From 791773dce568cd8a86d7b5b18b524884487b446f Mon Sep 17 00:00:00 2001
From: Mike Holp <mikeholp87@gmail.com>
Date: Tue, 10 Nov 2026 16:20:19 +0700
Subject: [PATCH 1/4] Polish the Pages landing page

- Real product screenshots (sample data) in place of the drawn chart
- Feature grid, platform table, privacy section and FAQ from the README
- Install steps now verify the signing key fingerprint before adding it
- Dark mode, skip link, focus-visible code blocks, copy buttons
- Open Graph, canonical and SoftwareApplication metadata
- publish-apt.sh ships the optimized images with the Pages artifact

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 docs/apt-landing.html                  | 1000 ++++++++++++++++++------
 docs/landing/og.png                    |  Bin 0 -> 79640 bytes
 docs/landing/overview-dark-1440.webp   |  Bin 0 -> 42862 bytes
 docs/landing/overview-dark-720.webp    |  Bin 0 -> 17168 bytes
 docs/landing/processes-light-1440.webp |  Bin 0 -> 76266 bytes
 docs/landing/processes-light-720.webp  |  Bin 0 -> 26446 bytes
 scripts/publish-apt.sh                 |    5 +
 7 files changed, 757 insertions(+), 248 deletions(-)
 create mode 100644 docs/landing/og.png
 create mode 100644 docs/landing/overview-dark-1440.webp
 create mode 100644 docs/landing/overview-dark-720.webp
 create mode 100644 docs/landing/processes-light-1440.webp
 create mode 100644 docs/landing/processes-light-720.webp

diff --git a/docs/apt-landing.html b/docs/apt-landing.html
index 83541d7..33eeb5b 100644
--- a/docs/apt-landing.html
+++ b/docs/apt-landing.html
@@ -3,30 +3,100 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <meta name="theme-color" content="#edeff5" />
+    <meta name="color-scheme" content="light dark" />
+    <meta name="theme-color" content="#edeff5" media="(prefers-color-scheme: light)" />
+    <meta name="theme-color" content="#0f1117" media="(prefers-color-scheme: dark)" />
+    <title>Tasky: a private system monitor and task manager for Linux</title>
     <meta
       name="description"
-      content="Tasky is a private system monitor and task manager for Linux and Windows. Install the latest Linux release from the signed APT repository."
+      content="Tasky is a free, open source system monitor and task manager for Linux and Windows. Live CPU, memory, disk and network graphs, a fast process table and benchmarks, with no telemetry. Install from a signed APT repository."
     />
-    <title>Tasky — your system at a glance</title>
+    <link rel="canonical" href="https://mikeholp87.github.io/Tasky/" />
     <link rel="icon" href="./tasky-icon.png" type="image/png" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Tasky" />
+    <meta property="og:title" content="Tasky: a private system monitor and task manager" />
+    <meta
+      property="og:description"
+      content="Live CPU, memory, disk and network graphs and a fast process table for Linux and Windows. Free, open source, no telemetry."
+    />
+    <meta property="og:url" content="https://mikeholp87.github.io/Tasky/" />
+    <meta property="og:image" content="https://mikeholp87.github.io/Tasky/assets/og.png" />
+    <meta property="og:image:width" content="1200" />
+    <meta property="og:image:height" content="630" />
+    <meta
+      property="og:image:alt"
+      content="Tasky overview page in the dark theme showing CPU, memory, storage and network cards"
+    />
+    <meta name="twitter:card" content="summary_large_image" />
+    <script type="application/ld+json">
+      {
+        "@context": "https://schema.org",
+        "@type": "SoftwareApplication",
+        "name": "Tasky",
+        "description": "A private system monitor and task manager for Linux and Windows with live resource graphs, a fast process table and benchmarks.",
+        "applicationCategory": "UtilitiesApplication",
+        "operatingSystem": "Debian, Ubuntu, Windows 11",
+        "url": "https://mikeholp87.github.io/Tasky/",
+        "downloadUrl": "https://github.com/mikeholp87/Tasky/releases/latest",
+        "license": "https://github.com/mikeholp87/Tasky/blob/linux-port/LICENSE",
+        "isAccessibleForFree": true,
+        "offers": { "@type": "Offer", "price": "0", "priceCurrency": "USD" },
+        "author": { "@type": "Person", "name": "Mike Holp" }
+      }
+    </script>
     <style>
       :root {
-        color-scheme: light;
+        color-scheme: light dark;
         --bg: #edeff5;
         --paper: #fff;
+        --soft: #f6f7fb;
         --ink: #14161f;
         --muted: #4b5167;
         --line: #d9ddea;
         --blue: #4350e0;
-        --green: #087b57;
+        --blue-ink: #3641c4;
+        --on-blue: #fff;
+        --green: #066a4a;
         --purple: #7442d1;
         --teal: #0a7c94;
-        font-family: Inter, "Segoe UI", system-ui, sans-serif;
+        --code-bg: #171a26;
+        --code-ink: #e8eaf4;
+        --shadow: 0 24px 60px -28px rgba(20, 22, 31, 0.35);
+        font-family:
+          Inter,
+          "Segoe UI",
+          system-ui,
+          -apple-system,
+          sans-serif;
         color: var(--ink);
         background: var(--bg);
         font-synthesis: none;
         text-rendering: optimizeLegibility;
+        scroll-behavior: smooth;
+      }
+      @media (prefers-color-scheme: dark) {
+        :root {
+          --bg: #0f1117;
+          --paper: #171a23;
+          --soft: #1b1f2a;
+          --ink: #eef0f7;
+          --muted: #a9afc4;
+          --line: #2a2f3d;
+          --blue: #8b95ff;
+          --blue-ink: #a3abff;
+          --on-blue: #0f1117;
+          --green: #4cd3a1;
+          --purple: #b99aff;
+          --teal: #4fc8de;
+          --code-bg: #0a0c12;
+          --shadow: 0 24px 60px -28px rgba(0, 0, 0, 0.8);
+        }
+      }
+      @media (prefers-reduced-motion: reduce) {
+        :root {
+          scroll-behavior: auto;
+        }
       }
       * {
         box-sizing: border-box;
@@ -36,12 +106,30 @@
         min-width: 320px;
       }
       a {
-        color: var(--blue);
+        color: var(--blue-ink);
         text-underline-offset: 0.2em;
       }
-      a:focus-visible {
+      a:focus-visible,
+      button:focus-visible,
+      summary:focus-visible {
         outline: 3px solid var(--blue);
         outline-offset: 3px;
+        border-radius: 4px;
+      }
+      .skip {
+        position: absolute;
+        left: 12px;
+        top: -60px;
+        z-index: 10;
+        padding: 10px 14px;
+        border-radius: 8px;
+        background: var(--blue);
+        color: var(--on-blue);
+        font-weight: 700;
+        text-decoration: none;
+      }
+      .skip:focus {
+        top: 12px;
       }
       .wrap {
         width: min(1080px, calc(100% - 40px));
@@ -59,58 +147,72 @@
         align-items: center;
         gap: 12px;
         color: var(--ink);
-        font-size: 19px;
-        font-weight: 700;
-        letter-spacing: -0.04em;
+        font-size: 20px;
+        font-weight: 750;
+        letter-spacing: -0.03em;
         text-decoration: none;
       }
       .brand img {
-        width: 38px;
-        height: 38px;
+        width: 36px;
+        height: 36px;
+        border-radius: 9px;
       }
       .nav {
         display: flex;
-        gap: 24px;
-        color: var(--muted);
+        align-items: center;
+        gap: 22px;
         font-size: 14px;
+        font-weight: 600;
       }
       .nav a {
-        color: inherit;
+        color: var(--ink);
+        text-decoration: none;
+      }
+      .nav a:hover {
+        color: var(--blue-ink);
+        text-decoration: underline;
+      }
+      .nav .pill {
+        padding: 8px 14px;
+        border: 1px solid var(--line);
+        border-radius: 999px;
+        background: var(--paper);
       }
       main {
-        padding: 58px 0 72px;
+        padding-top: 56px;
       }
       .hero {
         display: grid;
-        grid-template-columns: minmax(0, 1.1fr) minmax(300px, 0.9fr);
-        gap: 60px;
+        grid-template-columns: minmax(0, 0.9fr) minmax(0, 1.1fr);
+        gap: 56px;
         align-items: center;
-        padding: 28px 0 68px;
+        padding: 24px 0 72px;
       }
       .eyebrow {
-        display: flex;
+        display: inline-flex;
         align-items: center;
-        gap: 9px;
+        gap: 8px;
+        margin-bottom: 18px;
         color: var(--green);
         font-size: 13px;
-        font-weight: 650;
+        font-weight: 750;
       }
       .eyebrow::before {
+        content: "";
         width: 8px;
         height: 8px;
         border-radius: 50%;
         background: currentColor;
-        content: "";
       }
       h1 {
-        max-width: 600px;
-        margin: 19px 0 18px;
-        font-size: clamp(42px, 6vw, 68px);
-        line-height: 0.99;
-        letter-spacing: -0.065em;
+        margin: 0;
+        font-size: clamp(40px, 5.6vw, 68px);
+        line-height: 1;
+        letter-spacing: -0.055em;
       }
       .lead {
-        max-width: 510px;
+        max-width: 34em;
+        margin: 22px 0 0;
         color: var(--muted);
         font-size: 18px;
         line-height: 1.65;
@@ -118,164 +220,323 @@
       .actions {
         display: flex;
         flex-wrap: wrap;
-        align-items: center;
         gap: 12px;
-        margin-top: 27px;
+        margin-top: 28px;
       }
       .button {
         display: inline-flex;
-        min-height: 46px;
         align-items: center;
-        justify-content: center;
-        padding: 0 18px;
+        min-height: 46px;
+        padding: 0 20px;
         border: 1px solid var(--blue);
-        border-radius: 7px;
+        border-radius: 8px;
         background: var(--blue);
-        color: #fff;
-        font-size: 14px;
-        font-weight: 650;
+        color: var(--on-blue);
+        font-size: 15px;
+        font-weight: 750;
         text-decoration: none;
       }
+      .button:hover {
+        filter: brightness(1.08);
+      }
       .button.secondary {
-        background: transparent;
-        color: var(--ink);
         border-color: var(--line);
+        background: var(--paper);
+        color: var(--ink);
       }
-      .scope {
-        margin-top: 22px;
+      .badges {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 8px;
+        margin: 26px 0 0;
+        padding: 0;
+        list-style: none;
+      }
+      .badges li {
+        padding: 5px 11px;
+        border: 1px solid var(--line);
+        border-radius: 999px;
+        background: var(--paper);
         color: var(--muted);
-        font-size: 13px;
+        font-size: 12.5px;
+        font-weight: 650;
       }
-      .scope strong {
-        color: var(--ink);
-        font-weight: 600;
+      .shot {
+        margin: 0;
+      }
+      .shot img {
+        display: block;
+        width: 100%;
+        height: auto;
+        border: 1px solid var(--line);
+        border-radius: 12px;
+        background: var(--paper);
+        box-shadow: var(--shadow);
+      }
+      .shot figcaption {
+        margin-top: 10px;
+        color: var(--muted);
+        font-size: 12.5px;
+      }
+      section {
+        scroll-margin-top: 24px;
       }
-      .monitor {
-        overflow: hidden;
-        min-height: 280px;
+      .section-head {
+        max-width: 640px;
+        margin-bottom: 32px;
+      }
+      h2 {
+        margin: 0;
+        font-size: clamp(26px, 3.2vw, 36px);
+        letter-spacing: -0.04em;
+        line-height: 1.1;
+      }
+      .section-head p {
+        margin: 12px 0 0;
+        color: var(--muted);
+        font-size: 16px;
+        line-height: 1.65;
+      }
+      .features,
+      .shots,
+      .platforms,
+      .faq,
+      .privacy {
+        padding: 72px 0 0;
+      }
+      .grid {
+        display: grid;
+        grid-template-columns: repeat(4, minmax(0, 1fr));
+        gap: 16px;
+      }
+      .card {
         padding: 22px;
-        border: 1px solid #d8dced;
+        border: 1px solid var(--line);
         border-radius: 12px;
         background: var(--paper);
-        box-shadow: 0 18px 45px #22284a12;
       }
-      .monitor-head {
-        display: flex;
-        justify-content: space-between;
-        align-items: center;
-        padding-bottom: 18px;
-        border-bottom: 1px solid var(--line);
-        font-size: 13px;
-        font-weight: 650;
+      .card h3 {
+        margin: 0 0 8px;
+        font-size: 16px;
+        letter-spacing: -0.02em;
       }
-      .live {
-        color: var(--green);
-        font-size: 12px;
-        font-weight: 600;
+      .card p {
+        margin: 0;
+        color: var(--muted);
+        font-size: 14px;
+        line-height: 1.6;
       }
-      .live::before {
+      .card .tag {
         display: inline-block;
-        width: 7px;
-        height: 7px;
-        margin-right: 7px;
-        border-radius: 50%;
-        background: currentColor;
-        content: "";
+        margin-top: 12px;
+        padding: 2px 8px;
+        border-radius: 999px;
+        background: var(--soft);
+        color: var(--muted);
+        font-size: 11.5px;
+        font-weight: 700;
       }
-      .plot {
-        display: block;
+      .shots-grid {
+        display: grid;
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+        gap: 24px;
+      }
+      .table-wrap {
+        overflow-x: auto;
+        border: 1px solid var(--line);
+        border-radius: 12px;
+        background: var(--paper);
+      }
+      table {
         width: 100%;
-        height: 155px;
-        margin-top: 18px;
+        border-collapse: collapse;
+        font-size: 14px;
       }
-      .resources {
-        display: grid;
-        grid-template-columns: repeat(4, 1fr);
-        gap: 8px;
-        margin-top: 5px;
+      th,
+      td {
+        padding: 14px 18px;
+        border-bottom: 1px solid var(--line);
+        text-align: left;
+        vertical-align: top;
       }
-      .resource {
-        padding-top: 10px;
-        border-top: 2px solid var(--tone);
+      th {
         color: var(--muted);
-        font-size: 11px;
+        font-size: 12px;
+        letter-spacing: 0.04em;
+        text-transform: uppercase;
       }
-      .resource b {
-        display: block;
-        margin-bottom: 3px;
+      tr:last-child td {
+        border-bottom: 0;
+      }
+      td {
+        color: var(--muted);
+        line-height: 1.55;
+      }
+      td:first-child {
         color: var(--ink);
-        font-size: 12px;
+        font-weight: 650;
       }
       .install {
-        display: grid;
-        grid-template-columns: minmax(220px, 0.68fr) minmax(0, 1.32fr);
-        gap: 48px;
-        padding: 42px;
+        margin-top: 72px;
+        padding: 40px;
         border: 1px solid var(--line);
-        border-radius: 12px;
+        border-radius: 16px;
         background: var(--paper);
       }
-      h2 {
-        margin: 0 0 12px;
-        font-size: 28px;
-        letter-spacing: -0.045em;
+      .install > .section-head {
+        margin-bottom: 24px;
       }
-      .install-copy p,
-      .fine {
+      .steps {
+        display: grid;
+        grid-template-columns: minmax(0, 1fr);
+        gap: 22px;
+        margin: 0;
+        padding: 0;
+        list-style: none;
+        counter-reset: step;
+      }
+      .steps > li {
+        position: relative;
+        padding-left: 46px;
+        counter-increment: step;
+      }
+      .steps > li::before {
+        content: counter(step);
+        position: absolute;
+        left: 0;
+        top: -2px;
+        display: grid;
+        place-items: center;
+        width: 30px;
+        height: 30px;
+        border-radius: 50%;
+        background: var(--blue);
+        color: var(--on-blue);
+        font-size: 14px;
+        font-weight: 800;
+      }
+      .steps h3 {
+        margin: 0 0 6px;
+        font-size: 16px;
+        letter-spacing: -0.02em;
+      }
+      .steps p {
+        margin: 0 0 10px;
         color: var(--muted);
         font-size: 14px;
-        line-height: 1.65;
+        line-height: 1.6;
+      }
+      .fp {
+        display: block;
+        margin: 0 0 10px;
+        padding: 10px 12px;
+        border: 1px solid var(--line);
+        border-radius: 8px;
+        background: var(--soft);
+        color: var(--ink);
+        font:
+          600 13px/1.5 ui-monospace,
+          "SFMono-Regular",
+          Menlo,
+          Consolas,
+          monospace;
+        overflow-wrap: anywhere;
       }
-      .install-copy p {
-        margin: 0 0 16px;
+      .codebox {
+        position: relative;
       }
       .code {
-        overflow-x: auto;
         margin: 0;
-        padding: 22px;
-        border-radius: 8px;
-        background: #171b2b;
-        color: #f2f3fa;
+        padding: 20px 76px 20px 20px;
+        overflow-x: auto;
+        border-radius: 10px;
+        background: var(--code-bg);
+        color: var(--code-ink);
         font:
-          12px/1.8 ui-monospace,
-          SFMono-Regular,
+          13px/1.7 ui-monospace,
+          "SFMono-Regular",
+          Menlo,
           Consolas,
           monospace;
         tab-size: 2;
       }
+      .copy {
+        position: absolute;
+        top: 10px;
+        right: 10px;
+        min-height: 32px;
+        padding: 0 12px;
+        border: 1px solid rgba(255, 255, 255, 0.22);
+        border-radius: 6px;
+        background: rgba(255, 255, 255, 0.08);
+        color: #e8eaf4;
+        font: 700 12px/1 inherit;
+        cursor: pointer;
+      }
+      .copy:hover {
+        background: rgba(255, 255, 255, 0.16);
+      }
       .fine {
-        margin: 14px 0 0;
-        font-size: 12px;
+        margin: 10px 0 0;
+        color: var(--muted);
+        font-size: 13px;
+        line-height: 1.6;
       }
-      .details {
+      .fine code,
+      .steps p code {
+        font:
+          12.5px ui-monospace,
+          "SFMono-Regular",
+          Menlo,
+          Consolas,
+          monospace;
+      }
+      .privacy-grid {
         display: grid;
-        grid-template-columns: repeat(3, 1fr);
-        gap: 28px;
-        padding: 54px 0 0;
+        grid-template-columns: repeat(3, minmax(0, 1fr));
+        gap: 16px;
       }
-      .detail {
-        padding-top: 16px;
+      details {
+        border-bottom: 1px solid var(--line);
+      }
+      details:first-of-type {
         border-top: 1px solid var(--line);
       }
-      .detail h3 {
-        margin: 0 0 8px;
+      summary {
+        padding: 18px 4px;
+        cursor: pointer;
         font-size: 16px;
-        letter-spacing: -0.02em;
+        font-weight: 650;
+        letter-spacing: -0.01em;
       }
-      .detail p {
-        margin: 0;
+      details p {
+        max-width: 70ch;
+        margin: 0 0 18px;
+        padding: 0 4px;
         color: var(--muted);
-        font-size: 14px;
-        line-height: 1.6;
+        font-size: 15px;
+        line-height: 1.7;
       }
       footer {
         display: flex;
+        flex-wrap: wrap;
         justify-content: space-between;
-        gap: 20px;
-        padding: 20px 0 28px;
+        gap: 12px 24px;
+        margin-top: 80px;
+        padding: 24px 0 36px;
         border-top: 1px solid var(--line);
         color: var(--muted);
-        font-size: 12px;
+        font-size: 13px;
+      }
+      footer nav {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 6px 20px;
+      }
+      @media (max-width: 960px) {
+        .grid {
+          grid-template-columns: repeat(2, minmax(0, 1fr));
+        }
       }
       @media (max-width: 760px) {
         .wrap {
@@ -286,186 +547,429 @@
         }
         .nav {
           gap: 14px;
-          font-size: 12px;
+          font-size: 13px;
+        }
+        .nav .hide-sm {
+          display: none;
         }
         main {
-          padding-top: 35px;
+          padding-top: 32px;
         }
-        .hero,
-        .install {
+        .hero {
           grid-template-columns: 1fr;
-          gap: 28px;
+          gap: 32px;
+          padding: 12px 0 48px;
         }
-        .hero {
-          padding: 18px 0 44px;
+        .features,
+        .shots,
+        .platforms,
+        .faq,
+        .privacy {
+          padding-top: 52px;
         }
-        .monitor {
-          min-height: 250px;
+        .grid,
+        .shots-grid,
+        .privacy-grid {
+          grid-template-columns: 1fr;
         }
         .install {
-          padding: 25px 20px;
+          margin-top: 52px;
+          padding: 24px 18px;
         }
-        .details {
-          grid-template-columns: 1fr;
-          gap: 22px;
+        .steps > li {
+          padding-left: 0;
           padding-top: 40px;
         }
-      }
-      @media (max-width: 420px) {
-        .nav {
-          gap: 10px;
-        }
-        .nav a:first-child {
-          display: none;
+        .steps > li::before {
+          top: 0;
         }
         .code {
-          font-size: 11px;
-        }
-        footer {
-          flex-direction: column;
+          font-size: 12px;
         }
       }
     </style>
   </head>
   <body>
+    <a class="skip" href="#content">Skip to content</a>
     <div class="wrap">
       <header>
         <a class="brand" href="./" aria-label="Tasky home"
-          ><img src="./tasky-icon.png" alt="" />Tasky</a
+          ><img src="./tasky-icon.png" alt="" width="36" height="36" />Tasky</a
         >
         <nav class="nav" aria-label="Main navigation">
+          <a class="hide-sm" href="#features">Features</a>
+          <a class="hide-sm" href="#screenshots">Screenshots</a>
           <a href="#install">Install</a>
-          <a href="https://github.com/mikeholp87/Tasky/releases/latest">Releases</a>
-          <a href="https://github.com/mikeholp87/Tasky">Source</a>
+          <a class="hide-sm" href="#faq">FAQ</a>
+          <a class="pill" href="https://github.com/mikeholp87/Tasky">GitHub</a>
         </nav>
       </header>
-      <main>
+      <main id="content">
         <section class="hero" aria-labelledby="hero-title">
           <div>
-            <div class="eyebrow">A clear view of your system</div>
+            <div class="eyebrow">Free and open source system monitor</div>
             <h1 id="hero-title">Know what your computer is doing.</h1>
             <p class="lead">
-              Tasky is a fast, private system monitor and task manager. Follow live resource use,
-              inspect processes and keep control from one quiet, focused desktop app.
+              Tasky is a fast, private task manager and system monitor for Linux and Windows. Follow
+              live CPU, memory, disk and network use, inspect and control processes, and benchmark
+              your machine, all without sending anything off your computer.
             </p>
             <div class="actions">
-              <a class="button" href="#install">Install Tasky</a>
+              <a class="button" href="#install">Install on Linux</a>
               <a class="button secondary" href="https://github.com/mikeholp87/Tasky/releases/latest"
-                >View latest release</a
+                >Latest release</a
               >
             </div>
-            <p class="scope"><strong>Linux · amd64</strong> &nbsp; Ubuntu 22.04+ and Debian 12+</p>
+            <ul class="badges" aria-label="Highlights">
+              <li>MIT licensed</li>
+              <li>No telemetry</li>
+              <li>Works offline</li>
+              <li>Built with Tauri, Rust and React</li>
+            </ul>
           </div>
-          <div class="monitor">
-            <div class="monitor-head">
-              <span>System overview</span><span class="live">Live monitoring</span>
-            </div>
-            <svg
-              class="plot"
-              viewBox="0 0 420 155"
-              role="img"
-              aria-label="CPU, memory, storage and network activity traces"
-            >
-              <g stroke="#e4e7ef" stroke-width="1">
-                <path d="M0 25.5H420M0 64.5H420M0 103.5H420M0 142.5H420" />
-              </g>
-              <path
-                d="M0 111 C24 105 27 53 53 65 S80 125 104 91 131 78 153 84 179 36 203 56 228 112 250 82 278 93 299 58 328 63 350 46 377 83 399 57 420 51"
-                fill="none"
-                stroke="#4350e0"
-                stroke-width="3"
-              />
-              <path
-                d="M0 132 C26 127 34 118 55 120 S82 115 105 119 131 108 155 113 179 107 202 109 229 99 252 104 280 101 302 105 331 94 353 99 379 93 398 97 415 88 420 91"
-                fill="none"
-                stroke="#0b8a63"
-                stroke-width="2"
-              />
-              <path
-                d="M0 143 C27 140 34 138 57 140 S83 132 106 136 131 128 155 132 180 124 203 129 229 119 253 124 278 115 302 119 329 109 353 114 379 108 401 111 416 103 420 105"
-                fill="none"
-                stroke="#7442d1"
-                stroke-width="2"
+          <figure class="shot">
+            <picture>
+              <source
+                type="image/webp"
+                srcset="
+                  ./assets/overview-dark-720.webp   720w,
+                  ./assets/overview-dark-1440.webp 1440w
+                "
+                sizes="(max-width: 760px) calc(100vw - 32px), 580px"
               />
-              <path
-                d="M0 151 C30 149 34 145 58 148 S86 140 108 144 132 138 157 141 181 134 204 138 228 130 254 134 278 126 303 130 331 122 354 126 380 119 401 123 415 115 420 118"
-                fill="none"
-                stroke="#0a7c94"
-                stroke-width="2"
+              <img
+                src="./assets/overview-dark-1440.webp"
+                width="1440"
+                height="900"
+                fetchpriority="high"
+                alt="Tasky overview page in the dark theme: CPU usage with per-core bars, memory and swap, storage, network graphs and system information"
               />
-            </svg>
-            <div class="resources">
-              <div class="resource" style="--tone: var(--blue)"><b>CPU</b>Per-core load</div>
-              <div class="resource" style="--tone: var(--green)"><b>Memory</b>Usage history</div>
-              <div class="resource" style="--tone: var(--purple)"><b>Storage</b>Disk activity</div>
-              <div class="resource" style="--tone: var(--teal)"><b>Network</b>Interface rates</div>
-            </div>
+            </picture>
+            <figcaption>The overview page, shown with sample data.</figcaption>
+          </figure>
+        </section>
+
+        <section id="features" class="features" aria-labelledby="features-title">
+          <div class="section-head">
+            <h2 id="features-title">Everything about your system in one quiet app</h2>
+            <p>
+              Tasky keeps the essentials one click away and stays fast with thousands of processes.
+            </p>
+          </div>
+          <div class="grid">
+            <article class="card">
+              <h3>Live overview</h3>
+              <p>
+                CPU, memory, storage and network cards with 60-second graphs, plus larger history
+                views from 60 seconds to one hour.
+              </p>
+            </article>
+            <article class="card">
+              <h3>A fast process table</h3>
+              <p>
+                Instant search by name, PID, command line or user. Filter presets, a process tree,
+                sortable columns and heat mapping.
+              </p>
+            </article>
+            <article class="card">
+              <h3>Safe process control</h3>
+              <p>
+                End, suspend, resume or reprioritize processes. Critical system processes are
+                protected, and risky actions ask first.
+              </p>
+            </article>
+            <article class="card">
+              <h3>Process details</h3>
+              <p>
+                CPU, memory and disk history, working directory, child processes and TCP and UDP
+                connections for any process.
+              </p>
+            </article>
+            <article class="card">
+              <h3>Benchmarks</h3>
+              <p>
+                Repeatable CPU and GPU compute tests, a disk benchmark on Linux, and run history
+                with safe comparison between results.
+              </p>
+              <span class="tag">Internet test only runs after you confirm</span>
+            </article>
+            <article class="card">
+              <h3>Alerts and tray</h3>
+              <p>
+                Rules such as “CPU above 80% for 20 s” with desktop notifications, and a tray icon
+                with a live CPU and memory summary.
+              </p>
+            </article>
+            <article class="card">
+              <h3>Linux tools</h3>
+              <p>
+                See and manage systemd services, and mount or unmount external drives from the
+                Storage page. System-critical items stay locked.
+              </p>
+              <span class="tag">Linux</span>
+            </article>
+            <article class="card">
+              <h3>Export and keyboard</h3>
+              <p>
+                Export processes as CSV or JSON. A command palette (Ctrl+K), search (Ctrl+F) and
+                full keyboard navigation.
+              </p>
+            </article>
           </div>
         </section>
+
+        <section id="screenshots" class="shots" aria-labelledby="shots-title">
+          <div class="section-head">
+            <h2 id="shots-title">Light and dark themes</h2>
+            <p>Follow your system theme, or pick one in Settings.</p>
+          </div>
+          <div class="shots-grid">
+            <figure class="shot">
+              <picture>
+                <source
+                  type="image/webp"
+                  srcset="
+                    ./assets/overview-dark-720.webp   720w,
+                    ./assets/overview-dark-1440.webp 1440w
+                  "
+                  sizes="(max-width: 760px) calc(100vw - 32px), 528px"
+                />
+                <img
+                  src="./assets/overview-dark-720.webp"
+                  width="720"
+                  height="450"
+                  loading="lazy"
+                  alt="Tasky overview in the dark theme"
+                />
+              </picture>
+              <figcaption>Overview, dark theme (sample data).</figcaption>
+            </figure>
+            <figure class="shot">
+              <picture>
+                <source
+                  type="image/webp"
+                  srcset="
+                    ./assets/processes-light-720.webp   720w,
+                    ./assets/processes-light-1440.webp 1440w
+                  "
+                  sizes="(max-width: 760px) calc(100vw - 32px), 528px"
+                />
+                <img
+                  src="./assets/processes-light-720.webp"
+                  width="720"
+                  height="450"
+                  loading="lazy"
+                  alt="Tasky process table in the light theme with CPU and memory heat mapping"
+                />
+              </picture>
+              <figcaption>Processes, light theme (sample data).</figcaption>
+            </figure>
+          </div>
+        </section>
+
+        <section id="platforms" class="platforms" aria-labelledby="platforms-title">
+          <div class="section-head">
+            <h2 id="platforms-title">Supported platforms</h2>
+          </div>
+          <div class="table-wrap">
+            <table>
+              <thead>
+                <tr>
+                  <th scope="col">Platform</th>
+                  <th scope="col">Status</th>
+                </tr>
+              </thead>
+              <tbody>
+                <tr>
+                  <td>Debian 12+ and Ubuntu 22.04+ (amd64)</td>
+                  <td>
+                    Signed APT repository below. Tested on KDE Plasma and GNOME under Wayland. The
+                    tray needs StatusNotifier or the AppIndicator extension on GNOME.
+                  </td>
+                </tr>
+                <tr>
+                  <td>Windows 11 (x64)</td>
+                  <td>Supported. See the README for details.</td>
+                </tr>
+                <tr>
+                  <td>macOS</td>
+                  <td>Not yet.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+        </section>
+
         <section id="install" class="install" aria-labelledby="install-title">
-          <div class="install-copy">
+          <div class="section-head">
             <h2 id="install-title">Install with APT</h2>
             <p>
-              Add the signed Tasky repository once. APT will keep it updated with your system
-              packages.
-            </p>
-            <p>
-              Before installing, review the
-              <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/DEBIAN_PACKAGING.md"
-                >key verification steps</a
-              >
-              and compare the full fingerprint with a trusted project announcement.
-            </p>
-            <p>
-              <a href="./tasky-archive-keyring.fingerprint">View the repository key fingerprint</a>
+              Add the signed repository once and APT keeps Tasky updated with your other packages.
+              Verify the signing key before you trust it.
             </p>
           </div>
-          <div>
-            <pre class="code"><code>sudo install -d -m 0755 /usr/share/keyrings
-curl -fsSL https://mikeholp87.github.io/Tasky/tasky-archive-keyring.asc \
-  | gpg --dearmor \
-  | sudo tee /usr/share/keyrings/tasky-archive-keyring.gpg &gt;/dev/null
+          <ol class="steps">
+            <li>
+              <h3>Install the prerequisites</h3>
+              <div class="codebox">
+                <pre class="code" tabindex="0"><code>sudo apt update
+sudo apt install ca-certificates curl gnupg</code></pre>
+              </div>
+            </li>
+            <li>
+              <h3>Download the key and check its fingerprint</h3>
+              <p>
+                The fingerprint printed by <code>gpg</code> must be exactly this. Also compare it
+                with the one in the
+                <a href="https://github.com/mikeholp87/Tasky#install-from-the-debian-apt-repository"
+                  >README on GitHub</a
+                >.
+              </p>
+              <code class="fp">48F8 0DD5 6C89 66D2 59B2 11C8 1D4B 05C4 EEA1 F6B4</code>
+              <div class="codebox">
+                <pre class="code" tabindex="0"><code>curl -fsSLo /tmp/tasky-archive-keyring.asc \
+  https://mikeholp87.github.io/Tasky/tasky-archive-keyring.asc
+gpg --show-keys --with-fingerprint /tmp/tasky-archive-keyring.asc</code></pre>
+              </div>
+            </li>
+            <li>
+              <h3>Add the repository</h3>
+              <div class="codebox">
+                <pre
+                  class="code"
+                  tabindex="0"
+                ><code>gpg --dearmor --output /tmp/tasky-archive-keyring.gpg \
+  /tmp/tasky-archive-keyring.asc
+sudo install -D -m 0644 /tmp/tasky-archive-keyring.gpg \
+  /usr/share/keyrings/tasky-archive-keyring.gpg
 echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/tasky-archive-keyring.gpg] https://mikeholp87.github.io/Tasky stable main' \
-  | sudo tee /etc/apt/sources.list.d/tasky.list &gt;/dev/null
-sudo apt update
+  | sudo tee /etc/apt/sources.list.d/tasky.list &gt;/dev/null</code></pre>
+              </div>
+            </li>
+            <li>
+              <h3>Install Tasky</h3>
+              <div class="codebox">
+                <pre class="code" tabindex="0"><code>sudo apt update
 sudo apt install tasky</code></pre>
-            <p class="fine">
-              To update later: <code>sudo apt update &amp;&amp; sudo apt upgrade</code>. To remove:
-              <code>sudo apt remove tasky</code>.
-            </p>
+              </div>
+              <p class="fine">
+                Update later with <code>sudo apt update &amp;&amp; sudo apt upgrade</code>. Remove
+                with <code>sudo apt remove tasky</code>. Prefer a single file? Download
+                <code>Tasky.deb</code> and its SHA-256 checksum from
+                <a href="https://github.com/mikeholp87/Tasky/releases/latest">GitHub Releases</a>.
+              </p>
+            </li>
+          </ol>
+        </section>
+
+        <section id="privacy" class="privacy" aria-labelledby="privacy-title">
+          <div class="section-head">
+            <h2 id="privacy-title">Private by design</h2>
+          </div>
+          <div class="privacy-grid">
+            <article class="card">
+              <h3>No telemetry</h3>
+              <p>All monitoring stays on your machine. Tasky does not phone home.</p>
+            </article>
+            <article class="card">
+              <h3>Works offline</h3>
+              <p>
+                The only network use is the optional internet benchmark, which runs only when you
+                press its button and confirm the dialog.
+              </p>
+            </article>
+            <article class="card">
+              <h3>Open source and signed</h3>
+              <p>
+                MIT licensed source on GitHub, and a signed APT repository you can verify yourself.
+              </p>
+            </article>
           </div>
         </section>
-        <section class="details" aria-label="About Tasky">
-          <article class="detail">
-            <h3>Processes in context</h3>
+
+        <section id="faq" class="faq" aria-labelledby="faq-title">
+          <div class="section-head">
+            <h2 id="faq-title">Questions</h2>
+          </div>
+          <details>
+            <summary>Does Tasky collect or send any data?</summary>
+            <p>
+              No. There is no telemetry and it works fully offline. The only network use is the
+              optional internet benchmark, which contacts Cloudflare’s speed endpoints only after
+              you press its button and confirm.
+            </p>
+          </details>
+          <details>
+            <summary>Can it end any process?</summary>
             <p>
-              Search, sort and inspect process trees. End or suspend tasks with safeguards for
-              critical system processes.
+              It can end, force end, suspend, resume and reprioritize processes you are allowed to
+              control. Critical system processes and Tasky itself are protected by the backend, and
+              risky actions show a confirmation first.
             </p>
-          </article>
-          <article class="detail">
-            <h3>Private by design</h3>
+          </details>
+          <details>
+            <summary>How are service and drive changes authorized?</summary>
             <p>
-              Monitoring stays on your computer. Tasky works offline; network access is used only by
-              the optional internet benchmark.
+              On Linux, changes to system services use your desktop’s own authorization prompt.
+              System and internal partitions are never offered for unmounting.
             </p>
-          </article>
-          <article class="detail">
-            <h3>Built for Linux desktops</h3>
+          </details>
+          <details>
+            <summary>Which Linux desktops work?</summary>
             <p>
-              Native packages support Ubuntu 22.04 and newer, and Debian 12 and newer on amd64. KDE
-              Plasma and GNOME are supported.
+              KDE Plasma and GNOME on Wayland are tested. Other desktops are not verified. The tray
+              icon needs StatusNotifier or AppIndicator support. See the platform support notes in
+              the repository for GNOME window-position details.
             </p>
-          </article>
+          </details>
+          <details>
+            <summary>Where do I report a bug or a security issue?</summary>
+            <p>
+              Open an issue on
+              <a href="https://github.com/mikeholp87/Tasky/issues">GitHub</a>. For security reports,
+              read the
+              <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/SECURITY.md"
+                >security policy</a
+              >
+              first.
+            </p>
+          </details>
         </section>
       </main>
       <footer>
-        <span>Tasky is free and open source.</span>
-        <span
-          ><a href="https://github.com/mikeholp87/Tasky">GitHub project</a> ·
-          <a href="https://github.com/mikeholp87/Tasky/releases/latest">Latest release</a></span
-        >
+        <span>Tasky is free and open source under the MIT license.</span>
+        <nav aria-label="Footer">
+          <a href="https://github.com/mikeholp87/Tasky">GitHub</a>
+          <a href="https://github.com/mikeholp87/Tasky/releases/latest">Releases</a>
+          <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/LICENSE">License</a>
+          <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/SECURITY.md"
+            >Security</a
+          >
+          <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/DEBIAN_PACKAGING.md"
+            >Packaging</a
+          >
+        </nav>
       </footer>
     </div>
+    <script>
+      document.querySelectorAll(".codebox").forEach(function (box) {
+        var code = box.querySelector("code");
+        if (!code || !navigator.clipboard) return;
+        var button = document.createElement("button");
+        button.type = "button";
+        button.className = "copy";
+        button.textContent = "Copy";
+        button.setAttribute("aria-label", "Copy commands to clipboard");
+        button.addEventListener("click", function () {
+          navigator.clipboard.writeText(code.textContent).then(function () {
+            button.textContent = "Copied";
+            setTimeout(function () {
+              button.textContent = "Copy";
+            }, 1800);
+          });
+        });
+        box.appendChild(button);
+      });
+    </script>
   </body>
 </html>
diff --git a/docs/landing/og.png b/docs/landing/og.png
new file mode 100644
index 0000000000000000000000000000000000000000..fefa449cff77c09f85a2a7f76314008257e5a53b
GIT binary patch
literal 79640
zcmc$`WmHyO*e$#f2?YT`KtM`5q(fSelJ15Z=}zfXkVd*oy1N?*k?t-j>Fz#DpZER#
zet*sw=N=3P-nG|W`-(Z|H8+8BGGfo3;y;BT=-CHxVFd_!Tn0gp9FZS^XWCxxqCk*0
z^g&oq$$55n!9neXCINKlG^5?XgYfvtRs}Ma#qK_M$ad}TH`N5>k<g@!E{HoZ&^O-P
zF*lU31!NrGr{2sPuk<IdR@PM>B){&V$%7a2B7gGXs{KpRAOnIBGN~_y&;xzRAOrN@
z@5t$cpW#UV=XVGBml&_X8^F8daKHY)eL8x{k<yU8a0F{eG2b08|9)tHXm=My?B59>
zr<d$sAo$un^;4oHhN$yT_je0LksZ868WuS5%%9pR(wS{_3$2uhP&zpV{&zZax>54J
zay-T3s<>-8kGx4Z9kN?ojd79E1=@!rq8!fL92{vpNhv6@4-XHQJN&A*s6Wu;4>C9x
zHo09`Z445oXg~GExGv_VCsC5CO|0f~UtIM4Xut0?*|j@gPxkt?kT#)Le8xeD^czZ9
zSc5^=w{olvQ<EJmg4}+s8oLG0l~yhk&eQ5L%9^3nRvEz$Up<OG%P&2z8B6L(4hyqB
zE0{n-vxbNF*<ET<ud(1NPZ54i$nQSgGsE@v?d4gaDw)_f3+JN9$k71;PCh=qM~~o%
z1zg7!HIt@W%%=t~4whQI9z4&s*>^i@tro5idazg$=4Wb8kQ8p4LK&Q%E71=1I^2kb
zCj6+k{r!7{ZfXw~17mx4)Wg`o<mC|=78VvHr>ffOadS>pDr;qB)%}fFRb^l0;2j-Z
zVE`g|cGhDA1nb4Rt<BBLpFciM52p+3(U_V#IbCQsIy#=O3pugx#q6BZ(Rg`bpuV)2
zYdmN(Lc`-XGvkaI^s?b~Kl}|sa)3OZ(>k@e*+W-1JgV}<FO-1G>DjBd!$U&{3yn^c
zKYw=OFf$+dAfY$7-)`=#x}9w+Yx6a`)@wJrvV#qN_YMQfQ`%k?3;W{Zb91@{4|%q<
z?8?p$O<nvN$#i#j--Q<o#n;x>-rHXuxt5%(wO(p&bXqqsO!{EIf6KKJQfV}xXZ=dg
z^6qjZ)4S~*l7H<k<8<T2{=`k?e5;p$u}WX;o3MZYUH>A@TC32201`B+l0*zlOuL=Q
zH_FP&=btGlDT9K7tV;G<@5e-u(*?x+5quSb{9ah`L*a^d`8esjVvnd!JpTy5gjSf_
zt}s$KEH#9MeeZUr2pzD7(|%6(D-`CY4^idvaLQ6q2tRveF}F82BrJ9#wjsO6?`2l&
zAM8`ok`V9gwx}bU_||r0Ma0F$<zSKP>651nu$Cg#10AT$W~5y{Q*^|9i+Is1JUWuw
z=C^lbq(ZZPt>v82WFI{jSJ%>zYNPQGnWH20Jtv35<v3cAN_Mf{-gtkW3lkF)Dl-`o
z($;R)=5b<q88X<Cna6L6hk&OpqNlDVETt@+)MMc2nC?kJONj`{rtvpBT`(NMbaaRU
zg}I&flT%X{#~xA_>ufXQ5@x=l#N{cOb#yFwUA}u2lN8mV%VaV!QBzZMjfe;~J18_%
zyUc_%Vz;g3&d|`XJ1lK;w+{jOuB>`S{5B}KP?=FqoSflafX3T8C@`>Rw%WX_t4n~J
zXKG~2exo0c$C19={Icw0u1w1D(K!*1qm+#}a=Go$zPA3)kfZaXdY7A=l9K%yR%84-
z_a`?Ods8D5e7CI+S65fhHJ?6x8ZgB7n#FD{;JN+Apgt85oAdYDI8_G+2Rg|X>!p^X
z)owak+QlY^!u)s}kT>wx=!fUWf9CTFbDeIdnV-v#*c%TS85_TWwOA}Rm3I9a9Hb1|
zI9-N^lvGqW9L|~bfA+^SuP)qN#4%_aSc3@v0itcG#lzgptif`Q<NSQN!{6iTxT||=
zqt>$unRI-{6Gq&wV&~-0CoZ|MzLCaet0!Ss5f_IG85kNnDBUaONYy(X=;&B6FftCU
zbOn2LQGg@pclbSX+MnmM|8siKV3}u2X%vgbcwlI3480RpdnYfi^HI>VnJu5jHU`^J
zLBXy|<jQj3VZYg}hlZvTww26f&tWxhqN|JXn>ai!Y2$K#VPBgEEODw>lhf<oos29q
zBn0*RvjGbi2yO<3)Jw8@`-_tDhzMU_--bkd$h~K<BxfW~sQ?6iNJ#%^cHdw!7Zx$`
z(o8MZoi_qKgp77QKGl9bQK<<H7ap{g4Ye3Gx2lNBQ;)acOqy-;nNBD_Uxt%^E(m=u
zT#{6ljtUN@r=}Lp99e9=8yc=F{gOc&s&aPJ5nRyw6q4J{v9d4%RX8ajVt4hdyr>Ep
z`txRXbM<Uwdi*sjSwfsYqkzDT{jaICVw5;559b43TZ{J@85xkx?lkit>@YDg5iImT
z!2PY;K0PEy9sP`eLrp`Yp`l@t=XN4EZjpbnf`w(wxc~CBr!pf$NJJ#Npdh2HjERb8
zZgl<?lp~vFHQ5I)xJxlQrso!wqK1Z+ii*W(AMNl^@nVY=?e@={*vLp0Q`5kfv}9V^
zUL!^|Dspl?9;@@X{%F;qeR_?Wvp>p>4Gr9aq!INfoLa5!zAD-x>2lyS-1kNws9%_+
zdHPJSe=;|j7#Sh`NZQhAT#%O~QCKp%Yie`S%Y0t%E7I95oA_|Q=fyRHXW8JL^OlDP
z*5pjX#nsc^zA~CEDJm*js?&^#{d}RuL(@WQzGiRE%*<>iu)3;Re^t-vVDTCB`gMlA
z(U8hc2@V179Mc?^{httgzU{?@#-UUJV{3Y9`Z69zREUk8J&n&TCx66ex+E(rD?i=k
z<ocPO!%2=bj*5x`W+dEaxKdcF)#U|9=2;N%zP^5riV6kA`SrFZe|!V63JVL~j-BpI
zSueLEOqDME>KEs%y}ZA#&2^MzNpL^!PjEU|5^y{3@9XPpYxACtiHQ+;0aDKc(tVh1
z8R0RqFsQQMC>b6~bFx?(tiPMDKZ%LK?#!PUAD^BZ7<kjv#9yvP55+Ti-e&bgH98#-
zVG-Pn%v>!tyAd9fzV;m^-o!m8o#(x~AFzB9$Kki*SZj7CKLl$6C$~E}kOYOt$D26q
z#xIoX`}z4<zk2oM%a=V^YwBB5%m};o%cC%20W@UfI{OO-V-ze1<HZa2tK;m_Fvdna
zqV$@Y*x=4;vvmn5p4GU-*H>6w9k0C5cqsMXhfqIVUE0poSn~4DLx-m`ig97YVXyeM
zcUEtX*CiEMSs@JU=gptCB6D;7OT!LkDvhzRTUF3378)kjSGxlO0<h^+lKCCB2a-62
zC&CL03w=7~-e}g?{HfRLdMW^0@~aljgAWY)AWt1_@hwdc#-d<4aRwttL4JzzB>2yU
zaqR)UFk4=FI<w91HZ%Nzxj7_Ar`5CB@Wg1PJE7^zBj^P-wk=VYF4JHNPq(MxcM>X9
zMMX_z<(Q*&l=6b_-yuj{T^$MS6*3xH3qUu<OEOBtPsIN&x}T9GFRO@wh9dWSo`f*6
zFPx8<BK3G~SV`U6=J5$mLr#eoI5>B|FV}vg*n?8DN;!yva^!J*Xea0?13MvwNM6$#
zvFZsK2>-t0*|4i%?G8zke(iCWp`xVVa<aWh<<#wa8L+<%Yn_j7$d7q}%Ypsuk$3oa
zUG~r#&%5h@0AzIZFn|T3#IrJ1^te+>^3y+B7-Z$-80nckf;wS@Nx8YXsi~>8VVsau
z8ncfSrGUrvE6C2y?(zzOf}Gr7ea+6^zR^il6GZIU&QwQ72hR=b)pbv}`0taRnc=+B
z@G|NRwCD2WKPL5kZu#~X_@m-Z3@<nHA)Afsz~my-n>Z&Je{+`}b7dv#T8t9hI}zn5
z747Vj5_rh&n3ij13mW!1q=qA1#+9{h@Nh5AH~e0FQtgq`^u<oY?DkAjZ1WUf4~3I+
zXw$ZGUVHJA65GpHubOOEf3B^OLz|Pu1W<HzG}Kl!Q`y<sd3SfK)9kvpvEw#A_$}|r
z>BU7{R7_M<)avr`<m7m7-+;8Fta*HK`sW|p6NT`%@Bx<vr26{$5b{$rN)<~Bi|IWP
zBy=KP^Yh*5>1qA$Z-Ifql9G~~yz>JCXTN{=L_B{^k7K@7VaNz;F2V&HU0Qk&`$iML
zMd<A0Bz?r}^z;m_ZTeSyQW6gv+Y88OD3RT1Ukk#(!6D-Qw7F4M7C#;Dmy3ge@z%^(
zRav>-YEOeZWs&J~Nos0%+2O{p+&OJyb6#25;W;6XcNh4GoQ%x3ZzT+Y!rS3P&q;mn
z-?cK4j4SLvgLswr*<Cu)`g<oQIY=4ye~pl#QrZvgFBmoVCq7j0d*0R+6l{YsmZ{$&
zK(0owVkuqRe76%pCPqu=l*I4R5ErNVQ4p@&2{hSvuV)DP@Ud`tJg!f#PFibxFtKpM
zf<yT{Z{xF~*J_G2;odF1gJp_^0SqVLb*0zl4d-^g3+J8A!NF?Oe|U7Z(Cp^);X_aV
zOeNUq-EXt%=y-Mj-#ejSB!Eo6nxv4D6E|7=74hxcw{^qy*8O`jPdGSNOG`yJv1u8y
zYmC9v*2$r{Y{Cg23#WqxxBJ`rmX`YxLY|Dw49~ZH0ngtfqMsk0lC1m`wOnXW7F9Vv
zUJss_m>7|l2SuCP%(&KcEC<xG!Bjp?35nyuJs#Oq{wJuYuIIbzvV<vvEv1`c^f__e
zjrZ_k&t9_iUPRezYZI0y2&JD7kDr~p!_?JN)6xjBiRKl%eW#V>!X*n!9(nhNto8O*
z1O>4`zr-bD!z1CnQyX%6o{W4rlCRqC9U|rb<XRlrJB1$-{;o9WSOF53l*Yh~TUlR6
zg3gHeu&^=`X>{MD=qSD?i|PS|fu5E&k<D}zVD^)fW0^Gm;(`L#jr|1z&X&n@Pyjd*
z;S;3(0x}hq*xXzsXu8z}3yWZNe}6Go_JDxXnuyz(gn^&`MDovE?Ke0$xT#Xu#;)}w
z4e^s;gmuHN<&U1R@S-;RoB8I6@faxy5nAsH(NNB?F)(nj3zt-Q=~$I@bP%A1{5*d@
zXD7uyIOu5*EsRBx=0$;DPO5+Kdv#NJ85tv+-&BOnrD>*<apTczZxMa&wiHD}ld!Rg
z;uA5amg91>^Q(35Zy8}N^DQ1oQ2)&tJcNMol}@#!^JjP1OMds|b`i*Cy*H+yfR>6X
z_xpEU`1c)|j*g*|OZ!W$VM$4v)r|#t0Vd6r7}^{))=Q}g38vN$)lUaUM_EXiynji^
z$zec2!9hWiL7Z0emzPJYepmkf{-EE5Jbw2&qN1|0RJ(a{6X|?^q0w({Y>d@vv5DDy
zvIvy_K2-*PU%$oHhYk`1EGn577#PlHD<YYkW-}Fr6%`c#&pZ>uIXpQ59K`wbkTgc9
z{$$T#?zf;%aBy(Ic?NG&)BOCrvhu|G`Z{L`Y^lKzMcy(1(E2Qak{**xm0}HLZS4VF
zrl8<p*)(oL3xnju#GhA&12c(M0KEPA^Cwp}&C%&0y&NM@_;tkZKLbesP}ke77sSU;
z$MnUazk2&_mk(f0z{CKUT5R#y+1WAw{@`#Lv67Ji(hAOdU^u<m_3U+oIH<)~lv4CG
zZ{Q$BeSJbgLTH$i3G%kz7}{9>V`gqHo5V5jtL;~R|LN9PF8E3~Z%>b#+39JFQr)dj
z*8$JTG+Hc9?F(q>dZH;G+6niFDX1pA^80mJ;96SMNg~AiRX)w}*l$NG)LQxYqw>42
zAtwmge)>dS!>G|@GSRCH#E>LTYqQgLIy$MK0G=HP{N9~mooZ$O0ocS;iFPB@Ha~w0
zFq3AD1s=CWUS7avQ39)M8W*42WKpqZt>byIWo4?z2HrEZfdMi#O~vQio*c6mlZ?G5
zs>yjGTls<66bSRY?nkyug}*K@5qb=ISFo4->H2#LV2YhrQ(XoV5%s?y5^54HmGfr)
z`icrIHSrKNqX%-sa<zP#qiy_#h-J6}v)Oxe2B9$`0nh&XY$5`Jlixq!v9O}tF7`n+
z;$$L`lhFbBau3=y;F*hyi=lsX&CTg3DLoJF)%B`L1iU8uOYM6~G^!;;L>#uO@;3%k
zrKP23YP}97=v2i*iSAB&qLyqnk`B+#bi-S_L+T3~Z9^EyNT{>2ElqUC{hLM9gtM|P
z{o@4jwt8?>-hUvE3<+t9T8-jDxrq?hvO8XA;$1vCLJ1ewVw;_MS`rkbKuQ`>n)WM<
zVspYt*YrbrRfs#CB(Lf5THUl7WpI}s%bPcEuC6Zm-*T}hj)KR2p0=mwVy`kC2vO*r
zxSFqM;Y^JsL5d7I8k*y$Pi!nKYs<?m?pG`^5_~Sl2Bsgj;%)WOiMXSaqOg9-2TR^^
z85$Wjds?=d9Ay9~WHEQ&%&G0_`ZEx#8}7SU7*R0J8-Azz+vJ(bnCR%!vomyJE}^We
z(=9~<;m*IYC7U*=%OsQf*0%QjoU+VI0ne-BbwC3y*S7MrvZ{1{JZj7o<3f4_UJ$ai
zjp)$yNA#}<5b)jOsUe>B(%mT0#-a+@u#j!E?Lc(ZP61&O6hp_L)x-oc`^)X^4<E$q
z%S+5!3IWE0;>=Z$i9@H{@DMn_bdxF8PhaG8FXbC}p-^}#-&53h_Nvazo8I@2yi92T
zchxiJ5tWyZFnRJmTY=!Nf)X=~h_9ifL`G4vP=}HpC%EfNe}Dhq^~W=J%=84FjJyS?
zjzTgvFE0-n85tut&&l~sbF5IhjlJUfI=18Pbb9*8dnu_`P=P5Mba}jv0>!_?<KhCO
z&J-IP`w8+Bs4eS56s3pxYA@0AEI-kk>{^uP5<w>kQaO2f!XJ93T+vNU>w61&dxI)+
z(9%Z=goQg>46-l^Gcqu-rKu1hQ@jMC?QIZ+KS)W{XVd{PE~}~{f7A|e834cc0E%o3
zr5Wc^MfCvOm5`7Ck$^y51{V-J#$jiw(fwA9(fIlE2tK!q76<1WQ2oGajI)e8e|F_$
zWqrEgNy6JnV*K;x`D4h6NYLY?ix4xHJ#nM-t-QH&1CO2k1Jj_HgECi&Osng%uBMl;
zic+lYiF@fs0E&vK8BOEq`5ESi>tKNSs+-!f?uo#G-1oe_JnCE`#SMH60R^wK1OONC
zLnam`At|{8w2G>#7f@DKHX!_O=gy?#nLdjaUL72Ho!N14uq1L?FFv3Vf_FwmsoK~%
zq8*~=6%{EdtK9R|HoKrAcI>SZ6vA~>wq#+Y2^zYnhqwBtg-NoCt*?7N$Bv3tl<OH7
zC@3uK8yZlMQ+kdS*FQ9rBbNs*tk8N%=F}qyoe?G?vRcghx&z+l5wG!}dT~}!YDDa`
zo;(QaW{a)Spkq50+_(jK9vCc56kbSEbB@pL{PObJVy>Y$V`ax*M@@;EjO;x<R)h_J
z@IgTZ;1L{*awHTbmHm<c?`(g}|0G|mb6{tx7@S~5S;b3s*Ks5&s`KFSf^CV6_um1*
z2n~I96gmF$r=Lu&*Qfhy4`n5#D!p|Hd3k1O=}_fDl{Y#SS^Dro06ju=wtL(oXSU;c
z@*dach6jX9y5B48YHuzM>_uI7gW<hdjR%{`z4T3VnSipSTsZY=!vt$*eeeA#>G;G%
z0-KAStmWQob@hq;1zG!$V>74I%@H!O(9lpy*;HPO&EXrT1HU_((2VCoc|O$wBrir;
zA&7xUNATGm3?IYH+_Y4^@;tNh<Q4&i&CNus#V%ob@vtxPa=`&$v=1LXfZf>`O1-+d
zsXQSyLx%ee%6z71D7XDN{f4^Z-mJ2`Iu~eWfXx23PNBfBHX6WJR2(zxiv^<4LW4uF
zN&Cfh_1$+tpWSbSmGD5*;di`!`TVu3n~Q+UY@l^-W5e$@*$y$;o3(wl@U$^)?Y_?b
z-m}#mqetzXb>d@-cVmiJbhNz&YcJT{@LSwnD-&)XoHoPD%a6c$NlFCWoUtN#dwWCB
zbhFz9NW=E__RFiw09EV}W@a=rv^YlC<kVCev%aXF-U{F+Y;0_cUYELh1_pWtk0BWu
znY51ffaKbP=^qA6Xm<w~&>HR<9St=EwR*pEbmY0=u30S2Gg!rnw)j-vadL}IWfnRb
znc=Fry}ccYnQ^T?>+I(F-R|U+_$><qB|RBmepgWjna@vYEevctC8h8wZSABuRT949
zh)kBzNWbZjsS$S5mS$>*9#q`j>2kA$Mq^{+i~TVqXntW~#tl>@e!I?qygX_>R8jfo
zBgV36v9U2T--x8iho`1EnV6h+Hh=Bg-kqHvpBxC-43BmAybR1LEAvhZ3yX^bV2E>P
z>LI2^K~zKU!-sS;r-8hHcTm8$r!|C}R2<j#;JGi6K@sKk9Xm+R!g_mp*qAHDWkTS*
ztHvLbDV`)JOF?;snN*!3@tQNvb#LYJc`1!lI^PLCi;0OHpB!%DT|%!Ra(g&WXyE2%
zGhYwFRxQ;U8JR%vh9027MD7~-Off?4Pt=T@oMdl2t||;6IRy>Zv+W7lG~Q6uXAe%7
zhv1?a^~XPftO*In#>P(U?2C(vYOEF#Q&RZM|430rU2*N&cUYKK;o}55Y_|R2aXQ$a
zFXyAC4o7CEpdb%CV9?RgdG_pC1|HgoPIO+vWABlgOis&r=e^mp`FX9UF^Ne@bNjMp
zKu%JKjO?YQ?NnbgFy!Oq>uB#lLdUCk_<g@Iq!XWzKub$|eeHRW$zwVy42}v05IM)>
z4XDZ74h^l!4+*SBZ@n(tzHI_z_hEcU6TLb=KVMp0Jf7D@0yMLvxhZEgY3V&sX&H4|
zP@g?nURlv&dI`IaZ#DD9*tYQ!jFPA2#D)qA3U|!5I^*wwHrmkOs#>B|a$zXl>1Msy
zL_^0|TT?z$ZolDsv`XMe!AMW9Ri-PbF^j&iQ(s??mz@p%1-h;jrKGrUUjB1fo)WFk
zk6*pLEF2uMF){0}ZMU|!OifKdu6GO!gaSgz!BJC@!NSM4Ff=qYJx<O~%1_H;_h)zJ
znfd48QXI_7z@%PQvt6mDUxhN2-Rhb?PTjN9(vQbUtP^oL`sD>U>sZzF`Qy6O!xBHV
z0?BB?d~zC<u(zW_TSLPPgeZ_%AQC@(7A7X$u)vG+JxwGeB#6Y;mN@~ae&KOQ&^enG
z6doBX`q(#9Gz_2LVj2jlfiNR<AV|5d1r!#VTUzcVDCT;eN$(U%)EIq|ct4!Bv45PC
zmOaoULSSxYVq0Dugb4S&Dr>rHOZfpVlRVpil{In~wrI#gU|QR+S3at+TJ4JO;&naj
z?nfn?s#mTClv;T2va&Ldn+vS!cLppjch_f?#zW_4XWFfveDVYB2FyF5Da@AJY>@Nm
zchBEdE+<C(I;nR{8Vj&iN6UeRYBJGpA>RTWomU|*R9Vh$JbRVOgJS=r4w4<_l}HwK
z*l1I8%Vhidy5Y>Xq!bL|tK~f`=rS@wk4yKm8=Vm%p&^~MYYULwhq=|&H#TkQ^Be59
zhjvnDjzkPJ^M!;xJIL3c9~%8Rwr6?rm7b1Hv&o<b07zQ8!q`%^NwpYUY8prQzx`jm
z(ilsVg_RXBR@a+JO9sp-@B2G+Lf)5zgq06%aK=<rkXpUnL~64eNFO)|3@Lb=_D~Pe
zO$wlo%gaELhzBj~`WeCb0g$F5BO`aQ);Bf|W*Swcq>?K^y>a$9CgS)s{WFxHzOD|;
zBmi)m*$*=X;lt<ZPWY?puSj@v{)V2m!FJUzFK;uNM$vJ9{)a9TzsGfze)m)$13-cF
z^z^rPcU)rDR!SlwT|eGG@Hp-7g3on_5{p@oTcJS1ChTJ0h<XMGYs%P+YjF|0*Vfhm
z6_rh4aoA7hLO?*El1--mW$h(k4<>sZ5o<4Ixd=*o3QL!zCs!M1!Vd7!)GXO_vCG#d
z7l|Mnd(B7X*Vkk9Q#!^sYQ_8JXY4=nefScGw1Ai}GBPsLV|wTJ46<3dv`tEXZw{zW
zDz7PcSXlvi;}Qr!(ur&dadCiW{sz({P!8tm?YqHwb%zqf#mCpVjOBn$ht=6EAFr3P
z2dS3oOiYcfTG#;9i`=&c%o-BegPjYS%e|sfBU*q;$iu@k$6T|Lp$BLY++V)+Y*V0Z
zd|X&|>Gy5|tB?>txwha-_?$Px<8n6!z%XpF?gv+N`)YR>V8l(JRRSU=(f3PORCss3
znvRBMYpXJMmskFToO~Sxh1=ri^Kprjb4r^M%!g!xnCjtJd*%CvyP=JlynF(WnF)^x
zY=p3|3rpIeG~SUV5yd$<*`?hXuPIM{x>G8kBNpc<v*SOze?lpp+GM#i`NPM*%pCav
zPeMWhT-t>Smy^be1D-~DFco=nKkR*2YJa{vGdilEM~?yUTcK)ctZKAuDqDSJ-<eZ~
zcbVetXSk0$`mGGu7-)FhEhGZ|d<3LItpK8Al9Q7Md>p-J_CrLR<lq3n^nsOfR2VsZ
zX^+u_<yuuvUO9WDz+X+16%Q5c2s3jz&RjXkDejddf#rRNQNOwfrJ{RtGEXB(ULgs7
z^FtKB|JU*xYceqY_J#Y{{nq~aG~+9ZYzprah)rW)V<_Fx(J@7v+Lyb(bW<%r@XwI5
z&4!jSF5JJV`Xf|i9zVc;f`j{pHhhK;*enJ;xF!}m?Hq$1Zg^OeBxbHhcr??DGX;%y
z&>yhl{!OOGCv2*3ejNueLAsN}v@7}$iNJ}ywk11ckn5hZManTi44G|Cd{9q=Bf04_
z=5EG^SQPH&TqJylOL1{e<KvBrzv&R*p4KIVUg#^BZ@+}(6uaw)qh=?0$Mgj%ICHu^
zEq0cRmw-F~Cg+Kx_kxBP*Aq5!c>hiLJ@e0}{&(V!ab5WF-GA@H5Ym2u==<NOopfB}
z|H0Gp+>H=2yO@wdOJ%V4zqJnwpuh{AiuLtM?e4xN`M3Pjp?1p5|GTTKHX{<k#7z*&
ziL9#=*V57=4<VK3VOE#IiR#f~*?#FjPnlU6?DL<cKy^y*-LDKeXKE!P%)s#(5fLvw
z229-WdT%LG#k!qM_D`;F?$!TB1_<-OL=@x?<P26s{0t0s#<-Yw=Hld-F-dV!>64R6
zm1_Ni3~2v(FtnBI_XK(jo{IWxPA#vzj_N5ks|xvdJdA7XL{#MZx?eA7WsPys?^gdF
z_gq5c-v;DGv0Z5<OXcXc3Z525h?774Iy;m7?!T9U%~(j-*pgW7k9hc2w^Fo)PQ%C|
z%G6o@J77v?kN0rhg}b1jDOqLxf3Mnp1ZIhU2jv!vdhdFOB3|~eM9t4%PQ)i>XODtW
zm`#EAg!vmZ{NBwsAP=*=yrzbQzxT5!-PUfOuonXZD)RGxU%pMg_wc4fpXr0P{Y$s%
z)-xG-TWopTnEOed83H$xXFH}$<&~vJJSZoggEHTK{uE8o#`y2B7~Af9#HVSp?|2!h
zUjMpyT3(?4HX#l62r@G-oF=%s>`KhnFEXAT@0pzR0pcoatNRnQr(90=dX|=!-8z<n
zALTV%MQ!D6{g=f4=L@fQJ{{8Afa};V5~0dQs&a*p)!SF8Y5zNUhE=sl4F~fYs0sE)
zMwD2TAwU>js53S1#$n{(a9nPuAWWkAZ?BN=vbpPSR0MTULsiUpu4s?az9^LTE4AW;
zVgAMi=7#;73*uM??W2|TLd!X)6mE}6pvuY~ELIxHJgjZeQj>^hx!XJp0=xq0ZptN@
zPcbw$xWDzd_Wj&KR6aG;ZQpTSt;zsva$R2uTotoksFSe3#li;g8pxG-UtL-uFKaR~
zcnAX*Yp&Y<=Eli7mEWbxeFhUVkj>!mJ9rh()D(KjW#{bOTI<r<0u5*SyMkX!zR4JS
zsr_%FL~y?)DasrpT6krDmG$IkX#gd5i$>=S(S)K{a9Y~X)KFS8n8QDVPES8A@o?GO
z+oQjlCI%y=7p|vrPWBF*Y{N^nPO37F=jrdodL<;$iTQtZcT2u9VIAk@=U?oa7+C12
z%$1RS-9W%=z?32bJR-k&w+6N6+%7m8J#H3(E=MKvO2BOr6$X0%b5blteTa#by|}n|
zZy^^KdWnaJ6BjKk3Un^2um8op5Mj}sv}hq+aDziF%ic{j0%eTm_kse9S@zyMZ*LNa
zX?uHG)69e&$Z+K0X>r7Oc!s8?_dl2S%06;*QBbsa-Zwh!{TdjUt9By>1MOZS4vW06
z_4OxWxKNqb-JkZZzP|z<Xu*Cz-Xrq4UrzUq@-i`%H6;EVgo$d*wl}3Mlt&Gv@*#Pr
zzqj;LLvOLa@U*ZfYH3N$T)ok0mLgng=459^g!uTHe+B#+ywCcdWdnlS>c>R8YpOTz
zc3$8=b|0BBejduAp`e8d8T4LkM*9Px3R)u6b`lkrpZ^5RO%`%%bGxaa@aX99sHkU$
z7ifnUEp8i#ka(Xs7SiP8XyDhN-k`R&@17plhes!Pcz6wWYJAjGR47mqXE7B^c~w<-
zbU5TaJhVJJtHI}*cXEO<-)s*9rWh4bQB6&{w{No)1t|YF$D9S^->YfAB64qC6!r8B
zbPQp^$0pPU+`U%z!0CV=L(>lx?=h4n;1B2BCpNX-7kkQjkXtx*GC42@g~Q~+V`KSE
zkE{Mvo}Hd*w0ee$w0c6n|NI%Or{m#4g3w;wE&*+ps}||;W0^D#!*>t&%gf6NuoiNv
z+>n=CMM;qvtzN%N@5%pXw>CM=z24=`FW4O(KG>cdVu2cyFtjgi2~+vxngRx-G>Vki
zIM`nIuPCYL8ZBlbfBpJ3Jj?|Bx;>`grgiOEL7<?Z5Ekg*JVzrFLlrP`n(ms=7S$+#
zwR#p#6%_);6jxlBbn`QG$7mpR`GB}>M&|`&cXHg+<PpoDLrzDR6dMcTBDAqF_m05d
z+q*3>arQ&hPXXscWJu`!`&_An<g~c7=;V1*;^)_5#Y<(jqgg!wAM?7d*%-$m{44Vg
z@_XpW*fBRoIX7Z{{I6B~XH&z&C(WF!jE7Q63kp(sUD`vo6!B2~Do?t{j0Y<(TyHKJ
zbeaxBJ2Y{E5g<VRo%UvVTza$k8l99>Rbj2Rg&*0FA>f@MB~1tOF3;;zmyTwnb7GAa
z_bs)#5rt6&aB&b25#XTUF5u5#*)fz5PK6Wv0csePD^*5ooUd=^DIV*aH}uiUN-i!}
z0AhXd`2u9<SGc%yf!RR%;zvgx`htKGMqH`S^fJXG>fgnXQx%R>l(YWS-H`I6vwb~^
zGL*9HRZ~oto=ZIug~|rKy{%^@9^@Co?Rs$>E;>dsp0{04AzCXb-fL_~d2jG%dz-IB
zs~M<$O4e?Mh7&c#Nx+>prLO96aNhxj_x`?*0S2$H?ESB?H`IM2HjGY6N^6$aP~oH)
zX|61N?qK@B;~pP?sIQlSg@svIP^hG&1pHtWByC=Y!|CC};a~zHLo;2JFvfGU_zw)E
zmz4O3;k}`eIJ4pZwHS|a!_U2|ZVV&aZtz1Vure`u44s$4!paGoKXx<#>r;Osm&d^(
zA4Eb=Ut!Rr09~%F6Q+fK+Pi)>sK2-St(%J6<M^0T<>q|HX?>gBnz%K5_%L@Ubtr)~
zF2!!TZ29QP2k--c`Sc9o#ql{%dpv_(_`Qy3`AK`0i^<$dg9^4IG962-h?bwrTN5r>
z&QvICX}y9_pP>fc0>yqn=Jwvl-d$+)WP@==^JfSlL0b3=+%)PpWMea&ME|1cj*#0q
zS{@P)u(fbALcYVCeD4qUPFs6HzL6|>j+oD#$@~vJ7~UbGz51m4z|W~Vl|PmP1`7UZ
zX&}}T#r3T|!a*er3=oskepB&WjlHdh$7elVU0?>92G+Q2$v7LMxze<&Y1>tZgo`G>
zi+5*hqVZx~QuXmy-+&1sJ~r3W;g`IfuGdvGX&wBy*w}%=!2|>ZJWVd}5Redn9E{|h
z%FPX|CfV5(kgkORD)i*ZQHt`$e~!z0?!8h{;k@@u3H`7*ARcf)U~;&&u|6>u6Pfr3
z0+S^`3<n1Xp|-w09^Ez)z0&gX!06}~kozY`6;;KhI#X6$+$o;!TK(>64RsBz7WXF*
z;xi%^t9j=^Ua@blfY^PuJ2Q4cyvUhm+}s{6p7q`z4dv+*(7OhccpBppw)~#$n6Lpq
zP;bK-0UXKOx5yCc>9fF7AH-*rIKK=kLaW)!iwbkmp&x>Rty@v=|Mf?&R!aExyrCg8
zGun&}ollNWMg+c{(ZLHbGc!YZ#o3(mA~zgZfkny5aZ|bN?LyGYw}<A3qQY8VzkW??
z;twSd_?(oK^h0-du9lOV8_X4N)&f`S>$xCZeb#8!q3$r^Py+KtkGV;I^!<O!2IeFh
zIy(5a^}e{K=4PNEE=|w5IoH9r0gVzOX<H(O*x1-zoSmWXPHFrQ1~D-b<T3CD@`ib*
z1$f@w-g=Hv`Txt=drxT&JO_`~jVL;qFh5T&%F2?;V2B>4Z)Yr*S-<;yZz^nBh~C-N
z74ohKVktlBoiN{h{}|yb+`Ifabe}ljDXL-_avdKZ5BLh?(xDWdFg2j;z=KQr1gOO5
zvSEZ}!T$cape>}P5&=U7WCP4HQB<-Z;s_uq>3-@LPknwIo}cgU&i&8z$CsYOV0r1#
zndOCi#|`xGAKxF``K4)S7~misokhRK$B!=qzcw}TLN*Q#a1fx%9v<-EP@q=<vh9EX
z2?`2ABvC!WQ-Ui3D>ffLF1yBc)Xz$#o|QGCnVFbW$daB|TD%18dptV2zh4Ss0z)Py
zrWd%lvQkp+JHO?$rK5mdc4CZ`jpdQ|W?o)J#VG71;a_T{dx=M}`_ki7e$#os{>M_%
z3b|UEu=!71i&H>o@K(vBwt|9!x;odJH=*`%emOYM+Mhp|@5_KIRZCu;hMIb~76voK
zHpC26l9%6FIerd-;Q^etOzzI<xY^iDQcq=S#b~MgJYbFiu^G=0kPv8SX}32wht195
zNXW_KyY#;LAzthl1DmakaMEYN&#n7L|6JGUUb6N+y+B51NeCHaAiXwbP6%men1#6p
z0o@873KZ68c73yPZaQX6O-uWz%^w|>E0aF9#m}z;($8YF(TNy3Jiiyt9fKnw<tGAW
z*@En^6g)^Yrlvpy|1-4sckkvBF)an3kYk$us)f^s+Lo5kAz(c)HJe0%+?$%=+NP$!
zti0dV)coQx1guCfSAl;}epn#qtGuYW3HGT5ehr}rAs7LUn47X!1;IQroDN<s%xl5v
zRu%7!84m&Vy592U8wxJt-a;cf1m@sFDSUl0yZe6-Aw)z!VWpoXy>1tS<vBTskmK$w
z0PJKmG+bcL=8sMcYx<Oc+>tn<lzR3U2`M)x=TTb-aAou-Q&7C&(`{>;t3A-EvkBx2
z&)=Yug~B5u*jZUK$F@?5h@juwD^DRXl#Y#v$S=uxe)K<<_TurCDy%H9iHV5?+^)}j
z<hu>-+Tln?1i}EHd+FeC`uBx~1`TM``t4RuC_!dsCe+r}X0t!<a`I=Owx)(OLY#u4
zt1p&;)aa0`$?G9iCKnKVV6saQ&E)bZ<du?;sNiw+{h|BmVDYZKOOn6kUTp6h$my|y
zLd|5>%zR#g*%nJlU>F3-Pb!}qus@gTG%nV{T7g$_cD6Jo&!xT|)Xl$TkbsCtM_wK7
zZyANPxRY{!5Eb^t`b_s9_b47O2;5SaLL{8~meH!HuD&(TWe=c?rRm4?qKw|YzPQ*}
z%vUc?f$yiY^YLIbHugGjUVvdggn{vUC{>yW0{Sp0->hzfTJPV#$HSXROvE=f-std0
zXHQ-%OEo$!qN1iYX}`2Z!DZN<XbcMqdWwsys;m2(xiJ%<3{P3Cm(!X4i0<Yz5{DNT
z1OlFqpvNDPg#Ka4aZz$EgtI{gFanJVj~@C<(G~ueqMMcXQ2!5mO83J0zpX0B&w7xf
zqZ6a3RkO1}n>q6-Lg^fdyOKt(($WsbFv|Zu@bxS)#w=<j0?tn89oB~rTNHhq9M~AM
zt?p}k>$7@R=934ps&cPmLH%tPf+r+QbvPdoeBei+Bd8|QaI#9?+x>Ej;<(4-u)3XJ
z#JE)~#Yo9e@6sJ%Nr1x<)7IYG(3tpVL36{a#R520PH;;2>zq6kpPb(vw0~tqI<c$t
zy0QG%UbdwGK<s(J0>GY}TzIX1-*FmaZ!=Ha>yG!(_uOwkqPI}K__*8IS8(6le{Y=*
zndt-O6dnFXBuGnZt)sj2>Z<N}A#~WP52U>^b49;9Bs45+Y_GfHkH)Z>QitEaviasz
zLGh>|y4?Ix{pB_pjsAm@fw-N5mcIe83Y}d3sIDQRpekiE{MkO%eg5gU$bU#f9&FD&
z_lW$*Y>KYqrwj3@e^%BBw37*o{AXL-Jq1{JJKN0y@)PR4zsngo2V{1zayR2ZpFV~9
zg}$Vsr^hG8J)2xM{b2h%rk77|T$oV1qo6=SfEZl><^&B-aF&<7qNgg2e@VQzwVWKA
zNKRF1!s>3}q#U}NEae3o8rBtn!o#ES`SrdeHmInm`1OhTuXVnKUa}cPe@@T;US^}@
zoL3p;;i7J8yhJ`;k<~fPe|L@5$LDGi7yY6j-~4%@-LV8YL&^9!d6(6KW?Fh){M$0_
zn*vW}PdGs<tJHJCq?g1C<zHzSXzBghC$p546x6F7r>M}4k$_lCnU_9-iKRE|8XaF}
z(5>@dwM)yngG+B}8fCn;q<>8doY8`8ysI0yzn7Q!JPnK;9Ady`<R@Ge#)b7t1X=op
z;R%>ddZAnY>Z1!ydwVhy)o7X@_%r9O=z4Ct)s@$Cg&whT|90j9G*j7RmfWl?CJsuy
z_N<w(eb_+1_yjA{`UdV}C}~;0l4UHFw<$ksURy;44yvpBg@RLjc535!w3}KHbiI~;
zGL*tk{hEHVF{~@p+}NaQyX6j%W8y8&ohjx@CZ%*rcbA9}3m*P#1HVqm`y#Ou6l4`;
zmDAzPgvggDZI7U*2^9ucfA-B1duWcr4zz)X0};~pSS97CVW~LI?+Ii~Tk7i@NaeH6
zE;ofin*t`&*UFWFisItp*3+&wH#uFM+ij$oYirm<i_Nb|Y4}|GUp$juC@Ml#HTK`k
z8-mI{txvXj%l?2{gqV!xKVc@^ZqM+U;?-lDJ90OBaanZw8i!f?d7v4@d3A1nXuej1
z3&uX@8opmAL(D80vDlzjlg^zI50I1;m!P2dIRmy%?^KwbeZaRa?}2FHv97w>%qD(3
z)6V82p?3C(3AA(B(XmMA_hwHL(nZl5Mn-t=>ZEgz+e2=uo4&zjD!AWk^^GzIFs>FC
zS{e#gvwo##p?_^$;Hl@NOUVd@_LZ%lRL6d=;=Z;0MAg`~s}hIk*L;osiZXZl4L?Ww
zz`C}X9q+~li^bX{zXwv8+VAs`&&?6N1AM)XL7(MIw+ke^1Z16X#eSO%OU`F+24EnF
zVAFD*ZLMkw52ObLU5_UOQ@<$4itb;%QN45Ldn;RY;D!5YFAeo2FE2CcpD6#aAa<S$
z3)o1%yenc3&RsE$R`kVz4w&NZ8Z$c|S6x9i*X=$i#%L5azKu8cPNZzV#LANjfTN`{
zs=0QfTa@v0aIpL4bj*Tg+}KvN-b$n!TJlV_gSv|gUQDmY@58Uf1h@|80?+?e>GU*Y
zWH6VAQJ(NeBk0p*0d=Xp;|u6^!%`9&-&oZRgvDhXjm%k+*^Tka!OcJyKaLEoWMZSE
zEgY1y{pZ~D+z$9-iL4F+iQ`Ijc&D2W#``wVL!_>SMSVMkfkY6O%L>Wm&tLoHAf1=w
zDyzoD#6G_C1e}zJ0PBYVb3s8NC}wx9clY|t>YrS-9UPS1EezZ($f48W@sj-fqZ3;s
z@Ayq7{V{$&Kcf#Hj_660qvL=d%G3FxqEdimT;nT(i*gJ$?SdOQ)z9<cVHcYVJ16#M
z(r=oFb(i+HH9*tc3C=QDV@T!_&$g3IWU=nQ#B;Jvp^Bn0YA#OYtJjWC6Bu<I4H${C
zh6&hTOkRyfzJ`8VuxO~otA?i)=4TV&5<G#f5h(``VD`2VaV683zc;RSdk8@U=Ck6Y
zSl8Gm0=)?x{ovu;vZ$oQz`APNIx{=l>t;3~W93Ukjp8Y)REGc(N6ed;Ui;-;VD>+r
z4ZX>cN^&}x#e>vZ%rp=9Rqj2BAQB1+`|Hcp;|hgrtAZ2UVxB5%4}g0+B44a+l)%_;
zK-li64uDMV{90Gf&F|v;URhfIXHhoQuA@qH9Naru!j27DtK4h~c2^NaBl;${6L(jQ
ziga6RI5@#UZI3sIcrVWz+-~$fdhUDw=$M(Kl1>rJK28?!kdqTPXwTxR+BOp)<{X3v
zlE9-!{Moz>BZ}QNlegG6jzx&x>L;o#E@zka0kDV99Yy}3#kd%cyc7K<CnURrgP&#@
zws<kJJ17yRv{-lJV^y{&8q-Sz1Ro#S0c2l=$6PW(nb}1l0wM$h8+)m4&+Cb;yi5H|
zsE&|^gdVzd%H}UQLhV&>vj=?UqE70d*|r8v&y&_OV)(zUS`G^|A{=b&G6+cR<e0cO
zoWu`d0{4)28ti)vUd0WD-Aa+~3rrjUuSjD}CniuuQv%BJzJIs*(1RY@3taltFM3;i
zmi(W5kd;LAPEs90C1w}Y)~4g3JK0*D1DJ_1b%B7{tUWyw7q~bCn%wX(*QjV;Q<i@J
zblQ2*B1+LE!Znj{u*eUqF$?zf{iNsKpNTXD+&!LGR6g87Lhe;&7ewj_rtPmY>bYQ;
zD;aJkCjN*ww1ov8HtvF1J%ha@vruDw6QO_$8pQO{p|&K2@?6vpDGZ;rIziFb9|8a6
zSx|833yc?$5fNd5Xk**?L%J*}0!@hCWka9&*c`4C(cSMddQ$yCpqC7yopIn_usAu`
zic3pB_7=M+fxK(J2`bJ|QgnhQKdT|Cp<(Bu{y`hqE)^nIv7@7ZphF~lZxZT$hMYzp
zACD3xax=?+e6z?WZMl$$k1v0Rjs0A2vTuI6E-cp{3wn&`Zbpm$7@~|)S5^i;%d6`O
z)^UNR0_amtJ%Q!WVNXYW*cA!%-OfHKKJj3&C8Hvvi9}$ktH<;E*)LZ((omI@$QS6)
zh<w`DufhnAzrH->e)1$gpo|2%e1-qk)q;#Tsxa!ktvuWYjt)^v&bOdIG<aPEr0aN1
zRCzfCQ%~=Nc+fQD6cnPPV$#27DQIa;Z&Hv`bmrxoii-J}neH?+wv6qY{$AfITFf+7
zP_Ur8_x#tNJ?qbre5EKe!D80Ci7Q$bt@Z{=4c85`-Iv-Wfv12{vA0(OT;YK8w56z+
zxbewRCu`Uby}RL@GfAV_vp%XG0}0s4XML){I_Gm65to@LvD#GLhU`&o{lzaa&p-a?
zqUg$}35**gE_T{38}=?6hCJcYM>45^BYSsY4!3omMIK2)B4}cGd|<3!A}9>bdph36
zzVC<L3g!zIb{@J+ot0S)?gS~ySde<96N)e?sV~97JCa5kthvaiH&wPf=~Q7>iSg&b
zA*dhA)n30|iCH(?eQcObVfS<)u_t{bXG%!ubqw};vZhAVo2VlX@|TEFKP0Wzh~GBX
zs0a%;u{+5sDQOAHU!8tM+I`a{0)w@bC0a6iuD6fK>*t!8Y#Mlc@Nz!bj_X%CXAmS^
zuCUg&nRyWU>MJZxt_!pN@Sz--0a>r6CMM*6MfV0Bx3}LC;m?*cKTk~LR!_itrpTh+
z@2Y9SKJkV~S+X=cQge=_>D!O*k@?cvLhcr8@kgxU<dKmTvnfd%7q58xx<pjAO76G2
z?o|GS{goq5CGVuM#*i-E&JL_Q`nr)IGEr$%bd-Ype6(lhQxmMOe|iF=Z~~VbO^Qqy
zDmoFDD<*V!d@Pf|4STOBCMRdoa~yhnEP*Pj{ifOPa)H-t8J`bc5y~r|H)c_XvN|tc
z!U>WR@{vIpap4+G7Gwgg?|`k+ctD+!np{g;8BU9w(&vg*^|NO#fDTp*N)zK%E2|mM
zcM^fPxHwp0u3*QJ$Xie(6%Nupc4oJp6&l0d+UH#<M#tjd;;a{bngXl4d$o%WWoL_Y
z!e~B+rKOpe_Zp1L*R_b4WZ_5v-w!Pb_3dgP{!mTvV_)AsiC{SIo}$%jobzz;&=+}i
zb<`9zR(nBsyAK*%?Pj8`z1fxioFxean-`{|<Mqjnw7q@4Uq!Z4s+yXjyB-ng=;+13
z-hGdWbKJS!q8Y;_;&V|{l)M-murF?c-{UE80o$&j5gA=oq=CK{Qbo?)%t1z$ErxE1
zhj-O~I*!K0__urx%bIz;Q<K+WAf@T*61lfDe1>}X6dhfsMz8N1U-t*{k`3AYNAFZr
zu7iy)HW;;<4}Pn|zh}+hn*;x+R_X=sQ7u}Gg@qFk<0{L`r$)bQwK$v1q$*L@K=VAg
z7Jv@VY>8PNw@0w1V(FLG4zC5cn`3(n<{LbJPS*{k!W)B5cW~DO?x>42sj0OeIwI>X
z1wx^Vv-_oGT!^QFjuppOp@|XBZ{MC$)R6xaL&xW3VNS0<V)~$!1*%nlh!RdP#gIHo
zw^@b`{jL4?uj?4<E)*Gz=2}wZF};?0lju;E;Tme_^`%QA+`GxR{uUhgY{NBYmrEt3
z@gznU@$a$^pWo*zSv~#A0?=n6-20^78g_tIzxs+mZNIV@iHW`3waB4011~%dJ6_^6
z@1mkFb@6Mp=C}7PWc(Zo@8r~$+Fn59<k_l4Gb3fv&hLeU+UchDmE@F+n6}L}+0S&o
zKSsJbC1y(ocYHyv+b=N*wyLX1KlAJVlm_=;5w(zVWO{gLIG6(1F5s>^7JGJbuu!k2
z7C+V7IC7n-R!pQ^lOQQBD@mlMPk=>;2HDCl!xxK{Yt9YES6Ahh$kWMw{+B*<RjoZH
z2EqZ^F=xyAac}@HEFZh@Kx*Y?=A78<g9g?*4;$-O<z4fG$@5D#`ktPH=^g}JweH6@
z_iM{qjOt1TCQ1g>8#vs}=MyLXrKt~cNk=0+_nA?A8?o`5Wj;6C7g@CQzgnF(6q@I^
zEd{+I*4CU&O=pg+L*HOw>GfZ${p=RzuoqV|c_$G3L(}n9x?En`ynv1UiBux@!`5oj
zmT8YYZV9-jh6=IJ00r%k$iu`;w~gwxo&gJ<D#L6j5s&3cbUmmfvP4V2dafQpgEFP$
z<hUhs?j#J{^tstjhWQo*kddG6O}jmUUU&F(2*D?Ui)CluB9+o2t|=zK#k~JBCaN=l
z<$<q`-|+g2_KnQ-bsaX&Iu?yOy^5pC&mMcHv^%HnzOk+CZ2in`nIvv|TPw$$9kK3$
z-XNSIa0^N7OX5nS4jn72{p4gubkEz`)tz<P*RLB4H=gtBeC8}AF0U21I{33$K6XyT
zErvR>wX;5(xI_Dfu7<|}1x%XFf!T9uTHu4EsY_YxBymhk0s~d<CjiJF_LinslFvX+
z>IwD7AB_>uH$R3xeuM-4<aRPWIxAa0JShqLZgmRxUsfLco2Fd+FklhMPXeM!eNN7`
zq!BknO-*}pcxabHL)*`2s@lQf3%oa#ELc2^FN!Pd4|+Ca52}o^Vwb}BT;3bwX8D{A
zZ<_L1>~>Z9!>K7*?SJ+W&C4r*HGjHQef4ipdRls&AGn1V(l8!P>{-ewaEmDPKyLel
z#?$lj^yc9pgZR{Ivck4UIA4WI3JdkenVp@T6N+Lroof!L|Iq`l30VZ-`H0f_Q~8J9
z%lyIjt8Lc-_KV-yz!T|laWp!rXKR}ua=P|Fq;(@A_MdQ2=ve^Noz`*KxWSA6l-1Ue
zCAPiCf6x0b<v{cOfBQ!y{{R1+#RM}PDI+5zIy%f4hVsA5=Gct)w%Ko=IKe5}-8C2d
z?_@~F5u?+FzQEpzD_0{0cde|iW-6;b+?&7T&}*t+$KZ^sEg@dIzpo_wCyDtE!wTRZ
z2}!?6X=<_{iC|;<1jyEGTu<Uz<2rV9z<Ok4M%nN?F@NJ?uJGVsUYo;1%cNL<>XsbF
z{#F3+9h<OWQn++0AuTq@!~|HSAA7qwF^Ks2LjeB!fF1!V(b^w_YUdXTA*(C@scpV;
zZlB)0%gZjlxcu=9n#`iH=gE@#|70DYE79L*CM71E936@IA~f5(%d4tVQBX8GUy0%x
zBkiQu5U1>Re@lad{KK^G5BFnsx@++hxq-+O6{jj85#q6N*;GbC3{+dL`yWTyhF&{s
zS<b|aQ(b+Wl$~Ndy)<_ACr!?dvKkUHVpDQz!lx4_NHjE0Ad)v^0(Pgu*vh~ZYf&5a
zjd|pwFy+T|xTir2ofKIMTCeWh=L1L42>B;FtB6rZSa_#LmbrZ7sYq$q-8&z%I{;HI
zYFrpvPoQne@yP%Fd6E;)8dqs`b>KCn;-X<-CiRO8gK3EFZ}gG>(`zEmC>DxpzovgI
z6+<sc6SxuZ6iiR==zjhL+$ahHKa6;0YiF;;e#Z`)t})FACkjRdin)x37Y+hewRB`;
zhRcy>T3QAx;rrY8wN}Y)cgLiE0m}82b26Vx+rs)nvJ0Jr#8Yc6p1b|M;17x$n1KUt
z5U*St31?epmb&#<)@F9U#6-W)u6Mp&sqdKVu*l9b2#ChV=LY<q-|G(sBXR4u5>i}T
zmme9`fq~`S-*yj=Z{NCXyTb{lFWn^k?`alRRr-ZXtk;y`OHnF1oP~fO0)+_-?6`E^
zD^f9X5<r)imuIKa;HL4Hs10$sC@DH~dZ{3R$#8%vod0c0|3FXTThp4PxyIyODKKhr
zRBO;Xnd6j&``%D6+Og-+@yhkAJSgP$6%h_9L}W!AB7JRUvfcU97v8&Z$3JpK=rvxb
zsN`QdH9Z~hWWG{g|20Iyz#$}LhaJ-k)Eb}<ritUdTH`U@*3u(`I=h4)y#rF9j$>?7
zhMlKp2_U8D7Z<`-vcyY|puapM5kKReiITg2x+*L^J)!ph&~}zlRj%E;Ux<hpgd!*@
zh;&FxE2XqFf~0hJrywB$3ew%(-AagbcY}0y!<p>;zGsXx&iVL1Yw%_7fs3`C=eh5D
z#&!K>xRIV)&oT`?{T+4;P-<g@wh1I!hO`pC6A6TMP>SsNE1}<Lb(yualod+6<i(q~
zvCA!b#2As{o9kk4ZeP3}J28rg_VE!<yWt)bZe)Kv?CObDC><45r4~nwq_OT5+1FPj
z{XM=_n>sW)ofV0s8iORdz?YIslnj&AHHX|1^8t?L8yCbo1qD(l^U)SZba<~s-n+%c
z4AvZNCJ;Kq6;0oAhmxb1NV^Or_Mr&JAmb{f_8qX{qA4mUm~Vm;KSc2zr{f%+lbDD_
zZ?~&xhUe|uU$(dJe7nwLSy=}|Lv?6z_LhpTwOV5yf^$jlGPLi=zj_s+{;DFa3M_vm
zjoqKRdA;62od8oo;fI@bQGPiiFYlP{u@ZG?TeDCv`-?jBO?_R*wr=dalAL|0Frw}B
z=8CJUDM0DJTWw)}-t5f_@~4z6eYSJ8<KZ&F5104H8e8buLn@ML#9z($;3WR<oaQ3(
z?i<2DK~j;o)Gr?Iw|xojqQBnxZX$kaF|O?6an^b(E#P7<F5uF3bQ_)y+KtZ?V~`Bs
z5poFXL4oLgu5xL$w<AU;^e^JS-a>lXbJd?f^32};81XjjBG(6<c-;9E!6&84^Xxr`
z&~^QHb_v%v$lq{H<UOqhQ)H`%1(;F4<~TR5zLty^K<>!(ewQf+A)Dns8Dvm?JB&9z
z@pC!~!&635YCj6X6c6;8)(pamiVE$&a#`6lSy^rWNJqWi&1X@!>z9bWcaW#gLqB%#
zzP^GqHs+{VBO`C`OAu0r;yrwHxmSsD>a??WmsY*>v-&G2yf(}pge>;sV*lm2*gA}`
z09RG@bMmH%3frh(`c_uwS#6fEr%9+_^y!zBl>F_%yjsXEi{Y#*?`@ij|8Vo>O?DHW
zn~2`t_-75Ck>bB|*Yt$H#=NxHov4|hm9k5RPZwC*njrz{QAv)ag|w+2?oHUu4PO)1
zmQ_%`QC4_PL9?K@incTAgK5YU9P`N$RaZ}Az-as1_X+MAC_P}@y}!JkE#Sru(59S@
zruYs)8Rf#NtfaiW1+^S_etP2F`4<-FAJP8lHnu}QUKhAss)pLVN`#9~@{ERooSX=^
zABolL_5~TzYb;?^LS8J$m@kA@mrL*I64txFJwu1p!=E9+S<y<FTgA!4>i0_vzG+t-
z%fO(8g|xjrN&y8AoZR)2@;Z_33Gh3gTD417UO6AaqnkBPq3N_gb1U0ZxP^aN55mE3
zoYnW>L%lou_V(4nVs2uo3E7SR{3>!oQqp->9i<lnQQ>gBI>wvzPiRY_F)+BZUBdIU
z>H2d7a8_WD@VlYI;*@@~^>5c`Lt61ox{Sk^BR20DCcg=As802yGq`Pz-w8ryX_u9q
zEIUSoId}a~Dm=zaa>I!f*DZ|r2hhZy!J|Y=9w~0RCjHNqdGtTkZ(>bSVNV6M10o^s
z`h||Da&(-mqO!5A{P(n8eG8$+fUnKk(AGp@|3HWFTA7JTxd}5XGnf6$&)r8fDh|gD
zpYIa!+GAp3Zl9m*feh{eKIn(=cEHK;XAcD2;KtYJNqCKgg#{cUJz^pP0_XYDfUY{!
z>+5TDa&jsxD5#{QR8UU9<;qP;s&#dF5v$7L_3kcZtSZ9m@@02C-*8V4!d->k?175o
z(JBf8s31H8gB0QsJ?FFVp3qZ#uV$K8Tx_+aR*OTc^s}+iYJXW;YYU9N5%;`nJ~cq|
z5QBhIo6FH!Pn{mNgaJl2<B^$#1r!A6`AZ7RHrFB0P)0%K_o@pC4pXbL&MYeWQd#K$
zIEmU?Qc_a5GS#+Qb<QW2u4-z@93WAH4+Sr`zQ3(PLPE~x=UjH{=5}^^6ff;Iopp3j
z5EE54?E?dHf`Tc<40wPHFqM%hGGgEC>JX>+{tuC2b@mX+eNavdx(FG6dW4U5x3_c0
zE6%(oi6FP>>GkI-qxDf(PVBWhoX}BZi0^nSwXz=FON4!AAtHA2=WEYD+Lp;^kMDU$
zXRoDoMz5`|MzyAwl*p;7x`5#cuD^1vp^bwB$JvuN<RM_s;?>^PV6<T5yK?VOmjvMz
z+U?t?aOqD@(9rH=Wgfj1_vLfk2abcv;DFOH>hZ=%9heJ$2$JS16>9yNA(?xir50ZU
zTEUQzXfEfG7u6qIHYaM042@%gqp0%}67te?H8p=}6*d9r2y6lCqs3PjTW+x~>R6{n
z*MPFR5X^_e!~Gu%Bj9g49d6#oz@SjJ_xADGny9?~L#^7YE32Zue(a&1euaz-3_(8W
zdeYKZ2suUhjgi8}>FIhkCSWyjaB$$|dJAW7uKNS0s$LEJ5vf*h=;L_KXS#H3Y;rZ9
z{bmi7QBaf4PIr}cGBV7{|G@b=eYk98-4Bg%$D-FiEKgBRW@VkLmk1hihO4X4Sno69
zhs!m<%0f#=7v1XB{0R)IKL!R+?&9JtuN^UO9i5+8Av6k=5CvK%Uz+`K&rZ(N!6Q<m
zUO(RwSctKn_YXn<8kei9D}-FG=Uo7!iRW808+2Rjh(r_^j~0RH6`&Xs)oyM-e<EEw
zXNh0BPE>qK;x{uhW5|~RFI`xe0^)_XFKei%jfDl==Py0eH?JQ?{{VlUe;5@gh>P5u
zKte7yv&(aby(MBUTjQCZuMzK5Rdwvvm5e_a%X0Yo`6Iou(b17bJ3n^@aN7-JPi$=L
z^$m5X5pC$9!q%q?RUp2LE!+Glb*G{y(TA!f))!R)PI}!cuTw48o<yMIGfJwcnEje7
zMQFgzJy;dnu3(~Cpsi}hDlzvhKxOsFfqBiO(0t`o-pKZAS*&=fB|A5je{+@FktP3!
z{W%@{%ij?YZ<M8_c?ShyAYhFpBqY4hYVrk0MO)h>{5JvtJTs`$zkfff%S7_sU653@
z)>265{YgfwDkx#VRfKTQC@U=`B!rsA@%AiWK%C7j`}&80)A1br9tMUR=yFc>mXN@k
zy9i1xy{<SE_sy&<#0%Sr3b<<~<K?Q=j-69eYKl@)QddUYZfirGp)?AdFJC&_UlD=O
z3hKfaXDW|yaao-){4ou0u{{x5<^m;&ii!&8RuBpA{xB96zV`5FqQCR`1_F2lU=ITg
zj|A%zI(q6`2qLw(G|AWdBsbkV7}SY)9B(45IcwGM=;`Sl2??(QJCK>8VK6Z8)q@<#
z5o&k&s=O#aiwN0Gj{oc&<`aQ%m6AG>+szUbvSMFMRryq;)zT6&xNXn(@9JT&cLa#1
z-NR?RoSC{$iz6nh65g!E<|so-9>e*uH&_Q>GJZl`=^HSr67QFk!YN)7M*Ch1tc^xS
zYqKi`+S*N8g?Ie@!GG&A*W?F}oj!bWBO~?@;8TEN>enw#aO~mX;epv>kOj{v-zz2M
zYmTv?;7uogK&`2%@j7SolZ~}wwhzk7BYt+aBO`(zJSb#jY$8cb)j=dsGDzk0>9aQR
zJ30zGJJ)=6;N#`xEmo@~nC7%SBota^@Pwpz+VA$=khf%WHoD0GL3`jwMoK#&_v$gh
z0~uLaBYpjSIvxYCkAZ|Ep4Wx6tl$i@=n)P!;+0+LW>Z#P9MNZfDq7n0^=K#;xv?WZ
zV>UG<N;;wZEUwGCET<$duQNF9-K@2{y?f^l8haF)r*wEoEQi7B#9Y!R-|cUUT)l%m
zS)6A{<Iku$m0wGPMG74OfVr5c;N4%XXb2funY<5`HxTgsm6gY&rF%QI`3Ep>`~)cu
zfG{q%X9XB{wkBzI_x3ylIW3Q!{t#Z!br`9=)=W(JhFM5UN_y`aFtj_Z#m^?yEd_d#
z$2?<ULE*!LkH-B;2iV}G+*bty?AmaCE-f7hr}F!U`bf)+j0~{&ZWtQs19M7JT-=!2
zXEiGepWT#Jy>1<BzM$X@3k!pKB2c&1-3t<zBO*Wq3M<C^-2S!e<u?)m#Lw>O{9?0P
z5buOSan*oD85V<|;Fkb&jBT^sHM`3O`Qf}6TG~Ijk3xC|`i!VYOWP^r<(-zFM0BVW
zto|-#hDO!>eozud7Kb19tUE09`PFATVj^~Tcga%8a!rhZsB!nsU3oeA6Z;bcpn*yg
z3VH@Q#Nj2XOwGVh&RXf<=m?q{rpNcX0<I62GUG_FK4)jI{X{}W`F!((sw&FOn<^a}
zgYDsPAcHGQ-O;fsH`hc?TU*KAzR|sBbkqP~TK(w~kP#U!dcexNHsZKk!%Q6d$z5Gt
z!8*7+`>$~h;r>ellW_Fp_?X>nti)+}Q@08W&SWfi!1zpnQ|`s%uec0qG29MCCwrzN
z1)6XOdwUDdT{LOUYY}tXZ~wlO(3`#o-nTPf-!Bp|EEGM{cM+g}IgP-0dZXdBfUvGh
zt8W0>lDIhOci(WAqM|zzI+T=vgPQ&sBzXv#{RB668@1tmWPV!~`-48ej;{j{t(YvX
ztW;{9?1oTCvV;IsF73cW0gN=Ybim02V#pB45&{V#Lqe?nj?0PDRavh*h!ig)V$$xJ
zc^zL<BgrcLXL)(KX5s^@O)1D!i<EK{bOSL-zx~A?;DS(-RgzzZmxj4;(x;s!3l~Sb
zbOqDK=3s?cH?WY<L<=I>Pct(!!-r->ycN^p&p`y1IPGUOhW6kUSxd>oM&Yl+14C5c
z&~I<Ibu`2Hxtf>9VKeq=V4%t8C=W0Cu=ELASxN@%nLrp&)c;lwT{5RKKlwG=&`_Mo
zN(ar3ij`G7WiXs9q&}Crsur4G#(Q&Y(=S;v&oL6HM~qlrTO;Oko%sFxcWbM`{O^FF
zp&?qFHSpZU-~)<kJZfXB#Hl+@<RJyzj$f^<nZ@m&dem=$t!e4>0*S<fhtWj<Txx)X
zSzpHolTn7)u?f=bwCT)GkG;k2t;96b!Rf5ocP6(J7r%e@YIftr^>RgVbxqtYO0p%U
zC!<wUm7fYkj^}nDeNLyUrdDTkWQv63@i!&K(+9n^z1`{TIOjuQQt{RuxGZ@|gx$Yv
z`OYp4;W?d~o8vUJE73HP_j>1F00DVGh09u6!Z&kkIXMvvMg$o-d0bv5N!WGsZT}4;
z3(K_yYah4K9WzllC0!5m?t0xPEH~R}w0}!qV;<SXcmEZ4!<Vqq_@8i<mAVl%q-NX7
zQes~R8O_ZodBkdqf3<-<`k&GlreSV;7Rfom+}Y^~As{uyZ+-mMInq^!^Y3SZM55;s
zj~_uvMGrCJ4TKu+<uA66;HDBM7kJYx*qy-6z~J_wLywPG5yyX2c6g+x0vZGwmi*!g
z@hU<>PwL$@_{8uZJqoC)p><Oqo>&*x#M&9%8@@c6fnYc6OV(mWAv1maxK!FZT)Oea
z`GuU^kLMgCG;Ey4Kfm=(RvU$f;e7sl{JYs3EZb+wN=Evt3i9$^pHG{G-EO&ir?0I?
z|HtOV@0NtVEbun*-NK{L_O>sP;@&dstl1vPGQnCOV$=-uSMc$UQr}gcVc>;Ee&22F
zl$QGt%)fx-p7<>N&mT&AH_ID1Mgt>}*wl8+C-7IEHv_6d_o%c$LAn>pTOtyH_}a|g
z;Zg~T@g7mir<Zl6Bpzy>IW3}M?W~TR|GilEFXZmey8lYPb&m)I0r`4*^fQG18lGMn
z#o1XE(kmJMk}7XgIqesIO+wjuZ5?j|gYKguu%sDLP!^W1RJ*%GgZ$A{YP5VDgW|xp
z9L?z;f7CMY!yfTilWW5&L+V)14RIS|4^$!s2Q23VtN4UZ?jeNJaCl1Y-ME-si$(vZ
zd<=O{vMcpdxTn!!56oE21uZNz#pP}zw)gH*Q)lLVD35>pPEAc&MPSd|<s++kiow<;
z2S+4P9y&L74a9u%Xb5p~Pc;?b;0$!Ue|+y&;m;O|cLLeh(g8TPTe_#a8>-?zvlbSn
zR3yx<+}X3@JR|>a^)@~O`4rO?eP@GD|A%je5|p&$bsS{)2e^E$UWNz>-Fzc-b8mM?
zDyHbIRK249HU(m4cHZ;B)9)1-6WpPX9@*HGB7O=j-au$=_jyCn!oj|d4QXNFA;3@J
zwtL@lz_Rg{i0ztet}8bCj}h<og&%xbvL<1-&5yhzBTXPbl91Cb*r<4qbK#So{#@S>
zFD0Eq*F^-M$@;?waU~%gj*#Y@+|<x8Y(1Scyl7=%Z<IeY)cq^0B7VJ~Yu(+IAyj>6
zN*$yil`Jgv;|HdR#z48ZFfwBAQebPE7ayO{a4eheGd~?2&E{zT$XfpyCui-{3g;R6
zf3E@Ybp`uYGCdP_PtVB2@Y;O%S8O|6ROCip@82#~Ma*^f>2h*E9^ot=5wk>z1LTFm
z=ce-w_oF~5TGX$PIV~+;tCcloqwbI4A-1h;Ku%UtQDH4AS|e%~;7zf6V7WNEu%TxF
zmj1tsTI%nmah8{UH46<fuhTt!`U4YJTKPkhHWOalzt2KqJ%qaPAg;frYsA3m24`Tb
zD(ODMQ(#=%**?KEjPXiwR?yX|#t2uGW1#(W8hOLl&kqO|5@IT1uhm{lDg=tBV&h<I
z>*~5*o{x@>a`5ujoit|3tv*&!DW0kwtg^e7&^~woF=|(P``*!!+s>Sjva)jZ-9u&$
z3_KQnps_+wC?nGceg^}C6;snZ;Nhh8uXGYTCnenl?i2()z(Ylg<kIWvo=}3Nl-nD)
zG}Fy@b~~EgB#PC^wl+X4oc7>w$Mo{m13zs80}kWm0?-715%UFQAatf5J;DJn805rI
zfu7eBZEkFIx%e$1fQ;M~P+D3Fhbf;!Z4#h87rQp}ra<N{E~o_bzUrKuoRSh24vv$q
zjq${IK6aagytt`kAB^bkn(Ib1D;+)HXg5Ir!gsK8kC?4vbA<7F69sUJxRlx81z3&X
z%qUW}V|@aY%O_7bYs(T6pyl|SjI8O`uS6gkoHVBDXah$<2W)QxxzRto$U>v5GcsP#
zaE%|#zi~Qaf1diB&q@daR&ad90lzH6my(!I9inOxiyZ(7is3RW{$0Ej?*eoUgo6Vs
zna{{*$w*1tv<ksNDB9k}3oKgDTLTFx4IRi6*YvLFZf-ESLnh13eLl1?4xu)mY!@HW
zEwAP7!AhjrflOH-SWuCY_AO5V-W6i`SPrYIw6wC`o4<vHfvhFJF;&}JD^9+*(oX>(
zlgx|^eWPEl<VzBOBs1N1M|J<!(<4u#7#7OPVX!34RgKl?gZxU!q4_UWh}*6o6rVF#
zIcc88K;a`zA{x)sjPWUee|a7M`Ud8iCObX3_Zt|4fkZrGbu!=Ira=8h1$=Ykmmx?b
zk>YCArjvg~LXJ;PqDAMImaegd!qeqt<WIGedkr@yDqSwmPi(^v|9pQ2RPUSaBNZbM
z5|l>71;x8fj+KI`f;^-(fSi(^p3`Y@y?CiRx=r)EVrPvl=iwtP6KgY2Z9#qw#P8`q
zBdkYQJjeB(7rCeGRpnJxr+_*G{<q<qE_jf~%T4gLOgftfk8e6zb6x;#6e6$8ygbv2
za;Sr=m`Vl$85N*28<b1&p0s4NQ=>YsGAz!|`4@DAHh4e0RjR4Vs&Q!n8Xl~K=9-!s
ziRUwObKtQkC@9(8-Om9`Qu*-6pJhO6^f56>5K5AMx3;kf_!<D7yUDaq7vf!j;(1?g
zN?1rhK(M}WKvkar;)6i`#6PXAt#8|*pvw}q1Q#KkPDPmZYRk>%{2ZbnFt!h0uNv;N
z+sP(xpqdsUNXj~~Ff-HBard>0%SE-_CNxgjLf!rS#njc+0SMIE>esAQTB_lLPFPe}
zXiyRROXEYWW2p-+4c#-VgWZKh0Uw#n0o`D5VW1Q9(o%Dtwudv^w~BbF$xkEoCh?uP
zgoOW>FUd)y<I>6x{7S%;3;7zt{$RDVzFvKAMMy{xG7>iZo`keH&<oDb<G;{&#hz*!
zaCs{N_Mt9SF31L=IAeT#S{fQY1qF2v50^^}lTwp9&M)47I8Xk}fjV>yB7KC+yLTGV
zmTXKcfM1BJ^LU-?)_9XCG6%wc1D%zHlg!z>)*nC4!&{c@S_7)~;tT_vF;w*Qrm`GY
zlu+p8Q`AH8f}|;)%>>V>G%t^yo3x>&g@Tc!&|4VFak_5JZ$(7>zI=h@U`a$zNol{g
zC;^GuRS`eGfaeWQQqpGztgOK7THn~Uw8Um==1VBu8I)RdUO%>Al$J)=U(GgtS!f5i
z{4_^hb_Qj6Ny$ybeTe|zW3l9r{Rj^Sv>`1PJ^;S#SNB(J-AJ#S8GnyZy#PURGM#u;
z*y2=gzmt^W<rNX}xNuDT6(ub#5OsA#sHn6;g|m0|_nnV6F96jBwj9Xe9z6>6Ef55K
zCzL<i+p{H5RO($XU{(7qfG=WWy!^e2TdWPJEMt)p0mlZ5ZD7Dnp9Yr*2L~ITZGsQ)
zl)y1TLrMA8cnNNaAu}!6OG+-TXl5S0S4tAeJg&ztxM{!c)mK!EeEA{@+lZ|k@P^O9
z1hKoz<|e*)(Lo_`sZ3+Pe!K%uw(bMj%mIH~20U|?{9MZX+i3T9c6Kg<Pd@welej*>
z1P|7(rPW6*t(R6WSYEtzox52*!lEnz8vgtsDP>1aTtBgx`C;G0L`{1o`)Fm1SRT8f
zo}O>Dr(o+sxLrX?vb$?3B0_bjo)8)N9=ulmvDPEvogI1V_4Kr~9aH?tgWz{LJ40=1
zX@Qc9zuy;&J@bdvWY3=iCTMQ^w}--B<I^88NScPqWB5*Ij`0R?E)mAk)6q$!B)+3`
ztg7l9D7rl1)Bvu-C8I%RCY%;fl7Y>yH~9@<5a*56z!T^QHv>>DS~g9-Sg06;bH=>a
zBoW*DYLb#&V13~O^u<xsV|-#h3w{}yV5QiX1`VJ6aYsT-*tYa66*i_+<%K>gxt`3S
zoMqrL#KD^I2nPf6>Cx5|)Que}Cd<u;drjG(+I!`J9D6Yfarvn{d`Vby9eFg>c1N4w
zIRrE2P}E1@DCef62+}Gl$mJ*(bH14I`9cWX{B+59Qp0jU%79V0_mner6zW{j>_JMp
zFCKH1ncYRdud`)RMU;U8hs>gL`0B!f&FTJ1Ma9cQ93rAkDC2-~9Xf&d2zv*IL*kb&
z9d-eV`n%exCo9_*-Sz(H$Or+K?bq9RH$UI>xsPuP=S>-o{Y(N<6ThymuC}1yo*y(4
zw6t#YMwBJh%*~|&J(D-lCAtS6aqHe=``y22hb=r7b4^PGd>9Cgvo6AQ{TDA^+5-kU
z=GQhnxB%c6CIe<=zn-{Rp&OM-{#5Ph;f5G(u~LqJ&*jmyThOReb5j%4x*8-4^k?}|
zQGJHA0gYYkv?O`>h%vGQ+=1$~j-f!FEcx02hmQAsLeU&(?`@5gTJ`@9kXVR}is~EC
ztAZxO6J}k^cFw9Q9vf@m&W`PSTyj*n^4^7;5BO`PB5MOE+5q7`h=4;Tzt~1pw9W4!
z#Yi^x9U;&81;Cwek1&4p)4AnYXtSo!6>%T&Nq}E6=G?U+BElXPp|WgNe8>CP<Zml0
zE9=**al$ONY_!|53^3va>cNCB%@Z;*E*_P^`oGjxj#Ac>j9)w(Qfz=&A#?iIeV|W_
zGkzS&hOd)<O&u-|x+d$6WPfZ4Fw$9sJ>6`iz(YxwDH4$VS3Ou4r5&A}Z^i?4^VMqX
z4S;|e)B6+wK17I%bYTM<EXikm%f!UAxR~o`I6VLNZ_^VxO3FXw*&R6QW@&cq2if;-
z&CmP-?<XMy7s^G}t>DFdnfw|7Z3d^)eJUsUOqFuSqc<vI(MnzIoj_u8sm<zz&sJ}L
z5?l-W@^o4i6&s7&rt{%0>`mAI5)NLlv-3FRL~R-xf<MYkqU^dO6IAd{A{m;Wr-0`=
zaBW^#STr50_+BhJ+A$y}sZd5p+)`<^#DV%(_HyUerRs~Pf*Dv)AALw6Q3X{0WG7Eg
zPY%Tuf&(X@wvO8wyPX}HI5<=W1xeNZ@Ujcsay`B!tzatg-IYmCIxvjnYZYf#a>UpC
z?70UIV#ZlnSQPR;2+;!VdZ4p&gMGpQg3J2&q@=mecb7)*Zvd?g3UgDZjqr;je3_u~
zC!Atai{BfXrE?l>YbZJ~by5#`|9)e<I!IN@24IP}4C*EJaz^5@Y@xO5+rMY~QvD@T
z;qacUcO&-vWq)*ealG?!oX7bs{hPZ|XlSivM0wfi>BqTlY0=qEG(nE=765N;Xl%rv
z#Bat*W{TuvQ8+#4FrJ>Og|icOpP=~j;bnYH_CR`OIcoU@6@iq+oo#c_o)jt)^Eght
zkbss1(AP$@6~Ywgbj3)&{|+Q<S1aXm9O&;)&TLxhigh|XcYtuL*+1Mn=<)a1kp8x_
zR%kaRrKEV(QXk~j?oZ#2{z^Jfah?{vn4Otj7!JLiIjxVQ*-*jlynY3QhrjvoA*r|V
z$vt5;wYX28ZWM}kkPjrqcT{>G*1B+Ksx9rBWycu&(cVqGA|#CpPD@KAG&*q7f@|v*
ztIS!Ol=NvibY^P{mV`Ik{nMmBjNin;lv*1_Sr*(EJU2(m$Y=rB_y_B-$y!@m?{R<{
zpiiHL)VjugM@yE$a2yc91$OyU>w^INWsjel4G=JYXI@KPRHk)#d|Hv~gF(a+p#)aW
z-JJu23y;nY>R+Qwl&o~IR*E`0%@Fs+^SIHIkVqfRJ873e&#FsalO%EIN6SFd*CiE(
zy7l$-CO{eY-oJBC`v`Bax8H<O1ptn=<-Z{xfE|`K{_@Z4m1>PWWBsUW1f3RR<obfG
zbDA4^4%o6yV3Nw%pwUP+gpp<?s80hF`a3=d#N>a!Gd_Y|?80Hii$O-_X3t1Py?YS)
zV(F}&)o4iH!0;afI>4^+2*aO1q*hPDz-~9RK1!09IIF3dt&nTzsypVbe4<-Sgofsa
z(+`JQcRV{E1N+f0PgJP?t!Av1mX(n^GT(S5ZY*x3d+V}Q9}^)c)I8FTmP_>fb7w<e
zj1oX>O<Er3-lw9Xl89uAtTi+<o7OLa?hjyQh3#5fFM76F>k|@KmsnYtv>8CZ#2QK)
z_0bFek&ezB4?pvWCjhb1)AjtDGcq$TTJ^sPlA>9BReSi5aPMKH4b%0Pm$$dCke9DA
zIvR*$cjI-k4ufdxA%#>KYc^~;0FW<MOnx@bd}ys=g^qSVHzxxV6Z<CO<FjO6v)nh(
zPZ(7%^6*fvc8-9jIh_XJ?!vWQU#>Sp9%$O##ihlZ!PRfUf7LZh4>=SZxOll_*pILl
z&fhbTQujr5z>J3U&WP_vR#rcT`-}CY4lN~ZouclRg_Z^c6#6k1La}te%5OQF3i`_i
zhWZcMi8eR+WFLUF!=`kz*6|1u$+D61$E+`2EI)bU)}YWgG^ERb3yqqXkYwqY*hgZ~
zafryhNp?R$8Ck`<cZ@ets?x&9ohn10pNK@WnQGT7+}_3jpYuiKIp?(>lQlgPO%L)J
zREl&!C_nnURL<J%uvdSS8VD0V0#^zYMLYk3ruqPI>y=iEh@b24i*F#`NcyNnMn*Ow
zi}6NS5YyBB?wvbC+~)4fctlu4uCooF)!m|@SZKq`8QVqFnk)gmVHi5%XX_48Nuy7Y
zeJkU{?eT3azI*p&q}4{-&bip2--H$DdO-Nng&?$n2ZC)!d<eYHB9HKyv~TZd<Yr}!
z)jFBU+L%fJY=|VSCMze$`e<9fztAg<TqQpz2dufST!!k9&I43!B-?D7v#e-J=9PPV
z?L@~o>MhUL$%B}xiV2T4q=md7tY7}gxZNb!jOUsLr-s7C89x3KtZabUIvs6nWH8&_
z0fLcX@peH$06u$J{@o%d;&+xSK(A@-?}{v;d=`!suiGXNVCrB}3LMsMQgP;+)U>n{
zl}5OQH9GA$Nw`|T=MGe@_T4&a4N1TEgbA850D!20#G036s<m|`;39h3s_|Nz(MnB2
z1B8*0WSM-Wx{2=Yd^LPAprApDXJra0i}3{&XV~pGVtlvWu)kn~K!=rJQed^xc|r93
zM|qV`{GVc;We$Zzg@pyjK(xJp<0Q!@*zx!t0(|9!BYyLvdrQ#9iILSSodP)i=tmqd
z$g5U5r-q{5xpTWHJUWQv{k98(6aSyI+jm{A#3KV-(#Dj>Alx?GADIiD1Bf<zRXY%8
zBD-0DQpria*l@DfX+3aG16AF3(JT0mC+e)0pu<>hHfh@5E(cU=C^i?q5py~}ws3cQ
z<%6Bc$}v1JK(AI}K3R1zB;Z}J#GI4X>s(V482|EnWF#5_xNYmNtAH{e8ywRC6_4G&
zR5aOJ$j(r)h8G5K?P}srpyTd#Gzrtc_Lok!FL}70{`ejW({)lk8}W&W)e#VO;e>@H
z3kO1n<`E7Kc@-PD=wbEQDHx!rtnR-}H19qgvPnvWx<DxF<WM11@Z5t|5fLo{9yApZ
zSa5*eRXW^1AMiNRoby5(i;BvJfg11)qS0e`jD}KL)z65b6VZ6ZHE|j*z)j$yq8t<y
zRDW{w6F;5cS4d_gT+%Y3`HAAy84~;><r@rYX}IokG0=2$*TVoMg!%VYAb>*i3Su_I
zQwD~5AX1BowZlCw-&J{~D76JjfOV=kSXU4pj*)yecIjeeEroQQ0|prR6&AkFSMw7Q
zQH$pu<>7&0T(-{mdK2U0XK?Ub<2|@Z@p7`Wp<>nD(E)wsmC0&Y{CFIe+V3=G;27ar
zDh3JbevAF#d8Pc-B{C{HnF6$-(!?V<b=r<H2|-Y(&h1uccEzj3O3qo8xiabI30{ns
zr3v3=07C)2;QgWA>$ywtk#a$)`i-RNWwtfvB+N27jOAfs3O?o$NR(Ols|}C*kI-r)
z_rSb7_(}ZUJ4C0V961QXTi9LK%x)lt^HtrBE?sDXP~5X@2hA1a%X@xS)YN>)uxX63
zeG1%3z$D%$=7kwI{*ZK@cj|4ux>nW1tjEMSGViUft!<5$2SqHY3JA;t<d9jf)39)|
zCNpxhHH2bBmRm?jI8Uv(s&`goJj;ax6(}=4UIXLy=2u8s9pzAyQmwYTW++5)7?Bqq
zwT04zGq@2(I6)QwvqEmTk6JBh{nMvFu$fJjz`Pq6)4&>&P*YZB+daj@$zwC3g2(IW
zO3~%&shx+8ZwZOzpSCQw#to=8!T!-5!5FfP#ctVj+tFkr&y0svSzG6zv{oOqrqxa@
zz$=EAm1$vV>13G=zH}iQV0Du|-KbU&XJmyU36y3Y65=7vtb|YiD#%1ug!*Ngp2ku?
z<pbww73Dtu{PwxI2ez;N3|hozR{NY~nOQLvOJ@!M>=G`QF>nyC=>f&2lU4BC0pZea
zz`?B;y+R#qYE3u59S`E>+JM^^A0b{FHXHeA`YYc|<EJah*bf*{1(SuoPl`g`sn^<<
z`sfkiwqp^pRUFLRsB9i4$psaG*w<!b1B2(M8`HaMiuogcqqV5=fRC1!cl%{>iMlaj
z^+8nhQ1LIf&e$g;Pj5hcz@x^jUlMg)9>eFmtiK{^X=#B(5Ag~bb@*rOA><Oa78Znz
zS~tH3|I(<j?`7O;FPE~|IVunp&-u<46B_!+k&l#9p+xGf{xXo=74t8N6u%O3DZGDQ
z$=b5JvlAKV8v7gS2!X~75E{7sUB)_GO=*=CR5?AUv*=F)s((>qE~JQ?eC7$cOLR-e
zp$*;B+5+#GB0GqrZy`iE(%jAD3|fz##`BPn0MKOG$~9rV{<m!cfF$CGAf2nWJ-~CC
z-(6@QkJU_HbH{5~pee7YtUEe7h~RKSLx56n4D9fq7iOOMl-V2(g4rpBjKb&h=Rz(q
zB_-vmsw%cndk_$;4ds5UN3Mov8omWr%45QaV#A|NfLoG>ZES2zPE7df5XR;sTfwz4
zM^Ac)kK3+Q=qro=1TPi*y}N?gcXSRX!0kGC;leXrcf#9HTIb=X<Ax7HsQvvPM`r5I
zt;P<b8Pl1WT0u|PRjbqE+`pNtnRe}6nd<523~-qb*M;~TnrJa`B~TyZ0;>G63D^5v
zADmc8DG3qt0=I?}@r4>>W?cqotUDY|n`n8@QT5|Ijy{|f-}~E}JCi`XD5@YWPyEte
zkX?sW*+xfH^iy{6$Jejv5zDLi7(`5~9jzDZKV;MBD5<E<w>RbWrZK#Fx<y4KdF{8~
zHExK7)9YM`W8A*2f8jZ==sWj#D7AMcF>!INNVyT<(Lfxkj>0SC)cENR+}0BN0U*r!
z84$gv4J$5|ZJ9!Kayo+|&_n4bAaeSg`q|S{AekytE^D$kS)eXJRS_Nr099j1Zct$?
z#b9=RC8TD!atRi|@dvojm~&a7g@xm^qq3-FN9)9o_)BgipkLI(YynbRkJ8eTk6J3M
z)-^TG<*fL1idYonO={K7HvpHiIs2?-ZS_gN{$OI_r71Dt8exS_i>Ad6v2F-&iJR<u
z1HZhw!a|YhRS+h$-8sZ~)P6Z6Bf|uyQnNyCzDJngScJI*YT_R(&zmCWDO^nyZTFjo
zl^iC2*P2ap2L$=Ax}OE~5HGfeZ}rc^pceK}<Kev65DGWKACWLGq1?<&R=w0@(1Qc!
zAHnj$?2d+=4+LT_oWhsOJt~b>_^fT9ZeIct>ft0WxpwBe4=Wt(ap~TN$H(t+uzV~2
z4pkN4Su=w@fA=}F#B|1RPGvi2-Cqk5x_wIfGMQbTTIbOUZm;5ECKK<`uBhtu<*PC)
zqCedXKPU6@_Uc2z!qh}X8~m4!V7LQ?cpS6-wr_YhG0R&a<qCUMd;5Z*VGIUdHSX%I
ztu-VBJfba|^D72?9SpQI=`XDg``GiZKp%<+2i$j&t>$(%f{SU}Tk}#U+F1Pc0Xbi<
z$AFAv59g_$`E_u*XJ^wmi6To#&`}wz;4D#w8w!2xP0|W9q(8)r?Ofy2Konx)5{Jjd
z^+pLO2Q_Qy=;>r<x&=rt{KYf-eO+F?Y;ZtEM%H5GqR`ujV%>O56S{q}r*~L1R=!=4
z7)KC7K>qxB>B}!c)zxQ!V)tFBb2)t_rmfAD&?yN@R}&Muv-i`v(K0}HLPGj=T#<pV
zC^bCJYt&WrrLD+H4;}5!oq+fkA^d4C-7@%eQYU9OKBJr<60*iVj&%s>q^2S?n5{cH
z*Yrfc_z#(lUE8rrN|Y2Ne+_h;pGOMhQgwr!2Km-~F);}+N7K>M!x8-u8~cX)moJug
zK9iDD=Ov`{xy|$pp?V>sVhj(mhlT}rb-cZMZyz0P7sZ`*%?_%YSZLrf{TE4s^fQdm
z2OLjaRE&WmpzjfuSDo()*yFR}xLp`Pz!5A?KF-c#X3YNl`JtuG$9YyTdBk!$e3`sm
zTv4IF5mgE~8lQR@dba}vi4fr-ermk97W1q*o){UdxSj+buAVfag)EuZ8E#AtQ*$zX
zJzgT1SsP6^bIXl8{XWZQ&G3ZNIS1UqIIpzr3z8eHZY4{8;5P)h*6Qlmb=%dHSPQ%X
z8ozU%S5}T@O%6Jo9CycZQvTmA4#W%nKa|J<vadB~Gq&I9QJn1-^&LLqVk0MIVBlhX
zj)j=2bt!ZyCj`IVhKh<7nn-5n_$BJKDaH2UI4t9=ua|k%h}Ru%3|B2s1I%<hzy<gw
zFfJo0D=s>E<FJ>Jobw*y??Ux`V%EB7%cFt6UQuKDjW>37cLPgefmSA#o%;FKNp*Fd
zQK4mD_i(I|24m!_PXKng-+zyQsU{^QLyaXOK3+vlVfWzS`p3}kk-_m-je?rb-bn55
zo1>o*+(v*l51cF>uJOuWZ($Jdc6VNs24H&r8mV(IcyslH)XSCqfuHqx6WZaA{mo5N
z4<wIRl@u^!{QQZ~qDO^lgpOD^^i}F3_ivq^67GHqYU(Wy5Kb;#96Hz-4_7)o{X4nX
z|NSjQ-@w5(0WF}c0XFud(e{AA(&U^R=h+4!t($lVNa9rMoQ3>%teCG8h++j`=)-Of
zaWAX5uA%O4HB*W0m5mK(u!8OF1_GLw&~I{vH)LJ`YW=tiTFgtQjxyI80$$h4FJE>~
z0j$beYIC&p9-6UgY6`2HhngdQEDmloFg!7^=8RPW7s~qD8v0Mtz}y^4RCm||Uy}gl
zVi)W$d@hzgu@w#*_ilsFWyo|wfLs>&oLk`21tj;)&r?Ql!@{EpiE(v4yxAHY-UZ!m
zdeBz(kw9Xiho=vI^nRh+fjW?15)(%&(3l~fp8xm^X=W-`tVyadj`Nmm8pCaLP&%|4
zX1d=leTac^1Y^u7B%(mY8ygpP$U&Q<iKnw*%2_q-^jj}w`0760b2^uuITShxIxPV8
z>kMYe8yMu8+%f=x5VQiJ%Lwyw2k}3zQ&^b-MbiA&CzPh$+Os3i8*cV*!=2X}B~l06
zFpGQw=;@73P>;3?65z*s{5e@_zf3*fy)Som;Y+@J2sZY<o}Nljby`@=7GTZWSl@s4
zj31X)86W%a#cH#_;3f~bWSrH)+|Kzq0itJU$mw8LQ`iw4fY+v<IHE2%IAj&1<GF1v
zEBjG}yqX=43Ss&Nuw^I9r(XfVcT+1oH1vmyzb`maY1-QL38X$Xd^!i87!j|n!+2Wi
zdPYuOpzHBZg=h0>56QblM14u>9!E2n>j+g=Ha}H2D@Q%bTU~h~6~le@bLu`Yzq-yB
zJdmcYcxnI{#b$k6k;Cu=rgoNx7JS=|ltuOWEO<Y_3FIkw(O)uoANIS3q<12_V{ECN
zoDFUz@TXd;DBU|ew4AKkqpS^ETs)1lS6MpUaSE_j_kV4+5kJKBPFgy3>SNAqV}7FQ
zxWa?G{krsRt)^~4gfOb{lOSm<x5X#bN;xGZ`{V8J!m@08>t~PR_}seUCd?YV&_L&?
zWf!h*k4B@AcYeYwlPM<@sQc|;(ZE=)zV2d#PFeMX>X<br2S;V&o4|<2_%No*yep<M
zW|Dl=8-uuOREnYWb+I^9Y5Mgf-7pq;CO{N7(dLH<vyPy7?wzI!8uRM2BPSJES$u44
zebdW>+QSk9S^P3a9Bga?&H?XQXebQMtvtT>8-hpOuJbW12;BlSH8mv;&VT#}jylba
z9PI8H>RY^bTV=ZUN02%Kq1*X>2=EeYoD-LW$*ZgRrFT2b=5H`Xio4dG?j=vupV`>+
zX=+N}r<+Wdsw?B9r>6cEqS)5ehKYkkN83TnX8A#UV5wtY;b_@l`T$@?(-n@ohc%CY
z-NoNPs$xep>uk}bRfxVZ4WK#6?7TXsH7${kJTk6=crWyiH`bP9WF8=Xj<>T?EQv{a
zW-xG4=ai%<sU_k=lYE%Ne%Y<j8yy7!G6yT%uKW*mq_o^I%pPT7hrsP0nM{CsX^g9}
zz;tc(*aA)XLLI9RaJ`^)>#{~ct6X9JD~i>~Zy^%U#qn&h7q&~VR(xSl^|S|alg1EZ
zA!EAKV0=3-^{UZ*zIp^?Loc1onW6q=8^62l>l<IQgiZaq8LQ$&#643}wXU1qziW9W
zra{Gm{IkEM9PtVyyRF)oCTq_c1qPh-4_1vtn#g|rs(Z3R1yE_(YEVXJ`1<>yGqY`c
z)YlLDf!%#WM#upe6$?Ig3~QlYK0aoBKREJ;35$#R5(ke_yuf<Cw7#F#{KJCrJ0b^6
zJ5w%a?KIR6ku>*E;F)zfIX7Cnnt3`6Ta`@aglJoqIL=yfKR&|u%Xv<=89$jukrJ&t
za1g%i7I}wj7>_ARsugPf#Uc3nkl^olvd>`#V~Cj87yLuyzq1R;y;<EcBNX`wEG|P2
z4#zn^g_RKj>S2}6ts=6f#%4eNz{5Yx^xak>3c<xaFnf+%+`XMgTwmYD%Cy<Z@N{``
zH}Aqt9_B|QU>KIg+)bzD(y_5In0lqH!@5h87pXVR0D`=^^}pICACZCl^#O{x7t8DC
zmlsYLQW%HE;t+&nRXGl3LH?(ps0auBMaPq%(a}N*B<QLT5fRZ5F`4%uv`CnlnTzP8
zRH#E8VR#O-K<6INtJV}4c1Af4Izn1MR%u1ybO62ZU%!6Epxpuq`QJa%;NUJ)g02WJ
zOzB!{H$R*hMY^aDyMoL#rm_1&y@e+sreqxVb8^l_j+Una;OKza7us(ULBFy!Rk~_n
z4j_LIWYh;H7H|rI;pAYh*-BAy*s(GDaCOpXFRc@l0(>WtFz=bT^o+M%5hT)UPQO7X
z`Hm7BB7v&%Zs>THIuC|Dv~>dR%C2Q`C!LRdMJ-H!0!)_aqEHstPJOpE4x^XBAFYg0
zs>2kyMWEhBV+}iLy~D;n<#?+$Q)*64il%y#Be?1MR!YHfCN8WBX9b{)ps?=2vo`8v
zx5Y*E{JDyvVvEL$;E*}x4hd!9Fwq4`5fN=O&2p55e_f=#`u^lzoNcN8;ircy0xTSu
zFxJ&+E6&H~jjr%5gs+$=bm!LARxIl7UypD6FoEHg2Qwu!T8u#t0}W&l`xsoNNX7Gf
zbo2ZAge$OCRZJH0KQ)-GMHp-)0L552d1)jBUasy^VC;R0Y^Z#b;Axm!SV%-gUh=6T
z5bg*O!PjyuD^RUyI;5ITOO_B3F-Rj3rRg;?e5um=t@01c7)Gu+%4e@NR_#YvIN5)X
z!)R&fLPO5RmOoE+O34Z4s0~QVeE1O(d$PH)r;}aw_U&7W-!0sZ<^dOy=m@AzlsK;X
zcpsPZJ_RUERK325sAy8WRD00jR=9Y6>Nl!fsuzg;6|MxS`b(L<BJ4XT*HAKke$qz^
z1PnLoY>fAJEWvv?S$cFck{|8P_BAG=E5ue-VIyrq&g{MdKYvMlzR!DNe@CQ5Utc9a
z!St%JP%+ZevH*7KEA!KJJ&r%a<F%TBgYu!+tHVZQr)><%RUWnMYhuE+uXRS+!ItZ3
zBCO8s^cWgm;ZSYW_atF=;BaL;8t7e|&3Jdiy{D%;K!FDdrY_Au{|!K(qblfx+;Us#
z94gG+yokpyG@jxPV|;Ws50q?eZf4c*dD>NLV{=ccJFGqggP6zAP`3@8+gnKmqp&Qk
z*Dxt5S?i+~xS;~$;=U)6_z5QUuYe$|i2%8CW?_E1gYh*n1tAa5$7jzDv!HjE>|w#P
zxQNsAsobtzUOQ&l`n2^S1<aOuMr~|uZ9_O!V_|7Y%|J6x8lsbu3c7JWw36FUMBdMo
zjd@)Gg=45(jWW1BeDHu$+fr8XjmC>e3dxwKVKB6Q6uO{a3E2agpWeH3Z+~y^*{!8#
z-`_%c8vmvJJ4Zu21j3JH;I}s+2lCHOmE73rd=URY8y=c0r>7R%yW()1LUSCR!&%K)
zgUn3rJE_o#5{z$!VNOh+J4`JHVMg$vaDJ3{B6!Md*A8oudqG;Fe1-J+)*1X@wVM&f
zZI0Q=C@GcX<ow-fTq|D8D<I<JWPQ#^L-UNBv!=I^3j2!zgMW5-oz%nN@aT(~%|{6E
zimBEaj&DRSq241<lb2sP-PwQ?wA2ZY#o6pkz&n?Llfslp&C1_Hj+*`2Kg_O{E0t;~
zTUm*UPPDnPprF$Kfy?0a>sdU!jkBOA;?AhzuSyx&*=IAy53*5v8A4-XO5jw6iS7^c
zn?OJm6)E2UgPZ<*Kb25_NgM{+xF%<p&b`A!O&^mReCWT#z0zQ%@gU#27qd^7S8YD)
zoNPfDE6L}w*bz5bjij;CmrC764X_j$CME%sI<~*d->_u&b}h*`#(cksiK3vMSdwQ@
zGCagQ)_hvjSENNWwN)>De0<U_x>hboNlzsyAyQ*~sb9MRc6RtVzrmmUMhXt+k?Qj4
zX;A>^u1}14YbNU~U@y{rAjDh0nkq#8EoD~n6FjcZOem(RU8tUOcu3~+IIlAyKw<-S
z4L7O%4ZQ~;t>%~8zfT(RMMNT>SmA(<*ZgqK_268yG33teJB0#9cRn|0514&amX`kg
zH=`bQ!I)>oBBE^>S%(#NYch>7{e8jma!!~BRX3C39rj?+LZ!#$aC!qO7dQ`}d2tS{
zvKoPaFiNbzQKFU(M0v(6zeB>lSK7~hN=qYmY6s<tdX4dJc2Okg+QHvi6G`t3rn-(u
z<`|VMgAz3Yo}Q@S`0#SWg{+SR3@U(s3vX!x)#^wD^8zT?D6uX5pX~1Jc17`2!;nmt
zvG335>i2-gD|<fltGjcswt4@c=4v}Jx@b2`UVW)*X6YZZmaHF;htDn>QM>54CnjQw
zPYm?0Uo39FfoE^~igI`U9uD-Afv8d}(GSf!Fs*dNRc6)8yA>Fcbpt_`v&Nt?!a+?<
ztr|w$6n>=G3gU}|cIeO5Gqect#n|z3;NJ9Tc~iHwQRg0u%La#-O;q%rT3T9shhqav
z;Cm}JBIDx=#Eh8k>32^R#4COo!<`}tJ;`;Wee-@b90!Nd(f0u*@4&$3eUu&~^!a4&
zL2$glInq-Gb}>=Ww39;9F%Aq8c6Rniag?Wp>Iinhb<&VbI@`wF3`!&Ncpx~Kj27s(
zdkcYYac}>4j4h~D!?H_31e(cL5sYZP(_P)&X1xt4B7P#BDO6N+95C<^#E@LtmJX6J
zs@c%WmXrG{r9DJuVX>oHUB`xvhK^S0a%L+_70=^x3K|n6cm70}^==4VS&06gPrU?H
zMPcL#n=%6vY17XhIW;vj1VH=X9C%KCzTJGl!SZv$@OG$Z>N`qEZ<)#oVlZ)miOj|X
zW1GQ?>3EuUd3i7$NB+A7Xe}$tPmtUzyavF+c5;FOMo12$E+(K$t!CYsA!YsQrYt3)
zYBf7&17ODJFSp+3l<7?Ad;A}+Z*E-NCjcv(t9(mVtcC+~7bpcMI1vRzhFnd$ET8!^
zb7(27q$B7qEFel-W8doU8$v|@5rOyO)=d;wm*-}K)4DU?uwX#KV+u0Tq|98giB%#z
z9)TP6K5GidIRXMV@LcGY7fyP|bbsX4F<K<`mW8<8){1_iwciAQ%1na$!qD6&lw~e{
zgF#e~{2J!EEq1KH)6Zh{XUpM`6&r_$*QN~{q&chP-u9X=9$$+ok9W%_K{gl0pdJ@C
zWXbgdrhz`Z3wBoCI$pXov*p#nY^S4j16TSpFxEkv{6n>EZ8H70Z&6_lPcBnaQ-{}P
zgF{2FM{Da*q^G&Q0f84Gm_N5?*~)PoU>se|$)2-|OQeK#G6N0Gc#T2-^=zb7EdhRk
za9Y)|G-5BfFEN}hyuI5kju9r##&YrtN48R67Vp=ib1}Li-Z2IHtntvq!ra_+OJ!*R
z-rUmU+i*n}WLY&{SFM+b!**-%&<6)MEVlP|;Wa>n3+|nZ4pcdIwmQ<ps;n<+Drdc|
zb<GnXaf=X7gTY#i<TtP3G>URRLfIxy3W~D$`DLgX8N-x9zkLJEnZb1F(}5n4^%l<m
zJ{;(M@>0Xyuh8#P(x;RZZ5T_dDJ|`&JO*nqhR@Y_G3ZL~d~16a%+OGNSk%^=u5c)3
z?fz;DnkMk!vLJqhg_(|5m7X+#h4D*(e|cdU=;PrMF@Um9RMgVk+}zsQc(An&3fLoM
zduPmphVBy5(!Y8I#_P1xxH!4h%Pg7MF#u@RTdRV*hVuCT<<ajny7uV5&^_Oe$>|91
z-db1~GUNKG%>=eWX05+Xej!VX3%U+f*TZ*V?>k%>c3X;@CwoA}OTT*1?z2H(Ru-7}
zt>90`s2HM-Z33?OkBh!L2$)kYc^D3ig?h)Gp5gJ_=7+4x8i?&3%gK_1r@+h*6GOib
z9B0G!%z3A+iJF%{W~lIEe)#aCrDa{$3O3$4pUIFGKv!&RtljFR*3JH;^{kWzZK@G+
z==Rlo&IZqNdbRAI@~Zctn>-oVS@<s@l(jQcEh-@ZPGHjcdCXBD!{{h@)9@nqIh=}i
z-us1w%n|WbakSa)=5VwZ6*D1U@TI0xu&WdC^16y;lOSHe8Y^7b{+0W@nU4E6EQB8*
znxlPR<h2}&ju_?OcoRfmVPT;8>c{lnx)G$Dy=5ljUKqqMFQO*V!vn^P2g{TjD$B!M
z9c{tCrE9~S+HFlx)Pg}V0Fs9L2SY^-S<LRX=hv>o6U{-vV;Hi;0Q=9$^@QMwi4W>h
zQo;%f;^H|qH925-g=sOpy*nVf+UTlz0^_yduPNkw7*#EG`tV_W=VJ>VkddgB>oq-V
zYR;jl4>nHdItev5G4=J!%E*9bL#@uaceC&_=`&Is2DO}&6c*R>n}o4(Fz6HN*zlmz
z(bDekpIa|=ZNT3@T<FNGNO{T1x^YshcX)VcQtLxcObBJeimjf?FJFq5{}fc0GZbCV
zhW{GRvNn(EWcy6&^=p!ixYIaOVyJQ<y%Lc1iEbmrd+?4y3al=0>(*_Bfj#&zy-QYp
zjf9MBPU9-&WcS*tmZ(}qWfxy>-U+b4y*(@2b>1PExkW`a`rayhy2{nNxb>avEp#GN
z{ekgcm#yIpPaGY+k#7arUrxt1HH|>+x7yh{gB`(xP*S=N_+;mkxx(N%QXQSr&tmK!
zYOQIL2S2VP)PMTN@o+|S=kKGzyLSsb7_Yev@?3GA$LnY8)@x~hXSTzRZ6*r`-`{2(
z=)&Xw7knMuDu;#D`!}WH8EW|#G3WdiTHsGH(8wze&&@BXlvvM4K6JW!M>!&|sdIr4
z17msug@y{-5PG}WxEN7x<r@nt4ejmhdQ+kzBAFc>CFwzCS}gyL4ZB1d8e$V<Q3BBB
z)R&#NSf@{51jJ4E)OL2zypc7%d5DaFP!A~~Ozke>#*I%fVM0{26~0alO#HaWE%3$!
z!;hjjtCuS1{mcE3Tqk%Y6mvfejyAu(s<0ixd@wON6-2<3X{Vkoe6*<T=5V%XfL{zu
z2oP*#tUZ8f5yQh2VLUv1HntW$^;_vT8b%^~;Rn!RQ`J@+tQ=Fe>wuU$SUhl}o@CYS
zP<CEDp6aUmkLT%<9CXYi!V3V@rzhsK{m)zQH^AlrSt!!a{)@G3M|CC{V8@P+hI{{m
zedtk7GuxVK;x`r--wP3bIzYnt^yztUq%iG|AI=vcsr^Rv&L=MODF6Ct_RW;)HG$-X
zWJ9+R6Y=ki571Ceql1I}KM;u|P!0a`b#5op-}(RezrXa2qWn7?ELKGBo$l8K!^zFC
z2Mw07syJTnqUC$ritmKPc$&RQb2e<5g%<qv=d)4OYAB*mC|P<##=ng5tD7bzPa`AG
z{Io6l{%q@}2@e6N@&5h2`J5peTP#d|!p1RcQ?9@Ucet<DcW5=UFaLU)+v;P>xvY(s
zcdq{d0+DiTZyR~Ao=^F_xqCdYaW7k+DDnjLM)F>^5$BoAKNsemk>-7{aw0U;iDUin
zL^u3zA-(z%Z<plVR|f(k7ecsXW8|EJ>Hog@s1Oyr`SsO9{Cp}D$w&4O{(61CShsAf
z>P@eAE#~M|lYz-&)7o<H-j4kI35C3ZNR~nQN1B?iA1&z6EtctCm}+A6!s_T*vDWhc
zZm|XMUtR}mnwPiLKalLVqwT%B`X&w^>_W0xhhwe#{Y=Tj+ZVN*dShsJJ{M{3dH8P6
z6!it`2Dkp9GA$_NsW5xyDLrhNMjHm*+u<NHB!oMQc7}-&smS%^f@ZlWwdGdLc<=SR
zHk&}(TVA4~SwFRE?H$XTf4~HE(MdTO*#|0b-)L1<))8wlx2=VUncUB{Blb^faHgkc
za;n#HGm>Stg8A{j1qpV646q}^L5#~V9f3*woF*LxU+v8Sg`0|lP*niFmtr?@N(vdm
zy`t%Aw0f%|EsqU-M(XViGOyb3Ki_6wNn^5a)*h89<Yt!&<Q|j`DUT~>4`rE@Dytk#
z%@Jkzx+DLnW!KE76@I&WiG@$~^hT2Oi3{JQh1Dj<Qk)forGsS`&#?8Mf<j42)6vl<
zcISD&1$`d&mOR<BvMgFBj49!mm^rgkF5f7y>$Y8x=8f1B5mfq<?1QvgN00dDm9P3N
zo<v(;AJbD)TU%66cTwRk4jn}j?}hjN{*zaN@E`2V<zQxbCVR_Mnl;af1SPrPDLeIU
ztGmau5#!Ff3m?@(p4_pOg~?<ApRPCP7YE~I#FgBWuLXWn_JcIlb8~w1u)S)WouNCb
z7IH|9?oD+Db#5NbT~xu8#9uMYTg<$CF8$rv$eWXRd=_DunV*XiqE)JC!n=&8cU?yM
zeGbucM~o#%wTf9c2$gwUcHd3nqWtsGXC(BsUuEQ*{hYNVmyDGV<ObJlBnsBb3O==f
zpsbY`kyN-ZxkPkw=j`el{y_1V7_Ox4>V(O83dY=A(#biCJQV79&d=%f^mJ~Eelb%$
z+8D|7XR6J~p`~N>^VQO700qtuWcNbG+27>4#$~!Rxa^f57VYMPmB_x{zU$|Edu5_D
zy=Z2>#RK?^ZFn*v4^_$yqy$aI9a6}e#Zn)w*1;_4>z5h-v-Gb}R`nN3imks87p$y&
z&z^VoK>E19rLC4dPZb^-(j>xhw^QB!#obp&RrPi4Vxa=kqO{V8grt&+hmh_LK{};7
z6e%f@k`|CI=?+1<TR^(IyY57P@AuvByYIOF+%fLB<L<#9oCD|Vwbx#It~sCi%xA7K
zQrht9D}@PD?AEw+q;^flyPawdSo64e;1}R2h^MnJ(?qoR;I^82@;{7d`(;vG9haa)
zAvcE=8mgo+lD3`JTVGF7Vmh?76yj|<Y6Bv$4j~XxULMZ_2=FmMJpx*Q@bFxF_f?4k
z_d4<+mb8p^mSyfXIZPYAfuS+#4a&V-K(AIB1U#{QOO3RBzs}BXoo!i2-!anh{VFUP
zopjthWqE^AfUUsOn}>i?`)YLd((J13?q(bnU&Eg>A(^KNB7blwQ$B6ql{aRuX4SW}
zbk@+YJu?n(dGzw-`%Fq+H0V|9W}sqZ>ENI&8Go*p(>c(luc-nW<-0!8Q6$7w@NbZ+
z9w~D=uW~Z(03cD<koI;`lelQ3v-F>n7)TIYkkn0-WNQ|z4@D0-`=(vgPMsXAFZL9W
zVvX(8JhR$QBvfR?l&-l_AJ!+L*;7C11gA-qRCsG+|D<QCdLeKqHB^n^#OYu#p}sMI
zfQv0U-eSK0-ESh->}U1${8VD+lRtZ^#NFOs`E$Z?1vF9PRKa`eBUO_2zuu4;EsWDL
z)pq^p@$~tO{U$Rxvm%Hw)%<nowA;#1&N)=M$c>r4TksdpI>cvm(rWQj9)5avc85^C
zvTUl0c$i{O>C8rBO#KRyy(H^2uMhOfW0ji`x|QBq@Sf4pYctjd*|&K(SsWDG6JPwj
zU<HDs5#NKBQr`l>fXHRHh4OO3tAGBoDOlBeYwBdGf6FB`a6{IP?$5hO<E+;|AZ;@A
z%tzYqX=<(Yd(^WSBDQ3tUG?g!ygArIeYXe3!b+}oQp4I{@pi{V8mAohP<U2IIKDVd
z6z41J-9sQY7%Ll}SwUy+NkTp}%6VXBZ83M$KTYuaDYs;p&jTDJq)FoUe?B=V!E64C
za^oh;sD!x2?f15TrrO=Y3%lZO=ZhzFK%YK)w#nH^{m=VX`H_$eL~f11#Ew7w!i=)%
zIOXu@a?tk14<B5&uiE6kd-<xeh)EZBa<6Vj?()^<VBM{UwJV+r>0i@dA3uS2Sf9ZK
zB5fdx@gc+MsJv;D{^wUPtjRI=r6%~t?paLCzf;93d+XNU+ZjcB`Qgi>1NU+~aJcKC
z<i;Y|A56MfU%u?7fKOFAZSrznzB0hhCBQ7+m}GNYWrYrpMb^Gb&d2>fHdBN8$6mM}
zV2%sjy!<!u>9DK(rs(>shxk_x%&2}g$&C)Q4x9e|fWKuC3^azl^bD7qxf(9Wk&#jN
z@bC}<yk!<0id2~ti37%NM_Ox^WojwwI5#%&ew-{ug;(dfEIiDlS9N4jjtZb*$joXM
z$GEert}gQ_Ydz=kbgb=kH$GIIptW>NX;xU~%;$XjsYFe!NE-h_F*nA=kOx-$Puc=W
zlF@s2@l#S$H^53u)+BJ`#4cFcu(A>E91Qy@sg@{xw|A)JsiBLI;MnrL?rx`0BE3Sd
zVr^t?K_%MPJ6_SW7|*yK`SqVuip^Z(XHZOa>N-E!H*u2o%2e#^h^cD6Shw*-sM*PL
za+d4P=_Wk<fe4LIbZj}Gz`~FI;##&XM5a<>u>c(say593bxb&Qe!)mfR#*MGTovCW
z*83Wa_#Zucro4|XF+#MyPd`y&)>kb#@i1jR+>rLwy-wnewzh|fc(&*>)R3f80*g!?
zwB~d;NrF{YUbM5s(_Gg}#lWz=-5?8=Yq=Wlt7~>e=l)_9Le_6+k>F9QKtf50z>V`H
z5n9H()yGO|4(Z=Vny7MRr5FbKv}?3u-&-0E1Z}h)vF4c^e7uVt94xS6m$$JY5}P{%
zY$YV5s#as_<6Y9I4oOjA9|vi#4~L5}S%CX`XsCerZ83r@j@_!-BgxMTSvFGXQ+$c#
z(N!{)GUp#)*VtIUSk1dME~J_tJJ{4#slpX7vlU6rTU#01&GkmEsaAu`b}V;AERU6a
zJq8`B-!}3c{G@g!-Q!BaA%@dR*8xwfrsI855d;;L-V9Y|xy?>*W4uCgDrMJ~GT05T
zj-#xP@i~UoJoOcp^;;M}OUj^)yltmZr8V%#f!Joewb@~hGgE#$C#Gw<vQ#lwR_V(z
z!~U6i`i@PEBwX49vXq=SY4VR-)_W-(U*f-DzR?}4`_VHea50NgW~Uhc)tyVmP+;sX
z?;VHNuV4SJPrdk*@TQ}kp1D^RD8u*B0?w~_PgJgFO3}oqj}}^*xg6Fq7zzkLH;Z6j
z-{df`VWCb=U1@2l!BYu{Z&J<malF_lB9G{jEz2s^Z+1=AR;Z}NfLtgsPoYr4rwH78
zd&Equg8_b3C+M`zT~(xSMIVKwBvXMJJTp5L|6{!L6U$n+w`Jx0FJ^?yK&4ZJvJUxf
z4~voE>*cH;I_$?^!+Jl4Hv27ExMqaL>^2eQ-1gS58=PfNtOMg`)L(RSXh=~(Si?9L
z!xBZjs7UOY3g>F07*TUbsJcX_%E<!}nWIzR3A;Jxj~|)sj}?gG(w9-wk%Q$GW_7t;
zoUKB>)11YwoK(mxtUQfJGOrQ*eUs2)<C?o(POz+Cw#ljvvvN;ciZb3^yyjWvXgphx
zdAC^z75-Ubb~s)>Wo)K3;8yFCH<Nl%pzkz*cI@b--Ls?l_WfsUQBlIVV*UiFWMCMM
z4HpHxdl&5Gh0Mni>(kmMii)~J9IH01O&+UKrn|%9D=aBFkt7>o#&ev8LVzC$+O)vV
z!7z_Fsm|Ou$uS$@Y(pHK>qpd_+02K9GnNsK6xvkNEri75)=Hun#JRXBE;|!1fB{EJ
z>$#$(3;3GAQGoG+W>f)qo-*mX$-|{;#B)hr&xTLG){efRZqEu&KuCQ{?vQqweOvba
zbE1*MNV%QmTT5uZbTdAFeR7f8d6q)=_=gLZp6hp?%z8gG3?A#(_prileLOSMXzXQ%
zQ-Mv5VLQj?PuAeQ=Cr#kiP*VE&%(xLu0~0}78{;>+A~~4k2O46vc1Ihl%CSp2N$L6
zk)*Q;tEy~YQW6JNWRyyw)d3oMwPF<u8uslQ&|3y@`QBEAFy0xDhG=%@0>`-~A&d>$
z$L-{a-Y?GAcq&8h*jigg^4PUR^KSha0Mhb)24f1w$-%%*^@1d@^VxDfht7UztER3v
zSmZKo6pD(9!qQ4el_YsU=E)x%8&>8z(^-&;aTEFQtjcMnTWdxzAU3L_>#5c9b2IcB
z6`m=rhvVu_Zq=*MRMh2S91yweCo?JW&upY<XwJ`5Cw$Wq`J;lvt&e(_3j4oVrD6m{
zKW+P6$4N<f4z_B!3hnQ(%t`8dN7AtxtoL?nGzylQe~evy@rrnOcXyXsGWz6fM3*e#
zxjK)vwdK;N+u?d_4JIu(-*LRxR#%BKc)s2;r+$M&=PJmb<fr<Nn?VG-dKG~M>CY+*
zB!Y}!@(=tkd?z~Ek{TsuELT(z5@dKMW0l_;4L<p_w?Dr7?RDOlu&^-TQUH)9@li1s
z@6WI%)rSsglN1?ZU8(VOZ{N9X)KjN5{LzN;JvRBv8Grv!*{1#UiogCC((*w@7iRTY
zYinyD@tNva_TTHWU#VPv1pD&ku^Gt!{MMh}y2W6h|MQzc%71Rn8yAVpNO$T6*bWv8
zevag&239ARk6tyBlBRmxDd~?s9v!xryIzb`d-9wif)00E#L!bsBOTsA>c4vBVXYOX
zBOXr8^ZVUdhDIw<!`4g%M*|n_z3qpi%Vy|El{>7gtUjz?#1tGNl^7z@E1n@C4QRE}
z)LIdrxaO==)sEJ6oLsZvxPmlJ_qe#YJQ@i}3KcwrE@e(@Sv#Cb(*%8;+;u9XS|<UI
zcYNhYlcpag#Q$6Y_z!UpuiG=wEmg~U=PjGvsJwgKvt`-rDpI8)*w6ClO-ly)N<}fQ
zv~>lfT0&2E%*nD(s;Zcn?`5nvHU6G4te4q_V`}cB=d&Tw)1?3Szh`+5PJYdk*sme1
zyoMx@p7&*JkNDcX_U*ZP<zl(M3eJU8DGd(I`Af3)+fQpm{+V=pobPFWm(_C?INhI7
zevSOkxn~<-`G96js7g<djujRWp{Mr^hqix=?eEp3iS}LpFy^$2|4i@W@=O_v(E3D0
z@_G)NdwP0<kYD)OciYJS@H^*OJ3^&pt^7`|xYC7ps^(d1OuF#NviNxoZZ6%Mc&w2x
zvlradr(R>BPkcoGI6HIxkBfxl?&atg_mGwO$=-TzL0se=H2;AyjX!61w^QvC!w+k_
zdwlH0khA6^EZOxvjj85`JQJ>+nL6=Po%TLzjJDR+jCHL7HqgGENHM+Xiy*STkdT@*
z-N@m6(<DiqcqiI!V<fL-{6}Q{l*Us#e~1AilO7yxkzZi;bWhEQwo$lpFg&X$+*)G!
z)!NDqouRgqWp5lgAPS8-QZgetA?}5Qhoa5<m9!_a0RiG5I!;L9@n^ZZAE?6YY~@MI
zrgWK(c6xweZbK*iH8A-I*Z;I~HLaQYrH~l6i?-VU&zq*MPc3wAqx(rYIpc?~3O@Rw
zzQ48+ihFOLkm>Zmbj3GKM&+6IE`{!V_<kUP*nEMhx5B+n61FE#qPcB4hx@#-ab~!y
z$~$5&8XEUB+vb?bz}TMackNFnUX|_Bw^FOHUNe2uH{C@Xjd|yfb6e|_Ynb9MD8zF%
z?-u_XW3$4oYa{x?1sjKWeDcwK6wmhzCvleM6D=bto{u6s2CX+Hmz>T^zkYklLcaFm
zYmMT<`oKp3<fEcg3=EjEvrKkSx1qi#%T(q2u!$8*+iu}(r@Es6g8R19vC?Dg@vRCK
zX^r*OUP0x}{p`#Jfg2f)BSi<mURd0yDVA4IsNO>T>uGPMR4w015K3ieY}9KtB^(V$
zyODHJ8{8Un<3?FRkjJuW@cSRHp>D9+ajE@_Mc={taE{pEz<_?9l5x#MO6!;KD7gY_
zBauXpmvpLJC*a_+`>id{=OlN$dKE}brp|MgAszo*%EVxI_2{LiT8;>~w#OLvbCT-&
zIG7&OhgIgG{$1H$8FFzkqoR}piTQQ{C+^NQ{a($=Z~_JP$l$oBi0FZ@oYyuc_LqAL
zTy8RYzV{KPd7P8>$#tiu0YyOF>M3Lr)`(+OM@q`=&#(J+5OA6hc_ajf;tC<auokl`
zhK1Bm;oZACn3a$(bG#7PF;;#+!e=pPuIlC-y8y-*j>+szkt@(S83aOyVXrkF8_jky
zS68p{LjHiTUOqg>SYXg%^6~j5V~F@QqeV`27{`~Boy}vk+uz+iS^7)3!7YAE)W?qi
zp3Lg%EAjDyh!j0M=Caf2BOJu;gT?hzfi@41bv=FELYs}BbIU&)1P8ed1Oz-0k1HL<
zN~*jSgEY=I#;Ud&bN=2KcNNxce16!l7!}W%+@_d;f^Zz*7D&KVv^)-NZE_|KsUuRk
z+@|v3?_bl?2fntlu*f7O#%1uv@jAFS=w+)E7;b$Ib2xg|`j){jUQ5fcN^8e#&XEZ=
z=6O5?Utfz>vfH<x46@UQ{?KxDUH5(CBoq)?xqo6xLK1thdM;1pG)4X%#d8|M>}xlJ
zdiz+Un&$rAD|@T^;e!$ZG<xO}M)TgJq`cqTx|@}tuPQ(yq=O8yYwAUMeZ)0%y&pe9
zFP(Ij`HhQ{5@@PnbAUU}(@3Ro>i<FTUP->iqvnOoic2pipx@_Yl5YG&NlcuF7{}&-
z5NSM3Py%1qz@T|9|FBdTo-XU2?!zu&a@m(2@sZGtMHGQj=AY2RY8?4DbbOA(p9XOz
z9Nl7UmLHfH8C8Y6OD-?CY1WN&T(-5NBd%s~7)=J;hKPvlb=UwdkLNZ4XtzAye~z!d
zXl?!#>Vs?PASh@wP~~KMX7uJwY7DK4(kE)%(6kEJaV`%j^%+erX*D$^_*r2{FT9%B
z{Pz!)bDL-n|NQ#zt@^*)QUCYB?v?+)zRu{@tyq<!qr;tz{xOR`6XiZ1I8dsc)adeh
zv@XF&#98g<fM3(V81df;P0Iz83i<;K%)brr?{M5Fv7A}P&l7$SersUt-sQg-REj7I
zB)I4P*^dXB-Qkw|`9Ro$2<?yr!N><>Iq12nUGL~sITz-)J+7Gpj|ek3IoWi<%muJ3
z*^rryBTd>cpUlC&f`e{_PSfPx?O%)En=m$7b(n49|L)7~^NF<a4~bY!K9`l*xL>fz
z(0B#Kb!tQTt|8E+UNS^X)Yx^j*BMQI+LGTXF<9y!9NT%(y|$T(k!`BVd|zqm?~<JC
zFr2-mC4P+TH8^OS8h94gAn6z2dfYQDFOjXnqHJ;}#cN~O1H}{S`QNr5VmNSDEi~!n
z`=({d#e60@p_r{Mm;8&VKHurpxsre`8SfLy!arvjS(vEio!Zv_8kz&r;-Zj!7XFF&
zmUP1XKup9xFaVv9+xc^$OjJ0L-Pv*^_+#agfBn1XRz2`7N^<-N6(aPzI35W<2K%x7
z5Mp?K+3CscwNslu!jEwmw|C`}At~&%a;z-NlDQSK!1=Tk6#LRo{sCrK?}_7KhU4Db
zVv*r=-1oOXu5E3UctkHL<^x3V#X%Q$#R%Tv(?VO~%03w!1lc<=g;$91@M4vbnBsMf
z9%)HPud5}{WYWkV4FA3327*zR#1V86fo*g7FY2jOREjrwoP=Q;1NObszI%~)+l!af
z!pV1s7-A_Bp{d(r*JJmGGX+OWkMW$EH(#A02L}40h>Hd){^u87nyF>8YtPsI0DZRu
z7|e8M<UR#O&|X2Rt;oPSc=7uL>1)Df%0Hfu9?Jj0Ll<67_~$y7`>Q<^b9p`5#X3+?
zQ4`7Hf0xeFg~(@sC%)<R;E!W%P+h7P>np1l&t1&;h*=C`#kLBec-NQEK_hqF_DU_`
zC2EKC^{96~a&b|4d-rkaaX9$ToQ~mY>MX=Abm}joIYn;!F<Y|m@ASU3Vu{1utREP=
zZBO~XqC18LOhZ|t+h--B$ujBh61G}%-Be2EQG<n>^$H-Aap)Klg-|8<4ONNR=nD$W
z58UYGGj^UnfHW{>XLS#8^!7|atx*i0of;WlMui*FCN@|tBmMDSr^TB$H496`WXP~|
zd~Xa-e}0_DB&znAo?%M#`m^_Sp`6QrL|W{%mvW}4@t~r2g=XqEPDNVSh?hCyar5{!
z4%|k{^}riyP86V)RmG5vM#r<&u$gu4xlqe<?;0GGZBQYKi_Cdv<DyN!haIjHhGL0g
zrOiCO(X4y7XkN?UJDQlPGS|`5V!{Nm773Rx5nB|DJgi)67G>Y0#$w&QpkO*&_-CJ9
zCk9$6)KWi)X!8+fh)7PRdd6ASfbcFWvW@U*So_U&W4y+6V-m!Eg%QL&6|g&NRKBh2
z@7L}WiWd;zhHs%FLswkb7*o~FZ-uzHNiwGFB7S0Ej1S5FHUuC=A)&Jf<a5~-h8s@`
z%e>Uot<+x<%8mw(5LGo2CsxWSQPI*w;QEQ?H&70@{#02p`K=k_!*qq<=dX;|$ZYRO
zQz6-v{fsZ!PZ=LhwG40fCaU<cE|$D-(az?`trSzDYQO8ZO_BK9(xP7bnR*hQ;JjHQ
zUbcAFXz>c~27pvbp}`SHtQ<TP96Y#5!MQDgrhGO_gZhVQzKwz@!NCcNjIs2zv`{ux
zVD}ap4qDk7uDKnQ`>9sco|F(1secZc@u7LT8JKV4sA4H05gu8V%>2OL&sUDu?Y{kl
zdGltT2|F;RFYmk5z00e`K|Kt9;j|K|Jk%Us&o;FfWnrHpHjjFtDj(`A(r`m}`jpwC
zI*lST&c@QF<0*IF@kN6&ReOlfHf7?e{$8a@zsg-QF?$TT*oWz-=$=V$_|fhJ=A^&#
z<-rOILqRD>lu69N)e*qc6H*irC6sd;m_QB#or@-wjq6%kQQw*9*^VD!<^3WeN9A~l
zs)#3Ba2q3mD4@`Cb*bC-3-b+_0S|CgZR!sO?`T?~W}aUY^e5&!i{}}|nNIW$_ySd4
zCMIhbq`&qCmhTV{h*gB6S1$zN1XsCaJ|u5cRZ=oEG{gz6K~7SMZGHMFHB(dWOYZtP
z$b3K$%z8yjtNc6DS-`+>Y0c9W{Gw{%q$Yu_HD1;zydhzsp%{SgyC1J0cMQk{j)Z;O
z@!OexLrP5B?u&<)QY8|t*<|iv$DdsI_g>Ai4NUm-2s?YryQ$?s^AW1V7!y~i$+bKj
zJ#63$<)^2YRV7&oI_Aqgf|kfO*49s03fkL+$rHiv<8|47y%9G-p*{6ppv^d4R!A}7
zL9o=<_0B7`qF`O@4_Mb3JE<<Xig>Z8s>i$|GM?!iBu-|Z7i49ob1D|dscpIjja20l
za1snJZhZfC_p{|I3y1V=%~xgLN-GP~D&?d!RMbFjl7W_ij*ga*o&l$dFG&LsAU&7E
zmf)8aGumXUYpO@P#4+KYzx@u2i|b9@_|&{fjljK!GmzO;Tezz;$AIh+9QBz33l%C@
z6Y_jB*l*rkxcTCoS$S?U;f;1;eR6M!t}QE4WpgI-2S^J>mJPTW>Er==HZaDBWWPp$
ztHr)nAb2>f8L&)R!zM8>nJuRF%SU;zLn}v*WvH~L*|GEUYs0O=!d=#9jwbZ#an*OC
zlbWUoSPMN9r`w%f5fURamHyq8{?yC7T8zP;W8MxQ=p2x^q;?z%%gVBl0TZU>TC4i2
z+j;eZ5>IVs&B;FAa^u$S|LM0NNn@v8<*c{e|BOHQYhu>p$@LD%?d7PS;bYCs>AG#r
zsX$1un6??xbdXtLg|un;Pugj~sT-o#`~C|Bjd#C2NSyspdhNuPW`P8WH7d{dE+2V9
zPeZmz49fOV07K4?{@G120(GM0T5T(T`Z2T)waBbSZsTvq)A5<ci5)DN3s<>2s1>sE
zxl_D-<ts!CmB}T9>80c2JOkqdh-Dcl-^Vo4hi*Uei$bczHxVbM4<u1lm6R2glvPy>
zNy<%c=<9wx7#ID6mC1%R-=t%T;1SL?bDd=$=|YNk3PRni+k()7)VaZFf-Z{vjjN1|
z+H3dtav)I$Y>JS70HiyP$K~nbxvBg|kEFI;Wz-L3Kk9-MS4YZ}X=tSFZcdPaRh9G)
zx`R?VR^&tqxAx`Db2&Rdr2Zrsm8cNB&mn_4T?A}qSK>0p_n5W?+TP&l2=Q?V<Q5lW
zrl|3=P-kO`(*4}c*IG7u$}RhnMW0-hgWPX0n^VH1585+N6wBBtA|YisCA)uW>g(u8
zKW~#xkRsy!Zv6YFvLEk}(SkW2R0j>DW=Pf?Hnxr^l&Pz!9kT8wY*(cjeKV3#RyH&;
znvPXfgg)jg&3rQ+0vH}=ZxS_2^}HqmM78sTt75O(GY(i?iMuC`oq3|1MCI0|MtnD)
z)xoAReLHy}fw%3=pw%Fe;2M&KdOA(6TxgRdij-?VOTH{zBa%_iPrp{0S<5?jQaqAG
z7iS)*$E_dwlCBO{CCBMvtd3$~;qfD~M+@UwZ8~R!4y^JA*cTFvLJEtDRLcru+25S6
z^SQN5>-R@NAd{Y%s%dBH>}sWEhYo09NvK59#L-r7NjsZC0_q&WqvYxLr@N_3)6q6!
z&A4GY16B_0dKJi2?!c{(9T@vCgkBJjG%g@cgsG?VEnMUhu9bBKey<6FQaV^t^rK%^
zmTI%^b`TzYg~OO#?bl#^31Y~MFZE>Bq$=7G$C&}wfN~<FH92#naPL01wSQdP3pJBj
zfe9SQ(U=s^!+IVqTze4g10;dlD3#&}(=o2S#o?~rR;q^#%j>Z#&=odZf&H4dzwLLs
z&eqOb=#_-WPtykXL&L&6`CN3&%$~h%UUYGCB_~rXvE{A0sjM{evq3<k+CHN+?QKKG
z9x}35!2-i83IEZfCP8*ptJyCt*`v0Yx3518@>oAqPq-(Rl{=g<<lJy&a&DQ#a&}v+
z$VM#MXzp{y-PUiqdzvpVo#M%XDw*d>HqY=W(+j5;_A*09(E}M^g_<LZz~A-~Y&>me
zC7ZUi0mdB1*{+RY`p>@1id4me0{y^SAN`Qg@!4$a{NH#VC@BvE^l%2*^mN+W;0o+*
z<J+IF_T<gzH_wLEn4Um;IP=qQ${@B4>FF7&c5chJih_<J75i~&3_(8dJsn-bAhc+%
z%5@VJb){T2>@zOp^E`aS#M&FhV{A^FCnE9F;d?v3l)XI}Bpu8>v4rTHBlqM{s=w{-
zYE*2P!&cpGSy{hlq%L@O!JA>M7&J02MnM|a6X&h-ddLOWDwRY<_>h&Y=&hw~Tgy}`
zMMK-%wqQTgn?e3LL0#Rs0a1O+{G*f<ykzV=OZxzy%8K2}89Pc!+CZPqINsfk5qekw
z+l&2_WZV>-%d}Wy6;81}K;Ae&k6WoeOUx>ilae`o&^?i9b?{~JZ5clmEifIXCu_M{
zQSMrL%Bd);Jo5GPg;KP%3J00=(E2HC=>>)=vO0cfC+o8~K1K-lI5JXI!6{tE#s>hY
zn3%^bR&Dogd|*@k8@_Dnv5G%8&@wDI47rOzdfj@ZhkCUoX+^P%BM}==PkGu5la=Kq
z)awncYx%u0ky$dDUG7bN5X_~iAV8P5K|A}*HTn_dCI91myvU|`(?UWbNBPtrN9bVt
z$Plsu_c@(^V-TKW`hI}+H@6++PC}(A*`w7}9z7)E;c*F)P%qzGOd8SE(UGBlP*`Hl
zrt{Mt6_t*j-jr;6=yhe<NL04bXS%=0z^05i4rY0g**#)n*Yj2BgMH8e@n&Us;7ptF
z^+WxD!=M?SUyIJ|>y%`{Uq{456TX)w@*j6x;L+jA*S`W0@H68DMlq^P;{)ELCdrdG
zqmIE+Z%>=~nu1RIdVe_V#{|{K^M;EgGjckLdMmWbYl&QMaOGgsEVC{TOaYK*Zz<%a
z)4?ef7HDXxXb5#iWjhk5qW=jnzETBHr6)h&>+0-G$aZStJ@ZxwkEls0=Dk(DFvB7h
zUH>o<(skZEF2HXmIDT4c%7yWg9ES|RMZ@Fv8#3vvWUE`>v2c8ZRaKpOXE9>cM>g%t
z!FUwp=ZAs*(l>}J{e5_2P7GmfBVZGsv%JxR+O+jsrQ~3VrTL=MhRpH)?8JCI^eT$+
zA&OPg>r&r-EE{$h^5gZl6pB|r`SJX84NmJKqK8KQ&<2p)Ig$(oZ@tkb8!23Qs&{Ig
zC)Hgyo+qvv)a=tuWxi5>^PuoqjHjO>P(QG=9s)^%nv9okZMVgPv{OAXRsRzvsm;PZ
z8yTm|cJ24z8O7{jIfX~)cN{S95xzqB-nKxEa87O+Z10#N<vHcR0*9W*tj>RlWx)@@
zKVj7rY8<YR?3^WiL{j%g=v+d?2VBw9-~T<+)7l<+S~zSK@qx#|da*VhR!=0iO`sG-
z8Vwz4sgqS>mZ!0zTS^8yhc|R@{AS29Ps+Ke-=XjqsjI~Q>jazwLFneeMP%q<{7_K|
z2q~*Pf-+?J9OiPfj(f}N<dvEKB@CT7R8%%%Vtd9NB6tr1&@@4{-tQGM<m(=}_Lup}
z#W2BJp8W43%XEv}nV3(9e|-h_{OdQRG2*|u8TSz|e20fqXFYFH1MxYs2dgXrZ1lug
zUVrdsnIQGAhh43!u*>n}MrUOy$*?h(P)JcCld-$`chp~PbIa5Gg(+}-wKemw|9-@N
zCu+Xv5|D#qv-8FOHXrnV6TSL4U@iZoo&K>e4K<gaaKgIlmC8qDS^R2sivQ4QG?J)p
z-BKU>eS$$`W~f`Qo#&gDFVos3R^z(otY-49-05$GkHokO7;iY9{^|#OV(v;39<<F0
zn`dm4!9FS@Tt#Mmt`PRYba7fOO9?ncmY*D|C@GDIMY0by|I*oO4Vw7%Lh*E?>CEY(
zd0IcM;^6N*@xESO#%C+vJiN`KI>L3nGgN$Xa0)b8=(!F*R#y3B<Z%>@O}o2G=4M*>
z_*>t2<%@u+V$teNE-0}$IhCDj{^@fJG!a@EMne@{Q6_agWjfRdi3uiUKYe1*ym-Y!
zP-S$4=Z?!}qDhq_2J~z>*$EOCx9sN3(l}|Ws^EZ1L@c0S>Flt~Sq`u8E~>t78@P*t
zLa45$*p((nCTB+t10_iR7u-QmlP0#pzQ$#}J$}%&(faNMS#R&OfuThxh(~YT+`m}r
z=@}g^S`*ELU6V>8(q*G_Z)3>S;q8P3Rmec<ME7yY&)VA3+g;5Wcm2R;?~3ECH19IE
ziG4~1@t8_eWDoQ(a}g8q2@|0kueJEI*uFk9I1TNAgeYw5*_<vtZ50*#3>c+$qDN22
z>5s<8qFs*B0x$QKN5sTq`P=#3pI(!-w$WA1I(_!>_ZQ<kI$bHs<ddIY8gTmLnLGf=
zqTMyVN|&3Gad8?tN{f5O3#uhcOtz=iWFy}l4swX2!TD1k8#&q~(a|!*0gZv9>GbJD
zelnFJJz0d3Pf>PkLPFj}><W}v$5!lGzkR!3;Xu22zQ#E+SmYExm_3T)frf_W_YqZ+
zWQ-aUS2B_}*F#93Y`M2XAC^IYzqmIV;mYi6cx<di(}t0l^;0bI=qG&C)NSKGUPafB
zRnMJ7u)B8*5<SziTq!0-Tz%0z^A(6R{^DXaYDeT)*%PHZz@Pvta|x8^@UcT^Q7|0k
z;T>qWFrHp0x4o$44x?i<${=uq1S%Yp^h1a4-6@_`8%H?uvg>12()2)cn_(Dp{+|dg
zuCHs?LT9hfg*MmKRo1=#t<af013Pn?I2T3@;l1oE6??m-JpF^g{QTaWvE%PbtFX0G
zHh7*Pqg}X+I+8Izc|yoxF}OwUrmy!6ToTSV^L1;gZc-$ae0&SPBkQ4iRy>2c)xrK;
zlJ|Kp2b0=%!}6CeK8bawoKgC(O->g!2nG0mfY<095c76+a-IC99jfP5Pc>KYYwp~c
zk8z0Sam0PQzpLfstpFsOV_3vcLWY=~A6#FJtOt_jp5b$$uAE`z$a{=2Ol(D8c6#)s
zu_U**^A#C1zeA!wtnHp$G!>`bDJ#3^P8TsD;H1HCQo<v`cy8_I7NwidrvAk@$6p1+
zFdG>eb!z8lWSeR0>Kbbq%Cb?C^Mo~MM}PTJQ&>kl>e@Q3k50;F(P5_wYaAXyVFcFH
zLjZ)Zu@r@d+WX0X%aZen&gUUE%5};HxKru)%{J@3bYzbyco{^<uqG;;UP?~Xw*QtX
zqhp}@?6bXN^-&b%Gxm&6+PBg)*qmEii`R>F_4Rx{TqOhOr6fN;y|^UIFItUZr^4dZ
zV{AcCm_U56ULTPyTiKd<F3)<{i+ug&`0dRaWd)U}xbT>ekYpoUaUizd#Mod-#ke=S
zkeos>UTsrm6%n^*_;+W0E+0VhP^VvPd$~6R*LuBuYFQbdF;@bHS3c#m;+0$GDSvT=
zyfHBTyen=kh!olNxM3M`w2s!RM8s!u2~s-xx@y(-MpM*u{sA4>(}_VuBj7Bhs|3Zx
zRYOW}%yCyb`TigJihKuoZm9flj?UnT;d5o(WaNTl{JtR;T)#NJDiFQOJLPz!kaJyD
zHv7)^|K?ZOPbtqVEkC(WfyKv__O(=a;_Gqi^CI>?96~7G7i>g>mV=gM?Y+I6EG*f9
zCJKYaVfn3<l`#<t&2!7b6xw91E%P^TjFWI_QDNP_-r(tZWJ^yxTD(_kb&|on(ARxa
z@+Ik88*3r|FWnUzlWq4T6|++jQmb}5+hL-qnvOqHWXNcGd*{=5Elbs2ypkpdV{Lmm
z3;XLw;$(OXN`;kyF~HwQcpy%1I!DLzR4ulV80*hd7gZ*h%bYQ(pW<Y<wii!PRymSn
zre1!u$<nK#qA2Q=I!EUwmm_3kKGB-GF<BT&F_!}k#bDN=l~o!V5tz~-0;}Jy(%d&d
z7v>}E@i3yrSNKKO&1n+kqmqM7W;QlzG9l^+@H#5jS?-e(b`19KE-s2Az=2=;&ErA1
zcNOiw;3zExvMQq$9N&6Brar^~9bicW5VOY5kU=cH=AV34?MdoZ0m|8iS~R=Wi?^TL
z^aL}Q=hoMZ<yi{9TWv1?eq$cXXf6e^WTmT4`A$LAeR|H{($n#=@Enh4ugv9iH~qLc
z(Nk-lc|Nz>78?2i%uBUKf$xvkkgR-^nyR<O^7wH!hsk)=QtALax(gDdBpepuWu73a
zeLCltN-&ZOTNZS51efw@Me(p=P$NM3HFoC2oF>21@?;B+@F4(c?wI13cGmc}AWI~I
zth2Kflob{r#eVJDsa&LFJm*uL!_tfFbLFzuMUUEwfa<_M_omzA$>Z!;0(JZC!ZOJ5
zknmJeQ$9-=$q7gA3`y;LCE>$kySt%iG95wZ_S9})*u?rL-QcwiqW?m~;h=g7et|vV
zzbL-_blF^%^Ro#(Gbs$G_6^{eCMMNE`(UNV;ijlgC4*}`RppoNf$W=ikzUNK%u{cz
zLszW+m4I|icK=>kx%+F12k4d8ZU(^3?D!8yWTL=nMRY>wLWU%^Tr7@rp>>XhQ6=Xe
zSBoI~_P7}4JshliI4^!eLkR_%*=NJb2yvVmPhNBs7ou<TEZ4hfki8n?8C47P28=Za
z{}{TjJyDzTHXm2B{1tO=Jg?$Cn~sj=a3-(g?;rcb@u6)Xl6CH7G~WJWDmpgGt<3~=
zAh^o2e20C;>vEs*t)J5Qma0+V$V*8pQPwt`3^lf-+tzyu44P7=o>QFn?-O*XZhFSW
zO(mRh0cdBew>Vy)IciIyFi8Iq1r-}xJ4b_)JWN3>ia9k&KO$o|ko0I_E9r!hhsduX
z>gdOGIJ(4-cXo^#Pqz|HxZ~FKMTeLovx+91Q^X9l7MPs-DMV2-q22TM)F6f!u9U{M
zOSg72iuD*A&`tI?S*ORTp7G9mz0Tx<lJk}}=fedq2RZbd+~dtXA(^`0^YbYaYi!NV
zm%K0LbatBjV>86eSH>-RLoqOje+e+!^ND1OiPPh`Z4VT+>HGQZXohM*&+d}5oYTXx
zk26B&W&^F+5S+EDL)fU6XFdKgc}F2zi3ZCLvQ?UnPsQoij{L&?e!izpz*vcM;B{Or
zJh@VG*I(ZOG;u-=t#)?uOH7W}SC{IEIUSrFZQRs{P+<JeU83H8z?`faNK$l@%w6Z?
z9`pJBNwk_exfg|OdCX2&e}hB}kB*jizrW=S7+na~*WI_eI(hD*cwVe!vaLK}DIs9j
zb_UY|v2zV!L}F5$#20QZKE~0FdELtzi;IJfM$#Hp3B*h9AoIRrfV<Jl-Kc3c*|BWa
z#+zDN1Rxh?y?uT@ItSp#Kn58ZgQEU%mS_3#aSGLZLeTqA<5Pm@FX;H3ojomKU6M5p
z^&GShi;Y6SqtJLn3pzaHiM8&dJTAy`##Tl~+D1lXSWhA!-=NJuTtXmzE)G_0<itid
zkUhkDa-RT2pi1yo#op?Q)6`Eer_h5-+8FuW*KgmMYQ$tzG&CMzhST7FZ1=|nSFQ~U
z<ztuw01_fy!q8C2VQETDeN;~`C633&9&kO7trr-E0CQn^GwuWO!RAt`m^2M8Pyi8v
z+z(}N@#c#Rhkm4ZjzMWm?$XUm_SAEACjMKS*l`+T@Jz<@Sm`wF-yveK1HT@jqi1Gl
zqFp|75Pxy{CL}M?0YD0$G^-&ED7oOYT+HPw&gNiZ&QX>JL>O$0>*0DERN*vA#=JsE
z#&esD7AIMnpP*~Jy4@pV*zjwM<yX||MDdyZ^e?{gF~{=qB3V5H!-+@iRN8CHT|oUb
zRuDjt3yOoD{>W+Ha(0dLQ1u)AYcI+Fx;&H=KTS>z2f$0Gk~o+0PE{=e4FkhgAoigJ
z`0rR27_+NNPQ0$4ALBc(tpC*v)f_IM&Gf72jjV*Nhax+l-SH;ua5g$LjEp>%Zx6gl
zUCOm~)(0lc0{sHS#2}be<#0|Si+{9Zz1G9AIlgvG#IU-QRFJBXKlmg%`xykQGeQ@@
zTS>4dVHFhokU`=NJy$?Ij0)z^{Q&(czk9^ydM_|;!a~25g4<Y-iUGk%a(Z%XbcoIJ
zp=$!%&j*aO4+nq#^!MTB<^;co9PGsdnrgSMTs`?qNYNKPmxj^llm@P@P0zTo0dYS%
z3aWfCgMn5I4_DrB)H*S@OBd<AP+V{<d2a0<ET5X>Yg@`V>mbrBY4Y{t5#Xg06W^6U
z0G9K4n*Z9%5CsM^D3g3~U@l5Ay_lA|WcZ4h(|%w?9QI3%s+(Z6s^=MAyxM|?)^)5>
zfhr=1gd;m{p<^Va0g9`_?qu@8x}RSah;Wf~E1CCmJ0BTOi4}tFI8*Pfjd7C>a~OFd
z$e>xIbg8}89Y{<VvRmBT!XW+4$neNs+6$_t@CoqwZk3OAM_q<5<F1!g5ZL98$M4;!
z>B7UpTXn*Y9g($t?EyZ?GF=5$sIM^o`Idb-zm_kvezs(m&C*DPC<m!53o4$U00L4?
zWGEO;049pQ?Iu>`@^-m6&B--y*3KJrtr3@hM9-G47h9wN_F%ksoR*5Sy}w@#zo^)F
z=tt{_Ei8?U_W;PU5$fqLJT+}}p4g$bw9<IG7}3xLyZG|X+(aC&#dluO=KBPZ<;7;X
z>B-44TB?$;&&<wlh85@ldtXef!|8ArRGMXU7Y7SK?{+Qf2DE}zQ?2m!y1sK{xW@-d
zv)M@@ZQ<e*)if_7a;lv6NJ{mGa$BEXa-$}BJb)HS`Qbe_x}s1S>}g-b!k<eq+yDCV
z@#9B6*HI~@PaFo#2BxMASiT5;b#)ir&M3*OrA=$^03x^78-cUm?9&Ui&l+P}cfWTF
zUGwt)>?3e{OPX0ZSxQMw`XLbF{8p5%&k4xK@>%IjHEDt=<09wT+kD4IsjVe#AuVEA
z7dXM*-}B;NKUOd(-gWucIUq+-P7d7a!NO_3^$LbjJoy=Nhp?Hkw1UX%NH}&)hKQv5
zvp#EUYnz!*EZ6dJ8R6mH`dD*rB>fU&Vf+U$e3w(jE97Vi*+Ho3O^9XOGHfbiBZU_(
zE60`G?Uxm7?guz2{#Pr1dQ3X;@?I-?Mnp!y>FoTg4;lz26QBv2nJH+!Ai)B-lh(@1
zi+2$~b>`Ge<58nM8eEEqwh-($VDha{>E^zWU^O%e;o}or`jERVFUdZOB*QQv9r+vq
zN>?FNZi}nEDRJ@v(M&6?$t=bS^utwF1<c=G`S=Y^EfpIsyg&#xrjXLBHJ)*l$}jhs
zLt)~K-C16`3hPtDZSNejbp)$v<0%yMVLrK!CRp>194siufS+LI@*K-|$%_O8F3EnH
z0P0QMh`l>#6*e1Cvwg~~x^X4pA@p&ZRie|6U<YkGN^P|=Yn3v~rOQW3<ATpusZx8X
z^5+L7vPKBpB9)a)&*r!g9<UlVN$PJsd~U;{M=xh;KD@j3Z{WK`F4v)X`qR4M<bafv
zL7odjav^aMiH}a0_KKR47dyHWmQR0+R;Omj(_x`*OjHz|W^Mp&R7N(0|K<C8F8Tb=
zl%G6$l;z>AXsz>wc>$16uK=PNpnvAeSQs>Wl>TaVQ~>?>!yhq0zL3<{*VX-fP_wtF
zRm<mQ3a;iU<YQ*%H#f$sse*kn6$S>YLV|-^7TT)ilTF4d1G^;cY>lI%Bktl5+n)X!
z2kJxaM5*k{m*nj1)6G9TT216N(b9+#xgDG*peW5IUX^i!1j1Drv#z*`4?g@PH;B3N
zQ<GoP0nbq=0%dzgf@qA(rcsCpU6Cr}#(2fvgI}7Fmz}tP{%=~7m3fiO%EYR1v?rMn
z^as3YpV+JyVX+duH)Q)5Z$|*<#jr_ufiWSOOvhN5PeX<x?xj0f$?@-*D-)BtOcUy`
zY~r1Zj}J`wL@2b8J*E~HnIX+(T&<A^<PoIj<ZRQtzkaW~AZ;#RR%r1gWM<}OXLso2
z`9L4d?`%cON8kU{9I~ojnzcA+ICZ<yO}~d)^S0+zV&XWZ$0H{Pwl*A>?hMj6(6+9O
zlR`;Sjm6q&=FqjvH#@GwlX3YA(!VX(k_+K^3G5OeS^2=O^@l$I@_?7eCbl>xrjY^D
z$({QnsS`|8A+Hc%^h(Usb}JmxUxio3|7SW<68Fz1YEM#bU#*);qEb;U`E_z&9%)F6
z&@tAZ$h}}<P+X`hdvhn-sPnXom{@)APgP%`ML^`%k3{bu=a8kzJt+JKpgqyp!{;|%
z!PAJX*f?1TD*bXR4?z*`170np?1q!0K~>qtBLncR$L-l<<orCG4jlO`1Y*Em<*=Im
zGZ3V4n_NzQgN?<QPnhIbsF_qK*Bg9&^8zI<@ru3Nj3oUb*y|b_5xay;+>7UHQTS^A
z9)IeCEREwany`q!@mR6PyLVHoWul*PW^B*%dU{(y&!q=_zf*Y_A3W!mq&L$~OzH_K
zLt5^m-SJGkox%XqU#W%W<t3&t+$~dj04fYsM$ZilbwffLawFq9x=a>tX@Tn^gmEGN
zDW1c18m_<vcJO8B_)%biqfgAYZKo$_1Rx8G9>eeIy_<6kH>nrg_Dx{ldulhoIZa7t
zu5lnQfe&16RzC8*!>Jn6HKNCl2?p;2X+xw<`EjwFO3u0$%n0j!zlLxTIsz4x170M9
zG{snEBQ34iXjReYU!p^Fwanx%9MRAMK%(b`D+w0FOxwH53iL1kBV9y+y#+4O?(UuT
zcKWaivx#yQH94sQ2~V|$VG7~lBGcMr>*LkO$X$;r?>_oACx-X8V!^<_vBBo=Wdmm!
z?pZeZhiA{6cf9;D9UW~-Otoq*37<l)dgV|{A<we7wB%&H+?y>#D*rJ!_?4Li9u}>}
z_n4(igMv<aQ18WuAe({;Fn$uPR)ZZfdd9w~sYn?J2&tbaXUQa#CM3TFAl?h&x^CcS
zxoVi{>8W(617--?$B@bM;zr4mlm{GjB;U}~R>5m~2FO(q)k8yNX<ZsDT&Uo1p6gvY
z=8&YoCF0xe0@Sk5`fVJ~!VHupZoU7hmz<dBFIq}_6{(i%Rl);90grp?O@Hb^wqyl?
zb}twhWqrChQM4{kgG(*BO3DVr;&)S`nfZnJ0I|vlcpz|bh<jQxod&ouJWfZQ?4czV
zPB84^u%e7|MH8e<U7sHG*{<>U3X|cr&Y_Ss5_0E#b+s(Z%93jz=#jO13HOn}D>F%v
z3X5$ztn<&rvblcft`KG9<$EdWH#51ooya{r?3~-l1JpE4J9!`n2nc!0i~IUJGwb~>
zgp$OCS)Bk9t}vgg*G@ZQdAZG|A6ucWgoYjh3^Sl2PsL}t|C>@vl7tx2C6i~PkT?Cp
zYgG;P(>!)rSdx166%u3&Q<gT$CLJPbE->>#5T1g&<csJooxU882h(Mcuh{#eMYplt
zQ;j&5b6fc5^x4U|u!O&?9miCxj)`_dm#}?<2s|QIZQ%l*!^<Gn1jRM?36y7bDCsi9
z9F1r$S$^jPq);zvCXS8STXP_g@Evm^3?_cmA5fP8me%>y%45Ilmvv%}+LvhlD}nVj
zt`;3ju!kNYnU-6U?ux+KM!DfBE*--E_)$+Ei(VevmJxW-_FPMgiv_<_9G)%ZGP5h)
z0J|&2n0q{O`>v_!`gYg^PEX65lm0PU_hnoZ2UiW`2>q}1EU%gF=ZhHXCKm!5eOdDd
z7*kespkZp~DL-ZpX;7fS)z#JZP5X9x<#IhNC()+*6Wk{Ve*e)gT1WWi*OnB2h2(@E
z{r$az{j=YPRUWfPx0vK_ATDnwf+|E_gzj7K_Q#LCAGdo2vuIT$FRBg<p?1i|ju>g2
zO#Eo*tpyhU3;R*pp&14`)6Gm*Fp}fam$OX_Mce#;&7FPf|2vH32BW%i`*KGF1vbj%
zMBeM|er;%E2qfG*xb|YIkm1ma%lz^(v<iKdJQsF(?Vw%CTvoZwM!Z;az)MdRlD?jE
ztycA0%Q*oFv$NU;ug6`KhBZ}an#!3S-l?Qq^o7^>ylX`<eQt4czi(>E*l>l(=aFt0
z_<GuT&l5gnUY1dHi$T!)7%#d-du4Ia!e+Nsv_aeARS4+~uz+cVvWi`c1I9h`Z&Nyy
zz8g2Cd}?|@-Xu}Bu|XZewyK)5Ph3eQarE|Q^KHmG?d{zGRB8FplnwT6(AhXTD!UAU
zcvk8Gqn#j6gwgx&_9rG@Ws8?HAXCf9k&^mFArI~yjw~UFRr@M|xG=PU0F413+~svL
zSUvhEWoqz_w6ru;Hcj9Bwzd6nGPbnrKp<4E_czf6T-rzTnf2h<NG(0H;NbAk&oR#t
zr~ZXoIQsJo3o1&=Lfm&8P8ZKbSKw*9O!{p9s!nTWf}}ZkKQ702sw~!=vm>EY7J{IR
zAY|mmj5W~C`u6kJaZzmE_R3xZWdm37#V&Fub6SL#msg}`tdx|TvU0*@{TEU{l(T*R
z6@{m;Up7o@d6bDhJvDw4X|Mkfi{CgJk42wR#K(`Ft>jbNEOp=pXv0w_9+uK5mK2vC
zBMW%mxP}Z}RMGFDXfj{?fV|U7>Ww$v7a&zYi7oA{7Wyb>Wr^kW?+=mC{sX!|0r5Gk
zZBEmr>PKB&Yf@54NC;g>Lma0|99T~G7vvxcr6jh$&{nfoV-?_|kUjh@*StG*;?p}1
zAw>ldmR?yOAArqx4*JH=yg@kb8RzuUcnvgOP(6@<ilO^Y96x7gtG{|B{mLS^oDqe)
zkAnOI8gl*bd|hd+Ks5$gJMYV7NEXr7Dk4CY!cL~OmD%rcc?UE>I{>ni5U9uTImsPK
zd#A2kazhg9;)#Bh$VR5+>QAnYPyzhCo&o6&O6;w|$enA~%u*?+(_Eox*1=+T!cOo@
zw^tO259=H65HQa}o_A%)rOdviHG0V9vOXKK4&Nu-r)tbqB`*PF`AiVm-{o;ro2Y%;
zaxW8SCJBTb1^uI9BBG0oo2W$Tq9u7xj+X}tAhP^#WEROW#p_XD^3sc>+#i6SIF8S+
zmEfCh<EkN;WL$e`j&iqhV}(V0Ovh5HV0y9e@uOX<t;JEfn(%A`;~6goYioUcREmt&
zM#|OsoyA;?M)THEAG^+PO5+SUm*`H14nz4EqQA@vgRiD-SQ-EQ=V{d;7cSf7-miF#
zf<l-uxzc8M6RnMbK7ckSCDr-T_{D>6tHEmneuSl`n9QSK;h*3h0XCMg#9wQiP~R6J
zub^EFs8Hq0N6B}Y9ViurYAhNqjXAR6=`Afw%hMvd1#dLclCvSwN=~~4{giml>L8za
zhQq`p{Sp9ByaVsM9ZfF*W#zaZVg~cE%_^Jvq2F~G7w%YZnj|muyKMi__~=MU_+j#M
z)>}lG(yxUqF)M2~d|%>8k5)>`e3Z&a*)wIt?m<rWORpd+OUsUF{g|ia5nYnT24|bL
zmqyEQ#YdoF*$lwj=k>xruM)?-P)<)vaND1R$KlT2$J|&c%$Ls^n_nB}#}5EHpmfKz
z=1xQ=d9V-Uy`xES?VVOXL?YzKXr4JZyE&`L$?ol+Mv|lQoo5&yjN>n*dt;o^Vxjud
zu#oTN#?}DXnlpCdPr|nrWV#Z){PwE`)Q+Lqlz_GWYH=S8iWnjyd<o_L`frVr_@+yf
z(9b9hYHfXK*x7rb!n{6+H@4(;dX)>^T%SvXvm`nJ^I&J^)|~t>7ro|DQh~85S$>K6
zT%X-r6%lMKo<FJ~Y2kR@K0ST<wO=15#ov|U)_kJe^JyTYN&Jfq6w|Y1hOds7J$v#n
z+{d1K3;<ST<zWC*?)F-ip>=80@Ua#>4ZGufb{h$)R+V2t8K8`@fBf7_zoe(<8T0fj
zerHy!WQvBfA}hbxDjck%u~Mi(Lm)r{#o~z;x<qGsy0495*uUp|B6gV$Ng^@}7DMi;
z5o?H9mu{5Jw4VMK>WA{_WfC5$6wQwf_e4iQar%FWGoNeo|E{CdG|XqSvN{A`JA0k(
zs<>Cj;A2Kc`9FLFf~0(zjN}GG1KL0J1(&g00G*-kfcAP_*T%_7WR!Afm`IK$7b7-`
zk56hQ$J=ficGZHf4|0WaUAf#QzQhh3>gGp%DlXoqj?X@K84ber{qp1WQ_k}C!`D4g
zxe;j<>YM!ks-xm4DP*MWl%>(wla~PVV@~3ckYN5gDnvfF=)T+^2iE8`RGOF1bRup-
zrSLnTa9j43hAg}?DU$I;?)6h25m!}JD<DhbBAN(PfPsM_=%JUd1X2JrzoJxf&j%Il
zqn|{I{l>Ziaw5r6&5`ZMjIHjMiYWbb^p8TKJ|7-vs`?5?*DIf`>0RQU$bEywbLBPF
zG<0;bc0(B;Lh#?>OPT5~BrsA~hYpSn@`CZSbo5nr2aT<{9Do-?ntZ&@Kx(P6Xa}Os
zfAKqz#!-Ndh1~;Lrj4VCP{r1t*umvoe_3Tnj6*tC9%9|TLAkvCmm!7JuQ+or>~HMn
zZbxwSuTSHymjR9x_*zi=;n$%TM99(E-R<K8jmRWoIcY;$`p43akB?X6p(zsyi=G%i
z|BR+KS~r^32h6W{+$3FnaI~!)@kvUO1S!VnXOI0xC*r=3iHS)><h<OU{?OwlUEj(6
zT7}7xrOg2tqe)Lrd+Wn#KSmInfdjfUj6m~kM?8=)M#I3^7|f2|p84R5Q(s>%Z&$10
zQs(TiG49eo_6DgI;FUXpfq|eJId54u(A%KBHQN#bDu2r~#$U}hn*xcU&#c|Xk+Fe+
z_5QZX_EM^A$r-REknfOi8%)-U6LPT2b3qS7Pt@x0aJ*Pf8<~S=*8tCY7yRxaU&zIj
zcY*KX@8N>R#>P93s;Ao+g@W*tq-Zpv`Z{wO{3BU(EsxelU6<EcpIdoj@w+dFGpf4I
zwcfR}JFt~6t*C&mynAhoHCYu|Ay#zIqPtBoH|ua4Byz*W<9VUcL=Yf37l$)J2`{~v
zBHK4NH!s`s_CTB1gS82_i}SNsE?Y;NeKIm)Vhwxy!+ki_SpMAU(GFsFKv5Gq(w<G#
z3xWQz-2B7DLDLZ;F4t3d<KWu5--q|mG8rq_H+>13{z7}NxfLgihL3kuRHBx7ftYLV
z10~SF{Zl$@QS=MXQY+L+mW=;_@aJSMF<jY7tb$x=E~H}%*nAhg@3{3BT*;16%{{TG
zfW)3n{B1TmT3U;@)^g)B85s`V%iYygxf=px$CDlyX5*z=+C~IG<FBk=URmJ-Dfo%=
zv(|j*ouOb>QBh%jVe0h!dF|9o@5Ug))Zb3iv%b+BW{)*0pVBZvn+pXS1WAzHe0yZ=
z$vapw{Vobf<5vJvIZukMs8H0;1#v&cllQU-QYI7CW22)Lu@z3l4REhT+FFkfR$wu0
zgTm_E!UDAR#O~=N<|3=BpR+tljdyi~)+OfV8+$85Ecg9kX2(Vb^+t0?+uJ+B*z6q~
zBcr21aelb&cco^Ht74AEShb64Tez*N>u}warLRFp6q}%z*NWTeR_~mj=}2)=em+HF
zJjW^bSGNo3vNBd}1^t4T;u((Q#;CE8COZJwz4Y&ziub(t*Q_lqiMg%Y{VY|KhD(cG
zr*fg0OfR3E$t50Oy$jMSrN7b~P^-V^nWnF^Y-RNJ^%2Js!8)(6t0yKRmX(!VQI<;h
z+T7d>f@2P(9kRUd(`0tg!(u*f?{x9u^n_(9)*R`HyJ~1?YbS2+kF=%U3u!SKO}XRU
zHqbNmjFXes^-x$-^P*&;n5)Ecyv!=~TcLGF$;AHBj!6!!q@vxg?^+=Jjg9glgWPPS
zuw{JQb?)N)-d*DCbrzIO^yklSZIY5QYB;a{$~!$hjjGt**$E=$tG4e+<ovj>Fh_qj
z?f2_fX-f!|`R~G|&R8x@22BZsWPRO7Q4w5}256}U7t|yP@U13;sx5eC@Xofi1Gx~I
z;^5{}3Z2&ebS~S~=FXN#CfB-o@#y`Hi4CV8ikg}e1OJ1%w~VT?{o1|pRzZ;vK@brT
zR7&Y?#YIR;ON*3r=OR>ElujuD>5^`clJ4&A?q==D{ePbE?!Cu;KkPByFYg)*?{Pb1
z#kH>MyyiLQar};vsM`01cGi#&%Hy)Q52@C^&FPBIMMXs!8M`DR7$MQm9I~wemJhLn
z3P-*-(B8TS2Pfh;9oijkCY%rV6s%R=)N-y~AB!p=0=>}2C=!Q^=Wj>$L`;Cdlf*-^
zSV0g<!O)c5;BpC6(5;khO3upJ(on)%6FKj+q-Fy7HSG~!mIw&y$7@&xI98K9C8iD{
zndo?&=F?<>?+fsn#b#N+zU!>11lB%=RBT8;xbEUEBcPcjo_m0!2q_z6gd&I$6_sm8
z*L{|Efbo)JCP`ILpu8j+0J9#G_&9!E`$Mn*-onCp#9<PdkkAv)i{i7G{zEMhez&J|
zrwjddvfN5{!s{BflAO|C@1j_Y2eTlG-h8T>G(`5=>g}$(|L_fE8xO&uZ)$9$SAU1>
zS5~22>rIv*+G2QB`-(B6Ve0A;-!yk}eB6#&P9kPC(1c~l@ZGxszLb;{L}+ZtYlN_;
zCv2*;6UG%al~Tsv7mPfwR_$r&>#G}&seOMpC?z~xD51Hv(`+CkthhKlB7z7nIW<{D
zRrOwv$8CHn$;h8C&T!~4G0?gTZ+!Vc55o=RrkrGXm?7D3jSKyHz^&gJsI3FB#H|af
z!^6dVw$9{uVFW}V|KkXH``%QC(`mgQ_-DB)Bq1#i`E1sYrWl})!(e85AJZ`#L-DT%
zG~J_XELL)BoRtIPQ#Zl0p`@hr+6xPMJCu}=R^chc?9lz5k`9F6&MR_Cc6Jku_c7&Y
z2p|eMp38DJGEe8u<*9_D>Z+qRCZ;QsVXrPDW3E3bZ!EvPS8Cf@Z;{%YH+f<-PW#)k
zM`jZ+pxO<Cc5zVi`II4hMs!LmWL87is)oA8fQ!hrNn%)&;;fIB1EZs<gF>rmV6xoO
z(qTH)ljQ&Dw-)NM<l-Db*#jA!v9Ylmq>sKC@rA}irZjlm^&QK~yhKD0p&`*~^j*NF
zg#?;v)3aiC3|tqstt7}Hpy_j)$k&4<2bWv`qG~H$mJZY9Q$uktFvjn2xz3iB%TPck
zCb7ypA|)l<>XgQ>C9AC47eTqQ!1^{J(Ady;&*s1=8$p%X-q{+-bm9(*v+du3fHL9n
zf2T<$YoAJD4k^2UTZQL;n&{DhP;`RiP_@F}XNP0#wnWPQP&gc|RSP<;FaLUj@9R_h
zURPgVj(_v*wQJWPU&b9B*Q}?GV_Nf5P=ah%Tor^K18*Ag;myn#fV;PXhX)JKqQ$P2
z@$Is(2#2X^7b+^MC!+p*w!69(7Qf58p8w%Ry9S7pMo(c#&E>T_*ETbY3klKr@Ig*N
zL1Cjp626$(x<sOZZur<*B_?lVWR8xGs1xy?Tq%4PE{d`WLu=pfZ;WwLvh2?L;=5yD
zj~?%JL3bjG$MlC7%`U%Nf~sPxr#9v;=8G3EVq(?suB1g|d=5<3f4?0cJCq3p1qKGj
zgzCQk86Ok#h=8EKr$AoaSzQ;=uph;0K3STuX?+{*Cz+EII_O0IEhZZfo}ij@lkLP^
za?L;M(t<$-^lLTL$Es+?0AMpbR$??%-M7vi56%{LPU=j3GIV!lm&Gqi4B4phyc3N_
zWHxqo#l^*)^9B%GBu!jLtD>f+rlK}7I?Bb(J+Qan3b8n_BE)i-{@9)K+k6|`D@U3C
zyKsMX{b0McUe5O^ALWO6AH0!~5olU?p?d-Pxa9Zm;c6EWJc#MGygWa-L-=Casth93
zC8_rM)8&gaZc-)!o&1(Z-L>l&IZ&xt>NJTb%h|?jd@3OY$V-}ki|%ES0WO})`408u
z<RmuT+40UCoU*CEeqoVtm_U)n&CMO}yz46lxOAPS0Jx``PLvmgc#B$CY(uPw%8NmR
zcvo;@6wMbrV>g(K;dA8SrZwEKH$K|9Sc10z-)@26@ymp_zka1$Wy}Lp^Y&bm+sQ%%
z1i$1L{ytvK%+1j(V=-ComWt*qU}FoNp+S3Ton-!=OS=~X*L@4G2Zs5kWA+LuM;n6e
z1KFplELiBTxn~WuwJ#De9r-3MuZvPqH^mDg*#rbebCPvB_%c3P4Ec9J(|J_@1ADLv
zc_g1I4K0E1WbCW(mNTAdOLny9sF$%g^{2st8P9E<QeeO2q*Q7<Ry<DEr)gC6y0Nh_
zmLECT)FfKuY~P&J1PmoyGQP)&XP=K6DTBhp_20g|ix&oz-rW}JmX;O?ffIz5jQK{%
z6y$am_@mD+&d2b%j#uloaa%8@ovr^<dHsJKP92;I<SQw0NZ&j;N54-DA-(f&LQ*cz
zs`Rt{9|<@gF9+RWN8g{s3cw+?+qg7t*w!B5=7y?`+?C6|C(*Mlg1*A)AVYQZI@(V=
z=v>6ppHV$|^1b#wlMiLx>#bvrXL5HTD^o{fe3W2*VPR2UqrxgqY-W0%#j!O8G-~x2
zcDA5Zwb)*stvg>{{*6P*>n(s;ja(YNDh7)_;NiLKo*2D)GgDpT1}*fAkOE^v!}Q<3
zjvMmaT8;P$2V2Vy+HnatM^7Zc1lwnqjdxTlGJZxS69@OK#|sr0Ta#6LjlFsSWCBkq
zWf*fiqB-EMbGHXdE^7eRLrOS@DaN&F(@(%R?1C!m%#X497A|h?6)(FscFewiKnRJ%
zFg4A_dm{RjiV9D5jl*nz3*Q&UX!1a&WAVsbX-)0}h*Qpw;Ly8gb36lq3h$efUM?Jx
z));7Ire};+>&05lf&SK(^RWPf(E&<8_Q(+M2T#F}+jaZK7uSo^B76Ix_XC$&uQgRp
z*j`9}H+Imhvg=4nYVs~v+O}~-09PK~*kKa|#i|i5v`N<T3#`>OG%hdC$SG%cY)()D
zuOlO(lQJ_iCGBl(M=I=d%hfQ^a&M-5s~cPEkRgVBmIJafiZ%(sW-|Pnkbd1~xn~Zx
zCwvOY_A9-O^+``)M^3F#Z6!RhbRA9e&bNPgj%>z6Kq6=72Y7v1)*ZCUrr)hJ|8D#K
ze?Z9iNf_^XIs!#~{{$v%o$mTIp1$v-2Dw0Sfwi-XsNqzt@j*%SlJkC4dBvTM#>1&%
zZ*T9ZDx`Pq`?L!B?)M$%yLtT+XrD@C1L7tiZmjpIVwwH+;>zmOQH>IN9&jn3c*D3k
z?(pzo+Gh1XFAJvEd-XxP=2-3oS<HcLdaVrrQ>+)2f>j0X(sz)j%P{P0-OrhDvR@e-
zYaWJP!*iPHL-+S6qax-9-)dhsaa9xoo~UC!)mzY!z+#IK5A-e7XO__{0qP7(dwpGT
zJfU&n>P1;P&y`6@ujFo;#%{>{b^F=j$;jpH3}438T;(M)ey0OY77l#OuV(5;*p38Z
z2onxucOWy4Gy~8Lon4)D9nwIVKHy(Bw}L~;JULk%M(7<9_v4YpmXf;U4ZI@TEiSO5
z>BW7;H2fg6-=c#Qrkq);=`_;UHWRR)R5u_R3b&&N?r~`7{PfT1dT$&(J%gGwA5m`{
z!5l4f9i7)#6X9qMQyzu6J0ry#qx71E&9Ig?55J>`AR-`W_}gGIR?QE=cm98|i206}
zzLWUU2nyE7#0x0e!@U~zCC$}(5|m%ReLJ6aR{>KT!e(~<wldMs4@F;(#QpaDi3(J?
z>xOD})2szoY!wfF&&AnikdI6ZCG3cNd$d!3B$)OE0<!BspsE>a-P`acoRAR8n|r>$
ze*c_yeLqd^c205kmVzV0@o8~kLFSwV+~@HB%B0yUzh;d0$6=&NJFH2Ep29u+dv59|
zr~y7?6Hi9B4Sj?HE5o>_Zm=wDua~j<WALa$`RRZh7M9e8Di1Yv<6G<VdzfhbKf%$(
ztdmO0^V|3`Q4iBoJ*xRV69l?N$2@Y|pVk7ur4Dr`xKH?;9{jBDE6O*tTy40FS<m9w
z;F0{XtBr8*K~UzX&deKHkC=4mh#nHmFR7@E`A0K_Jotu&if*l%IyZmg=tvvgu{p!~
zezg6jpi51nkxB~s9=45&yW$074AH?*Lxb~vX*$3IAb<W9$j@O)0NQhSDo4A`nbFaU
z=2{I$$1*$mNBXYEmU2QS`uaaIguuWF+8s}?8-O~kuFUGs3mYq3A>TN@SX$4*qMS8I
zF$V?7)pFDH4Pb!%zraM`R6lfqZEb5gQFJB)0u05k(V5ZFnPbb$Nj0atnV-(CvHRJq
z4Vt!v)2lN?_+Z|-qnz~)kAOgdzAJ{?8p0Y96Ly^CNFv$*WWBL4R{$wDdrROYOcyji
zRw0(wH860?*Y#z2m~~wyVrg;pux+tJ5Oux>k!(i#%Nuh^>y40sGhnqFjYyS_tyZa8
zOn$A4g{}ix)r#(HF8@A|7~Zek(dpHHGf{CY78MsHM05>bJ&vKFLEaI4#P%Xf-|J{@
zw+a(h;{ogkOiT;{5VlaYX|lm<XKTEXklpb;!0#4jDMg5)bWAam0M(0qOEkRiv22{Q
z0<Hbyt&Ib*K0G$-hfRa#@dJVmR~fpaNSoxv<7WhDm5$%cCeAj&c>UtuJv?aZy=}gd
zZ~%A;k9fyJO!i&mP>KcyFf0Se(0zpK<eQG3OSIBG2NvbCdv69-0X`TTqdw$TlbD|$
z>;v3%DBRvq5-Rd$D9~Y7yBTZ;G6Q{pE^dEwmG!@^Gvs5g`T2%3^YfI1exQPILtP<n
zAszFW!;}}ipg+&-zx-p4j~AV-!kU*sR&@%>*P)pe@G_|H^3#SvV#P(le<TfH3_4mr
zRgBsYzJN&tSLs$4$oLR8M~4GB6V6##8&Geuu*!iy%2VhSSgn33JSDv2_Z2gPtR%JT
zQ)T5k$xz(Qr=XLP51uu`x&9SV2kMFgaxS3>L3C{Wvz~kCeqo1Aj0Y|4GZq}ClUZNU
zp+WWy3;W>Uz_<D3)O2dR+e3CM1#NBZ0ZM44k#L$RTvCvc;$Ji_Y3b_fDr6Qzjvy@Y
z=`4tuy_1B51l1ouHaEtifsJKk<hs}KBQi1)x)bOJ#yyF`6G$6s%Di{yE2;5|3yXv8
zAyJ@*+FrMUG2k#S7tPrAh(Y{BscY5Zr&O7(NyO72F|(<%y~SJwdbY^QSFb_&Uv3qo
zyL%e?yRh)wu^t`LmMLKk8vXS7x>o33pNycQusf_GvO%)p;o;B_TCysG9fq3g1dDES
zV8)5CP)`(VYGz8I;ZRPJHwIn{ogVgviVK65iHV8uNdZky15AQ@gMCWXH#v<5zmag}
z=wFs>?p9e|tvG8V1xx&>Pvv{1MJpgQ+Z+uGS%9v(6W0Fb;88WI$e1WVCXz*voB3~^
zqA~UdzT0Iohz~)Zd=%tG#*j80U2QELoeK7h*M6S7T_4T!y=vPV@q$D~aZJREN?SWX
zkvt;zytbj?g`nV3mmo)vTTOMo@k(TijJ$}u_$-m6myLy0OS4!ePx*sK4x%(Pn|<cX
zTVsRxL19vU;fLAM@qFO24uZYh8~MfmgV7qMZfQ|z8QuS9&vus9(E@e6o6ALOnUTDR
z@rJpcUNXzWr<5FOA({1UEsOZFsz!3#7h{>#BVq`asP*mIi2<)SrW@<>@+j8p8^R$%
z8>BH{k?OZx(YoCP3Zf{%<M+j}8h0pL+uPNPogEPlTp=yz>(G{pWcTyI+Q+`y+q$7#
z6<wjAqpvwnOidL<B*?@;M(Eq8_Xe_x&1+m+#nyMjo<q|pM^cyRfg9?gBsDb^s%+Rd
zk`UZI+?+6gy$u31g38&d_wOs7*+RwK4CR>uIWN+Fa&L%?vbVqA#@;@c@Gi>(SOCiJ
z^|*WEic3gL&9i63qKAwn5rs58p)@<v3`W|&xeSgBtY5f195dHnTtwJFqY=*ae!RP<
z$9&O<(|TONNBm9-Wu`{@cB}KZVT~mriS{QWqe$pN<=z$+T9}s!OA_^`;e@?p_s_V2
zz1{3fCtDlI!qvG%VLw6!buomrv@{=C?x@VDn*B-tHQ465Js>77gTCizW!a{Q>8PF4
z`JWml!3ZBR^eHl4%T5=RF?i&0znpu0{{gKLGTzE0eOf?qRf$GC!MJ=2rxMy_k~vBn
zocXw4HZ$Zna<m%z2G&M9mg>tSiZAn}sgPushK9y%x?R;n<}1^c7CTmytzBJkfrYWi
z9z3AHi{&fM-FywV%;$4#9BO@4?n~w7H8juZ?}riyUWtpx`I#w-^*;<SbyY}o!8idD
zwtSY?S6)wLO;|1VCtRhP9x5AxIvCKuW!%n``Sv!O6Xwg4{55csE41F?0uTr!!ek`m
z7N-<To~{?}lXF@9`H6?vU!J+Z7e!G}J~tkN0nzg#B_(mUi9)3bqLTx08JRn`u{XM_
zFQ7XOO<G?usu0u3!gPZpGJk1*M1Q$dbjC@9bAH2Q?Ps6-`~pGE%F;nlffp7PhLQx3
z^P{fN!X928PEJnuf{KgnE=UXwhGv_{-QIQzOyub_bwqQnscgU6c0WIN#>dB}WMOB`
zEG~hvr!}F6WXN1Wij$QS^>K2%b5a9Z1iHQAu7rX-JP@G}%Z?!w9sKWU)7F51A`R<9
z)DKJKso42eKPi3=YDd(-zyRtcpLZo@8bdi6Yt2~)Tf(=oDs#o#+d8Dg#CCUCC@FCw
z)I@g%&CH-x{EV_p-4)str$<>mkRKHu&jJBh-AtUExrg<Kb{YcgU>n{hzc@YWYH5+3
zY+r>kg_Orie1HJ`_3MN{L2T^()m~l!4)wQk3Iz)BmrvaPF#{WX)H)8@Hr17GT6ya;
z(Dzhry90a>LbV5(L_GF8mKGNN0dAL4m53J~SmOCHB7+G^K%NR-AAG6~IlZ?6uf-ZZ
z_7z_&=k*<*7q)*ZBqG%)@^H_|5%6nNJ-gU@&jK3j!G?@R+k^d^Up_3@sTih9Dy8Qd
z1V$XyJ(JYz*Mjbb<*qk0NJMcqWK;H+d$wNvuCdx?;%c61?3n1wJR_}HTKoRyDJ9j}
z$dv4V^pMV|&rh(we+#3{Ft{~hBDIxMwMhT2e5MJd_&sxqwff%&z3Q+Ma+<Q{u@>>&
z3|D=h=H6bbx`sEc8@5v}%C^M8Mps=N=VJ@XUC@-Q4;R$Zpu6`ZyvA5KtojtuzAW1V
zVNr#S1vxnk|F%Wo`@~*-9NnR0rmL?MKgVh@{Sv5ePlqyIaO>!sxz2Y}EJTvv1#xh%
z@$mBU9&Jt_VUOzS>YBU2@{y^GADQ<}s^Qw@Xim1T*!jG_bbuxgKhp2Qd<YL8`1AO(
zW@ekgT>>HE$+qP4J9ACY-$C?`R7e=D7NAC<(}#m|h=7jP@%~By#ZhVG1MN3&Tx;DH
zRb_tgsgyxsw%^-it)RKEo5vonQL(%Gb$va?2sxG5mMZY?#6vkZ?%K5@%^y-v2`4M<
zIG*sQt2(82@}ESd+Z|@_V`E8t&1~{G#L0o5>)!s#t~Qpo_7+zB*0bcc_7Bm1<OU^C
zR}>kd&IS)M9)E3w`FK`-zJa^RL&@*rCvJ6-4GpEB+|PUWLh)sCW~Q>*#MfpY>Z(&L
zGwr2!qA$}Z2?&)H#A;5aW-~I+^G4Qx_@Zc^(ac!bD$oPq9eB>}rxJ+KN1f|s@k$Dz
zs63a~j*cre-h)|6O7eSxv@I>Z(m+w7d?pj2yypYX5YR7zpaO~sIs0FyWNC*-{2?ti
zc4o=r(i!=G<|+dO<ODJgA0J<f?tu8<U)kBFDk>`P9EK;|4h3A#otd`VqgdnO;-HWC
zh{Gl=DqTg=h5*lYy+2(lngg-F6z?YBbo@Kc^lZ0{G3>dIh=@pzW>xuR><6X?P~$2K
z;1c7LSfACb`B#3do1rFm%fg~&VPz#3aBl8@&%-rbVmKDwwqV5-Gh}rbrsMvXYW5E@
zKgPt$R0@$l{>buEjr38RZIcItdv|tpU?Wf2IH{MCn?~~WB%T{Aab&BxRT(KlQH;5_
zNBr<1#3QqCaD<CJHLg)hefUMK+(e})AIvu0H6gMPQK^jTWIx?qSzB{Ep7BPJ?R<Nu
zo_msLRO)PWMN{U+@t#{)Dcbi-X6zuoe>vP%VJ~f$qM$lit)py8zcKw%5MRE{ZgbN6
z$Q-_G5+;Z9mZS<_D09;Y*H2B`I5QriV-d$k$NB<d`O_)WV*6QWZU69To4uam<vozY
zr)9@pB)C+75eJy%T694W?xIW|9vc=E9nEgKcn-r8iH17ZOG6Ap#sM10mr|(ofy8oP
z_+5eS`z<7&NyCk)y(ZW}h<=ZQRK7<<Br3*<8U6o}{o~IjwTVjr%9#9cKZq_d)4=Uu
zAA6Bem5i7SvJ-R%#skP<R>?!PZ)ssE`#CAZ&pl}m1f`cDGukhwuDu2tf#ca=@)dMD
zP6O;sGCsL_E{$NzZoCIg&uUc$>x+^0vv=D}V%zhw*+^S{z61UW-Sx}t%lrPstRmdR
zxrvFhv%*@6PAFHGFp{YAb}iQvVQz=!1uNv){^mfz(A9iNS*68#AVbl9bNpn+o4l%$
z4}QXYg%Y-*_n9e>rWCR&al=!n$L-H2m}}4pE-oxp+1xdO@4D@hq+RT3F!J&eYKE-C
z2}DWGM5s$8@<`C!z|zvzQE6azA;VCVRlj|D@8lqUZTRsx8NUh@Rq)xhe1P+=zzJnJ
z%^#b?UpnC=zFB3_6RN5#ldY(&J@aj)4|+d*2Awh5ue~#R=VoUG;C|<?{OxYfFtd)0
z1E1bAh<?s~vXrS_JxA@YECG(BGN+AE7?Nis*YHQkQ~`30Z)mJ372@t(!?<@C?~xKG
zCMWZ|?(&(MZou97Q-w0LYp1pG%{6)DWo60m4}RJ5%5-%K1dxqG+y*YOKuhDmMf^l`
zKcM<PrT}ERucyGz3JES0gw5`8H8n+TXO5|l7(0bLC1LKxV!>Dm11>4^%o@9(v5_GW
z;o{chi9|<F*#+vH`NRG%FkEG%(a8AtRol+>cH_+{A~P$$zFoB6vnqNMXUp}!kx71H
zof}ChI37>Oad;P4>|o~LFjBri6bTqfnQ&wdUXBhAM@2@S>=V!LnZF~se_#X3j5sfW
z-%KT{mjg#H2s5(^_xID?TO0Ki#3i2bx{Yz!jTZt10(khsA|B{BCz+WYIhwLoSv`Oo
zAc}LTXezR)CN|bOy1%xC@2XCZl`gQJvNh15-Dot^M}3gnky#Kymol0+hdVHxkm;9c
z#M}#g9uHAOLsKL1@*2`+{Uc0T6B2eBdy^An;=NF3PM-n<FOS`E^^FZL3>+X={V0Hx
z7dqaWd&!=38Rj~Gq^nlBC|cDqkDr8*RhjdNmAf>KUt|97-{7x`y_jMy6mUV}2Px2H
zAKv&;JXqjOGFDNMN%{2@L*x5T8v6SflbM9rbS*G-KDs_!%pqm<7$@Sa@AP0`5?c(>
z+1UwK&byNu)Bv*y?}vG@1+U!P+*R3mRd(3sTiLF!uLI^vP9C*)(LZK=((k8jxbbU~
z1FgSvxZ!JjQ1|lee|Mu#V9VySoS9oKXFmjTkcZafCJj|Go(btAs}<jQq&sh~RTB!h
ztXG<`;x%S#X23C<Y0DMv3A#Onl98pzmQk$t!iFJIQLAGDWKkb)R%|I$oPx%~c1>yF
z5Y!x@_L`JnVdb$|4z!vHhY?1uN`aS;erIIfc^jjz*o%7`=X+g{at?kMXd`q)v5FE?
zGH8_VkKWNF%ylX#lY^0;w3!*q)O~3<sSWy<d)SrpWve2qSB<HC#9qHnvW@0|0RdGA
zy~^&&L`7HA2!#Ba=;-XhU;|g+_@|K~EC>tVh*?9&Xw%c{f`i+$vfy%N#P;~{)n7)7
z^4?V0fKNV*Mo%w}rdDn;rl4%w!d)-U@MT3r{+icZ5Lz()nXF!zPnY+`Ar?YVCVX5k
z%~Me+YDfmH0^qQu5msf+4L&orf-i@=+msI)_Z78xUm<vScyRpv5ejeLGU@HkXXr$l
zZ!93|*)*##KOKq4$@Ti;W53%5|HyPzLRy*+O23SYqSNr;sC<K$7M}zUn?b$Q;^Oq6
zE3r0&I#a|Q(J<gxePbcsZBx#4@5FiFk<gM-R~%mquX&D@&Y5}5#zY0@b6^qDS~mF$
z;*dFWD6txBj-Rrn1OKm}OAzHcQU3KSCM63iXYPrEnj+j#uf}GpQ}eX)(s5j`5Rz2Z
z5F(smVmek-ke5e6>E?zqVh5Y&L1&Gnjs$Oo-R34t+)gjgwz^{Y*QTeBRdeTz2Sz)j
zh_UbW%r=s1L1-|9W$w3x+=rt*zamdLyRxg_6{lf5lHQj>%Sp!XtN<S5w3!I=gQ3h!
z&1%^s(dScAA52X6tOxfNa(~P$An~r6^&6u_nX3is&;#!fABYTW>C;<X<)nG2%MvAc
zxqY?af|yfv2Gm@DV6~dsg$qfeaAPZWo|uBde!TL)(m5}Qyo6e`4`{d)r5LcWZ>Rs*
zYY8z}d&k3FeV%LWDU_$*@guFd8M;&TsOoFx?aMtI6BBE0`U+jo%S#2c-lS<wxwf7f
z`^!NTw_D}$+|4~AbuKrG^_9NJ;Rg%-#%JO5H76<8j1w!N%17GuLK8DM_;Qa-dSEtD
zQ6>n}yKQ4CH{R-O{iNVP@I#1tbt<a!CCuSM^c_w#Z@|?4N?FAUmOu~lYMawT>Nqtu
z%6nddZ;o9RT@qh`h(N34ax`6@nv#xzR`X<_6?tT&QpC$3pve#cQYIic!2bHH#8<_N
z_Dh#WazQ^C#W+Yab-C`I5w^T0s5TtlqMJX$^u_>m?i@{T5U&*0%aw^~X=vW^TOFR6
zk6~ax)HT$u)n%#CsIZ%D@MY9U_;q?BO9Ka$g>QMN1Q$=(!~40`*xT=Ud6s`JK7Bgt
z()`v_tWn{Pfdfh<4%5*LBZs9l225qq)KLb0jR_;ijE90|F-F``5=4vxC?6@;6NRyk
z?cJ(dBLAjTO>;X6JJywGz460L_Plv}Di@}`m4!aBu@kkhGW5JRF<I}Yl{fy5esyhA
zvrvBV0qgh|x;_BwW})MfWsO%Oo8o;SjdgD?p1y;}dQo!WkpeVG9YU!2k>9m#6cpTr
zzU1fcVxt6#mgnc$%qJ_I2-lZq62`@(rIpaHU!BkP7LOC7ON<<)b73r4P2_B#81*wU
zCRAO8_6a36wup=W@mJltdr`mV2iDRTS3;;;vHgn=VON<YZf|F|Id(KMn^#ob?%2?b
z*ZRFJf|2u-xl%++V4>byVc~$<`~<FQuvuRXZBP`sG`J`Wxr;rSD3->~98ar?d<c+G
zMk-1~(97qr=R=Pq%s5;!nj>4UE&PqIuZdI#G&SgyLtEP0E2oj4Augs7{vw<~Lma{H
zv|qZ6Wac{loD#0T)Tx<~{_BjSdV3Bwxfkc>p?<oZaThZXx*ie|Vr(aRP|iom!omTY
z5hb%sGMg-&x`eQ>fm}7Wg_T_>7&xpK+XK71D`R5(LB>Z^cl-8j$Ln(vdKB2m8~TUq
zBPmo=t)>HaMvAz{86y~#&8SmT;<#M-s5nGy4;Q=Qr$ES+s;#X=7_J#x70S3u;D-Q(
zUAB@VEXot=6QQYV_lb<tx)#)qF3L0fS|Na(shjhy*_meP&vAz~#wil7|73Xlkc_4a
zFjP#=zA&LhRoHKtjh9-k^d>_|IRXDSSye$Nqp3OBnp;g5CKgH#J2PW5GXdLG1<>=e
zT3Zj$;N!hX?lm1NX5T-!E)K%1p0Tm$wgn?&<Lr~eG29HS8&?DNOv*oyKmGb>eI#jo
zv!{R;ukml=V2nlc(q67s6^HgL0#-p*629dVKc2a{Ic1lN1CkmlM$QinK1!&Zg`~Qk
z!8m5?6f0gPrtOBEImCVq>SAk1%kALskctx80Ps+}gxN=!)&(Owd$uY+KDEG^6@>Xd
zWo8c2?2urL_w$p;zIpZXPK5jX70$W0{sYXels!Az3h@0-Ea>_LrijU&$?sl>zmcli
zShAmOc$0T5n2Qghtor1(h^B832dZCVkdTl>NrneS?Hu>ag;2|I@Dzd+=W;D~LL%H*
z91+W7_efB?t|bCn?OEzC^$Mqh+#0**sk~r(Ea$4Y+XD?v)jc=pSHRpJ6pIrR6JcHb
zFbcI^>VzX$l$8}TsYe;~adW)P9UbQpi>}yn10ri{>x8#~;c>2lkEf4!@COJnDHp6*
zu4B-Yz!v6c75n4zLS|Ohx9`5(PV2)X1qNZX9Vfd3m|GMcB}36}xD>Fqjm=@#c;8($
z?~LJ&cR3`+lZxUg8WdfeHuY*##)dS#tLx<Br#OD(J-EH1*ZJDxF=(-0c`ReTyb7-`
z|ADjBV5pq|mWWD*-Vb@phDL**EAl_&L5fcI3n=N!vgGLK!IkyX@WI1}&|$-uefg(K
zIR|T!O}+ZZRXuFLo>8$OdR?oE>{AKx*vqEwRCZ=|7T2mYcuKZAaHc(c_@m*m;mr?q
zN1r{*PI{h*`YhMo)UqwP`4B52m+I;k6cw<M2st^G6i#G^5Q6h^ude^S#O-S{XODTP
zczCE(C$c|@)GcIQX|S$7&3_D@ac$hBzyAHLFWvLXxi_wyHW3*Wpwce-6Ds>@>3HcM
zf-tKWbl0~y2NGF8-~Q72v#=h7@W7=p&F%Fi-{pFN%k_bYf0_E9IIqcz{70Jme-8Qk
zzecb-F!TR$YmY0Dd_kzxsw;_&O}Sg)Dj+CWfp=iD#{Iic;oj-8=0HQI#+l9bGLV&Q
zMvl_x@?=o5;Y!6H^1xhh`nX#rYB<Mb$!>!;B1~NThVZqL+|aOyj9rok4+0*dYO8BF
z@PoY2t;c_H@8sdh2yNm%<hZin$<YlyhD5n1=PUKg&36^kSIC{6=KpN5sOVi(FnwHZ
zh*|$eO>yL#CRHI_b@u(-cu8hKFB!r1q5a!(bGJw7Ek%6}HRINHVeg|0B^6rJo?hTW
z5za65YY6&fpUjB1?V&md?_bhTt=`7t<|;4R>X-7%R(uypVuK3*`76-pn^b#M#X;Y|
zz;i}MxAQ-O{PYQ<ioCYx=6aoE0`3Rc-x%U}P2RufbNo9yt}cLQm{$bGDD$cEw@P%f
zgv2b)yCH#RD(8hMr!80ChXWBfzS1^Z8}VDa6D3MqV=E4-Y%VQA6vk3fG*a~0XeeX)
z^+$@nu{>uVjf_YqQ6zY_tK$XM5dzTceL-(J!CxN3b#5RmT;}Q75r`+>8FOAS$b*4H
z9MLGF{MQ6QaC)q%d#nSPv7$$Uj&XF43k!{81LOOCLKl>!H)MT17OcR(t;J=eKK9fx
z3or<&%;-(&D6&c<FBnLl%d5~nOAJ3`7&+gMK=*ir!^y~a*1p59i0@c_3gmxoq>;HM
z!&E^**Utoe=|?9aK3-Vy_YR*jt-tyGJ-a>-F9i4e!dNBhmws$cHt##tk=V<U&R)5l
z6&*L)5^w*Q)yc`TSApbLuoE48>wkUjXwb9Lq~U#D|99|J*+jCMptXb=h?YMHDQsV;
z0cK^o`!-*kS+Zn!bQs>Wn^Zy|YgE=|6}rmUuwUap=?bc<r|~||*q<@bQjBIxiBfve
z^+2u|H}j&3*RSJium1|(+GQ>H-O|yTb!B*3U&qqHXQemwxB8ev2SX$*ufJ8i5yr)p
ziHTVXlyWXMCIdXQ%s;>pW6JAvFmGWi{uL7%?f~h|N;+FH^wmIOy)`3=euq9@^<iuI
zAvqDmy{IWfYSCtIZ;m$o=~j?XQ=^E`;zC-CW<BFAaT`ijtAWf5Q&q0WNEL9;r*!nJ
z^cV-`R8xpX;}clOk6=AB%~s`Em|p%7c{eJejXF^jce4}}3>J=~qmORV*2Ud`J%p2-
zlhKDe$kfv1-$r`$*&C1p!R2Bilbw(Y!4yyFWX;BkE#?hUV0Kx%JgW04J?a^R^4ujN
z#ygzuxb(R?>C%Y*5&A>~y0DhEIegh8P4};udtWxEpd?PBc8-jWjrtLMm-v!~o!j5X
zE8vH|@ls%TaCZ?Bl`q#4biF3;-Fj_36?mO!DascqcK7mChq-CJce6}4*x4RHz-7ch
zv5NsD=zRTZ#cFL_oI>bco2Jwa-$sD{1OQ|cj6TF)CP8eZFbs#<xBhY~I^E%=UeN6~
z<HtBX(*SA>3u{4W+k#>nOVo=Te{kXb62}WAP*eyde(=D$l*iHW{M-I~oQoIDSX5AW
zT02A;YjRmb{8_sA&54@yO!LSeuw^F^LA(}`tVXt#JQfsH?y?wf;08uDAbMF+!#P9~
z-eQq)K<Ja6y2-Ko<C@)kxg38@VaKwJ;{07XaBtH~`4`SQesFXo4oKD7@QD1O0tr>C
z=TX-cQ->hj+U@+rzIEeEWlZ!?CtV3?%y?)-{pjDx?&kUNbQdi2q~xlChpx?6D|tU;
zTL85|@LaMi=mB{;7R963F{(yUhzp4K@pvYzP8ugfF|@E^zsCKRAp``Mwl@1d&7HLi
zvm@>Z1(ho_P<B@ynP4dx*UsF_+7OAs-wNmJzVN|h{}-RDg+Y4*Zc$-b0`3LObXzZZ
zhk@M|sWuEj_fC#Sx69pLhi%%=#aOkbaflks7TyFX^Q$+&U`&7aLe8HvCH0x@8aos9
zbIA7j5gn~qB+Y0}Ucy0&8mY=Nq7-~G(3+AAaB30NL<Ln~jO_1!hukXx*X7*yzz&)0
zhuBI<spcPbb$eUOG@dWnAru1RJLXn0{}IX)3yg{*ID8seKd`gfn`*E{!I=|7<(b%u
zM#t>)py9FHU0MZSh~AQ&d$++~K3;)LR?B^r!JUYBN)S#%Ui_4DE62t86i4}Qi_)N-
zz1hh<fRR+k<!Hls+CZr-x!=dRGk4`d+2(+m$J>d^8aJ3h9g_1ES7u2Pi!%Gfd7)$8
zY|P*@Gv!eo9oDFE4)y^b>vw^0Nvb>LZmi3fQj|YfT)+vh9JazND--%W>v*3OR{T=c
z^xgdYG0v`nck3;EL<Ya8^?p$+w!ykhcv}L1(l?)Z`b(Pzqhixen3}t~n+rW-<+}vx
zg~(2oHEgLU*R{pvOp2UfQ8h6k-N*jMsKJ$W{&A?crN2KoK1j9Zk{K9s85G8fkSYm3
z2n9Mk>PAsO`img$`F0OC2!)AC_&vExU~Fvt&O}Nvv6#cVOD0_@dg}Y0u%}}&eN1J=
z;q6O%)3}V|D8mUS>|Y>BqrG=q`q4#S>)>QZN0RNBKP(q%PpYpDjst2Mh+ah%_Df&=
zGAn|7iSeE_2=i1F%BMh+P9?ftk4fxu%iRd*X06}*f4xg}D<FRGqaXDS&R&@sJj*=o
z0m3dD(}~ZinYma*nZYf3SEpl@>%#n}+Bpys84(w9^Pr!K+`P$+(A}C2KHf4J$l*u7
z<@rqJ^>y-_6UD`bDn&kGPn$bC)0AYKRD;95lZG_P;jAT7HGw3nvt#BtfmH^^t2f#z
zDp66M>>!)6hNVW+HrLbhyPq0zp|~o^SX!D2?-_ODXpxEDM~GoJ9k24Jo0aoTOJkC8
zueGr<lK>qwa0}`Cg7Gs*C8$F1f~LM(1Is+W*i@x}8Gvb+d)Dc#_+bcLLsNsTX^7-;
zJLt9iz*Ndp>2(o$b$M3K!A9$C1*~iJ(_=1Y-+3HOj$o8pFDhfaGEGOr0IVmv=V1+v
z9z~{GS6$Gcw}HWrwq{27DHvFmFTY!cECC`5$_F2hFGlz6*0{UtGH!Y&B|$)$U9b8p
z%bD+)slH+o(X1c(_k)9l2KXeCCtXA%)kb1?i?kBnR;C4Uj}SvB58O3v78?W+^F8U_
z62`ccEF3I%9G!E2l>*#J6!D>_;4cB;ymVZ#m>eBtA}=Rn<^EG2;eW~`JG;b`T-#f(
z(%qgIe|x7SuMoL4(&(L<O1|5T+VxC=oCR9O=lHiUA&5z_BRoF7uXUix^sLjV938&6
zRy_&NFS8XTjEBTb;vvZ@lr-f|E5BF(6!Qd>3d{2YuT^C&H+s`mBOW|Ugc^oKxeMzd
z%TD*@2BKkR`CBYogiqlx*x=XtclZ?+e8nm0n!9#3dz<PDFoGy)1;n4eaKsl>yE@F~
z*j~v+A?0IeZ+ZV065t-h=dfFEO=qV!IubamO<+5!J$M*>xXQmio(@Tlx6uBy0afMS
z9B_gwEKt`v>BK#J%7KZmC1L~AbpO_~P}WWwJiyFEcTc{0DMc`jUHupBe-3wqOv``&
zuJZ2dknEwJu~Gwa{w@Yd`fMV-=Upv?jUv7}Ney{D!5+h2kFNFK{;yhCp{ZMU4Qb1|
zJl^qB0vDVMS(WN{PtzzlGY`il37ZC`yXxCYm9;2?!<5DD=?F6i1($x*w)vF>u;{AK
zME@Nv*`+{&3svo%`qzHsH!z>X(fsO-ARNjsoG-MQ<>6TwF3Eqys}e;cE#Ay+oz*-g
zGZE{q`k%ZaG_(&N4b{FyeH74Vk(ZEH(qzCws_z~LJzlqTnSB|yo0SDWvoGEBJb4cN
z`AUkt_|JG=XecrxUu}B!IV!s>+{-IJ!|a-A+}}Q|^IN%w_LIBbZ)HY`g_y6-Y4t@o
z_+SYEG27zx_p`0eZ+7g80~S&)g|>DfCCxauIjhYR`TN`|xtgq%JpWOaqOoa}lUA7+
zbSw=QWzjHn4x^M4P}x+19zv?J4of04u_R8Lq*CZO?BpDy&cn-z)1P9jQyXNpR|T$h
zkp9OF_-RpWtaEa){^lug9$KI0Gsd*m%s$VhamyAZ@bJ7<Csb&<A&G&-ygu62U4cA|
z(uq2=%RG~0Glr`0>Kpt)6#hBk;2Ss91v<WL?SvZll8jPyt>??OUim)MWR&e{nrv5f
z%4?C;a(l_ia~Ezw`3ZyMs4KQadIdIG5p=OVzto8k4Gpl;g+Zbj?4>@57&W-uJrYR6
zHC5wXA}?7kGG+YsRqWy-A`$5du5ivN0HsE8F_a(Ix>QL|a<DEceDw$}ePA0Oy$IXz
z%BztHh|OWorHPTG=@MIgS<NTNX^o1D*`ucOe70&DP^lnivsJ9FWXNh-?C%#nZRk@e
ziQQvposzJL{_k1&C;I(a5A~tedG6zB>E2WJIv?s)vrcQrh)%FQrJEW~ES9*zwm+kS
zyW@_?t(gr^JR#WecEZXf<zs5nYqWvRkDI$+<JwhYCp*!RF0A+F%?!U_@#ln&EXN=E
zi(gU`6jahTMcD5=p!k<z?hwB-T4;Y}OEmU}YvxSxS%CY%L=2IfSn_#2GK2&5b1L0B
z+O)z}T{W{pxZ|Jy?G@{s*LA%amA+Eehm>3@sHp$iT&z?VcGc{;sCa~=j*hbSeU<2w
zx@y*g#DU!StA_)wp+zaZpoaEvGIG$j-f_qoUJgCb7h%X-EQTIX_=8Qpt({VDtqXqX
z3=1x2qaBzZkP6uN_(0q0A;E*R%|%$L1>e0G#IP0^`R!N|8#}kgD-Oh+%$f<lrKGO@
z2@SNOp8R~<Gd=2DsWFfEp(?eWpW>Hcdxl862S>!q`x`P?rvBy8dy{qG@}zg#Uw2*D
zy>DBRcx|y=Yv(BEJ19QG5<6z3qpBmX+zflvwk0@d{aybvo%1Tos`*d1!@>~i<RUOW
zzQXc?Za|c%q`1$3L0rsdv}CE||0_)}q=10Q3DTzCDJemBVcmW%m?gIHL&y1hO9_lr
zhz18z^V<cjJ&-t)k}lZkCEE;q75={x2e;3AaEdl17tIX`HhX;Wu+@_A1IS0r-{&~H
zxda4b^vCTBP4qicuFvoZ;3U|hxRO~GebinXZ*^QD(n_nKI7rTJ)Xp0jxQ9F<B|Bs*
zeVuByYDS8drloe|uk%-$*XI2YByVQ8S}Ull7rIVFv~GaM0?OzNJJ1gRSn6b|%*aqr
zzM!t9Z!v%5N0a|Lq?#Ax7n5>oQ!zidcF7rr1kFJ3?yek1^hCYEpTej+uBWcT1NoBJ
zizLhW=$YX)7W(a~H23Zln_qlx>LcYf<MC@LcRi>~2|uhniC<dK6TIz`_Le4N(I8L7
z_C^jI)4G5fOzhj$b_>pqD(O1UOAPx2M|aM;0EU2Q=#rd*;WnaSZUvzJrpIY-L~$<;
z(0OoPB2Hr~Mi?*3U+_P39P8SZ^M$i010g%(OEOffz8f}{GBsO$l1~|(yGdAO4r_q|
z=X=0q9G4ar+9<XLQoIJeEM<1qc%kJSG$eh~Oe^g67CR4icg4lUd7ReMwr*-sj=D{M
z5=!Xq?zXVCl#&!zFSA;JNiH<j0W`D+vklNK`F?~(UI>+pot2F<I7D*<QCKd!zx>0O
zS4eEvdZzvkQozPsdz;i%B)`htIJdeUXJbs0Hv4y;?K1DjZ(C9B@&*i4iH-3tXH3nE
zT%hrReSc9=*-qXJEUce=da{vI8oZo-!a|fEnAiv~iSZQw<#L2_v#~{Ll%K9ooq1=p
zPixP`@!=5qdV~)a4`dV+Sc4-~19kDWwN;!_T<XoabrY5EI|cga|5@jXpj4uAvOgf^
zb>+b`9j-hJFcnl8DYUS%!t-k+i><6d*_Ej?kO1N@x|sCoJ<IM3-dCSXe0@3wv!dQ9
zLNqIXRr%Vs4Zw97PU1qvpDX2Dj{Ny!0dynFydcmkWwigDu>g;XD}?KT>y99F{IG%t
z2#FAGQc+&q(Jsl4T-`49Er4l6hAM-ysQOZ*rcC@bpeSFt++DxjLdFCWC|f@O86hNm
zrJ?@dtzI&JTCCIEzEyEEp3qxB@=V9Ce5_ZuwYTryked!_1as(nO=Ipw1{;O+1ie%4
zG%<L!oetL>y98ez$VS)a6%|bs7~qPkokb61`iemqs_B{%VCg_#3Of2Mlx3B&0i&M2
zHETf?XrfP+;)_grK8zKczIydaB7(uz(pKfS1qGh%{`T=s6ZuJ0)RgO)sio!4qL%B7
zg(eq8Tx~a4AoZP`c0X6C#e0lz2|8qPh*ERYQh}_;erg6-6A%nkW4U0X{i<`T##I7Q
zgF4M-d8nH=3>dsJ%MC0LG(SfBct}uTXVRL!6I(6@Np$8nh9~PYfBmANXMc0j)7m;X
zQg)C{QdE=P4qhlK!R-9jvs&1B73Hx%!=R4%_Ki)EO$-4nki&}$HC3ZtFg3`@<NKy1
zyJQYW`aog;G{#7IUD4G-F2;(<WgeY1RjA2877;?hIPoiFAOWG*pzF~{p38ObHd0<~
zbi8b>BRvt3Rp1E93%k=<MXir`sdp|c-<1XKqk#-*&WHm}#Pe_;(Qh%w9p&_UgwEP}
ziu_E)MFq-sGbgkzuh0y)rXP_L9h@?<p{Yp48<$M?IoFVE$+M+BrEixxcQh52E^foE
zS+(1jv$vjn4!6N$+$T?-fVUp}VwrN#aj@SQ6-GS5SpthaTQ}$OSV?Yr`pTD^cV=g2
z{U32#?aU@y&ixg1-VVGP9GOj4zCrXbGXp+%w8$7iKukQ+I~nKm*PkRJHueJi^mtcu
zUXZH0I31K*frpYl&v52(_KN^4q!=Q-#ghAcADTdQ@dBmDwcdUe@_?vgZL1GJek;?j
zg*_BP*z2puGpAFBbS$)fiIPp1f3BNl3ILG!3@Eile;p9NlC$a0IJ1oYqtZOx+Vjq6
zy5+k(pXXvr4$e6N7Ru27mwcfHkKrG_it(UA{x9|{7bOq!w42koB!=5IEwM6d@iRyt
zfTuEnJgnJ69d7dFq(4WZ9k;~2yjT4D>H1y5`;DZHH)R9mhEy}(88#W(j!GM-E^)?=
z>Scr(O+>)3h&8(?`$=|1@f^ovB|H@b-Zi~DYGR*$dj*C)tr1LQrld*Sy~i~b;Ks+W
zHDSNYMII7zHd$qu`T%Qjd%FkMH7!6g@niq$>@1`~%Ih=<SMLlWc{$w1$6v5+{rSau
zP(G$;+1_53XK9T#EiV1HHogV}?Q`l;iYbcYqPRf5#ClCN@v`*e_O`|enYrq>c?+w#
z6)j)?h4k*{1c@7KRm$hj91gr%8H+iRM|*8>2eIx5d2BL2p-KVS;Pl@K84{8DjV04i
zQc|=(Ggj&o>eqfIRM+-T4vx;wY)&SV$4ZN)_DPMY#tzojUPE)>i+lOFRJ*6F!dp}(
z$bw5<S@}}yGF;cp(A@kcTC8-4J-d#$!g=0n<dz^<4(i9KAD^T$`c?<tqKKYZnA=*P
zbz<l2+t*RBiFv24M@C;6pa1$*!niBWZ#jkh)vf2}|9sJUcaE`#lVWh|npk~Z-4f$F
zx*&z2ubIfz4s|;#E*u3q+l}&yMqS&mv@wykdTw=$lh`*@{d8fPQ!9ULLt9qM`G>mB
zYFrFQqT!IyJ#T#){3BZU1h@1Bi^@ceojJRy7MGj8dc)Hiv;@6ZX$o{Sg=6taa-DHv
z+(=6OMRjTeB6+_PVxfoM$(SuyzYd|QSNd@GPo;mGu_@axy^%d=!nsR&%ZW`lT;mVY
z_)%Sxf?Gu<`*ZhYi#W<8Y2}Ln|4t&UowGGw8%}$}UEF{v>bfs?6OfXzJPW<a`xskK
zj03NIy3>_hlzks<SbY;b{Z4&lkl&P+6~mjVEE7yKx)3~?@dTrKt+!M6cb%wIsbVM*
zx1+vl>kdN=HYTREoh8zGVInsXwOaz#mc#x@N4Z-R9_5h_??;D(nf-7gK=bnYzPoql
z5jpcnWxW@@Rt+j(s6!Bp=aK<Y!pU+S_TNDzvdP0iNH{O`-Sux1=k~Rm2`Wfrrc$Qb
zMQwEWlMuFt8<&5P{=p@A>t-@H!1_u{kfA;~*hg#BIFLeYrtXmA<}^nhZ;EVAyJ~S{
zD%kU+Ml}gb(Sgh2RYEwu3C`K2v<;8xsb?tn9w9I9o>PWGws%`0ah!x!!tb(R7p|NB
z9Y1+^Zf1}C+1`FJRi2aN@OC`r#Yj!lPdQA&8bo3@lQN`zzxL_YctL19K5S{Y)G6pt
z!fMdP!Nyj(^Opn^Fj~bXQ8n>XGk`kjL%|5j*~MAlY`p*`YBi^;naHC}Jr-jA4Rv|?
z4<jQOH@yBq8>%(D+-r-(B1CKW%lM))DB9^TGBu*6B*5@~Zbf_uxJ2wW-kF{r&BetU
zg;@>x54^*s^l++M;K3o~V0m&8Q>J%BM527*;<+*v^!n`U*Bmt^ceJ<E_c__bBC5}S
z#PVaHIXhoZ5pJ>_<Mv*gZne(5uY5ptFIF0C_q@iPchLUmvJg>M-h0H71!rzjenD?i
zqCSht3p5A2!@Bb|WwwU{?lK4iCN1Zc1615`<L=DgGi*}A%b^lf%L30of0py`m)V?l
zvXO*&%^hX)b3}Jptr^0^**92qKRT3X+`Ngq@s>_i^<n&I{ElzBpxs-$Q{~IL8?R=q
z5_Mix30d3XPMqE!@Kvrh+<2UhF16}^`K|2q*Yqt4A$uvmue~4Hh$G0Yasj(Iy8*TW
z<c7@JP<C!c#`$zTE=Z5yAP*Q1DOH_q`uX~Tb4i|7v7%-&TgljIbmSx3xs%P*FWS65
z1A(FOev1w9a@C}V9L_J?TiQFS(a_Qj0vfuchf9uFvz7X2GU5DfT9S8r-rPlXN=NCD
z)j9ht*Po2Hwy;XOZ3xX``429)$_m<DZbzq`4(F363>yb?M_L_GHOEN-u;KWT9~`|T
zCoRBhkZ@8$D1o=yCnv){z1hd$|LD|kaNLtTXCy<(R=whfhMfAae3FW^9ZyK3(_Dw5
z-QoI|^Gsk@9Z$=bmX|X+%p`}hQkxNKa2DC91X!*XMs;+2j~=XXE1;Qj-?}*D&0JAX
zePh|9T*2`}^p2DQ-NH~s@e2o6LzD5C!NKslFUC<3Zc966g0J46U?qqoNlzYSFR<|q
zN;+{7qaELY$b}}&tVf<5*qRl-9}JYsFP~_*7X=6kT1IBdVES&+KIK98C||0>7i-XS
z5m29gW@6-A7-qy_Hhv2&<&D-|p<5Im4rW|_<8HZxi@~|ka~thg;&PgYKWB6J^Jo={
z@|5N0X3&H7Ky2QqIDz|WL$uG&E*)D2wQ~dn9#J5c8G^(@qoXBk2w-)%TPta8>(H)s
z1MQf5jOVuCd4s@9n$a>#CS~_eWv5Tya;e8elBv-0@=8}!mUVesmv++WojoB9j*fmF
zChqGxarG20<0moBwkHjI5eb1&B}C1N1nSfUBbz&W&64^^GFLStjdP{yB?9L3(~8{r
zAuAt$Plw3NfZL+C@Zghpyydi5Z{)dsFQP)yFNo}<jGgsj2TAe(E^`b*kE^E_N<+eX
z8!i3YwZJI(u{@HB*Y?ZuyR18lM)5QBNzG0NDEcJ$cYz0w55r|yg==kDVmAel*L)?-
zYJx=f6^Z*FQ462c9GI<zN$$i=AeugWXHq^x|F2i?b{E5?4tXGXnTXJkV8xNd^W^8_
z12_xqSHFy!lNfj%qD3R}_pf}ej=Be#P(BKo5faj6Y;H(GGG@g>R`YsaEK<O=?kFU*
zXdtYj7?0Gis9xPgK{xUG%YWZI$IsKY4bo>N9^_Pc-ro46ZPP;bd$%+z%H-2QepCBX
z36Int`;WTI(^4k>e9em*CVpRCb(V>P#*b!!pG5XEMQ>4L_B|cas!kuVtgL!t_LzrI
z4HVc|r_!;~7ik#xN|{__nqO3WQp{ZOXLyD>2PfBwe1-lp17<Wy`H6K#lKe<&X3;?@
zmy)@5&LNrqT}qpwwmdWA@bdTU@S!HGX5{omhpP%cN!UE*@RFpGH?(;e`^M(6%%@k$
zS)=d<2X16fzFaE9BklYn`hm$kn4?d9oX*~)&S*R6Jv<?NM-vB4T<4+gcZG179Ur(a
z-!-}C$@j9_w7+ExF*X#k{OzYqvE1-+^@+`YPOo=GND%I99Z6!VMrKxd+@!cVvUi<s
zjPe*RbV{)qXuj>$zvuFapj@fhd;vL*my}U+CN3K(WAmaI)4GWB_hZCz&Q@2mFU~az
zk1P$R1TT2S;K`p)cs!`zsHiBxv%7p^vQWI&lZPewrD1`g@53)qSF;XDY97Kdud>s(
z|9zlcs?(C*yxN`bQRgB^)Z!Pqr4mb3cBvlcbe3lq_E!vEZvHTaB|sqkTi6T9Dg5j#
z%_o`m@$B(46n_#ITCBduuN~}WN)h#~;!wla`Vuae_oX<nWD<Y>b&>x4OrFFS=LUSR
z{A<}!D{Ka2s50SEktp3MdxSUZOD++SlgdM-wXpV4a+H+Ki|ZJRtJh({g)=}<=;~Zk
z!F^6n!6q9%nP^eES+HnZTtwIQ^>*3Y>$i~(4&9<__Zx-7v`i>?!at*17g2Nl`#TgK
zr_%r1`RRkx<i+fA?y*HpYn=Jq-t-Cl!fop!HLi55{~Yxf16pRvq2mOukqtO^;0UQT
zP9twtSCs!hXJ_Xp&oU>$7yr3fyXP{-i=<T4NRM6bwFw3;zcUHYc>A$=vFo!?`fz!U
z{G^Bt*Y!t>Mnv!KQo@ycE1^m6Ep2A8Inzh>SDBpMj%EmN9SN={A{e=2IbkiWoVf!W
zEj~B~)Ai~b|3LM5b&>7gSe`e9^7M_3NH?__tqDWV%rN>=I_sAZ4*O6dzhbJD`<RLK
z#4nhX>9zmsvW&wrjV-iVqWZzgNMp$AEB%D$k?~TVg)a(KHRa4*Wz~e9BrR&g<$h-|
zgP4K$a~2W&aaZUgQ-QA@^=7KEsgk1a_}tRyO%FCLu?_D#dP$X9NI%qhuvbXavlgVU
zzg}RSI(zMxyDE%An010V4%A#W4$a-N+E4!CkO-tC<S3=Dw_T6~$?NZqAKL~Swf)_}
zPcrCm>FJm#$olnX`~fK|qm`A(CyO-qB>C*p-hM7VXJ^TA>sPhf|CkG=muARM8BR|1
z^ypd6#)F6o3r&|rPrDA2Csvj^+c&!C<Ls{o+RfYA+B$W0O#oFBiRyP&n9VP_V?O`z
zyVqomN2vjkB^Qou@5BEQNe;I002nrW%%T@x&(F)!cXk56oabIL7!1u#4d$I`G)Ced
z-zvP3YcLpm{Df30O{MI3aQ{>qefb;j`38gx2^&2mY_!p6Xq43fKtSM-X|eN0j+`j)
z@|DTzG#V8ExbWPgW9E$>J1Hn+c!xqEZ@VWk{<z{DQTZ*?o|B`V89s7+Y4Ht5N0((Q
z{^8>vG$d^F$War$yaUAIiq6j4-@nGsPUuj`747)oK0?TP*=Rus09skSMpo}WYd*t6
z(3+Y4v@et`3V44lZ(6MQKi|nt|4MW$gBs>4;5vi|-S6~&51Q(Y36V3#M@~O^V*eBA
zHacb=ox!+t@vM*U-6^fcjE|zz8T)_S1ps5lPZ>WUIy*Cs&-WfNYQn+&-)OZO4-c>S
zIZKWn+S6^HGvl9^N^0`1-d;%OT5fvbja&fWx$+k#thiZt)zr=x_%t=v>n*Cv-VoP_
zeEow>o%{F-YpTk8d;&{L3QQfI`t29Xopn0R(SzTc$}K<tkUB|CQ)B&u`)9H2WU{)W
z2fnjxWOE#5%zW<H;k~j3$=LBxanHVRF!>t*h@ZVAKkssWUY3`4K>VD9pZ4rjtCjcn
z89H<%U*LP>PM<1O$B|#YHElmT_r($65!sn(06?KoU3l)&d&_l%5JFE-Yi2sl*@gey
zVs)*!?%+P6!?7Y{mc8)9Bu-d()z_c3<z^8b4zkEqaaG-+WTL|%02YJ@^{7rN_VNxe
zZBK}t;m-HAw`Z4^6=h|dqf%)zpM8PN=5*@y4N~!?i)W2S1BF7JG&RoC%fF*TuG8sM
zs(UJys>%{k+07xtMgx${jqV<v73H^X?;t9TjbE6Zndau<)gZ0aYBc~*S0{GixiOe5
z&3#J}jg6Q_B9YU7KXrfPTCG}TF|ZjJG*nc6697E;-lNA&VcFTYwKU~qoo{P>&==1&
z)#Vc>$C|cXc>GHjPWuOjmX;KF@V#4_8#{H{h>6jTPOc0l(`YdKdTig)KfLwz7fBN$
zX9NX@dHDqJ+&nTao@KJ^Cr^#zI5@GGtjtTPrZ7yHjBZ|3KwxNjS)r^!0svRCe;+Y2
zf@Q~MGFe72=I3PrfVf6fQ&sNcFD$v4-{n}or|;;olaKuJUALvLPODKUZjT3g`vgjA
zs{nvRB2Ane>*~fQk;r8wg$4Q9{hMM4AvBQ5P96s!c`jYX;Pb0K-$HaaR)Om16trd|
z!$VNM`IC;)n~&cidLm>ek5gH8o{6uLnf8)>-x3{8f5U<hp&ohgy<{>808E-1*U~J@
z%t)nBDDz)<rJ=62s<N!`#+9my5&)PzZ>hI$Ky_u=#7Qw~l`{FKT~sRVnOTdw^d>6n
z=KuXhnbgNuXd24%^!6u{NdO>|NyEa&)9DPYR^#UGNux7JBvO|HhYTA%YINkDe{HgC
zjE<QX9WxIA^m=_-%5ihMkFPNMavA_cPMLWz?W9a5b#vnz4ENkVN}*8g>^bf77ITZd
ztwpO<J36|s?CfPSiMXa>N_4y_PH}a)X&)xb?$@I~84P;!QJER390#W=QAtU0J^;ke
zNw{$Cx2DE=4%g}VMXySw)#h7C8BCVZXnbbYVoxu>lHwcLnQ0oe%Fdpv)o9GUsWmDN
z*MUK2>9ltnH5xUW?a<|dxVrIY#Lhc$^e46EZjs61IQ->rNv7>4S$*o+W2Wr@;SkfG
z!_&*($(eWj@DC&s$<IHSfFwf*p#e>H@|dor$>)_fXim<e4IdjU{xcthXm0KypY9-0
z>E)Z&s%!Bs73(5BoD2Z`g$V#K*lI#72odV)<yTgkHp)v2O(jHNaG0pHXhLKR0JOKY
z*x9p<MgxcK5IJS0L2qDl9PI760N@)C^50|o0HCu|*WBFDn{(x6Ul<oLZQ1g76pA)+
zbwzWN3;-nJ%G~VVpIh__gK2jy=b~1tR^L0=XlG~d?%`EdS~xBuIx{21+@6+l+;qz*
zlV!hX>Fbi(YI$3;lZ$Idhr%@8SW_*EoI0~!Dwfn%H8e;q`y3Y$HDuW6@Be+zH@FgU
zmB7o7%XJi2m+N#Ir9#1VaQ5`_%gwoH+M!NTWmye&!F6zQcIE{I4-X0+4ggJ!b!@hS
zxghLN$ZKmv`FU9^JNt1HqNhxYPdR-Aj7EzAR3HJ6fCOL!Fq#{UMkDFIbA^wZkbdEG
z<kUFxJ)!{6-rn}Zx7$qH5fh`Mrq4Fj$pTN`-_QL90Ie;JT#nPEsc{{O_FFfv_eXjm
zgwP<<dikQhz1{!qcZ1e#E&JpHefuDt?~U#u2wu01M4^Z_uEE6yt<#{b39%qVsH-3M
z?3A}P$2_w@qgI>hC=$T+YnR*Qt>%4(3>(e&^8MebLjb_$^nLjny<VT0k(!y23IIzI
z-%P)7#?*eRDDPHL9sop5pH*}tx64r)wfcPO2`ZJAkocy!MkKBgb=g6!>QJ<|@p$g?
zw&p<Lu!=i3YUX67IXS!f_zI^)&$^m((fp7h02JisREmnb^dqhjd3gsoIJ%ttb-(FH
zUq7L%D_<h6>fP%j>2zAllGRd6OJhq*BLJwB9iq~rsOhr+K&fnZ;dz+%VK7*7c`K92
zqSEN*MkbRbkyLi+EiL6lOS8<|M;I|NI_q-U{il=ER!2^q3HLrxsZhud{``%=+keQA
zQA5K<|GaPa1L|9Z5JG*^UXWM1?w@{duL|A#WywGPt{Z&i5Y5#+c-=N2lgl@LtZQy0
zIvms^>EUFc)A<V%NK|s|-hUAtPCvnQ2odUD`tPShLPt3B+yJ1gq%b&SxT!sUb^?=S
zM<RjY&Vy=>PA;a6Dp9fU&TfuQyxyOSL?T7cm{U@mUsGLX*&aG{B%9-4Di<y34SE3R
z?9~15^r6^io@cV`y6nJY**iKoH#OA*fPX+p`JKB}Cr*xSZ*RMP?edk(^PXOQmWL=5
z^13>4mwsxhMFKBh3YBUa)~l*088I@Vp<dF<*-GVY&1$vU&BGG_7);jed5M<4_3-ct
z84_;V_74oLudfAw3Q@7IUyzftD*y}|F|NJ6Ri#w4G|R{&iZD0~09@S!p5A`d6=hw{
zrPu2LAT8zi(6BL{-hTH7Bk=TTZfpRHCn^De@9FCw5L#VPdgkN-Ad&3s*^ibb2qA=e
zM^z;%->{lQr-yF&lIiVBbU6Kr=IS1@VJDEuqD^bD8nk}W<R4_`&UnmU<hkrmM90!k
zaD)({?x|JEoUHTHXUseF%fB-&o}E2^sb4^-ytTQ!tVpd=mfXq@3y)ZsutL!;udFB?
zHFi>2NnvJ2%JT^;h7BLnp^z)u<y|_AoHElx;KO3sGnvc<i<iq=n^Vpl0RRS*HD_L8
zTU)dFK1`Eo)91JgypA9K(P%XG6l8s!_-0XF{OrX?4}K2-qsB}Q89E98T%6sm=BBr`
zHrung0MMbh9ZYjmL&DNOD^&^r_&xRE^IUf*<OaP#BCas~D3#XO*>MW*8?o%7rMYqJ
zgeW%G;cCvsQ@{Q^Ywi+_S}m71XI(yLxm#mneNgC#u<-F*j$>0(y=mIgc6sZC^Z$*G
zokyqA+vF{0P98GteCoI4$jPx|#!c2~wP#Nr?ske%0MKeRDQAwx#V`8Lk6!=)i)FuH
z@p1rQ&=^!2_3(l3z~YHY0BCBgkC+fWYV2eHqo}k9SD`=%p{GYHt1tibBmcjB5W4B}
z(vRQkC>az}s$ex}i=@dv0D#B*MF21u#tBJ$Pa)AUAk;k<o<Jfl>+|6PFJV)ogy<JR
zun{98=nU4Ctn)+%VlA9pT&GT(b^P#Nq60w)p@-|k``}}~_mOBcs-x3WeNkj4%m3|F
z_QK$@Pgl2PXFSz&5e}<Co5o-A2iNIwb;k}2_?i$GrbpI`kcH_7m<f|&^R8a%GAGSo
z7B*shlT2D)S4(st2qE-vw!1L>0~k9yTP~evc>4$zCF)vRlw~DP^>hTnYS7jx3a*pc
zZ1?ziWG1scFZb~~v|3mYBI|_(;o~d5nTOS&B}r{1R)Yv3TQMLDLX)<fOfs7-cws4t
zLTSH|*AHjxXLNUd$frAiOs?4S$sn9WXTVStTqo1%?z0ydby~&E0;0otD(LQfEC`YH
z!h#SXgwS9%fD1wZP!wD@=sWq(FJZWQv}RrEpOf|vx`!Zm{dN+CQnBR|ZDX&Np+Z(m
zakIdn*9#WEH1HA??&K;KgvfefL5L7SXfPYt1t9<^ON%wK2L6Hs`;Z|mSsBpT*>9(Q
zdYGQx0jt)KnJlaZ2MlHDt$~-QV3Dg>5F+b^1tCHRp}}mx7lZ(y7FTzam$*GU-*NoJ
zmdoizjk-V2{>0gb3=K-!3VMCTwspEDd~R^yxSgoa%yo>28~}+5_vR|DLx>PU2qA<B
zqbRyjzG)4O#~ZSB7u`cZbU1zIFg`LUX{)wgTDEbGuDOZmaL^N`D7sO;Wi8Fw<`Wg}
z%T+805kd$dgb<O`HPz+oR|7!kmR&4iFwx=k1@D<T!Vi+#i>{Y%`q+TexeZY2n(Fcm
ztBrcS?ItR8m#cWoD6(F7%P2w!p}}l0+%jrrP$^rpFLA;~dCXtjAu7>IZD}Q8LE>_+
zmzOuDrHJ?JCOQ`MbQx62)||_np(8w=OR%{_g&uMh3qoYQupmSTAvBl`s)7&zj9P7L
zR=Qn)P_QUbD{D|ylo1ulBk^7Np8K<NC5MyikN!e*ET}&iwc6I~OH3bM&xDt4C{dy3
zT*ZPASuZRI5kd$JW`nID1OPA?TC*-uxsHOxiPpdJ8<}Mn_|ZD&36rb8-PQbiD$(Jf
oeq=DT<z!Mg4mOdf@UUF{f2W8{1n0sqZ2$lO07*qoM6N<$g55^0Gynhq

literal 0
HcmV?d00001

diff --git a/docs/landing/overview-dark-1440.webp b/docs/landing/overview-dark-1440.webp
new file mode 100644
index 0000000000000000000000000000000000000000..6a141f639f0956ec33c6173e90aa71b06c831236
GIT binary patch
literal 42862
zcma&MW0WN85;j_GYuYxZF>TwnZQHhc+Qzg!ZBN^_ZQItJ*=L`#_jlL2$Ul**vMMXz
zHzFRyN(FHd5tCv7Kvh^kPDPH5K;!rM)fsRm5M>Tn5D1SxU6L3HQ66!wy*ry9ER?y;
z>tz~~*EaMORweh@2?8^uUF9V0D7fy+<%MTMdFTQ%htKlxX2IC$XYFVEnc*17z3f~}
zKK=#%1GkW`&?nVv@MYS^>%->y=gX!X!ny8U%UC<KuN5~-r|k#EXRYt>``kmt=k4d<
z8pssL$DkIkOlOs^*1OL~;Zf)v?YZw-r%7kMhv8Gx@TcX+_ABrE>cixA+3V(&4+}T`
z)8&)yM!V<-=L5nu{tEBt=kUk*>*!U}^X3h2qwfl@6L->E=L78>?<TJu@9<l|2kTq$
zTj>4eRp)(Yub0dl>vPP~=Hex)*X3LBEA6dMS4Y*`=sW9U)m`V4?~n)J<MMs=P4;8*
zdh_!`>>c8z>1p#Eze9KPql-7zSLBob{q!y7z4I#j^Yh_-`@Q!=^zbwHajkRobNut`
zbHfA3TguDgtL}yFfv-7F!e`)T{s-e*=LLR!)u?ax=gKGfNAV-V8Tzy8z3j8^M(4!G
zqVMPD=VRRG=UVXv!sq29K4f;o=O^!$@75Q*kC3(YO6`w{bM7sj#c!X#>N@^kf+8uy
z5MN4Y2XRZw88DR*O#A(>m`r*97v&=7xVWFl?MQynx!$H30e1ONt{1&1=dXp~IKE{<
zJ_kuFJpK=fKgc%U_rU2uvqt@*KX{C<Z@qtocgF$3q3nSm6Ez36;7vK29)#7aU1{^r
z&+nu0g*&?Op7_t;EgCpf&k<_K^g1CI`E+kg#*o-Fqo%um1%S(&@n7WfW(?}b!u9x)
zf1EVUl-F~jeZHy(#*334g>*qM6<+j6ma`pCrRmdMH8{5e^wSb|X_vjs_H2&{J;mTJ
z3X33UY)^~?zjN-NJ6yj06=qtCTv=L+cidoB&Kqf6@~twv?Kma5(pF-rvPb3Utr@cr
z?INFA_Sc5;@b7gIbFVl3m@?RZQA;TMeDO_;#wO~>Y2Z!&6@^39y##uHud9@h4%3ri
zYD7&7#NV>oQ$rZFtrk0QRW4@erb4*7+leh*^fJlLRdH<D!~g5p8i_V15er;la>4|N
zG>A-6x1F`H3JQF;=&oU#V9jYGxs3!nI%8%rDA0b^L*pvehQn4;=L_7R^nZTdPNC!H
z0u`4_U}GG5O!7^n<49M}iuL=|9m=I+KS>|y;;-tD%k*ZL?9e3yEcB}CWu4`ivQEH=
z4qg%|?*B&(V1C)canxL#*Uq7fwPB=jZVbx1qDW}oW}RF8Y+d}uz9XH@Y|in4_z{a<
z*?KqxPF2+~+Ic~JnezV>wk3$N&t^inAq`3cN*1Tt!@uObO}s$+0w^tOEWUT$c06S;
z1TvnJEM9(cfm$B+K1r~XxOl$B(#a0)X{U@<rA;Ev1yZpx_|9oV#@K*K4%vPBZ>OD;
zhkPPU2yqO?yyTD@a5m5b^sTrgI$eg|ZwOT>Onxp-ACCSj-G68O?{LLHDwTtyepFI!
z2z$J->@BeS@6z}`zkB(r<UB&UYtdcHx(yDjPAaDbNhamGf}^3iG?u9X9O&E>Y#@mJ
zPr^lx$|-D$M!Mu|8vm1h68bi(FBluBfw9>%=ek6Sk`bc*o{tzjraQO5z^qQUReOSV
zbsD*!^TGcs&N)Dc$<LzJ{uT=XUKYT9-Ov}%!B#ckiDyr(){mXvL3Itv>2w<f2p&sE
z8TVUMdv^&%8!Wbm<mIvg92{h5(U>q~=-9uye4AjFeDD!PLh3OX`CR5o1`Q|S!Ae*>
zVb?JR?f~YxqT-?1^}Rpy=65*lD@;DWg|7St*Be}fl~9}D@&=QyB#znLf4VX253<MW
zs~#u0rl+RAd<58U1``viG>5*BCcGH^fSTtooK9b*0s`>=hMP}&Q?I{*-!|1HykR-h
zsMD}46=dOB&LNQ}S4@p3KJn|3U(n%HLOQL(`fhYYO}(1L&y@Y+3Y)pSUWO~wO@0bo
z?3v@*)?+PlZ1Dd);CmO?DYh}=Ozo(n82neyNEle!pmu>|?xweP=d@g)O5$+$<eH;{
z*C|l)IsQJc7r@lcY23V%oKZ8~ULeaBa`KS13d87$2V(pU3_J7+2fXGG{X~mhraB|V
z_n%M8SO^8fq!O4M(~*W?=>DEsZRq-PYgdX|>khPh{wfR-nzg;(xe)oByASf{wA%D=
zxwYX>tGqo6hYaX+slyuz4CcQjoiU6QMj+$#Wb1$f^$*^2yrjqF5I%D|I3hM4C@p4S
zc(HmjG-BS8Ty)<@+c#+s56u9d{<st7rLFhd?GL0ig?r`xYx8m?S&OYtffp$N^8z^P
zn_Me2tDTgIHQ{RnMV+x#kN$J;EEpz=JhEUEbs0By{{27XxjT<n&$jSr??4b^5xrT6
z^KAnOPMKi-YR*m@Za80Kc)zUrdjtM(JLFUw#_Z|N3sSQ*x;D%!?mmqsB5vvvf*?nu
zUbB7i!_joH#XtQ_2j7be!=fe4>kV<{snyO`mvpL%#BBLpcOtgV^fXwHf>r6_FFsj8
z|0oKg{eD}#^X>Vi{Dct1u5yO#1`<2iB`Vl^+9<7|%YF<dITT@wf>qN^1<heIEI=5t
zQtyd2`O77USf{XvJoY8-&Eq8mwro=U{%$rUJOP`n(O?N&f#vX?`aODk;#Wy%5U@o1
zn$6GeEc-pie<9A;1jUpT=rJp|beCUBG;xq3%`5?qxod_WtjA;?((XmtSIX9tkw=Fs
z;Is2GvJ$ztvFKUiWD5CK)mpf`sYv)1+>;%}+>w;Io1I7ON78IUTA3wb8ukfL31Mz4
zR1z8b_EV1d{cEazY%kL5<LxLF0dej>UDC?F@K1gJDRUhdY2`*p)M2vPo&{N0=9=az
zhc=d^22vaMnDO9H48}1Z%U(>vSP|AZ+0UW=(-}$W|9}IUBqU4k)<4bnUb(Z*SP_v)
za7<X%CK_O?S`iyrAdc^^I+S;{BdtTq0SA3fWJ}=xOVu2yH#WGZod;iw3QYLdk)(D{
z^}+1RlMmO(tXRenfeq@4&<6iMS%_ne<y)hw4_AMJfa>WcnjC}<;PS%_8_3b=*kCu`
zJjfopaXxosOroZ>Oz~Y)-~4az8N0Op*W*oq=|A!2sijKyXWovN$;rE+{|ohLXiC9v
z{=ul<P_=*LXB_e+;u%aWMP27NZUx$=ul^6@{({-d1qR523)lY<8;zS7EABsBi0}Ao
z-4RT}h<k(<_+e^MbE3ElcRooSTts&N>v0ysBYh&B0=HCsPbu(2)%9Dr9BdXSCWJPN
z)@KR1HM4rU>wO?3@o7?Ej+zq>`swu7>!mYoqB9|8x<H#1MX0aRo`1uB$l^c^3BHR@
zrk7=_zQdE=+unW7mhgU&0AVdnE_a_o*M8p?{48xZlOS^TXjI;>OnKg)sFanzX7ff}
zz{fc_QLzeGm1Dh7>}0*aK?h%46oIyjWp?6&?xBZ%savNXV`0~p*4hud9s9+=icai9
z!Ah1i@~yjrd0Y)?e*g`XGugeM$rWdn7Ta-bZ^;6}MWzAw-bG`B)#txz4aZq-r%nr;
z_xYgoCXmk=lblT&>J%>cX$buIH!{pjp#MiGoIm{$3WEO#g|>~=VA}rz@qh3*AYP$n
zs9m2x#3SNNFioT6vu_sf0FBU|(9&aJ%|T?kSx@{8LZ|Q>t`5eyFnG0B8)t?v_jOHj
z1{{IeKuj-AS$8C(Np6VM9Nl<&2xgsv$p4wpb4Pln@ju@PUVy3V>*yPVM1o2@O0`Cc
zi%VTW@%XSj`u@6~PFq;+vw78QA#8wIhDxQb_p`ySR5DsGr6y{C-D3_#2kft#N*et4
z>~ALLhF0Gv4eIyV2(JG=c7;8<?rI@+S9n1~b2Mp{U+Q7=&=<lQ^!aZ##_1$iT5oI+
z(d6uOK=sR6xBf?!{pMv#UU9mPC95UU-(CGdV$5;c#u58v!f~qBQ%!1rkQ03r+~6!X
zH9<6`H|uggV2(O#0h!%?qW`8lwUxqz<SF0ip*pR%aGfXKi&GD_snr6sE=LSe$^66d
zE{z}cOZj56cK?N#P3=Nt0Uh4L4(dm-)<vN-rkEagMIY6>O!K-#Izw!ir)HSyOQvH>
z5|c5Z-$N5()jh|dGo{&7!Bd+zn}c(0IT-k<E%fh|{a0sfk(hNxPi~w8W`0YrIcRMV
z0ZL^Gk18DK#fn!X(wG<UZSId{t?3d&0Pwk0*}vpyT4I2aA(RP|Ftv#UQ-Yu9{pzHF
z`c+#!e-M~#O`!tfe!IucRp|@6#7}E$STi)&(Utwp$3LM>Av+Haqe|JXx(_@AkzT1=
z<xk&Vne1w|ENTRN@A{kWJKxYg`vtP{T>hoJoGy}{K$-urshMSUkYwqor|lWt{p!^F
z$&`rY-$1icZQfJu$d;TJHVamBkDgLgL76Q3qyKIFWwGU_2Yl7$(fBsvb?G&S%^KkJ
z-28UriBPcyio_K+0O^6xZ91|1mus{c=G9d_b7vaqV$GdS7Fr}wzc2w?5pV=CEgP2q
zabq=B$bJpJM+J=Ccz17kNFT~wKUMxRF=hX4mvX>IpPM$;7f9}p3w03t@=I*f8j+vN
zWTvmUY|k4qXE=4?D(qk5gxLPrCS!>|IQDxj6_3!J3LY$I|6;m0l63@3en<5O{W`ms
zZ8d1jve_4hT>D4lmLS6vSbWPa#?L!frBbFDcCuY;GTRxtg5Al>#%+p)TH2e$<q+0u
z4Ol96pYmT(5eVLsFeVCDELAQ~c>jR_z2Wk|l;6R$u}Tzxpkv(-B16jH{s0{6=DJf|
z&Jz-NnH?3tXXkg0;6-3|jTjn~$|`iANobYwegAW70JBc6m&F1dFAd&A7-iYitK)Cl
zUSve(`LiDFOvH;rMnl*Y7|PebC8kyzpb7f-VpsT6&(HL#wpiN<`F6lX;~0j2gT8kV
zM1Y79?a*4qdF!ZhLR;nK8%n_+3(y5qSIDmF@}4bDOusw)v<(*ZSov_J^!F-s2KV=X
zJIvKw4J4Rb%^Kf(>Fs0c-~l7x<mzve_muoG&6i^*-$43fD4QdhPg;Y~ec7Tu$}P3j
ziceBbTfw+TRV-KhNB|dGN{2Snq;r^pPSZH>Cdx&BIXf383@s&bG->^Te@GJ99Tcvo
z^}mETzy9RZ7u8l4HfxFip15ZysB%@3WyB}^Y@HL6k>$=bw4}*IJCWtN#$e4`GbCq2
zVJV7W3D*A1Hf<i=sMENR^M?rsz(NQy6Qo2q8@40P0QC9Q5`NMVoUhqO#{{aMhJ{c`
zKT=&gFhXlyAX~IErp)WH#R<=*B8-!Br%88-?TU6+HxZFhMJ>|C{g}Vz12@y}*DDbv
z=Kg5?KrL59;<a6E!H0zXx+}do@dDR5mL3>SyGM8bGaIG-H{*hDvcmE-N%`3){MW@^
zz9w~5p`2=0o(X>Dw}CE`_@tM3_tqcl$s{;tUj_(}tnDy*+?NorxBa>yqihF<?U(4c
zfBTpR_o}qR^9>Pyu>q06uOqJs0L*_qMM)=%zD?lEdiqo7v~tul|04cBs%I)jqQB2P
zPzB|ElZ#^flZHdQggmE#$Jz{k)F&N3O#iKp3E^o3yVPk?CHj1J<w5r#@3JvHhCZGC
zHU9c-aViAau9O0(7x!l+heUAzvCp`YgCLWKJiqAU=M6<0%*y@=So;5MFtGwh6c8nI
zlzz;-CDudOjyfUPE7P>HzlHV(VLV1pF7lefPsocF6n=Up<NXCzPf6VT!vBZG?Q-eD
zVBC29$NFEsDHd7(w`O?%C1C!T*s)>E+AkC?W(T$i!Z8J8BER?jk1Klb&%B6Fn8VV(
znpLMnRc7#ypn&R>*92(hp#(p_1vIpN`^y2(!7%;X`ut|xdQ7gPLvMHN>7KtyjdTCZ
zoy2(wqc<LT7D#0wmhoM7Zhf@PDouO$XP2>8qSP`m%GcPtztF~1@PFO-AK#}n76)SK
z$oCFTLu&9}rS)jGnXkMz7QMk+YDx(vMbYiI4r=G@W&359w{%Sl$>T3~o@M$fF`E*z
z2>pNerE6Zp2_ruzGGWN)3y~*4{^e#>bAFF6M3p10DRLqgf6t8cR#@LUss2SL|Cw$m
zAJMIz{_(fru>WQ$F<T<~zy3LurPUD{jlyHNYewyk=w;9Q<$qT5_on{6xBm<5PE<OC
zE!?HlQE!KTY0xUTlObK7k+}k*0B63~`=1FpIq8sf$<T$d|8G+)XQu4=FNmtXIVc&I
zYUO4ne@P${2l+#@8vI9PN(b%KN+^5t+P{^qZK}IaP^sU7B!Of85_2%a%<>lturLgk
z_;%ZWs^eUA+++t*Cw4%R_BYP`Ccn{KzP6#G!&<bE2vD(xs2X|z1}btw5#QfklVMj0
z1%TaSqdnH+Ts^%6d!r-T!haz$<|iVm0<IJbK|*=csQC(#W<bkqX35*wjfK@NonNuM
z2->^b3kcGE{YQqY;&g8B?SWG8PKZrjz0c*^6Z%B_%|eyR{l{!2{!{!{3_Az^(@mUK
z1SM_gmEx{9YSf+N#Xq3gztVBp#pX4Qmk*hF+EErsuB_v7$$n7n0-hEBy3=pW-|iQq
z3%f<#Ods0%+4b|DNw=8~T~Hwt9C+aa3%yNJnx|WWiz}`4mt=i3U6fV?;U7HOXaXsi
ze*a(cn%ywMrSE91qVa$JN`F`TyO$NG!pMnsJ?5YgV)3C1NxHtjRe=}&m3a?;nUNx-
zI>~YIYFM}RwU1VDxX<36|H+B=Sc+C!8zCt!$55Ef>f{jX?Bz2=8VB;|NNEx2#W%Hr
z7+-K#V8+4!3Ka`8&-rdBitn6lkF~;wJD#@0x29->??GZBne@88u7Z|?OH}wUD#JFQ
z8aqtk{-b}Adu1~GY=V{6Q<e&KnWL7&Bqkt0@&}6kqkHxsvPW=*_n{^H`v4*o1`FuA
zgz{w`AxuL_ZYQHo-$tqU$Nuii-=PH(m?<UhohiT)fbvxM+n=Vg+|@Q!)}B)cmVgVT
zKbE%-JN(Q2&~FN}Q>2lST-P&8^+#?yspjiKpxTX~_?WUri42YY&x5U&VKE%;-fN4~
zZzd5>`T;&ZDnLe{su?AGQxO9E;1|-t<L%bd41cIj4&nFj0e&AK+6(4VVyu^>z1Ur4
zMi5jXo>cNi__ogWQqZ%GAuf56$zEuUZ~0)d+G=}`FFqd@LI}Xo(ZQZdpQD7EX)65w
zaO8%M_himik-@OwN9$v1Q$tet9;nv!`?N;g?Ga*F;;)$JgO$N?SiE?s_5%u6GZay?
zN>_a>j)SDr6n5T8m5V4*KD6>Oxb`VkhHGjEbZ&2f_GjH11o*OI&fk~w1a0=CE5*7D
z)V6+Z?b7obtd`C=;0<64{y2~D{-L>3Fnj(I$EQmi^L6^C3bus5Ija}V6(tMV_&z+y
z8wZyo)WHQ`dB@8KT+2_Fz2dQvmr*SuVFTRN+b{MGN3sS7PL}iX_uqB1V=%~y?8ox#
zAQlA{-p<%a(@%@(cQk@jf+gmZyv%}llV7Dpf@(|zML&pNZMp)VUK9`HP5kNkjyn&y
zRLJ2{61z^NJNE|RzEE{C2+vi>zlqw`c?I)9wqwl<B78DV;yM!a3%qF1+(=PrYo)cc
zdHQ|{=%_u)LL_e(se*7JuRVhrg@!R1V>4v?p(U|3`x4PL$9$PqF<T&;(R;V^4FtI$
zx8%GUV~f{CD4@fwd^w`e;N!Yl4Om+i@mzETQQtX1ugU`JQe&i7?CD5|KYcIcatr1o
zj15sQvOIK-#YU8W=3>n;i#q0~_`7KX)+gcIPACp>3QJkP;{X%Sto5inF%r&2aDl4D
zYPi<N&w6Mgyi;J3btdSCteamZOx^Q(9Y7I~DS446vEQ8H=_}o30}j^Z${bLd_89}D
z(gNo0X0XAtW>i|<57D1)Cz8Y_%3(CS9W#|bWgWJ`gbM+2<Q<I{x&-ZNgL)mZ?fVu^
zU-raSX;<me7c_(3m#_3ok8c~{41lgdR934AK*<O9F$21){ghJcMEi+!+xU|_ZGTWd
zM#!^|ghp(V*2+G(%Swgrz&!~p0oklQZ^y5no27~UB!liIMGk&XS*HTM4!0_J^L#GZ
z%RD+5QGL1JeCbmF7+!Vzp%`Zk*TCU8&ru7Qc?W5rI&|Q!os8f_9Z%bZJSmAzx-{Cl
z^<6L3>8X+X^2IiF*SI>D0la%|lyNDtjqf*XU%Obu3tC14_7lI+-#)KLF%=+Xk$MHA
zUyy+CPWY*nMYp!2i_WSjx-Bs<@>c{Dc}ih_P&{EyHJ7L@Dsi~gY9|IU<iF9mM&CbC
zAKcq26@YGaI^g+Q`_RjleBJ+QZO3@``IHR7Q>uvqOs37odp5WB`6+%)h@SdoQay2)
z$G)6N-T2h=5UIL}iY*3sLWzO;`y{qS_|RsxrayJ}IS4;?v`?UJp`&^C#}?G7^Aum2
zO$)EX8`CRc`=M)(_uAXiM?YGtRBGhL6k%Y79PWL^7F&p`fN=<qfcbMf^x+%e`x$X>
z{a|s*hw0kqtcV03y?Uci7X1r*tK|ho&2%M2Ga0AiVt11mLt2iG5uSs9Mid~ptI<>|
z#V|Dca&i~G-de*N)1pIMdc1qaft)O@j<QibwIz8$J*|4CWG^Qg#X7XAc1Mwo2dh47
zj#J05@+ZAE5!$6e1e`b!N@(@!xsN9GXt=^K6-FmEH?#}>2|2^cF5BC!pi72S2&D9&
z5;{kFB);kF+*Nk}k-D0*Xp5Zv>kFclEM_Szyv4^4{6eKNos=IT2-f*>`M_+FN+{F)
z(64V0bh>g=rL8)NQW-BPhES>+z57wCrh_9QYEG=Z+h-x8Sch_MDy>v)Iw!&wK4k-~
zfs@~N^rD1=p}>4=v!PJnFD6R6Jgn{^S~b1$4d0_g`3!ia9ZpovS~>VS9zAGPVdAbS
z`N&02CFElnTgTMP1x9BC0*O$@-PSEo?Af%w<P%dbyCXS&P4mZR<-LV5r9aR}kc96&
z@5nTm1RwJ9k2o%Gqk-&L9=zNH@X|81VcvADbLbv?TWCZOJBz_=>vsvgltzrpJ`Pe_
zLA$SmtAHiKICq}Q8=Y#RvAe7g_Wy>%5j}nX*k--?`3xO1f<c#=!MM#%x0K?=n_z-j
zC!I||uUzFSw-$ASy1=tBv46^5rH!f=h6=l~k5YNM8$8$RV-OpEL)h*Zt?~_Ht76eU
z5o<ccX7M~$0!0dW?hA5_ksy8$8sVnxAu+i-%fk}dfnX(!`>JKL#vuKKPmXg6D{3A&
ztSe*Al3k@pioN^b@5vED35H+7k&$Omz*-|>>(fcma&J|HFR-50%0hOPAReErP&S;6
z^UL1g#IM;YFYIL-ZXHbNy`fR(vSQOn7#ze%248Hg(U!M<Vu;fu_os_C?2ipt9YwI(
zF&4VxtNt2zYF$37GdKtRs|K1=lh_k_XM0kUGvYxva;YOPavf&Y51K;D>7y&M-<BB_
zHA{kJ58YB1EH-4lli^lLb7QSN%N#1RysA_@ko703FDtX~41N_=w7uQwOlSYV7(ISQ
ztl~u_B{dThGR6po(sDZdy0fJdWu<9^r83Xe`LF{XRJEZVCdZYt!y&?zw}h>Bhs=$}
z-FV;>dPdtD%!TYVsr-<94iZ||Uh%Jy)~e{HWwSESjQegS2s^cxiE}PPy>UHBEDO@a
zV^#=K3=N3yQocgjs6xyI2WZ&utXfoBQHygbmwf$1;0*QiyPtrTy<f{=;u8h0^PFk-
z?~L=akl|ToS@A=ynuKTd?vI)ptYjsZ_}`nAm{OOEr)57mEZeIG>S&<!E@LE?O@RqA
zse)-^7H=i%#iLS?VD!?8zSr&Ticq@eQ`=f?V-N;@y4|E1n0wg>z<IN-Lj=G;s3Ut1
zmx_XWXQ)}eDCHTZarlYV1XT=novPYCbz{Co8e?waV&eKdj-B;H9?$ro8kf$-S+EWv
zAgDH4LsYhn@DA>;eCUKX#X#_`&&D%Xgjj!qB}jmN?$NL@vyvch9qw$cgd*pC!*GUV
ziMycrgs)U`M+;P~^nxBhekPX^nY%VB?-E&t@tb$mzd-c?I?)gYgk4Y%q0}uc+elKg
zS7kvE>`kZM9~5CH5ndL-*dmDXOv)lP_BVvOep8|zQ@A(i&|=9Z8Y$8w2pgR0oc1T{
zO>-JvrZL+%zA;9+_q^iK+5J6lDgkkha3A=V-`WJz9FBbEb0!u~%nBu08}?GAWx<!2
zk}n{7Swmue(L5QpyF#L>-D`wPKI1#1(=Q07v^)(d+reHqx@dGix~Tz+w=(Ml598UI
zVvvLgq~1Uwt!Ffnwn$!}+}u$&p;M;mA{hxAOQ~uKPvc%CoOnjOL(o{qvx3P{qOmYa
zPPiSNNo?F~>D~$dNZf9HgRE+G0P*7vLldPGF|r=RRYoVz7tbp1bkKYIl7n=@`*1XC
zPxUew|7?{E0+XB92A;mq;45j+^@Btg0K(ntNA5ucyuqE!ZN`@SFGeNst|W!06H0b<
z-%DzCJ@8SdyTk064Of!OrSL>tW=SW#bXb&w*Dv=>dTrq}3K+0Wa5$Zs`^=~1%4cdu
z0L$fHsUR6NP|eW$%W$hX)qo*o$Ki&W<1aAb;2facR;`E;Z$UVG>HcZ7)(mz6!njZz
zqD9hIDRNw`Vv(eJ%3dYthqbyD)`z7Jb5oatV$s>^3MdQGAhfhQXr=9(;Hf<KJ@y0c
zT_%BQTVV*OF$Jq)j#PXRqAhlQl&uMR5cf;9G1yBIkc_3XO-a-n9H&J%ja3j<H|jm2
zPJ4MGaOFo3^29r-OC9|odt$rzkYvDBipsWljWRXxs0cdc(&FKfeVy5MVkTV4=tPC&
zVTTTzdvd$k!jF6^YFv#;GKA{Yd8SC=krN@54#pn)<%45YJYQRdbGc~_ORk4?e-<)q
zAh6((KF<CgK>6Z5f_H=V<Vf>nnGCu07-DF*P#YR~@SMAS3DF}iy+aftUMV0e^^j5x
zorgh+1Cvm5WuCHnEk+Wu2M6A>^-{g@jIvpcq&qsrN;`^U{IVhg-ZRokFnnw11gj0h
zQQ*46V7Yo8)G+w0VFvfn$w^s)=K?;xU3f#H;cZ_a4X3kF(cwU)pS-6m*@lXt1%KJ>
z@exu{l`QnbAt*kp5nf=d=?g3CSLC0(>wtkoPcNALO8h>`Q&nQv$Swc?z3=eD>^Z-C
zH<=MN>KI6GdklUz&H{(cZo4-We<YOsr0Ua1<F13j5lT3kHPU$8ZLJBLz(EofMnHR2
zfNjHNDw;L3Qiwv{FzV16a@R?I;I=VH?f04c|E|^(|8?pA*9W`<5ETwnraH)6-W4c%
zR=EqT^y3DSe45=SB*pXb7sL?-doQYb-$+;U_ECSu@(2pVB)EjVP|emTA$+a&%68~N
zyN-;qjwENsJ&o*h)XGvt#ICPCcuipYV&;MfP$wVOO7=j;Xakk~<U>tjFSByLDTnMQ
z5)b=4k&~>@G=!>8?*s!2EDfGnjp_*3tgZ75A)#=_kEkC;Br4>BNethn4R%ro5|_6+
z*A-+U<z*Bt#PC!DEQ$Hqn$*_q_=mQIjbU=Nc8o?YH1#SI&=!}c!e7kRb?V9ZTp+m=
zE&=SM3-YL99K~~8nSP;u%@S{2g#wva0CHvY(<(?ov@UCB2EA(ErZLK`I|>XPTbW=O
z;U|3PM18aM-7Eysl_I_yaH*%;EO!$f2q8=Q$gQvMrfcAT8_bRlXcXWwhbA@W@t=bM
zI63!ZC{xhsz<ePw*?eEtO%P@543CLAJ>ZY|)q$~>C3_3aw41SkV!8mg_*{!)>lh1*
zDy#7}HU&<<aItDI0sLItlXV;$z$m2P_!v+@sLJ=Pnau_Ol;A&xoho9VbvAg-Y%LiT
zyLiYQC@<ukNk%G@k8!^2!ieq^A+BhCceA=%aR7+#p+)sar%>U9<{00%m@>nea*$(b
zsb957WZC&5_8l_7wI8l(mwRCSN!Y4#KEL$bo$WZ;*t~|_<-MYlcrO?`>?<@u6>GI%
zeYL+s0sP}i`UVf}vZve~EJ|$;ZpRQ4Y=ojX?b!s5`?h^Q7Mt)S>0y8x?9mj=;quM*
zUVB;l2P6wRxzsQAUt#s|X3ruxd_wP0QO%fQ4Rhu@sj{AHAqpjm@^5F$;H@~+0g68a
zr~X*s--obA|J+)i!jBMOMjJglZ<~pnVh~#dguEAa)r#uvZnL_C4q;cb<AR*i`kXPM
z$}~?DRjQI3YL&EXYll`K6c<OFw##Srz=fimCr6)EhpOD9q7Ln+OD+uh<^uN_l?<w*
zq=rWmli(s*8iI(MfNw}_gWsXV0u{<INyocDv{q0~<f;weT_b&*8Ff$ud*LH>Yy>TR
zeqoDH5?mcp;!W<IU-Kf8h;=?rCx#GlbdOrLS(XC3VKiMoOP7Q(Ht+0lieqtUrn+!y
zCs+{eKU)Bb3KOHzQQYH99@dZpMGGv7;qeuhHuF>Y1U^+?66CH;0+KgujMHqwq`SOM
zcUZ?pd{nnCB@cf{xw?2MsW!;pv{IZl4@|WwzFVqZigxqj=ZqJvh%RVW$fS_EeM(XX
zBlhhEqFixUE^@{6;old5ySXwf$o<($`9&8RtemSui`ll)Jl0f7$32K|fsc*)#pnkP
zXlu-t&LDzZmfE`n`ICN+^yyrlwjj&8GWAV|1vNo%)k%-MUdI-kll*+vuFI1cpqg=_
z+ZJEkOa<0H+$@igs5G?t<Z2k|Jwv#uEbTm`c=nV>mF0?=W6ozq9S(;_d!!3zyT<@I
zc;nq8&#Khwg_P~jD1aZOYAr+zWh}|i!j}2a551`6{vADfcgGV>CUny38uZ5tUp$(^
z9IB75oA8`P=2D{`Vuq=_Y+H_u!w5(AT6Seue(;B3^zz^9y)&AxkY2<Yd1Zpvs$nQq
z_G9_N3O_rQvtD0#g*A)XZXR#u6f#&CI5Aa??R~wji&>0Esll_Kk&VB#>(4P`;BQYg
zS32I-;24xqH}Z^z0Wd;dbiZ_cSh%vtF`OcF2-`EHk}DK=VgTpWwLED;+u|3)Dp&Ty
z$tQYzrj&Te^HyL%xL*yphI7+=3(QnIS>IEbZE!`d6-Xnp3@Y#7XT$8RH|}U-mDh?W
zGvBLDoE$(*-{+B(N$icxgrsp)Ig+27MRYzN_>LDaYlcMRG~`20dSMgKNx50cVS7%m
zmgMos(b_6Dyx}KXl=TRMl7g0VD-8>?ESZ`w!c9(uWkLC(2%Q97QRZ_1OtMfamN#aP
zB%KzNz_my{c?AlN^CHS8ZvZ>g&`t;_%eQpF{-KA#8c}d+I~~easGVY_9I-@|`Vs=`
zOL^Z~(LFopNI-S9Z;b8`7s7)<V41FY>Ohsz^h!nT%pY*z;wh2`yY|d(1y%8&>1W=g
z>$Ww%I$y60AJDIU>FuU?j?&jWI&M&Vc}5uOyexf6_B|QB50bQtBOapB0P`mSv5<C2
z<a1#o_AzuO*}D0tZ#C>EK&M8=Ud0i&{230yycbPE!NWiHa(g|I4Ek#&GjtS)kck;C
z?&JMxDhDzL5cC@+(2^CHnv`<XSJUOysZ<+p%A1vIEDrrUBn;A={zx#Lbs}H)2kHD8
zdSlp@^fTZqcyw=MQpZFhnONvt7sD0&bF~G(-m3bKfy8v`yr%lp$+BRsY5C7af&G-r
z54qH^VbJ98Y@P%Pt@oSBmqkP82I0QG94Bm4UWvWdff1wPj=IaGkkRE1<w44uCPf;K
zK!h9I^OP`wTZS=C{eacrsP9|xQGH)U%lAZS#Wo;vIFM1G(Q|J)%VDBi)Cr$AND&;$
zx*CrBgX`ndv%BgQC-K7@a~T5!dIAE`h2yt@=*WVWT`DIK<DC>PwBRL&`U|z?nHJ$f
zP`;U`8|6@tegx=<THm-W%w|W6VvME7Rpu47SeJ?`$9MqOQrBVZmuAzcQ^V*6n?H?W
zA3n6Wg0%>B@^lZL<qR>`4q&Ka(=yj*;_JKEDOI$CJVHf->2+rstYg{h8t^Dr-)%Xt
zVSP{o7YhcG!A%>}d_Jz6uq!Ana9HyG4Esr8?73(TR4aWdiMW)ElE-V!F9#N!=N>zx
zv9wPzX}T1ATjuzLGs|*na1p34E;w@btesieL1k(3StGg(d!shK;{9M^p9&KoB=!Nm
z3xbVImGmZBK%iO37L0Zs!&x5p1@V}W54Y~~d5&a<BV-0=I;mHwbvIR}FaBxJuLBoC
znk-R20`~&%Cn#@S2_%I-QE!QNaq(G(fR*lD3Nv0oHs~L$`_F-z{V?N?NX{73mv~yM
zPb46$C)^zk^%lbNh*b<s>zJYJfdW-e<wYmoNr9I>#|8d`Je2gV4-hlso3hA|(_5$)
zAA7hj!g=@R`;j-mM`C7B@Uvvq{CgG174qu&{8MnM_(15BhBxlaA?7;wUI1Dsn!YS%
z<!aCmC}s9ppF;+Qo4jm&YN4;5nEQs|h1TyhIvHG8huKsr*av$sIUzexQtT8z#w>h$
zTe+~*n0cc1Kd|l-8FGqnhT7ZkoUFf%tLib6Y&b0UB?r+1I(ha5SgN>n6!9)FAtJF`
zLQ-xErsbZLd5=Ja6z$Q5I~udzKmD6&dlQe~p73`YgqDQCK+}j5d;@UF2KwiD0Sy>4
zRhd2rt^&0@5}ImR=B|Qr(LB-J*Zx8dnIoweH6D{f0eFo)7zY*-fOPL4lKk1tJ5+FI
zX_c~(>6FM3cYFdBg+}XQhtgO0o-(<ZcaIS-17)oUOg6;8{HBe9d7+fyWjvFt&pW$f
zV{%mr3_Vu@)`ok+5m(>h+G<|Z>KLM;%o`}cOydf}=5GK%Gs>j&n7=qyVW=xkHJC`l
z-U!Ed>LE1K2y}#x51It8qmp?KKxpfPA(4fgk~D$LOg7W7Kmb5Lp_K)Patr|QeN8UZ
zaQqeK@lX^~B`~Qghf7%;Hci1<v}iF&nE*-f3$XQDO`cZgGBS7+d&^dD)G=AY-s(_7
z@#kkrL?w#!3GY{S*BSIXv>0e{_7=bIKm3Pb(ds0=2haH5ZOb34f`=9j!cpnHW$F!b
z9%)#)yBT;cX5DZfEzgXlOFY}P*rsz!iGA;Cah#8F`mh_yr(clIy!T~e6zN<|R83|(
zOi5ZR9G7A>1^|ecbk$MZdUGPkyKGo0VwB-Rv&2%Soqi;mtQiloAU?xI*;B<zGNj45
zqbB-=X(ZFv<nBEjSaHU=ekbhjXP9o*;;6<QuenlK=v^fO9<tAV-xYz#788-DHFH2=
zA`}!rVZyH*1x*Q)Zoyq`d<KNf_N>N0Itg<tJN~$?O|THDb<VANR-{+Z#R`MO9*~jj
z9Qi(t%#)R>)G$<{dS(1VeSvz3-diZqgvl^~b05s|H9keqqw5FH<^5cXheP#3(Va$_
zX%qjsK0}5m!YuS-43y>&%sUS=Lt7C$RMk^ru0~RlQL>;U{&3+Gyo$sZ1zxHQ724i6
zVZ1CLe5#ndrx~fcH-UJ(bMIXe@l(|3H6e!QWHKhD?<+Ra{eyQ(eyD!HJvw7tmK=IZ
z;%*UGKTJZnn_}CK_cD(gx;3M%2yd{l`pq;bXzG-a_QrgN3z2A|o2w02S0^#jXAqw6
zGVIh7c%BhM@6_;8*_I<Fv%ZwpS`f~(OkM3z-><)ahPT@H0G*hJQ!@tgwV#{heQVu!
z@QxmGdfibz+&LS54E95>b(nLCn%!ARyoZ%ox(Y5rwxr(RX<+@qZO&+_Uv|msKlfIK
zruETOGBjYRW_+$!mC~9Md}&{4m6wqXq8EClv(|6Yt|3=O8kWZoZxXagQ361y1;1gk
zIP$Y)r$<0vmd;n)3XDS_F{ti-(NE>^(VMVcdIbAUf9eBicRd7=xpbR*_f5R;IT9i<
zx}_^W_eVwhIrmtJ(E04K=zy)Yvi4rQPfc!8$LU?v6!zqD41#gyWMNeUz+U&J-B6v^
zRXo~g5YXCvZgyOmUV^Zym~)9}5$oVJ$S;n=h&b{RMV`vkRRr#sAiJN5k{2sM^y}gG
zyXIYv!zT(V5F^$@C&{jeADjYmH2Y^bw_Me}9uaQf#*&wM)P*&-iP`d1C1*Z4Z{N^D
z;<`O~NQ{qO;gPI7s<AXZF_bsCT+GhGfB5X=0H7HM*^RBHf!;r&u#M1AXUe{1-?h6O
z=y0)t@IOd_JBTW!88YbdPxEqLqE;g;;XJ5NQlm4g$hlKQdfaT!3{W!NduGEA>${7!
z9ug<&n3*xUg<O@0ibHa|v7Nr1TI!HLrDe$Hep%c0<^T(!Y2L7@&i)cQ>fbCRs}?6y
zH78uTvWb{N0(G+)dWh=0ya+Mf)=+OHel>~p(qKV01|U?)a<FvF&#RqA`Yl`r7GV>W
zsYiY6hit~Viftu04~mE7!|h+P4VcJ#UGWn;+L|6`DnGaxiMM3!mw9@B+%!p1%D7@3
z8ATL~!CGA5Og=r9g)94vG91wc$`pJOe_a&F>m>Z@1Hc~VeEyZ~VD)}r6K`4u#Q-~6
z;NYE7TDz~Ryj-MS4njuFVpa83uY<{pJB=I^Dy+!z)vg}7iC{-E@0vHoM0+gZ`$oM0
ziA-@;(R;X0j6bx332V#5+vGXoh*{D+mF;x3*EwucZ!P;fn0Xb1_R&Km$1T>zd~VlV
zMBE1g4iG{<Nbo^w6dAwdG*-1}m`L><`3nCji?~4j0icke?NSCl9l{Q$Bb_rMsLd+f
z4EISTJaiOm^NsyH@p2pfbvcx|icSgT*N9-1=0;byho@WbFs@&ROJPESWlP<cyF0&e
z0xIaB^aIdO=g(EEwwSkL9aUzF&mI$n1-WhD;OBY#wzdKNDsGzXQN;7QN3^#5%A7H(
z0tRaXg*4=GU!SPl2+w1u*vD^A+Aix(lb?)F=ItmnD<Rvv<SB6q+=7#Bj+H<`TL6R`
zJ$9>(ulW;DA(yLtH-V`mE>KXrUOgzFi&T)mT1a(8YQL7}g^yAJJtxi>gI{!d_-P%p
zLvg0Z5(_Y!D<{y@&QkBnWbRXj+7^htJt->~3Nu)!?=ib}^)a2jDWJK-f>6U_fbyR@
zeL2ZiI6LPqVo-O*tNXF~m`h1|fA@86nl=~iN@nloIHKw~N#wiR@R{iN=P3|wTYTNJ
zrV%2_O`&x86ht^~*146_h^x;!e#tKZk*&78xI!-}4NEGa@Zyq`n=SZNBrxF)<FqqN
zIBQ~7;luT|lHH!=LCeE)g#MmJ&h@q`SiteOdzx#Ox*t&jDmyPdq3;W*<~Wk-NT^c7
z3@FWOtp|A~<|@M?gUWi;tw{>JF=A2~!{QYPB1!Ry@Uu~`l2a}&S6VJM>%3cQEXg_6
zlft$=cx7kYyOW^-oQ-%oBFvaGt27#lKGD)Ro*f`|6u7g#C|Fu}Em2?3b=Nl;LcNa_
zR_iY<!xCWG*8yGKGQ~L!UHd&XGCHA&zY+b`#FlG_LhGnBJ1$7N^Md$v@ca0*_2X*3
zV#<<M%FZvLGHKCgb@Yv^IEjQw26Md+5;7NaU<4u}a4>e3nBtH@4h)H%fv5r{+OTx@
z2cXW{Z#d06h9|K?KEM?oOr!T&&IgG$?~V>%;?Oe`^U(8F*QMZZU*}l#rP!1t^@l^<
z%N{```$srZ46>JqJ$Jj>xS;4F1cN_XFir!6w-;YY3i)Ve-kywvtxu+TEGzJF(Z@~N
z#Tve~lL}|$A@m)wMO8eCB_`(-*V>gtKS&WL99~;K!C6kP$P!_W(@#5}iZz;p>)gEx
zjx{xs=v)QMHc%A4V?-f8aRm}YPX~^^JMAv@p^VcVYN>}K{ZIlB{PO;=wGL1Mlqt51
z(_9RRZ@AXIVDR3(;&WH=-FVoFMjT#v2Z?s6xUQEpQllz{hWD|pC5bLY#>qYQB8e`0
zT={c2ak^BjHE?e;fLHbP$)1|PI8bR@E<Lxx)L<D&)vA0lwwMSpIIV-FMpJVk-ml+w
zitWLYDNe%_*z{0`%y?&+CCDs6rjMm(iyEg?^Eny-!WL6x2yTvnK7P9B+%|N;d+(oI
z4v7C4i=W^G(?~}$CGldN2Qm^6{~`2LL;$NIRDd?;6#)Gzg27EMg3jog0vrZ>j1LR+
zHO(rcph=Tzvxo8^CaH>LE1o3<_S57cz5!axBoyooyDIN4Gj|!JDa%ttL}zycod(x(
zg4f|7w%XA*fD^AjtfFX-<@Np@@%59V=X?Y*pi#CJVa;xp{OK-(o1ax8KD$dE<P2na
zq-Z!i>(Sp@4vz?)$5gKo#0Ca9DN|p$4+(F$Kco1ai^Fsd`k}OH@)Sqnm~dHS)Z^Nq
z#H9tB`Z*|d@1V)REjGs}g`O5JoEcZ?JN!b@x+I+znQ?hATn-02Y~cH228_UuBHdU<
z2O-%JhxZ|@g#^d=NoR)&Tfeyt_>g`3oRGI&YDp5IIWospemqPwa_oJu?qq29#MtIb
zk$(M=_!(D?(d{v90zGd69DFxx&7`G-1SD{HAf=yR%$JKDGlUJEc4wt@X{hC@XQtA_
zO7YSa4--aqEZ582l?c=m)7Yv}k7aBQD``c`k|f;8^IC?=Pcl?YB|Ce8^_D4B75a1d
z`1WKyo+L13Z@Qt~Ajgt-7;&!f!mm;3cnGHtvpjt2UMe#V&cc9~M0YASRpy)PQ{VYj
z@imy!?`}sXo|5H@Iqh-r_lc23`qY9T+8NRxg4dz$+|d_ZE5J%R{p|S)Vxt1~PkMT6
zYp^5Z$oSB#9}O9-B%scIX#J~V>0%gIWITuS&{UX7jd?F@L%@$Hyk~Jw_+DZ<b0n8&
zu>s6|qp;y@xlI5?xvCH~<rdqWU4Q*j{1B(6^WvakRW^(7+7a_s>U&MzteXZCDrQ0~
zw9C=*%J$S`Sy?<0B1M{XhU7Pj7wBn*t8GMUmB{gt1ti@4J#5?86{hpE-c2mWpkzim
zvGK`rxEBoD6A6a>T{RLPIvvys{Ko-Nb!Ge>*R5(;d+Qw#LjrKpJ*rN_WIA~YMrUMd
zYaC~J)I+t-@<>F;TSVPQ*-=P!$Qf<~G1`f?DjK|0lS#g}=|QmEXe~`#M2s`{j3V;D
z<(J4OhrGy6>*F7_Z<qb3Z?x9#Mp~~+0zI(5z6qKfmu&yy6>#pO(O9^OhGVO+FE*3V
zFW!px75%7^gwIU7EjJWp`R$T}Gv|$+<-z*js#ME?`>f3xL5sVF0#F*X93*H~p|HHW
zW6h2DqO+6mw=j0*k7Dw>f62vZMfjgz*{AMXKZ`1kxF;Wmh{_7<HlBIt1k5!SJq`xh
zX&@i2+bi$8OQ$<abtMEGUOAn!W3tn&3J?lVpgWu`AEXeZZ8@sh%oa^y<wO%-K?dkU
zANFb$Q6({PmEO#sT%e36>ZT%(>e*%Pk<j<Xj$=tbV}!NDw*#?DH!#>X`|VORPWsRC
ztKwGryP)xUgnA3a$g{f>%dh+-UFFQ2cKD#vS6M^U?5pp8JP=aMQDj>`f(gFqJ6Kew
zDU4nXLV3QR)bmulk9^&Yk?pt`q6OooX<!qQQ4HZ6>A2G~y2rwRd~0`7<+d@&7Cwnz
z46J2`upg;s)*=<}jlnvVmG#oi^rR6={qPRHN2_heYNCa<-{_Q@yqO$gDQ(JGB9peR
zodL#o&#p!I;#Rt%IU~HRn|GPx=5hFWeAjhzkmTLmCmn@eDI5~LBlMx?7I4KZfPv*~
zI=P@J)e^vWhHH(sPge15`zsBMMeVAJr|EFw0f|sp9sF*qTv6-L=q+P{2yN^PpuygC
zqj~gRd`j&pmqXIy)_Hjs!;Fep(5t2eeGmmDwt&@N)|KMcKqCT%JSnh*-T8YvAE{b*
zUVXk(s$uz2wFDD63Z+df;PPkc+_WqmG87R$N2>RSKjJV-jxbIC%u*Kh@IDS`Os9jK
z|1%eVq+thpNI+C(ItXllT<|Owkbbm}gZzu~Vo>pwl~%oapp?5_5KuKKz_CMrc(l2O
z`GD7ehfKtmyRF#e(OY-(sOk6w>gj;2DxQ|P$tugAu+8d&zO5k!HGs5AUFP$6kbh(F
z8Yx)*Ksi!R0t|W|$&84wm%(t`?MF$YI9}<T*X7p+5MmY-kd>{*npXH~da}9Qp52W+
zq(r*~n<Xm%H=b})mbyz13j|(o-NxYdKJIcL0Xvnw>8Kc{^pDr)a8S0H`9fbVHG#7E
z^{-KHfcWI!uT(08{>r-A<EzgnL7m{{bQ|;;f}JGkdyUyo+W%&$2{IN%c1>x+$hNB|
zh>J`#$2k<cdl0S9Id&V@3rs`(N~ZIcZfVbSKL{>rzC3%8NPbwi9-CMFggI=xP5?}m
z<}IY?5yW?Q9rwvFknbi7!w!~#cHDVNfHbheZaD|zMjIkMu?x(Zo?|XB8-cOg_|>ni
zmv}KoRm>csgfFuMS^?}3T|Zhq(jGhavBftLKy0kU)4><SKF-gYk`(HY0BaKo*BsC{
zVO(8PJp65nN%37%`BW^l*9NW^w7b`VO5th?Nw*ODgRT6S%L(v)FK{{lb{QN$&pI%B
zay(QP?r|li_VWsOE_{9N7WWtMiOY|H%NLIq5bc+p2*k@F>cliF-&*>#rW0{f_Mc^y
zDQw@-cJrwfKR%`1^k+>edfJ3<YpN-{Qsgns5>tK&0UzQT0v!+ekm3yfh$_cqJG;DR
zM?}5-Zs8G}qw|LIVhCLR5t(5+|HPUL5mLuh(#TUg&#e3Vm2F%SM;o0Ni<uGp&hI!3
zt8UHvB6JC^e6r0z+%@rx?C36htGLyHF9PB|rsOgymV5xW7nsV|_`HT!szdY>>xjFR
z#iWwiKq%;yu=Go89ycp6%k6F*{LJ99GaR>Mtp#}*loI7R23H_eF08@B(jObOk-%8x
ztmSCQoy>9#0qEuIhjnRYr$w6aBwX#A2>ftymo(Lp#mC=ZG?9F~eh!H1U{|srvK=*Y
z6oigFeH(6)SHQx?#OJo!5@hsM9d0M*5Zx${qZ%PJPq6AHAd=4w)Sv5~gg=SsAv@R<
zN;4b$+V=IdSA&o-1!g$i+>@{Oz{JDX9Wk0c+3pkDG}6lFX1Iy+fiZW!Wsa2o@@5X<
zrU(To&ISTXGbAqGtZ#-y2|r-w1ripWMV~+|A{1`cC7*hWtFlO311-c{;0y+5ss2Vo
zxBGgw@X>=L`X|`#rA%s<m7udiFMV|4*U52}phf$VbmN~<H{$E!+akFz#4JcG>E|wf
zkg}1(TW!;pyRvqTsPp%_oCm0yXH-h?N)#LBi6oxj;iK3A_0a~)2s9w|0~79%@9nc9
zQ0~z)iBF44NeNhkaEnZX3pw!<K4Bi-_L8Ig%^6E|Svb%ja<mkibQ@^H!R)k>?%0y#
z>-4ON@hLsa;(GbBGDh>^EDFYw#(l7OuRCpqio~nf%}2~JTYCDDu+NyoR=@E59(3~1
z<>tX79$7-t-cT&>O6fmmbGnQ)1Z(&jz4Pqv)btxbW#N}FeRcyDT|4uJvv3elnm4Y!
zQ5Gwi>a6pZ@KDD|LgfcoG;Uq#JiQnd#%1%jt0{+VRzL`n8|z@KHR-jl=&mj&`MY>U
z_DX9e-Il^oXl^RT@G}eq&|$WcfXv`T77%QO1)fG&3x4!s1M)x?DTV8jd{1|kzg=J;
zI4x`j)*;0k++n;kLFcxVJC}dvgoGTo@h)O-*igEczSA1;I!SGHJHU=EYKR0SILC*)
zu68q`y*4Y(d1!hnbu!?djE56qyiS{IE^k0cAB&BBfm}jhcf1EEBP@3gcVCHPo+@xE
z%&?>A2P%_*A@v(rc*hM*o29>v@O=U+Y!BU6ZThqTEMjpCLgEXrU{5S#t1p??yfdl_
z5q^(7T&B|A4E;(}5Rn%th(&smEi%CS-!D9mPjRpD;PPQNn1yr>&C(wk`9rSf)nu<?
zVVEYC*qW}=r&@v#IB8!9+Hev2&0SF@;M_H!Dh@3apo~de<}&=8a_k^f_;cRhe+8n%
zG{QQ;Nm&EV2{iylSHQwR8@n`J$qOVa>XDwe4&O$cO_bDe68XXeP2*}8ogyPVV=>SX
zc|d19SE4|yVf6dHlBAF}&i7Dj2b%YS2!^44ZiBx?qt%HmNIqD)Q*~;9V;)atXoG_o
zBfg~Fn)b*JvU3w76qDp=90R>H{$GrpQ*bU!)TQ6pwr$%^PJH6z#I|kQwr$(CZQHiy
z`)6uyr>48AcU52Z#oo17_j;P~QxS+uGl&p`*#j3|Gtzot^hxJG?*;Uw7+0PpS8UaJ
z{Zl<($V02@2&E}}IJ!VKOK=@%hrR)zMwdP#(1+*~F<BT_piuU66TLch+sL5ma_({b
z5|<mlzZga_Q2KY+C)DlP4jy12ZFUSi^$M1QXDypWD-Q!MV{PCUcZ(X)UnvNhp|5-E
zE4hj_16Ga$MSyIbEj!lb(<(_Phi;yNCF>;JLZmy=rggUTd#0mv%E}yp2ph5oc~GT<
zrx`c~bL4uAw*ir2Ep(4UiLU|o5%Z?~5@|<p-VZV<)T^)y(=%@a^36%;ZpLxJv+ue=
z*XLUbia@&&ctA^_!vg?yDhJ|!<OGR+HfVg3YFHVcEe%JOQ0+Zoe@fyo^7j+B$f5<Z
zPqlDZ*J@}tc9=Mhj<DZSJVI#lec1>8A<nw&Itq6dLgKkPuROKS5%m(6zYU5jHle{3
zG^*mI06D@^O(aPalch00kWRVft?o-;7g5ZUOMqW2Qw{Z%R(fZayQZN%zY4A89H>&6
z#J(FkN!q8s9`&zv@FsxJHdrjYK3Tdb$GmUjVoC-yBrXKVPS%v>J3&JxJ@L#(*aF)A
zJ^YUJbSI|8nPmg*lwbey)qvN#QrPP9D~n^cKUr4mnmVpC|LpCA;36h_KA*xvj|*ea
zkNhZ`8pl-DDiJRhq#P$b6Q}GZCP`4KQn4boe5b18czEAYd$9=eAi<V%oyt~7;9iuy
zrWKAdWP6NeNM+?MZTJ%~fmxR1#vDqlS^ou&?e!lORPb9-4=+6vi2PH(f;!f8R@`pP
zCsEvbG^S%XH1t?&G3_rwQAo<9i8px?@LLCl$s}tG$`{kDKpC#4NL3v@fk(M+zmmOj
zKsnnCAI((dXJ=L7?fTj7&IDAFUG6*RD_D*$bv_5aiHv<#B>3M&4)FP#PxT?j`<Z8c
zg$Z@Ds;rU{ff1OP_3l<wssE+5bXTtFfvjM4`3|^3sz#g^q{Oq-#_!$ZIX;oDXDc{o
zm(yT_U=c|55gxQ{cf4Ql*G(VdUcJV!5GaN~9i@QJpo=jY4DwAE*SecAS@!jn$$03f
zVk1vBk4H!Y6H$3b{_uM(G!#8~MR>e3Q5M$vSaVZRD}4_5Lz%p-V1Ykso-sKT&V%dc
zo;Lb>;`O6b7J`=PB@FzjIk`09)slqwPF!JCNTPGc>GC~8Bp$pE#8$}Wzj^Xh+9kwQ
z9L7wlQ|R2rsb3CIu{)q$kAsEWh~+Ke?sI8uw@ATs<e{*Vj7{%BJ8z++4g}m(mDi-(
ztGwe?UjZW=MJl)UMR7*>-Fik&b6%txV23KToyD5HGnNUr$BeJO;Wh(iJODLmt+4ge
zqEmMr!O0a#bE0k5ea+I>cj&e^e>EL{5{nSuSIy0`-l!9-_(>`S<hwBh=C<RWKHj7`
zbrO=MT(%#`JTfvT|4e>cpCP|;_2QND#b=Zh%N|}-zhXcCbi)%i>B5nRNv@$*D3&Kv
z0=tCkqaDnxmWI;3CP4`CM}8uVg3Gd#)brrT?wsGMTmIA^%K2X02NH#Jg;ky3`z<TH
z*nPvN9yom-Ki?}(i2Gktu*Fg6c&Jcu+WvbqTFAc*KBl`;JA8w{52b@`J;C$cM9mA3
zz23^ikh6~S(q6+*Pe|{3_o;2MERH#8@*#T-^-2}u=qNog5gL(6C66Xu?(b^5@!2EF
zvguK1jz{r7lVB7v;&nI;l0k4*s{&)_Lcz>{PpTzO+NQY<Qeyw*!LEGZtV6t8LB7M*
zDi>6%C}QISEMVxYGLzd&034h)`W6`=!Oi@$xk%sbGXf{XEA+JRnA(?S+<TJwbH2ZR
z+yLD2n?X!Wcwklit<an5xc{~Cel@3gdW5)e)rg+xhq57bW#O0Iq7<tgzeP!^HGv=d
z-^LRqTAgwOI6#m(;6Ex;;(`$zZEGgE2d67TbiC{@@*Fj#ZArE$G$RU}`ALiNWe5H$
z@p{2xtpcS$TSV*Tm(opbyW8rH*jMO5r*Xz)rB-=fy{k0}rJcH7P8d1$Lm&2L^G*M&
zL)zzj$lEEMHtoW$Qc-q{kBZdWOq)dW)>Cf<1JkOd-$|J^SC8bQO(C)7L!>Es`V#J3
z-bczzG@pVrx`k+D`d6XSCF)fd8KeZ>TKwmVdL_jfl(<z^obSXRFUnuW<h_Vjc@IAT
z?D~!>q_-dXq+NfdE<=5p-<K+~SYP1n@$kN^jVH-JYfj%hJ0_&>^995{pIvmHL1aB!
zK{fX#kmsxwNA+n_wyYJ~{whM?1n9a7*83ml@#2e<O~|I7&jJsz>xh2|93rFdV01i`
zADz}H5gTm};DWm;^=L^fF4*>``iQIfnY3JDeIH_%c5xsAd_(65Gwi0AYBgJX`}wC;
z@pl;;2`(caRY4E`b@koQ+}7-}fV~O;r0kE=;L%BHa*5SNk=D=Ia3v|3B}LtPAUgHE
zp4Ejj+gR@vt?7P+dH9T89tI?^99qvS%19mT3NVBWL22D_>ZuQj9~ltpn|;o;p^+uP
z>V-Tc4x=rM(ud$$KUbhzA;8>6zkcgbq)Z*SyQ@=#@)oK57OitDi$8BYy<?9e9z83w
z2el;sE#VR01)1=#L`)R*Jn9a94G8p>UtlJb`?EfphKD{H+_j5DlSX!7-Bi_iT?ZDU
zAtha08AC$VgFcqiarwQJ((9dF`s;;`G2QyTD3!}l70$Pg{MCrMcjC4OJfpf^BTQ!<
z>48UFA>*ey6>iLjrR7&>v|TzYmbD~p-L4ZI@sKvQ#9F7pbz}?u|3~Qkwvy#siZP-n
zF(7J27A7sCeCs{gNlA;9BkP=GpY=yQ?KgL>EU*6~8e06MQoT<NCix3uxmhQ1Oe2cx
zCqE`bZOE0iX!h)B8vm4-YE-iFk0guhG!-fr<z#zg0E@-W6s!DA^_$jQ@I=Gt)+AVl
zdQ_DHUah0qYlLJLA^PHngZ5$Nno=@RiaMBcAWqyc;xb)+*-)*JbM>1&%_B`oZ79eQ
zv>%~pkNp!a{!3`fi(97Dy*P-~Khu^mQE;y&j6lT=;~oG2Z8qTjy{L7~bNH|3fR%au
zw;m`#69V8Eaamc`)I;Y6@>D|)$mQSp2}(Af=KF1R6DythxGwM$ZjE#m#o5H^w^SiZ
ze0fluo`twYo<7|Tv<S4)^~44?_x-3DiI4Usf5xmlLf``I?tA69vh=`)HKXc6oib^F
zZ?_>G(IR`xx4WBzY|D--KGI{i@ZMEUxxZRA{Q!WP5jQa3UwR|&oxi%t3=^rx(htS&
zYKl^b+MKY?%7>GE@QxNEzI<vX+Iid?!2-yaR#aSJy>t<bAz}JcHE8BC3m13Sh|2kE
zwPVEme8H+l<usPhnnWP@NjZ0VhhhPD_&VigVgB`nT1EgnREbTTJ+xNe8=N2TOC*EO
zBr~WF%Tb}DfQfb-HUjJip~S(E5O0$)XETg4#a_72s6p>;<ZlZcq!f&g*x6vbS_nO?
zC)_ljZ~`w&<#oJp-qzy}0V{cKp<d8%b0o$!tqVQ`jZ?OrqFP$ul5|P{yg=VrcJOBl
z_`C#xYK3-d5RNlC##(m*rZ>MtjB<dRRf0z7tO>XwH0=Oyj8oWN)gELpCZLPr0#t*F
zl_;4ZK52i5)+pmC`$0K{0?heUeV)I-7Bc1;hu{zFJ!F00pLDt*J#|VNS<Ej&w46~<
zkq@NXIlZ<WCiD>*PqY0i*g}xl)o8gqoIfB$W=>*n(42cQHZOR25AKvfLPfZA9b{9J
zj1x7+N_caH_FY%sjU1naq_Mj|gdqz?*~W}K$o<}6(6~6SwW(!$$M~4RV~i|nv1t03
z3GJ=&lJa%GK?k#MxCc>TX?Fcm%n3zrmWQ-aO+nJ$_#sDwo&!*o^N5Fi*C2v#=js4Z
zH5ckJqgugtsVBAvv1|@W9A&jyEsP;!;{##f$JS^zV8$;)v>-Py=sj6v505(0?QgI4
z*g>$zvW=0~N4>O>pibCnn!gO8#^pw5UXv964yyCy!kX7Zf|RHqShasbH*M)*!mN;z
zm72T2Zf*l3$CTv};7JtpN12I;1hT`9E?8sxW2o?WRmfSt_&-&fGN77-rXHMSL!EOk
z#$Gw`+-?cB?T5x$R%}>mK_@QJ+<skJ<DdbxFz-&U#Y?FuCy5?3HLjtmyTr+zlo7fY
zrb$=Tm;6#e(K&z=Cr>ltHfH{_G+%HeFrsAk981reI%TJA7VD9?sPr^`ZgSn@Z}p_p
zsdG+Q^nzXUc9N<tOhF=JpkkjCLf*UmrBQP#`V@VS3W{%OSna`(vGeiEO{i?O708sO
z+Kw)k@6{^~1c@MlQTGfP`&ZJI+X}>|)v|`}<VOC3(l^F26;%pD2wjHP0Cs+6@OFlt
za9}Hb3zz5UY;x>ZWtrN2Fkchfh{oua<8?vK!NreIKYf2U89!hYuQl^$GTi$qeCJ~j
z_%!=_>StSj3)ts^KfIP1)XaW|?i9i=SQ<M)KeALEQpV1@{R6`v`JOwRgEI5AUr7^H
z1$ML~TMZUs!mRDuH+{bheI+(|ko4zi1eld1qsfd;M-^|R%;q<2TVWt+>A&%*R<Bp2
z1!}{VV_znz!Ya)qU&-J;saRr;w)cOEJ%9|o`+L#gJ%rFdWAKK`9Vyx<c!@x09ujBo
zuB9s(3@3b#O!9#Q%}dGTGI*%&>AKCel^{ZGlK#($l)q3_1;rB80k5A|`IeBijrvlI
zD=}JeiGRt?v~28);i-%NE@fLIuwL*52F%w+ucnx@YwZ+D9hHF1jGtjnpZ+cX?c@r~
z;<@oK;l2nT#6AWWm&yhE$$c@6J`SZ|*FAdnUh&AtT5d|OU$ML@XuD?z(tI^0fFP)s
z)BzDro$YAeoe6LhCT$;Xu_G}3uU~*GPmBQyW+3<%@pzPB?{<@|0+&|)KnSucZE5w7
zl}wd_x6Q{>(F4GBME@4ZlM7%2&I6<(kHfy8c~)1mz%hio`Nrw4EGq_3>Al@tNYiO8
zLaMv?XcSAr7UoQ}olMxaR%D+ajM<fzY#;Lq+recOL?UKsOsfjVQ#B{fCU~v;70pfs
z4{Q^lOHngKMlvdOQ|gieo$G_=Ayj*+CY<xB!7KFae3Y2GsM}vY$>5gHx9BTz`Cvh1
zaU6zT)cjUH*y?R|$+c<So7h45E6m%PBA>kpe1-oEl)k5qZqHo8#c)*XEN^KIE2ZI}
z56uJDA!%g!j%ZQ!SS02M#cDBpbsjmV5a+RXUY$k()AOdW_;w{pmAf_QJCMWt#o1Lu
zkKK^()6$$<U#{A5P=6Qz?wk}5=`2i987LI>T~ig4*^?!{b_e~6gArwADJ116(no<m
z9B4Hg<D8zt1+b{w2F+d{SpLVMoD?T@30+C_e!oz?U4V5!8t?+`Z<C((wWKLF>^|)3
zLp*k{O>N)~A!mR_fP*Oybz^HX3xtI24Fi(P>_KUAyo13|Yz!kYw(ju&sW@N|w)d&0
zWRY-Az13+--OxvJp6AVBcN>oSD~Y1ald+_Iy7Y^<vN-l*{k(!}v1;QnlQYw8k<gKE
z%`q3==Q|u%vP{-4@%%T#)=7XB8ki}1XZp%6o?#AgmYcI(w)HKlK`)bgFufHRW}T6K
zzA}bbNVB${fVcOmT&L5kyFS7e8tsv3@6)?wA{u`PO%OY=&X*WR<cV-l#{hH{$BHkw
zzdWeooz=ia#8dO31^)t<+@(6c6vzcPFV~vAiU_FQ#_ti5sG~!mhw8n0kqG7QrTZ5|
zm^p>S_G%o!wMSkDT68ZdDf^I1j~^x*$nVdyBZHP?l3!JrwvXPGu!i83%y&cpD(Ovz
ze~hIFQ2Vglm23E^l<vLs3$l}h<Y<z^GN3a-Geq?1<b04LL5;5sxddaW*bX^JT8Ne}
z$oydRl2$K-d!g0=C{9(jB)sTe)s9_RJzh~nlT~<`e<ZJ$^7&%e4H_vTGhMnQD-WZ4
zojP_@?LkGHM_0#S#&1ggA37i9j0%g}WyeQguGb5WZK#}(>9H(dLU!3d9vlOAGUqVp
zEuqaBPMNhqPAPABANvJpIF5f*W0*wyjw0?iR(h9IGK^L9_GB6STb-9eFn4{qzB1C;
ze1Dpu&7l?m03vb~JZeX_G+f!lA;~af`0FWkZ}A=k@DKyrZ&^^N<Gg|k=tSt1az7SA
zj@vLFI{*OIV)_Zbnn(x`d7a+^<{Q;AC|NX;`3Xizegm{OULq0|?0+}Ggs}u-u4+c*
z672q2A#@EmFUodfnBK@8MM9=<Vrl00dVf5f&HXRDF57EIzLsaznQ@~6fMaF4i9X75
zH^C!Nfo9mA{(2v6dw6MN;_GYB;7KJyX<2mm5a~A=WSBPzH%`$k9^^4}mP;O(#MJ#U
z>5pM-y7CqILcd7g#)N7|H9<1M7K2_}NPeGBUbVSC-n7->1cLj&Dgnamw4+!>=8EMh
z6tOZEE-t-ovZ_YW{D>3OuQ_;{GcPA$hQ2-&ALx=jq3KIt*cK85U`o!$jwyWF2_nf`
zyXEmeYbVcjM8)tXSngl9zasf-2GZDp2d(psH<Zv}DDD{p@_HsppL-ZX>6?WFbU&Qj
zf39GYzTTIWAeK)V9Z-@5QA&Cs)jhK7#@%4ITX_oC>Q02X-bSF2iK=#gzs*|1Pts5p
z9mJgL*w9u!+A(Ma45T8aOMuNbZl?>Wp^sO~`HsJwv^U5KbW>iNFmc^>1?zI3Ore>2
zXuI=JD%Z+7gka0@STzT9?myPd(1=rGgg#0cv#?5-<Wx6o|6Qa7VJXwq=ix@%JBjvd
z^*M>i!9wo<uQXv~lUhd=z$Hu#&q8k(t|Dn^%bCIvKnI6_fxr@1U`n^2Ck;aOM9rt`
z5lGX8S)sEu!MSoHF(nRpzYxzVqgS)yB8+AgL<zd_XG^Ism2Xtzw}{dyZc!hSAz{yU
z?vF!OGmR1LM8Ba3<Fkyr2ie7qwU!&xHL1M&pn(f9u|Sf_8^|LAIoG-;&=4uYv{V#*
zksNAvIx6owd;tb#sx-+kRirI_o))F{tht)7Ko`C(kUJdh-Fw$j@m$*Xt=nfL_TFWg
zbC%fi<)J`vZYd3ucri|e_UJqVu{#hqMuyCN%al~-_S!o9L<doU4_AjEc9<!5ZAotB
zBf#;o+N9u3<q<^tg}Ldg%u+SVn$GL*>!XWhly)*KPk9fnX27{W`x8p@(Y~{6hy)2t
zhY$DPwN7cwe+_V|9HUcTe>+J9Y3Sg%O&7NSfcl|40NffU9)B7ZsL0uxF%>ex7xG@_
zQt|3hGMpOiPfNi_A@ojL(egvnt{Q+;A>PfF?Nraj=N;{)j%JjJ?<$g0e202OvLmzv
zLz1joo}%&I8I=8|h~pbnX@JBo?uEKZ@U?E-1qD^qfySv{h_ac_&<bM5ObrLkwnqIr
zQI9iJp`FWJFmWY=A8tm(hhWNT)VhTyfDV`|M)cd{_Fb<S_CK^lxv1i*=H1S=F>?s&
zXxZ}Ope163qIL6bj^u4?fb*TBS5{N=(&i~<d?I1|RC?k!9ZE6hq1BPh85drC`>05=
zcZ@HxkbIUhQqOVkrOVe9{Fy*DSqhWo_31T%x18WvUvSbktz!S0Lq-hBRPjUWeRDP&
zIH!LgrgIA;V|A{K1vJ6(+@J3TO;=Nag<_2HB<uYtJxR#>;eYrNLI(2+u2($E%)Mg+
zl(9DLbm<x&k&dvX_PW-(eHw$M?o^YZ{749ux6_@z#kItlln*?^T}ZuG*)&CIsguQz
z=zNaEu}=Mey5pPN48}qF=s@J8kSN~SF4}WY-xOxfS_oJJZ+e5O8e(3k!Tu#luLlJP
z?pTDv^{rp`J=~M+X#P-^W4VbX5Ylv9lgy`u(T~}%I`R&R)-?v+rWDg_Co|+7=M+(i
ziV9wn1y{{jYRqm3NWO#zo4{4P0Z+le2C1_nC-<Nqb(Dir?T%{f#<1+o3NkiddluEE
z16Aqc(op|6ShrMGA34^D3A@~qW`iI*<H?H;iYilUt|V|#K3GdGrNam8PUmV%PGY5s
zp`*chel>s+Y13Sn4?Wla^nmfXTGT>4v9~}y>)?v8EQ9qTqOK(YfE!QFUivWA!tgB(
z91v3|QBVu}n%}=Xn=FrZ>YCLqNgXXYezlcF=7dWw(pGab=muLhRBj{CxoZVW7nr=u
zNzNaAk?~0->e$0iH=!HGEw1ToV7+yO2^jLqG%RC*q^go1%==8wu-<>c(E~7RIZ7{Z
zv0~c^GLxtZ3~FHSHw7Ip{_crTJC^4dF{sK>w1?+NNcnPHp(t?6C!LHX4G<j-CwJ^J
zIHqm7erB0M9kLG6fa?W_Vv+qaGL0#EFdfQl57GTlE~RWg!deMwhg$oehF&Yz%ZDOj
zgo#+kSN#m~a=gnFY(2dMH@h)ox}9N<=dv?SE{PZ~cxF!vTSiWZ;)T@%`C$AMuoTM}
zq0H|AoQk<t_Qv1c3qT2VLjY9U{jS?wz?=X;3b@?l2AJ13Dv}%e!X82yS6=pZCW}#L
zDp2qLW44Ts!L9T(110#&(Ry&so{yrByN4D={bbo&rKbJAH|*5wC%jh*l&oC00PbBb
z+#(qo@8bdWyw&lbmTPx9--zJtp+S+!PM0<}hvIv$AIiPrhgGd#v=Eo+RWva9`?2ST
zhRIXsktp_744S;kz;Ifr>ON5%gM>fYrU5=_$m>o<a64vs1J6WV#??|u<U_dlT<oQ?
zfqPbX$5f$nwL_E+P8OML#?st&@P&SoL~*53;vPc40lVN3U0G^pQ+D;`2JIa1ybGHB
zs&_tzdjhgqW}FW7arGR}*E4<+{a=H0Y3^@)6x$Mru`gqwo~G-t`3O^j9&VnG-%kSY
zM@0yly%hFO1YbtDDts%8=;0$T?QW?rxNPD4bq9DwUn@M*jzg|V(?}$V_T1h**nFzG
zRUJHv-L|rOm*Q)52BWlm#$LHfZ?lE2HO)w_o@(~bdiAqO#e>8wBRKcu#uLu_9{LwX
z%5Y?yY@P-c&%BG#xhc;*4ZBIwQ8%e`_F6hqI>Fdj?8;e0rnDonJ$igsQZ=+9FOn4W
z<d2m9i9P>&Ans!6;B%qzt$UMEL?ZU0ka@0zm7cLMN!FZa$KVz<A6Pfwhy9P64#^Zu
zKKuNpZtU9+4X=+E`nfMWQW~WlJ^ap057tu1i+cLhDrZ5#u*d1p5rr%opFa9W_>Hn1
zoBMDb|By8<=&Y6L;|<jIC0^%dN<(FB?r)ydD_Xk`+=S6!{=XF|R*sTMyEvPT3UY<)
zS(gz^6HAC9OF+c!954`EAM$1*Y|*>lLc5AX1Re4_QUb+%#K}aPvW!XDaGBR=XTp#w
zQmfM81!d<o>T}y^jp5Glkw>}8S7S8~<Y=3yuK2e<kG>O;Uy?1ee6kx;q6wPfj*)t6
zr4};WEW^FRcOyR?fyfXON7ER3$+fFGQM@bbR*qzY)sid~7QuFuTMdk^7PVAQ29Qm8
zz1t%+amN7D6T7XWY{ri{5u8T(uQ2QR(v>@S4(l{z#?A-xN-pUmNSAy8mpo34EY7jv
z+j%_AXDvU=K~OmJh;NVVY{jG__YgawgYsRR^GtE)qpf`dW0=HXe(x6M`wp7(;IKYp
z4awokYN~m+1Y_dzHvsCmqR6nlt`_MhH?lt@iF75kK0I4-NZ6G@y)v_?!d~-FY~H)$
zd7`;M)zA=k-NQgr>LXJd`Vb0lbz$HT1~jx%P_%go<sGkX!qW?6yDi3IUW7>o2Y&!5
z%p56IyWo?R`6K~{<re<#IrG0Rat8;fwWuR*S~bK|?KJEu;@BKW=(srVCe<#YK0X6M
znfvshF}kNtlAPJ<`e$AZ50SD$oAnO31CwXLo6CL87>f4q5|#fveTdR;_12~NaXV=j
zd^+i7_kMC#u)`zCSEF&nB0&MepAeg>?*D)thqEJbnJ%Tr0IjE{lRv#nve~>}H3e|@
zuw9JiH!QKi#)S0|yI}ROJh6XVA+rLMoabN{lJMRludOpA$(T}pYR3mF%iHY8{X-y0
zt|fg#5S(2q6wyBsy7NTt3gjm2kq&$wUforB@d73v9|4O{yUjb8Ktq^BWg{54z;XjR
z@<q-87mYT>cAIz?mc)%>;yb5oLpu#Dn~`<+?7h^?GF`^<Qm!N>))b!uxFE&`V~ZrU
z0X~C6v@6=K%1x~yNf%f?Yvq(31aM3w!aQ)koCQPf6z*G)eEar0Xhv&3@nINJ9sxDd
zd^m1iYCQcNlOZhAu9^cP5G2N5U@Z%m+Mr2EHT^#^f9%fXb3C)msMt&`5I)gh<1Ewh
zrnRsAblBzQ%3m@BUNqiD*|W{Fv~$vjR>8=)Z(UxeEbZ+;!M-|n-U1>)#?rE1Sy27)
zqX{E}LUR!pL2PM|TIUf#=K2rlLi(O<5(V@GZ!6WV6qtS>+c9B{$i~gmBmw|tMs#Tr
zBL5L|m!j9r0+C8KT}z%XK6gskZPn4kYHqJRsCaTa5oHm+EzOjrA2-SVKr5)pXFj^l
zf}k`NB$z?8mj*T~+3Hwuz*TK%=zTUc=cxv`@eT**O+)*S0{Dqf4(ihIRKn~EZh|CK
zM<co*Q4|;fe~le*E+U*1>2w<7ujYV=C#qORqj3k!y5ab(82_U<x1T2lk;@iT)vICS
z8MXpO=_)=sR$3Vo7udnFuUt+`ZDGN>2s1ToM4PlOX9M33thDmC77eR{d-EH~7d$4n
z`FGmUv4a%ra{%<f|0S<a(f?8ydjK!R>I?#BII0cxnb>KxE;R;-H*$prQ&oAI=6o?>
zhx*bL@sedI+k4pSo5{#wCz&VNWuerA7>$20w{sIOc}(oX`cOee=P}=_XK<Rtbl+iN
zT(gmd!Ey#z&de~@Iu^b~_<z<C>$g#)_Cc6N^2JVQanxWfZ(tr3w?e^$+vQM@NanBi
z3eKa5<J7C6W!<-^Onb=zQzbNZ!y{tgW08At0L>;5!QI8H(dH|J^^N^5+-SN2JC`Bz
zS;0WQEMBqii-7v`clx&cb0Te_o(}0c)E_0<^7%=4i3cjSdXI-5<zj@oYM}isH3%2Y
zj!HkbiHl#DLF5p;gG<3UNGpF-bSPIv?%lYk{z!V>xcK{nc@>1{b!(#!D^XWon^w2A
zb~igC!$er{Mp^`zj*YA9-#@V#PFZQiS7KgCx4QCnyb!GK7h%_OEd4Ao<xR?=+u(W?
zB9TFz8_XP$H@3DMRidI9K_L&-q5rYr_nJE~_yCL{1@><!rb?01k|ao=M+=frfqLO_
zPJ(my%DyM?`d4Jx?ylTYeh&xQJR=IADsNy9V#`PwBr7ak>X*NG<IvXW9ZeP+26Ijn
z*KOGuH~BNX+Jn2&E9Q5BudaLS2RWrDd<CPjVoskAHv{(KeJi80a7<Sbzwos#vb{F(
zeEGytcu%|w3omzZk;D{!RfL+@&o;w0?ASN<Am5)Z`d9JQHW?1Fbofb*(w*TIfmcSI
zu%sA_SREnUU(Esu2IGTS#c;j&Pub;m{F}$%N?rx&nU5qq_DA)1y5030vtm!C`F65V
z6xBYJx1+OA;n+1I^HQ3}j}5i)J6+FRQQJe==E$^n6PA*`UJSb6t%@o%j&fTDc7bfj
z2FGhFoEirKgj}PQula&$xpAF&4{b6W+dyduEB)uF973`1xqEj&;IJ!@Wbgjy8G$ga
zG}Ma0S--#vdM6fs^pjE{jc4&%dxt0-@xv71Bxk^jP``Ujbs>S5MyuBPn{?#-lcLRr
zO3xiw@#A7Rv)tlRe)|_A(~E7S6*;fu0$Cf!PLcMA<*|`>83q3Q>tNKpS72H)^PTP{
zu{xLSqbjEr8d1~?j5z?N%>P=g5=H`Aj2_7#2kl6#^Kpc6RC1aU`y+EAJ=wnvilN<U
z7{aI27$-t4R>qz^jJ<IZ4he7cH&oyzbYUQ>mA$`^El=J1y=-{)Q|z6!^_?u77v4#c
zg}d4M_1>)qyNFn7ZjK3RxQq;l(aC@El_|yF>*4n@Q#!@l6eF+Ss{2Mi_ua@I>wu`7
zf7d2gUQng{$O8WE+o+dHZ6}P2&Zz`{KhP7+kI=Zm(9ufD3;XW)e@bre_<#H*NtyT%
zdbLQ=qc9=+`Il=Pta7T-lniFbWrJeB-h<s~RMpvO>0O^Y+a<`Y=*e^VGom|VCr(|O
z8{47CX{f+-hnHP}qJ$kQBgI=ve$v*&v&s+Cd5FwaSDcQ!5RH5(k5v}eq~hKf1M!5d
zagqmZ?gaPWJ9WO#nXM~eC*mu`k=A`slUl7EcEJxbFdEo3iJamg>eHZi!gmF+oZa2R
z+{4Wg524Ey*=*zlP^NLe&J$q>O-(sEu;C+O&A_nPuZ;19wMV&qL|C31b|!fYiL|F6
zFZNfq2=_YTe>r>T-~4^1u>oRaXqw{eSV;#YLY$8Hqq<joGnAtp{RkP4V#Ez$Puqql
zb{$Bu>B5u-+Qd~1H^b}S7kCxch!ES=pd)ai8_pE(zb|QGjZ)pOb(}pBKn-Q^CI%)&
zsigJiMl?2XNH*S3arL4NAUNkLQSaI9{!CE@n?)_DKTe7-5(l>pF-r<F`#8Cjvb@pe
zi&X8oP<6)C>i;ynB)xU0JU@ekDlX!W96WiYiVw2@CaV7$E_sxTH+5%1ICRJ;X-oSG
zy99V~&#g%3|76%}Rn(j0(^}5ZBmI}Zz912pix^~lw7uu=0hC4yyNnyU(E4ohK_3PN
zWsRf)_F&h|4;l$$)eWOp8S^MtJSwLiHPiK<Gz9@OFp5+Va<NvsI~%m#axH9~td33Q
zUJYR<xaa~du`ofu-Jf#;p%%*2H}zoG4B=SA-2K7&OZjJKDKRm<_RDN{P(yQY=wZ=V
z7vM^jgD$EjA;Oe{w|b}SBN_br)X_wq-(A?FGTp?(N%(l1BFOYCr%WZObg#{an^~J7
zCl2G$L$jh9byN(&NW+&$sb4BUX^xp<z~#!1P!PJ}=zdZG8CM!!N`)f&M%PqD&u{T+
z(SY?@HuoW)t%(>j1loFC_&dCI-?&8VNDUkLPEtyJEOctVFFh}pBPO{=O(C{ZHJ=p3
zpkUGeG+Ut99_a{m<1?IvNKZR$1v<?m&Hrc}kjUy)5%=E$i??(qFd3#0n#G!u&rCGa
zb;mVioVIY}G08&XjgUYoxMH4yD0PR0CZ`|`tl?l8Z*XkT{SB3cuIF7pv8-Orc}^`>
zQ9Wl^?(9hYk2cd==%Vvv+)d4e)whlvE}g=@-7A?DP^z$BGKkSNz-?-6-z%Jebg!1c
z^$&|(snJW4a41&^&d4S4Ca8RShT@;x144k%-6ltC_EtuG+fP+!roM$J*?L?n(`h5U
z4$Ol3Y*c8VSKaulV+7f<d#BgyUzypYg}+ht^-5E&Qc!vtbbkw7@}Os5pEyBy?CsZz
z;RV!iCnh_|!Joi91zcp{*8k;C^#6BLD7rMdPZ8-_)LsAL;WkS1A=sEIX|OBiFNbVF
z%`0JYsYfiGB%%)`KvF=Rz3!JMMVf!#0ta814C4(&)yY=jRmsv+-5gl3+;aGqrfY=-
zH+8qYKXboyAqpvpti6AP8U!cW-{@CzdnLdjwOy$*0jbH!){of25ypq7C?IAgqIIF0
zz&kt0Ya((SsrdO32nBF;9bf5{+w_5Qrxv`?;g6ng&^{9v6@TVw3q@Slq>JY21LMD#
zgPNYg!9<8*I$1y6(COC~=Qdw71+{lTpT@1jvufyFHc;Fp#z$OqQ<uvQ)j~8Bm|qM&
zIpub{@vDSNX?N{OR->59`3=Z13A+L_O@{fUJo?<c2{YdCpY1laTDOSBlna6qG~S}N
zr4amA$E>Chbr@YCfvWd@Qu4!h_SSNR8(oYnIMdUl>EVal`-}33Yt8jNyNJFJr@*s|
zOvYeH<?9Ck!Xx%ihiXc(RO|eJ<KVM$#!|N%_zxB-MC1et?!3U`d3&56Cix(xC=3lQ
z=&~bilI|Ra1ml$|U(O?b;n=!F_2^+am4CK1{#ax*Kb(VC*ARP)GCtWIHj;rKqZuY6
zbd7W4xS0JWP2LR~ac&SRQaL6%3v%{c!@%t=W$&pfR0Eni@C0sS9ghtx?eVu>9oF+1
z(^9&(WD|R&?1mw#mW{2Faw%z#+nr4eWY<u-=thzwkt){59xt&q&MY9MRPx^_qVKIG
zqv~2=w5NWm??uZS?rNy3W)_b~BVF6Y`RIwLGcT2t@ob+-BK<X3N0#+re)(@t2V1;5
zlGzLr@_|*zFOW?Lx_M?KfbPCQnq4=&4kcQgpsAp`CRmPLynR4O5RYfe3^S;IH8<K9
z+NiMFhBJ~xDQ!8W=37k>8y{igW<B=oPYJg%lHX^9nE6&nKMX{5J&yhO9fJ@k?DiS~
zDfNOzsn<sXUdTCRPf94FFMI%or|Q^&!K-F>BI#MP2orU24Qo^eOmy6k-a;Y%_)g@F
zlgSssuEPwEXzTI~EWd#d9ajMXY5;#4Ms}px{F46z+R~AiK6QQr>ePl*u7Hs#R-V${
zIdWK@0{&q!k#4oSi$u@gB!UhTtvw9WC_QHs(SPJRn))1CqcUK0FUyWD7P>Tahl@>E
z-UVvp8BY{nmwP;2f7#+)M`EHN=BJpfK;KqZ3x;wh@&nP?B|+uE71~df@T=r!X?x`1
z#P>Aa30GsJ{Ya_t<lRxUoY1v5l88!rk-2Ux-JTN%)K74aM*XWbFEp7Wyx!U`%nM!%
z%}pCEc9MWF^@+L{bT@N_0&F~lt?s74_|Btk-!s;CiSoOe9ZY+;6ge&4`#&;gp&tjz
z|BWjpa7$$2@_v1SEgX+Lv$5JHb3@@8Qq>v>{%^_SzlA3=>@2r$P{Nt24VZsG5!B)P
z67v|x-SWYREc){OF7@HBe2#G1oE_JwWpO9*e^l)6@B2dtKZS)X6onIZ_+x*yJr!>d
z4iS37vNK~y8n{*&<Sh@2Cp9lDe&<xfV)`swHVqu?Pvg;dZyfImmNIFzt!86f2%|0J
zF5>d*-AAZk(c;wcA7GIfOclobpqsK&%h)q8r8_LE`u!S=`3_2_QyT5kZHA)$P_M>_
zoNhp#L`Tcug`Y>`jOSKfo%8IzXuy1>QxA?Ask#KIlHht+R6tdU{#?L*kqsgleNP!n
zU#IBYx;kA6^V!QzATv)nv#y+JSg9@Fx|jjwj5YXt5{u`*MVt~Sdh^0OuSAX;1fHc`
z&<6Q5(#M&~U;e%2SxgKa&S5zJQy0?JOjlb$R=(%{Ej@#)xsp^`Rv{ua9kwEf+*p;-
zqs(xtV2c>v`Nbw=cC^mzTCSUW0wdi$hw;i<xda7#QnAGq*h)9yoPCAx%=J+y=@rqj
zN%!emM&^TvP{iCZtqmf>yo0VLSu48jkMfj?EPUsS>klBiByJLKH2eFo9rYr`oc5uC
zP!Y7@1z0Y$$-#z8d&A2pTfk9v@6&J(rC$q9B9Y+of?`Zpc{7d<q#go8+MfpIFLguu
zWq4^zDYQ<%PJ&Xa8Z~W8U_+f3bZ7o=iOvjN!}{v7d<Ew>M(MXnz~L!z+1la5dFt;f
z*6d4w$W<TUPhbCm_=eL<Zk*6tJW+yacnEGeH~>efBhzil7Kk;T<F2#=2%&>dcDE_L
zVLsM!k*o1jW!D#JWY^~el(&O84nM_{u!OHQTrIE}Z@?#Q^Zb{BxzFLo@EEu^(I;M^
zC1Ll8;=vqoWDN1hpXr*pG25c%-pB^p3>jll@;u}{Rnun@=r|zc{XPHShFZ5`)A)h6
z*BZpaBsZ8l<6j*>igW_8eaA38XX?VElziHzJ=w7hhSw<ndbP3ZGqB2`?V@q5Cr3sQ
zm{TW1kXRSxPn7PI(>lV(8IFJfk1jJ3NQfE=P3<2g@hKDSkXnhz4C09TC$91EC$vn~
zq>^h0H(z4LW`^Qe!j4g;^yDCIHhNQ`V#2avb=TSTw<)a|zQdyc@s;}&<z}Jh&DK9@
z{oBvlDiqleydL+qU`))k$-r(ji5pCIL)kE(Qn4}51kx=E)|*H5V-}m8`H+~eTl;$r
z=(CvAZm)9ZZ@s3D*b@;aw}+9l5u8wMpa^PI3eLkI0UUw|IR#Oks}*R;`D$Sa{*o5y
zWT3hMf>GYIqys6nAkw%urZT2D>~={f{h_*j=faNX8t@2hA2||FA$0^s>AlT=Q*>nb
zqd)a`B*%dyi4-5BNT>)3GAz#1*c|<}=PNCFWd*8CZa{^nBU?8WI%DnmslqF26Np%y
zH^b-*T@wI9&0qhvx;=$Oy-}i>rWyTTh*Lp}6^oL8Y)O@JX>wk!Y!nRTd2_B%Aelfg
z&G^H+e+hd37QSFuKI;Y>JcEVyDcO5>rr^@zUMAc?itZ1eH1w!UTJ=O^1>k1y2uI7C
z*5KGO_2HRLQY@ni&=Pv4a?b{r&L8{HR7hz;><Bgdu&5o1toF%B$=eW6g;o7AW_BuS
zdtaO*ia$kL^H;egeo3qnui}#q%qeUT_s=acD1!Z6dBuTkk67ufvqm|!?1EY4-|w<u
z-`Hh*%(lQLLk5P_m73{9M^3U2Lq?bjoW0e3^H*1qo&{X}ZtzQRd9IAhFYl$PZth_M
zrIZ63?N&+jXJJ6VO@URi0gh8SW|C=5C;w>cr)w>{&T~uccM%t}O$7Bl-cPOdR#EV9
zM2aNW@D6O;cpP{BNa(EO(kCKP<k3K~WMEPIxC$tu6YaM)Z||U092{aSFngJt4!h6R
zf*Mg^x2~K6++$r?UD!Ne3gCA(^TJx~C4Oap9G*M=_+i5dj+C#HmH#UZoDM|e1)mh7
zYS8r_P}GpER;tWwV8@>h+N`K_#>@(NR%w1hXs6lr32a*flc=~k35*)t4b`>ExumET
zrubc|tI)Pu%)I*B0T&u&Bj6~I+kkT$KiRMxxU4U0z}C6_Ct$VeN7`2_l}3+P%ACwN
z2^UtBY|=D_(1T(z3@xq%`CGi~eKH|r^!-lc%p5U0{~-Lk3-JRzDX21A5PW_oqCuW)
zuzXCwfs2|j!RyYgOx#=}EzxLtwd2%seOo1;4o_{D$N&B#6d{=3r;;pDjVExPU2EYn
zR@=7H+y~bO-(d#oXNqftB2yRWTd?MW8|LjaY=DfFlvNBR?;2wY^`2yr%IcFMdzIe2
zl}x=BTk4MvmIT>%DrXIqL;@^?uHGd_NR)xAP~j_<n9uD)2+-wb|3VtAAXkS8<O4qg
z?-?6nftP#sMj=M@n2SkiA|#Hyti-RYcRfjA$1htZ9N*)JC`#RpfM;$&!_wLqsBt2p
z{vs(Mz%vvHLXh@(`Qjz>Vm8~m(%rA`??DpU%`@(k2g$BC7K#+Ba$TS;@oyNZx1GcO
zQ%*7?{Wz_@2dQBYYk~BhR`uTcUNhz1zp`7ivshGG%n=W1>bqSvo=Jn9+)>m70yy&s
zMCovyrxXW}8e@SplM&eqTDFgVBNe-n^R!Fc#dXZJ%7a26gtC7BeGEgP;uG=q@M;vv
ziel3Q3vY2tNl>}c2$G$p9&#W%>UfFzu92RI&Z>j_xzo75;P)Jr8S_otuNGlBV@ll#
z8!&n+tL#jRvGGGtQ|=p@z{T)z>v?Kj@tEZ<aUAwA-am^$xJUD|FgT3oQ}QcqNiFlh
z3)x|~ySY4}Hht7B+lN~;5tnmkPZ|i)8O}&B?ZxE&emnD9*K!{MX?YE9`^M%kdVf*#
zoOtF;B#>>!gxOxnO@SAX@s?g_#y=)?vm(RKP?!NB26TDb?@(f4L-2X}AnAX#aeV3x
z%!-$7guPx!EB>j8{Hp%Gp)Td}xKi|K*L&F8JL+&981uae8)fsfA`VEl79ejYF&i=c
z%|&L>@_xKdOnjs+moD1?htX+Hzy<?E@X)XKe~&0wh!K&3g)lQq=T)sZ`Dfp^t)zXD
z3q}q-Tk1`K6d-(Y)$+6dByS1n)l3kuuN?(AH~*r(4t7V}MI=q)%Br*fHr;+Dy*Xb;
zbJ?hc7zF-^iybWf>2hSXg0MBzx~JBV&HWQ2v*0XZIX?O^B{0msA^|>%dtAR{9Ik8v
zx>n(o@x-mf+~m5CErRTHX26o`lAXz^EG8IaDtfz89n6V=ltjtd(!i^b;vjoHjFEou
zuKp3EpjoHIE+R-BxyigJ;wl%fVP~y=6Oi(QEZ5!?HA#C96Jc-E<bSwjrWF*Lq`60@
z#hnxhcNOe+ZpitK?XI(8jOXVA!Dgw0==>3E;cd1K^G*Wtio;$IjR<rQ7<$KA5JXO=
zFv=$}rm_sgegSUw3}r+!>~m&iUAHKgnutWDD0vXL@hr?31k>s8mp}(n9TbJ?j3Gc2
zeEPl$pqtB!<K@V(@l|iX5i_uPibqPz%i=-B5qQkF@*aVeM~`$^ntoEN{m}Ev`7$ay
z9q%nbd>g}zf`KKS`MJfjQ-Yf&d<UtAjNuZ9YV{Y@ofD*kkKH8}HS@g>EB9#|N*mX6
ziYU~D?sF_btWW%l!4!9!)9uEg1Pc}MpG!}SR0*>0<vee;4?{==hHG}A#~*$<CI7&=
zi@B7S#CR>?yIgMzeXfO#J2$I~6IdAaPphm{qU1o)7F<geBC`V}0Mk|-WytS}^pCdC
zG=^-BCoSoJ&Tx;c(idi6F-7MM9w)}<6zDrU-Uq(0or9ZgcJyOAv3tv;qpa&^hZ*U~
zc>S?Dk-yuu;X4DhLL*z{jXV%qt+pUQdhwRI7!8X`DNL)Ak#O)h<i>Ne{_T=hypw$(
zkXZ?h9=7^bDWZDGnn|UsV$a}Me|#;u_X4WWWmiA{lMBKW%&Im&1s^e*T*j=~_wkAW
z0Rd!yR|#x1rINC8b{bdVM~-^U4vh5fi0!#9e+A|{HYaW{b`(}>6udb~k7<4aw5DXh
zBjl_O5O9XAJc)ZWF1fl8ky$*?otp@A4Em(D*GBK29@UQ!Zh;M<;%AFJ&dTe_@&pzz
z)R!Tt7Uz@;5s^Q!#L2pfJ+(0`hsz23<czM?HlW5|)l$YCN{AgWPJk9RUMs3R{tKik
zXdvZ04tTnOqAtY{a<S5!@=+zEGVM-+2hDe?BaspJ?**ltxaGB9nB-Y~E@H%BKOp4;
zN{T@_06!I4nRBLhE>bZ62ufV9!GQY*MdlUaeS|Kla(mJ|l^8(kjJ=p->RZJRGo94&
zIi-x7_kNumGJ1RqOK3*p_<AoWwS5IYVap+`s<nWC3R=ArqKgVzfl>>E&3+FY!x!6h
z@`qT2BmTj}o;YtcBXMT1WDGgtniv9ja)iyYy>WNxG+<ZSB0$w|4*NQ-$@lZCt1{Vm
zxOtflFNy<~5EZD}4$tX)Ns#C$a4u?r@i|O$`f7D4V1E{G3uvW)g-$n{`G1<I{NeWa
zS^t1pLb+Mw$<lS)!*zP6V}p>n{cYu!Z+d@|I58C$N_N6xztK-2-7~?saT+joPbxK0
zvm{s3I~2?QqN8KTcWR>(g7(UW9U!KK8^%W1403Z9B^Z`kwM1;@`pc|SbY4tG6WbXV
z4OPmqnZcqF%ebgubbF-Vfd|AW<tfcxLs)ZX**1wky9&_eTGz@W-<h0#hZe1P1*KTt
zp?sn^kNDiy0Wkh5OtbB$Gp@2sG>g&C(+xn5;)tHrbzj4h4W7M!yqf*?+MZ$tK@{@g
zjjfh%0N}Wd#SOH#2t%Jjqp%@onsIak@UcTDJm<a|Q=6Pf`E3Q_`XHDgQQ5_kdfV_b
zL$Ehb#T}pcqv>4jj$FjU*L|1hp*^IxGp8iR@`P307X*(UxYnN-t~vgL#1#nB_%7vz
zMbBzdHV?A6HyKu@Zk)d~&H`jT8jWzoN%Bh#;Li$P^YdP<dzsE&WQ9odtPzF2m05C|
zy9L>m+_JBMy3=$k(g;Oj@`I6he^!fJCsR}b^%1Sr+7Ccz^xd`<LS@Cm#h7wc%c~fE
zSK3F{*mv6t0RIK?9q(|M!O2!P%olT_y^(gTPitOYLia1gYUGx<L#%|F7|DT|!NM=D
zBOaEoYdvm#El_$*RM4!)i(+T`td;n=lo>uqkm3+S{}&eFFe6Vx$kv9(Ibl|o*VZ2B
z5bWgg3>-0i+YQ=FVzr{OiP8PTlsu<8_Q6M@T%$7)$>%hSy?O3Rq3!u52YpYjUk_-e
zplh8FE2b(h35Gi9{7(7hKL=8V&LJ-U{f;0jJwr~iGo<E_n4XyT=%FR45Y{KD;!TlN
zKGv`N=kOU6uaun~B*y9raq5_lnM?_4vuLbxAe38Hn8+bxB6ZBAtGD<4KqWTorCI=~
z%6B=1@HaWJ(^MiDM+-wM(gynC;K<t8DfrLmK{9UrvN-ByW%W)@Vwq3?iLuVgW!nyE
z0>6L{yci$}TZ#`8O>}Bm{~gy(qVNG;<=0>}W`eFS@Zz9s*j2djHtSd_<1%H85r?^<
z8=hdXp)GfmZDOkIP8jE|v9&BKA?KsiOCZcsu!=V?kUM*p#}#(11S!RGv+?Gk%jV0L
zqs=;3bj{xc5g_879C+ceBSW-5i`=w$3S`8PY5ie_)kU98j__|p2NVyIsfmEI)wlsq
z)8+^hn6NqvY`edQo#{dZ%81^++t%fdw`BBCxlzyHyUpG72;Wj+5;963`5$_Rgy5C8
z&;V9~w!X_dc^s1nYz=Hk%yRD?Wlmqc0yAf~DTv0<lA`L>WR%~F>zaD(9Q-X}mHnok
zX0QUW?W7mq%`rBjDf2V_e+8N}Ac#Y}Z$6G`DS$94r8ri$y&y8)w@`}_7KHpuey}SG
zeJ#B%uxI$rr)8=#{P_%so!vjYd5Ow&2WG-s^s*999=?bk*O07&&={QdC?RtimZzO2
z{QQGCKj1S7OA+xc9MSq8)|jXeCGY12uKe>#e?e<xBUD6Q``U#0$g`$5rCgy2#h&tE
zo%avg)+4a6m#?wVnk_+~PdLN(HeosO5>03l$_Y+)V<um-E-m^u$WS-Eb<5NgH>R>d
z(_$hd-~)@_D4uVeuaRs7n9wJfhfpcZu6SUx&ll!lZ`oMw@EgfCPGo8VA^=TJFb$7v
zd6dqAp{kv+zm^dw;bCx{rz_8Ft4%U#Uz&+rSopvHh*sS`SXroQiY$KWHnVaM*!(C;
z$iZlMzD)ruU8eovIHvniqO*D*;h%y?NOK$LZ72%9uCGGlIaxFRG45s3PV8+k2JzCa
zfd-tlVzG$)ioVs$oJpdm(JC`Z18N`j(U@VcC69Q?&fg44swc9QLgV+8`Tzh3gAA7<
zEXszS0IV5v8gXskWFym`jW1bL#7r)4@_n7D*$OU|a{<&fN)Mssljk9|(pObSH4$~#
zm^V>;QMXvD-_?gAqWzYIT-^C@@%bxA5|LeEVp;p8P+Kbh*y|ldA}f)97Oh}+>jw(v
z2+Py{+LLmfx};$`t(*C$Iw@m?niG8+Ac4H`2t0Zq*4tkZF=FJn9@?u6f!dJR)lav#
z+vU(n>-vfX93A;|SH(pjF`2uDy4qweF6oErCNX<(u!-++{#83=UVgk}Y7v|#r(4J+
zO=73|<Nf9LY)I*D<DJqC=KF2jx$^)3xEzI0g$MD@14aym4q^fIt0{l+YzqE&S-kb3
zo4fLKLK)_#k~nO`alOO9Jz$140h16a57@(E=Wpv)C8k#%iM9Vbi#et8b<;oFpE9ec
z%tO}q!`|bee)r%7mMi{*!Q3O{6?1>#tHJrfFwGXKvj6b+h_`{8uUxGGzKv_$_|l}%
zsobo}6q*dkCl_5d{4>j~>xTsq)Rkg_|5d?J4?FR(tyo3?0P4;U80Y?GU*3X{135Sj
zZ_m<GEiC`eYa-01+qhnLIkM58?+zqzHj3suwLEv~u!4I&hUl2BKdD%9vrWqU(qqgB
z)`Jdn{i3D8Y2|+fwjxR0Jq(<kXKeckYhphD$cCrwh|I487!ZHKSZ`Bc&x<>@3zdHK
zUzup9FKCZLb}WB|v*mK<cz<939wLYJ-N?p=T>aXrxnCJmSR@F(SJVse&DKj=YOz!<
z@@bo5CzDymie;r9gW^q$(p?sX@rdi;@aBD_T&!vqfr3Hli^uj3@vq}<{IW5|EUm1A
z0OtDF=s$n^SoEj|Vod63^*D>y_WSx&@^5qEWbV~A%D;b4q1D)!3GEto%${rWDU=sw
zJ0qK%cdOh40zi1h14qa`Kvb3AHOr)*%#<KYCT5Y*-@Tt1t|RisWYV3PD(ZL8<M*A}
zAP0&houN7_?&&{pF_Bn41+X!Mk-?QXZ?M#aVdxicNQVItz^qo(0s!j=3Fld@_{3PG
zlia?g9F*m*?;S#)Fq`fyM2$%dJ~eYl{%2@kyI~8_lk%J!_cPP}GkZMjoJ(|(KzYK=
zBqWLHOB3M0Yf^U&J-*@j88Q5q4DaPrB9Hnzej-Q#3e<i{?wE_)P2gO+;;4|nH>t9?
zycf;1X)}beO8ISb4H^P*wv5+>b(vaStvgs)au>zP2ChnE#{i@{=UoDEP(@ZnDNXIA
zm18*aRG~^QtG4)bR4dXyGhDPu_l#N%=2^LcV#gN0+~??5Sw6jRyUJZ)*Oolh!;qq4
zJRVC+`Q{W?>d;aVMs;TyHYaOUSMUG;0C6c>78OEdPVAvvwq&^PvczJ>fH%Fb6yEO`
zCDPG1a0wZUX}9oGDbi^4nSEBR$Ysh2ffP3eTsoQB2D9c+%L0{Pb0lT&H;rx+5;ua8
z;9kw@A8ei&=9KIJMUSarRVuB*N%{QE0Q`CjV})W94$L`gOKd1Z;M0cr$?WJ%`Hi)$
z-6I26q;|46Tu529_{~H&wT9U%Cl*&5^!kQYBlJP8z~=}Kk1*hrpSLT)+3jnP+KYj;
zW>2iRgMt56d=Srkoa^%%L<@ZTNOp|!CSo0I3Iv_P%A!jmatJx<X_$h)@ffo897t_S
zkjmmZpN|Rh6%j1!zbsCTcl3rG0o(e$fjTWNYE<v7{(2N=&@|d)O5hE;W(jLgYcL&}
zljLZ8u7KQDfds5W1}lE8t=Cwb@PpxfKoP3EwHi&-_cHq~JG@e3H}(~cIaQgZs)t6a
z({wpa97B%(SkP=fx&sR>#MpWamo}p*;Ld(_y~@&ZorKmWs|i!6<V2y4a`j=$nLUom
zvBix$%VC(_$jiU5GZ!Vvsk-`DF-amS4KBqv4ev$V0AKe{&1pM3NO(7iAIV=rUt1*S
z8(cpMr*}>owL$2^CirB;&}9&gEb;g?2s75+&tzGlNYcWu>Q1Ou?_<}kDZMlMUt7qn
zB_m&T_9qU|mhP;H#HzR0H0Wx0_@MIx;2dUN?r42H2m1F14==F@xK6d_Wq-13oB=$A
z@E1#fx+U3H`X$If?zP~0rKQ@F2EK+zfB@?isaZybQZe@S&ECBPK(^w)7gmQ~Rx;Z{
z4fV9wLNE5K(kQf<JF=~+Szk7~w0pSp$<fm;u;_MZs{F_RX=1kQpQiYWG=>dD)7AnW
zyZYRV5zzrsBM+V+-<Q;myzDI;H*=e<k%5D8hV-K|6$hoV3%@MKRjsUdzZ6mVg4BQa
zo`kDBO68#@c<(J`<M3kMeeluidJvt-VTO<@cK(zz|C6@EEDG<IYs@PLQ0aQVHH!GJ
zH~DIqR%RQ=nGe%!n6C&}=G)<@CK`F)6moBgl_?W*x4GR*A}*NUVy<xv>%jFKKQW(=
zr611jks`SdB6>u7CUVF>A2#c9c0OMDbM;*E85qHrh?Gmdi?Cx9Ya&z-(6QHJ%m6pZ
z$GZiXrF*}mJ)}}NH3OvD2T8OJlV}|#&^kB0dB}bIkJ(J#`|c<tyR^tm(m?fwhPuDc
z(C$ZaSm!+^&^k?^bellwHh`T<D(KEUaU{z39RU;0G)I+sKP?t&Rl;x>6LY|J)UuuF
znNIY~r+Q{ny)!A^nUwEL%6Fz^JJPwk_xN4}yapP(wa7M|>6uRS%%^&0Q@t}O-kFr|
zSqmYfa|Q`c(9xBS^$1p6zzQfCA=Akk(Mlu;;bl@~bgfl+9^HRE?jyveS?^4`t&+ti
z^{L6meOH^>9<}V5&BlhcfQ=qm!Ry&m$vpaY{^`Ly-&*d=4(57kuFG`|TAdn~i&cK<
zgcOIiNHR(YtM5Fc-qp!igor4zmTs22=E@wv@o2E{-8jMm*3v)#002)}IL5H&=5s=k
zYfKXN`(Nnx+ky;|tH7Ju>0~}=jF9*)TR@+z2vIW;;K#|Pbg6zPBve*&ym#gtMNHVM
zq2flRgpTAo!pxw;;p4leBF`obh~Kz>{l(l|oxC)dRjvNuyRwr{;x(8vMY?V#+jRU=
zEs7jbj^_$2d4s3>uZ|bY?5O2}tp|`Xz6yvT96*k6$uFdBCkWEECa&U}$xK@dod_|A
z#;DXVMSUes1^u8l;NB1nkQ!x25!0cK0aR1i$g%rGO96{(7}$r~$>qLMbf4Uc-Lr`*
zco{cOE&5e==>`fP%+K}cH;AQ+K#GE@BIV1%A@2LAqSezFEH0}Iu1mf>aJ5~c);9^w
z`%9O7?3R&Aq8RUZ!m}@>`>esjCy(eVjz4Z9gC*nnbCHb<AOHXWpA$3ROTtB?15k7`
zTl(%!S0+M}-}dPA5GeE{QcPkx);UMDXG2W~Cb#vW>GN&f%QF<O>&$y~o;H}%BwgE@
z#UyLUW^Rv;rAC6M5TVXE70B0mHShxcrh(CR%npm3VWd`PK-2@fA`R}OO<g@?qyZP$
z4Xn5S$j5k7ne<(MRx)<C4>^X?O{}cMsH)x~*%r@mH&M|0TGDRX{t^2g{zvNF5vMO;
z(;F>z$3aZpRQd7*0(C5cP~*O*LIWzl*dAUy(~q)52;5c7VZgfH+{{BY^PdDpmy76u
z8?Wv^`Nd?z#5kdYEtWgyg90Z*`*U0``5=Nvn@iff(}E4+$sABt*s)&hd5Kd|5A^yP
zXugMg1CS*C)#BRPuqpqIUu(h)nB^@E<%G#{3}pt0454DF*&5FjD8|<Wapbm<b<xSb
z@(Y{+lI}D^KQ}C4Q)W{`=z}WVbe?wib=hO4<$xiadFKF|e4Om6g7&{Z;ZRGVJkwfQ
zPjsZo-58f7sKGxDVz!gD_y^(NG>h?yD?+0u1HdU0DV;51B?EWvXlIN4TsfsaZ&T!!
z`B?X1b1b#!BmogsRbu`tsQ$!PZuU%GVg(`y1P~2qwxy#mHDTUT`~1Y`!GH^Zy8N2v
zL(zTwKOD{NHwd{g=_n)X6X^zHx(u1wzfzVqLPBZBp=RaE-}ML%ekCd=*5s<dU-@3&
zq1G2DOFTVSuvl1yO1*60av1cLxh1X!QNU=B)Lfu~A~Xt)jRvlT%Avr9fI|e7lEcm@
zOn>LTBg!rUfSY@@f#$P3LrR9{<sNZow7Rw@gqErJh+8t~<F$H8$V`1zO$c(gTEOe-
zNqIm2MPh(>KZZ}=ot%&p<5mL26aAYh>PGr)ku?V7g&i8n>ANOD-+Ict=gg4b;YNnZ
zUI|7>|6jkh57Q?ql@q@O7z#2jzR4@0nj6lTk@J5&hl3e7_Bx7ivJ{`|;Q^vf`K&F#
zI6oDdLaAVyRtI#FyZeV1<1FNY{0nDUIU~O&H0*n_tZA}%WaK6bE+lD?--V1<Q=b|A
zuzX>VU9A8C5eTcwLpz3S=X_NXT^n6@c35zsO6M~<p5d9;7K>-~uR6KuJCh+5rwDoU
zP?Qq>3mpkb<wd+iFO`Dvww=ky5HaR=?i_sE->n}O#rIc&OnkNjPMKdSh}bdg2JB!u
zDY#3$dCyL~thehsz(Zru1qE$Weec%-W%`Z#hGe_AgLjwwkIi5Ba{cd30Qzb7O^yOW
z$vv4h?p`ek!P!MV)=$kq$mMN7&ru`CLaul<eAl<sT;NNN9W#Qbh-hIW=qg&+#Ta0F
z&^D$pUoGVEVYCcp%}`#4uNn_=GvLKYV|aa-gM0ut(JXJv!)XEUENtNh;tkuM{79!x
z4%au~$(+kis^4kBz&tr(2m4mJlz$oxXf<=H!B39W`o&Jw<ZYf0j>w%VxG~(}NO}1}
zOm3;tbOkbhutwpW+LqCi+;%n#eQjI9@VRjdxV0ArLmn04Z37Gm>WIZ+@Z$7UvJ(U2
z9aZ3EgWp$psVW|VC<hc`L;O52+E;^bOjxPBc(%8Y2JdYvj=<`6i?HH{1NhblhUZX6
zz7OW5hu{L)ou7za!rxib_0~=eQFvIhzRN1lm2gsSl0HX+lwIX~`4R@N?7z~PyG77E
zI1#>EwDX7$the;<$+^=dy`Hxy_7Cw=kRLnBuYNLnl~EDyh-AXu)~024<aL|`B%t!m
zqPG#01KUXr9zC$1(JjOeu2J~%nE-mkjlCz}Pu)$cfZSX8EHp}4wxf|wwDziX^DBb6
zWNs$kSzty%j>-b-@MMY?h?e96`T4dh{o@+(`Ea!F#ZEneix?wCwqVuqW*Oz%rfCvx
zPsbyvYGn$VkVZT+ghV^YNc01lGkQ9G2+?)Vw(CNPKd4>Oe#A&y4uKYU?#sJzQ_KH3
z0JFH{27V}M=?Y_<x@9QcA0H$t$eRi!rwaOgiae%Ad_n?B?6h;5tPYIAPIDjPueJwY
z$nF2isNmX}v&svptP&tA(?TuR%%yTY?1XIn?u^na)<OW57+@FZe5E+YfR~w6$B@iT
z`^0H|N2o93Rn?8eWeQggOLqXbk+R}3t$HOogZ+iiJoB7~(VbYjo_Z{xT{&0&5S29i
zl@utY@>{i!Cy+mV7RaJse*On_*m`%mjXU!wo=4jUS{ven62uK2s3yjhhG^o>5mFPv
zVC4got@VQm2&fjn=!0%t5+sgVsac6>90{ed82}<T*59zsg$}*}?52&N{l(njyVHd_
zY1E#2+@2=zzJG7gCN`ltdm?;xQ{lW?hH7`gytiSHD-U=2HBuUbIg=tY5#o@g_@5ZI
zmV<8YV&8#j2laax({l|RSKT11um7EtQDr{!*OCRhi^c!~#+>*#1m#fSvr)GTp89Yk
zeUJ#hzDqsXN~oT2`vJxU?H@S9dSjuoBq{}3+ZQp(1E@KB10A|LK@o5WUHO~0$PFBU
z^{Pgv37;6SS5A;sUzx$okI>8S2iv~uS0n0TOV)kEG-o_mjgoc4z)t-KAU=)op46Ho
zzM<xK#U|#tQgpWCiwxrX+F`M?MX(<?j)@WYXX=SJD@)m>4l=G^#OMckTWUC__zCQH
zyw-dQ1x?7P@v!_5WCW3?my#J)%M*Dj(IazUg)5m@6_brbl0WBsDwG<z{gd+xFrAVv
zP~tT{%7RT!c=v;{uht$t=ql5{qS`H+=~e}MeN9iY%s6d&nwx!&U8ge~xL~{hNZ@_c
zfe8NbK7U|92CX08)h@7aWTq)N2b=*d_RL4ZLix|8$np*>&95Gr1Hy+2CKg~BtV*dt
zM3mRa*UojR?WAfXdtOk8yfIo);&rxhjPMpn(`TU6ona4wy6x-ai3ziVsiZ(~9?tUF
zN4ER}_9@few!e;IR*r$*z|twPE=~Q?8Z+(B;Kje$Q_O^NZ;X0&+nu0R4?J*Xq}M$2
z8?<blEGl~FJ(D=FgDT(i6gvUS-^E?&kTN+e8UGV-8A-QR2;pxhw#qRwN`r`7ZQ=P)
zzQ&VbPE-&%klt=nW;HN&_4V3M4H0OBSjHv^l?Ms19oFxjY&-^*s_|~1Y0R%}ZeZ^%
z2wK??F!zHLfy$Q$%$0AB=Etp80JK+)2Mg?D*Wu}#q|B`9)lbCM>Yhb;^^oixn1}V^
zJw2Z_*rbe(<gM(>SR1J!1_~aC?R`R<g3LZ{-yDG!N8!%%M>8RiKcS~FAq~WIv?h~i
zUl*p8RJ=^qh;8G9Rrwu_&uO*$^RED=;GJX6xGxIe`UU^#DDjVuT%euiAGrH?4S*t5
z78PqEM>{oNzbj3TIljcQ6^HTr_Tj!ZBTM~4oGj$%ce))ZZ{ty_#_$p5LQvYhGdPE^
z%(=|238q5>a)d0@V}p`kdODfG86E!utm@MHj2;AvVxd+!K5%j1?@0lJZFUOrrFI5r
z<E2Rqu0X9G+^bOrkLD_Wdj-Ul7vc1EI8k2)RfQnU`oPPyW+Ybd5TFEZLBMhg#iN67
zb=a69EFcT3dn;oSmZ+1lK91Z|o<URe!s1M7yz-T8k4IdY*B-O85)IjUZhKx|@X&DI
zr1mP!{I=Vq^cV7`*0Qgnq-^_zM9209W39d66ZILH0oPU;Yz`U*z25BL2%8dZrtH*u
z_Y}hUF>h;PMu><z0dGa1Ox2nCBci3V<aK@P;*t7UZDBm}!!j56BuHfCNjl7-9wb`K
zEUt>MTsHJD+J4kUX?ou2<qWhb&%+mO$7G3~1<x-f4)=N2!o1Li!l79YqTjKXZR6Oy
ziM$%qH*i?)+w$l#S8h6R$AHGwS@Vl*Z8zWU2GtxUDOXP_JNzF@eBnARW33D&9wMCi
z<tteaH+)o6E8}zN`r3UDwc`Sc3(>Q%jPR5VzE_Q%JCjAfvQ$~W6yiEIf1pLv9{d8M
zxpn<pO30}TPFgW)#zH3KA~FB|>0?U`+|M}`8-{BErLKp6xKU$>Rx}=~t1QnA3D$V2
zId`DDItJWnC!@#rD;%R-2>=K@lg%;vtMq~hH7}H2-Hfj>gc6b{rJ(`>>tOBSk)H=>
z{ki4R>UnCQw*>YRK>5l0kd=d7M<ds_&6WGeg2{LwBjtuZ@&1qeA3xO8w(D^PEDu~*
zw0p2-^JHRo9LxHU-j}b-6kl<-;HF55Z#bS#L=bc<Wftkd@KIls4mZb!MJ90}3^~76
z3di{>a=$6h+Z4>?IZ!|xNZxaU1SSunT*F8YkTcq*UUvzCg(Ayla6~b)aHn8NEE&5U
zjmO+jOuv3`E4vH%T-{_HPecXA(Lv~VirB!~!JhZ@JbsopF}oG|;=w4Rrp(y$++Thx
zm)RDFrw8dLCcaif*GB^)?wI%6dyUjXyu|D*@D*_x=U=3tI$!9yR!Ig<ff6&HF_tfv
zyN7+xaKX+k=ZFOQpB4b`20rs!lx$t$Vg606DEn}!P;`@GguT(?5r7Yt;=v%<CT~?g
zmbPaZXyp9X?&<IzGN@Tp3IQWO7yOvBjF8sxeYSe`LWi%<XT&*W=EmW6@3TeHr^fH1
zW;$~VoI(|j$_KLX)q(zM$1R9#M&*iz@z}E9c}gyBw(OB_wc^mDAI@`E^7Nb<bOpw7
ztQh{v8xD_#jqNODt+t%T(QG!v<jpX5{HeXxYcEYDQ(Pf9B6UQ?o0#Mbb|&O8cLBO@
zoaw$1xKs`~Sk1Y`1r9X!78nZk=O$)DCn*T({$o%Ij#)bEq8~^TK?DDc@#LE^z2^U`
zBb@Xa>NPoeCrYzcS7qaT^h4M9=`*)(1d7KWgrPa}jyN@QqJoIwrBoMnEATFrMtn&G
zCwlJ!wmoYHm%RU!(gDuV-2!03m)*DKvq$5ec?;&^e0uvGm-nCK`x@8c?W*;^7j|wU
zdb_-Ya&PlLr&HPy<l32<ovxiS&Ez7LuD$xj{I2pa-npIU#0Y>UVRUR*RHtw@Bfaqr
z1O=L{krJX#Ls$SURyUMVqqj6r{>?8P47+Lw(8uy&DJ=No0fT&EyuK!EktrWTpvOb)
zVOL(@7itDGFr%p_Z3c%~9>awa#Hi_mJ`p9=I~CD|tEdh!v$t@*ptH?5IiumxG9Uam
z<Mu2a?X^4wD6;P_lnD&?RhoZFobkR?zk7aqvDbfXizhK1sf;>t*Rg{lUHKOiA|`<Z
zOLnNcuGJH%+AMHD(n>#IA!H%ehx+r<S?3w-eE+7~nfol{sTUMzN1-v^%*_t34ighs
z)9LRzSr7Z+qf-%3c4`~3S-2UcXw^*U?fOx*gaKkjQPWi;D;Q!?dU}za&HtV%Mm$o*
zmH?ap00;ZAQBJvB{|%lrdYSv*g4sP@hiciB3w_AZPeWTMDr%nXpr79Ytf_PJ#rF}W
zvBuVmlK=n_7&V*c_nd_0ankwFX>^{$;9?ZYlv$-GN)06IYvQQ%xdcb;4M<Rcj`Xv%
ztu<sHRrc_SIHdZJ9*oI$&Ob+F@XPWac%~yQ@p(-<oB1!?<Vm6jUA`CfC6B@q76aC&
z*9JY=IJ0({d)%jN_7ASRt=@4FO(RQge5?R01m5V!RwUv-yEK}8RY}NdMNA=clvNxY
zZJ;ZV*+?9Hu)*z#vXJ(C%oGID3iXo!fT+F8r}5C31*~LrmZsN5$FH;pn6&lqYHg5A
zhhRyZNY$PMN}4-3zV{6Ly+v;CsFGs($^k)VbOu41)TgRB{ohHfC)FKrtMb2(hO=pt
z@>7aokiMVJOb$|(-;K^X&7@Q2R7{ay5!@5LM}<tHYRaYW*+Q52xd^Ak(MT$*#jiPp
z+{NOS63WYid}VPT1!ygJb5^cLK@M%Sjppcq&bOewyRi20YYMng3t}3>Og;<@MVTM~
zd5vu@_iv{bH+TE&=Nwt!ql{caD905O)x+P!&tT^rsUy3eE2Tp5CEOLRhC9bdU4^x=
z1B!a*>(|85Pl{!FXZY~Nbi(rN&-lavM(+m70fAUMwc&QvhEYk^um$vWx1?k+haGMY
zK_9~7?IL}rP0W5_%F8&OW~vOyvSzc509s0^5%F+Pt}?Fx7(mx9((0k;G{pqv{Guk9
z51R<<^66%p+Ie&?`Es_?SmaB~(C1r|0kv3O@_Eb?h-9u5#=N!-G3|LkYZ|PBX8adk
z(V&+Y|3g^jo|JZ#3Qxu1S`@;N!=bMHe9{mP1!+9Mi;{Oq2+3wXw8Qn>p`&)?a~wKq
z7J79ArW@+H?qJ=xV&~PdLj4X_5rr<S&lorjbs;@-X;0=Rh^m)R!j{g3KGH{#CG*Ku
z2xrA$;ak@^11{|%`~f#1lVJLcG=J96glJvCI5xse4#U-as@|v_Mhx9f(=uuBEjC$T
zH0`c>_<~q5A!OCzTonv#r{=IG-8~Q%xSRZXq_efWg9Tmf#Q9T!K+#6+JvY{Y%MUZk
z7`!S<z;5Y;cqAt8m)j47r=pEbP|oyAERE)&e?dBLaY&pCVxuy-0_MIwki2ix#ko`a
zr%Aw=faRXzjB)ejR)gN+6;+lVC9rPqGwND;g)<R%aucxu8E{z7!$Cl?fY|JAeDo;#
z;XXi*XG$a(6J#G^?c(QstS@j?(ex6kv#$@>-jLoWo#1IVcaoIq%Bv8Kzhzas@_C=g
z9%gl<%I-Ow61!W?WmNyAaXpixXW0Tr)b^&9AykS3)gVpE_RhnbhAdk#?N?-vO_;R-
zxs}Hc*r_qEk;Ev#XflF?;)v?4*-t7I93v~o=y<$AQMJG{Rg4P56A7mGY9JKZTl6vR
zn=y7LX<|_oTG2~51<~{80Xr^8`oB$9>H7UhVV`}Taf0t%ocJc;gy&uRh!yiO*3sUy
zeBzi5VdCF5Tq9CrveL4=%Tu;&yI$H+fEs7pveX>3=*ZV844r0BefuJTe;i6GJXRT7
z)R&?@N)Ane@}8D=EP+jx8l_iajIQPdY1k{NJGh%%7=Oq%Z#}AJj^$FjNK>)7Ul3kv
z{36kN{I15bd3Ew&kv-CnT>&H!+iFD{EXl}uq<1qj-q|sk>^Q^?`4uzJG)@Cf`Y<9=
z{$C4#l#R}$vFzAhVJ}!&!QBYZUOku<+-ui-pxzN;+8#C<HS8q5CC1D%um3g0w^R9-
z<I?{G<*Y>A#@0b2ULN}Nt7CjIGmik{aI$mGL5`ddb_I&FZz}RAG4o2W>g)7BR$M)D
z<#nl{=u^523K75p!mu|_c0W9y`w_MeAd$ON(Vm3sf>y0C9u^(({cUu}V+2kNaz9jw
z2T>Q-pJicl*OsY)yUkaDujq;nf28w0Ga^e^(%<VfU}Z9tb1Ro4=nm<;rv??HawDA<
z6Q{T_V~1~kw^xko7^;7*%hxx%1GpMYI_}Y^<B_&-o`}iBZrOGlN~~?!`dN*f8rAwe
zpIB*^^-jbwbAzk<AROk@#qSo*9U(8c@m0XTUJ#?ELc~9oZ0<_S_8L?P3iKhPpi{Rv
zb)YDxH9b6;5MN-xDCrQ{yVZUmlgg*@y`1N4jDL4+36(D18OMtPYNCyMcid3lbr=GC
z16HG42fF}w<2&PT$x`Z`4Ny>Dk2JdFe~t?yi9`Uma4U_rkeEYwb5Y`KFLlEz>~E74
z^86a+<?T|9#k2QM9F9rlJ*nT=#R}thu&`3bR$QJbHK1^pyeLAmI)12Fij`oBJ+Gfx
z0A=pA;RCn>{8Z3n$=Roq3~;`67K7r&d4|c1o3gy@@Xe&(DL?N0*Q5LYZhr<v!}yJT
zL!Aa#rKZgaF=6axgo*w^+a2X+T66e)Ei7wxRj09Kl@SI3bamF=uUQ`n-z*V9BhTe`
z&*8`1N8QHP>2~89LvGHB4D&r)8XC7H@&-Rp8~T~d=s072_(!8<1>?=QaH?a}yB6An
zU*H^e8iWn~o8@Nyfs$r<=hkr~OoTDZWnb5c^`;^=N#wc(IyPZ9{cKAa?PhO5+Bxl>
zYKiYRkWnnTYpstQ?HobKg(6htoqr4lM^n}yT<&zFT73B0#`8bZbgy4_%Qr7qgwl>%
zUjj0RL#c{^X--97+rw}n7bHh5eHWU`W@Y;T9R@o!E0ZW(yB5tkYEVAU_Kje0Q|PJ6
z*`FFcp}oXxRCSKAlf1*S&_Evd=9VF+Y$6hTF0KBud^Wa4jxD5nHf_zWw&(ItEmTI0
z_ZDu4g-mVh-sc8s_FE;BLl)a(&IhbGqdH?o6g`jnAFapw**qsYw`%c<x`QN$4)wOO
z#z)rDU!U0WZ=O3akCNHy?`GicuLlWCh_cQb>eUyn#pKg?H^z3vI-%8kmV9O*LCPfq
zLEHGo=aeb=M%fNV;AH>;TXXFpxLvFh(AU7V)R_OlOj{ZAjC&A<cgc85g21>3ulXib
zpKp}_j(N@o6ZZR_mB9##t>UjFg;f??8V9M?4+sOY5Laq9uwAh@yPoVu`HUWMr<TAp
zT^mqls1EY<tu=W=z0b+>H!cXni&^PHu3B-=rW~#tp0DssdS8A}W&3ooII2<d_$zqQ
z;{`lIjo%N{-y@4_E-xtnB}uW)N47k$09mY_NxsXTGt;ICEj?##CWn5^Z8b+&262RS
zISyFJ_J0Ybs?7JPK#6JWutXvmlVc!XV-k~UR322=3GTSDmkwwa5Y^1Jl5&L&wLO+d
z`QZ`~^(7rYPfLGW1}Irgl$X7U-1>Mes7r(u8Kt#^Iojk1BGR#>V2$p#;iat~L3|U}
z?;<nC-P8WfG|MlUnR?n?aR2}j-(Us~sR4%3U|)c!sXq|4pKQo|05SHL(yWOgbd~zZ
z#RL=*3M<Ia^#+LAg2Z*MWZQXYA$X&enP*xPG%#T`<eOIZpv&ELji|6>e<|=e_YtC?
zPk?1vIcBQwfFFZnHdq2UbLxl?xRS;^S%ImWgTY*@J`C>Kh1cv%9W%k~b2+=9*KVPm
z^ik*UD%+Uu70cfil~mOxu;W2GArg}gLD5Sa11Y*=mnnB{13951XWimrwIY@1AQ!24
z%!O9jj$2xMCL+-dszGmBPWJ1ZzUU%_AUFHyQjVPf0k2L^;UcKYhXuN&@*Yj~*PLp-
z`s=F|<aiQi*|#_xG(!_Ylv#K%^{r`T`89AoXPQtmmsLJV2utakr;Vd%1XedSi$O44
N%^Io>z)u|j006&#Yz_bb

literal 0
HcmV?d00001

diff --git a/docs/landing/overview-dark-720.webp b/docs/landing/overview-dark-720.webp
new file mode 100644
index 0000000000000000000000000000000000000000..59ca68f785e6d2b014436ce4c51582819223d5f0
GIT binary patch
literal 17168
zcmZ^~V{9hQ_dZ<Pw(V~1c5B=A*0yci*xI&jdu!Wn@818<_xJKio|8%D-6WH9Avtr6
zinN3Tj3@|*ruc6q4JB@p@82LGjvSzQpmYmhL!g4jOsSG3WMrhp&am%+2(Xs+@4{2F
z!j6jI{D7lh%XPuLE@`uqbw)q%0W3URr>lJ4#2T|8J~2#RG{E5(<xkTM@ENXB<ZDAC
zVo)I?AzQ$m9}zJ71>|RZh3|{!8uSbFV(_c_e)0!-?n<M6x_`G<#FOU@co(n-{1>49
zy#7#72n7A`_<_%o)CI0RlYbcQG0z6L0p?z=00r;NXaOt$Re<8#oe}exP&%;mXZ0)X
zPVDIx6tI57+`wGZFA2;70N-)|%q8nDyCMF0fW04~4(KQ1E1}E&0sotTNZ@~Ut@vp8
z`K|0<{bTr(@yR@^*g$;JztVpakOn0GVt&r~e)|b{Do7Vx2;c^C0sjKHPWm^PpA>Hj
zUV-BQrNFbF3?OiA9a!&V*jWG+SPgIp_=Haco9*4Hxz3ZjfcFKkaqCs$2Qr12AsUzk
zA76pv+g;qn*OT};{aVsO7cSA_?;Xue;c#HV5cV1GHc)!>iNdQz`zi^u*k7s3d+|4Z
zE<j&8O}~~Vnc=P*R(K{E11nC1pz4Zz>q691E+R>F7AVZYXGMJ^%SIlcW-G8+5Awfq
zGP$61JD+MYVag<C_2B<%7K)|88vWF$V>E~+GTp;GUW^~U*;4du$!|gb9@+NwY`SaI
zu?-sv&75}Jb=z2czo2NGo%1HR*?q>jmkBzij)I;ApmdQ@y}VU47J?lRgH}hgQ=rAm
zC<ub9h7h3DK5K}&*UHRa$|kQ36F`sw?;b@iQ&WV>rtgcYdk=HNK4Gx1&^Xh#N;hIZ
z16Ld+2dod{U?Kh{rz8Zfj*xBb7k?}_BJ3y=EkKvw@8}&{7up(9E`HwYf?AH2yrhk4
z+pTCW?nffOJD=dF2(kG1slcaYd%lL4M|FY%4wo!?O_06JT_)qQ*Y>a_e)gP?kpVTl
z1Df{!+w`qun55#H{I-pNV*;0-?Fvbb)LdUEUJxgLJVz$Ztf~J_;4RfE^t;GADg2U!
z#h#8`)b~<1=`YdGM+oV~hKgQTa<j(53l#GdGe|2aVq>!~Hh(0GN~nO@l7##_51wWv
zj4bd&h&ni^qPM!exkTZzfX=K!h8!#iQ7BON=z@oJ0skf$3HA`V90Bi%?NkWi9%%?s
zk`m4wPsGjH+iwaInJ&%tatcCL66~3LrKv#O3hQ69?=MA3RkhC5p_M%~gNJR>=d827
z%A0@<VdDLCC0Nc!FNzgaHaF@A=c;zJpFcj3H(|eER|$0951NWdj-a&2hQ0WJ4D<~V
zQi60s`M1l&1<v}UX4*oBi}TjWQyka33Fi4$+6mqlJ)($VA!dA_@Y)v63P^|VK#%`{
zhV`u{-@NqGs-OSlbHljmq&h;y&m^h2CqAV*hJK5#pbr>zlSWSQ1Z9~ad2>M$kLlJ+
z(uAa*Pq@{yJ2uDMWc9wIi~2Dlb<n2ogu^an<_?BkNY@jAu*UBZL{r|$4xdB|*eurr
zW4)hf&6oZ^6y(=q;q|5Nzg>=7xEvocGY&_+*u<*5wPTZLecLn+qJHdXI9MQX#-#V6
z5woxbN}CHs)5lW>k*b4-GuaD}>u(!O2!lUMQx{&%jZ|7~lV0E8Y2BtyrDjkR$W*6R
zzczjSm^7ReTS<flD-Sy~aBms6YvjS(V-SsVBlyT9Dr%nmUGEL+UsgK&omn>agi<C3
zrG+cEG(LTc?x;<awsGfJwMDU-Si;GB>qH>26yDQLDGA`A4lRAT#N~efKO&~@Dd3DP
zeJX@w&&2X~z7pphdcZ#Zvuhgh8d)#mI$W*m!GdQs<Y!qWXVSQEUivKl`XBue#LQ%t
zzy1SxVZkZY5zwzAqg_0(50wU}r?%yB!dp6*qf-DoCSZsB_wZqF>{fFDb$zjTbQ$~q
zcP%MlF`^Z`&l&$bSPA^0{)oaQM`$W;p>Pg-!57A9^gBEw!f|W)AM*lsU$c(Hd_JjZ
z3RpP@0HQh)w4%%>la6L2dgL`6O&drx1P}jRj%A*y4<A-1P;>CVE~@|ajGC8Bo8pff
zXk5kD39WK6r?<_A39Q070!J>>o8WK1g#x|O_-Fhv4a!SXsdi6-2Olki?&f3{9v8`o
z|BNcuCV)Q!$`H*!cW%aEXmJMiKP8DJi-YsvMPa}~DWFmeqG5{3@!65Uch0>pce?dt
zz6g_oe#vtwWsqhyrKUw?a&riQ`rEfJ1raqP;1OrS2oB+2+r;xG7hNA4O_B|nlFIhI
z;(!7zj=1zK`z>?-&#1wmWw)(c`j!~%&(nVFruDEOC8dKd@NMLynw<_4qojH|U;}S#
zNE400a}R~}^g{d}fZVkl3{g*wjaN|p)pB(ov72qT#Ha>Wj+?J!rrh~=FWGNry3V4$
zo86+7xk7K;n9Ies+HN0pn|xqg>6TnK1IJ1N{QY~8Qbj3)?w>v6hGh?RF8h3kXAw~n
zypCs0V2@@U%|fE|xbjHoi}06^J&q1u8F!5B_d(*7O0CmPr851~FGm{78<qoTR5P-d
z-2Rt_+3)uilZkcaedh!1-y+O*x&J5rD$XQpYz{Hjj#<<ngo?q+lhWhzFhg&SwCjLT
zKHB|MxA~9bL>V4h?sw{jCIb{S;a0wY%>MwZl$}H5sL3`4rg`HQf{_|-TJnaAXB_AX
zi=OEfvM2m?#ZyCpMMX0{)*JS`F(0eY_}%otTOXxYht<IgkB(t_WH9t;bF{pCai_PI
zPsH3*2k2Qads7x%R^wPR78?)M7rD*d*Jklq5#m5g<^%Imv6u?un~KjAa_i8D2U#5z
zWWD_0RwQhe!M-ScuusG5;u+3>RwGn$6IuQLZdkFi5I|Ng5}_V#AU$dy6V1>9IG6nE
z$SF~eLvDPJz@_pKNzR0Dhlr<+6lwSJO{_Kf)={f^!iBQ5c`UBs9?8Sx#rS`Q6YJiC
zPl5eCO7-+)mMFWfti9I`y^G`YpCs6fxkwM1OZ}bKO&8s#*+wfc{VSNRh&FBf>FH|i
zp-Rtk7z+fF5{Rh}{fO4!yVwL)bZ*RJ^CGiNXy2jz{Vho)UoK$>q_mhAJr{c({?8dv
zNU5AC{sMRG8MMxuSQ>?!kAhplnLf;^iO%UT+Ew)5`VLP{ik3`5T?)Z$2_Zl_KQo<_
z=3&(*uZwAtt3T;u43QB3ufKTkO@ZS8!^+eu+O4MC91cLyHcpqora3h+Xv-5Xp2J1P
zFEW{n0g#_p`?)3NBO=ebyO%Kh841Y~je>qqO^i$B=IvJfLrv`cY>Q<5CF-Xy>?H3D
z7m48#c5v?M8#rqxb@~t~sd3k-Qita?2g$t1yFn724w4Kew|_x&f_a!yi0R>SCTf&j
z_=!&nArzBh_sTB5@y-g0p6NCPjrZc4+@pyDEX-jV$92={qm2^IW^G;RK1Jtb|4P;U
z4k*zx;7_A(BW%UJ4f&%W&y<`t!;yg^nUa&~f<X&ityJ6_d@3NQ6`P44T#h8udc=l7
zL@m6Pms>?v{f}ArhvTS5$}ra@h?=jP5!1ryh!4D3qdl6ZReWSEKZFIM&tcUWZ-qNr
zGq|+-^x#N1_x!Xqqpx>y)k&e=#9X%yl)S!QD$Pflo%=QRPJC+SqrxuiwinQ#_m-1Z
zBSLA0zyL#Vv!;C-D{Yf63s<Tn7MgT2TVXd_D1_S8#)ML~v<`w#m(#7AJ!(wzJ@_2(
zqj!CbTi*?fB*_mKB@>(KzQ5EDUI`^oNu05>2At6ARc^}YJ-p!d4pG@cchVQD1L(b1
z$dc`)|7fPP{97@3wu;?ho_DWz^LAeU3Ic_-5|87OUam8>2wS@`3juy}Vnr&l$`4Qj
zXKtaEVKhY#;Ir}Ge9YtIZMb5(hkG?~6Ipw@PqoQ0DkqMFz&Cq>)J5#eEl1h<W5ERG
zNVH`9Y+OLE5<jA;`+`)A>N1AT$TRN54ps-Txz9&0zc=xMXqwR9*M(S>wwn8xo;vn-
zT|T%e{X<)^1P?<6Bshnd4;22;m#tm&-S9Bxr?x2aUn6KAh*>zJPorHqH}JRe!(z*o
zI!AgF8@P`7p4>@r6@)J=22wHBv*T@2pzHWN%|5&5(lwJ`da=~*l61P?PapA%y4u|k
z^8(~Jxy0?-SB@U+lxUK`enX?<w<rIe80LG-lVqGza=WaFi)*$G1jN<=IjA6OdFOTW
zfyN$0DPyqsuQ4sZ^Y+}plfzn1Dg1+JVn{)?QRY{LO<Mv8%H1M^AXR-?`g-lyt>FmE
z;g<Gysr?G)5AS=NAIhdagI(uns4p1W;SGch8<e$pN&hsKavbnYx_~2n5etltWQJ85
zN*SKMzZPfZFVK14h3ie#nS(!x^)+?6!jb+o|8R4W0%9ci4#oR!?OqUsuSEz5MK>|P
zBRCZ0!hR!aq;sSTMpz4ro@{!RFId*K;*aNchF>|vltmsMa3;jBWtLfdE5~#8^4-Fj
zz`MnR;h7Eb&<bPK87eXyscHy&O?ke`+8z#ndBGYN1vm*mcKQ(Jb39}OcKax&&x=>o
zMHx1pKn$+|m?<PL#>w-ZZ|L0+a(F;Q4imN0S4pZ(0NpZE#dGp1Q;Ol!?KD~=)d!q}
zet&B?l*v^Wk=^ESz>nLjpkm1Wa60p%ZJpqm2%oP${ZL)<nTs?0ic)R=ZvV+E?dj|h
z<^BPO$E#gO^#9kkv82Yn23>T+6VdykLlSwGw|cJ6#8}Xu633fwU1wZxH>c-+T|EEj
z=U}LR^OU98vHpu6Q_W{*ce>PrHNXZ=5VIh`^uSiIKK`fZEB1zJ!8hDc?6&?TdU0Cs
zFBpoc_5j%|2`(uGa4qf);RAE!AL+9P!ws!BROh&lH=X{k`=-HTLmt$4LF3)=&qgJi
zuJEBTDCD-1Kb2z2b>y*4yD=ymbw-8u4om7{tKFAVJHi?*wpbWZO!V<4Y<Sr6^IiIJ
zFe38TSg)89;9Ewc`$Hv@s9e7MsX*32dr&okvPR)bc8RW%IT8<-jetLXJQWB{DYz!#
zY+^JBt};Ipl2V6qkXr7igdbs_%!~dp&xXazZXSX=x>$esdp!@Y430zi1$69bo}&M~
z75dWxY#qgh;{(By(wxw~Gj3Nr&dii;B9qw@CnvN_$@F68@ac~n9DJag8G*ALn)Ts^
z4#l6Ecyd9?87kw%akEuWpyS1g^)r&Em3&%Jw=N^KC9V}!3e;33zf)RbuBu!hh!S7W
zKB7HAXfJ=#am8m0_exSu{B|HtzPHi?kh+cJe_){UCR|BIkXhlioUmbV6vGl3SQ59q
zHs$e3)Xpu!gyAYjj56|l!3hP2=Lw|R2Hno?9~ZrL*>*{S_5xQ+7tABxAiw7?p^;bO
zN0-rtx)$uvmV0fVriFLO{veyA`lCaa<eLwL40U|9aJxZq=_u^P0}BS@)#HnR*$K*0
z1CN0_#p`8)udhH<H(~Vp?cu24h6rDo+*TsjLLnFFd(d}-kkR@r7*GmBGUR@9nZlN(
zMjG9+@Ets8|9%kJR`*M`eEE+}PXZC}Us-W97w(K%7KcCC{Tzz#!5~(vq>6lXaqd3X
zLV6f(Qn$UzNMV5>|5bw?4uq)6spE9iV3NjF?MokKo=x1fQI}*s{=%b9aIN%p`5@xj
zURfn-vi`oNIZcG2ag}Nrr|Kt$hbcGp@Om{8t<RVwEhFe)7Rpkjw}M_J8js!!+ROIU
z-o{;3V^k3I+zDNEDx0wK`C|$)uYnAj^V38<$^xMokvq6kQ-zrLAWl~86B7G-br-+i
zA<oc?jcfi%#7?(%^Z7~QMU`j_oSb{S*@RZc9bzunKvg1}JJ-aezn90dEU#q<Y>-Pt
z<>St$nV&4|vS&wI-1w&%6E%dCS3ZkYVgyu@e7t+>4ISU8or@4HR+QRi!RU;)Ab)Ak
zy_|U^n${v{9dc$lgV~P)XD?y9%BUYDoAnLyPGtpakNi(34JluSzrasspH_wYDsH%=
zx+?VM9sx>Uxj&DwIZ<KQAZtj)j8-=I<}~>NLhF)SMxu^p5ALi##!p+7opyOHVS$jb
z@mjl$r+d9uGnKeoe!In2dOZUTsZJ&j$-WyytRn@UPC}p9z)tCNt{>0gJg~DkAvA7$
z&c+hq1E+0<h3di}LbylIA27a_X&HK)<?oxjDM=m?fC~SQqfCxY6#@Y{fwQ4x7J&Gk
zn=9lOwtU+90>oOOI?fIM+N`4w-u@)Hr)uUf<qTiBT0{W>0qYN>^M@8z{4u$k!nU^g
zZmip~OD3V`mRZT4@+B2qugZ`+MQpRv^Mk6rPr`(&Lpr;?ZuWy*t3#%m3^*dc!%g&`
ziu^t~1<#6(JqcClCO|sQSth86w|huzf_Ezz4u-}CiV^%VDB;rOVbpPq%PBo1XOO6|
z+6%nI^41_zifMO?5w>{VpUqinNEzn<!L<BQ66mAA4jsEy%;bVJc5{u?l*Yw^P_veI
zKNw!l@YrNfZ67eMK6<g_2I}@*@(cQi`CUcAeCM=@JoRB9rRQD<e6!J7vkMf{gTM=c
zD>uE3$O=~olgvLvp2s_yu7D)7XV{8wIcM|!<^Nd|o^^GO1JgHIQ0)I4*e7}OPy2$L
zg<J5rEOzpdJZWE+pmBuG4KXtG=K^)onB*_*TY~ZH5s6}vE0?hlJyP;L(s^k{MCWGP
zQl5Shf#1_PfX==%+D-|?HB60lBlH$>VHYz)x-{QaB2#xOUZKhEFZuV0eMt+t*bo(1
zKcTqponKu~Z{6Qu-SjtxF@PU6&<r}q8ZzLDi?zTFgwMSf(rtl;4#{abGPzfvdq>xZ
zGU(dPt!goio7hZ(=AdgyPoFIT+m%Dstn`hXOBVQ4@qYD(I~A$tCXFZ)`Tdw?K<%dg
zsXeBd$U8DU$%Ir$pCwG&^FDU)JYbuBuRN4zka~mUeryBnA1WDfx=pP-YRR~dAu>>D
zd1$EdI>{0|HNQlPDP|k<0@y?MT9#v9qmC$<%MyWXcPw<$j8u0jyY50QBBV5{H}_j8
zHM~uPxEa||F^AyRoT@Zo{u^=0TtMz42Mkrg0*1K*4j;SjF6wM8s(DErf%`amGP;ZG
z=!Vcdw3#neB%=V-->0y%7Jr`_MrL;fgmb+70;#FpTrmZiD0O_@wKwOC(vMF?SGq(J
zb4@h){mn<@qNJvh2qNtFoc|on`nJt7Q$$e8CSa4+uV3DkI78MTdBH-G@}co+h@x6r
zGV7(4k55>h$L9v$ER=)v?LMjbVF|(M15YxbXiJUJe%|%xJ&x?~_+JJlbROWnbxx4d
z8sR@Eb_oD)O-mv@ttbc2HOS7|$9zR5?@nmLge!S@Zgr;wD;hg!-joAY26j^3q4Aom
zWH!zzSQwJWWY;U{`U)cgFIi8Ff-ZX4CgVJQ;qLm!|7x^?^1<{fv(W!SUvSnwR-OnU
z*4o(A*iwwRR|gpg@ck;QKcjPOy{L0lbv9r6fJv_xN4{E4uj&ta#p=dDv<`5%nCc2B
zckJ}DbXmK#)ft*LXw^<glbv7V5ctV%30JKA{ZhcpPRqji?m$QJPE6muxeU~nkxn}*
z`aWI7PbgSdqDl4WpH}(+-A^Z)Gr6gB%p(x{)%G6JtJ-t1SNfSA`Op6B^hIlidW0DS
zqoj%+d>+<T9(bNHzJ=kO-kX-PC`n~?%g*%PNL*`f=kaw>Y_+HDG8O(S)_+?Is|2=-
zKHRrn@lN;qUrpokX!U7Yzi|vJ#fj9sfnB+H9nhl~C*US|G+NC@Y}B~3YHshUi;jhE
zt{pG%+G`)bJ7+f%(p*nfa)Xrfj?SfrohyDTtKP?$_x9WV?^ZT)b~`j?;meE=zHZS0
zK-JGb1!&DmAcz(Z77(%5*z?J?Y#ao_sfPgmXldz32=EVlW{;-_&J(lvcEo5Zrr+UI
zB<$t!L(b9*djz#!O;q>h0jH4R+VBXOBO7d(#M&5Q(Hznou@og(4Kf{|l++T&uAzf9
zdBJc)AX$;PKcmmGBAd-DQax(fymwMZ;Nl27LOJ<FWK~3?(8rpwGl)_VW-GCN+~)*D
z<m&<US@~>2G$2Iq!i0f6i$+ZMcH4?a0Ub_nYrue8NH2A&53f4(QYI85X0@yHnSCUr
z%_d6B`~H1vh0;8xiP}7XSLWZZ1CD@93q^jV=FCHSq@qwAcGhYU$xTpVj3#<g`6kr3
z>X}d>-i&dtg^cS!>EBUrcbWcF*zzW(Sv9=*yI0`ZEYimAZ%cDJC_F+D%srt{^BtoL
zPN?#S#V9~=8GFk_sC)PZ;8G^b4C{*x;)zeD=|NA1>!54hTi3iQg)GZl`x#TGXI<ma
zIjI`0ratvFr9f3+k+kL>zU_oVaHl}eU34Ob#oGo6%r9jl!u3hMzmAd09R32%3TOE|
zc*=yyNePG@OQT~KhY_}rO9+v?bt}C=R2tq$pyN$%_f62L@ZcBwvPgfZXCMPvWMVa9
zrvUI+d4(MsaO)g+(E83OygQjhyw|;1TxJ{ruh^p|N%}JpB3$>*p>ApTr|m&Si3mSJ
z&l%?m`u>$6y!dV$R{Or@dH|^bhm3gWqHFQbP`!eqE^Y54B)UXCHf{jP(SgRxw+wG|
z_K+JN7N0#h8azDI>o}pvGr9I`ohM^+Xl2kvn7OEdS+u{;47SsvBc}CFujELxdpa37
z#Ehj^11FXPD4T~R$@5GW?`SLkE`Jo0Yh&Irt)}t~{vWiX5)d<ApyY(?_G_xv*Lj*m
z=Yo4m5}i4`{Y}%<BT?@G+0Fb9={{-lHm`#FR2=5uwzF=vd23PTEbJe=FAN|g4bB@d
z<6On5jIK|j`?C0Ej(55}zgFn}z7Y(BKVS@Y%tYZjhP%Pyv^ewITR6jpP27?LA=!~3
zuy`^R{X=EtIeWaOkW9C!iAGLDbAsQ8@$T}xv^EKK!X$-e;@)k`!aRl${*jl{i-5Sm
z^NC5b&2=}D1(OZm3AeR5uwc?yIzPRE*4)??A;0Op2B<A(ODF?vU|Bo#`k>;`j*Ty1
zFDVt!w>~>gP(25Zin(ea(-_Ehy&phA<>^*U7h|UZr`{d3+18#5U2D>v!}@2bC)`ZV
zEa3e&jyeeTTE7OdUW$BnM1>jH_~wMm=?LBq*b$X}(1+Sq0b5S042rsQ!}wQz9;I>V
zDEyJ;DB>vz<loH7i`ywI51&6aM4OzK&CcxhDTBXbX3)H<w_w?Y43VGWEy-yOqoUVH
z!cU;z81QZ;<$%BR@Cc4GCjBSE?U3wwe!EFW9Q-5r7@$jD76)rM6=&V6DlPKRIE)3Y
zuUw_TNZAi8&C$yk6o};ft9TddPgR138A`xzgn1LBKq*anZ^Z#%e-jtP1~}I~?>j>#
zT2AJJaZpGLOZ{laL>-JHM_s8@dusO)Zj%#B-6q{2sDE!<Mt+Lt#+~~jFDU+~?YbG1
z{}Uj6^LGm3gBK9#=NUjHJNjL#wZInE24m^Ya^D@AitgPshPh%(r>tgV8Eo&CGu@$R
zCBR?3VPr+lE!5SLXm&%4FrMKR*0h^KZ*{0X2#<{Q58^am?ULK?(E6|5o75WTwxl9G
zS(~WlrR;me5MRT5Ua`+9IXt|GlEtS1j*B0KLRYQe7}qyn?AtgnMx|#_^kLHRGMyIH
z*Cp6PH~b*%5&9L-vGH;d<XW@($_P5Ibztg~=0CqDTf{%-I*um~r{>@84`D}xBY%Co
zrt$%d{wZ*yN7^>TEVrZlu=uSDqbT`iCUAhGGWyg+xiD(~-{{mBx$drt0Ct1-WetXR
z;?j}1rhC?LSA91J{0a1)(+6?rtWBZ7jqOt%Zp36YL0O#tLa3@(L%*DJqv0ju$1w}+
zSKbHrM*gSiU{MlD4M}&^m(vFHXRLbyZned%jwb<w_GTD3Jb`E<NwqRqmFi$9SZ{zk
zEJ1r!PtIK4*(PCPq|Zf;w%MasOayr=ODf-}42}xPiq*6%TnsAXI_d_SP@XyICf?=+
zWtsGo&H^KKuw*n(KEyDKR2XeZ2n8aYVP7eoNdz;hS;<`pq=(6-(%|swkUUY)o<3Km
zE1WwTez+K08lNnlKDO39gR7F5TP3(*<|G2AL_FZ~V}8XH;zx&QkTVJ&ZpZ==qqA42
z^-90p{BNWD+!l^T4ZuRF;|%<RhAu@X;b5q@+x&I%?BuH$jqZhu#2FKNhU&4`9BJR<
zpPW|o!DDT9-QbO0<F3%}Cz>)y?PumMC1U|ZNHf%98`fo)VAOi5N)4n3t+93cqSsKn
zI7q*m6cwB}E!sAcPDUTjro)W<m9U_%!9!Fj#Z$h>0i${8n4f+@V6NGSW&N`@WD6xY
z1)0zfylYcJl94Bq7kv)q^7b>2fq8>f_S!IB0<+E(kUP5}mGeE92?E5F?nbk^jSK(L
z#>v`QqP61v<O`rH(1`x_M9hZ<u-U-%JYCCu6Q#j=$aBMoH-p|^@>Y-60k(J*xx&3o
zC#>7&jX53|wsrQ0N_~sxVavjw`{PW)5wC1!b&)15M|eq3Go>Yb+b}lW$dv{aRHr-N
z(-sZ(XBJ1iY6KINPyk@a@vqL>nfcd$g?SjxlxIn`WOAPa1zXxh??y}!9*u@59dVmz
z<PE_)CwK$q-7*8Djz{dAu;-4ToU3~&`@LdJ+E#tz4KU?H2IQm@YK0$}uc^1W6pm(3
z0!&iKuJ*BQwu;F`E5f6V<Um`kD_oi<;eXHT=HE<_nl882iqIF~d(a<<nE;${GWiye
z8k^^}<6pom3g!+L4LYhY>f)--63$Yv7VY<mJaGG+!+MB0h|PJh%S&uh@83tFsHNi(
z$Fv<!LG0Uw;Yy(in)7Q9j_D>WTT+cm|H!-zxUoBG7bwxMdaaEvwwVX)e#)<*5Lpe2
zj~>LDcv<E^;Og<xUY8}bm@#+P3}S}(R;XFm+8E=U`x~Q8W}Ak4@ImGZW1B<SHeiM9
zjMkzUq#b?{_Qh>`9O&(1WpGD$t$1(Rl61WUEIN;{#JZSR?n3}tEt>&6ON}fD3WDwT
z-y?h0Xc&&~O7vU{QKlScLy&+2_CxHxk{HE}#q_GRI2K>_tbAgN$<O<}ni;Vi5)d6f
zQ#Tr!ad|6FFEDC4#U=lg=Yo=t*xf)Q)4N@?Gw5sB9->PBsNKNui;f$0-$Ud5+IA&;
z0VG0_M-IT#Q1~wLs8Fj_(cCVASni!JZX@yBUbXgKSnLurj!?QKtjDefY~41-BFftO
zW(1Qy&uMV^ZFu;YNZU7qJsJ)lQ9?du<}G|ec?*#~V1vg{efQjw#Zti(5bI?g_ou0V
z8N3q)(fr-M3igc`%=QZh4@PyA0>mW(d(m&cb^Fb`pu`y6)mBwdn%e6hDx#|4)4`mc
zlR~ENc>(hAeX<(FACj@{15oJZ)3v5RPB*6SO@E%1Hog~x*w=m4k0YSb3Lx}cL_QYf
z*@aXuJZ)hO43U0z)sBIpkQY^Y5FlQ$5-VsYScvAK2tunj$G8yba_Nz!(147OUx2bG
z&-!b2{Zk0Eqr|LiJ86LaWyU!w22TpisE&UmSP_i0sg35-&KViHhK=tNRzxIBsG!BO
zsNSoB(pdB1PiS+6%9Y#8e(?1IO~*?@i3+SZXQg;a8TodvIIuER(|@aIwJgMKL<~uq
zORgP0v+&Eh;&^lY-$L>#RiL>F8s`hl!1%5d2%fmAwcUebg+JmpzM<$<A+DbAb1vpH
zx?&$|MID_h$%6wng*ijgQEWkS4@_zLzW<$xX$$(nsUYPclG2ouOhCWk$dz&)`7BB)
zEK!8pkSt|5L9Zuub1#ot5}ki-WPXKqQ#KDz#g1CCLJX`XjT(Jw1LdJe`F+M1`_MIf
zqBoSP0=tAkT%}JMc2*Q7M_{mKrqg3!2bZ)6fDwhrC$=#N#)maH&p6i4qZ2U}hF}sv
zngF}H8`L0JQ;2g1O-s|2x@}ehIuQCsPT+}h;U1gZs$n)xe_H9zw0=792AMj|Y<k+X
z)74u&+3*hDZ}`U~!fs>t<UL`H31H48BVMgX1tCG5tgt1$BF4#5E1`>kvk#9=DGJ+$
zu-Qt^f4hGcv!!Jcj^!O}7Qw0Mw1X2I@@{az&v`EK2DLu*liM})q2!8ahjZH=h-^G;
zI+AGT4fT&|z$S7=72E48xq&EOZs6*QspVXo=mcpvRoeO-L;bC_(u?j{`qN5iT6-{e
z(IjU|c1v1yIE#D56mXA8op+0RDKvR7(24hDe>qk9%UpJPhB*#U{n5_=zDT4_AKJ(z
z)dP>6gkJ>Nr@$?!2;Ma|9n;+#!u*%C1jL^urXw=g?1fOl{BcGHiH})>ot|;;BnIB4
zKDVB?I3G<ZnOE1$tG`|dcs<9c?A>UFv<kJlcUuCWmwz?^N13sXpf4V@^y-{<BRKa>
zJr$gdTOazc5pJmnvSd%y(Y_kc4tsGeT-^6AH-3=cv}a=c0A9p)x2p#@-CMy~9LR=k
z0FEK4(4)}GjsEf7rie6Xs}=s92HhgYFaI;%KcdgYss`yM=yGDnGhDE`@(WzyVhjQy
z$Ubi>x2~ea-ka<`J*=vU8Kys-623V$iP6^NH)ikA0cy=qMq|kOc*%`<O0zyk&F>90
z_;+uOJ&C(QmZ{Xfg$@cWYw$FZPkXO5d>99%M1dG-M~aY7vmA-7$PBEW<H>H=3a7P`
znWTfT4A&~Ls(K6VK+r_Ywbk#vxOtz-DcPohNJ44T*<T>kt;?mqnCAz^128RJDh=T2
zr6lpY;($h%7a)X4Q9MSVf`z+HSh<GK70tH-<~H~VwtsMBkoTOddO(zT1a+Lrshnp&
zY(%vfB>%n09R`ucNR)8fWOzFu_WE^}WV&P$N_F0IYRQbV&_slzc8y-H;egf-6o7f6
zh$Q)v9h-72WIi7P1a`F_%U^#%b5LOJ9i7UeMRTZ~51-|w;!%JvgeXkKX|Ob#sVWX!
zF`%P-BZ6dYC1(_+KJByNXWQr5>S6E=atOEj@Myu!!F_k&rtHM6$-T4_;g~H9f;JU;
z_w1>rgINVWq@Iy>l}MsXCU3IgJ6Gc-ih&ZSM@-W?I`Ys!Un4~RZ<YnY=NWn3|6cZ+
zHprU=gh}U8lAa?xrqP)f_buK4)T8dJr1vyg!hPg6>o%M8$*C7+$o0}eRdu4_ckW?Z
zb?O+ks^3gpmIu?vaHo2DsmcL(`%QP%(9ALa^jFKDtHdojbdDRn-{)c=TliSl+(P@y
zIcTKt%YUnUNpjJ_C`pCG1c=eQ^nK9$)u~0CkI_&@-^_y43!*aH`8o)qIC`9(3{J6L
zW8vcW(Ecco>&rElvN4{Ibm#3-a_&1*Y~WV?n}JzYbD^gDo5iC}AZ3HHZ7eH$vm?$p
z)iSzS*|!@G`K=~!W$%@!j9h7AbH<z6z(T(ol<qnwmiT_M7yWPIT9>U>ro_w}e#tpW
z9tG9bFV%i~?}N;AiE&a>sThSRt^MyphZS~cQH^xNF#ZSV#7{PpqxS@@SQwvRdDuf@
zwXpJd<eJ)K{5{!f@M@rLzuP^zOK1hEye3xG5j}?Tl7{-#)*rXAxW-06?(<hrfint8
z+5en2jtS<x|A?9u|F^9x;x1hm^<cnrwKPp$c2jg(*0XgzEZE;YW`)u~4X{+fPQ06E
zsbN5&Pe9A(r5reKYOI~Ud02ERPu4@gni?3G#EoJwej=UN?fHtdORxj*Fv`ZYX_FYb
zGDhiKf9giUjQX4>O#a5b!qi1jQ+0S=fp{7_c|Rhs5moW^N;Z9U>$l$mE$JzP@p|JR
zgRJDsU;~W~Tl%)(2Ju=r=r6%&Z@i^B58FmE)yPQH(@e8GLf2_KIF^~Cr@U^9V^b8Y
za?9xCxo^P}C`&|yli4+PaN2VewK;`CSba{jj{RQG1<wxwxo|jsd-6xg1!ko$>_K=~
zu)79pF8>p(S|YvCgNJPcjjxM;%^<=76}ldGzvRon-9iUV$fWekZV&uq1<ULXMeVtX
z8%G|nNh|`bR?bH=C0?mesatkWA#x#=Ve|%D81@kE?M@f2YJh#9HZU3Rj*&EPC4XEs
z4~8mAMm+Y7g0kQEUN@B9UUG30pK&U_&HJb7o7%XeOLztFL~4xR&(E3HF*4Vrt}aOB
zSF8XBF|11?eO!BWy)LyUo8DDaW>8zX=qBXbBiWiSp)lJ?#|D(k`Z&=N&j^WXAz&CP
zunpED)eY~!O$B$&`%9KyF|*;cd5EFXeAiBtH+0;_4BN*hcgRuX?g2~+8@W<!k|(jl
z(ZmM*i3fz%nbpd#XOPtis3uw&y{;qF2t#BgSdGM@;7#8@7~VNM>e7CKJhCDjyY8Nf
zjkqxZ)YIsdtS2VE0gY(|%D#Xi0Bc6&1C1~6-Hs|gJKBUj^1<<Gk)1Po&6iM}{euNl
z2Xexg@~aYoNk7@4gdHR-6+VodY`tG8qZOCx8ZJ4TTK%HAa~W<_ug0uzl`hV(>*rTn
zM+keQ9SwTI%JharI0#<}UEfFh%WLmx%1Z{dx;USpXS-Dlo=-^6EkUL1OOn5uj2==K
zf5SFzwgaacxUzFhox?l0sp|a*_c`b|ndSX4hBeN`_qa-XK@^A}D^{o-Yq+I^)GXIL
zRX`AA>XJBKi!!{c?}D$rnX7$^&BpH`K<RT&_!!m_-ZS!KIOg8a+!GI-GY(ILJk@)`
zI_XmF&y!~=EtIvWHu8-9V>uHcgpQ(J8LFXDwCwcF1UR8;ox(e)^%%6ixRk;^6TwZ}
z4+iwbeIg>ooQqWyEEa(5^HOprF2A#@-_;3aGP;vvVSuMrB7=?C>GUE54N&*Jss6US
zl@K~>I$4w)wHX7QYv*%Tp=V0&3JS6}*AD3F1dkv$&9A?nog--(QuXW5o_Wu(vj#vT
zm!V&<i%9Lmom?rfImRC!Etck3K)e3v6NXIae{yFLio+^IJ5ignCqU<-pL)2*_jh+i
zAQ2y~TJA1?g)zi3@t}JXlHIToqO_y<x`<6YaafRzFKLMEsqtwsYAM*CuXyMN?MyOm
zSBy+#W?I0~%Jd~^w5w9Mpt5Le4o1v0|MylnQ6K3M7~qk?l<~wb_*QK2+Bx~_r$tR2
zUl6<DV$+zj;;%IjpS*fs&R_-R0ZI&b`qhz5zky4msD-(2no2xJgopFWcm?SurScvN
zJ|%Wihz>#=kqXWd)O8He>}w%k3A*=c<wMY9+WFyO%529$`}~SCHPHQZngl&?_s5~&
zk>+cS1(Bx|mFJ?SP(-tupN+5J7jc?X8>dqPXZJ+c*D`MvY;{o?o+i;YkV>e*#L+eL
z9F5YMpLeWjrKL<}$7^L>eDXGd6Z5D&Z!8DPRV1#-!B}qa$o<zpX-Uk*y$#0Jn(;t(
zGeR#Hake_~vN-sNJ87)A{f`S&b`#|U0ip%@%3p83mwK5Ffe)5-6i7R&Ze)&sxk#Q!
z`?M!T?%(4u9@AX5)gZN-A7w{(!Nl-vjz_KRGvz%Q&i5MR2S6ry@V%!BIQ&Umw7+Sg
zBSh;HyJuC|aIKvUnhgGyA0kJsQVhr-!0Ev+QO#oLNK$k@ewoVcw`#s<F%q5smrT@t
zumk&j58+C{5S)2LM1dpsfN1jz>}wL5?1FLMF-glqEkcw27bx0bX=TfivgJAK<2B=s
z4%j|}r5!h3xP4QJlcud%8H*gx-lr!~HyMfj^%$*fp(e!D!V)UhuJVpI8;69+@udMn
zZYDa5xLJd{b$zmogCQ=liwuyYAU^86_t#;Zjcg={7-&3E)~zhx6tyCS@|x#p4fyoJ
zSGUC^)>X@4Zu}5cOqldj{z17kxeW^z4@r*C3J1h@Zi~dU^O0T9;%Ro1>5gMn`&CQ4
zK#N=4qKKo#dm9vD%a_c+yr9PC1DlM4se=OuLxjO%Be0ZEn_4F|w{rwfi-Me4n*A!+
z=x+P(Aj1h^9#M(<OT;YY&Xm;?PL5eDFGSA$XtIuM7ut%=vg__O#I?t(|LkJJn_dda
zT)0fY)U&<Gg_p&RRl3Hb&Anw-c;h_IQjttoU$gS5?ZF$%M7<C`{HL=xzd<P+CjB@}
zl!e!mc9RlX_{n_J7-fv38f3Fzgy!aqW(?QgAFp<e-$^=Z?|<85VQ3cMmDVS4!?vQ0
zjz2Nk%VML~Z7V@_gnu)9sDM7Huj;YpFgT}aCZ7p9Kw$M;lUgI{<K&YmHdAQisrowi
zFN~7pGhC}Q;t;-<Xg60_m@++)3nqx<0>Gab(DA=W8w3PxbnI6@py~_+gj5l0uRwyb
zi?~V6^6xlfU8xta*tY%skQAd6u`B7g>(pY<zrHgQGN&Xs>3*ALBiXRLfCiecD%gsH
zW5cLVxK@QycHY=YW6eawAhP;^wC>AWg||wqYijMFS2a}{YIkaVvCJrinpmtg2SR#x
z8U-R!OmcE5<g8z%SJHGV!erzLy`ueVg<)g)c4}~iJ%X*=Ukgrg`W4dQWNtfafK=Qi
z{D(WZ^sf#7%s*?*+jJxQD#DhK5k@7%k7_?ckcXg7<pb~4XzkK8f%{pMqN8d$J2o-%
ziP+5r(;W9>BofSF*SS;yD==6c{YQjPJn7q58BIXyUq&=X1?cwldtPB%#wgWQE%(O$
z8p@_@P4@B}#sQL`iC8~zYqLtG8|r`hyP8qG9_Y=_6NLkRbF;y#F!^M2nuP|2uM|T2
z-%SX=_FdtFjBZD|PGAj*ID@64K)`k|wwWNh-ssZ<%nu**g60C&P8k(OYnS@-ifWcD
z;WiCVl>>wOB((2IO@*inaC$fr9tsB1gvZJ6ee64M^;P{^F3t*6^cZ`7^5*>l11$Dz
zrEoLJE(!JphHe?zqX~I?EDtqUSkyDsok|Mm%WUtJL+AK#^Ofe)eki&cI(9<lbSqwD
z`hSl-uB@!ZHdSNVHA8Uq3a5GTEUdr{|JL7SsI8k{db2#s_L&#RdG(0K?h8UwZpYmJ
zCHr$Nw1zj-ej*tWQ+>g$Vvu6*$GZ{C#!%fDE~MR6x`$4ma^Dc#V`qev7^_O?#GN2e
z&^5omH`(e6XXdcB5KQZv1*b`$Tm4hdX;RJAe3;pZ=J&|@2=N?-)4_F32#iOB8nt9#
zJq!)}(uUQps0;^%kdw%))?4&z5$i61Yu$5q0}6dY_VBb0?d~S043B))axv+k#pGv6
zp)Zs@PL<PI`?Zi~F@u#bod1(HD);gKj9(c#K<ZGEyp6O|>J;Zdgsh;7EJZH$z!VCE
zcF@D+K{ZFILbpix7B#m^jl-`uU<*4-gZcJS{04QQSP|p0?X%_A7ot52Z{;xhB2G+E
zf|jyeH+U$3+ah<NYMFdlHhiH17+TAPLiOb{uNn@0f{}=}GV}6eklcod*`h_TBgz)#
zM;N#F{S*@3ebFw_DbUo~AuM!!q&vbq@5#-Qx!o;90yeEknttXTPTHJ=)j?2Mzv|Az
zBmLBbj(lTM!`qS9ZL|jDF=sdvk-$$NGt=%>HW4(#5UVGxB`K>+pg*^Pdy$^c3M2QK
z6m(IIW#!7u?uV!1{&#*1H8ywDKWn1Df`v9MgrI%D&NhbR1xK~&b?vLL_(h|fAkR~W
z4Qc`ia2`&H7>SDo;#Fcu^OKnJTOf|4uLP?EnNJ_=4D3irewvTfmxKjQ>+>}upyZ^h
zL_D{{hAh`5kPjndQhy=rO24)PHWvIdY@35wO^aAcOt|yjZQW}1*$Bm<;fCZK79<-b
zu_?{ZR>FRVbZ~0)IbJo=sr(u6C?<E<@S`&eOidg^cXeELBOh12+u)HK+w34><~4ev
z4*fz9mLcXkH*_*9#x2<gN#0r?@hU#(h!)+7lI{SGcFA<*FXtMT%X_Eth$I~A5L4An
zO&Qn<HiAM8ONOZvTqZI>z5eZh8O<V55uvnA9h71TB(rBlt}rsFeNZ*0TTZ#Ekr}D4
z;K7r#Kkt$u*;}p^y%Nx@>3KYE)4ioFm2W}HYg(v!IYKyA6@B8<)SV^uLEke*1qs=M
zXQr}A&Xcd17MVj;EKP>(1PZ@7NTRjX``Hg&{F(SY0RnnmLfD$Qffk4b=*9!H-5;wV
z$2sPTQsDg@j84xDCYa6Jvlr0+V>@v*C>_5u6p-+c@?P<7jx~Q3vO~Yr^M~`#2{U({
zv_yhi)oJ00p)l^GBHT|Xh%#k(8GT20+g$e;yW8`H_ni$4*vWDlw8Q9P#>%VUyHnZx
zGg_g<NH7hS<j6-V2smSe`D!;b=t$M*G{QjkAJV0w!Nu`d41j!jLx44~-+m8(QvXQ+
zqTvOO9Jr+qbLnS}L;DA!O3=U0c@8TzL7!eu2ruoAUtLy5HyOW{^o(vFny_c(f&2wD
zHK}7C=AVw^dRORg2iY-5#a!kt2Oz$#B)ikW2r>5d0#;g~xMyw>mH3r3<{!1Z5cvJ%
zV-Bj8ZWHpt-g4I2F1Ol-zmtw1)KKdxJ&}$h`KsL@*8~3^`Czk_Gq4RaNJA}`_QBo5
zZ4|BY{A8d0P?&L?Ssh*;SNH_}{O;XN-P{o-H3PxQPIWQa6qQQp$VlLo=t?g>sSVB&
zX;<Q^#=K(iM;@NmM54Ke^THWwL`pJCNb~F)!U<svs1yf*$l!kgEwu#_^Ek$CGBjm8
zNEkv_52N>X(+qGe=l0kCih@9K{xWN~CEI4c72=yIOziGOk4!h0eSh{>)Es&1<IlkS
zK~0C6jcQaX3&N3XK*^ab>(8uQK=O;9PB)Bpqc|2fMJ5;UACm-h(vBsG<skEP<O@pP
zA|(%tejL0CeMb|KPiULFA_aZ^<Z!%fz1ZrqwlOERI)I+1pmrQoUb$&HNs%`RgKxFQ
zA~|xm5bb{_lvT&jw{bSRxE(Zx6aW%bv3|xYnqn0W0$RVrpwS8%%lHFcr<qAW2qZrT
zaw)#DKL!Suxgw^S-rmjk{m78xOhM5$d@kK~uK`|IG8XEhE8iAL0xC}N|8fsZI%XWs
zIa75RHC(zGSmP&!aHSCw`UPANa4|dpyb+nq_<1FEI9=*iBdSzI{|@O|ASTETOv5xQ
zK$pT;-wZe|rDq4YLAEXWPjMhAstpE`T{rr$74u|@w9uKed|X(U(-cbpv1V{z#2VD8
zn<{_UPm*G0#k=WR4mD;W43ju^e?)S4s#(d-izyw1ry@o6)DLin5oTl%7N#qDRxG^L
zqX-iD%5WC;+>8P-uu?t9M(F!GQH;`a48!%1z=NBEg+##_>193CKtaz=b?O#ZPq`yU
zB*^G>DGdG9;qm=khD=D??ew-fTV2XX6>&EtzgE5J{%ERpYV)>KGOu19Y`~I@2kv_w
z9D~;RZ7v;JCvh8?dU|sEUojirW|r_xF#7k2h~;OWNti4@>t858G@aj}aBWm}m&(qm
zdR-pcf{V1qwe|@J@q4?t(@y1jE@S;do5(w#L$G@^W7o%D2rds7$I%_OUja=o`V%NK
zXI+iby0R`~oZ@?Bua@dWU|IWtptR;g#dA-s%L<38)V~c%s+^K?TBM@%4R`%11%C{8
zajE58Bl=#iHTk~~BnXJ1dVpbmGW{!wHxfpk#Jm1OE#N~4jd!b2Ps`zZ^@0*OME~P|
z{_~*4{Ahh0z{a_!48o;;M1pi#U=Z{l@t9`EQik?*Zp;PYwB<#gp}-@lVvn?t|B}F0
z;FDUekMC~-G2s=h#JSRtB&=L<p(~g`ke;Oic@m$QxUFa%0hDy7jW?4}hzrhxFAUem
z*Zz%Uy2+j+#<0ox`hTenVV4G1m|wvqNbw{Ll%4_SKn!u~!Q6o}Fu$nzq4+XP@V)|O
zN@W~dHQIbm;YCiS>3bY9l)~zh9h<~Uf8QGrd}J+%2E_q(=N;t5Do{0RLSAy+ru9Nl
zN!^j)kr(QGA-mUbh#9;MEtvLX{`^u+gg3|b%Z>rLFsVX+^MrcSk3sz=%c<Fu<)YJk
zXQ6L+4Dh$E$dpM(^-ar+7Qk6xK#3*9fj&zL!fRmAZW2rg%P%zez!hxoEra5$Z-<bs
zEkciyp?NRx<KupqyhR2(FIs9macYi1m7LDsxVc;LS`OE)9liuF8Z0?^ln9YX`yeHG
zoVNB<)kr4=@(7clgdC!mpYIjCg~eBC&-twD3BTkrYJQ}zZ#_UkQIKMv4hb=gdP?m{
z$@F=MU#ymREsu^9$Ew+NX2Qr-9EfTI;DVZ_=nl;ppVBSN3h@xWNi&@r-Zys(xM5Yk
zokjS(7Hk=B;PAp4=gRDVsu?8C<Q)~GvqAIJ*k}2DYr-eZhWp7rHW<wG{TCD|r_)q@
ztEFflzzC_~D)((%?r%mfkBOG_Z6>K@dVY$jpp_P~w*s$NlD)mdEqMJvc8?cy5`L2r
zzG<`-J5#c7zuLF)DUj_g@|b{?#x597%a1j2=%k@pHEI5+%x2vLUg$CXDVCFhzS#zy
zvKvpsm>TY^kZe5$>nKf=uF%6Ti%^6EyvT63LGKp&fitvbmiHB|oW`uu^2Vc5O|!c%
zSsh!{R&R5>GCQlG*I$K~_XmAiYOv^fXjEuKgxjc6{P2yS=ZddzTD&~3vLc#ek6vyd
zN2r5V*w3~D;aL%$gmW@XVyHas1;>s2@uuFdb!(-LbMDfb_9f#W-l&aZ^X70&_^1nH
z44}&PQElVnPFoT2MWp0o#QMKUEUk(3i@B1$RWYTYIp-Z+Ye_X)NZe{ND6h0iJUSqY
zOhB%bqJMxUx7j0sk3Qm;&cw>uLK|x%CN)N_ywpf`VV5r1))_sRN5={U(GKDtIDvRL
zsRm4p`-F54H1Kxahx`!ddK{$XUBAS`*lKnEZDknb6fPnBanPYxBO=btmBZ`8eo~h)
zsYa>)aph#%gB&2ygec3eG{-ry890{>?yqzvsJ1YvzQ0yj0j*amYUzP=16f?#oN++v
zlu8+B7ie;kSO!k&|BnCNQAr~m&iTTya%}Vw&6#(ml(B#IZ0&12V~U6Hg7-%9wIxl1
zhKQh@diz$UYeEocf4DCXq0M0FWSBehvQGe?h2Ul?*n|fjf*LenA4KQ+wi7&ff<N9C
zdu;fM!^cUvo9eUF5->}z*TDIjlW8HWVIxE2^q9N2qX5<*XH(dw#yIqTaIwm{P7`G$
z=&Pc?Orn^uoNmPdBGYY7<<s<QDO;c?Ue2-@zl|$vQfkDFxRgUV_1+MVEJhfWLY8V*
z`Y1En1Vl|#5rn>??Y}f3_SuNS^mQ+RtqMzQbz{NP@_Z#*bL|W)Tf^qq$@&?l`cA4S
zR;xeg>oJ7%+*?S<R<e|`SdXuA+Jvwr=vndT-O|5A;N<Au?<CM)vSf;9;a-ahzNS&_
z%dd9=8kv>%GM2j9iI#H5cQ>G6RwL|mm6<-Cv9l-gfr?5<jm{`+$sUon#Lf{^$xLU1
zs_L3d)msY~1F6cbqG>}zBNPY>;{3Fle~ZvxXTv?djD^ept%C9X_bFr5(O)K{<=U-H
zY;{Y@7RV<e94S1{$9uFdGdkadM9!Wrs~wek7xKB=4b>lvn6viOEU&{UX7g&Uw6O<8
zVX2bCk?~>!d)rjxT*}gKb8<mt-D9TIS+r>tj^_Jnw1Hk-5?SeB)(D=odJxbTLU6lb
z*J_Du^Qq2chR4O5$YpeWJIZw89GjR!!ZC{%ERNu85s&)!*Xbp!Jj%b>U{oS3xs;9o
zkA{1F=n}gyt!HkJY$I(=!Ffc{4?<ygB*{8q-k6|E@9<<Ue0NBbWKn>|BJIvD$2`f(
zQdB!OeDG8e50*&z+i2!c&TB%FPLA%*j6DL(Y+mVggv6?Zz`Hwwu4jmZ=F^*GW4LhH
z^u^P<<I?{NrUF_0A?5))@&T37(%7DpJ<+ESx<=CNF!oVHA#$I0=|l67EHyr#QNL%&
z(g2vlG=T?Q1f|*17r?b!RrpdC3)We^umrR&967`bOO(e<`}BOPXtTfd1C}B_amt1Y
z8(@rUmc3M^OMPX{N3}tL;F9%7>0{_j8dq~Fn3@)Gv&h=@;jmjtWug=`GVO!c7a4my
ziS4r0=M)KHO9nrzxA9XAcj6dcQuP-3x~y>GeRta4Pop1SSH!SDJrBrZLA$y%u$dWL
zt#2lP&z}NeY@mw;b~P=Qy{#vI+Yiz!Xic|6ZZNc;^*?Ps8UYx$^%Io%1~^^f8ux@+
zr$-Fy5^!Q<*IFwHwL-`!_NDdf_#J1t1|G6_n{)I!{Bbw1`WmoZ(q9fU154oTGDI-?
zpW*U4A{BMAyWx+lSaodkLp-VI3F$>GXnRTykksZ4ZK+@DT*fP^xOnQ|#ZOa63q^<*
z!ozdQg*(VhFn0*vAxdlm>%5HPb$E;Xi}Jc6`SG8zZiJS2<m|Q9Pt--|Y;@>5B4>0_
zZ3%p`SEUq@F*^li@qIxZ8Toc4O^OqcljE3s<3^DlH&3!P`FEUfKKau7Aj8`%@VmtW
zo~Xz(#C$YmqNtDr1PJ|-Ye-EbRFG`j+v~Nndc+WcZ9d<=GL~#zo_zxWLN;=<2;5~F
zT>PULu;PQ5n>0vJ7qPg^BbW&alEE0AAKSTE!Z3<wWA5N2dIaSG!v?IpomC>@Ua4fk
z@<A4?8je#areNw{|53~jy$OEl3NZ^r9ehk~NY>h!yng<YxBp}nXXf7FD*pWJS2(E|
zf6JMv17y4r?f|p%WvT!c;q%s8$m`QaR6=_vC2lro_x!FA%FE`p1c*4a;IJXKl=9Wh
RrN~UYS|weMJ%II)008g*iZB2G

literal 0
HcmV?d00001

diff --git a/docs/landing/processes-light-1440.webp b/docs/landing/processes-light-1440.webp
new file mode 100644
index 0000000000000000000000000000000000000000..8c5203625e4b97be5bf7bcc4b8fd472022ce3fd3
GIT binary patch
literal 76266
zcmaI6bC6_T5GCBUZJX26wr$(CZA{y?ZFf&=+O~~p+eYoo{B~nEzHejiKUHzxd$%gG
z@|-+*vXmsn#C}r)1F4G&DX1xM5H0_CAI}Mv15A?-9s<f|$dD{vOhQ6jRBt&N00(Vp
z2be#|i?`;laJKrs7;0k{z#rhnZ2pk|*xOICW`qJ|^B+=w+|F!cH>EWG(b0<2{XFfG
z_K3ImMt%f(q#vfQnNv?V1nBXb^`7_d{w#XVo0C8L^-g<1{I+r~efIc8cxV3ocu#-g
zSDL@gr^{Cu;Qi!!@E7x!>!<xk-E-dM&KLi}yYNfg$S=*W&M)>)$|wIX!b`s%KKRd(
zx3u5aCH%CX_aFX`*LS)70Hn8xC;tomE&o%1)g$2J_|<+3aIsUTH~Pi@R`v`y12q3S
z@e}mN{1X1GddGaJd*|QlCh~XvO8I2|x_<Eod`V{5Kh4|#&isx2+W`Q;{S){Z{}`ap
zUmXAs0DZ4(gUt6=1u%b6e$KpH0{~xsK_A?2ZO??4zm5R6{tkbhuzmo2X}g=b&0FCg
z2TTGm|7^K0>(BWg`X_(BKTyAoJlnthIt0*t_4-Ho3ju^bkKfxq`5*ZI9)|z5_SN<w
z|AzSGe+&S;*M0cEtH0;n{JH%Jko)JL_Xormz<u5W;RawBa08(Hv*o`z0;t>KkI`@8
z2Xs&R>-~BMqyTjPT&TZuUd;bU>g;S+7g%QT<m;<*?H-P!JjmJlf2=7|@h%C2-|Jw=
zS<V1EV0xqY-1tEN+|5&H2PiKDTOX09fwP<XuC~6M#5`pL0hGnSr0|&V`m;S>S{;I+
z9w~U>y?;EEI}!U;3|p%pSPZ90+|*MyD-bDLQsg=7uVB@q-x1-Ba1GRu+bCu)W&^VW
zY2&h!M`#hnU{>zJhz4f?;lvpA8i8N*6{6e_Naz`)aI=v&W#9Vu$hwNRdx31$H66ue
zW1WFQbZ6p?s%OCiS!`=#Ze-{Tj_;7?P%!*9DcW(^`uD#=i5(osNALq6A_yC3{r9kR
zZFy=y#gp#juKw3D$4G8#8=6N$KZgB$A+qwlbh2#MW~~r=N&*VTMLFH+H`#@H!t!Ah
zz-ru(2>L`wdS-079@>g&x!#hrpD10Bt<CUdziD*2C!i4+V<%<c=^OF~#mGBH?@?Y&
ziu)KcIz)V})=Tt8aRj7S%V380Q-X6UB+8*or+ZhC_amtY@GjKjJ7#2`TZx%DADT34
zjw%E-r%?^)X)o?GbKW)T5QAGXD28^mRSf^V-Yx_)uTuo?X-rg4u^gO=AUH8T{xSlm
zV$;H?1pG@{J}{czzO-N0l03!Z7u_j~{L0PvS;^4}V~5nX+qn&jWWVN|S6>ubzQvuN
z<o_)JP<82D3%JQ&b8-=Us?(r=S+VPgub0`VRh+?6sMfOMjP8wfEUk=YUMVyyMqK6P
z!M)I>-5u`j(f@CU{hxcYW$}f$fM^-(j8Ur<L4foSz1A^!hQmxE1bS2rixfR82R05*
zxnrMkuPfcbh}kkCK*fdMu6X!Xk;ZbE9mBDE-npA|E}F|73BhJ?H$2GQwdDn^-)lx2
z_e|O{hPM}9UWG<`J!|ZYk*6IxMGbU<8Oi<swS?LWJTZSIQ6l{fs(^SKkl~^+PT?&$
z`fg-Qkt8Lwx#&3rol;=Y*em7#=NP7#g5v@oU=)|1+&^B{ojnx#V7Wm-G3($LaQQ5$
za0ZZA(NRe5w#%?HW>OOOplI&U;28EoL=U^Ar%1N%V|!4hqn6<`O8!g3GxpwmsjQ@}
zMImDnb3ryVxnh;9Y6%Vwk{-dz#vcnI2YDNI5qXy#A2Qf4BqgENv&~x+zhfEDQMlCz
za4LG=1^EbhsXy<tRSlmg*FoA_=A18)Z?0eri4H#K)ajr;#hY)>8@z1;8&<*MX7+3&
zgck{>aMk)mrC>pNQsnHn0$|?m;ZlI;P|TsK%Bx5_&>Q7sdSF20h$DW0eHajKRNNtZ
zo2U1wo_iAyFuU7AD2hfhCuYtSCxtW>J_ch@3u2DwZ9ILaFZ;g7WS4Vj5!wD(k)s2Y
zY_|`^Mov%)+JJi#o4`76q0p`UMUiE5xF#~iMEF_jJL&PxWql4V)c-dleH@=9v=lUH
z9pjmj!tp7u^!A0)kucaK-wW)vOZxFV_u#KY|M!pJ@__4y_NZyBS6{Br4_oaGw%}Hd
zY?GCfr1GNCadafRnOW)H-7p=S)Xuv{9eJMZ$xnd^vsk}Xk+ny2D)$dczOm88loBLb
zX;Dz+uXSMCi${&)Bee*=Ww0z5i86G-{sbFtWm_*lB#nkNUTIz{B^U{2#wGxZDF>5Y
zJx<#U)+-xu?X7oia2>+<OKEYDCF(3dHeV`6V^6>`a(V(SuD>lcLVYVTktq-jBD%%a
z>4^20_iPcVJyxVvFIof9e&P5>NvrUpfdaMpvy}NBZ0=t8mi@tGL4hM3fhpNVF8qyp
zTN4fZ-$YbiFk-udNqB3~eIUU~h10pCo;{rZ&Jj=^-DamJ?Lf3RUcNLctD@xIi;>~F
z8We28mwfX?GRmkMov(x$$P3^09YdFNV<qnbFu}#XRP(x~C@qO1saV;rmEDVsRDH`K
z&udYF*$>hP=L7F!yQ|Y8*r2>^8RzQReFkpPCs~1rQVPk4C=1LkAIn%<FnO`^soP8{
z?glrxG1NIPYcTBEwMEJEjUnGMJ>_tjqh2lX5X*YP%kno{&s2NQWaJ}C=T?$?!o(2T
z-Buks5eJWC0o-g7u!w)+11=?a*@!yRO3@;}@F~a;Fzd7pK}s0MxNItBGhRA<GhbpH
zF;NCml?Jo^m9e6LG0-#|<HJh5Ar{Y5X$5z&5FLnqsWT|tFi%2ca})!1!R2Qg<g^LD
zu-|7@e3o{^?67?}dflf&yJoSe-w`P^%)B8HST=df%thujTO$Py!Y{ws?FAee6xmd2
zfw_YZH@qU_*yY8?#SHwSm7QCIdnssjD*r4r#a#?w8k=P(PU+?-lb2>-H#P&H5}d+^
z9C9^L*%fY-kLIK2#3n9D*7+1#GFZuE>n46tB19plzI_0e$sF<Q=+4_*L6MY}N$8JR
zoo>+qBFH|J1d15iymqXp7VVeGko^jokUX6#VHedKN0F^!q+h}K6gJ(KWEaOp`}fJ~
zc^$`fYy6XH3<`kE78u{=wQmBH^r6S!RCxHo^eRkMy;B(+Kp6~u9Zl+Dxv6)*BZJae
zLJy`8wjyRC7Y&*PM>S~G5@6sQSITegBsob<1c)xQ%-N}l@fv4$`yT+4=|2rX`fg6>
zrW?@}k(=%Do4Fs|X-06t112t5Mg>=a<@ue*wull3PbpgspX6l4Vv}>WcInR|GUT0W
z)C8zx<?r1LmzeMVl@>yJ#(b03GIo4LI)_UT3=azeSQ?2pBDf=FrFfqjTiYb^z;x^t
zx<lK2An}>Oa&R>f$r*m2@63DYTEJCCE+XRWXm=+ft4Vv+EIVBgI~k(5ORjI`J=xk~
zG4F5n4QLKPr}YpyK#eD>*x+PJ=xV`{?JruekScfiYy9#J=E$BLN((hq`pT_Q`RnNY
zo=F>GNx-pEHWFg%wBE;}7L>1%L*oSRKNDbn{*K)FAXk2%IR{ob5{jWkzPcD8-?Ybr
zjr7fG<ac*<bt0~CW(Nv}gPbGA9l+ObJ^p<pdcJAdKzuqmt9|QJ;L>(X;hhF?=Ho;C
zG^kau*-${2$DH&rq$6iww|V%LL(+;lv(5DJ1pPZ4?%Emrm{RZ@N1EMPE2$$aDI_lL
zuyl9`lI-dR<56t*^cPp`x1wJ@ZY@E5^NE)+>3D9yhobh0)_)3+;uY}EMG%3ap4MDo
zJ~JAjY3#uFNOpQFOEU#D09spBF;o4B3J~~-pD_`xz#YsgyqR2mX-aiWJK<2Z!^t3#
z$?Q%%%^_`nf27hjoQLD(2Ziy1VvFqw4$yYYmkP(bQ|VP{yHx1<>w100EQTk4wA5)g
zFMB_<zAuYO@DP^u>_Q)Oo0TY_s^hx1Ca5aaJL%3a!0mB>O7cQ-<jbg*@*9@Nm2CyS
z^A}|?Dh09pVqBcV`vIkPK^!=@szUl0_esiLs1oQ_`k)6%)2{Pb{R>^*i9RK0R(kE6
zY=lxUAM*~zYn4LThHT=+d=yi<OP1PR!u9~<1wsxc8>dso;ODJ6brw#1`dUaTTSn(>
z+1XD1$L+8FB&d1LW=rz4fvZm|(Mq2b3z0J|mPChC7rk&WG@gFh6Q*x!XjX^4Iex_8
zT9<=1r&s)C08LeTa25Veh)6#^n_G!l8!5(#n<KL+r841Y7Av9N13lb%h;M~>?hV<D
zqntPO%RW{gqdJm<Op4;&Tn+{dE_!~E=(3fDC{j{Q^8kWCxP?d3Vs>DzDLI%bQv)Ds
znU7wCQXE0^lNlr?;Xk?|pqE2ntxc_Z){47G?g@*3%IG19cfzNhN-u-oWR)*|!~FMy
ze+=DZu>-F2R(VHJzZK98?*k(<iXt5@g`G$3wFHVZf^N-LQ>^U;>JUQb4&8Tl4?>jz
zgQ4X=T%gVGAVkwSUe;E)O&6NcPyrp+_z>t|fqY#gX~Tv`VhWWr<ei|q^%ts%zyyzG
z5&~i$L7?!Cxe=+TrjZIPp8WX1+-~{yMZsfsQ@5fbDWi(o!Lij(_u{E31L890cGMO8
zZQm0_t#wDgImM}z>cC+QW(h80_qZUJXCj$1C6X6N_a(P$VgN6BUqi}G63O_IZi9-)
zU=I&#p!d@D@JOO#G7}BmOV0x=x>R@3703YrAXvrDrq+`^@7BHU<8woC%QlG{7f?(b
zd3#HJ?YB9Fc%QgiQ<e*hxh>O##}yM;++ExMlygcNkY$fLq%28sB@62QZI1JkLlAf+
z@(yU0trd_3x$lqApQETxcYTqdIX%Uurr9}=)yZvE$59^2aruui<XzV4m1^j>LPNL0
zzIs>nZ55oB-~Fewe(<f^q<G%7YD&`Oi~r0NNK`+Z2k*-l?}<9u*4}@lo4f6ZQiPA7
zG&_pGbo5<Eh&=#;a9m<sPy78>z!iT=Qw_#Mdd<!E%0?kessBh3Xr(%}N$#MnTe$`3
zlYXK=0z#sqkzVN5C6p(Z%QtMHd^~#BM>hh$8Ula96We4#Ek1H4P>DXf$Mp&I&YQEn
zhI>5@;=w&%S5cS9bKDlsaMKc)EI+j5X=1bd0*y8icVp0Q&A@Y)WPm2%l?;OJS(^gx
ze-*5C{P}CJ+iJvhKG=~p5AJo}=dmpSPo)*^(>D`Wauo6;Ovby(dk`9}{A3~Ozn-Kv
zK^vehL_~R!1v!sv3rv4#JpR*Y`<p5H(ghlh%}raP)S;KaE7*gDOkz9rdHchW1^r8p
zS}XO#WU7&j=7bYDn#VkrE`Jw1Q4CRb-l1tPtdi81lGIbB)8@At5Z(tDKLP4Ry9es0
z1(_&<Bh}riaN9vc0Ub=jIGUf>e5W*EOZ;|RhSpM6|Ft8~y4qm(Mk;zL=qgMD(2y$n
z`9vA1C}I&M570;mMrmX!Tp-dW@DTjEHRW8dnZ2)vmFLjhNE)RAUIW3qVqxrP4>30R
zsslzwfoE^veLoS2sQ6di6MNrqyz*S(xv==r8bWZb$ZU1^Cc+2ep7i^@W~cl(iOd7Z
zJABb<So<iwA!9wF>}g-*H<`05QZY-(D1s{v_N7Y+0*mI$t&iCe#=G92O}x!9hW?RW
zgSteGu#g#;T*W!Ifc@%V-ib3~3AN?aWpQxl6^0Co^Nzw&c3SKLF2!vH2gNq9%%3Do
zOuf{()p<t|ugV+aw~K*CVOTDZGp@OfV6;IUg7Y5cbn&!?x1s@ZayxizdOE2AES26#
z>ZfrVuzhH8KmRGNP72I-seN`8e8~E{u#JT8|F!Tl{qeX7OtUx+^uH~@=%MRHY)nhN
zfA#W+1_z)Z_QF*l@fFd5UjlgzZ>pmgbK?Hmp<W3im0A{kVF&j}bG|SX>gp%nRUOwm
zLQl>1=7b2Kz~lhF{8BLCgHuU)5@XBF(qfsaRd^zFNKZtmNluG%LeVos5RhIh)%;0w
zc;!z>o=TKPltdr|3j?bIt?RDH%8Jh(vzeC!2fTR(HgkyGD93+~9+k|$JhM4;G3Xd1
zsf{uz9l9S2g|G+9qM2AxL72q}w9vjIg@FF5g2M$t-W+#seiev<pMW8P#eH?eiUz^>
z#`vZ2d7l;u{aB?|ARoO!4u~m+=W&UmA+eM_X%2#K5)vR4i1YnZU4K+9Acg1m6^(<i
zS^&|cVClve%{Jc0p@nIySg~c3=U`UDi%FX(F3}N@AKQVtrqAXJ?G=+M>iSPw3BYv@
zvch376J4>_h^;TaaWE@^Dp>K>j;*1M?8;pMu~@Nz{4SJ~70!t-q<+Wl{|L^#i{NAR
zGa*t`{)W6$KX<U%`F@d4o+L@=w=bZUv<$a!*Pj<~`XEACzz5Q59x{8%`LFZtg=TQj
z^I2w;<c;8XL)4hp9)>kZiQlJ?_sss#i@Pn!NF>3Puc&;BT@+(i^o_{71v5fwa4ucv
z+DFl*AcPmy#LonbPXw^+&>Bs2RTnlt2Y(u&lHvUaLTN1RXZli%vGBxDU(QVMl1vnM
z@Zsb@zytfO$w{}tP^5wg0FJp0+#y=XxHF9Gp9gY+lCDolagWkZ^bzhFeG;F$2GwZ9
z6mGiSfLc&$aFu{LMC#iD0|sgmR$v2($x>sYAMBtW;m$XVMmtGD0IpMVyiqxkl}Aqm
zO+&rA1YkH3XY-Fkp^mzdBxG!e3Bj_zj0a6HLn!|?`#ypd&R~;?M4*3pLx*u4M-pRh
z)cZ$xCv|o~0QW;ob(+fzpplzAk?jMRG^&c#082CNn9noW@|!K+kd3wXywUnzCycT0
zOJ764Svy6wT^Np8Y(iG{o?DMCh?5XQ3#((N{Qr;<j(tjl>9(2($d9Psp>Go`n6+4C
zGjB<ue^f2_F{1+mkQkDi4w`pz2sF8uE|CrnnD<Gg@$Ea<e;&r4dKug_eP!)a7Z056
zD*aUQ@~_e5S1?^oa~1;E<UzK0eS4pqUtnvbb#Po#USu@m1KPSypa64bJqV-R>xh4^
zyNST;aLf?#miWfj$k^9TJJ^|L41<1zj0jSzbbq;IIyI9TPOvqI5B%E8G@~Fp!8Z27
zTYBQe&mfqm8`uPI7CTEv^jVxBOIp8VkVByW>ABU4G4i{5g1htY>NUV4ve{_$EmF(V
zKcdB?@}DxQ-DbBrf;a((<(kk)LTWy{;fn1_N^h>9FgA38LVGvAqRi2s2;!!HVCzsG
zy5pbJA34VwXe1d8{-gYd3j>A#qJRm)5k3aG!o{aQVrwRn`M$J$7!otu1DKj7#QS7k
zd&oaGN`ep|>?h^>pDpsOtrFoe&XI#5feI*xloOU3q5t2v%a`II28pP%U=84D4F~Vs
zo5Mf7hVsSfSG}GWIygVRx@du!Tf4RH8-1cSq~gK@ccQqD{We#=3L6<g&WhkB6kc{=
z4ts~-Jx=zr^co*1D$^_OHz1zmPl8n4Z2*%vMml!eFsY#{>w8S7V0!ZVy|_J%jz_>k
z=TSB5A17{u0_}m?U_oB=H2=|&f4sMNvQ*UTs?v#;^f;irPF}EYIETpWEWEpKu%RO#
zx+!rRV5f7n`{_j2NvOc!czI0zgw@6fqfsPq_|MKbk)W8Lm;e~3bvdVPZ2Mxo9&^Si
z@$RmrjbZ-m-jHIob}xZ(@Z*}ic4Bl}MY0~@M)AaI=oyX%DTp{KsFkSm)&%z;EH*To
z<YDLk(n!8(F%Kjr=a@2I!8uz+Qs)PW-chMAT{#z-<OkRZVIDT;{Y{BS&i6*4>?7Y*
z$<?62BV_$6+Y9YpvjzW8v~y#8xua*V3A+mgAEh!M<RH#yS|HPTIY&RKfuKM#kb(in
zkRK<_{>O@V3I|!xw>Q(m*$c#hLFZ>-Uo~WZIk09KfysW2Kk091{)j7w+&7lgTbI<^
z^(FadB$gV9NN<%&)Y?eXslr9<PU~Dbm!}tV+K}UTSWtl@(D||o9u#n>WzGM(pc)(H
zdr!K-^rp1S;NRdWOH<oEgM<6pBQEO%4P*_J4FqtH*DEmeGbE%p59+ZZiH*DP?BjzG
ze<<n1{4D$a<1Zy+HBm{56_xFAte?)Ds^ygI{$qsBTy{^v{nPj8d_e+cB>RXnAmUWK
zX7ej*k_DuI1J_mk(iCz7b$fXa1K|s&Fw&W5J#aGH^=>30U~1&v+}RdKd5Pt5a2+;A
z2)DxE(uA<fa7ZUw@O2$G2jb&wjqh5LGVdg5H=Ig!>V=(^fsbJW%fjN;)Q-BMmFj|j
zMDy0xpEPpk3fY=U{OjB56nwS%?S`nfo;X}-s7E`S;%Vz<m;GcTH?kp6e=}?~?FxrG
zm6@(4ilg9El(K}`JGT4qk))+#og;hB1kLpLiz#*ajpBqUiuW7E6_sGXU&!*onLmX@
z{d8lg^j8P}pD3$iBu`JmFuMcU@cBQ2b7E#a%-GZ!F2HJH_$RX{53(m$h37!jq(kYz
zJvo2^ido%=Nlc?Xh*MR_z05L~BEc3ADB4k<E&|pwe{cpCDr@CiKga{oAQ*Ckx}6hf
zwU-rJn}XEhVg_?73NAE3p%T6mOypo3Zt=uJj{J`CAPh0*$aV&||AzPp?OWm4ZV!g3
zP}8r3ZVidO1oO9bAiKeYG{v!kXZ%4pWmi}Cx0nGYC2i7l&4TZh&yMgwB7lG3HzO3)
z1|T3?KREBoCkvrS1FIZH7si0*M9d|AUHxUAsck8NYw&~Zzr>=>YZGg<K+JK|Y@A>K
zf%qEr@-o$E%sj0RGGFnigI0-rUHHap7RmZ)^Vva5!gG5B^RIf{U_z*$_QjT96+}kk
z@Z=@BySo6zzc?`H4?ra&(iZ~Ty|{>bdG`~F)u+^~XgD0Ml%FUQx5Y0)_+!Bvz4#_B
zuhK%&g7WN#_DWp(%8Nm(CxcXOJuzGU`igXIh%MfA&Pq_a$Y=Cu57B?0fgue8E_!n2
z-%X@X67=5y?8zNaC&pGotbK5ll~>kVk*#~|5g_+>5Elhek*;e%-2aDpk)^I^Gv+PW
zij}(MtW^U5Yt%eg;xC4Hx<v~JHVev;-%Z-DaC}G2X{M(rp2rj=j5;|cuxOxUu1}%A
z^10`NVPS8#r{%Xm$hb-9!oRt1O<GaG_d79R&u=p%ZnFlb0j1k7Jgq?4;f|S+VP^N1
zP0~Yo2}*$r=E<1_lDV@H>d8FQ|8`#<uuA?HAoqaw@5{i_FXH*3HlY;TY@~mEhQOlX
zF3UZ2PyG#7rUD?8UkmYLg7oVuw6g8}MGsO_s>5>?Dk^E5h#5xeo6oHtz#u~VKYmeS
zQnY~z@!ne0ANxkH+XIRaR{eqNle$e?tI)}lu91X(K<Eb;p<1VLG+evz6Y2M>x4b_t
z!rtWs5SaZqLadEoxN4i|P12xx_vGDcGq#xj>mj8u!`{C}`_&VZto{`Kvc@dV&7K11
zqMA7qS8!vltxaOBvk|y_-SvOhSI6e*AW0bM)BZkw{bC7hiLIZt=2v|*vG^?9!k%t;
zv#6S|R`*fe4k~-s5y?-a1=7rmP-HKBL%<FAL-K{4KTRh7g3ouu5(-7?<yXqyIiH#i
zaOuM<OUi%#c1MCBRP9<d4tiVM>&xG)zq&d>E*u*VuLH89zkozQP}9-8fx#$*&*C){
zc_h$t(7Ow&qTMVOa-nM$v_K8y=9|z%RFhS#wtn2x3r7M<4&Rlx_zOO}a8eJ?z(?(C
z;2AL2ntUrjnhR+b|40NJh!%K}^?NZXJ=&J+8HSA9A;T_P*9rub@9kny16i<y(UrkX
zz#=yk6NXj_>mU1FV4kYx)e_9j;7yJmETZpUxCRr>{&;=sR+YI8$&ipnObqZ}BQ6n^
zZAP!r{Xk*zzA@Q>cO%~r49+IlbuH}GJV>zR<Q%|Gcuh(=)p^wU{yu&uzm?QU)0w&R
z@f)k6xNw4RKndkG%o$zuT7rtt)9P;OPsMAKbcI5ZhJK#iR!sVD6oC4{bRryEjzG7S
zI(;2A`5jp7-Ij#&kLYCaSXMihD?Eho;2sJ=Kv+0^JAD*v%AJMs0zz1w0p`+9Pp0Z#
zorF}{qMbqIhsTF{2zE3mu_pPz4eFBq`Sh(o&k*SeC$z-aQb=)*v}G5w?Ph6ry5*Tb
zws|Oqiaw=_$-b?>hZTZj=XakRXe^ue3!mKvaR95Zu)fOIMi+<C5Y-=U$m+$P&i7-E
z^8ZgW{cHbItt`>W74tv5_sX8|X;RNKi#RN9WfD3br{nKRiVbrqI`;)L1m0Hc{ZSwk
z=lOz{rL<d|hnz1Y32ObxKG(P#tA5r3u{0#XkPc$hz;!xmTKNCbR)5T_IzF`tYI3jS
zmeO9QFQWwGRfc~c90h$UM*27Ukq5R{kx5nqG6ql9o$}$(HvezHA&~4Lg2@xSd-E1}
z*epQ5gAo3(ET39za<)^C!wp4ZK&GffKQbItjf;t-de)}@@@P5ju|h0#d=|758pbd*
zG9AhyIpW%Bm)aSf|M>e3nVle042}Kq?pAC8fAg_JY?kfY*~a`8{lIn#*hsUoJMGZI
zi82x#9bM~%EKwl)XbStR(q9*?-k2MCHM|~Fq>Q>d6!Bi8n@ExlTse&`Kq0ewRz7aX
ztZgq_-(g6%%N+#XMR38~nJ;ESOF)gsPcT-D0*6F<4gP1iUd0JQ8oEp5o9dHvZfJW|
z#KeaeDs>F~1oFlwbl96fi-P~(PG&1m-@GSyFByU{Dm}G8zFafZ%+QF3FMA49XQ$88
z{Nx|42eefp_SZp7ReeQLaP6=yVW$F!{^w9t$Kr@x27B35jhnq3rP-MIK12z16KGsg
zrOmQK&3d|CkKqC%ycQ>lx@z@4z*w&{GGj<UD?YT`Iu4@Cema48eeBeABQb5kW{j<@
z{#bO9(!lO4Ou)kbk@fjX4e0$3qt$0fwQRwt94X$B1BQS6Dt6~!)A`dMyMg5;@p>)H
ziSAE<q~<9H_0H(lsK`y_C(aMLBXj`hU_hVAWA48X(y{`wt{_O-x%XIV6#nI6KIzf0
zAllzKuDx>f<nj2Jc61Qg3~c7z+PDYNgt?AMF#Ty+2;Qp(qlbe?#z9A}_JTYVK2@U*
zD$yx})S~ad0i~EK*8iR({;zTN|Nr#}2<YqcjSltr>P>Pn0B(XO0}O>}JO-XNBX*>{
z>hZY~NfWv4Sl*TD1fXQ?)D>~i;CZxwo29Y5`)CIAcY)n&6s$=SBw-bW({8m44kI|>
z!DVKsrm>>VFyP9WJI~IcR77Wj4f>#gKmuBVmrmceekjYwJzn-9dl|4m@7!nygoG9V
zt`c$$cfUL5<e1L(7T7(m7u}fYU!zR;g_E5QgYB%SvAfp2Jm@UFJ2v9=1~)E)sl|4&
zdj;Jv!_0}C7}wHON-90JW5tJCIO}R8YV{OY7NU8Dpo40Fzo^_6VZ~MYY_0*1v)<ry
zk=BHxKp*+QlOC|yAbVpAEhc1=)s?X=9E>()jqon-BL4_*D;bNn%_LbgRw<C?La&@<
zl2q#Er!$<w2~mFd=+Mt)m>c8+;I%Wy_jwfMI!bZW;8at1o?l6uN8fkbApiLw83~U8
z94&(`d?fAjL&UJhiD9(X!upfmaSPmmIuD`zxelx*C+Y>?`yI93h#3Xa<*FkCkXu)X
zFk7RrHsNQ`I`$fH*Jx+?zH~7h%ZE94$g5HqC4tP|9^4N8vMO5Tdev*8?Ol9;E%AcV
zkY~2|^$@AUiq%=H<u;3`*h=nIPmX7st|j4}%}Q`8Z!xb`qNGxkwxw#dCK?oXel&y{
zxL3-WS_!xg<eAS!>!g~6?d<VPRnIa8Kd->W=l6`FWl!%<L_oXnW$oBL#fws&ucgp3
z0ZWMAX+dK_O0{%qG!%M5sd@s*02C4kyhvkGp?NLeDm|i;D{gfdk$lS|qDsuVSFS2&
zK9qlYGu{qBaw!ygDl&s71iUa-epH5TRNX(IE*+zIjd#Q0Svj*&)Y236i}6sPRiUP3
zDg=34Blg#^5S_xRVSsLhpk4!)Yv8I%C|w;6s_y!y8T6$|L}-kNZQupM6d&c8DjI@H
z5SHVadf-Pqx#6>5qdK?#0#j-8+`+KWp2C<tZTzhDD$N$$53P569&2jb6F~yyUkA~-
zwi$DVcAM{}3moo;0>z&f8?uxzYp9odPZgz?TkuiLA?<=3QV$EPdpE{W_gtIqZWRcF
z0Ss)_5f6^<!CjDTm^+<Z(RZS^1UUEYVdgKuG3%b(KC5&~(2gkL0c9FPkWk>Ep%wEd
z;S<p_4lq97QJ35L#|2}BQ{zv4j-2=XGzQE;=K1;Qp;Wg^@wjn6U&hE{!&WF~*C>?g
z5D`&aM<M;c-*(UWDHbO3*|_Ecft4#*<b4|pz^ODscB8Gj%6gXc`%b2gIUoJYmcNbG
zr|n3_&J3}Bpr7;k=5bbCZx;9#k5)D-KW{wCjA(&=_lb)OhkVY`ynA;8&kvDRmVJ3x
zuRKZ+&DF^6;3sR^ceWR7i2jsmo;;dbC=2)3lF}E}(5*O}gEG}X*wmzU<Sl0BDNhHl
zGJ9MOX32za9<?NJ?Dp=Am+|=g<<52zfg8-CPk2$m+%nL=5>SL2+^*INjaZXkp=(xN
zD$LKtZKvE@^KiB|*zSM#DrL{#9e#o^zC*Kq!!=k!@|;pl272Z=CMB}r6H5t^)Ad)O
z6No&1YDbsm+|5{chKzbk=EWfmN|x*THSC-R4T{CUr<}NcCMb;@6;Xr?#Er`N>Nw_a
zOJGhyyUJ-T%takBvGysloxqXoKaeG}XO3<NHB$m$YwgB;Tn-RTR$eP}AICb&BpB;W
z+B;{zee?bN?D@%<l(KhlJO28nk(4+riCu9ePvdlyRU^{V+2?S@$rg){3SB#ZjcR(8
z({zNuYjXA)rXLtt0tItgL=XO$29pMhnjzJ*<+9H(^Xzj;aEzFq&qUe@IXMzr|G|#d
zU-j}eVM2UDAAT%xiuC(URz#<s5_-v7<du~B`6|WhVrybbmY_2Cd%HPYZn%lS<+D=p
z*X=}#<WLUxLhRi|5uM&v{(}2}XI+coI;gwEX=q1Lwy7u<-MWF&8O!d*y)@Kllc0W7
zB4wSSd-nSv7(0GsZsMCI?>cnCZxGbO1mhUK1D&Bq?O~|epQapDcAnDU+HQ&Wo0Vkj
z$$iGMblEAU2O^{^)K`hTU%kSsAJxm_CHOwF!O;7Bly;HNTg~!~l9kb}G;=N2@R^b;
z+_m?96gYb~na=N))YKsL>^Q)aUL$}L$=Fz<&66T_GhGKBx6n{T!A|{PJMVsUH@buy
zi1QnkUPplBqfCdq!;Es2uDIW0wN*r<jBunXaYBG{*Jp;3vl|=CK3A#5@um`m56oIL
zc~?+8@qB`|LrcIm+}^+h#Fbd)I$l8qZq=-qPV>gcPv24WyE}L1_0TTqsVx>WjvWvO
zE~rskmk9xC1Y4@Zb&QSovvI90qP{fvDH~kuOj4QfmiaOeh)Z2~+SeTy&~KoUv)0_d
ztOMg~J2*JCU}!<x!&}V{86mJ`A{TdSG22kA7J<{2Pna_=fCtdgbaGb3j$?bfCAL6M
z-@{boV{EZsAZYl!z%#{_4&8LKU5`kjwz>kXh!stYXu4;%vO+{alL3j*uEKF1y)PZb
z*}1e<L5`D;@uZD|mg+-Y7a^y0ks9+VYGj=yrZR3Nd02~JR0g#y0^r0UQ9XL&?wp4S
zN9PmNsi+vI$E$%2;{;p)&zYaIuL4w(#T9tw9z9LC`4)z`g**)7T4=y-_Z)tsNDFdP
zdOQpQExK#vhN*kB5;OA4h%Z~aS9~TpAQfis`Ee(^>B!F9-*r{^4*7gtdH0ICUWPsH
z%Odgz^1h@&#=@@sU@11ai1%k@3do$=e>GN5KVN9D#En(vMsuVC$?N-db|$bJ<A&&p
z`CBCY5W|rlOrImU`v&=gD!D{K%I4l{%2dDj@Y+cro*%RBdA2VQ7VFubu`ww>&*RIO
znTv->z?qDhZLy{%Qdl=XL%Tz_ysU&@aa_<H7FhTQHLZ(Zc8s{-w04$A#U!{4t2u>b
zi17@{H4Q`!2BXYoT#lOf!@}nLEIWrbIIB48ery{;fwbv!es!J3HWZe+cI#(fxaPX;
z8rTS2lkYnm<X87M=IHO+dMEKs-^@(om_|c8O7~CqG45ugctKHK!W+~5an-<KOFS%4
zUkU>ew?}UuH7ejP)AV60vsoJ_cff|&k1I2R;lFbGb6fc!&ZU>{nv5#?*N}3ITa}&+
zWehAjJ1SmXtLrT|-ynZBOM#Y4G7C%jW8%kx6wuz&#>8>aNObVrAkLUYMU!d~x3+j;
zkxIAyK5kYZZb)OwQ_<4C9dI*Mb?<KbOs|Lo9EQE-JO@hV+R)6cN)ui>)|M8!iU<nW
z#W1RzSNg~WD!x4|h8`OJ+Pl#kb~Hy<2U~R`b;=Szz;8#?@^X1;dRyExL{Nc<m^nJ-
z<+V7sK&y~3)Y*|uE9Q}ezV-RC+jakvzu%!=+QaPVeHyM{rRSX2sb^ESNcFQ-UIUT>
zS8|il+7Hp&jVVbT#j}Mdh(|VFj6~c=3?hcQV;<1K0NLjMYLSPEU0=QuaeT970B#x~
zhUg>SrT!e+?Fe6NAh1YWT`By?UZ{5Hi<<rEgL(?6x2($c%qzjo=l^Uc<b}|@I8oq2
zjs&-|-;AqoRrnT|L^P%<2|AId__N@lml*nYKsMl>qHspbPGX=8)jpnUbL;1nYntTI
zYE0AP)aJRNkSKp;hqkKJ_nX8TjUGer^~_Yk?u|GPJfN6>H~DO52tLIp?SNUb?#Kw&
z=GcUH>aLtJ)9ot`?K%FB=Z1xaGrZ~th;3L&dp&kltVV3bU(rB7#J{kP;-w;X<P34)
z3EzpQ^B`Bb?yJ=!_N!ikwTR=1_zJk7bukj{G|aO5p5xwzpEPfBX^uQYAldTbkmnT!
z0^!k|36Y6hD)2)DC~GHkOk<TYsrn$$ih6@~PMxpJ#oKP0%KH+u>=Mk#Sksc^mQYj3
z%PmAaR6>XsJ8K<>d77RGSX~t@fN^j!*&dGMpG=7liO+q=j3%@izC<Q}2L>1F(PK~=
zO}lqIuh1F7iRBha8TV36S{P`_4J~pec?^F-N!l|U4;*HyxaHh)`<ZBA1!7xQ+gxC4
z7HkA$8A%(v39IOps4Z6<<E?-{Cbu5HH-nlD9f(N+D@``PmS>IR7VtSJ6pLRTNGHZ`
zU?K(JTo%h6bo};2qX@2)IBx80!(eHFbN4d}^<K6rAzsR*(o*WhpF?j8il2uqSI)v^
zZt;Qz)1c@otmg6Qoyc4qyiVdILv~?^1KLYS!C`=s`S3iABRolj?=GnT1Kv?Yo7~O@
zcdz*K_e9#~wk^V%tf*y01(=G=BqyH8mm}zFk+8iq)zcOz+qh7HEi(&%TCt%~O*nF3
zPX(fhnq-AQflyrUT+2*H$9QB)twA(!DFT?=qe5xICsR39oiP`bM5&0MV$g5HSy#15
zvi;v*KPFW;>ou)OUsD9WVl<_MXx%>)n{nIAt_(R9ji?7KkEO{wpXEg9%#JV}+qeQ%
z6BOuI2*9C9{d=_vWK%!e7BtR-9+s!9zJESgpXzsIS4~O4-YQBIiqLfM(B--yNDvPu
zs$nTaqpW?!s|TuMG*LJL-C)VY$OGA4#hf&v<<L-+aN@>fsfOkZ$nPVvuyQsDX1$dW
zKI#6jwV>hcc>dM(vX=k1r%Jm|UvC~tvU(G7hj7zc_M-PzAGJKNRlimrTQwhN8x#&$
zG?8{FFC0N%V;bfd!P>_&j<$P^UKn%v^ROyQLMSv19y&y4R^TOqGDTEamW}Y-5h)rT
zD%u&@2dUzbp0~Ee!+3mC_PfGy?b#XjS@e%;-ne!%X*&%qb~g(gyf~LtPVjZ9fVvfa
z?n0!(pcxZPLx*+Jp2GU<D@NgiKp;+fFtTaXF5l})K89~wfLs&Ng1umbl|^NsIbbPE
zul?Pi#SO7v1p{#+{`nd5t@IaoPgi|E0^Y<&i)lg*#BqL7@QA{j!hI?jZmwc%73u46
zZhKU#pdH{LYABmC>$ql4lr$wqNSZvNrDhv)602RMt7K}?7p%}Ii`wzU(j}B+1QWTP
zAB!VADZGMRqJtZ*9(1Ld|DIflUf|Z_*TzRy{!L74Ifr-RoV-OK%ZUs(*0@R8DUA@9
zZ=HKoG-{jUzkFj$#^CT4dSg_pPI5lnEC{__f77q&&gqO!>Up6zh?UZ()U2$)FE!An
zgI;~pG;xup$DqmA^h!;DetAv+Dd-|tog27BvI2|4Ojkx)x}qTUZB5mXoEgLyTt!~+
zDyB{J5zSCO0u`&j90@oFIzatba2i*PLuWxr#Mb*vR#+6w$~{a6IE}2~xy&Ce`Zaw&
zokpUO)X6_P+<_q_Zk+yAgn0`dEsLI?h1KI0VgLKh0gV|Xo$OQZOJe4ty$ny9>zz|J
z@jFZ}b=O|Nn3MZP?7&a#;_cn`Z?&>61HdTpKe#1iLxW_TU3n;tfUdQ%MMbl1JI*AQ
zS%e?0vJr+(6YN#Skn%#|!r@AlV#IupvsE29O4Gcj0v$=wD(c_I0)`00t0~2de+T@{
zNg&H*OnwIJBTv)R^$uH5dmXfrG`E}L7l!XYhy)FCCZUjUbk^)ge?6Sm^~ij<bhwhj
zzKq`)r~oa4LQB_Pp~jl#iFQ!|LS=T&;L;FgMhCPYF2X>K`gB@3wr^9JU|>SvOEmIO
z96obTq#}VWy7SGc`6MrV+3tIXsN?<&9u(!@ylCt_3ZoL#p_nNdZA}xjK}z+!zZe=B
z@B#=ei61`IQ_PLJ=fVg&p5Ux3I#cOj$#8q5%%Uak<jz3)0!D1Os%Ox4wI69eDaUpj
zlZV?!Gd2wP%uf#+wbgM-PNns#4tIw@(W_?g*>l3<dg@q|hNDzn=a-M586K)wsY+~N
z&>oNBLE2iq{QQv#L5Rdza<;VRqcXo$<Qp!>$@<3$CM_}RTbiipV?BW;I*s7O@mIZK
z!sX#?EhKva;2PO_76Q4E;^>qr{m+=G#HzZr=RSs%#N%Q3Xs0f{4caE02cZQ11{!VG
zheU;>n!K#v?mVgn)z@hlSqy_vbU6I|I}rvb9tLxCxc@X|klz3?@{~K42fP*&DCRwI
zm|RuF^t0b0!Ehm($%CV)wpaZ#k~(3Ot}3dK!i)dZkKM$<s*BZD%$op1>UDSBX$~@g
z7kPnDTSn(3cTZ~<^ik$_;UR*c53a2rE-Nokc1SjvLd;%w0&4Sz0vd$-KVC@yB}z)u
zSWyU$r+wc#D?ds6imT<h-hcDdbRu+AA~oR0k-oIAE2(Kygm<^-9nEX*p`yBEh&A)A
zylRruMA+fzUc#TEdoyuLj}cm)ErOu=U-;Azd-2x=3Xixri!-pM0EaYCAChYbGB)tf
zGI{RV=Vxq~_u^aA1LT*YVXMDOL~}NY+Qd6ze`tDkn?{@HBusFfu)TUZ54(BQrh6Wq
zs&@F2@B6-jh}LHT*gIq{CWG3sHrb5m8tYF-75pshAlFOn&@C;gFX-Pqm{qdw740aY
zJGOOg)2XkT543d|KC}Y#fSSpkM)=A61Zu%h=Usjd2UJN4GU4O#@mw<Ci?hl<RV;mR
zxZggZ_Ku1%?akYJ50kWNzc(ov^uoy^XjgHM@XJyr%W9~1S23(GPW<}DIC|xl%07kU
zwfG^c3LXg*7d(hQ^gR}WKmOAnoEWhxzudtmd<P~HTHN%xLVWg1=7hrssWfacDWA8^
ztDle-6B2rwzI^%H=ud%yZ3=HY*dVRxfVbQ)*}Lv-6C2wYrY!+Qa?qj4F$x36W*@oH
zjJ3rvz^AS;B!N6AS8opP#}7%r!fMP-mo`e$)oXP6Ps{;M6$MEdPe+bK2xy#q<5N`a
zFHdBOS1u|1P!j4N4)EF<$cqQ`beLlnWO<AqKKB;(NL9L%p%&uJ(R%~{RIsx)wD|ZI
zg173-QgAkxi>AiWgKj1kA~S*G_7;28o9P^zKpvw@V0q~43SZIYmEh{Ds6e+Pw)Gl>
zauRN``tdoQnGig5<8l3zmXRy)(zI{5v*^kFK#y@?`4iukiW`!(ES87&HyO?39Z!Yb
z%MKMi@L)Fs%m-9lZlhYEe~ci5L}`$C3lMH=<d7vrYTQNED35o6M|x0sJamC57YK`#
zRY3S$?i}+YO;?9b{p21JChX8pPod^UWIQd4;e}p^HY?Dtg>Q==dzgoUx4CHw*+%9-
zX(*{si_Azb3aC+^j9Z+Nk)AKC{W-zy1)`MIbC-J`ff-4@>Hn+=b6s{`rl|Hxu)6+Y
zdrQ4UC=#q?ynH8~L!^cDUXRLWi;-iUG;wDRn=O&4M`#!*@Uc{zO8vzSg`r*f<F06e
z2UtJQs2~8kUQO9~5H_phMIX;Gb9wzIA$(a2An2nSf=r#jrR{VquhPeqRBE!kCvX`u
zK1C%~V)WAIEb_fC@%yWrOUEg5<6eFxA$=(mN_npvPGv9?SZp@GSTeTYq6sz=$1h-`
zvVpL2^Cn-S=anYfu<s+$^3oH#hp-*C!O%n}7P>=b6#VR0-K$Rl71!)bbKtk1p7rx+
z@(_S^@*U(K=d6)#24UY@Zyem%+mZ<OLt$p4G8%Y0P}gz``SOpcfLETkb2EK6_N9~6
ze3_zo*eQ|G?PDG#%}htyR^iV+hB35mv#aHAb9cCV8g)DJGCn%+yBL1Q&O?I+EFe2h
zCn2|f<zi2Mq$qwh%hwC_B^&)^JszgrIkma$XV@&F^tJh`x<uz}tZ0pd&NavGG>D+T
zcK`ulu#D!<gI*U=-J(qrK`3?9#ypO1=Fff@xFgK4S!}8ztV#vBvHrYrivrkPwGr^B
z5e#RQ3J;b`Aexw<RUPs6Gp<H}1@I*sX^Zh6u)-}T*`)aw=divC6W=YCfY*ct12VKa
zXSr*Rcq9m!i#c_E180$~y3~>wG~!%hZ{%Mx6SX9X%EtzE)eDMZu$?7J<CE(S3B9(E
zoSJCq)SI;oh-{%mIzI5*(#EkkYOb;8$Qjeu-vAHZdlqV{9QSl;Vak5y)abX8iZiIq
z41AXaVk3Gyz8_V_X(uP|b!{EmmazZXT}RSHD<c3&hD|ed|I@=WtuWaYXV+Cv@k+i{
z#%>3VtDV|eHf-|h&AExjSY$TGMJ&3r9w<37{cE!eP+1alQH~QVY|Ohuk8;Vjh5X_H
zg~nE;ozLrE>SjzI$+C-S8%>f1VOyWKDu}Lk`oodvEHPJrBf=<JgvDlpG(D_vd_%`t
z0Nao3_i3Y^YBHWx!sjM36_4eM#;DhPm}EHJgsHRT{$T1B-iyYAu+1c_Ud*`j+;qvi
z{)C)in%Ai2FlNswowDdwDSJy05!QDHq76ilH{~HR_&ODsGq_%{rLO^6iK}s|lwx;N
zR;hXJ#>^5+{54sn=7=n)>7gL4agXARKG(=X;Y0=vB-^k6s66D}*rKB;Duqknwu&s%
zK!jrg10W!`#bQWws42V-7{8%y$044}6)PRgyiZUw+9sbw_&f3I>F_HGSV1Ctw?-*%
zlk~!#VX}G|2$-NQAfSF9FW#@%Ygmj&JVmYs4^{)u>~LrEJj?RK1y3+cxU3lIK9}UF
zG2W?Nz}YkrW-Pa>faa($r-#yr$E*A0dVCF^t`I_w6Le(fe9?;Qu4AgbVS8-E@4YY#
zxhXXE6&Ti#BGL|0Qy^<id&<?{u!4O#EqN}JY9lEF*^a7J2*#ac@6qM<lSGZ;eD=t-
zf_JD~%N9xU6vovM;8XY?{qHFabyZp^sgzaffiYc(XTFAZymL=%d+?`L4GcU${0GAA
zCk7@O(Dau^<)v(kN(XN$X6gg-1P6lO3&lyx4`(<P`+Z1Xbefwd&JU=&EWN+Z3s#sN
z3YVzYkv(}ghTjNpmA$pdVPs6BDQp^97-x2u1&^<5Ifd~XoQ3?gk+TirjyqTf0KBmR
zq1=%I8kIxiUJSd95atcUVyJ7|oK|L+u~aQmU_iX!-)dpo+>Dmv?!u69UrKydHGabB
z2C8g$@>r-+smN3*+HDHAVMX~IQ&g4LRTpf8E5!(~OYi)a<KMixrs-S%!N;rG0MgEA
z3fem@tH|ZGdR=)Q&DXl?^y(--uoN5rvE2y3@x6F<igv-de6}zZtJw=<G*TNWL@`r0
z$)9%xOM?Blz{wiZQiUzOZZpTpQR;z}mrGwhWg=Br?uQW3Vy~b*{h$|j(@9?<!7_8B
z@iwtH<d}_&qHP&CMUSE?z?1qS^-J3?;dkGS!Q(^@j^mXnl{|%0q>Wzr7G@VX?*zu0
zDHo-U@ML?zy%<RB6rZqvk*&Jv14KEanJ4r@TPV^;wzvi(<}&H@#mKnJ2JWrydUyzw
zF915L49j9&bbi%~zr`;_2$8DtNy~(Yr7Ff7R$3agEiXr{X*Bt8FWlYOX$p}obOgyi
z=OvLj%!iqZdCy*@5dWaQW0+pkC?>*#NR`owq1m?qY@A_|KQqWqbFI1OtXcO~m=~a?
z?J!uhQ{Qbu5Xc(n7`M8>>R&aljz477RqD{ja#>9&?CHQWHErp~3dtPpLTIo0h;@Wj
z9T4720!iCH8*3}}Dnkwmjyx+3QcMopj1Kk|$m;mnKDAxD(6U`%U{V?QaXsmV6+lP;
zNz-H=nVk#;+0Z{K*S<7~V6hK!&Ot|w(UEqE4JW>@r5VS(fkRqo`Ey&#h)DpTi`1e6
zd>6gn;#^u^$>81ysp?@jDv|w(7>?(@1@?peM=8|4%o)?Z=*pNmF`u@!iZn~b3|EkH
zB}=b(U`PpPivZL}m#YE{)NzdEch&Ul%zN==oA6fu!@5__ARu&;bEX($2rg0Cwa%gb
zNkvwun=mW*>o5YV{T{f4gFN-I!3WDV9QcKnmi}3lQdv9;#FRCX%bMN~8gqm)y=-@g
zXD4Otlfs72kDp;EjX@sD8cuf{L{3{0{*?;2_Q4po5SsQ5!HDK%hr^{sf)6|~*8GxY
zx2o%s9I_@HvSMcfl3d*Mo%r9YvE`tGY_aq9E&4INjeFn^IoMIvueV?+_-mRIUlZ12
zf0W+g%ZEC-4qo;r4;VPZkpfdaSK)kTx%~`PhE$rr1!vT<`6Zpt>^qKv*LmA6A1pg6
z?V6&cc<f#eoXd5OQh@Jnt|a*Cf<S2+I>&>{hnMC&qp3(+uH6$}R|b;cM&vY;P>vi-
zm$_^>6{8nzzpeNT?7{SNPzvK)^JmBT!sGjjzZ3sub}Y3~R(g3+xJd4^o>==!o#$#F
z>G+S`kerREO&x%BaNVcyLQ;PZ@~Atc$<=v_KRZWk|1|P!<VPW`j!7-Hu8IF^O)Z7M
zOAy@x_SxP#D2os`krR}>taR(@1oyA*w`7)a<r$*)1HvIpG;+g8V;$*WIEgdz+CK(_
zn+x&*XLcfQ@3!}i$S^Dg=$?9SMyn%T%QOg!KOP$I3UThjKn1_w4XKjx(d<^-Nql#F
zPxKB=n$NXcPgX$vF|TRi*Yd+5F;00ZS*VXvHAb1f&~%#XGSpcZG6QyFX@7H7)jEd~
zK=+(wEUx1%P&$1q1RmA;_M386Gj!~lvOd|;rPI)jd$8bLe8Z|l1yX_Az*OV;^fN30
zCYyd3*VuDAStMwmptE*ySdm-KZeT{jdE==F->m156DxAu0ts7i6e_&Q8ur7z6S|d~
zNPSW}Hh5n4Ou%FND_yHp&wkp<K0A72KyO9FHHD&T&*r139^8tW)iFPgoARb0HtKIR
z^4b%6bJU~ZN^ilHpfz`zR2}0fkgcXs57X@Ffzug3M}fBHaTyDFS|9OtaYDV@I0hJT
z6aMdULALwMP;O8XoGN#8ugnzLqe?L#rd3(ai(Gbz0ui=E(CSHf(Bb|@Px+OICvu*w
zgsqEX5OoYc#5jboFPln?Z?e6ZeA>yBvi;y`S&@YI2C{N;>1sWysvW_p;ssj$v@cd_
zD9T|Q=?z}fN5p8tz4aitg+V=@&93`J{Gr4mn2}Wf2LL%h#=ij0O}P@`YrAKPrf3u7
z#07%9vW_zA)+nkV*QBx->q_A2)*@aQ(O{->yE=Ol_dJ8<)9>NWdR?&!q<8MV_n|Vp
z%5MaU|7!G^9d5%{O7Z2CyWBo6ZeDJB{jiP~J~GD~^HumpQVM6Cw$CrbdIs<glU*uf
zH1v)J-(mk)ndi$n(Y=8{GDM#X?6z3|3cp+768HmJ%0mmUP)SA59udM;eTXzE&9?Pc
z8=}tE_`EtdVuq~Oq?T5~QPR4<(K@l{o<jK%{~7Gv3x&COK!o9-1TR*`4Ny6FS>Vh~
zyHm9moa~=K0EQTXs#>HGVq@u7s;@%=TwOh`BqGY#_I|-_znDR@><W7+?KFE1oLUqh
ztU^oLaM{T}#fG^0yFEnis5GA2DVn@__>4mxJSvbK1evQDrSpGf*m%@cHbQBH5YV=u
zF@)`XXY~(~BJOT<t54T*%M6(od2nB+H+n}t_9K76N}V?8H+vy*;{!XP`j1uo-tRQ@
z+|~UDiCz-LR1x@>VIEJkSsI`%YpzCC5$>C@;c)qmz}&`S>~y4&W!b|7;-9Br8{B=G
z#Vn}$D$AsG?(~s%cIz@j1pi_TJ(KxAFq7j@RYW07wA4pKK17;zrj(zf;bTN*nA(k>
zw*gD>)o|iwh5`Vx#0<LmjPONqTDOrLCMceNZUiS*o2yK$woCp$1?>l|o9bdD^cxbh
z*%-X(=HoJP`TlnDy-@?$n#jD)Rc)zTqY~_@sa22XCIo57%14*~<MrWo>w^=f)<1_T
zq_oZKXNyWp?cT%yqYzp?qAL7bRMWgssIvt9Hpo>bQ6#_KB0L7t<IV9~tAF&k5ARFw
z?G<Or1123iM~4_|6}QtC!bXXeAcjbq+V0dhG9)8l6>R;#fASF;*ZZ+@B(=GhabXur
zhf-cLUK&2mZDIZ||30;YZYmKaxW6VZ@P7S#Xjs1~B|O-Fbt^LX)`68>Vm}2YoN<ir
z3xp;I6s;2O!(o^v$`mXPt|+vC$muZNWLq<m#zc7#V*64Xoq@gF)%Va77b#a=?LSa#
zz+*-MhhI{5YJ`l$e4>69s4CSgiX<t_+=#m}n>Jq`{U(}O=HAiA!Zaouv;h~_Q1WNR
z!1DxiIieRC-U1&|-8=6-y{PSfoxp#XvA96k!UIHckdTf|J<AjFP^*8^&*;x<v*tot
z9+Qqg<bC8G6sSM5IpqS@SBQ(ng{d&q<-85K^QdXc+x2}SQ$PbIV1-cdUu+g9<=yBB
zI;N|Pz$#f$z*N8o-;heu(#?5^1wl*AL2ZU+%9Hj@OUpD~kuL#ei_qphGVbrOI=If(
z0@*w*0pPgE*;rwvCxgcT058i0prH#B-Y~0-EGsEJR!)=*>VqozLNwp&0WI%Gg$B50
zQ48UF*9ieM&VQ>Ln^|3C1Ia;*K95j4t;AFm+eDFcHAuf_g<K#DYTU+6>+wqN&7tiS
zs~lUT$+a|N(ApGgAD4qvv10}UFm5uTNuBkbNk{_L7@h3RSZ<GeQ@XUN(K$Iic<p1f
z!ej}M=Zx9Sj?HXsN&D0!@}hVM1JI)i3O$5VOaTYiHLBo2G(e7&fr#kQ{@XgK2yRDo
zl74b0RWB$4_n6Sv$URy!!HzxD-!Z|1J?h>`N@_FvkBLP!!-spc#`{GrbxhrDc%<SB
z0FPioR}bn-*<H$_T537j3=)B183J<jPo-t0y)eMw;ssQLRgeNoa+p&$@+`{D*!B-*
zFi_-G9^hsU{2{-sIh7q4k82uI1`a|qArqP*7b&6>3Lc;5FG(B<Xd1k8Dj;2xI?t=<
zk~RMxWebio>>F=HW0%dAUxJ9Vtks`u_!mAdT3&~1&M_dI*v1kDt>vaGRd2gst{aB{
z`)2cx&tM8QERls6&*y?xkJZ(IqnA$c{Q?#Li)`_5|G}8M=vCJL@P#v(63U85Iu1uF
z7>YK>edc|DNJJ!^D@l;<nPJi_u63qAfzZaqH!oa(<X85#YK%nqS>n{e^k&<&ivtER
z)|_WoukUCIH7vtEouKJsIoBMfh+`_@70IDOzOIQ3I6+uD8Hp6190aKq!`iCtr5blR
z??%TYEQE)uedR%pp;z4g;u~<Aa~2`*DHMxA?aI2ywkUi%yz9$+ZWOA^mV8>l9lVGj
zA``tX3emhpUhBe(62X6yRA5m%tFUH+^aO$vQRU&86a{u*qf*UgNI!UIe7mkSiP!jw
zj`IX#ok7sy)6-T9r~zq8v`3lQwbX%ZXC?G^8#=|%>w6Dqq=pV`e;jls2Mdasz~_Ja
zS_O!HE_x2K$RJL`#V-UGTv!@nx#a6@tOEPWJaCr7S(hSJ_8_X;eO4|{9`gau(v<lG
z_g5O(jgB&2jSyBQvH}jmI=Ucf!lHcM&%IDv?Dvlr5G0l3H~6PtCyfrBEy$q@i!W6$
znu&+*Y1mQ~;?oyhH5M)4M9be58${22`4Q=gq4$(9>W4It^)Cy3N~t_pC3_Qsh`2<|
zw^QPK$S4gn1|oMuHCEgL{9_2LiZfKc8IreROUE;`J?uPfjPtG%Kh4zuRZ*%ObdzL$
zGyswRW<CcGP0>FJJ9WkA{B_CUFJhV`2^y*}V_4hNp9PnOr4VakW>6DZPONf=`?-lg
z^eE{m7t7gAX_PL>&EtB~K4CNzCht8$@<PgHb_C{v|HNQa$_23@7#d*=O0cJ4H+9xI
z%`q$E&dVKu0{tX-mI~#1dVns!Khat8K?{@M8QQ<iyld=aa?yyOz0{Pnzs94iA%VD6
zXTV-dPUssET*!|ZVB5v<wW@BKF5x*m^&{rcx^bh?g6g-$WQRl@yCVYIamV0&`av|y
z3Z;C|1j0r-N{VFMyV`Z1<fyj`>ZOC>e6H|=yDKY=-BNS|yEAP3r-VAtLy-s}*2nG=
zcM8fSA<dK7?>(eRoM-0817{%gl8aw;nVKU~<^mtvxJQQp__NzCvX1SBL15rX9=Kk}
z7ER6Of>p-Ldh1xx0TP|-_N_5JF~h>T9vW+4+qjDQ%a}p{9O*0Vo^1H*yk*b|W$)*;
z<@H_ti~$~6jddvI;?}70wx?V9@zxB2Xm7BH>J$Bi&TE?V)bfnI!<cCW%p;P*8KFT7
zO5L2#hWm+m2MChvDKvu2?^P5l7O@mjx=_B?ZNe#|75lXf3j1>4DGDaE9zhrL&`Mts
z<@QvLL{8YSWK(&><DB9j-439^XHWjLm()!#kc#Yc8ttWeP+U{aoia_K#3ykn)JQv!
zk?eP^{`#Y}_y^zP0-?gf?ajHeUE!~{dF`c_{IC^!q~sXEhym{eU|gq<DTnhJuDP?0
zPC(1meyY+p&1lTOrv|$tT@T0;AU7uF7tIsw)gO2cO_UhsOO$#wH7TRF_x7y9t%7-G
zjI&TPnn|dkUJ8}=cIHqSx8<&tA*J}7m2del+A0ps+g^z%hKX5s{_BSO&IjhoWohN+
z$nfS*j$H7(*W)=(C-dx`WKU+7NL+2y5HoBN2h^)Q&9I)9v;}w7DFs5(HL?-)MN5K}
zn74ysgYEO@MM2c7xB8kPYN(0U-27YOi@cB$kj)Fhs3bSo`*_$2ulu*1?oR{DNYJrN
zzo^!J`FZ8zk7*6>iShES6ObdeV_@ciz-iVVngI)`2go^yMGScrfU~E~1hmfLjwpe{
zpuh0vFEz1+q3<s$8`GfdLrc#Vk;6_nf2{_DG9z&KuFobI^@2`7YbC|zb3AQZz3(w`
zFq%vjK9aJ9NC1U~Ag#w$`C8{%RLL$oB1&_r!jLCJ3Hb~GQa1)LW4lFSW9BL00*?M~
z3YI_MlSWsrk<dDpX7C3<6a6`;fGD+H<bPr?_)YczZp|S`;*}dP6PwUkiUoInHSShu
zl_J;^^SYVo@%L_C$B7K(DsvMIzrEc!{<_;C6#<#%P5TQ_86aLcV-28xOvgS_-}hgU
zU&_^hX}jzYJ0HfxnfJeJjmaQLc|Re&1*Xp^AWCoo|CX!NIpC;$n#ui09gmT(^KYig
zp6T!qNzLHI+QOd@C>+wrirnBXU1Mr~9PNJgf2{+kW#U13*G$9A{-LP)G7J#~+V>Nc
z>!BLjMwJd4(kn|)J9Jrf5zD6BmL%i{Cg&`Y<aPO-@W)D@DuTO3e7k+K#^*#MFSpOw
zK1l2?L*)WQ+M&sO5jNlwWT!FTR8^2Uij{_tx{1J3nJFRpE4lflsfq7<AGHj$#T$U!
zi-YYN=w+@0ieXR*+>7%ukcOOt)BY`{P+nZ&IB~(UpaOrJRxcZ45vu6E;eCrI&vgj4
zp;~f{6YR<$GBBU7$-AoVuz?(x=Te|pkR||<c0HH=O^EOdP>P#|C<(}bLG(nzNc&q|
z{K<<b5i^~EtHDOiFsUQ?0R2ebhPLbxHAD(67VfQ_J^h$qxYmP%Zk38jg)<rzcyP@X
zeRyw3nFz=laMUC*G9|lV*J>TVa6H<}#b2r)hI3D4giD25ZF~>wdCq<s`x+5@y=y%G
zRR{rjw4#@(-3RJGxv;{N>%TkzudGL=CYfq*FEN+O{!1rHXL)_uH^4;Pe85v(3eUt!
zjs-q08}i|WLY2FIUfim2Vs%xk<06vooixLWH%{5Ca+bm1b~4=c2&{<sf6stJ%!oA-
zo-Q4WeifhSE4MzLk-~eKql0zRRRLG3=7n2_oexMz%o>gKyY(u){yih&3PYmFoTDC7
zX2d~TaFV8;-#e)zmMPD$CbjNzJb^5x$&2e;_AvuB8nVGh@$;(g)Ac1D;;u{sk`N96
zTbccmT=&HXF$J)yU+K3XZ8I1*@f>*#jQaaWBG*}M{vW2>V3Z>Y3-8}p)SEc}IQ*#^
z7sX+Xmi9}RmP8gm=eNp9-|u{96|D5MZHNy*s)-ML*jc!{)HHE)adD4DOtEV)4kuvg
zV3=$ZWG)++Vk#!L`+ah+S))f?b^$42+?{{0l5cWXpq@m_9)+Zmn&pjm2J!xsy=8aP
zy;jf`XCZ6~`jUH{$RfPfs%02&nTpY16p6M>z!VT~r!9$SBlx4ggVFPE$Mmn1%S(E{
z*Q?rW%BTPw^L$E*jl<5oow^Bf3e4x>P-qF|!G%3kOZf<TBkPYDg=63Wz8d0ns)aLT
zSS`y?ViR{N`z_UI1_b*juH!6;8u$BrPCOT&Z$LZqvb{np;M=*XbrQKBexTq12nh@d
zMK+p8o7;2#K)N;83Aq!CH9sZs9}*<<AG?v7!33TRAG|kKmDihS{jf>x+m@153U5P#
z?H>i*c&Io8)Y@rm5~Jh913Dr@nW1<Q{jL<4Yzyvz#u>;>r~-%IPe3y%-<Ys-01hW-
zUu!{t{ld;xJl1R@jGp*AQYgd4H5iB&ua7W`-TNZs@b)^RW2!bfqhqQvkjj$^8sKCF
zr;(8BeK6gZ20y_tq@l;uK@3fZQH}7s;r!B1srRpCc`DXS7Yhb)$r>YdaBd$(2GMfe
zd7y?lI4z1O{s@D@QTe$Sx{RpyHiqeWEn;$~pS&I3nH^bC@n;7>a~W>;bz9dW?v`4@
zf|5odw0|lMO5n#$En>9yik?Q;7?s3E@SEsZwYr>UKOi=ea%r`v+GJm0BVkd;UF}Lt
z1ziw~gRz!z>lDyYL-O(3?E~Xow73&xAK9taw-*qk5V9iVtsLR)!FA&b7}A5&M~+!D
z0>xD7Rs9b@Puot(hlXP7$c?<%0Kij&NO*ue{Obm)Tb_p4y~+{KQMPaed5n|<pw_qb
z)bIzPUF&{wbt)}iie88(Y;Co2uBS3hS<qJ`?rpo+EbFQ{=Ch^4Vlsk-d_InU2JcT!
z>S?V%jLrEAa=^V-L;wCmH&=TP%?odG0diHX_vIn`X5GvBL`r1FE;nYyc!YoX#Xf%R
zS<LkEWqDMVsqYu4h8JRTB>}oO<4S;h{U~ia_yU&A02w9DB5{16At!M`pHNAj(TLMb
z;oWiUpu;!&TsF^W<Tyjc8=X3*1+BxD^GmgJ4)*XxdmEc@WuWOLE}F$1&t5Oh@V*oP
zX4?jh2gFt4*PEC@lf8DRKc@%2R7Z080q@X0K}5xsas4NAuOY>dmdjROR6@ZI4MYi3
zHETjl!Yv<qNb(9>?#O(awHz!)v}iOI>3+7{N_q3J4aDnj09GfO#eu17e|i<n-ml8S
zAj#8MV{KRMWbPVanWws&)Z~6~dCbJD5*Yuq`yjd*g!l&JaKFH%m9Lf>scniPJ`t>~
zq?{zdtSnPvJRh|2s#rv2E$h5IB))@kO+w*7n$(faOW#9q)$bH<;Hw=rX&pndp^>4I
z`YR-6xS?K8aCt^sy%lTXk<>W6QXbTZw>J?GtAyNY)2B4+_d0_CQulO^=w%@^GZtvt
zq7`#e6<d%YFS`r*X+fG0fA)bqLUomxlS?4p7eSucq(y?)$N&N{KGZ#SpGuVn`z=!7
z`d}X`$N=`GMlPo^q;!U(A=4AURGLkIEtbum$?ba6^A9MMd_i0)<^J2R+3$CVBR_9J
zH#DhSV%f|;&yqS^6tMJkbRRIoa%MsAq6k0d#_Y31WGmrAe)^VPkB1>b6UlFOP78q7
zh(?Ke8LvIhAv@gN#(~^q<udYD7a1(@zcu>-byl|-Edir|S?z}FuGA?922b6mxSa*F
zY+@8KmFe5sXteeIeJ`!PAVk2ec$Hn|@|-KfnN6rFj<PM&Bf(Tjl)<vBowW2OuYeht
zW`aG&h2dDMNG^1&oqQx-8P(I6ny}mx5eg3vWsi-B3h+#~9OnA5s5$~}Jac_9%wDd9
zx2`Za&$3kcud@M}4||bC0yeEn6b}NF2_)DzWq~8C`ud5(+0<48ifg4h<P3_Hd_bQt
zxd>I*HPqGmGrf&Pi31&mf~b1sC1L^J{JpD=G>oJdyQDw}%_YWhjx8M3gQePk6l{Y)
zYiXa+S_qM;YE5tNi-XwW5M}~kZ2DU#c4V)2sJ3S|cu@sTwOx-c0Zl^K68F}vFgckj
zD1$rb)I;<C(U7I)l|*p|^2$4dzl7i~bFsnv5vY^Z`AIrYXh*#IO3$fL(*~(=nDC8M
zn+|p^;|>CJ(j`#eLBlbTDjIGf1a=<my#3Bj|Laj)tg0ZQo5^e0*1iTJ+}=a_HDHRT
zL3LDz7B%7t&uqbe!EhDcroIFthmZePITez!f)isx1DnW(j6_%T68A)qsnn=6(nUi#
z7kgLHG?N`_q6Xw6sda@tO)5AvADFXZBFSc9>~UOZuU|SU)M~wtqG`j74rwl9vUi$U
zfH<}ORpkNFNmD*1M{g|Lhhun>GuN|;sDAb~6ubgYk+`&sF=S*EDgdg+rNvdiyN>ot
z)=5Jp6NM3=C<CXp&5Eqt9{>9Yf9szKhCM%0CqoHs?5vR$|4M59oyqY~)|HX$izIt*
znczjPJK5knb{?vg@4M8gaFdjwiyFl4exm|Z*~Pe23D<6T7h56)OrCYSy#Mmd@4Acp
zOWiy`;SJr%_E!fjV{KoUBh^$0^(V8**5-8z1fyz<q3o9_6Ny}%V)aWgv?5+?w#)o6
zv2;~ut%!h_vA<f0K3F*;y4D8$rmzU_eh=C-)Z6LHfJ~_m_w6X-9|E=4--&vLZgw?H
zR(Lhedkk)p(I9UMN3ZhtN@*t(^pQt<&?iJq$Q(knRm2x}cDX5@!ql=H5<_e>n!I%|
za_DHomJ}X{cYI{IlPhfRSVxPX?l$-}A%68d&A5)zRg*4&<dRguT3sm9INRvZ;JWCJ
zlr-#iC=(>?%HmYKU-xo#xvKqY|67-?Z<-{gaoF|eE;{0l-QP}8H`MW=hWY4Tt5K6w
zL(L5VO4$r9*?7`4hAZ?IrRB}UxNqTU2rHYl6dM>{0~2UwUj<)pv?5_(=QX+N#kcx}
zK80T?sr$ROw1J$F0L-<Z4}8}H$e5bGlp7K{dF67AN9%J-c&SKc(McnuC_b}BOjTG;
z6Rju?om;Iw-N7btI+J1;uwtkk>|1_uIdO2u+@=Q|3^<OM^SE$*8|^*Kq{_^z$6n-J
z8`yU+^(3Zgw<h9=>WVkFqXwcvo3*0_Vr>R9bASNc0>IUeVNo-i!Sj0-!%@ymob~XP
za``7SdPy_9J4PeGEf)f0mcPqYHn?*J6C|!i?a5&SA72G-A+O$+&MILIawm1oh#K|1
z&gn+03YSNO#Dj*282n@9X!{I8#nHW=M9F8!^OPQ+bQlf)`niSI@Q9fFS7<n<Bs1Ye
zY7;XL1EsAS*LCtOg+Rg|jyWz%5n%?@XDj`pouHm+E}Ju7EW6RB>+3G+O1Q~u{IyeS
z+83U)9K<q`zNl!tP9A!tZ|L`9G)Zy4wf2b#<*Mqm`+Tgc!vs);wGW)FQyqkat1`BN
zOd=!KQE|knAsqqSoMVq{WLM;>!${Y1Ym1-=W+SVOAomUrW1+9vjY(R#V%NNv7Ta_k
z(^6;=`=~vq#>fWrvvj_jpcAcl7kPl9xoxY<;+XM?;Gz4>XP^Ms=m;ATnx^ak!n9`>
zq&`IwHPws(Skzpt#{8i2eM}z%+ji3D2qJ^6-Q|Z1>|T~sls-W9UqN-jB$Yu?QpL?`
zqxhPP>k{k}Sz%29_3L99BPF58Eu-1<@vg;^l&hfwUb*XYCB=PZJFauI0mhs=_}Lt?
zbKA5yE=wwhmTre%MLl|t`ee5N<$MiMPcOGIXy|INr|H3@vcoVbGH<1c==}=`j}Y5Z
zjyKjK^L*i|Ug5WalX3RQ5ICwGG-D4fr|}W-a1&Lixtp@z1Wl1ajr~xQN|6H7#GA9D
z?oPV>-JAVlXh1ZM_GDBYe3P?|RUyz~np+nn{~GGA$V85*0dBo^2Qvww>~<f3@O?6r
zV)OBe+adInRudH)ZuR&YOp0%qe9TqE{xQ*t_ujfUb%R!q<eqqSAG&x>&2;lrWWOFt
zTn|mMHJ3(UTmup{r4=(B$245_JdQ4m8T;(o@fBdFw+9?<{^5TBanFC2$6*z-rEROy
z-iDaWRn7Og8uC*;EY3WyqX@1H2Pw_kA87uu_=iEAVrp+@mo!Ob%2+kTdjC+0?u{2~
zS;OD4susB%dayYha#{=yLlccU?%)eqBDd=J1VBcDpw2t%AJ~;CZ8s;(z{XS4VS3w!
z-IC<o4UmOSiNuZT`~n^v$*&V~GxF&=IJ=cC+7rHtG21fXGs15oTJ<A_DG<*hlTF(Z
z*bEYKmhlX@HH}A%`~FD9C;=H(T_<~Z05eXV%n*Z>3lWD2ezA`8rAq|mn$%Lia<aMx
z#h96i8N_?xV+!0gNMR776y}j%%uzZm=iK2m3=3)l46A8+m&mFRFFr!lMv*_EnCng;
zwVJ~&UPYXCA<q4kF)2FSJk@bAzb_`lJkL|WB|@i?(g}0ET-@q?C5b-i5C)+oA@(=}
zvUNepUS?N9;_ls+Mz1_ty5!^I^*xk7kv$tW=g>VB!62c39B3?KDDFVU;~_bDr?aX=
z%^hedPM$u3y$5O+-m*m<{)`=g^{xiHG8#qfJB~u{RLMvPU2X|(L~LH<*!&#`zB^r0
zvag^s1ruqjSl)}GjsPOI`nTERe;hl6`)QvduluXl-YCh;MM-f%;dkkNSVh~WWsB*u
z-U=I^B*x-M;auF3D_e%^nd5|Ig~s>rL-B?FEHDy>?ML8cz}XSJqKLgb9&J<(XM0@g
z^tE`zZ0Z9or#rFERCPR<RQ5qqJX9!!_w~VMWc7>8SV200e)PW9ZS2%jQ2i8368?Tu
zAGAM@hqB{SJG}IYSexKKwmU^4S~a2FuW2N--QJn~-y^5E5VmcWmo5P;QAK0Twudm`
zVt7A!pNslYvnR)V!`k{up`v{%fS#07deE<7OP9b8|BZak`=TEDiOZ}6Hh!N&;Vo`x
zWBRK2(-Lf^2=ED5M{;s2lazBO5K`ccun=>lYCgA2-NL0zGlLB11#sIvqmbbb6mE3t
zoEEnZTg@)j%yu@CRXw7HWNNj8SUk7$=S-Q3RCW#}+!+kd_ll0rPZX#LHIXYw&N_~K
zoXw`g)7dmaZGt&EIT=FZ#;#HjnvP~v*+`uIVHi!s=MO~y8MeWrLGcxMwdT#e{E=Y7
zf<CgQ27;skU}@k+U-zhuvHr~gGm5%PFxai4V3P6X2$}2A_FFzjF!X=*Pne?_!bv+d
zM*@}ko{{mCQm%(w=yzliIkIY=d$>sSX{e)Ia8@iveUWVCZZ7nqURJGlu|LFh*Tw{y
z=NFt<9aRVCr$Y!0t!D(2TNOVeoU-~|{y-fq1e&v!3OCE^HFMSFAKaj>Dwgqm{djPY
z5osxMVVS*|GC@EI=ui4;1s4f<y4NJ5iQF*jje4v>IByOEGOH*9&C!j3CViPY6^6%w
zDFEZ)(Y;boLVTF5S+Oq(T(p`8O6o2%&NYE6m5h5thO!S5?vZkv0u0BvM5L@(ZJ0bQ
zDshP{IoD>9yfAaz5;jm}%(QUt_U-I(As(r&%v=}{XJc(7d2&c=cQ(FaonK-lA^q2r
zxMu;S5B;Mo*q1%DR-ld-oq_jSFlht_D)AcsZ>1kEJCaW#K-fQXeZG48voTJBxhHLC
z+V~a`CU(vgxI}-rQ?7@Cd^5or1lr2EJpm0};cc)qcS+6(HNkTkd0akSrI%bO_o8m?
z>G4Hv8-J@<+oh4k^_T?Nw~qwrlu^=~Y(yTdt{o&=%;5Ot!Q0A?M%TiALx>Ab?E&em
z{-?uln<H$xP3UuwV!~Zhz4)KxYT`O943BZ9|8|w?h9Aq>^PhCxOsW92zB6`$g6I8V
zk)e8u3&>L&d0#G~VLC~qw|St!#<#R1)+CAP4euM}WU`IuL^MxFgU_kO?KS9;=lMIJ
zV<(;@Z{|~@Mu8#cKDJ%2b2j=(`2pwX;L{Wk00+l{l-J3$m<goHXpV|w6&_y4_LI<R
zke^c0kY9+}0MuvuyL}c?iIj~=3WxK_+VEW`pV2oRBXGMlYfR3srGiC`aU=a1aHh>(
zZ<t<Zahv;C#CK-F*OfI>xc`f=bN;4|&D;DzqIvT0uACZNyU>t%v7(L(2F0e?yFVTG
zc{3*J3zy0M=jAlq-|!lPR>O?NP5?8L{Jt1n8JLxgaXEvySiX}Noz`G$HKAc7ubep}
z>D6VAExrLhMqHx#uVr(G8}#rCjQLh|axXs)6m$9nhM`I_RoQv(n=bC;RTB4}`x4=A
zGPf0^A{5%bEpAlHdx8ZeN4%oFNP4Jsq1G&s>z)G%aaoPARM5nxgJ_qrs#b&-gT_^b
zM-KdYD)?Q7;v{zTEX?{~aHUW3{qlT1%glM0lwYbReip5@EV~Um7fM!#9;Aq~kD%QF
z6)#7IerXRLk)sl<^QkJdjGq#5q8H_A&EM+Rpz_95d{W$?;`hT$Y3~kGxMesxOM|ze
zl=y@i2Pr_%7hMGVejQGwWo&rkYXoe5w`Z;i)A&g={5yqbj<#rZ>@gl!{Bl*_LzPml
z;4nb^1lh>?XG*z}2Op-H`(zN-oe?r~g_Z{~IGwyl+Yw@2lI0GT>psmxG_M+2t^~hN
zsw3yifH?lA<eMAjD+7n|KsF=Fl~eY%=og;=1J$e*?g?^E&(XA!IyC>9x-+SJ$Piz{
zqr;KMgJVkmQ;3y%8McK~T2$Z^kvdc<K&{-dkz8zZU20AKqbI~E3zt<)2;Q`$Dn)2R
zzYSY5Mu7&1x$p}aYK4vp=Svn~ig{<(^pJdpwFuA20m2hDstZ{DR@5CC8*ReRwW{RS
zf_|nCP(>rz5!^%g0H<ksVw6_4lm3-AS{Wj4(pEqMWAP$stdU7lKMZc0v#lr&om`n;
z(;8HZw-IYAP|t}<|Aavx<L{kW{?D6{soZX_JU-v^gK8Rny5#t-xWW{fxtVP9YB<dF
z{-gY+25z!ZE|w(=5V`9{j1`Hy%-mj7W7JeuQwb%l8`pL6obr!qBSqG98DpbqtW1)z
z@R@sHkt10XLpEeu|1DJ7<&XT=OufT>Gl#|#83Knuo5jdwET=u07FO0EYu5KWr5c^;
zEU<_(n~c>+!{$Gamm#=Kjv`Npl~nc%%ZIMe>^=!LTQ!m+LL6JF0k`h%I&N4x#RQrV
z=t6RQ@00S9fK&#UHBbX*COlf2{k&E&V3qr-mw_X4W;OdIaI;^K6*rg^p{ul1JTZ26
z3K`Qu54anjCmH@cuvlHd^9?|C#3B<t`2mw^W^yQ-R{m>^ql0)({@F}JxfI%c=!3$_
z0K4URNbSy({q*4JL~rUTS&XyEjgT}%458q|fgR39=XRN=tXCB^JLX*Ir-DaLDuvI6
zIDS#Td$<UaI_5Lq>*Z{Y^n1;vm1T-LbK#o<fm=nvct`qcub$=>^A2EAtvTqF)JyFM
z_VZ~#IGn+e=p#q=q=i&_*yZLc>pmbZ076zLU;XyqphbIra%c5(b$n236mgVz8V752
zc^;-&yu7>iZzL$6?h??3B<4Wi#&5}co+JL4f6`G{Oj$`-`cuDIox(wLb_Gj?u&Z#7
zODJb*5;rc25~#L}wJ#sDdHGQ{qAN4kZ};*8VH^%QTR~d=O$|Zth$M!;uVs`JVcmyU
zIMsyaC25DevH4?3T#?#MvutShT~H4kO=`IV2hC!?&)*`-sTv-(G$($n8Z}Q0($*(*
z^}Lp*Kkx9@HN!Lk1|l!Wr%7EW#B{WQLD(D)U+j%Q;^TJOiK=^xv7VL9uDNi`hiqa%
zJfU^$WUJnUauh4Kx-U05Eqd~vsTNa~O;f2Lf_04<KKRc2CsdWDZ3BveEBy6lMFPap
za+gjZB>GiJE5gcG5^AsjEeh%0PPlUF*Veu2(wATy767F-o5B}uH=@gH)A#f6q4fhq
z_F0v|B#0@M;OnqRZdu3cBp7R(_0*RL{6EKn{A7YAq#b$eQ<*I~Y4OWKnXfxSa2zOq
z(16b_l^}vP{Sa2;ct5PceuDbn(M{UgsGRDImk=n45_}_?(fjcatij?NzmsiM29GLq
znH9dS&>HFF36MnU!`Dc?gWXL6PdKb};$E=y55R<1#(E_#7(Y+%jqSvxb(7Y3%*_x?
z3_IVjcub27Tyv75v0xJ*tAlYXQ;<y2)`E?xPYECBTs&6EZ=y2!(r7szl%6Voe&Vu)
zMTCY2c5%txiLouYK<oQ8<RSrVOY$N_mgY-(pGozS@3r)B0hv0RJj(D$HABel6Z%_w
zeq32j<m;xQyGW9q@b)it8Bz{uCrjjJG-wKK;32rkuUeNIj~cl3!04B<e?t7&GlhC-
z5Co#GpF1e%v;%D<&Uxn0kr}G%*!`|`dRn|<G!g?Xr#rFER4LdRA3})XdBQvhnRr*E
zzZ;jJo$H2BdYw|adQ-;*!}8pYb0j}0I5)^J_G!)^|Hk`E>a4;0W3*Bxv{xj9i@X=N
z?CKy1;Bpx#yM~gxpJ}Cv<VQD<n{lOXfYH~ay|peV6Gv##wh%#Rw$Y<0h4h@1qK5-6
zka<622jOZrPo)e|UUvzDpzOm8Z*Dae2_f8HEyR0`2^<BW;RD*#&6PNnq)NfLZ7mV=
zNuvyUCU9Hx3{r`2X<r|nPoKM1b3HtnUR5Qkd&TM@h1i^lMhS%Z>V{`Kc{@I10iU#D
z)cPb0Ui4!1<J*dTZL$5v(pM+f4YS%g4iNE1=T51?FA`$NlEPHZtcvzGHsH%a(n?)5
ziaVaXUz>DBP^8NGQ{D%|X-ou;={g|mL3U`KRx<HGAlh8Dt`1j}p9A{XcjYZD)i`j8
zFNcv=;_@!k*}d7A_uXenNi%l5su`a<0NhTt@C9OdtXLYBxA&oFx#-fL6Up6)Xqb%2
zAd9t@cSnW+{e`zP-@fXJBd}81tyUY&8={9@#BK!eN+GoH%kD4uw!=Am`eh(glAX6+
z)u~W6cv-ZzoYTW3AXguB|Cahwh|?0Lez(bDR1DR76^Onm6U7$Ya9LtZ$dDGQM}}bS
zVHVZ8hMR;LZx<~c6{+eXDD#}=QJOp?wBhh21EHm0N4_>F2TaEwH4NY>v+Rsx#6m9!
zm;%SwXeW04$8oEiKLL4H!}h@WhuAv4vAU+j;3Ib4b!B%B*okQkc^h2W<1*UGddN((
z0&Xo)LJM+wplGC~$x8BN8)o4h>_qMb>>s-xF0&e;*E`mI&T5*e1ajt)&g<_?JVGMj
z&Q%3imy4Dd!2(;Z_=ta$A{?Mm6UjzVj%ft3<LGY56bQs*`NUZsR%cmHZC!_6u}dop
z^v~i@VNmRFeS3q3&IXQEl&0SuE>6dM2_>zB_j9@HFtOJ9p*hpD;O4yUMXG(ZB)t2Y
zT@m-$^Q?o|mb@LtU<@=IKxuC!oM9DPf8)i|sO%pNc2}d<)9tM%dc~oP?<xVW46aUt
zp%7`kq(}Z@+9lmyq&Qbldp(;yqbc*rpd(YAg$p9gL_?}YLjW@8iD8GVT1`mcSu~)1
z_p_9w`MnW|R`F5_b$1mUxr=1p$`7&-DcYL(O8>n9ZL&TrlM}>cwi<5(Dp!wL-OC%!
zP7(CIEFD2ePrcMoZXgBycu?gI|CB1|?8uU^G@qUPvsx8K(cfyp?b*>1*(&#r)T=1O
zHJ*6&^(7T@K|beTzkid=?7pk&I?A-}>z6sG0)kiIXb19KQaTq5j~IFiMYkg2lY$g_
zO-A6-FXvTbU$Bjf7wMgz$Yi$(sy^VkS4>uUE{e(A6cMX80CLK};PWDI9K{9{P8ge6
zSe3x&PZ*Zh@2NTjKSZ!jbC))Dn%s+ZV<0@xlR)#7_jHh#HmDs~!q>2j#Jqy0Lzj>I
zg&Tj(rUDxQYOAxSyHnpAti`-cI(I5C=+JRfzpQ~KU<8*0%6|~6-WzS!{1Z71yK93f
zf9@U*3!2TC%?5aTM$`O9M4V1>mp(puGCb5I3t|s3DqE5KKGW=@svV&-?+Y89bkYd<
z(x1(bt})KE{diJHcr|((^<53jcPxWrlK+4duz!>~OS)=WdCLXt9Sa~n-ddmuHUqKv
z#n`XBX5PGA>fZB<GM)C8t>{M~EkDw_r9S!1jGV=X)wkwybQKjc2@|JU5=5Be4$<vf
zY49fmQv{mmgZqQ@lo45hopv)qdw&<)kFsl-h7*^K>*-%v%Xm)0W$Ke7Rdd~1D6#hl
zK+6lpTUgS@Nh3XbICx9I-5}#hrEu}{$QwvFoH5@=`Ze$iya4L(DSF8$WTJ4Igb3i`
z3*!^0Of@VFn0_IVD}75iL?#=iieQ2Az#?tQmK^p^3-#NPQI2>nq*FWywa0rr2X4dF
zQoZ+jl`ax;lrdviozK)@N}D*h3V}N9&jRal(w=v7m0&hmx`a@~<!aN;Hupwdg-ggJ
z3m%a3s1yHf<v#eQuyy{h(UW3UkMdx8{+}!tk{0TVTtr#}B3?kPT8rdFUESc{J#ORm
z^#mf(+HvSl05Bz3R}nYBLZ<DOilX{D0^0n^vy-(++*!y32guIi&=<sh)qGVC;RW(F
zi<Nj93PtQ~=P5L6idrO87%U10Ris?sJUsH$@`Mnqc_^Wwypl%S?Oag?1+V-XkiUAK
zX52?<D#@2Xa!CHP!&vbpOIg&Nyjt<<;(X~}o9MtWQwDosx2tKCpPc{*3ulcBx+Fs}
z*EVq{J^mV<XNKOXOWuPgjwXnXHQZv9697>n$XX>Vs(@7z^mZtRtaBqe$pW!KOjcu_
zzmat9Nl@&L+2catE*a9wvrb7M$bE*nIo<xiSG&e)E{9#Ocw?#blwUn>=RvqPDsVxu
zjcl6b|6XN&f`4OZ%A_{ixrpol_jW^gx3E_iWta+vwEK4inXn^EOQ^UZOa<|;y^)Vv
zz4`NS+gA<J&}Xt9%`dBTdg<(=HOJTrZ*5(Ot?%6&AI1w<GUI+7O`uD6Vi!GV(Sorz
z2}UK_5`!ZR+l_b_IX-vF4p@Taz%~`Vo>=n7TyG48i3D}AukH&}z^-ORukzJRu2}!g
zbj#c~(>Q!#F_0*93A|i}Qp$7Lk!5XS2EA`{ybTPt5~lo$VlS21&@<VOQ~JhaD9#?L
zUD7lELk^&ulHKSJaI@f8yFGwAoWCM?>>gYqsHXP!3bm?vSW><%dfBKT)MW{s;o31C
z0cf~PV!<o-RWAZY<jiaKO5tX|AS!P#DMMFisF34-glYL(0_*#ST>v=CmId`qg8OU$
zOX$zsLTdL)K40%7TxP8rFe#6}s$^|U0o=z^$QsT>Vp;UCd>V6*{meGiGis=5N9J5H
z_ovD@hZ}jVUs*~xJ$FKClsAS7fQQ#f*iWt5?iEwLD01;5&sP{d9`gkFf!oR}#0WPl
z4iOih4@aDJ`{(}s9-0>iWL3MmK}&CONak4xFs<vdahtyLF(3_uBoJpzmk;kWb70!v
z>I7%CujlQ;jpS1;x|!5@{X|)wE+4CiUwN3Ji%#_vur9#ooysbjAl@#Y)kO@T#;na3
ze!&rFRlZK``>mbsycaMFYrH`2A2c#ggw32pgViMa@opgzSem)>Y*y?Q)z1y|8{zr1
z&@W%QA6udyD;;5d>EDV72w{fw-Sex2Kc<476JJ<%T2u6_Y~J4qe)r8;#sLj+QKDsb
zT>kzdtQ7X(<BbiR3M(c~Fk24z*c4G58*e)c&VK+}+<0!r>fNe)s{|{u`Y?*%z;c}3
zq4tmKA{Qkfl7htO#tGIKV_S=B2bLAg7Fstap@U7FcPzjfQ+Yn8?H{ArEIN`?ZO2AA
zaez_);qfFl?wsAT>85~uXp&(6dM(%W+vLYE()8VCV7X=+MnH!<5or+|1~@h<VMA+}
zfuv*zlb!q#8Fp%y8WoUkX*uAXZv2|u0lo0&3Zn&6AUZgctwkSHvKKam+?HlwzNPXu
zkkDp6v-eZ4<_kLskh_;EL61R2>p1xQOJB?-QG5FU*C|J93cVs0DTzQS6WOUaS4NXz
zwg?Al4vOT%5{reJ&-k?)Jp_(3iL+iv#4UCB?t{t_2|55ZEVeqq+0G<2dcHXt5r%Ge
z)SNvrUPkQk<2KGSAi-bZYY`w~k<M|XVl^d&eYZ%-?g>IoNAFzdX7t^4ZNlckoGr#u
z+43@g&UmZ0A=(TIRp=g{jEf`m$~aCTj#5ZY>Xx2SPkrW7Kaa;f{|-)!#1a*<8Yi7E
zDKs`AY+=s?p9q<wtpw-*-qsos#vA?|-)SjC5sna#4U%<hLTPhl?)&!Kn>>Er+yq-6
zuTp&0mZ67CF<IgFTcLQ1TjR;Tln2))wO3$8Fd--Xy4qwj_2zrZzC(esrLErjEG7)`
z0C{-kKjek)JhQ<u_wFmpIx-pw)WwbskoF*i*lK&%Pk;oN<{)phd--Bz8>Nd5!}h2F
z5sw!16&&=RQKFw8aSkgrsO18*IwKrlIVFyMJ7gwsT&4zk2XE)=b@I8Oo8wK9(!p{_
ziCa)l8zVGf(5H%QNm1)Kd{QgzNNR8;I^eOkvS&HDl=fiDKbaJPQc8B+dsd}D+2Ll=
z+H+3~kbzu!sjiwh8*a8dYID9}!e(i1ci(E=9YHNOjDIrd{U{-p;+be3#mEY*oVvh6
zXX)^~PRW_9vPj%6F-3Vo-~%<Ty%`LpXEtup=9ZUhE$!T;%=x^F7ru&(7pyEk>qZPQ
zd@DY`_?MDuG9~*G?=;~TE<9@GAqlAsnQp|PB^ZD&eFg%U!KYzY(gs<NXD5nAKT;>p
z-K#mCo=mSQlGQ#J9{}{I8ON4qD)Fyv5hy7-joRs~QQY<7{M({3g(g?hp71^!N?;_h
z;)=}PlbjPUCwGW=gp~)~wMrLYKPSP&VL9$5kQlbXy>Rz)Wt?|7Bg8kkAl@n7jTmS&
zyG57PX@&hc4Luk#5B?34(j@cA4|TQr(Gx=Kzbrf_3(4*Io?NVaCB|Pd37Agn>19^C
zSqZVjO`%Xme+Se<VmxZ*b%J3}xfo`h-KzHG6|iZL6DX}8V6+OFkQifqbrT&z#P+<u
zLIJB&rVnYJNh%yBrTuAX&=yi)*ATwd^)*~gz!IhG-vwR*`jJ@CzXzoy{8dTi)fOLh
zq8A?)LX;UWq1_$^=FrCuiv!rn&YpXIV}5-vF`Ft{;5bz6Ug3T5gj4jQndS`((`a_T
zKR-F~I)M56QGy*nS0pU_xmJ?UTMqtB{q%)5L;fUycbhjLp1wf;#9m;Scrd+xX9+I(
zSyB&(OI`++z8oWr-#bIBsR9ybpTY4|JVBIqhIjZ<_g;Bf7J&&XJe?#t(;LjvM-D2A
zf4os?!Ij+L;;7ntEsj0gU&F1m$^a&gAGR|iSvGPS!d`!ZQ%Pu$>b+PgH!vPOl%FjG
zHPMOJPt96#PbrqU9gZ3`3&VdL>vm)U?<rx^s{lny6yO`D+Cd&{XrqF`v1zt$&&Pe<
zOv$=}<?)RvCn*b$ii!@F-(xXTfDGjSFNPOJW+h`>PGIg9FQmoib(;_Gy=*h~3d+=y
z`&lU#X!zL0EjdGCs#roFSS(Zdc_Sj*%LwR6Vu{A@sgv)vf8!p-A8@)0{nL3VH}=|B
zRCg%K1E^CNPHl=kaz*@pv37$a_&>KR3QmV)fuY(4(Rq4Yg(H&RHF8Ehy**j$XU_7L
z2UM6}T%f&Qxh%>!sFrJ1r^4_rzubGgxO<6n<cNNtA}{u8S#}zBE|jefJxLL~UqQM8
zDqfI^#PM^<n<-IYSmQ5Qc%%H#vl#XgtA|hpRWpj8nyIq7M;}wPoE^O_-GG)FM|vui
z;c-P6o{E|0COE*oan;0=$Ek?_<regPj=f+TX?vu&j%dSri*xwSfOl<)J#>FCnj{$i
z#r}LUQvhln1WsVnBDA2`sVHztNhEHmvSi;U#>KbV`+|}Cx;E*h{hXwubs<3+zAQQL
zdup)l4zai$`m^z)3DnC$O>?0c=IFjere+ZR+>IQV2Yl*<i`Z>NP#Uv}PwGeG&Pv;D
zP<`#4(<Wqf#5DQVQ9)F-ad8-_l~DKaGaN8LY3x^pF%`QD1u+VP>w3*7AWebppVc|n
z3dZS9Z7|0ZWjFoT<XBc0pzi%0n#7lB4H{^r+1u{TdH#OvE|3U1bLFp&Kmv-u$A7|2
zu~F`P#!>$Iy6t~i$cm5v`08%=qvf`m1B$;4iH*CmX`l8w)9u_6X26XtE~4OtFc-$Y
z_C`Hw_vg*SZCp1?L7vEaG`_9T>!-4e*B@Xhy|s2Cx4(37e;6%b%Z>PTHi0eOh+Orf
zMhe8-B^Z}zN(_uQZZ+Uw<oVwyIbsW!0N7Ucd1K2RalA4XBoWrezql<^0=bzMzsprN
zxnut|(=Tw}OyTi_#<<5**ZlC%=Dp5=9^z*<O=S^B7G=dYQ45pHTF$-3BKFirQ81+3
z%(ikMSLJSUsv8aNK?wpz^=TLsVsoc92jEIG{f|@&n^bq~kX&!v!skoYwrU798FqyE
z-%b}ooL1sCxotesT{dREWq?Vs9C1=dJ#zw-HFk=Jg<+bO{T=*M7@ZMsQWB|%rN#v`
zKmk;^nbHszdrO(mB(|+fHx_5-s8kQV)c^es378{r8>U_WdHh6%K;p7_Jo&_zwY9X5
zu$`sm*?})>A%$VWYCZ=yfW%blFG6`?oLrfF55Vu%Xu1qnanGzw?4VIG*a9yzReiy0
zy%v)a$Q&$O`X2m=gQkyAP3*(fy&w;9o`Zm`8arIW=F?=X)W;n)B8~J?`zbZ(glnOf
zwZG_<OrYOGy}OLr#PIkZKyy-{`ZYlS?H67f1Dsqt0`{C~J6R-~;Y_y&C2N7*i-9EB
z`5nM=hzBH(m4S#yi>z=y9WESju#wfZk-#1bTRbXd{eag@-`7R@buPf1X@vYh!!PD%
z@Q8XU`_!w6X0>G{Q%|h<>HJtWq_N;$WBj;HWoKH`^pjqw1VRd_5(OuBzeDbQH<7o?
zLa*>-efnyqgpTLC9^xNAKzd#dku@!SboI_IlYm~D@CV;Jf7p*ciW_w|P6b`Cv<(rY
zn!5#Eti$&pvAMilMWK-CJ(8nr|J|Ky%pUfq3u-mOZ}lIemJXE)139TGJA}dbbmFKW
zonuB%zB9hb)g@`0K;oTbtYKe`^3<|xlJh|j+*b#i#{<r-LME7Vx~ta+>0XlS^7xhh
zT-JOIeT*K9-21@X5<|51?kde)b3+&eg&$x%>dAuttkDjhd_JQ2EIJ)veVjNh^5Ty4
zdrm?OS9oT4N*6XEu$H5D`i=c&W7s;|m7lrp;k`9yY%ST7Qm}NL@H`z$ahJ)ymK4$%
z!|%{4Hnhp>6{?pC8j}@8jlwJjQ>O9Vsnd}ui!kENQ7l>Z4D>`|U4rx0rPWXfAl0U%
z#Tnk!s><>UiCUb3W{$KI&2y`#$$7x6X>!3C?_z&qZemWp&;y`<MWUPn{ba3@5XI|<
zBCMaB)^~I$7x+<8z+Zu<@UGD<+k5KAXUc3|w5OOoK2r{<p@5LbT8i|cK-hb_q7@jj
z5+VGpRxQ9}-k*|5^q)U?JH0YGvZL1M;vSf!|3YfcoRvPlW^m$kF_Jd*i(v<E`bbF~
zMOx}ao2lHD2M`39<{)phd--9=6XIt%**7W2;<r7dV90)ohr}x0<VWbe)gTx6fDRAc
z>-CLPLfBa&{!L7y_d&5_Graus+hFwZ?gN0yeHRG62JRN<9_cpVb|!yiG(v7CIg=F$
zn@s^cs0jN98H#sz&0Y*)vtTp&!dDqf8wOr#drgNN&3t_9R8+N5$xw;RGjJpcTyi^)
zmOa(VfIW60o_LT!#=ZWbLPx<i#F%2p!ZPq&@1v#<XqzlD<9c(aC21MQQO}c^wAgxk
zCWuY2M<+)k(k|?JfC~^uQ^z;#Toyh1w@^?DV+NgtUq~Ll571M(3Xz^%|8{*V9*JHF
z3`@y1B7TbwsF{?_-~`}psD$HE8)u%9CqG!L56-rxo(JziE0~537y*MF_M6#4Zy>=J
zSBG^8p9;d*tE96HirOX#I1&3Vcp>@!!e;p4R4vC2l5bvo*L+#tv{|4U>9DA3xmm7x
zOKhaEO_)YcSbM!-%Xqx0p<;)zXrEVqt!+TEya{<dwMn7c+p;0`<PjrTpob5LX^_Vu
z+r}@XAo*3PiVz5=OGy^d_`wuqMALd+zmS`=x|=|b_Pat#bHm}GRO5;*y5O?JnUMX&
z7_Rfj2v~B|$TW02WsRZOO*;c6`366~-b)$=Eu~+;A7Gxwh$Rnj0#{pnK*n=3DBa(5
zC3sqU2I{4E@0jV@aZwmokU(x<8YaWW)4V_17(JZni9+9nAi2`Ab?}jRXHaL}-#JU9
zV7#QbB$V#6I=nom(P0)o07r@ry!t2#nv>|A`j#8WW52OvTw&Xt_h6QPqgDX2&!=U6
zZx}~%vXGaLjp$*sLVG-PWV0cv$o_Ko&189)Dbjs!5E1+c+vPJ~m3j$$+MRXW<E2_N
zg6I0UnwT;R)@qpe*JUauq09{y7epCTHt=Knq{{yU$L-cJDygv#G!<A5rL1OR#`|vT
zXmd&Ln>8!;|LI;Y_aTQ42FS#HR)bBjGMiiYw;<roi+0Y@DOC0!=xrD^#Xhfyq!$tX
zX&!g{l;q{w?LU;Wl7GmzfqnXB3sP-;qmv0(7NK#7KDcHC<>0c4FS>UIA0oVo8+97P
zG=rP?dflsGf!cco;L@CRYAU%8rhM_SvBmpFE`s9*m!;P7FXDmDH=AgRkL1_lQCG+0
zMC3xJ#r7s4V5$bv@Jq$s%bwSrylWI$T6!jl0dpyrLO0cG(ccT!^)`84WPDP;t`!eS
z2GPQ`btk7^*g$8jZ)IGmRy3YF14tw-QqkJBI0EaZJnByD^bqz>M@en=bTK}(y;G2A
zVb`Qtwsp$3ZQHhO+qP}nwr$(CPuVr6zv;hYW;#YOF}M5rjo52t=6do5e;Zl7&m;_7
zq2G%%V{jh;Su-_`+#bX>O(TiJhFEwl4?PkAlQ2308pPviOizUxYqRTo4tbBwn5nLk
z!@&&+Kz*(lPg8VWsHY>IR_CIN;t4Yzn&h=ao9B@TMdr#&EcN82UGvCbss7bwJB$!g
zL&eXcRx+KNHNzjJ{my+R;Z-)^560%XX<SUq>SO8&N!sy=TX!6cT)rcraoPTMq8WGk
zvHszp;1GgT!QJf5W9jt*qY9!9a<c|g_Lr8v#0Io~L?$6~pN9YGPM%P+Q`QMuQkY-7
z?k;Q~x4#x;+#zV-xKW+7ho>iith$)TZ_XJDSWs@U3Z9!N>upR02}|TeI^0;n1R8Ib
zH8V=w&O&yxJE0i<Uq%2q{%?wY``t0$ZP2p;j4Gxb`6f;ipgsl@P81aT9nuM)to~-I
z^yFhG*L|x=rO#g~oCCE2QVPv5196PFND>p%?FK@;8abieK-smMZm_?sgHGln%|NWN
ze7DLHzbw-<xsrnm3O!(izjNVWJs8byE$}7+RZm?Rx_nP3*;Xys{j7$a-llrI)#((c
zkHl{OR%2p3SoKa=pSIt6@FW-mj-KpvH7^M+<alHV&z#JxPyV45<4Eue>ruGten{8D
z>n1??)jZq%Bvud$3zt726#l&|uZ;{>YJI%6Se6H!nlLXy8zs-SaXLK7rtP1AGB;HX
zs6C%WL2m<AfjaUAwRQ&OL;Nc(8=3T~qzB}~U4rt)23-zyz~E%F?*dZ@+U;P2?UF-t
zgptt^@og5f((WxRpYGNh3I9onrt&@NFuuY*&Ela;o7r&2R&j#7q4UuTd|jexAKwW>
z3X=I29<`rJC>i886>ZlvH1>2xA6#)6H!slm8m`+pLWm==RY~WyGLId02?U#nf&(CG
zwDDeB)Cf`za#q-xLdQLYp`l;!HuF)wS2N)V{SQZ-Q^u8v<-CDVcKm{zFX$wjK_V+p
zAeqP%i#q@=4h49R^Xb(alf(o(H!J$%rJzsT1gWWSI_Ii@ZWAdtrIZM}|0X82)PdPv
zPn?*a#ij_Xaj+#E8j*X@BCj^l<{2P{P34f|!_h?NO}PyEOE%X3EUg`*!}W#3v8kJR
zl!I58JN^=RJ{mttOFLCdp}}y}101L|%5R51$F^$)8~Ru1AAw5HJ3JcFAeIHR2zT9a
zrBEUAbUnKd*RfFn)v|JEnezN<GwXWE_}P+9aof!^!d%;VW|=7r(_+-Q;j)^5MR4h~
zKbJaUMw~oDsrIs#9pt~_o@f*V6rz<akC@qi<Y3VOHMxSuPtn%q)d~!rYo&et`9jHV
zx(`6V2sF4?rp$nglJV@98yjIdGHO`=D5;I{m^7%dzw^3vz`HdLr*n`x_>fV_&5{sB
zqK~Dj_J^a2Zq%x0x!>Xm41*~{Qr=`uHO2-Qq(+Vqa6RiURNA1HMQ^~@o+Z63ww{J9
zQFa}f3lU1`g)Qes$s!#zd8z&#Iuy6NfDt9oN2EqO=lapK+BvlprH8~ey%{m_?Q4b+
zgNe=~T+}~b!mJe<`AgRGy_ug^r7(4-W|DlBfv|WD^#kz!(Honct!frS`OMZ9_#=rY
zBi(_puQsRtR3PBK0~J}d##`Wz`UUuS@H{1ah);*^L<6)HTPbk|-e#<3+HL_`xOY2S
zmuEg(2pXnuZ94Y~#vIX42@wM~!U9WZ=5AaszYKencKa}iA#Rs~6{0K><<J0_Ti))H
zA5C=HyMG*4#8rgmq128juxqPD@V>9>>7JQ7IEo{24(O2=(8o6FoA&j)Y9_{T^Cfd;
zKQCWdmhw$Y?BKmInHj2#fQ7lqOw{P0YnG8*&}#ws4VYCpyZkg3H~-p@&5Dkv;U|o&
zM>^k&@#WnJL|iU(6n;0lo%L*DaXYy4fuH3Ea&GpE*Oz-G_PPM;BBwBqL^y>_UzQHw
z5gi)3pa&)D;u-_lBI}>4h%cxMtaRF>7JSpv4B;<z?85rI*a9D=aFX1HzOZF&rU)|h
z8rhbr64ve~4d^>43Ju;!*{iWy)DeM`zi3YO4=Xk>X%Fb-Ou0owgAcBb5%-**B<=l#
zcGmy+x2x&F+SHH)KO4JS9Scv{x()m-^}3D?5xbc!?3#WgW+;`rc_bDXKd&G3@5Nzh
zhTlhea$}B0z<oU>^`(ewPek#i74*U75^t$?n<tmo)H$;s_(s*omYe>PGXJFBUO05o
zrAo9dq#VpMQ1(vQSE^e1(XO$A;k@~2<C0zg>}?uRzE=HsBCo!A(uJNmFvEGE!<|jr
z$w;x{&yY>8*9M?|q+Os44BC%&fP5Prp`gR6ZhLu2&1u2hU6?jx3*sftD}AebcxV~G
z)B%&2CgiEUP>Qg|_g4V1d(O7*HLPkv#_6Ar=-<R;{mh^oi23~X;9^(_&KTDlilw{u
z9&QBu@inQf<fQU7TPt32ZZ06?i;hL(v`nnL*o~eiAk8eNk~600v4K#a^}@J)%bPok
zEn@bfqpaYEpys*`Snhh${DVL$mI&C>f-n9wrY48{lK_v%B&w{`yMmU-aL{Tk2rj=x
zLGeq%rlTH<M=r?ixFfpb7G3N}>^qX*ZPAd^p*X9*hW1{ELH-(N1Y`&s_q<6JwVfJ*
zbN_}nrecaJ3Iu(n#oQ`?M>iIzV-iYff4AOkho1_(YULm0W8cTO(!-|TRPw;L6gd~8
z;<@Y6aNz`7ptN_tT~a_rb?qfzK5uY#nTX{-et5nfG&;mDrE7HgO1#7K3%rI8gxHX_
z@da3Lh}AIi5QddXJM3Ccm6R=H2y@)x_(!_G@&!cuS%%UK#s(Pfv~CMa;LS3rXcS3j
zw=3Cma-?c05|+7tJ;M!L$p{q!4R}2ZGG=#W=hFMlZqQqJBY^+(ir<l-4-5g&8}+V>
z=(9^MGQ}3<kuh1+KfTB-RsiTLESVpgo-_`Mkj%jI(Y3L@EA(O|>(AFSQ2vi>?HL>)
z=dxM}6xh(t>b<;vLBw9%)i>8Mh2Ko~0$f?eB)*#};DT9%9Jqm_t3J1{DC$tIqr?VL
zI8xr|4J;&n{5?T!YVInF+g5R$a>hy{Sf0@&krd92aa1j+tCBCOgNOVo?-;g*TUJ1G
z4gCTnlL$~O%$%~SgEe++kZxLuuRfA&Y9Hm$x!kU&Gyr9rGe@wby1jeNa(P=h^GQ(x
z^O?kY26mOta0Un1);h^9xXRayP4`$@j8#sNq&WN|?^xa~qNSBG?vaa#+G~Wra_S#e
z9U;Q!N5Ikts~)%3)9)COokM1q4ihsM!FFKs+)~>dA{0yrd5j<ts*i&{%(8yoe;+VL
zpXWTb-zlGI$3vZv&G+)z!j@<{A!e#}M&u|-50Cf-{sG!F)s8lTr(p%OuWP$xCSS>w
zajDpB7)TGxe=_vnSo=6$9nT(JkXE2vpqcpx4K+r-r`d!Usp602)Pv$A1|MQmS4+td
zFcqOTJu1mXdUh%%!*bMf4A(lE9vDB>K!TYlFR3x6ByJLPs9$yV5g9Bnz45OD!P#U$
ziJ%Tp;D`q*!ylR6LR0@yw-A4ak$)rx<U0=$7nHiI5S<DN6pC7lOO!Ev#840FJ6JbU
zc-+A-SPILtf$<m}M1HweFqYlKutsMq<9t=m!g$vX7BcORBDj~X_atyquci5tDuD7{
zQ@rj@hX8V;R-EuA#<@+B=Zf4GNpQ-&34!9kQ47eYG=6OQ*S$U`8XQ<G@*)7h_tG)B
zJ~4PjiU$@-S+v8V4&}T)TLk!2i_&ImrzqAK2};)g+t20M2Zw{bdJa?N(#{U_E15Sl
z!;xSb7Z&{%<a7C1E;o9Rtns1H)o1dM6l+E472AWy2HE#jym|?bh)`WlE|CRnA+e||
zyIyx-z7hDAg(aB1p$<XT%Su?`GL`BvvbAAo?6)dAazaA@vY`NQ=2%FSkm>`{%MLG=
zk;K=iiu{deci$b4H*Iq1f^YV3W(zMPrOX3>mqR_TU9vHWuY>)3lN^p2$NIc)9jL0~
zDb7zWPqywtRG*Iv(w>V*T)QBcx-L-GQ5%EUJg3tn_?60bFf}UXSlFk$f0szON04T*
zc%e<tYTe1%opDG|1ri6KAu;$eFzQA?&i{13h6c2i*;nT1t;|wl>_s?%yY;@Ci~8+*
zjzHK<-h>-5KIMNOtrth;r|yqIfG9s~%N)U8=A%S4zH=d+4k#7-8ohz%e2(alQycnE
zbl$P!uvOIXl~wZ^zaRbpCnS~hg`FUEnuryJqb8<i0O`d2y4~Y|65+NF$?lw+sdOA=
z&i&%V+Tuo`HxhZL_)fU9IA^13v0a8@Rkqu_Lx(g^A@Hpr#j@E-_+&|Ta-)iH@L7<a
zq_o=OUvU!UT>rI9vj9L4`RJcM=Cj!-p8r=1<hejBXi?qbEXR=}HYAMf4bY^5`nIv#
zNdZjFsyq)3cJ5<}fM{@J#K(($%RxfE2c>yFW65<~Fs9$}OTcG`=sz^>`>3cXTyh>+
zQ(>k)6GSvfc*EFs0SbziZwbY8o`zZg_r==DtQt~%pSHIK3#i>T&L(joEl{{JGa-Qg
z`nqMx+TWh}C^^$Hk)3a7;UqjZ#>lL(eia2t8cGkOEKl=*b6LR?=cLTci+<ImY=X7p
zVkZ*vp4I$P7u~7d(P=C(0ssHSlsD)ZC%_lqtw|9Qzmm(BX>GjPkOCEzs>+pY<J4T}
zanqxiBY!Dm)-e-E<z&qqo}l7>j4J02p_ztQXMNRv5ge<xjG%xrzV7<JyHN{9_$TN-
zXV&-qM^EOG8w^`kpdyDUV*6r8xq${`vabe5W0MxSmhc3@K)0RP*Sk%#=HPPmUwZ9d
zS4A$DF*XAgI-JwWn$%Y2Ve$$sgX;+m+Meo6tY!R9p7$~)@R(<0%SghC8HF|2pgBz0
z>+9n##?hKJniq%vo}n11rj8;|sp!i~?V+4wd4#C5MIjz<$2&5OfBj~d6)u~edG{wU
z$!NIl`U2IYJ#nf5n2g;=1Yiu<_PR{nPvE%zEu;^ln#<wUBeh`#<DS>&zOe!D18Cv9
zu<Yie3s26bPofAu4U41NJhY6#wL7jif*kmzkpyx$4(YU}bTwIO<|yz_v(6fL2@;MU
zuSx&J=LhCGvcfZTwpLwjyz{SBZIz0#Yv0kjAa($%UjE+DuzvUH$;=!$P_oDy`^&r4
z&bSzcNBIxbnTSjNUvNzP!&_2W>|4_HyQ)rjL%UVYFhR9`NWly^6OWCN&jPGVH@l-7
zhYF_(R+c-<wg(axkVQ1bVTx3C%`dJo)I&lxO#j4Kn-A_&v7j078XLQbT0E$~t=tBy
zf~xDv!j&`62ui8Ys^HY`{5K)?nnG&~lNqyz2408ow3RC-{xMVLTvz84RFOQ3vHkI*
z>rq6>Y>Z)^ExZhj0O!-UU}@C8?68z$8FkCKz8%0y?;5UmFmL+IY=0z~&d=O)pF8bn
zihP7B({!?#!TqES6&H86^i)!rUywY`<Lj*A5&one>NQxFjM|Q%<RLCDf<kT=oM83w
zOrXgea%%GDQ$DYngYAVAeS_p_mQi<DCrC8mb#XGHbT5|260FdDE<dvN^BIrBEm*N{
z1<4Evr181Rx`K*%-j>wga&w>9C$l13j;q~a@n4{MYH3nN1>Ep(Z84*z&7lvz@0{pY
zVhb2u#krj`d3pe9^w@6+aSxKDkp`2F%`r=8N}hI`q*!!FToqOR-7rdde;nT@O)`Y2
zSN0A<;d787H30XxZTL7?412*Nbn$9D_hXOu<41slv^}cv=EBoS4jn-LGseo!2{_=l
zG8<+pDL78J<8Grh2K!j(R1?KF*@T4<=rl3wLq*wj?GEHrc(({<gKLQ2-d|y!wQ7Pn
zIW0{=bPu1B@|U(#J=y>}1;9>m)I%8%tKLjb3y^OwNu$(r5tM3UrM-O`Jc4So&PifO
zJpU+9kK%7zIvgR7`2dAbeE_k>*9LBjywznQpxDt<5EUvSPLdd(7L5fQdIW?HO^e2J
znTfHO{9&W;>V%)w#vhfs*nKS^Lrm1xf>kw=1t$1B!OSoXoxOV59`4i@v#gxoR~Z%X
z)m}kvC6IWLZ;)(jp_WNuX9W~fP7KUuTj0X;LG<4i;Hs&7E=(U{vSi`Eh|374htU@q
zz=sH6`xI@o0#gD)_1<N?g9%K1jFt`AjW&?T8W`ArP>w7%A%5j#*biex)uFn3Bjb^4
z_qr5Fzq$z{Z9HU_y&Aj#fhy`OH8fvoF#_=52{>Tv0Patt_JJ1XEk+#uq^MxNk1-=y
z_i$?Jmpyfz+igV?eYmJYJv%gL`SI2P6H(B=)-y4aH}M}|q4YWn6{m`7C(}95bSZZi
zGy|@TF%HoIeKvJ4v)3*q#RIzGsjYvG26a*UH9CU|1G4j=wBV))Mv0^Ub{HJoJ+-cD
zDPjHnwcn(7@u_^wP)eaJFDvC^mc}W!RsS_*DM@^T*9KW=|ISN<AKi`1J0`P2V4<q-
z7Zh)#QUgNw{dVeo+MiqydLqYZu&L=>rrxX}N`VUabi&&?JHxny8&dG1_A1@8fJkm@
ztu!VzzY^dV2;<dj3l*MFz-2E45iNbPMXQobvj%NIel^S%b5b`KL$`Z#@+rPfq`PAB
zwJAkgM;|%?g&v~{s@0s4Z8}+?AgZ5a!e#hZ&#E%^wdHinPRdPGH}nET==s_qu-eo6
z=E7%75@&6J8&E__7+*#cc0N<=3m`kI{#yWLCT$%FB>CKdGU!Zr#x@M|Sdq4w44$y(
z>g*tUF`+)Kn^@QlU(!}J>8lPB|CEtv3@_liEfd^mm<NGVC1JyNoX`c~G}N2jAD<6e
z|EnCgO6f=G$mj8;<e+hsP_}{aWeH0B-}V*RIiED0TA{vrF_lsznxKSvtHr0fX&{MB
zFnF=W8FQ&U!m+gyL3ez(<hjwo;LyE;nLTu!=KmLN0kzWqHblX5_>3@kEh}6EGU)v*
z#FW#WlgHpcx5;4Xg9JwBov<s(5SZxNZg<Z?T3Y<SvluRv{prasnjM%NHw*|9Ps8%k
zwz9m-_h2XK4MZ?nI0>1G;q}1JDYh!4%T&37Q->qQjdX>g2xwBPyRBC62iXj-{sOc&
z?%LKsX&5Lfj!;l~-8K~$XLRYRz|7_N+mdOy12u53Qo~AVea<&)KUv5{9N!K%ON$!E
zi)>DD6;%#?hZ|4B@2mxi{3X(KzrrO(6C*d;0xr_qdcO1YMKtm(GYm#JFxY};-wk@3
zTm|^RCb+5}*<@~q%9uBx09KSO(&>_P{=B7=1A$=V0ZWlkR{<hF+P@rSRZH{g;7V2Z
zC~}3Pw)*Lj$F$w-*;aliv}Mq9j>`u$U397&Yl2M24D8sDfB=N7St4#;ju;d&GeZ_2
z1=ZKQ-(<iF%vOI8C1+wy^!I_NdxiBguW&k{(kURyO#<=pSN`At<Bo{7e2<%hB5R*K
zw8PboKOT6KQOpZ$l<hz#TvtEC47{h_-rBr_-+_tv3boR2PZzwP%iC;*>hCfTAGL5v
z%b~?TacIJ7AYsw{Bn#-gL7SSH;sL9!ss7g(<qKq~l6??_mnMp)g&qFTaThxK3Y4Xj
zV0$$W^~zWu=^FQy0kn2MHOpWuQWe>i2yJquunNJD`xOCz4a5+8Kl=-%do@QzI8Q)g
zmNa!g`z|6mgFmVKuf4CsI-mH+m?&uobrR)0f$6pYD=l_uPnm=Gd)~_>^pVvPbi)HG
zLXNf|q#xm$H*2_D<WqqScMA1ER}k={_2j;ov@o<1r<75dCF+{EiORUk$8yRRoYu=0
zNHUT~am3d_b(P)y_t_~ygNmGhl^LI-JKTI&#7}_E=IHOJaNV?v2_A^oHazgz;=85~
z+50Y&YT2lWL@z(QEi3rULv-*C;Qy6Bkc>l!E(#LjUzk<g5iM>Bt!}YBIxeoDYFB8{
zKy1}VGa(qlkE*`hUfKS~164}k1?>{t6bgYTC^#r1w~L;s&j9}0>41K$>{9sLfTkxU
zk+APVMsKNumlAWakte}8&gSc~ww#|Ng5&mAp;0pE`r^{fc2f(3@F`pW{@y>r%dyP7
zS`c9ZH%c>wu<cNpJ|F?*(-B?d=lU_l@ahu{oSelzGwV#L)O+4x-Jv@|>N5uxK-ytM
zv(EC1VdI+Q4Pi0)!FUbxX%f0yDFuB4hPNHn;)uL)Z*k2pbK6CnlwjDwHgho{S&88^
zcJb_iY-pSf_Bw3T?V5woc->R^xEh~=5R>&z!Ber?j7#~AG=@~oMXsmvb)H3gA-0uo
zvt*MWwCy!HHimV#%nu2~z1@M<s&t(m3rf)@x^+oH2%gqbl!d0fu}KL&jI9c8g*Bnd
zm2Y7Xe1%J$l_d)M+9{kJgX0p_Ib<Y<onZyuQebO_em1Z;dmtOmLtd*D*E-WZ=Dq==
zzWPg`U_>PyL+dFpFiM^U6yr%Maz4x#O9zumNZP0MizzsZtkgzk&{M7`qVfRkPxX?u
z+ny3x2RW3fM~Uh7@vJ-pb4Q`kQ3fXUwaZ9wk`Ou|B{|wV+_Q4-SVtu$9*oOQC1cEO
zXItUm*UYAu+NgHR@)sj1>+M9T-};qYo4rI95OZ^9R3J*f9_Hr;`g7G@9vf_n{SFP7
z7s2)7N1Iq}?j)18kALaQ%EpaTW~cYRJnw(44#_2>QfvJ`x60E3#9~m?-qt92!E3XT
z^|4h086(Ub7~5FKl46BD*SPzrw&&+@v-ddx!qZWDCzV;+*$}{+LVIT|0T-zT+C~*u
zKknvEx@Y`x4oq33jp0R6jE7m|ArmL10sK3yeZ@~s#@R`J2~<>=%Ch+Ezmx=4Cv-3a
z_#>(Ru?$8S2=bta<TFYcsBfLS3?{aUJ>GgmYAa_=QxbarRf#*To<5|Z!b|TSR1B*_
zOY3;+E0Rjj_@!3b_&BdY2zHP_@3oe~T_sC_E+?j&>nAyEbBB<ND^NHG#7+N8f?j}m
zm%)G;^%xyYIvwW|<~esa=%F?4<L|+8HdIRbP6_3WSh$U=8vo-F{ADsc)|L|QI!b8v
zS0^x~B+2ilo*ZRAvYHAynTkCAvpB`P_TY{4<}XO#FvHNR8w~qqLfEeGEG>6~8y!Wt
zS~{3$)jPG;&LPjXh({QKc{vJDZAq(o<SXyNTM8d=(`Dflj3}^rC&IMgPfVOW0Hw5e
zoNY|m`fTMkcHKWn(Q!;}3ce&T8^8yj1l=5KhT{HhN9^z7tH44Pq3%^*h1{ymKuJVw
z!Ld6$d%mruK@1m$45T<a)Kn776ka!;1qx60M=+r~#9Y@RY!JB~^t7+D%{ZJ`5<7x}
z*cbL671-$KJ+)$;e_q$gs$S=&)wqBSV)Ck^a$B5B1d$^r0qLpGq)mx4j;~ZakXi#c
zdmT7n`DjXa<Orem<v8M!G|3}MUn0tw|6Bh@s=7@`%J})TsY#28BUl^B3Pw=jd{+t9
zKj)-RL2<&DXzgH5Jn~`Wi%tliT@gLPY|g_0u2A~viID413?#y!roD0yX_GZG=k(T$
zW6>Dp{CCCK#j`sEq8x7VXg9Y!@C_>gLUSSu-a~oE?WbJ#Ifw<!b_Al@4?#NHPR(%{
zVx4Nc%EzG^L(Qo#!jahpa2)lUEd4|(7HtQcHz*vY9FcEHW9sc+_`?j@v{3IKs^MX<
zt=4$hz~&l*7ZS2@CqQ&%>t%fmCX+kU%QfZI05YdJp|}J&-w2R>{3qvVWWkYNKPyf4
z0*=;t>Z1j_*Tq#sb~o;wVa@HG$r-zycJ(L_?<8xq^=as{#zmHAf4KIYsA(SVXRA@<
z`EV78BBO+mPA^cFFuP&Gwv8KZV28UJlsVGs)i;Q(Eac@WD$44GK7GiRa%%^r432`l
z9mRmgiX=cjW{dN7#mJUZ(Dk`@93Q?OdMB;t8SaTj28g*O{I)w4<OMdjExqT|0TXR~
zcQH>i6Ef*HpccZy5l{iVXm=O-52i@prCrRc(%*K5l4&mw85B%%M(hbOYLagV`E9xn
zIa4~8H<ij&Or|LQ9B(uiK|@@8^q{&yn-FM{$RfEVM4(-e9+u8?f*fg1#$OxmyXgqp
zX&@i>Q{CKb=1glYJimdd=LO29*7FQfTKkGyNzxxv&mv^3w<S&>$oItN9H?xzs(3J)
zIlY^3$l-lB-p?NYDR~R55&C=}bNCs{Hs}r(rbCV-NVe!)$0+{L{ryO=)CKqYSw4?B
zevx1@8QmcJYViz!`|Pn|*n_+MhT^7lA60h)=Uku8)(zEo?bOaCwSuhLgv4AYYLj6D
zag}gzl^fmTj%5xlK<|D>;6IMAs|g~<vP=Dv)BJE1Cw_C~;?DL?TLlpkQlFr=^Sx_%
z7fbu?3j&!PrGYMT@epv#hHW>^*c@CJwP{}b!NZ+K9lnY6sbBfd@>~d*PXw7Yhu~f<
zGU%7d$^%6$fgc>hF5!xlwE<XGWtJO29q|iSxu5_+R9RcI%$8@D6O-vfN~1oHKB0;)
zpAs|TY)9+psbB@k&sN_>Ej=Y~aOAUPznvSRdr>#nZ&#w%X1*%W5q@$_cO{#M$c_S9
z$u}d-l=W@gyqJiY-tz9QAS8hku8hZmibE;ciI<NsR5rmVG2*fz-hiVl3P{LmWq=18
zJ}<GyNSUp4y&c5^SQ|SmJ`FU@Vi+>_NYrCme_LW}&}*ss2vZ+FDP!)Y*%yh6;LwD;
z<(5kn$zXWA6#mLdv6DLMb8&Gclhsg|A(CQO%l7YIKsn*#<!Hj<#z)W7p5mrC@f4v1
z+jTAk!RSHF)%}nhXD0B8gegl;n%)EbcYDAQ8Xu+A9AJXh!LHJD(`V3`^xyPk={n`(
zWx|-Fev71qL`D$f0Y@F&s@XX5__$OM47S?%ylGB}jLWgcz+{X2um}7Ohad3W9bxYL
zxBbFhos^!%WpL6C@bi_mFmlqTtNM|mEwgfukBGAHj2>*6jSI2;mX_W2#ZiUl#D)^c
z1yH^`bZLmLz3*@fhCfdA7u&7R(Zkwx*Um94Ah*W1)A74`>N&WUF_rwbzL9^NNd0Tz
zTwyf|+fp+T;wBtNY4SHuKK_~?w`<k<8%4ED8h431QJI}&yD7kIcRR*KJR2pFnDs+f
znFFQkUw<N#SKK0#W3ROh!z(V2Ct=sPdbLrYXzhm<A*qQ<kOseP!cchN*6yJcWm2Gr
zueEW(*>;PnVkK5Q4#nfn+CJGsYyC-ylrGL!WM~he;gQ@@V~5vxt#@06b+&IR(~Q!E
zuQl?;{RZ^=Q`lu7a>!N2#2~HSv}((&a%r5kEcfZKFp9^f0xdiKHNu%MXMl4a4h)|$
z4;8zBj%=70%7(kjSc@%7dyf&zD;eGLyM0w7);VBQs8$lx+H6NETyvm#D}8h!pmrrV
z4zIFEc~Eb!+N9J%w;(`Xl-7AW?@62VRg!|xzjs9aJf>hcC1HLes3y+{7^j0WczoB9
zZe08Hj4?nx+%+;&$xX3thq0+>j<2n>LQ|5lKCQeD%)vLc|DB?cnh1j_MLy+d3-gGo
zG<qP=Eo_%2GKKooR!`5DbZjz7m-zvRP4FBz!k3oFNYh;(8=Oj>ZTpeI`)T&WaINqP
zT_7*6{k+V~siffvWGj**w&40ZAOM4z@ysMVRPW-j{k?5~Rpm4w5c9~`x8=VGfvCh+
z(=iVd;L0BwK8twdYVxY?F6KMqHdHu0R|*cL{7bh-Hgw%RmJuQHQE2-EfgjS7vBEj>
zIHFjgz&YP!u;-J*Y8SU{!dWoaeX#Eoibw7Qw(6*a+W?Wr_$QbZ*0YzA)D~TC)14E(
z#`cgCvQmkr3;LI}rwTH*z4pf5P!WRi)BiE`tW<&h(~hjyI0qrjngCMU!<&6MQhTc%
ziza9JM1TVX&q2wG^#Nt2V{r1+If9E6c-dQ0uTi;xKYBi`T#3eOabC!OWW0(@X{w^~
zG}@)%XN7hVfOumYO;_=d&Ug%Hc{P+kGGn1GAx%Kx0?954t2INnEBP@x?u!=T273h%
zo90<oNu~Gffz(=5lwUhYOrt0&y+E}%Ca9y4l>HY-9~snl=fhd$H7k3wi=|$}I|{>B
z*AscUhK`4j%w+N;pR+PZ;2mV18mgCHvSo&gBKs>^S9BQAaxet4r63QCi2a&BKVN+Z
z`RuPjbx@qXUUMefc0l_09Yv0C*8$Nv0R*bGW35D1;rema4k@W}e2=&85Aq;;fD<=f
ztr#M}{`ZvP(q=FH+e<Q!7$BX1Ao60dd#8cnPbIP@lH|8BqyScUk-ICJ)k)ch(@e${
zW`6}lCIXl}5f!g^ItybRj#q-Sogt4H?%IS<X#H&Xf28pLnrBr|D(djs$e3*XqM^SR
zZ^FoYr_4kUe*MkkiP(4wR6uFT)ly902J^5Q*`ZJt<^8~?ptB}xGrU4S%;2L*Sw=Z?
z`_4kcSZ<vmUXeK(t;i$Un`kK-!?klY%~4>tY_MHM5sGK9z~mj-nai{J9e$Jr*Cur_
z0tKR|ZC;hfe#r%zoF)=h$%*H~1e&CYY=6DTD)pvO*I}X;JUP09|MUu}NzThLr^#g0
zW#}VWi(xA#%xU+R!0Hqh9Be@PLg?s<fiS=prFu2tWBF6reGdOUrVtd2kSd1pHG;y@
z6K6VM*Jr}H!h=)FBLPJDEVae>Q-k-@au&m>0ISb%5ev~Q8~lK~v4JEj_-ts2$3qMk
z`|h{{UlgUp)3v4S&~;?I!}j?>n$rF5h7eSv8>KqI334P>l@3Lfy4mes8u0g!aNB%c
zwL-bQL}O)z&E#quyBzBRK0!Ff#Rx!^$*NSjGNbo-bDcIj=Y2eFV&cb&ZylFivZf#9
zlEr&RixMSpn%ZwbXaCV205W)06{~Jo+7S6$?82p(C_#37&d1CP`Ckw9HlxNYe@qiW
z9!L=V%vEE|NJ~nhHE78Xz%Z?I!>9x56y}dqqnnBJMoe+vdBu@hbxP!Yd1L(4o>8P2
z<G4VGola7;T8-_>=&&;T^&h@tvYUhPm8qnsLz3@YlMf3kTLG_G4VuQg9jFwLx>9{9
zp^n-A&S~rNBQ?cI{%mYs%v~I02mg1B;R_{{Kf>HfEAhj!q8A^5qX@L)c@0Xcn7@>d
z+WRZ(Cw82ureynqRXGn@atii*g$L5P=f|Hdl$E@yg%@rWLD(_~DzbSDu8-Aj6KcNp
zPkPr0L^u{8sSy=%sL`o|bi1ze@xdT*WdDA4*m01;i0jnmdoZAIc6M|yb!j55hysE0
z!^?ws-y3c<nK4>G$ueDExb4ixWzSr31cR>(xGUlE3e&Rs7W!hYQr?{bl_3&2b9>e3
zRdun-MSC5AKWwyUdJ=k0NHHaj_(+FzFk2Zb7wPy_hEJjVWFVKc3MNZB$xbI_r(Hl4
z%eh<9$Wr8uT=V@I6)G__EL}2h{xGqoGA1+LO;uy35uDVRMUCSA6`=#)%M=_%!P|X#
z*2MmN2CS3}eU#4y;WxCqz{6x_WUw_1k<Awl*!Dx$?_nK5Bl|FTEkVwhCb_LX+c7O$
zTCPsp`^P^}5gti<(<d9%<5MmD$0p$?#@6e-1w?S1zqa_Ngr)@g-x5O<J3Ak72Xlx(
zWyJmsWE?;SQ8qa7gRyUm`olwy+WCI;^>3MVi_f{Hf-oF1^SAP89Nent#?`7jptr#I
ziI`-n5-NF_V<d=R8XN)9$=m?^Z06Jy>cl<ZzeI5qcIu~1VO!3;-Pt4y@BXN0bX*nQ
z-rCkU=+PIs%Zk@1SS2WQsGpS}=%qsIOyL5!f^lFIABe3+PZkSiP2%|ayqH2dhT&J%
z&*sRvz-2WiKR%Z7>}B!y8DzY)deMvf_ACT?I%%OH89J@~))|bX8B65t&_UKRa2(EO
zWfz=B%;fkxQJ$=U3>dB1pq3D3{*IvlCSZ`g%pE6jNm`g#0HbRUF|DLn4vc3Pekx78
z%NRDHnYg;+jac>6F18@|{hp<~E=HjP-$b`3p_OB^RGl`14W-=d<N(*XUqP)!tO)BC
z+y!)HDryn2iDu6gbrGhU-1}FK$$G*&^jQoHeYtZ)a})a+13cNl1-mg~5PSz2J*Qqe
z_#dZ^tP<*@efcZd=v=ZUg45cA70DwD`W{%Opb5o>v~uv}<^jfzCMtIdg{G9APtxqq
z!(^TE7lgzj`E-T^RH*xh*XZ08pAKgbc$q3qv<H`k%(tolXW73qYfJ{MmyLT<i1PeN
zziy^BE$L9-?l}*&aeG$fmX5G-m~&gs5>$Hg8~xr`2OL9`$W^Bk9aiOWRTU1D!)pVV
zy(JX!Nf#q6;}LeA+i?o`A~c&(q9@(Uco?K6N?=F{$vAjh@Bn%lgmJ?I4-{Q@x21F>
z6o6K|%Y=^+xf5BjJHAL;D&Atj?qeX3N{h_s146Ay;}n}<37I_l^BQ5r&IZRQQtwTy
z&aHP{L8>z!on5TAH_BP8FLK!OKPo&opw<rYF6ha!d!k&4uXsVTO6$6?XvC4PP%-HG
z*v>86qSIPrfkqX(z9Preb+=D&)^B+glEt#<o-aj*xvBQj=l!m(Zsc;BinD~$9O^j%
z1B)o9{Cu3vm^=g+`8v})w5ML86tEMIua>iBWl2<%#Vv9nWBojoU=Al4ligNZ!je$3
z1)!8Gs*%)9=CTwGaH!7H!vovJrSs%JSEH~<i4sW-UiD8j7a>PcD$GY&7+{7tI&}qz
zOlw8YCE|W;4o8^SL{!{UoyvSr(<ARqsPg^GEqy&CXSlQSK?qs0d(jCbFH`<h3fp2H
znaSd)q1uh*E@jAcnE_7E;LSSrLk7cfJ`uXPZlRwI-W_b$m)P=pUvDL;o~%Gc(z2FR
zx=Pk&As5X#6H_>4Iradw>RbtRMK$PvHr^(Oha(V$H>h2m4LyvG``50WGPJ^_`beEy
z|AzpJ>%W%PEy*1&(FBN*IoKk^c8ZZWV#6RN3v%%J$Y1-lm&i0;)uz3SE;N4DU_;xV
zjJDdHl~`y}h%oJv+Wd3E=|u1ERk(v@J+?lTE2L72KaP6$6;7_SL(8BI1|(UlY`z;%
zm8`8qORMSCcU6&QyymgD?x8?=j8Z*Lo^d2;#m8NjoGaJW{x4E{!Sr^UN9O*vT!nL+
z6SS!Lu(OnqAHaTE)d+W$jaxzKTw(8wpmhgn*@komqBMy)p|$!0qqiaTSp*Lq2ya1^
zM)q(C&kw|XTgjGDw-uPp@EKR&BkWHAEXjUSL%22fyxUP`nDIEJM@SJLv|z6TEJdd+
zVScJ>5dwv+kf}w?+(EQ3iu>qc(R3kx5hOntLo~R9E9<yHkPWhcoj%2g=Zcy~O>P7l
zqB6oG`xfZp_WdF@2uwxa44*UUm8D;%l=gtxc_;V2ljTzqV6Y^~CLL^G9+4GC_W8Sn
zY*U3Nksn&?=y($kj3<9)d;nq*J_Zc)rY11ZcGblMrBGzqe5CVyntst=$Uj5o%ZX_{
zFEMc_s(S$02xp7VyZrX^Lt&*qG71gWIop4G^OC``o$<Pi-!8RJ7S{4%!bLz?Y|%I+
zzie%#EgjyTRQ@s;^J+eF?*&z1XKt^8j-`4rrcvV_YQGcWl|w{*XQt|e=0ufH3B@T2
zYmCj?`lkpiXr#8cSEy$tcEs)aJwJLtAow!W#{FSxej}+4Mo+GC=K(6A2diU^pl0eq
zJ(s}X=S`z?=3TdFx|xjwE`2hLJ@xHGgviM^LQ9D#$3Y{Qm$ttXJwky3!4&iprt1kD
zNWbQtZM-(d<0sPDaSv0!d?r3J`lBU31Y3dqSBg|BQU7Nn{LLMaBS<=OG03pEV1R-+
zp|d#;Es~B%EqAf&W=*UHw7KzVtpnftH4xo=m#ut>D{~Vc*Ae$~Dk*>vrT?-U*yuRx
z2-axq8L6&trk>y(u~xeH%ijHdmRb|^3khNxK;}euSiUVa?V6(nXlAlm`<5YMGh?CC
zJDN?J-2pWyhU+D__%FwP;ERW*RU-y)3Azwj2>fJcxYN?_Wwm&3-zuQmWOqC7rC>rz
z$|~?qaYNiiA3>0|@86iJIH<6zGnM!bUS)BKV@*euh&f!om7`$I4jwu3rO|%0{!UtG
zpU0xt9D7eTx5Lckxqg38{ha@Rk*y&X7ccqA*QhvFFqV+H%w0o&r$EUlL%tSxQ1y?0
z`ItI#_0oI|b0{(^w0Pj%`8Z+~Io>;4Rm2`>(}{zqx1l>)+NftuCpVmN31#w2F#ePH
zt^+eenLjqOw@aYFjeM>5g5QAp9yH<14rm62viNT~?~s`jwf`cxVIJYg={*h!WxjHP
zctvDyuq2CMYowuU2-C{ZFhhaew8nBCK`5HW1d($W;OKnAa0Vy08K%__=M~{B4EN1V
z-vJGyzRV{9R#Qoi9#js1@M{!toGbUBA=8=-D;Yp8>VyJURsE@y_n-42?Z|ds^{8C6
zm;juo;C2oBMF~COH-Jy&mN8G1#UZ@pO`IubCKNjbD*xIMa)V<oMMru-r5&WD$1!q`
zDTYA^(#bGlKc#GS3oekNOjXMd-x0JPyi`#iN;?%#x-2UPvFNNroLfqwyc;Z@S8EPp
z2Wt$Dx>++>;+fws=s8EjCl~&jl~uidw3OkBntDG1_aV9}W_(>gOqgy&Fwj~vK72#9
z_#Xc_P?rsv4F2r~QTG|G{ulN(&Ck*ZBCpy}`44$GTk;pq^_S*G*UtXdi7$Hi>VO!N
z5OW?^tS0XG9!ybNFN{}WV~jHXoI!>rDtcI+Pum<}t260!s`qZZ5sI$Usw{b;H{q)8
z#OFrsm_64cL4yHzpu|axHg<GB;p{I6Se9zMpF02<2T$JJ-)`l%^;r-d9MF9YdVUr<
zQU&v5cXx)I<G-WBEo9fL7pa0r>h<g=HlS9|%*;!^tR%W4=aZt`owwVVfH2!T#g#74
ziHxJy)&vQ90cnNrSK4`z4TpnsI`{J~^a7m<d173{uQf~2j4%RA28FgHmuMWQjZvgW
zs^5e2M^wj@QkZyItlW`epEvuYARh4Do?0&z&^Vxr`u<7E*oyqgV!kCXz9^={wXoa_
zztaV*NC6e%wV!B*V|aBp!bYVjdV*#3@VY4ys`r$RrM<g#M%YJLqIkcSTmZKk=dj%{
zRP#&Lf%A*4C6rV1f7xreBYv``1RqVNI4Bv*?-bP4{0ec$#<MYoZ*wLxIp<~l{~#m>
zRFEmu?v!x)y#6T*1i`?((XnJ}$uHaA=<$d9Vcz|g?#0TS8?)XQI|v7y_Ay;VcRZYQ
zBhz6)-OO(dNd8Ex*?=Yi{7g4X!h(c20JDTcCu~xW-?hXWhIHb&n5)T|!ub(izV|o4
zk_S$xEj>^du(>8ounf7-Ng7vAcP@Kw0@GxdB=0#FMU7$yM*N_25eFlbo?rye?-qoa
zR@2y->t1g&;)$==eoJ~-kTRVhB(V`Ho(P6O%P`niPauOI3f3VsLAcBA0)jGFKYf*q
z1j(q5i}2mYo{j(UD)%kB%_eALMvEq%;O<f)W`W!qzj@|ZShGE7^vhQ-eH6MKVJaUk
zbp2r1PHX?db<7>SH*X+TYgaZO0yrwEJ!Cc9;6}!geSDxJF!3jU+OOi<$&(x_R0|YB
zdXNzn?laUm%_ck<i_tD7U?FItSx+V|LIAzX?^i-+zNY-(pJKQ^{;NBh*c^RSel{_^
zY0blv<Xp**j^ez@p3z}lpCI8RG&glK)2nP3dV<bO4I>$9Q*S=+Euu@~F~oJk*|1IA
zN-Qgc`GBnfY29KH!%DA8o<k1a+z$YD<I{Cigq!K*wJ&T&)Dzjpv)G!Of`vqp{=k@I
zMc?%VGy*PH0G&JnL9P2gu)WIsYDmrXyU}*bljk$_%zr(mJCZS-?nZ3v{J-3b>ZPS8
zWL<*Tl)vU3>lS|s+52WR9_*%cDkS6MQOJWw$r(g~@pFo1C+6>;_>ibs_ii>MG57vw
zxsm4cF7M#e?nyTdQxTU`N@%+&%?!j2gXq3cL}@cdyK037NVz9#zp7tPkqVP-|Eahy
zvVyy_aOk#K@aS+{F^Dwh=hur!)$ov(KpFDk>Q-C=_iJwXpVfyO3e@ncrW`AHzz3vL
zf~zkwF(-J$fW}vOo-AExjlbj~H+Lxhm!;TYenc@#T`*+8Xl^(j?$PuZd2Jl;EovGW
z9_&xu^#REq6{WymNUQ$EwV_~#tTS_$6nsJH$2VTeuyFiuE4;i&-GC8}2OB38;>8Id
zZ}_ohpl~P%<C}+plc%A<tv(|5#s##jjR$Laz^&nvx05;|BBi_gs5@3X@XyoYF$@tK
z>g>0X#vo_huPn_!o@Cycg%dhqqM9NTFmc~xP%x`0Z*2H)l=bZHTg1@{71abIG46p*
zTbhJ%$_;wiDlM_NeBau~s*;lsGBFTvc7&J=h<fu<Tkc;D2~>|b8e#*uufYB9Pra&n
z5<hOyD;0ke6z$@Hw_*Ywy^9E74i5@Ub2(?78uGt&p{h@&xxTr**n5ip_<mfHj5vGF
z#Y)aaSMZcE)Y`0B)W+}P@Up<m63wc8pXmIf^l!BMAlArx&TN%{*>!^2PyQxz)&&60
z({Bk`UR_aqhMo6%oQ|8HV54&ftB%5RWJ;70cmR*<aKs^07=<1QRMxZS2~+?y>UpXR
z?J+V4@3u92*y>q@)Ux7m!MpB^JL0FLsJ&z!R|HljT|TH+u5J^8U8|7zx<R6f?&E<P
zfm~z6iU1dlC`re4Pv@&j7w-jPhFpg@@gNnhLAZjVcEjm76*+c{56V(NXiwx%%&GoX
zdFj$B-lgy1KJu&lkwcQXmJY@agm15C>A*E_m%9z?iblvuF>k(fq=L&Bx&C^J?RErP
z+G_sXtn&d@nL)oYhW4@xEeTI4Aly)^;ggrRDG!y|$gnZ@a$i%zv<}d+$fwh10fIB)
zm&LRucUSJNjP@V}p`91y5NEX@ZN4st_@y^Dp8n<>&bv;cV4t=h^>Q|(Vb_O%^%S(s
zC(w;<>>g*wz#L^6u_G2r9D7}Mkp~Z@^q=AEKL{(#z{ILaZ@WRGm_Miox~bhp^raHR
zBmz)y$R{LYg!&^s%BFlDuLhe2p68c@9XY-2Zg98zc6bg9W4=I133_bc{(YV3mAy?T
zN0n?DbDY|U6LU@X)l3|}eP+}IK(ZCpI1MVK>C+V`y^dH?vh1%=tLjwAR7&bPe*^oQ
z3MH!o{a)xvIWY0#Yv#n=NBcFxsl=k#>WO>r>x5nG^yp$;8F#EhF9D{}{>RD6RwH{R
zrSY6wI7>j1Ni$d_*hLp+mZD&Mc7Kmhkq7lo{{^oR^)q<Vg#+09|C0piA;{VFf$joH
zVLL)+5Wy$PRTSZum$3^PPIXg23aqZ05;LR{2;tu(>NH>BNlmIf7hXDuT-*f%uBJ+-
zTmYE+A>+h;QT?b=y_5)?ujqaQ|2_AdeoBy>@+>5weOQ~v{s+HX6Ahb+s{Rn2SV_O5
zJD~TZ+^b0kxc8tgZtMRa39^?W4m}qNuY1%J05;Y?paG-OwjYK{)WK8eSb<1Ky&pA3
zWOCbX5}s^%;GU<=hSolioO9>M^$#tr&$cob8!8J`R*6}DV%fH(ryiq73NX@qO3uhb
zSz#A+OyTx27V$b-gN`q4K^tCLn73^PdlSQTMM|!OSw^aQjxyTwX6Mynw4Qbezh=oF
z+;MhC=C2er3$*m1C|<$%W*;KuGke6Pn2v4Tua`k(djfB|irBN;B%=BoRit}m;m(fv
zQ1=6fhzFiiz!CY2B6JTM{t_UkJbB3G6iJPKW}Sk|60S|CQs@T9)`*Qu@*MUzF!vqt
z(28hIwAp11CAUm)+}$X>m1#<(Y_nXkNt}kg@&hWiAQ8Z<f(zm4KVJW90GMCF!bpcc
zP^~(bT4Gsw7(mHRw^e|6_qAV-t+;ysLL8$zkbZ$T+7kOIxi3qi8hQptw+=6563Fc@
z{zyDmI27s;4M7Ru=|8k1q^fl&VFQNJ#hxBi%%>V)GSzY3r7czR%3|wZO@ljX-%HH@
zvx#l8=*0lyAM-OsT_@D&bS-B4S>W?uhbWCN*mv>W1&ExM-7O#|T$QaUDRW|kvnd8)
z^x4@It)5tF1vv!3jzwAyrk3X`=eoc;yIL#(jKzH+{*}&VfmQhgpXS)vVOqX}taq07
zhylyUOopFc5<*=(27y%+C)}OQFM#*U(nIn^m$<@xFJ;8s>T?3Yev1i?^C_@{*dvn-
zHlnLHh!-{A_BV_td8T7^egd8P7FD;kR!S&;Jt<Ou+t~QNR6Z_#?~la4u}+Q&2)mMS
z?(P_pX!!Q<Ro}8XdXBzt+3YK|@Ds-G9%limy9ypZa@cM&&5vil&I|flg>tu~J{fPX
zul9gwp|mi@;W9G;$n3ysL(bcpxs;&zy>$Rn-P$(RM+i#VFlI+V`tzuV<uV3MjmkU4
zEHGpcW*M7a#I%8+dzmjB>C|f}Pm3#+>noy>m%B}T+okz)bWn?i7PI)+v0Obf@OUsb
zpcr%J#|sa@@B<*xK^J!|rKq}ETeTRJy)6A-V{aGnX)!h%#RLmN*>y<LOD%as$t`ds
zQzf8tJSqBK@FaA_aMDv`Hcs%mO3WQ$^OV*$q!h;QvqBgURHpAV>uJO<Q*-AEBbdj*
zV+Fd-j4@_ebp${^+W!8*0x&#%HH@Qom9SSW!h?#$Ijm5MBcpY@K|Wf@eFr3~M!*tR
z7MuB_ltd-KeSKbE7rq>0{zGXWB^jR+qiRC73-&ulmP}Y#qj~Tah@-P358>@tIY0x5
z3%8T+$bivamkTIBDZRzI%2Pn9(Z<AKPt5<rP^P&$dJ4>z{zCp+WVhyH7$S}()nW*+
z!R?hhIlcVw-PrR_&I3x{>8^R0(((xcR~5i{)3E-f14^cp=3bPQQj$zQZFklO8jFku
z?A9UC4t_Ix9<=5MhL3ACWReD`Z!#AUlISS6+G<C1y(1^q#m+!kw!UQJ@;?wTGWGHg
zjv;Y$$`lEcW*=etD=Nz-(|#H3UN4BKBiDMB(++1@qAH>0x7FgVIa`_$N<bR^BhqLv
zb$_$ElU8FVgzK-Fr3f?%&#mOs-}q{4&%GYB$uVe78u;bsKJ>j5Hfp3dqO0SI<_LDJ
z`?884*)01DVN5inKrLjO&3A5TF<NMv#!yr>m&eU)-GnKeg4oZ+4$LbYq4{_`9intL
z_16M6hpJ{Vj^G}`NWLz7%Ohh0TpUwCLCQpdxr_%?5~d+8sYUp=I{{;>hqMSXeH9D6
zI8$VL7Eq_g&KowW?E;0Zyg4EpD(4$aVWL0WtkI(TWoR0T>D_q)>5E49fM2?&SOpoV
z<Bnw20%OGo9%52fO32}`6reWTD=37!x63C&v(>T<R@)oz7(P{jf*2_-XfP+mFXOeT
zUbXiS>CG{`2(ALaS*3vqA@-5rNct<n9vNRkQqE{i;lGEFzr_3HIt~!$6}u|o9rN?$
z3tNhcm9V@;k@xG`SvHcn-M}!J3(B&9aT)A|zd4uDms~|LM`kKweN;|Ec~<x5Gwcq-
zxfU;W#j#Vaq<9m{0dk*{J+F@j{&FIh9dXCUxQvr#3tbmTvCF)OfMP+B^T{UFzpVS#
zJm1Ib?U~JU!~Vc`)6mY}wn)5atXFIGMWZ!i@qIHu-+pJM+786!g`=p$(f$T-({dRU
zmkIu5xTQPG{PfisF8J$*A>Haq6=&W%cC>Ws1C#aWKW>`j<+Eq?m(9bl@_8VpquXBT
z*OXLQ<9?#mh{~sNn+(o>(3yK^+Y<ax;2gTQgq8hB`;a1g`3T7fQF-Ya7@$GrS<?b_
zX<xKox^Iru3n!Nrn8l$pq&pFNt8`=EblWPLCLf6oQ@-uXJ;jAd*;Q+cpRPV3V4h>H
zt5PUOlg9KdKtd`txm3phbezv}BzAHGaVO3%XnJQu$##md0<HdB*Y97l!y7NLYXbmT
zDK4DA0mLj`F`Cg7hi5(>AqxI4?7d@`r46>G8&-yG+qP}n5gE3XVcWKC+qP}nj*N(t
z@2;w@+T-lqr%#XWJ^Dlcgf*VE)-%VP_kCT!!U|-x5i`Y{?`8ViOFN=&*>4>LSzZbg
z5v{R6!(RCB^Q`_jSCf7YH!^E-xr@FUbX}BtH)-hkwp#1lEp$!&D_F2uAsse{9PpCk
z6(2GV%7b$u{K<sUKNi2`nPV1B8-7Cw(t9cdz)K~WaO!m|7Rwt_qBV3K^P}Dzy&VwY
z6>NIZ)o|OE@wDUyfmA9@8+i-Kf`D^BDa5-r{aicWj4;aSi4wH@;Jxb3J|24?G+!I`
z9NHi+-D%pUN1US+{4lXz2{0$P6T0IxgR<TB69@5zBk%k?d*=r&uZ#N?`je&#n@>8~
zVtNBW9`bTRN7}p|)VkOY91W^<mcS_Kef?$u6K!{r5p3N2*>eQ=<#|56U4DA`O4~{_
z9F#ve1cP&wzMs$^tWkY*>hqof;C}o!rTyV21xP1V6_#0Aq5ccHq+K;W#CUMYN-itf
zOV?VdqukGpAt`J(VLU@H%<VHc$jxG>y2-MGn`<+M5kC~(mwV68RUI57-Wn42`mGr;
zP1y^jCt=%X;AluLi=aT5^q{i{?(6R8)a<3Zwh)RZ;X7OXYT5~U6d3d8Ye*)2(c~0G
zK+!gh>C)-cv<;y~wl8%G4rRLIu+s`~vbVRa$@||O56EZIOOk7+zxv)L9pYxDmg>v-
z;+*=3F-&%KrmEUZ99dN-a_<nWLCL2q5L6MC+?d#lLx{KnJj28v)w%*!y+_rqkth}q
zVRFfpBm{orQPbK|wi{n#on`XUr>>x%dwgeOVz0E#5^YK!k5%TA?@zWCj}th!o9D{2
zSvT6RpbI82TVV(sL7d;58Y~hQbs%>I6Mv##N0a;+uH8`aYnlU7VGJ}?*<e&52!W<B
zW(12)YttNg2{RyM<1guPbkw^P1Hpcsu}mHmH%zHE$cn@INgOotz2;;ZAN{I&$uJ%L
zK?<Ex(9<pMo<aB_n_I@H*R8K;oIsEOI=21|qR_JP=UnT7_YmkiN#E*t?;0_Ik~@mc
z5#nq!f@&9~knt4b1R;%uDSguYni4M8ODo)f_ZhQvVgG)JuxSB59?tHuB6@@*-HAUb
zBvm?)q3$D*TcyD^RS{K;gA^pcUXHOpQ}n1qmrl*t$ieb(`T)6ZMrUgi0n=V?{p4zX
z@hz1>%%J}s9A0)qU+Ensr7t74NNaD?U0n!AWsLG-B=MWbH$s4nIHs={W?0&1hjDTJ
z_n&Gtw^D6cKUTUnG>=yfaT1)zGNUO|J)!PE-QS#KnPQ@HBK!kpH7zxz;6iAw<()?v
zpeaE@71%YE`$+gIa8U)%*P4e2Jn1dR*Sz+=*p@+hk4d=2YNIa2gQUWTget$_@ZdwI
zi&u3+g6*%jwm`hv6u_uScjh43FfX_{sx&v$sq2H|D_c1b=TChWFn@fHDXV}|=wq}d
zab3Sw(UfOiEoiFDCyfxFCDa~1BxN+@dzsGHvVSzm9}hC8V2}EanE=xWuof34yx@-I
zTmlSiM{`h6oZi3Vdj^->*I#X8-1eH;&?cJBP2cfcI2}L-z&ov)WrQ)`5U4UdeL)A6
zYYYo77?SgRB7LzV(}EL4O9}Wx2fzyQ)Db2TJ3#9NL(&XU;gq~pxHJe0%%UA+Ph9HM
zAO;q<3cB-ZjQRiczd}HE-~MDtYa%*Xzh&2$nVlFwamsx<Bwig|eATQ$NT<W!M!<n_
z_aXWW6_5ORP|JEF00%=`MWCfmDOupUXrGGQeX!35gJDJXs^^eQ0ocO1lgXEvj%#F^
zXx<pvMrq`WQDqlwf)UHUJ5A<v{g-CJ)7WviPObCHbuSv8#%zU`p_=TRqp}xbE?vnY
z(qb@29iqpDV*ej#d>(ktlB93mJc9Khp$)L3_c1N#U+U}MNjC=GlYzl2wN0h|%@S11
zp_nrW;BEda(3}S0GjQ!&KL#~-aAh8IdHXP!y;$aN%-~Z~q+RLeRS|a*VZ*@<fpr5T
z+h_&1Yek?KmKScYha!lmh!8F(#f>xiVv1VYc4g2s468Pboa+5V57h)-pY{5vb8r3a
zSGfy07OHij9UbUuiWpxuqWPAHo|5uc<jZRH7BE<8@^|<CI)WZu`e20@b?W)(Vxu&%
zJPA|oxVBm<8uJ6;c>zx;@tS&8QZQM`Y{4;aE-9~Wl7PQ1KBzjMV9(!L<x&qm4H$_n
z^@jKsAA!Qg2$?*eek8K|q@^pM1Bs!1C0yfXq*2iE`=~;vAG)o4|K8V?C>>3?l<Hgv
z)NZ}2NDL$`WHs(U3`{fx=z2u|I}!}TgeNnbYIXi!r%;<DabTe63^61&nq))@S~K@I
zueO%)sN2l~upqxM`Ke|YOt{dBp&E8eBCs$C;<44P)kw@WrcX18RFQ%k30wgwuQjwJ
zcQiyy&kDFaKKC<vz&&#$D2|{AWtwN-A9V-%Y!&J{T)Zl){!S$I9>Uq~1lP?ynuKOL
zDMulJd!9Ec{fyK(+k@W-D|+aNrkT3-`V}&a10RFElu|!3X!GJc-h3C_Sr6xNt85BD
zWnHbEPp;}vuVkO-0eKJIhc?`QpXV2P%AvS+v4|bW{Q0!rkxRuwN8<hQM4A1%aokz9
zBMrX-u&Q5xkKb)nbFti+{?Y8wamh%!mM`U2wOO}RaLK7LwXUxHw_=Zmv83U>57<wM
zm|pO^U#T|1Mrs73*>&K!2|-6VG*!~F_{@bUjStH55x+W=lHfS&IEQK+O%IKqt05sw
zR2J2lk`p!v+cmB`dI=5ZnO_CgK(acd2ksxhxq>q%Nrc!R7^E{0z>`NiP^Zje;vRoX
zMcbkPU1Ci73h%S769&ygT^gR7)E!HeS-feNNF)~YQNP6}6w4{}ctoqZ6(T0I!`Xz2
zZ{D7)|K?<p#kMC)_sTdUs^1C=xp&4_`ns?2`n{@;H0M$M^NoYUPiV>*U)0gAyV+z%
z9{C<soHMs0p+@*g5??E|qdQJa<hEDA5D=>H^!IPYM_7uP1k2P)T+$OCreL%N(R?6(
z3@*=FcQ5+e=9|%J8v0RCLe+INf^uyWZXy-ZfxJ!S-lvklB9>;~T?%nQh)bR|_qXX2
zcj}_ZP*9&MCO*JdzE<J^4<VXIW%Jm~OR;*(_MdnC)Qf(APkWqBGxE0MZM(T=*3V2R
z>;Thp_pf}$%EpBOVDaOOn;8MzL&|rp^0o+AM{^ECUNo1`aEEUg4iU%QzG4tw`gL+g
zhmjGs)I@nC;bd6d#d6(i-;uwNz4}j;5z%;@VPF%Nb$v79Ocfq=dT!-~z>2-3=jbnS
zw0(Bu#(`xy;kN2MooO9TFJ{4n3H{Sse&CRJv$2t~u>YmkO0CDEanH8xTZ)#ku>?Ap
z;7OB8hO?*jjDuSQ5&4>uq8*SOnor6bDI=slIA!CP%stInTSC2#L8Df8K4^Q?%A18w
zz%lr2OlqH!a@c*Q1?JbB*!8l_(l(SCR2TmG!F3R!F}g?hFjVQLYDtCApXl7WA-3s2
zhMbzk*lf;(``eA=-E2RWdE})Abkj$V{TwiWa#B;*RUwddAu85_{s#s<XSZ$i+fhOp
zOZcjxt*lb^C@rS5SIH!7ONY3lJW&7IlEl)V9HFFw@?X3+JlQiIjm)TcC!_!*B#_MS
z=&*5r&29MMzI%QumYJ7`y=2lPeF>#m5|<{_(?DWeCpRpSy&$-|k08>|CH`~^V3e5<
zFCvx5t*K1D)V=aT50AjJ>Y4TWj`e&`=1!~?;E-496$L7jW%s(PnSfaOiZl>V5mf74
z;2P*t4SwgO!Tropu%{@8Xp!H)C}eB30Lgk4+A^)$oSkxEqhHG|hD`%LH}yIs)bNgv
zJ-2#s7||Y;G}B(;0V<K2N;X=Fr~EKAb;Ln2k4!lWI1Np$VP|*V^b3#Vd(z4BE3tD<
zj$N51?r$cQikMWWO!IEQPZ-9<_}Em(OTR=GKw^zE{9IX^kJ2XBv}gkcB^r?nSV~3I
z#Z-1D_tUW>uVL;<h~{*k;S4?q^jf7$lww(Z^JGZCZ#`?<I?K;eT5XH%Ui*Lkf3<n$
zMzjr}q~~gl!4rupdh$Z#<C8BHpV1Q@f3~xy{24HJ)&0BI5%pPu%+)tp)bT@qFq`r~
zrR4V;Prim*5pYV?_BuNoK1sr3+!U@bMW@fOXijn9bApmZ&wg)#Ntlcsl|NQdv|bUe
z0B*DL5`t?K#UlL-<M(C*al2~z9#!suXzg{5+GmZW7ld&!jyy;$U)x3uqAu6a^(S(M
zZ1_>8@)K4sjZm&UI~Sq&yi<%%R=T1GDsj&zY;G3&{sowgc6)?Y)ioIRJ_elkJRpFJ
z5}tp@*y)NKMaQ3&67=)hRSkrH7NYeEUs(O>gm6r*F*UCPl2G!U{S~uSg+)vTsOFc~
z=MIo<J+qXr^V1bvMPc8^-2+}A^zJ>;4<rhsCIRWV$;FOXcj63ZzUcJApY+%!3?CL=
z!9j)9v^?oqUU^mH`H`@E2+>yD%V(oz=OnV7y?1}rc6ZV|xY(Z<-N!gCzkQ<iONNK-
zh$0H*q<4<E7TfQ%S3yi3?(=QMoiAnHq%INGHB4h(?<F|36eL@97hgk*dS8QV?b?v4
zg<*#~Kx55+N>5rS?G+g-jN5N99-sZ%%RSc*a4O)9b`87HDq-jO=JSl8EHriSUopkf
z=G<V@-i;aKHNoEej->tUL!{Avt>p_4=IJ~!6kWF$h`w<+HhC{o15h&V0E((;xvDdA
z3-`Tk7p2Z3Cm|L#Tz-1b>ENFY@BZyXobUAWNXS&KSSgxyKtXhg0LSq9sthwlv8Z&?
z@k7%GM5e?lBs$t->dj9&hzwO-*1||XK_dkoS7?S<wG<sCEupi4CgxgK)N<v$v9v)a
zkm5}hgjIT}G0Q${C(ozWpL+fj%sde^?k^_P^6f|9;_Rwn;6y1n)d>h(uDQT0x-ap3
z>>Z=V_YOE#Qf~MvAWj{6whU3L!b8FFu$uV_3gDtGi@CUNynK(O3hO*9YxGo=)BTT0
zK7B&Gxv`BJb7Now!GGLl<9;;8L(crOJ*@$Rj3&}I5Z#>P`fM9Ede*g-k{0#;TZ!yc
z;%@5|9lG--s7p-TVP^y-ER+<pW?l(lo!EF2JRG;<PWwWZuj6N8CRzD+#ys+8Y`yo=
z5W<xB&V<{aOLpMnZp5gD-o)ys`l^!8<EOx$Mn-$%cv8tjza&=MpKu9^T3hhuRm`6+
zw>9PWVe|}5{{F;IFYw8&b`4etpO6!*<0w@QeuD5aImhzqLYmGym(F8zFuAEg8D|M4
z=F1emZF1(m;2T<Jl^O^@>XXA+sJ-T2Vg&uT<eO(p>?Hfr8i?wWB~Pb2QIvoWkLjOY
z9Zi3P4J4DhJ4<<C7wHioKegFjQ5yeUZ=@W}4o}TXd5`4p7u{y}Gi=u{&$9#u$>_ep
zjsSwRuRDc5i@k0~Nea6|c^w3w#XYGb4H+#+&RkkceJn5s^bcMM(ssQJ_~R#{(a3UF
zNKW_TPSsHAclJi7eYng8rnNsCI?_4C@vUlSgT{mJ%)l$k&WF$bxyt#$DMJ|*Eeg2Z
z$JWkLOT3@aWHKJ?SAoZ=XT4&c`%5zH$HM}tA!?SV!qQKtpXQ2qQ=4wXArRwBC2eF}
zlsWGnnuj{Y5$gWgk=Es%66i^ms9m7>Y%t66&{_L=uH3%^WV5{;`Qu0H@Cv)#B4ecy
zCD$+A>x7S<#yr60nq&_<)|<cSJ(vo;1e0gJtr|P4t@h_HZ)M{S&ZQwF;&O};k{e59
zqXE%d&bXg4PF9Ut^#UcfaG$B3vKj)Sa@BRHC`mN)&LO-X%^#>m1m_sPB)!1G#iZEA
z8&NGonFxTK3s3&rYAzlg2uZ70!n_PAFnD^J)L$BST1r>fkpblkHv4n1orFm?+$BZY
z2>)jfmSy@<a?;8ImvJX)Ys#t(@ijLDPW4dwvUC2_*i32RDq_^50+IX21&nDeuxr)2
z-U05JuKm!ec6E+qq6v;#pz7yty8HZtqd;|g-Nj{IWJ0Cr{oeF|1RCNN>V5=d+d}mz
zdWRXl-yTIif)%YoL-0XfF5YyaQ5Ff%JkF}(MH9N=_C2@npZ$3!)3QX;x|jR8`L|#*
z*zRZuTX%>#J$k1QuHYO$<Y)5s15h=u`>WY8ZC;vD{gk+8+#OJ;cTu+?y<dHC5{VtU
z+&6{PZuj4qt4l~enIH_Wdat1oE%e?bD4yQJvci;}dWMFmP`TE0AYIndCkv`^FxJSG
z!HtwD`@L*i8|TZ;z=2GT{^j;-Os=^*3mbr1>;GGpWFfIjE6YkRaC4pyQ?Ya7?DXys
zRgt)k%n8zh_u#SZj<^JhBQV1OD*A2~T-y!w5rlc#?qmfVa6VY+v1jc6V6OTbWSnNW
zQN2laj1vT8KSbyyxocnY&H2hmqQm>53qa_tLUCw=C)XCQi%bm>dHHVF)uj+8rVBEd
zjVvS~OI6`-=$ng`Y_CqSrc8&B%`w3!G%>N;+Qj#^-^zYOaKo8&Q%R+^kW1GjG;ldP
z2#6%2A~^u~xIbQ+n#ogmn`Da5FMG|$bQEB@suDrCTg5_ph~dI6s|%9Ab&b^N+Mt&k
zLrd>N3qUjLC+<YEqRSzt>ugtks;5%LqaV+8lKHY|2m&NV&nnbCxyZ1#cx?oMv<znF
zIXIrDae0-g8aMLb$@k0a!=~17KR&vy@V9T1J}?6VeR9$uP~9+Zth{Q0CvG$h|GJ(*
zh2I~aKX<_`Vr;};MEphVA{nP6Y)oE*<p?=y%00KtvohtWtJ75ys}B_3QQTsmp(A@+
zZZp{=O%o}4xsqI!+ge!Z3o^1Vyda_Ss|R_x*c$|Z3gqhl?#KSQ9}}0o;LVFz7b@rZ
z@^T$+W5p81gUxkAp9fT3N$jJT`{Jp1Q^r0wjN8&I9fiB@7Lh9P3|jRaJI{vWP&dU7
z+oxI-v%>)|pGnVe5SxqkVA0`K)2atX*Pcsx%X5Sn04{;X-9*F6e?}R~#4@FLC|{%Q
zf22(%8JoN!Z4*65Dl!rc%qS?%f{ra)=oa&yBMi^;o`6w)75Yszzx8W@F+cl>xzUte
zfg7KsgQ?q?6R_z$ZjQmdQq6%uux)jxazZP;n^3j$4d;5_3UM<j)W0uy%;1s=a<)xA
z=fyVyu5~H=^`vqU$&%g}qvL2fopk;N9tT9d9-N~V9Jp*Gx%uN#mOLwLy1DJ-tJa5P
zSu3xo-s3@Ittw{#vZd;)^bVkm8X|$KHr_r~%iN7~O->|XX(q$4MZfxno)$%v31)8s
z+@ahs@%-+asQ^zP1GXN1rllmT_XeQIG-m4~neK}osDMt4A7inEk`#X*@+Yia9UHyr
zO{J^5)Dt^7Cz)HX?0AoM@r3&rf>*kUeBrEHKtjhM@qQV!=CO$LAX2a=JtkH}5yqoq
zr<}(Y`#=SW82BGnf0Raeykf<V+DXqP<0ziMY!70p^+OQQqt=v5%`*FpI+1@fq6)f_
zyNlk;IEW;;MJLCSLv>}PcTmZlwqny<YjBwz1n~Zm2^%B#3yi?xlP?NAe9r@*nZoM|
zgwAGO{V>nXM|kRFUlz!MO_kzavjHsDZ{kPnK!#Pkep-l31E||th&GAw0T{+2&-XZu
zsc-~P;xO2k1Ie`@;la0uol&gU0hlSQq*?xJ^X1;px7VE`8Nj@(z>jDw47_h>ZO5lE
zP)4;e&9*r6ldTRvkIi*CM4j{D0YYv{T*Zbzu=|p3L2>~)JAO}ACebc984If*N4`G+
zy}(sjiTCwJCav6^scU{5EF-5AXFCl?L*dS4{LKEscgDl<!qj2JCyvFgmEC@M;reUp
zjsu6SqyB-RM=#vy6Oxy!2N*CV>$auz3|8xPzm5T<lXT$9f)HlURN%e$Vk^Ys)@n$a
z`nupj#3W>aurT!fvcDFezj0#C=4P{PfB+lw5sprsMRD_yby$*h^rUoy9jJ3yX*4ef
z&(_ZIECkoH@Og|HlJmR;<ojB~8Ed~^vEAgt&Ai_=d4En(sq>lj5^RR;KMl=sR8RHs
zH8WqS{{SS2|JSY6f7$KSOf`w~_n#Tq0e%&Yk3=v-&&v#ju40Nt33?@W(!C)efAx1H
zRS5TCLcJI~318GYCi1*iucSz;P6O}kz(i2kgk%l(w_T$pa~;zk=nPGY{(_r9v@%Of
z-3Y-s*3KUWC&M+u)EB4atn9w~?~<;Lp-|>$@qFeG)MuqLhrAuTIv9D`>5llT_^2DQ
z&UMX1@*rK_%q)LevQ|S@K;o{&tZ7cHQ3E3*Ri`66v}t1#spx7C!W7WET(Oqc4(VVH
zIG2~I7!DqQaZ#!pyR=f63h)CEg(M`IGmkGpo9T0li$X`R3*1N2YZjN#6Z(`w1>}~d
z8FOCvc%t~AmWN^G<6oAuQpYULl&}@2A4L-fQdXc}7`{5{de7(Vvch6If=Xoo19Gqi
ztRYQU7F|-C*>)Jz(m5lXIC>&`fYyq&ra=wxLjZ{DaRglOlVJtPO#@Y*gyWn7nJ0N@
z8W_ro{Xhnff4n4><=Ma*AW|2|tdQc!&C(AzrZC?_ns8zfVAc+f%`D6%3Wg9OuUZ*-
z0IlJQ=OL8sIs160B<t^~mu-uQ`G_9rcEBhgODlA#wrdw!&KIi+2dW3-MaWeZR2I+j
zrk6k8yz-aJtwC^`3H?IwISkN;7+jnmknJ|K-7rL#!6sQ+C;Ma6dGec>Uaz&1H#M@4
z0N_IRPULq5F{#GkGiqkQ+AEdIig{rf=eA}%v0BRIm*Mw^I|Vqde0gW(*Aar}(N*|4
zI_}6T4(<sZ2$c3ekl<@ofX&@VE-Xx$Y`2tX%khT{OzOZr_GL-wxPvMlA=n<*#?75!
ziXI~t_Ns^fd(g}4&b0P)Db(Y#)iq}!g4_0EWQhhR@2Gu*6RNNK>KM6ptMyxGF^fHu
zVszdq%4N$qqYWttMt*~Evf=9P`kYqph?8uq;An-ufKd@E{fD%|bVIaQ?x2O#JE%BY
zIyBnHts-|$+AiQm>=&QY4RG(pjO#yCn<<cY-fVg|H-3h3>OaDFvhjExFs7-gcX{E_
zUGq*E2Am<qU=VyTctNyhplCI~qe_bAI7fT&9euV+E8{T|(%48%hQ}ij#0zoORZN8g
zd#NSal(kU6RqlgjFy{>qHv(hmo3DrFj5wxK4IQXU+7h3q!j)$QS~3i$hBmCF;#zVe
zdq5yXB@{p>=9fn~&nUAha#l)7y``aCsr{_b#;InFCZ{n!Tv}{dPmA5f8f+uUzf|%N
z^GcVjuBM{$fb!gDepAPNMR1|y;`?(758&*dZ3@QUs{;1n%`UN%Cds`Ahw{OkR0NRV
zd><G{kO*};%-mBUC_d_sP6lS}=iAur{$H$`U8G*zvK@aFeYu+4sV?@^`jDn|N>7k3
zy!wJ0i_vg9dp2rNZ>}G_g}_=r4~PsP>z};RAwf4mt$R)rtYY#2BnB8ggB%zMny4An
zqRX+l?Yxi5%&+v&3;kqMx7bWoi*x~v{;NB_*;*o>hjz%>TteS+$?OXmU}mltHDOn|
zRf8-a^J_!W1l7XVZFRu9Ep1!mO9qOkx2duIXsv_#NLmR(m6LAtm*g5nTE|*n|NlC^
zo*f>oQPo=iamUx2I6@7^wvyU?>k~%fFlP0n()7E^x*mo*sS0bY)<eG_P$^wlXI@{4
z#pEVglY|*QqW)KYs4lU-EyWolKSy`(pq(_2B?2jB1AN&!P+H<VW?FZF#Wcg%VQzD5
zS$i9SEm{XFo!4A}B<cCb*pjmZS^=K1O>`8gf0JPvyL*g~svSDN2>(U7?#4R|gj50J
z<x@FZ!6cb^ZdX@s*lozG<5n%Ye?~)XTqNjmp(2ak2-Y|TrSq8v%Fr$I)XnwGoiTkC
zs1k$vRTyi!;py@SwU>aEh8Q%F@1L&HiANdkNk~AbA>rMoJ!a;YHM}f$a%rIaro;Sb
z{*8w@I{#IS%e5Z$zG(%-@5g3pAY019!Kg()V$_dlZsPFf_n8-8x^Z7_lH_D-!NgkV
zP06fR6FLf&6vF8D@|uT$wsQYL|EBkJjF=IWV4<>ex~<LCZQDuxW}I%t0>}gcn4amf
zJq-Wryt4Orp)!HQgYkdwo#Z#Yi8EG?yq4FzJg^MWG8N_x{gQ|{h&8}B#-$=1jzr7v
zPABBxynS``4D)q-S~dQ4v6pz1TT$>}ngovM`QC$dA_}uSOmS6L4Dw6Emj0ynRjoNW
zpIvqq<plGaNz=sl*)^tt&+%sU6@I4Y2(N@++NAsN=skxP#YMQFW2zeY(eMR!iIxc$
zp*+E0cCN_N;Fe*Vr0X{p>}m{8Gombv2w2DY3#iz-Qn(?XRJM%BcoCtA4!|Ag%l%&?
z)h~T!{Ck=JvI&r8>Ysur|JuMS)2}CkSRKOtc|3JE8%ljM5p?K^eIjMIFCU1w=mjo9
z{3Tqy^E4Ks07I0?Dw0}on7S!}O_h-ZJ;mrz1!lyo%gQ(b@WzRbJ`nWGx$d>I)=frK
z{Nkc(!gg^dos&m4#L<c;pBNaPB9{jMKe`z{dJ>yd^Y5Am*3fqUN%0_7dt!5tdnR8M
z!Ag8n6Aa|kU?AjYw+P3!Q}pgP;Ue`>_|#(w4FxYr_69$H%+v#Ig+ken4J<P!u9h~c
zp`&HMjU;EoFh2?+A*QY`4cC2CAny+|@%F+pttIYUM9GMVsNs%xL_b0#BS<6qU#F$o
zKev`%H0cc@_B5Wp2RjoK;^<aW+)E(Z><`o^AY{a?CR|7$$p-;{ozf!@!*D@$$1+a-
z;^0=RE36`7Kj*l2WX*t+Guonz1p~!ljV86xq9#_<o_)CgaQtH%*lQDo`2mcWmtlp;
zjEA5Wp=-A+`u9?19Xd-Q@q#HRI^P@6`Auaf!#;Y}p2adxhTTi@E8eI*2qGa}ym{n;
z-)*JNILyT$2N7ha;%;RSux8OUlgeqKB-2o#8WgXK9;=xQJC^}TewBq7@2o?5<y5{E
z2x3riG3p3<p?JS=3Ex=>mTf&x)7Kq6RDA#OM5&Q(w?6Z>Of$<zCG-v#-U3%)N~ZA9
z*f(G^A~4m22Y-No&mVDC^7frm2trqN8ug_JZ$<12JmyqUpBCJD<7JH?#3MglIc*kn
zs|G@Vqfa(fe1A&@kYy3~p&b~4A>O1y1uT4hV&%k+z+CM|?rElB`w^4nwamjOeH=f`
zTI1&~VJ<;*+GHU8SKWt|{Jx1H>D6A$CYWwZ(%45$rXZXCX>lpB8t{CSFCCyZbVnsG
zjP6e{TYzHisH*hSXe4!xPmA9r=bMv;eWOT17g@L@S<BgoJe12mq#_`KYpnYAqdPS?
zC0}g0m@CK76VB&_JxiWheru7hj~Rja_IX2*=@}f+h_|Q~p}AXw9<`9S>lXV$%FH?S
z9H4b;ghU0{L-2R7k4U^6LBeJl5?m;79u%KS_v?+c`ATG$MBE&rhS(j)ZL6m5k8OQL
zK_^>XELNL8qK6eqKKb2B^&R9cys#&qY@lm|FHJun)RFVg$YGXvZqrPbmJ3W}mZ5*x
zA)BaTL%HC+C+r#;1B5~TkZwA-C1#P<r_ss}N(p<7>~(t=Z%_mQUkN;0;1TGdJn;`G
zYWc5ZrRb<dtwL~Qw=m964;n3vnry`zLX5j0yXNM_kBCJh960@iMN<N}2P%UQJMYQx
z7hKx@*ac~7_R5DMZTu9N$O1{JN-VSi9Im}sJCtptUUl6uUFf{v%-@>ZKZ=0ul)Ee9
z)C`T+nKgdo)}Bw40i>X+NuTi(l{Q>z+U5!a9gmejMb6u)R8nvtk|(6;2sZH@P9ejd
z+J!ij43I)-|3*so;uKG$DSC)^(e&bja)HISt4f~ZXU_~Vkah;+)o7LQ9_pNmCmc0S
z&Um**_7&T`kC@rcDFiU+%b0f0-|P817bSRQ5mpR(PDslwqZMx#HM_6FEDouL04(HQ
zOh3pj9(9jRVVm>^7#2xLZ6%rDk)Y2u5H;^X<U)<9Bl8osiok2%j8cV`z&hy4ci_{h
zfmIFk08)9}w$`$_0FZ)pcp_`5^@K7ayrE6!#?zc;&xWRAy6t+JM-hcQW%ZP+qH-OP
zE)!jjsx<P0dpy?;L2o=<aHS4d_r`bQy?-qsc(b^Y?#)6s#<l7-j%QbHWV16VamW~G
zK%tV;XhJ;h|IKp!Ez4ENMhOhzS+{Q~9B+4qrtp|-Es%%EM~@<Qe2&#7jnCX*M3JNQ
zzy25~EaZfhNf=0L2P{IVsvGFR6(Qa&^zX7*U#mQ(h6^;8)9G6Us5WF+!PP+6C!aDB
zUBoH*a&%z~wT~SLA4h1qjMWZNU~G{*n@a%pXw0j1-_D<=@C{Q`6XD)kMK<VVV6E%4
zRsepLfy|bDtyIegl9zf%`u7CI+qN%IB0WkLzf?2+HYz#0X`AX_(`r036JBT$1ks}^
z?$!t5=!OhXDS2{BC|Bidh=o7F#y2$i!QEU?LRJ_AD`c6vc_TMqDR>>(^$2hF<#hj9
zvfslx_yA&=G`l%j+jJ&F*he#s@9y-6+ZaDk6P@@VE<F$D@lihlq-Exf8;VmZN1_p1
zfXK^;R)9a^_$9N67|~F_E^#wSsb?)L-)p9R&-aAJG4)s8jIzvN8^=h<I@S?cv*(Vu
zwmC9+DQB7zW@@l79CZzbV@q$^toJopsi3&W&IlqBJ@xC|l+!LVuW#YQ%opiF3?I4F
zqrg`Y@6+m~Rr$yyrreL6@c4NA3z*em5Ze6|WUbt4W~{on9VbE$cu+fcA|b;IU!Ddp
z^t@|V8`+~Ft43%jWalFa;@q0uq5;vXfl~wpqY}~&ORC3CR-s^=Y1&VpDsaF9a<O-E
zDdy@KEeA@Dpw?r@$!k;VOoOHsoaG-7xe=M}kQnE#WoDKVC)gbdHHsU|H$Dol?9c}h
zB9A~P@y|rX+yLn2bsb0adzbl)_sahfiX1U3en+m=pKyOqj}-)Wat+AvqZ5{oqOBsC
znA@O2n%18Ol+Hi%)wZ|@*a+7C3Hznz!m3mjNQt#V0mFj7*Cs1b8pLNrozrA5EJJ69
zt&k=Eqb}V1@6juQ%vs`kYOyoAY$9SLkoe{fTnkPx<kbXfman=J?-Hkljbl7Nr2~4z
zI=DsmAvGS#DgA8^zDn2@;xbA*Ba%hnBT0K5FP=Io%(j)+*)hfiGA=Wa_~p42{}X6G
zmHsA&X|JlMYAn-62W*1<sOc;ve_i6CIFi6}AKj?e`CL3ciJFy-4kd_cAnj?GPfhgf
zw$fTrmH{6>EwRB*Nfko7ft4ma<j3|rSHLINC0Rsmx217Gq`!=eaU(t_(`ih|rI*-J
zt&A8sHz+uN<+gO^_16US{<zRuk1W(Zc+Fn0Uy*2U(d}33&Y><Fw>R!j1oE&(aAkY6
zDA{=@%_$F5u7HHQ`{mc#P<_>N&mIXJQuCMs!HeEHr5RpdcSfg6fnGzkQBzs)a?Ia@
zRn1Q_+WmyURl#yBJBW;0r?_XazBX%@q^uMWZo^Ha5IWHGLP3X;ADqn;C!pe!DP)$~
zDa}9VBJ~Ya$L#wA^suk@eP@1K1S@Fr_E{}=xo#e<IZ^1xzMseItrF8yWK=mwvS$q-
zV6vbTK=!%3*r&>>`q7a#`(h-`z=AN(1X`~Upugb<ZBhwpWu!9g?vdnF&F?SrUl1yw
zc75p@7tzhXHa0)=?X{nv9A>><_E>D3k~jTvrIU4XsJv%>SM@3*oU09*9M+Yb;i`_<
zZf)JPNmkx&4u$03LMAZihvqgQq2EFE3v%&Uz&cvFZWm!wjVI1sg$=kI*O<6h_@fYo
z(s5A$Z%^axF@7}aq*XET|6=R0-pvU?b0(1z;5)4T0$`vPDf2FwZWZzCDOx3-Ochz?
z?~$patMlT1s<{X9lJ9g8dH?Y(fxK=9Fvrulf2pt;qLS+qJza6|TU$}_DIK{k4Ed^w
zqO-W(>;|G<x7Shc1QB3^+jc_IA=Yp76udN^DVg4^qS+-e9RdycNy^;B<$p9A^^7UJ
z`hEeJ{S6*h3TPaf3wzu2uwhSS?ca?p^g*yDg-3gRXei!R9b_^doo2Bp`Gp>j3$!)V
zUej=~TJB-w;Q$wY`i<H1bZbE=PF~(EOkdCydt7zI&A(fK3Qqf@wp5HYlWL*ij&-~5
z_T}Qo<+`xxJ;io+mpP5zm?O%?SI?Ifkk6Pdj|@x1NqCWBzH`|VTppv^H-WMofD~Ix
zcBQQ9c9@ZDr@Q|KK#hMkU4B;FE<%x=;MIPo^C&EGh&(#jWB$c!VCUahaVe@k$)Z-S
zkBr<X!i5|lh9&ybI7`!uSH?gdRn-Nzlx&*N-f$nr{s`)1;Od@Yx*h}4Q>|d(rDN8D
z;q}0)Zwui};;u5g!m^Ff5nDB^s++kxme){X*QXoBDX*equgVwYW}mxAa{_(rBC^C^
zfIwIVL4O@8!Y+lsyo0g$DV&nfV$F-d%LOPr!c=~Yc&@6Cv>H^TPC*1K&c~S$_mS7A
zgKGQx6RBRhMDtCQ_1w?fv=u6B=sGpoDD}wfcArd$aAJ;nv9l~q1Jg&YpqcS>5Z(_H
zm}cNEh{O)wSAk7<w)?fflXV9cX!bH-upu&pY`?*Rq$C$K-9Z0>?PlQd+xwBWYM8uI
z8PaRIQSK_xrdV4cbzDHls|~n7YCY|Ex#I@_)yMUJXgkyPf&nZ&b>I93zo7`5nSbQK
zqWBwJWrs(eAP~GJg98jlP*ST-YSmC~Ip8E_SKU?QOFlpms=YuyEe&{B*u&9{*TTd2
zC`5US)eI-`*!Tt<gX_Z4T`D}J*w$`wZ>4tjSDLG$%COX5;ALIyN)61=B>^i`>!mWw
zLxz%L+j-bWEem`*GfPs6FcOCAD`dtXZUdp^-58w0cY|=r02S`z70$LAax8?^cy#MC
zA{7#MtmZnzYQ}((<|;>Au<MNx^QBWUU9B<9V>2Q8sIppjc#@W(PJIh_)av%;An+e$
z3qO02qHwGA$*Z+2?q7?!4c*ASA23b<SUG{f22IL30O+eQhW;BNjs=a%zK5JUM+v<5
zd8@IlA0qd{HELD6we7`T{&G`!vDzjn+g~!rzU<6%3{@FgN>J4mZ9F^tl9n~XQQj&+
zUvtR$wLN&#TNmf9-DrPuq`p|yog~{t!_Zk?YsKQCMv}qHA+a{ef^j%tgS4Xevq58U
zWT&iD?0t@w(;!0|illlsj@*IxFz%JPuXQZu<5)8{A~hv6UhBy@fn5Sh!DFNR=gl$u
zIA~9Zev*(nOy59!hI|gDAwkgeKcUC!p53^>E#YT5zY2FKe8ca2cYt4oeOmkTPq5v~
z*TOVP^Fe--Ub)d9j7W(RLd{f%zKB``BPSVJoJ`ee)vCFsqCpj41mAX%l^1JUX6l|M
zys*HWdeUqB<JT7wH3(gzAusdn@90K5)n4IF|HGH8K$hx4uPiS`(geOpC{O6;bN>Zg
z-^X#nPfs{Mmd@Z5d`ka0HTRz{;;*n*CNw4eQmf8VJ#`#^c^)Bhrb`!g$@Y2TzCjWJ
zFeM|~W}U)n%U_P9em{=4${yBe`=c3z(C5zIz*HSd&ul}4J7+K^!C5GVO)(TwBl5Dm
z!Xt*7+};f81`ntHDQ-yn;vHkkCG+BB?y411ky!lt_P;U<{u8&gQ<6Sb9w*S-SU_U$
z1ciVVon=G(<PUdPq#9gd1;dt}Qy$abGWpF0r0K@ZX&8(0!COGYht1kl7ND1A*aE>k
zM$k;{6rRwB)|JLXNUblAEfsnA5yGpA%)q)~Y+Xa8%w&tBUmWU5Y{px}t8TurLu?ia
zkqJx^P4iedJs$+&ppSTZArj3(BLQM%FVdoos-D1z*9Fl=>kO;fYikCM&)|xGf|uIi
zQ!qq0-}Ka5k}pv;mHJBGtA(ua8%C$=ipwYj+0)T3TmBFAnV=;3KWk&sx{}@Y5*N~I
zcO4ZPW8lW@q9WEhK1IE{)buv_8MixBY%$3^m)#8arva(g2<{V3&ef2C`j>H@lW_Hy
zIPS|$h|pvZhbA?_CXmA8YZ{068H%>-h)D22qxon8IJy^sOE&(Li4=88$$KRaeyxof
zSV5vaJ!&e#IxI@UjvG+&7d0{5+2t#`WXM6rY8QaDSnYm4P5`m>1Y#v3Cs!LdJ-M}c
ze7r7BUwGXln;5}I#6yr87H&&v3m`%FOV7srvF}|(8OLsLu^todq0z@w0Jyfcna5);
z#U4g~Wat78F0PaY@cVq$>@m>9&z1g<&GrhtknLY}8oX$D0FR{@Bgv*ziT{Q&(-``G
zrLMrC4*LPuPd`;QhmeKu@yaJ4d*XsD?Nkx-)_k(ru_xA57}guswL_eAF4+gOnGl<-
zdRd@lb}>-6^?Cgn?fj?5SK%lKzm%LUbn_+K$7aCH>H<o*NxPO-w_h;cs0LTb(-Zf>
z$cHblU!pTxKS*L6*!@dO*(b5KrQ7zvD?4qt9hTrt5KWOyUP!KO1@_nNJSlDVjcrMI
z?3c~KFf+TTs(Xr4sW(bmFrx)iM+Uc0Jbkv~`y1@o5Nbr>u;vAyPyG;I<{4i3E+wS)
z`2Rbo?=%%rj}}`x-R|E0`H`YRk9vEQ-<AsvIXe&nJK`Dc*m;K2_a#yau8seg8`)GO
z=wt^m)FW|nvha<Wm#7+3tHn~I^TOex1Eo&P+g_OR42jB*eaH)geXujY3i<XN+$8U3
zY#u)vylu_%SRH+z00JhxFyIHnw0FXb%8$Tt)@>YVuF=HUz;|Ii!1HzJ@*7erdcM0Z
zCBp0ui^QRz?i(rFUYGX^0EEjd%ddG}P@hW_gv70S`PEId(j#XMI;(xX#Mt2_PW#PP
zagF_x+BCgn{`V@`!d^Yv!x`KX2-%Mnri4K4p42MK%rY6=)lB!P&`|P+#(Z@E7bxj}
z$#25&pze!mUe^CXjW!cu{zjNv;d<ZnLB%51ZE-9GE-3Bii%o=9LNnE45KFG&@~J^_
z(ma<&x-~S|A=z>!k34z|(N$r9-=SW0&n;HSWX$r7xHflLBIeTR8`k7%y9sc4iW5Q?
zw%HLAGw0^lpf~Em`Mf2-=Jt7S8?8)AgwMc)$KDoZHYDuHO=-(KyW)|RZ+E^qoe2X=
z31qZ^MUm%VCrl+?5oQ*vt&;+0DzdDAQjy|P<7oXsw!#EWMu)XB-`$XWn-w^*L@HW-
z(%z`>^BUeS87)+;L-d&Z9bDGk&kFrNR%Y05k9mxd8|B;OGlK&7Elxi$=%ixo)P{Vu
z-KPFrcp`M7Pu?CML(qFHt~uMx`BS~qz#Xj@YXN%DOO-X-*z8p&@!~s^Qay7Uu62Q4
zpFCcj=e+xY&^k}NpY<eN<?Z@&E1F=PoNn$b>-{rIUJGp+FKq}P+}|b*FDP)OTaLj(
zvCH_=IEv*$-KwXC^Le5QPm{3=d%7726#MDM0I^}iSAZP93uFZL@el80oA~q7dO^=4
zelEWfOQ?>-+*ZF`NbThIgGdm8qgr!a!Dsr?{}3Sh)m|LKxcDnW1Rvp*JOAOO<O~2^
z2HEsbNcagPdp*=>D=m3Bq$SFkp?DOfIlTkO51~Rw;RsDN<dgn(D^09GF~*!;E4&D*
z42N}gKg#Niz9x9e4t4867_#fu$qq%`v81@5yb-|wP;{Q=qb>KyFx#F`^%dczc8x_&
zffoF?OELen3HV5Z%Qn@$4s|m3;yFSuDk*eU2(<Mc!nl%lB#vD$7IanLNk-TYw(U0V
zDDeIFBPlN6&1(`PTDc@d#CF77T~V}{?J=^pss6|NHqp{;2}^?2?f&lxK?$gHNt5U>
zCJx=XE9`=yg&$~7^69hjY8UvD5St=c1GNo$G<*x$Rx|3$pyI-_zD#}?8u!9|Wl3%q
zn-K-S5YE}3yCtz%f}I2)fkdCIif9>iyTM-^N{eLNKHE4l9DnQoO>6h8#YrCW8(7#6
zqwNZ+l)_%Hvx3|O`F@@5hRC<@ZXNI4vu-$Zl}V^a$5YPgGSRK=o12-V#=ew$nlxw7
zumS=S5npwe6u^NBek}kms)go1m1(nnl>hur#9wPW9KAqB6a&><;;y97L+!F!gtuS<
z;zKU?E?O2|9HvI>aaOz~wvir@s2(=yLM4`1!}%-H-{7y>=YYF^RaZm@Kje0XhfMHO
z7<_fgLesJtd`^wXvR{eI3_PTGb-v?{|KbyzGquoFwVV<7qb5%A)X)@;Zt$aas%l0h
zz|RlAfcgFmLO2Jv(Mn?LB;B(7?7n>~7QO#CvS;c?swgVPBhP!LpfMQrzf>W4KUH1<
zfD85%Xif)q*Zh1;!7%?_71E5*li&;c#R?3+`0^>&evV+};aD3w=Sax+=a-1|(-ZZW
z(eK7yE!gG91_EZf&zlx5VWI?Dj9-`b;>Q{g^i>!2_F*WkUoHmiaQED^lXInvlRVKa
z!=p}pTlEBic4QuLPxBp1q&E{c{-mS1!(XKmMdH4a*a$Ng#mdY;m$c4rQo;aLp%b0^
z{7_R(qpqaidK`fu))(M*FLR$RX^brTDV0YhM5U6MP94c?SD$<xH1oaSvG8Yp-6_i|
zNYL>O1KK)^O=#Fwu-|u8^h1K#HxX{K0&{F<2>?FW&arqoTRnzoP-JqcY1VvSe2g+l
zjk&Cgr#Tvr)phRc91qA(3hlxzH>3It3X7+%ob`5KsZ%ObnH_MM`$OhYk6-+^3g8la
zGI>y~+pc{t=30-uCkG&pSe~kLY={PKW}JhVS?Ey)N^PLhn^4~n`C4J#L**$L9f)Hu
zFM-5XroFbpKO8RMT`VqRQvaZhh^*=5A(9DnHUv;Ng5b7gli*^oA|yh<8b$kzX<U^h
z{a)rB$$a3K$P5%=OtI|DTg@0xuE8y5JNNlSH3|jM7Nm()7}eP{dSH5!v*BP<3qieS
zN=Ii#V5%(iSB}-I`e7Kwts`&<3vWekOytB103h?Q427^k5H$-kj(X=14s{u8gA4>V
zZ4^q9)D2wj(WOpp`9gaXYfIO2^UuT%CXO8HK=wLWJulN&@LOo0aOcCKlkC4)H$S2w
zV<0YWKYc?7MnX0Q+vCn?sPT3KQ$V%{54W(Jdj6H3aY$=wjoDZCSMuw#7XMze6A5c>
z*7{STOFRotA$F$ytdq@{GY)!|dosJu2LPAR|7`9}t<CcAHz%#JO_<NFfOcS!Ruv~Q
zK=B8G(Pu?Cq4_W0{m64)9b(8}wmnAwbGr|uNQTkTc^(BaOrtvZE4s!^CnNsWg;n_<
z9m&G9E8HOfzmZ3nunhRPdTnr%Lv7r6KKlw8u%mb{mqlN?Z#HC&wHE^cKb%`3okqzf
ziCk?WpugiZBnKpdNu>*dTjb4FTQ@EBl^Tiyp#95R{RF?+$O!v=|5vWvqFvZncP9kq
zC3U>Tmz8wik;1Knf^?V|=v^r&8lm{Qtw~$hpTb!Y$A5V#WU-(SsNNNX9Mvj|@XJG|
z!H)3~--O7MPb@_vn>y||XOR$3t>2e=%bw@`JZgZ8B@yj6nf6{NI_>I`0CU`n51$5}
zeA_iV7;L#)2IS$hm#?i_QMPX?Rr_oz>;zp4;6&A<m3+tqpAgydxADZTO{hkX$!ET_
zuN1x1@y16()tXw$lcJ`SR4-yvJuNG_>}K!_(jplF1@(072nQD6;;-}xK5I)>_VqN;
z-b;7GPOmYnLmS*y&G8yK+w}tz<(c4cu@k+E=T4;Y>M@_lL(U1M>N2bGmYvueW@Khz
z49UVQtTBKh2Qv1dGz&wgwjp_rUY`6gh}jJZ=TjG&64{XeYbnRGW4ux5uedGbtrJu_
z<)I6^J^A!>F=9vZ{3?oLYka;Rmnd9cMCs7(MxX2hjfg0~x08W5A8pDCRlJwZ4i^u0
zJ4YGjDPbysf-A2Tx)REi;IP3wJ>t3*$gOPAHW-qUV2?;Sw$xiN_SykPhw0oAuKIZH
zE#E^@7BanPdmPB+j9AFi-YYlCDiSxfESHB<zg7v(kd^O7T|Ru$f&B$rAuas_LQtHi
zCmlwZexmnRMbyi6=7oRET9yKDAUNwLNI5tK09BWaC*yHL-dD8)6^Stj>2M%8TO15}
zXw50fwJE13Yp;C9f!4v+tqY#rSag#Dumi$kdw+Iuay{J9)HffkjT?I8e~**4<<8{H
zoJ=#NBs}#29nyc1s(^R+vAU{w3&|_GKTkgt7b|Zl(#$CyedI#oL&x`vm>NesZuAEN
zL0Q(Z;eRM2>(z2pd%Ttl4{j7?B&3eJ>d89W(_6Xr1ELa)U^vZ;Y=wgudcAjj3I&Wu
zKp}Wgtc4loK#J_${O4fhF=B;?uDoBJbgMM<s8r7lz!e8Ft?xD#uO|m!hQ6mmWN@ed
zst*e-gSJHUmNV*zB)8{Dez5=Zx<}qI5ooWYlj1y(_f6X)!Q@@(%(vo=&th%KDIUnP
z>r@Y;Y`-!~j<&cWond(t^?3(Iigeb7aiJ(Ec_4Nec$=PcVrl?IIxj3!Ae10D5)URk
z6HzkUTkgnV<T=TG48`>^NNPtAkIzE5=V?kYr^d1Dc)~8jpjkbF1uoVx;T2--TmO&Y
zJgMII2VW3<l`FPknb+-}k}we?C+IQN3=a>^(=1KmXgx9p19y-_EHXeDN?s4$942G(
z@R_VN{iwoX^R127u64tA`FKzQ%a|<GpVv<lZ>}#RQjh+V=AX`nRAk#(IjmplHmN4e
zCT&={kkDRqN8{**>(NS_gUt4$XY+zsIB!m{@bK0e^UMd%{~^Ko>2+ruRVT<>dav%9
zTOa{t?^>^dg4eEz1@3^&olL?WeTcCBXY`;y(;RPD{7l>lIS=nCJ=Pxs-;Zj(vClqB
z<DNFSCAV$RsS1j~_~odJ_BYi2Tm!ff?9}!J4$6fC^pd&=keV&!PDrc-hIz}nv>K5x
zL>IAt16*WLp^E0S$ZLUSI9q7GL7Ts2JO*^3u7_e{VvdCyN=X0e5P{B<LzjPQB^oj3
zO*M?qU6SKyny$7S2OD%D4#x5jUy{%jy{Z(hh|Imas?Z+s>uA1PclJP7Nxm0tONXB%
zvarGxhP1x3MaK*Tt*EZb6X-v8TD|?Jm*Ia3inc8RSOk<FX98ztTQI#38WA9nn6|Dk
zi?P(8kY%XjZ%Iv&%iCr3lh~+{0~{0vQo1XmMXnDpX<TH3_77pnKV1b^jQLLW5{#M7
zhQ0u8g+dBawSd};r{1CyW=xkoa<4KUziIGFO|mfqCB(b)poS!+&FnX({-)8$=L3xb
z`zfMkwB*<M8?o=2+DtX{nU#0E!5d@J;$Y{g>p+BWdX>oJJ}09GB^Z{7SC<z*CwfPh
z$_e!<btff``jM9@d>T-xr!`)S!wP=b<x&ru{X-<cfi~rLVd)cNw@?!+0V5d!V#TW4
zYoMqzYq=Hd>Wj_M{WR$int9d6vSV7=I+v*gCz^aaGSL{ICtDd$Q`He}3i560bvy|n
zx1|1tP09C#G&blFEg!nmLiqd2xtVEA)yTWR=>c7=_^yHmqrLyC+Y~>lp{I^$f~z!%
z5f{DhTp)_&gl_95H;y#C%|AdDC*WD2h9pe^lZWp*Na#cMxV;W==D5!nzea<juw%h}
zg>Sar2yiQOcv-cEK2y??n4jQ)dCXU;%CkCCBJhs&?Y&u|2{WWcKjB9OzNOnn7*>nJ
z5pv{lg)_DNDd??%0hu$!a*fw2{F)PHEn;&N=i`YfIg?Ow?xP)RdyRWjxvce{upy5r
z=Xg%V$*{+g=gg*84{fbAfCe!qhuhWaP7i)nyl-{W{K9#YNBw1bS7j}Qkhc%BH*~%L
zWXGyzw)R(*awYQSt|;mbf3`o!exrV8)e0n+JF~a$Sg=SpokogdII*<9&J=$`<><Bq
zq$Z3edhX@&z-vr-Vy~_8x63q$H@YwO$g-vFL<GfVmeZn|IigZG?$C7srRX-^S;h%<
zN^~fF8AHo1(bkS~FHqUU`xVe!SrFLlIhgYk(rv+nk_mAZ?kc=HjV@%==_%`1;dY^H
z%%6XMv`8-DuS8gK<3-H!%;j^3JADmJqk01WPq0VDq$RI-M@3ky#KZJZrDwsh4>e@r
z`4_+;j3s~$l%f9PQ~VveHpMb3s9X`3vCz|J*{a6y$^4D~r?<0gs)Jjw^ugWT-7UDg
z1ShzAfP=eh(BKXMf&_ObxE$bM!6mrE!QJJB$$f9#t~=c`UDfkp_K(=LYpu1Phi_xl
z-XO?omz6Zy+`hu3?`SD^MDfO@TYc{84DT<5qzAL&p7Fh7e<2mhSD@C~XL^NlqSk%Y
zf)|B3R{1>E!K7{->G!L?Z<c|nuaB32^2R@!3mtb+kt`E!x=MfWF;&FU_h>n!@TcQQ
z8)08zF-xfYW{de}T2zx;i@V*`m_WydzsAsEpI%yQxaUUG_caX4`gga;(_sXz$M@Z0
z^amB9SOj|C;nFQjlBvue<^Ih;yLR?2atQLfuQAdk{bD~u-|dutfqHJ*)hFfPG6&Sc
z$_L$3@_rpTxa{EAgr*TBJJoJK&($1d!D0()F-CmK#7)~`ois|0Fd!pU<d?ZUnVE0!
zA3(icoNw+BNBz8cENs=Cv3_kEocZd+{!LBvo%p08H54(qZjpF7kY3Hc8C8+tk2G(m
zMYaECcIlk8HK$4{Lr*KMLD3bDz1l}^|DE0sr0D;kDg;u&e3a++j0|^;e2?N^(YGt7
zqWvwt!mz|wDh8PJc|gK0!<aRC0Ds_-%DXeM_g2L%FMAfu1cZ?LWDcU*aC614KS<)|
zgCTn=#X_3d77X<~xfmlQdcA-jb@4U1XnHn^j%)@V)EX$cEDWYd1d*N|5c+C<*g>hV
zfo02G3+OH!ajOHKSmLk(`rYAZ_L@vvY^BoL2pdU>+;W(vo>T0pTf07d{oB*JiCx5V
z9S!WOt8P?2pqfoWT*hZ!eTqqwr=EMDK|J_${B-D#Le^ZvDh<at;DYqs*Tc<lmuzgJ
z;Y7NMpnpecr77fagg!rqNt(d+RlN}nP!fe51ST<8Dr=Fuk{XCU?Gf{|witSGIsv*N
z3wS}X3n|8F3wDdg`Rx~UEP^AIL2mn!g;2k#M%c)tr8h1mN`2Wm8S@LboNdSOSl>Q+
zoS)skf%!U^x_4wODagLG`XTxh0e5z_@2KGY+NCl$+k?jXI)o80W3=7^1XBFwF7V!O
zRs?qx19L^k#uKYep$AY(kpoA!iHceYh%e9O=Sk!g6Y|_Z{s>Yd7;W?a8u-_mxg|k&
z&MywI+Y3<~A5b^ye3EhiO1S%C&U}q|3pIhbmkl_;A@%U~h;Aa7KcId)(Z=MbB2%hn
zI<~c^d^6g-xrQ8kiRl$+1L~J0G<`n>itC0}3A&@dt5NYH_j++f4WY1x|6wLGc=;jv
zGZYp7d=Vnd_eyd?sy1yL2urF1L`QulRVBPA`iuAxZUf*Ayy8otwx5do1Pgyz9~>?<
zEcj(6)Ht~!kTAidYe)HQQ?ZXI2?_;rEUSL3JnWixFVXH@dPc#GH!7T@62t;kHFo2d
zjzpI8vq@4cu`G_9923<omgfyy;kr1n3UniFy67m&rA=r<6}*mHQdOTjHOvp+mf9%V
zMCqfa;=gx;U&1mM$#eg$-m&&je_~in$=my?#}sekVD*BRz4~sdgtw9Vqn9&mkKD<t
zs{ZW}i*?Du&^B7sRvZt~Gb2Zs^TIC?p=QtOEf$@nwfu0o9-AZ^esIEmyJhBAt0D%B
zGEmcVwA5t8`G$(Oi`v9*dAmMIL>I6oqlFEo1)_N=F7#A5X9%}ge<R=XLP_#Css#g$
z+jL|blm>}4f<wSoZPyp<R(U8l>LUmBGl8+P){nVKL^_NobT>@|H!<OlB6R@0o|!6i
ziFf*M7a?lhC&KeCaE{*oUAlW6`mE*#DAD%EP^SUNb-y}w4;=yYWJd#eTBj_7C7<F*
zY4HZEs4nW&D;(gM<Lcj-i{b1&zhK$pwxIHD+NSSSQ0oGBwo?;-OHzi*-+B}0nIvYc
z03+=Dbk}Nhy;Qj0hX2Q1Z9a~7d`qsz4=*`S6sJr8zg8#J0IP3y_E6#AJ+W0yA1mx#
zY32hg7L;w_>M!zqxMo`<U5*rY{^F0P5kcErxvCN?&=EXo6rk&V$aPhz$#zfHz%EkU
zS(*BRjYK{S!s_umfEMrL3Brnyc<fp?_lW4kQ$Nc+;Oln|^RIdx{J%C8A>Tn0;$vpk
zCv@0H7SO&v?hC<|>u8net5VAF_0|8$=0!}gvk_<aVvkJR(co8ti25*VpEayvlU-x|
zJ&6oDbr=|YC9gI7^r^4e<#8Lf^Q6F|G1Se$;oKf-HD<s)Wos67j4C3=h$gyHYU{(9
zs<c*v%T}%$p)F=ad)Wi7jv7P0K+65kpUL+)&0VV>=*}#A(BR6E`p4h+`Esx-GXQW?
z^S_V98_Q0}yOA12ucNf4zd}N-Po;;SC3rqxgp%phgKMLFt7aD$R9da#^YIaUsuM7$
z6-H?;ZNpqsDIUgKBndb<uxMM4Pv~7za0~BRwT3sxUDHs4(Lv0S4eu2c#w^_$E^Dj}
z^-i~1sC+Rme$W1Y256!6*>l4?NHUneYCV-5<;s<%(UN#CQU`m{9Q}ba+{&^hk@kjL
zBkR&Z4juR$DK8IbD8JUOK1d3PJ1SR+F<UGSd7<y@=UYm1v1sPUiCm>^Ob`@ae^fj9
zk1^YqqT=c^vsx{!iJXk^y6om2vsb9aDYCg`-lc1Sjz8Zh+hfZE!oKJC$t_BGwfK-X
zKZE0QR92?n7-}dPdg1iAYX8jHW)13u3%=sXE!XPh_?%PxU6H=`m!rzOJ6mURP1H{E
zwR!&Zz#(V9PStd~hG&EmNIyxEI^_;o34U@`9cmsKkl-QszH&<7&%$ZfG3Lem><z;@
zF>emmjJ=Uf50-!2qJlYFuUjm@Xd_hG$=uVPJb>p2aMB+ByDWVx{x19LhPUphG38BP
z<e=_C-V4T<LY602*p-n<dUp<x#)o4!qI*FiafI(@Xuup}7lMK<AMX8A{Y*0tqyVA9
zzi#jjj^$o!*T(%1kl4R%|1p+<aEUaN?5k4;+ITcOK2_aEmEt7Rfu0H+r`UwJ6TjQ(
zNL9B3^d*uVK1#$!NCfq}L*{uYRwBthfNi4Iog#MFoD=DvKT(*)n|#Bo?1X0ef+T)U
z|LQXB=wqRZ(Vt;T^W8<)|2Ubt-HGy+ZdZckIKt$gynJ2>m;MWMQo-hFZ1i}-(U4+X
zZpMvpf@zPaX#ccm22oXmtkr;lCE(yU&Foi&j>B|HKMt<?o2JjS9tM1g>{oP++;U_n
zSUO-$%n@gdHpJ;r??OmF#I5G3s^Z=jw{Hha7cI6Y{?%?B*b-YD{)UV<M9EjYbc>^}
zX8uWsI72_rKd!W0&@;qq-&k-(u@3KjOLvP>qv|kk`g!87SAGs47N%F)c}{-g<i>In
z^~Y#bk5Beu#kEr;M&cW@VEWg114oxt(W0bn3|uFV<L}s4^sLdWbehk%&O_;dr)QO*
zp7oV)vM$&V7w6;Y!Mh3BP|jMCSL78jhGUHioJjKS^2f501(Y_7s-8-hls)%`_EvZU
z^c0PgYq`ekhw1N{7NpEaS<zwb3MvKaZ-BIaRimx&gKH@tcV7^H{ak_veUB8IDo9rx
zik?j*456qN<}9$?5{FC0*iB1a8}&9l%J`*2>#*QJOfeMYG#JpY*tz(z;^-j<|0y#4
zKCitn)9gGVgNlWf?q+4B=(WVNrM^rNTmyP%L?(%M{NI&OXX(s9wAvq&FIumfMx~6(
z+t738UWj-7B=M)BOk!`QCd76U%Iim?OVm65k#t>o*%4Q3Q3#_sLLI&vB<JAkz0Ia_
zS4k!Z>*^=|{o45wd3j`9DN9_!!hTHEnS;-VK7JI@_$1Evr)8-wma~3Y9UgI?fK(FJ
zXt;GJk*{6`mDlYU*LMSKOkPfyR$V4RLmo;DM+b@+<PM5D#pHQSP~GAddU48aD5+I%
z0d%44BePf%yqh?y!_0{bo|AGL%Amj&6Y2q1IzY0Ibx?Yns-`r=5f>^(lAd~NIN9v#
zsv01$OdDiGp=CbS)q|$o2}GrnAkEY0dZ9(tNvxBpVg1B;Qc=YH0S$D%+rJc`2(DE$
zpj*sxsLpX{@VG{hsZ$PX3Rn&>P`+7knyQ}=xqfRi6@TGh5*J<dI)z6Oy|Z17@s{AN
z8z;&*Sx^YBd=iFfBDy-_N0Ql<jwRydb0?+SVqL(J?EHFX%Ho*weP?RltnagcwbiZb
z)Pheeekc(-5#eKSk@wX<GzoYDn7CN?+P!bR^i-x)QKT_x#eMY1Z-A!<W^zg&=IMjY
z!pm4*+HMDIl7PC}bwp`&0n`~#;1NYLO;5;1>J5V0O3qxqSTPE)k_m)uTj7M=F~YXm
zg=Z+ofR5?Wz_pmzm$bkc(&7|@Z^E#{^-hK8?aNJnjFQQnMQf(0AMxnKYLRL6l8-%|
zxst59v?hlfTS?Xrz9?4ZGU(PxLu{wzLJRqQjX|SU0u+K#QvI~lQpd@}dmyN8ZBCbk
zeaUNOM}YJt(ixUn;PtN?tM#=w1p?mb>SgsgHiKx>0c`0$!?srK`#^s@HRVKA$%Q6<
z<66*NnIV<;i}KRleWj^~m?Mr>4I&3ZTorNx+26`2H<10)Y*<WYcx?|13PHT+=NeCB
z)NQ&hdHplTw!!h^T#Kij3a#>7yFlqf<@9$*XdlBWjg}pidp!XqC;Rab0#W&0yLkHw
zr1IWNQG1zM*Og6X9>tuha6WTLnvXvCc|7(MzzGE<;iug6?E~W%;4)YSlET!yB`}EG
zvPyDXUUv$d)E2s|k=+$C$aY*nI>cRYsly#D4-oG)5{Yfvp=|H@z+!BNh9IgXUB|w|
z7;=K=+Aepkg3X{n6a=T%RBEzHwMbKOQ(eDUqV9a;N1McB?|;uwGNU=o1{kD?K9ZLS
z07izahQxvNCOsR+kn@I0rn4*Fobu0#Vtjlgn?~OsRJ$qjLBUd5y*lU14nWg)W$P5R
zBF9{mgEERa?l~Wh_Ujqd$e(qI=+(*%6f~)UCt24Qkc}k;vHf#GuZ>Z@iOr%Wy)=E;
zZd!G8Gl;U>^hH1vw9+s2m4`^tC{x0`zRQU5Q%)uO-_l#$XA8mwYZZFhB{%As`RstB
zq~5~+XEBsobm!2@WW}dW8li|*r4W)z<D~5jkqH$`bqjwquHReu(0+4DFMlKi%`=Ys
ziE5!MJmFQDqk=iJH1|@yE?KH&l#WnR*@_rjPv-8v+H)K(o66f);X__?<;P70YG1<6
z?t(+Gk&Eua&d4ah=O$Tu<dD~Gycd9sDnb1qt1-#`MTxtr86<!I1GncN(0l`wNSEMo
zZ^L=y0)pe;4g{cd!Ez~9YjAh!0tW>76b<9bS&lcbB?9gL#*w|7V<UwrwdL5t@8b9^
z(OTME_to#MrIqbTYU|iSOBm1BE5gXS@nL;M$x?D4$6zms>ZOlaIF}HX4aRlOx3IAF
z8NsR>oGxi#8)hh^;7eNU>7qM=je_iJrg@#)4-%pVsz!RP^?#_J`f)M8gTqLxWZ~k6
zg!-)As2{Pn_36O3k#yw%)S|@=&R06@Fy;FEZN_I+au839Dbi$PTIT<R$*7>{=5}CP
zc`?d2|I)B*sDEWK<ck3PGdA=x@pjQvbes)B+E-%WKEqU=xq@{DnGJCj45OKrOFUCR
z4x1c8SOA?x)P1};3{+nSu~vgNk_(uQ)6=fe;KzKAp|e1d`9$PmMN6tESjy=$<cAZV
z`ctY^jGlh7cp*>LTtmj;k#SL>oDtgDWh{iThV;x;FKST790K@fBOR-h+fPWGPim%e
zzdpGL9n${1qh6(*V6kszqJI9Wt28k8&&gXZHlw%7OZ-+o=~rawMO9cw;?gN#z(S`%
z3u;hZ$XsfFOnc9R%tEKugASsu)vY-mC}dx-Q~HeJw+ws8)F$;<1u^+g9)=)}1^EF;
zO@2%xjR=RcmyZEhi@X+A-+g`&kc*(*%8f%jFy$M{(hab@`L?0<BB`RLW%+!C=8C@u
z|HjK{RiM#j$iPJ{AHTec(B;%yJ><eNi<i<O`VR7HmL__=QZloIXj4_H_7@XR@@>tz
zOj}JY%Oe#mHP41j5$L^26D<RX*M1q4W0|CFq}yTf%x7Gu=)7Nb(8TN9$*pZ5_4@HP
zPCd639Pd)vJ~hJ(5^RqCBYJ}%zG)?W7`16{E5HXM{JB{2w9O+n6$=QzWz^IqbcdrU
zH(AlfHj6to<rH@>PC#!9Vhu2I8d!uWp~cTkm76QXsdrW~<p+3|cB>bT?K`JbpSVAS
zb<WXLF^f7SP#wjn-O^VdjcT4iY!GIjz^(9I#_TZpKh*J|42!JI#SmX45^FHw*d^jv
z@ZHezVUEJ+g^S=?r5(Oh+h5-G+8~D*p3Z#o;oVvok-%h_A&e501)a164oqITBv7(U
zow(se==e7NMwL{WWTC3I50O?<pk!QYJ}nei3#!^VEQfTFV-pLiRkVU|S(mUydkubZ
znXN5XbbHQ_M((k7u7{?)aHm$BUg94SfwTsvj(CiE48a;);YDQ{nK%f60?BCIrIZq_
z5F&LA4SkBd|Bq?g5nauss6~8uW8UvkxGz7G&L}m(z1waVF&!p9G+G1GAhmF3GW5;~
zcv5RFN36=IF#X6QUG>I=&;H~mzQ<XmE{33YKU#al=z9RhFQL9xR1K?NZ<?2IE%Be^
z(Fbc_r#LfaimcKWz&W~+Q3Hf5xT<L|D`o%~ub%a*nM4&G`%&6@*3sw*S^F`^xXW(7
z6yG+wcB}^fRLe^b>c=xr)v=zCaa@(s8i($DYd_ehmiI}e?N^s`oU>9_QGW{q*@&dS
zo+V6e{sj`_F<kMnFI8~FTXFc<+KTt_#mtg%7u3`nv6#J>Y3xTpYiz<^kQSq?-gh&T
z@!Y~ml(mZ&K_1mRe~i0CGJ3FoMxVr6J43=z8<FHjQN)nl7b5#>=;@y@u|^l#9gn4{
zj%h?)@+E>`cR{D+dEHVCL&+2LXhI_eV;?)vp1Ty1!IgWgVwZpKhA4Fl_8kK}fthjA
zAss@|0Zk?X<-b}|MKBdOd8f#>?2s%tb5Ix-v*-Z^y|g;T$l(A{>C8im5_?h$PjT6$
zm}#?Z+()ibCDQei2%VWh<O+&Zm!FS~AsQ~(t+0Q0_DJ!jqiZIDYWI;|h5)!YuK<6e
z{p-B88-?=IuBBz{eVj4e5E_S4EfuS&TTSJkqFDVk`&E(o@%8KXuUd~igM+Mi5-TQ1
zek)m1r8U&VD@;0jk0!YCZSi+|;300;7UN$sBFz@~V{g0)r7dp$jig3AtaHQqlU_U&
zRUqx}?NPyHi8chy78jewGHtbq`d6d+SLqDR5Z;N7Gu~N}fwG|=M}xj&?_E_zbLTmH
zz5TqE82X(a1rrYvwM3@ZQQDW3LTI0H*skpkyPhrUDl^c|jBjnCFLD}*78gj{I->!s
zHnSKtG(f72wUK`SE*i=&{KorPV<KGl^5XVHU!Clvi?{9Lqf`ghTiuW%oeLee>h_s=
z!k;RC0QY&eXQ&JUN|Q(g8S;h>%v^GBBb{hHU*8^7Qkulsw5GWpbmDg{q8J$u)fZJ5
z?nU-{KktS}FBUzTJRWVd6G&(61`b1I3vhI!z=!_eQ&4eC)+ir_XLFlAp5wjFt*{+b
zOB2M)6%mZE^^QP@|6~yj*h<|NEoqLvIn-i+{xF)y=y|+EN3Y-0Ec2YJ`|3&&@RG&F
zO*=2V5jS`tRXRL;eMV0MNK#zJ`|>6wAI9gzN3MejG@NxXk%CltfWZROF3FXcj>{9a
z^y5q0k#@cmP}Snghucvi(6vpKj@e)A-F7&l!x5c6#QjM(827nOaVE3*X)l!;odDpW
z{m<aW&icCqQ3r4@kc?+p(>lBFDfZj1j1H&77AX%-zDTP}?fVxgdVF+u!@S~X*NyD=
zcK!G;)p_eA`!R3p49Pv++h~-ZapeG>?`hl1C4%%A=CU5_F_T#Of+Bh>33TcoHFa>p
zkLRoUSQ819SxpzD?4=Y;tG_VPxZ*ma_fG^gzpMH-iCXI6QQ=4dCSk2?M%6{TO8c{P
z6S_w__{Zq$UGbrNZJU-!kULq&L86CG@9P|ryT+a47(bI!jt}Ch5H+%tX`G>26ux$&
z17=Ym(jzo<ys~h}*VR9kG=Bkm<C|O+i92Pb@*x8&(whe@Uyd@&g>C0O^`{y7K=;qR
zeMoTX&!GE+#GMBY<!cQ0AeWfGLZ}%~mMrku<F6lP+si(<t6hI1>KK*j&<n{kA-ywQ
zdXTmY`}wzWlZR^BVGeP%cVqN8^9IffKI*Zxh`48EU_woKZ9`+{$5GB2uYl(%4>`nm
zKHW8C@yV`q(OV`lrlskM!f=OR+o({Fy*O<^8a5|k`@dD(m+Z$pwq!!VKiV$DYiQmZ
zkiM}f^++{QM*0#&=MYfu7|3pt#ur0_P&n1u;I^%GIEP70j40TRbSZl>^h<kFw=M>u
zu|R}ncMaJ`_6{lVdJ6sm2DmBhp<A0@Kasj}w&$q@6)^A2*cGUhl$f+RNN=l?7Tiez
zIf=Kr1!<BPgShBq!W7|nsmIBuH$UbMq7cA`F>yB+6>wKs7YPk^!v5CNlnC@&8j>Fc
zx}hTzV`upjIOT`Ju%yNQG~#3?g5#+aNwD3iS%mOG&%OgJ2>3M&zI_g>+oB=U<~aM!
zABUa98C#5$^+QJ(6(eZA|07{KyQ$6oW~KAIzE80LjBd%T`%rV&d@!7QVaFd<SUjey
z-v!aPqUFaUSjOAJ&~OhTu7uwM$t8i=4tX`Q$A$?P>Z%Va0Ue1#HWXCf1v~TS^-9CH
zUhh^)5_Y@P?yZ3VUlHWn1x&V@kR=d`$$^OLj#N};2wGMWZPu)}f=^XGOOktiIZPgv
zvIvmWL|bk$W7RcUttKV^)mYO|9g+2=vIW{!6dZT>pcmnTu~@=O9@oJsG2V``!0`Ds
zQRDPk*lq82z-LenZ1!IY2Zy%h%r+WfOvCB_{&Ew?A`z0V60RUx>JGZhPt)fo&K%0g
z;J5Mp86$V+&u*e7)R54BMJW{~_8xq#zgaROqbskk!VXtILT3hOnnH!FPRY!bVQ_b?
z$a*cttYEAX&OW>hzK?lNW{7B!k5ts9+J3-MNSh(U9by*gPCR2MSfCOsDWUAeYKAJG
zdh)TUfm2k+fKTO*$xeP{+Q4PV`=j>8>B-ng0Fa_I7A{jpr@M~)FtPe8Zg_x;pQu`o
e>13Y0jk3ZpiPglH&x$X$&)Yn-7aj0l&i?`olwD8&

literal 0
HcmV?d00001

diff --git a/docs/landing/processes-light-720.webp b/docs/landing/processes-light-720.webp
new file mode 100644
index 0000000000000000000000000000000000000000..3da2cb4b2ae23569d3a34471519697246f9e7570
GIT binary patch
literal 26446
zcmV)AK*YaNNk&FSX8-_KMM6+kP&gnuX8-_@)&ZRXD$oML0X|_altv^Xq9LeN`e=X*
z32AQJ@;x9!{QCc{Y~snk=0yJa_V)P1&&j%T-2WuPQZBkEj)*^di+`2wu<~Z=0QCU<
zCF^ki8ItGaukAjnemDAG`7i5V;{RU#GyFs4AGm*1{nh^0?T?hdPX3R~&*MLCe|P=o
z_oMsox!>x4zj%-NH|)Raf2n%`el`5R{lE4fR&T!Sna@Ag`U3j1^Y8p$<NWddBmJ-V
zKkk0Q{&W4${(tvxfDh%L)_>>u?fxJ9_x5k!|3qJ*e}Vsv{u}ap><9S|_MiB_;s4G4
z*!?7bA^(&7kLOpj@6A8S|L*@=@CW?I`={*B`hR`z{$IVnDF1l>|Nr3lKK;A@|Ni(_
zEIO09KSdy~DhJ6B_3AI3e6JlIXAR`+r}-kA8XN{for0CXpUTgWv)C1Alr)Am7M!5U
zx^qRpM?L{^YvJs#A>Z1VIZ?}d@n=k^egc-DheFT*=G&=@y=vt2ygKcz+GF2k>HE7l
z-sV+j8{E8ayD`Y_lMM%^I|hR^Ps>XB{2*dMB?*+1tce^a$tU&D_kisB)2P0Sj7{BO
zWr7hRDLaP^YBfrf+|A3EuB|RhtJV$_5lojdvX@Vxs0vo6dKFtIefK?|QKYl$D)cg@
z2$*yW=YT@@7yhLBr{cfba1)+Qo4V`z>xzrq%B<sinN^%`b1Hz5KCA^(Zv%_lbDdL(
z@Q4Yqm@kJOXxX3nwt)|E@Ea;lFKroCfU^7OA2Iy|)kzZ>_~aSHXC5#3jN`@s5uA9x
z;xl9&6uJ){V!Q&B6CrPNFJLTi;eGfX3qfr&yCSf&LPr%Z{CcEp_f6f8ZeosWUzrr;
z_zX<pN?bOvYYT$04PO-J0#e;7C7er~#Fdr|(CqiiiuAEVwY#prt`)T;9Bx>g8&2zG
z2xs#rL0+SVk6IwbELwcz4|ckHv%8O9&Ndg^O*_lvO`}$=R>LJ@qoSZ$X0Z0{IyNZ!
z4V1jXjr!Z@7kt+gFbZp~@|z1Mv}0D?xggLK-r<^GqL&LzUAc+D15q+<>d{KliO1w<
z!0e{fEJL3X&n1SDrk%-|uDwkP3*-_H@mu5@zIL<afGT{igknUA5L~rs7&Dw%_*P(1
zxHJCTMTJWnjjMX|Uq9zwI2@G6;8m))Azl4FX9jgVd0qpZE<qt9bqy&Bm~PiOneeA?
z$^!I>hYTP1)$k2l`04NPyi$}6{vI+eC7DYn|A<ZBHvG#Dpo|?mfDP-F*9PHWbVsDq
zANKCR>OTGWyu*vQo|ulD4E|jo8HE)`{M*=!_8?+?I_2A#yr{iWV~J5;gR6I2oABn7
zR{rb)uW*hWD#w9=B^`!;HOKBP@d^_qMZo(?^q##ipg;s1`1mcd8P4p7GBk>HtrhDC
z!cE0qe#tDK1K24u3Ki8bc4FJB)A*RYt^Eb8CsD|74!R{RYS|}_M|7^}4=-g~(PJ==
zo0f!XdNY(cCC{GKL7~&@o<w)^{^P69#oh96qHB!*GpofC>P&WxKB`eLxgrFoe)m8{
zvHnV8X=49iy(bCl6lViYJUERlWXEa1zer`vP@`zSt!Swws7D^gqiCp*EreC+{^iw4
zHFdaZKZp{o5nBU?NlodPF<dVd+z)h$Ue(iEA`G^mH(0(FZqUfNLWx?2eJ}oYPrCMF
zu-;i5%mCf_%eveqeTws)Q~%TLo8PP3aCV>dAHEF{?+aBGX?mZP@k#?SjBhFfMECdh
z?^*PxJd3b4RICOk`SNPX4)yyx<lvJdd+ap7TcH|<WK`tD(m)RtdwZb3q|iNL&cGWf
zI{vGdM|&faAU#@yJE0#=^f@)?cDXakVKg2Gdq{)5{S{!cVI?)Y(o4Y<ix0*;*V{J|
z7!fn4kB`&5^z17{rt!*p^XoDTk><=*s~B$nc;B>WZ`Is(;~|{xh()I@YE!X{x}R&B
zsOQHQ^(Y<kMUVJ2Ch4F*R@Z+1T>&MYj@T?0?CC6#7bo!OHmnV}X9tw|thrP!Iw`SD
ztSa8>R>2iZCtRX$L~+@7=;?Ilq|;Dc;AYdUrCl6GW*RipL9vp7W25_(zpB&Va3;n>
zg@TH=A@FJW@G<V?IktsSO>z99n}$@7->bOo#zQ&XWRqGFYJdTf!mb+?xG{zzF!0L7
zZ$Y0{e!|q^{Slh_fjWi(0N|%smLQF8CYG((sgHt7Ji9zlSutTfxGE&$wgqQ40*Lpk
zsmUuYkn$P;F<4lI_Fwc70#NA9eyNOPZBKDw+mJebb{8rI)8%~Wc$JX<gOWOFx}3+g
zD-(%;*Bv56hW%Z~ZZa9p>m-`cqE0K3)bK|&;-+cC#=!n7WARH^Ve&MAS@B*4x4Z`v
zODY?ZG4GAmKz$H)S)7jtjRN}Bd%I-rQ-)~xkO;;LFXTIr;&>j#Da;^_eJG~5O@z%E
zZ|Gu@5Pdy)UODemg5>9uwK}|MzKS;Fs(r2IwQEaH+3k?O&hSpheiTwc0tR`(lCBtg
zcBj^S$T+-G=dZX9$L_4~EwVOX<_?jg{`~*+f;I1q<s#gcB$Z^u3*l@|*5HP3Ig1F~
zb2A=Sl8k*6gDSfGu>w)S%Kxdy<NZBphDHAcjUaKb)LN#w{bFTv=ky?iV-6*us{%I%
zeN0hw2k>~tL1TKrsReh}JNuHk|5mbN3t+OJTVKC8fwCM9|HV1g*cAjmMSS#FOPvJ4
zR@y8^ovEX-1vdu5qCL{_3YV=85wg|}XU0-O4Om)RJtn-BPDx#vFJbjiBjhwp&$8$V
zHrnAQ$q(JyWBd2<c%b~1Er=N1w;}0DH0!pxiYdc&uhl^uhY@HGe^o};`lLk$k6QJQ
z)c<+8ZX>%R2ik=A6sb==#!yEU`?HoTw*6AsRepJQT52@BtpL39`dxS;Y|3%UHf%a2
zy6wN`v|`CZ=KYMY*{(|_5>q&UI2NiJMz#f+oL6n`gYQwKPX|0^=AUY~rv0$4fe6M}
zF5f<MhL;PxV3`WTmmKdFV%zQ(d5RSeX%+d4-`Hz;F(V|C;ZRBM_m-9AfxJ^ry<tRB
z_6XjW<#EvjJUbuwsy*y*$D|=lSZeSF(C4!0oOr<uly7`rIeWf8`-;rxIFsF%g2s?)
zi#}vyM@z0euFx&_+z)-vrqx<4MSK?Jvvm8JuD^w&kopAi+hYzR6fwx<pXZ8IRNSAP
zpFUU!7i3`jN`vF^Z-$iR?rqHkTv_~_xl(5ueR_m@l{(TS!r}zzx^}(a{@Gn|HbURm
z7!a+8GOIj6W&DR^VDEpSTt&ecWGM>%%bvN9kw`C+C#a7wu|1GDcdsIipZ4?2j6rC0
z_~yIG^cj>#!cP9eg!b~S(_G`~G*cy9CVRU1$Z`3$zn0O;ffruA<fl>J#??8gvzAdL
z{lA>L<NfE4tH-M%d)PwD$8c9L2EM+Ne@Rsj{6>F0m+~G<N~|TwENKL{iskoH>7>i3
z0);b*?Y-mQt@Q8ka8*Nz3{OqOH<8u$JRBupTsoZE*WQ*8|2$Y$^C6t=zEav`#HWSU
zP?4lcQ90D@{_SVq4#5*leGWiYN~Zkh_{t(qJmFOTgPCpCHu1PeY5JX(4*iK|92}E}
z%Q>C2Kj!v!?%oc$umiIjWE*9H$}c~|<uu88<*<J$vugTz9u;^hXXvT_c_$?HySB|P
zEo{v5a&kg?eXFiy{-o3POcK8I4Y0)@=%S0Ci{9oht8eZ8GT>u4Ay=5Lx<oX*1z4>#
zx@Biy0i^VC6N@p_MRrCf`8C(}HYt?HgVmezYx>pkF2Y9gqW-*gQt;eAI1J-m%fxXW
zshyrMLI<KAF)UxGA?->bHglAwdjCQeCUF!X`r&7fnZWAAv59^+ZD2VtSlTjGSH{iO
zsO@N>8rH(aVK&3JKpn<`h^mjB@vt)6bi`I6nSg2RRXxa-auBQdw?dg*vc#q=X>yWZ
z8%=**1^ejmRvXwXt%T}6kBEW-H9F!>cXg?4_oTg+VJWWSa%?V%I+kvN*=%`BiKq*@
zvqn<vT}sJVt|cqR?W-o7by)c8vV?t)8ruWQE%_3)L-7%dDId5Et~uprBZZ1T7BU|g
zauZ;VX$wGZH@TS&Q>=VGQ;Q*EWWr1FQKI(Mea@iYj9_hr9mkzJmFjCuu8h)h^!U~x
z+Fi?Z{8q2zd&O$#D30AtFtc`kj=J!&JxQnRT$)f^2i++qm^zbcwLl>v+;Um-c@8|D
zFts#HHf`4Qe0h-5lF4U@TR}cDYgGQNnNSVn=YVmR&}*;kY?@~VsD#6P_|=C*m-bx(
zy_;mD%X!>3C+>?+a230Wx_xYOeV3M4qI_r(H7V~))xY6k@a_qvh(K?@cz_nmvH84Y
zMFx*r^^er}erc%dYivYm0MQQ}Rz6YKsfq}czDt&v?%F;xZ|*FOgv;MUO6U`)U=f>p
z5%>F)|3HVxV|~G!y7E;woO0@hT(_EzuAkkhotYr$c(#C{vH0@4K)1cH%Y@aW=&e%(
zjtj)6_<z}YNx(~xa?n}Up#I}1=bM-57=8A=>rhmEb>?w`dv}^1;3lg^9<<apJuz^#
z_=_XET70xF#fisKXEB0~3i-;0N+C*M@WP`kKW8ID)8Dy|vyJccBnm)7c`wOBHq;|Q
z;|$&g;ZO+Wm#7*EO(uw`&-8l}^m=jl{W}mlejXZDmCLfi8D<c)=%J=KykDgH%N#hP
zq|D+%?-0n}Or04OiDMG{ZrZY61xC$DjmS>`ydN<p{g|bfA{rDJuUY0n;Wo*~!|#GG
zpIDLKa*;Dhh>=$!S;#_L6Jl$B(vZ%5;6H-~3>X&gdpxk6e7llrMW#-ySgi=rUdJj|
zx-bJ|VB$nF-rJdXIRZTiJKJ`o_vz~b{5LUD`X->D-NTVHTrMU<O)+9Pb(R|tMT*bC
zn+@(L(&)3_8_jB{XvbVX9Vg38Ri+<Mf)_mjkhfjUO&9z|arwUh3w^hs;7ep?(W8M4
z3U2B^0RHkg=CVLnVZ0evW+*OwTR-w@m(k+*H^1)+?j~z}GNb#S_Z%Vn)!<9?^iLUt
zxTECAT`euOp0laHDuY~m6S~#N9azWv`_XeP)`Qk0Xb7)mgwfX5NWTX;Po?-SI9$8G
zVL?e_;{&DBo<Dei-o~@X5&H^~+}&SitqIy&gza2v>OQ~((!nuUnYKe6${|jmm5tUF
zqymIpRnk<XM@!tZHQOHLo=tjuOE}qZW~+D(M$Gj#tb{|nnH|IsuJSOEx$GL$qU<#R
z3{H`$kY_v6%D#WHHDu!-n7O!~3i20Low~q#GxK2Q&u%81wtcJI`jDkkYCU_cJT2+i
zbw$-DsLbGNCQ<=kd8ps!#QaUH$pJRSF`;(PR?FhZjJC>NK*>*N_hgUTog7|CEZg6Z
zy1LDeqVIK}-P>_ODonwBTDf&Tzg-B`2@jG>On%y-rP~nC1%I!G!7>0lxE=Y=Knbyy
zI-&CMp~OuP%6hJQgX)}yW5EHKcXy)RYNInp|C0IQf71Q^Yzd1gKk#P8$qK8%Y%N2V
zSsZmdFI&pA4x^(dhazMo$emxAq?ja4d`jAObr_OCum^U+?s+CSrw{|@zZQI0w}gQ7
zfAUSfCSP}fLCgQMCyMBgv?KI^DdJkIUvjvz`;NZA$@6>7=$I7<#*_i74o${JFB|<z
z!}Th6=lX88E%MjT>wPNzAA>OF`ZBlwJ9ZUubLK{!>lXqxvzFc$M1;VIDL;pNZP!!r
z91fttbgupI%TQgSKWC2uWtwk!K<|j+auE4>rXTCC7A)S6;J&e3Ic_>ZD<&ujo(UM3
z{7Xjqn$K1OGWZlEaE{WY85{9lLea6Zj$gl6_vLNt7xg!l9|-=0I|;{KQt#;@X&F`C
zd>@(kUi$<G%qI>b92Ov5YnrXD*e7ywSVy(9t1xzsHg>o<iQ1W}GQUTDiX^Egz<-+5
z1(vY>dnT)Yj``B4j##FF(d1RA-8^DaoUgaBbIe^6Y{9ypG%J6P77--iYN;s=3h?h!
zBZy6XWe9x~rKDJc1FQt-Z;aJgkaf(}Q8%b)`(yixZ`_}MCh2X<C&=kBl|MA!!vfnB
zyOBc{O+o(=iJ`>REXv^X|5H0o;&H`e69DRGP>Wr-$cjA@vXt_lJiN>Pgg@a}2Jo(A
z-^nm9&D?p+_P@r&uhY(LKk3L~_0rBAnE3>&9M?-DQS1WL**+<_R)nZ9hvFfpo&_nP
zAigxY1%K(eahchZ{u4!)@RQbQK8<?|R%}b7u3Aq|BPbWC<AfSq7B_F&^7Zoqj{;5~
zUCfgjj{eoJE?yu-<KvBL1&aBJ>AC)D!^V@npp02Mwjpi6Of00C@NWtt7ykNtg*UN&
zg)J@I&&7<$i-WexQ);gOi+2$j*yuG=!KpbrvDMR#qaiV|5VxY{a>%4c;8I!@sy@Ou
z9Trd)1kCq_x&jLfUPfR9kCqifRp2~TD?ouNlPv6y=npQE*N^ENU6uNKXMT1s^j+0p
z8+#5l&wC6v;nu^;#oY0Qjs<v>WP3s{j)inkY1^-n@0DbKOLc`Gn}V^*a`b|=bvD24
z8^j!@U4g2-w}3CG|N5CHnE0*e8{u+R?oO&O6ylP*w5$<IRMfSVxw(`GSPq%0g7R;F
zCshC9vC002tcm&pd7?s4Fq{bP0l}tKUg&EnD%aF;phDMa7q^rhEh1-xA18sE=bjcg
zCUBIkQs5-Aaibi=XrHOoO!$p1j(mb<{fkI93dL1M1Yq6x(+QA#dJhMQ<fQqmY*%E2
zu^9ZG?08zR^FLuv*G+ermQJ<hA59#ZP`b(3uc%U{F{@A*D_0mnjP$Yz49A-zLU=nJ
zEk|Awh*CUB?L(FUE{!Dt5;?U8zHgScS`7%Za3=O2$j7XeJ8w<gz<dLJlB)eHJx4h_
zJFI=kw4|&4pB>X~HxLN9ZV%ZWG!U)~Oa?r$&3UaBOahLSs6=5$c`}LC|GdKZ5}{}{
zPA4WXRsi#Mgno|Om-QD4(j$2e+Na%{#H?a_dmy2mrxivt!6+<p_Ulgf((;E$PXqUn
z%hQ9dqaqPE-^&dad5D>Tlnsq+u28`K)o;SfGF`8b;fV$z!1M{<APgY)N=!((+}VzS
zlEwCF_f+rEeWJG61|Kzl3z6L|u!L`8W_F@KG3C)jju2)*GiyNkGN)eMrXllgukfh7
z3Q1^09dJe<b!cgtR)-ErPdMKYLHITJ&bG>yk>>nVgy+|3h&%bJ5091cB3A*a=UH)@
zAu2nMD+SB*Q68!9QGu+V8VYcAfWptV-}(YKPi$Ljxz4L@6zog?eDg`J*BKLYkbSAY
z;h!K+KJVa-myvtRBhzk@4i{3^s`Se$VTo0I9JBiHTAoYtd^f&pT^B6?4xd2A*Ukx3
zeO)74?o8iM(t(<&0000000VZ~adu1Mg|d_^FJk7!y!))>)j_CZdwEmJ|4+@#D<8dB
zUwU2gZJM4uE<9Zsiynb~0So+FsOU>&smYapZ0q<%Ef_eu#X3A+<t={VOYs`E3p1hj
z{#(iH$c{jJUq%OC?Fnk6S)pTE>sZ-f`iw&so7&MY%HVN&a&;%5UKJ=#XFMx9*I0Jg
z-6C~1CAxRUp;?`D3_j4K)ZPlXW;IXC<vu>nO}+n^3dPiqPrcXwrtaDl`e2Xf1Lm_p
z9JPt%F}NGQ$T`;kRjpEHYf;iFVjlBQ-zV%YUxx^$s<2MH7o@cvtc1XkH-BVg?8WYi
zI4mR2qsLHwOGhHdFHtzUJcUW-WhZbO_Qf%ZWfqXKPmaUJwoW=)tnP_H!1&Hc!}?q`
z%1R5a>PWg&zNkdoy1-Z>hVup{kf3_L8XSjGn;*#CZoJCIIf@STMnHcrKC1L-;^l&I
zSk6K_*@e9KdEiB-J$|rFAt=%T_ZKkyiKQokPv%MjI#l<e4+YiE!Bzf{98J7D?j@Yv
z@KS|aJ?~6goi364dXVNx9ruw)yk^dvdOl%F;tf&T=mSai%r<kCi*;0sgZGS^^LqVI
z1rABBpg>6^Wx~iDFVLdjsCf;=lJpdBd&s%(aFC+I)8)_}xf~TkBLt4=jIO+2=fk90
zbck^%lamU=SJomcMez^nw4Jc%6bJ>#uxLO404KE(F>q+hvHs<o$5OPA9roHDL$a(^
z#8LrBpeI|sCxrl}zwH(!4*^-+)$mP(kLM8g^`W~;;<j+nrp|(Ai&hjMT*Ko2<_cEu
zgym)68E2p{alC}GezKlM6axMdgHM5J|NrW<>ry!~-5!oVgK(?{0sXQOn@+5jrP5wQ
zJ=-9TY#R<#j_!ny<xiLF5Xi%MPpOpBUCT0CV!nQIt!Pa<RJJh+ZYX`h${gaAwoJX>
zc6R_0m`D$ci*9lqUrqP6Wb{##E#vb;lm&hnHj~PPMOe~OL&BVnY$|`iW6Fj_w`&nh
z63rO6%&RVBAJUPlK)e)V8=QE(+H7XDG97ntuN^zlx0#hxVm26KR=#3Zc?bV?jun`C
zHTy?JEc{T8dnp^gnd5!LUBBsnahz=e@vC;2e+?(Vg8HR^`FR4+EetIgc!X!mMkt`y
z>lKl(60iuP`pwU;5c9Jz0HX?V+Wg-wZf`ECm8X5GF{-G>V^OSDF7X#m9F3PJQpTI;
zXcuooWn1skm>Q`|;VspYeWScB)LB)0UrGOOfN8TCP$YPhzz%2^yUhSJp%*9S2HFn`
zF{_3iXYQkQ8M7+u+hv54Z>!3V5@UtoHAHdne?C8%FgGT(S{}RVk%1E2+jKHIn?0n$
zn9&ehGXBUu{V}+r7guGJyO9_yyoG~*fy2QmYp$~@Q}60Miy?Bb4n+MIym{Gozduuc
z5ZP{09v;1<X$WiIizx|&|8^U0ccRZCRka_wMTRwTB9APkCI`sO|7G^fCc(TnVKLn%
zzJpw^|GKB9p=U^SUU5pi0l*#k#9!8~Bj(R@wlW-h7cL@mkN<AZ)cQS<rXOrIeyBom
zj2ujwVmP4qTt#3>9rIrDE^th>=Y5k~$qMyiBE%mqB?!}+4G3>%Uxc~H(F1dtYp#1u
zJNewMr`C|l#~FB9Mre@5$DV}mLgu%Zlk<DxC$#=x(?XBviS;cwPFG^Yih1sHVIcx@
zaN4eW(8+;<cL1=%<t*09c6A8OPy$V{KL6={p;g+Es1~kp8rVkx98+{kNllgaal*i<
zh(_Bs4D~#u;A96hkp%7%AVnxEk_QNziCsR%o!VT4uLH1BUqIlBBCzfze$_$SI4QoT
z-2W8oX1lTvvLyvEThbufOb-1Yf8iNXW67d?Cs!h8G<VnuR-r!0wzrnTt(new8sPHS
zFyOP0>jMWaRN%cti<@DQ=YO+^V??bX)qJ%a#+2p$Q9uL<pRWy_LsQ#d%V6}4dLY^D
z>Ug1By3tGp;@OAqwnGyfGhfZ8Ba6x_d$%MPdkrA^BQ>GgM#{5is$NP|gr_fK&%T-f
z{%1ddB9A`c?9Q1Yg2hJ5L$!+%XZux&ErEa?ui`LW5L^Yo8K7?+et39r?Ue{HIGn2G
zFMdr^cicWQ5Nz6ZJys8RBSnwyQo5>mV>+CHtI+{nBS1c$4W``kp#ddye=W@hb)>}o
zW$dSpxRSq^RvyG)pjCmTgyq1#+qlrLtCUdvuoH=hpwdo8b-)01WkE#<MXH4{qs~Oo
zRrn5l1@l~sqM0uke*x=eMT~2M3-okNA_0dGp$R*0=T(h}T_YMv@PnUN@}v@Rqk%va
zcsg*2C%gSq7=(*RP~fAFFiga@dGJ})CbUgqIDlLeYy#1a#)8!fKbk$7E!mPmT9vfb
zDmt@-$*VN?yFsXiR*MxNR8Q+QoDHrM9Cy14RF+#^Q($Zlr&4!N#4P8Z%ZLw@_eO<<
z+PI{<t%XPARl^vlk<X5szWNnF{sP0mUS1l!F*hPxhotFj)^Y8MJm_p<h@<J48`X=^
zl?5d~&wZf>t95$6E(4v|)(azxgLR&nLQ;Lt8MU0lIR{MiV&3oc2l<X;TD4UMzh{jk
z>e5X`pd-@)H51WCaGhmB(%%nfWl8>4bL4A&%K(ITwhQmRpna=BXz|cz1xzoC@FJ};
zaaQh_0T4l;sOz_vxQ=u-U0!){_cM!PJDyfVh@l^P`Zx;>iu$L&i5GAF|1m~GeDn<h
zc{~Hr!qjp?33sO{X5Z@V3z^-Q<ycVWo30<>b1NzLVpa7^U2YCRAgt=2*wk3V<`nMX
zWy{+ux##{?0aoY$H%~FJ29h21n-=J;{Ge#A$IS5VOG0TiCf&fI6xo$ApTG;=63@=d
z`puEiI8_JP!em~+O(F*k?*l_2+HLLwtQ%Zj_THV0bH#!FfbBLgqA6Bm1~ZoIa$>Yf
zB&n#ce5o>mV#@qTT-2)S6H?J=!R5wpnJosg&Rjj&Ot}n0jLS&6C4bpM;Do?E&bzfF
zjbfa>9<BCp>LK--tJnpa$@zAI8h`$o(*zf5(i#w0X=9Nomt#<kztm+r$Zb*w`+e8#
zWz9aCk#Qv`#{#9Vtr2YG8z&DmhQmW%G(N;&c@ll61wwr+g+z8@b0V!J4WoL&Blysw
ze^Ln4mM<DHgaPH8Uo8ZsK<b^ML8sojvl>^yAe<JZN5Oji5j2U1XYa0bQOikCryXzo
zqKv%2jxcM7YCIk}f4swCp|3BR#?Zl$)Josl{#G0CgAI;t5s;k@4SAdTeRL?~7dK&t
zn@<r0_Kcv$gKzJcRU8Q|R_{>NYVS+m7cT`hY%xHc9Jq`X3B%%6;8$`_A=%l(ZE3OG
zqyu=5Luz>9i#Hryh+=<+lXWC|L-A}C)#wwAy}O;&uk1gw%H%j`xJ6ueyIC?ZPxZI|
z!Q9qn92IRK**}rJ8&L>WuIeS}%WO=Jm9RNt>|h7kv^|!<ey{dU79H4CR40vHC;$hO
zjE==i7w?%jsvJ+79Z+n28$j7R{^V<C;4d|ysqH|7qzJ04e9?eWwy>Ter~qL|Q2Su)
zBAbY~7ye$sPaC~}ped`xl0MZcECxxDdsDquokq}etk6Um62bhvAn+|#0$3g`DFumQ
zj+8Zejd&JjCqc&o`4Q!%XMXNvx7Y8zlz#4(FPY#(bu-JS?%nEbsU7*GZc%gG(TnaQ
z6&zX4UJW;nhULZ8%W}ZEDqI<01Se}vTW5tkcc;10jKHk9i~O9AlfT^p4wfqzT|~4x
zBR;MI{x1Z}E-(9N4@SIp&5|E8Ujy=NOno3b{%(($dOwRlS?Vy2y=h@tub>tq@X8}M
zQVcHZZ3G#p2a{!#v-pHj7OXl(7o}dh+Ue0B&GMbd=dbC~gX!OnvIjp-`6~ISHr`RU
zBAXLo)hnu+0Te|l$NVGJG_aplFHz<x;R)=ZVzU`z|3Nu{z9%&K@ydB%ocPqlkDA{G
zC&{0M*mg{L=XX;KM7X`fFyPkBicn52Jo+62eN`<Z_K_{_ZI>iF1E`?-D=$U}0M3gT
zDbfGOY_gBR8ieGjH~#GiG!H8y9NE;;k9Qd>uL|ZQ1Q`-tb{XW6gyPLop#=R18x2!v
z;*wp1G_yyCG`87|sH&d^J{Vd0=Scj;c!sraCs}hIj$SDec9%Mc?+kb!X~lWc7T{qY
z&!N_2>ck{jJ|pPt{A3bj3#{H&dGdGTMCAT`+Bn=yCPDA{H;6ETY<Q~jVD_wsk{$pt
z=CA|V$aP#FgYTLw4gjBxO)-t6#hFfB7;d+qDR3go=s6&!@5ObvN&OZxd8CY2d#b5J
z02v<y@o-U@fcSxZ1$J0Z!NJav{dlj;mkY^wLCEh~Z-rC_X7`We#I%EZ0%#y5#5@)&
z9Ox`rp;H!xH+X@7rIfUkO@8et1y`rr1v(AlRNB%cwz-J!SRTZMQ)1>at1Ewkg1M3C
zQ@t9KArHCAjY6ALN1uklrOs0QVS~$9Fu5)&oW<YI`oCYN0MPRJRVM({vNIIzx^tii
z5^DU2B#I{Y2%DCkcEs04QUr%3Vo~|$JU*UP359yxszmY<O20X)^U(vvsz<emy^`Qt
zv+j$;&FtIh@z)&ivABV&zpZzblR#O^{Bn3^E}cM0<*Szep>SA{hj}#sb+}1HxtfvF
zhrkg05oV|oSD&j;-(Pix=LlcGDY9hze;=m)jq;1JA3r2I{aVOtvxyK~5BQ!DtpkY$
zMe9qQwSLJb$eOxV0R|SySbNE!x7cnDI#8F4z6&i3WcOnFjF_(Pif(If+ZUQ}`_6pS
zf1k7@J=wa=zlr=Iqa3lWc`H#SGMwN4;rMT6xc_@|W;Q&XYecS$xtKtQ6mg}K4h<<V
zd9ym|MH*6RGM+2;t)Wh*3dkk}*%g0d-`_Qvy_(V*(rO)-cEUYJvL6}YB88}J$z8XD
zGdKdd(ZybW4(0Z#92=&oPUfUc1x1Lgq_Tj%MnUNMdnFyjV)u4)+kUiBZyz$oWl5id
zA5Us{wD2kxKhM>rlQZej3bIrRxPyecbtl2_1}X`o_<Y?J(72LezE>2kf3@pGO7`3;
zu)*&>rS8(Cp7Noc_O2sz6y?Sxe0~Rn`MGG#nvA!z+8!up8&^&9{2AE1eN*(7GBHXu
zJ&xE+0w1^;y{u<)4Hlx1cJJmOA^qDY+XE!1%aeJOj;9qgnU`L&aLW;o^4{$EPl(uq
zz6-kmda{3*wU1A@Cd|NLNJiF{iR8i~8tsVX&yq^Wd4)W#&A_@K`s7&wAjV5R_~j(a
zFtnJW|3wVuTy#W0i$CR+u~h={(5{e75B>bgdyS0k<067R0I_1_VhA|U-IXGnpw7j0
z7Mb^veb)y@)*<-Au@ifgry|+M#2FM>Y1$cw+k(!PR!ICq5Z(l8G}c_iWxu9u!W^Ls
zdDqv18(-k&H=mS7$c#@STKP5EFLJAb?18_`W$cK6(u$y!fxkTcWdFnZ*A1`UU=O|{
z^kiRS9W=6_+Gl*#7zHS;n*$%c?7o{l2swCSA(^gU*e@C(&vv01Ac{~DTXhbPTO(=n
z1!VhZ`s`*C1lmc3+3*N?4|7zi7vj1Brh#9F*lh)k4Wbn#eoOJTBhm`MJd6N7V!g9<
z-*kGsT93EtVdoKM^r{;mH8>O%9hEU~lCT}K{&zCgsmXwhuAGi|^2oLA{bqL~o3Vn&
zs+PvQu-QQh-$pC=x*P&hAXM<N=H(@nI5==o*V?x4S@MinfF#nuZ<!m*I6iLM_&;(6
z4|Wr}g?(n<PTRBR9>IV7T834UwR7&Q901~L^vc|m6ofH5#KTdTVhU%uF3$S0F>;yc
ze@HdjT*C11`G2TWs7X^Q4>z*gqBkxJ86st18z3sQod@!RQFZb&c-!do-L2uUz9_=@
zwI@9MXQR|vs9$5l`9tPrCt1o0I4}xOfop}B@2HzF^`db}O^|Qv5dVEF<Yo6jG6UXr
zS$fLE#)R^~=IZzgFyOoAx?cPC)^@f#BOo>)v;1)$FBrGh?!4Ux<);_=P=1HMcS!!Y
zo}nnST8Kg)l{e;=!G*VzG#1bHph8jvR3j8Y(!t|^nYoxihqM>Y_JxD{v7w>FqgZl1
zG)mU!htvGQKRv@E3O1UP^*E7hFxg_$)1rAIy^wWV9-WKBoK_9z%<b&htX8e_E$eN>
zRM?v(!g*y7<yozkkMIACWJ)BGmdEBHktk|tSb(l}Ow&>74=&;WVWC418$KAJ=~r|u
zAHZ)_HUx(L|5J;0997Gn?uUIRp?r#oya}FNA0F+;3`_(e2sbiKT#8f20WzHPH~>$%
zl*}Q}EY;PX9Z3|T!eY{#!xNLCwrCoMA_6&pq=4(waa*(!j`}C=9oRTR<+%?<b(oy3
zGHeanbcEuZF5>zf?vaXc&@>bJ(hjTgn}^Y!U+Mo|J5U+$_BHZx)_`3N>n#*7<zNQy
zFlBeQ7YNc)22*YPOgQ&=ZkEi3xR&+wTC{Rpe2S+lJ`6ns5GK^`Gw`NFt=yBY&}2y(
z6_hDe(xr5qR!y2~!qi!yslpq%T1Otbl@N4$vrc_2{GY8UbIuBrf}6Z%g~(S#2x@aM
z;z*-BAlS_eBB%$-Pnr{pcr^A9#C!g?%)`?EvWIELGFDB*^y1OFZWYh1;tNBpI^BX4
zAwN&8N|vt)bJoV~S5kC8wWKWs+y9~OhhA;v#6(Sg2IP=M-&|TiJX8!Rb?=Gk>lbBH
z3INKKc#mx{cx&b^S=~%buKjnkT{NlHkvbEo%Y7QcBX3K)xKPn~^O`0JN-g6RC_Rvf
zntah5SIOgg(fqkqaCKyCwagOv^3bcs#-rtI5ERTD*qWne8E1cuF;;?pu?-I1&&5Bf
z8^?!l#ihOf2vbqmu77dkGr-}*gA&6%hlyeeZ7wy5v1&3MfM8VJANyy5BUhm$ikWqr
zH;XRC9QvgQ@@ZoR8Y%;+R72FgV<CwXu}(vni5ivpO?4IVc}}QVW!v!Tv&?s4Ym4w!
z6%5c#mF1krM)r16dDb}g&*Dg;Z*YnNh0*z*Rc~%g3wCSJK)Z(0qbD)$M1CHu9xXcR
zcpx_0`w)$W$#+Cxv~oBxR#1=`^rs#{^&f`l^NrLq%ODX~eUo9`t$K1!EkdbYWK#0N
zX6Hd30x@S`XD~~r%)DnpKvKhoP;KWWJxHRk;8Rd1sNvHvnHHpI(i!$#vg+OP%T3ZR
zBu^!<af^ecbqy}i^le8YAXc<ItRA%qZU*!E!j>8jG+JKHOllZnLA<<b$|Bd)rY<DP
zstj6)fu@GV=pAl^V$v$41g;BjYExXt84FE_Uw*GP#Ld?Bc}!7$mW~rgnOQAW3dE7+
zq(*mDL+!ixzPlG<Yt{$&Z>8qyCi)L|kn*VZbxswKObetRbEy?4>Tx30VY0=ir$q8a
zdm!m-B2L#8i^M^^i#<Px$Hz$!7&sL?e9IY?CVnIV16)C#-2xGGeU3)jk>8;|2CUOR
zqNt?McM*UhBvw#uTD$N})lMxRIWqpBez7U0EG@mIg^M?;bRNW*hHwVgxC_sUOueT+
zol(_z7-RL4FFhu&NfwbK0kqWftU3GXPkfMNrXFu;+Nk=2s6)}D=IfI5WuZh+m@bwn
zb0RVRTiu^2@f#3#!b4dA+I6pca+Oy|^oGMzKEcap*kO20huxa#VXntucjkzss9xU*
z7u$THH}b`O?5ucZ<SYnEttPyv&rP2dz3)5P92HmQ?J)u|*S<BWwIzfEPRK0;^7{m@
zYBgJTR4v+s)MOoBAA`9C48-9`wI9q^^drFqtOMjtazXjE+_ekM`=^7~1Fvf3Nf-KH
z2(@=2iAE{6`8IP0_R$9-+TUl-Rp(G{%jFVQ`Rc>4e^>G5tqVc`X9EYjV*u?<`Zne3
zIZ%<x%|2h7;t5%&k)7TT_}*>Q0SNDu!}+FxUx(Oj1&s}&6(xR4@wOw<3cx&JmyW=!
z76MrR{q@ZOF`ju|U?}O-Y|Zd>&NdYjETK}UVFwQys>W$=ykx?>h-H>Cblsqlb}Mhe
zRQKKa<+WhCkq$#mt2!-Zk5&9FFd8FBh73V5u_Xd(WbPy-kM<EZBBM61*_%!EHp`~J
zylv!$T1VwDYXy(mVqt{!C<#mQLlng%n5#DmV}oBD1S?#mXvd}q^Igp_wEqFGb<h=Y
z2Fy?BaoEMD*##ysC^|<H-zOs71j2;Y;szEs>H7A507Rnh>?`QxjGNZH3dDYp-YU?I
z)}o(5NnU=fv#wcd2#FdO1fy7lGdf>#YEn$qF__mmlRg&mF<_>aOIDGgJg&MtMSSu7
z$b~OwCN&H(Al_azWf5!YQx_6tRR%3YK+{8F^bWT|F=-W20#^mMwJEM+jD@DeFTYot
zVrJ`mJf<kWOGgQ#%&eBGg<?qZ(jz;nq4wSUUtNo_HR}WXH`4QU6MYA}$az$IF5NIm
z(lI5p=6QuicO}}Rc5*;$&Fo>s)92#DieoA=(<u*k!Y7tl9ilJK)_EX^60smuK=v1?
zJfip}{83)FEnXXUXI@}o4~-U)yZH?Q6qKG_HyzFCKDG<cq{cgz0~6KG@bKsclL$?j
zC7=GEeQwe6R&CTgI~+RbLX{B&SkLSoNn&j9=kKLIEGcP5UYWfTlUGzQV|VxIKJ|k(
zuiz4z_PqlDBYMl8aK4_q?OSG(>|y$YHm^K;8aU3Xm;!^=h#X3j0wFg1i7CMPSNi+3
zAai3X+`29AE)Q++CBNC-L~HRg<#z=9{m0yBW$(nL?6@VlL5Z-p>>t_O`xckAYD8gC
z0a-}TI!LZdij1&P)NHmyHs17SD-{XQ6y*!pHlKWPLDw<2XXM;Ub%YhA!w*aCn3z}7
zI~!y5A72|q@R~AUTVXRE0^NZI7=?WvAkSOcmxK<LFOO?rJVpAHA#Pn?Dpz?+w*n5h
zs$P@@$?dH_PGUF<v)sJ|e?J~5`G;>QL*7zvhW;*)`E6g1yZi7!ZG7G`z_LM#S);3W
zLN;g|h!E-4$|>+mTB0@u+aDF)l|+0-o~#j>*QB$vpc_zc;pH@1N5RIcJ;tlet5%NI
zg16ykaSf9KDWJDa>Lajbsq6yXp%^onJdp7k>KYQb0Xa}Hc|`goqwd<DuOWRsciOhi
zC)mUF26XdZOX$0%?pxZ*tYbN~ut?;!nbjJpg)KjL4rlP=!YyLG3b|D+adzA?mov42
z=ip0igE{6`sgC*FCaF^s4jLfONWyHqE(`tz+~uJBAbS*Jun=7w@i21oqa;z0UO5jo
zYMHTOTA$8X$){u>4jsL4cokxWrG^^aY}BCOr?jq!X|-oXt5%^Gr0S`hw|07*K?FnM
zzZ;E5KcuDiNzu`I;g#m;fx;UwB>rQDcn9?9YQUMN&H^-*gOVwO{{-N+nLiWC@neyw
zC+K5g!@)9Md@5TE!>!iMhV8s##&nj%=4uwFHU~wp^apzE<qqut-6p4WEQvM6DF-;W
zMqG$tgNM#^V?crA_5qHd1QJOoDk@9=vA~P0;iL9wu3g=vzfO5uWE=X#Ki^9^8GX<N
zFK1Q6$mZRmy`X_9>9GdGi~$DpERsgx0lPmqIcgolSk1iNF>kHiK^fVevHGGCEu83P
z40WHDk*3vwKI0bmQO_cS%(q{vh*D~SvWTXeF|p+9S|#P4elWzrsU`8V(j-vLpKlQ4
zNFTjo=dIEnvb@>9kD%bApJd=xD4~b!NpPjcD++BJ!vi>kI?f-1C_7@|xi+WfA)TUf
z56gTGsO$F*{uTWGNn?<5!Qvb4bx9k-Mdh@$dQ0ldOPw(tTtgrVQHxfemv%K10K2_)
zV@iEA1(?T_Axz6DsZXlZ&1dN)F#WR)4PTro1>SEj8mJ;j3_8KTf%a*_=N7O8i-eA8
z6Ryc<=w#CaXD0Bia=^eZ&m>5{=S5i094;0Ry3WmsXD{aOjmXtS3Vr*6p(-LB!ht)k
ztJU6s_*UusB~5RYfb}yBoM_F+*u0Fm2fq1NV-!`Qx{j;YDqJEN()zw6&0m)3y9l~T
zqkr_`y{>HmPWU7_HeGoqX!FcHF;V0NDH;~+nWz$q_cznj#%Fp-EVPPML2_YBV;soZ
ziE~H~$nwf3w-CY~^SC>Ffnkz==I%$ssB%8lMmRoQ%4&Erq-<Hd>PA<D5~!OogLPz#
zHFLj{ha2b|%v~5t8TGlH|C+>Ch-HsDoO}q@z$?G)yTO(70@o)A=O&8;H>Tk(Do||g
zrA(z^Hp#hv0RVmE(0bkCacr3fDZOSP@(FJXgeR3da{PuI2+(CIWGWdie<{F>Tz!9)
zLO8=mAmhAvvb7r2k;w}Wmp9Y%sQ>_CTBUUbi`5j~R@uFj50s75hTY)Ohc4%t%+SMB
zja@6Yg{n43=n4-8NE$qYZWFbY4P;K4_~!%Q=oz1)r=RWB+M#=&5XvB}3Vkt7NMeAR
zkjyS>g@%VMVob7s#sqp}KVW<%N061k3qtulv)b4iVe8RXR#~tsO|Kyh89bW>Y6Y_Z
zp#rc{A*~bnh|f!8@q`YC&B?f5rNyq|Hb%?4PM)l;`$6aM8+FM3$3Xxx97(fauqTvh
zo95e5wKG|V4j@>PFvk#Y3<Jg)c<R_W$KLBL9QQ%BV$G5wI+vmp$pF1y0gEf*Ki>6#
zIpi+ukfCGvYPToRmTVEslg{`V6{u@BuhmXUyOwyYw=vg7^Q*V68j`#xnTtZOni|LV
z@Ku)ff+xJ{?3sr0^wUBinORz5NRe*av*zJmS5qO0>#La0O?EwJSk`Q?o{s+Ymj5P)
zoy?@Obn-`&<2;#oSW@Zd19`LeFyW1AGym`fSAc7->(UMSe03X(tZ>tAPkPPEza?m~
zRT^trsA*k(orn`7j74`G9W$!ofP|RfazNYjA|LOioQ%Hc0++L@;$(Af(O%F%l=Rqx
zVa5Q1dKO6|Z~)z(oE)_d;jCufZy2}M?x2k9&shCY2^P+DGX^@(%Sh8|z@Kr8d#LA;
zLFQYp)kG;ZK-ol7O_<p7b*&Qe&p#MqVAPWM+36A^fzP0OJHf#{6u9uAi*<lQJ0tX#
zvbDF$S@kjV!oEpItghr%>2*N6=~`+AN*gRBrAm3r&(b!&O1wDIQ}5CX5u)k*BQ-H!
zpALbG@0s*>#E&%X1bjQco1c`|;3j>ugCldI^>Nd``9j{&)e=XkwxoCG#ldZPC06|~
zWF9ni1>M`RUh}#ZY|_3gitAjp+<fA*HlYa;8~goEE!c5sIo@noZ~b6uOKLr|j+VX6
z3jf-*_0HPTV(MF*I|Y&w9UOl@XVa@#)MkJqp+OP?EAP8}G5oo!sf2p~cGdg>Q)DB*
zpLGX`4?N*Tx*;WEKL<wQbCg8tCMi(Zb2s;=xm^E|N~9;6cDyld*8_Wz-PoJemrx@l
zUq$MMz{EG|GFRy%nUqlf$4fI0!qW08x7I(z)Voe__i>mo*XGC93@W<A0{6ODP2aB(
zGZhZoFtz^>%@+}ebZUIrV%0dv;;I;nzAFh1K9F+Z*vw^KtVQ_GVMU9qiivVrA`auW
zDYu>qTzuQ5nzT{@zP+g{m+s#8s>{CVq-!L?`>P%h*FPVV3=X0d4MC10#L=(zzCNjs
ziMR<g>Z$PDMEjDU(HlFbkI$(`mxbciDO&cR_6*O(f;g07n~LUuX3?*|cO%MbYf5bd
zqrQpzb5b7cTb@W#AZa?eS8>p##G6KXTPKVlbUoczrY6y`=*XR2w-{vH6Ut*1D?1`Y
zWoo7F3q0xdQJiD(g3E9ORD;`sYc&@Yzv@RiAqa||yi3L6cK2Y|K^b?Ce;}BFhO8S1
zqs;}o=12wV_zYQJBD&Z+bv2k-h1!@7oU$$O4STin5P;e6xYz<ngcv^qCF~Ksd;;Kz
zrwnKz`Vm^{)@+%S%W=@l6TQXi6qd$xmIJdSV)GWpXNwF+X+Hk}Y9r!_7VWz}C)Aqc
z^T)%sQC@!BCxe0lr%G)*T<XP0DCiTKFcu-I1S@BF(EyuHK(C*DTI0T883NURb1Y}0
z7QoLI>j3jl$sf@WXsSX>kF3j(b-piBp8Jh1B7zBROnt0wWjTMx;BF)u!U8aw7Z`H!
z>wAen0e_6}-V|_^#Eu%!IFMvsw7J_??2>$mtEFHNVQiI$yxxm_hT!9+33$ukve3p)
zb}a-vmD;7C)mm|Xr3gFdC2(7NQi{<N_(MiF_t}~CSP1be^vV8dm(#xaY`tJL-A88X
zTa`-WoyF}fi}8~3D(?RiZ$N+wIhaFmZewRejI?gR<KVy9<hh1lEW8mn$G#5b$9%5e
zT4?=00h%=}I5z0i!eX5~)$e4hi6v<~ImRZOzd8;>lem{r`eI?+=4qc<z~dw0YlYPG
ztqPH4AN<u6e5XzSO>doD;g=@AB#&xui$@-K_-z9K4SDJVqmbbVZ>D;+eS_+o3#zDV
zm&Mop#BTo%^5RaBw*i1Xb<7}UfEx_del=Y4rvsmwZ7z$ROqZe#eU9IbS2w`&sq1jY
ztP}W4r^X_WY;S_|!xZba4%vJL?pa;0BbI$VP;SMe{2!Uer+I@KogHAO7C!!WOCL2w
zIMg-}9IOF2s4@^|Yvk^|4^vUR`(E-1MKh3xuf#5^wI&2RoYeXSzigRNKkkY1O$`c%
zE36Q1`uLH5(cc6m!p4Wbj|?R;xYv{|ixDHOUwY4HD_-%I0g8g78dC8@FTvP*PCusj
zW_Dag4KtEEG3<aAmK<~t;?_r*Ui{0uO>h%Dg_NopxZ%eY)(XpOLVLMNLQUAroOKmW
z3_yi3{|X$za{_@pzr?H_9(?lzug&tyhcsYn`U`t2k9$#=+@6?4um$6KF6g(1B3ge$
zC7@ssJQGtFZ{e-t-i(iSkGk_PYvTw8f<@C}0LWO|>9(vCPHybWokhtsOF(8o3Ce(A
z`R#bwx_f@D)U1h%7?dtDvjIRTCR-$)lU#(d07daz{(+{B!;!vSA<jJLy^K=6$A#<m
zqnR0O>bduqKe#I-bl+T9j$ca>_GQfSY;W;6*|ac}kDe1IHjEXqFpN&Gph_2)?9<_P
zV!p<P8ur{Qp?2Y^z&Elbdyp~CxA)xcyaC!1sw6{um^G!np(xD6Ia3my1gH;JHQriX
zk|rLY!+tX|SaqSYXjNMhV^=)+i3VfH!o#OZyR1#m7I+w^WRYm6mzpUBy#OK}LdTUD
zfIrj8XB;dUCbV_fkSSM8MooL7H08aeg!^Vu&!$XW823quT<6*bJxMTH)gLjRO#x>w
z@yWT099HvaEuZcBSs0pHiw6pF=mB4-Y;YqyI#<`7?GKBSq5ENp{#Wd13I^%lKRW<<
zyBjJUt(YCM4gF#23>_f1oB+%G^`*|*zhsl-O<gMhg9~J=J><|^>^BD;C`-m)1(t>~
zd$Dn&)dnp@KwgYqf!63oEhJ^q>+ajylM+q;692<1Lv<YTC_Kw``lwM)*oh2p3WmL7
ztdcdI`&K$A*H^aRW#H&ud|iaU+X7m7G?`Bo`&Q7QZk?(6Z8dL7==^L`+055{aN5;6
zOyWu#2KS&rW75y&YyBf(Z_)i;e-7pLsTa_t*s5(F2`2_9AAh+*DDTCJF3~Y8JrWEg
zkJrI%mmCTTSu=+`wPN@3!*M+|Ua4mxOZPu(X-FEhMe@HY|1s+c1q)+SdEjD9G8(|r
zOI({j#Q%v+-*&hv2Y?G6_!&<!hfCv=x&g=VhpS3(>eNF2--n+b0Dh8kU_euA$4gR3
z+sPX14laxJc@vJ6RGl64JdiM&UYlO_ve*PIG;@5FDXW5b>6Zp9!kU*u;WskvqDoE|
zjSZ))bJr9=%z~MpKLfzdm)3ZAH7s8>325_D*wA#d$3`8;tIqj~e(i2gJi=1r=G`pP
z3_FBe4_?~I;Yyxv3f^Pxmn&H4r69!q$}Fgql`q;kP@!!BUZ<v#Q-<D{{eteHd^+;@
zwUJE<^QO>YWt98ayfQx+UT^b5v&bTZ-@^mSz!Qptg95&8(#-|e5jQv=j?P}p+`x@Q
zqv^iGo0#St1Ohw0fNI0rk{?7ZSiv@uVRn0dyeDr|su$xdTqJfJo;G|0#j_0i`&uIT
zXbMb7=s;z)VUW9xDWvPfz9MV`6=><B?<x9<*6V`wi5)F}iF9aTs5FvhP^|@V2JhMB
zAEmW7vLz5{pc2>P<bOr6=sM(CV}49J6;muEX17Y?91mjCA(xuuW|sUpk5;Nl)b2<C
z;^yVq;*R0W+$D5{<{}?iAG)uvCwAPeq4%0$e3ug+_Hm{j1i!pcL3PxAAgFl9G44cu
z5&C}wTs#yjq6RQV&aWvb%JQY0Wmg?qx1=Gs69{g>-QC^UcyJBw?(XioaR~125ZpKJ
z5Zv8e`keEQ9^Lo$mG04B)<0OIW<6DN5|<8gV#c2VhHEx@gx0%w3c-lS1NChlr?M&S
zqwh+ygX^6co?v1!8Vm!-7i|Y(z%66piBuh6rVFv<kkTI4ukgVI&|@Q_mF^P`=KfAA
zwaMimWzt^Oa>q!VD7=~BVu;cx7X~Ec%n1#8zW1%rqIj@jz9RJw%b;DS^_t{I=bUN5
zdeAm0fIOajdcV`((4B-zAz0*n{@?4{t^MGGe3>fUvh_{<)LMwU+^kLs(ru5~0CsV*
z3KSmL?&f>EOe^9Rg3n<zkP;#~F2)sZxl?V-@lB(sQmPj9v$$nwAbBtULTEL^e@j!{
zm_}jTYny+LftLquw0~42VuaMH_I;p-p3vxS%zmO0h0rWpLR8X=yhA!=ul`j%4k7u|
zCzxV_rq}$H^_X;dG@dExMmf|3?KwTlUE$MmX^GcL5{!)#b$HtjBKj47oG>HltdXZu
z^#KMtX<a2dUn(zm6GUqjzbkTF`Cjv&ZYlVe)1<_JHnQ#L!=fJ&yTES^u^7+j-GL#b
zX1KDAB;R=i@jagv(^@cbsf3pDgeMwyB-tWS&Ncm)pw!!v7azx{fJLt_Eq@0Z7VpWW
zcQiYgJi`E0xX8yqzly*MzEjUb#)>qfU`MIU^UT*fF2!w**;W&{dIH0Kk$Ec*sC=!X
zxyw@0JBBhlMaZLFFD6(KecPrOcQD!{IC@}rh&U4LX#u`9A7)BwfQ;Z@g=HVa$hEB%
zAEZ8d4VO)JD~286H@-R!<(BH#X}Em1ru)KSHQ4I<Eh$R*!*OWLd$bJtT4d0ZmC14x
zzZG%uu;`$P{usS@;M5z8V4lKRD!Yts8N!AI-|A#7I#zd@k~e9|EK<ObIb_T<qinw*
zF>!S@JN@WtezaMXxsx$a0##G~=+KWbSCrvcUxg$o)rtBW5gA7vgSYY{3^8BTZ`(4z
z6Fpi3Bsg$cq-&SE8&9r#=kp(OOn{FXr}Wqw>N=zGjie~Wa`n**`BWQvliPZeeeFcC
zWjjtMc_J{;D+zEq!??D5H_h*L*Zf3Azi@+Hq{s`}+*}jix%X}U>p*a4=-}T5f~=9C
zM+;;+Rl{NQV!xp9eeil&eGV@`#TTC;`ioyV;xItl-#<_b7a&Z&0yvC}Mi(1p$NAn2
zBZ8D=cg+f=@}&+`TTQRcCXl*Fcr`PNVoFf>HU=JZu#L6`?;97oXn$STDVVY9-uGLn
z9<xSJS>tU4K*h-lg4{$o+Yjx7uR~`s^P3d-ZlRc*nK#u-#$JX&XlePdJ<RQv$rqMl
zaKm{-EHzT}7v};ga-$}Ks*qk;h98ArNS1j5R!+3d6<FReGF9Ub6Q2cH^y!o}`6gag
za^+)bEGcaXB|=w;{O~eLUcQzxYf+bCwcJpvMnmuHDDJg63~Q~ir6LB+>etdVM|%Cz
z?QnlS<vixs$~lC1;hUdJJA~KQgT{U*=2OeF&rfH=sQ#+ar~i}T%;i{J&E17eIXbA<
z1XNjF1?BfUsk&ByfMs{0V*y|jnMq#eeH(&#6s78f(sbAEZ4V=ihuqNs{buefSH5EX
zOkRZ`+w3!k8^Do5J&IC`%(wB6woEbdCSa|OB1GI|t+Z;g0#TI`QqK2uHce^T9@P!R
zB`0R519&HBK4N?dKCg80Obs4eah`HavH~S{Sa<LO0%?hgbM(W(m1qaUr&u_cy@ac*
z%l!kQ6!~42p{1t=kge}NJo=)XMX7d>Q2~(rta<2<2+^{Vct%?ZCan7{CXngStEpZ{
zU-s6qY1^+bG7=Zuqj*6c&pUiD{V<7;%BkCdX@n-8>F4Q}%cH7h3y0E?j*_YTYf?wV
z?%#z_`m#rt3v6=sZE_jJP}^bRCwVBQpBo>xv^`iFnH;LcnffklVCw{MO#N4<-)EXD
z_<T5(%R>)m_bfy@ekwc#I|m%wW4p8?cY(WmO!8DXs&tTbDd#Eiv;3Y1^Hgp<ro%#V
zPHt|oDNfh}(QBZyKAd+&x{5`){>hnZJN?!J#nkRLUn$`52IyD-ni_`^^dSwsfpeUg
z;&9D`zXa3z>*GXD69PH@0%ox7;g4bJO7Wq1JhA*$pb<t*!BLNBWxt!&AA3j6iSHoM
zE<44gwvmm)Q==PEf65xv>$EuSb?MLH9}+;GMig%a*u{W>Ad>%nF7x>^rPj`#-2|42
zonB<DxqujtIVb!<c@-LMciF&tQu}pB{W$4uj<Lk&X2r9|sy!Ao-$Iiz${V$OTA-?e
z$%$g<RCx&ld8fSF7fQcS2tEDyf_pETavm<hP33w_7n4Xe5f^AJ7o(1Fe757PJI*Dv
z&D%S5J&F*^u@}RR3l$~Fy?6TXFwqt2Bqr;@#fX>Fvo7fXxNs`$`0X+D`%N;EcAO;h
zgeTAFF@^Ee%?2>zHu$tS(3S5{fwn;0895)>lGCinlF2&Z=5Jl#aKw}1_{9CR!wk$)
z?7rPmTuWnt{!)U9A^Bs=Fm6$*^Dd){Ofv*)Mi7!xU8^k-vr%Z~#~u#Kt)%?UB;@I*
zZ7@BXxwl4@UY7d7?<x^KK|kVx+;T{Icx+SLgCG1NuH5XlSObR?>{W<}nU($UtSlmB
zAv{BVr<y}PGLE8W5OJKzt<Np8^p;aC#|XRyTp@64AxYc`P&hbx8{(jcpXH|mu*jm8
z2fwO3*9BS87QGctD%GgfY?pCGCsZt4;wFcLPO30K4#mO1O|=&|g{-SqRQi7uNLEU;
z%5Hk|#w<>SX>=(1SR6(a)uVmCBW*XuQU8q|#Es&ANWGAw`C>T`M*|n)jZh^@_As<=
zop5Oep)JsB117?|&-7uDr@sAwCu}5Y9wM!u_+}ISSSt95$a1}m5!fS3^x55(N5MM9
z0V(EKx?SBz>eshrKMRX#2s!m4?^C2&&?N5()_1o@Vz`Ar!E93VqZH9HRCJM2L~|2{
ziA!YlKDY2V%%_TcFdJii-;K79(q&kt$x5Ek0inkCY*oRq!e*?01wKbfM>H2qUk7jP
zC3Dg<8L}wPCB5*|l-+%!gC^THo5~<LzVLm7r3zz#LHp4l`Z~8?9J1yascJXdTF?N7
zawa#$pCuEAd-q2{Q2v#vE4Is@X%-iD&R{Df7s|irks}VcYtENVhkF-Ds3qD$3zEqQ
zzrhdXR!TLQbl4Q;>Wwiul{8+0J#H&~c^8gCHEX1c+K<|z&>#?IT0;_UD0ci`c)UKm
z>7F_&f~7ie2cSA`vIcBPuNX16jmq(bymE+dTn>3WxwV%2V`r8;NLg|w7RnhSs#mut
zjXU{XLGaD0V$H7p%9&B%1G~gZ@`2_)DyK!tbL<)gApM}lk)cs%88W!XhO^xh@vtxJ
zQXMVp+Yp!Qdu)^&iqP$t<h_9;Wv@G~QX+E(+(Hpd)Hvedpi`>r(~?@4ZdRPp$^wTd
zSC0T|8UWz&gw88zkQ-5EEgIjlo|^jbaFvy2w|Y=1X{R^Z3Z|CiXHL#;<ep*0XD_+&
z(%X&w(idGNO^p!j8fnvjur=8a+&6;6&2&fAPzuUmK1TE`Qe(=Y6{YX<dsXXhTZ7NX
zd933B;a%1&AdK#^FOMJ*y$?<(siliOuVNo}@(8*S@F<Ya=BIk7$^INYR-}}=D!l@E
z_Xp!-b?VZxvqG2!VprFPC|;lr#Ik<Ue5Y5NHIV9QN9hVQjEv32TgDAOF0U)mzBX*P
zU+ctOH|10Pks|C)=x|1#EW@dlljbl{iNX3dieHs|7&_DJCJIoDa~5cLMXk;f-;kv%
zIv#0_r?-phN5;U{lTj(u&O#%^#3Q<%ghDPo-}+NdIdP2=f>LHPHPs~iJ=Z*j3Wn9{
zZv-B0d9M%D&V=cPB{w_K;E;N3@ULbXkEKl#9ExS_#zq$k_TJ7O+QbHD$r)J@Lli7_
z8E<kC$CHAVR#N}1v5^G~9Y!Lze=IG{F2&+6w?WBNu!U+7hRdD3r&gxBH#fG3B+(~R
znH)zzZQ`ME+F+SBf|an-Eds*YL3?e+YkM`cz<%?-jp_i4`Z7Na&WkFs+Tu-cYq~JW
zq>fLs>%Pq2io1`}9ZQ{|T`IZ3COJr^#MvsIjF#L6t7Olk@FBs9%?|KMoL|)93f5)%
zEi;l0u~o8ye0jHZo5)~X?l-7mswt2-LN7su1bMnJW-=dR*-a}MowMis4Vx@3%2%+5
zeZY&~WhlpTYRl&_;}T^G!O;rc*ndc|aE)QBP+Jb&l(12r0atQDECh`}RJM^HPX&5Z
zl4uw6ok@rmvqzn_g86z|;XlT3X+0WWtbhJYNib7o5z+?0JmvP`GXL(Lm@4m)jL<Ju
zxRvY9ejGPB1+PBg<y2lTS0}q*G^&nJlG9k{51DM}#7Cczjf2N-QOlc*P!e#p$YYR7
z%Z76Po03ndZqn8i-*w}Xw;uL>jBLf*_x#)%v95F_!asFu4m4)Qp0(U}NSwi$xB}2f
zeyEMdfOS%vRb_}~k|ApAOYZ@q1}qQxvVAvJ(rPEoBmVAJ>b=U9%}OxdN<?0DfttJ?
zTW8r)RKpLBcw-Y{Bj*7tIy#i}SEZCvKcg17X6J-BLr{gaQZLrxF0GVG@U@`*1Ahz(
z^hPZxJ(csgs1#Mrk=@v#Dy`t8Ed-rmDF~S86lS9O@k4mP&6uGerQVTV&iY(sG$9Uc
z0llNRS6=EHeSdPaB#pg7GG$hH-O1!;ebE1gN;zBKe71JV5s3=TyG@|sq;3t<YNnP_
z?z-aldF1?x2mUZSge=+4DIsX7jAB)obcxR>zD#6LlqzXM^<D=Ha<dyu8_B$SvpEmj
zS;Gjv!j*)CZxH5~z=rr?m#IA8NHf$kr{^rxkdR}=d6wAMn)x)ncgd>sT1O|D-osM<
zH9EA{iePg+;*KY@E;d5)SWjm3VCVT>9Z%*SEV2xK{$e0m7%EIPnz^qfPrsJsduPm1
zQ{sAyNxZe4Q2ZlsC9Kbd_hlZtxpRT_=fFrI@nUw@kVoY@l_5Psr7+(ogBvDM$X(0T
z5dY?0W7>9?#Gsoha<B`EDuQpW54;tO<$ChFtNX83Cr&tBV()-IaMbbInPA&K{iNVM
z54U&2eIkkC=w88q`~2NOl}ocS$wAUjET}oCLtCIL!nKoEeLFko&s*RCkIPeD89A~#
zRMi&?Ivg=**lxG|06eZFWjBu*#x8vyyEAT9SAk<qxVa8hAHuo={*Tx&aK7T9{;*BH
z4!M|2viy8z(E98TH+H90%~1tqil$2*g5`l(l*RIf9xn5_9I}2bMYGXcp2@WJjO5Cz
z7LHN%T;)qdcK#|LA^s}`8w%5Z!mAnBJo5%CDk(1OJYlr+u^SW8WNSL?Eajv*-()`#
ztB~fMM)GdymrnA<1%Hw;chcbA$JR?Nx}9qr{nFK2^GOTJch~u$bcs&LGk_!sSFaX<
zQ;M||t6-3HFR$Y>3U<XPo(}7D7yU$TZ;PMLjnJbTTyK1|E`^2niLPC&?{>bTxL@a9
zcv1_P`C4udeyadBb^#0?cPgHnN)=eC!A^v>I1wX_*}CUl9|nx}@(wHLnR+S?Ud3ZQ
z2sF?;pR9qR5!%n&PBTx>+w*IjKCx<zEIPiI2$(6Ee!r7^kDO0R`tl`HkEboiCcU3~
zx^(`5*N_R;cME`d4mqh0+Qj{Mo*-v6<?o-3p*Tevn1-8muH%>kkUg`*n}#mMheqcB
zf($)vF1MAYV|(o3XBW2NbLK1go~I4@S$dZ8fxP*q5<}M=LwYhH3A~hgo^SHsC!wad
zQ)cv=oETYl0~0%gxq2I_LL8Zh+>hZmcQim?U;={jsN@W&zhZ(jjIugGKVX54a^jlq
z<M4_c;oR1GI2lf*7}(FlJX6J%&~<M%jFc%4u!e}uyI*^Prv%?kLE93>tod<1KnD1!
zK}m;uXA8EXFN!4z#cTo*DsTvGhX+-zHeP3#(~zXyDkujTP`*TljhJj4;i@Umj6=(D
zfQ3$sHf74E22renaN`F97!v)-1;G6Sil*{9LG00A-QRMyt*#fCZ%j4t<-kQ$-<K|~
zm9j&VkZ?6p%d#xGK^I*KN1Sec8Xt&A`xvA&6)=|SA@)Un7Eqv4wiyjx^tdiFYQ#xl
zc!3T7u(W0S);{4F^^e+#>Gxpj?p_o&{<!^WoMQ6SD*YZU(tnwd#Vzj^?x{;8Jj4E)
z8%xi|Ow>+W(V+rPTJsC<AZw?PyJHpMfYqGM`JdJQav=32|7eJdeNX=|1xDca=1XKz
zEVfWE+}n8=HG_YJt7zS5c6Q*7gWES)3HZ+fW}36FNy;fXm<KB~w<o&Wp(RZXr2V<Z
zLjebfUl8dNYaf$@?P}NYo%0!SyfL+~M=u8FCs?)HU1_EMA5qs(Mwmx8i(?3`2S=H5
zklKQf5W=xH%vfLS7yb2}$S^%-=p5L^9A;(u$6`OYTvculth#{<t_DGmbFB4#tmMBs
zIa`k}Inb}Cz{ES7KoO5g5aTa&Gz4hr7rsi9`C(UfAFW&B>!yIngPgd(I51vyG)!&-
zfqoYhDNHTHc5o;yS+c=_OOGcZoP9HGIGWgl=SWzK$8I?ZQ1E0+06=<g3amlq+PtLw
zQ@?uE103z7)#VZ>menqn-rFF@!7uI<%q;ol#M~6VJl2Crk&*>O#S<K&4S4G?8|(p3
zS1$*Y8r}oWD&;pClUJQV?>x7sn8(2VRkqv{(=(%RgLAgKR>||hUWkM^ZY*`~N;MDt
zk4}>Xm{_fH@B4il!Ot)y^RR+RSVYl20sHXn@0vQ?$WfDI3PQX*a!XE2K7(y;y8@3~
z8vbefpv5SlCT~<fEM_`;AqQ!+si}fu)G9B+@oD!WolV68YxL<8OTqNav4W^0ue5Dz
zfj*jqC|Rk?y*DXa%Ums+#OXf+Re;uv7j}_P973~U_zSo~NH04u%pW0%P5fs1TYAE@
z|F~s8u^X<6^imYh(Y57Rq66jeXQ{R6QWK9@Y-&vge^UT1dR9>e{A|usRsHH9&R1t0
zo(C1D!uWZ|Savb4rK-4hWQ%PE@+%@nO8u+MhdNlESayyMZ7B3G=~QMDjl|2?h{c`K
ziRos5bdr2f+SOhs+`~)MBC);%Dk)6PU_J&%5jjMmMS!S%5m)&H6A<#}_=uj4U;+iK
zhp5hcI@*z4!VgHSTJ?G%Kl&zQXQbRBVnhsKvR~I(G0DZ_bBYR5ZHG)voX1lU8^0u7
z0=|4(_&kVW-=fz&_S)IsDy|Bp*18=SVp`^lft;3M4;SSiP^<ToWE1tHikJXi4N$Q8
z>g1|_#bM6#2>MrAa&Y(W(h?U|j6c@`>j(_%pw2-(QBh}|+bhbTf7=kG=Ks$m!sFT%
z?b900VsF-jPyJk5WGaumlQPyi(J*Gbgv$${J=-pb_wB)neN%^{Nj`}yF>J|a!~u#5
zh|=g6dy+7;^5(<Cj!Mu}(l;gy@+R!k9k_{(k4W0G$84BAP4EvJICZdQNzKKqIxpkx
zs&TEkpv8(Hkw9Et^R9N#(h5h!hfkxo+5e;`-)i|NUP|e#VH@yF@I_3n`<&<$9mP1{
z^~6pDZYU3|ILvQ9C4kTE>N*0u@w+|bvaZS^8%J75cRQTthg-xiNRni8?=9pBG!Jhy
z2?jV8P=GfH_tj{{8IST^Bl<b6j9fj1B&TnBk((zWH3Ia3W5rffKvh-R3Y|8y&g=Lo
zu>wxXG?)lM+$R$Woy>`38c_Y^N~2ie9QLZ5!KdywFXq7Y-fIH{7X51jM>87oXo~}N
zR*D`aweVpFXqjt{?{y)$9X)CxTcM4PMmAQYJOii@2Q}stz&XZip2IU@A}s2+1G~-e
z9jHOiqdE#j%z<UYA)lyzY=q;umzK8h(MAJw?q@h;6S&uT{a=q5J9O+RFG)B*-(RL{
zU|Xr3xJ&KO4s}kZ+F4V3O*P23nE-|9y4flW3~Qmv2d=ezZ*Vq!IGU`NC?BrT8`p2?
zsquCO07%I3zOCO|x|3QceK2)0Dy@WSEO*g`%;t1}=6}bF5eiN4IcL{V`Df|B#$zqj
z7CS|&k*r9WKHZgz&A+2^;}X!vX#=(mr>(PoS(=A(h!}&t5OWU;Z?jWus_dFe!rxSr
zwz0MC%GONbl&?OBFIWUkZ8qgBK5rjcr7}7Vm`eWs-^MRTN9vXdml0?BO>IFIo?z?<
zK*KpJT{w~kn8Ime^(mXgdLZ6kOJCqiTek!^!NNmIi9dCoX>08MYN_*<qQ?3Ak$Rm!
z$+_Sq8<TrdvJreXHMK;YmE`2{G(ZWo!-t=Vb+MsTp;SBNl-`^9+s~AU8sN?b2`B&;
zoxAtui_AjWnq@j)(%cQp&aFqT4p;uy@A{9kNZq7&C;RPe%PgDVj{UQ-HsuR%Q&_TQ
zGbVTGgs=jqu66QX!7~SHvOh%X$UH2*W-lnd+I}!r4=!iK7@r*YbU_j}UkP&&`Cl=<
zLp;SpFix&So=~bF&g6ET(zao=>&m`&q7Yv(scA^dG*C7QE$oz+G+D06iJv*}#?nn~
zc!@ySGwBsng4x3i6Na$tikfim9%zhjTCiDg2QFSsfGgZ0Lhv$lqYqb0yOYQwlLbl@
z?Dcmnz~SSd{py)p>($|9`r~IoM-h`Fd0#JluuEl=9UkSAR7FRp*`<=^ut=FSm+(cp
zyfltJf}80(b<=KPVr1q8Cj?LZtWzsUB?9qOaTenQtcw_Z%L>v9)OSA&d!<XN@fE$x
z3i;6EcP*-RLqjz4*GpEylm%s}gfs!JxLALIE?uoydkp+<|5%hR8I&(9;JrMSdPk6E
z(mC~PIQbiZ6E;`KLU=o;$J*^!L0SP3zo<vN+a$-vd#awKL(t$wdK7TfD|%V`J}a%O
zNLYk9>t-pJp<FqI;Z;vbbHfvr<91Kh3bwOKpjiJ3^Y>#I*QMw)$PD{Jx$cEE5e?8?
zp|Y{;;4i`bOSL#;mVYJTR-@(qG!1vwhOF=G$OXxW04;8|GbIT$czaUKk#Yi#p^Q=X
zCxR*v0l5s@D4a7Cd>66P#TtM2(j_(4D{r;Vbo48M><qk}yMhgWE9QEp_n2u~XXjNa
z((_&ErmVftqg2ZwQuNR~EK`0iBrmMi{*FH(u`g^3py8H8+{)@@=qvd6&<@1Ur;|_n
z+}bDN6Qr{|#W|t#l0onuU#^Lgd^>~Ho6wlQeY~h{nXJfQsK3G43lErOV{84`u<8`F
z;k4Ye?9=JXwd~UAZ1=uh(~|x4%R9u@C9cHch^oqhE7p<XXauslYw~Z@YXk>w^AJ~@
zkfw!U7wV_wS~e9G3P$B7T*pZJ2xG~5UkFQF%moLfHj=K+I?q~8X!g&1_d&-v*sEHs
z_4U7yaEK;@^-zW6<0A+3qlTY`a=-9FRNcyGj3}ZMXIhM=nAS`3-~dov*nyPq&)1E=
ztFEe$vcOp1lg(`4%<1~q<XYF+|BeZ3b&I|eZXYkaMH*M)J<aju&_EKQ9w6##|DVbe
zt{4~YN9TmPjw-=yp`CXpg;{}Q-N-IDmA>Db<kM*n!l~*@`^zhFiAQ&fO9Re6B$u9-
zYN?@4&mN$6c%zQ2O8$^$cuQ=ODZl(Y@4*wKM75lyynZ$p7fOOPw~l=ND%b;0L3@s7
z_XVNUio44Q>3{Be5JZJdhxhzM9?h^p={lZcx-Paiq&NAjg`5OzYwfk&n~m38d(!%q
zV|G3@BhX|BjcAIX@W{th3}GS60%$BI{>;JkZRT)G&if(#2x%L{<a*w{y|K?b`Ka--
zPmuEmFF^9{?YbGg?*u<OpA?A>JJRR}e6Po(4*Ssq{Xw{I*c+w%+>vq7eTh3~EWN68
za+x@B74+inUi}n`7ikQqZSd~QF8Qa182`baK)xwaE)$u>Zg;qJ)~1+Gh1GbxON?{v
zqg&5^%;!uGN5->3N?}yNka>#15hpZIX;bXIzXJwVr-f8mV#GH_(V-r-;l<d4G1V1v
zu*Pfh7EZNka&A@tR=3rEBZ;Y(af|UZ^BjGAKSDQ?<$^@wky(hOT%?J&jvQ6kaDf!j
zzUm0;3^AOM)RW%0g?_~t4{w@`|G?GoDqH@e39)gx2?x1{iN-eWz3wVYfK@<i%s-BN
z><T@nf(A*&&Wb7?x5Kj#-Gw|ohX}*l>({B6Qo)>~JP}=uAmLtmyKPyfGy952RFO-3
ziGqM(<T3|jc!rmIIN{m@u2P>|de;{xL1&le&<6eEGtLidZQMJ|v!%SC*My!+;7==&
zQ&dcq1-B}EiG=WV-3L$RuW|~XfDvOTI?lnR&8os~X5IeoiT8<U+6e&TUxDS~moZk)
zHB-SfzxAQ_Nw+}B$Dc}n?YH+CWwsTTUsxVCHYDa00vr+sUVotSjhjNjz4d3HIxXhP
zB(P@+oyXhVGH<d3XIhJuKrV>(^BKtRMLq-);#F)>^#@)?;bmT~X|67xMf)!YPF)Xp
zP*mm#j%EvkD)j<)&E7rC`|DmsME_(~x}6QXY3bu?MU+35`z&#OKKbIUR10pbuf)Vr
zYRxdx-Cl=MAW1XE<Rp;zYi$1H|9OfOm*acSy<%VqLk3XcuFq(p66j|NXqUd4wEQ(e
z$R3j6^YgSgA~!8R=%Li)p%-JrChY9v2)6JuOsFM{GiB?hiHI)X1FH_r7kj&TdlbEm
zJ2^-!u`sceiScBRO`-#9iEF?W1JkJZWZ+Tt*?oAGR`V-W$QS&UD0_YfsjMHq&3{TS
zb1acA{13$s*96~Lii;<3FB~60Dk<Zonh#UE-^CZ@NZV_jwK3zj{%N~}xsg&Xid+i2
z#84IT*nX_Ec{A5pS{5UfD_ZnhL9fJq*R`K`?7aJKb2y{wD6*SHSD9YkjIR8m>N#p^
zC6YN~uVAU9=k0@+lW>d_TI>^)I$1j#5Gj(hFVCsO?Kq;DVcG{I1+f#~MW}Ztz8Q@E
z>g2V3cCBKNY%rd6?`8$Osp6rJSfs1;z)Sy1Bj|K1nt?w^g0H``&eu~w7q|Pi=Yt}^
z)bRJ;37V8b<lyln%{Jw9zd>vWPKvplM~CrBYn76yfd77-=)>31Ad`epgsRi=gH_Iq
z$HGx=qfReGrw+c8cpeNVIsqI}avI*70j_d_4@?JGz?kY^I1n2Qt*wTG&^ntT-zh#A
za>+{Nm3dG*oY278yTrAuDpwyOlOK%FXIX($)O{^#k>1&rf<b(8QyDsT7bKP*l*fZM
zp@0$@3m*ci%ty4ToF^S%a2ls*9EkTB4|tvER9~Wm#K$ee>EI22Z~MR<tU0phTI$%N
z)od}JhlMh<*;dGHDSkvQ$B~ZsskV?ASM!PfKF(3|3Rj$wFIBjp<9><e)>_h=iD8uF
zZpJlE@2MU5oy9_0zvo<hX#})uGhNi?eoj8A<l`Y8#dsRmmu%UDNg$<a?zAE7SFOs6
z-ET<kWUowL4A+37MTvz(dO#u)ft+8oN*GfXWc(}cI?6ZwJ4TcNZOTIW(^bi(cz3_O
z!)$P;$(5$L5oHIK3KPioc>Z_)1su5D|2Hb;;}2LYBDeHsA=#ph3YT-MIJ6_v%4=az
zvyT_WZ_SUYIJZB_2`nn|_3%;oO)b{nHsK0{jUg}PKf>-*al=lLmctK&nV6;0O`3r&
zf6ZfqBAHlf2R(T??rHdDA*#Px7Wb808BkPZr9q*$pB*(7SLnWF>w5@Vq%YaB2Hr!{
z*-LDhCIxxhWe}6deWYi~M5^+nz1$Z$0BQ*6@nX&xr12;~J7o`KWL1R9W^#8}f2+ti
zqT%l8P_Mr}ZOQsEZiD(29Kb$>=@5Q9E|OoapAwfEx$eL`n_FMoHR9EIPJ%)7`uf8(
z5sHR3na=9$NBlbiwuMuw$e*gw!*n^fEF91K85X5@E40V&8@?8Z6N7Iqb3Lk5fKm!o
zTCm-(CHM;Fu{}xNROapLC_)3?Yn*&xwJ{F*4Au>G%9cfe;(!!`buoAzCKgGRVi3Gv
zI#{&5G0@yIj@NW?bQhL@2txkDap%0%guxlj=0=H^0+`ZxTf0wuM*+(#0JbXUs6uIM
z1%?2D@|N(|wc9C9h&p`MWpA=0bvGo*?3zgwht3C_aHpXXf_<?17^j8(z`%a}M|^O&
z!RKC6PRx%dTgl32Frm*c{RT{wX%@NPaw#-iqE`b5V7T=SRfx!u2a{$3j}EB1U3!@h
zpDpEHMON@0)hL`?%G$1AVAFt9EzX8(w&v}w$D%lCgysFOb((>!?Z)8YAg?AV6Zppu
zV&$b*6gpV9x0my`0V(Cy#M)wm!kqX0<#+pMg5gc~4Rn0sRJkoy?GCU3@^sI+0fF0G
zcJ@kXJ}S?N78!%&zx(}zM^ZoE3dSguD6{DYAH;qpRQiHyjb`0dl9d#jf3Ni_Ab^~l
z%x1^Mq*txc6+m-4EO4$NBN2a)i~13GiRo+>nLSyTIL-w?1p#+h7Wqv6SUB+Ew2%qV
z7UQ>hd)&McE~{mbhy|+gx!+7hn<2Du`S1Rq^jI#ACki?Tr*$lqoY&3!<_A}PJJ&n9
zP^YO0%2z?@gyb`!Qo%&y(TC6trOKkRpvwSr)~4o3jQZ2MjjJjrR4d;5$bMEKcTv>(
zHOr76o$}QnF1&?PSLAXBk%675>ao8Qgb;)tUyi$NTP2b?VQJjuG-Y}|MqnVvDr{XI
WJ%R-*SYixLl)%pS&ppMzpZ@{SY{Vu2

literal 0
HcmV?d00001

diff --git a/scripts/publish-apt.sh b/scripts/publish-apt.sh
index 5cbc0c0..d69cf74 100755
--- a/scripts/publish-apt.sh
+++ b/scripts/publish-apt.sh
@@ -47,6 +47,8 @@ aptly publish snapshot -batch -gpg-key="$APTLY_KEY_ID" -passphrase-file="$APTLY_
 cp -a "$HOME/.aptly/public/." "$stage/"
 cp docs/apt-landing.html "$stage/index.html"
 cp src-tauri/icons/128x128.png "$stage/tasky-icon.png"
+mkdir "$stage/assets"
+cp docs/landing/*.webp docs/landing/og.png "$stage/assets/"
 gpg --armor --export "$APTLY_KEY_ID" >"$stage/tasky-archive-keyring.asc"
 printf '%s\n' "$APTLY_KEY_ID" >"$stage/tasky-archive-keyring.fingerprint"
 printf '%s\n' "$tag" >"$stage/latest"
@@ -55,6 +57,9 @@ test -s "$stage/dists/stable/InRelease"
 test -s "$stage/dists/stable/Release.gpg"
 test -s "$stage/index.html"
 test -s "$stage/tasky-icon.png"
+test -s "$stage/assets/overview-dark-1440.webp"
+test -s "$stage/assets/processes-light-1440.webp"
+test -s "$stage/assets/og.png"
 gpgv --keyring "$temp/archive-keyring.gpg" "$stage/dists/stable/InRelease"
 gpgv --keyring "$temp/archive-keyring.gpg" "$stage/dists/stable/Release.gpg" "$stage/dists/stable/Release"
 mv "$stage" "$output"

From 9aa5c365a160598943f991cc2c9585aabcf23c15 Mon Sep 17 00:00:00 2001
From: Mike Holp <mikeholp87@gmail.com>
Date: Tue, 10 Nov 2026 22:27:18 +0700
Subject: [PATCH 2/4] Harden CI and release; archive dated docs

- CI: fix the bundle job (matrix in a job-level if made the workflow
  invalid), catch new untracked generated types, add actionlint
- Release: run checks before publishing, build with --locked, verify the
  tag against every version source, cache Rust, remove the signing key
- Move ts-rs config to the repo root so bindings always land in
  src/types/generated
- Archive the 2026-11-03 security records and finished plans; fix links
- Landing page: link to main and the security policy, Twitter tags,
  announce Copied
- README: releases are .deb only

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .cargo/config.toml                            |  4 ++
 .github/workflows/actionlint.yml              | 24 ++++++++++++
 .github/workflows/ci.yml                      | 14 ++++---
 .github/workflows/release-linux.yml           | 31 +++++++++++++++-
 .github/workflows/security.yml                |  6 +--
 .gitignore                                    |  2 +
 README.md                                     | 29 +++++++++------
 SECURITY.md                                   |  2 +-
 docs/ARCHITECTURE.md                          |  2 +-
 docs/BENCHMARKS.md                            |  2 +-
 docs/DEBIAN_PACKAGING.md                      | 12 +++---
 docs/ROADMAP.md                               |  2 +-
 docs/SECURITY.md                              |  8 ++--
 docs/SECURITY_CHECKLIST.md                    |  2 +-
 docs/THREAT_MODEL.md                          |  4 +-
 docs/apt-landing.html                         | 37 ++++++++++++++-----
 .../plans}/FEATURE_GAP_ANALYSIS.md            |  0
 .../plans}/IMPLEMENTATION_PLAN.md             |  0
 .../plans}/LINUX_BENCHMARK_IMPLEMENTATION.md  |  0
 .../plans}/LINUX_IMPLEMENTATION_PLAN.md       |  4 +-
 .../security-2026-11-03}/SECURITY_AUDIT.md    |  0
 .../security-2026-11-03}/SECURITY_BASELINE.md |  0
 .../SECURITY_COVERAGE.json                    |  0
 .../SECURITY_VALIDATION.md                    |  0
 .../security-2026-11-03}/UNSAFE_RUST_AUDIT.md |  0
 25 files changed, 135 insertions(+), 50 deletions(-)
 create mode 100644 .cargo/config.toml
 create mode 100644 .github/workflows/actionlint.yml
 rename docs/{ => archive/plans}/FEATURE_GAP_ANALYSIS.md (100%)
 rename docs/{ => archive/plans}/IMPLEMENTATION_PLAN.md (100%)
 rename docs/{ => archive/plans}/LINUX_BENCHMARK_IMPLEMENTATION.md (100%)
 rename docs/{ => archive/plans}/LINUX_IMPLEMENTATION_PLAN.md (98%)
 rename docs/{ => archive/security-2026-11-03}/SECURITY_AUDIT.md (100%)
 rename docs/{ => archive/security-2026-11-03}/SECURITY_BASELINE.md (100%)
 rename docs/{ => archive/security-2026-11-03}/SECURITY_COVERAGE.json (100%)
 rename docs/{ => archive/security-2026-11-03}/SECURITY_VALIDATION.md (100%)
 rename docs/{ => archive/security-2026-11-03}/UNSAFE_RUST_AUDIT.md (100%)

diff --git a/.cargo/config.toml b/.cargo/config.toml
new file mode 100644
index 0000000..220bc12
--- /dev/null
+++ b/.cargo/config.toml
@@ -0,0 +1,4 @@
+# TypeScript bindings are generated from Rust models by `cargo test` (ts-rs).
+[env]
+TS_RS_EXPORT_DIR = { value = "src/types/generated", relative = true }
+TS_RS_LARGE_INT = "number"
diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
new file mode 100644
index 0000000..8e9af66
--- /dev/null
+++ b/.github/workflows/actionlint.yml
@@ -0,0 +1,24 @@
+name: Workflow lint
+
+on:
+  pull_request:
+    types: [opened, reopened, ready_for_review, synchronize]
+    paths: [".github/workflows/**"]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  actionlint:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: taiki-e/install-action@cfdb7ed4ccc7c7dce37759eae89dc5674b469b39 # v2.90.3
+        with:
+          tool: actionlint@1.7.12
+      # shellcheck is preinstalled on GitHub's Ubuntu runners; actionlint uses it for `run:` scripts.
+      - run: actionlint -color
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5213881..9ed8e39 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -66,20 +66,22 @@ jobs:
 
       - name: Generated TypeScript types are up to date
         shell: bash
-        run: git diff --exit-code -- src/types/generated
+        run: |
+          git status --porcelain -- src/types/generated
+          test -z "$(git status --porcelain -- src/types/generated)"
 
   bundle:
     name: Bundle (${{ matrix.os }})
     needs: check
-    # Validate Debian packaging on pull requests; build every bundle manually.
-    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request' && matrix.os == 'ubuntu-22.04')
     strategy:
       fail-fast: false
       matrix:
+        # Pull requests validate Debian packaging only; a manual run builds every bundle.
+        # `matrix` is not available in a job-level `if:`, so the OS list is chosen here.
         # Linux bundles are built on the oldest supported base so the
         # binary's glibc requirement (2.35) is met by Debian 12, Ubuntu 22.04
         # and newer. Building on a newer distro would raise that floor.
-        os: [windows-latest, ubuntu-22.04]
+        os: ${{ github.event_name == 'pull_request' && fromJSON('["ubuntu-22.04"]') || fromJSON('["windows-latest", "ubuntu-22.04"]') }}
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
@@ -102,9 +104,9 @@ jobs:
         with:
           workspaces: src-tauri
       - run: npm ci
-      - run: npx tauri build --config src-tauri/tauri.linux.conf.json
+      - run: npx tauri build --config src-tauri/tauri.linux.conf.json -- --locked
         if: runner.os == 'Linux'
-      - run: npx tauri build
+      - run: npx tauri build -- --locked
         if: runner.os == 'Windows'
       - name: Validate Debian package
         if: runner.os == 'Linux'
diff --git a/.github/workflows/release-linux.yml b/.github/workflows/release-linux.yml
index d8e568e..f855c15 100644
--- a/.github/workflows/release-linux.yml
+++ b/.github/workflows/release-linux.yml
@@ -19,7 +19,13 @@ jobs:
       - name: Check release version
         env:
           TAG: ${{ github.ref_name }}
-        run: test "${TAG#v}" = "$(jq -r .version src-tauri/tauri.conf.json)"
+        run: |
+          version=${TAG#v}
+          test "$version" = "$(jq -r .version src-tauri/tauri.conf.json)"
+          test "$version" = "$(jq -r .version package.json)"
+          grep -qx "version = \"$version\"" src-tauri/Cargo.toml
+          grep -qx "version = \"$version\"" src-tauri/core/Cargo.toml
+          head -n 1 src-tauri/linux/tasky.1 | grep -qF "\"Tasky $version\""
       - run: sudo apt-get update && sudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev desktop-file-utils
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
@@ -27,9 +33,21 @@ jobs:
           cache: npm
       - uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable branch
         with:
+          components: clippy
           toolchain: 1.96.0
+      - uses: Swatinem/rust-cache@e9d7b9f1e587218970671bac74e5511ed9506e6a # v2
+        with:
+          workspaces: src-tauri
       - run: npm ci
-      - run: npx tauri build --bundles deb --config src-tauri/tauri.linux.conf.json
+      - name: Verify before publishing
+        run: |
+          npm run typecheck
+          npm run lint
+          npm test
+          cd src-tauri
+          cargo clippy --workspace --all-targets --locked -- -D warnings
+          cargo test --workspace --locked
+      - run: npx tauri build --bundles deb --config src-tauri/tauri.linux.conf.json -- --locked
       - name: Validate package and checksum
         run: |
           mapfile -t packages < <(find src-tauri/target/release/bundle/deb -maxdepth 1 -type f -name '*.deb' -print)
@@ -90,6 +108,15 @@ jobs:
           APTLY_PASSPHRASE_FILE: ${{ runner.temp }}/aptly-passphrase
         run: |
           scripts/publish-apt.sh Tasky.deb "$GITHUB_REF_NAME" public
+      - name: Remove signing key from runner
+        if: always()
+        env:
+          APTLY_KEY_ID: ${{ vars.APTLY_KEY_ID || secrets.APTLY_KEY_ID }}
+        run: |
+          rm -f "$RUNNER_TEMP/aptly-passphrase"
+          if [ -n "$APTLY_KEY_ID" ] && gpg --batch --list-secret-keys "$APTLY_KEY_ID" >/dev/null 2>&1; then
+            gpg --batch --yes --delete-secret-keys "$APTLY_KEY_ID"
+          fi
       - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
         with:
           path: public
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index f433ccd..51e4db4 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -27,9 +27,9 @@ jobs:
       - name: Audit npm lockfile without running package scripts
         run: npm audit --package-lock-only --audit-level=moderate
       - name: Install pinned local auditors
-        run: |
-          cargo install --locked --version 0.22.2 cargo-audit
-          cargo install --locked --version 0.20.2 cargo-deny
+        uses: taiki-e/install-action@cfdb7ed4ccc7c7dce37759eae89dc5674b469b39 # v2.90.3
+        with:
+          tool: cargo-audit@0.22.2,cargo-deny@0.20.2
       - name: RustSec (including visible maintenance and unsoundness warnings)
         working-directory: src-tauri
         run: cargo audit
diff --git a/.gitignore b/.gitignore
index 965d537..1d200cc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,6 +25,8 @@ dist-ssr
 
 # Rust / Tauri
 src-tauri/target
+# ts-rs default output when its export dir isn't configured
+src-tauri/core/bindings
 coverage
 playwright-report
 test-results
diff --git a/README.md b/README.md
index 13e5a8a..8c11540 100644
--- a/README.md
+++ b/README.md
@@ -57,7 +57,7 @@ then capture the page.
   - End, force end, suspend, resume, change priority, copy details, open file
     location.
   - Confirmation dialogs with escalating warnings.
-  - Server-side protection for critical system processes and for Task Manager
+  - Server-side protection for critical system processes and for Tasky
     itself.
 - **Benchmarks:** a repeatable CPU benchmark (single-core and multi-core:
   integer, floating point, SHA-256, compression) and a GPU compute benchmark
@@ -104,14 +104,16 @@ then capture the page.
 
 ## Supported operating systems
 
-| OS                                         | Status                                               |
-| ------------------------------------------ | ---------------------------------------------------- |
-| Windows 11 (x64)                           | Supported (primary)                                  |
-| Debian / Ubuntu and other mainstream Linux | Supported; works on KDE Plasma and GNOME             |
-| macOS                                      | Not yet; the architecture has a platform slot for it |
+| OS                                 | Status                                               |
+| ---------------------------------- | ---------------------------------------------------- |
+| Windows 11 (x64)                   | Supported (primary)                                  |
+| Debian 12+ / Ubuntu 22.04+ (amd64) | Supported; works on KDE Plasma and GNOME             |
+| Other Linux distributions          | Not tested; build from source                        |
+| macOS                              | Not yet; the architecture has a platform slot for it |
 
 **Linux desktops:** the Linux port is available and compatible with both
-KDE Plasma and GNOME, on Wayland. Packages: `.deb`, `.rpm` and AppImage (see
+KDE Plasma and GNOME, on Wayland. Release builds ship a `.deb` only (APT
+repository and GitHub Releases); `.rpm` and AppImage can be built locally (see
 Building).
 
 | Desktop    | Status           | System tray                               | Window position                                                                |
@@ -252,7 +254,8 @@ Platform differences are documented in
 Prerequisites:
 
 - Node.js 20+ (developed with 24).
-- Rust stable (1.90+), via [rustup](https://rustup.rs).
+- Rust via [rustup](https://rustup.rs); `rust-toolchain.toml` pins the
+  version CI uses (minimum supported: 1.90).
 - **Windows:** Microsoft C++ Build Tools ("Desktop development with C++")
   and the WebView2 runtime, which ships with Windows 11.
 - **Linux:**
@@ -272,7 +275,8 @@ npm run tauri dev
 ## Building
 
 ```sh
-npm run tauri build
+npm run tauri build                                              # Windows
+npm run tauri build -- --config src-tauri/tauri.linux.conf.json  # Linux (Tasky name and man page)
 ```
 
 | Platform | Output (`src-tauri/target/release/bundle/`)   |
@@ -280,7 +284,8 @@ npm run tauri build
 | Windows  | `msi/` (WiX) and `nsis/` (per-user installer) |
 | Linux    | `deb/`, `rpm/` and `appimage/`                |
 
-Build each platform on that platform; CI builds both. To build only the
+Build each platform on that platform. Only the `.deb` is published; `.rpm`
+and AppImage are local builds and are not tested by CI. To build only the
 executable, without installers: `npx tauri build --no-bundle`.
 
 ## Testing and checks
@@ -331,8 +336,8 @@ See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) and
 - Protection rules run in Rust on every request. The UI cannot bypass them.
 - The app is unprivileged. It never elevates itself; denied operations say
   so clearly.
-- Tauri capabilities are limited to `core:default`. Plugins are used from Rust
-  only.
+- The Tauri capability for the local main window allows only event
+  listening and the app's own commands. Plugins are used from Rust only.
 - Command lines are never logged, and are excluded from exports unless you
   opt in.
 
diff --git a/SECURITY.md b/SECURITY.md
index d620d5f..64912f5 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -17,5 +17,5 @@ and coordinate a fix before disclosure. No guaranteed response SLA is currently
 published; an acknowledgement or fix date should not be assumed.
 
 See [the application security model](docs/SECURITY.md),
-[audit findings](docs/SECURITY_AUDIT.md), and
+[2026-11-03 audit findings](docs/archive/security-2026-11-03/SECURITY_AUDIT.md), and
 [release checklist](docs/SECURITY_CHECKLIST.md).
diff --git a/docs/ARCHITECTURE.md b/docs/ARCHITECTURE.md
index 754c08e..a8dec9e 100644
--- a/docs/ARCHITECTURE.md
+++ b/docs/ARCHITECTURE.md
@@ -1,6 +1,6 @@
 # Architecture
 
-Task Manager is a Tauri 2 desktop app. A Rust backend samples the operating
+Tasky is a Tauri 2 desktop app. A Rust backend samples the operating
 system; a React frontend renders what it is sent. This document explains how
 the pieces fit and why they are shaped this way.
 
diff --git a/docs/BENCHMARKS.md b/docs/BENCHMARKS.md
index 5189ad2..054cbfa 100644
--- a/docs/BENCHMARKS.md
+++ b/docs/BENCHMARKS.md
@@ -1,7 +1,7 @@
 # Benchmarks
 
 What the Benchmarks page measures, how, and what the numbers do and do not
-mean. Implementation plan: [`LINUX_BENCHMARK_IMPLEMENTATION.md`](LINUX_BENCHMARK_IMPLEMENTATION.md).
+mean. Implementation plan: [`LINUX_BENCHMARK_IMPLEMENTATION.md`](archive/plans/LINUX_BENCHMARK_IMPLEMENTATION.md).
 Validation data: [`LINUX_BENCHMARK_VALIDATION.md`](LINUX_BENCHMARK_VALIDATION.md).
 
 **Status:** the CPU, GPU, disk and internet benchmarks exist. The full system
diff --git a/docs/DEBIAN_PACKAGING.md b/docs/DEBIAN_PACKAGING.md
index 27a782f..8cff65e 100644
--- a/docs/DEBIAN_PACKAGING.md
+++ b/docs/DEBIAN_PACKAGING.md
@@ -86,13 +86,15 @@ Releases.
    revocation certificate.
 
 5. Commit the desired application version, push it, create the matching
-   annotated tag (for example `git tag -a v0.1.0 -m 'Release v0.1.0'`), and
-   push that tag. The release fails if the tag differs from the Tauri version.
+   annotated tag (for example `git tag -a vX.Y.Z -m 'Release vX.Y.Z'`), and
+   push that tag. The release fails if the tag differs from the version in
+   `src-tauri/tauri.conf.json`, `package.json`, both `Cargo.toml` files or the
+   `tasky(1)` man page.
 
 The signing job imports the key only after the protected environment grants
 access, verifies the complete fingerprint, builds the repository, and checks
-both `InRelease` and `Release.gpg` signatures before uploading the Pages
-artifact. A separate job deploys that verified artifact with only Pages
+both `InRelease` and `Release.gpg` signatures. It then deletes the secret key
+from the runner keyring and uploads the Pages artifact. A separate job deploys that verified artifact with only Pages
 permissions.
 
 ## Local package checks
@@ -101,7 +103,7 @@ After building the Linux package with
 `npx tauri build --bundles deb --config src-tauri/tauri.linux.conf.json`, run:
 
 ```sh
-scripts/validate-deb.sh src-tauri/target/release/bundle/deb/Tasky_0.1.0_amd64.deb
+scripts/validate-deb.sh src-tauri/target/release/bundle/deb/Tasky_X.Y.Z_amd64.deb
 ```
 
 The CI and release workflows also install and remove the package in a clean
diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md
index 8b6970a..8962e67 100644
--- a/docs/ROADMAP.md
+++ b/docs/ROADMAP.md
@@ -14,7 +14,7 @@ palette, light/dark/system themes.
 Ports view with port-conflict diagnosis, Find Process Using File, per-process
 Open Files, Modules, Memory Map and Threads tabs, and the Activity timeline
 (starts/exits, CPU spikes, memory jumps, alerts, actions, benchmarks). See
-`FEATURE_GAP_ANALYSIS.md` for the research and scoring behind them.
+[`FEATURE_GAP_ANALYSIS.md`](archive/plans/FEATURE_GAP_ANALYSIS.md) for the research and scoring behind them.
 
 Also done: Applications view in the process table (processes grouped by
 program), new-process highlighting (configurable, default 10 s), memory- and
diff --git a/docs/SECURITY.md b/docs/SECURITY.md
index 8283e27..c779c71 100644
--- a/docs/SECURITY.md
+++ b/docs/SECURITY.md
@@ -1,6 +1,6 @@
 # Application security model
 
-Task Manager treats the WebView and all OS-provided text as untrusted. It runs
+Tasky treats the WebView and all OS-provided text as untrusted. It runs
 as the normal user and respects OS permission failures. Never run the GUI as
 root/Administrator to make a feature work. No elevation broker, shell runner,
 service-control command or arbitrary memory/file/HTTP command is provided.
@@ -37,7 +37,7 @@ The UI also explains unsaved-work and suspension risks.
 Residual limitations: selected start times currently have one-second
 resolution; Linux setpriority uses a numeric PID; Windows WM_CLOSE has an HWND
 reuse interval, and thread enumeration is not atomic. These are documented
-in SECURITY_AUDIT.md rather than described as fully race-free.
+in the [2026-11-03 audit](archive/security-2026-11-03/SECURITY_AUDIT.md) rather than described as fully race-free.
 
 ## Files and local history
 
@@ -98,5 +98,5 @@ policy even when the application does not initiate HTTP traffic.
 No auto-updater is configured. Distributed artifacts still require trustworthy
 signing/checksums and protected release credentials; a successful local bundle
 is not signed provenance. Dependency policies, advisories and CI controls are
-in SUPPLY_CHAIN_SECURITY.md. Remaining risks and exact validation status are
-in SECURITY_AUDIT.md. For private reporting, see the repository SECURITY.md.
+in [SUPPLY_CHAIN_SECURITY.md](SUPPLY_CHAIN_SECURITY.md). Remaining risks and exact validation
+status are in the [2026-11-03 audit](archive/security-2026-11-03/SECURITY_AUDIT.md). For private reporting, see the repository [SECURITY.md](../SECURITY.md).
diff --git a/docs/SECURITY_CHECKLIST.md b/docs/SECURITY_CHECKLIST.md
index ca18d2e..e6560b5 100644
--- a/docs/SECURITY_CHECKLIST.md
+++ b/docs/SECURITY_CHECKLIST.md
@@ -21,7 +21,7 @@
 - [ ] Linux production build/package and interactive controls tested unprivileged.
 - [ ] Real GPU tests run on supported hardware without claiming fake-device tests validate drivers.
 - [ ] Installers signed where supported; checksums generated and release provenance retained.
-- [ ] Review SECURITY_AUDIT.md remaining risks; do not describe unresolved checks as passed.
+- [ ] Review [SECURITY_AUDIT.md](archive/security-2026-11-03/SECURITY_AUDIT.md) remaining risks; do not describe unresolved checks as passed.
 
 The audit validation results are recorded separately. This reusable checklist
 is deliberately unchecked: it must be completed for each release.
diff --git a/docs/THREAT_MODEL.md b/docs/THREAT_MODEL.md
index 61feb14..1d77f7e 100644
--- a/docs/THREAT_MODEL.md
+++ b/docs/THREAT_MODEL.md
@@ -1,6 +1,6 @@
 # Threat model
 
-Audit date: 2026-11-03. Baseline: SECURITY_BASELINE.md. This is a normal-user
+Audit date: 2026-11-03. Baseline: [SECURITY_BASELINE.md](archive/security-2026-11-03/SECURITY_BASELINE.md). This is a normal-user
 desktop application, not a privileged broker. A WebView compromise grants
 access to permitted commands, not unrestricted OS authority.
 
@@ -72,4 +72,4 @@ during the audit must be revalidated before release.
   account is outside the protection of WebView ACLs. No claim of protection
   against root, Administrator, kernel or GPU-driver compromise is made.
 
-See SECURITY_AUDIT.md for severity, evidence and unresolved release checks.
+See [SECURITY_AUDIT.md](archive/security-2026-11-03/SECURITY_AUDIT.md) for severity, evidence and unresolved release checks.
diff --git a/docs/apt-landing.html b/docs/apt-landing.html
index 33eeb5b..b05d7f0 100644
--- a/docs/apt-landing.html
+++ b/docs/apt-landing.html
@@ -29,6 +29,16 @@
       content="Tasky overview page in the dark theme showing CPU, memory, storage and network cards"
     />
     <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:title" content="Tasky: a private system monitor and task manager" />
+    <meta
+      name="twitter:description"
+      content="Live CPU, memory, disk and network graphs and a fast process table for Linux and Windows. Free, open source, no telemetry."
+    />
+    <meta name="twitter:image" content="https://mikeholp87.github.io/Tasky/assets/og.png" />
+    <meta
+      name="twitter:image:alt"
+      content="Tasky overview page in the dark theme showing CPU, memory, storage and network cards"
+    />
     <script type="application/ld+json">
       {
         "@context": "https://schema.org",
@@ -39,7 +49,7 @@
         "operatingSystem": "Debian, Ubuntu, Windows 11",
         "url": "https://mikeholp87.github.io/Tasky/",
         "downloadUrl": "https://github.com/mikeholp87/Tasky/releases/latest",
-        "license": "https://github.com/mikeholp87/Tasky/blob/linux-port/LICENSE",
+        "license": "https://github.com/mikeholp87/Tasky/blob/main/LICENSE",
         "isAccessibleForFree": true,
         "offers": { "@type": "Offer", "price": "0", "priceCurrency": "USD" },
         "author": { "@type": "Person", "name": "Mike Holp" }
@@ -131,6 +141,15 @@
       .skip:focus {
         top: 12px;
       }
+      .visually-hidden {
+        position: absolute;
+        width: 1px;
+        height: 1px;
+        margin: -1px;
+        overflow: hidden;
+        clip: rect(0 0 0 0);
+        white-space: nowrap;
+      }
       .wrap {
         width: min(1080px, calc(100% - 40px));
         margin: auto;
@@ -928,9 +947,7 @@ <h2 id="faq-title">Questions</h2>
               Open an issue on
               <a href="https://github.com/mikeholp87/Tasky/issues">GitHub</a>. For security reports,
               read the
-              <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/SECURITY.md"
-                >security policy</a
-              >
+              <a href="https://github.com/mikeholp87/Tasky/security/policy">security policy</a>
               first.
             </p>
           </details>
@@ -941,17 +958,17 @@ <h2 id="faq-title">Questions</h2>
         <nav aria-label="Footer">
           <a href="https://github.com/mikeholp87/Tasky">GitHub</a>
           <a href="https://github.com/mikeholp87/Tasky/releases/latest">Releases</a>
-          <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/LICENSE">License</a>
-          <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/SECURITY.md"
-            >Security</a
-          >
-          <a href="https://github.com/mikeholp87/Tasky/blob/linux-port/docs/DEBIAN_PACKAGING.md"
+          <a href="https://github.com/mikeholp87/Tasky/blob/main/LICENSE">License</a>
+          <a href="https://github.com/mikeholp87/Tasky/security/policy">Security</a>
+          <a href="https://github.com/mikeholp87/Tasky/blob/main/docs/DEBIAN_PACKAGING.md"
             >Packaging</a
           >
         </nav>
       </footer>
     </div>
+    <p id="copy-status" class="visually-hidden" role="status" aria-live="polite"></p>
     <script>
+      var copyStatus = document.getElementById("copy-status");
       document.querySelectorAll(".codebox").forEach(function (box) {
         var code = box.querySelector("code");
         if (!code || !navigator.clipboard) return;
@@ -963,8 +980,10 @@ <h2 id="faq-title">Questions</h2>
         button.addEventListener("click", function () {
           navigator.clipboard.writeText(code.textContent).then(function () {
             button.textContent = "Copied";
+            copyStatus.textContent = "Commands copied to clipboard";
             setTimeout(function () {
               button.textContent = "Copy";
+              copyStatus.textContent = "";
             }, 1800);
           });
         });
diff --git a/docs/FEATURE_GAP_ANALYSIS.md b/docs/archive/plans/FEATURE_GAP_ANALYSIS.md
similarity index 100%
rename from docs/FEATURE_GAP_ANALYSIS.md
rename to docs/archive/plans/FEATURE_GAP_ANALYSIS.md
diff --git a/docs/IMPLEMENTATION_PLAN.md b/docs/archive/plans/IMPLEMENTATION_PLAN.md
similarity index 100%
rename from docs/IMPLEMENTATION_PLAN.md
rename to docs/archive/plans/IMPLEMENTATION_PLAN.md
diff --git a/docs/LINUX_BENCHMARK_IMPLEMENTATION.md b/docs/archive/plans/LINUX_BENCHMARK_IMPLEMENTATION.md
similarity index 100%
rename from docs/LINUX_BENCHMARK_IMPLEMENTATION.md
rename to docs/archive/plans/LINUX_BENCHMARK_IMPLEMENTATION.md
diff --git a/docs/LINUX_IMPLEMENTATION_PLAN.md b/docs/archive/plans/LINUX_IMPLEMENTATION_PLAN.md
similarity index 98%
rename from docs/LINUX_IMPLEMENTATION_PLAN.md
rename to docs/archive/plans/LINUX_IMPLEMENTATION_PLAN.md
index 5d39861..a710451 100644
--- a/docs/LINUX_IMPLEMENTATION_PLAN.md
+++ b/docs/archive/plans/LINUX_IMPLEMENTATION_PLAN.md
@@ -2,7 +2,7 @@
 
 Written 2026-11-03 after inspecting the repository on the target machine.
 It records what already existed, what was missing, and what this pass
-changes. Results are in [`LINUX_PORT_REPORT.md`](LINUX_PORT_REPORT.md).
+changes. Its results report, `LINUX_PORT_REPORT.md`, was never committed.
 
 ## 1. Existing architecture
 
@@ -157,7 +157,7 @@ Test the app under the native KDE Wayland session and under XWayland
 The repository contained **no** benchmark code (CPU, GPU, disk or internet), so
 there was nothing to port and building a benchmark suite was kept out of this
 pass. A shared CPU benchmark was added afterwards; see
-[`BENCHMARKS.md`](BENCHMARKS.md) and
+[`BENCHMARKS.md`](../../BENCHMARKS.md) and
 [`LINUX_BENCHMARK_IMPLEMENTATION.md`](LINUX_BENCHMARK_IMPLEMENTATION.md).
 
 ## 19. Permissions
diff --git a/docs/SECURITY_AUDIT.md b/docs/archive/security-2026-11-03/SECURITY_AUDIT.md
similarity index 100%
rename from docs/SECURITY_AUDIT.md
rename to docs/archive/security-2026-11-03/SECURITY_AUDIT.md
diff --git a/docs/SECURITY_BASELINE.md b/docs/archive/security-2026-11-03/SECURITY_BASELINE.md
similarity index 100%
rename from docs/SECURITY_BASELINE.md
rename to docs/archive/security-2026-11-03/SECURITY_BASELINE.md
diff --git a/docs/SECURITY_COVERAGE.json b/docs/archive/security-2026-11-03/SECURITY_COVERAGE.json
similarity index 100%
rename from docs/SECURITY_COVERAGE.json
rename to docs/archive/security-2026-11-03/SECURITY_COVERAGE.json
diff --git a/docs/SECURITY_VALIDATION.md b/docs/archive/security-2026-11-03/SECURITY_VALIDATION.md
similarity index 100%
rename from docs/SECURITY_VALIDATION.md
rename to docs/archive/security-2026-11-03/SECURITY_VALIDATION.md
diff --git a/docs/UNSAFE_RUST_AUDIT.md b/docs/archive/security-2026-11-03/UNSAFE_RUST_AUDIT.md
similarity index 100%
rename from docs/UNSAFE_RUST_AUDIT.md
rename to docs/archive/security-2026-11-03/UNSAFE_RUST_AUDIT.md

From 3625e0b89ce44be42c02a8c5a7c8e7b31ce9a1d4 Mon Sep 17 00:00:00 2001
From: Mike Holp <mikeholp87@gmail.com>
Date: Tue, 10 Nov 2026 22:27:18 +0700
Subject: [PATCH 3/4] Fix audit findings across backend and UI

Safety
- Process menu, Ports and details links act only on the exact process
  (PID and start time); sockets now carry the owner's start time
- Drive power-off refuses when lsblk can't prove the drive is idle and
  sees LUKS/LVM volumes; unmount and power-off ask first
- Warn before suspending or ending the desktop session; block Tasky's
  own WebKit helpers; protect session and remote-access services
- Confirm autostart changes made from Settings
- Benchmark folder must be ours with mode 0700; release builds unwind
  so a benchmark panic reports Failed instead of crashing

Reliability and performance
- Network mounts are never statvfs'd, so a dead server can't stall
  metrics; blocking commands moved off the UI thread
- Settings saves are atomic; dialogs no longer use worker slots; logs
  track size without rescanning; less copying per tick
- Error boundary; monitoring startup can't double-subscribe; benchmark
  status can't regress; disk targets reload on mount changes

Accessibility
- Active row announced, Shift+F10 menu, keyboard column resize, shared
  arrow-key segmented control and tabs, non-dismissing action toasts

Refactors: split coordinator and large components, shared helpers.
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 src-tauri/.cargo/config.toml                  |    4 -
 src-tauri/Cargo.toml                          |    9 +-
 src-tauri/core/examples/probe.rs              |    4 +-
 src-tauri/core/src/benchmarks/coordinator.rs  | 1492 -----------------
 .../core/src/benchmarks/coordinator/mod.rs    |  858 ++++++++++
 .../core/src/benchmarks/coordinator/tests.rs  |  674 ++++++++
 src-tauri/core/src/benchmarks/disk/file.rs    |   51 +-
 src-tauri/core/src/benchmarks/history.rs      |    5 +-
 src-tauri/core/src/benchmarks/mod.rs          |    2 +-
 src-tauri/core/src/inspect.rs                 |   19 +-
 src-tauri/core/src/lib.rs                     |    1 +
 src-tauri/core/src/models/inspect.rs          |    3 +
 src-tauri/core/src/monitoring/details.rs      |   62 +-
 src-tauri/core/src/monitoring/disks.rs        |   61 +-
 src-tauri/core/src/monitoring/engine.rs       |   85 +-
 .../core/src/monitoring/process_history.rs    |   30 +-
 src-tauri/core/src/platform/linux/control.rs  |   57 +-
 src-tauri/core/src/platform/linux/inspect.rs  |    1 +
 src-tauri/core/src/platform/linux/mod.rs      |    3 +-
 src-tauri/core/src/platform/linux/services.rs |  130 +-
 src-tauri/core/src/platform/linux/tool.rs     |   60 +
 src-tauri/core/src/platform/linux/volumes.rs  |  142 +-
 src-tauri/core/src/platform/mod.rs            |   98 +-
 .../core/src/platform/windows/inspect.rs      |    1 +
 src-tauri/core/src/process_control/mod.rs     |    3 +
 .../core/src/process_control/protection.rs    |   93 +
 src-tauri/core/src/sync_util.rs               |   39 +
 src-tauri/src/commands/benchmarks.rs          |   19 +-
 src-tauri/src/commands/blocking.rs            |   39 +
 src-tauri/src/commands/confirm.rs             |    4 +-
 src-tauri/src/commands/export.rs              |   60 +-
 src-tauri/src/commands/inspect.rs             |   26 +-
 src-tauri/src/commands/monitoring.rs          |   45 +-
 src-tauri/src/commands/processes.rs           |    7 +-
 src-tauri/src/commands/services.rs            |    5 +-
 src-tauri/src/commands/settings.rs            |   66 +-
 src-tauri/src/commands/volumes.rs             |   77 +-
 src-tauri/src/desktop.rs                      |   36 +-
 src-tauri/src/lib.rs                          |   33 +-
 src-tauri/src/logging.rs                      |   71 +-
 src-tauri/src/settings.rs                     |   98 +-
 src/app/App.tsx                               |    5 +-
 src/app/CommandPalette.test.tsx               |   63 +
 src/components/ErrorBoundary.test.tsx         |   53 +
 src/components/ErrorBoundary.tsx              |   46 +
 src/components/Toaster.test.tsx               |   38 +
 src/components/Toaster.tsx                    |  124 +-
 src/components/ui/SegmentedControl.test.tsx   |   78 +
 src/components/ui/SegmentedControl.tsx        |   60 +
 src/components/ui/button.ts                   |    3 +
 src/dev/previewInspect.ts                     |    1 +
 src/features/activity/ActivityPage.tsx        |   31 +-
 src/features/benchmarks/DiskCard.tsx          |    8 +-
 .../benchmarks/DiskInternetCards.test.tsx     |   33 +-
 src/features/benchmarks/InternetCard.tsx      |   20 +-
 src/features/benchmarks/parts.tsx             |   32 +-
 src/features/file-finder/FileFinderPage.tsx   |   20 +-
 src/features/performance/PerformancePage.tsx  |   28 +-
 src/features/ports/PortsPage.tsx              |   69 +-
 src/features/ports/logic.test.ts              |    1 +
 src/features/ports/logic.ts                   |   11 +-
 .../process-details/ActionButtons.tsx         |   42 +
 .../process-details/ConnectionsCard.tsx       |   55 +
 src/features/process-details/MetricCard.tsx   |   60 +
 .../process-details/ProcessDetailsPage.tsx    |  561 +++----
 .../process-details/inspect/InspectBody.tsx   |    7 +-
 .../process-details/inspect/ThreadsTab.tsx    |  132 +-
 .../process-details/useProcessDetails.test.ts |   22 +-
 .../process-details/useProcessDetails.ts      |   27 +-
 src/features/processes/ExportMenu.tsx         |    3 +-
 .../processes/ProcessContextMenu.test.tsx     |   86 +
 src/features/processes/ProcessContextMenu.tsx |   15 +-
 src/features/processes/ProcessRow.tsx         |  320 ++++
 src/features/processes/ProcessTable.tsx       |  350 +---
 src/features/processes/ProcessToolbar.tsx     |   50 +-
 src/features/processes/ProcessesPage.test.tsx |   14 +
 src/features/processes/ProcessesPage.tsx      |    4 +-
 src/features/processes/actions.test.tsx       |   37 +-
 src/features/processes/actions.ts             |   18 +-
 src/features/processes/cells.tsx              |    6 +-
 src/features/processes/logic.ts               |    7 +-
 src/features/services/ServicesPage.tsx        |   67 +-
 src/features/settings/SettingsPage.test.tsx   |   47 +
 src/features/settings/SettingsPage.tsx        |  104 +-
 src/features/startup/StartupPage.tsx          |    6 +-
 src/features/storage/RemovableDrives.test.tsx |   19 +-
 src/features/storage/RemovableDrives.tsx      |    4 +-
 src/features/system-info/SystemInfoPage.tsx   |    3 +-
 src/hooks/useRemoteData.test.ts               |   61 +
 src/hooks/useRemoteData.ts                    |   12 +-
 src/services/benchmarks.test.ts               |  191 ++-
 src/services/benchmarks.ts                    |   43 +-
 src/services/ipc.ts                           |    4 +-
 src/services/monitoring.test.ts               |   87 +
 src/services/monitoring.ts                    |   42 +-
 src/services/settings.test.ts                 |   37 +-
 src/services/settings.ts                      |   45 +-
 src/stores/benchmarkStore.ts                  |   22 +-
 src/stores/toastStore.test.ts                 |   42 +
 src/stores/toastStore.ts                      |   52 +-
 src/types/generated/SocketEntry.ts            |    7 +-
 101 files changed, 5089 insertions(+), 2919 deletions(-)
 delete mode 100644 src-tauri/.cargo/config.toml
 delete mode 100644 src-tauri/core/src/benchmarks/coordinator.rs
 create mode 100644 src-tauri/core/src/benchmarks/coordinator/mod.rs
 create mode 100644 src-tauri/core/src/benchmarks/coordinator/tests.rs
 create mode 100644 src-tauri/core/src/platform/linux/tool.rs
 create mode 100644 src-tauri/core/src/sync_util.rs
 create mode 100644 src/app/CommandPalette.test.tsx
 create mode 100644 src/components/ErrorBoundary.test.tsx
 create mode 100644 src/components/ErrorBoundary.tsx
 create mode 100644 src/components/Toaster.test.tsx
 create mode 100644 src/components/ui/SegmentedControl.test.tsx
 create mode 100644 src/components/ui/SegmentedControl.tsx
 create mode 100644 src/components/ui/button.ts
 create mode 100644 src/features/process-details/ActionButtons.tsx
 create mode 100644 src/features/process-details/ConnectionsCard.tsx
 create mode 100644 src/features/process-details/MetricCard.tsx
 create mode 100644 src/features/processes/ProcessContextMenu.test.tsx
 create mode 100644 src/features/processes/ProcessRow.tsx
 create mode 100644 src/features/settings/SettingsPage.test.tsx
 create mode 100644 src/hooks/useRemoteData.test.ts
 create mode 100644 src/services/monitoring.test.ts
 create mode 100644 src/stores/toastStore.test.ts

diff --git a/src-tauri/.cargo/config.toml b/src-tauri/.cargo/config.toml
deleted file mode 100644
index 763933f..0000000
--- a/src-tauri/.cargo/config.toml
+++ /dev/null
@@ -1,4 +0,0 @@
-# TypeScript bindings are generated from Rust models by `cargo test` (ts-rs).
-[env]
-TS_RS_EXPORT_DIR = { value = "../src/types/generated", relative = true }
-TS_RS_LARGE_INT = "number"
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 303df91..d0f4383 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -27,7 +27,6 @@ tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
 tauri-plugin-opener = "2"
 tauri-plugin-notification = "2"
-tauri-plugin-autostart = "2"
 tauri-plugin-window-state = "2"
 tauri-plugin-dialog = "2"
 tracing-appender = "0.2"
@@ -38,10 +37,16 @@ tauri-plugin-single-instance = "2"
 gio = "0.18"
 gdk = "0.18"
 
+[target.'cfg(not(target_os = "linux"))'.dependencies]
+# Linux writes its own XDG login entry instead (src/autostart.rs).
+tauri-plugin-autostart = "2"
+
 # https://tauri.app/concept/size/#cargo-configuration
 [profile.release]
 codegen-units = 1
 lto = true
 opt-level = 3
-panic = "abort"
+# Benchmarks rely on catch_unwind to turn a panic (e.g. in a GPU driver) into
+# a "Failed" result and release their locks; "abort" would kill the app.
+panic = "unwind"
 strip = true
diff --git a/src-tauri/core/examples/probe.rs b/src-tauri/core/examples/probe.rs
index 247cf00..b2929e2 100644
--- a/src-tauri/core/examples/probe.rs
+++ b/src-tauri/core/examples/probe.rs
@@ -19,8 +19,8 @@ struct Capture {
 }
 
 impl TickSink for Capture {
-    fn deliver(&self, tick: &MetricsTick, json: Option<&str>) -> bool {
-        let bytes = json.map_or(0, str::len);
+    fn deliver(&self, tick: &MetricsTick, json: Option<String>) -> bool {
+        let bytes = json.map_or(0, |j| j.len());
         if let Ok(mut t) = self.ticks.lock() {
             t.push((tick.engine.poll_duration_ms, bytes, Arc::new(tick.clone())));
         }
diff --git a/src-tauri/core/src/benchmarks/coordinator.rs b/src-tauri/core/src/benchmarks/coordinator.rs
deleted file mode 100644
index 8f7a593..0000000
--- a/src-tauri/core/src/benchmarks/coordinator.rs
+++ /dev/null
@@ -1,1492 +0,0 @@
-//! Runs one benchmark at a time and owns everything around it: the lock,
-//! the state machine, rate-limited progress, cancellation, saving, and
-//! cleanup on every exit path (success, failure, cancel, panic).
-
-use std::panic::{AssertUnwindSafe, catch_unwind};
-use std::path::Path;
-use std::sync::atomic::{AtomicU64, Ordering};
-use std::sync::{Arc, Mutex, MutexGuard, PoisonError};
-use std::time::{Duration, Instant};
-
-use super::cancel::CancelToken;
-use super::cpu::runner::{CpuHooks, CpuRunConfig, Observer, run_cpu};
-use super::disk::engine::run_disk;
-use super::disk::plan::{self as disk_plan_rules, DiskConfig};
-use super::disk::{self, DiskRequest};
-use super::gpu::runner::{GpuRunConfig, run_gpu};
-use super::gpu::wgpu_backend::WgpuBackend;
-use super::gpu::{self, GpuBackend};
-use super::history::HistoryStore;
-use super::internet::provider::{Cloudflare, Provider};
-use super::internet::{self, InternetConfig, run_internet};
-use super::model::{
-    BenchmarkKind, BenchmarkProfile, BenchmarkResult, BenchmarkState, BenchmarkStatus, DiskPlan,
-    DiskResult, DiskTargetInfo, GpuAdapterInfo, GpuDeviceType, GpuResult, InternetPlan,
-    LiveReading, NetworkPath,
-};
-use super::{BenchmarkError, environment, scoring};
-use crate::errors::{AppError, AppResult};
-use crate::models::TemperatureReading;
-use crate::monitoring::{Engine, unix_millis};
-use crate::platform;
-
-/// Least time between two internet tests. The public speed-test endpoints
-/// limit repeated large transfers per address (HTTP 429 for about an hour), so
-/// back-to-back runs would only fail.
-const INTERNET_COOLDOWN: Duration = Duration::from_secs(120);
-
-/// Most test data one app session may move in total, both directions.
-const INTERNET_SESSION_BUDGET_BYTES: u64 = 1_000_000_000;
-
-/// Other drive traffic above this when a disk test starts earns a warning.
-const DISK_BUSY_WARN_BYTES_PER_SEC: f64 = 20e6;
-
-/// The UI never needs more than this many progress updates per second.
-const MIN_EMIT_INTERVAL: Duration = Duration::from_millis(100);
-
-/// Receives progress. Called from the benchmark thread; must not block.
-pub trait ProgressSink: Send + Sync {
-    fn status(&self, status: &BenchmarkStatus);
-    fn finished(&self, result: &BenchmarkResult);
-}
-
-struct ActiveRun {
-    cancel: CancelToken,
-}
-
-struct Shared {
-    status: Mutex<BenchmarkStatus>,
-    /// `Some` while a run owns the benchmark lock.
-    active: Mutex<Option<ActiveRun>>,
-    counter: AtomicU64,
-}
-
-fn lock<T>(m: &Mutex<T>) -> MutexGuard<'_, T> {
-    m.lock().unwrap_or_else(PoisonError::into_inner)
-}
-
-pub struct Coordinator {
-    engine: Arc<Engine>,
-    history: Arc<HistoryStore>,
-    shared: Arc<Shared>,
-    gpu: Arc<dyn GpuBackend>,
-    provider: Arc<dyn Provider>,
-    /// When the last internet test started, for the cooldown.
-    internet_last: Arc<Mutex<Option<Instant>>>,
-    /// Bytes moved by internet tests since the app started.
-    internet_used: Arc<AtomicU64>,
-    internet_cooldown: Duration,
-    internet_budget: u64,
-    /// Tests replace the list built from the mounted filesystems.
-    targets_override: Option<Vec<DiskTargetInfo>>,
-    /// Tests run unoptimised; this lets them exercise scoring and saving.
-    score_development_builds: bool,
-}
-
-/// What the user chose for a run. Everything is an id or a flag; the backend
-/// resolves ids to paths and addresses.
-#[derive(Debug, Clone, Default)]
-pub struct StartOptions {
-    /// Graphics adapter id (GPU runs).
-    pub adapter: Option<String>,
-    /// Disk location id from [`Coordinator::disk_targets`] (disk runs).
-    pub disk_target: Option<String>,
-    /// The user agreed to send and receive test data (internet runs).
-    pub internet_consent: bool,
-}
-
-/// What a run executes. The user chooses only the kind, profile and adapter;
-/// explicit configurations exist for tests.
-pub enum RunPlan {
-    Cpu(CpuRunConfig),
-    Gpu {
-        /// `None` means "build it from the profile once the adapter is known".
-        config: Option<GpuRunConfig>,
-        adapter: Option<String>,
-    },
-    Disk {
-        config: Option<DiskConfig>,
-        target: Box<DiskTargetInfo>,
-    },
-    Internet {
-        config: Option<InternetConfig>,
-    },
-}
-
-impl From<CpuRunConfig> for RunPlan {
-    fn from(cfg: CpuRunConfig) -> Self {
-        Self::Cpu(cfg)
-    }
-}
-
-impl Coordinator {
-    pub fn new(engine: Arc<Engine>, data_dir: Option<&Path>) -> Self {
-        Self {
-            engine,
-            history: Arc::new(HistoryStore::load(data_dir)),
-            shared: Arc::new(Shared {
-                status: Mutex::new(BenchmarkStatus::idle()),
-                active: Mutex::new(None),
-                counter: AtomicU64::new(0),
-            }),
-            gpu: Arc::new(WgpuBackend::new()),
-            provider: Arc::new(Cloudflare::new()),
-            internet_last: Arc::new(Mutex::new(None)),
-            internet_used: Arc::new(AtomicU64::new(0)),
-            internet_cooldown: INTERNET_COOLDOWN,
-            internet_budget: INTERNET_SESSION_BUDGET_BYTES,
-            targets_override: None,
-            score_development_builds: false,
-        }
-    }
-
-    /// Replaces the internet provider (tests use a local server).
-    #[doc(hidden)]
-    pub fn with_internet_provider(mut self, provider: Arc<dyn Provider>) -> Self {
-        self.provider = provider;
-        self
-    }
-
-    /// Replaces the internet cooldown and session budget (tests).
-    #[doc(hidden)]
-    pub fn with_internet_limits(mut self, cooldown: Duration, budget_bytes: u64) -> Self {
-        self.internet_cooldown = cooldown;
-        self.internet_budget = budget_bytes;
-        self
-    }
-
-    /// Replaces the disk locations (tests use temporary folders).
-    #[doc(hidden)]
-    pub fn with_disk_targets(mut self, targets: Vec<DiskTargetInfo>) -> Self {
-        self.targets_override = Some(targets);
-        self
-    }
-
-    /// Locations the disk benchmark may use, from the mounted filesystems.
-    pub fn disk_targets(&self) -> Vec<DiskTargetInfo> {
-        if let Some(t) = &self.targets_override {
-            return t.clone();
-        }
-        let Some(tick) = self.engine.latest() else {
-            return Vec::new();
-        };
-        let mounts: Vec<disk::targets::MountInfo> = tick
-            .disks
-            .iter()
-            .map(|d| disk::targets::MountInfo {
-                mount_point: d.mount_point.clone(),
-                file_system: d.file_system.clone(),
-                device: d.name.clone(),
-                total_bytes: d.total_bytes,
-                free_bytes: d.available_bytes,
-                read_only: d.read_only,
-            })
-            .collect();
-        let home = std::env::var_os("HOME").map(std::path::PathBuf::from);
-        disk::targets::build_targets(&mounts, home.as_deref(), &std::env::temp_dir(), &|p| {
-            disk::writable(p)
-        })
-    }
-
-    /// What a disk run on `target_id` would write, or why it cannot happen.
-    pub fn disk_plan(&self, target_id: &str, profile: BenchmarkProfile) -> AppResult<DiskPlan> {
-        let target = self.find_target(target_id)?;
-        let cfg = DiskConfig::for_profile(profile);
-        let free = disk::free_space(std::path::Path::new(&target.directory), target.free_bytes);
-        let planned = disk_plan_rules::plan_file_bytes(cfg.file_bytes, cfg.min_file_bytes, free);
-        let file_bytes = planned.clone().unwrap_or(0);
-        Ok(DiskPlan {
-            target_id: target.id,
-            directory: target.directory,
-            file_bytes,
-            estimated_bytes_written: disk_plan_rules::estimated_bytes_written(&cfg, file_bytes),
-            estimated_seconds: disk_plan_rules::estimated_seconds(profile),
-            blocked: planned.err(),
-        })
-    }
-
-    /// What an internet run would send and receive, and to whom.
-    pub fn internet_plan(&self, profile: BenchmarkProfile) -> InternetPlan {
-        internet::plan(&*self.provider, profile)
-    }
-
-    fn find_target(&self, id: &str) -> AppResult<DiskTargetInfo> {
-        self.disk_targets()
-            .into_iter()
-            .find(|t| t.id == id)
-            .ok_or_else(|| AppError::InvalidArgument("That location is not available.".into()))
-    }
-
-    /// Replaces the GPU backend (tests use a fake, so CI needs no GPU).
-    #[doc(hidden)]
-    pub fn with_gpu_backend(mut self, backend: Arc<dyn GpuBackend>) -> Self {
-        self.gpu = backend;
-        self
-    }
-
-    /// Graphics adapters a GPU benchmark could run on.
-    pub fn gpu_adapters(&self) -> AppResult<Vec<GpuAdapterInfo>> {
-        self.gpu.adapters().map_err(AppError::from)
-    }
-
-    #[doc(hidden)]
-    pub fn score_development_builds(mut self, yes: bool) -> Self {
-        self.score_development_builds = yes;
-        self
-    }
-
-    pub fn status(&self) -> BenchmarkStatus {
-        lock(&self.shared.status).clone()
-    }
-
-    pub fn history(&self) -> Vec<BenchmarkResult> {
-        self.history.list()
-    }
-
-    pub fn delete_result(&self, id: &str) -> AppResult<()> {
-        self.history.delete(id)
-    }
-
-    /// Asks the running benchmark to stop. No-op when idle.
-    pub fn cancel(&self) {
-        if let Some(run) = lock(&self.shared.active).as_ref() {
-            run.cancel.cancel();
-        }
-    }
-
-    /// `options` carries ids and flags only; options that do not apply to the
-    /// kind are ignored.
-    pub fn start(
-        &self,
-        kind: BenchmarkKind,
-        profile: BenchmarkProfile,
-        options: StartOptions,
-        sink: Arc<dyn ProgressSink>,
-    ) -> AppResult<BenchmarkStatus> {
-        let plan = match kind {
-            BenchmarkKind::Cpu => {
-                let logical = self.engine.static_info().logical_core_count as usize;
-                RunPlan::Cpu(CpuRunConfig::for_profile(profile, logical))
-            }
-            BenchmarkKind::Gpu => RunPlan::Gpu {
-                config: None,
-                adapter: options.adapter,
-            },
-            BenchmarkKind::Disk => {
-                let id = options
-                    .disk_target
-                    .ok_or_else(|| AppError::InvalidArgument("Choose a location first.".into()))?;
-                RunPlan::Disk {
-                    config: None,
-                    target: Box::new(self.find_target(&id)?),
-                }
-            }
-            BenchmarkKind::Internet => {
-                // Checked here, not only in the UI: nothing leaves the
-                // machine unless the caller says the user agreed.
-                if !options.internet_consent {
-                    return Err(AppError::InvalidArgument(
-                        "Agree to send and receive test data before running the internet test."
-                            .into(),
-                    ));
-                }
-                self.check_internet_allowed(profile)?;
-                RunPlan::Internet { config: None }
-            }
-        };
-        let started = self.start_with(kind, profile, plan, sink)?;
-        if kind == BenchmarkKind::Internet {
-            *lock(&self.internet_last) = Some(Instant::now());
-        }
-        Ok(started)
-    }
-
-    /// Cooldown and session data budget for internet tests.
-    fn check_internet_allowed(&self, profile: BenchmarkProfile) -> AppResult<()> {
-        if let Some(last) = *lock(&self.internet_last) {
-            let waited = last.elapsed();
-            if waited < self.internet_cooldown {
-                let left = (self.internet_cooldown - waited).as_secs() + 1;
-                return Err(AppError::InvalidArgument(format!(
-                    "Wait about {left} more seconds before running the internet test again. The test server limits repeated transfers."
-                )));
-            }
-        }
-        let plan = self.internet_plan(profile);
-        let used = self.internet_used.load(Ordering::Relaxed);
-        if used + plan.max_download_bytes + plan.max_upload_bytes > self.internet_budget {
-            return Err(AppError::InvalidArgument(format!(
-                "This session has used {} MB of its {} MB internet test allowance. Restart the app to run it again.",
-                used / 1_000_000,
-                self.internet_budget / 1_000_000
-            )));
-        }
-        Ok(())
-    }
-
-    /// [`start`](Self::start) with an explicit plan (tests use tiny ones).
-    pub fn start_with(
-        &self,
-        kind: BenchmarkKind,
-        profile: BenchmarkProfile,
-        plan: impl Into<RunPlan>,
-        sink: Arc<dyn ProgressSink>,
-    ) -> AppResult<BenchmarkStatus> {
-        let plan = plan.into();
-        let cancel = CancelToken::new();
-        let prefix = match kind {
-            BenchmarkKind::Cpu => "cpu",
-            BenchmarkKind::Gpu => "gpu",
-            BenchmarkKind::Disk => "disk",
-            BenchmarkKind::Internet => "net",
-        };
-        let id = format!(
-            "{prefix}-{}-{}",
-            unix_millis(),
-            self.shared.counter.fetch_add(1, Ordering::Relaxed)
-        );
-        let initial = BenchmarkStatus {
-            state: BenchmarkState::Preparing,
-            run_id: Some(id.clone()),
-            kind: Some(kind),
-            profile: Some(profile),
-            stage: "Starting".into(),
-            ..BenchmarkStatus::idle()
-        };
-        {
-            // Claim the lock and publish the first status together.
-            let mut active = lock(&self.shared.active);
-            if active.is_some() {
-                return Err(AppError::BenchmarkAlreadyRunning);
-            }
-            *active = Some(ActiveRun {
-                cancel: cancel.clone(),
-            });
-            *lock(&self.shared.status) = initial.clone();
-        }
-        sink.status(&initial);
-        self.engine.record_activity(
-            crate::monitoring::activity::Pending::new(
-                crate::models::ActivityKind::BenchmarkStarted,
-            )
-            .detail(format!("{kind:?} benchmark, {profile:?} profile")),
-        );
-
-        let ctx = RunContext {
-            engine: Arc::clone(&self.engine),
-            history: Arc::clone(&self.history),
-            shared: Arc::clone(&self.shared),
-            gpu: Arc::clone(&self.gpu),
-            provider: Arc::clone(&self.provider),
-            internet_used: Arc::clone(&self.internet_used),
-            sink,
-            score_development_builds: self.score_development_builds,
-            id,
-            kind,
-            profile,
-            plan,
-            cancel,
-        };
-        let shared = Arc::clone(&self.shared);
-        std::thread::Builder::new()
-            .name("benchmark".into())
-            .spawn(move || ctx.run())
-            .map_err(|e| {
-                *lock(&shared.active) = None;
-                *lock(&shared.status) = BenchmarkStatus::idle();
-                AppError::BenchmarkFailed(format!("could not start the worker thread: {e}"))
-            })?;
-        Ok(initial)
-    }
-}
-
-struct RunContext {
-    engine: Arc<Engine>,
-    history: Arc<HistoryStore>,
-    shared: Arc<Shared>,
-    gpu: Arc<dyn GpuBackend>,
-    provider: Arc<dyn Provider>,
-    internet_used: Arc<AtomicU64>,
-    sink: Arc<dyn ProgressSink>,
-    score_development_builds: bool,
-    id: String,
-    kind: BenchmarkKind,
-    profile: BenchmarkProfile,
-    plan: RunPlan,
-    cancel: CancelToken,
-}
-
-/// Clears the benchmark lock on any exit, including a panic that escapes
-/// the normal finalisation.
-struct LockGuard(Option<Arc<Shared>>);
-impl Drop for LockGuard {
-    fn drop(&mut self) {
-        if let Some(shared) = &self.0 {
-            *lock(&shared.active) = None;
-        }
-    }
-}
-
-impl RunContext {
-    fn run(self) {
-        let mut guard = LockGuard(Some(Arc::clone(&self.shared)));
-        let reporter = Reporter::new(&self);
-        let outcome = catch_unwind(AssertUnwindSafe(|| self.execute(&reporter)));
-        let (state, message, result) = match outcome {
-            Ok(Ok(result)) => {
-                let saved = if result.environment.development_build {
-                    Ok(())
-                } else {
-                    self.history.add(result.clone())
-                };
-                let message = saved
-                    .err()
-                    .map(|e| format!("The result could not be saved: {e}"));
-                (BenchmarkState::Completed, message, Some(result))
-            }
-            Ok(Err(BenchmarkError::Cancelled)) => (
-                BenchmarkState::Cancelled,
-                Some("Cancelled. Nothing was saved.".to_owned()),
-                None,
-            ),
-            Ok(Err(e)) => (BenchmarkState::Failed, Some(e.to_string()), None),
-            Err(_) => (
-                BenchmarkState::Failed,
-                Some("The benchmark stopped unexpectedly.".to_owned()),
-                None,
-            ),
-        };
-        tracing::info!(id = %self.id, ?state, "benchmark finished");
-
-        // Publish the final status and release the lock as one step, so a
-        // new run can never be overwritten by the old run's last update.
-        let final_status = {
-            let mut active = lock(&self.shared.active);
-            let mut status = lock(&self.shared.status);
-            status.state = state;
-            status.message = message;
-            if state == BenchmarkState::Completed {
-                status.fraction = 1.0;
-                status.stage = "Done".into();
-            }
-            status.live = None;
-            let snapshot = status.clone();
-            *active = None;
-            // A subsequent run may start as soon as this mutex is released.
-            // The old run's panic guard must never clear the new run's lock.
-            guard.0 = None;
-            snapshot
-        };
-        if let Some(result) = &result {
-            self.sink.finished(result);
-        }
-        self.sink.status(&final_status);
-        // Also recorded when cancelled or failed; the detail says which.
-        self.engine.record_activity(
-            crate::monitoring::activity::Pending::new(
-                crate::models::ActivityKind::BenchmarkCompleted,
-            )
-            .detail(format!("{:?} benchmark: {state:?}", self.kind)),
-        );
-    }
-
-    /// Combined read and write rate of all drives right now, in bytes/s.
-    fn other_disk_activity(&self) -> Option<f64> {
-        let tick = self.engine.latest()?;
-        Some(
-            tick.disks
-                .iter()
-                .map(|d| d.read_bytes_per_sec.unwrap_or(0.0) + d.write_bytes_per_sec.unwrap_or(0.0))
-                .sum(),
-        )
-    }
-
-    /// The interface carrying internet traffic and whether a tunnel is up.
-    fn network_path(&self) -> NetworkPath {
-        let nets = self
-            .engine
-            .latest()
-            .map(|t| t.networks.clone())
-            .unwrap_or_default();
-        let kind_of = |name: &str| {
-            nets.iter()
-                .find(|n| n.name == name)
-                .map_or(crate::models::InterfaceKind::Unknown, |n| n.kind)
-        };
-        let others: Vec<_> = nets.iter().map(|n| (n.name.clone(), n.kind)).collect();
-        internet::route::describe_path(internet::route::read_default_route(), &kind_of, &others)
-    }
-
-    fn execute(&self, reporter: &Reporter) -> Result<BenchmarkResult, BenchmarkError> {
-        let started_ms = unix_millis();
-        let started = Instant::now();
-        reporter.set_state(
-            BenchmarkState::Preflight,
-            match self.plan {
-                RunPlan::Cpu(_) => "Checking the system",
-                RunPlan::Gpu { .. } => "Checking graphics adapters",
-                RunPlan::Disk { .. } => "Checking the drive",
-                RunPlan::Internet { .. } => "Checking the connection",
-            },
-        );
-
-        let background = self.engine.latest().map(|t| t.cpu.usage_percent);
-        let mut env = environment::collect(self.engine.static_info(), background);
-        if self.score_development_builds {
-            env.development_build = false;
-        }
-        let mut warnings = environment::warnings(&env);
-        if self.cancel.is_cancelled() {
-            return Err(BenchmarkError::Cancelled);
-        }
-
-        let mut result = BenchmarkResult {
-            id: self.id.clone(),
-            kind: self.kind,
-            profile: self.profile,
-            started_at_ms: started_ms,
-            duration_ms: 0,
-            method: scoring::cpu_method(),
-            environment: env.clone(),
-            workloads: Vec::new(),
-            sustained: None,
-            scores: None,
-            gpu: None,
-            gpu_score: None,
-            disk: None,
-            disk_score: None,
-            internet: None,
-            warnings: Vec::new(),
-            stability: super::model::Stability::High,
-            outlier_method: "1.5×IQR; flagged, none removed".into(),
-            affinity: "not pinned".into(),
-        };
-
-        match &self.plan {
-            RunPlan::Cpu(cfg) => {
-                let hooks = EngineHooks(&self.engine);
-                let out = run_cpu(cfg, &hooks, &self.cancel, reporter)?;
-                reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
-                let scores = if env.development_build {
-                    None
-                } else {
-                    scoring::cpu_scores(&out.workloads)
-                };
-                if scores.is_none() && !env.development_build {
-                    warnings.push(
-                        "Some measurements were unavailable, so no score was calculated.".into(),
-                    );
-                }
-                result.stability = scoring::stability(&out.workloads, &warnings);
-                result.workloads = out.workloads;
-                result.sustained = out.sustained;
-                result.scores = scores;
-                result.affinity = out.affinity;
-            }
-            RunPlan::Gpu { config, adapter } => {
-                let profile = self.profile;
-                let (info, mut exec, cfg) = self.gpu.open(adapter.as_deref(), &|a| {
-                    config.clone().unwrap_or_else(|| {
-                        GpuRunConfig::for_profile(profile, a.device_type == GpuDeviceType::Discrete)
-                    })
-                })?;
-                let out = run_gpu(&mut *exec, &cfg, &self.cancel, reporter)?;
-                // Release the device before the (possibly slow) bookkeeping.
-                drop(exec);
-                reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
-                let software = info.device_type == GpuDeviceType::Software;
-                let score = if env.development_build || software {
-                    None
-                } else {
-                    scoring::gpu_score(&out.workloads)
-                };
-                if score.is_none() && !env.development_build && !software {
-                    warnings.push(
-                        "Some measurements were unavailable, so no score was calculated.".into(),
-                    );
-                }
-                result.method = scoring::gpu_method();
-                result.stability = scoring::gpu_stability(&out.workloads, &warnings);
-                result.gpu_score = score;
-                result.sustained = None;
-                result.gpu = Some(GpuResult {
-                    notes: gpu::notes(&info, out.timing_method),
-                    adapter: info,
-                    timing_method: out.timing_method,
-                    workloads: out.workloads,
-                    sustained: out.sustained,
-                });
-            }
-            RunPlan::Disk { config, target } => {
-                let cfg = config
-                    .clone()
-                    .unwrap_or_else(|| DiskConfig::for_profile(self.profile));
-                let parent = std::path::PathBuf::from(&target.directory);
-                disk::remove_stale(&parent);
-                let busy = self.other_disk_activity();
-                let req = DiskRequest {
-                    free_bytes: disk::free_space(&parent, target.free_bytes),
-                    parent,
-                    run_id: self.id.clone(),
-                    config: cfg,
-                    want_direct: true,
-                };
-                let out = run_disk(&req, &self.cancel, reporter)?;
-                reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
-                let mut notes = out.io_mode_note.iter().cloned().collect::<Vec<_>>();
-                notes.extend(target.notes.iter().cloned());
-                if out.io_mode == super::model::IoMode::Buffered {
-                    warnings.push(
-                        "Buffered I/O was used, so the operating system's cache is part of what was measured. No score is given."
-                            .into(),
-                    );
-                }
-                if let Some(rate) = busy.filter(|r| *r > DISK_BUSY_WARN_BYTES_PER_SEC) {
-                    warnings.push(format!(
-                        "Other programs were using the drive ({:.0} MB/s) when the test started, which can lower the results.",
-                        rate / 1e6
-                    ));
-                }
-                let score = if env.development_build {
-                    None
-                } else {
-                    scoring::disk_score(&out.phases, out.io_mode)
-                };
-                result.method = scoring::disk_method(out.io_mode);
-                result.stability = scoring::disk_stability(&out.phases, &warnings);
-                result.disk_score = score;
-                result.disk = Some(DiskResult {
-                    device: target.device.as_deref().and_then(disk::device::device_info),
-                    target: (**target).clone(),
-                    io_mode: out.io_mode,
-                    io_mode_note: out.io_mode_note,
-                    file_bytes: out.file_bytes,
-                    bytes_written: out.bytes_written,
-                    bytes_read: out.bytes_read,
-                    phases: out.phases,
-                    notes,
-                });
-            }
-            RunPlan::Internet { config } => {
-                let cfg = config
-                    .clone()
-                    .unwrap_or_else(|| InternetConfig::for_profile(self.profile));
-                let out = run_internet(
-                    &*self.provider,
-                    &cfg,
-                    self.network_path(),
-                    &self.cancel,
-                    &self.internet_used,
-                    reporter,
-                )?;
-                reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
-                let dl = out.download.as_ref().map(|t| t.samples.clone());
-                let ul = out.upload.as_ref().map(|t| t.samples.clone());
-                result.method = scoring::internet_method();
-                result.stability = scoring::internet_stability(
-                    dl.as_deref().unwrap_or(&[]),
-                    ul.as_deref().unwrap_or(&[]),
-                    &warnings,
-                );
-                if out.path.vpn_suspected {
-                    warnings
-                        .push("A VPN or tunnel looks active; results include its overhead.".into());
-                }
-                result.internet = Some(out);
-            }
-        }
-        result.warnings = warnings;
-        result.duration_ms = started.elapsed().as_millis() as u64;
-        Ok(result)
-    }
-}
-
-/// Frequency and temperature come from the monitoring engine's latest tick,
-/// so the benchmark adds no sensor reads of its own.
-struct EngineHooks<'a>(&'a Engine);
-
-impl CpuHooks for EngineHooks<'_> {
-    fn pin_current_thread(&self, slot: usize) -> bool {
-        platform::pin_current_thread(slot)
-    }
-
-    fn frequency_mhz(&self) -> Option<f64> {
-        self.0.latest()?.cpu.frequency_mhz.map(|f| f as f64)
-    }
-
-    fn temperature_c(&self) -> Option<f32> {
-        cpu_temperature(&self.0.latest()?.temperatures)
-    }
-}
-
-/// The CPU package temperature, only when a sensor label identifies it. A
-/// generic `temp1` is never assumed to be the CPU.
-pub fn cpu_temperature(readings: &[TemperatureReading]) -> Option<f32> {
-    const PREFERRED: [&str; 6] = [
-        "coretemp Package",
-        "k10temp Tctl",
-        "k10temp Tdie",
-        "zenpower Tdie",
-        "x86_pkg_temp",
-        "cpu_thermal",
-    ];
-    PREFERRED.iter().find_map(|prefix| {
-        readings
-            .iter()
-            .find(|r| r.label.starts_with(prefix))
-            .map(|r| r.celsius)
-    })
-}
-
-/// Turns the runner's callbacks into rate-limited status updates.
-struct Reporter {
-    shared: Arc<Shared>,
-    sink: Arc<dyn ProgressSink>,
-    engine: Arc<Engine>,
-    started: Instant,
-    last_emit: Mutex<Option<Instant>>,
-}
-
-impl Reporter {
-    fn new(ctx: &RunContext) -> Self {
-        Self {
-            shared: Arc::clone(&ctx.shared),
-            sink: Arc::clone(&ctx.sink),
-            engine: Arc::clone(&ctx.engine),
-            started: Instant::now(),
-            last_emit: Mutex::new(None),
-        }
-    }
-
-    fn set_state(&self, state: BenchmarkState, stage: &str) {
-        self.update(|s| {
-            s.state = state;
-            s.stage = stage.to_owned();
-        });
-    }
-
-    /// Applies `change`, then emits unless an update went out less than
-    /// [`MIN_EMIT_INTERVAL`] ago and the state did not change.
-    fn update(&self, change: impl FnOnce(&mut BenchmarkStatus)) {
-        let tick = self.engine.latest();
-        let (snapshot, state_changed) = {
-            let mut status = lock(&self.shared.status);
-            // A finished or cancelled run's late callbacks must not revive it.
-            if !status.state.is_active() {
-                return;
-            }
-            let before = status.state;
-            change(&mut status);
-            status.elapsed_ms = self.started.elapsed().as_millis() as u64;
-            if let Some(t) = tick {
-                status.cpu_percent = Some(t.cpu.usage_percent);
-                status.frequency_mhz = t.cpu.frequency_mhz.map(|f| f as f64);
-                status.temperature_c = cpu_temperature(&t.temperatures);
-            }
-            (status.clone(), status.state != before)
-        };
-        let mut last = lock(&self.last_emit);
-        if state_changed || last.is_none_or(|t| t.elapsed() >= MIN_EMIT_INTERVAL) {
-            *last = Some(Instant::now());
-            drop(last);
-            self.sink.status(&snapshot);
-        }
-    }
-}
-
-impl Observer for Reporter {
-    fn stage(&self, state: BenchmarkState, label: &str, fraction: f32) {
-        self.update(|s| {
-            s.state = state;
-            s.stage = label.to_owned();
-            s.fraction = fraction.clamp(0.0, 1.0);
-        });
-    }
-
-    fn live(&self, reading: Option<LiveReading>) {
-        self.update(|s| s.live = reading);
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::benchmarks::model::{CpuScores, PowerSource};
-    use crate::models::MonitoringState;
-
-    #[derive(Default)]
-    struct Recorder {
-        statuses: Mutex<Vec<BenchmarkStatus>>,
-        results: Mutex<Vec<BenchmarkResult>>,
-    }
-    impl ProgressSink for Recorder {
-        fn status(&self, s: &BenchmarkStatus) {
-            lock(&self.statuses).push(s.clone());
-        }
-        fn finished(&self, r: &BenchmarkResult) {
-            lock(&self.results).push(r.clone());
-        }
-    }
-
-    fn coordinator() -> Coordinator {
-        let engine = Arc::new(Engine::start(MonitoringState::default()).expect("engine"));
-        Coordinator::new(engine, None).score_development_builds(true)
-    }
-
-    fn wait_until_idle(c: &Coordinator) -> BenchmarkStatus {
-        let deadline = Instant::now() + Duration::from_secs(60);
-        loop {
-            let s = c.status();
-            if !s.state.is_active() && lock(&c.shared.active).is_none() {
-                return s;
-            }
-            assert!(Instant::now() < deadline, "benchmark did not finish");
-            std::thread::sleep(Duration::from_millis(10));
-        }
-    }
-
-    fn quick(
-        c: &Coordinator,
-        sink: &Arc<Recorder>,
-        cfg: CpuRunConfig,
-    ) -> AppResult<BenchmarkStatus> {
-        let sink: Arc<dyn ProgressSink> = sink.clone();
-        c.start_with(BenchmarkKind::Cpu, BenchmarkProfile::Quick, cfg, sink)
-    }
-
-    #[test]
-    fn a_finished_runs_guard_cannot_release_the_next_runs_lock() {
-        use std::sync::{Barrier, mpsc};
-        struct Finishing {
-            entered: mpsc::Sender<()>,
-            release: Arc<Barrier>,
-            dropped: mpsc::Sender<()>,
-        }
-        impl ProgressSink for Finishing {
-            fn status(&self, _: &BenchmarkStatus) {}
-            fn finished(&self, _: &BenchmarkResult) {
-                self.entered.send(()).unwrap();
-                self.release.wait();
-            }
-        }
-        impl Drop for Finishing {
-            fn drop(&mut self) {
-                let _ = self.dropped.send(());
-            }
-        }
-        let c = coordinator();
-        let (entered, ready) = mpsc::channel();
-        let (dropped, done) = mpsc::channel();
-        let release = Arc::new(Barrier::new(2));
-        c.start_with(
-            BenchmarkKind::Cpu,
-            BenchmarkProfile::Quick,
-            CpuRunConfig::test(),
-            Arc::new(Finishing {
-                entered,
-                release: Arc::clone(&release),
-                dropped,
-            }),
-        )
-        .unwrap();
-        ready.recv_timeout(Duration::from_secs(30)).unwrap();
-        let mut long = CpuRunConfig::test();
-        long.int_chunk_steps = u64::MAX / 4096;
-        let sink = Arc::new(Recorder::default());
-        quick(&c, &sink, long).unwrap();
-        release.wait();
-        done.recv_timeout(Duration::from_secs(10)).unwrap();
-        let third = quick(&c, &sink, CpuRunConfig::test());
-        c.cancel();
-        wait_until_idle(&c);
-        assert!(matches!(third, Err(AppError::BenchmarkAlreadyRunning)));
-    }
-
-    #[test]
-    fn a_full_run_completes_scores_and_saves() {
-        let c = coordinator();
-        let sink = Arc::new(Recorder::default());
-        let started = quick(&c, &sink, CpuRunConfig::test()).expect("starts");
-        assert_eq!(started.state, BenchmarkState::Preparing);
-
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Completed);
-        assert_eq!(done.fraction, 1.0);
-
-        let results = lock(&sink.results);
-        assert_eq!(results.len(), 1);
-        let r = &results[0];
-        assert_eq!(r.workloads.len(), 10);
-        assert!(
-            matches!(r.scores, Some(CpuScores { single_core, multi_core }) if single_core > 0 && multi_core > 0)
-        );
-        assert_eq!(r.method.method_id, "cpu-method-v1");
-        assert!(!r.environment.development_build);
-        assert_eq!(c.history().len(), 1);
-        assert_eq!(c.history()[0].id, r.id);
-
-        // The state machine only moves forward through the expected states.
-        let states: Vec<BenchmarkState> = lock(&sink.statuses).iter().map(|s| s.state).collect();
-        let order = |s: &BenchmarkState| match s {
-            BenchmarkState::Preparing => 0,
-            BenchmarkState::Preflight => 1,
-            BenchmarkState::WarmingUp | BenchmarkState::Running => 2,
-            BenchmarkState::Finalizing => 3,
-            BenchmarkState::Completed => 4,
-            other => panic!("unexpected state {other:?}"),
-        };
-        assert!(
-            states.windows(2).all(|p| order(&p[0]) <= order(&p[1])),
-            "{states:?}"
-        );
-        assert_eq!(states.last(), Some(&BenchmarkState::Completed));
-    }
-
-    #[test]
-    fn only_one_benchmark_runs_at_a_time() {
-        let c = coordinator();
-        let sink = Arc::new(Recorder::default());
-        let mut long = CpuRunConfig::test();
-        long.int_chunk_steps = u64::MAX / 4096;
-        quick(&c, &sink, long).expect("first starts");
-        let second = quick(&c, &sink, CpuRunConfig::test());
-        assert!(matches!(second, Err(AppError::BenchmarkAlreadyRunning)));
-        c.cancel();
-        wait_until_idle(&c);
-        // The lock is free again.
-        quick(&c, &sink, CpuRunConfig::test()).expect("can start again");
-        assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
-    }
-
-    #[test]
-    fn cancelling_stops_the_run_saves_nothing_and_frees_the_lock() {
-        let c = coordinator();
-        let sink = Arc::new(Recorder::default());
-        let mut long = CpuRunConfig::test();
-        long.int_chunk_steps = u64::MAX / 4096;
-        quick(&c, &sink, long).expect("starts");
-        std::thread::sleep(Duration::from_millis(150));
-        let t = Instant::now();
-        c.cancel();
-        let done = wait_until_idle(&c);
-        assert!(t.elapsed() < Duration::from_secs(3), "{:?}", t.elapsed());
-        assert_eq!(done.state, BenchmarkState::Cancelled);
-        assert!(
-            done.message
-                .is_some_and(|m| m.contains("Nothing was saved"))
-        );
-        assert!(c.history().is_empty());
-        assert!(lock(&sink.results).is_empty());
-    }
-
-    #[test]
-    fn cancelling_while_idle_does_nothing() {
-        let c = coordinator();
-        c.cancel();
-        assert_eq!(c.status().state, BenchmarkState::Idle);
-    }
-
-    #[test]
-    fn development_builds_are_flagged_unscored_and_not_saved() {
-        let engine = Arc::new(Engine::start(MonitoringState::default()).expect("engine"));
-        let c = Coordinator::new(engine, None); // default: treat debug as development
-        let sink = Arc::new(Recorder::default());
-        quick(&c, &sink, CpuRunConfig::test()).expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Completed);
-        if cfg!(debug_assertions) {
-            let results = lock(&sink.results);
-            let r = &results[0];
-            assert!(r.environment.development_build);
-            assert!(r.scores.is_none());
-            assert!(r.warnings.iter().any(|w| w.contains("Development build")));
-            assert!(c.history().is_empty());
-        }
-    }
-
-    #[test]
-    fn progress_updates_are_rate_limited() {
-        let c = coordinator();
-        let sink = Arc::new(Recorder::default());
-        let dyn_sink: Arc<dyn ProgressSink> = sink.clone();
-        {
-            let ctx_status = BenchmarkStatus {
-                state: BenchmarkState::Running,
-                ..BenchmarkStatus::idle()
-            };
-            *lock(&c.shared.status) = ctx_status;
-        }
-        let reporter = Reporter {
-            shared: Arc::clone(&c.shared),
-            sink: dyn_sink,
-            engine: Arc::clone(&c.engine),
-            started: Instant::now(),
-            last_emit: Mutex::new(None),
-        };
-        let t = Instant::now();
-        for i in 0..5000 {
-            reporter.live(Some(LiveReading {
-                label: "x".into(),
-                value: f64::from(i),
-                unit: "u".into(),
-            }));
-        }
-        let emitted = lock(&sink.statuses).len();
-        let max = 1 + (t.elapsed().as_millis() / MIN_EMIT_INTERVAL.as_millis()) as usize;
-        assert!(
-            emitted >= 1 && emitted <= max,
-            "{emitted} updates in {:?}",
-            t.elapsed()
-        );
-        // The latest value is always the one stored, even when not emitted.
-        assert_eq!(
-            lock(&c.shared.status).live.as_ref().map(|l| l.value),
-            Some(4999.0)
-        );
-        // A state change always goes out immediately.
-        reporter.stage(BenchmarkState::Finalizing, "Done soon", 0.9);
-        assert_eq!(
-            lock(&sink.statuses).last().map(|s| s.state),
-            Some(BenchmarkState::Finalizing)
-        );
-    }
-
-    #[test]
-    fn late_callbacks_do_not_revive_a_finished_run() {
-        let c = coordinator();
-        let sink = Arc::new(Recorder::default());
-        let dyn_sink: Arc<dyn ProgressSink> = sink.clone();
-        *lock(&c.shared.status) = BenchmarkStatus {
-            state: BenchmarkState::Cancelled,
-            ..BenchmarkStatus::idle()
-        };
-        let reporter = Reporter {
-            shared: Arc::clone(&c.shared),
-            sink: dyn_sink,
-            engine: Arc::clone(&c.engine),
-            started: Instant::now(),
-            last_emit: Mutex::new(None),
-        };
-        reporter.stage(BenchmarkState::Running, "late", 0.5);
-        assert_eq!(c.status().state, BenchmarkState::Cancelled);
-        assert!(lock(&sink.statuses).is_empty());
-    }
-
-    fn reading(label: &str, c: f32) -> TemperatureReading {
-        TemperatureReading {
-            label: label.into(),
-            celsius: c,
-            max_celsius: None,
-            critical_celsius: None,
-        }
-    }
-
-    #[test]
-    fn cpu_temperature_needs_an_identifying_label() {
-        // `temp1` is never assumed to be the CPU.
-        assert_eq!(
-            cpu_temperature(&[
-                reading("acpitz temp1", 27.0),
-                reading("nvme Composite", 40.0)
-            ]),
-            None
-        );
-        assert_eq!(
-            cpu_temperature(&[
-                reading("coretemp Core 0", 60.0),
-                reading("acpitz temp1", 27.0),
-                reading("coretemp Package id 0", 62.0),
-            ]),
-            Some(62.0)
-        );
-        assert_eq!(
-            cpu_temperature(&[reading("k10temp Tctl", 55.0)]),
-            Some(55.0)
-        );
-        assert_eq!(cpu_temperature(&[]), None);
-        // Environment type is available to tests that need it.
-        let _ = PowerSource::Unknown;
-    }
-
-    // ------------------------------------------------------------- GPU
-    use crate::benchmarks::gpu::adapters;
-    use crate::benchmarks::gpu::runner::GpuExecutor;
-    use crate::benchmarks::gpu::runner::tests::Fake;
-
-    struct FakeBackend {
-        adapters: Vec<GpuAdapterInfo>,
-        fail: Option<String>,
-    }
-
-    impl GpuBackend for FakeBackend {
-        fn adapters(&self) -> Result<Vec<GpuAdapterInfo>, BenchmarkError> {
-            Ok(self.adapters.clone())
-        }
-
-        fn open(
-            &self,
-            id: Option<&str>,
-            config_for: &dyn Fn(&GpuAdapterInfo) -> GpuRunConfig,
-        ) -> Result<(GpuAdapterInfo, Box<dyn GpuExecutor>, GpuRunConfig), BenchmarkError> {
-            if let Some(m) = &self.fail {
-                return Err(BenchmarkError::Failed(m.clone()));
-            }
-            let info = adapters::select(&self.adapters, id)?.clone();
-            let cfg = config_for(&info);
-            Ok((info, Box::new(Fake::default()), cfg))
-        }
-    }
-
-    fn adapter(id: &str, t: GpuDeviceType) -> GpuAdapterInfo {
-        GpuAdapterInfo {
-            id: id.into(),
-            name: format!("Test {id}"),
-            vendor_id: 1,
-            device_id: 2,
-            device_type: t,
-            backend: "vulkan".into(),
-            driver: "test".into(),
-            driver_info: "1.0".into(),
-            supports_timestamps: true,
-            max_buffer_bytes: 1 << 30,
-            max_storage_binding_bytes: 1 << 27,
-            max_workgroups_per_dimension: 65_535,
-            recommended: false,
-        }
-    }
-
-    fn gpu_coordinator(list: Vec<GpuAdapterInfo>, fail: Option<&str>) -> Coordinator {
-        coordinator().with_gpu_backend(Arc::new(FakeBackend {
-            adapters: list,
-            fail: fail.map(str::to_owned),
-        }))
-    }
-
-    fn start_gpu(
-        c: &Coordinator,
-        sink: &Arc<Recorder>,
-        adapter: Option<&str>,
-    ) -> AppResult<BenchmarkStatus> {
-        let sink: Arc<dyn ProgressSink> = sink.clone();
-        c.start_with(
-            BenchmarkKind::Gpu,
-            BenchmarkProfile::Quick,
-            RunPlan::Gpu {
-                config: Some(GpuRunConfig::test()),
-                adapter: adapter.map(str::to_owned),
-            },
-            sink,
-        )
-    }
-
-    #[test]
-    fn a_gpu_run_completes_scores_saves_and_records_the_adapter() {
-        let c = gpu_coordinator(
-            vec![
-                adapter("cpu-like", GpuDeviceType::Software),
-                adapter("igpu", GpuDeviceType::Integrated),
-            ],
-            None,
-        );
-        let sink = Arc::new(Recorder::default());
-        start_gpu(&c, &sink, None).expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Completed, "{:?}", done.message);
-
-        let r = lock(&sink.results)[0].clone();
-        assert_eq!(r.kind, BenchmarkKind::Gpu);
-        assert_eq!(r.method.method_id, "gpu-compute-v1");
-        let g = r.gpu.as_ref().expect("gpu result");
-        // The software renderer is never the default.
-        assert_eq!(g.adapter.id, "igpu");
-        assert_eq!(g.workloads.len(), 3);
-        assert!(g.workloads.iter().all(|w| w.validated));
-        assert!(r.gpu_score.is_some_and(|s| s > 0));
-        assert!(r.scores.is_none() && r.workloads.is_empty());
-        assert!(g.notes.iter().any(|n| n.contains("shared system memory")));
-        assert!(r.id.starts_with("gpu-"));
-        // Saved, and survives a JSON round trip unchanged.
-        assert_eq!(c.history().len(), 1);
-        let json = serde_json::to_string(&r).unwrap();
-        assert_eq!(serde_json::from_str::<BenchmarkResult>(&json).unwrap(), r);
-    }
-
-    #[test]
-    fn a_software_renderer_is_run_on_request_but_never_scored() {
-        let c = gpu_coordinator(vec![adapter("llvmpipe", GpuDeviceType::Software)], None);
-        let sink = Arc::new(Recorder::default());
-        start_gpu(&c, &sink, Some("llvmpipe")).expect("starts");
-        assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
-        let r = lock(&sink.results)[0].clone();
-        assert_eq!(r.gpu_score, None);
-        assert!(
-            r.gpu
-                .unwrap()
-                .notes
-                .iter()
-                .any(|n| n.contains("software renderer"))
-        );
-        // Not scored, but also not a failure: no misleading "unavailable" warning.
-        assert!(!r.warnings.iter().any(|w| w.contains("unavailable")));
-    }
-
-    #[test]
-    fn no_adapter_fails_cleanly_and_frees_the_lock() {
-        let c = gpu_coordinator(vec![], None);
-        let sink = Arc::new(Recorder::default());
-        start_gpu(&c, &sink, None).expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Failed);
-        assert!(
-            done.message
-                .is_some_and(|m| m.contains("No graphics adapter"))
-        );
-        assert!(c.history().is_empty());
-        // The app keeps working: a CPU benchmark can run right after.
-        quick(&c, &sink, CpuRunConfig::test()).expect("can start another");
-        assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
-    }
-
-    #[test]
-    fn a_driver_failure_is_reported_in_plain_words() {
-        let c = gpu_coordinator(
-            vec![adapter("igpu", GpuDeviceType::Integrated)],
-            Some("The graphics adapter could not be opened: driver said no"),
-        );
-        let sink = Arc::new(Recorder::default());
-        start_gpu(&c, &sink, None).expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Failed);
-        assert!(
-            done.message
-                .is_some_and(|m| m.contains("could not be opened"))
-        );
-    }
-
-    #[test]
-    fn a_choice_of_a_vanished_adapter_is_an_error_not_a_silent_fallback() {
-        let c = gpu_coordinator(vec![adapter("igpu", GpuDeviceType::Integrated)], None);
-        let sink = Arc::new(Recorder::default());
-        start_gpu(&c, &sink, Some("gone")).expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Failed);
-        assert!(
-            done.message
-                .is_some_and(|m| m.contains("no longer available"))
-        );
-    }
-
-    #[test]
-    fn cpu_and_gpu_benchmarks_share_one_lock() {
-        let c = gpu_coordinator(vec![adapter("igpu", GpuDeviceType::Integrated)], None);
-        let sink = Arc::new(Recorder::default());
-        let mut long = CpuRunConfig::test();
-        long.int_chunk_steps = u64::MAX / 4096;
-        quick(&c, &sink, long).expect("cpu starts");
-        assert!(matches!(
-            start_gpu(&c, &sink, None),
-            Err(AppError::BenchmarkAlreadyRunning)
-        ));
-        c.cancel();
-        wait_until_idle(&c);
-        start_gpu(&c, &sink, None).expect("gpu can start after");
-        assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
-    }
-
-    #[test]
-    fn development_builds_do_not_score_gpu_runs_either() {
-        let engine = Arc::new(Engine::start(MonitoringState::default()).expect("engine"));
-        let c = Coordinator::new(engine, None).with_gpu_backend(Arc::new(FakeBackend {
-            adapters: vec![adapter("igpu", GpuDeviceType::Integrated)],
-            fail: None,
-        }));
-        let sink = Arc::new(Recorder::default());
-        start_gpu(&c, &sink, None).expect("starts");
-        assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
-        if cfg!(debug_assertions) {
-            let r = lock(&sink.results)[0].clone();
-            assert!(r.environment.development_build && r.gpu_score.is_none());
-            assert!(c.history().is_empty());
-        }
-    }
-
-    #[test]
-    fn the_adapter_list_comes_from_the_backend() {
-        let c = gpu_coordinator(
-            vec![
-                adapter("a", GpuDeviceType::Discrete),
-                adapter("b", GpuDeviceType::Integrated),
-            ],
-            None,
-        );
-        assert_eq!(c.gpu_adapters().unwrap().len(), 2);
-    }
-
-    fn target(dir: &std::path::Path) -> DiskTargetInfo {
-        DiskTargetInfo {
-            id: "test".into(),
-            label: "Test folder".into(),
-            directory: dir.to_string_lossy().into_owned(),
-            mount_point: "/".into(),
-            file_system: "ext4".into(),
-            device: None,
-            free_bytes: 100 << 30,
-            total_bytes: 200 << 30,
-            recommended: true,
-            notes: vec![],
-        }
-    }
-
-    // Unix only: the disk engine does not exist on other platforms yet.
-    #[cfg(unix)]
-    #[test]
-    fn a_disk_run_is_saved_with_its_target_mode_and_wear() {
-        let dir = tempfile::tempdir().unwrap();
-        let t = target(dir.path());
-        let c = coordinator().with_disk_targets(vec![t.clone()]);
-        let sink = Arc::new(Recorder::default());
-        let sink2: Arc<dyn ProgressSink> = sink.clone();
-        c.start_with(
-            BenchmarkKind::Disk,
-            BenchmarkProfile::Quick,
-            RunPlan::Disk {
-                config: Some(DiskConfig::test()),
-                target: Box::new(t),
-            },
-            sink2,
-        )
-        .expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Completed, "{:?}", done.message);
-        let results = lock(&sink.results);
-        let r = &results[0];
-        let d = r.disk.as_ref().expect("disk result");
-        assert_eq!(d.phases.len(), 6);
-        assert_eq!(d.target.id, "test");
-        assert!(d.bytes_written > 0 && d.bytes_read > 0);
-        assert!(r.method.method_id.starts_with("disk-"));
-        assert!(r.method.method_id.ends_with(match d.io_mode {
-            crate::benchmarks::model::IoMode::Direct => "direct-v1",
-            crate::benchmarks::model::IoMode::Buffered => "buffered-v1",
-        }));
-        assert!(r.id.starts_with("disk-"));
-        assert_eq!(c.history().len(), 1);
-        assert!(
-            !dir.path()
-                .join(crate::benchmarks::disk::file::DIR_NAME)
-                .exists(),
-            "no test file left behind"
-        );
-    }
-
-    #[test]
-    fn disk_and_internet_runs_refuse_unknown_targets_and_missing_consent() {
-        let c = coordinator().with_disk_targets(vec![]);
-        let sink: Arc<dyn ProgressSink> = Arc::new(Recorder::default());
-        let go = |options: StartOptions, kind| {
-            c.start(kind, BenchmarkProfile::Quick, options, sink.clone())
-        };
-        assert!(matches!(
-            go(StartOptions::default(), BenchmarkKind::Disk),
-            Err(AppError::InvalidArgument(_))
-        ));
-        assert!(matches!(
-            go(
-                StartOptions {
-                    disk_target: Some("/etc".into()),
-                    ..Default::default()
-                },
-                BenchmarkKind::Disk
-            ),
-            Err(AppError::InvalidArgument(_))
-        ));
-        assert!(matches!(
-            go(StartOptions::default(), BenchmarkKind::Internet),
-            Err(AppError::InvalidArgument(_))
-        ));
-        // Nothing started, so the lock is free.
-        assert!(lock(&c.shared.active).is_none());
-        assert_eq!(c.status().state, BenchmarkState::Idle);
-    }
-
-    #[test]
-    fn disk_plan_reports_the_write_volume_or_the_reason_it_is_blocked() {
-        let dir = tempfile::tempdir().unwrap();
-        let t = target(dir.path());
-        let c = coordinator().with_disk_targets(vec![t]);
-        let p = c.disk_plan("test", BenchmarkProfile::Standard).unwrap();
-        assert!(p.blocked.is_none() || p.file_bytes == 0);
-        if p.blocked.is_none() {
-            assert!(p.estimated_bytes_written > p.file_bytes);
-        }
-        assert!(c.disk_plan("nope", BenchmarkProfile::Quick).is_err());
-    }
-
-    #[test]
-    fn an_internet_run_with_consent_is_saved_without_a_score() {
-        use crate::benchmarks::internet::provider::{Cloudflare, test_server};
-        let server = test_server::start(test_server::Mode::Normal, 2_500_000);
-        let c = coordinator().with_internet_provider(Arc::new(Cloudflare::with_base(
-            &server.base,
-            Duration::from_secs(5),
-        )));
-        let sink = Arc::new(Recorder::default());
-        let sink2: Arc<dyn ProgressSink> = sink.clone();
-        c.start_with(
-            BenchmarkKind::Internet,
-            BenchmarkProfile::Quick,
-            RunPlan::Internet {
-                config: Some(InternetConfig::test()),
-            },
-            sink2,
-        )
-        .expect("starts");
-        let done = wait_until_idle(&c);
-        assert_eq!(done.state, BenchmarkState::Completed, "{:?}", done.message);
-        let results = lock(&sink.results);
-        let r = &results[0];
-        let n = r.internet.as_ref().expect("internet result");
-        assert!(n.download.as_ref().unwrap().median_mbps > 10.0);
-        assert!(r.scores.is_none() && r.disk_score.is_none() && r.gpu_score.is_none());
-        assert_eq!(r.method.method_id, "internet-cloudflare-v1");
-        assert!(r.id.starts_with("net-"));
-        assert_eq!(c.history().len(), 1);
-    }
-
-    #[test]
-    fn internet_tests_have_a_cooldown_and_a_session_data_budget() {
-        use crate::benchmarks::internet::provider::{Cloudflare, test_server};
-        let server = test_server::start(test_server::Mode::Normal, 0);
-        let sink: Arc<dyn ProgressSink> = Arc::new(Recorder::default());
-        let provider = Arc::new(Cloudflare::with_base(&server.base, Duration::from_secs(5)));
-        let go = |c: &Coordinator| {
-            c.start(
-                BenchmarkKind::Internet,
-                BenchmarkProfile::Quick,
-                StartOptions {
-                    internet_consent: true,
-                    ..Default::default()
-                },
-                sink.clone(),
-            )
-        };
-
-        // Cooldown: a second start right after the first is refused.
-        let c = coordinator()
-            .with_internet_provider(provider.clone())
-            .with_internet_limits(Duration::from_secs(300), u64::MAX);
-        assert!(go(&c).is_ok());
-        c.cancel();
-        wait_until_idle(&c);
-        let e = go(&c).expect_err("cooling down");
-        assert!(e.to_string().contains("more seconds"), "{e}");
-
-        // Budget: a plan that does not fit what is left is refused up front.
-        let c = coordinator()
-            .with_internet_provider(provider)
-            .with_internet_limits(Duration::ZERO, 100_000_000);
-        let e = go(&c).expect_err("over budget");
-        assert!(e.to_string().contains("allowance"), "{e}");
-        assert_eq!(c.status().state, BenchmarkState::Idle);
-    }
-}
diff --git a/src-tauri/core/src/benchmarks/coordinator/mod.rs b/src-tauri/core/src/benchmarks/coordinator/mod.rs
new file mode 100644
index 0000000..f13ea1e
--- /dev/null
+++ b/src-tauri/core/src/benchmarks/coordinator/mod.rs
@@ -0,0 +1,858 @@
+//! Runs one benchmark at a time and owns everything around it: the lock,
+//! the state machine, rate-limited progress, cancellation, saving, and
+//! cleanup on every exit path (success, failure, cancel, panic).
+
+use std::panic::{AssertUnwindSafe, catch_unwind};
+use std::path::Path;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::sync::{Arc, Mutex};
+use std::time::{Duration, Instant};
+
+use super::cancel::CancelToken;
+use super::cpu::runner::{CpuHooks, CpuRunConfig, Observer, run_cpu};
+use super::disk::engine::run_disk;
+use super::disk::plan::{self as disk_plan_rules, DiskConfig};
+use super::disk::{self, DiskRequest};
+use super::gpu::runner::{GpuRunConfig, run_gpu};
+use super::gpu::wgpu_backend::WgpuBackend;
+use super::gpu::{self, GpuBackend};
+use super::history::HistoryStore;
+use super::internet::provider::{Cloudflare, Provider};
+use super::internet::{self, InternetConfig, run_internet};
+use super::model::{
+    BenchmarkKind, BenchmarkProfile, BenchmarkResult, BenchmarkState, BenchmarkStatus, DiskPlan,
+    DiskResult, DiskTargetInfo, GpuAdapterInfo, GpuDeviceType, GpuResult, InternetPlan,
+    LiveReading, NetworkPath,
+};
+use super::{BenchmarkError, environment, scoring};
+use crate::errors::{AppError, AppResult};
+use crate::models::TemperatureReading;
+use crate::monitoring::{Engine, unix_millis};
+use crate::platform;
+use crate::sync_util::lock;
+
+/// Least time between two internet tests. The public speed-test endpoints
+/// limit repeated large transfers per address (HTTP 429 for about an hour), so
+/// back-to-back runs would only fail.
+const INTERNET_COOLDOWN: Duration = Duration::from_secs(120);
+
+/// Most test data one app session may move in total, both directions.
+const INTERNET_SESSION_BUDGET_BYTES: u64 = 1_000_000_000;
+
+/// Other drive traffic above this when a disk test starts earns a warning.
+const DISK_BUSY_WARN_BYTES_PER_SEC: f64 = 20e6;
+
+/// The UI never needs more than this many progress updates per second.
+const MIN_EMIT_INTERVAL: Duration = Duration::from_millis(100);
+
+/// Receives progress. Called from the benchmark thread; must not block.
+pub trait ProgressSink: Send + Sync {
+    fn status(&self, status: &BenchmarkStatus);
+    fn finished(&self, result: &BenchmarkResult);
+}
+
+struct ActiveRun {
+    cancel: CancelToken,
+}
+
+struct Shared {
+    status: Mutex<BenchmarkStatus>,
+    /// `Some` while a run owns the benchmark lock.
+    active: Mutex<Option<ActiveRun>>,
+    counter: AtomicU64,
+}
+
+pub struct Coordinator {
+    engine: Arc<Engine>,
+    history: Arc<HistoryStore>,
+    shared: Arc<Shared>,
+    gpu: Arc<dyn GpuBackend>,
+    provider: Arc<dyn Provider>,
+    /// When the last internet test started, for the cooldown.
+    internet_last: Arc<Mutex<Option<Instant>>>,
+    /// Bytes moved by internet tests since the app started.
+    internet_used: Arc<AtomicU64>,
+    internet_cooldown: Duration,
+    internet_budget: u64,
+    /// Tests replace the list built from the mounted filesystems.
+    targets_override: Option<Vec<DiskTargetInfo>>,
+    /// Tests run unoptimised; this lets them exercise scoring and saving.
+    score_development_builds: bool,
+}
+
+/// What the user chose for a run. Everything is an id or a flag; the backend
+/// resolves ids to paths and addresses.
+#[derive(Debug, Clone, Default)]
+pub struct StartOptions {
+    /// Graphics adapter id (GPU runs).
+    pub adapter: Option<String>,
+    /// Disk location id from [`Coordinator::disk_targets`] (disk runs).
+    pub disk_target: Option<String>,
+    /// The user agreed to send and receive test data (internet runs).
+    pub internet_consent: bool,
+}
+
+/// What a run executes. The user chooses only the kind, profile and adapter;
+/// explicit configurations exist for tests.
+pub enum RunPlan {
+    Cpu(CpuRunConfig),
+    Gpu {
+        /// `None` means "build it from the profile once the adapter is known".
+        config: Option<GpuRunConfig>,
+        adapter: Option<String>,
+    },
+    Disk {
+        config: Option<DiskConfig>,
+        target: Box<DiskTargetInfo>,
+    },
+    Internet {
+        config: Option<InternetConfig>,
+    },
+}
+
+impl From<CpuRunConfig> for RunPlan {
+    fn from(cfg: CpuRunConfig) -> Self {
+        Self::Cpu(cfg)
+    }
+}
+
+impl Coordinator {
+    pub fn new(engine: Arc<Engine>, data_dir: Option<&Path>) -> Self {
+        Self {
+            engine,
+            history: Arc::new(HistoryStore::load(data_dir)),
+            shared: Arc::new(Shared {
+                status: Mutex::new(BenchmarkStatus::idle()),
+                active: Mutex::new(None),
+                counter: AtomicU64::new(0),
+            }),
+            gpu: Arc::new(WgpuBackend::new()),
+            provider: Arc::new(Cloudflare::new()),
+            internet_last: Arc::new(Mutex::new(None)),
+            internet_used: Arc::new(AtomicU64::new(0)),
+            internet_cooldown: INTERNET_COOLDOWN,
+            internet_budget: INTERNET_SESSION_BUDGET_BYTES,
+            targets_override: None,
+            score_development_builds: false,
+        }
+    }
+
+    /// Replaces the internet provider (tests use a local server).
+    #[doc(hidden)]
+    pub fn with_internet_provider(mut self, provider: Arc<dyn Provider>) -> Self {
+        self.provider = provider;
+        self
+    }
+
+    /// Replaces the internet cooldown and session budget (tests).
+    #[doc(hidden)]
+    pub fn with_internet_limits(mut self, cooldown: Duration, budget_bytes: u64) -> Self {
+        self.internet_cooldown = cooldown;
+        self.internet_budget = budget_bytes;
+        self
+    }
+
+    /// Replaces the disk locations (tests use temporary folders).
+    #[doc(hidden)]
+    pub fn with_disk_targets(mut self, targets: Vec<DiskTargetInfo>) -> Self {
+        self.targets_override = Some(targets);
+        self
+    }
+
+    /// Locations the disk benchmark may use, from the mounted filesystems.
+    pub fn disk_targets(&self) -> Vec<DiskTargetInfo> {
+        if let Some(t) = &self.targets_override {
+            return t.clone();
+        }
+        let Some(tick) = self.engine.latest() else {
+            return Vec::new();
+        };
+        let mounts: Vec<disk::targets::MountInfo> = tick
+            .disks
+            .iter()
+            .map(|d| disk::targets::MountInfo {
+                mount_point: d.mount_point.clone(),
+                file_system: d.file_system.clone(),
+                device: d.name.clone(),
+                total_bytes: d.total_bytes,
+                free_bytes: d.available_bytes,
+                read_only: d.read_only,
+            })
+            .collect();
+        let home = std::env::var_os("HOME").map(std::path::PathBuf::from);
+        disk::targets::build_targets(&mounts, home.as_deref(), &std::env::temp_dir(), &|p| {
+            disk::writable(p)
+        })
+    }
+
+    /// What a disk run on `target_id` would write, or why it cannot happen.
+    pub fn disk_plan(&self, target_id: &str, profile: BenchmarkProfile) -> AppResult<DiskPlan> {
+        let target = self.find_target(target_id)?;
+        let cfg = DiskConfig::for_profile(profile);
+        let free = disk::free_space(std::path::Path::new(&target.directory), target.free_bytes);
+        let planned = disk_plan_rules::plan_file_bytes(cfg.file_bytes, cfg.min_file_bytes, free);
+        let file_bytes = planned.clone().unwrap_or(0);
+        Ok(DiskPlan {
+            target_id: target.id,
+            directory: target.directory,
+            file_bytes,
+            estimated_bytes_written: disk_plan_rules::estimated_bytes_written(&cfg, file_bytes),
+            estimated_seconds: disk_plan_rules::estimated_seconds(profile),
+            blocked: planned.err(),
+        })
+    }
+
+    /// What an internet run would send and receive, and to whom.
+    pub fn internet_plan(&self, profile: BenchmarkProfile) -> InternetPlan {
+        internet::plan(&*self.provider, profile)
+    }
+
+    fn find_target(&self, id: &str) -> AppResult<DiskTargetInfo> {
+        self.disk_targets()
+            .into_iter()
+            .find(|t| t.id == id)
+            .ok_or_else(|| AppError::InvalidArgument("That location is not available.".into()))
+    }
+
+    /// Replaces the GPU backend (tests use a fake, so CI needs no GPU).
+    #[doc(hidden)]
+    pub fn with_gpu_backend(mut self, backend: Arc<dyn GpuBackend>) -> Self {
+        self.gpu = backend;
+        self
+    }
+
+    /// Graphics adapters a GPU benchmark could run on.
+    pub fn gpu_adapters(&self) -> AppResult<Vec<GpuAdapterInfo>> {
+        self.gpu.adapters().map_err(AppError::from)
+    }
+
+    #[doc(hidden)]
+    pub fn score_development_builds(mut self, yes: bool) -> Self {
+        self.score_development_builds = yes;
+        self
+    }
+
+    pub fn status(&self) -> BenchmarkStatus {
+        lock(&self.shared.status).clone()
+    }
+
+    pub fn history(&self) -> Vec<BenchmarkResult> {
+        self.history.list()
+    }
+
+    pub fn delete_result(&self, id: &str) -> AppResult<()> {
+        self.history.delete(id)
+    }
+
+    /// Asks the running benchmark to stop. No-op when idle.
+    pub fn cancel(&self) {
+        if let Some(run) = lock(&self.shared.active).as_ref() {
+            run.cancel.cancel();
+        }
+    }
+
+    /// `options` carries ids and flags only; options that do not apply to the
+    /// kind are ignored.
+    pub fn start(
+        &self,
+        kind: BenchmarkKind,
+        profile: BenchmarkProfile,
+        options: StartOptions,
+        sink: Arc<dyn ProgressSink>,
+    ) -> AppResult<BenchmarkStatus> {
+        let plan = match kind {
+            BenchmarkKind::Cpu => {
+                let logical = self.engine.static_info().logical_core_count as usize;
+                RunPlan::Cpu(CpuRunConfig::for_profile(profile, logical))
+            }
+            BenchmarkKind::Gpu => RunPlan::Gpu {
+                config: None,
+                adapter: options.adapter,
+            },
+            BenchmarkKind::Disk => {
+                let id = options
+                    .disk_target
+                    .ok_or_else(|| AppError::InvalidArgument("Choose a location first.".into()))?;
+                RunPlan::Disk {
+                    config: None,
+                    target: Box::new(self.find_target(&id)?),
+                }
+            }
+            BenchmarkKind::Internet => {
+                // Checked here, not only in the UI: nothing leaves the
+                // machine unless the caller says the user agreed.
+                if !options.internet_consent {
+                    return Err(AppError::InvalidArgument(
+                        "Agree to send and receive test data before running the internet test."
+                            .into(),
+                    ));
+                }
+                self.check_internet_allowed(profile)?;
+                RunPlan::Internet { config: None }
+            }
+        };
+        let started = self.start_with(kind, profile, plan, sink)?;
+        if kind == BenchmarkKind::Internet {
+            *lock(&self.internet_last) = Some(Instant::now());
+        }
+        Ok(started)
+    }
+
+    /// Cooldown and session data budget for internet tests.
+    fn check_internet_allowed(&self, profile: BenchmarkProfile) -> AppResult<()> {
+        if let Some(last) = *lock(&self.internet_last) {
+            let waited = last.elapsed();
+            if waited < self.internet_cooldown {
+                let left = (self.internet_cooldown - waited).as_secs() + 1;
+                return Err(AppError::InvalidArgument(format!(
+                    "Wait about {left} more seconds before running the internet test again. The test server limits repeated transfers."
+                )));
+            }
+        }
+        let plan = self.internet_plan(profile);
+        let used = self.internet_used.load(Ordering::Relaxed);
+        if used + plan.max_download_bytes + plan.max_upload_bytes > self.internet_budget {
+            return Err(AppError::InvalidArgument(format!(
+                "This session has used {} MB of its {} MB internet test allowance. Restart the app to run it again.",
+                used / 1_000_000,
+                self.internet_budget / 1_000_000
+            )));
+        }
+        Ok(())
+    }
+
+    /// [`start`](Self::start) with an explicit plan (tests use tiny ones).
+    pub fn start_with(
+        &self,
+        kind: BenchmarkKind,
+        profile: BenchmarkProfile,
+        plan: impl Into<RunPlan>,
+        sink: Arc<dyn ProgressSink>,
+    ) -> AppResult<BenchmarkStatus> {
+        let plan = plan.into();
+        let cancel = CancelToken::new();
+        let prefix = match kind {
+            BenchmarkKind::Cpu => "cpu",
+            BenchmarkKind::Gpu => "gpu",
+            BenchmarkKind::Disk => "disk",
+            BenchmarkKind::Internet => "net",
+        };
+        let id = format!(
+            "{prefix}-{}-{}",
+            unix_millis(),
+            self.shared.counter.fetch_add(1, Ordering::Relaxed)
+        );
+        let initial = BenchmarkStatus {
+            state: BenchmarkState::Preparing,
+            run_id: Some(id.clone()),
+            kind: Some(kind),
+            profile: Some(profile),
+            stage: "Starting".into(),
+            ..BenchmarkStatus::idle()
+        };
+        {
+            // Claim the lock and publish the first status together.
+            let mut active = lock(&self.shared.active);
+            if active.is_some() {
+                return Err(AppError::BenchmarkAlreadyRunning);
+            }
+            *active = Some(ActiveRun {
+                cancel: cancel.clone(),
+            });
+            *lock(&self.shared.status) = initial.clone();
+        }
+        sink.status(&initial);
+        self.engine.record_activity(
+            crate::monitoring::activity::Pending::new(
+                crate::models::ActivityKind::BenchmarkStarted,
+            )
+            .detail(format!("{kind:?} benchmark, {profile:?} profile")),
+        );
+
+        let ctx = RunContext {
+            engine: Arc::clone(&self.engine),
+            history: Arc::clone(&self.history),
+            shared: Arc::clone(&self.shared),
+            gpu: Arc::clone(&self.gpu),
+            provider: Arc::clone(&self.provider),
+            internet_used: Arc::clone(&self.internet_used),
+            sink,
+            score_development_builds: self.score_development_builds,
+            id,
+            kind,
+            profile,
+            plan,
+            cancel,
+        };
+        let shared = Arc::clone(&self.shared);
+        std::thread::Builder::new()
+            .name("benchmark".into())
+            .spawn(move || ctx.run())
+            .map_err(|e| {
+                *lock(&shared.active) = None;
+                *lock(&shared.status) = BenchmarkStatus::idle();
+                AppError::BenchmarkFailed(format!("could not start the worker thread: {e}"))
+            })?;
+        Ok(initial)
+    }
+}
+
+struct RunContext {
+    engine: Arc<Engine>,
+    history: Arc<HistoryStore>,
+    shared: Arc<Shared>,
+    gpu: Arc<dyn GpuBackend>,
+    provider: Arc<dyn Provider>,
+    internet_used: Arc<AtomicU64>,
+    sink: Arc<dyn ProgressSink>,
+    score_development_builds: bool,
+    id: String,
+    kind: BenchmarkKind,
+    profile: BenchmarkProfile,
+    plan: RunPlan,
+    cancel: CancelToken,
+}
+
+/// Clears the benchmark lock on any exit, including a panic that escapes
+/// the normal finalisation.
+struct LockGuard(Option<Arc<Shared>>);
+impl Drop for LockGuard {
+    fn drop(&mut self) {
+        if let Some(shared) = &self.0 {
+            *lock(&shared.active) = None;
+        }
+    }
+}
+
+impl RunContext {
+    fn run(self) {
+        let mut guard = LockGuard(Some(Arc::clone(&self.shared)));
+        let reporter = Reporter::new(&self);
+        let outcome = catch_unwind(AssertUnwindSafe(|| self.execute(&reporter)));
+        let (state, message, result) = match outcome {
+            Ok(Ok(result)) => {
+                let saved = if result.environment.development_build {
+                    Ok(())
+                } else {
+                    self.history.add(result.clone())
+                };
+                let message = saved
+                    .err()
+                    .map(|e| format!("The result could not be saved: {e}"));
+                (BenchmarkState::Completed, message, Some(result))
+            }
+            Ok(Err(BenchmarkError::Cancelled)) => (
+                BenchmarkState::Cancelled,
+                Some("Cancelled. Nothing was saved.".to_owned()),
+                None,
+            ),
+            Ok(Err(e)) => (BenchmarkState::Failed, Some(e.to_string()), None),
+            Err(_) => (
+                BenchmarkState::Failed,
+                Some("The benchmark stopped unexpectedly.".to_owned()),
+                None,
+            ),
+        };
+        tracing::info!(id = %self.id, ?state, "benchmark finished");
+
+        // Publish the final status and release the lock as one step, so a
+        // new run can never be overwritten by the old run's last update.
+        let final_status = {
+            let mut active = lock(&self.shared.active);
+            let mut status = lock(&self.shared.status);
+            status.state = state;
+            status.message = message;
+            if state == BenchmarkState::Completed {
+                status.fraction = 1.0;
+                status.stage = "Done".into();
+            }
+            status.live = None;
+            let snapshot = status.clone();
+            *active = None;
+            // A subsequent run may start as soon as this mutex is released.
+            // The old run's panic guard must never clear the new run's lock.
+            guard.0 = None;
+            snapshot
+        };
+        if let Some(result) = &result {
+            self.sink.finished(result);
+        }
+        self.sink.status(&final_status);
+        // Also recorded when cancelled or failed; the detail says which.
+        self.engine.record_activity(
+            crate::monitoring::activity::Pending::new(
+                crate::models::ActivityKind::BenchmarkCompleted,
+            )
+            .detail(format!("{:?} benchmark: {state:?}", self.kind)),
+        );
+    }
+
+    /// Combined read and write rate of all drives right now, in bytes/s.
+    fn other_disk_activity(&self) -> Option<f64> {
+        let tick = self.engine.latest()?;
+        Some(
+            tick.disks
+                .iter()
+                .map(|d| d.read_bytes_per_sec.unwrap_or(0.0) + d.write_bytes_per_sec.unwrap_or(0.0))
+                .sum(),
+        )
+    }
+
+    /// The interface carrying internet traffic and whether a tunnel is up.
+    fn network_path(&self) -> NetworkPath {
+        let nets = self
+            .engine
+            .latest()
+            .map(|t| t.networks.clone())
+            .unwrap_or_default();
+        let kind_of = |name: &str| {
+            nets.iter()
+                .find(|n| n.name == name)
+                .map_or(crate::models::InterfaceKind::Unknown, |n| n.kind)
+        };
+        let others: Vec<_> = nets.iter().map(|n| (n.name.clone(), n.kind)).collect();
+        internet::route::describe_path(internet::route::read_default_route(), &kind_of, &others)
+    }
+
+    fn execute(&self, reporter: &Reporter) -> Result<BenchmarkResult, BenchmarkError> {
+        let started_ms = unix_millis();
+        let started = Instant::now();
+        reporter.set_state(
+            BenchmarkState::Preflight,
+            match self.plan {
+                RunPlan::Cpu(_) => "Checking the system",
+                RunPlan::Gpu { .. } => "Checking graphics adapters",
+                RunPlan::Disk { .. } => "Checking the drive",
+                RunPlan::Internet { .. } => "Checking the connection",
+            },
+        );
+
+        let background = self.engine.latest().map(|t| t.cpu.usage_percent);
+        let mut env = environment::collect(self.engine.static_info(), background);
+        if self.score_development_builds {
+            env.development_build = false;
+        }
+        let mut warnings = environment::warnings(&env);
+        if self.cancel.is_cancelled() {
+            return Err(BenchmarkError::Cancelled);
+        }
+
+        let mut result = BenchmarkResult {
+            id: self.id.clone(),
+            kind: self.kind,
+            profile: self.profile,
+            started_at_ms: started_ms,
+            duration_ms: 0,
+            method: scoring::cpu_method(),
+            environment: env,
+            workloads: Vec::new(),
+            sustained: None,
+            scores: None,
+            gpu: None,
+            gpu_score: None,
+            disk: None,
+            disk_score: None,
+            internet: None,
+            warnings: Vec::new(),
+            stability: super::model::Stability::High,
+            outlier_method: "1.5×IQR; flagged, none removed".into(),
+            affinity: "not pinned".into(),
+        };
+
+        match &self.plan {
+            RunPlan::Cpu(cfg) => self.execute_cpu(cfg, reporter, &mut warnings, &mut result)?,
+            RunPlan::Gpu { config, adapter } => self.execute_gpu(
+                config.as_ref(),
+                adapter.as_deref(),
+                reporter,
+                &mut warnings,
+                &mut result,
+            )?,
+            RunPlan::Disk { config, target } => self.execute_disk(
+                config.as_ref(),
+                target,
+                reporter,
+                &mut warnings,
+                &mut result,
+            )?,
+            RunPlan::Internet { config } => {
+                self.execute_internet(config.as_ref(), reporter, &mut warnings, &mut result)?
+            }
+        }
+        result.warnings = warnings;
+        result.duration_ms = started.elapsed().as_millis() as u64;
+        Ok(result)
+    }
+
+    fn execute_cpu(
+        &self,
+        cfg: &CpuRunConfig,
+        reporter: &Reporter,
+        warnings: &mut Vec<String>,
+        result: &mut BenchmarkResult,
+    ) -> Result<(), BenchmarkError> {
+        let development_build = result.environment.development_build;
+        let hooks = EngineHooks(&self.engine);
+        let out = run_cpu(cfg, &hooks, &self.cancel, reporter)?;
+        reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
+        let scores = if development_build {
+            None
+        } else {
+            scoring::cpu_scores(&out.workloads)
+        };
+        if scores.is_none() && !development_build {
+            warnings.push("Some measurements were unavailable, so no score was calculated.".into());
+        }
+        result.stability = scoring::stability(&out.workloads, warnings);
+        result.workloads = out.workloads;
+        result.sustained = out.sustained;
+        result.scores = scores;
+        result.affinity = out.affinity;
+        Ok(())
+    }
+
+    fn execute_gpu(
+        &self,
+        config: Option<&GpuRunConfig>,
+        adapter: Option<&str>,
+        reporter: &Reporter,
+        warnings: &mut Vec<String>,
+        result: &mut BenchmarkResult,
+    ) -> Result<(), BenchmarkError> {
+        let development_build = result.environment.development_build;
+        let profile = self.profile;
+        let (info, mut exec, cfg) = self.gpu.open(adapter, &|a| {
+            config.cloned().unwrap_or_else(|| {
+                GpuRunConfig::for_profile(profile, a.device_type == GpuDeviceType::Discrete)
+            })
+        })?;
+        let out = run_gpu(&mut *exec, &cfg, &self.cancel, reporter)?;
+        // Release the device before the (possibly slow) bookkeeping.
+        drop(exec);
+        reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
+        let software = info.device_type == GpuDeviceType::Software;
+        let score = if development_build || software {
+            None
+        } else {
+            scoring::gpu_score(&out.workloads)
+        };
+        if score.is_none() && !development_build && !software {
+            warnings.push("Some measurements were unavailable, so no score was calculated.".into());
+        }
+        result.method = scoring::gpu_method();
+        result.stability = scoring::gpu_stability(&out.workloads, warnings);
+        result.gpu_score = score;
+        result.sustained = None;
+        result.gpu = Some(GpuResult {
+            notes: gpu::notes(&info, out.timing_method),
+            adapter: info,
+            timing_method: out.timing_method,
+            workloads: out.workloads,
+            sustained: out.sustained,
+        });
+        Ok(())
+    }
+
+    fn execute_disk(
+        &self,
+        config: Option<&DiskConfig>,
+        target: &DiskTargetInfo,
+        reporter: &Reporter,
+        warnings: &mut Vec<String>,
+        result: &mut BenchmarkResult,
+    ) -> Result<(), BenchmarkError> {
+        let cfg = config
+            .cloned()
+            .unwrap_or_else(|| DiskConfig::for_profile(self.profile));
+        let parent = std::path::PathBuf::from(&target.directory);
+        disk::remove_stale(&parent);
+        let busy = self.other_disk_activity();
+        let req = DiskRequest {
+            free_bytes: disk::free_space(&parent, target.free_bytes),
+            parent,
+            run_id: self.id.clone(),
+            config: cfg,
+            want_direct: true,
+        };
+        let out = run_disk(&req, &self.cancel, reporter)?;
+        reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
+        let mut notes = out.io_mode_note.iter().cloned().collect::<Vec<_>>();
+        notes.extend(target.notes.iter().cloned());
+        if out.io_mode == super::model::IoMode::Buffered {
+            warnings.push(
+                "Buffered I/O was used, so the operating system's cache is part of what was measured. No score is given."
+                    .into(),
+            );
+        }
+        if let Some(rate) = busy.filter(|r| *r > DISK_BUSY_WARN_BYTES_PER_SEC) {
+            warnings.push(format!(
+                "Other programs were using the drive ({:.0} MB/s) when the test started, which can lower the results.",
+                rate / 1e6
+            ));
+        }
+        let score = if result.environment.development_build {
+            None
+        } else {
+            scoring::disk_score(&out.phases, out.io_mode)
+        };
+        result.method = scoring::disk_method(out.io_mode);
+        result.stability = scoring::disk_stability(&out.phases, warnings);
+        result.disk_score = score;
+        result.disk = Some(DiskResult {
+            device: target.device.as_deref().and_then(disk::device::device_info),
+            target: target.clone(),
+            io_mode: out.io_mode,
+            io_mode_note: out.io_mode_note,
+            file_bytes: out.file_bytes,
+            bytes_written: out.bytes_written,
+            bytes_read: out.bytes_read,
+            phases: out.phases,
+            notes,
+        });
+        Ok(())
+    }
+
+    fn execute_internet(
+        &self,
+        config: Option<&InternetConfig>,
+        reporter: &Reporter,
+        warnings: &mut Vec<String>,
+        result: &mut BenchmarkResult,
+    ) -> Result<(), BenchmarkError> {
+        let cfg = config
+            .cloned()
+            .unwrap_or_else(|| InternetConfig::for_profile(self.profile));
+        let out = run_internet(
+            &*self.provider,
+            &cfg,
+            self.network_path(),
+            &self.cancel,
+            &self.internet_used,
+            reporter,
+        )?;
+        reporter.set_state(BenchmarkState::Finalizing, "Calculating results");
+        let dl = out.download.as_ref().map(|t| t.samples.clone());
+        let ul = out.upload.as_ref().map(|t| t.samples.clone());
+        result.method = scoring::internet_method();
+        result.stability = scoring::internet_stability(
+            dl.as_deref().unwrap_or(&[]),
+            ul.as_deref().unwrap_or(&[]),
+            warnings,
+        );
+        if out.path.vpn_suspected {
+            warnings.push("A VPN or tunnel looks active; results include its overhead.".into());
+        }
+        result.internet = Some(out);
+        Ok(())
+    }
+}
+
+/// Frequency and temperature come from the monitoring engine's latest tick,
+/// so the benchmark adds no sensor reads of its own.
+struct EngineHooks<'a>(&'a Engine);
+
+impl CpuHooks for EngineHooks<'_> {
+    fn pin_current_thread(&self, slot: usize) -> bool {
+        platform::pin_current_thread(slot)
+    }
+
+    fn frequency_mhz(&self) -> Option<f64> {
+        self.0.latest()?.cpu.frequency_mhz.map(|f| f as f64)
+    }
+
+    fn temperature_c(&self) -> Option<f32> {
+        cpu_temperature(&self.0.latest()?.temperatures)
+    }
+}
+
+/// The CPU package temperature, only when a sensor label identifies it. A
+/// generic `temp1` is never assumed to be the CPU.
+pub fn cpu_temperature(readings: &[TemperatureReading]) -> Option<f32> {
+    const PREFERRED: [&str; 6] = [
+        "coretemp Package",
+        "k10temp Tctl",
+        "k10temp Tdie",
+        "zenpower Tdie",
+        "x86_pkg_temp",
+        "cpu_thermal",
+    ];
+    PREFERRED.iter().find_map(|prefix| {
+        readings
+            .iter()
+            .find(|r| r.label.starts_with(prefix))
+            .map(|r| r.celsius)
+    })
+}
+
+/// Turns the runner's callbacks into rate-limited status updates.
+struct Reporter {
+    shared: Arc<Shared>,
+    sink: Arc<dyn ProgressSink>,
+    engine: Arc<Engine>,
+    started: Instant,
+    last_emit: Mutex<Option<Instant>>,
+}
+
+impl Reporter {
+    fn new(ctx: &RunContext) -> Self {
+        Self {
+            shared: Arc::clone(&ctx.shared),
+            sink: Arc::clone(&ctx.sink),
+            engine: Arc::clone(&ctx.engine),
+            started: Instant::now(),
+            last_emit: Mutex::new(None),
+        }
+    }
+
+    fn set_state(&self, state: BenchmarkState, stage: &str) {
+        self.update(|s| {
+            s.state = state;
+            s.stage = stage.to_owned();
+        });
+    }
+
+    /// Applies `change`, then emits unless an update went out less than
+    /// [`MIN_EMIT_INTERVAL`] ago and the state did not change.
+    fn update(&self, change: impl FnOnce(&mut BenchmarkStatus)) {
+        let tick = self.engine.latest();
+        let (snapshot, state_changed) = {
+            let mut status = lock(&self.shared.status);
+            // A finished or cancelled run's late callbacks must not revive it.
+            if !status.state.is_active() {
+                return;
+            }
+            let before = status.state;
+            change(&mut status);
+            status.elapsed_ms = self.started.elapsed().as_millis() as u64;
+            if let Some(t) = tick {
+                status.cpu_percent = Some(t.cpu.usage_percent);
+                status.frequency_mhz = t.cpu.frequency_mhz.map(|f| f as f64);
+                status.temperature_c = cpu_temperature(&t.temperatures);
+            }
+            (status.clone(), status.state != before)
+        };
+        let mut last = lock(&self.last_emit);
+        if state_changed || last.is_none_or(|t| t.elapsed() >= MIN_EMIT_INTERVAL) {
+            *last = Some(Instant::now());
+            drop(last);
+            self.sink.status(&snapshot);
+        }
+    }
+}
+
+impl Observer for Reporter {
+    fn stage(&self, state: BenchmarkState, label: &str, fraction: f32) {
+        self.update(|s| {
+            s.state = state;
+            s.stage = label.to_owned();
+            s.fraction = fraction.clamp(0.0, 1.0);
+        });
+    }
+
+    fn live(&self, reading: Option<LiveReading>) {
+        self.update(|s| s.live = reading);
+    }
+}
+
+#[cfg(test)]
+mod tests;
diff --git a/src-tauri/core/src/benchmarks/coordinator/tests.rs b/src-tauri/core/src/benchmarks/coordinator/tests.rs
new file mode 100644
index 0000000..2178aac
--- /dev/null
+++ b/src-tauri/core/src/benchmarks/coordinator/tests.rs
@@ -0,0 +1,674 @@
+use super::*;
+use crate::benchmarks::model::{CpuScores, PowerSource};
+use crate::models::MonitoringState;
+
+#[derive(Default)]
+struct Recorder {
+    statuses: Mutex<Vec<BenchmarkStatus>>,
+    results: Mutex<Vec<BenchmarkResult>>,
+}
+impl ProgressSink for Recorder {
+    fn status(&self, s: &BenchmarkStatus) {
+        lock(&self.statuses).push(s.clone());
+    }
+    fn finished(&self, r: &BenchmarkResult) {
+        lock(&self.results).push(r.clone());
+    }
+}
+
+fn coordinator() -> Coordinator {
+    let engine = Arc::new(Engine::start(MonitoringState::default()).expect("engine"));
+    Coordinator::new(engine, None).score_development_builds(true)
+}
+
+fn wait_until_idle(c: &Coordinator) -> BenchmarkStatus {
+    let deadline = Instant::now() + Duration::from_secs(60);
+    loop {
+        let s = c.status();
+        if !s.state.is_active() && lock(&c.shared.active).is_none() {
+            return s;
+        }
+        assert!(Instant::now() < deadline, "benchmark did not finish");
+        std::thread::sleep(Duration::from_millis(10));
+    }
+}
+
+fn quick(c: &Coordinator, sink: &Arc<Recorder>, cfg: CpuRunConfig) -> AppResult<BenchmarkStatus> {
+    let sink: Arc<dyn ProgressSink> = sink.clone();
+    c.start_with(BenchmarkKind::Cpu, BenchmarkProfile::Quick, cfg, sink)
+}
+
+#[test]
+fn a_finished_runs_guard_cannot_release_the_next_runs_lock() {
+    use std::sync::{Barrier, mpsc};
+    struct Finishing {
+        entered: mpsc::Sender<()>,
+        release: Arc<Barrier>,
+        dropped: mpsc::Sender<()>,
+    }
+    impl ProgressSink for Finishing {
+        fn status(&self, _: &BenchmarkStatus) {}
+        fn finished(&self, _: &BenchmarkResult) {
+            self.entered.send(()).unwrap();
+            self.release.wait();
+        }
+    }
+    impl Drop for Finishing {
+        fn drop(&mut self) {
+            let _ = self.dropped.send(());
+        }
+    }
+    let c = coordinator();
+    let (entered, ready) = mpsc::channel();
+    let (dropped, done) = mpsc::channel();
+    let release = Arc::new(Barrier::new(2));
+    c.start_with(
+        BenchmarkKind::Cpu,
+        BenchmarkProfile::Quick,
+        CpuRunConfig::test(),
+        Arc::new(Finishing {
+            entered,
+            release: Arc::clone(&release),
+            dropped,
+        }),
+    )
+    .unwrap();
+    ready.recv_timeout(Duration::from_secs(30)).unwrap();
+    let mut long = CpuRunConfig::test();
+    long.int_chunk_steps = u64::MAX / 4096;
+    let sink = Arc::new(Recorder::default());
+    quick(&c, &sink, long).unwrap();
+    release.wait();
+    done.recv_timeout(Duration::from_secs(10)).unwrap();
+    let third = quick(&c, &sink, CpuRunConfig::test());
+    c.cancel();
+    wait_until_idle(&c);
+    assert!(matches!(third, Err(AppError::BenchmarkAlreadyRunning)));
+}
+
+#[test]
+fn a_full_run_completes_scores_and_saves() {
+    let c = coordinator();
+    let sink = Arc::new(Recorder::default());
+    let started = quick(&c, &sink, CpuRunConfig::test()).expect("starts");
+    assert_eq!(started.state, BenchmarkState::Preparing);
+
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Completed);
+    assert_eq!(done.fraction, 1.0);
+
+    let results = lock(&sink.results);
+    assert_eq!(results.len(), 1);
+    let r = &results[0];
+    assert_eq!(r.workloads.len(), 10);
+    assert!(
+        matches!(r.scores, Some(CpuScores { single_core, multi_core }) if single_core > 0 && multi_core > 0)
+    );
+    assert_eq!(r.method.method_id, "cpu-method-v1");
+    assert!(!r.environment.development_build);
+    assert_eq!(c.history().len(), 1);
+    assert_eq!(c.history()[0].id, r.id);
+
+    // The state machine only moves forward through the expected states.
+    let states: Vec<BenchmarkState> = lock(&sink.statuses).iter().map(|s| s.state).collect();
+    let order = |s: &BenchmarkState| match s {
+        BenchmarkState::Preparing => 0,
+        BenchmarkState::Preflight => 1,
+        BenchmarkState::WarmingUp | BenchmarkState::Running => 2,
+        BenchmarkState::Finalizing => 3,
+        BenchmarkState::Completed => 4,
+        other => panic!("unexpected state {other:?}"),
+    };
+    assert!(
+        states.windows(2).all(|p| order(&p[0]) <= order(&p[1])),
+        "{states:?}"
+    );
+    assert_eq!(states.last(), Some(&BenchmarkState::Completed));
+}
+
+#[test]
+fn only_one_benchmark_runs_at_a_time() {
+    let c = coordinator();
+    let sink = Arc::new(Recorder::default());
+    let mut long = CpuRunConfig::test();
+    long.int_chunk_steps = u64::MAX / 4096;
+    quick(&c, &sink, long).expect("first starts");
+    let second = quick(&c, &sink, CpuRunConfig::test());
+    assert!(matches!(second, Err(AppError::BenchmarkAlreadyRunning)));
+    c.cancel();
+    wait_until_idle(&c);
+    // The lock is free again.
+    quick(&c, &sink, CpuRunConfig::test()).expect("can start again");
+    assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
+}
+
+#[test]
+fn cancelling_stops_the_run_saves_nothing_and_frees_the_lock() {
+    let c = coordinator();
+    let sink = Arc::new(Recorder::default());
+    let mut long = CpuRunConfig::test();
+    long.int_chunk_steps = u64::MAX / 4096;
+    quick(&c, &sink, long).expect("starts");
+    std::thread::sleep(Duration::from_millis(150));
+    let t = Instant::now();
+    c.cancel();
+    let done = wait_until_idle(&c);
+    assert!(t.elapsed() < Duration::from_secs(3), "{:?}", t.elapsed());
+    assert_eq!(done.state, BenchmarkState::Cancelled);
+    assert!(
+        done.message
+            .is_some_and(|m| m.contains("Nothing was saved"))
+    );
+    assert!(c.history().is_empty());
+    assert!(lock(&sink.results).is_empty());
+}
+
+#[test]
+fn cancelling_while_idle_does_nothing() {
+    let c = coordinator();
+    c.cancel();
+    assert_eq!(c.status().state, BenchmarkState::Idle);
+}
+
+#[test]
+fn development_builds_are_flagged_unscored_and_not_saved() {
+    let engine = Arc::new(Engine::start(MonitoringState::default()).expect("engine"));
+    let c = Coordinator::new(engine, None); // default: treat debug as development
+    let sink = Arc::new(Recorder::default());
+    quick(&c, &sink, CpuRunConfig::test()).expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Completed);
+    if cfg!(debug_assertions) {
+        let results = lock(&sink.results);
+        let r = &results[0];
+        assert!(r.environment.development_build);
+        assert!(r.scores.is_none());
+        assert!(r.warnings.iter().any(|w| w.contains("Development build")));
+        assert!(c.history().is_empty());
+    }
+}
+
+#[test]
+fn progress_updates_are_rate_limited() {
+    let c = coordinator();
+    let sink = Arc::new(Recorder::default());
+    let dyn_sink: Arc<dyn ProgressSink> = sink.clone();
+    {
+        let ctx_status = BenchmarkStatus {
+            state: BenchmarkState::Running,
+            ..BenchmarkStatus::idle()
+        };
+        *lock(&c.shared.status) = ctx_status;
+    }
+    let reporter = Reporter {
+        shared: Arc::clone(&c.shared),
+        sink: dyn_sink,
+        engine: Arc::clone(&c.engine),
+        started: Instant::now(),
+        last_emit: Mutex::new(None),
+    };
+    let t = Instant::now();
+    for i in 0..5000 {
+        reporter.live(Some(LiveReading {
+            label: "x".into(),
+            value: f64::from(i),
+            unit: "u".into(),
+        }));
+    }
+    let emitted = lock(&sink.statuses).len();
+    let max = 1 + (t.elapsed().as_millis() / MIN_EMIT_INTERVAL.as_millis()) as usize;
+    assert!(
+        emitted >= 1 && emitted <= max,
+        "{emitted} updates in {:?}",
+        t.elapsed()
+    );
+    // The latest value is always the one stored, even when not emitted.
+    assert_eq!(
+        lock(&c.shared.status).live.as_ref().map(|l| l.value),
+        Some(4999.0)
+    );
+    // A state change always goes out immediately.
+    reporter.stage(BenchmarkState::Finalizing, "Done soon", 0.9);
+    assert_eq!(
+        lock(&sink.statuses).last().map(|s| s.state),
+        Some(BenchmarkState::Finalizing)
+    );
+}
+
+#[test]
+fn late_callbacks_do_not_revive_a_finished_run() {
+    let c = coordinator();
+    let sink = Arc::new(Recorder::default());
+    let dyn_sink: Arc<dyn ProgressSink> = sink.clone();
+    *lock(&c.shared.status) = BenchmarkStatus {
+        state: BenchmarkState::Cancelled,
+        ..BenchmarkStatus::idle()
+    };
+    let reporter = Reporter {
+        shared: Arc::clone(&c.shared),
+        sink: dyn_sink,
+        engine: Arc::clone(&c.engine),
+        started: Instant::now(),
+        last_emit: Mutex::new(None),
+    };
+    reporter.stage(BenchmarkState::Running, "late", 0.5);
+    assert_eq!(c.status().state, BenchmarkState::Cancelled);
+    assert!(lock(&sink.statuses).is_empty());
+}
+
+fn reading(label: &str, c: f32) -> TemperatureReading {
+    TemperatureReading {
+        label: label.into(),
+        celsius: c,
+        max_celsius: None,
+        critical_celsius: None,
+    }
+}
+
+#[test]
+fn cpu_temperature_needs_an_identifying_label() {
+    // `temp1` is never assumed to be the CPU.
+    assert_eq!(
+        cpu_temperature(&[
+            reading("acpitz temp1", 27.0),
+            reading("nvme Composite", 40.0)
+        ]),
+        None
+    );
+    assert_eq!(
+        cpu_temperature(&[
+            reading("coretemp Core 0", 60.0),
+            reading("acpitz temp1", 27.0),
+            reading("coretemp Package id 0", 62.0),
+        ]),
+        Some(62.0)
+    );
+    assert_eq!(
+        cpu_temperature(&[reading("k10temp Tctl", 55.0)]),
+        Some(55.0)
+    );
+    assert_eq!(cpu_temperature(&[]), None);
+    // Environment type is available to tests that need it.
+    let _ = PowerSource::Unknown;
+}
+
+// ------------------------------------------------------------- GPU
+use crate::benchmarks::gpu::adapters;
+use crate::benchmarks::gpu::runner::GpuExecutor;
+use crate::benchmarks::gpu::runner::tests::Fake;
+
+struct FakeBackend {
+    adapters: Vec<GpuAdapterInfo>,
+    fail: Option<String>,
+}
+
+impl GpuBackend for FakeBackend {
+    fn adapters(&self) -> Result<Vec<GpuAdapterInfo>, BenchmarkError> {
+        Ok(self.adapters.clone())
+    }
+
+    fn open(
+        &self,
+        id: Option<&str>,
+        config_for: &dyn Fn(&GpuAdapterInfo) -> GpuRunConfig,
+    ) -> Result<(GpuAdapterInfo, Box<dyn GpuExecutor>, GpuRunConfig), BenchmarkError> {
+        if let Some(m) = &self.fail {
+            return Err(BenchmarkError::Failed(m.clone()));
+        }
+        let info = adapters::select(&self.adapters, id)?.clone();
+        let cfg = config_for(&info);
+        Ok((info, Box::new(Fake::default()), cfg))
+    }
+}
+
+fn adapter(id: &str, t: GpuDeviceType) -> GpuAdapterInfo {
+    GpuAdapterInfo {
+        id: id.into(),
+        name: format!("Test {id}"),
+        vendor_id: 1,
+        device_id: 2,
+        device_type: t,
+        backend: "vulkan".into(),
+        driver: "test".into(),
+        driver_info: "1.0".into(),
+        supports_timestamps: true,
+        max_buffer_bytes: 1 << 30,
+        max_storage_binding_bytes: 1 << 27,
+        max_workgroups_per_dimension: 65_535,
+        recommended: false,
+    }
+}
+
+fn gpu_coordinator(list: Vec<GpuAdapterInfo>, fail: Option<&str>) -> Coordinator {
+    coordinator().with_gpu_backend(Arc::new(FakeBackend {
+        adapters: list,
+        fail: fail.map(str::to_owned),
+    }))
+}
+
+fn start_gpu(
+    c: &Coordinator,
+    sink: &Arc<Recorder>,
+    adapter: Option<&str>,
+) -> AppResult<BenchmarkStatus> {
+    let sink: Arc<dyn ProgressSink> = sink.clone();
+    c.start_with(
+        BenchmarkKind::Gpu,
+        BenchmarkProfile::Quick,
+        RunPlan::Gpu {
+            config: Some(GpuRunConfig::test()),
+            adapter: adapter.map(str::to_owned),
+        },
+        sink,
+    )
+}
+
+#[test]
+fn a_gpu_run_completes_scores_saves_and_records_the_adapter() {
+    let c = gpu_coordinator(
+        vec![
+            adapter("cpu-like", GpuDeviceType::Software),
+            adapter("igpu", GpuDeviceType::Integrated),
+        ],
+        None,
+    );
+    let sink = Arc::new(Recorder::default());
+    start_gpu(&c, &sink, None).expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Completed, "{:?}", done.message);
+
+    let r = lock(&sink.results)[0].clone();
+    assert_eq!(r.kind, BenchmarkKind::Gpu);
+    assert_eq!(r.method.method_id, "gpu-compute-v1");
+    let g = r.gpu.as_ref().expect("gpu result");
+    // The software renderer is never the default.
+    assert_eq!(g.adapter.id, "igpu");
+    assert_eq!(g.workloads.len(), 3);
+    assert!(g.workloads.iter().all(|w| w.validated));
+    assert!(r.gpu_score.is_some_and(|s| s > 0));
+    assert!(r.scores.is_none() && r.workloads.is_empty());
+    assert!(g.notes.iter().any(|n| n.contains("shared system memory")));
+    assert!(r.id.starts_with("gpu-"));
+    // Saved, and survives a JSON round trip unchanged.
+    assert_eq!(c.history().len(), 1);
+    let json = serde_json::to_string(&r).unwrap();
+    assert_eq!(serde_json::from_str::<BenchmarkResult>(&json).unwrap(), r);
+}
+
+#[test]
+fn a_software_renderer_is_run_on_request_but_never_scored() {
+    let c = gpu_coordinator(vec![adapter("llvmpipe", GpuDeviceType::Software)], None);
+    let sink = Arc::new(Recorder::default());
+    start_gpu(&c, &sink, Some("llvmpipe")).expect("starts");
+    assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
+    let r = lock(&sink.results)[0].clone();
+    assert_eq!(r.gpu_score, None);
+    assert!(
+        r.gpu
+            .unwrap()
+            .notes
+            .iter()
+            .any(|n| n.contains("software renderer"))
+    );
+    // Not scored, but also not a failure: no misleading "unavailable" warning.
+    assert!(!r.warnings.iter().any(|w| w.contains("unavailable")));
+}
+
+#[test]
+fn no_adapter_fails_cleanly_and_frees_the_lock() {
+    let c = gpu_coordinator(vec![], None);
+    let sink = Arc::new(Recorder::default());
+    start_gpu(&c, &sink, None).expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Failed);
+    assert!(
+        done.message
+            .is_some_and(|m| m.contains("No graphics adapter"))
+    );
+    assert!(c.history().is_empty());
+    // The app keeps working: a CPU benchmark can run right after.
+    quick(&c, &sink, CpuRunConfig::test()).expect("can start another");
+    assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
+}
+
+#[test]
+fn a_driver_failure_is_reported_in_plain_words() {
+    let c = gpu_coordinator(
+        vec![adapter("igpu", GpuDeviceType::Integrated)],
+        Some("The graphics adapter could not be opened: driver said no"),
+    );
+    let sink = Arc::new(Recorder::default());
+    start_gpu(&c, &sink, None).expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Failed);
+    assert!(
+        done.message
+            .is_some_and(|m| m.contains("could not be opened"))
+    );
+}
+
+#[test]
+fn a_choice_of_a_vanished_adapter_is_an_error_not_a_silent_fallback() {
+    let c = gpu_coordinator(vec![adapter("igpu", GpuDeviceType::Integrated)], None);
+    let sink = Arc::new(Recorder::default());
+    start_gpu(&c, &sink, Some("gone")).expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Failed);
+    assert!(
+        done.message
+            .is_some_and(|m| m.contains("no longer available"))
+    );
+}
+
+#[test]
+fn cpu_and_gpu_benchmarks_share_one_lock() {
+    let c = gpu_coordinator(vec![adapter("igpu", GpuDeviceType::Integrated)], None);
+    let sink = Arc::new(Recorder::default());
+    let mut long = CpuRunConfig::test();
+    long.int_chunk_steps = u64::MAX / 4096;
+    quick(&c, &sink, long).expect("cpu starts");
+    assert!(matches!(
+        start_gpu(&c, &sink, None),
+        Err(AppError::BenchmarkAlreadyRunning)
+    ));
+    c.cancel();
+    wait_until_idle(&c);
+    start_gpu(&c, &sink, None).expect("gpu can start after");
+    assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
+}
+
+#[test]
+fn development_builds_do_not_score_gpu_runs_either() {
+    let engine = Arc::new(Engine::start(MonitoringState::default()).expect("engine"));
+    let c = Coordinator::new(engine, None).with_gpu_backend(Arc::new(FakeBackend {
+        adapters: vec![adapter("igpu", GpuDeviceType::Integrated)],
+        fail: None,
+    }));
+    let sink = Arc::new(Recorder::default());
+    start_gpu(&c, &sink, None).expect("starts");
+    assert_eq!(wait_until_idle(&c).state, BenchmarkState::Completed);
+    if cfg!(debug_assertions) {
+        let r = lock(&sink.results)[0].clone();
+        assert!(r.environment.development_build && r.gpu_score.is_none());
+        assert!(c.history().is_empty());
+    }
+}
+
+#[test]
+fn the_adapter_list_comes_from_the_backend() {
+    let c = gpu_coordinator(
+        vec![
+            adapter("a", GpuDeviceType::Discrete),
+            adapter("b", GpuDeviceType::Integrated),
+        ],
+        None,
+    );
+    assert_eq!(c.gpu_adapters().unwrap().len(), 2);
+}
+
+fn target(dir: &std::path::Path) -> DiskTargetInfo {
+    DiskTargetInfo {
+        id: "test".into(),
+        label: "Test folder".into(),
+        directory: dir.to_string_lossy().into_owned(),
+        mount_point: "/".into(),
+        file_system: "ext4".into(),
+        device: None,
+        free_bytes: 100 << 30,
+        total_bytes: 200 << 30,
+        recommended: true,
+        notes: vec![],
+    }
+}
+
+// Unix only: the disk engine does not exist on other platforms yet.
+#[cfg(unix)]
+#[test]
+fn a_disk_run_is_saved_with_its_target_mode_and_wear() {
+    let dir = tempfile::tempdir().unwrap();
+    let t = target(dir.path());
+    let c = coordinator().with_disk_targets(vec![t.clone()]);
+    let sink = Arc::new(Recorder::default());
+    let sink2: Arc<dyn ProgressSink> = sink.clone();
+    c.start_with(
+        BenchmarkKind::Disk,
+        BenchmarkProfile::Quick,
+        RunPlan::Disk {
+            config: Some(DiskConfig::test()),
+            target: Box::new(t),
+        },
+        sink2,
+    )
+    .expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Completed, "{:?}", done.message);
+    let results = lock(&sink.results);
+    let r = &results[0];
+    let d = r.disk.as_ref().expect("disk result");
+    assert_eq!(d.phases.len(), 6);
+    assert_eq!(d.target.id, "test");
+    assert!(d.bytes_written > 0 && d.bytes_read > 0);
+    assert!(r.method.method_id.starts_with("disk-"));
+    assert!(r.method.method_id.ends_with(match d.io_mode {
+        crate::benchmarks::model::IoMode::Direct => "direct-v1",
+        crate::benchmarks::model::IoMode::Buffered => "buffered-v1",
+    }));
+    assert!(r.id.starts_with("disk-"));
+    assert_eq!(c.history().len(), 1);
+    assert!(
+        !dir.path()
+            .join(crate::benchmarks::disk::file::DIR_NAME)
+            .exists(),
+        "no test file left behind"
+    );
+}
+
+#[test]
+fn disk_and_internet_runs_refuse_unknown_targets_and_missing_consent() {
+    let c = coordinator().with_disk_targets(vec![]);
+    let sink: Arc<dyn ProgressSink> = Arc::new(Recorder::default());
+    let go =
+        |options: StartOptions, kind| c.start(kind, BenchmarkProfile::Quick, options, sink.clone());
+    assert!(matches!(
+        go(StartOptions::default(), BenchmarkKind::Disk),
+        Err(AppError::InvalidArgument(_))
+    ));
+    assert!(matches!(
+        go(
+            StartOptions {
+                disk_target: Some("/etc".into()),
+                ..Default::default()
+            },
+            BenchmarkKind::Disk
+        ),
+        Err(AppError::InvalidArgument(_))
+    ));
+    assert!(matches!(
+        go(StartOptions::default(), BenchmarkKind::Internet),
+        Err(AppError::InvalidArgument(_))
+    ));
+    // Nothing started, so the lock is free.
+    assert!(lock(&c.shared.active).is_none());
+    assert_eq!(c.status().state, BenchmarkState::Idle);
+}
+
+#[test]
+fn disk_plan_reports_the_write_volume_or_the_reason_it_is_blocked() {
+    let dir = tempfile::tempdir().unwrap();
+    let t = target(dir.path());
+    let c = coordinator().with_disk_targets(vec![t]);
+    let p = c.disk_plan("test", BenchmarkProfile::Standard).unwrap();
+    assert!(p.blocked.is_none() || p.file_bytes == 0);
+    if p.blocked.is_none() {
+        assert!(p.estimated_bytes_written > p.file_bytes);
+    }
+    assert!(c.disk_plan("nope", BenchmarkProfile::Quick).is_err());
+}
+
+#[test]
+fn an_internet_run_with_consent_is_saved_without_a_score() {
+    use crate::benchmarks::internet::provider::{Cloudflare, test_server};
+    let server = test_server::start(test_server::Mode::Normal, 2_500_000);
+    let c = coordinator().with_internet_provider(Arc::new(Cloudflare::with_base(
+        &server.base,
+        Duration::from_secs(5),
+    )));
+    let sink = Arc::new(Recorder::default());
+    let sink2: Arc<dyn ProgressSink> = sink.clone();
+    c.start_with(
+        BenchmarkKind::Internet,
+        BenchmarkProfile::Quick,
+        RunPlan::Internet {
+            config: Some(InternetConfig::test()),
+        },
+        sink2,
+    )
+    .expect("starts");
+    let done = wait_until_idle(&c);
+    assert_eq!(done.state, BenchmarkState::Completed, "{:?}", done.message);
+    let results = lock(&sink.results);
+    let r = &results[0];
+    let n = r.internet.as_ref().expect("internet result");
+    assert!(n.download.as_ref().unwrap().median_mbps > 10.0);
+    assert!(r.scores.is_none() && r.disk_score.is_none() && r.gpu_score.is_none());
+    assert_eq!(r.method.method_id, "internet-cloudflare-v1");
+    assert!(r.id.starts_with("net-"));
+    assert_eq!(c.history().len(), 1);
+}
+
+#[test]
+fn internet_tests_have_a_cooldown_and_a_session_data_budget() {
+    use crate::benchmarks::internet::provider::{Cloudflare, test_server};
+    let server = test_server::start(test_server::Mode::Normal, 0);
+    let sink: Arc<dyn ProgressSink> = Arc::new(Recorder::default());
+    let provider = Arc::new(Cloudflare::with_base(&server.base, Duration::from_secs(5)));
+    let go = |c: &Coordinator| {
+        c.start(
+            BenchmarkKind::Internet,
+            BenchmarkProfile::Quick,
+            StartOptions {
+                internet_consent: true,
+                ..Default::default()
+            },
+            sink.clone(),
+        )
+    };
+
+    // Cooldown: a second start right after the first is refused.
+    let c = coordinator()
+        .with_internet_provider(provider.clone())
+        .with_internet_limits(Duration::from_secs(300), u64::MAX);
+    assert!(go(&c).is_ok());
+    c.cancel();
+    wait_until_idle(&c);
+    let e = go(&c).expect_err("cooling down");
+    assert!(e.to_string().contains("more seconds"), "{e}");
+
+    // Budget: a plan that does not fit what is left is refused up front.
+    let c = coordinator()
+        .with_internet_provider(provider)
+        .with_internet_limits(Duration::ZERO, 100_000_000);
+    let e = go(&c).expect_err("over budget");
+    assert!(e.to_string().contains("allowance"), "{e}");
+    assert_eq!(c.status().state, BenchmarkState::Idle);
+}
diff --git a/src-tauri/core/src/benchmarks/disk/file.rs b/src-tauri/core/src/benchmarks/disk/file.rs
index ff983a6..6c4516b 100644
--- a/src-tauri/core/src/benchmarks/disk/file.rs
+++ b/src-tauri/core/src/benchmarks/disk/file.rs
@@ -173,21 +173,39 @@ fn direct_io_works(file: &File) -> bool {
     AlignedBuf::new(ALIGN).is_some_and(|b| file.write_at(b.as_slice(), 0).is_ok())
 }
 
+/// In a shared location such as `/tmp` another user could create the folder
+/// first, so an existing one is used only if it is ours and private.
 fn ensure_private_dir(dir: &Path) -> Result<(), BenchmarkError> {
-    match std::fs::symlink_metadata(dir) {
-        Ok(meta) if meta.file_type().is_symlink() || !meta.is_dir() => {
-            return Err(BenchmarkError::Failed(
-                "The benchmark folder is not a plain folder; refusing to use it.".into(),
-            ));
-        }
-        Ok(_) => {}
+    use std::os::unix::fs::MetadataExt;
+    let meta = match std::fs::symlink_metadata(dir) {
+        Ok(meta) => meta,
         Err(e) if e.kind() == std::io::ErrorKind::NotFound => {
             DirBuilder::new()
                 .mode(0o700)
                 .create(dir)
                 .map_err(|e| io_error("create the benchmark folder", &e))?;
+            std::fs::symlink_metadata(dir)
+                .map_err(|e| io_error("inspect the benchmark folder", &e))?
         }
         Err(e) => return Err(io_error("inspect the benchmark folder", &e)),
+    };
+    if meta.file_type().is_symlink() || !meta.is_dir() {
+        return Err(BenchmarkError::Failed(
+            "The benchmark folder is not a plain folder; refusing to use it.".into(),
+        ));
+    }
+    // SAFETY: getuid has no preconditions and cannot fail.
+    if meta.uid() != unsafe { libc::getuid() } {
+        return Err(BenchmarkError::Failed(format!(
+            "The benchmark folder {} belongs to another user; refusing to use it.",
+            dir.display()
+        )));
+    }
+    if meta.mode() & 0o777 != 0o700 {
+        return Err(BenchmarkError::Failed(format!(
+            "The benchmark folder {} can be opened by other users; refusing to use it. Remove it or make it private (chmod 700).",
+            dir.display()
+        )));
     }
     Ok(())
 }
@@ -312,13 +330,30 @@ mod tests {
     fn an_existing_file_is_never_opened_or_overwritten() {
         let d = tmp();
         let dir = d.path().join(DIR_NAME);
-        std::fs::create_dir(&dir).unwrap();
+        DirBuilder::new().mode(0o700).create(&dir).unwrap();
         let existing = dir.join(".tm-bench-disk-3-0.tmp");
         std::fs::write(&existing, b"precious").unwrap();
         assert!(BenchFile::create(d.path(), "disk-3-0", false).is_err());
         assert_eq!(std::fs::read(&existing).unwrap(), b"precious");
     }
 
+    #[test]
+    fn an_existing_folder_others_can_open_is_refused() {
+        use std::os::unix::fs::PermissionsExt;
+        let d = tmp();
+        let dir = d.path().join(DIR_NAME);
+        std::fs::create_dir(&dir).unwrap();
+        std::fs::set_permissions(&dir, std::fs::Permissions::from_mode(0o755)).unwrap();
+        let e = BenchFile::create(d.path(), "disk-3-1", false)
+            .err()
+            .expect("refused");
+        assert!(e.to_string().contains("other users"), "{e}");
+        assert_eq!(std::fs::read_dir(&dir).unwrap().count(), 0);
+
+        std::fs::set_permissions(&dir, std::fs::Permissions::from_mode(0o700)).unwrap();
+        assert!(BenchFile::create(d.path(), "disk-3-1", false).is_ok());
+    }
+
     #[test]
     fn bad_run_ids_cannot_escape_the_directory() {
         let d = tmp();
diff --git a/src-tauri/core/src/benchmarks/history.rs b/src-tauri/core/src/benchmarks/history.rs
index 7296741..c19cc14 100644
--- a/src-tauri/core/src/benchmarks/history.rs
+++ b/src-tauri/core/src/benchmarks/history.rs
@@ -9,7 +9,7 @@
 //! few KB; switch to SQLite if history ever needs querying or much more depth.
 
 use std::path::{Path, PathBuf};
-use std::sync::{Mutex, PoisonError};
+use std::sync::Mutex;
 
 use serde::{Deserialize, Serialize};
 
@@ -56,6 +56,7 @@ impl HistoryStore {
         self.lock().clone()
     }
 
+    #[cfg(test)]
     pub fn get(&self, id: &str) -> Option<BenchmarkResult> {
         self.lock().iter().find(|r| r.id == id).cloned()
     }
@@ -82,7 +83,7 @@ impl HistoryStore {
     }
 
     fn lock(&self) -> std::sync::MutexGuard<'_, Vec<BenchmarkResult>> {
-        self.results.lock().unwrap_or_else(PoisonError::into_inner)
+        crate::sync_util::lock(&self.results)
     }
 
     fn persist(&self, results: &[BenchmarkResult]) -> AppResult<()> {
diff --git a/src-tauri/core/src/benchmarks/mod.rs b/src-tauri/core/src/benchmarks/mod.rs
index 343593c..950f763 100644
--- a/src-tauri/core/src/benchmarks/mod.rs
+++ b/src-tauri/core/src/benchmarks/mod.rs
@@ -1,7 +1,7 @@
 //! The benchmark suite: shared, cross-platform algorithms and orchestration.
 //! Only `platform` contains OS-specific code.
 //!
-//! See `docs/LINUX_BENCHMARK_IMPLEMENTATION.md` for the method definitions.
+//! See `docs/archive/plans/LINUX_BENCHMARK_IMPLEMENTATION.md` for the method definitions.
 
 pub mod cancel;
 pub mod coordinator;
diff --git a/src-tauri/core/src/inspect.rs b/src-tauri/core/src/inspect.rs
index 522857e..cf00382 100644
--- a/src-tauri/core/src/inspect.rs
+++ b/src-tauri/core/src/inspect.rs
@@ -10,7 +10,6 @@ use crate::models::{
     MemoryKindTotal, MemoryMap, MemoryRegion, MemoryRegionKind, ModuleInfo, ProcessState,
     ThreadInfo, ThreadList,
 };
-use sysinfo::{Pid, ProcessRefreshKind, ProcessesToUpdate, System};
 
 /// Numeric-PID reads must not return a replacement process's data.
 pub fn for_process<T>(
@@ -23,22 +22,9 @@ pub fn for_process<T>(
             "The process start time is unavailable, so its identity cannot be verified.".into(),
         ));
     }
-    let mut system = System::new().map_err(|e| AppError::SystemQueryFailed(e.to_string()))?;
-    let mut check = || {
-        system.refresh_processes_specifics(
-            ProcessesToUpdate::Some(&[Pid::from_u32(pid)]),
-            true,
-            ProcessRefreshKind::nothing().without_tasks(),
-        );
-        system
-            .process(Pid::from_u32(pid))
-            .filter(|p| p.start_time() == start_time)
-            .map(|_| ())
-            .ok_or(AppError::ProcessNotFound(pid))
-    };
-    check()?;
+    crate::platform::verify_identity(pid, start_time)?;
     let result = read();
-    check()?;
+    crate::platform::verify_identity(pid, start_time)?;
     result
 }
 
@@ -346,6 +332,7 @@ mod tests {
     #[cfg(unix)]
     #[test]
     fn a_process_that_exits_during_inspection_cannot_return_data() {
+        use sysinfo::{Pid, ProcessRefreshKind, ProcessesToUpdate, System};
         let mut child = std::process::Command::new("sleep")
             .arg("60")
             .spawn()
diff --git a/src-tauri/core/src/lib.rs b/src-tauri/core/src/lib.rs
index b1dbc1f..86c2cb8 100644
--- a/src-tauri/core/src/lib.rs
+++ b/src-tauri/core/src/lib.rs
@@ -11,3 +11,4 @@ pub mod models;
 pub mod monitoring;
 pub mod platform;
 pub mod process_control;
+pub mod sync_util;
diff --git a/src-tauri/core/src/models/inspect.rs b/src-tauri/core/src/models/inspect.rs
index 48b9197..b4e1745 100644
--- a/src-tauri/core/src/models/inspect.rs
+++ b/src-tauri/core/src/models/inspect.rs
@@ -15,6 +15,9 @@ pub struct SocketEntry {
     /// without privileges, or a closing socket the kernel no longer attributes).
     pub pid: Option<u32>,
     pub process_name: Option<String>,
+    /// Start time of the owner, as in `ProcessRow::start_time`, so the UI can
+    /// tell it from a later process that reused the PID. `None` without an owner.
+    pub start_time: Option<u64>,
 }
 
 #[derive(Debug, Clone, PartialEq, Eq, Serialize)]
diff --git a/src-tauri/core/src/monitoring/details.rs b/src-tauri/core/src/monitoring/details.rs
index 2440b98..2defe3c 100644
--- a/src-tauri/core/src/monitoring/details.rs
+++ b/src-tauri/core/src/monitoring/details.rs
@@ -1,21 +1,19 @@
 //! On-demand details for a single process. These are read only when the user
 //! opens a process, so they are not part of the per-tick payload.
 
-use sysinfo::{Pid, ProcessRefreshKind, ProcessesToUpdate, System, UpdateKind};
+use sysinfo::{ProcessRefreshKind, UpdateKind};
 
 use crate::errors::{AppError, AppResult};
 use crate::models::ProcessDetails;
 use crate::monitoring::Engine;
 use crate::platform;
 
-pub fn process_details(
-    engine: &Engine,
-    pid: u32,
-    start_time: Option<u64>,
-) -> AppResult<ProcessDetails> {
+/// `start_time` pins the process instance the user opened; a reused PID is
+/// reported as not found.
+pub fn process_details(engine: &Engine, pid: u32, start_time: u64) -> AppResult<ProcessDetails> {
     let row = engine
         .process(pid)
-        .filter(|row| start_time.is_none_or(|start| row.start_time == start))
+        .filter(|row| row.start_time == start_time)
         .ok_or(AppError::ProcessNotFound(pid))?;
     crate::inspect::for_process(pid, row.start_time, || {
         let parent_name = row
@@ -24,34 +22,24 @@ pub fn process_details(
             .map(|p| p.name);
 
         // A tiny, single-process query; it does not touch the engine's System.
-        let (cwd, total_read, total_written) = match System::new() {
-            Ok(mut sys) => {
-                let target = [Pid::from_u32(pid)];
-                sys.refresh_processes_specifics(
-                    ProcessesToUpdate::Some(&target),
-                    true,
-                    ProcessRefreshKind::nothing()
-                        .without_tasks()
-                        .with_cwd(UpdateKind::Always)
-                        .with_disk_usage(),
-                );
-                match sys.process(Pid::from_u32(pid)) {
-                    Some(p) if p.start_time() == row.start_time => {
-                        let usage = p.disk_usage();
-                        (
-                            p.cwd()
-                                .map(|c| c.to_string_lossy().into_owned())
-                                .filter(|c| !c.is_empty()),
-                            Some(usage.total_read_bytes),
-                            Some(usage.total_written_bytes),
-                        )
-                    }
-                    // Exited between the engine tick and this query.
-                    _ => return Err(AppError::ProcessNotFound(pid)),
-                }
-            }
-            Err(_) => (None, None, None),
-        };
+        let (cwd, total_read, total_written) = platform::with_process(
+            pid,
+            row.start_time,
+            ProcessRefreshKind::nothing()
+                .without_tasks()
+                .with_cwd(UpdateKind::Always)
+                .with_disk_usage(),
+            |p| {
+                let usage = p.disk_usage();
+                (
+                    p.cwd()
+                        .map(|c| c.to_string_lossy().into_owned())
+                        .filter(|c| !c.is_empty()),
+                    usage.total_read_bytes,
+                    usage.total_written_bytes,
+                )
+            },
+        )?;
 
         Ok(ProcessDetails {
             history: engine.process_history(pid, row.start_time),
@@ -59,8 +47,8 @@ pub fn process_details(
             cwd,
             architecture: platform::process_architecture(pid),
             // Zero lifetime I/O usually means "not readable", not "no I/O".
-            total_read_bytes: total_read.filter(|&b| b > 0),
-            total_written_bytes: total_written.filter(|&b| b > 0),
+            total_read_bytes: Some(total_read).filter(|&b| b > 0),
+            total_written_bytes: Some(total_written).filter(|&b| b > 0),
             connections: platform::connections(pid),
             row,
         })
diff --git a/src-tauri/core/src/monitoring/disks.rs b/src-tauri/core/src/monitoring/disks.rs
index 669a8ac..d86c1c2 100644
--- a/src-tauri/core/src/monitoring/disks.rs
+++ b/src-tauri/core/src/monitoring/disks.rs
@@ -10,7 +10,7 @@ use crate::platform::{self, DiskIoCounters};
 /// Fallback cadence for re-enumerating the mount list. On Linux a change to
 /// the mount table triggers it at once (see [`mount_table`]), so this only
 /// covers other platforms and the slow-moving disk type. Capacities are
-/// re-read on every tick (a `statvfs`/`GetDiskFreeSpaceEx` per mount) so
+/// re-read on every tick (a `statvfs`/`GetDiskFreeSpaceEx` per local mount) so
 /// deleting files is reflected immediately in the UI.
 const MOUNT_LIST_REFRESH: Duration = Duration::from_secs(30);
 
@@ -66,6 +66,32 @@ const IGNORED_FILE_SYSTEMS: &[&str] = &[
     "fuse.gvfsd-fuse",
 ];
 
+/// Network file systems. They are never shown and never `statvfs`ed: if the
+/// server goes away the call can block for minutes, stalling every metric.
+/// (sysinfo already skips NFS/CIFS on Linux; this covers the rest.)
+const REMOTE_FILE_SYSTEMS: &[&str] = &[
+    "nfs",
+    "nfs4",
+    "cifs",
+    "smb3",
+    "smbfs",
+    "9p",
+    "afs",
+    "ceph",
+    "glusterfs",
+    "lustre",
+    "davfs",
+    "fuse.sshfs",
+    "fuse.rclone",
+    "fuse.s3fs",
+    "fuse.glusterfs",
+    "fuse.davfs2",
+];
+
+fn is_remote(file_system: &str) -> bool {
+    REMOTE_FILE_SYSTEMS.contains(&file_system.to_ascii_lowercase().as_str())
+}
+
 pub struct DiskTracker {
     /// `None` when the platform cannot enumerate disks at all.
     disks: Option<Disks>,
@@ -100,13 +126,13 @@ impl DiskTracker {
         let table = mount_table();
         let since = now.duration_since(self.last_mount_refresh);
         if list_refresh_due(table.as_deref(), self.mount_table.as_deref(), since) {
-            disks.refresh_specifics(true, DiskRefreshKind::everything());
+            refresh_disks(disks, true, DiskRefreshKind::everything());
             self.last_mount_refresh = now;
             self.mount_table = table;
         } else {
             // Free space is cheap to query and changes when the user writes or
             // deletes files, so refresh it on every tick.
-            disks.refresh_specifics(false, tick_refresh_kind());
+            refresh_disks(disks, false, tick_refresh_kind());
         }
 
         let relevant: Vec<&sysinfo::Disk> = disks
@@ -202,13 +228,29 @@ fn tick_refresh_kind() -> DiskRefreshKind {
     DiskRefreshKind::nothing().with_storage().with_io_usage()
 }
 
-/// Filters out pseudo file systems, snap images and zero-sized mounts.
+/// Applies `kind` to every disk, except that free space (`statvfs`) is only
+/// read for local file systems.
+fn refresh_disks(disks: &mut Disks, list: bool, kind: DiskRefreshKind) {
+    disks.refresh_specifics(list, kind.without_storage());
+    if kind.storage() {
+        let storage = DiskRefreshKind::nothing().with_storage();
+        for disk in disks
+            .iter_mut()
+            .filter(|d| !is_remote(&d.file_system().to_string_lossy()))
+        {
+            disk.refresh_specifics(storage);
+        }
+    }
+}
+
+/// Filters out pseudo and network file systems, snap images and zero-sized
+/// mounts.
 pub fn is_relevant(file_system: &str, mount_point: &str, total_bytes: u64) -> bool {
     if total_bytes == 0 {
         return false;
     }
     let fs = file_system.to_ascii_lowercase();
-    if IGNORED_FILE_SYSTEMS.contains(&fs.as_str()) {
+    if IGNORED_FILE_SYSTEMS.contains(&fs.as_str()) || is_remote(&fs) {
         return false;
     }
     !(mount_point.starts_with("/snap/") || mount_point.starts_with("/var/lib/docker/"))
@@ -259,6 +301,15 @@ mod tests {
         assert!(!is_relevant("ext4", "/mnt/empty", 0));
     }
 
+    #[test]
+    fn network_mounts_are_never_shown() {
+        assert!(!is_relevant("fuse.sshfs", "/mnt/server", 500));
+        assert!(!is_relevant("smb3", "/mnt/share", 500));
+        assert!(!is_relevant("9p", "/mnt/host", 500));
+        assert!(is_remote("NFS4"));
+        assert!(!is_remote("ext4"));
+    }
+
     /// Integration: the system drive reports capacity and, on Windows/Linux,
     /// operation counters.
     #[test]
diff --git a/src-tauri/core/src/monitoring/engine.rs b/src-tauri/core/src/monitoring/engine.rs
index 94a1dd8..0fd21ae 100644
--- a/src-tauri/core/src/monitoring/engine.rs
+++ b/src-tauri/core/src/monitoring/engine.rs
@@ -12,7 +12,7 @@
 use std::collections::{HashMap, HashSet};
 use std::sync::atomic::{AtomicBool, Ordering};
 use std::sync::mpsc::{self, RecvTimeoutError};
-use std::sync::{Arc, Mutex, PoisonError, RwLock};
+use std::sync::{Arc, Mutex, RwLock};
 use std::thread::{self, JoinHandle};
 use std::time::{Duration, Instant};
 
@@ -26,6 +26,7 @@ use crate::monitoring::alerts::AlertEvaluator;
 use crate::monitoring::collector::{Collector, unix_millis};
 use crate::monitoring::history::RingBuffer;
 use crate::monitoring::process_history::ProcessHistory;
+use crate::sync_util::{lock, read, write};
 
 /// One hour of history at the fastest (500 ms) interval.
 pub const MAX_HISTORY_POINTS: usize = 7_200;
@@ -41,8 +42,9 @@ pub trait TickSink: Send + Sync {
         true
     }
 
-    /// `json` is present whenever [`TickSink::wants_json`] returned true.
-    fn deliver(&self, tick: &MetricsTick, json: Option<&str>) -> bool;
+    /// `json` is present whenever [`TickSink::wants_json`] returned true. It is
+    /// owned so a single interested sink can forward it without copying.
+    fn deliver(&self, tick: &MetricsTick, json: Option<String>) -> bool;
 }
 
 enum Control {
@@ -61,7 +63,7 @@ struct Shared {
     /// Windows has no documented per-process "suspended" status, so the
     /// engine reports the state it caused.
     suspended: Mutex<HashSet<(u32, u64)>>,
-    alert_rules: RwLock<Vec<AlertRule>>,
+    alert_rules: RwLock<Arc<[AlertRule]>>,
     /// Linux kernel threads are dropped from ticks unless enabled: they are
     /// often over half of all rows and cannot be acted on.
     include_kernel_threads: AtomicBool,
@@ -73,16 +75,6 @@ struct Shared {
     sinks: Mutex<HashMap<String, Arc<dyn TickSink>>>,
 }
 
-fn lock<T>(m: &Mutex<T>) -> std::sync::MutexGuard<'_, T> {
-    m.lock().unwrap_or_else(PoisonError::into_inner)
-}
-fn read<T>(l: &RwLock<T>) -> std::sync::RwLockReadGuard<'_, T> {
-    l.read().unwrap_or_else(PoisonError::into_inner)
-}
-fn write<T>(l: &RwLock<T>) -> std::sync::RwLockWriteGuard<'_, T> {
-    l.write().unwrap_or_else(PoisonError::into_inner)
-}
-
 pub struct Engine {
     control: mpsc::SyncSender<Control>,
     refresh_requested: Mutex<Option<Instant>>,
@@ -133,7 +125,7 @@ impl Engine {
             history: RwLock::new(RingBuffer::new(MAX_HISTORY_POINTS)),
             process_history: RwLock::new(ProcessHistory::default()),
             suspended: Mutex::new(HashSet::new()),
-            alert_rules: RwLock::new(Vec::new()),
+            alert_rules: RwLock::new(Arc::from([])),
             include_kernel_threads: AtomicBool::new(false),
             memory_detail: AtomicBool::new(false),
             alert_log: Mutex::new(RingBuffer::new(ALERT_LOG_LEN)),
@@ -242,7 +234,7 @@ impl Engine {
 
     /// Replaces the alert rules; takes effect on the next tick.
     pub fn set_alert_rules(&self, rules: Vec<AlertRule>) {
-        *write(&self.shared.alert_rules) = rules;
+        *write(&self.shared.alert_rules) = rules.into();
     }
 
     /// Recently fired alerts, newest last.
@@ -353,7 +345,7 @@ impl Worker {
         }
         apply_suspended(shared, &mut sample.processes);
 
-        let rules = read(&shared.alert_rules).clone();
+        let rules = Arc::clone(&read(&shared.alert_rules));
         sample.alerts = self.alerts.evaluate(&rules, &sample);
         if !sample.alerts.is_empty() {
             let mut log = lock(&shared.alert_log);
@@ -399,7 +391,9 @@ impl Worker {
             .iter()
             .map(|(k, s)| (k.clone(), Arc::clone(s)))
             .collect();
-        let json = if sinks.iter().any(|(_, s)| s.wants_json()) {
+        let wants: Vec<bool> = sinks.iter().map(|(_, s)| s.wants_json()).collect();
+        let mut json_sinks_left = wants.iter().filter(|w| **w).count();
+        let mut json = if json_sinks_left > 0 {
             match serde_json::to_string(&*sample) {
                 Ok(json) => {
                     self.last_payload = u32::try_from(json.len()).unwrap_or(u32::MAX);
@@ -413,18 +407,23 @@ impl Worker {
         } else {
             None
         };
-        let dead: Vec<String> = sinks
-            .into_iter()
-            .filter(|(_, sink)| {
-                let payload = if sink.wants_json() {
-                    json.as_deref()
+        let mut dead: Vec<String> = Vec::new();
+        for ((key, sink), wants) in sinks.into_iter().zip(wants) {
+            let payload = if wants {
+                json_sinks_left -= 1;
+                // The last interested sink takes the string itself.
+                if json_sinks_left == 0 {
+                    json.take()
                 } else {
-                    None
-                };
-                !sink.deliver(&sample, payload)
-            })
-            .map(|(k, _)| k)
-            .collect();
+                    json.clone()
+                }
+            } else {
+                None
+            };
+            if !sink.deliver(&sample, payload) {
+                dead.push(key);
+            }
+        }
         if !dead.is_empty() {
             let mut map = lock(&shared.sinks);
             for key in dead {
@@ -484,9 +483,9 @@ mod tests {
         fn wants_json(&self) -> bool {
             self.wants_json.load(Ordering::SeqCst)
         }
-        fn deliver(&self, tick: &MetricsTick, json: Option<&str>) -> bool {
+        fn deliver(&self, tick: &MetricsTick, json: Option<String>) -> bool {
             self.count.fetch_add(1, Ordering::SeqCst);
-            *self.last_json.lock().unwrap() = json.map(str::to_owned);
+            *self.last_json.lock().unwrap() = json;
             self.alerts
                 .lock()
                 .unwrap()
@@ -584,6 +583,30 @@ mod tests {
         engine.shutdown();
     }
 
+    #[test]
+    fn every_sink_that_wants_json_gets_it() {
+        let engine = engine(true);
+        let (a, b, hidden) = (
+            CountingSink::new(true),
+            CountingSink::new(true),
+            CountingSink::new(false),
+        );
+        engine.subscribe("a".into(), a.clone());
+        engine.subscribe("b".into(), b.clone());
+        engine.subscribe("hidden".into(), hidden.clone());
+        engine.refresh_now().unwrap();
+        assert!(wait_for(|| {
+            [&a, &b, &hidden]
+                .iter()
+                .all(|s| s.count.load(Ordering::SeqCst) == 1)
+        }));
+        let json = a.last_json.lock().unwrap().clone();
+        assert!(json.is_some());
+        assert_eq!(*b.last_json.lock().unwrap(), json);
+        assert!(hidden.last_json.lock().unwrap().is_none());
+        engine.shutdown();
+    }
+
     #[test]
     fn evaluates_alert_rules_and_logs_events() {
         let engine = engine(true);
diff --git a/src-tauri/core/src/monitoring/process_history.rs b/src-tauri/core/src/monitoring/process_history.rs
index 7cb97b9..ca313f5 100644
--- a/src-tauri/core/src/monitoring/process_history.rs
+++ b/src-tauri/core/src/monitoring/process_history.rs
@@ -15,37 +15,47 @@ const MAX_TRACKED_PROCESSES: usize = 4_096;
 /// process's history.
 type Key = (u32, u64);
 
+struct Tracked {
+    points: RingBuffer<ProcessPoint>,
+    /// The `record` call that last saw this process.
+    seen: u64,
+}
+
 #[derive(Default)]
 pub struct ProcessHistory {
-    map: HashMap<Key, RingBuffer<ProcessPoint>>,
+    map: HashMap<Key, Tracked>,
+    generation: u64,
 }
 
 impl ProcessHistory {
     pub fn record(&mut self, t: u64, rows: &[ProcessRow]) {
-        let mut next = HashMap::with_capacity(rows.len().min(MAX_TRACKED_PROCESSES));
+        self.generation += 1;
+        let generation = self.generation;
         for row in rows.iter().take(MAX_TRACKED_PROCESSES) {
-            let key = (row.pid, row.start_time);
-            let mut buf = self
+            let tracked = self
                 .map
-                .remove(&key)
-                .unwrap_or_else(|| RingBuffer::new(PROCESS_HISTORY_POINTS));
-            buf.push(ProcessPoint {
+                .entry((row.pid, row.start_time))
+                .or_insert_with(|| Tracked {
+                    points: RingBuffer::new(PROCESS_HISTORY_POINTS),
+                    seen: generation,
+                });
+            tracked.seen = generation;
+            tracked.points.push(ProcessPoint {
                 t,
                 cpu: row.cpu_percent,
                 memory: row.memory_bytes,
                 read: row.disk_read_per_sec,
                 write: row.disk_write_per_sec,
             });
-            next.insert(key, buf);
         }
         // Anything not seen this tick has exited.
-        self.map = next;
+        self.map.retain(|_, tracked| tracked.seen == generation);
     }
 
     pub fn get(&self, pid: u32, start_time: u64) -> Vec<ProcessPoint> {
         self.map
             .get(&(pid, start_time))
-            .map(|b| b.iter().copied().collect())
+            .map(|tracked| tracked.points.iter().copied().collect())
             .unwrap_or_default()
     }
 }
diff --git a/src-tauri/core/src/platform/linux/control.rs b/src-tauri/core/src/platform/linux/control.rs
index 3251dac..42a111b 100644
--- a/src-tauri/core/src/platform/linux/control.rs
+++ b/src-tauri/core/src/platform/linux/control.rs
@@ -12,7 +12,7 @@ pub fn perform_action(
 ) -> AppResult<()> {
     use crate::models::ProcessAction;
     use std::os::fd::{AsRawFd, FromRawFd, OwnedFd};
-    use sysinfo::{Pid, ProcessRefreshKind, ProcessesToUpdate, System};
+    use sysinfo::{ProcessRefreshKind, ProcessStatus};
     let target = libc::pid_t::try_from(pid)
         .ok()
         .filter(|p| *p > 0)
@@ -24,43 +24,44 @@ pub fn perform_action(
     }
     // SAFETY: a successful pidfd_open returns a new descriptor, owned once.
     let fd = unsafe { OwnedFd::from_raw_fd(raw as i32) };
-    let mut system = System::new().map_err(|_| AppError::EngineUnavailable)?;
-    let id = Pid::from_u32(pid);
-    system.refresh_processes_specifics(
-        ProcessesToUpdate::Some(&[id]),
-        true,
-        ProcessRefreshKind::nothing(),
-    );
-    if system
-        .process(id)
-        .is_none_or(|p| p.start_time() != start_time)
-    {
-        return Err(AppError::ProcessNotFound(pid));
-    }
+    let stopped = crate::platform::with_process(
+        pid,
+        start_time,
+        ProcessRefreshKind::nothing().without_tasks(),
+        |p| matches!(p.status(), ProcessStatus::Stop | ProcessStatus::Tracing),
+    )?;
     let sig = match action {
         ProcessAction::Terminate => libc::SIGTERM,
         ProcessAction::ForceKill => libc::SIGKILL,
         ProcessAction::Suspend => libc::SIGSTOP,
         ProcessAction::Resume => libc::SIGCONT,
         // shortcut: Linux has no pidfd priority API; the live check narrows,
-        // but cannot eliminate, the setpriority PID race. See SECURITY_AUDIT.
+        // but cannot eliminate, the setpriority PID race. See docs/archive/security-2026-11-03/SECURITY_AUDIT.md.
         ProcessAction::SetPriority { priority } => return set_priority(pid, priority),
     };
-    // SAFETY: fd is live; null siginfo and zero flags request an ordinary signal.
-    let rc = unsafe {
-        libc::syscall(
-            libc::SYS_pidfd_send_signal,
-            fd.as_raw_fd(),
-            sig,
-            std::ptr::null::<libc::siginfo_t>(),
-            0,
-        )
+    let send = |sig: libc::c_int| {
+        // SAFETY: fd is live; null siginfo and zero flags request an ordinary signal.
+        let rc = unsafe {
+            libc::syscall(
+                libc::SYS_pidfd_send_signal,
+                fd.as_raw_fd(),
+                sig,
+                std::ptr::null::<libc::siginfo_t>(),
+                0,
+            )
+        };
+        if rc == 0 {
+            Ok(())
+        } else {
+            Err(errno_error(pid, "signal"))
+        }
     };
-    if rc == 0 {
-        Ok(())
-    } else {
-        Err(errno_error(pid, "signal"))
+    send(sig)?;
+    // A stopped process only acts on SIGTERM once it is continued.
+    if sig == libc::SIGTERM && stopped {
+        send(libc::SIGCONT)?;
     }
+    Ok(())
 }
 
 /// Raising priority (negative nice) requires CAP_SYS_NICE; the kernel's
diff --git a/src-tauri/core/src/platform/linux/inspect.rs b/src-tauri/core/src/platform/linux/inspect.rs
index db698ab..2f0e879 100644
--- a/src-tauri/core/src/platform/linux/inspect.rs
+++ b/src-tauri/core/src/platform/linux/inspect.rs
@@ -120,6 +120,7 @@ pub fn sockets() -> AppResult<SocketList> {
                 connection: to_connection(&entry, protocol),
                 pid,
                 process_name,
+                start_time: None,
             });
         }
     }
diff --git a/src-tauri/core/src/platform/linux/mod.rs b/src-tauri/core/src/platform/linux/mod.rs
index 4cf63a3..be251c6 100644
--- a/src-tauri/core/src/platform/linux/mod.rs
+++ b/src-tauri/core/src/platform/linux/mod.rs
@@ -8,6 +8,7 @@ mod inspect;
 mod net;
 mod services;
 mod system;
+mod tool;
 mod volumes;
 
 use std::collections::HashMap;
@@ -18,7 +19,7 @@ pub use control::{is_critical, perform_action, system_root};
 pub use hardware::hardware_info;
 pub use inspect::{find_file_users, memory_map, modules, open_files, sockets, threads};
 pub use net::interface_kind;
-pub use services::{control_service, services};
+pub use services::{control_service, service_caution, services};
 pub use system::os_details;
 pub use volumes::{mount_volume, power_off_volume, unmount_volume, volumes};
 
diff --git a/src-tauri/core/src/platform/linux/services.rs b/src-tauri/core/src/platform/linux/services.rs
index 1505692..b6ddfd0 100644
--- a/src-tauri/core/src/platform/linux/services.rs
+++ b/src-tauri/core/src/platform/linux/services.rs
@@ -13,6 +13,7 @@
 use std::collections::HashMap;
 use std::process::Command;
 
+use super::tool::run_tool;
 use crate::errors::{AppError, AppResult};
 use crate::models::{ServiceAction, ServiceInfo, ServiceScope};
 
@@ -37,16 +38,73 @@ const PROTECTED_PREFIXES: &[&str] = &[
     "plymouth",
     "udev",
     "init",
+    // User-scope desktop session: stopping these ends the graphical login.
+    "org.gnome.shell@",
+    "gnome-session",
+    "plasma-",
 ];
 
-fn protected(unit: &str) -> bool {
-    let name = unit
-        .strip_suffix(".service")
+/// Services that may be stopped or restarted (restarting is often the fix),
+/// but whose loss the user should understand first.
+const CAUTIONS: &[(&str, bool, &str)] = &[
+    (
+        "ssh",
+        true,
+        "Remote logins depend on it. Anyone connected over SSH, including you, may be locked out.",
+    ),
+    (
+        "sshd",
+        true,
+        "Remote logins depend on it. Anyone connected over SSH, including you, may be locked out.",
+    ),
+    (
+        "accounts-daemon",
+        true,
+        "The login screen and user settings depend on it.",
+    ),
+    (
+        "pipewire",
+        false,
+        "Sound and screen sharing stop until it runs again.",
+    ),
+    (
+        "wireplumber",
+        false,
+        "Sound and screen sharing stop until it runs again.",
+    ),
+    (
+        "xdg-desktop-portal",
+        false,
+        "File pickers, screen sharing and sandboxed apps depend on it.",
+    ),
+];
+
+fn base_name(unit: &str) -> String {
+    unit.strip_suffix(".service")
         .unwrap_or(unit)
-        .to_ascii_lowercase();
+        .to_ascii_lowercase()
+}
+
+fn protected(unit: &str) -> bool {
+    let name = base_name(unit);
     PROTECTED_PREFIXES.iter().any(|p| name.starts_with(p))
 }
 
+/// Why stopping or restarting `unit` needs extra thought, if it does.
+pub fn service_caution(unit: &str) -> Option<&'static str> {
+    let name = base_name(unit);
+    CAUTIONS
+        .iter()
+        .find(|(n, exact, _)| {
+            if *exact {
+                name == *n
+            } else {
+                name.starts_with(n)
+            }
+        })
+        .map(|(_, _, why)| *why)
+}
+
 fn valid_unit(unit: &str) -> bool {
     unit.len() <= 256
         && unit.strip_suffix(".service").is_some_and(|name| {
@@ -63,34 +121,22 @@ fn systemctl(scope: ServiceScope, args: &[&str]) -> AppResult<String> {
     if scope == ServiceScope::User {
         command.arg("--user");
     }
-    let output = command
-        .args(args)
-        .env("LC_ALL", "C")
-        .output()
-        .map_err(|e| {
-            if e.kind() == std::io::ErrorKind::NotFound {
-                AppError::UnsupportedOperation("Services (systemd is not available)".into())
+    run_tool(
+        command.args(args),
+        || AppError::UnsupportedOperation("Services (systemd is not available)".into()),
+        |first| {
+            if first.contains("Access denied")
+                || first.contains("authentication")
+                || first.contains("Authentication")
+            {
+                AppError::PermissionDenied(
+                    "Not authorized. Approve the system prompt, or ask an administrator.".into(),
+                )
+            } else if first.contains("not found") || first.contains("not loaded") {
+                AppError::ActionUnavailable("That service no longer exists.".into())
             } else {
-                AppError::SystemQueryFailed(format!("Could not run systemctl: {e}"))
+                AppError::SystemQueryFailed(first.to_string())
             }
-        })?;
-    if output.status.success() {
-        return Ok(String::from_utf8_lossy(&output.stdout).into_owned());
-    }
-    let stderr = String::from_utf8_lossy(&output.stderr);
-    let first = stderr.lines().next().unwrap_or("").trim();
-    Err(
-        if first.contains("Access denied")
-            || first.contains("authentication")
-            || first.contains("Authentication")
-        {
-            AppError::PermissionDenied(
-                "Not authorized. Approve the system prompt, or ask an administrator.".into(),
-            )
-        } else if first.contains("not found") || first.contains("not loaded") {
-            AppError::ActionUnavailable("That service no longer exists.".into())
-        } else {
-            AppError::SystemQueryFailed(first.to_string())
         },
     )
 }
@@ -301,6 +347,10 @@ ssh.service                 disabled enabled
             "getty@tty1.service",
             "user@1000.service",
             "plymouth-start.service",
+            "org.gnome.Shell@wayland.service",
+            "gnome-session-manager@gnome.service",
+            "plasma-plasmashell.service",
+            "plasma-kwin_wayland.service",
         ] {
             assert!(protected(unit), "{unit}");
         }
@@ -309,11 +359,31 @@ ssh.service                 disabled enabled
             "bluetooth.service",
             "ssh.service",
             "docker.service",
+            "pipewire.service",
         ] {
             assert!(!protected(unit), "{unit}");
         }
     }
 
+    #[test]
+    fn session_and_remote_access_services_carry_a_caution() {
+        for unit in [
+            "ssh.service",
+            "sshd.service",
+            "accounts-daemon.service",
+            "pipewire.service",
+            "pipewire-pulse.service",
+            "wireplumber.service",
+            "xdg-desktop-portal-gnome.service",
+        ] {
+            assert!(service_caution(unit).is_some(), "{unit}");
+        }
+        assert!(service_caution("ssh.service").unwrap().contains("SSH"));
+        for unit in ["ssh-agent.service", "cups.service", "sshguard.service"] {
+            assert!(service_caution(unit).is_none(), "{unit}");
+        }
+    }
+
     #[test]
     fn only_plain_service_names_are_accepted() {
         for ok in [
diff --git a/src-tauri/core/src/platform/linux/tool.rs b/src-tauri/core/src/platform/linux/tool.rs
new file mode 100644
index 0000000..186667c
--- /dev/null
+++ b/src-tauri/core/src/platform/linux/tool.rs
@@ -0,0 +1,60 @@
+//! Running system command-line tools (no shell) and turning their failures
+//! into plain-language errors.
+
+use std::process::Command;
+
+use crate::errors::{AppError, AppResult};
+
+/// Runs `command` and returns its standard output. `missing` is the error
+/// when the tool is not installed; `failed` classifies the first line of
+/// standard error when it exits unsuccessfully.
+pub fn run_tool(
+    command: &mut Command,
+    missing: impl FnOnce() -> AppError,
+    failed: impl FnOnce(&str) -> AppError,
+) -> AppResult<String> {
+    let output = command.env("LC_ALL", "C").output().map_err(|e| {
+        if e.kind() == std::io::ErrorKind::NotFound {
+            missing()
+        } else {
+            AppError::SystemQueryFailed(format!(
+                "Could not run {}: {e}",
+                command.get_program().to_string_lossy()
+            ))
+        }
+    })?;
+    if output.status.success() {
+        return Ok(String::from_utf8_lossy(&output.stdout).into_owned());
+    }
+    let stderr = String::from_utf8_lossy(&output.stderr);
+    Err(failed(stderr.lines().next().unwrap_or("").trim()))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn maps_missing_tools_and_failures() {
+        let missing = run_tool(
+            &mut Command::new("tasky-no-such-tool"),
+            || AppError::ActionUnavailable("missing".into()),
+            |_| unreachable!(),
+        );
+        assert!(matches!(missing, Err(AppError::ActionUnavailable(m)) if m == "missing"));
+
+        let failed = run_tool(
+            Command::new("sh").args(["-c", "echo 'first line' >&2; echo second >&2; exit 3"]),
+            || unreachable!(),
+            |first| AppError::SystemQueryFailed(first.to_owned()),
+        );
+        assert!(matches!(failed, Err(AppError::SystemQueryFailed(m)) if m == "first line"));
+
+        let ok = run_tool(
+            Command::new("echo").arg("hi"),
+            || unreachable!(),
+            |_| unreachable!(),
+        );
+        assert_eq!(ok.unwrap(), "hi\n");
+    }
+}
diff --git a/src-tauri/core/src/platform/linux/volumes.rs b/src-tauri/core/src/platform/linux/volumes.rs
index 85ae156..553efb3 100644
--- a/src-tauri/core/src/platform/linux/volumes.rs
+++ b/src-tauri/core/src/platform/linux/volumes.rs
@@ -107,34 +107,32 @@ fn valid_device(device: &str) -> bool {
 
 fn udisksctl(args: &[&str]) -> AppResult<String> {
     let mut command = Command::new("udisksctl");
-    command.args(args).env("LC_ALL", "C");
+    command.args(args);
     // Never wait on a password prompt; `info` does not take the option.
     if args.first() != Some(&"info") {
         command.arg("--no-user-interaction");
     }
-    let output = command.output().map_err(|e| {
-        if e.kind() == std::io::ErrorKind::NotFound {
+    super::tool::run_tool(
+        &mut command,
+        || {
             AppError::ActionUnavailable(
                 "Mounting drives needs UDisks. Install the \"udisks2\" package.".into(),
             )
-        } else {
-            AppError::SystemQueryFailed(format!("Could not run udisksctl: {e}"))
-        }
-    })?;
-    if output.status.success() {
-        return Ok(String::from_utf8_lossy(&output.stdout).into_owned());
-    }
-    let stderr = String::from_utf8_lossy(&output.stderr);
-    let first = stderr.lines().next().unwrap_or("").trim();
-    Err(if first.contains("busy") {
-        AppError::ActionUnavailable(
-            "The drive is in use. Close any program using it and try again.".into(),
-        )
-    } else if first.contains("Not authorized") || first.contains("not allowed") {
-        AppError::PermissionDenied("Your account is not allowed to do this to that drive.".into())
-    } else {
-        AppError::SystemQueryFailed(first.to_string())
-    })
+        },
+        |first| {
+            if first.contains("busy") {
+                AppError::ActionUnavailable(
+                    "The drive is in use. Close any program using it and try again.".into(),
+                )
+            } else if first.contains("Not authorized") || first.contains("not allowed") {
+                AppError::PermissionDenied(
+                    "Your account is not allowed to do this to that drive.".into(),
+                )
+            } else {
+                AppError::SystemQueryFailed(first.to_string())
+            }
+        },
+    )
 }
 
 fn candidates() -> AppResult<Vec<String>> {
@@ -228,11 +226,14 @@ pub fn mount_volume(device: &str) -> AppResult<Option<String>> {
 #[derive(Debug, PartialEq, Eq)]
 struct BlockRow {
     path: String,
+    /// `/dev/<kernel name>`; `parent` refers to this, not to `path`
+    /// (a LUKS volume at `/dev/mapper/luks-…` is `dm-0` to its children).
+    kernel: String,
     parent: Option<String>,
     mounted: bool,
 }
 
-/// Reads `lsblk -J -o PATH,PKNAME,MOUNTPOINTS` (a flat list of devices).
+/// Reads `lsblk -J --list -o PATH,KNAME,PKNAME,MOUNTPOINTS`.
 fn parse_block_rows(json: &str) -> Vec<BlockRow> {
     let Ok(value) = serde_json::from_str::<serde_json::Value>(json) else {
         return Vec::new();
@@ -242,8 +243,12 @@ fn parse_block_rows(json: &str) -> Vec<BlockRow> {
         .into_iter()
         .flatten()
         .filter_map(|d| {
+            let path = d["path"].as_str()?.to_string();
             Some(BlockRow {
-                path: d["path"].as_str()?.to_string(),
+                kernel: d["kname"]
+                    .as_str()
+                    .map_or_else(|| path.clone(), |k| format!("/dev/{k}")),
+                path,
                 parent: d["pkname"].as_str().map(|p| format!("/dev/{p}")),
                 mounted: d["mountpoints"]
                     .as_array()
@@ -254,17 +259,31 @@ fn parse_block_rows(json: &str) -> Vec<BlockRow> {
 }
 
 /// The whole-disk device for `device`, and whether anything on that disk is
-/// still mounted (the disk itself or any partition, system ones included).
-fn disk_of(rows: &[BlockRow], device: &str) -> (String, bool) {
-    let disk = rows
-        .iter()
-        .find(|r| r.path == device)
-        .and_then(|r| r.parent.clone())
-        .unwrap_or_else(|| device.to_string());
+/// still mounted: the disk itself or anything stacked on it (partitions,
+/// LUKS, LVM), system volumes included. `None` when `device` is not listed,
+/// so an incomplete listing never reads as "nothing mounted".
+fn disk_of(rows: &[BlockRow], device: &str) -> Option<(String, bool)> {
+    let row = rows.iter().find(|r| r.path == device)?;
+    let disk = row.parent.clone().unwrap_or_else(|| device.to_string());
+    // Stacked devices are listed once per parent, so grow the set of kernel
+    // names on this disk until it stops changing.
+    let mut on_disk = vec![disk.as_str()];
+    loop {
+        let before = on_disk.len();
+        for r in rows {
+            let child = r.parent.as_deref().is_some_and(|p| on_disk.contains(&p));
+            if child && !on_disk.contains(&r.kernel.as_str()) {
+                on_disk.push(&r.kernel);
+            }
+        }
+        if on_disk.len() == before {
+            break;
+        }
+    }
     let busy = rows
         .iter()
-        .any(|r| (r.path == disk || r.parent.as_deref() == Some(disk.as_str())) && r.mounted);
-    (disk, busy)
+        .any(|r| r.mounted && on_disk.contains(&r.kernel.as_str()));
+    Some((disk, busy))
 }
 
 /// Powers off the drive holding `device`, after all of its volumes are
@@ -282,14 +301,21 @@ pub fn power_off_volume(device: &str) -> AppResult<()> {
         ));
     }
     let output = Command::new("lsblk")
-        .args(["-J", "-o", "PATH,PKNAME,MOUNTPOINTS"])
+        .args(["-J", "--list", "-o", "PATH,KNAME,PKNAME,MOUNTPOINTS"])
         .env("LC_ALL", "C")
         .output()
         .map_err(|e| AppError::SystemQueryFailed(format!("Could not list drives: {e}")))?;
-    let (disk, busy) = disk_of(
-        &parse_block_rows(&String::from_utf8_lossy(&output.stdout)),
-        &volume.device,
-    );
+    // MOUNTPOINTS needs util-linux 2.37+; without it the drive can't be shown
+    // to be idle, so refuse rather than power off a disk that may be in use.
+    let rows = output
+        .status
+        .success()
+        .then(|| parse_block_rows(&String::from_utf8_lossy(&output.stdout)));
+    let Some((disk, busy)) = rows.and_then(|rows| disk_of(&rows, &volume.device)) else {
+        return Err(AppError::ActionUnavailable(
+            "Could not confirm that nothing on this drive is in use, so it was left on.".into(),
+        ));
+    };
     if busy {
         return Err(AppError::ActionUnavailable(
             "Another volume on this drive is still mounted. Unmount it first.".into(),
@@ -425,11 +451,47 @@ mod tests {
             ]}"#,
         );
         // A sibling partition is still mounted, so sdb1 cannot be powered off yet.
-        assert_eq!(disk_of(&rows, "/dev/sdb1"), ("/dev/sdb".to_string(), true));
+        assert_eq!(
+            disk_of(&rows, "/dev/sdb1"),
+            Some(("/dev/sdb".to_string(), true))
+        );
         // sdc has nothing mounted.
-        assert_eq!(disk_of(&rows, "/dev/sdc1"), ("/dev/sdc".to_string(), false));
+        assert_eq!(
+            disk_of(&rows, "/dev/sdc1"),
+            Some(("/dev/sdc".to_string(), false))
+        );
         // A volume that is the whole disk is its own drive.
-        assert_eq!(disk_of(&rows, "/dev/sdb"), ("/dev/sdb".to_string(), true));
+        assert_eq!(
+            disk_of(&rows, "/dev/sdb"),
+            Some(("/dev/sdb".to_string(), true))
+        );
+    }
+
+    #[test]
+    fn power_off_sees_volumes_stacked_on_a_partition() {
+        let rows = parse_block_rows(
+            r#"{"blockdevices":[
+              {"path":"/dev/sdb","pkname":null,"mountpoints":[null]},
+              {"path":"/dev/sdb1","pkname":"sdb","mountpoints":[null]},
+              {"path":"/dev/sdb2","kname":"sdb2","pkname":"sdb","mountpoints":[null]},
+              {"path":"/dev/mapper/luks-1","kname":"dm-0","pkname":"sdb2","mountpoints":[null]},
+              {"path":"/dev/mapper/vg-data","kname":"dm-1","pkname":"dm-0","mountpoints":["/data"]}
+            ]}"#,
+        );
+        assert_eq!(
+            disk_of(&rows, "/dev/sdb1"),
+            Some(("/dev/sdb".to_string(), true))
+        );
+    }
+
+    #[test]
+    fn power_off_refuses_when_the_device_is_not_listed() {
+        // An lsblk without MOUNTPOINTS support fails and yields no rows.
+        assert_eq!(disk_of(&parse_block_rows(""), "/dev/sdb1"), None);
+        let rows = parse_block_rows(
+            r#"{"blockdevices":[{"path":"/dev/sdc","pkname":null,"mountpoints":[null]}]}"#,
+        );
+        assert_eq!(disk_of(&rows, "/dev/sdb1"), None);
     }
 
     #[test]
diff --git a/src-tauri/core/src/platform/mod.rs b/src-tauri/core/src/platform/mod.rs
index 8cd09f9..cc49bd1 100644
--- a/src-tauri/core/src/platform/mod.rs
+++ b/src-tauri/core/src/platform/mod.rs
@@ -113,6 +113,12 @@ pub fn control_service(
     linux_only::control_service(scope, unit, action, confirm)
 }
 
+/// Why stopping or restarting a (not protected) service needs extra thought,
+/// for the confirmation text.
+pub fn service_caution(unit: &str) -> Option<&'static str> {
+    linux_only::service_caution(unit)
+}
+
 /// External drives the user may mount or unmount. System and internal
 /// partitions are never included. Linux only for now.
 pub fn volumes() -> crate::errors::AppResult<Vec<crate::models::Volume>> {
@@ -185,7 +191,71 @@ pub fn connections(pid: u32) -> Option<Vec<crate::models::Connection>> {
 
 /// Every TCP/UDP socket with its owning process.
 pub fn sockets() -> crate::errors::AppResult<crate::models::SocketList> {
-    imp::sockets()
+    let mut list = imp::sockets()?;
+    let mut owners: Vec<u32> = list.sockets.iter().filter_map(|s| s.pid).collect();
+    owners.sort_unstable();
+    owners.dedup();
+    let starts = start_times(&owners);
+    for socket in &mut list.sockets {
+        socket.start_time = socket.pid.and_then(|p| starts.get(&p).copied());
+    }
+    Ok(list)
+}
+
+/// Start times (as in `ProcessRow::start_time`) of the given processes, read
+/// in one query. Processes that exited or report no start time are absent.
+fn start_times(pids: &[u32]) -> std::collections::HashMap<u32, u64> {
+    use sysinfo::{Pid, ProcessRefreshKind, ProcessesToUpdate, System};
+    if pids.is_empty() {
+        return std::collections::HashMap::new();
+    }
+    let Ok(mut system) = System::new() else {
+        return std::collections::HashMap::new();
+    };
+    let ids: Vec<Pid> = pids.iter().map(|&p| Pid::from_u32(p)).collect();
+    system.refresh_processes_specifics(
+        ProcessesToUpdate::Some(&ids),
+        true,
+        ProcessRefreshKind::nothing().without_tasks(),
+    );
+    system
+        .processes()
+        .iter()
+        .filter(|(_, p)| p.start_time() > 0)
+        .map(|(pid, p)| (pid.as_u32(), p.start_time()))
+        .collect()
+}
+
+/// Runs `read` on `pid` only while it is still the instance that started at
+/// `start_time` (seconds since the epoch, as in `ProcessRow`), so a reused
+/// PID never answers for the process the user picked. Reads only that PID.
+pub fn with_process<T>(
+    pid: u32,
+    start_time: u64,
+    kind: sysinfo::ProcessRefreshKind,
+    read: impl FnOnce(&sysinfo::Process) -> T,
+) -> crate::errors::AppResult<T> {
+    use sysinfo::{Pid, ProcessesToUpdate, System};
+    let mut system =
+        System::new().map_err(|e| crate::errors::AppError::SystemQueryFailed(e.to_string()))?;
+    let id = Pid::from_u32(pid);
+    system.refresh_processes_specifics(ProcessesToUpdate::Some(&[id]), true, kind);
+    system
+        .process(id)
+        .filter(|p| p.start_time() == start_time)
+        .map(read)
+        .ok_or(crate::errors::AppError::ProcessNotFound(pid))
+}
+
+/// Fails with `ProcessNotFound` unless `pid` is still the instance that
+/// started at `start_time`.
+pub fn verify_identity(pid: u32, start_time: u64) -> crate::errors::AppResult<()> {
+    with_process(
+        pid,
+        start_time,
+        sysinfo::ProcessRefreshKind::nothing().without_tasks(),
+        |_| (),
+    )
 }
 
 /// Files, directories and other objects `pid` holds open.
@@ -323,6 +393,10 @@ mod fallback {
         ))
     }
 
+    pub fn service_caution(_unit: &str) -> Option<&'static str> {
+        None
+    }
+
     pub fn volumes() -> crate::errors::AppResult<Vec<crate::models::Volume>> {
         Ok(Vec::new())
     }
@@ -349,3 +423,25 @@ mod fallback {
         crate::errors::AppError::UnsupportedOperation("Startup items".into())
     }
 }
+
+#[cfg(all(test, target_os = "linux"))]
+mod tests {
+    #[test]
+    fn sockets_carry_the_owner_start_time_and_it_verifies() {
+        let listener = std::net::TcpListener::bind("127.0.0.1:0").unwrap();
+        let port = listener.local_addr().unwrap().port();
+        let me = std::process::id();
+        let mine = super::sockets()
+            .unwrap()
+            .sockets
+            .into_iter()
+            .find(|s| s.connection.local_port == port && s.pid == Some(me))
+            .expect("own listener is listed with its owner");
+        let start = mine.start_time.expect("owner start time");
+        super::verify_identity(me, start).unwrap();
+        assert!(matches!(
+            super::verify_identity(me, start + 1),
+            Err(crate::errors::AppError::ProcessNotFound(_))
+        ));
+    }
+}
diff --git a/src-tauri/core/src/platform/windows/inspect.rs b/src-tauri/core/src/platform/windows/inspect.rs
index 453680a..a9a5313 100644
--- a/src-tauri/core/src/platform/windows/inspect.rs
+++ b/src-tauri/core/src/platform/windows/inspect.rs
@@ -101,6 +101,7 @@ pub fn sockets() -> AppResult<SocketList> {
                 connection,
                 pid,
                 process_name: pid.and_then(|p| names.get(&p).cloned()),
+                start_time: None,
             }
         })
         .collect();
diff --git a/src-tauri/core/src/process_control/mod.rs b/src-tauri/core/src/process_control/mod.rs
index 8ed7dc0..fa777e6 100644
--- a/src-tauri/core/src/process_control/mod.rs
+++ b/src-tauri/core/src/process_control/mod.rs
@@ -83,6 +83,9 @@ pub fn perform(engine: &Engine, req: ActionRequest) -> AppResult<ActionOutcome>
             if cfg!(windows) {
                 format!("Asked {name} (PID {pid}) to close. It may prompt to save first.")
             } else {
+                // The platform continues a stopped process so it can handle
+                // the request; if it survives, it is no longer suspended.
+                engine.set_suspended(pid, row.start_time, false);
                 format!("Sent a termination request to {name} (PID {pid}).")
             }
         }
diff --git a/src-tauri/core/src/process_control/protection.rs b/src-tauri/core/src/process_control/protection.rs
index b5b83f9..aa8f450 100644
--- a/src-tauri/core/src/process_control/protection.rs
+++ b/src-tauri/core/src/process_control/protection.rs
@@ -54,12 +54,27 @@ const LINUX_SYSTEM: &[&str] = &[
     "gdm3",
     "sddm",
     "lightdm",
+];
+
+/// Display servers, compositors and session managers. They run as the
+/// logged-in user, so the root-only daemon rule never sees them, yet ending
+/// one ends the session and suspending one freezes the screen, leaving no
+/// way to click Resume. (`gnome-session-b` is the 15-character kernel name.)
+const LINUX_SESSION: &[&str] = &[
+    "systemd",
     "Xorg",
     "Xwayland",
     "gnome-shell",
+    "gnome-session-b",
+    "gnome-session-binary",
+    "mutter",
     "plasmashell",
+    "ksmserver",
     "kwin_wayland",
     "kwin_x11",
+    "sway",
+    "Hyprland",
+    "weston",
 ];
 
 pub fn assess(
@@ -75,6 +90,15 @@ pub fn assess(
             ProtectionLevel::Blocked,
             "This is Tasky itself. Close the window or use Quit instead.",
         );
+    } else if facts.parent_pid == Some(facts.self_pid)
+        && facts.name.starts_with("WebKit")
+        && disruptive
+    {
+        // Other children (e.g. a file manager opened from Tasky) stay manageable.
+        a.add(
+            ProtectionLevel::Blocked,
+            "This is part of Tasky: it draws the Tasky window or fetches for it. Quit Tasky instead.",
+        );
     }
 
     match platform {
@@ -180,6 +204,17 @@ fn assess_unix(facts: &ProcessFacts<'_>, action: ProcessAction, a: &mut Protecti
         );
         return;
     }
+    if LINUX_SESSION.contains(&facts.name) {
+        a.add(
+            ProtectionLevel::Warning,
+            if matches!(action, ProcessAction::Suspend) {
+                "This runs your desktop session. Suspending it freezes the screen and input, so you may not be able to resume it."
+            } else {
+                "This runs your desktop session. Ending it may log you out and close every open app."
+            },
+        );
+        return;
+    }
     let is_root = facts.user == Some("root");
     let known_daemon = LINUX_SYSTEM.contains(&facts.name) || facts.name.starts_with("systemd-");
     if is_root && known_daemon {
@@ -380,6 +415,64 @@ mod tests {
         );
     }
 
+    #[test]
+    fn user_owned_desktop_session_is_warned_about() {
+        let shell = ProcessFacts {
+            pid: 2100,
+            parent_pid: Some(1900),
+            name: "gnome-shell",
+            user: Some("alice"),
+            self_pid: 4242,
+            ..Default::default()
+        };
+        let suspend = assess(Platform::Linux, &shell, ProcessAction::Suspend);
+        assert_eq!(suspend.level, ProtectionLevel::Warning);
+        assert!(
+            suspend
+                .reasons
+                .iter()
+                .any(|r| r.contains("freezes the screen"))
+        );
+        assert_eq!(
+            level(Platform::Linux, &shell, ProcessAction::Terminate),
+            ProtectionLevel::Warning
+        );
+        assert_eq!(
+            level(Platform::Linux, &shell, ProcessAction::Resume),
+            ProtectionLevel::Allowed
+        );
+    }
+
+    #[test]
+    fn taskys_own_helpers_are_blocked() {
+        let webview = ProcessFacts {
+            pid: 4300,
+            parent_pid: Some(4242),
+            name: "WebKitWebProcess",
+            user: Some("alice"),
+            self_pid: 4242,
+            ..Default::default()
+        };
+        for action in [
+            ProcessAction::Suspend,
+            ProcessAction::Terminate,
+            ProcessAction::ForceKill,
+        ] {
+            assert_eq!(
+                level(Platform::Linux, &webview, action),
+                ProtectionLevel::Blocked
+            );
+        }
+        let opened_app = ProcessFacts {
+            name: "nautilus",
+            ..webview
+        };
+        assert_eq!(
+            level(Platform::Linux, &opened_app, ProcessAction::Terminate),
+            ProtectionLevel::Allowed
+        );
+    }
+
     #[test]
     fn high_priority_warns_everywhere() {
         let f = win("game.exe", None);
diff --git a/src-tauri/core/src/sync_util.rs b/src-tauri/core/src/sync_util.rs
new file mode 100644
index 0000000..7e4d9fa
--- /dev/null
+++ b/src-tauri/core/src/sync_util.rs
@@ -0,0 +1,39 @@
+//! Poison-tolerant lock access. Shared state here stays structurally valid
+//! even if a holder panicked, so one failed operation must not take every
+//! later caller down with it.
+
+use std::sync::{Mutex, MutexGuard, PoisonError, RwLock, RwLockReadGuard, RwLockWriteGuard};
+
+pub fn lock<T>(m: &Mutex<T>) -> MutexGuard<'_, T> {
+    m.lock().unwrap_or_else(PoisonError::into_inner)
+}
+
+pub fn read<T>(l: &RwLock<T>) -> RwLockReadGuard<'_, T> {
+    l.read().unwrap_or_else(PoisonError::into_inner)
+}
+
+pub fn write<T>(l: &RwLock<T>) -> RwLockWriteGuard<'_, T> {
+    l.write().unwrap_or_else(PoisonError::into_inner)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn a_poisoned_lock_still_yields_its_data() {
+        let m = std::sync::Arc::new(Mutex::new(1));
+        let l = std::sync::Arc::new(RwLock::new(2));
+        let (m2, l2) = (m.clone(), l.clone());
+        let _ = std::thread::spawn(move || {
+            let _g = m2.lock().unwrap();
+            let _w = l2.write().unwrap();
+            panic!("poison both");
+        })
+        .join();
+        assert!(m.is_poisoned() && l.is_poisoned());
+        *lock(&m) += 1;
+        *write(&l) += 1;
+        assert_eq!((*lock(&m), *read(&l)), (2, 3));
+    }
+}
diff --git a/src-tauri/src/commands/benchmarks.rs b/src-tauri/src/commands/benchmarks.rs
index ff77b0b..dc8475e 100644
--- a/src-tauri/src/commands/benchmarks.rs
+++ b/src-tauri/src/commands/benchmarks.rs
@@ -109,15 +109,17 @@ pub async fn start_benchmark(
     .await
 }
 
-/// Locations the disk benchmark may use.
+/// Locations the disk benchmark may use. Checking each one touches the
+/// filesystem (a slow or hung mount must not stall the UI thread).
 #[tauri::command]
-pub fn list_disk_targets(state: State<'_, AppState>) -> Vec<DiskTargetInfo> {
-    state.benchmarks.disk_targets()
+pub async fn list_disk_targets(state: State<'_, AppState>) -> AppResult<Vec<DiskTargetInfo>> {
+    let benchmarks = Arc::clone(&state.benchmarks);
+    super::blocking::run(move || Ok(benchmarks.disk_targets())).await
 }
 
 /// What a disk run would write, or why it cannot happen.
 #[tauri::command]
-pub fn disk_plan(
+pub async fn disk_plan(
     state: State<'_, AppState>,
     target: String,
     profile: BenchmarkProfile,
@@ -125,7 +127,8 @@ pub fn disk_plan(
     if !valid_id(&target) {
         return Err(AppError::InvalidArgument("Not a valid id.".into()));
     }
-    state.benchmarks.disk_plan(&target, profile)
+    let benchmarks = Arc::clone(&state.benchmarks);
+    super::blocking::run(move || benchmarks.disk_plan(&target, profile)).await
 }
 
 /// What an internet run would send and receive, and to whom.
@@ -152,9 +155,11 @@ pub fn get_benchmark_status(state: State<'_, AppState>) -> BenchmarkStatus {
     state.benchmarks.status()
 }
 
+/// Up to 200 full results; cloning them is kept off the UI thread.
 #[tauri::command]
-pub fn get_benchmark_history(state: State<'_, AppState>) -> Vec<BenchmarkResult> {
-    state.benchmarks.history()
+pub async fn get_benchmark_history(state: State<'_, AppState>) -> AppResult<Vec<BenchmarkResult>> {
+    let benchmarks = Arc::clone(&state.benchmarks);
+    super::blocking::run(move || Ok(benchmarks.history())).await
 }
 
 #[tauri::command]
diff --git a/src-tauri/src/commands/blocking.rs b/src-tauri/src/commands/blocking.rs
index 0449f34..3fda2fa 100644
--- a/src-tauri/src/commands/blocking.rs
+++ b/src-tauri/src/commands/blocking.rs
@@ -1,11 +1,16 @@
 //! Bound queued and active on-demand work before entering Tauri's worker pool.
 
 use std::sync::atomic::{AtomicUsize, Ordering};
+use std::sync::{Mutex, MutexGuard, TryLockError};
 use tm_core::errors::{AppError, AppResult};
 
 static ACTIVE: AtomicUsize = AtomicUsize::new(0);
 const MAX_ACTIVE: usize = 8;
 
+/// Native dialogs wait on the user, possibly for minutes, so they do not
+/// count toward [`MAX_ACTIVE`]; instead only one is open at a time.
+static DIALOG: Mutex<()> = Mutex::new(());
+
 struct Permit;
 impl Permit {
     fn acquire() -> AppResult<Self> {
@@ -29,6 +34,15 @@ impl Drop for Permit {
     }
 }
 
+/// Held while a native dialog is shown. Busy if another one is open.
+pub fn dialog_slot() -> AppResult<MutexGuard<'static, ()>> {
+    match DIALOG.try_lock() {
+        Ok(guard) => Ok(guard),
+        Err(TryLockError::Poisoned(e)) => Ok(e.into_inner()),
+        Err(TryLockError::WouldBlock) => Err(AppError::OperationBusy),
+    }
+}
+
 pub async fn run<T: Send + 'static>(
     f: impl FnOnce() -> AppResult<T> + Send + 'static,
 ) -> AppResult<T> {
@@ -41,6 +55,19 @@ pub async fn run<T: Send + 'static>(
     .map_err(|_| AppError::SystemQueryFailed("Background operation failed.".into()))?
 }
 
+/// Runs `f`, which shows a native file dialog, holding the dialog slot
+/// rather than a worker permit.
+pub async fn dialog<T: Send + 'static>(
+    f: impl FnOnce() -> AppResult<T> + Send + 'static,
+) -> AppResult<T> {
+    tauri::async_runtime::spawn_blocking(move || {
+        let _slot = dialog_slot()?;
+        f()
+    })
+    .await
+    .map_err(|_| AppError::SystemQueryFailed("Background operation failed.".into()))?
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -53,4 +80,16 @@ mod tests {
         drop(permits);
         assert!(Permit::acquire().is_ok());
     }
+
+    #[test]
+    fn one_dialog_at_a_time_independent_of_the_worker_cap() {
+        let permits: Vec<_> = (0..MAX_ACTIVE)
+            .map(|_| Permit::acquire().unwrap())
+            .collect();
+        let slot = dialog_slot().expect("dialogs are not limited by busy workers");
+        assert!(matches!(dialog_slot(), Err(AppError::OperationBusy)));
+        drop(slot);
+        assert!(dialog_slot().is_ok());
+        drop(permits);
+    }
 }
diff --git a/src-tauri/src/commands/confirm.rs b/src-tauri/src/commands/confirm.rs
index ccd3c2a..4465fc6 100644
--- a/src-tauri/src/commands/confirm.rs
+++ b/src-tauri/src/commands/confirm.rs
@@ -5,10 +5,8 @@ use tauri::{AppHandle, Runtime};
 use tauri_plugin_dialog::{DialogExt, MessageDialogButtons, MessageDialogKind};
 use tm_core::errors::{AppError, AppResult};
 
-static DIALOG: std::sync::Mutex<()> = std::sync::Mutex::new(());
-
 pub fn confirm<R: Runtime>(app: &AppHandle<R>, message: &str) -> AppResult<()> {
-    let _guard = DIALOG.try_lock().map_err(|_| AppError::OperationBusy)?;
+    let _slot = super::blocking::dialog_slot()?;
     if app
         .dialog()
         .message(message)
diff --git a/src-tauri/src/commands/export.rs b/src-tauri/src/commands/export.rs
index 3412a0b..4468b8a 100644
--- a/src-tauri/src/commands/export.rs
+++ b/src-tauri/src/commands/export.rs
@@ -26,8 +26,16 @@ fn failed(e: impl std::fmt::Display) -> AppError {
     AppError::SystemQueryFailed(format!("export failed: {e}"))
 }
 
-/// Asks for a destination and writes `contents`. Returns the saved path, or
-/// `None` if the user cancelled.
+/// Content ready to save: the default file name and a (label, extension) filter.
+type Export = (String, String, (&'static str, &'static str));
+
+/// Asks for a destination and writes the export. Returns the saved path, or
+/// `None` if the user cancelled. The dialog does not hold a worker.
+async fn save<R: Runtime>(app: AppHandle<R>, prepared: Export) -> AppResult<Option<String>> {
+    let (contents, default_name, filter) = prepared;
+    super::blocking::dialog(move || save_with_dialog(&app, &default_name, filter, contents)).await
+}
+
 fn save_with_dialog<R: Runtime>(
     app: &AppHandle<R>,
     default_name: &str,
@@ -68,9 +76,10 @@ pub async fn export_processes<R: Runtime>(
     include_command_lines: bool,
 ) -> AppResult<Option<String>> {
     let engine = Arc::clone(&state.engine);
-    blocking(move || {
+    let confirm_app = app.clone();
+    let prepared = blocking(move || {
         if include_command_lines {
-            super::confirm::confirm(&app, "This export includes process command lines, which may contain passwords or tokens. Continue with this sensitive export?")?;
+            super::confirm::confirm(&confirm_app, "This export includes process command lines, which may contain passwords or tokens. Continue with this sensitive export?")?;
         }
         let tick = engine.latest().ok_or(AppError::EngineUnavailable)?;
         let (contents, ext, label) = match format {
@@ -85,14 +94,14 @@ pub async fn export_processes<R: Runtime>(
                 "JSON",
             ),
         };
-        save_with_dialog(
-            &app,
-            &format!("processes-{}.{ext}", timestamp()),
-            (label, ext),
+        Ok((
             contents,
-        )
+            format!("processes-{}.{ext}", timestamp()),
+            (label, ext),
+        ))
     })
-    .await
+    .await?;
+    save(app, prepared).await
 }
 
 #[tauri::command]
@@ -101,17 +110,17 @@ pub async fn export_system_summary<R: Runtime>(
     state: State<'_, AppState>,
 ) -> AppResult<Option<String>> {
     let engine = Arc::clone(&state.engine);
-    blocking(move || {
+    let prepared = blocking(move || {
         let tick = engine.latest().ok_or(AppError::EngineUnavailable)?;
         let json = export::system_summary_json(engine.static_info(), &tick).map_err(failed)?;
-        save_with_dialog(
-            &app,
-            &format!("system-summary-{}.json", timestamp()),
-            ("JSON", "json"),
+        Ok((
             json,
-        )
+            format!("system-summary-{}.json", timestamp()),
+            ("JSON", "json"),
+        ))
     })
-    .await
+    .await?;
+    save(app, prepared).await
 }
 
 #[derive(Serialize)]
@@ -143,26 +152,27 @@ pub async fn export_diagnostics<R: Runtime>(
     let engine = Arc::clone(&state.engine);
     let settings = state.settings.get();
     let recent_log = state.logging.recent();
-    blocking(move || {
+    let confirm_app = app.clone();
+    let prepared = blocking(move || {
         if include_processes {
             let message = if include_command_lines {
                 "Diagnostics will include process information and command lines, which may contain passwords or tokens, plus hostname, alert rules and recent errors. Continue?"
             } else {
                 "Diagnostics will include process information, hostname, alert rules and recent errors, which may be private. Continue?"
             };
-            super::confirm::confirm(&app, message)?;
+            super::confirm::confirm(&confirm_app, message)?;
         }
         let mut diagnostics = collect_diagnostics(&engine, settings, recent_log);
         diagnostics.apply_privacy(include_processes, include_command_lines);
         let json = serde_json::to_string_pretty(&diagnostics).map_err(failed)?;
-        save_with_dialog(
-            &app,
-            &format!("taskmanager-diagnostics-{}.json", timestamp()),
-            ("JSON", "json"),
+        Ok((
             json,
-        )
+            format!("taskmanager-diagnostics-{}.json", timestamp()),
+            ("JSON", "json"),
+        ))
     })
-    .await
+    .await?;
+    save(app, prepared).await
 }
 
 fn collect_diagnostics(
diff --git a/src-tauri/src/commands/inspect.rs b/src-tauri/src/commands/inspect.rs
index 5be8be5..7a8440c 100644
--- a/src-tauri/src/commands/inspect.rs
+++ b/src-tauri/src/commands/inspect.rs
@@ -6,7 +6,7 @@ use super::blocking::run as blocking;
 use std::sync::Arc;
 use std::time::Instant;
 
-use tauri::{AppHandle, Manager, Runtime, State};
+use tauri::{AppHandle, Runtime, State};
 use tauri_plugin_dialog::DialogExt;
 use tm_core::errors::{AppError, AppResult};
 use tm_core::models::{
@@ -34,19 +34,9 @@ pub async fn set_startup_enabled(app: AppHandle, id: String, enabled: bool) -> A
         ));
     }
     blocking(move || {
-        super::confirm::confirm(
-            &app,
-            &format!(
-                "{} startup entry {}? This changes what runs at your next login.",
-                if enabled { "Enable" } else { "Disable" },
-                id.escape_debug()
-            ),
-        )?;
+        super::confirm::confirm(&app, &startup_confirmation(&id, enabled))?;
         if id == crate::autostart::entry_id(&app) {
-            let state = app.state::<AppState>();
-            let mut settings = state.settings.get();
-            settings.start_with_os = enabled;
-            super::settings::save_settings(&app, &state, settings).map(|_| ())
+            super::settings::save_settings(&app, |s| s.start_with_os = enabled).map(|_| ())
         } else {
             platform::set_startup_enabled(&id, enabled)
         }
@@ -54,6 +44,14 @@ pub async fn set_startup_enabled(app: AppHandle, id: String, enabled: bool) -> A
     .await
 }
 
+pub fn startup_confirmation(id: &str, enabled: bool) -> String {
+    format!(
+        "{} startup entry {}? This changes what runs at your next login.",
+        if enabled { "Enable" } else { "Disable" },
+        id.escape_debug()
+    )
+}
+
 /// Every TCP/UDP socket with its owning process (Ports page).
 #[tauri::command]
 pub async fn list_sockets() -> AppResult<SocketList> {
@@ -122,7 +120,7 @@ pub async fn pick_path<R: Runtime>(
     app: AppHandle<R>,
     directory: bool,
 ) -> AppResult<Option<String>> {
-    blocking(move || {
+    super::blocking::dialog(move || {
         let dialog = app.dialog().file();
         let picked = if directory {
             dialog.blocking_pick_folder()
diff --git a/src-tauri/src/commands/monitoring.rs b/src-tauri/src/commands/monitoring.rs
index 26c48b6..e395d3d 100644
--- a/src-tauri/src/commands/monitoring.rs
+++ b/src-tauri/src/commands/monitoring.rs
@@ -3,7 +3,7 @@
 use std::sync::Arc;
 
 use tauri::ipc::{Channel, InvokeResponseBody};
-use tauri::{AppHandle, Runtime, State, Webview};
+use tauri::{AppHandle, Manager, Runtime, State, Webview};
 
 use crate::desktop::{WindowVisibility, update_pause_label};
 use crate::state::AppState;
@@ -28,12 +28,9 @@ impl TickSink for ChannelSink {
         self.visibility.get()
     }
 
-    fn deliver(&self, _tick: &MetricsTick, json: Option<&str>) -> bool {
+    fn deliver(&self, _tick: &MetricsTick, json: Option<String>) -> bool {
         match json {
-            Some(json) => self
-                .channel
-                .send(InvokeResponseBody::Json(json.to_owned()))
-                .is_ok(),
+            Some(json) => self.channel.send(InvokeResponseBody::Json(json)).is_ok(),
             None => true,
         }
     }
@@ -85,29 +82,31 @@ pub fn get_monitoring_state(state: State<'_, AppState>) -> MonitoringState {
     state.engine.state()
 }
 
+/// Persisting the interval writes the settings file, so this runs off the UI thread.
 #[tauri::command]
-pub fn set_monitoring_state<R: Runtime>(
+pub async fn set_monitoring_state<R: Runtime>(
     app: AppHandle<R>,
-    state: State<'_, AppState>,
     paused: bool,
     interval_ms: u32,
 ) -> AppResult<MonitoringState> {
     let interval_ms = validate_interval(interval_ms)?;
-    let result = state.engine.set_state(MonitoringState {
-        paused,
-        interval_ms,
-    })?;
-    // The interval is a persisted setting; pausing is per session.
-    let mut settings = state.settings.get();
-    if settings.refresh_interval_ms != interval_ms {
-        settings.refresh_interval_ms = interval_ms;
-        let saved = state.settings.save(settings)?;
-        state
-            .engine
-            .set_history_capacity(crate::commands::settings::history_points(&saved));
-    }
-    update_pause_label(&app, paused);
-    Ok(result)
+    super::blocking::run(move || {
+        let state = app.state::<AppState>();
+        let result = state.engine.set_state(MonitoringState {
+            paused,
+            interval_ms,
+        })?;
+        // The interval is a persisted setting; pausing is per session.
+        if state.settings.get().refresh_interval_ms != interval_ms {
+            state.settings.update(
+                |s| s.refresh_interval_ms = interval_ms,
+                |saved| super::settings::apply_runtime(&state, saved),
+            )?;
+        }
+        update_pause_label(&app, paused);
+        Ok(result)
+    })
+    .await
 }
 
 #[tauri::command]
diff --git a/src-tauri/src/commands/processes.rs b/src-tauri/src/commands/processes.rs
index 5e756f2..08c5b31 100644
--- a/src-tauri/src/commands/processes.rs
+++ b/src-tauri/src/commands/processes.rs
@@ -10,13 +10,14 @@ use tm_core::errors::AppResult;
 use tm_core::models::ProcessDetails;
 use tm_core::monitoring::details;
 
-/// Details for one process. Runs on a blocking worker so OS queries never
-/// stall the UI thread.
+/// Details for one process instance, identified by PID and start time so a
+/// reused PID is never shown as the process the user opened. Runs on a
+/// blocking worker so OS queries never stall the UI thread.
 #[tauri::command]
 pub async fn get_process_details(
     state: State<'_, AppState>,
     pid: i64,
-    start_time: Option<u64>,
+    start_time: u64,
 ) -> AppResult<ProcessDetails> {
     let pid = validate::pid(pid)?;
     let engine = Arc::clone(&state.engine);
diff --git a/src-tauri/src/commands/services.rs b/src-tauri/src/commands/services.rs
index a6e233e..b30a1dc 100644
--- a/src-tauri/src/commands/services.rs
+++ b/src-tauri/src/commands/services.rs
@@ -30,10 +30,13 @@ pub async fn control_service(
             } else {
                 "Restart"
             };
+            let caution = platform::service_caution(&service.unit)
+                .map(|why| format!("\n{why}"))
+                .unwrap_or_default();
             super::confirm::confirm(
                 &app,
                 &format!(
-                    "{verb} {}?\n{}\nPrograms that depend on it may stop working.",
+                    "{verb} {}?\n{}\nPrograms that depend on it may stop working.{caution}",
                     service.unit, service.description
                 ),
             )
diff --git a/src-tauri/src/commands/settings.rs b/src-tauri/src/commands/settings.rs
index 86172b1..71b8aa4 100644
--- a/src-tauri/src/commands/settings.rs
+++ b/src-tauri/src/commands/settings.rs
@@ -2,53 +2,73 @@
 
 use std::sync::atomic::Ordering;
 
-use tauri::{AppHandle, Runtime, State};
+use tauri::{AppHandle, Manager, Runtime, State};
 use tm_core::errors::AppResult;
 use tm_core::models::{AlertEvent, MonitoringState, Settings};
 use tm_core::monitoring::engine::MAX_HISTORY_POINTS;
 
+use super::blocking::run as blocking;
 use crate::state::AppState;
 
+/// Reading the login entry touches the disk, so this runs off the UI thread.
 #[tauri::command]
-pub fn get_settings<R: Runtime>(
-    app: AppHandle<R>,
-    state: State<'_, AppState>,
-) -> AppResult<Settings> {
-    let mut settings = state.settings.get();
-    settings.start_with_os = crate::autostart::is_enabled(&app)?;
-    Ok(settings)
+pub async fn get_settings<R: Runtime>(app: AppHandle<R>) -> AppResult<Settings> {
+    blocking(move || {
+        let mut settings = app.state::<AppState>().settings.get();
+        settings.start_with_os = crate::autostart::is_enabled(&app)?;
+        Ok(settings)
+    })
+    .await
 }
 
 /// Rolls autostart back if persistence fails; one store lock covers both changes.
 #[tauri::command]
-pub fn update_settings<R: Runtime>(
+pub async fn update_settings<R: Runtime>(
     app: AppHandle<R>,
-    state: State<'_, AppState>,
     settings: Settings,
 ) -> AppResult<Settings> {
-    save_settings(&app, &state, settings)
+    blocking(move || {
+        confirm_autostart_change(&app, settings.start_with_os)?;
+        save_settings(&app, |s| *s = settings)
+    })
+    .await
 }
 
 #[tauri::command]
-pub fn reset_settings<R: Runtime>(
-    app: AppHandle<R>,
-    state: State<'_, AppState>,
-) -> AppResult<Settings> {
-    save_settings(&app, &state, Settings::default())
+pub async fn reset_settings<R: Runtime>(app: AppHandle<R>) -> AppResult<Settings> {
+    blocking(move || {
+        let defaults = Settings::default();
+        confirm_autostart_change(&app, defaults.start_with_os)?;
+        save_settings(&app, |s| *s = defaults)
+    })
+    .await
 }
 
+/// Starting Tasky at login is a startup entry like any other, so changing it
+/// asks first, exactly as on the Startup page.
+fn confirm_autostart_change<R: Runtime>(app: &AppHandle<R>, enabled: bool) -> AppResult<()> {
+    if crate::autostart::is_enabled(app)? == enabled {
+        return Ok(());
+    }
+    super::confirm::confirm(
+        app,
+        &super::inspect::startup_confirmation(&crate::autostart::entry_id(app), enabled),
+    )
+}
+
+/// Read-modify-persist under the settings lock, then push the result into
+/// running components before the lock is released.
 pub fn save_settings<R: Runtime>(
     app: &AppHandle<R>,
-    state: &AppState,
-    settings: Settings,
+    change: impl FnOnce(&mut Settings),
 ) -> AppResult<Settings> {
-    let saved = state.settings.save_with_autostart(
-        settings,
+    let state = app.state::<AppState>();
+    state.settings.update_with_autostart(
+        change,
         || crate::autostart::is_enabled(app),
         |enabled| crate::autostart::set(app, enabled),
-    )?;
-    apply_runtime(state, &saved);
-    Ok(saved)
+        |saved| apply_runtime(&state, saved),
+    )
 }
 
 #[tauri::command]
diff --git a/src-tauri/src/commands/volumes.rs b/src-tauri/src/commands/volumes.rs
index b8206e6..e67e8ea 100644
--- a/src-tauri/src/commands/volumes.rs
+++ b/src-tauri/src/commands/volumes.rs
@@ -1,8 +1,10 @@
 //! Mount and unmount external drives. The platform layer decides which
-//! volumes are eligible; these commands only run it on a blocking worker.
+//! volumes are eligible; these commands add the OS confirmation for the
+//! disruptive actions and run everything on a blocking worker.
 
 use super::blocking::run as blocking;
-use tm_core::errors::AppResult;
+use tauri::AppHandle;
+use tm_core::errors::{AppError, AppResult};
 use tm_core::models::Volume;
 use tm_core::platform;
 
@@ -18,14 +20,73 @@ pub async fn mount_volume(device: String) -> AppResult<Option<String>> {
     blocking(move || platform::mount_volume(&device)).await
 }
 
-/// Powers off the drive holding an unmounted, listed volume.
+/// Powers off the drive holding an unmounted, listed volume. Asks first.
 #[tauri::command]
-pub async fn power_off_volume(device: String) -> AppResult<()> {
-    blocking(move || platform::power_off_volume(&device)).await
+pub async fn power_off_volume(app: AppHandle, device: String) -> AppResult<()> {
+    blocking(move || {
+        let name = listed_name(&device)?;
+        super::confirm::confirm(
+            &app,
+            &format!(
+                "Power off the drive holding {name}?\nIt can't be used again until it is unplugged and reconnected."
+            ),
+        )?;
+        platform::power_off_volume(&device)
+    })
+    .await
 }
 
-/// Unmounts a listed drive. Refused for system and internal partitions.
+/// Unmounts a listed drive. Refused for system and internal partitions. Asks first.
 #[tauri::command]
-pub async fn unmount_volume(device: String) -> AppResult<()> {
-    blocking(move || platform::unmount_volume(&device)).await
+pub async fn unmount_volume(app: AppHandle, device: String) -> AppResult<()> {
+    blocking(move || {
+        let name = listed_name(&device)?;
+        super::confirm::confirm(
+            &app,
+            &format!("Unmount {name}?\nPrograms using files on it may lose unsaved work."),
+        )?;
+        platform::unmount_volume(&device)
+    })
+    .await
+}
+
+/// How the prompt names a listed volume: its label and device, from the
+/// platform's own list rather than from the request.
+fn listed_name(device: &str) -> AppResult<String> {
+    let volume = platform::volumes()?
+        .into_iter()
+        .find(|v| v.device == device)
+        .ok_or_else(|| AppError::ActionUnavailable("That drive is no longer available.".into()))?;
+    Ok(display_name(&volume))
+}
+
+fn display_name(volume: &Volume) -> String {
+    match &volume.label {
+        Some(label) => format!("\"{}\" ({})", label.escape_debug(), volume.device),
+        None => volume.device.clone(),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn volume(label: Option<&str>) -> Volume {
+        Volume {
+            device: "/dev/sdb1".into(),
+            label: label.map(str::to_owned),
+            file_system: "vfat".into(),
+            size_bytes: 1,
+            mount_point: None,
+            can_power_off: true,
+        }
+    }
+
+    #[test]
+    fn prompts_name_the_label_and_device() {
+        assert_eq!(display_name(&volume(Some("USB"))), "\"USB\" (/dev/sdb1)");
+        assert_eq!(display_name(&volume(None)), "/dev/sdb1");
+        // A label cannot inject extra lines into the prompt.
+        assert_eq!(display_name(&volume(Some("A\nB"))), "\"A\\nB\" (/dev/sdb1)");
+    }
 }
diff --git a/src-tauri/src/desktop.rs b/src-tauri/src/desktop.rs
index b25599c..412361d 100644
--- a/src-tauri/src/desktop.rs
+++ b/src-tauri/src/desktop.rs
@@ -133,13 +133,43 @@ pub fn prefer_x11_on_gnome_wayland() {}
 /// after login the shell may not have started its tray yet.
 const TRAY_WAIT_SECS: u64 = 15;
 
+/// Last answer of [`tray_host_available`] and when it was given (Unix ms).
+static TRAY_HOST: AtomicBool = AtomicBool::new(false);
+static TRAY_HOST_CHECKED_MS: AtomicU64 = AtomicU64::new(0);
+const TRAY_RECHECK_MS: u64 = 30_000;
+
 /// Whether something on this desktop shows tray icons: an owner of the
 /// StatusNotifier watcher name, which KDE, Xfce and GNOME's AppIndicator
 /// extension all provide. Stock GNOME does not, so a window hidden "to the
 /// tray" there could never be brought back. If the bus cannot be asked, the
 /// answer is no: the safe failure is a window that stays visible.
-#[cfg(target_os = "linux")]
+///
+/// Asks the session bus (up to 500 ms); use [`tray_host_cached`] on the main thread.
 pub fn tray_host_available() -> bool {
+    let available = query_tray_host();
+    TRAY_HOST.store(available, Ordering::Relaxed);
+    TRAY_HOST_CHECKED_MS.store(tm_core::monitoring::unix_millis().max(1), Ordering::Relaxed);
+    available
+}
+
+/// [`tray_host_available`] as of the last check, without waiting on the bus.
+/// A stale answer is refreshed in the background for the next caller; before
+/// the first check completes the answer is no.
+pub fn tray_host_cached() -> bool {
+    let now = tm_core::monitoring::unix_millis();
+    let last = TRAY_HOST_CHECKED_MS.load(Ordering::Relaxed);
+    if now.saturating_sub(last) >= TRAY_RECHECK_MS
+        && TRAY_HOST_CHECKED_MS
+            .compare_exchange(last, now, Ordering::Relaxed, Ordering::Relaxed)
+            .is_ok()
+    {
+        std::thread::spawn(tray_host_available);
+    }
+    TRAY_HOST.load(Ordering::Relaxed)
+}
+
+#[cfg(target_os = "linux")]
+fn query_tray_host() -> bool {
     use gio::glib::{ToVariant, VariantTy};
 
     let ask = || -> Result<bool, gio::glib::Error> {
@@ -162,7 +192,7 @@ pub fn tray_host_available() -> bool {
 
 /// Other platforms always have a tray or taskbar to come back from.
 #[cfg(not(target_os = "linux"))]
-pub fn tray_host_available() -> bool {
+fn query_tray_host() -> bool {
     true
 }
 
@@ -289,7 +319,7 @@ impl<R: Runtime> TickSink for DesktopSink<R> {
         false
     }
 
-    fn deliver(&self, tick: &MetricsTick, _json: Option<&str>) -> bool {
+    fn deliver(&self, tick: &MetricsTick, _json: Option<String>) -> bool {
         let last = self.last_tray_update.load(Ordering::Relaxed);
         if tick.timestamp_ms.saturating_sub(last) >= TRAY_UPDATE_MS {
             self.last_tray_update
diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs
index 0de7924..5787a57 100644
--- a/src-tauri/src/lib.rs
+++ b/src-tauri/src/lib.rs
@@ -12,6 +12,7 @@ mod state;
 use std::sync::Arc;
 use std::sync::atomic::AtomicBool;
 
+use tauri::webview::PageLoadEvent;
 use tauri::{Manager, RunEvent, WindowEvent};
 use tauri_plugin_window_state::{StateFlags, WindowExt};
 use tm_core::benchmarks::coordinator::Coordinator;
@@ -25,7 +26,7 @@ use crate::state::AppState;
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
 pub fn run() {
     desktop::prefer_x11_on_gnome_wayland();
-    let app = tauri::Builder::default()
+    let builder = tauri::Builder::default()
         // Must be registered first: a second launch focuses the running
         // instance instead of starting another engine and window.
         .plugin(tauri_plugin_single_instance::init(|app, _args, _cwd| {
@@ -37,11 +38,14 @@ pub fn run() {
                 .on_navigation(|_, url| security::navigation_allowed(url))
                 .build(),
         )
-        .plugin(tauri_plugin_dialog::init())
-        .plugin(tauri_plugin_autostart::init(
-            tauri_plugin_autostart::MacosLauncher::LaunchAgent,
-            None,
-        ))
+        .plugin(tauri_plugin_dialog::init());
+    // Linux writes its own XDG login entry (see `autostart`).
+    #[cfg(not(target_os = "linux"))]
+    let builder = builder.plugin(tauri_plugin_autostart::init(
+        tauri_plugin_autostart::MacosLauncher::LaunchAgent,
+        None,
+    ));
+    let app = builder
         // Restored manually below, only when "Remember window position" is on.
         .plugin(
             tauri_plugin_window_state::Builder::default()
@@ -77,6 +81,8 @@ pub fn run() {
 
             let tray = desktop::build_tray(app.handle())?;
             app.manage(tray);
+            // The first check runs in the background; closing must never wait on it.
+            desktop::tray_host_cached();
             engine.subscribe(
                 "desktop".into(),
                 Arc::new(DesktopSink::new(app.handle().clone(), notifications)),
@@ -100,6 +106,15 @@ pub fn run() {
             }
             Ok(())
         })
+        .on_page_load(|webview, payload| {
+            // A reloaded page starts with no Memory view open; its new
+            // requests for memory detail arrive after this event.
+            if payload.event() == PageLoadEvent::Started
+                && let Some(state) = webview.try_state::<AppState>()
+            {
+                state.engine.set_memory_detail(false);
+            }
+        })
         .on_window_event(|window, event| {
             if window.label() != MAIN_WINDOW {
                 return;
@@ -112,12 +127,16 @@ pub fn run() {
                 // Close hides to the tray only when there is a tray to restore
                 // it from; otherwise closing quits, as it would without the setting.
                 WindowEvent::CloseRequested { api, .. }
-                    if state.settings.get().minimize_to_tray && desktop::tray_host_available() =>
+                    if state.settings.get().minimize_to_tray && desktop::tray_host_cached() =>
                 {
                     api.prevent_close();
                     hide_main_window(app);
                 }
                 WindowEvent::Resized(_) | WindowEvent::Focused(_) => {
+                    // Keeps the tray answer fresh for a later close request.
+                    if matches!(event, WindowEvent::Focused(true)) {
+                        desktop::tray_host_cached();
+                    }
                     let visible = window.is_visible().unwrap_or(true)
                         && !window.is_minimized().unwrap_or(false);
                     let was = state.visibility.get();
diff --git a/src-tauri/src/logging.rs b/src-tauri/src/logging.rs
index 6baf400..8751975 100644
--- a/src-tauri/src/logging.rs
+++ b/src-tauri/src/logging.rs
@@ -106,6 +106,8 @@ fn file_appender(dir: &Path) -> Result<BoundedLogs, Box<dyn std::error::Error>>
         .build(dir)?;
     Ok(BoundedLogs {
         inner,
+        used: log_bytes(dir)?,
+        scanned_day: utc_day(),
         dir: dir.to_owned(),
         max_bytes: MAX_LOG_BYTES,
     })
@@ -117,25 +119,45 @@ struct BoundedLogs {
     inner: RollingFileAppender,
     dir: std::path::PathBuf,
     max_bytes: u64,
+    /// Bytes in log files, counted from disk only at startup and once per
+    /// (UTC) day, when the appender rotates and prunes old files.
+    used: u64,
+    scanned_day: u64,
+}
+
+fn utc_day() -> u64 {
+    std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .map_or(0, |d| d.as_secs() / 86_400)
+}
+
+fn log_bytes(dir: &Path) -> io::Result<u64> {
+    Ok(std::fs::read_dir(dir)?
+        .filter_map(Result::ok)
+        .filter(|e| {
+            e.file_name()
+                .to_str()
+                .is_some_and(|n| n.starts_with("taskmanager.") && n.ends_with(".log"))
+        })
+        .filter_map(|e| e.path().symlink_metadata().ok())
+        .filter(|m| m.is_file())
+        .fold(0u64, |sum, m| sum.saturating_add(m.len())))
 }
 
 impl Write for BoundedLogs {
     fn write(&mut self, bytes: &[u8]) -> io::Result<usize> {
         self.inner.write(&[])?; // Allow rotation even after reaching the cap.
-        let used = std::fs::read_dir(&self.dir)?
-            .filter_map(Result::ok)
-            .filter(|e| {
-                e.file_name()
-                    .to_str()
-                    .is_some_and(|n| n.starts_with("taskmanager.") && n.ends_with(".log"))
-            })
-            .filter_map(|e| e.path().symlink_metadata().ok())
-            .filter(|m| m.is_file())
-            .fold(0u64, |sum, m| sum.saturating_add(m.len()));
-        if used.saturating_add(bytes.len() as u64) > self.max_bytes {
+        let day = utc_day();
+        if day != self.scanned_day {
+            self.used = log_bytes(&self.dir)?;
+            self.scanned_day = day;
+        }
+        if self.used.saturating_add(bytes.len() as u64) > self.max_bytes {
             return Ok(bytes.len());
         }
-        self.inner.write(bytes)
+        let written = self.inner.write(bytes)?;
+        self.used = self.used.saturating_add(written as u64);
+        Ok(written)
     }
 
     fn flush(&mut self) -> io::Result<()> {
@@ -226,4 +248,29 @@ mod tests {
         drop(writer);
         std::fs::remove_dir_all(dir).unwrap();
     }
+
+    #[test]
+    fn disk_usage_is_rescanned_only_when_the_day_changes() {
+        let dir = std::env::temp_dir().join(format!(
+            "tm-log-rescan-{}-{}",
+            std::process::id(),
+            tm_core::monitoring::unix_millis()
+        ));
+        std::fs::create_dir(&dir).unwrap();
+        let mut writer = file_appender(&dir).unwrap();
+        writer.max_bytes = 100;
+        writer.write_all(b"12345").unwrap();
+        assert_eq!(writer.used, 5);
+        // Space taken behind the writer's back is not seen within the day...
+        std::fs::write(dir.join("taskmanager.old.log"), vec![b'x'; 100]).unwrap();
+        writer.write_all(b"678").unwrap();
+        assert_eq!(writer.used, 8);
+        // ...but is after a day boundary, and further output is discarded.
+        writer.scanned_day = 0;
+        writer.write_all(b"discard").unwrap();
+        writer.flush().unwrap();
+        assert!(writer.used >= 108);
+        drop(writer);
+        std::fs::remove_dir_all(dir).unwrap();
+    }
 }
diff --git a/src-tauri/src/settings.rs b/src-tauri/src/settings.rs
index b8743f0..9907fb9 100644
--- a/src-tauri/src/settings.rs
+++ b/src-tauri/src/settings.rs
@@ -5,10 +5,11 @@
 //! is moved aside rather than silently overwritten.
 
 use std::path::{Path, PathBuf};
-use std::sync::{PoisonError, RwLock};
+use std::sync::RwLock;
 
 use tm_core::errors::{AppError, AppResult};
 use tm_core::models::Settings;
+use tm_core::sync_util::{read, write};
 
 const FILE_NAME: &str = "settings.json";
 
@@ -28,26 +29,49 @@ impl SettingsStore {
     }
 
     pub fn get(&self) -> Settings {
-        self.current
-            .read()
-            .unwrap_or_else(PoisonError::into_inner)
-            .clone()
+        read(&self.current).clone()
     }
 
-    /// Validates, persists and stores `next`. Returns the stored settings.
-    pub fn save(&self, next: Settings) -> AppResult<Settings> {
+    /// Applies `change` to the current settings, then validates, persists and
+    /// stores the result, all under one write lock so concurrent updates are
+    /// never lost. `then` sees the stored settings before the lock is
+    /// released, so runtime effects are applied in the order saves happen.
+    pub fn update(
+        &self,
+        change: impl FnOnce(&mut Settings),
+        then: impl FnOnce(&Settings),
+    ) -> AppResult<Settings> {
+        let mut current = write(&self.current);
+        let mut next = current.clone();
+        change(&mut next);
         let enabled = next.start_with_os;
-        self.save_with_autostart(next, || Ok(enabled), |_| Ok(()))
+        self.commit(&mut current, next, || Ok(enabled), |_| Ok(()), then)
     }
 
-    pub fn save_with_autostart(
+    /// [`update`](Self::update), also applying `start_with_os` to the real
+    /// login entry. Rolls autostart back if persistence fails.
+    pub fn update_with_autostart(
         &self,
+        change: impl FnOnce(&mut Settings),
+        read_autostart: impl FnOnce() -> AppResult<bool>,
+        set_autostart: impl FnMut(bool) -> AppResult<()>,
+        then: impl FnOnce(&Settings),
+    ) -> AppResult<Settings> {
+        let mut current = write(&self.current);
+        let mut next = current.clone();
+        change(&mut next);
+        self.commit(&mut current, next, read_autostart, set_autostart, then)
+    }
+
+    fn commit(
+        &self,
+        current: &mut Settings,
         next: Settings,
         read_autostart: impl FnOnce() -> AppResult<bool>,
         mut set_autostart: impl FnMut(bool) -> AppResult<()>,
+        then: impl FnOnce(&Settings),
     ) -> AppResult<Settings> {
         next.validate()?;
-        let mut current = self.current.write().unwrap_or_else(PoisonError::into_inner);
         let previous_autostart = read_autostart()?;
         let changed = previous_autostart != next.start_with_os;
         if changed {
@@ -64,6 +88,7 @@ impl SettingsStore {
             return Err(error);
         }
         *current = next.clone();
+        then(&next);
         Ok(next)
     }
 }
@@ -109,7 +134,48 @@ mod tests {
 
     fn save(store: &SettingsStore, next: Settings) -> AppResult<Settings> {
         let previous = store.get().start_with_os;
-        store.save_with_autostart(next, || Ok(previous), |_| Ok(()))
+        store.update_with_autostart(|s| *s = next, || Ok(previous), |_| Ok(()), |_| {})
+    }
+
+    #[test]
+    fn concurrent_updates_are_not_lost_and_effects_follow_save_order() {
+        let store = std::sync::Arc::new(SettingsStore::load(None));
+        let applied = std::sync::Arc::new(std::sync::Mutex::new(Vec::new()));
+        let threads: Vec<_> = (0..8)
+            .map(|i| {
+                let (store, applied) = (store.clone(), applied.clone());
+                std::thread::spawn(move || {
+                    store
+                        .update(
+                            |s| {
+                                let n = s.new_process_seconds;
+                                std::thread::yield_now();
+                                s.new_process_seconds = n + 1;
+                                s.show_kernel_threads = i % 2 == 0;
+                            },
+                            |saved| applied.lock().unwrap().push(saved.new_process_seconds),
+                        )
+                        .unwrap();
+                })
+            })
+            .collect();
+        for t in threads {
+            t.join().unwrap();
+        }
+        let start = Settings::default().new_process_seconds;
+        assert_eq!(store.get().new_process_seconds, start + 8);
+        let applied = applied.lock().unwrap();
+        assert_eq!(*applied, (start + 1..=start + 8).collect::<Vec<_>>());
+    }
+
+    #[test]
+    fn a_rejected_update_changes_nothing_and_skips_effects() {
+        let store = SettingsStore::load(None);
+        let mut ran = false;
+        let result = store.update(|s| s.refresh_interval_ms = 7, |_| ran = true);
+        assert!(result.is_err());
+        assert!(!ran);
+        assert_eq!(store.get(), Settings::default());
     }
 
     fn temp_dir(name: &str) -> PathBuf {
@@ -177,13 +243,14 @@ mod tests {
             start_with_os: true,
             ..Settings::default()
         };
-        let result = store.save_with_autostart(
-            next,
+        let result = store.update_with_autostart(
+            |s| *s = next,
             || Ok(enabled.get()),
             |value| {
                 enabled.set(value);
                 Ok(())
             },
+            |_| {},
         );
         assert!(result.is_err());
         assert!(!enabled.get());
@@ -196,13 +263,14 @@ mod tests {
         let store = SettingsStore::load(None);
         let enabled = std::cell::Cell::new(true);
         store
-            .save_with_autostart(
-                Settings::default(),
+            .update_with_autostart(
+                |s| *s = Settings::default(),
                 || Ok(enabled.get()),
                 |value| {
                     enabled.set(value);
                     Ok(())
                 },
+                |_| {},
             )
             .unwrap();
         assert!(!enabled.get());
diff --git a/src/app/App.tsx b/src/app/App.tsx
index 02a4f41..076ee04 100644
--- a/src/app/App.tsx
+++ b/src/app/App.tsx
@@ -1,6 +1,7 @@
 import { useEffect, type ComponentType } from "react";
 import { useGlobalShortcuts } from "@/hooks/useGlobalShortcuts";
 import { startMonitoring } from "@/services/monitoring";
+import { ErrorBoundary } from "@/components/ErrorBoundary";
 import { Toaster } from "@/components/Toaster";
 import { ConfirmActionDialog } from "@/features/processes/ConfirmActionDialog";
 import { CommandPalette } from "./CommandPalette";
@@ -62,7 +63,9 @@ export function App() {
       <div className="flex min-w-0 flex-1 flex-col">
         <TopBar />
         <main className="min-h-0 flex-1 overflow-auto p-5">
-          <Page />
+          <ErrorBoundary key={route}>
+            <Page />
+          </ErrorBoundary>
         </main>
       </div>
       <ConfirmActionDialog />
diff --git a/src/app/CommandPalette.test.tsx b/src/app/CommandPalette.test.tsx
new file mode 100644
index 0000000..ce52e3e
--- /dev/null
+++ b/src/app/CommandPalette.test.tsx
@@ -0,0 +1,63 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { beforeAll, beforeEach, describe, expect, it } from "vitest";
+import { useProcessStore } from "@/stores/processStore";
+import { useUiStore } from "@/stores/uiStore";
+import { CommandPalette } from "./CommandPalette";
+
+// jsdom does not implement scrolling.
+beforeAll(() => {
+  Element.prototype.scrollIntoView = () => {};
+});
+
+beforeEach(() => {
+  useUiStore.setState({ route: "overview" });
+  useProcessStore.setState({ search: "" });
+});
+
+const open = () => userEvent.keyboard("{Control>}k{/Control}");
+
+describe("CommandPalette", () => {
+  it("opens with Ctrl+K and closes with Escape", async () => {
+    render(<CommandPalette />);
+    expect(screen.queryByRole("dialog")).toBeNull();
+    await open();
+    expect(screen.getByRole("dialog", { name: "Command palette" })).toBeInTheDocument();
+    expect(screen.getByRole("combobox", { name: "Command" })).toHaveFocus();
+    await userEvent.keyboard("{Escape}");
+    expect(screen.queryByRole("dialog")).toBeNull();
+  });
+
+  it("filters commands as the user types", async () => {
+    render(<CommandPalette />);
+    await open();
+    await userEvent.keyboard("memory");
+    const options = screen.getAllByRole("option").map((o) => o.textContent);
+    expect(options).toEqual(['Search processes for "memory"', "Go to Memory"]);
+  });
+
+  it("moves the active option with the arrow keys and runs it with Enter", async () => {
+    render(<CommandPalette />);
+    await open();
+    await userEvent.keyboard("go to st");
+    const input = screen.getByRole("combobox");
+    expect(screen.getAllByRole("option")[0]).toHaveAttribute("aria-selected", "true");
+
+    await userEvent.keyboard("{ArrowDown}");
+    const storage = screen.getByRole("option", { name: "Go to Storage" });
+    expect(storage).toHaveAttribute("aria-selected", "true");
+    expect(input).toHaveAttribute("aria-activedescendant", storage.id);
+
+    await userEvent.keyboard("{Enter}");
+    expect(useUiStore.getState().route).toBe("storage");
+    expect(screen.queryByRole("dialog")).toBeNull();
+  });
+
+  it("searches processes for free text", async () => {
+    render(<CommandPalette />);
+    await open();
+    await userEvent.keyboard("firefox{Enter}");
+    expect(useUiStore.getState().route).toBe("processes");
+    expect(useProcessStore.getState().search).toBe("firefox");
+  });
+});
diff --git a/src/components/ErrorBoundary.test.tsx b/src/components/ErrorBoundary.test.tsx
new file mode 100644
index 0000000..9f36a90
--- /dev/null
+++ b/src/components/ErrorBoundary.test.tsx
@@ -0,0 +1,53 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { ErrorBoundary } from "./ErrorBoundary";
+
+let broken = true;
+function Flaky() {
+  if (broken) throw new Error("boom");
+  return <p>Page content</p>;
+}
+
+beforeEach(() => {
+  broken = true;
+  // React and the boundary both log the caught error.
+  vi.spyOn(console, "error").mockImplementation(() => {});
+});
+afterEach(() => vi.restoreAllMocks());
+
+describe("ErrorBoundary", () => {
+  it("shows the error instead of a blank page and reloads the page on request", async () => {
+    render(
+      <>
+        <nav>Sidebar</nav>
+        <ErrorBoundary>
+          <Flaky />
+        </ErrorBoundary>
+      </>,
+    );
+    expect(screen.getByRole("alert")).toHaveTextContent("boom");
+    expect(screen.getByText("Sidebar")).toBeInTheDocument();
+
+    broken = false;
+    await userEvent.click(screen.getByRole("button", { name: "Reload page" }));
+    expect(screen.getByText("Page content")).toBeInTheDocument();
+    expect(screen.queryByRole("alert")).toBeNull();
+  });
+
+  it("starts fresh when its key changes (another page)", () => {
+    const { rerender } = render(
+      <ErrorBoundary key="a">
+        <Flaky />
+      </ErrorBoundary>,
+    );
+    expect(screen.getByRole("alert")).toBeInTheDocument();
+    broken = false;
+    rerender(
+      <ErrorBoundary key="b">
+        <Flaky />
+      </ErrorBoundary>,
+    );
+    expect(screen.getByText("Page content")).toBeInTheDocument();
+  });
+});
diff --git a/src/components/ErrorBoundary.tsx b/src/components/ErrorBoundary.tsx
new file mode 100644
index 0000000..9bfefae
--- /dev/null
+++ b/src/components/ErrorBoundary.tsx
@@ -0,0 +1,46 @@
+import { Component, type ErrorInfo, type ReactNode } from "react";
+import { outlineButton } from "@/components/ui/button";
+
+interface Props {
+  children: ReactNode;
+}
+
+interface State {
+  error: Error | null;
+}
+
+/** Contains a crash in one page so the shell (sidebar, top bar) keeps working. */
+export class ErrorBoundary extends Component<Props, State> {
+  state: State = { error: null };
+
+  static getDerivedStateFromError(error: Error): State {
+    return { error };
+  }
+
+  componentDidCatch(error: Error, info: ErrorInfo) {
+    console.error("Page crashed", error, info.componentStack);
+  }
+
+  render() {
+    const { error } = this.state;
+    if (!error) return this.props.children;
+    return (
+      <div role="alert" className="mx-auto max-w-lg py-16 text-center">
+        <h1 className="text-lg font-semibold">This page stopped working</h1>
+        <p className="mt-2 text-fg-muted">
+          Something went wrong while showing it. Other pages still work.
+        </p>
+        <p className="selectable mt-3 break-words font-mono text-[0.8125rem] text-fg-subtle">
+          {error.message}
+        </p>
+        <button
+          type="button"
+          className={`${outlineButton} mx-auto mt-5`}
+          onClick={() => this.setState({ error: null })}
+        >
+          Reload page
+        </button>
+      </div>
+    );
+  }
+}
diff --git a/src/components/Toaster.test.tsx b/src/components/Toaster.test.tsx
new file mode 100644
index 0000000..8c9f3e4
--- /dev/null
+++ b/src/components/Toaster.test.tsx
@@ -0,0 +1,38 @@
+import { act, fireEvent, render, screen } from "@testing-library/react";
+import { afterEach, beforeEach, expect, it, vi } from "vitest";
+import { toast, useToastStore } from "@/stores/toastStore";
+import { Toaster } from "./Toaster";
+
+beforeEach(() => {
+  vi.useFakeTimers();
+  useToastStore.setState({ toasts: [] });
+});
+afterEach(() => {
+  vi.useRealTimers();
+});
+
+it("announces errors assertively and the rest politely, without nested alert roles", () => {
+  const { container } = render(<Toaster />);
+  act(() => {
+    toast.success("Saved");
+    toast.error("Failed");
+  });
+  expect(screen.getByText("Saved").closest("[aria-live]")).toHaveAttribute("aria-live", "polite");
+  expect(screen.getByText("Failed").closest("[aria-live]")).toHaveAttribute(
+    "aria-live",
+    "assertive",
+  );
+  expect(container.querySelector("[role]")).toBeNull();
+});
+
+it("stays while hovered", () => {
+  render(<Toaster />);
+  act(() => toast.info("Copied"));
+  const item = screen.getByText("Copied").closest("div.pointer-events-auto")!;
+  fireEvent.mouseEnter(item);
+  act(() => vi.advanceTimersByTime(10_000));
+  expect(screen.getByText("Copied")).toBeInTheDocument();
+  fireEvent.mouseLeave(item);
+  act(() => vi.advanceTimersByTime(4000));
+  expect(screen.queryByText("Copied")).toBeNull();
+});
diff --git a/src/components/Toaster.tsx b/src/components/Toaster.tsx
index a96af0b..f08d65b 100644
--- a/src/components/Toaster.tsx
+++ b/src/components/Toaster.tsx
@@ -1,62 +1,92 @@
 import { CheckCircle2, Info, TriangleAlert, X } from "lucide-react";
+import { useEffect, useState } from "react";
 import { cn } from "@/lib/cn";
-import { useToastStore } from "@/stores/toastStore";
+import { useToastStore, type Toast } from "@/stores/toastStore";
 
 const ICON = { success: CheckCircle2, info: Info, error: TriangleAlert } as const;
 
-/** Bottom-right notification stack. Announced politely to screen readers. */
+/**
+ * Bottom-right notification stack. Errors are announced assertively, the rest
+ * politely; the live regions stay mounted so additions are announced.
+ */
 export function Toaster() {
   const toasts = useToastStore((s) => s.toasts);
+  return (
+    <div className="pointer-events-none fixed bottom-4 right-4 z-[60] flex w-96 max-w-[calc(100vw-2rem)] flex-col gap-2">
+      <div aria-live="polite" className="flex flex-col gap-2">
+        {toasts
+          .filter((t) => t.tone !== "error")
+          .map((t) => (
+            <ToastItem key={t.id} toast={t} />
+          ))}
+      </div>
+      <div aria-live="assertive" className="flex flex-col gap-2">
+        {toasts
+          .filter((t) => t.tone === "error")
+          .map((t) => (
+            <ToastItem key={t.id} toast={t} />
+          ))}
+      </div>
+    </div>
+  );
+}
+
+function ToastItem({ toast: t }: { toast: Toast }) {
   const dismiss = useToastStore((s) => s.dismiss);
+  const pause = useToastStore((s) => s.pause);
+  const resume = useToastStore((s) => s.resume);
+  const [hovered, setHovered] = useState(false);
+  const [focused, setFocused] = useState(false);
+  const held = hovered || focused;
+  useEffect(() => {
+    if (held) pause(t.id);
+    else resume(t.id);
+  }, [held, t.id, pause, resume]);
+
+  const Icon = ICON[t.tone];
   return (
     <div
-      aria-live="polite"
-      className="pointer-events-none fixed bottom-4 right-4 z-[60] flex w-96 max-w-[calc(100vw-2rem)] flex-col gap-2"
+      onMouseEnter={() => setHovered(true)}
+      onMouseLeave={() => setHovered(false)}
+      onFocus={() => setFocused(true)}
+      onBlur={(e) => {
+        if (!e.currentTarget.contains(e.relatedTarget)) setFocused(false);
+      }}
+      className="pointer-events-auto flex items-start gap-3 rounded-lg border border-border bg-surface p-3 shadow-lg"
     >
-      {toasts.map((t) => {
-        const Icon = ICON[t.tone];
-        return (
-          <div
-            key={t.id}
-            role={t.tone === "error" ? "alert" : "status"}
-            className="pointer-events-auto flex items-start gap-3 rounded-lg border border-border bg-surface p-3 shadow-lg"
+      <Icon
+        size="1rem"
+        aria-hidden
+        className={cn(
+          "mt-0.5 shrink-0",
+          t.tone === "success" && "text-ok",
+          t.tone === "error" && "text-crit",
+          t.tone === "info" && "text-fg-muted",
+        )}
+      />
+      <div className="min-w-0 flex-1">
+        <p>{t.message}</p>
+        {t.action && (
+          <button
+            type="button"
+            onClick={() => {
+              t.action?.run();
+              dismiss(t.id);
+            }}
+            className="mt-1 font-medium text-accent hover:underline"
           >
-            <Icon
-              size="1rem"
-              aria-hidden
-              className={cn(
-                "mt-0.5 shrink-0",
-                t.tone === "success" && "text-ok",
-                t.tone === "error" && "text-crit",
-                t.tone === "info" && "text-fg-muted",
-              )}
-            />
-            <div className="min-w-0 flex-1">
-              <p>{t.message}</p>
-              {t.action && (
-                <button
-                  type="button"
-                  onClick={() => {
-                    t.action?.run();
-                    dismiss(t.id);
-                  }}
-                  className="mt-1 font-medium text-accent hover:underline"
-                >
-                  {t.action.label}
-                </button>
-              )}
-            </div>
-            <button
-              type="button"
-              aria-label="Dismiss"
-              onClick={() => dismiss(t.id)}
-              className="shrink-0 rounded text-fg-subtle hover:text-fg"
-            >
-              <X size="0.875rem" />
-            </button>
-          </div>
-        );
-      })}
+            {t.action.label}
+          </button>
+        )}
+      </div>
+      <button
+        type="button"
+        aria-label="Dismiss"
+        onClick={() => dismiss(t.id)}
+        className="shrink-0 rounded text-fg-subtle hover:text-fg"
+      >
+        <X size="0.875rem" />
+      </button>
     </div>
   );
 }
diff --git a/src/components/ui/SegmentedControl.test.tsx b/src/components/ui/SegmentedControl.test.tsx
new file mode 100644
index 0000000..da6803b
--- /dev/null
+++ b/src/components/ui/SegmentedControl.test.tsx
@@ -0,0 +1,78 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { useState } from "react";
+import { describe, expect, it } from "vitest";
+import { SegmentedControl } from "./SegmentedControl";
+
+type Size = "s" | "m" | "l";
+
+function Picker({ disabled }: { disabled?: boolean }) {
+  const [value, setValue] = useState<Size>("m");
+  return (
+    <>
+      <button type="button">Before</button>
+      <SegmentedControl
+        label="Size"
+        value={value}
+        onChange={setValue}
+        disabled={disabled}
+        segments={[
+          { value: "s", label: "Small" },
+          { value: "m", label: "Medium" },
+          { value: "l", label: "L", title: "Large" },
+        ]}
+      />
+      <button type="button">After</button>
+    </>
+  );
+}
+
+/**
+ * Radix moves focus in a timeout and selects on focus only while the arrow
+ * key is still down, so release it after focus has moved, like a real press.
+ */
+async function press(key: string) {
+  const user = userEvent.setup();
+  await user.keyboard(`{${key}>}`);
+  await new Promise((resolve) => setTimeout(resolve, 0));
+  await user.keyboard(`{/${key}}`);
+}
+
+describe("SegmentedControl", () => {
+  it("is one tab stop on the selected segment", async () => {
+    render(<Picker />);
+    screen.getByRole("button", { name: "Before" }).focus();
+    await userEvent.tab();
+    expect(screen.getByRole("radio", { name: "Medium" })).toHaveFocus();
+    await userEvent.tab();
+    expect(screen.getByRole("button", { name: "After" })).toHaveFocus();
+  });
+
+  it("moves and selects with the arrow keys, wrapping at the ends", async () => {
+    render(<Picker />);
+    expect(screen.getByRole("radiogroup", { name: "Size" })).toBeInTheDocument();
+    screen.getByRole("radio", { name: "Medium" }).focus();
+
+    await press("ArrowRight");
+    const large = screen.getByRole("radio", { name: "Large" });
+    expect(large).toHaveFocus();
+    expect(large).toBeChecked();
+
+    await press("ArrowRight");
+    expect(screen.getByRole("radio", { name: "Small" })).toBeChecked();
+
+    await press("ArrowLeft");
+    expect(screen.getByRole("radio", { name: "Large" })).toBeChecked();
+    expect(screen.getByRole("radio", { name: "Small" })).not.toBeChecked();
+  });
+
+  it("selects on click and disables every segment", async () => {
+    const { unmount } = render(<Picker />);
+    await userEvent.click(screen.getByRole("radio", { name: "Small" }));
+    expect(screen.getByRole("radio", { name: "Small" })).toBeChecked();
+    unmount();
+
+    render(<Picker disabled />);
+    for (const radio of screen.getAllByRole("radio")) expect(radio).toBeDisabled();
+  });
+});
diff --git a/src/components/ui/SegmentedControl.tsx b/src/components/ui/SegmentedControl.tsx
new file mode 100644
index 0000000..a3bf979
--- /dev/null
+++ b/src/components/ui/SegmentedControl.tsx
@@ -0,0 +1,60 @@
+import { RadioGroup } from "radix-ui";
+import type { ReactNode } from "react";
+import { cn } from "@/lib/cn";
+
+export interface Segment<T extends string> {
+  value: T;
+  label: ReactNode;
+  /** Accessible name and tooltip, for icon-only segments. */
+  title?: string;
+}
+
+/**
+ * Single-choice button strip. One tab stop; arrow keys move between and
+ * select segments.
+ */
+export function SegmentedControl<T extends string>({
+  value,
+  onChange,
+  segments,
+  label,
+  labelledBy,
+  disabled,
+  className,
+  itemClassName,
+}: {
+  value: T;
+  onChange: (value: T) => void;
+  segments: readonly Segment<T>[];
+  label?: string;
+  labelledBy?: string;
+  disabled?: boolean;
+  className?: string;
+  itemClassName?: string;
+}) {
+  return (
+    <RadioGroup.Root
+      value={value}
+      onValueChange={(v) => onChange(v as T)}
+      disabled={disabled}
+      aria-label={label}
+      aria-labelledby={labelledBy}
+      className={cn("flex gap-0.5 rounded-md bg-surface-2 p-0.5", className)}
+    >
+      {segments.map((s) => (
+        <RadioGroup.Item
+          key={s.value}
+          value={s.value}
+          aria-label={s.title}
+          title={s.title}
+          className={cn(
+            "rounded px-2.5 py-1 text-fg-muted data-[state=checked]:bg-surface data-[state=checked]:text-fg data-[state=checked]:shadow-sm",
+            itemClassName,
+          )}
+        >
+          {s.label}
+        </RadioGroup.Item>
+      ))}
+    </RadioGroup.Root>
+  );
+}
diff --git a/src/components/ui/button.ts b/src/components/ui/button.ts
new file mode 100644
index 0000000..5031308
--- /dev/null
+++ b/src/components/ui/button.ts
@@ -0,0 +1,3 @@
+/** Bordered toolbar/header button. */
+export const outlineButton =
+  "flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50";
diff --git a/src/dev/previewInspect.ts b/src/dev/previewInspect.ts
index 17e2e57..6b5ad09 100644
--- a/src/dev/previewInspect.ts
+++ b/src/dev/previewInspect.ts
@@ -34,6 +34,7 @@ const socket = (
     state,
   },
   pid,
+  startTime: null,
   processName,
 });
 
diff --git a/src/features/activity/ActivityPage.tsx b/src/features/activity/ActivityPage.tsx
index 70c6e93..06269da 100644
--- a/src/features/activity/ActivityPage.tsx
+++ b/src/features/activity/ActivityPage.tsx
@@ -4,7 +4,7 @@ import { EmptyState } from "@/components/EmptyState";
 import { PageHeader } from "@/components/PageHeader";
 import { SearchBox } from "@/components/SearchBox";
 import { Card } from "@/components/ui/Card";
-import { cn } from "@/lib/cn";
+import { SegmentedControl } from "@/components/ui/SegmentedControl";
 import { useActivityStore } from "@/stores/activityStore";
 import { useSettingsStore } from "@/stores/settingsStore";
 import { useUiStore } from "@/stores/uiStore";
@@ -48,27 +48,14 @@ export function ActivityPage() {
           label="Search activity"
           placeholder="Process, PID, detail…"
         />
-        <div
-          role="radiogroup"
-          aria-label="Event type"
-          className="flex rounded-md border border-border p-0.5"
-        >
-          {FILTERS.map((f) => (
-            <button
-              key={f}
-              type="button"
-              role="radio"
-              aria-checked={filter === f}
-              onClick={() => setFilter(f)}
-              className={cn(
-                "h-7 rounded px-2.5 text-fg-muted",
-                filter === f && "bg-surface-2 text-fg",
-              )}
-            >
-              {FILTER_LABEL[f]}
-            </button>
-          ))}
-        </div>
+        <SegmentedControl
+          label="Event type"
+          value={filter}
+          onChange={setFilter}
+          segments={FILTERS.map((f) => ({ value: f, label: FILTER_LABEL[f] }))}
+          className="gap-0 border border-border bg-transparent"
+          itemClassName="h-7 py-0 data-[state=checked]:bg-surface-2 data-[state=checked]:shadow-none"
+        />
         <span className="text-fg-muted">{shown.length} shown</span>
       </div>
 
diff --git a/src/features/benchmarks/DiskCard.tsx b/src/features/benchmarks/DiskCard.tsx
index 46a8d57..429a50c 100644
--- a/src/features/benchmarks/DiskCard.tsx
+++ b/src/features/benchmarks/DiskCard.tsx
@@ -1,5 +1,5 @@
 import { Check } from "lucide-react";
-import { useEffect, useState } from "react";
+import { useEffect, useRef, useState } from "react";
 import { Card, CardHeader } from "@/components/ui/Card";
 import { backend, toAppError } from "@/services/ipc";
 import { loadDiskTargets, runBenchmark } from "@/services/benchmarks";
@@ -51,8 +51,12 @@ export function DiskCard({
   // Reload when a drive is plugged in or removed (the monitor sees the mount
   // table change within a tick), so the target list is never stale.
   const mounts = useMetricsStore((s) => s.tick?.disks.map((d) => d.mountPoint).join("\n"));
+  const seenMounts = useRef(mounts);
   useEffect(() => {
-    void loadDiskTargets();
+    // The first tick arriving is not a change.
+    const changed = seenMounts.current !== undefined && seenMounts.current !== mounts;
+    seenMounts.current = mounts;
+    void loadDiskTargets({ reload: changed });
   }, [mounts]);
 
   const recommended = targets?.find((t) => t.recommended) ?? targets?.[0];
diff --git a/src/features/benchmarks/DiskInternetCards.test.tsx b/src/features/benchmarks/DiskInternetCards.test.tsx
index 089140b..14ad22c 100644
--- a/src/features/benchmarks/DiskInternetCards.test.tsx
+++ b/src/features/benchmarks/DiskInternetCards.test.tsx
@@ -1,8 +1,9 @@
-import { render, screen, waitFor, within } from "@testing-library/react";
+import { act, render, screen, waitFor, within } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import { runBenchmark } from "@/services/benchmarks";
+import { loadDiskTargets, runBenchmark } from "@/services/benchmarks";
 import { useBenchmarkStore } from "@/stores/benchmarkStore";
+import { useMetricsStore } from "@/stores/metricsStore";
 import type {
   BenchmarkResult,
   BenchmarkStatus,
@@ -10,8 +11,10 @@ import type {
   DiskPlan,
   DiskTargetInfo,
   InternetPlan,
+  MetricsTick,
 } from "@/types";
 import { BenchmarksPage } from "./BenchmarksPage";
+import { DiskCard } from "./DiskCard";
 
 const api = vi.hoisted(() => ({ diskPlan: vi.fn(), internetPlan: vi.fn() }));
 
@@ -225,6 +228,8 @@ const NET: BenchmarkResult = {
 
 beforeEach(() => {
   vi.mocked(runBenchmark).mockClear();
+  vi.mocked(loadDiskTargets).mockClear();
+  useMetricsStore.setState({ tick: null });
   api.diskPlan.mockReset().mockResolvedValue(PLAN);
   api.internetPlan.mockReset().mockResolvedValue(NET_PLAN);
   useBenchmarkStore.setState({
@@ -298,6 +303,20 @@ describe("Disk card", () => {
     expect(panel.getByText(/O_DIRECT is not supported here/)).toBeInTheDocument();
   });
 
+  it("reloads the locations when the mount table changes, not when the first tick arrives", () => {
+    const tickWith = (...mounts: string[]) =>
+      useMetricsStore.setState({
+        tick: { disks: mounts.map((mountPoint) => ({ mountPoint })) } as unknown as MetricsTick,
+      });
+    render(<DiskCard result={null} history={[]} />);
+    expect(loadDiskTargets).toHaveBeenLastCalledWith({ reload: false });
+    act(() => tickWith("/"));
+    expect(loadDiskTargets).toHaveBeenLastCalledWith({ reload: false });
+    act(() => tickWith("/", "/run/media/me/USB"));
+    expect(loadDiskTargets).toHaveBeenLastCalledWith({ reload: true });
+    expect(loadDiskTargets).toHaveBeenCalledTimes(3);
+  });
+
   it("explains when no location is available", () => {
     useBenchmarkStore.setState({ diskTargets: [] });
     render(<BenchmarksPage />);
@@ -379,6 +398,16 @@ describe("Internet card", () => {
     expect(panel.queryByText(/not scored/i)).not.toBeInTheDocument();
   });
 
+  it("says why it cannot run when the plan cannot be made", async () => {
+    api.internetPlan.mockRejectedValue({
+      kind: "systemQueryFailed",
+      message: "No network connection.",
+    });
+    render(<BenchmarksPage />);
+    expect(await screen.findByText("No network connection.")).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: /run internet test/i })).toBeDisabled();
+  });
+
   it("shows a failed run's reason", () => {
     useBenchmarkStore.setState({
       status: {
diff --git a/src/features/benchmarks/InternetCard.tsx b/src/features/benchmarks/InternetCard.tsx
index 2cb7feb..c126bd1 100644
--- a/src/features/benchmarks/InternetCard.tsx
+++ b/src/features/benchmarks/InternetCard.tsx
@@ -1,6 +1,6 @@
 import { useEffect, useState } from "react";
 import { Card, CardHeader } from "@/components/ui/Card";
-import { backend } from "@/services/ipc";
+import { backend, toAppError } from "@/services/ipc";
 import { runBenchmark } from "@/services/benchmarks";
 import { isActive, useBenchmarkStore } from "@/stores/benchmarkStore";
 import type {
@@ -49,6 +49,7 @@ export function InternetCard({
   const status = useBenchmarkStore((s) => s.status);
   const [profile, setProfile] = useState<BenchmarkProfile>("standard");
   const [plan, setPlan] = useState<InternetPlan | null>(null);
+  const [planError, setPlanError] = useState<string | null>(null);
   const active = isActive(status);
   const mine = active && status.kind === "internet";
 
@@ -56,8 +57,16 @@ export function InternetCard({
     let stale = false;
     backend
       .internetPlan(profile)
-      .then((p) => !stale && setPlan(p))
-      .catch(() => !stale && setPlan(null));
+      .then((p) => {
+        if (stale) return;
+        setPlan(p);
+        setPlanError(null);
+      })
+      .catch((e) => {
+        if (stale) return;
+        setPlan(null);
+        setPlanError(toAppError(e).message);
+      });
     return () => {
       stale = true;
     };
@@ -83,6 +92,11 @@ export function InternetCard({
             it sparingly. You are asked to confirm before it starts.
           </p>
         )}
+        {planError && (
+          <p role="alert" className="text-warn">
+            {planError}
+          </p>
+        )}
         <RunRow
           active={active || !plan}
           mine={mine}
diff --git a/src/features/benchmarks/parts.tsx b/src/features/benchmarks/parts.tsx
index 8ed23b2..9acda6a 100644
--- a/src/features/benchmarks/parts.tsx
+++ b/src/features/benchmarks/parts.tsx
@@ -1,5 +1,6 @@
 import { Play, Square } from "lucide-react";
 import { Meter } from "@/components/ui/Meter";
+import { SegmentedControl } from "@/components/ui/SegmentedControl";
 import { cn } from "@/lib/cn";
 import { cancelBenchmark } from "@/services/benchmarks";
 import { isActive, useBenchmarkStore } from "@/stores/benchmarkStore";
@@ -25,28 +26,15 @@ export function ProfilePicker({
   disabled: boolean;
 }) {
   return (
-    <div
-      role="radiogroup"
-      aria-label="Benchmark profile"
-      className="inline-flex gap-1 rounded-lg bg-surface-2 p-1"
-    >
-      {profiles.map((p) => (
-        <button
-          key={p.id}
-          type="button"
-          role="radio"
-          aria-checked={value === p.id}
-          disabled={disabled}
-          onClick={() => onChange(p.id)}
-          className={cn(
-            "rounded-md px-3 py-1.5 text-fg-muted disabled:opacity-60",
-            value === p.id && "bg-surface text-fg shadow-sm",
-          )}
-        >
-          {p.label}
-        </button>
-      ))}
-    </div>
+    <SegmentedControl
+      label="Benchmark profile"
+      value={value}
+      onChange={onChange}
+      disabled={disabled}
+      segments={profiles.map((p) => ({ value: p.id, label: p.label }))}
+      className="inline-flex gap-1 rounded-lg p-1"
+      itemClassName="rounded-md px-3 py-1.5 disabled:opacity-60"
+    />
   );
 }
 
diff --git a/src/features/file-finder/FileFinderPage.tsx b/src/features/file-finder/FileFinderPage.tsx
index 5e64d45..76a6bd9 100644
--- a/src/features/file-finder/FileFinderPage.tsx
+++ b/src/features/file-finder/FileFinderPage.tsx
@@ -2,15 +2,13 @@ import { useMemo, useState, type FormEvent } from "react";
 import { File, Folder, Search } from "lucide-react";
 import { EmptyState } from "@/components/EmptyState";
 import { PageHeader } from "@/components/PageHeader";
+import { outlineButton } from "@/components/ui/button";
 import { Card, CardHeader } from "@/components/ui/Card";
 import { backend, isBackendAvailable, toAppError } from "@/services/ipc";
 import { useUiStore } from "@/stores/uiStore";
 import type { AppError, FileUserList } from "@/types";
 import { USAGE_LABEL, groupByProcess, summarize } from "./logic";
 
-const btn =
-  "flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50";
-
 export function FileFinderPage() {
   const openProcess = useUiStore((s) => s.openProcess);
   const [path, setPath] = useState("");
@@ -67,12 +65,16 @@ export function FileFinderPage() {
           spellCheck={false}
           className="h-8 min-w-72 flex-1 rounded-md border border-border bg-surface px-2.5 font-mono text-[0.8125rem] outline-none placeholder:font-sans placeholder:text-fg-subtle focus:border-accent"
         />
-        <button type="submit" className={btn} disabled={!available || busy || !path.trim()}>
+        <button
+          type="submit"
+          className={outlineButton}
+          disabled={!available || busy || !path.trim()}
+        >
           <Search size="0.875rem" aria-hidden /> Find
         </button>
         <button
           type="button"
-          className={btn}
+          className={outlineButton}
           disabled={!available || busy}
           onClick={() => void choose(false)}
         >
@@ -80,7 +82,7 @@ export function FileFinderPage() {
         </button>
         <button
           type="button"
-          className={btn}
+          className={outlineButton}
           disabled={!available || busy}
           onClick={() => void choose(true)}
         >
@@ -138,7 +140,11 @@ export function FileFinderPage() {
                   </>
                 }
                 action={
-                  <button type="button" className={btn} onClick={() => openProcess(g.pid)}>
+                  <button
+                    type="button"
+                    className={outlineButton}
+                    onClick={() => openProcess(g.pid)}
+                  >
                     Open process details
                   </button>
                 }
diff --git a/src/features/performance/PerformancePage.tsx b/src/features/performance/PerformancePage.tsx
index 6f9e8b3..87b038b 100644
--- a/src/features/performance/PerformancePage.tsx
+++ b/src/features/performance/PerformancePage.tsx
@@ -14,6 +14,7 @@ import {
 } from "@/components/charts/series";
 import { Card } from "@/components/ui/Card";
 import { KeyValueList, Unavailable } from "@/components/ui/KeyValueList";
+import { SegmentedControl } from "@/components/ui/SegmentedControl";
 import { cn } from "@/lib/cn";
 import { useMetricsStore } from "@/stores/metricsStore";
 import type { MetricsTick, StaticSystemInfo } from "@/types";
@@ -171,27 +172,12 @@ export function PerformancePage() {
 
 function RangePicker({ value, onChange }: { value: number; onChange: (s: number) => void }) {
   return (
-    <div
-      role="radiogroup"
-      aria-label="Time range"
-      className="flex gap-0.5 rounded-md bg-surface-2 p-0.5"
-    >
-      {RANGES.map((r) => (
-        <button
-          key={r.seconds}
-          type="button"
-          role="radio"
-          aria-checked={value === r.seconds}
-          onClick={() => onChange(r.seconds)}
-          className={cn(
-            "rounded px-2.5 py-1 text-fg-muted",
-            value === r.seconds && "bg-surface text-fg shadow-sm",
-          )}
-        >
-          {r.label}
-        </button>
-      ))}
-    </div>
+    <SegmentedControl
+      label="Time range"
+      value={String(value)}
+      onChange={(v) => onChange(Number(v))}
+      segments={RANGES.map((r) => ({ value: String(r.seconds), label: r.label }))}
+    />
   );
 }
 
diff --git a/src/features/ports/PortsPage.tsx b/src/features/ports/PortsPage.tsx
index bfbd26c..b8040d0 100644
--- a/src/features/ports/PortsPage.tsx
+++ b/src/features/ports/PortsPage.tsx
@@ -1,10 +1,12 @@
 import { usePersistedState } from "@/hooks/usePersistedState";
-import { useMemo, useState } from "react";
+import { memo, useMemo, useState } from "react";
 import { Copy, FileSearch, RefreshCw, Square } from "lucide-react";
 import { EmptyState } from "@/components/EmptyState";
 import { PageHeader } from "@/components/PageHeader";
 import { SearchBox } from "@/components/SearchBox";
+import { outlineButton } from "@/components/ui/button";
 import { Card } from "@/components/ui/Card";
+import { type Segment, SegmentedControl } from "@/components/ui/SegmentedControl";
 import { cn } from "@/lib/cn";
 import { copyText, requestAction } from "@/features/processes/actions";
 import { useRemoteData } from "@/hooks/useRemoteData";
@@ -26,8 +28,10 @@ import {
 /** Resolving owners scans every process's descriptors, so poll gently. */
 const POLL_MS = 3_000;
 
-const btn =
-  "flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50";
+const VIEWS: readonly Segment<PortView>[] = [
+  { value: "listening", label: "Listening" },
+  { value: "all", label: "All connections" },
+];
 
 export function PortsPage() {
   const [query, setQuery] = useState("");
@@ -51,7 +55,7 @@ export function PortsPage() {
         title="Ports"
         description="Which program is listening on, or connected through, each port"
         actions={
-          <button type="button" className={btn} onClick={refresh}>
+          <button type="button" className={outlineButton} onClick={refresh}>
             <RefreshCw size="0.875rem" aria-hidden /> Refresh
           </button>
         }
@@ -63,27 +67,14 @@ export function PortsPage() {
           label="Search ports"
           placeholder="Port, process, PID, address…"
         />
-        <div
-          role="radiogroup"
-          aria-label="Which sockets"
-          className="flex rounded-md border border-border p-0.5"
-        >
-          {(["listening", "all"] as const).map((v) => (
-            <button
-              key={v}
-              type="button"
-              role="radio"
-              aria-checked={view === v}
-              onClick={() => setView(v)}
-              className={cn(
-                "h-7 rounded px-2.5 text-fg-muted",
-                view === v && "bg-surface-2 text-fg",
-              )}
-            >
-              {v === "listening" ? "Listening" : "All connections"}
-            </button>
-          ))}
-        </div>
+        <SegmentedControl
+          label="Which sockets"
+          value={view}
+          onChange={setView}
+          segments={VIEWS}
+          className="gap-0 border border-border bg-transparent"
+          itemClassName="h-7 py-0 data-[state=checked]:bg-surface-2 data-[state=checked]:shadow-none"
+        />
         <span className="text-fg-muted">{shown.length} shown</span>
       </div>
 
@@ -142,7 +133,12 @@ export function PortsPage() {
   );
 }
 
-function PortRowView({ row }: { row: PortRow }) {
+/** Every poll delivers new row objects; compare their values instead. */
+function sameRow(prev: { row: PortRow }, next: { row: PortRow }): boolean {
+  return (Object.keys(next.row) as (keyof PortRow)[]).every((k) => prev.row[k] === next.row[k]);
+}
+
+const PortRowView = memo(function PortRowView({ row }: { row: PortRow }) {
   const openProcess = useUiStore((s) => s.openProcess);
   return (
     <tr className="border-t border-border/60">
@@ -156,7 +152,7 @@ function PortRowView({ row }: { row: PortRow }) {
           <button
             type="button"
             className="text-accent hover:underline"
-            onClick={() => openProcess(row.pid as number)}
+            onClick={() => openProcess(row.pid as number, row.startTime ?? undefined)}
           >
             {row.processName ?? "Unknown"}
           </button>
@@ -185,7 +181,7 @@ function PortRowView({ row }: { row: PortRow }) {
       </td>
     </tr>
   );
-}
+}, sameRow);
 
 /**
  * Shown when the search is exactly a port number. Describes who holds the
@@ -217,7 +213,12 @@ function ConflictBanner({
     >
       <p className="font-medium text-warn">Port {port} is already in use.</p>
       {owners.map((o) => {
-        const row = o.pid != null ? processes?.find((p) => p.pid === o.pid) : undefined;
+        // The socket list can be seconds old; only the same PID *and* start
+        // time is the process that holds the port.
+        const row =
+          o.pid != null && o.startTime != null
+            ? processes?.find((p) => p.pid === o.pid && p.startTime === o.startTime)
+            : undefined;
         return (
           <div key={o.pid ?? "unknown"} className="space-y-1.5">
             <p>
@@ -235,19 +236,23 @@ function ConflictBanner({
             )}
             {o.pid != null && (
               <div className="flex flex-wrap gap-2">
-                <button type="button" className={btn} onClick={() => openProcess(o.pid as number)}>
+                <button
+                  type="button"
+                  className={outlineButton}
+                  onClick={() => openProcess(o.pid as number, o.startTime ?? undefined)}
+                >
                   <FileSearch size="0.875rem" aria-hidden /> Open process details
                 </button>
                 <button
                   type="button"
-                  className={btn}
+                  className={outlineButton}
                   onClick={() => void copyText("PID", String(o.pid))}
                 >
                   <Copy size="0.875rem" aria-hidden /> Copy PID
                 </button>
                 <button
                   type="button"
-                  className={cn(btn, "text-crit hover:text-crit")}
+                  className={cn(outlineButton, "text-crit hover:text-crit")}
                   disabled={!row}
                   title={row ? undefined : "This process is no longer listed"}
                   onClick={() => row && void requestAction(row, { type: "terminate" })}
diff --git a/src/features/ports/logic.test.ts b/src/features/ports/logic.test.ts
index 915ca99..1568db6 100644
--- a/src/features/ports/logic.test.ts
+++ b/src/features/ports/logic.test.ts
@@ -20,6 +20,7 @@ function socket(
       state,
     },
     pid,
+    startTime: pid == null ? null : 1_700_000_000,
     processName,
   };
 }
diff --git a/src/features/ports/logic.ts b/src/features/ports/logic.ts
index d16da0f..46546e2 100644
--- a/src/features/ports/logic.ts
+++ b/src/features/ports/logic.ts
@@ -10,6 +10,8 @@ export interface PortRow {
   remote: string | null;
   state: TcpState | null;
   pid: number | null;
+  /** Owner's start time; with `pid` it identifies the exact process. */
+  startTime: number | null;
   processName: string | null;
   /** Accepting connections (TCP LISTEN) or bound and waiting (UDP). */
   listening: boolean;
@@ -54,6 +56,7 @@ export function toRows(sockets: readonly SocketEntry[]): PortRow[] {
       remote: c.remoteAddress != null ? endpoint(c.remoteAddress, c.remotePort) : null,
       state: c.state,
       pid: s.pid,
+      startTime: s.startTime,
       processName: s.processName,
       listening: tcp ? c.state === "listen" : true,
     };
@@ -93,6 +96,7 @@ export function filterRows(rows: readonly PortRow[], view: PortView, query: stri
 
 export interface PortOwner {
   pid: number | null;
+  startTime: number | null;
   name: string | null;
   /** Distinct "protocol address" listeners of this process on the port. */
   listeners: string[];
@@ -108,7 +112,12 @@ export function portOwners(rows: readonly PortRow[], port: number): PortOwner[]
   for (const r of rows) {
     if (r.port !== port || !r.listening) continue;
     const key = r.pid == null ? "unknown" : String(r.pid);
-    const owner = owners.get(key) ?? { pid: r.pid, name: r.processName, listeners: [] };
+    const owner = owners.get(key) ?? {
+      pid: r.pid,
+      startTime: r.startTime,
+      name: r.processName,
+      listeners: [],
+    };
     owner.listeners.push(`${PROTOCOL_LABEL[r.protocol]} ${endpoint(r.address, null)}`);
     owners.set(key, owner);
   }
diff --git a/src/features/process-details/ActionButtons.tsx b/src/features/process-details/ActionButtons.tsx
new file mode 100644
index 0000000..f8eae81
--- /dev/null
+++ b/src/features/process-details/ActionButtons.tsx
@@ -0,0 +1,42 @@
+import { FolderOpen, OctagonX, Pause, Play, Square } from "lucide-react";
+import { outlineButton } from "@/components/ui/button";
+import { requestAction, revealExecutable } from "@/features/processes/actions";
+import type { ProcessRow } from "@/types";
+
+export function ActionButtons({ row }: { row: ProcessRow }) {
+  const suspended = row.status === "stopped";
+  return (
+    <>
+      <button
+        type="button"
+        className={outlineButton}
+        disabled={!row.exe}
+        onClick={() => void revealExecutable(row)}
+      >
+        <FolderOpen size="0.875rem" aria-hidden /> Open location
+      </button>
+      <button
+        type="button"
+        className={outlineButton}
+        onClick={() => void requestAction(row, { type: suspended ? "resume" : "suspend" })}
+      >
+        {suspended ? <Play size="0.875rem" aria-hidden /> : <Pause size="0.875rem" aria-hidden />}
+        {suspended ? "Resume" : "Suspend"}
+      </button>
+      <button
+        type="button"
+        className={outlineButton}
+        onClick={() => void requestAction(row, { type: "terminate" })}
+      >
+        <Square size="0.8125rem" aria-hidden /> End process
+      </button>
+      <button
+        type="button"
+        className={`${outlineButton} text-crit hover:text-crit`}
+        onClick={() => void requestAction(row, { type: "forceKill" })}
+      >
+        <OctagonX size="0.875rem" aria-hidden /> Force end
+      </button>
+    </>
+  );
+}
diff --git a/src/features/process-details/ConnectionsCard.tsx b/src/features/process-details/ConnectionsCard.tsx
new file mode 100644
index 0000000..2aef3ff
--- /dev/null
+++ b/src/features/process-details/ConnectionsCard.tsx
@@ -0,0 +1,55 @@
+import { Card, CardHeader } from "@/components/ui/Card";
+import { STATE_LABEL, endpoint } from "@/features/ports/logic";
+import type { Connection } from "@/types";
+import { NOT_AVAILABLE } from "@/utils/format";
+
+export function ConnectionsCard({
+  connections,
+  loading,
+}: {
+  connections: Connection[] | null | undefined;
+  loading: boolean;
+}) {
+  return (
+    <Card>
+      <CardHeader
+        title={connections ? `Network connections (${connections.length})` : "Network connections"}
+      />
+      <div className="max-h-72 overflow-auto px-4 pb-4 pt-2">
+        {connections === undefined ? (
+          <p className="text-fg-muted">{loading ? "Loading…" : NOT_AVAILABLE}</p>
+        ) : connections === null ? (
+          <p className="text-fg-muted">
+            Unavailable on this platform or for this process. Listing another account's sockets may
+            require administrator/root rights.
+          </p>
+        ) : connections.length === 0 ? (
+          <p className="text-fg-muted">No open TCP or UDP sockets.</p>
+        ) : (
+          <table className="w-full text-left text-[0.8125rem]">
+            <thead className="text-fg-muted">
+              <tr>
+                <th className="py-1 pr-3 font-medium">Protocol</th>
+                <th className="py-1 pr-3 font-medium">Local</th>
+                <th className="py-1 pr-3 font-medium">Remote</th>
+                <th className="py-1 font-medium">State</th>
+              </tr>
+            </thead>
+            <tbody className="num selectable font-mono">
+              {connections.map((c, i) => (
+                <tr key={i} className="border-t border-border/60">
+                  <td className="py-1 pr-3 uppercase">{c.protocol}</td>
+                  <td className="py-1 pr-3">{endpoint(c.localAddress, c.localPort)}</td>
+                  <td className="py-1 pr-3">
+                    {c.remoteAddress != null ? endpoint(c.remoteAddress, c.remotePort) : "—"}
+                  </td>
+                  <td className="py-1 font-sans">{c.state ? STATE_LABEL[c.state] : "—"}</td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        )}
+      </div>
+    </Card>
+  );
+}
diff --git a/src/features/process-details/MetricCard.tsx b/src/features/process-details/MetricCard.tsx
new file mode 100644
index 0000000..c005d3d
--- /dev/null
+++ b/src/features/process-details/MetricCard.tsx
@@ -0,0 +1,60 @@
+import { useMemo } from "react";
+import type uPlot from "uplot";
+import { LineChart, type LineSeries } from "@/components/charts/LineChart";
+import { Card, CardHeader } from "@/components/ui/Card";
+import type { ProcessPoint } from "@/types";
+
+const HISTORY_SECONDS = 300;
+
+export function MetricCard({
+  title,
+  series,
+  history,
+  pick,
+  yMax,
+  minYMax,
+  format,
+  label,
+  footer,
+  nowMs,
+}: {
+  title: string;
+  series: readonly LineSeries[];
+  history: ProcessPoint[];
+  pick: (p: ProcessPoint) => number[];
+  yMax?: number;
+  minYMax?: number;
+  format: (v: number) => string;
+  label: string;
+  footer?: string;
+  /** Latest tick time; anchors the x axis before history exists. */
+  nowMs: number;
+}) {
+  const { data, xRange } = useMemo(() => {
+    const xs = history.map((p) => p.t / 1000);
+    const columns = series.map((_, i) => history.map((p) => pick(p)[i] ?? 0));
+    const end = history.length > 0 ? (xs[xs.length - 1] as number) : nowMs / 1000;
+    return {
+      data: [xs, ...columns] as uPlot.AlignedData,
+      xRange: [end - HISTORY_SECONDS, end] as const,
+    };
+  }, [history, series, pick, nowMs]);
+  return (
+    <Card>
+      <CardHeader title={title} />
+      <div className="px-2 pb-3 pt-2">
+        <LineChart
+          series={series}
+          data={data}
+          xRange={xRange}
+          height={150}
+          yMax={yMax}
+          minYMax={minYMax}
+          formatValue={format}
+          ariaLabel={label}
+        />
+        {footer && <p className="num px-2 pt-2 text-fg-muted">{footer}</p>}
+      </div>
+    </Card>
+  );
+}
diff --git a/src/features/process-details/ProcessDetailsPage.tsx b/src/features/process-details/ProcessDetailsPage.tsx
index 8581e8b..9d46b6c 100644
--- a/src/features/process-details/ProcessDetailsPage.tsx
+++ b/src/features/process-details/ProcessDetailsPage.tsx
@@ -1,19 +1,19 @@
-import { ArrowLeft, FolderOpen, OctagonX, Pause, Play, RefreshCw, Square } from "lucide-react";
-import { requestAction, revealExecutable } from "@/features/processes/actions";
+import { ArrowLeft, RefreshCw } from "lucide-react";
+import { Tabs } from "radix-ui";
 import { useMemo, useState } from "react";
-import type uPlot from "uplot";
 import { EmptyState } from "@/components/EmptyState";
 import { PageHeader } from "@/components/PageHeader";
-import { LineChart, type LineSeries } from "@/components/charts/LineChart";
+import type { LineSeries } from "@/components/charts/LineChart";
 import { percentAxis, rateAxis, RATE_MIN_Y } from "@/components/charts/series";
+import { outlineButton } from "@/components/ui/button";
 import { Card, CardHeader } from "@/components/ui/Card";
 import { KeyValueList, Unavailable } from "@/components/ui/KeyValueList";
-import { childrenOf } from "@/features/processes/tree";
+import { childrenOf, isPlausibleParent } from "@/features/processes/tree";
 import { STATUS_LABEL } from "@/features/processes/cells";
 import { useActivityStore } from "@/stores/activityStore";
 import { useMetricsStore } from "@/stores/metricsStore";
 import { useUiStore } from "@/stores/uiStore";
-import type { Connection, ProcessPoint, ProcessRow } from "@/types";
+import type { ProcessRow } from "@/types";
 import {
   NOT_AVAILABLE,
   formatBytes,
@@ -22,8 +22,10 @@ import {
   formatPercent,
   formatTimestamp,
 } from "@/utils/format";
-import { cn } from "@/lib/cn";
+import { ActionButtons } from "./ActionButtons";
+import { ConnectionsCard } from "./ConnectionsCard";
 import { DiagnoseTab } from "./DiagnoseTab";
+import { MetricCard } from "./MetricCard";
 import { MemoryMapTab } from "./inspect/MemoryMapTab";
 import { ModulesTab } from "./inspect/ModulesTab";
 import { OpenFilesTab } from "./inspect/OpenFilesTab";
@@ -43,7 +45,6 @@ const TABS: readonly { id: Tab; label: string }[] = [
   { id: "diagnose", label: "Diagnose" },
 ];
 
-const HISTORY_SECONDS = 300;
 const CPU_SERIES: readonly LineSeries[] = [{ label: "CPU", colorVar: "--res-cpu" }];
 const MEM_SERIES: readonly LineSeries[] = [{ label: "Memory", colorVar: "--res-mem" }];
 const IO_SERIES: readonly LineSeries[] = [
@@ -93,6 +94,13 @@ function ProcessDetailsView({ pid, startTime }: { pid: number; startTime: number
   const row: ProcessRow | null = live ?? details?.row ?? null;
   const exited = live == null && details != null;
   const children = useMemo(() => (rows && live ? childrenOf(rows, pid) : []), [rows, live, pid]);
+  // The parent PID may since have been reused by an unrelated process.
+  const parent = useMemo(() => {
+    const self = live ?? details?.row;
+    const candidate =
+      self?.parentPid == null ? undefined : rows?.find((p) => p.pid === self.parentPid);
+    return candidate && self && isPlausibleParent(candidate, self) ? candidate : undefined;
+  }, [rows, live, details]);
   const allEvents = useActivityStore((s) => s.events);
   // Growth hints recorded for this process (not for a later one with the same PID).
   const hints = useMemo(
@@ -131,19 +139,10 @@ function ProcessDetailsView({ pid, startTime }: { pid: number; startTime: number
         description={`PID ${row.pid}${row.user ? ` · ${row.user}` : ""}`}
         actions={
           <>
-            <button
-              type="button"
-              onClick={() => navigate("processes")}
-              className="flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg"
-            >
+            <button type="button" onClick={() => navigate("processes")} className={outlineButton}>
               <ArrowLeft size="0.875rem" aria-hidden /> Processes
             </button>
-            <button
-              type="button"
-              onClick={refresh}
-              disabled={loading}
-              className="flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50"
-            >
+            <button type="button" onClick={refresh} disabled={loading} className={outlineButton}>
               <RefreshCw size="0.875rem" aria-hidden /> Refresh details
             </button>
             {live && <ActionButtons row={live} />}
@@ -174,189 +173,194 @@ function ProcessDetailsView({ pid, startTime }: { pid: number; startTime: number
         </div>
       )}
 
-      <div
-        role="tablist"
-        aria-label="Process information"
-        className="mb-4 flex flex-wrap gap-1 border-b border-border"
-      >
-        {TABS.map((t) => (
-          <button
-            key={t.id}
-            type="button"
-            role="tab"
-            id={`tab-${t.id}`}
-            aria-selected={tab === t.id}
-            aria-controls="process-tabpanel"
-            onClick={() => setTab(t.id)}
-            className={cn(
-              "-mb-px border-b-2 px-3 py-2 text-fg-muted hover:text-fg",
-              tab === t.id ? "border-accent text-fg" : "border-transparent",
-            )}
-          >
-            {t.label}
-          </button>
-        ))}
-      </div>
-      <div role="tabpanel" id="process-tabpanel" aria-labelledby={`tab-${tab}`}>
-        {tab === "network" && (
+      <Tabs.Root value={tab} onValueChange={(v) => setTab(v as Tab)} activationMode="manual">
+        <Tabs.List
+          aria-label="Process information"
+          className="mb-4 flex flex-wrap gap-1 border-b border-border"
+        >
+          {TABS.map((t) => (
+            <Tabs.Trigger
+              key={t.id}
+              value={t.id}
+              className="-mb-px border-b-2 border-transparent px-3 py-2 text-fg-muted hover:text-fg data-[state=active]:border-accent data-[state=active]:text-fg"
+            >
+              {t.label}
+            </Tabs.Trigger>
+          ))}
+        </Tabs.List>
+        <Tabs.Content value="network">
           <ConnectionsCard connections={details?.connections} loading={loading} />
-        )}
+        </Tabs.Content>
         {/* Inspection tabs mount only when opened, so nothing is read until then. */}
-        {tab === "files" && !exited && (
-          <Card>
-            <OpenFilesTab pid={pid} startTime={row.startTime} />
-          </Card>
-        )}
-        {tab === "modules" && !exited && (
-          <Card>
-            <ModulesTab pid={pid} startTime={row.startTime} windows={platform === "windows"} />
-          </Card>
-        )}
-        {tab === "maps" && !exited && (
-          <Card>
-            <MemoryMapTab pid={pid} startTime={row.startTime} />
-          </Card>
-        )}
-        {tab === "diagnose" && !exited && (
-          <Card>
-            <DiagnoseTab
-              row={row}
-              history={history}
-              connections={details?.connections}
-              childCount={children.length}
-              events={hints}
-            />
-          </Card>
-        )}
-        {tab === "threads" && !exited && (
-          <Card>
-            <ThreadsTab pid={pid} startTime={row.startTime} linux={platform === "linux"} />
-          </Card>
-        )}
-      </div>
-
-      {tab === "overview" && hints.length > 0 && (
-        <div role="note" className="mb-4 rounded-md border border-warn/40 bg-warn-soft px-4 py-2">
-          {hints.map((h) => (
-            <p key={h.seq}>{h.detail}</p>
-          ))}
-        </div>
-      )}
-      {tab === "overview" && (
-        <div className="grid gap-4 xl:grid-cols-2">
-          <Card className="xl:col-span-2">
-            <CardHeader title="General" />
-            <div className="grid gap-x-10 px-4 pb-4 pt-3 md:grid-cols-2">
-              <KeyValueList
-                items={[
-                  { label: "Name", value: row.name },
-                  { label: "PID", value: row.pid },
-                  {
-                    label: "Parent",
-                    value:
-                      row.parentPid == null ? (
-                        NOT_AVAILABLE
-                      ) : (
-                        <button
-                          type="button"
-                          className="text-accent hover:underline"
-                          onClick={() => row.parentPid != null && openProcess(row.parentPid)}
-                        >
-                          {details?.parentName ?? "PID"} ({row.parentPid})
-                        </button>
-                      ),
-                  },
-                  {
-                    label: "User",
-                    value: row.user ?? <Unavailable />,
-                    hint: "Owner information for other accounts' processes may require administrator/root rights.",
-                  },
-                  { label: "Status", value: STATUS_LABEL[row.status] },
-                  { label: "Architecture", value: details?.architecture ?? NOT_AVAILABLE },
-                ]}
-              />
-              <KeyValueList
-                items={[
-                  {
-                    label: "Started",
-                    value:
-                      row.startTime > 0 ? formatTimestamp(row.startTime * 1000) : NOT_AVAILABLE,
-                  },
-                  { label: "Runtime", value: formatDuration(runtime) },
-                  { label: "Threads", value: row.threads ?? <Unavailable /> },
-                  { label: "Priority", value: row.priority ?? <Unavailable /> },
-                  { label: "Session", value: row.sessionId ?? NOT_AVAILABLE },
-                  { label: "Children", value: live ? children.length : NOT_AVAILABLE },
-                ]}
+        <Tabs.Content value="files">
+          {!exited && (
+            <Card>
+              <OpenFilesTab pid={pid} startTime={row.startTime} />
+            </Card>
+          )}
+        </Tabs.Content>
+        <Tabs.Content value="modules">
+          {!exited && (
+            <Card>
+              <ModulesTab pid={pid} startTime={row.startTime} windows={platform === "windows"} />
+            </Card>
+          )}
+        </Tabs.Content>
+        <Tabs.Content value="maps">
+          {!exited && (
+            <Card>
+              <MemoryMapTab pid={pid} startTime={row.startTime} />
+            </Card>
+          )}
+        </Tabs.Content>
+        <Tabs.Content value="diagnose">
+          {!exited && (
+            <Card>
+              <DiagnoseTab
+                row={row}
+                history={history}
+                connections={details?.connections}
+                childCount={children.length}
+                events={hints}
               />
+            </Card>
+          )}
+        </Tabs.Content>
+        <Tabs.Content value="threads">
+          {!exited && (
+            <Card>
+              <ThreadsTab pid={pid} startTime={row.startTime} linux={platform === "linux"} />
+            </Card>
+          )}
+        </Tabs.Content>
+        <Tabs.Content value="overview">
+          {hints.length > 0 && (
+            <div
+              role="note"
+              className="mb-4 rounded-md border border-warn/40 bg-warn-soft px-4 py-2"
+            >
+              {hints.map((h) => (
+                <p key={h.seq}>{h.detail}</p>
+              ))}
             </div>
-            <div className="space-y-2 border-t border-border px-4 py-3">
-              <PathField label="Executable" value={row.exe} />
-              <PathField label="Command line" value={row.cmd} />
-              <PathField label="Working directory" value={details?.cwd ?? null} />
-            </div>
-          </Card>
-
-          <MetricCard
-            nowMs={nowMs}
-            title={`CPU · ${row.restricted ? NOT_AVAILABLE : formatPercent(row.cpuPercent)}`}
-            series={CPU_SERIES}
-            history={history}
-            pick={(p) => [p.cpu]}
-            yMax={100}
-            format={percentAxis}
-            label="CPU usage of this process"
-          />
-          <MetricCard
-            nowMs={nowMs}
-            title={`Memory · ${formatBytes(memoryOf(row))}${memPct != null ? ` (${formatPercent(memPct)})` : ""}`}
-            series={MEM_SERIES}
-            history={history}
-            pick={(p) => [p.memory]}
-            format={bytesAxis}
-            label="Memory usage of this process"
-            footer={`Virtual memory ${formatBytes(row.virtualMemoryBytes)}`}
-          />
-          <MetricCard
-            nowMs={nowMs}
-            title={
-              row.restricted
-                ? `Disk · ${NOT_AVAILABLE}`
-                : `Disk · ↓ ${formatBytesPerSecond(row.diskReadPerSec)} ↑ ${formatBytesPerSecond(row.diskWritePerSec)}`
-            }
-            series={IO_SERIES}
-            history={history}
-            pick={(p) => [p.read, p.write]}
-            format={rateAxis}
-            minYMax={RATE_MIN_Y}
-            label="Disk I/O of this process"
-            footer={
-              details?.totalReadBytes != null || details?.totalWrittenBytes != null
-                ? `Total read ${formatBytes(details?.totalReadBytes)} · written ${formatBytes(details?.totalWrittenBytes)}`
-                : "Lifetime totals unavailable for this process"
-            }
-          />
-
-          {children.length > 0 && (
+          )}
+          <div className="grid gap-4 xl:grid-cols-2">
             <Card className="xl:col-span-2">
-              <CardHeader title={`Child processes (${children.length})`} />
-              <ul className="flex flex-wrap gap-2 px-4 pb-4 pt-3">
-                {children.map((c) => (
-                  <li key={c.pid}>
-                    <button
-                      type="button"
-                      onClick={() => openProcess(c.pid)}
-                      className="rounded-md border border-border px-2 py-1 hover:bg-surface-2"
-                    >
-                      {c.name} <span className="num text-fg-subtle">{c.pid}</span>
-                    </button>
-                  </li>
-                ))}
-              </ul>
+              <CardHeader title="General" />
+              <div className="grid gap-x-10 px-4 pb-4 pt-3 md:grid-cols-2">
+                <KeyValueList
+                  items={[
+                    { label: "Name", value: row.name },
+                    { label: "PID", value: row.pid },
+                    {
+                      label: "Parent",
+                      value:
+                        row.parentPid == null ? (
+                          NOT_AVAILABLE
+                        ) : parent ? (
+                          <button
+                            type="button"
+                            className="text-accent hover:underline"
+                            onClick={() => openProcess(parent.pid, parent.startTime)}
+                          >
+                            {details?.parentName ?? "PID"} ({row.parentPid})
+                          </button>
+                        ) : (
+                          `${details?.parentName ?? "PID"} (${row.parentPid})`
+                        ),
+                    },
+                    {
+                      label: "User",
+                      value: row.user ?? <Unavailable />,
+                      hint: "Owner information for other accounts' processes may require administrator/root rights.",
+                    },
+                    { label: "Status", value: STATUS_LABEL[row.status] },
+                    { label: "Architecture", value: details?.architecture ?? NOT_AVAILABLE },
+                  ]}
+                />
+                <KeyValueList
+                  items={[
+                    {
+                      label: "Started",
+                      value:
+                        row.startTime > 0 ? formatTimestamp(row.startTime * 1000) : NOT_AVAILABLE,
+                    },
+                    { label: "Runtime", value: formatDuration(runtime) },
+                    { label: "Threads", value: row.threads ?? <Unavailable /> },
+                    { label: "Priority", value: row.priority ?? <Unavailable /> },
+                    { label: "Session", value: row.sessionId ?? NOT_AVAILABLE },
+                    { label: "Children", value: live ? children.length : NOT_AVAILABLE },
+                  ]}
+                />
+              </div>
+              <div className="space-y-2 border-t border-border px-4 py-3">
+                <PathField label="Executable" value={row.exe} />
+                <PathField label="Command line" value={row.cmd} />
+                <PathField label="Working directory" value={details?.cwd ?? null} />
+              </div>
             </Card>
-          )}
-        </div>
-      )}
+
+            <MetricCard
+              nowMs={nowMs}
+              title={`CPU · ${row.restricted ? NOT_AVAILABLE : formatPercent(row.cpuPercent)}`}
+              series={CPU_SERIES}
+              history={history}
+              pick={(p) => [p.cpu]}
+              yMax={100}
+              format={percentAxis}
+              label="CPU usage of this process"
+            />
+            <MetricCard
+              nowMs={nowMs}
+              title={`Memory · ${formatBytes(memoryOf(row))}${memPct != null ? ` (${formatPercent(memPct)})` : ""}`}
+              series={MEM_SERIES}
+              history={history}
+              pick={(p) => [p.memory]}
+              format={bytesAxis}
+              label="Memory usage of this process"
+              footer={`Virtual memory ${formatBytes(row.virtualMemoryBytes)}`}
+            />
+            <MetricCard
+              nowMs={nowMs}
+              title={
+                row.restricted
+                  ? `Disk · ${NOT_AVAILABLE}`
+                  : `Disk · ↓ ${formatBytesPerSecond(row.diskReadPerSec)} ↑ ${formatBytesPerSecond(row.diskWritePerSec)}`
+              }
+              series={IO_SERIES}
+              history={history}
+              pick={(p) => [p.read, p.write]}
+              format={rateAxis}
+              minYMax={RATE_MIN_Y}
+              label="Disk I/O of this process"
+              footer={
+                details?.totalReadBytes != null || details?.totalWrittenBytes != null
+                  ? `Total read ${formatBytes(details?.totalReadBytes)} · written ${formatBytes(details?.totalWrittenBytes)}`
+                  : "Lifetime totals unavailable for this process"
+              }
+            />
+
+            {children.length > 0 && (
+              <Card className="xl:col-span-2">
+                <CardHeader title={`Child processes (${children.length})`} />
+                <ul className="flex flex-wrap gap-2 px-4 pb-4 pt-3">
+                  {children.map((c) => (
+                    <li key={c.pid}>
+                      <button
+                        type="button"
+                        onClick={() => openProcess(c.pid, c.startTime)}
+                        className="rounded-md border border-border px-2 py-1 hover:bg-surface-2"
+                      >
+                        {c.name} <span className="num text-fg-subtle">{c.pid}</span>
+                      </button>
+                    </li>
+                  ))}
+                </ul>
+              </Card>
+            )}
+          </div>
+        </Tabs.Content>
+      </Tabs.Root>
     </>
   );
 }
@@ -373,168 +377,3 @@ function PathField({ label, value }: { label: string; value: string | null }) {
     </div>
   );
 }
-
-function MetricCard({
-  title,
-  series,
-  history,
-  pick,
-  yMax,
-  minYMax,
-  format,
-  label,
-  footer,
-  nowMs,
-}: {
-  title: string;
-  series: readonly LineSeries[];
-  history: ProcessPoint[];
-  pick: (p: ProcessPoint) => number[];
-  yMax?: number;
-  minYMax?: number;
-  format: (v: number) => string;
-  label: string;
-  footer?: string;
-  /** Latest tick time; anchors the x axis before history exists. */
-  nowMs: number;
-}) {
-  const { data, xRange } = useMemo(() => {
-    const xs = history.map((p) => p.t / 1000);
-    const columns = series.map((_, i) => history.map((p) => pick(p)[i] ?? 0));
-    const end = history.length > 0 ? (xs[xs.length - 1] as number) : nowMs / 1000;
-    return {
-      data: [xs, ...columns] as uPlot.AlignedData,
-      xRange: [end - HISTORY_SECONDS, end] as const,
-    };
-  }, [history, series, pick, nowMs]);
-  return (
-    <Card>
-      <CardHeader title={title} />
-      <div className="px-2 pb-3 pt-2">
-        <LineChart
-          series={series}
-          data={data}
-          xRange={xRange}
-          height={150}
-          yMax={yMax}
-          minYMax={minYMax}
-          formatValue={format}
-          ariaLabel={label}
-        />
-        {footer && <p className="num px-2 pt-2 text-fg-muted">{footer}</p>}
-      </div>
-    </Card>
-  );
-}
-
-const STATE_LABEL: Record<string, string> = {
-  listen: "Listening",
-  established: "Established",
-  timeWait: "Time wait",
-  closeWait: "Close wait",
-  synSent: "SYN sent",
-  synReceived: "SYN received",
-  finWait1: "FIN wait 1",
-  finWait2: "FIN wait 2",
-  closing: "Closing",
-  lastAck: "Last ACK",
-  closed: "Closed",
-  unknown: "Unknown",
-};
-
-function ConnectionsCard({
-  connections,
-  loading,
-}: {
-  connections: Connection[] | null | undefined;
-  loading: boolean;
-}) {
-  return (
-    <Card>
-      <CardHeader
-        title={connections ? `Network connections (${connections.length})` : "Network connections"}
-      />
-      <div className="max-h-72 overflow-auto px-4 pb-4 pt-2">
-        {connections === undefined ? (
-          <p className="text-fg-muted">{loading ? "Loading…" : NOT_AVAILABLE}</p>
-        ) : connections === null ? (
-          <p className="text-fg-muted">
-            Unavailable on this platform or for this process. Listing another account's sockets may
-            require administrator/root rights.
-          </p>
-        ) : connections.length === 0 ? (
-          <p className="text-fg-muted">No open TCP or UDP sockets.</p>
-        ) : (
-          <table className="w-full text-left text-[0.8125rem]">
-            <thead className="text-fg-muted">
-              <tr>
-                <th className="py-1 pr-3 font-medium">Protocol</th>
-                <th className="py-1 pr-3 font-medium">Local</th>
-                <th className="py-1 pr-3 font-medium">Remote</th>
-                <th className="py-1 font-medium">State</th>
-              </tr>
-            </thead>
-            <tbody className="num selectable font-mono">
-              {connections.map((c, i) => (
-                <tr key={i} className="border-t border-border/60">
-                  <td className="py-1 pr-3 uppercase">{c.protocol}</td>
-                  <td className="py-1 pr-3">{endpoint(c.localAddress, c.localPort)}</td>
-                  <td className="py-1 pr-3">
-                    {c.remoteAddress != null ? endpoint(c.remoteAddress, c.remotePort) : "—"}
-                  </td>
-                  <td className="py-1 font-sans">{c.state ? STATE_LABEL[c.state] : "—"}</td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        )}
-      </div>
-    </Card>
-  );
-}
-
-function endpoint(address: string, port: number | null): string {
-  const host = address.includes(":") ? `[${address}]` : address;
-  return port == null ? host : `${host}:${port}`;
-}
-
-const actionBtn =
-  "flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50";
-
-function ActionButtons({ row }: { row: ProcessRow }) {
-  const suspended = row.status === "stopped";
-  return (
-    <>
-      <button
-        type="button"
-        className={actionBtn}
-        disabled={!row.exe}
-        onClick={() => void revealExecutable(row)}
-      >
-        <FolderOpen size="0.875rem" aria-hidden /> Open location
-      </button>
-      <button
-        type="button"
-        className={actionBtn}
-        onClick={() => void requestAction(row, { type: suspended ? "resume" : "suspend" })}
-      >
-        {suspended ? <Play size="0.875rem" aria-hidden /> : <Pause size="0.875rem" aria-hidden />}
-        {suspended ? "Resume" : "Suspend"}
-      </button>
-      <button
-        type="button"
-        className={actionBtn}
-        onClick={() => void requestAction(row, { type: "terminate" })}
-      >
-        <Square size="0.8125rem" aria-hidden /> End process
-      </button>
-      <button
-        type="button"
-        className={`${actionBtn} text-crit hover:text-crit`}
-        onClick={() => void requestAction(row, { type: "forceKill" })}
-      >
-        <OctagonX size="0.875rem" aria-hidden /> Force end
-      </button>
-    </>
-  );
-}
diff --git a/src/features/process-details/inspect/InspectBody.tsx b/src/features/process-details/inspect/InspectBody.tsx
index 2287517..e70c804 100644
--- a/src/features/process-details/inspect/InspectBody.tsx
+++ b/src/features/process-details/inspect/InspectBody.tsx
@@ -1,5 +1,6 @@
 import type { ReactNode } from "react";
 import { RefreshCw } from "lucide-react";
+import { outlineButton } from "@/components/ui/button";
 import { isBackendAvailable } from "@/services/ipc";
 import type { AppError } from "@/types";
 
@@ -45,11 +46,7 @@ export function InspectBody({
     <div className="space-y-3 px-4 pb-4 pt-3">
       <div className="flex flex-wrap items-center gap-3">
         {toolbar}
-        <button
-          type="button"
-          onClick={onRefresh}
-          className="flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg"
-        >
+        <button type="button" onClick={onRefresh} className={outlineButton}>
           <RefreshCw size="0.875rem" aria-hidden /> Refresh
         </button>
       </div>
diff --git a/src/features/process-details/inspect/ThreadsTab.tsx b/src/features/process-details/inspect/ThreadsTab.tsx
index 5543e25..91c6e2a 100644
--- a/src/features/process-details/inspect/ThreadsTab.tsx
+++ b/src/features/process-details/inspect/ThreadsTab.tsx
@@ -1,11 +1,18 @@
+import { useRef } from "react";
+import { useVirtualizer } from "@tanstack/react-virtual";
 import { useRemoteData } from "@/hooks/useRemoteData";
+import { scaled, useRootPx } from "@/hooks/useRootPx";
 import { STATUS_LABEL } from "@/features/processes/cells";
 import { backend } from "@/services/ipc";
+import type { ThreadInfo } from "@/types";
 import { formatDuration, formatPercent, formatTimestamp } from "@/utils/format";
 import { InspectBody } from "./InspectBody";
 
 /** CPU per thread needs two readings, so this is the one tab that polls: only while visible. */
 const POLL_MS = 1_500;
+const ROW_HEIGHT = 24;
+const COLUMNS =
+  "grid-cols-[4.5rem_minmax(8rem,1fr)_6rem_4.5rem_6rem_4.5rem_3.5rem_10rem_minmax(8rem,1fr)]";
 
 export function ThreadsTab({
   pid,
@@ -41,42 +48,95 @@ export function ThreadsTab({
           : "Windows does not report thread state or wait reasons through the interfaces this app uses."
       }
     >
-      <div className="max-h-[28rem] overflow-auto">
-        <table className="w-full text-left text-[0.8125rem]">
-          <thead className="sticky top-0 bg-surface text-fg-muted">
-            <tr>
-              <th className="py-1 pr-3 font-medium">TID</th>
-              <th className="py-1 pr-3 font-medium">Name</th>
-              <th className="py-1 pr-3 font-medium">State</th>
-              <th className="py-1 pr-3 text-right font-medium">CPU</th>
-              <th className="py-1 pr-3 text-right font-medium">CPU time</th>
-              <th className="py-1 pr-3 text-right font-medium">Priority</th>
-              <th className="py-1 pr-3 text-right font-medium">Core</th>
-              <th className="py-1 pr-3 font-medium">Started</th>
-              <th className="py-1 font-medium">Waiting in</th>
-            </tr>
-          </thead>
-          <tbody className="num selectable">
-            {threads.map((t) => (
-              <tr key={t.tid} className="border-t border-border/60">
-                <td className="py-1 pr-3 font-mono">{t.tid}</td>
-                <td className="py-1 pr-3">{t.name ?? "—"}</td>
-                <td className="py-1 pr-3">{t.state ? STATUS_LABEL[t.state] : "—"}</td>
-                <td className="py-1 pr-3 text-right">{formatPercent(t.cpuPercent)}</td>
-                <td className="py-1 pr-3 text-right">
-                  {t.cpuTimeMs == null ? "—" : formatDuration(t.cpuTimeMs / 1000)}
-                </td>
-                <td className="py-1 pr-3 text-right">{t.priority ?? "—"}</td>
-                <td className="py-1 pr-3 text-right">{t.processor ?? "—"}</td>
-                <td className="py-1 pr-3">
-                  {t.startTime != null ? formatTimestamp(t.startTime * 1000) : "—"}
-                </td>
-                <td className="py-1 font-mono">{t.waitChannel ?? "—"}</td>
-              </tr>
-            ))}
-          </tbody>
-        </table>
-      </div>
+      <ThreadTable threads={threads} />
     </InspectBody>
   );
 }
+
+/** Virtualized: some processes run thousands of threads, re-read every poll. */
+function ThreadTable({ threads }: { threads: readonly ThreadInfo[] }) {
+  const scroller = useRef<HTMLDivElement>(null);
+  const rowHeight = scaled(ROW_HEIGHT, useRootPx());
+  const virtualizer = useVirtualizer({
+    count: threads.length,
+    getScrollElement: () => scroller.current,
+    estimateSize: () => rowHeight,
+    overscan: 12,
+    getItemKey: (index) => threads[index]?.tid ?? index,
+  });
+  return (
+    <div
+      ref={scroller}
+      role="table"
+      aria-rowcount={threads.length + 1}
+      className="max-h-[28rem] overflow-auto text-[0.8125rem]"
+    >
+      <div
+        role="row"
+        className={`sticky top-0 z-[1] grid ${COLUMNS} gap-3 bg-surface py-1 font-medium text-fg-muted`}
+      >
+        <span role="columnheader">TID</span>
+        <span role="columnheader">Name</span>
+        <span role="columnheader">State</span>
+        <span role="columnheader" className="text-right">
+          CPU
+        </span>
+        <span role="columnheader" className="text-right">
+          CPU time
+        </span>
+        <span role="columnheader" className="text-right">
+          Priority
+        </span>
+        <span role="columnheader" className="text-right">
+          Core
+        </span>
+        <span role="columnheader">Started</span>
+        <span role="columnheader">Waiting in</span>
+      </div>
+      <div
+        className="num selectable"
+        style={{ height: virtualizer.getTotalSize(), position: "relative" }}
+      >
+        {virtualizer.getVirtualItems().map((v) => {
+          const t = threads[v.index];
+          if (!t) return null;
+          return (
+            <div
+              key={v.key}
+              role="row"
+              aria-rowindex={v.index + 2}
+              className={`absolute left-0 grid w-full ${COLUMNS} items-center gap-3 border-t border-border/60`}
+              style={{ top: v.start, height: rowHeight }}
+            >
+              <span role="cell" className="font-mono">
+                {t.tid}
+              </span>
+              <span role="cell" className="truncate">
+                {t.name ?? "—"}
+              </span>
+              <span role="cell">{t.state ? STATUS_LABEL[t.state] : "—"}</span>
+              <span role="cell" className="text-right">
+                {formatPercent(t.cpuPercent)}
+              </span>
+              <span role="cell" className="text-right">
+                {t.cpuTimeMs == null ? "—" : formatDuration(t.cpuTimeMs / 1000)}
+              </span>
+              <span role="cell" className="text-right">
+                {t.priority ?? "—"}
+              </span>
+              <span role="cell" className="text-right">
+                {t.processor ?? "—"}
+              </span>
+              <span role="cell" className="truncate">
+                {t.startTime != null ? formatTimestamp(t.startTime * 1000) : "—"}
+              </span>
+              <span role="cell" className="truncate font-mono" title={t.waitChannel ?? undefined}>
+                {t.waitChannel ?? "—"}
+              </span>
+            </div>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
diff --git a/src/features/process-details/useProcessDetails.test.ts b/src/features/process-details/useProcessDetails.test.ts
index d19b836..770d8e5 100644
--- a/src/features/process-details/useProcessDetails.test.ts
+++ b/src/features/process-details/useProcessDetails.test.ts
@@ -75,15 +75,8 @@ describe("useProcessDetails", () => {
     expect(result.current.error?.kind).toBe("processNotFound");
   });
 
-  it("does not collect an unknown lifetime's ticks before the first details response", async () => {
+  it("reports an unknown start time as not found without fetching or following ticks", () => {
     useMetricsStore.setState({ tick: makeTick([]) });
-    let resolve: (value: ProcessDetails) => void = () => {};
-    getProcessDetails.mockImplementationOnce(
-      () =>
-        new Promise((done) => {
-          resolve = done;
-        }),
-    );
     const { result } = renderHook(() => useProcessDetails(42));
     act(() =>
       useMetricsStore.getState().ingestTick({
@@ -92,11 +85,18 @@ describe("useProcessDetails", () => {
         processes: [{ ...opened, startTime: 5_000 }],
       }),
     );
+    expect(getProcessDetails).not.toHaveBeenCalled();
+    expect(result.current.loading).toBe(false);
+    expect(result.current.error?.kind).toBe("processNotFound");
+    expect(result.current.details).toBeNull();
     expect(result.current.live).toBeNull();
-    await act(async () => resolve(details));
-    await waitFor(() => expect(result.current.details).toBe(details));
     expect(result.current.history).toEqual([]);
-    expect(result.current.live).toBeNull();
+  });
+
+  it("asks for the exact instance it was opened with", async () => {
+    const { result } = renderHook(() => useProcessDetails(42, 1_000));
+    await waitFor(() => expect(result.current.details).toBe(details));
+    expect(getProcessDetails).toHaveBeenCalledWith(42, 1_000);
   });
 
   it("never follows replacement ticks with unknown zero creation times", async () => {
diff --git a/src/features/process-details/useProcessDetails.ts b/src/features/process-details/useProcessDetails.ts
index 7a687a7..47093d8 100644
--- a/src/features/process-details/useProcessDetails.ts
+++ b/src/features/process-details/useProcessDetails.ts
@@ -34,15 +34,15 @@ export function useProcessDetails(
   const [result, setResult] = useState<FetchResult | null>(null);
   const [livePoints, setLivePoints] = useState<ProcessPoint[]>([]);
   const requestKey = `${pid}:${nonce}`;
-  const [openedStartTime] = useState(
+  // The start time pins the process instance, so a reused PID is reported as
+  // an exit rather than shown as this process. Without one (the process was
+  // gone before the page opened) there is nothing that can be verified.
+  const [startTime] = useState(
     () =>
       selectedStartTime ??
       useMetricsStore.getState().tick?.processes.find((p) => p.pid === pid)?.startTime,
   );
-
-  // Once details load they pin the process instance, so a reused PID is
-  // reported as an exit rather than shown as this process.
-  const startTime = openedStartTime ?? result?.details?.row.startTime;
+  const missing = useMemo(() => (startTime == null ? notFound(pid) : null), [pid, startTime]);
   const live = useMetricsStore(
     (s) =>
       s.tick?.processes.find(
@@ -51,7 +51,7 @@ export function useProcessDetails(
   );
 
   useEffect(() => {
-    if (!isBackendAvailable()) return;
+    if (!isBackendAvailable() || startTime == null) return;
     let cancelled = false;
     backend
       .getProcessDetails(pid, startTime)
@@ -62,12 +62,7 @@ export function useProcessDetails(
             message: "The process start time is unavailable, so its identity cannot be verified.",
           } satisfies AppError;
         }
-        if (startTime != null && details.row.startTime !== startTime) {
-          throw {
-            kind: "processNotFound",
-            message: `Process ${pid} is no longer running.`,
-          } satisfies AppError;
-        }
+        if (details.row.startTime !== startTime) throw notFound(pid);
         if (!cancelled) setResult({ key: requestKey, details, error: null });
       })
       .catch(
@@ -111,8 +106,12 @@ export function useProcessDetails(
     live,
     details,
     history,
-    loading: isBackendAvailable() && result?.key !== requestKey,
-    error: result?.error ?? null,
+    loading: !missing && isBackendAvailable() && result?.key !== requestKey,
+    error: missing ?? result?.error ?? null,
     refresh,
   };
 }
+
+function notFound(pid: number): AppError {
+  return { kind: "processNotFound", message: `Process ${pid} is no longer running.` };
+}
diff --git a/src/features/processes/ExportMenu.tsx b/src/features/processes/ExportMenu.tsx
index 2f15cd8..38f1421 100644
--- a/src/features/processes/ExportMenu.tsx
+++ b/src/features/processes/ExportMenu.tsx
@@ -1,6 +1,7 @@
 import { Download } from "lucide-react";
 import { DropdownMenu } from "radix-ui";
 import { useState } from "react";
+import { outlineButton } from "@/components/ui/button";
 import { backend, isBackendAvailable, toAppError } from "@/services/ipc";
 import { toast } from "@/stores/toastStore";
 
@@ -26,7 +27,7 @@ export function ExportMenu() {
           type="button"
           disabled={!isBackendAvailable()}
           title={isBackendAvailable() ? undefined : "Export is available in the desktop app"}
-          className="flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50"
+          className={outlineButton}
         >
           <Download size="0.875rem" aria-hidden />
           Export
diff --git a/src/features/processes/ProcessContextMenu.test.tsx b/src/features/processes/ProcessContextMenu.test.tsx
new file mode 100644
index 0000000..1254f3a
--- /dev/null
+++ b/src/features/processes/ProcessContextMenu.test.tsx
@@ -0,0 +1,86 @@
+import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
+import { render, screen, within } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { useMetricsStore } from "@/stores/metricsStore";
+import { useProcessStore } from "@/stores/processStore";
+import { useUiStore } from "@/stores/uiStore";
+import { NOW_MS, STATIC_INFO, makeTick } from "@/test/fixtures";
+import { mockProcesses } from "./mock";
+import { ProcessesPage } from "./ProcessesPage";
+
+const processes = mockProcesses(10, NOW_MS / 1000);
+
+// jsdom has no layout; give the virtualized grid a viewport so rows render.
+beforeAll(() => {
+  Object.defineProperty(HTMLElement.prototype, "clientHeight", {
+    configurable: true,
+    get: () => 800,
+  });
+  Object.defineProperty(HTMLElement.prototype, "clientWidth", {
+    configurable: true,
+    get: () => 1200,
+  });
+});
+afterAll(() => {
+  Reflect.deleteProperty(HTMLElement.prototype, "clientHeight");
+  Reflect.deleteProperty(HTMLElement.prototype, "clientWidth");
+});
+
+beforeEach(() => {
+  useProcessStore.setState({
+    search: "",
+    preset: "all",
+    sort: { column: "pid", direction: "asc" },
+    selectedPid: null,
+    mode: "list",
+    collapsed: new Set(),
+    expandedApps: new Set(),
+  });
+  useMetricsStore.setState({ staticInfo: STATIC_INFO, tick: makeTick(processes), status: "live" });
+  useUiStore.setState({ route: "processes", selectedPid: null, selectedStartTime: null });
+});
+
+const rowOf = (pid: number) =>
+  screen.getAllByRole("row").find((r) => r.getAttribute("data-pid") === String(pid))!;
+
+describe("ProcessContextMenu", () => {
+  it("opens for the right-clicked row and acts on that process", async () => {
+    render(<ProcessesPage />);
+    const target = processes[3]!;
+    await userEvent.pointer({ keys: "[MouseRight]", target: rowOf(target.pid) });
+    const menu = await screen.findByRole("menu", { name: `Actions for ${target.name}` });
+    expect(within(menu).getByText(`${target.name} · PID ${target.pid}`)).toBeInTheDocument();
+    expect(useProcessStore.getState().selectedPid).toBe(target.pid);
+
+    await userEvent.click(within(menu).getByRole("menuitem", { name: "Open details" }));
+    expect(useUiStore.getState()).toMatchObject({
+      route: "process-details",
+      selectedPid: target.pid,
+      selectedStartTime: target.startTime,
+    });
+  });
+
+  it.each([
+    ["Shift+F10", "{Shift>}{F10}{/Shift}"],
+    ["the context menu key", "{ContextMenu}"],
+  ])("opens for the selected row with %s", async (_name, keys) => {
+    render(<ProcessesPage />);
+    const grid = screen.getByRole("treegrid", { name: "Processes" });
+    grid.focus();
+    await userEvent.keyboard("{ArrowDown}{ArrowDown}");
+    const selected = processes[1]!;
+    expect(grid).toHaveAttribute("aria-activedescendant", rowOf(selected.pid).id);
+
+    await userEvent.keyboard(keys);
+    expect(
+      await screen.findByRole("menu", { name: `Actions for ${selected.name}` }),
+    ).toBeInTheDocument();
+  });
+
+  it("does nothing from the keyboard when no row is selected", async () => {
+    render(<ProcessesPage />);
+    screen.getByRole("treegrid", { name: "Processes" }).focus();
+    await userEvent.keyboard("{Shift>}{F10}{/Shift}");
+    expect(screen.queryByRole("menu")).toBeNull();
+  });
+});
diff --git a/src/features/processes/ProcessContextMenu.tsx b/src/features/processes/ProcessContextMenu.tsx
index 683c6c4..b8fcc37 100644
--- a/src/features/processes/ProcessContextMenu.tsx
+++ b/src/features/processes/ProcessContextMenu.tsx
@@ -65,8 +65,11 @@ export function ProcessContextMenu({
   children: ReactElement;
 }) {
   const openProcess = useUiStore((s) => s.openProcess);
-  const [pid, setPid] = useState<number | null>(null);
-  const row = pid == null ? undefined : find(pid);
+  const [target, setTarget] = useState<{ pid: number; startTime: number } | null>(null);
+  // Re-resolved each tick, but only while the PID still belongs to the process
+  // that was right-clicked; a reused PID must never receive the action.
+  const live = target == null ? undefined : find(target.pid);
+  const row = live?.startTime === target?.startTime ? live : undefined;
   const suspended = row?.status === "stopped";
   return (
     <ContextMenu.Root>
@@ -75,12 +78,14 @@ export function ProcessContextMenu({
         onContextMenu={(e) => {
           const cell = (e.target as HTMLElement).closest<HTMLElement>("[data-pid]");
           // Not on a process row (header, summary row): no menu.
-          if (!cell || cell.dataset.group !== undefined) {
-            setPid(null);
+          const opened =
+            cell && cell.dataset.group === undefined ? find(Number(cell.dataset.pid)) : undefined;
+          if (!opened) {
+            setTarget(null);
             e.preventDefault();
             return;
           }
-          setPid(Number(cell.dataset.pid));
+          setTarget({ pid: opened.pid, startTime: opened.startTime });
         }}
       >
         {children}
diff --git a/src/features/processes/ProcessRow.tsx b/src/features/processes/ProcessRow.tsx
new file mode 100644
index 0000000..350335a
--- /dev/null
+++ b/src/features/processes/ProcessRow.tsx
@@ -0,0 +1,320 @@
+import { ArrowDown, ArrowUp, ChevronDown, ChevronRight } from "lucide-react";
+import { type KeyboardEvent, type PointerEvent, memo } from "react";
+import { cn } from "@/lib/cn";
+import { useRootPx } from "@/hooks/useRootPx";
+import { columnWidth, useProcessStore } from "@/stores/processStore";
+import type { ProcessRow as ProcessRowData } from "@/types";
+import { type HeatLevel, heatLevel, memoryHeatLevel } from "@/utils/levels";
+import { GROUP_MEMORY_NOTE } from "./apps";
+import { cellContent, cellTitle } from "./cells";
+import {
+  COLUMN_BY_ID,
+  type ColumnId,
+  type SortState,
+  memoryOf,
+  rowDomId,
+  runState,
+  type RunState,
+} from "./logic";
+
+/** Execution state: a coloured row edge, plus a status-cell tint only for problem states. */
+const RUN_COLOR: Record<RunState, { bar: string; bg?: string; fg?: string }> = {
+  active: { bar: "var(--ok)" },
+  idle: { bar: "transparent" },
+  problem: { bar: "var(--crit)", bg: "var(--crit-soft)", fg: "var(--crit)" },
+};
+
+const HEAT_BG: Record<HeatLevel, string | undefined> = {
+  0: undefined,
+  1: "var(--heat-1)",
+  2: "var(--heat-2)",
+  3: "var(--heat-3)",
+};
+
+/** Indentation per tree level, in pixels. */
+const INDENT = 16;
+
+/** Keyboard resize step, in 16px-root units. */
+const RESIZE_STEP = 8;
+
+export const HeaderRow = memo(function HeaderRow({
+  columns,
+  template,
+  sort,
+}: {
+  columns: ColumnId[];
+  template: string;
+  sort: SortState;
+}) {
+  const sortBy = useProcessStore((s) => s.sortBy);
+  return (
+    <div
+      role="row"
+      aria-rowindex={1}
+      className="sticky top-0 z-10 grid border-b border-border bg-surface-2 text-[0.8125rem] font-medium text-fg-muted"
+      style={{ gridTemplateColumns: template }}
+    >
+      {columns.map((id) => {
+        const col = COLUMN_BY_ID[id];
+        const active = sort.column === id;
+        return (
+          <div
+            key={id}
+            role="columnheader"
+            // Otherwise the resize handle's label joins the header's name.
+            aria-label={col.label}
+            aria-sort={active ? (sort.direction === "asc" ? "ascending" : "descending") : "none"}
+            className={cn(
+              "flex min-w-0",
+              id === "name" ? "sticky left-0 z-[1] bg-surface-2" : "relative",
+            )}
+          >
+            <button
+              type="button"
+              onClick={() => sortBy(id)}
+              className={cn(
+                "flex h-8 min-w-0 flex-1 items-center gap-1 px-2 hover:text-fg",
+                col.align === "right" && "justify-end",
+                active && "text-fg",
+              )}
+            >
+              <span className="truncate">{col.label}</span>
+              {active &&
+                (sort.direction === "asc" ? (
+                  <ArrowUp size="0.75rem" aria-hidden />
+                ) : (
+                  <ArrowDown size="0.75rem" aria-hidden />
+                ))}
+            </button>
+            <ResizeHandle column={id} />
+          </div>
+        );
+      })}
+    </div>
+  );
+});
+
+function ResizeHandle({ column }: { column: ColumnId }) {
+  const setWidth = useProcessStore((s) => s.setColumnWidth);
+  const width = useProcessStore((s) => columnWidth(s.columnWidths, column));
+  const rootPx = useRootPx();
+  const onPointerDown = (e: PointerEvent<HTMLDivElement>) => {
+    e.preventDefault();
+    e.stopPropagation();
+    const el = e.currentTarget;
+    el.setPointerCapture(e.pointerId);
+    const startX = e.clientX;
+    const startWidth = columnWidth(useProcessStore.getState().columnWidths, column);
+    const move = (ev: globalThis.PointerEvent) =>
+      // Stored widths are in 16px-root units; the pointer moves in screen px.
+      setWidth(column, startWidth + ((ev.clientX - startX) * 16) / rootPx);
+    // Fires after pointerup, pointercancel (touch interrupt, alt-tab) and any
+    // other way the capture ends, so the drag can never get stuck on.
+    const end = () => {
+      el.removeEventListener("pointermove", move);
+      el.removeEventListener("lostpointercapture", end);
+    };
+    el.addEventListener("pointermove", move);
+    el.addEventListener("lostpointercapture", end);
+  };
+  const onKeyDown = (e: KeyboardEvent<HTMLDivElement>) => {
+    if (e.key !== "ArrowLeft" && e.key !== "ArrowRight") return;
+    // The grid also handles arrows (row expand/collapse).
+    e.preventDefault();
+    e.stopPropagation();
+    setWidth(column, width + (e.key === "ArrowRight" ? RESIZE_STEP : -RESIZE_STEP));
+  };
+  const label = COLUMN_BY_ID[column].label;
+  return (
+    <div
+      role="separator"
+      aria-orientation="vertical"
+      aria-label={`Resize ${label} column`}
+      aria-valuenow={width}
+      aria-valuemin={COLUMN_BY_ID[column].minWidth}
+      aria-valuetext={`${width} pixels`}
+      tabIndex={0}
+      onPointerDown={onPointerDown}
+      onKeyDown={onKeyDown}
+      className="absolute right-0 top-1 bottom-1 w-1.5 cursor-col-resize border-r border-border hover:border-accent focus-visible:border-accent"
+    />
+  );
+}
+
+interface RowProps {
+  row: ProcessRowData;
+  index: number;
+  depth: number;
+  hasChildren: boolean;
+  expanded: boolean;
+  group: boolean;
+  columns: ColumnId[];
+  template: string;
+  /** Unix seconds; 0 unless a column shows it, so rows don't re-render on the clock. */
+  nowSecs: number;
+  totalMemoryBytes: number;
+  heat: boolean;
+  isNew: boolean;
+  tree: boolean;
+  selected: boolean;
+  isSelf: boolean;
+  offset: number;
+  height: number;
+  onSelect: (pid: number) => void;
+  onOpen: (pid: number, startTime: number) => void;
+  onToggle: (pid: number) => void;
+}
+
+function sameRow(a: ProcessRowData, b: ProcessRowData): boolean {
+  if (a === b) return true;
+  for (const key of Object.keys(b) as (keyof ProcessRowData)[]) {
+    if (a[key] !== b[key]) return false;
+  }
+  return true;
+}
+
+/** Every tick delivers new row objects; compare their values instead. */
+function sameProps(prev: RowProps, next: RowProps): boolean {
+  for (const key of Object.keys(next) as (keyof RowProps)[]) {
+    if (key !== "row" && prev[key] !== next[key]) return false;
+  }
+  return sameRow(prev.row, next.row);
+}
+
+export const Row = memo(function Row({
+  row,
+  index,
+  depth,
+  hasChildren,
+  expanded,
+  group,
+  columns,
+  template,
+  nowSecs,
+  totalMemoryBytes,
+  heat,
+  isNew,
+  tree,
+  selected,
+  isSelf,
+  offset,
+  height,
+  onSelect,
+  onOpen,
+  onToggle,
+}: RowProps) {
+  const ctx = { nowSecs, totalMemoryBytes };
+  const memPct = totalMemoryBytes > 0 ? (memoryOf(row) / totalMemoryBytes) * 100 : 0;
+  const run = RUN_COLOR[runState(row)];
+  return (
+    <div
+      id={rowDomId(row.pid)}
+      role="row"
+      aria-rowindex={index + 2}
+      aria-selected={selected}
+      aria-level={tree ? depth + 1 : undefined}
+      aria-expanded={tree && hasChildren ? expanded : undefined}
+      data-pid={row.pid}
+      data-group={group ? "" : undefined}
+      data-run={heat ? runState(row) : undefined}
+      onClick={() => onSelect(row.pid)}
+      onDoubleClick={() => (group ? onToggle(row.pid) : onOpen(row.pid, row.startTime))}
+      onContextMenu={() => onSelect(row.pid)}
+      className={cn(
+        "group absolute left-0 top-0 grid w-full items-center border-b border-border/60 text-[0.875rem]",
+        selected ? "bg-accent-soft" : isNew ? "bg-accent-soft/40" : "hover:bg-surface-2",
+        group && "font-medium",
+      )}
+      style={{ transform: `translateY(${offset}px)`, height, gridTemplateColumns: template }}
+    >
+      {columns.map((id) => {
+        const col = COLUMN_BY_ID[id];
+        const statusTint = heat && id === "status";
+        const level: HeatLevel = !heat
+          ? 0
+          : id === "cpu"
+            ? heatLevel(row.cpuPercent)
+            : id === "memory" || id === "memoryPercent"
+              ? memoryHeatLevel(memPct)
+              : 0;
+        return (
+          <div
+            key={id}
+            role="gridcell"
+            title={
+              group && (id === "memory" || id === "memoryPercent")
+                ? GROUP_MEMORY_NOTE
+                : cellTitle(id, row)
+            }
+            className={cn(
+              "flex h-full min-w-0 items-center px-2",
+              col.align === "right" && "num justify-end",
+              id === "name" && "font-medium",
+              // Stay in view while the other columns scroll sideways. Needs an
+              // opaque background that matches the row's state.
+              id === "name" &&
+                cn(
+                  "sticky left-0 z-[1]",
+                  selected
+                    ? "bg-accent-soft"
+                    : isNew
+                      ? "bg-[color-mix(in_srgb,var(--accent-soft)_40%,var(--surface))]"
+                      : "bg-surface group-hover:bg-surface-2",
+                ),
+              // Zero activity recedes so real disk I/O stands out.
+              ((id === "diskRead" && row.diskReadPerSec <= 0) ||
+                (id === "diskWrite" && row.diskWritePerSec <= 0)) &&
+                !row.restricted &&
+                "text-fg-subtle",
+              (id === "exe" || id === "cmd") &&
+                "selectable font-mono text-[0.8125rem] text-fg-muted",
+            )}
+            style={{
+              background: statusTint ? (run.bg ?? HEAT_BG[level]) : HEAT_BG[level],
+              color: statusTint ? run.fg : undefined,
+              // A coloured edge on the first cell marks the live state.
+              boxShadow: heat && id === columns[0] ? `inset 3px 0 0 0 ${run.bar}` : undefined,
+            }}
+          >
+            {id === "name" && tree && (
+              <span className="flex shrink-0 items-center" style={{ width: depth * INDENT + 18 }}>
+                <span style={{ width: depth * INDENT }} />
+                {hasChildren && (
+                  <button
+                    type="button"
+                    tabIndex={-1}
+                    aria-label={expanded ? `Collapse ${row.name}` : `Expand ${row.name}`}
+                    onClick={(e) => {
+                      e.stopPropagation();
+                      onToggle(row.pid);
+                    }}
+                    className="grid size-4 place-items-center rounded text-fg-muted hover:bg-border"
+                  >
+                    {expanded ? (
+                      <ChevronDown size="0.8125rem" />
+                    ) : (
+                      <ChevronRight size="0.8125rem" />
+                    )}
+                  </button>
+                )}
+              </span>
+            )}
+            <span className="truncate">
+              {group && id === "pid" ? "—" : cellContent(id, row, ctx)}
+            </span>
+            {id === "name" && isNew && (
+              <span className="ml-2 shrink-0 rounded bg-accent-soft px-1 text-[0.6875rem] font-normal text-accent">
+                New
+              </span>
+            )}
+            {id === "name" && isSelf && (
+              <span className="ml-2 shrink-0 rounded bg-surface-2 px-1 text-[0.6875rem] font-normal text-fg-muted">
+                this app
+              </span>
+            )}
+          </div>
+        );
+      })}
+    </div>
+  );
+}, sameProps);
diff --git a/src/features/processes/ProcessTable.tsx b/src/features/processes/ProcessTable.tsx
index 917e129..173e921 100644
--- a/src/features/processes/ProcessTable.tsx
+++ b/src/features/processes/ProcessTable.tsx
@@ -1,52 +1,21 @@
 import { useVirtualizer } from "@tanstack/react-virtual";
-import { ArrowDown, ArrowUp, ChevronDown, ChevronRight } from "lucide-react";
 import {
   type KeyboardEvent,
-  type PointerEvent,
-  memo,
+  type MouseEvent,
   useCallback,
   useEffect,
   useMemo,
   useRef,
 } from "react";
-import { cn } from "@/lib/cn";
 import { scaled, useRootPx } from "@/hooks/useRootPx";
 import { columnWidth, useProcessStore } from "@/stores/processStore";
 import { useSettingsStore } from "@/stores/settingsStore";
 import { useUiStore } from "@/stores/uiStore";
 import type { ProcessRow } from "@/types";
-import { type HeatLevel, heatLevel, memoryHeatLevel } from "@/utils/levels";
-import { GROUP_MEMORY_NOTE } from "./apps";
-import { cellContent, cellTitle } from "./cells";
-import {
-  COLUMN_BY_ID,
-  type ColumnId,
-  type ProcessContext,
-  type SortState,
-  isNewProcess,
-  memoryOf,
-  runState,
-  type RunState,
-} from "./logic";
+import { type ProcessContext, isNewProcess, rowDomId } from "./logic";
+import { HeaderRow, Row } from "./ProcessRow";
 import type { TableItem } from "./tree";
 
-/** Execution state: a coloured row edge, plus a status-cell tint only for problem states. */
-const RUN_COLOR: Record<RunState, { bar: string; bg?: string; fg?: string }> = {
-  active: { bar: "var(--ok)" },
-  idle: { bar: "transparent" },
-  problem: { bar: "var(--crit)", bg: "var(--crit-soft)", fg: "var(--crit)" },
-};
-
-const HEAT_BG: Record<HeatLevel, string | undefined> = {
-  0: undefined,
-  1: "var(--heat-1)",
-  2: "var(--heat-2)",
-  3: "var(--heat-3)",
-};
-
-/** Indentation per tree level, in pixels. */
-const INDENT = 16;
-
 interface ProcessTableProps {
   items: readonly TableItem[];
   ctx: ProcessContext;
@@ -93,6 +62,8 @@ export function ProcessTable({
   // Rows scale with the type size, but stop at 18px root so a big window
   // keeps showing many processes instead of fewer, taller rows.
   const rowHeight = scaled(compact ? 26 : 32, Math.min(rootPx, 18));
+  // Only a visible runtime column makes rows depend on the clock.
+  const rowNow = visibleColumns.includes("runtime") ? ctx.nowSecs : 0;
 
   const template = useMemo(
     () => visibleColumns.map((c) => `${scaled(columnWidth(widths, c), rootPx)}px`).join(" "),
@@ -122,6 +93,42 @@ export function ProcessTable({
     [items, selectedPid],
   );
 
+  /** Opens the row context menu from the keyboard, positioned on the selected row. */
+  const openRowMenu = useCallback(() => {
+    if (selectedPid == null || selectedIndex < 0) return;
+    const fire = () => {
+      const el = document.getElementById(rowDomId(selectedPid));
+      if (!el) return;
+      const rect = el.getBoundingClientRect();
+      el.dispatchEvent(
+        new globalThis.MouseEvent("contextmenu", {
+          bubbles: true,
+          cancelable: true,
+          clientX: rect.left + 24,
+          clientY: rect.top + rect.height / 2,
+        }),
+      );
+    };
+    if (document.getElementById(rowDomId(selectedPid))) {
+      fire();
+    } else {
+      virtualizer.scrollToIndex(selectedIndex, { align: "auto" });
+      requestAnimationFrame(fire);
+    }
+  }, [selectedPid, selectedIndex, virtualizer]);
+
+  // A keyboard-generated contextmenu event targets the grid itself, which
+  // has no row to act on; redirect it to the selected row.
+  const onContextMenuCapture = useCallback(
+    (e: MouseEvent<HTMLDivElement>) => {
+      if (e.target !== e.currentTarget || selectedIndex < 0) return;
+      e.preventDefault();
+      e.stopPropagation();
+      openRowMenu();
+    },
+    [openRowMenu, selectedIndex],
+  );
+
   const onKeyDown = useCallback(
     (e: KeyboardEvent<HTMLDivElement>) => {
       if (items.length === 0) return;
@@ -130,6 +137,11 @@ export function ProcessTable({
         1,
         Math.floor((scrollRef.current?.clientHeight ?? 300) / rowHeight) - 1,
       );
+      if ((e.key === "F10" && e.shiftKey) || e.key === "ContextMenu") {
+        e.preventDefault();
+        openRowMenu();
+        return;
+      }
       let next: number;
       switch (e.key) {
         case "ArrowDown":
@@ -186,6 +198,7 @@ export function ProcessTable({
       select,
       setCollapsed,
       openProcess,
+      openRowMenu,
       toggleCollapsed,
       onRequestTerminate,
       virtualizer,
@@ -197,6 +210,12 @@ export function ProcessTable({
     [items],
   );
 
+  const virtualItems = virtualizer.getVirtualItems();
+  const activeDescendant =
+    selectedPid != null && virtualItems.some((v) => v.index === selectedIndex)
+      ? rowDomId(selectedPid)
+      : undefined;
+
   const table = (
     <div
       ref={scrollRef}
@@ -204,29 +223,37 @@ export function ProcessTable({
       aria-label="Processes"
       aria-rowcount={items.length + 1}
       aria-colcount={visibleColumns.length}
+      aria-activedescendant={activeDescendant}
       tabIndex={0}
       onKeyDown={onKeyDown}
+      onContextMenuCapture={onContextMenuCapture}
       className="relative min-h-0 flex-1 overflow-auto rounded-lg border border-border bg-surface focus-visible:outline-2"
     >
       <div style={{ width: totalWidth, minWidth: "100%" }}>
         <HeaderRow columns={visibleColumns} template={template} sort={sort} />
         <div style={{ height: virtualizer.getTotalSize(), position: "relative" }}>
-          {virtualizer.getVirtualItems().map((v) => {
+          {virtualItems.map((v) => {
             const item = items[v.index];
             if (!item) return null;
+            const { row } = item;
             return (
               <Row
-                key={item.row.pid}
-                item={item}
+                key={row.pid}
+                row={row}
                 index={v.index}
+                depth={item.depth ?? 0}
+                hasChildren={item.hasChildren ?? false}
+                expanded={item.expanded ?? false}
+                group={item.group ?? false}
                 columns={visibleColumns}
                 template={template}
-                ctx={ctx}
+                nowSecs={rowNow}
+                totalMemoryBytes={ctx.totalMemoryBytes}
                 heat={heat}
-                highlightSecs={highlightSecs}
+                isNew={isNewProcess(row.startTime, ctx.nowSecs, highlightSecs)}
                 tree={tree}
-                selected={item.row.pid === selectedPid}
-                isSelf={item.row.pid === selfPid}
+                selected={row.pid === selectedPid}
+                isSelf={row.pid === selfPid}
                 offset={v.start}
                 height={rowHeight}
                 onSelect={select}
@@ -246,244 +273,3 @@ export function ProcessTable({
   );
   return wrapTable ? wrapTable(table, find) : table;
 }
-
-const HeaderRow = memo(function HeaderRow({
-  columns,
-  template,
-  sort,
-}: {
-  columns: ColumnId[];
-  template: string;
-  sort: SortState;
-}) {
-  const sortBy = useProcessStore((s) => s.sortBy);
-  return (
-    <div
-      role="row"
-      aria-rowindex={1}
-      className="sticky top-0 z-10 grid border-b border-border bg-surface-2 text-[0.8125rem] font-medium text-fg-muted"
-      style={{ gridTemplateColumns: template }}
-    >
-      {columns.map((id) => {
-        const col = COLUMN_BY_ID[id];
-        const active = sort.column === id;
-        return (
-          <div
-            key={id}
-            role="columnheader"
-            aria-sort={active ? (sort.direction === "asc" ? "ascending" : "descending") : "none"}
-            className={cn(
-              "flex min-w-0",
-              id === "name" ? "sticky left-0 z-[1] bg-surface-2" : "relative",
-            )}
-          >
-            <button
-              type="button"
-              onClick={() => sortBy(id)}
-              className={cn(
-                "flex h-8 min-w-0 flex-1 items-center gap-1 px-2 hover:text-fg",
-                col.align === "right" && "justify-end",
-                active && "text-fg",
-              )}
-            >
-              <span className="truncate">{col.label}</span>
-              {active &&
-                (sort.direction === "asc" ? (
-                  <ArrowUp size="0.75rem" aria-hidden />
-                ) : (
-                  <ArrowDown size="0.75rem" aria-hidden />
-                ))}
-            </button>
-            <ResizeHandle column={id} />
-          </div>
-        );
-      })}
-    </div>
-  );
-});
-
-function ResizeHandle({ column }: { column: ColumnId }) {
-  const setWidth = useProcessStore((s) => s.setColumnWidth);
-  const rootPx = useRootPx();
-  const onPointerDown = (e: PointerEvent<HTMLDivElement>) => {
-    e.preventDefault();
-    e.stopPropagation();
-    const el = e.currentTarget;
-    el.setPointerCapture(e.pointerId);
-    const startX = e.clientX;
-    const startWidth = columnWidth(useProcessStore.getState().columnWidths, column);
-    const move = (ev: globalThis.PointerEvent) =>
-      // Stored widths are in 16px-root units; the pointer moves in screen px.
-      setWidth(column, startWidth + ((ev.clientX - startX) * 16) / rootPx);
-    // Fires after pointerup, pointercancel (touch interrupt, alt-tab) and any
-    // other way the capture ends, so the drag can never get stuck on.
-    const end = () => {
-      el.removeEventListener("pointermove", move);
-      el.removeEventListener("lostpointercapture", end);
-    };
-    el.addEventListener("pointermove", move);
-    el.addEventListener("lostpointercapture", end);
-  };
-  return (
-    <div
-      aria-hidden
-      onPointerDown={onPointerDown}
-      className="absolute right-0 top-1 bottom-1 w-1.5 cursor-col-resize border-r border-border hover:border-accent"
-    />
-  );
-}
-
-interface RowProps {
-  item: TableItem;
-  index: number;
-  columns: ColumnId[];
-  template: string;
-  ctx: ProcessContext;
-  heat: boolean;
-  /** Seconds a new process is highlighted; 0 is off. */
-  highlightSecs: number;
-  tree: boolean;
-  selected: boolean;
-  isSelf: boolean;
-  offset: number;
-  height: number;
-  onSelect: (pid: number) => void;
-  onOpen: (pid: number, startTime: number) => void;
-  onToggle: (pid: number) => void;
-}
-
-const Row = memo(function Row({
-  item,
-  index,
-  columns,
-  template,
-  ctx,
-  heat,
-  highlightSecs,
-  tree,
-  selected,
-  isSelf,
-  offset,
-  height,
-  onSelect,
-  onOpen,
-  onToggle,
-}: RowProps) {
-  const { row } = item;
-  const memPct = ctx.totalMemoryBytes > 0 ? (memoryOf(row) / ctx.totalMemoryBytes) * 100 : 0;
-  const isNew = isNewProcess(row.startTime, ctx.nowSecs, highlightSecs);
-  const run = RUN_COLOR[runState(row)];
-  return (
-    <div
-      role="row"
-      aria-rowindex={index + 2}
-      aria-selected={selected}
-      aria-level={tree ? (item.depth ?? 0) + 1 : undefined}
-      aria-expanded={tree && item.hasChildren ? item.expanded : undefined}
-      data-pid={row.pid}
-      data-group={item.group ? "" : undefined}
-      data-run={heat ? runState(row) : undefined}
-      onClick={() => onSelect(row.pid)}
-      onDoubleClick={() => (item.group ? onToggle(row.pid) : onOpen(row.pid, row.startTime))}
-      onContextMenu={() => onSelect(row.pid)}
-      className={cn(
-        "group absolute left-0 top-0 grid w-full items-center border-b border-border/60 text-[0.875rem]",
-        selected ? "bg-accent-soft" : isNew ? "bg-accent-soft/40" : "hover:bg-surface-2",
-        item.group && "font-medium",
-      )}
-      style={{ transform: `translateY(${offset}px)`, height, gridTemplateColumns: template }}
-    >
-      {columns.map((id) => {
-        const col = COLUMN_BY_ID[id];
-        const statusTint = heat && id === "status";
-        const level: HeatLevel = !heat
-          ? 0
-          : id === "cpu"
-            ? heatLevel(row.cpuPercent)
-            : id === "memory" || id === "memoryPercent"
-              ? memoryHeatLevel(memPct)
-              : 0;
-        return (
-          <div
-            key={id}
-            role="gridcell"
-            title={
-              item.group && (id === "memory" || id === "memoryPercent")
-                ? GROUP_MEMORY_NOTE
-                : cellTitle(id, row)
-            }
-            className={cn(
-              "flex h-full min-w-0 items-center px-2",
-              col.align === "right" && "num justify-end",
-              id === "name" && "font-medium",
-              // Stay in view while the other columns scroll sideways. Needs an
-              // opaque background that matches the row's state.
-              id === "name" &&
-                cn(
-                  "sticky left-0 z-[1]",
-                  selected
-                    ? "bg-accent-soft"
-                    : isNew
-                      ? "bg-[color-mix(in_srgb,var(--accent-soft)_40%,var(--surface))]"
-                      : "bg-surface group-hover:bg-surface-2",
-                ),
-              // Zero activity recedes so real disk I/O stands out.
-              ((id === "diskRead" && row.diskReadPerSec <= 0) ||
-                (id === "diskWrite" && row.diskWritePerSec <= 0)) &&
-                !row.restricted &&
-                "text-fg-subtle",
-              (id === "exe" || id === "cmd") &&
-                "selectable font-mono text-[0.8125rem] text-fg-muted",
-            )}
-            style={{
-              background: statusTint ? (run.bg ?? HEAT_BG[level]) : HEAT_BG[level],
-              color: statusTint ? run.fg : undefined,
-              // A coloured edge on the first cell marks the live state.
-              boxShadow: heat && id === columns[0] ? `inset 3px 0 0 0 ${run.bar}` : undefined,
-            }}
-          >
-            {id === "name" && tree && (
-              <span
-                className="flex shrink-0 items-center"
-                style={{ width: (item.depth ?? 0) * INDENT + 18 }}
-              >
-                <span style={{ width: (item.depth ?? 0) * INDENT }} />
-                {item.hasChildren && (
-                  <button
-                    type="button"
-                    tabIndex={-1}
-                    aria-label={item.expanded ? `Collapse ${row.name}` : `Expand ${row.name}`}
-                    onClick={(e) => {
-                      e.stopPropagation();
-                      onToggle(row.pid);
-                    }}
-                    className="grid size-4 place-items-center rounded text-fg-muted hover:bg-border"
-                  >
-                    {item.expanded ? (
-                      <ChevronDown size="0.8125rem" />
-                    ) : (
-                      <ChevronRight size="0.8125rem" />
-                    )}
-                  </button>
-                )}
-              </span>
-            )}
-            <span className="truncate">
-              {item.group && id === "pid" ? "—" : cellContent(id, row, ctx)}
-            </span>
-            {id === "name" && isNew && (
-              <span className="ml-2 shrink-0 rounded bg-accent-soft px-1 text-[0.6875rem] font-normal text-accent">
-                New
-              </span>
-            )}
-            {id === "name" && isSelf && (
-              <span className="ml-2 shrink-0 rounded bg-surface-2 px-1 text-[0.6875rem] font-normal text-fg-muted">
-                this app
-              </span>
-            )}
-          </div>
-        );
-      })}
-    </div>
-  );
-});
diff --git a/src/features/processes/ProcessToolbar.tsx b/src/features/processes/ProcessToolbar.tsx
index c5af647..f612cb0 100644
--- a/src/features/processes/ProcessToolbar.tsx
+++ b/src/features/processes/ProcessToolbar.tsx
@@ -10,8 +10,9 @@ import {
 } from "lucide-react";
 import { DropdownMenu } from "radix-ui";
 import { useEffect, useRef } from "react";
-import { cn } from "@/lib/cn";
-import { useProcessStore } from "@/stores/processStore";
+import { outlineButton } from "@/components/ui/button";
+import { type Segment, SegmentedControl } from "@/components/ui/SegmentedControl";
+import { type ProcessViewMode, useProcessStore } from "@/stores/processStore";
 import type { ProcessRow } from "@/types";
 import { COLUMNS, FILTER_PRESETS } from "./logic";
 import { ExportMenu } from "./ExportMenu";
@@ -32,7 +33,7 @@ export function ProcessToolbar({
     <div className="flex flex-wrap items-center gap-2 pb-3">
       <SearchBox />
       <PresetSelect />
-      <span className="num text-fg-muted" aria-live="polite">
+      <span className="num text-fg-muted">
         {mode !== "list" || shown === total
           ? `${total} processes`
           : `${shown} of ${total} processes`}
@@ -120,31 +121,27 @@ function PresetSelect() {
 function ModeToggle() {
   const mode = useProcessStore((s) => s.mode);
   const setMode = useProcessStore((s) => s.setMode);
-  const item = (id: typeof mode, label: string, Icon: typeof List) => (
-    <button
-      type="button"
-      role="radio"
-      aria-checked={mode === id}
-      aria-label={label}
-      title={label}
-      onClick={() => setMode(id)}
-      className={cn(
-        "grid size-7 place-items-center rounded text-fg-muted",
-        mode === id && "bg-surface text-fg shadow-sm",
-      )}
-    >
-      <Icon size="0.9375rem" />
-    </button>
-  );
   return (
-    <div role="radiogroup" aria-label="View" className="flex gap-0.5 rounded-md bg-surface-2 p-0.5">
-      {item("list", "List view", List)}
-      {item("tree", "Tree view", ListTree)}
-      {item("apps", "Applications view (group processes by program)", Layers)}
-    </div>
+    <SegmentedControl
+      label="View"
+      value={mode}
+      onChange={setMode}
+      segments={MODES}
+      itemClassName="grid size-7 place-items-center p-0"
+    />
   );
 }
 
+const MODES: readonly Segment<ProcessViewMode>[] = [
+  { value: "list", title: "List view", label: <List size="0.9375rem" aria-hidden /> },
+  { value: "tree", title: "Tree view", label: <ListTree size="0.9375rem" aria-hidden /> },
+  {
+    value: "apps",
+    title: "Applications view (group processes by program)",
+    label: <Layers size="0.9375rem" aria-hidden />,
+  },
+];
+
 function ColumnMenu() {
   const visible = useProcessStore((s) => s.visibleColumns);
   const toggle = useProcessStore((s) => s.toggleColumn);
@@ -152,10 +149,7 @@ function ColumnMenu() {
   return (
     <DropdownMenu.Root>
       <DropdownMenu.Trigger asChild>
-        <button
-          type="button"
-          className="flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg"
-        >
+        <button type="button" className={outlineButton}>
           <Columns3 size="0.875rem" aria-hidden />
           Columns
         </button>
diff --git a/src/features/processes/ProcessesPage.test.tsx b/src/features/processes/ProcessesPage.test.tsx
index 77f643d..5d6d508 100644
--- a/src/features/processes/ProcessesPage.test.tsx
+++ b/src/features/processes/ProcessesPage.test.tsx
@@ -116,6 +116,20 @@ describe("ProcessesPage", () => {
     expect(useUiStore.getState().selectedPid).toBe(processes[1]?.pid);
   });
 
+  it("resizes a column from the keyboard", async () => {
+    useProcessStore.setState({ columnWidths: {} });
+    render(<ProcessesPage />);
+    const handle = screen.getByRole("separator", { name: "Resize PID column" });
+    const before = Number(handle.getAttribute("aria-valuenow"));
+    handle.focus();
+    await userEvent.keyboard("{ArrowRight}{ArrowRight}");
+    expect(useProcessStore.getState().columnWidths.pid).toBe(before + 16);
+    await userEvent.keyboard("{ArrowLeft}");
+    expect(handle).toHaveAttribute("aria-valuenow", String(before + 8));
+    // Arrows on the handle must not reach the grid's row navigation.
+    expect(useProcessStore.getState().selectedPid).toBeNull();
+  });
+
   it("collapses and expands all in list view", async () => {
     useMetricsStore.setState({
       tick: makeTick([
diff --git a/src/features/processes/ProcessesPage.tsx b/src/features/processes/ProcessesPage.tsx
index 76ed8c6..39e10af 100644
--- a/src/features/processes/ProcessesPage.tsx
+++ b/src/features/processes/ProcessesPage.tsx
@@ -5,6 +5,8 @@ import { useMemoryDetail } from "@/features/memory/useMemoryDetail";
 import { requestAction } from "./actions";
 import { ProcessContextMenu } from "./ProcessContextMenu";
 import { ProcessTable } from "./ProcessTable";
+import { ProcessToolbar } from "./ProcessToolbar";
+import { useProcessView } from "./useProcessView";
 import type { ProcessRow } from "@/types";
 
 const withContextMenu = (
@@ -12,8 +14,6 @@ const withContextMenu = (
   find: (pid: number) => ProcessRow | undefined,
 ) => <ProcessContextMenu find={find}>{table}</ProcessContextMenu>;
 const requestTerminate = (row: ProcessRow) => void requestAction(row, { type: "terminate" });
-import { ProcessToolbar } from "./ProcessToolbar";
-import { useProcessView } from "./useProcessView";
 
 export function ProcessesPage() {
   // Proportional memory, so every view shows the figure the Memory page does.
diff --git a/src/features/processes/actions.test.tsx b/src/features/processes/actions.test.tsx
index 32fba3a..1f43935 100644
--- a/src/features/processes/actions.test.tsx
+++ b/src/features/processes/actions.test.tsx
@@ -18,7 +18,7 @@ vi.mock("@/services/ipc", async (importOriginal) => {
 });
 
 // Imported after the mock is registered.
-const { requestAction, useActionStore } = await import("./actions");
+const { confirmPending, requestAction, useActionStore } = await import("./actions");
 
 const row: ProcessRow = { ...(mockProcesses(1, 1_800_000_000)[0] as ProcessRow), name: "node" };
 const allowed: ProtectionAssessment = { level: "allowed", reasons: [] };
@@ -98,6 +98,41 @@ describe("process action flow", () => {
     expect(useToastStore.getState().toasts[0]?.message).toBe("Done.");
   });
 
+  it("ignores new requests while an action is running", async () => {
+    backend.assessProcessAction.mockResolvedValue(allowed);
+    await requestAction(row, { type: "terminate" });
+    let finish: (v: { message: string }) => void = () => {};
+    backend.performProcessAction.mockImplementationOnce(
+      () =>
+        new Promise((resolve) => {
+          finish = resolve;
+        }),
+    );
+    const confirming = confirmPending();
+    await requestAction(row, { type: "forceKill" });
+    expect(backend.assessProcessAction).toHaveBeenCalledTimes(1);
+    finish({ message: "Done." });
+    await confirming;
+    expect(useActionStore.getState()).toMatchObject({ pending: null, busy: false });
+  });
+
+  it("opens only the newest request's dialog when assessments overlap", async () => {
+    let first: (a: ProtectionAssessment) => void = () => {};
+    backend.assessProcessAction
+      .mockImplementationOnce(
+        () =>
+          new Promise((resolve) => {
+            first = resolve;
+          }),
+      )
+      .mockResolvedValueOnce(allowed);
+    const older = requestAction(row, { type: "terminate" });
+    await requestAction(row, { type: "forceKill" });
+    first(allowed);
+    await older;
+    expect(useActionStore.getState().pending?.action).toEqual({ type: "forceKill" });
+  });
+
   it("offers force end when a graceful close is impossible", async () => {
     backend.assessProcessAction.mockResolvedValue(allowed);
     backend.performProcessAction.mockRejectedValueOnce({
diff --git a/src/features/processes/actions.ts b/src/features/processes/actions.ts
index 5b37f22..1a23940 100644
--- a/src/features/processes/actions.ts
+++ b/src/features/processes/actions.ts
@@ -36,16 +36,21 @@ export const PRIORITY_LABELS: Record<PriorityLevel, string> = {
   high: "High",
 };
 
+/** Bumped per request so only the newest assessment opens a dialog or runs. */
+let latestRequest = 0;
+
 /** Starts an action. Shows the confirmation dialog when required. */
 export async function requestAction(row: ProcessRow, action: ProcessAction): Promise<void> {
-  if (!isBackendAvailable()) return;
+  if (!isBackendAvailable() || useActionStore.getState().busy) return;
+  const request = ++latestRequest;
   let assessment: ProtectionAssessment;
   try {
     assessment = await backend.assessProcessAction(row.pid, action);
   } catch (e) {
-    toast.error(toAppError(e).message);
+    if (request === latestRequest) toast.error(toAppError(e).message);
     return;
   }
+  if (request !== latestRequest || useActionStore.getState().busy) return;
   if (assessment.level !== "allowed" || needsConfirmation(action)) {
     useActionStore.setState({ pending: { row, action, assessment } });
     return;
@@ -59,11 +64,14 @@ export function cancelPending(): void {
 
 /** Confirms the pending dialog. Blocked actions cannot be confirmed. */
 export async function confirmPending(): Promise<void> {
-  const { pending } = useActionStore.getState();
-  if (!pending || pending.assessment.level === "blocked") return;
+  const { pending, busy } = useActionStore.getState();
+  if (!pending || busy || pending.assessment.level === "blocked") return;
   useActionStore.setState({ busy: true });
   await perform(pending.row, pending.action, pending.assessment.level === "warning");
-  useActionStore.setState({ busy: false, pending: null });
+  useActionStore.setState((s) => ({
+    busy: false,
+    pending: s.pending === pending ? null : s.pending,
+  }));
 }
 
 async function perform(row: ProcessRow, action: ProcessAction, acknowledge: boolean) {
diff --git a/src/features/processes/cells.tsx b/src/features/processes/cells.tsx
index e443270..00abcd1 100644
--- a/src/features/processes/cells.tsx
+++ b/src/features/processes/cells.tsx
@@ -32,7 +32,11 @@ const rate = (v: number) => (v > 0 ? formatBytesPerSecond(v) : "0 B/s");
 const opt = (v: number | null) => (v == null ? NOT_AVAILABLE : String(v));
 
 /** Display content for a cell. Kept separate from layout for reuse in exports/tree. */
-export function cellContent(column: ColumnId, row: ProcessRow, ctx: ProcessContext): ReactNode {
+export function cellContent(
+  column: ColumnId,
+  row: ProcessRow,
+  ctx: Pick<ProcessContext, "nowSecs" | "totalMemoryBytes">,
+): ReactNode {
   if (row.restricted && RESTRICTED_COLUMNS.has(column)) return NOT_AVAILABLE;
   switch (column) {
     case "name":
diff --git a/src/features/processes/logic.ts b/src/features/processes/logic.ts
index bbb8a9d..a94b60a 100644
--- a/src/features/processes/logic.ts
+++ b/src/features/processes/logic.ts
@@ -227,7 +227,7 @@ export const DEFAULT_VISIBLE_COLUMNS: readonly ColumnId[] = COLUMNS.filter(
   (c) => c.defaultVisible,
 ).map((c) => c.id);
 
-export function runtimeSecs(row: ProcessRow, ctx: ProcessContext): number {
+export function runtimeSecs(row: ProcessRow, ctx: Pick<ProcessContext, "nowSecs">): number {
   return row.startTime > 0 ? Math.max(0, ctx.nowSecs - row.startTime) : -1;
 }
 
@@ -405,6 +405,11 @@ export function userOf(rows: readonly ProcessRow[], pid: number | undefined): st
   return rows.find((r) => r.pid === pid)?.user ?? null;
 }
 
+/** DOM id of a process table row, for `aria-activedescendant`. */
+export function rowDomId(pid: number): string {
+  return `proc-row-${pid}`;
+}
+
 /** Whether a process started within the last `windowSecs` (0 turns the highlight off). */
 export function isNewProcess(startTime: number, nowSecs: number, windowSecs: number): boolean {
   return (
diff --git a/src/features/services/ServicesPage.tsx b/src/features/services/ServicesPage.tsx
index 87bcb95..09a358d 100644
--- a/src/features/services/ServicesPage.tsx
+++ b/src/features/services/ServicesPage.tsx
@@ -1,5 +1,5 @@
 import { CircleAlert, CircleCheck, CircleMinus, Lock, RefreshCw } from "lucide-react";
-import { useMemo, useState } from "react";
+import { memo, useCallback, useMemo, useState } from "react";
 import { EmptyState } from "@/components/EmptyState";
 import { PageHeader } from "@/components/PageHeader";
 import { SearchBox } from "@/components/SearchBox";
@@ -49,20 +49,23 @@ export function ServicesPage() {
   );
   const failed = data?.filter((s) => s.activeState === "failed").length ?? 0;
 
-  async function act(s: ServiceInfo, action: ServiceAction) {
-    setPending(s.unit);
-    try {
-      await backend.controlService(scope, s.unit, action);
-      toast.success(`${DONE[action]} ${s.unit}…`);
-    } catch (e) {
-      const err = toAppError(e);
-      // Declining the confirmation is a choice, not an error.
-      if (err.kind !== "operationCancelled") toast.error(err.message);
-    } finally {
-      setPending(null);
-      refresh();
-    }
-  }
+  const act = useCallback(
+    async (s: ServiceInfo, action: ServiceAction) => {
+      setPending(s.unit);
+      try {
+        await backend.controlService(scope, s.unit, action);
+        toast.success(`${DONE[action]} ${s.unit}…`);
+      } catch (e) {
+        const err = toAppError(e);
+        // Declining the confirmation is a choice, not an error.
+        if (err.kind !== "operationCancelled") toast.error(err.message);
+      } finally {
+        setPending(null);
+        refresh();
+      }
+    },
+    [scope, refresh],
+  );
 
   return (
     <>
@@ -155,8 +158,8 @@ export function ServicesPage() {
                   key={s.unit}
                   service={s}
                   busy={pending === s.unit}
-                  onAct={(a) => void act(s, a)}
-                  onOpen={() => s.mainPid != null && openProcess(s.mainPid)}
+                  onAct={act}
+                  onOpen={openProcess}
                 />
               ))}
             </tbody>
@@ -188,17 +191,25 @@ function StateBadge({ service }: { service: ServiceInfo }) {
   );
 }
 
-function Row({
-  service: s,
-  busy,
-  onAct,
-  onOpen,
-}: {
+interface RowProps {
   service: ServiceInfo;
   busy: boolean;
-  onAct: (action: ServiceAction) => void;
-  onOpen: () => void;
-}) {
+  onAct: (service: ServiceInfo, action: ServiceAction) => Promise<void>;
+  onOpen: (pid: number) => void;
+}
+
+/** Every poll delivers new service objects; compare their values instead. */
+function sameRowProps(prev: RowProps, next: RowProps): boolean {
+  if (prev.busy !== next.busy || prev.onAct !== next.onAct || prev.onOpen !== next.onOpen) {
+    return false;
+  }
+  const a = prev.service;
+  const b = next.service;
+  return (Object.keys(b) as (keyof ServiceInfo)[]).every((k) => a[k] === b[k]);
+}
+
+const Row = memo(function Row({ service: s, busy, onAct: act, onOpen }: RowProps) {
+  const onAct = (action: ServiceAction) => void act(s, action);
   const running = s.activeState === "active" || s.activeState === "activating";
   return (
     <tr className="border-t border-border/60 hover:bg-surface-2">
@@ -216,7 +227,7 @@ function Row({
         {s.mainPid != null ? (
           <button
             type="button"
-            onClick={onOpen}
+            onClick={() => s.mainPid != null && onOpen(s.mainPid)}
             aria-label={`Open process ${s.mainPid} of ${s.unit}`}
             className="text-accent underline"
           >
@@ -276,4 +287,4 @@ function Row({
       </td>
     </tr>
   );
-}
+}, sameRowProps);
diff --git a/src/features/settings/SettingsPage.test.tsx b/src/features/settings/SettingsPage.test.tsx
new file mode 100644
index 0000000..9727523
--- /dev/null
+++ b/src/features/settings/SettingsPage.test.tsx
@@ -0,0 +1,47 @@
+import { render, screen } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { useSettingsStore } from "@/stores/settingsStore";
+import { SettingsPage } from "./SettingsPage";
+
+const originalReset = useSettingsStore.getState().reset;
+const reset = vi.fn(() => Promise.resolve());
+
+beforeEach(() => {
+  reset.mockClear();
+  useSettingsStore.setState({ reset });
+});
+afterEach(() => useSettingsStore.setState({ reset: originalReset }));
+
+describe("Reset all settings", () => {
+  it("asks in an in-app dialog and does nothing on Cancel", async () => {
+    const confirm = vi.spyOn(window, "confirm");
+    render(<SettingsPage />);
+    await userEvent.click(screen.getByRole("button", { name: "Reset" }));
+    const dialog = screen.getByRole("alertdialog", { name: "Reset all settings?" });
+    expect(dialog).toHaveTextContent(/alert rules/);
+    expect(screen.getByRole("button", { name: "Cancel" })).toHaveFocus();
+
+    await userEvent.click(screen.getByRole("button", { name: "Cancel" }));
+    expect(screen.queryByRole("alertdialog")).toBeNull();
+    expect(reset).not.toHaveBeenCalled();
+    expect(confirm).not.toHaveBeenCalled();
+    confirm.mockRestore();
+  });
+
+  it("resets once confirmed", async () => {
+    render(<SettingsPage />);
+    await userEvent.click(screen.getByRole("button", { name: "Reset" }));
+    await userEvent.click(screen.getByRole("button", { name: "Reset settings" }));
+    expect(reset).toHaveBeenCalledOnce();
+    expect(screen.queryByRole("alertdialog")).toBeNull();
+  });
+
+  it("closes on Escape without resetting", async () => {
+    render(<SettingsPage />);
+    await userEvent.click(screen.getByRole("button", { name: "Reset" }));
+    await userEvent.keyboard("{Escape}");
+    expect(screen.queryByRole("alertdialog")).toBeNull();
+    expect(reset).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/features/settings/SettingsPage.tsx b/src/features/settings/SettingsPage.tsx
index 1cdb81b..010015c 100644
--- a/src/features/settings/SettingsPage.tsx
+++ b/src/features/settings/SettingsPage.tsx
@@ -1,7 +1,9 @@
 import { Download, Monitor, Moon, RotateCcw, Sun } from "lucide-react";
+import { AlertDialog } from "radix-ui";
 import { useState, type ReactNode } from "react";
 import { Card, CardHeader } from "@/components/ui/Card";
 import { PageHeader } from "@/components/PageHeader";
+import { type Segment, SegmentedControl } from "@/components/ui/SegmentedControl";
 import { Switch } from "@/components/ui/Switch";
 import { cn } from "@/lib/cn";
 import { backend, isBackendAvailable, toAppError } from "@/services/ipc";
@@ -11,12 +13,21 @@ import { useSettingsStore, type ThemePreference } from "@/stores/settingsStore";
 import { toast } from "@/stores/toastStore";
 import { useUiStore } from "@/stores/uiStore";
 
-const THEMES: { id: ThemePreference; label: string; icon: typeof Sun }[] = [
-  { id: "system", label: "System", icon: Monitor },
-  { id: "light", label: "Light", icon: Sun },
-  { id: "dark", label: "Dark", icon: Moon },
+const THEMES: readonly Segment<ThemePreference>[] = [
+  { value: "system", label: themeLabel(Monitor, "System") },
+  { value: "light", label: themeLabel(Sun, "Light") },
+  { value: "dark", label: themeLabel(Moon, "Dark") },
 ];
 
+function themeLabel(Icon: typeof Sun, text: string) {
+  return (
+    <>
+      <Icon size="0.875rem" aria-hidden />
+      {text}
+    </>
+  );
+}
+
 const INTERVALS = [
   { ms: 500, label: "500 ms" },
   { ms: 1000, label: "1 second" },
@@ -198,28 +209,14 @@ export function SettingsPage() {
 
         <Section title="Appearance">
           <Field label="Theme" id="theme-label">
-            <div
-              role="radiogroup"
-              aria-labelledby="theme-label"
-              className="inline-flex gap-1 rounded-lg bg-surface-2 p-1"
-            >
-              {THEMES.map(({ id, label, icon: Icon }) => (
-                <button
-                  key={id}
-                  type="button"
-                  role="radio"
-                  aria-checked={s.theme === id}
-                  onClick={() => s.update({ theme: id })}
-                  className={cn(
-                    "flex items-center gap-1.5 rounded-md px-3 py-1.5 text-fg-muted",
-                    s.theme === id && "bg-surface text-fg shadow-sm",
-                  )}
-                >
-                  <Icon size="0.875rem" aria-hidden />
-                  {label}
-                </button>
-              ))}
-            </div>
+            <SegmentedControl
+              labelledBy="theme-label"
+              value={s.theme}
+              onChange={(theme) => s.update({ theme })}
+              segments={THEMES}
+              className="inline-flex gap-1 rounded-lg p-1"
+              itemClassName="flex items-center gap-1.5 rounded-md px-3 py-1.5"
+            />
           </Field>
           <Toggle
             label="Compact table"
@@ -262,15 +259,7 @@ export function SettingsPage() {
           />
           <DiagnosticsExport disabled={!backendReady} />
           <Field label="Reset all settings" description="Restores defaults, including alert rules.">
-            <button
-              type="button"
-              onClick={() => {
-                if (window.confirm("Reset all settings to their defaults?")) void s.reset();
-              }}
-              className="flex h-8 items-center gap-1.5 rounded-md border border-border px-3 text-crit hover:bg-surface-2"
-            >
-              <RotateCcw size="0.875rem" aria-hidden /> Reset
-            </button>
+            <ResetSettings onReset={() => void s.reset()} />
           </Field>
         </Section>
       </div>
@@ -278,6 +267,51 @@ export function SettingsPage() {
   );
 }
 
+function ResetSettings({ onReset }: { onReset: () => void }) {
+  return (
+    <AlertDialog.Root>
+      <AlertDialog.Trigger asChild>
+        <button
+          type="button"
+          className="flex h-8 items-center gap-1.5 rounded-md border border-border px-3 text-crit hover:bg-surface-2"
+        >
+          <RotateCcw size="0.875rem" aria-hidden /> Reset
+        </button>
+      </AlertDialog.Trigger>
+      <AlertDialog.Portal>
+        <AlertDialog.Overlay className="fixed inset-0 z-50 bg-black/40" />
+        <AlertDialog.Content className="fixed left-1/2 top-1/2 z-50 w-[440px] max-w-[calc(100vw-2rem)] -translate-x-1/2 -translate-y-1/2 rounded-xl border border-border bg-surface p-5 shadow-xl">
+          <AlertDialog.Title className="text-base font-semibold">
+            Reset all settings?
+          </AlertDialog.Title>
+          <AlertDialog.Description className="mt-2 text-fg-muted">
+            Every preference returns to its default, including your alert rules.
+          </AlertDialog.Description>
+          <div className="mt-5 flex justify-end gap-2">
+            <AlertDialog.Cancel asChild>
+              <button
+                type="button"
+                className="h-8 rounded-md border border-border px-3 hover:bg-surface-2"
+              >
+                Cancel
+              </button>
+            </AlertDialog.Cancel>
+            <AlertDialog.Action asChild>
+              <button
+                type="button"
+                onClick={onReset}
+                className="h-8 rounded-md bg-danger px-3 font-medium text-white"
+              >
+                Reset settings
+              </button>
+            </AlertDialog.Action>
+          </div>
+        </AlertDialog.Content>
+      </AlertDialog.Portal>
+    </AlertDialog.Root>
+  );
+}
+
 function DiagnosticsExport({ disabled }: { disabled: boolean }) {
   const [processes, setProcesses] = useState(false);
   const [commandLines, setCommandLines] = useState(false);
diff --git a/src/features/startup/StartupPage.tsx b/src/features/startup/StartupPage.tsx
index 2ec6422..3b5fc95 100644
--- a/src/features/startup/StartupPage.tsx
+++ b/src/features/startup/StartupPage.tsx
@@ -3,6 +3,7 @@ import { RefreshCw } from "lucide-react";
 import { EmptyState } from "@/components/EmptyState";
 import { PageHeader } from "@/components/PageHeader";
 import { SearchBox } from "@/components/SearchBox";
+import { outlineButton } from "@/components/ui/button";
 import { Card } from "@/components/ui/Card";
 import { Switch } from "@/components/ui/Switch";
 import { cn } from "@/lib/cn";
@@ -12,9 +13,6 @@ import { toast } from "@/stores/toastStore";
 import { useSettingsStore } from "@/stores/settingsStore";
 import { filterItems } from "./logic";
 
-const btn =
-  "flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50";
-
 export function StartupPage() {
   const [query, setQuery] = useState("");
   const [pending, setPending] = useState<ReadonlySet<string>>(new Set());
@@ -52,7 +50,7 @@ export function StartupPage() {
         title="Startup"
         description="Programs that start when you log in. Turning one off hides it; nothing is deleted."
         actions={
-          <button type="button" className={btn} onClick={refresh}>
+          <button type="button" className={outlineButton} onClick={refresh}>
             <RefreshCw size="0.875rem" aria-hidden /> Refresh
           </button>
         }
diff --git a/src/features/storage/RemovableDrives.test.tsx b/src/features/storage/RemovableDrives.test.tsx
index 29882be..160f862 100644
--- a/src/features/storage/RemovableDrives.test.tsx
+++ b/src/features/storage/RemovableDrives.test.tsx
@@ -1,7 +1,8 @@
-import { render, screen, waitFor } from "@testing-library/react";
+import { act, render, screen, waitFor } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { beforeEach, expect, it, vi } from "vitest";
-import type { Volume } from "@/types";
+import { useMetricsStore } from "@/stores/metricsStore";
+import type { MetricsTick, Volume } from "@/types";
 import { RemovableDrives } from "./RemovableDrives";
 
 const api = vi.hoisted(() => ({
@@ -28,6 +29,7 @@ const unmounted: Volume = { ...mounted, device: "/dev/sdc1", label: null, mountP
 
 beforeEach(() => {
   Object.values(api).forEach((m) => m.mockReset());
+  useMetricsStore.setState({ tick: null });
 });
 
 it("shows nothing when there are no external drives", async () => {
@@ -56,6 +58,19 @@ it("passes the device to the backend and reloads the list", async () => {
   await waitFor(() => expect(api.listVolumes).toHaveBeenCalledTimes(2));
 });
 
+it("keeps the list on screen while reloading after the mount table changes", async () => {
+  api.listVolumes.mockResolvedValueOnce([unmounted]).mockReturnValueOnce(new Promise(() => {}));
+  render(<RemovableDrives />);
+  await screen.findByRole("button", { name: "Mount /dev/sdc1" });
+  act(() =>
+    useMetricsStore.setState({
+      tick: { disks: [{ mountPoint: "/run/media/a/NEW" }] } as unknown as MetricsTick,
+    }),
+  );
+  await waitFor(() => expect(api.listVolumes).toHaveBeenCalledTimes(2));
+  expect(screen.getByRole("button", { name: "Mount /dev/sdc1" })).toBeInTheDocument();
+});
+
 it("offers Power off only for an unmounted drive that supports it", async () => {
   api.listVolumes.mockResolvedValue([
     mounted,
diff --git a/src/features/storage/RemovableDrives.tsx b/src/features/storage/RemovableDrives.tsx
index d408e9b..ae09815 100644
--- a/src/features/storage/RemovableDrives.tsx
+++ b/src/features/storage/RemovableDrives.tsx
@@ -26,7 +26,9 @@ export function RemovableDrives() {
   // A drive being mounted or unmounted changes the mount table within a tick.
   const mounts = useMetricsStore((s) => s.tick?.disks.map((d) => d.mountPoint).join("\n"));
   // Drive management is optional (e.g. UDisks missing): an error shows nothing.
-  const { data, refresh } = useRemoteData(() => backend.listVolumes(), mounts ?? "", POLL_MS);
+  const { data, refresh } = useRemoteData(() => backend.listVolumes(), mounts ?? "", POLL_MS, {
+    keepPreviousData: true,
+  });
   const volumes = data ?? [];
 
   const act = async (v: Volume, what: "mount" | "unmount" | "powerOff") => {
diff --git a/src/features/system-info/SystemInfoPage.tsx b/src/features/system-info/SystemInfoPage.tsx
index 3bdfe27..22083cb 100644
--- a/src/features/system-info/SystemInfoPage.tsx
+++ b/src/features/system-info/SystemInfoPage.tsx
@@ -3,6 +3,7 @@ import { useRef, type KeyboardEvent, type ReactNode } from "react";
 import { create } from "zustand";
 import { ConnectionNotice } from "@/components/ConnectionNotice";
 import { PageHeader } from "@/components/PageHeader";
+import { outlineButton } from "@/components/ui/button";
 import { Card } from "@/components/ui/Card";
 import { cn } from "@/lib/cn";
 import { useRemoteData } from "@/hooks/useRemoteData";
@@ -94,7 +95,7 @@ export function SystemInfoPage() {
           type="button"
           disabled={!isBackendAvailable()}
           onClick={() => void exportSummary()}
-          className="flex h-8 items-center gap-1.5 rounded-md border border-border px-2.5 text-fg-muted hover:text-fg disabled:opacity-50"
+          className={outlineButton}
         >
           <Download size="0.875rem" aria-hidden /> Export summary…
         </button>
diff --git a/src/hooks/useRemoteData.test.ts b/src/hooks/useRemoteData.test.ts
new file mode 100644
index 0000000..4818192
--- /dev/null
+++ b/src/hooks/useRemoteData.test.ts
@@ -0,0 +1,61 @@
+import { act, renderHook, waitFor } from "@testing-library/react";
+import { expect, it, vi } from "vitest";
+import { useRemoteData } from "./useRemoteData";
+
+vi.mock("@/services/ipc", async (orig) => ({
+  ...(await orig<typeof import("@/services/ipc")>()),
+  isBackendAvailable: () => true,
+}));
+
+/** A fetcher per call whose results the test releases in any order. */
+function deferredCalls() {
+  const resolvers: ((value: string) => void)[] = [];
+  const fetcher = vi.fn(
+    () =>
+      new Promise<string>((resolve) => {
+        resolvers.push(resolve);
+      }),
+  );
+  return { fetcher, resolve: (call: number, value: string) => resolvers[call]?.(value) };
+}
+
+it("drops the previous key's data by default", async () => {
+  const { fetcher, resolve } = deferredCalls();
+  const { result, rerender } = renderHook(({ k }) => useRemoteData(fetcher, k), {
+    initialProps: { k: "a" },
+  });
+  act(() => resolve(0, "A"));
+  await waitFor(() => expect(result.current.data).toBe("A"));
+  rerender({ k: "b" });
+  expect(result.current.data).toBeNull();
+  expect(result.current.loading).toBe(true);
+});
+
+it("keeps the previous key's data until the new key's arrives with keepPreviousData", async () => {
+  const { fetcher, resolve } = deferredCalls();
+  const { result, rerender } = renderHook(
+    ({ k }) => useRemoteData(fetcher, k, undefined, { keepPreviousData: true }),
+    { initialProps: { k: "a" } },
+  );
+  act(() => resolve(0, "A"));
+  await waitFor(() => expect(result.current.data).toBe("A"));
+  rerender({ k: "b" });
+  expect(result.current.data).toBe("A");
+  expect(result.current.loading).toBe(false);
+  act(() => resolve(1, "B"));
+  await waitFor(() => expect(result.current.data).toBe("B"));
+});
+
+it("ignores a slower earlier call that resolves after a newer one", async () => {
+  const { fetcher, resolve } = deferredCalls();
+  const { result, rerender } = renderHook(
+    ({ k }) => useRemoteData(fetcher, k, undefined, { keepPreviousData: true }),
+    { initialProps: { k: "a" } },
+  );
+  rerender({ k: "b" });
+  act(() => resolve(1, "B"));
+  await waitFor(() => expect(result.current.data).toBe("B"));
+  act(() => resolve(0, "A"));
+  await Promise.resolve();
+  expect(result.current.data).toBe("B");
+});
diff --git a/src/hooks/useRemoteData.ts b/src/hooks/useRemoteData.ts
index ee0457b..2af8235 100644
--- a/src/hooks/useRemoteData.ts
+++ b/src/hooks/useRemoteData.ts
@@ -11,6 +11,14 @@ export interface RemoteData<T> {
   refresh: () => void;
 }
 
+export interface RemoteDataOptions {
+  /**
+   * Keep showing the previous key's data until the new key's arrives, for
+   * keys that mean "reload" rather than "different data".
+   */
+  keepPreviousData?: boolean;
+}
+
 /**
  * Loads data with `fetcher` when the component mounts (and whenever `key`
  * changes), optionally repeating every `pollMs`. Polling stops on unmount, so
@@ -22,6 +30,7 @@ export function useRemoteData<T>(
   fetcher: () => Promise<T>,
   key: string,
   pollMs?: number,
+  { keepPreviousData = false }: RemoteDataOptions = {},
 ): RemoteData<T> {
   const [state, setState] = useState<{ key: string; data: T | null; error: AppError | null }>({
     key,
@@ -69,7 +78,8 @@ export function useRemoteData<T>(
 
   const refresh = useCallback(() => setNonce((n) => n + 1), []);
   // Results of a previous key are stale for this one.
-  const current = state.key === key ? state : { data: null, error: null };
+  const current =
+    state.key === key ? state : { data: keepPreviousData ? state.data : null, error: null };
   return {
     data: current.data,
     error: current.error,
diff --git a/src/services/benchmarks.test.ts b/src/services/benchmarks.test.ts
index d9d8e5a..c296980 100644
--- a/src/services/benchmarks.test.ts
+++ b/src/services/benchmarks.test.ts
@@ -1,43 +1,172 @@
-import { beforeEach, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 import { isActive, useBenchmarkStore } from "@/stores/benchmarkStore";
-import { cancelBenchmark } from "./benchmarks";
+import { useToastStore } from "@/stores/toastStore";
+import type { BenchmarkStatus, DiskTargetInfo } from "@/types";
+import { cancelBenchmark, initBenchmarks, loadDiskTargets, runBenchmark } from "./benchmarks";
 
-const cancel = vi.hoisted(() => vi.fn<() => Promise<void>>());
+const api = vi.hoisted(() => ({
+  cancelBenchmark: vi.fn<() => Promise<void>>(),
+  startBenchmark: vi.fn<() => Promise<BenchmarkStatus>>(),
+  getBenchmarkStatus: vi.fn<() => Promise<BenchmarkStatus>>(),
+  getBenchmarkHistory: vi.fn(() => Promise.resolve([])),
+  listDiskTargets: vi.fn<() => Promise<DiskTargetInfo[]>>(),
+}));
 vi.mock("@/services/ipc", async (orig) => ({
   ...(await orig<typeof import("@/services/ipc")>()),
-  backend: { cancelBenchmark: cancel },
+  isBackendAvailable: () => true,
+  backend: api,
 }));
+const listen = vi.hoisted(() => vi.fn());
+vi.mock("@tauri-apps/api/event", () => ({ listen }));
+
+const IDLE = useBenchmarkStore.getState().status;
+const running: BenchmarkStatus = {
+  ...IDLE,
+  state: "running",
+  runId: "fixture",
+  kind: "internet",
+  fraction: 0.5,
+  elapsedMs: 5000,
+};
 
 beforeEach(() => {
-  cancel.mockReset();
-  const store = useBenchmarkStore.getState();
-  store.setCancelling(false);
-  store.setStatus({ ...store.status, state: "running", runId: "fixture", kind: "internet" });
+  Object.values(api).forEach((m) => m.mockReset());
+  api.getBenchmarkHistory.mockResolvedValue([]);
+  listen.mockReset();
+  useToastStore.setState({ toasts: [] });
+  useBenchmarkStore.setState({ status: IDLE, cancelling: false, diskTargets: null });
+  useBenchmarkStore.getState().setStatus(running);
+});
+
+describe("cancelling", () => {
+  it("shows cancelling until the worker finishes and retains the active state", async () => {
+    let finish: () => void = () => {};
+    api.cancelBenchmark.mockImplementationOnce(
+      () =>
+        new Promise((resolve) => {
+          finish = resolve;
+        }),
+    );
+    const pending = cancelBenchmark();
+    expect(useBenchmarkStore.getState().cancelling).toBe(true);
+    expect(isActive(useBenchmarkStore.getState().status)).toBe(true);
+    finish();
+    await pending;
+    const store = useBenchmarkStore.getState();
+    store.setStatus({ ...store.status, stage: "Download" });
+    expect(useBenchmarkStore.getState().cancelling).toBe(true);
+    store.setStatus({ ...store.status, state: "cancelled" });
+    expect(useBenchmarkStore.getState().cancelling).toBe(false);
+  });
+
+  it("allows retry if the cancellation request fails", async () => {
+    api.cancelBenchmark.mockRejectedValueOnce(new Error("fixture failure"));
+    await cancelBenchmark();
+    expect(useBenchmarkStore.getState().cancelling).toBe(false);
+    expect(isActive(useBenchmarkStore.getState().status)).toBe(true);
+  });
+});
+
+describe("status ordering", () => {
+  const status = () => useBenchmarkStore.getState().status;
+
+  it("ignores an older snapshot of the same run", () => {
+    useBenchmarkStore.getState().setStatus({ ...running, elapsedMs: 4000, fraction: 0.4 });
+    expect(status().elapsedMs).toBe(5000);
+    useBenchmarkStore.getState().setStatus({ ...running, elapsedMs: 6000, fraction: 0.6 });
+    expect(status().elapsedMs).toBe(6000);
+  });
+
+  it("never returns a finished run to running", () => {
+    useBenchmarkStore.getState().setStatus({ ...running, state: "completed", fraction: 1 });
+    useBenchmarkStore.getState().setStatus({ ...running, elapsedMs: 9000 });
+    expect(status().state).toBe("completed");
+  });
+
+  it("accepts any status of a different run", () => {
+    useBenchmarkStore
+      .getState()
+      .setStatus({ ...running, runId: "next", elapsedMs: 0, fraction: 0 });
+    expect(status().runId).toBe("next");
+  });
+
+  it("keeps newer progress events when the start reply arrives late", async () => {
+    let reply: (s: BenchmarkStatus) => void = () => {};
+    api.startBenchmark.mockImplementationOnce(
+      () =>
+        new Promise((resolve) => {
+          reply = resolve;
+        }),
+    );
+    useBenchmarkStore.setState({ status: IDLE });
+    const started = runBenchmark("internet", "standard");
+    useBenchmarkStore.getState().setStatus(running);
+    reply({ ...running, state: "preparing", elapsedMs: 0, fraction: 0 });
+    await started;
+    expect(status()).toEqual(running);
+  });
 });
 
-it("shows cancelling until the worker finishes and retains the active state", async () => {
-  let finish: () => void = () => {};
-  cancel.mockImplementationOnce(
-    () =>
-      new Promise((resolve) => {
-        finish = resolve;
-      }),
-  );
-  const pending = cancelBenchmark();
-  expect(useBenchmarkStore.getState().cancelling).toBe(true);
-  expect(isActive(useBenchmarkStore.getState().status)).toBe(true);
-  finish();
-  await pending;
-  const store = useBenchmarkStore.getState();
-  store.setStatus({ ...store.status, stage: "Download" });
-  expect(useBenchmarkStore.getState().cancelling).toBe(true);
-  store.setStatus({ ...store.status, state: "cancelled" });
-  expect(useBenchmarkStore.getState().cancelling).toBe(false);
+describe("initBenchmarks", () => {
+  it("can be retried after subscribing to events fails, without leaking listeners", async () => {
+    const unlisten = vi.fn();
+    listen.mockResolvedValueOnce(unlisten).mockRejectedValueOnce(new Error("no event bus"));
+    await initBenchmarks();
+    expect(unlisten).toHaveBeenCalledTimes(1);
+    expect(useToastStore.getState().toasts[0]?.message).toBe("no event bus");
+    expect(api.getBenchmarkStatus).not.toHaveBeenCalled();
+
+    listen.mockResolvedValue(vi.fn());
+    api.getBenchmarkStatus.mockResolvedValue(running);
+    await initBenchmarks();
+    expect(listen).toHaveBeenCalledTimes(4);
+    expect(api.getBenchmarkStatus).toHaveBeenCalledTimes(1);
+  });
 });
 
-it("allows retry if the cancellation request fails", async () => {
-  cancel.mockRejectedValueOnce(new Error("fixture failure"));
-  await cancelBenchmark();
-  expect(useBenchmarkStore.getState().cancelling).toBe(false);
-  expect(isActive(useBenchmarkStore.getState().status)).toBe(true);
+describe("loadDiskTargets", () => {
+  const target = (id: string) => ({ id }) as DiskTargetInfo;
+
+  it("lists once, and again only on reload, keeping the old list meanwhile", async () => {
+    api.listDiskTargets.mockResolvedValueOnce([target("a")]);
+    await loadDiskTargets();
+    await loadDiskTargets();
+    expect(api.listDiskTargets).toHaveBeenCalledTimes(1);
+
+    let reply: (t: DiskTargetInfo[]) => void = () => {};
+    api.listDiskTargets.mockImplementationOnce(
+      () =>
+        new Promise((resolve) => {
+          reply = resolve;
+        }),
+    );
+    const reloading = loadDiskTargets({ reload: true });
+    expect(useBenchmarkStore.getState().diskTargets).toEqual([target("a")]);
+    reply([target("b")]);
+    await reloading;
+    expect(useBenchmarkStore.getState().diskTargets).toEqual([target("b")]);
+  });
+
+  it("keeps the old list when a reload fails, and applies only the newest of overlapping reloads", async () => {
+    useBenchmarkStore.setState({ diskTargets: [target("a")] });
+    api.listDiskTargets.mockRejectedValueOnce({ kind: "systemQueryFailed", message: "boom" });
+    await loadDiskTargets({ reload: true });
+    expect(useBenchmarkStore.getState().diskTargets).toEqual([target("a")]);
+    expect(useBenchmarkStore.getState().diskTargetsError).toBe("boom");
+
+    let slow: (t: DiskTargetInfo[]) => void = () => {};
+    api.listDiskTargets
+      .mockImplementationOnce(
+        () =>
+          new Promise((resolve) => {
+            slow = resolve;
+          }),
+      )
+      .mockResolvedValueOnce([target("new")]);
+    const first = loadDiskTargets({ reload: true });
+    await loadDiskTargets({ reload: true });
+    slow([target("old")]);
+    await first;
+    expect(useBenchmarkStore.getState().diskTargets).toEqual([target("new")]);
+  });
 });
diff --git a/src/services/benchmarks.ts b/src/services/benchmarks.ts
index 89f3853..391c59d 100644
--- a/src/services/benchmarks.ts
+++ b/src/services/benchmarks.ts
@@ -1,5 +1,5 @@
 /** Benchmark lifecycle: backend events into the store, and the run controls. */
-import { listen } from "@tauri-apps/api/event";
+import { listen, type UnlistenFn } from "@tauri-apps/api/event";
 import { isActive, useBenchmarkStore } from "@/stores/benchmarkStore";
 import { toast } from "@/stores/toastStore";
 import type { BenchmarkKind, BenchmarkProfile, BenchmarkResult, BenchmarkStatus } from "@/types";
@@ -9,6 +9,9 @@ const STATUS_EVENT = "benchmark://status";
 const RESULT_EVENT = "benchmark://result";
 
 let started = false;
+let unlisteners: UnlistenFn[] = [];
+/** Only the newest disk listing is applied when reloads overlap. */
+let diskTargetsRequest = 0;
 
 async function refreshHistory(): Promise<void> {
   try {
@@ -23,11 +26,23 @@ export async function initBenchmarks(): Promise<void> {
   if (started || !isBackendAvailable()) return;
   started = true;
   const store = useBenchmarkStore.getState();
-  await listen<BenchmarkStatus>(STATUS_EVENT, (e) => store.setStatus(e.payload));
-  await listen<BenchmarkResult>(RESULT_EVENT, (e) => {
-    store.setLatest(e.payload);
-    void refreshHistory();
-  });
+  try {
+    unlisteners.push(
+      await listen<BenchmarkStatus>(STATUS_EVENT, (e) => store.setStatus(e.payload)),
+    );
+    unlisteners.push(
+      await listen<BenchmarkResult>(RESULT_EVENT, (e) => {
+        store.setLatest(e.payload);
+        void refreshHistory();
+      }),
+    );
+  } catch (e) {
+    for (const unlisten of unlisteners) unlisten();
+    unlisteners = [];
+    started = false;
+    toast.error(toAppError(e).message);
+    return;
+  }
   try {
     store.setStatus(await backend.getBenchmarkStatus());
   } catch (e) {
@@ -68,14 +83,20 @@ export async function loadGpuAdapters(): Promise<void> {
   }
 }
 
-/** Lists disk locations once; a failure is shown in the Disk card. */
-export async function loadDiskTargets(): Promise<void> {
+/**
+ * Lists disk locations once, or again with `reload` (drives changed); a
+ * failure is shown in the Disk card. The previous list stays up meanwhile.
+ */
+export async function loadDiskTargets({ reload = false } = {}): Promise<void> {
   const store = useBenchmarkStore.getState();
-  if (store.diskTargets !== null || !isBackendAvailable()) return;
+  if ((!reload && store.diskTargets !== null) || !isBackendAvailable()) return;
+  const request = ++diskTargetsRequest;
   try {
-    store.setDiskTargets(await backend.listDiskTargets());
+    const targets = await backend.listDiskTargets();
+    if (request === diskTargetsRequest) store.setDiskTargets(targets);
   } catch (e) {
-    store.setDiskTargets([], toAppError(e).message);
+    if (request !== diskTargetsRequest) return;
+    store.setDiskTargets(useBenchmarkStore.getState().diskTargets ?? [], toAppError(e).message);
   }
 }
 
diff --git a/src/services/ipc.ts b/src/services/ipc.ts
index 66e4146..f186974 100644
--- a/src/services/ipc.ts
+++ b/src/services/ipc.ts
@@ -137,8 +137,8 @@ export const backend = {
   /** Per-process shared-memory accounting; extra reads, so only while it is shown. */
   setMemoryDetail: (enabled: boolean) => call<void>("set_memory_detail", { enabled }),
 
-  getProcessDetails: (pid: number, startTime?: number) =>
-    call<ProcessDetails>("get_process_details", { pid, startTime: startTime ?? null }),
+  getProcessDetails: (pid: number, startTime: number) =>
+    call<ProcessDetails>("get_process_details", { pid, startTime }),
 
   assessProcessAction: (pid: number, action: ProcessAction) =>
     call<ProtectionAssessment>("assess_process_action", { pid, action }),
diff --git a/src/services/monitoring.test.ts b/src/services/monitoring.test.ts
new file mode 100644
index 0000000..fe2e55a
--- /dev/null
+++ b/src/services/monitoring.test.ts
@@ -0,0 +1,87 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const api = vi.hoisted(() => ({
+  getStaticInfo: vi.fn(),
+  getMonitoringState: vi.fn(),
+  subscribeMetrics: vi.fn(),
+  getHistory: vi.fn(),
+  getRecentAlerts: vi.fn(),
+  getActivity: vi.fn(),
+  setMonitoringState: vi.fn(),
+  refreshNow: vi.fn(),
+}));
+vi.mock("@/services/ipc", async (orig) => ({
+  ...(await orig<typeof import("@/services/ipc")>()),
+  isBackendAvailable: () => true,
+  backend: api,
+}));
+vi.mock("./settings", () => ({ loadSettings: vi.fn(() => Promise.resolve()) }));
+
+// `startMonitoring` connects once per page load, so each test gets fresh modules.
+async function load() {
+  vi.resetModules();
+  const monitoring = await import("./monitoring");
+  const { useToastStore } = await import("@/stores/toastStore");
+  const { useMetricsStore } = await import("@/stores/metricsStore");
+  return { ...monitoring, useToastStore, useMetricsStore };
+}
+
+const failure = { kind: "systemQueryFailed", message: "backend hiccup" };
+
+beforeEach(() => {
+  Object.values(api).forEach((m) => m.mockReset());
+  api.getStaticInfo.mockResolvedValue({});
+  api.getMonitoringState.mockResolvedValue({ paused: false, intervalMs: 1000 });
+  api.subscribeMetrics.mockResolvedValue(null);
+  api.getHistory.mockResolvedValue([]);
+  api.getRecentAlerts.mockResolvedValue([]);
+  api.getActivity.mockResolvedValue([]);
+  Object.defineProperty(document, "visibilityState", { configurable: true, value: "visible" });
+});
+
+describe("startMonitoring", () => {
+  it("reports a failed backfill but never subscribes twice and still catches up on show", async () => {
+    const m = await load();
+    api.getHistory.mockRejectedValueOnce(failure);
+    await m.startMonitoring();
+
+    expect(api.getRecentAlerts).toHaveBeenCalledTimes(1);
+    expect(m.useToastStore.getState().toasts[0]?.message).toMatch(/backend hiccup/);
+    await m.startMonitoring();
+    expect(api.subscribeMetrics).toHaveBeenCalledTimes(1);
+
+    document.dispatchEvent(new Event("visibilitychange"));
+    expect(api.getHistory).toHaveBeenCalledTimes(2);
+  });
+
+  it("allows a retry when it fails before subscribing", async () => {
+    const m = await load();
+    api.getStaticInfo.mockRejectedValueOnce(failure);
+    await m.startMonitoring();
+    expect(m.useMetricsStore.getState().status).toBe("error");
+    expect(api.subscribeMetrics).not.toHaveBeenCalled();
+
+    await m.startMonitoring();
+    expect(api.subscribeMetrics).toHaveBeenCalledTimes(1);
+  });
+});
+
+describe("controls", () => {
+  it("rolls back and shows a toast when pausing fails", async () => {
+    const m = await load();
+    api.setMonitoringState.mockRejectedValueOnce(failure);
+    await m.togglePaused();
+    expect(m.useMetricsStore.getState().monitoring.paused).toBe(false);
+    expect(m.useToastStore.getState().toasts[0]).toMatchObject({
+      tone: "error",
+      message: "Could not change monitoring: backend hiccup",
+    });
+  });
+
+  it("shows a toast when a manual refresh fails", async () => {
+    const m = await load();
+    api.refreshNow.mockRejectedValueOnce(failure);
+    await m.refreshNow();
+    expect(m.useToastStore.getState().toasts[0]?.message).toBe("Could not refresh: backend hiccup");
+  });
+});
diff --git a/src/services/monitoring.ts b/src/services/monitoring.ts
index e29c73c..6d14e11 100644
--- a/src/services/monitoring.ts
+++ b/src/services/monitoring.ts
@@ -17,7 +17,11 @@ const BACKFILL_SECONDS = 3_600;
 
 let started = false;
 
-/** Connects to the engine once per page load. Safe to call repeatedly. */
+/**
+ * Connects to the engine once per page load. Safe to call repeatedly: a
+ * failure before the subscription allows a retry; after it, the stream is
+ * live and a retry would subscribe twice, so later failures are only reported.
+ */
 export async function startMonitoring(): Promise<void> {
   if (started) return;
   started = true;
@@ -39,16 +43,32 @@ export async function startMonitoring(): Promise<void> {
 
     const latest = await backend.subscribeMetrics(onTick);
     if (latest) store.ingestTick(latest);
+  } catch (error) {
+    started = false;
+    store.setStatus("error", toAppError(error));
+    return;
+  }
 
-    // Backfill after subscribing so no tick falls into a gap.
+  watchVisibility();
+  // Backfill after subscribing so no tick falls into a gap.
+  try {
     store.backfillHistory(await backend.getHistory(BACKFILL_SECONDS));
+  } catch (error) {
+    report("Could not load earlier history", error);
+  }
+  try {
     useAlertStore.getState().replace(await backend.getRecentAlerts());
-    backfillActivity();
-    watchVisibility();
   } catch (error) {
-    started = false;
-    store.setStatus("error", toAppError(error));
+    report("Could not load recent alerts", error);
   }
+  backfillActivity();
+}
+
+function report(what: string, error: unknown): void {
+  const store = useMetricsStore.getState();
+  const appError = toAppError(error);
+  store.setStatus(store.status, appError);
+  toast.error(`${what}: ${appError.message}`);
 }
 
 function onTick(incoming: MetricsTick): void {
@@ -110,7 +130,7 @@ async function applyState(next: MonitoringState): Promise<void> {
     store.setMonitoring(await backend.setMonitoringState(next));
   } catch (error) {
     store.setMonitoring(previous);
-    store.setStatus(store.status, toAppError(error));
+    report("Could not change monitoring", error);
   }
 }
 
@@ -119,17 +139,11 @@ export function togglePaused(): Promise<void> {
   return applyState({ ...monitoring, paused: !monitoring.paused });
 }
 
-export function setRefreshInterval(intervalMs: number): Promise<void> {
-  const { monitoring } = useMetricsStore.getState();
-  return applyState({ ...monitoring, intervalMs });
-}
-
 export async function refreshNow(): Promise<void> {
   if (!isBackendAvailable()) return;
   try {
     await backend.refreshNow();
   } catch (error) {
-    const store = useMetricsStore.getState();
-    store.setStatus(store.status, toAppError(error));
+    report("Could not refresh", error);
   }
 }
diff --git a/src/services/settings.test.ts b/src/services/settings.test.ts
index 3c10ddd..1a9f443 100644
--- a/src/services/settings.test.ts
+++ b/src/services/settings.test.ts
@@ -1,6 +1,18 @@
-import { describe, expect, it } from "vitest";
+import { describe, expect, it, vi } from "vitest";
 import { DEFAULT_VISIBLE_COLUMNS } from "@/features/processes/logic";
-import { columnsFromSettings } from "./settings";
+import { useProcessStore } from "@/stores/processStore";
+import { DEFAULT_SETTINGS, useSettingsStore } from "@/stores/settingsStore";
+import { columnsFromSettings, loadSettings } from "./settings";
+
+const api = vi.hoisted(() => ({
+  getSettings: vi.fn(),
+  updateSettings: vi.fn((s: unknown) => Promise.resolve(s)),
+}));
+vi.mock("@/services/ipc", async (orig) => ({
+  ...(await orig<typeof import("@/services/ipc")>()),
+  isBackendAvailable: () => true,
+  backend: api,
+}));
 
 describe("columnsFromSettings", () => {
   it("falls back to defaults when nothing is stored", () => {
@@ -18,3 +30,24 @@ describe("columnsFromSettings", () => {
     expect(r.columnWidths).toEqual({ cpu: 120 });
   });
 });
+
+describe("column sync", () => {
+  it("keeps the table and settings in step in both directions without echoing", async () => {
+    api.getSettings.mockResolvedValue({
+      ...DEFAULT_SETTINGS,
+      visibleColumns: ["name", "cpu"],
+      columnWidths: { cpu: 120 },
+    });
+    await loadSettings();
+    expect(useProcessStore.getState().visibleColumns).toEqual(["name", "cpu"]);
+
+    useProcessStore.getState().setColumnWidth("cpu", 150);
+    expect(useSettingsStore.getState().columnWidths).toEqual({ cpu: 150 });
+
+    // A rolled-back save or a reset replaces the settings from outside the table.
+    useSettingsStore.setState({ visibleColumns: ["pid"], columnWidths: {} });
+    expect(useProcessStore.getState().visibleColumns).toEqual(["name", "pid"]);
+    expect(useProcessStore.getState().columnWidths).toEqual({});
+    expect(useSettingsStore.getState().visibleColumns).toEqual(["pid"]);
+  });
+});
diff --git a/src/services/settings.ts b/src/services/settings.ts
index c1327db..b3a8e0c 100644
--- a/src/services/settings.ts
+++ b/src/services/settings.ts
@@ -27,6 +27,22 @@ export function columnsFromSettings(s: Pick<Settings, "visibleColumns" | "column
 }
 
 let unsubscribe: (() => void) | undefined;
+/** Set while one store is copying columns into the other, so the copy is not echoed back. */
+let syncing = false;
+
+type Columns = { visibleColumns: unknown; columnWidths: unknown };
+const sameColumns = (a: Columns, b: Columns) =>
+  a.visibleColumns === b.visibleColumns && a.columnWidths === b.columnWidths;
+
+function sync(copy: () => void): void {
+  if (syncing) return;
+  syncing = true;
+  try {
+    copy();
+  } finally {
+    syncing = false;
+  }
+}
 
 export async function loadSettings(): Promise<void> {
   if (!isBackendAvailable()) return;
@@ -39,15 +55,24 @@ export async function loadSettings(): Promise<void> {
   }
 
   unsubscribe?.();
-  unsubscribe = useProcessStore.subscribe((state, prev) => {
-    if (state.visibleColumns === prev.visibleColumns && state.columnWidths === prev.columnWidths) {
-      return;
-    }
-    useSettingsStore.getState().update({
-      visibleColumns: state.visibleColumns,
-      columnWidths: Object.fromEntries(
-        Object.entries(state.columnWidths).filter(([, w]) => w != null),
-      ) as Record<string, number>,
-    });
+  const fromTable = useProcessStore.subscribe((state, prev) => {
+    if (sameColumns(state, prev)) return;
+    sync(() =>
+      useSettingsStore.getState().update({
+        visibleColumns: state.visibleColumns,
+        columnWidths: Object.fromEntries(
+          Object.entries(state.columnWidths).filter(([, w]) => w != null),
+        ) as Record<string, number>,
+      }),
+    );
+  });
+  // Settings change on their own after a reset or a rolled-back save.
+  const fromSettings = useSettingsStore.subscribe((state, prev) => {
+    if (sameColumns(state, prev)) return;
+    sync(() => useProcessStore.setState(columnsFromSettings(state)));
   });
+  unsubscribe = () => {
+    fromTable();
+    fromSettings();
+  };
 }
diff --git a/src/stores/benchmarkStore.ts b/src/stores/benchmarkStore.ts
index 67f8703..0f4e25f 100644
--- a/src/stores/benchmarkStore.ts
+++ b/src/stores/benchmarkStore.ts
@@ -60,10 +60,14 @@ export const useBenchmarkStore = create<BenchmarkState>((set) => ({
   diskTargetsError: null,
 
   setStatus: (status) =>
-    set((s) => ({
-      status,
-      cancelling: isActive(status) && s.status.runId === status.runId && s.cancelling,
-    })),
+    set((s) =>
+      isOutdated(s.status, status)
+        ? s
+        : {
+            status,
+            cancelling: isActive(status) && s.status.runId === status.runId && s.cancelling,
+          },
+    ),
   setCancelling: (cancelling) => set({ cancelling }),
   setHistory: (history) => set({ history }),
   setLatest: (latest) => set({ latest, selectedId: null }),
@@ -77,6 +81,16 @@ export function isActive(status: BenchmarkStatus): boolean {
   return !["idle", "completed", "cancelled", "failed"].includes(status.state);
 }
 
+/**
+ * Command replies (start, get status) can arrive after newer progress events
+ * for the same run; such a snapshot would move progress backwards.
+ */
+function isOutdated(current: BenchmarkStatus, next: BenchmarkStatus): boolean {
+  if (next.runId === null || next.runId !== current.runId) return false;
+  if (!isActive(current)) return isActive(next);
+  return next.elapsedMs < current.elapsedMs || next.fraction < current.fraction;
+}
+
 /**
  * The result to show in the card for `kind`: the one the user opened if it is
  * of that kind, else the latest run of that kind, else the newest saved one.
diff --git a/src/stores/toastStore.test.ts b/src/stores/toastStore.test.ts
new file mode 100644
index 0000000..3542c51
--- /dev/null
+++ b/src/stores/toastStore.test.ts
@@ -0,0 +1,42 @@
+import { afterEach, beforeEach, expect, it, vi } from "vitest";
+import { toast, useToastStore } from "./toastStore";
+
+const messages = () => useToastStore.getState().toasts.map((t) => t.message);
+
+beforeEach(() => {
+  vi.useFakeTimers();
+  useToastStore.setState({ toasts: [] });
+});
+afterEach(() => {
+  vi.useRealTimers();
+});
+
+it("dismisses plain toasts after their duration", () => {
+  toast.success("Saved");
+  vi.advanceTimersByTime(3999);
+  expect(messages()).toEqual(["Saved"]);
+  vi.advanceTimersByTime(1);
+  expect(messages()).toEqual([]);
+});
+
+it("keeps a toast with an action until it is used or dismissed", () => {
+  toast.error("Could not close", { label: "Force end…", run: () => {} });
+  vi.advanceTimersByTime(60_000);
+  expect(messages()).toEqual(["Could not close"]);
+  useToastStore.getState().dismiss(useToastStore.getState().toasts[0]!.id);
+  expect(messages()).toEqual([]);
+});
+
+it("pauses the countdown and resumes with the time that was left", () => {
+  toast.info("Copied");
+  const { id } = useToastStore.getState().toasts[0]!;
+  vi.advanceTimersByTime(3000);
+  useToastStore.getState().pause(id);
+  vi.advanceTimersByTime(60_000);
+  expect(messages()).toEqual(["Copied"]);
+  useToastStore.getState().resume(id);
+  vi.advanceTimersByTime(999);
+  expect(messages()).toEqual(["Copied"]);
+  vi.advanceTimersByTime(1);
+  expect(messages()).toEqual([]);
+});
diff --git a/src/stores/toastStore.ts b/src/stores/toastStore.ts
index b6c3d05..54c259d 100644
--- a/src/stores/toastStore.ts
+++ b/src/stores/toastStore.ts
@@ -6,7 +6,7 @@ export interface Toast {
   id: number;
   tone: ToastTone;
   message: string;
-  /** Optional follow-up action, e.g. "Force end" after a failed close. */
+  /** Optional follow-up action, e.g. "Force end" after a failed close. Stays until used or dismissed. */
   action?: { label: string; run: () => void };
 }
 
@@ -14,19 +14,61 @@ interface ToastState {
   toasts: Toast[];
   push: (toast: Omit<Toast, "id">) => void;
   dismiss: (id: number) => void;
+  /** Stops a toast's dismissal countdown while the user is reading or using it. */
+  pause: (id: number) => void;
+  resume: (id: number) => void;
 }
 
 const DURATION_MS = { success: 4000, info: 4000, error: 8000 } as const;
+const MAX_TOASTS = 4;
 let nextId = 1;
 
-export const useToastStore = create<ToastState>((set, get) => ({
+interface Countdown {
+  handle: ReturnType<typeof setTimeout> | undefined;
+  remainingMs: number;
+  startedAt: number;
+}
+const countdowns = new Map<number, Countdown>();
+
+function startCountdown(id: number, c: Countdown): void {
+  c.startedAt = Date.now();
+  c.handle = setTimeout(() => useToastStore.getState().dismiss(id), c.remainingMs);
+}
+
+function clearCountdown(id: number): void {
+  clearTimeout(countdowns.get(id)?.handle);
+  countdowns.delete(id);
+}
+
+export const useToastStore = create<ToastState>((set) => ({
   toasts: [],
   push: (toast) => {
     const id = nextId++;
-    set((s) => ({ toasts: [...s.toasts.slice(-3), { ...toast, id }] }));
-    setTimeout(() => get().dismiss(id), DURATION_MS[toast.tone]);
+    set((s) => {
+      const kept = s.toasts.slice(-(MAX_TOASTS - 1));
+      for (const t of s.toasts) if (!kept.includes(t)) clearCountdown(t.id);
+      return { toasts: [...kept, { ...toast, id }] };
+    });
+    if (toast.action) return;
+    const c: Countdown = { handle: undefined, remainingMs: DURATION_MS[toast.tone], startedAt: 0 };
+    countdowns.set(id, c);
+    startCountdown(id, c);
+  },
+  dismiss: (id) => {
+    clearCountdown(id);
+    set((s) => ({ toasts: s.toasts.filter((t) => t.id !== id) }));
+  },
+  pause: (id) => {
+    const c = countdowns.get(id);
+    if (c?.handle === undefined) return;
+    clearTimeout(c.handle);
+    c.handle = undefined;
+    c.remainingMs = Math.max(0, c.remainingMs - (Date.now() - c.startedAt));
+  },
+  resume: (id) => {
+    const c = countdowns.get(id);
+    if (c && c.handle === undefined) startCountdown(id, c);
   },
-  dismiss: (id) => set((s) => ({ toasts: s.toasts.filter((t) => t.id !== id) })),
 }));
 
 export const toast = {
diff --git a/src/types/generated/SocketEntry.ts b/src/types/generated/SocketEntry.ts
index ae224b4..a9dddea 100644
--- a/src/types/generated/SocketEntry.ts
+++ b/src/types/generated/SocketEntry.ts
@@ -9,4 +9,9 @@ export type SocketEntry = { connection: Connection,
  * `None` when the owner cannot be determined (another user's process
  * without privileges, or a closing socket the kernel no longer attributes).
  */
-pid: number | null, processName: string | null, };
+pid: number | null, processName: string | null, 
+/**
+ * Start time of the owner, as in `ProcessRow::start_time`, so the UI can
+ * tell it from a later process that reused the PID. `None` without an owner.
+ */
+startTime: number | null, };

From e587670c9ff9ea095fa69ff5f9b95e5723cea83b Mon Sep 17 00:00:00 2001
From: Mike Holp <mikeholp87@gmail.com>
Date: Tue, 10 Nov 2026 22:27:35 +0700
Subject: [PATCH 4/4] Release 0.1.5

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 README.md                 | 20 +++++++++++++++++++-
 package-lock.json         |  4 ++--
 package.json              |  2 +-
 src-tauri/Cargo.lock      |  4 ++--
 src-tauri/Cargo.toml      |  4 ++--
 src-tauri/core/Cargo.toml |  2 +-
 src-tauri/linux/tasky.1   |  2 +-
 src-tauri/tauri.conf.json |  2 +-
 8 files changed, 29 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 8c11540..f67d4e4 100644
--- a/README.md
+++ b/README.md
@@ -198,7 +198,25 @@ Platform differences are documented in
 
 ### Release notes
 
-**0.1.4** (current)
+**0.1.5** (current)
+
+- **Safer process actions:** menus, the Ports page and Process Details links
+  act only on the exact process you picked, never on a new one that reused
+  its PID. Suspending or ending your desktop session now warns first.
+- **Drives:** unmounting and powering off ask first, and power-off refuses
+  unless it can confirm nothing on the drive (including LUKS/LVM volumes) is
+  still mounted. A dead network mount no longer freezes the metrics; network
+  mounts are no longer listed.
+- **Services:** desktop-session services are locked; stopping SSH, PipeWire
+  and similar shows a warning.
+- **Reliability:** a page error no longer blanks the window, settings changes
+  can't overwrite each other, and a crashing benchmark reports "Failed"
+  instead of closing Tasky.
+- **Keyboard and screen readers:** the selected process is announced,
+  Shift+F10 opens its menu, columns resize with the arrow keys, and view
+  switches support arrow keys.
+
+**0.1.4**
 
 - Fixed the login entry written by "Start with the OS" when Tasky had been
   upgraded or rebuilt while running. It could point at a path ending in
diff --git a/package-lock.json b/package-lock.json
index f59e177..387ad7d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "taskmanager",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "taskmanager",
-      "version": "0.1.4",
+      "version": "0.1.5",
       "dependencies": {
         "@fontsource/ibm-plex-mono": "^5.3.0",
         "@fontsource/ibm-plex-sans": "^5.3.0",
diff --git a/package.json b/package.json
index fcc67e1..55a858e 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskmanager",
   "private": true,
-  "version": "0.1.4",
+  "version": "0.1.5",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 881be80..2427430 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -3994,7 +3994,7 @@ checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
 
 [[package]]
 name = "taskmanager"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "gdk",
  "gio",
@@ -4512,7 +4512,7 @@ checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee"
 
 [[package]]
 name = "tm-core"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "flate2",
  "libc",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index d0f4383..d027424 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "taskmanager"
-version = "0.1.4"
+version = "0.1.5"
 description = "Cross-platform task manager and system monitor"
 authors = ["Task Manager contributors"]
 license = "MIT"
@@ -19,7 +19,7 @@ crate-type = ["staticlib", "cdylib", "rlib"]
 tauri-build = { version = "2", features = [] }
 
 [dependencies]
-tm-core = { version = "0.1.4", path = "core" }
+tm-core = { version = "0.1.5", path = "core" }
 tauri = { version = "2", features = ["tray-icon"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
diff --git a/src-tauri/core/Cargo.toml b/src-tauri/core/Cargo.toml
index 86cb7bf..03b64a3 100644
--- a/src-tauri/core/Cargo.toml
+++ b/src-tauri/core/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "tm-core"
-version = "0.1.4"
+version = "0.1.5"
 description = "Monitoring engine and platform layer for Task Manager (no UI dependencies)"
 license = "MIT"
 edition = "2024"
diff --git a/src-tauri/linux/tasky.1 b/src-tauri/linux/tasky.1
index 2ef8c88..3f0c954 100644
--- a/src-tauri/linux/tasky.1
+++ b/src-tauri/linux/tasky.1
@@ -1,4 +1,4 @@
-.TH TASKY 1 "November 2026" "Tasky 0.1.4" "User Commands"
+.TH TASKY 1 "November 2026" "Tasky 0.1.5" "User Commands"
 .SH NAME
 tasky \- task manager and system monitor
 .SH SYNOPSIS
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 68a919c..6717254 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Task Manager",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "identifier": "com.taskmanager.app",
   "build": {
     "beforeDevCommand": "npm run dev",