From b62f3c63f98b60bc06dc93c7b136d8c68f014d50 Mon Sep 17 00:00:00 2001 From: Alexander Stein Date: Wed, 11 Aug 2021 20:34:21 -0400 Subject: [PATCH] [skip ci] Update FedRAMP values for touch-ups. --- .../resources/json/FedRAMP_extensions.json | 4069 +++++++---------- .../resources/json/fedramp_threats.json | 14 +- .../resources/json/fedramp_values.json | 32 +- .../resources/json/information-types.json | 14 +- .../resources/xml/FedRAMP_extensions.xml | 52 +- .../content/resources/xml/fedramp_threats.xml | 14 +- dist/content/resources/xml/fedramp_values.xml | 24 +- .../resources/xml/information-types.xml | 12 +- documents/FedRAMP_Extensions.pdf | Bin 136740 -> 135807 bytes documents/FedRAMP_extensions.html | 34 +- .../resources/xml/FedRAMP_extensions.xml | 52 +- src/content/resources/xml/fedramp_threats.xml | 12 +- src/content/resources/xml/fedramp_values.xml | 24 +- .../resources/xml/information-types.xml | 12 +- 14 files changed, 1917 insertions(+), 2448 deletions(-) diff --git a/dist/content/resources/json/FedRAMP_extensions.json b/dist/content/resources/json/FedRAMP_extensions.json index 879c7d588..f92301136 100644 --- a/dist/content/resources/json/FedRAMP_extensions.json +++ b/dist/content/resources/json/FedRAMP_extensions.json @@ -1,2202 +1,1726 @@ { "extensions": { + "xmlns:xsi": "http://www.w3.org/2001/XMLSchema-instance", + "xmlns": "http://csrc.nist.gov/ns/oscal/1.0", "uuid": "BA710064-79AC-47D5-8F70-6749B359E7E2", "metadata": { - "title": "[EXPERIMENTAL] FedRAMP Extensions [DRAFT]", - "published": "2021-07-06T23:07:21Z", - "last-modified": "2021-07-06T23:07:21Z", - "version": "fedramp1.0.0-oscal1.0.0", + "title": "[EXPERIMENTAL] FedRAMP Extensions", + "published": "2021-08-11T23:27:44Z", + "last-modified": "2021-08-11T23:27:44Z", + "version": "fedramp1.0.2-oscal1.0.0", "oscal-version": "oscal-1.0.0", - "revisions": [ - { - "published": "2019-06-01T00:00:00.00-04:00", - "version": "DRAFT-01", - "props": [ - { + "revisions": { + "revision": [ + { + "published": "2019-06-01T00:00:00.00-04:00", + "version": "DRAFT-01", + "prop": { "name": "party-uuid", "ns": "https://fedramp.gov/ns/oscal", - "value": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" - } - ], - "remarks": "Initial draft." - }, - { - "published": "2020-03-03T00:00:00.00-04:00", - "version": "DRAFT-02", - "props": [ - { + "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" + }, + "remarks": {"p": "Initial draft."} + }, + { + "published": "2020-03-03T00:00:00.00-04:00", + "version": "DRAFT-02", + "prop": { "name": "party-uuid", "ns": "https://fedramp.gov/ns/oscal", - "value": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" - } - ], - "remarks": "Partial update to include some SAP, SAR, and POA&M extensions." - }, - { - "published": "2021-02-09T00:00:00.00-04:00", - "version": "DRAFT-03", - "props": [ - { + "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" + }, + "remarks": {"p": "Partial update to include some SAP, SAR, and POA&M extensions."} + }, + { + "published": "2021-02-09T00:00:00.00-04:00", + "version": "DRAFT-03", + "prop": { "name": "party-uuid", "ns": "https://fedramp.gov/ns/oscal", - "value": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" - } - ], - "remarks": "Revised draft to better align with OSCAL RC-1 SSP syntax." - } - ], - "roles": [ - { - "id": "prepared-by", - "title": "Prepared By", - "description": "The organization that prepared this content." - } - ], - "parties": [ - { - "uuid": "77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d", - "type": "organization", - "name": "Federal Risk and Authorization Management Program: Program Management\n Office", - "short-name": "FedRAMP PMO", - "links": [ - { - "href": "https://fedramp.gov" - } - ], - "email-addresses": [ - "info@fedramp.gov" - ], - "addresses": [ - { - "type": "work", - "addr-lines": [ - "1800 F St. NW", - "" - ], - "city": "Washington", - "state": "DC", - "postal-code": "", - "country": "US" - } + "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" + }, + "remarks": {"p": "Revised draft to better align with OSCAL RC-1 SSP syntax."} + }, + { + "published": "2021-08-11T23:27:44.00-00:00", + "version": "fedramp1.0.2-oscal1.0.0", + "prop": { + "name": "party-uuid", + "ns": "https://fedramp.gov/ns/oscal", + "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" + }, + "remarks": {"p": "Release reviewed for updated release."} + } + ] + }, + "role": { + "id": "prepared-by", + "title": "Prepared By", + "description": {"p": "The organization that prepared this content."} + }, + "party": { + "uuid": "77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d", + "type": "organization", + "name": "Federal Risk and Authorization Management Program: Program Management\n Office", + "short-name": "FedRAMP PMO", + "link": {"href": "https://fedramp.gov"}, + "email-address": "info@fedramp.gov", + "address": { + "type": "work", + "addr-line": [ + "1800 F St. NW", + "" ], - "remarks": "This party entry must be present in a FedRAMP SSP.\n\nThe uuid may be different; however, the uuid must be associated with the \\\"fedramp-pmo\\\" role in the responsible-party assemblies." - } - ], - "responsible-parties": { - "prepared-by": { - "party-uuids": [ - "77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" + "city": "Washington", + "state": "DC", + "postal-code": "", + "country": "US" + }, + "remarks": { + "p": [ + "This party entry must be present in a FedRAMP SSP.", + "The uuid may be different; however, the uuid must be associated with the\n \"fedramp-pmo\" role in the responsible-party assemblies." ] } }, - "remarks": "This EXPERIMENTAL and DRAFT file exteneds OSCAL to meet FedRAMP requirements.\n\nIt provides the extensions, defined identifiers, and acceptable values in a machine-readable format necssary to meet FedRAMP Authorization Package requirements." + "responsible-party": { + "role-id": "prepared-by", + "party-uuid": "77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" + }, + "remarks": { + "p": [ + "This EXPERIMENTAL file exteneds OSCAL to meet FedRAMP requirements.", + "It provides the extensions, defined identifiers, and acceptable values in a machine-readable format necssary to meet FedRAMP Authorization Package requirements." + ] + } }, - "indexes": [ + "index": [ { "id": "index-local-party-id", "target": "//o:party", - "key-fields": { - "target": "@uuid" - }, - "remarks": "This document only." + "key-field": {"target": "@uuid"}, + "remarks": {"p": "This document only."} }, { "id": "index-assessment-layer-party-id", "target": "oscal-document-set()/(o:assessment-plan | o:assessment-results)//o:party", - "key-fields": { - "target": "@uuid" - }, - "remarks": "Select documents." + "key-field": {"target": "@uuid"}, + "remarks": {"p": "Select documents."} }, { "id": "global-local-party-id", "target": "oscal-document-set()//o:party", - "key-fields": { - "target": "@uuid" - }, - "remarks": "Entire stack." + "key-field": {"target": "@uuid"}, + "remarks": {"p": "Entire stack."} } ], - "extension-namespace": { - "ns": "https://fedramp.gov/ns/oscal" - }, - "extensions": { - "response-point": { + "extension-namespace": {"ns": "https://fedramp.gov/ns/oscal"}, + "extension": [ + { + "id": "response-point", "extension-name": "response-point", "formal-name": "Response Point", "description": "A property whose presence indicates its parent part is a required point of response for FedRAMP stakeholders.", - "bindings": [ - { - "pattern": "/o:profile/o:modify/o:alter/o:add/o:prop" - }, - { - "pattern": "/o:profile/o:modify/o:alter/o:add//o:part/o:prop" - }, - { - "pattern": "/o:catalog//o:control//o:part/o:prop" - }, - { - "pattern": "/o:assessment-plan/o:local-definitions/o:objectives-and-methods//part/o:prop" - }, - { - "pattern": "/o:assessment-results/o:local-definitions/o:objectives-and-methods//part/o:prop" - } + "binding": [ + {"pattern": "/o:profile/o:modify/o:alter/o:add/o:prop"}, + {"pattern": "/o:profile/o:modify/o:alter/o:add//o:part/o:prop"}, + {"pattern": "/o:catalog//o:control//o:part/o:prop"}, + {"pattern": "/o:assessment-plan/o:local-definitions/o:objectives-and-methods//part/o:prop"}, + {"pattern": "/o:assessment-results/o:local-definitions/o:objectives-and-methods//part/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } }, - "remarks": "This appears in FedRAMP profiles and resolved profile catalogs.\n\nFor control statements, it signals to the CSP which statements require a response in the SSP.\n\nFor control objectives, it signals to the assessor which control objectives must appear in the assessment results, which aligns with the FedRAMP test case workbook." + "remarks": { + "p": [ + "This appears in FedRAMP profiles and resolved profile catalogs.", + "For control statements, it signals to the CSP which statements require a response in the SSP.", + "For control objectives, it signals to the assessor which control objectives must appear in the assessment results, which aligns with the FedRAMP test case workbook." + ] + } }, - "revision-history-party-uuid": { + { + "id": "revision-history-party-uuid", "extension-name": "party-uuid", "formal-name": "Party Identifier", "description": "Identifies the party who authored this revision.", - "bindings": [ - { - "pattern": "/*/o:metadata/o:revisions/o:revision/o:prop" - } - ], + "binding": {"pattern": "/*/o:metadata/o:revisions/o:revision/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "uuid" - } - ], + "matches": {"data-type": "uuid"}, "has-cardinality": { "min-occurs": 0, "max-occurs": "unbounded" }, - "index-has-keys": [ - { - "name": "index-local-party-uuid", - "target": "o:prop[@name='party-uuid']", - "key-fields": { - "target": "." - }, - "remarks": "On the revision element in the revision history, the party-uuid extension must match the UUID of an existing party in the metadata." - } - ] + "index-has-key": { + "name": "index-local-party-uuid", + "target": "o:prop[@name='party-uuid']", + "key-field": {"target": "."}, + "remarks": {"p": "On the revision element in the revision history, the party-uuid extension must match the UUID of an existing party in the metadata."} + } } }, - "iso-iec-17020-identifier": { + { + "id": "iso-iec-17020-identifier", "extension-name": "iso-iec-17020-identifier", "formal-name": "ISO/IEC 17020 Identifier", "description": "The ISO/IEC-17020 identifier assigned to the assessor related to their status as an A2LA Accredidted Third Party Assessment Organization.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:metadata/o:party/o:prop" - }, - { - "pattern": "/o:assessment-results/o:metadata/o:party/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:metadata/o:party/o:prop"}, + {"pattern": "/o:assessment-results/o:metadata/o:party/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "CORE": { + { + "id": "CORE", "extension-name": "CORE", "formal-name": "Core Control", "description": "Identifies a control that must be included in every FedRAMP assessment.", - "bindings": [ - { - "pattern": "/o:profile/o:modify/o:alter/o:add/o:prop" - }, - { - "pattern": "/o:profile/o:modify/o:alter/o:add//o:control/o:prop" - }, - { - "pattern": "/o:catalog//o:control/o:prop" - } + "binding": [ + {"pattern": "/o:profile/o:modify/o:alter/o:add/o:prop"}, + {"pattern": "/o:profile/o:modify/o:alter/o:add//o:control/o:prop"}, + {"pattern": "/o:catalog//o:control/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } }, - "remarks": "Core controls must be assessed every year, and are often subject to additional scrutiny by assessors and adjudication reviewers." + "remarks": {"p": "Core controls must be assessed every year, and are often subject to additional scrutiny by assessors and adjudication reviewers."} }, - "security-cia-level": { + { + "id": "security-cia-level", "extension-name": "security-eauth-level", "formal-name": "eAuth Level (OVERALL)", "description": "The overall electronic authentication (eAuth) level applied to the system.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:prop" - }, - { - "pattern": "system-characteristics/o:prop[@name='authenticator-assurance-level']" - }, - { - "pattern": "system-characteristics/o:prop[@name='federation-assurance-level']" - }, - { - "pattern": "system-characteristics/o:prop[@name='identity-assurance-level']" - } + "binding": [ + {"pattern": "/o:system-security-plan/o:system-characteristics/o:prop"}, + {"pattern": "system-characteristics/o:prop[@name='authenticator-assurance-level']"}, + {"pattern": "system-characteristics/o:prop[@name='federation-assurance-level']"}, + {"pattern": "system-characteristics/o:prop[@name='identity-assurance-level']"} ], "constraint": { - "matches": [ - { - "data-type": "integer" - } - ], + "matches": {"data-type": "integer"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "1", - "label": "Level 1 (Low)", - "RICHTEXT": "The overall eAuth Level is defined as Level 1 (Low)." - }, - { - "value": "2", - "label": "Level 2 (Moderate)", - "RICHTEXT": "The overall eAuth Level is defined as Level 2 (Moderate)." - }, - { - "value": "3", - "label": "Level 3 (High)", - "RICHTEXT": "The overall eAuth Level is defined as Level 3 (High)." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": 1, + "label": "Level 1 (Low)", + "#text": "The overall eAuth Level is defined as Level 1 (Low)." + }, + { + "value": 2, + "label": "Level 2 (Moderate)", + "#text": "The overall eAuth Level is defined as Level 2 (Moderate)." + }, + { + "value": 3, + "label": "Level 3 (High)", + "#text": "The overall eAuth Level is defined as Level 3 (High)." + } + ] + } }, - "remarks": "FedRAMP requires all Low systems to be at Level 1" + "remarks": {"p": "FedRAMP requires all Low systems to be at Level 1"} }, - "authorization-type": { + { + "id": "authorization-type", "extension-name": "authorization-type", "formal-name": "Authorization Type", "description": "Identifies the FedRAMP authorization type.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "fedramp-jab", - "label": "JAB P-ATO", - "RICHTEXT": "A FedRAMP Joint Authorization Board (JAB) Provisional-Authorization to Operate (P-ATO)." - }, - { - "value": "fedramp-agency", - "label": "Agency ATO", - "RICHTEXT": "A FedRAMP Agency Authorization to Operate (ATO)." - }, - { - "value": "fedramp-li-saas", - "label": "Tailored (LI-SaaS) ATO", - "RICHTEXT": "A FedRAMP Tailored authorization to operate (ATO) for low impact Software as a Service (LI-SaaS) systems." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "fedramp-jab", + "label": "JAB P-ATO", + "#text": "A FedRAMP Joint Authorization Board (JAB) Provisional-Authorization to Operate (P-ATO)." + }, + { + "value": "fedramp-agency", + "label": "Agency ATO", + "#text": "A FedRAMP Agency Authorization to Operate (ATO)." + }, + { + "value": "fedramp-li-saas", + "label": "Tailored (LI-SaaS) ATO", + "#text": "A FedRAMP Tailored authorization to operate (ATO) for low impact Software as a Service (LI-SaaS) systems." + } + ] + } } }, - "users-internal": { + { + "id": "users-internal", "extension-name": "users-internal", "formal-name": "Internal Users", "description": "The current number of users internal to the organization.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "integer" - } - ], + "matches": {"data-type": "integer"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "users-external": { + { + "id": "users-external", "extension-name": "users-external", "formal-name": "External Users", "description": "The current number of users external to the organization.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "integer" - } - ], + "matches": {"data-type": "integer"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "users-internal-future": { + { + "id": "users-internal-future", "extension-name": "users-internal-future", "formal-name": "Future Internal Users", "description": "The anticipated number of users internal to the organization in one year.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "integer" - } - ], + "matches": {"data-type": "integer"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "users-external-future": { + { + "id": "users-external-future", "extension-name": "users-external-future", "formal-name": "Future External Users", "description": "The anticipated number of users external to the organization in one year.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "integer" - } - ], + "matches": {"data-type": "integer"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "privacy-designation": { + { + "id": "privacy-designation", "extension-name": "privacy-designation", "formal-name": "Privacy Designation", "description": "Indicates whether this system is privacy sensitive.", - "bindings": [ - { - "pattern": "system-information/o:prop[@name='privacy-sensitive']" - } - ], + "binding": {"pattern": "system-information/o:prop[@name='privacy-sensitive']"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Privacy Sensitive" - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "Not Privacy Sensitive" - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Privacy Sensitive" + }, + { + "value": "no", + "label": "No", + "#text": "Not Privacy Sensitive" + } + ] + } } }, - "privacy-threshold-analysis-q1": { + { + "id": "privacy-threshold-analysis-q1", "extension-name": "privacy-threshold-analysis-q1", "formal-name": "Privacy Threshold Analysis Q1", "description": "Does the ISA collect, maintain, or share PII in any identifiable form?", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Yes, the ISA collects, maintains, or shares some form of PII." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "No, the ISA does not collect, maintain, or share PII in any form." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Yes, the ISA collects, maintains, or shares some form of PII." + }, + { + "value": "no", + "label": "No", + "#text": "No, the ISA does not collect, maintain, or share PII in any form." + } + ] + } } }, - "privacy-threshold-analysis-q2": { + { + "id": "privacy-threshold-analysis-q2", "extension-name": "privacy-threshold-analysis-q2", "formal-name": "Privacy Threshold Analysis Q2", "description": "Does the ISA collect, maintain, or share PII from or about the public?", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Yes, the ISA collects, maintains, or shares PII from or about the public." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "No, the ISA does not collect, maintain, or share PII from or about the public." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Yes, the ISA collects, maintains, or shares PII from or about the public." + }, + { + "value": "no", + "label": "No", + "#text": "No, the ISA does not collect, maintain, or share PII from or about the public." + } + ] + } } }, - "privacy-threshold-analysis-q3": { + { + "id": "privacy-threshold-analysis-q3", "extension-name": "privacy-threshold-analysis-q3", "formal-name": "Privacy Threshold Analysis Q3", "description": "Has a Privacy Impact Assessment (PIA) ever been performed for the ISA?", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Yes, a PIA has been performed." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "No, a PIA has not been performed.." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Yes, a PIA has been performed." + }, + { + "value": "no", + "label": "No", + "#text": "No, a PIA has not been performed.." + } + ] + } } }, - "privacy-threshold-analysis-q4": { + { + "id": "privacy-threshold-analysis-q4", "extension-name": "privacy-threshold-analysis-q4", "formal-name": "Privacy Threshold Analysis Q4", "description": "Is there a Privacy Act System of Records Notice (SORN) for this ISA system?", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Yes, there is a SORN ID for this system." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "No, there is not a SORN ID for this system." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Yes, there is a SORN ID for this system." + }, + { + "value": "no", + "label": "No", + "#text": "No, there is not a SORN ID for this system." + } + ] + } } }, - "sorn-id": { + { + "id": "sorn-id", "extension-name": "sorn-id", "formal-name": "SORN ID", "description": "An assigned System of Records Notice (SORN) identifier for this system.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "expects": [ - { - "test": ".[@name='pta-4'][@ns='https://fedramp.gov/ns/oscal']/@value='yes' and .[@name='sorn-id'][@ns='https://fedramp.gov/ns/oscal']" - } - ] + "expect": {"test": ".[@name='pta-4'][@ns='https://fedramp.gov/ns/oscal']/@value='yes' and .[@name='sorn-id'][@ns='https://fedramp.gov/ns/oscal']"} } }, - "user-sensitivity-level": { + { + "id": "user-sensitivity-level", "extension-name": "sensitivity", "formal-name": "User Sensitivity Level", "description": "Defines the sensitivity level of the identified user type.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:user/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:user/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "high-risk", - "label": "High Risk", - "RICHTEXT": "Misuse of the user's access could result in grave damage to the public's trust." - }, - { - "value": "severe", - "label": "Severe", - "RICHTEXT": "Misuse of the user's access could result in a substantial degree of harm or serious damage to the public\u2019s trust." - }, - { - "value": "moderate", - "label": "Moderate", - "RICHTEXT": "Misuse of the user's access could result in a fair amount of harm or serious damage to the public\u2019s trust." - }, - { - "value": "limited", - "label": "Limited", - "RICHTEXT": "Misuse of the user's access could result in some harm or discernible damage to the public\u2019s trust." - }, - { - "value": "not-applicable", - "label": "Not Applicable", - "RICHTEXT": "The user does not have access to the system." - } - ] - } - ] - }, - "remarks": "Values are as required by FedRMAP for packages based on NIST 800-53, Revision 4.\n\nAuthoritative source: [OPM Position Designation (Page 18)](#871713A8-5A27-4AC3-8B94-972588469C6B)." + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "high-risk", + "label": "High Risk", + "#text": "Misuse of the user's access could result in grave damage to the public's trust." + }, + { + "value": "severe", + "label": "Severe", + "#text": "Misuse of the user's access could result in a substantial degree of harm or serious damage to the public\u2019s trust." + }, + { + "value": "moderate", + "label": "Moderate", + "#text": "Misuse of the user's access could result in a fair amount of harm or serious damage to the public\u2019s trust." + }, + { + "value": "limited", + "label": "Limited", + "#text": "Misuse of the user's access could result in some harm or discernible damage to the public\u2019s trust." + }, + { + "value": "not-applicable", + "label": "Not Applicable", + "#text": "The user does not have access to the system." + } + ] + } + }, + "remarks": { + "p": [ + "Values are as required by FedRMAP for packages based on NIST 800-53, Revision 4.", + { + "#text": "Authoritative source: ", + "a": { + "href": "#871713A8-5A27-4AC3-8B94-972588469C6B", + "#text": "OPM Position Designation (Page 18)" + }, + "#text1": "." + } + ] + } }, - "service-processor": { + { + "id": "service-processor", "extension-name": "service-processor", "formal-name": "Service Processor", "description": "Name of the interconnection service processor.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" } } }, - "information": { + { + "id": "information", "extension-name": "information", "formal-name": "Transmitted Information", "description": "Describes the information transmitted over the interconnection.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" } } }, - "asset-type": { + { + "id": "asset-type", "extension-name": "asset-type", "formal-name": "Asset Type", "description": "Identifies the type of asset.", - "bindings": [ - { - "pattern": "component/o:prop[@name='asset-type']" - }, - { - "pattern": "o:inventory-item/o:prop[@name='asset-type']" - } + "binding": [ + {"pattern": "component/o:prop[@name='asset-type']"}, + {"pattern": "o:inventory-item/o:prop[@name='asset-type']"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "os", - "RICHTEXT": "Operating System" - }, - { - "value": "database", - "RICHTEXT": "Database" - }, - { - "value": "web-server", - "RICHTEXT": "Service" - }, - { - "value": "dns-server", - "RICHTEXT": "Policy" - }, - { - "value": "email-server", - "RICHTEXT": "Process" - }, - { - "value": "directory-server", - "RICHTEXT": "Procedure" - }, - { - "value": "pbx", - "RICHTEXT": "Private Branch Exchange" - }, - { - "value": "firewall", - "RICHTEXT": "Firewall" - }, - { - "value": "router", - "RICHTEXT": "Router" - }, - { - "value": "switch", - "RICHTEXT": "Switch" - }, - { - "value": "storage-array", - "RICHTEXT": "Storage Array" - } - ] - } - ] + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "os", + "short-label": "OS", + "#text": "Operating System" + }, + { + "value": "database", + "short-label": "DB", + "#text": "Database" + }, + { + "value": "web-server", + "short-label": "Web", + "#text": "Service" + }, + { + "value": "dns-server", + "short-label": "DNS", + "#text": "Policy" + }, + { + "value": "email-server", + "short-label": "eMail", + "#text": "Process" + }, + { + "value": "directory-server", + "short-label": "LDAP", + "#text": "Procedure" + }, + { + "value": "pbx", + "short-label": "PBX", + "#text": "Private Branch Exchange" + }, + { + "value": "firewall", + "short-label": "FW", + "#text": "Firewall" + }, + { + "value": "router", + "short-label": "Rtr", + "#text": "Router" + }, + { + "value": "switch", + "short-label": "Swtch", + "#text": "Switch" + }, + { + "value": "storage-array", + "short-label": "Store", + "#text": "Storage Array" + } + ] + } } }, - "interconnection-direction": { + { + "id": "interconnection-direction", "extension-name": "interconnection-direction", "formal-name": "Interconnection Direction", "description": "Identifies the direction of information flow for the interconnection.", - "bindings": [ - { - "pattern": "o:component[@component-type='interconnection']/o:prop[@name='direction'][@ns='https://fedramp.gov/ns/oscal']" - } - ], + "binding": {"pattern": "o:component[@component-type='interconnection']/o:prop[@name='direction'][@ns='https://fedramp.gov/ns/oscal']"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "incoming", - "RICHTEXT": "Incoming" - }, - { - "value": "outgoing", - "RICHTEXT": "Outgoing" - }, - { - "value": "incoming-outgoing", - "RICHTEXT": "Bi-Directional" - } - ] - } - ] + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "incoming", + "short-label": "In", + "#text": "Incoming" + }, + { + "value": "outgoing", + "short-label": "Out", + "#text": "Outgoing" + }, + { + "value": "incoming-outgoing", + "short-label": "In/Out", + "#text": "Bi-Directional" + } + ] + } } }, - "interconnection-security": { + { + "id": "interconnection-security", "extension-name": "interconnection-security", "formal-name": "Interconnection Security", "description": "Identifies the type of security applied to the interconnection.", - "bindings": [ - { - "pattern": "o:component[@component-type='interconnection']/o:prop[@name='connection-security'][@ns='https://fedramp.gov/ns/oscal']/@value" - } - ], + "binding": {"pattern": "o:component[@component-type='interconnection']/o:prop[@name='connection-security'][@ns='https://fedramp.gov/ns/oscal']/@value"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "ipsec", - "RICHTEXT": "IPsec" - }, - { - "value": "vpn", - "RICHTEXT": "Virtual Private Network" - }, - { - "value": "ssl", - "RICHTEXT": "Secure Socket Layer" - }, - { - "value": "certificate", - "RICHTEXT": "Certificate" - }, - { - "value": "secure-file-transfer", - "RICHTEXT": "Secure File Transfer" - }, - { - "value": "other", - "RICHTEXT": "Other" - } - ] - } - ] + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "ipsec", + "short-label": "IPsec", + "#text": "IPsec" + }, + { + "value": "vpn", + "short-label": "VPN", + "#text": "Virtual Private Network" + }, + { + "value": "ssl", + "short-label": "SSL", + "#text": "Secure Socket Layer" + }, + { + "value": "certificate", + "short-label": "Cert", + "#text": "Certificate" + }, + { + "value": "secure-file-transfer", + "short-label": "SFT", + "#text": "Secure File Transfer" + }, + { + "value": "other", + "short-label": "Other", + "#text": "Other" + } + ] + } } }, - "port": { + { + "id": "port", "extension-name": "port", "formal-name": "Interconnection Port", "description": "A port used by the interconnection for the communication.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" }, - "expects": [ - { - "test": ".[@class]" - } - ] + "expect": {"test": ".[@class]"} } }, - "transport-type": { + { + "id": "transport-type", "extension-name": "transport-type", "formal-name": "Transport Type", "description": "The internet protocol transport type.", - "bindings": [ - { - "pattern": "o:component[@component-type='service']/o:protocol/o:port-range/@transport" - } - ], + "binding": {"pattern": "o:component[@component-type='service']/o:protocol/o:port-range/@transport"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "TCP", - "RICHTEXT": "TCP" - }, - { - "value": "UDP", - "RICHTEXT": "UDP" - } - ] - } - ] + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "tcp", + "short-label": "TCP", + "#text": "TCP" + }, + { + "value": "udp", + "short-label": "UDP", + "#text": "UDP" + } + ] + } } }, - "inventory-item-state": { + { + "id": "inventory-item-state", "extension-name": "inventory-item-state", "formal-name": "Different states of inventory items: public, private, et cetera.", "description": "Indicates if the asset is virtual.", - "bindings": [ - { - "pattern": "o:inventory-item/o:prop[@name='virtual']" - }, - { - "pattern": "o:component/o:prop[@name='virtual']" - }, - { - "pattern": "o:inventory-item/o:prop[@name='public']" - }, - { - "pattern": "component/o:prop[@name='public']" - }, - { - "pattern": "o:inventory-item/o:prop[@name='allows-authenticated-scan']/@value" - }, - { - "pattern": "o:component/o:prop[@name='allows-authenticated-scan']/@value" - }, - { - "pattern": "o:inventory-item/o:prop[@name='is-scanned']/@value" - }, - { - "pattern": "o:component/o:prop[@name='is-scanned']/@value" - } + "binding": [ + {"pattern": "o:inventory-item/o:prop[@name='virtual']"}, + {"pattern": "o:component/o:prop[@name='virtual']"}, + {"pattern": "o:inventory-item/o:prop[@name='public']"}, + {"pattern": "component/o:prop[@name='public']"}, + {"pattern": "o:inventory-item/o:prop[@name='allows-authenticated-scan']/@value"}, + {"pattern": "o:component/o:prop[@name='allows-authenticated-scan']/@value"}, + {"pattern": "o:inventory-item/o:prop[@name='is-scanned']/@value"}, + {"pattern": "o:component/o:prop[@name='is-scanned']/@value"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "RICHTEXT": "Yes" - }, - { - "value": "no", - "RICHTEXT": "No" - } - ] - } - ] + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "short-label": "Y", + "#text": "Yes" + }, + { + "value": "no", + "short-label": "N", + "#text": "No" + } + ] + } } }, - "circuit": { + { + "id": "circuit", "extension-name": "circuit", "formal-name": "Service Processor", "description": "A circuit used for the communication.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" } } }, - "connection-security": { + { + "id": "connection-security", "extension-name": "connection-security", "formal-name": "Connection Security", "description": "Identifies the mechanisms/protocol(s) used to secure the communication.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='interconnection']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "ipsec", - "label": "IPsec", - "RICHTEXT": "IPsec" - }, - { - "value": "vpn", - "label": "VPN", - "RICHTEXT": "Virtual Private Network" - }, - { - "value": "ssl", - "label": "SSL", - "RICHTEXT": "Secure Socket Layer" - }, - { - "value": "certificate", - "label": "Cert", - "RICHTEXT": "Certificate" - }, - { - "value": "secure-file-transfer", - "label": "SFT", - "RICHTEXT": "Secure File Transfer" - }, - { - "value": "other", - "label": "Other", - "RICHTEXT": "Other" - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "ipsec", + "label": "IPsec", + "#text": "IPsec" + }, + { + "value": "vpn", + "label": "VPN", + "#text": "Virtual Private Network" + }, + { + "value": "ssl", + "label": "SSL", + "#text": "Secure Socket Layer" + }, + { + "value": "certificate", + "label": "Cert", + "#text": "Certificate" + }, + { + "value": "secure-file-transfer", + "label": "SFT", + "#text": "Secure File Transfer" + }, + { + "value": "other", + "label": "Other", + "#text": "Other" + } + ] + } } }, - "service-used-by": { + { + "id": "service-used-by", "extension-name": "used-by", "formal-name": "Service Used By", "description": "Identifies what uses the service.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='service']/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:system-implementation/o:component[@type='service']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" } } }, - "scan-type": { + { + "id": "scan-type", "extension-name": "scan-type", "formal-name": "Scan Type", "description": "Identifies the type(s) of scans to be performed on this inventory-item or component.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:component/o:prop" - }, - { - "pattern": "/o:system-security-plan/o:system-implementation/o:system-inventory/o:o:inventory-item/o:prop" - }, - { - "pattern": "/o:assessment-plan/o:local-definitions/o:component/o:prop" - }, - { - "pattern": "/o:assessment-plan/o:local-definitions/o:o:inventory-item/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:local-definitions/o:component/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:local-definitions/o:o:inventory-item/o:prop" - } + "binding": [ + {"pattern": "/o:system-security-plan/o:system-implementation/o:component/o:prop"}, + {"pattern": "/o:system-security-plan/o:system-implementation/o:system-inventory/o:o:inventory-item/o:prop"}, + {"pattern": "/o:assessment-plan/o:local-definitions/o:component/o:prop"}, + {"pattern": "/o:assessment-plan/o:local-definitions/o:o:inventory-item/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:local-definitions/o:component/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:local-definitions/o:o:inventory-item/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, "max-occurs": "unbounded" }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "infrastructure", - "label": "Infrastructure", - "RICHTEXT": "The component or inventory item is included in operating system (OS) and/or infrastructure scans." - }, - { - "value": "database", - "label": "Database", - "RICHTEXT": "The component or inventory item is included in Database scans." - }, - { - "value": "web", - "label": "Web", - "RICHTEXT": "The component or inventory item is included in Web interface/application scans." - }, - { - "value": "other", - "label": "Other", - "RICHTEXT": "The component or inventory item is included in non-typical scans." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "infrastructure", + "label": "Infrastructure", + "#text": "The component or inventory item is included in operating system (OS) and/or infrastructure scans." + }, + { + "value": "database", + "label": "Database", + "#text": "The component or inventory item is included in Database scans." + }, + { + "value": "web", + "label": "Web", + "#text": "The component or inventory item is included in Web interface/application scans." + }, + { + "value": "other", + "label": "Other", + "#text": "The component or inventory item is included in non-typical scans." + } + ] + } } }, - "planned-completion-date": { + { + "id": "planned-completion-date", "extension-name": "planned-completion-date", "formal-name": "Planned Completion Date", "description": "Provides the date the control expects to be implemented. Must be present when Implementation Status is \"Planned\"", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:prop" - } - ], + "binding": {"pattern": "/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "date" - } - ], + "matches": {"data-type": "date"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "authorization-recommendation": { + { + "id": "authorization-recommendation", "extension-name": "authorization-recommendation", "formal-name": "Authorization Recommendation", "description": "Indicates whether the assessor recommends the system be authorized by the authorizing official.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:results/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-results/o:results/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Yes, the assessor recommends the system for authorization." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "No, the assessor does not recommend the system for authorization." - } - ] - } - ] - } - }, - "title-short": { - "extension-name": "title-short", - "formal-name": "Short Title", - "description": "The short name for the system represented in the resource.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop" + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Yes, the assessor recommends the system for authorization." + }, + { + "value": "no", + "label": "No", + "#text": "No, the assessor does not recommend the system for authorization." + } + ] } + } + }, + { + "id": "title-short", + "extension-name": "title-short", + "formal-name": "Short Title", + "description": "The short name for the system represented in the resource.", + "binding": [ + {"pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "system-id": { + { + "id": "system-id", "extension-name": "system-id", "formal-name": "System Identifier", "description": "The FedRAMP-assigned identifier for this system.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "import-profile": { + { + "id": "import-profile", "extension-name": "import-profile", "formal-name": "Profile", "description": "The baseline/profile for this sysytem based on its FIPS-199 categorization.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "uri" - } - ], + "matches": {"data-type": "uri"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "authorization-date": { + { + "id": "authorization-date", "extension-name": "authorization-date", "formal-name": "Authorization Date", "description": "The date the system was authorized. Omit or leave blank for an initial authorization.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "date" - } - ], + "matches": {"data-type": "date"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "purpose": { + { + "id": "purpose", "extension-name": "purpose", "formal-name": "Purpose", "description": "Explains the system's purpose.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "description": { + { + "id": "description", "extension-name": "description", "formal-name": "Description", "description": "A brief description of the system.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:back-matter/o:resource/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:back-matter/o:resource/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "sampling": { + { + "id": "sampling", "extension-name": "sampling", "formal-name": "Sampling", "description": "Indicates whether a sampling methodology was used instead of assessing the entire system.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:assessment-subject/o:prop" - }, - { - "pattern": "/o:assessment-results/o:results/o:assessment-subject/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan/o:assessment-subject/o:prop"}, + {"pattern": "/o:assessment-results/o:results/o:assessment-subject/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "Yes, a sampling methodology was used." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "No, a sampling methodology was not used." - } - ] - } - ] - } - }, - "POAM-ID": { - "extension-name": "POAM-ID", - "formal-name": "POA&M ID", - "description": "A CSP-assigned POA&M identifier.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:poam-item/o:prop" - } - ], - "constraint": { - "matches": [ - { - "data-type": "string" - } - ], - "has-cardinality": { - "min-occurs": 0, - "max-occurs": "1" + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "Yes, a sampling methodology was used." + }, + { + "value": "no", + "label": "No", + "#text": "No, a sampling methodology was not used." + } + ] } } }, - "control-objective-implementation-status": { + { + "id": "control-objective-implementation-status", "extension-name": "control-objective-implementation-status", "formal-name": "Objective Implementation Status", "description": "Indicates the implementation status of the control objective.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:results/o:finding/o:objective-status/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-results/o:results/o:finding/o:objective-status/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "implemented", - "label": "Implemented", - "RICHTEXT": "The assessor finds sufficient evidence to agree the control objective is fully implemented." - }, - { - "value": "partial", - "label": "Partial", - "RICHTEXT": "The assessor finds evidence to suggest a portion of the control objective is implemented and a portion is not." - }, - { - "value": "planned", - "label": "Planned", - "RICHTEXT": "The assessor finds this control objective is not implemented, but there is evidence the system owner has a plan for implemnting it." - }, - { - "value": "alternative", - "label": "Alternative Implementation", - "RICHTEXT": "The assessor finds evidence of an alternative implementation, which the assessor judges to provide protection similar enough to satisfy this control." - }, - { - "value": "not-applicable", - "label": "Not Applicable (N/A)", - "RICHTEXT": "The assessor finds this control objective does not apply to this system." - } - ] - } - ] + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "implemented", + "label": "Implemented", + "#text": "The assessor finds sufficient evidence to agree the control objective is fully implemented." + }, + { + "value": "partial", + "label": "Partial", + "#text": "The assessor finds evidence to suggest a portion of the control objective is implemented and a portion is not." + }, + { + "value": "planned", + "label": "Planned", + "#text": "The assessor finds this control objective is not implemented, but there is evidence the system owner has a plan for implemnting it." + }, + { + "value": "alternative", + "label": "Alternative Implementation", + "#text": "The assessor finds evidence of an alternative implementation, which the assessor judges to provide protection similar enough to satisfy this control." + }, + { + "value": "not-applicable", + "label": "Not Applicable (N/A)", + "#text": "The assessor finds this control objective does not apply to this system." + } + ] + } } }, - "control-implementation-status": { + { + "id": "control-implementation-status", "extension-name": "implementation-status", "formal-name": "Control Implementation Status", "description": "Indicates the implementation status of the control.", - "bindings": [ - { - "pattern": "o:implemented-requirement/o:prop[@name='implementation-status']/@value" - } - ], + "binding": {"pattern": "o:implemented-requirement/o:prop[@name='implementation-status']/@value"}, "constraint": { "has-cardinality": { "min-occurs": 1, "max-occurs": "unbounded" }, - "remarks": "When an prop is defined as an extension, a separate constraint assembly is needed to specify datatype and allowed values on the `@value` flag." + "remarks": { + "p": { + "#text": "When an prop is defined as an extension, a separate constraint assembly is needed to specify datatype and allowed values on the ", + "code": "@value", + "#text1": " flag." + } + } } }, - "leveraged-authorization": { + { + "id": "leveraged-authorization", "extension-name": "leveraged-authorization-uuid", "formal-name": "Leveraged Authorization", "description": "Indicates a leveraged authorization used for this control.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:results/o:finding/o:objective-status/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-results/o:results/o:finding/o:objective-status/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "uuid" - } - ], + "matches": {"data-type": "uuid"}, "has-cardinality": { "min-occurs": 0, "max-occurs": "unbounded" } }, - "remarks": "This is for legacy SSP convertion to OSCAL. The preferred approach is to specificy the leveraged system as a `component` and reference it in the control using `by-component`." + "remarks": { + "p": { + "#text": "This is for legacy SSP convertion to OSCAL. The preferred approach is to specificy the leveraged system as a ", + "code": "component", + "#text1": " and reference it in the control using ", + "code#1": "by-component", + "#text2": "." + } + } }, - "control-origination": { + { + "id": "control-origination", "extension-name": "control-origination", "formal-name": "Control Origination", "description": "The point(s) from which the control satisfaction originates.", - "bindings": [ - { - "pattern": "implemented-requirement/o:prop[@name='control-origination']/@value" - } - ], + "binding": {"pattern": "implemented-requirement/o:prop[@name='control-origination']/@value"}, "constraint": { "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "sp-corporate", - "RICHTEXT": "Service Provider (Corporate)" - }, - { - "value": "sp-system", - "RICHTEXT": "Service Provider (System Specific)" - }, - { - "value": "customer-configured", - "RICHTEXT": "Configured by Customer" - }, - { - "value": "customer-provided", - "RICHTEXT": "Provided by Customer" - }, - { - "value": "inherited", - "RICHTEXT": "Inherited" - } - ] + "remarks": { + "p": { + "#text": "When an prop is defined as an extension, a separate constraint assembly is needed to specify datatype and allowed values on the ", + "code": "@value", + "#text1": " flag." } - ], - "remarks": "When an prop is defined as an extension, a separate constraint assembly is needed to specify datatype and allowed values on the `@value` flag." + }, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "sp-corporate", + "short-label": "SP Corporate", + "#text": "Service Provider (Corporate)" + }, + { + "value": "sp-system", + "short-label": "SP System", + "#text": "Service Provider (System Specific)" + }, + { + "value": "customer-configured", + "short-label": "Cust. Configured", + "#text": "Configured by Customer" + }, + { + "value": "customer-provided", + "short-label": "Cust. Provided", + "#text": "Provided by Customer" + }, + { + "value": "inherited", + "short-label": "Inherited", + "#text": "Inherited" + } + ] + } } }, - "no-oscal-ssp-title-short": { + { + "id": "no-oscal-ssp-title-short", "extension-name": "title-short", "formal-name": "Short System Name", "description": "The abbreviated name for the system, such as an acronym.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "no-oscal-ssp-system-id": { + { + "id": "no-oscal-ssp-system-id", "extension-name": "system-id", "formal-name": "Short System Name", "description": "The FedRAMP-assigned system identifier.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "no-oscal-ssp-import-profile": { + { + "id": "no-oscal-ssp-import-profile", "extension-name": "import-profile", "formal-name": "Relevant Baseline", "description": "Identifies the relevant OSCAL baseline.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "uri" - } - ], + "matches": {"data-type": "uri"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } }, - "remarks": "As with all URIs in OSCAL, this may contain a URI fragment, which identifies the local resource containing the relevant profile." + "remarks": {"p": "As with all URIs in OSCAL, this may contain a URI fragment, which identifies the local resource containing the relevant profile."} }, - "no-oscal-ssp-purpose": { + { + "id": "no-oscal-ssp-purpose", "extension-name": "system-id", "formal-name": "Short System Name", "description": "The FedRAMP-assigned system identifier.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "no-oscal-ssp-authorization-date": { + { + "id": "no-oscal-ssp-authorization-date", "extension-name": "authorization-date", "formal-name": "Authorization Date", "description": "The date of the system's initial FedRAMP authorization.", - "bindings": [ - { - "pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-plan/o:back-matter/o:resource[./o:prop[@name='type'][.='no-oscal-ssp']]/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "dateTime-with-timezone" - } - ], + "matches": {"data-type": "dateTime-with-timezone"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 } } }, - "task-login-url": { + { + "id": "task-login-url", "extension-name": "logn-url", "formal-name": "Login URL", "description": "The login URL for a web application.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-implementation/o:o:inventory-item/o:prop" - }, - { - "pattern": "/o:assessment-plan//o:task/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop" - } + "binding": [ + {"pattern": "/o:system-security-plan/o:system-implementation/o:o:inventory-item/o:prop"}, + {"pattern": "/o:assessment-plan//o:task/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "NCName" - } - ] + "matches": {"data-type": "NCName"} } }, - "task-login-id": { + { + "id": "task-login-id", "extension-name": "logn-id", "formal-name": "Login ID", "description": "The login ID used to assess the web application.", - "bindings": [ - { - "pattern": "/o:assessment-plan//o:task/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan//o:task/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "NCName" - } - ] + "matches": {"data-type": "NCName"} } }, - "task-test-type": { + { + "id": "task-test-type", "extension-name": "test-type", "formal-name": "Test Type", "description": "Indicates the type of test represented by the task.", - "bindings": [ - { - "pattern": "/o:assessment-plan//o:task/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan//o:task/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "NCName" - } - ], - "allowed-values": [ - { - "enums": [ - { - "value": "web-applicaiton", - "label": "Web Application", - "RICHTEXT": "This task tests a web application." - } - ] + "matches": {"data-type": "NCName"}, + "allowed-values": { + "enum": { + "value": "web-applicaiton", + "label": "Web Application", + "#text": "This task tests a web application." } - ] + } } }, - "task-user-uuid": { + { + "id": "task-user-uuid", "extension-name": "user-uuid", "formal-name": "User Identifier", "description": "Cites the SSP defined user role to use for testing.", - "bindings": [ - { - "pattern": "/o:assessment-plan//o:task/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-plan//o:task/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:local-definition/o:o:inventory-item/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "uuid" - } - ] + "matches": {"data-type": "uuid"} } }, - "poam-id": { - "extension-name": "POAM-ID", - "formal-name": "CSP POA&M Identifier", - "description": "A CSP-assigned identifier for this POA&M item.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:poam-item/o:prop" - } - ], + { + "id": "poam-id", + "extension-name": "poam-id", + "formal-name": "POA&M ID", + "description": "A CSP-assigned POA&M identifier.", + "binding": {"pattern": "/o:plan-of-action-and-milestones/o:poam-item/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "NCName" - } - ] + "matches": {"data-type": "string"}, + "has-cardinality": { + "min-occurs": 0, + "max-occurs": 1 + } } }, - "poam-impacted-control": { + { + "id": "poam-impacted-control", "extension-name": "impacted-control-id", "formal-name": "Impacted Control", "description": "A control impacted by this POA&M item.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ] + "matches": {"data-type": "token"} }, - "remarks": "Impacted control is required in the POA&M and optional in the SAR.\n\nIt is allowed in the SAR in anticipation of duplicatng open risks from the SAR to the POA&M." + "remarks": { + "p": [ + "Impacted control is required in the POA&M and optional in the SAR.", + "It is allowed in the SAR in anticipation of duplicatng open risks from the SAR to the POA&M." + ] + } }, - "sar-risk-priority": { + { + "id": "sar-risk-priority", "extension-name": "priority", "formal-name": "Risk Priority", "description": "Assessor's recommended risk priority. Lower numbers are higher priority. One (1) is highest priority.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - } + "binding": [ + {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "integer" - } - ], + "matches": {"data-type": "integer"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "sar-recommend-authorization": { + { + "id": "sar-recommend-authorization", "extension-name": "recommend-authorization", "formal-name": "Assessor's Authorization Recommendation", "description": "Indicates the assessor's reommendation for initial or continued authorization.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:result/o:attestation/o:part[@name='authorization-statements']/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-results/o:result/o:attestation/o:part[@name='authorization-statements']/o:prop"}, "constraint": { - "matches": [ - { - "data-type": "NCName" - } - ], + "matches": {"data-type": "NCName"}, "has-cardinality": { "min-occurs": 1, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "enums": [ - { - "value": "yes", - "label": "Yes", - "RICHTEXT": "The assessor recommends initial or continued authorization." - }, - { - "value": "no", - "label": "No", - "RICHTEXT": "The assessor does not recommend initial or continued authorization." - } - ] - } - ] + "allowed-values": { + "enum": [ + { + "value": "yes", + "label": "Yes", + "#text": "The assessor recommends initial or continued authorization." + }, + { + "value": "no", + "label": "No", + "#text": "The assessor does not recommend initial or continued authorization." + } + ] + } } }, - "likelihood": { + { + "id": "likelihood", "extension-name": "likelihood", "formal-name": "Likelihood", "description": "The likelihood of a risk.", - "bindings": [ - { - "pattern": "o:risk/o:risk-metric[@name='likelihood'][@system='https://fedramp.gov']" - } - ] + "binding": {"pattern": "o:risk/o:risk-metric[@name='likelihood'][@system='https://fedramp.gov']"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "low", + "short-label": "L", + "#text": "Low" + }, + { + "value": "moderate", + "short-label": "M", + "#text": "Moderate" + }, + { + "value": "high", + "short-label": "H", + "#text": "High" + } + ] + } }, - "vulnerability-identifier": { + { + "id": "vulnerability-identifier", "extension-name": "vulnerability-id", "formal-name": "Vulnerability Identifier", "description": "A tool assigned vulnerability ID.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop" - } + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "plugin-identifier": { + { + "id": "plugin-identifier", "extension-name": "plugin-id", "formal-name": "Plugin Identifier", "description": "A tool assigned Plugin ID.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop" - } + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:risk/o:characterization/o:origin/o:actor[@type='tool']/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "string" - } - ], + "matches": {"data-type": "string"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 } } }, - "operational-requirement": { + { + "id": "operational-requirement", "extension-name": "operational-requirement", "formal-name": "Operational Requirement", "description": "The risk cannot be remediated without impact to the system and must be accepted.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:observation/o:prop" - } + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:observation/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "enums": [ - { - "value": "investigating", - "label": "Investigating", - "RICHTEXT": "A possible operational requirement is being investigated." - }, - { - "value": "pending", - "label": "Tracking", - "RICHTEXT": "An operational requirement deviation request was submitted to the AO and is pending adjudication." - }, - { - "value": "approved", - "label": "Approved", - "RICHTEXT": "The operational requirement has been approved by the AO." - }, - { - "value": "withdrawn", - "label": "Withdrawn", - "RICHTEXT": "The operational requirement was withdrawn." - } - ] - } - ] + "allowed-values": { + "enum": [ + { + "value": "investigating", + "label": "Investigating", + "#text": "A possible operational requirement is being investigated." + }, + { + "value": "pending", + "label": "Tracking", + "#text": "An operational requirement deviation request was submitted to the AO and is pending adjudication." + }, + { + "value": "approved", + "label": "Approved", + "#text": "The operational requirement has been approved by the AO." + }, + { + "value": "withdrawn", + "label": "Withdrawn", + "#text": "The operational requirement was withdrawn." + } + ] + } } }, - "false-positive": { + { + "id": "false-positive", "extension-name": "false-positive", "formal-name": "False Positive", "description": "The risk was found to be a false positive report.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:observation/o:prop" - } + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:observation/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "NCName" - } - ], + "matches": {"data-type": "NCName"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "enums": [ - { - "value": "investigating", - "label": "Investigating", - "RICHTEXT": "A possible risk adjustment is being investigated." - }, - { - "value": "pending", - "label": "Tracking", - "RICHTEXT": "A false positive deviation request was submitted to the AO and is pending adjudication." - }, - { - "value": "approved", - "label": "Approved", - "RICHTEXT": "The false positive has been approved by the AO." - }, - { - "value": "withdrawn", - "label": "Withdrawn", - "RICHTEXT": "The false positive was withdrawn." - } - ] - } - ] + "allowed-values": { + "enum": [ + { + "value": "investigating", + "label": "Investigating", + "#text": "A possible risk adjustment is being investigated." + }, + { + "value": "pending", + "label": "Tracking", + "#text": "A false positive deviation request was submitted to the AO and is pending adjudication." + }, + { + "value": "approved", + "label": "Approved", + "#text": "The false positive has been approved by the AO." + }, + { + "value": "withdrawn", + "label": "Withdrawn", + "#text": "The false positive was withdrawn." + } + ] + } } }, - "risk-adjustment": { + { + "id": "risk-adjustment", "extension-name": "risk-adjustment", "formal-name": "Risk Adjustment", "description": "Mitigating factors were identified or implemented, reducing the likelihood or impact of the risk.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:observation/o:prop" - } + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:observation/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" + "max-occurs": 1 }, - "allowed-values": [ - { - "enums": [ - { - "value": "investigating", - "label": "Investigating", - "RICHTEXT": "A possible risk adjustment is being investigated." - }, - { - "value": "pending", - "label": "Tracking", - "RICHTEXT": "A risk adjustment deviation request was submitted to the AO and is pending adjudication." - }, - { - "value": "approved", - "label": "Approved", - "RICHTEXT": "The risk adjustment has been approved by the AO." - }, - { - "value": "withdrawn", - "label": "Withdrawn", - "RICHTEXT": "The risk adjustment was withdrawn." - } - ] - } - ] + "allowed-values": { + "enum": [ + { + "value": "investigating", + "label": "Investigating", + "#text": "A possible risk adjustment is being investigated." + }, + { + "value": "pending", + "label": "Tracking", + "#text": "A risk adjustment deviation request was submitted to the AO and is pending adjudication." + }, + { + "value": "approved", + "label": "Approved", + "#text": "The risk adjustment has been approved by the AO." + }, + { + "value": "withdrawn", + "label": "Withdrawn", + "#text": "The risk adjustment was withdrawn." + } + ] + } } }, - "vendor-dependency": { + { + "id": "vendor-dependency", "extension-name": "vendor-dependency", "formal-name": "Vendor Dependency", "description": "A vendor resolution is pending, but not yet available.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - }, - { - "pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop" - }, - { - "pattern": "/o:assessment-results/o:result/o:observation/o:prop" - } + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, + {"pattern": "/o:plan-of-action-and-milestones/o:observation/o:prop"}, + {"pattern": "/o:assessment-results/o:result/o:observation/o:prop"} ], "constraint": { - "matches": [ - { - "data-type": "token" - } - ], + "matches": {"data-type": "token"}, "has-cardinality": { "min-occurs": 0, - "max-occurs": "1" - }, - "allowed-values": [ - { - "enums": [ - { - "value": "investigating", - "label": "Investigating", - "RICHTEXT": "The risk is a suspected vendor dependency, and is being investigated for verification." - }, - { - "value": "tracking", - "label": "Tracking", - "RICHTEXT": "The vendor has confirmed the issue and is working on a resolution." - }, - { - "value": "resolved", - "label": "Resolved", - "RICHTEXT": "The vendor released the fix and it has been applied." - }, - { - "value": "withdrawn", - "label": "Withdrawn", - "RICHTEXT": "The vendor dependency was withdrawn." - } - ] - } - ] - } - } - }, - "constraints": [ - { - "name": "observation-types", - "formal-name": "Observation Types", - "description": "In addition to the NIST observation types, FedRAMP requires observaton types to support risk deviations and vendor dependencies.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:observation/o:type" + "max-occurs": 1 }, - { - "pattern": "/o:assessment-results/o:result/o:observation/o:type" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "vendor-dependency", - "label": "Vendor Dependency", - "RICHTEXT": "The observation provides evidence of reliance on a vendor for a pending resolution that is not yet available." - }, + "allowed-values": { + "enum": [ { - "value": "false-positive", - "label": "False Positive", - "RICHTEXT": "The observation provides evidence the associated risk is a false positive finding." + "value": "investigating", + "label": "Investigating", + "#text": "The risk is a suspected vendor dependency, and is being investigated for verification." }, { - "value": "operational-requirement", - "label": "Operational Requirement", - "RICHTEXT": "The observation provides evidence to substantiate the assertion that remediating the risk will have an adverse impact on the system." + "value": "tracking", + "label": "Tracking", + "#text": "The vendor has confirmed the issue and is working on a resolution." }, { - "value": "risk-adjustment", - "label": "Risk Adjustment", - "RICHTEXT": "The observation provides evidence to justify an adjustment to the likelihood or impact values." + "value": "resolved", + "label": "Resolved", + "#text": "The vendor released the fix and it has been applied." }, { - "value": "closure", - "label": "Closure", - "RICHTEXT": "The observation provides evidence of risk closure." + "value": "withdrawn", + "label": "Withdrawn", + "#text": "The vendor dependency was withdrawn." } ] } - ] + } + } + ], + "constraint": [ + { + "name": "observation-types", + "formal-name": "Observation Types", + "description": "In addition to the NIST observation types, FedRAMP requires observaton types to support risk deviations and vendor dependencies.", + "binding": [ + {"pattern": "/o:plan-of-action-and-milestones/o:observation/o:type"}, + {"pattern": "/o:assessment-results/o:result/o:observation/o:type"} + ], + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "vendor-dependency", + "label": "Vendor Dependency", + "#text": "The observation provides evidence of reliance on a vendor for a pending resolution that is not yet available." + }, + { + "value": "false-positive", + "label": "False Positive", + "#text": "The observation provides evidence the associated risk is a false positive finding." + }, + { + "value": "operational-requirement", + "label": "Operational Requirement", + "#text": "The observation provides evidence to substantiate the assertion that remediating the risk will have an adverse impact on the system." + }, + { + "value": "risk-adjustment", + "label": "Risk Adjustment", + "#text": "The observation provides evidence to justify an adjustment to the likelihood or impact values." + }, + { + "value": "closure", + "label": "Closure", + "#text": "The observation provides evidence of risk closure." + } + ] + } }, { "name": "sar-risk-impacted-control", "formal-name": "Impacted Control", "description": "The impacted control field is optional in the SAR, but helpful in anticipation of copying open risks to the POA&M.", - "bindings": [ - { - "pattern": "/o:assessment-results/o:result/o:risk/o:prop" - } - ], + "binding": {"pattern": "/o:assessment-results/o:result/o:risk/o:prop"}, "has-cardinality": { "min-occurs": 0, "max-occurs": "unbounded" @@ -2206,11 +1730,7 @@ "name": "poam-risk-impacted-control", "formal-name": "Impacted Control", "description": "At least one impacted control field is required in the POA&M.", - "bindings": [ - { - "pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop" - } - ], + "binding": {"pattern": "/o:plan-of-action-and-milestones/o:risk/o:prop"}, "has-cardinality": { "min-occurs": 0, "max-occurs": "unbounded" @@ -2220,781 +1740,724 @@ "name": "control-origination-constraints", "formal-name": "Control Origination", "description": "The point(s) from which the control satisfaction originates.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:control-implmentation/o:implemented-requirement/o:prop[@name='control-origination'][@ns='https://fedramp.gov/ns/oscal']/@value" - } - ], - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "sp-corporate", - "label": "SP Corporate", - "RICHTEXT": "Service Provider (Corporate)" - }, - { - "value": "sp-system", - "label": "SP System", - "RICHTEXT": "Service Provider (System Specific)" - }, - { - "value": "customer-configured", - "label": "Cust. Configured", - "RICHTEXT": "Configured by Customer" - }, - { - "value": "customer-provided", - "label": "Cust. Provided", - "RICHTEXT": "Provided by Customer" - }, - { - "value": "inherited", - "label": "Inherited", - "RICHTEXT": "Inherited" - } - ] - } - ] + "binding": {"pattern": "/o:system-security-plan/o:control-implmentation/o:implemented-requirement/o:prop[@name='control-origination'][@ns='https://fedramp.gov/ns/oscal']/@value"}, + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "sp-corporate", + "label": "SP Corporate", + "#text": "Service Provider (Corporate)" + }, + { + "value": "sp-system", + "label": "SP System", + "#text": "Service Provider (System Specific)" + }, + { + "value": "customer-configured", + "label": "Cust. Configured", + "#text": "Configured by Customer" + }, + { + "value": "customer-provided", + "label": "Cust. Provided", + "#text": "Provided by Customer" + }, + { + "value": "inherited", + "label": "Inherited", + "#text": "Inherited" + } + ] + } }, { "name": "control-implementation-status-constraints", "formal-name": "Control Implementation Status Constraints", "description": "Defines the data type and allowed values for the Control Implementation Status", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:control-implmentation/o:implemented-requirement/o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal']/@value" - } - ], - "matches": [ - { - "data-type": "token" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "implemented", - "label": "Implemented", - "RICHTEXT": "The assessor finds sufficient evidence to agree the control objective is fully implemented." - }, - { - "value": "partial", - "label": "Partial", - "RICHTEXT": "The assessor finds evidence to suggest a portion of the control objective is implemented and a portion is not." - }, - { - "value": "planned", - "label": "Planned", - "RICHTEXT": "The assessor finds this control objective is not implemented, but there is evidence the system owner has a plan for implemnting it." - }, - { - "value": "alternative", - "label": "Alternative Implementation", - "RICHTEXT": "The assessor finds evidence of an alternative implementation, which the assessor judges to provide protection similar enough to satisfy this control." - }, - { - "value": "not-applicable", - "label": "Not Applicable (N/A)", - "RICHTEXT": "The assessor finds this control objective does not apply to this system." - } - ] - } - ], - "remarks": "When an extension is an prop, the data type and allowed values must be defined in a separate constraint." + "binding": {"pattern": "/o:system-security-plan/o:control-implmentation/o:implemented-requirement/o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal']/@value"}, + "matches": {"data-type": "token"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "implemented", + "label": "Implemented", + "#text": "The assessor finds sufficient evidence to agree the control objective is fully implemented." + }, + { + "value": "partial", + "label": "Partial", + "#text": "The assessor finds evidence to suggest a portion of the control objective is implemented and a portion is not." + }, + { + "value": "planned", + "label": "Planned", + "#text": "The assessor finds this control objective is not implemented, but there is evidence the system owner has a plan for implemnting it." + }, + { + "value": "alternative", + "label": "Alternative Implementation", + "#text": "The assessor finds evidence of an alternative implementation, which the assessor judges to provide protection similar enough to satisfy this control." + }, + { + "value": "not-applicable", + "label": "Not Applicable (N/A)", + "#text": "The assessor finds this control objective does not apply to this system." + } + ] + }, + "remarks": {"p": "When an extension is an prop, the data type and allowed values must be defined in a separate constraint."} }, { "formal-name": "Control Implementation Status Constraints", "description": "Remarks are required for certain Control Implementation Status values.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:control-implmentation/o:implemented-requirement" - } - ], - "matches": [ - { - "data-type": "NCName" - } - ], - "expects": [ - { - "test": "(o:prop[@name='planned-completion'][@ns='https://fedramp.gov/ns/oscal'])" - } - ] - }, - { - "formal-name": "FedRAMP Facet System Constraints" + "binding": {"pattern": "/o:system-security-plan/o:control-implmentation/o:implemented-requirement"}, + "matches": {"data-type": "NCName"}, + "expect": {"test": "(o:prop[@name='planned-completion'][@ns='https://fedramp.gov/ns/oscal'])"} }, + {"formal-name": "FedRAMP Facet System Constraints"}, { "name": "planned-completion-date", "formal-name": "Planned Implementation Date Exists", "description": "If the control implementation status is \"Planned\" a \"Planned Implementation Date\" must be provided.", - "props": [ - { - "name": "reference", - "value": "3.1" - } - ], - "bindings": [ - { - "pattern": "/o:system-security-plan/o:control-implementation/o:implemented-requirement[o:prop[@name='implementation-status'][@value='planned']]" - } - ], - "expects": [ - { - "test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='partial']/remarks)" - }, - { - "test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='planned']/remarks)" - }, - { - "test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='alternative']/remarks)" - }, - { - "test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='not-applicable']/remarks)" + "prop": { + "name": "reference", + "#text": 3.1 + }, + "binding": {"pattern": "/o:system-security-plan/o:control-implementation/o:implemented-requirement[o:prop[@name='implementation-status'][@value='planned']]"}, + "expect": [ + {"test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='partial']/remarks)"}, + {"test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='planned']/remarks)"}, + {"test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='alternative']/remarks)"}, + {"test": "(o:prop[@name='implementation-status'][@ns='https://fedramp.gov/ns/oscal'][@value='not-applicable']/remarks)"} + ], + "remarks": { + "p": { + "#text": "In the SSP, if ", + "code": "implemented-requirement", + "#text1": " includes ", + "code#1": "prop[@name='implementation-status']", + "#text2": " with ", + "code#2": "value='planned'", + "#text3": ", a ", + "code#3": "planned-completion-date", + "#text4": " extension must be provided." } - ], - "remarks": "In the SSP, if `implemented-requirement` includes `prop[@name='implementation-status']` with `value='planned'`, a `planned-completion-date` extension must be provided." + } }, { "formal-name": "Port Class Exists", "description": "If a port number is provided as part of an interconnection, Local or Remote must be specified.", - "bindings": [ - { - "pattern": "o:system-security-plan/o:system-implementation/o:component[@component-type='interconnection']/o:prop[@name='port']" - } - ], - "expects": [ - { - "test": "exists(@class)" - } - ], - "remarks": "The port field is a FedRAMP extension - a property assigned to a component with a component type of 'interconnection'.\n\nWhen this extension is present, it must include a `@class` flag with a value of either 'local' or 'remote'." + "binding": {"pattern": "o:system-security-plan/o:system-implementation/o:component[@component-type='interconnection']/o:prop[@name='port']"}, + "expect": {"test": "exists(@class)"}, + "remarks": { + "p": [ + "The port field is a FedRAMP extension - a property assigned to a component with a component type of 'interconnection'.", + { + "#text": "When this extension is present, it must include a ", + "code": "@class", + "#text1": " flag with a value of either 'local' or 'remote'." + } + ] + } }, { "formal-name": "Port Class Valid Values", "description": "If a port number is provided as part of an interconnection, Local or Remote must be specified.", - "bindings": [ - { - "pattern": "o:system-security-plan/o:system-implementation/o:component[@component-type='interconnection']/o:prop[@name='port']/@class" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "local", - "label": "Local", - "RICHTEXT": "The identified port number is used by the interconnected system to communicate with this system." - }, - { - "value": "remote", - "label": "Remote", - "RICHTEXT": "The identified poart number is used by this system to communicate with the interconnected system." - } - ] - } - ], - "remarks": "The port field is a FedRAMP extension - a property assigned to a component with a component type of 'interconnection'.\n\nWhen this extension is present, it must include a `@class` flag with a value of either 'local' or 'remote'." + "binding": {"pattern": "o:system-security-plan/o:system-implementation/o:component[@component-type='interconnection']/o:prop[@name='port']/@class"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "local", + "label": "Local", + "#text": "The identified port number is used by the interconnected system to communicate with this system." + }, + { + "value": "remote", + "label": "Remote", + "#text": "The identified poart number is used by this system to communicate with the interconnected system." + } + ] + }, + "remarks": { + "p": [ + "The port field is a FedRAMP extension - a property assigned to a component with a component type of 'interconnection'.", + { + "#text": "When this extension is present, it must include a ", + "code": "@class", + "#text1": " flag with a value of either 'local' or 'remote'." + } + ] + } }, { "formal-name": "Additional Component Types", "description": "Identifies additional component types for Assessment Assets in the SAP and SAR.", - "bindings": [ - { - "pattern": "o:assessment-plan/o:assessment-assets/o:component/@type" - }, - { - "pattern": "o:assessment-results/o:assessment-result/o:local-definitions/o:assessment-assets/o:component/@type" - } + "binding": [ + {"pattern": "o:assessment-plan/o:assessment-assets/o:component/@type"}, + {"pattern": "o:assessment-results/o:assessment-result/o:local-definitions/o:assessment-assets/o:component/@type"} ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "assessment-origination", - "label": "Assessment Origination", - "RICHTEXT": "The component identifies one or more IP addresses from which assessment activities may be performed." - } - ] + "allowed-values": { + "allow-other": "no", + "enum": { + "value": "assessment-origination", + "label": "Assessment Origination", + "#text": "The component identifies one or more IP addresses from which assessment activities may be performed." } - ], - "remarks": "For FedRAMP, the SAP must identify the IP addresses from which scanning and penetration test activities are performed, and the SAR must identify the actual IP addresses used.\n\nThis requires an additional component type in the SAP's `assessment-assets`, and in the SAR's `result`, `local-definitions`, `assessment-assets`." + }, + "remarks": { + "p": [ + "For FedRAMP, the SAP must identify the IP addresses from which scanning and penetration test activities are performed, and the SAR must identify the actual IP addresses used.", + { + "#text": "This requires an additional component type in the SAP's ", + "code": "assessment-assets", + "#text1": ", and in the SAR's ", + "code#1": "result", + "#text2": ", ", + "code#2": "local-definitions", + "#text3": ", ", + "code#3": "assessment-assets", + "#text4": "." + } + ] + } }, { "name": "fedramp-general-role-identifiers", "formal-name": "General Role Identifiers", "description": "FedRAMP additional roles identifiers.", - "bindings": [ - { - "pattern": "/*/o:metadata/o:role/@id" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "fedramp-pmo", - "label": "FedRAMP PMO", - "RICHTEXT": "The FedRAMP Program Management Office (PMO)" - }, - { - "value": "fedramp-jab", - "label": "FedRAMP JAB", - "RICHTEXT": "The FedRAMP Joint Authorization Board (JAB)" - }, - { - "value": "cloud-service-provider", - "label": "CSP", - "RICHTEXT": "Cloud Service Provider" - }, - { - "value": "csp-operations-center", - "label": "CSP Operations Center", - "RICHTEXT": "Cloud Service Provider Operations Center" - } - ] - } - ], - "remarks": "These are in addition to the NIST-defined allowed values for role identifiers, and apply to all OSCAL-based FedRAMP content." + "binding": {"pattern": "/*/o:metadata/o:role/@id"}, + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "fedramp-pmo", + "label": "FedRAMP PMO", + "#text": "The FedRAMP Program Management Office (PMO)" + }, + { + "value": "fedramp-jab", + "label": "FedRAMP JAB", + "#text": "The FedRAMP Joint Authorization Board (JAB)" + }, + { + "value": "cloud-service-provider", + "label": "CSP", + "#text": "Cloud Service Provider" + }, + { + "value": "csp-operations-center", + "label": "CSP Operations Center", + "#text": "Cloud Service Provider Operations Center" + } + ] + }, + "remarks": {"p": "These are in addition to the NIST-defined allowed values for role identifiers, and apply to all OSCAL-based FedRAMP content."} }, { "name": "fedramp-assessment-role-identifiers", "formal-name": "Assessment Role Identifiers", "description": "FedRAMP additional roles identifiers.", - "bindings": [ - { - "pattern": "/*/o:metadata/o:role/@id" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "assessor", - "label": "Assesor", - "RICHTEXT": "Assesor" - }, - { - "value": "assessment-team", - "label": "Assessment Team", - "RICHTEXT": "Assessment Team" - }, - { - "value": "assessment-lead", - "label": "Assessment Lead", - "RICHTEXT": "Assessment Lead" - }, - { - "value": "assessment-executive", - "label": "Assessment Executive", - "RICHTEXT": "Assessment Executive" - }, - { - "value": "csp-assessment-poc", - "label": "CSP Assessment PoC", - "RICHTEXT": "Cloud Service Provider Assessment Point(s) of Contact" - }, - { - "value": "csp-end-of-testing-poc", - "label": "CSP End of Testing PoC", - "RICHTEXT": "Cloud Service Provider End of Testing Point(s) of Contact" - }, - { - "value": "csp-results-poc", - "label": "CSP Results PoC", - "RICHTEXT": "Cloud Service Provider Point(s) of Contact" - }, - { - "value": "penetration-test-team", - "label": "Penetration Test Team", - "RICHTEXT": "Penetration Test Team" - }, - { - "value": "penetration-test-lead", - "label": "Penetration Test Lead", - "RICHTEXT": "Penetration Test Lead" - } - ] - } - ], - "remarks": "These are in addition to the NIST-defined allowed values for role identifiers, and apply to OSCAL-based FedRAMP SAP and SAR content." + "binding": {"pattern": "/*/o:metadata/o:role/@id"}, + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "assessor", + "label": "Assesor", + "#text": "Assesor" + }, + { + "value": "assessment-team", + "label": "Assessment Team", + "#text": "Assessment Team" + }, + { + "value": "assessment-lead", + "label": "Assessment Lead", + "#text": "Assessment Lead" + }, + { + "value": "assessment-executive", + "label": "Assessment Executive", + "#text": "Assessment Executive" + }, + { + "value": "csp-assessment-poc", + "label": "CSP Assessment PoC", + "#text": "Cloud Service Provider Assessment Point(s) of Contact" + }, + { + "value": "csp-end-of-testing-poc", + "label": "CSP End of Testing PoC", + "#text": "Cloud Service Provider End of Testing Point(s) of Contact" + }, + { + "value": "csp-results-poc", + "label": "CSP Results PoC", + "#text": "Cloud Service Provider Point(s) of Contact" + }, + { + "value": "penetration-test-team", + "label": "Penetration Test Team", + "#text": "Penetration Test Team" + }, + { + "value": "penetration-test-lead", + "label": "Penetration Test Lead", + "#text": "Penetration Test Lead" + } + ] + }, + "remarks": {"p": "These are in addition to the NIST-defined allowed values for role identifiers, and apply to OSCAL-based FedRAMP SAP and SAR content."} }, { "name": "hash-algorithm", + "extension-name": "hash-algorithm", "formal-name": "Hash Algorithm", "description": "Identifies the algorithm used to create the hash value of the attachment.", - "bindings": [ - { - "pattern": "o:resource/o:hash/@algorithm" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "SHA-224", - "RICHTEXT": "SHA-224" - }, - { - "value": "SHA-256", - "RICHTEXT": "SHA-256" - }, - { - "value": "SHA-384", - "RICHTEXT": "SHA-384" - }, - { - "value": "SHA-512", - "RICHTEXT": "SHA-512" - }, - { - "value": "RIPEMD-160", - "RICHTEXT": "RIPEMD-160" - } - ] - } - ] + "binding": {"pattern": "o:resource/o:hash/@algorithm"}, + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "SHA-224", + "short-label": "SHA-224", + "#text": "SHA-224" + }, + { + "value": "SHA-256", + "short-label": "SHA-256", + "#text": "SHA-256" + }, + { + "value": "SHA-384", + "short-label": "SHA-384", + "#text": "SHA-384" + }, + { + "value": "SHA-512", + "short-label": "SHA-512", + "#text": "SHA-512" + }, + { + "value": "RIPEMD-160", + "short-label": "RIPEMD-160", + "#text": "RIPEMD-160" + } + ] + } }, { "name": "attachment-type", "formal-name": "Attachment/Resource Types", "description": "FedRAMP additional attachment/resource types.", - "bindings": [ - { - "pattern": "/*/o:back-matter/o:resource/o:prop[@name='type']" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "law", - "RICHTEXT": "Law or Statute" - }, - { - "value": "regulation", - "RICHTEXT": "Regulation or Directive" - }, - { - "value": "standard", - "RICHTEXT": "Industry Standard" - }, - { - "value": "guidance", - "RICHTEXT": "Guidance" - }, - { - "value": "pii", - "RICHTEXT": "Privacy Impact Information" - }, - { - "value": "policy", - "RICHTEXT": "Polciy" - }, - { - "value": "procedure", - "RICHTEXT": "Procedure" - }, - { - "value": "guide", - "RICHTEXT": "Guidance Document" - }, - { - "value": "pia", - "RICHTEXT": "Privacy Impact Assessment" - }, - { - "value": "rules-of-behavior", - "RICHTEXT": "Rules of Behavior" - }, - { - "value": "plan", - "RICHTEXT": "Plan" - }, - { - "value": "system-security-plan", - "RICHTEXT": "System Security Plan" - }, - { - "value": "artifact", - "RICHTEXT": "Artifact" - }, - { - "value": "evidence", - "RICHTEXT": "Evidence" - }, - { - "value": "screen-shot", - "RICHTEXT": "Screen Shot" - }, - { - "value": "image", - "RICHTEXT": "Image" - }, - { - "value": "tool-report", - "RICHTEXT": "Tool Report" - }, - { - "value": "raw-tool-output", - "RICHTEXT": "Raw Tool Output" - }, - { - "value": "interview-notes", - "RICHTEXT": "Interview Notes" - }, - { - "value": "questionnaire", - "RICHTEXT": "Questions" - }, - { - "value": "report", - "RICHTEXT": "Report" - }, - { - "value": "fedramp-citations", - "RICHTEXT": "FedRAMP Citations" - }, - { - "value": "fedramp-acronyms", - "RICHTEXT": "FedRAMP Acronyms" - }, - { - "value": "fedramp-logo", - "RICHTEXT": "FedRAMP Logo" - }, - { - "value": "separation-of-duties-matrix", - "RICHTEXT": "Separation of Duties Matrix" - }, - { - "value": "logo", - "RICHTEXT": "Logo" - }, - { - "value": "Personal-Identifiable-Information", - "RICHTEXT": "Personal Identifiable Information (PII)" - }, - { - "value": "agreement", - "RICHTEXT": "Agreement" - }, - { - "value": "incident-response-plan", - "RICHTEXT": "Incident Response Plan" - }, - { - "value": "information-security-policies-and-procedures", - "RICHTEXT": "Incident Security Policies and Procedures" - }, - { - "value": "user-guide", - "RICHTEXT": "User Guide" - }, - { - "value": "privacy-impact-assessment", - "RICHTEXT": "Privacy Impact Assessment" - }, - { - "value": "information-system-contingency-plan", - "RICHTEXT": "Information System Contingency Plan" - }, - { - "value": "configuration-management-plan", - "RICHTEXT": "configuration-management-plan" - } - ] - } - ], - "remarks": "These are in addition to the NIST-defined allowed values for resource types." + "binding": {"pattern": "/*/o:back-matter/o:resource/o:prop[@name='type']"}, + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "law", + "short-label": "Law", + "#text": "Law or Statute" + }, + { + "value": "regulation", + "short-label": "Regulation", + "#text": "Regulation or Directive" + }, + { + "value": "standard", + "short-label": "Standard", + "#text": "Industry Standard" + }, + { + "value": "guidance", + "short-label": "Guidance", + "#text": "Guidance" + }, + { + "value": "policy", + "short-label": "Policy", + "#text": "Polciy" + }, + { + "value": "procedure", + "short-label": "Procedure", + "#text": "Procedure" + }, + { + "value": "guide", + "short-label": "Guidance", + "#text": "Guidance Document" + }, + { + "value": "rules-of-behavior", + "short-label": "ROB", + "#text": "Rules of Behavior" + }, + { + "value": "plan", + "short-label": "Plan", + "#text": "Plan" + }, + { + "value": "system-security-plan", + "short-label": "SSP", + "#text": "System Security Plan" + }, + { + "value": "artifact", + "short-label": "artifact", + "#text": "Artifact" + }, + { + "value": "evidence", + "short-label": "evidence", + "#text": "Evidence" + }, + { + "value": "screen-shot", + "short-label": "screen", + "#text": "Screen Shot" + }, + { + "value": "image", + "short-label": "image", + "#text": "Image" + }, + { + "value": "tool-report", + "short-label": "Report", + "#text": "Tool Report" + }, + { + "value": "raw-tool-output", + "short-label": "Raw", + "#text": "Raw Tool Output" + }, + { + "value": "interview-notes", + "short-label": "Notes", + "#text": "Interview Notes" + }, + { + "value": "questionnaire", + "short-label": "Questions", + "#text": "Questions" + }, + { + "value": "report", + "short-label": "Report", + "#text": "Report" + }, + { + "value": "fedramp-citations", + "short-label": "FR Citations", + "#text": "FedRAMP Citations" + }, + { + "value": "fedramp-acronyms", + "short-label": "FR Acronyms", + "#text": "FedRAMP Acronyms" + }, + { + "value": "fedramp-logo", + "short-label": "FR Logo", + "#text": "FedRAMP Logo" + }, + { + "value": "separation-of-duties-matrix", + "short-label": "SoD Matrix", + "#text": "Separation of Duties Matrix" + }, + { + "value": "logo", + "short-label": "Logo", + "#text": "Logo" + }, + { + "value": "personal-identifiable-information", + "short-label": "PII", + "#text": "Personal Identifiable Information (PII)" + }, + { + "value": "agreement", + "short-label": "Agreement", + "#text": "Agreement" + }, + { + "value": "incident-response-plan", + "short-label": "IRP", + "#text": "Incident Response Plan" + }, + { + "value": "information-security-policies-and-procedures", + "short-label": "ISPP", + "#text": "Incident Security Policies and Procedures" + }, + { + "value": "user-guide", + "short-label": "User Guide", + "#text": "User Guide" + }, + { + "value": "privacy-impact-analysis", + "short-label": "PIA", + "#text": "Privacy Impact Assessment" + }, + { + "value": "information-system-contingency-plan", + "short-label": "ISCP", + "#text": "Information System Contingency Plan" + }, + { + "value": "configuration-management-plan", + "short-label": "CMP", + "#text": "configuration-management-plan" + } + ] + }, + "remarks": {"p": "These are in addition to the NIST-defined allowed values for resource types."} }, { "name": "media-type", "formal-name": "Attachment/Resource Media Types", "description": "IANA media-types supported by FedRAMP as attachment/resource types.", - "bindings": [ - { - "pattern": "o:rlink/@media-type" - }, - { - "pattern": "o:base64/@media-type" - } - ], - "allowed-values": [ - { - "enums": [ - { - "value": "application/gzip", - "RICHTEXT": "application/gzip" - }, - { - "value": "application/msword", - "RICHTEXT": "application/msword" - }, - { - "value": "application/octet-stream", - "RICHTEXT": "application/octet-stream" - }, - { - "value": "application/pdf", - "RICHTEXT": "application/pdf" - }, - { - "value": "application/vnd.ms-excel", - "RICHTEXT": "application/vnd.ms-excel" - }, - { - "value": "application/vnd.ms-works", - "RICHTEXT": "application/vnd.ms-works" - }, - { - "value": "application/vnd.oasis.opendocument.graphics", - "RICHTEXT": "application/vnd.oasis.opendocument.graphics" - }, - { - "value": "application/vnd.oasis.opendocument.presentation", - "RICHTEXT": "application/vnd.oasis.opendocument.presentation" - }, - { - "value": "application/vnd.oasis.opendocument.spreadsheet", - "RICHTEXT": "application/vnd.oasis.opendocument.spreadsheet" - }, - { - "value": "application/vnd.oasis.opendocument.text", - "RICHTEXT": "application/vnd.oasis.opendocument.text" - }, - { - "value": "application/vnd.openxmlformats-officedocument.presentationml.presentation", - "RICHTEXT": "application/vnd.openxmlformats-officedocument.presentationml.presentation" - }, - { - "value": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", - "RICHTEXT": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" - }, - { - "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", - "RICHTEXT": "application/vnd.openxmlformats-officedocument.wordprocessingml.document" - }, - { - "value": "application/x-bzip", - "RICHTEXT": "application/x-bzip" - }, - { - "value": "application/x-bzip2", - "RICHTEXT": "application/x-bzip2" - }, - { - "value": "application/x-tar", - "RICHTEXT": "application/x-tar" - }, - { - "value": "application/zip", - "RICHTEXT": "application/zip" - }, - { - "value": "image/bmp", - "RICHTEXT": "image/bmp" - }, - { - "value": "image/jpeg", - "RICHTEXT": "image/jpeg" - }, - { - "value": "image/png", - "RICHTEXT": "image/png" - }, - { - "value": "image/tiff", - "RICHTEXT": "image/tiff" - }, - { - "value": "image/webp", - "RICHTEXT": "image/webp" - }, - { - "value": "image/svg+xml", - "RICHTEXT": "image/svg+xml" - }, - { - "value": "text/csv", - "RICHTEXT": "text/csv" - }, - { - "value": "text/html", - "RICHTEXT": "text/html" - }, - { - "value": "text/plain", - "RICHTEXT": "text/plain" - } - ] - } + "binding": [ + {"pattern": "o:rlink/@media-type"}, + {"pattern": "o:base64/@media-type"} ], - "remarks": "These are in addition to the NIST-defined allowed values for resource types." + "allowed-values": { + "enum": [ + { + "value": "application/gzip", + "#text": "application/gzip" + }, + { + "value": "application/msword", + "#text": "application/msword" + }, + { + "value": "application/octet-stream", + "#text": "application/octet-stream" + }, + { + "value": "application/pdf", + "#text": "application/pdf" + }, + { + "value": "application/vnd.ms-excel", + "#text": "application/vnd.ms-excel" + }, + { + "value": "application/vnd.ms-works", + "#text": "application/vnd.ms-works" + }, + { + "value": "application/vnd.oasis.opendocument.graphics", + "#text": "application/vnd.oasis.opendocument.graphics" + }, + { + "value": "application/vnd.oasis.opendocument.presentation", + "#text": "application/vnd.oasis.opendocument.presentation" + }, + { + "value": "application/vnd.oasis.opendocument.spreadsheet", + "#text": "application/vnd.oasis.opendocument.spreadsheet" + }, + { + "value": "application/vnd.oasis.opendocument.text", + "#text": "application/vnd.oasis.opendocument.text" + }, + { + "value": "application/vnd.openxmlformats-officedocument.presentationml.presentation", + "#text": "application/vnd.openxmlformats-officedocument.presentationml.presentation" + }, + { + "value": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", + "#text": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" + }, + { + "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", + "#text": "application/vnd.openxmlformats-officedocument.wordprocessingml.document" + }, + { + "value": "application/x-bzip", + "#text": "application/x-bzip" + }, + { + "value": "application/x-bzip2", + "#text": "application/x-bzip2" + }, + { + "value": "application/x-tar", + "#text": "application/x-tar" + }, + { + "value": "application/zip", + "#text": "application/zip" + }, + { + "value": "image/bmp", + "#text": "image/bmp" + }, + { + "value": "image/jpeg", + "#text": "image/jpeg" + }, + { + "value": "image/png", + "#text": "image/png" + }, + { + "value": "image/tiff", + "#text": "image/tiff" + }, + { + "value": "image/webp", + "#text": "image/webp" + }, + { + "value": "image/svg+xml", + "#text": "image/svg+xml" + }, + { + "value": "text/csv", + "#text": "text/csv" + }, + { + "value": "text/html", + "#text": "text/html" + }, + { + "value": "text/plain", + "#text": "text/plain" + } + ] + }, + "remarks": {"p": "These are in addition to the NIST-defined allowed values for resource types."} }, { "name": "system-identifier-type", "formal-name": "System Identifier Type", "description": "Enables an identifier to be formally recognized as being assigned by FedRAMP.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-id/@identifier-type" - } - ], - "allowed-values": [ - { - "allow-other": "yes", - "enums": [ - { - "value": "https://fedramp.gov", - "label": "FedRAMP ID", - "RICHTEXT": "FedRAMP-Assigned Identifier" - }, - { - "value": "https://ietf.org/rfc/rfc4122", - "RICHTEXT": "RFC-4122 UUIDv4 Value" - } - ] - } - ] + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-id/@identifier-type"}, + "allowed-values": { + "allow-other": "yes", + "enum": [ + { + "value": "https://fedramp.gov", + "label": "FedRAMP ID", + "#text": "FedRAMP-Assigned Identifier" + }, + { + "value": "https://ietf.org/rfc/rfc4122", + "short-label": "UUIDv4", + "#text": "RFC-4122 UUIDv4 Value" + } + ] + } }, { "name": "information-type-system", "formal-name": "Information Type System", "description": "Identifies the system from which the information type was defined.", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:information-type/o:information-type-id/@system" + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:system-information/o:information-type/o:information-type-id/@system"}, + "allowed-values": { + "allow-other": "no", + "enum": { + "value": "https://doi.org/10.6028/NIST.SP.800-60v2r1", + "label": "SP 800-60 V2R1", + "#text": "NIST SP 800-60, Volume 2, Revision 1" } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "https://doi.org/10.6028/NIST.SP.800-60v2r1", - "label": "SP 800-60 V2R1", - "RICHTEXT": "NIST SP 800-60, Volume 2, Revision 1" - } - ] - } - ], - "remarks": "FedRAMP only allows information types defined in NIST SP 800-60v2r1." + }, + "remarks": {"p": "FedRAMP only allows information types defined in NIST SP 800-60v2r1."} }, { "name": "security-level", "formal-name": "Security Impact Level", "description": "The security objective level as defined by NIST SP 800-60.", - "bindings": [ - { - "pattern": "security-sensitivity-level" - }, - { - "pattern": "security-impact-level" - }, - { - "pattern": "(security-objective-confidentiality|security-objective-integrity|security-objective-availability)" - }, - { - "pattern": "system-information/information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected)" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "fips-199-low", - "label": "L", - "RICHTEXT": "Low" - }, - { - "value": "fips-199-moderate", - "label": "M", - "RICHTEXT": "Moderate" - }, - { - "value": "fips-199-high", - "label": "H", - "RICHTEXT": "High" - } - ] - } - ] + "binding": [ + {"pattern": "security-sensitivity-level"}, + {"pattern": "security-impact-level"}, + {"pattern": "(security-objective-confidentiality|security-objective-integrity|security-objective-availability)"}, + {"pattern": "system-information/information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected)"} + ], + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "fips-199-low", + "label": "L", + "#text": "Low" + }, + { + "value": "fips-199-moderate", + "label": "M", + "#text": "Moderate" + }, + { + "value": "fips-199-high", + "label": "H", + "#text": "High" + } + ] + } }, { "name": "system-operational-status", "formal-name": "Operational Status (system)", "description": "The operational status of the system", - "bindings": [ - { - "pattern": "/o:system-security-plan/o:system-characteristics/o:status/@state" - } - ], - "allowed-values": [ - { - "allow-other": "no", - "enums": [ - { - "value": "operational", - "RICHTEXT": "Operational" - }, - { - "value": "under-development", - "RICHTEXT": "Under Development" - }, - { - "value": "disposition", - "RICHTEXT": "Alternative Implementation" - }, - { - "value": "other", - "RICHTEXT": "Other" - } - ] - } - ], - "remarks": "FedRAMP limits the allowed values from a larger NIST-defined list to only those defined here." - } - ], - "back-matter": { - "resources": [ - { - "uuid": "871713A8-5A27-4AC3-8B94-972588469C6B", - "title": "OPM Posiiton Designation", - "props": [ + "binding": {"pattern": "/o:system-security-plan/o:system-characteristics/o:status/@state"}, + "allowed-values": { + "allow-other": "no", + "enum": [ + { + "value": "operational", + "short-label": "Operational", + "#text": "Operational" + }, { - "name": "type", - "value": "" + "value": "under-development", + "short-label": "Development", + "#text": "Under Development" }, { - "name": "published", - "value": "2017-09-01T00:00:00Z" - } - ], - "rlinks": [ + "value": "disposition", + "short-label": "Alternative", + "#text": "Alternative Implementation" + }, { - "href": "https://www.opm.gov/suitability/suitability-executive-agent/position-designation-tool/position-designation-system-with-glossary-2017.pdf", - "media-type": "application/pdf" + "value": "other", + "short-label": "Other", + "#text": "Other" } ] + }, + "remarks": {"p": "FedRAMP limits the allowed values from a larger NIST-defined list to only those defined here."} + } + ], + "back-matter": { + "resource": { + "uuid": "871713A8-5A27-4AC3-8B94-972588469C6B", + "title": "OPM Posiiton Designation", + "prop": [ + {"name": "type"}, + { + "name": "published", + "#text": "2017-09-01T00:00:00Z" + } + ], + "rlink": { + "media-type": "application/pdf", + "href": "https://www.opm.gov/suitability/suitability-executive-agent/position-designation-tool/position-designation-system-with-glossary-2017.pdf" } - ] + } } } -} +} \ No newline at end of file diff --git a/dist/content/resources/json/fedramp_threats.json b/dist/content/resources/json/fedramp_threats.json index 194b327b9..23b75e0c0 100644 --- a/dist/content/resources/json/fedramp_threats.json +++ b/dist/content/resources/json/fedramp_threats.json @@ -4,8 +4,8 @@ "uuid": "7539047F-158B-4AA0-8FC5-F0530F1CC5CF", "metadata": { "title": "FedRAMP Defined Threat Table [DRAFT]", - "last-modified": "2019-12-15T00:00:00Z", - "version": "DRAFT-02", + "last-modified": "2021-08-11T23:18:00Z", + "version": "fedramp1.0.2-oscal1.0.0", "revisions": { "revision": [ { @@ -27,6 +27,16 @@ "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" }, "remarks": {"p": "Revised draft to align metadata with OSCAL syntax, and to provide a machine-readble definition for threat origination types."} + }, + { + "published": "2021-08-11T23:18:00.00-00:00", + "version": "fedramp1.0.2-oscal1.0.0", + "prop": { + "name": "party-uuid", + "ns": "https://fedramp.gov/ns/oscal", + "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" + }, + "remarks": {"p": "Updated version reviewed for fedramp1.0.2-oscal1.0.0 releases."} } ] }, diff --git a/dist/content/resources/json/fedramp_values.json b/dist/content/resources/json/fedramp_values.json index 3168527ab..6108fc415 100644 --- a/dist/content/resources/json/fedramp_values.json +++ b/dist/content/resources/json/fedramp_values.json @@ -2,17 +2,17 @@ "fedramp-values": { "xmlns": "https://fedramp.gov/ns/oscal", "metadata": { - "title": "[EXPERIMENTAL] FedRAMP Defined Identifiers and Accepted Values [DRAFT]", - "title-short": "FedRAMP Data Values (DRAFT)", - "last-modified": "2021-07-06T12:28:35Z", - "version": "fedramp1.0.0-oscal1.0.0", + "title": "[EXPERIMENTAL] FedRAMP Defined Identifiers and Accepted Values", + "title-short": "FedRAMP Data Values (Experimental)", + "last-modified": "2021-08-11T23:20:58Z", + "version": "fedramp1.0.2-oscal1.0.0", "author": "FedRAMP PMO", - "description": "This EXPERIMENTAL and DRAFT file provides the FedRAMP defined identifiers and acceptable values in a machine-readable format.", + "description": "This EXPERIMENTAL file provides the FedRAMP defined identifiers and acceptable values in a machine-readable format.", "remarks": "" }, "namespace": { "ns": { - "name": "FedRAMP", + "name": "fedramp", "ns": "https://fedramp.gov/ns/oscal" } }, @@ -866,12 +866,12 @@ "allow-other": "no", "enum": [ { - "value": "TCP", + "value": "tcp", "short-label": "TCP", "#text": "TCP" }, { - "value": "UDP", + "value": "udp", "short-label": "UDP", "#text": "UDP" } @@ -1076,11 +1076,6 @@ "short-label": "Guidance", "#text": "Guidance" }, - { - "value": "pii", - "short-label": "P.I.I.", - "#text": "Privacy Impact Information" - }, { "value": "policy", "short-label": "Policy", @@ -1096,14 +1091,9 @@ "short-label": "Guidance", "#text": "Guidance Document" }, - { - "value": "pia", - "short-label": "P.I.A.", - "#text": "Privacy Impact Assessment" - }, { "value": "rules-of-behavior", - "short-label": "R.O.B.", + "short-label": "ROB", "#text": "Rules of Behavior" }, { @@ -1187,7 +1177,7 @@ "#text": "Logo" }, { - "value": "Personal-Identifiable-Information", + "value": "personally-identifiable-information", "short-label": "PII", "#text": "Personal Identifiable Information (PII)" }, @@ -1213,7 +1203,7 @@ }, { "value": "privacy-impact-assessment", - "short-label": "PII", + "short-label": "PIA", "#text": "Privacy Impact Assessment" }, { diff --git a/dist/content/resources/json/information-types.json b/dist/content/resources/json/information-types.json index ca83af069..612547ec5 100644 --- a/dist/content/resources/json/information-types.json +++ b/dist/content/resources/json/information-types.json @@ -3,10 +3,10 @@ "xmlns": "https://fedramp.gov/ns/oscal", "uuid": "157BB1F7-8BE7-4642-9D5B-60B5995684F0", "metadata": { - "title": "FedRAMP Acceptable Information Types [DRAFT]", + "title": "FedRAMP Acceptable Information Types (Experimental)", "published": "2021-01-15T00:00:00Z", "last-modified": "2021-01-15T00:00:00Z", - "version": "DRAFT-02", + "version": "fedramp1.0.2-oscal1.0.0", "revisions": { "revision": [ { @@ -28,6 +28,16 @@ "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" }, "remarks": {"p": "Revised draft to better align with OSCAL SSP syntax."} + }, + { + "published": "2021-08-11T23:18:00.00-00:00", + "version": "fedramp1.0.2-oscal1.0.0", + "prop": { + "name": "party-uuid", + "ns": "https://fedramp.gov/ns/oscal", + "#text": "6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" + }, + "remarks": {"p": "Updated version reviewed for fedramp1.0.2-oscal1.0.0 releases."} } ] }, diff --git a/dist/content/resources/xml/FedRAMP_extensions.xml b/dist/content/resources/xml/FedRAMP_extensions.xml index 6e5b3d6c5..f586cfeb5 100644 --- a/dist/content/resources/xml/FedRAMP_extensions.xml +++ b/dist/content/resources/xml/FedRAMP_extensions.xml @@ -2,10 +2,10 @@ - [EXPERIMENTAL] FedRAMP Extensions [DRAFT] - 2021-07-06T23:07:21Z - 2021-07-06T23:07:21Z - fedramp1.0.0-oscal1.0.0 + [EXPERIMENTAL] FedRAMP Extensions + 2021-08-11T23:27:44Z + 2021-08-11T23:27:44Z + fedramp1.0.2-oscal1.0.0 oscal-1.0.0 @@ -32,6 +32,14 @@

Revised draft to better align with OSCAL RC-1 SSP syntax.

 + + 2021-08-11T23:27:44.00-00:00 + fedramp1.0.2-oscal1.0.0 + 6b286b5d-8f07-4fa7-8847-1dd0d88f73fb + +

Release reviewed for updated release.

+ + @@ -67,7 +75,7 @@ -

This EXPERIMENTAL and DRAFT file exteneds OSCAL to meet FedRAMP requirements.

+

This EXPERIMENTAL file exteneds OSCAL to meet FedRAMP requirements.

It provides the extensions, defined identifiers, and acceptable values in a machine-readable format necssary to meet FedRAMP Authorization Package requirements.

 @@ -453,8 +461,8 @@ - TCP - UDP + TCP + UDP @@ -681,17 +689,6 @@ - - POAM-ID - POA&M ID - A CSP-assigned POA&M identifier. - - - - - - - control-objective-implementation-status Objective Implementation Status @@ -864,12 +861,13 @@ - POAM-ID - CSP POA&M Identifier - A CSP-assigned identifier for this POA&M item. - + poam-id + POA&M ID + A CSP-assigned POA&M identifier. + - + + @@ -1221,12 +1219,10 @@ Regulation or Directive Industry Standard Guidance - Privacy Impact Information Polciy Procedure Guidance Document - Privacy Impact Assessment - Rules of Behavior + Rules of Behavior Plan System Security Plan Artifact @@ -1245,12 +1241,12 @@ Logo - Personal Identifiable Information (PII) + Personal Identifiable Information (PII) Agreement Incident Response Plan Incident Security Policies and Procedures User Guide - Privacy Impact Assessment + Privacy Impact Assessment Information System Contingency Plan configuration-management-plan diff --git a/dist/content/resources/xml/fedramp_threats.xml b/dist/content/resources/xml/fedramp_threats.xml index bb26190ca..3a85abb95 100644 --- a/dist/content/resources/xml/fedramp_threats.xml +++ b/dist/content/resources/xml/fedramp_threats.xml @@ -3,8 +3,8 @@ FedRAMP Defined Threat Table [DRAFT] - 2019-12-15T00:00:00Z - DRAFT-02 + 2021-08-11T23:18:00Z + fedramp1.0.2-oscal1.0.0 2019-06-01T00:00:00.00-04:00 @@ -22,6 +22,14 @@

Revised draft to align metadata with OSCAL syntax, and to provide a machine-readble definition for threat origination types.

 + + 2021-08-11T23:18:00.00-00:00 + fedramp1.0.2-oscal1.0.0 + 6b286b5d-8f07-4fa7-8847-1dd0d88f73fb + +

Updated version reviewed for fedramp1.0.2-oscal1.0.0 releases.

+ + @@ -377,4 +385,4 @@ Denial of Service - + \ No newline at end of file diff --git a/dist/content/resources/xml/fedramp_values.xml b/dist/content/resources/xml/fedramp_values.xml index c69783873..437e6ec8c 100644 --- a/dist/content/resources/xml/fedramp_values.xml +++ b/dist/content/resources/xml/fedramp_values.xml @@ -1,17 +1,17 @@ - [EXPERIMENTAL] FedRAMP Defined Identifiers and Accepted Values [DRAFT] - FedRAMP Data Values (DRAFT) - 2021-07-06T12:28:35Z - fedramp1.0.0-oscal1.0.0 + [EXPERIMENTAL] FedRAMP Defined Identifiers and Accepted Values + FedRAMP Data Values (Experimental) + 2021-08-11T23:20:58Z + fedramp1.0.2-oscal1.0.0 FedRAMP PMO - This EXPERIMENTAL and DRAFT file provides the FedRAMP defined identifiers and acceptable values in a machine-readable format. + This EXPERIMENTAL file provides the FedRAMP defined identifiers and acceptable values in a machine-readable format. - + @@ -357,8 +357,8 @@ The internet protocol transport type. - TCP - UDP + TCP + UDP @@ -443,12 +443,10 @@ Regulation or Directive Industry Standard Guidance - Privacy Impact Information Polciy Procedure Guidance Document - Privacy Impact Assessment - Rules of Behavior + Rules of Behavior Plan System Security Plan Artifact @@ -467,12 +465,12 @@ Logo - Personal Identifiable Information (PII) + Personal Identifiable Information (PII) Agreement Incident Response Plan Incident Security Policies and Procedures User Guide - Privacy Impact Assessment + Privacy Impact Assessment Information System Contingency Plan configuration-management-plan diff --git a/dist/content/resources/xml/information-types.xml b/dist/content/resources/xml/information-types.xml index 94d82ef35..9fa65ee27 100644 --- a/dist/content/resources/xml/information-types.xml +++ b/dist/content/resources/xml/information-types.xml @@ -1,10 +1,10 @@ - FedRAMP Acceptable Information Types [DRAFT] + FedRAMP Acceptable Information Types (Experimental) 2021-01-15T00:00:00Z 2021-01-15T00:00:00Z - DRAFT-02 + fedramp1.0.2-oscal1.0.0 2019-06-01T00:00:00.00-04:00 @@ -22,6 +22,14 @@

Revised draft to better align with OSCAL SSP syntax.

 + + 2021-08-11T23:18:00.00-00:00 + fedramp1.0.2-oscal1.0.0 + 6b286b5d-8f07-4fa7-8847-1dd0d88f73fb + +

Updated version reviewed for fedramp1.0.2-oscal1.0.0 releases.

+ + 5Z2r+eo@nEY;G(K^SW>M;ZP{*r)aVTTg&ZEQZhmb$6$L9-OEjt6BzK1+Z4XY~i_ z|7UB?wE0V?vFO$L*+lQVsID)mBX=t|CDQdPm7~yO9jg^h-(`^x^@gsZ!M-QUe?whI zLjuLk-H{>el+h{nBl1USG(XQh2l%BsDu;>W%#O+hsd`*oj9}9VtKAvs? zlydkCDo3BT9>sg4kce|gy*T~;U=QqTOyJ`sI^irrd0Bz(tLiqfRQg$Yq40F*aJ* zUL-=WfqiO8V=HLfw!@w|LPL}9I7i{T^-0&HJe|l&{iMd;Sk;RsHo;czPRbZPn4bZ& z5Z`!C6JG07Nb`z-i6-$2C}pie1nFt(+Fpy*mrj+tRo@SWg9OyKtad};6I=1!9Nnm=>nBbYWqrr%&_`cVuClX^K3KWp0}!Y+0!%hB7tgGt%E0b)P6)l`FTn+hKg?% z{dIPK6y>4eojq=IQfq({-ch}b@p2yJ?Z8A~6|AD_vNj5o2db)mgQk@%rVEH1EVDXD zAM(EGvapWgLK?MUaG#5Qi_G_yG8>nfrwwhg9K9AWOIRqM?9e%A>l^+`*N|-?5H6JA z(Y^*Mt#IV)daXFqsyWj&A`*LSN!>mxL<_E?HR&7?acZ=ue%CM};yf5?d?4Im@0m7L z%akL>_$F{kh~R3G2}(KMVkV;L1Q$)LHihJgBpeZiWOd=y4`_>>EQ8jRjR3i9!Ui@} zhYe9K>0@Dep;^a0_SEWe{k8Qg_VM-3X+MSA7{x03^P~8dxWKR1Z=a9-c+mNPSW)x4byb)p4(LEoJm|BeH0c(9) zKlv!v48YW9Y`sJv@(X0TBa5qT4+qv{NAPdqe*P;VxG zcg=|q9}z(36j=&QBYNrXnBS+`sKgi1hCV0a1h3dqua+&{a&!{>9tao90BXDE{se)I z(#`T*1N0Xw7fdXUbJ6v&dMsbINS1;XWnKvoQ1s2uVydNu@u*H@GpDXZ|HyG= z$xr*+^LrE46koZ`ik7T&{Kn&D(#-5k5NVUVRo0wBpsWh=Y26C7jax{ZyN zL1D>I7RXKXE=AE@qbHcNPNFh{m4%Zv-|JM9vqDUyN1CH`JUnAU&>){K3p|(Epz+oe zEel{<-Ep32Gz}hO${gIdMGQm1r0pWK914Vbp+N2d$701w`C)|N z$MOtTz_a1CG_d-mLqMQ`V>%jVYf`(2G@#d9FDX6*Ax#R);}F7obB{j8Z9Np-`4 zG;q^+X$E*T_h)@ZqZ&PEc6Ir>Ap?kE5D=0J6Da3Q!|gYT_kI~Kz;y<4n4_owSYmN5 zS?j2Cj%c{PR@bw#;neheH`@>VK`<75G%vuBRk0NZehgl%VgJuKYzuREaxJDJiR5)< z2YY4f;hwWoI=9$Is2av3|7;S?$no})M&R}23^EGWnUw=KE{6>kNPV1b?ZHre91Xp) zjlI0>z?bgL>atfcE(n)Dp&7&*H7RuY$t5mts__29&o3Dwzg}~Kv^}=oYnHlQmnRVa zt8C|Hwf(zfJ-*?7wEi4THB|K|YSJnC)#nOH#@C#|0B>bzkvv&R0x4|8m;W6-+m5C) z@2#Pca37^VHXU9J>c*J^r*@Xqu z2uIIhH67KKgZZQpdy15z6x}XVYj793D%q_P%Q)%SW0(X>zdcEXkbD`oT56hhz@KO^ zc9{-Zg~*{#LAf7kR@KR*fg{8`ij@-2@-U!+hzjbh4IWF=rz+FIuyLA+nYpeHON$C7 zRQEswzB0#P-8WM&9K}rJ0w_(S8H3d!LNyIP*h~TGTW<|Y8(6cv6QUu9?r7FRu@%Qz z%Jx4XYMgLu+A@ei05}b9kuH;^ZXd~pv;FcjvZdh;w)NkY2CvV^XA+!h4w2{;fR|EC ztk67wI%k5icEMzMx0*MXSq71(q1+`^uQi0vAb_)T?gncTxlAWx1~X9tQ3#CyHO>U| z{0y(EAw-lKumy|p&LV?(0jlT<6;d}l^a`)14niv3?t^S5*21bJI6uF%K%M46Z_W$u z5<(-uwY%Q!&`jOL#|BY=bWXwx5!#(##6UCzY$AtQNo|>okV7@KVR-q9f5HToCfRCQW=}^2d29k))j+}; ziCq4TIys0{h{L)u#xowt*y|}tfJ)9aL5fuwK^1MT62d%yteSG!L6#nLft>><0lnh7 zL{~lnOxDO!*3V|zE~L!Np#_lUtoFm2EceqSw{uP|NHnz<|6Q7qZQ9mBgcH}EGjMsQ z-(q|=fATm?MqJjI2r4Hs4vpHOZ9l}N#A`7aw=Y&Q4B8o2t&2#QtfeO^W8`6C@&h() zzfjTbm=vp=F>}8jLxw74{f}3iCm_|zfiKu< zK&t-LN#5siEK2I~hNJdBWUDnh4cLZj8?0^2hi15*r~pxL4*v=Ps<;0!icPr;dt$L1 zzv9porGn&^mE#S>9D!eAnla)ZbWm#3PF4nxp9(6BXlcAzYL{F9!$p+IPP9KF2Yx1D z{8X&%8VSmzSs6r{^51vkfb}e?!c-kVT*;!00ejSVz8H`Qr*XVOdX&3L2Xd?`ggnOB zxZ1*?(*%h!kzv=P12Gvdi-|SwIUERYA#vi1=-iB~`OLu9_A^Q%_lwn80Lo;0DGZ5hel+?M*#_c(B zigM;FvxzAYxRU(_a|K$&)i`}l{xD%SN|y{EP%ewKu@rJ_Ao;HzN>l^n9plfwrz5Hh zOo1mmj%*=dQaSLm___m%O!HM6H#-hq_56?gA)a&`oF9?-O{)x|LOcHhHJCm`O*z8l zFlurL;U23p3V2{^QX%;n<`L`)1Y(pHmLCR%2S^r~v{5f<)@o=_EL&?(pG7a@s&Uds^h|2mcyAA2_;{^sO@bq?? zj+hza!hU%jw09wu^^<{s(ZWw7{JR#|+3W zPCyh>&Cil?K8tG2NAS^B#&-k-HnDwL z-wCx5f|9uzpk;Ey&-E4o&T6!NNMuX3*X5^@bGJa0_j9cpaFroy)q=7E`NZW$uiP#w zcxYx9yYIQhBBqcvmS;FMaa4SSW5Q5C`UtwmS8&qh0U(?vNDTmYw99Lr;h9bBj^jvJ z7nrI{j&ssLUR}g615A-vEY|2%&QhiW&6t^g?vV!3opjTBrxN{_WQ>j1Rmec9jG5Ez z5rot*Wo3X#K3NHc@1gz_H|$%!z7nw!l8;9NDA**ktQ~I~+R!&5Dj7(nyE;5Wfv0Xb z^ep9E%FG9N|24DrUpfClG+@8MVc|15e8j?iLaLt3{h~~+$CMNLA5 z5x>Lxw=2`1u>w-{%?SHh3bn)!ZpBkebReScM1Ug4IEkR&@Tp`QVjbF54;@t?70FBt zm@@IZH4;K5)LjtS80T4gBg9dGUx5gwDVBA?zCmq)2a!1#M!QKCknJOHR;3@*zA4m3 zuN?=guY%nqF%%^u3oGt-<#d};_U!?R*o&T={roZro&3}wG}$7iAPR8m~bK0IvJTqo(J|C=zUS{+&juC^)o#o+rA;-CF>EA%KR?|e)7iO zm7zJtt253dP3T=-HZe*%_*7C*EebsbTc)LSw-zF=&1&mmm8I#oDU?Wrj5zGOqzsd; zHK7T1HXPO$O?2@vf+-k`B2{PChV9KQ$2B?K?VFIaG(zu`iU8woz;z~(^^&H|n5tF| zou-&jojiU8_tA?taVK)dhqvCbhtqFkDGM(M*bydWaR~u$%3UQlTjQaXqDH0Ig6W)r z83pWbLz0MayhAHy46!eR2Y>nD@Y-@?hI+i1;@(sf$|1wFX7^Xr!7rmbx&TX`s9gxi zRI%OW%e+moA#M7xvUxCoZ2h2#1Z)TIbCPkUY|;!!C?!}{4NO^2(0LCSLfvWo+nndm>-$_T-db<|JC~_5?+(O3cKCCaf8)A9 z-Ye7l?{VqTzxj(FrA){#+dp$F`j54w|E_i=%sl?yK0?p_-tOBSuYX$qGx-?r>$gU= zzBg|{AkJX0$-lPU^qU(s>dV@tlEuB#riT z$QR!4ZeMNR{85~u&7mwhPtbS8)kChkND_y!xW0RmQ4=8`7A-sf#j!6g&_y^^%Q>Yp zLAbct?m7?M{N;Ur|6B9En{ZB#{QW?3_U5)skjdz~;*0N8fnP}DPu|3j52lLiDM`DF zPK9kZ#W-r2RtXdLxqt6nAg6!8qCQ~HOf&zT2R)c4w|h|P`Vv}qK^}xe)nTc$p3WA+ z43#x@-QxR**LBB!#5cYC>4lvA+1cZg`d_cIUNvYFG%L1J>I9?b;A>t>d}uwU?VWkG zo{zpZa#J3Sk0=joa-VCdyIx5x4ZjYTOvi1&BNAnt56Pd9gQWcJ%UJ0pII!_ONR<9* zUE-cTN7d(7{5Rik^XGqaBu}I-)MWgCivNT@-Cpjl3?5#nT1>N3(M^L;UP@Q%h`gBh{q^3 z>BscNAX1aB^$+j_nahk-IpyF?J|~51RQl!gA13^fk1w3d)^#E*#YGL^-|zkYdwVtOoA2rx5_I`+HVmC!n`4dqCS9>j%}A)Bee8#9Bt$=? zvDz)pP+^DTZ;#JB+a2p}-PuQReKpw#pkc9)r5S$M=$LoDyqb>Q*TdfoC$) zzdsph;2Vo0!Ib^xdayC_oSWyi_$5X~M3rKW3q12NI2~_E+P2l!IXn8qmtv_X!nF53 z={=P3MXoX9R}0L+z)^c)T)&9adM$}=*vHd{$6QD;mg=ecOix9-6-i$V7OSB=dl~k; z?Lbh{C%z7%Z}d|A_rLZ$gRu<1zIy+U$scJzTuI@8Zamro)9RznnY6q}1{!;}?EDmE z#OtVhg_Z?IcX15(*{6u&{hT=lxBT+)7LK1#i)DBADmST|+fblG@Qe7ExZFP|w8@M~ zNp~?CH5M!Uym5olt8Jrnxx(uq;<&`{P4zZYpN^uQ7p?Ndf&E-PZ#q_00#61cEGaLy zY0h@%<|x;Qzxuq|cHVeAaL#cr#iJMb&9vuw8`M~go(wRTIl*Ub`CBM5YQQeUA$bsok&{IEQ7y)%-06OAx56YOnY`%4 zjV&HCD(xsmE;g+ib@P?!&%#$D@>WE<6rxyUA`gk0#u>+vTmKq%{o>BVQ{U}RcwgS~ zcs%GRofaPqzxSE#^jp;bR4>_<^N-(IahE2@cZGvwwQFizhnF+TlQYTSEaLonpX==dLPKnYlgEd z=NygR;zFXhC`Kyg@#bC}6==Kc&7HrJCDeFZ$M^TKcZZr6+uW!29!OtU)rKa zWr*6QcULAdKlM+OL2Qy_L-Kk|@ee5UONj){)WB%W&3^v<%~h_p;^l|q{BPAeiQcs4 z-Acs8dj;-*mqSVEzoZ>vc=Q^RP_tJZHK0IbKWjM`TH>F zuJ(pB{GmB>*C1`$LL9Xy=5s~vwYY9Z{SX6;Kmsm5sJRdv*{QYFm4orqbln{K&+qSA za~S!@FBrb0BhnYa_;=x7oG+;^oq{O+`o%19nK`>R%=>Fp< zNuC?Qs^&26o3u>jLjC*t!f{OiALzUwSGD3T7>aH6YVWHehg;%|`PB)&%-lv#i;1z& zpFN7Z$ZY!4z#$USwt!lqx71}%=A zNSW3AMa4(yuetvX9&z&Z17Vs13_Npy-xm3o<{H^xFKx-#oLr`SghEDsHrP+K4H~wv zUq8z7;-h6uOc9q4=D;mHd{B*9*wqU+j(?fPI+gH6s$ZRThY*J(RddN-L(lcao!5Q( zNW!om&RMdo|HhC5Af-9AD3{+t`lfZPt?#9^6E^TDMZXFwj%|4J*>or*h6x~}W1~i2 z^i}!nk`qu!v~!n;?C{a-V`R(XeZIDHMwOzgmwgx3jzUjl)SvBOk1wHs-~Hq%1(Q*< zYak5l{>2^1_1caCeMXM#EmVMmBr?9H-$L$~dsZ*g%93Rw>YZCY{Oj$9+LU)2t}s01 zmW%IQYLWrtEYUc?*e?dM0y?H1AKa??uMjq{l+?hzIu(if-Mn%7Im2=vHdg=I}lbeAk^*}D~~8?F?p^1 zZO??8P`jvu%6;9(?ctENFMS&62Sp8-ukx9JO{nHgdu819i#=QG*FMf)modyx{2IF6 zkG}t?n2_CL>!rEc zAYDph-j#78>l<9P{Rz?DAPHg~+rpaU=5;-PU*~~Ahls#d9AtFa>GcPl+1Dxz6QtQ?E!17v>)cW%P%a74~SM!VG>HVjb z{N&&24I|+bieVNbHmrW*x8-N`q}QSTT@W;5k&E56wTH8_*@s_$ex1vhg+#m2yYhd! z|NZA7|M(lnJ6C>c=~iC*4Zd&yEpKX z3B#L<%Mza6IZgMgb?la&%`y7u^x-Tf`7Wov4mrzsxo8WyYjDp?>W?|f%4UT`po{5g z533^1J5M)3k;&q#nG4F2LiFhj+;U-h5d#f*sca5huF98cv_)ZJ-Q9d14l_u1mNY08 zx+Fv#n7)7X2X&w=I4y%ygOjxZZhSv4lf0uJFAf=~a8?z@w0V{B&nq-+g*bPJJX@Ju ze$uq(RR4URWZ=JW*kV=e_gnsHE#_SY*Mr4(tGGqFS%9-Sg)L6$MG%Gto|bxtnh1o_ zXbd~$dWC$FZ$Ma;0ziwydC8Uea*QS#D}p0jz^?%Nb+iT4oNz})bpgGs;k8*Y(H$5< zh!ep>L7qIF|2itYI=L#~vS=JT2v2kPD_3H#!OwTH$rEDQXj!S6wl@)Mi_j;b54%Z< zPMjYxxoTun$dWwlYI4|KMNiSz1Nr#&RyQ_6wDu%X$zZK2o|t@?dQ7iy!-=r9haoqU z>E%wTQbrumi}Hlu=mgaB8uw8pRLzg1*_n(tqwgzkQaVtSu~1+3(p_yzTil~F>TSL> zxTCNZ;M2x{2Ruydv^gqz{{Wqu9Y`e6t16`?HI?lNzkADBC~-u`?b6WXy{yBYFx_JN z7Bamlu#)M{$sci}RepVy-DR$MBP+X4)toDyC|7y}T|ry%PhN4xW4HSq3;VR!_Xszz zQxTmxKvn__wloQrN8{4L+hiB}dczOUt=VWhdH1S3^`RTu zaSxxMUur#49rewXmfa4HN{BVY^x|a4%59Gqi6%1woMyv<>7E8T67#GD+Tnz%E(7$c z&RY>V+Y0|WqO+;5faF|EzoOD#Poh%+u0|V`W*G!CJqhH*qL(>HBP!5IWs9ovy>a>W z6a^2-23WsE4dEUU2Vw3j-PS#5pCm9}#H1@h$J$2<1#aaZ3{n%FHkQcq#V>rTU_~O9 zC1|*<#?u5nCAa?|L(7{4n7qwXnima(?|h}48=$^ytpy1NB7T;`Od4pek7YsQOMkiX z*7qb-;no}IgNgm>$~?4;CseCKXB-r9jbE{F;w!yC-s^iIa59_(wzqMex=bmW8T@)s zInhbRnvoiKDaOkeU39p9aXdaMkd}si6X(QFoF^jAc50E~v~!`9mapuRUvmlr%PEO3 z5+y-aixZ5OJl$s(N%>@NjweM@9)qG>OeLd-Rk1_;$Jq9wJ@!W_vdAx@tY7eKjG?QD zc@j+X2=;1^#e8PfE}Z7^&B2%3xir**u2c8Xi?DzEm)r4+<>Xc8hml~4W~zN z9=a^xN#C+i@TY_*a!KKvRyBo5Mz+5+%0e41=2LeO-^v8P`H5R>-$>p zqZ_|e|J$66cLQf)%q)0sp<2BoOzzDH3Vqu6N6&EFv91F&w4e42&f4>Zr9trdpyctH zg~PH`sOZA72|thS`haN1Vt@KS+N#*L2t93fiFUwk^>=BOx2L}P?y>2;j{Hf9UMSFq zNqYc$eQg8qby%j-=N)R*{^2+xOzV`T%w}L&nGY78!mx_E*aoq*gx)0XNqUpcy#G|D zpzkO88%=197}jAr>)PgBy8<5l1$B^k5wojZ3=u1kYMX_mGVN({J(^s6b;=xK>1Hj8 z9&Gh*Aa(O2Zcl5Qq+a{|vR!(kyuRjSz+@4Iei{zN{>)J7`g>Nr_aon5A+>&i+~nQ3 z z8F}(;%uMz|z$u(K=g6*8Lf#7~4@b(VU3ylV$u)&!@5#1dq%7&Srf+HwAj|Pq8H>`!u?xcVfVMt27MrS$c*`T0 z_jLdfO|04Pjjw9ARSW0i1JLc2{ri~XUN`FzJ~ju$dnY$Ktq&1S^L~1MIjTsb1$%BY zkmL4gZur>1!xj|Gl<0I*IATd{uk9%G(8N8beSs>Ojc;(lpzKHF!R^FzeKKznvAIXfg`3HY!Jc!7o1o~aH1J}6BUx8Wu zo-y}9z|?B}V-nWLz}s}jsN<$(V!dA$J3eoU4zY=hvnvXjzHQ@xRQDEa8ljeCUO_G@ zW~pD3soQwpu}o;hS+iDWN@fWn&-P6=&`%)OzJGuGDclso{8TzBsbTw743CI`r_QFx zvZmHUH~Am{sG6cW2HWm3mX8!5xCEsO|HI9E3I6=g;L_Q*6wRD@cY7DxheS|{jHd&_wMeEd3VUuT>OH0_rSy_=Puf4 zwp1+1K_^SG^#SNxK4LS4&|j??`ZXz7Q)gGzxPpesPM9I6;wct`C7{vyra=PUJ@QC4 zkBzk$PX=ByQ0DzD_k$nfKm6XuEz%M2P7Bg9;X2;~)yp90vJ6_mew5)|P0%#BT*oq= z#35tRHog*US<6|#=9Kk!Ez$0@PA;g?<|-bGo~Vs7{RdT8QVM4CwyLL(RN_ek>9_=tD(bXP6S7epP~#5DYFmYq!j5OHy%j4f79DjV@u6FCQD7 z-n2Xs=VJdH6t8w-6=*`!l3rHJl9gvn=E_@9{h7&PHG?&8IhGVBYo3~I$#v_Nb8@qF zEjum0^d;0$SnUtEcjL8Sh~m#Gf3STYVYu{H2h*vKL|SaCb93KOHpKS+qUZim#u*mZ z#}tN3&cOi|bq5ipPvx}At|Xih`h0Ie8n;IvMR}c}FZ;N16-f&g;dFM4GN=u5?NnOK zJN>9>D#W7>sHqem1<6Ek_nK9PjMXe@G^3dB96O-{`l-~~0OwX?S<2|75+R(Df6mZ1 zJJSJVa#L{8O3T%AhGDMG$8^|S?#B)HVJ_l~!=^zgz&Cb|Y6Du>7HO@l8upCXCazN* zaPE~MLub<~2(`qKfywGInG%cerf8iH^Ap|~)d=ochGXt!Wa~7Uu?h~0y827OqLQ>h zg$t-IaXflu+Go^mHr>5|x}@=1PD3{D4nL5C<#hF6S=^OVn{JF%8S&$V+k%>2w&yDh zUnNZ(cf$J@cf39j6^k$Q=v{y5c-)r13uO6s>QoN*t29rJf@MyeBLnPs zPu7Wa)(lnX%_~P%0hv7u39-#QTC|kV8q0v$+JiRv0|jcEyr3s z20n=salr-HHx?ONyRl!2N2Q2Uqbbq^-`iSqo9m`63KOLG!4A5G->mzQcA+y-1dRF9 zLX}?(Cg0&Y-Qz9<(a@{2l%Tre?5jbSw4^w9@}_mNlIKp${7fbBGk5dysEWaJY2#PW zKT0OqBI+M)eAI9ZCqZ>?bNRwit?EO0qvq)S<}WQboOqS*KDLlK;BGg8+Y;FQM!9ihbpRy*&x&;u3k-A_Du zw(mtq#jur#;^^L*3UFCsjr-j|J;WgmM~*D&39z!^%fX8Gu08#?Hb=-u6$^92J5P=ulyRn^v{0453Mki)V{x8rV zI%h*x$dyWp5!tFzC9!?s2Hl0%7k%M&MvAc|mt+C=YYIK zkA<#yr3z~O{2iC4#)tgB=OsV2{iNp!t$u}9Q*cRnLJaEJ>JrZxOk|d5*AX&!(|_}^ zIo5B`DGkfmq+!=J`lb*U+Kg|qM-PVO+H`~xL2xhE&C`J@M|PIm29}gy}r>nF{N!`kSK(iF)Z_=mTP`Qdj_4(;y+dU=eSJQR~fXS;t| z;2Q>JeH-2VbFaDT-)6MvFEVA#8epL;q7^n3aJywWxU*DT|5&G#oD!X=K!rR`;9D{p0pZCsEs1&4=2@(c67R2|*OT_n}KQE4}B)gv=?tZGY zH(zbPI8Em)JL*CQV@YWu&T1d5m&qGCh} zmZ+#Q3eflVLy|j>?SB@d3f(q)6+TQm`O>0a;dsqMu6Sb^p=XS&)V^OKXJ_~}%TG!HQv*T|w84?uvH^)@fRPBveJ(|sq6RFL`~nJ@$4Bhhf;sI;UT z?Vm(|I?Vg{qR@h>bxJI|sqDgiN#Xa}z2iM0kRxB^z8HB95(?Cz$rlv)(a4n#&Hnfx zlEs1#**WXKK&Z?~?-_V68~*~!MP3!LTiFs2<#W0_LEjTw!{jX)xy-jRd`Ht#db{qA z)|Kk{cK(_FLNg%{`3-d=>p3|rE$8@mfewpN2~Z#w-f-xB_m1h0Bn$OGC)yQx>R0)q znfLC+Ceu6pS=Y#y+New9Ju8+qe}=P?ml%<#(wtS>e()voY`aIurhdM2h|Msqc zw``Q8H~2PbJwpVW!yWW}o02cB88z zt?CZ!uXJgR-xW3pn+h-|PcLvH=UU*b7O?o~=BqD6^=(B@Ql98ogL0ZbWJ73*==p)d zgQ3vI9MK9U94%h#oW+PQmPK3xSi>N@zNPf!y{i~9Od8izx)0xqUP<>#n*VW&&qg{n zY`I(zED-ydnSe)~OiqMiXy^K)mhkFmaQAeV^sB=NDD%^&4m$j09kX+Y_nhkTBqEnPW#WIs^KAlGXd z+E%sXp`*O!K~fg{Zp*o4e+5KGkVqja!n!`MFA)kcoJaYJ*GK&iea-=?4f~A;r`bUc zs3Ou%{p?}!HtW0LDC+6h!~Mm-O~do%${n!OOHYb%j7n7MqU82pm+M(u4r?@ZadLJK ztsU+heUtO&-`1}*D?T@N>?K7B9iL$EK?7%neYvK$>|6Mmf4IM9<(3k?F$hJD5%S{s ziZK_%$F3Yk`Q_fB>a(`FRI1hCeYM0qy~?gPyQI19$p(36j@UImHiQaQe;Bou+B-=3 z<^E6a(b2*U(SY~ZM6{sf)&kgPRIsLIa$Rg=0hKx6b1b_f2{_Eo9fZq}N^tDBg>^kH2ybX?~cs zm2w{0z73E*t&a=hm^wjSiy{_tTM>YH!=`^tY&O4=3u;qGC)_XtTpm}lf$ z%=D$-Qqt%#qX+d;Dc9M{OcGTzMtkvgO@Gq zCf`<$-Dz%j*)F`H(*5;ojzc%wZ+RtYec1Q4I&S@z&PTjX9cV;5e0-$}>UXn#7W%CG zg1-Dpvz?P=79fC!LKn^?>J&5kvVT;x-)3dfpW-o8lD-|o|IFvZAS95Lw?XmLC+w-bJd`AX57w9|fy@p8}c91K~U zVE&9GVJ3O@azD+J&TCTgv`zK2k-IV~+YI{kG{#iUWwG?F7pn;GidoE$N6S^M52x;m zX{+JX^*tx}Pg<*FzRS+|2Ro0U#-BS1JpzR^<1wTM{zfL%Fz>pp>Cv(9y)0S5f2zB- z@u~egKk*J;=2N+PrR6tZ+EHh^G~&FfKZqjn`M9s1orczJNiQHtW--am>vFV4Qo0b@ z&hB-&-;utuZFH=q;^WcbV?AhaymNneSeW9DTg^wFMJ_pJ>cOpw!fm9xZaOj<(lz>l z)pRg{`i?yzs>{*BX26X134}}giB{k&dj$5b0%REB;?Hiqy4iVNLpIOrqTnm0+q3Et zC|B6u#55&g(w=F%mg&81Gh`o*JwyfNPTLNRy`}xWxjc*Jooh1raj;c^F3Z!Rg3a(J zRs>y4Wzk3Dt`5AlOC!8G3I;8}kmZgWrOL-hr5vxA!O%ReJ6(aU2Gw@CKSlh1i_sFj((Q`>nA*WkDZG{($A8(2!W$nJd`LzLLr1Egi zasJS#et5~`dw8(sw&cUW*QhbrIwr{S*+$->l-&(B3BW=3D0#Q)m$k5rr&pDd^*7gT zJal;$f1{H}GNE2qa#LV2LawPC3Xz-=G>LxP)wPPoCC#&Ae47)7l4g-1Su%Jy9r{pV z3&m@)dYe${XT^KBv-BY5g#V;5J0K;A{}w2y??zoRgfvN|oY0r;$kEr@z2sO_sIx18 z#h#-kK()VgWrQz8sql^9WidvJYLJrOH$ShKcu-w6$q6T4!hYp26He#?)I=pAWmrXM zj5+Nc2c;rCMBqwb7HS|xdq?;uIT)ZbyQSM{@W{b)*o}1Tv~2)iPbdSC=cZx?o+BAr zhtn|}vH<9`^V;bX$C0qh_pRFwUO5r72ZW-6l;<&2^>jNi)UdJmj{^*KBj{L$LGp*v zt^v6_VRRgG<>#yb*4A(+TUj}cqF;Oi0QWNrD3y$$BR`XkrEk2!J3c*fW>P(fgB#sc z8+djfRvQXOVZC=N$Rc$(3rn+9*s;+e3uqwWi>t`ax(2FYN*mOuiSmFpObtr?o8#VV zJBU1$z#{Ab(j&acsK~yvO=Ebb1~Z_X$k3C(TrafYnO{T#H&RgdIsAYIR2wn?4cn%^*O?ToDKLtnHFX=h}kP?CR1@ zy>f{ZK3NV`Mx4IPx1FtB0bI}l`rFVzBtM+lxz&pruNQmW7BMGFjh`nBupmBBWL$$; zu$5*!!91M`uj9Hf)KlETh%!n~t%rY*s=p>K?(C0Y^Iigq?+h(p{|&cohgKj{N#>tuD4F+u5K(9Ys1++k-)rSFKtm+XXKj0`eg{EUqg zcO$(avyy8T)EY*{47Ol|4>KwmS@+sx68~ee!Un4w1EhoFQ(}}tPGwOzg7F)?YHXr8V2m?3;u#n`*Fo`5y9bz`&(kCyPxb9BYE?RA!O3@6>BF!P&OS@ zyeRlAb_Y?omgR4kZToQa!UVU-WT69~%6(3jsKJk-sXecaye0U&FO{)QPZ|HM8~X@4x|4 zg?>Ic=U}myBC)Hf@{$m?Svak} zTfR?#xOZvEj}#+rBG^$5YIJI27pi~*Ol?vHaMe{9ixcGd)-dXU=!LkcQ{6+(VwIK# zi>m6bhRPUeHI_MQ_-Z-=rR5*Tx%J>;1h_w+g3INV5T9t7thMn1@ zIcz>kH*Bwow*G*9v!djg|Imqz)b!iU+BIyLtS*YK4S@1~)yzkh^NNs6@-42xPz~<7 zigIC)6Amh?W9z{K$7yt`q*xv-?C?6WOodT#I5hnrY+06!vWoe19S;g2L)%h?BPbk0_Z5x5ZYIz>jf(Oko_)qgl&vKml0k zh2UuPGk;F7a=_N9`v=r|Hfcb*dZ>SCbA*l3p{E&wR22z3HeFo+urhwu7ORGjBPCVG zF>7lA=KngI`@$f=-_Si^7&rrD0>o#*qgZ=bvgi_vv(=`)L;Dm2n1{gGHXD1@16K_i z1x3aJ-LR^Z$Ak)Y;@BJ{zP0eGSW0OFST=6At6{X#*=Gllt{(|>fOPFp*!;U~(mF(Q zQxB`6B+OEpKIjK`N2+E2oB^c@3b}k!Ydv@=&FUh2Si!oB%WI2mE{X=nydrY`8X2ozFTTe@QF=3^R(h2E=>UYc%AvpxXIzkpRnvp?8}*Si!Ut^3(%D(!Fw@o z;woWClK8BM1JR{$^d=4}sFJGKVfFUX*`!tgDGdE*+7)>|D)CsR5&14 z&(?l}F2iwVxCxP6Q^5F%0w8he&Vmy$GPBa&OHPfw>>~gcJ#s3ai#Q~1wCXq$0gequ zML=V!4Ti_gAeMSgkdD#JWH};gx~%_Ws+#o0&cg zaK0*^`;TFyi3oMFuTmoiIid{#XRvoR;=*mp?G+8kl%AQZ29RdbA;H6w(iM^iXu`D- zSr|ADvsu5w9h^zWR)ohc`{@V;KoKHKDb~5=W4ZOlp)5|==lgClzBx<+BrrmZFG8QCVL zTWM8!IA)KKQiNHw>I^8)ixd#R35!NMldDG1hsRCu(2{dXW}u1x=_SG`em7C>xA5Y0 zfeg1avbB#wN`qTIB~xs{9KtSwhjP%|*x(n4`Uxynq@30XESD9r?IWIlxLUP z8~n$nJ23f&97LYs*a5!zi^bax2vSgV>}hW{)}=)Gc58f?HN!F!fp z7(#vR6Mx!2!tkx1iVZ&FldcX$4D?#*;H0_+4yBo? zZ#+BlABE-=?^9^F9mx>zh^=5FVmyj(ZHv7 zcph+QSq(#MUrPSlQdQa;tfnGT`lqez84?5&nbjv@i|=soN$>&=6%ZqPa2uiJrE=*m zMtKOcDll|}AQ)}fA}X*$y33maPoF#Ch3re$yC2A0RK?P=9!^F>+sc}nKf~_u3(&nj zWhM{aj%`!3y%Vx;d;-5VkrATLL=8ohda7sdp_ z5=S-ZSUvGEM^76{Ba_zuRZuWj|{3t^8ko3Gxn6ltQpTvn}ZCkxd{4-*bP9TkyPz&?h9d zd>=#inu|aQC9Dfg2hl91#*okZfdYZLEkCh8{12)Aug)}34stt0 zbRt;!ez}oX*CY{QGp#H1-L2ZbMQ|;P%YfLo6_Lv+#!p($OJs| z?(Q1g-Q6v?26ss|?(Xgzx8UwB!68_H;2H=X2)RSvbH01O=lw;}S2B~lR2`_Pu z3%~6Qd;;)HsAQFe;^*d*(s2UZwusW~+q_VD{&&j&cT5JYM5qzg{tQZX0~V&c#sRVb z0VM*N-Q0}4CKvNZJb=o}Y7FtDkS0r<0{OG@rvxSqH?(&T_xlhN8MOs@1CNwsmFP@h z0R!x8TVC6Bx)h1V3QBCPZFhK-NR_rQbD)2#l$!%UO0_|GgY!jBW`LL26L16T&){uQ zg0Ryd)WR9X7dW|@jME?tWRAgh|1skQ^W#z_bp6e`l(kYMusi|4`;%ky)nq8elR1$m zOBYdAu+KBh@1rx61<=Y2!wnrITfB z@XZay77+4Fe=caurN`K*dsf55#{MCc#oQFU{3L$!H#!RdbYjI*2KK%palJX?L?~t9 zj4>wGOich0vMqZ~5l+=VZy`wK=9sBT6gq)irQAo#p&~ zLo^HcodE3oUm+AJ9^<5u9ckt&JH=_c@UL1SO&vUap=Yhd||N#`B0R}Z?KpuWmW{#LQwxU7XF7vMSX>n)1Vml=!FButFC}c zPy#1^ovb$K#zl8xwZOscf~N5P#Qcr*v8GELQ!yhI{p{E9h^1#z9yJyuY|(^8lv)8DgEE%>k@6w{SEXr>^{&VbWCs2(qW=A31Ad*lnelqwhiTYzoZ=>zN#w0V~tB>T^^ z5nz{RpBYJm^e<$;!bN47#j?@pUXHF^4AX*Com>;YS{6*0Pe6}o>BUNAP}|P^V9%W= z;uEossY{>*s1%xv9dE-C$~I1uD!ZRlupey6C9pGK5lIzLD(#K9`G!*NoQ58*%@s4n z5f;UFkcl|8KOrzdZm>gMdEERVD&auXWqTCxD?KU}S^;QzMAL$t4G5}PfQbk85(+IwBo{c{bUG;^OJnEcQ-HScz*d5M__k#%t(6`? zR{jrIX-EafAl^EjI`;#_|Y$nO@x}x8gTQZ)UkSwzhgP&?L;#jh8h4r ztf^%da}($a0`e)WwcwN`4(5+Bhw}XCoyg;2;pf&+A;1SC=ke4S2 zq1_^I0R_Nw_4|}Zj$HU5{0XNGIm*khdUJYKgN(-g1b)XSe<(;@t2y8|+8oCgvHwtu z17~RPK6n2RQ{WAs02EKe#-UP}jGjI^B&nG!Oc6rHJw2l)Hn zu0q&s$S?ml(AsvcKl;=TYP0+{#cg5;$HX{F+NA${B9A?n%O}Xi&l2))TR|vZm%B-9 zL{6ktu^O{QZ&*-+kr+=zp=-eX+NI_(V069&ozkLT9^Vn#Zi*8^4VgMGR62tbmq0S; zHg_6#{^Pn>dV_zUl81;`GGY+(6uyeEoW_`3!iKoU_WXKSsSik=-mF7EcX6uJ;{QXg ziU4vI3Xm%dPJmodK&yn;5)n%0rb&+<2mc3L{)I|};t;?ljcI%se>A3E)xl6osy#s@uPS3qt;lpBLL76D>56BZ62ZRrm^CGwi7gG)YyeV zyfbCGSXtQ=xX{d4wX%@s$}GCgCNZ~~e(y~y4He~C++;$nlDPiu#V&x`ZZ-Cir8!f% z9zBGp6*q;|G`@;8dgiB_*_|-LEO8}gTr@NL{V!ZC0(&W4CY&yrQpXoXW9e2N@2{oK z4}$!I$SkvX)n_+3^wKfRK>!-zrDhd*AQEaD@O+?Va*a^SE}TzE$L1bvu8HiCAYcIK zX#W3?UICjcK4|GU&UhH6sq=(%l}2Eb#qP#0$HS`_u9|X1ESS4Tu|QHiI$%o61a2OmlyTfB7m+7m-;qfOVWY$ z*T^pw99das|8Jz;scPnPr)RBH;x|iB3WT_m4J0aqyOMKC`^Qi-Mva2IR&DTbT+2Xl3b@4)2GaYli1iqisF@WZ8*;bQS(hwGlUbi8ZNYbv7oR{Yvt2^fntx+c0J`N{ zrkB_HlKW7;S6SY~kyebvb5q%=O=j(7MP}Vf4^bW8KZWKCUD#TUR>Nq+aDKgHD-G#*&2jV^T7cj#2*`GX!FDm>oow*|Fh?X(+x-c(vc7|!s z`YB>uZ6w%h3oqsb)wm%`b-A`K;;h%9rZwi-l<77TNwI*E_(5Ub&1g$X{pXflKgq-Z7O078YD}i z!~Q6#K3V<{!?Qn3-a-gL1wDiCm@{=o5I&5tVhv&OVeTEL{~U+1CAjMcSR%{}365 zTsM`YN{oYi^XKcVb1qBJj3~!z#~HKA!LQ{r7$hr^O-kO6x_zR7pm(_x@MNmGHE0`g zXsX*zuV+Nu7h9<1!ri{Xe&Y${fBT*QAu6wP;i}{JfF9p~-+LQq&IKa9&sVQcd(Y)Z z9|Hcii3U8rMu1+~wtN2EZ-IWFJ%D^3w#FXFK(8-N5xjqGZoHj&`Ud(yP<`O~?(IX5 zrs`Z=;SV2nPB)H@KxCrbe=bk9j<&m>PquhLf4XLQS~U3>_98Xe#eAiNAIoR{&o{)- zk$X<<`CiPs>D$7h6x67c{v*qu`7Yb$6ixAZ4oIgs7>&j}jVhNgSATxK_B#E3C&fj? z#}Fy3^?hQc=fo~F(4s#Yx_T7K*Cs=uIvR2`80xV~ zNR(%I3hT>M>aEYPDqi&nUjs4p$iAQXMqaynk6^DM^IW^UK2oARP-Ppc)a%~3^!5D! zQ`;)?_x*D3L6Eq#EeWyBHhD0soIxGYH`4+23y8mmgfsWo9>z zRDJn83BdR_0^&7KcoRU=eUB!+B0`@NMR%}%9uOJ*0?qR**j!LP8+Ib195>DU8+>~hKZ<5R5zN$dbhWx=^gvH|nrhUieb#(pMur7PJ5~{cTf*e8NE%Mr5A9=mC zAjmz7!FAw+81K#Z6Q+gtO!>t@6#M6>Fe5T^Hpt=q)n@R{LWa~syYEYg1VRS-j7g&6 zHiXfW+#qhjANSYkp}ia0zsjN^5kL<44KJ~z`qH!B()W!8^t=Ym8f>;N@%xahaSdej zBgCf&Q;g9>br$Z#0XZ2~gs;W4UttGEh+hy(2rY1o6Zs?yDn|w}H_`49saHH$#kJ}t z1=Lei#@Z{72T8hb(^$<{`KKU@Y5^U&!BJvw0CvuG7L~w(sX@_lJ}1>^Y4np3 z;xaMS&zeewat!2q;`MT>A)g|OTf%W8zF$|xGGQ@al#)Ehn*Ub$#o4vl&%zXz9|b!H z675LTCu+Fdn_?!9n+EKg&AaYY-O_zxZwCno;|JV43BhSL9E+p!-jZuKq>v6Htw>Dq zLzX9EEjlUNGn7Hm_m^4;HMm^651jTgyjE8x7KE;RqQA`teSUqs+?Xxc7XI@X^!_{A zcK4sU7r$(}iK#8vPlc;bbu=GcF+Xi!An9rDDXY|Zcc1S2xeDB!hw8#k_6L|$J|ltx zc$P3Uo+0rpU||)}OcDp~)oPg@+m_}uFO>@}<*PJQ%-lzxtY(l_-Egjo2Mw%=@k|?! zU#bbXGkYaWiEcYp=qyZ?k~&Zg;j3Y?tfdR3xB66_zxMNgL1?z&tv^+~t&JJntmJPY zKKjuExjwSkhNj?tc(-XOCRW~{6F&qJ?p_!0e=xPAP{`JZ#}k!nOP?KK8gso-)r?oo zOSbmXRygciOTwgu<_k1BxulB3GJNr;y)2rKb>D1^cYE9^vXj96gjBYCWz z%B1K!evkGa;-p_Rrs}VG#g6=o$b5biZugxwDPMyj`Nd7?57xh%Hm<*#fm^q~a)}{& zU-E^Ra1gDOrk(SgLt^Y{lrn`qD?BVPZjvqZf2ZGE>nk1nWA(9psd4cY3?dvT+baiC zn&y<6GtL&M+dCA+50KySpWuzt1%zxbO=P}uPswD;@aQnyC5Fii#{JFB<)mn)RnYNP zu`ptZcW*ZEPG@Y_CT2UBBVpVV%-tm6Fcio?jqgpv>iFjW_X3E?XWZZC8wo%AY<5Ky zG5hISI2hTL23r&0oa_p~Af9}v$Ot(74h}>+j>p%ogrBcz&}y}F3LMko{#<-LHYKDj z=059wRjD&QHcj}W$LUVro!Y|)rlZZUa}!PN#29A}Ay(V@qs^u@K*{F#UTv9+rXXKc z4y6Z$zE6@IMo-s2%rklaQjc6sSLVc+3A7JdniS!i++3xbKQ0R|fy{ko1`MOk1mKG% z&PG-ZdvS(N<(&d5$+9id{C{bn{3Y>WP&7f6^2Hy-10F;s>{GsDci3y`t6!ObJFk(< z>yF(I%9BZm_3bxcWPa9SC_NqW_@=z~I(53Q0cR(is<;_JsblY3evltGpkr4i;Ja9p zLRO>IjOp5=Qif^b2TH~Hg{2eB_W)`e`i7$$ENV}~$Dk65p_lg&X1tFHo*+NiP-d^F zVyx%x3+`50G{RY*f2OMGxbN$p)^Q5Kq*J_SKUC4#ftwwwxG#MAZ$4eCY_yr*j})^r zf$-dC7HN787yd0GA}(E!rxrG`-e(q$M^7E)!83S>Hej?vcTnY>LPnF;H*nTrc<1*6 zy-z~!BMuc=HL!Qr)ChQC95$NBCQCyy7G+_s`9XNO>ZwXvd$~%H9Ntojl*M7!%e278@dBiM9Ez1o=bq<5F2UlivQX!zPnT z*Bb}c*t^3S;L06$R7m**t76zlozE!olQ-_DOFgnh8}{f(LI&Pw`%^hXY`Myo34Xn3 z_bPp?u23$Xzh=)zV;ZN@)eBMsv+f@|%3&Pj-A(LY^Fd08d*Oa+hJ|Cddpy&S zC$){#-ZhdOy&Dpot(D8(ba%Wr5EoD$?rq$HebDmECf8p!S1mJG&xX=;!jrD4ouqI1 zR7dyQ{u!j;D;Y##&Z=Xuj}UY}cTs0Ez;kr*imdFTKFEe%y*4a0`GKwGbiG$%`f(bH zv^MAhE8J3huY82m&(RG5O$K9G^c^9eJ?C^Mt1iX;>SJP7!?;HnS*zLNWA^)Age~wW zTU9SjwlM6Fd`MdY^J{W_r7dm8toikdSp=onswn6?cVB3ah~c#S&m3);T@g`3u;T?X zysP`jp{t?qL;qck)?G*SuTAi>1#|f^wx+U4zd5pZGh2tBr*J$nt|>gKer$0bDlXK^ z4jyRt!{5j2F*LbEgIwIYLE=o+_tRA_88u2lA7+AH;D47Brkj`tz?A%Y#*4Uztat4% z{++E+y9ZXeuN&ew&Eq&CG|q*VbAX zmf;m180c}%ozP^NvDy3yq*n)Kb33y%<_FRuyamm^ zgz-9%ewU~;*^&fnIiLbp$2+bJ403-C5J972ODVcwt$8h}9E~_U?)&5xUNuHN2=632 z37)LgA}y+jqAq%z){kZ_a5`LL?{-n(D=*plc`Np6h8HoH72>rjUSKq;Fz8Oqc0rV@ z@tbm$re^;8*NhzII#U+Gha;(z{V3&%%}bIqy6Tl4ve?mXM?{rN;}%uiKUdq7U~)eR z#cfb+>)k`Ozy7LRio|s%OC$8ngo+Pv(82RoV<63OM@!50?5(!C{W$VfAngZVBA#ih zfuR`dQd<1&Nr^^^b(oV9AGRlsqq4r`$;oS%f`a#!uw)z2L@ zu3=rW*FVJe!?-nqeAu#!drvh)Ny#boLq#s|<9WpP;p7_8XDur|Q?)N&I!t1ek6BUQ z-yBL4+aDaV?Wy_QShF3uR6u|G*%)54(rICuQy;3DQg`-A;d?hb=_t$Bh>}*2_pBdF zW=D!7j;P7kA{Td(GzSW21UZJ7 zA#7oZO?-{@KRY|yA%rGV>o=z74XwigG?aIMrrUkBc$>l3`XmYRpXc z>>OClIIiAkC~l4fE^8tlZMs?;ZnAVziwyv;^v*e_MhO!h^$xk$PEd1TmRAd5{~XMS{1IX^Dddr^Wvq36UPiMNwft?BZxV{3$!aH1)FMx=P!CxiWAxxxHSY25 zC_ttN5w>6k`$gzRgSQ6sv-*NT=hFU=pb^9q(&}iFC6hDFk#@kUwi@wVaAY^?OLp&$ zqpzQ$vqBBZd8iz9k1r9vvk$51$MAr;`Am*m`|-Q1v7L_KfjIbSKieI`-Hb|AYpSs-yU3N*i*mo4ek|W-TJ9!F$r|v3v zh~Zz~%gxK1(1*eJ$J9D|)-H(2w56QQ=o-c%)A~+rxCuT*$}Z|Jx#O#BGLtYhUZ!$# z5<|K4OxC2|?J!v}9zDCco78a+m8o^=TDPoBrg^e`6y!&a1d+`+ajd4DBc5hC>kwq=WL2IU2UEq?2z6J=fYGXcRX?82#d21^4^tL0@(s`~ zYP?O{m_RU7sb9UG!(WRIahJgrmy>Djo7{x-pRWu7lbg&oNSK#p#k*op&b8Me<6!P_ zG|q%3O?>|)0+I>$^ay~Ic9+|^1Ww9WW5&--?(EsYkK9ZtHPvaQY1~RTwT}HL%7y@A z+ih&^c@}-^?rYrBb?L}vLsFyca1zprBJ!7vqwx=c?CzE{O#^PC?CXOX0?T?FBt8SX z({;x1c$p_>vPaXHmuXGob;ik~zQ>{9Zro})vU9Gs4hV6kUbG=uY~tmD7Ib4KiGEF# zOdl}OcUZ>oa_f4NH1fVza>^JX#Q9yGJYAC?)lPyx@vq(?VrO?Frrr%sUBkxC{ZIU8 zq@)EpPsIN6SN!!phSl$p3Jgzbi5x0DeU}6ZN~p4CduqB^&&}73b+z}+Nj|U@hflzo^2L!=@b#S9$>U!{*6G^kP8-5dou*f|r5 z&EKYv3@Uq8MpHd6>)~>L@a6~`e%Puv=?$G7*meUgN}0X(_@X*+WQtckT%miM%=o|DL z{|32e)6a1){*`+x6S=v7d`E(@CTyZMd14##n77vE#*~iW6E zShY&#Lyp;NUX1wnZ@#FI5ERkN)g{^q)pCJlCk|*(a^&ydc8RZvYxE8-W%DFc@@9~r zE^+QA%@QPr!;IX=FwFqk$HuQiE^?$t%ftp>bf^f?7EM}7M^w)=(r}|tNW-1de=cNJ zK7Fw^)*EQfxy$}5EQD+hx&3DcqE&<#TeMu*_TZ>E&mir$ybrz&{LeizpT$W}p_5ou zoG6_%TP(XM>C->`7|#1@TY&Ht=i63v-o6cS$bcykF@A(;4w^ac4tIHdCOIwLd0i%ZTbFko_RRO z9}#hVIAxK&2fT#A?IhE>=gBR01$Xh#%qMD$Zr4nZxreM_cUOfJ_Th5RY%Rfh0pufu z%=;l7xt_f~+}jnAZ>@5}SI^f+6Vvsfdp$dX_qqYdwm#pO#OQ@$k4Wjl{1MF_y0azH zxc-PHN1*t`oqrNSW>bJ#9jIpbxoZ|dgC))sBH~YmHsmXEeCd)n796GI&!4(ANfi6p zObk6biIG&TdKg!YpZ-td2Wo3|7SLDCDzh3XHsAUHo479oR=W~oG-L!WHEE7cRT=6T z-AIvZE(1BO0yhSXDIrRsH=0jDr$H>ou1>#=Y2y2WD(tR1p%jQJc zBxPWCw)l6Fyww^Y*}e=JGR)3=?H+z%@?2$vK-tP)*ZjPHpe9LG82+uEO9+J9vu4ab z|4uKgu(%k$3OYUHaN@>3WPoBfpgd6$p%|Hem&G{K#h51(hGq`dBFOM})dTY#?LCMIC$$v;7VfkZ% z>XXSUvKy%M-Jj1?<@@GstZ|U}()pUc)$)(~VCTRAk3ypFU$&NsTfz#7;;7=_|Z z?DN$1r}OFGlJL@Zd7$38yEep)xue15-s>&ODjU!31-3sKySqkDH#UI^bYv5zTGD*H zZ|Qae1L*Fag8Qp(4Ja@!jfhRiST1WxI*b&+cQqYGtv)?i3x*_>Pb<+>0a970#o?Q- zFen1!XgMRN4y>J}y5tct^H0{N;EkP?+)pRSSac`vTAL$WCqFvft8MQ#9hyOZHA<{y z>kRNjOCzr1f7F2I_m=>{eNh}v`L@C}OM9}EviZ($e0NW`@Aaad=YzSOY0p>P%>izr z?(7=0EJyuFMv3TQH3(h7s45b-hiu$A9^;ale953h(ORMaHEDc? zxwG2Qk21H3cd+C#kcaQ+ zmsOx7qj89MVtoidG^oo}+YYhbpo@XwwS_`=p|?MD30cM?bK*@y+NdeFuOMk!5d%lo z*DhvJaw+4)43oBqr!GLkvlO$|Q{~-ITjhs;dx5rhP$`9Y=2Q%XiT?Y?jmz6OPG-hB zf$DkQNuVkoMtRTzq#fT=+uc+GcdawrWt)7@e)r7_OF8)~D|p(YJ2HGtqgi$Anb8WD z`-ES3bIAkqqCxA)NC0Oiyn7)Gl)f8G#N;th`^BJ+`}JPlhj$0JK0W807L!f?)BdvC z1xaRn2HbSmg~@H%ZAMLc&g0awTd@5ZOV9UwjEz6sLoEtWpjt_FE%2HkBBIZI&6mRj zAsT2m2X~a#K5v`tT4Ya(EI;Z$(I?ms@3{w&mS99u72PLq6eVqBAtOx-c|EIga zycO1~?V05JT!0N2^&vRltH(qFEON=pY|upI>AX_0sQ?!FC{ipaPH6U$8V}_uG`pzk zESV!eCa27cT85thxylFL7$g5ZX$k#WU;B#%SQMviynPKBs=X*3= z#s_;JXRXUWq&kaMU&C3eH+3;xQFlGq^rE$%V4u~Pw*c`4L?;5H|_5ryyalGR3{-s0Wegq_@+S}gy@8l8iuftzF!WtDaglgt722WMO-VT*G zIi9<^Uc=6kT?bn~*2=5-nN?2l?|kP}OYIDZHcxvO)4567%yA{gFIz_y_EYVvO`O$< z5vYmuNKN%1;5GR<-%qGMe<6qW%#~%udh&^2Bf;05^@|s7eC>lk_larb*pP{B(oG`=7bX(&)Xu zZTL52v@(;Kj-neYxgn@$%IG|$3+xA6MuG0nj*A`V;nOaD5EV>9vc5ZST{S?%e;vpHW3e z4TiO$A&^;oau@q-{zqifM2W)F=7it}I_VI#;NabJ-){|#y=q>?jE0Xy8;EM#hnFA! z2-UP0V}|ehelt;}d0(?zqr{LA+H>v&LjN-dCK>C~_Y0%MoT>0=% zMB^5ZFiLw2|67;|0miu5cs{{X%w5xOb%(UyNYC%G#)Zl;$nOnJbx$t%KW#dqfpl3v zMn0!gQf|Ok^u*L%0Nn2)I)iT>_5DygiI*%lDYndzuUL5`G<3a>>{&yB&)=!~s|b!i zLvC%v&(UpWg-?#XziCKWBZm*TNnIKcR=wG2ekI@^jUj#RXVheF?T>rhzc=#WFp?eh z+q$x0KIr{*1@&i(H>aN2@rqNE9%M1q42g38;?`dAeicwz@_kTI_`1uh6~E`!B=LT( z2<_#4hD33Pd7{2$plJ*VaTinkgDk7dEOt7?jz`Iso#+<&Ekcqos+bpbqwKls;3i7q zOkWPApvft!D$za@dCbWRv<}%Vw^lJj?JVrX!u)i09xIzv8}L${SF-X_K1hxX3|&Yp zNUn@|GDtQ|j`#mWvTTyhP99cH9`58E8P`ydq(p4uPEO8mKl1$h`~OE=`#$9pi(<;6 z9gpb$ExLVc_@=%!By!oa=N+dKG|Qr3HiH3lK)#gw%|Tz2%}8p$f;?AG-9t(uz+{VtV{4dVrKZ!Y3Kv{ z=XK|ZKPNt^HrGlCHqSRjg2c}=2aUo;SI!555G{SgW-GmR{Wn7g-D4IRy@CZReF(Fp zU;jAC&E`L&kZzIOk10OM{EYG1SadoD?a1%X<5TsHxmTRcK};I70f(3QkbZ{AU(Z)H zUX@utY1mRs*}%Ja*w}OJ6C5qw1x^U1q*$RUzQrlOy{2r*$miV2ynt{54YESy#CbdFiG@bgcP$%}i|)=0XQHiRNu= zavSc^@$SLbO^}YypWatpwAxT(O_LPc4p|tUOeoLu9?0x0`%u|ev zVr@KX6iImCBatBPF;QZcN)o}C9MR-47Cw)h;MmpUWrykYow65w11akQqh-){;guwj z!XGVRkC*z(86<0qewQy9ez!|{={4p>t1*?G0DD~RufK;gs(nGyZiroe4+8shAyAj&@Ox0V~;_;rh1SPC5HxxkTCT( zohUF{oTn`r5_2+3`Ow2Glb{STu~SPIV&sdJ-uDSyssoSqgIHts>=%$G;~5RG(;n68 z<_z1hC&;4}G~u%=sK@CU5jf=`Pumo&cuq9!K3B^pD5Q3Aq=9LjijyTIu+yb^YgjttMr>tC!lsk<`6UQl-6Krf6n6+EoPL}s6*`>_%Z$oKWqcCYH;OZ07 zrTKvNsgKQ|*2mx7n#6!&E2APdOi|CIz(?V!#;ADo1KUy(XQ->bR5&gx3{CsHNl(@& z&Ps&S_L$`Op;DrZ5!d%8ZoV=m5$(f&1&s`Los9&RyKFHK4t`Ucq(%TYN;WFyG|U@` z87_>6Bb0>BIBd_pZI>coG4g_AqiQra?6{5g!=MN4wCAAX2p5MbiccKwVoot;NoAG7 z-ED^0@oepDgrT<_yGB77wi9=Ym{hqOEL1;$-QwDrC8Uuuf-z|;@oO~XQ;X#*wn^n$ zj=ipbv}NB`NUgDI6+`I#`~hy|WfZ0X^d}bMQ;RWy^Accq{L+OSzi6YPcsReXLa8JD z0zXhR;QoW;G*TG~?)D+D_Rmoo&W`tKVoULnii~7$bN=Y-7CON-$v%mkyCKpY0b&DzoLrKuGi;iXQ!qZW$fkaS=3)YfL%g z*mR7Mh4>seQPtpVh8Zn`pA0nQkWZBWXVhZ=GKs@>SwIES!96xpItA9c#{gx38=ZFm zi5z}fm2I;+LZSp150JoRZnLJXm8yb&1F}#?O*1kzeVlt1Ey_65p#|(XU~)CuZwHg< zrRUlI3py~r6Rj~TxPh#~w#J4)+pM7Dwi!@en7t`TMrqWN73m4jO27=j-6N6#&CPG4 z({Kc?6W6R}DA4|r$*2y_eHQSja$qsWD9}jR2$O~c?k(N`VUYW#bQTcL*?ZOt2Y^b> z2Do#a+_Fe`V@NY98)aqA?yjpEXI)RC0Kt_6 ztMa_LWk{H9v!KZq-G~58CG;5UaqRlrj7(|m4N-Av@89JTWeBH z?rCQ`Q+F&FYTV|G+HaObhr67Fy}1z>Yv@0p>}l9P`}~#E z;J&vl+Y8*v$v5b~AN4^HSv`s@wl(b|RMpb*=Vo6aYgaU_vF)eqeDZ_(=+Aw%C1mUB z#<6e)Zvj&0UNRrqLoV^iHJ$1GFUBaMVa3dm4d?)sBa0L!HFN95JUgXu;#%?cH$Tc@ zWG9ETb=v=g|+B#nZ$nq#vETQpP^WJPQ|KdwcQVROI-_y1t}VF z8Fk9)Fjb0UIzL|RRW&Fw z_MbRW?Z2K8QYa=%ZRs;ufxA&C2!jF_M!~i)I}0(2n%vB+!nJ|^+!CqM|INEqs78EH z<{qiSBX$XMyu*!;Yu2gX<>xDFxi^t!ED%?KW+}c40njWNv}30t7XyaKl)(WHZ~Nx( ze;>4}I!`L~|I}S|?oReF45iLZ37p;!z(irFd|N+_0^oUPG!P(KD$jodu0ddB1lOtq z5=4&{sG9t6<8HwHTG2pg<=orqX?4<{_-yVx?L_?xC6RBb7SS@h3u~|B(XeWrEKbof zSZN&+uFoofMl)POnyPdG8|D3py1XEsBDk!QJZLe#TyOc}MI!*J`b8g?9s%1&Gz^S9fh+T0xy zCc=hq6+kqx@wjj-I1GHNM@k=YXwmb@wMdN*i9cqE$Cb7i7xDv#(i1`;w5~=0T2`c_ zcL*_Y(cztMFx3?&Y3XXn@-L1+{~JgYGZ!3{cxpQ-u5yS98Yc%1Qd!t2o|`3rWZMXL z3`lHmX!Q@Q-b7c7z{)I6CNHS~RJy+}Gyp|_R`$02LJ9EtD#$c#vuz1LtMxXgS)=;A+L$q*Hv?w&Estm*`nwQZd`>*0 zeG4T(r4|Xa2M;8A%S;Qt{TH4hnXO}0@4ag7uu z0OaOBNCF&I4kSGMH9~9@K!XefkSq;Oa#nQR>B0Uy@d||@BIHL7VC^F*NGcL+NWWw%5$Q2 z0JCI(Ea9jHRjPL42zq%hJ@n#L3CMF9mz}vz)ZdclB#=CdFzr0>0ln?p>~UWR#GZ}#ZK1R zz0bEz-PJ7~a!46?f{7A<`7mQ{c}8DA$4|pR~l>V)r63r(u3+;urIXM<8`?F%JP;Nx2U&o$!5=s)` zqw!-U*&b2MCP0>xV>qUwR21J9D}^Ue7s^h=xRDE07sADn%=7XE!isdp?)}MiX7p3w zSXHL;ZW5ymcB1qMd=z%1x)`Q8D4Bi9Awll_38sFxP6}(1#zdP*u31wo9cpAK28?AA zyE!ES#{IgNZvh_ za+<8bBDbvC?wA_L!K_5M@`%DXk%uZaf&k|{V;{VAy>QkVhmR{tD${gwU~}k+lvEiY zo5DMRD^pqyANdgjL*EkUCJ5f&2|+PToEyn=U9tjqt0NruV2gf*(?m?82|_R~TY8sc zff--S!~$=Ia$o%&66n{rW|*OFRG66d%9|ogt`kg#FhQsVB9Kx8y%ek=`_-0660P2_ z&>`XQ1*ddv1=K>%T?+ixmvTOUgp*e4ghJ}$T=2(uctUI@Vcgi-OUsqY;i!w@R=&Al z;Vg3eM@#l?WNK$#UYC4TKTWY*tpv0uq=;AC9r?LrFQ30+jVU2lXpPO3Nz#0> z_C5DPU@%}+$XT7+mF&wml#EF;@&(}YL=dmek2L-Dh zZUjZ6+$xWM=-vE8DI>2hl}glf;*w?m1hfRm5@}(mc_X0d`pBsgq^(_s0X7eOmM z!JdPfMrr9n=)4|aW_D8bj!#9R?^9}-CAyW=n}F}*BImR-9t}2eb}XS#3;|$qvH>iw zaH}1Gwq6}0%w~Xisz?T-H9E*r&ZgiOt`D+i#G{wJXQ4CLIFDRIt<5 zlAAVGof&3^7Go51i-*ul(nbL%O5D=|EOXj50TAfA*~RDl$H-H`4Q~}6EQxoC1`G%# zIJWYgoPkFPKp1cSqvcxv3LNCFZu5<^9by-EV}MRA9#`CC7K*1*WJt-UQ2f^`AbR_s zUK!5K<`l!u`JzzL^L6^CqvN~GCf;ekLn)5!uzW&E0XPc(WzpNY3xLmo(n}b;d962W?$>2Bb4BG3gNcEfJ^Sx3I(n^L+>saxMo^@^WndPP3%)3Rzz%K#ZXaC0k~gX<9!uFr9PI`d|!5A#H>EF5b5XU^F2%W`{Na30`mHvTTbW6BNd77lR47$sbs*f+sg^bmU z(zlskilxO3!hqds#6W+#$N$U@XyuiF(XPx8SkGB-q}@WsY0Ga*P&LO^R4Px}7AKKU zl&mfd(<=b`57(J2ol@DW*7GzPh`%GpHRgEHA*&5snSYZU_jK&JW;rZEpQw}9{#O%xYqM~N!c*p?3S1j6N0P42p~Ja?Xz&1I6eB@VFRBRl3aphd^(e%``GIk#&&{*pKT&(0wY7cO?#$#f#;*!TCesG1I%Cot8 zIq(tL3)vWQIo?UC2Wb(1gT@dk(g+ep-u$|$tpGE4{4F6N*|Z9__ijUyoQXQ`hs$A? zCRBin-r?ul{`Uc8nwbNGJJ@8;3NBc|QP`sey7X$L5J8d4o>0oAw&ds#yKL0az;!V@ zNH}n!(6-LuUG|u@OP*Ne5;UwLxDMkOa{nZW{+)7xt!W}WNWKU!M2h}2)c2fH3D+2P z#-{1mWt>s?$6VDdE-HhvlzPR26jB%jzH|`+)?tI9S>v&01#8ZTCn8t`jh^|=7b{FI zwuGHqyEsUaGIlT#UOI(6K^V13Iz#eijah)Wk$da_!^FwLpYbF6ZS*HZOm+Nh^7%mu z^kB(xjI$C75Jr9nq9v(6JcDe1@hk=NscS4VFX)z8NdD;%rOb z*7S`zO15kEkTYThlKA~j`2cp*p2_?llEXz&Xeh*(6nvpwXV@AHJD(BUzd>iBbQ)*D zT6Kl$85 zB}VP=0TFNNnkP%{vL_N#qH4R@7O|&cAJd(w+XhP(%|VW1kx_&(@&VQ(GVn^7>76>w zpl&IU=HN>pYCGEQBpOI!hnKz29Ah0!b?!8?6#?c2RZ*J-j_T1%H!@l%H1O_vS*$*P zkVyblw*PtrE>`6Tx>Z0-lMhvPEjMJHc>)>aVA1KAcdW8uyqfo0A+g^j!8`9V{%$3z zCPM2&m>^I4=&bYlPuGl*b>1w&Em!~3-GpalaQtY@ulrvM+UFHf^ws&3slL(>cd+j7 zt`Y>Z)Tt)_AFAFtJhJAC8ci~>ZEIp{V%xTDJL%Z$*tTt36VGJAi7~Mz&h2@B-~H}$ z|LN!H?&_+2cJ0$^*RHc_$%j}M&yxP)7HL7#?K-9TJxlDkSGzJd{Ocx4Yim4LL#fRf zI=tvMEXU0G6A0vS$HW5`X)m-D}Q(WV<@PZD?Dpx(_2{yjLP=GA0cr|7gZl18IjIjLy8CZv~ zDvC#iD7HYA8A#&~4j0X8!-G?6&^D9Q7={Aas@k{d%`<`*;X^pzR-Zk|EE{NrQoQoB z8qkTbJ0=EXx!~u!Tub-fkY#v~`2A3^5@a@qv{a0!kaSAk_nBQXxHi=2t;yw?)eXSs zE~=&4b$}E3+_dgx;SR;nkl;pC^R2w)Y)zfcM-Bn*=S?>!!&_Kb7WsmBCV4ZnD6g+f ztd>dAX^Vn;8b0n?oT()g0K*D;svl0g>BsMP zClNNg`F0gcPCA+qXO4TCG}Gy6HQ6jRdbKkyDNk(?M)oYe54+$U$t=-kr(slMhyC(q zY6T8fO*&N;Xpjqyq_rQC(6Q|?S-3rUT9nb{3s@MBb8y+^A2p2Qu*~Gf!Ym4xqy0Ry z0oAj}dMm8kBnjFHSMw(+0!wb&_&O0G-Nnx@d~YL3A1DJOF|UW6d^<(O8zi1MkSAV7 zPJuvhq@h3&#(1NKZ~bLLdmBl-xm`RFZGrkNjXqC}r+>AJ`VlwY50|!X5|6*Q>oI&S z8(8n%@$Y#4`u1YuHcY>auw-`WXeS+P3y8p6FpRoaOcL$iEGk#G7WNaKF=QDyHPWzd zA^^93-rF-{gx?h4XHM1@@e2%UvBs58%_Y8``EZ5^KPGZ)`j-0}e!EUqAMgnstNf<@ za+QOU)3DtuvfbiyH*#de_4o5S#=&`QQ)t@hW$yis@4e=;1^~J%i3n`nJ~cm&0C)7F z>zf-^1qVhEbMF&cIYJKGZw+&w-X%z8CLHz>VkXH_29Vg99ik+=o1hKoi8(DJA+MZ6 zmTKHiwm8-OYX->WHFdnfY3gxH)e{%Bm6QkUFMzW@I~z9z;u*++f-Ji5@}p^G=M0*MtESPe#DJZn7s2*fSI`w_TvZ+ zxkkVFz^`INDJOx0=R>TsA3^yLHu0Vv74O9CV?^WM$XuPHdq1DB#vAd8&g6^#AawKL zMev}`FvCFk4mI+b;WF{?Y{MrI^IRSg-hkQQ`}E9NA!b_-D>%}}&20XS0rY)3nZ*%l zCd1w~qjmj~B+Ftr>cwIr0-O^ylg?r+aUHNom6#ZzjDG{2(<7YIiI~C-&R^nZ*a=0- z>56o{E_s)e? zv~x#PY1pn8TZsLoP+9VR#{K@5*h|)@%U#{u-PZf^(^bK8#ckqOe}Far-@nc$K|>@d z@4Z(z0}P>fW$a_j^=;=YkdzbH6Ei(FrgsB7fl1pBQJ3M0kN2UEoNwU25I$aUc(}u3 zErosKUfi}9*LO_~yY#QK+jJf|zu25&G*h?YEPYj|mF|6m;z^VLLuR2ZJ-lS~+Ve)h zZ%z`pFfr$xmq8W!TMU3GSW#hoy-bfhn)7OOUKMF!o8eS;B zxr=!|asrt7!9z93PsY%jH0bE#&j*6pnZWV{ULMf?Z*nwjS_j-y3)7J)fZ0V?4+F zv1P4#gL?v<05|;CQNQw&uOyDiUhJBMl+SY}Q%}@l+dv)u&v67+KO8UPR?i5)b-I(v{%b)5p!o{=~eK(171? zC#%>f(g$wU0Ys3Bu1caOGG!DhPU+plq`!W?ORHH>VPpl0kYE60HQ>2te&FNj2}Jz3 z+&`XBLQx_CJt>2FeDx8AA_If3;=O6&ZYlLhtDhjx9|z#H-z;ajoZg1Lj~l|=N9;xr zWs1*R2iSK?Vt-Whbgv88w#T{@*4yg&qU1|_J=UyWbY`E3lGKyMNVJAcV9DK_*a^TX zZ}!Ia5_R+XvkulG!+s7fb0Hcd+mVdGNco)WU|H4ozLl3!YzssIFXA&f?8^SYK_BcX zwwq;Fw*))~X<0nW*jwAA0}ri8A849@r)h7~N_SG=Og4hbivA((IIUbVNr&R4gjBWksH zC;-ksA?8b&v}YG+Yf8L}MF10*PNDhK9(!g%$Ju|;ni&`Y2jy& zt6QQ}k!+XcvX1<&?Ual3WrQ!Vr4Yz_b_NbUsLY&8-n_e{{Tp?0UR_N6fWJ496-p#O zntfc=utelU%k_-oz!_arjyvdbP^t@k=7PbA-O{x5yGdDP5cj{4SMm&#!+Jo)k^&lN z1H?P4kSqS2*~EJM3VG36{9y7l1?lGH&^Ruk?%+#KSeP3^ zG9%{bl675mE=kJZV}yMz7WOiX)S%;EhjWV_c&!sDDvgSfLk#S7MX21Q zjhd0kr2LU^+X?4iDqEA5H6Zo*7t0Hn>6`125sOZkhQTt5X zDO|$n;mJ9wgF?4ZUAlkd*2FK zB^0L(C*Dss9|b#3HTiVc(J3#t8smZ6tr(~Tv)B>eI7{PBaUd+~f z0-!0~&$WUT<>hxR%CVeY%@$qTZ~ly9h;*LVXbDRsX@YA2?~@$(aaBC)p>iQcN>!iW zH5Nw_*S-#2_Ht4Ho&|Y4lF^U}4|4MN+2_ni zL>eM|8Szy)MT4Rt?p)>a$J0HWffd~w0%khA!fMyh_&5F>n@ufJX35lnrW%#2Ya6>bv_7QE!(MYc9IDbWkoLCcb(y&$ur{ro3&^dLFw8BPzYnRhzE-6Am?hd^-&|lQeh`;dP-W%VZdzpN{?YeUNDbE@R}*dWsQGThbxi)h5_N!+a>BM zx}*`kDfj0|&R^$E+LHU9zx+pPZ0<$Vs@ z&n+k-n_|~UJOH3)T3{VcBu(!nTxr*pCwn?xN1?fpIlH@gc{8qv}bw(U{NE>odC*RSTYHty~>1Bn?{Ki4sj|J zI({PjMBmrQyaI>1i{U0mvaAM~x(8mTDfz7Cg{+caiH-pI4lf?roGKwCifayG0tEFO z2S;;_L3vCgRVJQK)K>j#0zh-yjcyaTBI>Dh&d@EFzMtSWP!L<-#?E%dE z#yh`Au3EB=pNBZp!M|YYM>%$IJl+J=F)=#ixds%{zaFc#ghsoF*+v+>i&aIrav|{P z>fnu;(Idj76FpH1HlZSG+jTqS%n!De7tt?)yaBA6Q=Fk%;*hLr(^O*FmX` z*)VAtDeXgBvm6?;2z6pjy1wY^$edz2F=FdXA|L{Qn z!VOsQkoC{2uS*+(`}>Y?#>+Ot`9mgXMYT=K-!<@@8OA{Wjq$8|ceKs=07uJ{xGoaL z9zwi`0~iz9@3sMie8o+tLKeH=z4d)T(6{TPiwm{rWtju%|2^ zVW{qho3yPk62Ji9U9!Ky>TGSN&(Fw`k^*=KkTAn7x!e!!a4gSPa2w^tXwjQb*A zJJuevCHV$r9^G|O`rfEQ%Dk~XY(m7+|K2i?8}Ome@O1>=jXmpn8J1cq0?WAlXG-jA-VTIy1j0Jzsa zNB(Rp_MX7AR>H$E&JXRWaSh*^;chD4oz`@v)%HY{=hT>ZKuQ>dM&zoJkDas(KWCev z^qw0Qmw}JALQm1GS#K7Gxv6*S?cn*n_xM;!4dm*nn&M%rHZIASWLV+kn&w@azR&1t zD0qjFycSCRugzu-ex>E|O?n!4z;ps|tYq#BND6H34>whYzuP7wHZ?QFEVjAqo{a>4 z^KPowx=pqYN|Jxd=oZi^VX?i`m3fN$83;xia4I@Hs3(Y=(Vu@`KF6nXfy+$EaOgXq zSP^ld@@6RtHoE2gw*?9z>iZ-_W(ebaxcb7l-f?*q`xib=$7^D*Oup^+LmI7%PF0$qJ};+(&sNE7SlhMPR|K_5&n+6i#g{{91R4fSSw$wWtU~eR6<*0{=7kT>z+G(vzNbeO#m%kT2-@YG&2Jmr57<7-ic-YhO zac5)9%C-?wWuCfM%dVyyQCET0+Zt9CJUvXvwkZ4>*B-(4&@W)S0Pis^mpADi^;Bj% zyx&ctg$+BOZIO2qR64v^X{!~|E0Ff4*WtSwSJH^E_C3o!{g6zvY^>o6S^|n$*xkr8 z)mv@3M#pfvn=;H~^~2|RRPa4s zYLM1Cv|%qHQHU$XLN}p;r6<5we5NK$K<^dt*zK-s5gPTa4n!pnzOcX-%{Rba5LBAKqi z2O-p##98#s-*-;E#f3fadOH;qkQ5a7h-GXOKYpC7OZKdX(pjucW4UBq{e83nKOxqwf4UjXboM1DJ8#QiNzlyf%hmQt6a)2)1~ zJt^@#-9}&IJpDScyjSKYs%N`;V6>tqbENN1&&``SzJ+mu=` zgg1caG8#&!cc1iO0n+J^w+iCw&kCz@KL&oa*W2HBGY==?kKX6VjslX34433(WWQNw zK%tOMm+lt^d*%s|;~&o~IibjM3_G$n2ze4%)M~iXrZ$FS_tK{g<;KTH;LC8MluExIo_ak$Q11imL?J8^A)XFNWAPR}<|SfSiDXs2!_E*m zX{c78ym&1;&06)S`Ae25jLXK>b$(Zm7KeGXlX@s1Vf;$yL3pm6io-}<5g$%VLw)3b zi~6_nkJPPErG4Z)U8rQl7%XK?^7w1wtySM9q{t}N(Bju~*%S*`>ij~L_HzONb!;*^f}i-W1VuocdO@sK81bi)~9yEXKpTG-LQ(_SFt z9`faQlhM3&uVOdEzg}8yU-|HKv?->8x|1@8azx^{lr6JyA z-@P+u837xGI_Jo>U(!0as^}3XDqks4=>6?7MSn!-r_y!3m}907>k9k!T%?!$4-q0e zpF5`Un0!1o{J$@AknOB`pd3~jps$$Jmid%lb$H@Sei?&CBP}s;=qCnM*JDa8UA>(~ zf07nj*DDHmo*`)cvV~P*6j@NZgiUMaZ|?hQ0?zX64KmJrytl*rqC zv{SH;Fifz|Ih;ee?VcdQS6`J0UKwK_nA2N=-s=RV-uq?qQ=jEjwod{!ryg1c5eY}2 z^|;U}y3enfyk-*r@#fuU%Nt%Xpi^aPkUyB(3>l+GYgmoox2YIFY5f>-um9=C5ehT? z9pCJpciVigJAoIWc)bJ(HZoOw$#O{sMSP6n1MIB={B^Eeh*nsrKWGirmHHL`?rE-b z6I6TNJfgMl7?AWJa%4JFRM?wWl^Z1EX>b^0U@eg4Qd;4Bmsbwir^@95>#HSl`Gq=d zfHhUaV&o*nSIq+OM9Xi&#KLJqbA##Z`K%dh)^K9S>5En4jH+=E!^ve!z#a&AHkr`M z<+fqR9x1wF1CvYDJ^rkD|Gvl3SApwNO-XrljnfTxA>_P>#RmqB^6FXx>{wQf3}@c< zO!$nC_325I(TII^1mn-%#_eFCtv@_;+@fzO9zb#Q`OygI=FY~NS;(mrIVkfSa;nXg zr!a<-&BGgFT^Bo>I~|R(k@%b<|Hg?o+spOc4N+EQ4$qam5cl}>JtVooCqjR&H@4+O z-A251(X?oGTmU8oB@5=qT^uKc-IT-k>O*V*_A=MDM@>!bLFs}~+L7x3W<*Pw z;S}L}a$pz0pq7QutZrPwU|t@UbpS8=M`UQ4VdnVAvMTF$e1|gb;Uk9o+a4$0hMWOE z!7F;^nm@fsNd2R1%-<{az9P$| zz?)+l&OoSO*v*Q8$3*H#(CdC*Plx$RUqfBU^1Gwog}E&IFVbkI-z7y<(r?-D)Pryp|a3K@@({-E90@!1u@fzo5hC{63%F@EYVS1DP09*NHOFd1yQWpRqUh z8^;X1C+vPCSt3=niK*tfDNIOEoulrNodc$16~%n(uk7+6e~SW|!D}8+AJ4<*X6>%+ zde>KiRJ3wL<7zk|@g1LgX2>cI&&RfZ*6s)tY`>*3F>u`&tQ#5E&=`@s@0m(qy&%MX zTMdlxX^+M)CfZ8l6i4WHv1OTKf&?E$3Y z@4+`ZBB^NmnIIJjOYXMuuX6uH?bS!mVKy=plNUCrcdRCJW|!Gk93{#9xCu=W3?#id zNSx!|nK3eUp#FU2`_>%?5VhsZztYh&#=0N>L(bfZ2gV)1EpDN*y#02FCPT*ZK0k5w z`TX~jX5js?ZC5QBr3$OkviKOW-4Re+A^!6u#NS+SK+PU9!N2mZo2OM=DR~xV`{uWa zhlK0}Lz&s@v?1|AYG8>Cscpz+eHQl-#qh?=9gl<`loR)%OVkj-El;iMejd_0Ck*-o zo-}WI1bw}8B0s2BduT7tkTy1rSc4a(`g3U^eW=7KfnZfuxK=aHkCD6AS)H@@5IYmK zBqg}?%9Hm1UZ{IZVt_C52fvu!%jGAE$U5Bq|B<@2Fmd>Qb!^#K|50~Y(AobZ)c$|W zT@a&IIhW}FGI!ZH{`>y_WA3uCrywnvX5^EClcYfBA+!Gb{(ppBw*QfU+5X4%W&0m} zm+gP_-TzD2WoP-Hd@dI!_y3Qu+ZJGuLfPSR;rAKyh>?M|ZmFdK*oKwT*KMabNop{6 zAqrH!HsK_crN4j~`<15fsr{br#}+JKSRFKbeyYJzdYX4CYC%jH#1ErWIbi>3_L_0w zzOFd2_29d1)N$-GuyIxK=h1tTB+z&BfwF>+V^S6C$<1<&_j`=i?@u7gbyThB4Dc zg5G-3JlRKeuA_e)R4{9kG%oHz=6LUvgJjw;!IBRCz3<6ymMx^Ic6Qp!X9CEsu$a;# zm(;Iyqhq${^e%2%%sx5UxYHv$nyk>~sAc9V>`~tbTc%}T_ZwXmG9UwNODy6+#M&X-?*7X zj{kYeW+Ed(uG+|Vg?tULjx&yoRl+&2dKeQk%xkf-2sYS(mm^_RZi>=gx2Z#)u;TAB9Svh0bKUUbi{+=9SY`Rv_$9v5o9@Z#h>+ z@-Ru3l706;OjGfN;Ot`9GbYt_j~^Yn)$J3ZNW(x+>cU~JNv;C>c|kdHEg~jlJx{8; zw09x34u|(nENJC~ zSRzOjuz-Ev$No|z*CN9OCOv{3-QR!)hMiALPmt`Y@$)|sGMW?+gOPdtc{VsUTR z984z_9DIq5t-~5Z2QmmY>Gw>OFU(Yox>ORS!Vtm~IjMM(IX#>#J@wQyC8l^`DzySb z>^>QTPWW9T13>*-5LGOqp?Y;GY6vjyzSvdyloZm!aVbLeJwX`G@I2B&BA-GTc=kKo zA{m!lyE)BJ8<-{|8)ZzZkgbh9A*M|njVHf>0i3%;S5di%E0fsNiMk$couDVUN(&q zQ)WWt4{u!MDh(;;Y&Y)8ql>3v@*7Vs_N>Jfd}1!F@&pr&;g{?gvHaLO4LN-ZIhnDp zrEQL-D}WY422u{yaon|e+XxZ zd=OML{9H$PMvY;`s~8B{f3F+WlPMrULV>sdzKES_Yns%EWMvKrPNI8U>gcEL+nD4wyq{{-w@<=3T?KINO2R^mgc-f{mdFXhBmPGfS?l- zMKRrnASY4P1BIu4T`&Ta;~@U}= z9qQCB83NfGy`0uU`O)oQkPab;Fr6&fV*+B1!pb!Rn_7o~wdNrHRY&8$7+rO7SQ-UJ zze|H?eU|hw5e&TPn!=!7)2ppV8^hAVs4(L{>_K9IypB3DG0>bgX0#eu>!sl!g|{SZ zZ9F{{4oEpQ5D9m897K=$7mTiinvYHDpzgWrWO$EU4GqxGCP~pIo6Qd`U z7#Ray8*X|du<70%hpAF|0!_nUD;(sxrEw5r$YE)i?Z&q>cyjb5G`AI^-XE2Lu__1? zX&8O+my-&}De2}^d5)u^hwy83@!K zKxHB$fwtwJR!a%ur?tnWV$U_I546c3$ZB#}CvOs{=%D!pFD-!>R;a0s%_N{}4=V(T zKo+&86Kim+xK!YW=7jxu-&UDulfjU)e1w&=>t=vLVjErDFE8FTrHzq9oSs#d=Tx=> zu`_3+RXHlX>_I%|1!_hbokh@XN)7-KlwKu3oLqm<$FL?KM}9*tsv{8t&DXx-X+&Zf zZ@q%9_H9fL3LSo=TXg{ID#V!+Y>4yQX5JczFy~-SZc)D$Wh|PtSSuR3e#enfYnAjv z^r1KXNL0`d8(Tn3_grr>6xu=8&P(DCdjxj8G3OWRTe=_g?zFZMDCAjys7KRPyeCVD zMK;zBYp)i}GV9m?RE#1oKL1}8=MQskmn_n@K{(MWT&)_M-Jk;b@gW71%uyLiv-n-hE zh$K?&iwIK9tfx3=gk>@ScEZ?=C37J{jOZPhRRjZL27{ng1ZKimU$nvGFlY|kn(>9- zP4?y;@BQCVJgid!2vewoOeJDh)gc8ZN~++JTz7wIry_tlMMLW5a;1vkby%0~4!0}e zk1AHc=V9}KNzlZvuMQtCDT8UW1+`U=1xqle*gg4`$$@|umJW!o)$!)S?kJlQOo;9X z#fiW~7+VBFXg3ALTP~?#{_8k7H$lVL`d(YoHb>L9#y33C%=AKfu+GJx>5;#lkt}Ex z9%Z6f^NFW99z^A+H>a?}+H0{WZnb7&AG5P*CP^q&C!GwD4UZ_P0#8yESu}faSE2LA z)u|xG6-&bb;K!H8A8>tGA!ik!~G#P zWd7f=A0IFtbo9>6CP$!ltxdF7qG`>nfs8AG6qNzuqrEXnJ!RTyW@7N(Ai zxjm~k4oxVg#iz(ISPF@SupS}3Tw*G#aLtP%$@ZntW@ll%4ns5w**w)7>!raIckU=s z8eakAi_&M1T@I2Zl^Ev5Fck8okF(b59-;wUCbJ6bEHOXV%}K_^mx*xcvx#A)U{L~j zs(C??VQ)^z*c4}P?jf4j?hN{~B3yNFSQ<>u68fom&*@vO`#X{v89f2}?yE=0CfCS+ zMnp>i(JO~Cd5aYFxMWkf6874;eoe3fSON7lC;Qqfa6^mcAIe`R9oE*2%+>Qq35W=% zByCyB6)Ts^ljStDBg=02`O;$0?>v_pYVv5?eHY0qVwf|c`_JFO$)Jf`C=Jz>C{oPfV(U4mzeKUq_}VJ-MQU5`X!11itXOgK z-dY8)?gyX-4I+_8iXni@ei!v$|Ku9VNzwd>ez_WbKd4_>nt6A_%_NpB)cMXJe_4;v zfL>32gXWCWI-;cdzYA7Qp-wpa=gnj-%{YAep}I`ogwUdWeSVKU;ak%0B!55={}oy5 zo3L5|^boi{Ol}uPO@1bF=3jPM93Nz$?eaNEkO58Q=zx^uSqdz zy$9?BES-5CUGdhnsDm3K6z~pP5M~)~68@wz%j$j5yDUd|hmPm8)A2dpt zvTM=iN=!7$U$P-fF*41-8X8e$Sr9ai-Jqt={sO_H6^ikcY&cF@wR#w!@Sy2T++vY# z)QO(13OG!(vqDL-TGeM3e$C``aHUu4h&Rf|fPKGedNibe z$#3Go0#{}1?PLH{gL-R6PZ*gFT$0mt)d)AW(Us{AkF;>%52LDq7+hNCsio;PKBdJW zPM7Ec0fZ)cy5_2Y&Qux}l-!7{KVMLpG}n45=Qu{J6c=W7-2$s4+?QHIZ?oRY|1v0e za!|%KNZAxz0If35$lj*F-Zh&zWF3p09z8=5*)$ID9y@f?*S!U!#{~^A6lFZ62_a{V z8$dH9`-8=tUsqB#_Q+l5Egb|{GGoGxP<9L)3<}{v>WEHJI9L=ARDWq6^ovzHY0!`f$XZJQl9NDVY z1;D?K=bT5Hiyt7$DlENCs;vAV+zTRG@^`~67TGBy^aVynnt7N&AjsAsb!N$W6SJ}0 zk9){>6r8u81{Gh!Z2dduG;D8L92Q+VgNa?ltXC2W$sZ$8$s|dK3rH7>ebalRXQXWw5oJC2!YKdX zuHlRpawHUjnf?CjVjL{bF!60ABq?ldNoihV9F`0q!v;-(2V{j$O;1zLO8hS3qf>BF z8HW}MG)EN1OJ#+WJ+?u^kyT+em9{iQS7U_-MkK2z?^4jxNy5r#vi26%PWD2V`ILqy zmZqA6{E8O(#?{7&^{>AbAch7z$OEXUy=#&Zh`oMhULnE`bdV>P;D3-4{D)tKx4IDl z{%M9pT79bUKa=4DvwvDBr{pgI&)6y@eoAM5*Qd~!SfGym(aZ&uN*HmclPpMX<$$1@ zC8bx%wh^w9h1NM0g`=;MX)z?xEcXId@1&=7NmL9RIwLqNg|Mmk!py`hNi~M0izIAV zR%eP>c54H(R?2A&lC$)4it_c0Wm6IWS=K2#+0_o&)}T0AU}zN#qMpJ#=pxE0wn|D9 z%xnZ^b5N)~AbM;9vTOIg-P&C_62*ijLSK2iBJp{QfLD`=l(UY;)>18CZ7=NGz@ux8>Q*()e;Zg7xxf z>R4zMi;_Z{C}>KDq~rFiYKNpO!EBb4b$2M-`hQkHMO1V6vums@axrpXOh_e0jv`4c z1CgY+NZBuv>u;g6PK#wM0nL9nzIugX?8tiHpLJVQwA+-stWf7^RV(OPQx}u0a$_pU z@sS3H@^>t%hlkF(FH*8sDWu#0iAB;t>mG};R_jDkTi3x2NLi3$C|$sc3rAH3TUWlM z+9vI{XVJNa4N@kD4pE+#PSmt&f~?Jgo3D~-m~ZJW`RDSjL_jqml!BN@;e_I(Jb}XE zw@F!UHkGL4!PXz7bw5DMkL)cV`V#0<7`JQYK@*kT`yv`jaqRb{a_`Msg{yCUyE>wfX~J)s)Z($j z`W_9_AHxaoOl;Y}3_7T>c)cYieit@4d~dRmRgOrC-$A_LwauRLKS-Qm{RfG^qdaU( zC=!W4buJCw2)pscJ?vU{Fll@B`zDM)EHbjJx>h>#A z838qk6 zj(oEb#>QJ-1%SGAlRbTUd&2vMizk0vrrme#!EcJ1_u*N!TzjJ z5>rM?nAE>JW|7SOuioKInDqFwncOLAzdVi7$y*!SLoB;>kIm(6uqlgXr?i(V(M68S z*aL(TQ3PZRGSQ?AV&Me%8R==~ov~$@j@Bt4sQax(XKk4-dkrctSPrg7aF55f{)2PM z2{S+%!P$T7MCyz^Z%QVNAt|6ET1(816$9g3P#O}b%waFyXb!Ts(p@aM_22UFwE2lB z80e0KxLH_VB(~|_8S0J%0z(}T7|!5BT2y+L7@tnzTcgw372H~1L~z+4-H2bJrT<{7 zPb|b_KDsSc2DQ4HsSAR!Qzef>x^`ZPr)F5`YAy_Ix1_fG|;P zCGJc~uvpwBUJjiY()QM2nsY=Km3%jb+5#xY$I?|sx8BkC<*#98Ehju9munCT9ef~%486x#LtK* z=~YRDfuo4bG_in8v|wQTJqWzyO(UKhL_k$7W$b}684M5_UT>?$CSb9CL13!mPM00j zjlfBjnE4l!#Z$&jpvF2=x{_ztA3(ML(vuX~AW;V;DrsHGh$T!o>1k=n$Chn!3-Lm8 zibYDY^{sdsRnTvAWmF?zERxwuK_g(pft3NU(#mv23h&Q2_-SH+|A8nCBZP=#IUCZ= zh6bBHjmA_GC`G|2s4!ob4Zp5auTCmz#e~3SGcL`7!y*GsI)O|ej2*|Q%Z$9kvOL|G zlg(lX8=CLI(GRc&*nn($#^@jqM3m`bv;Pb!m9d+WW?Dc6m3GP`+*WBF0iat7SZlU` zKtvPc>sO4GH!rOV0X~I`DWd6XXdVX(WH3VoHk~2fY+&k156HX|-RObxjsqk+L9Zq2 z<^><5X~)$sHMqp7)uv%dv%RD0U~)DQofp-(Ou(~t4jZy5I*`|}vVInFkcha1s?IMC zatB<_k^gh$DC)pgHvnYYUI&Mbh)(BAe)Q+49`fs!d)e~0R~KEQ4uVHzULuQ7(J(pQ z$DU<(UXZTmBR_h~tD2XgN|V{B=hrk_bt@hH?{6W%U!in8H@>1ht99S~cwFwUN-u+a z^BdG3)P(hRs!-j6pz)nIzmkoAsq1G7wse7AVqHlCck($F1wi6(XmE)ZR>}B&4ddDz zx@=C&HY60SbG{B+KXn)0c`ed3!VyL)mN=X_jY}FVJsR=kbzN{0YphaOt!vcc4!?wK z?W8xWq}@@hBvRy9gQ(Q_`COSSSX7VL!^&eX-V|j*jeQ#b$ahN(ovlv@QOELULlk5L z7{2T8X`EasfdA-g;k&Y$2RUTUy80GKjMxxwM1BT52oLt#wh|V8ez@iFhz?Pm!ERb}_GTEIjrqaKNAD?1{ zq_CQ4)EL94TJJ`e=uZ)xV#zcGWDXEeI3D*RJAdh0sG(J++%m~y1APXo8M2J!Q;3pP z4NEpTO5TUo%xG?q+S{cTtWN+@n`A&L>BVOj0WYj+l)*AGHi6)g3KBkd%p3&=ktO(! zmHNK|=y1YV)KcyhUk{M)zu<86@r3E_-i6_RM?A=oeGUfwPQ@)OXc{Nmiu^Q1_6ym{ z3S}P#Hqjo5770fm7j(9&HUtvHF^8eG*AIfcGG~!;4mK<`jR&>~bX)P~)wK77jQL4^ z3OZp#4i|~5uxQeCKA6Bj0j>h9df7|^&)lDYr=-;ko7}8TLn4_gW~8!Q*}r0$RSLfJ z#^ZQJB-XwTGz;SxsrL4b!qk^)#{>2*31HMt*^So)A75~;6z@AHZxD;UdWpGEuG&BE z;cW>67~el@yfzvP`-UUNA6HQ}b{vd)KU`nY^O^&0?(ZXnh&z}+NC*7pNyaZ?Cz!bb zPuPO~%mcpyqpv5t9*XaAIPQ4{@CTlGJ}-~PcJBFv4uxdggbo0JB+2XWtM-Nuhgar? z_RrwYk7fl}6UA{yJfytO_5Pi}hnWhK*XvQo%MK-!r|gg=krPPEM8;1n;T$Sq(>Iba z@`opxxWJcZnf|hbzE{_gr}Om3{W%)IiHUu3iSx+i-o8b#4D=^a6aV7z7s_z<81@8G z`DNC>m&A7Hz-KL#_`nE!x%aod8kEoDiH?Syfw$|CnV%>mJO19Ew-2vZM*V(wk2k0L zk$)4Fo{6tXn4$=upEeyr!h`GD`k!47geL)J9GKS6jE5K#IS7)Ur>EY5VJb z9tHLMt8>@1w$1xFMfL7d_SlWQfg#Ly^sVPzCnwfd zPHMXt4s&zKRG*ZGFe$39C+#2h@3NMs90qqw5(tEXllJd^AMk<6>4N?M@9CDuqcOb? zy}sHqsz$>f{nK)o)TOPi)A;3fKX$fnU861Cza{0s{N$cQq(PEqj$h}u3m|CV3wt92 z%VIEig!tRyuV4VgQq-60gs1|lo_J~5gqlM6)0%VLJp_!tB)p`r&KgovGnX=%CRoQ*FgsN@vZ8?hYF~~tPE@1hW z2QXC5>lNYP=MPFBTV^KUvAU0_B2EPYXP9ol31O`By0UHBvcw!X;Dq}HMZcF%KGk{7 zYFtvZFL@P-=E5rzc}Iq{)W?0{x#)z*{*P3N6}A{%@v!RsLqKs!txy z*3gKeKEKQor1$x<0Cp4O{PDB9L*;RmAaT_F9I8APdpzdJ`Q(tF?F_eLobFBj{^{z} zW`A=NcX%o>xlN1wXuh}AaXHp}w}ET^#JnssLM6jm7=z_rx;Aj|q& zQNZ&1Y!-A<0T}HOkoeY^@eKf%&}M0!Ync* z1D~4fvBO!_!l=>P%q5&~i6|8RlXcmZD@L=JuX@66VN3uEUuA|(CTOI+k!tO@E$Q>> zHb$x7wR0Y)1QJ$eT4j{EY9J8 zOT@SqnaWXtbjJu?At4*B8x;L=D}GH!*0m$DEVMa8#9@|Ax9w^4#VsHolY3tBlg}15j3#X4}p1hTnA?HLk`eLCVf|!&Iy)skM2Re$-8VuY{U%F z3Ey~!SN>l3RiD+nejsq_&yPZM4&&$g2YDmXs8$=qjW;zne7HQmZDgIaNYg6| zo}G~g&X9zqDc8of4yV(q2iBAb0(Gz+WyTxZW9lR z7uDy}{#R#>v-`!cySlN={G)ScD@76=9Xml@qH9AkxO)N8!VEAQV<4I3-j2HpZT0vD zWi(ut9s6m`wg5|EhJ}q_!i#CEoicw7rhEOiX`FTN*S;VAemq6~?k3nA5mPwpwA(qd zbb(LjDZ<9%dHbmLBqSY$y_l4s^TvP!sr_ggw0Xgn(c9P1CU>@^SGAA&@If@{Szfl= zkT9vsY7yb0we|q%5>K6f4I;IS?*n>xR%p!mK2Xo*$&M zELh+DQ5D0!v!q%B?H-=bB04rpc+*@s_v|rId6L)7mF9|f(K@Ev0-OE!!C4bYW;sDv zDn0Re#Z77pv&={Q4rMP5&Mo4JifTfq@8csMIIYUoF-bZb4}Y@Q+Qs9Kf57cq%yO?V zMwWn5_!Ngto(;088t@NM+WyVsaY$U+*d{}n`gurhNLJ3mfKp(YYG!(39MY%R{`2s- zTm5JBquuFUzOI+u1>2_BhUJu2t*Ns!#YY~^C*G=Yo>JSUuPv^@KAN`<8RdG6=#cwv zmn)(xx+aM48CDrr?8D=E}GKAl}tK! zLdW6bkAVUS5?78#m}&tUwv?tzl^=TT^~qFU zwhT~-3gW*DV7_;(#u7%75uEmkICwTvkOwxli<(QC{^jqPjM$ej6v@S$Ze5yE)^ze) zzhA`$IT|Qf#a|G7_v_tV^u+c|{R^~L&Q?G6JZvYKMepE+EnZ5vborY8&@LqBJ<2FsG~DTscL`n$0$ydS&bFe1QJ%}w|u!h4k)kBB%d zRS#Ce#mDz2^`;Xct#h}B93eEZSnk60fDN3Vt;7x))M|LFXD{xyy-ME2N-OO^tk~@_ zDK=i(+un5Y8K5(ZaSm!zyyF*RiJa1s^V2a@yv@#q=-F+(Cekl_`@Vf8r!GV5WTno7 zHQ~XCBU6Ey^cHDSMOKB5WHxGHBXFq-SETnFV0bYwM z$n9walJ^hx;VtV2zO8CQ0cuOc-|~?INxpaMsTlc(IzsM@H5{%VJw;LX84c0=%Vs+k ziICy&dqlC&d0|K*G%(WJo~b&|aMe$$TO$TO1hnM~OvXnn{Bb zdtAeB{;*_3o}dDn%Pz4sS%LznI@1d={ni8(tc)TWz>jdDR66HB=*qu?KV_3ZySk9< zN#il>m9H_G=1Md^qH#IVW! zUjLI2*=h)pH}EoyCfMNt`-u4-BKgE#SB%tjsl*4G{L|J1mWr$~wg949y1C0>yfVaB zbkQwk(`)2A?n=WJ^2_VPKOkR!QMu#BW^3^gcE z?;G(ra0=IdeX^(+b$f0sM4%ERe?B~w@%0q|Woeo^B*pgO4DkSEshA}EFzH>$wWIxO z@y!;=`CBXk9L>icr^utMkk>sMD?3P{H=A%wfB4|hR{0x$d(xrRjX}%3^)@YBNBMF_ zV!KbUSnBDXMkoKEmHidnmiNS&U;)H{>_nEFZ+f4vvzA~SRZQ_JJcmL%p@Zpp|F3A^IkADKRPj_{q@zy+BqO-AU6>8z58 zRZo2qSwVrrC90{D$cypp>tO8VM}0|4do%j6Xu{Q>vE*stO7Q|ZhQ*NU0GMH9#t43e z!yM^UfoE9G!17XxoC!~ae|^>{UQ2ay8reKGX#-W9ImS|J@)PdV{Bc8g4W1QaSzVQU)jtT$4X`A7(>84{w@UQ7(D+mfOLxARbfwo8!sJz}~l| ztIUL$`%ghLf#eMyWm$LO?c_!yJr#5fccqeYfraCY9ZK-5THYq21tF2lwJZzm)t1al zA?lt)Mh!V5#}-Rw!hS@MZ8D+v2sDYQ*IO>!ps&nyaSK8SO9_Y3AXLzy?l5iE@t9Qa zNwWtwF}TFP-V>I+BG%oYAiZB zhKD8ca;`sI!_cYKn&(W)bUaOz3|D87ES#R6dYIZjk~2M%>D3=lfThnUyF&?s)uHxo zhL(5fgAaR}MfIn2%Ts_l>AM;Qln%i=-0tj+4$8R2gOY!7p}0XMP!a~Pl?tZMdxE(^ zE>M{T{`CH~e=ihIyheOeo58FXZV>w}JK*X}rbdDKgl@TemY4eP^2qYIa0*A}j{Hi(Skfma%Y9^(PqI^>iGyDd?E`n2O_$hR z{rMp8s~10<3_I22mOh+ttL5qu-{$I&pxqt5%^P%Hmn~E#3^GdJ`;d(nNkwlVXtwc^ z&Y3T@#F3$v6IR8x*!fngmEGhwZOYXSStDNwXB8V!Ue|Rw3j`vfYYhplrWMzS=5=^g zILfQ1e)!lLtosXt@C<8g_PlLoenerUQuX+A%slIBgnNpioPYZjFd5GDgOM?VBi>Zw z-aMmR%EQz+FT+o;jlbHZ>yT@z5e95l@z#fDAjR?v(n&%Gi&1YN86n(O#$Nr`&!TcYd+@Lwj3Ag7HHWmu&z<;aD(rvB@b zt-Z2L<|QAD1j}n=mvgl_^yCC=%?giuiUvs8Ubvr!UyB6GrpiUmop{}O4zkQ+ygv~k zT-hV*VQqS#rSvIILkKyuV$&QSmTEtGOla5FUh2TpUx@F0YR&|G%=o7A&Y+U$dyv(U zoo>)FA#SN4E-0|9ny*lgUv~0pDw27k-KwzyomMbkwY;qewmS3|AqS}*x4h$wC5}46 z_z2}{)lpT+>nJSOJY!{70&ExEsW3R{vunqW%OE@PwnYsiiW9+M3mV@MQ$lBz%jmC= z8meBXkQrV7KRag-%d`_mLE;-#edY5LMG0;0cK(psEFefYH`GdbuhX$vJP||XM7XRz zh-5Bj4MA&6ytTp{tO699O)hvcC0%TArWyETD?=K+Rmyhe){Mq1Zl7o<&)jFVUJ(lR zfl6gBG)}dn>(v}$3!&VPjUVLno^3TcWh$W|o8uW#V<;RE8 zjog})NuX3VWuGXHy1T-TmLAu*->{c5pXBkmU&)EZ)BV&{P_k!<7csE|7e$C3W3CTDMb7e?N<}cnTyODmLnHjmg zNLvR_;?tjmmC^?!uQ1s_Hh!|WE*30GVNFfsQlT3fi z@k*Ob+^xQoF1D(`xPGUimX0Q28RLa22NN+5b@bDP++?INb%{9ViTitO^K<&)(Bk1x z-Aw%YEp{69Q>r++$W$Won2WGT$(WyMl=1?=7%Wcx38tgrhJH!^a#! zf_9xyl+VTZ{nxrig573JO(a>cCnQ{7K5J>$mJi(26sZ+*T86cf6FIYq8Vq$G3z?xg z+2Nz|`*GpW<#IesW~U;5IT6*&i}}g5hcZVwBLESj&9`|-qJcvCuI7f68i&UIWD9Gh zvnIQN?0&H?+)HFzisU!?yvNaKGSruD5L&iZ2zVaacb0%uae=Qm8_Y9okOMUCbaxQx zdKhuwX68Q$)*7Mc+!Ei(rQ3{9yUR}YsJ%}N_gB;T<$evhE*-uz-*U^*dNH`n_NlZW zHWh*@&ZfY&rB+^)!(qg~%&oSa;iops%X@lqG%okjp$JEBd0M#^JNW6?%*oc0S`fy{ z<1C7c@uOU1)DhqKrPYd*RQmUZ(8LN8smd1RfzuDP2NA^*6*r{&@T^`PMXczi1A`oQ zXnNPr*RO}f5FB@buUDqYiDBzO`$zm&K|!T|@(7FIc}Sx_Ul=NmNY~RNJ{R+%Zr(kj z&!_c=rG=X|>CO3cu?;*X*L`s2;Q|Gjwa@2qlk~QDUR4>?96?HE>>nQI<}P(k277)N zyB1Qm%u4kN|1i0c4saVBzaYKueNpf*GE8rM5n zs_WAfBoVQ9UXMb#6%|tr$0O_b$72V!m7Yqb97d_h^@`-@?6i-qzkeotTrvff&R#gJ z!^}PtHc+YL+3*}N^;^j7u8IVHTT_;VJ%)T<3XC2KIDq6hKU%#0#QSs!%)_N!v@3&6 zW7MOBoR<3!xT_86;XXQFoRdy-8RASIU;U8Xh8b$iuYB^TuE>SHd-xf?uMxk0E+jXq znOXh7799HHWupBeV-n@HPoi1bMrlzDdc=8704mKM(8h1ygsjz|%1BMR%-Czsmm zI-?R!qr_!d*)RD?uUk0yC2ujNPE0rx2SdWpJRdTDH@e3 z+R>Rh2VPf*BZ*079%Vu$6YOq~VdhOml}IC6juqHS+FahJBb>HWsfWAkY*6h(r*0A> z9s6z)1Lj&Ellb{T7OVs)2Zt$xWC^pdBUWJkaUcELnfHT2a?0jUcO3MlY%sh9Tpe}0 z`1OMF4mO)thQBCMvRmb<=vEONZg}fep~AH9U((i95(-!>bcj|{ z58bmB0qT~yKfidD&R+%T6WWx{k7xf(((;0Jk{*_=j=X;Y3C-A^py+!z(OMAX$|Ea8 zzOF5#*6^F>XWqD}BSZdHs7fZD9Iag4^pDH&wM<#|!Q;F>o1W)ED4!en<}~XnF&UBhB$ltwE(aGgo<^W%9C@Gz`o!@{gtzK`iPM-x5am%&RLUw+c5e(#$f=>|Ym1t^MY(@!C^M?dOZd6z454UxSzTzwmJ6op=u~WUumtXF(%hQz z;i=FY@unWGWmi4IIQw+M+kG9L$CUHKSX8HI1_9e>Y;ASSQ?XEymu6~%JgOFM70=>LX%lkPB zt1~$N{REd3rjaL&gr=*y86$poJC{2AzCqv*w&km7w5=A4IN2(DDzAKqik_fS6alLr z56I@wjDRN{{&LBOHCqnnhqkwO>7oTu=<^}(m^{B^cz=AL4kaSuQ#-6Pj+2Z`BR2aD zq|8O0OvspGg#P(wO`a?Mk%ZTKz5cNo8n|(N*0sR}27Edm6Ul8sNqX#os5QDpBmA2_ zl@NUXoMxFPZ<()@f$F9qq@RRU*hdXw($d0I zI)rWs!nt4i7q6&w#8y}Thmz8Fe>GT4PWJytO({_HshUFz!O0Gkj($Y_FYuL<^PhT9 zc6PS^tsaz!*Y$5bXf(I4admZ-2=Nx&*ku=bd&6;Ri~F6}0%SVDXYUWYsyT^&Y(Xb4 zX@1HOnH8+&rk2A~gA?`TjK{lT5W|9^g@Ma2L$~Rt&MPSY)`JED^`PNz^`JfeZR>CK zpzF8Mb!Q!?$Bz!Quj@Uxbt{`yqyumDpn1ke{)bVz0;dptXsZ->pxm zgOlOw&V2dGuBXlfF#4-TaqAazPOSUuQ@JPxUttSw7cqaV%4v>H}E@bZF2_+=G6X*+lamGxC#Uvya}!t#rtZDh0rNq92awMorOAKYgY^=3>F7h z?%M=pvsYtL!q*Som-0;)oS6x*9LHLWk<(H3$5I_~Rx9hjbfWXg#E?UXr!Ulgh86c3 zjc{$wMaQ;&tZ;B%c5EY=X)$T`2xv{-^9J^t^IRgGQ0ioM3bF1c3d4!V!2^9Z(0Wk$ zc{(&5wlRe<-Dc}`s$L!~Cy?to1b%UWHRF6*Dst^m!tB`mlbEfMyWxwggV2)iwd@tl zjwq=201K9oWmS&wawVY^AY5f_ylj7$bmA0S>(v9tSa2YBIPK-Pkr2s3Wve$3h~rg* z9nciOXIbGB0JbS4m7zR11OYXnsv<*>dhvD+aO-BqeWj2B{VU%FSyh}uw2LK_OzJxq z3Xx@*AlQ6IH}Qv7oDaQ(x|tTk8hEa06$2ipxkgpH^dA&{5Y`dH{L-H~Gbhs7aqyw+ zU-^jXk%M1jptpbOj2CPFxDNde`h5i5hV!yAzuWsx^*d$~-a!~&O_{%kN=hn(B zG=7G@!p20#=`2ysIs@k6rSxzGA2xUY>Pm~pM%?1G`ep<+H_bopBOboud@IV zKb4A)`*z4WF>0iTq(nmV)(qpl=7P5kNH~6`zjtL@_y^AWZoGHRo;KWw7HPKVL0DoO zISHKlEy*bv>0vp3Im>;pSaN?uhzsM&Sh!&mKFOoQRrE-{mf2wsmV~ZSo zb~|11&B>iIAI!W*<3_Aak{4$|ekXujtWCm#p@&RKz_RKAdpd7^(kKx^-p-uL!0stN z@0ZTWt>|x7I$RbhY zI@)K9z>dr(f#cPIeTfvGv9tr7k_p1>LyI?9f|$`LBo9 zN!B2tzYU6$V|57llx=pVPVmgIC;EIU6Pe`^e0lo-ZB2KjR`Z^g2i=0-%0OHKn@7EsPp zJ7|96Erd2nxzNA`T)Q(>8^dgX9&^u0Hrk4lfBaGWK^{&}ZWPvyKQ>h`O8g@$qh#+86rUC&n18`^{mUQ)H z8U3`;?vDz9xT;ZAG%Zan3cL~UHUYLt17N07k6JUYD-=TmM1NKMe}L^mpChBB1I!8E zP*xSjf+F-VfE;xIY^SdwMQWtXZ#vJv^c=5p2I#NmQ_%K@<4ckC0o0i-Gyw6nas8D! zOLl-@16-m16XMEf3}`;m!~Zm0>U@Ze0SG-i|By;me~loGMYlgm**dx=`HyY1*uaRT zJBpjXnR$}*ab|S2uw?**`V|%gXqzpRO6t>W{|K&0XEzsW763ro{~t8(FTXg$>>LT0 zhyM-Q#i9gHZ)EyL6%`t+%_FGVCCC@lOj`cmqFvb=%IbnkT|$&4xnBv}{*Q6nD5LG$ zXR$nHtj})>sDB9{1x>D%ijYYFeZ2zE*Fc#lX~n+?Egc9uCi!) zj3n0A3Q+UHUt*MCh7Jx9jj?oY)CWM?Sja7JXd>if*S(*{iWNzhx;Pdx+Q@Yy!hZnQ zHAfAuxi>R0Vz3rdXH5&RU@GfTGl&4vS5bW$$YuaE`Zt@U#{K_CH$nfZn{S~Cn5zG; zg6nf3;G4<~{g=7fW)Jkv1r_im*$&-oqQd?mH*sP+ZLKtx{^C$TqyKW3Lxk7>3MvJ# zrrZByM=1~^Sh``9V^r8cX*srYy!0?onw-@}CGWai22|t%bnDzVAjW{C2$;a((o%hG z*Ch~YTt&i$|45s`6#(HmDU@M3I~J)pt@>Xv1cV(^UloSXx&RUngFoD#eVz-880 zEC6P>{e~?vxP@+?IWYi+CoxcS4ZzD40P+0>C&wZ9oo*!-p{v^fcxpNTewqMmu7}{i z(&&!5<=TP}0qhAPDAh_5LdvXdTTP{kszoME5qMzOh3b1|eCT1HZGFJO#Nw6Ybisf% zsoYAjSag8OMlP+{rboo|ztkpCH6W7$G4m-3Ml5QFn?h-tY&ZdcHV3}^3vKd#$@4P7 z5uyMXXts9@CvK9yWaL`?;|{>3m@G*T((pZ1`kRv8+_}Fg>Ay0P`&ukO8pClQ$wy$j z{J-QRu1a^cwu|4`LKrCHZ%y(Kx_#=z)FFHzoPqKjibA_#5@B-L4D%C%Dh)pZ=)7IijmT^8ksa%4N-AeeO>c_GSRL*o9bR z7qNp7#*QF~*NVkbSO8oT&0O&x&JM_R04ol4_#UYD2a-RQ6eYr#nn|67H&7Q}ssbb^ zNqpD0mI2OMs*flh3;91N_)zKG?RE=iQC|>|eq{2+40>jsZV(@-`KNC_ge~I03@EGX zT(adIKiFRM{p4pgi32De=Bz7uwn;GNn!opNF1ny2hBa*rpXOo21Hke(OuDGySP}; z57&G+jX`)MN@qLGD@Gp#j;RX*)-TS2|I^if^U~k6B+PJ{B;2{U zZUQ5rN*@JNY0obM$vcT1@3jI;98ai^4WPuXBl4*F?Z}RPTnOpkNn#U#69>i=J8IPn zm?HxLEn4<(Dg`V&X}q-JUPC{?AqPpC*uX|`g!TRxEBzl;THaw&9M?w6Lo)nhi8WDt zhuKh*Sk5zQj2o6!#C4hw0n@{IT%>b+Sc;$UV5dwlHz_LjE!!JQ4%pa5L&feyf@_-> zd<>_Y@s6QmLIhxu+I5(3*_Z+z1802&oosfb0CZ+Z~;O4uLrF5 zCQ8%7@|_jES=PXpqwi}Xmm>E@I)i{vik~SV0!EKs7hJjG+?GS*^-ze2Z||KF|Nk0O z|Iwn~4CsF5+P~jEpdi9y-@yB8ELpK665K^ehrCV2`UvtFf9FJ80I^1+#)0{DN_%IS z^+O*>fxuj+4@?ceIMlf){!z+705}}N0ie#_71ok;ZwmF>OotZ+q@L5AJdM9R_FNNsZ$|EK5wq*Kmqr4Q*#sAf%C8BNOfw}o@w8)n$ ztnpIwv;bm}eHYa72EhLhEnVHAIvw$!aH6+c1pHqzV0!ysVQH+^-&p@UEggsOD0tNd zj35kh-``P)DnbthLVFHaftBX`N0&Btn4DP_KrNWN_3ohgslHbQ9Ra!`87013`@oH{ zTKv&zn;7QOR3qRBO67X^afe1FcgnP+9oYT@C*E5?mdu(e;<*K3ItM2hYYHJ&A>xEr zaAdZ)0ggbv_=B8tG>q7%6aIJ_Ac+oBip~`2@n;o~I|j?3n(@FTc#w?SvEyCP$%{#v z(;sI?^mEd>uL8y%Cn$o03P3Aon293QJ*^{lz>{sKOJ|;NqRCU4jwKkBCaepSTmeGS zO#K(qriW zi?FyQh)^puqFI0&7Hy=;5=AhERYSK=PG$Fl$?$ZRQy?c^I;9_EqZ#sVrYpMy5o{`n ztSx@?!TU;zIPI7UtW+?K8CMS+M%^%VfJyb-LfLF%El_hxP=xX>S zUr9q=2$f-V!^Kp?7Xv&M>EYDV`908njC@hah%~i?Ah2Sl8>d40&{2$lZ^{-WPk$gr z9o66q%L?7)>8wIokRaA$z@Rh?=$pVNE7B*{i1Prt0oUY$L)t z4ut;nUEk(D&1k|Em`yqGR&x;tgXkn^D$SF2)ne~0hN00Mur^iKh@qoXV0Ti4dE_vq zxsgkzVW>0(oY#~x(}*2zZ9Bm7IWm&X^~YIa0|kM;PRp+Up_sa z2k6>621B&CToNgYHpBbdwK0n#Q}++xI;6p19Kiqf&PH)z{m8a>n2YvLj=!ef=PGXV zp`ezy6A?ZCVt-e4z?qyUElM1$v3*Y)E|1BP1q?ZVTv3B^DLlS(X*h@8btTtOb_L*4 zfBRKY;%-FhYD|48QN@C6N${Ozrm(m8Z$dYZgKf`-XxhJ=mc7o7-iJ*h518D zDgp)F=uI{dGH+esS&vF*qj$zjCy{SC2ru*5kffnTfzsd6LPk{jAQaRu#sS}C2$eZF zElIDfIBN(?x63WO-PF@EJ8yE~P^{ zdtWv;h~x0GuN(a|Rz`y0;-BkArH%hlAipUf|RR_cU*@>FCMPlkKRZk?MXbf^uHz@UR8Po8LVU)XCRBks43!nERGzp zpRt-*b2L$}dWslP-)&`+^MMTPC^lE)1!fEYxyCS82VMa`ouv-^reV+t4<7x3Ovtb5 zTlCSIP)!xb=50z28Ts-|0L*_bf+-XZB`|fUsTvA#>6B1sI1Ex8V5y)&bFxt&wK2e8 z@n8%;tQok+;xIr{DJD%H?Hafvm(EDZ8Bi8A4ihM8G`7*ECK{48hN&G6Ll@afYT&5- zGv_DXQap02!;zz2dZtEH0QX#3(uk?*OMiPKUrLJ|Q39UeNTUHPJb;#;_t^B2$BKYd zzc~|Z!vpFvkD&44x3YV&Y2c34GI}4 zdnUk1Da`pkco6~os0c+pk96y_`+UPto^m}}QjVeeLze7V!eW|3Hv@|~Sh46z!wmS% ziXgdmSG>mr!=POF7^^3{!dz;y;5tlxwZ8C~@Dy~)h>xC1W6s5%d5rM^o=H56{V)iN zoYH*8Jq8EJj3Ht=QTG@rH=ohGkEoDFi%fylAA>Yjiqrrb10^;vGI#6ZrE^ya)SbTe z8k0Lh6gl@0*gL%`(3p~^-z72GS-fYDeE4Fd*G@0$1xUx*5dG_MzAHe$)DW{QCGGYq zfM5)~_v-MQ;Z0Cf+7-?nKdRy9AG$?5%JQG%S!FKXb6!yFp@NxwR%&DO67nA@7|VZW z4^#bAx-CTJtkKzu1~*TEAd1Os3K5xrSLWObhfWRYFDe8mE9` z`Z>Z>bs!1`2AnNQ43pu9QTliDX)9GB5Kpuw%=-osHa><0Jv_8+ zNfiKXA^cBU?WC+Q7YsFOiFx$bM}bwCYG_$})1u^Pz53Z~CMbSj^ososIUev$+NEss zkI26v<%;^r-ybYIs!~&g(8%{=VUYi5fydaZM`Y7+FP^%FYtk-P1sy$wEe27s_tGKF zMMQ{WQWDTXiK`!YV6GaNpvZ_zLM7k~Sp02qTedEnN6THl@WaOYP%v@cVs>ONq4J!F@~weDr+Zs$KAB4iy&Cl>n3xH;8%r;9!ewp_xRlKsC#wctc325 z4LYc>T zfpR)_&KkqD;Sf7^E_|0d13R7<(+_(6p3+}lf32S4vKpCwS?PXqd0fBU+j6sR9XcIX z$#*g`z8byV(*iB;_4p^`XFr7p`du~oLoSxoZ709_l;U>H8X5n2JRN&&dNyKh1&TTY zmqB>~MB@RU5+Y-gOb0*?KOK7Rj=ER7yK%iAPoM4l$8*TdA7w61+`qx&m!I}FjITBP ziK5#2xv_Q#3o_!bCoEh?W8Ua=75v0$|IUyL($HnrK*jHDTKk1YS#(uE;zllJRU}R* z&ryoTZSD62tV8y*W6w|2)%3dK&+b=ei07ck%U2whI!yO$_*BLW1ZCKDkEK&otDN{t z^m7kcKG~mQOWE7WgPzWtE9)lT$Z}jXva?pF(fWATQ?gO2(L24&W*xGIKdKQigwOdQ z*tT4hCAQgjl1!F^+=Bu@>$&_f#Pn?(HlOP9p+7|YhVqA9Hq=C`DUM^a%e?Lz07RSFk->h?z>Czg+6C8p$ zz%#4g>pA#><4q``_Ynmfk8wwWhTTM_=CjANV=?4mPY(o95k%YJFsw3Lo-r)yw|TYH z?~WXo*y7>fV+1^9ej#bo&%ab!@dm*`N1&fC=cnmC=|(+1CSdGyF7=o}aE@&IQ#cU) z(Y>sFm3A5K_U&ywAjlbWh=-=9Pw;d~TnezPpR&?Dl|8E!?KhLm=p+4VdwA(1-kZ8;4*neX2@(=d zCXAr?cpVYfOkc*6kGM$s>xjE?uX92cK6`?%CIZYYhnxo5;32Lvy%G57*PUN&g9{V= zguvq|_38b@WYBqtD@1e5odGU?Kq_@-zny;n{<+cZ=Y8?A|Ka!fNWNj$%UE=49SMn} zh<`V}TNYcl3kMjhFaHQTVXa1aLh^hIMv=as%jyyILbpVzGN19%U#{qmfigD z8sVFdaBi^(tpOug<_q{Hyq!>d9=E~+Z)}O$z;h(b4USckIUuT(}Fmt7FlBwDi?+ONe*mb z{rl~`{gU4L`eWAcF>izm1#2qIG=$f4gl_g?+02Xe_`AihN@`&R5b#h^sK}-ZhqY56 zMFY*4HsSX5v;iu8@d^lDVcT%Tnfm>U;(pHK>HbN`iuB!pW&WJ)9TbUDk0~<}w)qSn zp_U44i8qs5E59b^V3ip29nNJ-#^{oU(lr;#b#Mon7os+Clv1Usm4<67 zF^<{vkBl@v)PPEB#Sr8cNQK1XbJll|Y6EkkuaBFLH9jW7QH~c87(beI=YN1S+gP_X zmVdAvN!mwpc&!JS>jVkvtHm{%yZG&L$bU9p_VQQM;!aB=gB~7Cg0|)@6KMLzPc|Yk z!Vzyi;;-aY8ytG{$>q_T7}ZAXVoj^DAXx0+kMZYnk5cmy2O(*ki4dfY^n5p#LI|xCu2U>fz|}bjb1KFUx}hGvL1kKxAFloz z#FxIEk2Bsd+DH^m9yDxU51pD^sI3IXqELl=bUb1y>mXJcx@|C7hg9o!^}6o8$tu^@ zlOVJ4y?+FxV_2$W#7hZ{_HQoDrSZN&aNsZrsYPIBS zw*o8AiIrCa?UwvJG`GkMQ&Ru)CD4NWk8XK$4L(YCO$^0tcfJ({vH4{D8D-2iwScM5 z44ldZdO`jvC64^S&@c1*YtIwq#r2CA8N9rWxMB9H(}Rp`&`z;bm~C7yI2QqICJud7oA>EWQfnVZ-DhlmXw@4 zFU6`7WxIWigPK%@mfRET_o7(Kw#_6lJTqSI3j#*zrv~%`l}mVWJhWe|@9ciAl}sam z8jS1{*Fo~ri(1+?LKYzTWcsiWudJcEH0hI*Ngb$ZZ_;vwRI=GQ?*Q!GprGFksk?{s zpTtLIwUuL^e8Cg1&Iam8zn$<2BtfP3ix%aU*k<2PAkg+1WNPg9GugpJVYNB|1WNbI zO<#8SPxsH1pw3T8*?bqkgAe^aspDJ2g+6r%?jVKf^S#r@e5bEyS4Ugp#JHwsFNfnD zuitwBKlgSUc`AMZ(~=vq`4e<$^f&`bX?V3g3rMo&bBf8`!Pfk<5!Nr$!-F7#8bn*T z^qH+FFI!@dX&$wsIz(l)BC5xm{cu13jKDrtk)JMKEx$UugDDG-u*1&`vGI!v3*7F@ zuz?=>PUD?6y5O?{#jEBBWDOd2kG5)d$Jjs4>3fNyN!2^D&}s zF(Bm$R7xp0CNuV0&QiPgS~X{iwB37Y%38Ghy0jX}%n`2=F8^ZmK;>0a=6=wehXV4s ze_f=19ZH&$zl>ptw+Iw@JjZn=3(q0f(~_CNxJ6sqgz8x&IqKdMZgAYmmQf+gX^=FDPCe#uc6T4u9n8H)!p$jbN# zufB~8J76Qvq}P2u&F5lN)NkA@yGHuH!G!LpoWWYZKK2%Pp7j>HLL0_-<7HTuQ@mjz z_(R8W*>jqx-RLTIh5b@`r@_X|&h70@KN@a1v+>F;DYesn&2vp>06%S9Sl${oLnSA# z-*@y4{{`wHezj2evDNa*?+1GzAEvrBA|HXg_-85~f&7jx{d&1AAD>604VfRS*qd%w zo{rnkT)^L3jhbWjw~<$#7Z=I9rz(HYlN)~N?X*Oe@0~WuCJ*Hb%Wnv~T}1i_#79UM z+%&@RFr!%%ILm8}tzye5Q}DUvhnuCe_LxUSS)n?eU8(GfUOJU{U0#8xNgp?HHz-2~ zARX*bHJy2JcuGAP?YyA_Q`U3C4ZPNlEvf57thaM1pc2%_!!jEBmE786f4Qe!eNbQB z)nUNmYMJ*xZ_N=pO7%vBG0>CqC5PG3ANn;@W^O)Hh0e^^Ur6YDF2SAH8Xyq0 z5QXB$A@MxTtUegZj9vojiFslyjc(|y&$lK`G>OLOIrQY~qDe)K+~Lk*6EnSXa)^sL zCKfz_xWGa*(#%qyj`5Wt*NJt0O`k8x6XI}^&<*$@A<8UerEp~RJgsDSHS_GNu0lq4 zm@cOAu;2@0BG)BuGZpa-CGmmBf@_9$!%n)o>Q7OH#OjEuK zOxtw878fyymeaS_JD3)Z%OFAwiYAx~N{7!IDqH|6?=)ttg3dmS%u)y#LE@>i$kdaHlGEk5yU&=u0!h2bBOA#fF1pOCcI8!xX^{mUR zPIph3(y>zI2}s$B5656|V6=UKg2}T;eh$RONsS1j;B@&7AHyM6UVJl8q>xtpqAuAz zz_z#E5qgJ#Pa5CQ2E2SOZS*xI{^qkN^24;tyCpQJ1)gVkH}Kh`n_ysFAjc#b?X}G? z#BLUZ`7_G=9fyn*n5%ckeN{#fMw57OEyTfi^}gsYn|LJ`LSJ{UFE|xfOcSGf#+Kei`%Gv#Y%2csF>$ z`qdCaIZ=2%9!WgR`hJmua+9Z&q(e+qr+l3(TZTx)Y93`n5l-x&23FadKDP7^XqY4e zwD?+aRxH=gJ8tJz%jZkf|I{EZ%BeKQcw<5~(z_1}_iF`ynOt0j#5s2nZiX<&icG=u zD-rJ}!Q!M35U}mEE&W3`V@V&B+eNDa79TAP$2)yMz+G7M{Rz`DuH45U5j7st21Lqu z%^h-6W%;<5M7Xie^MUnvR>Q8n!Cl-s(8lxm_Gxy$({IwVjdfSbmV(?U+fS*%yjb_N zXT9HS9;dEO4*FC4KhKtFTRrZK-3J%7B(*n+s#;E2`!l~=C?W3Z*3g2iVGw;%IC3Hm z-al1D$w@hhPX6Y0Yph7<9odld>WmnsDBAW|Jo(VDYd5na{RhR%_&VPj7Utya0rcFI zT!-I@!LOp^XusbK;qQ1W6_QW&s0(>_aE-W{=SLEeI5&Gp_n?8GB$P|8A7((Jk&bX7 zqp4DO867VN-Fo@U=ZJn{Xx*s6W|Q(R!kn^t(^()_BO<w+^*c4Sn84)#?v9!% z&udM(H8nMTKoWjo%<&bi(j`%U0|;#ud)n2gM`@WXZ95Uul%id#xBuk4I;GoGW1xqG zZ)Mx+0f~SFcIh$&D^-TbO5$m9$#~U_{3@s^rkdI^l6S0t%fuJi94&J2WBMg!BGeGU z*1?=<*AfSvGr5t{BgRw|{i3;>>A22|xeuPTd{v6BTnFm8!HIU}gorq59%%i0N_J9h zxkZjY$L|PYVi(=dm4yy|Y^V-@6|(u_m>L4xi_g0;^*Z!PPALg zf3OtzWOclHd|wtrVdHh_UJ`SOHO7lAFM(;T)q6(0Z4pHeWnF7TRd&bgUM)%WlJ*Iq zWjq=_`QAK>#`JH9(KDd85v^`n53pvsVSwqI#WxPYqZbJ4FO#P;RH@ zpZ}}5uK=s6+4`qZx?4CXAV{4)hY+M20THD0P$JzRhZdx}1f@YiLX;Fyqy$M(x zk;eZ~Z+>g7VLy9jF%B_qf1;y)mWZ~t$SP{@$uL7) zOzC{_YGJ=6bIZQK;d08QKmzchp7OKn?`t8*wWo|sibgfub5`Fuw24C=LSWJLHY5d?sa~x94cC_#ReN*ef)ya?wwsY=fBMj$X^|(Inp?+3JA56UX5&l)*S51Mu`%*20h71%NgLTlS zEhPB@(@~7cT1#S)OU#u==U3a@-Ag3H$(uqy98RhM+3;vsjd_osKO9!8tA8jonk2H7 zH}V=Bd>|u73I0yYWIrzI9Q8@M;JuNo*`FJCRxZ3u{u(Bc zd#~m=tQqud{p)a>J2AtZt!6i(=_)LTK_Pf=i6f0{Hk@)%aBpc{S45%U-KOsYLt!F0 z4yZcYuqT61h>N(J84dHtcO$-yKDuNQ7o z{@rWTPE~++XikAf^yxt6OcnL;DeY4*Q+b&EA-c_o-uD5lzSst?afhK&n(SI% zTiOId$i4#8nw5b~x4XS#Wm3t7<&1Tb>rbMl=#oR5`@T$3E7DYWS=q2gp-UP(s{QOW z$V|fx7AY^3DWyHDoh_LrN8Reeg)^eoV>| z^?6csczNckczV$#QubH-!Ockvip>*hVWJY_0ndrA5Z~^#m%KUJ-R|GKwgxx6>~&n{ zS7%Mr?jJR+wi8nH2DW)%frDMGa1S^q8R7MkXk&BM9d9qcV1F&DhRtYyUe=*&(^5yo zz9u|-a#UQ0OKB`oW2fHCl>BBbay{owhC6W}ld!wrkxR+>w=iwnW>U}3{-o(Gg-jzie1s?XKk4D7P9&aEUb5Bk;_NGZRzoYE?W?593(bn%nTxBl9Ds*{XP;$>i5!8|^jCA zTU6A4va9wHUE$7G@aV^}_lay?X}o`cn?0K|mVUBs@k%045Z z2dlOiuhw&4NINm*oBxAtBh?R9Uo(cr4t@LLE=p}r^v>gtH_6`dH;Sht8YYVh9agHz zP%GB#e8y2BW;R;ry6-UhTCcSVN3MZd&>&@rew#5NjH6U}Gnjq09Y3Pw`hFE0^5gk2 z#Dq*?Nv&zhcvBo(C831w(a#(%fsS@4 ze?0-k;jF~r*zzd;BYK~Wz3`Zu*GJXE1}{9NN_D5V`M}9==Z>@8a1uTLDnk>iNh0HU zg-2 z>wI%lN!It^THJ<2k{a8j3Lu$tGb{Of?XB_)suLF+oX3_h!OGS?Hszayt)8aJnVI$W2MzA4bQ9?iNGjJDcdW*r5+=E5}V@ zIx_38yuC|LihNA&ZVr`TOW4(KUiy*6zN-6m<1t76roRdKjaXFi=$F!xyRAR^=q4Xu zjk$+kUP{>l);2O(zvnNmv)5&26IK~5nEO2EE3U<`1NB$8V|YwsRd(UiSn``KO>1o> zB5e#2)Pi^x7G`V|Uz-vc4qI|ykOPLme*1m}@~DAaqJ|)6mXP+zS*$b57h@ky@732W zZfGRrh{=8MQ7W}ZBo@`uCbwf|r|5wjPY}Uy*bkxs70C>~OBS*x&3EkQf`%DMTMp(z z=HoiKgdXoIHl)QfbXd7LCl=h{Y0p`U@%nU;hmgCZ+9iRv;jW}oVuBQpGEoeVnvlh` zoS{nyrjD)M=W|@J99C}x=>X2qi-`PU5$vOxkQB|2@1ZlBd(ijYPgjyj?aJLmWHO7V z%>c{Po#5RbO`zU!MBReqIGrdNG1_^q@h+}mb_0h1S{BGoCB zK_(PYwK6=%=|szouaL--3fbrb@~()LvZSR3C#M3<-v(ChwNf2CVLm*rZNqTrvWywd z=CY_1zbU~gXe4w6w{mO55SOxDN+o*Nm;b(i$oLIrDi7i`V*1=hZt}yR@#8>)TSys` znp;#)okiFt;0`g)hT3_a*C;g>byH+Jxup3f+2_LvyVgGrku%RTs78pVrrB%Z3D3Bo z>wQM_EZ7)_)O;1cVD5PzH>(akh>h&3OiZpa5_ZS+gMg#M$s?*b+LM&=^WSC_(3H&03gx(vJW=5nbdG;wBf9;lMZvP! zPG9}=lD+)*6Yz38#K42r26}gr|UO2F0FWw0rcsi0a^svR{7oPlHz8^f0G6ZH28PyfId-t#=Mc#aHY0jy=-t zcGTr}ldiVugdbLZ%9u^y?JVE}c2&iMwcQCM6U?wJalW0%kUVQ+8ZLulZ;f$-zoA0C z#LMR@AyCfioVKCUR8o*B26CmjpX$%eMvhd%t^3+Qz^?!xm7j+zq((}*CCPi3mQt7( zk6nPGSuol@q2~306;~hRAiWSR4)}pP1G!pk(T4gwZzMF*o#9*Bz&wSkh_aBe z#k6@)l;q_EF0n-mq_Wfk!{r-o>Z~VRtCp5T4D(%`b~%iakNx_nFeqkRbcgyv^l^@Z z6X=pNyzQyPceN?mr5Gl&d5bhh+Ri&z3X!}({*@M7hvLxw8XNPdn6T>M!lzv{d1P#= zu?%gpqrU8de4H^v;cqj1GCMxoBvC2FfvWoY&&le8?nd&&Lsn@nW>xfp)6X5!@GRTR zYe7X>xKB4(+3uh;MHTWw0FTm%A!`g*(flqVlvgD@eL5%|fE%*hQj1kspt_v)0neQ) zh&7rkKt~#<9bExB8aVC9kmQ}AK23ouT)CD^EyJ*_IkJ|{ES5-6tuQ7`T{J}(6eBMr zn3tys?4}9ol2*9nWSc{$fDdpC=>JW@Hc3TBk2j%wLlsO#YBk{eO-DFD$$SBGZs7eZCA}SmE(9b(Fz~@_9Uk1tM^_AScWfh2K z0fv97)gyvbOpLtg03NeGybFtoY6wvlWl=PZ! zwe<%eqJReO2_b=bN;lNro`Qght*$1C7iEc8ncKtfwXv+z2FRgYuF+jddjWVC5Qi^D zK1JCbu3Vg-7q8YOJA98i+ZFC&TVf5rKk$=P@(MC_)f!Oj1{)AAXoN6r3+?(*)Y&$N zmD%WHJqO&a#uZyV7HPu^+B=RJ))F5rO_^KonFiAUv+CUcFMav4<{WJo3 zvw_izH&8My$aKI-sfJYmjzsD57nmwfZc~VoK+ZFz5(oM7$pn1b`btW1=2kZ249S3# zQjP{P?{G7s(fcqf0yWzi~&$Lh<&b|Wjf-~F8=t|IU7sM675TQA*VYx3QM^av%C8$1fz1~ zT>WkjkLI`L?=kJ&VrrZJo^5k+2|qDK28Sb9HG_Ako!2Y@83xv~w6Ga39KmA^R?E1g zF!zy1?TW2Mfbz3fdDv*`Hk9bNcv^e`beKs_)yK%3g3TQQw9-2$lgb9hO04BQjq6yZekADJ(xk4L+_ z=#WSWq?8=ZGf*Ql?92?};<)!z$B67jTFYlcvKMGXZ5LLtt+m5kn-LhXSCaFkh8JT+ z?`f{CdslN27?B0R`Qz%D2-3M}KqKZOWiUW1VC^Tc!1CgS4fXQ8Us$JXPb&C4E1(MR zP#fr-K%#6XPnQG0PXp~Ro;yhu^7Gl8qxqc$=MLCXHTxKylsJL|GxeDL$b!0WoR72b z?^eblpm2vo<*9r%O!&_k3X+h)T>Pw3Ja23&Bsc`Tt1plWbo#y;2uD!3Q)Cz5%?gN~ z0>0>eu0rs~K>w>LIf*eCn!ZlcX)FE5iBd`4LVS(=T%}Q86V#JjR>)4H9{*|7BjT6I z1VW5ZAY0e4e7d5~!_-0*9DeMjNUbum+-?`8Bzv08G2Yg$zGk(groRW)%xf_iCf=51 zg7+!_ZBt(ZH@{%0Fxe`PEEB;n`y_zl0BbUs^^)wYfP_M+>Vpjy%wyoZ;$3gs5dt_Y ze1L7v&WZ|?qLQ1`ta<-V(v}o$^mtIoos?SU(cIPoY~s$Xe1p8p@jKZnU3`x+0Rcio z@BcPxPRE)OF6B{XmKs86wG9RP&q>bD3Jg>cvtR{m7(ba=>?ig;K!fCOFyQRjSUdob zz@;NHWcsobc7^N?5WPdL4h(#8+JRLY>Ko(6VyFr_F&nUR(CY=dyo=ajO&OWF7uN>* zK#G~~Ol^QMB*WoVwm=jB;$x0f5;FO9->Euo@ZtRQlrO-#Lj+hvWB?0ffcC%|%W333 zTeQcU<4~_bx-LOeY+kTEkiZyLODBOmT&?>_wF~6c9R{tpsF>X-%;9jqV1`Jjz2%fg zgF3MGz&^7%e|{4d(7*cSvvpFRVw_FCb_~w41L3nrr>g(c}_@C5skwuA;ObaDBPjA33XvE zF_xzWUL^18_>7^m%n!-p)@l&~CG1tnRsn|sV;{-!olm?tHP+wBYo?`d^Y|h^%p1;}zU52+CuN6q;J9(e}K+D*R1L|9rf zHc|aump55(=d_uPy8c>#7n4X_e+$ra7=C(nK0Z0|k{JOH?4dv>ti+iSyzJH}7E`H) zaRMhPb+J$p}Hc0}uJoe}FSx0Cck#cx^Y{Hs;x+UILK^mU#8z{@~CJg6RGr_qBshZ=dXXKW> z?<;jta8A6QF;Je;`LQQ;diR6Y4rs}w9Cf^L44n^Spdx-nOL+^Y9o<5fC88xrsc#zl#>TSj3U0y=R$ zYlHlnPrlUFX31S$WfgY|_6)n_fA3!AkzvkY(TkP~u)SK^W3%RX zoTD4o%uAMsm89Hj0$4VkD7@Ivq6njIZLzhL%9*Pltsfa*T58ygli4XUF}{f{*Sxbn zc~HK-?_Rpbe%vd3vXZGQR<|bhWB2lp!;SilZG|6)*GU(h=WUyB;OWovuS>#Muh+SS zOHn9%2(DBqadeULKYp3ta>-mq$ItJe;gC8fi<|f`r~T?{jq7CL6`w{m9r`GS4`f1y zIh?OA-d*S9p|?goK`VX`mSXrKk9F65X`Y3T{6W7TDd{$pby(3zAoKhU_g>es z?An4O_Pnr#@Vk|f=q+;ITcivgEzz%Mjkob7c2?So=vT{C5mMa`s2i=p)MN*;C%OHQ zsg2x;ETWR~k5dF6B?wtweJ?wbXw=M-eU*66m6Kd#o@HFb9l4!1-|d zu~UaiPpL;xQaL0)9DWWy5Tns5hyOjHBY}tD}7r3IBtQz1~-cdq+p#J*N^(A7Ur1ar#ZR zOsj5F&&t%_A~Eck&Kz9cbo1HWJDFQaZ66eNlvJkd^2~YSxomg6IOKDE!IMqPdop6x zshZwOx^q@rHE!;{#j!HJwPYr?y0N}B;kK)WA3_i8hhiA#%*1Os=Nk)ofOG2}ie1-t ztu_u#$QvYCY;p8l-f|>Mz$e6d`!?E}vWaRNNCaSBAdSuQvAuRbD7UpF>oJliUMG`c zE}XIU<5~zW!L{?fON2cP-u&w?4emOIP2hYgP`+&~&>uWtw;@g|k$*)mr(ChjNZl^E zWy~yex-|z^Sh)-@U^{t4i}e0SJn5q6i|#tFc}t-Inzzev#2F3r0_Y5|`F+b7B5w>m zH#7u&T{vGI}KqLSB{|NR&Gc2)P?=u-C0XrZkvn*bWEJHc0C z8E06M_Fa{NEgXQlXV z`F(cO`rcC2zmsjSC!Yhkj;I+A9k^Duw6kV{k_=mLxOHD{NhXOX7KV*Z*x4rGgvDv9 z<_+8mbTQ`au^S>*+W&N&3NMn7aRVNQn;H3OqPPB$dU}8B4oOB?>+^?9b*h4&a3@KU zS~(pGf?IPim@@ZV>DCL$qvvCfl?#=m5eHNn?_14Q4emMiw$2RQw~JL!p1}{}Yuw4F zKI#-xE_w0BOp_6ov_cZ;?%GUp3=Q#Sp00vw`dxitclUa)f|CB7n&*7kt2aH> z5_@tCM3x!v*TrP7@QH`0iH_cC){h9k++oh_TdS>3Pa>g-%QiHqoE&jf*1M-kxaVvH zHZT&#uNBf0XeG>jNvF#khi|(aFob#~OWe&r<#Le;8G4O!_nYfEEN*p|HFuA42fg$( zo)>1to*s`Ir+4vbYavxA4z)i6X9W=$RwsljeePT+>U>}Tm!SEQq7XeEZgM5uK$!Fj z0p4Rbl8&dfW$!@(WxnFNEO&icnz~pXuco}kz9w#S*^HkgY#NwPG%;1{;;1|tDk$3< z67;z4GtS-WNPXwM3YL{1OfZ-I@-vMe!T9qZUx3LzewWL$+Mk>24I)u-Huc?#JM_oBtYq3{tQOA{gO>z5sP=R#k-L)qEPWj<05V0*(kqKrPK zJNY)9L~8tWG2TBf6Vhh~d%k_)``b4{kshg(>=U6`$p*nw7EhG0MRvk+9~=0U;~C4j zruNHkc}Bi*n`lM%M{+D-OHWb^LtZ7w7`Aq7hO$JJr@KQ^76)44Z#M`Kt_X8ai2DBZ z_f%}37ql5vxwvsVUoz<77%=0w-1Pt)rczUYG6rO%Tef0=y#&ZjBqJFN#5_e#C){UbzE^_NMU z0#oU4%RakDGn;Zq$H~UKS5upkW(5|9Js%2XlV9R8=_a*m!CA&GY%ZB(8?)E(LltCk z`ChhO6_HHxH1TtP)8z1?A?OV`U4a+$rTcTH%f4R9{X_aRAJi@_4n$VZLu*2i*`E}$ zD64Pgmw~#HfgDdVlvm@-MV@S0E2%GJ4LzUtsGJZ8*k=|?-$0_RF^ozpZ@I5NZCj?OD{GYSI$6!t9&2PQb+W zUCz@as8r;mU`$y-C|7Lv+8V*`lh#73UdpsZ9-Ef;%_2<>HV0iB+0N~QKEv#?p^qS@ z+>-}*I?;j8SQ1O=7vGR0kyqHP$F)%4t||$c>m1J!O&ry}nK$x|3zVH+8&jU*Y_uuS)ltyE}S5|uk2(o-Bs|~1hXN2EoVy$ z-77o5oIXA9`jCZv4VctHO?FEoOEL@I?P3QQ!N!Qc8;>Qwb+)(T;<(DhZ84e9D+4-?j|PvVoLIl6b_@;l^xL;Gi(Y;lfF3d_cIf*vlR8bb-b;7a+^<_-cVm$ zptJ0vH2z+4@zaD9{fc@#SFR*4y3s0{A!!oW)3)zj-_oR5w;-DuG&vD^?dHcX{-2dD zS6;h6*!)OIFM?QFX5-2OtWhV$q!r|wXI;_X~K9PTv~U+}2u8M1u+MrFv7DaH1AZ)syn7n3py?=|^Np&GKA z^@O}#mDRV}K(yC*ZYkZ6@~4L3ZVg1Ep34|snf@SfL+a_r1&zH{C~a*ceF7~tuN{#< zFKO#{mrVia#AEr?6`dWe_i3{@q}%hBR#lhA%oH|>sKd9h+B@N_&W1b|I@~usn##}3e3h3L ze(p8HU23W!Y=AX)n;L?ZRmkk-(Y^AMjWB;NADqyPSeum0X4}fKI3ua;tU#s553ZL* z-yPokteX+Zt@kCyq0zg~Z{~e@zhA{y$;ibOP*{6P&!}34BgJ~n2S0XG(eF34^pTIfz8r8O2n@WTHU+HZdMP9LMqSr>%%kkMYNt(wz zZ3?k`eXyob^U~)ae1i39(9+@K&2vYxE+QTha>seG;wTSoN2Ez)sJs)2^Vv&Fq?*;{%Sf@la+eva(eW;(B(yjjT;+b(T zxCgN5$Bf=DBv-HFAe64ZFD@qm=L$+YtNzvmvIIESu2PIrVp){?3&-7OoUjB5_pLS) zW+XD5|GpAAj{l;?NxaD@2l`sH@Y2}%W!Z;w=ZTB4?f5$Rq}f4_ZysLa`Z3a0_3m)q z?b(~y$?7F&CxyEvobem$f{;@o_WXQk;?RNmb`SnNhras28fl|Q{Gstlrw!UgNQRr3!E#J)&3wqNc~NQ0^1OjIje~w`!)`u* zSJbQOvR-eAq_7~pVe(Oy)&7{;yKm$U#&yz4aw_Jr6oe^ZLCHP0t*>g+%#BErlNFP8 zK0ENPqaT(2I$_FN5%c_p?@Z^KY?^SxSZo5r+L2(Gv~RP*z~Nlz>c~Xaw6PgYjZvLh zaW(jTrfq#(C*}gZOyK?5LbZiw&wZ;Hj8!$#?rEG4IqNac_A;*GMW36Iwu4#f>Gz%#G;_-J-n+C3eU$Y z9*Pr(9z5d!Yg$p<`4K@1U){UE5me)>P|{ppYIuab&z&Qzdmwe=gIl6|Ca3Ls|g=&fkuxdeBU1J#`Y!jf5Z8>*V0m?+u&_hQ0VB~1)mIVy_S*4-S}|S zj6)sCjgjOP4RAV4GEp8OPM3;x+9t~}vn}m1x!h_RR9k|Jy-(BKxv=rfSCHV7k~KAb zUwzI6tSZ$I%%{v(p;0`bU&RS+8p=DaPh>d4ue2TDF*f(C#iIYJ|AR|7_AGh1J4ajw zC(2m|3QH6LYiXCO(Lyq-qm2W!-N{a^mqUYImG%X1i#1*z_F(_&;{9Q!bSA*p#z7Q6 zL!mJug)M6Drd+B=c45Ft=hOjjB`JKxE~IK0gmr8mLw4NFQYv~H<*)a&qu9Rusn=us zC3<1z^hm;y@7Ks~!%EDJ@vQ~2Ij z9oB+nZ~7pI=b2uPhpD}@%YH*MdhQ)xLT{btRIYi%ho%8mn@z>R<467vRu*;^WNn3e zkva=U9;D08kssQugECq|eUO@^W6G?LcX$e-?u#Go2)#k z9hGcC2ILtUz-xink*V_)Lv&R@Cf4%L1`up1si9}fxsh>c& z3Y@T?b)i2`J|=;R{JerefBiz7{!0CtgUgbt$BE0GDhk3SH00lt^p}{B^2!VtNK_GA# z2n7cVi6D?bfrtxp)gg z!4Q;?lcg2kAG$$LC*xE%ad7|{5d3dPO#i3YVgHBV{Rx#*QGZDO7ij*P>_4?TEpWvC zd*S?Vqlx_|a3cRSC;-l1^!?vb@fY&|Dk6ozNH7G1Kp}{PAaDr4#f|s>nv1{QEcz3A zrv?9JE=vBl(fb{|RBC)&dcbhuKMfl6e}LBCzyeMDYp_ly?>EE!V>bVPG~81!^N0BW z*!|6^{_hMIh7tn9UU4EP&s?BWU~=;X4)e$IShN4=XJ7AH)&F**NmE;Qs+e~S7qzjN&TRT)K#hiw9hs-UgrEp-r{r!Y!o*mV3W@ zE(EfMmm60XN{jfLo7Hx_>0oQ&Xo&$KQeWlZ@~6Jk#ihbSplf<{ak+8v5U5{W^623< z(IS4imVfw9gh*C@wO!M;BK#6_Ja(3Vh$_#)YKb$isa>i#$73NO%ofKJFMP9`Y0h z!5W?lTpC>9;+K58O58eHLC@L1~ozm0y5;4cDJ>+1VO{O1D+ zt2tWAnz>;>yt1NDFcbp*OO-!q<>i90A_0R?;M5svJXR(s^i=QD56A&T^79KC4o1LI z>1gn{uuvEZ@TkAtg&=^!Gi7KX+5t26=Xww@93cYW{#zLo20fjN-^yTM2=Z)OhzJsJ zTwpL3sQHIl5HJ`CInx*nfdcQ9{N5oL28KcZ1EqmKP<|5()Puv%_6Gwa(0_vCR6ZDt zMj}p^3a6hxlmW`15Mb%`dl>=^ykma03~?GJf2#*apdf!$26_5M`|4Z39g^L zpb!v|vx1QjFpyK{cOfVQ4Ez_gVCdht5rTk;{6z=?`B$Y8sJ|hN z{gZ}BF!(Qx0W0~7f=C$bFK8iQXHD^R;!Zu#?{?i#o zov8k$%KUw+}vF)OdJrr!K)1&;wf7b-)cVnN<+nc z+?=o6C;H z9M6qcwevz2goMVkV=LpbZR^r`Wg$a{qWal0gmQ(K;V0~UequlUVE}JsWAT)G4+Uy8 z$6~e#I&8JsVny>FT{9Z}jwK)>=%iv83{BW%pDdFjCrS8#Py#UO>U3k{l1_y4oNcn!a-4k9$RT(y=z zchP?%wzODr@brM54>ewffb^8ID3xmq!gyLq(O+FS@BW>>Qd7h88KC$5nMy0RYXpCl z(B31c=V&ornt~`R>n{0j?`2}!4c}FIx8F?$l5+^}MQtmn>dqjq-tMEK3Iv36jeM!!C_x9ut#zM#R6jmcT|}+uWD@*Py)u{}08+FCndq=xX{AdkY)oFWZyt z8)tn3Hgn&Z9wwDWUnZ}j**?x2`w7}Cnj z`GnuN&RzF_9{{r1Zw*$gW~1++{CYJ;==P$u=h?`^&BO77I&4)lmWR6HC>0S_($6kc z^`NrKm^_T2DZ&si`)Wv0n9VWq>#a_9Dh@n$QH;3J-O^%K8fj`(q`Vx0 zB-8^S6`mpZRYbZZD4r;_pTyrYN=`UiyR`gv#WPGU6iJr?o9*(KEXCbYC%c$=-NJsv zT&%D(^@ESFz(;D*Nk(-I_G$1}o@m+*A*+hHwTvkx2igqU##&NX@0rETmGzxw4S_PFOFLY^hPuMZ^5#*S7CFF{! z{ZM#<;POaHcEb7*^a^l7VSX-(ya`53$tT`u2I`iEM_&0jnK0cyr@ILRR$Hm`44*@K zqg}cAlc+H|BH`mMe_@1059s3&Z>7Rh2u;ID@}Y9NYG7DhF6rj?Fk))B*4ExXD^dbt z_e|5}zP#(*^W@Wu4rq7f%c{E{YdGIDY!%+!-KY(c1IK&PSI=avY_p8}spM(vVU84H zkMeShlAk~4DnS$K@<(zvxIdLy9nCR|$d~oT3T8y{T$^8S@v(nDI2h6BPAo}|pp-8I ze7`D%5*2fVqT-Eg%-P!726(~@XG6<4Ur)+3jfusxw1O*(65sgzZ26c(2 z@PlEhKbPkF-O^tb3Q?7Ym-L7Q@zUUH!P9cv^- z>A6Z_!R4$FK6t|=70pVZm2hyC0={uds1Tq;f_4vY(Ws>VC;c*iNAipf|ae6R*`WIbnupvZG7*g&Imw}mRE$bs(^g$p9LqRqJ@ zpHqx*6NWOa&0b-Lhxpf_ftpbXRSd#qaEHO)S1B7Du3Yhp5=qc7iPJW90D6z{=}Lfp zJXwT+?)}*ZKAJqoTFF6rE=w>7q8$3asgxw6g@9&$cec?ThKvjZk9Y#pUu^gvZv}Hm zpv@08;F4(7$z^gCK6`&12ZP!j1~q^>fq==&ElWl-KRHzBffi2?%s~*70nP2-?*G9l z{~vg8M+$KjXjICy^*&8$i_1YunZ`nvbWT!x8=-aKiet@=V&WE-rmUK$p}LWWd-T% zaq#5$WOp!TTv!l6aNprMA8gL_^F+M#~CEWPil2={R7faoJeee~=bWTKb z4^vK!U<{?cLo76Qgv`7?I#5p}Tf!Q)HYFLgbmhO(a^?G&bU#<*9hxRdvigX?2-SHEw>LWQKFM0KUB_%jCB#Jq67({Krwl5Xdj;E~ z^oERVx%HE!Y-7V`s+OpUIvZ%^7lq@p^wroS32)ihyJT6slgIvJc4X7hG9*I7jLwCd z46w1NE-Mga2H>2N=s9+xK+f5zz*!i+L=iT_eEPwU>YByD9L#_NrX&WfB z&~Q`;z36luEzMJmp;#NS#tjnsR)W=WDprN{S|ql}=|*LRX^ifWiOevmkj3_{N;#_I zr53VYQ20|K?{MOI+e>=@(I#;H>$h)&O@h&w#_z!0Pj4R&>WLCKjlJ5rR^4S%&x zy68K`=Ywwx0}C4g+<%V8dJP)%NPhxd0>VOXFS1u@+s7hNQ?=88gDTVSTpPqnKmGj= z+w7hmU1HEbvDQ#iu?*R-N%ar|==ymzn{VlNMBa+3S~qdnRBxm5Rr627?6DR4wA z|Ja`s<}2_9?^GbpO;2cl~cL%l3^d93GjFykqcw|EgdoXa+|LlG`^}#Bx`Pe_&U77Yi=Ti zQQ`)9^+vcC<)up_%6PO%Y5sN@F;B38R8|Gu#_UHVL8cxy-^@5o(N(TCGfpvY+iS6u^L+i?^rvSc7-C_*V?Eik@|saFq0sL^0ip|4IvTC zM#6F0(7upP?qo!MgAt%!d$Ns#RHGezS1zNgWYs8Xtu!>Zyv3X|tK<{mpTGJR@q}X} zs8KmME{yewn-a?0epMQ{vynomlwgm1!vBEb*^FTLawiI>mACy{`R?d!b~b#+$>^uQ zTifT(fOnId*S>g`i+C2&IGzO^;et|+6$IodSFJ!>f=R8w`yHxat0|*!JY&Q*q2Eo= zSw{pb``=iGsCqwfuH{r32VsumQ&=TL%reRyQ4=EI{-)^Iss#Yx73vI64qZBVxB%55 zG=L9&i(HV-POK_&t<%a<76-$KL5ZG2;X!KbrY~2{E$D^5uiRI z`!VhJ9*M)6t8v_dg?mg^YI%^*n$9iU`dJGrP8n#_gWs~UAWxyR*3~5wy{vs460r&> zC_l9DY#u${QtYg3!WGn0MCVv%Rk=JT(?R&!L2qYvHSo2nAk~vz|IoH9Z&2MQHjhab z`cN@Gje7bANEi!E#W!4=w%9E(-^!qDICh;C-k|FfsIZHeM?<)1MfOaBUO&62i4XUh ze9XezUt1?~gr=-)>V@CfvQB(@yghf(k?z2L0qapZ%-N9qy%B(zM!lLP-yb!e!IInC z*!mr#E|z97`Y}` zE1?xA4VeHBeX`<%@#~Y?Pp^#rbKtRRk`xD3k3J;N3ba}Ca#0hucqw$TH!cNm3RURX z))OPX41-z;*SZN{>*z|Ptb-H{I@hWgxO2|k@~8BkUslrYFBqR;e`^F$?Z-FQw+)8M zyzM(?0AV3@F&~{LLwexIMMKq9a;sVINNNy5xN>7Ev=3ET^W!4DhXYI~Fu4!W21Ntx z0(#f4zI7dcyoY=d54icpwrQpx#Nb)|_w7f4Kn=Pj2y1xj6n-%WAL;1G>L}|C2yjn$F6+CR-G*72p=A`;Y8-3TucvP? zYW23J|J=gNnhn-RM2RM`irN>HS_B!2e%dRLt`V(kg|BO4{pWD{{_6bbe5fx^1ph=8 z6=1Y3RKgPKgboRK;=qxMCvX33`<~sZ2NwJunV%yTL?S8H22r@lT9^dwGHDrqj0688 z*cWQnq(YYbf=7J>5{!npsN>ku1{;l1u`0yEA*e zU$*G%?K6X%Jw$q&_43mjHI8YU2{|M*CLn%1iCaRJ(*Ro@7s)P`!;{KUm;x0|@7YdO z|4Jekl?-jxpUZK9ogWGRBYE-WfY>oVze3$wQOR#!t`OFRcqaVik>scT`^!fSkHtMS zQhdxds_ang_lYfQom>uhU@IpZZUNP`F(?ihCnZ;KHyV5 zUi%Wa)}Tq6;t-6`*440xAnj$1Z{l|@*dCe-ZbVw+DV@%RsgD*x9=i?;3fu|q?0F&4Ll-D*o&`QY0c`{sz) z12Od@Q4lC5!C>Q(Sjlv}kLoQ@3jlsts3jw$Lhb8u*eCia2pHt4&ae^eH+Qpotp0q8 zo2fd?x}>UDVriBPd+IOU&J-?@69{)6GJa(4l@O4-Iv?Gx!I-wmrVdfmh$Gt1mC*6N z6Ud?9qcS4;t5~MUGupqfe)sY&88OxMA=3PK#@wb2ODK#p^D1^QMniImTmtZa=SC9F zT+G2`vAwt-wj*z3E@Pvd!j9lEx=z4lS&j+R*9$+~|4MV0Xcw*!({JnQF7@C|@7l1B zn7S0=P_L(z`n@}6yH^)JWd)_E?@BL*CnWyM9NIO;JINPZEJ=#{5;XxcY%e;Y1k7nj z|K!D#A2!LOLE6slUxtjzDh2=;QGdD)TZ7iWZ0@Na4$LlkG@JNb|kOlfKoz zXQ*R*FM*u*jJV57lx>N!wkGwunCowvYqplc(q4T7J0f zsVTd(WztR__Bt8G>)9$ad0SA9qvG#Xcsec2u$@Zj#9($(5}55WO2{$BUSVNFzX3)YZ^r;8;3o3E{ZCoJaYG_iAuu?T09 zK`C&0ntqI(gNV5Kc5DIAXPb%Dv<3J-nPVU4AAnbYB`b)g{On77z>v(Qw^m{0=0Jv1 z=57du3S*q;L!eeY5gq+m-lHC|jF^ni=;ByA5<*3XR7BILc3x1VHqItdpwILr#VKL% z^TXwV`>1JB#9TSsSoXIFb;DsS-6Y24{3lauh#SnGo^K|FMI3CCUdcP>h>#ia-& z3f((ff3DUrj~Rg^w|sCcW-PnQb~rcdYjcd;ZxYu}U)PKnUvQR3sgsSp_{${EjJUb& zyH}5<-)39uc-)Pwn&?Q3Pn^|0wA;NXwSs9Q9CmBL>hudaHK@y$%yfS`n|>8W`ZVIl zKCUmo>7PmykV-}}8b4BH)nZe|KdnuVYxq7k?dS!Ue31a;U1R(JQ;kTW^b2|Tgk)w5 z?wL+oDP2iAAiq6rwk2bWVB$}Rre)7ZS<&Y8Tb{-^y2%TYxKbZVG-yw20J1kVwy36d zeZ40bsZ~IkoIQb=q8wsgH8(F#U{PXEeNs_0r|Ee!#z%fl!#p809ju=i&YRhuBA^!* zg7wKqvh^64;FX4JE;DN*ybQZdpsF^hcsOhy;dOEy_0AR9l*`}fal}mgsX_a}O+v64 zjKo`2+Gd%4FNJP$uu3u7=Q@BpP{@{OjXft8{?8s&c`@_$fccAfS@10TecuF=&MDE; z3{49rYlL;{oIAMgQqXC7du$Y&TeR4dWc1`bik5BoCD<`7ukB|5jV_oU?>S3kJz%}B5jdi=wRkxf>>Il}NHo-utu|{-C zRuD?$&d*uBV!q|FdX{A{r7vzxT59x&u|XVM9@dba=4FGuQXfQZtG5$pF*Pfpv%y96 z^3~`7xK=8)WQ~zIxwT8&r`Y2Qk#f34&$S&J; zPBOw~37|V=BGM*3j4lPXhI%(tQ77mVucvm*6S0V5BdvvxK*}EYyym`zHe0oz3(gl; zFMXofG#(_R3VLmRAGNUf$B#%^?J^?k4hoEby0}G6f#RGAYkkFIzoi`mKJC~glDgBe zdwEMfVQO2X9BUVckZc4ztI9qyfUw|xQ~i2y5(tTjdq)rnA$Qcnvb&g{+LTD!*Mgy9-fv3`3-PN?9mYHPYCv=U%?k95IAP=Y-R*zvWCMSiE&=(g^czvn_)3TuI8ifDl8jXq0==s2GJ5AMh8bzeJPq*%V6xbQ+11FAJNj8l@zX>B1~M6H!^ zN8d`9btjA6`uivQeVv^|{b$DO7x4}%HYx4ZZGUcxFD5L`5bH856h<1?7V`f1E-pLn z-kZXq?b4#hvX&?<2eZ+m!ByxBz|JGkS^YZVl^EH~+wvczpTIm}L!6XY0qa5S@i|1L zzzJ?OrO*qZ3&tw#|C}(Jj|PVQf82G(?tk@qWtpS1&v4_^lLe8IGAO!v%6EK7iBL1Q45*65(mLmnudA{ zEDT>67mC&t8kL)0Q;a@_ryxclrk*8jB7@226MM`Hgka6Hh{v9c=FX%kGWRHXU2v(T zM6a$|Kp1UN3wl8h{s$Z>K$W^H?sVOqyK~J$Y%XRES}*V_lL_zo04YdHpEdQCcP1Am z$OxmF0kK=#>oO~zP{gYz0wqPG+k$aF&&#oz$&fcN|Fvtshdexzp};T~=|AvgfCF*u|LsH#Qe9G=|1-7Y%C$o{6=~ zr@bF_KSlVObc$p&1#d!;O`U8DRDZ_WNS$=#U=}^@#00Gn_1W&wqQyBtB%7RK2{(_HhMBCbGyUgT0_}daA@hV!`-c2Vv z8c;-}75(8E50Z8RYTK~%USPy46S-ggGyh2TVtEjNS@4pIMdqm!w(6(cinI)vHdh!Y zxQNo0@>bl?ep3uZhD`NT8HiY>ihBGiCp`Cv&4?~5=(>;u4hT|CP0rX-uUEvzHksc^ z5yk}aQz5~aF#x+M;JO2!R-+o@lpoH+J3jSaZb!pA-gOpewWo=rXh@Alp08h}XQa2e zfZ8t5g{I{ZaJ!r%;;AP+%K{Ud(I9lhy^z|8!{`HH!5G#)-V&T(>^M5|`a*LU^*=|g zp8oj86*XB6=$7@A1tT-^^*em|gZ4eOnAM+I^;RCMLaRL6u_TeKs|!O4(;bBx{A#Hh zo;2kX?N+LQH(VFpPO=}pD}paC-1+O(WPdoCFX#^`3ru6E?r~v97f40c#b!)m zkxp`CfUV-DLwAJcbsNbojYR(+vk7$7UUHb&rcobNnr3~=I8{Y4)D#oR5V9E8i6PXZ zyz3>gzDN%J2%^OdW$FwxZ7MFpOa-SbO4|A1*>+o+6J&2Oo`kE<>Y{1JXci@E{6Thb z<$dMNK(kqrk+P!0n9(eyT~N67=fF-AV@h>Q8bGC`k8jp*RGgaFuQYeP3td$mLpzaeeO&cO&5SI(kZ^?@RuQtw2*KXs;MC6EG5$Wuv;%1l^iv0@x)n*wJwpt9tG~A5OE)E%Va7w%-0q(eT72YNN$|5VI}%FzXEAY=n0Tn z1269@wG(-1J=%Eyj6q=DsbmbhZ~y~Z8jE79@U`+K7%Z_aL}a3(cGoC&ytNre;eo20{b0Ck1uLD4iPLUJlWstusiWVje z+zhD*;(NoAznXhy&~i}3Qxt0>3Nr&FaEIeM*vl}pIDIWt1S}8aLoaG)w)-B5fqmm` zl*j`)-(?Mdt8`+h&DaAG^bIrwu@g}|1LQy6JUk3E$Hb{$lA1QsL+vobC~Uq=bGWG39NpQ z5g#Mrxt@$z{1Bwnzj8|u5}V(t12#AflsP5t6Vg|GlWz1fZClAsLe~ZlgXPwjb)5V7 zTz(7GUA~WPxaaaN)DceCCfp$NN!NUe6S@M2l++t1cTGdYlk5!UfPg{hL%WbpLwU)t zG9x5q#Z$xMg~r4VR*3Dp_$Gu$Je}9(?(_!}#W4|Hr`j(EUX(|GI`uKI0@&kev$Nh? z^3@0TB`_FLn1J>s-EODuoCQmqb^iE;IiCVM43$PaE!_SQ4PH~pUt?~0!prSAR|Jy+ zf6|Ima=Ybi*<*w31)a0wyJH`jIR&%djHN(qqBr+6ngd0rjKim59-UG`A?tQcdPP01+lf$zwkV;`JeS~ak5F)A zpH}SFW51aT38)~2WCHw=;Q8(NXrSvN&UfLP0;C-DF5cV-O3ktqtk=PKqE~Bj6v8n6 zvo}$_L~igZC{U0?iY6#8$ag;u7mjgjlDI;)qUNv~b{?C(PT%6GO@FkJRopl}&e(NZsMM6*uCV9r(H+ z$x_}nmgC;o&kdOQiKS_d=kc9FmU}oGtBo39iAYY3Zhn!aT;V~~&v|FPLp*H$#orjD zRecljQ>AYkE}G;dLfk4xI#yERSFOnNQ`S^CJY@Tal+8sq7py@wN4K)rnBi!IX;obB z4+&eViK2~@Y1zNKarvi zQ9haz@FY4KX?M;v^iC@yC%^2m*!eM!5uV*Xl`fyshuqb{`owL#auiK8wnNPR(i9{n zliSkJrhp|JxDAe@#NC1>9!mTQYZ=gX9T+|7MkM>vFP)`&-UfZt)Iu)rKk1@?iOtY! z6K9rL?lS}=?k!RamSael3~%||BO|xBPM~2A3EJ0*SK!S^%g92@m*;Rb!@!vl;=&28 zhY3~iawA{ph~9iZXCnu8dF);nu7RZ+49fRaY_c=02 zih^m#mGVmE*vH<>&*{uy&La_KXH?kGw(>j%=w|KQ*SQdCXZ^RJJ@?TNunZS*C+I&F zQCn8-{xO>N$qL7UhzpH9JQ2?t!i#w7IU?b)!B~=`=27eK9s0OEj6ebz{0D%=1M z$#(ngr8KC9)hF==+Q6Ypa5p<3<()-^C{uqBv8}B__9e11&*zp>scuz;?LA5Sw2xa?CAafHeLYaS7%19deIef0XW6OMpT()WkAV$-J-F~# zsT+>k6wDddV>r)5;VRQY-j2UHdS$t5?8FWg!z#EgOLhUPeZ8Al>d1g&t`jl{?&VTL zp|>jy1@jh5IoAAImAH;#*O1|@l1UQ@BqsX6dtJ5-`)`v|G)dyn(sSl{52NEn`%%G} zZe`^c;j$ri7wl=lOYddWis|$nD)f zbXE3ehN77iHCZv|*Oib~-qM^4obH0dl#LCXH7s13c3+r0|4$$9<@e6FCuJaPb!y_h zE71!w820(SXC*~pp~gy-=S;XiAED()WP&6 zl`g=iWLDIemE1Bvs?<6rNix|iwx4peC9yu4XZ#b{d`MAjf_1OosTY;NFOy!}SME(`UY+=xv{#ns3ERltwJ9t_u?{#^csyz>z_>%D zr9Era=|(K}e96G)Yp5tlfk(L>!O4Es;-VYs)cL##XSoRGylQRRU`&vAzl7r`o8~7p z5YY<;r|9ntkj)`$W5lF1r>HQh6TxEl;MQIJY)&YRJ;v9A_G_M}TWrBKOO`tSUa{4U zm<>c1HDbX`rZ@2#UjpB0vQg0OZQWMQ>hXV;D+@D(2hn_OeAv^gz z6n^-o>fE1=}5%xoY)MZ4wB_ zTj;f^@P?!a1SPnxra0_QR?%=V~L68Cy?j+)HiQThR6uEG2{h`~R>A$`#g%I8<)Z1N8UK1MKN#0k-h~OA&jT!YYbat8oJ{UWV){fwfYh3UNzchvR41kB2-T5U@Sy zf=~)QQ0<2`Rq|ymvI~|lJOpMwW*T!UO&P_{4InDn z3*Ii(Ae0StT83MZXAOLfxH&X^z6LK?aW3$Aa_->!eG`OFAWGOt8%sPj8@fLnG!s!> zD1Fxbvt5k|Zk}&(yW=)&gW^b5X-7lmlD6D;q;SsRcYda% zVFZ_|+r_7vbs7FwI|TY}r*fYXQW?Li?~e!uFU4+9@aX}}K0WD2*&H>5 zgB-O)0LKQ_rx9fxH&kAn(SY8kdL-aLc=gyp+9w{W<~2V}v~WK<4}7#!C7{lLz>-kb zw;0c}be)~);^^_?;~cCGO4OYb5j_hg@Gj3NgIq?Y>ZH+EuyFz=_dP%aP1k`!T?+2O z7n1q{xo*K`4S53$O?hj)^p#FcaHyt!E_?mqu_f9qu2wU@HHK)|obp2X3dR^TrBpE{M($ln zVnaV{g)-90>)AqWi;u)*sStQUI)abD3qXrkK;5{=0t-&aqM^Y<#>P&@N~Q+7DgF1d zw1uO&lc_BN8%N_gYZU@I$G=a8|8Fx_@gd#_Hy$B%hUkY-+FzAfH{pY6G>8fL1uuAF3NW1xI6TdS1{S0MdxW6Xxy$7mG zh$L?1r%fe=xL{ZWYEL)i|SF5h_~A0}to?7i#Ziqg10vk%GSTFsPq z+-DYV%bQ{kiic|~+FX_R>ZyWugg0oE1&MeOI-J# zQUssZ-pud#n5{kI{M5>~yV&!x zCz8U5vf#U_#%gRdq0>K}T5FNG&|$E;|FOGd zwm21#=GyL~l%PCjbGMY|hlGZAaD>h4-qqz!JVvi#wZh!h?3&w>Zpf;UHNv@iZqYKm zUaymvbZ`}u!MP>7=l(Y+PZ7VS?&tG|v->8-H8IPn`#NAMVSB03e^hO>Z0%@HpT04t z54!Q)C-3u73cH`tv_bz6Q%TwZ)I(E(Rt9WJ$JwOj!71CaN!v7gyXFXsu8hAAuY4bC za0P=Z^@_T_cZ9l(2dthNezN-1ZA0;uCYKM?6mMBr0i_Bcrk%Yq|09PQcsrp%_AgdKMs$ur88%BIZz`&bI~+pKbQ%Wf0)N`B4w6UJ&I7^JH@1P9t# z+J($UfS#&w-qKT&Wj|Y^hv?ar&{*bIyI79?tzz)*pg4g5tWr@*rj@1O&9L1jhv2*B!O@J! zpG~6w8ve+0jj_dfEuM{et#(c26X~o)1xDcLr6(qKZ)L5C))w{U^cR70+HAxZncf_< zhoc#jFxef2qdi@hK#19#C66PPAXy0U9iy+DlPM(QQ4o@>9(x~xWZ%SgNB{)_D>>X! z)j+V)>v*)18PsJ@)k=rbTNN!RGVzLA${^W$kkvmUnk86MhzeLAg)gU+Ar-s9gFl#L zh0|w(ZFVJ0+9k!bt0~fVNjT3fD^`Q)4MDFVN0(3^_(NG!eW%-`tz?A$nl=IzZt*k; zzLIn!g4QczY7PKL0c=C&3!)sT)kl&p)qA=njnaXmBzz_!{I|D^AVtb9@n4^v|9ldM z93?;*y1}b5oaH<4x_upS9touvN|6$Xm??s5x5Vh7I?2B}N*amqU@d`d%>086zu4-A zK9*D_#q8-I=G60o4PT6ZSCsFOk zJJDY1?!s`_y={0dMWW1ljJ{3vpmJiAJ1E3i5}v#o%xhREdX5g7$%5Z&g0jM#CDH1@ zNca}gh;&5qsYLbAsf4;OZ!CCWJo080SZ6X;;QoWrwH4slJ{6j(@+1LPit{7<+dk$0V7fIF; zQ6$S@Q4mqZ=6n^zI7<$cD8ZlQfn~|v8a3AYh7A+UVfZY0rl}wHX`*-@o!9jeyifjz ztAe1UZm&5p@_B#w^wG(L%+f{ZJzR61WX|;2P?7b^B7m5QPzd^Y!qN~Fdjx_ayO@kz zK@E-Tytmjz@u-Ir1Fe?|I?|Z{TJ?lPsj-IM5M&TFTZAYjCJuT7Y}dv>E=zC!8f1Sk zB>S(aV{S27=FEUBf_OGLG`vevQ2AYYkhL5tt!`lN?O~8=0$iyoD8_%#v0)N5@%8Va zlYvUcl8p7!&HNV_K|I|kI|Pd=$OcQYdI;+;G_qn5vs;LN2RP1ZvoT^6+Xv+IP=KNv z6F`%XCj?3I#{Msm)kg@=#lSD0J&f{0u!=>DMetgJedV`hJZi|IU~hYoq{& zF5_`Z2nqptwqEc4k+P42#9PsG1GK8G3(XPiouMT;J-$t ze~p0u&#IWLBM5{`F&Udu30V^;HH6+25~U&#SS5&Z|G;WG-><+5`G;UXzG?zqnHriN zDm~m^(m;bqa|l5%1DA{yGWbJqo)^=XjuA)2*w_CH7F7tS7ihKGWYY_!ONlkj7`Eqw z8bR2eI0CutpfDel)X=uw{{*Qe;FYSO5&ZMX8XJUWDfyqcBx-1&83L)!v)rCcm^5xo z&?eJl{Q!I@!<46A!bEnFW&#QQY?vjBa$~LZtk_?MQv6ly3anyj4K5GL_z!sh7(fTw zdi?eGcc@38RR2kVjW2BI`e@uKGKpsX=&?5kVoK5y8!lBz;M*b4Uup z`!7e(%F@ctMUh;B8lpK%$=2!>57rrA*h#|^Loo7O8jD^2t{RklR-qPA7?3W3 z7r3y8wy=Md7G`69TPJ;|aZo z>N(#9l_r*>1Q8?-($3(X%w~V6>6aaLMBmu^p^72I{`7-$q1&WcNWjdR*{7-AVOz9}1e?ftL~z z&)x;~9h+?n2QfCu53NidYgh=xDdD;HEZULqzXJWpnvJ5)dJR(NXBFUt?Rgrs%*?<_ zmW3*fPbq_JZY5&ww!#S>8aQ_{XM$zldgQ!DAReWmX5k|A zyl$w#e}UEyHCfnf0U{MhS=iCINI1|y%0~ssmQD`&ALV0%{*^*983naF7Tw7Tj}J%H zhm)lOTafk$grdqWwa|)WOMnV?PZh6d*wF;RUpE+N1P|ALS!Aq*MHX1`LK*U}UjMIL zTcpd0n5M{ySg(AnXvvt7&_xdfD`^1Lrlo(h`pYVF(zbn>n)mAnh!JTd^$}3JPm({V zF3t{1e>u8_+9M%Xa76_Oylynkds04t-b3+K<3Z~ml>oH@76h}y{glUfJrsL9+CRSd z{NoF#;7J|TLxHMb2?px&eM9lzy#m1%9oM-l)E+VUKfc^(tp9a*jS`AK9fwykgR+cb z19AwW3f*XgM+oZ(zqOz_@!xc5-T+5GJ`cuTW{2=Sr0*KdqnQ4B_XTmD{xYNPgjLcO zsVU>I@nzO$LZ8gOus>yQDo-cc9Op z=kI5=_P_bQ=aPjpac!+RL0{$^XM))s7u*yITk&aORTauUlmgHdG96@}~ z5y-{fI&-9ajSgw-m;g!E*Z?{O7G(luc-;RHpUFfD=^VjB<4@WO#mr@$Nn8V}O$z!G8Zl z)SS2>&}|6Q%RM6j)wu9-y~3$HdiS8-o)`(Qtppa3mdnA~?(*IKm)aGM_|IMfudrgM zHr6xuBTKJ>gwx$Lg7ld&^-)=h9@ik(-3OGW?4&b$zDMS2{hrk&wR9zhhbCLd%B~js>exxpe`uCmTNbT$w~8TjNn1KDXS8>{0U< zSGks(y*Ve`(F|sKXnnd;eyBC+a=sqrXkDVh!3#+LRd)X3(Btc?G32i`E=3Ct9C3#FxT38o>tH+R+#R!^x__>uX#T9!-CY{_!{)^&fv*5P0fJpo3fmppYQCoTvCb)3(y zrb9bVOGGZ%3dYv>!*`$yhy(@i{{StIPAqkTZ7bxpxbfb~ib)6W@7oSHW4J87FALGN zS>Z!YMgiWBf3D`k7nDgqi3q=5zixbf-g<2XUTQClety1t0G^+|Xm=$7-i1fA`d@%bzdAD{(B(LZ4_WGSxF&+S@UVmgTJJjHEUS8C=W3 zIC%w(z$j=QMXcFd0Xk@kRS_`I^6En-Io)A&^Uk#RZNcn2xkbgYjm%bpvm9&NmhYDH z+q53}0&ZIut5pfHJN73X9%MgUV~4vMI!7}?VAkkoMbA9Mx|2zt#v;_qW2prX+-#zO zbhhByj)wVyUtb?==e`VUtS{R-Ie9dE+FdlF0b^`M)?Xvd3ZD}0L7NA-Q8&iAhW591 zXeY{e@0JDq)dQ}6zC4q^g3}w7kuFd40r`}BO)upy)jrd;>z`*{DtxX`@mfZWjrWvh z*^Me}*<^tIZ%>kwT)f&o`IVFVTfv*J4G`qDUUd z;^f}L2*EHUIt-a1`I=@n_k$M3u z0<__P1r{cM?b{04xA^L&<-c5%9(slNgktL9|mIPI4lh$-ib0u8WE&=7#nq5>S;a;unXX}-8imK>B$9ZBPF^@tQP<~$`z{~UxCF83lk3?Z zOQ=KJGO5a{jcg_pz{*x<;;iuW;A?Aar<5P>IwFhY^={>z(hzp2^Y|_tm|1e^E^J?wRT7 zUOng3TKlw(C61!buqMfTuos6MYVPJi*QD*?cZDTO=Z{PBf zi57MW9MZrS#Xr0`j;*Ht{^<+R8bovrbb8Ia+$6jmQ!5;0lp!yXMSGlgAFkY*oo7dO zo-d7m)t87QOkpORXqzX1jGF5D>Muz%Vy`{CYnWGsXTTnodE6zNo+k5|lRC&}R513b zQ_kIr@GTS36oR?1^NAi9o?S5H5k+e1y4}1nmjY)*kg30ZZ1(}We*t}?jm$qy^Rf@& zoRJ!kmpojc;3Hem1(snQKVfB3Q{k)^lKM7YLOE;XZ9pSPUSZ&i6bekc$0gLjX*+~LURK2;-0cF6M^rn2HGpp z5jN;BWWjuQJV{&#WCQqBtYNIIdLJsPWY9y%mNmBNHZzFqqt;Q-m1IDu!AYyHSZwAS9hR7a(|9Xt6c>7 zOj;bwc^J3~LB9f5@Ew;=XHB+x9sOFbqcJrb5q-GqY=?LW2+O~D=-dhagz_BDwlJNH zak3>K^shm&d;%jy*<5yvgDFa^*#ITAEsI3)&=<{oR_|P@J+T` zU@U`5!@B}$*cdy6N*Ho(7(gYoec>(aQCk*XVjNz_ zT+T}~gHirGk{|_-UEjNvX$Y~%MWO8KiE;*p*0f@9U@aT4U-VReGTc9l zkR806Ykg80Mg|y~vxo)EMo5eVirkeiEablwkw?!o;0HKhiX0Fg_RH|udttYnY#Pcn zOK_p-aRW>~?UF}_>{IpXhbu-cv%Kv_Kvg91h6O3cEvSTxp;aR=oEneDoW8cG+kw9j zl<%Yi1gz@)Sc^U9R9LfX_a6~N-6ekJQk96PVK@7dxK>_k!+07~g7REY%e-G-WlTbvT|96khQCT`fW`1QlQ7~IH1XeIx zYy^g16(!W+LAYK`5m5ahK@d7VA^d!t3I(g009i&ug-u+)e;tq6_btv1?6ga7G*}k* z?>!%^699q9_jZ{umY4zCL9OrYBPJDH{7l0G+*aO6kcX3tMrM17JBF|d$p$PbtdZ%m z{$!5uFd61CgITAptuXw9ALez{rf#sMrC*w1Q`lOD$^z3ZXJTHcZTrgHJ>+%h(;bwP zfa@Dqb6w1hue7_H!zy4!PecqAT0u=P?NJmVmII{rc{^gW1fKgmnur-+@3-PnU7%xI zMZ%E2h|sBMS_Quek;zL*Um7VlK9Rf$TX5ZK-67HX%_%`Ca8PT%CU1Wwr~))T@^v3? zC~_ct-|yW+;d(9YPB?J;xP9C#?J$#Z43xLQD9ln?wK!G273nV~N^8zX@#1g9bz?-? z<@`A*Z^L>}n0;_rRCh`}>HoO)U^q|UJER6aDD0ZAY&|GKULfiz3l-99V?wt2oj{>! zmsOfA9d_-;Y|yNbYkZp*Pb)(7~t$u zKh$cq#l4e*67k@tirfU7+UnKi-91s)yRVwsAS2FHZLkw#98YBt``MvM9Q-@s9KqHzts0O8? zKc;=hKf!C%%4TAZ&4%p>RTRtkdjM;31O^*-Jn&34qgDc0N_)gFdJJe~D#vxB?gMFQ2xQByDrK)yeE?X!kW$&J z4ZxR!eN495w1^wk+JCJ>SFQH~6exMFR+D&g;k6*0l4fE}wH)xEk8Z=Xz)-r7JI~S6 zIHRsgN+;Bc7=O}aa+WNTuRDYil;1!PKdz#kHIEU<`jVE!p@{E{AE#1bc$rcmq-+z_GzsXuRxr)~c7NHp39xqExK=Ri;^#-< zz;Gw%jk9o-D+5MgyKF5d=O^;08)>ysS(})e#n$Ih0OBMO?C6B(y6a2BRZh$!QHvq? z`&|3Oey@H4g^T*gMVI?K^c5#%V6bCRsGd;fDHnZ4hL1&k#Maj^hJWNz5kRm+dSphB>Bdx&h#h_4vCeU2gH zKHq~MUr3KDENr(K9(3prwR)a01|^j4>gOK;+$M=&V$aC(<~69=0Z~245iHKE=z&>w zd~d1UqtcjBk=;+>rl-lwah&*fB|5#Lgs#d%u{nQ$=zQwW#(yArhYNHxIPeKtOp_sb zpj{#ln#B(uyG2%M)ld#)E~oPRv`n&YMb3*`@Hu3!ZBIvSje=mm*%u6b0cTb*q<}Q# zn{>dGX&61QU@*HQb4AgOZXGo(^Q{b=PAGriZIz+<@cGAeLKfYNJZHP?K6|iAm0_w& z)||=|K*2s+-K&=J-2cK&*^#>Q=`1{JIas%6l%HYV46T`wx54&!wlBL{r%&lCfl`)W zW%XhS9x(b!1-g5@zV)tjPj$-?%H-7St=PM{UDX)!lq8$;oz zri6>2T+0wgb&6X_Ixam?`H|;x^2YwHt=!%|YYd8)?O5ESZa~%PyS<&r_8cK=7;hiv zod&Tz=5&6K?jBP_3o;46!d7)pQ+Zt4udHrY>!fR+zUQri&MZIIGYIe|1)BD-_Kwzm zAng`!ySFbUU^@C;dZ$->VDXI>!0xL?GoW!T&9YbvP5w!2@0>s#&-ZQnI8T|1 zImyfs-L(|Aa+oBYPW_xc)NXkrEg~tkik)S0%-ZRYcTd87hjUep3@PW@tB9Q>w zw)Ts-3iTUx*PB3%led*Xcs~(4&iaz}jfY z9~rY(cT3rOT?AywxGiQ|iPL8`7xmv)p(!0MJBI$e}yl+meRlhu6oMz#7l@*v9`AAWjyGJ8S# zXt;82ddR&a&3>4f9**pRdtTT+?9CS=t}v5+wy80MlVRk~9a(imje8?8y=b!wV-C(d z)f<{v;}vXbXyaTPr0V;}guf_)a{bo<^;~7QY>VuSl>=|_IX(!kJI%s$0COhaN^g&4 zWdCn>vvelfz|5WD^F7HDU*m(h-2e3h^rb>}ZjU?i#<-usb_UhK$<>kC9@?+`%!3dc z<)o7&NAKr}^j}P+#be}aD%^qvkY5MrZY}`pIa^#A@2Bd`v)OaOQo+& z-@+iUuL3j~x^&gEe;uOIcYDKf8AsM_G#fAZ?;(8DEsUYisuj!(w<(1l8s2?L^Vl1X z?h)WOmnttU{NSl*5d~9G@^+Vp;gfHYcGKmf6o1Icy@;Us3P~mpT-H${qfN-yH!o*q zean)3TWXhSa|@Pvo2vMz3)8*i_)0u!cT=^xJel*Y!y^P;XxN7~1$z5ipN81Q{=4s} z=&lci6i2V%Ud<*q`GbitbO0fdah+oW*+a{PrPCQ4%tpQE?i;?v%cSunM4qlMo)6#W$+UkNBKU=8M)f&-B%iYJrXd3rXKuaPAl zC>{W);fP!#9$R~b;fTQkhSzTtN_=UDve&hSt5Vm|TDs@hf(nHiZcv0Mzxey_ zj;r8CXd3!BslC2l?v_h38?iFTBYo+w5Gp(Fw?+%W@+-9v4ETtxo#%nM&aZlbsz3K6 zEhb*B&g`Cl9enm1R!TP0rR_KhY(3w@6l}fPL)TZ`RiS(xbn~vz>vvU{!Ej%K{%9+h6#F7Gi~v9bkKN^_O-zXpQWa{Ik#E^CKWB+?M*oNJqg z*7fTW9pSSM>}>6c-?6bSkD?!L{y{to-Dyu?ZRYv511QS13nP>>gj3QZZ+2Jbs~urt z_G-B>7@iQWyo4a>!O*2$DzA`M`)t1rQ+9P^{;<~6-%t@ ztDSAy0K{x3Ofhbd(EQO_zVOq)o?BG+vnSC(#Z>YJlhqgAFB(WLB8_e^!{bML(ea*a9V(ZUw9sa#IKf6~ zRIk3BA=SPccCiB}dl*n}18)xf`&MaO(}p&#iNGpXa)39Un};jQggksICAxl>z2hGr zK8y5SlfmYcT|$0P^vZQ{WD8yTCkr~Aa!Ug^@OX!$J-m2u^V zsCaGR4P}S6+y!YHC})M?GyhM>`8K&NNw23|_^fte^vVNAG;fCWC zECG8|3u&}GRwTUybBmJP_t4Yj<_D4LawyHqsG8LSrsevSE89%IfZ68*$y-g&ARhZ& zh>i?b@`6dnuQf?=kpdfNIRZ%BA(Lov=iBg{)*C1}<(J%U3$2rZvPYE7y_Ze{;pp1i zb919e<78f%xjb((s=187d;dlHX3YR8tkg`~*0e zE7~RP;0_hR$aRM;uZH$ zMProt(ey=SdU2FvIUV2FVqEp+6YWeCzR#sj;Lg=E@`cHc4>z|dE!z9hxI&~^MPP5x zB=)LZEDE8)n4U#OHvQEoYQc-x z{vk(5pRi|oZjT<6H!5zKF-dmxA?PhoRZYOQp|k6n6I9h;$)w* zGz_WD1(LI@0@ZZ|d3>7$5TOC;07rHlM8#D&p|BZ)*9;Vk0_Km-SDXoodw&|`> z33TeX-JD^H>ji_=wZrY${t1-1*`q~_!C}wQ1H4{)Phy&F%$Y=OWd8u0WxGxiWmYs+ z3i>7CorE!x9qH^Pa@u@wKSd-R>}c1=AX;@O^s`Qgf*c_nS{Tb;uo+5GcQd|q;e-sL z{^2{l)Uyr9HO|=AT;px?p`1>-E*eF$j&L>gT2Ia8a;No3 za9-yQH4Y~M%I?DRsm{UJm;OzZ$b}MA@2Q1uPWvq$m^@OPD6Nuvg1SN{Oz!&BXN2~w zk%{`j8t`F|ANT^y=|AXD4J+JzS^>M)Ou=f_bW;~InJYv%$KnJsGL%hQUq_m8O}(w+ zx(XNM55$XA3;RBd+38fJTN_9>O8sgdw;AVkkd#*a^^z-?*kwidd2PxF{M9Dj#AS&q zTwMtZ5ut$!!NKjFB$*A8S%1-Zn6Km9Uv4%8Avhj0-$8L&zZ~qMa=tAfckHBTqtpHF z&sMn3lYKvg6?60o9kx9WXp+7HKXe3Ncl zg->6mfH*t+;4a9T^@psKSKL56Kzwi5AO&B-z^<)`P1xZ2k^c&MbQD2C?6f-49oeo2 zH{eEI9*J~kEzZ>#5xi(6rdeVi@R`oEvmsq8f!gm`qC)|e?#TO-B&+xLnfY}6nKE4~ z_1o(8Ltj6|(i|~Niuu>o)0hOUY-NY?Z$M{K>%_Cx(j>>_+x1n?$fxO~hg_h;eBtJn zut#sK-%CX_F)qo(#$S+aD#*+EE?dShh>zCt6kkw^E^O(_e{rKzAow0h(iV;QgHVXA z?%7i(i<}WyND!QR5dWy?iz4b6BI|sw*wfT5hrxcGq5jSLYDM%!u-ArlFhk$7mL^P% zjB{huoXeUWp+GlK?K108O=8aCbHSROH%^rVp1%VoA-I8p+spm+j(DYP8X>2%$=zOnJ}!+^-wQ~X-mE0z`R&;7gJIP)?9Y}$)*#F!tE?6yJ%_Pai#Wi3-P zS}|S!kgij{Mg9CS2S=iT25qJ`xT(F-Gck?z?*Zh3kLbo>1v{~S+9s7DpRa>fe%W0~ zYxP^X#XNx>vtJx_t|NY)0v0`g{xQb#LveM>%n%B$U z&6-yZNZ~zx&qodVY%*mw9UUIRrp&&hC$Uha%`bj z#kOV%vd1aKWiGo4ef1YtzrW>`71`m2TzBscfW4{___>7_jP(#lO=qI{gzL=Nf)Vnv z>j}NOZ?5zjK>xgCfbdbTJJ9pW;uDX{&0dY&6}HpEhZ z3~D_SI-{fzZHj;RymfuuhMQs-V&mfiXGn*fy#1kB{dQG{Q= zRV04mm^M*9g*JQBPy&i_imYO{wIu@*QJ~vyuVR4mtZQA>MgCwmJ`iu}mtYYoK#sWN zn+#Tzn__IIU1jE?6KO^;Y9@)E^0-m}S3c$WJd=&|yvw2qIK7aaS6|zYD2;6?2>(fKN~E z@Lh*%!g&#VA@Yt$=?(|SNGRh)N*SU6C;!OI@lS)mC}L~lWNhQ)NX*Qh@=gIx3Bk;f zfK(@w!0F0?_W#o{q;!1+$4pqPBLG-9nf||8g??|{7^9}RJRa-bWu+6_{yeD%Dv&hHZuQ#`+C0#H3mh(gmb0I>5 zUP4OzC~`A7jv@z`J-z<%5;&b0|G8rA+V-}38ge^Y60-jd$Qaxot;t#0e`_)Ceb2c_ z>1yb1>O@E?NI&=D%1VC)$0Ss+o+&tB`x6QE|K59A~3&U4al4>A&3Tvyu}6>;03mXu^jRANx~U zIh~!lM=d{o<1^t%S3Bk7T#&dp+3E7ypVa}9t$IbE!G1BjHBZ~jurjW8!O3XB#eTEJ z+KD&*o35E*;QATLN}gc#p=8;|f~NI2jB`#F3z1->Cc*E87tC=-?T%bFD5?C>b0otx zwQ&y?F;a#sTphSsT?kW z>#P^@a2O6}?CUdYaEa`f2Kim}s;CnBC)5tHFto=l*c*|RWJLBq+u()O1Wv1xWE}tv z!fKKYpRXlc%h0DVpR+doS_4gcQ1~0fdmtce4avxyeq^4Nce{ZFEcuyDDfJicTNIwM z6S((Jb*4P}lrbeY-G)b1q{rHQLLuFhE!8|~9V(4XR)_qVQhDRYGMRI48^;uWO!}-%s)l5Pt z4mI80FrJSUYDaqihPk97?^QF&2iP;kBUM2R@9u z9!yarY6kJy^LC&3RgVbe6RIh6Gs#Op4C#OYrV6fMCe>E;5=B}1qb+hks?c2?R~P?W z9Nm&DioD#ZNxoK;{%D(AOvT%y(297nVw-$Y88p54ZGB-#f|rzme3+_AiG9N-*&Pd- z)ry3khTM>8$ruoUIu5P+lWZ9)Dg)-Zs(DXCAxuJM*Z?;Lmtw|1ngvr7YZ=IQ{O7;E z4M%3VWt1d6%bBDAPZhVUdowAN&t)>z6KIo?GQ4FnNF|EcNdkKeW%3T#phb>Jg1vkR z3sI$pg*7k=Q#&A@0&hkogJ&5cW$a8)r!1-~R5uleK$o{&BZey5#&9C}Apu%&;zT^* zMC6BAI~vd+IaHn#%3sTf84V#Q5S5xowul(xyhjDtqC4sylN3S%F{f!jG+^m_J0%{O zzpU=oz<@zl{C#<$UGgmeVu?@5yB_%m zTZ5tjnyCup^9`KQ=8W{8{Y#7g zKM4h}qJQm`f>-JV5!#D9x#U`to$Nm$lx~tkm4PVsidzh_@C)&TW1u+d$N%@_fB7UW z42_t;6v@}Bk5L#7;>Z_yI)k;IB>lHaXVA2N56t6quCc8}v{*FBiOgitz_osi z_E=tfm&*D1Z+JQYa=$r{H?~aUEL=EAt`29A9^rorpEI9s_!nJvkfZ=qaG;6*S8yPX zIlMe5TR?&YOpqYKj{biM^qKm<2e;UcwEkvAe(%sX8;wBf2m!KJP1w+MWJ=W?!UB={I`$4g)pr--3uE0 z1QHaef+CZ6zE$Y-U(%?+D}{h$0X@2@G?^6qskm^Z-Jqd=wL&N_ZTfekp~xWaeXRd1 z==AcOYUGsw)a3so)A;(I>Hn*&K*u`>ayVV_ulfcc;@v%*{4fgPLDksP!K2EB;6cTT z75h(+PzVnyoFGqCC9c2l=WkZh<|GUXDJXS{+MH>i4E~EUl_bI6;;T^t&HGoN0gQe6 zA3WUtwLt;lNG#@B)iBgi+p9~?RSb)cANk%!TxCn6XBLqc~E$Dzy=D@t|yC)_$-A z{fj01>EP=Wq2$LZ3P3k@g!{=G;^+!;2Y-}Uic6(lJr4~Tz z+a4yhqkdA!9W0vG3HraYG()i{xk}*U-n)q4tjEH+ah*AMOl^~YL~e=V&?waRTz~!> z`A=i{BUV8QR2_4EyZOQKxBj&qG}M_C1c^)N-$cqzK|?S8wfu<~AZV7>-le5V(gRe4 zX}WXGunR{_q+kkP_*c`3X&sqlYNWG&Rp%vkg+MMQo~f1fXiker`R7sb3kdluij`pm zfc#1^YfKB9BZ?@t1`6SdBT;Ze8@H*_4C+gvP*6iF&QpnF7R4iuRD)jq=k#@1I%jOU z;KMEsd#n*I#+hnat>*9URQfx(LO=pulEs2J$>eLjI+<}@A>_11uuGE+e4_EJP`v5a zM(v_&#N^wr@g}IoK_;NJPURlbOzDG`dWGm;c@_Cdngwa3ngt0ohlwRWgGSs6ez|Bt zKU}8W@3rzoT8CvrPeNuSYHp`G^@F}!R8S4nOjtE2aCI2_s}zJM=mY@M9X!-oAf#II z_|{uy1RApnnC8y}H7^Ev?Q2@DB%4_SnvGmL>|%IRDU{+=TVj0J8nK((WAd%i?L;2P zom@~?P5NtHgx?2BBBf{^`91u^^Es)BZV(p7BX2w5`o~Ap$k!rEyPl}bcmK5{2(A<7 zJ?2Vs{ptZExq^Dg4A#3*HlYmhRcR0TO)dy-FegB8WA&)O#Gfy8tQZ86-+|x;bdvn3 z!UU;5!u*9|kTNXF7u2TwKyAwJe{Cvn zDBNoL#=tXqrh7>(yf2=j%}^8&{)(P*zcnooGyj!G#)K<^hZQ~6&f^679~{DhnhK~L zdvN{jQXuUPsLurcpXeBZV}iQMF;kNN*JcFepgPcf1EX+lLI3+2Leqrm-~QMd@)xZ7 zK>)(V{}*%rK}iRX6sT!~THY6sGVCin@IQF^4|B>e`t0UG5CIZFN&kZgyH5zP6uWw@ zSD02)OQipLV&4A=&;QUEbmiz#f&a1vx@Cj18q^b9T4k^k{Z$P9Ed`5!j^ zgE9~-L)ZOl4S+CJ$KP87NcaZ!i2K@kXA8dLg7Af~HY|Q)1kPJ7rf#T#_RJ$cAAkJlT~vWF`#j`@6yw%Rob6pdlRU3<`osokvTYB$ruYnxkBO z?EG+(VfWC+Lv<3Gy;6Phtz09Nzo{Oecm&M={D~A9D1a`+V~>>PpjxVkGYX(MV2-yy zEs#M-v`}G+H~U(vU4RZsa3-2@rbza5#oki#fcOgXzh(|e3)O!P!KlTdNa3KNJlV_5 zurejgXxqQsHiI3BLFLCIz=QC}EIBho(xN-s#oSjZ0$vmyLE6Pq<$HHLvUm|@F!1vW ztp#e5%2%dYF3;E0wYYMGeLhho_yCOp49rM!jNqvXw5v@w_7fKI7J`h?RyH@rLHXY> zS4ZGFa71MRu8wS75q_S0nJHo*0CD*{NLI{(8fUbVB+apw)7bKx645&TUMqL&vwq5( zQyv9v$SdAj@jmMQIlxd(?8An|TE=}&=nFkuDpVzy zq(#rBjOo8c7K4iVQlBP80-s4yGG2d9K7N&PSdOHC&Xy14G_vNGIDwqZ zv?i#8oqZ?^XGBv8q3jxU@d%8>s9DZYGIb00J^Y6fC1>?-`NGSsyfk7e=%tH)CBppRK7)Qnta}i>+d)XR*lkN?QEaXyx(Dv!srP z)J7Pak91cKT`0PS#kVs?C(-HHl;+TEhbf$Dq~T46|9&nW_N`X?^pUL^mX>pS*E23^tYM7bK@(uHLD-`&Z$x~eX zwY=L$i=oG#yiSMS_PVx{j7ib#c?N49#}?(?=dn+JebP2-hXZy2Tt$hdH~);0^dZl*mCsi*dw=V#Fdh`4=$ve*<9-76ue7F;LF;73E4l)sl>D)A3Nbl(s z>Dp;2Znx1<_YU5=sk1y0fD^w}QM>Q_IOFNQ_Jc?N!@S*CoQ@CAgC@7x~BF$Fss-y$wdK8={L&KZ3@ouU8^;ID&nRE91H|13>n6jGzxQ zvugXpOn-`@67QZ=ZfrSFhJ@sJGeD@aE8}~fE6TQspS^}~X8u{kK^bwl?F@VT1gM(| z2rJ^>&R1+dgl#h1$h&B}CEa#MD6O?Ix)~JTkGXtjQh>!h_87~)#(f7b;Lp7LfY!JZ zn6dwLu0-n&o^9B8*Q1p4=@E?q9L}e!eCCFYc&M!?<*i;q3q5hxOb8-|Sxhv;i zO=ANvUlfRXX5QxytE8cvdpke)oF04Gi8x(2K!k zv(Z1ShiJcAlgm;QzvM^@a)3&ne25{eIQ%`z`V;CGaKy48rt#I)fPCspzw{<&_hRX# z`i>^4NLK=7%+-T*J57Cuj}qH0?>r@I&r!#Ex_sy5vfukKWiWo8H%$oOSQF$GO3K zTf(y)fRUpG%J?^PMera>|C+Ah<~Rx-`!QF4zX>W&qW{n(Nlvl%DIW8sE0I7a@Njwg z@Hl?ps*u{W@ArM%YO<>Rf&SU%!MJdT+olN?BQA!O?-xaGn7jXZa2%}lx}f*N!!2wj z@Q{-OygghB`rMsg-Sn0`mkbVucnZH)2*526kb z2k_Z5tkGTE1|91k?bf?Tc1bj_l?5QH9VC%W-H=S(@w^S7SA9o#Q^%wrBy3>X1qHT% z5o|*xN;qarJ{NZ~Myai}X_<8JhlpmWaPR!(2)W;@h1{nReGbD4tt3KEQmkME`Jf*G zQ}*4bT03P# ze9?X(dgRoJxV#~NNVv95)49p{;8SWUzI|e#LZ0g=Fc*Z^AVd3|0AZ{U< zK~@M81%@ETcY_8cq-x6nDTc$*nN$vmDEGc+5`%st)IAtQ1LlZ<7LQgmX(-f_rlrMm z{#Y|Ztwyi_60B>6^BtTz+Ea7~@57EgBI5cSQX-sSaqp`qExzxf5AjRbL^y|AW#~`i zF;RqIvOl{08E7aUuvmUDGvYu}0?m)T<;=f)^i7iqgh!hV>h-&A2j~c^5q~kPMZN4h zAb-0JQ{$Rw9U*>M4r1fUa+An%4%^WoO;j~$g7l>4K#-R9xj(;ZD^VcAdL^`QIMrs5 z=R)W-hGV61@bMmc$qsik7r@&l+SfVX^bJx!Sl~^moBGI;qOtO{b_LPp1|->1%OL$B z6d9aC+!kDACdPnCr?aQ!e7YravCH8=!@=?1@PS6Um_O!l zUWoNU((>7nDxmA7GRKU5%2Q}6~knDV*O}DT&a9U`0Y=(WdNpj6r3HV&5WdfKWR~bf2=uO6LW9mQJ9-5AeHGgVtU}N>>5r3U@RIY#* zrmzRp)TYbVibajn2%N|3bgbfK(1U-jG3tyMr+r-6W^S6OhS9fuLUFBq}Hl@hmN1^nK642Z6)b0$IncZPn$RtDnLdQ>*5H_Ll zXFz%IBTc{JZxbgBHk%t2h!uYHWV;EK1dMiP3&<~jRxrXOXw)MwSPjBG!KN~XRwKG< zWs^;@6|k%9ke>nyjeb3MLnV0PhaI90$Aow(=ZwpR%|RR5?)@0y{@u)8yL(74%0deK*#a8~mDt`*T-H#G z%5*27w`La;J|Za7Fvp3{)8{6-r8%QRwHEars4dF9e1h?kSVR$EzEF8p{S<>WueFFm zrN{+_Hxqh#HsWlVW~jL+|8>}`eL;oPGvB+WOrl7BWE8QIY%ctklK-?GA@Qv3hynPz zC{R^o{?sPKqCP4-y807w;lT-^;%b!|_Z%|H|I|dA`(ba!P*=$!#)Admr807H%_bL}r;((6BtSAZ7|&!Sms^|BYbAEA zITyutw?hOA>@>3%6x|nH_`#TMevl@#e^ z(45nc)%$R%`w8RtOl0`Pwa*Gt>H7Xo77xaGU-X+4s(Z2AxN*?%OnOV=8?QQmg1GoS z4lGMDWC@n%M!5#6DrBiVH!H!=A>EoX1Rhq}27JY{gjpiu@nzTkm$a|t*q)^LR+-6+ zp+oju(34CHD?{0jtqBx-c=^0+dnFwK%u0x&i5p+9_f9@Cp8bivRet{8eOXLBqnQWW z((x_AY&EQo*`{D`q!V=&%MmGnh-3D_k8fvu8>qxt2e`fqypv6kk_Yb48+Q|R+dC7# z=i;1h_+@-GR_uTOn%bPbmlY^+ycz5Y9OdV@swK@_Gk+5}fZd{@-&yi*;vXLGYbJ*a z;lJcbFwv%$MP$#8!V}p%oZu}gy0}6w!GKAf{rM1cXub6rwMc5J7jjJ*$PtN{aN{lg z-0G#3+z|PiKt~8}fm0nK%15#G?QVKhF|eA*uKPTEZ`$R4c7dkmPpFE0cfYTgp}{bJ z0}=B%#?z8ou1oG?>DEKKxyhM>v*8jq`m@<__6gRxs#+X|Fo zaV6bf*o(|i@HQ`4vpB*%i|#x4eyv~c*-_MW$^ci}80qs3A^Wxs8u0P+3HcyRq#|&v z#;mLNd8#dU{#@6<5Q?|Ce_gfP_5i}`=0)v@Gu}?2B#QwnP9So1$>F;@Z8%uaN&Z zh0M)XMy-?^577%dJVw=qhS~JOZK-ODQ*?^1NQ}tsOe8*AFVmtc(NG4YFMMNb)=@7F zczND|7+<|>o`hcbtsk%%YJ|=k+o`|G?$Ox`W$Vx&$KQ1j{~GqRUqp6xw8Jj7P)2J7al}Z^p51mhb&;(gGjlA+j%|`57oIV8o0t% zou1shdyI~v5Ed5`$x)0ksXb+%-NGfRhP&9S#Lu)^%}wK8Scq9i2CsH$vbdG!{K?e{ zn_X_gJ40FQch>C9S2Ii2p;|qc^Az`p$h)mI>SM&+B@PHW_;{%L^BXTT#`Ho7-3e-e z&xc@+$IzjfSXxLm=}+=J81S)4KgBSKEz+92e;<(vX6wxSjp0qJ&eA}70J|dx?KpV5 z-97?^4kg1xi8vaCkAb8fSktayzmz1JoQHorLiMAyNxzxf=KNCEj$1s-WHtozA2)LHG;h}9in`Z>NVi1iXxZU#wE`?FR z`)R3VvNi#m*!~gIMP<8A__*PqPFji<`^J=4wwG6j$s63s*ZYaxzSAQ_hFeA%H|F;_ z)ji_q4zJ|bo>6p%;AgS!Y~-acly*;}LS61YK5l?dvM1Nw@$Y+ud)xIckLSy^wn0~i zmc6l-7=*VDZvCov6P~l&=W7 z{$OI+Bf)SZF|22G?K|m#478lB>aB}J+J=jJNF5%J#K+q!d6iFCGEtY$z;YJv`aKla z;?e^U^#A5jS`C_PpB=I{UC-k^mRqJ3Hr0B+y?ohuo}4@kf57tzgTBz@7BA76UZ}UL zoK{6>Fle>fgT=+aD&AeRG0C(prLPoU()h6203DNf%6cxEQU11E1pBz?xn=WsSsBct zUM8URVierRL$1z23gC$#b)H56Yu8=Ub4Bn6}!M2f#K-BCGWud~Oz!Y3M;4tKMEhhnf zkYRWwSGh?rb|&L>8uQhD;62ulIUn)PUGK{I-ypBeOa#yC<9Nuts(}P=x z_u&gs8dVPS%+xhKp^qSeTNpVbZxq2BsYE^eAc6*f9I`JDl!1+_ivtGiWVI1A|Afp00w?>Az%;?Bh80o~12}|_AACNB3 z{s&lWBONj4w3d&t8AT?;Gs6MD>$XY#z#s=5@t|9*KjU3!s3MP${?)+j`S{v5oc@A& zH`N)@-c#&3tQ#yWtCP_BZUSg_J?fqv_$34;GWsjz5zNLQ3E`hG1^02|W^fVkHhGUC z$qF@S>WwKpc}QkxKC$^J@%JAASESMcGestpKGuMva&e!OH*0gEWoj)_J>Cv0O}iY| z_~n?#2PHc z$T>Ib7+Hg{Ii#4bXP6j&eTNj=^9XI?-Ra{7`QQ4Uz516fdqu3{Tl!seAMeuvA5hKH zrT#C)`kFzHk&!uhHA5~O`1&azWc@(K5iNme5Q>d%;)o=!v@vlA#%Outk^@y9L2b09 zY9@}XrpNSN3Y$K4%EXl$hozY9vLS>h>ayTCqTpr7_XiT3m>1}-oYdN+8Rcy>1B1^fjK@@ru^BvMurhOS5g-oT==r%|n6I;6*L|$+aL@c2pF9 z&>pYbpcxg9HH#3#hU;f-wCt>a#Yb?&KXZL3f}PJ8I)?VWdX?X6qWec-G%Ab@GManU zbRvG#u1z^ zhVg`JNZ+0WT-U@#tGv&bn8Aj@W>vfBsiY!OuqVGBnCW(W4Y}_FpNjHHTK~F)2!Vdx z`>?V^rs!DP;(ewig$~C*EKHO+7uLbs*;zGQ`PiJE%9zE2BS3rE`bk8!R}Ii8Xq+#5 z&Me?Lf{k$OKvvxDPy;ArI%9`J4bTj2fa zbfhl~H>0j&yxPX050bj2*Bs>NQ!QN2{ymSVb#xU8YQ7D#K#ctAlu!@IY!kzw+#U<( zCG=Q#eoPrwgYW=n3Oot^y8a^~)=ln!#m%r8fv`?Uexs*;b)a4irN0C}wjT(=F~PiN znMMsps}n`DAEqIf9$^d><%3+nWk4R_%S$R|61<%Z%~U6*-D35X2qoU9;KV@xyy666 z9|IqEF6Rr6pgvWNj*N1a+_X2QcShPs*TCIsqCc&MUG3DRsAkIue)?vxVHRvK{Kcv| zI3trq?Q?Tp=5L3r*IDtIx_l7GziJj)!4S@Y2wz@7qp>fEFL@xJ*OSLh$eb@>4=hy( zE?6HMB+l8p3^Xs-R18HZcsdm4#7Z; z&uzJViK3kBE1flzENz-1_Xjqm+QKZQB3OTvI`!QYmd%L3awUH2Hg1r3Q7RFCxhiAg zj7q95EBl<`NpXr=^$n~7;qLIBj4H?V3Ed5~o%kIY#>g@yJ^rf?G<_Q98wMXlSN|=6 zc<3gA{HrU^Q1fnf9n%2vV6(2AI~HJlCTFA+~)Pu`R5>hTje>L(q0~8?n}h_S-YpDK-IF#h_OhFw;N&Spn_o|lMEAb zhvtO{CP{1Cs-?WP%(NJ^<+{)GB@wdX^W4;tkLy7(!p6ug26qI1TA9b&O+{hbgI4UE z+#VrIUnv^(dyola(^kKx2^S67)3>A|;S}4CQJYL_8FOxb!XyBN(tWe7zUwOgQ}w4y zz$ck!`>UFWV|;sfIG=Ld!790Y#YA4ZuCHaj2kiyKW1Tvl9p~`b@mNn@)kZ7dcZkJE zW5+lPDjPVo?Xkv{(BgT6z1PK63K8<<%gfsEL@AI{0H(!knHF*9RF*MXu*zig&VY(W z31jt@UADgobBWu!xo)X4SOixsN%6f&L^yC!i)HiiV_|jA>fKQ-Uw+C+OfwL^_Vtyw;P!~3$OvleqtB@4Z; zvc^0!!#2UdVm7xZpt8e9okC_(JpvbWwKa_*%>OQSJQxBbA|e| zf{qG?&OxaO@*W6)UYMwErqu9U;o92S3(M}E} zpX3lS#uko&ZDb>l9^7f z85!;+mcZzj5@>}8_y^0x9nqu7ikr&sl8&>rea>0`M(9yzJ@m5kR*zy85xmrE)Lc&* zZ3vQghjKE(NdEl|;ZxoqRUM=k3n9<|C!nKXcLd6b?Dk8ku%Dh4Bih*%;5F*C-A#JH9LYFt>f$FZwG?6y?1xuI4wD&wqZ1P0DPEUk6Z;A+VuVob% z;UK6&0knH zn#?jpf8H(&3Rg+3^bs56qGinK3J+#w(GlV3A=Vpih6;6x{K0g@!9_$apAY^4Bo*y{nL|^dy zO2TIkGYwAJY#_C`2wrUVS%7`A+^G_y?^ffA_&1-;ZGjW#GHU`U)^PXq=dR;{G8b1hc zM?p1zs~QMH8bYjZjU4t8(#rFaHwywO*D7d={>?j7z!*aJHJd8^_#GLGS7YYra5XbG z5X=`&IIe1|2F(}=q{zIApm{6!gF?0I@$SCtzWOG4EA%4`GZA$+(_b}&WRn&D5wmX< zu}>p+9t*NT#+$v)NFnW~(W`nV>C|T>2ivK128$tD7iy|*$^!&9$yKix6N-^km|y%# zpd;i<2DblRgTRGjaTwptEF2u|jrFbm*Vck7xq}j%37v)K|Dq<`|3OW70Mx|y|KBcy zmE|8_3^q0{?*H<|=~Nm>;46^Rd>)hCvoz5I6V~-vF03m`^){Rp+yZbq9JMW z*v5%!sZrwmS{m``RvoqEApE983|F~5EX?;pdMY=v2i{AP$FV!XrY_4i{WU`8!|NJB zo9Hv|<}H`Qvs{I)_O7+Ji?cP*8FrV4Wm9wX8r93atJd2h%+?c+a@3F2Yg=9`6kx-n zE%qU+rHh~Eo+r&_W#$TpCVb`wU5S6E1HA6}f8Pav_QVzpzQ$_ILY~k!GnA2-Um*@A zZJ0f~r>3hpODBX{MVTF+Qaaq3KW{_L8sM#T5}OpKb_zp_4%Q}Sm*jZ{d2<2#<*D#M z|EQ84HQ!R@ein zcx$+LvL8%J+W|I)^b*zmtx#IOW@xtWo_)l)z$0QkN*IlLJY|C89E>awv&5J5txWs3 z!gCdqDM6%F{Z?i=HxB`bMTNBQeE#kXZc=nyy^y1`h;OZE<1BcD88`gcx!7w7n=Q`< zrLXEDitgvPlYUv9nastXOs4Z8j;0>m2Ajk+Rp!S#E%?1@N|{-A+KK2}XEj0NMW#!4 zd=>1q$ziVmZ$cJqJX1cWskVQukKahJc%`Z;T>(n?rVQe3q-F$(Sc9BjszyUE!cr<3 zL~0Aq=g&3Aqo%{iP3Jr2SDacmH+WZmG8NyNx}4Mq=>g3xx~)^Nnc){kN%-7crwnjN zMZZwATC;vvr*-t(c3(Ntv27k zbHjYAFarn9cUdD|-^35{OjT|i{Kh02iNSwQ**voPc#@p+)3I;G=G-~G$M;6Av+{(i z2K;Hv`b~bKH0>=;y2Ta4xe>k5MdF(S`%Jd&qE#NGPpdH2f+q8=eK~?n!cWu`d{M&W z=O0PNr$C4kLxyXEeP(ti4U2_F9-mh!P@l3FQWduX=Ez6H+by^iP02RH z=71Mjy~DoiS+YZ6R|Wj|-e+E^W`}29wM}tZ*(;hD`=F{{cZoM1!Mmsz*8;#Mc9lB~ zi{*gn1=T;M7a9XnyQSP6ypgW&*XDOXJk)M>Kk@AzAWLWJWg+WK%S_6SeCvGzT%B`fW#b#g882)(0{_>{PYe2&G%=Z z0SpCD(OdpET{7?TPM7p9Zt%Y29pS(exe5PAy;|wf5cD4@yi&8r|488@J)C~*(f=BGB>H15KDh`?jh-lq0Yp!X|_LMm03sOZ8aWMZ>?2)X?W$@s@TbYgn)bt!7GlkFv zc*YUp>VTwU!P$KwuKaA!; znzp$5O?}iMMA*#kib0b0xkw(Ensb`=xMZc!e5-}vCmS&x`87j0wbMx(c#0&V4K4UQ zIEkt_;=zzHs>&pB${+K-<;H$sXhn=o=p|956$8rk!KziBreU9T&{D?6<*@U3V6^>UpW`I^ayal}fJPG5;* zo?on^AA<)D5Xp;UrBJP>%&X{M;^>Fe_Oa1C>3dL$)iFni^ndOQjxmsWI}~9_caxsc)vMnULGi!e2sp!IH0ynMm6zp_d7a!D?rBtp0-@0Mw$-fF+`lYA%9~+_gEB~ z40w{WMgJZ45fqS7De91!mDfahKxv$**Z0+MMWQEe>|><-M}tUtKs+p8^9wltPZ^^` zb3o*AvH{)^@#XPDBJt&IM7T0>y;dA|!;HUCwAn5d90hju8Ln#IXFdjiJFz;2FK(v8 zDJ@$ZF0s7|qoq!5FA0&choFYy{3bcsyVxj0fWDw5Sk zWxS{e0AMBlz?uBCP_j$0GQD_eBm!vAt)>(<&SN3-@c{~nyTPtnp0f&CAYr95ThAS_ zheiU4N-CHWAm1Y2fhBWTz70zF0zx2^zrm?l9t{QH-ayJH`rL#??}B=%tK7(?kzine zi1Wr7|MUtJ5+bj12|nbX-X3D@y<%}D9%Wvi={3266hUU zXOP7-jDd<9!9Tyqww}-yD_o+Tou;+#b!dwEA$~?IDrp#zhC1qt$*B?~ckpCgRAs;3_a!G%6 zQr8zaj#2``3Y)aWQmtM%5~TS62#@av^NK4Wl}7L+NiehK4upx#>+K^E6 zSP^Ohrm`2PC)sM?sqf_hg&kIvSBO|&!8M!UoSNO)gMm_lv z<)g`CoB;~MxyGql9@O-XL|UF!?xZmchLuC z6M$*s{EH`ROr(-wL}a3lvRntU{Mj61+@-Rhm{WbPBu0}$ywiF`5*%{|ar z?)6Rql;Sf$MV9XO+49Qz?&n7VHW6CEe%R3~pg6C0)&xiB#5wv?j2BReUcf9RZPjNp^Fq(1tat733Pd7xf>BlFG zY~M4`e@ROD>@3$FNQrdV0)V0v8JnH@7zIJ^4lqD>TKsSL?|(;|L5NQP(D%-2HrQcP z;r}-rIRn(_;yXh52|8BhLm&IqyQ|PUR%*3TK1Tz3@7-~JfPDzIB(Sk70I30$RRExP zz~Izx%j*aj$h;$fP5;63=t-Q~-feN_-x0sT4&IfP|7A#lRPg}R#0uae@qirshdN=u zQrZZQ_&=!vUOiAMSk1DVl7pbg8u>3j-YLlsb%G@*a#NWg>$z%@Z1o6Z-3Yd|Y{ z$0Kt|oKlwcdkae}+usQse{+lgW{dx<@&2WFefulah5MhNxqup?)VIBp!c(8YQ zh{{X0bh^lM<=F)2Bw!Dzn|fCc!QX?%2zM_-kUm8c91Os#vAcLRCp1e(%Xoez#UR`Q zZzo&=eaefI`KoLwcShBe&hNXzd!J*ipx#BG~uU;M^&AS`^ zX;lX!af=}YPYW%GFpG*N6wf13wv6IOnF=vAaA1Ly_o?twEYUq#Y~cb+G?IZ9n@*}s zx<@qb5MDZts?hA3Qp&KBj8-a^sdT=LhPDf&6~o@t5BotnuS{tc0h&_rTczzp&=96{ z-k_#`$><5qCmeOp{2X4DkrA4*q0M19nY=R9S#oHqGBvt2rqCZ9(gu=>feOJ+YGO_v zi9psJAaJyHt?DTi^WR23$tgFh7A8_ER;uCdu`1pcLSU*)Ga~DGFNs!O&c>CLB|3r( zt*FYr{hL%7Vr<-pM8pf~k^<}E6E)hSjKD$XVM`f5@w52Vv>ctvRZl7TQzd)Z51+cW zPh2qP&c1rb+wZ3Ty8j?;Unafl4^361Mw`wwV*V->WNCjA5B;fhE%&8LidRN5jNx*` zFRnoGv0y2+M5l7JS|(33nRROzBs!1*SB+ItVqJXIM)e~wCz(Q}kRm8c>O^_;KqgMJ zIIcLo;CKfDbN=j`_X1R=;>+^Ki#G--yheqnY^jrlvfRnIg2m!9@O%#bS0C+D&(*z0 zQVLVp!HE6tgN&$3rmFTX%P-$z=P6M_w*}ww3Gdp#bvKA?zpU)oo;Nq&gVwe>`}56| z=wCqBSKiM9W62C}w^xT}_iO2D**3brT{i9xE-#%PZfiOoWgZGQHrp3;&l~0yfPZwZ zkye*C|Hxc2m4p~So}pxua|tj#(~Y&GfL7Nnzr|+HO~G1yg!W$Ue7Qd(*4Z6sk`yiB zE=V8QvvTDxM1nV=cC$pt2DQZJR<(e82n$wBr;pyKK}(DAm(fRO6E$M|>QMNxCO2^M zY`rwh>V;zj+s`EDB8nxrxzSxJ+)fx!k2II*8lRPiUW;6e9G%j?^AU8R-#T3D1IcaW zB1tyV=GG$m^vmiqO%u}v7Y>Ft0S1>Y|I29`SM_G6>%-$f`5HC=S%u+I6RoOecW@}wqe|mwXBap7Y0=Kcz3zhP%K<}DjaK- zO2D%k@#pmp*y($hXcXeDt<6x`3*ya4Qu0-wZz&S(5`hc9TzU0W8~7|mTJU!1%ZB`E zp@-|ro5~#D_NJvTK)Hi`$h8=RQeVzCSP$5-Z8p7qTT?7bPX*O%wqXe z1@=+vV-ZIpEFEg~j?e)$U3E|AGJ(f&%)&`L7xA7_)0V-4SrgYq^Ms=_$Di$8BSxbB zRviT{>hDta)|X`y?lsoB&2aKP`s9g)xeuOJO=sW;dyiy3<)8+05A2>^D}R@#to6$# zhe)T;O8C=6Hao;qu4PJ{oI_%7FaN~FHKrPcfTc|s*O^|6l;UCQ=U$4#%@fOpD^BxZ z3C|P!GnoyV7Q=oy@U;qS9Kj&6hi=Ya$|eriR4)u$qOBeF4v%D3S?UKl-1F!zYDZ#% z54RJC_%HAae?T&;50rd1_}Mt?$a1drNHVY294lEaDY6zc;nro!`@4(JQsIh98y+gV zCDzPICDuo$vBo1N4a_QVjbmVI^dHe=SFEFX5U;}2CTsM|HBIXA^noDgObK{RUy;2psg(V1p@-mi zh?9y3l$TA%i(nWtugg{($7u6r2dhM=<2nWz{g-)>;(|E2{tgf=*?e<*QOeMHxQi%r z!g&jRKxA?LCVG2GRQ{XsPdJ?l-HG0$BQK)&dP+yT63SS^m(t0MMaSio-BX*N{Qg>g zrQ4|!)J&l14XG#(xO4)hY05bW-U0H_wR8_c>F>$hsYV;fi?C1NT{+A!d7gEx`ua&b z%{5^IX)}j=wdNEUWJ6Uwc3a(-S<4(oGls1I!hVm)eONv;)HXEq+}2F216Qbez@J~7 zZDYS{s-#D0{-@{{mQDvLziqD41Kntm83Ku@(<;d2EJS*$(pR*QYg?rUFNMWa1TM-h z?!Me&QMyK@w{Hd00$QzzK)!^T(KY-|n$^Gw2Cf+t)!{d{wli~7zCyPQ8|AT%6CeJS z=uBD}gz;Bi_n3T`)q1t3RqXvSVLl{%A=V0NVx=Dpv zIaomL84r#=uA}hPWV`0GmxvkF{LHBXXf2P#=wA;7=sDcF6UTNils~6)x=QE_>)@5M z|K3M`Gvp?pv`;FY)c!hB;w+SU4F3un?qK4sgD5RG)v-)z=+K%zep!oOV&uNKZPod( zVOX!7&&DP|=#yR{GxXa8nK?Bp?EG;sE;S1zbChISjZ0E4s{qY+dJLhp9fFS}$R@Dl zzaYiuz?O1c3YJ|h2OL9wF9g0Y>G_?n7&V_AtqlhcaV$9r<~&(Kbg5vj6uptx(uZ}s zvGfxHP=r)_r-pUDlCh2l?V}q%7Tz@Ll?2-OdIn|Jd?sUf>hJ_}Pe4^;+5b8c0fJN% z>)?*r|A5N94`W9YpLZyOaB%Kw!|0y$%yzCt_y?@fB3chi!ew0Mmvh6MCc)YLHMzTH{zP2T=tcvoTxXSI| zA*dI&t-tjHYwtk*_IknfBIcEf*dQFOqg`k6J&JfjgBi(Gbjlylwa4AZPcWc?VlWWTf<@uzfXsZW=E>K|P7jT#?Zavc-i_alm> zVHJnqxJUW%#W>f3(#ygytT^}Hg@NBWP-v^ngrPfV*2OACDYYUoyTttw+yVqnb%MQz z;YNu^a1y&7tQbh=p=ZBqzjue1e*sI)m$_Hv~!#{=GahC|P4#;yK!}9ZUVVn7+I`tMM z6e6;}!U|-)`dDyq<*gdy6^$Phs}VC_IC%7rDQD=$JM{*B@Y=~lXEWI;E zq|qf8JaYMWiZDm!V^Ma&8K;7--#B3nb9W|pgy7$C;vBf@V-y_njC#Psi0BB#_RBB6 zvA{Pl?0IRB5L3@Nq;s1&1@931&hIgC10WZ0E`(|ItanFCZe@IWm_JqU^0~J09`d+^ zdM3t~zB`q7&*0jEbJv5Ambf7?PAk$8=G|J;j}g@SH8)wjbbWTykFN|o9ihMb*d#JW zQWVq9^%!-=QS13(7MQExJmsrDZ-2cYBHClxCN~^S@J-^SY=y*1=$~A8p{Hpv;nN=^ zRw$6YhMrO1Bc6YGq3)w+FP3~7*&hMZ&mXK{YBZK)$?s9A8@vQ@HF67n>%-E#n)iP| zf*=m@B+vsJiA7&f_?&v|vR)Bdc;||8;A&(>IyW`E)&gE0r3r3?_xT5elJ3kOa0dA= zhA&O&A@#YaPJ521-6PAR%oV^;W)JOsP2U1L34zy!Bf)v%uk;;omq{i5Z%fW zs3K(Zx7T;G#a9nNDe!}=Qk}GJ(pOB%tRtpzI}n6|f(J{6SlPBZf88nm`g|{YD@nzi zQBM5`#^$2d|Ki@SXiJC69Txjy>#xc;bNwSOnnZew?2OKI7(GCZ>M^d_AwVNG_Ju~+ z?lE&p0vQuZ6(!iYV*l5Kn%4*H!57CcGELgc-xju>+9GkAAQ=Z`Rt*-)+GacJvV5N` zMhYEU6PUkX$6W?pWY5(G)wLi1R|`?A6@!8FlC>BSJX&P_T`QNc{P)w>(KoGqKN1bf zY)u7Zm^%(v1vnUkO(uwTejG{1sl$rFzsb`K3a2U=iEbrOz}VIcq09!h=&usrp$BHB zE2x`p0$u?NYLQMCFT$i(nwcC<>=I|TWo6EXpPqku1C}$*BXF)rSAMr>@HacuNh32S zEi5-UkY_|Zd$z8NrB(KQ_9@7vZqG%!=%G(aa^OhT%*uHQTr1%CW4H@oq27UZ?Pf4= zv{(!geKPy@#6=PkN{C;yCsHwcx^f0$@9I8|=-3y4w);d`-GhyA>M=gBm6}MM#i9ia zQK(r)7|Os+mqMsSp(h8}bFzhl3m2>lYmiL3w%ZpDq!d*!{k2#D?<_QumhyX` zaJ_8=i-&^cwV4q76D>%Y4jXTzkqg+RAR5@tA zps4QrLxCc)kpt8K`^s(j~HRKTw&BW``9?poL%$jm|LA;^7Jo>dHLn?{i8;u0Ra z5Fp2L99xI^WYLCVQ$2*S5=bl_0muyUHOd-!IB(2ltkR9Rvf!`|eK(e6ENbeY16z32 ztvla%PJ$7t&#nBlEmnzZ-=h?wjT91aC*Y}beyqO8XIwIqZS$bm1#(qyO}5iFkn^q| z&vX4D+BOLPb3)^F0KJS!wN8q+dFSrVtp%DJa)4vJu14D`<_p1KSV37!cQk`N@U1%# zP2%Dj_ck;jV2i-foMxK%o7WT+M4iJiq0BH74v7X;&aelI8R>g?O*|dJ;APXe4e5SG;EW?ya?ynsKS=pDAQ*FQ zp&{2fOHG42pw+q8i{aG9ha2L=RK)A~bVr3tz(gos#$mTn$mMM~F&ZNUxc1RNg4YFW zq6uOad~y^xWq7w~T5BuR(ZryawGD>BzXoCY%e1jKt{gIL@$D=bALKGoDNFF{-ZTU( zUHHa3U|{Td5ufNq+WIW=iqYlswf8>^--NdDeC~WCSqd%K5>MM$UIq(3*$2a}!^{t^ z{>&N1mFL)EV7%pcLRc9QXC8OZn){Z4IBLRo39Rq!3I}_T5ek+< zYwr-EQ9inPzM|iXYe70fDPjM1*$0ewc35IoydZ_7IaBUy{DhZz{ zu1DP5Hn1Gr(m+p%db!3nx0qie-MQ#z2n_?8VKxub;KxhML1iGShb! zMJX%;pCJ>bv4f~J%0x5P?R3qdxEc-tyC;Mjxl%*I zG~L`#aiu^OT&zRt9oV9zghfHlwY++Ub9Mb<-8skehFUlD+aKp>B7%PAg%>w|2@i{S zlaW{zXBnJ8vT6?9@Ds2xX^vpb^&f*W9>+_`5{?_;WS<_nt?*@c2UQy(*?RBf(Wx^m zaR;(%AckF!kvXL3n!D@kh0Xo=JQA^@Se_(x$1l&TgSKdYApPfXqp#cp?)u7R@Jbd+ z_JkZRY~8Ou`SjfOZdaoxTb@zHB5DJAZ}&F1?KvWRHPdrY%*l1U#Y~?^Ytst%A{7xO z`Ag_pxDm#rpBa6W6-cDwD_d8Qof5R*UO}=yH8mkh0?z{kHBz#a?R}>2s25)O5%Kkq zXJoHZVoN*ZC^xM=sjVF-HLiC`DY}@3Qj83WF=^iTIW@r%30UORn@wT8E!wz`m_I7lJLzgp6eHkC_}^gu>107 z!1QAdcG>29R`8;m@$v$tntsV@FN~}Wze-!EY>J5MthY4YT603e?)<~%%kBfV8Ek_o z_lB0-qBOfPD`+gPyn5#hV{0S{YPvTK+T-PNMlg1k%nUc*-`+&EipQ%{YVJKk534xJhol8>Z~#Je}8KcX;ttK?J1R5 znm{PhBi0GsIoz}Irn;yLLu*pta^bVNC~uk(_?jHSR)Dh3YfCidi#V~>W%$n$=;@y8 z1~OiF!gEN@;Vch)2Yb=fSxD@X5$p?F@sooP3e$>yl)XHH`Eb(S9UO3aV`qOQf1*UX zt#O87P%(WOi{8moRKDUGuc&CAhTauM$*w_}^&)&&vo8A@KGbbRXx*Knp(hqN$+nX6 zafN|?MFG@hSvz-z>mlvxCWYMu(QX{X@HUGRg$qf4dv9O-_B^ z0WIVpoZWB<#FS_>mNAIFxpjH%5R;;}0rGX(*Mdi=Hg*Rdx>odx4}66K^=7h%6(5r+ z7?`rKoXYf_Bh15jDP@-sc_Srki-uTU?fm7h;#9afbYzdd8;ejQ=vwAo``%j%PW4vz zdI(RCKt3eo#7AH3LML**p>>A)%jc|;PQ`$MVrj`;7Q(qML$PT?W1}f>)in_WeuIri zzM!OZlc10|>(d3^!zaHmu2=um*QD;jhCM9Ps8H=Pm|7Yug*28WIv`anCC9Puhuz9v z&RJr9#?)Jt-#fU7k(@iv4j2$>{Tm`U+Z9l}(`OX>M(K$sjE9>%!W3-b!F`B4Q8NGz zN)(~)I?~hler!0qa#d#D#GVA5;_l68h#_1z*(uwApiHu^f~)3j>zabK1BsaPhwVzC z4FbIxLtGejyw)+&xB;4^(;Hzhn2zh}OaB}rynPDclB;)4;&U(dMI%A=c+4{$D#D^^ zLljBh9KBtckR0`@QtWQ8BWt}R5|j5ah{=~E|5BYh@6SzO!lxJ&0_J|#FH~)AjI-Pt znu!)gCERj$3%@?#NsTw8ExgH?2Wy0djiv&E*srk0N6E8*!nu}QIbK|z?QED^ghNyO z%wQIS{p=V;XCh|ZZ2&!J7(2*AFY!V%!Z9vD-V!1|R+wUfMGN0ciR?NG7e%Xm&$u}-5rl6O$H>{-v9~kqmoWqumUAdWYB`G^tng%hOM{_Z(NaiX zD4C&h?}x*PND*ed@Jj_=Lq)p`P%S25w}!2?t>f{E%W5j}ex0+CdZ8E{qDU~jIpWUV z(31M5!)eAHgXu`(_!_k=8jjx-tBn?g$=)_z28kN0ja@Q@fw`Cb5>^yW@iPTS?G@{F z5LI z_UryDNk`bSLve#n-5c?oL+SKo-}O2)-3FPqMjGjsD+8PO8zwk@tf+Ki92|I3-{4}0PXHv7GS$0yzw8Zv%b|oD7mYtp+ z$l#Xx;Xy%M9{X{-$mUGUIhypQY{A{G99qqueOgfx;z`ZgAOx?GD}lC;uzM$;D_40t zTLfnY2dK&II0=+m*42r;KU)vTE4)QMe01y_v*!wn_=u9UD~7?ZMboC z;DWtDn)q#HE%@2RmH3f?O3s?uh?^z(*QnYwvEpBjpl|;7>M(9le0%{aJc>R;83H~b zTtPBw_1KLlJ0SSO;_5P_-N=?GWBu>rSoqq!BdYTfeJF#JW|F&&-CB$yynZcsxqRY~ zrWS+{*lw=wUgCyX z_)iCLUBrUz0(3NtXy}h!1>$YCUS? zb}JR2qk@QWg7khqD)ErQ?{SzD$?RVK{M1gF{bc_;aAcgQdyFhoeYUsJu1wIpA+~r* z1r#W+4YSeXeKC)*^RtJp*RA+UR$Ilw*R|qAS;s>VywS{Q{%0cT_^0mM zjWW`4N>8-j_5!tm88qRPepnP1Pb+n(?DcZQM>!DKAmzZ$N37nL^Jo}#fuT2DI^cyq1J|5@E1T|KPHlpFiNBXfYoqcVmw; zN8^CZ_QBh{$1@-sxwx3Cex}!}#pkZT={%<~PJ`lI!jqR57NX*u6C5)xC@f zdIlqkLTBs@&fsr2@<=>rop+}@5|woB>7^>xW{%RH(3K$m1}73_ggp}Bhw7DCF$?1{ z(7Ke08q36|&$i!Ev%juzVRt!>Kt!Ta7OyTeO}n1L#h zjI8E#-~{4gGnfq`^{)9`TNC;$ct3FtM5$4T65U+A+3xD;dB1`p7%?Yh*x=QdpPzxE zHcq{;Q%9CP9~Z+@;pA-V>sQGwZ)i#rwQZW);wc=hEh3M{Ct?TuO_Ee36d1UhRQ;iY zil*b!O=-^fX0Nm@mW0yGre+~+V{`w6lQ@-U&*tnj@*=!jtCurj$BLH4&O&q(D6OLr zVmn1<9Gp{l)32it%=Atb&s?VM?rKs0ZV^YX$%#T;#Y5%`CZAK?5^v58a=Z!RN$Q;{ z(zbggka+jKqle6;_S_~OWW?YID8Hj|=vVo!XJ=6d^x@xDk-EvoGX^&+{_hU~>ZL6u zSvxre9f4Z?e{_6Sk?dX=Z5}j0Mcuj=-G2IbZ0#Pn}Wb!D7 zKSV`u|J@ z$)H8QN9p5;+b2yhxAPZUo&Kk!o9XQ$Q=Um<1nQ*SidlF*B_3mg!ubMB4@Kx;NFAr+ zH$2JX?Knk`6I=+n$~fxFT?)~xMGg)`bjXnwuO!80y~GHb%r6q69P6dr_0m_QtojNv zA^|X%$W!`trz(DhI(^YSf<;$WHisAX?y z8h#kg0qDOz1&G7Gj?>fTXcuwvA8_V!4t!CVYqv~Vrd8&tg=z9S|L8#Vkg8$N~-YyvxaZ@;mWCE?VimyPAKf8yj9t3rG)uxZrrN=sP zTT$zsMycX@nyiyXNz@IkE3FxTU;+;=Eul?|$PUh(O~p|kkdw7liU=tuBrru^3h{lb z@<$T=jz^t_u%`$)b@xYpH*Xv>2<9}(1$_O^4iAU>Xf+Z|l78Z*F0WhHVCoMBpNQ`t z_Z7+b#Ah$yaY=XhXF(4ys-4pjTr$+q5x;T5aBQ>v4^E8?m9!Cs;IJY6XmlxEUIUoo z@cMY72LuSRNSkFnQH@igF~-c!Z6}KtbgL9$;C-P%zlDXdOL;Rj*orHUk*2DG9Be{T zGWC_!^>S(~lp!FmIO*$h5=@QU@vD8~+|q8S;7dsRl3bL$OF`K$v@dA%p(z3BeqYla zNyKj?oaL>)j?IIQ{igCC-jwLWfGd@9P|{Hz%&26JU`_>#wP(N&l2-em4<)boU=j=E zH-AB`pcr=r->YOwyGDf){g`&-Gr$bai-FEZu<|2b7vbIvVHP*bD(?A~!)Y%F4nbFT8}h?v~&U|PlS)9$e}!H&J_W-$G7$wA?Jy5Asf zF9oP%v+9J)-M;6ad@gB^W_tf(RWbbu!q0+?!6DmST>cF~t0?#teE#aL zpM9NNN8GB`q_{TO{F5&$7Zexi`Lri{5dOI3)MDk6%5q-qw%xa0roCSi`@dt50)4~q zBcJ072o?Ij?*?JA1cMKLj=G*2$T;i$Tk3Jv{4}O!u3NN@f&FYw1$lKu3wgk9uZ()O zgA{^J3L3=SW-nxLm!P)f`P#7 zi+me@w;?T+00IzEHY-ExYB)np7c3T``FV5Xd{+E;+J_fX=|6*A-97Q*0JKDAj-g z&8KiFrUi`zY?^@i=PZU)zC~)*%F)wf#}N*s#BAv0o=ys-_lLRuXq2v8#1UNDbF~cG zEo3;3_O9!Us7MU|Y}Gfe?%U#?081}v^n1yA$Qz#7gW+s_LkfDjSj zr{fyV^U=E}2VUgdH{0?rJ#p?qaJI1d3)XVlI{9BOn#jGwr^c^H((Q9()5;H5#l$5E zw&$AxXTQ)~KD0lcjUAQB{{^`*1(V8d>-xjt!T=N``X8nTwgd6wuGW59(bqgYWdMKz zHXohh%Fr!?!hEds_D$mwJI-cTqxZ&s0?mqxkRN@_Jih2oavFv0@R~P&%@M;;dl5-F zC>?5O^ubB|LEfxH{ZI$~>i1-}mJt6BH>Di&RtF{7V1~9LMR^IgjCwgLdI`a@o7Vk{d&|gT2 z(S6W63H9Gh6f5(;OcX2Y|6!t7S^j0BSXluk${>E686lZg5*!N5&CZ%iBnVG_(gOP)79rh(Zx}ae^$pt)9H*qSxlkyZAVQt(!N_ zp1!dm@AMU?AN=KTnE+wy3N%cl2Nya0CE85bTHUT}W^^!`%e)&hWV;)#u|km(w0wSZ zBuLX=Z`!z==Zq(Fj(ib8^>o=HY8uKF9Bpf}Th7MYcPCi0+j@*c9(LgVeP4x^{7j;># z&4QA1{bYnsO#)WY!A%ScYz@OL0t9Q;5w{IjM#rK=2n$W&uPe?BKkaT9&Ym1p73u{a zt#h+F3!DY5pXat`u%EwO{dVcgRi27DM0{+|(h)BZTzmEAyE_7J8m-8RJ2L=XZ3qi^ zNolvOWoZg>M}U6(@c-RBWPQZSJx0a~`MJ7i>RZ`LVq+x|HsTr8U2b9et!Be;o%p2hpF*gyk6OCkZPWuAW3HCw^Q>mcy8ghQV zvclF~oat8ane_pW$Uk?zEsK27L(?zM`4YS{?^IDNq)m|J$+dW0W0hGJCC2N-H*A@k zpTC?PclZ{P%05t^LM>xDs($o+16ia^;CI~4bd-Ova<)KUc|~FSDk1V~1J@9`$=^ND z_S$Sop^e)Yhd53uXSyleb2myu(=fh!8nOGy$o*1U#LBL4U9&5SMX}b-4xDyw4;P#m9GMFKk-VH(=yc2)OvEMUbl!T z1FvjiGC;J)R7rqjpVCVhsAR7xX7>do*|UU5ntTmq(ve?sq`kCA}vh`-*s zg7t)&1E*~M|!J0bv8EsajyYKl~hw#6%JbR5Ejz@`6VN7lS2V!rmnw@?dA>QFkFX4^W) zB6hpDhEMYUA7ft?R!7ry2_!(^;O_2DaEIU$+}+)S2FStP-GjRYcefCNLxA7}cXya3 z@B7XC^F4Dh7jV(1x~qEcy>=aV)~Xdj5$`eQM0aMo2UgFf$o~7l0*^82Y~pl^Xu#Gd znqhfVC5&7pog1JW3QXceP(<}tN2`Pp1M^dynaF^szbEu&)-kMRn%b+Sn%Xlgji`Vu zK7h;$gy8E&Isny=*EdIcS*)={EIDUt_?^t1+c^sNvR(>z<3022k*w6Ie(9A&c8jO*W^0k0qq!#)1<6|dcGN4gnH+j@s*>MiFa7WB zcz{_7-k6j~y$i^KK@WI4auE1G1~ZerA5$50fd!zWDFUV@%6+(i8H@dTWTA}=I^fc? zj^n89Li&$0592bB7L<=b7NAMx6PQX);CXZTmtLp($uBL!UKj?*topV7F(uLdoaJvR z1F|rM%>B*SiUQc4m;*fP<|Jy+uRyGkKxpvWR4jv>hvLP9zn9JaE)_TjfQk(yjt)AE8}T2hlrjn<;HAP|2%UgI(VKb4TZHk}6RY?dc(Yean?$U!z_+2} zSb{VW05iF}@Tjj^Iy)Ccg;5ZaGIhsR$*;w$qWy1_z=;36Q?mWmYrVY&`9FRt49mT* zm-=zF{r5L+QM8!045s?1*_7R}b6ghIB$umoTUEk>sQk&-bij{tfxTE@&c ze;Oc0fPK&_bbK^c0-ujf5XpzoLW{^~`I~Ly%Kl13waB*k00kvqe{g<|r3X3t%TWS8 zuTaNxaEhZa==IJ2y70vLTkc_v0TsvYB!Q*a15`{9V1*Nu!J^e%RBuQHi0uFqh+v>j z7?*orpGpPj>z-)W>UTdB{B^6*ZcVZ%AV~*L^}Ys!>Xm=K9tn5{aa~XV8GId$`marq z9$47%vrH0W3;hT7ghWxmqz8J9-hV^z^I0=UVCwb$e{7uo2Y!I+ z#{`1*>H(zP43`jOBLg!30QJiMw+8=(C}ZX~mycFJg)G2kzQX&jjT6vofPlP~2DH-u z6(BLFrpL7Kp1)ND=m}q4eKIAobwSDlK&kG!MKFm0zC^(Ey}+Kmo<3pyGZ6X}Wx!*B zoQQ#%Y9s%ypa75~Qh{Fs50uLP3H(1C|JN$~7h^yUdn^8J9RI>gN`&`t3U6?w0Cef^ zLTyVQf20z`F902v*oIWTKiL*h9}GYu>2DR;tN;`It$iS2SwI@$;7Zp2@gnM-V$1{s z*FFNNRed!F>jP8oZcQ!wn!7=*1!~I9jh#%U64^*G>%7JqQSW_;dm2 zKVVFwu8+$Hsvnqu8eX7lo0^l-v0vczaAn%f3eF#4o&*6d65wy@O+&_3MzWO zhw(S-Ys(vUyzGohE&fJcBr4McyEwv@e5`EjRgz>u0U16GPUiy5OkOMBNgF_z4L3O) zAl~_V1wc=-{(v;r-*N)Lr5yCV*Mu#Y^J^Ian5L;@Fj?pL zzaaG?vu?S6SNXtr9w{i_g=j=Xx$G@R0n1_IV-|5(hGZkX=50*FKLKB2LQHRf zUa>4A5;_HxiG~psg|LzKzZO@(y<4UFfI2WXLEL#Ic;z?>pgN-O&O)yKK(YkDIJ2M)+P;|mZyEEjKy^iv|h6f z=-LWO@5cNpcmj4opl=k_|J6oG|5Yaa*S2mo0sUE| z%vw4$hz~_xnYSSjM!$dqXvhC!i+@+!4+#T(R7%~7S_JI#)&FAab=9w(*OC5*Ca^`| z0qD!pzXJQK@(H|d58?#6g>RzEE7CoTmoNoH(;pss%lbS zTeu2|#jfv2`uVJ=qVN{dq{BC8Q~q^DwcV6yCoazUqXnX^M@!<+?zrD`xGi0r+zI8s z+w#FqJ`gY5^_$ntec=1iGhaROVegA=(TnP8rzpS7u9Fuq;C8Zcb$|r!`11R4UiazB z>;gV4qul*i^q21PK9|GktisQOm*0;M2iq|jaF&rQE&CA8?ZkYUhzH4L!(0lm9g+{o z516T8rxvgc4psJ-eOYrGXOv4cn^be##Da))w-e2)>GWSE%E8BVMnTI-NU+yap(<)? zp*==->-;X2H7ErG36TdK?8dXQtAy!V%yvZ`m--KX^y%-nwT0HXK$nh-*`{E&?ZAXX zYjb7+SeGV3onbq|%i@XA!%Wz`mx|>As}&Md8`ijn+|_Je-yx^#4f+$!2#eu#4|F#h z(<4My1+ns$bFcu4x?q$U3j1a2!QwvF;FJ)F4WCf3Dx|ANDJ ztKb;TvuF|%&=>%dC~M{D`Qw1A@wv100SfWu9-JBM78Qwkzu8RROCRY&HnNuGxWc)J zHIxbKYjo)4n{ffr*s)7-C~Np2oy%?LZ1|9ch!P;#4zZg+VEFz7I*Lx?-f*SO`a<1C zq{oR81x&T6mety`CEPx_{cAo(tGq$dHlEv+yNDmQVZO4Z_p7^2NPx0Vi(xUmV}291 z8l>B@Rhxs8(s!s%B;zLO^y=?a1<>B)NVo2i<2G-M_v38X7K?AJn}!@?F>%p-73JTv zByTafu!R0ZJ~?LXHfXRh~%5) zVd}sJ0VVoe!&kcFLjuDsP7i9IpuW%ay(zXIo!`ZlJIS1Vs_;#lypVsKXW38g!L_kfH^M1w&6%cL}E zGlOQ*QWAMeYL6tnEv^sT&&Wd65|%1=sqH~<7#<;M2`|U~4iT@ldm?=^R^rST&-P1^ zA@HM1OsQZNfmewsI4;P#l<4#7QGCYe@S-9gxZ z)uQF5WC}1$7e|elCd{8Vp51>TBXc1m6WbpX8TfdEeL@_by`Q#IG>EH+i5&zxmJ0M@ zg+p8nSL~5d!YTK-VL9seoVYT_M4$Gy*PkznxwwSvAvFWHhQKXt&yE)l*fCu`?Ve}A zf529|n%lr;J*$Y#Llzhs`AeiU(@VPG?(x!IBq}^zZwu9R;C$1o2Mu6ugU3si5)rE7 z3{+}cvgbHuwa}I&HmG`qf-)~Sh3<{7GBRYxJQ^rYA=a0@Oz5=?CXo!X11vN;zsF z6e3Y0CDW>xUer8Bmf(=H#lK~P%}1XQJgg)C+-{fTL7tnXcCH`zlWzV*DSlj2cQxof zShBy3bWR^o*>neD@=?-3*LQ3~jAy;mI!R5=D&gO{I4DyD z{Wc&8$ga27`?TmE!|=9QxhMkcL_tOiy24*{7&1=YGmCr!u}V(p-rnJX)v)ycRE9h> z9W%d#ylm;|XCc~On}%%mv20|^dWabET&vqT^Va{7DL!Lcn<%#DBIxVSbn%$+?nx44 zgPMRfbR84+$YmqW9A7a#C4?X1+Y$Z}@VPbR7J9&F|6rLyZD@(AbEQ-KAcDDX_xq>) zXc7}I>!HNNL_+1=?=vgpV5fn^<0?Zl$(~XCOa*MLH%KF`foZ&vDB$^0dIpll;u}#D z537U+ns=Q!Dk%AEM+ivrT-~)_<5T8~e_NqXNZ_Gt?K>`Sjf&CX?L(u}{*sgbc9N1s zA+rp^LQ|tg2teV1<}H$Mi%JiiUybT;!q2}crXsJfRj#0E_(x2YXiKi z@0(cSGwuJ#b_SesR#Yy1{7CKu(S!|FSQO3X5Gsaq`yD_-jx)n1jTmB=VTvd0@J7Lgf;z$=Ux9J*{qvIq`i@7yu_x zQ$slSla$x9H=e}FRX|C$KY6(=!)}&OcPeovqHJB5Tk8HX1l*;NNOYOUQetM4;qNSB z!-t(%z)2rwloMVVRfr+5o#FDRV+zVm6E}H)ppNgt z(Ovh0BVHHA#QvQ(M7?$OgM0^qXu%}3TWlC&?BUx*4GZ|Cq>kebbLTf~umNeHzVK?v zVOfk8!C{Zf9oULjpowtIHpP;jfTt5S+h738ec@!#zF7>DwKZE$d^DObY+b)L{2_rL z9C>>8d&j$4(`&LX8P{Z;wO*{BQR=a6HcOaFE=m4yToRO9g2y^OOjam+YZf>;(q~h> z*`s9&B*^*dZ(3#$+AQJT%XI@r^+HkE&Psjsc>XTbc>|7dsEv!)8X&})kZOiA!awtm zOkqJpZS6JAWSgTaka+f*5w|8yx_!ofSwE6heUUM4^ti1yg!!|??*@Y6eui;|tBv3t zu2}x5SBC;qeaG1U60YV-e<;b6e!+{7_iW+ff6)NZ!iH_t>){hZvEH{GUM^Q4q_m-k5nPklqa_3m_k zef#H*LQ_nal_jHhmf?_Q%=~11vn0_ONJ&#*EE}wNh#sPU43i!K@r@iRBDLzii~l-| z6Omtj8NLZ{y6TFvT)Wyl>JWQ#0(SSh>AHP*o_46VSE7zmXOx72^$^p=XvyO2(hI6J z3rcEOMnz5T->uSA2e~nJes2GAEB*~XFMwrb4eP>KK-=B_eNUc#ljT`yUY#g}_uFx~ zZ_HpF`o%{cH=LHQt3rZnvM+GNE32|=Ebk`R3zjwm(V8%1q?AG|d29@up7W4$A&wkf z$Iddlx5v3098T=V#wI+B%8KWA#I(9(ny zmg$R{Eo{#6h%LR&n9XV(!yenvYme{26&6cuT6el+-4Ci#y^lsD5GOjP z^ygKkdLL9f(GS6caxC1sK4Uh!ZdemAJ#sMlv}L=iah*s*w>evRIJ8-9Cepzh_jg|! z*qOg7so7R8yK6f5NT}`6Z^FXEAokC=Wr`(JHq=R6$c(G`L^vAQDb~KM*wcQ*}bdzRGizU|}RVE%2bSz~Xt7LN#82Z!k z36{x5xmg<}2fjFYH2G41UA<0rL$=b4QJVwXORU`|9tXGRj z3t=2Og!r@>VY;E+-D*&_)z#Q_FxE!xd2~kemgC=K{#c+yNI|LT{o|Xf&Z#>}2lGvD z6_$}Pg<9hbVOqQ_^p6{6{$8G1y+qGF-IUvR8>!7L0$P*D91ZW(W4HO+Q!s*HPm;e6 zk|M@&E^&&F>!i0Qqu3P-i8W3(+GI+X$msG#!=ZKpvmhB2yt}T^g+`2CS4SoZOP!6f z&+g-kQn zW%w$NP8wy)FNpVZG1?TwKHw8KVv`2wQ9M3|jomXf@{7*!~Qh%FQS*www5(t zmz(LJily?^Ze@EKdqxylH>Z-k72tOr`4&wp_{=UZ2a;!iuT-~s&S2~sduKb<^oxmP zMfK2D<%x}G!a%r3mqD?;oZo+XduUY0VZLgAU=#ndp@{5Y7>U7{+s@h9f%yLTYEsQ! zKJjC&i-KMZ;{KO~of!-|lvpx1+X2FFE+lLe$;CmSAjh=^N1MlZ6#1VRbWLBFtsN#d zO~WgZnX?!^YMa5ECF_FOgSfd4WZVc5lTX>Z=8U-$&geeXF<6bkalCFom^&C(L3 z9d<2(t<2ROP9W836rczW*koU;oJtmjz_jUHYW#gyR_&UDvfV8cSCv-3M3AU_-?gP5 zXNeL9AIqI54!x`#rIs@x=qxW0GeEq|ZJK;HjhKhmekI3&Ck6xV{#0Vk9*VI>iI_)V zI91AKaWzfOV}T=Pj@f6Zy$U-?^4S?vB#A!^O<#P7erM1n>o+b;ocbgl^g+2)08MqS zij{(3Q@#dpwn++algWGefGNG~yF8K0V%S4m_k-W*)keba7)9LI&O9EFU#PzzwUaaG zhnf?*nYE!nlgYq>hi(%Si?lr(A<78m7rtXrF6(3?U}iBrMus$xX++Z-Nn-ybG%JnU z^g8ZX=Vksqd?)g0GvwqFpYpV)Q<)EVJi8A<1KUnx4MBvG4RTjVK2sRreF0?#DSTG`H;YL*xa96tHg5TDGj@%#1XG&^Yd zhQ1_G?zb>MVw}i=8rA5u60|Ce8QiFCJNefMDztQh?gU#4>)j63@FEg9_8Ew216gc+ z#vT6L3N}44!FaJOqKf%>T`7a0T`LUCb4eOd5k7FMd~5qaYbf$QWqF--DWUv_DarUY zKlA&%=h7>2N-$3o5h5AYMu^VB0-QJpzSAU=aa%;|M-8kZW%f@K^W_)y3v9oQKiG&~ zCEEdigOcs4!+K(o(OpVUGWi=XUpaOZLMCr57~!@NlAW_A?@e(Yat&+{A3AlW>QRIk zb=&iZ?tV4F-ouCzY5OGUdXSR}r@&ICF)x0X<49mEQwVm=2Dx4Bj88+*U^hC=V?~jL zy6-FL5H;$~bH<&T&co=MbYCg7JoNAHrDJ%4&NDEL$oK&4PudYZ&IdzI0wnOET^vGG}HA_i61#)BSIYLQiWN$<6AllPS|bAW`;f9BVriT@n(!UT++=$Zcm>VHcLHF}noM{+?`T z0q2Nl5~;B!ego&4~N1;mSq6*@(0 zF5j2zoP2b0Z)=F{Lpyo8`~^kPrfetiIwRaws8wa9j5_BAJUI`G2(5a&?b9(%JQq>f z;#)L%eZ8U@1}B7oHN~a^ubq67Rvcpn8Z_-vupCWwgbw(>#fgITY$F z9^?a4WlbR{vXpVU-6H5PUFJyNz>$EtVT{OA%;%v?w>R0L3O_YYV>aQULtlso%EPF! zWY@vBbBsGpw%0?9%-jkzOYbVMISa~I0@c>4HO2qb%oQHA&~nAeU2)xs&yrxVfwPH^ z|450e-j$xK2SehpDpJXEMp8Kwq>>7DCBJLwoLm|%75Fiz(5gIAoz;u2nPt(4H-;X| z_5fR-+;(m_Wi4B)nBO)3GO-@pmQ$6W{v(N9`{MzN*&)u@A_fADA4yx$JI0Qddy99$ z58J;_BRYEl!pR=#ukF!N_PHxDI&jpt$sY?Ua7ou0`PlvMm_|t?DCv$u263N%^A3>VaW)7fWYuK*DZcf0z*Fek^>$T6JZ2h-sT3~v=VMrKufcby8+ z3@6CpC~tR=ToRTOTshalsc`oLg!|bZ#nIkcl*llD(h|OTY)SS48hgfg8gK$ z#bR)xy_CEq23mP^2czeEwNgE~@6B>mI!A3uDbDs9-7JNvhm5+*Jxja8FK;335}jMa z{aSjl;y=Gdo@1yXgJoD7RcaYGTqR71`?TFX$M%L-Ov_1W40ltTj)m{!tLzAOJ)|nK zFqo_^Tzz6c7g24`Y$bwscM!}>(489kX~CQ&C>1?_w=~rXLyZN08`gxDv#35_BaL{; zF#)+nOg#A`*~;jg-!geTVj8j}{uQ5lo|E%rKgC8p|Iqn)I}%7Zrn$+2mhR+u?1G$F zpOZ}_9y=SbUQhV#ojWTN(w~M#!-e>f2{!#R z&yKf3sQwy^2m6QP)5id?BQJl@>MF%mcOjWGdnLoQ>&=msc=n_a%M?-wn*)+R zHj*)P#SL*T&sm_&@n`c)u_aB3wMR#UueuOi^2cSWV?R zGzBi`pD}3r>92bOtp;?Vh{w8zTin}W{ngKaB)BL?dPu4N zb5Sw3ht3ig$)QjSo}|ON>yKMwgH3N!-PVu{(T-x$mB{-@rNHulHow~Dvh71j1sf$5 ze+}q73^G+5qdo)MGT(qV?Okw*kfiE|CW^S(qouupBhOUtNx`W>u}CA1Iq(UmBNd-k zzr-H{C$i^yMqZT963)Br5eO<;&j+P-f01w}p;%h)Exam&Y{&Q%{Z-^i)#dB+8In)p zngX0%larl4zMt{CR`!a~hacOtimR=x`C?gqcpWY z{lwNgGK68BkB`JZh_6lF4Z-TgdGabjW00gO+zRz3G82-eb=nN5CtJ}?(u7Uddbi`)(iaxCRi23nH*EZVSJK|Y+n2Ex0&`8U`<>(cHtR`q8%QeiqB2=8GSOtngj*C-)* zsc(CKr2hcM4kp_gCG=_BpPisiaCE*wfYtCnr*CfUBifLty;3#> zggG-=8$i++7>Kvls?X}12VNt`8-O$MxYxp{r731MzH^xF=zJv(hd5`juG(KOfD(@wF2kkAp+DP@|oMXoWcZxqKULNPG+!|2NqUQ z7`!`}f-S5_?Ws>zwxpTGF0b3?GQXYFtlZWYVv|jkO+uOZs{pj(rpJo!V z#`J^lrV_N3M6qR24ti4lz%0wWqy5cBT<*7r@{8|Xhm(A)hv}Uu;2<(TPBt(-u00wQ z%4Xpf;`1eg@9D4|M_E&rz-GeuJZP3Rh7|J(+{e#78VzA}=zixzcNLuqVh@l~%Gqj+ z?a4ZN5*zC$nG(|u&!m-8bbR7pc@(dA*?%#b52Z<{nN(4-2E^m&x)6vmG zph`H9?0W{YRsBS1&)bZZ?H{6(p?h~w#TF2MVl(>%?izJ_`_4tdUS*tGI0Xlk(T{vX z*fTnIXNxJvymy99UMidR{;m=%oV^3CpubG_e{HIj4-{Owj=U_;C z?}nFn)(qNKMBej*?x_w}&<6#b4f z1Lp-wS#QHJ?h%f0>r|ae`)ZA`k37AFjnb{v*l8O2mRzQEbHI}0P~jp9y4vB(?0fB> zt@m{s>OJ9eZ~W0feb#ffiEhSo)_17>pT`y{>d76>#YOjJZH+tokLTr~LqK2!RDD;Q z048(Vo#{n3#4VSVpC{J*I&q)k%#ms+=DuiuU{*{rBNAq=$eYiac|VzTVU}akp4|UX zZT>SR>PNJ}5H6m*Gp@xFDmb1#|On>yi!w;@eYihrW^@RkD`!d?f4z_APK~jV2o$u^H#=EKN zcBrh6Uu2`H8b&AGo!t$vOzV6=ts~c)SH(lbFIz~z=$@Vju6BmpPxl{}bH7mTF8i1u zGkR=`tSl(deSM-&*C+*9fMPJsA(sUbA7{2H)+E!W%-^PmSgTO|5qg}T zofUfA|FbcbBvCkORMMxPokvtY$sWt;>hVX9CdjbYmcbb{JM)YMLu7)*;B};D5lq&m zR&c41&!(U+0sG6b5QhdBJgtRp{X1*P2bO71kQ+1j@%ZlJMdc#}V1~!UA=rVe+SoJ4 z(v>G}@M(c$K=Ks-2INxVb=P#*T4azgg5>z-#HhTYoJIcg1$s1A4#%w?%_-<+N%xLA zc|GLhrQl~S%9Z$*&V5H`&M^R)%kA#K6B!8mOv*Z=as)p7R{~F+7pL zDu5SD`W4txS7r6_&dctG`Kqr83KsD`%WVs6v!Tm?Dp-IrC}X|Vcv5eM#^6-@k<#`T ziE*tlOVrN}H`O`?L5pK{wtfvG97D#@G6v*D7O$s?hL>WVlA7L}>q_6rF!Qj}m)jRe z6U_2}|A+J-!O4vU{XNHj3lG@;6&`TBnz5iVtE#?A4*m`j6a>TuDIzkEmm_xdRGcY^M$Gx&`FmZ;BF|9=6itA7kq0p64Hv zGiB!lOkIC5y4|Rf2rp0nBtvF4*jbXT6*2{n37Wd5%-RV?>#>^qsQnRFiqZNl=RkB) z`|^FojJazmWdVF7NWa|m1V|G2_^;l4rG0-FVi9Y>;no-1;FExC_uJex0o!gm3bzw? zvG%BJR3QB1py;HvqB6bx0fo{W{3`fvi_0wNNCzMDI6Av$$D1O`*4Cy`<3 zTX=9Bz=Bf9wUtz@$IDyMGPy)HUY&rjKR?{(1)s=jAt|#^j+>`rJrX#W;=(KR9M)VS z2%}VJAy-Mq7+qV+0QPXHgmaU%anS_;k+s(4Bd#r*K?E;*BLe}d{HV9R9YV}4M;*gO z!o7J2X3=gdPEnj04L@|<5dRL$TR!Ttl^!g~?Ze;i9m>uFzpbQjY{!t|iJE6K2n4Z_ zfgy1&ajvNJe3u2FttOsRFM~@S#xek+=w7+^Vfo4^z-%_N?DNbjn_TUupRp2n-~C0HF=9=#|3UJJXvs<&PWZivd_$NCRxV|4pct z>JFUF14wjM;7s7W=hh_Pp#aVG4Rk3Lz;jiEj|Z5oy+8(%{8?Uk)q&iI0EI7p5I8To zQ0LWk10a$5LCbB|??M3!0(gg@rgLDbi4VBneBsRF{V9w9LiDb-IKsfk z_u|SZ0Hn&POLX}NV9M86yv35AwpVeAxUmP+sko(C{GMb~KoMkm5C)(SCtCzz zP`q;YyRA+EA}j^K0Pbb4MZlnVW!ZPj{qq6Qaz!x1Xn?m3akcma?|*EbfU zC|>qEwvbx)+;Yp^=>g0d#L}rU0zi`6 zaArua3<2`B=2J0elO+v^Y3$4UY~o8)XOgAe;!RCQ%J~wKd5`-%~BZjegY}4p2i=>K$+z`ucpV; zSr4H8sEx)`8mg+4HzW+T9~n#Jt`R7HS3npK9H0_JDa{84WF5GbkLdC?9VACm8x$vo zd;hYeC#SylmbR0JCG-dUhyL8R@wL0OpBzyo4Oqy(@)oQY48R!x02k4Jz*RaE&^NpR zS3qQyIU?|itrl1STi*pjrzzk^1md}+1vOjKisO-A1r>MTcif0Y!sl^=rH289)C;d8 z-@Hj}Ef&Wd7K~?+7Se16Sg&J%P$Luy$RS_~5EoebnlCLN6ZNmA0FxhUbE0D?#p`+Xmw#E?)U;BwCa`hfL%(mk zP=v(qS!2wc{C7l^M_>r(e<ElH`NSot-*WJFj+l9(?8$Q83 zs*6cllijy)`D<`;W{|yDWXYbSt@`zCEzasOzqi?Pn{R?$d);~xj*A_$MNss*+D`95 zNP9`mP4=y$Bh2qwCp<~~8*lHYRQGvdZx}(In4s+^rZ&3T5bWE{eO7t{(^U(u7tHk5 z-r$lsyMnpsTki_B+3op(sGkc%jTI?&o_KR^nViM+b4B1EvhE{$#%=0)aqe58o4jll zzi_x*xeB_UuQnqNTaW9?xuy^JJdbM2+xAX|_O50lvSe?X_8uPgKKaPMd`TC4@t%>d z;JX#4-!Zk$l==|D$b6!bdpz9E*vdvJnWZ$jq~+%*zgF`U_G z{}Al>jqey7j7n`Gl%CY%o8Y9jGZtcayg>}<5fFS5VGc#~(Wz|#BZT!7njwPQ#Vx6$ zyC75}b+NKg?gSsB-y(*;gOFoS#lS@mm@C_n8qYu{AqTaV-@AR)FtU~3k zUFptul~{?A5(_PLg_uYYEf)nFjVbx4lvq{96|k4PMYvl8p&i5ZyL_!s`wy+Xk1WG! zl0wOwlr=i~PzP3U-Y>VOUpist`dlI-61ZC(W{0KcBd9Yz$JY5dzjxwX$eb|k)WG7A zNOxcbd#^p<^H#|LC%R*2j0yx|eX6!(xuLs=^t!myCZ4N~{_GHNrVTHSDtjC3kN>9F zbpWk1S6%YdNt9zE<0%f8Ky5F%n9!~`1-Z-fWqY>mAcVNeU|DcksJ-pW)$!HU?*}gT zhvE=-cQ5Z3kFFO_Yne;7J*!-(4J$?&hCXf#@Pc4|@i(Z{-`!TNY@hK^R-SM7QFl*> zPF`M;W*~_L_*Y(@h#0*trlT1c{G--2u-8Jx{Wh%ApGMD675nUh`jU5YVKzdBPM$aS zE*{#zFSFBqeHjKm%$2N&nUwQap~fuXvXL&>;OS#$TKm!THDL?whuJUSrq!+vuN#*q zut(F&?e=$9v>SP^A52tTJ%`)@n!}KnY@dI~?~tu8-e=b4xUZ^_2 zi7|Bte}!B$=H6#aL7K829>U@qB_*?6#L2rWN^Ng*CJ-jw=xG%LRvud-ls1 zd)rRn@ORZ6(W+R@vz;HGVKKQ{^H=`lbA!3|qbv2>#a!&7C_jv4QzgF}g^_Q6`t7~2 zKM1v<7(Jh!x-r?**MTT)v=C)TpTA^kXf$HKa!f*lC?|6G;ZHJR6`m$$8?}-0H=Pa5 z%1rVY-ksdVER`OPh7A9v>2jucDvTsx<*sHe6x+)iUboR8euO2e-<)(RO;*->0 z&teqAps;Hbe{wtFep1cKhj5o4lZ0mhw+TajmdNgyZ}IMQV!$s;mM~s$hD2olC~quLttVaZ$WbswZ%>%+y@gv*X%f+@s!Y zT&I`!B*#_-OYo}hTFARD_BqjGfK?%?xWbf}6~4z={PF%-sIr!vZX?(s20G6SF+ub! z+EqSv)*4sOqlaEmYNugtI40_?yaT%c?p`8I@Qb!WrQ5Ab6j#~d6_*hhY;_WjpFW9m*?~- zz?)Y8_L{UwKfN}iz`3y)h&n8`#N4p+1y7d*`37N|){$TFu&KiyBtKT>mUTka?Eu>1Au#nhQ z?LpTJPnxsM{6R3aFXfbReEm|DfwY2UMC095-vi)gRPBAW{TX~*k)r?&iZZbCb)hkZ zO(PS?po1=$wr1N*|Di3#RWGpObL;WqLCxC5qX_f;LxRH}HLcp6u9@+))0DSGub{^{s$$8ANtw0f=tAdMUBGisyw zJ}mZIDFjMq;abYn~7$@f#eZlLYVDd!ADVJ(#(XK8&N;KzQl5dJc@`1 zt$)>}l|`V}XIJ0bX%q&W0_1E3>Q;jvb1?_;KiYwBZl&FMD_n6#yT)$nv|{`W-ry5h zO!n+tr|lE8^G) zr9xnrpnqqlGOO_m+vm|fWy5w>4CW~|ip|R5y1bdsDW3HlSXEKI-GlW1FfPtLc%;X- z(&-a#Qy7qsDcMi=hv!q(C?l3181)HU_j><0B6jGCYLJNUYW3U3+%AQNG zksD|YK8pu@T`bo&V&_diy?wr$(`5m-I`B*cwKTE%38tH5@0TtOp7|;Y!;^rlA=lXr zifw>^g0uMD)??C2{F@qmMf`F_mZKBupA2WlqlsQGWYZMS{^9W{4n#{sUrd;ulRYt+ z^W@IXzjv+0-37`(G9t7kmUFHh^;$ve4posk6@H}#iy23qPAkrhpyah2NKvjpe9d@7 z7Gv(uDHEG6tZhSE^-EY*{q5zmA0i#=H4aZfBEIcM$9IJ&DoY?lx|;2fqP<_8Ed7mx$132T^u%c*gYH#=3Pgk7ntEyf9F{ zaPQs@ni98svUM7}>y*&wuQc-u$QD>t$s`^He_<4eod1ctI7{61xJeJU)895lGYEGs z70DOdc3SSM#BQ%e?lklOIc%xKs}zYo6AU(9g5fB()F{HK7GaQl9MP%2+n87I>c&rD z!{LI^rx^U`O;2XF;4Ko#yw;{0N#89MNsT;!3*kEc zpbWx?2r%ZCj&y+K3_XLku_qtIWRO3)gQ%9^9<#qE8Qd`}4s-NOLMVE|l7z2gMgdE| zjd}WhVlXd68b}Lo(&5CD3QPuTZ#t`pM7j1pVx1lg5G8+XvKSy{f5ZR4R43v5_d zzY=N-!};P}r(s+Kwh5q>?jo_raxRuCIvF_QphO&)OG|0g22^rX+PrweL)gRKjcTF= zRw6an`lH_=iYxM++{36dZ0T;$N`MPUaXwy87}2K>{^sDNJVFxVMh*ePU#XT4G^VL> z2cFu9p*kjDez;dXLx&^)70I3YE*I{2l|BVfZ5CdEoF z1$9Q#1!iFv`v}@eBj881!U;GM-+^735OlMKn9j^od`mRfF49V~u?@P5+YDddO;Xn^ z!tcRnm-LWp55Pz3!{|ewCW_o^=YIHFeMQb2%Dw!=PMJqz|FM}~Nxk+PQwnfXiR}(fFLQaT zjaegn?=Kwb=xZ_OtrlK`V-H350cVuX!N-#?v)*juD8~x!7Ac$71+LG~*`!Mq-zqJn z%oob4w=E2lc}^&^No}!$^7DEUTP7ul56ycAK+OrXoUUjmt<0=PxMew=j%SN*zd7la zNVTrpQ!O|U9MdhNcD{fmv{X?DX~JA6NIZhK*$mllh{d65ri@2||Ez0QM4GJ+Tc2Xk z?hdQCYJ>aS1r1Iq>!nnxrM`l-TqmLc(GMe<-TQKTuuHzqcPKAz>Gb#(+#AjmVK+?@^` z?O?a@Fc;5P)#wd^og{2wPrEb{;9oXLBzrZK{N&i1_ck=~_j}n12j&S4j;M3ZW^jyS z^Ze;}l!sQn<$h3}tp#JDS&X|zYcGS+D3NiehN8EXiUmC@>9n!zipA zqb`hNWtB7a!ozmrWkv`zuJVrs#j0UJ* z&JdU8MgOnDz5*<+rD>DF-CYMK5W);IxJz&k4#6Ela19J@L4yZ( z3z7tP4Fq?02o{1{(1m;d@7sH`yU(6s=+kwo>%3Lf=XnNt-mZl~2gWUA&8`k4N|RBl zt}!}aGp=g|Vb!Z~nSGFgWS#>A+ct&f0)wC4%<1$q{f0$%0hhZh`#2dmYo7SouDYrQ zJX>oR=rV*J_3Kcj{87@3{x#he+|2%4Y$vbpu%nQBbdP7eo(%*a77Yn34DI%v7A(#O z`yVT=a9@QIw5*>PC+6x7TC5b4qr_`LJKw?JEbMdFm?u2ug4aBbh%!6RC~bBMNg5T! zdC=|S8ITP3r1rQ|c|IJzl=ZoYT!M~E9(b5;a`6@ZlwKH!#<2=U@3RQ8Y5E1#2hd~P z!k&*LJck{LOAX!`9zr@~!{7KY5%~_5TkWpAPPZ=v`0sA` z(2^P=ufEBd%C6ejaEh7y{oRFL%EDcy5)8L&K#-}M(o^9@Ld020N{X^e3ht{-5MS+v zY?Jm52n;rs(>_k_i(qS`AN4<)1DuT?3OI4R9^1V3M(rI6&fuG%eGuWBf6u@*I4LJKlSscd34(t>0KXr{$qInSd8v|;NwbTqqUghs@m4B&Ko}VO-*5G+UpkIilJSb zutOT*J)Ubx8Suy&2~u8pw$6jWNY&5y$~KKASkBv4VqVZH&wRo|S@`zS7b$gvGJMvO ztWA+pbGql71F@w!p+scO@vo|_-+)}_0=d}_@yfp_l9y!wGyv}8xD)_ia_TDpEj$F2ymSlTtvh=K zz=MD4JzgS825kT+l6f=%Z3GbTUj~GQpRm3)u|bD`>(I0STAT!s|JjF4{jG+*wdq?k zb08!+dji0goEZ+lg@-`us=@(`faE4d06}u>8UXQcqbTnItpt$25&y#|v~Ko202>P) z!u2;CU@CzA5f0Zs;JBs%>Ifiz`}2>H+;t-903{wm$Y1UQIsO5MH#uhlz@I!I1Hejd z3J1JMCY}WB10cy`_W*D*bP7;Q0O9-7JHEQRDZl~-JoK-)u-Boi1MmS)z5m2zk^uTw zNYMW`1}M0WWE0R$3J>M1dkp63qdw<<^(m6S-U3LH$sPco37~%`x2%4{uQ0%$7JCGxRSvd08$ty z7YGP}K!8szC(qNg;R5}?-%pd{Q49U4{m+Z%uO0Qcxt{{a4F&_bxSoRipVyOwm-i`7 zPkMh}d(!>;jK`Lf^B=~Zfcy>TZwMeD6#A6wr{7Pop4z{4o_c@7{k!FPg#IW){}1@T ztw0`c{G|0H1p$){KLXg3k3IrKk{#{<82>)Q!+%2bG|~SvQy-)CpQKS>{VTA^erW(g zB6K}=P7nmh4&~$pf_WbA0OsW3Om@@+ki#Bh$?+6-b9)yc`%`2&B#a$o%&jf0T+q3> zIe{FnT+H8S0>PliQ|-UyKqwdVZ@CN*!VBaObFTynRB8;|Nc_JKTtmkk_{9AXcP+O_LeSI;74q{phts$cY$CCm<@-A9*O%o2$a=4I}pF4=4T zEyEENm2@$rY!w-@u~-%zIPg4o!*wvD!F|+|KL51!71d~}K-=ZP;ob7#-EpIuWhMXi zyKR9LFV>$kuUiRsM=d1jJ&#LaYg{tFQ+eov4h@=(eX`THUj~t`eBmM~XWe#13YvXG z^7@OT4&U1r{G8JBfn;osXWL_BVLy{4#Q0)tX|XvBYpCbrvUX7sIrP7H9hrM2Ax|4(xXp+gH1ny|uI0na9uDAgv&GW*_ltTO+9|fITi6ngu~nkj zS0npPX<9%9Q&9bgdL;{EKD95#S)WhN=Oae$W4Zg#A&kT;t!*KuaA)NHE-a{9F%8H z@sqBE0cqWWja1`x5?+uV@j-g*@{kWxDqqOuG$qgiUj*rMoH@{LT0t?K@@I79D$t$E zW6RW>$adHf8X`ZOzPc4292i+sKEf2-_8WUR(G7e+S`4(ze%TjOb_rX84m{xdVj{&- zuT%uB#9;yMqycx~e)kuC_lDy7ltJpAr&ech%o(I%|e=KS&goAq^B;cl|x zg#5(Wdr2SdNpHzJmR8tB_A&MbHocmJ(*yP$l|c6XfMqGeZK%6crNU(l_!&RTFE;ggCe=r-4ygaXuUs{Fy= zw_%c?$*OfQkQp={;^WM5R9E8Yc9OwW+!ybzd0^W>P|9{u;0xP(3t1zT+dw4@Rn;uP z&iQnbv}*Qgo`(m0XzmU)8s5$F?dG=NO&+1}jz~u8#sjNRzv%bmT~+Gb6(*^YrJGwC z3*ZN;`%4JP6>N%g2!^|yBW@_F`>shpc;WlIA>sby{e$Ut1RNGkRLkP_xm}q!tpG7G|N=@NgV4 z&FIwZ2ScK8COsFFFqLA`zx26>sH#HdV`lzgIBa# z%Td~%OT%@J)47DoU5w~0Os%&1uI+LXf^oRu1lt~0*;Xlbezqt%q%Q_u*eF-fhj*^>1^U zt00IljO#(gy7FJQX|49cGc)rG_hN>1amnS3K1=z6m+n5UANJB@3^Vd8mBwcjPZZ@0 z%`P(7hHcySX>O+teSae*zjgzd%+N>t5;LgJI1}m%813$Li0QcVETLk6D`soqJ$~^k zQ0QycqIyY zd9*vpp>Audw}{2xi%~Lgls}2jv@5vf!t!=V_1i)WHtMM_*SI_&%h85;^VS$$pCQbx z2zi@;1& zwPY-J0k?d&Bx-|~biF>gIIZV~H!(#kKGqi!LOPK`)D%Y1LO2_Xu*f?dh0}$vYSr$D z@gAeDCZU3#ZF#Ixgfqs=YD_Z-30*jbe@AprD;yBB(WXMksN%Z=5qncW9rP3An(h_q zHetZ8q%}b@>OO%pt_*VjB0pQR54)UgDHU;8kb5sLFGnFalVFgtlUi@NE=>?>48@NO z`DD%W5&dgM)K(|@3kj`fRm(~aXx~mT`Qc{7NT*JBkX$IgUFf->I~-uPiBIukhK z*fpGhnJ*4{ZP{#PrEUzOZ84l?4QhRA*Zl0WFPQi$QR|J0P_9=(rC#s^LuwB@j$^*8Xrq1)Jo9PzQ7ZG^Q(nxb5&EB_81831+O#T8(e+59Q z*&e*94aLVsD)3v`CK9qwo-nS{VYi4kg6_ELMt$5?e=ZT2lCX#AiiISVD?zUSom_e? zdy-?!LVB;+F)9NW(Rg1wB;zN@gQ)?VPzy;KxUVSCw||yp8y+kQAcC>J@*h?)+AQi( zF(TwhS;E;}h{*A8?@RfRnUn9%Vl9-Cd5hBQ7tCVtz`P8zm#Cb5!OLexGdJ<8t5n8R2X*>5$5D~t8G#ez5vPNa%NKF%wr zZamg#-iqt)--;J@rKi)6tHUaB6>9|xO;VdVdT=`o0+LQ$b>bDF4s&>W-~8|K-qB-5 zV~Ue`dlH*}BPP=&BUKHZml&w4q=Zk&o_@BF)6AG%iycjv4nbSXu?CSx*p=Hmm!Itmiy8K=vAdI4K@$#vK z@sv9#Me|{qR($fiR`|^h473l?!n9jaTJ|)6$&m9k`!rb!%n|&!Ws!mz0+op)>BfVy z`&pJ3F-F7*KM3Xn8G;!|r$zA^OX1J>o0_xH9x7?|o$VKo%!sA*@XXVoBCoZq{COehq8II&aVL zcj4-GWQmb@WGpcpMirmP1PC_Ru4ziNe7wm0p|VZ)3$}{g!QR=Vx8~aYMa-8!zjFbI zot>qS#L@#JPyv1g0c&s(Fj2n5kYB|SXEKPi;AdiC#)3N8ffI9dVMCG;FEwLtalZsA zgyVh|%(!a+u7xZh@WjEj^r4VD!l~h-i=%Ex8OPe>vLNsB%E6H!zQOl>wwnCVb~_$V zP=XSE10%1-$X|HqZn>hj!8#}QVb3!ewxl+yR3lSIX`s6#Tp4OBU(PO>LavUnR^Eee zl=4v#F_|^0rl`ZPHZF1)KTG<}dJ5C^HNw(+FiSJN>AX)ejrxigs{xO-PW@QQNc(&A z9bsmFX?p_jeb`#zxJ(!4E9;L=Wg3g>k^0ToI54#tN=r_@Q+4BS9>#@78pa_Y1JUx} z;{XTrfW6XBvYb7uNwZjaMQs+|t->I=HW(B9*N&a!0-Pf);E>KJl<%59&^n^%nQlRm zl|g;l#5^VTWgzP(Io;@;*P07>yZxSWT99v*WP01_a}Cv3&ulWlNh21Yzwh_auSM;# z3c~t|>$Nc|%A!K*jjAhZh4oD9)+!HDY{@>_OuMMNaMjkm*u8Uv8o=HJ`)@nd9Phrr zF@D~1l~w#K0kB0C%T=8E&7SxINg(1%p}9q*hL#RP+T{BOHMLhEL;Zrn zDOZ>eh%WH#5&guq;$>4^eZSHB3ntp=UjK$E#|H}YtnRUH?YDm_#l5I;H{<;EMneg| z#*&k&Um!I+rWmt{^4kQR0G{Fq=PSZOE6_0T6aje5& z1o;n*VK<6>*A!J90$m6RBf7Rh(D_ebem8@)VA z&fk`{gO6>f1lmiLm9tbk!h|*M;II8lVdRy-fb2-IBJne@8=6X>s;5^sW=OyMF*-&| zP~*Z?;xQXr7rBOJ8ra1ALo<;BnZRpu_Gud{@&@aoflVhHt`rR&4H63Nv~#?=NQRi` zWecy4bHS9{X3>g<76Y*JZT`_z33zhPUiiQTfx0dl4-)}8kao(z*i75p@i~CvaZCBn zs>EdeF%DjeRBE;^y3;Z<#x+VBp=1E~1cmi{6z=!N*V)oR+M zB_n)RC1i#X8aU;x4IJ?b)3?W4%&_C8amB0I(LtNbJxH7Ds_oGS<~H}04~zWgMI+5$ zf5wgL6_iaNG>*4*e1W$^X1WhthP7893f;VD08Q1z=G9jTrLUgo1V(1>fBzlgS9~h^|QSOwKsC@ zmAL%O$MM|c*~x}0M@6g0#ZZb9&$7>Xsq5EQ+s*&u!*wc*u!LqT5OlsPa=II4ARkc%hD zZKIVUk;^{qD!nzj1>0j`WOG)LTEAECjS-C^ueR-|&BWfMRHz<^oCD%5XpfUmO5AO# zPk%$VCoM?b|I0~)Zh;}bUB&R_*?vz)AkLhWT|$%*j9ejpaoOd^=24<6dwooOF9v8* zk!+i!Gez90j(l8JGZg^a4}Q0tfaGPWrb#|Mhjv5D8e%OB{LPrPndnC??HO0zaUwRCc0i{5fU3#+jue-kF!EXcsUh~1 z{zcw6$>p-q%n6}lM!PbKcrGX&Z9y*WnmV=B+WxY7eC$D6UHb#<(>u3;&xgidui47C zYM$Ts9Y846zIsb)^`t-ZCV^>tjjSJ@KQn<3ZiK7l_^bsVEjfzKS3Qb4s$ols*I}Ab zGao4Qnp$pJ#)kU}w;;w&0(+md;OY+C(H2F8)Yp?+#r%zj%CWOn#c$jGzGT6A_-!9A zO0Poy^)`_g9#+sBn0h83&e zrUuEhY=Vs7FtoB>dFUnBF)NvW{rG(=*YLUvgTBDfbbF@Wf62wDe{yIzsegG6r}fhA zCg|5*ARm~o!>*s0Yj}P+aO--YpGDs;r&p;}c1VLgeqp77faT6uODD#^Ng=Iq0 zKlR?1xaiq#4a#^Ie#v9c*b4xU0+Z=3RNcU%NpMx&uz*{_H~B~;zf19z@e zEw|Mwo7W)~7`hbwtcbuq83RIn?U=X<-V+L`mkPj+1T?*O8b?*xlp8EVXqHRll#r;A ziU)PY!&ph)pb*4%lUEH?sDg*#kWtM0*C=~@z9_NF+hk&sVnJzaULlA_ zuspY6EB6%FU57C4BB4Ep*%2&}ovZMTZEW)5fW6dW#|l`2$)yy%DB-uD@l{!)*q~R$ zeuOM3(ThV_4H-pn=m%TiB8qOTfNRNg+(55*9=ex`x!}+!X&0M zuyLGBEDNS=xkg{Ww0}i*LtS{u&7LDKlP(b`^hQ}P+sJzQw0Z=fWHaMe4>TAo<>|!a zwy3i5%UNSH4BaD2#HgJun<2F)6q6caW%9e0X2aDcO6J=skkWUe#!aB6`->#LNw14a_V|N{+Gbb}zX&K+6L4iUr+=qB2O7U-Js@xR-w2=Ny;op9frk6;+b>b%`e z>4s(ArO=j-bEdIZJ^%>^0#<&lEa;BJ;qK5MscGu-XSCJH zjvsG+x+e?E^E%v8rZ4~07rA$mT=Am!c}XT(cODk*4EJHCwsfG8)_;fsj)F&*jfcba z^+Drz*W{n7Gk|0{4$sL%u>hFy!Pjg@zWr+dT0JtM!$niYrYXT6TXB%peb;d%P9N2` zDcw|K&e-mv+z75jRY(p&+2{%%i=VAXp;E+Bz9kkcwb5~7qK^Cwtyxvsz1g1DIVT%r4Dh9^yi)H>*Dcowe^CyTP_R0kf8m(v z5qDKcZg)yv&W#k1R;*e^V39TQ^VCWdXU3U2gSaqA9D9E6^ZR9opqk?^ES_&1UoV=) zG<7+O(8P3Gd-!XaE&0X>(56T|+Y%kzR!+Q(q)TTR!1mAWe0LlSho5oOLo!5m`O|)s zk}B8{h4yDWmbQ`%r)ZK6jP}`45NqJU$Gx3|sYkSvq z5XsW_UQ%-$KsQ?Kxo&!4Ga6WveH^}{+Hj$9nl{a|bk?**Fil{84NF-oc9`@X{NDW5 zL)xSFzBPV#^>?*Zeo3_idjz%HK`fGv7PBT~E zuZY>)>*8kt8S|96zwEHfuwvH{WoUU4B_fI7qoPNQ6UpGkBNP1?L?e-aSai5Os9cqkNZ_<-Fl_oq{*Nw$av^QY1rVRSD4)ZFY6p(jI6(lg1 z6xmyXf0BY4{VjG(P^yErO}ON^-RfFl9rCxFr8=OBd+Bi7@y;%6hY&Hj2J-5 zj3XVl2_~*q!?TG%AJ0 zoH2lu83k4*3L;8iHwh7i+xWt25Ai|xNuCQUtN$_@+`!pga!zu86rHNK)hn0A1FbDD zbn@o8-Ktr-`aCTnJV^drZ{gbTH;lY$(6(ocqbL^x_7r zT&{#}61le8=Ji)8f1j0Z<}=d$pI!-FWPCR0Zzf^-fp1K8<(e$K$s%+AvE;dkA)DTIR^Ogx;@hKM^X&qFWqlwmC$7=~OzTHg^ zwivgr(f?UO(Zgm&e=_+KNs)o{(t$6z7t0()GG=4~hx4^2_m-fz#!1X~G~ChC^Sch! zcSB!cGR62Tv@5ZE_ZO>$pW~I*eu?=VMk<;Pzf!uKE%}VO3AbF>3`cgEZzlbTYRC{1 z|MP*q$uE9$J{yF@PkeT$7qqVMNde_SK%KZjJ5Ahj2B5fXPBT>dAujVj&Q4d#yw=Zlp zIZ~4vj5HM8u1;=zr^%A!CSsP`>S3A^t>)(^zwfk!Zw=i0gD)p~2V7(kz3wD}XI_rE z!+xCJEIJDXE(2DSekrZwWp1|^-b~@W$SvRAtI5zWa?A7%whVR;K9oI-7p9VV&qD3; z{8XDYFvOhN*<9v>V4Mdkp+QKv)N>2Tl8Ib?ax7k~>jZ*syDd@5eG0&=*x9nj{(h_K z)l7aB)}n&(&+gk|mPB+3=2e6WBW?;d8=12Gv&AUsv;?B!Va1NYX3|8$R<^>LN!+S2WA5>vxyaZIW*cCQ75>L7;g< zuQ*-IDp0Nx-(U;jx3qv;6yvT!++GS0KBfhMRT1Sw@mQFCz^>LfV`$Yzo33iO87wVJ ztnWE#CXq%~)f|&u{KbY43I=z^@^WnvH0@VOw627qNJ?$5P0pdo?#p*_YdBO+NBS#X z<2=(Cv(H6mkP*BRw)Lgfv{u234VRxR6fl3AZ}7{6{K)*Q?oMnXtIxdls$khNZGT?d z7%?Wn;8VD^#D4Cc;4X>@iQ4E&{_8e;0=EifN$KK*wZ6^EE~?*D7a!Y!xP+e&{BH}3mM;&@*Z3* ziE7Bb8~Wvc9TiAODNg^63&Aaq+6%{HTReMCp{3^-71n)LvHN=aP$BEOo}Yc+`V-lEvZhkA`$V~YK(TD_@8_y!m^*n9)&@XK zyiIPSu%J`GCgF$DQI%l1gc@sj%LFV{Eh-tU;Jx-!yx6@NpNCz6HGw_gysBZd+wg z3%P1j*Cqz9S4-|8b_sIiabzIcHyh4u+NzqU$cFJC+pmfGrt;63tOFIkQN|P5GV*Kp z5z!R4``viF%|R38MTLPV1q-hB5d(e%75HCUGW99Gvx&I0;8b&1(n*df+EZ&_>F=d2 zR-Tq}l*q+n$)rO?Scabt@B>JF{EAIIN*<;GADP76_(@?wU5c{ol}bWs8JFb{Iye)N zKhZu~T2LorPNc|5OeL(i{rDvke~nxDUecj6R(Oeo^4-s?ugNg1rE%Y1q(H*;3}!KchfRC*fm^ROl2NcUM*^KKCXma9g$@V z9EXpr=Fh)cg%Ng~pR##6AhoI0&A$u(Wn)hdOSF&QJg2q42YxskCUy5b-9hoxClvxv(N)#Jck&&U zFKLo8rl_QOaym${C&S|(zFN?wN#@&VBY=ufh{6!|`NC6RQBIS&b-iyVo6jLao9+~PYpPMJ1y{Z&Eom)tLG4=YAni!|Wzw1@<^oWkyl1SogsF)Z5 zTyowHI$!dHU&mO1EF37;g$+NCCb&Qoe4-kbG+W$r0DUYuVDmX^=%zVcjws5?$`Ba6 z(cW!d)4^sAtH*>p!hI)?H-I}LyLOcv=qaYkA0{qmX4sQ}fR5sZE}gzIE-m3YH~)qG zoznw8Uf3&7@No&t^0%x0=%uE3=jFq;0@j`KqmP(lt1dCeXNGBYkq=^K0$Q(Dc0G)y zI2u3Z&#UymIlbs!_{RUO5=jq{@2%h3JNR4?f9E=l9ay&AVf98Ef7Se&n_rYz-&I+$ zN*OBigYtl)80TTB=FiAOR7T9B9ksrnF(SVUXQMwzQ(u1i69BG zWD1Y54szP0LBHB)=8I`{1Yf@!RLZ^nX@<^+xpLW0n^xl`=2RU&V!hRQJh?#KN%oLiyb;ELSMew6q5ePivWg_UyEer}b|+9r}pIZ;zGd zkAB3KnCVPp(;FeS!d;1z!A0v<1!4A&#SYJw62R#F9awN3kb?|DcbX+IuR1IlrLLM- z7@Xp&m(3gmhn{Od1|Dw&TI|WajuuUg0~mHTLUQ)@u;m%dkb5 z&FyNVxD*R}Pd|RufHu+2Ua1g0jl=$tcvW5daWhjXuE?p2kw;z0y>tj1BXCQ)1IO@C7Z5C#&pz-|0kR zR8`*|$%Bm@l&X~EJBV2d33>Y_1;!aWMN7amsw`hs;0rMf*i( z!U4!l;e2zmWQoeDqLp+1^Owj9=fWQCiMjP+>*E_LDf_KR@mF*eyNvIPu!14G3v4T} z()>m?>0?5j6~>uu&Np=fZ@;V8VKR=mfsNMI z*J$ppZ($|6A`~>Ief8LWwOD z=MNS7XhWIuO-qgIQL_zYj;hjkSD_OWV9Efsec`j-vzRq?A9gQIYKI2P`jRHB7#Nu! z>2JoIZ&^b!<@glVLt9?UKvOkKRZtvT@vTyIg^xppD(zmbO;c&9#Q%bi zEh7p~%juVnThA+9=OSLPd-#?FQk#yUYSMJh2_4Ah^rve**1Ga0bjXjDpcykZCFHZx zBTSo&{o)YI3A7|!AVWor;zQ386%)m6uv1shFA?L(ejf0OZWT}=vHh;4Mx8}V;C{X= zh41uwZCuME+wpr>UFBT;&uAE`D^6{~aPuYkmFLpoDvAxsy_ezc)d)3=e1;GeyF~sM zXr*O!W+<2bM6{*RpmD+V?Pf_|-skww9Hz}oo!<&y?(}xnLm~s4M{`KNGI#D`f8NTA zg&3)!J{Cb-labVwVg8cn8?V%*CXBO!zb;5w!<#cSO*%{G@uuC-U>gC(z)3}1B|2JM zk>n@6W*70&5z~bY$)71W)0u8NUuTRgdV-S5GA{)~qP@GAMeXI4)m*kVw|O}gCfjwK zQ~FLiSl-x86mFQ7BFq+zR;vABUdmGC2;z*eJ6a;?v-LyregkIu2_W zGxr|Zw6rsIl`m4K-EU7|M>`$CB_F)r)s^xl3JVIMeJG?MnJO*+z|YFuOOrV?kmND6{yKz4EW=b@x8s%0W2ky zomaJsO5K67a@w_pN^)@VMyjYLI=i&FJnf8@@srymbW`Nt)7!>XU-gci5IJd9L`z!E zN<8k6AWs}#dC*h&{J@m#yKYV`FIOi$g8avc@Q{j{V71d`Y;;nbj?X^`OeZP)Os9&G zC%%}85!)5vUpMA62izDOr5 z`lbk#1b&K|WMuqGZS7HI?Vk~IZfQG6nN~jf$n3j{IY8t2aj^cl)4B#`uT4kfrKOJO zXRdFdk)cu5pE0HaG!e5Gj%uBcHc3g(jAHD0IqRoo864JA?qDHV(55!H9gTqI^`u>|7{NSo%WTHvtIj1ev2z}MacZF0?WNuk^dUE z59x(=GSil^(eKkA=rw5G0SSryHvz0VY}SPi>{9HMj$_#qav#sMckJpCPPi zUCr@kz>d zNO|u2P8(glIWpBXRrZW5FVcCC;MdTf#~iD~S6Yr`w-gOG^*6URZOd=7o0|(&p@`yR zQeZMv9kEVWb=Wl3i!q{ebaJjVD3ECMkXSZty*q`;RH1+_0B;iF0*rEC!e=~-NDraw zWI|mR&Eaf+AhgA;5=H^vWeO~y+Iu^L6u>SCXeKo1!6mpx{&ax^fdVNcgxe|WnH*_U ziA%`69_kJXHK{3{{eJNA?>@Z8X{eu7ZQPtB>?gaW~!Ql+KR2uicVC0x#@u zrLX;uhkClt&b{&P2h9JzirDt=hC)TwZ?%`a7a?jRr>dghNiyf*?6@i^eX5Q=*7xJcDH|iHF zb(O)OuB<4PV}7n(NhN~oX+Rr7>!RqGL!m0HIz6^+lPFvVNj5Lhpmsd<)~ z^ZHKdzwT?k?kF<~ao>cj2B~2ZuGR=57|6pI8IX3Ny-dNIz;0Z}W)(k?u;?R)R>TAP z%}RZBVQX<*w-Xh#IAWq00z%T`%?<*(Pq8m$H%P%o=|U~&_ed-yUCg%GS7 z`8DS|Vn1kElrR6j1sgU=$?eKZeL;R(Q*gOw8~@-|59W$$mF_0aDiB!$3kVGza8JN; z`^-#W&&pF%3nk-n(=FunfZJr~nH6W&&-s-IYdVOpUVxz@Z~;OrFBwyXk?XSnZ_ZFo z3NZ9j5FnDxba5XGUw9Q3YnI?a*5T(scXch2~Owk9-qHajH z?{BFreve2a9X`S}1dHCF#=@_g!^d-FbNhb`I~` zqPd}9dzRHE+Vy~XWGYW*{G2Mo`O+Ng{YTa%k~xaUMaF`z4m+%Szt-LuPoGKH>Us1- z;`j*`d0l+&tuJ>5@9DTV2M@IOD-e`FX^&L{BTpgeZzgMfW5hZuuPWfB*V;E?DJCnD zgWCU#xs#~e(d-nsAxeOZgl)@BuaSj#f(cPfGFJa zKAaH$gZ|qyD{O@G0rF()5%nWsh@a+_Z2WrC^#^F&bq;7J!=v z5QY|)gAt+cgU|arUysOYAm2W(n8)Zhh(OwQZo;OH-?OI6+I>E~y1&%zWn6rnpD3b9 zM-qF46&7-wmxCDWeJb4g2LkqZ%oWu3tVxyuIqX?~(UH`%<+>5OhC4UdUe^k?P(s4E zmaB3GMeUvgFDI$Wh{{)TWYa}x(*UIt2?mEEofd_`!yE5``K!xnxuW!w5VNPnV{<$wA(n<3D2IZYSyC{N#YwN{|`Qmt3$ZKd*Dd z!ETYqchq7_^Ujo?rd7iLb>*Boq>casN7G9KPfwZRw=45@g?7!^mwvu7EiA)p5rBIG zqvQWc3xqx~vYyy?f`X3>H)|I=b0ACdM+|sj94JtqMcmce&J4&2lHvg;?_$7o(`Zr5dE(c z9thtfoh=U&o&g5teqwX|>na$^^+YxNmy8Dr2LEY=56t_g-lGzf?~k!yFc0*J>-A52 zU=TO&6T1%tdzAhc7B3I)6P@l~ikx6hu0Ldt+*aQI0}LlOALz;8|Kae{{XrlIA0PCQX7_abcQ7Z*`ps^k6f;Q>2X20x&LACuZvI+=Oe}L zPdy%yu6S{^4gy=5ctnD@$zzU{|SbVlk1=1|11BXM}Pke zAsEEN$@fPT9%Z0McHX~k{3zr46X4?{Sampling x - - n/a - n/a - n/a - n/a - 0 or 1 - -

POA&M ID

-

A CSP-assigned POA&M identifier.

- - -

prop

- - -

POAM-ID

- - -

/o:plan-of-action-and-milestones/o:poam-item/o:prop

- - string -   -   - - n/a n/a @@ -1187,21 +1163,21 @@

User Identifier

n/a n/a n/a - [unspecified] + 0 or 1 -

CSP POA&M Identifier

-

A CSP-assigned identifier for this POA&M item.

+

POA&M ID

+

A CSP-assigned POA&M identifier.

prop

-

POAM-ID

+

poam-id

/o:plan-of-action-and-milestones/o:poam-item/o:prop

- NCName + string     diff --git a/src/content/resources/xml/FedRAMP_extensions.xml b/src/content/resources/xml/FedRAMP_extensions.xml index 6e5b3d6c5..f586cfeb5 100644 --- a/src/content/resources/xml/FedRAMP_extensions.xml +++ b/src/content/resources/xml/FedRAMP_extensions.xml @@ -2,10 +2,10 @@ - [EXPERIMENTAL] FedRAMP Extensions [DRAFT] - 2021-07-06T23:07:21Z - 2021-07-06T23:07:21Z - fedramp1.0.0-oscal1.0.0 + [EXPERIMENTAL] FedRAMP Extensions + 2021-08-11T23:27:44Z + 2021-08-11T23:27:44Z + fedramp1.0.2-oscal1.0.0 oscal-1.0.0 @@ -32,6 +32,14 @@

Revised draft to better align with OSCAL RC-1 SSP syntax.

 + + 2021-08-11T23:27:44.00-00:00 + fedramp1.0.2-oscal1.0.0 + 6b286b5d-8f07-4fa7-8847-1dd0d88f73fb + +

Release reviewed for updated release.

+ + @@ -67,7 +75,7 @@ -

This EXPERIMENTAL and DRAFT file exteneds OSCAL to meet FedRAMP requirements.

+

This EXPERIMENTAL file exteneds OSCAL to meet FedRAMP requirements.

It provides the extensions, defined identifiers, and acceptable values in a machine-readable format necssary to meet FedRAMP Authorization Package requirements.

 @@ -453,8 +461,8 @@ - TCP - UDP + TCP + UDP @@ -681,17 +689,6 @@ - - POAM-ID - POA&M ID - A CSP-assigned POA&M identifier. - - - - - - - control-objective-implementation-status Objective Implementation Status @@ -864,12 +861,13 @@ - POAM-ID - CSP POA&M Identifier - A CSP-assigned identifier for this POA&M item. - + poam-id + POA&M ID + A CSP-assigned POA&M identifier. + - + + @@ -1221,12 +1219,10 @@ Regulation or Directive Industry Standard Guidance - Privacy Impact Information Polciy Procedure Guidance Document - Privacy Impact Assessment - Rules of Behavior + Rules of Behavior Plan System Security Plan Artifact @@ -1245,12 +1241,12 @@ Logo - Personal Identifiable Information (PII) + Personal Identifiable Information (PII) Agreement Incident Response Plan Incident Security Policies and Procedures User Guide - Privacy Impact Assessment + Privacy Impact Assessment Information System Contingency Plan configuration-management-plan diff --git a/src/content/resources/xml/fedramp_threats.xml b/src/content/resources/xml/fedramp_threats.xml index f29db7f5f..3a85abb95 100644 --- a/src/content/resources/xml/fedramp_threats.xml +++ b/src/content/resources/xml/fedramp_threats.xml @@ -3,8 +3,8 @@ FedRAMP Defined Threat Table [DRAFT] - 2019-12-15T00:00:00Z - DRAFT-02 + 2021-08-11T23:18:00Z + fedramp1.0.2-oscal1.0.0 2019-06-01T00:00:00.00-04:00 @@ -22,6 +22,14 @@

Revised draft to align metadata with OSCAL syntax, and to provide a machine-readble definition for threat origination types.

 + + 2021-08-11T23:18:00.00-00:00 + fedramp1.0.2-oscal1.0.0 + 6b286b5d-8f07-4fa7-8847-1dd0d88f73fb + +

Updated version reviewed for fedramp1.0.2-oscal1.0.0 releases.

+ + diff --git a/src/content/resources/xml/fedramp_values.xml b/src/content/resources/xml/fedramp_values.xml index c69783873..437e6ec8c 100644 --- a/src/content/resources/xml/fedramp_values.xml +++ b/src/content/resources/xml/fedramp_values.xml @@ -1,17 +1,17 @@ - [EXPERIMENTAL] FedRAMP Defined Identifiers and Accepted Values [DRAFT] - FedRAMP Data Values (DRAFT) - 2021-07-06T12:28:35Z - fedramp1.0.0-oscal1.0.0 + [EXPERIMENTAL] FedRAMP Defined Identifiers and Accepted Values + FedRAMP Data Values (Experimental) + 2021-08-11T23:20:58Z + fedramp1.0.2-oscal1.0.0 FedRAMP PMO - This EXPERIMENTAL and DRAFT file provides the FedRAMP defined identifiers and acceptable values in a machine-readable format. + This EXPERIMENTAL file provides the FedRAMP defined identifiers and acceptable values in a machine-readable format. - + @@ -357,8 +357,8 @@ The internet protocol transport type. - TCP - UDP + TCP + UDP @@ -443,12 +443,10 @@ Regulation or Directive Industry Standard Guidance - Privacy Impact Information Polciy Procedure Guidance Document - Privacy Impact Assessment - Rules of Behavior + Rules of Behavior Plan System Security Plan Artifact @@ -467,12 +465,12 @@ Logo - Personal Identifiable Information (PII) + Personal Identifiable Information (PII) Agreement Incident Response Plan Incident Security Policies and Procedures User Guide - Privacy Impact Assessment + Privacy Impact Assessment Information System Contingency Plan configuration-management-plan diff --git a/src/content/resources/xml/information-types.xml b/src/content/resources/xml/information-types.xml index 94d82ef35..9fa65ee27 100644 --- a/src/content/resources/xml/information-types.xml +++ b/src/content/resources/xml/information-types.xml @@ -1,10 +1,10 @@ - FedRAMP Acceptable Information Types [DRAFT] + FedRAMP Acceptable Information Types (Experimental) 2021-01-15T00:00:00Z 2021-01-15T00:00:00Z - DRAFT-02 + fedramp1.0.2-oscal1.0.0 2019-06-01T00:00:00.00-04:00 @@ -22,6 +22,14 @@

Revised draft to better align with OSCAL SSP syntax.

 + + 2021-08-11T23:18:00.00-00:00 + fedramp1.0.2-oscal1.0.0 + 6b286b5d-8f07-4fa7-8847-1dd0d88f73fb + +

Updated version reviewed for fedramp1.0.2-oscal1.0.0 releases.

+ +