDxrSf&PM1fR^%M9_QYj+7XTOInH
zoohM+DTo|RF2_}`(C`C+vw0wbvQ(>)1-!ZPC)q_stOaK5z?V9j!)}JR!Hl)6jhH)H
z9CHc?4!3K;=S#VSUsFrlSr?Z3rTa1&ZFI7#q&{4PuWHYBG<!4XNS!rLv3hD>*buWP
zB*yn`V`YJQNpX|+4(7#chUl9W*e*c}#6(cZR<(5Rsda~=JoI$65v8~-oNut_HkCi`
z$*JDdzq?x)jAInul_w419@*PkYCL^`gkIRPAtTto?kBU?jBbB#xIw=fgFA~J@5k`9
zNbmn)0YYJt^VEe=J-|lMsZOf{#!iHB_mCAUI=iy5cDoY^;GhCdSC$5|I^qAI6358I
z70BRE(;^Rmx<@RNq~-R1O2<-wHdOlRhRUSTJ}qN+w)URqL^=@OXMgwh{D)^G@v6EC
zmD2L^q~khX;kyiodPeM?1Zgxy5PRcvB8V;NP%N?lf&dyt*i|ZY6%IwI#~b9!tN*u<
z-0oqOl+dWpzW<ngZ?!S8w$|#1_1IG1b6FCj1iDnUJKS*EVWULr_Swfai@9gCLF<Xv
z0{p!KNE%o7s>YuSocpF$t|o8uEALQ(+8TP)THx#W-&4Rc;m}0Np9y+9k+K{1iva|1
z>8itH=o-WBS4$Z@_CU;Qk~_9Xkaq0H@Q~xv!T(6GQEE>_N0xPF!p)jh^-)YQ>E*Uc
z{HGlZ)>OfY-LEIc?R@zwyZx*Kz%=loJQ^gwI;bjr`(TvF5{qHNpeCL435DHxnN7fZ
zpRtlQp$!&cL%Gb0dz)1oviagQj(E-iD2AIWmm^!w+6FtQT8?yP{J(WQ8RU4R;tBRn
zbymIHwJL;ov=PvlCD?L<U#ZziaGmZC{jMca^JkL@t^3}>^gt?y3mu7IQ%I1N3t$c#
z^Y6@mR=$0g_%+Z1OKN@RvLuz?hj}pn`tTRBcw2D<#B_r!3O0ipVgW6y2q4PV9q$qH
zr6S1hFV@U#I&fU6+aF}^GWqSH1^>kO-#+Q!aW}!;{8{eWy=G+d95x@-ZGZtLT2e%l
z_u)g1Y6ic<VNx6Pv$og1n&<$YM4+Yq8XE=?0oiJp&+ZUajVb;5<Nd?q54c;dbJ{eO
zMr91+i6l~hc6I%#7O(RBOLInyso=45^yMwMp{Sy3Vj1ZUH^-WvS6W^Je7+lKzLoOC
zU{uOf5P&+pmcDcHCY}!}<<ero|3J9;2qy4n{QY#5!}({g`v(}-Y(df4O!vtbcF;kA
zhT%=X``l(PrY|2@W8Uvg<QkqIhn@{Q4>X36Y$;$f{lWD>y%KA(+kmnRUU?qBb~<0C
zFIDYqZnAe6^LRXjiPrVnHWP0)A2&umS%CoUh+;FJvR%HbE8?t|I?pV;v4nM1FXKKR
zVZHma!@1e75NPu#HAp_%cUkf?Pm}prz@d+(>0Z9`VSPklJBV_{-%O6k5A<N+Ta#!J
zT&zFo{9;f?hx@R`{?{XU`{&thH&Q4uPX}`!^dDmBs4WroUqc*hqa$6h#<sehy}$|^
zJgBssS>as9-yP*!KK>rSMK6tE*7~<~I9UHfWCqIoA1bBmcAWXYK+X?f<n&i(%`pN{
z4(489@DXS~t+v?_BND12e5rU%ne5M}<xjCWk8RK&wl><vQK)_*=UU_`4+C9=;Y(2m
zj#P4W@QJg;o>sFlh`0oAmkU#AW}SimVlZA1SB*I>;B|zV5rBR#;Fn@~K8j_w{UHKR
zJ!KE6Pp)-}_eCRkEa4Z7qD2+}3uEKWNgLA-<R2T{CV6=D!0sVQal3uS*R~degl3eR
z+5U(FQ`2O$7M213_wVV&bL5woRz>s|KB~Tjh{2<7*yrXdj^?SJuui0Jldn*_7#uOY
zlBD?Yf9iWSrE>PJGeNvf!uruH&tSFzB0_mwPL_c_&Sh{Jm?P^RUZjIRXYB7UKx61e
zf0gb|{=Cb2TLmSTcYE+n@_n=2^#^iq6c)eTuG$xj>)kbnyZy#0+!m$w$Oz6ba^+Aq
zGe4~7+E2xISi+gHOOZb$A$I`uh{tXaO-GLsCUG8RmD0DPf<d>qvReT?EV&jV7JPo@
zAO6#wlV*KCD5S~ZzHJ2_Te=yB5t4d71-<0^t38tfhqTzYUj#Bc|E`w(nTpQj_r@a;
zJnPGt`yR_B$pE&<kzm3fsNb~F-&dqm7fqy<Ys_N*JfE2Res}Hjt{lu-$pPhy$L7GX
z*{5KvnvuD)5sNu7sruXH|9w=L%zqqG<GrnjY4S^~)F8IzzkMy9g>*d3ylOhfMDQl$
z=2T(=RbH{&o6~(R5pM(5_wY3XyPKtKz4XjtHUuW!3#SOYnUX*ARE44Z;sFd>u!N@L
z>)~n{T%tgNV6n+vi2DK*_t%qG3$=c!EKvP1yuWA$z5mqH`*DqvHu^~-*X!@CUZE_y
zZlqI#IBTa&Tz)Pnl^!p(qu_IxhzAt^RxCC|5hf)0k?;BYyi<QtBmRSm=Su}^bD&TG
zTM0h#b%d#w4(e8kdD8a~pBik7LS&m^WO}po`T3?jDx8V5GOdnPxCvEUL$iCbrE(I`
z&C~_(D!cVA2p|$B9f%>7j-!xNtk7V`X4NGEAu4t1Kl3QoeBl#eIBCg5^QpwHXcW?<
zWK3H`Iphh2kt6ox#jo(#mA<)9{<57?TfX0S7~~GONt9EWbw6DS^8$hodju-Y_g@c3
zWea*G*`-e&@>R&I^$+>ytK8v6vjqsY%vcg0STY5}0L}-$P`>v^8YbKae2E*Zm30=U
z+t*~sU16`xBLISpAUa;tT*>x(sa`cS+irt$(AD5?vU6&?Q!U-jl{WX-4v%fWTZJw^
zE{JWH(3waU+ion?!+61C)34G3xoDfkQ<UQUok&eQ&L8L*UQdK2T1;(xcTf!y0fqA2
z0#zZO??J+^1LeRN>^U^Kj1vGKcSaS+9N{k#1<6^X$)`S3yp}rkw0;){TW|m|fdJfW
zU&W9vW=6$Cto`7}+*11r<kPj+UeT46PUkxYaA<^}o=GZj*p3Du(K#w$^1AK;rJgP=
zYzEcuF&_lsA{b;RP!?4D#OAaX2>_**ERL_W;y>2>({juildjQ58)^n-pzW4ieD@fS
z(>ZP)dbgi$r3h^C(+y_=Lf+`4&fek7z{VzxL2<O1d&%l2m^wG8KL#-BX(3>HLpc;h
z1;i!nh8ac}eSRF4#G5LijMn=SyylIx72-8(mE#k?h(jckJF3%xl2+?Jc$6dTBUS*`
zbky%u<n)?WlbHe@v;GZ~JrfZY0ZWDQn>uZ(&nwfP<Z|uU3(mXxjsbUtCtTBscb8=O
zOPX+^Y~FLTm`P1w;cb;`D_$wrXH-2mvTj8bi|yPKH&8Re+bM=dOu_&>azB8X*KxS{
zJ)A!y-Wt<W4OaNT437YP*AwE$#s(A&=Kh@hd81g<M{{2gngKBPkxjWIIF!WN60cs9
zf!J&z?@(c*0m&jvzR5CiTl?Pz>1>v-PS#qjsTAp;N{m--Pnh`@1OStZ{?6lGsU4Hs
z(n;y;_>X6SSE&n8M<k&->ti9Hh-v_3cD&di8cF@`s@V^8n`-e?)U^;16n)x>u!@0w
zqE{~ZQRST#g=rq`H!8bQ*vV7zsX|MLhxXHuD(<HKGbWrpj2m%&Obi<6b_xce;_E<8
zI+(%33Od7LKqz-U$aeI*X-3;*XmxS{<zVdsyty#KELkJijq@LW#ZGMgf1KH*c7Cz8
z3>_H(vl$5k9h6teH5~U?83-B2ZR49WW|?_fp!=h-^fr~84>*ZHXEyq4;-RR9tiONU
zPXG;y_p6o}l+_qDNZ+=RQo=bUb<KXN3~}0O_1dUFrvu<=lB?TW=(!FTd8<K>VXbjI
z-b^cc1@2~uOkR)N3epPNByTFsn(e^=UE+*&K*-k&O@Abar<)szIdW*F;bt>iP`g`g
zjrzcRXt;4mTq9~K_f_8W1Eop&6<spp>y~R`KM29a^~p3(OwZt>wIU=lW9yO;dIW5%
zk^84L*Rcz%XI7F_p9g&D2)u;RlKePJ2~6mRS!7~P@y3TWAGF(PZ7}DwQ~+|M>Cf~=
z@O(YqyBnk1?BZ3R3uh80sIsRH4U<-u297-utV6WlA0uz}d3#+RQme6M(01DX>?i>w
zj5jN7Bta;C#O#Q?*YAuOv7wqIFb_1-;W38t6H`SR8Ux7MP$Ms!O}B?**s$uiX78&>
z5;-D48ErR!7y1k7q=SAE56oM6+sJrhhE(RSqvyz)4*KS6(Qen9lD>{3BDwRM*@W0g
zbp`$Qioa&kF4(9Q`L7B5o2LiJ4SNUo`Ruq5ahR!9sWpG+_)=+(jQ#kNMH~A@+|)hV
z60@wP8P&ylx(n@ol=q9SxaY=ISb<E2P%Tm5h24~}tWK+!=*pe12URV2`8nq?x4ZO-
zRjhc+9rp7HSohe0IUN4$@)=3crWXi57jDwsWVj2jSq2#OfBhv$vTyZ!je8$B8+r}4
z8<W|I+tH5WUE-?>trB!ckp(Fdpx?=an(c!%GttW$%u->5o0`q@6QI7bC;tn4y!LS=
zfS~=-#%?*~wLKA!r<;H)6Nwd%5ko2{@w|a`uHJDa?4N%_KoLPYgZ8kV!l3sWwA;kZ
z6VwZ8<vZP5Vy*?8f7q|Nd|1Fzp-)2se>&JHpJOB!``?1xl${O5uv#T`Ny?||0)sNi
z+~sC>l>e3>?Vm;w$UowxCJl$lTcw0SC>R>)$24quaJeiR^3|7VQ_xNoPB6jRg4O-x
zw`ZA!E;(Wz6&Y%<Ls(OuqL(sz4MR(?zbq2#q*>(wM<VRu3$d~kTGI<&tZAAXL_;qv
zW1j`>J`55-`CV+@bC!=7wAKyNvKI#V>>OV2K(U$Kt8I_!ymBm#hLB~maUc=)%GK(~
zw%;g2s^-LhKRdevI#YRFPcmbv9{AiZr~rH%3feone*Ay}As%920sq>-khw}tfE3+N
zjADLo3Tpv+3MTl(V|DK&0^&VSLh#t)dkY_1-2iBW70E?83Xk8zLHSb6UK_|jU%}L!
z6_L!eC;hXZY>5gGxcCZqB?@?c;46gqQ~$7M%W>NmC_Ju3N3LT^ent9i3jZ|EsWuNl
zA2C5R?b*0Qi|lTY-MzwF53*f*O2X5Om_13JYZl${u!;ti|L-Y!scZ(5)sn<~eT9pG
zyvpYTr%67zBn%2}{1ftTW`Y0@8*FwNoyudB`I*S=mA*Bf%CULUgwV_nAK;guNaJZj
zKL0BMV_Ms=;xuBG>+(FLbX3-kfNhiS;-=^CS(7-`TUO*?w4a(bUu%@$Re};i)cdF7
zlz5>nP9zWIeB^uQ=E$BxliNvMreO@g;UKdK4Ra@N)}@BfeX}#z%Y6QzWR)HT%RvT(
zfBi2NXVg~P)dX|YeC~h@zJsTaZ|x87Fwzv{>bOaS&LpR2b({v^(ae*_GicaXQ%f0g
z{b|S?rbKe>3QG58EB3Oj`W#CCmj3S$MW@RY*7kgRP2{iRW7~E7)u`(B4yD;#G{Scq
zg8KK-+eX{m&qe7D7NR%W_q~1DVSzRD_sb=Yj=k?=;p+*wa2;||2$+_to=f(W`%ud9
zNn@>QaE8Y2$6Fk|&4%N}hdThU`p4NijDmUuLFotI<YFx%Y*c#q_SdQ0_eZc|iL+MA
zQk+lZNh=<KOxDK^LACllqhNWVH1u@#B*>S!P7>VvJNM^DN&1C?FGecgX3$a6>*u0s
zOQnsK7w|AQ@mmhtxTOEP!gl$$!iI@Dp^7w#XA#GVQ%56yi*&$gniS)h!vZqYyu}PG
z1|~EZ{E%5Q-%|Gu0`(mF+YbV5-q)BU?nnkzb6n@@yJFm)hZ=I}waRa7|69X7I~9H=
zv+dr@?*Qhp?@Ygf_vmcDt9InZvIBHK3Y>~8@~dIX>%$Vs+*kusrntVN8+i6En8bd8
zqp@ki?_ZHjeu#3I=}$B?x&IC?wK6}BFQV}i<6~R#aU(?Cs{g#ygb1gwmW0L7{&0tp
zo0kac%wCUsj1F$wxZEhR1O&&u3D3n!GBAi(InNIVSjiP@jL&b->6qpg9j=Cjy{~dv
zo^Z#rF*`3(ShIgn+KL{pRKqNx>0xpJIg4a2?`)gL?Fn%y18}+WgVcv`fKB=KBKWu!
z*#Y1EOS~DdF5`pj8%dBeMWofOsQXC-I{cZeMmvLdt=Z+8@QsqcUB-K=k2EpF6js#}
zNhQ2Hj`OAFTVWJB_Q|Z7LAR%?WNODvp(K|RuMn^+uYo@<98z-PdSboD@n)9r>uTfa
zTJNN_VtrE+;nbI0_mzu$1}>_~f&giSgfV6v*L|t(-aE=D%fzYWZG3I;(VZQMX-tY+
zrf#07{|dl)^O@?#%u-7XI(618teT9*?4;2IwO@2&N9yR1)M}Y-YANE^!007FKJ%kf
ztorl*TPJ@nt5mnmcd80Q4yrE`QzqWwu6iE7c*^UXCcE2!b18;JXeYic-Uxu>UnN;^
z5WPulIkT(P$TNQfEWzR(eZZ_!-Fo*nMgWEyDW2^cfm&QDkB7}5l_HRfMuIhr(RB7l
zLsB+--Ni$kioO1kKNe%oi?RaLdkB133TLcY!pz;b*SnCa`ZhoFN38wi1lY>->H`;=
zC1+y%L^Qd~!e>sJMXP(?S`xuY>SWQQfxR_L6wG5el_jODu?*~b_(9OGgW(X=z=(!=
zzmjVhgUe#~`|31Z{I=;c-({#3no-G%9CB0d-si)qKR^Xytl~%8&Vf@*)x0=tSdxTD
zx$lERn&rEe6ZZ3U{gbO|OfMZqAxc>?K{1!p@v)Z%8lXp9ym#m59r$|0T5Y_lB0Oxl
z*a7-^!j+ZFiCVS~;(iY)7vpHH&TPF5GUUM^=@$>@8}MBO90v;*va(FTuk{>TjpI_-
zdr`~Y^V(Mq20QfIz}(RHywYg}hbz}ll6O8dt@I9>p4E(ENc2a>OLcu`x=)HxxlQ+x
z>3+WYg+cO<$bM!N#n<zVcmPdd_Pg8c<cg`tNF5u)M$-;g7h7)=M`&fUrv|Ss1q~%-
zsiTCf;_G+zlfYs`A!A>+7mXwAn@{JX;+R{`HMiPNBAchBmk$&7BgU@@hc;o4D;aMR
z0XJVz!r21*eHTFSK)l@Ij0C#rq(KlCSj{08%B5j~s-#ppmqqLw>rW5o12NN7N&aYl
zU|C0R6oLoxAE9tBWr7M)NJhd4b@<(82(Y$7W4m<N94UGvL&+*pgCz|8X>GtB@sLG2
zc_`D+&l`Cw!~0^W8VIVP8uv#Bb^(BZmHHQS4@;<rQahFyu8ePCQc8?mpMtK*baurT
z>bp<@P~Y1w-;Gjo2KmQ(3GJG8WAGQXw7uPy2(VBbR@qE>splMK3cJ6jkeaM;J<0ZS
zvaXhjs}pDIgP{?&oDe=07w;-G!JTEy4dyKZpR`buzI@t|jv^7q^<f~u_YAJol2buA
zlPW5!Cp<_djn{E&+Ta5&)N>m2?DPa^H_*qa&XP4S80H8=n@!>{jU{ZbnPZrHb}E3u
zqTPmE<G#&_Nf&9>|LX2_*=(GEn@H{7(<t-V%GP2+j-;Yx_zUP9INk~<or6@!t(QRo
zLS2x?nmfQoxp3nd9(*EbH9m}v>vJq#2P!_Pw*8Ku->n#H9V0>%fl%?WOj50N54P{H
z>=<fE5p+?2{f@3QE!#+!H!~z8_lO6Wu}|+Q)5PYEy;nXV_~md*lL%YU4*a|dqudsW
zbGZoOq=lkVl-q)GSec_pySH9n&H>^}^aRjE{0mr^RA{K=%aX<^%dmg^k@j2w{WLHA
zRN%V<h{wRsnN8<WDdJUaa<VIdRMcq_&h_MSuZ&*Bdu`r|GMd7oL0*N*8QSt9JMXv!
zgTez8aM+&yTkbWSSbPH_9j#UIaV_H#d4$B+X^!8?c9*(Eg>Z-|bP;l(W7=a#yZ4T>
zp~-w9{$=C2?ptq!@I#ZM;~jvy;oS#w06V`03UQe0@uFI?9*TTDFZ*il0bm$yfi297
z%ZGbM0nZyb?`)wj;lPzn22u_~Nri=g`PmmJQz(@3CG1>Xaf8B?6EzmayDzmxpb=4Y
zvWYmP;F7GhjfzKgn5+3*Y?jF81{~#*SW+>p8i+9{OzwOuHCnvC)2*kv`Om*dQ9B>7
zX}#K_So}tf{wCLNE{Yj7NCvzEwW16<MZAC?>->W#h6ny>RnE_v&4|gyJ-})kDDu-$
z@Zs#K9em7o$YpP6zVR0*-WcP(aVhSt(9evqEV?w@%Klg*N*PvTacV&x|J6{S>aXp>
z_Cd2{!|9?Pk1*_{;DMt?C3&&v2Uh|HwX$EIL+cQFBHpV2TU_9)VkESr5GM?B1PLA#
zOjYnoW+C^uo@Io4ek{>^y0u+%IyXaRB4Jakm(4jIrWPn1uZYpT{{+!OTwl4U<<}#R
zZTqJj2;M$_!rM-@9Qd9i9N}-cQ2ZE*#pBoeMnBd)00|9B*TJZ7TECwymCGZxX}iPc
zc^tUFDxtQb*`pD898`+Yk1U-Dj#|jUtgOxRFF~JUQGaNdW1l3;f0jv9*|XYv%)!NT
zc!cnYev~Eq(HKy=5p%zBVB{yF<$=RjsMc{LQ6z6u5^Q8-GlFSXwcrvuk$VP%Vks<F
zlV%cQJPakxXi&_pkUV5OF1@0=btt=GsV9)1ZsO=Qn~DRyA}(JU7q8Dgjl?x>l4sks
z^n1Vj*QBv2vgUE4PS<nceqyfN{aShHaa(abQ25K5?&||TL>g4V%RWq9Q0!(Sz!TJp
z@}aHFHoKW^GYZQOMrA1<M|q(9IOeTdO!=H%Pf;$ppXrk+YV&31f$d?S?_5v)KCV&>
z?6e&(%B3XAG)xJW2JJKP_nQNze~Y=BJok#}l-vkxc;y>#0@igyWmRHh$wa$Jp$tSX
z{Cz0Xx=G^+srY1EVz1UGfO9I+7=8%jX_9OmO%{uWp&}Fobl)ZT34@m3x4<$%D~v%Q
zfi4Me6bmXMvfjX41j)n01JpY5-au;`oyu-BtN_AA(Sc_?CsAv5voae^7aEd6kq*oI
za<{&;tqGy9F4Zxr@{7Pqi|60s&*<ed7F18`a>yrgu1USJ30u<xF`<}!D8!zq7&{?f
z-;>#DkXc}y$AofZGtO18vJ;!5PYL#b=Q{%x4|&q_nWa}@Kl*=_c>B#y2P-|CrRtvA
zoerX#8Eo(_0Jz3r^%k?2%q5h{3T8GLKjVsLc=fIai{=AlzY4jZn6qDYd9ki{B(5Z7
zYG7YZ^;T$jEbmm8jdE*66Y_6<2N)A1Gj>cmPMWCRM0Rlra&gQ7kz6*Ku=*W4!AXXk
z%5;xAv)e&NKXF+ib~QvJSH;TlX@&NSda0U%SygFtI+*ap#8iC+5+RWg5-6pC+9a;D
z?e)bSBq}od!#aF6i*W{lFBgh$=z@F4G^dQ|`yO+hf)0U)RC!@XvmmjwmRD%sM!>q8
zzgr7DlmIKYDcqgNq_ZEE>A33*8c=T3ceH8y<hb(8-4Dhb?dEPj{1&bCLKP-Jdc?a8
zi>l22?!MYfK42D@Z2@m=#3NAj!gh8p768CArd6bpm@82ki44(NyR%M$ukrf1^8J+2
z#j>i{2ey?qZ~U2&?H><GOK~hlYLxd6Cu3GXaY-l*6vwt0otlxa#c)X$MT)8Fb-hIT
ziKi%<-TC}+{KPJDdZA|6w9CKxrqwz{^oCK~kJcwu`_^re-jE8(Ui_jkcGqzTD5I`2
z{-H~bmolEi!cL6OH2dtuiB1Oy)1OQOL~*j7lOnlI4g%upSt)=3a7$A5{Iqmi_wrk>
zueAQ?5S}c(Dpr$4JHV8?xw?6D#K^+>koR{4@B}+IF!7kM{$O2;C-zAqia^y{##ADj
zNYh)!A@-Q;06h2zJp#zv@L`x*Lxp64swO+z@ESGeRC!&wUsUkyIIYv^%%TA$ow=Gu
zgGt@tYD1pqsVv->b&mhc;&&BLQa#w_?trTn+I}W1D1G67!v8cf<@i_&?eXr%i@6R0
zzMx6+`V#SS$71u+OyOsfsl~!Jdz$0SuaTJhWk7dVdKH%^SmZ~1eXfBjYpvf&Wz<9R
zS#6NumZ&plhqkr(WYiaJM1?ZCVfx9{v$DK+M}s38sz>GYG+4{6Qs@sH)$awLr<Eib
z{}=n86fUXN$YyH3@!wm!4dZN}pW!jK8e#jg`swylM>)^j^`U`Hq@rp+ulUoRe{-{m
z>?2e_ShFjrY5!JzULT$l$&GCSUAS<-&=3cb!Y~pf4f+ZtMW(zpJ1yCRZw~0#9nH5M
zE>Am4l}f6$AtsF93Ax(N$=EO=kqQZfCo-`%ZYuh9^D-7sFsBL2a|)4#;RwcSMTi(=
zV!>9f0K4U^|C^|?&E*3uF_(e&v5GP(!6=jACL7sQ&FFMs5o!CU@cjo+<2*Y)z>>@8
z#Q8dH@{3wgM&qz=bdr)oo;8pxxsm`>H};AE&uS%!NW25Oa-6Per|USXkk}O_S@k-Y
zM3wQGu0c#Xroc5w*Az3J%%TQaTbrw5Jh&~blkGvmP60~iBAKRifo0+Ij$8Q3zQ!Wz
zA0ep=>qfNSx?N5he;0KiriH5gh{EYJ<3jZzez|NH&PAubj?FU~SXTR{{*>;C;Xne;
zfgFju>$!~zLE0qgnK0oBUZw>tem(kl_Xew4rb2GWY`RSrFXGR+Phr!6qsKYKSlnpx
z6_TuIeAbJb@v`Yz11A~12DxM0c}~#cU4$+9uZT1Q`UUICs9DU)=<t^<EoBV4<Waio
z$ZzoGm~;)M#j79THT=5@ql1{-<$h5Gm%D-q2-=gPPES`Ua(p@vF(IT5cYOtEb69h@
zfRq~#JwCjX{vQ^=SCA)rd|p@UP{QXtsywBuR#I9^*LA@aFD2ld6%YL!lnbcmTk40D
zU@HX&&cPgp&1h3b*pK*IpQzyJB0R4pQR|y`!gH(Hms6_M%7GPY*+_E#MkJMD1Mz*H
zxhep<(4gP#xD2p9<NNc@7eFVKh>^X5#tYa6fYaIed0Y-)|AxavKnwQvpA`Te4y(4c
zX-WZoRylbtvbOpW`&`-g0%UFOXdNr<rcc)3vD86H@jWcx-I;)=7rQZ&`y6G4m%g|2
z;#X|<a8_yuN}kCV(;Mg*#`dFC$kqoDx4dp=WNq#3CiWnXiAO*{AeK@Z^*--!6oBJm
zeSJCX#Kl<oZ3&4?*30aV+l<JlevK+^@lxrVEW&cLihqjXSN9bA+h)An3j}~)1;ZRs
z-j{rhqEO5%W)w4(#G7;gLAx)NMZnNevcCsmk)a?lj}i#V2a_1p2R}DiCW*Zg_WGp?
z*hwsi_d1kNAK|#8p#ri!<}jg&*rS=hhA;{iz+<Z)GS8J;nbRtQFuy<$DGs!G1eJ5{
zW&JMF;B;I<c&}b}Y1sjQEgXb|8UQ41FpZNI__l%pghQc_Es%$XK4bWgWIgja&T`gP
z8M_@2c8Op%L~;>^b#aBmp@B^e&6-C<%-8qN_Ya+aoY&c>Y|zJrpZ_-BIfvglf@X({
zJKx&sdOIroSHSJG*VFVQ>wejByp+uDYF{amRG0*uXo6q?=yo#zq+>quFP0B-z6dhX
zzCrQ_^A6*k2za$s2b-JzRaI<Ft*w`K`j9^8`Vc{IK~nI`&5m$OjkW_o6lK5Fk5cz}
z0rLe+1srUzeRpQ+D=d9Txpf6dDlQNhhXbI3obGjUMsbIk?Oy1Ae<@38w?9dKuH*oS
zIEn(0pqUG@69HarI>oWux<xHw01IB`<eQuhhLH9MRlYq&6hEP}1>F4sH)a3;&>rp(
zl6`R5Ugsmw(saH2mv?U=FcksX7J!7y^6+Swrv1|YkjZN=MpM6I$pHcW(YC0sp~LZf
zHPljrwYZ83c11<S<kye1_Ggf^W0-gMmtd1t7K;CvLOd8beJs;4K@b8*(ReLr(N;u6
z<kiFDqof>GxUxLjDR|>pby8?kyqu!QF0_mYzMw}PuivO5W?v%^MkeNQg)DWy9Ma@l
z$gA;Ov{b@3pI^ZU{GR<r2vVK>ju&c=baZw;k^jMCb3RnT@b|^S3YGPR!6reo#ApIr
zK!6y7($muek}%=@)%I35jS{&u<!^uQDgJw+39k@d(%mqBKA}*@S@5L^I~qcQ+r|cQ
zfS}kW`lsq(Zx7DO%IfN1I)vwupzFg)Jq-;_Do~!mI&3i^hrL3g3;vaXSr;@44PwQ@
z096_W=KuoXlz`0?;oT-v+RMG`m-c14mx?9|13)>U+}45lpIWmC0y)nn@_#>x51q^v
zi<Fe~yqnYgVtaqBQ~0yB^~+M7Pet$au*qZur#oTuEx32=2=EX=l<t?gvFX0-(ih3;
z%zG2islHwavA$w{hc6k4Yf`;m`G^%r@$k&qes2V`{kv0Az7@**P;{Dns03W_Ad*@N
z-1_ZV<gD4053fO{8X^THrSm5=7VT$v2_(9k+4}46F4~j<WctTuLxd8v4wT^H#|DDS
zgo=vV<Z)d_b$>+h@%{Vv0ldkYxW`R$FBj661|cvoP#@&%Y19}afQ>dtPft&5=1(dK
zl6X$KL5Qy*vjU9`3=AfJZ}(G2f{TW*)u&GD4}KHo+usNdQy=@~)(d&@g7|P#w%<jp
zF2PPrwcSq0Jb~a|6i}Z5b^lB60Z91V2l2t7?R{dyYavj?i9hqi;V^FFu&@+g2GfB5
zHnfIF91%P2%R$M#To^rQdd0@PLXc-h_^Wy}c#3ry_1~@UleKqr42Xz`2#w+JesFX7
z9cHF6n)Mc!N(h4!3|#O8L4Bg^f()NkbQA@*X)qF80f0XK0DR|F%`Oq8JZo!TE<+#t
z6mr?yW_Awpv&}vv-nVa!K%hAYait(4CYD^+Y%cMEA~if+2yw85ozsg!;QFo$UsEG;
z|K}QMwap_;yV%qtGN~LV1zZRLn#i<Qwjxo@xAoI5^gOv--h5K&E`NUFz2CU@W53~V
z)Xe$!o&Ya}9*`f$ZoSB5zge7#g+TXR=)vD)0n)(+c1}kDA+z-cZ-Ij*A;kBB>WW<3
zRK7PU*YV$gG#i93xA`(@dq(Hy`h4<@?&A~b_Lv@>?((5-2}6Qt`_fi#+@nkyLsAo!
zYMBb%XI<n1nlaJ(^y{m-a%VkeU9y7?v?kaV$}U31m1>^g_#*F)i#zUMr9$wP6ZCeT
z<M^F4O3{9!L1-nb9DbE<It&?J9OmH7jxhL6gnT2v%H2LPTR=KBMF*81E`w#P%5a56
zrJ*9o#`>toWnbf$?J~!zuG($O9dsgMQhB${Jg@yw45@Hc*ANDTRlA+gcA98vhb+51
zNbH4C9skGz?FPk=k{xd*`0qH9_L^efe=8#Cbl8YZ^td3BM-=S1wT0e(BdsZNuN8CA
zNgL!l4voE*6cKo4x3NsG-GLt3f|6kro&YyhEFS_&XZo9i5KWGpc=d<e{b$wFils72
zb!F-##H|Zm{o~{<W723RqJCnMRjzxc6&jo2nay$=b#~NcD&<kYhob+!ivXxUu~5?M
zdhn!anX-jBXPs|PmwQ`XZQ1k(@#4&UzvBw|JW&nv+8dLqvDo)zX?2&*mBJMBvtnLT
zlG7IZirs?VMJQ_m6^Y5;DTA@>ST-<vKO)0!;J;kGnz7>X-8v2$Or_@(`ttCKhgO<s
zz7{1-UXIP+kJqn?CHV7m_%BYR2~vxji%DduxXgYQ;}J^5UerqcmJ>mA%5}VuUg}-F
zR7jaP9t9Ey4h$oCEl;gRl*!F+H{PpYFFGIkiK1cw%)F*BlCu6JY3YahH>q<;IT3lt
zwkB09Y`tVUNM&I?_XnCXtvecS1Q|i^nTp^F)-67Uqm${s!z0$wHNN?`;_qf(|4Q@S
z<Z|YEm}3eV7)GJfE~M*UT*^&w)+3LtEB%PdyyPr3VDqKQshdb5IK;5%nS{w9iyS&?
z*P1`i<&maTtz4*PZ;+aQeP(2Df9)G}%T0~sQS|KQvo+8awe<-NW-dUx2reOD6u5n@
zsje(|(CzdHqjy}E6jJF2zzUmb4HkhqD@4p|h{05LET9Gq-u?D%vS{xWd2S-hE!rOx
z0{Rp8Cnn7I%chi@01vj|3q(6z%gZxiN3J6cp<!M!N^9lRZFdVUvT8u|+uaPR#S?ZW
z`9LZh=*~H?)!P?hm;FYHI!5i9A=hYbb^lj8>CNdvIM|ck>^jgVU({$U4>|b)n-?-h
z)-;+Odb-xp?f4rtX-B&SJ(T<nF}u;KvIaJ57=V)toI`B(joxZs_%StxeBTyndR0Kt
z6`@sdX!DIn?QoAVM(>;JSEbi<*LU2osRGhbc`43wQt1U>#axGXu?cV#op{tD^Nh0)
zfq|uo`4TI0XwfKO?cEh2FJ^<_(t2mcM38DPplPePyQF*h?t#7W1MyqnC;MW*+iL*y
zK%YVhYFFA~S#<trun5Fq7`Q#35QpQiQbR{=H0UVROX+O5U;!fzG?oeEa4bfGVxzLb
zsDn;)@i+d>A0e&)<%_7YBZt^Id(x@yhnwNnpOaOo&_>Cab&qKHyy~f@EpA<^DJ1M~
z)9yQGh^q}RfG|hhF_=ZmO0wJ<1R2D{X4}t8-uuvPG)Z^$dr@1X0XWaZw&yC;@D1b>
zm_0wtUw@9Mo%_+(sq=8k)Q@%=0c9q(E@YcN<<P&dMAm4bYcEV44p(d0O!($li2B}b
z4<>#)wE2}F4Y-7YCqz)C>Axn_jqp3KIs{$++@0c?b$W;0evW9!+F<kM2h!tjadBd#
z94&QaMO@!UZdXI^Z2FT6Njm$xrZsj;*{_O(8sc{M2dp|k05Jy+t8OG{WZF04E;uTr
zhoGhqz;=G7N5)F15UDY~`$LWBeu2|9Pe0z%y3t?%-mdC*aDbUDO}I4sbRxX_1+_;^
z$zZSImUX;eH!wG1xKUEfzIFa~YdD&@?aPOx)>W1vpRZwgNds=>_MxG$X_@)yV=Irr
zN`ny1cq&?_>ia7Di32x2MRd>?j%MgD?&EZ15|LLxWQ0IzyViy|%LuSO5wM%z*Hu^3
za9{3Q)8&rX;T497L-F>__kg9$p&sI5$=30F<RD+=r<}5%Hp1JG5-e{fvZdgE_Bzi>
zY{X+ZVn|%`c|D<Wn2sW2vPToIM%3&u=H0&Xtou9%V;olyJ|NYZbhhL|l^$Xp^TvER
zpO`5;33KPkbF=J@$Ke2fvYq>bwnwO|?HV0($;SwSCf7Y0<&qDSC*(W~2~3*ybZ5!i
zThX{O@szueSE;_$Og8WL6j-wxhvI1mVoukTDva@+e)GM`^1PbUIGv<P>Ah<DdYT)z
zxnLbBd$?C#9jQm4<xId8(J)+yMrci_)^lgUVm|%z6Qy_rbYk}x{?HiGOmD1Mj|T!M
zGrn=9PXWrxUSwRs-tkt1uN|Gn(z)?CjNwhkGsEI2eY7@@jHc>*9Vo97=Fg^|9GhFQ
z)I3`#&pdc-g0&OmMA&=XGN^LB9?nR{PgW@ef+?=e*Iv2WhJ^B#Fy;1g7Ra#Wav8Lg
z->tM-aV9s7^=QY;;8_|472uwPbz*H}N#91K(iFbRZhqQsM7-<dN@3yw7dj$3HJKXw
zXnWJgtV;i$Kh=0BIE)fDH`ZMV!}v`l%y2pGgrpbNJEM?m(b;1@cEbl`@<LFjgyE^w
z#kS$Z4l%i?fO%(>3!U|rnMtxzzzt3T%}l%5O}FWoZmM?BZhJIKx(UZ*C|+Kpj%cwF
ztCl7P9fxxJU14O%2n8ufb>vI#60MXR@oISCp6!UNLx5;D)YAx&j#W?K<0sTG9(LRi
zAl-Y7!>?Jp6Z>#KfJ8Nf;RxX&ClVd8)Vodv5fr!`Z!#RQ1f@WV)!l)X(~45tmd^Jf
zHoG1rqaNcV;^p%Hxn~$S&q&p<vWLMoeCxc7?)CgcT)XG#FBB|CC@j}&ONlfm%ekVj
zTW5UrRzvf+HcRV4RIM5ti}}kRWb@fY23-j1lk05`qD${jJm0hr!|NGS){o{`&DWZ7
zr9Pz6SC|fdYkXe+Y3G<8IRoL@*CLK8dw9+W2P^xnfM}2IH%!gmDD~{_Ax#73$CO0V
z?-6{`wks_`eo$~dqoc^cMlJ%@W!ze+unrLlB6)Xl8IS54pcX*^?Z3%2XB6@jH2sVH
z?%|-|PEmgL&$gt<Uxgswe2qEeqq%!Dh#*7r@l<`*8`mrQbfLD76|(QjHa+|6MDp;`
z>TWaH#`^TZ2=^89^tf2gO)W|^pIGd$SH))3{M1G&D-w39Q(pEAk~Z74+i=FPPC=KB
zRm5$B;o4EX8_ApRdQcJh)QaW0SQ1~Jp#R|E>fNiDWqrz3d^JxT5)gPHU}>j-F=1Rb
zO#!sF=#>#)BqFgeDJdv>*k^{sn<^)LNx1EkUwu%+sbjNU?SIFFC(~ZjfFFos&2O*`
zsEt*G=HoWECv4&jwSf9Dk@IKv?@KM+a7SMRHfj%i@#?T`3spmGddf@`Pf_PvgwYSC
z%+T2-{l{~HM+`}e0{(2YFPVQT=kouNZwIhw^5SD57tPOjF4j7%hUKw}93C>PKUoNf
zuAGx$<0p2ZD4xPNNU+%&KJ<y%X>LM|5I6_%OIr)MA7Jb=CNn@ts`7#ONeDr*w#Qre
z5h6^x4)4DVIKj%ax@5BQsh4wRkPh0*m=l3aTy%pj+7Lk(xn{TP7+8I{UaAlc2mGoK
zm0LE5FC8pWV~ag46Cy=AB)5MyTviON84B`+7*R&$lVh<b%EYMOZ>-`?Unt}Z;2_Zr
zd(yI3&l)1qT@}R%<su)ikbE?4EwCs@-F$qX->V-I#_ReAPe8jk0!?Upvz*}uAExfs
zE{j~-&*PSqX0zh@Xcm%FC%LbTH!bM-V^IsdFX`nUAS~|x^W54Pupwm2FED2#4FcWR
zmK!ok31NPGH;;P_gOq_}Uu|7N@^iMhU&#Bq{V}~XhiHvG?6u<jJ2@;$8UuGatse<6
z!`%UJ)s{01ptF+N0RNp=Jp)A0>gCO2YnSI^Cp?(zQNrE$p6)`)B+*2LcFU5k9^k(t
zL5)gpd~Hu5E0Xs`IXsd6{N|eRvu@|7hcD}A2-VtdGM{}e4~y>Tp261{`FQ3-Cbm|C
zm`T#PAZSn2tXFgkt=B?Dh=CT5YLq=4s*WB{edA5{LC2dZ)kdQgvU`q|^7tGIV=wV$
zuxz#7DXQk_@BLB9R44Ak8aY=1?b|%<K8BtxN<F_GJ3Jm@5HN#lCAzruQ3eHbg3g8h
zy1wk<H3<>_YsE_4C$u<)o<KrbmT3WvgHA%t8q<NBC@XegOWYpHAWh@Q(9bIoM#SbA
z0C8MFY!@5A_xpzX2LQSCHET&sTUfA6RjC>(v=4(NR|$jYw)D-S+U^lUyUMta-oSpD
zIbXBKZf%5-&@)r2p!)w9d+WHWx^G`tQd-z-8tG0!P(VOZy1S7Qq)U+8beE(O64Kq>
zsf2VREg>Kv2!g;nH~ReUbKY~#{oH?bv({WQ#~j}nO|^xrJt=98PTkq=R(Pp_lkHho
z0%6*$xr3Te#?zr!dVbuS*D5TTv0_#_pVZkJiZ#oToKR?rAw`dw-<HXF_o@s+^8*PL
zp?t}K5iCiyy%IS%8oj3RH!MdeB@*!B9uSt2SC+Jp_pt0Da#g92pS4|6azqk~#MNHE
zDhE8{9TeUORKjR@pN|;5M;~x>OdSnE^_Gle&WvU9-srH4B%i&XUlxclra8qBpP^HP
zsNcT?9nbFJQ4)6a*BO$?Zyd9F;aHykqS{1FMzrq<Po+9(%H?W6^Y)iA;ZGU`k=NqS
zFs+3e=?dSMJCV1a7%Etn)HWPEuW6ut>K3j<NJ0^u<T|)MRLeME^F|U2Tj0LKZyqf?
z2}6y&hZlFMy{jo-kz+v4Mw^>GFE0x8Yb{DvB^~FtBk0kYxXNQLZ)z%vRq~(Lka3~M
zoDkSvc4C_BO_)@uR6lYeY0Az}jWN>clr}Tp6p(87xeE8J4{&7N5ZHZW!=U(%j>uiZ
zXm3uIEe?q;tiJGF&X+G=DypjkfYm}tDewB%l%AsS1r2m2zx-%W-rzu+ph8Rg(;HXH
zAgxSd@)HF8RUwBfS==r$N`J9O;JQw^^^y0N+~f<mca4{&&dN?qESXjy=I85)P9`lT
z{NHZm_++lKHEucg<P`K?DU&S6BSWh~wbyr|K~cmA?+5hoS#2#+C8)E(ZGfg+6P@E-
z8MTB~@>8D*{7_ltv`pbGckcLg&b8`v`3X+`J?fgfjO7uV2O|ySP$uM>*AM$5;%x{x
z#Lc`!zNs%fH`Pc|%12TgFNBG$4ZyNY1NG!6s()90#bj^sjUcUj{FAP3w6g7_gZ{@{
zL;v?TPcVesLC%&#L@3IgCV@eg&MEfEy(_(;Z%lmbjkB>1kjFwE4qC|N^k?aT3@qQR
zB>09R5<>}?LO%KYJ`~2#gW}Vm((7*b_6HoG-}8(_3>xk=Q)gsmm2zB;9|Z+X@<Jui
zU8}|icw0oq(VmS+<RNb~G$?F~<>(Ygi-}~tD5n{FI5OfxjvA8!wTIdEa|NiQHbgfw
ze?W23-lk1?_pX-|Tk+t_Kx+94W$Hl6S-f%%%Y*tt9bs+W^62WB3<*w?4erGcK5d^I
zfA<mT$!nDGl9JW9f16%VbP@7KS4WPacQa|Gu<a2LiyIhDVUrmUP}kV2zG|+6n;?uO
zW%x$;iTTS6eOteN+ITeb?mKgdD)U&Eqr>}Xnro7%Q*Xv{R)f#mKeUrPe(yRj@M=76
z98rM~?}(dpiV>zfdd~E6#+qe~sz4wvzO;vj*94NJ<mG$<RQcOe#YCuB#IP`YMg}(1
zu(IgSK_OjFM;mgeR`;KrLBHYa2AB;dA%ToVv<9st?pz9o;0f0|6Voy0lrMO6ndi1b
zkrx{54yV`6%c27a?wsi{shwIX%|2>iTLk;4>tHdsD}5V~JX%eMpfd#%+pAG$E@HHW
zKdJXe`JTrsi*5~VHna_by&0U8-)yck*ve3z_N}Sc`sp@~KJDH}+u?>H3}%FW;}0sm
z=rl1AtAzpx`HN;u#~?^4rdXMg=*0B>b@umVQ;i@crN?*G4l@}Lboc9_T}pv(7jjpL
zu|cQ?N{F9|usu~;%t)vmUVKWE44qC`!>kbU646S$J^8E<?!U)WTKr~u{Zxmh2xG{g
z$flPLC17InJn2vLHL7jxQuMy6d?DP2ezm*K(>e|FHK|bE4iCbGr8rGU(d-LrL86!H
zB3XB8Tm+2uiVw11^5ot7zJPv4fWVfy?F89vuxT6_yL)EWJ!qewDHZZ~6aiNeQ?uZ=
z$!ATICK5|u&;G!mAau+GP>09_;3iFlW|693c|)JRLB=^&&y109ImT>Eh_xOVUa?O3
zRw=t7MyL!$q_MyD_w5nM@@16kxQNoreq+vFX*cV(i&~V-)jdKh+9j4W{z2sxlSUmP
zi+WKWPa9*av$P2R#j?RFi6~_~fwLcSLW-yv^HcHA`a)b~3@8gtmo>1wlsiGvQG7#>
z0UDqsKh^wGPCWsv?L*>E7rb(Hdzq)^9cB1pX*8V4OAAO9<G%L<cnZUXU*U`)tTCew
z11{=w^Cd0wUjlA`8+3AK{DT7Pq5&U5U&p%rJtK;{@*T1NY~_XLpG-2DE_mDSES#*V
z6RhaQBVu?PC=;ZlmK?uvBG2OJF9#P+{%9kJGKAEcT^J!qaidskj@)^%CD2~*m%Q6c
z75pbL`aRVHXo;1d*K}iJamDQ{?~WkfaG6OvoE$mD%pjUi2-xF&i1j*^Y02V};}CKg
zC(r{!LbzK89}@CLC#mL~F`}J}`=ouIG>m#-I~Hk$KccB4u7Fl66az42R2~yt85I^G
zLp^*@)1T5t59Y=^+4w2?`7=1sMhA<~fh`~hGH!E*ZSPJg22sY1oe&XM?zT_`y)ian
z;}C8o$5StN%2qonBHUwbst7`-Q!AZvL`{_65&l8!>V0SGJtD7f4zNkJSP@>tXjsnH
z)OPkQsG~8}+%QHgZz<6RVdD2vsGu=zaOCb9cwWqk=3a#uwI^I(ZN*T|w!bKLn9H8c
zfllmgeWvU}3|fP|(ZUSE$eMNE_@ZFyx0_Ss)%zSxpju>Xr(~_mRZJv3q+F4uFNhm~
z9XED;?NJscb`Yl0kea(mb}PAy;wHm{^O!zZ6^ZCfyx({r5veI*`s|kCB=1o$49Zy^
zoB?T>wulNB(FUK-dIWnO%e1Z+B1RT}joaNmtZzuwEx+*aC>Vxf2=YY>!@cw5fot_{
z{YQsI7jRdtU<d=di{jmiopJq!)2~CeEQ`K7X2Jqlu_#b>!J*R{G%y|;%&NwV361`{
zoxb%E!#fpRY8pP3FIc&jusQ-uR_|hy26~<yJO}8=KrD5DA`AI@6xrrJ4G}VH51;WS
zKNE*>KWb>TnKdj14QiOJu7gK=JU8L++%H?&Y*V?XB?VW8>4E!@D^jmA^=eR{L%6R@
zKFT;XQ-XS{vq?smxLu}oi(tjs#`m1Kb=^#2v6kT!M2ynQq@nlpB?2Fp^r$nH<slm1
zbuTLNOK!G52%7umyXTx_(TZPStxe|Q7<h)cKYVDAoKt14F!cT*2_w#T{7xI@GVE5V
zkGT)p+=NaUF_{G3PWS0picz%n$%N|J4!}<ujniz^+EJ?b*>g7K0$&YV?sZIuQh5=6
z*S!_W?jU{A0jv{y#PFhyMYha>3_lR4_}+H?{Bnjkk0#|(J7%>PN_N0UmID=n%RT$o
z3@6Jwa-6-Ea_J0FebIN7EbsHY7An8@Mp3QIIRP>1JD-bagI9EIJswx6$4|1N;|L+W
zFnaG2I#6kOWDL|*r+V-J&Xf_Uv$>&s%)({P_%-9)BvU!9?(W$EmEKSCfw+fmC3`ZN
ziW!1IxOw>T(AQg!hVfYq2{#jG-4wk}A8fd%f*7~xg0s!X`}bi+D6hB}dM}znqChPg
zmJ;PsmBlc}qOYa*JJx#UrUfj*fpyQB8|q9ti;6=bc@YD|h-Z^(XR2+{=)_P2eh#}r
zqz~GbJ@p?aHDTX+kiSlEA-o;!wG~^S=|2K?5Lo<m+G3X~M&-%i=(BF-)!_t3UpTL*
zRLYyzLMX=!$sy;88)mFr3elveKV*l<U0qzD{p0{kBI9@3P;P&Ktxp1iPrp6$w<zuS
zrfy{S$y#S!QBnEjq51o7c!%C8Tm}tJEvvF2Y}yn3X#W;10vsOVp8EQ*88oT8C9b>y
zP?R(eyqWk*+HES|kRjC#3exnOd_GaspkWuv@5>YaIg>#SMREZ|dj4Ql$3FJW(&mF)
z_JS(MJiJBMPv7^9i~%1AG(2<Awt+XBXGh=XrP(rn%e-9<^X1NRH-Yv{)5&S_SliMo
zo@+2x!m@Gb?;Dw#o6`?1x3sjl=;L!_pg-{IfyDk;dsJ!r^|D5asxm^))p}rE%Rtr3
zzyu9sm+{pY8<)DB)$N2B$}bqqqsPbkUW}x5g1bDt7*Z)u8Va=3_|d$Ww#e9zvhNf5
z_k4bz`_)>{?7miL^Z;;8j}(lkUQqZ0U2H;csle&lQ85mE8$%^B$nk}hCZ`>M#C86c
zH%12W0#Z_u#C}iQ4$#~vZ0QJ<YeeVV2aORVV=gl&++bo(|8M~wL3=#_!0VweS4IjT
zy<OZD@Z5y+cRdj4-L;?go8#x3J;)#EI=IH)JWF2Yl3DL}>sJ!N|4vLsMs}n!J2Ru@
zv`Ck^Cv>TN?9^~)oqn{%gPQJAl6r}M2ip(8^Wg(iQqkn1^EFndd4~FU0HT6O!5(LZ
zt@pVVDv2yV%7oUl^6;o%p&llJ&!c+>ht8h$KQ0m#!AHa(m?+X<O<>W$0AQ|Kj`~$=
z&&QAGfLMvJKf_1D36R&5g6}h>dUubB1Rd9q0R~?n#k*c~iw>s1pvXA)1p+CAJgB(2
zRm1mO-@uoC=SUDKGXmjGRLy$rtc^k_@U`_4Nf&SxnTCU46DIq-dXvCYCWw9*lu_eN
z<=SFkMFjDKjN91T9p0CdxN9<?;>5`ZO?~WJunj-<4S>&<n%(+A!X=mOS@G+w!Q^`Y
z5Y%Ol$29!|xLz^fl9RLj<n!_If%}X2XlY9Bml?H315i9*zU!kq0Isv|df!}}TC0~E
z-p6N<7XkC{H1nB0%AZ$^q5{miq_p&CZ|<QjG(V9WUK$us94vF$IN%^6_|=BEF))ML
zo++o??sfzS>xSCV&D6=anQ~x(Bn0S?9L-J6LA+7``~x2OE{gXBTttr6dPRL)|6=eR
z?r6l>FcS-l;KM_Q^&JU2W;kpOLoZN(t!07=T13F#M&pvgyJ>WBksNRk!~qz1TBxf}
z#0~*dDxxBhfY<q}d{)=NT(wj`@9NquIxH`;0I<&;0BC1C^)1`are}>ofqooy>H`mc
zfDk|>QrYgb`3VKk1m|k=fdiF;gM$bdXLBvLvI+}0WJ?|>`%r|RXbPDJFEISqEjo`C
z2BXGc0%)?RghU{<D}H^@pAO)WUI7fR0`)>jo<eFcz*=8Ec(GGWD&SIZNFM9_K!1ms
z<P~})GSu_ieDIR4UHS-`<t{N#Ixh^<0{)%SA~0mAu3(${k(mFYYkY2DVWDU`%LlS>
zeHM5}bX1_j3*CWf(gn!8qWSe7>Djd_?tmg#fz8d$`b9&hlMldT<iSd)R#Su{tR(PH
z^m__mTA-;SYVrCtZhTk)GkIX}5&QY=`(%v)2?3ZULF#N57_9i;4S9hzczAr=1!!x$
zZ`rr#X~C=;D5&1h*C15hSoG9)1Ec(b#yAvF76`GhceO1FFEW0Z|CwN!!1t*OVh+yZ
zst!2KLd8h<lQ!WJy$rpMNE|Zj3(`L@>@B0h7ea-Q3)u7Sr@M)rD_I?|f5XuXnIXs=
zhAp806hIRd!;vBb#fxqwCF<%46yqB#Rsmpj&Swsp!@m(3jAMWcne%t+{C!o_ov%m5
z>B2l;RX>oo_YEa3j394_83T?2+#nh7Hs~T);0xo$=Zr*+JwhE=B2WM*itH@Z@{gno
zM<*1jBDDKZ>-|i#9IJas-lqglI`NL%CUYQX%N6U&{%G?0jy?Wjpdij^BLN+g$!V7z
z@ZZo!Q4<1OtlzP0<x^3e{z&ZSjNxU5BY3$bPqu~uO#T%OB%e@dpGCrIYiqx9Co<&&
zGMFjg>wuD;(Gv6ybr<p-OehHg*zdAp_8rDJKfjmEw(XWBemaa|EAY~y>kW*%LFsN<
zD@EC7@A9dpBSe|vhQ<d%aGY4^8!l3DG>D8T+EE`FpOo-}OoEU#hgJxfjs(a!6oP1a
zdU|m73ph|Ftrdkle@Xz4r7>_9Yb|5cQY1yJB2@O$;^+c6@c%Pt8;c?<j}TO$c>gi-
za=UN;-meVz%dZ4^QIrhFY`QH_hGCb0*JE$|uS>!Gglmi<D~2M|V;|KatreH#p?Tj3
z`*mm}8on=Zwn2JVTNkb+66Wc><8;&0<lE(<1(H$!Ju6+ZFeQG|nX~$phol(kC(Vlk
z!SP5e?5$6jbl6CnduEbg8?V~snA7-!>dj%J>u6|$yfrIvSP5J696f}5IqwmIZR6bO
z_hm|`l=Vm&|H~N#A|e3+0UChAr*NBxbA)ekyUL49BZf~*jvX3RlT)xh&UA>&CbqT@
zP@MK2t4zh#on#J4+84+%trymAGRC3l7Ox!lRRX~PFvMzbJf%VXX&1v>y);&%ad+0m
zia{c*69?b%;DpP)LB4+s^Xw3KHSyH21^fM6AN^qN$>!|V2QY~WmtoBk!?rsVWe)>c
zmA_wiA0DmWJ^7ms-Tfl?8gu16%hXK+u&@oNJZSfPLVWNeuiJV56&HWV!Yh1NvIk~Z
zEV^cron2qIzr4Vmf3@p3Svaxnj#j88$Qe7i-lIjrfba!IYSF$cR}7L4$LCYY8IOiM
zz~sb^*WJ@RBIgY@oHih<<(KO2>N2*o<5<f|U;>=msB5{8AkW0-{1t0EIsOPQwiPDE
z!Dl!4TjFy%U)4Rb-<sLW9dQ-=bEr2<UeRVB->iZZ<1Fb)fKPxFI>P2;Wx$wFI*qw3
zkL9@R2Ht;7p6O2%8NQBu|1~_6F-G!B>RASXZ@!>)(&v~=Jx<(}Z$bO1R~75Zu>km5
z-TBfc%%W9FVlAOjszM|##gBnN|Mk@I=DkE3sVgZ)XW)4IlSf_FM}js_-9^!uI3m19
z3v|eIqBL!Vz06U9S*@YS?vB>brIPArvR7W4N36CpK9@f=Ou1%1los+d%7HanSnIR-
z$yvSqqI>jZ&OX0vrKFgc*vi(Kr*D2tnBu7Ot5>L3PTazXRYc0%W<$uATxyb^m)bq?
zr)|HPu0{Sj)T>1X#p17Xq+~=2RZAZ=oz~&sJUe6c@6X_CqI@MZ-$5r=w|yz><Ic$@
zbMOTRp%JSW>yF%kaLDK7&T9ibhqDodRYZv$doE?^2Vt+h7jNwKTahh>&jQV(nrPa;
zY56~BP?Ab(H~|H8FBJ`?4g_DD^Xk@K9VQZxmz8wlkM^uR`fqrt+0>&~;nlc)_WI4p
zcNgsV+<#hRyAwWC2#aMjilvbZ*FL+qyF|ely?1lpoeWpgF=#mA`Q!)w0?lf}>`&t%
zsRP-E!{3t8TJZ3!e>6>da#<)kb)=!N8cz*Bqb$0Z5s<#}n(8^fvZkGE5Fry?nJNhG
z<194lMHEi`Nvp9tDe!jP@hKZK>8#tRbmV&hrS<)&)U3&Mtz*<}QG^R_sna_sTB3-E
zO({8mxa416Uj7BusudI&)vdE(UaNKZ)7b@sOcrRlt<8^2!xq?vPPL=59%*)+21CNA
z=%RV-ZF6~0!?PD;&MWr6kZy@((14?O?Q=~B!&sn1G%L|(%;fu$9)u(ui{8`j9Fqkw
zF$Bxhy4}z^%_T_{=)=v!wsZ$0JU~7=8dkBZM8E~Ts0q?hXjgQPesB0UEH0rJ3oYTf
z3z0t-FOy-&R4>rSe%0L<mXX<@hM7i=S22ybC7vPqly!4jfi82jxpQub?3A=Nw9F^w
zCw8DQsAxq_sC+FYiNCIezfNn1^^n=W!#X<yeVDckmc7rfs89CDnpQu+HO{4ye?sy}
zE}NRs*MbDwjTToa5hCZwi3xlVFZW~!dAiITy30m~hx><xp@TBu*~zEtvNCcaKM_BH
zLSYr_4zcGi1ps(u_BjqyEuApyRj<E;!Ct`2+THGnZjv~>)s)>0ymA=aL1VJmCYs;Q
z&~mbc9nKI?WPfS06&K-7NJ4$E<h{o|1Q7PJ(r=XmuBbR^=y+?g`j`oRt@EoLZ&#jr
zaH@S}JN!=u1&)7WCY9r_VS8&ZBxj5WT~xzp_PtgX-@@pS)!FT|0Q24AM&lfqQF_c`
zLF|GPqVHc2DXR6a00S*JwB5%ifL<?JC8A<ew%yb*(f^>tXzM9*0w4}Q??d)HBIo+}
zMxz0z?%SmJMk!0jD|t*PpyPP`f&`&Y=!+0CaiKszt^XV*vz*AJ@waP-YI+qR+Dtr5
zJQk>ULB^e$V%&A|t3anduHvg2!5zVqF>iTNs|af?e*lXj=kaqsdwZNHLDEw!J+_8+
zXn=qp&*q@J9R<l96xHBY*K+dH|9TL}siNZFNfi>-RSQpkKl^a=O1D9^;`OgJlKIDF
z;U@HQ5ymTKeh?#LM~$oe-R~O~yS0`XXncmb9=3QN1g-1Hvu&Iv7F&F<*}{`VN<9>C
zPk-SLAX2p*69j1N_Lf3Z;S-`CyNZI~RA)z9mA9Yij<;C9lS$u~oV#w4hZh5fjFuCX
zWRFVqP~H#U&1P4ge7io0s?qrsU!dR0cA`K>Py3AIy#I%NRPqyG1s|*uZxP|^3Aw<{
z3HjMKKOB->3Tm~FCV2d2sP%DbFbd~q33+8*9KC1Z2ARj8A*)sbmY0}BL`1+oQeMv>
zJ<~~ELBVlnoPOgYZ48nSWRkCq&k(-h{Y991OazmyC`wM2qu6w+O)vXuQv^MzjyHy5
z<lib(j80IZV7%>T&BQGf_jEHJst|rKm`aJa`rKqJ^PHs`a3ug4i{RI2U!Q9sCyU;+
zDodt|m4+Pixwv0_Ag_!UhhU9y-Of1q>hqYmhxLU8H{9=SyIkHIxVt}li0}(fxvqge
zS^V<aV5RliC{Wl37Kh~7k^D%-YCM!`mM&AZV;ddkDkyWIN&GQ&W^6H4ubs!`1p$D3
z*{_8i&I1AWriR}WSXTfVSQoq;r2j#<YqK&OtwX50MeE4Fv}0P=lS9_f(3xCRL3un{
z6!(kW_8!~1P|VHdO<a(4&gbrU)Em;|zFOjd#OM7R_v<iu3_cNM*Xw!WM1&5#sbW~P
zfoG1|nGZ<9u@a7?ha=?&1X+rcnR!se&u(yg(zN+rqJFM@B0<h#z8R~rikk{_NcPNZ
z;mJMQ)U7C-0(}|C3I7XB$YVbtgT_>Z7%{>7>EioV`Fq(L!wP8?JT>bRGsc8sZ4@Z7
z(7%vEGVgGE$u6O=7toTl3tf$0Tu7mEtq6%G&J2>c=P9DodTuq(LKu={`^QrsmnV#H
zefxrhFPLOCMCY>SYN<*<FPltM)>D&5^-V{Yj7i@e%sV<P7R*P>_M-*JpB*8}@;^54
z*DQu47|DVc8~lNL*XrJ>!*knbYgFkT(u9@oWI_C?Fs1hXN1RDCLtg8i1!ELzX=T$~
zsZKTO_4PHM!-|MWaL&dVJRk-Rj-pdV8uXkIn4_HV=_ajD{J;gvu+=MC(BhZrST1J)
zyuj;-eja+ZqLKZ-vRmAl<sC}2UC#|m0zZf@`&?b1T*xL0D3CrsqB-lqq-#8*nt95M
zoWO2}q;$VG)NiSh#h6nziJ3E+`*RA{LnhSz+Cif1B@|{<Rqbu@gq!>#TxH#woj^0-
zP5cKLLnmO-G4ac9pWTkFo&T@M7+t~W%xNC`lLD*?1%UQSlpMMA*9B|^;VOh7Lm}!W
z3{~@Jv#t;VRxKo*p+by`{n}X+B1EMw*Rb-?1&K8gKLEo3`v+W;YqUGU+iscmRW>R;
zCRUook${MqB*eJqQAa?=e^DQCliqv2>K#OodD&tmJ4o`vK43BLb?;Te&+lKtH3pX|
zo}V#SsxS=3OL9yE-H}X{5)c~hvqRSO<iG{ZDk#8U%iuPb&ApPk$}KUH$;?t)mUhW6
ze>=F8?#R!ijAjXn1rsIlhNrNCYO7*^-Sqs4P06QY>nUsUC3?U_%$-e(gJplDI_zP!
zh;=2UEb1HIkF}QFngu2Y5Wyr+GwN+-r4*(3uGXV|-};OQwUe&*g3nrIB~8$od{ft<
zThba8znH6qAcFm2YJZWjcUu4%GcnNEdM|c(h|%#>!#dNm`9cgvH^`?zU)W!sw_Eu6
zmo%3Y{)FMH>iE9I>6E3t0gT?^VeBZfo0}(`T&8N_o&ql0Fpx`u`S6nvAq3zm4+y5m
z`{1vjyzx1^H>0SFSVUOw{2~&68lMiQ=KCUkfRw!ddWz^k61!B*$ChjhN7KyFWtlzO
zg^D+50t(YK{{^|S#P|H3`@`|!Im^o#`y#OF(V1TVAn5svTs^nS$5obYQAxx2d9XzG
zoc(CeDv&R62r#_BULu1_11w`#TbcCQARhNBqy}FZ1fB*J-B}^K((JNdh}*`g+#h>p
zGyQK~S1s{qYb{!tf>>jflR#~OA8^`yMtP=~6uvPoVRT7=_^EWIxWSoK`_N7|C!yk5
z<+mwKG^R%RVRckO`<X_@gi}iIT!4>3(g*JQFUI_D=opIVy+$7t1wFUOdM^|>ysc_8
zvPOm!hK{JjW}<7Uy7xfCbjN9wKi8R!%alLMG^UTFk+XE!QP3lDBFyKT8@bwUSB_0|
zJS>}KR<QR#rB`W+JO-riS@>UkV&V$9z#;X^<CR-KnHt^Z&kbYD2Z0{G>*Sf>hm@Q>
zi+;OT^B(;@kJ~j%w5d(9_T~vL#iNCXWB_|zTU-0jAnIT;0o}gHyBaH%T95ndySyZI
zNkr1zdpu=TeP~R2i*3GVnrP%^3Zm0Y|3By}LFov~P|!EL<rn5P9#YVCdYi<I{URih
z%^DrSe7TUUz_1VNNenW2wU=!Cv$-twIgA43!grtUEYvg#0OSi?HW}8)-GA*z5-P9t
z0XKa&U9Y9~<CXMKu3VOmM>?n$AKze83b)`NX<H~zP_sQ7u=P`2ytBd);q{=z_XV{B
z6T}v}Q!I4k^oQ{E8-N0P5U|A;sOF14JnBt@==j7A;`QDKm<<XBfoOl;)B~qAwy}E~
z&%~3M=rRF~xRASouUB1V+8633H@94EHW<B%)I?)EgHEj&m%4MXj{tZbcQ?kz`bQ9K
z1#}}kR2Nf{Kfmw#)KvcI7`rn_YK~ai2G{))D_}PxCKOe=91jSCaok=kM2<0s3_-Ym
zW&{fLRkWpN2P{swm#EU@SCFeU9QH)|W&a(~meQ*R<j+U#=uC8c3Z(pZ9wAAsh^;W=
zx$DG-&D@pAXAXjO*}dAc$iIh(G3BSYG1uUj^QG|<oX8KPZ9Ofo$KPuvo#Z2LWy-*F
z2|VcjKi(wW;f(#TIoSB^F@kx7o|8AafbTQ%WVzG_PM4X+V;XGMS;-psCCje*XjB_@
zCg!&I`&~H?uJTtB^$@3x;|8(t7B9L(&c^Z&V=<+(Xe5IqF&i&xO0*D)5wF2bmyiX?
zh85_iea}#%iW6bg{VY5-^SV~Jb0KGTIaa0PXgCp&GF%W7stHLeQ_Un$F1KTj`TLt+
zl<VM_BXlqu+oXpFtyJ|$k*_P}uf~eF9FNmF3by=1ox($S-3q8v$;5xCQzj9>gC4R{
z`cA9=M}AyaP?$*!_y?z4WdiNrCzS!Rm-pIzn6EBBQ$CfDCvuvjAw=@5?+2l5APUA*
zg#VUm2?vIkY~>S6Hf3-1M9PU;H9)siPkpF>>KDVBIeJq}D#zoKIL!6V9{v6xRNioo
zSc~_kMI#51^Qcv)>}1)pgm$I^$rHXL%oqV@eT|CO;rBnVgtis&E83Rn<j1*>^vJu+
z6QNWwCa<Atu*GsYTSTUE-{V^9=Q-K{Xv53w=!=XHb?1boz1iXDzP7S0CUht@HMMrD
zN3EfP<kP25;Yn41V@wo#IGTT81UI6S$VOx#_j4!42M7ibWplsrGDm{ZzIXnT6Ba@K
z#`$vZMSIxhNLOg1WjIxe*a%<ScU9-Fb|Ff}4SdQ9ea%Jvrp9uCUlUgc!Yl2brPj{0
z!h2suHa}KHmB9GPS7t%8rq;eeBu}O5pIgz^eqxoGY;tcgw8$V->L{~$d{DY)P!3gf
zG$JrbB0B0$%+)mR94cHFOI*q&u!Mv%W_8I1u{~VFS5{9HKe#7;sk^$Hiz%JVAvAQn
zNyNs?p(&5h3s6h8w@>BBpDWEUgQ4?LM<Ha4AU3}`1LeeXee-`#6xxvh23|gg>-M}{
zPwLy9Ch|mfYm@7=k9>~q@6jye9Br8_`6|OXD;n$CaAa%wCtPsP8$_oyqUhK1Y@*|M
zwQoap3Y3i8mEK>NgnoeBfv08L+mt>=$h13jbnZXQ=n}1#mZR2>bA1$QV?AY{ZKjgV
zC$#YBVr?>Ubo*T5ok!lThjU)xt8H$|!mkA^T5_+dFQNDE#x3oAp!@~=yCp$#)$#1W
zU}NxXp-Pi-d@M%_pmA8EoQ&%<xN;&~WqHolwF)9cQkhoGQTi14%Fjfm){^vP!PPFn
zX3m*PYGkp}E*D$%c!RlzSwBoByu~^7tDj7gO=Xp|4Q&5>Hw)}<jZA_*?vz37;pmS3
zfRb^9awp$&8(IY@F_MRRu5YTGpl5M%klMyuM$E-JsfJ&##;K9l)y4U$5T12#Af)JF
zqb<-FgmGR0B^=Sg)0(i)i3`vrThxfA9-`T_YlB_v0x;L%cb)x~^S(Dl{7JEu@|*M)
zd#$gpAb?v<sQElh;Rq!)*(92=F2lE3Y4_-|{uq08Irm*o4?|foee)avYV(|xFYvAt
zfbu(k?E&`fwMGr$5IFA?q;qc%5I;+V-iCMV2G(*3Onw^0npr@(I8M;T{}6$JiWO0n
z&CVQ!O3@qy`*-i$U<WJm>+T641&}lN`=9(l^`^e)-^R$lkBMV{U`^XB0g=nQ(o&zV
z3{&LhkDt7%o(PsMA1P@9S#prK4FM2Dp>v~V*=ta`cW7uxq&+P%0;Ho!_r3%8#S|nL
zLDDP|)p@f7F6(-Nz)V>0WYLAtakD3cQ6(p8vy+f%QCg~8<IY^$tPMH{x}Mw*n_sd%
zBmx>AYznG7%wH|N%94r}d)6pS$&-be=WOv0-tJi>H|WfP3MW`VVy3C788#^5-^~4D
zBoc@n;j@AotX$N~CLoWq9L+@7+uP$wVSUjHa?gwC(v=N~Pw>myzoJREB5WQNH@2;%
zUDHv)We;CfhsN3)bzgo`h+Nu}KlKUS9V9<JI_d<#6Hw>lv_97aDm%v^Zjb<@062hU
zLHT<jPX<J?R-Y?U5^l3m<+3zvfJ+36h=li+Qah|ZvJ8ezM(Ba=+hH7$<VOH89hU<b
z+^W=cu1NCJ`2tSo6QCg(c*n~M2c8g7FbcF@hm{xU)t8~s$$^dxfp_Gt^}T!d^jqBV
ztfx!Hl%xN=LJUS&pOykkK>mO=KD@5=DPz4Q43@AyLyRUzomugp=YvBkspR+Y@G#e_
zJ?&E#&LfQtZ%|(2?mvALe9;7o^MZmN-0vRSmt~Rjll{TA9=ITe;M^AjJK@o<A1?x|
zSahBPz;n!az8e4~7m6Yn2$IVSL#GoI2;LCo?SU1rAZeMHq&@GfF@roQ1tB3}rjcTw
zIKU&YPh6#?(LfmxHh(n7zfwnrOb!5@>DImsDkxxbwI93u24K}ojx`KYVgT1*m585~
z@L$kn;*wSYV`6hmP(dlvSrtea`|_3E!{^s+w`^O#<AEaeE-e`#H98XBVpj~tY{*zD
zA~K-9h_*7&FUpHNL7p8}e3BN`2=#WVraeoqv6={<rEO9K<m`@LKej~w^RRC~=G)QR
zi*mX<H6db`hVlnzBgO>niOkJ!O#k!zOmsvzD%|0R<aoNPp<tH$L2z3l6RfeFsgEKu
zFL9Sk2*K(LnzF8SKa!N8%2e8Qg}m#mzlF$np23h4lGydufGCr6P;G{!5+%IM6E^q)
z4i*tV@&kEDw6ScPxher$pg4TN<+LGvJ4#@GtE?}x6=dH^dYK4o`=#`<_DG)?-aZi&
z1aYV`K(byai#onOynRaw%m*(svlOKNI)Q(Ui*9AJ+xKj+9sM&L>pRxzbqOfY^tG)n
zfCi4L!BJGJeuvsy6iQyi9vwLG8X?;WIj#jNegh@L^`LCpxB%K6vl41>*oVW4%`H)N
zJfK_ZzBR6bruV={nS$a^2LTjWk;=3$(*1A+!3os4IZWksm)e~yJX-C(opV%RT{@mr
zkLZ0w3?FHRvBFi86maNEGJ^2@;<T7zn!`~edjbz@NBe7!%1ZO!R>>m5q0#>6`(vPT
z3v<LT>n|1-7Qi7K5hUXsfey2m??Pv*)C@s#%b<e*-ZS^$;B82Hm&V^2*UDJovZG3^
zKg!J4Bo7SByFrOR7m88MWUR<in;d*)*)63QD6=Y+&hf_i(bbdiM7Dr3p}U#RG1sKu
zF53)J*Fgr~cVp&n0@rkNfSDHHf0KIpT424@NP-@)jr;2Kr?nliXmATGpmpx;4!P$#
zUjnMQJO?;Cd<aD0z}B$m=WMgL$Jrr3+z_CUY{BPs@CYOvN2SZ-VdE7#WG>$yO4F*8
zUi|on3-F6XjDZc1ZaAIDz$-?1ZioGYjHz-zw{_EJ{-=M|>?jt3z=%6gWP{4}A1t`#
zB{(*onc3R1FNX1v+(nqfWGWUSGO4~{@wzxc7qUUkT3%7f-umykNNU@87b?sIK<_bF
z0P-j-3NAblYOiY^@(!g~#*Bix0j;l)_(lvvBj0jI2;MAJ;tejQAJVg6><gTBfFz-G
z5*x{XMW{>`58Es!OV~>;vD5{^*9@O7mg$vT0{Xn^xU`;rGX(iZHvNO)*Ib_x$^$Rm
z>`lTJY}5<P!hmuF+!XQVB2|HsdqP8B1>V)tU=aZcH>j~-ugj(}pAE#fNt|0Fe`M+H
z=s-4ocdA$`Bt1QSBo>SK!5y$RQNVVM0}sZfl`Fn4qkQ>xBe}hPmzcleuGeEqks=<e
z(QHM2HtjYXK%qAUawndbUkK~O`}-iuK-JV0ht$mFWbBsK1PSM{8qfY8b$e?-X2aE!
zM{6;phY_(x&*dR)Uvn^u?QIj1lP#&Kf}@jGvp<Q1<XIbFmEi?)u_`4h>h;f^sr!0b
zzf>hyom`bZ(ajOZmvh;hCrfWS>%JD!t8_R}C+E8#8FKF+8zcpow6eG_?vX?RO!T8g
zLKTcAwQMaMEci@G_&J34hzOi*aOF3uWXHk+8CWRY;AnQ8E(5SLwdc=0;wP_4Ms_<u
z**91TN<xR46qkvyTM5Q2tG*MEb;NR+T9lj`Mp`FxqOAsupR$UgVS0yJlnP)VY%bK_
zJl&@<XgaB=rVQx>DgwY6v^mscW>aTs^*KcZ<u0T~ONkuFAEGrX{J@YSlr=-B`YVz{
z#!K!M2IC$DN3PH@y^+->X2(*}7hB^V8+AS{i+TMNo!7+|XisT0G3l#fvz!!$k2{NA
zyQa1NL<ZFTnFDDV6Dzh%Iy|anFupKR$O8$4plBza4{AYJPAiT%Sm7NNDE(MPLW{&#
zv=x?tK7D5muYWKA)Fccr;dZdzRaZa!(&mlHn7`~Pp%|<L;7knH&x<7Ma8M0Ih1uR)
z8DePEm9%<w<ixyIKPiQz|HFn|^@(S8CZto!(AVD*u%-c!u-F9_NzQjqfb8PDZw~;s
z(zP$?snY2JQRnr*@f)C8n&cQQ^vH35a7^o#(K3c83sSj`<uSi*p46Y4<}82GKH#qt
znn!#5LDihKtFw*_C!>|QIS%ZDdrgt7L*N4m(a43ph=F+QArlb=AO<~fXh37Y4FEhA
zppk!z4m9zww(?cL5nxwb|M>oCJKg?`ULL$C76`<WIE}9B<$f(=2f_y!SVq#A7pZrt
z29&74u_|q;7lA@Pu++|(2Q%wum6||++8ME>q%v2PG)~ME-ga{0(3cpomBX&J{rxjd
zHz2W50MJ#eVJLPGhrY_>*Wva3DvQA^6$JW?3j(0-(m{I|KH1=b&h}#t)rsE(p;yF$
z;&A|+@o@+6H3TGAfE^%ecK`}BU`N(2R35DYMiU?X#)|jUKm_nfuz_D@X*E?DFjnXQ
zGz(l@T&f9*uP+%BK+~a4jo@~S>P%RIt4X&pqL!m5u3lLZWT>f7;WOii7tvGpLQh*~
zL8AGv2b-oC_KJTy&Efr=_g)oW+>4p%Q|%1_q`M=59pKJ`momNJ8xxwyZGDX9b@h_~
z=)zbClwVF;(S3@13j~?$C3<VsB3a+Qsk0#`(+gLWs1U(LcWVBMh8}@rGaQw$H=}qX
zGazX0Kt4$UahS&<zdkPm6+WB*@*&4eSHYV|87}byQ~`f|E0?&R-<M-hFbR!;tgVSD
zV{j4y0VHzFZtsh~e;*<7JE!^sx3BBwI1X=A;2?~whvXG_DjlY34p(zjsH?ofP?A5u
zOv^XkglIvT%s3Pe9SwF_*|dO&J21<;)Zug-MR^el)E|-={LXK|w*Y<Zxs+R7?JkE&
z?r#N=xs7(&$@V|ek#O`0gI;t|aI_l-JH*`{&FJWWN%RI7&;&Tiys5b4w`R!1gYO;4
zv@f##VQrX9V9f-jrjp@M{C57H8>J`&>c7IPSao!W*h2fww{JhECr01u-*>85)!%P6
zKB`fvS;Qk}<*iiyO+w?Eo8&QO-3ww>z>9#Oe|nfj6z{3*K5GhPvf+p}O7a{(3n^dx
z<#YuCkXS|#VQtLW>x1?v0V{<uAA4ms3E6NYN{AlPe1Ff9HQgi5!h?x3UN18<x=#tr
z0YsdJ(m_;TyqIHc0pke|0?Cd)ZdBgK2atTWx0$|)3EK8$_hT;GHP71}QHH()QC1cG
z_zLvGb}9^lM-kq10}T$7(WKJh_PT-u0aAhS9`pr3=2<=xPW8&G(QJH7e%cf9*Pnn!
zn1;S87|5OeniISek_=vB5RQuMNZ>yRqkt)OQDo_TYvOa<dEWB6r&eFd#V@Qy1;^SQ
zgUWNQ2OY|x&lguJ|JxQ14-Za*>gw*se~-S*3}>$m6g6+?>F^7BZOSEE!?!qn5Vg?E
zWUPBUM7W~PEJyqlHLBFrv<4Uz+6M=LQyB+nEfmqI)H83O6P&^bxni3yE65%xy5Q)9
zu{k(Nbm(%X-Fr>wy_?725sd;>P@dGMa7n04PruKUSyG4JYm^la6ZSgK+|O<lypIP0
zIjNPXQf&~(mG(Ebg5D_*2WKm&$`~5dmPHrsXTl`(aX%Ilff)rFepfn#3x0&L5;kMt
znE-9*+9;~5ONT!YFw)o=uM_S+=o>@dz)&J&0`=9(Fa^D_x-VQcSu+18`ik^6bU2Lm
z?#jrp@nq2qad*F>I7n*Ysfjo`I{|xJ{JcgOn=;VOsUPg8J|4{zl|)|h2?M^dtN&vJ
z0{rLhWwzk#%>@quo0JFM!Y`+7>E;`3R>{vx4H>#nT&fNt46i}}n;%3L5z2^Lij?AW
z7>QiIJGv^ULAXGPM$D1+Bq+OA?)kX<V~~MlJ{ItBxJTG1Pn5(DU3QqNLg_*@@17@c
zKRdui#Ui0C!#q5N91+>>k(=}?s%!W%_ZN{*9|Dq_6bN^@Kz%x9m4cxsz|=G}JRA{3
z9$sLeiG3))Nn&mu9!_B@>!X7WB{CdNm#cyCd@y|*^-{#i)LceH7DzsiHCU1iLTT6Y
zN4n?Yr7GO7*~r_^?`-&w|Mv)`^oa`~Vy3IV1+0=5?<)+TVk7jW<nt0^Bg*h~vkAOx
z**Vm2HfUJHs^1R=D*DXjOck2%|DCZ@0~6C^2W}Ky^Xwsk4x)&%fO`af8<$N9936Wg
z^>d-_$HZ-VIDYfvqgBMH^D*M_N&A&UOC;rng5Bf1dO^mHM_oE&ePA4(e;GRBb3CH{
zX|oLb<;(yVbl?UD&uWJuu_7wn_X`=sTJ2IRvXPXhunl>Y?t#%6p!oTNI2-B{dFWbr
z$e;^(tAkRgyelg~XN5{MlU^l;#gpg`;DiZWl=6Mrd``LN=|it?*8A^e3u6#byv!-O
zkmGmQtO!0kJw-_muC`kexb1sTo(R;5qySv%qT8JT5=x(GS#QZPJd4Ignx%82X1d<L
z4=8#ahu~l`argejZh|<^KvfGnRvNS6a}Xd78j1+Z(*gRVxgV_#8yy__z#ShAH=)c3
zUF`pkk3AK$(+_*KN?qw!q61ALqAPG`&j<makMTk^_I2|wa=7i+8cKTE9I!+I=&VLR
zsgj$`6L$&_?GSCo!^He$ha}EW_XNVi6N~=_T4CU_5H82``Q7FZ+U;pfclKAEK^^f9
z25S+EuaDO{TlJWf2M|FuE|Jz}?4$j!8X8_KAFvN3x8ni_iBN!<1#QjWU;8dcH1zB|
zUKxv+o0R=qQvX|PrPw*Ti1T{Q(@&;Aw&!(zh;v<>jLsD@4)l^iQxQ#wpTcM_)u-Pp
zQYEr{6cuR%S1sTX<ao3uS@@tQ)xOgo#qoGU2Fj!?!no<2HBXPr4!T(TS5gx2y9RQd
z&K|nwjF$uTz5337?k2I}-~?5T+w^)1JHn0C1=JuK#<HguOeHc*{IfbavZwQCZLdh?
zsx~_cWU5U&HId_@cDlq5nBdy`l3y8Jx;=j)rm(&#xzKi<=>pbcDm)7y@*);`jq_WR
zy|Yg!|7KenqI~?7HB_tI(0C>;0`!c&zBnRA*kcT?V0{yYsG8pDd^|B8$8=u2HdZ2P
z@8HO>*KeAKSAV#{BjCvD`p(L3Pn9|^`V$J{n56xt&<lmP>wfd6sXaw^8xJJ{L!Q6;
zVRCdfm4S)pwGYvCs|hxUdGz4p8}^Hf7|JiEd4t?QB2U4fQ{DM|(dEeg-uI<voW%^X
zC<!PdYJt|O@|X#=U*y!Mm)Xi)$lUnRn1D%gNMRu}6Ga$@DsVEYbX<Q1Zv5RK>nw|S
z!N<b`1!!<L5cfeGh>Sk{iSL2*0i2iaW+2pxRYz2X2N+^p65Qt3S4Xk>*3!uCfb{S<
zp!|7Rf6=mk$JG;eP;BP-E9bcs7WBfc>QUix13in*bU2|h>e&tq><ZbX8g6m@fP=`_
zV$W!^-~YTID$&6^OM<2+Ea!5pr8cqRRuctBhIT~`coPzO;jj>?ck`qE#Jk@m79kKW
zDB(kw&%hI4)$YgcrZb?vDQJiN^#thfdr0j-E~MOW>9Repmmun>;IuIm1@3h{0zp#L
znSiu`yl_zJ$gyGNGCKdb+z4Z=@3SYmU66jvSIHyOyhsvq_RJQKBXYHLqA;gEoNoao
zbI#$j96(A0iXa!2Jk^<(PTZi%R9^V8IT-Tr#mIIKM&Qp7P+qd4rY50?jL%4j2Huwf
z>%iR(RKz8XrhJ+KYd%-~GbfD^Kf%4pXhGoW_W?2*4C5Yj<rg^H=G1>xvM}9!{jl?#
zlz^U%38<KGCIo*;ROql;r&`|1m_SOyN&+^`j$mCeV2=8VvN`e|<rgVTrVUMTf0SMo
z>Nr0(wSnAxK!GSQsHD;-y3Euqy%75ih@SoGj4|89VCY*#*I&}F>{Vi5r`Ca!GB#0a
zLN^zWoREH3(F7n%Y>#dQ?=gP_?<&z6kI8<YUmNt09?f~(0n*mBl`r=XwehI@z3U6~
zaP)p=^wveSfvL9RoSbQB?mXo919D_MKv19-@ox6@h6xX6yKP7i%5Wgw6`uQU3a)aU
z-C?H(rP8^L02P~(E}(2^-f!xKC=aYjYFxz&1g|w4aUjZqqOz;o+o7n~q|#yHR$rn>
zdAmSTX|!VX`^u*@tW>b1(YKB4?d{Wqy-ABTuQccRx!~b4h`XdQ;5iD_57N(-^D*di
zeSaA;WMU)E<0|j+ScVUTGP;vqBZE3oInBeyV>N~A!J)HsX1yvvmc(}aCGdq(cMwWA
z%~+U#<WR)(!%!K(K6Wmls@f1Uoyg_y>ZYK5VW;+dvufxCnY?^eI59OSW+;)-@~d~5
z$m0UjEj<MwWpX2=ocH#GeqCB_G~^#Dr{NE(<^e+yWR2n(gvP!S{WX^3tjsbX#D-sj
zLSKj-DPj;YhnFw6Wrv&FKF2=(xo^Gt=EruY5H+gn?w4DtrRbKGnS{%z7HAtVDj=V4
zMluaP_0#$CyK6W^KdtGEgw7$7WS$I^e3Cd=v?y38;E&#0W(S0+#hvLqjxVj=0sqLw
zBk1!`Fs|C+=hw&vO(qZoD7j;RY=wv{x$F<Sg*x_&pZk~>n`Y-AAeIrK1a5*Ppn5Of
zF2i59JYz%|dWVexywT)hP&J8xm$kL=JqomS2cs-B4!*l)skz%pdWoOM_jh>*1qP;s
zNyLIEU84D%4tfddq#kZ}8hlWUf2JMWBX1UUq^JHs!Lp8}oKa=-k33ieu)K51bJRR2
zp0>nv5%%7i_MAyQ3#68cUR-lGcZKwNy>_|b7&;~h#bGFJh*^vVN=8QQKKUL${cvff
zFwVlFc7apbAzmjuWsqJD0{9=Gch7RYhD>}7{9<Zr8>LyQ>jxMM!eBFljP}E6*zpVs
zAhmlNvV&NZE)h&F8Tx@UaR16=M+lN3V?<~~V**l**=DzL#b|DZVxn;0@pfO|b#l6A
z(=XwVSp{{kdx2-=|MD2BT-Y&iC35!|>a7@4Bd&>q#74lJK!`5?jz@-^v1ET^Wd#Nt
zlTFVLm-`Kzxotq;MwjUu0cG|V55WPg{m<NH0j+)`8~Yt(ZsAee4mZ4M_b3E$5zKb9
z7Od8K!UhtU<I(5_KOTY&<_%0Z@0<}xNAMk$`TnP8z|*Hls_@o;_Gy_7rQn?u@AClN
zhS%j!1$P#Q+Yqu~4vwNq6{_a`>+>w(hIa2V2VOrwSZ5GH#9(BgqW6=e-IaOU+IKvX
z$VvoI1)Pg1i+4|bg=uJLR(5xbhD{pTZi9b?L!eB-k4xN1#{ZM+et@8W3o<P9Aa#uD
zS`^E0@%9JEr2cUxOkmZ*fyyWO)V@vPFbF4mY-bEYnR&LP!Erp$7n8_Jl}c&p>5^Db
zxC7;_@`Xnfe3pXphTuOVdI!FHG&ru0HaMD=u4&i4Bv5=Wj14xA(xkzlonY`GFP)6q
zeS|<kK=cbBZTj<fBKYt-A+qGiZFT{^wFK6S6l<3Dls}4ZZ+{9j13B@u3AJ;I8~|Jg
zEg?sbAY|_XwFN<D|DQMitC#+4PIvb9_kk3M8hj4C0Ci71yI!4TwKj*G6nL2m{%-&h
z^dyEG@!GEs{_~6iI=Jbk<K7xrK3KuPQJO2IY~zpJp_!yHuz6YYF515$)p-xfgkyn}
zdlCU>navuAFS8lySGz-Uq~mBn`uBhD9102wc+9%Ev{W0uez@B0;N-NX{Z==(thoy`
zDc&1QpD}=To$OA@4L>>O{^tNY!UrCNQfU7S;4tnX2!+E)goTCQeN-OS2QtJknRtfP
zo-q8EUpkXNzJ>SlPeX8R7NwDGeziZ@62SRa48_oah!OL5^EO7Dr>X#WSBYUODaf<V
zJaZf~PkZW10e2$=%CQ<<4x&6VusRAprk5y5>(Cjw{`<?=m3c(t{+T)qca)8P0yG1Y
z6>6IYfR7vi<~D#r;g2FVt6U_&6yfdE)71^fcQ4W`E&6)ji{$U8_?_P#&3|Q7DKHDP
z?N5-6z9_Qo@mx$WtIOU7J8*a?z#q^I3^uuEE1o0CCUcbj>k(i&xMSVUMKFj!t7U*r
z;&!ko3MP-kw`q1;p7_C0F8Gw$yW{NaOfKlIoYvDF_Gj_}dr6?XLXoX9`-lZ3Jqjle
zw{9&#jS<K3;m8Ki;m|3rjag(nF)wysU7pqIuqEfhl|cpQUx4$EsHo^bJY&o|w?p%P
zMtltfbr><Y|BTx^YFs=#KiNbUYC%E$ha^RB<+Qbli?qt4M@N-;zpo5#!2KY3Jvl+@
zmg+|dz=R54-!<y{yC$f75J7@h930NrpG*SSmE9+AlT;}%4zw1JQw)Hl^n#wQ)rBWa
zSTsw}AP#)D8|~!YI_Rk|nK&-fXYiN&Gq>UXtbbQ+3hWUYxD1H8W48F-7?Sl$CIdMd
zCaB5@0h`av%SQbayW2T^1`5Wn4yQhrj%SGa_h)L0ta9C+|6u13AwvcfZA5&0d<jWO
ztDJ^yZp#>HNA8b^!SSnL+DZ-!D<-lerbIHUeo+2_(-!%+>%kNiME$2}mH{0gy#_BE
z0^bYa?GYv9eEs8VFIZy#XBw{9SzAW{EoRr;90@>Nh`K(WeP3Q(UG)RDl{rA#1oT_u
z3gwQ4e+Gj}50Pt`6X?ZaqW#tm4(xEh6Gi*cEM$EoxJBXyqD6+>idtJ+XREJ%|H7a5
z%J%_y38=J%*of=+XDi+|RfRA+*nnh|=)n`SH<AcuPkpc10-+d+5{@eWXNyPkOZiSz
zW%q$oGx)^kIRZU(j$ip7Wtbl@MGg@nd(CV%{7z#J|IazNwzH0o&(HzbePA1mYGZNT
zoh0UWqDxCl!}4`;!2B!SgCGX~1`m^bL*4!MFW`rP*yNKxZWt$AqJ~8X^4u_#1ow*+
z=x`dpbKg5Gs6-MCTlHz!suGSJHGFl6u>5^QkxKU;@m>my8~%tlZiuhhET8<uh(TQf
znA#@iqAANe8}IB?(NDRzufmFhWwjY;1IMzlPqw$f+V*1vgElqhuNeFIGSaKJ@yahb
z%6@g8xr?4dM&$Zf_@HL8BL-i<+pI?$I(RFydw_rf|2yBS3xfMCNuE9MV>0_0WqdZj
z@3mJXDQ~#x`-090&cDAsMI&Cj3_^jPUSyR2h4Y3Xqnl57;Tne%%G)o7@`5i`P*YQr
zc=pU`51-fli2l!LXHp=Dd$ohd8!rFQ`1?;fh)rJk$IVLB-i4nVt<*)((a<`8s?_md
zkssV$D=AYlehS_nPUAEZ*4EX{2F}LY^R>kp(+S15Aj>GbpI*IP=jYG&;0U>cLj|8x
zO1uwbAdUYaSkOU$Y>@>h5ln_H4L+I))_?wl3*k%kP6N^;TgI8qOaJj>b5cCz>#H-P
z*pKSKMb{VvL;$YI0p%Jq6}LY4A~SW2fq4wSVV_@Ku7mBfi?<Lg>kBQNGQ8U%ltLya
zC$I20eK|WnpA8@`CZje%uvum2%sW*2(jI;tCev?pLIH~;I60Zf#>S??VYRD$sqf|%
zCwoAO*zzJ?OY295!qZDu06>7OufBmnrTdYI%l4?~Q@xM1;mI9<^T6e@tsF@qL<%ZP
zn(5y5T@C{-1w}NdHVMb6Qy$w>L@;oZW7FlqZK6Rq(GB2jV+#w0ZcT^8+xhyAw!`z$
zaOI?iV#|vOf?u<n3^F1*l_o)GWwJ(|Y;0^NIg<Jj5_k=sXJzMIvVKl?v4~>}1kV}Z
z`y`ASx4^Jf01oGTjAtYhbB=7nhI`Qh8HfWYM4j`sBML0ojt2C@jA4h1_h&Xu-v@y>
z_3U6tJPbmQOH3RJhGVCVUO#{i9}NRTtoG%U!;h~DDXFQ9{7*-2H$1Axh#Pf3b|x5C
z5xYJ<K#RrH1Sk1idjEr_cs;P;iy(q$v-@?JIq-j<b6JoHBUH8&ee>AfP(EEiqn>?b
zoL3fp^t&H#pxaaM$R<7nXQ>DdGLx|lxVRr}kI}wbh!YPf)RA)9V%Dyp8hQWpv!D5t
zSzj`U0*(2Q-9KCKd6QJrgRU`XXOI=iDt87}&!M5ABGKghE<iS-vyN=o;_fH-`gjFI
zG;0y}Z^M6BC9Z>uiv+O1*4NjM%>DRmVg&9?U^`!v!tb0nR`ZtZHdnABl)4%XpLS*T
z`1F~|$XfuLSXt=|Xe#DUW+U+fN2zH~D4rKfj9DPRDd_K$xI4YVj;~%lTWWGWt@O~(
zr^Ds*`OViCL;1N<`AtWxJ=nTLd_bca+J)t$qh5bb!qt7({73~6L(&lk6B7xfIt3A3
zAWC4*KbN5B{-$dOpQ=Z=RD-gwmbr$gvmMr{zsddy6ilhXwCFyt0<FvQ1+9zyOh6y)
zo1Ll{-=uzEREX|;4QAUmtsh)R2VCwiw0X<oQPCW3Uf!X30mcPZf_C`MP;)79<&)D5
z1M%BucHlUnCB|mO&xj13dcQ~tK4%iBL2XX?KAy517&ZPRpGm!S09fJmHu?B*UHHIg
z=>#8>scE%rCimEE^4r1cCom>dcnDvN<&ZU%sy45u;-gny{-*SNfk59|*?Pq3jt0@k
zN5c^{q(DzHetv{P=;r38Z6@yEX0(V7F>{3YH=~N7As}{AcN*MmX?_{<eN|l@dFt}{
zL~E-h{;qoRZ@W|VshN7axI5_XQFmre48=?3Bx}k!W<?PsDG!3n5;=3ShP(T~e_Kkx
z$ZVoINIz)L&rk&$KLm*P2-2ALKU{#8XE1Az@~r7xnt3gvJ*e_Yr`?|JFK*HWVVnEt
zv9L$T4V}}$#VWG7-ccs#bpgoI9eT(Od1r)H-n&`er>lzh{y+BKGN=xvYZnXz4+JM9
z_y&@VLlWHGg9LXC3GVI$cZWdm;O-DCcz__m-Q5BNx9Oea{k}VQ>ekf#F;(;9R-HOk
z=fK`{ukK#G*7H1THJ(R3QKL#rSO6O)kvKe61~!~!IV-$bl)(pGKSJLh<Zw8@p23xF
zHwS1WhP>C+E+2g;O19Sx8(_tL#{_JE!eD?F_0PU2%}hcQ^tizQn?%8&tfD9KNM}^Z
z4t@)a1b)plTkn7W{-oT7N&x;D_7ajNWjPW}!WnB21t@|dhbzNg`m|t{?@$nQHjc>6
z`+uhK|DV<PYUP%}<9R~}dI@w~AGVfZ@^aTatI>`STIt_{(ri$I4e|nhPS4Eh2fNk6
z67bDI_;d+Z>Fl`syRtLIp<u_Mz;;{<eiP@=NXtT9+1S=7DHIils%<mfD+09r7nPJl
z2zNeO@$bjw_jEtq1EP&+PP=z?TTJSe2z6GAV&Gy`;*6;6FOgz(Ph!druvUK!wzfWM
zl7k<R+PNYiAq7-PgXiTGYR%O__P(uql2?TU$a4;W`G;g=kQ4K|;(;j9f8f=k`$>3}
zXhZyB@tMP;XJpU8*gwE8XpNGAwgI}Hm(&4|NkTxshpz+sSEsuYDQpZdQ5u+%xccD5
z(dr0zU|?^dS##Wi>2jB6Q}(*iT%O;3I1e!nrmFxPPrh<df-rmt3N>ibuHphh)d=JM
z1RCshAhEMdW+Nwmz<+=9%5uK(OP@`(wxx36a)<j<){p&JlHLgD(rv{==KbxJAe4q`
zR6{|p0DlZ3HrV?ZTc9-q=-$7b@WY@p$Oj11@;T3e<^^`&wp{Jd;n6Dfme_vwm;!T3
zz&!yE3S3~qS(R=Z^T&gbh1H~YZrKzEjvB;|QUb|b4u#@~cwQ-+O&@es_qQX5E~~v2
zvqVrq@3J3-Zx}VIB?{6K8MWK<(mg|f#xYCpn{T;uMjXvsB#`ARImRJo<)?rvwF9)#
zpm;>*Hq?*l>zru6H>D8F+Io9N1TvwI0O2Xv{4yAbNtOko4p?SyJ`4131|Zo$1evwS
z`}a_AX9qa$&t&R%1Qe2h)Em|j1N4u|jC*^TDe>ubL8)OlQ+DZvIwx4>Hwbg{dZFU0
zph|x{u@1CfTLB#_w?M}g)3JOX+!t^1yYxVlqYB$~Dey?V)(^U~4H7|eJ2@~&7(GF4
zUTr!53=s{_yB;}IwFf-ca0E1L)Nguu@OWMA*Ow_EcbNP)-a~xXGCwrGNX09PwBFyj
zv0~mH_cImpT$X@>C`x+xzH<GJ;VKik_;Vnz1@DGDF{)_zF#7!FbW*qQF5UA=k|YJR
z8=(b{Tx3Qpt6ed)1JRQ@OkvimDwuqo!|;fJULXXIW;jdq5%_{0E-#?X#XE)*x}qu;
zsix7YXGX##EhZRJI310rSSj_;E{Gk9dI090hM=WA3i{wY0}?tP=jr|hQO_dr@Mm8<
zPef4?FU^3opcg!uvNKT<3gX2gPHBWV&{CribG-HLiVp0PoDDda1Mmj;4rekZkV}^K
z#bQp!uvsmHfu|XZDAQi5hNuSLs5X&{S|>ILZV*fUBsem~JB$k=g`S-$-*F8!nCkNO
z<nWK}kHUxSD?C-F2eZOiaik9wRnL&(0)haX=Q8<PQK9&BNZ7B9zPbEb60F&ZYmKE8
zP~i2t`u#z<_9m*g{bH)Z@Z!+xKGdr9R;9VEaw(3Ir&2y%wAkXSi2wdbHnKraM9EBz
z!>&qAFTPd$$>z{1|NSK<-{l%Ebz1Kv=OqP~^^$j~Vd(#TOPue|s#@H|Qb}fc&Kg@r
zzci)*ierzO2XU7YA|C3$gQxVY7GgMsHv+($X0!^PAdCsZeesx4x22eeLnH`fnL(ed
z))tM@uoXmi;{D6$--`}J`yU>*-baAq;-%F{{s4E0C?3$}MPA(A=uI^}z3~w({5{B|
z<DoB&da-sDh(3I+m*@|KzvP0RWDK}eGS~jr>?FdrSX&hZC#c-x+Hr5DMw(<C8&m#6
z_RZIQ>@-Zi3xRR)Gp;T%tu}@pHxciONjcSkps!~RU*7Nu!-K2Q7022^wiQJ3AQ4ax
zrhu6CBI_hS5kYw(DBOuVExr#LxBNgo)=e%G5x_1JPNp+DxCSqaumE(B^~Lwp7i6hl
zv@SCk*89Y_!M4T%r==U%bG!#}8krZo&4~&<W)bQuQLBJ}mLJ*jeOeUP%-Fvz5b=^R
z_xFo#9MbH@TU;X~z4B+R5b#`ryRL;hA1kmLFGG7A0O+5iG!Voh-{}mnzPGw7Ypn{r
z0B!dC3LoMeDZ<l^o9z7(ya}=H57{X|VLa}jFfF3zTNj4{fvo8_PN2?D<#AEGRWIvI
zRA4$TP6RDy<lql1%Nc}xo%P0w)p0>Aub39H;ty%}55hXGk-gLA;m`WyWW+L^D@z16
zvABzQud2WiIkt~jUyJK0?O+;j5kaA@`w`;Z-L=(ejoikoBjV`ABXE1Hg2y&YE9eXY
z=ry|RL|Pv7*+F)Kf^ep%tt<Rc*k8(h=ShAcN4hR~GVioVgBx5=nHF0~m=KBjv$Pih
z@5sJ_w;h)SDFg*-i>Jz?Bl0@t^6dscCm)r8w9#!`S-Jt8Ni0~gTE2}Ja3FGNMy+qm
zO>B-0!UcsR`6?yPz!3}(3C1Z{+yc#LpmMI$W|Am=pm7xKq0rIZ6FAXhP#B~YO#AX4
zpm&cd6Jt2kj`h_)Voz7Gz8@Aqr8;KO;Crcw@T_0wyE>e4R|vl2xw0)6g+VcsSJI|d
zP1(Zg&&l0$A~;bV_O<>wpsA0S6&Z<J<*ocxjqnXuUsNkfx5+t^AS_Euqs3nIv?)Kg
zmK2(Rm_h%H1Ycf6Hl7S$K|ckEy9wIC&Ip7yVUGgep^zzrINwd6D>gq|WdJ5cf?EIe
zTP+II>*gpBhlx?EKI0<}_DRa?4_OFta1W945estiH%N|h<3!g0oEhH}U=br)OiUJ@
zv_=?)^1Bixew7JaiOQtJwy(t_3PZ>Zj;v(>HgwD!jaV!y5bYwq!A0W+-csrFJLw_w
zQd*#cGzFOi(-%?)f2~Ckv~803=%ooK+QhnE^d*Qb0tFf)9&soUgIMqUD=5@S={8Q_
z*Wh!f{atg90q`mjI5oK7)G+A;K%9e+gQ>9Zjrplhe4G<|kBBZm*U2VO@~niD5fhuw
zhf20Y@?G_Ec}?+Al0}LdC0@SagYRAVQ5jhEA|oh>^29&{6YoQ8vq${g3@v;}>kqrq
z8P!9Z?cLMsaBs*XVVlGRrni;9@Dks-NUq(~2NAFM7!W<|sw|K1S^>H4So_a~6I)L?
zJSBDWkPzC<Z|g;$U%`jm<o8BKmUu%#RW5~SPWudIW7dl6>D^DI+@GF8hFrnr|C?&*
z0BIJI(W}agO>ATtO$f2I7u}%5mZujN{F1KlgZtQD?&A~AGa8+Umw`bS6guQM?#c+!
zpShic2>cVMj;g3sf}In3d8i@H^b%dG3QbBPdeL3w1CcA!5b<F8(#gv5>Tn;(kusH7
zFbd^QOHM{AQkDcFY$LwdRkoFP7M$HxPKP@9PBH|8wyC`eaH3kZUu3Zn<G__IIwQw<
zU^r_f-V+8keKjd8-Xn+0#)27q!Rz>&I^VPY!>XVih(?e#BWcizI*rcVN-~7Z-&iMR
zHM>^Oh(Ra_oTTbpP=-u9=HslO5fenAm`h9+?;^c1K*H^qkM#&lT;UC83#}JHq(t&{
zr=7yb^C0+;0W)w5#Y~cIa;ol|#T{)I?f(M1UTFkCGevr$D`L+>*<H4~JY=*YDbb)f
zA}WJp>XysFJ1**-!TA&>=W7FX_37VL*+ab{mL|4?nk)Gd^s&7WzeJvA^iBg0yHmjA
z0<NLswc<tu^_UZHSL&89*JzXGzfRc6&jMTC2#)3?+8qN|4ow}e&zC978)v*JmO>Z_
zU*dGPtW`yKpNcP-xF_21)rvC2plRJzPu;msl^dJaNT2Q`!<{2a&-LeX^{_qzwGFXk
z6Qd(qvWFr~i7!Qig6qqxI}u}3@H%-lHw1(84AhxJ%OUL%^zW%X6XR&eXp9u-TtreU
zP@p(G@&rSWt=^_5z#;L%P6Xv{UXWBN71;bzpWOoxK(Ylk&(0^E_Q$>0B-re0LE-Kk
z1d&q7>>^7~1a(%jB%-W2ODV63gIPYv31GwNyn*l4qFxBY@sjRKaFN=05<Eg}BfAz<
zFc7}t@u9(Ad?&U+iie}CqZ3jtf+ufe_0CF{`dZK{73O-<41bdCoWT}BQQiDIylhOp
z-}fxJmXD&2k0RHw+4Ut?EE#rkn>VQ=Z&LC<9gj;#Ab!8ELxHX^GB8e8GRKwKM4&-!
zNwo<YD!1avkg#2Hz`Jrg$rmqoB-0&0+`1*&HjhyY{KM39TfDa)UHjqX;mgJF<g-52
zee?->k}V#o!Xe@v?O!-RgmWlzC+qt~8XX5)bL~D<g2FCju9{LPbU<{)mqE}3bh8JC
z6Q9y9i+CA(h)}&)%#qutb0vmS3=$KhNAXCd!T(KPJk|YkT@qtK22!SD3PInh&<mz}
zT@ie+VQloM0zy%!D<3#22?Q6Wmxf{gKkUu7(YGMJ@;byMxHC7#nR*2k(t5Z;L32%d
zsU6=S!b3=@V`#qX10lns3P?b?x8;#Yi;esV$(5+=)QY}mvI_{>Ot^gek@)f+$4I4#
zv+G)c&r}>wevPsgIG@%*nBN&<*~WCZuJ*=BhND6X3Bs<-w_7KaQ5p)Jp=EM6GAR>v
zh__p{eK$KzWiq~A+(5h<&E(+v0&HSU?^BpD1^*e7Xo3o*_@=hsYcU?&r)!IyZXyJs
z*qg}eO?}wJM_d)WKOra4)q)#%mq~glBGu8(`Y*+~QjD-c6oHI<sX@r{-NN3MTgd1n
z35BEbBAh<s`s<8-S^A+X<4WsSGhLHiLr>rlaE4R7znZyD&-PX%gYE_XyCFB92asPr
z2~s<hiNTya#^zqJvlT8F&|NttWBEQuZP1J$<)vzCqPuQ(0-lWWcp`o0wuW%?Mj$hD
z{zY5jh(`du4@e!)QD7GlzI-R$$M0$gb2ViZt{oGw*tqR0s<rIBrC3X<-`RMND*!&0
zEw^C6#|)1-F$kT-U}-~tIIFF>s3pF27m-4?WyRDzw)JESf+Xz9Xo2A-x>ZSb`(Hdh
zudWx&;mPxe{*3Hf?%xvcHc|!WiuidOMr}vF`%B9G-Pm`A*}zZFk+-on6a8{uQUJIH
zrNaL<t^v*1>X;v{IW~S>?J~sytQL-9?N@@W=7%SJ{j3wq90?4362)5fkaet4N#uIR
z_cMG5-&D9ZovxVSY+wm+y~6<y*r#T!S)~f9%M|FpIRaBShXVX)0a7BzTV2LCx9yXK
z=_EYampC%Kp}z{I@frfAA*P3+NWX7}C0za#%w2~POk+}hR}p)^=#isq#+Kjw6l_qn
z9#dRkP!_O3VW?)uNr5Mram<mypz2_QV)%JACVaiq@tG8QWzBA1;{FuFf|M-+L~@j{
z{2yV0yz6HR5(`3#AUxF)E4<dI8%7Ny{zyxsULNxQna2NDt1(ZF83zF0B@pvQ-M_pf
z^8wwMVdyXT4*<?Zd8?yP$s}RHa{53r&-V$8DY@w|OdOPJT7!IP^mj4|HS9(|n7(mC
zw;sxk^Z;eeZ01wmAp17}^?p~?pK45{G63|tHP`S8{E@s5y!5HCdnZgJ1E2$hZ03X^
z1PrD*?<yEb|Iow;$jF8uGbM$Fi~dPst+1BTez5PYnbI|w*u|&14K+|@01O-9_{#wd
zWC7{E8^h9Q0OZ%Ct``MpIJZNmJy&moG0w*J=X$HA!otDv1+<<1T5q(5N=Kyw`7o&Z
z0vtB-L*&O}nT{%d&hr)cE3#w<3;FSGY*z9SO^*{1@MsDFO9D7a4DfgIba&OOdQf}S
z8;exSAg^DKtr}Me!2A~TOP@v0YmCd|^;H&9N}})nwdxUvfd9n;RdNoQ2z)|+yoI#4
z8{1-ywi3f8U`f6<(r3U3a8Qicad&$i4Jd$H*S1f*VoSZzlu-GM2cXK;4=7Jui?s+u
z{(M|013XR|#pH+=?a^g$XqjhD+L>(&W_dU`KnxBf)shK9y~)WdKX@<+-4yWk5>+Mx
zNj{*A(hwxBF!@Leul~LzHU~($;U7L6sWDT1ZM860QhC9Q3XFX55-!+ZvBllx_x|i;
zB5;@w317d*nkds9ntB2F7y<a)=WV<x_etq)Y_}HM3Eq$&iCcr<)yei8$yoU>Quw!S
zodg`RO90&y2Qq-+5>57nrq$QHe6W#OA;1!vLggX|cwmx{#Q?!-{Yda(f5m6eWn>97
z##d{wr3P;;?fW(B#R3;8(Pjsm3bAyv)JmEx)A91IgQh_A3RSyZnND*QkBcn;K#=_(
zJrM&;2{xq|y5aAb5)|<zP^1NP01yBQ`FDjrSp{qpA(uVWYJQo60=7Ge;B8YuBFRa+
zk?6d&{yjF(AjC&JDCqf%H>vVE6}AXPAlu-nHPmyf_yA_R@B+;CJo)Qe%5(FB;n4&2
zNEB$o27`7Z9$5QskcwHa_u&VPB!`I$d@KR#4hZO<38RDnh7&d^Q5yu?-RJ@W@ckh1
z!Q#L9^$<u?!jUma2{V+<g^Unzs3g2WYDW(6JWw8L*rxUv7q*egg<*Sy@Y!6|)6qAi
z`0`=XqUV~Yzm|n_WRh{%E$0MoE{^7zqNrhq0`|{?svk`6cA1a?$OSv6=P1?@N2F%2
zCPm=7;CB0us8AE=;8fQ0AL0J}byR0x@9B*vRi~4<h98apehG(|w_TWFYEnNhJf8f*
zH@Ub07)1gKS%XNp*(?`ZWSQ{JyNS~Q%n8PKk$xVWyzyi(kN6C><pkh0u$PFl@zoQE
zq8}i}IfbDryrecg4Sm9dMW;gVAdS&1e*uAckO!#s(rxA^q0?8p2Nz2xe?J?6yF|Ro
zLAPNa2|f$Gn5IomF#j!NW7T%_0rt1ZeY_0P)tcl6m|K%dT8UTxerSQRjkDVg<oW_|
z)FBFbMMfHxBai&cF#a0gE5ZO9?6(ghF!}yubyQ0naDyxnRR(X)QRM|HI^^R9s3c>^
z!LzGDMC^>91%MxL0;}7jc{{Ef0JTf0ke?&-f<+D92r}Y-M{L#z_v0}LhN8S95IB0a
zP!@BP-wFUYihw}__%1}4^Wt*c3p!tL!vso{E`af36BCC4cR>j}L{3M*{9n^q$Nw|^
zxXrgs@b%!I)E8hbF7MpiVWuZuGr^W89vC$LJ5Q=5EVw_5TPE!1o&5Lrd4#}Hi8EJ5
zK~dxdY^<Gs8QWvwRsFRuhv+~1j_K*W`(r*haN$PSJR&1=^nQSdhfFR>&=U68*MRNs
z5A#rxEIe5>y*@ufACQ5qB-IiDu$1NUYR6-&4DXc(RA|u0LjU#Ks7V$TCbf55yyO>u
zmNUw`9~h%PECQ2D!W%v$JLB$&$i%n30kJ<{B>?{zn|an?$o$sfJr?ud&F3u++ngw3
z1UQIr;Hw{F{_l<Edwb%Dp!~n@U&8xmo40;G$uNfj!YT-`C4;;B6dcT!-rxWTO8n=y
zU&B=~oDEFq<{=}H!8R5gj&<^bO~S;HBSB=aD{S!a3^O<+LZ<(%3WZ*6R~p!<18RCY
ze~kq@S2mGk>7MLh=!freZ2$KxuOMK9h4Y_vl5H~&<pn2j8}1wO-#@7J91Pvq-hEgQ
zHgv=;N}k6t|1rD?Sf)RQe?^c4@Gh8d<b_W)oLlY5Ta<011rKOX9?v%<`ysq0$HL*z
z_ES`+f}Mm5q<>RhB=k3@{_}s3!Rp@Wi&LIMQoR*VLm!J-(#>uJBB+pldVmJ?e6Qvh
z48B_*{+;Gta!KoBOoVq-e=U^)ELDeH>Foq|MLR_n9k4*-ipe_IF-YWp4Q1v{(f$07
z|M>vy#1dZMunR@RgP}ka0&xDTurco;4Af4&()9Yl*D?)jON{gDIT+4Dj>TXjG$U#B
zAYhvn5w9c37Xx_e;b8A+0=IX&Wp6q{#zD*NC~s*5$5idW&n6vOt_he8;u#VNXwXm8
z!_7h$)f))*xbixns1_i!0lQ1LZs*tx8up!XSaK&3Rq%#j%m(P(<@jK<SJ=!c8G5yM
zJM5KeuV5D8kP|?Nn~k)h5Z}2O<R5sU_1yYu29D~QoD&f*5!Llja2_E}Q8%u;c>UFp
z!d0ZT-Z`8M*^`i6)w0!Z&Bzy2CokSl7a*c}X%oVZ{mOKxLY1IwXVB9Q#;4*ZqW)}N
z8}QDTE7Vz{k-3#!x8#hr8<%(#9l}wxvb2ZlU4E?Nw3<Y%X;;ee7dz{8B9Yi6mCo_i
z2D`RKg9(?qH6;A*@D2}mS8nSMi@b1aFVWV8V{5~YL^GLqrnpF#kDxLH;H)jhA`Co-
z0*A-P37viq3_FUG;hhz^O#@33;x!ze$p3VYL(<*2KofrPSg=B|i#(0SETN=pxJ9_)
zu&y}>n-|IU%lB~MO-x$B4jtE%t8n4V1?r5CjGrTTTu$=MLFKo2s0ITTzo5HJ8vl3v
zmH^k>_Xh@qT>2<z_;h&2Uqu8yDCbe1rO%fggWBC^ubvNzOocEP&yu{u*W(%Cbj@(~
zh4jPL+Zg^GE*?08x}+)Q++a;FfeRby*?{F-2T~;pXwZ|qp`O03#ntWDy!`okwr6!8
za&|b}uIQ1@Nqzeh8M6gIWj=5Hla;Q>K*4W*ztmfX$_+-Ov>L6kjcMaWBdxv`ncUs1
z%As#@VzHOb3+Rmt6l+!ERH+UK-F!ScGCnJdV;4EonpW01a*pz1(yl=FokcXfPT22F
zctu3u&(Qf}mz~A&ms;<0ez(EB_wzOQw)gDpGi>jlFzVihU=*)QCyz@{wE5PYU~k@X
zlut4p2~^<AuW=rEs^88(qo2L`Y&zS`nu5i}hc}eYE8ew(AD<USkK|-A>pva4xin|B
zDgPQgzVdiCw9aZFL-w{dU#%Jbo$RM@&?i1~GD8oKUQs^2#_3uI{g7RVg+?vsflz=y
zxnw1kT8%ya!9qizoynm7;-E)w+AE>}xu=;CY@#Z1sT>s)J?S6sqaTV#v6wyo{fsaS
zJ^9r~B3x`lJhxMT1>{7vTHS|38bS<aD=Z|UX&ba3pUoWgH1IP!47^_Zo<gKKY0)*8
zP)VclA1#2go$@R+qyBj2_$k;<UJyMt!Effbr+F29Eik{r503xUR1!!j=d=sPOT8gP
z3xhuz^{!&J>yI~$?XAXzQE?<=Ux+5(7>_gwze0$^6xh0WT7NQ0B9qDu_rt8F?aN6b
zv(bv)-1Rl7tJ9tz=i<<}yau}rv4Us4S07Zy%+=naVx)Ai8IInC@1V$K_k~+;NAfF_
z+H&I2Dq^`jT2mGZ%%Str5#4tGQeirK-kZw%>dIk1aO}g|Y_X0{Q{|?9v?kv^UEcR4
zzEWn~yL4dZllh%VyEz)i8UG{{g*p0^&ZGM`7M$o+^lp{bPV%ExU4i?9TZJZjo9cs^
zXFZrC;@90I!&V~vMgyO)zghSxv`D#(nQ1&Rew5Ia^wjW|U=t>D{-j=9sXUsoUtg9$
zf-eeG6@LE8q32Hfn#JL_(v9<PWa>`{_+?=%nTAoks%$cZY}k`!T0PZWZ&?i6(Pc<@
zF>b{?vqhr#NUpP__WRxsX9?z<DwXMy{4iq^uLOPbE8j{J&)H$cioNNc=+K14QoHr#
z`0`nW{8`?%hX=d^pEw?Ut=;e5*)Q6&1s`vjcMK{YW6sC6y?c?zg+|p=1zW<tze`B@
zZwc#;`tD#$$PNdv&giZ|Jh~>A6C}_gNSOl7omWBNh~&`>zC0D9WSz=9i{Xd-<2$Tn
z!A>7pGj_wSc6_x)o8X=Gd2S~KdO4fDdkZqI*W3AQ-IdV^R4G>(p9G<5)mT!VI*KIU
zqcNI0xlnsGf6`{~xLu*AOjx#G9Zs%peKQPt`U>e;jb)h1XHCe;2r)KtXFoNF#AqF*
zQd});_J*?W`(F4;8o~E{H+(_4pXfXs<bAxgoNYaUt6;D{$SM)V4Ch*lAr=z%eS|tE
zv@e^7Cih2Ib=N3%6#Ik4h%16G52cqux&sQ7{BeA822R~31QDJ|;=~%YZQV_^I3P!m
zaug!qN)lj3K5RYgiQ$y~butnwH4se&86WRg9obK@jGj1IJHl0>efIJ53nyqKsia^R
zE!`p6>?&6+d`R4fvOBxh&#El)=CRJ*=%oA-)03ounYe*77CnKId`cdPY#JgAXwa4u
z;cp4x;(8APNMGOStD^Z{{qKJwEEjk&T=`P%h5%Rm9mClQvitFA*8T~o)vbPPKmq1u
z;2E(Z%d7R*!Yfq43bl$)t1&I_%R;4j<bK@Z&}7sP4Qo=1xO_Aj^Hxw}^Wwyzmi(CU
zEPlAsPCAU}C28n8M)W6<A`uqmeDzNk?e_ys9g4E-{eKqTlBC#+fJT!+PwpSmr#48q
zgs8;?F&>)$2PO;2E!J)!xOGEsYZ|vZT4cH-VyyihLFPz{8UDzGiCj1V{bK!s=@3tz
zDnR_8+NIb=39_3=T!vj?IFnVdBN3HDG-)LOnhdGXl!?U7tnWa};?yec8hE!(ciAO=
z>BCba_?M^!+6Z?Gc7|078V~215m9I0^{JrrFp^Z!X3uLl3NQGkuMT|Ijpk8CtKOgJ
zp1B=*<(|o7AtKZ0vY*R^L?t=(nafl0mP15kC|P$fL$;Ys;zD1@Og)l}SFknuR=z+?
zba!zY4GJE@F1u^JZ_GAmHRr5W=Oxm%6uU}iru3@q$vhn91G+g*x99d2BN#;I7APiG
z;0m268gvB_RhZP@WilJH>2ZVw(*i~a?&<;+w^8?#C9U#bM3hej)!W4h!4Y9;^uKHM
za72s?#3ZGW!)k~Y<KYeX{WPSMLK`^MN6Sr=Ir*CGmIbSn45oD=;jZHfFUxZZzd<sB
zkfrmUe;$j*kz84)Xm7vb-973b%42amHa82ymL4^YD-C{zVVWUT(x(C^D)KnEgT;16
z0*^*Pjl_>e7m6j$L=rsq(0G#RYZQkhM61Cb5qQyW-|UcqEOS=kn!3jv66*8PV$VL6
z!yW$Z6Iq46-2G6R1EZgb=d0aap_@a><<q15>D`^nu~Cd2J?|H*nrYwqR%n#ID^<(E
z;reYJX$GR2x#UF_y@3bg>nW2~nHt|s`-BZQI+N=iR@tu5w@KazTskV<OYG7RDLpRP
ztyLjqZ<mN6{u-U}^(^Ao0H(HH-5svD=i?_LY%A8aJ<C7+`S)vuBYw#X9DOE3s*M9d
zpxeJ#Wr0Yt7zCRjW`D870Jr|rUpl(GCXRG(s_|j0_#31JH@RRkyS%{~*Noo4->i!z
zf`yTaMb1femUGpv8B+(NIjL~G$oc)uSCI!~#!V7#N4%3IT6u5uwE$N+|7NDj3-cUq
zmc|D@<lTE-opNnBQTT79+|K9^dmhWD93PZ4W(!37_QtVNYK)l{80hzox7hBzJI<$>
zDtBteA%x({Q+f7GrpLEsR6IN~K4Pjczk9i^4@o1keOJ=1iqC9$#$l#~esrAww&n3V
z#*|><20L=OnR~sSq1mIQyN6@6nvb~U_LbVbiG`z+AUh~SDeM#O!LiT9z7I)fYPOd4
z5s8UJ1$Vpv%@BRt#3srL9STKgGw5~8iFZ{>RTr2c=0V5<zq>}kqfq7!Z=-^svNLRg
zUjz2zQK*;_e;;mr%iiLyE~Blw&$m)2(P2&H@<hX+W$nCb-W_xJE?dajb;Ek1B$N2X
zuJ!FuSkg-^mnpzjRUiE1`sv#86x^wY-YmBYS>~uWHg^!y#G;ZWb@MXa+Ean(jFz*V
zNcy1S{obmc%uVk!$5{&TW@v`<&8@Ky@Lrw*e~-y7vT&R>i0GKH;jB=hi}sh#f7U11
zRtgI72C;h$4%r&0^)k=hUYFv?i>O6QOZp=JR&rx*7|XE^F1w@7=xvebGwr`C9$H%1
zS#4={j>d8PrsF>3GP+UVQA&(hI9p6wX*5(kEdj#Vry7w@h`%6*IEzT2;~X&tKYf)O
zGD!jd?V~=f61f_uCnfuD^z@hLE+?BcbQwV$6hfVCOFj}Q2b4K7pK<C+7dyv9-zq;f
zOAMr8f#_#_lu7~*q2L#em%M8}%~Sq75oJhgdz0-H$air%RtD2`gd{TNB1GE?8jn!a
zKQupKNdAgvh#W3DWB(z#Z1@SSV`!5z;A+csqg^s2QgJyyRbMVWr=F2WO?=z)reKw`
z;Ad|8h5D+J-uxR`ZV;;7?mW)~eu8!=#y;J>7$L5#<xcAKyt^i43u{hi{yh~<j$IH}
z3?(GGK3Q@A7q!|<P9U0+CwiPx(A8`1g3`6-uml13XkdFR57(5v5Z|&*q{+WW=k^ds
zel01U7sPQkS8E^8prl?N>f|7x=EwS*-&}PN8k2#;H6Yxk2_Mp2pP)Hm@eSN{EGFyb
zh#o&GYY6%6n`U~xi;_sjJXc9{lh~Q1K>)Z~HK5fx@~OXzU#)xz(eE6?rhV-T*2k8%
zO~+mC658S@N~m&IE_4DX04HkKNm@kSM+nW@)8_F~KwOR{&#IN=L9^6u{jw4jRKFq-
zV@Qp8z}wc7?tW9Y2a<@M^e2o3YDBd<xCvpHhy2yu%UG(ks5`U<5!FZ2u_hB<RX<En
zQRv_dEZ!>J+UAhq3@eZI$-VTzVf^asATgX}|MX`;YvR>9LE76%xx%)F_Te*$@U;ey
zlUf|DpC%Gz5z?G7kO@N<v5y!wfw++bvq{tn@!L|j3CDXj*105MJ}W_8$$`KJrK2Xv
z$}?+v-MZ{mT7g}CC;rb$e!j>BkvlkOf-!rdU1mB6c&PrvZq`hAP%VMm6!#2%+od37
zfy<`0&HU-|fGhTfo6bt{`P)&;uQty>yl=(cvYAlMa6i|_)!4cbkn5erX%MN5^~HOo
zLPJI)s>Its5#ex;4M1cN10)bv^S}5Pl$|X1AAmdO;whXJ3iP;QTt`bf*va;6a*@TT
zT~AcyW5V71H67d+kS{>-)fDHCX(btvu$esj8F;V_Gt^`#7f#PsMEh7sW@qKrpGvzA
zU5;+P6*#Io+7CVeo)<xs+qlX32>#WJ0TH5<6vx-agD*mJy;uHGQ9Kg=j`X+8_AD5-
zAYcc-fF<8q)Cq<W+Vj0h*)Cqy10)?bdgp@F89_bYCouT+WVYVpA7|>zQyLA$?*npa
zF2<BeCnt#dY{f04UI-KKM_}rZvH)Dyrp$&e2KZyTXGT`w%TxbN*}+rf7b-9T&TynR
zI|AOe_U1e7z3v)x%O}MvTF>R8iACYjR`Y($#(P7S$v>%B1rVuPk&6uwLZ8Va9Dlpg
zCWR{MDjh-gyUugGvlcmC+y20l4>Kphtqz9|K@A&V1c8@`<llMqFaN;+TSQ=M%p6Qx
z`lVANPFfh!y&Om6NVQ=YqC|sr?pOaNGo1EKHr)~L=fWG3<fjk2Vqe!V(4~53St!$g
zMu5Bkz{=<MF!Quk|GU9*Nv8HVz?qZ7`31A4_iNMFh<M>`rt-zg0wWpbt+X+Z_*!4S
z;0AK63<@8gT@6z;uF!}OZzhzVsdAhFe<1F91i<7O5`lEe+Ubi5K*SVReTV)cTzanX
zkPM~UEWd3|XCiMEafmTX^ND#<-Pew*2YBBV;Y6ztVh~{v29SLt;+17SRt5Q<NBvht
zI)L*Pz|f{Ys9;hW_^C&LcLIFheotK#rGuvj*Snt@4M}VT%hMJ(!^yB8qqi-(|1UoZ
z`-OTlWx6M$8qvlL;J7GYXG~^#uKMW&UR5~dz5}EFndQAg4t)n`MP^=DZio*1m-S>J
zn9;w_0O7qGn^$cq%as@a<+%R~I{P=g|NIT`7+!Cs7A)t4@eKT$lY}1G;6*Z$i<ev|
zf1o)Txwb@vxI`vh$h(0gPyJV~P@o27lVv)TgV#0-AF8g;55SWZvl1r?&zi{2Z=E*S
zHIUGtVpS-!U=@}g!3YIJx=Tl*c<*+)7ap@gEeo!?^^T*HPpfXJmSo{IP@#EpX=0NE
z^W`>+NRjrNGx28ms+oMXB-hyB3dywEYzcb8L<*XJg@RrX6q<wPgv{?A@O@7rJ<0vi
z;lId~aldu<X42#RqCUv?;2up3I9;imkp2>fGw%NQwBB)@>ni*L35LCNF5`}v$umpE
zG3Y<}LAH4(FjV_ZiboP8H;g*<K{Mf|nLTy9SPZVOO`;m(&o7p7w`MCaC-&6?i6$+V
zrZQKdngwAU#)<+qg!r%iz+>^igpZL*P{Bh5I-CWprU_(E;YtW@a%92oBZJe$mv2d_
z!wa2YP+S6i|NYr8W+0$bc+zVt2x!@8x$NS6PodN7=`RwDn+bC>I)#LVlVz4p*8Hv)
zD8`TCL_^;&D73op#vdNedSzSsyXI>Zz0`0tU9Neu3TT%4>vQcKiFo*Hr~RHJAH#C<
z{+EHfdEP6`w0{9aG$`>y9ZKL1%<|R2E{y>D1Q`}MROJnP%SsL<CmM(4Fcqre06BY@
z$f(sm_05oi^ue^<JMrDplBny}2K*ZmO((tM-tTR0hZN<e<Qs23o1MbI7plXY=vbSL
zv1Bh)s4AnjphTk8ul``&C<;5IkLbIhawqOra+myjoxPrvzd)@zLfj*P#3)7%m%W_v
zhwIa$CR@|BFQgC?gf3~<dAZ1|adNbqf4;2OW^Q3Tso5#YVc4x*YCCv{@|3{0DsRZZ
z`jDdDefuRE9;5eypBshFjk8*vEs3R0YjA&JX}%%5L2Ik!z5n~e=D-iDxs;MWsY15*
zzE`n0&ynX0CF#WTnzliW24b*b*J8jp(b0VFm*uGt3?r?eAN$jCGgPEZ>b6GT002gZ
znKSWOQ(q!Iv)=WRc89enRIG%kpq4x4@cdOPrTq;$0_IlmRs6Gj&+kcud@f1Cj=<Vj
z&)-2{jEObEmQOoeCM!6E8o2K+6>x@4zsc=^gL{SjE5N(b=ErjxQWn(MCo(Eo!NmJC
zPt|Z_XW727YqtpQR2L{@>&u#})xZJtrD*jP4lX6Rm1Ony3=$`Qf3QA9M_i!yI?7Po
z$lKvUJ88s&tN7gu%e$B8DX*0*eldtUUxn`lW*EfBvkTWWDpwfasyGxI-KIGd-h_zK
z>W@`NUtGjSj?}$Hk&3&0)^M_+0N<C2Uo}#z&ppn@8MCsTGk#c51m8C{^44Y}@f9Jz
zThopyh<afWxI(5WdEXjS=myCriVSyeoTmpj4#>EhZ{$-!L2On;<CujCCU>o+s<<;3
zLY??#?q`KUAsVGZ1xb>TOZr8Vz6BiI^?te5_M7n&7OyLJ>ZadMe{w4}fd-@%X03}u
zslt9zrwVzJB-EC{w`*JBD6A}oJwmfr7B)-gx7N?oiI>5PEEp4IGZ`Z3+tRr-k$B=b
zh<M^q7EG86{`dl5+>}CQ0J^V!K5$HvVT~T;{T;<wSm1+B6(<@VO+MRjjEH<P>jwfA
zbL|K}x5tG)9DZ+&#P<mQ13mg48hlUvl2m0|>ndho8b-#o0AT(5cN}Q=4EcBaceltF
zr<<eiCt999t2KQO<d+;Dbczrkr_Ni2=V4zcBidtZ`&PByMZE2iqoELpan29g6w0Cs
zX0iOG2I62e5PZG8CuR7wX=p<zD{#4bBRU3Ee(2^oAI@I3m?2S`HD#}dTWc{Bfd5EU
zZ@Zg1Wb}W)coKf-2Gr2Cmmde>?<|@dW>goBK2zRNQXyr~r<>59_BECw#C1DAWDy8f
z`~1mKQAd!(ms{j&f`s3GuJpF^P03De`-1K{^g3uWxbu57rB+PK-JY4uCw^3>v{rkL
zbZR8D$X`i&;!*QJJ}?Zs%jSnuat+?1LhtNneOtriffu`L54<IZ)1_L%fcs+p&6be4
zk-r7{+h4i({bIf!j_?{`xOo#(YO^=G`pc!n)mA8+vHUM`Dw#N}eYaZGAuS#+Y>*Sx
zxP26la95&JC;9qjzticY<*lI67ryD6A#K)4(@$)tU}+m3+_<kH@X4g2e7?3vGhsu8
z%+^a8=3GKq4Z0%2m1kR2bzY^t(YQ@(-0^|j7Cn=fJ#s!<dz!$Y6){Xb%JObljs6p;
z=H(AE6D42ZPQkS72Jzss@97N4CnqFF=DL2Zj*u~X?AbfeMG`N^Wb@>C-Qfdt8ZGer
zYJ8W&X3eC@_3~%w?HY=_#3t6qeT|~D_)1W#5&Wi^yO2NerU_3hFrpoZZb=5k;krh%
zQ`i4M6=NWZu>Sa7woM6Ms(?w#aN;<b7N<p}jv?q9pKLPji?Tan#+g?7PJ#io{5=}o
z6)JVhhbW|k#g-^RNozNr^KFe2yHD2N1-bhlXG+d?PssXBJQUeIuF?2qHgA~#!Y93S
zSd@k>-HDqiR3k8s75urvVpNXsrGELbJt3zBRY)API6^Ou2`?x+F(Tjj#R@gVg(`UX
zXRDhRP<0byd{5-$Pbk(6^WZ)&2>00Ut{Ev%H!+`S9YGW5BtBA{YPMka<o1}*XhC7d
zX%%LhTXeiuaZw&))J4WGQWjZd3+LhcSbfC{UhPWew0Ul+^)<K$GzZU?x4jV)iB6A9
zt9IQ%2?Cf4g?fn54obwnh4>keo#$HkIYPBFU$1SAgOn`lbhKEl${gd$iOk!><Q(F-
zH>J`|c^w&3&W=)y^M2A3lZ;2vQ3I&vTp4NMx<=fAj*D;LPgd29u*UASIn5kyrhgQT
z4UPE%P=!kq?G7U?_*{JX>P8De8Iojg18#)Ix}AvEWO+57<CW|@|ILb2_8NG0cP67~
zVh1>U?I1@hDtiGob<3dt{tGzW=U`JCcV)%zK!bqjUk)kQN3mQ2&Ryr1-G5L7_ALo_
zjNmQ`QYb-WtV_{GAqN#ChiuAY7$62|&4hNX>Dj}&t&R`vo)2{&q@O{VkY~eh0eB(r
zBhW>(elvX%wJI_jVNsRP%4`m&m@8Fa86Hjf!uEBiZFmJSdvtg!F}q~i%Lefu#lZb?
z!-pW4TPS_0Xe7|sU_ixlTj@ou&L3Aq#V`1o1H*8O>R%9@mEKQUh%2B%ZBKuv7TEn-
zxqQ_1HfAmjPpPRA$ISKdmJeX!gm}DXSl<V(YbF#-y*}G}VON^n9+Z6vieNIE1DP{6
z1&W+PDFaN<|9MgGJk<J=l*8@XqynD1jq8XS3~He6xe@s+zSww&OeK-@fcNUWJWV|D
zWIuCN_~>TZPN`T&L0c3G?^|!wukNHSqx;`95Z$Aj%bs-8ZxCH_>f^gUQM!1|GUp5q
z*ID1WBp7gCBQFPlNqqNmgHyCZ_sd2oJ4-6J-D6z>x{u%~K?>~v`(==o44rH;6<fq?
zLeQXRmIy)6jNU3+l5BVF_%7EFrSIbn_r3KJ89WUigj)KZ%lxL$us8Sdwxw43N`$~F
z63Z5jzdQUTbEha>N3sa9Rp(Y8rU-_eBhKTIrgx9DT5T~T-%<(RARNU%2^t{zoZ|4U
zEYDLkmBU89$)4quTb(h#I3$#Uy`wihHcuh~0_T4;y0NbU_eJ$uN980K8q2Hd_?zUX
z_<WxM@Kav)UJk<j-f0h`SjAO(N21bh-SRobVs37CzL-VPiz*s@k5+aOBj$7-qs@>=
zi;(4_wGnSJ;z@=bD<>B1Dj9|xsaTxVci~lzst8|TY*qGevSq--5%L)m9&Zfo#(6_X
zDgF5wisA2TcYgM1oLRNr1T393TOZAdIvDLvkLCepF4Ezk)`Xt{F%J2hEJJaGe69EM
z!`MwZ+ul7b8San4FbM;XOxygTJ0^S2>#igAMJE{xD8Rsa0Mkhfqfc5$+*n+f-UIqX
z90p_V6FCXAV&4K@OAMh7Lk0Vos5-yQ_nS7C7pm~{$KB1XhnY@2d`Ty_#O|NC1JQI|
zFgCLiO(;ELZ3q^eD-{*6S*t}<hxQv>EPTG+;x1;oYqFN~;7o0Nj|L-28Z9!-<<*r6
zw4aW4zfl$X0RXpRP;^H$%XXgwPvD7l_;5ELFfI!Yl-?!Cea&Cbnax({_hxD}JsM*5
zoX_feRaLP))}F&-`!v2j^!*^6OUHQma$Qw-*_5^L3qf3E)Fj=9nx)Ai{y$YJ+;G$o
zP0k6ZkW2AYMcfNNix@gXQJH8Wb*j7g&ZVGq=9WH)kG80mWDI?9|3(ZUu`PGlO+t6@
z$-TH}jsUh(mS||i1?ozJRtp`b>8V@cxPgXm&qAZ8bXNhk9JWd9lyZ|Kh%PeupdvCa
zU+{YXy!NLT@qt9iT4<l=U~R|9jjj7R5V<T*JXGNA@2bu=N{$5SY%D_c)sJ%{qT333
z*s)Uv$4-Wr1y%fv?Ax#J9peTPkc<BIJk`JjiRhP{jUVk5jOt2fLmEam3`QD7r37eh
z9Q3JkC2&-C{+s{7x%QkbLV&-Nf=;SxAmE8xYDVqSp5)#WpG*!2mk!w$9E-{ale~B=
z70(nraXPEFnB3flD@NdZJgzWU(~nIWYzARm?5|_&2n^;!XNQ;r#AF_Y9LBiNUm!=4
z<y_HEa?Gqk>JWn-P+d}C9Po-T%uo@gf$9L(%}L{y36C68VD@H1^9QI&N!}`?(C1=1
z@{=`JysRq*8XJS<@%mUyaoBGIxI23$U)r$jn-LhgNw)E$5P}WK-zzr%2xf?QnEz?I
zmk*}q_L>V$b+OITIdSdVZ**+nqRrPTR=ao4biKU_=XyhF0O}IPcT|*p)~JHb?EeRn
zMcd}Rq^)e$4QC~Q^yX`ab2T;N`c%=x8HsBbl9)~Uv~C=)&|7Hl@Ck-=e7km^-1g6a
z3WiHpY-O-*Z4_!{0pCPiQQ?&BH-|EurSj+xr9rCQ^8W7dQQ^%rY2x^-Dy7v`lT>{$
z!G1aijcr)Iy}u$Mhhqkge7mE+=vCL?tgtF@K6TgMuE5c|ONZszVty*Ed16{JR*RJ+
zfQD8P&+F{(CBuC(diP%WEEpk7t}Uqb@-S-ylfC4a{a#yzZLpO{N}vI-w^TRG6hN$(
z6OoR-&n<%(kE_r%(J!KdW78@d#}SPqZ#q^K5#vMMfeM|reJ2dKj`GuA1gGaQt>7I%
zwN?|49C#_CI)>ip%y!PurE3eiXoxbJ@|)Ju+b9NAM;H-JLUiwS2{;{ajXBa$h=Y)W
zSH!%*@sc)|KGi@~fYWYACXO9`igY=c!yMwes8%0jeY|MzQeo6#fPyUflh4K}@qs5m
zf==Kosi~GC|9~sXuTY^^SZ9_cS~6~l>}CL?xCr!C0fsG#i<~m1i$CJnxp)8lwD$gH
zw6*E(3*@p6H1%6<em^qiPn=w3A{Kr%4ujYu>pDKeU#1*B<~`&y11>8fXYHQ0HG~H8
zu*v@JCGFO3f`jImLoAN2NGUb(j8i_>D5JR29x7BZAT^xywIg{8{T($`i_|^o!(wq~
z;${oMnK(XSuIjxxMZ|IpT7n$-G7ZROzXIWhsyRIClPiYbBr`qF9<GBDRj6i0YU9sJ
z=j|1helc_i(Rla+*v-qE!^;RGm~xAghxb!TrFde9FhQbN)G`5B+ym+E8G!5kF@ViK
zEQT?+2GVZ}V5cldM!a{W*Q96IQx2s5TKbcEI3V|+pRez{Qc$<-FjJ}0{pob@A1weU
z8`;$FvWpL-R!O*s$Lx!!YFs9);4(1zWW37c>yJW(6Rqo8CxtckSe9#Ltm19Zi6?Q6
zREpHRdDLqc#jo&E<6O$+?%!<D(Mf}<xA}zn#%OGIuViJkUn>`+M=aD@?_AJ0;2ZlQ
z936rD9G_i81V<7eB+9C!xiYbe^AA{Dub>WEJ!j7h9m1gYd=m#6MV(}lpr$AvT**=b
z!6BiYkssccVNglzH*=rMSGr506ONLB8uM)LtP|;;9m%#uAnzLKY1cr5at{S;kJ7|W
zYEVfd;{7-t!jO{zcQQyT;5C5r2z`Gmg+UIt@URb2?_y1V>Z=D+z&TMS<1+NG5F>x-
zpwi3j*Am62T8pekI<jxZL!%kS55KZ!gn0i1Ffo1dSEc#AiA)o>xFW4LyiE7+=rVd2
z5j~X!=a-(7B@CtU6&Z-?wAepIM0+B?9@Nu9<yQCE)FvA=LbeLC92(OH+p3Xj0Vk13
zr~5@RpMpWKMNA4Vcy}%H?#Bof`y@~OxqwSp{U?!u2Io6SOrA_>1mScpXyPnvP#2W6
z`o?xs?17sW)yh5D=Dk4E#SsSfA=OJh4Tg*P3dD4fTv<nYqd;Y@uuxD_OXa%WjM4f`
zu1nDT6XqSEyr;<M{qB2O#HM$)Hl5UB^y$+>-w@UAq+yocG&-W^=qW+Fs-=cAD+Ng}
zP0@fDCC?Hk{<X^(9thG9w1pd|n&Fg1Vul`hMhtpzEia`BC-GT6gK2`&>hR@_7N4_J
zuNj`5;m(dTcp4ukik>|FfhEuPz&5ntV_Xu4lTh4$OtISh=uE?i1Fp+yxZ+D1IRK4t
z@zi1U3{1HHxQ*i}qgk+x2gC&)!HGg=NSCoQSGIhzrI@3sNNGiF@w<E$&x<r=C~@WC
z`x46C9u@{sg-$TF1Az(j&@C8|<_NmJT6dG;j$TJ~DX`ciY`5-H2~<Q5$$`%K5;2bi
z)_z9cw(fV-&0o(p?<<88$<kz841NW;rIY!3A_IW)6W<x<!N6?tzxcg_0hE~z1_Nxp
zX(NIU(dzpz8ha5&V_Py|Xkrt*5lCh>_idDY?KWucXeEFjZ3L+QXpRpC$~t!gh~+@?
zg|8uaXVLAHN$XrZz>ni7DD+I?*{k>T1V6Nb>d885YFF=?uczFtUx8S|^qfGAVMS6=
zV8mmKdk#qV9%mbfF~G!BzO?;7viFPnKSHZ#q2_;v2B3&!vc?CSgEtXyhDgvQTWs-~
znDO$HwZ}k-qD+z<&5;yCWoZmB18lXLrg<WHN~Gv;Xog6bk3mJH7W^^LNbK}RP|r8o
zJo>Ik_11=Se;!^Mu50cP6%o&FR`-12t-#1U0=RIaya)f`<6M|bDu1B&H`v2c0-V+7
zSV+H#gUYqdjyB1>vLtJAlUm=AD(1<C1D3L5#1A|j(Pv$JXUPhHO7yCPp^u&PsI)3i
z*NfuB&pqeIFp8q*y>|*hW5r%nhqv26^fDICv)ig$W>9KA^_5g%-cbs!tAJwNDY*nb
zWbrhN<oGFk3)b&p6TQkzaK`!m$uM^99>!n*EiN-FTnWPe6r~Ema_$nfyt^Af`Nutx
zn2@U~bcUYNPSolAjHWRYbC}EPshi(lfDHo@kU%L^^<qe&$72mCefe!bL5f~><9-}`
zNP#Xk6c`4Dc$fEydxVVvBaG%Chui#*)RqWi0AR8JjKcv|iPrg!ktvtX*M)q<C;z$0
z<AjZr&p8M{Q<NINy;fo*V)nO7i0UYtMaSN<XUr%jEP)q$7KH-npJKgwH(-rqy-uK}
zO5aNeEtMbLd<wRK?dE^z1DIR;p9Qi4Ch))sayk7N9)ByqQti^t8UY{TSG)56@);n{
zWBCKn|Kk>bbonpX4<=?E@=wrQ@U3kC=1VhP!LWZqAP0tt!{WjBkJT^P{jU|u{|E@c
zCz2hMj)654G}ZdW`48-u)>~>!$ld?CKyv<Nc7P*&hgU<5A9m8FUXa804OZ!k<UI6&
zsMBV=PY@t6eHT9n6D^Z7FkTQNbipLlxzyy~{$b)us=ar0a9__v9aa=rHqc<|hu4zX
z?MY*WwYYc=DpuS_EnCJ+f&DZ<ZvelHr0_p94~&{|1&mxB*`iRy*yZVVhNRgS?m9_~
zAxrSVdQre=)crcrM~3OJAH*1eg0FuZ2m{OnNog<>)RY1fOng-5gORg1pnip{#I%?X
zurtG??oUbnGfLR(N5KgS{5nws4)rJIeoztqOB{Z#>M~n7eEbC%*^J-+JhDI6dLxWt
z0U$4!?41ORVyP~yxPs}P-Ts?mNq~_*K-mcMHl1NlN2}fU9a7;#ydI;XLGM1Oo`nF;
zPZRvD5B-T>9v)(#m>ngM!;0!P7DzKqTGiN5lfu0T;QL}4q$>=T(RjShh`ko?h|<@u
z(VLNwRzaHRf_E5h#xB3o3J26#J|QlrH<xxGn?##$*$y%I60-dJ`{>q877^RQ?2=-0
zdhS4Qtg4q-_11`%D_>zC5UE8}gAfYFA%MnF4?$782*`;Qnsr!#7Ec5J6VqGIkNarC
zAmjdAYSfoc<9vI?I&*G*_`B*D?8?OQBMNZ5VsU}U_ZV);|9}q8fAWp1&+DR~IPZx^
zUIs8rlETS7f<iQ2m;OXBb1GFPngTqL;og$X#YrSTi(40cq~ic2gSgdQ#-#x!hs#_w
z(YyP7Iptvb!t?r+9VnxnAA!n`+W;>=p)Rz7BYVK_ye^nQ=x6f^+-s-=T<ex*cRP$6
z6mWw<z$WHr&w!%Y17T~<3!FD1@9|h~WK?Gjf$2s|I;2z5uph|mly6d}3cq;GUp;cG
zJrw=&41YX*Q#K_~Sz5J->9$K6Ul_0yNo0)zE=BeSqmt_lfCliLJ#7bY`O(FZAvzlA
zM@r-fa>EIkz7%TV4RjbdVTXK9ERvV|nG#?Aom{e?=&L8ofSW-nR6r$ha}WtjVzJ(C
zr~YVviL^PG+L73WmZ=@-D3M4(V$LhyjY$%@Ii#Bb{2Q;3?(X6UiOJ-*WV5hzK9>--
z)7dNllO(ZzU;`;=fR3N9Lb-(Cjm-h349P1Dm*b6qDW`+NhW~_1=JEi(`iTBWFvds{
zFJ*gGsKRIvhe|32MR`|AwE3OG_@b3o6)J#m;!PBRKz5|^?W1+hYO`6!fixcEO;7H?
zEI82-CpBGG$Guw*5xDhbKXH^^BJYO9q02<?6?1M2UU|l})*w&qR?$U$k0?&fcY%AL
z`BWe?%b!T*BcPf5AO05<pG}o<+Ma#^!i6UBwo&-L&#ea;iWTHka>>MB=;FkD+ApI|
z_&LV|w0_pmO%69&5}|*7jR0B-$)}tFf`^78`)%ytl#6L#ADs?W4`zB>($j1J-q=w|
zN24=v*C@e%2kcV?$Z{mKZ9jrW@pnPklw1dk&5?(R#V|@~B+Kx`THM*_gwLguN=AoS
zeVkg{O$sSNWOX83zCwaJ4udw7wua7dW@=jsFR8`(ld?dx?0xMIe*M9|=?n4&WKx!h
ziPr2vG$2Fd6Y`-)#Fj5bXguAGxcz!&xU*GoakPaQV%U)())xU3LMjGA@<)AyxLion
zcE%k*A!Bpf=OClWgHNPl(N<5f%3{21G}mm0NkZhL<aNJsN>pt%2X`y>Te!RUDfS$j
z+H`@=Xd_g!oW6U2Fnj9p4l5zBkz%{Fk(X|>r$dl8jy&Uo<SJwE5b02bN55l}=gG5I
z2?4aTY7xJhJg&R99S;_2HBsGIpN$Cswe&DWJuiF_5|_E%-}nTaQcRqv#Ty{u=TU=%
z+Qtb))8os(4qZL@n7#fo-2_DGNAz+D8&q&5Pww8Z1x|xSn<HQP04Ms%_IksjSiKer
zs93s^-?l=OXU0%ShjF{4p9CT#cw8(|yfprSFkS8RVFdpY&BN!pMGBO~2qsZ@CCavU
zsyQZ}u$Qb*@E*%CZ4NYmT`fvO!Y?Z35qxR%JtK|gZ3TLks2e6spt7AVM=7_!L&)ku
zHF#s&?fOw%Bne&=E$hSV^FnlNC7{&y=ks&RcDQAma(Y*G98mAJ$*97l?bmJbj0TR{
zS+5+&F2PDW029|^3u*gTr0Fg9PKb95za3ohV%6jASGlU;CCasINMQ$&s%5$b_e^Y9
zNVYONu-KI_nkr5BU+hYEm=5{B*n8`!EWfT@RNz6n8>G7h1nKUUMmi0;JEglrTChO6
zL%Kl`knR$syJN2h{e7{|c)$1jamLyI>@ge+MYx}Jub6AjYtDIHFj7BqrF>58z#EIb
zjU8dY$j4<&WVWN0>rb?p)(2~9;1TOBu&I}X&Jqk*A(y(22*OC|l?(iGK+r{-EBhq_
zh^#Mz0?hN3S$N4vGE#uTK|?R#97Tz}n5j40LceyoVh07rvf;d(=$Uf3s+oCRP2d{I
zrdr&#YyP;&?ZtQf?JNsxaRMO1K`YT{-DFYE*{`GLylP?~*OA~xh+w6}QvVQ>9s$Z%
zP507;+)t0w4-Y5nJgET@&wHL`aNxx%Prp6B&R7Z~V#WtWzd^0+aOF4aIY~WoAnz5o
z-w`x!N-p9V=u3S?d8d7m<Zl`tKt)t=%|u(sRGNgb+*OUt07|aaO<M_qn^o7Y9hV8J
z?0&)+T)K8IPbrkS-@Nl9(t;#`vTx>R7GpJgLc|d5t%YYV2u7(a@%|K;N*ogo<3-xC
zHd5NP4UG+x&KNh{G@MEtYB2t&(Ia85gnH<N)t~0DeL|1hQoCAEdny6KQ@4Kw-x+Z-
z6s<_*O>_PjhG%CXtPF4Kv28CeG~59--?>T?JeYZ%^9wS9?bK^0)+AA&z$=PpZdwOE
zi7}r}U{0B@oy+1_1DZSn>Ehh(c&_lsS1(?2umexvBO>or#@=VoZ-(f8M?Nng=hgmd
zn~@`F)!uZb-4UM$c93_7YeMVxBO*bFvPVxO@@)O^$R~XWGhcFcAeNLrrXsn2V}uNx
zlLqIA<OF{?=;acxLtDNO`)2p1VG5BfcI*K2z*gt(#`BSoGiv^aXpMKWz`b2N_)%q`
zp2_P7yWspgG^Ch#x%ZZuP|!Dyzk9U7)(TY0*PZ~e^u{x2Nz6F4AON5=nC9uE6!1Iz
zj{Gd=&Lefyn92ZA*j3Lr*SUU|$(rBvPqu#G0*j(16G$WEdra8qH(eY<9`0YU_QP^8
zos(dK&8RCWSY41uzUr3L#g&5<(EQ|Xi!_oS;B>0rB;_lSde+En#;S+nsCH(o{w+UE
z-urc;_erbb?V)NsUzPdA1IQSv+8v#PRRWzt;qo%>Z9~}@my~ddY}Q^+bR@x0PEm$)
zr`OBneL30GB{S#U8QPJSJ?>Abhoa?ZRLmz~+Jo%$$|l#_2U;)|PLq}&XBbzG`g630
zn_mcMFz7!co#{W(WeeT;-c{A{DJ>p&e{Ud}H{Z^T$3Cz{v|Kcs`GR!he6xWVzTe%2
zVC*F^liYWkSQ37+0eqGYklfTE*!M&y;L8xUTqI<fsZdO{eED^M;=THpB#5FsxOO5Q
zMH5}@APyP{k-r*!uc=|7&JXe*CnUtP%>)&{df)k)t!>Cek8nS0bYMMM2TXP1lE>~y
z%XwE%=YFy>FDI)W9;p#N{vZO%MFK>=8%gdsRwviKc~p;uk>t~|BlSh6Tw@-14km}a
zj5;8J#gA@!kf~Gtk`|<NKLn9r8LjTop1&Gv&^$PKLHpQxL=`|+B9@A2d60l+i7Oqm
zTtWB!2cXKMBM#}!7zd3CO|hR$mVu%kB<VK4S*qG|42sb_`ScTW>#Rhbj2F-VIp(V+
zzE<M!`zE-SSLwX##_PGyAgxFgvxbtg(i1(Su}yry`B|fiD#cbmqIzJ$v<E{#(>fjS
zcbUCh$lF9V<!hilDw)ka@|`_{mey)&ZLt+o-&}zTct!xN1<CpAg=-&<{>pjmy8!_h
z88(1dfhhnrc1{ghjyE-H#Ae~ul}Djj(1wH#ClP|tY<B@2C`eEVT{pKH?_aT*51>cO
ze1i?p*zYGtwuDOVl+M-FoJ8$|st=C3GfYq^tXtnKZ`|sBu<{wc7?PMsf_}O)8@kO`
zX>y)~waJ{y(rIqOYKVvZ$z~1Y=L!`f5h8X{rR-))FrSIWn;cxFFFae@DxCCl%|Uj2
zQJRxdYFzOkk%Y?J;TF^YSM5!afo37qn~Kb(R1tO^0dj}=ShHHeDb(I?7<v<T{tzUb
zT$wwv*DKFj)Zp-BL<2X_as&srsI|9(TP6fLk>y%DA%d*Ai1K_9)Fex>Tm|Y!k^m(e
zi+<|(Wo7@iV`IFcaoWAb^8y<_5?^heqJk(@hbSK*s(aJIs%)jxRWkBcWpRr9>1~+d
zj#p6~0jIX}<|tA%$ymjFyBSALmzgTh$Z{Tin+hw5U%hg@$2a^s-!<Zd53(Nw$>_di
zeDc*>b04mqYnJMN!Z@}Nn=LF)I#K>L_{Gwolny38xs_Y7Caiy>+#h?353^QO+R|RU
z_0(ZyS_w~7^Ow6`Op0&hdfcP(zIcJq28&nAvq;e99`5z(k_qW=J5;a3bB7zOtX!%J
zB@$zJUAB|no~gZ83O=ap{+!PbDhb+~v#!R___4`l1oec!Wp(T>09l2#5xg;6tl`zV
zXh?z0#Mdm~fKXI8M%PsCRDBJWnbt2+^{Cnem};^M4FL8LX@7xU!u=;OFZ_;#3|d4|
z0No)8h_c5$zi?Lw12EH#rL+hrqY=5<j>C_pD)uCcu;+Ufk;xOrNvZy4_mb*vm7_!;
zOW|td{LkUhA9kxx<#jej%S#(}M8DThFlb7!HoWHf^0|ZqH&u@h2k`wg`80xtpbGoM
z8o7kvJpBdtn@yLse&$F;uN&MUP#=(L><(H~)H5R>xFOygiNSSsxq5+^{W%y}B8VP*
zJIVAUaVw#*MI>0KJCl*aa582CZLE`Jp465q+0mf-gi@*y*O0s(+{Rz$DYax_>F9EU
z{i%2@sC_P$EoddfWKA+Uk3^dUM|?A-Z>rsSdmYFIl!W5bC3q?w=gJV-@hPWuE5k!0
zrzgQZ-AOoe4B|Cts^go*yzKM482-kzn%Q=z%}Y7%g}&rYDu2mjn&xOkvfo?<wGjp>
z*Hnk}a&J35AB`WLISN%n!f$8*(QyQRW0=qC<;xlKy}hjRc;+4F58g9P`ihP6F+-q8
zp-!T8YQfuWGh$nJ1_Qn3Zg=Mg;@!mt*R{QQk<2egBuO^%TMP0R>>vX(N-fuT=!~a|
zzAfx;Tij5z1zWi`_(71eli6%^`WxmDii1lvOIYL@V+<6fYfncxfHv?b#?vfEu)JH1
zGzTU2&*w@lhVkQSp)lf1Epu-q+iq)(T(dnZs@|uV(=d{{ufF}M%no8H6s`#X;tgo@
zTL@PZ#p38R^x&fZrsnV<M1>6fB7v@C3#8DZ-gsdgBF4Jz5h&2Xs6(+V4m?Q$ek*gB
zuHfDM_&cmc)3*|!SzHtYRvKTmiHKP2H1)IE$IH}Ddl5<?x)uLcH?+Z&i<t5ZPTFMZ
zdQCQo1}pHjhT3{e4;oP{h|&rx*HUQMMnSoV*6!5P(m6>G*NlmTGar9mp&!$AT*Lor
z*?dBTWw1IFPr7u_y@O1ZyLxM9yQP`xcxuojzlxF)CSmq4x_V~F&(?V(P+SV7@D^av
zxb*1ccd7n|mt$6|${8{qxxF^Hr*$AA#Q4g8-2I*0jp{{q=BJ4!vVQnvc(Yu>vo-Sp
z+182smP}L7q6DRgPRFr)F7jYQqU+2G;GS1J<`}ZA1W3Hpxw0>VK}qi7;d^G@io3`C
z50ll!CS))O^95I~P=6PTbI87ZYD1>QYEWz{fyb^n=!xg^CO72e$cJ)dZp?-!xD|c^
z9^fw0?_Ch`yM+~M-YGHF1?@X(AGq?cKE$GQfl~FK+3F=Jr4wIDUZ-~Ip^%bCtPf@9
zo1R2~e%oOFk*QCP)KNKHhFw#a4TBR*?oH52J<&{PzoaBlgqX6@mkV1oHJ>EnDJRRG
zVv?u71C}G%C24HNHAOwn7qLvcqw)+fiNYi<QKcs0N`R9bY;Q<6virA&Bn?_+GFMk@
zD60qa-Z%2$#?RF|JCQQ|{5s#EOIdha53Q{kJSwl@STf#-U)9eSd&xt`9BB0Hh-ZAY
z*frsb`KvW#(rA=G8ddwQ$rMl3^`-(PJdsB2MeQ2u8R*z4b3Zk0T${VOBCmBt3Swx(
z2t6eYLGzke0Ue?n0n7C4T#aIYiw@ew3m-+7yCKnb_ZrN<ACE;Wn14ht|2pE#$3)Wz
zjOy=2L%T`i*vveGP<M)K^JY#~*j%1<{r6y2G~?1n(^~;cn`ZncsK$?a4$4bGM1Q`$
zat9hvB%^II{M1Y^R)Ycs^00WmOy>&!P|@Yp?HbvhtfT(GnqA0t{&JxX?lO8KG)k9?
zs?Me?;>{R{PC(cvD|*D$lKJdurCfrm?4ufFO}L#9<;ilF(1-y>vHrDB<((%i`pe9q
z9c~|%_lL9rJT70m<Mtv4>LUTsEbYDdLIF@57pADo^-iidW%CytpB`H+n<5#vl+F2?
zRJ5Wf5x>Kyh8yD_lL4<)6$WE(g&qb8w6E-d$;Y`z0a{C$7T1~S?GMl88gG)e1ojsE
z{NvSSM4Nw&F=*m|ETkrT_AJ$Kv5~e5_XqbZ#Ye&*bw(93xiVg9Q`UedzT6cy5fR3Q
zZ6_V0)Q3V=V^s{-(RHL-Wq9t@+{FTQ1j(RSUKASCBhppel4uoy9)uiMi&ELv4M^t2
zw^X00gAV$~9=9}O#r<8(`Hsb)m9rus0!ORZ+@)G3{wAcezCVdOF#=}ly_EJU^Kozk
zw+aNe{;P76AdMVq(qcecT%<IJ8ZDzQHk4mN4z}4r(+m=ILT998;I|<R1Ah?s>3ub+
z`Ol=g763&$WSG8x=*+=wd;h0;FY%JXhTXY+Bfu<<=9MYlxxU(hG9_qrp@qlI$M8j%
z`3SB#GKMjEE%i6gniRnH|NK)l{D#A15`u@Q75K3K8%oDVREha(j~!$NDwZ&D-pB3~
zBOk618Pz{(4BvfZd;1zx+de)R-$8aXlaSQrLb5;CjA>76e9hL(a9%&>+n<~X=Y`fD
zTuHEhK5S;*dmWD4Nq>_mWP#p|PFz%Sl0;4(PE@%w87rSv-LrF^xAO8?BQ0p!_?V<>
z!q}5b!)x~bo!I6n+(2y38?zqjDd-9m#Ipo}6`+I?BDAj_D1xi0-_#S-Va3*Fz&B_7
zfe#cG8@V_EvlOU<5A&}CjR-I4dvs~W7z}W-JY6L7OoKI|`jL$^JBJlyDDntb^Y^;P
zNU#K4S)eg72vEzB8B7}6HKL>eS)16r#ZVRKCVtJ%(3kZC5tIx{El~RWlyRNWXw)aw
zKfi%B?TYw(3rIcg+Zs<`=6S-b$NXP!%znhl7V-$OKuM)`?mK3X;HdgC*S~2(z1B~5
z(i=bx3dx>GpRh@5!$|S7XLua+%VyG)V<TE8Hu3&N^OHcgOoQ7Q8QH8?u6~=o5(qUY
z3w`^)38idhs665`@i~zE3P|SgIi{FZvg0#YR=Z*AFNYH(TRkt2KVus=WkIK_QRGW3
zWKdBQf=lOv7z9zC_-IP-I=OO<bLgJG=>Za9EOdf)`W|@wDX~5N!4dVAM=cmP&T47&
zg<|Z7owp&4Y=$qx5c*RjGB`ke0uZRgQ^!|+7B`C&O)-?hLhcWWJPKK`xIh>dA@&s^
ze}5vlIGeG8J^4oMU1xYZ5(BpQGH7mczut)Fch&eT{T@0QHb2nc!zw)AN=(bC__)F<
z*iEumQYGsK)0HfpaX^IRY0jK`jsgd;Xj8dUD6hQc-{h5c4}8u&Nu&@oH|cCQ2dC>~
z{)~)%*@9hM0TdB#d*;fb;?{fTTL(BoYY`h*I>E9n!yK-3+YoY@RUQ8CAqa=h!IRDy
zQa$)6JgoNstOGS(;e1n{<jtV+He0TtpD`vY*eeP6#WrUemJp(lNQ<*y5&lF3U>e9J
z_xO+JDkC!xi;lhPP3%!#1_3JQ`4*2{c41D0jj-L&<pAM_7~-GKA~epydp3G(`!FbU
zzH}2hTx{XiJDjP_ZuHK0SbWoR?853-p5p;in0ru<BT8(83HN<&8^ukWTDCWE{ABu5
z9ZR`smpG`S*7U}%Pp<y!Bp-fPN#?=p9wH7c=t~U2QHAJ#<E#dB67o?Q+~50$4L2Zs
zSi@DGTrLvvK{23RMzX7_03kv`;>UhELoVUG<n5d&m}wiMQ$V-2IQKVIw?_su2)Ncn
zVY?|8qx_c@i@GW$gdcvq;f?lGM8hz*{HGQ`938ll^|GCbjD<fCu?KlTfxG<AG9~QN
zHGn@c4F**98TvRzAH7FOjRU0}oi`M_0+AMr`)*X6il7Z6gd>=bL>#6o)AdCu!1iu)
z{HGxBl_#lYS<pUE?{H{U20O=({9=%B%H4gQB`@l*^GsL@Hk)!$p$$W5)GXzmLJL=w
z_aPK(2Ti*&&@>ZIo<Cr!(|+x<$11TT&>3ws_^7?}KCdqdtBn14=Gqic*6=+_yZ;nt
zT4=82`Y+=IFf0Y#@Hu}nKG5DCMp(-XBPdDCLpZK`wx93!B@`gT`u}Xu`4<^Bs@!cs
zk`GSIgStNV_@+WGpTM5PSI{DqTmC<0!YKa#<>~=UMNMVBVmklu<2?RL788m9d*4w4
ze0C+kG&F;#+bRIfaM_3bM@9)4+yB!{LxgZ$VrpRMcN6pJ{&O1DcX!_fhmIa`0vZrX
zvtUm3(odh}#hZ|b-i3X_#FnFE3evE|V^X*5Q<atdFnA<*($eg9cXJ&Rx-xZ@>GOU5
zYJ0Dt#OFY8Xxgguq<(_Wt8}k<&kI^y?T-iR>os{a<6b-nKYmYehm9EfV2@+zU}Xvf
z@cs#psf*h%^5s;&{9!#Z4)<T!W%ng1ec#vG4^9;LV}i9PM91PSI0b>hQ@#B5%IqCe
zQJm;1;&I_qCdcSX3uuDao&%;uX#2vZi7nf6n;3eX&59Zy)bLf9&sZlo_=}EFoxFb@
z?}@ITo?0bNp)BfgJfHd{v!{W^m?WTd0+j%np=QZk0(=-5_2N^pHoKLRNoR96aLT-u
z9{~GP8CoD&awtrXHMe9p-y&b};kz^pZNsEQ12KG3T-gDQ0F)Oik!}X`j{uR579?cw
z0u#TeuM|KQ*$&*lndKtzxG(BL9W{{|@>Ey&Y5>EGDYG&UlzoN+))xo&n#V9!NyZhh
z6Sb~`Bg4xD1HN<!B^9ZOA_Wr<l|$Q;^c*TUz`Mp`?PugJ)*g6T^H(&25etLniLP`c
z@P%kMPoLWoJ_&H6D~uG#m6|#3@4ZQ2RQN#ROODK&ZAK1!vD0#M1@KGr|GegWlzA+8
z&1=P0CD{J=3aP7|<v0nfGCb;Z^;4HaKf_^?0qY#yo&J>!Hoctn$<MM)bx|Y~BMp@p
zIT(w(`I|$H8~no+b`gfbz8vNFQaWE+0(SkR{Lt8bgR?nWp-Y$4CiuhtfE$F>RPL>{
z_z;W*?4~KtHsYy@SCN8RM<NNFn*DW5>6|YTm@u?bZ0(#A0hOK1*#6VTNubd{o!G6E
z(4!~J2HI@HpZkG=3N&tZz~r|m{&&&{l=+~XOa72RY<qFh@Ro;DwJ&l|eVjg7pL^ts
z{*X=PPk!=hUNYO}Y><^zn`h6U;^m5XUmS--FMc+k%ZD#I72*%02r;Xozh&?!tdAS4
z&fqNsd1sx|s{!QGqLU=T0|p-FdW!BYSy#bQ?lg01bu~PZ^SJoT{4A%@VpiMCVr?Y(
z(6+_RV)OcQZIDgPJSdBx-xOwS*)}B5h9~1dD|(txlVuq9(a4>Dxm$SycA~^EQLSEK
z;4Nv<NhH(rU|9Jo*&}|iB(^kvcAm>hrdbZuKvNLH&_j~Wt>OrBY}soGm?*M5T@wJI
zd0$A*Q`w>(y@Al2*d)ib0eEgQc--$>FEQ<b3bEU1ChC@mBL3iw;mCWHkA{TFg_=J(
z`~;2!h=i=GJfohRtH8Y)Ew5e-DDudnKfddDh?<JB&Mw>deW&2o>~1&tt9zU2h4Bvr
zs@gfa6S89Z9N+WLp1CY(m7??BC#>nUp4kPm2c@Y!@e(rTQ}5Q)>bq}7-kB%_#2u(+
zg_<uSz?uJ!Rj}B;GP4*m@><J|IFmi|EkzXm8F2Ev<`v_LbW|c`K7y53i_N)GcWid<
zIsyrSpz1OT18?ohQ5KC#^X$ml2^-UH)6|X9g~!;C+NYN$Ckc%1GHrf6XE)e*o(Ugi
z*_8BnlK0kq*~yhIRhu*S-)Hi>JkP#b@T;Exd7z$*cIjSp+8s;GZlv;-Zha^#_16%O
zw$zy)t5K5F5rJHJLf7ii6b`LaKkjha8*vy~rZf*MaIR9Z|D3A^=jn1iupTt_>aebe
z3}!M>$*&SWZt?%R-8>rzK3ZQ(uNi_EWON$6dE!-24|bQ%1ebK%bBtlQmq(>pesZO$
zMyWe`wF5U}%zcq_hDq1(M<|da?S;*}VFaC(rek@p&!crQJmoe=JRVzPwa{rQ5Kl&a
z&aO25<g%8dqo;R}-BSL0Q+<JZ-?HOItJsO?h03=Nm+e9}msQU(L{!qa4P9*)JhBkv
z%c_f#8Kp6BnX593x6=FrgKsaZx85u4l~kA>I1-K6g<Y5JB21OJzNzv%rTu-QY{#fk
z73X|s<o0={prp!rPFw_cjVUQH`^G5Iqw-f@U3^Y2C=5F8I9IKI%k(L!si**TgIhF)
zT&M)Lznr?~=Kx%}Q}xzF3bJOuLSF@~=C>x#wZg%y+vun(<IJeH*YV@8G`^NM%~mER
zH54VGZr{X2ki2|aHot4&wOUMO*B2!<I_7DWQW`Jj^YAl)LYafjjY|<S11MD<bpm>8
zOc~=gNy^2BDQ6<2Y-e+RIaQub$>!g(HK(1esf$vJQ?T9$$H7~zTZt5<ex@`q++(rW
zV`cuz|CKEi{n5xl^dmvF7;*v1(yup#HCJtm@l4CkJ9D%zy{=sM5|xKqSn}y&6F_c8
zc7mYccdA4}f!zC3pK6QC*wNLPWw%c+@uI<IAWrf?1Dm1tpUvPhUv6~28Mt7VkQsCc
z#Af{;lw0-W94haLsa5Vu9CpV&4J=VYC*}2?BQ{@+!*KCAwSN=3c1wJw5Zu4U9ZQQW
z?n$g+!w~z#Q&K7=HY8>w2{oV2r@%_8>A~Lda~a*Q*3nU(d(^u1Ht#d}e5A?P?!u}(
ze|va*+Lhq+oFp`$Hbr}A@?nqprod}K8^WhSQ9;oKd+GNgCZWQ5K*fPl?3^h3ve9)n
z0!MYcRF~X&=e0%1GtqMKfvJWVB!;~fE^%MOi%QgM<J^$(>w2@)RrWX)&!*!-^PzYp
z!`+jLgaCxTkK{f~IYSrvBDm_!SzpMo&-as<?PCY^ZnBU$5=GLfa=e9<htm06Qao!3
z`Bc%#1zEygWQe>70NjL;tAmLOA~f8uC+gUO5VA>HY_63II`(1OLs8hw^66t6O6K3<
zS-nAKXzM<?`nAA~Ab+iP(pGrb7KBxCR{C|M>^Ze=#Vd!*ek6{MdO0PIYnymPXKnO{
zzpGS^kAsi!<y&^`=G8<!nk+_hcPJUvQVAOR(-`xUX$9@oKFYBI;ayY2*vcFkL*Spb
zhC;6C7|v~)gfmATaRTQf6e)-~7xlM*q-{%nZUhNK>2+x%jY_s+w%wigk7^`AaoABr
z3i|#-sR4`bpXn8jeaL(she^$dduO&r0or~u_&erZ<7<}{XXoWBoM!!sCm(vA9~{-^
z3}n4m*m!=hd%b3U`_`jkHT3;k44f@l+{`zrqs)FrloFR;nbRxHf#sjsT<~<=rUjI(
zJgm9K-fiP0S|4EG|2eUafPDf_A?3PEQa*)|QKi~beiLky4rkZfa`gn-D>sC!BJEPS
z2GrlHjmZm}q02odBJv*wiB9bBBDE4eA2r7f312FXyijD{F?v<nvQTZ7dVN;Dz6?nc
z?Zi|U_CAxq(_KV69N08kcFbMu;5RvjoKW%kTt=A>WGiu6_NC?e2TDrFIzup$j8{0t
z-N$$JkM`<H4Dc9IHt3fx_Thi*es)a|mbk3j%@%S}_Qcp^)$^MvT#_O6bpFw@Gg%|C
z^1$v_0H=4WeZBiZg2tEUlrO!|GI-+Jd=LhH9vI1Y4-&n9HX1VWL7gPtF9<f`e_SWQ
z%O7UMWM->OZ4dGGJ4-cNw0=~}-N<ag8@v%k)NOXJM<#I>i+Y?bw?a2iP@l6Psyh+U
za*erOtaclNd^i>ev_r#<`qs%+n%H`%sR-ki^OTMVs#-7|RO85Ce&a5C<x)`PI%jh}
zb<drB4NeI$@Y(*J68nrm9s6H{L>C8*<nR54U=F_>)-x4qc;rTeZ0EM(Ky0;%xGXea
zXdhQrQ089m?_gBe43Hn5?$;haT1D~5-y*q$5m%01WmJDD8~N;eHXk!ygho>Rz%NAC
zZH|OqKvtz?Xgj8R<hR&?6u*{1wD3tm#~54JJ@?q_ea_%>PW24QsD)LBL~xg@kCAR$
zt_0dURX$=Ex>@&dQEI$uZhXI!XfvjSx+KLwACvO~gFj(@St1hSX@6mkmR#&<X*Uu>
zo#haW(21SU^jTa~I+t9rXLVqW+d(_6+}kJNH1e6UGoDw~w<Go1FFbNx(U2Lw`;vLM
z06Rzi*Unwq%RBV~J4Z%`S>iuZrKSGOATTqDAq=^d?UPcr`;(1n8o6Z}2P@1~Hjn+?
zQ1iahNN$x6&-M?`_S>irk5O3PcT|#ce}h3DcM)N|mJ`xgF2zHGS!>i?=<9aLcw*ke
zARFrc6REdFt;kU6)v-JE4Nl1$?{v^keO&wg@{nv8wt7J1%Wvx2%cIgd%xtZ1&k+n7
zpQk^>RsHhAv8Kcf7I`+SUz@FT*8mgYF=c$H*=^<plfP(H>v;2x*D0WGaBymaB!R<H
zNZ<2fR3us7!%=QXS;%5crAX6QR4qr$XFmRbt6L%a+9T<7_LUR&xXne1MTPAN|IOX@
z`$`RmOcA$$keXbT-UnzZSV8*~*+ZW~i>onhxttDA`_ctIR=t{+R(>S#8CJf`VX4E1
z3+BDmjP2Xwjh3D4<hN%(6Pov$DKUf(b3>kRmyYTm#arvwK9fo!LiuQAIx%l>**ij>
zvUzUl%^}fzZe194b7%$*%)4LqV&BsU8gJQOddcRZ3}yIATovk!o&=Yu<-L}AHTxw#
zsZU)C-%cO*<E*rqCntjZ6NV#VsH;f(*HzqVGHZdlii?(zc0AQG*AB}^64GcXC<JV>
zqt9cDUU-Aj-!~;n73+h(bHoLPYnKgeGCkUNC(WUucSo_c3Dan=2P$oH;t_T|RUbxe
zlv>Hr_zRt%QGSaj0=}f{aaxt_xb%^>=}t&B#i8`_n$Wl(O7n%`JgJZ*xUZ>Ho_b10
zq%wVgMIN^_@O0C1cv!DBPkw%j2HW4W=lAG;yNVEvUd=T{<1(Zf!DH8Xv_-;t$QoYS
zAzYlK8fmihrqh2!CArEr?@OWm<PU2Xzsv5bT@EpMs!3i*g|f~XfwDw&ekqDJ(5L;l
z#nN0EXiA54v>vVe>{Dk7Nn$V%zihdy3BjZ!=)G`SFL+ideK_^$;IMm9_-$P8r?a+m
ztU|34ohEU|wQsa%S`FG)C@{2>b%8tWZzQGstZyWaGFlTKX49S<QxmE6Oz_Jey?Bcx
z9{KQ$^j$VT5N}Fpx;R31EEE+Dcz31o2LG}PRysHmKf#)>(rP!!cqdEPMVhSWB5juq
zvc~;tq@W>RrC)<_Etr1#buZ>AchAr;0}#&;OP_#7s?2}mL%ns<D=BDv8;_~FD0VkL
z({XHJmp~K#-npJLLD+}iU>#mBBbPkDDlTj0F3HxWvG2F~M_R9#?aky^w5OM-yTx1h
zl1RtDM`RpVzf(f%BFZ0bwHd=A--bLv=w%GQGZW&qUwvTU_s&KV@@UdcG=WBmYK*Lq
z2~g0h!N8NGP$<C}wl8S^HoUMM7c}sL_xxiP|BLfL$RqA_x;;%@OVE51!s@iN=J0!&
z_9kO0&`GU8mNLE4vUv#?k+u$B_({O7@h3#erR$5Mx3YNfCyRZ7=0zK3Bj$2rBy_$)
zVFZX1ZK14Xv#<4$qT$KKt-l3tk?2_xt>+qqDb=xQXi&?sLGaB>r8(!%X?46_BGj95
zT6}kgV-MpvD9uuB>9`PpPqN=QfHIqu;`|MNeS9nK!0g>pVU{5D?~1rtAqS!oacvMI
zwZj`u0<M($z^1Y1^!8|hE(A4?Leieqy<8%3MF?L1dH_51B{)v-^v6PIfpL5wQzs$3
zhgR8bAU*0OnV&&uPBd%m8w2K~YAa(sT-Cwn!xx@FE#*7LLWa=f?bYcP1lKNR`OZ@b
zrfUn|{0_v<?Ua8`Biakwedq|W!*~Mh;c>U|`5pH|M?RQY@wsePdGoGHC~?Q_oq7+G
zMSLs)?dJl&0P72>Ue^h(oY@OMZoO>ZrB@iIx7}>&qTxtfj+o%xDF0gL5MEaIdr*T{
zoI)Q4K1+HU##$quO~UiDK}(8fT-oef01xa9Vj?rlmun85Cc(-NzD<FH(#eRm+64wK
zbX%Dsmmxz@k-89nQrHNqhbwt8pj<Gf98i<>XmQM_BQtPVJx7lME)?YN_6%oiWdcK>
zStN$y7aZ_^@QX2C7}}&n4|JqSsa)-^&s@2?T%q=-RsFBymHjqqn*}&tdq|?9x)nAx
zdwjewxv%3d)rw_>=-IwmJ*UWpjR?MMF78JVUU-`g2UYG02*ci=x#_Z7iQZT>`O8o~
z0WhBs9I6q3g{098{=deDkQwMG@{mQM=)}tJ=PS;i7S^}11$cxhba2d2L=uoqNco?o
zmF*vx<3Jw{CAp@d(YnXUvC9-&?J&FmcC&`mh68;se~36;tCwQ$hWk4?Fb#u&4Ldw0
z4TOnhI-tZI`rc3e!cHIPVVR*kGT`w_(8ps{1V8}l$H6CcZt?^vV(ibuSg`)QX!R2!
zo%H($P_V!@^#ldS(q}+Bbs#hvOQFLw4F3#AveoX4pe1@@#N7BE<)R2EL)<6B!57Z9
z4g@QX69--(sPi>+nM7ezkj{5ZhU`|V1u5NOp(BYC?S;6<A`y|QJdp!HudeD~fN275
z5fqhsfTTmYSQ{z?p53o+YyjP~6ao9tXOoF!XFUcu5fax3@%7`kkgk88j(EOvyIgzl
z{4MI2d#ZDE9Gxbc7?vrXnI*&XqeIQepQ*2<HZPp^$%p|Bbz=82T+Y7+^%ft)ATopw
zktJZ)_Y2J8_!;;f-D)OqyYK)iw#NeC*QNj6uY(f_ZIa-cm8fR|KmYT*^#%5Syc^YG
z?Nub$^{+U~KokJbRz>KKJ_OATsAsArph<#;TX;YHe|k6Yqf!3}!Ewk%V|f4TJ>}m4
zh3w1#%KhCQW33QZRZ(r_-@N_*9sd89v){y!>;2R!dluYfeMz*5Uv!(LInDbi+;AHu
z03g7|j9(hZAHBt^$h|b6E-IH6ulE`p%~weOW)JMY^H&3iA*bagVSVkg&`6=KRsB|W
z#Yl;QfNqQH8$sPYxr?3FQgn5t^Fv%!Y|GUYVzBhj1OLrd0fXg@8cYErDTg=HAkOnQ
z#pWVER}3`ezCVUA3Xp48zk?ZfR;7np_o@e>P<s9D2fzw1k@agb=B5>NBM2wv{$ql$
zVOr*l0Di2H7?2EZBPjno)L;Yq@E35V`+N{E^skMIeH!#fQUBt{pxs99wf7>|zqVPA
z=%7Ce2gVfQ#i0G(-!y^v-wglHRnYNue|@b8|1<ko#LuJkMWH94VTdle>wkI`aJNzc
z^Q&|2UV#K&N>NlC&zDf?U(XaaVkAf{m@KXI(E;O&1Pe&?$2m>fAw-Xj{hc>{P%4WO
z@mQxh@68)LuX;%dWXyO1(lq~=W?2f}zotC%>W@7grUoB<taEiDkE<G}a|`4w6Zo7g
z<$#9<bVSr*NCoK9IV}=^cH=-Yv-T=zdQRZ6dEWA!Bqrm})j;<*@nQ3p&iY<J2YR>8
zn<<K#CYOQH)x$S~Uhv+=y=G?MkVO<Fv*>bqT&$(O_q)3_30S}9ItF(A!QZFw4M5ix
zG#|@=>t&<-bSs%5ceed-U%c-vcaeURJ4cBY5MEx}U+Op(KG>oUS-Iaj8UNe~9t~xD
zf2_P7Cb(Hgsi8M3jVSLAl;C;#`0N<#9O%QZW&YlOca~3N?ydZHa1VF$o%+^u!Y4sk
zNH>DT_i$RgS$LK2{T#BtQ#PC-*Mxn4<$&qWgo}sn5QvF;9x4&1B#@^aoTaC8FTeLc
z;`}}SzR<TJ$oL<11jJNmJ_vjD0tpM`gD@$v0tn<|9`UWV2EYyam<AFQLGQ8$ND%rT
z4K7yck4*wm2_K8{J8xj7O1e&#nT!AtqF2N3f}_ZU_$@InZJIdDc+o-O1E9)~1!f;1
z`d2yI3{x&tLJ@G@Q5I<xCw%of+jMPV*#*25=|`)5)N2E&snXHJazOfYc0w-o_$5%p
ztT5?#$mg&eWZoMm)}O>k&HehPz1-d;6dYv7_Giced!fzE0sPMzD9cS?RHx(fyKS0(
z8cQZbtZw>sp?j-~uTL22afp5aU3J*ZDb9Pm)>x{|7r#iv(iCc}r&h!1v*Um`uxtP<
z{P9v;mk(s$zu9VnO}D}MGZ4>~Lnq}g$ddzV(GEs0NH>SQ_P&19(^>zXrMLU_%+O%l
zIKC37(@xde<=9%xm7B?gdiD$e55zr7)Hu-5jHNvD(=5nhU0&b2sIsj^V7=YP9Or+#
zO~NAMr@ukKNCB!pK$A(SiOccyNlYt{-&yS<FiHZdRi7R&uERR~F7F{rgr<^mgncvw
z!;PRywSEdfCCd9`OdA*ZM$m-U6&o=g`f>T;I?5WmwFm#<r^bn<fzJy<iu*_}OThwT
zF_^~jR^J8a2C3EAFG1M5k#}jKy1bvYOS9?vZN>_dy#$DtvMCD~jhekVz0da{rN<)*
z?0vg)jojAJ!O*q*f{l3GA7-(K^9Fjcy9k$ojzH+-o<l!pD2{dZt!OW7KRA^II_0Jn
zK!lo6yW|mH&x3#*zgt}<jZYMMwYJIP!N^^$VPDW-Oay=ubX>jD`di_0AOo&eX{i))
zlt$Mb0gnE|0MXJYol|g%-1$cT9y%3&So!1htDOi+6o%fy*lSF%gHA~*)5!Kn?3(iU
zgiT)|AXYwnv)%`!vwTL&vW#sgGS`P?$Td}P@u4TBO#Xo((f%r4yFT+jwE#h9<c`m}
zJb|G%o6CMg4t<+CD0^3}F3ssBPJ+MV?kt~Nj_}v(o3n)kT7{I!{N)uaQa(pX$6tet
z^eWj&K-}*l1mZg50hR+QPn*)CUv4VpakW!hFA!_tC<sa_9~d(5Ij+V5d9Kc%-v!!O
zwrUR?L;iTdk|_@iH&xOei#<doq#)&Y#+3N4wsC2Ipd<eM?%ucrwrbhd_aAu@+_M3+
zr-&3Z?}2_+^K>%8l7Qds#mB{g@z-K(NrCVvoKZbYyyN#my!Unn>QFvL6iw@~O`p8s
z29oRzR+b+W(^o-+82F7chD>NPk^t9)V)ZjVQV>n9@p=~YO!Abnl*>F207M3fJ=y|?
z#@eI|<9R^^l-s|-Dh_9P=zxvzU;n(5p?EA;@1Q9{^CFha#E>ygR2FRRD26;1p74bm
z$n{Gj&?+%oKl*c5;D8m;t!>7x1!(5&=1gx>{;^hn_D~cSqGG=->NkwODYL<-Y$9}c
z+@UlkPtuco|Mo`=!x=`vxarXPBjk64Vr;=^>({Mk^E!xQtXlEAY$lNbIjndf>b(gw
zF$Zv$4XD_8z4t{0nf>}#&yzy^Mpq?_d>Z*AS$i7gOr1G@aN-IP$Xe}NSqWt}e||mz
zM=-iTAypY;6*3S<`G(A%B!t-koV636dS5)YbXg-Tc!5qPNciH#<Ry?rnwTPXf(bRT
znw%=*-nO13cI`HqB(lkG9sP0t@98oppl@DM$-RwAvW!^e)Ez}M_C2H+Dmrdc`Nxj(
zN>JQe{qK{l?BM!dCQ#5L{74RuyST(Ah);)9l;E!fDQg8LCDhY@XS!O!t!ldRMeOdw
z8oxVVB`x3IBeZ=ftQpAIvij)puqZl@bbg9=KE|&PX*EG4>ux8+Q11>TqC$#kg=fc~
z#MH7UjI`6A&`BaeagoSv1I)O#6wAhWv2e@i2@Vq5e9jwjiw&}aS<KpObM<V1O)vo{
zSqsGpAnA3RiS32LvXyZiD%}8i_t#cIa2?}iT-d+cKY%wyb!Z1)AHB3fBq^&ld2x-R
z_okN87k(N#E8x2lI$YLhZ9s0Z!W&Fch%uaA2bcwu7l?v{INPW*)I^W1(FCYb@y~E4
ziO3?#xD$7;Oj4Yp!0A`ULOd4FI}2CW+V61z#04GSQ>1@u!@!#e%0>yg?dp#<0hM=V
z*@hWla!1$8sF2Q+TSL%DR>8qfX4R|d{q-$l?QFp>)n=yVw<(S|EdE;^d()-x1rti-
zrM3aXNA9_AFd^{|OkpJ9!VoaAC>|}jNk!nsgU(R-aBSKF_k(4%3UfI|^$$@mJ|YFh
zDP{2V0lD@MHQg`*5@`(jb!8Dq@W{BT0uri$;C;d{3{RH*8Q`!GYeJMLVcW+s;VFr2
z7McyZ$R>$-x*gWD+~h%qM8n<WUcC()G3P;(Y6vP3RhEET3Q)`oU7*mT2*`k{61{SO
zgK0r#crg6w8MV(Ra$#@xKrXn(y+s%gu!oSwE#R?%>MtUKLMmG_xGo2P0HMXVx7?e$
zsx{WSj0O$PnK}=a9%RG%vhKSF#F>Z5lRULeI@y{i((d?rHqVU5q!A~d%p{l0q^ZwL
zBZjM2W1Vgb*YbLd2@hkp`O3DMOA;1Q0$4Gep!)NA3c*)E@sNp3TtBdQqFC=El^Re5
z92*CImKMyP>p-@ZA4bqiG$|x*Z!ML5T;@C1I}qc_KY8V~`rH>^b+O@Y(k%8>31qwQ
z4ZPxYU@*n)!>0$O&6n~Wuuvl+xzIH9mRq50>;~AQ_n<6Mt@t^&!S%`=VxuvK%!52?
zOd1MtR>LNpJEI~k);Yswu{RGltC!3#Zm;&n^!9+$HmaIR%>7z+tWa|ed{4VPs7nwg
zj0rP0g+-UDw<q{V0T6lASzJ2*A%T%@7sh?>n8QKR_WI$ZO$qG4Sdr;_(ID3>xrC1~
zzrV3*z!JA#@HzV|BY$<ebHd86e^5Tg)!}-+L>b_RB>E(s*WsO~8Mn=}2Jur{7BH<7
z-ncBMn4&Q;Q<X0UfNN?2Ovxte*-v$q&uQ4ju(6FuICP(i<E`;bojO9$esh>q!YmGR
z0d;!3jrc@(S6kpOdCF8k4TAp+(&Gh9{MwAL8<a$#A@>-jd-*r6>g`aWJ4sj*S{A=c
zLY_qEYeU$kR~BFsVO|{ckaKqvBB{?*ThRldzC&wt6!s|`yFIW?sHtUQes(s5UHC2r
zAW-o@f{4Ce{K`1|F0i*@+6;VgH2@li8N{O9k>6j-(y?U4?=)*|=L&$TWHY+Q$}AKg
z#en(MXxhwtHrTy!8U!ov?BTWi8duf!2@W<1@r<!&d)PJ&l4RP0rYayEO}p1}*DQE6
z$c5ERoPi;|II1F|xmO1iuBAGe(UI&-j8@sjOoiRo$|Z9i2$IL+VtHs7JJIM_LQg}$
zOKjt2W~VBgez)K_%b-Tig=D^L+b>cuUC~+&bt<^3AWjp6_wY!?NfY#_XgZy?I_$s@
z+4#=K@*TT1Mi@i*Jh$m&TyLbw!%0s7ZYX7QtY`qJQQKNITC+TX^|?At2BMdr&j?VU
zmyG1w2S)}|GHDkj+h)I=6+nPi<Bw9R0uu}yf%1{Iag_>Iwgfd6fu_OS0Re`_DOd*c
z@X3^B+?y5fks5hXT|y9wlxmw9EvFx4_lq_M-AcCap4!D;l)UTU!`9C8$3`k7v*Xf&
z#|>KI)g-)K!SyhFiVfM<ZE)QoKFX4WwGFdb7NC3fPO>J1c-he39?QM1tS<CHQ!}R4
zSfiWWnRA2?wAn`xOuyszph35_M^~yPiZHaeuQ_~`zaTR#rA70pw&(RYnMFSk#?Wap
z5wOE|!}Mp}pR@U>GgD!qFsJ)!^n=o1{SrDCisMKUlcv0z39*Q8lY(cLEf}<W7MOzi
zjzI8abOD;5C;(%^I$T;{%$<GdjLaZ>O<~_FhO~I33VbnxFJ?<I<}X>kW9k4qG5vr?
zx6C-87#4XKo>}Wl9FSGC^2OUe?O1*Uv+W){D^dM=44Z}$lxaHEEGElQj3Yi?NN!~5
z_txI6khz`*foiSKqu-?PxX27Kih_nexgcdaE#QW>Esem8#i3X3&5spkLL+|iBbZdd
z97*(N8n;!7H@I^WfWkQ1dh2+*Tq0eyfoPlT>xmLpv!0k_aJF8~lemlgEYen~Fz>^j
z3b<@K0b9Q}lh5fV3L>8^G`buTI?Ei)c&gF|aMlaR(!N|P9qgc+1&(Y+hQ~%;=xQ*5
zA=rKy_0z+T;Bf^Qx^+mPJFasw>6g7V9p(bH6^KC^m=P1AOY~}$nY2q-fay%Q+HF(;
zmY1H-=~q=f!tJYFu>bKprGfIm^AvU?Hj$g-#95!SxrQzDdBSmE$k9XQvK<fh;AL45
z1v*CI?>+!WV@E$v9A3=S<T#Sn8TNde0%;#Sacumfa+VrN#|+BduYpt*l64_|=WfA7
zkXe!jqh9;2+XiN{3dIwgj;}QiUtW0g0$%aS)s<i&u|+Kum(D#?tgx;{P}<Gy_i(;|
zfZb3ZXwfo3Z#Lj_|2BOLggq00I;%<)UqaR_a3_A%_yhUJ9`vain~ZB<Kr1W;@J|j!
zzej?<6pF&+QMv8TKHX6+fKNIn2>t};u%2q<8;?f9gXoIen=RCc%dDli<K08*_9+?#
zmm&8wWN~>NRt&;3Uu~5-eHANmtEy*aH2{Jf`Mw0&_aO9hoG@_vypITTXc>I=Qe=oK
zCJVAn-|DS>%7s=d^{Wv%)!2L}7F4tWG0RQEM>=2>bg_bmVNrw};-HewOkk`pk$zyQ
zBXsS3s$s>~otIBH#zML3$}m8HJMuxvN`SMGfUd?Z4lO|x7fI(vaC@P}h#(RZ!F6}`
zbEJ&K<H<(1(#0!2Pz8`cErTw!&xIa_kk0iY1&mA%*v%7J;ONsRq_9NfSG#@&S8N~n
zIPNdML1YQ~k3BV{3M4|&e>*I;!U(m(i>!nHR8|dKR4p?W!%L?S^^cq~9b-ePwmLDi
z2hL|T7y2Yo;~AlAh%AH$({C{zA|PQMkOgAf!kUmQG~fx@66jNewT}11lE(r^G3o`(
zB;Gs3ZB%wD#K^Q-OjNW3OgjSLVG_vzL;;60{C2L;K#{v&9(YI1v|!G5IfcMM9w2+V
zrKE_$5H?eyRs2@J-cbq~+PXyUjJ%ITC4SQDIzXXpv(g=X`D68Dc`URtiBTQ7#&~PC
zzOw0Zv#17{(Uo1XNmypm&kv{U=*WNX1tOA;xoKNC+(N!in7Dgu06Y_V7`9H8VV%90
zlb<L{w4d>C^nytn@=$b8KX8`{fcZz#9Nlw6B>kw8GcLTiaE@@9N+pGCaGviMvH@Ho
z1mIFU#6-6jmGuX?FS!IrsojUbEZ6W(aZ;Y3`-#9LLDiG6=G;a#fz52=`q3TY1Ludp
zPB^=@!vN%0wf15&rk?)TO?$I}5=7Q9j_HRgAc4yXJjaz*@3MUN6Ed5g$th^p><uJp
z5BFDNMNV-#e)?WNDy`dC_$wHTR)3hoe&$jJhdTTf6JjHD+3ts_y6%y!JA@@`&;Z<P
zw_aw8ienjw6`z=pB4Gi^Ut)rpo2eH$eb8thV}Ji86cJjBWN*g&6zslOsQxiVF-O>d
z9C4<`hPfBbKUfHxrTOT)z~#fuL>1v-D`S~AKvcKC%%o$vWGCeJ64;~m+w)%=p+SgS
z!N$+ei8kU9b0|1ZC)0f>0#uQBZ#-JX@!J)yrEC{r2?F`VL$H}F;c;iV>_r~q?>^P*
zl|XbDv1+$%tXnd)Ki!_vi_j|LYf^@DYNIhf(z_u&+iq~#DkQa|{qbHoi$8N9$fbm2
z8+-hLJGAzu2$*3_=WoDp46l)f7j;$n!?Fhv7<oT)izMWJoz!%5I<t8>4J3}Ehq^o5
zz)o2M;aRfN`uA6ZeDj`^z9byI?)mU}aJDs=#&NtDGYHH2b#qiW!U>H+SKF0LKNppr
zhoX~eC<6aBg6`@~ZeXoV7*@{$MRODIIYx@K*?pYgW09H;9Munn*hMmzcF5;V--&*y
zP>?P6GQkeV;F_Tcc!{;RPWil`*r3O@(fz{EI6AZT^(fnX1%a0WtSx=q4>#l^1Kmmr
z@MUGKYnp>KxAQ5YE35xTfDKGJ8nw7bnGmj^be!mK5Tj2h0=NI}>n*8WGlf4z$OUjL
z56@R(2Y}2ncL|Byf#>P==er!>$00LHBVyc2QPq7=$|!V0MwTS3f*XFA&4H;}c0vQ%
zi5P8}&Z%}rKgMP>;A$C_RnwzSa{V+tYp40?yDx}s4+rB*HftPAa%Eg=fbIFol|FcK
z4{rziisu)i9K~D67vGPM7sfcEpBOh6z5K4`X2ARbJ_*?6qOt(hM`4d<YV9U$c(7_l
zf$=3_39!#>_PHwj#A!9oav~3$^W?=ySV{pX9QG~aX%QlJ3*?t*I*-lUkZn{_{wKTq
z;Jc|HHhFn^1NATcp_ku@hJ#-DrPSt!+fleKrEy~;(`5fSloOpb+#QE08v^zPly~2R
z-%jKkypzkApbD6zH$H>TD#wE67r)o0&qa|212}DGc|CUP*H?>c=SNV_S)W(^P$h9s
zCWPl0BKO`8INqJpb8`Z|Mf5L4-A319WQKjhfO8l-+@Mf^D@ovxy)(@9uW<gY_W5~r
zVU^W{@{EL-FCI;UfYYxiWM)iNOt?^0%38d}7TJ7m;Z;#FL!uz5DZB==<GI~nxvI2%
zei}?9*lR(_z}M$C(>4U9^C<1~zjyIp61dHTex-&f#j@{!j(CpOYSx&b^xN9YlZmIW
z$nB1c(SZi;akF^gX7O7P({3Q){ZqgkoRYW3_<e@)sSs0y8VTuhgeFzYX1F%^dPOJ-
z1svuPK}JL*aa&wO`Z{#Za{@Mf9VvoUfi`p;5E@rd1oid?fF6(eSKkfXx7Yf{p;f?*
z1e-KA7%+`H?V(S-woTobt0Lzlr^t}bGaj_4&%W}T?#gl%EA^(%wVtk$lLwU%R1Xu{
zsGcIZwu(7w3p$JA2BZaM;m0w<ze7mq0s*Rahc967rkqRxh9ab)5*-=4Ph2p7@C{A%
zK9kraMi2qwV-VVnHqkTG@rZjN<1tCX(2D1T0xj^Obxc>~vc}1;kINhVtYaY{=*kIw
zIl|+|dOx_M?R?!t*Kj%;!$^o}&i&xbpo0t7h3P`Jr3sLlk7_NZFGmB_WL`ADC3tG{
zdT;(KaW@=0j$j$_8WiO5W+vjgCAkVw#YSXjR4e#VMp=sMYiw7Q1k6_HApB_}#8%or
z2f^(-3iw2?0D&FF#=23qZ9F9R<onO#gMMC~|FU5t?=+XMF=H+-Ka7XN1WuV(-tHxg
zSHT<Cncy>6H{xtphmQu6%-H)(Fuot_Mjfjn1$Mx^e|2@JdU4$fgh8BP50^{8W)+`1
zfjgB&*r`F;gWr83xU;O>Sf)+0s0n+m?C^07Y?5i<!+Y&4zZ^Ob0BFhvWVOpcrFA#B
zVGCh99v$qbd6d~#?$A-0fS$)9$a&VX^1v_~aHimK&!)SEvk%|^5#TUVZ)9UOI5;ki
z2-iL2ezMtu9uNVii_eob1TC{DO*}@|rUW8Bu6$b9_6gucGYiPCr~mty4P)=tbNucv
zmGKgTB0Y`DIR6Et$*-!lZ|D>J&NhZ6ny(KP#2ohlaQM5#YOndKWY;%jbpeM?F>bor
zYGBT7!KR1SU?ODBHT>t-MPRo;70Tt-xdi~g3$;tx$bF9E&4;oL0NO!ED&U%w<9jK$
z3*^4zblCN36y3(I7T;j3)~{zbmY@l&4*&=cnv6IEFmCWql_Gknel{(@q6>V8axwn}
z#@#Av=u86Nywu>)4v|RN#7d}pU~yrs_0&5mWE7<HEa+SaxC1~}E8FkZ!(;RF#{!R|
zUr=QC_e5!qMxlmWSzNbx695$&(rhP6vPe^%4M<#PXw}YOB}5rD3zMdi1;&ekV{AE;
zT}%b(#1VktcKphhj>fijBG=i@WXIg(v7KcAS4c#EW>}KJyAcmVXuG5fbcOg6Uxxno
zrM(fkwwbOPCf|QRcJ3#G))|=yvcB7fpJq57xicFNe>DZfW~zCCJQw47c74FO7FbP`
zi~tW@xB7K*62mj`%hMg^SmDc0-nSR)BQ1V@7a&wz1%YuA2(IM;?qLDK^uu-(_TIbO
zGm(qSt<v`(A#n(ruKPh6#A3G2A&_+|<H@Uc>vVwlEM|9R<j*p-VyfOA<=pjx)pFSe
z4qYmXZiVd4<%tFGDxV@Uv|JxXR@p5W21m@+I}Hr5x3EABkP`-(;HP#JYoi9|S00Cb
z^qOf%xT+K-O9I|KF{INx5M1V?_l93RH<zBg`2GkK5PsGuey%z1eWY}8JgVYCmMQG>
z9Ka3KqaRgLi}h+>`#p}OXa<ke`AWFM6kic(aAPI_)_I<)br08VIud%&KpX!ATg+(`
z`J~?g$dEjb6)nXPgsdo8Ue~6_5JwTv2QWZSsIANyR`w_eCB+zI!F;^8{PtF@*4E&L
zhzhw$x%qq<#RK391wcB;ajhS(IFVJ4=d)%}3NkGNxYkkuq*Yjp+^+aNTc`-d1{aY@
zhxa20cL+x28eG($b+LBYHcD<98Y415qmqYc#E9*$C~U<Z1Vod0ZI^?po-oYX1>Z)H
zN_%#9x)LkW4{q~fQ~02A5FKsRV^%NP1hp&~RiOxoKakOx@P~oZICkHuo_LZu(C>W#
z?te{<j#+sC*(zr8K3j(?xdD#fOGFj0y$am+<^vtXRA0^3m3sqp9t!NYT>xCZ%%V`T
zpRL9@CK?(Y$B0(7sDlhiKA9Ih3jXn<qL;3`)2`vaCYyYVXKveyo<s&etVSF(8+&CG
zZ|tFxhS6n~m_8Sc2)!L#U9eGBFhs6ZzY?i}a3$Z6VgF$mdHb6#9{fe1cA>=%<Blx|
zoTi3WsISh}M46@xvSCi2W?d!>D(n`7p-~uckR_p+B|gvNPo5(Fp(GLab^vU!A4cx`
ziyROW!7>6tH8PJ?aNFT}?}=v;@;Me%0ZhVmXZn30viOS-4Du2~DHV~Ms%cCzCd4_<
z<#2i$tMM<dWq<?{K8xxQE+V;fIj51muyrgSET|Q9wil&9LS0JdbNUd$|K=f@S{u9*
zs`$67y_Ql#Mb{+Rsjisja%jSB4=Zfkt^aUs;N;2!gvCr@1R(wsLRxy}UKHr{z|o{_
zrWB+lDB(itVjxH7w$i+N#Sx??1(a^bcR7TtjX^UiBH1c1U9nm!#)H?b5p0=(9&cv{
zxq?T-AlH&mTb;GNs9RzAjrasJAPtrsf=G@C1N@Re)mR~~)6Q_#eazO5S*{_$d?cA?
z1bM>yT4H@^9Qi<LU^%2j9MxYY@b6?TT2cxky43^IN&~V2OmPt5rgmm{Sco-%F?6M(
zJ;8;h`V2mg3o-HcZ2ggo<zq>%l~lwT5D%4>6q&g;Q?MYA(L)hdaGZ-k?Rp}3(k?$t
z*M{5mg+F|I9HoSHIvqG+tXXE%;DlvUV;1iv0mjAtU=)JmD`K+jx|UmDIyn7qz402}
z;LVOY`1wDc16^Hl7viFQ$;_$94DP}p8ObTXkRuDzb*8>3{b2Z#%7xjJt6q8Vr^D9y
zBs(@@D%5|ozj||orTpecj9v4EbcdsAR1*W#y#>Yd*ZeT>jg`5=g0iaQfhdP|6h_GH
z@)Wto2;?g^+F*6ofaeQ!4CR2?(@zEYalg4C*C^VbJli!21-tN1aa8wJ(NaJL3%AZ~
zWhb{B1!Mad47$h-`S3%oGRP4*Yd^V0pJ&*o3po1$FlvkGs#k9X3G=whsM~7*C&_%1
z2a`X=cK4>Y7>T<VaxBjFGGy<6m38LfP_AzrXAH(VV=$C$h9Sw42!$GB8~l>A7+JDZ
zlqIRg6v~WsQp{AAa<qt}#gU;OipnygoK#LUXt8zFi3}~)_}#Db+d9YfUh{`*uIruW
zd7t-r?)&@wJoiJGH@%;P!sZc7cD^s@gay>D;~Zx0F$gl(e!lmq9)?nG2Ortx^HeG0
zVVrCrrQaECHzm5qK|RH%Y^9=I4WlX&cBCbtcnL6j-n}l-wDN8IxV>AhagWJo&w=>G
zE}vapbK)t=uY5$~P^9onU{bumcD(-Tca~w`?eH!476nrjhcky#!nJK;DEESi4a5UJ
zWDm<x{G)}|*gh4nke<7wtS3)(=&Ro7|C){;L=Ww|xD;I|5;5;6`O<_gnz}4c0_#4l
zwr&%*4~?~tQA-Pxu~XunQ^5vfrYNRoK|l@2v(@vWG#=GCG0*RAmLN2l_w(7$6l+xK
z#_-qU9fA~9$YIVHY`q8cgUVEl*0e|#tHZo_&e+#G6+e8lk<o>D+LUZgWj-^|4xd<^
z^<aRdQFMwYQIaq-xjZd(JZjjF<(io@!#>L1-E1?3B$cm~L=D;LhvwyirKnnVp*Vcn
z9agabT&&L3tL+l>mhrXpy&3$g2O^QJ=ke&GuZ8Rw`m1auRHmBh^rw_C&KCB&Dz;eG
zG0de@Axde_)Th_SHoJuHt*GDH#**S|4N#{STBfYg$1sMq(w76iNL<M?6rE&IvT#=$
z;&JGhSINZgp>?Px`+EBGK(fbe=uvaQexygcDuYk8-_oJqoY_>?jcq2|<)HnYk+)eZ
z+3}huxYm{<Xn*#^jvJs97!?sqAt)Xcm(`Uy!_hU9b>dA7wSIgz5tJqz1)I6`od>Le
z+;MbyGre9fLE_Q4=!9OeAj>?Z@4pKzsx?#Ehy1?9uMv9dwdflbTi1UA>@a(Ui-v7S
z&lqhtO3ZhT#@7d<C75{)4<~BO9}->)kIDq<3QJlaC$Rdgo7S6WufD{!l|CeOfXcT}
z_J4jb(e5X`VGLEniS$L9svuCQb1xnZ@mUlqLIz!far$U0*(8m>d&~chcj_UPjFq^2
z-l#o&!>VBuRuY>$h->4e%ZA7?T#{|HjmK328I)r4>dN#|nKQ@zRJ}w^l5b3DI}}Me
zr1PN<Pw~J^`tX!z^t{recvh!<%$vg5^D)iF>cR0K#|cCJARk|}4lvW&tUtrh+PLw+
z#IuL1UXkg;x(8QMk9l!p2wx}m%4bfb$ac7Du6^SqnKns29B8=^T@&z%VV2}7W5?-#
zr?gR1YGAvtNPST54PocXy(4mw*ol$7bsvJvgKDp7ynNWP@qKC60{KN;O^^PSg~@T4
z$vzq2#>Q1r8s|mLSfdSkPRav$qIpd2)5n+rhj4OWtopikTxW8<5pxUv0cAL;P2oA3
zYF&>y{h2LeI9;Bm7LkBe8IC+}9{Nz>B_iLZEx6op>NDjncQvl|5Z5RCvi$e_`DvEI
zic&Y5k+gkA7d=r~I3y)#BZi2I7=10-Qz)~4$o00!?Fi9vYp_KZO%$Rg>U^vA{$bKt
z6}CB5;%UcdPn8D*YHR1$K>v?+67rp_yeKTSa2Uv#OHQ>WvE{_6$Ac}IT^6b+Sv*%y
zY29%bLjxx!8P4fWm;hNm3JGRgE}|r51<MGDX4{M6#Khzm+?*V?S$`hXe{mkCP?yqc
z{ooR?!Q&SF218SQ(%p(?XT0itY`!9y14NtgImvLQT1~(_!z`x2KKW}pW8!3q5KhpP
zVudG^66f)prh%69*Pn>~#A5u6E4N<jqHg1)Z)39=><;8!4mw)Oo!1KFh@u^Yrc|ew
z<pCNsa@cZdtkbY_ayo}pAyD(Gu+XGZlx8^rv$%yBm`KAXcMkh<wsFz|bi1bL2dv5B
zk_QL!W2W-}2WS{mm`IZuYuA?3t67!J2^bTgwq}vOAxTGeV#xDlS6(w3n>FxtgTZIO
z!Qi$_XJSV&jZ0Ms2Jji(R4q3jo{p?c4bMZKEsH;_XF0NCrfl#)sOEbXTXeziUEvzW
zkc1vN-*wP8R3miwdD9|qH{ps6GuM^cI}M%OIygrlxzZPZc023x`36xu@qhCJNyboU
zfR}mx>h>I^Y<U~!V6Yh@@->Gppqnv{WeEo!;Xl@|yDuar6(6A0&cd*3eV7yyq!P2m
zMR%)Rc<**loNW7uI||`<S9BR@&+@!@OB_m*K5i^^78H^rJ{HUjf!V-tm27U@A3#W4
zxJ@8gPsrJYdS0}<?)Te@ZQL^LD>TfIL(wcPFB~c=4slAp0Z+lDDag!nX=a`AL9O^m
zvs3Rt{=0A)yUT!g3aYDT(uPerP6g3HEgQHLA`7J6kBmw>U2pIC7GD%IJVDebeZ+59
zt$LrYHnU&+D}xC}#aLu+R4PrZ{CANo)p)~_-z0QMg7nF-_pQ`e$i}U8JLTOdjV=7b
zU7&A&pzhDp_wQ8PPzF|`GIOgSmQ!4lQ5a~#kCe!I(ub}n(XrD;VmZIIN*hNp)3&j`
z8lUXT1!GRQ=v$&(+{7QuL)N?7aQDWmz*YOyE<8Bc-<W(i(Zc_&F9K&YD5CtY^*KCW
zunJe3JKx(C(uR_)mJ{T93EMUNHt?C3#6lK93c2jYt0)O8%cYI1;vAmi?^nxek4K9L
zn*8>3tPX)38v#@h5i1RjOoQrC(0T4=ioME;|MH$BQsHcCRKy7P;@uXwG_08y^KG`u
z*vGz>?`Za-fTLUjq|e=W$?Ab6mruM7af1TLV^Qhgy}jEP76Ay)d$e}H$Yno7+t#N;
ztE#R>uBt@ieuKQiKCwB~*~>UDoSEU&*{q)%)yzM7wxP_o>M$$a_#4chIS)^3L{O{4
z1(^7=`CkL|JmW#|S(7+>`26}KH=-qF%&&q|+^r!uaq4wl+{YbfE7n$@a8gtxi$Pwt
zJHur1c7f6~&<sbyWQQ-`i5Xz`F6%oSVlDG0Bvc@FKVrk|d%aDc9uI1xFi(IXFaf2#
zm3+`%#)IOpO30C3#^tZw28*x1jT2)f2?c)JZ;73Chd<yy+m1U~xVl;1%Hf`#iNj||
ziSI5=&u2RgK>(I_QgxL(m}JF}EYF_UT^?rc+W+f$i%Q5@5!fvHmyE@iH@176jd!$c
z^xWr3unT`$XzRnRho)7rt@mudxkGhyhuHWw!e?~<*E^9tYoINhPYc}jNA_=e<_`&)
zLlb?e1sRrL9-g!eju^9eo3l3XdAU|~5?gU7c$ul7r*hA4CWWGkQ}QhcLivr!v{yzW
zdx(U;X<~ne7U6f7rfD268^1f0;zP5n5BNv^Pupq4KhPD<r2C;@Zk1oTDAbag$^dJ|
z{X=I-32cP-u4f)xxf4#ba>V1blTDU^c%TdEPVQ+9>&GB@evMyNr$s8O^e%BfwhNwJ
z)Qhq3-`S%4=?|rsUUUe5j)juNu~V<(ZWfN$fA;+6TBn?Xv814%ztgWL&+Fqnf=1pR
zpW765FZ%WRM+Mfm&YA5Bj0(6DyXV*!!O6yTig*zYaZ1zqV8m)MXxG%LF@_JFA$%<|
zeZ@>_Dxev^@O|Yf)<k#{ILK0n?gvHf(5@AF&-8}(((4#e+d`*KCm6Q*Hb5nV6`;dO
zHHP%z<cOM)ebt*DWOL(WY-fq<45+FiTe9&Jh}<JmB`m(BaBm|JPRHpv-KHSX<&%Yn
zxE}HkR(Tg^$hxInOX23P+4DGm-<zBxikdb=Xs|a=3;{<%<J}|uz(RFMe1x)fv`YeT
zWK?XVOLP5nR%=H}#o9<&C7J4n?I$6F{-YbwcenXD+6crCUI(QJ@vD4#d4))23$-O{
z_|3nq;mDgwcz0<g1S$wca6$$#8B)>4YxqJzk#go{j3WJ1$d;4yI-)>_rWc4T0ewS;
zFyvVA=1WkUz@t=}nu1$MlE~by3A5Zwi5WUkdx(Pf)MRBIF;1EgWk?KeRP>*M74=xq
zM7G3$kqz-wzYP#q(R0V=rw`i0YHA=<)aD!+aAtp`swYvz958J06bTFlhbL<4yPs=Q
zQx@|N3d?ZC@q!{U6cB1?K+-Dpm*5c?{H;C98CH=Bn>Cxe!9eh~)mxDnJOUD~Y!<~<
z1AH=xsKlAcJ&nP_<?CF7M!=Q0UZ~`*8Xg7=(r2hW*##(4B$kARZ<1siJ8)={d{ei&
z^3vQ}ix}O`t<+!RRJA&IwX%}uXkL2?Aj*NOTB!j=V51d{ck-F`K$mLMpAAy9j2Q~7
zW}Kb8xPWfxsLrCH2Bgxr5JUPKiZpaH`Iy!s&CElZ^lKU@1%fCoCOI_`5S}kdwaKX)
z1=^a?3U&M^Hda>XV2NPUw8G#Bj54d*DrHr3H~h8)bZ;-NQQlS~FbU@^@2A0D9vOv+
z`qKuiAVFIl-?P99)3bYY^Noeo1@0!;9U@SN=Un;pGPu<`9;JS;OX;>GGx0xEACMDE
z7gSvNy>3mICVaF$YX2wDr9H<+ZT}CegHZw8!+Gcn(E87n{uE&ffz8^VgIxcg;9FWS
z>d^Jv@yD1&%h&?*w>fbm1<Lkt954DvAo$Ne0)GiENi*dMdqwJ+rjqB>EsfHl7RXY+
z{_q)Oh7>xP+#T`5fB*A6bD)CV<(KC;B8UC{?W)KF1~dL><yx!~Xs~w>W)H9LP6p?e
z2lI#<U`Zt~A8Id`taJa{t#JwfsUzF`V)S8q3j!L$WVL^hVCruOv+o%YO=<TNX8e1?
z7;t37j}4<WEJLXMfsUJZlPC$|k^x46^|fC{d$wLom~`u@J$MyS@xV=9iC`!4Ivf0v
z7s!4Q^ugh=nzw|=6WySi9R)pVxVkU;?2YX=-66R9Is%HR8?15xtGyY3gZ|}~M1Qzt
zlYZN0dk-S;=&&07dePqRg7pE@xvB9ym6hJKE7a6tsE!VjlCr7?@W^C1HH8bYj|bw`
z0X1<3x`viXFj+#G;eEW(0DN!oK2T#9v|k1xkj;;mXahW$H#H<zoUV9=27<lY+HSwG
z%_zS?;vGnCxe&jHXJ8-m^jwh+kA=4!aean?d6rVtymn#^WCBp5Nk(N9I1MP6Z5b(C
zEeM>j{OfIq;?_`KXVB$l#pW#}F<|$sXxf>g0-({uslMkR+ly%PykNO+a5i>SXs$4_
zulM%#$ev35j=EuBc+QxIy7b&ntdljI)<6@MmbD*R!4i@v;`)rpM?5+?1~zHCD1V=u
z@)=i78C93OV&ArJ5@N}Ay==Q8lC7aA1h)R2+x_SaSOm@*73=@{b}&<6u-&4c{C>Nz
z0qVv8-{ua)<sMko@9I5;$p~i34V6)SR>=N^UtvkU|NWcalbp^gj?$`IaFdQ$mA)qe
zsXr0r|2^CWRY0O^o8(7RVBfm_<;xq}QrCn(BW^N)P{kJk$zWD@?kKb^<?MM`=Bw9M
zfMQ7=^@<&Ca}aNlah$yH*Ovw-iHvHo^LZjuadP%+1UNtN6U^ryr7D3|Z~SBrNzvy|
saM<|YAH!DoCHYMPgdF($b=*L-C^i+(&u31t&WgdGo3p1=IW>s=FM)HGkN^Mx

diff --git a/docs/architecture/img/blockchain-v2-channels.png b/docs/architecture/img/blockchain-v2-channels.png
new file mode 100644
index 0000000000000000000000000000000000000000..69886da95d6b00b974c241fb54a29d422f769a9d
GIT binary patch
literal 109340
zcmaHS3p~^R_kWa%ltLk;+)6^buuTfP+Ldi=vy}?l*nMVZTQ|~8xhIi|P|`(3sYK~c
z=&C|Dg)Y)fDRle4rqB2L`ThQn|Ks07V|%~%x}4X!JkRr-cPc$NXtLQ%voT}FOePU=
z%rRrek;jZNJ~eSX_{4fjd-a$x7Pr;-aJ5V;6iEeRT;bTif4RaSv5I)LD;(zvgC!;=
zdhu0}iC!WFcn2=Y6nv3TB;fzO41>TRo)DNP)H@6YafPG3k>CY_@`6DjyubHH#t7v9
zj73xEMN(;`D~#ad1p!03(ITToa<w8p))kHc?@4mCKni|?kHKq5D0m46|DlkTP@k31
z1>jG#QYjU11W^=`+As<n=><oCkKHK5FdEerh6R61MG^t{6(oq3C=6f0#;O!D@CgCw
z>jm+G`+EC$LE(nkLnDQeD$)NK#;`k$Kou`i$p3B*3iCo57HYU4P)El6{gjEJs^ema
z;XEOCr2<P24Q56r{Jlr5Qwsjx!xv~o(O^=TD;y8x$`?h(s3K)x7|}m+6A9FEEuI|1
zi%AH@hKO`xI00<ca66I>r$)ymcoQ_RNH(3thoM<m3|dPMSHp00DMu+m1^M#5MOv<!
zMkMKlG2{@0CJKgUDA3VCV4)attQ^J&CBf+ENFW-FuR4kYA@fl@oR5YMhXrfES_y~{
zsZNAK`>J#(l#jOtO-IKBqYa`!QaD1sH<n7l$*Ga?-kcDgTFs3L_s00Lf`gO<gwBVn
zP%wOG(Jb#U5>0KGPb{Y3$>6t6#q^2hCW1j=!E`}1O)TIG64a7lTp~iA5DTNLgj}*L
z0R`m}VT5obQ5VZq31ob}KrBPT5>Wy<RU5{mK-DOQP#qd2MnwB~i*SSx6jTtUPmE^q
z5@MO*bSj-5CO~oYK3p+{0?{S%(O^0S0Z#QzWWy0qZ<U-$*T8f%zArwMClIRms3>2p
zUP*!oG#nH%7*6+&^$q36BjDUH0t|-o4h7nVq3X3<I?5X<A`l@ky3$u5lxeU8Zw8z~
zg2R2tVIs6XIEEmJWvWynm@JHsV$;Mb0?h}C3uklHL>VETEtG0Q<54<NJQgpOpkiY%
z^q4rR6o=GOV-jP7aac)|UIYoENP^+&kf0cvI)TTe0dZsWY;PGQT7`yDNZuqW9}~?d
zLRhgdcuXuGMT%8~qY`L|LK-?&9D{<>Vi9VCoP|s!79FnC66297NFoOxE+NstK@-3w
z@Cwn1@KO|(h~r3Ou`0Y0mmmQb$S84?mczve`FL6)mK?;@GAU|?Lh36bu;L~0RNo*S
z6h`un_2EVZYvn97OTr?0t6~Vqm|z+!DwrjT6vuNhk<ny>@({Uf5?VqaqYc6%L8;Ng
zV2V)1q$!CBLEboTWfUs}+=WMlk<oFSNFO-U2gz21abTz@4M)VFz!emMN(rTfsRaUt
zH;upur(=l03M@{76~c5p2$7!v4JC!bLItE4MI2e>6RYQd@kH9h5SA(gj}`NnP&`(W
zNW?`kqQzncO~a9~iBVCANF|O4RwUx6fZ<_;dK8Z;OF&TBz&gP9(Y`3~8ZW~sed6RH
zC>o4JiWDb^LZX<k=tLZegAT^}z{z?DO$WX#=OwbDcuH^J!U!=M4Ts71m5O<Z+=Ot6
z2p#1UDPv1zEG&(M@I}X?;;CVASYE7v6O6#oPy_{DFAZYw5~PR_D29zg`0xqgd}tU0
zsRDzE#Tt$j3l~%6hQq?+3G9TJ#3&I77i-ufk3*+3kPse8A{Me~G=nXPc~RH|DvdAa
ztHRZ~P#+u&MrE;LqP@v5Urme-=N;p%3Bh9EDiImZfZ@10gftk5K_cU*u|Yzi)(0jF
zk77vRaoW%X7FHGQBcp)r;p50^f;N&U5VO@R88ki;N)vm-6r3O~R05n7A(|A<QH4q4
zV}c{qv=EXnHk7J}N5z0EY!rtbB8ZG)h67O(fJ8BLZaC2!{3b~7@Mt<lBj+)I1PO^k
zHJh$r@R0BrVxl^VDN$ooI3E>*9>Vn&hwwx}2#h>I9D@_1G(0pGA0>rrV+g(~sT>j#
z5{(wI!H5tAhl=s$#0u%)4cUi*mr0?CA}JBZ4g<o&aJ@-#yaIufdE<51Fnv6W%#T5n
zskkVy(ua$ZbJTil5XOh>8!VxO>BU58e5@}k)R&7<i-|fGStCYDW4T&M5MLC;X8S;*
z!^L3L<R~aZr;m*Z50L_Az+^|Fi5PEE7)Hd9Xaq3=ErUS_3TH%0y%W*s5QRQL1tqH?
z%mf64BBxR#u{e<!9h(rzBKyP;A%qwejVe&6!#D(}KpscsVac3$5;YDIE(r^f`XWT$
zDq!Af6p91o`36Tp3Gvcs6pY0ovXvSI2M*<i(YS1QsBdsQfk2ahaEBo=1PKf{HZ~~C
z2PYR$R8TD^JX#=yc>7SOO0+gc6c&jL^A5r&!M*YE!K^4<h$Mlc_Mt?F5!q0w4#7&~
z$VHT3a2X%335t#j1tF6V9m8PI;NY_uxE>c4tU*(lP^34T8g8&6q{dsr3gzi}K`H<S
z2s$#&aJC^}27-<Nku!yi5V)EZub1oDi0EhqQ4FDTqj@A>eh4v<$I<8+p*~c!UYkH=
z!DICyu`oUdhTs81V@3zd6j32!j*KZoM`Jm`8Xq#22oENbArv-2h2bUg@m#t{i$thl
z=wN1OES0PdPYf5+*^p=)MHL$y6B8K|rl5<%!)3fMHHIz~Nb#W{1mWQ*JdK45gJX3%
z6hcLnFbE-XPC^im3?PCeR6!2H$x$*XlP6b^$&ethMKVH-S72~TqLj|jQJGP`(K0d7
zhl$i^gnSH5EmgpxNYM&i7+dQdBGi+jsK5ttq&T)7ErBPJBg0jYgg7CbMW88BvAQUP
zCXoe2qEuX}#^90FGM_k+!K9)XVc|@fC=4GfRq7c^Um-1$=PL;lBcui&6BZBTih;_-
z7^#dI3JYdyr1X$@WF%5T4huHKIEpF}uFyylNfdI7ghoju3-}lwf{B)^czOkcq7svQ
z!thKu9}n);lG!Q-h7MEFSUfQZExss*)|W)&W3@;=jUOr{B`El@L?#0v4hdGo5ycb~
zoy`a`I2-UIl1nkcP@P_&SE6b1ID8mM5=5nGh-3;!jc1VJgLuKQ3Ozq8jG$8{su7Wq
zXkP_IC)DF;394X%uPlzO5yoMJ<S;%MOim_*N8({o39-=xShz|djuOC;N_jX7Cyw)u
zNAQ9YeIZmO1|7_g7sp^^QHd09EF+YtW5WpEiC8sL4OJ(~e1T*{2?;#74;WE^R<JZ7
zXc<MOgy~pfAq}n)1KlMU0;3A83+Hk~I2{=!5uki!@}O8@A~gnv6A?sAq+AypNkT&*
zdX63*oj}tlwKNrQECezO!{;Nx*Lg7*ogt1Q2ryk7D_9dxP7rI6JUv7e7vvqx1XoBn
zvRa1F1Ys23R2W4Kk@Le<(IOau%Ywwi<x&J0CL%L@wMwb49IhtGi0E)>7=%hyFu1Dt
zFm@1{Lki=9VYE^_#g~Gh5EE&UbYvt6e1w;S7aTcKEY?DN6j-<n0o-<U2sbK*jAZ$W
zupw9_k0hpYU@;iI1Vm?EJP5HE;1|%|gh;qTjHM$XEG^epzzXBULSwP45K(NrB7`ev
z<5>`I91@L4j3t3NFho8RYS@aehDAe?>AWB)QYlE3#VO!%x}eY?9akQWL|~b5^4K^X
zEDAzaDF~`?p_)er@dB0*q(nw~GuSjia3nt@DkO~0PmGGzuyGVolrn)87taw>c?<yr
zK@HciAw;!4M9epY25+q*NbHLthOmiBKAmH5ItpPdN5-SkC^D%cF&-)t$IIlhXmXIq
z;8|E<Bppl`j}K*%gd8}Vfruot62p1nBtAZYF5?+=oEGns5J%#vLN!Pd)*InNRmu4%
zW(Yhn2<naHAh>aOypqI2vvEuT)tAkTWx}{{Wi$!R4UY4PAxjjrV6ovS;L&7ZTxgI$
z9zyp~#4vG8IWdfY5o_R~LN&~rL13!mLzPhgm}8)LHWf-j2s8pF)DZflLV{T7jpu|C
zeMs~K4FgIDV#wqONHCPi)uDhffrBF8baDJBIs{LJLTNlcN-PZ}fJi5W&_IGC)a!6c
z4m*m2lR%{23WSdjks1P%>UDG$9R`#7vQR2H4vr@qCIh3P88Ip`PZuIUhAQJQp=dl*
ziA$8k@Y&*MI3!ArL2;!5h$7raB4LT8L^uTx4GHBFHAq;DJc^1}(_|VtCx{cKXG>@*
zX$+L(6OYmeI0y=s#nwh@3F0U)hZGqa8ixpCN`sVCjl=*@l*m{uS*t+$Vn)#_70ZFd
z;&I9tE(=3o3b}ei$^d?}1i6f_3FT?SwQQ)b9D~I|V?&~YQF=H53sWmXL*xIsPZ5RX
zCMMt$AZ!_wuLb~DuZ+i`NQ@{702hX!&I?CLAikJjz9cA)3iVM!V{stM5Gn+~zzIs4
zfI$`{_$ov3e33*Zqao3eD5*dZLP=mnqEXsdL*ye6qhlaymMRVk{^o!oML|drEt(gj
z!*B^Agr1V1mJy=j#1xK3#159qqY-hM5Lp}#5w0f-B;JW~S&)!~4vM4#Ul%SR3OKSv
zfS`d+$`nDN0tt(+M^of5vP8y*E4{-IdP#x~8_m^_bu=_Ll#dDtL3?YNQB*dHK|xCm
zm=6Pd9s`UZPY@<D3?L&?LBOc!p`;LwBv!9h#BhmxB~vBQ`9#TKd`b*QhlFw^Y8{6T
zLklQKINM+^0M+Pyv5AJ{((nWFT*7~H%FzT9y#FV6hvTy}<t}5!%pF6*p~JK*`k$I;
z!-9SwKG`SIwx6F~jvsqz!!l*!mXb@R%;g(QChwoR<eKrdZB`ph%F!FnZ+v-a_Jwx^
z-yi?9+FIG$|6%R3g*J<t_W8!ItM)$s{niqzcaP5~o;RczTW<|p^{h_Uem2fIxX3^K
z_3a{O*5NQW-YK`fN5?bwEnQ8}`_Bn9GNUJfTZvsacP<P+r*i$)-;pxO#;dEhdDpo6
zhXMzBnz94duM4YSn#ej&p+7u1=hGRg*=}rIJjUefw5`{QadQy+qAAA9&dBl4FRW$M
zY2!}GpUyl$*|mA^-r4*7*O~<c1ZZ`-7i|@x`M&Y<`r0a@Dc*IQ(ODrmN!8WxJP+=M
z%82uapSy0FWJ9=_yCA)7aUrxOkWQa^Yme_(UHYfjMe9pK%Y&8i@$hegb_WwTu<EN>
zV^VT#H@p^jVgvm<-rX;^$n#t_e*XM&rC+`7i|~}>(Ukbtx9~^U$2_`UwNw7?GA_BH
zA<$dgHgS{L^vk&mLTxjy4sFF<91Ck!f9kq4apJ^=&6Dl3ydrAfATPrWv(N)Wjm^p4
zKC}AM^2XiT>sRi7*Kf@b1T4}@^r$DU_vX&fB1qGu6%Gb@xCJIRj^pQ*w9K{hU!&z)
z^xg&>iu?&m`usvfE20-YD(XDXhT^MLH!|yy`vbeLr?Ud@U0naiZKYu3>syrmtJ}k4
z%WQh%hXO~}dxB=feK`F4*J_XO6AcKXqn|3ztKV)YBkfSxWlYcTRHPbPpYSvq?^@&Y
ztnRU!*^_he6E6N9SqP4H#x?lw?~sc0J&O~>K1W<Ac^-Ec@3J^(SfkP7X=m3A!^k_`
zHvvU)#&5H(iSK5wE3Y!2FL`+Mu*Pmu9dCHmmv7+CBQsXfqaIvoF1*hP6z?D=*E~4F
z2|AxDY~5X<pT`{9Ibrl9=yN@ir#Tb4x^HA2_A<42XK9O4&b6E$oOUw$2Jcb&XSqR;
z?clg9?Pp4#iQ7!BXU;i(5ZhdIcWKWxMF}qT?6W1c$~8+2gV|f2ICF;MNE#mKmA$Ey
zb+gy5T?>`ALms-HOn>nzf|+E@b_en!PslqX$Oj`{`Kd*WE&}I~wM3_SQonjvv;63%
zRHtS|Rm|-v9hm&TYYaaKZf>51{MLEZc(X^n=vm#l&Pz!Y1$7Bgx(_IG(k3(F(j%z2
zmtF539iO3}(67N6&sympU|4$i1;cmeV4o$Mjx%5IN*oh2Vg35`Gva+NojpM^oYTX(
z4aj>BA=_R&AA93b?TuZDL14d|!IvJ}#ymUVU|hBIL`urok->L1z11--`THNbtX{o3
zXn2-?)~FdtDM^a5W2@_YFFag&q0Y~Y-hdcqo7;XJ^~Gy&Dr)t&qn%DepI%&Xi>OtX
zc@hJiE^U)eUVc{jf;i{)1cU7sC&|n{rJqX3^!tCzzR!3e`{<~Zc`iHHm$5NX+EHcl
zzVq~z{*G#HAudF+j{wxNfjw@B&{-R_yIb<KyZL<S7!xTr37slSgMYj?#>f;s^6mY0
z<^l44))BT?liKE}8~Iwn6L$CZZUToM{qQJPsZznZ$V+zq-4J?oL%IKt4NbPrvRV4&
zRqK`K>;I(RFAwRyw%tZdxlw}OUV=^;|E8mQe$=&Xf-aVJu}PZ8r#@@&<8ak%cGrPF
zHJhGSN2Rnq|Cu!x>+Bp*(7p$10@j?ryHm2g`$#=BGShHYI8G9pq`o$!H5=n@oo$0z
z;#Mp&G9?+0oi?;M<>2|ITXvke*v;m|BLDh0dx3;7y~|!ysuEX1GmgL7ym593Fp#M-
zU{QDHb(>nRqF;WU)H@N_&`s6i=6y5qKqL%XTIa;)#KK(Ub^F&t*N3K_7;7+nbAzQo
z9PLlwjc&P}yv8`wvRX)wD(DsxkK5(imc;CfA0~7zxdly_o}r*NeW^8kCv85^WNn_b
zX|v(D@2pxjbPVQp@{>_p=?`=A*FgA}1vOs@BbQPpWWDA$mICp|K0Inyt9~1`bFf}2
zTGRS7WXmpaQf{jdV8O!DSDQ}Fg9uw}8+Z9{shfE3jP~6jM(Ny@OWanej2^l{eNWC<
zMECf$U@n&9sYzcu^2ZpAz8C_TY6lnMs`yQJDkJ<@=4*jV(hl}bXCGg2%-Ble2j)2@
z>(>St)~g1daA^4nt`T<I$?F-j?N?r0_uz5x^DO+wNdvgYKw42dx^LOJcFxgwUdZ-W
zznQvu%Is~m3GZIMxm${ge`UTKAv^3(-#RDY!pM(ebV^&%@R!#&&c=1qYoy#+ej4+!
z<IMwsYMhL@?U3sgF%uk<sl&Jky3_fqZ-r-Divs2>)qf5A^ZOTc?TGs5vNKb5%n!L<
zzxq49a=CBIzNO1rF~eWqTFs;F-Y96!tN7OU;7GZ{_u(%wVMo}LGcqzJnweex_2c`=
z$SdPp&Ff~|;J{J+6Ai9o(loGg$FbMsVhV5wr+ggxX+y@#_0g+uPZ<w36Av~6qG+|5
zQ%~cL`4*MS&z1cCb2ZiK^N)`goq=B!&mcZH%sRRHyL_<v2<Q0A>*@A~R@Cbuwc{49
z|M@xSEIM`LtY0I8SAcVV(A~3q!h{Jv-DTk?qdpA|vL0PjzA!!*yw}Xe#-^t+dn{?k
zylWlRF?Z`%Cl0RF)qTiP_BJGs-EF7!%s4JowofxSn;A|(YcS)tJ#EVa9!8cvVfB^b
zjklBkSgoR${EA7L@tpW>Lk=N*=B3Avmzh{hcMqdi2Z5lr83dNn#E;L!51U?I+YVLr
z5PcqFh1-bjj*-{5O<zbqNG+g`EiPm@J*V!NH`!sS-uma4D_bn0-`+bAepczou3TOr
z+^YWY#16!aEiKAyt~;!`2aH7AgMymP@HljNrU=`a6AeTW`{XPXNa099@}rkS;_+K%
z?>FeEBTya>esMcZW(sk;`%v3XR{Sg)aejlH>MlHF+q>*lT8>*Nw{@&tZobBC*9z{o
zk&ZrR!OvX%O5%1!SpvFgk8k{)Bb-IVIf8<UmM2+CKJbYFPmZ^Ih`m#sY)0mvOZV75
z{ClEZZevTf_Vde%z%tGIPVsmW2+=RPyT4q~S=OEs-JeH|E|57H1vmCC(OYab4Q_im
zw7Uz@;bKsP|3*9bP9WLPrmCln<Enn`oZPV^=Ek9tQYQ=QioKXsU1OJM_xe`}hvOGo
zu7YyzPdPZw_1DjlOXsrSBQyGra8{LEL*A<`E(1#VX<&ev5C9Y0EX%t@oSY+nT3ay&
zFWydkpY`bYO6RpBU&X`e<6N!gQR(oI%ah2LC;9MB#qQr$OP-x$=}PW;dOlJ6=XZT=
zWeYRg&SieczA!ks=TGy!y>+@Tmv7ygQnmWlv-;IEzb^f$%4?q=bR)E8hHVrYT+#h2
zw+kNuUzmD9wd6M4NVntRr86mFf-nzfo1b5i|L(%tA6b5h^1*{QcV}jO9|iym<G%nH
z*r`|Y0yvo(;9?p6Y~9*rn_Nc5&Eu_co?S&qwHEKZScHnhc%FINd3vGQboa8n^Ji;o
zUmm~so0&j<czoq?@fKUl+{TNprjhRKqlbi9#4e|V5PnlD&|%hACm-gz;a(e*pWl%J
zm!OPU=xx>uY;*H}SKL}?2x7pkjCV!&eXWbb0&i$rawC57^gH#W`=_lKtD-UvAO}*F
z<-vRD2guX03fleGTk1kgN&f48ZUx~?RC(Lnuw=)vlyf}wSS!y7uCOoNU*Fz0V+gf|
za3{KdkX20u8eU>{_@-kuMR;pZg-}hTJK<Lz_|*6PM#=<>wke2v4?lO`SU)tpYthQK
zTZ<>n@R(S+68J^SQ;O#fst;SIIfv1#eO=OaK9vphHkap(BSm&ZoYxerYbe#3cxEWP
z70DLm22KA0G+p|8LExCRU?Xozug9mke)?5-YOAqT=mgiQ)^hM~q>L-%5L=Cg&s(QZ
z3t$J_tK62Qk@sH*xcwy<9F_QCkNc3@vh;bR92e{Dbt1EOYdSKPJzLT=za2Js0T{O-
zQ1(18v0k5RoI61H01Wlbo&94Cus$hiOhQD#g+Je)uXj%9Ydf5=VGYb{OPx_}$n^s&
zPm3Qg-vi$@;ZbEoDBfK_N|vs7FA^%A*7~%qy=i~8Jfx^3`bNfC-Is%hTj!e0cSU6j
z%m6@4{W@}8@4x2x6oXl8mVf`z09%}#YH&5e+(x;#<(ivc{GzX?1+2O$wcvhpf-g?f
zHC|jRTBdnK%9@KlbntndE@g|w94CM;`<@?qXaU^W!`AiygFE9H{MPAdk?TD$4Ozwf
zmI~;MxXk{t8WZ8Z!qnnSbfgB>V{VWfkPV^8e=WT{c(%9b9&WlIH>9BVelIw!!|wxn
zC+D}#$;yfbAl{vt^>(nTbW_W{iMqz}Yms}`_qRjOo;z0&ax%X6<^g|!Mx|oz-@4Im
z;1#(uuXju#Lbjo(XwJ`HzgSC67R*|(c1Ot31E>T2CmaKIt)qnRSh`v>eSpZg3A{<g
z>TJY;wF}$|+*$6YWRDSTYb&|cga^v3bwoGkwK;cidE*+rX4xa<VaXKjBV=#&JG0;4
z0~`)c&w6>&ULiC8;*{MAx%<-oZ59X$Sxdg!+<7_Fw;s7<$6pKwaXZ->_d3GfZB;BC
zHj?|TZ>BBr@_ipS$l+BS_33z+4*DpI!gQg#aVlp47*K+9nUy^^>h-O?hYxP)KjgTD
zx@%VvNjq&|;>R_nA>>_N$ApQEj_8eTh^$q3%w!7-3+qKImbXq>u<}CP?z>LQwvy?N
zkN1!riKapP?^A|XgUHGn<FstgO-F^LppaRSI@f5Ml(riZiFpunZu2;A$B&^Sp6JvT
zY4(kGm5#EeLBW=(qJX-0g#&M$t}Tz2y%*l3oOthM#;5I`ej)fmW1h!XOHU9y^Ey@x
zD42QGjW9chkx8*}YX&dc?;{yNC&C2ao>ynTR8F>rc)Ja6R*e6aRQ|X&sl`qA`7=J>
zeEL03!<(p529yh1GSM8@_0D`=ubJIkB5`gt@xpPA6NT%dee>veQQvlti`gA>nbm<p
z-J6V0w|0G`BsT#Eb!f{?oh61??1)bFI0gbp^+>_Ec~xce+}wz*Lw6oPvO3LR@35LX
zvF#@uL1Jrl6Mxxy!HfmX2`;lhBw6S-JosoO>txeu$)oWB%kw-N^U7-r7DYxp&mHSj
zP4eolTCnI+jZtG-4($wLlPKG1of)f#b>VU+As@i`9}BL2KK<cy?^8ySag8Gg*@)`}
zi6Xucc7vsJ;-=P);y|qrdBfNo^XVxpYW-J&mo+RftH7m7P%bB>dt4*!^4iOr;(Qvf
zhNJj|t>@4Gu-IgK#cw@;+U{$z^z&7XY1shHM1yqN-7VYBky+UNqZpUhCVgB(TN}Wq
zJ2|FXA8Tt}lP$n7cc8_N>W|N6SG5I+9ha>88SXh>493ZalldL#8y8-<aKZgkHj-%h
zinw<|$4hU+iHe$Mx*lx%b+P8kVTL6)u*9!WQTFFHqtBx0;!Z<wT_i!FE`W@uZUQ*Q
zhlXPufhT=Gz6-?7`gUzj_P7h{Q)aLOOU~!|ZpZ=1<A~kN0av)MOMcc<XisbAID42M
z*6f)4`Gwic$IkL6XT_#z*4qFEl)CNwbSq%Z(22z>g$Ic*!Xw^WoIB``PPN{@Q$Mdd
z<~F-oRVLhKot66(>5_H#K}2?~8*?t(7=*BjWqRl87#G`|6J-E>xv$Dzz2n%%Yx~ft
z+55iEl)U<J0(RIa)peX})#Q&m7w(rlA)@)iXXt0-5v7?|0mOcw@)=Ha{&V5j3lKaf
zmo}~jcvl($;^(n|vD!a+17_KtKHm;Kx5plMa?AMft^lcq`rT{1wFpMRVm4EDc~y+T
z2=j;$({y9iFR!L{^?K>PykaTp*8LuSO?SV&Z|S5jYYN^wCSdsUXZjAjzI}Y#g_}N?
z&B$fNeP3SRzB1VzEc?K=i{v8pd(v6w>Xm%E%yIK;KT_Hq71r2iuLs{fdhqbT0Gz9F
zeobCkM%cD-{=jBt-UO%{^zx1sDYQ42Z@wAtl4lLzkGrYQff<=U3$w6!N8aY0wUdOG
zy*c^waZX9|!HH364{pCXb*0#4F>j5B0WHYPz}8-!J;9l2103;ZqpFu5n(Vz7m{*9i
zHik!8z4E-cSdcf<RVCxr<^aFjrFUi$S=$Qw4&I~Cb3C}P(`|TTb5j?m#TNorIxGzR
z+Dj`uRe+H3PWzm2+)`JNeWDv=dE!TVvfejI^8xJXE-zYVmXP}KW9WCR>58)3FbY9@
z@@kLcwdL9SB~;C&!^b@%4^%(@)0erCli~s!<9RXrVXK?&`-g~6@mw<lL<wu{%Q3$G
z?%}b}OK$-D5Bn@EC^)ceWF9`xbtr2+7Fa9WsC-;{%&k3)^VFsyOEtOG(bTv1V^woT
zOMA}xZrBm3*sdw>xn<f-m@k0i0K*WpPa9iWhvPjnkNeKndK%(Vo(HhmoS@9LnNR>s
zpajKzo4l9V=s6plEQlMP*B35wOO>utqf_fdFC%$|{OZ{8ajt{a4=k#QlCa}Pdkq+{
z=klgWz&as}%hOE9x*n=ac$a79<uc^KKAL~{HppHa8oLFrQl-~C19lY5A6VLf4l<ib
zv0Wf*tXy2xPn%+jDO>yWUg2&Z$>Es+Rs4{=x1=toKdo7x4g@9}zgWTPGZnqPGcY7>
zN?mJ!*u?^{P@co=Z?tLyW##AH-=1jv>JY<ny1HXGa^24%anMW<i-3OfRz{zy1S^bu
z;Fi5Q&&~y8T4;a>PAXquPW$D0?0Wm;T=i~|lOMe)$7lEt^GJ}f<#55qg-mm<W>4SK
z^Jfm@tF)h^SnXWnFw+P%x@qWh_k$Mef>x*IPi5f)0e^m$3MEZ>k6%P^I`7=u-~0JN
zj@1v0flF%!3p=%Baetu@xQtj$Y&$f4yz4C6FTlK@MW-)t?hV+BK*G0wQ=41%9gv+g
z9?fpvwdhFHjVi0Q?^`?yvfrOoJUP2R?<p~k{}dYc5;tAFW<7CsE@1vPyT4kj><Xk7
z`A4*dRfL~(;^(DWZ_Rj9TN_dHb+$!xQF-rYpKtY5OGgPC1Bb*5%KI*00-4S06?7A<
z@7zqYbbe-8xD5xa{#%g~Z=Lh6wds}}5B&g)5_hz0w^?-O*fQkN74<Wl^E^YV3H)zc
z#yMM-HA<~aS$yC0HpiT&`yKq(9NLCx4rW!Q5q{^^1~SLG0hoXI7O62p;gWw6P+M>s
z|ICr;3)zQ8TrD?mOnmxLVtVZ>Jg~Xj{yw74A6R7a)^X3)>$Y!<v$WsHPeYWAH7A?T
z9KTPx-FV=7bzJxLPv5?=-&O1Afz`&xgB>BCj2!BMk9T-gMPIi8=}33s%=36)GgFS_
zOR}Bt%5VML(`iCrEbboJ9S(rOWi-q9Gg8MnFt_9K+P!1%j5$Ew$!wOEwI4Zu-p>H)
zYrf@`9EJVB_2nL2d2z)iH^&sqliB)t_x8;~qtV1{r%i`LEuSSE*jkl01(-|To^~69
zM4wM;Q-s-cz+Th+?EB&Y$nSpmw6Oi`x*h)ITNZCYr(W79ZFo4Y?D__&%sn(KVcGW1
z-9{fDVaBzbeV4vzYda3<TZ;Q}#b7p(Ca%nu1b}MVPei74UQTSuhl*>qwoS>#)=W@5
zzfj+K_hwTQsdZeobLc_p;p@Z~mp8rW?LAO)H?ILdr69s-(Z<YKz9pBfO<85a)LB*6
zYWlZ1Z;BNBkojI%Gi>=G;WXkU&tc^;?#WS317l|G`P<$rqAqRl*}Dh#n%~S~Iv<JK
zLFilCS+S$MG+vyaDfmn5xEc+6Q>N&W-9pm<L^i;wWlml7y!<h{o`tt3+3i1XPEJdT
zeL3&wi}X|DY+yTZ!u1=E204A7VQYIRucxu5VPG|^$MJQ0M@I$MX=D~Kj-ncBLWWP;
z@d|0X*WZJ`$yNq_$SF9XYm(3U>~}aXfzW$a)oa#I*@gKP{6IO_zIN7=^=|Iv_#xZz
zuH&t$jFwHy5?vff80aA-G!I~i!d*mYEnu(P&BlJbe;K47|7&G{ExXzPeX`^Ra`S|w
zT_9KSU<Yo<8CmN7g4f`=r#;T$#?RnGmtRhs&7>URzqNE@RnJw;XxvQu@B<9g4^NtX
z24$qHUI4JOi{rbT#^-?isL1O&u_E=_<Rdh7K01|V9)GBi4`>MJYkSfA%xuS{Jwr1=
zCbuBaXxWTACa#;_f4LNW%I4(-O4{iokMP8MWxD7!w69a163$%iD7CT6Z6C1O`dz*b
z5O(~E^fhbOH^TPdx6e4aB6WDnCQjP6z^<Z+xV?82WhZw6E^w^hEc6ER^pb)8uIMNt
zU>u_-KBMmH9olWWdl&GBM}y}A7=%O~?53jfD#v$J`5%oQ+WO+t(pvk{C3_!a+U15n
z4c&k&6C`IPkS@QQ|88fjZd?b_pv;|?fEARbZ#lX8%4eS%x5oxL6yNouxTp6E$F`ks
zOqgt+GG+GSjZs;cm(lYxuD2yz$zH-@0v>+A<;7Ytw(Cc&%ZtHngXB}t75yfLC`*|N
zMx@xf{`%4Q`N8vy7{FuKcz#+-cbd8D_VS=Vgy<8A$1^*FS7ZQ8S4w{1p8w+4gmnvY
z;I`>-vh>IBmGj6Qfm*Q4^Gn|C%onZF+8LHP!wb;PGyIdX)kXiMZK?C8vguBoFHcqD
zn#-jPjEm7??BpM?Z?VWSNB6}$r#!G5?|RVQzJ{8-DtT*P&c+*8^{#7-0Y<eh4&)ny
zM86<Q@MllAq@(-Bv(O}C==`ZG=uS&{K8aS9MH9o&q)MjU-IAF4Ig4)=yS%!d!Ks;+
ze5lRUG;_lsS=vLo{J6{zh|0%+%+NH(u{>^#r-AYTo<H7rnu+VZj<}~nqmxmQWkE%d
zAGeBe@z|SFxH|&F-sRxbx2ssn?;oDtJwUOMl)R`1`vb)GGy^R?aqCR^hVCOTE=4{9
zqNGj2&B(<))Qxw|HvRnC`cCNFT7zKHPKB1>Oo>l(0F~U=VL!@h17_a+pQ?b(0%qBX
zhs#cN{LugY=?h8&8O6nO3w^rM!6vQm1Ob=tFJ7|6SUB}gxfe<MG^bzzsDXh@d49{C
z_!S#QS#1we!?R}&!0DJ)b}2|}V^%uP036=66OmWCUcU}<H=Ky|R>1n_#IE|h-x{(j
z$<d%!rKju`vOTm~ZT>ricJ}B^C&rAHO8_oXCM29rdRDdl?lfEP*r|Z?*$7G|gxB8w
zd4|omP68R>aQPUcQ}b4(0gZaP0}w$C8-ZFO`uZ&l9wXoCtop4bpWXES@tJc!=e^o|
z=?y2Z7s0I-vZ_g6dYYoYe(RWP&_9WR6KXAOUR{kcihkf~`tdsV_|=#DEc+pbtJM>~
zzJF{p$A3-NQEYW=;cKU=FA)I3LgQaizbwz<jPiE?<&lrZLUarB7OiRlixC04?+pmi
zP8emfJ?EY;HE_1U!NIovYtEi5j9D$5VH>b+Nsa9B^-dR|=5;Ta=beFRT^ilwcT#B-
zYS0?67muG!mp>Q|0g~JRl>hD_hO_koCT@CSuNP`wAR=x@)e|Ae>QU=|F98%&CSY|6
zhqnDK*}OHmu<n=H@HTs7<=aKy{u~D}UD{SR)#S1bL=chlsq!XJZ33_~>*9v*#<1$E
z9UXQca;JDaJrr6##mvSl4HN(^DW%4i8Gu_H4+@x@>h>9ElwFTw)koU_3JeTL1_iHZ
zkQ$=YZ|+!3rtU#avstv_D&R{?o(_F`{}`%%Lmzy8C+h~NxY3WWJ*mr~<A9UHpO5f;
z(SLV)d(Q=n3E%&;zkY+TeOLHX^9pTbZ*2=mw%s3=9}S0AKdo<Dm~F!<C8Wb1`{*41
zDu;P8fIQKFwal{FZsWDQ0lf1p?MAdW_cZNrUjO^&A?5+I&Qqc*myaQaW_5XnHguXe
znUUvF^NZJo=yW=Kp<`Wf4`9|0g;yANnjgDS?9zF7N%E)$gChW&QY5#Zj6PD)_G-!X
zJu_48mJ_1YC-2&_(&kv_-{1GhPyv~143e9aanq`N>Sw`1ds+*TStTz)J(%OCzLgIh
z`|<h3E!($GTAcX7+>{LH?sEUIXJ_L|cfWn};zjZXlSxj%@4_kiuWyWo15t`+b)amU
z0{+!zoH=vm@FmykPXN&#%*+4q_{<_LA$83~+2b0w(1U4a`y_2gGxo=??)s1(xa8MI
z-{0qd*p^S(ga3f(fW{IM%ZPhtojLv_<;R;|?Qhh?oilT<4JIvnv$$mXx?sf(JJ&U}
z1~meCn_-){kS-uNVm`#tf9;5Mz18G3-YJ%2jdY6*SI3(0E1CiRJ`sD@=|RrVU*M4Q
z7bm#qxR6SO*IEnU6C{r+H<g#q2kdJ3<?I=rykbD+UUIwvYF*Q&P94MHaC}PnpI=^U
z+_}&OK&Fk6S2jliz>@DHnE~q9n}aePDn5dQ&;DHeYxe$@#%$-vn3(d)kFQ^E0YwR{
z@XfDZ-=CwjpH_XkXaC39X2Q-k{eOA^x_l&KJHJUbdYpqterR+(^ti^IHz?cs!Do5a
z`BjK^j_2kChh@so&n4lf65V01TY$<pyfzIn@Q#MFO)^HzpSx@t<z)Eq)jNA8q*%s_
zzwitqS!cb~!|n6u&&j2wrDh>6XS29YzkmOB2RzHmO(V}h$$|Cavmu2oZ~_GGy(@;4
z<3LGMj%%n*-VLwt6M;*Ag90Q<*_AYM!DC^4{Ob&N?NdO;_p}s*wt9aCm5j%Sw;W|S
zp_>Yvjq)#ivq<=mvq19c({C%aL#OfHBjy{<{4u_oZewGJc18O25VsdQ3{}^EmJRI8
zK!}4hM0kAd<zn2$&o8;7Zp9UZNKhVMPt;ZxGE{?oEFU;71Jq6`vT&Cz3udc&8mA5Z
zx?L3DyrNFq_i^?24=lj+JkGXrhBf07b3K>MNVi9_GbuafrSGn=9LSpK$~?uIGJJ0N
zvdcR^rsUlCUbL#=l)Nua@>+4p^^Zh(Xoa!;48@JQV<6kOxaRi;-nmYg8}y;oruU=K
zXmqv9th9#OXMk5|d8-bjE#-*gcp&+%AR|*UK>u4^DS3zH08cdsl-10qkO8-m3@WWh
ziZ+>(%Puq;viR=;-*k`t*`4#4TW}jJD`ZZ7r%AtdfYNi|x76%{?S7hm`lTCh@0UNY
zbnp${gGvV5s&Fj^9-edlS*{xc<M|Hc*PRyVru%>P?Jtt-qN7PB<@c2KRa5P6dExp|
zCqMTyrt)(8n~FDv=tq6ZUpfC8*JE<nx@AYj?N>_x@g7<@YU`g$lK}8P7*bSud7`OL
zS>O@tRS#O-Oc%LjA3!n#%2d5K4_9t&`Q3h6!cjsWfwqpryPfX^11kOmsCZ3Zvt;!*
zYAd-StiqB%K6T?)Q2xPwd{&<g7T6V438+=({`8IWnD=pKmY(paH(luVw*Q{xZ1-<L
z&r|o(FEu%Ak9f4|-OZ(-u2}Z34qM*|F*KtbT6U(Aw^Dv91)b`9S~r@M2bd89z5MPH
zSM6I6I?rb{&g|G`n_QyO5l-L}z`^HE#fr0tZyetPN6qkT<(`b%)X4}EXEfeEa6Q#J
z<$e3f(#}ZQWh>Lr9#F4lUW>wh&^tfhHKrE`7r15hMs!neH4>s)w{l4CyWznXME9!$
zer_voI83N<xOVRsJj-9gn-Sl;qv&7NovSylN+_l7@YfCSzXp4Mx(l+kaXoKGwRi5^
zOV>bYA?%ntcZJmh?5*><FY`b_p+ua!F@eZnn??ft-EUUCc?rLx+@qOP027q$@>q7s
zXmE8HCi2IcNdIqx+mWBXPYNs$Ut>-E^0R5uDX*s!9#?t>?KvA~n~QUAnLwYr+nAX}
z{Ptmrj@Z|6d}RR3X!k!&84dSL_%X@Q=<A0<zO?)gO>Iz_I87p#X(f*iV?Q+?_hl4o
z9s0xHZSTLxC;V9u@qkveR6nio$@dpszp>+;ua3-{&e75vuAA`dSAf%H-JA(nI#yZi
z&!NxlwFwJ9JinL;O1Pb8rz-wR#Umontj}{<4fPlj`TA1v)jgecGYrnDc{=bw*?z0F
zAE6l^eA62qTVz)UBEl*^77KR(nDZnq=C+SV@gy=x(n>a14qCkb^KrVD<SPi%M;|^S
zZHnQRKdMcTq|NeWnz+pgSa)^K`k%=O?;chx5TuNsi~;e=QMMBRkc)qQpFiB=v50<v
z>22{>`2(pF8|4!wSU6k-<;qq)0FJ`mSJw>wGW=*@*oK^~@(eiHL-VF1?wHw|4VDW6
zUC^o0y>I&ZwgGE(hCt}7#60(wst_$$+MWH_3F^1^@Fp%yBOb<5S7+@cepI=4_d}1>
zTbmdAFOYfz4g!EFj%?R8(12wyys1{kmYvPtvY2(Z|EEVbw;KBTHuUUiqPfI(pnCSr
zUFej3JFgsLSh6Qo&DsJdJDurub}QbM<mG0nt7>twL(2DbItE_2S4K(!DN)6i#_~AJ
zG~(%)1;H-Uiv)S8vp^JO!6`z}Uh>=7xu~mY#fv5X#02O92)}V^S@7PO1LeLJ<6U31
zy*h2U^k&gq6D~aFRvIV^J4RmKID#y@Q2@Hc{yYy}awG`1(5+%+v6WDpiOE>Q4KKx6
zB<{l`Pc#9XSN~)$R<VFY10-_F?cv^CE9X9T2U>h^tMp_(P`Ejr^3GEW>gwvk=uXQd
zO&-?&X^zUb&bo5}^mhm?KHBA8?K$+N(;%S|uZH5DKS#q`eEM$N``_DUav5;W1DXR5
ziJ(cVjcM<@FJOJfpWi<$0H2Bn`#%Y~yTU4$bAR=JczRx(N2-x_fQhPud*c4xFuh)%
zaJq0=`b?je&dL8C_#024VLeMTw`|$6+ciLR&&6BXPCvciqi*@~<!wLqf|jUA0QMR|
zbJwfZ!t!Tx(ruxbrNI{#6-E=^CWFG<kz;QKH2|f4d@#J%FOi-31#mI%n^(^lg$VmW
zDXf3MKWXyzn(kkZzaMHV_TUXx9?xrkQoF|D%MFhkJ0{$w@0W|Tt({53kLSk`QlFLH
zvRW`TIgk(NZ8@kUdIGF`P@JKD-#I<i()IFT){(GF><-SFOB+lM?@O(ly7NY2e|t9C
zv?yUzuZr!A3hsGS&lZR({`aAREs}HHl3!fea-`LbkKJB~R2=4|nV4CFE}-hpvlz1V
zI1`f!rx%v%mgojt&Qg=xl)0UmOsj>U*l6f*c-2x+`Yc4J*B?HxlnJN!hkpRQbpY}n
zL|oN=eUoiQ_OJW1b=v##;u~*j8gmvpADqlf;<e7cdsu-zwdlEpUG)L%pm6%hxTY!N
z_SAuB{>Slkf%Vq#RUj?^?7FS9f^g;?tr6Z6U<{6DLuO{?NX^e1SWCJok)ODy^Rxu}
z`-)Q#FzOS+)|sa_27wCWz$|X<mH(L24&#BQE)dtl_FBd}n3G#7S|x_`_0Gybo810q
z^~>s!BO`-HcC(!P)~~p@E<zR_2T($SkuKA@*8~(CCMPC-pO|8)v*>;E=FsIG08}5b
z`+o0MO99-`FAWrj>H6;<j%~;p++O2&AVT#u{(Z^1n)vtYj_$o^61~eDcVpYw6CX}Z
z$SDurEHOHBr}~?6yz7XC@9nar7sjCdG4zikXiG>T<6S4-om~{L{yJcz+hDT_)?NQ+
z`NghArayak_zmBGVt{AczvvBz`PB-rBga=>WW&)thuFt<o6&;zE<PZJ-?W_R%V!fo
zE*1wUp3`Gv8|?sv@SXFqKn*9CP2q!Pls4Uf!_DW<=Tuo0ZiK+@<1zp_b?Mo&6(+9L
z%a_D`e3e2+X1kFv>OZBEAL^u=USAOP#jL!z2H(0z2CCD@CrkdeavJ<WdrbpypGRtH
zcG;A_@&^!M*`7y+{-WX{;Dxehy3|^%zkiT+MA$rMv6}d6N;Y>;wZ|_p*t0jc)*0k5
zOp1tqCd3yMp^syx0~WX14is!00RJsmI&hx!I~SX``KDKiWv+)NA|3N>_)hKZKjP9l
z{pazw=S+CfdgP4lJ(W{U#Inl1ol9!}jFZh8fw|pPoYjp+kH4vr%t#mc<I&3X0B=tg
zZUMQZMzzAwLYK6{xVD%NvP4@y&C!v1#{?U}x2^p>3;fDSt=Fpr&4+7UjEsy9HyrV(
zFYsTxxa>ozb;8cw&Y+!WE5r>n4efC6ss*hfr#+P*KXjz5b8#E~{z*5hU2opKYYL{M
zEEN*}#>s_fJ10e`4(eWcet&nD@X)hUPV8IHit~C-<R4jarFF+Y&eqV4H;KA$3AbLm
zbGAv#TIx`uF=3Bw^4)8M=&+NFR~MEX2i<`HPcp2*nOklh8W}lUU8W&|e8EvL(WNE4
zUVpmt2?kNqUL}}B&htq1OZ?Dq=@R;ZG`GMFwi<Ui^OG=_7?A_=tP;@I5Por8eQj{P
zelRT72~EoQ$%R(_pbq^oIaJiUAZM)eYd>e&ct0tx*6Ks)t|K39-1bdCdOb^iJi=()
zhn#fFp?)i1_ms*%``w<!4Ow)5YcP<C|HX{OG9yrKDjK8dYisJCy?32v@py;Xjm1~{
z2kPb;V)`!={xI!uSVh?6>sed+2NvMD@vmA^0UQ|rhiG=uU;Al{9gIJb)eNn2cv71%
z$<%5d4%DsbH5<nEeLuAE^0(nIh%-gvzxHQZTF3oO;xE0`9I;(+t%nG+wg^q)cmDMK
zPg(=msS`<3!J<uHdaMHC=X^1Kwg1tJ6~Ou@-+pJX{u7X7P*eAhh@qEc&b)0PEdEJ{
z+~+=q-n=Cncw2nV;&$`CH+2``!0fL4H9HR~;C(htwmnbz@18wafi=gE^G>_VpViqp
zpZWCY^u;?j%cp}*<GZi%fX6fo&j2;fX1j&oa{mhg!%rpkYpVfL?((#4T?@CD%L7ZF
zrUU!2-#2PMtHv2sOb5|p7k!YJc1M~|18KufkH-i8yGrYcu8=iD%Bz`k=9ChywPe5_
ze~@C|&pvIJ`$;!iC^t6YH?LeU(d$|SZS6*z+%>~LO-`#$Zz{j-&A*xL|3rR*kXjM6
z_5Hv3@4{)I2W>HMW$B9(`mQ$49v(MRJn-<QIXMbfWMi0kRen<5h8+Cra;NxP<^Z$W
zGxyQ{D+IT>Cd(JCypRU!eOD)5zZ(?9&_|0v5v=6)b_1QVwKmD)K`wVIs0SE25<y?h
z2JDt8qrIW4hYh8T=dPf8CJ-dZtSdX_(U{GC0qcLK0ncuzRs+;yb#vFEOwbG!c|FYz
zG&n5<!S~L&_?TG%>t+E?EGXI7<OHZhJpfI2Usfp;$7?3s3Tv2h<NMxAKhAt)RG_)1
z`XW|FfVl8xL(b_hXI8!L`~^lCD?W2HZAN`xg=~XwsY_pUYtSh3Gb-c4>7(t3NJR!H
z;#|+abS~yKz5P4{9ICz1ihOX6fj!0m_XO?7Y=W%*ChfVk*M9AfZ`VNLp6wN}m^HP|
z(3;wQ()r1gC!Yr2arz&hu>k2lcBebb(3yTX;=yijkufL;G*Yj-kaFgR>|2r#kD2nY
zGGbClNJ!o4@4+UEYQF(KB>8S>kh7-09VF6Y%&c!_PI|ql<o^nybusl_#XSaZ_&~In
zuxMt|mhTSHukPTLza+MR5Z-|%^;~HQ`ZpalJA3}Tq17q;R4gMca`}4Q>~rkbQFO~_
z=Y~lJb=bN*P`GB6|C(@<8LGydLf}m10@~iaUHfa~v{^un;(4X8ux`yTbJHh~Mh8_e
z4=6uATRJ_r@n{a%bH$C3p`nJmcc&d+QNKYNx+rtk4btj?deDC!bt7YTZ0D&8@$C=u
z{d(N@m~`ivGuLKuonfncZa=NOgl=l3BtrMUmQK&Gb}z6=tb7`@t*t40F^vppTMPJ{
zzpe12IOa|Xe$rsmiXY$JN1JzFJoCr#*Uhg$Po?9ukp@SUJ&8Ev*u08Ap4f;rw&Lo)
ze0qT$lod>4g09a-If~iE%Ij;)*~4$jsVK6rh0H~{ozoAx17kdJVG$)7boG1&)k*sM
z;o;#+z>A*Vg^G*vdFRq&h>1r7zQic$InZT`TWo*M*BlR+ILsY9IQ>qXGTwz~4Ls2Q
zCF-(}B8LGd@73S>p_@PV-CyXkGG`B(l$Jhb5fzxuTvak4Zx7pTHT3^j_{Y86xcir*
z5fK#rFymbf4WQugPwEH7{MOy9R`cvm=UO{gr2NUm-@mM2Zl)b88jD?Y+j`tqoSZsx
zPQzHM9eg=?U%(Ut_TG?^GtRWzdBxAOTWtayg6AyG)UEfx|461Wsy8{O<TP$6$o!k(
z8{}2vId_rv@hMSCQc{xbrlEoNlU{nIH5a=Of|6|vDfZNp4NW`dGb)&_r%%lT<eUL+
zbV5A=t^H!WYgOUyai3w6@atZO9Sxs$>((vX#p**mz17oV7s|sH?Vq=^4^}#4;7C>#
zBhHp-=9(W%QEt8oT^_;xeq(p})@QkJqs*oLQ+g#kG4<ab0QW@-{@1C1nE~4R+;wSe
z%Wj{A*DIoa*=+~n%QW^g`0BZ9j27H+_j~LSQ5&|j5mfl5NA9$9dC}_Daav+C6DdFH
z@aN0zfKv7`UcO&q<!*t~`Svw)a*4^G0o%4oyr?J5a`hIbc4S~$<=%@2I$J_rCJ=5V
zZjRWU>+bgXYr$rhCacn2_a`pVeWH5SXLrnto-sMFDwhP7X!^gFm}Gs&9;GaHKWcM-
zLP}1)gV72@S{v9l4m`=S4RADb1vhgUivhN_m}qW}Go&7~Ei2GD;3<m-1hqwn!`Wva
zcV>Bg2^sqO84eSMlz0C84gR!pc%s|LUyw8R!R<efLgW^+BI5l2<-gjqlIrL?ZH`qP
zNs^wo{h#wDeKT=!t9V{&Y4-T_{Ug<&D?F;3G-@>lk%7kqW-MBf1~QST*4;k4&qj`S
z-EBKwW2jan9W)f!_1bpd{|56_9ma!w4?@pdH0EXSQ1^}zxA3^)$hb|{cyFfs_!})}
zf*$UYOX$d5|6&=RiGblT2S5Y#=`YFx#zT9;{Iz#*njc##Jye6X`V~2U^ya|ThSENA
zUjMZJgkI|tX2~X#W;8r{WCNbTx!3Zm?J?Kl*QD=3o4!u>zCT~HaWsCOa&0KaE$hDY
z>|d95WZEG>CxORdQos`vl9&6|%o&RMboY|Gn`mG4xp^a3gGX;o`Uc9Iu?lLt^S?X%
zYzzqVK;V|!*y%i97q_@4FDIV4Cs%s)9Nj5DIp=TMWN7D@X+Kr7WpsYS;=@xKKwkg(
z{bM9(1rfi}fR2U}&o@V6QcZWiwed4FE*MIJhaTNAJsG<0`p44FHxHnh(1o9T+#C?{
z_M?x69YeMa($*CY{A-2QC$!0cC%AOu#somcKWeE5v1*@*KC1G{^4720M?0cH>y7E2
zfb|Z7S>))(eg`+kN#d!+iI=~dFaObUW7<V$H+pg4sauoZT>{a09)I*9gHcJ(ePxp8
z6=9}OD5Rim^Oc`f$pp}CO#6Tc|8RDB=-TL*zvr>c7_e`cEy3@ht*ghu1R-+{+<JQc
z^O&(SGp|&+HZ#u1pSta}>PP`J(!8rh{{n|eQvnrkzS-PvgMP42bodMydPR-CJzQ3L
zaOC=}|41GL!V}tF43&#Ck9&DF<3!5J3u`VFU$?q@PKHGJ*&m-WBgOLl(nbH{Y^Hi9
zgA_LsVDwMlzh^$wz0#iWa*J!}npm{h|J7NS<9`Ff46i$-uRorhsWnOwYPNq0KKLyn
z=}E!Bm9-z%ls<!|SeB})p#L8CI->${e^1XwQ1H(G^D=vRHahh`&v2}oX3Ua=p?5E7
zx+@RthWt1$?OeR%!nc{{Yd#`IegXWoc!9m4RQXr$Us-|r&Qt(Uwt$C!3O|<IJ)5H_
zUNq~>;tg<eN%HkAf02a2127LzO4dDcKlHE+<CeWw@;&-~$x_s-#911RhVUqg9;Id?
zi2wC?E%Wc3h{T2+4l@P#9QGVv8s`cgENOU&HQ-44+}sAxZ~UT*K7L32=Kb`Fy1tm0
z%oQ6cg-xIQ`nP~uU_LGlok|MtaQn|Pts(VEQj;g331xY`{=rw9`(Mm}N7&dc`m5OE
zz%v`^zf(pcJ8NGIZC2Q}X^n-{!c@Ry6jHaMQ=4KtMvHx;@`D@;1iip_j&k8@fbCD&
zz={(<LqXT)u+gh@W6+b{@ci*3qvuJRPZvgkPK<dwBk57h6^MVGCDqxGpo8v=u>cFe
zTTRm1+*2%_(N&|RX@nR3__~Oz7!T=_vrRpgpglXdWzxSU-aV=3cF`R0L?0eJiIo2Q
z?6hTkdK8X|Ffi#!#zI4xaE5TjUk_n8BioQwfNwNBo(EWwv`2?hc|g`q;fTMueI95b
zj)L(JhA0dm53s_tMas`F@zx&UQ#qB((cmG%^z}y0XF%rCSS-yLy@Lu!r>i|z>;9_)
z){uRHPiqqx09KgK^lsFq?>+%eYu;7C{ZZ+zvNSXbMG8ts-x<!YVaV9Q!9jek_4ltI
zU<;`{u!aBMlIANx{leO7xh-HKaR3{qKRS`R3~VE66(VGG;RMit_rDb=Z4tecFd1-N
z9Z`8t-Wb~A|D0=>F{(Wcr+~kuzH5Fs`p&THq)W!21^W^x9GnEXY|3L;BIq1y@w_#f
z9~CF<2lty#?-~Ag{Tqz|GeiI-cLTS;Z_K*1kprXM2cvf1WdEJR@W2l>raAB5Inc%c
zvLw~lFEu=~2@J-*jZNL#QtWcDM;9?F{5$_VbCCI8@0uT8yk>X+@a<J+Yh4_<AT1gq
zU4Hd<f;V7-wBVcL|DE8)|6%Mc!>W3>zEMGtmXz+0g>*;>NP~2PN~a<yUDAy-A|V}0
zsWhU1QqrY@5>kSINQ;2v857+5dERr*hj)MYZ?B6LbKUcfF@81CVMfTchT>G3x1hJt
zM7NMrCbu(6@t!p&|IuNd>J?6J-DjNo`uZ6_Z$|4JGk)?|K2HGy$(aBICQbn&ETd+l
zK}gNBr5=u_mLW_42ND2JggS-F7G5Fz-_W5Gpg(7Nb|UA4Ka+Lb`hQWTX^PS*V<6MV
zZ17xHjH4A(b0rph-ILqiH`7Ra`ni;dR?u8l`0Oi?5yq!T$Z`xPWQe1?=8@|(+ZrxX
zoCv?<jy2;b!Ra_fR)J6erMnsQKleij9gf)WVK&5!p#?VD&&I6bw`{aX<Te^lm6~{@
zMvZQ4rV;@${zv;iM_ffjL<*IU1jXy_y+n>6m`dP3`=29dAFmHAQ$SgE!VaJfbn_9-
zr=@fd28#2ooMI}mIP-&M=Li`j+e;p^Cjw-D=g%5Qbx{T{L_a-Ojle@&EO5VXL<lyv
z|MPQk;FN6r{F#(S*g+bw$v^kx=j`}VANS5xK16<u5VO`hS%t#hWYXOSW-YUFSOp_x
z0vCTIh#l~HIqiyHT$!eL=?b2>z7H4v-4mF*&KMUi(nbPVVhL-oD~T=InR>*W6E0R1
zwL*f7F#)c!)~CuMJP!xc=so9m=6|c6X)oJk)U9s(ye%>8WFP$D_hms;R1!6V{C{@=
zA=Zr_y%dNW8FXX%6X)19GL7V#1pN(RAx$T9BfENqBASVoPU}0`x3#ZA?Dgq3JG&Bz
zr<Q>rue`VJ&t+7J$sR`!3p-X5e~R=!bLb1V)6Y+Ah%JOoCAk^211}D2PfjNJQI$~^
z3+l+n@)?2lXlrlwe2t?q=Htt8N-*JC9VU8v@!G=Un+4XJ_Qcf1VZ)6-_rGqKEjdX0
z6rr)?2NNG~2w(dQ<KOi1qoTwfnx-QQoDC-wNW|$P&AmLo&&#4<Lta^3m7DBIWKo)#
znF;*y%VX{}$+M9`(Sr6Q#SFjy;0w(Qm@pGB{++)EQn}(=wWaF7233~KF7zXpI&>R^
zP4d*^jZ=8h3+gSz@7t7tF10^^ZUqdd_~N_NkKV@Kx?mPB6E(Fhk@!E$T5|^Il%<g}
z3NR*OLi2mL{aJINp<eM-d#*go`Ih_0Ry<TMZ6p)r<~<d&S?@DT=CM9rvX*N<vfO1-
zA?mY3L%$pcYr;2h>{OI_x)NsA)-KxF*#Uq?1wiNPn?(OiLCB){NP-Qtq+<A=U!nMS
zb!Wkd=C!eedHF5(ex4&7tlt+x{%0TgivieZF!ZpqP`Cmqap4g;xBa{5dmAeM$E1=c
zOIDWFDY7JPe}w5U=6RuV{>0Z41kp3ORjU78ndad3c5-%Z0XYyq5Gfhw5-G}m^jx!i
z^h+KTBnuG_<5aY^CLSngzpat9Cck(_J5{I$MFx`)zj=5N9^9RIRVhsxTtUCR+ZxV1
z*r3BGK%b~{Yy*#G0+5-PlID9;H46&gJGB2t3m|#b|1~QLBuEzl!i-~4I!pjoRf{5u
z3zg1i!7M?37&VY3j*>egSIjfe6EWEmOZZSxYLVCfhfB33LQYM9<Yv~_%j=FDzr0AN
zdR6*T73xv?fi|bj73Y=7YR(>+ZcrxhI}MrZy)q>f6F7l;cw4Ubv?%8*1Hh}=<+tU3
z$D_F(eRq92qO6P)P670>eNPb0bTkEG);`Bm8JP5mB|iU_QGI#dsKVTTgDzC0U>-Vf
zC)927XoLGLn=Dufmu-A6u#pR`tz1D?lohC)_|HUk|Mml0BCoxTyemWEj^jeLk7F@d
zp}MlIukzp}7C<GM*4;D4?0+hxh3WVMEE-@$=1@uXke+xoaA&B7``hGYxO;0v)pp3$
z_90eDuD-@oo9F4a%NN%SY8HOG0a|d3(nvnsX%9p@pTMR{J|}d4_9Zlw-<n)W9clE#
zJAFNY8{+HBEmZ8k)s@mf<U@F9rcMIaeavdUi_9}h82}H7iN-Mgvn`PE)iwhHFashO
zK>bSt0WOd#HRp^!A>ETgCFanIErq-@$(RKp1-1$)M(4{or?c`G){w~k>44Dg>J$u-
zR`7D7PA?TPAOH8*A{(k`HVZhy1Uv~rQel&ngM&K}9Pb3Xq6=@yLG#yi^VbiY2jyXD
zZ!HAu555@4+?c%QUg`GN%xIwr3v|P9lDM{YaGrufT8PU%p*-Q_rSMfM@O0r-`<;F#
za(WP{2Z0{}5g-}8^A$s6QXq94o#zq$2<b#JQ8j{ApRkRays5Eh)|B!Z!knfhiF&`T
zE7Z}xkuwR0dbw<%6ZsClmw_uP!k%l!wBl|{5qRqVTRIg5e0$lxDJb-D+}Hj|rw-q^
z;HiwJMtd~4pufiY0%nW<9`Zp$=<y8KJHSbdRGi=HozK6#RVxea4RlCoIttp1`ML5>
zoz|vk4@@288ml*Fggr0yh#4H@*<4`LZeM6ard8Svc$GEO72umk2Wm2ZGGik+2|z#a
zRrf6Y5{QzyQKRpT{y+CpOWMPDtmZE1@$ta}pp|IUp9;wU`!PE|Z*AUN=j~%H(|zFi
z;A73*n?jC5R4=dXV3S6HVP4A9>nm*49?-V~WlIaRSvYW2rRga;)n(=_!Ke1rByiWx
zKpaL_h6pcoQm}XD-tU{3paD=pNlPo?X`Yx(4;g@r|63h}4={T$_0@Zp<Bd=1y^nC|
zk0>G^dOm1bZ#E@EZPQ#HFpAXkxIR1nBsxvVo-teEn9!ZNrukW*Af=Ec$tRnxcJO8U
ziC3O33uHX*Xd@Df1kFltr!dfpI-LV-Kn_r<kyl(eB&<W0soc*sVMEb=Lkwf6{oU$x
z3^hS6{9iRxL|-dDHg;fHS=m!<#11gu^8^n`)c`$Yh3ldQU_5x>DQGKDiXYy!d0h|o
z=K?r}DaBk^S5{W^w7#FIq008nwpu=b0VgDNigtG*{%`f=Ji8O(uJmiX9q~&M<g0II
zci-{cF)AS2qBy)1r+?3C(^n+(@2+Uw-eL5L*l*Z7ray-m{-?leCcy;Q_&fsx!^&iX
zVL!F^-z_%#;o>~g(2){dEU3Dx+b2F*=TIfzaWNX@K<4}f9M}p$)K|<m2Ra>;P9Zk5
zli)D|cc`j9_!Ue1J1?uIsF`TeH$X-D$7}4bnp9>2=uD8X4Jfvi02@sZw9~lyxgC%W
z*sTq&e+64b?)+Zjd84}fsp6hrlC`lLJ+Y2VItuPTu@s#TK(3=x?Bwws?Q--Gk`TqG
z?EmS%&1=!OWHn3^ewrrJiMe2aYrWX`P1VzZ+fWXcHSMOo;|CO868+RCfHsE**H|q#
zzgt2JOrrsVK-csSIcyviK-bG{W4gFVC$+&?FLeK#kt7eyUVx-EiU+z^G;rkS6LQR&
zeDuROr?J=w(bp{xYcQ9cvwz#oyg0$pD>0?ulvuP}y&f@wh@fJa#dKkik2k6n{<B4J
zY0p4<gZ{5PO;9HR-6)gtrHk6`CWQ&~PI|>!LDh<VLKV<^VD$GQMF3wxAO@R`**u^*
z%cWJBiYY@~G3q69Kvw|>G0dgT(N4{-L0gM=3k<;(R-G3w`DRM_-5L=|l=C;6Ztx^T
zXd^&}M_!3Qxuw<X^ISb+M^0;N<GplD)_33+OKuhsD-x_?zOUXL`9ptwpD>Qi1!P-u
zzk^f%GcBagqn{k@=J@bmzP+0bl%@KQKfAk1*%ID*L1NyC`c>99{;<cVLEA|pxYl@j
zD(T`brA#Rw5v6BwxGPxibb_ugIQk7t4ZRWCbkGU{tx}lsR%K&zWlZo-!&|6<N~O}s
zyk8o;q()d5aGGDBaDCFcti!7&OImW5#O0^Dkxciw)Xif3JU&JBry)-@AkSnU>&pux
zXiJkdG3x$9zex9CD?8VN8ntBA`^RHWZ>Gy;;Bi%aVN{s_IXtx{<z!)xOAo3P#euHp
z|9sQ*4;FN$zB<TAS4g2v#w3B1uI!%>N>Bu9UhJ_|+YgT}rHMSqE)`?G9subM5|WZ1
zE3K4#kM{M$*h!vuF<t9@Y0@A({7PiY4@Yb2onJJRe@c|enb%!$@6(%(zVoIdf2-N{
zBzjT1K!asv^ez1aVW!-|3o)a<k^SuO#(x-GpgRt<dYE9b192szOk`u1&)x<Ty@XdF
zr0#rsA7G~5@}%`Xh#O=9I86X!t^POlD@(oGQ)d2u75ui^<tCsXtdW#jp+ojzISkef
za3Uj;DU!7$1CE|6??1c#Q%ud*268<<RZLBy%<`DUcid!f4qQMn^&^^*_V;gvXZ9L<
z`+xAVrTjy$JPT+^|HVthe%~0l2i)Ii|LPbT@`MCgsgXp@AZzYQUmX@RkhOM#NqP8d
zXFP+xh49~`&R#qw?>5eeLk_bo$w?~^k`@jmx<1PSxl9T8fZxO!Yl5FVwb49jz1z+B
z?>;nc`YpmZl7-_<zBYYn#31OB1u=y_u?T$%CsZOXopF*#WtPhp)CD@Dsaxgt&SYFV
z_zKaf9pSaTiR=&1VzLCxCOe`EuqwT#tZ7Hz56(;gw76T^HS>J*zs10FqJ#|@TZ=9S
z{E{&yK|$;A@V+kzyf^W<%t*Altk@b8I4U4WLf>rbXI$TSLOBKwNilB;5PDDq=;v&=
z$I;#9c1`3Jo7epN&bQlYz7k+4!$lP);k&BiPuTce2;O9aJ*Zt>>guB&cBSVPmKh5O
zGU4xPid6rBS8+jq-z7Qy-jn9t!@Ajlmo#05x!9T1LWb2hz$Y>%7`%Jdf(dgoR`VBL
zju>7{`1x|n{b0wjmg@&1+3|?zYfea~gk%Zbv#TH8`&pEe02un8XLu;q`WYECSEO-I
z6)KlQfR?wIpc;^8ZKh)Ta&$O@7;51%p5S)9ARK$c#>gnWI`0Dgn0|%cJKn2eg;EhO
z)}P#>Lp1PaRYD53cQ<ka4G=Wk-FlQ4*}^_jBs{AVh!(mW=kkLySGU|^_6rK9O!HKA
zWocRC1$KqgZ-Cq$p#@+pMBSIkj*oWDYSpv39w(aIw#K3u>t+MQ)4o@NBLRdRDTtd)
zM=9<IDeZ}FN#j=aU<v6&sHKcO{SCVH#_`Gf-B0O0;;N`zQjYjB)v&4hPWFYi<pA2;
zsSFFgO`A9&of+m{2efid+e_N|a)t6yB+!XdLfi5P3P1gR>RB1IdkE0w$kKBF1h<2J
zpiK8ktVHyi@#XjEQzEC83neR~s;#fD@64}X(dV%)7Rx@rc<~|v=t85YU12U0GQQYN
zRzU_EMv8#W3Ol?fC=vu+-5{nzgBDKzzyb7C;D*i<cLqfr^gP;sK3~x<4Fw@{DcuU-
z2oX>*S+z$JFFSAfad1t)eqff&Yeo;{Xj=@G;P5MN7k}tqN9G!vn)DBJL`}zC-Q5YY
zwX2*bRk(IDLta0aDh_@*d4R94>hQ|+U0`<s*6eJ+uJ-2={)NG(p?|K$xhUe~d^=m9
zL1{z@+-~6dk3$F!C?%Ftn+|n6-Q47%%FvS}rYD1}9kASpE;ri2B%wxxX?>A&Qof?X
z_rFCVLRIG9NZ+p-k(HJ8vC-Q#hDJnVwa#;6M&^=#*VcDX(Q%~Y$wkQGj%a3y>#xS8
zf*})tq<`Y?qFduE*Y-g7O#lWy?dk_u1k{DLb3LCjp!J#E^&prLu%&jH?};Wp-;n1V
zeQ~d;9M3+PGxEilYraLbhtZo+x|3{)*4%dLoR~)T(-}4N3eoZ-;2e@k0UNx&paRq;
zLC|>>fUj<RRrH}EnjqM5`B{W{5hS!Z6p^(+osUTV!Rk<I`vl1`$odP;gQ675UM9?+
z&%Qie`LwvUMsER<d#4{EY&e?M7uKNV)xQS9zV>uMJH3Yjc+X(Rx`Mh{=OnB%aTHUj
z`)y?K*tCHbPJHtz%Ll`+j4-fHnnLtSR-O1~@ShG}Y0GU79mEm-cOq$_>#UkcZ6ZpO
zeb#4yJ%KQn2blbVy6;G&StwXbTJ27|pkGA)Zy8ges2`C0Bmb2#>Cf(iXfq5~Wq)@)
zo{&KbWAMLp?LhP;&Xg-o*P-dV)Y_#+DhAlubE$-+T<aLs2jAX0UnR3oD(vQ)Cp6^R
zaccYGcf4#TF!5SBZXSFob3Z#9&X6x|Tqyh~0*?MrAPGh(!%+TEg3L@7=5_6;$xamd
zQ#j@G)AP)gkcyU)6~uCd7ovvg6Is9;X;f`X0L@Mz`o$7X<_NON)T~2mjxFfWhjpGJ
zy6&9r2sM&YC=8Gu1Vr<MK$J&lS8?VZazv!2QrvodACzP1k58nX531}-VrhBJFlM{w
zA|OwRO}w@^Oz^8&u@76&?t1R6bYDPYsok^xLDqX3Gq4FSr|yGFB#}`Dy~ch7m-|+Y
zG>~9-VJ66HL#P#5-X0$^kEkhNkO3*{0FY_~OBn!0y=o;M<N848H7o&9K;5o;QL0Kp
zM3jr$2-6ixR4dRHl@^x`)Bc20Jrq{S%oD=r)=||Cc;BjQRJ)QGa8%;x$0M>%9GVZG
z(J%_$P$XOp!@wc6_#Sgzd*>_H(lsw3YGKDR+&4W*wB)WMd!*5mh%O97y+jGC4}o(l
z#!Yr#8bX7%&hY)V_vs!BwUnP=HbU!2N5eFhM<*T|(Y#nf_o>=Wvn${iTVF!@YcLqd
zLHwH@!RsV8)$fq5XTNw|%*-~wYlRr+dMjiRx!<t%Y=(NT^x1&RaG9ZI*kzLB`F=CX
zfyrCn)22`MwJMbP>%G00{KES-ZizEI2C#hk<fYeL<2P>foQ=DTn(u-|owpgu2Qy;M
zAM8@~^{xgH{D(_3=Rn^oiEyy+TphoPXf7dLO$KH)_p<}o7=<{1mVDgSs(~Cfe9F=(
z(}gNemLu4@f`WodQTKpRAO;|O=AQEGSAg@8M6uF~H}v9RQ6oZH<y0QJ9>e0uI7t(&
z)_0k>w$^w1i{cp)uReUG<tP=fLso9qB>kLgOb(Gb>5cpqJv(vE<w_kT^ek_wzBVj3
zz4Q4wfe8#T3vv>Yux22dCi6LTaO3)+&SGVd39Qw;fKiCspmvb_GY`5q-47o?tNjJj
zI(-Z%>HzZuBJI})(rz(e5Ssto?0U?u-Q>}Ro#E!05h%nlR~8(2rkMSoAdWLwUJYFb
z-vLC2r6dhxtoI;ZDg9Mnua@)yI!Q8Y_om#Ec;2j<*$C<N@g0J4O-oMjdH0#Gh<as1
z8*OveMo*ByVRd`1zu^pr6vQ!p>xP3c6eYSve3tFl5TNo!&2Yg6WiAGv3t$To0DdQV
zpR0OhAovl{G5cS>My=d32fSg)OeJjPrOjqwX`TUL_O$;20kBRXKt%ZLFrcmLtD4*G
z3WmpfwrO5}CR3E+?zBFjuJ`h$*`@D~CvlLy4#cMlpAE8xYQLJ-zRLu?_u}8SY`{P3
z*cdJLpuUzJVd4Lm`gBHQRNO?=I#z%fTtQI@JEZlCZ**`Fr9&$No2nuLz)05Is<lTv
zF}T{$bA|vqXa)O%eM1NQjsnQbREA)mr_X9V*G&;QpyPS(@9j8UZ=T#6R`@M!qQ688
zI(jancf_3J4OU@`#$H_0k%Ku>d4@%o)8^ig2YEiQs!@HwwKe`o_C2|s7RgvHm>pq{
zvs9L@JABe?{HWpSKER=WxBdz~npX>Yd2pD>t+eLU&;r37^h|YUloB~hh5Ii9d^&MG
zzbZ-pLod*tj9Bgu#OW|z#$ZKu-qP__{`pGZzb>`Utib+MfrQ$;xJe3PVTh#iKl)<`
zkukI)52j9)4i?s9dCilPbXC?$!AWxz^vuplg`)EfH0OQlS}Frih+Ka54+IFCOUDau
z7}pYfP!*rqA5m4d*(LSYcpN8lLrsGCthUl78q(3K`mktbJ(wN=8(T*#;hAEO=91U$
z8r=na%G?wT;9C^@a0fs(8)?j#|4hWC&esKX`>Kj`5**VKe*1d;jCaRteiFulZpqA%
zm_w%f@5F=Q!6QvNg<s)MMyBO1unD*y#J9Y+di<IqiB&y(Uwu4xI)Ps~4aJXWW@1k@
zGZ2jjL^?i$lreXU17M>*ez1=*A=_`3xO*$?s0o+VsUdt*I&9HJ?WqtBr{Sx1D1o#a
zJRJ4qPe83!N^XF3u{s(z-~RmmJs9?|IY2wpr2O9Een&ROap2gpZ?$p=s%(*=;zHhC
z+uZ4=5xsgRZp|;e^jB95iHR1;lz_$nivO=}D8;`s46mzbQin4Sa-Nn`9fA0){bsTg
zi~f`Z928@fR#?Eh6$N(zuwn^1*eeN;NFaWEuznpvKGh}%AwqQ+pC<q!MKRf`&TAa*
z;S7IGl#@#1tGd3APaW35Ee-(buwZBwQbTIb9RB@{(kmvi9n6jeK%?yIO%|m%y=pAr
zD@t+aKyOZb|NedGq&T7Eh=4fNJdnumfet4T5|BV0hye`f@@`n4MskIThwg3AutR6b
z#NcvcBmZ7G2y+sieXcUrP4OqcqDKkC7Sfw`w=0p8R}p{ZxxbRzsu)TX<^5+%p}toX
zyx-piQ+LnKLltSMpGI{K>H8mgCmr?*bEUTdPUE;)#XA1_0mHKOO<9&+`}xPxV@C_%
z+)L1;pt))v3h`(&K%5!mknQ~ZtTe(6yUfM;Fn4ov^Lm+Xv>ZB0{)%fmbnnCUdnsme
z*Ll>ks_}0;W>bo=y{h%n<9v<%$+eKAB|?@#<QACgp`~v!-R@L1XNur@1I6z}#I_S0
zi*(i-R)9s=*L6cF=L{UPewm8B5d^hqVzLR8Sr6sPELTcNNjbT>>AlyS_l%J+rDtF5
z-c7o!j*GKs(~)0exBFQWWmJgqE%k+=U&8lkfrr+g*B*mj?uqJRn@LA^ZhNsNjxZ9*
z2@xcWPQSizBWDwsm$lr9=hbO|TVULW?XoL+cAXGMo|Q5Y$@Bw7)O{yy!@pDD+ZzJa
z<jiMly!+l3+<7;=R3Few`UZAfRb}yhlni(j#nUew(Gi4eWzR&sx5(R#2i=tu1wh{V
zzkWK-b!(~^U!qG}3C;2;Qxd*=T7I`}Lz6iTHAYI4(95^bQn<Q5_6sMEMZ&SZYym*A
zY8Lyo%x?U4Xq+SL2L}fUq3bA><Y4Bh){v#&I%r+*15qQZYF*|m&m53x!$lZ0XZ6EN
zyhE5w_HT>8nc!oEXyhZQ(8dUqaNolIudQC4B4_%o1LDdS?>Akn)~&kTazMDAz<NW#
z_iztwckP=_OSk6rA_9Mj*I04soAdg}>9vGm{csN!rWFKPF5j*yNbfsNILA8wN`xsS
z32N68wx<x%XrRh(V;eb4{}B_B;Attez9&?Xt)mb?-N<If>=FCYZ1mN8IWv_vcw>H3
z?l7rb3uJ<f7OhUH&H|{}-v}88i$~EMntOYZ45$p7ySuw>*D^#@&{T<Gkw*3S0T1(t
zgyFP(bwh`_DGxCl!=IkQ%_&U}7HH7&P{so;i!F^Lw2O-j=O&VuCpDZjiEZ;!-7O^P
z#m(y3xuQX%D%*&s-l9Htcv+Rxupdv7V`8yI?5<z*q+$;t`7C*TRN%DhyQ3`aF`1yr
zW395t`~EOLFT0Wx8f1+?u!`UzSIT83ja$<*APfdieGwK0jT^)Ufaid(KkOZ76<^Tv
zs^;GtDSejW*uzCS_F(~X4xkMJtA}>+j_d%6V@``)hIe}AyLZ5dZ42{<nT6RfSo&qT
z*1x0zSXHx`zu9C$wBw0)*R|8_D@YmRR-Hr1my%bvYE>Ndd*G%HA>q4@ad;1ru11;x
zZH&Y;1q6rb0xCrTdmA#B{-jvWfEm(00X#~#YKbQy>0@ok3MF7W@JN&4I`h39<I?{1
z_>B}8{is)>4F5UX7-yAX156ZiwXL0`g_R-wf51no#0j~DR+<#a6}&};sZ_~JA3Dx7
z`qID9LAi{$3&-EOfs>kl+$231Tx~0qtLJ$&AgTfC7My~1sapkshZA_eK6~72G@N?u
zhz+D^tn+CEF$e;MFj!ejOd9I0U<gCOcPI1io}5jY-pvpQ1wBC`{OSWvq`<fI%42-?
z1$mp_Sg<2@=KCYXb($xZuhs<Fm;IzP3j<%`xc&M<0Ia`3FH7O*^Wn|?)z{O*!ev|F
z9ZNw0s6e6=>vzT%KE~;C$)LV!p9{UCE#8en@dmP}KRY`}#x^Y--H2KWY~)B9Y0K@L
zrz_7v>GMK9P*CNCHKR8TIR|6jF_h-cv#pqj#v1az5~xXa%&XNigdq&PSYe9dnqvka
zZw{{Cyn(zxK#VwPP!wtdy;9BfTFhl08~mXcORA<In*pKIVMkmTg$>FF$&Mn8E7ES3
zM+c!z5cELgaOT;j;#2ZTuS&Oupx;75rT!3Go}3k{4(L@4>QHA4<B99iLq!)B9UVQc
zU<c8sOAsr>!P{BKVJ?VViEXiW0XYg0V?)<|ajU@tV#t+~QHhvSm<<k`$SZ6Ly>rg4
zH80S&$NgyE9i&Dd3w6Mp1qY9$);nKs&?bfOlBt*WcQ~p8SNAejbp7imjQJ4szkUyA
zn$bWxT_78Vo8p1DQXY%k-Nc{;M}!j3mEJ?&;`j=8(HX#k#}_D&g`?^KAw$olwCA9u
zp+rP3&XQx)m}+br;77@W64m~K9UKhm?&&9;Q#YkM9eqs>>nxs!r>Eyxgol$x&@9xW
zMWiGDtF*wPMgB#VvHtBR`w89GI8VpBh7AV`v<&Q9cNY2|6q@vpJcR!;5m}>)xgN#k
zKl`Rtes`$Rf3ZI^a5A90C9w@F#397vJMZ-0)yoRl*l0|Q7@>g#IEP>>FV-(h=^;&m
z0IoKlY@xeJE>|H|?5fK`-(92YpDKu)Y|xpL>$g^VN9kgl0c_HG<6;BRa3<cjREW`S
znJX+m;MQ#3iT397Wb_YiH%RwbU*jGw)4?ZYk1_0y3Artg!r_q-Gdugv7tBs4$9`<L
zwAw+inWVpXOE*26wNIhS@4y2j;vG+QpS>a?LN_2H%4^3p($U9G3v7n!L<?d%YI|uV
z)e5oE1c@ny9ViW6P6mqg*4?x*Xj^8}8hObK$pQ`|-e~&ddGZu7pCaKyWTml<R1h5z
zX!5b3E4KQ{VeoZsC(;*t{-Vf=>LYkb2Qhq)Xx*nOBECoGBvrQ-`lF#YRvsWJU{r08
zxja;OSFq9R2<=Eot-3hYlrDowaTq&|f3j*nMd*rb6kBp(+}Zam$p$_sN14KG(oWqu
zycc@o*HY!D0wu!k8<vzdca5+Q;{&nTT&`jV<&s9yT@#j#xEKqndW@z-#_aA)q%pss
zKsrXi9!c~=s12Kp;}$+u)q)&e{HyD$Rz3Ahq5+?18a&p9M#za(+&*x`;+)<*X=#j|
z_33y}ts^n{%9*2Y>viwFAhI9)j~1ZV$IEL5XxTIYn@3lRZkWIw4_1~AO=1jw{5ka8
zIb1d_nDbS5gzzLlwqaN@13X8nMY4>H==dW8k3|@c?WbveTp8JTJr0!szs-uY7sG}u
zG%N059I~*ZKI1=~K}6V*=b9v-sj;~uA=IP~XHq0IwA~Z@Z^*&|W3eN(ELny=#p)87
z`xD{rANCh6fPhbb+K>$K>;^N*g%_KQ8}0dZgw9J0P!Nn&*|fn)i@3x=B%zo!=!;KC
zFQGO20*J=*W-3Tk15CUUG*Zs{+jpPT)Iz?dauO>JBAS9XSi()FylPK|WPX5#sm#|D
zHXRS#4gu^%rsiMi6E}H{YDv?pf9zYB7sWBi(!I8{pZEoP;4i5=FtAEj2yo9<g&DeU
zU;{)bEiK%$wn%aH&#SvnSL662rbd079DP7VI+VmN>n2qyF@}KMz>D^1$QGCdB&HPa
zI71dkArVX}OgF2nBPsdwOTU6o!Ce9XJ1O_t-(HL|!5H-qcVF#K0M#*k--XPGa=9nV
zv3`h4EB73joPyELUnp)gaY!{y-M(xw4cl)gw397#N-*oIiF2JsU!R=oGkZh&(W+f<
zLGs}~<)1QgrT6ceo=D%3C(difF8%cUY&z}{f$BWeN4ddkGv6myuoOZP@gdZ?8Itc}
zmSx8;q02Tiz?$x|VZz{Iksgdk(iyGi5a)fA-cPE095$fO^zyNq)LSD6<MF8kW?<Ao
zUcm(IJs^HMvrzS?iMc)}5koZg$Ni}oQ2L|4$MW`<mc_xOz-8Xv7{--UNwd!K;18f|
zGB~~b89b4}rl~ZE2QLNsn@knRxHAdCFLSj|k5~m?j*|fIbm-6FAOQ?e_8?3>KISKg
z7Y9uH!w|2!92R3N9vT)Kqij@&MrN9$D>~Tj<lw+*S=FQxX!E@VC#p6K|FKq{?B9Ez
z0cd-2M+f{ZE8pJehV^RUTP)!>$)KL{g)V}Y;tGD}YptpW(^8=J)bdW&LRplUHoe`V
z&qK*NhateH*TD|AVm!U0E6=AqqKeSwoZ4UKm{<a*#oizPMvErrshF=}{7Rh1+O;$<
z|8E(@oRf1z0#!WT^1t0s{|4Nj-byVQ{Lw)PCd@=-N;YlAxi(8UAc{g`!A()7MfHgF
zsnQKN$DUx}G)XOKw*~|Nx8_$~sbMaQ<5})~eE7yktfhh`d>ZjL{1EsUngomEctf)L
z@Z$D97;pq0QSiorqUoBjb>-AuoQ;OdVLlxPn1<!X9Z=I*E*UAH_{qwJcrZc(iJTnK
z?|v$50sL>XlOcc-H<*7^jqD+aIOPr!JHi5q_IS~x8p%;c7;CE!SyXp&*+O2J3iIM#
z>MA3T*9i@*CV}W08i+}HjzQ#;43Fk0VNgfq<;qxu$f^JU_OZ_KcA;vj#t*6}&?)4?
zEFkwW&@qZ4;~;?m_vJYz*}Tx(XcU|V_}SUn%hz0CB3)s?l{84xO8Kjs*1!s$k^yl{
z0Uj)NCqUM&1_OgaBSiu;Ly3#-^r$j^e9j~o_JTW)=bhZFZ1HzNo@Gp07jp}HG`$&Y
zjYDOgW=|Y=75m`Pje=I+ooKJmM>Rc^cqy)V1rJS$l`r7fH)nF1azCHV(ni2AynlOT
zj1-9mm9sJ}hkmf^8>`wv&$r8nxC(O5^)z_i=ZTQ1RN3}Fx<Ei3xXX&yW|mGEc5PNm
z+QO97Ct>Judw)LxF#XyVA_#=mitqYFt38n!!#E2z`d9v#U3)O5MCccY5bGKx?r%s|
zo?zvtwR%VOxc{{?3@A|rVUU#Hfo1BVzgpJ&Da-S9FU*3R+k9r5(Rlx)Gbv!#qoXaL
zTZ|IC{`H5~7m4+@r^p1jh($h<NJh5RF?3A0&6|rGKlK@QHE^A(nu$KL&3ADkwZ7Nr
za-Jtehr@3){@molH*^~yHgvGWn9l9bx@P!>K$RF)zdwfk*OKS}e}d@j^PQOX?diIm
zTCY|3S4Q8NIR4^B%7X(E^SvvQ8Z{W@JGF{F6zDt1%JciHx(*+VjaI~hs3d>9?d>}R
z!m_G+k8;`%=(I}*|K8h`#m=xr!5tmmKXKtsS1-k&_IrDNxAiZW0IOG(w|r`Vv3Yck
zv;|;V1Mg~OV)R!Uut*Hwqgx-Iets5?(><AYv5;(@IKX`{O-p*i<)Om;YSihKk=FYk
ziEqvKN30zw7I^)9bWA;5nn<(tV<0H#Jl6QMc_ng%4CseaHhV9~m}ZtS<WbIlIHfyy
zk##VXe(v!H*v<x@-~4^M=1vf_{L2y~cQvr#Y$h3f=XVXEuKt#JFsr|1kn9cL{u#*2
zU}`z0(;Y&j_s%67>V!bw9BKuFad#ouK}E-7qMA;xn3Qy;E*zmxfPrwZ{{i{tj{=VW
zc0Tu0v4g)KW;O%6&*$+?zVG&%^Tf=GI!`G2o<`DT7|!OtrjQNC=fH;f!bgR6Iq+H0
z^Z)NfCnCm3&<*Jh7i-IP8k~Qi5}MRZb%TJ(oDlt+?RI;5H03o%4vz=Zp;9K_oSS>`
z;AhoEh<z%8aSno7N}h+9X@eJySY=-2v@XI%Gr@)@RN#WYv=fdQ_q&5n73EQt;VHwH
z0NtEfFu*(s#g3Sq5VnN73X;wmM}mYYWYVU=^d>JzdZdBeFZLXBs%+%MfhU28d#pr)
zif5cntN@#>?y1dBC2S+j89+5rIyIulFZ9m?>hnc}(GFHKRO`&iqxiLM)-LdmG~eKM
ziPJr_fM}==W8q719S{8ZY5g`ka=(bs2cTvlvCGt_($#`;f`rW8<zLZtC~Xdl6*=$$
zKw6bm3?*qWPt`bGce2gh@Y?Uzq*vN-1mI@}$7pDfA!`B~Emj&9Y$E7d0I=)f(Sl!%
z=kZey{s7mI83R90LpV<$laZ9@fA8)?*z$3-RG|35XnU}t4e!Bn|Ec@$J+bhf0pS9H
z>|7FfPx1Wx*{>ne!l3jJ^jI;16X^4Od3X<v&rhR&?}<ddM<`t&*&GT`R-?Un>$6kj
z&c}RAkcET+ayCH_j?LyF$4hs1G6s?&rE1h=-Ea~v7&Q#MoJ_8>@d5cz2S~6J0d#C=
zf!Ew$dS-R@X->?@6#Z!3qZO<Gb)Wg{<Hx6?^GbaNc9PSoU(<4sSvE@Yr|R_S;4sZ_
zA*&@NJ=qx}6|S*`4Yhds{l;nMUSqrillEne%sYm-aDy(rcRM{;h|o1;k-3nrOr=->
z`wxjj=qKd1$u_&=AUy9k>U#T;Qjaj$K1?=M7yo??EAll-QOOn<8OYZtq6p5m`BZ6`
z;m&`zY#=YK_Z1P08mIqH<A0+Tij0~-qCku}a(70tpCR`wH1HmYDD>gfLU#gT{f*MW
zi#&4B`H_1Kf6fd<-ozIrfMEhNA|Frjt~~OG86S+xn%Vf5U9<SD!Y8qKWuqpGr1Af)
z4R%JjSW>lod>INDz@=bqYS=TSvFquB;A~)qvkGys{@=d|FbfL+`@5cAE&IQH6L}Db
z7n#9ou($Oin&SeGY!t_HnV5f<hsBN*L7KT~<uow0-Q+k3P8$N_h-Tn#W<d*m+3l(v
z)PwldjKZg55E@tj1J?f0PHW|BGz^DNVzS5S(&CXf2Ucohds{D0#1;i>(Sp4F!oRuW
zhRmIP{6|MVF!AJhlRllUy5=x!<ar*5(g)aeb$)wd6*YbW%TVNoOJj?Q!UfU#qJQw6
zL<XBi<*xGSV2fiQyDDh83ZPqgPFaJ^_B`zZzwFr^qRoU$x+oPiV0j#IuOo)l*d==6
zQeL~Io{sj}3xv>tkL(0Ja{`mx1zl<QWn`Zj761LR5agG&un*nnTb~{ym_Ejd@;9+x
z7GTyacU=;(<o9@JQc*8Stiq+pcIj+qkY*v`F&0G(iZEItm}LLIKOn395H0J<_j{2>
zOJ57Zcv!Z+dEy^kh;6-Ju1fxzT{h}Nabf=1PfkDr2oph;B;mEuEF>+D;_ugsWcoMD
zn~_;Q)9uRq`M|R@@&U3KV|ujChF*FG{DTN#w>QD15K2<r7dpxWlNmlWP7T(RQnut`
zrAa8sV!A3-)ai1v!A4?)Az>0DAmbVIRVnFw5p;-$4nT77D_dQnCkJ-OW)z705$9u#
zWE8Q>;=s$e2cR2(hwgj;?3q~H?GAE)(B*)(eU!Ydk6Au45Vo4KIi&7^r+YXp4$!s7
zP?54I#%OiEG1-ChbYuU|y;{y;=*@>Wp~*pLVF)WZ4|q&4QpC<R#>0cX!jNZByq@;g
z^{4=U;Uz@c0g%d*-7iou4sU`H)B?V?=Q-5AWga(S2Z@BnZw3n2Wzkhz2;9Pa3NCxZ
zCu{J+$X@k93W#6x;Zv8rVAb$L<>u}SCFaJ)hBSys5Edn8N9^LG0$Ng1v3sk6n%W@j
zMRY){$_eM-GYwafU`F8E3>@JJ5~NVf>vvw|0dlGt1f!P-Q;>xPb%niD9K-cE;7m*A
zwoR?1SdTX-Cv3!^YocbqS>?FX(kkw~HLv~q==%q}ObPE#MevVk77!}VFgqc#64Ax@
zx$o|+zbt@`UKTBn2bt6?Xk(ESAm|%j#(g$Do&a^OLpdZY!He&LL8)g4iQfS5Xn7Cp
zottZu*Fcr6`omQPtP|oI6JA+i_*5iF7t@LKO9%kMB{)0o0ms<*Z{7lm)AhxQ#?u3|
z{Y*8sP#Yu6wKlH9uNQC$jpes|@^YIM*n6R%8qR-=j=|8A0eOjWgPCHa@EbpXN_Yf4
zsr4Kl#S9s?QBHI}m~4yZ08VY0X$jH4ZM^q;+!}`LBBDmv2MCM>c`{3!E-IHuT068e
zmB*ws&UN-ZJO#=3<k*Be?P`z}wA!F?O196z^B!+*4HL#B=9z!YrWy|APw5<)P(9ys
zMrn(Dz>$_kF{6o?WQ*TdX2IewnFHKIuM+~fgP@UQg6X@whxEAj_JN?XZ>)Lp<I^+M
zWl@T8+S{PM7;%1tDRB&uS8ODAT8X?jMOUM!uU-N6KYv*_jma}E8lA}XVx{l?_6<6A
z21lmBIWlvv!<>L)?bXeQu*RC{!)pPD^ou98`w}^e6@GCUvO!;X;~#5+HSvi$7nzh7
z^!|&Hv|?2xkBumII_pI5$2|$g!TSXnFUro$G>@)wIi%*}gyG|o!{bb}JG--f|AL2?
z(Tch3VO!e`W`6(^-^eCls|b`=DkXLi7{McMXbLC=ZDYg-el>y+sE6Lg^!5ELaSfRW
z*-M>02Z4TfcZ$@~b^hGQ80EqHHM9W4Us(X8s2b4~4Yj@;6{`aW@L%IavPiGVs#qum
zN*)G=$x>4#C;{j^Qp>CWkQVF?syA*(vfwDkk+A$!nK;{Q%&~)Dv`ZAoPIm{A!}OU}
zHPwNKkYiNqb<J;I$g(|hwtA)r3ymV)xWc(blMsU(7nh8<p7Doe&L1Pn>>mpY&n1ZA
z$O*c7?@RF<@OJu^ICv+|ahSI&>OI%9Z+W@omEoYar*i#_DRmt3zMjJi!@#`)r=d)v
z*QRf1;LPU)^3Xs>Y%QTr7%aFnhk1+ml5PMZmc-;n;3-h}%xY;BpxR{PFHMDz1)*Nu
zq33T5SgLJ%nCia7-{t~X?2k=Z{)A|Ysa`JN)(z-|8gr0n@y2u`uR-maxua}OLmpO*
z%u!*jLW%|`wc20pJ^Ova&PdPZ!tw7gXd^}nDB#`DkA+o<^X8}1XELmPE;+TdVH$yt
zX=D=$e=A`1?Pb~(#$Y!ZamFRZXV2UCpoNZ0$%W67>v>^fZo(%#`Oa#E<0F)D1w6V=
zoo<oFG5j8=MzST|_>}P=Er=^|Zp6i=C{*C5Yf7Y+sPLhOVZp4JDn55BhpJWa<O&R<
z$-m26JO|!WC33cDKud`H%gtK*CnR>1`OmyHD$V*cx{c-AsZZdLWd0gPg&nCBMP)1F
z@b7#t!*+58v#xuNLX|!{jow&#7)ifPPAk?lNi`o?*etDEx!oOf1)`KEoQ9>Dcx2p^
zuUZuF@TTPjS3>a^7Gh@(EBUa_Q;6d?&4?k5CUgMAxnJ?x-c$N_3>ATBrc`(7kL>1?
zRy?_9l;rKLPU7L`wA1qTRN}9$y2iNwR4{n!b{Ak61G+`Kr{o=%(zv%gkD##2zpi`t
zqYwIbZA(c(F}bs&c||QS8!IMt@j*425`~J#`qay*4wu;$h2Rvf$8Y%d3{p(#+#Y^S
z^4p5#`#_l8_5t$)A;;--ttQEpmenLB=k~;R-REP#my6wdQxrA_s=bSdV0(&t`_@Mn
z{Ex0-Ie*l;)E<a&>kYlI^3ZF5^K>}fm8aoDLHnBpT}2k;#B{<zkI}cQQtfw~zz^{t
z%L{$=3n8TMuhpbmV&P3!2n>ha-&E@<{;^;#pus~1yDOA9#$o3aNH4G0R9S_u+-bn>
z2WJnG^8(G#h=%g50TzFMfy@L`p1vr(=W0}jGB#bJ0H$D+3E8uuZK5hk()3O@WayJg
zXLxA8jRf5ee)=p;9W}c~5%b$_?c&1f42{l9Cso6RJ@Y+yhzGQ|$nOUH*PN1B;STN)
z*-gseu2z#u)N?I|g)g7KZK|luK(&CAnK;as9q5%zIcVhbZ$4z<u&SjIO-)VN8(yd;
zdx*=1q<s?3$4uB^#~L7zQ==kO*v~vX0Dm~W-*qg_?VtPNTUWc^xDG<mq_@~t&}!me
zuS@=0>h8qDi2(uET~^tsH;bM6FG%A_4AbvYA&sJJa}>7IYmCdpS9O&mxx+}_M_mB)
zI38q%$OgCklI<}i0RE@9&y^%siNUpi&kncE9Z|L8yF)@6&aYYFMTqhdT0DnerxHpM
zf~NYLoR}z{B%1FA+gVk~M~e0c{hK74Y$*0~{$6rfoKEBS{(e8E`bE9hJ~95IB{D<K
zJ+^W!$_56M5u#9GNrzEWN@^fU*Km6NWzBbwBR;r}ORSRV?GYj(eA(tAV4EA%l^YK4
z>Di#vk?Tre;*vO+wtqLc`M>M7&0f!U)Q|s-k!-UpI&#>0ivSq!I7`)GSRJO-n&qGN
z(7HJg&0gff**s;MImAG+?Y6SvLQTR}tp~GB2%dUt*R!NoUxF)eRQy9lm=i$hb2QtA
z6-q#3kfRvz>CuDur0T_TCaX2-z2p62{UgOVL!yJa0r`cP5-8pEmkO(p;Rbp_)_i;E
zBRuI43!Zvdnlu}RO^oha)=W!FMwnKUY{9<6<%7!xDQU7$bs-Nl1q`9X&It5SG9d6&
z=Qn*=mGbVasyzq(S3JNGN<79a(&8@Xii*=fCGK}2wsQK5Y}A8zz|vyUb?@q*E!*H5
zft%m@R9mrH0SuL!sM>)V7Qy!*t)SG!ZM1rcBYBUG*K_v`f*(g)rfiNsuHEK7n_MR(
zY2xmsTSD-(+Iqqy;DSYKzUDy(9N^9%>LlHCcnc(-)GvV5+Y^Y))<qmpkoY+AKD{&I
z+IB46H3P>n_4p(RNiO>(1-SSX8G+aHwidUMk`Wfa79h4r4lCPH4)9PtnC%o=ToT7n
zD*gHX5}Z(XrW(ceWY+-OU-sP@)Ty@ASdnxi#rfVT`%zYm-=R-}AwKC%w6J+!;Rir)
zC6|Y}LQJzViYsVwuh5$)eqU=+D!y4uwojN9^w=~SwvfNPcd7DDXTCqil2|M6N6-Zw
zP__(ZKv8_K!fJl~SFT4YVy$))Y+0Ebam@XcaCYOC6wM*HuUIP&9omxTE*YYhJe<&q
zHPEU}3<2ebWF)ZJS2&E<-0&W9DMDQ?E^?|uoIuPm^ljfh@<KVGg6d8eEZPz<1^vsy
zKo%Zuh_7>sl%EeM+{obo)??~{FfELAtVawEb}#`;d8N$weIG&reC4YN*t(J<w&48Y
zzxRdfkIth8J^mNmhCADL#$Jev|DlcO)Xe70v+mtFkJ5cc0FJ28nv$gaSu?+nHU2i+
zYvW|yg8K43^HD?frV23`RT!pNno(Mo<7Ha-r?8<Y4w}zRXut8`!D(Am#I8^Her7c_
z-MEu5B^x!?`HMC63I6HsKjVgxcAWTN=BJ++<d;U!<UkiEVq-u<o2I1$=9nL1tx0fV
zvy~nK;H-ig185E4>Q|;3AIm~{KcXtM)HWdqb8!ey1Vpsv2;$3rqIVkH1D2lrcG5NK
zuGPjdjn_Pm9~-sZw|{*^CoSSt`W4sqL`x@6@nQQTDgr_F9UZ@Z(+c{wj=m2am#h-6
zl+k2=8x5Mal>ZQ=o0{-a+L2i0#XIqNjI-UR;%VRmUOYkX$CONv0wXEJOI;oNb-DX7
z>FKU1+k77*ZTiuJaY36NYY`f*RU@R%61y+?UbY)-gvk*V3)-z4selI;qv<dr4@B!}
zlgpcj6GN(jUPmkMjte|94&vC%!iFk_I79Qsfl>ww4W~bm$|#}P+q?8^KzD0TUEyln
z(a4sF0wVQ$j~H+Am78ifY!PwU3TycU$y!O`88kd*O-JVsm5JM|`i3r2N_o)p(3!nF
zhADX+n~FOXn=S5P`lBDG+i)k-%tUXi+7zoI4x24~`JC}p%aXGR>V)>j?WfK#JQw=q
z?bpIriJ;4slzdC6lou+CEoW>*xi8C$g462DC_JZT(-37*f6+C*0<cROU{%_nu6@$n
z(s-E*c^pzc<L@}g3RC*iHd$Z<ZG55pC3TcV9D^gf4E(>*;HNNM?Ism5wq&kb?=an;
zZtKY2$hIWVMg<6OuYJ<1-TnUKo`mlqJ~-YKD!115whj||3|)Q=oM*jZW*SOj@`@4x
zWP%v5`R=med5Tsl<l!*{r19xJ^2Qk|3nlcW6L;fNxK9$BJe4PMtHGA8+`F8pQtfOT
zJ7lSVut>HP09ZZ@2SPjaXM4%=8-N9fykq038YpU!3R0dxH8crCb_D?^$3~4_{Gf;^
zY*b3yu7!++QFusek8^7yD_9V8aZIUv+9okT!Iqcw*2S|J9*g~}2&fo?z8qdcdp(XY
z?U0Gt!4Am^zpqSe$=lSTn7xJ%Iv4ckWHgg(9WO8$*Yl-`)H3+1>fnbQ)X5fzUm6M+
z#eZ_nAnDDrOSdu$+_SyQU{*(ZT@>3Wc^FmAYsZQ3k+Ku_^v?xDwGTe#EA&i0;R)0U
z)(kWyC!i75!)feG$Y{Tl*ZyLT;8;xs@AS6AY(7?nE@1Kf6-41*S8Mx@SgO}KmD(rB
zh&fq{XcGXPg!&M5xR))B5&%ONk)V&6f{7IX+6zyn=V2;!rSdY=H}OeoFG(gr`tG@~
zB;aMCE649j6Gj^_^UvKcF{&f_;y7Lqnv_~Tm8+69Fj~79xqo}W;b(=*tP`sW5f<rl
zZn+E%mf=m`H-dB9W1OS!9mxf3lyL_AI)@$%p;mU@T5n>UY-O>Wp1E?wqYu4Vc8sUY
zi~DIVuPe3Rnbj&Z@Q^$B2+yhdA@M4^KKj<A>hhQA2$3AV`9bd`q4JB&3L*w5j<ix*
z+-FzHGgecC+$>ZHR7-ErVO>tB+ZMp8GgUh)!-4{_k-R!?)_wz+1`{!qc7xFJ5<@&U
zA7RGTuvrlpSvlA|14LJ0a$n)N2hxy$4Wgn>(bp7l6uj9za+Wu!hDw;T-x0*$r=w=p
zSfRY0Df>4#?<#D9GNoiu{&#-=tWNd%v(KHx7Io6*42V)5k9%k!DN!zDHjLO6#vVmj
z6i^Mdo#!=^=={tc@3eV%myE}NTJl1SOlV}HR)Y)iaPem{*P{3jdsMy6d|7Cc6W<Th
zNtK^UTzb1rAO1pY3pL^4I1%YB*fG~p+uL=!f^yuGF3`yNdkJ4g$y|ix@3%i9X|6L_
zc1A^rJTSHTR>M~BvPrwYyV3k3+D^M-iQ&#<9t8>8jkw=-nwA~y#G;g*d&K|I0(gw#
zQ3=>7S?%t0Wpm~%+kHv?XjJVhCFScCzg$aGaI<XSj$RploY%TSX$=+My^ojWqc`E9
z5Ihp&kJ7Yd#}!cC3}w|!R!NGhnv92Yv(SAV|7IjVt)#avH*19gm$pCeIMi@7Q^PKM
z!)dAejSunCbP4mju*hdF$x8s4e+<d5VZxvd415`yWP@jyuODHmoWKXv{n8_nXPo&D
z-)nbeN<1P_qZaxt-7l`LUF%?4sFFpme%n3xYc`#csGUIFie!j#VnOccddbXG9gToZ
zcT{ED0i!~xn~L&Sl|Sab$GzB;RiD7hNUQK2*~;rz%=h-hP>JjWxD>pxkMw_;57bmf
z(z9INC(Ma)QK(|HTSG6tRmN23U=-!o@Y-^92Oc=Rg}Qb1RX9#{%G`0*?b6BgXyNbu
zzYOmfyhiU(H_OLJ)yjLJ+sEBR2EcT3@^E!HK$l;JlHUH?jhh{H15S=SH)7w7J;G+Q
z%^?0-qZCSVt?vMM79^YIiB@=&9c2K|hfIw6RAEwl=Lrs59L*<Jo`@0DhUnLksPJT8
zi&ePiSw_rb!bb<cq9aJx^NE&#)4Y&gsR7o3<m&>3BNb7%V<u+#$in60Y^jU;_}PKJ
zVUOmzTAEPDN(zl$J7l^Y1TA5%MHS{F7v1iCmB(Ss^0}zJ=p|JC%wHG7x!jCOiC0Qy
z)M?fk^zJW=BxoEPwhh0l1my<=nm%lJ?I`=TF4lQvOVDd=H0EN!$cGnf8Hp^0QpOD~
z+TQV@7wIni6<}|E)n-V{>0#Vv3w3_m&|9}Qz&3lg13JUFuV&fs30%a(7JbV;`XN2#
zO~>s(+0wM6W?tpb^Ev0ZN%Pv1A1}BlLd7x1@nE9vrHeBlCRBi(6;&O9czLA5K-n{e
z#0xywX+w6P$3$e&DvaGP%L>oI0Oc!22YsP?$T`m*=L62@@1p)c#Hyaf#QnJz&vNt8
zu+h6a<mCP7G49vm{;CoDdcviPb9GtxL(OJeazuB->jy;F?)$b!=P2W_k?CHDNefQ0
zxl;CfL4zTJwDTgfS<Cmd>#pd+Yf^u6N}d}Df;&MXU<aI#Y#$~kM3S{g1gufpYb$Z?
zoD>|IsVXDO`6j9U_BkHFs>M0$A#nL}-{0B;vpo6M`Ai$B0I7?1^$$3b8+(0*uU_u^
zq4<}MSYw_ful>iu<mLq~*{Ilsm~JcZ^6Q090u&uBYRR(Z<01DkbV8e-MbJ|risq~6
z`Z>u};Zp9~IBYfVzvepIQ{FS=(i4-m<sEw=p(4DpFT&9M5q8ijZGBo%KTSurJ`B}2
zg6$t_{@&YM`Dx`PR2KGwW|zhNt(sA#7rF3DlUJc6k2s$77${~ba_b-XHPp36Qw(Y~
z1YM&Z;fmG$YRV+vmEd)_gjV<9W^}NEN}gLw45ft61(heRZ7+Wr&hB)stDr2dZ`04l
z?;e{_4wp%eyDf*n@`bxOtbkgj)@Y_8Hx8F`iM$AndgR?t-O4Zo3aF1iE%|H&fnRXB
z)n0spK%0sb3gDzh9^wv6{AWc;6%j>ZN>L|9NGrhraecvCr$`S+wqyt627FFoZzk(v
zt))-TiE%G+#)kJxKt%=TUa)UEX};X9OtDUZ6a)l?#c}^CA)@n10^I^(*@;vr;GVe(
zO)6J3vD>_pzji%+Mk#hzN-E&^MSJ24vESzN?cQBEY>6uSw<_%&V<<-n-~j>B{croV
z$}E{KDUx2j<%YjDiN=}Qr_CgO*fi)$qo|e^5t+zbU=e#=tIEMf&*^~FTcAVNTTQ1>
z<=*JG3*<h6_rHmHd3h~OUH5F_Ke%mg`)ARP_qG4=O%9_9#;NxK@sJ(D2(7P_{vx;{
zL1U8(B0(fea}B@$Tdp8ieP7>Kk2)C3YhQNOyQ$W06RWHQ&{5e1VY78qK1un*3e97-
z(D^&jv%<c6woBn;i;T@fCD6h(xKUnweZhZgIeNBXD)X8vx}D|`jZRyZ)$@L{h^3DK
zy0SQOVAW79Ij*xl7W(m_rGg@Sl&|o)%O9T}nnKeN60gm}l2XGmQ^CGW30%K$HR;*!
zHbe7+RabJb@gBbn#~~%Rdd{QMiY2LLRNv5_tNmF&jZo5XXKnvBUHL@)C74;^5`Uv}
zUDqv&O?j@<OV$@TC_lM;{_?=BAe43i$Ka)K0;=>PR>r*0@8=YPLH(2uhy~PQm9Iqd
zSg_gp&VML$-(ISgM^Qm`Xpd^)6A+XkczRF43y2hayCwM0YM^39;F{IMD6lV%q8SAg
zrxT06v(`H15_2+ToBpjI_fw#a?F1S0u%H>zbG}N02t8SF|5SLa-l~<{0CGSZ`pZAx
zuYpi}2Co*N>hFLyqx4J3z;75r$#0o!9Hr*9%YpCl;A!cMM&>(k0QpI$di>ek_$cV*
zMuoFx{aDOO1^?IA3pWLe4E}`2rbmq7eVILqh`%#cf$QUDUs#8eV)Ee7xIpdOQ=pjt
zB=EdZ&Ro1;OR0gxu>%&Hs=i^57f-VK2ol5##+lRJDEQayig~7a@6FJYTvo|Xs<02s
z6ZO1rqI8H6rH|^L5Gg0VqK68_p}9Ey&i_N!gb0zK2W^gg#ke=a^+v-9%+8ogixJVg
zvqudo=Wr;b(C<tvYUT{Di9@<WE9_dtVk&xv<bpedi;ez&bm&A%_b#aj1%=`iOv7V}
zq&9M-jtsdzRf`5|$zJFqxC#!dS~j7RCi{^qVDrBeaJY#Dvg{~6i`GDTHfYe4Rz@pj
zDnoxjF%20L0y@vtO8j+EV@(f5AYJkiP*X^3S<mNCdK9=G4E+$24Lr35X7xaS=&pX`
zw1GB%Z*P+Y$t6*YJwEy*^w2pRGj)t=qC;u|hs~E`{@??V*_Dl!YJjrgIZSx~yjt+W
z`OuOp6QVaIdVIKkZIKj_P?<)8W%Fz6mp<KoSSQukY=;Bp$di{tuC^Gz;1@E&1;CQ|
zYY;yMDs-bETo!BnrqsR7vDiUB<A~p4+@OS-5$6FG2!QSBgd-@&bHQP{9LB6`y@5${
z{Q&PUn`B)oym|8|I=RK<K&?6B^*X<^wcVj<p;W$NZ0G>}pGwz33w%0B3f{Gqj%S>&
zwV)+^aa$Z$<iU06>M!Rjt=h=ud$OUydH-1hGn%l&*DK|_F$O?op-_Wc0>U(Kl@Cv;
zdhyc*32(<2N>O3Ym9L(As<rjgmhy*8J`QVWTf`CYRjNz<b&fNwk!HC_dJQzjWM%N{
z+a@PXaM+Bw_$>tAGj=-yvJDS^r=`E{|APD>7z^~KE|clhbCOS3TCM@B5|YghzgK$|
zlHJUH2;O?*^32Ee<2%2HG1OOa`wTy9G;!!YX9U0U^Y<QE7A-bDUBdiB9<tqlH4RUQ
zt-gsMEClpVfA_-lc6tflH05;~fM3c()m}o_jAm3Omr}gAsjN1v#(w7H4WEU@>p6=d
zw?O?C4sF)q_O1Mc)|WmU-+wC@OMeh+2PQVyhr8SRI(xI-8<;B=0DqNQ!YL2(mgpQ@
zHXtbt2kn4OG~lh+ONyR0^ffIrs0@5Bd!yj(rGx@=lW(F8^fyR8=)NJID@28L7c`Vo
zxQzVr{4hYEtHoy~ocZ31jz1teyx!R#3XSz`ei0moV!TUNSijaiCN`%(FLn4v<rT?l
z2=Z`Kd$hE=JHGV~-2{cUJGyzO<RS`i*gkx2;LyaG4l|<$PKK}WB&GIqfklINc+E@0
zf_JXT8|vq;r~b9+X?;!Td(Z^W6k&7P`27^*Zlt)(F9vg9@KJf8?x+|({D}8|zXV;Q
zN#viFM<j^eoZ7}EX7AsTsJt?5DwX0y#aZ{Js5gC_$%p}8qIx+K^_Ms}0PsWRv<M~)
zP+~yXTvmTNFBeIePs*;L_cvg#jt8<k5UPHcXr1HHmBZ`n(FhbF63Er)3DK+hveU@(
zq1SHvJR7=q4@8BaiAdYpu?K=#r%2=Fn$pzZcJbVV9B#hD_1rl!l_k24he^Al6P7=}
zmNP(ZeaX9DsALQ`DTYX3wq8nI-%CmQ&OUAFg1?PgxUI&^%Uh_PK@KXklb`5DgT2V%
zWOzws58~BXa=+7l&jwM!)cU6{C)gYR4`Y8BR%I8x{lXH`xj?#Gx<k68yE{ZcI+Sh~
zU5Yf)iiFZB-AFe`cXyZY&UOEvXTQ(h$NsRtbFkLBt~uuzbBy!+jr(Al$Yiy+WdY!E
zeTY|=!nO}v7|n++b3Fu{8Qt6-FV&x6ODWtt<)7}J6XFkNn?zCv3?y<bj#f*)<#qZ?
zc~0Og^DSa^tX%au#_l{C$c%s(fTNsABTs%d_RCVc;mr_GL4JJ?eIg}TPCp;=g_#Zj
znHp4P$@P{fctqqPCq7QO27%3V`r7t#Yd}06!p`tOAhx50I@2NX^8?3Laz3S{=d>%`
zoxr9M(`sI%sd>8BQ0qT%eAsb)L!}2YA8mA=-xj)s>XK|LsVFHRdOGjC&2z*X?j~)P
z9nKOhIcq&}W}Tat6uV$hOq6d{*ydlq(6q=fZX2T=I_L&DkhP5i>AeF>BFsCXOf}ST
z!iV;0;bq*CHoh=XZGYyoePD%$Vg{IUWs^Q%1d_?ZaNVdVd`++Tv3+~MM^uzw^~9C!
z1Eu$(<)&~@n<$Z5WAd}R<~6f~QSOkj$l5^R@j-OhH(}ewq96GH=6CK|!dKus<__R5
zcYd1NL=ZgO1^x(#Zh>lMamTITFwm|Pb8)g~Wn&KN{P1@o65SqlStg-RM5OaM<;n2I
zyh&5}9NQrve!Q#E!KoCriobPJkhV<i*McoyzW$)e`$N6wSUYTm=OJMRBHIc4orMC6
ztPkR4zDwvAOk*IiJZv&0`kf7IWnk{1<mJ0>^@QsBMUOKjDD-zcNdyW(+3QW>FLkR<
zZey~C40kZI4|i1jfW7tdRyh~SQE>xF9r0lW4PlLu_f5{xFXZC|C<D3`$^y^tb&99p
zPS?Aox+_D~i#1t9ntrQ9QnPMzn8>X`U3E+oICG_Gl~dJcEABZBKaj-*H!maw(FiF%
z82>Q#bHSzQ7DBD>c&N1<lWNFyoq_3@Z<N2WxhD#4PvsvMK5Q|qhPODkcO|(e-Vi9l
zqzGWz&@J8DP3f1*Zs&K?P{<a3ZU*oE8C;q(<BhsfE>zra)SA47Z(Ex8X~?}naE*|S
zGUm261f8LF<be^;A#}4CszaRx>-8s>()WGocjnW<*1n)$EBy6WmnjXDTd;Gy0yznB
z+@GD!*@$?75`*?5T~spu>v|%q+!G1O&$oe0M_@>nS!5IdN9aY%EVY90)D84AI+|i)
zZ%$jj%@8~%YI*)mP9F3+UG^ql)|7v@U0-(f2`L`}#|DghySI$53*LAEBB_eZ=F>mn
zYz|x|DECENsHGaHgG|{-g3{#FN5Ni|`-YVoo%&3kg*s3~go`xAA7WDG#E;HC#c%bB
zb(}4SYsyO74>DDHKQ?ow{G4u<YawBc!i;?^BVuM5w1<+^JB~?OY$v3=ZvvximFbF5
z=`r@LQW;yry_$Ivzg(jot^lKDeeWXz8q3s^mKqfDFHJF;P9hje5#onbz$o&ifqNNW
zdX9;Ayegif{pKvXgDDgeMe~5QT1C~3>mxW$n-ExH{ED<GZmFxnKl%jJ6RkMZkpuaD
zg#|2T&{~hL5pj(oI2ulNT`h*Iml_&<6|E){7Qwa{s727{w!z7hiHqoXo1SmDxn{fA
z1T=L499nw%@{MP|b`Q=6kkwkIRz8L-=lxK3ds=e*D&&p-z5n;W3%AN@Q;AqIaW{#>
zp!LSCI8w92fQgEGs-&+|OQEP14PR7u&vXLi<w;Xb;0}HAQ5i~`_G6uMp+}cSwGJAk
z$rYB}n&{Lmr~iOe(I1)sv+&g|#^`-#1P1T7e$WI^vMdr9atQavtgegoo0nVtXx8D^
zw%HL+gBo~aoe|B!5W7JW1&=`~e~aUAwT6MtUd2-z>tFjqapzs`=5gK*thSYHp~<u=
z+HoI>UF~N-Qg`eZ@pe^I)-@}O?qYPUW7HG)e#0TM56QrhkPD{2uQ;R8fgNaG?!T3K
zax6H%g-w_vl9I)E@tC8;FN>wZgu3Gw_YvK0uD^qmEG|+i@~WZpxf}2$Om2tij_e3|
zhTTsy<<e1&MW1)t2bs#U8tZd?jann!PKahEKqCca63rPf9GW~75+HXH9%@R9-^T`G
zgnzqzwy@iY&=(rgZsLG!cP<-fy&Q+!Q-@+;G6((6Oa%(Pqz$9ZV@w+eFG+2~#$v2~
z*7*`6zF{No_&Ww($C|v~iKN;yM_dd|@x(~amNrWT$qf^`2D^bcX-JqZf)ZT;uUD?;
z;w9%hZ9-O~8caS?k83U)m+a)7>0D|G(SSIz(7lzT=HC8!I<2ro{Z<EzJh^Ca0bl;(
zeid3>vRpbW()u8^^$~$m@ZWref?95ud#^Rd;S6!$vGDzbQvbLQ93L=6%r|osI|kh{
zoSk*M+Zr~KiM+am;Q<Z;6k2_5;XzfT+=pc~2nunO@YCw4%k&|Xo4xF*Q<u_vCx$cr
zFCi42sB%?G^_(eJJ@0TKmu+Q7Lkb(Wr`hduPd6Apb20|NIG1k$c=G+R)jSLm3(B-p
z8RG2tyShW&1W!XED1LZDbz#;V|NACnW0c$F90yr`^G&^@&J$zZs?s+Kx#j%h$>W-l
zmyg+K{wYwH+3AIVKB_s;EHRHDA6qOrH)ZQHsd83_=OI%15JLu@(=TI`>Q_k7&zv6%
zE|%Rs8<Kq)itiIXN)W||5kCrrFsxr3`vnx7EnSggmwD3y1CaFMzDNrH=zI(XE2tRr
z`t@h7w(u!3p~_#ZZHvotEE{#Y=XtSl7SW1t8!&~9O{kw+o(ZR=Q}rGrZB<&XlG?ZI
zUa2vyuEmr-wumY+{XFS)&i&MD!=2wH3KoU8+Kw5h7G@V!?_@j^#cA*u>)_yPH&IH-
zK|OC7S@pz_RS(;;%^mwEtkX4P_9o9epE-h1U@Opr#qatN!D*o>{^rz@#&GgUbOI!`
z#52xITD<@_zd8{MUAk#d9jgDdl|d3fbS9bY+Ww%KVyOymEbmI)%i$yzGj=$k8+tT~
zugIHX+4>JjmT8rs;Y$xjNAe{L4x0}~_5Q18FSUM1uZs_?9vzZ0Y5a!tD4Re{fJz$1
zs&zf&J|kcayD~urQ)EZPCrg&A`K(nbLL;kmnI=@pE_*<=ck1@>Qo0ORg-OU`w`h(;
zpXIV7NoIVbXw-8@rUvtLv?bGJ)|W%`$3Vo@A`*?`-C*%v?T|g^y9){W%0wnDV&tpC
zuCL#X%E2vu%I199M7z2BykHH8?Q9R09)BDTrE`<mCyxLk*)f22yy3N<B9667YR5fp
zmQUhGux6Ws+H$cf-4LgOa?OWz6tDv-+{e1=P%uI*W|h@zcQ-%sP&(Cw%Ll}rQKzoL
z$9&ih`33Y%V$mX7qUPC6KZubwnPAyXT*sWg@X*UdmqEWTy~u_~+?_axTVX3}iP$9=
z!YlKVExQHveO-U>8E-P>XWoVJtIMx)v9s>7tGI^b@;XF2BNDP1euJt##ZA1?#8c!|
zd(on@k>Te9v6Vt~1gnkRIL#$lNdM-Usx#Lzx>J~|I!d1YKqzN7xzPrL+y8Y6xp(h}
zHl|dlC%%aw@{~Ah-j8KS9POl~YLDw6%B~?U=#=7k9X1F4XDem3z<g7!*U&A2qJDN(
z#2o*;@~CR#t%y9f8Eu#7(Z-IM{>$e43l1Rm9nm(th=2AaU_yGJ%qH)9HB+J=IxhM@
zpX&09#O!HsslcYF0yovv6;d_!pxYH#rzx=c`TGWvZ=cQa%*j}mDL6fn%~F-IY@)4P
z{LD8}1n#j45oMXug#F2yu8%dBNbj#5dT((5xvX4>vKk5Ep<AnTP2Sokxo93-Yr8nl
zW2RMZbj_~%f1=TO<prv1&#M^kCw;Fjxb8e0Lo<;%Sn#fo?npo0zt=W>`FQF6(C_|L
z^n-Hf(!oi~H)sNw2e)z&Nqb_ei$}{iEM4TL1FL7rM3FrQW{O_wvPH$1Q!#flRKDj`
z^ct4($z%;<`TjhxGN+Amb7yL9^U2yR&jqEJ!QYOjR^Mv^(Ytu8a?vP>UnF{+P=f*2
zr(w2>!)X#8LdUL*nX=KJPS0a9S`eQ{KL!KemC<{0P`tur=w#L)TQz#Sb-KFETt~7g
z74OVM-XPc+GVu9!-=^^p3JK6VZS1@*6=>;|jEDHxaD^kI?{iy!?Lb10=MhJ7|7UBI
zdnQO2=~ptcK#NaCv{mq83vTtAmN4%^YD`3B=kIqm^?$;{SGW0_K`ZF+M{csNuki%x
zb-W}Fxe0MQJ%|b<v3VFE-@N)|Ii<aJ*xJ@FzUG#9cGs{){a<O0@}y!sWmum}3sGfv
z_X}C{Cn&@;9}d++BzuN*J9`=7r;=p+46ZDG%TFtK1vI>Lxdi9j4R9GzgswKrj4+#K
zi^SKSG<Ku7#(Ufl>e>zR`~bFx8?sMgIUY^9o~WHgA2orR2aS(qm@8VnBN}Qp3TFFi
zo54SZYU*>b7TF=g<E!lS{DHdpG3Aq%YlL$Be(!HxyA!0S4owJdo?E>*?Ihy$K?1eK
zk|qhjVh#CdnkAMifFUa6=E4#6q=CzkCEA_nD($km@RC)(2BAgT`O4b~U7ZQFFdH<0
z9vS6Ods9T-lKh<Yd#1;cDR=31TQRjSvc@R?Q_3Cfty+}n$DXzQ6pqwa0Zh|}f(4%(
z^qUbE=lE`m)Yo*IO@j`{N^(2RK5*IpvEJxQ!k#HL)?T6oxh)snMNgr9H?F8+jAi?X
zL5u$eJLScrr4wElhM*g)m_vI$GvWb?Ig%A=6nZgiKkAaqQf%2@rJc7Qd(17ogkF=K
zN8Vt)c{8p=q4tR?c&<o>1&+LK()4NgM_=cn=PV%}zgC}xh{*b~K|M|ZivZa40R)1b
z{`Q~%|7k~-0~^h1;W9>wR8)y+Z>;f8nR>@7zho?MMY$H1?%PS~kb;ZLH9yFpLBZ>+
zRPjmROu_2L2c7P7^3H)BNm*wmf+)v9*KV0FucLh7LX!-A;`L2IQaWIupyCS?6`J2!
z<0^vgVE#f|nu=-E8@wD+y2X&)<agS+D4kb<$z3c=QUF1BJzAmTPydNdJ`w*iy}Bd&
z(&&LIh%;>$bQ;QChOL@>?~#;iNjL)XBtju!`xum?I^Kzhlkvx7^cJ1a&KYMj*PS+s
z_m{R%T)eHd864_FuhqH>3SKN5HA=bJ^3~Dir`FQyAF5=p4;5t}UMSik_kQN_41P9W
zqFF-i<LS}+I|+ztE$Kj4i16_Dg;we2>kTHZJwu?4XR6$?odIX`7S%gvmO-|}*$h?n
z`)#Q-=Y=$kbRm`0WvI~$Eusn=*Z<B@==mAXSPVQ;U9Pol0X;o9JGV8<*Gp{zI@w-+
z8zqgTSssxRZ?H#xPUgd`5m8l(D7$b@s%z(%ojgUD+r_P_Ij{s&Yg}GPgH(x}3t{ZP
z41eagODAtRN(3E!_FK1rDs2GOxQ;1=f#u!+HA>xWbKDznDTp}C#Pq!7fxRjMbZ*wK
zhU~>C=!NS_!{w?B^;=xUK?H=ph_<nqnA?0rqsIvR>-$i^?LM~fQlHa40ip=Mw+(up
z{rMpMN!WXPp6e1>*_UwW`QoZ_dlnNI<TPrO)UeU`*5$6WRs|5`RJD3NofdPXJgP@Y
z!{FZq+D}v?S$0Q;=h62+pIr)%2TFC6K%zL_LOtK=-ATF4ci=H134DHUfeUA&?_$8K
z{-X@Y<#4qIpO*n$6H%>X8Nn7~u4hnlH0(G*qrb|c^u2P%as}(i*A!vAZWBC`imy7K
z?B<M^EVzq|8{CS1b<-^{$ZOg5e<2E!cE;{e-_Kl0I-T}ASvRU^gC>ZkJT*F=j0_uy
zxR9>V#l}hTRj!_ga}b?vi`2)vcV^feS6DAlyieC7MHcwlU2&K)>gM;t&+8r){mwx$
z;!|thZl7Yk-$t!kGoz=erRIK;E$=rGOZuoVgGK(8{cUGkfqVw=(9V0yQm5XE`uwtk
zs^>n{oj==`izg+1Uh=kmbnaZESi@<9JsWODb)mcCF))AXn_a!<CMv($xzs@96b_f2
zAS*@n3%&Sd*(b~)7q4?~uU|s3NC*RK>+@=<;~so&Nebb4HSUPBOEq7vT{dSOwfD6#
zENG!U2Tr7)!~(g&C@Zv&_QN{<ZpPDzAw~VU>cwZ%Um*v-FPJ{BEg+63n{F*2ypJ4<
zR9}NkJUo5G&+SUGp8s8uF1-N4?r(!Hb5}H=0n)y4$d<?%NxbgcAe)81P1A<4IhZAG
z-uBD{xhE5u$ax5A<C6kz5+y&+Vs@=9DyxC6o%tF7s;Zc|;y<9_Gv(BVSXm^99Wk{D
zS};&e@442&Zw0Lo{B(#v<PJpV=|r9!0U80F`S(ee&F9ZN<;|T?d&u3l5s$v*ys+-r
z_6Qt&HA2P}Lu&menT>SEzf*(()GJ>DJG*v_=wEu3bnQ(9OK$0-s1-Bc7^9KTwBfJ9
zuiSnAg1OKo`c_8?5*3Q`%O=O(E*DpG-gTX`Ja4%8kM+H*PB@2LQvDLJbAe{}7Uh8@
zQQnmtK91cbN-mPetOPU{&ktTr%)<5>KkNYrpc1Aj)6sV~pm1^#;W_VSmOzEEVBkWa
zh2%se`ZB-R<gG>D1Wt(%HA;LME#<+O|E&dJGFRu#xshn61qDSEV(xEq9-mJeln1vP
zDb%bjd85z+);$sSdJ`nMO0RojNtyqUyh-vW^f`AingsxOTF;|}eq93gPsH;B59|SN
z;t=fOZ{=sP?pOGsE$DB){JV0DJS<iJv6>Z@>idp;>qT0)&&&NZ>psx^vu5tX!NX;$
ztUwVt_U)(wh|BII8(ch<*di6M<0dEYl-EJbWRMVAd<{EPh^m`IA=dFJ<)j}O|Ednz
zuL|JfUa(%c<)p}g83Gp$)4OwPx`8dBkRPNuk;oghz>w=y+J2|GuOU|9C><LR25dEW
zX1tc^Ff)>+zy;PKS19D=u<{Dww|9_o<bviIwP9t`9%~_BT4J?%@h$zTW$bV<@Keqo
z1p+)y%Yd|ds44SnCvk_<XDY^@SEVpYED96w=OLp6ruWPT(vO0-j`O!_K45Y3YEg%!
zMo4_dlwG-%5K&a-rMFakhImK5AKub?m*;%dvh$@m-ldWjjyB8rP>^hQP7<^yEKj=r
z-oLK%d_r3PaJv<oYPN-Hfr8p;4D`u7kiI5v9#wJi*s7^v8vp8x0xk_GWI{QV$P#Ah
zOSR?hO3a2uD-ps7+>yF1;!OQDrvJ|2f&>5j`NqJHr@#HqeMUIW9igarNT3(w;av;g
z)`SRQRSfbyK3X-+^o<}C%X)_aYODYA<$;iaAsvGYJTl}4q>F%-51%Ze(->%B8xGI%
zm~?UJA8E|YX2y(fK-#xNsmOzc)w7i3A~<L^IR#})K-+!KF)lmQTO=F2x68M*J%1yE
zHkc~#ymqJUV2W`*?oQRw``c+w>F*Xl7|c`EE4>+Tz6Z%31l*Q7l3Hkd=q<MT??Z&A
z9fY!KUJsVBUXdNYa-ol2_VfPO=T1Yr!9jiceV0%R)8vR;OC_A>4FvWetZ2GoB*3$T
zFwtb_aIW1>TlXl*sY<tT=33pqqVgk&7KA0F1vxqi*y%a0?uk_wS<3(+Q^e*g9`LZk
zgwmx-Nb9n_NKR*%h{Dy`)3xpsufpd8#BzM(mN5z_@;k8#3{rzAiQwr3(^MKfZ_ajh
zw61@@!HWpG*CBgOvY&b0_+cFH77Wze)uo4)nFYVy$9mQZEiY67YpMgkTJcO0kJl;A
zEqUqu{^8ag*r<@=DKqTh_L$D8JxJ7o6pYgb`E(Ms>$TStPRR|&KBCa;wj~s^O9OdV
zN}63bWg!avR+<#}+#w$BimuNnFn}6p*vO<Hp$2oJ2I1g_ybTz~cw1q;N@ewObau@H
zgdU=#%NLs;dwi_p-iIxn`vT$^K)|j7vr8OQ(%}O&eAcz7q~7B~g<EH1LS4~o;4UmG
zkdEO(1^Ymm8`tu64p>U4_@9TEcmDa=^K^cv{Xw&Gco+-nkLza@-`jo&KSj|?vKo2%
z<c|co3hp#xqmcKm0pZpE<AWOkMlgm#l;i=J!c#xD-Bhiwy0#%qebMQyTpLh+n+IHg
z=~!GnFe@n6ADIZ^V3>baU539T=lcBD5JpPe*Ek8#+Zrp-(W>9P$B-Gs-#F!SJC0O-
zXPNIf(x6*I4YbttKTB9Cd8bd^s^@%0j={_l*u*U5RL=G>^@wJ6shr)Vf>du;hCA!y
zXtBTdsdkfK)!4o2BKm^!$*Png4TXzV9V{fos6Oi#VAa>8t&V@5zy(uC0I<v;WC-05
zt`&+X)m`orlPwk~Sq%+!IUFSDQZbz@K9^;xKuh_M1RnG&(>PtD<J(_)WfW)xtSCJj
z3V@44_sPbQg3QkkXCRtGuEuKW|I-gnkN~CIinl`;R*Gj>C@F(`T*GEfa3#8B-M`tE
z+R9dczA}SCN?Z)|48&}Iu5a4bTxKnUHDw8gOaOjpW_~V?uL)G5x?$|(>|E(<i3iqh
zUfTXEu*qfFrHBi3z>@~wS-X}Nyy*j!WwjX}@#S<IE6Ye)$PSp-ZrbD(e7flVY&8L)
zHLS*t=xs@TzG}@{;ne$bo$ZQBurz6_9uTYiN1J>u(SW&0_VMBN6!-&^(1G8A%)C$T
ztDq~43jiwYhyVqx^%3yrX@Igl3fxNbz_3-=pajzvzewNfBMU%u5u*y3a{^;vTtNXF
zOq5gjS0KR&;`rNTaLoXfD`Xf{5?CE1z*ZXt5UGLH`J95RbC{zksazh?FlWB@Et(3q
z{$Y<>lS3)ig}QUqKmS_NuCwn8SWpS2)rW=P_rmNVqK&}2G4gf)*3UjmBa%K&aRrpt
z<TLo$vWyp@C%H?{EY=J}66ZZBY1WUYPR_=jKS0<ky0_oG0I!%NZIdze@Z%N$irm0J
zThBmqV6zI-5di67;7j@_7>x_Yqy<%V7?h^kb_^caCndhgfA&K%1u!gFpL+XA(lI4Z
z85q}2wuVSY!+>VEgue{T8Ug_oM*S4?zu2F_26UEMvKCCcJ)u@$mX82VH$l~xQf)Da
zx{Lau#q%XJ^Ui-=1`ktrl|gFsUW*1P4d!iTNJZpoheZW_=pTlp3%{0{$oBEb3A{qU
z<_{Q2!*#UlL7@3o=hZ~pGuV;DlEUfVt{OdZYN7!^Ko(U8bl`Q`h9Jp8&~QP=Q#}tQ
zGzt*;Xh9VlkZRarh+v>Ep#{QFvA}g9R^>vi8ao{*2JxA=RAkK|XoZo&K*^w+I#y$^
zck%=T7n-JQ)uB?Thi_=ILDkz3X)&zkB7GUuApfJ^0B8w>vDWmkdiB$H7D5Kjm78Z5
zVsoT5TGKrpH0UaFQXtH!L=suS!%lZ|NEc!>EOz5EWN44?-%d01C^E83!it%;Go|FJ
zhX=^e2t;U%-B`Uleqrz`f^eQ~0|CL*wUNUA@#CZv0Bz7;%7$6HFbGI$Vb*t;6}uJT
zjUY;=C6g(c@YS-wAMk>x1uk??jdr@FNMFM4GFj}_tUg1|0BzI8N#}&g3J$R(i9?f`
zikm%4j6oqB(aI~%%rx*dofNwOE&xPh#4l6~`ZD0;j^_OPEx~l8j-N~Sl`AoP>(iq!
zsNRH(-{vD&d_jD5MB6)(@6oBcC(A4K8mqb`@C7(;A^ZcX-1Eq>z^k!EoU11f?x0DY
zs889z*1sv~2Eclo01(3?jvC(^fr|h*<lV!WPajOs>>9zNl>tg$$=nqHozN80giT@q
z=V0*(DH{DpBupt_6=6egS~v6=Jce1`Ziu#Iwm^<)fNEuyN#2`H(OV2DSxKH8dT$-2
zZu$Eq?nh+_@DuQqLsHFgVVO~f)fYt{k>$BA_1&)TD9YJlCYv+Hd=(ft)Z`~hJK1rq
zZ|ZVU2>I!dVvHeHs^BaoHd$dzKm6F^$&L%qQc03t0NUSg1mgpmKM+2Rw0>93BmuTq
zoxpQ2x-5}N1OA1gd{?>$anBb}OiSW;3+$ONX;8mbCD5TH(RP0Z{UBvv?bmj)gnJQJ
z0}PUOgUX34u=mkc6+iOH)|IB|>5gK%BwKE-@STcHF$gRf5UxH%SYT<Vi$Db?q}(nV
zW&R?o+RJDaB(}`dtTyqdhkQ3jia9a3mtSO_OZDCs4WVkKbS;w-Qv276hludQpb_jR
zctcl`Ko&4~FFAs_MV~8Q5%AAvG;<e7Gj{$~{pf$u(a}V_uo#vWmNuxPbhqcZA?YXp
zRP$i6HZFitm5MOy@0f4{2*hTCRIU{mWXjzBlQ=r?TqzjJ9}n~w)KXA&Z}SHh9_vAM
zQ(hL`pAvw5G$<%ip@4FOlj{Bsi{$X#H$(^;y)`RXXs)_l48AbG`w|b;KcoNgffAdI
zIP4Ry%dv_Iq6Nc9vMI;MTtDAXQ2C`l8(OM=OBfcL9_b&>{@mUcMvYh=QR4@TjKLP1
zI?pj~&DW*@`|01O)FfIkfrK11qQ60+-6|;c$MQ|Wo;aJrvsmIZ{YJ_dJ^@re(sFB{
z-a=|(a^v3{b}-gZw?Q5@-W2HA3J=r11J5#EVbd?}=_TXnBZI~_>cf%+yn0ZGmTEN7
zTN|*QXT9OS`9{MMUoPfOmUPE|mN!A)5yGim0Ad8pF~e3HR_Woeu!N_67!lR1bCr9@
zVj%_X+!sG9BGn<ResL^`KaCqS>ptHTC|)?|2_RtFMVQfn$f8R@mo9O3du}sDDw_?+
zxy1_{3$hWbO0Y&84VtI|Q68NviXeP2OIaz^&>8Q|_Pw~E<}Hd_7w?aHASR<VR<X?g
zg^K@I9We`AWYu5^FLaHd^27Cb_W!1xa5sTeC5$#1D@3vlP=CHhzm=NUOA9WKe4H3>
z^rXb$v#=1U_lIlkRw0hbdIr`_=tu<=5*F+tIr2bz!8}$%G*xPPMLdPoD(_Y0Hbcdb
zcWH7X5XQpA<p^`~Y|DdYVImqc_>z!djURHk>+Nw&X*qPY$$#w(CqU#noQ$yWfNB58
zSCwXTVQZP$I82uyw@bZg+=~+xxQtK{?yfuA`M~tJv|zJ<n1EDKPgH(q@t~xAY{V)?
z@QpA}Y%u$fV{^R@mjt)30r03lAL^~M!?re`4_)O0r$Ig*Q*|!RmDp_b%iAA0vcGc<
zrJd1{z)K6MyjZn`#nEbFcN1S&99<Z=>lSgRPQFp20tRv-@p3V=Z6#!A+@<vQgiRnN
zp9m{7yzjk0mb7?DK`)tWy()AjdG4-0X!>xvE(b+>q4-bG@Km(b5G9Tw)n%+F(+@bC
z*KIo?zM(<b!P4>A)Yo$h5d;h*?AonCv#XXF$#GymXOeIY#(}R<LF>0W#|(>hp#!7+
zl>somRVhL+%zodOE2=M8`wHhMaFuVyc|oSM1M}qK@4%B+I^uVrqzsW7>TuuqxFx5K
zp_V4%U8x8e$TS6cKsd~mZ$DGYd|H(M;%Q3{PdT;x(x!1qa8AG5bcSwpT^<`ljEg8%
zOQ2^^ibn-g5-e%8cp@7{*pfzVdT-AM4#}Udt!Giex54<u`x6h&Nd&@Ut!#Wn5{#(8
z15Zs;n2d}~8t)r#`er<a@An0$C9xCzbCwaa4cO>li%hG_2R)YAdRJN?4T=IoSaN~v
z16a#Kf_W^IC&V+%&=|ns2b*RTyK8Lt0-m4hldJ6Oul}wCq))REm682(IlVca)KUtg
zfB&Qn|K|(IG_oO0gIydn3|dod*t-&fP+<s8E*k&W%U5rMI8n8`2V3=ex+2##a%|~M
zMk8ThlylIzw<iV~T-eACFux!V3_=7zWnz%_|44`e19@-&8WEb3lA_4pAN>oYe=Fhn
z$J}7@0zh3q13o{vry-XF{Fj<Jz%&goW5^w$=;2^YMaep-n(KA+0^@PwHp+VM)<||d
zY`y@HDDBxy73(OnuHN$5O{)7(7ir1Wm;ulu$P}LgO+*KP+9cH}0K4{Q-glZwtVyPf
zWY|hTw!rm%M;++U=h}!LyeH0N!OecW0u$wDYYoMVI$fCpqBNJ{{+FZ|L{01<tWt;z
z%?p7;XYK3xUQ9kvUyD>RgBx=idIg>Ne~jH*x3{j_eb1;Y8N7TcrM^r{yB>{`FP4Kx
zLfZetZ#9CQ4hHk(0d#?4Vg!U9?P#gF1jD$+PYA#@Vr3#97gZx0%hg#eK$R&DqV1Og
z)ACq-H_R36Xd(q*4mr?1Z-agZ&<Wk`(+4moBFKUfqvTJvc<ZYaM~9^*gGjn6>mezS
zD31b!+NCGkMHswlDyN0EKy?~C#{A(zLlwk=>HjUs1bdIm1@tH@NR4-Aj}WWrO8u*@
zWwQ_b51iD@k-(Lhi2AmX1y&?@VYA593)<b@TSHm<gy-rwN@T$jASP=xS|UvrnZi>n
zGElu9l-Ut=NpLENhGARWQR$D4j)2dTIgUcKxQQ1`2a5-@UYT;iyfzlark&+haUjbL
zl@7;xc}fSuouJ=Md8-ua2#`=WL5x9-EeL==nByS~Z-C>I9|pPynksXkdW1ux7a8%~
zi3N4=boGwbi58%SWL6{cX@qh9VbDQ;vw9av?@};XSn~4r@t-e!@oat{VWeoGQg$sB
z=i`Bw7uktKdf~ejlRu;y(sDJjb?tl7|ARKlOq3Xlm94mcbn;5RmdULT{rWzUo7D!!
z^6|FT$O0E=Ld!oRs33?yzA(ge9lbcj753M<%oEc|SN?5*mn$QXxCK!Jr1&_Hm4Bob
zd}t%(vV@)u=cr2^#{rO}B}k;0fW-@Dx$?-&m2Y1lX^94wz^^oeY#r+9V4IZSP=s}t
z!^oA9oEK;2ji9>?BzjOVtgu*&4OekzwKDK2V2b@v^%E5wFgD|^lnT~4EuNjmak()6
zb2My`cTh3Dt9l*`Dm2u`znkj+UGWzXq(*JM%b3rbH@}9>qj^CAW1s~;;WE`U;MXoL
zGDt-l;}^hyK;8xNEo!jesIY<vgt?Ige3fg*qABI}*)6$iAoLH5_wgMxe6n8p1T5N2
z6;L6uz3E@kfUU}$3!AmcocI=qpqT|wLQ%r1ZI?(NQRxktFrVY1(E|S%BN*WKt=Mjf
z0z3jOAw?pmPBL1cb%bvHwJcJXS`CAb1I;mze85;5XH>c27@~?d&S)Y40$gsC1@Rqr
z{=}guq=AAcmDB9$8zaPnB)j&az0|FdEMx`<oOE`Uz)m6WFy+!jnT?WYXdSSaI8*_r
zD_Z>po)tJ|5s5R87`dOa{j&GsbVzt3f($2Avtx$I7si_23Yhr1+T}tUgmzrpaIk#w
zec8Xgj8Z4dz4;8xv_B2bkNFkw71w}b)$I$XUPO2}GQY!YPC_F<6_8&%yG>I++nZvc
zk5Mno3GW9OR_#i?up=*DUzYd;m|RY#6l2pu6+(bU55@-p;XZC6Q|J1E*bHbp1VIyk
zM%@BzBSkNT%vUwQL`e1$Yy~)zqeG1Yq1G#+vWwjZ#3l+K>ZiL0yPSQ+U(%snaaE)*
z#7Ef8S{&*|e79R)SwZ9EbIxk}^?luc0b{42H@h{^GH<22gpHjGWq8AbtV)gwhD3x-
z<lF53<{p&QT@;!i;(f+6g33M$KB?i;*5mksL0HH0Zb(@9!CVb`%x1CX_o%tx0^sNq
z(@(ug`mo!unyud9LKMZqI;gS+I3HaQg4$M)$zHbiZ<H?Rgj)y#8VZ1@0WlX;IDMsk
zebA=E<tq^J7W=)_E=PbUGWBsnZLSXf7MsM`fSbEwOod*>_QRb0;CPukp3D4E7@xp&
zjz`p-zW)1MX-s~g*xut|b>AAqdRs@tf*3=m{zeXywY9|<3ZbP|n*R+hO90Z_?gSN%
z<h7fW_s#}T!cx_?qEH9}^V>>|t?hETifyTMYVM1IT)}pMUl;7Fr93c)W)=}E?3QXF
zpxi@3`x>JJhwESygsc9=%)HQL$IxsM?>reoM@G`+SRObQ_a83TB=+dfbAS<-+I6j~
zpSC-zJL}wj#8qi|SiyX3O17}71WW1>0zqabml#gH!lV8uRS&>JcJnS#6)<$hP0F+5
zcT4jLgF2-sRj|aHjHen*t=xRq0+5UDM0C0+aKaE5u>2aogOhQ<X;t9LSRR;~FhLft
znL_ZTdi?(5DyMeDAsgrHsn1M}z3*^YDZ=L-<E*xS*Vh_8?(e<^1dxz(e`xDlpe2t(
zt-}Rqb84^;*IjC(+ojr=;4wu>Esr)EfWzUr{@fG{HTOFgLsuHZF&?-U(aKW(BTj0e
z(|<KyI=L{1d8LN7=a$fSK|!W%U_i;+oRc*S)ie!7CrS+QK(zHPM#>NuUgDB`s$%U9
z?OR+riE#gsL<kBh85Vjc0s!~M0=2Q=*F(#406LVYY98WTU&8?C0C?8Jz1QGYxTua)
zLLFA73g()7pKoF63cFR}xFEr+awNJWq?SO9=DC3bESmM3qr&`^|DT7stcHt1@nBOq
zUyGH~;9?6o&k-9UDtDUi@}H#w)yMO2TqNMxuIsus&cBd9E_p~?SXL&%k~~N%+|+I)
zEEia4@t+Tx{;oj1;)Q4|#nce^)S_sf&h_Rs2Bp}7bt6rm)ZD2Pial%cZ4H1I^3eu|
z>Jj7}9sTaF?v^FY*G20cK9<CmI&zx^;wqjsf(&TT5NfsPD8c%09H`rGZG4xuhuuin
zxc=>fvyBwghPwfd;nLaI5FZ{(zKtHJxlC_xhJJknQxd{p{GvtNn1xsR1mjp<a{3mP
zgJmzuzZLJIkomje3(Y)alz-4Z(y+}gYTk9Ip3VVdE^`5~0!GiN`Jw1fy^@Idiu?fj
z`G;JT`dVVuzVSzpk363LS)c<L1=zHd1LqihDnw<8w(n5LS%J}CkU~un)PcjX7lfqC
z%rLi>^m!B*f@%5cJKqGX<Nzz)>np4br3gfbY%l+6BmM3KH3+pf_#5I~GU5AaK8D9E
z@;{v9Z_1-MYQ}Jo2<;JuAjE(&;=SrPXb!*})F32|w}i<bOSQ=$8mlsKrT-iKB0YBK
zBJh4-98)@g5)cB%+74%109X&oVS*ejvDO{wdVlEnE#fP@o}DSGu93CyZCfw`@Pt&(
zwTKwkyIAw69pJ+A(~oZJQ(lNqgHOxQOc@RVpumJ2^@(jVC!f!B3Xq>hb*h^m5&@B;
ztrfiXv0FtVcWaC}-#WR*m_ts6V<Lc5*s?F!0@wHnhX}T0NM98{HkO!JVR7rb8zfw5
z+3E}J@S>Rl6;ha61-Oblh%&m>sm&4L98Y(5BGY5dX&uvHz`Lsq7~~q{j3mHnP?e24
zUWLO+4bt}aS&1*Vf2@@K3tTO`2()l}`~ws~gEPuQpleX@7sm*m*5&e2$I2)P6Qj{W
zNPm|qApX+V{D;uS@~sCeD0#vrncGdd9U#_V3Bg%bzk}7P(u;7U;i*AD_GkYLP;76&
zcn?7U!v`c~XG+>{der8cAfoMva8+>(y<QiM9TQY}^OLC+9wY+XycR!)x0Kuo{&PP<
z7*%6{h0VY#OdAjWik5SGoQ!vFLY^3h+6wV&SpY>O4MSzNB>zs@JYou~0R*Ev*A~#B
z>S@5wGIpINcOL`+G++tjZ&9EO2b=N5T$cjF5eL9-lEZpkc_q>6HhScf3I@n}jb`1T
z;HpumPMzuddFwzW2(|3D#~~Up;`wIK{6i1UhU|Ei)4tB6_`YZLkBud+k=&Ema$z%O
zp4@4<g&ep`T+>_!BtnB=M??bwStxkqwV6eLrvoaU5F$?VX8_J<K0o|jfO>@r_M*M>
z{#Qve&#=-?zL}9vEZ`vmm-h9}LNu?9GdvihBL#{;Q-m@2)aJVIfk$_EN~P=?TT}9;
z2ujgxd?iI;fB9V3WH3niF+ixn9f5Q*DRo-YgCAyK^ZMWnb_bd_!MmVyb$6ErVPmXV
zhh_c)t0*cQGOVFBj8}U){W@{kkm3bIukD1c^E2R7ptg>sRWxTzbT|QwR}28E&(D+X
znxQ;|w{7aBjQN?ldo5jS2ks~RBD~w)Ij;P+V=xZVvB3-hHMivY1D%z01fYlD+g`+#
zV*>^?Ye!HLE;MTu1G@Y$kV(uHXzhagJ=1?{uHMnJE_ZTElPM_&|B?M%Ktx0&Q4dx8
z(>Fn6IQIG-6`H^8nQz209r53c#B}dW<hz0fl?*x_=K6V@UT#pSX=>F5tkUN?3&=1D
zzdoA$3vu~;8m+!YgLjD72};AW3J-wL2PSAg3m|lp69f!;R_Aw%LSS*`or@fKmm`M?
z;J;q253Oi?aGH8`O~;{EO6GI1lk4t0{`D6sC(jM&`qB$T{%ThW42J0Yzo~)9H&J*O
z{ierD)HbCX{#~V#Bk@qww&;>-WDAJxpb*9gxN+o()*EEhE1cl{x~3Mnc}s&@!4U*p
zWkS$ilo?bN^k*_P&J*<-8hWt*w*j(|DJf;LYP>%&dQgxRdP&p-fVlv$s?>k85M-yS
zT_2o-Q6h*6_07$5X31xxFl(9knQJWxo1zwDqbvnHkeQi0Xgti(nL|=@jy<itQq=Hg
z2i!c5j~2JHI&uFt@QgfcQ6D)og2~aG?pw;KX=#xQ%sM}u;1AxD)+U4gM8<4`J0mL_
z+tec6lo}!;ZarB*8hXM|{Mr@G%ftqpg~NrhIvF#`>-{&>9uTYy9k<5^?+Xwl0H@|P
z=u2JVKEE{BLX=PJ^9y=ADGH%q!`cG#m0*koaGitKDb`-CQkX>*c#jK5L-qApBxLm`
zVp7x95lR1Tl61qtrc3v(;)CeZ<2?tk?{v)cHU9p6M$7>Gat!ZiB8quKQ^^_tZ#7%8
zBVeqYFB3@Z<<fcIeM5~fq=#?CMY$*GdH!d?$Q}2bC9JgrG1B*)=LT=T!cRn;dO)s+
z5%9rnoeG>$g<z%;jLHx2NmPN451ax5x|J)J|62<{sE+=E8h%bGNG9?s4pTPy6ZoD}
zJRygfgd`+UpFZKh?q!dUk0{vK+s@;^>+50T6pHm!Jt1(S3=(-V8|~PUD8YvwMziVj
zH1&=rW;I~=a{QA;z{8E}BLds2SB4uXg|8}5Qd3h;kPE;SDIYjqt6lAB%o&e=7@%8j
z8ujnp3Pi5G<IMegmZ&59T__k#{rxKHO8{#82=_w&&Nh|G#l`+wdx9Zabc!+(0;s$Q
zkB(Oy<AVwaBBMj>>XUbpL7Okr;oe<+hr`;D%hsA#y6P#3kH=2A0|3Y1*jUW|WVUEf
zhsXzsUD2<sBSv^1HSlZuUY>C7QAatv?D)|tesH4x?$Dtil8pUWcxi`l6x)e@p}fAw
zQs{l8bsP#&_n-Uwwm(j#K?&M2c!&>9Se;PoYS(K0pPOgr2CNj?@kh9+0sgOgOi9q6
ztRKrq9Ls#kb0RLoo@HpPc~9X{Y>IMLEXe%5z6T?QjJxjd?n0Wme(ZGzsC@_c>#6x&
zF&YWP1Zvphyzrv<M|LZ)DQCLg<aP95yfIf(_q#dQckE1FsruzC()_;j%#y@QZVl9~
z$OP}aX@#UB)wbg;bqIa&dcJUE&;d%hR(Ti_W_Qun53n$u-fvD(`y2Uy@-k729>Kh@
z6{xkHktpwB;(kJfgV57p)6EM|ZQp(E`^<&hVca28YT{dh?n4T-^DWNRJu(zre5k%c
zQv4jL2%cD>pq2@7WP&#BH?)YLpD3*821s=h0ucI25*=@k*V!_t87duD-FJ`wgfTEN
zZv$uw3JT81^!Hxij#|KjS4Yv*NBOyLE#r9_CO2)R(YL-Dd*=_>G?Z=DC74lfUxo=E
z9@#qQ;HMRW9TgG9GnMq2Nr6wQI0&ULsx95uesujk_W$j(xIK@IL9-MA2?+@{4`hh>
zvyGuv*?ZVV`;2@tKjO@J#uZ}mO4@J#R^`9P7;%i-_nV)klEk|EzVx_8Ks`!X8@@Oy
z0jML+1c48j(N5&flsFRNKk{r(99Lf6e4<muMQoRqR3mS8#sav^F0h&g6HLrx6tuPR
zSy@?c93b7YRf<;0gOlWcai}zC&eR|8t_jC~#rWRb&*)H))}YBITFWj}G>nPnS$tj6
z-*MDd4M#0xR%D1Ljd2ii>u~IwMQnZ|CXF5s9V}mddi4{HK!GdmmWLrkA$9dlGi1T{
za$Kms`rW4$dm;C2$-_I96|rgb*J<BIW+=s5*4vJLx!5it5yx_WuRlIOg3vQt<Yz<#
zIiTK%o=We(`Sq4o(bf$4Zvpd#Y~q7hh74CaZ;4Ecw~FY5BX}W`oB=}9n{AEG$0xrB
z>^HdkzlRZ2S1Cq+AV7H{h+`zrZtI^^6#n?FP=-E-U8C}NgHNBZQo;4-d4bwWUYGyE
zq>SvJikwDH-a(XFrH6lwbz}1l#7OZc631|~nhVLZ0x|(H5|`uNu4ik~`Wu74G%x8C
zwL4x5;DSj`f+q*h(#f3|&^4s)U-j{;c=ujNCYJxD15MWLs&}!mv8RBh7EpZ*T*SDf
zq|u;8Froa?`-jk_YA?zsCXLRZq`wA80!zznm(w#EuZ-UDRp(^tB+qG}wNr+;j-Apl
zZxt41N@{B7LF8kZZi!CejysmuocdHIOSgkuzihY9&O%3+G$J5RZ;;!pBb&VcL6S=T
zzF81=Z?_I9Ph(t)wl*KQOX3_!$2@Gjc>SZ)|FjWYJs63y-XP^Ym7n(6T6NhZ8aG^H
zg%QWD5x;kw|AbB)zZ>n%IwAUc#d4GwpG^a;vqxFdb-w<1IUm{6;?KfM<4RuJwFq}O
z#&YWcY6sKp*uuW}9Ud2aj=Fb;ZhrsHo{QdND%FZ*zjd#$pMM1s+UJK~eLFt1$zSZu
zBBq24w-tCP+&G9lJ9qf2C8A5Gs2LOEL<L{T;Ig)fIw`JhMvw=+`ta#P@m?sC#gBy;
zN^uHs+Vldv>up5~xa)TS`A7TN{J=o;v7QtmE*1QoB-qm=J-NH91%fvRR9FH+F|WNz
zi*lbI{;V8+d?k3fhu>uH(^*qr;(?@~5vfSUmuIyfrbEQ(2Y<Fz)iL-df2=K+zQ<=c
zl92u&K0NtyAYW+&&QGZSEOg@ZB{O8-gRJvPrG(37PjJw1V?efhhg#H??u5VA@nV%n
zaqj&=98i7c`DRn^2;1`FD>=s@FRtg&@$(}Il$msx&tRoCd$E!5*~iAQ9a^OS#Sp#2
z>I|)V)USDu72?z^r96l|$!yd8Rz3|)htnyQMXU*1&Sl4j-I_+MsaKpQ#jW(<DO+65
zJ@<>YzZ%72Z%~$FMV}3+sVH`6Z)&i9jjQ-^hJ6Zwez_%&-IQYt1~G=_|M^hc0vOMi
zhh7DUa31bc?elJCPJ|QF2gc<|CH4irFA9gnA=o;sZ$PTI+{{eUH}YjOb}*hC4e`(w
z+TJ3o&-Ro%haak_8#6t`NXUaEN!ZE!0dD*X*E;cdn}NF*sRI5q!;4<H9Ew**3lY)V
z!(AyBA-Ud*mF5FBVOJl*{6&#3NJYYyTOB)@Vbk8>9_3DU+D+IcQ;mt&g)&;RW+~_o
z_CuraJFh-&pPZPY%<+{3)7nUX0^{IYczau#_!zu~<Q$YSQh0si%vL`fp3lc{N&C{X
zD1M!5pfjMvljvOh-DYzxsa>d@**jnzPeepCK2EAp^@W)hUPglbzqJ&|{)OrD6Ok5n
zWKbzCl}26|uGT|&wuU#->tu=|*kRHCDFSEKscy5~fA0~MfmpekM?FfB7rqFW-e9oG
zBIjO)VxVR~a%cRvSgF`e5J2vneHU;jik4+piuuZ!nR5Gh$kI<Z6z6!4FxLDLA-j95
zut+PUrJR`D!2rE+_Vur5|5`>IdgV$hUS6q#5q)DpPZFTKUa8U?FHq{;?9QH%DSM96
z;{Ae{hs5GQ-2G-ipwtBFUh)b|(c|X{bL=;)P#mJ$w_mIfW{5io7Zv93nC-&<HRsVj
zs*&Y~>^GM$Q$6`DD&iULvl~`5lWdK%?G`Kt%5WeR9dE(n9&mxsbCas?Vc~v)1F_PM
zNG7{cZ0AD(VOSDLn2^poMd`&R^Y0oaV6E;QMiO4N$~>XgH6z;564#<tB>I7BiY{0R
z-ua2Bu&%Qhk$67z5WT}XbI_>ebBediH9r}t&KmdkI(PRL?H}&(j}JBL;n!4kZ^c?t
zP%^x^U2bGdlOrJv%J@8rj|=(VOeXdU7js_rCzcGRG=FV5gC2kBVCSFc<W>t{{d)K(
zWm!4xaHut4txv4QO0ME!>tAE}%?#3|)5xakBGOR8&*S|%4!<judlWPg)H2jgPTMXz
zUKd;0Jelkk@4_+}2?WFqD#d{184GY-^)o}}-;clgFe(B6t{l*BNT4bzupBl5gjUH^
zP2HW7^G+ARjUd%fVT(75_2DA^4YT8<wTR(|8XZ^6xk^ijnzV{n$4gO%$UwXphC#$v
zh-{`fvG~EIiOGUA6HKWf8u0t4UTVqLQncTB?^*w#UuTDVbvzg1y_9jYRrHHQyDeBt
zV5RPZ<3o{vgGcXYgaE;nKyvE#8N9{8q{vvm=V*B;8NznSLnCSfu18DQl5mWx)6IMy
zl#MYfq<Wk~o#c&irZTk$1m@RYMg6}<Lu#%1JiDcC9OmNt`r^&kzJH8nxx*&Uw({Rb
zP@`Fy)EG3ZCSWK?^QI)_{~&|@L$%PbKcUWGwxC`yQrb7M5E|=517Ar`g{*OQzrrb*
zheKaU&MSII6bTU}_uAvf9ku)~pbFNBErcv$2~Q4aVfSWG=t-l`8Ev+V`rEpGd(O&Z
zKvS*7H2y=Sthrs&s)*qeiH6(#G#@+lY`3b<sc9XuL6!A(o>lA92mEsOn9m=7ua7Pr
z`bDA%yITL*BWKbnfL~UwDN|x$mzcHBY-~JzE8?(=xr|`-lW=*XMzY3oXU?9gc(M?W
zQSqpC`;w_Nl6LXN0k3v)yYDg6g>sbdv8J6?bgZ#eSlq&9xcbz1xV%K>4|kIZgQ97x
zPu#HT<;m5hQUD3|d}^&cmr+c%2zL1Op?tL%KSJnXc*l`N#XLUCpUrp!0{51O2sUZW
z%LsD_eUa+B|1vbNG7K<({1gV0xu-joGHKyoDZrvj*kR{2c3&+&sl$*X?gGC)CY!Bu
zl7@KRC(k#geo?njgjnnxg-3=tQdZeyJCKV3UpdeitoQCz(zAoAf&y<=d0pA*raSN1
zX5H)G7pUE&UoZ`-w$*o`sa+)Zcbhz>BG|IS#>ssS$@G%A9?Y2YvzND3j60LX{2(Y<
zT5g%ll5X^+-Is~c=}^x1Zgf}uXo@`$a$~R!N6iwSCwQe!2L`F+xyeX~gS=ua-Zfd8
zLm{!x0>21bM#2;%qJ{57cy6siT#?>D8=)md&kui1pBB=3h%d%c$ojVRF3I^KeDBj#
zp{mKFn}U;9hZEM=_SB$}L{Z>Z$dk!<{n3&dejKl!$OAXYQ*ZiqJ@^IPyWQ9eq3@+A
z;D1N6PAMTq1Qo+RM^W{UzicgjduL&I#O{lH&jB^vWuw@vAHHr<z9ff|(eP}OGHJz0
z=|N)PZ0ihVD{<ZBQ@48vtWnF8*$;!l)4(S{)W5#=EWUj?yIq^YOTb0Ks6m4yd-(IC
zOr%E~x~weXMH+ZZe6azC{xz<5m+zWf0)j<)yeB84u5{<`^zC6u<E8Nw?ktV^e?LlA
zf>KtYIH>5>8k~Jd%2Rl7<g_OucS2{*{c1dl?;RE{xQrq6cY=G9HZ(bl|2-?euWGN}
zfULRx;63qXRf?V#%bd~S_Y<YUhB}6pr-!(-BpXYaU0m4fF5m`7Ds#TpKrEf&WJnS-
zJ^U-BmG$^|&TBqKjl3#aP&NJnOrRA7Sr9lAa5X}F<~y6O)QF;N`&tg&ekOu0X3PD+
zM)|i0s`athJNHx{Vp9L(oy~HsACcgX10L`3cJ&GvHKcBHFTq!{{fDCwBqMPQUh=J4
zqTt`5iN^MsX{?FHwYgW^uCC-h0TD_Ne)|ZM_5Qfd#3-$5VcV!U6dX93oF9mTenaKu
zb5ieXZl6xKe@BH}F^x@q)}j!IglxtXB7#IJon9gjDidkVqbgxfr-&$#kRv}>M#L^(
zV3OTq#F5d=TA-aOB`2Z8NiazV{#-_aDL5np-A#eJ=z%V`&el-~LT@O{TZ9!Oqfm^i
z`CKLlB|<q!1{GXmw3siaz%58ry24)Y^bC=~Bn?{SJbYHXs91k$K(`gPWho$g2~K7S
zu!`gnXFC})p6`4b36_bJS1uyC1Xq$gic)PB@R`MUR2ouwGM5J$6Pe(7BkFeBiI#c=
z{e$adXVGF&F6AW7jDD|M!T&oJ_M;^bd1WP>u(NsdWwg@rZ#_1WOQcXhA&UT{kr2(q
ze()z$u!u;fNGIR8kwK@CM=srwJojE?3|Bb&U<2+0>%wP_nwO~!IUb1e8vp&n2#HF>
zjjI!|DOylD>Wp7-Yl4lZp2saC@d|b~#HTMa6$6B^6j%mONy}VqteIro{2q(lk%Z1m
z$mU3-(4-Z0q1UIK=}X0X;!Cpu@c_Tx;6<a=(I!l8lDCQ)A|M}zDzSzBE#g;BI6z+v
zuYNaf88CHAr0<qvIG3jw`3yV-841z<^(92T^Dt}r+4Mp=={0DekR-56L4re*$0YRO
zfvUhau4^@D#Y#@wR_JZshW@At5s5Y8edp@q;{49x0>(!<ubk^3-0`=QfoyXBw>wT|
zo|k;$H<Xl}P}&x`oQXfGf)5Xz+yw&>Dwq82WBnQz9)(h{m-P%+odd2x)GvWa!?{J?
zpmD)X2So`&FU6!mOhZKu+ZYiE;C7(TJ%S#7<rMBc?LhR(hdT<NEjTMPeYLxa(RO7N
z?L67J>reiDg~z6pi1&NSDZ8o8^06<tc;~c|4W-S<mQ&+G`Uh2+Htiq<1M!usRlLGu
z_9t$4OajaGQafk9hTj#qxZq5OI;?Q{b1j9ocE69uttWbqB&(FzQO>2MzEI1{;d`;d
z&YC71s+5eRLgvc8f(YdK(4qY%?+kyWxV25d{fa9yYss-`wfHl=UFE>;;b;^NBw0C`
z?rQZ|M3EHa87rEj#IyJusM)c|=2>iwE3DvHB1+nMz8v5`V3TmudM3Apk=8)>F1@vA
z=TJQqtbVXyasuGpd~d+Qdi?si_<6%-F;3k7xn8t!=v!C_sF+UZvYT<e?uZD6&$=2i
zI4VALGXK0bh}qotaCg-#tHiv+Bt~fDe!&&EMTcMeGPs?V!Q$WE_tVX#R`id(J8*)o
zk76SsJdD_H_UJstSm-M}U}-8yAa2Gp)+Mj&nIdCj+lTB^IA?1RtT{}hUk@4Pzftl{
zwdR+OZ|QVd{VATpC0S?cs-ac#^+gKxTW0O{dW+JV6EU*(+-xrAJ46{k*9^2~->fKq
z3VbAsb$uFCsT5-fM!Il_mKB>n+4E)+>A~nKj=hK7mr6|x&D*1f3U%tZxUD#GzHWlE
zBp*_<5<S8(x+;SlP^oei^S7d5$$D}`%WRUrko$jD(kR*gtfVpHBirBfutyc}|9Dhd
z3>e)*C4{Sdp7dz*_}f(yiixZrfkm{NquD}9jXhKR<6W!~&DuX<RwGVKPp9R!yUgCx
z`|*q*Ex9lF^a?e25WjzAqKf(erK^cC4=DbfzSOoeKat|TVoGK;J--<zyFZ&wUE!mw
z;NsG6ad~w`*4k0!l)Y>nLp;Y~ps_YNO#kO@)@kwof8!vJr&!pmlEc8j0MYRM^2|%8
zTi3}q><a9mW+87Gl-L#QHcOM%e0Grj*H5JQU#mg1f!>48Z9s?GPd*VPSLSU*(0f?i
zp;BCG2|&GuGijjuld(*~-i(x^HPeEMh%!Go>AQ;IpkIZboi85z|KsZ|qpE7VwqZe3
zKtWO@r8aDk?vPNr*_0sNNQ0C#(%s!5DIH38H`3iwQcBl%?o03Iz3%53<NL)A#@K7E
zGiDs~n8&oJF-@dyR)Dp|?E;m%q+zH;A#o>&Tg4<qg(y01Lpp(GCbP5kQ;@9&S8b2k
zd_4NWK5B;W$x2J4D@649)iBZRai|&I%6y@0R+dj^>m}^}C%rfa+?7IM37y%zEz|F@
zj8{yoOws$i!cX5dT^%vRQv&Q_x%-YqLZLG&h~#%lojBYmL~#Du%1EmwxNQo-3B)3c
z$$x?w5e6JLu5hon3t3Nc={-;@X*nZH<me@Kk<$PXP57#DObS;8p0_5i-rTJq4!y4b
z&tz9?owFKY5ft@X+sz%tv<HN4@w$z}SPYU;ra$yMT==ushxsID*^9$w(UP*HYx`Vh
z`nO-o>6n|h?HaQ3CFHAd%|$adC$h{Xd)#zHy1Dj->20H_qvkkS$RC`R^%w@$p(R1o
zmOvxx`5xwJYaGQ#ndg45DX5Oz-YHZj?smL=>Ey~CYMTY3JB@_0r!}=u%~j0v(_e%H
zL?)gsoL*(jm925k>hc^eYDWYaN#N_@_L=3+Mw6@27BuR@&$7<{I?K|e(>N~!o4m!=
zKG?D0A)5C}ozG1@KUl=O#d~p_Na?OV)pl_BKv+~X14PPAa@}1Ex2`X+M7XJ#QV8Dq
z9n?@jm2$Z1s?B<g^_gH%O1#?5uChuoWycq&IKqsaj^lL6FZS1R+iG0|kRGJ?sGm(v
zyX~<oEg2;F^EwbW2AI##I}w5wT@a^(B>qsd9D_gkl!E1$BEe~Uc{S)(sGC}C>7pfC
zr{CX*{@r8j?*m(lP0R%U$|-u|s6Vgkxx`%e7<%1gUfJB-oSduwN?aHE?rPKK(~Iq3
zPOn)&!L&Y)L5Hm6`6>57`PU;Y0Iuhjys1n6<D9GfJm*RHC1OluOan;*;J$<OzkLUm
zLzHwlI=X8CN<9I){VHLGU!z+n2fA|P4BcZDEA9?M(GGvd25B+8w@sNlIq!pYw1>%>
z=F{}!N53Xh#N&Ty>YLcRfHh0UP)^8#1ng|-SF{<<R7a%cwQ!0Xb?FL7C|o~AtP;E$
z!*0B)Uo$qR+mt2@w=a5j6hFO4Yd(zqKPkm|)QcJ=s1^T992%qGqv#(ihfTzRlifxc
zWjFHEe01(q5z{FAMrs42pY7e6UeSCOL%M59+zpJUF1wp?hr4kxSorFdBG(69rK<dZ
zRka|%T1AN&c!wo27$kX?n&VAh>QP3*aLe%OxcH<dOEc4fXZkT};-7VjA}9UoFNXy=
z9<&EXDI${mU#>pu6I8bym-r?y{Wz-BlRbn5zdM{18*{12!?(PgW=Z(u<CcC?rfJ>p
zZOj`QRD2eLW$KA*t+0iGuwRC@E5qM)qfEub`v6qPnC4Gz%pk>J<=#A9z-F#L^<y|K
zL$PR9Bc?3aV(5}#56yOcAQUuhQGTN?xSZyv0&V*n76!wStgU=|-&O?XRGzu$<t<)c
zpHas{P~T&nvhS6eRu~REW0aLNei=HZCgpu&7DZ-xfvI^%je&*P7C+x`d5pU6u%Do8
z_-us?@gIkoh#4{0P92Dq2-&h)h*U2@#i#kNBN2qP?I%4SH&fo$9E@dS_O_VAu=_qx
zcf`!oPJQSy{q*8F)|r(s^0Yf)pr+_{h)zmt!ei{{-&9BGgn4%dX86(>=ksjdG%SP$
zqQF~UG&kQZjkm;jEHI^Jni7A{s((lHzO^&j&C-R)%=roan9)eq78K`?@y77}b6Nu;
zac9;1;iuK`->>G(AUSPIR`aFn^OWFr#bJ0{Y+zIeV(0~~_Z;R|%xf~P)@C_=KFmh#
znJ1N*0cx1j2IYZQQv-e;Wy6Wqqo-0w-Qu~w6RjJzZIlMpl;?zU&;Oc|2Y-FW8?3D!
zdbrP+miU*?*s6s_GMq$Ns^J1FU}4@n^dn*Toakz)+aq19Te#az=4jUAu40B3bBW^i
z?r7~Uz0xH{GcJ*?R?w!x_6>mcE^O*&?aDt(4L;@kK}MfnbI)56eJuA7`t0vlNB;fl
z1fq8;vGA|f`uA5;O6K%8QNDYo7!xqV&0z-7%DN5^+{%-mzqZB(7((0N87C$I@#WhO
zvGlarhF)>`$$1RZKNPe|n;SN-qRJ9ELAc&^$+P?UiT^CspCiDI{pSd<Q-}CW^aJ;i
zLHV!qew+@Cv_#I|=l}`SX7LA|MbK5b9H7&5O?|ucwAFPJwO-PYzSCEt`wcN9lIjNW
zO7~-rEl$5e$bnSU6j$jGbFSy#5Sr_ckHX|Xty593tflo4__voDy49`@7xa=*0d=e=
zyE|XRevl8DTFIReiaV`_m7Myg4psi@mECh{xKFK}8gd}&|Au&^*o2d<Z%&*-vmUs{
zzJ0oW&W01Stw&-n#X_s3LjR->z|sFnAL=v|9Q)zh+3@cWz$CzJ$+PLOX-!6ogsnrJ
zFd4-ayT`XTjG7nT2S=i}<{COWm`gZ|XIeTL(XBz`y*-uJPL_Tjorg%tOkIf^?tDCv
zO&<LXrNSB%#Bksb3Hk4b+?3?iFWZfyaI<U*CP*dtz58rb6)CtLF3uq3z`qzMH2m}k
zqexZh^%9ob=tOSO7FqMfrQa}>u9UX}$21DH8TIH~2I}8+yh85zxe^Vkt{Vxen7v@X
ztjYehUs+_Q2hGi5r`0nb%@F7j<tg5xp;b!{ny`9Ft;923>=*#!*xkOT_J#Vk;PC16
zHn*N8YsqlSR&X{<K+dg+6GiiHApPP$Y1hY>|0nHY>uFl?^5Z%^eopl^A>?SI%dE`M
zRB{fb%#azIK~8Y5R264X0p~8}?$J-wYAO3^b2%)IWS^g~3J`>rHNv*Y|D3!V(*M|5
z_5W*UU!SsC4Rqu`&X%96;J8k{_~#LL$SEJ){Q9v@8S5WTqc2xV4WJDwqkCMWZoq4=
z)wWY@+nagHCH|I_f1a>F@#hJ3@!oGJ;(&SE2HE%j3ysh!1YS6hC_BF0p!ah?6>*Qg
zCNNJ;8he0fE{YNjG515M?=yJmy@2MJ?fD)dw$1pW>)28=)qYDMCs@*cMCR{GCI4M1
z&R_E4<M7RQqx$!T=$`u4;IysfcmKuu+2(oJ^IjrNr$Nk5M^nQc&)qq$2oL-dz0`u*
zmX1vx^Q3JB6ml1>YV?1gsf$O&Mt~az&;7r*bYZwR$C>p1?#MvXS>mFqy(4ZN-p{a!
z(;{~GQ>2g>{Ix~byhB?#5G~(NL=DqP^ln)9Ao!=h=%T$+-cqYFmbCm_@#i~8@BfXV
zymO?p9>c$bLL^HV8A2<BltTeZ%<X$q0;*5(Jn&Q#->pb=XR4ky|Az}eO<<Xt^qn2?
zQ97|OKyf}!^97xHhBt<1Fle|qqHSFFWx9qPf7^3X8{tz5_~T>O{{adpCD&uqo6kgn
zIWWliuPc+_W?~2Z!l8Dg;`rwVpos|%ZWDO1pG{_TZ<D;*TXAS-uJ1GdteNoP1N!`M
zy}s+rQG$j|#n`dZKbfE)(z+NNivW*^&kiDiUzGoji&3U4-6*DSF^5D_$}@)^qL61$
z*@xbno3|h6WPY{RIf0kmY;k8$KeA`dO625lFE1(m6Yx`-y9}KGdxJ-v<QRVpCuY<e
zsiFvQxLQG<=KotS#8a2F{ntg=#X2#I$Yd5m=PX2Z0iG;~Lf(FQx5XDw9ff<w>S-b*
zYp((qk2m`X*B2uQeOd6@+R>lJDod6A-FIn}Ket^P8`l$f10d`P#e5S8kd$ozNks;@
zeb$V%rn$!2R7&*Lb!evy`jj-mj+iRz(6;HH%$zfhF;K+AIC{v*H;?oqdg!?h@4etc
z#<6M!g@(VIj`i0n(=b<+5x@iIj(-QvlzIYZn;K691c)X+D2wR?3kGIo7}<xmgr0HA
ze{?i-y}RJ+HDq6qv-dx6({`6c=cV^&_~XY$<o=$frC0EK_upX!R=LN?1+L^zsPEGy
zftKc40n;BP^f1ctFC~~d$yF7D?~*sH{M<s%ZgAZvtJRLUH(B}ZuI{b<?y8&Q3yS}9
zfQ0`BY2*;UXDSrnLVQXP4#bdD@<SFE0|>I+-l#yCK%5_4XG_%masb1jP-N!X2ey2d
zle_p5RaUBd{Y}Tgylj;RR4aG(O78=wanAnx`)5nom%l5+@^@vpUsvVxz*nZ~-z$@&
zAI@4j+~S_jcTDg@M7$m&!H6lAiNN$-Jo5F2lNWG&(Vl*HRk#xSD6?`y!(44D9Z@9y
zQnVcF&wb|lYcx_CM!Md?akA&p|K8XzKC9Z%R#C3YRp{inmbWFx0%e$A(iAR8TvRqR
zV~+p>MF1i1-H_?4-)-usYp`*O20M2YDSau;ZS+owKj+i*uX!~U$D%KQdt9WK|2BTx
z)4$@T=GDDP@?0`Ryq-;eHwo_;mH$;ItkYWj;5il>Qu|LoeTUc?<Xen^v&MpmY(xfb
zt+CG~@_!d7;~`>@zufR~T7s&37Qwp_^H@qrwtn^K;z;NyrG;rQ*d{WNWFu$hbg^jb
zHy`_}b39%)N=}BxR>u&iXBTb=lb$ZA@)uFAx*%!SRd0+wE5o*W)#sw4a3Nv4Lwn-;
zXP=e+eg!S1SJ*r`e4kT|{uPgjck?%G9L0CF?<V2#Et|HgZoNbH9!BeGTlSq+b)+b1
zZVpr9G}2XEkl9lGmR(}+y9)W^8Y2H*tR9pskqNkU$oMZrkNE054p)kb<@2ylOPm)p
zx%kU7VG*(|M6Z*llkJ^L4`e50;YlevKW|U`LfOVYTrIercK>UqFE%Ux?{y7x`xGaZ
z^1^F|(>Pl{Gi+MPDmqSBMAwAZ>rv!WoyrM6|HNU+7inSwVg_g8215~Qb3%Fl2}=k6
z9+*KC3f&X9b%y>sECtK(y5Fj);q?jM#L@Y8ee;s9_{6C8BT+rjCl=K5c4n~o@P^^`
zfm9k!EqnLRKgkqb{~YrSgumggS59O;3jCOd{P!`xd)qH16qn_p;}J8c^~{SNu{CaW
zL<A`Y6EIvtWS*`Wk<I+5=?1K!n1wh0F<K-T8H!fFbs`MML_j4JUwr2wW&|ccC*N@-
zoID-x25Fj!{#$xNJPUL&vT4<j#-Nk7zIQLHxiy0R10xIng^`5<DPFU}zZUtu=zraA
zY>SIO#l#ll=rT2kxdRAXNVyS%20hgh|5gi-LjIhffO~%dWC{BJ<2Q5k(+&Ddj5WZ3
zDaqMs<;UHk>Ow54hMo!9%-0FapicSTECB~jdH}0s67e^EX8OoB9|I4~`Trf7kCn?+
zY`8?8op+TSG&kmjYF1mjRx#&D7qPCG?Y;d{(D-n{yzaez01o!wpG)}rb6j3*(<$(u
z<N04dSF-`4O?}{ws>+Mv!ooRxPq<H6rB#v-BaBoM12G+{ev2k|`GZOkcscRE{xqkL
z^5iQ#VtW(v-{vsdB9T5@r&1C?Wm(|e>_Vy_ba5214$7-5Pred{%_tk0Ntxh0`txq$
z;-0dNkr@2!spJ4<SMUjjhaupofE#{KZGx(Xe>Mo6n&)uty@YQe&W6WQtMQ}J-`0wY
zqiLPaddkJh#|LaD5r0<S`fQA6dFm<7%P2+|K^ht1ax1^2U26{3kYwP3+aZy-S%4mH
zJ(T{X2tpE!{K1J*4L+e)ef(E)@7JO@6@94&hBUns^=Ik#M15gj>~54EQvdu3$_wvq
z$9XX2MS-Dbd4tuw$eF>|aNyL=)yRCxxfnhhR}BdZNQw^<j7^GNuD2xyv((~9edxn$
zGS&jauFb&Rou1L5zPkpEM_c=|xIgYQ6w<E~RGaEd1SxxT#wdBy<u1B8QyfZXywd{&
zKs?LEy1-yOpR-ypR=2FOvb|85GGUwrszd`;%anrYqp(y*Zts&}W=(87$k(ZM3IpO-
z=9)|eKDHM&w1*F0<&}Eg&A6BbbF<@uF@Y~Y^IIpFQ>$ZO5R+86r6q%TZu`R5!fd5y
zC=qI4kyr(lcwKV3C4k0W6#M!N;RD;m<Iy=apeq8%o^NXDc+?6bz}Q#t<xX@HDvA>e
z$~OFaul|-vEq=;(&dQL2o=TJP95VD5T%W=P_{oD`KO;Hp<9)e8u-qq5YNm!qos_zq
zURfdbl=!~Oqy4jEz0;`9^^p#QM^A}xl!}EE9})38C3NS6nE{%dYLydajpa-bp!UAB
zSOsM7t&#Hk57D0o04*6Pz1)L;LZMmV<#bH?Bi7UhuewiU*yx7UUoK-dAd-B()KTbN
zloS%cwSJJM^`S~3<}iJVn1`H}7E88xPUlD1PsuBx2UVW;@F1sL6~^4CYCmLHGGf+E
z!<+PBmG9o$9SA5s=1DllfW|8hh3u0eD!}P-4^D7u@PBh4+n-H!eobE*q4dBeGI1sK
zWtX?%#?Vp7a;+ZQn)u9!j`u30Vx~{ex}f#2cK80-ul<H#!^-$h<-8(zcd9GLmlj+N
z{~HsR6jOIedSq2;<-)h3Q$q_QU#(U>@?R1dF&EEOq5rr)TqG0Y<m^noWr~r;=js<R
zM<#it(N@ECjK|<vxKXGF%FUAfihtZXsOaOtY!4Rsl!~;7NxsMH0njslDj&ZuzNRw-
z|9ka&E@)f_h}<LuMI!stSmTZ~O6JOFHdx$#U?9+ga-gu(qs`&6XAc<LGCp{p$1j*K
zl;vDv5eKHU;RN4{#tJ@_?aB}PUPfh&HmhwuY#dv*p<185zd5Ly{BBL@1h53Ek)?SF
z*KUT9tM{$i^=6%&9y?d<2Le9sIyicx`}|<A2IwvDKPX{0naXc`Cn9nFgQ>y&_Mz`F
zUfTe^MDrY*-a7KDk4H${zt(+x10Mupm1D*3023pqj|8Z89bH{u0E=n<R1O-?*;crM
z3KiFjYXZ%=@$Rxr@8ul=&g>`#_;*mc>$neZFz`J()IhI039?m_QjBkd+Y&qIBj>dJ
zz=<=JUja7+m+<12KakK?l=74aq>$s(Tl=IL;C_pJpvk}dd-pp^p`pvn_0_hvEAu7R
z*~wW;v;KJHfUokfUfm7VbEzM6?Q?ln<!<V$ikWj&7T)udwIfze0@Itc1rD&Wa&@t)
zDys+0sqXp8MU&cFa_Rh`92W2NhZFgxzd2(EMvYTZFUSF(O^I|)0%6g1{@x@c_WZeF
ztI06;wc{g~Z%@!~LU_MgWk~HhPd8h=0G5Cn#luwT9`IyG5vmNvOnsl2(`;Od$~2lz
z*ph731PNf6<fIS4zZK-=M3Ogd`qp;piyHj$_hC$fI!QsZTPm9585j_{P2FOu>`omq
z=__XX3x+QbZuyGbVQrtb)|W$ch5TAOJ0Y*7L1TI6wePR8qh--sdzk>NuPc_*jrLEk
zInGy(JNrGD3+2lZ-_>(v8rH|DvbfL$VrgEAW~c&;Ab^_m3?Bm8Rk~{*zb$jJpQqXY
z*xl(JU=!-+=J5iX_t?zLtnY~hC8$1!_odff*F!TkCc8R5Cj{IBC-6}v=}q5nFmFL_
zy(i(mE`u)5^nFw{T*T(!sARl-oi0zqGBqunAB(9{RXmTg_mDq)%&VCp`~vF?!8*P8
zoY8OXXy3iS>ljI|&O!1Wh&`M~C3C+t&VDn2N`MRbQjX~+nxQb$hY~jd?$q*XwN%0e
z@mD&3;Xv9M@iPqIWzdk;Uu7GBUcm$&H>ycXfiSvFHEdkSUT{(Tu+Yf15SOD0UtYoc
zcCKB!CzO(4AMR)*q4D-S{WMOASfFz4eZQZ>vA8CWAiM#@$6RyAU(ioKy^*EyS`tCI
z^W||PB!AMhod2_2xQIZj;_0T+*<=D#_w_(3%hU2v=0nZOxbE@l<i}5>(U|S7BhH_*
zvuFFTpYL?OtjeFjLNG>@Z*u(zy14OAtACcC4Unu4MJEeONJdBW!9Aoh(mGEza5Uy4
z83>aHue_o@_jj}2eGm;?_3d4ING6o@{EIf;S-n34J$c5DEXo26BZ?eV=U-PQFa|T&
zz5?_gf_YeOON06^COVVn;Z0!p%eRG74iCq4h6}87#h9|RI(CBa_#3UY<k7E4#Kx5p
zlT+_JMOB8t+R`C+&&nq77}8ofUU%3W{yLL76tnD||2+N-oA<=eVzV!95n4juq;7pV
zf}g@~Pf)#Qmg(?)c59^C?RppZ)TSlYaaM9tM?_m32rw36)ut27PUARSRVL9o$kAAk
zFY-$agRtfjJ}@W%dZs&7e7ju^m0*Ym|BC6ai(SMiZUEfI(UqfxYim}X)V&Uuh<+$u
zNp+K-MxyPubvX3*Ix;1dB*TTafBYG_>(4ZKICB^6*Lak03{ncR=Tt&L!^^eYa1pZP
zH{a}kJ|kea^2uO*y){wtRa68eSYI&Si;07+EB=LcnaM&MQi4Rx$Qd#4z;%*>VOcqG
zZWb{`8ib9HLaxnJqp%?>x>o1gWLk>1uR$M=y}kGb-dB>~sC8RzZW!>Q%~tn!A}!&^
zC3)@HixU9G!koq4-+Hv$`F$JNL6kHOz7o(pCXWC|gAd5bJ$5wX>&PP-ZD<dgq1^jG
zV-!>7;D1Ww$M*ia&VC;^m;G;?T$zM03OsZvDoK(BkC1JB5V%#1LRE7}1F=53naNuP
zcrIc^%#lDWEiJi-F?=i@VQDL*q(F5gtN~TqX*m5;i>IP<GWNSE8$Mi!O|2{X96DuF
zxQ1<(kFDBnMFQfOBCwtYOot%I_qySCfrs-hA98vz*#_q1AM#~0T+5Quz}or%5d4UO
zL1v{Bw^D+QUh+EpTt98fwc+E*!&oz=uJiY67}(gsX%;T4B3qByOeXLB)SNxShk(J*
zt)Rz3S63GSv~DToV|*PgDlKJ%>p5&~ncRjggMPpBsER`6qAV~bJAu!I1GGVhl8XdU
zCJ_bFH^SmX!1=)^b4~>@p9O^UD?Vh;*h$sk$-G~P3{EWztWE1{B}XTy?^oIP{AOeT
zUkG%nki&yySmI*?u|!HLJ+=WRC`bT4F=vIrxo8h3h2d7SC2p<E>@VI1FY%9Iip$27
z<tIQt{$fu#kjeVS#-6=CdL!ogT?ucB!P;cQbK^ri1?>*Dilv$tS`mlNLeR<KVgpem
zW~4?87Y|PsXy?@kDibidxw)~~8X*J46(lfvYMpw+4m5QG5v?wuJ`qVK^e`bQscm6_
z7_@c!B_;x5|F%NpJAjr8N+BcTLefA`qX&YTZ2mt%&9cX7+E~R76qrt8B}hrMute1T
zh-ssepf*5r8B#Y*LoWNycL!0XDH48euZv@}7{GgKrxL4X{q;k<^4;%R);`bxq1+~n
zGM6m;J<H&B{J}S;Q*sXC>7Hcw<3p6B36rq3w_z)bKV3ZN8+BPlLqbDqiQX?Y@nvOY
zjbw>D=5IFuVi*nR4k?R3YRCHO)Pg}03^DTtvl}4Eh+tpRn}zZZgaz;5FAtB%umZ7e
zq%bVDm;<q}AhQwvIQKE-z2Jr7jQ3acA1sHwt}eJ<j}=%`htRU3I;j1u;xiADLqRai
zqAZ^S*3jTv5igysx=xJo{H6<-Wi9rx=y=+}j<9XX2U060p`$};I{BrS(~<sN6?A_o
zT%AAn+caI&(--{KFf1&rHsd5p$4F?V6$QYFeh0Q3xWt_EFLuY%I#gRe3vc-~iRy$@
z+LF#HsjB8+|8n{j0z(okOKv7Rvx$maGOB+<;Io!q?QHge>i8EGf`zN@M&|rbJo?7b
zE?6ee(d>hVR``smG>!YWJWtRFf&jimTKU>2gqAPpakSn0v2E!W&=DV`DzzB8^dF)1
zUk~(d3qQWvx^g6GDG#G4;j0h&kT(RFtL87TTwGkFQ=U6k=?e=Z!G$P5qsIpr(C#3{
zd8ra2jN+yboRuKbEydwgNEC>&TTQJ#BoG?-iP5}ekjBXpK053r;o<XsOTH?GlU6hB
zPxmmFQWBaxE=7t7i<;Gdz_J#}vS;D`8V;^@C1PBYJy$G|X`K{P|HxRh`K8ZLq92jo
zaNg{~K_*#5qNf<c?!#W#24Q@r#)hq{;*|dxiC%AACzspxldh-u;fhl?Hb?WFNZt4E
z__KX1=IemO9MLPMhy$_JogGvP3W}y}fc{);vY)`S;t7=Nk2|5=#khx0v|3+QvD66T
ze<0j*w?QpFp6ogaxN^F@!1b_Dka)|Wc-vqi8n~nX+L7utY2athf?j1{?k(Wy@F#F)
zWaQ(%g@RzNeYX&g#KU=jVq5tOo@hLN=$pjH5=8jy=~#%fbdu9!iIF#=tIPXBOdQO9
zx}rjKn$1X``{LeACo@%*EImvdWcd|s4ZkzRk?wd9AO<1~gyC$C*CoO}1JyjZCJgAd
ztA*AAVL9!z=y?$-D}^YSQXKdaP3prRB#<D-9SZ%`uwc18mVTY6EpsfDIN`t&W1nYT
z={`^inUW~zXq!!LM1bcL;GrT{GN>j$<E3ls^i9x!($Apw5P(Ir!&twK>+q3fTrG?n
z!Ll;?b9#OZYezH-^5;n1-5F{L=zFY!Ie;2jAiBh7l)NRvrILRmBy@Ch<v2Y(eRy(8
zQwu0uKF?wyz)(z~P}U^w9vqBQPd4WmMFX#RVm>l<9z8RlJOSVO&-yYzB03RH9jio8
zo+NIjc0a7!^es9lInFxyHSTX_^R|k9T4kpAcU=dP-Rl_S*D)zjOj{3IL-33^(tn~>
z2262KXg`y6v#pd6kJ%dQ*_Hp&8-S(!AyzmLJygI~63H$B><}@@D`lZOoL_<cQTS8F
z9dC8bEc*>nuAsVFZzc-2`Ptz<kci=bIElw(|Ey;k<mB%U_fRud6;exvJyL<Z1=N8F
zWJM-n!5RSU^*ETsI_|9(MXP=^hMfBBw@yu$9&v(!gM%!vA^B*Ccnma8CQF!`g7!6t
zv0afVIkJ6D7|I=YVh5=}#VWmFq%aMN2`OBs4a6!Y&_(q_?ui5MJA+<)80IVLuQ&Xi
zZ<??Uk6J4&pgGbg5!pCDFp5$#Mv)4Zm4X=y5E(&!q^KlVoAdb(-jhD~B1g(;nJCKv
zu^nYwum&ojOb>*R4B!ol=Kd<xVVda81HLHO)SLqI>#;en37RPL!VHP04J(B%_BM1A
zhUBXsZZX87Y*qd<N*?rn%IC`;Q?o}xVcd;dqTs6AMF=VYyY$xGBTuWx9N12tgnM-u
z7589KWAHtFd|!?k3t@p8+~%`xc?&)`g%6L){Qb}_W9ix)bFU6!{TBylYB3wUrWC|Y
zn`M4lVH)gB8%B{aoRtH#>7EO?znZO)asRH11^K=31}qvs+~F~y2dP2c{Bwx%21a$X
z9|T0jY=SjI3wyy1xVi8><|A><)C|AG^wnn!_ZsAYxw>8-F}MCi{iraSMNYes@AE0~
zF+c(0zCCTH>q%h99@)&-z=9jW`C9u&i;q=WN>YeVe@^>rQr}qb&e9JYr-V{JP0tWb
z-Fbd83^iaLZVP{u1~h$u0*dGKv?`m$EDl_I2q+X;?@rRg6)3?_uXSx8qQNp*q8SX3
z0aB~Q2GvR<w4Lz+@AuzxTj%Bofo`s6WhHAvLxYZvjwj*+)Qo%}CCQK4NxtL@l`r!g
zbA1Q$7&>V>Cct_4Y*_Gz*b|L39k~r=dwG?Y+hh&WVng;)FIoI~SDe>mdh~P(*?ub`
zyj|XAe{^enKto>?hA8deFVfWl`s0L)j9*ErC6aRe{t#6<r<S}5TEb}k&rWvVKF7x|
zaBb#a>ak@9Qb;J6$T$!hxK*<Wz}_exMiF-d0$qUiO3othmcRd_S-^&D4{^vpwR@wi
z|J(0<ED}+E>6%^X7-){fCyzU9nmseXr`0G-AWWb>PjREyOtQQ5<e1?%t%TOvuApkX
zbMRFrduivm8^(iXmaRhL!gXdR+P;Za=6qx-EauTww_sKaEiWr;0U(u*rR9)uAQ)vv
zgpQ7`VaH}R`2@_pTs!uO1%g6Ipo#YrP*!OJN^<7-LqJ@!mW~EYAjN}xd4)|3m?nY`
zy`OBcPUEJ!IC{M|!v6dbaO!EuX$8SS@<V>*e*OIF>_ALV@E%?li0-?A^mq%>YrXh9
zm&e!A#t6eUZqXr!+dtlxvDDy<-}eQC*8Qf8;~nTahn+^DFbXzJLGARxJ1R+_1lb+$
zI$5Y3e5X}WQ6VW)T~U7qWVv3w9ZuoKPA`&Xxk)V2oKxvcd>n3VzJ!WXF_cXAD6_Ut
zSc1x1mF|eIU_v9h-|*S_*heiLL#%on1*Tf`+r%Pvv&nTU7F;@2`J!5RYhl5+z?F~2
zMvfhG&5RNGzS6xDbq_~Mw#T{vQ@xmKqmuduT0(-K`AQe)!5-{ogZg5RS;{rz;&@e&
z%-PN-C^wEB#zpZjeRv3{xfzW8HvAVvNREV0q;hA_`f`(IdTyc%G!4RPZ4Dcojy{0|
zIk*v^dl~_*x7Ufy6esJw*bIsZ7#D8aXfLPoVHEsxKAJ$#6VU}PD%LnFCrwC`PNP!(
za0Ha&LV{31Q73~65iYj@gg43^545VxrqF?8s4x&6ySV@K3O{N5v$?2*Wcz1)h)u_I
z2o6;-gJzu%&|1*}`U=)|b{$|$>G=VJThpgcpPWkeXDa=F&|bNH>6rk-G;c#imqVgr
zm}2`wqSi0JU_c}Q`>%1&UZey_hQ<6a4Sq)NRH6a~8A4PG=s-T?0Wh*RG?|!)>3aN~
zQrHagP2DIszS3X?UBktJVAI{59D}%-qM1^!+5_B*w}Od#hVmThY79#24)5!s+duaF
zf}b*4?`i4h>3!dk@jz?cSF9f?tf2tc{S(llZy#r~q~%H`ivrpQ1F5`tXZtsN8&{67
zD4@aVZUyv2FB++3Qv`1=PcX5u+eIYuNQjv&O;-;_DC4j}G4?d|%?%l1ok+{VLMr3S
z6ee9nfNMr&Elb2uc65>uDAxa`Do4;c8A=yOe|!l9u#WM=FP+Nq)4=FPSvBCuVKmA<
zK~WvFZvjY1!uOlwt@0;X&>9MYlKXYyq;Nh=OVM!Y`5x}64f7s(mR=T?9gRg&m8-W}
z&8WF%f1P!O!<);hZTs>$6un6Ztiq&=9O*K>b5^sd;VCn7xs%fwf@B<hAj?JHu_HH7
zR%wf$EpyB<x3IYQy;*0!Yr6uMhl0x(^E&Q#0O=C!0jRD^4A`cJV21Dydq(w|kmkzH
z+<PBjW0e$LA3-tf!Y2<M10fL`84Yct|KSYQ)6)-h1#aR|?Z8v8W(ki<+S#!!i3Jb(
z8C)4}45w>vsu4^zf?1kJ8>O@xz|hCqQnF|Hu=g1KsL(L%KXY|+yI4|(YXd~EfbgEu
zupz(d8P>O>+lNaAr+xJ=HPSTP9NAyThztZ-tBuXpvExDOoVTN(+>Sd$&W_fdvkOg7
zwOpJ@I<-(4Gmf=!dynZ2`cQ=X4|PVfM7}wn(3(z_3@(Wn=FP$fV}b_oWsit*H7fH)
z)~g4=5P$quSC<8#G`P|=hvj^a$m6-?I5Y{I|8N0-cek;%U9|@x*Ti1#w?I#KOr57`
z=FYF8oA!*;3*-5Nq6~lKQPr1v^BBckbMu>f+fW@R=ET?2N!Y`;cYBVv8Y~KQZqL0t
zjMx=)9BTec2O&Qv48!Ty1{y<ieaOp|x65baPdS&CLc$w#7yUGn%EF28KWvGIueN~@
z&i15D`M3Q(Uh{9iPTueO&n6kP`}K#D_+A<@ru+7>)BYONz?HJJUGHf<gQzt)F_&mJ
zhXLUcTe3EWn$1LsC?I>F1Ev<cmSWYM##yLzO$t|rqT_B%n@52*KU>)9d?j|5GsIo*
zjoy7(DJ#33InPfJ#0t_Dqv7%y8}nKjQwBF|NS|tf*|v<{&k92>Acny8QK6m_N4ZOS
zX18Dnc$_{A>dQLSEFa|(#@a$Gle$1;N+Hm|@!5Y51x`7rPup7^^PykS#fzpy)ooi3
z%w^<ITy6J%+7nG3zMNaF26&c%PY);#`LBtWmM2C=BJlLHd{S3i;wH-!kyM-8+S_Zl
zbi|M<*Y?RNC?dguMVesIGBPr17yusNVzYQpT;~)$P_I&`roar~z~9guu?Ilpq@$z+
zFWz7xm${L^HG#nh$<K8hSP&FUQ-zqaxEXi#J;w<k%B#p1H>--!KLMQop<Am`lQ`&i
zla+>L^(fcir8MoAW{;7M$ovCoE#`UN-gCM-p~s`DPup)B#S>fO)uIuDJYnP``iWX|
z^;i^$L7$`0duV~#uj}12xxe+yL_oG4DwDj*!Bbscjxc9#Hl7cYEE*GmMXBZ`Kw&k(
z^$O1=a6t4*%Uu@^URMS~huW_!+i1r2q4Fu^1*<3)qy<2R*1MO6Y^FOM9$!uLwnO!Z
z;Jlk{w5w!6OX`ra=!EG&J99>2>}VyTTEN}_G(v$7iNyBwlS@)`Z)f-+<_|4Fa{ZuN
z_(7m2KL`r4hO<k%-Hct5m~`7ZdI5WfE3kw^leuod1aRKy(w>0$B>Y8ZS7s2N?dCvl
zc$v(0XIyOA4A!1WBS_BmK)QTQTmT9{nLu~6S49kj#}?oi;KNWre3?TrQm!xN-e4{%
z_f>*c54?WC+9T$L50vPSkjwxr)FzSBibOzE_2^-M-3-LCA1-zSmkUcT0)+pk1L?JN
zxd6y4<6BI)H`nm7aycQN6m!HFKq|jK{w_F3X#sdT^Uq5*;hTUrpdo-cci{PxO2RHM
z2+yZ6n*|Iu7k*#v#`-tJ(+ZP$Zy+V)@N>4)uqXEA+Yumy)AZ;O?_?axGb&9g*_7wn
zOCTYJ<x1n1ITC<`Ed;3g9ZpS?5CI`?(47i2zOJ8^BZ?d^cb`44ax_EmN4IyX_4LMD
z;WZ=7%I0rx`l$Sy;5+6+Km2pE&@U+>E}Z1d_oNr+-LX@E+&MmkrcJ~bB*#E(;`G<T
z&=C4ws%AMuZ6H<+&DlQR)zQ(~BOof!njgq2U-L#;quG|EC~l}#Fa0Oc!r!iy`R<RI
z#(73gM|&s)TvcuJhJ<W9*}}|Wd!f;w8q$=aggyl{SI(CpKrmF&&GENVOh9D6UN9C%
zf^GlAI5l(vC~E+r5}yihWG0%U6)HTc<QH9Pr*$89j%OfgKlyauzef=h>vobg=VRe5
z*Z`8F*B!AyAhBhBo(O1EcY-+S!YJE3TA}6$dd0)r=$pFAVm{5(1ltBmn5~Nix`a_I
zn2KdOueHubv&Al^0Ge}dly`Ui>**cAmAv$5TAe%F(4IheySkk25}$U1^W`%)g3wRN
z{*RAUf3&fLpKP(^<L+=zj-bNYazkz}FCK4?<puu`%kpX305!Q0F~q%`Qcy&I>*Z(J
zYs+S>gYd7ctV}TO3pbPDsV!)4B_f=p>&#^RY7M$cokB=Fv40$Va4?o7=^B^VpLY9A
zK3S?2biyB8?z&)!^Oc@H5USh#suHc|F2#*@R?zGl`KjpBIUUUyjR_$bxe7y(P)wOd
zv3w??08Ip(1QZ1_As-eW<ZDr#c5gI|g!!;<gUzNNyRl$%Svv3a@U??}-fK3WVVSS}
z@CXwV)0N-^Sl@3@-Ac(i$Ah6MuL^;n8Ai$)6q>n)YLn3{S8T->FJ7EqTy!49EM>gD
z&yN;0$ORvy12T^O&XD3_`n&AliA)TLSej+W)bP?sUk$ZNYJ#smFQWBTAK$>tGftt6
zcREaMT8(1a4yW(PBtH!y>CP`7aee&hW019OyeH>Qd30NOrK`Dh;CN-i`t}kN9y(JY
zgIF%?&fK`)s-te5QWA(f4V>NXEO;P24FA0xKs&eDmQxU{V`>za57q6r$kB3cUp45r
zoQAamQ9N8T6G*ZDMqzX`Hc(ZHxa9gR9}^JUzk>n!KZor4wP$KbyFu>&p-ug?@m(VE
zuiat)512oYATwQGKs9Hrz7@!48CHq`^xcR1!zMg_iZ?#?Db_V&6`MB4<mmU&+_S?w
z^;ZT5dZgab$~`<enJ}If%v=`(nnOoG4+qHOLcE~5XB80kesr1kO^8bbMBV83*<R8X
zmt^B_(IR1qWqwt>n%iLPK&=0KJr1K*3gc%3fw@lj*EcjaUfA?n@Yc6kh|gmlXug{g
zYo{vKQSPDgf^vVf698i?2hSj*4`Ij4t@o?UXQCLJBiog~s4_Qg=Rs=={j-F>XsGx@
zb!%q<a(Qd?0?sz21gbhHhRB%WpIQLlVP)%Q0CN8~3g7N{;_zNv>h5?F9y{m~jv0t7
zT_2*jJn|bv)cuY>BMmwpegbjTZ(O?Rm2MK#FJ74cEY+(;D+>83g!Sy1AAoa@LDV9L
z?eO%9qH}2}{c-G)am+P?<fkyLF7M^MLsk5*d3`s8;h49Z_X{}-Tkc9FV77L5FuH^q
z3|J)0+GN{v1>1jR$G7PDHV0}kZ*>=dU?b_pIDF=x1TJwx%K5bP^z`J5ROlHZHiuIC
zjaSO}^q%LzLx{`{u1bisc@oFmcM+S}doEu&md)>hR)Nfq$(vi8Rg6Dcz?)D@x<0#V
zvHHaTBs_3`YRn#G`_W6&aeb)!r=q??-Xe>xoBXlT?aM#MZYYJ@8_0oWi8Zfm3D^<c
z@xeYDSUQ!?h03L8!DTFlG~D_|Eq-hIo$yOliN=(<^-U)e=<N$osD$M!gy;Wj={<e{
zL91S>x5~X%b^gf6@S-!6hBhxAX_|z*%Ob>vO>y3)t+-fSU(B2M`h!D9c6Bwow%!LY
z9Hq$$g}2u;5dD-}eW~9E+2x*ba$N<Q77)bhKV#RGa-3EmJl)5h%b)1%^o`f|FgF}b
zinYq<I_1}8l>rr*a^~{qGoz2S%*4pF$)rNIS<vX~+26EtRI|}alFYk#s#Fs*PntbJ
z#i8?jzm}JMFw)dx8Hv_7dm?&6b+SA@ielC{wen{9!R;e!1($|0w|5E8^~9)IYs^dW
zYBT}|t5BXiK~gX5@Ig*?TU%N20wMXQ8(5nxy6IRBis@ugV2PW?c~p8$>RgL`nOOt$
z0_OzfM)RT0(X5Em$u%xjt&25iAr+Uvf;e9g%cfExCXu!HltxBIZY7)bOT;iq3>g`#
z6u|Hvzcp{IZHcx%IQaB|Q)_wDyWZMV1HWl5EJHqWb!)POY?>bf@Q3G0!7M-Rb8XiE
z&=Mw5A%=35+U1THXdhE#RKaqjB0Q|jhXc{usNfL}OtDq&JHR$o|JzEQt5qm2XtNXQ
zoBhD~(eF(Uq?x2SJ-KW?C%aorpu*H{W|aK3!r#uJ4h@@9OG|6I$<1ZH%TBFA2Ph5Y
zs}vKYd#&#64aj|k(M`QysAFG3ngo&I6uZd?DFgCiqf7T0odjs)6L^KD!g0amxQ<G+
zVB@!>{@I;7M4d%^EpKt)S5mlHe2MPDe)TK#n)S_-e$Jj$YCJp$sJyLKzCx6Jm|>OY
zo}v#nA>=tTNS!(Ab7fO`GzgdrI{GRbbwJHbTmQhR+`h$}>Z$rzM{ZQbXG!H<Wv@AF
zPJT0=L6R94XSoI-i}Qou?}Q|5g4b0(Q}V&9x;tc-ngd^D*_WV=)jfO!jxi%sw8)}h
zU%h@Oo8<#DkWzk1@(NiWThTS_)~B~JuC+Y%u{$6nSaFJhrmOW*<r1UtD@UsjFs##4
z_E|0^5u-}FX~*LvgDjsx98lhhFEbc9R>;~cBniSQw^h^35|*tk+*p#tNehFAc5C;=
zSIoj%yo?`>>`F5>TpT~#9?S9877}3Vn?NqrYFrgVtPr3BLG?ul#;FvPjSUAtT7r?}
zB3MYhMxn3VE@PSryC%O>I%c{zi-wa7?rMCs)cjOhc{yWL5~vBo92HMypqFMbmOQM;
zjaz);XfHOorv_5v`8wOqP9GF?XKV~2YTIdr6b5?D^Y%Ajd7;86>S9HzF9t7%kZ{)e
zg}(y;`lFlqdqv>W!QaaHtFtv(VR?-%sxIU@7Y41E^{+$WC_>bF!!>+5rQ8lCzS3P?
zWo%zTKWwcP#553j3xWW9!GA{q<%F$nZwLO+O&|H9{Aj)3$~Qz5#UrorvB%>|y3L-5
zR?^q#%#p`GuihH;8G!z8p92Qi2W2@Cl;opJ@>e{{@L1W$AeS~kkQQEX0h_0MhwS6=
zSj_uAn)TWZ+Tuk)Y_6VkB6F7K`S}rr(NGFXjnyOdK1GmFBb`uDOGcpzDrOnXq!=Ot
z1Txqa?^ym*>7%v5qOVLGy)nz<$x9*<f4)E2zCDhkeAf|NWL&+d4LO(s7$cJ-mreo(
znjda(M83#AWVj{{iiHv|N<LvFXlrS?_t5X5>tufnvsT$lWB=I+Q$VbR1Q%ezLlSb*
zo%XyC5eZcT>1(4Bnn5b6!Jl7b*!e5Ht6%0hZi@^m^F4#Cz{(5yK(7(a4T|7KpyxM$
zbqDlEn|{Ye3`OSvxr@zJ92cHLmtP&B!or6dSD)0d_ES2Vw<Yu1C+`91=eEXC_jMoP
zK&D?;vxA^<uD-3-n0kF6l~n>3HBQ24E{dk^91WUDWu<gnnz^{xMblf|&TlDz6ph~H
z>h@6<<;WeK_ART+1zkcyQbw|(qd{K`%8BU&1uSakNiHhz4&q^+`EX)8mI%PtQx0Ck
z;E=zhcbjb@__MV|MNUcp@Q|#`oS@&KEdjqMn65U>7k{4m&gx4w(wmB83}*Qh_ZvyQ
zbFf+%#2>d*CH(MqXhq6mI=7IzG<8|~&P}uzgrwLDYra3%+GNWw6l1{bZtryTnDG!S
z4hnyiTrfE1utqYDCh&s)mrmq&a@m-ah46tynb8_u-Uhcpqx$FVxjtxp%C!EjGrs_U
zZg#4$0d8}^CFtV^f(Hc6pM?iO`b!%M8dYP<MrDKrl|Y&z+$j;eP3ZMA{A>2Ykwe2A
zV5+y>n?o=a0xv8)x*d-BB9g&^Cm|`3s<)NnZSOf6+6+Iv#LuHFRPh?B^WNQVlc{Px
zpoF$8<#5|D-NelJMw_%!&B)+uPZ*>!e(b2FuqD?8zI>SQOCS*g4leBU^Ov&xTFER*
z!^69mU^OA;cG#F0u>ezt*(exZitDVkhi<u6upT%I2HzX+Q5K?q4ll=SpC4oii(kaV
z=n^9Md7uNMiQEXN&JYoJ=q--+Kff=-LR<TG99|t51H^q83gLn<k}%xkDy1kTHeo$?
zv7v*DJ=EWQThmuf?y`78yD0*4LYe=U6Ow@w3;Oebl7_VYpM8dRW&E$#l+M_QjDr_T
zYBp=WO<oeP<P4J1qJtl?0f5R-fF!6?lK#(2!So4&lR(O-L;za-{s_PQQO=8|{cemX
zaCd`}T+HD_bn^Uf6GuK5sN{450fxVo95y6jw{xYh&?5n~=j&r!&{Niwut$?zr_BU7
z>~AL^l7%=zXI_tU{9}cY%!k={NL0=I{She;KLJC5=@W>GiJ*&QDK;<K`xEkU1!aS3
zIUV&5xgI76UZ#%>tkJ(;cY<E>bO@n>{W}*FhzW_MnRo-^T_-Hj*|4?fh!w%y>>zkW
zfeLuV+;liN@O=fB7M?eH+9Coy3E^aY3#Zl%_V{eMBmO=sEcs8ufwtnHgv6SK1x};5
zkl?ugFfcSp1BXQ4m1AUy`E5{GH!s@m)=^rRN}=|-IbhjoGCwy}WNq%mUqO|!sKPD>
z-;kL}!9MMedJveZRJ=JOTOFFmg?ziC1tl#inZjW3v!LL_HeaBehz&340c!d$tsr|W
zbWmZF0D%0z7xB9EaZTqJ=FvvJSx$P?98L-Q?j-vpKbD#cCd1n_rK!)755P8MQr+_D
zZSHtA&M_GcK=+P`!`@s}+}nPlh-*EbS6Wv2B21=;D(hXgS3#jvDrYnlMy*+xjBMfu
z&hVghuFCHSLA*PL=|i3SNt;$dH=$>FN#H*l$PzJ7V_^t5t`UBo2~X35NTh)@H=}k_
zM@28XV4bv}^M_boJmQ-NYR3~@b7IsH#ex>GyAp#ybwxo)uEC{qNST+Hmo9-9*WP>y
zf$FmY?v~_|CYSpjwC0ld(U`HUvgS?$utz-G3Jb!5tiXnv__0=J`6H1C^9v3(vLBu9
zs?!yh<J?I8mco4i_WtPKdtVObh%>^A?m#q@>{<<@BIoG?mUjj7waR9WYdw+e(@k?P
z#N#h#XbO>lcfvJYU7~O(VF1%a;u$pC{4R)Bjbd_!3vEYEl1@bLNYJf!c0St@Cw+?)
z4y1xA5(*18g7?XfXPhYcfwZ}l6rTB7C~}EXK>Jhst?~&us4o)zPd#)D1LJB%aWojP
zDKeD`qMk3(yo@N|ikKAqjLrdu9k|uAzuvV}RI1YsNd|7>HS>vmKx)zG=qSjvTN(+)
zA{hJCNwcdZU-LWtCYsoF6q){2<Ow5--5D8|0c2{Cq**e=9XJ8N&Ah;fyak1gYvf+H
zHpvfG$>{+sWk#?rz5i=na2t`IJP`)7O>BN#qmpu9G4-UbqVqdnBP#DWygu(Iq!sAM
z{WdCW2?|&bJIALo!!(G&WR?oU{)gdBDxQ&O5gZ#XvC@evp=DEYWk6+nhqqvp0IUW+
zld>EVn;<y64@niVfna1uKX$%H2ETvHDXp$cT)r)M4_Pp`#8y=46F}SEBj>Myb%`cm
zH`VEoe_Qn>lEYF(0+q2eanb4K80A@M+$lngumtKOS((m>$RbdD69aj|(JQCN7{3sh
zq%TmoATPOFU0PL@te`{hKbf|57Xd3NTc^Z{Ir0SD<D?bo;w^43-Pi3*2a~UW<@IK4
zg>At1hTva&Bj4Sgmqp#w)O7gkSG!hviOrQjj&-zDeP408-J<Ha$vQ1s%H2EA*g<o9
z-Zc?h1j=gG`y+^{go*dMAPVC%Eg8F8oYVKeT53IFF_0Q<RKNkPdk^eQqmcuo1aV*$
zK(c>tv5^p{X^Q|B$iUzrtVDww&Lr}<yImEPuEs<lro=d953$;F7C7e5RZj97H5C1&
z1*Y=&dK>^Xa|A}M20?Rk^NL2^V>|sI=cS%LZjlXT8rLfs>mbX@L1h+^4aIlg?vOd*
z*sJSY)QnWQox`zI)>xigI8fh)PmeK~D8vQe0qHk)+JD3zbdbhR4hu4pLHQ+R`T%VX
zvDq`E?W~>0apj@LBWYpl!(ye>B#JI52z$Ksc6R08mh4ZL-<OJ`^SZ0?61=1nbY^XB
zMJM8aP+MW#_N{>CidWqFJ~<v}`el(X3_}(dBvsBbxVyc1{>q67$p0c68yhPXzl$vu
z0P^vCfIaFTO31ki&@G*MO-{2(=}-HxXkkGY<S(^fAM(kbc_w<{=O)Sdo(Wqu)vD#m
zrpi|u$*8KSdGSS1+mD7|ZRi)2;6tQ!_}ngW5D*ZitKMU`wY4#UVL*V5CHztTpTh-O
z4PY#m^IWbsSfRBPl896ef=M|Z>DT<E-t&2+Vv}G>r_ALepj|tARGh^CC;)GB#4*2U
zbK@(Uqj`orKysXJt78~SoegV)5TZ7T^?d@gvK%=JYy=zRd^$-u#0e%8>HeIpb{*7J
zm;yObtAha;A4A6DxKAfLuJjml1cqo4R^2*8&8utIk4(5@?in2&y_^P=8^a_uv(|^>
zW^m3x#ROn5#O;1)iX_kf;UgTN<o{ZUZgo3eN0E$YxDhxVLX_^?u~_>`K1RAQMo$)6
zHAXCj{LOPr@~daYryM(PJ4bIj3N&&WdPKyr48%Ui1%In^#{Qvw-g?$b*2=S^RYb=j
zmsQ8KnS~F-*xxR85rseQavwU7OATP>-5~RF(hK?#t#}~B%Ij_SXe{=|*6@HSm?^wh
zFR9$rkpqrM4n@~7&MKWQoI{eiunE5s-(L*C(eseoBF*f;mVIr8;Z=r-94l|TH_Z%Y
zD&4Pl_}TX8g)7D?>U4N|!V5lU98e&ATHeeP;8}{b#a!^{QeZdyM`YSsH>yCEH0o}1
zf+Q4WhISqjV+{f2D)uy6ARNtxOFb?uh$KwPg;>(yI=fj6M5Kf8h5}XW$L@`?`Z<wG
z#ap#(p|F;{e<TE5dQ#q8#48T9Vb?WVs~=MVq=EMh@2%3*gOF?%A1=xgt!9~Wn)tK4
zz!i?>@D|$Jr6Hz_aq5#WAtuLgM$E*LyuQ8;5nSz|E?Dxo<8!~<rltd9c77L4M3XOf
zBEiops8XzbhotMRRtKI_wo@m-Z2dNfap{tt$~2dF$83Kw3~F{grKLJk^GtWxt9<33
zO&pB#^3(oJJ(<iUTO0}B-R{RH=eDE{mP_vonzK{+ul87pxNPrzm>MX*-s;BPAzQk-
zVETA$&_6uQ10Qtt;PJDL0>!)t22CFS^r`#gq==aQo-Y~GIf4i|%mslowT+2pJf7hv
ziq0p`tcmX&&hv%I*vxo)DA36%GYuwV%BRbWn5l-|g+gK3O*NaKqD&!{q<VhPd^cbB
zVu+ANf%5C{ZlO%wtV%Lq13Y<;m2DPnF8Euz)pG6hr;B((4cq?Wt5DUWv3k>f*%zFY
znH@p&#&X2iRrJOj+Lg-26{D);7zv*3Z+bWS<KgP{@G%)=Nv`@`!Fa<?u?<%xCzSf=
zGFe09%dJT8$rbCp(b=!B9`@8isY&=;e6rcY$;GaT;#ByY4t2gvmpyN!sxBYDOQxcL
zRh!G$?T^nW+>O|+CQVvs_`_I5-#Ir_dzi&AYPR}(`If~8I0%WA2BO0VeDdq<<Ycnt
z`oGX!ry2!hQ(yT4h}U;oARqm@^Y(1XqZ`cH6gp`j!9u_cc#fpuc2NZzh^Bse=`n$1
zh)R7wE2r%7+0eq3c*G9He67txFfY360UKAQL3iBA)@&|jp-OR3vLlIJPeNkpPnkD?
z9~PxbY9{zxPBV1d{kSSC4}vku#mn~?T=zQErmL^+88M=3b_)K$uyKu924iw-=rTKO
z_MP7#rAV~sf)POy2_3N$JVX|DD2Dvl8?-htDVHw12wKZ)9f95eVkdk33CW~9`vFx-
zil;0$kFNFW-I5%UAUDr>L)L5sZ-rKJHFh%!^kRX~)H#P*BF)iNkt5yCsQm9`vSl9z
zlQ~|fPg!=J7SCzcQ8^c%>?}N%s-Z)-N!x*#W-NWZ5oD|#sR39r8PGKZ13^gOEY?}w
z-zmrep5fTmCmY}WtU!7;U1vzK8J>TyW1yF<;&l`;r_D2mJ$_Ga5<7%y>KKhzcQ3Ea
z+<m~&%#e(w&DZ!$8<is-?y%70W@v>anevOu*1tFo4Ad-6RuLU!+4jt*`N`1Wq~>8~
zI)xZ(_SIo%bDk}TFS7$vJx+c#w|$I_T*n`rA_-8?Is)6}?ZG?ie7g6ZzuM5qfgLkI
z90|@q1#9hPIci>Ca_}Y+S0sY#ogUE%ujy^g*y+JiI2I&Wf7Q=RJb}(VB7FY*=2=qg
zJ{WIXLjjC{3b3g!N(um8t=i;<A4Mfcu&z2)q9GKkr(6zrjbFd?HfIWCbp?KM;G3OU
zm@8{)KU#0amQLs3lfL@V4utSU!OT152h;<U?4HQy3<!=I{1OMf(bVDzOl0U*_+C{7
z(TI`QNGR39wSFc`HQa^HBM;c1nLf(h1QWEre(B>v^$v_pd5Q_Q%ieAIClZgx3(vOu
zZzP~LLs#9zH9TM_0LbSbo4Mzoycuy>J0aqxmP-{X=o>t|nlNig&ir+0hmP4Th9U_q
zH}3c4hlb3)p04o0>aN{I!L+7AK!FV96qF0MpnHLN#jBtkw7gWKV&TS4*ZghXDQ2Xy
z!*q8ckJEv8F^GX8`O!sB#^f4|QcmLc_D%H!S^Io=GX@ct^F8mbr%!CZ4AIw-YL~cf
zeXo~G_))=fukqFMPpo#w^6T^oKdQyh_qaX726<N21EagzslS9?Bq`*GugEXvmJJpB
z5D`Rb2=?S<NarBGPQ#%;7TB69=fe1TaxIZ3o8In^o4m49E#S$S?ewH4!zaqpf{;S_
zSok@g^Z3i%SFYzwsCWz^uxPyhkFc+fit_8)76h3Aq@_c8kOt`<N)Tia38h22LmKH0
z>6BCv>5!5fkdT({ln|sPq`ou1_kEx5@p-?szP08LbWPs(Is5E=?d#fCzEOO_x&Zh|
zBFgU54_@0xWM|j@4;P>;dzM(F`u!aSRv){A=2n_eEc_efa3#HWxTwX(AQdw#uTveh
zpqh?`A2AS6qT}H(8$+9mbnD8Bi1LOrhpCgZ56saof5er#?=5iGRc;~~#%2(GYcS(7
zBE^{tPnSH`D>zKEV3R%0PN(U1=K6K8>;=9UUzWz7_1;XZ&y?qR%B2s=qw9RyojI~A
zF|bbP9KVTcVHs~7E*FHFp8R}XF7dP+?(1qfiw4^BT46Y~hKP;rqyT|%u)Br`94CJy
zwmr!bHWt6S78b<_Pg(!0w%WQYhU-pu8DdQP3hgdOQZ(h^U9Rgt{1c`6#P4W0UerJg
zYwUw4q68T{zm0*db!_jHT6*Z7FILB8YPRPrT{C&KW;Upg$^Ri%_L`ym+F<#eU88GS
z8(hiK_BlM_aonSzDCuwvYEornLcaj8LjWEy;Ry|)9vnZHY%q58-{Ekvhc^qIWc(B=
z2{ir88~i@h@UF_#FkR(p%SUU+o0HoQxkqUplX1%ebI=mJA2oh@iH4j~#DPao=G^=1
z!I(Cgag*^1vx5Z3=NhW58IQ8LC|<Z)9ysT$w$R1dkd+yaAmyLTehDTj%o~$tSgOXD
zb33m=GvkW;`NKKi>6edm(ptIWK*AU752_S#=<@8|Bzykw-tU<FJf`0rccz<hF0V!m
zs2*Apka9kcEy585$NP7y#y&02LL-4T-EKujuQ^=lcQ-%IXBzFuL|y43WxKgVt+aP(
zSaK0WFHp;2fq&HYzfLJAmeGoAqZl8{qP1yH`|kV~ncs%07z~tX-eg-N-HHXj%O+rn
z`M7>1`vtN(qOW$tHCnHtYj0C!ZYa2>2XYiS8~5bW<HfA@gIvJ9E2Nlge_)u5_F?nP
z>kwDA?*Xknp^9Hzw}`6D1_HMp7t-qv+MfN`bb44eG8H^0T>U2{IALE{e}D~rLB35t
zRgDVO-!)qD_nZ3s?jFHvb81Dc-D1cq{jimN?re9o&rs%bY*P8^JIR$clU%@<mb){^
zex^j^y6FP4h?|{z*hc>yyCF!-?z7+3AJ`jqikXL8e<E`y^WE^@DP<Dsw^nIsa<Az(
z)P<?Spi!KUVNQGLR)U0%k%+^iAt^>+5vOnld-f3#{%kr9iT(KYMvrkRiFJ6;ryz(2
zA?k{JQQOUU+MY^hAP9$I5-Yy=P(q<zsET>SHiJ~(cKq3CrAX_pWQa{XASP&0A<Tl8
z8BE-*R&PdI9283<Mq0f-h+LCT+)p<oKASvJ1nss`N&BLlV4}xqV@end57FEWB<*qm
z?=un_bg5qBXs}dTzuw0=do1^9jAFR7ZbM)Cy!rStS*p@%o)4Eo9D+MtJ0p4d@nO}E
z2jRROf0kQsuB-o~Y5X~`a0DLbbCTs6q;#G4cWcH6GKC6!zX%HdF;%?3ezOa4(je)G
zm%VuNKwnVXZuI@?Q&_|P#V?-e!_7S3fj##@+ZOZUL9>ENx%)f;2+t%(g7pVhv$dRQ
zSpJ@hJD&ktA>#$g#_X9r(X?SOGr^pE<HmLNrh9!3wAmOE%NR56no(<M;`ip7#|ax4
zRPObxa&7eq2soVIz<Yz0Xe&P)-ut#%Zt<G_#hRtg7q8OMQ_j53tw#d6kTdFkuEPH2
zfcNn*o(i27U3f<5))PYRmrm58_4q{+`{>{H-X|8S$VZtE3>S2#;!U>!6VSGw^r_tX
zu3wCnZBo_TXRQO!F^9j%dOm~clZR8|ACYmi*N8}&{9-v>7j)@af^Vwit%b3T4(EGr
z+MR#@iUXpECyeqj1~n4_aEv=bVC3l}NWJ!B3>^Lv?DP(}EEXOJrUOlmj;Jf}l5dY>
z!z+6}FW<He!Ele4bURHtc;I=sNSsyVa))BY%+d1oxXrWM3m&&YjBwi&(SB8?UT|ms
zj*2~znkC8+d~{uv*9yr54&Sd^j}s6puJ0%j7(TK7U$}EHdiWYS?)g|PN;9cy+`=I(
z?@F59uCO1KiCdcm1d*NdEmmqtSJ<=dS>TV;=(ZQ}R;)Jk=lQTCQyx>znt`|wuwJ^X
zH|Hf)v$amZ*DfE$)-1lrQy(2PrV^&k5v*<60I%P9Ub|ycOBt(JQp9*GfCtJfC<%xf
zT>!yw1ezTbTL5rp<ag&9)JtCo_#AvClMFh@DULe8I5^mkQQ<x%IXaI*VEGORQFMCx
zk&moypyxB;B+`Vr#+S7=NUmqS4O*tdRh&JY3AN&q*zrTBe_MW`{f+{hhT<{O9uQ`;
zHXPmW9%>`SzM5nEH>AnMfAXC8_nQ5^W*VF&T3(&I)|Fmg?6m?=l+f?RG-l<hh4d$C
zH^<Y3+j23K<HT{Z#gl6`wLizh^1gbDqZLA!(cHIo9m;l@E|-34Wi^oYz16Vh!oU9p
zTx*_khIdiN$NZxsmNo?lX1BXXD-Wg9puw&!#@W)h!~G#15&`>vt~P-e!^h_ZlqaRT
zkx8C2tGn|T;iQ}ylSjwz?w-y3;1{?349synR(my>)X1S>v5TEGA~LDLC+}QNyFQ;~
zlzOdFSPm@6O2Z>=TeyKfF3%k;P7^}MFog5ff!n*BRNA;~31q|z);G*$M;)>Z6GaW~
zbwtW@eY({V{z62MxW2*|jdZ@3Z#Z@rJ+954spNcFpgQn8&hY(pNI_fc_2<}%<T{st
z??X(OLGwkP&wEi?-}Qw?VNh>4NMM!Dib22;u$0A=Bz&tctg%rRMqfrrWo@(-@}B&u
zBSdt4b5j<>_cc3_vd>NQXIVlBd%%9Z&&-7Q>uaBf4hz&S=BhFw$^yv7dlGb@64jUN
z=+lz=v&l#;;@r6=`po4n8u*||#P^R3`+@$!L|7c{G;qKR(R~AiTp-RM1Cl)rC;czX
zh`6g>hB~U*?h+}Z5_M9s7rACt2~&Dj)vWo$89M}T5DcRz(p!YIhrXoUb_Tx%9!mTF
zo$t3741&7MO}60TjkBOt?mQ$>usk3H9~(8RB}53h7jQp>==wVyZK~GbG*G-E>^f=i
z8yFRPyXjs>4@q9&0+yC@cM8%j*8k$&qeDO~eh2!ca}%ZxD`vdq3|3WU(j^r?*eadl
zTlSX%p{?h8=dXo-x|4{k{MZ+!eSsLpD9I|HitvZX*`hDIokvfN%~yLHe)0LHHE$}k
z%o|lcZSBD`mIW$Jab;>@8*Lnv`nLmL>e7hswZ_AI*4sC)0kzX(<E{JB#zxr8XB$(H
zoqJrK@sbaDg4*9_za49Hu7TgAGyLG2eVV-Z$BmndJt>v9qW1uqp{v?r2mw$ppX>9D
zCHyYHKFI}sNFQpBq;4*Qz)*n9pYq*tbV5g{G0$KX$^$m_@Mjxsz#X0M?|nLQSrfVa
z30P87u!77}*!zUz&*@&A;p?k=@{uGm;EbuX9{;3$(%Z!CT77vus^+we#Ka}%xy7-e
zy!;NhAoc)v<nSXg$7novw^T(anU=8~X33Qu=bw$eIQxc1ktQt(0!a*}q+opafd}Xd
za?+`44x*gh6F)(qo&IFHv8USXJD}AZ(LC|f7d%ba(Yy?=xd9ycpphN~Dxo~B(ic-r
zp8TQsbg_Fa7kI!hrd!+4Hw1Oi|2f`LSThQBjD!L%vn(Lu%W%i|qwLvaBwGQ+8+gd|
zC)q#Ak(2<HPXx%~snml_y1wkS*mNya7~f9eHjJJB;+~nNo<h#?yz1TaS)ifZU(a+v
z%?ns}E6X$iQyQ$Ido-H8+#cFa4ex}QI$wfcoAG@Fq@v|JiIt<^!2I$YOP-=EBEJ_f
zp?QFBk%m`BU{v!tjW817=2nQ{yPR^YSsbO6PbB$z@?ci>vw_5#A3E5(Lwfv?{&j@I
zKSpPt^#Ab!JC#lMv){?W#OS2$`0SZY^MX7o9Bljm2g+k8c>-J}4;0{*Gc`renZFWZ
z6G~m574&ZLT93hwegn>T<|NDj!}cV*@a!qD`dgiESD+8{gu_Y@V<^$e;rf70lPu6L
zn2Wyv?!?Byk-ui^7=baI0`=BJY3BJ2aIYpudk0WdbMZ)#(GRM!02hqDU*)p#1Qjw%
z(p?a_(0aA9OgL0RcWO}(t9#{A!t0o4bvAP`fDu<y+Z~&kbvH}8He|YA6n{cEd=Bay
zW<B85(+qBDeQKRKF`5HYZeO8LcE)Fci<uu9wbsApnk!Swr#}g02TbfpU^HpL8ZOqj
zQuOsg6)310VrsvH5Jh4fGeEP-gY!5@XlLpi98L!Jsl0-AX6uGLJf||6H_m@Mv|f>d
zVF^O|=hX5LY)TSk@)wDGFO`odF^NOR=9;}HJ$w*J#uw)sIWd#n0k^Rb1qye8H2gf-
zB{%JRnZ6itnXD6&BaSkxH<_IbrKJVvP}9z!4`+X%{gDsU+E1IxUo3=Z7g)e1OnKR{
zw+vixdadtn{rqL+!wTZj3Pw039K$EepDU-uyA2#YNu}Skd{g~jv7k>tJ>DYV0cM?*
zght`W3jELpO_-BgED^1)G+ID56P@4La^D-u&=n@7gwEg&p1SaXpdea$u%Ud}Or~NN
z7mgSeqIp(sAHA&@F*O4c1OWC{0H0~XglMSBZD8kK1Uw}MY~WD&3~=DK9{U)l5xB&P
zdmTf7s`HktZ(8{p_&qFHA3+?G@k-*^30?UH7?3eb9fsnt^=MiN%GWnnb<i#F8@JbY
zJ=EM;Tt1hU-Nav?IWMNdlIjUwY0v*U%lF-fu8-&4m5ZgGzC5U5$?F__BDYP5HpB>S
z=EmEIYAt|YJ!cY#Erx<qtT7|CD{cy-NdX3hz1d$ZGWme~>P0s1<+V$ojB<$-e|Q#_
zO-*tK7-yStMUV(?zHOH)2Ivf?i+9uS30)Qp7GUdk1~#C<vhm)z{+Czj8(Znf&dS<3
zx-9;OaA@K%UrujNJfo@(p34W|K8e{R{`5`d4}D_;5|;4yON5R&wZl|iLkRMG9TW$F
zvBJ@TgV|?)sojxK88S9c%Z%kfBe%fpIq-b9w3h6g_=kJ(TP&gHE1eMsC$kQ#b&G!d
z=u}7J7`8Qq06ou~6IPL?o;f+*(qOy>=fk(P(&<XmFla}<#IU_YsS@m<hIqtFuI&gM
zo(E0*P7{$ns6FhK^3r2L805d%iaP9v%;>b-Nf@M$Z1)RO(tc_=5Djj}4rlV3cBMr=
zEV+bp-;KltJB<$=qggdgJDBV%P$;zGy7y*@R4Wal7|hzXM<>5#WhB)c@YkWn%#^i&
z*`5)_xdBmz8N<f`UwrD`1AuB8CA2!L0vhY?@I{ERILQ-R!@@_%Zz5=?p1X4*6^C~X
zO{ebW{CJVZ7_y?2{6JI11L5J36dZ;?iu`x2YT~*)awa~zL3<<-28Yhly}k?p_TiKV
zv9G>;d(3g5V!Q{!XIG1@h%3DMEDWEHL90aPqfTXhQ9`F#OAQ4J@dpWy7m0`!E7ttq
z;r<(_uy!=q`JDamb6=tD`16!y&s9{KLu*{xlM3-DL71rBr@!3aXK_kJAU(+&iGYY9
z^;{wCQF5<}9X%F_vPXoO<y}l%Y@+thZ9~=EvJ`33$)<;geRPq=R+n9mD}%Ccm1Gb*
zihFhJuVmhr3Do`oX;PbwA~C2p_v+;#d+Z_P?w#b=YWJ$H{iC76a<xj1vGYN13c(xx
zX0J`B&ey4&x)aY-@;PY$Sn`Z{Ws#&StspdiYPlm!mCs<kJ#YA{j}V8f>K>C9W~GV?
z*nR_xBtO$Og<jNHmP43HD!fj2?I!A-Ruz)C^eN8|e*pjCukw*Bm!dfZ6?~3M(u~3C
zXSoo?p?Hu383EI0mZE)-?ex>Jz&^Y^@(i`93>J`x*YV15;VHZ;k(4$!l@b@$8*3Hh
z6IUThLe-oI0|S`5GyyJJ++(drxKD%L=<{dr`JIIbkX^kjuF_m&&V3u<?}kpxnuNjn
zW~x?`(@kJ4GN<nk*V{3EMuSVTg#nhNee|MrFZAMy2mOgWd&&`E%m&!l^mm1iCe!y9
zSK>~Io8n{z@IuDsn+6a2N?hf51J8}M$_?x=uvj|Zd&r|jqTlX#H?^rQw}<a#RWUNU
z0c^(B7mrtRg%knTQFX;2bPUmCvf6svE2+kQeujzkgCbNOKT@DZ)r(F2mWb0zFrfu#
z%D(Kf9Qzo5knwY>k}(vI#u{l2n?Z~jhcJ4*M=+f)htc)x;eK7&23t3hh{S0M_735{
zTz_nx50O=W=Y6_sE=3Yi@3;QVI6SR5BbZ1#e!QMxNesjF{P=A(ZWA$-xy8G-rIsJ0
zdWK?jzq+d-9!Uu2gLe5Oo#*JOv<8P9$~UbU$(~+}Y!AXNW^^)Ab7HF*Vlr%?OfjDK
z63bNOa`=tO9{<t1$N@tFizPiznX0&YtQ+T#TO%;k4S#n*e|lmQ9Ovggk|}=!MiG!Z
z(1#k05C;X`aq$8D_^(XpAC|NLN1QPUA^p6;`MpxDZXO(yzbn<y&nn^1p+F?pG4`@e
zKuAKHO`f!jQ{ch_4u^pzexDQrE<JoqDlhm*@z-nwasxed0i$2tgjo4Z^ee3w4KJNC
zST#-{ao4DfKqqK6+H5#n@ZL)oq4*}R{`DSM80;UdRS5SvK`P<1Eq;5qYmzIcN^|<t
z9?|fiT$?Cb9FcOptyfY-{@t57Z)fhFx5253N-=3g`)kIpwq3_ZSs}uG1@HC?kee5p
zhJ7l0gG1qldsmSHKPGd1z8%s_c7KxxWx8PgEh<bLE!=z~88t9d(ts4#Di47irU)Ib
zC@&2pBt8H~%A|+YFql!u2xf<HBq1PxW|dXsDyK&1<vz?9ysQN@b`O<&(``ay;5fuk
zjYsK%b~Eg7sLON(hJb`}34|HM8A0aK>9fcBktA%<!e-?U1_3@CZ4twcy4{HJG=?Qz
z)a@=kN<yrB+1Tn6I}%VIN*z-6#(9le|5I-;SkvCcCR370wk*B!+I_VCP4ytZug}2p
z&}B;b=rGaSFJm_<CL7vcxl(o&q8Lk*t=l~Co9A>#?|5L6Ok&}+{wBnymP7=AR~Aid
zn`nFv3*w9^h_zf8oSRTf*aQzhl3Xc~1@r4|Z03F?ICr8y$bz216nFx7WUX};(ixPD
z@|cWbiLm(vhwg=bLy#9~muL58BF&FZjQptAVaD}$U80lNG`jjbs9{<mDA`h4<Ri2Y
zBCXX38nIeWe9-=Hn}Xa7IL{onIcsJUfi->hR>7MHZG#A;7<$>+4>SJR_St6ogZiMB
z_~f!>`H;{f*}of`nI6j0^5S=BFPqf)8gb%=@ldt|p!I>&pr20Hl+M7&6J@jh<($vu
z@xF$)R!^mX*KMBG+m9h(?gc_fpqA?oNsAF-)gcTcvrwesK5fcU%NC~qj7jHXr?88#
zR0QA76p!oFD4M|cv9^`(QL=jOAk|h?vRY?0enJpQa*Ssz{N!Y3I;Kr#kKn{Oo5;(z
z6ZEOd5XdZA6$aa4>&~k0m&93!DwD6+iQ>tDxbg(q<-a^xE?&~!3%wYw-BSNv?_`?T
z9o%b}o){bhS2|ev3e2K$8ISk3#W&hSly{)aDx#0$!;z0asHFFM`-`W2JQ)yL#Emz#
z6nzAP-W8BwL??{;C;wXb&-|+i95Xyn{Bk09k0hSg7_#I#c_@PYdR6aFZh-y0_Waa8
z*|wH$dpULq?)?X|2Z;_<e2^m^YAL@t4}$$sA1~ry_kuzk*@wX83E0x0>RCMl*;Rp#
z=Hc56vZ1&ih@y&hJ)q1N_B*lxFEQV+Xi;X}oXIDQFHv?phanLCMvR6jF&~8G<M2}S
z&FKVnt29H)5ROJI1fk6p5Ace65owvgM7c<=W1m70L<%iqQ@%<0C{k3-qfk?&*?hiL
zm;*%a^!!40ZyJ=W$37nLQHOiV!9F0`jGVPYPp2k2-FUV*LlRK=O7;6CV_muqr!><L
z3$-BvZvZh;?1t<y3x=-kH_P$<KaZ1OqD2W^!`XDOsLJ2Qovc1bWp9<nIOGZZmqE*x
zNtN-l;ga=@_bkf3I#2uHvM&E{Kov&}y?r#?k;kOQ6q?w#ZJUzxn><E*;7{^`v+wQn
z;aE!V5w4dkRbP%}H&E%^4Tf@Q6h5(g5L=NC<*o)xlP_m(v?GZ24#@BXXd%>z=PWRS
z1N1DQPURPB#)Yj9yDS4d#a!QRriRzXe743a5n62Ifkhlp)x^=kYwN2RO>XRLKCBzM
z06mU0?&$*M&%n!+qoeKifgu9IlY-R9;wFsx)PGg(;>Mz<!v^nGRpY|MZsyv5{7H@H
z3l-R-Vo|=@E^k#~m}rYRk<NPn+6XD99WG{5cYm=weEE*z1n&LPk2sPvpnGWwH?>l;
z3R=&@V)Wx8aNLI4uH;fyh86fgbDfG~|2h|KWc^KsM!0VP!g15-4*W&KKO2_*ZT)G>
zE`XYvS@V*;Z=;nHE2Cqx^l@<=vE>B^Vo1oIu}MjA!bmuDYy0&O6v*KkD~&`%HE_ya
zCw`q`_#T0L`f<nM;+a&%@<BQ%!|8qh9G`(2Ty^Sp2wAM}$<FiDkT&sq$9TD9XdzgU
z0+&KJ_6to7gipz9+a*Eq%4=|^L=@S2`fJt#2}|P+L}C*Me`gG}`H+UZCNbLl$^%-&
ziR^(#POqEfs<SvH3^&iEN5b+bFTFudEHkKvSF(n@#%0V)4P@8#05GoF%Za4+P<E<{
zcgIA})HLRkXUC?D@88d3!redq2$3T|WhuKd|I~L6bbsrk&!j_iSeHJ-BYty=mKPSw
zI&6M!7iZj_EEkIU@TN_Qgfgu<_{QAI2%Ge{C$~)|FL+rHv`}S0MjSZDk(1YrB_U)B
zMWpWqm=22tuTB}58ioq(->@Y)`b09@9upbs+;%bMiNluA+5FsQNC3>BZL-Bc+5ugx
zkdP$|$!0iCstj2`7#YVB?S?U1iC`7KuNXP<e{ZK<`r;)rCNQJbVUaA^6jsmkus7wj
z)06e;=c8q|q+`h`szvI{JM%7X-R|eDF5{#E_T*3yY#5~_xX=mx{|Pod;M_g6^|iAA
znSRSF$(c9{LJ+IlJnLV;z$C~3LP#1JLoNb75^zqjK9u7i4g-FVmWT3F!3oz_7n$Pt
z$3)O6a`SdaG8Uv61i!oPGeDvG*TQmBp+_Q9ofNUM<;2(|B+4-7DRIp-l4Fogc(O%e
zC@2n*N-7?NBx|A9`ip?Y#H>R8?aFm?xZSmm`P0kqYLNmm18U_Yf?oMNaq_=^mi?}Q
zsO6ch?op|GxmhJC8(>pCuy<^GF+TnlRhTE%t`ni{F#)oP*wDbYPydBMIR9Lj?gkiy
zn3_!S2`O06)WU24usW_V@*HcUW$vek6Rym=FAA7IFmXc*r-F&F@2iaUZji5-*fcd&
z_B%E>|4{jX&+^So=WeS~)hEbNV8s|$q7z>Li>^^#aNa`>sy=gKWiWxr3TY{vGawt1
zkJ~rE*Urkm=W}y)x=!Jh#-oPuH8fXTS;zOs@z$vMl`Sr&$!A)x+TlK?kLPya@Ks8i
zO4NL&H;vSQonI`r68;La45wn|vKMOl_07(DhX+*VM0Y&Ao?$RR(DWsJPjmnIWyz&~
zxX^y7V3ZI$enP<aFhf=Mt9GLM-v73%FDxuhY?zUY1lJUnjer^dCJ3$N>D>b8VkO{_
zrNW`a?oXSH%J96LhYNxj?y#rtKlh43yvx-=elG<%s(>kPA!MjuJujGEtUnRSR7xTs
zOxyjzNOn0y^A!-zzH~0;;RqLbOzzdu#I)1lNTa)XH_?r65nDD&$1Y^$u6!zJGgHd+
zfJ9JYv@euaSSf+YDIG1?olo1IWAVF>u;bCK!7-5_TqgsjW6dKDa8ty$#cL=D_vOHr
z^I9nqwonBvhz|9F`fPs?%C{q|Lc>+sia?sBP{D^Sf#DH<`gz?tuaoo@k{}ZdGD&~%
z@UjCzt+k&^7T((0+AD;dqw7~f?t_J6&l9{3P806Rqnq^3<bicJI6grnaeoM?!>PLo
zK?mO1c7ff{@BBw!11!9v5sy6yk!!q5D7X$c{!EkN^0FTPD3vFIWAbZrB{p^lS*AO7
z;`gd|c0g7TNTO_eG%K!VX^~gdxe{(CDtnC6C*OFLeM0VMD@>a50@7OJ7t5jVJ1=*i
zV`KXRvo$3lL4YF*h%Z_AZ6Txo#Fd|LQ|Jb0GHG>C6n;2$LVrT6tV0nJV{q%3z$hH6
z<B?BMgXnQ+3G6|ID@u<>qtNZ($MIRYJQmPoTD6Fhmqm|<muyIwkTaX(GA#YP$ip(U
zS)fFVzRN?W)YhfP9B^?6pg(lH5aRV`(4vt+811xkX7HF4M|oHs;;^HLZrIG5*eCIn
z>iF9g1FrHwHLCnCIU2T>Ya@nk9&SYxu4D<Eqad!I)L-^H)qMuEB;qS4*2FNf7?LWY
z*>8B_S*aF-kGYH?cOEzVQFZ|!KN!)nDp2LP3<u4j4((wPH#(9>Iv>)E<<VTKgxwNu
z1%=chs;*{Ukr+OwrYpQ4cah9k{bXl7_y1k!kZJ^ynv6sqmVnWOIJ`O97;=C+W;u=2
zv@lQpb_Ml6UB%1y|HB0srxSJUS(`WF!v8!8)oXD6>d{qk7$=s&zazv!wzVBs&bU?b
zu7^U3HFivVC6?0$4+|Rn!-pnIc^<`6NCIKez{`;|1$5%jncNN_=pZuEqG?9$KSwtv
zRfZ+-jD@~N7YbEW$rhisI85eIgwEbJ^Jy5@5iTe{=LvFm#Q3KZ6s%f<y)7>~SR-tN
zne|%oqT8aC!t<yL>D98(<X)<eA=gF;=ou5jB45Z{3VE5*HE*4F-y8U+`q9==>M`ZR
zcx${p2#Ko`$^@u;&$Dq^47l2T6}VDc6Vpk`Qt`PmJWfwdK@Q!x`O$`c1{szEZRd2O
zMLgH5#_;grf>Y{=qu-kYR!)EzX3WwS<yB)jqGDM^sp2LVI()~r<fk?muz*V^Nxj!}
z^yDKiiX;gzJNZw~id0t40J|=&^RVP(vi0>1B93Y<sKxc%>{^87+C91S5LXA+e*=jf
zo@WQ}RepJl4{AB~@QEPeJ1|KS4jlsTlN~3^Mid&hH9w%7Q1U&E`7vo&7tWj~U|AdW
zT#*_21ON^n1wCMZ`+OJ<EY9Gb{!~nErAG)Tf}asY!rV%Zi@83$h7l@{FsSJXCZb&b
zyUHoys3S^VC|&Cr`?-Aw-B`j<h(lciw622r1JZa+10x1YnK<w_-h)80Zd|PYr52iZ
zwG@QE51JqVY`TM6`s2M55ccO8bbz@Asto4<MK%G7d!ytg0AuBXg!;ow4*Lv1!fl8S
zT<i@k%WB3QTF&pFhV_B!P*tFNxE72XO0$jxNuYdzLW~|m63<#TCIM_^#9-@f=l)ra
z-ybLizxhK=$&T-~Y}haZ#~sk^&d9%WIjb2Hr~;@{?dbT{;C{3d11_WqH+MvH5$bp1
zf`02izcVMucmH>LIq%1|`>uo2)A2>)lXo$|g0a`h|A6WjS)c>dz6%8Nc&@j;<<bV5
zVBTaDP@9>8!lmA21F!MbFKbEO#V_vV4btPKx@1&B_HudfkbWDf%l+E`vWO&ReUheD
zfQ3hGDTh`IcnTS6d!Bg(bzOxye%4Lwn{MrDC+Ak;y5Op)jyD4saaIp~EB;_LPAcO-
zCnPTaHkB0G2J1P1%@n4qUdE&<facDC&B+AeSR+^pHeA^tt>aBK7u+oZp_yAseS<kU
zAKLoFf%;@)Ve^;KYNy*eAb$dgj7J_5jAAjl<}hfQ3TO6d0od-@<<Zax5L*LoZf8G=
zE(rcDWgfS7Fs^M#4^qH(XXv1h-_>tzMr0Nk{*+bPFETo+#m4s@3<#M*3#z{7U28$C
zZ25&<yX>K{x;UNgJ=sXh8u>_bP=<U3SZj<nRtUxn2WA2oOOxqRIG_$&7PX2xcD-3k
zRNDt1RiIg{weH)ABtnx=-kFxf4CZ_JEe#O=zPKNN7A#dcA@)B7KBz(>-wMXDM&2b!
z22abWtmBG30$Bt_JBmQv)fbulz-*`n(<kTPs`r$|u%J+_je+7sIK&LCMl-f|kL+K!
zpGePu$b0nsMGFx{3Pc!wzl3aS+QOosef^GQRuS(9lAM+Qz0A=<Gsa4uk3wipC_@M$
zX>Cb}!R#7`>j4}x_7?T53IV@Glu8{iRr^ytip+#>&w}Nmk{#r}=sS5S)q&?x^wN~i
z)nEsR-tE_y<m1R58z9L~OuR$4-|--EDCMI-E2cy5kqGI=4|2isyV%4h6QD^JGC48u
z1{0gERJRVrb&Ek^V+N6I_Kq}7kRv`t`p{*lo{$8V2XC!YRfxkra=Jhfe>EBT+0pJ8
z-Ey+*Ep)FUWZ}*8B$zrb7B(A+k+3~bPDDdGaJ+z;Foue(<TqmO1sIYIvP-%_t@W&}
z(y0d_EZ(*7fT8SP@$XfsaV%4h$8t;6la{7=;w77(Y&OV<>3n%rN=Sm<DrAXY;@{Kv
z8o0hj^YonJEaH=x!pbm6ly}}9fYNKAskUpw>V`yl^IWbn(B!UNEWMOqT*8uV4l=#j
z?Y&C+_bJMd1R!<}JY{OJu*(w?l!@40_HJXb-EWp&9;GdOBR&Dny|<<Zl=2vXEK3y#
z6K3uRiK%be4E(@Y7wHwh@Y+S{kb595Fap~|O`zMvmhpj$`>t5Y#`fT6Yc6o?@6$^Y
zE`jy8PVD48z;bIp(bn(VLY;%*@z3$TaOjV3$^3!0zs8`tac`32B>zA%g&h1Sx}+T<
z0gotCt<ux;-L1BAC%w?>;esEt4z2QFdPzU)NmI{=>}vDr0za8xS=<6?R?y<)S+9tc
z{zl;rVE^)v$$6R8*v*ovi1+sKVcsk2TM#|7U2>a+JD|HPHIdkDRwAPwNEsI@LYwi3
zSfAKV^gI?mm6l-x#Ka*?+-7K6K_@_6-TbNsqu5R@zZ@SPQj(DECg(>sD{wVUX{;TD
zDCmN=*+;^x9RY)htt*10Qb2$1F8igv4{8N^|5{b5_m3*gdWjfARWcqzQKhn=BL029
z7$lZFY=-Aobon$=i~1h8OT3u;kv3o<!!8eONR$JuQ4L;n1;;%ZFW+fmW!Mx3_%>On
zZ!>JZbs(o6GPK`Z?RVw%B@32|F=<&$;s<;B3AC#*)Y|CtI;{;7mOiZEC-|3{iryy-
zhoEjy3uwlzJc){$a_H`ARybuq=PREv)ft*B7A*c63C@nlHlXZ}h7ju6-^xTF)g}SG
z+n2{RJ%{Ir*w28HO?Y3!*&uBSM!OG|dO$YOG3D})=qqAS12sLgC3`%ZZ%0;@E9kWK
zo%u+NlDn|B3lVy-+MRhxMMA$>id3i!Ak)X@Z!cy1=r#)q40;m(>&qjxRW@YvKC#!}
zSG8%oRJlQI0JK(fVYA^rhQN}B6LZ1o*j3OOi6G)h3cP2KMi!XOee!ALP1Jxa1I(V+
zq_d5?_0k0C?vwYta@^m7XiCeHSZ12`VjANXwgc$z@GZ!app$Xv80|!#P}Zw^ET4bx
zh|J@6X#P!#YFI7c$N-{?6Gw$2wAFqu+HT=731OOv|3FGX@X5#rRjMON)B0gh+YQ{r
zk@GU>%v#iIOXo2yHI`sAlVG!TA;jO;%MeDG6iYk-&6P@hVlyt17Kd}%{I>Tjz^6zY
ztq&ei;Hk8u+UIm8n<I63KJW<8=+M!w;oWLQwp`<R(=IFN5l*Y+RP|49uoJo=e~4p;
zql+z&Py8##FXg|Hn$nyQ3IqaDBsbAVfIps-q|?*O2!MNo{~<%r&RSBwu=|e0J@Qx5
zpb9W(+px=dG|C^GvwK7&Zya=Wesh^ge;fCFxp0`|Y5kq+Yx(xj)~Jz!;F}NrNM+vE
ztCP&$p*FSt^DW8Oubk$<Xh3rMpk(P<yIJ#2Y)Qp{0ON;E;&(pB=1$lFh+`dAsgJRB
zw*x_e&8Wxj^0{JK9IamPzkyJma*U&o`w4cMFgEpk3{V!BbOBo4oI4og6tsqX<Ff7m
z{d7>JQg#gAf8T{8Bx|}ULGrAC6HyQOrnMPjHgp2>!cbYKM8NX2p&j~ZnL+NDp(}{2
z+-`h%tZboQ@dmV)o?>8(3u6*b7<7>e_sjA{kg4O9Ovu8Nm}!e)+C}inJYYifr`W-j
zq>W=1p7`8M!Oa4_@n>wMKDs@>r);a_fC75yOye{HF`zpc^qvP24&G|#3C-5r3`^MP
zDIp2NYs{5(M%U<VbS;;8pIFcd18%+cT*Zg^1rp6@xyq~WG_??eLR-3M?LAy9I@<*e
ztug<InD^SG9Ng>s=qHeU_&^gaaG1E$On@$g+CSb~3`2<929MZY?I$j^!6P^q(Yfu$
zi?xMvR*o2YahRK_Jlf4XZV~GqCi=vFWlF#;SeK7Nmj#$;v}1?g<+B`P;U@CKgkBtq
z*A}K9@wrP#9MT9<XxWcXmi*Ay#i7<TbEZpfSj<T!I+aM!O8Wd1Baa78ADTx&Vo`rb
zH$q$2N@tySIjfd{@VewB^Svr&S--a;ROlP9O4g)(XBv`JkmaU}lLb&6bs_ZfQ_&<m
zeTpiRxVZn+XhvEEP|5SosDL>?>I2!o)XBk1cuFE`dyn##6i0$gaP2aTO?_en+m7BT
zLa9QC*7JJb&<A<O4J+8uDPuAxf%~$Xnj8fuQr^4*O{f$3q0FU)pdC{OeV<stj#C1=
zOr<ckF3dr7q9g?TOLcdz!AFATn$3Ii<s8{@8IW-49t;jBvvKcZ69*`D;sZ%3Gz2l4
zA#2;2`Sq=JZtwP@t9GX|*V)1}FRup*emq2_iyF2?g;Ti1#muT1V|tQ-e_npqm?&~X
zvAOP`g);N-K4AYmMXc;`KKI!s)ia$Lk-iz9<E-JB8{X!FX?r=1jG~u%U-#L6`GM>B
z2J1+zLOGV#$9)SzSqj_pr<;V`YDb<*)jy&uBs#8}dU)xe+~t6FBf!m@bNk}y9MqoX
z*bLfak1a)_i|&;)g$(sL{~&}Ti<kEJE9s}sD50+;*kYG0eU2ER1QiD+131i}QE*zR
zAA0V#&TlM?C!q-=J>auegF#~-BPKem<<{E7d0M7K-F^mxGq9y3mc%3O#5N?4_rx}C
zqdkl2SUG=5CXO20jbzJXp~i4V3{zN8_k0n|DWHlUNl8lE=zlC_xFNzb!u=~L<_cD_
z-+%50P3s?Dpx|%k2_f~{m&tr-YUovraSVf!H!3(#uGd$d(wZG=dvBX0JlB0fKPbOP
zvEE(@WeyM-iHbB3^(h|>>Z4`#e${hopTMM~B1tYlNPuR80Vh$;icjrac)Ix>-X6SY
zG$z+J3FS%WP4?5RbyqwUTk5$5{Gw?%t7|)_7))t=^{&9^nbwm1RA#^OXT)gWJ=ihQ
zq7!oT_`4O`%#UEk460twcnWVNR)vn8DT#MrY|0bqRQ#}M+OOoOEM1AR6Zhj&9SJoc
zL@R!Y$TBj(izEtg5go1$&e?Yn_glJGfms*(=7eBuyD7;4z}F?2CQp{mJt8b%@=Lx>
z9FamzAFDpa6%5d(`mYYp2AITh26vB$G`*LSXO6@wc|h_EXHYA!x_Rm321tJ>)rh<R
zJ5jfV&NB6~jqRh$4=mCe!Wp?o1K%jZ9)@bp;@j)%VHHb$jiH*1-%>I3&O*oUd^b$;
z!gpSa=FUefx%(LC?bytN-@qEa3$mn(=tmfv`Mu;iew4^}U9q)a$w)gKg6Nc)I0HD7
z4Lh}pL%7lW@C&H+fn22jy^Jab5OkFg7zxXQb1d2&>xgXXg>+u9F|&2Hl0O4f;{N6`
zJia%TDkS28<|lIQJKiP{+<S|&rwT(PERPIYd>V#kKh@<VPwaVO1m085N(XmoBDuWt
zC>qZ0OoO(*eh%oAs&npuZbg$}xftUMt0=iu)!i4Hb7fFZRUASW02pW)QFz>fhmkm~
zF2nr{OQjf_Y%+B|1~uur!JYz}c@++elEn5M%6!(@^8N-7O0YXS%li{owizN~{G@eh
zgzU4BDiVDhL3(#3G}D5@7Yu90mp%!4w!f;8BZQElzX~DJM#Ws&AMDW7>dAM@a{fwP
z<f-54ow`<E*jeo5$cK7TsC=c;YEj3LLXZAoQNpuYr@6&)IVi&)<<Cv9bV_Jomd4*{
zAV6(6Ramzd(D3kVOZ+RR;eZm+cZzA-WO~z+Ps_m%Lk-*|&@xN;=xdx4>a*+2_w~_b
zu$jyHADiI6KTJL=i?^~UCpJQgu&kOA38zSz<u{BKX#_!scRqv0f=tua0fE5NXP3XH
z4Us<;&})UyQGkG)wF+Oiob4y))h^lLXADan7&=a-K+X5T3tN_2=P;#}EacdwJuE(W
zdm`;3;APzNxA74Y6y_b+JS12?rHwHKxpuYRDhm8-zg-HqU*WB8ivM(o@gLB7ev&#~
zrlTHNI|Gh0h(qxN<WnkSik09U0?D!FlNiDh2e&llpU7E;<f*z+%y|CJf&{aorO@kv
zqTytB-e!)`lODge@)3#4M&;%};=Z0|XGUi0C2#!w$3H<)H?VdOgi)~TEQpQJA8T#r
z!uk?wE*qrDyjUuqx!|L*+<r+;(z*eXuK8!?#`o@FqgmfDO4Ik67nevf>E5N=&MoCT
z;I~VrYaG#fo}vSm==~iGc!?MB3EM+dno<p6%7}*u-LypX{pMzT8J#ppskI71@P9pS
z8ENKxR4<4O`RCu#7_0yU45ad}-P6b5<L-$bbyr(`G{6YJs6uy6gW`Lr@A>Z!ZqStI
z#KBW~OoB!gfb7FDJ*E3nS@fO7Ck-^}2>*I2>Sd0608)B#=hL!WTQbI{OC3yh?$S==
zQ=H}0iJ@c-E8Bm6Yt-N2Zvc8O*JC>Qp*dN4wKRtJSO3FkZc*BS>W8Njc9!$tjQ{Jg
zR0*E%u`^<6%&;#S5G&=@Ih+%=^5t?d&%10F&h+<_!E2Yy0K%Jv`>Z3vpB?JsekOK2
zwRrojvnz5bFi2k{xr_8aen9|4NgA#cEdI)FMi;6gEP}@Qsz!QMC5HF?8HvMu=mh6~
zegf^|`;YR#j26kWKilPoT%ss8k8T|oYJMz0+{N7Zh3w~~0ajCCIl>?pM>}6+YQsag
zFMu93$PF)z`HT?I)Z}3Q(mz>Sc=fMa_TPU<*AqjY!nWqW2!Td_Fqk=*hPlw_h6Aih
z;D8a%3xrvP9DhKrZ+;0dA0wd6tp_9HLAz-+sS;><&K?8|XbY_tXwv09N?@2$e;HP8
zuW<o1hJW4P07ph6Z5T@XI#F(T<7^DfF=S46=beD76BzPCV(9z(9x0bzxch=97C>tR
zX<2Pi>UO~5sdU@cTI)|IzKw;~3E+u15I$GHJm9md)5U`cU55Y@6;P@>0S5sn^YW|9
zjHy`&_0<u~nR76t#Ho74qjYtl)~8e(6>b0hA)f88pJxVMsnhKBdAbdJuMxntf2W*`
z4dS9go&9|DBRFAjHa(z1bOPElqRGRF1cqn}XT=@O)Bfg<b~~CJp7$Q?B$#e32LPiY
z6PO=oRL0SWg@TTAPeJFZsyxmy2D&z_zRb62ws@e@)4N$~WaUt@`Rl5nE>aEyxG?7^
z3f;6ND3T8V#6oW~Q4&tVmH=(H8qN*aTHV`o=p@8u0rMXPvKhez=mMy4Jd+YpG*Fm;
z&KnXG-A=z|1e(CRaCZZ(kH*Qnf%>#I!=Y>VG1~~?`9P1y_qB*9i_!hR);L(U1P73*
zd&=am_-!UQWP^M4h?$kmu6+TWok=bGQs60&S%l`~(4Dz2fvL2@mw=Qh44QQZkDyav
zGl>_B#&#&&KYZ8YadMeXs0>T{2<p@SSX{z!{y(UhYuSMEIT%2fz<A)^*=9jpf9mUt
zUqY)dov$xFiC=VxGm~gf!D4yLEWok?`^ep%k`0|WT!fhgrH{pmp}TLsmPVKsT+8*J
z+hULvKov-4k_XQqfNIReqLOALt^$h%m;;W0^_Vm=7|IJereJJY7n4=#vmzqU1t9~y
zTNQZ3(U2OWf;9R;VR!eh*Y>L^H=Lbulv3zK!zln8|M#^b*XD)+8X@2)4FVWh>(k#X
zOGJLx=N8XObO^P}^mq-+44Op&rV|HlLuRYpJ;yW3ql}6dcsG)O8)@?+ge@P%+kQ5R
zVvcOT`V=qUrU+rmOvat0HSE~C>!(<?+3RDbJrnw$m(Jr3iUQC67{JWwMWG!$StM*v
zn+_ozE@{Kb4Js>LF*YxSe}l+a@#y}*+{5~_C5FM*KD1UQ?<>!e8vpm5(4hxHm(FiX
zKN&%^@<D%2YSv!#rO>hJM9IvLwfcy4IQ)MtjsVa?jc5xiFZC7-037wD%^}6g*NfNM
zq!~6&T&QgZ+6sYL2QDp#FIp}=<M|c2P@Mwi%+(A($rJvQU-K58mw<r=WJA<kx*G8&
z@;sg^W@dx7st-*dMnDo%>2mR;&l{omAE6=~s4A2?MQnbJ^+AqzrimF9W7-1Galn{}
zhSXwikjR|OPlfr8pVAv5eYjg&Uj2G8c3zJ+<1=!{_u|B@*S_I{dV!+xb<=ryN$-N0
zp2mFKcK&a&QvKQwLO`MOgFUG`W88-0SA);jL!CNvnrx}p_C>9t|8d3SP%S%#2~V3k
z1Gy!@Ip|uyvT<5P(qxJI{rT}NsuUJVGwE)mm`nppc-PZcZZVhvjTr6f2s{6l2XvKO
z(`=J98%wl$lI|3&u{jW@*plh0rTOC`1k9a2wKM{*)Q-d)u8?5_y$XgY0WkdmkAJ<t
zO-<}|0)l8|t0?HN#UQ7G`Y!7YHj@U@{`s8^U!+zi#=Uz|{`lh33Qv_Z9{>D4b#|d(
zTT)L*$9&V{Q>u~rMA-8jvcl?%wYAW@%cmY_(|E9dr_8V+)^+bgM{YpSPQuRIdwwpx
z2LH}pVn+3TIWAq|kc9K?_2towoOGf!4t?5ZUwqE_s?2%=tsWQVznT^WJc%WVTxI|z
z{og$<?SX3C(vArfLUisM5i38qNR>JIK3`$m>kJ%SaFZuAkw5#2D;wvmpLx`w1Mne~
z(r=vCSoU>ET1z`8T&cN>uE6@hTBph*;<?6Bm%#b?c<14-K3?x{)Tubk-Q_odm5Xs5
zbYwSeNKBldciY;1_)4QpGJUa}@tnQhM9LgfxxoMV-@lL?=#4WmWH+Ad+{3ViD+Rq0
zs5BmVWt&|`hIL98x_C#5qosoU@iz{c-(%zPVv84No2!8^{c4!`UBea9ytShzr4_c<
z&K&8Vfv}avBgSIE$5VZ@_0Fe>vPfRpu10y-GQ-d0@;JO-qHT+dH^~C3Ig&ITig+D6
z0@VYP%t;<!b)}<7{{8R^aHI#{NUy@?DIp|X8szxRShciqCZ3X=>G`cDgVQ2u7bALE
z8E)8O`1T5^>fFvQ^%}5cpSPLr3fHGNO+;EpzbAbw_V)d7v-cS|y5GWkuO+aCi=MM)
ziF#s#Q(5R}vC*wBc+N-43UWyLjXjUaY*YjPuPqfmj7oksS0~pc(xr{^*1GoUhD%(v
zlQPsP*>ChBB#ZtS8N~#o)jQoHVt!1(1@9ea*H(Y8qq#HHavQ|3b`%Z2NzSQcs)br9
zk=5-B0tpQ}p$WCX&oP-9+cLinjk!E{RRXhIte)>%O;L<s)oq#h2R8XvL|J|ew)ENI
z<PL*T>aCE3-$U9fK~?7n(dX);4nO*1bX;F^mKC<fx_Xc1!Dmc9j^!qK+Fk9<R$5%i
zBzYDj^br-#BsB0HcTKFTW`^0>)S1ps*uk`#$d#XQ1T@~=Zt{6c%M8tDy_Mr8Z_1~=
z4uej8O8pqH_s7rT@Xhh%C#)3P=ZD|6iInx6h$uDwitau^K;N_|tO&+*KoL5^=S%ms
zUd{)n#hWfA9t*@6eYbSQ((BvD`cC^K#%cZ!MS$5v1GC53G2w%^un>+)=P#Nt`aj%~
zRx#x2CQAp2-Q)tMOq*8DJNvvzrFx|Ey00TjrR=|g&YGUHGC(861b<1l?k=XEd*PlD
z$xHdrKb!`X$yDl)JAWs{IjC%yHC8=yUmm@7ICCS}D43wObA*Utnd;!6Z&jm*jGvY3
z#{1suOSjRciTnC@n<{_atz&k%+jBXWenh_i<Cg2*;$18LcV8!d>yETe-ny)J*RO{#
z>*-z$i7v$mEw&9SEw-A|0!qvQO@YMUvCjpiEyGicVL*Sv3ik9TUv=8+*_oA*>h4z?
z;Rjl-{V+-NK813ZVno%CZcg$E2jMcq=2&!j>|Bc*T8}@+6q3ciDa!O31HUILGXnbc
zRE;??N*V;9e=uuEE)Ccd9IpGu>$rjcBp0+Lr<L>x2Y78R(6Z#FJ_2pL;i{L9aVhvP
z02=^M_9z19UL$Ck>1jfP6W&0!-2PtL^{AyiS3Nl>ktN+`R>nWX<+r6tG*-2xiX5hP
z*J>7VU(Zrn`?<J7oK&twyBZeTeRYA)W3?dHpCOLJ&obB<+_1{)vcgfKQ;!bNyKYp2
zP%i%F`T}3K*0vq!y3_$?9ZfCr{n-brxq4mz%tiuGnkb%8Q2_vR!$lgbsP==?N@qM`
zWm&Ko%r^YDXawq5KrzB8{3vn86aWO>9TsuFyppGyluTOg&6mP^_xBWx7R!9os=aEL
zUoY=qK6~(#f(qZhZELmA5ZauFfXBs?^O}%5p`>l~uWuwl&)P&>g+(pfwkwVACH9@i
zcMmWAhYNs59S+74Q{|Zfdl*39R<GD#k0Z)?_}WhSul0_M@efXLlr4{tzwdz_(06<G
z=s~4tqT@q%uOwI731~zD3w*NtOIpn3)u~iZq9{ITiJ^byq(c*E0Uw6~odIapsMlDk
zYs9kvpBG`5^?vsIoAS=UAdN98OV|nNk%2MEl(hNwKPsdp)CrcQq+uH2PYlH%RSrCS
z0NqqwvClKRtbhu;U6O>V(VD;VU0*BzXiz1JXDAswuj@XmiUN&|X%kkyMy(c?xA2*w
zgsP~z0Fc>Z5YE8L%4{$T==+I(Da-zS-9eiKNU=ENFvOEUzzgof-O(f(&g`6r_ePkq
z4uAAAjn0w4Yrt6(RMH>HmW<-%S1_IJ`n5S-##&1|9hm*gyZI@ta4rJbS&Bo-(FSI=
zs7NLNg<kqvxyqjhd7ZL%HTwRpaOgm}+u4n;Gkau!4)!@(vogAOV!bZRcvB@cMZdy)
z`bB3r#clO`h4!g*(>GUFJM~UicdSzmWp{)t;~CxYzQB7ya;XmHI@vBXO;bMuiYHVh
z$MiU*AHs~%n=Fg83xq6ql*ico_*Ya#{jn5*DpXgBEL9n9-3MJQBU=OJfM%sR&ZH^4
zi2NR)@;$KsloWof^)A)obg%j~YO;vw%-Pl>5`ID;iJ)0)c<PAK?g1qtomqd{NYb5G
z@4!rs;FLdq9rU1oBnLwHqu}F4NH8%PV5&ANzu4W4b)q}QVxPyb-Bnq)zSoyVZyIz@
zxg^%KJSRAzf@tjMudjL^9StOu@e<+wVMG<INsbL5dJ#tyF#Fj3AW|-&F|TFXOaCN>
z>Kp&{0Hbw+iKc@g9<Tr~N5=bc3c}<U4|9^v>N|tKpGSyFSHla-B)l;JI4}{blqWPH
zT$K9n`w{#t09Im&(^GCjN3no#t|SiqMiLR{HEC2K{gOMc^Vf$W=wAguTOoMcgRRx^
z^`>-bIWlG7K@b6igZY5)3o@eVH=keq6_ED%!237twAIXo%eIY%BqVk}F+qk$^u&u{
zX>q-Xc%PZNG_`C>e)*d~PuLqxUYS&3(xK7h1m8tvJQMH`s6Yo1iBgAFn#kkQijxCg
zH?q>S8x;{R0Z(9kd(rQL6Yx-CTYN8oRU}CoaF9|?;fMfjEK^YIcz`ikKPSuMz%Yb#
z-bJr%&SRQu&JVF~L)AwW7&K>|(Njh^Ck2N;qWP=9xsL>_bt2<91FBP3^lYvq>N#(M
zYfUN!x5hEcxlg=cC~1JnbX38$#c%Zw&Q>ZE5}3ew5FWsQxqmt00+<ctfNdcMNFOn&
zJ%Dqd4(K+hN*bt^-~f<__5kxT8C-YgDDFLYCJoR7RHe;>TL`)n3LHR!`Grt<3P?W}
z!l_00Ogf_jx;UxwWJc8p*kAP%#A(5m!o$a8{)%7>9N_K}o@{=0Qe$1>g!j%!*zDV9
zxbvE>sHjj0-Oa?a!#E1n6Lu#|#@2=xq{I-c4v>TX8Z9;n%pY(j$n%017|)M3gaT2U
zgFwQ|70i@t4`(Bh1A>kULloVk4mu0CXEKsIYI*M#!&^RT6=wWk1UwdsWYNDig>*0@
zNbQg`4T3wI7)>%TtLLrvPTtPjyg9iz6zfmt+Yo4SqZ*h0Ua#Z?_+tIQ$_b1Q;q%?3
z2Ov8UE{!Njp<0gLuLgg(5@@9jR09Z4;0gu7Jbkac4BVd-V9y&&F~6HXvN^W|>s{e}
z?BDBs8JyD*j*4Y>y>ZYSh?N!YQir_NeP#UTyVae8(ZV6eld<xt%9pIMyCT*tf<Pfb
zY_0L-m7Q5%%3V-}cZAXTSz_R?Q#N@0{sbKXL#=<a1FER{3Q#i-N!`pv^Mi^X<(dTy
zn)u+opWd>^v-nc>DYEBv@;z|-JHv%2g3u5w=4>~m3-QQARC#aPKP;Wa9Zgm3@NTFw
z{h7v=#_z^ueKFa!u9=Clw}_?`zz)NsfkzNA4+Bl7#yAU@_Czl1nA@ue#2T&Fe{fKO
z)@*Ul;gaY4D7`vRR<`X-SH}z^G0KlwiokG%ma`QcDD#5J@QcE~Hn;~AtPTTb#0&FI
z#-%NIZ(eiQaK2w(YMzjIo{aAu(?4fh>lG`^;bHWvSgUPnSO-gSSird)WMp9bs2U`I
zA-!N2CgW6{Lk^+b6rfdF$f3MxR{FSGA2ukHa_IQy%SUBUGnYi0ZYw$@cpR)W6DYqb
zg=e@HaZ*KyD{~Y){kxtGcSL0<^^B9D9Z|O=nC%x^V!-0keGyoQ!+av>bTK4$cC^l!
zxFn#Q1S97+D`CT*E7cVuevv2&Mken329i*PO{0h<Ko?jAL-ihIJltaMNYDmntx68i
zgHAFzyi{5OQk4wesk76A?N%KV>usR$q}Th&@mClnj0ERC#BFY-<Q_VR8|}dK%wW6G
ze1KA8aAE{#DO)MxjRv#GBAx)!Qn;Gb6$zmF-+lFQ7|I+Kzx$T@gKZf*<)rKC@?D>W
zqU0aTc0lJg0Y2wY{bRvj*FW4J69hmG>8GjT@?c@N2Vxqs;C=oj2{NP)!KDQ;#>~el
z<RZ>Y`3f<SK(4fss3!SOmIc)CUpkavl?pH55du$sGXM4E8H_;ILS&OQ#*R*yi+BoR
zBQTeh=+WnQ=mPg<e`lJ1)B%V_Sst2geSfcjE8?+#AK2=eJ3CgCaAJ~b*_{6@E;oo3
zdbOjo_AMC)04nVu0PvdklOIvKIHGu1;cP1Af9xkZ>%9)}#m_g`e%5>nJal`U;U_k+
z(^1oov%i1MNK&o`QEhx3T~{F2RkC~tt2Ft9-CPM*^8GuOnxJAS?~wi%yiic-0J2@4
z*YBU)-n{O2*gsQ?z3P9amoDtY0N|Ub7oV+-FV7BGreTRmd<U@B!JnKZE8p{Eu@XPJ
z0?7u76QK0y+X0Gj)@9J@*L*$$w5EjYS{yz{148RIm&8DI(-})eJg?vv@T=Gl*?6v7
zd3gMgG3z1s?7h-IXN;a1OyrXmEI&UNg~oj%JAmY^fuDW$f13O9c&OXA?UK7pNeq%*
z%rN${l$|UwBQn-PMD{`@LPbhthOC34Xo&10YiMLA6-stW$dY|aw)dQV_oC;ypXYu5
zeEX|D@||n0@3oxgaUADyP7iD{j%DjOgzc_q?fJz+{qqGX<Eh%%)DLaued;&WcPcB=
z2<~5>sor-O4g(OQA+JvL9s{G5i^EN<0;HDAr{Ef*6D<-g?B4_J+@cDi8!e>mn*u>u
z$VnCA#fY801wJ(K%G8oek8kf}d4wQgtp~jN{-G#nW&ZU>)nN>YlyjQp@hkTL3eWm|
zmoAm+A-&s>vNLe0dUFg&dVe8b_WmYWa%u4-Df>*XKwzYD&+-%Po`lZp-bN(|^rp%x
zo4nyrfyG{JXansd>WuvTHpWqJ<GIcPCo?3S#KK*|>1zw40g#Ar>|;FQ8+Hgk2H{W`
zMAr{<@k;DRE<Bj!A{WzDoaj8&XAd=^PW|QbR4GP+b9+WKlL^(600#dRey3h>y8K*V
zq|5!LC-#YVN4oOUC(iYDZ#+<Rknbn(awht(4^C{47Ygi$+QxhjblcOD^Bh75bk6l%
z|Am{FaiflKb*;dcjgd|tL+wFK^;~R@Kl<J~{A13U9`69EA4}bbK>PD>OS%R!Z^Zjx
zr5xXdz=T%N7k`O-cy9>QWvB9N@61Zs=rgOlaA_9-v(#ET5f)sAzxjUgS9AVa0KIQ)
z^IIS0|9N8k>?^;KQJ>y&Kh8UEMm)>38-JQi98TKQ>7`ud9nOr=uFqBY+|sWx+Lj?o
zZSlam$Luq_QH{k6KyIpNU-Un@Tu#O8;S!OiX=@>C+-GC(s0sf75lP4s&3E)RaF9hb
zj#UMgT{tlkcli8qCBKCO(d#0~_N)6xChC%hHt$689^br)_J|$Kt@kGv`MZX2$nB<Q
zGW<neZFzqIm2h-62x{^%LgW_-&Jt94q+rbme5Rl~7OXWxT3-9}LWvh0Ka28%kI@J#
zqo+DHb8&~R+#?^M_R9l2{R@ESKMxCE01FK`A$CNq1||r;MxY_;*N6>UB@Zm*=sc8Q
zf9c=GYr+|=#ZIwxW5xL?FN$VFr-e$cdTM7Bq_<GMZ7XmZpg|yOwWGTA@EKLwX|tF1
zE=<gF^HbQ_*(5BV$A7)!V~(NEyCT&k)v>2Kder#^7%?zs)U=>{2VlwU0)4Guk^6v~
z$S#vKgV$LHUGEkM4m~s7p(=B}=X;95+~<uQ*QYlBIDV4%PA27y*0lbOnb9u-2(<6F
z;NKETI$Ge32=p4XT#UE}cJ1%qzgK!alwJPx#ml{aL_*YO12V?CuK{FfknYxk@#tA4
z1BeIRGkQ9!JgEg7k(I{@$l8#0kUt49_5yG;BnH}#5bF-!bm`QZ776A&zgDmL3$G1J
zThE=~EH<lPhxDFdS~Z0IO=`U7p`nrP>5d2)AEW?@OOC?Znxw7K@xIKaI%990ZjDuF
zEM$kA5MRjxi6oQ6q=jB`lsK>(y=LD0;BcN>pTgJ1>hM$`v>)s~2H2kMC$(HA->|IC
zqO}x*%OgYVSDd<;jP|eJEdOJEu=k-y+J?>Ef0+SDA@&B{l%}J~W~r_9453o3N(HK@
zoR!p1@&AAhTGS|5%C2Fi$#{XI)O(iy#|1cvLbNq2LEU^*dIXw=S^2F{F<n4XlaH0f
z9g|qyczn-Wx-CA4UGe9ej=qP<PtU#34~pgE@x8u0EIN^VwyGtbn^Mkr*%!KLq<F+~
z*i>1Cvc((B!BgUt#4p(CZYN$BmRX;z=N*}#cNMWLdCnfzcp18P&Nr<cwymp7Fe<a&
zjh;^RVWaw_4eyD$ookY7vG;}Gd*EwAj^3{OofqOo@r5CIm5f~*uhD@i2HWkOd!>97
z4>ZjKt#1M8b9aj3oybc7jY2wm*ri+N1<5*e?bd|Zrdr5@R_k<MW&=!K?AKZl6HeSE
z>ji)wg*B-Gc?u(JoEARYDewK|rq5)5-)f2H{C+9Nw+n_C0#bH&zu&5BIrp&Z*TuHt
zYpT7kJT24-%jJ3nhFi8IFt4HzV7b+1H)?)1p`qus@#Gp2YkaJ@EGl_-2#@SnZ=6l8
zZ!H;l_TZ4CQk$L5?NrY=GGq?na?ZA8>Vyg|$%QnV(fi5jSm^%I0`kzTRp;#4{WcpB
zKpvm19NjK?Cz2Y)){k%>kn%fZTSp`um*x2S`6MWzM&Dw74+|JkFcv9#rWpfj+VVVZ
zuZDTdTWbfp7>p5(hR_Z7jQ&IE<0IAa%^gtj-uY%$J(tlm4<Sb4qIwAI%KwH}596{J
zvwyc}m9u<k?VgPeNv?Gd*{(yRCX{<mVbjMt-j2~pWVLaFeEIbAK;*u{YvQ`U<swz_
z5LL~nY=0|B<3;EF(!kbYsZa4L)7V>`AXXvMa7A`$J27PK2|JOs=YPb0Ma$GxS_)1q
zZw7%+6~AY<v0yRwb6xpiGl?_Ds5k&0p2kjhE+H_orSg;X@3H=NYOKHQUY5A8&~|qw
zoO%-HDGUPKb90Rj<e60D{mcS~)u$g%{x&#%9+(}b>E^<7k^n*1bRUE8st#N6&u#yU
z=gNXAINSSCzJ!}Skm%;!wfx`WFJ0PReK>z)hyKi=e_yrd;kf>lmVfqwOD*eQ?4J+*
zEkHa4Ia3XX&?0hsF*AJf-qK%z-S5--SH%b<?<J3^kzd2V<okRypI}mceWS`r>L+VR
z{Q2PD*6Z`*)B#f?N;fJ-!*Q8fit@jq0x)Tx!gc@um?}mQGLVPLz?|-c3@!xR3?4j$
z(C{|+P%(m|5jYoy7k0Jl(()e&`0(r`)q<+C<dOiC#RfoQx?Q@Tqr7BWo}AHpLjrmu
z<Y9H}sVUyL&}@ams&9|YPy1bI4$nKFXqPp-K_2s7`zgtw90RP%!6o3akK}_VA>^TC
zF!gSL^djhe+V7lH(9LD$i>ENoUHNGE)Z2iDkb&H7cyKtGd~u|iJ<F<s133P}*1RAT
zTK>?=pjk<v1vK>@(AP=egOdhaEEP!s!oPls9)jte113CZ2ykj40R#UkkrR*Pn1B|m
zgO<$M;<*31Xv<@6YN%tOZZRCZgQzq(;IRysKR_k?>u-tvp#YNXg=Y8j=7-En=;VSc
z0obKNYcQ4EaFXse<wD3kgH<K;Sp@XH-&ypi;1A#tHc-m069e2&?SESz9Zb)~K(Rao
zN`VJ5&XFm4kf*bN&^Sg(SFF`g$Xc+{K*sm<;`go(WLI#gz551|TURvjk+KOM^s4_6
z!~L@?XY^=d0+Cj`$3JBU1K88Oh(d(iOF%=;Uk`j~^oyFKuG(e!YB#?e3FB2gLgoxD
zqB@>kW0<U*vA-dv+FfMM%ks{MK1%3h(OQTAcWLSlZHBW`aq=;|t0n5nL)TOj-+VHD
zdWz{63DEW|uOM}vl2CtBa+mG5rN=QpcTLr_q>r{Hi_!}jFD!)rwmrR7w(A18hkcM0
zo%1cU0H~iqfM4fCF44yQ{7JuE(Cuxasw(tZwv+D_{5&H3+^#8-Nt}`$R$l9Ix50k%
zQ}TnEcCJS%o;$%EZBL%Rlfp&4t@hLmTkNTa^JVt}#5Hjwr#g*YK*MsMV!@L8{kas;
zClI{+8s(u!P*`mPe#p2P4v|~FI=>xnO7S<*<iK{G1F@U^*AAKy=}P*b$gy_F;qx6l
z)z37*s>1gRDE)Ry&XHYV=hVbndsaX29Jni|nR!|H@aLXm(BNQCp8F{nVukN=Rit>Z
z23M*tfn#*pRW&v@-Dx)I$8%fkN9R*Qow8dTr8O+CUE~H=`w+OW27BB!RALY5J-zoE
zW~c_oWMw23K3+q0S<#qX%XIjm2QkoVO1mas64P0?NHDs80@#5~x9{z{i?i0v^-dpC
zV)`znGFaX$=Bce|9(z$G6We}oo%5%F%Oi|aNAlx7?YoQIp+fr-&O)bU(|db8DUb~&
zLw@<UowM8)JLe(DyFPl%9t&-SkY`u~!K|hHJ06fgjUycsf=!2a(1PfKdHi|&%^r&9
z#C|FJ#z4t>ztHb1(v;&Po&8axn=7Y)Yve#6!FNkOhj36%Luj8?|1BS@`1#6&9iyFD
z%=!s(V@0xy5a;d+<*9r!yW_T9OQ{yy(3|LeH+(JLuh{NO6<-?x_`>Z=Huk^VKfT)2
znQDoLkdY547l!N;<f9B<3>|p|DqX~&rS8?H94g*<P+;faYD%uzyD@`xi!06@+;IHq
zKYTOJXZc|UUw!!6;)IphqR2<>dqv#6uTqtK=AW1fs2Zo63`e_)SwH6rb`*OZu)ZtH
zO|r)CozeiKkkPJxw&Sl`teELJiUf2#jq`_86DhM|?qI>WKWN^)(lJ}kyepTU^u#JY
zLvps6Cy#!g-!&q7Pwd@2`Eh=-5lUyI3PxK7hu5}P{kmB*YuK*2tUP3Vban96xe<!T
zDnrKp%)98|*e8&v>03m-c;Df?=Y!gBmpqg&@}I?G5PCkJ0T_&%tAyqrMn0bpaYyhh
znNmmc!dE{g>+~USzkPNM2|FGARKjvRDb<Zpn;rcR)wEAPc3%?@YT(gg*}gY>H;XPA
zQ`BN^`KG_g;Wd9yWQ%H1klMD0Gi18#l7K+9V+c%UgVo1;<EKPAOlBc}zH{{MG)(Z@
zO(iqRBW$ypgOs(y>Y0=JRn5zN!&fQt^{dURD$^2W-}B!j-D-^g@ZtUY=b7Wy_B};z
z#Z!|n%SiD~Z-oVtDU<RuukObkYCFvCJ8-D1ylxnTLnT2{#D$IHS1w=Kxt&gJ8x7;l
zZM1ybw$labK?x1P*UY$ab7NUG9!_%dPF-Ey7oer;28e8rr!w0yzE-*)m%<a^$kj`H
zY@h6C-}$+xzN_zyZ(P$=?HA7aUGE)wKCYbhx_Xc2)8bMNJ~4_mC1Kq+Zg{AZgg9Mv
zZZ$MWVD6m1fC^S2@IRmW=K$0N4V=iD%Ft%H_lB+#pi@s+FS20UGR-7GXPuaBSt>Pz
zsGZv@#31oJ%Ct*m(`vHUIp+OJ>cZh%wBT)=e0=tW;hhdCnRnKletL$xeHz@a=sW&A
z<<T{Aw&g34A)l2?8o@E*-`{+&Hh*Ynf1x&?)ekb<L@+TaPS{+|Hi&#^54LY~V;fbL
z-#a$;J6y;K_-%Y^0*sLcNzRyjJIJ%W-YYMk0w6XEu30xPaKk*pt&d8AR-kPOzT?81
z4%{gTs){9b{qn{Kammsb3g|3vEMCog$>Jd4$NdyA8|S_cW!($H?>qPT|ER7yQM-Iz
z=2=04b4>I@R%s7tP5!uRx!EV`N9$U*wdx2i@vj&3YpT?~AOgimY3F@n(gtgxB6AW1
zYM#lBVMBGC?pI7CIF7nm{$Q_ZjfN)E1<-`Kwl(CT3yQ8L&Hzb}ZPji?@R3*^A5`A*
z+ST~>BLdMRS_!+M26uX9sIlY;o(LX&#E9c3O1mj&U<mQqBA*ESBo<M(owv74idr6%
z8V0f5^Aa7J*j75%B$^F{`UjiEHYE01KBK=?>jkyghf5g)BOmm}q@CPNMvYrk{#s~%
zefZ}++XEvRpYOk?jfHyB$*HpGqImaL@_`R)2T}qiNIFzTF%yE5X7Q)yE4RI{g)R=P
z>dV4k__#fK*jo{K6sB6N<JQRuVyB@)AG~m908;Xc&-CIQ*v?#u2+lD;-QG|Jr&V1n
zHV<qXJ6((W9J;!?yw-kPa(uE1V5>!xpq`k3Ks7kD#X8D@bEjv(a%S^900pi9n0kSS
zl-XOIk#dC}i=(a8R3AlPh4O)9IR%o*Nl-l&f)`}jCI6Y*yq%B)yR%td4A{#h*8*?n
zTb*UT9pP<)a?e{`hgaj;!{lL``Dd!@jT?)({#}xOvwO^rcmYW2^GSFh7OI1L&Rp%Y
z2S79rNT#^vW9UZ<6CLjXG4TI1tI=5(E{RS;+1X()?NG-WUXTvnvW0ZiX-d@z8_!fZ
z#D#=}II8c;rVgYZ1!sjqIOZ)N_{xTWYH69W*~fEZ0naJz08yG(GZY{?fd8r2@s~*X
zo%9Dj*91biX94`?2|P!DD_|FY^lx^b&+P(R&+o8SZ%cpSma+>f1o<9;A1Q52V}673
zV=#EBYL8?m5W+5SUtF?JbT9d`^JsB%^9fOWQlP!Ped)5SJ3)2;4wc6ZABtS5gNe5Y
z{%O1^?f9+$=4*g`V`q*BaL8VtE4LrrN05q((qw+PQ+4(Giz47$g-U2SRkPmGe-VVm
zau(g1LWjl{bcwP4eQv4orPDFukyT!+;v^@L0AXPyOHSF80vuf)FGzCy2M68#SL5dw
zyax$Fy%Vr&FHd93=`OsUiv5w)q)D7Ih+;gL$cPX{%2J8^4oi>w!3-<IlKx}-<{R^g
zn{s4Zutha3x^P-3l%7MTVZF?K;FbP1c7-cx6DMuo0eF$+zqz5$=rbH`_Pu=morlM#
z14t*D4m<T0&TZQ`ys?_cjMIH|F?hS+oaH(LYmUu;T|5`pcX6r)iqlUR0x$a<y{1Qp
zMo?<S7`J>UEbP?4=d-oqBps9i3)YW<Ov%^rE&)|#@AqiGWT)^BYyUniA8+x_b>H>Z
zyLbyg!~Rm&Gf|Tc!GXk)%ss|ZVqY$!9$-?S^jSb+P$Ma%+rqtKI7y}7`|Dn)l7D;y
zJaK(=a3>(l4b$z2kc*_SqDV4MEtLt^rsU%luewbQ&z&zFOO3xQV7;5;|82N_*Ql?6
z<`zHJt$enwm&B1W2#uB6Q>q&*YJxu-Xf`~>MqSpTcgMb-^8cP!|L6xFg;`cBB<oDs
zr@AoS=|H4bpm9`yvkF;LSQgIa%}@jWh*apYQ5qqMV~+gR05$wJl+E>Ny>yj1(Ul)x
z!_FwQ!t3p!5x|kW1TH~0URnJaym?H`Bca6WZLfZgi^jGYwfs1E!KNYBc7#JJ|7q!V
zGRnCq?vDCD7axi}pahBg#ASI-IK?RI*zit#SLz@m4ziFzewl@29R|b>FdOzz4+z|=
z<=Eil2{(YCdzi;N`TCSf<6NsgIQF9N={{ctDa7=YnH@3YobvR(`|L1wX7iPYN*h1E
zN{DMG2!khE5#&V*$Li(<A|#3QwrFqKoDaGc_=S+bg9J2X<*oap%A~?{(hR)HBz_Vd
z^z_89l+><0p+g_0Xr0)yI=0c+Fa_-)Ytl3}9M$elICt&)de6YV^W=z<bU8zJXk9-l
z(v~(CoFs#i`rcjm2Ej-?5|JB38wwfRNNO2WT+}~&VVZ7;elNATI<UFlo06nF#GHha
zaq*n^<e8ewk<3Tdyqf{G0?r2H!58mUJVtWkqB;_5xV0#l``T56<(HaBlXnQqZ}2YM
zjfOcZo)vKRWtKJwXbm>z`mdjl<zcxWgba+-xqexFS|j=)iXleCq-njz7H*T;GvIsn
zXUIXl2`~x)5BB4f0yHV@sn)7}Q(2ylt!CT~`)Uu8oLq2cgu$#KXCNrV*xq5B`v95*
z%>iDgyws@-=ev{|v*~vx^L84&ar?JgHtX-W9c(GWddF?+A*r=&e^j|~<?}kAl9O;e
zHA`!5c>22Iyjvf!q6H*loQmy2F|98yO_hG@2B6%M7$d^-#}O?QbYZVTxQf_tyM6FT
zUda3S(b#Ndly~#TJ?S|U&4`5MQy1vac_pIFh<|qKHX1D<#wc~HUx4PD6XJ;+?M}$I
z<dVS17p|E?B#cPlh-!cx8&2~_a+pd!NXAPSB()S|f#cFoP#QC=hBh(N{G@V`6JNdu
z1<DZov&{?hVWGUd+(J|^ly}i$sr{ek42j!~)G0?FSB%q~$1sFNR$WNP&5v97nLH)0
z=<>z9wPZ~fus-1PX>=NtGF<>!Sjw~k;3^LH+`6etbOx7jwhKhGIgeh52n(CwSfii;
z+vhdcAyFz+UbftSt<OEhH{JLOxT4R|p>Y8mD%VSPY_{o2c8M4F+Cnw><uN>x867w3
z*(YQ(3@(&j>BdMEQe8?z1WZ`{QnU2?lKhYUaEA7U;VdC7Uzb{|_?B?(QLJ7Vk8<yU
z3?eFwGrE3BL?PX>C<%|^QCVO3;HE!Uj319v5%4<_h*TYGJGwPsNYdtmJ3tzNQjfaq
zMqEtq5b`Cx;x0Y2Vyw90Q<3)mHiAVmAf-qqYdab<B-V(S=&$OPfpUq7?!ruF0b?5{
z5EJNMG{D-Ys0!b~(%cU5Y9GQTkM7fQPHPk$fueQ~e^H`FD;Kz-T}?@hHcVa+l3nLM
zfS;>Z-Dr(YHPs|&?jy(|kCOZZw%gT*a_c`@0S^aDUI0y=&G(IU<R&W5H3&##A5Xfk
z`FIzPccoT}4hq~F<2d2&_Z`r!h!B3R$t8;rMxOncd;JosN{6Kslx=;!D5Ud7MiDB?
zMwL^Yka%T`bL;AA6=3uv+ts8p9l89WVU&r^W@y1>EXEJ(OLsN!YC1#790Q_0v0C)4
zs5|0DaAJ^NEA!kb;n2n5Q=zimA2CWHy3J;APy{AnP=*+=h)7U==YCx96|pA#$-%HN
z3dA8fq=F;~zoi$6^6>wfAlkPq9f2Z?mnu8=@qBMmpHL=95O=p;Te%atb_ivl^T?o}
z$+P3kHxafmtI4R5<Zq{~6o@VeLDJ}}%8&7CVaSu1)>Y)Sh0<_d9IWOG5F>fPU8JyG
z2Y<*{&~G7`xAd_6PBDCK?p=dHw$nfFYz--|AT-ZlTIX2t{IBgM$%TKk1w{u%nlHWe
z_dAlZzxPr-_mss?C;}-V9v&MTo2ozma^#!pW~m}ejz#giimZlhCPDZ+T)Cd(9~*Bd
z<|3<F-H0luz*BU6+>CPB2w!tkWN<W`)1?QDN-}RsdyX56p3b*RE53LAM%Hl>^%4RJ
z<X6q@vWWdBRaTxdi?O6fP=uS*g~j1URS>xQ(lkLpYNx5Nqp~!y&7k1!(uoMJl{-kp
zLCEfpnw&Iz8kD5S!o;5#0j8~``7OTt+ffB+EQNt2DAXBZ!Yy3b$1YW)MPfOQX_ek=
z63s2~g9eRh_-ca2>x{usdA!|y>%HU}$^3;qTN1N?QDhJTG;S9KU!(Rb;fU4ECIcH2
z+eG{c;QRS<f!4&|=gS?o%ZV&EdU8JQDg;e^btsqoAiZR?!a?g@H-h1K^I}6^T%9Z~
zlL>S>s`Ya8X10b0P;suH=af(uc$CJTt(CxGX62JI-#SxPoAEGHGZdsaFP(O4-Beoc
z_0SiKXdo+hY%GIugpapQP03KC?uo&GK;*0u3H!t#iH?=PByud96c?tt(MdqTI)O!i
zkhU5k8rq{mMjuAG6XVz>$-8yuFs<`qVN3`I4s9OH9adZpWy9A3tl@dcn(f}uhH<op
z|Hgh4&-gT8r;7V{Rd3)Jacdhxt*XBr0vdd&)I&f}R`g?m^5bRAdu_$ZKV3&Mt{}O0
zzR1td@|x_{$FzPiYvq@EO*-@>)%`owS;4U;y_(D~dSw#Ovw6)h%%Iw`*K~j1jd=;l
zT`59TbCVUVhA{P8I4`dv#j~PSUvKS^cn)Zrd4=zyWg>BZxZ1*d|BVkI=KNY`nr=&w
zpR0zxj#2Su(51BRQ9BS=_E#~VzF0bQN$qO4=`LH!tLO1x+DF8+9JItAR=DW@<IBBw
zEXH3a7Nzg!?s%1BM8bjE=K3`W+pgxttCZEp)Er^*wx$q)g~)(c2wgf!&&r*2e#j^(
zZQrE(A+lxy4^*b@MOr|;*0kR{&~!eG^2wlOC-5PUm#>;gn5&53mho3e{I~_Nrh3g)
zv6Dzy1X?ftNFlhxlzubF6*a_Aw6X9Y+lMMbNUH^U5h6}$VP$5%OARwSc}}~2>zy1V
z67T>_F%W{Sp(3*um<T>{17ivsrcGV_HOOrqJtyx-YZD+bkcntqZG=y1Ad>y`xNj~J
zyCH;I?)9C>_Nrwy>x5Khm?0Z!^|83=`FMC{wFexT;?mL|xFyh^M%~w^x?Vg}tQ>F2
zK5u+SQ+WSeNQ=9PV(Y<E153K6@V@u>ZDky}2R$noMu``}fWLe-)%vURjh`dd4o`{d
z2BZK@UhaZL3s(GY4r{KVYVrh{rXjQH{r*fQG|sWLAKPpYB?s=`wDnp{+|=MrSkfh-
zD<eT1!7#T6-yNJWm=+h3AT(Jl(&}`w9rY4puBGRY19e<iS9uTM`L}0-lEUo*!EH{^
z85$b8DTFT_w<XfjKP(fesE>~t$pfK|5EY%O(%OZcnHhO@h07-k^HVG0;OjsnLdrZi
zDeogGGTBkrHY5>t^vRbCdw<)}OhL|M6y<FG@_YsUzR0ZN;_-X>K8ji9g-zmT?kTV9
zIE6bBHcXw*BK8v-S`LDww$0U8un_W$KUA<UwV8N{y)*O%i>?(v4QK;?&h~#ORCqK#
zpdgp&PhfQ+B3sGE5%hET*6pW866NLPb7ZoojB1&=UsYT~C1DIT?^#MN9;XRb!WHna
z6J6+i&ZG$&9<O_vQI&Kh`Bt6(DEVG*A<~ki_VY@@kHy186LO73ZipdeZBDnCZ6%(c
zNE!zeI7J=$wS~92p<1x?bcNWpHkGCU%_OZ2m5;@3_T{)E0qbvWnnajnSb@rIm=~dt
zo}OMic;>bNa-89k^49%4cw5bq4jpg{iyLD(Z%}&7c=V?@srj*D2ZHvesr6fC97<ud
zXHni`q=b$LRCS5_sxllGCl<sjk~C@J85(g{@f^2brJHS986i&JD9gn#-{71kNRMmd
zg^(B&NoQz=--Of#E%k~l@u*EfOup7K_Bww2_}M*Bj?aQ4O_3KDCVM*0OtH6%*lXD8
z9s4ROqNNvsA*ws|6lLeW*T~v~ekGCc?lw{l^X1Eyxb>!*EiwqoJGw1C7aQ=~XpY3J
z2;hbe@-wNkDxvP`R2ujag-ANv@NsvhjEKP<LqbVJz6=BYft@MxnC#<Bd~<=}l0mo<
zk!ba?eJ*f|q_j0G7{T`id|}#9UM7K!%#T0rK*qf{7=BDy8<w2n(Rwgy;YZl}hZd<p
zQ3Guy>o1!^lRih}w<srytkf?<@)U^?*WfwupV+C+eSi)<TXwaXYil&&$bZuSSvCKq
z7|KEnX?;mLN)ZP9)4NiN8crFp>H|9XK$L`;R3E&v#>dh~4q_l2m?O7T5IG`r4(4gr
z#phNm#ZBlY@Dt?_CK!BE=ygN8HW9qWdb&H}2-3><(l9|N;bJ-`Zcn5m!O(q3H|acy
ze=wyV)2_a804E-4cDII;AQ7fC7sMR68|i`~IlU$3<7xH5_e-O*wngH;y>v&5X;piK
zAdJ#EX<^saUDL@&9lFX7agw*Q5H7EDZSKt(R*rQHtM<koBFz{CdGnkR%lDM9q=cl@
zhP^2*)TS?`qHPrW!Hf~D#~2#T!N76@JFZMWbtar$=a^P5D0=0tiXr$jocR3_2$?w^
z==Dd;m~03!8dI5*j38u<q!cz*t5*fHJ?1wuXOFb<Y&ZF1H@g3a)ewO;`QmjM^-eFg
zz0CSw`M4Phf0W)^zn@rPo4WNNrMsgRaR+HqHp4JZrsoRl`1#mZKoH4lSDtS8jC>^J
zV*|zr&kc0gW+*wO&69;pUPkG#6bff(oESRH@A0nEYhe^0J0hSOSt*zsxz;g$<E;fv
zXdtss#-nWEZq31nZ?2b%CW7Zw)Uo(c^i%~Mnow4pMgPwW=PO09U@`a=)AiAtImmn*
zS!c+UOPzpA6LGNvS3Faw;nS>RU+PAMr=7@dBho0Ju9}(=JIYV`p>^cdsuqSYy?$=#
zw=Z;@?*dt~f4|843=ttDE~jG2{98QJ6j_R=C`~R9dC42JaF3^t9~-v%8W1($(M$2C
z1c%^<69=8XsC?jh8hq|*($Sr(oXSff^jqHTc2z_m73jdz64<nojDsM7Q^-T%<CSn9
zRbH5v>Smpto-wD9*2xn$H62dVHQTe2H^Rp)m0$8QVEumPq;3AzA!1|#Kpc?Lm4@X)
zTtMm#>5`GfGIS`#?F?;%b=v0?LIov@VapWxPyto%S14R*;{fSavJP|fJv{)AtTM8=
zXdH4l!c>?GYEYFMf+Mf;MSjD}Q6$=*k+k!!;Ws1c{m@DZjB=dt8IA%h1Jf@kvlaf$
zJpX*kHk#LTfhf|@G8*y8S?WjhjLxyo7ii^l67L&ar@Y^&Ti!T)ZR^8XPGb-wy2z|^
zYdG)G$j94ujn(+kbPm+?Tbpj#6yfExyIJv<1+62c$ws~me(1*4i|ExRc^#o8W*G6(
zM!v#74-FVXUo<5@J@g9odS<L2K#PahbvZy|S57+ZV~G6B_qem?-T&}A&*66%ML5u+
zqHm~2#Q*I#j+0Tw){$oqw1+XU0x7C*)t03+MrWL1+(@-e5Ed537B6X9&j1)ACM(+>
z%A*`Ns%w8^>pRp@pgDFY^5PBbEhb|-B5hPbLBZ48&9|bW)Zj9A1$p)-s39Jr4X@0!
z0z<aFfXhM0YxtL)^KVbl2cIRh)+`!vmx&TNbiFdtryVfy!rWIsn*eS~Y(9XzJju?^
z?$z(}t?Twal?UMy=kUKhz~R>e7SV{EER;w)zmJjblK}S@ozJa^S%|0Y@s*q$S?sVb
z1}0sobNm#;){BjAhMSBsgo$ezG^^5xJwXc<%jc*rV}!th8ouy^1ULIPF@@T^H)Ia)
zuMwdVFn{6V+X9qmA?1!(LL=%pD9D5=JAS_0NZ=Z}paVvva~GoY(>)&F2FTIw9>uCp
zNd({8l0sD;rM-Lysd^oI>)29V+cY4&`D~0jPBc_L02-k{yuEk<Y6Fa46RP`6U%rLf
z`R|j(14Yob=M*>$3|?eC!M=6XGGgchEFmX>*BMor`}9yxwJbqX%~=jY^rI<m)UFlO
z`UWRtHK*7mJ3w}eu8bMRDzsNzyV~Yz>rHvUv2{xLwJH&4;`f$geA3d=hU@z?cvqrF
zTf7(B&Dh3$C2pyeGl#!E4*__^LYr>Uxq1dgPzaYx3fp|M28nSdv`p;-sqLo}UA7Pl
zX0K<b4{Uw*91`<<d~f(~^Z4hKs!74!jjcQ5_;%~N{qrhk(b+~0+_mGk@BHVFuIs{&
zw737;kN8M4^nbsut#7WJHVE^Dur*Bh``rvsBMAJz{)i5(wBujKrp6~3&>Iv9cK)4!
z;d%^YLz6LTZVOQTSu@K^S~Vq*c)q8)V*_VV=sDHf1%8Ik_Dv+hsm&|2TZZ-bU#rmJ
zq9ib1?WHCx79|(S6BD5L&I7klb0`II9cg~}WhwF7D_EJQshj~o-8lmQzsetWSQu?(
z8cWpw*ZIZML3Rrp@GPL~O_T1xUweTObq{a}lYlkqcN%Ew;BZ8HJ3F}ujY(+QR&Z^)
zq61_q=KyIbhQfzVzqzQyPAc63@C20wQ2h4DBMU^cUcdkuQCxm1LzAvm@F^hX@0{9-
z7yLc9Ob5fYF{g{&9t)3aP#Lj85F4C!amfHY_zl!D4rw9@e6aVxN#bP}&@$OTDldIV
z-1tZk!hOISH+ANnoBVK6)l<Czb{I(59gaW;nlhj^vOz>+3N5dW)^T6$wE+$5b1>~Y
zZg=<!&EHeHWk!hVd|?JjqoI|bK+j3#SilRl1ImHM3@=i_WC?1F!mN#YVCnHzR^swg
zz~y41qRv5`Ng;H{=z<b}?;uz#h7;;E<c62aRJ^`F(4|lTq-<+SKXg(vB*|Ws+`8!h
z`s^UO03}Eg-11+%I8!g>Q8Ahn+&e(s@$g;!9V>g>%H9IHclPIFit^$|Bd;GbHa*aY
zDOhK=8|oRd0hN@<(9G?C;z|BJWafX)p?|)kfiaEa0%lfWb1+yk>-x%Ek@u`^8Bhbg
zZ@{#}11~sTv7Dfr9dVLS!zxP<z;yv=h~xR?=m9-`&T#@+5{zkGm-)9xGm6sgMw6WK
zk#az1OTB4szQQDk)JAz1obPx?EwF?t%3|QKdV(cijf(VK=qY-;U)-FejlrHgd38+g
z^y$;36S1d|jdRs`G%-H^vL_k+;XwSghk&Ardp553`Eoy0Vx0#G`Q!j)prRKjsd#C}
zP^gb;T3-_RJgU4Bmu4R7Hx2Cqi_0%gb{9@QzS`fYfyHCy#K_0~p$-22tN<tG23Fi|
z=?FL!%UtAe)w3cU-pj(u+IMs2q~tf(=J$Ny?)dwE|1+uE0v_-KtBf>~c9i<p-Csou
yBrH8?>aW+l<?INu2CDPFMfd-CN&p@65C2Dob(!;Xe($!yAFP(XW{&#VTmJ`m`_S0{

literal 0
HcmV?d00001


From b7dab3b8ab3155d57ed3888d6657654d8d459143 Mon Sep 17 00:00:00 2001
From: tau3 <smr.oznob@gmail.com>
Date: Wed, 19 Feb 2020 15:21:27 +0000
Subject: [PATCH 16/74] consensus: reduce log severity for
 ErrVoteNonDeterministicSignature (#4431)

from error to debug

Closes #3583
---
 consensus/state.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/consensus/state.go b/consensus/state.go
index 05c70b652..d543c9c84 100644
--- a/consensus/state.go
+++ b/consensus/state.go
@@ -1661,6 +1661,8 @@ func (cs *State) tryAddVote(vote *types.Vote, peerID p2p.ID) (bool, error) {
 			}
 			cs.evpool.AddEvidence(voteErr.DuplicateVoteEvidence)
 			return added, err
+		} else if err == types.ErrVoteNonDeterministicSignature {
+			cs.Logger.Debug("Vote has non-deterministic signature", "err", err)
 		} else {
 			// Either
 			// 1) bad peer OR

From 7ab81a7fdd8ed266cb4ccd49abd0d72df4d92f52 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Wed, 19 Feb 2020 17:26:23 +0100
Subject: [PATCH 17/74] deps: bump github.com/stretchr/testify from 1.4.0 to
 1.5.0 (#4435)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.4.0...v1.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
 go.mod | 2 +-
 go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 7b669b1db..b828c3c4f 100644
--- a/go.mod
+++ b/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
 	github.com/spf13/cobra v0.0.3
 	github.com/spf13/viper v1.6.2
-	github.com/stretchr/testify v1.4.0
+	github.com/stretchr/testify v1.5.0
 	github.com/tendermint/go-amino v0.14.1
 	github.com/tendermint/tm-db v0.4.0
 	golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413
diff --git a/go.sum b/go.sum
index e606cd3fa..ff0cf1d88 100644
--- a/go.sum
+++ b/go.sum
@@ -374,6 +374,8 @@ github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXf
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0 h1:2E4SXV/wtOkTonXsotYi4li6zVWxYlZuYNCXe9XRJyk=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.5.0 h1:DMOzIV76tmoDNE9pX6RSN0aDtCYeCg5VueieJaAo1uw=
+github.com/stretchr/testify v1.5.0/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/subosito/gotenv v1.2.0 h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=
 github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
 github.com/syndtr/goleveldb v1.0.1-0.20190923125748-758128399b1d h1:gZZadD8H+fF+n9CmNhYL1Y0dJB+kLOmKd7FbPJLeGHs=

From 24c8b351c671bd5d12ed4dce405d1858cc2532f2 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Thu, 20 Feb 2020 11:34:18 +0100
Subject: [PATCH 18/74] rpc: fix TxSearch test nits (#4446)

---
 rpc/client/rpc_test.go | 42 +++++++++++++++++++-----------------------
 1 file changed, 19 insertions(+), 23 deletions(-)

diff --git a/rpc/client/rpc_test.go b/rpc/client/rpc_test.go
index c1418c816..90612d5e0 100644
--- a/rpc/client/rpc_test.go
+++ b/rpc/client/rpc_test.go
@@ -18,7 +18,6 @@ import (
 
 	"github.com/tendermint/tendermint/crypto/ed25519"
 	"github.com/tendermint/tendermint/crypto/tmhash"
-	tmbytes "github.com/tendermint/tendermint/libs/bytes"
 	"github.com/tendermint/tendermint/libs/log"
 	tmmath "github.com/tendermint/tendermint/libs/math"
 	mempl "github.com/tendermint/tendermint/mempool"
@@ -419,50 +418,45 @@ func TestTxSearch(t *testing.T) {
 	c := getHTTPClient()
 
 	// first we broadcast a few txs
-	var tx []byte
-	var txHeight int64
-	var txHash tmbytes.HexBytes
 	for i := 0; i < 10; i++ {
-		_, _, tx = MakeTxKV()
-		res, err := c.BroadcastTxCommit(tx)
+		_, _, tx := MakeTxKV()
+		_, err := c.BroadcastTxCommit(tx)
 		require.NoError(t, err)
-		txHeight = res.Height
-		txHash = res.Hash
 	}
 
-	// Since we're not using an isolated test server, we'll have lingering transactions
+	// since we're not using an isolated test server, we'll have lingering transactions
 	// from other tests as well
 	result, err := c.TxSearch("tx.height >= 0", true, 1, 100, "asc")
 	require.NoError(t, err)
 	txCount := len(result.Txs)
 
+	// pick out the last tx to have something to search for in tests
+	find := result.Txs[len(result.Txs)-1]
 	anotherTxHash := types.Tx("a different tx").Hash()
 
 	for i, c := range GetClients() {
 		t.Logf("client %d", i)
 
 		// now we query for the tx.
-		// since there's only one tx, we know index=0.
-		result, err := c.TxSearch(fmt.Sprintf("tx.hash='%v'", txHash), true, 1, 30, "asc")
+		result, err := c.TxSearch(fmt.Sprintf("tx.hash='%v'", find.Hash), true, 1, 30, "asc")
 		require.Nil(t, err)
 		require.Len(t, result.Txs, 1)
-		require.Equal(t, txHash, result.Txs[0].Hash)
+		require.Equal(t, find.Hash, result.Txs[0].Hash)
 
 		ptx := result.Txs[0]
-		assert.EqualValues(t, txHeight, ptx.Height)
-		assert.EqualValues(t, tx, ptx.Tx)
+		assert.EqualValues(t, find.Height, ptx.Height)
+		assert.EqualValues(t, find.Tx, ptx.Tx)
 		assert.Zero(t, ptx.Index)
 		assert.True(t, ptx.TxResult.IsOK())
-		assert.EqualValues(t, txHash, ptx.Hash)
+		assert.EqualValues(t, find.Hash, ptx.Hash)
 
 		// time to verify the proof
-		proof := ptx.Proof
-		if assert.EqualValues(t, tx, proof.Data) {
-			assert.NoError(t, proof.Proof.Verify(proof.RootHash, txHash))
+		if assert.EqualValues(t, find.Tx, ptx.Proof.Data) {
+			assert.NoError(t, ptx.Proof.Proof.Verify(ptx.Proof.RootHash, find.Hash))
 		}
 
 		// query by height
-		result, err = c.TxSearch(fmt.Sprintf("tx.height=%d", txHeight), true, 1, 30, "asc")
+		result, err = c.TxSearch(fmt.Sprintf("tx.height=%d", find.Height), true, 1, 30, "asc")
 		require.Nil(t, err)
 		require.Len(t, result.Txs, 1)
 
@@ -506,10 +500,12 @@ func TestTxSearch(t *testing.T) {
 		}
 
 		// check pagination
-		seen := map[int64]bool{}
-		maxHeight := int64(0)
-		perPage := 3
-		pages := int(math.Ceil(float64(txCount) / float64(perPage)))
+		var (
+			seen      = map[int64]bool{}
+			maxHeight int64
+			perPage   = 3
+			pages     = int(math.Ceil(float64(txCount) / float64(perPage)))
+		)
 		for page := 1; page <= pages; page++ {
 			result, err = c.TxSearch("tx.height >= 1", false, page, perPage, "asc")
 			require.NoError(t, err)

From d00384f0f511e58c344213c16ad3bb4fec42098a Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Thu, 20 Feb 2020 13:02:24 +0100
Subject: [PATCH 19/74] build(deps): bump github.com/stretchr/testify from
 1.5.0 to 1.5.1 (#4441)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.5.0 to 1.5.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.5.0...v1.5.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
 go.mod | 2 +-
 go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index b828c3c4f..c0cfe34e7 100644
--- a/go.mod
+++ b/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
 	github.com/spf13/cobra v0.0.3
 	github.com/spf13/viper v1.6.2
-	github.com/stretchr/testify v1.5.0
+	github.com/stretchr/testify v1.5.1
 	github.com/tendermint/go-amino v0.14.1
 	github.com/tendermint/tm-db v0.4.0
 	golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413
diff --git a/go.sum b/go.sum
index ff0cf1d88..9d0655c22 100644
--- a/go.sum
+++ b/go.sum
@@ -376,6 +376,8 @@ github.com/stretchr/testify v1.4.0 h1:2E4SXV/wtOkTonXsotYi4li6zVWxYlZuYNCXe9XRJy
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.5.0 h1:DMOzIV76tmoDNE9pX6RSN0aDtCYeCg5VueieJaAo1uw=
 github.com/stretchr/testify v1.5.0/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/subosito/gotenv v1.2.0 h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=
 github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
 github.com/syndtr/goleveldb v1.0.1-0.20190923125748-758128399b1d h1:gZZadD8H+fF+n9CmNhYL1Y0dJB+kLOmKd7FbPJLeGHs=

From 8010f3b4df70e0a185871cdc34ec9283b17ea09b Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Thu, 20 Feb 2020 13:31:59 +0100
Subject: [PATCH 20/74] build(deps): bump github.com/spf13/cobra from 0.0.3 to
 0.0.6 (#4440)

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 0.0.3 to 0.0.6.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v0.0.3...v0.0.6)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
 go.mod | 2 +-
 go.sum | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index c0cfe34e7..52d2d285d 100644
--- a/go.mod
+++ b/go.mod
@@ -21,7 +21,7 @@ require (
 	github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a
 	github.com/rs/cors v1.7.0
 	github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
-	github.com/spf13/cobra v0.0.3
+	github.com/spf13/cobra v0.0.6
 	github.com/spf13/viper v1.6.2
 	github.com/stretchr/testify v1.5.1
 	github.com/tendermint/go-amino v0.14.1
diff --git a/go.sum b/go.sum
index 9d0655c22..3146cb41f 100644
--- a/go.sum
+++ b/go.sum
@@ -66,6 +66,7 @@ github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f/go.mod h1:E3G3o1h8I7cfc
 github.com/cosmos/go-bip39 v0.0.0-20180819234021-555e2067c45d h1:49RLWk1j44Xu4fjHb6JFYmeUnDORVwHNkDxaQ0ctCVU=
 github.com/cosmos/go-bip39 v0.0.0-20180819234021-555e2067c45d/go.mod h1:tSxLoYXyBmiFeKpvmq4dzayMdCjCnu8uqmCysIGBT2Y=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
 github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY=
 github.com/davecgh/go-spew v0.0.0-20171005155431-ecdeabc65495/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -223,6 +224,7 @@ github.com/libp2p/go-buffer-pool v0.0.2/go.mod h1:MvaB6xw5vOrDl8rYZGLFdKAuk/hRoR
 github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
 github.com/lightstep/lightstep-tracer-go v0.18.1/go.mod h1:jlF1pusYV4pidLvZ+XD0UBX0ZE6WURAspgAczcDHrL4=
 github.com/lyft/protoc-gen-validate v0.0.13/go.mod h1:XbGvPuh87YZc5TdIa2/I4pLk0QoUACkjt2znoq26NVQ=
+github.com/magiconair/properties v1.8.0/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
 github.com/magiconair/properties v1.8.1 h1:ZC2Vc7/ZFkGmsVC9KvOjumD+G5lXy2RtTKyzRKO2BQ4=
 github.com/magiconair/properties v1.8.1/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ=
 github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
@@ -236,6 +238,7 @@ github.com/mimoo/StrobeGo v0.0.0-20181016162300-f8f6d4d2b643 h1:hLDRPB66XQT/8+wG
 github.com/mimoo/StrobeGo v0.0.0-20181016162300-f8f6d4d2b643/go.mod h1:43+3pMjjKimDBf5Kr4ZFNGbLql1zKkbImw+fZbw3geM=
 github.com/mitchellh/cli v1.0.0/go.mod h1:hNIlj7HEI86fIcpObd7a0FcrxTWetlwJDGcceTlRvqc=
 github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
+github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
 github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=
 github.com/mitchellh/iochan v1.0.0/go.mod h1:JwYml1nuB7xOzsp52dPpHFffvOCDupsG0QubkSMEySY=
@@ -356,11 +359,14 @@ github.com/spf13/cast v1.3.0 h1:oget//CVOEoFewqQxwr0Ej5yjygnqGkvggSE/gB35Q8=
 github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
 github.com/spf13/cobra v0.0.3 h1:ZlrZ4XsMRm04Fr5pSFxBgfND2EBVa1nLpiy1stUsX/8=
 github.com/spf13/cobra v0.0.3/go.mod h1:1l0Ry5zgKvJasoi3XT1TypsSe7PqH0Sj9dhYf7v3XqQ=
+github.com/spf13/cobra v0.0.6 h1:breEStsVwemnKh2/s6gMvSdMEkwW0sK8vGStnlVBMCs=
+github.com/spf13/cobra v0.0.6/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/jwalterweatherman v1.0.0 h1:XHEdyB+EcvlqZamSM4ZOMGlc93t6AcsBEu9Gc1vn7yk=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/pflag v1.0.1/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/spf13/pflag v1.0.3 h1:zPAT6CGy6wXeQ7NtTnaTerfKOsV6V6F8agHXFiazDkg=
 github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
+github.com/spf13/viper v1.4.0/go.mod h1:PTJ7Z/lr49W6bUbkmS1V3by4uWynFiR9p7+dSq/yZzE=
 github.com/spf13/viper v1.6.2 h1:7aKfF+e8/k68gda3LOjo5RxiUqddoFxVq4BKBPrxk5E=
 github.com/spf13/viper v1.6.2/go.mod h1:t3iDnF5Jlj76alVNuyFBk5oUMCvsrkbvZK0WQdfDi5k=
 github.com/streadway/amqp v0.0.0-20190404075320-75d898a42a94/go.mod h1:AZpEONHx3DKn8O/DFsRAY58/XVQiIPMTMB1SddzLXVw=

From 8f48c49543428ef628097654c2da7b53fd94d64d Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Thu, 20 Feb 2020 13:43:40 +0100
Subject: [PATCH 21/74] Fix some golangci-lint warnings (#4448)

---
 .golangci.yml                 |  2 +-
 abci/tests/test_app/main.go   |  3 ++-
 consensus/state.go            |  1 +
 crypto/secp256k1/secp256k1.go |  4 +---
 libs/autofile/group.go        |  6 +++---
 lite/helpers.go               |  4 ++--
 node/node.go                  |  2 +-
 p2p/switch.go                 |  4 ----
 p2p/test_util.go              |  2 +-
 rpc/core/routes.go            |  1 +
 types/priv_validator.go       | 10 +++++-----
 types/protobuf.go             |  1 +
 12 files changed, 19 insertions(+), 21 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index ce0925357..dc934f43d 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -23,7 +23,7 @@ linters:
     - interfacer
     - lll
     - misspell
-    - maligned
+    # - maligned
     - nakedret
     - prealloc
     - scopelint
diff --git a/abci/tests/test_app/main.go b/abci/tests/test_app/main.go
index ae47ac6f9..ca298d7e2 100644
--- a/abci/tests/test_app/main.go
+++ b/abci/tests/test_app/main.go
@@ -53,7 +53,8 @@ func testCounter() {
 	}
 
 	fmt.Printf("Running %s test with abci=%s\n", abciApp, abciType)
-	cmd := exec.Command("bash", "-c", fmt.Sprintf("abci-cli %s", abciApp))
+	subCommand := fmt.Sprintf("abci-cli %s", abciApp)
+	cmd := exec.Command("bash", "-c", subCommand)
 	cmd.Stdout = os.Stdout
 	if err := cmd.Start(); err != nil {
 		log.Fatalf("starting %q err: %v", abciApp, err)
diff --git a/consensus/state.go b/consensus/state.go
index d543c9c84..cd25aa32f 100644
--- a/consensus/state.go
+++ b/consensus/state.go
@@ -1644,6 +1644,7 @@ func (cs *State) tryAddVote(vote *types.Vote, peerID p2p.ID) (bool, error) {
 		// If the vote height is off, we'll just ignore it,
 		// But if it's a conflicting sig, add it to the cs.evpool.
 		// If it's otherwise invalid, punish peer.
+		// nolint: gocritic
 		if err == ErrVoteHeightMismatch {
 			return added, err
 		} else if voteErr, ok := err.(*types.ErrVoteConflictingVotes); ok {
diff --git a/crypto/secp256k1/secp256k1.go b/crypto/secp256k1/secp256k1.go
index fc64a0b0f..26dcead59 100644
--- a/crypto/secp256k1/secp256k1.go
+++ b/crypto/secp256k1/secp256k1.go
@@ -8,12 +8,10 @@ import (
 	"io"
 	"math/big"
 
-	"golang.org/x/crypto/ripemd160"
-
 	secp256k1 "github.com/btcsuite/btcd/btcec"
+	"golang.org/x/crypto/ripemd160" // nolint: staticcheck // necessary for Bitcoin address format
 
 	amino "github.com/tendermint/go-amino"
-
 	"github.com/tendermint/tendermint/crypto"
 )
 
diff --git a/libs/autofile/group.go b/libs/autofile/group.go
index ca9f57003..5d5822ebc 100644
--- a/libs/autofile/group.go
+++ b/libs/autofile/group.go
@@ -77,7 +77,7 @@ type Group struct {
 
 // OpenGroup creates a new Group with head at headPath. It returns an error if
 // it fails to open head file.
-func OpenGroup(headPath string, groupOptions ...func(*Group)) (g *Group, err error) {
+func OpenGroup(headPath string, groupOptions ...func(*Group)) (*Group, error) {
 	dir, err := filepath.Abs(filepath.Dir(headPath))
 	if err != nil {
 		return nil, err
@@ -87,7 +87,7 @@ func OpenGroup(headPath string, groupOptions ...func(*Group)) (g *Group, err err
 		return nil, err
 	}
 
-	g = &Group{
+	g := &Group{
 		ID:                 "group:" + head.ID,
 		Head:               head,
 		headBuf:            bufio.NewWriterSize(head, 4096*10),
@@ -109,7 +109,7 @@ func OpenGroup(headPath string, groupOptions ...func(*Group)) (g *Group, err err
 	gInfo := g.readGroupInfo()
 	g.minIndex = gInfo.MinIndex
 	g.maxIndex = gInfo.MaxIndex
-	return
+	return g, nil
 }
 
 // GroupCheckDuration allows you to overwrite default groupCheckDuration.
diff --git a/lite/helpers.go b/lite/helpers.go
index 18a64aa25..29dd50b5b 100644
--- a/lite/helpers.go
+++ b/lite/helpers.go
@@ -42,7 +42,7 @@ func (pkz privKeys) Extend(n int) privKeys {
 }
 
 // GenSecpPrivKeys produces an array of secp256k1 private keys to generate commits.
-func GenSecpPrivKeys(n int) privKeys {
+func genSecpPrivKeys(n int) privKeys {
 	res := make(privKeys, n)
 	for i := range res {
 		res[i] = secp256k1.GenPrivKey()
@@ -52,7 +52,7 @@ func GenSecpPrivKeys(n int) privKeys {
 
 // ExtendSecp adds n more secp256k1 keys (to remove, just take a slice).
 func (pkz privKeys) ExtendSecp(n int) privKeys {
-	extra := GenSecpPrivKeys(n)
+	extra := genSecpPrivKeys(n)
 	return append(pkz, extra...)
 }
 
diff --git a/node/node.go b/node/node.go
index 104e572fb..485709120 100644
--- a/node/node.go
+++ b/node/node.go
@@ -6,7 +6,7 @@ import (
 	"fmt"
 	"net"
 	"net/http"
-	_ "net/http/pprof"
+	_ "net/http/pprof" // nolint: gosec // securely exposed on separate, optional port
 	"os"
 	"strings"
 	"time"
diff --git a/p2p/switch.go b/p2p/switch.go
index bc675cdb8..3f9325808 100644
--- a/p2p/switch.go
+++ b/p2p/switch.go
@@ -584,10 +584,6 @@ func (sw *Switch) AddUnconditionalPeerIDs(ids []string) error {
 	return nil
 }
 
-func (sw *Switch) isPeerPersistentFn() func(*NetAddress) bool {
-	return sw.IsPeerPersistent
-}
-
 func (sw *Switch) IsPeerPersistent(na *NetAddress) bool {
 	for _, pa := range sw.persistentPeersAddrs {
 		if pa.Equals(na) {
diff --git a/p2p/test_util.go b/p2p/test_util.go
index f592f5f2f..045dc4c7e 100644
--- a/p2p/test_util.go
+++ b/p2p/test_util.go
@@ -34,7 +34,7 @@ func AddPeerToSwitchPeerSet(sw *Switch, peer Peer) {
 	sw.peers.Add(peer)
 }
 
-func CreateRandomPeer(outbound bool) *peer {
+func CreateRandomPeer(outbound bool) Peer {
 	addr, netAddr := CreateRoutableAddr()
 	p := &peer{
 		peerConn: peerConn{
diff --git a/rpc/core/routes.go b/rpc/core/routes.go
index 42a57456a..aa0403f87 100644
--- a/rpc/core/routes.go
+++ b/rpc/core/routes.go
@@ -6,6 +6,7 @@ import (
 
 // TODO: better system than "unsafe" prefix
 // NOTE: Amino is registered in rpc/core/types/codec.go.
+
 var Routes = map[string]*rpc.RPCFunc{
 	// subscribe/unsubscribe are reserved for websocket events.
 	"subscribe":       rpc.NewWSRPCFunc(Subscribe, "query"),
diff --git a/types/priv_validator.go b/types/priv_validator.go
index 45d0a67b5..bd35973ca 100644
--- a/types/priv_validator.go
+++ b/types/priv_validator.go
@@ -107,23 +107,23 @@ func (pv *MockPV) DisableChecks() {
 	// as MockPV has no safety checks at all.
 }
 
-type erroringMockPV struct {
+type ErroringMockPV struct {
 	*MockPV
 }
 
 var ErroringMockPVErr = errors.New("erroringMockPV always returns an error")
 
 // Implements PrivValidator.
-func (pv *erroringMockPV) SignVote(chainID string, vote *Vote) error {
+func (pv *ErroringMockPV) SignVote(chainID string, vote *Vote) error {
 	return ErroringMockPVErr
 }
 
 // Implements PrivValidator.
-func (pv *erroringMockPV) SignProposal(chainID string, proposal *Proposal) error {
+func (pv *ErroringMockPV) SignProposal(chainID string, proposal *Proposal) error {
 	return ErroringMockPVErr
 }
 
 // NewErroringMockPV returns a MockPV that fails on each signing request. Again, for testing only.
-func NewErroringMockPV() *erroringMockPV {
-	return &erroringMockPV{&MockPV{ed25519.GenPrivKey(), false, false}}
+func NewErroringMockPV() *ErroringMockPV {
+	return &ErroringMockPV{&MockPV{ed25519.GenPrivKey(), false, false}}
 }
diff --git a/types/protobuf.go b/types/protobuf.go
index c1063ac94..52815593f 100644
--- a/types/protobuf.go
+++ b/types/protobuf.go
@@ -27,6 +27,7 @@ const (
 )
 
 // TODO: Make non-global by allowing for registration of more pubkey types
+
 var ABCIPubKeyTypesToAminoNames = map[string]string{
 	ABCIPubKeyTypeEd25519:   ed25519.PubKeyAminoName,
 	ABCIPubKeyTypeSr25519:   sr25519.PubKeyAminoName,

From 2c7af01cb67b07a481779fbafb2544027725f9a2 Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Thu, 20 Feb 2020 15:45:11 +0100
Subject: [PATCH 22/74] lite2: return already verified headers and verify
 earlier headers (#4428)

closes #4413 and #4419

When VerifyHeaderAtHeight() is called, TrustedHeader is initially run to check if the header has already been verified and returns the Header.

If the new header height is less than the lite clients latestTrustedHeader height, than backwards verification is performed else either sequence or bisection

Refactored a test to reflect the changes

* use trustedHeader func for already verified Headers

* remove fetch missing header from TrustedHeader

* check for already trusted Header in VerifyHeaderAtHeight

* replace updateTrustedHeaderAndVals to updateTrustedHeaderAndNextVals

* rename trustedHeader and trustedNextVals

* refactored backwards and included it in VerifyHeader

* cleaned up test to match changes

* lite2: fixes after my own review

Refs https://github.com/tendermint/tendermint/pull/4428#pullrequestreview-361730169

* fix ineffectual assignment

* lite2: check that header exists in VerifyHeader

* extract function

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 lite2/client.go      | 213 ++++++++++++++++++++++---------------------
 lite2/client_test.go |   8 +-
 2 files changed, 111 insertions(+), 110 deletions(-)

diff --git a/lite2/client.go b/lite2/client.go
index 2c487f9c9..61559a694 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -121,9 +121,9 @@ type Client struct {
 	// Where trusted headers are stored.
 	trustedStore store.Store
 	// Highest trusted header from the store (height=H).
-	trustedHeader *types.SignedHeader
+	latestTrustedHeader *types.SignedHeader
 	// Highest next validator set from the store (height=H+1).
-	trustedNextVals *types.ValidatorSet
+	latestTrustedNextVals *types.ValidatorSet
 
 	// See UpdatePeriod option
 	updatePeriod time.Duration
@@ -164,13 +164,13 @@ func NewClient(
 		return nil, err
 	}
 
-	if c.trustedHeader != nil {
+	if c.latestTrustedHeader != nil {
 		if err := c.checkTrustedHeaderUsingOptions(trustOptions); err != nil {
 			return nil, err
 		}
 	}
 
-	if c.trustedHeader == nil || c.trustedHeader.Height < trustOptions.Height {
+	if c.latestTrustedHeader == nil || c.latestTrustedHeader.Height < trustOptions.Height {
 		if err := c.initializeWithTrustOptions(trustOptions); err != nil {
 			return nil, err
 		}
@@ -253,8 +253,8 @@ func (c *Client) restoreTrustedHeaderAndNextVals() error {
 			return errors.Wrap(err, "can't get last trusted next validators")
 		}
 
-		c.trustedHeader = trustedHeader
-		c.trustedNextVals = trustedNextVals
+		c.latestTrustedHeader = trustedHeader
+		c.latestTrustedNextVals = trustedNextVals
 
 		c.logger.Debug("Restored trusted header and next vals", lastHeight)
 	}
@@ -283,24 +283,24 @@ func (c *Client) restoreTrustedHeaderAndNextVals() error {
 func (c *Client) checkTrustedHeaderUsingOptions(options TrustOptions) error {
 	var primaryHash []byte
 	switch {
-	case options.Height > c.trustedHeader.Height:
-		h, err := c.signedHeaderFromPrimary(c.trustedHeader.Height)
+	case options.Height > c.latestTrustedHeader.Height:
+		h, err := c.signedHeaderFromPrimary(c.latestTrustedHeader.Height)
 		if err != nil {
 			return err
 		}
 		primaryHash = h.Hash()
-	case options.Height == c.trustedHeader.Height:
+	case options.Height == c.latestTrustedHeader.Height:
 		primaryHash = options.Hash
-	case options.Height < c.trustedHeader.Height:
+	case options.Height < c.latestTrustedHeader.Height:
 		c.logger.Info("Client initialized with old header (trusted is more recent)",
 			"old", options.Height,
-			"trustedHeight", c.trustedHeader.Height,
-			"trustedHash", hash2str(c.trustedHeader.Hash()))
+			"trustedHeight", c.latestTrustedHeader.Height,
+			"trustedHash", hash2str(c.latestTrustedHeader.Hash()))
 
 		action := fmt.Sprintf(
 			"Rollback to %d (%X)? Note this will remove newer headers up to %d (%X)",
 			options.Height, options.Hash,
-			c.trustedHeader.Height, c.trustedHeader.Hash())
+			c.latestTrustedHeader.Height, c.latestTrustedHeader.Hash())
 		if c.confirmationFn(action) {
 			// remove all the headers (options.Height, trustedHeader.Height]
 			c.cleanup(options.Height + 1)
@@ -314,13 +314,13 @@ func (c *Client) checkTrustedHeaderUsingOptions(options TrustOptions) error {
 		primaryHash = options.Hash
 	}
 
-	if !bytes.Equal(primaryHash, c.trustedHeader.Hash()) {
+	if !bytes.Equal(primaryHash, c.latestTrustedHeader.Hash()) {
 		c.logger.Info("Prev. trusted header's hash (h1) doesn't match hash from primary provider (h2)",
-			"h1", c.trustedHeader.Hash(), "h1", primaryHash)
+			"h1", hash2str(c.latestTrustedHeader.Hash()), "h2", hash2str(primaryHash))
 
 		action := fmt.Sprintf(
 			"Prev. trusted header's hash %X doesn't match hash %X from primary provider. Remove all the stored headers?",
-			c.trustedHeader.Hash(), primaryHash)
+			c.latestTrustedHeader.Hash(), primaryHash)
 		if c.confirmationFn(action) {
 			err := c.Cleanup()
 			if err != nil {
@@ -449,14 +449,7 @@ func (c *Client) TrustedHeader(height int64, now time.Time) (*types.SignedHeader
 
 	// 2) Get header from store.
 	h, err := c.trustedStore.SignedHeader(height)
-	switch {
-	case errors.Is(err, store.ErrSignedHeaderNotFound):
-		// 2.1) If not found, try to fetch header from primary.
-		h, err = c.fetchMissingTrustedHeader(height, now)
-		if err != nil {
-			return nil, err
-		}
-	case err != nil:
+	if err != nil {
 		return nil, err
 	}
 
@@ -523,15 +516,25 @@ func (c *Client) ChainID() string {
 	return c.chainID
 }
 
-// VerifyHeaderAtHeight fetches the header and validators at the given height
-// and calls VerifyHeader.
+// VerifyHeaderAtHeight fetches header and validators at the given height
+// and calls VerifyHeader. It returns header immediately if such exists in
+// trustedStore (no verification is needed).
 //
-// If the trusted header is more recent than one here, an error is returned.
-// If the header is not found by the primary provider,
-// provider.ErrSignedHeaderNotFound error is returned.
+// It returns provider.ErrSignedHeaderNotFound if header is not found by
+// primary.
+// It returns ErrOldHeaderExpired if header expired.
 func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error) {
-	if c.trustedHeader.Height >= height {
-		return nil, errors.Errorf("header at more recent height #%d exists", c.trustedHeader.Height)
+	if height <= 0 {
+		return nil, errors.New("negative or zero height")
+	}
+
+	h, err := c.TrustedHeader(height, now)
+	switch err.(type) {
+	case nil: // Return already trusted header
+		c.logger.Info("Header has already been verified", "height", height, "hash", hash2str(h.Hash()))
+		return h, nil
+	case ErrOldHeaderExpired:
+		return nil, err
 	}
 
 	// Request the header and the vals.
@@ -540,10 +543,12 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 		return nil, err
 	}
 
-	return newHeader, c.VerifyHeader(newHeader, newVals, now)
+	return newHeader, c.verifyHeader(newHeader, newVals, now)
 }
 
-// VerifyHeader verifies new header against the trusted state.
+// VerifyHeader verifies new header against the trusted state. It returns
+// immediately if newHeader exists in trustedStore (no verification is
+// needed).
 //
 // SequentialVerification: verifies that 2/3 of the trusted validator set has
 // signed the new header. If the headers are not adjacent, **all** intermediate
@@ -555,7 +560,7 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // intermediate headers will be requested. See the specification for details.
 // https://github.com/tendermint/spec/blob/master/spec/consensus/light-client.md
 //
-// If the trusted header is more recent than one here, an error is returned.
+// It returns ErrOldHeaderExpired if newHeader expired.
 //
 // If, at any moment, SignedHeader or ValidatorSet are not found by the primary
 // provider, provider.ErrSignedHeaderNotFound /
@@ -565,21 +570,49 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // validator set at height newHeader.Height+1 (i.e.
 // newHeader.NextValidatorsHash).
 func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
+	h, err := c.TrustedHeader(newHeader.Height, now)
+	switch err.(type) {
+	case nil: // Return already trusted header
+		// Make sure it's the same header.
+		if !bytes.Equal(h.Hash(), newHeader.Hash()) {
+			return errors.Errorf("existing trusted header %X does not match newHeader %X", h.Hash(), newHeader.Hash())
+		}
+		c.logger.Info("Header has already been verified",
+			"height", newHeader.Height, "hash", hash2str(newHeader.Hash()))
+		return nil
+	case ErrOldHeaderExpired:
+		return err
+	}
+
+	return c.verifyHeader(newHeader, newVals, now)
+}
+
+func (c *Client) verifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
 	c.logger.Info("VerifyHeader", "height", newHeader.Height, "hash", hash2str(newHeader.Hash()),
 		"vals", hash2str(newVals.Hash()))
 
-	if c.trustedHeader.Height >= newHeader.Height {
-		return errors.Errorf("header at more recent height #%d exists", c.trustedHeader.Height)
-	}
-
 	var err error
-	switch c.verificationMode {
-	case sequential:
-		err = c.sequence(c.trustedHeader, c.trustedNextVals, newHeader, newVals, now)
-	case skipping:
-		err = c.bisection(c.trustedHeader, c.trustedNextVals, newHeader, newVals, now)
-	default:
-		panic(fmt.Sprintf("Unknown verification mode: %b", c.verificationMode))
+
+	// 1) If going forward, perform either bisection or sequential verification
+	if newHeader.Height >= c.latestTrustedHeader.Height {
+		switch c.verificationMode {
+		case sequential:
+			err = c.sequence(c.latestTrustedHeader, c.latestTrustedNextVals, newHeader, newVals, now)
+		case skipping:
+			err = c.bisection(c.latestTrustedHeader, c.latestTrustedNextVals, newHeader, newVals, now)
+		default:
+			panic(fmt.Sprintf("Unknown verification mode: %b", c.verificationMode))
+		}
+	} else {
+		// 2) Otherwise, perform backwards verification
+		// Find the closest trusted header after newHeader.Height
+		var closestHeader *types.SignedHeader
+		closestHeader, err = c.trustedStore.SignedHeaderAfter(newHeader.Height)
+		if err != nil {
+			return errors.Wrapf(err, "can't get signed header after height %d", newHeader.Height)
+		}
+
+		err = c.backwards(closestHeader, newHeader, now)
 	}
 	if err != nil {
 		c.logger.Error("Can't verify", "err", err)
@@ -596,6 +629,7 @@ func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 	if err != nil {
 		return err
 	}
+
 	return c.updateTrustedHeaderAndNextVals(newHeader, nextVals)
 }
 
@@ -652,8 +686,8 @@ func (c *Client) cleanup(stopHeight int64) error {
 		}
 	}
 
-	c.trustedHeader = nil
-	c.trustedNextVals = nil
+	c.latestTrustedHeader = nil
+	c.latestTrustedNextVals = nil
 	err = c.restoreTrustedHeaderAndNextVals()
 	if err != nil {
 		return err
@@ -682,8 +716,8 @@ func (c *Client) sequence(
 		}
 
 		c.logger.Debug("Verify newHeader against trustedHeader",
-			"trustedHeight", c.trustedHeader.Height,
-			"trustedHash", hash2str(c.trustedHeader.Hash()),
+			"trustedHeight", c.latestTrustedHeader.Height,
+			"trustedHash", hash2str(c.latestTrustedHeader.Hash()),
 			"newHeight", interimHeader.Height,
 			"newHash", hash2str(interimHeader.Hash()))
 		err = VerifyAdjacent(c.chainID, trustedHeader, interimHeader, trustedNextVals,
@@ -709,7 +743,7 @@ func (c *Client) sequence(
 	}
 
 	// 2) Verify the new header.
-	return VerifyAdjacent(c.chainID, c.trustedHeader, newHeader, newVals, c.trustingPeriod, now)
+	return VerifyAdjacent(c.chainID, c.latestTrustedHeader, newHeader, newVals, c.trustingPeriod, now)
 }
 
 // see VerifyHeader
@@ -779,8 +813,8 @@ func (c *Client) updateTrustedHeaderAndNextVals(h *types.SignedHeader, nextVals
 		return errors.Wrap(err, "failed to save trusted header")
 	}
 
-	c.trustedHeader = h
-	c.trustedNextVals = nextVals
+	c.latestTrustedHeader = h
+	c.latestTrustedNextVals = nextVals
 
 	return nil
 }
@@ -799,77 +833,44 @@ func (c *Client) fetchHeaderAndValsAtHeight(height int64) (*types.SignedHeader,
 	return h, vals, nil
 }
 
-// fetchMissingTrustedHeader finds the closest height after the
-// requested height and does backwards verification.
-func (c *Client) fetchMissingTrustedHeader(height int64, now time.Time) (*types.SignedHeader, error) {
-	c.logger.Info("Fetching missing header", "height", height)
-
-	closestHeader, err := c.trustedStore.SignedHeaderAfter(height)
-	if err != nil {
-		return nil, errors.Wrapf(err, "can't get signed header after %d", height)
-	}
-
-	// Perform backwards verification from closestHeader to header at the given
-	// height.
-	h, err := c.backwards(height, closestHeader, now)
-	if err != nil {
-		return nil, err
-	}
-
-	// Fetch next validator set from primary and persist it.
-	nextVals, err := c.validatorSetFromPrimary(height + 1)
-	if err != nil {
-		return nil, errors.Wrapf(err, "failed to obtain the vals #%d", height)
-	}
-	if !bytes.Equal(h.NextValidatorsHash, nextVals.Hash()) {
-		return nil, errors.Errorf("expected next validator's hash %X, but got %X",
-			h.NextValidatorsHash, nextVals.Hash())
-	}
-	if err := c.trustedStore.SaveSignedHeaderAndNextValidatorSet(h, nextVals); err != nil {
-		return nil, errors.Wrap(err, "failed to save trusted header")
-	}
-
-	return h, nil
-}
-
 // Backwards verification (see VerifyHeaderBackwards func in the spec)
-func (c *Client) backwards(toHeight int64, fromHeader *types.SignedHeader, now time.Time) (*types.SignedHeader, error) {
+func (c *Client) backwards(trustedHeader *types.SignedHeader, newHeader *types.SignedHeader,
+	now time.Time) error {
 	var (
-		trustedHeader   = fromHeader
-		untrustedHeader *types.SignedHeader
-		err             error
+		interimHeader *types.SignedHeader
+		err           error
 	)
 
-	for i := trustedHeader.Height - 1; i >= toHeight; i-- {
-		untrustedHeader, err = c.signedHeaderFromPrimary(i)
+	for trustedHeader.Height > newHeader.Height {
+		interimHeader, err = c.signedHeaderFromPrimary(trustedHeader.Height - 1)
 		if err != nil {
-			return nil, errors.Wrapf(err, "failed to obtain the header #%d", i)
+			return errors.Wrapf(err, "failed to obtain the header at height #%d", trustedHeader.Height-1)
 		}
 
-		if err := untrustedHeader.ValidateBasic(c.chainID); err != nil {
-			return nil, errors.Wrap(err, "untrustedHeader.ValidateBasic failed")
+		if err := interimHeader.ValidateBasic(c.chainID); err != nil {
+			return errors.Wrap(err, "untrustedHeader.ValidateBasic failed")
 		}
 
-		if !untrustedHeader.Time.Before(trustedHeader.Time) {
-			return nil, errors.Errorf("expected older header time %v to be before newer header time %v",
-				untrustedHeader.Time,
+		if !interimHeader.Time.Before(trustedHeader.Time) {
+			return errors.Errorf("expected older header time %v to be before newer header time %v",
+				interimHeader.Time,
 				trustedHeader.Time)
 		}
 
-		if HeaderExpired(untrustedHeader, c.trustingPeriod, now) {
-			return nil, ErrOldHeaderExpired{untrustedHeader.Time.Add(c.trustingPeriod), now}
+		if HeaderExpired(interimHeader, c.trustingPeriod, now) {
+			return ErrOldHeaderExpired{interimHeader.Time.Add(c.trustingPeriod), now}
 		}
 
-		if !bytes.Equal(untrustedHeader.Hash(), trustedHeader.LastBlockID.Hash) {
-			return nil, errors.Errorf("older header hash %X does not match trusted header's last block %X",
-				untrustedHeader.Hash(),
+		if !bytes.Equal(interimHeader.Hash(), trustedHeader.LastBlockID.Hash) {
+			return errors.Errorf("older header hash %X does not match trusted header's last block %X",
+				interimHeader.Hash(),
 				trustedHeader.LastBlockID.Hash)
 		}
 
-		trustedHeader = untrustedHeader
+		trustedHeader = interimHeader
 	}
 
-	return trustedHeader, nil
+	return nil
 }
 
 // compare header with all witnesses provided.
@@ -899,7 +900,7 @@ func (c *Client) compareNewHeaderWithWitnesses(h *types.SignedHeader) error {
 			}
 
 			if !bytes.Equal(h.Hash(), altH.Hash()) {
-				if err = c.trustedNextVals.VerifyCommitTrusting(c.chainID, altH.Commit.BlockID,
+				if err = c.latestTrustedNextVals.VerifyCommitTrusting(c.chainID, altH.Commit.BlockID,
 					altH.Height, altH.Commit, c.trustLevel); err != nil {
 					c.logger.Error("Witness sent us incorrect header", "err", err, "witness", witness)
 					witnessesToRemove = append(witnessesToRemove, i)
@@ -989,7 +990,7 @@ func (c *Client) RemoveNoLongerTrustedHeaders(now time.Time) {
 	// 3) Remove all headers that are outside of the trusting period.
 	//
 	// NOTE: even the latest header can be removed. it's okay because
-	// c.trustedHeader will retain it in memory so other funcs like VerifyHeader
+	// c.latestTrustedHeader will retain it in memory so other funcs like VerifyHeader
 	// don't crash.
 	for height := oldestHeight; height <= latestHeight; height++ {
 		h, err := c.trustedStore.SignedHeader(height)
diff --git a/lite2/client_test.go b/lite2/client_test.go
index d8f44adc6..a6ffc31ab 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -732,7 +732,7 @@ func TestClientReplacesPrimaryWithWitnessIfPrimaryIsUnavailable(t *testing.T) {
 	assert.Equal(t, 1, len(c.Witnesses()))
 }
 
-func TestClient_TrustedHeaderFetchesMissingHeader(t *testing.T) {
+func TestClient_BackwardsVerification(t *testing.T) {
 	c, err := NewClient(
 		chainID,
 		TrustOptions{
@@ -752,16 +752,16 @@ func TestClient_TrustedHeaderFetchesMissingHeader(t *testing.T) {
 	defer c.Stop()
 
 	// 1) header is missing => expect no error
-	h, err := c.TrustedHeader(2, bTime.Add(1*time.Hour).Add(1*time.Second))
+	h, err := c.VerifyHeaderAtHeight(2, bTime.Add(1*time.Hour).Add(1*time.Second))
 	require.NoError(t, err)
 	if assert.NotNil(t, h) {
 		assert.EqualValues(t, 2, h.Height)
 	}
 
 	// 2) header is missing, but it's expired => expect error
-	h, err = c.TrustedHeader(1, bTime.Add(1*time.Hour).Add(1*time.Second))
+	h, err = c.VerifyHeaderAtHeight(1, bTime.Add(1*time.Hour).Add(1*time.Second))
 	assert.Error(t, err)
-	assert.Nil(t, h)
+	assert.NotNil(t, h)
 }
 
 func TestClient_NewClientFromTrustedStore(t *testing.T) {

From b0683b7fc6979a013c09ba782b0fad6365aa6147 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 21 Feb 2020 12:43:59 +0100
Subject: [PATCH 23/74] p2p: use curve25519.X25519() instead of ScalarMult()
 (#4449)

* p2p: use curve25519.X25519() instead of ScalarMult()

* Renamed array to shrKeyArray

* Updated CHANGELOG_PENDING

* Revert "Updated CHANGELOG_PENDING"

This reverts commit dbb72e0bf721287847ac136c99f385ce7456d1f7.
---
 p2p/conn/secret_connection.go | 21 +++++++--------------
 1 file changed, 7 insertions(+), 14 deletions(-)

diff --git a/p2p/conn/secret_connection.go b/p2p/conn/secret_connection.go
index d6b20186f..c14f1bb5c 100644
--- a/p2p/conn/secret_connection.go
+++ b/p2p/conn/secret_connection.go
@@ -5,7 +5,6 @@ import (
 	"crypto/cipher"
 	crand "crypto/rand"
 	"crypto/sha256"
-	"crypto/subtle"
 	"encoding/binary"
 	"io"
 	"math"
@@ -38,7 +37,6 @@ const (
 
 var (
 	ErrSmallOrderRemotePubKey = errors.New("detected low order point from remote peer")
-	ErrSharedSecretIsZero     = errors.New("shared secret is all zeroes")
 
 	labelEphemeralLowerPublicKey = []byte("EPHEMERAL_LOWER_PUBLIC_KEY")
 	labelEphemeralUpperPublicKey = []byte("EPHEMERAL_UPPER_PUBLIC_KEY")
@@ -358,19 +356,14 @@ func deriveSecrets(
 
 // computeDHSecret computes a Diffie-Hellman shared secret key
 // from our own local private key and the other's public key.
-//
-// It returns an error if the computed shared secret is all zeroes.
-func computeDHSecret(remPubKey, locPrivKey *[32]byte) (shrKey *[32]byte, err error) {
-	shrKey = new([32]byte)
-	curve25519.ScalarMult(shrKey, locPrivKey, remPubKey)
-
-	// reject if the returned shared secret is all zeroes
-	// related to: https://github.com/tendermint/tendermint/issues/3010
-	zero := new([32]byte)
-	if subtle.ConstantTimeCompare(shrKey[:], zero[:]) == 1 {
-		return nil, ErrSharedSecretIsZero
+func computeDHSecret(remPubKey, locPrivKey *[32]byte) (*[32]byte, error) {
+	shrKey, err := curve25519.X25519(locPrivKey[:], remPubKey[:])
+	if err != nil {
+		return nil, err
 	}
-	return
+	var shrKeyArray [32]byte
+	copy(shrKeyArray[:], shrKey)
+	return &shrKeyArray, nil
 }
 
 func sort32(foo, bar *[32]byte) (lo, hi *[32]byte) {

From 8d1198b39a3268068b67989b1c53ec906b5a62a0 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 21 Feb 2020 13:28:05 +0100
Subject: [PATCH 24/74] ADR-053: update with implementation plan after
 prototype (#4427)

---
 .../adr-053-state-sync-prototype.md           | 157 +++++++++++++++---
 1 file changed, 133 insertions(+), 24 deletions(-)

diff --git a/docs/architecture/adr-053-state-sync-prototype.md b/docs/architecture/adr-053-state-sync-prototype.md
index 95615325d..79e39b24d 100644
--- a/docs/architecture/adr-053-state-sync-prototype.md
+++ b/docs/architecture/adr-053-state-sync-prototype.md
@@ -6,6 +6,14 @@ This ADR outlines the plan for an initial state sync prototype, and is subject t
 
 * 2020-01-28: Initial draft (Erik Grinaker)
 
+* 2020-02-18: Updates after initial prototype (Erik Grinaker)
+    * ABCI: added missing `reason` fields.
+    * ABCI: used 32-bit 1-based chunk indexes (was 64-bit 0-based).
+    * ABCI: moved `RequestApplySnapshotChunk.chain_hash` to `RequestOfferSnapshot.app_hash`.
+    * Gaia: snapshots must include node versions as well, both for inner and leaf nodes.
+    * Added experimental prototype info.
+    * Added open questions and implementation plan.
+
 ## Context
 
 State sync will allow a new node to receive a snapshot of the application state without downloading blocks or going through consensus. This bootstraps the node significantly faster than the current fast sync system, which replays all historical blocks.
@@ -34,14 +42,14 @@ A node can have multiple snapshots taken at various heights. Snapshots can be ta
 message Snapshot {
     uint64 height = 1;   // The height at which the snapshot was taken
     uint32 format = 2;   // The application-specific snapshot format
-    uint64 chunks = 3;   // The number of chunks in the snapshot
+    uint32 chunks = 3;   // The number of chunks in the snapshot
     bytes metadata = 4;  // Arbitrary application metadata
 }
 
 message SnapshotChunk {
     uint64 height = 1;   // The height of the corresponding snapshot
     uint32 format = 2;   // The application-specific snapshot format
-    uint64 chunk = 3;    // The chunk index (zero-based)
+    uint32 chunk = 3;    // The chunk index (one-based)
     bytes data = 4;      // Serialized application state in an arbitrary format
     bytes checksum = 5;  // SHA-1 checksum of data
 }
@@ -64,11 +72,13 @@ message ResponseListSnapshots {
 // Offers a snapshot to the application
 message RequestOfferSnapshot {
     Snapshot snapshot = 1;
+    bytes app_hash = 2;
 }
 
 message ResponseOfferSnapshot {
     bool accepted = 1;
-    enum reason {             // Reason why snapshot was rejected
+    Reason reason = 2;        // Reason why snapshot was rejected
+    enum Reason {
         unknown = 0;          // Unknown or generic reason
         invalid_height = 1;   // Height is rejected: avoid this height
         invalid_format = 2;   // Format is rejected: avoid this format
@@ -79,7 +89,7 @@ message ResponseOfferSnapshot {
 message RequestGetSnapshotChunk {
     uint64 height = 1;
     uint32 format = 2;
-    uint64 chunk = 3;
+    uint32 chunk = 3;
 }
 
 message ResponseGetSnapshotChunk {
@@ -89,12 +99,12 @@ message ResponseGetSnapshotChunk {
 // Applies a snapshot chunk
 message RequestApplySnapshotChunk {
     SnapshotChunk chunk = 1;
-    bytes chain_hash = 2;
 }
 
 message ResponseApplySnapshotChunk {
     bool applied = 1;
-    enum reason {           // Reason why chunk failed
+    Reason reason = 2;      // Reason why chunk failed
+    enum Reason {
         unknown = 0;        // Unknown or generic reason
         verify_failed = 1;  // Chunk verification failed
     }
@@ -165,24 +175,13 @@ The Gaia data structure consists of a set of named IAVL trees. A root hash is co
 
 IAVL trees are versioned, but a snapshot only contains the version relevant for the snapshot height. All historical versions are ignored.
 
-IAVL trees are insertion-order dependent, so key/value pairs must be stored in an appropriate insertion order to produce the same tree branching structure and thus the same Merkle hashes.
+IAVL trees are insertion-order dependent, so key/value pairs must be set in an appropriate insertion order to produce the same tree branching structure. This insertion order can be found by doing a breadth-first scan of all nodes (including inner nodes) and collecting unique keys in order. However, the node hash also depends on the node's version, so snapshots must contain the inner nodes' version numbers as well.
 
-A chunk corresponds to a subtree key range within an IAVL tree, in insertion order, along with the Merkle proof from the root of the subtree all the way up to the root of the multistore (including the Merkle proof for the surrounding multistore.
+For the initial prototype, each chunk consists of a complete dump of all node data for all nodes in an entire IAVL tree. Thus the number of chunks equals the number of persistent stores in Gaia. No incremental verification of chunks is done, only a final app hash comparison at the end of the snapshot restoration.
 
-```go
-struct SnapshotChunk {
-    Store   string            // Name (key) of IAVL store in outer MultiStore
-    Keys    [][]byte          // Snapshotted keys in insertion order
-    Values  [][]byte          // Snapshotted values corresponding to Keys
-    Proof   []merkle.ProofOp  // Merkle proof from subtree root to MultiStore root
-}
-```
+For a production version, it should be sufficient to store key/value/version for all nodes (leaf and inner) in insertion order, chunked in some appropriate way. If per-chunk verification is required, the chunk must also contain enough information to reconstruct the Merkle proofs all the way up to the root of the multistore, e.g. by storing a complete subtree's key/value/version data plus Merkle hashes of all other branches up to the multistore root. The exact approach will depend on tradeoffs between size, time, and verification. IAVL RangeProofs are not recommended, since these include redundant data such as proofs for intermediate and leaf nodes that can be derived from the above data.
 
-This chunk structure is believed to be sufficient to reconstruct an identical IAVL tree by applying separate chunks, but this may require the chunks to be ordered in a certain way; further research is needed.
-
-We do not use IAVL RangeProofs, since these include redundant data such as proofs for intermediate and leaf nodes that can be derived from the above data.
-
-Chunks should be built greedily by collecting key/value pairs constituting a complete subtree up to some size limit (e.g. 32 MB), then serialized. Chunk data is stored in the file system as `snapshots/<height>/<format>/<chunk>/data`, along with a SHA-1 checksum in `snapshots/<height>/<format>/<chunk>/checksum`, and served via `RequestGetSnapshotChunk`.
+Chunks should be built greedily by collecting node data up to some size limit (e.g. 32 MB) and serializing it. Chunk data is stored in the file system as `snapshots/<height>/<format>/<chunk>/data`, along with a SHA-1 checksum in `snapshots/<height>/<format>/<chunk>/checksum`, and served via `RequestGetSnapshotChunk`.
 
 ### Snapshot Scheduling
 
@@ -192,17 +191,127 @@ Taking consistent snapshots of IAVL trees is greatly simplified by them being ve
 
 Snapshots must also be garbage collected after some configurable time, e.g. by keeping the latest `n` snapshots.
 
+## Experimental Prototype
+
+An experimental but functional state sync prototype is available in the `erik/statesync-prototype` branches of the Tendermint, IAVL, Cosmos SDK, and Gaia repositories. To fetch the necessary branches:
+
+```sh
+$ mkdir statesync
+$ cd statesync
+$ git clone git@github.com:tendermint/tendermint -b erik/statesync-prototype
+$ git clone git@github.com:tendermint/iavl -b erik/statesync-prototype
+$ git clone git@github.com:cosmos/cosmos-sdk -b erik/statesync-prototype
+$ git clone git@github.com:cosmos/gaia -b erik/statesync-prototype
+```
+
+To spin up three nodes of a four-node testnet:
+
+```sh
+$ cd gaia
+$ ./tools/start.sh
+```
+
+Wait for the first snapshot to be taken at height 3, then (in a separate terminal) start the fourth node with state sync enabled:
+
+```sh
+$ ./tools/sync.sh
+```
+
+To stop the testnet, run:
+
+```sh
+$ ./tools/stop.sh
+```
+
 ## Open Questions
 
-* Is it possible to reconstruct an identical IAVL tree given separate subtrees in an appropriate order, or is more data needed about the branch structure?
+* Should we have a simpler scheme for discovering snapshots? E.g. announce supported formats, and have peer supply latest available snapshot.
 
-* Should we punish nodes that provide invalid snapshots?
+    Downsides: app has to announce supported formats, having a single snapshot per peer may make fewer peers available for chosen snapshot.
+
+## Resolved Questions
 
 * Is it OK for state-synced nodes to not have historical blocks nor historical IAVL versions?
 
+    > Yes, this is as intended. Maybe backfill blocks later.
+
+* Do we need incremental chunk verification for first version?
+
+    > No, we'll start simple. Can add chunk verification via a new snapshot format without any breaking changes in Tendermint. For adversarial conditions, maybe consider support for whitelisting peers to download chunks from.
+
+* Should the snapshot ABCI interface be a separate optional ABCI service, or mandatory?
+
+    > Mandatory, to keep things simple for now. It will therefore be a breaking change and push the release. For apps using the Cosmos SDK, we can provide a default implementation that does not serve snapshots and errors when trying to apply them.
+
+* How can we make sure `ListSnapshots` data is valid? An adversary can provide fake/invalid snapshots to DoS peers.
+
+    > For now, just pick snapshots that are available on a large number of peers. Maybe support whitelisting. We may consider e.g. placing snapshot manifests on the blockchain later.
+
+* Should we punish nodes that provide invalid snapshots? How?
+
+    > No, these are full nodes not validators, so we can't punish them. Just disconnect from them and ignore them.
+
+* Should we call these snapshots? The SDK already uses the term "snapshot" for `PruningOptions.SnapshotEvery`, and state sync will introduce additional SDK options for snapshot scheduling and pruning that are not related to IAVL snapshotting or pruning.
+
+    > Yes. Hopefully these concepts are distinct enough that we can refer to state sync snapshots and IAVL snapshots without too much confusion.
+
+* Should we store snapshot and chunk metadata in a database? Can we use the database for chunks?
+
+    > As a first approach, store metadata in a database and chunks in the filesystem.
+
+* Should a snapshot at height H be taken before or after the block at H is processed? E.g. RPC `/commit` returns app_hash after _previous_ height, i.e. _before_  current height.
+
+    > After commit.
+
+* Do we need to support all versions of blockchain reactor (i.e. fast sync)?
+
+    > We should remove the v1 reactor completely once v2 has stabilized.
+
+* Should `ListSnapshots` be a streaming API instead of a request/response API?
+
+    > No, just use a max message size.
+
+## Implementation Plan
+
+### Core Tasks
+
+* **Tendermint:** light client P2P transport [#4456](https://github.com/tendermint/tendermint/issues/4456)
+
+* **IAVL:** export/import API [#210](https://github.com/tendermint/iavl/issues/210)
+
+* **Cosmos SDK:** snapshotting, scheduling, and pruning [#5689](https://github.com/cosmos/cosmos-sdk/issues/5689)
+
+* **Tendermint:** support starting with a truncated block history
+
+* **Tendermint:** state sync reactor and ABCI interface [#828](https://github.com/tendermint/tendermint/issues/828)
+
+* **Cosmos SDK:** snapshot ABCI implementation [#5690](https://github.com/cosmos/cosmos-sdk/issues/5690)
+
+### Nice-to-Haves
+
+* **Tendermint:** staged reactor startup (state sync → fast sync → block replay → wal replay → consensus)
+
+    > Let's do a time-boxed prototype (a few days) and see how much work it will be.
+
+  * Notify P2P peers about channel changes [#4394](https://github.com/tendermint/tendermint/issues/4394)
+
+  * Check peers have certain channels [#1148](https://github.com/tendermint/tendermint/issues/1148)
+
+* **Tendermint:** prune blockchain history [#3652](https://github.com/tendermint/tendermint/issues/3652)
+
+* **Tendermint:** allow genesis to start from non-zero height [#2543](https://github.com/tendermint/tendermint/issues/2543)
+
+### Follow-up Tasks
+
+* **Tendermint:** light client verification for fast sync [#4457](https://github.com/tendermint/tendermint/issues/4457)
+
+* **Tendermint:** allow start with only blockstore [#3713](https://github.com/tendermint/tendermint/issues/3713)
+
+* **Tendermint:** node should go back to fast-syncing when lagging significantly [#129](https://github.com/tendermint/tendermint/issues/129)
+
 ## Status
 
-Proposed
+Accepted
 
 ## References
 

From c63fd32fc2341f753afb147e41a607e482608a11 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 21 Feb 2020 15:23:48 +0100
Subject: [PATCH 25/74] circleci: run P2P IPv4 and IPv6 tests in parallel
 (#4459)

---
 .circleci/config.yml |  9 ++++++++-
 test/p2p/circleci.sh | 25 +++++++++++++------------
 2 files changed, 21 insertions(+), 13 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index e0d8129a9..8fe23501f 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -171,11 +171,15 @@ jobs:
       GOPATH: /home/circleci/.go_workspace
     machine:
       image: circleci/classic:latest
+    parameters:
+      ipv:
+        type: integer
+        default: 4
     steps:
       - checkout
       - run: mkdir -p $GOPATH/src/github.com/tendermint
       - run: ln -sf /home/circleci/project $GOPATH/src/github.com/tendermint/tendermint
-      - run: bash test/p2p/circleci.sh
+      - run: bash test/p2p/circleci.sh << parameters.ipv >>
       - store_artifacts:
           path: /home/circleci/project/test/p2p/logs
 
@@ -425,6 +429,9 @@ workflows:
           requires:
             - setup_dependencies
       - test_p2p
+      - test_p2p:
+          name: test_p2p_ipv6
+          ipv: 6
       - upload_coverage:
           requires:
             - test_cover
diff --git a/test/p2p/circleci.sh b/test/p2p/circleci.sh
index 92869ff45..fe8a972bd 100644
--- a/test/p2p/circleci.sh
+++ b/test/p2p/circleci.sh
@@ -1,21 +1,26 @@
 #! /bin/bash
 set -eux
 
+# Take IP version as parameter
+IPV="${1:-4}"
+
 # Get the directory of where this script is.
 SOURCE="${BASH_SOURCE[0]}"
 while [ -h "$SOURCE" ] ; do SOURCE="$(readlink "$SOURCE")"; done
 DIR="$( cd -P "$( dirname "$SOURCE" )" && pwd )"
 
 # Enable IPv6 support in Docker daemon
-echo
-echo "* [$(date +"%T")] enabling IPv6 stack in Docker daemon"
-cat <<'EOF' | sudo tee /etc/docker/daemon.json
+if [[ "$IPV" == "6" ]]; then
+	echo
+	echo "* [$(date +"%T")] enabling IPv6 stack in Docker daemon"
+	cat <<'EOF' | sudo tee /etc/docker/daemon.json
 {
-  "ipv6": true,
-  "fixed-cidr-v6": "2001:db8:1::/64"
+	"ipv6": true,
+	"fixed-cidr-v6": "2001:db8:1::/64"
 }
 EOF
-sudo service docker restart
+	sudo service docker restart
+fi
 
 LOGS_DIR="$DIR/logs"
 echo
@@ -42,12 +47,8 @@ if [[ "$SKIP_BUILD" == "" ]]; then
 fi
 
 echo
-echo "* [$(date +"%T")] running p2p tests on a local docker network"
-bash "$DIR/../p2p/test.sh" tester
-
-echo
-echo "* [$(date +"%T")] running IPv6 p2p tests on a local docker network"
-bash "$DIR/../p2p/test.sh" tester 6
+echo "* [$(date +"%T")] running IPv$IPV p2p tests on a local docker network"
+bash "$DIR/../p2p/test.sh" tester $IPV
 
 echo
 echo "* [$(date +"%T")] copying log files out of docker container into $LOGS_DIR"

From fe1121979507edf714113d54188f96e528ee4871 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 21 Feb 2020 19:21:39 +0100
Subject: [PATCH 26/74] Fix unexported returns (#4450)

---
 abci/client/grpc_client.go        |  2 +-
 abci/client/local_client.go       |  2 +-
 abci/client/socket_client.go      |  2 +-
 abci/client/socket_client_test.go |  6 +++++-
 consensus/common_test.go          |  4 ++--
 consensus/replay_test.go          |  2 +-
 consensus/wal.go                  | 30 +++++++++++++-------------
 lite/multiprovider.go             |  2 +-
 p2p/conn_set.go                   |  2 +-
 p2p/pex/addrbook.go               |  2 +-
 p2p/pex/addrbook_test.go          | 12 ++++++-----
 p2p/pex/pex_reactor_test.go       | 11 +++++-----
 privval/socket_listeners.go       | 36 +++++++++++++++----------------
 proxy/app_conn.go                 |  6 +++---
 proxy/multi_app_conn.go           |  8 +++----
 rpc/lib/server/ws_handler.go      |  4 ++--
 16 files changed, 69 insertions(+), 62 deletions(-)

diff --git a/abci/client/grpc_client.go b/abci/client/grpc_client.go
index f853a4254..01583bc1f 100644
--- a/abci/client/grpc_client.go
+++ b/abci/client/grpc_client.go
@@ -31,7 +31,7 @@ type grpcClient struct {
 	resCb func(*types.Request, *types.Response) // listens to all callbacks
 }
 
-func NewGRPCClient(addr string, mustConnect bool) *grpcClient {
+func NewGRPCClient(addr string, mustConnect bool) Client {
 	cli := &grpcClient{
 		addr:        addr,
 		mustConnect: mustConnect,
diff --git a/abci/client/local_client.go b/abci/client/local_client.go
index f50d4eae1..3946bfbc5 100644
--- a/abci/client/local_client.go
+++ b/abci/client/local_client.go
@@ -21,7 +21,7 @@ type localClient struct {
 	Callback
 }
 
-func NewLocalClient(mtx *sync.Mutex, app types.Application) *localClient {
+func NewLocalClient(mtx *sync.Mutex, app types.Application) Client {
 	if mtx == nil {
 		mtx = new(sync.Mutex)
 	}
diff --git a/abci/client/socket_client.go b/abci/client/socket_client.go
index 2e765119b..7898a8f26 100644
--- a/abci/client/socket_client.go
+++ b/abci/client/socket_client.go
@@ -43,7 +43,7 @@ type socketClient struct {
 
 }
 
-func NewSocketClient(addr string, mustConnect bool) *socketClient {
+func NewSocketClient(addr string, mustConnect bool) Client {
 	cli := &socketClient{
 		reqQueue:    make(chan *ReqRes, reqQueueSize),
 		flushTimer:  timer.NewThrottleTimer("socketClient", flushThrottleMS),
diff --git a/abci/client/socket_client_test.go b/abci/client/socket_client_test.go
index c4877ce70..37bc2b57a 100644
--- a/abci/client/socket_client_test.go
+++ b/abci/client/socket_client_test.go
@@ -16,8 +16,12 @@ import (
 	"github.com/tendermint/tendermint/libs/service"
 )
 
+type errorStopper interface {
+	StopForError(error)
+}
+
 func TestSocketClientStopForErrorDeadlock(t *testing.T) {
-	c := abcicli.NewSocketClient(":80", false)
+	c := abcicli.NewSocketClient(":80", false).(errorStopper)
 	err := errors.New("foo-tendermint")
 
 	// See Issue https://github.com/tendermint/abci/issues/114
diff --git a/consensus/common_test.go b/consensus/common_test.go
index c6cd18193..0403ccaf3 100644
--- a/consensus/common_test.go
+++ b/consensus/common_test.go
@@ -71,7 +71,7 @@ type validatorStub struct {
 
 var testMinPower int64 = 10
 
-func NewValidatorStub(privValidator types.PrivValidator, valIndex int) *validatorStub {
+func newValidatorStub(privValidator types.PrivValidator, valIndex int) *validatorStub {
 	return &validatorStub{
 		Index:         valIndex,
 		PrivValidator: privValidator,
@@ -385,7 +385,7 @@ func randState(nValidators int) (*State, []*validatorStub) {
 	cs := newState(state, privVals[0], counter.NewApplication(true))
 
 	for i := 0; i < nValidators; i++ {
-		vss[i] = NewValidatorStub(privVals[i], i)
+		vss[i] = newValidatorStub(privVals[i], i)
 	}
 	// since cs1 starts at 1
 	incrementHeight(vss[1:]...)
diff --git a/consensus/replay_test.go b/consensus/replay_test.go
index 530948a18..6a33cf382 100644
--- a/consensus/replay_test.go
+++ b/consensus/replay_test.go
@@ -329,7 +329,7 @@ func TestSimulateValidatorsChange(t *testing.T) {
 
 	vss := make([]*validatorStub, nPeers)
 	for i := 0; i < nPeers; i++ {
-		vss[i] = NewValidatorStub(css[i].privValidator, i)
+		vss[i] = newValidatorStub(css[i].privValidator, i)
 	}
 	height, round := css[0].Height, css[0].Round
 	// start the machine
diff --git a/consensus/wal.go b/consensus/wal.go
index 64f04fee0..989a5dc29 100644
--- a/consensus/wal.go
+++ b/consensus/wal.go
@@ -78,7 +78,7 @@ type WAL interface {
 // TODO: currently the wal is overwritten during replay catchup, give it a mode
 // so it's either reading or appending - must read to end to start appending
 // again.
-type baseWAL struct {
+type BaseWAL struct {
 	service.BaseService
 
 	group *auto.Group
@@ -89,11 +89,11 @@ type baseWAL struct {
 	flushInterval time.Duration
 }
 
-var _ WAL = &baseWAL{}
+var _ WAL = &BaseWAL{}
 
 // NewWAL returns a new write-ahead logger based on `baseWAL`, which implements
 // WAL. It's flushed and synced to disk every 2s and once when stopped.
-func NewWAL(walFile string, groupOptions ...func(*auto.Group)) (*baseWAL, error) {
+func NewWAL(walFile string, groupOptions ...func(*auto.Group)) (*BaseWAL, error) {
 	err := tmos.EnsureDir(filepath.Dir(walFile), 0700)
 	if err != nil {
 		return nil, errors.Wrap(err, "failed to ensure WAL directory is in place")
@@ -103,7 +103,7 @@ func NewWAL(walFile string, groupOptions ...func(*auto.Group)) (*baseWAL, error)
 	if err != nil {
 		return nil, err
 	}
-	wal := &baseWAL{
+	wal := &BaseWAL{
 		group:         group,
 		enc:           NewWALEncoder(group),
 		flushInterval: walDefaultFlushInterval,
@@ -113,20 +113,20 @@ func NewWAL(walFile string, groupOptions ...func(*auto.Group)) (*baseWAL, error)
 }
 
 // SetFlushInterval allows us to override the periodic flush interval for the WAL.
-func (wal *baseWAL) SetFlushInterval(i time.Duration) {
+func (wal *BaseWAL) SetFlushInterval(i time.Duration) {
 	wal.flushInterval = i
 }
 
-func (wal *baseWAL) Group() *auto.Group {
+func (wal *BaseWAL) Group() *auto.Group {
 	return wal.group
 }
 
-func (wal *baseWAL) SetLogger(l log.Logger) {
+func (wal *BaseWAL) SetLogger(l log.Logger) {
 	wal.BaseService.Logger = l
 	wal.group.SetLogger(l)
 }
 
-func (wal *baseWAL) OnStart() error {
+func (wal *BaseWAL) OnStart() error {
 	size, err := wal.group.Head.Size()
 	if err != nil {
 		return err
@@ -142,7 +142,7 @@ func (wal *baseWAL) OnStart() error {
 	return nil
 }
 
-func (wal *baseWAL) processFlushTicks() {
+func (wal *BaseWAL) processFlushTicks() {
 	for {
 		select {
 		case <-wal.flushTicker.C:
@@ -157,14 +157,14 @@ func (wal *baseWAL) processFlushTicks() {
 
 // FlushAndSync flushes and fsync's the underlying group's data to disk.
 // See auto#FlushAndSync
-func (wal *baseWAL) FlushAndSync() error {
+func (wal *BaseWAL) FlushAndSync() error {
 	return wal.group.FlushAndSync()
 }
 
 // Stop the underlying autofile group.
 // Use Wait() to ensure it's finished shutting down
 // before cleaning up files.
-func (wal *baseWAL) OnStop() {
+func (wal *BaseWAL) OnStop() {
 	wal.flushTicker.Stop()
 	wal.FlushAndSync()
 	wal.group.Stop()
@@ -173,14 +173,14 @@ func (wal *baseWAL) OnStop() {
 
 // Wait for the underlying autofile group to finish shutting down
 // so it's safe to cleanup files.
-func (wal *baseWAL) Wait() {
+func (wal *BaseWAL) Wait() {
 	wal.group.Wait()
 }
 
 // Write is called in newStep and for each receive on the
 // peerMsgQueue and the timeoutTicker.
 // NOTE: does not call fsync()
-func (wal *baseWAL) Write(msg WALMessage) error {
+func (wal *BaseWAL) Write(msg WALMessage) error {
 	if wal == nil {
 		return nil
 	}
@@ -197,7 +197,7 @@ func (wal *baseWAL) Write(msg WALMessage) error {
 // WriteSync is called when we receive a msg from ourselves
 // so that we write to disk before sending signed messages.
 // NOTE: calls fsync()
-func (wal *baseWAL) WriteSync(msg WALMessage) error {
+func (wal *BaseWAL) WriteSync(msg WALMessage) error {
 	if wal == nil {
 		return nil
 	}
@@ -227,7 +227,7 @@ type WALSearchOptions struct {
 // Group reader will be nil if found equals false.
 //
 // CONTRACT: caller must close group reader.
-func (wal *baseWAL) SearchForEndHeight(
+func (wal *BaseWAL) SearchForEndHeight(
 	height int64,
 	options *WALSearchOptions) (rd io.ReadCloser, found bool, err error) {
 	var (
diff --git a/lite/multiprovider.go b/lite/multiprovider.go
index b10c1c3cb..364647a40 100644
--- a/lite/multiprovider.go
+++ b/lite/multiprovider.go
@@ -16,7 +16,7 @@ type multiProvider struct {
 }
 
 // NewMultiProvider returns a new provider which wraps multiple other providers.
-func NewMultiProvider(providers ...PersistentProvider) *multiProvider {
+func NewMultiProvider(providers ...PersistentProvider) PersistentProvider {
 	return &multiProvider{
 		logger:    log.NewNopLogger(),
 		providers: providers,
diff --git a/p2p/conn_set.go b/p2p/conn_set.go
index d64622783..a889ad5e1 100644
--- a/p2p/conn_set.go
+++ b/p2p/conn_set.go
@@ -26,7 +26,7 @@ type connSet struct {
 }
 
 // NewConnSet returns a ConnSet implementation.
-func NewConnSet() *connSet {
+func NewConnSet() ConnSet {
 	return &connSet{
 		conns: map[string]connSetItem{},
 	}
diff --git a/p2p/pex/addrbook.go b/p2p/pex/addrbook.go
index 4efb4d1e0..dbba71345 100644
--- a/p2p/pex/addrbook.go
+++ b/p2p/pex/addrbook.go
@@ -102,7 +102,7 @@ type addrBook struct {
 
 // NewAddrBook creates a new address book.
 // Use Start to begin processing asynchronous address updates.
-func NewAddrBook(filePath string, routabilityStrict bool) *addrBook {
+func NewAddrBook(filePath string, routabilityStrict bool) AddrBook {
 	am := &addrBook{
 		rand:              tmrand.NewRand(),
 		ourAddrs:          make(map[string]struct{}),
diff --git a/p2p/pex/addrbook_test.go b/p2p/pex/addrbook_test.go
index 0bcda730e..4942b403b 100644
--- a/p2p/pex/addrbook_test.go
+++ b/p2p/pex/addrbook_test.go
@@ -17,6 +17,8 @@ import (
 	"github.com/tendermint/tendermint/p2p"
 )
 
+// FIXME These tests should not rely on .(*addrBook) assertions
+
 func TestAddrBookPickAddress(t *testing.T) {
 	fname := createTempFileName("addrbook_test")
 	defer deleteTempFile(fname)
@@ -58,11 +60,11 @@ func TestAddrBookSaveLoad(t *testing.T) {
 	defer deleteTempFile(fname)
 
 	// 0 addresses
-	book := NewAddrBook(fname, true)
+	book := NewAddrBook(fname, true).(*addrBook)
 	book.SetLogger(log.TestingLogger())
 	book.saveToFile(fname)
 
-	book = NewAddrBook(fname, true)
+	book = NewAddrBook(fname, true).(*addrBook)
 	book.SetLogger(log.TestingLogger())
 	book.loadFromFile(fname)
 
@@ -78,7 +80,7 @@ func TestAddrBookSaveLoad(t *testing.T) {
 	assert.Equal(t, 100, book.Size())
 	book.saveToFile(fname)
 
-	book = NewAddrBook(fname, true)
+	book = NewAddrBook(fname, true).(*addrBook)
 	book.SetLogger(log.TestingLogger())
 	book.loadFromFile(fname)
 
@@ -91,7 +93,7 @@ func TestAddrBookLookup(t *testing.T) {
 
 	randAddrs := randNetAddressPairs(t, 100)
 
-	book := NewAddrBook(fname, true)
+	book := NewAddrBook(fname, true).(*addrBook)
 	book.SetLogger(log.TestingLogger())
 	for _, addrSrc := range randAddrs {
 		addr := addrSrc.addr
@@ -575,7 +577,7 @@ func deleteTempFile(fname string) {
 func createAddrBookWithMOldAndNNewAddrs(t *testing.T, nOld, nNew int) (book *addrBook, fname string) {
 	fname = createTempFileName("addrbook_test")
 
-	book = NewAddrBook(fname, true)
+	book = NewAddrBook(fname, true).(*addrBook)
 	book.SetLogger(log.TestingLogger())
 	assert.Zero(t, book.Size())
 
diff --git a/p2p/pex/pex_reactor_test.go b/p2p/pex/pex_reactor_test.go
index 5e174765a..4cddf6352 100644
--- a/p2p/pex/pex_reactor_test.go
+++ b/p2p/pex/pex_reactor_test.go
@@ -74,7 +74,7 @@ func TestPEXReactorRunning(t *testing.T) {
 	require.Nil(t, err)
 	defer os.RemoveAll(dir) // nolint: errcheck
 
-	books := make([]*addrBook, N)
+	books := make([]AddrBook, N)
 	logger := log.TestingLogger()
 
 	// create switches
@@ -404,7 +404,7 @@ func TestPEXReactorSeedModeFlushStop(t *testing.T) {
 	require.Nil(t, err)
 	defer os.RemoveAll(dir) // nolint: errcheck
 
-	books := make([]*addrBook, N)
+	books := make([]AddrBook, N)
 	logger := log.TestingLogger()
 
 	// create switches
@@ -631,7 +631,7 @@ func testCreatePeerWithSeed(dir string, id int, seed *p2p.Switch) *p2p.Switch {
 	return testCreatePeerWithConfig(dir, id, conf)
 }
 
-func createReactor(conf *ReactorConfig) (r *Reactor, book *addrBook) {
+func createReactor(conf *ReactorConfig) (r *Reactor, book AddrBook) {
 	// directory to store address book
 	dir, err := ioutil.TempDir("", "pex_reactor")
 	if err != nil {
@@ -645,8 +645,9 @@ func createReactor(conf *ReactorConfig) (r *Reactor, book *addrBook) {
 	return
 }
 
-func teardownReactor(book *addrBook) {
-	err := os.RemoveAll(filepath.Dir(book.FilePath()))
+func teardownReactor(book AddrBook) {
+	// FIXME Shouldn't rely on .(*addrBook) assertion
+	err := os.RemoveAll(filepath.Dir(book.(*addrBook).FilePath()))
 	if err != nil {
 		panic(err)
 	}
diff --git a/privval/socket_listeners.go b/privval/socket_listeners.go
index f4d875e71..0e12e4268 100644
--- a/privval/socket_listeners.go
+++ b/privval/socket_listeners.go
@@ -23,26 +23,26 @@ type timeoutError interface {
 // TCP Listener
 
 // TCPListenerOption sets an optional parameter on the tcpListener.
-type TCPListenerOption func(*tcpListener)
+type TCPListenerOption func(*TCPListener)
 
 // TCPListenerTimeoutAccept sets the timeout for the listener.
 // A zero time value disables the timeout.
 func TCPListenerTimeoutAccept(timeout time.Duration) TCPListenerOption {
-	return func(tl *tcpListener) { tl.timeoutAccept = timeout }
+	return func(tl *TCPListener) { tl.timeoutAccept = timeout }
 }
 
 // TCPListenerTimeoutReadWrite sets the read and write timeout for connections
 // from external signing processes.
 func TCPListenerTimeoutReadWrite(timeout time.Duration) TCPListenerOption {
-	return func(tl *tcpListener) { tl.timeoutReadWrite = timeout }
+	return func(tl *TCPListener) { tl.timeoutReadWrite = timeout }
 }
 
 // tcpListener implements net.Listener.
-var _ net.Listener = (*tcpListener)(nil)
+var _ net.Listener = (*TCPListener)(nil)
 
-// tcpListener wraps a *net.TCPListener to standardise protocol timeouts
+// TCPListener wraps a *net.TCPListener to standardise protocol timeouts
 // and potentially other tuning parameters. It also returns encrypted connections.
-type tcpListener struct {
+type TCPListener struct {
 	*net.TCPListener
 
 	secretConnKey ed25519.PrivKeyEd25519
@@ -53,8 +53,8 @@ type tcpListener struct {
 
 // NewTCPListener returns a listener that accepts authenticated encrypted connections
 // using the given secretConnKey and the default timeout values.
-func NewTCPListener(ln net.Listener, secretConnKey ed25519.PrivKeyEd25519) *tcpListener {
-	return &tcpListener{
+func NewTCPListener(ln net.Listener, secretConnKey ed25519.PrivKeyEd25519) *TCPListener {
+	return &TCPListener{
 		TCPListener:      ln.(*net.TCPListener),
 		secretConnKey:    secretConnKey,
 		timeoutAccept:    time.Second * defaultTimeoutAcceptSeconds,
@@ -63,7 +63,7 @@ func NewTCPListener(ln net.Listener, secretConnKey ed25519.PrivKeyEd25519) *tcpL
 }
 
 // Accept implements net.Listener.
-func (ln *tcpListener) Accept() (net.Conn, error) {
+func (ln *TCPListener) Accept() (net.Conn, error) {
 	deadline := time.Now().Add(ln.timeoutAccept)
 	err := ln.SetDeadline(deadline)
 	if err != nil {
@@ -89,25 +89,25 @@ func (ln *tcpListener) Accept() (net.Conn, error) {
 // Unix Listener
 
 // unixListener implements net.Listener.
-var _ net.Listener = (*unixListener)(nil)
+var _ net.Listener = (*UnixListener)(nil)
 
-type UnixListenerOption func(*unixListener)
+type UnixListenerOption func(*UnixListener)
 
 // UnixListenerTimeoutAccept sets the timeout for the listener.
 // A zero time value disables the timeout.
 func UnixListenerTimeoutAccept(timeout time.Duration) UnixListenerOption {
-	return func(ul *unixListener) { ul.timeoutAccept = timeout }
+	return func(ul *UnixListener) { ul.timeoutAccept = timeout }
 }
 
 // UnixListenerTimeoutReadWrite sets the read and write timeout for connections
 // from external signing processes.
 func UnixListenerTimeoutReadWrite(timeout time.Duration) UnixListenerOption {
-	return func(ul *unixListener) { ul.timeoutReadWrite = timeout }
+	return func(ul *UnixListener) { ul.timeoutReadWrite = timeout }
 }
 
-// unixListener wraps a *net.UnixListener to standardise protocol timeouts
+// UnixListener wraps a *net.UnixListener to standardise protocol timeouts
 // and potentially other tuning parameters. It returns unencrypted connections.
-type unixListener struct {
+type UnixListener struct {
 	*net.UnixListener
 
 	timeoutAccept    time.Duration
@@ -116,8 +116,8 @@ type unixListener struct {
 
 // NewUnixListener returns a listener that accepts unencrypted connections
 // using the default timeout values.
-func NewUnixListener(ln net.Listener) *unixListener {
-	return &unixListener{
+func NewUnixListener(ln net.Listener) *UnixListener {
+	return &UnixListener{
 		UnixListener:     ln.(*net.UnixListener),
 		timeoutAccept:    time.Second * defaultTimeoutAcceptSeconds,
 		timeoutReadWrite: time.Second * defaultTimeoutReadWriteSeconds,
@@ -125,7 +125,7 @@ func NewUnixListener(ln net.Listener) *unixListener {
 }
 
 // Accept implements net.Listener.
-func (ln *unixListener) Accept() (net.Conn, error) {
+func (ln *UnixListener) Accept() (net.Conn, error) {
 	deadline := time.Now().Add(ln.timeoutAccept)
 	err := ln.SetDeadline(deadline)
 	if err != nil {
diff --git a/proxy/app_conn.go b/proxy/app_conn.go
index 1698ab52f..066d17295 100644
--- a/proxy/app_conn.go
+++ b/proxy/app_conn.go
@@ -47,7 +47,7 @@ type appConnConsensus struct {
 	appConn abcicli.Client
 }
 
-func NewAppConnConsensus(appConn abcicli.Client) *appConnConsensus {
+func NewAppConnConsensus(appConn abcicli.Client) AppConnConsensus {
 	return &appConnConsensus{
 		appConn: appConn,
 	}
@@ -88,7 +88,7 @@ type appConnMempool struct {
 	appConn abcicli.Client
 }
 
-func NewAppConnMempool(appConn abcicli.Client) *appConnMempool {
+func NewAppConnMempool(appConn abcicli.Client) AppConnMempool {
 	return &appConnMempool{
 		appConn: appConn,
 	}
@@ -121,7 +121,7 @@ type appConnQuery struct {
 	appConn abcicli.Client
 }
 
-func NewAppConnQuery(appConn abcicli.Client) *appConnQuery {
+func NewAppConnQuery(appConn abcicli.Client) AppConnQuery {
 	return &appConnQuery{
 		appConn: appConn,
 	}
diff --git a/proxy/multi_app_conn.go b/proxy/multi_app_conn.go
index 44ff242b1..364114115 100644
--- a/proxy/multi_app_conn.go
+++ b/proxy/multi_app_conn.go
@@ -30,15 +30,15 @@ func NewAppConns(clientCreator ClientCreator) AppConns {
 type multiAppConn struct {
 	service.BaseService
 
-	mempoolConn   *appConnMempool
-	consensusConn *appConnConsensus
-	queryConn     *appConnQuery
+	mempoolConn   AppConnMempool
+	consensusConn AppConnConsensus
+	queryConn     AppConnQuery
 
 	clientCreator ClientCreator
 }
 
 // Make all necessary abci connections to the application
-func NewMultiAppConn(clientCreator ClientCreator) *multiAppConn {
+func NewMultiAppConn(clientCreator ClientCreator) AppConns {
 	multiAppConn := &multiAppConn{
 		clientCreator: clientCreator,
 	}
diff --git a/rpc/lib/server/ws_handler.go b/rpc/lib/server/ws_handler.go
index 07f424b48..e7048db79 100644
--- a/rpc/lib/server/ws_handler.go
+++ b/rpc/lib/server/ws_handler.go
@@ -92,7 +92,7 @@ func (wm *WebsocketManager) WebsocketHandler(w http.ResponseWriter, r *http.Requ
 	}()
 
 	// register connection
-	con := NewWSConnection(wsConn, wm.funcMap, wm.cdc, wm.wsConnOptions...)
+	con := newWSConnection(wsConn, wm.funcMap, wm.cdc, wm.wsConnOptions...)
 	con.SetLogger(wm.logger.With("remote", wsConn.RemoteAddr()))
 	wm.logger.Info("New websocket connection", "remote", con.remoteAddr)
 	err = con.Start() // BLOCKING
@@ -154,7 +154,7 @@ type wsConnection struct {
 // description of how to configure ping period and pong wait time. NOTE: if the
 // write buffer is full, pongs may be dropped, which may cause clients to
 // disconnect. see https://github.com/gorilla/websocket/issues/97
-func NewWSConnection(
+func newWSConnection(
 	baseConn *websocket.Conn,
 	funcMap map[string]*RPCFunc,
 	cdc *amino.Codec,

From f934ca82fc0ace327ca34bc8593b21789c202109 Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Mon, 24 Feb 2020 11:10:41 +0100
Subject: [PATCH 27/74] lite2: don't save intermediate headers (#4452)

closes #4426

The sequence and bisection methods no longer save the intermediate headers and validator sets that they require to verify a currently untrusted header.

## Commits:

* sequence and bisection don't save intermediate headers and vals

* check the next validator hash matches the header

* check expired header at start of backwards verification

* added tests

* handled cleanup warning

* lint fix

* removed redundant code

* tweaked minor errors

* avoided premature trusting of nextVals

* fix test error

* updated trustedHeader and Vals together

* fixed bisection error

* fixed sequence error for different vals and made test

* fixes after my own review

* reorder vars to be consistent

with the rest of the code

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 lite2/client.go      | 50 +++++++++++++++++++++-----------------------
 lite2/client_test.go | 37 ++++++++++++++++++++++++++++----
 2 files changed, 57 insertions(+), 30 deletions(-)

diff --git a/lite2/client.go b/lite2/client.go
index 61559a694..65040c133 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -703,13 +703,14 @@ func (c *Client) sequence(
 	newHeader *types.SignedHeader,
 	newVals *types.ValidatorSet,
 	now time.Time) error {
+
 	// 1) Verify any intermediate headers.
 	var (
 		interimHeader   *types.SignedHeader
 		interimNextVals *types.ValidatorSet
 		err             error
 	)
-	for height := trustedHeader.Height + 1; height < newHeader.Height; height++ {
+	for height := trustedHeader.Height + 1; height <= newHeader.Height; height++ {
 		interimHeader, err = c.signedHeaderFromPrimary(height)
 		if err != nil {
 			return errors.Wrapf(err, "failed to obtain the header #%d", height)
@@ -734,16 +735,17 @@ func (c *Client) sequence(
 			if err != nil {
 				return errors.Wrapf(err, "failed to obtain the vals #%d", height+1)
 			}
-		}
-		err = c.updateTrustedHeaderAndNextVals(interimHeader, interimNextVals)
-		if err != nil {
-			return errors.Wrapf(err, "failed to update trusted state #%d", height)
+			if !bytes.Equal(interimHeader.NextValidatorsHash, interimNextVals.Hash()) {
+				return errors.Errorf("expected next validator's hash %X, but got %X (height #%d)",
+					interimHeader.NextValidatorsHash,
+					interimNextVals.Hash(),
+					interimHeader.Height)
+			}
 		}
 		trustedHeader, trustedNextVals = interimHeader, interimNextVals
 	}
 
-	// 2) Verify the new header.
-	return VerifyAdjacent(c.chainID, c.latestTrustedHeader, newHeader, newVals, c.trustingPeriod, now)
+	return nil
 }
 
 // see VerifyHeader
@@ -757,7 +759,7 @@ func (c *Client) bisection(
 	interimVals := newVals
 	interimHeader := newHeader
 
-	for trustedHeader.Height < newHeader.Height {
+	for {
 		c.logger.Debug("Verify newHeader against trustedHeader",
 			"trustedHeight", trustedHeader.Height,
 			"trustedHash", hash2str(trustedHeader.Hash()),
@@ -767,24 +769,22 @@ func (c *Client) bisection(
 			c.trustLevel)
 		switch err.(type) {
 		case nil:
+			if interimHeader.Height == newHeader.Height {
+				return nil
+			}
+
 			// Update the lower bound to the previous upper bound
-			trustedHeader = interimHeader
-			trustedNextVals, err = c.validatorSetFromPrimary(interimHeader.Height + 1)
+			interimNextVals, err := c.validatorSetFromPrimary(interimHeader.Height + 1)
 			if err != nil {
 				return err
 			}
-			if !bytes.Equal(trustedHeader.NextValidatorsHash, trustedNextVals.Hash()) {
+			if !bytes.Equal(interimHeader.NextValidatorsHash, interimNextVals.Hash()) {
 				return errors.Errorf("expected next validator's hash %X, but got %X (height #%d)",
-					trustedHeader.NextValidatorsHash,
-					trustedNextVals.Hash(),
-					trustedHeader.Height)
+					interimHeader.NextValidatorsHash,
+					interimNextVals.Hash(),
+					interimHeader.Height)
 			}
-
-			err = c.updateTrustedHeaderAndNextVals(trustedHeader, trustedNextVals)
-			if err != nil {
-				return err
-			}
-
+			trustedHeader, trustedNextVals = interimHeader, interimNextVals
 			// Update the upper bound to the untrustedHeader
 			interimHeader, interimVals = newHeader, newVals
 
@@ -799,8 +799,6 @@ func (c *Client) bisection(
 			return errors.Wrapf(err, "failed to verify the header #%d", newHeader.Height)
 		}
 	}
-
-	return nil
 }
 
 // persist header and next validators to trustedStore.
@@ -841,6 +839,10 @@ func (c *Client) backwards(trustedHeader *types.SignedHeader, newHeader *types.S
 		err           error
 	)
 
+	if HeaderExpired(newHeader, c.trustingPeriod, now) {
+		return ErrOldHeaderExpired{newHeader.Time.Add(c.trustingPeriod), now}
+	}
+
 	for trustedHeader.Height > newHeader.Height {
 		interimHeader, err = c.signedHeaderFromPrimary(trustedHeader.Height - 1)
 		if err != nil {
@@ -857,10 +859,6 @@ func (c *Client) backwards(trustedHeader *types.SignedHeader, newHeader *types.S
 				trustedHeader.Time)
 		}
 
-		if HeaderExpired(interimHeader, c.trustingPeriod, now) {
-			return ErrOldHeaderExpired{interimHeader.Time.Add(c.trustingPeriod), now}
-		}
-
 		if !bytes.Equal(interimHeader.Hash(), trustedHeader.LastBlockID.Hash) {
 			return errors.Errorf("older header hash %X does not match trusted header's last block %X",
 				interimHeader.Hash(),
diff --git a/lite2/client_test.go b/lite2/client_test.go
index a6ffc31ab..a6b615227 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -57,6 +57,9 @@ var (
 )
 
 func TestClient_SequentialVerification(t *testing.T) {
+	newKeys := genPrivKeys(4)
+	newVals := newKeys.ToValidators(10, 1)
+
 	testCases := []struct {
 		name         string
 		otherHeaders map[int64]*types.SignedHeader // all except ^
@@ -138,6 +141,25 @@ func TestClient_SequentialVerification(t *testing.T) {
 			false,
 			true,
 		},
+		{
+			"bad: different validator set at height 3",
+			map[int64]*types.SignedHeader{
+				// trusted header
+				1: h1,
+				// interim header (3/3 signed)
+				2: h2,
+				// last header (3/3 signed)
+				3: h3,
+			},
+			map[int64]*types.ValidatorSet{
+				1: vals,
+				2: vals,
+				3: newVals,
+				4: newVals,
+			},
+			false,
+			true,
+		},
 	}
 
 	for _, tc := range testCases {
@@ -368,7 +390,8 @@ func TestClient_Cleanup(t *testing.T) {
 	require.NoError(t, err)
 
 	c.Stop()
-	c.Cleanup()
+	err = c.Cleanup()
+	require.NoError(t, err)
 
 	// Check no headers exist after Cleanup.
 	h, err := c.TrustedHeader(1, bTime.Add(1*time.Second))
@@ -747,9 +770,6 @@ func TestClient_BackwardsVerification(t *testing.T) {
 		Logger(log.TestingLogger()),
 	)
 	require.NoError(t, err)
-	err = c.Start()
-	require.NoError(t, err)
-	defer c.Stop()
 
 	// 1) header is missing => expect no error
 	h, err := c.VerifyHeaderAtHeight(2, bTime.Add(1*time.Hour).Add(1*time.Second))
@@ -762,6 +782,15 @@ func TestClient_BackwardsVerification(t *testing.T) {
 	h, err = c.VerifyHeaderAtHeight(1, bTime.Add(1*time.Hour).Add(1*time.Second))
 	assert.Error(t, err)
 	assert.NotNil(t, h)
+
+	// 3) already stored headers should return the header without error
+	h, err = c.VerifyHeaderAtHeight(3, bTime.Add(1*time.Hour).Add(1*time.Second))
+	assert.NoError(t, err)
+	assert.NotNil(t, h)
+
+	// 4) cannot verify a header in the future
+	_, err = c.VerifyHeaderAtHeight(4, bTime.Add(1*time.Hour).Add(1*time.Second))
+	assert.Error(t, err)
 }
 
 func TestClient_NewClientFromTrustedStore(t *testing.T) {

From 25d92d05f8734d32ad32569820eb2f112ddf0239 Mon Sep 17 00:00:00 2001
From: Alessio Treglia <alessio@tendermint.com>
Date: Tue, 25 Feb 2020 10:04:24 +0100
Subject: [PATCH 28/74] types: VerifyCommitX return when +2/3 sigs are verified
 (#4445)

Closes #4417
---
 CHANGELOG_PENDING.md   |  2 ++
 types/validator_set.go | 26 ++++++++++++++------------
 2 files changed, 16 insertions(+), 12 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index a2fc85ee0..ebc087136 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -19,6 +19,8 @@ program](https://hackerone.com/tendermint).
 
 ### IMPROVEMENTS:
 
+- [types] [\#4417](https://github.com/tendermint/tendermint/issues/4417) VerifyCommitX() functions should return as soon as +2/3 threashold is reached.
+
 ### BUG FIXES:
 
 - [rpc] [\#4437](https://github.com/tendermint/tendermint/pull/4437) Fix tx_search pagination with ordered results (@erikgrinaker)
diff --git a/types/validator_set.go b/types/validator_set.go
index 390df09cf..04de50646 100644
--- a/types/validator_set.go
+++ b/types/validator_set.go
@@ -636,6 +636,7 @@ func (vals *ValidatorSet) VerifyCommit(chainID string, blockID BlockID,
 	}
 
 	talliedVotingPower := int64(0)
+	votingPowerNeeded := vals.TotalVotingPower() * 2 / 3
 	for idx, commitSig := range commit.Signatures {
 		if commitSig.Absent() {
 			continue // OK, some signatures can be absent.
@@ -658,13 +659,15 @@ func (vals *ValidatorSet) VerifyCommit(chainID string, blockID BlockID,
 		// It's OK that the BlockID doesn't match.  We include stray
 		// signatures (~votes for nil) to measure validator availability.
 		// }
+
+		// return as soon as +2/3 of the signatures are verified
+		if talliedVotingPower > votingPowerNeeded {
+			return nil
+		}
 	}
 
-	if got, needed := talliedVotingPower, vals.TotalVotingPower()*2/3; got <= needed {
-		return ErrNotEnoughVotingPowerSigned{Got: got, Needed: needed}
-	}
-
-	return nil
+	// talliedVotingPower <= needed, thus return error
+	return ErrNotEnoughVotingPowerSigned{Got: talliedVotingPower, Needed: votingPowerNeeded}
 }
 
 // VerifyFutureCommit will check to see if the set would be valid with a different
@@ -762,6 +765,7 @@ func (vals *ValidatorSet) VerifyCommitTrusting(chainID string, blockID BlockID,
 	var (
 		talliedVotingPower int64
 		seenVals           = make(map[int]int, len(commit.Signatures)) // validator index -> commit index
+		votingPowerNeeded  = (vals.TotalVotingPower() * trustLevel.Numerator) / trustLevel.Denominator
 	)
 
 	for idx, commitSig := range commit.Signatures {
@@ -795,16 +799,14 @@ func (vals *ValidatorSet) VerifyCommitTrusting(chainID string, blockID BlockID,
 			// It's OK that the BlockID doesn't match.  We include stray
 			// signatures (~votes for nil) to measure validator availability.
 			// }
+
+			if talliedVotingPower > votingPowerNeeded {
+				return nil
+			}
 		}
 	}
 
-	got := talliedVotingPower
-	needed := (vals.TotalVotingPower() * trustLevel.Numerator) / trustLevel.Denominator
-	if got <= needed {
-		return ErrNotEnoughVotingPowerSigned{Got: got, Needed: needed}
-	}
-
-	return nil
+	return ErrNotEnoughVotingPowerSigned{Got: talliedVotingPower, Needed: votingPowerNeeded}
 }
 
 func verifyCommitBasic(commit *Commit, height int64, blockID BlockID) error {

From c4f7256766fd4cd46ac89c5259e77fe5b0a0bf45 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Wed, 26 Feb 2020 10:20:51 +0100
Subject: [PATCH 29/74] lite2: store current validator set (#4472)

Before we were storing trustedHeader (height=1) and trustedNextVals
(height=2).

After this change, we will be storing trustedHeader (height=1) and
trustedVals (height=1). This a) simplifies the code b) fixes #4399
inconsistent pairing issue c) gives a relayer access to the current
validator set #4470.

The only downside is more jumps during bisection. If validator set
changes between trustedHeader and the next header (by 2/3 or more), the
light client will be forced to download the next header and check that
2/3+ signed the transition. But we don't expect validator set change too
much and too often, so it's an acceptable compromise.

Closes #4470 and #4399
---
 .../adr-046-light-client-implementation.md    |   4 +-
 lite2/client.go                               | 175 ++++++++----------
 lite2/client_test.go                          |  31 +---
 lite2/store/db/db.go                          |  17 +-
 lite2/store/db/db_test.go                     |  18 +-
 lite2/store/errors.go                         |   1 +
 lite2/store/store.go                          |  12 +-
 lite2/verifier.go                             |  14 +-
 8 files changed, 119 insertions(+), 153 deletions(-)

diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index 11dc79fb9..071149512 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -91,8 +91,8 @@ The light client stores headers & validators in the trusted store:
 
 ```go
 type Store interface {
-	SaveSignedHeaderAndNextValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error
-	DeleteSignedHeaderAndNextValidatorSet(height int64) error
+	SaveSignedHeaderAndValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error
+	DeleteSignedHeaderAndValidatorSet(height int64) error
 
 	SignedHeader(height int64) (*types.SignedHeader, error)
 	ValidatorSet(height int64) (*types.ValidatorSet, error)
diff --git a/lite2/client.go b/lite2/client.go
index 65040c133..36b366b93 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -122,8 +122,8 @@ type Client struct {
 	trustedStore store.Store
 	// Highest trusted header from the store (height=H).
 	latestTrustedHeader *types.SignedHeader
-	// Highest next validator set from the store (height=H+1).
-	latestTrustedNextVals *types.ValidatorSet
+	// Highest validator set from the store (height=H).
+	latestTrustedVals *types.ValidatorSet
 
 	// See UpdatePeriod option
 	updatePeriod time.Duration
@@ -228,15 +228,16 @@ func NewClientFromTrustedStore(
 		return nil, err
 	}
 
-	if err := c.restoreTrustedHeaderAndNextVals(); err != nil {
+	if err := c.restoreTrustedHeaderAndVals(); err != nil {
 		return nil, err
 	}
 
 	return c, nil
 }
 
-// Load trustedHeader and trustedNextVals from trustedStore.
-func (c *Client) restoreTrustedHeaderAndNextVals() error {
+// restoreTrustedHeaderAndVals loads trustedHeader and trustedVals from
+// trustedStore.
+func (c *Client) restoreTrustedHeaderAndVals() error {
 	lastHeight, err := c.trustedStore.LastSignedHeaderHeight()
 	if err != nil {
 		return errors.Wrap(err, "can't get last trusted header height")
@@ -248,15 +249,15 @@ func (c *Client) restoreTrustedHeaderAndNextVals() error {
 			return errors.Wrap(err, "can't get last trusted header")
 		}
 
-		trustedNextVals, err := c.trustedStore.ValidatorSet(lastHeight + 1)
+		trustedVals, err := c.trustedStore.ValidatorSet(lastHeight)
 		if err != nil {
-			return errors.Wrap(err, "can't get last trusted next validators")
+			return errors.Wrap(err, "can't get last trusted validators")
 		}
 
 		c.latestTrustedHeader = trustedHeader
-		c.latestTrustedNextVals = trustedNextVals
+		c.latestTrustedVals = trustedVals
 
-		c.logger.Debug("Restored trusted header and next vals", lastHeight)
+		c.logger.Debug("Restored trusted header and vals", "height", lastHeight)
 	}
 
 	return nil
@@ -334,7 +335,9 @@ func (c *Client) checkTrustedHeaderUsingOptions(options TrustOptions) error {
 	return nil
 }
 
-// Fetch trustedHeader and trustedNextVals from primary provider.
+// initializeWithTrustOptions fetches the weakly-trusted header and vals from
+// primary provider. The header is cross-checked with witnesses for additional
+// security.
 func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 	// 1) Fetch and verify the header.
 	h, err := c.signedHeaderFromPrimary(options.Height)
@@ -372,15 +375,8 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 		return errors.Wrap(err, "invalid commit")
 	}
 
-	// 3) Fetch and verify the next vals (verification happens in
-	// updateTrustedHeaderAndNextVals).
-	nextVals, err := c.validatorSetFromPrimary(options.Height + 1)
-	if err != nil {
-		return err
-	}
-
-	// 4) Persist both of them and continue.
-	return c.updateTrustedHeaderAndNextVals(h, nextVals)
+	// 3) Persist both of them and continue.
+	return c.updateTrustedHeaderAndVals(h, vals)
 }
 
 // Start starts two processes: 1) auto updating 2) removing outdated headers.
@@ -463,9 +459,7 @@ func (c *Client) TrustedHeader(height int64, now time.Time) (*types.SignedHeader
 
 // TrustedValidatorSet returns a trusted validator set at the given height. If
 // a validator set is missing in trustedStore (e.g. the associated header was
-// skipped during bisection), it will be downloaded from primary. The second
-// return parameter is height validator set corresponds to (useful when you
-// pass 0).
+// skipped during bisection), it will be downloaded from primary.
 //
 // height must be >= 0.
 //
@@ -482,10 +476,10 @@ func (c *Client) TrustedHeader(height int64, now time.Time) (*types.SignedHeader
 //
 // Safe for concurrent use by multiple goroutines.
 func (c *Client) TrustedValidatorSet(height int64, now time.Time) (*types.ValidatorSet, error) {
-	// Checks height is positive and header (note: height - 1) is not expired.
+	// Checks height is positive and header is not expired.
 	// Additionally, it fetches validator set from primary if it's missing in
 	// store.
-	_, err := c.TrustedHeader(height-1, now)
+	_, err := c.TrustedHeader(height, now)
 	if err != nil {
 		return nil, err
 	}
@@ -528,10 +522,12 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 		return nil, errors.New("negative or zero height")
 	}
 
+	// Check if header already verified.
 	h, err := c.TrustedHeader(height, now)
 	switch err.(type) {
-	case nil: // Return already trusted header
+	case nil:
 		c.logger.Info("Header has already been verified", "height", height, "hash", hash2str(h.Hash()))
+		// Return already trusted header
 		return h, nil
 	case ErrOldHeaderExpired:
 		return nil, err
@@ -565,14 +561,11 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // If, at any moment, SignedHeader or ValidatorSet are not found by the primary
 // provider, provider.ErrSignedHeaderNotFound /
 // provider.ErrValidatorSetNotFound error is returned.
-//
-// NOTE: although newVals is entered as input, trustedStore will only store the
-// validator set at height newHeader.Height+1 (i.e.
-// newHeader.NextValidatorsHash).
 func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
+	// Check if newHeader already verified.
 	h, err := c.TrustedHeader(newHeader.Height, now)
 	switch err.(type) {
-	case nil: // Return already trusted header
+	case nil:
 		// Make sure it's the same header.
 		if !bytes.Equal(h.Hash(), newHeader.Hash()) {
 			return errors.Errorf("existing trusted header %X does not match newHeader %X", h.Hash(), newHeader.Hash())
@@ -597,9 +590,9 @@ func (c *Client) verifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 	if newHeader.Height >= c.latestTrustedHeader.Height {
 		switch c.verificationMode {
 		case sequential:
-			err = c.sequence(c.latestTrustedHeader, c.latestTrustedNextVals, newHeader, newVals, now)
+			err = c.sequence(c.latestTrustedHeader, newHeader, newVals, now)
 		case skipping:
-			err = c.bisection(c.latestTrustedHeader, c.latestTrustedNextVals, newHeader, newVals, now)
+			err = c.bisection(c.latestTrustedHeader, c.latestTrustedVals, newHeader, newVals, now)
 		default:
 			panic(fmt.Sprintf("Unknown verification mode: %b", c.verificationMode))
 		}
@@ -624,13 +617,7 @@ func (c *Client) verifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 		return err
 	}
 
-	// Update trusted header and vals.
-	nextVals, err := c.validatorSetFromPrimary(newHeader.Height + 1)
-	if err != nil {
-		return err
-	}
-
-	return c.updateTrustedHeaderAndNextVals(newHeader, nextVals)
+	return c.updateTrustedHeaderAndVals(newHeader, newVals)
 }
 
 // Primary returns the primary provider.
@@ -679,7 +666,7 @@ func (c *Client) cleanup(stopHeight int64) error {
 		stopHeight = oldestHeight
 	}
 	for height := stopHeight; height <= latestHeight; height++ {
-		err = c.trustedStore.DeleteSignedHeaderAndNextValidatorSet(height)
+		err = c.trustedStore.DeleteSignedHeaderAndValidatorSet(height)
 		if err != nil {
 			c.logger.Error("can't remove a trusted header & validator set", "err", err, "height", height)
 			continue
@@ -687,8 +674,8 @@ func (c *Client) cleanup(stopHeight int64) error {
 	}
 
 	c.latestTrustedHeader = nil
-	c.latestTrustedNextVals = nil
-	err = c.restoreTrustedHeaderAndNextVals()
+	c.latestTrustedVals = nil
+	err = c.restoreTrustedHeaderAndVals()
 	if err != nil {
 		return err
 	}
@@ -698,51 +685,46 @@ func (c *Client) cleanup(stopHeight int64) error {
 
 // see VerifyHeader
 func (c *Client) sequence(
-	trustedHeader *types.SignedHeader,
-	trustedNextVals *types.ValidatorSet,
+	initiallyTrustedHeader *types.SignedHeader,
 	newHeader *types.SignedHeader,
 	newVals *types.ValidatorSet,
 	now time.Time) error {
 
-	// 1) Verify any intermediate headers.
 	var (
-		interimHeader   *types.SignedHeader
-		interimNextVals *types.ValidatorSet
-		err             error
+		trustedHeader = initiallyTrustedHeader
+
+		interimHeader *types.SignedHeader
+		interimVals   *types.ValidatorSet
+
+		err error
 	)
-	for height := trustedHeader.Height + 1; height <= newHeader.Height; height++ {
-		interimHeader, err = c.signedHeaderFromPrimary(height)
-		if err != nil {
-			return errors.Wrapf(err, "failed to obtain the header #%d", height)
+
+	for height := initiallyTrustedHeader.Height + 1; height <= newHeader.Height; height++ {
+		// 1) Fetch interim headers and vals if needed.
+		if height == newHeader.Height { // last header
+			interimHeader, interimVals = newHeader, newVals
+		} else { // intermediate headers
+			interimHeader, interimVals, err = c.fetchHeaderAndValsAtHeight(height)
+			if err != nil {
+				return errors.Wrapf(err, "failed to obtain the header #%d", height)
+			}
 		}
 
+		// 2) Verify them
 		c.logger.Debug("Verify newHeader against trustedHeader",
-			"trustedHeight", c.latestTrustedHeader.Height,
-			"trustedHash", hash2str(c.latestTrustedHeader.Hash()),
+			"trustedHeight", trustedHeader.Height,
+			"trustedHash", hash2str(trustedHeader.Hash()),
 			"newHeight", interimHeader.Height,
 			"newHash", hash2str(interimHeader.Hash()))
-		err = VerifyAdjacent(c.chainID, trustedHeader, interimHeader, trustedNextVals,
+
+		err = VerifyAdjacent(c.chainID, trustedHeader, interimHeader, interimVals,
 			c.trustingPeriod, now)
 		if err != nil {
 			return errors.Wrapf(err, "failed to verify the header #%d", height)
 		}
 
-		// Update trusted header and vals.
-		if height == newHeader.Height-1 {
-			interimNextVals = newVals
-		} else {
-			interimNextVals, err = c.validatorSetFromPrimary(height + 1)
-			if err != nil {
-				return errors.Wrapf(err, "failed to obtain the vals #%d", height+1)
-			}
-			if !bytes.Equal(interimHeader.NextValidatorsHash, interimNextVals.Hash()) {
-				return errors.Errorf("expected next validator's hash %X, but got %X (height #%d)",
-					interimHeader.NextValidatorsHash,
-					interimNextVals.Hash(),
-					interimHeader.Height)
-			}
-		}
-		trustedHeader, trustedNextVals = interimHeader, interimNextVals
+		// 3) Update trustedHeader
+		trustedHeader = interimHeader
 	}
 
 	return nil
@@ -750,22 +732,28 @@ func (c *Client) sequence(
 
 // see VerifyHeader
 func (c *Client) bisection(
-	trustedHeader *types.SignedHeader, // height h
-	trustedNextVals *types.ValidatorSet, // height h + 1
-	newHeader *types.SignedHeader, // height g
-	newVals *types.ValidatorSet, // height g
+	initiallyTrustedHeader *types.SignedHeader,
+	initiallyTrustedVals *types.ValidatorSet,
+	newHeader *types.SignedHeader,
+	newVals *types.ValidatorSet,
 	now time.Time) error {
 
-	interimVals := newVals
-	interimHeader := newHeader
+	var (
+		trustedHeader = initiallyTrustedHeader
+		trustedVals   = initiallyTrustedVals
+
+		interimHeader = newHeader
+		interimVals   = newVals
+	)
 
 	for {
 		c.logger.Debug("Verify newHeader against trustedHeader",
 			"trustedHeight", trustedHeader.Height,
 			"trustedHash", hash2str(trustedHeader.Hash()),
-			"newHeight", newHeader.Height,
-			"newHash", hash2str(newHeader.Hash()))
-		err := Verify(c.chainID, trustedHeader, trustedNextVals, interimHeader, interimVals, c.trustingPeriod, now,
+			"newHeight", interimHeader.Height,
+			"newHash", hash2str(interimHeader.Hash()))
+
+		err := Verify(c.chainID, trustedHeader, trustedVals, interimHeader, interimVals, c.trustingPeriod, now,
 			c.trustLevel)
 		switch err.(type) {
 		case nil:
@@ -774,17 +762,7 @@ func (c *Client) bisection(
 			}
 
 			// Update the lower bound to the previous upper bound
-			interimNextVals, err := c.validatorSetFromPrimary(interimHeader.Height + 1)
-			if err != nil {
-				return err
-			}
-			if !bytes.Equal(interimHeader.NextValidatorsHash, interimNextVals.Hash()) {
-				return errors.Errorf("expected next validator's hash %X, but got %X (height #%d)",
-					interimHeader.NextValidatorsHash,
-					interimNextVals.Hash(),
-					interimHeader.Height)
-			}
-			trustedHeader, trustedNextVals = interimHeader, interimNextVals
+			trustedHeader, trustedVals = interimHeader, interimVals
 			// Update the upper bound to the untrustedHeader
 			interimHeader, interimVals = newHeader, newVals
 
@@ -801,18 +779,17 @@ func (c *Client) bisection(
 	}
 }
 
-// persist header and next validators to trustedStore.
-func (c *Client) updateTrustedHeaderAndNextVals(h *types.SignedHeader, nextVals *types.ValidatorSet) error {
-	if !bytes.Equal(h.NextValidatorsHash, nextVals.Hash()) {
-		return errors.Errorf("expected next validator's hash %X, but got %X", h.NextValidatorsHash, nextVals.Hash())
+func (c *Client) updateTrustedHeaderAndVals(h *types.SignedHeader, vals *types.ValidatorSet) error {
+	if !bytes.Equal(h.ValidatorsHash, vals.Hash()) {
+		return errors.Errorf("expected validator's hash %X, but got %X", h.ValidatorsHash, vals.Hash())
 	}
 
-	if err := c.trustedStore.SaveSignedHeaderAndNextValidatorSet(h, nextVals); err != nil {
+	if err := c.trustedStore.SaveSignedHeaderAndValidatorSet(h, vals); err != nil {
 		return errors.Wrap(err, "failed to save trusted header")
 	}
 
 	c.latestTrustedHeader = h
-	c.latestTrustedNextVals = nextVals
+	c.latestTrustedVals = vals
 
 	return nil
 }
@@ -898,7 +875,7 @@ func (c *Client) compareNewHeaderWithWitnesses(h *types.SignedHeader) error {
 			}
 
 			if !bytes.Equal(h.Hash(), altH.Hash()) {
-				if err = c.latestTrustedNextVals.VerifyCommitTrusting(c.chainID, altH.Commit.BlockID,
+				if err = c.latestTrustedVals.VerifyCommitTrusting(c.chainID, altH.Commit.BlockID,
 					altH.Height, altH.Commit, c.trustLevel); err != nil {
 					c.logger.Error("Witness sent us incorrect header", "err", err, "witness", witness)
 					witnessesToRemove = append(witnessesToRemove, i)
@@ -1002,7 +979,7 @@ func (c *Client) RemoveNoLongerTrustedHeaders(now time.Time) {
 			break
 		}
 
-		err = c.trustedStore.DeleteSignedHeaderAndNextValidatorSet(height)
+		err = c.trustedStore.DeleteSignedHeaderAndValidatorSet(height)
 		if err != nil {
 			c.logger.Error("can't remove a trusted header & validator set", "err", err, "height", height)
 			continue
diff --git a/lite2/client_test.go b/lite2/client_test.go
index a6b615227..3500c918d 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -50,7 +50,6 @@ var (
 			1: vals,
 			2: vals,
 			3: vals,
-			4: vals,
 		},
 	)
 	deadNode = mockp.NewDeadMock(chainID)
@@ -81,7 +80,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: vals,
-				4: vals,
 			},
 			false,
 			false,
@@ -115,7 +113,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: vals,
-				4: vals,
 			},
 			false,
 			true,
@@ -136,7 +133,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: vals,
-				4: vals,
 			},
 			false,
 			true,
@@ -155,7 +151,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: newVals,
-				4: newVals,
 			},
 			false,
 			true,
@@ -230,7 +225,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: vals,
-				4: vals,
 			},
 			false,
 			false,
@@ -247,7 +241,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: transitVals,
-				4: transitVals,
 			},
 			false,
 			false,
@@ -268,7 +261,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: newVals,
-				4: newVals,
 			},
 			false,
 			false,
@@ -289,7 +281,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 				1: vals,
 				2: vals,
 				3: newVals,
-				4: newVals,
 			},
 			false,
 			true,
@@ -404,7 +395,7 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 	// 1. options.Hash == trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
-		err := trustedStore.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+		err := trustedStore.SaveSignedHeaderAndValidatorSet(h1, vals)
 		require.NoError(t, err)
 
 		c, err := NewClient(
@@ -429,7 +420,7 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 	// 2. options.Hash != trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
-		err := trustedStore.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+		err := trustedStore.SaveSignedHeaderAndValidatorSet(h1, vals)
 		require.NoError(t, err)
 
 		// header1 != header
@@ -444,7 +435,6 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 			},
 			map[int64]*types.ValidatorSet{
 				1: vals,
-				2: vals,
 			},
 		)
 
@@ -477,7 +467,7 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 	// 1. options.Hash == trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
-		err := trustedStore.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+		err := trustedStore.SaveSignedHeaderAndValidatorSet(h1, vals)
 		require.NoError(t, err)
 
 		c, err := NewClient(
@@ -508,7 +498,7 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 	// This could happen if previous provider was lying to us.
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
-		err := trustedStore.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+		err := trustedStore.SaveSignedHeaderAndValidatorSet(h1, vals)
 		require.NoError(t, err)
 
 		// header1 != header
@@ -527,7 +517,6 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 			map[int64]*types.ValidatorSet{
 				1: vals,
 				2: vals,
-				3: vals,
 			},
 		)
 
@@ -560,12 +549,12 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 	// 1. options.Hash == trustedHeader.Hash
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
-		err := trustedStore.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+		err := trustedStore.SaveSignedHeaderAndValidatorSet(h1, vals)
 		require.NoError(t, err)
 
 		//header2 := keys.GenSignedHeader(chainID, 2, bTime.Add(2*time.Hour), nil, vals, vals,
 		//	[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys))
-		err = trustedStore.SaveSignedHeaderAndNextValidatorSet(h2, vals)
+		err = trustedStore.SaveSignedHeaderAndValidatorSet(h2, vals)
 		require.NoError(t, err)
 
 		primary := mockp.New(
@@ -577,7 +566,6 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 			map[int64]*types.ValidatorSet{
 				1: vals,
 				2: vals,
-				3: vals,
 			},
 		)
 
@@ -610,7 +598,7 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 	// This could happen if previous provider was lying to us.
 	{
 		trustedStore := dbs.New(dbm.NewMemDB(), chainID)
-		err := trustedStore.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+		err := trustedStore.SaveSignedHeaderAndValidatorSet(h1, vals)
 		require.NoError(t, err)
 
 		// header1 != header
@@ -619,7 +607,7 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 
 		header2 := keys.GenSignedHeader(chainID, 2, bTime.Add(2*time.Hour), nil, vals, vals,
 			[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys))
-		err = trustedStore.SaveSignedHeaderAndNextValidatorSet(header2, vals)
+		err = trustedStore.SaveSignedHeaderAndValidatorSet(header2, vals)
 		require.NoError(t, err)
 
 		primary := mockp.New(
@@ -629,7 +617,6 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 			},
 			map[int64]*types.ValidatorSet{
 				1: vals,
-				2: vals,
 			},
 		)
 
@@ -796,7 +783,7 @@ func TestClient_BackwardsVerification(t *testing.T) {
 func TestClient_NewClientFromTrustedStore(t *testing.T) {
 	// 1) Initiate DB and fill with a "trusted" header
 	db := dbs.New(dbm.NewMemDB(), chainID)
-	err := db.SaveSignedHeaderAndNextValidatorSet(h1, vals)
+	err := db.SaveSignedHeaderAndValidatorSet(h1, vals)
 	require.NoError(t, err)
 
 	c, err := NewClientFromTrustedStore(
diff --git a/lite2/store/db/db.go b/lite2/store/db/db.go
index 89897ed7f..baae0d040 100644
--- a/lite2/store/db/db.go
+++ b/lite2/store/db/db.go
@@ -31,9 +31,9 @@ func New(db dbm.DB, prefix string) store.Store {
 	return &dbs{db: db, prefix: prefix, cdc: cdc}
 }
 
-// SaveSignedHeaderAndNextValidatorSet persists SignedHeader and ValidatorSet
-// to the db.
-func (s *dbs) SaveSignedHeaderAndNextValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error {
+// SaveSignedHeaderAndValidatorSet persists SignedHeader and ValidatorSet to
+// the db.
+func (s *dbs) SaveSignedHeaderAndValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error {
 	if sh.Height <= 0 {
 		panic("negative or zero height")
 	}
@@ -42,6 +42,7 @@ func (s *dbs) SaveSignedHeaderAndNextValidatorSet(sh *types.SignedHeader, valSet
 	if err != nil {
 		return errors.Wrap(err, "marshalling header")
 	}
+
 	valSetBz, err := s.cdc.MarshalBinaryLengthPrefixed(valSet)
 	if err != nil {
 		return errors.Wrap(err, "marshalling validator set")
@@ -49,22 +50,22 @@ func (s *dbs) SaveSignedHeaderAndNextValidatorSet(sh *types.SignedHeader, valSet
 
 	b := s.db.NewBatch()
 	b.Set(s.shKey(sh.Height), shBz)
-	b.Set(s.vsKey(sh.Height+1), valSetBz)
+	b.Set(s.vsKey(sh.Height), valSetBz)
 	err = b.WriteSync()
 	b.Close()
 	return err
 }
 
-// DeleteSignedHeaderAndNextValidatorSet deletes SignedHeader and ValidatorSet
-// from the db.
-func (s *dbs) DeleteSignedHeaderAndNextValidatorSet(height int64) error {
+// DeleteSignedHeaderAndValidatorSet deletes SignedHeader and ValidatorSet from
+// the db.
+func (s *dbs) DeleteSignedHeaderAndValidatorSet(height int64) error {
 	if height <= 0 {
 		panic("negative or zero height")
 	}
 
 	b := s.db.NewBatch()
 	b.Delete(s.shKey(height))
-	b.Delete(s.vsKey(height + 1))
+	b.Delete(s.vsKey(height))
 	err := b.WriteSync()
 	b.Close()
 	return err
diff --git a/lite2/store/db/db_test.go b/lite2/store/db/db_test.go
index a1dc3000e..8e317d29b 100644
--- a/lite2/store/db/db_test.go
+++ b/lite2/store/db/db_test.go
@@ -24,7 +24,7 @@ func TestLast_FirstSignedHeaderHeight(t *testing.T) {
 	assert.EqualValues(t, -1, height)
 
 	// 1 key
-	err = dbStore.SaveSignedHeaderAndNextValidatorSet(
+	err = dbStore.SaveSignedHeaderAndValidatorSet(
 		&types.SignedHeader{Header: &types.Header{Height: 1}}, &types.ValidatorSet{})
 	require.NoError(t, err)
 
@@ -37,20 +37,20 @@ func TestLast_FirstSignedHeaderHeight(t *testing.T) {
 	assert.EqualValues(t, 1, height)
 }
 
-func Test_SaveSignedHeaderAndNextValidatorSet(t *testing.T) {
-	dbStore := New(dbm.NewMemDB(), "Test_SaveSignedHeaderAndNextValidatorSet")
+func Test_SaveSignedHeaderAndValidatorSet(t *testing.T) {
+	dbStore := New(dbm.NewMemDB(), "Test_SaveSignedHeaderAndValidatorSet")
 
 	// Empty store
 	h, err := dbStore.SignedHeader(1)
 	require.Error(t, err)
 	assert.Nil(t, h)
 
-	valSet, err := dbStore.ValidatorSet(2)
+	valSet, err := dbStore.ValidatorSet(1)
 	require.Error(t, err)
 	assert.Nil(t, valSet)
 
 	// 1 key
-	err = dbStore.SaveSignedHeaderAndNextValidatorSet(
+	err = dbStore.SaveSignedHeaderAndValidatorSet(
 		&types.SignedHeader{Header: &types.Header{Height: 1}}, &types.ValidatorSet{})
 	require.NoError(t, err)
 
@@ -58,19 +58,19 @@ func Test_SaveSignedHeaderAndNextValidatorSet(t *testing.T) {
 	require.NoError(t, err)
 	assert.NotNil(t, h)
 
-	valSet, err = dbStore.ValidatorSet(2)
+	valSet, err = dbStore.ValidatorSet(1)
 	require.NoError(t, err)
 	assert.NotNil(t, valSet)
 
 	// Empty store
-	err = dbStore.DeleteSignedHeaderAndNextValidatorSet(1)
+	err = dbStore.DeleteSignedHeaderAndValidatorSet(1)
 	require.NoError(t, err)
 
 	h, err = dbStore.SignedHeader(1)
 	require.Error(t, err)
 	assert.Nil(t, h)
 
-	valSet, err = dbStore.ValidatorSet(2)
+	valSet, err = dbStore.ValidatorSet(1)
 	require.Error(t, err)
 	assert.Nil(t, valSet)
 }
@@ -83,7 +83,7 @@ func Test_SignedHeaderAfter(t *testing.T) {
 		dbStore.SignedHeaderAfter(100)
 	})
 
-	err := dbStore.SaveSignedHeaderAndNextValidatorSet(
+	err := dbStore.SaveSignedHeaderAndValidatorSet(
 		&types.SignedHeader{Header: &types.Header{Height: 2}}, &types.ValidatorSet{})
 	require.NoError(t, err)
 
diff --git a/lite2/store/errors.go b/lite2/store/errors.go
index 8a587047b..2f77bc893 100644
--- a/lite2/store/errors.go
+++ b/lite2/store/errors.go
@@ -6,6 +6,7 @@ var (
 	// ErrSignedHeaderNotFound is returned when a store does not have the
 	// requested header.
 	ErrSignedHeaderNotFound = errors.New("signed header not found")
+
 	// ErrValidatorSetNotFound is returned when a store does not have the
 	// requested validator set.
 	ErrValidatorSetNotFound = errors.New("validator set not found")
diff --git a/lite2/store/store.go b/lite2/store/store.go
index 33b94821d..65cd82731 100644
--- a/lite2/store/store.go
+++ b/lite2/store/store.go
@@ -4,17 +4,17 @@ import "github.com/tendermint/tendermint/types"
 
 // Store is anything that can persistenly store headers.
 type Store interface {
-	// SaveSignedHeaderAndNextValidatorSet saves a SignedHeader (h: sh.Height)
-	// and a ValidatorSet (h: sh.Height+1).
+	// SaveSignedHeaderAndValidatorSet saves a SignedHeader (h: sh.Height) and a
+	// ValidatorSet (h: sh.Height).
 	//
 	// height must be > 0.
-	SaveSignedHeaderAndNextValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error
+	SaveSignedHeaderAndValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error
 
-	// DeleteSignedHeaderAndNextValidatorSet deletes SignedHeader (h: height) and
-	// ValidatorSet (h: height+1).
+	// DeleteSignedHeaderAndValidatorSet deletes SignedHeader (h: height) and
+	// ValidatorSet (h: height).
 	//
 	// height must be > 0.
-	DeleteSignedHeaderAndNextValidatorSet(height int64) error
+	DeleteSignedHeaderAndValidatorSet(height int64) error
 
 	// SignedHeader returns the SignedHeader that corresponds to the given
 	// height.
diff --git a/lite2/verifier.go b/lite2/verifier.go
index 5491c8d91..c0732a69c 100644
--- a/lite2/verifier.go
+++ b/lite2/verifier.go
@@ -21,15 +21,15 @@ var (
 //
 //	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned);
 //	b) untrustedHeader is valid;
-//	c) trustLevel ([1/3, 1]) of trustedHeaderNextVals signed correctly
-//     (if not, ErrNewValSetCantBeTrusted is returned);
+//	c) trustLevel ([1/3, 1]) of trustedHeaderVals (or trustedHeaderNextVals)
+//  signed correctly (if not, ErrNewValSetCantBeTrusted is returned);
 //	d) more than 2/3 of untrustedVals have signed h2 (if not,
 //	   ErrNotEnoughVotingPowerSigned is returned);
 //  e) headers are non-adjacent.
 func VerifyNonAdjacent(
 	chainID string,
 	trustedHeader *types.SignedHeader, // height=X
-	trustedNextVals *types.ValidatorSet, // height=X+1
+	trustedVals *types.ValidatorSet, // height=X or height=X+1
 	untrustedHeader *types.SignedHeader, // height=Y
 	untrustedVals *types.ValidatorSet, // height=Y
 	trustingPeriod time.Duration,
@@ -49,7 +49,7 @@ func VerifyNonAdjacent(
 	}
 
 	// Ensure that +`trustLevel` (default 1/3) or more of last trusted validators signed correctly.
-	err := trustedNextVals.VerifyCommitTrusting(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
+	err := trustedVals.VerifyCommitTrusting(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
 		untrustedHeader.Commit, trustLevel)
 	if err != nil {
 		switch e := err.(type) {
@@ -78,7 +78,7 @@ func VerifyNonAdjacent(
 //
 //	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned);
 //	b) untrustedHeader is valid;
-//	c) untrustedHeader.ValidatorsHash equals trustedHeaderNextVals.Hash()
+//	c) untrustedHeader.ValidatorsHash equals trustedHeader.NextValidatorsHash;
 //	d) more than 2/3 of new validators (untrustedVals) have signed h2 (if not,
 //	   ErrNotEnoughVotingPowerSigned is returned);
 //  e) headers are adjacent.
@@ -124,7 +124,7 @@ func VerifyAdjacent(
 func Verify(
 	chainID string,
 	trustedHeader *types.SignedHeader, // height=X
-	trustedNextVals *types.ValidatorSet, // height=X+1
+	trustedVals *types.ValidatorSet, // height=X or height=X+1
 	untrustedHeader *types.SignedHeader, // height=Y
 	untrustedVals *types.ValidatorSet, // height=Y
 	trustingPeriod time.Duration,
@@ -132,7 +132,7 @@ func Verify(
 	trustLevel tmmath.Fraction) error {
 
 	if untrustedHeader.Height != trustedHeader.Height+1 {
-		return VerifyNonAdjacent(chainID, trustedHeader, trustedNextVals, untrustedHeader, untrustedVals,
+		return VerifyNonAdjacent(chainID, trustedHeader, trustedVals, untrustedHeader, untrustedVals,
 			trustingPeriod, now, trustLevel)
 	}
 

From 9231b52e0dbd0301f2e075bb70a3a9175f058b0c Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Wed, 26 Feb 2020 12:56:20 +0100
Subject: [PATCH 30/74] lite2: cross-check first header and update tests
 (#4471)

closes #4464
---
 .../adr-046-light-client-implementation.md    |  4 +-
 lite2/client.go                               |  5 ++
 lite2/client_test.go                          | 54 ++++++++++++-------
 3 files changed, 42 insertions(+), 21 deletions(-)

diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index 071149512..71a505b2c 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -2,6 +2,7 @@
 
 ## Changelog
 * 13-02-2020: Initial draft
+* 26-02-2020: Cross-checking the first header
 
 ## Context
 
@@ -62,7 +63,8 @@ func NewClient(
 made to increase security by default. At least one witness is required,
 although, right now, the light client does not check that primary != witness.
 When cross-checking a new header with witnesses, minimum number of witnesses
-required to respond: 1.
+required to respond: 1. Note the very first header (`TrustOptions.Hash`) is
+also cross-checked with witnesses for additional security.
 
 Due to bisection algorithm nature, some headers might be skipped. If the light
 client does not have a header for height `X` and `TrustedHeader(X)` or
diff --git a/lite2/client.go b/lite2/client.go
index 36b366b93..776c758bc 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -356,6 +356,11 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 		return errors.Errorf("expected header's hash %X, but got %X", options.Hash, h.Hash())
 	}
 
+	err = c.compareNewHeaderWithWitnesses(h)
+	if err != nil {
+		return err
+	}
+
 	// 2) Fetch and verify the vals.
 	vals, err := c.validatorSetFromPrimary(options.Height)
 	if err != nil {
diff --git a/lite2/client_test.go b/lite2/client_test.go
index 3500c918d..9052d0230 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -802,44 +802,49 @@ func TestClient_NewClientFromTrustedStore(t *testing.T) {
 	assert.EqualValues(t, 1, h.Height)
 }
 
-func TestClientUpdateErrorsIfAllWitnessesUnavailable(t *testing.T) {
-	c, err := NewClient(
+func TestNewClientErrorsIfAllWitnessesUnavailable(t *testing.T) {
+	_, err := NewClient(
 		chainID,
 		trustOptions,
 		fullNode,
-		[]provider.Provider{deadNode, deadNode, deadNode},
+		[]provider.Provider{deadNode, deadNode},
 		dbs.New(dbm.NewMemDB(), chainID),
 		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
 		MaxRetryAttempts(1),
 	)
-	require.NoError(t, err)
-
-	err = c.Update(bTime.Add(2 * time.Hour))
 	if assert.Error(t, err) {
 		assert.Contains(t, err.Error(), "awaiting response from all witnesses exceeded dropout time")
 	}
 }
 
 func TestClientRemovesWitnessIfItSendsUsIncorrectHeader(t *testing.T) {
-	// straight invalid header
+	// different headers hash then primary plus less than 1/3 signed (no fork)
 	badProvider1 := mockp.New(
 		chainID,
 		map[int64]*types.SignedHeader{
-			3: {Header: nil, Commit: nil},
+			1: h1,
+			2: keys.GenSignedHeaderLastBlockID(chainID, 2, bTime.Add(30*time.Minute), nil, vals, vals,
+				[]byte("app_hash2"), []byte("cons_hash"), []byte("results_hash"),
+				len(keys), len(keys), types.BlockID{Hash: h1.Hash()}),
+		},
+		map[int64]*types.ValidatorSet{
+			1: vals,
+			2: vals,
 		},
-		map[int64]*types.ValidatorSet{},
 	)
-
-	// less than 1/3 signed
+	// header is empty
 	badProvider2 := mockp.New(
 		chainID,
 		map[int64]*types.SignedHeader{
-			3: keys.GenSignedHeaderLastBlockID(chainID, 3, bTime.Add(1*time.Hour), nil, vals, vals,
-				[]byte("app_hash2"), []byte("cons_hash"), []byte("results_hash"),
-				len(keys), len(keys), types.BlockID{Hash: h2.Hash()}),
+			1: h1,
+			2: h2,
+			3: {Header: nil, Commit: nil},
+		},
+		map[int64]*types.ValidatorSet{
+			1: vals,
+			2: vals,
 		},
-		map[int64]*types.ValidatorSet{},
 	)
 
 	c, err := NewClient(
@@ -850,12 +855,21 @@ func TestClientRemovesWitnessIfItSendsUsIncorrectHeader(t *testing.T) {
 		dbs.New(dbm.NewMemDB(), chainID),
 		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
+		MaxRetryAttempts(1),
 	)
+	// witness should have behaved properly -> no error
 	require.NoError(t, err)
+	assert.EqualValues(t, 2, len(c.Witnesses()))
 
-	err = c.Update(bTime.Add(2 * time.Hour))
-	if assert.Error(t, err) {
-		assert.Contains(t, err.Error(), "could not find any witnesses")
-	}
-	assert.Zero(t, 0, len(c.Witnesses()))
+	// witness behaves incorrectly -> removed from list, no error
+	h, err := c.VerifyHeaderAtHeight(2, bTime.Add(2*time.Hour))
+	assert.NoError(t, err)
+	assert.EqualValues(t, 1, len(c.Witnesses()))
+	// header should still be verified
+	assert.EqualValues(t, 2, h.Height)
+
+	// no witnesses left to verify -> error
+	_, err = c.VerifyHeaderAtHeight(3, bTime.Add(2*time.Hour))
+	assert.Error(t, err)
+	assert.EqualValues(t, 0, len(c.Witnesses()))
 }

From 6daea31f50b94e25fd06e99793fb3e4d08284570 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Wed, 26 Feb 2020 16:15:06 +0100
Subject: [PATCH 31/74] lite2: remove expiration checks on functions that don't
 require them (#4477)

closes: #4455

Verifying backwards checks that the trustedHeader hasn't expired both before and after the loop in case of verifying many headers (a longer operation), but not during the loop itself.

TrustedHeader() no longer checks whether the header saved in the store has expired.

Tests have been updated to reflect the changes

## Commits:

* verify headers backwards out of trust period

* removed expiration check in trusted header func

* modified tests to reflect changes

* wrote new tests for backwards verification

* modified TrustedHeader and TrustedValSet functions

* condensed test functions

* condensed test functions further

* fix build error

* update doc

* add comments

* remove unnecessary declaration

* extract latestHeight check into a separate func

Co-authored-by: Callum Waters <cmwaters19@gmail.com>
---
 .../adr-046-light-client-implementation.md    |   4 +-
 lite2/client.go                               | 121 +++++----
 lite2/client_test.go                          | 245 ++++++++++--------
 lite2/example_test.go                         |   4 +-
 lite2/rpc/client.go                           |   4 +-
 5 files changed, 202 insertions(+), 176 deletions(-)

diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index 71a505b2c..dbae7e641 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -27,8 +27,8 @@ type Client interface {
 	Cleanup() error
 
 	// get trusted headers & validators
-	TrustedHeader(height int64, now time.Time) (*types.SignedHeader, error)
-	TrustedValidatorSet(height int64, now time.Time) (*types.ValidatorSet, error)
+	TrustedHeader(height int64) (*types.SignedHeader, error)
+	TrustedValidatorSet(height int64) (*types.ValidatorSet, error)
 	LastTrustedHeight() (int64, error)
 	FirstTrustedHeight() (int64, error)
 
diff --git a/lite2/client.go b/lite2/client.go
index 776c758bc..1def6195b 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -411,8 +411,6 @@ func (c *Client) Stop() {
 }
 
 // TrustedHeader returns a trusted header at the given height (0 - the latest).
-// If a header is missing in trustedStore (e.g. it was skipped during
-// bisection), it will be downloaded from primary.
 //
 // Headers along with validator sets, which can't be trusted anymore, are
 // removed once a day (can be changed with RemoveNoLongerTrustedHeadersPeriod
@@ -421,77 +419,65 @@ func (c *Client) Stop() {
 // height must be >= 0.
 //
 // It returns an error if:
-//  - header expired, therefore can't be trusted (ErrOldHeaderExpired);
 //  - there are some issues with the trusted store, although that should not
 //  happen normally;
 //  - negative height is passed;
-//  - header has not been verified yet
+//  - header has not been verified yet and is therefore not in the store
 //
 // Safe for concurrent use by multiple goroutines.
-func (c *Client) TrustedHeader(height int64, now time.Time) (*types.SignedHeader, error) {
-	if height < 0 {
-		return nil, errors.New("negative height")
-	}
-
-	// 1) Get latest height.
-	latestHeight, err := c.LastTrustedHeight()
+func (c *Client) TrustedHeader(height int64) (*types.SignedHeader, error) {
+	height, err := c.compareWithLatestHeight(height)
 	if err != nil {
 		return nil, err
 	}
-	if latestHeight == -1 {
-		return nil, errors.New("no headers exist")
-	}
-	if height > latestHeight {
-		return nil, errors.Errorf("unverified header requested (latest: %d)", latestHeight)
-	}
-	if height == 0 {
-		height = latestHeight
-	}
-
-	// 2) Get header from store.
-	h, err := c.trustedStore.SignedHeader(height)
-	if err != nil {
-		return nil, err
-	}
-
-	// 3) Ensure header can still be trusted.
-	if HeaderExpired(h, c.trustingPeriod, now) {
-		return nil, ErrOldHeaderExpired{h.Time.Add(c.trustingPeriod), now}
-	}
-
-	return h, nil
+	return c.trustedStore.SignedHeader(height)
 }
 
-// TrustedValidatorSet returns a trusted validator set at the given height. If
-// a validator set is missing in trustedStore (e.g. the associated header was
-// skipped during bisection), it will be downloaded from primary.
+// TrustedValidatorSet returns a trusted validator set at the given height (0 -
+// latest).
 //
 // height must be >= 0.
 //
-// Headers along with validator sets, which can't be trusted anymore, are
+// Headers along with validator sets are
 // removed once a day (can be changed with RemoveNoLongerTrustedHeadersPeriod
 // option).
 //
-// It returns an error if:
-//	- header signed by that validator set expired (ErrOldHeaderExpired)
+// Function returns an error if:
 //  - there are some issues with the trusted store, although that should not
 //  happen normally;
 //  - negative height is passed;
 //  - header signed by that validator set has not been verified yet
 //
 // Safe for concurrent use by multiple goroutines.
-func (c *Client) TrustedValidatorSet(height int64, now time.Time) (*types.ValidatorSet, error) {
-	// Checks height is positive and header is not expired.
-	// Additionally, it fetches validator set from primary if it's missing in
-	// store.
-	_, err := c.TrustedHeader(height, now)
+func (c *Client) TrustedValidatorSet(height int64) (*types.ValidatorSet, error) {
+	height, err := c.compareWithLatestHeight(height)
 	if err != nil {
 		return nil, err
 	}
-
 	return c.trustedStore.ValidatorSet(height)
 }
 
+func (c *Client) compareWithLatestHeight(height int64) (int64, error) {
+	latestHeight, err := c.LastTrustedHeight()
+	if err != nil {
+		return 0, err
+	}
+	if latestHeight == -1 {
+		return 0, errors.New("no headers exist")
+	}
+
+	switch {
+	case height > latestHeight:
+		return 0, errors.Errorf("unverified header/valset requested (latest: %d)", latestHeight)
+	case height == 0:
+		return latestHeight, nil
+	case height < 0:
+		return 0, errors.New("negative height")
+	}
+
+	return height, nil
+}
+
 // LastTrustedHeight returns a last trusted height. -1 and nil are returned if
 // there are no trusted headers.
 //
@@ -528,14 +514,11 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 	}
 
 	// Check if header already verified.
-	h, err := c.TrustedHeader(height, now)
-	switch err.(type) {
-	case nil:
+	h, err := c.TrustedHeader(height)
+	if err == nil {
 		c.logger.Info("Header has already been verified", "height", height, "hash", hash2str(h.Hash()))
 		// Return already trusted header
 		return h, nil
-	case ErrOldHeaderExpired:
-		return nil, err
 	}
 
 	// Request the header and the vals.
@@ -567,19 +550,19 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // provider, provider.ErrSignedHeaderNotFound /
 // provider.ErrValidatorSetNotFound error is returned.
 func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error {
+	if newHeader.Height <= 0 {
+		return errors.New("negative or zero height")
+	}
+
 	// Check if newHeader already verified.
-	h, err := c.TrustedHeader(newHeader.Height, now)
-	switch err.(type) {
-	case nil:
-		// Make sure it's the same header.
+	h, err := c.TrustedHeader(newHeader.Height)
+	if err == nil {
 		if !bytes.Equal(h.Hash(), newHeader.Hash()) {
 			return errors.Errorf("existing trusted header %X does not match newHeader %X", h.Hash(), newHeader.Hash())
 		}
 		c.logger.Info("Header has already been verified",
 			"height", newHeader.Height, "hash", hash2str(newHeader.Hash()))
 		return nil
-	case ErrOldHeaderExpired:
-		return err
 	}
 
 	return c.verifyHeader(newHeader, newVals, now)
@@ -793,8 +776,11 @@ func (c *Client) updateTrustedHeaderAndVals(h *types.SignedHeader, vals *types.V
 		return errors.Wrap(err, "failed to save trusted header")
 	}
 
-	c.latestTrustedHeader = h
-	c.latestTrustedVals = vals
+	// Only update latestTrustedHeader if we move forward (not backwards).
+	if c.latestTrustedHeader == nil || h.Height > c.latestTrustedHeader.Height {
+		c.latestTrustedHeader = h
+		c.latestTrustedVals = vals
+	}
 
 	return nil
 }
@@ -814,17 +800,21 @@ func (c *Client) fetchHeaderAndValsAtHeight(height int64) (*types.SignedHeader,
 }
 
 // Backwards verification (see VerifyHeaderBackwards func in the spec)
-func (c *Client) backwards(trustedHeader *types.SignedHeader, newHeader *types.SignedHeader,
+func (c *Client) backwards(
+	initiallyTrustedHeader *types.SignedHeader,
+	newHeader *types.SignedHeader,
 	now time.Time) error {
+
+	if HeaderExpired(initiallyTrustedHeader, c.trustingPeriod, now) {
+		return ErrOldHeaderExpired{initiallyTrustedHeader.Time.Add(c.trustingPeriod), now}
+	}
+
 	var (
+		trustedHeader = initiallyTrustedHeader
 		interimHeader *types.SignedHeader
 		err           error
 	)
 
-	if HeaderExpired(newHeader, c.trustingPeriod, now) {
-		return ErrOldHeaderExpired{newHeader.Time.Add(c.trustingPeriod), now}
-	}
-
 	for trustedHeader.Height > newHeader.Height {
 		interimHeader, err = c.signedHeaderFromPrimary(trustedHeader.Height - 1)
 		if err != nil {
@@ -850,6 +840,11 @@ func (c *Client) backwards(trustedHeader *types.SignedHeader, newHeader *types.S
 		trustedHeader = interimHeader
 	}
 
+	// Initially trusted header might have expired at this point.
+	if HeaderExpired(initiallyTrustedHeader, c.trustingPeriod, now) {
+		return ErrOldHeaderExpired{initiallyTrustedHeader.Time.Add(c.trustingPeriod), now}
+	}
+
 	return nil
 }
 
diff --git a/lite2/client_test.go b/lite2/client_test.go
index 9052d0230..179cf03e4 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -39,18 +39,21 @@ var (
 		Height: 1,
 		Hash:   h1.Hash(),
 	}
+	valSet = map[int64]*types.ValidatorSet{
+		1: vals,
+		2: vals,
+		3: vals,
+		4: vals,
+	}
+	headerSet = map[int64]*types.SignedHeader{
+		1: h1,
+		2: h2,
+		3: h3,
+	}
 	fullNode = mockp.New(
 		chainID,
-		map[int64]*types.SignedHeader{
-			1: h1,
-			2: h2,
-			3: h3,
-		},
-		map[int64]*types.ValidatorSet{
-			1: vals,
-			2: vals,
-			3: vals,
-		},
+		headerSet,
+		valSet,
 	)
 	deadNode = mockp.NewDeadMock(chainID)
 )
@@ -76,11 +79,7 @@ func TestClient_SequentialVerification(t *testing.T) {
 				// last header (3/3 signed)
 				3: h3,
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-				2: vals,
-				3: vals,
-			},
+			valSet,
 			false,
 			false,
 		},
@@ -109,11 +108,7 @@ func TestClient_SequentialVerification(t *testing.T) {
 				3: keys.GenSignedHeader(chainID, 3, bTime.Add(2*time.Hour), nil, vals, vals,
 					[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-				2: vals,
-				3: vals,
-			},
+			valSet,
 			false,
 			true,
 		},
@@ -129,24 +124,13 @@ func TestClient_SequentialVerification(t *testing.T) {
 				3: keys.GenSignedHeader(chainID, 3, bTime.Add(2*time.Hour), nil, vals, vals,
 					[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), len(keys)-1, len(keys)),
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-				2: vals,
-				3: vals,
-			},
+			valSet,
 			false,
 			true,
 		},
 		{
 			"bad: different validator set at height 3",
-			map[int64]*types.SignedHeader{
-				// trusted header
-				1: h1,
-				// interim header (3/3 signed)
-				2: h2,
-				// last header (3/3 signed)
-				3: h3,
-			},
+			headerSet,
 			map[int64]*types.ValidatorSet{
 				1: vals,
 				2: vals,
@@ -221,11 +205,7 @@ func TestClient_SkippingVerification(t *testing.T) {
 				// last header (3/3 signed)
 				3: h3,
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-				2: vals,
-				3: vals,
-			},
+			valSet,
 			false,
 			false,
 		},
@@ -357,12 +337,12 @@ func TestClientRemovesNoLongerTrustedHeaders(t *testing.T) {
 	c.RemoveNoLongerTrustedHeaders(now)
 
 	// Check expired headers are no longer available.
-	h, err := c.TrustedHeader(1, now)
+	h, err := c.TrustedHeader(1)
 	assert.Error(t, err)
 	assert.Nil(t, h)
 
 	// Check not expired headers are available.
-	h, err = c.TrustedHeader(2, now)
+	h, err = c.TrustedHeader(2)
 	assert.NoError(t, err)
 	assert.NotNil(t, h)
 }
@@ -385,7 +365,7 @@ func TestClient_Cleanup(t *testing.T) {
 	require.NoError(t, err)
 
 	// Check no headers exist after Cleanup.
-	h, err := c.TrustedHeader(1, bTime.Add(1*time.Second))
+	h, err := c.TrustedHeader(1)
 	assert.Error(t, err)
 	assert.Nil(t, h)
 }
@@ -411,7 +391,7 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 		require.NoError(t, err)
 		defer c.Stop()
 
-		h, err := c.TrustedHeader(1, bTime.Add(1*time.Second))
+		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), h1.Hash())
@@ -433,9 +413,7 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 				// trusted header
 				1: header1,
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-			},
+			valSet,
 		)
 
 		c, err := NewClient(
@@ -455,7 +433,7 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 		require.NoError(t, err)
 		defer c.Stop()
 
-		h, err := c.TrustedHeader(1, bTime.Add(1*time.Second))
+		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), header1.Hash())
@@ -488,7 +466,7 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 		defer c.Stop()
 
 		// Check we still have the 1st header (+header+).
-		h, err := c.TrustedHeader(1, bTime.Add(2*time.Hour).Add(1*time.Second))
+		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), h1.Hash())
@@ -514,10 +492,7 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 				1: diffHeader1,
 				2: diffHeader2,
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-				2: vals,
-			},
+			valSet,
 		)
 
 		c, err := NewClient(
@@ -538,7 +513,7 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 		defer c.Stop()
 
 		// Check we no longer have the invalid 1st header (+header+).
-		h, err := c.TrustedHeader(1, bTime.Add(2*time.Hour).Add(1*time.Second))
+		h, err := c.TrustedHeader(1)
 		assert.Error(t, err)
 		assert.Nil(t, h)
 	}
@@ -557,23 +532,11 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 		err = trustedStore.SaveSignedHeaderAndValidatorSet(h2, vals)
 		require.NoError(t, err)
 
-		primary := mockp.New(
-			chainID,
-			map[int64]*types.SignedHeader{
-				1: h1,
-				2: h2,
-			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-				2: vals,
-			},
-		)
-
 		c, err := NewClient(
 			chainID,
 			trustOptions,
-			primary,
-			[]provider.Provider{primary},
+			fullNode,
+			[]provider.Provider{fullNode},
 			trustedStore,
 			Logger(log.TestingLogger()),
 		)
@@ -583,13 +546,13 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 		defer c.Stop()
 
 		// Check we still have the 1st header (+header+).
-		h, err := c.TrustedHeader(1, bTime.Add(2*time.Hour).Add(1*time.Second))
+		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), h1.Hash())
 
 		// Check we no longer have 2nd header (+header2+).
-		h, err = c.TrustedHeader(2, bTime.Add(2*time.Hour).Add(1*time.Second))
+		h, err = c.TrustedHeader(2)
 		assert.Error(t, err)
 		assert.Nil(t, h)
 	}
@@ -615,9 +578,7 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 			map[int64]*types.SignedHeader{
 				1: header1,
 			},
-			map[int64]*types.ValidatorSet{
-				1: vals,
-			},
+			valSet,
 		)
 
 		c, err := NewClient(
@@ -638,13 +599,13 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 		defer c.Stop()
 
 		// Check we have swapped invalid 1st header (+header+) with correct one (+header1+).
-		h, err := c.TrustedHeader(1, bTime.Add(2*time.Hour).Add(1*time.Second))
+		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), header1.Hash())
 
 		// Check we no longer have invalid 2nd header (+header2+).
-		h, err = c.TrustedHeader(2, bTime.Add(2*time.Hour).Add(1*time.Second))
+		h, err = c.TrustedHeader(2)
 		assert.Error(t, err)
 		assert.Nil(t, h)
 	}
@@ -668,7 +629,7 @@ func TestClient_Update(t *testing.T) {
 	err = c.Update(bTime.Add(2 * time.Hour))
 	require.NoError(t, err)
 
-	h, err := c.TrustedHeader(3, bTime.Add(2*time.Hour))
+	h, err := c.TrustedHeader(3)
 	assert.NoError(t, err)
 	require.NotNil(t, h)
 	assert.EqualValues(t, 3, h.Height)
@@ -709,11 +670,11 @@ func TestClient_Concurrency(t *testing.T) {
 			_, err = c.FirstTrustedHeight()
 			assert.NoError(t, err)
 
-			h, err := c.TrustedHeader(1, bTime.Add(2*time.Hour))
+			h, err := c.TrustedHeader(1)
 			assert.NoError(t, err)
 			assert.NotNil(t, h)
 
-			vals, err := c.TrustedValidatorSet(2, bTime.Add(2*time.Hour))
+			vals, err := c.TrustedValidatorSet(2)
 			assert.NoError(t, err)
 			assert.NotNil(t, vals)
 		}()
@@ -743,41 +704,111 @@ func TestClientReplacesPrimaryWithWitnessIfPrimaryIsUnavailable(t *testing.T) {
 }
 
 func TestClient_BackwardsVerification(t *testing.T) {
-	c, err := NewClient(
-		chainID,
-		TrustOptions{
-			Period: 1 * time.Hour,
-			Height: 3,
-			Hash:   h3.Hash(),
-		},
-		fullNode,
-		[]provider.Provider{fullNode},
-		dbs.New(dbm.NewMemDB(), chainID),
-		UpdatePeriod(0),
-		Logger(log.TestingLogger()),
-	)
-	require.NoError(t, err)
+	{
+		c, err := NewClient(
+			chainID,
+			TrustOptions{
+				Period: 1 * time.Hour,
+				Height: 3,
+				Hash:   h3.Hash(),
+			},
+			fullNode,
+			[]provider.Provider{fullNode},
+			dbs.New(dbm.NewMemDB(), chainID),
+			UpdatePeriod(0),
+			Logger(log.TestingLogger()),
+		)
+		require.NoError(t, err)
 
-	// 1) header is missing => expect no error
-	h, err := c.VerifyHeaderAtHeight(2, bTime.Add(1*time.Hour).Add(1*time.Second))
-	require.NoError(t, err)
-	if assert.NotNil(t, h) {
-		assert.EqualValues(t, 2, h.Height)
+		// 1) header is missing => expect no error
+		h, err := c.VerifyHeaderAtHeight(2, bTime.Add(1*time.Hour).Add(1*time.Second))
+		require.NoError(t, err)
+		if assert.NotNil(t, h) {
+			assert.EqualValues(t, 2, h.Height)
+		}
+
+		// 2) untrusted header is expired but trusted header is not => expect no error
+		h, err = c.VerifyHeaderAtHeight(1, bTime.Add(1*time.Hour).Add(1*time.Second))
+		assert.NoError(t, err)
+		assert.NotNil(t, h)
+
+		// 3) already stored headers should return the header without error
+		h, err = c.VerifyHeaderAtHeight(2, bTime.Add(1*time.Hour).Add(1*time.Second))
+		assert.NoError(t, err)
+		assert.NotNil(t, h)
 	}
+	{
+		c, err := NewClient(
+			chainID,
+			TrustOptions{
+				Period: 1 * time.Hour,
+				Height: 3,
+				Hash:   h3.Hash(),
+			},
+			fullNode,
+			[]provider.Provider{fullNode},
+			dbs.New(dbm.NewMemDB(), chainID),
+			UpdatePeriod(0),
+			Logger(log.TestingLogger()),
+		)
+		require.NoError(t, err)
 
-	// 2) header is missing, but it's expired => expect error
-	h, err = c.VerifyHeaderAtHeight(1, bTime.Add(1*time.Hour).Add(1*time.Second))
-	assert.Error(t, err)
-	assert.NotNil(t, h)
+		// 3) trusted header has expired => expect error
+		_, err = c.VerifyHeaderAtHeight(1, bTime.Add(4*time.Hour).Add(1*time.Second))
+		assert.Error(t, err)
+	}
+	{
+		testCases := []struct {
+			provider provider.Provider
+		}{
+			{
+				// provides incorrect height
+				mockp.New(
+					chainID,
+					map[int64]*types.SignedHeader{
+						1: h1,
+						2: keys.GenSignedHeader(chainID, 1, bTime.Add(1*time.Hour), nil, vals, vals,
+							[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
+						3: h3,
+					},
+					valSet,
+				),
+			},
+			{
+				// provides incorrect hash
+				mockp.New(
+					chainID,
+					map[int64]*types.SignedHeader{
+						1: h1,
+						2: keys.GenSignedHeader(chainID, 2, bTime.Add(30*time.Minute), nil, vals, vals,
+							[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
+						3: h3,
+					},
+					valSet,
+				),
+			},
+		}
 
-	// 3) already stored headers should return the header without error
-	h, err = c.VerifyHeaderAtHeight(3, bTime.Add(1*time.Hour).Add(1*time.Second))
-	assert.NoError(t, err)
-	assert.NotNil(t, h)
+		for _, tc := range testCases {
+			c, err := NewClient(
+				chainID,
+				TrustOptions{
+					Period: 1 * time.Hour,
+					Height: 3,
+					Hash:   h3.Hash(),
+				},
+				tc.provider,
+				[]provider.Provider{tc.provider},
+				dbs.New(dbm.NewMemDB(), chainID),
+				UpdatePeriod(0),
+				Logger(log.TestingLogger()),
+			)
+			require.NoError(t, err)
 
-	// 4) cannot verify a header in the future
-	_, err = c.VerifyHeaderAtHeight(4, bTime.Add(1*time.Hour).Add(1*time.Second))
-	assert.Error(t, err)
+			_, err = c.VerifyHeaderAtHeight(2, bTime.Add(1*time.Hour).Add(1*time.Second))
+			assert.Error(t, err)
+		}
+	}
 }
 
 func TestClient_NewClientFromTrustedStore(t *testing.T) {
@@ -797,7 +828,7 @@ func TestClient_NewClientFromTrustedStore(t *testing.T) {
 
 	// 2) Check header exists (deadNode is being used to ensure we're not getting
 	// it from primary)
-	h, err := c.TrustedHeader(1, bTime.Add(1*time.Second))
+	h, err := c.TrustedHeader(1)
 	assert.NoError(t, err)
 	assert.EqualValues(t, 1, h.Height)
 }
diff --git a/lite2/example_test.go b/lite2/example_test.go
index 87e839d9b..c8d883958 100644
--- a/lite2/example_test.go
+++ b/lite2/example_test.go
@@ -76,7 +76,7 @@ func TestExample_Client_AutoUpdate(t *testing.T) {
 
 	time.Sleep(2 * time.Second)
 
-	h, err := c.TrustedHeader(0, time.Now())
+	h, err := c.TrustedHeader(0)
 	if err != nil {
 		stdlog.Fatal(err)
 	}
@@ -146,7 +146,7 @@ func TestExample_Client_ManualUpdate(t *testing.T) {
 		stdlog.Fatal(err)
 	}
 
-	h, err := c.TrustedHeader(3, time.Now())
+	h, err := c.TrustedHeader(3)
 	if err != nil {
 		stdlog.Fatal(err)
 	}
diff --git a/lite2/rpc/client.go b/lite2/rpc/client.go
index 9778878ac..b59d459bc 100644
--- a/lite2/rpc/client.go
+++ b/lite2/rpc/client.go
@@ -191,7 +191,7 @@ func (c *Client) BlockchainInfo(minHeight, maxHeight int64) (*ctypes.ResultBlock
 
 	// Verify each of the BlockMetas.
 	for _, meta := range res.BlockMetas {
-		h, err := c.lc.TrustedHeader(meta.Header.Height, time.Now())
+		h, err := c.lc.TrustedHeader(meta.Header.Height)
 		if err != nil {
 			return nil, errors.Wrapf(err, "TrustedHeader(%d)", meta.Header.Height)
 		}
@@ -331,7 +331,7 @@ func (c *Client) updateLiteClientIfNeededTo(height int64) (*types.SignedHeader,
 		return c.lc.VerifyHeaderAtHeight(height, time.Now())
 	}
 
-	h, err := c.lc.TrustedHeader(height, time.Now())
+	h, err := c.lc.TrustedHeader(height)
 	if err != nil {
 		return nil, errors.Wrapf(err, "TrustedHeader(#%d)", height)
 	}

From b5ce8f206989f56398d5282a5c6c04a34f8a0306 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Wed, 26 Feb 2020 16:51:05 +0100
Subject: [PATCH 32/74] deps: bump github.com/tendermint/tm-db from 0.4.0 to
 0.4.1 (#4476)

Bumps [github.com/tendermint/tm-db](https://github.com/tendermint/tm-db) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/tendermint/tm-db/releases)
- [Changelog](https://github.com/tendermint/tm-db/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tendermint/tm-db/compare/v0.4.0...v0.4.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 go.mod | 2 +-
 go.sum | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 52d2d285d..a5faa59b1 100644
--- a/go.mod
+++ b/go.mod
@@ -25,7 +25,7 @@ require (
 	github.com/spf13/viper v1.6.2
 	github.com/stretchr/testify v1.5.1
 	github.com/tendermint/go-amino v0.14.1
-	github.com/tendermint/tm-db v0.4.0
+	github.com/tendermint/tm-db v0.4.1
 	golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413
 	golang.org/x/net v0.0.0-20190813141303-74dc4d7220e7
 	google.golang.org/grpc v1.27.1
diff --git a/go.sum b/go.sum
index 3146cb41f..0e05ecad9 100644
--- a/go.sum
+++ b/go.sum
@@ -390,10 +390,14 @@ github.com/syndtr/goleveldb v1.0.1-0.20190923125748-758128399b1d h1:gZZadD8H+fF+
 github.com/syndtr/goleveldb v1.0.1-0.20190923125748-758128399b1d/go.mod h1:9OrXJhf154huy1nPWmuSrkgjPUtUNhA+Zmy+6AESzuA=
 github.com/tecbot/gorocksdb v0.0.0-20191017175515-d217d93fd4c5 h1:gVwAW5OwaZlDB5/CfqcGFM9p9C+KxvQKyNOltQ8orj0=
 github.com/tecbot/gorocksdb v0.0.0-20191017175515-d217d93fd4c5/go.mod h1:ahpPrc7HpcfEWDQRZEmnXMzHY03mLDYMCxeDzy46i+8=
+github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c h1:g+WoO5jjkqGAzHWCjJB1zZfXPIAaDpzXIEJ0eS6B5Ok=
+github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c/go.mod h1:ahpPrc7HpcfEWDQRZEmnXMzHY03mLDYMCxeDzy46i+8=
 github.com/tendermint/go-amino v0.14.1 h1:o2WudxNfdLNBwMyl2dqOJxiro5rfrEaU0Ugs6offJMk=
 github.com/tendermint/go-amino v0.14.1/go.mod h1:i/UKE5Uocn+argJJBb12qTZsCDBcAYMbR92AaJVmKso=
 github.com/tendermint/tm-db v0.4.0 h1:iPbCcLbf4nwDFhS39Zo1lpdS1X/cT9CkTlUx17FHQgA=
 github.com/tendermint/tm-db v0.4.0/go.mod h1:+Cwhgowrf7NBGXmsqFMbwEtbo80XmyrlY5Jsk95JubQ=
+github.com/tendermint/tm-db v0.4.1 h1:TvX7JWjJOVZ+N3y+I86wddrGttOdMmmBxXcu0/Y7ZJ0=
+github.com/tendermint/tm-db v0.4.1/go.mod h1:JsJ6qzYkCGiGwm5GHl/H5GLI9XLb6qZX7PRe425dHAY=
 github.com/tmc/grpc-websocket-proxy v0.0.0-20170815181823-89b8d40f7ca8/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
 github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
 github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGrc=

From b9535a2cfc9dea99455a42cbc303c15ac42c5cbb Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Wed, 26 Feb 2020 20:47:16 +0100
Subject: [PATCH 33/74] blockchain (v2): comment out
 TestReactorTerminationScenarios (#4480)

Refs #4442
---
 blockchain/v2/reactor_test.go | 333 +++++++++++++++++-----------------
 1 file changed, 166 insertions(+), 167 deletions(-)

diff --git a/blockchain/v2/reactor_test.go b/blockchain/v2/reactor_test.go
index 10457cdb0..3a5ef5a89 100644
--- a/blockchain/v2/reactor_test.go
+++ b/blockchain/v2/reactor_test.go
@@ -6,7 +6,6 @@ import (
 	"sort"
 	"sync"
 	"testing"
-	"time"
 
 	"github.com/pkg/errors"
 	"github.com/stretchr/testify/assert"
@@ -166,179 +165,179 @@ func newTestReactor(p testReactorParams) *BlockchainReactor {
 	return r
 }
 
-func TestReactorTerminationScenarios(t *testing.T) {
+// func TestReactorTerminationScenarios(t *testing.T) {
 
-	config := cfg.ResetTestRoot("blockchain_reactor_v2_test")
-	defer os.RemoveAll(config.RootDir)
-	genDoc, privVals := randGenesisDoc(config.ChainID(), 1, false, 30)
-	refStore, _, _ := newReactorStore(genDoc, privVals, 20)
+// 	config := cfg.ResetTestRoot("blockchain_reactor_v2_test")
+// 	defer os.RemoveAll(config.RootDir)
+// 	genDoc, privVals := randGenesisDoc(config.ChainID(), 1, false, 30)
+// 	refStore, _, _ := newReactorStore(genDoc, privVals, 20)
 
-	params := testReactorParams{
-		logger:      log.TestingLogger(),
-		genDoc:      genDoc,
-		privVals:    privVals,
-		startHeight: 10,
-		bufferSize:  100,
-		mockA:       true,
-	}
+// 	params := testReactorParams{
+// 		logger:      log.TestingLogger(),
+// 		genDoc:      genDoc,
+// 		privVals:    privVals,
+// 		startHeight: 10,
+// 		bufferSize:  100,
+// 		mockA:       true,
+// 	}
 
-	type testEvent struct {
-		evType string
-		peer   string
-		height int64
-	}
+// 	type testEvent struct {
+// 		evType string
+// 		peer   string
+// 		height int64
+// 	}
 
-	tests := []struct {
-		name   string
-		params testReactorParams
-		msgs   []testEvent
-	}{
-		{
-			name:   "simple termination on max peer height - one peer",
-			params: params,
-			msgs: []testEvent{
-				{evType: "AddPeer", peer: "P1"},
-				{evType: "ReceiveS", peer: "P1", height: 13},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P1", height: 11},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P1", height: 12},
-				{evType: "Process"},
-				{evType: "ReceiveB", peer: "P1", height: 13},
-				{evType: "Process"},
-			},
-		},
-		{
-			name:   "simple termination on max peer height - two peers",
-			params: params,
-			msgs: []testEvent{
-				{evType: "AddPeer", peer: "P1"},
-				{evType: "AddPeer", peer: "P2"},
-				{evType: "ReceiveS", peer: "P1", height: 13},
-				{evType: "ReceiveS", peer: "P2", height: 15},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P1", height: 11},
-				{evType: "ReceiveB", peer: "P2", height: 12},
-				{evType: "Process"},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P1", height: 13},
-				{evType: "Process"},
-				{evType: "ReceiveB", peer: "P2", height: 14},
-				{evType: "Process"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 15},
-				{evType: "Process"},
-			},
-		},
-		{
-			name:   "termination on max peer height - two peers, noBlock error",
-			params: params,
-			msgs: []testEvent{
-				{evType: "AddPeer", peer: "P1"},
-				{evType: "AddPeer", peer: "P2"},
-				{evType: "ReceiveS", peer: "P1", height: 13},
-				{evType: "ReceiveS", peer: "P2", height: 15},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveNB", peer: "P1", height: 11},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 12},
-				{evType: "ReceiveB", peer: "P2", height: 11},
-				{evType: "Process"},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 13},
-				{evType: "Process"},
-				{evType: "ReceiveB", peer: "P2", height: 14},
-				{evType: "Process"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 15},
-				{evType: "Process"},
-			},
-		},
-		{
-			name:   "termination on max peer height - two peers, remove one peer",
-			params: params,
-			msgs: []testEvent{
-				{evType: "AddPeer", peer: "P1"},
-				{evType: "AddPeer", peer: "P2"},
-				{evType: "ReceiveS", peer: "P1", height: 13},
-				{evType: "ReceiveS", peer: "P2", height: 15},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "RemovePeer", peer: "P1"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 12},
-				{evType: "ReceiveB", peer: "P2", height: 11},
-				{evType: "Process"},
-				{evType: "BlockReq"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 13},
-				{evType: "Process"},
-				{evType: "ReceiveB", peer: "P2", height: 14},
-				{evType: "Process"},
-				{evType: "BlockReq"},
-				{evType: "ReceiveB", peer: "P2", height: 15},
-				{evType: "Process"},
-			},
-		},
-	}
+// 	tests := []struct {
+// 		name   string
+// 		params testReactorParams
+// 		msgs   []testEvent
+// 	}{
+// 		{
+// 			name:   "simple termination on max peer height - one peer",
+// 			params: params,
+// 			msgs: []testEvent{
+// 				{evType: "AddPeer", peer: "P1"},
+// 				{evType: "ReceiveS", peer: "P1", height: 13},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P1", height: 11},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P1", height: 12},
+// 				{evType: "Process"},
+// 				{evType: "ReceiveB", peer: "P1", height: 13},
+// 				{evType: "Process"},
+// 			},
+// 		},
+// 		{
+// 			name:   "simple termination on max peer height - two peers",
+// 			params: params,
+// 			msgs: []testEvent{
+// 				{evType: "AddPeer", peer: "P1"},
+// 				{evType: "AddPeer", peer: "P2"},
+// 				{evType: "ReceiveS", peer: "P1", height: 13},
+// 				{evType: "ReceiveS", peer: "P2", height: 15},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P1", height: 11},
+// 				{evType: "ReceiveB", peer: "P2", height: 12},
+// 				{evType: "Process"},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P1", height: 13},
+// 				{evType: "Process"},
+// 				{evType: "ReceiveB", peer: "P2", height: 14},
+// 				{evType: "Process"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 15},
+// 				{evType: "Process"},
+// 			},
+// 		},
+// 		{
+// 			name:   "termination on max peer height - two peers, noBlock error",
+// 			params: params,
+// 			msgs: []testEvent{
+// 				{evType: "AddPeer", peer: "P1"},
+// 				{evType: "AddPeer", peer: "P2"},
+// 				{evType: "ReceiveS", peer: "P1", height: 13},
+// 				{evType: "ReceiveS", peer: "P2", height: 15},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveNB", peer: "P1", height: 11},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 12},
+// 				{evType: "ReceiveB", peer: "P2", height: 11},
+// 				{evType: "Process"},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 13},
+// 				{evType: "Process"},
+// 				{evType: "ReceiveB", peer: "P2", height: 14},
+// 				{evType: "Process"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 15},
+// 				{evType: "Process"},
+// 			},
+// 		},
+// 		{
+// 			name:   "termination on max peer height - two peers, remove one peer",
+// 			params: params,
+// 			msgs: []testEvent{
+// 				{evType: "AddPeer", peer: "P1"},
+// 				{evType: "AddPeer", peer: "P2"},
+// 				{evType: "ReceiveS", peer: "P1", height: 13},
+// 				{evType: "ReceiveS", peer: "P2", height: 15},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "RemovePeer", peer: "P1"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 12},
+// 				{evType: "ReceiveB", peer: "P2", height: 11},
+// 				{evType: "Process"},
+// 				{evType: "BlockReq"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 13},
+// 				{evType: "Process"},
+// 				{evType: "ReceiveB", peer: "P2", height: 14},
+// 				{evType: "Process"},
+// 				{evType: "BlockReq"},
+// 				{evType: "ReceiveB", peer: "P2", height: 15},
+// 				{evType: "Process"},
+// 			},
+// 		},
+// 	}
 
-	for _, tt := range tests {
-		tt := tt
-		t.Run(tt.name, func(t *testing.T) {
-			reactor := newTestReactor(params)
-			reactor.Start()
-			reactor.reporter = behaviour.NewMockReporter()
-			mockSwitch := &mockSwitchIo{switchedToConsensus: false}
-			reactor.io = mockSwitch
-			// time for go routines to start
-			time.Sleep(time.Millisecond)
+// 	for _, tt := range tests {
+// 		tt := tt
+// 		t.Run(tt.name, func(t *testing.T) {
+// 			reactor := newTestReactor(params)
+// 			reactor.Start()
+// 			reactor.reporter = behaviour.NewMockReporter()
+// 			mockSwitch := &mockSwitchIo{switchedToConsensus: false}
+// 			reactor.io = mockSwitch
+// 			// time for go routines to start
+// 			time.Sleep(time.Millisecond)
 
-			for _, step := range tt.msgs {
-				switch step.evType {
-				case "AddPeer":
-					reactor.scheduler.send(bcAddNewPeer{peerID: p2p.ID(step.peer)})
-				case "RemovePeer":
-					reactor.scheduler.send(bcRemovePeer{peerID: p2p.ID(step.peer)})
-				case "ReceiveS":
-					reactor.scheduler.send(bcStatusResponse{
-						peerID: p2p.ID(step.peer),
-						height: step.height,
-						time:   time.Now(),
-					})
-				case "ReceiveB":
-					reactor.scheduler.send(bcBlockResponse{
-						peerID: p2p.ID(step.peer),
-						block:  refStore.LoadBlock(step.height),
-						size:   10,
-						time:   time.Now(),
-					})
-				case "ReceiveNB":
-					reactor.scheduler.send(bcNoBlockResponse{
-						peerID: p2p.ID(step.peer),
-						height: step.height,
-						time:   time.Now(),
-					})
-				case "BlockReq":
-					reactor.scheduler.send(rTrySchedule{time: time.Now()})
-				case "Process":
-					reactor.processor.send(rProcessBlock{})
-				}
-				// give time for messages to propagate between routines
-				time.Sleep(time.Millisecond)
-			}
+// 			for _, step := range tt.msgs {
+// 				switch step.evType {
+// 				case "AddPeer":
+// 					reactor.scheduler.send(bcAddNewPeer{peerID: p2p.ID(step.peer)})
+// 				case "RemovePeer":
+// 					reactor.scheduler.send(bcRemovePeer{peerID: p2p.ID(step.peer)})
+// 				case "ReceiveS":
+// 					reactor.scheduler.send(bcStatusResponse{
+// 						peerID: p2p.ID(step.peer),
+// 						height: step.height,
+// 						time:   time.Now(),
+// 					})
+// 				case "ReceiveB":
+// 					reactor.scheduler.send(bcBlockResponse{
+// 						peerID: p2p.ID(step.peer),
+// 						block:  refStore.LoadBlock(step.height),
+// 						size:   10,
+// 						time:   time.Now(),
+// 					})
+// 				case "ReceiveNB":
+// 					reactor.scheduler.send(bcNoBlockResponse{
+// 						peerID: p2p.ID(step.peer),
+// 						height: step.height,
+// 						time:   time.Now(),
+// 					})
+// 				case "BlockReq":
+// 					reactor.scheduler.send(rTrySchedule{time: time.Now()})
+// 				case "Process":
+// 					reactor.processor.send(rProcessBlock{})
+// 				}
+// 				// give time for messages to propagate between routines
+// 				time.Sleep(time.Millisecond)
+// 			}
 
-			// time for processor to finish and reactor to switch to consensus
-			time.Sleep(20 * time.Millisecond)
-			assert.True(t, mockSwitch.hasSwitchedToConsensus())
-			reactor.Stop()
-		})
-	}
-}
+// 			// time for processor to finish and reactor to switch to consensus
+// 			time.Sleep(20 * time.Millisecond)
+// 			assert.True(t, mockSwitch.hasSwitchedToConsensus())
+// 			reactor.Stop()
+// 		})
+// 	}
+// }
 
 func TestReactorHelperMode(t *testing.T) {
 	var (

From c45baa04027b555196031420574342a54888eed1 Mon Sep 17 00:00:00 2001
From: Sean Braithwaite <brapse@gmail.com>
Date: Thu, 27 Feb 2020 11:25:21 +0100
Subject: [PATCH 34/74] blockchain (v2): async testing notes (#4484)

Add some inline notes for context of why test are commented out and not deleted.

Ref. #4482
---
 blockchain/v2/reactor_test.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/blockchain/v2/reactor_test.go b/blockchain/v2/reactor_test.go
index 3a5ef5a89..c187f954b 100644
--- a/blockchain/v2/reactor_test.go
+++ b/blockchain/v2/reactor_test.go
@@ -165,6 +165,8 @@ func newTestReactor(p testReactorParams) *BlockchainReactor {
 	return r
 }
 
+// This test is left here and not deleted to retain the termination cases for
+// future improvement in [#4482](https://github.com/tendermint/tendermint/issues/4482).
 // func TestReactorTerminationScenarios(t *testing.T) {
 
 // 	config := cfg.ResetTestRoot("blockchain_reactor_v2_test")

From 875b106a172df215a6d88450ecf0c0fb29e33ab2 Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Thu, 27 Feb 2020 11:34:56 +0100
Subject: [PATCH 35/74] github: edit templates for use in issues and pull
 requests (#4483)

* github: edit templates for use in issues and pull requests

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>

* fix sdk to tendermint
---
 .github/ISSUE_TEMPLATE/feature-request.md | 35 +++++++++++++++++++----
 .github/PULL_REQUEST_TEMPLATE.md          | 29 +++++++++++++------
 2 files changed, 49 insertions(+), 15 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/feature-request.md b/.github/ISSUE_TEMPLATE/feature-request.md
index e88fe61d4..62c3e4f3a 100644
--- a/.github/ISSUE_TEMPLATE/feature-request.md
+++ b/.github/ISSUE_TEMPLATE/feature-request.md
@@ -3,11 +3,34 @@ name: Feature Request
 about: Create a proposal to request a feature
 
 ---
-<!--
-Please describe *in detail* the feature/behavior/change you'd like to see.
 
-Be ready for followup questions, and please respond in a timely
-manner. 
+<!-- < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < ☺ 
+v                            ✰  Thanks for opening an issue! ✰    
+v    Before smashing the submit button please review the template.
+v    Word of caution: poorly thought-out proposals may be rejected 
+v                     without deliberation 
+☺ > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >  -->
 
-Word of caution: poorly thought out proposals may be rejected without deliberation 
--->
+## Summary
+
+<!-- Short, concise description of the proposed feature -->
+
+## Problem Definition
+
+<!-- Why do we need this feature? 
+What problems may be addressed by introducing this feature?
+What benefits does Tendermint stand to gain by including this feature?
+Are there any disadvantages of including this feature? -->
+
+## Proposal
+
+<!-- Detailed description of requirements of implementation -->
+
+____
+
+#### For Admin Use
+
+- [ ] Not duplicate issue
+- [ ] Appropriate labels applied
+- [ ] Appropriate contributors tagged
+- [ ] Contributor assigned/self-assigned
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
index e1863c783..8590275a7 100644
--- a/.github/PULL_REQUEST_TEMPLATE.md
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -1,13 +1,24 @@
-<!--
+<!-- < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < ☺
+v                               ✰  Thanks for creating a PR! ✰    
+v    Before smashing the submit button please review the checkboxes.
+v    If a checkbox is n/a - please still include it but + a little note why
+☺ > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >  -->
 
-Thanks for filing a PR! Before hitting the button, please check the following items.
-Please note that every non-trivial PR must reference an issue that explains the
-changes in the PR.
+Closes: #XXX
 
+## Description
+
+<!-- Add a description of the changes that this PR introduces and the files that
+are the most critical to review.
 -->
 
-* [ ] Referenced an issue explaining the need for the change
-* [ ] Updated all relevant documentation in docs
-* [ ] Updated all code comments where relevant
-* [ ] Wrote tests
-* [ ] Updated CHANGELOG_PENDING.md
+
+______
+
+For contributor use:
+
+- [ ] Wrote tests
+- [ ] Updated CHANGELOG_PENDING.md
+- [ ] Linked to Github issue with discussion and accepted design OR link to spec that describes this work.
+- [ ] Updated relevant documentation (`docs/`) and code comments
+- [ ] Re-reviewed `Files changed` in the Github PR explorer

From 6be0e138233a9d42667dcc8884fef098e3e733e6 Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Thu, 27 Feb 2020 14:57:17 +0100
Subject: [PATCH 36/74] lite2: prune-headers (#4478)

closes #4469

Improved speed of cleanup by using SignedHeaderAfter instead of TrustedHeader to jump from header to header.

Prune() is now called when a new header and validator set are saved and is a function dealt by the database itself

## Commits:

* prune headers and vals

* modified cleanup and tests

* fixes after my own review

* implement Prune func

* make db ops concurrently safe

* use Iterator in SignedHeaderAfter

we should iterate from height+1, not from the end!

* simplify cleanup

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 lite2/client.go           | 179 ++++++++++++--------------------------
 lite2/client_test.go      |  55 +-----------
 lite2/store/db/db.go      | 137 ++++++++++++++++++++++++++++-
 lite2/store/db/db_test.go |  67 ++++++++++++++
 lite2/store/store.go      |   7 ++
 5 files changed, 269 insertions(+), 176 deletions(-)

diff --git a/lite2/client.go b/lite2/client.go
index 1def6195b..c52ffe832 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -22,9 +22,9 @@ const (
 	sequential mode = iota + 1
 	skipping
 
-	defaultUpdatePeriod                       = 5 * time.Second
-	defaultRemoveNoLongerTrustedHeadersPeriod = 24 * time.Hour
-	defaultMaxRetryAttempts                   = 10
+	defaultUpdatePeriod     = 5 * time.Second
+	defaultPruningSize      = 1000
+	defaultMaxRetryAttempts = 10
 )
 
 // Option sets a parameter for the light client.
@@ -62,13 +62,14 @@ func UpdatePeriod(d time.Duration) Option {
 	}
 }
 
-// RemoveNoLongerTrustedHeadersPeriod option can be used to define how often
-// the routine, which cleans up no longer trusted headers (outside of trusting
-// period), is run. Default: once a day. When set to zero, the routine won't be
-// started.
-func RemoveNoLongerTrustedHeadersPeriod(d time.Duration) Option {
+// PruningSize option sets the maximum amount of headers & validator set pairs
+// that the light client stores. When Prune() is run, all headers (along with
+// the associated validator sets) that are earlier than the h amount of headers
+// will be removed from the store. Default: 1000. A pruning size of 0 will not
+// prune the lite client at all.
+func PruningSize(h uint16) Option {
 	return func(c *Client) {
-		c.removeNoLongerTrustedHeadersPeriod = d
+		c.pruningSize = h
 	}
 }
 
@@ -128,7 +129,7 @@ type Client struct {
 	// See UpdatePeriod option
 	updatePeriod time.Duration
 	// See RemoveNoLongerTrustedHeadersPeriod option
-	removeNoLongerTrustedHeadersPeriod time.Duration
+	pruningSize uint16
 	// See ConfirmationFunction option
 	confirmationFn func(action string) bool
 
@@ -191,19 +192,19 @@ func NewClientFromTrustedStore(
 	options ...Option) (*Client, error) {
 
 	c := &Client{
-		chainID:                            chainID,
-		trustingPeriod:                     trustingPeriod,
-		verificationMode:                   skipping,
-		trustLevel:                         DefaultTrustLevel,
-		maxRetryAttempts:                   defaultMaxRetryAttempts,
-		primary:                            primary,
-		witnesses:                          witnesses,
-		trustedStore:                       trustedStore,
-		updatePeriod:                       defaultUpdatePeriod,
-		removeNoLongerTrustedHeadersPeriod: defaultRemoveNoLongerTrustedHeadersPeriod,
-		confirmationFn:                     func(action string) bool { return true },
-		quit:                               make(chan struct{}),
-		logger:                             log.NewNopLogger(),
+		chainID:          chainID,
+		trustingPeriod:   trustingPeriod,
+		verificationMode: skipping,
+		trustLevel:       DefaultTrustLevel,
+		maxRetryAttempts: defaultMaxRetryAttempts,
+		primary:          primary,
+		witnesses:        witnesses,
+		trustedStore:     trustedStore,
+		updatePeriod:     defaultUpdatePeriod,
+		pruningSize:      defaultPruningSize,
+		confirmationFn:   func(action string) bool { return true },
+		quit:             make(chan struct{}),
+		logger:           log.NewNopLogger(),
 	}
 
 	for _, o := range options {
@@ -304,7 +305,10 @@ func (c *Client) checkTrustedHeaderUsingOptions(options TrustOptions) error {
 			c.latestTrustedHeader.Height, c.latestTrustedHeader.Hash())
 		if c.confirmationFn(action) {
 			// remove all the headers (options.Height, trustedHeader.Height]
-			c.cleanup(options.Height + 1)
+			err := c.cleanupAfter(options.Height)
+			if err != nil {
+				return errors.Wrapf(err, "cleanupAfter(%d)", options.Height)
+			}
 
 			c.logger.Info("Rolled back to older header (newer headers were removed)",
 				"old", options.Height)
@@ -388,11 +392,6 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 func (c *Client) Start() error {
 	c.logger.Info("Starting light client")
 
-	if c.removeNoLongerTrustedHeadersPeriod > 0 {
-		c.routinesWaitGroup.Add(1)
-		go c.removeNoLongerTrustedHeadersRoutine()
-	}
-
 	if c.updatePeriod > 0 {
 		c.routinesWaitGroup.Add(1)
 		go c.autoUpdateRoutine()
@@ -557,6 +556,7 @@ func (c *Client) VerifyHeader(newHeader *types.SignedHeader, newVals *types.Vali
 	// Check if newHeader already verified.
 	h, err := c.TrustedHeader(newHeader.Height)
 	if err == nil {
+		// Make sure it's the same header.
 		if !bytes.Equal(h.Hash(), newHeader.Hash()) {
 			return errors.Errorf("existing trusted header %X does not match newHeader %X", h.Hash(), newHeader.Hash())
 		}
@@ -630,40 +630,36 @@ func (c *Client) Witnesses() []provider.Provider {
 // client must be stopped at this point.
 func (c *Client) Cleanup() error {
 	c.logger.Info("Removing all the data")
-	return c.cleanup(0)
+	c.latestTrustedHeader = nil
+	c.latestTrustedVals = nil
+	return c.trustedStore.Prune(0)
 }
 
-// cleanup deletes all headers & validator sets between +stopHeight+ and latest
-// height included. It also sets trustedHeader (vals) to the latest header
-// (vals) if such exists.
-func (c *Client) cleanup(stopHeight int64) error {
-	// 1) Get the oldest height.
-	oldestHeight, err := c.trustedStore.FirstSignedHeaderHeight()
-	if err != nil {
-		return errors.Wrap(err, "can't get first trusted height")
-	}
+// cleanupAfter deletes all headers & validator sets after +height+. It also
+// resets latestTrustedHeader to the latest header.
+func (c *Client) cleanupAfter(height int64) error {
+	nextHeight := height
 
-	// 2) Get the latest height.
-	latestHeight, err := c.trustedStore.LastSignedHeaderHeight()
-	if err != nil {
-		return errors.Wrap(err, "can't get last trusted height")
-	}
-
-	// 3) Remove all headers and validator sets.
-	if stopHeight < oldestHeight {
-		stopHeight = oldestHeight
-	}
-	for height := stopHeight; height <= latestHeight; height++ {
-		err = c.trustedStore.DeleteSignedHeaderAndValidatorSet(height)
-		if err != nil {
-			c.logger.Error("can't remove a trusted header & validator set", "err", err, "height", height)
-			continue
+	for {
+		h, err := c.trustedStore.SignedHeaderAfter(nextHeight)
+		if err == store.ErrSignedHeaderNotFound {
+			break
+		} else if err != nil {
+			return errors.Wrapf(err, "failed to get header after %d", nextHeight)
 		}
+
+		err = c.trustedStore.DeleteSignedHeaderAndValidatorSet(h.Height)
+		if err != nil {
+			c.logger.Error("can't remove a trusted header & validator set", "err", err,
+				"height", h.Height)
+		}
+
+		nextHeight = h.Height
 	}
 
 	c.latestTrustedHeader = nil
 	c.latestTrustedVals = nil
-	err = c.restoreTrustedHeaderAndVals()
+	err := c.restoreTrustedHeaderAndVals()
 	if err != nil {
 		return err
 	}
@@ -776,7 +772,12 @@ func (c *Client) updateTrustedHeaderAndVals(h *types.SignedHeader, vals *types.V
 		return errors.Wrap(err, "failed to save trusted header")
 	}
 
-	// Only update latestTrustedHeader if we move forward (not backwards).
+	if c.pruningSize > 0 {
+		if err := c.trustedStore.Prune(c.pruningSize); err != nil {
+			return errors.Wrap(err, "prune")
+		}
+	}
+
 	if c.latestTrustedHeader == nil || h.Height > c.latestTrustedHeader.Height {
 		c.latestTrustedHeader = h
 		c.latestTrustedVals = vals
@@ -921,72 +922,6 @@ func (c *Client) removeWitness(idx int) {
 	}
 }
 
-func (c *Client) removeNoLongerTrustedHeadersRoutine() {
-	defer c.routinesWaitGroup.Done()
-
-	ticker := time.NewTicker(c.removeNoLongerTrustedHeadersPeriod)
-	defer ticker.Stop()
-
-	for {
-		select {
-		case <-ticker.C:
-			c.RemoveNoLongerTrustedHeaders(time.Now())
-		case <-c.quit:
-			return
-		}
-	}
-}
-
-// RemoveNoLongerTrustedHeaders removes no longer trusted headers (due to
-// expiration).
-//
-// Exposed for testing.
-func (c *Client) RemoveNoLongerTrustedHeaders(now time.Time) {
-	// 1) Get the oldest height.
-	oldestHeight, err := c.FirstTrustedHeight()
-	if err != nil {
-		c.logger.Error("can't get first trusted height", "err", err)
-		return
-	}
-	if oldestHeight == -1 { // no headers yet => wait
-		return
-	}
-
-	// 2) Get the latest height.
-	latestHeight, err := c.LastTrustedHeight()
-	if err != nil {
-		c.logger.Error("can't get last trusted height", "err", err)
-		return
-	}
-	if latestHeight == -1 { // no headers yet => wait
-		return
-	}
-
-	// 3) Remove all headers that are outside of the trusting period.
-	//
-	// NOTE: even the latest header can be removed. it's okay because
-	// c.latestTrustedHeader will retain it in memory so other funcs like VerifyHeader
-	// don't crash.
-	for height := oldestHeight; height <= latestHeight; height++ {
-		h, err := c.trustedStore.SignedHeader(height)
-		if err != nil {
-			c.logger.Error("can't get a trusted header", "err", err, "height", height)
-			continue
-		}
-
-		// Stop if the header is within the trusting period.
-		if !HeaderExpired(h, c.trustingPeriod, now) {
-			break
-		}
-
-		err = c.trustedStore.DeleteSignedHeaderAndValidatorSet(height)
-		if err != nil {
-			c.logger.Error("can't remove a trusted header & validator set", "err", err, "height", height)
-			continue
-		}
-	}
-}
-
 func (c *Client) autoUpdateRoutine() {
 	defer c.routinesWaitGroup.Done()
 
diff --git a/lite2/client_test.go b/lite2/client_test.go
index 179cf03e4..ad9088e8c 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -306,47 +306,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 	}
 }
 
-func TestClientRemovesNoLongerTrustedHeaders(t *testing.T) {
-	c, err := NewClient(
-		chainID,
-		trustOptions,
-		fullNode,
-		[]provider.Provider{fullNode},
-		dbs.New(dbm.NewMemDB(), chainID),
-		Logger(log.TestingLogger()),
-	)
-
-	assert.NotPanics(t, func() {
-		now := bTime.Add(4 * time.Hour).Add(1 * time.Second)
-		c.RemoveNoLongerTrustedHeaders(now)
-	})
-
-	require.NoError(t, err)
-	err = c.Start()
-	require.NoError(t, err)
-	defer c.Stop()
-
-	// Verify new headers.
-	_, err = c.VerifyHeaderAtHeight(2, bTime.Add(2*time.Hour).Add(1*time.Second))
-	require.NoError(t, err)
-	now := bTime.Add(4 * time.Hour).Add(1 * time.Second)
-	_, err = c.VerifyHeaderAtHeight(3, now)
-	require.NoError(t, err)
-
-	// Remove expired headers.
-	c.RemoveNoLongerTrustedHeaders(now)
-
-	// Check expired headers are no longer available.
-	h, err := c.TrustedHeader(1)
-	assert.Error(t, err)
-	assert.Nil(t, h)
-
-	// Check not expired headers are available.
-	h, err = c.TrustedHeader(2)
-	assert.NoError(t, err)
-	assert.NotNil(t, h)
-}
-
 func TestClient_Cleanup(t *testing.T) {
 	c, err := NewClient(
 		chainID,
@@ -357,10 +316,9 @@ func TestClient_Cleanup(t *testing.T) {
 		Logger(log.TestingLogger()),
 	)
 	require.NoError(t, err)
-	err = c.Start()
+	_, err = c.TrustedHeader(1)
 	require.NoError(t, err)
 
-	c.Stop()
 	err = c.Cleanup()
 	require.NoError(t, err)
 
@@ -387,9 +345,6 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
 
 		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
@@ -429,14 +384,12 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
 
 		h, err := c.TrustedHeader(1)
 		assert.NoError(t, err)
-		assert.NotNil(t, h)
-		assert.Equal(t, h.Hash(), header1.Hash())
+		if assert.NotNil(t, h) {
+			assert.Equal(t, h.Hash(), header1.Hash())
+		}
 	}
 }
 
diff --git a/lite2/store/db/db.go b/lite2/store/db/db.go
index baae0d040..d405b9865 100644
--- a/lite2/store/db/db.go
+++ b/lite2/store/db/db.go
@@ -1,9 +1,11 @@
 package db
 
 import (
+	"encoding/binary"
 	"fmt"
 	"regexp"
 	"strconv"
+	"sync"
 
 	"github.com/pkg/errors"
 	"github.com/tendermint/go-amino"
@@ -14,10 +16,17 @@ import (
 	"github.com/tendermint/tendermint/types"
 )
 
+var (
+	sizeKey = []byte("size")
+)
+
 type dbs struct {
 	db     dbm.DB
 	prefix string
 
+	mtx  sync.RWMutex
+	size uint16
+
 	cdc *amino.Codec
 }
 
@@ -28,11 +37,20 @@ type dbs struct {
 func New(db dbm.DB, prefix string) store.Store {
 	cdc := amino.NewCodec()
 	cryptoAmino.RegisterAmino(cdc)
-	return &dbs{db: db, prefix: prefix, cdc: cdc}
+
+	size := uint16(0)
+	bz, err := db.Get(sizeKey)
+	if err == nil && len(bz) > 0 {
+		size = unmarshalSize(bz)
+	}
+
+	return &dbs{db: db, prefix: prefix, cdc: cdc, size: size}
 }
 
 // SaveSignedHeaderAndValidatorSet persists SignedHeader and ValidatorSet to
 // the db.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) SaveSignedHeaderAndValidatorSet(sh *types.SignedHeader, valSet *types.ValidatorSet) error {
 	if sh.Height <= 0 {
 		panic("negative or zero height")
@@ -48,30 +66,54 @@ func (s *dbs) SaveSignedHeaderAndValidatorSet(sh *types.SignedHeader, valSet *ty
 		return errors.Wrap(err, "marshalling validator set")
 	}
 
+	s.mtx.Lock()
+	defer s.mtx.Unlock()
+
 	b := s.db.NewBatch()
 	b.Set(s.shKey(sh.Height), shBz)
 	b.Set(s.vsKey(sh.Height), valSetBz)
+	b.Set(sizeKey, marshalSize(s.size+1))
+
 	err = b.WriteSync()
 	b.Close()
+
+	if err == nil {
+		s.size++
+	}
+
 	return err
 }
 
 // DeleteSignedHeaderAndValidatorSet deletes SignedHeader and ValidatorSet from
 // the db.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) DeleteSignedHeaderAndValidatorSet(height int64) error {
 	if height <= 0 {
 		panic("negative or zero height")
 	}
 
+	s.mtx.Lock()
+	defer s.mtx.Unlock()
+
 	b := s.db.NewBatch()
 	b.Delete(s.shKey(height))
 	b.Delete(s.vsKey(height))
+	b.Set(sizeKey, marshalSize(s.size-1))
+
 	err := b.WriteSync()
 	b.Close()
+
+	if err == nil {
+		s.size--
+	}
+
 	return err
 }
 
 // SignedHeader loads SignedHeader at the given height.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) SignedHeader(height int64) (*types.SignedHeader, error) {
 	if height <= 0 {
 		panic("negative or zero height")
@@ -91,6 +133,8 @@ func (s *dbs) SignedHeader(height int64) (*types.SignedHeader, error) {
 }
 
 // ValidatorSet loads ValidatorSet at the given height.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) ValidatorSet(height int64) (*types.ValidatorSet, error) {
 	if height <= 0 {
 		panic("negative or zero height")
@@ -110,6 +154,8 @@ func (s *dbs) ValidatorSet(height int64) (*types.ValidatorSet, error) {
 }
 
 // LastSignedHeaderHeight returns the last SignedHeader height stored.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) LastSignedHeaderHeight() (int64, error) {
 	itr, err := s.db.ReverseIterator(
 		s.shKey(1),
@@ -133,6 +179,8 @@ func (s *dbs) LastSignedHeaderHeight() (int64, error) {
 }
 
 // FirstSignedHeaderHeight returns the first SignedHeader height stored.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) FirstSignedHeaderHeight() (int64, error) {
 	itr, err := s.db.Iterator(
 		s.shKey(1),
@@ -155,12 +203,16 @@ func (s *dbs) FirstSignedHeaderHeight() (int64, error) {
 	return -1, nil
 }
 
+// SignedHeaderAfter iterates over headers until it finds a header after one at
+// height. It returns ErrSignedHeaderNotFound if no such header exists.
+//
+// Safe for concurrent use by multiple goroutines.
 func (s *dbs) SignedHeaderAfter(height int64) (*types.SignedHeader, error) {
 	if height <= 0 {
 		panic("negative or zero height")
 	}
 
-	itr, err := s.db.ReverseIterator(
+	itr, err := s.db.Iterator(
 		s.shKey(height+1),
 		append(s.shKey(1<<63-1), byte(0x00)),
 	)
@@ -178,7 +230,76 @@ func (s *dbs) SignedHeaderAfter(height int64) (*types.SignedHeader, error) {
 		itr.Next()
 	}
 
-	panic(fmt.Sprintf("no header after height %d. make sure height is not greater than latest existing height", height))
+	return nil, store.ErrSignedHeaderNotFound
+}
+
+// Prune prunes header & validator set pairs until there are only size pairs
+// left.
+//
+// Safe for concurrent use by multiple goroutines.
+func (s *dbs) Prune(size uint16) error {
+	// 1) Check how many we need to prune.
+	s.mtx.RLock()
+	sSize := s.size
+	s.mtx.RUnlock()
+
+	if sSize <= size { // nothing to prune
+		return nil
+	}
+	numToPrune := sSize - size
+
+	// 2) Iterate over headers and perform a batch operation.
+	itr, err := s.db.Iterator(
+		s.shKey(1),
+		append(s.shKey(1<<63-1), byte(0x00)),
+	)
+	if err != nil {
+		panic(err)
+	}
+
+	b := s.db.NewBatch()
+
+	pruned := 0
+	for itr.Valid() && numToPrune > 0 {
+		key := itr.Key()
+		_, height, ok := parseShKey(key)
+		if ok {
+			b.Delete(s.shKey(height))
+			b.Delete(s.vsKey(height))
+		}
+		itr.Next()
+		numToPrune--
+		pruned++
+	}
+
+	itr.Close()
+
+	err = b.WriteSync()
+	b.Close()
+	if err != nil {
+		return err
+	}
+
+	// 3) Update size.
+	s.mtx.Lock()
+	defer s.mtx.Unlock()
+
+	s.size -= uint16(pruned)
+
+	if wErr := s.db.SetSync(sizeKey, marshalSize(s.size)); wErr != nil {
+		return errors.Wrap(wErr, "failed to persist size")
+	}
+
+	return nil
+}
+
+// Size returns the number of header & validator set pairs.
+//
+// Safe for concurrent use by multiple goroutines.
+func (s *dbs) Size() uint16 {
+	s.mtx.RLock()
+	defer s.mtx.RUnlock()
+	return s.size
 }
 
 func (s *dbs) shKey(height int64) []byte {
@@ -214,3 +335,13 @@ func parseShKey(key []byte) (prefix string, height int64, ok bool) {
 	}
 	return
 }
+
+func marshalSize(size uint16) []byte {
+	bs := make([]byte, 2)
+	binary.LittleEndian.PutUint16(bs, size)
+	return bs
+}
+
+func unmarshalSize(bz []byte) uint16 {
+	return binary.LittleEndian.Uint16(bz)
+}
diff --git a/lite2/store/db/db_test.go b/lite2/store/db/db_test.go
index 8e317d29b..2b82de8f3 100644
--- a/lite2/store/db/db_test.go
+++ b/lite2/store/db/db_test.go
@@ -1,6 +1,7 @@
 package db
 
 import (
+	"sync"
 	"testing"
 
 	"github.com/stretchr/testify/assert"
@@ -93,3 +94,69 @@ func Test_SignedHeaderAfter(t *testing.T) {
 		assert.EqualValues(t, 2, h.Height)
 	}
 }
+
+func Test_Prune(t *testing.T) {
+	dbStore := New(dbm.NewMemDB(), "Test_Prune")
+
+	// Empty store
+	assert.EqualValues(t, 0, dbStore.Size())
+	err := dbStore.Prune(0)
+	require.NoError(t, err)
+
+	// One header
+	err = dbStore.SaveSignedHeaderAndValidatorSet(
+		&types.SignedHeader{Header: &types.Header{Height: 2}}, &types.ValidatorSet{})
+	require.NoError(t, err)
+
+	assert.EqualValues(t, 1, dbStore.Size())
+
+	err = dbStore.Prune(1)
+	require.NoError(t, err)
+	assert.EqualValues(t, 1, dbStore.Size())
+
+	err = dbStore.Prune(0)
+	require.NoError(t, err)
+	assert.EqualValues(t, 0, dbStore.Size())
+
+	// Multiple headers
+	for i := 1; i <= 10; i++ {
+		err = dbStore.SaveSignedHeaderAndValidatorSet(
+			&types.SignedHeader{Header: &types.Header{Height: int64(i)}}, &types.ValidatorSet{})
+		require.NoError(t, err)
+	}
+
+	err = dbStore.Prune(11)
+	require.NoError(t, err)
+	assert.EqualValues(t, 10, dbStore.Size())
+
+	err = dbStore.Prune(7)
+	require.NoError(t, err)
+	assert.EqualValues(t, 7, dbStore.Size())
+}
+
+func Test_Concurrency(t *testing.T) {
+	dbStore := New(dbm.NewMemDB(), "Test_Prune")
+
+	var wg sync.WaitGroup
+	for i := 1; i <= 100; i++ {
+		wg.Add(1)
+		go func(i int64) {
+			defer wg.Done()
+
+			dbStore.SaveSignedHeaderAndValidatorSet(
+				&types.SignedHeader{Header: &types.Header{Height: i}}, &types.ValidatorSet{})
+
+			dbStore.SignedHeader(i)
+			dbStore.ValidatorSet(i)
+			dbStore.LastSignedHeaderHeight()
+			dbStore.FirstSignedHeaderHeight()
+
+			dbStore.Prune(2)
+			_ = dbStore.Size()
+
+			dbStore.DeleteSignedHeaderAndValidatorSet(1)
+		}(int64(i))
+	}
+
+	wg.Wait()
+}
diff --git a/lite2/store/store.go b/lite2/store/store.go
index 65cd82731..7ea6b9c6b 100644
--- a/lite2/store/store.go
+++ b/lite2/store/store.go
@@ -45,4 +45,11 @@ type Store interface {
 	//
 	// height must be > 0 && <= LastSignedHeaderHeight.
 	SignedHeaderAfter(height int64) (*types.SignedHeader, error)
+
+	// Prune removes headers & the associated validator sets when Store reaches a
+	// defined size (number of header & validator set pairs).
+	Prune(size uint16) error
+
+	// Size returns a number of currently existing header & validator set pairs.
+	Size() uint16
 }

From b5f6bfa4f97e6f027f45938bb38238ff820f9543 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Thu, 27 Feb 2020 16:10:01 +0100
Subject: [PATCH 37/74] lite2: return height as 2nd return param in
 TrustedValidatorSet (#4479)

Closes #4473
---
 .../adr-046-light-client-implementation.md    |   2 +-
 lite2/client.go                               |  17 +--
 lite2/client_test.go                          | 101 ++++++++++++++++--
 3 files changed, 103 insertions(+), 17 deletions(-)

diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index dbae7e641..dca1c6692 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -28,7 +28,7 @@ type Client interface {
 
 	// get trusted headers & validators
 	TrustedHeader(height int64) (*types.SignedHeader, error)
-	TrustedValidatorSet(height int64) (*types.ValidatorSet, error)
+	TrustedValidatorSet(height int64) (valSet *types.ValidatorSet, heightUsed int64, err error)
 	LastTrustedHeight() (int64, error)
 	FirstTrustedHeight() (int64, error)
 
diff --git a/lite2/client.go b/lite2/client.go
index c52ffe832..b70123099 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -433,7 +433,8 @@ func (c *Client) TrustedHeader(height int64) (*types.SignedHeader, error) {
 }
 
 // TrustedValidatorSet returns a trusted validator set at the given height (0 -
-// latest).
+// latest). The second return parameter is the height used (useful if 0 was
+// passed; otherwise can be ignored).
 //
 // height must be >= 0.
 //
@@ -448,18 +449,22 @@ func (c *Client) TrustedHeader(height int64) (*types.SignedHeader, error) {
 //  - header signed by that validator set has not been verified yet
 //
 // Safe for concurrent use by multiple goroutines.
-func (c *Client) TrustedValidatorSet(height int64) (*types.ValidatorSet, error) {
-	height, err := c.compareWithLatestHeight(height)
+func (c *Client) TrustedValidatorSet(height int64) (valSet *types.ValidatorSet, heightUsed int64, err error) {
+	heightUsed, err = c.compareWithLatestHeight(height)
 	if err != nil {
-		return nil, err
+		return nil, heightUsed, err
 	}
-	return c.trustedStore.ValidatorSet(height)
+	valSet, err = c.trustedStore.ValidatorSet(heightUsed)
+	if err != nil {
+		return nil, heightUsed, err
+	}
+	return valSet, heightUsed, err
 }
 
 func (c *Client) compareWithLatestHeight(height int64) (int64, error) {
 	latestHeight, err := c.LastTrustedHeight()
 	if err != nil {
-		return 0, err
+		return 0, errors.Wrap(err, "can't get last trusted height")
 	}
 	if latestHeight == -1 {
 		return 0, errors.New("no headers exist")
diff --git a/lite2/client_test.go b/lite2/client_test.go
index ad9088e8c..b1079390a 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -47,7 +47,9 @@ var (
 	}
 	headerSet = map[int64]*types.SignedHeader{
 		1: h1,
+		// interim header (3/3 signed)
 		2: h2,
+		// last header (3/3 signed)
 		3: h3,
 	}
 	fullNode = mockp.New(
@@ -71,14 +73,7 @@ func TestClient_SequentialVerification(t *testing.T) {
 	}{
 		{
 			"good",
-			map[int64]*types.SignedHeader{
-				// trusted header
-				1: h1,
-				// interim header (3/3 signed)
-				2: h2,
-				// last header (3/3 signed)
-				3: h3,
-			},
+			headerSet,
 			valSet,
 			false,
 			false,
@@ -322,10 +317,14 @@ func TestClient_Cleanup(t *testing.T) {
 	err = c.Cleanup()
 	require.NoError(t, err)
 
-	// Check no headers exist after Cleanup.
+	// Check no headers/valsets exist after Cleanup.
 	h, err := c.TrustedHeader(1)
 	assert.Error(t, err)
 	assert.Nil(t, h)
+
+	valSet, _, err := c.TrustedValidatorSet(1)
+	assert.Error(t, err)
+	assert.Nil(t, valSet)
 }
 
 // trustedHeader.Height == options.Height
@@ -350,6 +349,13 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), h1.Hash())
+
+		valSet, _, err := c.TrustedValidatorSet(1)
+		assert.NoError(t, err)
+		assert.NotNil(t, valSet)
+		if assert.NotNil(t, valSet) {
+			assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+		}
 	}
 
 	// 2. options.Hash != trustedHeader.Hash
@@ -390,6 +396,13 @@ func TestClientRestoresTrustedHeaderAfterStartup1(t *testing.T) {
 		if assert.NotNil(t, h) {
 			assert.Equal(t, h.Hash(), header1.Hash())
 		}
+
+		valSet, _, err := c.TrustedValidatorSet(1)
+		assert.NoError(t, err)
+		assert.NotNil(t, valSet)
+		if assert.NotNil(t, valSet) {
+			assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+		}
 	}
 }
 
@@ -423,6 +436,13 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 		assert.NoError(t, err)
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), h1.Hash())
+
+		valSet, _, err := c.TrustedValidatorSet(1)
+		assert.NoError(t, err)
+		assert.NotNil(t, valSet)
+		if assert.NotNil(t, valSet) {
+			assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+		}
 	}
 
 	// 2. options.Hash != trustedHeader.Hash
@@ -469,6 +489,10 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 		h, err := c.TrustedHeader(1)
 		assert.Error(t, err)
 		assert.Nil(t, h)
+
+		valSet, _, err := c.TrustedValidatorSet(1)
+		assert.Error(t, err)
+		assert.Nil(t, valSet)
 	}
 }
 
@@ -504,10 +528,21 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), h1.Hash())
 
+		valSet, _, err := c.TrustedValidatorSet(1)
+		assert.NoError(t, err)
+		assert.NotNil(t, valSet)
+		if assert.NotNil(t, valSet) {
+			assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+		}
+
 		// Check we no longer have 2nd header (+header2+).
 		h, err = c.TrustedHeader(2)
 		assert.Error(t, err)
 		assert.Nil(t, h)
+
+		valSet, _, err = c.TrustedValidatorSet(2)
+		assert.Error(t, err)
+		assert.Nil(t, valSet)
 	}
 
 	// 2. options.Hash != trustedHeader.Hash
@@ -557,10 +592,21 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 		assert.NotNil(t, h)
 		assert.Equal(t, h.Hash(), header1.Hash())
 
+		valSet, _, err := c.TrustedValidatorSet(1)
+		assert.NoError(t, err)
+		assert.NotNil(t, valSet)
+		if assert.NotNil(t, valSet) {
+			assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+		}
+
 		// Check we no longer have invalid 2nd header (+header2+).
 		h, err = c.TrustedHeader(2)
 		assert.Error(t, err)
 		assert.Nil(t, h)
+
+		valSet, _, err = c.TrustedValidatorSet(2)
+		assert.Error(t, err)
+		assert.Nil(t, valSet)
 	}
 }
 
@@ -586,6 +632,12 @@ func TestClient_Update(t *testing.T) {
 	assert.NoError(t, err)
 	require.NotNil(t, h)
 	assert.EqualValues(t, 3, h.Height)
+
+	valSet, _, err := c.TrustedValidatorSet(3)
+	assert.NoError(t, err)
+	if assert.NotNil(t, valSet) {
+		assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+	}
 }
 
 func TestClient_Concurrency(t *testing.T) {
@@ -627,7 +679,7 @@ func TestClient_Concurrency(t *testing.T) {
 			assert.NoError(t, err)
 			assert.NotNil(t, h)
 
-			vals, err := c.TrustedValidatorSet(2)
+			vals, _, err := c.TrustedValidatorSet(2)
 			assert.NoError(t, err)
 			assert.NotNil(t, vals)
 		}()
@@ -784,6 +836,13 @@ func TestClient_NewClientFromTrustedStore(t *testing.T) {
 	h, err := c.TrustedHeader(1)
 	assert.NoError(t, err)
 	assert.EqualValues(t, 1, h.Height)
+
+	valSet, _, err := c.TrustedValidatorSet(1)
+	assert.NoError(t, err)
+	assert.NotNil(t, valSet)
+	if assert.NotNil(t, valSet) {
+		assert.Equal(t, h.ValidatorsHash.Bytes(), valSet.Hash())
+	}
 }
 
 func TestNewClientErrorsIfAllWitnessesUnavailable(t *testing.T) {
@@ -857,3 +916,25 @@ func TestClientRemovesWitnessIfItSendsUsIncorrectHeader(t *testing.T) {
 	assert.Error(t, err)
 	assert.EqualValues(t, 0, len(c.Witnesses()))
 }
+
+func TestClientTrustedValidatorSet(t *testing.T) {
+	c, err := NewClient(
+		chainID,
+		trustOptions,
+		fullNode,
+		[]provider.Provider{fullNode},
+		dbs.New(dbm.NewMemDB(), chainID),
+		UpdatePeriod(0),
+		Logger(log.TestingLogger()),
+	)
+
+	require.NoError(t, err)
+
+	_, err = c.VerifyHeaderAtHeight(2, bTime.Add(2*time.Hour).Add(1*time.Second))
+	require.NoError(t, err)
+
+	valSet, height, err := c.TrustedValidatorSet(0)
+	assert.NoError(t, err)
+	assert.NotNil(t, valSet)
+	assert.EqualValues(t, 2, height)
+}

From 3f883bb80afdf9b758cf74929156e9b27c4e2512 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Thu, 27 Feb 2020 17:26:28 +0100
Subject: [PATCH 38/74] lite2: actually run example tests + clock drift (#4487)

Closes: #4488

## Commits:

* run example tests

* introduce max clock drift

clockDrift variable from the spec.
10s should cover most of the clients.

References:

- http://vancouver-webpages.com/time/web.html
- https://blog.codinghorror.com/keeping-time-on-the-pc/

* fix ExampleClient_Update

* add test

* increase clock drift

* fix linter warning
---
 lite2/example_test.go  | 36 +++++++++++++++++++++---------------
 lite2/verifier.go      | 11 ++++++++---
 lite2/verifier_test.go | 23 +++++++++++++++++------
 3 files changed, 46 insertions(+), 24 deletions(-)

diff --git a/lite2/example_test.go b/lite2/example_test.go
index c8d883958..65997f906 100644
--- a/lite2/example_test.go
+++ b/lite2/example_test.go
@@ -11,7 +11,6 @@ import (
 	dbm "github.com/tendermint/tm-db"
 
 	"github.com/tendermint/tendermint/abci/example/kvstore"
-	"github.com/tendermint/tendermint/libs/log"
 	"github.com/tendermint/tendermint/lite2/provider"
 	httpp "github.com/tendermint/tendermint/lite2/provider/http"
 	dbs "github.com/tendermint/tendermint/lite2/store/db"
@@ -19,7 +18,7 @@ import (
 )
 
 // Automatically getting new headers and verifying them.
-func TestExample_Client_AutoUpdate(t *testing.T) {
+func ExampleClient_Update() {
 	// give Tendermint time to generate some blocks
 	time.Sleep(5 * time.Second)
 
@@ -57,10 +56,10 @@ func TestExample_Client_AutoUpdate(t *testing.T) {
 			Hash:   header.Hash(),
 		},
 		primary,
-		[]provider.Provider{primary}, // TODO: primary should not be used here
+		[]provider.Provider{primary}, // NOTE: primary should not be used here
 		dbs.New(db, chainID),
-		UpdatePeriod(1*time.Second),
-		Logger(log.TestingLogger()),
+		UpdatePeriod(0), // NOTE: value should be greater than zero
+		// Logger(log.TestingLogger()),
 	)
 	if err != nil {
 		stdlog.Fatal(err)
@@ -76,17 +75,29 @@ func TestExample_Client_AutoUpdate(t *testing.T) {
 
 	time.Sleep(2 * time.Second)
 
+	// XXX: 30 * time.Minute clock drift is needed because a) Tendermint strips
+	// monotonic component (see types/time/time.go) b) single instance is being
+	// run.
+	err = c.Update(time.Now().Add(30 * time.Minute))
+	if err != nil {
+		stdlog.Fatal(err)
+	}
+
 	h, err := c.TrustedHeader(0)
 	if err != nil {
 		stdlog.Fatal(err)
 	}
 
-	fmt.Println("got header", h.Height)
-	// Output: got header 3
+	if h.Height > 2 {
+		fmt.Println("successful update")
+	} else {
+		fmt.Println("update failed")
+	}
+	// Output: successful update
 }
 
 // Manually getting headers and verifying them.
-func TestExample_Client_ManualUpdate(t *testing.T) {
+func ExampleClient_VerifyHeaderAtHeight() {
 	// give Tendermint time to generate some blocks
 	time.Sleep(5 * time.Second)
 
@@ -127,17 +138,12 @@ func TestExample_Client_ManualUpdate(t *testing.T) {
 		[]provider.Provider{primary}, // TODO: primary should not be used here
 		dbs.New(db, chainID),
 		UpdatePeriod(0),
-		Logger(log.TestingLogger()),
+		// Logger(log.TestingLogger()),
 	)
 	if err != nil {
 		stdlog.Fatal(err)
 	}
-	err = c.Start()
-	if err != nil {
-		stdlog.Fatal(err)
-	}
 	defer func() {
-		c.Stop()
 		c.Cleanup()
 	}()
 
@@ -158,7 +164,7 @@ func TestExample_Client_ManualUpdate(t *testing.T) {
 func TestMain(m *testing.M) {
 	// start a tendermint node (and kvstore) in the background to test against
 	app := kvstore.NewApplication()
-	node := rpctest.StartTendermint(app)
+	node := rpctest.StartTendermint(app, rpctest.SuppressStdout)
 
 	code := m.Run()
 
diff --git a/lite2/verifier.go b/lite2/verifier.go
index c0732a69c..250c8b204 100644
--- a/lite2/verifier.go
+++ b/lite2/verifier.go
@@ -10,6 +10,10 @@ import (
 	"github.com/tendermint/tendermint/types"
 )
 
+const (
+	maxClockDrift = 10 * time.Second
+)
+
 var (
 	// DefaultTrustLevel - new header can be trusted if at least one correct
 	// validator signed it.
@@ -162,10 +166,11 @@ func verifyNewHeaderAndVals(
 			trustedHeader.Time)
 	}
 
-	if !untrustedHeader.Time.Before(now) {
-		return errors.Errorf("new header has a time from the future %v (now: %v)",
+	if !untrustedHeader.Time.Before(now.Add(maxClockDrift)) {
+		return errors.Errorf("new header has a time from the future %v (now: %v; max clock drift: %v)",
 			untrustedHeader.Time,
-			now)
+			now,
+			maxClockDrift)
 	}
 
 	if !bytes.Equal(untrustedHeader.ValidatorsHash, untrustedVals.Hash()) {
diff --git a/lite2/verifier_test.go b/lite2/verifier_test.go
index 6e118d7ae..241d33b05 100644
--- a/lite2/verifier_test.go
+++ b/lite2/verifier_test.go
@@ -75,8 +75,19 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			nil,
 			"new header has a time from the future",
 		},
-		// 3/3 signed -> no error
+		// new header's time is from the future, but it's acceptable (< maxClockDrift) -> no error
 		4: {
+			keys.GenSignedHeader(chainID, nextHeight,
+				bTime.Add(2*time.Hour).Add(maxClockDrift).Add(-1*time.Millisecond), nil, vals, vals,
+				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
+			vals,
+			3 * time.Hour,
+			bTime.Add(2 * time.Hour),
+			nil,
+			"",
+		},
+		// 3/3 signed -> no error
+		5: {
 			keys.GenSignedHeader(chainID, nextHeight, bTime.Add(1*time.Hour), nil, vals, vals,
 				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
 			vals,
@@ -86,7 +97,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			"",
 		},
 		// 2/3 signed -> no error
-		5: {
+		6: {
 			keys.GenSignedHeader(chainID, nextHeight, bTime.Add(1*time.Hour), nil, vals, vals,
 				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 1, len(keys)),
 			vals,
@@ -96,7 +107,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			"",
 		},
 		// 1/3 signed -> error
-		6: {
+		7: {
 			keys.GenSignedHeader(chainID, nextHeight, bTime.Add(1*time.Hour), nil, vals, vals,
 				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), len(keys)-1, len(keys)),
 			vals,
@@ -106,7 +117,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			"",
 		},
 		// vals does not match with what we have -> error
-		7: {
+		8: {
 			keys.GenSignedHeader(chainID, nextHeight, bTime.Add(1*time.Hour), nil, keys.ToValidators(10, 1), vals,
 				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
 			keys.ToValidators(10, 1),
@@ -116,7 +127,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			"to match those from new header",
 		},
 		// vals are inconsistent with newHeader -> error
-		8: {
+		9: {
 			keys.GenSignedHeader(chainID, nextHeight, bTime.Add(1*time.Hour), nil, vals, vals,
 				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
 			keys.ToValidators(10, 1),
@@ -126,7 +137,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			"to match those that were supplied",
 		},
 		// old header has expired -> error
-		9: {
+		10: {
 			keys.GenSignedHeader(chainID, nextHeight, bTime.Add(1*time.Hour), nil, vals, vals,
 				[]byte("app_hash"), []byte("cons_hash"), []byte("results_hash"), 0, len(keys)),
 			keys.ToValidators(10, 1),

From 78144306dd98157cffc17d896cdd01ea08d4d131 Mon Sep 17 00:00:00 2001
From: Shivani Joshi <46731446+Shivani912@users.noreply.github.com>
Date: Fri, 28 Feb 2020 03:57:00 -0500
Subject: [PATCH 39/74] JSON tests related changes (#4461)

* test functions take time.Now and other minor changes

* updated remaining test files

* Update validation_test.go

* fix typo

* go fmt

* import time

Co-authored-by: Marko <marbar3778@yahoo.com>
---
 blockchain/v0/reactor_test.go |  4 +++-
 blockchain/v2/reactor_test.go |  5 ++++-
 consensus/byzantine_test.go   |  2 +-
 consensus/replay_test.go      |  3 ++-
 libs/math/fraction.go         |  4 ++--
 state/helpers_test.go         |  2 +-
 state/validation_test.go      |  9 ++++++++-
 types/block.go                |  1 -
 types/block_test.go           | 20 ++++++++++----------
 types/priv_validator.go       | 31 ++++++++++++++++---------------
 types/test_util.go            |  9 +++++----
 11 files changed, 52 insertions(+), 38 deletions(-)

diff --git a/blockchain/v0/reactor_test.go b/blockchain/v0/reactor_test.go
index 08ff10a93..5a97d3aed 100644
--- a/blockchain/v0/reactor_test.go
+++ b/blockchain/v0/reactor_test.go
@@ -97,7 +97,9 @@ func newBlockchainReactor(
 				lastBlockMeta.BlockID,
 				state.Validators,
 				privVals[0],
-				lastBlock.Header.ChainID)
+				lastBlock.Header.ChainID,
+				time.Now(),
+			)
 			if err != nil {
 				panic(err)
 			}
diff --git a/blockchain/v2/reactor_test.go b/blockchain/v2/reactor_test.go
index c187f954b..ad091f582 100644
--- a/blockchain/v2/reactor_test.go
+++ b/blockchain/v2/reactor_test.go
@@ -6,6 +6,7 @@ import (
 	"sort"
 	"sync"
 	"testing"
+	"time"
 
 	"github.com/pkg/errors"
 	"github.com/stretchr/testify/assert"
@@ -494,7 +495,9 @@ func newReactorStore(
 				lastBlockMeta.BlockID,
 				state.Validators,
 				privVals[0],
-				lastBlock.Header.ChainID)
+				lastBlock.Header.ChainID,
+				time.Now(),
+			)
 			if err != nil {
 				panic(err)
 			}
diff --git a/consensus/byzantine_test.go b/consensus/byzantine_test.go
index 65bd88f67..bbf9cbf8f 100644
--- a/consensus/byzantine_test.go
+++ b/consensus/byzantine_test.go
@@ -54,7 +54,7 @@ func TestByzantine(t *testing.T) {
 		if i == 0 {
 			// NOTE: Now, test validators are MockPV, which by default doesn't
 			// do any safety checks.
-			css[i].privValidator.(*types.MockPV).DisableChecks()
+			css[i].privValidator.(types.MockPV).DisableChecks()
 			css[i].decideProposal = func(j int) func(int64, int) {
 				return func(height int64, round int) {
 					byzantineDecideProposalFunc(t, height, round, css[j], switches[j])
diff --git a/consensus/replay_test.go b/consensus/replay_test.go
index 6a33cf382..aca6a9f10 100644
--- a/consensus/replay_test.go
+++ b/consensus/replay_test.go
@@ -892,7 +892,8 @@ func makeBlock(state sm.State, lastBlock *types.Block, lastBlockMeta *types.Bloc
 			lastBlockMeta.BlockID,
 			state.Validators,
 			privVal,
-			lastBlock.Header.ChainID)
+			lastBlock.Header.ChainID,
+			time.Now())
 		lastCommit = types.NewCommit(vote.Height, vote.Round,
 			lastBlockMeta.BlockID, []types.CommitSig{vote.CommitSig()})
 	}
diff --git a/libs/math/fraction.go b/libs/math/fraction.go
index dca8a8e79..6cc2ad23e 100644
--- a/libs/math/fraction.go
+++ b/libs/math/fraction.go
@@ -6,10 +6,10 @@ import "fmt"
 // format.
 type Fraction struct {
 	// The portion of the denominator in the faction, e.g. 2 in 2/3.
-	Numerator int64
+	Numerator int64 `json:"numerator"`
 	// The value by which the numerator is divided, e.g. 3 in 2/3. Must be
 	// positive.
-	Denominator int64
+	Denominator int64 `json:"denominator"`
 }
 
 func (fr Fraction) String() string {
diff --git a/state/helpers_test.go b/state/helpers_test.go
index fec965016..f8758f987 100644
--- a/state/helpers_test.go
+++ b/state/helpers_test.go
@@ -82,7 +82,7 @@ func makeValidCommit(
 	sigs := make([]types.CommitSig, 0)
 	for i := 0; i < vals.Size(); i++ {
 		_, val := vals.GetByIndex(i)
-		vote, err := types.MakeVote(height, blockID, vals, privVals[val.Address.String()], chainID)
+		vote, err := types.MakeVote(height, blockID, vals, privVals[val.Address.String()], chainID, time.Now())
 		if err != nil {
 			return nil, err
 		}
diff --git a/state/validation_test.go b/state/validation_test.go
index 9346a3bdd..da975351c 100644
--- a/state/validation_test.go
+++ b/state/validation_test.go
@@ -117,6 +117,7 @@ func TestValidateBlockCommit(t *testing.T) {
 				state.Validators,
 				privVals[proposerAddr.String()],
 				chainID,
+				time.Now(),
 			)
 			require.NoError(t, err, "height %d", height)
 			wrongHeightCommit := types.NewCommit(
@@ -162,7 +163,13 @@ func TestValidateBlockCommit(t *testing.T) {
 		/*
 			wrongSigsCommit is fine except for the extra bad precommit
 		*/
-		goodVote, err := types.MakeVote(height, blockID, state.Validators, privVals[proposerAddr.String()], chainID)
+		goodVote, err := types.MakeVote(height,
+			blockID,
+			state.Validators,
+			privVals[proposerAddr.String()],
+			chainID,
+			time.Now(),
+		)
 		require.NoError(t, err, "height %d", height)
 		badVote := &types.Vote{
 			ValidatorAddress: badPrivVal.GetPubKey().Address(),
diff --git a/types/block.go b/types/block.go
index 4f61a2bc9..61ae6719b 100644
--- a/types/block.go
+++ b/types/block.go
@@ -752,7 +752,6 @@ type SignedHeader struct {
 
 // ValidateBasic does basic consistency checks and makes sure the header
 // and commit are consistent.
-//
 // NOTE: This does not actually check the cryptographic signatures.  Make
 // sure to use a Verifier to validate the signatures actually provide a
 // significantly strong proof for this header's validity.
diff --git a/types/block_test.go b/types/block_test.go
index 5f2f2e8bc..a7ae31e36 100644
--- a/types/block_test.go
+++ b/types/block_test.go
@@ -37,7 +37,7 @@ func TestBlockAddEvidence(t *testing.T) {
 	h := int64(3)
 
 	voteSet, valSet, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, time.Now())
 	require.NoError(t, err)
 
 	ev := NewMockEvidence(h, time.Now(), 0, valSet.Validators[0].Address)
@@ -57,7 +57,7 @@ func TestBlockValidateBasic(t *testing.T) {
 	h := int64(3)
 
 	voteSet, valSet, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, time.Now())
 	require.NoError(t, err)
 
 	ev := NewMockEvidence(h, time.Now(), 0, valSet.Validators[0].Address)
@@ -120,7 +120,7 @@ func TestBlockMakePartSetWithEvidence(t *testing.T) {
 	h := int64(3)
 
 	voteSet, valSet, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, time.Now())
 	require.NoError(t, err)
 
 	ev := NewMockEvidence(h, time.Now(), 0, valSet.Validators[0].Address)
@@ -137,7 +137,7 @@ func TestBlockHashesTo(t *testing.T) {
 	lastID := makeBlockIDRandom()
 	h := int64(3)
 	voteSet, valSet, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, time.Now())
 	require.NoError(t, err)
 
 	ev := NewMockEvidence(h, time.Now(), 0, valSet.Validators[0].Address)
@@ -210,7 +210,7 @@ func TestCommit(t *testing.T) {
 	lastID := makeBlockIDRandom()
 	h := int64(3)
 	voteSet, _, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, time.Now())
 	require.NoError(t, err)
 
 	assert.Equal(t, h-1, commit.Height)
@@ -241,7 +241,7 @@ func TestCommitValidateBasic(t *testing.T) {
 	for _, tc := range testCases {
 		tc := tc
 		t.Run(tc.testName, func(t *testing.T) {
-			com := randCommit()
+			com := randCommit(time.Now())
 			tc.malleateCommit(com)
 			assert.Equal(t, tc.expectErr, com.ValidateBasic() != nil, "Validate Basic had an unexpected result")
 		})
@@ -348,11 +348,11 @@ func TestMaxHeaderBytes(t *testing.T) {
 	assert.EqualValues(t, MaxHeaderBytes, int64(len(bz)))
 }
 
-func randCommit() *Commit {
+func randCommit(now time.Time) *Commit {
 	lastID := makeBlockIDRandom()
 	h := int64(3)
 	voteSet, _, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, now)
 	if err != nil {
 		panic(err)
 	}
@@ -431,7 +431,7 @@ func TestCommitToVoteSet(t *testing.T) {
 	h := int64(3)
 
 	voteSet, valSet, vals := randVoteSet(h-1, 1, PrecommitType, 10, 1)
-	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals)
+	commit, err := MakeCommit(lastID, h-1, 1, voteSet, vals, time.Now())
 	assert.NoError(t, err)
 
 	chainID := voteSet.ChainID()
@@ -506,7 +506,7 @@ func TestCommitToVoteSetWithVotesForNilBlock(t *testing.T) {
 }
 
 func TestSignedHeaderValidateBasic(t *testing.T) {
-	commit := randCommit()
+	commit := randCommit(time.Now())
 	chainID := "𠜎"
 	timestamp := time.Date(math.MaxInt64, 0, 0, 0, 0, 0, math.MaxInt64, time.UTC)
 	h := Header{
diff --git a/types/priv_validator.go b/types/priv_validator.go
index bd35973ca..f2af88750 100644
--- a/types/priv_validator.go
+++ b/types/priv_validator.go
@@ -44,35 +44,35 @@ func (pvs PrivValidatorsByAddress) Swap(i, j int) {
 // MockPV implements PrivValidator without any safety or persistence.
 // Only use it for testing.
 type MockPV struct {
-	privKey              crypto.PrivKey
+	PrivKey              crypto.PrivKey
 	breakProposalSigning bool
 	breakVoteSigning     bool
 }
 
-func NewMockPV() *MockPV {
-	return &MockPV{ed25519.GenPrivKey(), false, false}
+func NewMockPV() MockPV {
+	return MockPV{ed25519.GenPrivKey(), false, false}
 }
 
 // NewMockPVWithParams allows one to create a MockPV instance, but with finer
 // grained control over the operation of the mock validator. This is useful for
 // mocking test failures.
-func NewMockPVWithParams(privKey crypto.PrivKey, breakProposalSigning, breakVoteSigning bool) *MockPV {
-	return &MockPV{privKey, breakProposalSigning, breakVoteSigning}
+func NewMockPVWithParams(privKey crypto.PrivKey, breakProposalSigning, breakVoteSigning bool) MockPV {
+	return MockPV{privKey, breakProposalSigning, breakVoteSigning}
 }
 
 // Implements PrivValidator.
-func (pv *MockPV) GetPubKey() crypto.PubKey {
-	return pv.privKey.PubKey()
+func (pv MockPV) GetPubKey() crypto.PubKey {
+	return pv.PrivKey.PubKey()
 }
 
 // Implements PrivValidator.
-func (pv *MockPV) SignVote(chainID string, vote *Vote) error {
+func (pv MockPV) SignVote(chainID string, vote *Vote) error {
 	useChainID := chainID
 	if pv.breakVoteSigning {
 		useChainID = "incorrect-chain-id"
 	}
 	signBytes := vote.SignBytes(useChainID)
-	sig, err := pv.privKey.Sign(signBytes)
+	sig, err := pv.PrivKey.Sign(signBytes)
 	if err != nil {
 		return err
 	}
@@ -81,13 +81,13 @@ func (pv *MockPV) SignVote(chainID string, vote *Vote) error {
 }
 
 // Implements PrivValidator.
-func (pv *MockPV) SignProposal(chainID string, proposal *Proposal) error {
+func (pv MockPV) SignProposal(chainID string, proposal *Proposal) error {
 	useChainID := chainID
 	if pv.breakProposalSigning {
 		useChainID = "incorrect-chain-id"
 	}
 	signBytes := proposal.SignBytes(useChainID)
-	sig, err := pv.privKey.Sign(signBytes)
+	sig, err := pv.PrivKey.Sign(signBytes)
 	if err != nil {
 		return err
 	}
@@ -96,19 +96,19 @@ func (pv *MockPV) SignProposal(chainID string, proposal *Proposal) error {
 }
 
 // String returns a string representation of the MockPV.
-func (pv *MockPV) String() string {
+func (pv MockPV) String() string {
 	addr := pv.GetPubKey().Address()
 	return fmt.Sprintf("MockPV{%v}", addr)
 }
 
 // XXX: Implement.
-func (pv *MockPV) DisableChecks() {
+func (pv MockPV) DisableChecks() {
 	// Currently this does nothing,
 	// as MockPV has no safety checks at all.
 }
 
 type ErroringMockPV struct {
-	*MockPV
+	MockPV
 }
 
 var ErroringMockPVErr = errors.New("erroringMockPV always returns an error")
@@ -124,6 +124,7 @@ func (pv *ErroringMockPV) SignProposal(chainID string, proposal *Proposal) error
 }
 
 // NewErroringMockPV returns a MockPV that fails on each signing request. Again, for testing only.
+
 func NewErroringMockPV() *ErroringMockPV {
-	return &ErroringMockPV{&MockPV{ed25519.GenPrivKey(), false, false}}
+	return &ErroringMockPV{MockPV{ed25519.GenPrivKey(), false, false}}
 }
diff --git a/types/test_util.go b/types/test_util.go
index 3090f5f8b..48913f308 100644
--- a/types/test_util.go
+++ b/types/test_util.go
@@ -1,11 +1,11 @@
 package types
 
 import (
-	tmtime "github.com/tendermint/tendermint/types/time"
+	"time"
 )
 
 func MakeCommit(blockID BlockID, height int64, round int,
-	voteSet *VoteSet, validators []PrivValidator) (*Commit, error) {
+	voteSet *VoteSet, validators []PrivValidator, now time.Time) (*Commit, error) {
 
 	// all sign
 	for i := 0; i < len(validators); i++ {
@@ -17,7 +17,7 @@ func MakeCommit(blockID BlockID, height int64, round int,
 			Round:            round,
 			Type:             PrecommitType,
 			BlockID:          blockID,
-			Timestamp:        tmtime.Now(),
+			Timestamp:        now,
 		}
 
 		_, err := signAddVote(validators[i], vote, voteSet)
@@ -43,6 +43,7 @@ func MakeVote(
 	valSet *ValidatorSet,
 	privVal PrivValidator,
 	chainID string,
+	now time.Time,
 ) (*Vote, error) {
 	addr := privVal.GetPubKey().Address()
 	idx, _ := valSet.GetByAddress(addr)
@@ -51,7 +52,7 @@ func MakeVote(
 		ValidatorIndex:   idx,
 		Height:           height,
 		Round:            0,
-		Timestamp:        tmtime.Now(),
+		Timestamp:        now,
 		Type:             PrecommitType,
 		BlockID:          blockID,
 	}

From b73c0b75d51331b584168e31695d53716263ff93 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Fri, 28 Feb 2020 10:24:25 +0100
Subject: [PATCH 40/74] build(deps): bump github.com/golang/protobuf from 1.3.3
 to 1.3.4 (#4485)

Bumps [github.com/golang/protobuf](https://github.com/golang/protobuf) from 1.3.3 to 1.3.4.
- [Release notes](https://github.com/golang/protobuf/releases)
- [Commits](https://github.com/golang/protobuf/compare/v1.3.3...v1.3.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
 go.mod | 2 +-
 go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index a5faa59b1..dd2b444fc 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/go-kit/kit v0.10.0
 	github.com/go-logfmt/logfmt v0.5.0
 	github.com/gogo/protobuf v1.3.1
-	github.com/golang/protobuf v1.3.3
+	github.com/golang/protobuf v1.3.4
 	github.com/gorilla/websocket v1.4.1
 	github.com/gtank/merlin v0.1.1-0.20191105220539-8318aed1a79f
 	github.com/libp2p/go-buffer-pool v0.0.2
diff --git a/go.sum b/go.sum
index 0e05ecad9..c8eb10010 100644
--- a/go.sum
+++ b/go.sum
@@ -132,6 +132,8 @@ github.com/golang/protobuf v1.3.2 h1:6nsPYzhq5kReh6QImI3k5qWzO4PEbvbIW2cwSfR/6xs
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.3 h1:gyjaxf+svBWX08ZjK86iN9geUJF0H6gp2IRKX6Nf6/I=
 github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
+github.com/golang/protobuf v1.3.4 h1:87PNWwrRvUSnqS4dlcBU/ftvOIBep4sYuBLlh6rX2wk=
+github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
 github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/golang/snappy v0.0.1 h1:Qgr9rKW7uDUkrbSmQeiDsGa8SjGyCOGtuasMWwvp2P4=
 github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=

From c837a57ddd5f1c05dcc822f3555e9a6202f05d8e Mon Sep 17 00:00:00 2001
From: Gregory Terzian <2792687+gterzian@users.noreply.github.com>
Date: Fri, 28 Feb 2020 18:38:28 +0800
Subject: [PATCH 41/74] rpc: stop txSearch result processing if context is done
 (#4418)

---
 rpc/client/httpclient.go          | 10 ++++
 rpc/client/rpc_test.go            | 22 ++++++++
 rpc/core/tx.go                    |  2 +-
 state/txindex/indexer.go          |  3 +-
 state/txindex/kv/kv.go            | 66 ++++++++++++++++++++++--
 state/txindex/kv/kv_bench_test.go |  5 +-
 state/txindex/kv/kv_test.go       | 84 +++++++++++++++++++++++++++++--
 state/txindex/null/null.go        |  3 +-
 8 files changed, 182 insertions(+), 13 deletions(-)

diff --git a/rpc/client/httpclient.go b/rpc/client/httpclient.go
index c844113c3..98875c91e 100644
--- a/rpc/client/httpclient.go
+++ b/rpc/client/httpclient.go
@@ -96,6 +96,16 @@ func NewHTTP(remote, wsEndpoint string) (*HTTP, error) {
 	return NewHTTPWithClient(remote, wsEndpoint, httpClient)
 }
 
+// Create timeout enabled http client
+func NewHTTPWithTimeout(remote, wsEndpoint string, timeout uint) (*HTTP, error) {
+	httpClient, err := rpcclient.DefaultHTTPClient(remote)
+	if err != nil {
+		return nil, err
+	}
+	httpClient.Timeout = time.Duration(timeout) * time.Second
+	return NewHTTPWithClient(remote, wsEndpoint, httpClient)
+}
+
 // NewHTTPWithClient allows for setting a custom http client (See NewHTTP).
 // An error is returned on invalid remote. The function panics when remote is nil.
 func NewHTTPWithClient(remote, wsEndpoint string, client *http.Client) (*HTTP, error) {
diff --git a/rpc/client/rpc_test.go b/rpc/client/rpc_test.go
index 90612d5e0..9196bead0 100644
--- a/rpc/client/rpc_test.go
+++ b/rpc/client/rpc_test.go
@@ -39,6 +39,16 @@ func getHTTPClient() *client.HTTP {
 	return c
 }
 
+func getHTTPClientWithTimeout(timeout uint) *client.HTTP {
+	rpcAddr := rpctest.GetConfig().RPC.ListenAddress
+	c, err := client.NewHTTPWithTimeout(rpcAddr, "/websocket", timeout)
+	if err != nil {
+		panic(err)
+	}
+	c.SetLogger(log.TestingLogger())
+	return c
+}
+
 func getLocalClient() *client.Local {
 	return client.NewLocal(node)
 }
@@ -414,6 +424,18 @@ func TestTx(t *testing.T) {
 	}
 }
 
+func TestTxSearchWithTimeout(t *testing.T) {
+	// Get a client with a time-out of 10 secs.
+	timeoutClient := getHTTPClientWithTimeout(10)
+
+	// query using a compositeKey (see kvstore application)
+	result, err := timeoutClient.TxSearch("app.creator='Cosmoshi Netowoko'", false, 1, 30, "asc")
+	require.Nil(t, err)
+	if len(result.Txs) == 0 {
+		t.Fatal("expected a lot of transactions")
+	}
+}
+
 func TestTxSearch(t *testing.T) {
 	c := getHTTPClient()
 
diff --git a/rpc/core/tx.go b/rpc/core/tx.go
index f894424b7..e7e2582f6 100644
--- a/rpc/core/tx.go
+++ b/rpc/core/tx.go
@@ -67,7 +67,7 @@ func TxSearch(ctx *rpctypes.Context, query string, prove bool, page, perPage int
 		return nil, err
 	}
 
-	results, err := txIndexer.Search(q)
+	results, err := txIndexer.Search(ctx.Context(), q)
 	if err != nil {
 		return nil, err
 	}
diff --git a/state/txindex/indexer.go b/state/txindex/indexer.go
index c66f4322c..5f7ee7544 100644
--- a/state/txindex/indexer.go
+++ b/state/txindex/indexer.go
@@ -1,6 +1,7 @@
 package txindex
 
 import (
+	"context"
 	"errors"
 
 	"github.com/tendermint/tendermint/libs/pubsub/query"
@@ -21,7 +22,7 @@ type TxIndexer interface {
 	Get(hash []byte) (*types.TxResult, error)
 
 	// Search allows you to query for transactions.
-	Search(q *query.Query) ([]*types.TxResult, error)
+	Search(ctx context.Context, q *query.Query) ([]*types.TxResult, error)
 }
 
 //----------------------------------------------------
diff --git a/state/txindex/kv/kv.go b/state/txindex/kv/kv.go
index 5fcd5ab73..c5ba99ca3 100644
--- a/state/txindex/kv/kv.go
+++ b/state/txindex/kv/kv.go
@@ -2,6 +2,7 @@ package kv
 
 import (
 	"bytes"
+	"context"
 	"encoding/hex"
 	"fmt"
 	"strconv"
@@ -167,7 +168,18 @@ func (txi *TxIndex) indexEvents(result *types.TxResult, hash []byte, store dbm.S
 // better for the client to provide both lower and upper bounds, so we are not
 // performing a full scan. Results from querying indexes are then intersected
 // and returned to the caller, in no particular order.
-func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
+//
+// Search will exit early and return any result fetched so far,
+// when a message is received on the context chan.
+func (txi *TxIndex) Search(ctx context.Context, q *query.Query) ([]*types.TxResult, error) {
+	// Potentially exit early.
+	select {
+	case <-ctx.Done():
+		results := make([]*types.TxResult, 0)
+		return results, nil
+	default:
+	}
+
 	var hashesInitialized bool
 	filteredHashes := make(map[string][]byte)
 
@@ -205,7 +217,7 @@ func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
 
 		for _, r := range ranges {
 			if !hashesInitialized {
-				filteredHashes = txi.matchRange(r, startKey(r.key), filteredHashes, true)
+				filteredHashes = txi.matchRange(ctx, r, startKey(r.key), filteredHashes, true)
 				hashesInitialized = true
 
 				// Ignore any remaining conditions if the first condition resulted
@@ -214,7 +226,7 @@ func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
 					break
 				}
 			} else {
-				filteredHashes = txi.matchRange(r, startKey(r.key), filteredHashes, false)
+				filteredHashes = txi.matchRange(ctx, r, startKey(r.key), filteredHashes, false)
 			}
 		}
 	}
@@ -229,7 +241,7 @@ func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
 		}
 
 		if !hashesInitialized {
-			filteredHashes = txi.match(c, startKeyForCondition(c, height), filteredHashes, true)
+			filteredHashes = txi.match(ctx, c, startKeyForCondition(c, height), filteredHashes, true)
 			hashesInitialized = true
 
 			// Ignore any remaining conditions if the first condition resulted
@@ -238,7 +250,7 @@ func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
 				break
 			}
 		} else {
-			filteredHashes = txi.match(c, startKeyForCondition(c, height), filteredHashes, false)
+			filteredHashes = txi.match(ctx, c, startKeyForCondition(c, height), filteredHashes, false)
 		}
 	}
 
@@ -249,6 +261,13 @@ func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
 			return nil, errors.Wrapf(err, "failed to get Tx{%X}", h)
 		}
 		results = append(results, res)
+
+		// Potentially exit early.
+		select {
+		case <-ctx.Done():
+			break
+		default:
+		}
 	}
 
 	return results, nil
@@ -374,6 +393,7 @@ func isRangeOperation(op query.Operator) bool {
 //
 // NOTE: filteredHashes may be empty if no previous condition has matched.
 func (txi *TxIndex) match(
+	ctx context.Context,
 	c query.Condition,
 	startKeyBz []byte,
 	filteredHashes map[string][]byte,
@@ -397,6 +417,13 @@ func (txi *TxIndex) match(
 
 		for ; it.Valid(); it.Next() {
 			tmpHashes[string(it.Value())] = it.Value()
+
+			// Potentially exit early.
+			select {
+			case <-ctx.Done():
+				break
+			default:
+			}
 		}
 
 	case c.Op == query.OpContains:
@@ -417,6 +444,13 @@ func (txi *TxIndex) match(
 			if strings.Contains(extractValueFromKey(it.Key()), c.Operand.(string)) {
 				tmpHashes[string(it.Value())] = it.Value()
 			}
+
+			// Potentially exit early.
+			select {
+			case <-ctx.Done():
+				break
+			default:
+			}
 		}
 	default:
 		panic("other operators should be handled already")
@@ -438,6 +472,13 @@ func (txi *TxIndex) match(
 	for k := range filteredHashes {
 		if tmpHashes[k] == nil {
 			delete(filteredHashes, k)
+
+			// Potentially exit early.
+			select {
+			case <-ctx.Done():
+				break
+			default:
+			}
 		}
 	}
 
@@ -450,6 +491,7 @@ func (txi *TxIndex) match(
 //
 // NOTE: filteredHashes may be empty if no previous condition has matched.
 func (txi *TxIndex) matchRange(
+	ctx context.Context,
 	r queryRange,
 	startKey []byte,
 	filteredHashes map[string][]byte,
@@ -503,6 +545,13 @@ LOOP:
 			// 		break
 			// 	}
 		}
+
+		// Potentially exit early.
+		select {
+		case <-ctx.Done():
+			break
+		default:
+		}
 	}
 
 	if len(tmpHashes) == 0 || firstRun {
@@ -521,6 +570,13 @@ LOOP:
 	for k := range filteredHashes {
 		if tmpHashes[k] == nil {
 			delete(filteredHashes, k)
+
+			// Potentially exit early.
+			select {
+			case <-ctx.Done():
+				break
+			default:
+			}
 		}
 	}
 
diff --git a/state/txindex/kv/kv_bench_test.go b/state/txindex/kv/kv_bench_test.go
index 3e3bdced3..34d770040 100644
--- a/state/txindex/kv/kv_bench_test.go
+++ b/state/txindex/kv/kv_bench_test.go
@@ -1,6 +1,7 @@
 package kv
 
 import (
+	"context"
 	"crypto/rand"
 	"fmt"
 	"io/ioutil"
@@ -64,8 +65,10 @@ func BenchmarkTxSearch(b *testing.B) {
 
 	b.ResetTimer()
 
+	ctx := context.Background()
+
 	for i := 0; i < b.N; i++ {
-		if _, err := indexer.Search(txQuery); err != nil {
+		if _, err := indexer.Search(ctx, txQuery); err != nil {
 			b.Errorf("failed to query for txs: %s", err)
 		}
 	}
diff --git a/state/txindex/kv/kv_test.go b/state/txindex/kv/kv_test.go
index efb767f21..8756bc344 100644
--- a/state/txindex/kv/kv_test.go
+++ b/state/txindex/kv/kv_test.go
@@ -1,6 +1,7 @@
 package kv
 
 import (
+	"context"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -118,10 +119,12 @@ func TestTxSearch(t *testing.T) {
 		{"account.number CONTAINS 'Iv'", 0},
 	}
 
+	ctx := context.Background()
+
 	for _, tc := range testCases {
 		tc := tc
 		t.Run(tc.q, func(t *testing.T) {
-			results, err := indexer.Search(query.MustParse(tc.q))
+			results, err := indexer.Search(ctx, query.MustParse(tc.q))
 			assert.NoError(t, err)
 
 			assert.Len(t, results, tc.resultsLength)
@@ -132,6 +135,73 @@ func TestTxSearch(t *testing.T) {
 	}
 }
 
+func TestTxSearchWithCancelation(t *testing.T) {
+	allowedKeys := []string{"account.number", "account.owner", "account.date"}
+	indexer := NewTxIndex(db.NewMemDB(), IndexEvents(allowedKeys))
+
+	txResult := txResultWithEvents([]abci.Event{
+		{Type: "account", Attributes: []kv.Pair{{Key: []byte("number"), Value: []byte("1")}}},
+		{Type: "account", Attributes: []kv.Pair{{Key: []byte("owner"), Value: []byte("Ivan")}}},
+		{Type: "", Attributes: []kv.Pair{{Key: []byte("not_allowed"), Value: []byte("Vlad")}}},
+	})
+	hash := txResult.Tx.Hash()
+
+	err := indexer.Index(txResult)
+	require.NoError(t, err)
+
+	testCases := []struct {
+		q             string
+		resultsLength int
+	}{
+		// search by hash
+		{fmt.Sprintf("tx.hash = '%X'", hash), 0},
+		// search by exact match (one key)
+		{"account.number = 1", 0},
+		// search by exact match (two keys)
+		{"account.number = 1 AND account.owner = 'Ivan'", 0},
+		// search by exact match (two keys)
+		{"account.number = 1 AND account.owner = 'Vlad'", 0},
+		{"account.owner = 'Vlad' AND account.number = 1", 0},
+		{"account.number >= 1 AND account.owner = 'Vlad'", 0},
+		{"account.owner = 'Vlad' AND account.number >= 1", 0},
+		{"account.number <= 0", 0},
+		{"account.number <= 0 AND account.owner = 'Ivan'", 0},
+		// search using a prefix of the stored value
+		{"account.owner = 'Iv'", 0},
+		// search by range
+		{"account.number >= 1 AND account.number <= 5", 0},
+		// search by range (lower bound)
+		{"account.number >= 1", 0},
+		// search by range (upper bound)
+		{"account.number <= 5", 0},
+		// search using not allowed key
+		{"not_allowed = 'boom'", 0},
+		// search for not existing tx result
+		{"account.number >= 2 AND account.number <= 5", 0},
+		// search using not existing key
+		{"account.date >= TIME 2013-05-03T14:45:00Z", 0},
+		// search using CONTAINS
+		{"account.owner CONTAINS 'an'", 0},
+		// search for non existing value using CONTAINS
+		{"account.owner CONTAINS 'Vlad'", 0},
+		// search using the wrong key (of numeric type) using CONTAINS
+		{"account.number CONTAINS 'Iv'", 0},
+	}
+
+	ctx, cancel := context.WithCancel(context.Background())
+
+	cancel()
+
+	for _, tc := range testCases {
+		tc := tc
+		t.Run(tc.q, func(t *testing.T) {
+			results, err := indexer.Search(ctx, query.MustParse(tc.q))
+			assert.NoError(t, err)
+			assert.Len(t, results, tc.resultsLength)
+		})
+	}
+}
+
 func TestTxSearchDeprecatedIndexing(t *testing.T) {
 	allowedKeys := []string{"account.number", "sender"}
 	indexer := NewTxIndex(db.NewMemDB(), IndexEvents(allowedKeys))
@@ -192,10 +262,12 @@ func TestTxSearchDeprecatedIndexing(t *testing.T) {
 		{"sender = 'addr1'", []*types.TxResult{txResult2}},
 	}
 
+	ctx := context.Background()
+
 	for _, tc := range testCases {
 		tc := tc
 		t.Run(tc.q, func(t *testing.T) {
-			results, err := indexer.Search(query.MustParse(tc.q))
+			results, err := indexer.Search(ctx, query.MustParse(tc.q))
 			require.NoError(t, err)
 			require.Equal(t, results, tc.results)
 		})
@@ -214,7 +286,9 @@ func TestTxSearchOneTxWithMultipleSameTagsButDifferentValues(t *testing.T) {
 	err := indexer.Index(txResult)
 	require.NoError(t, err)
 
-	results, err := indexer.Search(query.MustParse("account.number >= 1"))
+	ctx := context.Background()
+
+	results, err := indexer.Search(ctx, query.MustParse("account.number >= 1"))
 	assert.NoError(t, err)
 
 	assert.Len(t, results, 1)
@@ -268,7 +342,9 @@ func TestTxSearchMultipleTxs(t *testing.T) {
 	err = indexer.Index(txResult4)
 	require.NoError(t, err)
 
-	results, err := indexer.Search(query.MustParse("account.number >= 1"))
+	ctx := context.Background()
+
+	results, err := indexer.Search(ctx, query.MustParse("account.number >= 1"))
 	assert.NoError(t, err)
 
 	require.Len(t, results, 3)
diff --git a/state/txindex/null/null.go b/state/txindex/null/null.go
index ae496a851..1ae7f7942 100644
--- a/state/txindex/null/null.go
+++ b/state/txindex/null/null.go
@@ -1,6 +1,7 @@
 package null
 
 import (
+	"context"
 	"errors"
 
 	"github.com/tendermint/tendermint/libs/pubsub/query"
@@ -28,6 +29,6 @@ func (txi *TxIndex) Index(result *types.TxResult) error {
 	return nil
 }
 
-func (txi *TxIndex) Search(q *query.Query) ([]*types.TxResult, error) {
+func (txi *TxIndex) Search(ctx context.Context, q *query.Query) ([]*types.TxResult, error) {
 	return []*types.TxResult{}, nil
 }

From a122a555de1d24866d21a48d60bc2b9e47651529 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 28 Feb 2020 11:53:06 +0100
Subject: [PATCH 42/74] docs: adr-046 add bisection algorithm details (#4496)

* docs: adr-046 add bisection algorithm details

Closes #4329

* format fig. 1 title

* docs: adr-046 we no longer download headers in TrustedHeader

https://github.com/tendermint/tendermint/pull/4496#issuecomment-592446054
---
 .../adr-046-light-client-implementation.md    |  26 ++++++++++++++++--
 docs/architecture/img/adr-046-fig1.png        | Bin 0 -> 13276 bytes
 2 files changed, 23 insertions(+), 3 deletions(-)
 create mode 100644 docs/architecture/img/adr-046-fig1.png

diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index dca1c6692..6058da8f8 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -3,6 +3,7 @@
 ## Changelog
 * 13-02-2020: Initial draft
 * 26-02-2020: Cross-checking the first header
+* 28-02-2020: Bisection algorithm details
 
 ## Context
 
@@ -67,9 +68,13 @@ required to respond: 1. Note the very first header (`TrustOptions.Hash`) is
 also cross-checked with witnesses for additional security.
 
 Due to bisection algorithm nature, some headers might be skipped. If the light
-client does not have a header for height `X` and `TrustedHeader(X)` or
-`TrustedValidatorSet(X)` methods are called, it will download the header from
-primary provider and perform a backwards verification.
+client does not have a header for height `X` and `VerifyHeaderAtHeight(X)` or
+`VerifyHeader(H#X)` methods are called, it will perform a backwards
+verification from the latest header back to the header at height `X`.
+
+`TrustedHeader`, `TrustedValidatorSet` only communicate with the trusted store.
+If some header is not there, an error will be returned indicating that
+verification is required.
 
 ```go
 type Provider interface {
@@ -127,6 +132,21 @@ cases of adjacent and non-adjacent headers. In the former case, it compares the
 hashes directly (2/3+ signed transition). Otherwise, it verifies 1/3+
 (`trustLevel`) of trusted validators are still present in new validators.
 
+### Bisection algorithm details
+
+Non-recursive bisection algorithm was implemented despite the spec containing
+the recursive version. There are two major reasons:
+
+1) Constant memory consumption => no risk of getting OOM (Out-Of-Memory) exceptions;
+2) Faster finality (see Fig. 1).
+
+_Fig. 1: Differences between recursive and non-recursive bisections_
+
+![Fig. 1](./img/adr-046-fig1.png)
+
+Specification of the non-recursive bisection can be found
+[here](https://github.com/tendermint/spec/blob/zm_non-recursive-verification/spec/consensus/light-client/non-recursive-verification.md).
+
 ## Status
 
 Accepted.
diff --git a/docs/architecture/img/adr-046-fig1.png b/docs/architecture/img/adr-046-fig1.png
new file mode 100644
index 0000000000000000000000000000000000000000..d68712e8a1a463647493abd5ce6787a5a8dd8b59
GIT binary patch
literal 13276
zcmb`uWmr{D6z~gpKn{&4(j2<sAl(fj9n#%Mmo!L&ba$spO1E(64h5u3Qo2L9`{@6z
z5BJNxug`vTpS@?+%$hZ`X06|BBa{_oFwuz65D*YBWnW9GA|N0p0rxAYD8S#7EHtga
zKZq`>GU5o8V<fx4y|%TwmaCS6Jin=f9jmdKgNZq-hn*u(3IRdTgCDrHGj}zHc-Yz6
zyYPDmQT{E#58T5avr$6+7IC!^qSR7QhDbO#n?tx*Ia#5U!e|f(M9|sHf?riq`oHSH
zFCj`RS64@VHa2&6cUE@}RtINGHg-NfJ~rqpwpXuMfD$Y&p7yTB9xV1QRR4th4>^+N
zE~d`bj;_`Y_7J#SV-p8AS0PGDctij5&%b`UT3h_Dmh4^rQwva#4gQ9WofXRVKV<_|
z1>sNmm7J~3ftKO&h1muFmi#}S{nw5l8@%!Vtuy~L{reP9RTxc>?SBrNFq(Wfoi+l(
zD|T5)F?A2bgKYP5(%$y|ZSK4Ik}I-lZ|q=N5?gt8HcyZ^^oEKTE$%f=&l51E%5y~A
zR|A{B2&ulMeG@@3&gZ560G@LdKO&WvKl-uMnAMoe-U(aWa2d<KSn?iPI?_8>;uiSD
zQG1qsGkW+lMSMLg3pM-${KAM6-AAaJ{Y42uf?uoP*UIX+lA<8sdPM;d8w3?1;UePV
zAmYa5m0|s>VkRycm;jbWru<t2BBnwLyauj;;13`gyeKqDcx6e^zykh%GULFA;5W1c
zFT(#d36gUAD_#<Uhx9B-9?FOVuZ)8T{<!zIN8zHhAZq$_BX!8XK0SN><F9y}0D08c
z%CEZ0ME`Y<nqHQacef~UvB_!UodL1MXvQxc9i2r&%Pia%?(I{A$xYwXYKu5tf8~|}
zbb(A1VB4CDIw6Qb7_kM9KeX<B{(^$@#*USyg017ap!Iq^(grWz1klxr5s4_D^R3el
zks3q48}mPS`Og8pIjIA_2L|#z;lQLVXg%s!sIv1vS??82B;oPTGR-vITK2m;csq8~
zv=OsBUYhH-2ixXvF!WdpSr-;EBRO%*`8C8;<!Zri@>mebdg}LP1Ns<jUAgG?o>gAt
zfz0=O(j+Tb>Y8^f{yjSRS#ox5^{sB_?cNt(4;*P*elT%^G0|(ePvELf*OXJrM-5sH
zl+Np3w#7Q@>5rZ?WK1qoD$#V?avKnzN_I=nJd9|%UDOR|r%oi$Z!)0Y&S#@Mt$Z$9
zO`d04&BP9ElM1=QODsBd1Ah+PJ6#H;qfe0>zpKbJ%O=wD32Tl!FFN(}#Z2Z+@R9&M
zv;T83do}BnbHKCg0h|75RT#ZUm+PZSUEfdUeGTo4A=MR>7S!W0AA0US#<%T}h-;lD
z;@=@~y&BZs`LovYuD*EfcE5_vz=4=9%Tb&?YbuB5M)1%1^is%6gPmjd39+Zm+qwSB
z2h}hv;iU!J+Gq!is^%>s_gQ`S8^>^T_q|W0CGSAS%`1L)H_(B*mxexT$h5TC*Uk5*
z!%NNEIr~*%Pj<0Lqu<xNUTOj()41&Q1$!awYYFqn+l>g(l$5*TRD(Sn2E621L;t0x
z7h9PQUVYUbTj`dI+3w5MDpo8=loQ`T^O`(%oaLM?TUPRpSIgd2hE$N^!`;%{%P<^l
zA~c(*G?Bd24*nRF728|RQ|2bqSfLrAo6W?IQk%7@37xF><@2|7(~2(Mhs~wAoH9F=
zt%v+FR940luc=TL>{|~QyCw*9bTs(1osHIeA`XAoj$g_|Y%BTSCSv0u#(<x&^PP=w
zEHRX3sbcUwpLm#(Z8p=U?Ue)(kKnD*D&^>H%4Aby7me>>`}sZIt$2$#l8N{UhHU~%
zA>)JS9`46q){!g?)uY1uRh<v>lcJ&RS_@dj(ZVlj1YEYq++@f+&34!Pu4c6@v%mUT
zh2siFX6D=pT`eYlZj>7*!M*Jld03M%&=WE44mR;Q>U`{Qz+s7TB&7oNen4qL<ng+~
z7olS4K^E(-u;<rolt)P;ZR{hm!Qe#IXG5Y?ev0&kg+6&|Xkar%*Z#zXc<X6m=xE^t
zgrkM;sO{{d1;v;t2hVg^G(x%NFbN`60B1~d^27sK#^h8mj2=00$~;wn#?n=sAPU2(
z$<7aT8u#SYOPsNQ^OuGLk^5sJk3MWeH3dCB;FFBIox)h#>8d+9OZjxI4^h;1il%*0
zgfTRI(S#g*-b^g+*T$^Lc!;<JNT37*yE-`{b6T*5c0zNMuraj@bBNhk;ZE#9&x65v
z;)vVx1Qq$-GmoCm-Vj6d*o|O^?QX9A(fAU{rrT?|5!3fAap&uISzn%Gy`(ODPOkB4
zhyj?x#{A%*y3k#y|F4<%EV~$<IJvzq5*6o?wvwwQES<E4<)#VMXp0!+=@#&n<oSUm
zIr?768uLul!?F52^r73wS{Edl=Y+Z=lvLE40CW^^eFVG#BMJsjloG`M`B5urz%N=b
za}{gD9Vt=V2T(C0x|HlQpm2Z%HAKw1PgN}g@M)5Hh=8{ys#Z>-hKu>XR84d*x9TyM
zZ)0)lP|Ek~)YR0Tbe;dBev~jB({ESW2VLEH#w`5{M{k=j;+dJ|y$Cd!gmH)Fcv2e;
zUfqY|<4fGi3K}w5U7J?oW$pqWqZctTucsvEO-McM9rnX74%552qYHo2!?b26`A6L9
zFk>$cbrL&qNq7CkJUs3OikPRq#~Odydm5pnD^kG097`FehICS4`9d^Ayh?YfzWQVA
zTczTQ&UdK%lt}e7qT2zAlI6NT*9Zvrm+pvnLwNMVo&?0Yxvul$)hKT83nYvgp1$1Q
zv30HMbLYJ-KB*&(8Ec5I<dV`ZI*3b{ts}+SdwSBt&tK(gGTn4eI<+R7vA!>pQI~W^
z?C+k`s?#qCkpZP#F}qdL>4&~-shZM<tWYXbA<f>;Zlw1=UpW{Me1}Z`cO!%*0ozlk
zsx>1J^#E%^2I&)W@fUX~(!?)iaAN_MOcs47wwsd2`A(ZrA6^DW3Noset%B&c%}}3L
z1lIHWuUssG(jaDNVjc#{+Yko0Y(Bv1gU0zx!|+;A0+4EFnCjurU(1`ledbG%YQ@-(
z?IG7;x2;|pO_j^PCY|C+rg(1eT0K0kp3NpwDhRdf+k1|GeF!{o@spix^u4@W(4K4`
zaicrwX~_|9q$0OoeCBtPrySm4CZ&qCB<tD3KjgXl?nmtM9KFxd&R#?nc?fl<^}dX&
z$)*a(`3<B#FKOd@#=Wh~eB+zxTeg=~F%hCHVCEx(3|HQk!onh|>cCVAwWhjGNY`-6
zCw`K4*)S^ejFk5*&LNv@GZeqA1^kCwP?{w&1m%-H!{RqneM+5%y%MmjyLo1Q6iH;b
zdQ5+hovYJ4olQ9ZzHalTSlLw%K7x{vD-dT`!W|<70X`COm_T5`P4eO+Jh0fz0iutq
zx1tDt%Mk-h$d;G!IecLZ2nBps@?`PwbUw@nf199#dd;4N`q3s!;0~k#78&IAL#9Jg
zkXT)seVDySY1{91psX*t{-E;i(PxFDcb5Hz$jatptnSIl#LUb!TfVAR1w%(x%ajQD
z!pBD|EhfRlSo>c7+!gf)u*fp+^pH%gs*g}zeKD1+-~Ft#ZUS})AWhZw-J`6Ij;hZ!
zQ;IjA|Fa}#bys;1CHT00N_;3)H(Ty%-P%lbQvsxkH{eB0#y0&a@iRJH6H(A95K1MK
zPH7mxXNM6Eu;fv2D+BT2-artD$~HgMCC?(_(idH4mmo?NMM~w-g4W4>!WCjbG$~2<
zzj8z=df8OA$x;wF1p{UpHmw_@vOzSad1#7%g}(uW&n9Sgz=cChkv^?R4Bj^XiaIM?
z{nz@QBw+3D4A~zwKzoXLdX^tOlf^%>y}Nx$kr*q~+Y-3ZJIMKv$fWA?Gl|Wu<TRJM
zjptWn7L&g|<e^rsxKnz9oGJI=d9K@Di2tehyK=dM&WU8B=tm-!3%cyb!yf<pu(o5}
zFHhf`2UN`I(D=j63PE}cw!$iAB+CZET)=+eG!U@}n*a6gwesinNm=+CoB%Dr&RVLc
zbbnW%ax&m5|6i*W`C<Q3>deyS63rgT`F6wM|C4UwljXyb@7;~bBW~MR{FetZZ1O5%
zgG-OdeUfw^-^!l)x`w7TDwHdapB{<9SmO|(3fbGRWLc5^+5t^4>%qqlsOpe79c9Mg
zLf8c)u8pa|*6Aj7Ifa$czm06rc7|6jq)q!Q-!)RS0(D^XEz=ZXpW05e|2{9w>O~TK
z&Z+~Nefn6+u2iWt^CJyREdGgTruj425!GBt8#h1<h`$M+m!sAF1lR41SzS`9-|mZw
zHY$+jF};CnPw)|llO<}@lj-2U%ANp=;s1E0p!In;^_{9;b!3I9)`F2t{;`zN05D@X
zP2=}It%<SK&%6f@<w<COBw{`YSO4gd8oHzZCC$`6c=Ezrnw^Agzmx97a7$%#86!3|
zy73MFa7kw=kL>nm!_WJ&G45}94aWQ(LL9p{Z0w*ze;ytmS|e=25?GPy=>VmKTzda{
zMTvwD@&*!LwUQbB_E8Av<3T!;^xy6$fC~IczJB>KtnYnLfB0~B<lcJFkeSJ8oj@$)
zbsiU7ARqBJAt<855ejp@_@UX#F)lcLaejWS6(f9W#bers(YRZZSrYqJQ=M9wzT7AH
zOUO!IDtuE7prypIJ8e1Yxcg`#{;)NgxozLFOMCT0(~!>wlu5sWnf(3m(Ee(WF1HDY
zVn;@^1!miUaNB+`f#yZ?E1fnVIanO`e{i`1;-X0wt?In|)50FOlSve<8?>ovzjSU~
zdaqj(uiN3%oXKsMQOfPKF4_1)L$`Tm#>#hy?jS*rO}AmB{qf=M@T8yI-DPXUDOUKl
z>~1}hZE;NC=r?Qg<}>#Jim;}!v9W|NS((DVEdu-HwQb+jXq5y{f~6zBC=*>H?$cY>
z@j9lUQILb?6UYw9O~1D6SGKmeulUZkU(D#nka6++><&R+N>mcwjjd?EoVSNz^0>mn
zu&=gFx<?9gmzNDhK6{_^zFaETu3gN1ytllX?R@wlbn#v7ftT{^W;<5^<a4#;ekCZ!
zr|)<3>+n~qAuE~RQTx>*(9k|T73ejl5w5}>=H8`cuJ4wC*DlQ!5X%ejD*`!#^TENv
zdPYVG>i}_pl^7wPa}lw?`|@0lbP<2Q$?v_G{n1yeLD(&9o%d4|%r@mUp~T#_Y4+dp
zxGA1<-osNcas>!=t>yTo$p~LC3Wb%8jf=oRU7`RyrMp~kIJyclx(8zQj$No&hN(g1
zE2H41Un#mR^)othzcCdzGhTgj^#J-Vu!a73n%e1+$XX~pWDF!aR|U@qv)Up=S;3M@
zL&Vuqk@z>6_CrYw9hwTUV<hdo_8q1%e0>UO(5{28!>sV^hHZg<o=d_LlUOn(bT2=Q
z?9`$HP`81;&q6f-5orX~VI+<Ha5GWq{ZlfJJYAPjuHp4A=J$PsmL6gS6m_^@ap&u`
zuvRrizFtE%V}{5o4;<V_V3^v=rYYd|T67r~+U~g7B4#^I!lvpNOr*OjC0b(ue3o)L
zu>Vk$y<pO4(lqew)puWV^D{uk3*d_3v`0l3;wNf6+30Wez5Ll9YfJD;YeSPycGNc%
zg)H%f3sqV%LA>DU0F@uPeZHw=K%6ZwBkh4)_%NI*=D4IXntQ%%Wf>~Y<+3Hu<F=>1
z0-54nM|A;`1V_3Yj{<>*>y4!tfx{gc=8Tow96|H*Nf~m_lO`bZ`SXMp2-;&dcw<`R
zg+d6k3z#aKx=G*98F!R-U`y!&?ztGGA*YNQoEekzN{MF45r+8yrjcfwsa|_(+yw%n
zaMWR7F&_ano;IHJ5vOL`Ze>`wgoE1ka;6GY#I4fJ{2y+%m%_;X=1Su!9cat;D;jea
z96JAy#2S+O9Cz7g+BKYDiqKYRl}?&4Gi-1FK{2f($VIw&9+0nORFB*{VKifGznbHH
zc#=3G&uaRr+JMZ)%Zrqhbom~hlr~9V3w@8(k)~slo+9qA3%cfPp<<IuWxcq$yWWWP
zWlIfv4mE8*?nXCI_E1Koy*6hLi-QvV^xCh8q~f7n@{BEAOw@a??{5>0&xH5+hgFR;
znyWPERLbaEph;6&R{uy)#5OQNuc+|7g4;M$_I5(5YRCBP7wj4@y1#Dcc;AxUq7d7z
z=4y0nL=Q|L%);1*C`F<WI{sYhc0v-;WYchD1k*q=>bwq~%r9^xLHTC(X26oWEacph
zhB~o34-a8TwGpvYa`w*H)M>?fedd+Qn?yCErB7ie(j?NM<*89x$-P%cZ};$u%;y`q
zpDv?>hNEJ#9o0fOnKNy_Mu?25nVzr9L=mi!7n-x8)EFCY!Y()$%jJlziF9)UO(^V`
z!;yu&r+T`DsjyReBVT&Q1KB$EeRvSqEjSn@bMonIJa#u1q8RU-g#wX>YepRh65r~F
zCyO0-hx^;F2%??rtFxpdFGyLiG@2RpaINr>($PPfXGy0T2pv@l0*S1FmIofm89_8}
zrC!j86Ojde57MOQYb}EMiCW8O1oojdQbhdA6Vrmg>a;kVTrhGW*7BjHnb_^zHi<(?
zX43>T(GM@?jWy=<U=}JBHkqgqXE%53@yx~&Ni=?Em9DYx=U%J$>rF{W6$nK^Sv-&P
z_xW*p-Ik>k4*r(T&L7i)RiC*H?5cV@B8RLB*akQMYF0#2Hk<y!&6|_tP~5)$hG<df
zc(mfy2M@&fFf0O<6W15mB+$Ta!}e@IF=CdP*55BWQNIU?Du8H42-^Lnp9;R{-T8IU
zxN;dgOUa3fRrr*cA<5>PPh);3Y)x~4wSBB75K1^X=Q;D6gI}D4;03#9jMZ^1efdwz
z^RDjjPq?5W)nzW7@)fHZ)%2YvR17I3u9r!w;pYYH0_*|fcf{eC1%a#3Kx5V*K0*#9
z_VIvKXlejXns%h4HLnvbhTnFp|IBJ_UlM-C^oUuXTpF-Q(*46i<54V_IjSfa@7ur@
z+`)Z4^ihR`4O}|5p{lAxQh9vf@A}G&#u8RIu~U3lF%+~}mZRbQk~CRo5Iy2i=saK(
z4u%*=^*Hw#tNe8>l*pJoV2$J<?CZ3Z6MbssDJ`&@PgDo0dO!cDQYZ!IZ~*~0ad{ZQ
z28xwGtk~(0D{Mc0Lx6{*sLH7TZ34E)a%yND9aw$nUnIvx1q1_x@1&^V0h&Z65TAjE
zQe*8-&MxcUw^8+MOxDD{o@L6mZswHZpWc#tkjh&IB7D`OXI978Hx%-IZHY3~#7prr
zc#6DTkB*jwrEhof0`gyrQYGbUedZgR24GhF#v;=`rLrMXI(SIxrT(S@l}`r#8HUBP
znKXrw6RN1Kad`&7yB23(b`A`mOki(;D<j=FEJo-vtgp#<XLa>b@H>df$SeVf_hx!f
z6Z=F$M+CrACLXraOby4D09FiI^%CggB5CwJ4TWKs|8A;)xhA!a8D`z1pULtXX9b&E
z8!Ozh_}mjcMQ5_m*P-29(5rV{54#p$PQkxU-)GA%HpU^ld1Vkh_!`Y}t+oU!4gT!c
z*oF42l3e5rCG<HMSls~Fsu2Jh{u3*r2;jNQ*VoOLfO<6p(GJ;XLh(0e+jnO^KaK&X
zeT)=H*TEhL!*&=rJ7c<6Jpnk@ZfyVk-Kc}#MiuO+%KwiIkM$Ha`D{hw@}7TFeCTmm
zVGJW#f07G8_HImPCUV@DJ$<J<cZ*Y7bnTmaWt4JWr}7CCNE4X$$J9$aD0s&xq`&IT
zb{XS)AZFhT^Eq>qUW8$b{4P<*+&YU`0Z`&~l{WqpS#Icx7VkZ$!p;Dl=Q?_troLNp
zY$ESm7}M<32LoWEe9+wuh6M@$@rGIi=d4yb4vL71#D-m<GE26efcK@XhOl2{=fmy(
zpN>DkkZ_*+{7mo|EG(uViFS<g*_dnil^2Bd)#~$Uj~dIKB|G~(4q$so^T{ihh`i?s
zeFX#tQ>!m{L*<CnbZW(&r(cfO#``!dkt-2d`;&-}aP(gU2f?tnhgr7h&SkQSS*<sR
z4V2P?jdwAoMG5r!18ZHiGWb$Z->_%@-Z=JO3wc?&$Z(U(8I_}umKuRa2T-84TgNC<
zj~M7PL<VY;P3*8XKGBTsW7vVSZFjX@=IJ{BIvVLo=m?*T-*9na(||64$OH2T0Ph5U
zO?`7qabIt&`>H>hELWO*C%R`@&+DcLIu(V~;=XZ)dH1`^qU>GgY4G*$Kp2v~qPK6V
zYO<2}v5HtP7Qm{Z<HC2g{RuNCrU}1DI$!n;P>x^=9Xm>D9=0447(>0*iM&o;>Ny4g
z5!3WXgX=)r!T>1N!WQvmy>pKn5CpxPjz^7nG^>ji)a1$j9|W-Ct4dU<UOQvX_fXW$
zG|{a<)d-qsG|U?SziHI1nfkr)I`$J|ezyj7H|{{Q+ep*1B@1z-ZMOvChws9>X2Jto
zB31)VK8FNhr2floo_+$C<g>vp@~B8FQL_8A@@cE1foZ#avE)b4u5^K`MVEHM{w>1r
zARmq^qb<g>g%u(foY{@Eur4^OtGc_B$vUpzPmI^kmAjRr^Xy5IA!EVF#5T4YBl6<V
zcaCW?J)Nh&m_9A2N9CjmDC*CMfYl`;9HY~sai}?tj0mUkiu-4Aa6F6n7G+{=<n@i&
z<gR!t`Ar0?rSO{84m2_NVGaw%mO3_(B%@{g0NvK|AffY-b8o^L<=CPd;aE!}93A0V
zyJ#Q{#VaZPu7{UXYZFm;?scE+Vu7+gU(JjPleb{sEsBEqJj?k3j^x=KyqR)M$rybz
zJkm|UI?Uu(zGyO~UAb6WnVX_mA!S7WY{HvfcAx5BE(&!-;^Oec6#RrH2G6r4^Wx#G
zuGuw-8=m`EQ381@Eh96{Tlh<&bigmh%gI>(m%0Fmub^916`qp+->P<CJ$)<U($`$P
z6nU#R^B3w>-FNi}(|!IA>V3Z6@&4Ri55u(C|Lt8pWN=F3%JbE9lu=kih^x&v*v2M8
zW@={sFtjmRiz|;&Mw;51(yk^(u(8pt$LmVoII~aXeUfqcz7^>f|9oh_mwUzFN_fm^
zCq$niZtZ|7@#||fk<jAL<UN@Ue(G<&!~lCmIW^9Tmj;Cf{do(GKKhqytqXOX$1kCI
zRFulPNUmf%l07ZSq%rX|%k7=<1|HLHyg1idGIW(3xci)ywN$(JH2yU)W70A<K4C#@
zrX>fCt_{(y6%0d^c40|vz)xk7aJrdE&tkmHzT%@eETyUEh9Xl%#aS!Yt%Zv}_-T>&
zD688nKe-6)zG|EBO+G}r!4Dw9ZQAN28y76OwwKvbVG@O#3UE09fO(blM$Hp`5Ej7y
z>@^F$emm1%nw}JJascp(i87EX`kO{jvC6RO?q5nvk7S**7ln2#p!5luMq%}o>0dby
zkjEQ)XcovETE-|3mpwoM<il9#`r3bKP8THZRw&7Nob`&9jhl7fAdAuW`iP}R<on8x
z+HSWC*4UUJ&g72Cm6hJ%*3_n)=hl0>2hPLZDHktobI;^jIu2@AR>nRanpX-$(9K*t
zZy~*Ty^(S}{4_-ToQ5gEc}H=GYDQ&DPV<Z3d7t#!zO<&2&mVf~8wCKg;!*tttpKqk
zDV^E06qxFGn=#|x?BOO4dM9h-c{No8n<OQrAq{xZhLPS~{0A9q&>;U~ZAXEhgkid_
z&L*CT+P?<NSZU!#cZO?#bZXPMK%F#(x^q(?T6ZSV^)+5cO(iWUASJWJucxFvp);kZ
z6yH#dF{EJQU!2fPm&cd1sELU9cf@T0lKOS6Oc}m#0OUta-&}=+^p_0%1fmZ!m`Xkn
zXoQO%0!zx-5E%rN5(RyQpH_wzivKmzA|3$7I?z!6MkHnuki?h7wXz?@aRd5jj}L7g
z_r2tn`?fW8bya;#xa$39*L4z<_WD|S+)u3+Jsu;jdi*VIkCzQ?baft!=pJhODvsra
z(Mk4w{M2sf?yoysnQ|`_gtJNZb#(a?Hv8`!WQENa6MV3EXNoU#i;8J_OCwCDRmKc`
zSUXz1x`q>nLkdkPp+%@s%NK2B_s<h@uNjK&Z%DVN{%|U)i*L$;G=fBJg<>)J4N6QU
zl0^Q^I=yFr3SZ}vt^ZCGINbCuK~sTi>MRQ|yI~W}63s9;+Z(J@yl#;Oy_17HbcM~i
z$|{@44jLYUpR4*X(Op%8^47q04Kzxv=D(@w37@=mgpYTeCg6VBQrb@cPGCY{u*@*j
zyWq4%)Bs%MSHoVFm*jv;fAx&uj4@<Wt+QsV6E)o@hI{4(37cZcNv_^xt01?>b^>+-
zK>UIiGf$<)k~>*(9*yUw45@b5IE4Q&2n#NtKW>J6*GirD&u8kI$0Kg564||Xr(5gy
ze@D<+@0BN+ix9*5-t!;hE0Y$bt$OF``WH${LNWk#iIN2Yzy=sv9UenU%WT7EgD9u~
zFnWQ?U?KcXxF{E($p5EmpH`9{r`aqu(3Q4P0^l@|4>h0h_202h`5;aI^HkmH??~wa
z4J_ifzhZ?i;h%s_%!bwS|BjSBeD>*{4>iGiVkQUJgheTY7GA6wz<PsrlT3f-b{q?^
z#v24*WWbAUrT~gHN>xR{V`b3>U}pbs4c&qq?IR5cU&6hNE!Zmf|F69N+3`3!Bz=8-
zINXZ4FlzozK1Wm@Ot1HEn*9bd8??>+*%o<p8W+0C(rt3gU+}$JS`xndy&)Y#lJ05t
zENLX3@vkc^V++X1A-n2*Y1lMt;5`bbW=o#i*@qXihVD!n<&Gk^ld+2cV>@`i>}feW
zpHUIdSf2;gYq^}aS^9Iea`b+|jt3r>@_3!^+)fQ^|5ir}tpq5NeNQ-WYE;2u2};rj
zbXP?R5$|HrZ~5+f-1YSEQ)!Mf0K6K#R|B5j`?<R}ZurQ_MS24`a0xgzKD?5H5$yQA
z6HEV(ppl??0Eu`rz&N@`)7W8lExRR86e26JQI)TG8AW$+65+8cve?a_lHWR(@b#(~
zVMpl6JNTg-J9uJH20{=mcz+D@lRO1TT?_my_2TmKmb<5?sJ3<*4ngd{R5T3vxFTf(
zr|K)dSDx(bb!S_nE<8)FiFXGM{`)h)3F})T(X&#wN6?NGRK9n)*=mxq@ux-R%_Mmt
z4qi&Cq2JFxYuNtB$zi7cz)|iJFr2^rE^Bj}xn}ihcd8!eHYI@GXoDy6WuU-U1$I~G
z(@FyKzxv7j7lG4wnV9!I!NK>FiWA&MD!02z{(CV(ms)J}GbLt&0IC07KWpG;W+Jrn
zYdE#ldb;F>Qz47jX(EYjSe{2mYdD3)1%9|&g%c$Vd~~3~#yrQ%_8*Dl^}=t0gT=cL
zkzwzn_HEXtRV4rWU_3=fU5EC1VqqVTLUWZ}z`GJa5b<#5(fCtbw+Q1WXeUCoGUYkL
zk@2H2c@`%~Jyrvj6P&&wK5b%YT%5`rd@3RD(<V!)F|R?%A%}e%#WCgxXMX9`!4&|>
zJ3NMAyO(A;e;h}+d(Zl6N6)kHsTlSKkhVBu3t#880`%-&jbO#+Ec!@anK^u5b1?Cb
z;0r+~`SL$|nw`!{!Z&8QXgzqucL$BR65svrH^}9*oZn_9{mg%Z;4-6W==)0`hOPZP
z!TWbjzfV|VJXpygnR`Y4tLfyNQ$K0DbtJbZFze5|1HWN3=vEjKKb#J;EsdmeEPel^
z<{R{SBb<su*S01^;G_p{3E;R#98wZ#7m1)COmir#l&-5fN#^>n{mNiv*ke1}y^R--
z?FEP;^e1cU@Ab;2bu>fvP)uSCd3*`IxyQ5I$Ma;CO_6us=^Fto-2%p=ZDKd=Ys!8<
zKUh)IN5mLJDP$Key76rF!P4YU?YQt6RqRUxkFH46#NSc!y#0U3(7*@CCIJyylLOZ$
z8%x;!*AfmapWW_Sbppkmj5f9z0vXgwuIbRK7t*O*0Gie=u$5-&1Cxd|0r}PTr8V^&
zq#GTd*%4dlJT6z+|MI70JApEL_fUW%R9*^05g18Bv1<Pme(6`o+b1H@OoA8YSnMXQ
zwFeCgEj6b7w`dK3F>asInPG9f(TNl_#Sw+TiPj@0{#j`q=HtUvCn?pl;1Fx%ta?0)
zn>ArWhxUtm0h(}B+6uddpM7@KT_}}>g@vr?x^`j|^@2|4zy~o+fXK1&FL5`}Y1CnW
z^&To1o28{%dk|rqMTvcqtF*ykpu){*gL>1&9tr)&Itxu8)W8bQCg!ov5?BwXB5`?3
zY*!b5<QeP-vkQf#eY0=B(70;s{4?5qvz6H)UygA+Ow}vMjOg86ye%%M&YzhIhJ9~9
z4ga=^mxq~`I7qSsWZ7%EDdwuAc)aT-r02&54e<kT{!KTRt}C>Y7t}@*)KGxSANl0j
z^Xf$7t+yVYTcO1E$1o0QHjB_M?C!6CgY!oHKdC2nx^y&Jch&&#smwamn4(TS4*rpg
zF93>t<#nL!V#Q%yi~Rs|Js^JsZlPS4OV6&=5F@bh2++HqDNbqY1vd}UW_r}Dt8BDi
zEiWidIYpgDL?@mP1A9*oUfx;1@0-%h%YezJDai6GZ9FFUD2Ln1l1+5GwkB(93@nGb
z^GfB|i;dAUeB{-61gg(p)VBj@auGNOXd}d^#c;Hm(3-}xq({jTx}1ZNdhO(QYzy*x
zvOf#y{STPVy&7Bre9rG}$sKK|dheEO$Qm7%QJ^8dOLbo0F(*Er1uC;h$hQGI2o=h@
z=)m@P?$NgSVbcbdq4t6HIn-}TR2%9n_Klz&O4%(h%TLhmSZM&Wkoz)2IbjRJ!8(+f
zN71cTKc>c~?7pK&>u6?!U3T&NZob4dHp%A0Wkwr`gwWO{romvds6^397J(*&u;sAy
zr+DK4gFBRA#yCLG-$Rgrh0ITtop1*JL?E1*RFg5Y`mn!7U>;A-h}w>h&j?Q3i$cP|
zmRAf%+h&d}MiMs{qyK~vg@%L62ri+MM&Ufv=ARlV3qSv}Z}@mRUZxhoXK!6wAAugl
z5J`T&`qW^x>{}9YJESK^5#a^jew{_SLkJC0J>=U)tDv#@0iqp}9Vmrp9%&wBOPs(H
zLYvhe*yXn9zUZ>{M<!$RqeSL6r9z|n)p|s-v*PG7P2#i^%dJ2YaGn!#rO>FW|EU_w
z`8s=V@D}t;Nh0JMgp#wZZ7^bDZX#wwutJh8Clu400wyF{JCV8Ng%;{&4U<7s&0{W#
z4nau?q*Y-4&2ef}gC<dI)FT!Y6{l=X;Oj_w16izgu2u-4z$}VKNykOSvk>&{-SDaZ
z>YgCXC{&1_gJFvGl!L_cYpK*Kc}Z^F#_AxRX&Mc~lT*=o&yUznUFu;wYABm;6+xlT
z5D!TYaSz=<0e9gcG9K(UR0M)8atlTU0sfhH^s{}0<cI9|^H1mb%eh>kz_e@58_lCy
zin{ud2maXggc-Rz?kL?d#|agET-B7U5Vt=BGlOe@gy)#kJ{(278_8BZlS^D;Jfkl*
z#P>d}48lxH-D4>(78^KZ+>UX{7sfK(6EY-rtIZtUKx>yW1I^~FJAXysq#`y~k}B4l
zkF?fE7SlF&_B-k`{Sz`NNm~LxsyN<Z!!&7v1p6Vxj&O_@xiSfZ<QA_^qbDG*W(q%R
z8o=sobU}=`d6m-<%ydM#ez%{FJlN;+4oq_If-k$IiGy_y{c5hu9%rN-qwaF=EL}}n
z3hazngB6K15D&@uEk_Sg^p(X$;jmf7%`b0+s2+Lc=W{+K#B<Hp!P@g$At9Cv#*4)Z
z_%g-UZ(yh!rVG-L5gui+w4iVDk`6frg3<Pcm&>@XdlKW(y2l(4PL2_{4eZJ6Nu(WV
zi~5EL68v>nKg3Z{&iM?Ah{F^D!=0Z{yt3#nFD=u#tslci++%ekq{uS}qr#l0965{P
zv<j*&Gs@{_E5x)RZo)1*D!vk9kZPr?PH;TZ-HyCOT+2J_^~D`i<KCbz;#^ttQ$VJP
zN+aV489t7ejuQX14Z<M;g)P@bKQA|e?epQQ4XklB=zEdg@pjiOH-(G~7g8~zM$;w-
zNaNkn+FV-mYG=5mz0rn#EP5HLjs1{>j29kdL@?!&=ww<$z|<Lk&yiDZw^kx<h4U=*
zSpFIoNsN|A&XbuwI!89}1e}6ZaVGmAhTaaD3KKu`%q&`TqE9*2+Hyydg1Sy9iW7(U
z@IslhT<Akd{gZMhjZR#oJ?1OH>^BCnMq{{>c^$e>(e}aUc283hp|<3!ICq*nVhq1t
zcj+MKAr^icHIO|D_$Z1U7>ezG4k?pVM?+f}(FwMRCJV8A(Y0PnhG-+to6k2YZ;@ud
zW2YudU_Ei1?iu}2%sf8<!YNS``0W{DJ_!!t%wn8i#)ws@3TFRmEJ4Ufv`bS%W}GSQ
z*l`d$4@GR;LU`!LaY*xMdWbRb4GXBubn$5Mik9HJlJw8tYA*?`CvZ(h3!CfkvS3A0
z3xS0!)tBF9C=^;#?G%W+!ZW<AE|R_8^oR2q1P8m+fg2`5CrUPda7E>*Ga@hsy)AK!
z2{N6587UNVsE8?dqrte7gC|jvgSlRW^o=rNwm<bEVUCiXD|KGQe)M!dmfGAsae`4^
zh6}QpvwxN}+W|XIyWqjv>PVvUm#Q_SkAKky^O*$3O;4MubMUjjgx;cukT}hT_gQg2
zX56LlODyHbq+3<TLX}qt^p*QPyyE$-9-3nIKiSO0*KwJZ*=UU0uI!QD&D3n>$Z!(q
zL-2L!T!NXyLnDx>tQ$W0OVo3K69bw;UnT{ZDb8ZCBHEh;XOmI#2vfqkqsPr?O@ekN
zAZZi9Jl-CKVGO@Q8+(6GMrjdDLO8h#*3zP_a479vM<;`+iA^(Km9917hD0FV+3IE+
z2aEX{tCQ$ZmKVOxuI9&^p&BmEwv4XjDi9MYzzc*xo<(s=(`CPq4Dym%s^JeNCnj~N
z&=UlbEJ3E5C~DCsqHKw>%0%e8(^_d05Pnq5=#Lk#D#Rcejtd3#D1lr;l9`3Zl0k$>
zH8pg5R?m5rB)Y`0ze^Y4=gd5z6MZti^Fv<Ql|*Z<6ic~dMBAv+;5d6X!?{#3O%@IP
zi5rTH2Q5*<krMS|xuTYkky)hSB`(HLs&h%(sBN_DkFA3ppXxO5@E-E)khuhq5@O1P
zJQMpM4I?5TdhV5<#)k7!nj;)@fm4+84Y!CzbQBl8vHDDtV^nAW8I5>g-b9&Ew~?5u
z2f+uF5ETq`p&3WAXp}*(uNG*=EBDo-;u83M#3hzxwrU#OGS((t9qA==CCs?UpujPt
zE&7q1nSfRPd$pJ-daXCZ(C65uFTZlRaF`nf8e_XE=cJYHNCvxPhokx7V9lhdHXGO<
z0~stzZjH%Km?&>SKD)RX!Ow};$!M6g&oa%pYGwSRpJ67kSUf=E^WtAQi5Xe>Xjvs`
zEue<k5z)m^Y3YU4I-=(GVRwNW6?}LV7nw;oI?E5zB9afnY`W{tdTflVNBOeAY<fmR
zL>jgnAB`4fY!?;_M`gZ_I|U=u$jsrQ$}1;<`*Co_GMjM7);7eu=rw7Vr`;c4i}*#o
zxP#WK&{!}?22LWQXCrY)t%W&@LT!_}>ia07WESe-U(T>N^ri$NM87~1mk9l)MP=#2
zd4GzebO8;MaQG?B$!YtC%ZfS(Wq^pwCh9l;0*}ab=_E(L)1}?06OoS|J;=6pHI@tM
zdF9V7emvR+YZC2+hU^XA_5Kd7ylV>5&Gg<Lm}FomIik_Z7CUdBuuWQxBi1rA6dKwW
z=4)yk<zq2?56iv5B#gHYCZsTWK<_dN4lshocI`~cCtrh+gKWTRl{LT+6SevzwY&nd
zK`Kt>C@WiaSfXf@)wMRpa%sM%oyE&aFtIFpO5Y@rg09OLk%A4uXeV%F*<fdLUu`$m
zUGKItem_^^Xt&K+0plHs?ZrJ@;NG9|Nj?nogB?ICr|d4Rk8xX-p&tBfoU+D&X0BZ(
zCS4i6m6$NhjhXjn059WI(q<_BgCoib9h@ucqYWFK8Fw1tnY(A-hVFI6Ud-(l>ndee
zkJy?C`4g=;f)h<KYe`LWQC{h#=9sRGEi~NJ*f1R|oH*}K*+_^O7uq?wj8xXxRT`he
zP(M!MM5f=teM1z~*8U@1(eJhjT=az$qu^qwYa<Q4M5AqT?K31)(7G{tLBNM#TJo5m
zfj3Xt*`3%Eab}^XVr5!T@}DMaxKAH`HXe_VNcjX0dkRQz*dz62_!6u9oR5iTiAmq!
z9qakPg~bl#$WEUa(F+xYTACFi%PXX1;h;-DE9VO%&(t-E7IkFV)*^_nb~w2XzhG;G
zQ$rRnb00VG#D~neG)UT<BNigNi0y_v^PCKZZEn4t%OZXZZs@_nd`wM)9kISv;TREO
zSB;$uH}^VJrG~38Yzny(KL`8uqa-8{z&1z;ZE)oD0rgyI^{!vz_KJxdPKba@IUeBm
zltkHZc8Q4l8ousBQ||wRSHP#6pTec-{=us$z#K*SG@bt{z5pf%W5Fc&ABo`vdTebq
zSoIHVNdesHqm`>T9C=AX;2$~?>HNo$mE*rXKGA<6k+nd=XaN6zII>cTl9l2{f&UK)
CA6?b}

literal 0
HcmV?d00001


From 6cebba5fd7baa7d8b83b00587833d61d58a7e777 Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Fri, 28 Feb 2020 12:05:55 +0100
Subject: [PATCH 43/74] swagger: update swagger port (#4498)

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>
---
 rpc/swagger/swagger.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rpc/swagger/swagger.yaml b/rpc/swagger/swagger.yaml
index aa4d837ba..40b6e0169 100644
--- a/rpc/swagger/swagger.yaml
+++ b/rpc/swagger/swagger.yaml
@@ -7,7 +7,7 @@ info:
     name: Apache 2.0
     url: https://github.com/tendermint/tendermint/blob/master/LICENSE
 servers:
-  - url: https://stargate.cosmos.network:26657
+  - url: https://rpc.cosmos.network
     description: Cosmos mainnet node to interact with the Tendermint RPC
   - url: http://localhost:26657
     description: Interact with the Tendermint RPC locally on your device

From 6f6843e37aa2e391eb52185ae1d8255d26e31ebb Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 28 Feb 2020 12:21:12 +0100
Subject: [PATCH 44/74] circleci: fix reproducible builds test (#4497)

---
 .circleci/config.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 8fe23501f..97b0653bc 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -343,6 +343,7 @@ jobs:
           name: Build tendermint
           no_output_timeout: 20m
           command: |
+            sudo apt-get update
             sudo apt-get install -y ruby
             bash -x ./scripts/gitian-build.sh all
             for os in darwin linux windows; do

From 6c9e9b2b93bf2e6b07aed9d759a74ac515cca3bf Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Fri, 28 Feb 2020 12:29:36 +0100
Subject: [PATCH 45/74] tool: add Mergify (#4490)

---
 .mergify.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .mergify.yml

diff --git a/.mergify.yml b/.mergify.yml
new file mode 100644
index 000000000..e0491285d
--- /dev/null
+++ b/.mergify.yml
@@ -0,0 +1,10 @@
+pull_request_rules:
+  - name: automatic merge for master when CI passes and 1 reviews and has label S:automerge
+    conditions:
+      - "#approved-reviews-by>=1"
+      - "status-success=ci/circleci - Pull Request"
+      - base=master
+      - label=S:automerge
+    actions:
+      merge:
+        method: squash

From d1f7ef673c0efebb5457eae94ea39e8a3581d270 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 28 Feb 2020 13:56:26 +0100
Subject: [PATCH 46/74] mergify: remove unnecessary conditions (#4501)

---
 .mergify.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.mergify.yml b/.mergify.yml
index e0491285d..04e0bdfe6 100644
--- a/.mergify.yml
+++ b/.mergify.yml
@@ -1,8 +1,6 @@
 pull_request_rules:
-  - name: automatic merge for master when CI passes and 1 reviews and has label S:automerge
+  - name: automerge to master with label S:automerge and branch protection passing
     conditions:
-      - "#approved-reviews-by>=1"
-      - "status-success=ci/circleci - Pull Request"
       - base=master
       - label=S:automerge
     actions:

From 72488db676332368eababa85be593be73e5fd4e4 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 28 Feb 2020 14:21:50 +0100
Subject: [PATCH 47/74] mergify: use strict merges (#4502)

---
 .mergify.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.mergify.yml b/.mergify.yml
index 04e0bdfe6..136bb1148 100644
--- a/.mergify.yml
+++ b/.mergify.yml
@@ -6,3 +6,4 @@ pull_request_rules:
     actions:
       merge:
         method: squash
+        strict: true

From c5fe7334dc6166d9ada9818464f38734190a74ec Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Fri, 28 Feb 2020 14:29:48 +0100
Subject: [PATCH 48/74] test: simplified txsearch cancellation test (#4500)

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
---
 state/txindex/kv/kv_test.go | 54 +++----------------------------------
 1 file changed, 3 insertions(+), 51 deletions(-)

diff --git a/state/txindex/kv/kv_test.go b/state/txindex/kv/kv_test.go
index 8756bc344..fcd2eba13 100644
--- a/state/txindex/kv/kv_test.go
+++ b/state/txindex/kv/kv_test.go
@@ -144,62 +144,14 @@ func TestTxSearchWithCancelation(t *testing.T) {
 		{Type: "account", Attributes: []kv.Pair{{Key: []byte("owner"), Value: []byte("Ivan")}}},
 		{Type: "", Attributes: []kv.Pair{{Key: []byte("not_allowed"), Value: []byte("Vlad")}}},
 	})
-	hash := txResult.Tx.Hash()
-
 	err := indexer.Index(txResult)
 	require.NoError(t, err)
 
-	testCases := []struct {
-		q             string
-		resultsLength int
-	}{
-		// search by hash
-		{fmt.Sprintf("tx.hash = '%X'", hash), 0},
-		// search by exact match (one key)
-		{"account.number = 1", 0},
-		// search by exact match (two keys)
-		{"account.number = 1 AND account.owner = 'Ivan'", 0},
-		// search by exact match (two keys)
-		{"account.number = 1 AND account.owner = 'Vlad'", 0},
-		{"account.owner = 'Vlad' AND account.number = 1", 0},
-		{"account.number >= 1 AND account.owner = 'Vlad'", 0},
-		{"account.owner = 'Vlad' AND account.number >= 1", 0},
-		{"account.number <= 0", 0},
-		{"account.number <= 0 AND account.owner = 'Ivan'", 0},
-		// search using a prefix of the stored value
-		{"account.owner = 'Iv'", 0},
-		// search by range
-		{"account.number >= 1 AND account.number <= 5", 0},
-		// search by range (lower bound)
-		{"account.number >= 1", 0},
-		// search by range (upper bound)
-		{"account.number <= 5", 0},
-		// search using not allowed key
-		{"not_allowed = 'boom'", 0},
-		// search for not existing tx result
-		{"account.number >= 2 AND account.number <= 5", 0},
-		// search using not existing key
-		{"account.date >= TIME 2013-05-03T14:45:00Z", 0},
-		// search using CONTAINS
-		{"account.owner CONTAINS 'an'", 0},
-		// search for non existing value using CONTAINS
-		{"account.owner CONTAINS 'Vlad'", 0},
-		// search using the wrong key (of numeric type) using CONTAINS
-		{"account.number CONTAINS 'Iv'", 0},
-	}
-
 	ctx, cancel := context.WithCancel(context.Background())
-
 	cancel()
-
-	for _, tc := range testCases {
-		tc := tc
-		t.Run(tc.q, func(t *testing.T) {
-			results, err := indexer.Search(ctx, query.MustParse(tc.q))
-			assert.NoError(t, err)
-			assert.Len(t, results, tc.resultsLength)
-		})
-	}
+	results, err := indexer.Search(ctx, query.MustParse("account.number = 1"))
+	assert.NoError(t, err)
+	assert.Empty(t, results)
 }
 
 func TestTxSearchDeprecatedIndexing(t *testing.T) {

From 3f18e22c96853670f189da834e71ca5a80d353e5 Mon Sep 17 00:00:00 2001
From: Michael FIG <michael+github@fig.org>
Date: Sat, 29 Feb 2020 13:22:19 -0800
Subject: [PATCH 49/74] rpc: keep the original subscription "id" field when new
 RPCs come in (#4493)

---
 CHANGELOG_PENDING.md | 2 ++
 rpc/core/events.go   | 6 ++++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index ebc087136..8877d31ec 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -23,6 +23,8 @@ program](https://hackerone.com/tendermint).
 
 ### BUG FIXES:
 
+- [rpc] [\#4493](https://github.com/tendermint/tendermint/pull/4493) Keep the original subscription "id" field when new RPCs come in (@michaelfig)
+
 - [rpc] [\#4437](https://github.com/tendermint/tendermint/pull/4437) Fix tx_search pagination with ordered results (@erikgrinaker)
 
 - [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
diff --git a/rpc/core/events.go b/rpc/core/events.go
index 2a4d042fc..165aa6e54 100644
--- a/rpc/core/events.go
+++ b/rpc/core/events.go
@@ -38,6 +38,8 @@ func Subscribe(ctx *rpctypes.Context, query string) (*ctypes.ResultSubscribe, er
 		return nil, err
 	}
 
+	// Capture the current ID, since it can change in the future.
+	subscriptionID := ctx.JSONReq.ID
 	go func() {
 		for {
 			select {
@@ -46,7 +48,7 @@ func Subscribe(ctx *rpctypes.Context, query string) (*ctypes.ResultSubscribe, er
 				ctx.WSConn.TryWriteRPCResponse(
 					rpctypes.NewRPCSuccessResponse(
 						ctx.WSConn.Codec(),
-						ctx.JSONReq.ID,
+						subscriptionID,
 						resultEvent,
 					))
 			case <-sub.Cancelled():
@@ -59,7 +61,7 @@ func Subscribe(ctx *rpctypes.Context, query string) (*ctypes.ResultSubscribe, er
 					}
 					ctx.WSConn.TryWriteRPCResponse(
 						rpctypes.RPCServerError(
-							ctx.JSONReq.ID,
+							subscriptionID,
 							fmt.Errorf("subscription was cancelled (reason: %s)", reason),
 						))
 				}

From c33576e72ae876291cb73570b4498d807596d1e2 Mon Sep 17 00:00:00 2001
From: Erik Grinaker <erik@grinaker.org>
Date: Sun, 1 Mar 2020 21:03:28 +0100
Subject: [PATCH 50/74] example/kvstore: return ABCI query height (#4509)

* example/kvstore: return ABCI query height

* CHANGELOG: added PR link

* Updated tests
---
 CHANGELOG_PENDING.md                 |  5 +++--
 abci/example/kvstore/kvstore.go      |  2 ++
 abci/example/kvstore/kvstore_test.go | 20 ++++++++++++++++++++
 abci/tests/test_cli/ex1.abci.out     |  4 ++--
 docs/app-dev/abci-cli.md             |  4 ++--
 5 files changed, 29 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index 8877d31ec..f85b63307 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -4,8 +4,7 @@
 
 Special thanks to external contributors on this release:
 
-Friendly reminder, we have a [bug bounty
-program](https://hackerone.com/tendermint).
+Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermint).
 
 ### BREAKING CHANGES:
 
@@ -21,6 +20,8 @@ program](https://hackerone.com/tendermint).
 
 - [types] [\#4417](https://github.com/tendermint/tendermint/issues/4417) VerifyCommitX() functions should return as soon as +2/3 threashold is reached.
 
+- [examples/kvstore] [\#4509](https://github.com/tendermint/tendermint/pull/4509) ABCI query now returns the proper height (@erikgrinaker)
+
 ### BUG FIXES:
 
 - [rpc] [\#4493](https://github.com/tendermint/tendermint/pull/4493) Keep the original subscription "id" field when new RPCs come in (@michaelfig)
diff --git a/abci/example/kvstore/kvstore.go b/abci/example/kvstore/kvstore.go
index f856519f3..4e7449938 100644
--- a/abci/example/kvstore/kvstore.go
+++ b/abci/example/kvstore/kvstore.go
@@ -136,6 +136,7 @@ func (app *Application) Query(reqQuery types.RequestQuery) (resQuery types.Respo
 		resQuery.Index = -1 // TODO make Proof return index
 		resQuery.Key = reqQuery.Data
 		resQuery.Value = value
+		resQuery.Height = app.state.Height
 
 		return
 	}
@@ -151,6 +152,7 @@ func (app *Application) Query(reqQuery types.RequestQuery) (resQuery types.Respo
 		resQuery.Log = "exists"
 	}
 	resQuery.Value = value
+	resQuery.Height = app.state.Height
 
 	return resQuery
 }
diff --git a/abci/example/kvstore/kvstore_test.go b/abci/example/kvstore/kvstore_test.go
index e8dee67d9..4d8c829ad 100644
--- a/abci/example/kvstore/kvstore_test.go
+++ b/abci/example/kvstore/kvstore_test.go
@@ -30,6 +30,11 @@ func testKVStore(t *testing.T, app types.Application, tx []byte, key, value stri
 	// repeating tx doesn't raise error
 	ar = app.DeliverTx(req)
 	require.False(t, ar.IsErr(), ar)
+	// commit
+	app.Commit()
+
+	info := app.Info(types.RequestInfo{})
+	require.NotZero(t, info.LastBlockHeight)
 
 	// make sure query is fine
 	resQuery := app.Query(types.RequestQuery{
@@ -37,7 +42,9 @@ func testKVStore(t *testing.T, app types.Application, tx []byte, key, value stri
 		Data: []byte(key),
 	})
 	require.Equal(t, code.CodeTypeOK, resQuery.Code)
+	require.Equal(t, key, string(resQuery.Key))
 	require.Equal(t, value, string(resQuery.Value))
+	require.EqualValues(t, info.LastBlockHeight, resQuery.Height)
 
 	// make sure proof is fine
 	resQuery = app.Query(types.RequestQuery{
@@ -46,7 +53,9 @@ func testKVStore(t *testing.T, app types.Application, tx []byte, key, value stri
 		Prove: true,
 	})
 	require.EqualValues(t, code.CodeTypeOK, resQuery.Code)
+	require.Equal(t, key, string(resQuery.Key))
 	require.Equal(t, value, string(resQuery.Value))
+	require.EqualValues(t, info.LastBlockHeight, resQuery.Height)
 }
 
 func TestKVStoreKV(t *testing.T) {
@@ -300,6 +309,13 @@ func testClient(t *testing.T, app abcicli.Client, tx []byte, key, value string)
 	ar, err = app.DeliverTxSync(types.RequestDeliverTx{Tx: tx})
 	require.NoError(t, err)
 	require.False(t, ar.IsErr(), ar)
+	// commit
+	_, err = app.CommitSync()
+	require.NoError(t, err)
+
+	info, err := app.InfoSync(types.RequestInfo{})
+	require.NoError(t, err)
+	require.NotZero(t, info.LastBlockHeight)
 
 	// make sure query is fine
 	resQuery, err := app.QuerySync(types.RequestQuery{
@@ -308,7 +324,9 @@ func testClient(t *testing.T, app abcicli.Client, tx []byte, key, value string)
 	})
 	require.Nil(t, err)
 	require.Equal(t, code.CodeTypeOK, resQuery.Code)
+	require.Equal(t, key, string(resQuery.Key))
 	require.Equal(t, value, string(resQuery.Value))
+	require.EqualValues(t, info.LastBlockHeight, resQuery.Height)
 
 	// make sure proof is fine
 	resQuery, err = app.QuerySync(types.RequestQuery{
@@ -318,5 +336,7 @@ func testClient(t *testing.T, app abcicli.Client, tx []byte, key, value string)
 	})
 	require.Nil(t, err)
 	require.Equal(t, code.CodeTypeOK, resQuery.Code)
+	require.Equal(t, key, string(resQuery.Key))
 	require.Equal(t, value, string(resQuery.Value))
+	require.EqualValues(t, info.LastBlockHeight, resQuery.Height)
 }
diff --git a/abci/tests/test_cli/ex1.abci.out b/abci/tests/test_cli/ex1.abci.out
index 0cdd43df6..9e702b5ce 100644
--- a/abci/tests/test_cli/ex1.abci.out
+++ b/abci/tests/test_cli/ex1.abci.out
@@ -27,7 +27,7 @@
 > query "abc"
 -> code: OK
 -> log: exists
--> height: 0
+-> height: 2
 -> key: abc
 -> key.hex: 616263
 -> value: abc
@@ -43,7 +43,7 @@
 > query "def"
 -> code: OK
 -> log: exists
--> height: 0
+-> height: 3
 -> key: def
 -> key.hex: 646566
 -> value: xyz
diff --git a/docs/app-dev/abci-cli.md b/docs/app-dev/abci-cli.md
index a72dc220f..e747e6d48 100644
--- a/docs/app-dev/abci-cli.md
+++ b/docs/app-dev/abci-cli.md
@@ -192,7 +192,7 @@ Try running these commands:
 > query "abc"
 -> code: OK
 -> log: exists
--> height: 0
+-> height: 2
 -> value: abc
 -> value.hex: 616263
 
@@ -206,7 +206,7 @@ Try running these commands:
 > query "def"
 -> code: OK
 -> log: exists
--> height: 0
+-> height: 3
 -> value: xyz
 -> value.hex: 78797A
 ```

From 9bf8f41ac93a64aef4fa0ff32456773bd86b4624 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Mon, 2 Mar 2020 10:51:36 +0400
Subject: [PATCH 51/74] lite2: fix tendermint lite sub command (#4505)

* lite2: fix tendermint lite sub command

- better logging
- chainID as an argument
- more examples

* one more log msg

* lite2: fire update right away after start

* turn off auto update in verification tests

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
---
 cmd/tendermint/commands/lite.go               | 110 +++++++++++++-----
 docs/tendermint-core/light-client-protocol.md |   6 +-
 lite2/client.go                               |  11 +-
 lite2/client_test.go                          |   2 +
 4 files changed, 94 insertions(+), 35 deletions(-)

diff --git a/cmd/tendermint/commands/lite.go b/cmd/tendermint/commands/lite.go
index 8477b46ed..2d1798920 100644
--- a/cmd/tendermint/commands/lite.go
+++ b/cmd/tendermint/commands/lite.go
@@ -2,6 +2,7 @@ package commands
 
 import (
 	"net/http"
+	"os"
 	"strings"
 	"time"
 
@@ -11,6 +12,7 @@ import (
 	amino "github.com/tendermint/go-amino"
 	dbm "github.com/tendermint/tm-db"
 
+	"github.com/tendermint/tendermint/libs/log"
 	tmos "github.com/tendermint/tendermint/libs/os"
 	lite "github.com/tendermint/tendermint/lite2"
 	"github.com/tendermint/tendermint/lite2/provider"
@@ -24,15 +26,29 @@ import (
 
 // LiteCmd represents the base command when called without any subcommands
 var LiteCmd = &cobra.Command{
-	Use:   "lite",
+	Use:   "lite [chainID]",
 	Short: "Run a light client proxy server, verifying Tendermint rpc",
 	Long: `Run a light client proxy server, verifying Tendermint rpc.
 
 All calls that can be tracked back to a block header by a proof
 will be verified before passing them back to the caller. Other than
-that, it will present the same interface as a full Tendermint node.`,
-	RunE:         runProxy,
-	SilenceUsage: true,
+that, it will present the same interface as a full Tendermint node.
+
+Example:
+
+start a fresh instance:
+
+lite cosmoshub-3 -p 52.57.29.196:26657 -w public-seed-node.cosmoshub.certus.one:26657
+	--height 962118 --hash 28B97BE9F6DE51AC69F70E0B7BFD7E5C9CD1A595B7DC31AFF27C50D4948020CD
+
+continue from latest state:
+
+lite cosmoshub-3 -p 52.57.29.196:26657 -w public-seed-node.cosmoshub.certus.one:26657
+`,
+	RunE: runProxy,
+	Args: cobra.ExactArgs(1),
+	Example: `lite cosmoshub-3 -p 52.57.29.196:26657 -w public-seed-node.cosmoshub.certus.one:26657
+	--height 962118 --hash 28B97BE9F6DE51AC69F70E0B7BFD7E5C9CD1A595B7DC31AFF27C50D4948020CD`,
 }
 
 var (
@@ -46,15 +62,16 @@ var (
 	trustingPeriod time.Duration
 	trustedHeight  int64
 	trustedHash    []byte
+
+	verbose bool
 )
 
 func init() {
 	LiteCmd.Flags().StringVar(&listenAddr, "laddr", "tcp://localhost:8888",
 		"Serve the proxy on the given address")
-	LiteCmd.Flags().StringVar(&chainID, "chain-id", "tendermint", "Specify the Tendermint chain ID")
-	LiteCmd.Flags().StringVar(&primaryAddr, "primary", "tcp://localhost:26657",
+	LiteCmd.Flags().StringVarP(&primaryAddr, "primary", "p", "",
 		"Connect to a Tendermint node at this address")
-	LiteCmd.Flags().StringVar(&witnessesAddrs, "witnesses", "",
+	LiteCmd.Flags().StringVarP(&witnessesAddrs, "witnesses", "w", "",
 		"Tendermint nodes to cross-check the primary node, comma-separated")
 	LiteCmd.Flags().StringVar(&home, "home-dir", ".tendermint-lite", "Specify the home directory")
 	LiteCmd.Flags().IntVar(
@@ -64,21 +81,32 @@ func init() {
 		"Maximum number of simultaneous connections (including WebSocket).")
 	LiteCmd.Flags().DurationVar(&trustingPeriod, "trusting-period", 168*time.Hour,
 		"Trusting period. Should be significantly less than the unbonding period")
-	LiteCmd.Flags().Int64Var(&trustedHeight, "trusted-height", 1, "Trusted header's height")
-	LiteCmd.Flags().BytesHexVar(&trustedHash, "trusted-hash", []byte{}, "Trusted header's hash")
+	LiteCmd.Flags().Int64Var(&trustedHeight, "height", 1, "Trusted header's height")
+	LiteCmd.Flags().BytesHexVar(&trustedHash, "hash", []byte{}, "Trusted header's hash")
+	LiteCmd.Flags().BoolVar(&verbose, "verbose", false, "Verbose output")
 }
 
 func runProxy(cmd *cobra.Command, args []string) error {
-	liteLogger := logger.With("module", "lite")
+	// Initialise logger.
+	logger := log.NewTMLogger(log.NewSyncWriter(os.Stdout))
+	var option log.Option
+	if verbose {
+		option, _ = log.AllowLevel("debug")
+	} else {
+		option, _ = log.AllowLevel("info")
+	}
+	logger = log.NewFilter(logger, option)
 
-	logger.Info("Connecting to the primary node...")
-	rpcClient, err := rpcclient.NewHTTP(chainID, primaryAddr)
+	chainID = args[0]
+
+	logger.Info("Creating HTTP client for primary...", "addr", primaryAddr)
+	rpcClient, err := rpcclient.NewHTTP(primaryAddr, "/websocket")
 	if err != nil {
 		return errors.Wrapf(err, "http client for %s", primaryAddr)
 	}
 	primary := httpp.NewWithClient(chainID, rpcClient)
 
-	logger.Info("Connecting to the witness nodes...")
+	// TODO: use NewNetClient once we have it
 	addrs := strings.Split(witnessesAddrs, ",")
 	witnesses := make([]provider.Provider, len(addrs))
 	for i, addr := range addrs {
@@ -89,40 +117,60 @@ func runProxy(cmd *cobra.Command, args []string) error {
 		witnesses[i] = p
 	}
 
-	logger.Info("Creating client...")
+	logger.Info("Creating client...", "chainID", chainID)
 	db, err := dbm.NewGoLevelDB("lite-client-db", home)
 	if err != nil {
 		return err
 	}
-	c, err := lite.NewClient(
-		chainID,
-		lite.TrustOptions{
-			Period: trustingPeriod,
-			Height: trustedHeight,
-			Hash:   trustedHash,
-		},
-		primary,
-		witnesses,
-		dbs.New(db, chainID),
-		lite.Logger(liteLogger),
-	)
-	if err != nil {
-		return err
+
+	var c *lite.Client
+	if trustedHeight > 0 && len(trustedHash) > 0 { // fresh installation
+		c, err = lite.NewClient(
+			chainID,
+			lite.TrustOptions{
+				Period: trustingPeriod,
+				Height: trustedHeight,
+				Hash:   trustedHash,
+			},
+			primary,
+			witnesses,
+			dbs.New(db, chainID),
+			lite.Logger(logger),
+		)
+	} else { // continue from latest state
+		c, err = lite.NewClientFromTrustedStore(
+			chainID,
+			trustingPeriod,
+			primary,
+			witnesses,
+			dbs.New(db, chainID),
+			lite.Logger(logger),
+		)
 	}
 
+	if err != nil {
+		return errors.Wrap(err, "failed to create")
+	}
+	logger.Info("Starting client...")
+	err = c.Start()
+	if err != nil {
+		return errors.Wrap(err, "failed to start")
+	}
+	defer c.Stop()
+
 	p := lproxy.Proxy{
 		Addr:   listenAddr,
 		Config: &rpcserver.Config{MaxOpenConnections: maxOpenConnections},
 		Codec:  amino.NewCodec(),
 		Client: lrpc.NewClient(rpcClient, c),
-		Logger: liteLogger,
+		Logger: logger,
 	}
 	// Stop upon receiving SIGTERM or CTRL-C.
-	tmos.TrapSignal(liteLogger, func() {
+	tmos.TrapSignal(logger, func() {
 		p.Listener.Close()
 	})
 
-	logger.Info("Starting proxy...")
+	logger.Info("Starting proxy...", "laddr", listenAddr)
 	if err := p.ListenAndServe(); err != http.ErrServerClosed {
 		// Error starting or closing listener:
 		logger.Error("proxy ListenAndServe", "err", err)
diff --git a/docs/tendermint-core/light-client-protocol.md b/docs/tendermint-core/light-client-protocol.md
index 4537412c1..41b7a0e07 100644
--- a/docs/tendermint-core/light-client-protocol.md
+++ b/docs/tendermint-core/light-client-protocol.md
@@ -55,9 +55,9 @@ passing them back to the caller. Other than that, it will present the same
 interface as a full Tendermint node.
 
 ```sh
-$ tendermint lite --chain-id=supernova --primary=tcp://233.123.0.140:26657 \
-  --witnesses=tcp://179.63.29.15:26657,tcp://144.165.223.135:26657 \
-  --trusted-height=10 --trusted-hash=37E9A6DD3FA25E83B22C18835401E8E56088D0D7ABC6FD99FCDC920DD76C1C57
+$ tendermint lite supernova -p tcp://233.123.0.140:26657 \
+  -w tcp://179.63.29.15:26657,tcp://144.165.223.135:26657 \
+  --height=10 --hash=37E9A6DD3FA25E83B22C18835401E8E56088D0D7ABC6FD99FCDC920DD76C1C57
 ```
 
 For additional options, run `tendermint lite --help`.
diff --git a/lite2/client.go b/lite2/client.go
index b70123099..5272f1b3a 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -166,12 +166,14 @@ func NewClient(
 	}
 
 	if c.latestTrustedHeader != nil {
+		c.logger.Info("Checking trusted header using options")
 		if err := c.checkTrustedHeaderUsingOptions(trustOptions); err != nil {
 			return nil, err
 		}
 	}
 
 	if c.latestTrustedHeader == nil || c.latestTrustedHeader.Height < trustOptions.Height {
+		c.logger.Info("Downloading trusted header using options")
 		if err := c.initializeWithTrustOptions(trustOptions); err != nil {
 			return nil, err
 		}
@@ -258,7 +260,7 @@ func (c *Client) restoreTrustedHeaderAndVals() error {
 		c.latestTrustedHeader = trustedHeader
 		c.latestTrustedVals = trustedVals
 
-		c.logger.Debug("Restored trusted header and vals", "height", lastHeight)
+		c.logger.Info("Restored trusted header and vals", "height", lastHeight)
 	}
 
 	return nil
@@ -930,6 +932,11 @@ func (c *Client) removeWitness(idx int) {
 func (c *Client) autoUpdateRoutine() {
 	defer c.routinesWaitGroup.Done()
 
+	err := c.Update(time.Now())
+	if err != nil {
+		c.logger.Error("Error during auto update", "err", err)
+	}
+
 	ticker := time.NewTicker(c.updatePeriod)
 	defer ticker.Stop()
 
@@ -1013,6 +1020,7 @@ func (c *Client) signedHeaderFromPrimary(height int64) (*types.SignedHeader, err
 		if err == provider.ErrSignedHeaderNotFound {
 			return nil, err
 		}
+		c.logger.Error("Failed to get signed header from primary", "attempt", attempt, "err", err)
 		time.Sleep(backoffTimeout(attempt))
 	}
 
@@ -1036,6 +1044,7 @@ func (c *Client) validatorSetFromPrimary(height int64) (*types.ValidatorSet, err
 		if err == nil || err == provider.ErrValidatorSetNotFound {
 			return vals, err
 		}
+		c.logger.Error("Failed to get validator set from primary", "attempt", attempt, "err", err)
 		time.Sleep(backoffTimeout(attempt))
 	}
 
diff --git a/lite2/client_test.go b/lite2/client_test.go
index b1079390a..383bd4c60 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -154,6 +154,7 @@ func TestClient_SequentialVerification(t *testing.T) {
 				)},
 				dbs.New(dbm.NewMemDB(), chainID),
 				SequentialVerification(),
+				UpdatePeriod(0),
 			)
 
 			if tc.initErr {
@@ -280,6 +281,7 @@ func TestClient_SkippingVerification(t *testing.T) {
 				)},
 				dbs.New(dbm.NewMemDB(), chainID),
 				SkippingVerification(DefaultTrustLevel),
+				UpdatePeriod(0),
 			)
 			if tc.initErr {
 				require.Error(t, err)

From 67224fd174eba42cb3efedea9474cb96bdbeab77 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Mon, 2 Mar 2020 17:09:55 +0400
Subject: [PATCH 52/74] docs: `tendermint node --help` dumps all supported
 flags (#4511)

Closes #4211
---
 docs/tendermint-core/using-tendermint.md | 33 ++++++++++++------------
 1 file changed, 17 insertions(+), 16 deletions(-)

diff --git a/docs/tendermint-core/using-tendermint.md b/docs/tendermint-core/using-tendermint.md
index 2c6370e84..b1098f54f 100644
--- a/docs/tendermint-core/using-tendermint.md
+++ b/docs/tendermint-core/using-tendermint.md
@@ -104,36 +104,37 @@ definition](https://github.com/tendermint/tendermint/blob/master/types/genesis.g
 
 ## Run
 
-To run a Tendermint node, use
+To run a Tendermint node, use:
 
-```
+```sh
 tendermint node
 ```
 
 By default, Tendermint will try to connect to an ABCI application on
-[127.0.0.1:26658](127.0.0.1:26658). If you have the `kvstore` ABCI app
-installed, run it in another window. If you don't, kill Tendermint and
-run an in-process version of the `kvstore` app:
+`127.0.0.1:26658`. If you have the `kvstore` ABCI app installed, run it in
+another window. If you don't, kill Tendermint and run an in-process version of
+the `kvstore` app:
 
-```
+```sh
 tendermint node --proxy_app=kvstore
 ```
 
-After a few seconds you should see blocks start streaming in. Note that
-blocks are produced regularly, even if there are no transactions. See
-_No Empty Blocks_, below, to modify this setting.
+After a few seconds, you should see blocks start streaming in. Note that blocks
+are produced regularly, even if there are no transactions. See _No Empty
+Blocks_, below, to modify this setting.
 
-Tendermint supports in-process versions of the `counter`, `kvstore` and
-`noop` apps that ship as examples with `abci-cli`. It's easy to compile
-your own app in-process with Tendermint if it's written in Go. If your
-app is not written in Go, simply run it in another process, and use the
-`--proxy_app` flag to specify the address of the socket it is listening
-on, for instance:
+Tendermint supports in-process versions of the `counter`, `kvstore`, and `noop`
+apps that ship as examples with `abci-cli`. It's easy to compile your app
+in-process with Tendermint if it's written in Go. If your app is not written in
+Go, run it in another process, and use the `--proxy_app` flag to specify the
+address of the socket it is listening on, for instance:
 
-```
+```sh
 tendermint node --proxy_app=/var/run/abci.sock
 ```
 
+You can find out what flags are supported by running `tendermint node --help`.
+
 ## Transactions
 
 To send a transaction, use `curl` to make requests to the Tendermint RPC

From 51e1b4e42acbb410265efd409d29ffecb4049e93 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Mon, 2 Mar 2020 17:55:50 +0400
Subject: [PATCH 53/74] rpc: remove BlockStoreRPC in favor of BlockStore
 (#4510)

* rpc: use BlockStoreRPC instead of BlockStore

BlockStoreRPC is a limited version of BlockStore interface, which does
not include SaveBlock method.

Closes #4159

* remove BlockStoreRPC interface in favor of single BlockStore

interface

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
---
 state/services.go | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/state/services.go b/state/services.go
index bf9942811..d83a410c9 100644
--- a/state/services.go
+++ b/state/services.go
@@ -12,12 +12,15 @@ import (
 //------------------------------------------------------
 // blockstore
 
-// BlockStoreRPC is the block store interface used by the RPC.
-type BlockStoreRPC interface {
+// BlockStore defines the interface used by the ConsensusState.
+type BlockStore interface {
 	Height() int64
 
 	LoadBlockMeta(height int64) *types.BlockMeta
 	LoadBlock(height int64) *types.Block
+
+	SaveBlock(block *types.Block, blockParts *types.PartSet, seenCommit *types.Commit)
+
 	LoadBlockByHash(hash []byte) *types.Block
 	LoadBlockPart(height int64, index int) *types.Part
 
@@ -25,13 +28,7 @@ type BlockStoreRPC interface {
 	LoadSeenCommit(height int64) *types.Commit
 }
 
-// BlockStore defines the BlockStore interface used by the ConsensusState.
-type BlockStore interface {
-	BlockStoreRPC
-	SaveBlock(block *types.Block, blockParts *types.PartSet, seenCommit *types.Commit)
-}
-
-//-----------------------------------------------------------------------------------------------------
+//-----------------------------------------------------------------------------
 // evidence pool
 
 // EvidencePool defines the EvidencePool interface used by the ConsensusState.

From 3b2e1f22e4484092be26aa9a3911a710c270c981 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Mon, 2 Mar 2020 19:59:38 +0400
Subject: [PATCH 54/74] cmd: show useful error when tm not initialised (#4512)

Closes #4303

Before:

```
TMHOME="/Users/daniel/go/src/github.com/tendermint/thome" tendermint node --proxy_app=unix:///Users/daniel/go/src/github.com/kvstore/example.sock

ERROR: 1 error(s) decoding:

* error decoding 'consensus.create_empty_blocks_interval': time: invalid duration
```

After:

```
$ TMHOME=/tmp ./build/tendermint node --proxy_app=kvstore
ERROR: failed to create node: Couldn't read GenesisDoc file: open /tmp/config/genesis.json: no such file or directory
```
---
 cmd/tendermint/commands/run_node.go | 23 ++++++++++++-----------
 1 file changed, 12 insertions(+), 11 deletions(-)

diff --git a/cmd/tendermint/commands/run_node.go b/cmd/tendermint/commands/run_node.go
index 6d9f575d0..628a0d173 100644
--- a/cmd/tendermint/commands/run_node.go
+++ b/cmd/tendermint/commands/run_node.go
@@ -78,7 +78,7 @@ func AddNodeFlags(cmd *cobra.Command) {
 		"Set this to false to only produce blocks when there are txs or when the AppHash changes")
 	cmd.Flags().String(
 		"consensus.create_empty_blocks_interval",
-		string(config.Consensus.CreateEmptyBlocksInterval),
+		config.Consensus.CreateEmptyBlocksInterval.String(),
 		"The possible interval between empty blocks")
 
 	// db flags
@@ -99,11 +99,21 @@ func NewRunNodeCmd(nodeProvider nm.Provider) *cobra.Command {
 		Use:   "node",
 		Short: "Run the tendermint node",
 		RunE: func(cmd *cobra.Command, args []string) error {
+			if err := checkGenesisHash(config); err != nil {
+				return err
+			}
+
 			n, err := nodeProvider(config, logger)
 			if err != nil {
-				return fmt.Errorf("failed to create node: %v", err)
+				return fmt.Errorf("failed to create node: %w", err)
 			}
 
+			if err := n.Start(); err != nil {
+				return fmt.Errorf("failed to start node: %w", err)
+			}
+
+			logger.Info("Started node", "nodeInfo", n.Switch().NodeInfo())
+
 			// Stop upon receiving SIGTERM or CTRL-C.
 			tmos.TrapSignal(logger, func() {
 				if n.IsRunning() {
@@ -111,15 +121,6 @@ func NewRunNodeCmd(nodeProvider nm.Provider) *cobra.Command {
 				}
 			})
 
-			if err := checkGenesisHash(config); err != nil {
-				return err
-			}
-
-			if err := n.Start(); err != nil {
-				return fmt.Errorf("failed to start node: %v", err)
-			}
-			logger.Info("Started node", "nodeInfo", n.Switch().NodeInfo())
-
 			// Run forever.
 			select {}
 		},

From a60d032b07fd6f5ee5687b0f7d206fb4ab16228d Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Tue, 3 Mar 2020 12:37:29 +0400
Subject: [PATCH 55/74] docs: write about debug kill and dump (#4516)

* docs: write about debug kill and dump

Closes #4325

* wrap file tree in code blocks
---
 docs/tendermint-core/running-in-production.md | 62 +++++++++----------
 docs/tools/README.md                          | 13 ++--
 docs/tools/debugging.md                       | 57 +++++++++++++++++
 3 files changed, 94 insertions(+), 38 deletions(-)
 create mode 100644 docs/tools/debugging.md

diff --git a/docs/tendermint-core/running-in-production.md b/docs/tendermint-core/running-in-production.md
index 7a436ec95..02a0eae58 100644
--- a/docs/tendermint-core/running-in-production.md
+++ b/docs/tendermint-core/running-in-production.md
@@ -111,54 +111,44 @@ to achieve the same things.
 
 ## Debugging Tendermint
 
-If you ever have to debug Tendermint, the first thing you should
-probably do is to check out the logs. See [How to read
-logs](./how-to-read-logs.md), where we explain what certain log
-statements mean.
+If you ever have to debug Tendermint, the first thing you should probably do is
+check out the logs. See [How to read logs](./how-to-read-logs.md), where we
+explain what certain log statements mean.
 
-If, after skimming through the logs, things are not clear still, the
-next thing to try is query the /status RPC endpoint. It provides the
-necessary info: whenever the node is syncing or not, what height it is
-on, etc.
+If, after skimming through the logs, things are not clear still, the next thing
+to try is querying the `/status` RPC endpoint. It provides the necessary info:
+whenever the node is syncing or not, what height it is on, etc.
 
-```
+```sh
 curl http(s)://{ip}:{rpcPort}/status
 ```
 
-`dump_consensus_state` will give you a detailed overview of the
-consensus state (proposer, lastest validators, peers states). From it,
-you should be able to figure out why, for example, the network had
-halted.
+`/dump_consensus_state` will give you a detailed overview of the consensus
+state (proposer, latest validators, peers states). From it, you should be able
+to figure out why, for example, the network had halted.
 
-```
+```sh
 curl http(s)://{ip}:{rpcPort}/dump_consensus_state
 ```
 
-There is a reduced version of this endpoint - `consensus_state`, which
-returns just the votes seen at the current height.
+There is a reduced version of this endpoint - `/consensus_state`, which returns
+just the votes seen at the current height.
 
-- [Github Issues](https://github.com/tendermint/tendermint/issues)
-- [StackOverflow
-  questions](https://stackoverflow.com/questions/tagged/tendermint)
+If, after consulting with the logs and above endpoints, you still have no idea
+what's happening, consider using `tendermint debug kill` sub-command. This
+command will scrap all the available info and kill the process. See
+[Debugging](../tools/debugging.md) for the exact format.
 
-### Debug Utility
-
-Tendermint also ships with a `debug` sub-command that allows you to kill a live
-Tendermint process while collecting useful information in a compressed archive
-such as the configuration used, consensus state, network state, the node' status,
-the WAL, and even the stacktrace of the process before exit. These files can be
-useful to examine when debugging a faulty Tendermint process.
-
-In addition, the `debug` sub-command also allows you to dump debugging data into
-compressed archives at a regular interval. These archives contain the goroutine
-and heap profiles in addition to the consensus state, network info, node status,
-and even the WAL.
+You can inspect the resulting archive yourself or create an issue on
+[Github](https://github.com/tendermint/tendermint). Before opening an issue
+however, be sure to check if there's [no existing
+issue](https://github.com/tendermint/tendermint/issues) already.
 
 ## Monitoring Tendermint
 
-Each Tendermint instance has a standard `/health` RPC endpoint, which
-responds with 200 (OK) if everything is fine and 500 (or no response) -
-if something is wrong.
+Each Tendermint instance has a standard `/health` RPC endpoint, which responds
+with 200 (OK) if everything is fine and 500 (or no response) - if something is
+wrong.
 
 Other useful endpoints include mentioned earlier `/status`, `/net_info` and
 `/validators`.
@@ -166,6 +156,10 @@ Other useful endpoints include mentioned earlier `/status`, `/net_info` and
 Tendermint also can report and serve Prometheus metrics. See
 [Metrics](./metrics.md).
 
+`tendermint debug dump` sub-command can be used to periodically dump useful
+information into an archive. See [Debugging](../tools/debugging.md) for more
+information.
+
 ## What happens when my app dies?
 
 You are supposed to run Tendermint under a [process
diff --git a/docs/tools/README.md b/docs/tools/README.md
index c326cde5b..bf9dd1f97 100644
--- a/docs/tools/README.md
+++ b/docs/tools/README.md
@@ -9,16 +9,21 @@ parent:
 
 Tendermint has some tools that are associated with it for:
 
+- [Debugging](./debugging.md)
 - [Benchmarking](#benchmarking)
-- [Validation of remote signers](./remote-signer-validation.md)
 - [Testnets](#testnets)
-
+- [Validation of remote signers](./remote-signer-validation.md)
 
 ## Benchmarking
 
-Benchmarking is done with tm-load-test, for information on how to use the tool please visit the docs: https://github.com/interchainio/tm-load-test
+- https://github.com/interchainio/tm-load-test
 
+`tm-load-test` is a distributed load testing tool (and framework) for load
+testing Tendermint networks.
 
 ## Testnets
 
-The testnets tool is aimed at testing Tendermint with different configurations. For more information please visit: https://github.com/interchainio/testnets.
+- https://github.com/interchainio/testnets
+
+This repository contains various different configurations of test networks for,
+and relating to, Tendermint.
diff --git a/docs/tools/debugging.md b/docs/tools/debugging.md
new file mode 100644
index 000000000..50961dd3b
--- /dev/null
+++ b/docs/tools/debugging.md
@@ -0,0 +1,57 @@
+# Debugging
+
+## tendermint debug kill
+
+Tendermint comes with a `debug` sub-command that allows you to kill a live
+Tendermint process while collecting useful information in a compressed archive.
+The information includes the configuration used, consensus state, network
+state, the node' status, the WAL, and even the stack trace of the process
+before exit. These files can be useful to examine when debugging a faulty
+Tendermint process.
+
+```sh
+tendermint debug kill <pid> </path/to/out.zip> --home=</path/to/app.d>
+```
+
+will write debug info into a compressed archive. The archive will contain the
+following:
+
+```
+├── config.toml
+├── consensus_state.json
+├── net_info.json
+├── stacktrace.out
+├── status.json
+└── wal
+```
+
+Under the hood, `debug kill` fetches info from `/status`, `/net_info`, and
+`/dump_consensus_state` HTTP endpoints, and kills the process with `-6`, which
+catches the go-routine dump.
+
+## tendermint debug dump
+
+Also, the `debug dump` sub-command allows you to dump debugging data into
+compressed archives at a regular interval. These archives contain the goroutine
+and heap profiles in addition to the consensus state, network info, node
+status, and even the WAL.
+
+```sh
+tendermint debug dump </path/to/out> --home=</path/to/app.d>
+```
+
+will perform similarly to `kill` except it only polls the node and
+dumps debugging data every frequency seconds to a compressed archive under a
+given destination directory. Each archive will contain:
+
+```
+├── consensus_state.json
+├── goroutine.out
+├── heap.out
+├── net_info.json
+├── status.json
+└── wal
+```
+
+Note: goroutine.out and heap.out will only be written if a profile address is
+provided and is operational. This command is blocking and will log any error.

From c518a062a7b39fe8427b47270bd71e34cb480576 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Tue, 3 Mar 2020 15:52:36 +0400
Subject: [PATCH 56/74] deps: bump github.com/Workiva/go-datastructures (#4519)

Bumps [github.com/Workiva/go-datastructures](https://github.com/Workiva/go-datastructures) from 1.0.50 to 1.0.51.
- [Release notes](https://github.com/Workiva/go-datastructures/releases)
- [Commits](https://github.com/Workiva/go-datastructures/compare/v1.0.50...v1.0.51)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
 go.mod | 2 +-
 go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index dd2b444fc..817b13cab 100644
--- a/go.mod
+++ b/go.mod
@@ -4,7 +4,7 @@ go 1.13
 
 require (
 	github.com/ChainSafe/go-schnorrkel v0.0.0-20200102211924-4bcbc698314f
-	github.com/Workiva/go-datastructures v1.0.50
+	github.com/Workiva/go-datastructures v1.0.51
 	github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d
 	github.com/btcsuite/btcutil v0.0.0-20180706230648-ab6388e0c60a
 	github.com/fortytw2/leaktest v1.3.0
diff --git a/go.sum b/go.sum
index c8eb10010..3833da4ca 100644
--- a/go.sum
+++ b/go.sum
@@ -12,6 +12,8 @@ github.com/VividCortex/gohistogram v1.0.0 h1:6+hBz+qvs0JOrrNhhmR7lFxo5sINxBCGXrd
 github.com/VividCortex/gohistogram v1.0.0/go.mod h1:Pf5mBqqDxYaXu3hDrrU+w6nw50o/4+TcAqDqk/vUH7g=
 github.com/Workiva/go-datastructures v1.0.50 h1:slDmfW6KCHcC7U+LP3DDBbm4fqTwZGn1beOFPfGaLvo=
 github.com/Workiva/go-datastructures v1.0.50/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
+github.com/Workiva/go-datastructures v1.0.51 h1:LJHjjfcv+1gH+1D1SgrjcrF8iSZkgsAdCjclvHvVecQ=
+github.com/Workiva/go-datastructures v1.0.51/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
 github.com/aead/siphash v1.0.1/go.mod h1:Nywa3cDsYNNK3gaciGTWPwHt0wlpNV15vwmswBAUSII=
 github.com/afex/hystrix-go v0.0.0-20180502004556-fa1af6a1f4f5/go.mod h1:SkGFH1ia65gfNATL8TAiHDNxPzPdmEL5uirI2Uyuz6c=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=

From ff786515b8cc56dae299326040dd1bd65c829fbf Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Tue, 3 Mar 2020 13:00:06 +0100
Subject: [PATCH 57/74] lite: add helper functions for initiating the light
 client (#4486)

* add new net client

* hijack example test

* lint fixes

* reorganised file structure

* renamed funcs and added documentation

* implemented suggested changes

* restored example tests

* edited comments

* Update lite2/setup.go

Co-Authored-By: Bot from GolangCI <42910462+golangcibot@users.noreply.github.com>

* Update lite2/client.go

* lite cmds use HTTP client

* better naming

* Delete go.sum

* Delete go.mod

* restore go mod

* restore go.sum

* fix double import

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
Co-authored-by: Bot from GolangCI <42910462+golangcibot@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
---
 cmd/tendermint/commands/lite.go | 46 +++++++-------------
 lite2/client.go                 |  7 +--
 lite2/example_test.go           |  2 +-
 lite2/setup.go                  | 77 +++++++++++++++++++++++++++++++++
 4 files changed, 96 insertions(+), 36 deletions(-)
 create mode 100644 lite2/setup.go

diff --git a/cmd/tendermint/commands/lite.go b/cmd/tendermint/commands/lite.go
index 2d1798920..447c6d92b 100644
--- a/cmd/tendermint/commands/lite.go
+++ b/cmd/tendermint/commands/lite.go
@@ -9,14 +9,12 @@ import (
 	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
 
-	amino "github.com/tendermint/go-amino"
+	"github.com/tendermint/go-amino"
 	dbm "github.com/tendermint/tm-db"
 
 	"github.com/tendermint/tendermint/libs/log"
 	tmos "github.com/tendermint/tendermint/libs/os"
 	lite "github.com/tendermint/tendermint/lite2"
-	"github.com/tendermint/tendermint/lite2/provider"
-	httpp "github.com/tendermint/tendermint/lite2/provider/http"
 	lproxy "github.com/tendermint/tendermint/lite2/proxy"
 	lrpc "github.com/tendermint/tendermint/lite2/rpc"
 	dbs "github.com/tendermint/tendermint/lite2/store/db"
@@ -54,9 +52,9 @@ lite cosmoshub-3 -p 52.57.29.196:26657 -w public-seed-node.cosmoshub.certus.one:
 var (
 	listenAddr         string
 	primaryAddr        string
+	witnessAddrsJoined string
 	chainID            string
 	home               string
-	witnessesAddrs     string
 	maxOpenConnections int
 
 	trustingPeriod time.Duration
@@ -71,7 +69,7 @@ func init() {
 		"Serve the proxy on the given address")
 	LiteCmd.Flags().StringVarP(&primaryAddr, "primary", "p", "",
 		"Connect to a Tendermint node at this address")
-	LiteCmd.Flags().StringVarP(&witnessesAddrs, "witnesses", "w", "",
+	LiteCmd.Flags().StringVarP(&witnessAddrsJoined, "witnesses", "w", "",
 		"Tendermint nodes to cross-check the primary node, comma-separated")
 	LiteCmd.Flags().StringVar(&home, "home-dir", ".tendermint-lite", "Specify the home directory")
 	LiteCmd.Flags().IntVar(
@@ -98,26 +96,10 @@ func runProxy(cmd *cobra.Command, args []string) error {
 	logger = log.NewFilter(logger, option)
 
 	chainID = args[0]
-
-	logger.Info("Creating HTTP client for primary...", "addr", primaryAddr)
-	rpcClient, err := rpcclient.NewHTTP(primaryAddr, "/websocket")
-	if err != nil {
-		return errors.Wrapf(err, "http client for %s", primaryAddr)
-	}
-	primary := httpp.NewWithClient(chainID, rpcClient)
-
-	// TODO: use NewNetClient once we have it
-	addrs := strings.Split(witnessesAddrs, ",")
-	witnesses := make([]provider.Provider, len(addrs))
-	for i, addr := range addrs {
-		p, err := httpp.New(chainID, addr)
-		if err != nil {
-			return errors.Wrapf(err, "http provider for %s", addr)
-		}
-		witnesses[i] = p
-	}
-
 	logger.Info("Creating client...", "chainID", chainID)
+
+	witnessesAddrs := strings.Split(witnessAddrsJoined, ",")
+
 	db, err := dbm.NewGoLevelDB("lite-client-db", home)
 	if err != nil {
 		return err
@@ -125,24 +107,24 @@ func runProxy(cmd *cobra.Command, args []string) error {
 
 	var c *lite.Client
 	if trustedHeight > 0 && len(trustedHash) > 0 { // fresh installation
-		c, err = lite.NewClient(
+		c, err = lite.NewHTTPClient(
 			chainID,
 			lite.TrustOptions{
 				Period: trustingPeriod,
 				Height: trustedHeight,
 				Hash:   trustedHash,
 			},
-			primary,
-			witnesses,
+			primaryAddr,
+			witnessesAddrs,
 			dbs.New(db, chainID),
 			lite.Logger(logger),
 		)
 	} else { // continue from latest state
-		c, err = lite.NewClientFromTrustedStore(
+		c, err = lite.NewHTTPClientFromTrustedStore(
 			chainID,
 			trustingPeriod,
-			primary,
-			witnesses,
+			primaryAddr,
+			witnessesAddrs,
 			dbs.New(db, chainID),
 			lite.Logger(logger),
 		)
@@ -158,6 +140,10 @@ func runProxy(cmd *cobra.Command, args []string) error {
 	}
 	defer c.Stop()
 
+	rpcClient, err := rpcclient.NewHTTP(primaryAddr, "/websocket")
+	if err != nil {
+		return errors.Wrapf(err, "http client for %s", primaryAddr)
+	}
 	p := lproxy.Proxy{
 		Addr:   listenAddr,
 		Config: &rpcserver.Config{MaxOpenConnections: maxOpenConnections},
diff --git a/lite2/client.go b/lite2/client.go
index 5272f1b3a..d65ed8ddb 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -953,11 +953,8 @@ func (c *Client) autoUpdateRoutine() {
 	}
 }
 
-// Update attempts to advance the state making exponential steps (note:
-// when SequentialVerification is being used, the client will still be
-// downloading all intermediate headers).
-//
-// Exposed for testing.
+// Update attempts to advance the state by downloading the latest header and
+// comparing it with the existing one.
 func (c *Client) Update(now time.Time) error {
 	lastTrustedHeight, err := c.LastTrustedHeight()
 	if err != nil {
diff --git a/lite2/example_test.go b/lite2/example_test.go
index 65997f906..e6839386f 100644
--- a/lite2/example_test.go
+++ b/lite2/example_test.go
@@ -135,7 +135,7 @@ func ExampleClient_VerifyHeaderAtHeight() {
 			Hash:   header.Hash(),
 		},
 		primary,
-		[]provider.Provider{primary}, // TODO: primary should not be used here
+		[]provider.Provider{primary}, // NOTE: primary should not be used here
 		dbs.New(db, chainID),
 		UpdatePeriod(0),
 		// Logger(log.TestingLogger()),
diff --git a/lite2/setup.go b/lite2/setup.go
new file mode 100644
index 000000000..50a4a9d21
--- /dev/null
+++ b/lite2/setup.go
@@ -0,0 +1,77 @@
+package lite
+
+import (
+	"time"
+
+	"github.com/tendermint/tendermint/lite2/provider"
+	"github.com/tendermint/tendermint/lite2/provider/http"
+	"github.com/tendermint/tendermint/lite2/store"
+)
+
+// NewHTTPClient initiates an instance of a lite client using HTTP addresses
+// for both the primary provider and witnesses of the lite client. A trusted
+// header and hash must be passed to initialize the client.
+//
+// See all Option(s) for the additional configuration.
+// See NewClient.
+func NewHTTPClient(
+	chainID string,
+	trustOptions TrustOptions,
+	primaryAddress string,
+	witnessesAddresses []string,
+	trustedStore store.Store,
+	options ...Option) (*Client, error) {
+
+	providers, err := providersFromAddresses(append(witnessesAddresses, primaryAddress), chainID)
+	if err != nil {
+		return nil, err
+	}
+
+	return NewClient(
+		chainID,
+		trustOptions,
+		providers[len(providers)-1],
+		providers[:len(providers)-1],
+		trustedStore,
+		options...)
+}
+
+// NewHTTPClientFromTrustedStore initiates an instance of a lite client using
+// HTTP addresses for both the primary provider and witnesses and uses a
+// trusted store as the root of trust.
+//
+// See all Option(s) for the additional configuration.
+// See NewClientFromTrustedStore.
+func NewHTTPClientFromTrustedStore(
+	chainID string,
+	trustingPeriod time.Duration,
+	primaryAddress string,
+	witnessesAddresses []string,
+	trustedStore store.Store,
+	options ...Option) (*Client, error) {
+
+	providers, err := providersFromAddresses(append(witnessesAddresses, primaryAddress), chainID)
+	if err != nil {
+		return nil, err
+	}
+
+	return NewClientFromTrustedStore(
+		chainID,
+		trustingPeriod,
+		providers[len(providers)-1],
+		providers[:len(providers)-1],
+		trustedStore,
+		options...)
+}
+
+func providersFromAddresses(addrs []string, chainID string) ([]provider.Provider, error) {
+	providers := make([]provider.Provider, len(addrs))
+	for idx, address := range addrs {
+		p, err := http.New(chainID, address)
+		if err != nil {
+			return nil, err
+		}
+		providers[idx] = p
+	}
+	return providers, nil
+}

From 891afc22352585697fb7baa6e448235bce4bfdb1 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Tue, 3 Mar 2020 16:41:59 +0400
Subject: [PATCH 58/74] cmd: fix debug kill and change debug dump archive
 filename format (#4517)

* cmd: change archive filename format

before: Mar  3 08:44:43.zip
after: 2020-03-03T08:44:43Z.zip

Refs #4515

* cmd: kill pid, not the debug process itself

Fixes #4515

* update changelog

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
---
 CHANGELOG_PENDING.md                  | 5 ++---
 cmd/tendermint/commands/debug/dump.go | 2 +-
 cmd/tendermint/commands/debug/kill.go | 2 +-
 3 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index f85b63307..47ff5dfb1 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -19,13 +19,12 @@ Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermi
 ### IMPROVEMENTS:
 
 - [types] [\#4417](https://github.com/tendermint/tendermint/issues/4417) VerifyCommitX() functions should return as soon as +2/3 threashold is reached.
-
 - [examples/kvstore] [\#4509](https://github.com/tendermint/tendermint/pull/4509) ABCI query now returns the proper height (@erikgrinaker)
+- [cmd] \#4515 Change `tendermint debug dump` sub-command archives filename's format (@melekes)
 
 ### BUG FIXES:
 
 - [rpc] [\#4493](https://github.com/tendermint/tendermint/pull/4493) Keep the original subscription "id" field when new RPCs come in (@michaelfig)
-
 - [rpc] [\#4437](https://github.com/tendermint/tendermint/pull/4437) Fix tx_search pagination with ordered results (@erikgrinaker)
-
 - [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
+- [cmd] \#4515 Fix `tendermint debug kill` sub-command (@melekes)
diff --git a/cmd/tendermint/commands/debug/dump.go b/cmd/tendermint/commands/debug/dump.go
index 80ca15c6b..33cb3e24d 100644
--- a/cmd/tendermint/commands/debug/dump.go
+++ b/cmd/tendermint/commands/debug/dump.go
@@ -126,7 +126,7 @@ func dumpDebugData(outDir string, conf *cfg.Config, rpc *rpcclient.HTTP) {
 		}
 	}
 
-	outFile := filepath.Join(outDir, fmt.Sprintf("%s.zip", start.Format(time.Stamp)))
+	outFile := filepath.Join(outDir, fmt.Sprintf("%s.zip", start.Format(time.RFC3339)))
 	if err := zipDir(tmpDir, outFile); err != nil {
 		logger.Error("failed to create and compress archive", "file", outFile, "error", err)
 	}
diff --git a/cmd/tendermint/commands/debug/kill.go b/cmd/tendermint/commands/debug/kill.go
index 52defc69c..8d9df1161 100644
--- a/cmd/tendermint/commands/debug/kill.go
+++ b/cmd/tendermint/commands/debug/kill.go
@@ -124,7 +124,7 @@ func killProc(pid uint64, dir string) error {
 	go func() {
 		// Killing the Tendermint process with the '-ABRT|-6' signal will result in
 		// a goroutine stacktrace.
-		p, err := os.FindProcess(os.Getpid())
+		p, err := os.FindProcess(int(pid))
 		if err != nil {
 			fmt.Fprintf(os.Stderr, "failed to find PID to kill Tendermint process: %s", err)
 		} else if err = p.Signal(syscall.SIGABRT); err != nil {

From 61380ffa3f43a88ae721fc205799d62c9c8dbcfc Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2020 11:58:45 +0000
Subject: [PATCH 59/74] build(deps): bump github.com/prometheus/client_golang
 (#4525)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.4.1...v1.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
 go.mod | 2 +-
 go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 817b13cab..5af1190cf 100644
--- a/go.mod
+++ b/go.mod
@@ -17,7 +17,7 @@ require (
 	github.com/libp2p/go-buffer-pool v0.0.2
 	github.com/magiconair/properties v1.8.1
 	github.com/pkg/errors v0.9.1
-	github.com/prometheus/client_golang v1.4.1
+	github.com/prometheus/client_golang v1.5.0
 	github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a
 	github.com/rs/cors v1.7.0
 	github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
diff --git a/go.sum b/go.sum
index 3833da4ca..886eadee3 100644
--- a/go.sum
+++ b/go.sum
@@ -306,6 +306,8 @@ github.com/prometheus/client_golang v1.3.0 h1:miYCvYqFXtl/J9FIy8eNpBfYthAEFg+Ys0
 github.com/prometheus/client_golang v1.3.0/go.mod h1:hJaj2vgQTGQmVCsAACORcieXFeDPbaTKGT+JTgUa3og=
 github.com/prometheus/client_golang v1.4.1 h1:FFSuS004yOQEtDdTq+TAOLP5xUq63KqAFYyOi8zA+Y8=
 github.com/prometheus/client_golang v1.4.1/go.mod h1:e9GMxYsXl05ICDXkRhurwBS4Q3OK1iX/F2sw+iXX5zU=
+github.com/prometheus/client_golang v1.5.0 h1:Ctq0iGpCmr3jeP77kbF2UxgvRwzWWz+4Bh9/vJTyg1A=
+github.com/prometheus/client_golang v1.5.0/go.mod h1:e9GMxYsXl05ICDXkRhurwBS4Q3OK1iX/F2sw+iXX5zU=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910 h1:idejC8f05m9MGOsuEi1ATq9shN03HrxNkD/luQvxCv8=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=

From 9e5b4afbf1da48d57643b3ccaeb6890b7c16af40 Mon Sep 17 00:00:00 2001
From: Tess Rinearson <tess.rinearson@gmail.com>
Date: Wed, 4 Mar 2020 15:48:17 +0100
Subject: [PATCH 60/74] .github: add markdown link checker (#4513)

co-authored-by: Marko <marbar3778@yahoo.com>
---
 .github/workflows/action.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .github/workflows/action.yml

diff --git a/.github/workflows/action.yml b/.github/workflows/action.yml
new file mode 100644
index 000000000..1b6f70730
--- /dev/null
+++ b/.github/workflows/action.yml
@@ -0,0 +1,10 @@
+name: Check Markdown links
+on: push
+jobs:
+  markdown-link-check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - uses: gaurav-nelson/github-action-markdown-link-check@0.6.0
+        with:
+          folder-path: "docs"

From 4936b23dae289422171d0575eb6d18957b598372 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Thu, 5 Mar 2020 11:28:32 +0400
Subject: [PATCH 61/74] adr-047: evidence handling (#4429)

Closes #4213 and #4182
---
 docs/architecture/README.md                   |   1 +
 ...047-handling-evidence-from-light-client.md | 186 ++++++++++++++++++
 2 files changed, 187 insertions(+)
 create mode 100644 docs/architecture/adr-047-handling-evidence-from-light-client.md

diff --git a/docs/architecture/README.md b/docs/architecture/README.md
index 9b3c2f661..6eb6ebc4f 100644
--- a/docs/architecture/README.md
+++ b/docs/architecture/README.md
@@ -67,5 +67,6 @@ Note the context/background should be written in the present tense.
 - [ADR-044-Lite-Client-With-Weak-Subjectivity](./adr-044-lite-client-with-weak-subjectivity.md)
 - [ADR-045-ABCI-Evidence](./adr-045-abci-evidence.md)
 - [ADR-046-Light-Client-Implementation](./adr-046-light-client-implementation.md)
+- [ADR-047-Handling-Evidence-From-Light-Client](./adr-047-handling-evidence-from-light-client.md)
 - [ADR-051-Double-Signing-Risk-Reduction](./adr-051-double-signing-risk-reduction.md)
 - [ADR-052-Tendermint-Mode](./adr-052-tendermint-mode.md)
diff --git a/docs/architecture/adr-047-handling-evidence-from-light-client.md b/docs/architecture/adr-047-handling-evidence-from-light-client.md
new file mode 100644
index 000000000..8b3a850ba
--- /dev/null
+++ b/docs/architecture/adr-047-handling-evidence-from-light-client.md
@@ -0,0 +1,186 @@
+# ADR 047: Handling evidence from light client
+
+## Changelog
+* 18-02-2020: Initial draft
+* 24-02-2020: Second version
+
+## Context
+
+If the light client is under attack, either directly -> lunatic/phantom
+validators (light fork) or indirectly -> full fork, it's supposed to halt and
+send evidence of misbehavior to a correct full node. Upon receiving an
+evidence, the full node should punish malicious validators (if possible).
+
+## Decision
+
+When a light client sees two conflicting headers (`H1.Hash() != H2.Hash()`,
+`H1.Height == H2.Height`), both having 1/3+ of the voting power of the
+currently trusted validator set, it will submit a `ConflictingHeadersEvidence`
+to all full nodes it's connected to. Evidence needs to be submitted to all full
+nodes since there's no way to determine which full node is correct (honest).
+
+```go
+type ConflictingHeadersEvidence struct {
+  H1 types.SignedHeader
+  H2 types.SignedHeader
+}
+```
+
+When a full node receives the `ConflictingHeadersEvidence` evidence, it should
+a) validate it b) figure out if malicious behaviour is obvious (immediately
+slashable) or the fork accountability protocol needs to be started.
+
+### Validating headers
+
+Check both headers are valid (`ValidateBasic`), have the same height, and
+signed by 1/3+ of the validator set that the full node had at height
+`H1.Height-1`.
+
+- Q: What if light client validator set is not equal to full node's validator
+  set (i.e. from full node's point of view both headers are not properly signed;
+  this includes the case where none of the two headers were committed on the
+  main chain)
+
+  Reject the evidence. It means light client is following a fork, but, hey, at
+  least it will halt.
+
+- Q: Don't we want to punish validators who signed something else even if they
+  have less or equal than 1/3?
+
+  No consensus so far. Ethan said no, Zarko said yes.
+  https://github.com/tendermint/spec/pull/71#discussion_r374210533
+
+### Figuring out if malicious behaviour is immediately slashable
+
+Let's say H1 was committed from this full node's perspective (see Appendix A).
+Intersect validator sets of H1 and H2.
+
+* if there are signers(H2) that are not part of validators(H1), they misbehaved as
+they are signing protocol messages in heights they are not validators =>
+immediately slashable (#F4).
+
+* if `H1.Round == H2.Round`, and some signers signed different precommit
+messages in both commits, then it is an equivocation misbehavior => immediately
+slashable (#F1).
+
+* if `H1.Round != H2.Round` we need to run full detection procedure => not
+immediately slashable.
+
+* if `ValidatorsHash`, `NextValidatorsHash`, `ConsensusHash`,
+`AppHash`, and `LastResultsHash` in H2 are different (incorrect application
+state transition), then it is a lunatic misbehavior => immediately slashable (#F5).
+
+If evidence is not immediately slashable, fork accountability needs to invoked
+(ADR does not yet exist).
+
+It's unclear if we should further break up `ConflictingHeadersEvidence` or
+gossip and commit it directly. See
+https://github.com/tendermint/tendermint/issues/4182#issuecomment-590339233
+
+If we'd go without breaking evidence, all we'll need to do is to strip the
+committed header from `ConflictingHeadersEvidence` (H1) and leave only the
+uncommitted header (H2):
+
+```go
+type ConflictingHeaderEvidence struct {
+  H types.SignedHeader
+}
+```
+
+If we'd go with breaking evidence, here are the types we'll need:
+
+### F1. Equivocation
+
+Existing `DuplicateVoteEvidence` needs to be created and gossiped.
+
+### F4. Phantom validators
+
+A new type of evidence needs to be created:
+
+```go
+type PhantomValidatorEvidence struct {
+  PubKey crypto.PubKey
+  Vote types.Vote
+}
+```
+
+It contains a validator's public key and a vote for a block, where this
+validator is not part of the validator set.
+
+### F5. Lunatic validator
+
+```go
+type LunaticValidatorEvidence struct {
+  Header types.Header
+  Vote types.Vote
+}
+```
+
+To punish this attack, we need support for a new Evidence type -
+`LunaticValidatorEvidence`. This type includes a vote and a header. The header
+must contain fields that are invalid with respect to the previous block, and a
+vote for that header by a validator that was in a validator set within the
+unbonding period. While the attack is only possible if +1/3 of some validator
+set colludes, the evidence should be verifiable independently for each
+individual validator. This means the total evidence can be split into one piece
+of evidence per attacking validator and gossipped to nodes to be verified one
+piece at a time, reducing the DoS attack surface at the peer layer.
+
+Note it is not sufficient to simply compare this header with that committed for
+the corresponding height, as an honest node may vote for a header that is not
+ultimately committed. Certain fields may also be variable, for instance the
+`LastCommitHash` and the `Time` may depend on which votes the proposer includes.
+Thus, the header must be explicitly checked for invalid data.
+
+For the attack to succeed, VC must sign a header that changes the validator set
+to consist of something they control. Without doing this, they can not
+otherwise attack the light client, since the client verifies commits according
+to validator sets. Thus, it should be sufficient to check only that
+`ValidatorsHash` and `NextValidatorsHash` are correct with respect to the
+header that was committed at the corresponding height.
+
+That said, if the attack is conducted by +2/3 of the validator set, they don't
+need to make an invalid change to the validator set, since they already control
+it. Instead they would make invalid changes to the `AppHash`, or possibly other
+fields. In order to punish them, then, we would have to check all header
+fields.
+
+Note some header fields require the block itself to verify, which the light
+client, by definition, does not possess, so it may not be possible to check
+these fields. For now, then, `LunaticValidatorEvidence` must be checked against
+all header fields which are a function of the application at previous blocks.
+This includes `ValidatorsHash`, `NextValidatorsHash`, `ConsensusHash`,
+`AppHash`, and `LastResultsHash`. These should all match what's in the header
+for the block that was actually committed at the corresponding height, and
+should thus be easy to check.
+
+## Status
+
+Proposed.
+
+## Consequences
+
+### Positive
+
+* Tendermint will be able to detect & punish new types of misbehavior
+* light clients connected to multiple full nodes can help full nodes notice a
+  fork faster
+
+### Negative
+
+* Accepting `ConflictingHeadersEvidence` from light clients opens up a DDOS
+attack vector (same is fair for any RPC endpoint open to public; remember that
+RPC is not open by default).
+
+### Neutral
+
+## References
+
+* [Fork accountability spec](https://github.com/tendermint/spec/blob/master/spec/consensus/light-client/accountability.md)
+
+## Appendix A
+
+If there is an actual fork (full fork), a full node may follow either one or
+another branch. So both H1 or H2 can be considered committed depending on which
+branch the full node is following. It's supposed to halt if it notices an
+actual fork, but there's a small chance it doesn't.

From 4c8e3c814521bef5e9040fb1e9ae67907fd699e1 Mon Sep 17 00:00:00 2001
From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com>
Date: Thu, 5 Mar 2020 08:41:36 +0000
Subject: [PATCH 62/74]  fix: proto-breakage (#4506)

* fix: fix proto-breakage

- this is amed to fix proto breakage for consumers

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>

* fix for importing third_party everywhere

* undo change

* test breakage change

* test ssh

* test https

* change ssh to https

* fix phony
---
 .circleci/config.yml   |  5 +----
 Makefile               |  7 ++++++-
 abci/types/types.pb.go |  2 +-
 buf.yaml               |  1 -
 libs/kv/types.pb.go    |  4 ++--
 scripts/protocgen.sh   |  2 +-
 tools.mk               | 23 ++++-------------------
 7 files changed, 15 insertions(+), 29 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 97b0653bc..b9d535da6 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -87,7 +87,7 @@ jobs:
     steps:
       - checkout
       - run:
-          command: make proto-check-breaking
+          command: make proto-check-breaking-ci
 
   test_abci_apps:
     executor: golang
@@ -378,13 +378,10 @@ jobs:
   #         command: |
   #           set -x
   #           export PATH=~/.local/bin:$PATH
-
   #           # install node and dredd
   #           ./scripts/get_nodejs.sh
-
   #           # build the binaries with a proper version of Go
   #           docker run --rm -v "$PWD":/go/src/github.com/tendermint/tendermint -w /go/src/github.com/tendermint/tendermint golang make build-linux build-contract-tests-hooks
-
   #           # This docker image works with go 1.7, we can install here the hook handler that contract-tests is going to use
   #           go get github.com/snikch/goodman/cmd/goodman
   #           make contract-tests
diff --git a/Makefile b/Makefile
index 5557a87ae..da4d440e7 100644
--- a/Makefile
+++ b/Makefile
@@ -4,6 +4,7 @@ OUTPUT?=build/tendermint
 BUILD_TAGS?='tendermint'
 LD_FLAGS = -X github.com/tendermint/tendermint/version.GitCommit=`git rev-parse --short=8 HEAD` -s -w
 BUILD_FLAGS = -mod=readonly -ldflags "$(LD_FLAGS)"
+HTTPS_GIT := https://github.com/tendermint/tendermint.git
 
 all: check build test install
 .PHONY: all
@@ -57,9 +58,13 @@ proto-lint:
 .PHONY: proto-lint
 
 proto-check-breaking:
-	@buf check breaking --against-input '.git#branch=master'
+	@buf check breaking --against-input ".git#branch=master"
 .PHONY: proto-check-breaking
 
+proto-check-breaking-ci:
+	@buf check breaking --against-input "$(HTTPS_GIT)#branch=master"
+.PHONY: proto-check-breaking-ci
+
 ###############################################################################
 ###                              Build ABCI                                 ###
 ###############################################################################
diff --git a/abci/types/types.pb.go b/abci/types/types.pb.go
index d8445f469..6c18cfbd1 100644
--- a/abci/types/types.pb.go
+++ b/abci/types/types.pb.go
@@ -2571,7 +2571,7 @@ func (m *PartSetHeader) GetHash() []byte {
 // Validator
 type Validator struct {
 	Address []byte `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
-	//PubKey pub_key = 2 [(gogoproto.nullable)=false];
+	// PubKey pub_key = 2 [(gogoproto.nullable)=false];
 	Power                int64    `protobuf:"varint,3,opt,name=power,proto3" json:"power,omitempty"`
 	XXX_NoUnkeyedLiteral struct{} `json:"-"`
 	XXX_unrecognized     []byte   `json:"-"`
diff --git a/buf.yaml b/buf.yaml
index 1b97487f4..7349a3516 100644
--- a/buf.yaml
+++ b/buf.yaml
@@ -13,4 +13,3 @@ lint:
 breaking:
   use:
     - FILE
-    - PACKAGE
diff --git a/libs/kv/types.pb.go b/libs/kv/types.pb.go
index b572ac205..c197d5791 100644
--- a/libs/kv/types.pb.go
+++ b/libs/kv/types.pb.go
@@ -26,7 +26,7 @@ var _ = math.Inf
 // proto package needs to be updated.
 const _ = proto.GoGoProtoPackageIsVersion3 // please upgrade the proto package
 
-// Define these here for compatibility but use tmlibs/common.KVPair.
+// Define these here for compatibility but use tmlibs/kv.Pair.
 type Pair struct {
 	Key                  []byte   `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
 	Value                []byte   `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
@@ -82,7 +82,7 @@ func (m *Pair) GetValue() []byte {
 	return nil
 }
 
-// Define these here for compatibility but use tmlibs/common.KI64Pair.
+// Define these here for compatibility but use tmlibs/kv.KI64Pair.
 type KI64Pair struct {
 	Key                  []byte   `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
 	Value                int64    `protobuf:"varint,2,opt,name=value,proto3" json:"value,omitempty"`
diff --git a/scripts/protocgen.sh b/scripts/protocgen.sh
index 922512ace..e6226dc1a 100644
--- a/scripts/protocgen.sh
+++ b/scripts/protocgen.sh
@@ -8,4 +8,4 @@ for dir in $proto_dirs; do
   -I. \
   --gogo_out=Mgoogle/protobuf/timestamp.proto=github.com/golang/protobuf/ptypes/timestamp,Mgoogle/protobuf/duration.proto=github.com/golang/protobuf/ptypes/duration,plugins=grpc,paths=source_relative:. \
   $(find "${dir}" -name '*.proto')
-done
\ No newline at end of file
+done
diff --git a/tools.mk b/tools.mk
index 66c6f2978..516fc494e 100644
--- a/tools.mk
+++ b/tools.mk
@@ -77,29 +77,14 @@ $(PROTOBUF):
 	@go get github.com/gogo/protobuf/protoc-gen-gogo@v1.3.1
 .PHONY: protobuf
 
-buf: protoc-gen-buf-check-breaking protoc-gen-buf-check-lint
+buf: 
 	@echo "Installing buf..."
 	@curl -sSL \
-    "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/buf-${UNAME_S}-${UNAME_M}" \
-    -o "${BIN}/buf" && \
-	chmod +x "${BIN}/buf"
+    "https://github.com/bufbuild/buf/releases/download/v$(BUF_VERSION)/buf-$(UNAME_S)-$(UNAME_M)" \
+    -o "$(BIN)/buf" && \
+	chmod +x "$(BIN)/buf"
 .PHONY: buf
 
-protoc-gen-buf-check-breaking:
-	@echo "Installing protoc-gen-buf-check-breaking..."
-	@curl -sSL \
-    "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/protoc-gen-buf-check-breaking-${UNAME_S}-${UNAME_M}" \
-    -o "${BIN}/protoc-gen-buf-check-breaking" && \
-	chmod +x "${BIN}/protoc-gen-buf-check-breaking"
-
-protoc-gen-buf-check-lint:
-	@echo "Installing protoc-gen-buf-check-lint..."
-	@curl -sSL \
-    "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/protoc-gen-buf-check-lint-${UNAME_S}-${UNAME_M}" \
-    -o "${BIN}/protoc-gen-buf-check-lint" && \
-	chmod +x "${BIN}/protoc-gen-buf-check-lint"
-.PHONY: protoc-gen-buf-check-lint
-
 goodman: $(GOODMAN)
 $(GOODMAN):
 	@echo "Get Goodman"

From 632b53d6535e2edb4cefe84bdbecfa3736143b2d Mon Sep 17 00:00:00 2001
From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com>
Date: Thu, 5 Mar 2020 09:29:26 +0000
Subject: [PATCH 63/74] fix addrbook tests (#4526)

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
Co-authored-by: Erik Grinaker <erik@grinaker.org>
---
 p2p/pex/addrbook_test.go | 26 +++++++++++---------------
 1 file changed, 11 insertions(+), 15 deletions(-)

diff --git a/p2p/pex/addrbook_test.go b/p2p/pex/addrbook_test.go
index 4942b403b..363958c44 100644
--- a/p2p/pex/addrbook_test.go
+++ b/p2p/pex/addrbook_test.go
@@ -60,15 +60,15 @@ func TestAddrBookSaveLoad(t *testing.T) {
 	defer deleteTempFile(fname)
 
 	// 0 addresses
-	book := NewAddrBook(fname, true).(*addrBook)
+	book := NewAddrBook(fname, true)
 	book.SetLogger(log.TestingLogger())
-	book.saveToFile(fname)
+	book.Save()
 
-	book = NewAddrBook(fname, true).(*addrBook)
+	book = NewAddrBook(fname, true)
 	book.SetLogger(log.TestingLogger())
-	book.loadFromFile(fname)
+	book.Start()
 
-	assert.Zero(t, book.Size())
+	assert.True(t, book.Empty())
 
 	// 100 addresses
 	randAddrs := randNetAddressPairs(t, 100)
@@ -78,11 +78,11 @@ func TestAddrBookSaveLoad(t *testing.T) {
 	}
 
 	assert.Equal(t, 100, book.Size())
-	book.saveToFile(fname)
+	book.Save()
 
-	book = NewAddrBook(fname, true).(*addrBook)
+	book = NewAddrBook(fname, true)
 	book.SetLogger(log.TestingLogger())
-	book.loadFromFile(fname)
+	book.Start()
 
 	assert.Equal(t, 100, book.Size())
 }
@@ -93,19 +93,15 @@ func TestAddrBookLookup(t *testing.T) {
 
 	randAddrs := randNetAddressPairs(t, 100)
 
-	book := NewAddrBook(fname, true).(*addrBook)
+	book := NewAddrBook(fname, true)
 	book.SetLogger(log.TestingLogger())
 	for _, addrSrc := range randAddrs {
 		addr := addrSrc.addr
 		src := addrSrc.src
 		book.AddAddress(addr, src)
 
-		ka := book.addrLookup[addr.ID]
-		assert.NotNil(t, ka, "Expected to find KnownAddress %v but wasn't there.", addr)
-
-		if !(ka.Addr.Equals(addr) && ka.Src.Equals(src)) {
-			t.Fatalf("KnownAddress doesn't match addr & src")
-		}
+		ka := book.HasAddress(addr)
+		assert.True(t, ka, "Expected to find KnownAddress %v but wasn't there.", addr)
 	}
 }
 

From 3a695d4b6f92b61a1fa612ceba971414edc2c108 Mon Sep 17 00:00:00 2001
From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com>
Date: Thu, 5 Mar 2020 10:48:29 +0000
Subject: [PATCH 64/74] docs: fix links (#4531)

* docs: fix links

- fix broken links

closes #4522

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>

* fix more links

* add enable and disable

* remvoe deadlink
---
 docs/DOCS_README.md                           |  9 ++-
 docs/README.md                                |  2 +-
 docs/app-dev/abci-cli.md                      |  2 +-
 docs/app-dev/app-development.md               |  2 +-
 docs/app-dev/indexing-transactions.md         |  2 +-
 .../subscribing-to-events-via-websocket.md    |  2 +-
 docs/architecture/README.md                   |  4 +-
 .../adr-002-event-subscription.md             |  1 -
 docs/architecture/adr-011-monitoring.md       |  2 +-
 docs/architecture/adr-018-ABCI-Validators.md  |  2 +-
 .../adr-043-blockchain-riri-org.md            | 66 ++++++++++---------
 docs/tendermint-core/how-to-read-logs.md      |  5 +-
 docs/tendermint-core/running-in-production.md |  2 +-
 docs/tendermint-core/using-tendermint.md      |  4 ++
 14 files changed, 57 insertions(+), 48 deletions(-)

diff --git a/docs/DOCS_README.md b/docs/DOCS_README.md
index 0da81aa21..ae16c18c9 100644
--- a/docs/DOCS_README.md
+++ b/docs/DOCS_README.md
@@ -2,8 +2,7 @@
 
 The documentation for Tendermint Core is hosted at:
 
-- https://docs.tendermint.com/master/ and
-- https://tendermint-staging.interblock.io/docs/
+- https://docs.tendermint.com/master/
 
 built from the files in this (`/docs`) directory for
 [master](https://github.com/tendermint/tendermint/tree/master/docs) respectively.
@@ -78,9 +77,13 @@ Install the theme and all dependencies.
 npm run serve
 ```
 
+<!-- markdown-link-check-disable -->
+
 Run `pre` and `post` hooks and start a hot-reloading web-server. See output of this command for the URL (it is often https://localhost:8080).
 
-To build documentation as a static website run `npm run build`. You will find the website in `.vuepress/dist`  directory.
+<!-- markdown-link-check-enable -->
+
+To build documentation as a static website run `npm run build`. You will find the website in `.vuepress/dist` directory.
 
 ## Search
 
diff --git a/docs/README.md b/docs/README.md
index b1b876045..1b7d691e3 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -14,7 +14,7 @@ Tendermint?](introduction/what-is-tendermint.md).
 
 To get started quickly with an example application, see the [quick start guide](introduction/quick-start.md).
 
-To learn about application development on Tendermint, see the [Application Blockchain Interface](spec/abci/).
+To learn about application development on Tendermint, see the [Application Blockchain Interface](https://github.com/tendermint/spec/tree/master/spec/abci).
 
 For more details on using Tendermint, see the respective documentation for
 [Tendermint Core](tendermint-core/), [benchmarking and monitoring](tools/), and [network deployments](networks/).
diff --git a/docs/app-dev/abci-cli.md b/docs/app-dev/abci-cli.md
index e747e6d48..ec8b0abf3 100644
--- a/docs/app-dev/abci-cli.md
+++ b/docs/app-dev/abci-cli.md
@@ -142,7 +142,7 @@ response.
 The server may be generic for a particular language, and we provide a
 [reference implementation in
 Golang](https://github.com/tendermint/tendermint/tree/master/abci/server). See the
-[list of other ABCI implementations](./ecosystem.md) for servers in
+[list of other ABCI implementations](https://github.com/tendermint/awesome#ecosystem) for servers in
 other languages.
 
 The handler is specific to the application, and may be arbitrary, so
diff --git a/docs/app-dev/app-development.md b/docs/app-dev/app-development.md
index 44a2ea623..9c1acc289 100644
--- a/docs/app-dev/app-development.md
+++ b/docs/app-dev/app-development.md
@@ -7,7 +7,7 @@ order: 4
 ## XXX
 
 This page is undergoing deprecation. All content is being moved to the new [home
-of the ABCI specification](../spec/abci/README.md).
+of the ABCI specification](https://github.com/tendermint/spec/tree/master/spec/abci).
 
 ## ABCI Design
 
diff --git a/docs/app-dev/indexing-transactions.md b/docs/app-dev/indexing-transactions.md
index 4afca5775..3e3fcd551 100644
--- a/docs/app-dev/indexing-transactions.md
+++ b/docs/app-dev/indexing-transactions.md
@@ -14,7 +14,7 @@ type, only the key-value pairs defined in `EndBlock` are used.
 
 Each event contains a type and a list of attributes, which are key-value pairs
 denoting something about what happened during the method's execution. For more
-details on `Events`, see the [ABCI](../spec/abci/abci.md) documentation.
+details on `Events`, see the [ABCI]https://github.com/tendermint/spec/blob/master/spec/abci/abci.md#events) documentation.
 
 An Event has a composite key associated with it. A `compositeKey` is constructed by its type and key separated by a dot.
 For example:
diff --git a/docs/app-dev/subscribing-to-events-via-websocket.md b/docs/app-dev/subscribing-to-events-via-websocket.md
index 5f5cc8921..6e4f0d207 100644
--- a/docs/app-dev/subscribing-to-events-via-websocket.md
+++ b/docs/app-dev/subscribing-to-events-via-websocket.md
@@ -36,7 +36,7 @@ transactions](./indexing-transactions.md) for details.
 When validator set changes, ValidatorSetUpdates event is published. The
 event carries a list of pubkey/power pairs. The list is the same
 Tendermint receives from ABCI application (see [EndBlock
-section](../spec/abci/abci.md#endblock) in
+section](https://github.com/tendermint/spec/blob/master/spec/abci/abci.md#endblock) in
 the ABCI spec).
 
 Response:
diff --git a/docs/architecture/README.md b/docs/architecture/README.md
index 6eb6ebc4f..b571564d5 100644
--- a/docs/architecture/README.md
+++ b/docs/architecture/README.md
@@ -37,7 +37,7 @@ Note the context/background should be written in the present tense.
 - [ADR-006-Trust-Metric](./adr-006-trust-metric.md)
 - [ADR-007-Trust-Metric-Usage](./adr-007-trust-metric-usage.md)
 - [ADR-008-Priv-Validator](./adr-008-priv-validator.md)
-- [ADR-009-ABCI-Design](./adr-009-abci-design.md)
+- [ADR-009-ABCI-Design](./adr-009-ABCI-design.md)
 - [ADR-010-Crypto-Changes](./adr-010-crypto-changes.md)
 - [ADR-011-Monitoring](./adr-011-monitoring.md)
 - [ADR-012-Peer-Transport](./adr-012-peer-transport.md)
@@ -46,7 +46,7 @@ Note the context/background should be written in the present tense.
 - [ADR-015-Crypto-Encoding](./adr-015-crypto-encoding.md)
 - [ADR-016-Protocol-Versions](./adr-016-protocol-versions.md)
 - [ADR-017-Chain-Versions](./adr-017-chain-versions.md)
-- [ADR-018-ABCI-Validators](./adr-018-abci-validators.md)
+- [ADR-018-ABCI-Validators](./adr-018-ABCI-Validators.md)
 - [ADR-019-Multisigs](./adr-019-multisigs.md)
 - [ADR-020-Block-Size](./adr-020-block-size.md)
 - [ADR-021-ABCI-Events](./adr-021-abci-events.md)
diff --git a/docs/architecture/adr-002-event-subscription.md b/docs/architecture/adr-002-event-subscription.md
index a73d584ab..e5c98637f 100644
--- a/docs/architecture/adr-002-event-subscription.md
+++ b/docs/architecture/adr-002-event-subscription.md
@@ -65,7 +65,6 @@ For historic queries we will need a indexing storage (Postgres, SQLite, ...).
 
 ### Issues
 
-- https://github.com/tendermint/basecoin/issues/91
 - https://github.com/tendermint/tendermint/issues/376
 - https://github.com/tendermint/tendermint/issues/287
 - https://github.com/tendermint/tendermint/issues/525 (related)
diff --git a/docs/architecture/adr-011-monitoring.md b/docs/architecture/adr-011-monitoring.md
index 8f2d009dd..4c79507a1 100644
--- a/docs/architecture/adr-011-monitoring.md
+++ b/docs/architecture/adr-011-monitoring.md
@@ -19,7 +19,7 @@ A few solutions were considered:
    b) [go-kit metrics package](https://github.com/go-kit/kit/tree/master/metrics) as an interface plus Prometheus
    c) [telegraf](https://github.com/influxdata/telegraf)
    d) new service, which will listen to events emitted by pubsub and report metrics
-2. [OpenCensus](https://opencensus.io/go/index.html)
+2. [OpenCensus](https://opencensus.io/introduction/)
 
 ### 1. Prometheus
 
diff --git a/docs/architecture/adr-018-ABCI-Validators.md b/docs/architecture/adr-018-ABCI-Validators.md
index f40efca15..f5ffdccaa 100644
--- a/docs/architecture/adr-018-ABCI-Validators.md
+++ b/docs/architecture/adr-018-ABCI-Validators.md
@@ -32,7 +32,7 @@ message ValidatorUpdate {
 }
 ```
 
-As noted in ADR-009[https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-009-ABCI-design.md],
+As noted in [ADR-009](adr-009-ABCI-design.md),
 the `Validator` does not contain a pubkey because quantum public keys are
 quite large and it would be wasteful to send them all over ABCI with every block.
 Thus, applications that want to take advantage of the information in BeginBlock
diff --git a/docs/architecture/adr-043-blockchain-riri-org.md b/docs/architecture/adr-043-blockchain-riri-org.md
index 6bb018f51..303def716 100644
--- a/docs/architecture/adr-043-blockchain-riri-org.md
+++ b/docs/architecture/adr-043-blockchain-riri-org.md
@@ -1,25 +1,26 @@
 # ADR 043: Blockhchain Reactor Riri-Org
 
 ## Changelog
-* 18-06-2019: Initial draft
-* 08-07-2019: Reviewed
-* 29-11-2019: Implemented
-* 14-02-2020: Updated with the implementation details
+
+- 18-06-2019: Initial draft
+- 08-07-2019: Reviewed
+- 29-11-2019: Implemented
+- 14-02-2020: Updated with the implementation details
 
 ## Context
 
-The blockchain reactor is responsible for two high level processes:sending/receiving blocks from peers and FastSync-ing blocks to catch upnode who is far behind.  The goal of [ADR-40](https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-040-blockchain-reactor-refactor.md) was to refactor these two processes by separating business logic currently wrapped up in go-channels into pure `handle*` functions.  While the ADR specified what the final form of the reactor might look like it lacked guidance on intermediary steps to get there. 
-The following diagram illustrates the state of the [blockchain-reorg](https://github.com/tendermint/tendermint/pull/35610) reactor which will be referred to as `v1`.
+The blockchain reactor is responsible for two high level processes:sending/receiving blocks from peers and FastSync-ing blocks to catch upnode who is far behind. The goal of [ADR-40](https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-040-blockchain-reactor-refactor.md) was to refactor these two processes by separating business logic currently wrapped up in go-channels into pure `handle*` functions. While the ADR specified what the final form of the reactor might look like it lacked guidance on intermediary steps to get there.
+The following diagram illustrates the state of the [blockchain-reorg](https://github.com/tendermint/tendermint/pull/3561) reactor which will be referred to as `v1`.
 
 ![v1 Blockchain Reactor Architecture
 Diagram](https://github.com/tendermint/tendermint/blob/f9e556481654a24aeb689bdadaf5eab3ccd66829/docs/architecture/img/blockchain-reactor-v1.png)
 
 While `v1` of the blockchain reactor has shown significant improvements in terms of simplifying the concurrency model, the current PR has run into few roadblocks.
 
-* The current PR large and difficult to review.
-* Block gossiping and fast sync processes are highly coupled to the shared `Pool` data structure.
-* Peer communication is spread over multiple components creating complex dependency graph which must be mocked out during testing.
-* Timeouts modeled as stateful tickers introduce non-determinism in tests
+- The current PR large and difficult to review.
+- Block gossiping and fast sync processes are highly coupled to the shared `Pool` data structure.
+- Peer communication is spread over multiple components creating complex dependency graph which must be mocked out during testing.
+- Timeouts modeled as stateful tickers introduce non-determinism in tests
 
 This ADR is meant to specify the missing components and control necessary to achieve [ADR-40](https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-040-blockchain-reactor-refactor.md).
 
@@ -32,7 +33,7 @@ Diagram](https://github.com/tendermint/tendermint/blob/584e67ac3fac220c5c3e0652e
 
 ### Fast Sync Related Communication Channels
 
-The diagram below shows the fast sync routines and the types of channels and queues used to communicate with each other. 
+The diagram below shows the fast sync routines and the types of channels and queues used to communicate with each other.
 In addition the per reactor channels used by the sendRoutine to send messages over the Peer MConnection are shown.
 
 ![v2 Blockchain Channels and Queues
@@ -42,7 +43,6 @@ Diagram](https://github.com/tendermint/tendermint/blob/5cf570690f989646fb3b615b7
 
 The reactor will include a demultiplexing routine which will send each message to each sub routine for independent processing. Each sub routine will then select the messages it's interested in and call the handle specific function specified in [ADR-40](https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-040-blockchain-reactor-refactor.md). The demuxRoutine acts as "pacemaker" setting the time in which events are expected to be handled.
 
-
 ```go
 func demuxRoutine(msgs, scheduleMsgs, processorMsgs, ioMsgs) {
 	timer := time.NewTicker(interval)
@@ -143,6 +143,7 @@ func (r *BlockchainReactor) AddPeer(peer p2p.Peer) {
 ```
 
 ## IO handling
+
 An io handling routine within the reactor will isolate peer communication. Message going through the ioRoutine will usually be one way, using `p2p` APIs. In the case in which the `p2p` API such as `trySend` return errors, the ioRoutine can funnel those message back to the demuxRoutine for distribution to the other routines. For instance errors from the ioRoutine can be consumed by the scheduler to inform better peer selection implementations.
 
 ```go
@@ -169,6 +170,7 @@ func (r *BlockchainReacor) ioRoutine(ioMesgs chan Message, outMsgs chan Message)
 }
 
 ```
+
 ### Processor Internals
 
 The processor is responsible for ordering, verifying and executing blocks. The Processor will maintain an internal cursor `height` refering to the last processed block. As a set of blocks arrive unordered, the Processor will check if it has `height+1` necessary to process the next block. The processor also maintains the map `blockPeers` of peers to height, to keep track of which peer provided the block at `height`. `blockPeers` can be used in`handleRemovePeer(...)` to reschedule all unprocessed blocks provided by a peer who has errored.
@@ -232,10 +234,10 @@ func handleTimeCheckEv(time) {
 
 The Schedule maintains the internal state used for scheduling blockRequestMessages based on some scheduling algorithm. The schedule needs to maintain state on:
 
-* The state `blockState` of every block seem up to height of maxHeight
-* The set of peers and their peer state `peerState`
-* which peers have which blocks
-* which blocks have been requested from which peers
+- The state `blockState` of every block seem up to height of maxHeight
+- The set of peers and their peer state `peerState`
+- which peers have which blocks
+- which blocks have been requested from which peers
 
 ```go
 type blockState int
@@ -256,7 +258,7 @@ type schedule {
 
     // a map of peerID to schedule specific peer struct `scPeer`
 	peers              map[p2p.ID]scPeer
-    
+
     // a map of heights to the peer we are waiting for a response from
 	pending map[height]scPeer
 
@@ -309,6 +311,7 @@ type scPeer struct {
 ```
 
 # Scheduler
+
 The scheduler is configured to maintain a target `n` of in flight
 messages and will use feedback from `_blockResponseMessage`,
 `_statusResponseMessage` and `_peerError` produce an optimal assignment
@@ -342,7 +345,7 @@ func handleTimeCheckEv(time) {
 
     events = []
 	for peerID := range schedule.peersNotTouchedSince(time) {
-		pending = schedule.pendingFrom(peerID) 
+		pending = schedule.pendingFrom(peerID)
 		schedule.setPeerState(peerID, timedout)
 		schedule.resetBlocks(pending)
 		events = append(events, peerTimeout{peerID})
@@ -355,6 +358,7 @@ func handleTimeCheckEv(time) {
 ```
 
 ## Peer
+
 The Peer Stores per peer state based on messages received by the scheduler.
 
 ```go
@@ -376,19 +380,19 @@ type Peer struct {
 This design is under active development. The Implementation has been
 staged in the following PRs:
 
-* [Routine](https://github.com/tendermint/tendermint/pull/3878)
-* [Processor](https://github.com/tendermint/tendermint/pull/4012)
-* [Scheduler](https://github.com/tendermint/tendermint/pull/4043)
-* [Reactor](https://github.com/tendermint/tendermint/pull/4067)
+- [Routine](https://github.com/tendermint/tendermint/pull/3878)
+- [Processor](https://github.com/tendermint/tendermint/pull/4012)
+- [Scheduler](https://github.com/tendermint/tendermint/pull/4043)
+- [Reactor](https://github.com/tendermint/tendermint/pull/4067)
 
 ## Consequences
 
 ### Positive
 
-* Test become deterministic
-* Simulation becomes a-termporal: no need wait for a wall-time timeout
-* Peer Selection can be independently tested/simulated
-* Develop a general approach to refactoring reactors
+- Test become deterministic
+- Simulation becomes a-termporal: no need wait for a wall-time timeout
+- Peer Selection can be independently tested/simulated
+- Develop a general approach to refactoring reactors
 
 ### Negative
 
@@ -396,11 +400,11 @@ staged in the following PRs:
 
 ### Implementation Path
 
-* Implement the scheduler, test the scheduler, review the rescheduler
-* Implement the processor, test the processor, review the processor
-* Implement the demuxer, write integration test, review integration tests
+- Implement the scheduler, test the scheduler, review the rescheduler
+- Implement the processor, test the processor, review the processor
+- Implement the demuxer, write integration test, review integration tests
 
 ## References
 
-* [ADR-40](https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-040-blockchain-reactor-refactor.md): The original blockchain reactor re-org proposal
-* [Blockchain re-org](https://github.com/tendermint/tendermint/pull/3561): The current blockchain reactor re-org implementation (v1)
+- [ADR-40](https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-040-blockchain-reactor-refactor.md): The original blockchain reactor re-org proposal
+- [Blockchain re-org](https://github.com/tendermint/tendermint/pull/3561): The current blockchain reactor re-org implementation (v1)
diff --git a/docs/tendermint-core/how-to-read-logs.md b/docs/tendermint-core/how-to-read-logs.md
index 4031a178a..195a515a5 100644
--- a/docs/tendermint-core/how-to-read-logs.md
+++ b/docs/tendermint-core/how-to-read-logs.md
@@ -66,9 +66,8 @@ I[10-04|13:54:30.392] Started node                                 module=main n
 Next follows a standard block creation cycle, where we enter a new
 round, propose a block, receive more than 2/3 of prevotes, then
 precommits and finally have a chance to commit a block. For details,
-please refer to [Consensus
-Overview](../introduction/introduction.md#consensus-overview) or [Byzantine Consensus
-Algorithm](../spec/consensus/consensus.md).
+please refer to [Byzantine Consensus
+Algorithm](https://github.com/tendermint/spec/blob/master/spec/consensus/consensus.md).
 
 ```
 I[10-04|13:54:30.393] enterNewRound(91/0). Current: 91/0/RoundStepNewHeight module=consensus
diff --git a/docs/tendermint-core/running-in-production.md b/docs/tendermint-core/running-in-production.md
index 02a0eae58..d386308de 100644
--- a/docs/tendermint-core/running-in-production.md
+++ b/docs/tendermint-core/running-in-production.md
@@ -106,7 +106,7 @@ Rate-limiting and authentication are another key aspects to help protect
 against DOS attacks. While in the future we may implement these
 features, for now, validators are supposed to use external tools like
 [NGINX](https://www.nginx.com/blog/rate-limiting-nginx/) or
-[traefik](https://docs.traefik.io/configuration/commons/#rate-limiting)
+[traefik](https://docs.traefik.io/middlewares/ratelimit/)
 to achieve the same things.
 
 ## Debugging Tendermint
diff --git a/docs/tendermint-core/using-tendermint.md b/docs/tendermint-core/using-tendermint.md
index b1098f54f..b33e770d7 100644
--- a/docs/tendermint-core/using-tendermint.md
+++ b/docs/tendermint-core/using-tendermint.md
@@ -156,10 +156,14 @@ and the `latest_app_hash` in particular:
 curl http://localhost:26657/status | json_pp | grep latest_app_hash
 ```
 
+<!-- markdown-link-check-disable -->
+
 Visit http://localhost:26657 in your browser to see the list of other
 endpoints. Some take no arguments (like `/status`), while others specify
 the argument name and use `_` as a placeholder.
 
+<!-- markdown-link-check-enable -->
+
 ::: tip
 Find the RPC Documentation [here](https://docs.tendermint.com/master/rpc/)
 :::

From 7d001177e3b27d96f732a3627fe847c248b3b172 Mon Sep 17 00:00:00 2001
From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com>
Date: Thu, 5 Mar 2020 13:25:18 +0000
Subject: [PATCH 65/74] readme: add discord to readme (#4533)

* readme: add discord to readme

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>

* add our id
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 61391f51e..f3346a75c 100644
--- a/README.md
+++ b/README.md
@@ -9,7 +9,7 @@ Or [Blockchain](<https://en.wikipedia.org/wiki/Blockchain_(database)>), for shor
 [![version](https://img.shields.io/github/tag/tendermint/tendermint.svg)](https://github.com/tendermint/tendermint/releases/latest)
 [![API Reference](https://camo.githubusercontent.com/915b7be44ada53c290eb157634330494ebe3e30a/68747470733a2f2f676f646f632e6f72672f6769746875622e636f6d2f676f6c616e672f6764646f3f7374617475732e737667)](https://godoc.org/github.com/tendermint/tendermint)
 [![Go version](https://img.shields.io/badge/go-1.13-blue.svg)](https://github.com/moovweb/gvm)
-[![riot.im](https://img.shields.io/badge/riot.im-JOIN%20CHAT-green.svg)](https://riot.im/app/#/room/#tendermint:matrix.org)
+[![Discord](https://img.shields.io/discord/669268347736686612.svg)](https://discord.gg/AzefAFd)  
 [![license](https://img.shields.io/github/license/tendermint/tendermint.svg)](https://github.com/tendermint/tendermint/blob/master/LICENSE)
 [![](https://tokei.rs/b1/github/tendermint/tendermint?category=lines)](https://github.com/tendermint/tendermint)
 

From 431618cef6e09c24b81fba535e7cb2b7342c3af0 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 6 Mar 2020 13:33:07 +0400
Subject: [PATCH 66/74] lite2: remove auto update (#4535)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

We first introduced auto-update as a separate struct AutoClient, which
was wrapping Client and calling Update periodically.

// AutoClient can auto update itself by fetching headers every N seconds.
type AutoClient struct {
    base         *Client
    updatePeriod time.Duration
    quit         chan struct{}

    trustedHeaders chan *types.SignedHeader
    errs           chan error
}

// NewAutoClient creates a new client and starts a polling goroutine.
func NewAutoClient(base *Client, updatePeriod time.Duration) *AutoClient {
    c := &AutoClient{
        base:           base,
        updatePeriod:   updatePeriod,
        quit:           make(chan struct{}),
        trustedHeaders: make(chan *types.SignedHeader),
        errs:           make(chan error),
    }
    go c.autoUpdate()
    return c
}

// TrustedHeaders returns a channel onto which new trusted headers are posted.
func (c *AutoClient) TrustedHeaders() <-chan *types.SignedHeader {
    return c.trustedHeaders
}

// Err returns a channel onto which errors are posted.
func (c *AutoClient) Errs() <-chan error {
    return c.errs
}

// Stop stops the client.
func (c *AutoClient) Stop() {
    close(c.quit)
}

func (c *AutoClient) autoUpdate() {
    ticker := time.NewTicker(c.updatePeriod)
    defer ticker.Stop()

    for {
        select {
        case <-ticker.C:
            lastTrustedHeight, err := c.base.LastTrustedHeight()
            if err != nil {
                c.errs <- err
                continue
            }

            if lastTrustedHeight == -1 {
                // no headers yet => wait
                continue
            }

            newTrustedHeader, err := c.base.Update(time.Now())
            if err != nil {
                c.errs <- err
                continue
            }

            if newTrustedHeader != nil {
                 c.trustedHeaders <- newTrustedHeader
            }
        case <-c.quit:
            return
        }
    }
}

Later we merged it into the Client itself with the assumption that most clients will want it.

But now I am not sure. Neither IBC nor cosmos/relayer are using it. It increases complexity (Start/Stop methods).

That said, I think it makes sense to remove it until we see a need for it (until we better understand usage behavior). We can always introduce it later 😅. Maybe in the form of AutoClient.
---
 cmd/tendermint/commands/lite.go               | 11 +---
 .../adr-046-light-client-implementation.md    | 17 ++----
 lite2/client.go                               | 59 -------------------
 lite2/client_test.go                          | 34 -----------
 lite2/doc.go                                  | 28 ++++-----
 lite2/example_test.go                         |  8 +--
 lite2/rpc/client.go                           | 16 +----
 7 files changed, 21 insertions(+), 152 deletions(-)

diff --git a/cmd/tendermint/commands/lite.go b/cmd/tendermint/commands/lite.go
index 447c6d92b..dae72266d 100644
--- a/cmd/tendermint/commands/lite.go
+++ b/cmd/tendermint/commands/lite.go
@@ -102,7 +102,7 @@ func runProxy(cmd *cobra.Command, args []string) error {
 
 	db, err := dbm.NewGoLevelDB("lite-client-db", home)
 	if err != nil {
-		return err
+		return errors.Wrap(err, "new goleveldb")
 	}
 
 	var c *lite.Client
@@ -129,16 +129,9 @@ func runProxy(cmd *cobra.Command, args []string) error {
 			lite.Logger(logger),
 		)
 	}
-
 	if err != nil {
-		return errors.Wrap(err, "failed to create")
+		return err
 	}
-	logger.Info("Starting client...")
-	err = c.Start()
-	if err != nil {
-		return errors.Wrap(err, "failed to start")
-	}
-	defer c.Stop()
 
 	rpcClient, err := rpcclient.NewHTTP(primaryAddr, "/websocket")
 	if err != nil {
diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index 6058da8f8..aa7df3450 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -8,23 +8,13 @@
 ## Context
 
 A `Client` struct represents a light client, connected to a single blockchain.
-As soon as it's started (via `Start`), it tries to update to the latest header
-(using bisection algorithm by default).
 
-Cleaning routine is also started to remove headers outside of trusting period.
-NOTE: since it's periodic, we still need to check header is not expired in
-`TrustedHeader`, `TrustedValidatorSet` methods (and others which are using the
-latest trusted header).
-
-The user has an option to manually verify headers using `VerifyHeader` and
-`VerifyHeaderAtHeight` methods. To avoid races, `UpdatePeriod(0)` needs to be
-passed when initializing the light client (it turns off the auto update).
+The user has an option to verify headers using `VerifyHeader` or
+`VerifyHeaderAtHeight` or `Update` methods. The latter method downloads the
+latest header from primary and compares it with the currently trusted one.
 
 ```go
 type Client interface {
-	// start and stop updating & cleaning goroutines
-	Start() error
-	Stop()
 	Cleanup() error
 
 	// get trusted headers & validators
@@ -41,6 +31,7 @@ type Client interface {
 	// verify new headers
 	VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error)
 	VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error
+	Update(now time.Time) error
 }
 ```
 
diff --git a/lite2/client.go b/lite2/client.go
index d65ed8ddb..b353f70d8 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -22,7 +22,6 @@ const (
 	sequential mode = iota + 1
 	skipping
 
-	defaultUpdatePeriod     = 5 * time.Second
 	defaultPruningSize      = 1000
 	defaultMaxRetryAttempts = 10
 )
@@ -55,13 +54,6 @@ func SkippingVerification(trustLevel tmmath.Fraction) Option {
 	}
 }
 
-// UpdatePeriod option can be used to change default polling period (5s).
-func UpdatePeriod(d time.Duration) Option {
-	return func(c *Client) {
-		c.updatePeriod = d
-	}
-}
-
 // PruningSize option sets the maximum amount of headers & validator set pairs
 // that the light client stores. When Prune() is run, all headers (along with
 // the associated validator sets) that are earlier than the h amount of headers
@@ -101,9 +93,6 @@ func MaxRetryAttempts(max uint16) Option {
 // headers from a primary provider, verifies them either sequentially or by
 // skipping some and stores them in a trusted store (usually, a local FS).
 //
-// By default, the client will poll the primary provider for new headers every
-// 5s (UpdatePeriod). If there are any, it will try to advance the state.
-//
 // Default verification: SkippingVerification(DefaultTrustLevel)
 type Client struct {
 	chainID          string
@@ -126,8 +115,6 @@ type Client struct {
 	// Highest validator set from the store (height=H).
 	latestTrustedVals *types.ValidatorSet
 
-	// See UpdatePeriod option
-	updatePeriod time.Duration
 	// See RemoveNoLongerTrustedHeadersPeriod option
 	pruningSize uint16
 	// See ConfirmationFunction option
@@ -202,7 +189,6 @@ func NewClientFromTrustedStore(
 		primary:          primary,
 		witnesses:        witnesses,
 		trustedStore:     trustedStore,
-		updatePeriod:     defaultUpdatePeriod,
 		pruningSize:      defaultPruningSize,
 		confirmationFn:   func(action string) bool { return true },
 		quit:             make(chan struct{}),
@@ -390,27 +376,6 @@ func (c *Client) initializeWithTrustOptions(options TrustOptions) error {
 	return c.updateTrustedHeaderAndVals(h, vals)
 }
 
-// Start starts two processes: 1) auto updating 2) removing outdated headers.
-func (c *Client) Start() error {
-	c.logger.Info("Starting light client")
-
-	if c.updatePeriod > 0 {
-		c.routinesWaitGroup.Add(1)
-		go c.autoUpdateRoutine()
-	}
-
-	return nil
-}
-
-// Stop stops two processes: 1) auto updating 2) removing outdated headers.
-// Stop only returns after both of them are finished running. If you wish to
-// remove all the data, call Cleanup.
-func (c *Client) Stop() {
-	c.logger.Info("Stopping light client")
-	close(c.quit)
-	c.routinesWaitGroup.Wait()
-}
-
 // TrustedHeader returns a trusted header at the given height (0 - the latest).
 //
 // Headers along with validator sets, which can't be trusted anymore, are
@@ -929,30 +894,6 @@ func (c *Client) removeWitness(idx int) {
 	}
 }
 
-func (c *Client) autoUpdateRoutine() {
-	defer c.routinesWaitGroup.Done()
-
-	err := c.Update(time.Now())
-	if err != nil {
-		c.logger.Error("Error during auto update", "err", err)
-	}
-
-	ticker := time.NewTicker(c.updatePeriod)
-	defer ticker.Stop()
-
-	for {
-		select {
-		case <-ticker.C:
-			err := c.Update(time.Now())
-			if err != nil {
-				c.logger.Error("Error during auto update", "err", err)
-			}
-		case <-c.quit:
-			return
-		}
-	}
-}
-
 // Update attempts to advance the state by downloading the latest header and
 // comparing it with the existing one.
 func (c *Client) Update(now time.Time) error {
diff --git a/lite2/client_test.go b/lite2/client_test.go
index 383bd4c60..e9023c3ad 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -154,7 +154,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 				)},
 				dbs.New(dbm.NewMemDB(), chainID),
 				SequentialVerification(),
-				UpdatePeriod(0),
 			)
 
 			if tc.initErr {
@@ -163,9 +162,6 @@ func TestClient_SequentialVerification(t *testing.T) {
 			}
 
 			require.NoError(t, err)
-			err = c.Start()
-			require.NoError(t, err)
-			defer c.Stop()
 
 			_, err = c.VerifyHeaderAtHeight(3, bTime.Add(3*time.Hour))
 			if tc.verifyErr {
@@ -281,7 +277,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 				)},
 				dbs.New(dbm.NewMemDB(), chainID),
 				SkippingVerification(DefaultTrustLevel),
-				UpdatePeriod(0),
 			)
 			if tc.initErr {
 				require.Error(t, err)
@@ -289,9 +284,6 @@ func TestClient_SkippingVerification(t *testing.T) {
 			}
 
 			require.NoError(t, err)
-			err = c.Start()
-			require.NoError(t, err)
-			defer c.Stop()
 
 			_, err = c.VerifyHeaderAtHeight(3, bTime.Add(3*time.Hour))
 			if tc.verifyErr {
@@ -429,9 +421,6 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
 
 		// Check we still have the 1st header (+header+).
 		h, err := c.TrustedHeader(1)
@@ -483,9 +472,6 @@ func TestClientRestoresTrustedHeaderAfterStartup2(t *testing.T) {
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
 
 		// Check we no longer have the invalid 1st header (+header+).
 		h, err := c.TrustedHeader(1)
@@ -520,9 +506,6 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
 
 		// Check we still have the 1st header (+header+).
 		h, err := c.TrustedHeader(1)
@@ -584,9 +567,6 @@ func TestClientRestoresTrustedHeaderAfterStartup3(t *testing.T) {
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
-		err = c.Start()
-		require.NoError(t, err)
-		defer c.Stop()
 
 		// Check we have swapped invalid 1st header (+header+) with correct one (+header1+).
 		h, err := c.TrustedHeader(1)
@@ -622,9 +602,6 @@ func TestClient_Update(t *testing.T) {
 		Logger(log.TestingLogger()),
 	)
 	require.NoError(t, err)
-	err = c.Start()
-	require.NoError(t, err)
-	defer c.Stop()
 
 	// should result in downloading & verifying header #3
 	err = c.Update(bTime.Add(2 * time.Hour))
@@ -649,13 +626,9 @@ func TestClient_Concurrency(t *testing.T) {
 		fullNode,
 		[]provider.Provider{fullNode},
 		dbs.New(dbm.NewMemDB(), chainID),
-		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
 	)
 	require.NoError(t, err)
-	err = c.Start()
-	require.NoError(t, err)
-	defer c.Stop()
 
 	_, err = c.VerifyHeaderAtHeight(2, bTime.Add(2*time.Hour))
 	require.NoError(t, err)
@@ -697,7 +670,6 @@ func TestClientReplacesPrimaryWithWitnessIfPrimaryIsUnavailable(t *testing.T) {
 		deadNode,
 		[]provider.Provider{fullNode, fullNode},
 		dbs.New(dbm.NewMemDB(), chainID),
-		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
 		MaxRetryAttempts(1),
 	)
@@ -722,7 +694,6 @@ func TestClient_BackwardsVerification(t *testing.T) {
 			fullNode,
 			[]provider.Provider{fullNode},
 			dbs.New(dbm.NewMemDB(), chainID),
-			UpdatePeriod(0),
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
@@ -755,7 +726,6 @@ func TestClient_BackwardsVerification(t *testing.T) {
 			fullNode,
 			[]provider.Provider{fullNode},
 			dbs.New(dbm.NewMemDB(), chainID),
-			UpdatePeriod(0),
 			Logger(log.TestingLogger()),
 		)
 		require.NoError(t, err)
@@ -807,7 +777,6 @@ func TestClient_BackwardsVerification(t *testing.T) {
 				tc.provider,
 				[]provider.Provider{tc.provider},
 				dbs.New(dbm.NewMemDB(), chainID),
-				UpdatePeriod(0),
 				Logger(log.TestingLogger()),
 			)
 			require.NoError(t, err)
@@ -854,7 +823,6 @@ func TestNewClientErrorsIfAllWitnessesUnavailable(t *testing.T) {
 		fullNode,
 		[]provider.Provider{deadNode, deadNode},
 		dbs.New(dbm.NewMemDB(), chainID),
-		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
 		MaxRetryAttempts(1),
 	)
@@ -898,7 +866,6 @@ func TestClientRemovesWitnessIfItSendsUsIncorrectHeader(t *testing.T) {
 		fullNode,
 		[]provider.Provider{badProvider1, badProvider2},
 		dbs.New(dbm.NewMemDB(), chainID),
-		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
 		MaxRetryAttempts(1),
 	)
@@ -926,7 +893,6 @@ func TestClientTrustedValidatorSet(t *testing.T) {
 		fullNode,
 		[]provider.Provider{fullNode},
 		dbs.New(dbm.NewMemDB(), chainID),
-		UpdatePeriod(0),
 		Logger(log.TestingLogger()),
 	)
 
diff --git a/lite2/doc.go b/lite2/doc.go
index aa280e64f..b61f5453f 100644
--- a/lite2/doc.go
+++ b/lite2/doc.go
@@ -65,33 +65,29 @@ Example usage:
 
 		db, err := dbm.NewGoLevelDB("lite-client-db", dbDir)
 		if err != nil {
-			// return err
-			t.Fatal(err)
+			// handle error
 		}
-		c, err := NewClient(
+
+		c, err := NewHTTPClient(
 			chainID,
 			TrustOptions{
 				Period: 504 * time.Hour, // 21 days
 				Height: 100,
 				Hash:   header.Hash(),
 			},
-			httpp.New(chainID, "tcp://localhost:26657"),
-			[]provider.Provider{httpp.New(chainID, "tcp://witness1:26657")},
-			dbs.New(db, chainID),
+			"http://localhost:26657",
+			[]string{"http://witness1:26657"},
+			dbs.New(db, ""),
 		)
-
-		err = c.Start()
-		if err != nil {
-			// return err
-			t.Fatal(err)
-		}
-		defer c.Stop()
-
-		h, err := c.TrustedHeader(101)
 		if err != nil {
 			// handle error
 		}
-		fmt.Println("got header", h)
+
+		h, err := c.TrustedHeader(100)
+		if err != nil {
+			// handle error
+		}
+		fmt.Println("header", h)
 
 Check out other examples in example_test.go
 
diff --git a/lite2/example_test.go b/lite2/example_test.go
index e6839386f..34889ef98 100644
--- a/lite2/example_test.go
+++ b/lite2/example_test.go
@@ -58,18 +58,12 @@ func ExampleClient_Update() {
 		primary,
 		[]provider.Provider{primary}, // NOTE: primary should not be used here
 		dbs.New(db, chainID),
-		UpdatePeriod(0), // NOTE: value should be greater than zero
 		// Logger(log.TestingLogger()),
 	)
 	if err != nil {
 		stdlog.Fatal(err)
 	}
-	err = c.Start()
-	if err != nil {
-		stdlog.Fatal(err)
-	}
 	defer func() {
-		c.Stop()
 		c.Cleanup()
 	}()
 
@@ -78,6 +72,7 @@ func ExampleClient_Update() {
 	// XXX: 30 * time.Minute clock drift is needed because a) Tendermint strips
 	// monotonic component (see types/time/time.go) b) single instance is being
 	// run.
+	// https://github.com/tendermint/tendermint/issues/4489
 	err = c.Update(time.Now().Add(30 * time.Minute))
 	if err != nil {
 		stdlog.Fatal(err)
@@ -137,7 +132,6 @@ func ExampleClient_VerifyHeaderAtHeight() {
 		primary,
 		[]provider.Provider{primary}, // NOTE: primary should not be used here
 		dbs.New(db, chainID),
-		UpdatePeriod(0),
 		// Logger(log.TestingLogger()),
 	)
 	if err != nil {
diff --git a/lite2/rpc/client.go b/lite2/rpc/client.go
index b59d459bc..abd15adc2 100644
--- a/lite2/rpc/client.go
+++ b/lite2/rpc/client.go
@@ -322,20 +322,8 @@ func (c *Client) UnsubscribeAll(ctx context.Context, subscriber string) error {
 }
 
 func (c *Client) updateLiteClientIfNeededTo(height int64) (*types.SignedHeader, error) {
-	lastTrustedHeight, err := c.lc.LastTrustedHeight()
-	if err != nil {
-		return nil, errors.Wrap(err, "LastTrustedHeight")
-	}
-
-	if lastTrustedHeight < height {
-		return c.lc.VerifyHeaderAtHeight(height, time.Now())
-	}
-
-	h, err := c.lc.TrustedHeader(height)
-	if err != nil {
-		return nil, errors.Wrapf(err, "TrustedHeader(#%d)", height)
-	}
-	return h, nil
+	h, err := c.lc.VerifyHeaderAtHeight(height, time.Now())
+	return h, errors.Wrapf(err, "failed to update light client to %d", height)
 }
 
 func (c *Client) RegisterOpDecoder(typ string, dec merkle.OpDecoder) {

From d3f965ba68fa39af56793bc78a9d4bcdd6c57551 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 6 Mar 2020 17:10:28 +0400
Subject: [PATCH 67/74] lite2: indicate success/failure of Update (#4536)

error itself is not enough since it only signals if there were any
errors. Either (types.SignedHeader) or (success bool) is needed to
indicate the status of the operation. Returning a header is optimal
since most of the clients will want to get a newly verified header
anyway.
---
 docs/architecture/adr-042-state-sync.md         |  9 ++++-----
 .../adr-046-light-client-implementation.md      | 10 +++++-----
 lite2/client.go                                 | 17 +++++++++--------
 lite2/client_test.go                            | 12 +++++-------
 lite2/example_test.go                           |  9 ++-------
 5 files changed, 25 insertions(+), 32 deletions(-)

diff --git a/docs/architecture/adr-042-state-sync.md b/docs/architecture/adr-042-state-sync.md
index d525a4974..89d95f2e4 100644
--- a/docs/architecture/adr-042-state-sync.md
+++ b/docs/architecture/adr-042-state-sync.md
@@ -34,7 +34,7 @@ across different criteria:
 
 ### Implementation Question
 * What is the format of a snapshot
-    * Complete snapshot 
+    * Complete snapshot
     * Ordered IAVL key ranges
     * Compressed individually chunks which can be validated
 * How is data validated
@@ -58,7 +58,7 @@ request time. This solution would create an auxiliary data structure
 optimized for batch read/writes.
 
 Additionally the propsosals tend to vary on how they provide safety
-properties. 
+properties.
 
 **LightClient** Where a client can aquire the merkle root from the block
 headers synchronized from a trusted validator set. Subsets of the application state,
@@ -70,7 +70,7 @@ downloaded and compared against versions provided by a majority of
 peers.
 
 #### Lazy StateSync
-An [initial specification](https://docs.google.com/document/d/15MFsQtNA0MGBv7F096FFWRDzQ1vR6_dics5Y49vF8JU/edit?ts=5a0f3629) was published by Alexis Sellier.
+An initial specification was published by Alexis Sellier.
 In this design, the state has a given `size` of primitive elements (like
 keys or nodes), each element is assigned a number from 0 to `size-1`,
 and chunks consists of a range of such elements.  Ackratos raised
@@ -104,7 +104,7 @@ chunks and snappy compressed. Hashes of snappy compressed chunks are stored in a
 manifest file which co-ordinates the state-sync. Obtaining a correct manifest
 file seems to require an honest majority of peers. This means you may not find
 out the state is incorrect until you download the whole thing and compare it
-with a verified block header. 
+with a verified block header.
 
 A similar solution was implemented by Binance in
 [#3594](https://github.com/tendermint/tendermint/pull/3594)
@@ -229,7 +229,6 @@ Proposed
 
 ## References
 [sync: Sync current state without full replay for Applications](https://github.com/tendermint/tendermint/issues/828) - original issue
-[tendermint state sync proposal](https://docs.google.com/document/d/15MFsQtNA0MGBv7F096FFWRDzQ1vR6_dics5Y49vF8JU/edit?ts=5a0f3629) - Cloudhead proposal
 [tendermint state sync proposal 2](https://docs.google.com/document/d/1npGTAa1qxe8EQZ1wG0a0Sip9t5oX2vYZNUDwr_LVRR4/edit) - ackratos proposal
 [proposal 2 implementation](https://github.com/tendermint/tendermint/pull/3243)  - ackratos implementation
 [WIP General/Lazy State-Sync pseudo-spec](https://github.com/tendermint/tendermint/issues/3639) - Jae Proposal
diff --git a/docs/architecture/adr-046-light-client-implementation.md b/docs/architecture/adr-046-light-client-implementation.md
index aa7df3450..37a7c83c5 100644
--- a/docs/architecture/adr-046-light-client-implementation.md
+++ b/docs/architecture/adr-046-light-client-implementation.md
@@ -15,7 +15,10 @@ latest header from primary and compares it with the currently trusted one.
 
 ```go
 type Client interface {
-	Cleanup() error
+	// verify new headers
+	VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error)
+	VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error
+	Update(now time.Time) (*types.SignedHeader, error)
 
 	// get trusted headers & validators
 	TrustedHeader(height int64) (*types.SignedHeader, error)
@@ -28,10 +31,7 @@ type Client interface {
 	Primary() provider.Provider
 	Witnesses() []provider.Provider
 
-	// verify new headers
-	VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error)
-	VerifyHeader(newHeader *types.SignedHeader, newVals *types.ValidatorSet, now time.Time) error
-	Update(now time.Time) error
+	Cleanup() error
 }
 ```
 
diff --git a/lite2/client.go b/lite2/client.go
index b353f70d8..2eefd472d 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -895,33 +895,34 @@ func (c *Client) removeWitness(idx int) {
 }
 
 // Update attempts to advance the state by downloading the latest header and
-// comparing it with the existing one.
-func (c *Client) Update(now time.Time) error {
+// comparing it with the existing one. It returns a new header on a successful
+// update. Otherwise, it returns nil (plus an error, if any).
+func (c *Client) Update(now time.Time) (*types.SignedHeader, error) {
 	lastTrustedHeight, err := c.LastTrustedHeight()
 	if err != nil {
-		return errors.Wrap(err, "can't get last trusted height")
+		return nil, errors.Wrap(err, "can't get last trusted height")
 	}
 
 	if lastTrustedHeight == -1 {
 		// no headers yet => wait
-		return nil
+		return nil, nil
 	}
 
 	latestHeader, latestVals, err := c.fetchHeaderAndValsAtHeight(0)
 	if err != nil {
-		return errors.Wrapf(err, "can't get latest header and vals")
+		return nil, errors.Wrapf(err, "can't get latest header and vals")
 	}
 
 	if latestHeader.Height > lastTrustedHeight {
 		err = c.VerifyHeader(latestHeader, latestVals, now)
 		if err != nil {
-			return err
+			return nil, err
 		}
-
 		c.logger.Info("Advanced to new state", "height", latestHeader.Height, "hash", hash2str(latestHeader.Hash()))
+		return latestHeader, nil
 	}
 
-	return nil
+	return nil, nil
 }
 
 // replaceProvider takes the first alternative provider and promotes it as the
diff --git a/lite2/client_test.go b/lite2/client_test.go
index e9023c3ad..65ea55122 100644
--- a/lite2/client_test.go
+++ b/lite2/client_test.go
@@ -604,13 +604,11 @@ func TestClient_Update(t *testing.T) {
 	require.NoError(t, err)
 
 	// should result in downloading & verifying header #3
-	err = c.Update(bTime.Add(2 * time.Hour))
-	require.NoError(t, err)
-
-	h, err := c.TrustedHeader(3)
+	h, err := c.Update(bTime.Add(2 * time.Hour))
 	assert.NoError(t, err)
-	require.NotNil(t, h)
-	assert.EqualValues(t, 3, h.Height)
+	if assert.NotNil(t, h) {
+		assert.EqualValues(t, 3, h.Height)
+	}
 
 	valSet, _, err := c.TrustedValidatorSet(3)
 	assert.NoError(t, err)
@@ -675,7 +673,7 @@ func TestClientReplacesPrimaryWithWitnessIfPrimaryIsUnavailable(t *testing.T) {
 	)
 
 	require.NoError(t, err)
-	err = c.Update(bTime.Add(2 * time.Hour))
+	_, err = c.Update(bTime.Add(2 * time.Hour))
 	require.NoError(t, err)
 
 	assert.NotEqual(t, c.Primary(), deadNode)
diff --git a/lite2/example_test.go b/lite2/example_test.go
index 34889ef98..e8c3b8bb3 100644
--- a/lite2/example_test.go
+++ b/lite2/example_test.go
@@ -73,17 +73,12 @@ func ExampleClient_Update() {
 	// monotonic component (see types/time/time.go) b) single instance is being
 	// run.
 	// https://github.com/tendermint/tendermint/issues/4489
-	err = c.Update(time.Now().Add(30 * time.Minute))
+	h, err := c.Update(time.Now().Add(30 * time.Minute))
 	if err != nil {
 		stdlog.Fatal(err)
 	}
 
-	h, err := c.TrustedHeader(0)
-	if err != nil {
-		stdlog.Fatal(err)
-	}
-
-	if h.Height > 2 {
+	if h != nil && h.Height > 2 {
 		fmt.Println("successful update")
 	} else {
 		fmt.Println("update failed")

From bc89aad16280a4b2429f3dd51b3a836042dbed66 Mon Sep 17 00:00:00 2001
From: Anton Kaliaev <anton.kalyaev@gmail.com>
Date: Fri, 6 Mar 2020 17:23:44 +0400
Subject: [PATCH 68/74] rpc: create buffered subscriptions on /subscribe
 (#4521)

Closes #3935
---
 CHANGELOG_PENDING.md |  1 +
 rpc/core/README.md   | 11 +++++++++++
 rpc/core/events.go   |  7 ++++++-
 3 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index 47ff5dfb1..31fa4dfe7 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -24,6 +24,7 @@ Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermi
 
 ### BUG FIXES:
 
+- [rpc] \#3935 Create buffered subscriptions on `/subscribe` (@melekes)
 - [rpc] [\#4493](https://github.com/tendermint/tendermint/pull/4493) Keep the original subscription "id" field when new RPCs come in (@michaelfig)
 - [rpc] [\#4437](https://github.com/tendermint/tendermint/pull/4437) Fix tx_search pagination with ordered results (@erikgrinaker)
 - [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
diff --git a/rpc/core/README.md b/rpc/core/README.md
index d767c5f71..f62d2dbf4 100644
--- a/rpc/core/README.md
+++ b/rpc/core/README.md
@@ -5,3 +5,14 @@
 Requests that return multiple items will be paginated to 30 items by default.
 You can specify further pages with the ?page parameter. You can also set a
 custom page size up to 100 with the ?per_page parameter.
+
+## Subscribing to events
+
+The user can subscribe to events emitted by Tendermint, using `/subscribe`. If
+the maximum number of clients is reached or the client has too many
+subscriptions, an error will be returned. The subscription timeout is 5 sec.
+Each subscription has a buffer to accommodate short bursts of events or some
+slowness in clients. If the buffer gets full, the subscription will be canceled
+("client is not pulling messages fast enough"). If Tendermint exits, all
+subscriptions are canceled ("Tendermint exited"). The user can unsubscribe
+using either `/unsubscribe` or `/unsubscribe_all`.
diff --git a/rpc/core/events.go b/rpc/core/events.go
index 165aa6e54..7802f160e 100644
--- a/rpc/core/events.go
+++ b/rpc/core/events.go
@@ -12,6 +12,11 @@ import (
 	rpctypes "github.com/tendermint/tendermint/rpc/lib/types"
 )
 
+const (
+	// Buffer on the Tendermint (server) side to allow some slowness in clients.
+	subBufferSize = 100
+)
+
 // Subscribe for events via WebSocket.
 // More: https://docs.tendermint.com/master/rpc/#/Websocket/subscribe
 func Subscribe(ctx *rpctypes.Context, query string) (*ctypes.ResultSubscribe, error) {
@@ -33,7 +38,7 @@ func Subscribe(ctx *rpctypes.Context, query string) (*ctypes.ResultSubscribe, er
 	subCtx, cancel := context.WithTimeout(ctx.Context(), SubscribeTimeout)
 	defer cancel()
 
-	sub, err := eventBus.Subscribe(subCtx, addr, q)
+	sub, err := eventBus.Subscribe(subCtx, addr, q, subBufferSize)
 	if err != nil {
 		return nil, err
 	}

From b6f0aa3a8874877771415d40f49798b16e86c3e5 Mon Sep 17 00:00:00 2001
From: Callum Waters <cmwaters19@gmail.com>
Date: Fri, 6 Mar 2020 20:05:20 +0100
Subject: [PATCH 69/74] lite2: replace primary when providing invalid header
 (#4523)

Closes: #4420

Created a new error ErrInvalidHeaderwhich can be formed during the verification process verifier.go and will result in the replacement of the primary provider with a witness by executing: replacePrimaryProvider()

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 go.sum                 | 10 -------
 lite2/client.go        | 67 ++++++++++++++++++++++++++++++------------
 lite2/errors.go        | 10 +++++++
 lite2/verifier.go      | 61 ++++++++++++++++++++++++++++----------
 lite2/verifier_test.go |  4 +--
 5 files changed, 106 insertions(+), 46 deletions(-)

diff --git a/go.sum b/go.sum
index 886eadee3..21cbdfc57 100644
--- a/go.sum
+++ b/go.sum
@@ -10,8 +10,6 @@ github.com/Shopify/sarama v1.19.0/go.mod h1:FVkBWblsNy7DGZRfXLU0O9RCGt5g3g3yEuWX
 github.com/Shopify/toxiproxy v2.1.4+incompatible/go.mod h1:OXgGpZ6Cli1/URJOF1DMxUHB2q5Ap20/P/eIdh4G0pI=
 github.com/VividCortex/gohistogram v1.0.0 h1:6+hBz+qvs0JOrrNhhmR7lFxo5sINxBCGXrdtl/UvroE=
 github.com/VividCortex/gohistogram v1.0.0/go.mod h1:Pf5mBqqDxYaXu3hDrrU+w6nw50o/4+TcAqDqk/vUH7g=
-github.com/Workiva/go-datastructures v1.0.50 h1:slDmfW6KCHcC7U+LP3DDBbm4fqTwZGn1beOFPfGaLvo=
-github.com/Workiva/go-datastructures v1.0.50/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
 github.com/Workiva/go-datastructures v1.0.51 h1:LJHjjfcv+1gH+1D1SgrjcrF8iSZkgsAdCjclvHvVecQ=
 github.com/Workiva/go-datastructures v1.0.51/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
 github.com/aead/siphash v1.0.1/go.mod h1:Nywa3cDsYNNK3gaciGTWPwHt0wlpNV15vwmswBAUSII=
@@ -132,8 +130,6 @@ github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5y
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2 h1:6nsPYzhq5kReh6QImI3k5qWzO4PEbvbIW2cwSfR/6xs=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
-github.com/golang/protobuf v1.3.3 h1:gyjaxf+svBWX08ZjK86iN9geUJF0H6gp2IRKX6Nf6/I=
-github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
 github.com/golang/protobuf v1.3.4 h1:87PNWwrRvUSnqS4dlcBU/ftvOIBep4sYuBLlh6rX2wk=
 github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
 github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
@@ -386,22 +382,16 @@ github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXf
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0 h1:2E4SXV/wtOkTonXsotYi4li6zVWxYlZuYNCXe9XRJyk=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
-github.com/stretchr/testify v1.5.0 h1:DMOzIV76tmoDNE9pX6RSN0aDtCYeCg5VueieJaAo1uw=
-github.com/stretchr/testify v1.5.0/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4=
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/subosito/gotenv v1.2.0 h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=
 github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
 github.com/syndtr/goleveldb v1.0.1-0.20190923125748-758128399b1d h1:gZZadD8H+fF+n9CmNhYL1Y0dJB+kLOmKd7FbPJLeGHs=
 github.com/syndtr/goleveldb v1.0.1-0.20190923125748-758128399b1d/go.mod h1:9OrXJhf154huy1nPWmuSrkgjPUtUNhA+Zmy+6AESzuA=
-github.com/tecbot/gorocksdb v0.0.0-20191017175515-d217d93fd4c5 h1:gVwAW5OwaZlDB5/CfqcGFM9p9C+KxvQKyNOltQ8orj0=
-github.com/tecbot/gorocksdb v0.0.0-20191017175515-d217d93fd4c5/go.mod h1:ahpPrc7HpcfEWDQRZEmnXMzHY03mLDYMCxeDzy46i+8=
 github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c h1:g+WoO5jjkqGAzHWCjJB1zZfXPIAaDpzXIEJ0eS6B5Ok=
 github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c/go.mod h1:ahpPrc7HpcfEWDQRZEmnXMzHY03mLDYMCxeDzy46i+8=
 github.com/tendermint/go-amino v0.14.1 h1:o2WudxNfdLNBwMyl2dqOJxiro5rfrEaU0Ugs6offJMk=
 github.com/tendermint/go-amino v0.14.1/go.mod h1:i/UKE5Uocn+argJJBb12qTZsCDBcAYMbR92AaJVmKso=
-github.com/tendermint/tm-db v0.4.0 h1:iPbCcLbf4nwDFhS39Zo1lpdS1X/cT9CkTlUx17FHQgA=
-github.com/tendermint/tm-db v0.4.0/go.mod h1:+Cwhgowrf7NBGXmsqFMbwEtbo80XmyrlY5Jsk95JubQ=
 github.com/tendermint/tm-db v0.4.1 h1:TvX7JWjJOVZ+N3y+I86wddrGttOdMmmBxXcu0/Y7ZJ0=
 github.com/tendermint/tm-db v0.4.1/go.mod h1:JsJ6qzYkCGiGwm5GHl/H5GLI9XLb6qZX7PRe425dHAY=
 github.com/tmc/grpc-websocket-proxy v0.0.0-20170815181823-89b8d40f7ca8/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
diff --git a/lite2/client.go b/lite2/client.go
index 2eefd472d..22c080949 100644
--- a/lite2/client.go
+++ b/lite2/client.go
@@ -476,9 +476,10 @@ func (c *Client) ChainID() string {
 // and calls VerifyHeader. It returns header immediately if such exists in
 // trustedStore (no verification is needed).
 //
+// height must be > 0.
+//
 // It returns provider.ErrSignedHeaderNotFound if header is not found by
 // primary.
-// It returns ErrOldHeaderExpired if header expired.
 func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.SignedHeader, error) {
 	if height <= 0 {
 		return nil, errors.New("negative or zero height")
@@ -515,7 +516,10 @@ func (c *Client) VerifyHeaderAtHeight(height int64, now time.Time) (*types.Signe
 // intermediate headers will be requested. See the specification for details.
 // https://github.com/tendermint/spec/blob/master/spec/consensus/light-client.md
 //
-// It returns ErrOldHeaderExpired if newHeader expired.
+// It returns ErrOldHeaderExpired if the latest trusted header expired.
+//
+// If the primary provides an invalid header (ErrInvalidHeader), it is rejected
+// and replaced by another provider until all are exhausted.
 //
 // If, at any moment, SignedHeader or ValidatorSet are not found by the primary
 // provider, provider.ErrSignedHeaderNotFound /
@@ -676,7 +680,23 @@ func (c *Client) sequence(
 		err = VerifyAdjacent(c.chainID, trustedHeader, interimHeader, interimVals,
 			c.trustingPeriod, now)
 		if err != nil {
-			return errors.Wrapf(err, "failed to verify the header #%d", height)
+			err = errors.Wrapf(err, "verify adjacent from #%d to #%d failed",
+				trustedHeader.Height, interimHeader.Height)
+
+			switch errors.Cause(err).(type) {
+			case ErrInvalidHeader:
+				c.logger.Error("primary sent invalid header -> replacing", "err", err)
+				replaceErr := c.replacePrimaryProvider()
+				if replaceErr != nil {
+					c.logger.Error("Can't replace primary", "err", replaceErr)
+					return err // return original error
+				}
+				// attempt to verify header again
+				height--
+				continue
+			default:
+				return err
+			}
 		}
 
 		// 3) Update trustedHeader
@@ -729,8 +749,21 @@ func (c *Client) bisection(
 				return err
 			}
 
+		case ErrInvalidHeader:
+			c.logger.Error("primary sent invalid header -> replacing", "err", err)
+			replaceErr := c.replacePrimaryProvider()
+			if replaceErr != nil {
+				c.logger.Error("Can't replace primary", "err", replaceErr)
+				// return original error
+				return errors.Wrapf(err, "verify from #%d to #%d failed",
+					trustedHeader.Height, interimHeader.Height)
+			}
+			// attempt to verify the header again
+			continue
+
 		default:
-			return errors.Wrapf(err, "failed to verify the header #%d", newHeader.Height)
+			return errors.Wrapf(err, "verify from #%d to #%d failed",
+				trustedHeader.Height, interimHeader.Height)
 		}
 	}
 }
@@ -772,7 +805,9 @@ func (c *Client) fetchHeaderAndValsAtHeight(height int64) (*types.SignedHeader,
 	return h, vals, nil
 }
 
-// Backwards verification (see VerifyHeaderBackwards func in the spec)
+// backwards verification (see VerifyHeaderBackwards func in the spec) verifies
+// headers before a trusted header. If a sent header is invalid the primary is
+// replaced with another provider and the operation is repeated.
 func (c *Client) backwards(
 	initiallyTrustedHeader *types.SignedHeader,
 	newHeader *types.SignedHeader,
@@ -794,20 +829,14 @@ func (c *Client) backwards(
 			return errors.Wrapf(err, "failed to obtain the header at height #%d", trustedHeader.Height-1)
 		}
 
-		if err := interimHeader.ValidateBasic(c.chainID); err != nil {
-			return errors.Wrap(err, "untrustedHeader.ValidateBasic failed")
-		}
-
-		if !interimHeader.Time.Before(trustedHeader.Time) {
-			return errors.Errorf("expected older header time %v to be before newer header time %v",
-				interimHeader.Time,
-				trustedHeader.Time)
-		}
-
-		if !bytes.Equal(interimHeader.Hash(), trustedHeader.LastBlockID.Hash) {
-			return errors.Errorf("older header hash %X does not match trusted header's last block %X",
-				interimHeader.Hash(),
-				trustedHeader.LastBlockID.Hash)
+		if err := VerifyBackwards(c.chainID, interimHeader, trustedHeader); err != nil {
+			c.logger.Error("primary sent invalid header -> replacing", "err", err)
+			if replaceErr := c.replacePrimaryProvider(); replaceErr != nil {
+				c.logger.Error("Can't replace primary", "err", replaceErr)
+				// return original error
+				return errors.Wrapf(err, "verify backwards from %d to %d failed",
+					trustedHeader.Height, interimHeader.Height)
+			}
 		}
 
 		trustedHeader = interimHeader
diff --git a/lite2/errors.go b/lite2/errors.go
index d0b5d2d31..13a6cf29d 100644
--- a/lite2/errors.go
+++ b/lite2/errors.go
@@ -28,3 +28,13 @@ type ErrNewValSetCantBeTrusted struct {
 func (e ErrNewValSetCantBeTrusted) Error() string {
 	return fmt.Sprintf("cant trust new val set: %v", e.Reason)
 }
+
+// ErrInvalidHeader means the header either failed the basic validation or
+// commit is not signed by 2/3+.
+type ErrInvalidHeader struct {
+	Reason error
+}
+
+func (e ErrInvalidHeader) Error() string {
+	return fmt.Sprintf("invalid header: %v", e.Reason)
+}
diff --git a/lite2/verifier.go b/lite2/verifier.go
index 250c8b204..6d8459ab6 100644
--- a/lite2/verifier.go
+++ b/lite2/verifier.go
@@ -23,12 +23,12 @@ var (
 // VerifyNonAdjacent verifies non-adjacent untrustedHeader against
 // trustedHeader. It ensures that:
 //
-//	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned);
-//	b) untrustedHeader is valid;
+//	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned)
+//	b) untrustedHeader is valid (if not, ErrInvalidHeader is returned)
 //	c) trustLevel ([1/3, 1]) of trustedHeaderVals (or trustedHeaderNextVals)
-//  signed correctly (if not, ErrNewValSetCantBeTrusted is returned);
-//	d) more than 2/3 of untrustedVals have signed h2 (if not,
-//	   ErrNotEnoughVotingPowerSigned is returned);
+//  signed correctly (if not, ErrNewValSetCantBeTrusted is returned)
+//	d) more than 2/3 of untrustedVals have signed h2
+//    (otherwise, ErrInvalidHeader is returned)
 //  e) headers are non-adjacent.
 func VerifyNonAdjacent(
 	chainID string,
@@ -49,7 +49,7 @@ func VerifyNonAdjacent(
 	}
 
 	if err := verifyNewHeaderAndVals(chainID, untrustedHeader, untrustedVals, trustedHeader, now); err != nil {
-		return err
+		return ErrInvalidHeader{err}
 	}
 
 	// Ensure that +`trustLevel` (default 1/3) or more of last trusted validators signed correctly.
@@ -67,11 +67,11 @@ func VerifyNonAdjacent(
 	// Ensure that +2/3 of new validators signed correctly.
 	//
 	// NOTE: this should always be the last check because untrustedVals can be
-	// intentionaly made very large to DOS the light client. not the case for
+	// intentionally made very large to DOS the light client. not the case for
 	// VerifyAdjacent, where validator set is known in advance.
 	if err := untrustedVals.VerifyCommit(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
 		untrustedHeader.Commit); err != nil {
-		return err
+		return ErrInvalidHeader{err}
 	}
 
 	return nil
@@ -80,11 +80,11 @@ func VerifyNonAdjacent(
 // VerifyAdjacent verifies directly adjacent untrustedHeader against
 // trustedHeader. It ensures that:
 //
-//	a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned);
-//	b) untrustedHeader is valid;
-//	c) untrustedHeader.ValidatorsHash equals trustedHeader.NextValidatorsHash;
-//	d) more than 2/3 of new validators (untrustedVals) have signed h2 (if not,
-//	   ErrNotEnoughVotingPowerSigned is returned);
+//  a) trustedHeader can still be trusted (if not, ErrOldHeaderExpired is returned)
+//  b) untrustedHeader is valid (if not, ErrInvalidHeader is returned)
+//  c) untrustedHeader.ValidatorsHash equals trustedHeader.NextValidatorsHash
+//  d) more than 2/3 of new validators (untrustedVals) have signed h2
+//    (otherwise, ErrInvalidHeader is returned)
 //  e) headers are adjacent.
 func VerifyAdjacent(
 	chainID string,
@@ -103,7 +103,7 @@ func VerifyAdjacent(
 	}
 
 	if err := verifyNewHeaderAndVals(chainID, untrustedHeader, untrustedVals, trustedHeader, now); err != nil {
-		return err
+		return ErrInvalidHeader{err}
 	}
 
 	// Check the validator hashes are the same
@@ -118,7 +118,7 @@ func VerifyAdjacent(
 	// Ensure that +2/3 of new validators signed correctly.
 	if err := untrustedVals.VerifyCommit(chainID, untrustedHeader.Commit.BlockID, untrustedHeader.Height,
 		untrustedHeader.Commit); err != nil {
-		return err
+		return ErrInvalidHeader{err}
 	}
 
 	return nil
@@ -200,3 +200,34 @@ func HeaderExpired(h *types.SignedHeader, trustingPeriod time.Duration, now time
 	expirationTime := h.Time.Add(trustingPeriod)
 	return !expirationTime.After(now)
 }
+
+// VerifyBackwards verifies an untrusted header with a height one less than
+// that of an adjacent trusted header. It ensures that:
+//
+// 	a) untrusted header is valid
+//  b) untrusted header has a time before the trusted header
+//  c) that the LastBlockID hash of the trusted header is the same as the hash
+//  of the trusted header
+//
+//  For any of these cases ErrInvalidHeader is returned.
+func VerifyBackwards(chainID string, untrustedHeader, trustedHeader *types.SignedHeader) error {
+	if err := untrustedHeader.ValidateBasic(chainID); err != nil {
+		return ErrInvalidHeader{err}
+	}
+
+	if !untrustedHeader.Time.Before(trustedHeader.Time) {
+		return ErrInvalidHeader{
+			errors.Errorf("expected older header time %v to be before new header time %v",
+				untrustedHeader.Time,
+				trustedHeader.Time)}
+	}
+
+	if !bytes.Equal(untrustedHeader.Hash(), trustedHeader.LastBlockID.Hash) {
+		return ErrInvalidHeader{
+			errors.Errorf("older header hash %X does not match trusted header's last block %X",
+				untrustedHeader.Hash(),
+				trustedHeader.LastBlockID.Hash)}
+	}
+
+	return nil
+}
diff --git a/lite2/verifier_test.go b/lite2/verifier_test.go
index 241d33b05..adc671516 100644
--- a/lite2/verifier_test.go
+++ b/lite2/verifier_test.go
@@ -113,7 +113,7 @@ func TestVerifyAdjacentHeaders(t *testing.T) {
 			vals,
 			3 * time.Hour,
 			bTime.Add(2 * time.Hour),
-			types.ErrNotEnoughVotingPowerSigned{Got: 50, Needed: 93},
+			ErrInvalidHeader{Reason: types.ErrNotEnoughVotingPowerSigned{Got: 50, Needed: 93}},
 			"",
 		},
 		// vals does not match with what we have -> error
@@ -227,7 +227,7 @@ func TestVerifyNonAdjacentHeaders(t *testing.T) {
 			vals,
 			3 * time.Hour,
 			bTime.Add(2 * time.Hour),
-			types.ErrNotEnoughVotingPowerSigned{Got: 50, Needed: 93},
+			ErrInvalidHeader{types.ErrNotEnoughVotingPowerSigned{Got: 50, Needed: 93}},
 			"",
 		},
 		// 3/3 new vals signed, 2/3 old vals present -> no error

From f17717f3a3044d70ac36059a230e7e1eb22e9b9e Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Mon, 9 Mar 2020 09:44:37 +0100
Subject: [PATCH 70/74] adr: crypto encoding for proto (#4481)

* adr: crypto encoding for proto work

- this adr is meant to help with deciding on how to move forward with keys in tendermint.

* minor change

* fix gomod

* add a third option

* fix spelling

* add first part of descision

* breakdown keys and where they are used

* add some wording

* minor wording fix

* question

* change proto messages

* minor update

* undo go.mod changes

* add a few things based on comemnts

* push, push it real good

* minor explanation on interface type

* touch up
---
 docs/architecture/README.md                   |  2 +
 .../architecture/adr-054-crypto-encoding-2.md | 83 +++++++++++++++++++
 docs/architecture/adr-template.md             | 16 ++--
 go.sum                                        |  3 +
 4 files changed, 97 insertions(+), 7 deletions(-)
 create mode 100644 docs/architecture/adr-054-crypto-encoding-2.md

diff --git a/docs/architecture/README.md b/docs/architecture/README.md
index b571564d5..9f754fd37 100644
--- a/docs/architecture/README.md
+++ b/docs/architecture/README.md
@@ -70,3 +70,5 @@ Note the context/background should be written in the present tense.
 - [ADR-047-Handling-Evidence-From-Light-Client](./adr-047-handling-evidence-from-light-client.md)
 - [ADR-051-Double-Signing-Risk-Reduction](./adr-051-double-signing-risk-reduction.md)
 - [ADR-052-Tendermint-Mode](./adr-052-tendermint-mode.md)
+- [ADR-053-State-Sync-Prototype](./adr-053-state-sync-prototype.md)
+- [ADR-054-crypto-encoding-2](./adr-054-crypto-encoding-2.md)
diff --git a/docs/architecture/adr-054-crypto-encoding-2.md b/docs/architecture/adr-054-crypto-encoding-2.md
new file mode 100644
index 000000000..9ec05f229
--- /dev/null
+++ b/docs/architecture/adr-054-crypto-encoding-2.md
@@ -0,0 +1,83 @@
+# ADR 054: Crypto encoding (part 2)
+
+## Changelog
+
+\*2020-2-27: Created
+
+## Context
+
+Amino has been a pain point of many users in the ecosystem. While Tendermint does not suffer greatly from the performance degradation introduced by amino, we are making an effort in moving the encoding format to a widely adopted format, [Protocol Buffers](https://developers.google.com/protocol-buffers). With this migration a new standard is needed for the encoding of keys. This will cause ecosystem wide breaking changes.
+
+Currently amino encodes keys as `<PrefixBytes> <Length> <ByteArray>`.
+
+## Decision
+
+When using the `oneof` protobuf type there are many times where one will have to manually switch over the possible messages and then pass them to the interface which is needed. By transitioning from a fixed size byte array (`[size]byte`) to byte slice's (`[]byte`) then this would enable the usage of the [cosmos-proto's](hhttps://github.com/regen-network/cosmos-proto#interface_type) interface type, which will generate these switch statements.
+
+The approach that will be taken to minimize headaches for users is one where all encoding of keys will shift to protobuf and where amino encoding is relied on, there will be custom marshal and unmarshal functions.
+
+Protobuf messages:
+
+```proto
+message PubKey {
+  option (cosmos_proto.interface_type) = "*github.com/tendermint/tendermint/crypto.PubKey";
+  oneof key {
+    bytes ed25519 = 1
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/ed25519.PubKey"];
+    bytes secp256k1 = 2
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/secp256k1.PubKey"];
+    bytes sr25519 = 3
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/sr25519.PubKey"];
+    PubKeyMultiSigThreshold multisig = 4
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/multisig.PubKeyMultisigThreshold"];;
+  }
+
+message PrivKey {
+  option (cosmos_proto.interface_type) = "github.com/tendermint/tendermint/crypto.PrivKey";
+  oneof sum {
+    bytes ed25519 = 1
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/ed25519.PrivKey"];
+    bytes secp256k1 = 2
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/secp256k1.PrivKey"];
+    bytes sr25519 = 3
+        [(gogoproto.casttype) = "github.com/tendermint/tendermint/crypto/sr25519.PrivKey"];;
+  }
+}
+```
+
+> Note: The places where backwards compatibility is needed is still unclear.
+
+All modules currently do not rely on amino encoded bytes and keys are not amino encoded for genesis, therefore a hardfork upgrade is what will be needed to adopt these changes.
+
+This work will be broken out into a few PRs, this work will be merged into a proto-breakage branch, all PRs will be reviewed prior to being merged:
+
+1. Encoding of keys to protobuf and protobuf messages
+2. Move Tendermint types to protobuf, mainly the ones that are being encoded.
+3. Go one by one through the reactors and transition amino encoded messages to protobuf.
+4. Test with cosmos-sdk and/or testnets repo.
+
+## Status
+
+Proposed
+
+## Consequences
+
+- Move keys to protobuf encoding, where backwards compatibility is needed, amino marshal and unmarshal functions will be used.
+
+### Positive
+
+- Protocol Buffer encoding will not change going forward.
+- Removing amino overhead from keys will help with the KSM.
+- Have a large ecosystem of supported languages.
+
+### Negative
+
+- Hardfork is required to integrate this into running chains.
+
+### Neutral
+
+## References
+
+> Are there any relevant PR comments, issues that led up to this, or articles referenced for why we made the given design choice? If so link them here!
+
+- {reference link}
diff --git a/docs/architecture/adr-template.md b/docs/architecture/adr-template.md
index 28a5ecfbb..759fc6d72 100644
--- a/docs/architecture/adr-template.md
+++ b/docs/architecture/adr-template.md
@@ -1,17 +1,19 @@
 # ADR {ADR-NUMBER}: {TITLE}
 
 ## Changelog
-* {date}: {changelog}
+
+- {date}: {changelog}
 
 ## Context
 
-> This section contains all the context one needs to understand the current state, and why there is a problem. It should be as succinct as possible and introduce the high level idea behind the solution. 
+> This section contains all the context one needs to understand the current state, and why there is a problem. It should be as succinct as possible and introduce the high level idea behind the solution.
+
 ## Decision
 
 > This section explains all of the details of the proposed solution, including implementation details.
-It should also describe affects / corollary items that may need to be changed as a part of this.
-If the proposed change will be large, please also indicate a way to do the change to maximize ease of review.
-(e.g. the optimal split of things to do between separate PR's)
+> It should also describe affects / corollary items that may need to be changed as a part of this.
+> If the proposed change will be large, please also indicate a way to do the change to maximize ease of review.
+> (e.g. the optimal split of things to do between separate PR's)
 
 ## Status
 
@@ -31,6 +33,6 @@ If the proposed change will be large, please also indicate a way to do the chang
 
 ## References
 
-> Are there any relevant PR comments, issues that led up to this, or articles referrenced for why we made the given design choice? If so link them here!
+> Are there any relevant PR comments, issues that led up to this, or articles referenced for why we made the given design choice? If so link them here!
 
-* {reference link}
+- {reference link}
diff --git a/go.sum b/go.sum
index 21cbdfc57..1fa4c0054 100644
--- a/go.sum
+++ b/go.sum
@@ -34,6 +34,7 @@ github.com/beorn7/perks v1.0.0 h1:HWo1m869IqiPhD389kmkxeTalrjNbbJTC8LXupb+sl0=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
+github.com/bgentry/speakeasy v0.1.0 h1:ByYyxL9InA1OWqxJqqp2A5pYHUrCiAL6K3J+LKSsQkY=
 github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
 github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d h1:xG8Pj6Y6J760xwETNmMzmlt38QSwz0BLp1cZ09g27uw=
 github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d/go.mod h1:d3C0AkH6BRcvO8T0UEPu53cnw4IbV63x1bEjildYhO0=
@@ -152,6 +153,7 @@ github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1 h1:EGx4pi6eqNxGa
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
 github.com/gorilla/context v1.1.1/go.mod h1:kBGZzfjB9CEq2AlWe17Uuf7NDRt0dE0s8S51q0aT7Yg=
 github.com/gorilla/mux v1.6.2/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
+github.com/gorilla/mux v1.7.3 h1:gnP5JzjVOuiZD07fKKToCAOjS0yOpj/qPETTXCCS6hw=
 github.com/gorilla/mux v1.7.3/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs=
 github.com/gorilla/websocket v0.0.0-20170926233335-4201258b820c/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
 github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
@@ -238,6 +240,7 @@ github.com/mimoo/StrobeGo v0.0.0-20181016162300-f8f6d4d2b643 h1:hLDRPB66XQT/8+wG
 github.com/mimoo/StrobeGo v0.0.0-20181016162300-f8f6d4d2b643/go.mod h1:43+3pMjjKimDBf5Kr4ZFNGbLql1zKkbImw+fZbw3geM=
 github.com/mitchellh/cli v1.0.0/go.mod h1:hNIlj7HEI86fIcpObd7a0FcrxTWetlwJDGcceTlRvqc=
 github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
+github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
 github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=

From 73c19bd6ac367e1a4a473f56fea4cfdbe0a37039 Mon Sep 17 00:00:00 2001
From: Tess Rinearson <tess.rinearson@gmail.com>
Date: Mon, 9 Mar 2020 18:52:08 +0100
Subject: [PATCH 71/74] CONTRIBUTING: include instructions for installing
 protobuf

---
 CONTRIBUTING.md | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 623cfb53a..6e6897ffa 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -100,7 +100,25 @@ specify exactly the dependency you want to update, eg.
 
 ## Protobuf
 
-When working with [protobuf](https://developers.google.com/protocol-buffers) there are a few things you should know. We use [buf](https://buf.build/) for our linting and breaking changes checking. If you would like to run linting and check if the changes you have made are breaking then you will have to install the needed dependencies with `make buf`. Then the linting cmd will be `make proto-lint` and the breaking changes check will be `make proto-check-breaking`. To generate new stubs based off of your changes you can run `make proto-gen` (you can do this outside of GOPATH).
+We use [Protocol Buffers](https://developers.google.com/protocol-buffers) along with [gogoproto](https://github.com/gogo/protobuf) to generate code for use across Tendermint Core.
+
+For linting and checking breaking changes, we use [buf](https://buf.build/). If you would like to run linting and check if the changes you have made are breaking then you will have to install the needed dependencies with `make buf`. Then the linting cmd will be `make proto-lint` and the breaking changes check will be `make proto-check-breaking`.
+
+To generate new stubs based off of your changes you can run `make proto-gen` after installing `protoc` and gogoproto.
+
+### Installation Instructions
+
+To install `protoc`, download an appropriate release (https://github.com/protocolbuffers/protobuf) and then move the provided binaries into your PATH (follow instructions in README included with the download).
+
+To install `gogoproto`, do the following:
+
+```sh
+$ go get github.com/gogo/protobuf/gogoproto
+$ cd $GOPATH/pkg/mod/github.com/gogo/protobuf@v1.3.1 # or wherever go get installs things
+$ make install
+```
+
+You should now be able to run `make proto-gen` from inside the root Tendermint directory to generate new files from proto files.
 
 ## Vagrant
 

From cb8a2cc67f5d7f34d3d83634b8c1760225256e42 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
 <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Tue, 10 Mar 2020 15:29:31 +0000
Subject: [PATCH 72/74] build(deps): bump github.com/Workiva/go-datastructures
 (#4545)

Bumps [github.com/Workiva/go-datastructures](https://github.com/Workiva/go-datastructures) from 1.0.51 to 1.0.52.
- [Release notes](https://github.com/Workiva/go-datastructures/releases)
- [Commits](https://github.com/Workiva/go-datastructures/compare/v1.0.51...v1.0.52)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 5af1190cf..9e916e7e8 100644
--- a/go.mod
+++ b/go.mod
@@ -4,7 +4,7 @@ go 1.13
 
 require (
 	github.com/ChainSafe/go-schnorrkel v0.0.0-20200102211924-4bcbc698314f
-	github.com/Workiva/go-datastructures v1.0.51
+	github.com/Workiva/go-datastructures v1.0.52
 	github.com/btcsuite/btcd v0.0.0-20190115013929-ed77733ec07d
 	github.com/btcsuite/btcutil v0.0.0-20180706230648-ab6388e0c60a
 	github.com/fortytw2/leaktest v1.3.0
diff --git a/go.sum b/go.sum
index 1fa4c0054..6b5a1cf49 100644
--- a/go.sum
+++ b/go.sum
@@ -12,6 +12,8 @@ github.com/VividCortex/gohistogram v1.0.0 h1:6+hBz+qvs0JOrrNhhmR7lFxo5sINxBCGXrd
 github.com/VividCortex/gohistogram v1.0.0/go.mod h1:Pf5mBqqDxYaXu3hDrrU+w6nw50o/4+TcAqDqk/vUH7g=
 github.com/Workiva/go-datastructures v1.0.51 h1:LJHjjfcv+1gH+1D1SgrjcrF8iSZkgsAdCjclvHvVecQ=
 github.com/Workiva/go-datastructures v1.0.51/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
+github.com/Workiva/go-datastructures v1.0.52 h1:PLSK6pwn8mYdaoaCZEMsXBpBotr4HHn9abU0yMQt0NI=
+github.com/Workiva/go-datastructures v1.0.52/go.mod h1:Z+F2Rca0qCsVYDS8z7bAGm8f3UkzuWYS/oBZz5a7VVA=
 github.com/aead/siphash v1.0.1/go.mod h1:Nywa3cDsYNNK3gaciGTWPwHt0wlpNV15vwmswBAUSII=
 github.com/afex/hystrix-go v0.0.0-20180502004556-fa1af6a1f4f5/go.mod h1:SkGFH1ia65gfNATL8TAiHDNxPzPdmEL5uirI2Uyuz6c=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=

From 31bea92d127a40a14174611c27bb7e6dd66ca3c9 Mon Sep 17 00:00:00 2001
From: Tess Rinearson <tess.rinearson@gmail.com>
Date: Tue, 10 Mar 2020 21:34:44 +0100
Subject: [PATCH 73/74] libs/kv: remove unused type KI64Pair (#4542)

---
 CHANGELOG_PENDING.md    |   1 +
 libs/kv/kvpair.go       |  29 ----
 libs/kv/result.go       |  11 --
 libs/kv/types.pb.go     | 296 ++--------------------------------------
 libs/kv/types.proto     |   7 -
 libs/kv/typespb_test.go | 124 -----------------
 6 files changed, 13 insertions(+), 455 deletions(-)

diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index 31fa4dfe7..aa0c0c41f 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -21,6 +21,7 @@ Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermi
 - [types] [\#4417](https://github.com/tendermint/tendermint/issues/4417) VerifyCommitX() functions should return as soon as +2/3 threashold is reached.
 - [examples/kvstore] [\#4509](https://github.com/tendermint/tendermint/pull/4509) ABCI query now returns the proper height (@erikgrinaker)
 - [cmd] \#4515 Change `tendermint debug dump` sub-command archives filename's format (@melekes)
+- [libs/kv]: [\#4542](https://github.com/tendermint/tendermint/pull/4542) remove unused type KI64Pair (@tessr)
 
 ### BUG FIXES:
 
diff --git a/libs/kv/kvpair.go b/libs/kv/kvpair.go
index 3007c0272..8eebae606 100644
--- a/libs/kv/kvpair.go
+++ b/libs/kv/kvpair.go
@@ -36,32 +36,3 @@ func (kvs Pairs) Less(i, j int) bool {
 func (kvs Pairs) Swap(i, j int) { kvs[i], kvs[j] = kvs[j], kvs[i] }
 func (kvs Pairs) Sort()         { sort.Sort(kvs) }
 
-//----------------------------------------
-// KI64Pair
-
-/*
-Defined in types.proto
-type KI64Pair struct {
-	Key   []byte
-	Value int64
-}
-*/
-
-type KI64Pairs []KI64Pair
-
-// Sorting
-func (kvs KI64Pairs) Len() int { return len(kvs) }
-func (kvs KI64Pairs) Less(i, j int) bool {
-	switch bytes.Compare(kvs[i].Key, kvs[j].Key) {
-	case -1:
-		return true
-	case 0:
-		return kvs[i].Value < kvs[j].Value
-	case 1:
-		return false
-	default:
-		panic("invalid comparison result")
-	}
-}
-func (kvs KI64Pairs) Swap(i, j int) { kvs[i], kvs[j] = kvs[j], kvs[i] }
-func (kvs KI64Pairs) Sort()         { sort.Sort(kvs) }
diff --git a/libs/kv/result.go b/libs/kv/result.go
index b2d855cbc..fd40450b1 100644
--- a/libs/kv/result.go
+++ b/libs/kv/result.go
@@ -30,16 +30,6 @@ func (r *Pair) UnmarshalJSON(b []byte) error {
 	return jsonpbUnmarshaller.Unmarshal(reader, r)
 }
 
-func (r *KI64Pair) MarshalJSON() ([]byte, error) {
-	s, err := jsonpbMarshaller.MarshalToString(r)
-	return []byte(s), err
-}
-
-func (r *KI64Pair) UnmarshalJSON(b []byte) error {
-	reader := bytes.NewBuffer(b)
-	return jsonpbUnmarshaller.Unmarshal(reader, r)
-}
-
 // Some compile time assertions to ensure we don't
 // have accidental runtime surprises later on.
 // jsonEncodingRoundTripper ensures that asserted
@@ -51,4 +41,3 @@ type jsonRoundTripper interface {
 }
 
 var _ jsonRoundTripper = (*Pair)(nil)
-var _ jsonRoundTripper = (*KI64Pair)(nil)
diff --git a/libs/kv/types.pb.go b/libs/kv/types.pb.go
index c197d5791..7a6e6e12e 100644
--- a/libs/kv/types.pb.go
+++ b/libs/kv/types.pb.go
@@ -26,7 +26,6 @@ var _ = math.Inf
 // proto package needs to be updated.
 const _ = proto.GoGoProtoPackageIsVersion3 // please upgrade the proto package
 
-// Define these here for compatibility but use tmlibs/kv.Pair.
 type Pair struct {
 	Key                  []byte   `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
 	Value                []byte   `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
@@ -82,74 +81,16 @@ func (m *Pair) GetValue() []byte {
 	return nil
 }
 
-// Define these here for compatibility but use tmlibs/kv.KI64Pair.
-type KI64Pair struct {
-	Key                  []byte   `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
-	Value                int64    `protobuf:"varint,2,opt,name=value,proto3" json:"value,omitempty"`
-	XXX_NoUnkeyedLiteral struct{} `json:"-"`
-	XXX_unrecognized     []byte   `json:"-"`
-	XXX_sizecache        int32    `json:"-"`
-}
-
-func (m *KI64Pair) Reset()         { *m = KI64Pair{} }
-func (m *KI64Pair) String() string { return proto.CompactTextString(m) }
-func (*KI64Pair) ProtoMessage()    {}
-func (*KI64Pair) Descriptor() ([]byte, []int) {
-	return fileDescriptor_31432671d164f444, []int{1}
-}
-func (m *KI64Pair) XXX_Unmarshal(b []byte) error {
-	return m.Unmarshal(b)
-}
-func (m *KI64Pair) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
-	if deterministic {
-		return xxx_messageInfo_KI64Pair.Marshal(b, m, deterministic)
-	} else {
-		b = b[:cap(b)]
-		n, err := m.MarshalToSizedBuffer(b)
-		if err != nil {
-			return nil, err
-		}
-		return b[:n], nil
-	}
-}
-func (m *KI64Pair) XXX_Merge(src proto.Message) {
-	xxx_messageInfo_KI64Pair.Merge(m, src)
-}
-func (m *KI64Pair) XXX_Size() int {
-	return m.Size()
-}
-func (m *KI64Pair) XXX_DiscardUnknown() {
-	xxx_messageInfo_KI64Pair.DiscardUnknown(m)
-}
-
-var xxx_messageInfo_KI64Pair proto.InternalMessageInfo
-
-func (m *KI64Pair) GetKey() []byte {
-	if m != nil {
-		return m.Key
-	}
-	return nil
-}
-
-func (m *KI64Pair) GetValue() int64 {
-	if m != nil {
-		return m.Value
-	}
-	return 0
-}
-
 func init() {
 	proto.RegisterType((*Pair)(nil), "tendermint.libs.kv.Pair")
 	golang_proto.RegisterType((*Pair)(nil), "tendermint.libs.kv.Pair")
-	proto.RegisterType((*KI64Pair)(nil), "tendermint.libs.kv.KI64Pair")
-	golang_proto.RegisterType((*KI64Pair)(nil), "tendermint.libs.kv.KI64Pair")
 }
 
 func init() { proto.RegisterFile("libs/kv/types.proto", fileDescriptor_31432671d164f444) }
 func init() { golang_proto.RegisterFile("libs/kv/types.proto", fileDescriptor_31432671d164f444) }
 
 var fileDescriptor_31432671d164f444 = []byte{
-	// 196 bytes of a gzipped FileDescriptorProto
+	// 182 bytes of a gzipped FileDescriptorProto
 	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xe2, 0x12, 0xce, 0xc9, 0x4c, 0x2a,
 	0xd6, 0xcf, 0x2e, 0xd3, 0x2f, 0xa9, 0x2c, 0x48, 0x2d, 0xd6, 0x2b, 0x28, 0xca, 0x2f, 0xc9, 0x17,
 	0x12, 0x2a, 0x49, 0xcd, 0x4b, 0x49, 0x2d, 0xca, 0xcd, 0xcc, 0x2b, 0xd1, 0x03, 0xc9, 0xeb, 0x65,
@@ -157,12 +98,11 @@ var fileDescriptor_31432671d164f444 = []byte{
 	0x95, 0xe9, 0xa7, 0xe7, 0xa7, 0xe7, 0x23, 0x58, 0x10, 0xbd, 0x4a, 0x7a, 0x5c, 0x2c, 0x01, 0x89,
 	0x99, 0x45, 0x42, 0x02, 0x5c, 0xcc, 0xd9, 0xa9, 0x95, 0x12, 0x8c, 0x0a, 0x8c, 0x1a, 0x3c, 0x41,
 	0x20, 0xa6, 0x90, 0x08, 0x17, 0x6b, 0x59, 0x62, 0x4e, 0x69, 0xaa, 0x04, 0x13, 0x58, 0x0c, 0xc2,
-	0x51, 0x32, 0xe2, 0xe2, 0xf0, 0xf6, 0x34, 0x33, 0x21, 0x46, 0x0f, 0x33, 0x54, 0x8f, 0x93, 0xdb,
-	0x8f, 0x87, 0x72, 0x8c, 0x2b, 0x1e, 0xc9, 0x31, 0xee, 0x78, 0x24, 0xc7, 0x78, 0xe2, 0x91, 0x1c,
-	0xe3, 0x85, 0x47, 0x72, 0x8c, 0x0f, 0x1e, 0xc9, 0x31, 0x1e, 0x78, 0x2c, 0xc7, 0x18, 0xa5, 0x91,
-	0x9e, 0x59, 0x92, 0x51, 0x9a, 0xa4, 0x97, 0x9c, 0x9f, 0xab, 0x8f, 0xf0, 0x08, 0x32, 0x13, 0xea,
-	0xe7, 0x24, 0x36, 0xb0, 0x93, 0x8d, 0x01, 0x01, 0x00, 0x00, 0xff, 0xff, 0xc5, 0x5f, 0x67, 0xcb,
-	0x05, 0x01, 0x00, 0x00,
+	0x71, 0x72, 0xfb, 0xf1, 0x50, 0x8e, 0x71, 0xc5, 0x23, 0x39, 0xc6, 0x1d, 0x8f, 0xe4, 0x18, 0x4f,
+	0x3c, 0x92, 0x63, 0xbc, 0xf0, 0x48, 0x8e, 0xf1, 0xc1, 0x23, 0x39, 0xc6, 0x03, 0x8f, 0xe5, 0x18,
+	0xa3, 0x34, 0xd2, 0x33, 0x4b, 0x32, 0x4a, 0x93, 0xf4, 0x92, 0xf3, 0x73, 0xf5, 0x11, 0x8e, 0x42,
+	0x66, 0x42, 0xdd, 0x9f, 0xc4, 0x06, 0xb6, 0xde, 0x18, 0x10, 0x00, 0x00, 0xff, 0xff, 0x5d, 0x3a,
+	0xdc, 0xba, 0xd1, 0x00, 0x00, 0x00,
 }
 
 func (this *Pair) Equal(that interface{}) bool {
@@ -195,36 +135,6 @@ func (this *Pair) Equal(that interface{}) bool {
 	}
 	return true
 }
-func (this *KI64Pair) Equal(that interface{}) bool {
-	if that == nil {
-		return this == nil
-	}
-
-	that1, ok := that.(*KI64Pair)
-	if !ok {
-		that2, ok := that.(KI64Pair)
-		if ok {
-			that1 = &that2
-		} else {
-			return false
-		}
-	}
-	if that1 == nil {
-		return this == nil
-	} else if this == nil {
-		return false
-	}
-	if !bytes.Equal(this.Key, that1.Key) {
-		return false
-	}
-	if this.Value != that1.Value {
-		return false
-	}
-	if !bytes.Equal(this.XXX_unrecognized, that1.XXX_unrecognized) {
-		return false
-	}
-	return true
-}
 func (m *Pair) Marshal() (dAtA []byte, err error) {
 	size := m.Size()
 	dAtA = make([]byte, size)
@@ -266,45 +176,6 @@ func (m *Pair) MarshalToSizedBuffer(dAtA []byte) (int, error) {
 	return len(dAtA) - i, nil
 }
 
-func (m *KI64Pair) Marshal() (dAtA []byte, err error) {
-	size := m.Size()
-	dAtA = make([]byte, size)
-	n, err := m.MarshalToSizedBuffer(dAtA[:size])
-	if err != nil {
-		return nil, err
-	}
-	return dAtA[:n], nil
-}
-
-func (m *KI64Pair) MarshalTo(dAtA []byte) (int, error) {
-	size := m.Size()
-	return m.MarshalToSizedBuffer(dAtA[:size])
-}
-
-func (m *KI64Pair) MarshalToSizedBuffer(dAtA []byte) (int, error) {
-	i := len(dAtA)
-	_ = i
-	var l int
-	_ = l
-	if m.XXX_unrecognized != nil {
-		i -= len(m.XXX_unrecognized)
-		copy(dAtA[i:], m.XXX_unrecognized)
-	}
-	if m.Value != 0 {
-		i = encodeVarintTypes(dAtA, i, uint64(m.Value))
-		i--
-		dAtA[i] = 0x10
-	}
-	if len(m.Key) > 0 {
-		i -= len(m.Key)
-		copy(dAtA[i:], m.Key)
-		i = encodeVarintTypes(dAtA, i, uint64(len(m.Key)))
-		i--
-		dAtA[i] = 0xa
-	}
-	return len(dAtA) - i, nil
-}
-
 func encodeVarintTypes(dAtA []byte, offset int, v uint64) int {
 	offset -= sovTypes(v)
 	base := offset
@@ -334,23 +205,6 @@ func NewPopulatedPair(r randyTypes, easy bool) *Pair {
 	return this
 }
 
-func NewPopulatedKI64Pair(r randyTypes, easy bool) *KI64Pair {
-	this := &KI64Pair{}
-	v3 := r.Intn(100)
-	this.Key = make([]byte, v3)
-	for i := 0; i < v3; i++ {
-		this.Key[i] = byte(r.Intn(256))
-	}
-	this.Value = int64(r.Int63())
-	if r.Intn(2) == 0 {
-		this.Value *= -1
-	}
-	if !easy && r.Intn(10) != 0 {
-		this.XXX_unrecognized = randUnrecognizedTypes(r, 3)
-	}
-	return this
-}
-
 type randyTypes interface {
 	Float32() float32
 	Float64() float64
@@ -370,9 +224,9 @@ func randUTF8RuneTypes(r randyTypes) rune {
 	return rune(ru + 61)
 }
 func randStringTypes(r randyTypes) string {
-	v4 := r.Intn(100)
-	tmps := make([]rune, v4)
-	for i := 0; i < v4; i++ {
+	v3 := r.Intn(100)
+	tmps := make([]rune, v3)
+	for i := 0; i < v3; i++ {
 		tmps[i] = randUTF8RuneTypes(r)
 	}
 	return string(tmps)
@@ -394,11 +248,11 @@ func randFieldTypes(dAtA []byte, r randyTypes, fieldNumber int, wire int) []byte
 	switch wire {
 	case 0:
 		dAtA = encodeVarintPopulateTypes(dAtA, uint64(key))
-		v5 := r.Int63()
+		v4 := r.Int63()
 		if r.Intn(2) == 0 {
-			v5 *= -1
+			v4 *= -1
 		}
-		dAtA = encodeVarintPopulateTypes(dAtA, uint64(v5))
+		dAtA = encodeVarintPopulateTypes(dAtA, uint64(v4))
 	case 1:
 		dAtA = encodeVarintPopulateTypes(dAtA, uint64(key))
 		dAtA = append(dAtA, byte(r.Intn(256)), byte(r.Intn(256)), byte(r.Intn(256)), byte(r.Intn(256)), byte(r.Intn(256)), byte(r.Intn(256)), byte(r.Intn(256)), byte(r.Intn(256)))
@@ -443,25 +297,6 @@ func (m *Pair) Size() (n int) {
 	return n
 }
 
-func (m *KI64Pair) Size() (n int) {
-	if m == nil {
-		return 0
-	}
-	var l int
-	_ = l
-	l = len(m.Key)
-	if l > 0 {
-		n += 1 + l + sovTypes(uint64(l))
-	}
-	if m.Value != 0 {
-		n += 1 + sovTypes(uint64(m.Value))
-	}
-	if m.XXX_unrecognized != nil {
-		n += len(m.XXX_unrecognized)
-	}
-	return n
-}
-
 func sovTypes(x uint64) (n int) {
 	return (math_bits.Len64(x|1) + 6) / 7
 }
@@ -590,113 +425,6 @@ func (m *Pair) Unmarshal(dAtA []byte) error {
 	}
 	return nil
 }
-func (m *KI64Pair) Unmarshal(dAtA []byte) error {
-	l := len(dAtA)
-	iNdEx := 0
-	for iNdEx < l {
-		preIndex := iNdEx
-		var wire uint64
-		for shift := uint(0); ; shift += 7 {
-			if shift >= 64 {
-				return ErrIntOverflowTypes
-			}
-			if iNdEx >= l {
-				return io.ErrUnexpectedEOF
-			}
-			b := dAtA[iNdEx]
-			iNdEx++
-			wire |= uint64(b&0x7F) << shift
-			if b < 0x80 {
-				break
-			}
-		}
-		fieldNum := int32(wire >> 3)
-		wireType := int(wire & 0x7)
-		if wireType == 4 {
-			return fmt.Errorf("proto: KI64Pair: wiretype end group for non-group")
-		}
-		if fieldNum <= 0 {
-			return fmt.Errorf("proto: KI64Pair: illegal tag %d (wire type %d)", fieldNum, wire)
-		}
-		switch fieldNum {
-		case 1:
-			if wireType != 2 {
-				return fmt.Errorf("proto: wrong wireType = %d for field Key", wireType)
-			}
-			var byteLen int
-			for shift := uint(0); ; shift += 7 {
-				if shift >= 64 {
-					return ErrIntOverflowTypes
-				}
-				if iNdEx >= l {
-					return io.ErrUnexpectedEOF
-				}
-				b := dAtA[iNdEx]
-				iNdEx++
-				byteLen |= int(b&0x7F) << shift
-				if b < 0x80 {
-					break
-				}
-			}
-			if byteLen < 0 {
-				return ErrInvalidLengthTypes
-			}
-			postIndex := iNdEx + byteLen
-			if postIndex < 0 {
-				return ErrInvalidLengthTypes
-			}
-			if postIndex > l {
-				return io.ErrUnexpectedEOF
-			}
-			m.Key = append(m.Key[:0], dAtA[iNdEx:postIndex]...)
-			if m.Key == nil {
-				m.Key = []byte{}
-			}
-			iNdEx = postIndex
-		case 2:
-			if wireType != 0 {
-				return fmt.Errorf("proto: wrong wireType = %d for field Value", wireType)
-			}
-			m.Value = 0
-			for shift := uint(0); ; shift += 7 {
-				if shift >= 64 {
-					return ErrIntOverflowTypes
-				}
-				if iNdEx >= l {
-					return io.ErrUnexpectedEOF
-				}
-				b := dAtA[iNdEx]
-				iNdEx++
-				m.Value |= int64(b&0x7F) << shift
-				if b < 0x80 {
-					break
-				}
-			}
-		default:
-			iNdEx = preIndex
-			skippy, err := skipTypes(dAtA[iNdEx:])
-			if err != nil {
-				return err
-			}
-			if skippy < 0 {
-				return ErrInvalidLengthTypes
-			}
-			if (iNdEx + skippy) < 0 {
-				return ErrInvalidLengthTypes
-			}
-			if (iNdEx + skippy) > l {
-				return io.ErrUnexpectedEOF
-			}
-			m.XXX_unrecognized = append(m.XXX_unrecognized, dAtA[iNdEx:iNdEx+skippy]...)
-			iNdEx += skippy
-		}
-	}
-
-	if iNdEx > l {
-		return io.ErrUnexpectedEOF
-	}
-	return nil
-}
 func skipTypes(dAtA []byte) (n int, err error) {
 	l := len(dAtA)
 	iNdEx := 0
diff --git a/libs/kv/types.proto b/libs/kv/types.proto
index 7e1375c21..1b6a7a58d 100644
--- a/libs/kv/types.proto
+++ b/libs/kv/types.proto
@@ -16,14 +16,7 @@ option (gogoproto.testgen_all)  = true;
 //----------------------------------------
 // Abstract types
 
-// Define these here for compatibility but use tmlibs/kv.Pair.
 message Pair {
   bytes key   = 1;
   bytes value = 2;
 }
-
-// Define these here for compatibility but use tmlibs/kv.KI64Pair.
-message KI64Pair {
-  bytes key   = 1;
-  int64 value = 2;
-}
diff --git a/libs/kv/typespb_test.go b/libs/kv/typespb_test.go
index 38656ecf9..dc45bf7f2 100644
--- a/libs/kv/typespb_test.go
+++ b/libs/kv/typespb_test.go
@@ -78,62 +78,6 @@ func TestPairMarshalTo(t *testing.T) {
 	}
 }
 
-func TestKI64PairProto(t *testing.T) {
-	seed := time.Now().UnixNano()
-	popr := math_rand.New(math_rand.NewSource(seed))
-	p := NewPopulatedKI64Pair(popr, false)
-	dAtA, err := github_com_gogo_protobuf_proto.Marshal(p)
-	if err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	msg := &KI64Pair{}
-	if err := github_com_gogo_protobuf_proto.Unmarshal(dAtA, msg); err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	littlefuzz := make([]byte, len(dAtA))
-	copy(littlefuzz, dAtA)
-	for i := range dAtA {
-		dAtA[i] = byte(popr.Intn(256))
-	}
-	if !p.Equal(msg) {
-		t.Fatalf("seed = %d, %#v !Proto %#v", seed, msg, p)
-	}
-	if len(littlefuzz) > 0 {
-		fuzzamount := 100
-		for i := 0; i < fuzzamount; i++ {
-			littlefuzz[popr.Intn(len(littlefuzz))] = byte(popr.Intn(256))
-			littlefuzz = append(littlefuzz, byte(popr.Intn(256)))
-		}
-		// shouldn't panic
-		_ = github_com_gogo_protobuf_proto.Unmarshal(littlefuzz, msg)
-	}
-}
-
-func TestKI64PairMarshalTo(t *testing.T) {
-	seed := time.Now().UnixNano()
-	popr := math_rand.New(math_rand.NewSource(seed))
-	p := NewPopulatedKI64Pair(popr, false)
-	size := p.Size()
-	dAtA := make([]byte, size)
-	for i := range dAtA {
-		dAtA[i] = byte(popr.Intn(256))
-	}
-	_, err := p.MarshalTo(dAtA)
-	if err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	msg := &KI64Pair{}
-	if err := github_com_gogo_protobuf_proto.Unmarshal(dAtA, msg); err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	for i := range dAtA {
-		dAtA[i] = byte(popr.Intn(256))
-	}
-	if !p.Equal(msg) {
-		t.Fatalf("seed = %d, %#v !Proto %#v", seed, msg, p)
-	}
-}
-
 func TestPairJSON(t *testing.T) {
 	seed := time.Now().UnixNano()
 	popr := math_rand.New(math_rand.NewSource(seed))
@@ -152,24 +96,6 @@ func TestPairJSON(t *testing.T) {
 		t.Fatalf("seed = %d, %#v !Json Equal %#v", seed, msg, p)
 	}
 }
-func TestKI64PairJSON(t *testing.T) {
-	seed := time.Now().UnixNano()
-	popr := math_rand.New(math_rand.NewSource(seed))
-	p := NewPopulatedKI64Pair(popr, true)
-	marshaler := github_com_gogo_protobuf_jsonpb.Marshaler{}
-	jsondata, err := marshaler.MarshalToString(p)
-	if err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	msg := &KI64Pair{}
-	err = github_com_gogo_protobuf_jsonpb.UnmarshalString(jsondata, msg)
-	if err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	if !p.Equal(msg) {
-		t.Fatalf("seed = %d, %#v !Json Equal %#v", seed, msg, p)
-	}
-}
 func TestPairProtoText(t *testing.T) {
 	seed := time.Now().UnixNano()
 	popr := math_rand.New(math_rand.NewSource(seed))
@@ -198,34 +124,6 @@ func TestPairProtoCompactText(t *testing.T) {
 	}
 }
 
-func TestKI64PairProtoText(t *testing.T) {
-	seed := time.Now().UnixNano()
-	popr := math_rand.New(math_rand.NewSource(seed))
-	p := NewPopulatedKI64Pair(popr, true)
-	dAtA := github_com_gogo_protobuf_proto.MarshalTextString(p)
-	msg := &KI64Pair{}
-	if err := github_com_gogo_protobuf_proto.UnmarshalText(dAtA, msg); err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	if !p.Equal(msg) {
-		t.Fatalf("seed = %d, %#v !Proto %#v", seed, msg, p)
-	}
-}
-
-func TestKI64PairProtoCompactText(t *testing.T) {
-	seed := time.Now().UnixNano()
-	popr := math_rand.New(math_rand.NewSource(seed))
-	p := NewPopulatedKI64Pair(popr, true)
-	dAtA := github_com_gogo_protobuf_proto.CompactTextString(p)
-	msg := &KI64Pair{}
-	if err := github_com_gogo_protobuf_proto.UnmarshalText(dAtA, msg); err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	if !p.Equal(msg) {
-		t.Fatalf("seed = %d, %#v !Proto %#v", seed, msg, p)
-	}
-}
-
 func TestPairSize(t *testing.T) {
 	seed := time.Now().UnixNano()
 	popr := math_rand.New(math_rand.NewSource(seed))
@@ -248,26 +146,4 @@ func TestPairSize(t *testing.T) {
 	}
 }
 
-func TestKI64PairSize(t *testing.T) {
-	seed := time.Now().UnixNano()
-	popr := math_rand.New(math_rand.NewSource(seed))
-	p := NewPopulatedKI64Pair(popr, true)
-	size2 := github_com_gogo_protobuf_proto.Size(p)
-	dAtA, err := github_com_gogo_protobuf_proto.Marshal(p)
-	if err != nil {
-		t.Fatalf("seed = %d, err = %v", seed, err)
-	}
-	size := p.Size()
-	if len(dAtA) != size {
-		t.Errorf("seed = %d, size %v != marshalled size %v", seed, size, len(dAtA))
-	}
-	if size2 != size {
-		t.Errorf("seed = %d, size %v != before marshal proto.Size %v", seed, size, size2)
-	}
-	size3 := github_com_gogo_protobuf_proto.Size(p)
-	if size3 != size {
-		t.Errorf("seed = %d, size %v != after marshal proto.Size %v", seed, size, size3)
-	}
-}
-
 //These tests are generated by github.com/gogo/protobuf/plugin/testgen

From c534291a5652ddb8d9c2b89f2fdb18485ef2ccd1 Mon Sep 17 00:00:00 2001
From: Marko <marbar3778@yahoo.com>
Date: Wed, 11 Mar 2020 11:57:42 +0100
Subject: [PATCH 74/74] rc1/v0.33.2(#4541)

* rc1/v0.33.2

- release candiadte for 0.33.2

Signed-off-by: Marko Baricevic <marbar3778@yahoo.com>

Co-authored-by: Anton Kaliaev <anton.kalyaev@gmail.com>
---
 CHANGELOG.md         | 52 ++++++++++++++++++++++++++++++++++++++++++++
 CHANGELOG_PENDING.md | 13 +----------
 version/version.go   |  2 +-
 3 files changed, 54 insertions(+), 13 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6040849c1..89315a1b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,57 @@
 # Changelog
 
+## v0.33.2
+
+*March 11, 2020*
+
+Special thanks to external contributors on this release:
+@antho1404, @michaelfig, @gterzian, @tau3, @Shivani912
+
+Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermint).
+
+### BREAKING CHANGES:
+
+- CLI/RPC/Config
+  - [cli] [\#4505](https://github.com/tendermint/tendermint/pull/4505) `tendermint lite` sub-command new syntax (@melekes):
+    `lite cosmoshub-3 -p 52.57.29.196:26657 -w public-seed-node.cosmoshub.certus.one:26657
+    --height 962118 --hash 28B97BE9F6DE51AC69F70E0B7BFD7E5C9CD1A595B7DC31AFF27C50D4948`
+
+- Go API
+  - [lite2] [\#4535](https://github.com/tendermint/tendermint/pull/4535) Remove `Start/Stop` (@melekes)
+  - [lite2] [\#4469](https://github.com/tendermint/tendermint/issues/4469) Remove `RemoveNoLongerTrustedHeaders` and `RemoveNoLongerTrustedHeadersPeriod` option (@cmwaters)
+  - [lite2] [\#4473](https://github.com/tendermint/tendermint/issues/4473) Return height as a 2nd param in `TrustedValidatorSet` (@melekes)
+  - [lite2] [\#4536](https://github.com/tendermint/tendermint/pull/4536) `Update` returns a signed header (1st param) (@melekes)
+
+
+### IMPROVEMENTS:
+
+- [blockchain/v2] [\#4361](https://github.com/tendermint/tendermint/pull/4361) Add reactor (@brapse)
+- [cmd] [\#4515](https://github.com/tendermint/tendermint/issues/4515) Change `tendermint debug dump` sub-command archives filename's format (@melekes)
+- [consensus] [\#3583](https://github.com/tendermint/tendermint/issues/3583) Reduce `non-deterministic signature` log noise (@tau3)
+- [examples/kvstore] [\#4507](https://github.com/tendermint/tendermint/issues/4507) ABCI query now returns the proper height (@erikgrinaker)
+- [lite2] [\#4462](https://github.com/tendermint/tendermint/issues/4462) Add `NewHTTPClient` and `NewHTTPClientFromTrustedStore` (@cmwaters)
+- [lite2] [\#4329](https://github.com/tendermint/tendermint/issues/4329) modified bisection to loop (@cmwaters)
+- [lite2] [\#4385](https://github.com/tendermint/tendermint/issues/4385) Disconnect from bad nodes (@melekes)
+- [lite2] [\#4398](https://github.com/tendermint/tendermint/issues/4398) Add `VerifyAdjacent` and `VerifyNonAdjacent` funcs (@cmwaters)
+- [lite2] [\#4426](https://github.com/tendermint/tendermint/issues/4426) Don't save intermediate headers (@cmwaters)
+- [lite2] [\#4464](https://github.com/tendermint/tendermint/issues/4464) Cross-check first header (@cmwaters)
+- [lite2] [\#4470](https://github.com/tendermint/tendermint/issues/4470) Fix inconsistent header-validatorset pairing (@melekes)
+- [lite2] [\#4488](https://github.com/tendermint/tendermint/issues/4488) Allow local clock drift -10 sec. (@melekes)
+- [p2p] [\#4449](https://github.com/tendermint/tendermint/pull/4449) Use `curve25519.X25519()` instead of `ScalarMult` (@erikgrinaker)
+- [types] [\#4417](https://github.com/tendermint/tendermint/issues/4417) **VerifyCommitX() functions should return as soon as +2/3 threshold is reached** (@alessio).
+- [libs/kv] [\#4542](https://github.com/tendermint/tendermint/pull/4542) remove unused type KI64Pair (@tessr)
+
+### BUG FIXES:
+
+- [cmd] [\#4303](https://github.com/tendermint/tendermint/issues/4303) Show useful error when Tendermint is not initialized (@melekes)
+- [cmd] [\#4515](https://github.com/tendermint/tendermint/issues/4515) **Fix `tendermint debug kill` sub-command** (@melekes)
+- [rpc] [\#3935](https://github.com/tendermint/tendermint/issues/3935) **Create buffered subscriptions on `/subscribe`** (@melekes)
+- [rpc] [\#4375](https://github.com/tendermint/tendermint/issues/4375) Stop searching for txs in `/tx_search` upon client timeout (@gterzian)
+- [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
+- [rpc] [\#4432](https://github.com/tendermint/tendermint/issues/4432) Fix `/tx_search` pagination with ordered results (@erikgrinaker)
+- [rpc] [\#4492](https://github.com/tendermint/tendermint/issues/4492) Keep the original subscription "id" field when new RPCs come in (@michaelfig)
+
+
 ## v0.33.1
 
 *Feburary 13, 2020*
diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index aa0c0c41f..42609c19b 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -1,4 +1,4 @@
-## v0.33.2
+## v0.33.3
 
 \*\*
 
@@ -18,15 +18,4 @@ Friendly reminder, we have a [bug bounty program](https://hackerone.com/tendermi
 
 ### IMPROVEMENTS:
 
-- [types] [\#4417](https://github.com/tendermint/tendermint/issues/4417) VerifyCommitX() functions should return as soon as +2/3 threashold is reached.
-- [examples/kvstore] [\#4509](https://github.com/tendermint/tendermint/pull/4509) ABCI query now returns the proper height (@erikgrinaker)
-- [cmd] \#4515 Change `tendermint debug dump` sub-command archives filename's format (@melekes)
-- [libs/kv]: [\#4542](https://github.com/tendermint/tendermint/pull/4542) remove unused type KI64Pair (@tessr)
-
 ### BUG FIXES:
-
-- [rpc] \#3935 Create buffered subscriptions on `/subscribe` (@melekes)
-- [rpc] [\#4493](https://github.com/tendermint/tendermint/pull/4493) Keep the original subscription "id" field when new RPCs come in (@michaelfig)
-- [rpc] [\#4437](https://github.com/tendermint/tendermint/pull/4437) Fix tx_search pagination with ordered results (@erikgrinaker)
-- [rpc] [\#4406](https://github.com/tendermint/tendermint/pull/4406) Fix issue with multiple subscriptions on the websocket (@antho1404)
-- [cmd] \#4515 Fix `tendermint debug kill` sub-command (@melekes)
diff --git a/version/version.go b/version/version.go
index 57ef21f1f..9a16e5d58 100644
--- a/version/version.go
+++ b/version/version.go
@@ -20,7 +20,7 @@ const (
 	// Must be a string because scripts like dist.sh read this file.
 	// XXX: Don't change the name of this variable or you will break
 	// automation :)
-	TMCoreSemVer = "0.33.1"
+	TMCoreSemVer = "0.33.2"
 
 	// ABCISemVer is the semantic version of the ABCI library
 	ABCISemVer  = "0.16.1"