From bf2eb4f680f537e344370f7bc92cc234b5ca5083 Mon Sep 17 00:00:00 2001 From: chris-belcher Date: Sat, 2 Jul 2022 18:43:09 +0100 Subject: [PATCH 001/288] Specify BIP-fidelity-bonds For storing fidelity bonds in HD wallets --- bip-fidelity-bonds.mediawiki | 167 +++++++++++++++++++++++++++++++++++ 1 file changed, 167 insertions(+) create mode 100644 bip-fidelity-bonds.mediawiki diff --git a/bip-fidelity-bonds.mediawiki b/bip-fidelity-bonds.mediawiki new file mode 100644 index 00000000..571eca2e --- /dev/null +++ b/bip-fidelity-bonds.mediawiki @@ -0,0 +1,167 @@ +
+  BIP: TBD. Preferably a two-digit number to match the bip44, bip49, bip84, bip86 family of bips
+  Layer: Applications
+  Title: Derivation scheme for timelocked address fidelity bond based accounts
+  Author: Chris Belcher 
+  Status: Draft
+  Type: Standards Track
+  Comments-Summary: No comments yet.
+  Created: 2022-04-01
+  License: CC0-1.0
+  Post-History: 2022-5-1: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-May/020389.html
+
+ +== Abstract == + +This BIP defines the derivation scheme for HD wallets which create timelocked addresses used for creating fidelity bonds. It also defines how to sign fidelity bond certificates, which are needed when using fidelity bonds that are stored offline. + +== Motivation == + +Fidelity bonds are used to resist sybil attacks in certain decentralized anonymous protocols. They are created by locking up bitcoins using the `OP_CHECKLOCKTIMEVERIFY` opcode. + +It would be useful to have a common derivation scheme so that users of wallet software can have a backup of their fidelity bonds by storing only the HD seed and a reference to this BIP. Importantly the user does not need to backup any timelock values. + +We largely use the same approach used in BIPs 49, 84 and 86 for ease of implementation. + +This standard is already implemented and deployed in JoinMarket. As most changes would requires a protocol change of a live system, there is limited scope for changing this standard in review. This BIP is more about documenting something which already exists, warts and all. + +It would be useful to be able to keep the private keys of fidelity bonds in cold storage. This would allow the sybil resistance of a system to increase without hot wallet risk. + +== Background == + +=== Fidelity bonds === + +A fidelity bond is a mechanism where bitcoin value is deliberately sacrificed to make a cryptographic identity expensive to obtain. A way to create a fidelity bond is to lock up bitcoins by sending them to a timelocked address. The valuable thing being sacrificed is the time-value-of-money. + +The sacrifice must be done in a way that can be proven to a third party. This proof can be made by showing the UTXO outpoint, the address redeemscript and a signature which signs a message using the private key corresponding to the public key in the redeemscript. + +The sacrificed value is an objective measurement that can't be faked and which can be verified by anybody (just like, for example PoW mining). Sybil attacks can be made very expensive by forcing a hypothetical sybil attacker to lock up many bitcoins for a long time. JoinMarket implements fidelity bonds for protection from sybil attackers. At the time of writing over 600 BTC in total have been locked up with some for many years. Their UTXOs and signatures have been advertised to the world as proof. We can calculate that for a sybil attacker to succeed in unmixing all the CoinJoins, they would have to lock up over 100k BTC for several years. + +=== Fidelity bonds in cold storage === + +To allow for holding fidelity bonds in cold storage, there is an intermediate keypair called the certificate. + + UTXO key ---signs---> certificate ---signs---> endpoint + +Where the endpoint might be a IRC nickname or Tor onion hostname. The certificate keypair can be kept online and used to prove ownership of the fidelity bond. Even if the hot wallet private keys are stolen, the coins in the timelocked address will still be safe, although the thief will be able to impersonate the fidelity bond until the expiry. + +=== Fixed timelock values === + +It would be useful for the user to avoid having to keep a record of the timelocks in the time-locked addresses. So only a limited small set of timelocks are defined by this BIP. This way the user must only store their seed phrase, and knowledge that they have coins stored using this BIP standard. The user doesn't need to remember or store any dates. + + +== Specifications == + +This BIP defines the two needed steps to derive multiple deterministic addresses based on a [[bip-0032.mediawiki|BIP 32]] master private key. It also defines the format of the certificate can be signed by the deterministic address key. + +=== Public key derivation === + +To derive a public key from the root account, this BIP uses a similar account-structure as defined in BIP [[bip-0084.mediawiki|44]] but with change set to 2. + +
+m / 84' / 0' / 0' / 2 / index
+
+ +A key derived with this derivation path pattern will be referred to as derived_key further +in this document. + +For index, addresses are numbered from 0 in a sequentially increasing manner, but index does not increase forever like in other similar standards. The index only goes up to 959 inclusive. Only 960 addresses can be derived for a given BIP32 master key. Furthermore there is no concept of a gap limit, instead wallets must always generate all 960 addresses and check all of them if they have a balance and history. + +=== Timelock derivation === + +The timelock used in the time-locked address is derived from the index. The timelock is a unix time. It is always the first of the month at midnight. The index counts upwards the months from January 2020, ending in December 2099. At 12 months per year for 80 years this totals 960 timelocks. Note that care must be taken with the year 2038 problem on 32-bit systems. + +
+year = 2020 + index // 12
+month = 1 + index % 12
+
+ + +=== Address derivation === + +To derive the address from the above calculated public key and timelock, we create a redeemScript which locks the funds until the timelock, and then checks the signature of the derived_key. The redeemScript is hashed with SHA256 to produce a 32-byte hash value that forms the scriptPubKey of the P2WSH address. + + redeemScript: OP_CHECKLOCKTIMEVERIFY OP_DROP OP_CHECKSIG + witness: + scriptSig: (empty) + scriptPubKey: 0 <32-byte-hash> + (0x0020{32-byte-hash}) + +=== Message signing === + +In order to support signing of certificates, implementors should support signing ascii messages. + +A certificate message can be created by another application external to this standard. It is then prepended with the string `\x18Bitcoin Signed Message:\n` and a byte denoting the length of the certificate message. The whole thing is then signed with the private key of the derived_key. This part is identical to the "Sign Message" function which many wallets already implement. + +Almost all wallets implementing this standard can use their already-existing "Sign Message" function to sign the certificate message. As the certificate message itself is always an ascii string, the wallet may not need to specially implement this section at all but just rely on users copypasting their certificate message into the already-existing "Sign Message" user interface. This works as long as the wallet knows how to use the private key of the timelocked address for signing messages. + +It is most important for wallet implementions of this standard to support creating the certificate signature. Verifying the certificate signature is less important. + + +== Test vectors == + +
+mnemonic = abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about
+rootpriv = xprv9s21ZrQH143K3GJpoapnV8SFfukcVBSfeCficPSGfubmSFDxo1kuHnLisriDvSnRRuL2Qrg5ggqHKNVpxR86QEC8w35uxmGoggxtQTPvfUu
+rootpub  = xpub661MyMwAqRbcFkPHucMnrGNzDwb6teAX1RbKQmqtEF8kK3Z7LZ59qafCjB9eCRLiTVG3uxBxgKvRgbubRhqSKXnGGb1aoaqLrpMBDrVxga8
+
+// First timelocked address = m/84'/0'/0'/2/0
+derived private_key = L2tQBEdhC48YLeEWNg3e4msk94iKfyVa9hdfzRwUERabZ53TfH3d
+derived public_key  = 02a1b09f93073c63f205086440898141c0c3c6d24f69a18db608224bcf143fa011
+unix locktime       = 1577836800
+string locktime     = 2020-01-01 00:00:00
+redeemscript        = 0400e10b5eb1752102a1b09f93073c63f205086440898141c0c3c6d24f69a18db608224bcf143fa011ac
+scriptPubKey        = 0020bdee9515359fc9df912318523b4cd22f1c0b5410232dc943be73f9f4f07e39ad
+address             = bc1qhhhf29f4nlyalyfrrpfrknxj9uwqk4qsyvkujsa7w0ulfur78xkspsqn84
+
+// Test certificate using first timelocked address
+// Note that as signatures contains a random nonce, it might not be exactly the same when your code generates it
+// p2pkh address is the p2pkh address corresponding to the derived public key, it can be used to verify the message
+//  signature in any wallet that supports Verify Message.
+// As mentioned before, it is more important for implementors of this standard to support signing such messages, not verifying them
+Message       = fidelity-bond-cert|020000000000000000000000000000000000000000000000000000000000000001|375
+Address       = bc1qhhhf29f4nlyalyfrrpfrknxj9uwqk4qsyvkujsa7w0ulfur78xkspsqn84
+p2pkh address = 16vmiGpY1rEaYnpGgtG7FZgr2uFCpeDgV6
+Signature     = H2b/90XcKnIU/D1nSCPhk8OcxrHebMCr4Ok2d2yDnbKDTSThNsNKA64CT4v2kt+xA1JmGRG/dMnUUH1kKqCVSHo=
+
+// 2nd timelocked address = m/84'/0'/0'/2/1
+derived private_key = KxctaFBzetyc9KXeUr6jxESCZiCEXRuwnQMw7h7hroP6MqnWN6Pf
+derived public_key  = 02599f6db8b33265a44200fef0be79c927398ed0b46c6a82fa6ddaa5be2714002d
+unix locktime       = 1580515200
+string locktime     = 2020-02-01 00:00:00
+redeemscript        = 0480bf345eb1752102599f6db8b33265a44200fef0be79c927398ed0b46c6a82fa6ddaa5be2714002dac
+scriptPubKey        = 0020b8f898643991608524ed04e0c6779f632a57f1ffa3a3a306cd81432c5533e9ae
+address             = bc1qhrufsepej9sg2f8dqnsvvaulvv490u0l5w36xpkds9pjc4fnaxhq7pcm4h
+
+// timelocked address after the year 2038 = m/84'/0'/0'/2/240
+derived private_key = L3SYqae23ZoDDcyEA8rRBK83h1MDqxaDG57imMc9FUx1J8o9anQe
+derived public_key  = 03ec8067418537bbb52d5d3e64e2868e67635c33cfeadeb9a46199f89ebfaab226
+unix locktime       = 2208988800
+string locktime     = 2040-01-01 00:00:00
+redeemscript        = 05807eaa8300b1752103ec8067418537bbb52d5d3e64e2868e67635c33cfeadeb9a46199f89ebfaab226ac
+scriptPubKey        = 0020e7de0ad2720ae1d6cc9b6ad91af57eb74646762cf594c91c18f6d5e7a873635a
+address             = bc1qul0q45njptsadnymdtv34at7karyva3v7k2vj8qc7m2702rnvddq0z20u5
+
+// last timelocked address = m/84'/0'/0'/2/959
+derived private_key = L5Z9DDMnj5RZMyyPiQLCvN48Xt7GGmev6cjvJXD8uz5EqiY8trNJ
+derived public_key  = 0308c5751121b1ae5c973cdc7071312f6fc10ab864262f0cbd8134f056166e50f3
+unix locktime       = 4099766400
+string locktime     = 2099-12-01 00:00:00
+redeemscript        = 0580785df400b175210308c5751121b1ae5c973cdc7071312f6fc10ab864262f0cbd8134f056166e50f3ac
+scriptPubKey        = 0020803268e042008737cf439748cbb5a4449e311da9aa64ae3ac56d84d059654f85
+address             = bc1qsqex3czzqzrn0n6rjayvhddygj0rz8df4fj2uwk9dkzdqkt9f7zs5c493u
+
+ +Code generating these test vectors can be found here: https://github.com/chris-belcher/timelocked-addresses-fidelity-bond-bip-testvectors + +==Reference== + +* [[https://gist.github.com/chris-belcher/18ea0e6acdb885a2bfbdee43dcd6b5af/|Design for improving JoinMarket's resistance to sybil attacks using fidelity bonds]] +* [[https://github.com/JoinMarket-Org/joinmarket-clientserver/blob/master/docs/fidelity-bonds.md|JoinMarket fidelity bonds doc page]] +* [[bip-0065.mediawiki|BIP65 - OP_CHECKLOCKTIMEVERIFY]] +* [[bip-0032.mediawiki|BIP32 - Hierarchical Deterministic Wallets]] +* [[bip-0044.mediawiki|BIP44 - Multi-Account Hierarchy for Deterministic Wallets]] +* [[bip-0049.mediawiki|BIP49 - Derivation scheme for P2WPKH-nested-in-P2SH based accounts]] +* [[bip-0084.mediawiki|BIP84 - Derivation scheme for P2WPKH based accounts]] +* [[bip-0086.mediawiki|BIP86 - Key Derivation for Single Key P2TR Outputs]] + From fa4eeeef38a1dd4f26aad7220127a61097d3eca2 Mon Sep 17 00:00:00 2001 From: John Moffett <116917595+john-moffett@users.noreply.github.com> Date: Tue, 31 Jan 2023 13:12:53 -0500 Subject: [PATCH 002/288] Fix description of M parameter The M parameter is used as the inverse of the false probability rate, so change its incorrect usage in two places. --- bip-0158.mediawiki | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bip-0158.mediawiki b/bip-0158.mediawiki index 484e6747..46771131 100644 --- a/bip-0158.mediawiki +++ b/bip-0158.mediawiki @@ -85,7 +85,7 @@ one is able to select both Parameters independently, then more optimal values can be selectedhttps://gist.github.com/sipa/576d5f09c3b86c3b1b75598d799fc845. Set membership queries against the hash outputs will have a false positive rate -of M. To avoid integer overflow, the number of items N +of 1 / M. To avoid integer overflow, the number of items N MUST be <2^32 and M MUST be <2^32. The items are first passed through the pseudorandom function ''SipHash'', which @@ -189,7 +189,7 @@ golomb_decode(stream, P: uint) -> uint64: A GCS is constructed from four parameters: * L, a vector of N raw items * P, the bit parameter of the Golomb-Rice coding -* M, the target false positive rate +* M, the inverse of the target false positive rate * k, the 128-bit key used to randomize the SipHash outputs The result is a byte vector with a minimum size of N * (P + 1) From 265d64cae5ae5a931d45dc9f923c562f33428e91 Mon Sep 17 00:00:00 2001 From: Thebora Kompanioni Date: Fri, 30 Jun 2023 10:19:55 +0200 Subject: [PATCH 003/288] fix(bip85): rectify pwd_length in PWD BASE85 table --- bip-0085.mediawiki | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki index 06277555..8d40e6e1 100644 --- a/bip-0085.mediawiki +++ b/bip-0085.mediawiki @@ -327,7 +327,7 @@ Entropy = log2(R ** L)
|- | 30 || 192.0 |- -| 20 || 512.0 +| 80 || 512.0 |} INPUT: From 83ca57f22268edb1ff2815085a4383ba8d1b55fe Mon Sep 17 00:00:00 2001 From: Ethan Heilman Date: Mon, 11 Dec 2023 18:11:22 -0500 Subject: [PATCH 004/288] Create bip-???-cat.mediawiki --- bip-???-cat.mediawiki | 89 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 89 insertions(+) create mode 100644 bip-???-cat.mediawiki diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki new file mode 100644 index 00000000..8cd7baae --- /dev/null +++ b/bip-???-cat.mediawiki @@ -0,0 +1,89 @@ +
+  BIP: ???
+  Layer: Consensus (soft fork)
+  Title: OP_CAT
+  Author: Ethan Heilman 
+          Armin Sabouri 
+  Status: Draft
+  Type: Standards Track
+  Created: 2023-10-21
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-op-cat
+  License: BSD-3-Clause
+
+ +==Abstract== + +This BIP defines OP_CAT a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126. + +When evaluated the OP_CAT instruction: +# Pops the top two values off the stack, +# concatenate the popped values together, +# and then pushes the concatenated value on the top of the stack. + +OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size of greater than the maximum script element size of 520 Bytes. + +==Motivation== +Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. For instance this prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript. + +OP_CAT aims to expands the toolbox of the tapscript developer with a simple, modular and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable: + +* Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf +* Tree Signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions. P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/ +* Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely requires the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html +* Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols. +* Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin. +* Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md. + +The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script for which an evaluation could have memory usage exponential in the size of the script. +For instance a script which pushed an 1 Byte value on the stack then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 Terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 Bytes. + +==Specification== + +OP_CAT pops two elements of the stack, concatenates them together in stack order and pushes the resultant element onto the stack. Given the stack [x1,x2], where x2 is at the top of the stack, OP_CAT will push x1||x2 onto the stack. By '||' we denote concatenation. + +Implementation +
+case OP_CAT:
+{
+    if (stack.size() < 2)
+        return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
+    valtype& vch1 = stacktop(-2);
+    valtype& vch2 = stacktop(-1);
+    if (vch1.size() + vch2.size() > MAX_SCRIPT_ELEMENT_SIZE)
+        return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
+    vch1.insert(vch1.end(), vch2.begin(), vch2.end());
+    stack.pop_back();
+}
+break;
+
+This implementation is inspired by the original implementation of OP_CAT as shown below. Alternative implementation of OP_CAT can be found in Elements Roose S., Elements Project, "Re-enable several disabled opcodes", 2019, https://github.com/ElementsProject/elements/commit/13e1103abe3e328c5a4e2039b51a546f8be6c60a#diff-a0337ffd7259e8c7c9a7786d6dbd420c80abfa1afdb34ebae3261109d9ae3c19R740-R759. + +The value of MAX_SCRIPT_ELEMENT_SIZE is 520 Bytes + +==Notes== + +OP_CAT as it existed in the Bitcoin codebase prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefL381 which disabled it. + +
+  // (x1 x2 -- out)
+  if (stack.size() < 2)
+    return false;
+  valtype& vch1 = stacktop(-2);
+  valtype& vch2 = stacktop(-1);
+  vch1.insert(vch1.end(), vch2.begin(), vch2.end());
+  stack.pop_back();
+  if (stacktop(-1).size() > 5000)
+    return false;
+  }
+
+ +==References== + + + +==Acknowledgements== + +We wish to acknowledge Dan Gould for encouraging and helping review this effort. + +== Copyright == +This document is placed in the public domain. From f1169dd1fc067825c56016379a8b84c033b6eeb2 Mon Sep 17 00:00:00 2001 From: Ethan Heilman Date: Tue, 12 Dec 2023 08:24:39 -0500 Subject: [PATCH 005/288] Fixes typo Co-authored-by: kallewoof --- bip-???-cat.mediawiki | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki index 8cd7baae..281fa3c5 100644 --- a/bip-???-cat.mediawiki +++ b/bip-???-cat.mediawiki @@ -39,7 +39,7 @@ For instance a script which pushed an 1 Byte value on the stack then repeated th ==Specification== -OP_CAT pops two elements of the stack, concatenates them together in stack order and pushes the resultant element onto the stack. Given the stack [x1,x2], where x2 is at the top of the stack, OP_CAT will push x1||x2 onto the stack. By '||' we denote concatenation. +OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack [x1,x2], where x2 is at the top of the stack, OP_CAT will push x1||x2 onto the stack. By '||' we denote concatenation. Implementation 

From 26e8e5f7fc1f51e6ba861de7a25524e1b561a08d Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Tue, 12 Dec 2023 08:26:36 -0500
Subject: [PATCH 006/288] Better fits bitcoin style guide

"If an if only has a single-statement then-clause, it can appear on the same line as the if, without braces. In every other case, braces are required, and the then and else clauses must appear correctly indented on a new line."

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 281fa3c5..05f16d65 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -45,8 +45,9 @@ Implementation
 
 case OP_CAT:
 {
-    if (stack.size() < 2)
+    if (stack.size() < 2) {
         return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
+    }
     valtype& vch1 = stacktop(-2);
     valtype& vch2 = stacktop(-1);
     if (vch1.size() + vch2.size() > MAX_SCRIPT_ELEMENT_SIZE)

From 0335c9d18813f3a18cff9f9b776432114f6a570c Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Tue, 12 Dec 2023 08:27:35 -0500
Subject: [PATCH 007/288] Grammar fix

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 05f16d65..68336211 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -57,7 +57,7 @@ case OP_CAT:
 }
 break;
 

-This implementation is inspired by the original implementation of OP_CAT as shown below. Alternative implementation of OP_CAT can be found in Elements Roose S., Elements Project, "Re-enable several disabled opcodes", 2019, https://github.com/ElementsProject/elements/commit/13e1103abe3e328c5a4e2039b51a546f8be6c60a#diff-a0337ffd7259e8c7c9a7786d6dbd420c80abfa1afdb34ebae3261109d9ae3c19R740-R759.
+This implementation is inspired by the original implementation of OP_CAT as shown below. An alternative implementation of OP_CAT can be found in Elements Roose S., Elements Project, "Re-enable several disabled opcodes", 2019, https://github.com/ElementsProject/elements/commit/13e1103abe3e328c5a4e2039b51a546f8be6c60a#diff-a0337ffd7259e8c7c9a7786d6dbd420c80abfa1afdb34ebae3261109d9ae3c19R740-R759.
 
 The value of MAX_SCRIPT_ELEMENT_SIZE is 520 Bytes
 

From 3d31e5c8947bf5d2d8ba02dc22c5302085b9f91b Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Tue, 12 Dec 2023 08:59:03 -0500
Subject: [PATCH 008/288] Adds brackets

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 68336211..584f697f 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -50,8 +50,9 @@ case OP_CAT:
     }
     valtype& vch1 = stacktop(-2);
     valtype& vch2 = stacktop(-1);
-    if (vch1.size() + vch2.size() > MAX_SCRIPT_ELEMENT_SIZE)
+    if (vch1.size() + vch2.size() > MAX_SCRIPT_ELEMENT_SIZE) {
         return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
+    }
     vch1.insert(vch1.end(), vch2.begin(), vch2.end());
     stack.pop_back();
 }

From bb725e652357f2502fba3cd8e2e8fa92e40ca706 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:43:42 -0500
Subject: [PATCH 009/288] Wording

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 584f697f..40b4cc55 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -13,7 +13,7 @@
 
 ==Abstract==
 
-This BIP defines OP_CAT a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126.
+This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126.
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,

From 9779dc9920eeacbf39a9b53e5165423551de209e Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:44:14 -0500
Subject: [PATCH 010/288] Keeps past tense consistant

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 40b4cc55..1beb7c56 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -17,7 +17,7 @@ This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,
-# concatenate the popped values together,
+# concatenates the popped values together,
 # and then pushes the concatenated value on the top of the stack.
 
 OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size of greater than the maximum script element size of 520 Bytes.

From c5d66d670671dbac8265b5588f3de8e1ca4f3972 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:44:44 -0500
Subject: [PATCH 011/288] Better phrasing

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 1beb7c56..c84680ac 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -20,7 +20,7 @@ When evaluated the OP_CAT instruction:
 # concatenates the popped values together,
 # and then pushes the concatenated value on the top of the stack.
 
-OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size of greater than the maximum script element size of 520 Bytes.
+OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size greater than the maximum script element size of 520 Bytes.
 
 ==Motivation==
 Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. For instance this prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.

From 848352f40875e43ba7fd5ecabb63272f165fcd4a Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:45:04 -0500
Subject: [PATCH 012/288] Phrasing

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index c84680ac..d9215243 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -23,7 +23,7 @@ When evaluated the OP_CAT instruction:
 OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size greater than the maximum script element size of 520 Bytes.
 
 ==Motivation==
-Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. For instance this prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.
+Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. This prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.
 
 OP_CAT aims to expands the toolbox of the tapscript developer with a simple, modular and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
 

From a2b0100671f492628ce219d706fa71a506ca0475 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:47:36 -0500
Subject: [PATCH 013/288] Typo

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index d9215243..32595c33 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -29,7 +29,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree Signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
-* Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely requires the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html
+* Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults  M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
 * Replicating CheckSigFromStack  A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298  which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.

From 6a790ec52635a7aa52cc2c20dc25a9236daae5f8 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:47:50 -0500
Subject: [PATCH 014/288] Removes space in ref

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 32595c33..cd952c82 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -31,7 +31,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 * Tree Signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
 * Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
-* Vaults  M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
+* Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
 * Replicating CheckSigFromStack  A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298  which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
 The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script for which an evaluation could have memory usage exponential in the size of the script.

From 01db3acab0830a43b526c6c5c0a8daad77704d7b Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:47:58 -0500
Subject: [PATCH 015/288] Removes space in ref

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index cd952c82..9e98da0f 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -32,7 +32,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 * Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
-* Replicating CheckSigFromStack  A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298  which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
+* Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
 The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script for which an evaluation could have memory usage exponential in the size of the script.
 For instance a script which pushed an 1 Byte value on the stack then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 Terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 Bytes.

From 945e2a374249114c313d6204d7db61dfe496fe97 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 14 Dec 2023 23:48:46 -0500
Subject: [PATCH 016/288] Typos

TIL that it is "a one" rather than "an one"

Co-authored-by: kallewoof 
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 9e98da0f..ef026fd6 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -35,7 +35,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
 The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script for which an evaluation could have memory usage exponential in the size of the script.
-For instance a script which pushed an 1 Byte value on the stack then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 Terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 Bytes.
+For instance a script which pushed a 1 Byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 Terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 Bytes.
 
 ==Specification==
 

From 7180c1cf8c478ed53ee65705e34fc61975f96239 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 09:54:50 -0500
Subject: [PATCH 017/288] Prefer bytes to Bytes
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index ef026fd6..2a39158b 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -20,7 +20,7 @@ When evaluated the OP_CAT instruction:
 # concatenates the popped values together,
 # and then pushes the concatenated value on the top of the stack.
 
-OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size greater than the maximum script element size of 520 Bytes.
+OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size greater than the maximum script element size of 520 bytes.
 
 ==Motivation==
 Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. This prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.

From 6f5a74d83e621ded090f436a3cc407dc705ad132 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 10:04:36 -0500
Subject: [PATCH 018/288] Increases conciseness and clarity
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 2a39158b..92b2588e 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -34,7 +34,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
-The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script for which an evaluation could have memory usage exponential in the size of the script.
+The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
 For instance a script which pushed a 1 Byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 Terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 Bytes.
 
 ==Specification==

From d4f85b11464a60961962960b306cac72461a977f Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 14:44:07 -0500
Subject: [PATCH 019/288] Lowercase bytes
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 92b2588e..ec4834a2 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -35,7 +35,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
 The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
-For instance a script which pushed a 1 Byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 Terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 Bytes.
+For example, a script that pushed a 1-byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 bytes.
 
 ==Specification==
 

From beb5802cc6c5f28da1aeaf0f75eb59738a004fb9 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 15:27:22 -0500
Subject: [PATCH 020/288] Adds subsection header
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index ec4834a2..6a5c54a0 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -41,7 +41,7 @@ For example, a script that pushed a 1-byte value on the stack and then repeated
 
 OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack [x1,x2], where x2 is at the top of the stack, OP_CAT will push x1||x2 onto the stack. By '||' we denote concatenation.
 
-Implementation
+===Implementation===
 
 case OP_CAT:
 {

From 0a143d396910a49225c6fc2f487a968dc6e96035 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 15:46:49 -0500
Subject: [PATCH 021/288] Use BSD-3 license

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 6a5c54a0..61428e34 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -88,4 +88,4 @@ OP_CAT as it existed in the Bitcoin codebase prior to the commit "misc changes"
 We wish to acknowledge Dan Gould for encouraging and helping review this effort. 
 
 == Copyright ==
-This document is placed in the public domain.
+This document is licensed under the 3-clause BSD license.

From 82198302cd1d36f841f1bb6cd93c3c97ecbb8a31 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 15:52:05 -0500
Subject: [PATCH 022/288] Code formatting
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 61428e34..cd5b86a5 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -60,7 +60,7 @@ break;
 

 This implementation is inspired by the original implementation of OP_CAT as shown below. An alternative implementation of OP_CAT can be found in Elements Roose S., Elements Project, "Re-enable several disabled opcodes", 2019, https://github.com/ElementsProject/elements/commit/13e1103abe3e328c5a4e2039b51a546f8be6c60a#diff-a0337ffd7259e8c7c9a7786d6dbd420c80abfa1afdb34ebae3261109d9ae3c19R740-R759.
 
-The value of MAX_SCRIPT_ELEMENT_SIZE is 520 Bytes
+The value of MAX_SCRIPT_ELEMENT_SIZE is 520.
 
 ==Notes==
 

From 0b8a7e4b64458821d474fa08976a1d38d33d3004 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 15:56:12 -0500
Subject: [PATCH 023/288] Code formatting
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index cd5b86a5..d3af82f5 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -39,7 +39,7 @@ For example, a script that pushed a 1-byte value on the stack and then repeated
 
 ==Specification==
 
-OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack [x1,x2], where x2 is at the top of the stack, OP_CAT will push x1||x2 onto the stack. By '||' we denote concatenation.
+OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack _[x1, x2]_, where _x2_ is at the top of the stack, OP_CAT will push _x1 || x2_ onto the stack. By _||_ we denote concatenation.
 
 ===Implementation===
 

From 77509f6c23a6036a3e4ac929ab2fe7c6d8dbdeec Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 15 Dec 2023 15:57:08 -0500
Subject: [PATCH 024/288] Period to colon
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index d3af82f5..707cf797 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -64,7 +64,7 @@ The value of MAX_SCRIPT_ELEMENT_SIZE is 520.
 
 ==Notes==
 
-OP_CAT as it existed in the Bitcoin codebase prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefL381 which disabled it.
+OP_CAT as it existed in the Bitcoin codebase prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefL381 which disabled it:
 
 
   // (x1 x2 -- out)

From 4f39e4b9d55960432d5548fa7e52568d3051428a Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Sat, 16 Dec 2023 16:23:49 -0500
Subject: [PATCH 025/288] Avoids designing or discussing how to add
 post-quantum commitments to Bitcoin

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 707cf797..8709f7b6 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -29,7 +29,7 @@ OP_CAT aims to expands the toolbox of the tapscript developer with a simple, mod
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree Signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
-* Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html
+* Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if the quantum resistance of Lamport Signatures can be preserved when used in a taproot output.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.

From 97635f5c094709dd18f4afee017e33face886f5b Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Sun, 17 Dec 2023 12:49:46 -0500
Subject: [PATCH 026/288] Lowercase the signatures

---
 bip-???-cat.mediawiki | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 8709f7b6..68c24c96 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -28,8 +28,8 @@ Bitcoin tapscript lacks a general purpose way of combining objects on the stack
 OP_CAT aims to expands the toolbox of the tapscript developer with a simple, modular and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
-* Tree Signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
-* Post-Quantum Lamport Signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if the quantum resistance of Lamport Signatures can be preserved when used in a taproot output.
+* Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
+* Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if the quantum resistance of Lamport signatures can be preserved when used in a taproot output.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.

From e3dc3ba3617d33dc1c434196f5f7b4e463254e49 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Sun, 17 Dec 2023 12:53:07 -0500
Subject: [PATCH 027/288] Italicize variables
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 68c24c96..334cc202 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -39,7 +39,7 @@ For example, a script that pushed a 1-byte value on the stack and then repeated
 
 ==Specification==
 
-OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack _[x1, x2]_, where _x2_ is at the top of the stack, OP_CAT will push _x1 || x2_ onto the stack. By _||_ we denote concatenation.
+OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack ''[x1, x2]'', where ''x2'' is at the top of the stack, OP_CAT will push ''x1 || x2'' onto the stack. By ''||'' we denote concatenation.
 
 ===Implementation===
 

From e492a90fec53ceb1839080024cc90a41ce503906 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Mon, 18 Dec 2023 20:28:22 -0500
Subject: [PATCH 028/288] Better reference for OP_CAT removal

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 334cc202..ea2213dd 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -64,7 +64,7 @@ The value of MAX_SCRIPT_ELEMENT_SIZE is 520.
 
 ==Notes==
 
-OP_CAT as it existed in the Bitcoin codebase prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefL381 which disabled it:
+[OP_CAT as it existed in the Bitcoin codebase](https://github.com/bitcoin/bitcoin/blob/01cd2fdaf3ac6071304ceb80fb7436ac02b1059e/script.cpp#L381-L393) prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefR94 which disabled it:
 
 
   // (x1 x2 -- out)

From 785b11e8616cf0a15cb19107c0dba7e2b80ffd53 Mon Sep 17 00:00:00 2001
From: Armin Sabouri 
Date: Fri, 29 Dec 2023 12:14:45 -0500
Subject: [PATCH 029/288] Add backwards compatibility section

---
 bip-???-cat.mediawiki | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index ea2213dd..8efe002d 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -79,6 +79,9 @@ The value of MAX_SCRIPT_ELEMENT_SIZE is 520.
   }
 

 
+==Backwards Compatibility==
+OP_CAT usage in any Non-SegWitV1 script will continue to trigger the SCRIPT_ERR_DISABLED_OPCODE.
+
 ==References==
 
 

From 82fe9fc3dba07d51533dbce4de4b5eb58ddbed55 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 29 Dec 2023 18:29:00 -0500
Subject: [PATCH 030/288] specify the hex value of the opcode

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 8efe002d..6ae466e8 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -13,7 +13,7 @@
 
 ==Abstract==
 
-This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126.
+This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (the opcode 0x7e).
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,

From ae68ef11cb11d54f670779def60479170e64bc49 Mon Sep 17 00:00:00 2001
From: Armin Sabouri 
Date: Sun, 7 Jan 2024 13:24:04 -0500
Subject: [PATCH 031/288] add clarifying note about the current opcode

And some grammar + spelling cleanup
---
 bip-???-cat.mediawiki | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 6ae466e8..59f13802 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -14,6 +14,7 @@
 ==Abstract==
 
 This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (the opcode 0x7e).
+Note that the currently disabled opcode also uses `0x7e` in a non-tapscript context and will continue to be disabled.
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,
@@ -25,21 +26,21 @@ OP_CAT fails if there are less than two values on the stack or if a concatenated
 ==Motivation==
 Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. This prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.
 
-OP_CAT aims to expands the toolbox of the tapscript developer with a simple, modular and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
+OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modular, and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
 * Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if the quantum resistance of Lamport signatures can be preserved when used in a taproot output.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
-* Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficent to build vaults in Bitcoin.
+* Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
-The opcode OP_CAT was available in early versions of Bitcoin. However OP_CAT was removed because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
+The opcode OP_CAT was available in early versions of Bitcoin. However, OP_CAT was removed because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
 For example, a script that pushed a 1-byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 bytes.
 
 ==Specification==
 
-OP_CAT pops two elements off the stack, concatenates them together in stack order and pushes the resulting element onto the stack. Given the stack ''[x1, x2]'', where ''x2'' is at the top of the stack, OP_CAT will push ''x1 || x2'' onto the stack. By ''||'' we denote concatenation.
+OP_CAT pops two elements off the stack, concatenates them together in stack order, and pushes the resulting element onto the stack. Given the stack ''[x1, x2]'', where ''x2'' is at the top of the stack, OP_CAT will push ''x1 || x2'' onto the stack. By ''||'' we denote concatenation.
 
 ===Implementation===
 

From f9e100e9de0091be99d06b196a189733e9fe353d Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Sun, 7 Jan 2024 16:34:23 -0500
Subject: [PATCH 032/288] Notes that the opcode used is the same as the
 original cat opcode

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 6ae466e8..ae73ed58 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -13,7 +13,7 @@
 
 ==Abstract==
 
-This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (the opcode 0x7e).
+This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexidecimal). This is same opcode value used by the original OP_CAT.
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,

From 2cec73a5b437cc4e3c108cb482de09b0e87edb8d Mon Sep 17 00:00:00 2001
From: Armin Sabouri 
Date: Sun, 7 Jan 2024 18:18:09 -0500
Subject: [PATCH 033/288] rm comment on disabled CAT opcode

---
 bip-???-cat.mediawiki | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 59f13802..7b214d63 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -14,7 +14,6 @@
 ==Abstract==
 
 This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (the opcode 0x7e).
-Note that the currently disabled opcode also uses `0x7e` in a non-tapscript context and will continue to be disabled.
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,

From 5dde7ea5cfe2b046dde7f9e7ecf40730f2005697 Mon Sep 17 00:00:00 2001
From: Armin Sabouri 
Date: Sun, 7 Jan 2024 18:18:46 -0500
Subject: [PATCH 034/288] revert changes to abstract

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 7b214d63..4875820a 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -13,7 +13,7 @@
 
 ==Abstract==
 
-This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (the opcode 0x7e).
+This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexidecimal). This is same opcode value used by the original OP_CAT.
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,

From b3493746b1a1208ddaae52682f98cdfff1e2d563 Mon Sep 17 00:00:00 2001
From: Armin Sabouri 
Date: Wed, 20 Mar 2024 18:33:02 -0400
Subject: [PATCH 035/288] update OP_CAT implementation

---
 bip-???-cat.mediawiki | 21 +++++++++------------
 1 file changed, 9 insertions(+), 12 deletions(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 4875820a..111519d6 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -43,18 +43,15 @@ OP_CAT pops two elements off the stack, concatenates them together in stack orde
 
 ===Implementation===
 
-case OP_CAT:
-{
-    if (stack.size() < 2) {
-        return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
-    }
-    valtype& vch1 = stacktop(-2);
-    valtype& vch2 = stacktop(-1);
-    if (vch1.size() + vch2.size() > MAX_SCRIPT_ELEMENT_SIZE) {
-        return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
-    }
-    vch1.insert(vch1.end(), vch2.begin(), vch2.end());
-    stack.pop_back();
+case OP_CAT: {
+  if (stack.size() < 2)
+    return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
+  valtype& vch1 = stacktop(-2);
+  valtype& vch2 = stacktop(-1);
+  if (vch1.size() + vch2.size() > MAX_SCRIPT_ELEMENT_SIZE)
+    return set_error(serror, SCRIPT_ERR_PUSH_SIZE);
+  vch1.insert(vch1.end(), vch2.begin(), vch2.end());
+  stack.pop_back();
 }
 break;
 


From ac231a17c2e6839d9af6576d9aa1c79fb8c16eca Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Wed, 20 Mar 2024 23:53:53 -0400
Subject: [PATCH 036/288] Fixes broken mediawiki link

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 111519d6..1f803ba5 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -61,7 +61,7 @@ The value of MAX_SCRIPT_ELEMENT_SIZE is 520.
 
 ==Notes==
 
-[OP_CAT as it existed in the Bitcoin codebase](https://github.com/bitcoin/bitcoin/blob/01cd2fdaf3ac6071304ceb80fb7436ac02b1059e/script.cpp#L381-L393) prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefR94 which disabled it:
+[https://github.com/bitcoin/bitcoin/blob/01cd2fdaf3ac6071304ceb80fb7436ac02b1059e/script.cpp#L381-L393 OP_CAT as it existed in the Bitcoin codebase] prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefR94 which disabled it:
 
 
   // (x1 x2 -- out)

From c235aa493933dfff82ef3ba46a5e56eecb80d3c6 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Tue, 26 Mar 2024 20:36:19 -0400
Subject: [PATCH 037/288] Adds more acknowledgements

---
 bip-???-cat.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 1f803ba5..3d3b7344 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -85,7 +85,7 @@ OP_CAT usage in any Non-SegWitV1 script will continue to trigger the SCRIPT_ERR_
 
 ==Acknowledgements==
 
-We wish to acknowledge Dan Gould for encouraging and helping review this effort. 
+We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill for their feedback and helpful comments.
 
 == Copyright ==
 This document is licensed under the 3-clause BSD license.

From f8ad6ede5753b51bfd8a782f7de6d74a7e06cd95 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 12 Apr 2024 08:48:54 -0400
Subject: [PATCH 038/288] Changes OP_CAT BIP based on feedback given by Bob
 Summerwill

Bob Summerwill proposed a number of changes to the OP_CAT BIP to better follow BIP-2. This commit makes these changes:

* Using the section order specified in BIP-2
* Adding a Rationale section
* Expand the specification section by moving details from the abstract into the specification

Additionally this commit as rewords some confusing language.

Thanks Bob
---
 bip-???-cat.mediawiki | 72 ++++++++++++++++++++++++++-----------------
 1 file changed, 43 insertions(+), 29 deletions(-)

diff --git a/bip-???-cat.mediawiki b/bip-???-cat.mediawiki
index 3d3b7344..d7746fe4 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-???-cat.mediawiki
@@ -1,26 +1,33 @@
 
-  BIP: ???
+  BIP: ?
   Layer: Consensus (soft fork)
   Title: OP_CAT
   Author: Ethan Heilman 
           Armin Sabouri 
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-op-cat
   Status: Draft
   Type: Standards Track
   Created: 2023-10-21
-  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-op-cat
   License: BSD-3-Clause
 

 
 ==Abstract==
 
-This BIP reintroduces OP_CAT in the form of a new tapscript opcode which allows the concatenation of two values on the stack. This opcode would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexidecimal). This is same opcode value used by the original OP_CAT.
+This BIP introduces OP_CAT as a tapscript opcode which allows the concatenation of two values on the stack. OP_CAT would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexadecimal). This is the same opcode value used by the original OP_CAT.
+
+== Copyright ==
+This document is licensed under the 3-clause BSD license.
+
+==Specification==
 
 When evaluated the OP_CAT instruction:
 # Pops the top two values off the stack,
-# concatenates the popped values together,
+# concatenates the popped values together in stack order,
 # and then pushes the concatenated value on the top of the stack.
 
-OP_CAT fails if there are less than two values on the stack or if a concatenated value would have a combined size greater than the maximum script element size of 520 bytes.
+Given the stack ''[x1, x2]'', where ''x2'' is at the top of the stack, OP_CAT will push ''x1 || x2'' onto the stack. By ''||'' we denote concatenation. OP_CAT fails if there are fewer than two values on the stack or if a concatenated value would have a combined size greater than the maximum script element size of 520 bytes.
+
+This opcode would be activated via a soft fork by redefining the tapscript opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexadecimal) to OP_CAT.
 
 ==Motivation==
 Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. This prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.
@@ -37,13 +44,23 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 The opcode OP_CAT was available in early versions of Bitcoin. However, OP_CAT was removed because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
 For example, a script that pushed a 1-byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 bytes.
 
-==Specification==
+==Rationale==
 
-OP_CAT pops two elements off the stack, concatenates them together in stack order, and pushes the resulting element onto the stack. Given the stack ''[x1, x2]'', where ''x2'' is at the top of the stack, OP_CAT will push ''x1 || x2'' onto the stack. By ''||'' we denote concatenation.
+Our decision to reenable OP_CAT by redefining a tapscript OP_SUCCESSx opcode to OP_CAT was motivated to leverage the tapscript softfork opcode upgrade path introduced in [[bip-0342.mediawiki|BIP342]].
+
+We specifically choose to use OP_SUCCESS126 rather than another OP_SUCCESSx as OP_SUCCESS126 uses the same opcode value (126 in decimal and 0x7e in hexadecimal) that was used for OP_CAT prior to it being disabled in Bitcoin. This removes a potential source of confusion that would exist if we had a opcode value different from the one used in the original OP_CAT opcode.
+
+While the OP_SUCCESSx opcode upgrade path could enable us to increase the stack element size while reenabling OP_CAT, we wanted to separate the decision to change the stack element size limit from the decision to reenable OP_CAT. This BIP takes no position in favor or against increasing the stack element size limit.
+
+==Backwards Compatibility==
+
+OP_CAT usage in an non-tapscript script will continue to trigger the SCRIPT_ERR_DISABLED_OPCODE. The only change would be to OP_CAT usage in tapscript. This change to tapscript would be activated a soft fork that redefines an OP_SUCCESSx opcode (OP_SUCCESS126) to OP_CAT.
+
+==Reference implementation==
 
-===Implementation===
 
-case OP_CAT: {
+case OP_CAT:
+{
   if (stack.size() < 2)
     return set_error(serror, SCRIPT_ERR_INVALID_STACK_OPERATION);
   valtype& vch1 = stacktop(-2);
@@ -55,29 +72,29 @@ case OP_CAT: {
 }
 break;
 

-This implementation is inspired by the original implementation of OP_CAT as shown below. An alternative implementation of OP_CAT can be found in Elements Roose S., Elements Project, "Re-enable several disabled opcodes", 2019, https://github.com/ElementsProject/elements/commit/13e1103abe3e328c5a4e2039b51a546f8be6c60a#diff-a0337ffd7259e8c7c9a7786d6dbd420c80abfa1afdb34ebae3261109d9ae3c19R740-R759.
+
 
 The value of MAX_SCRIPT_ELEMENT_SIZE is 520.
 
-==Notes==
-
-[https://github.com/bitcoin/bitcoin/blob/01cd2fdaf3ac6071304ceb80fb7436ac02b1059e/script.cpp#L381-L393 OP_CAT as it existed in the Bitcoin codebase] prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefR94 which disabled it:
+This implementation is inspired by the original implementation of [https://github.com/bitcoin/bitcoin/blob/01cd2fdaf3ac6071304ceb80fb7436ac02b1059e/script.cpp#L381-L393 OP_CAT as it existed in the Bitcoin codebase] prior to the commit "misc changes" 4bd188cS. Nakamoto, "misc changes", Aug 25 2010, https://github.com/bitcoin/bitcoin/commit/4bd188c4383d6e614e18f79dc337fbabe8464c82#diff-27496895958ca30c47bbb873299a2ad7a7ea1003a9faa96b317250e3b7aa1fefR94 which disabled it:
 
 
-  // (x1 x2 -- out)
-  if (stack.size() < 2)
-    return false;
-  valtype& vch1 = stacktop(-2);
-  valtype& vch2 = stacktop(-1);
-  vch1.insert(vch1.end(), vch2.begin(), vch2.end());
-  stack.pop_back();
-  if (stacktop(-1).size() > 5000)
-    return false;
-  }
+case OP_CAT:
+{
+    // (x1 x2 -- out)
+    if (stack.size() < 2)
+        return false;
+    valtype& vch1 = stacktop(-2);
+    valtype& vch2 = stacktop(-1);
+    vch1.insert(vch1.end(), vch2.begin(), vch2.end());
+    stack.pop_back();
+    if (stacktop(-1).size() > 5000)
+        return false;
+}
+break;
 

 
-==Backwards Compatibility==
-OP_CAT usage in any Non-SegWitV1 script will continue to trigger the SCRIPT_ERR_DISABLED_OPCODE.
+An alternative implementation of OP_CAT can be found in Elements Roose S., Elements Project, "Re-enable several disabled opcodes", 2019, https://github.com/ElementsProject/elements/commit/13e1103abe3e328c5a4e2039b51a546f8be6c60a#diff-a0337ffd7259e8c7c9a7786d6dbd420c80abfa1afdb34ebae3261109d9ae3c19R740-R759.
 
 ==References==
 
@@ -85,7 +102,4 @@ OP_CAT usage in any Non-SegWitV1 script will continue to trigger the SCRIPT_ERR_
 
 ==Acknowledgements==
 
-We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill for their feedback and helpful comments.
-
-== Copyright ==
-This document is licensed under the 3-clause BSD license.
+We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill for their feedback, review and helpful comments.

From 05b626debfa5f862bafd7fc2d1e7dc1e5974940f Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 24 Apr 2024 16:27:24 -0400
Subject: [PATCH 039/288] 38: Remove other implementation sections

---
 bip-0038.mediawiki | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/bip-0038.mediawiki b/bip-0038.mediawiki
index 7f99b1a7..5fd24ada 100644
--- a/bip-0038.mediawiki
+++ b/bip-0038.mediawiki
@@ -214,9 +214,6 @@ Added to alpha version of Casascius Bitcoin Address Utility for Windows availabl
 
 Click "Tools" then "PPEC Keygen" (provisional name)
 
-==Other implementations==
-* Javascript - https://github.com/bitcoinjs/bip38
-
 ==Test vectors==
 
 ===No compression, no EC multiply===

From a26656133b3ba67bf5073132ab47a357a4ddc9fc Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Thu, 25 Apr 2024 10:17:20 -0400
Subject: [PATCH 040/288] 38: Remove dead reference implementation link

---
 bip-0038.mediawiki | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bip-0038.mediawiki b/bip-0038.mediawiki
index 5fd24ada..986ddeea 100644
--- a/bip-0038.mediawiki
+++ b/bip-0038.mediawiki
@@ -209,8 +209,7 @@ The preliminary values of 16384, 8, and 8 are hoped to offer the following prope
 ==Reference implementation==
 Added to alpha version of Casascius Bitcoin Address Utility for Windows available at:
 
-* via https: https://casascius.com/btcaddress-alpha.zip
-* at github: https://github.com/casascius/Bitcoin-Address-Utility
+* https://github.com/casascius/Bitcoin-Address-Utility
 
 Click "Tools" then "PPEC Keygen" (provisional name)
 

From e3f7a260628bbdbfd4438281193926d2b3bce25f Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 24 Apr 2024 16:27:24 -0400
Subject: [PATCH 041/288] 85: Remove other implementation sections

---
 bip-0085.mediawiki | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki
index d5557fbf..738227ac 100644
--- a/bip-0085.mediawiki
+++ b/bip-0085.mediawiki
@@ -96,18 +96,6 @@ OUTPUT
 * Python library implementation: [https://github.com/ethankosakovsky/bip85]
 * JavaScript library implementation: [https://github.com/hoganri/bip85-js]
 
-===Other Implementations===
-
-* JavaScript library implementation: [https://github.com/hoganri/bip85-js]
-
-* Coldcard Firmware: [https://github.com/Coldcard/firmware/pull/39]
-
-* Ian Coleman's Mnemonic Code Converter: [https://github.com/iancoleman/bip39] and [https://iancoleman.io/bip39/]
-
-* AirGap Vault: [https://github.com/airgap-it/airgap-vault/commit/d64332fc2f332be622a1229acb27f621e23774d6]
-
-* btc_hd_wallet: [https://github.com/scgbckbone/btc-hd-wallet]
-
 ==Applications==
 
 The Application number defines how entropy will be used post processing. Some basic examples follow:

From 6c729c4b418006def78caad0d921f1841c4db1ee Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 25 Apr 2024 13:03:00 -0400
Subject: [PATCH 042/288] Renamed to use BIP-0347

---
 bip-???-cat.mediawiki => bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename bip-???-cat.mediawiki => bip-0347.mediawiki (99%)

diff --git a/bip-???-cat.mediawiki b/bip-0347.mediawiki
similarity index 99%
rename from bip-???-cat.mediawiki
rename to bip-0347.mediawiki
index d7746fe4..f85b2e9f 100644
--- a/bip-???-cat.mediawiki
+++ b/bip-0347.mediawiki
@@ -1,5 +1,5 @@
 
-  BIP: ?
+  BIP: 347
   Layer: Consensus (soft fork)
   Title: OP_CAT
   Author: Ethan Heilman 

From 0a3869d1021bfc0e4c5e8779d1ff33fe67846af8 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 25 Apr 2024 13:16:55 -0400
Subject: [PATCH 043/288] Fixes comment URI

---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index f85b2e9f..a05c2100 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -4,7 +4,7 @@
   Title: OP_CAT
   Author: Ethan Heilman 
           Armin Sabouri 
-  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-op-cat
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0347
   Status: Draft
   Type: Standards Track
   Created: 2023-10-21

From 7ed8f6f38c67ede30e38114632b3fa6bbe396800 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 25 Apr 2024 13:42:24 -0400
Subject: [PATCH 044/288] Better quantum resistant section based Tim's comments

Adds additional acks
---
 bip-0347.mediawiki | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index a05c2100..1e75ffc1 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -36,7 +36,7 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
-* Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if the quantum resistance of Lamport signatures can be preserved when used in a taproot output.
+* Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
@@ -102,4 +102,5 @@ An alternative implementation of OP_CAT can be found in Elements Roose S.,
 
 ==Acknowledgements==
 
-We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill for their feedback, review and helpful comments.
+We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill, 
+Tim Ruffing and Johan T. Halseth for their feedback, review and helpful comments.

From 852502b9cf0568dc4c75d93aaaaee3d102002ec7 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 25 Apr 2024 20:32:52 -0400
Subject: [PATCH 045/288] Specifies exact tree signature limit (suggested by
 Ali Sherief)

---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 1e75ffc1..e43bd72f 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -35,7 +35,7 @@ Bitcoin tapscript lacks a general purpose way of combining objects on the stack
 OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modular, and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
-* Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with a thousand public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
+* Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with up to 4,294,967,296 public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
 * Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.

From c10870a390a7141eb223ed8141cab48668239536 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 26 Apr 2024 13:59:28 -0400
Subject: [PATCH 046/288] Adds comma

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index e43bd72f..24df6456 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -20,7 +20,7 @@ This document is licensed under the 3-clause BSD license.
 
 ==Specification==
 
-When evaluated the OP_CAT instruction:
+When evaluated, the OP_CAT instruction:
 # Pops the top two values off the stack,
 # concatenates the popped values together in stack order,
 # and then pushes the concatenated value on the top of the stack.

From 5413e18fd93c078d4c12d4845a08b7c9a9b24ada Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 26 Apr 2024 14:01:59 -0400
Subject: [PATCH 047/288] Consistent formatting for Section Headings

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 24df6456..dca21000 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -30,6 +30,7 @@ Given the stack ''[x1, x2]'', where ''x2'' is at the top of the
 This opcode would be activated via a soft fork by redefining the tapscript opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexadecimal) to OP_CAT.
 
 ==Motivation==
+
 Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. This prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.
 
 OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modular, and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:

From dbc612edfa137ce1f1cbcb9d40f58773758315ae Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Fri, 26 Apr 2024 14:02:13 -0400
Subject: [PATCH 048/288] Consistent formatting for Section Headings

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index dca21000..e825284c 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -16,6 +16,7 @@
 This BIP introduces OP_CAT as a tapscript opcode which allows the concatenation of two values on the stack. OP_CAT would be activated via a soft fork by redefining the opcode OP_SUCCESS126 (126 in decimal and 0x7e in hexadecimal). This is the same opcode value used by the original OP_CAT.
 
 == Copyright ==
+
 This document is licensed under the 3-clause BSD license.
 
 ==Specification==

From a05543cc588ebcb266aa3251472324671e384afe Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Mon, 29 Apr 2024 18:44:24 -0400
Subject: [PATCH 049/288] Changes title of BIP to "Enable OP_CAT in Tapscript"

---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index e825284c..1a0feb88 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -1,7 +1,7 @@
 
   BIP: 347
   Layer: Consensus (soft fork)
-  Title: OP_CAT
+  Title: Enable OP_CAT in Tapscript
   Author: Ethan Heilman 
           Armin Sabouri 
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0347

From 1d5530443dd660dc090145061bc146d4c64ffab3 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Mon, 29 Apr 2024 19:36:26 -0400
Subject: [PATCH 050/288] OP_CAT in Tapscript
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Vojtěch Strnad <43024885+vostrnad@users.noreply.github.com>
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 1a0feb88..3070d14e 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -1,7 +1,7 @@
 
   BIP: 347
   Layer: Consensus (soft fork)
-  Title: Enable OP_CAT in Tapscript
+  Title: OP_CAT in Tapscript
   Author: Ethan Heilman 
           Armin Sabouri 
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0347

From 3d78cc08863864d7caea85a229fb223dea25540f Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Mon, 29 Apr 2024 21:04:15 -0400
Subject: [PATCH 051/288] Fixes typos

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 3070d14e..622d7b46 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -56,7 +56,7 @@ While the OP_SUCCESSx opcode upgrade path could enable us to increase the stack
 
 ==Backwards Compatibility==
 
-OP_CAT usage in an non-tapscript script will continue to trigger the SCRIPT_ERR_DISABLED_OPCODE. The only change would be to OP_CAT usage in tapscript. This change to tapscript would be activated a soft fork that redefines an OP_SUCCESSx opcode (OP_SUCCESS126) to OP_CAT.
+OP_CAT usage in a non-tapscript script will continue to trigger the SCRIPT_ERR_DISABLED_OPCODE. The only change would be to OP_CAT usage in tapscript. This change to tapscript would be activated as a soft fork that redefines an OP_SUCCESSx opcode (OP_SUCCESS126) to OP_CAT.
 
 ==Reference implementation==
 

From f75184b8d8c8b723d8efb0a02916f9d874226efc Mon Sep 17 00:00:00 2001
From: Yannick Seurin 
Date: Tue, 30 Apr 2024 11:34:30 +0200
Subject: [PATCH 052/288] updating info on multi-, threshold, and blind
 signatures

---
 bip-0340.mediawiki | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index c9419167..7746018b 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -62,7 +62,7 @@ Since we would like to avoid the fragility that comes with short hashes, the ''e
 
 '''Key prefixing''' Using the verification rule above directly makes Schnorr signatures vulnerable to "related-key attacks" in which a third party can convert a signature ''(R, s)'' for public key ''P'' into a signature ''(R, s + a⋅hash(R || m))'' for public key ''P + a⋅G'' and the same message ''m'', for any given additive tweak ''a'' to the signing key. This would render signatures insecure when keys are generated using [[bip-0032.mediawiki#public-parent-key--public-child-key|BIP32's unhardened derivation]] and other methods that rely on additive tweaks to existing keys such as Taproot.
 
-To protect against these attacks, we choose ''key prefixed''A limitation of committing to the public key (rather than to a short hash of it, or not at all) is that it removes the ability for public key recovery or verifying signatures against a short public key hash. These constructions are generally incompatible with batch verification. Schnorr signatures which means that the public key is prefixed to the message in the challenge hash input. This changes the equation to ''s⋅G = R + hash(R || P || m)⋅P''. [https://eprint.iacr.org/2015/1135.pdf It can be shown] that key prefixing protects against related-key attacks with additive tweaks. In general, key prefixing increases robustness in multi-user settings, e.g., it seems to be a requirement for proving the MuSig multisignature scheme secure (see Applications below).
+To protect against these attacks, we choose ''key prefixed''A limitation of committing to the public key (rather than to a short hash of it, or not at all) is that it removes the ability for public key recovery or verifying signatures against a short public key hash. These constructions are generally incompatible with batch verification. Schnorr signatures which means that the public key is prefixed to the message in the challenge hash input. This changes the equation to ''s⋅G = R + hash(R || P || m)⋅P''. [https://eprint.iacr.org/2015/1135.pdf It can be shown] that key prefixing protects against related-key attacks with additive tweaks. In general, key prefixing increases robustness in multi-user settings, e.g., it seems to be a requirement for proving the MuSig2 multisignature scheme secure (see Applications below).
 
 We note that key prefixing is not strictly necessary for transaction signatures as used in Bitcoin currently, because signed transactions indirectly commit to the public keys already, i.e., ''m'' contains a commitment to ''pk''. However, this indirect commitment should not be relied upon because it may change with proposals such as SIGHASH_NOINPUT ([[bip-0118.mediawiki|BIP118]]), and would render the signature scheme unsuitable for other purposes than signing transactions, e.g., [https://bitcoin.org/en/developer-reference#signmessage signing ordinary messages].
 
@@ -165,7 +165,7 @@ It should be noted that various alternative signing algorithms can be used to pr
 
 '''Nonce exfiltration protection''' It is possible to strengthen the nonce generation algorithm using a second device. In this case, the second device contributes randomness which the actual signer provably incorporates into its nonce. This prevents certain attacks where the signer device is compromised and intentionally tries to leak the secret key through its nonce selection.
 
-'''Multisignatures''' This signature scheme is compatible with various types of multisignature and threshold schemes such as [https://eprint.iacr.org/2018/068 MuSig], where a single public key requires holders of multiple secret keys to participate in signing (see Applications below).
+'''Multisignatures''' This signature scheme is compatible with various types of multisignature and threshold schemes such as [https://eprint.iacr.org/2020/1261.pdf MuSig2], where a single public key requires holders of multiple secret keys to participate in signing (see Applications below).
 '''It is important to note that multisignature signing schemes in general are insecure with the ''rand'' generation from the default signing algorithm above (or any other deterministic method).'''
 
 '''Precomputed public key data''' For many uses the compressed 33-byte encoding of the public key corresponding to the secret key may already be known, making it easy to evaluate ''has_even_y(P)'' and ''bytes(P)''. As such, having signers supply this directly may be more efficient than recalculating the public key from the secret key. However, if this optimization is used and additionally the signature verification at the end of the signing algorithm is dropped for increased efficiency, signers must ensure the public key is correctly calculated and not taken from untrusted sources.
@@ -264,9 +264,9 @@ While recent academic papers claim that they are also possible with ECDSA, conse
 
 === Multisignatures and Threshold Signatures ===
 
-By means of an interactive scheme such as [https://eprint.iacr.org/2018/068 MuSig], participants can aggregate their public keys into a single public key which they can jointly sign for. This allows ''n''-of-''n'' multisignatures which, from a verifier's perspective, are no different from ordinary signatures, giving improved privacy and efficiency versus ''CHECKMULTISIG'' or other means.
+By means of an interactive scheme such as [https://eprint.iacr.org/2020/1261.pdf MuSig2], participants can aggregate their public keys into a single public key which they can jointly sign for. This allows ''n''-of-''n'' multisignatures which, from a verifier's perspective, are no different from ordinary signatures, giving improved privacy and efficiency versus ''CHECKMULTISIG'' or other means.
 
-Moreover, Schnorr signatures are compatible with [https://web.archive.org/web/20031003232851/http://www.research.ibm.com/security/dkg.ps distributed key generation], which enables interactive threshold signatures schemes, e.g., the schemes described by [http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps Stinson and Strobl (2001)] or [https://web.archive.org/web/20060911151529/http://theory.lcs.mit.edu/~stasio/Papers/gjkr03.pdf Gennaro, Jarecki and Krawczyk (2003)]. These protocols make it possible to realize ''k''-of-''n'' threshold signatures, which ensure that any subset of size ''k'' of the set of ''n'' signers can sign but no subset of size less than ''k'' can produce a valid Schnorr signature. However, the practicality of the existing schemes is limited: most schemes in the literature have been proven secure only for the case ''k-1 < n/2'', are not secure when used concurrently in multiple sessions, or require a reliable broadcast mechanism to be secure. Further research is necessary to improve this situation.
+Moreover, Schnorr signatures are compatible with [https://en.wikipedia.org/wiki/Distributed_key_generation distributed key generation], which enables interactive threshold signatures schemes, e.g., the schemes described by [http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps Stinson and Strobl (2001)], [https://link.springer.com/content/pdf/10.1007/s00145-006-0347-3.pdf Gennaro, Jarecki, Krawczyk, and Rabin (2007)], [https://eprint.iacr.org/2020/852.pdf Komlo and Goldberg (2020)], or [https://eprint.iacr.org/2023/899.pdf Chu, Gerhart, Ruffing, and Schröder (2023)]. These protocols make it possible to realize ''k''-of-''n'' threshold signatures, which ensure that any subset of size ''k'' of the set of ''n'' signers can sign but no subset of size less than ''k'' can produce a valid Schnorr signature.
 
 === Adaptor Signatures ===
 
@@ -278,7 +278,7 @@ Adaptor signatures, beyond the efficiency and privacy benefits of encoding scrip
 
 === Blind Signatures ===
 
-A blind signature protocol is an interactive protocol that enables a signer to sign a message at the behest of another party without learning any information about the signed message or the signature. Schnorr signatures admit a very [http://publikationen.ub.uni-frankfurt.de/files/4292/schnorr.blind_sigs_attack.2001.pdf simple blind signature scheme] which is however insecure because it's vulnerable to [https://www.iacr.org/archive/crypto2002/24420288/24420288.pdf Wagner's attack]. A known mitigation is to let the signer abort a signing session with a certain probability, and the resulting scheme can be [https://eprint.iacr.org/2019/877 proven secure under non-standard cryptographic assumptions].
+A blind signature protocol is an interactive protocol that enables a signer to sign a message at the behest of another party without learning any information about the signed message or the signature. Schnorr signatures admit a very [http://publikationen.ub.uni-frankfurt.de/files/4292/schnorr.blind_sigs_attack.2001.pdf simple blind signature scheme] which is however insecure because it's vulnerable to [https://www.iacr.org/archive/crypto2002/24420288/24420288.pdf Wagner's attack]. Known mitigations are to let the signer abort a signing session with a certain probability, which can be [https://eprint.iacr.org/2019/877 proven secure under non-standard cryptographic assumptions], or [https://eprint.iacr.org/2022/1676.pdf to use zero-knowledge proofs].
 
 Blind Schnorr signatures could for example be used in [https://github.com/ElementsProject/scriptless-scripts/blob/master/md/partially-blind-swap.md Partially Blind Atomic Swaps], a construction to enable transferring of coins, mediated by an untrusted escrow agent, without connecting the transactors in the public blockchain transaction graph.
 

From 2c017b0c0b1259a6a7f5716439b9a58dbe26f0ee Mon Sep 17 00:00:00 2001
From: Yannick Seurin 
Date: Tue, 30 Apr 2024 11:42:38 +0200
Subject: [PATCH 053/288] link to BIP327

---
 bip-0340.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index 7746018b..1aeb1c29 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -264,7 +264,7 @@ While recent academic papers claim that they are also possible with ECDSA, conse
 
 === Multisignatures and Threshold Signatures ===
 
-By means of an interactive scheme such as [https://eprint.iacr.org/2020/1261.pdf MuSig2], participants can aggregate their public keys into a single public key which they can jointly sign for. This allows ''n''-of-''n'' multisignatures which, from a verifier's perspective, are no different from ordinary signatures, giving improved privacy and efficiency versus ''CHECKMULTISIG'' or other means.
+By means of an interactive scheme such as [https://eprint.iacr.org/2020/1261.pdf MuSig2] ([[bip-0327.mediawiki|BIP327]]), participants can aggregate their public keys into a single public key which they can jointly sign for. This allows ''n''-of-''n'' multisignatures which, from a verifier's perspective, are no different from ordinary signatures, giving improved privacy and efficiency versus ''CHECKMULTISIG'' or other means.
 
 Moreover, Schnorr signatures are compatible with [https://en.wikipedia.org/wiki/Distributed_key_generation distributed key generation], which enables interactive threshold signatures schemes, e.g., the schemes described by [http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps Stinson and Strobl (2001)], [https://link.springer.com/content/pdf/10.1007/s00145-006-0347-3.pdf Gennaro, Jarecki, Krawczyk, and Rabin (2007)], [https://eprint.iacr.org/2020/852.pdf Komlo and Goldberg (2020)], or [https://eprint.iacr.org/2023/899.pdf Chu, Gerhart, Ruffing, and Schröder (2023)]. These protocols make it possible to realize ''k''-of-''n'' threshold signatures, which ensure that any subset of size ''k'' of the set of ''n'' signers can sign but no subset of size less than ''k'' can produce a valid Schnorr signature.
 

From 696cc1713b931589d01c544d3016f3cf57be0058 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Tue, 30 Apr 2024 21:13:43 -0400
Subject: [PATCH 054/288] Adds post history, fixes created date

---
 bip-0347.mediawiki | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 622d7b46..88dad57a 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -7,8 +7,9 @@
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0347
   Status: Draft
   Type: Standards Track
-  Created: 2023-10-21
+  Created: 2023-12-11
   License: BSD-3-Clause
+  Post-History: 2023-10-21: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-October/022049.html [bitcoin-dev] Proposed BIP for OP_CAT
 

 
 ==Abstract==

From d670035b0c0ef60c10e9e818f3fbf6f11779257f Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Wed, 1 May 2024 16:30:38 -0400
Subject: [PATCH 055/288] Adds sentence suggested by murchandamus to quantum
 paragraph

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 88dad57a..29d9219e 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -39,7 +39,7 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with up to 4,294,967,296 public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
-* Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
+* Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It has been proposed that if ECDSA is broken or a powerful computer was on the horizon, there might be an effort to protect ownership of bitcoins by allowing people to mark their taproot outputs as "script-path only" and then move their coins into such outputs with a leaf in the script tree requiring a Lamport signature. It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.

From e9e7636f7e7d5454c2993394518b48f6b4f0833a Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Wed, 1 May 2024 16:31:49 -0400
Subject: [PATCH 056/288] Increases commas and capital letters

This improves readability, thanks!

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 29d9219e..2d4ab05e 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -33,7 +33,7 @@ This opcode would be activated via a soft fork by redefining the tapscript opcod
 
 ==Motivation==
 
-Bitcoin tapscript lacks a general purpose way of combining objects on the stack restricting the expressiveness and power of tapscript. This prevents among many other things the ability to construct and evaluate merkle trees and other hashed data structures in tapscript. OP_CAT by adding a general purpose way to concatenate stack values would overcome this limitation and greatly increase the functionality of tapscript.
+Bitcoin Tapscript lacks a general purpose way of combining objects on the stack, restricting the expressiveness and power of Tapscript. This prevents, among many other things, the ability to construct and evaluate merkle trees and other hashed data structures in Tapscript. OP_CAT, by adding a general purpose way to concatenate stack values, would overcome this limitation and greatly increase the functionality of Tapscript.
 
 OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modular, and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
 

From 6815c39f93a7f26f509fb4e3dedf4c0d654ae857 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Wed, 1 May 2024 16:32:28 -0400
Subject: [PATCH 057/288] Adds commas

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 2d4ab05e..8d7bf32e 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -37,7 +37,7 @@ Bitcoin Tapscript lacks a general purpose way of combining objects on the stack,
 
 OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modular, and useful opcode in the spirit of Unix R. Pike and B. Kernighan, "Program design in the UNIX environment", 1983, https://harmful.cat-v.org/cat-v/unix_prog_design.pdf. To demonstrate the usefulness of OP_CAT below we provide a non-exhaustive list of some usecases that OP_CAT would enable:
 
-* Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
+* Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT, they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with up to 4,294,967,296 public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
 * Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It has been proposed that if ECDSA is broken or a powerful computer was on the horizon, there might be an effort to protect ownership of bitcoins by allowing people to mark their taproot outputs as "script-path only" and then move their coins into such outputs with a leaf in the script tree requiring a Lamport signature. It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.

From 6ea9fda9aca437778d8162f6dbf80d7a5aca6b99 Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Thu, 2 May 2024 18:39:58 -0400
Subject: [PATCH 058/288] Fixes link to liar liar

---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 8d7bf32e..0e198958 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -40,7 +40,7 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT, they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with up to 4,294,967,296 public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
 * Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It has been proposed that if ECDSA is broken or a powerful computer was on the horizon, there might be an effort to protect ownership of bitcoins by allowing people to mark their taproot outputs as "script-path only" and then move their coins into such outputs with a leaf in the script tree requiring a Lamport signature. It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
-* Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.727.6262&rep=rep1&type=pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
+* Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://dl.acm.org/doi/10.1145/2810103.2813686 in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 

From 31f51927f12906678e9e710c2871eccc0fc2dd40 Mon Sep 17 00:00:00 2001
From: Murch 
Date: Thu, 2 May 2024 21:57:31 -0400
Subject: [PATCH 059/288] Add BIP-347 OP_CAT to table

---
 README.mediawiki | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.mediawiki b/README.mediawiki
index 96b8df33..ed7df0c9 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1072,6 +1072,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Standard
 | Final
 |-
+| [[bip-0347.mediawiki|347]]
+| Consensus (soft fork)
+| OP_CAT in Tapscript
+| Ethan Heilman, Armin Sabouri
+| Standard
+| Draft
+|-
 | [[bip-0350.mediawiki|350]]
 | Applications
 | Bech32m format for v1+ witness addresses

From 1ed7d03393988facec21bfb1cabdf11685c78aea Mon Sep 17 00:00:00 2001
From: Yannick Seurin 
Date: Fri, 3 May 2024 10:31:27 +0200
Subject: [PATCH 060/288] more precise wording for key-prefixing justification

---
 bip-0340.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index 1aeb1c29..3fd491fb 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -62,7 +62,7 @@ Since we would like to avoid the fragility that comes with short hashes, the ''e
 
 '''Key prefixing''' Using the verification rule above directly makes Schnorr signatures vulnerable to "related-key attacks" in which a third party can convert a signature ''(R, s)'' for public key ''P'' into a signature ''(R, s + a⋅hash(R || m))'' for public key ''P + a⋅G'' and the same message ''m'', for any given additive tweak ''a'' to the signing key. This would render signatures insecure when keys are generated using [[bip-0032.mediawiki#public-parent-key--public-child-key|BIP32's unhardened derivation]] and other methods that rely on additive tweaks to existing keys such as Taproot.
 
-To protect against these attacks, we choose ''key prefixed''A limitation of committing to the public key (rather than to a short hash of it, or not at all) is that it removes the ability for public key recovery or verifying signatures against a short public key hash. These constructions are generally incompatible with batch verification. Schnorr signatures which means that the public key is prefixed to the message in the challenge hash input. This changes the equation to ''s⋅G = R + hash(R || P || m)⋅P''. [https://eprint.iacr.org/2015/1135.pdf It can be shown] that key prefixing protects against related-key attacks with additive tweaks. In general, key prefixing increases robustness in multi-user settings, e.g., it seems to be a requirement for proving the MuSig2 multisignature scheme secure (see Applications below).
+To protect against these attacks, we choose ''key prefixed''A limitation of committing to the public key (rather than to a short hash of it, or not at all) is that it removes the ability for public key recovery or verifying signatures against a short public key hash. These constructions are generally incompatible with batch verification. Schnorr signatures which means that the public key is prefixed to the message in the challenge hash input. This changes the equation to ''s⋅G = R + hash(R || P || m)⋅P''. [https://eprint.iacr.org/2015/1135.pdf It can be shown] that key prefixing protects against related-key attacks with additive tweaks. In general, key prefixing increases robustness in multi-user settings, e.g., it seems to be a requirement for proving multiparty signature protocols (such as MuSig, MuSig2, and FROST) secure (see Applications below).
 
 We note that key prefixing is not strictly necessary for transaction signatures as used in Bitcoin currently, because signed transactions indirectly commit to the public keys already, i.e., ''m'' contains a commitment to ''pk''. However, this indirect commitment should not be relied upon because it may change with proposals such as SIGHASH_NOINPUT ([[bip-0118.mediawiki|BIP118]]), and would render the signature scheme unsuitable for other purposes than signing transactions, e.g., [https://bitcoin.org/en/developer-reference#signmessage signing ordinary messages].
 

From 4dcdadee675db63e241cda71cdfca9ebe96ce0bf Mon Sep 17 00:00:00 2001
From: Yannick Seurin 
Date: Fri, 3 May 2024 10:32:42 +0200
Subject: [PATCH 061/288] update changelog

---
 bip-0340.mediawiki | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index 3fd491fb..03ec45d7 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -293,6 +293,7 @@ To help implementors understand updates to this BIP, we keep a list of substanti
 
 * 2022-08: Fix function signature of lift_x in reference code
 * 2023-04: Allow messages of arbitrary size
+* 2024-05: Update "Applications" section with more recent references
 
 == Footnotes ==
 

From cda34eef1c2543ece1205240f27e8d1cfffb336d Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Sun, 5 May 2024 17:57:27 -0400
Subject: [PATCH 062/288] Improved accuracy of paragraph on OP_CAT's removal in
 2010

---
 bip-0347.mediawiki | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 0e198958..545ffbb6 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -44,8 +44,12 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
-The opcode OP_CAT was available in early versions of Bitcoin. However, OP_CAT was removed because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
-For example, a script that pushed a 1-byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack value whose size was greater than 1 terabyte. This is no longer an issue because tapscript enforces a maximum stack element size of 520 bytes.
+OP_CAT was available in early versions of Bitcoin. 
+In 2010, a single commit disabled OP_CAT, along with another 15 opcodes.
+Folklore states that OP_CAT was removed in this commit because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
+For example, a script that pushed a 1-byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack element whose size was greater than 1 terabyte assuming no maximum stack element size. As Bitcoin at that time had a maximum stack element size of 5000 bytes, the effect of this expansion was limited to 5000 bytes.
+This is no longer an issue because tapscript enforces a maximum stack element size of 520 bytes.
+
 
 ==Rationale==
 

From 1f1f24f0efad7604c57b3570d7cd0ccee68b4984 Mon Sep 17 00:00:00 2001
From: Yannick Seurin 
Date: Mon, 6 May 2024 11:39:15 +0200
Subject: [PATCH 063/288] spelling out FROST

Co-authored-by: Tim Ruffing 
---
 bip-0340.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index 03ec45d7..1d9aa29d 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -266,7 +266,7 @@ While recent academic papers claim that they are also possible with ECDSA, conse
 
 By means of an interactive scheme such as [https://eprint.iacr.org/2020/1261.pdf MuSig2] ([[bip-0327.mediawiki|BIP327]]), participants can aggregate their public keys into a single public key which they can jointly sign for. This allows ''n''-of-''n'' multisignatures which, from a verifier's perspective, are no different from ordinary signatures, giving improved privacy and efficiency versus ''CHECKMULTISIG'' or other means.
 
-Moreover, Schnorr signatures are compatible with [https://en.wikipedia.org/wiki/Distributed_key_generation distributed key generation], which enables interactive threshold signatures schemes, e.g., the schemes described by [http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps Stinson and Strobl (2001)], [https://link.springer.com/content/pdf/10.1007/s00145-006-0347-3.pdf Gennaro, Jarecki, Krawczyk, and Rabin (2007)], [https://eprint.iacr.org/2020/852.pdf Komlo and Goldberg (2020)], or [https://eprint.iacr.org/2023/899.pdf Chu, Gerhart, Ruffing, and Schröder (2023)]. These protocols make it possible to realize ''k''-of-''n'' threshold signatures, which ensure that any subset of size ''k'' of the set of ''n'' signers can sign but no subset of size less than ''k'' can produce a valid Schnorr signature.
+Moreover, Schnorr signatures are compatible with [https://en.wikipedia.org/wiki/Distributed_key_generation distributed key generation], which enables interactive threshold signatures schemes, e.g., the schemes by [http://cacr.uwaterloo.ca/techreports/2001/corr2001-13.ps Stinson and Strobl (2001)], by [https://link.springer.com/content/pdf/10.1007/s00145-006-0347-3.pdf Gennaro, Jarecki, Krawczyk, and Rabin (2007)], or the [https://eprint.iacr.org/2020/852.pdf FROST] scheme including its variants such as [https://eprint.iacr.org/2023/899.pdf FROST3]. These protocols make it possible to realize ''k''-of-''n'' threshold signatures, which ensure that any subset of size ''k'' of the set of ''n'' signers can sign but no subset of size less than ''k'' can produce a valid Schnorr signature.
 
 === Adaptor Signatures ===
 

From 5d10163efc36331eba5426dd854d91f0f68170f4 Mon Sep 17 00:00:00 2001
From: Yannick Seurin 
Date: Mon, 6 May 2024 11:40:02 +0200
Subject: [PATCH 064/288] more precise wording

Co-authored-by: Tim Ruffing 
---
 bip-0340.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index 1d9aa29d..85b7bac4 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -62,7 +62,7 @@ Since we would like to avoid the fragility that comes with short hashes, the ''e
 
 '''Key prefixing''' Using the verification rule above directly makes Schnorr signatures vulnerable to "related-key attacks" in which a third party can convert a signature ''(R, s)'' for public key ''P'' into a signature ''(R, s + a⋅hash(R || m))'' for public key ''P + a⋅G'' and the same message ''m'', for any given additive tweak ''a'' to the signing key. This would render signatures insecure when keys are generated using [[bip-0032.mediawiki#public-parent-key--public-child-key|BIP32's unhardened derivation]] and other methods that rely on additive tweaks to existing keys such as Taproot.
 
-To protect against these attacks, we choose ''key prefixed''A limitation of committing to the public key (rather than to a short hash of it, or not at all) is that it removes the ability for public key recovery or verifying signatures against a short public key hash. These constructions are generally incompatible with batch verification. Schnorr signatures which means that the public key is prefixed to the message in the challenge hash input. This changes the equation to ''s⋅G = R + hash(R || P || m)⋅P''. [https://eprint.iacr.org/2015/1135.pdf It can be shown] that key prefixing protects against related-key attacks with additive tweaks. In general, key prefixing increases robustness in multi-user settings, e.g., it seems to be a requirement for proving multiparty signature protocols (such as MuSig, MuSig2, and FROST) secure (see Applications below).
+To protect against these attacks, we choose ''key prefixed''A limitation of committing to the public key (rather than to a short hash of it, or not at all) is that it removes the ability for public key recovery or verifying signatures against a short public key hash. These constructions are generally incompatible with batch verification. Schnorr signatures which means that the public key is prefixed to the message in the challenge hash input. This changes the equation to ''s⋅G = R + hash(R || P || m)⋅P''. [https://eprint.iacr.org/2015/1135.pdf It can be shown] that key prefixing protects against related-key attacks with additive tweaks. In general, key prefixing increases robustness in multi-user settings, e.g., it seems to be a requirement for proving multiparty signing protocols (such as MuSig, MuSig2, and FROST) secure (see Applications below).
 
 We note that key prefixing is not strictly necessary for transaction signatures as used in Bitcoin currently, because signed transactions indirectly commit to the public keys already, i.e., ''m'' contains a commitment to ''pk''. However, this indirect commitment should not be relied upon because it may change with proposals such as SIGHASH_NOINPUT ([[bip-0118.mediawiki|BIP118]]), and would render the signature scheme unsuitable for other purposes than signing transactions, e.g., [https://bitcoin.org/en/developer-reference#signmessage signing ordinary messages].
 

From 7ad0f821ddc60366e98344a1e3019114ae46c80f Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Mon, 6 May 2024 13:12:47 -0400
Subject: [PATCH 065/288] Adds stable URL for Liar, Liar, Coins on Fire!

---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 545ffbb6..981af812 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -40,7 +40,7 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 * Bitstream, a protocol for the atomic swap (fair exchange) of bitcoins for decryption keys, that enables decentralized file hosting systems paid in Bitcoin. While such swaps are currently possible on Bitcoin without OP_CAT, they require the use of complex and computationally expensive Verifiable Computation cryptographic techniques. OP_CAT would remove this requirement on Verifiable Computation, making such protocols far more practical to build in Bitcoin. R. Linus, "BitStream: Decentralized File Hosting Incentivised via Bitcoin Payments", 2023, https://robinlinus.com/bitstream.pdf
 * Tree signatures provide a multisignature script whose size can be logarithmic in the number of public keys and can encode spend conditions beyond n-of-m. For instance a transaction less than 1KB in size could support tree signatures with up to 4,294,967,296 public keys. This also enables generalized logical spend conditions.  P. Wuille, "Multisig on steroids using tree signatures", 2015, https://blog.blockstream.com/en-treesignatures/
 * Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It has been proposed that if ECDSA is broken or a powerful computer was on the horizon, there might be an effort to protect ownership of bitcoins by allowing people to mark their taproot outputs as "script-path only" and then move their coins into such outputs with a leaf in the script tree requiring a Lamport signature. It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
-* Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://dl.acm.org/doi/10.1145/2810103.2813686 in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
+* Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://web.archive.org/web/20221023121048/https://publications.cispa.saarland/565/1/penalizing.pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 

From 945b281155f12d50be76ade722cbb1a04681caa0 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 17 Apr 2024 18:25:00 -0400
Subject: [PATCH 066/288] BIP 387: multi_a() descriptor

---
 README.mediawiki   |   7 ++++
 bip-0387.mediawiki | 101 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 108 insertions(+)
 create mode 100644 bip-0387.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 43e60a40..b6139442 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1163,6 +1163,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0387.mediawiki|387]]
+| Applications
+| Tapscript Multisig Output Script Descriptors
+| Pieter Wuille, Ava Chow
+| Informational
+| Draft
+|-
 | [[bip-0389.mediawiki|389]]
 | Applications
 | Multipath Descriptor Key Expressions
diff --git a/bip-0387.mediawiki b/bip-0387.mediawiki
new file mode 100644
index 00000000..5c039b8f
--- /dev/null
+++ b/bip-0387.mediawiki
@@ -0,0 +1,101 @@
+
+  BIP: 387
+  Layer: Applications
+  Title: Tapscript Multisig Output Script Descriptors
+  Author: Pieter Wuille 
+          Ava Chow 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0387
+  Status: Draft
+  Type: Informational
+  Created: 2024-04-17
+  License: BSD-2-Clause
+

+
+==Abstract==
+
+This document specifies multi_a() and sortedmulti_a() output script descriptors.
+Like BIP 383's multi() and sortedmulti(), both functions take a threshold and one
+or more public keys and produce a multisig script. The primary distinction is that multi_a()
+and sortedmulti_a() only produce tapscripts and are only allowed in a tapscript context.
+
+==Copyright==
+
+This BIP is licensed under the BSD 2-clause license.
+
+==Motivation==
+
+The most common complex script used in Bitcoin is a threshold multisig.
+These expressions allow specifying multisig scripts as a descriptor.
+
+==Specification==
+
+Two new script expressions are defined: multi_a() and sortedmulti_a().
+Both expressions produce the scripts of the same template and take the same arguments.
+They are written as multi_a(k,KEY_1,KEY_2,...,KEY_n).
+k is the threshold - the number of keys that must sign the input for the script to be valid.
+KEY_1,KEY_2,...,KEY_n are the key expressions for the multisig. k must be less than or equal to n.
+
+multi_a() and sortedmulti_a() expressions can only be used inside of a tr() descriptor.
+The maximum number of keys is 999.
+
+The output script produced also depends on the value of k. If k is less than or equal to 16:
+
+KEY_1 OP_CHECKSIG KEY_2 OP_CHECKSIGADD ... KEY_n OP_CHECKSIGADD OP_k OP_NUMEQUAL
+

+
+if k is greater than 16:
+
+KEY_1 OP_CHECKSIG KEY_2 OP_CHECKSIGADD ... KEY_n OP_CHECKSIGADD k OP_NUMEQUAL
+

+
+===sortedmulti_a()===
+
+The only change for sortedmulti_a() is that the x-only public keys are sorted lexicographically prior to the creation of the output script.
+This sorting is on the keys that are to be put into the output script, i.e. after all extended keys are derived.
+
+===Multiple Extended Keys===
+
+When one or more of the key expressions in a multi_a() or sortedmulti_a() expression are extended keys, the derived keys use the same child index.
+This changes the keys in lockstep and allows for output scripts to be indexed in the same way that the derived keys are indexed.
+
+==Test Vectors==
+
+Valid descriptors followed by the scripts they produce. Descriptors involving derived child keys will have the 0th, 1st, and 2nd scripts listed.
+
+* tr(L4rK1yDtCWekvXuE6oXD9jCYfFNV2cWRpVuPLBcCU2z8TrisoyY1,multi_a(1,KzoAz5CanayRKex3fSLQ2BwJpN7U52gZvxMyk78nDMHuqrUxuSJy))
+** 5120eb5bd3894327d75093891cc3a62506df7d58ec137fcd104cdd285d67816074f3
+* tr(a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd,multi_a(1,669b8afcec803a0d323e9a17f3ea8e68e8abe5a278020a929adbec52421adbd0))
+** 5120eb5bd3894327d75093891cc3a62506df7d58ec137fcd104cdd285d67816074f3
+* tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,multi_a(2,[00000000/111'/222]xprvA1RpRA33e1JQ7ifknakTFpgNXPmW2YvmhqLQYMmrj4xJXXWYpDPS3xz7iAxn8L39njGVyuoseXzU6rcxFLJ8HFsTjSyQbLYnMpCqE2VbFWc,xprv9uPDJpEQgRQfDcW7BkF7eTya6RPxXeJCqCJGHuCJ4GiRVLzkTXBAJMu2qaMWPrS7AANYqdq6vcBcBUdJCVVFceUvJFjaPdGZ2y9WACViL4L/0))
+** 51202eea93581594a43c0c8423b70dc112e5651df63984d108d4fc8ccd3b63b4eafa
+* tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,sortedmulti_a(2,[00000000/111'/222]xprvA1RpRA33e1JQ7ifknakTFpgNXPmW2YvmhqLQYMmrj4xJXXWYpDPS3xz7iAxn8L39njGVyuoseXzU6rcxFLJ8HFsTjSyQbLYnMpCqE2VbFWc,xprv9uPDJpEQgRQfDcW7BkF7eTya6RPxXeJCqCJGHuCJ4GiRVLzkTXBAJMu2qaMWPrS7AANYqdq6vcBcBUdJCVVFceUvJFjaPdGZ2y9WACViL4L/0))
+** 512016fa6a6ba7e98c54b5bf43b3144912b78a61b60b02f6a74172b8dcb35b12bc30
+* tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,sortedmulti_a(2,xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL/*,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y/0/0/*))
+** 5120abd47468515223f58a1a18edfde709a7a2aab2b696d59ecf8c34f0ba274ef772
+** 5120fe62e7ed20705bd1d3678e072bc999acb014f07795fa02cb8f25a7aa787e8cbd
+** 51201311093750f459039adaa2a5ed23b0f7a8ae2c2ffb07c5390ea37e2fb1050b41
+* tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,multi_a(2,xprv9s21ZrQH143K31xYSDQpPDxsXRTUcvj2iNHm5NUtrGiGG5e2DtALGdso3pGz6ssrdK4PFmM8NSpSBHNqPqm55Qn3LqFtT2emdEXVYsCzC2U/2147483647'/0,xprv9vHkqa6EV4sPZHYqZznhT2NPtPCjKuDKGY38FBWLvgaDx45zo9WQRUT3dKYnjwih2yJD9mkrocEZXo1ex8G81dwSM1fwqWpWkeS3v86pgKt/1/2/*,xprv9s21ZrQH143K3QTDL4LXw2F7HEK3wJUD2nW2nRk4stbPy6cq3jPPqjiChkVvvNKmPGJxWUtg6LnF5kejMRNNU3TGtRBeJgk33yuGBxrMPHi/10/20/30/40/*'))
+** 5120e4c8f2b0a7d3a688ac131cb03248c0d4b0a59bbd4f37211c848cfbd22a981192
+** 5120827faedaa21e52fca2ac83b53afd1ab7d4d1e6ce67ff42b19f2723d48b5a19ab
+** 5120647495ed09de61a3a324704f9203c130d655bf3141f9b748df8f7be7e9af55a4
+
+Invalid descriptors
+
+* Unsupported top level: multi_a(1,03669b8afcec803a0d323e9a17f3ea8e68e8abe5a278020a929adbec52421adbd0)
+* Unsupported sh() context: sh(multi_a(1,03669b8afcec803a0d323e9a17f3ea8e68e8abe5a278020a929adbec52421adbd0))
+* Unsupported wsh() context: wsh(multi_a(1,03669b8afcec803a0d323e9a17f3ea8e68e8abe5a278020a929adbec52421adbd0))
+* Invalid threshold: tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,multi_a(a,03a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd))
+* Threshold of 0: tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,multi_a(0,03a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd))
+* Uncompressed pubkey: tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,multi_a(1,04a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd5b8dec5235a0fa8722476c7709c02559e3aa73aa03918ba2d492eea75abea235))
+* Threshold larger than keys: tr(50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0,multi_a(3,L4rK1yDtCWekvXuE6oXD9jCYfFNV2cWRpVuPLBcCU2z8TrisoyY1,5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss))
+
+==Backwards Compatibility==
+
+multi_a() and sortedmulti_a() descriptors use the format and general operation specified in [[bip-0380.mediawiki|380]].
+As these are wholly new descriptors, they are not compatible with any implementation.
+However, the scripts produced are standard scripts, so existing software are likely to be familiar with them.
+
+==Reference Implementation==
+
+multi_a() and sortedmulti_a() descriptors were implemented in Bitcoin Core in https://github.com/bitcoin/bitcoin/pull/24043 and have been available since version 24.0.

From 44798a2a9e19643040af61818a7acb4cded47e00 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Thu, 1 Sep 2022 15:30:54 +0200
Subject: [PATCH 067/288] New BIP: Wallet Policies

---
 bip-wallet-policies.mediawiki          | 343 +++++++++++++++++++++++++
 bip-wallet-policies/wallet_policies.py | 200 ++++++++++++++
 2 files changed, 543 insertions(+)
 create mode 100644 bip-wallet-policies.mediawiki
 create mode 100644 bip-wallet-policies/wallet_policies.py

diff --git a/bip-wallet-policies.mediawiki b/bip-wallet-policies.mediawiki
new file mode 100644
index 00000000..e46df1c6
--- /dev/null
+++ b/bip-wallet-policies.mediawiki
@@ -0,0 +1,343 @@
+
+  BIP: wallet-policies
+  Layer: Applications
+  Title: Wallet Policies for Descriptor Wallets
+  Author: Salvatore Ingala 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-wallet-policies
+  Status: Draft
+  Type: Informational
+  Created: 2022-11-16
+  License: BSD-2-Clause
+

+
+== Abstract ==
+
+Wallet policies build on top of output descriptors to represent in a compact, easier to inspect way the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device. A wallet policy always represents exactly two descriptors, which produce the receive and change addresses that are logically part of the same account.
+
+Reducing the generality of descriptors to just the essential features, and separating the extended pubkeys and other key information from the descriptor, allows to simplify the language in a way that suits devices with limited memory, where even keeping the entire descriptor in memory could be a major hurdle.
+
+Moreover, together with the gain in compactness, this simplifies user's inspection of the policy.
+
+Finally, by keeping the language extremely close to that of output script descriptors, the compilation of wallet policies to the corresponding descriptor is extremely easy, and even the reverse process is not too difficult for supported descriptors.
+
+== Copyright ==
+
+This BIP is licensed under the BSD 2-clause license.
+
+== Motivation ==
+
+''[[bip-0380.mediawiki|Output Script Descriptors]]'' were introduced in bitcoin-core as a way to represent collections of output scripts. It is a very general and flexible language, designed to catch all the possible use-cases of bitcoin wallets (that is, if you know the script and you have the necessary keys, it will be possible to sign transactions with any descriptor-based software wallet).
+
+Unfortunately, descriptors are not a perfect match for the typical usage of hardware signing devices (often also called ''hardware wallets''). Most of them have some of the following limitations when compared to a general-purpose machine running bitcoin-core:
+
+* they are embedded devices with limited RAM, and computational power;
+* they cannot import additional private keys (that is, they can only sign with keys derived from a single seed via [[bip-0032.mediawiki|BIP-32]]);
+* they have limited storage, or they might not have persistent storage at all (''stateless design'').
+
+Moreover, other limitations like the limited size of the screen might affect what design choices are available in practice. Therefore, minimizing the size of the information shown on-screen is important for a good user experience; that is crucial since the ability for the user to completely validate on-screen the kind of script used (and each of the involved keys) is a prerequisite for secure usage, as the machine that is interacting with the hardware signer (and running the software wallet) is considered untrusted.
+
+A more native, compact representation of the wallet receive/change might also benefit the UX of software wallets using descriptors to represent software wallets using descriptors (possibly with miniscript) for complex locking conditions.
+
+We remark that wallet policies are not related to the ''policy'' language, a higher level language that can be compiled to miniscript.
+
+=== Security and UX concerns for hardware signing devices ===
+
+For a hardware signing device, allowing the usage of complex scripts presents challenges in terms of both security and user experience.
+
+==== Security issues ====
+
+One of the security properties that hardware signing devices strive to guarantee is the following: as long as the user correctly verifies the information that is shown on the device's screen before approving, no action can be performed without the user's consent.
+
+This must hold even in scenarios where the attacker has full control of the machine that is connected to the signing device, and can execute arbitrary requests, or tamper with the legitimate user's requests.
+
+Therefore, it is not at all trivial to allow complex scripts, especially if they contain keys that belong to third parties.
+The hardware signing device must guarantee that the user knows precisely what "policy" is being used to spend the funds, and that any "unspent" funds (if any) that is sent to a change address will be protected by the same policy.
+
+This makes it impossible for an attacker to surreptitiously modify the policy, therefore stealing or burning the user's funds.
+
+==== UX issues ====
+
+With miniscript (and taproot trees) allowing substantially more complex spending policies to be used, it becomes more challenging to make sure that the user is practically able to verify the information on the screen.
+
+Therefore, there are two fundamental design goals to strive for:
+* Minimize the amount of information that is shown on screen - so that the user can actually validate it.
+* Minimize the number of times the user has to validate such information.
+
+Designing a secure protocol for the coordination of a descriptor wallet among distant parties is also a challenging problem that is out of scope in this document. See [[bip-00129.mediawiki|BIP-129 (Bitcoin Secure Multisig Setup)]] for an approach designed for multisignature wallets. Regardless the approach, the ability for the user to carefully verify all the details of the spending policies using the hardware signer's screen is a prerequisite for security in adversarial environments.
+
+=== Policy registration as a solution ===
+
+A solution to address the security concerns, and part of the UX concerns, is to have a registration flow for the wallet policy in the hardware signing device. The ''wallet policy'' must contain enough information to generate all the relevant addresses/scripts, and for the hardware signing device to identify the keys that it controls and that are needed to spend the funds sent to those addresses.
+
+Before a new policy is used for the first time, the user will register a wallet policy into the hardware device. While the details of the process are out of scope in this document, the flow should be something similar to the following:
+
+# The software wallet initiates a ''wallet policy registration'' on the hardware signing device; the information should include the wallet policy, but also a unique ''name'' that identifies the policy.
+# The device shows the wallet policy to the user using the secure screen.
+# After inspecting the policy and comparing it with a trusted source (for example a printed backup), the user approves the policy.
+# If stateful, the hardware signing device persists the policy in its permanent memory; if stateless, it returns a "proof of registration".
+
+The proof of registration will allow the hardware signer to verify that a certain policy was indeed previously approved by the user, and is therefore safe to use without repeating the expensive user verification procedure. The details of how to create a proof of registration are out of scope for this document; using a Message Authentication Code on a hash committing to the wallet policy, its name and any additional metadata is an effective solution if correctly executed.
+
+Once a policy is registered, the hardware signing device can perform the typical operations securely:
+* generating receive and change addresses;
+* showing addresses on the secure screen;
+* sign transactions spending from a wallet, while correctly identifying change addresses and computing the transaction fees.
+
+Before any of the actions mentioned above, the hardware signing device will retrieve the policy from its permanent storage if stateful; if stateless it will validate the _proof of registration_ before using the wallet policy provided by the client.
+
+Once the previously registered policy is correctly identified and approved by the user (for example by showing its name), and as long as the policy registration was executed securely, hardware signing devices can provide a user experience similar to the usual one for single-signature transactions.
+
+=== Avoiding blowup in descriptor size ===
+
+While reusing a pubkey in different branches of a miniscript is explicitly forbidden by miniscript (as it has certain negative security implications), it is still reasonable to reuse the same xpub in multiple places, albeit with different final steps of derivation (so that the actual pubkeys that are used in the script are indeed different).
+
+For example, using Taproot, a 3-of-5 multisignature wallet could use:
+* a key path with a 5-of-5 MuSig2 aggregated key
+* a script tree with 11 leaves:
+** 10 different script using a 3-of-3 MuSig2 aggregated key, plus
+** a final leaf with a fallback 3-of-5 multisignature using OP_CHECKSIGADD (in case interactive signing is not available).
+
+This could look similar to:
+
+
+tr(musig(xpubA,xpubB,xpubC,xpubD,xpubE)/<0;1>/*), {
+  {
+    {
+      pk(musig(xpubA,xpubB,xpubC)/<2;3>/*),
+      {
+        pk(musig(xpubA,xpubB,xpubD)/<4;5>/*)
+        pk(musig(xpubA,xpubB,xpubE)/<6;7>/*),
+      }
+    },
+    {
+      pk(musig(xpubA,xpubC,xpubD)/<8;9>/*),
+      {
+        pk(musig(xpubA,xpubC,xpubE)/<10;11>/*),
+        pk(musig(xpubA,xpubD,xpubE)/<12;13>/*)
+      }
+    }
+  },
+  {
+    {
+      pk(musig(xpubB,xpubC,xpubD)/<14;15>/*),
+      pk(musig(xpubB,xpubC,xpubE)/<16;17>/*)
+    },
+    {
+      pk(musig(xpubB,xpubD,xpubE)/<18;19>/*),
+      {
+        pk(musig(xpubC,xpubD,xpubE)/<20;21>/*),
+        sortedmulti_a(3,
+          xpubA/<22;23>/*,
+          xpubB/<22;23>/*,
+          xpubC/<22;23>/*,
+          xpubD/<22;23>/*,
+          xpubE/<22;23>/*)
+      }
+    }
+  }
+})
+

+
+Notice how each root xpub appears 8 times. With xpubs being up to 118 bytes long, the length of the full descriptor can get extremely long (the problem rapidly gets worse with larger multisignature schemes).
+
+Replacing the common part of the key with a short key placeholder and moving the key expression separately helps to keep the size of the wallet policy small, which is crucial to allow human inspection during the registration flow.
+
+== Specification ==
+
+This section formally defines wallet policies, and how they relate to output script descriptors.
+
+=== Formal definition ===
+
+A ''wallet policy'' is composed by a ''wallet descriptor template'', together with a vector of ''key information items''.
+
+==== Wallet descriptor template ====
+
+A ''wallet descriptor template'' is a SCRIPT expression.
+
+SCRIPT expressions:
+* sh(SCRIPT) (top level only): P2SH embed the argument.
+* wsh(SCRIPT) (top level or inside sh only): P2WSH embed the argument.
+* pkh(KP) (not inside tr): P2PKH output for the given public key.
+* wpkh(KP) (top level or inside sh only): P2WPKH output for the given compressed pubkey.
+* multi(k,KP_1,KP_2,...,KP_n) (inside sh or wsh only): ''k''-of-''n'' multisig script.
+* sortedmulti(k,KP_1,KP_2,...,KP_n) (inside sh or wsh only): ''k''-of-''n'' multisig script with keys sorted lexicographically in the resulting script.
+* tr(KP) or tr(KP,TREE) (top level only): P2TR output with the specified key as internal key, and optionally a tree of script paths.
+* any valid miniscript template (inside wsh or tr only).
+
+TREE expressions:
+* any SCRIPT expression
+* An open brace {, a TREE expression, a comma ,, a TREE expression, and a closing brace }
+
+
+KP expressions (key placeholders) consist of
+* a single character @
+* followed by a non-negative decimal number, with no leading zeros (except for @0)
+* ''always'' followed by either:
+** the string  /**, or
+** a string of the form //*, for two distinct decimal numbers NUM representing unhardened derivations, or
+** any of the additional, implementation-specific valid derivation path patterns (see [[#Optional_derivation_paths|Optional derivation paths]] below).
+
+The /** in the placeholder template represents commonly used paths for receive/change addresses, and is equivalent to <0;1>/*.
+
+Note that while [[bip-0389.mediawiki|BIP-389]] allows multipath `/` expressions with an arbitrary number of options, this specification restricts it to exactly 2 choices (with the typical meaning of receive/change addresses).
+
+The placeholder @i for some number ''i'' represents the ''i''-th key in the vector of key information items (which must be of size at least ''i + 1'', or the wallet policy is invalid).
+
+Note: while descriptor templates for miniscript are not formally defined in this version of the document (pending standardization) it is straightforward to adapt this approach by adding additional SCRIPT expressions.
+
+==== Keys information vector ====
+
+Each element of the key origin information vector is a KEY expression.
+
+* Optionally, key origin information, consisting of:
+** An open bracket [
+** Exactly 8 hex characters for the fingerprint of the master key from which this key is derived from (see [[bip-0032.mediawiki|BIP-32]] for details)
+** Followed by zero or more /NUM' or /NUM path elements to indicate hardened or unhardened derivation steps between the fingerprint and the xpub that follows
+** A closing bracket ]
+* Followed by the actual key, which is a serialized extended public key (as defined in [[bip-0032.mediawiki|BIP-32]]).
+
+==== Additional rules ====
+
+A wallet policy must have at least one key placeholder and the corresponding key.
+
+The public keys obtained by deserializing elements of the keys information vector must be pairwise distinct'''Why must public keys be distinct?''' Reusing pubkeys could be insecure in the conext of wallet policies containing [https://bitcoin.sipa.be/miniscript/ miniscript]. Avoiding repeated public keys altogether avoids the problem at the source..
+
+If two key placeholders are @i//* and @i//* for the same index i, then the sets {M, N} and {P, Q} must be disjoint.
+
+The key information vector should be ordered so that placeholder @i never appear for the first time before an occurrence of @j  for some j < i; for example, the first placeholder is always @0, the next one is @1, etc.
+
+=== Descriptor derivation ===
+
+From a wallet descriptor template (and the associated vector of key information items), one can therefore obtain the corresponding multipath descriptor by:
+
+* replacing each key placeholder with the corresponding key origin
+information;
+* replacing every /** with /<0;1>/*.
+
+For example, the wallet descriptor pkh(@0/**) with key information
+["[d34db33f/44'/0'/0']xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL"]
+produces the following multipath descriptor:
+
+pkh([d34db33f/44'/0'/0']xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL/<0;1>/*)
+
+=== Implementation guidelines ===
+
+Implementations must not necessarily implement all the possible wallet policies defined by this standard, but it is recommended to clearly document any limitation.
+
+Implementations can add additional metadata that is stored together with the wallet policy for the purpose of wallet policy registration and later usage. Metadata can be vendor-specific and is out of the scope of this document.
+
+Any implementation in a software wallet that allows wallet policies not matching any of the specifications in [[bip-0044.mediawiki|BIP-44]], [[bip-0049.mediawiki|BIP-49]], [[bip-0084.mediawiki|BIP-84]], [[bip-0086.mediawiki|BIP-86]] (especially if involving external cosigners) should put great care into a process for backing up the wallet policy that represents the account. In fact, unlike standard single-signature scenarios, the seed alone is no longer enough to discover wallet policies with existing funds, and the loss of the backup is likely to lead to permanent loss of funds. Unlike the seed, leaking such backups only affects the privacy of the user, but it does not allow the attacker to steal funds.
+
+Avoiding key reuse among different wallet accounts is also extremely important, but out of scope for this document.
+
+=== Optional derivation paths ===
+
+In order to allow supporting legacy derivation schemes (for example, using simply /* instead of the more common //* scheme most software wallets use today), or other schemes that are not covered in this document, implementations might choose to permit additional derivation patterns for the key placeholder (KP) expressions.
+
+However, care needs to be taken in view of the following considerations:
+
+* Allowing derivation schemes with a different length or cardinality in the same wallet policy would make it difficult to guarantee that there are no repeated pubkeys for every possible address generated by the policy. For example, `@0/<0;1>/*` and `@1/*` would generate the same pubkeys if the second public key in the keys information vector is one of the first two unhardened children of the first public key. This could cause malleability with potential security implications (for example, in policies containing miniscript).
+* Allowing naked pubkeys with no /* suffix (for example a descriptor template like wsh(multi(2,@0,@1/<0;1>/*))) would cause a pubkey to be repeated in every output generated from the policy, which would result in a total loss of privacy.
+
+== Examples ==
+
+In the examples in this section, the vector of key information items is omitted. See the test vectors below for complete examples.
+
+Common single-signature account patterns:
+* pkh(@0/**) (legacy).
+* wpkh(@0/**) (native segwit).
+* sh(wpkh(@0/**)) (nested segwit).
+* tr(@0/**) (taproot single-signature account).
+
+Common multisignature schemes:
+* wsh(multi(2,@0/**,@1/**)) - SegWit 2-of-2 multisignature, keys in order.
+* sh(sortedmulti(2,@0/**,@1/**,@2/**)) - Legacy 2-of-3 multisignature, sorted keys.
+
+Some miniscript policies in wsh:
+* wsh(and_v(v:pk(@0/**),or_d(pk(@1/**),older(12960)))) - Trust-minimized second factor, degrading to a single signature after about 90 days.
+* wsh(thresh(3,pk(@0/**),s:pk(@1/**),s:pk(@2/**),sln:older(12960))) - A 3-of-3 wallet that becomes a 2-of-3 if coins are not spent for about 90 days.
+* wsh(or_d(pk(@0/**),and_v(v:multi(2,@1/**,@2/**,@3/**),older(65535)))) - A singlesig wallet with automatic inheritance to a timelocked 2-of-3 multisig of family members.
+
+== Test Vectors ==
+
+=== Valid policies ===
+
+[[bip-0044.mediawiki|BIP-44]], first account
+ Descriptor template: pkh(@0/**)
+ Keys info: ["[6738736c/44'/0'/0']xpub6Br37sWxruYfT8ASpCjVHKGwgdnYFEn98DwiN76i2oyY6fgH1LAPmmDcF46xjxJr22gw4jmVjTE2E3URMnRPEPYyo1zoPSUba563ESMXCeb"]
+ Descriptor:pkh([6738736c/44'/0'/0']xpub6Br37sWxruYfT8ASpCjVHKGwgdnYFEn98DwiN76i2oyY6fgH1LAPmmDcF46xjxJr22gw4jmVjTE2E3URMnRPEPYyo1zoPSUba563ESMXCeb)
+

+[[bip-0049.mediawiki|BIP-49]], second account
+ Descriptor template: sh(wpkh(@0/**))
+ Keys info: ["[6738736c/49'/0'/1']xpub6Bex1CHWGXNNwGVKHLqNC7kcV348FxkCxpZXyCWp1k27kin8sRPayjZUKDjyQeZzGUdyeAj2emoW5zStFFUAHRgd5w8iVVbLgZ7PmjAKAm9"]
+ Descriptor:sh(wpkh([6738736c/49'/0'/1']xpub6Bex1CHWGXNNwGVKHLqNC7kcV348FxkCxpZXyCWp1k27kin8sRPayjZUKDjyQeZzGUdyeAj2emoW5zStFFUAHRgd5w8iVVbLgZ7PmjAKAm9))
+

+[[bip-0084.mediawiki|BIP-84]], third account
+ Descriptor template: wpkh(@0/**)
+ Keys info: ["[6738736c/84'/0'/2']xpub6CRQzb8u9dmMcq5XAwwRn9gcoYCjndJkhKgD11WKzbVGd932UmrExWFxCAvRnDN3ez6ZujLmMvmLBaSWdfWVn75L83Qxu1qSX4fJNrJg2Gt"]
+ Descriptor:wpkh([6738736c/84'/0'/2']xpub6CRQzb8u9dmMcq5XAwwRn9gcoYCjndJkhKgD11WKzbVGd932UmrExWFxCAvRnDN3ez6ZujLmMvmLBaSWdfWVn75L83Qxu1qSX4fJNrJg2Gt)
+

+[[bip-0086.mediawiki|BIP-86]], first account
+ Descriptor template: tr(@0/**)
+ Keys info: ["[6738736c/86'/0'/0']xpub6CryUDWPS28eR2cDyojB8G354izmx294BdjeSvH469Ty3o2E6Tq5VjBJCn8rWBgesvTJnyXNAJ3QpLFGuNwqFXNt3gn612raffLWfdHNkYL"]
+ Descriptor:tr([6738736c/86'/0'/0']xpub6CryUDWPS28eR2cDyojB8G354izmx294BdjeSvH469Ty3o2E6Tq5VjBJCn8rWBgesvTJnyXNAJ3QpLFGuNwqFXNt3gn612raffLWfdHNkYL)
+

+[[bip-0048.mediawiki|BIP-48]] P2WSH multisig
+ Descriptor template: wsh(sortedmulti(2,@0/**,@1/**))
+ Keys info: ["[6738736c/48'/0'/0'/2']xpub6FC1fXFP1GXLX5TKtcjHGT4q89SDRehkQLtbKJ2PzWcvbBHtyDsJPLtpLtkGqYNYZdVVAjRQ5kug9CsapegmmeRutpP7PW4u4wVF9JfkDhw", "[b2b1f0cf/48'/0'/0'/2']xpub6EWhjpPa6FqrcaPBuGBZRJVjzGJ1ZsMygRF26RwN932Vfkn1gyCiTbECVitBjRCkexEvetLdiqzTcYimmzYxyR1BZ79KNevgt61PDcukmC7"]
+ Descriptor:wsh(sortedmulti(2,[6738736c/48'/0'/0'/2']xpub6FC1fXFP1GXLX5TKtcjHGT4q89SDRehkQLtbKJ2PzWcvbBHtyDsJPLtpLtkGqYNYZdVVAjRQ5kug9CsapegmmeRutpP7PW4u4wVF9JfkDhw,[b2b1f0cf/48'/0'/0'/2']xpub6EWhjpPa6FqrcaPBuGBZRJVjzGJ1ZsMygRF26RwN932Vfkn1gyCiTbECVitBjRCkexEvetLdiqzTcYimmzYxyR1BZ79KNevgt61PDcukmC7))
+

+Miniscript: A 3-of-3 that becomes a 2-of-3 after 90 days
+ Descriptor template: wsh(thresh(3,pk(@0/**),s:pk(@1/**),s:pk(@2/**),sln:older(12960)))
+ Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js", "[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2"]
+ Descriptor:wsh(thresh(3,pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<0,1>/*),s:pk([b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js/<0,1>/*),s:pk([a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2/<0,1>/*),sln:older(12960)))
+

+Miniscript: A singlesig wallet with automatic inheritance to a timelocked 2-of-3 multisig
+ Descriptor template: wsh(or_d(pk(@0/**),and_v(v:multi(2,@1/**,@2/**,@3/**),older(65535))))
+ Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js", "[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2", "[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ"]
+ Descriptor:wsh(or_d(pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa),and_v(v:multi(2,[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js,[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2,[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ),older(65535))))
+

+
+TBD: add examples with taproot scripts and miniscript.
+
+=== Invalid policies ===
+
+The following descriptor templates are invalid:
+
+* pkh(@0): Key placeholder with no path following it
+* pkh(@0/0/**): Key placeholder with an explicit path present
+* sh(multi(1,@1/**,@0/**)): Key placeholders out of order
+* sh(multi(1,@0/**,@2/**)): Skipped key placeholder @1
+* sh(multi(1,@0/**,@0/**)): Repeated keys with the same path expression
+* sh(multi(1,@0/<0;1>/*,@0/<1;2>/*)): Non-disjoint multipath expressions (@0/1/* appears twice)
+* sh(multi(1,@0/**,xpub6AHA9hZDN11k2ijHMeS5QqHx2KP9aMBRhTDqANMnwVtdyw2TDYRmF8PjpvwUFcL1Et8Hj59S3gTSMcUQ5gAqTz3Wd8EsMTmF3DChhqPQBnU/<0;1>/*)): Expression with a non KP key present
+* pkh(@0/<0;1;2>/*): Solved cardinality > 2
+
+Remark: some of the descriptor templates above might be valid if optional extensions allowing them are added in the implementation.
+
+== Backwards Compatibility ==
+
+The @ character used for key placeholders is not part of the syntax of output script descriptors, therefore any valid output descriptor with at least one `KEY` expression is not a valid descriptor template. Vice versa, any descriptor template with at least one key placeholder is not a valid output script descriptor.
+
+Adoption of wallet policies in software and harder wallets is opt-in. Conversion from wallet policies to the corresponding descriptors is programmatically extremely easy, and conversion from descriptors to wallet policies (when respecting the required patterns) can be automated. See the reference implementation below for some examples of conversion.
+
+Software wallets are recommended to allow exporting plain descriptors for the purposes of interoperability with software not using wallet policies.
+
+== Reference Implementation ==
+
+Wallet policies are implemented in
+* the [https://github.com/LedgerHQ/app-bitcoin-new Ledger bitcoin application] since version 2.1.0;
+* the [https://github.com/digitalbitbox/bitbox02-firmware BitBox02 firmware] since version v9.15.0;
+* [https://github.com/Blockstream/Jade Blockstream Jade] since version v1.0.24, via [https://github.com/ElementsProject/libwally-core libwally-core] v1.0.0.
+
+For development and testing purposes, we provide a [[bip-wallet-policies/wallet_policies.py|Python 3.7 reference implementation]] of simple classes to handle wallet policies, and the conversion to/from output script descriptors.
+The reference implementation is for demonstration purposes only and not to be used in production environments.
+
+==Footnotes==
+
+
+
+== Acknowledgments ==
+
+The authors would like to thank the people who provided feedback in the bitcoin-dev list, and in person.
diff --git a/bip-wallet-policies/wallet_policies.py b/bip-wallet-policies/wallet_policies.py
new file mode 100644
index 00000000..42f615a2
--- /dev/null
+++ b/bip-wallet-policies/wallet_policies.py
@@ -0,0 +1,200 @@
+from typing import Iterable, List, Mapping, Tuple, Generator
+
+
+def find_all(text: str, pattern: str, start: int = 0) -> Generator[int, None, None]:
+    """Generates all the positions of `pattern` as a substring of `text`, starting from index at least `start`."""
+    while True:
+        start = text.find(pattern, start)
+        if start == -1:
+            return
+        yield start
+        start += len(pattern)
+
+
+def find_first(text: str, start_pos: int, patterns: Iterable[str]) -> int:
+    """Returns the position of the first occurrence of any of the elements in `patterns` as a substring of `text`,
+    or -1 if none of the patterns is found."""
+    matches = (text.find(x, start_pos) for x in patterns)
+    return min((x for x in matches if x != -1), default=-1)
+
+
+def find_key_end_position(desc: str, start_pos: int) -> int:
+    """Assuming that `start_pos` is the beginning of a KEY expression (and not musig), finds the position of the end
+    of the key expression, excluding (if present) the final derivation steps after an xpub. This is the information
+    that goes into an entry of the vector of key information of the wallet policy."""
+
+    has_orig_info = True if desc[start_pos] == '[' else False
+
+    if has_orig_info:
+        closing_bracket_pos = desc.find("]", start_pos)
+        if closing_bracket_pos == -1:
+            raise Exception("Invalid descriptor: could not find closing ']'")
+        key_pos_start = closing_bracket_pos + 1
+    else:
+        key_pos_start = start_pos
+
+    # find the earliest occurrence of ",", a ")" or a "/" (it must find at least 1)
+    end_pos = find_first(desc, key_pos_start, [",", ")", "/"])
+    if end_pos == -1:
+        raise Exception(
+            "Invalid descriptor: cannot find the end of key expression")
+
+    return end_pos
+
+
+class WalletPolicy(object):
+    """Simple class to represent wallet policies. This is a toy implementation that does not parse the descriptor
+    template. A more robust implementation would build the abstract syntax tree of the template and of the descriptor,
+    allowing one to detect errors, and manipulate it semantically instead of relying on string manipulation."""
+
+    def __init__(self, descriptor_template: str, keys_info: List[str]):
+        self.descriptor_template = descriptor_template
+        self.keys_info = keys_info
+
+    def to_descriptor(self) -> str:
+        """Converts a wallet policy into the descriptor (with the / syntax, if present)."""
+
+        desc = self.descriptor_template
+
+        # replace each "/**" with "/<0;1>/*"
+        desc = desc.replace("/**", "/<0;1>/*")
+
+        # process all the @N expressions in decreasing order. This guarantees that string replacements
+        # works as expected (as any prefix expression is processed after).
+        for i in reversed(range(len(self.keys_info))):
+            desc = desc.replace(f"@{i}", self.keys_info[i])
+
+        # there should not be any remaining "@" expressions
+        if desc.find("@") != -1:
+            return Exception("Invalid descriptor template: contains invalid key index")
+
+        return desc
+
+    @classmethod
+    def from_descriptor(cls, descriptor: str) -> 'WalletPolicy':
+        """Converts a "reasonable" descriptor (with the / syntax) into the corresponding wallet policy."""
+
+        # list of pairs of integers, where the tuple (m,n) with m < n means a key expression starts at
+        # m (inclusive) and at n (exclusive)
+        key_expressions: List[Tuple[int, int]] = []
+
+        key_with_orig_pos_start = None
+
+        def parse_key_expressions(only_first=False, handle_musig=False):
+            # Starting at the position in `key_with_orig_pos_start`, parses a number of key expressions, and updates
+            # the `key_expressions` array accordingly.
+            # If `only_first` is `True`, it stops after parsing a single key expression.
+            # If `handle_musig` is `True`, and a key expression is a `musig` operator, it recursively parses
+            # the keys in the musig expression. `musig` inside `musig` is not allowed.
+
+            nonlocal key_with_orig_pos_start
+            if key_with_orig_pos_start is None:
+                raise Exception("Unexpected error")
+
+            while True:
+                if handle_musig and descriptor[key_with_orig_pos_start:].startswith("musig"):
+                    closing_parenthesis_pos = find_first(
+                        descriptor, key_with_orig_pos_start, [")"])
+                    if closing_parenthesis_pos == -1:
+                        raise Exception(
+                            "Invalid descriptor: musig without closing parenthesis")
+                    key_with_orig_pos_start = key_with_orig_pos_start + \
+                        len("musig(")
+                    parse_key_expressions(
+                        only_first=False, handle_musig=False)
+
+                    key_pos_end = closing_parenthesis_pos + 1
+                else:
+                    key_pos_end = find_key_end_position(
+                        descriptor, key_with_orig_pos_start)
+                    key_expressions.append(
+                        (key_with_orig_pos_start, key_pos_end))
+
+                if descriptor[key_pos_end] == '/':
+                    # find the actual end (comma or closing parenthesis)
+                    key_pos_end = find_first(
+                        descriptor, key_pos_end, [",", ")"])
+                    if key_pos_end == -1:
+                        raise Exception(
+                            "Invalid descriptor: unterminated key expression")
+
+                if descriptor[key_pos_end] == ',':
+                    # There is another key expression, repeat from after the comma
+                    key_with_orig_pos_start = key_pos_end + 1
+                else:
+                    break
+
+                if only_first:
+                    break
+
+        # operators for which the KEY is the first argument
+        operators_key_first = ["pk", "pkh", "pk_h", "pk_k", "tr"]
+        # operators for which the KEY is everything except the first argument
+        operators_key_all_but_first = [
+            "multi", "sortedmulti", "multi_a", "sortedmulti_a"]
+        for op in operators_key_first + operators_key_all_but_first:
+            for op_pos_start in find_all(descriptor, op + "("):
+
+                # ignore if not a whole word (otherwise "sortedmulti" would be found inside "multi")
+                if op_pos_start > 0 and 'a' <= desc[op_pos_start - 1] <= 'z':
+                    continue
+
+                if op in operators_key_all_but_first:
+                    # skip the first argument (we now it's not a KEY expression, so it does not have a comma)
+                    first_comma_pos = descriptor.find(",", op_pos_start)
+                    if first_comma_pos == -1:
+                        raise Exception(
+                            "Invalid descriptor: multi, sortedmulti, multi_a and sortedmulti_a must have at least two arguments")
+                    key_with_orig_pos_start = 1 + first_comma_pos
+                else:
+                    # other operators, the first argument is already a KEY expression
+                    key_with_orig_pos_start = op_pos_start + len(op) + 1
+
+                only_first = op in operators_key_first
+                parse_key_expressions(
+                    only_first=only_first, handle_musig=True)
+
+        result: List[str] = []
+        keys: List[str] = []
+        keys_to_idx: Mapping[str, int] = {}
+
+        prev_end = 0
+        for start, end in sorted(key_expressions):
+            result.append(descriptor[prev_end:start])
+
+            key = descriptor[start:end]
+            if key not in keys_to_idx:
+                idx = len(keys)
+                keys.append(key)
+                keys_to_idx[key] = idx
+            else:
+                idx = keys_to_idx[key]
+            result.append(f"@{idx}")
+
+            prev_end = end
+
+        result.append(descriptor[prev_end:])
+
+        return cls("".join(result), keys)
+
+
+if __name__ == "__main__":
+    descriptors = [
+        "pkh([d34db33f/44'/0'/0']xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL/**)",
+        "wsh(multi(1,xpub661MyMwAqRbcFW31YEwpkMuc5THy2PSt5bDMsktWQcFF8syAmRUapSCGu8ED9W6oDMSgv6Zz8idoc4a6mr8BDzTJY47LJhkJ8UB7WEGuduB/**,xpub69H7F5d8KSRgmmdJg2KhpAK8SR3DjMwAdkxj3ZuxV27CprR9LgpeyGmXUbC6wb7ERfvrnKZjXoUmmDznezpbZb7ap6r1D3tgFxHmwMkQTPH/**))",
+        "tr([12345678/44'/0'/0']xpub6BVZ6JrGsWsUbpP74S8rnz13hVFDtYtKyuTTEYPNSF6GFpDFpL1YXWg3BpwpUWAnsZZ7Qe3XKz7GL3BEx3RQVq61cxqSkjceq25S1xFKFVa,{pk(xpub6AGdromjXf5yf3m7ndaCoR9Ac3UjwTvQ7QQkZoyoh2vfGE9i1AwB2vCbvjTpBL1KRERUsGszg63SVNXsHZU3CiykQqtZPrdXKMdaG2vs6uu),pk(xpub6AnhdkteWC4kPQvkY3QQXGmDCMfmFoYzEQ7FwRFa4BQ1a22k4VL4BD3Jdcog2Sf2KzBscXXAdPRMgjCBDeq6bAryqnMaWX2FaVUGPxWMLDh)})",
+        "tr(xpub6AEWqA1MNRzBBXenkug4NtNguDKTNcXoKQj8fU9VQyid38yikruFRffjoDm9UEaHGEJ6jQxjYdWWZRxR7Xy5ePrQNjohXJuNzkRNSiiBUcE,sortedmulti_a(2,[11223344/44'/0'/0']xpub6AyJhEKxcPaPnYNuA7VBeUQ24v6mEzzPSX5AJm3TSyg1Zsti7rnGKy1Hg6JAdXKF4QUmFZbby9p97AjBNm2VFCEec2ip5C9JntyxosmCeMW,xpub6AQVHBgieCHpGo4GhpGAo4v9v7hfr2Kr4D8ZQJqJwbEyZwtW3pWYSLRQyrNYbTzpoq6XpFtaKZGnEGUMtiydCgqsJDAZNqs9L5QDNKqUBsV))",
+        "tr([11111111/44'/0'/0']xpub6CLZSUDtcUhJVDoPSY8pSRKi4W1RSSLBgwZ2AYmwTH9Yv5tPVFHZxJBUQ27QLLwHej6kfo9DQQbwaHmpXsQq59CjtsE2gNLHmojwgMrsQNe/**,{and_v(v:pk([22222222/44'/0'/0']xpub6CiztfGsUxmpwkWe6gvz8d5VHyFLDoiPpeUfWmQ2vWAhQL3Z1hhEc6PE4irFs4bzjS7dCB4yyinaubrCpFJq4bcKGCD4jjqTxaWiKAJ7mvJ/**),older(52596)),multi_a(2,[33333333/44'/0'/0']xpub6DTZd6od7is2wxXndmE7zaUifzFPwVKshVSGEZedfTJtUjfLyhy4hgCW15hvxRpGaDmtiFoJKaCEaSRfXrQBuYRx18zwquy46dwBsJnsrz2/**,[44444444/44'/0'/0']xpub6BnK4wFbPeLZM4VNjoUA4yLCru6kCT3bhDJNBhbzHLGp1fmgK6muz27h4drixJZeHG8vSS5U5EYyE3gE8ozG94iNg3NDYE8M5YafvhzhMR9/**)})",
+        "tr(musig([33333333/44'/0'/0']xpub6DTZd6od7is2wxXndmE7zaUifzFPwVKshVSGEZedfTJtUjfLyhy4hgCW15hvxRpGaDmtiFoJKaCEaSRfXrQBuYRx18zwquy46dwBsJnsrz2,[44444444/44'/0'/0']xpub6BnK4wFbPeLZM4VNjoUA4yLCru6kCT3bhDJNBhbzHLGp1fmgK6muz27h4drixJZeHG8vSS5U5EYyE3gE8ozG94iNg3NDYE8M5YafvhzhMR9)/**,{and_v(v:pk([22222222/44'/0'/0']xpub6CiztfGsUxmpwkWe6gvz8d5VHyFLDoiPpeUfWmQ2vWAhQL3Z1hhEc6PE4irFs4bzjS7dCB4yyinaubrCpFJq4bcKGCD4jjqTxaWiKAJ7mvJ/**),older(52596)),pk([11111111/44'/0'/0']xpub6CLZSUDtcUhJVDoPSY8pSRKi4W1RSSLBgwZ2AYmwTH9Yv5tPVFHZxJBUQ27QLLwHej6kfo9DQQbwaHmpXsQq59CjtsE2gNLHmojwgMrsQNe/**)})",
+    ]
+
+    for desc in descriptors:
+        # Demoes the conversion from a "sane" descriptor to a wallet policy
+        print(f"Descriptor:\n{desc}")
+        wp = WalletPolicy.from_descriptor(desc)
+        print(f"Policy descriptor template:\n{wp.descriptor_template}")
+        print(f"Keys:\n{wp.keys_info}")
+        print("======================================================\n")
+
+        # Converting back to descriptors also works, as long as we take care of /**
+        assert wp.to_descriptor().replace("/<0;1>/*", "/**") == desc

From 25657cbee641fa63936a0313700c009466cd56d6 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Mon, 8 Jan 2024 11:41:17 +0100
Subject: [PATCH 068/288] Update assigned BIP number; change type to "Standards
 Track"

---
 bip-wallet-policies.mediawiki => bip-0388.mediawiki  | 6 +++---
 {bip-wallet-policies => bip-0388}/wallet_policies.py | 0
 2 files changed, 3 insertions(+), 3 deletions(-)
 rename bip-wallet-policies.mediawiki => bip-0388.mediawiki (99%)
 rename {bip-wallet-policies => bip-0388}/wallet_policies.py (100%)

diff --git a/bip-wallet-policies.mediawiki b/bip-0388.mediawiki
similarity index 99%
rename from bip-wallet-policies.mediawiki
rename to bip-0388.mediawiki
index e46df1c6..a7114dd2 100644
--- a/bip-wallet-policies.mediawiki
+++ b/bip-0388.mediawiki
@@ -1,12 +1,12 @@
 
-  BIP: wallet-policies
+  BIP: 388
   Layer: Applications
   Title: Wallet Policies for Descriptor Wallets
   Author: Salvatore Ingala 
   Comments-Summary: No comments yet.
-  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-wallet-policies
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0388
   Status: Draft
-  Type: Informational
+  Type: Standards Track
   Created: 2022-11-16
   License: BSD-2-Clause
 

diff --git a/bip-wallet-policies/wallet_policies.py b/bip-0388/wallet_policies.py
similarity index 100%
rename from bip-wallet-policies/wallet_policies.py
rename to bip-0388/wallet_policies.py

From 40c7760d781e760fe01bb6fe86a7731f506daa07 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Sun, 5 May 2024 11:38:49 -0500
Subject: [PATCH 069/288] Apply suggestions from code review

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0388.mediawiki | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index a7114dd2..f34d2e84 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -9,6 +9,7 @@
   Type: Standards Track
   Created: 2022-11-16
   License: BSD-2-Clause
+  Post-History: 2022-05-10: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-May/020423.html
 

 
 == Abstract ==
@@ -64,7 +65,7 @@ Therefore, there are two fundamental design goals to strive for:
 * Minimize the amount of information that is shown on screen - so that the user can actually validate it.
 * Minimize the number of times the user has to validate such information.
 
-Designing a secure protocol for the coordination of a descriptor wallet among distant parties is also a challenging problem that is out of scope in this document. See [[bip-00129.mediawiki|BIP-129 (Bitcoin Secure Multisig Setup)]] for an approach designed for multisignature wallets. Regardless the approach, the ability for the user to carefully verify all the details of the spending policies using the hardware signer's screen is a prerequisite for security in adversarial environments.
+Designing a secure protocol for the coordination of a descriptor wallet among distant parties is also a challenging problem that is out of scope in this document. See [[bip-00129.mediawiki|BIP-129 (Bitcoin Secure Multisig Setup)]] for an approach designed for multisignature wallets. Regardless of the approach, the ability for the user to carefully verify all the details of the spending policies using the hardware signer's screen is a prerequisite for security in adversarial environments.
 
 === Policy registration as a solution ===
 
@@ -320,7 +321,7 @@ Remark: some of the descriptor templates above might be valid if optional extens
 
 The @ character used for key placeholders is not part of the syntax of output script descriptors, therefore any valid output descriptor with at least one `KEY` expression is not a valid descriptor template. Vice versa, any descriptor template with at least one key placeholder is not a valid output script descriptor.
 
-Adoption of wallet policies in software and harder wallets is opt-in. Conversion from wallet policies to the corresponding descriptors is programmatically extremely easy, and conversion from descriptors to wallet policies (when respecting the required patterns) can be automated. See the reference implementation below for some examples of conversion.
+Adoption of wallet policies in software and hardware wallets is opt-in. Conversion from wallet policies to the corresponding descriptors is programmatically extremely easy, and conversion from descriptors to wallet policies (when respecting the required patterns) can be automated. See the reference implementation below for some examples of conversion.
 
 Software wallets are recommended to allow exporting plain descriptors for the purposes of interoperability with software not using wallet policies.
 

From 95cf53916113a44487e0381029d3602e5bb1db6a Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Tue, 7 May 2024 10:51:46 +0200
Subject: [PATCH 070/288] Improvements from PR review.

- Removed large example of taproot policy; replaced with the textual description
- Added an example of a taproot wallet policy containing miniscript
---
 bip-0388.mediawiki | 56 ++++++++--------------------------------------
 1 file changed, 9 insertions(+), 47 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index f34d2e84..a62b262c 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -93,54 +93,13 @@ Once the previously registered policy is correctly identified and approved by th
 
 While reusing a pubkey in different branches of a miniscript is explicitly forbidden by miniscript (as it has certain negative security implications), it is still reasonable to reuse the same xpub in multiple places, albeit with different final steps of derivation (so that the actual pubkeys that are used in the script are indeed different).
 
-For example, using Taproot, a 3-of-5 multisignature wallet could use:
+In fact, there are many reasonable spending policies with a quadratic size in the number of participants. For example, using Taproot, a 3-of-5 multisignature wallet could use:
 * a key path with a 5-of-5 MuSig2 aggregated key
 * a script tree with 11 leaves:
-** 10 different script using a 3-of-3 MuSig2 aggregated key, plus
-** a final leaf with a fallback 3-of-5 multisignature using OP_CHECKSIGADD (in case interactive signing is not available).
+** 10 different scripts using a 3-of-3 MuSig2 aggregated key, plus
+** a final leaf with a fallback 3-of-5 multisignature using multi_a (in case interactive signing is not available).
 
-This could look similar to:
-
-
-tr(musig(xpubA,xpubB,xpubC,xpubD,xpubE)/<0;1>/*), {
-  {
-    {
-      pk(musig(xpubA,xpubB,xpubC)/<2;3>/*),
-      {
-        pk(musig(xpubA,xpubB,xpubD)/<4;5>/*)
-        pk(musig(xpubA,xpubB,xpubE)/<6;7>/*),
-      }
-    },
-    {
-      pk(musig(xpubA,xpubC,xpubD)/<8;9>/*),
-      {
-        pk(musig(xpubA,xpubC,xpubE)/<10;11>/*),
-        pk(musig(xpubA,xpubD,xpubE)/<12;13>/*)
-      }
-    }
-  },
-  {
-    {
-      pk(musig(xpubB,xpubC,xpubD)/<14;15>/*),
-      pk(musig(xpubB,xpubC,xpubE)/<16;17>/*)
-    },
-    {
-      pk(musig(xpubB,xpubD,xpubE)/<18;19>/*),
-      {
-        pk(musig(xpubC,xpubD,xpubE)/<20;21>/*),
-        sortedmulti_a(3,
-          xpubA/<22;23>/*,
-          xpubB/<22;23>/*,
-          xpubC/<22;23>/*,
-          xpubD/<22;23>/*,
-          xpubE/<22;23>/*)
-      }
-    }
-  }
-})
-

-
-Notice how each root xpub appears 8 times. With xpubs being up to 118 bytes long, the length of the full descriptor can get extremely long (the problem rapidly gets worse with larger multisignature schemes).
+With each xpub being 118 bytes long, the repetition of xpubs makes the descriptor become extremely large.
 
 Replacing the common part of the key with a short key placeholder and moving the key expression separately helps to keep the size of the wallet policy small, which is crucial to allow human inspection during the registration flow.
 
@@ -299,8 +258,11 @@ Miniscript: A singlesig wallet with automatic inheritance to a timelocked 2-of-3
  Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js", "[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2", "[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ"]
  Descriptor:wsh(or_d(pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa),and_v(v:multi(2,[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js,[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2,[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ),older(65535))))
 

-
-TBD: add examples with taproot scripts and miniscript.
+Taproot wallet policy with sortedmulti_a and a miniscript leaf
+ Descriptor template: tr(@0/**,{sortedmulti_a(1,@0/<2;3>/*,@1/**),or_b(pk(@2/**),s:pk(@3/**))})
+ Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "xpub6Fc2TRaCWNgfT49nRGG2G78d1dPnjhW66gEXi7oYZML7qEFN8e21b2DLDipTZZnfV6V7ivrMkvh4VbnHY2ChHTS9qM3XVLJiAgcfagYQk6K", "xpub6GxHB9kRdFfTqYka8tgtX9Gh3Td3A9XS8uakUGVcJ9NGZ1uLrGZrRVr67DjpMNCHprZmVmceFTY4X4wWfksy8nVwPiNvzJ5pjLxzPtpnfEM", "xpub6GjFUVVYewLj5no5uoNKCWuyWhQ1rKGvV8DgXBG9Uc6DvAKxt2dhrj1EZFrTNB5qxAoBkVW3wF8uCS3q1ri9fueAa6y7heFTcf27Q4gyeh6"]
+ Descriptor:tr([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<0;1>/*,{sortedmulti_a(1,xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<2;3>/*,xpub6Fc2TRaCWNgfT49nRGG2G78d1dPnjhW66gEXi7oYZML7qEFN8e21b2DLDipTZZnfV6V7ivrMkvh4VbnHY2ChHTS9qM3XVLJiAgcfagYQk6K/<0;1>/*),or_b(pk(xpub6GxHB9kRdFfTqYka8tgtX9Gh3Td3A9XS8uakUGVcJ9NGZ1uLrGZrRVr67DjpMNCHprZmVmceFTY4X4wWfksy8nVwPiNvzJ5pjLxzPtpnfEM/<0;1>/*),s:pk(xpub6GjFUVVYewLj5no5uoNKCWuyWhQ1rKGvV8DgXBG9Uc6DvAKxt2dhrj1EZFrTNB5qxAoBkVW3wF8uCS3q1ri9fueAa6y7heFTcf27Q4gyeh6/<0;1>/*))})
+

 
 === Invalid policies ===
 

From a0c8501f960ac29878e137c03dcd6d8a3b9096b5 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Tue, 7 May 2024 10:55:55 +0200
Subject: [PATCH 071/288] Added BIP-388 to README

---
 README.mediawiki | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.mediawiki b/README.mediawiki
index be18dcf8..0ce7b8e8 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1184,6 +1184,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0388.mediawiki|388]]
+| Applications
+| Wallet Policies for Descriptor Wallets
+| Salvatore Ingala
+| Standard
+| Draft
+|-
 | [[bip-0389.mediawiki|389]]
 | Applications
 | Multipath Descriptor Key Expressions

From 4ddb0cc8933fe677103b8c1b2407922c76b98f71 Mon Sep 17 00:00:00 2001
From: katesalazar <52637275+katesalazar@users.noreply.github.com>
Date: Sat, 4 May 2024 15:17:28 +0000
Subject: [PATCH 072/288] Update bip-0038.mediawiki

Add missing closing double single quote. The italicized paragraph gets
cautiously closed.
---
 bip-0038.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0038.mediawiki b/bip-0038.mediawiki
index f5013db3..8a79bf66 100644
--- a/bip-0038.mediawiki
+++ b/bip-0038.mediawiki
@@ -39,7 +39,7 @@ This proposal is hereby placed in the public domain.
 :'''''User story:''' As a Bitcoin user who uses paper wallets, I would like the ability to add encryption, so that my Bitcoin paper storage can be two factor: something I have plus something I know.''
 :'''''User story:''' As a Bitcoin user who would like to pay a person or a company with a private key, I do not want to worry that any part of the communication path may result in the interception of the key and theft of my funds.  I would prefer to offer an encrypted private key, and then follow it up with the password using a different communication channel (e.g. a phone call or SMS).''
 :'''''User story:''' (EC-multiplied keys) As a user of physical bitcoins, I would like a third party to be able to create password-protected Bitcoin private keys for me, without them knowing the password, so I can benefit from the physical bitcoin without the issuer having access to the private key.  I would like to be able to choose a password whose minimum length and required format does not preclude me from memorizing it or engraving it on my physical bitcoin, without exposing me to an undue risk of password cracking and/or theft by the manufacturer of the item.''
-:'''''User story:''' (EC-multiplied keys) As a user of paper wallets, I would like the ability to generate a large number of Bitcoin addresses protected by the same password, while enjoying a high degree of security (highly expensive scrypt parameters), but without having to incur the scrypt delay for each address I generate.
+:'''''User story:''' (EC-multiplied keys) As a user of paper wallets, I would like the ability to generate a large number of Bitcoin addresses protected by the same password, while enjoying a high degree of security (highly expensive scrypt parameters), but without having to incur the scrypt delay for each address I generate.''
 
 ==Specification==
 This proposal makes use of the following functions and definitions:

From c88a018409e6ce8ae07a2ef9b950cd8e9afcbb70 Mon Sep 17 00:00:00 2001
From: katesalazar <52637275+katesalazar@users.noreply.github.com>
Date: Sat, 4 May 2024 15:21:20 +0000
Subject: [PATCH 073/288] Update bip-0038.mediawiki

Separating the bold and the italic markup helps inconsistent parsing
(see screenshots in PR #1586).
---
 bip-0038.mediawiki | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bip-0038.mediawiki b/bip-0038.mediawiki
index 8a79bf66..ffae832e 100644
--- a/bip-0038.mediawiki
+++ b/bip-0038.mediawiki
@@ -36,10 +36,10 @@ Password and passphrase-protected private keys enable new practical use cases fo
 This proposal is hereby placed in the public domain.
 
 ==Rationale==
-:'''''User story:''' As a Bitcoin user who uses paper wallets, I would like the ability to add encryption, so that my Bitcoin paper storage can be two factor: something I have plus something I know.''
-:'''''User story:''' As a Bitcoin user who would like to pay a person or a company with a private key, I do not want to worry that any part of the communication path may result in the interception of the key and theft of my funds.  I would prefer to offer an encrypted private key, and then follow it up with the password using a different communication channel (e.g. a phone call or SMS).''
-:'''''User story:''' (EC-multiplied keys) As a user of physical bitcoins, I would like a third party to be able to create password-protected Bitcoin private keys for me, without them knowing the password, so I can benefit from the physical bitcoin without the issuer having access to the private key.  I would like to be able to choose a password whose minimum length and required format does not preclude me from memorizing it or engraving it on my physical bitcoin, without exposing me to an undue risk of password cracking and/or theft by the manufacturer of the item.''
-:'''''User story:''' (EC-multiplied keys) As a user of paper wallets, I would like the ability to generate a large number of Bitcoin addresses protected by the same password, while enjoying a high degree of security (highly expensive scrypt parameters), but without having to incur the scrypt delay for each address I generate.''
+:'' '''User story:''' As a Bitcoin user who uses paper wallets, I would like the ability to add encryption, so that my Bitcoin paper storage can be two factor: something I have plus something I know.''
+:'' '''User story:''' As a Bitcoin user who would like to pay a person or a company with a private key, I do not want to worry that any part of the communication path may result in the interception of the key and theft of my funds.  I would prefer to offer an encrypted private key, and then follow it up with the password using a different communication channel (e.g. a phone call or SMS).''
+:'' '''User story:''' (EC-multiplied keys) As a user of physical bitcoins, I would like a third party to be able to create password-protected Bitcoin private keys for me, without them knowing the password, so I can benefit from the physical bitcoin without the issuer having access to the private key.  I would like to be able to choose a password whose minimum length and required format does not preclude me from memorizing it or engraving it on my physical bitcoin, without exposing me to an undue risk of password cracking and/or theft by the manufacturer of the item.''
+:'' '''User story:''' (EC-multiplied keys) As a user of paper wallets, I would like the ability to generate a large number of Bitcoin addresses protected by the same password, while enjoying a high degree of security (highly expensive scrypt parameters), but without having to incur the scrypt delay for each address I generate.''
 
 ==Specification==
 This proposal makes use of the following functions and definitions:

From cf2250e27cc682289facc27e1e2ff16e94d12aab Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Tue, 7 May 2024 22:10:44 +0200
Subject: [PATCH 074/288] Apply suggestions from code review

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0388.mediawiki | 36 ++++++++++++++++++------------------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index a62b262c..d7ed0bec 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -14,13 +14,13 @@
 
 == Abstract ==
 
-Wallet policies build on top of output descriptors to represent in a compact, easier to inspect way the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device. A wallet policy always represents exactly two descriptors, which produce the receive and change addresses that are logically part of the same account.
+Wallet policies build on top of output descriptors to represent the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device, in a compact, reviewable way. A wallet policy always represents exactly two descriptors, which produce the receive and change addresses that are logically part of the same account.
 
-Reducing the generality of descriptors to just the essential features, and separating the extended pubkeys and other key information from the descriptor, allows to simplify the language in a way that suits devices with limited memory, where even keeping the entire descriptor in memory could be a major hurdle.
+We simplify the language to suit devices with limited memory, where even keeping the entire descriptor in memory could be a major hurdle, by reducing the generality of descriptors to just the essential features and by separating the extended pubkeys and other key information from the descriptor.
 
-Moreover, together with the gain in compactness, this simplifies user's inspection of the policy.
+This results in a more compact representation and simplifies the inspection of the policy by the user.
 
-Finally, by keeping the language extremely close to that of output script descriptors, the compilation of wallet policies to the corresponding descriptor is extremely easy, and even the reverse process is not too difficult for supported descriptors.
+The compilation of wallet policies to the corresponding descriptor is trivial, and the reverse process is easy for supported descriptors, because the language is kept similar to that of output script descriptors.
 
 == Copyright ==
 
@@ -28,27 +28,27 @@ This BIP is licensed under the BSD 2-clause license.
 
 == Motivation ==
 
-''[[bip-0380.mediawiki|Output Script Descriptors]]'' were introduced in bitcoin-core as a way to represent collections of output scripts. It is a very general and flexible language, designed to catch all the possible use-cases of bitcoin wallets (that is, if you know the script and you have the necessary keys, it will be possible to sign transactions with any descriptor-based software wallet).
+''[[bip-0380.mediawiki|Output Script Descriptors]]'' were introduced in Bitcoin Core as a way to represent collections of output scripts. It is a general and flexible language, designed to catch all the possible use-cases of bitcoin wallets (that is, if you know the script and you have the necessary keys, it will be possible to sign transactions with any descriptor-based software wallet).
 
-Unfortunately, descriptors are not a perfect match for the typical usage of hardware signing devices (often also called ''hardware wallets''). Most of them have some of the following limitations when compared to a general-purpose machine running bitcoin-core:
+Unfortunately, descriptors are not a perfect match for the typical usage of hardware signing devices (often also called ''hardware wallets''). Most of them have some of the following limitations when compared to a general-purpose machine running Bitcoin Core:
 
 * they are embedded devices with limited RAM, and computational power;
 * they cannot import additional private keys (that is, they can only sign with keys derived from a single seed via [[bip-0032.mediawiki|BIP-32]]);
 * they have limited storage, or they might not have persistent storage at all (''stateless design'').
 
-Moreover, other limitations like the limited size of the screen might affect what design choices are available in practice. Therefore, minimizing the size of the information shown on-screen is important for a good user experience; that is crucial since the ability for the user to completely validate on-screen the kind of script used (and each of the involved keys) is a prerequisite for secure usage, as the machine that is interacting with the hardware signer (and running the software wallet) is considered untrusted.
+Moreover, other limitations like the limited size of the screen might affect what design choices are available in practice. Therefore, minimizing the amount of information shown on-screen is important for a good user experience. The ability for the user to completely validate on-screen the kind of script used (and each of the involved keys) is crucial for secure usage, as the machine that is interacting with the hardware signer (and running the software wallet) is considered untrusted.
 
-A more native, compact representation of the wallet receive/change might also benefit the UX of software wallets using descriptors to represent software wallets using descriptors (possibly with miniscript) for complex locking conditions.
+A more native, compact representation of the wallet receive and change addresses might also benefit the UX of software wallets when they use descriptors (possibly with miniscript) for representing complex locking conditions.
 
 We remark that wallet policies are not related to the ''policy'' language, a higher level language that can be compiled to miniscript.
 
 === Security and UX concerns for hardware signing devices ===
 
-For a hardware signing device, allowing the usage of complex scripts presents challenges in terms of both security and user experience.
+The usage of complex scripts presents challenges in terms of both security and user experience for a hardware signing device.
 
 ==== Security issues ====
 
-One of the security properties that hardware signing devices strive to guarantee is the following: as long as the user correctly verifies the information that is shown on the device's screen before approving, no action can be performed without the user's consent.
+Hardware signing devices strive to guarantee that no action can be performed without the user’s consent as long as the user correctly verifies the information that is shown on the device’s screen before approving.
 
 This must hold even in scenarios where the attacker has full control of the machine that is connected to the signing device, and can execute arbitrary requests, or tamper with the legitimate user's requests.
 
@@ -59,9 +59,9 @@ This makes it impossible for an attacker to surreptitiously modify the policy, t
 
 ==== UX issues ====
 
-With miniscript (and taproot trees) allowing substantially more complex spending policies to be used, it becomes more challenging to make sure that the user is practically able to verify the information on the screen.
+Miniscript (and taproot trees) allow substantially more complex spending policies. It is a challenge to ensure that the user can practically verify such spending policies per the screen.
 
-Therefore, there are two fundamental design goals to strive for:
+We set two fundamental design goals:
 * Minimize the amount of information that is shown on screen - so that the user can actually validate it.
 * Minimize the number of times the user has to validate such information.
 
@@ -144,7 +144,7 @@ Note that while [[bip-0389.mediawiki|BIP-389]] allows multipath `/@i for some number ''i'' represents the ''i''-th key in the vector of key information items (which must be of size at least ''i + 1'', or the wallet policy is invalid).
 
-Note: while descriptor templates for miniscript are not formally defined in this version of the document (pending standardization) it is straightforward to adapt this approach by adding additional SCRIPT expressions.
+Note: while descriptor templates for miniscript are not formally defined in this version of the document (pending standardization), it is straightforward to adapt this approach by adding additional SCRIPT expressions.
 
 ==== Keys information vector ====
 
@@ -161,11 +161,11 @@ Each element of the key origin information vector is a KEY expression.
 
 A wallet policy must have at least one key placeholder and the corresponding key.
 
-The public keys obtained by deserializing elements of the keys information vector must be pairwise distinct'''Why must public keys be distinct?''' Reusing pubkeys could be insecure in the conext of wallet policies containing [https://bitcoin.sipa.be/miniscript/ miniscript]. Avoiding repeated public keys altogether avoids the problem at the source..
+The public keys obtained by deserializing elements of the keys information vector must be pairwise distinct'''Why must public keys be distinct?''' Reusing pubkeys could be insecure in the context of wallet policies containing [https://bitcoin.sipa.be/miniscript/ miniscript]. Avoiding repeated public keys altogether avoids the problem at the source..
 
 If two key placeholders are @i//* and @i//* for the same index i, then the sets {M, N} and {P, Q} must be disjoint.
 
-The key information vector should be ordered so that placeholder @i never appear for the first time before an occurrence of @j  for some j < i; for example, the first placeholder is always @0, the next one is @1, etc.
+The key information vector should be ordered so that placeholder @i never appears for the first time before an occurrence of @j  for some j < i; for example, the first placeholder is always @0, the next one is @1, etc.
 
 === Descriptor derivation ===
 
@@ -183,7 +183,7 @@ produces the following multipath descriptor:
 
 === Implementation guidelines ===
 
-Implementations must not necessarily implement all the possible wallet policies defined by this standard, but it is recommended to clearly document any limitation.
+It is acceptable to implement only a subset of the possible wallet policies defined by this standard. It is recommended that any limitations are clearly documented.
 
 Implementations can add additional metadata that is stored together with the wallet policy for the purpose of wallet policy registration and later usage. Metadata can be vendor-specific and is out of the scope of this document.
 
@@ -274,10 +274,10 @@ The following descriptor templates are invalid:
 * sh(multi(1,@0/**,@2/**)): Skipped key placeholder @1
 * sh(multi(1,@0/**,@0/**)): Repeated keys with the same path expression
 * sh(multi(1,@0/<0;1>/*,@0/<1;2>/*)): Non-disjoint multipath expressions (@0/1/* appears twice)
-* sh(multi(1,@0/**,xpub6AHA9hZDN11k2ijHMeS5QqHx2KP9aMBRhTDqANMnwVtdyw2TDYRmF8PjpvwUFcL1Et8Hj59S3gTSMcUQ5gAqTz3Wd8EsMTmF3DChhqPQBnU/<0;1>/*)): Expression with a non KP key present
+* sh(multi(1,@0/**,xpub6AHA9hZDN11k2ijHMeS5QqHx2KP9aMBRhTDqANMnwVtdyw2TDYRmF8PjpvwUFcL1Et8Hj59S3gTSMcUQ5gAqTz3Wd8EsMTmF3DChhqPQBnU/<0;1>/*)): Expression with a non-KP key present
 * pkh(@0/<0;1;2>/*): Solved cardinality > 2
 
-Remark: some of the descriptor templates above might be valid if optional extensions allowing them are added in the implementation.
+Remark: some of the examples of invalid descriptor templates may be valid via optional extensions.
 
 == Backwards Compatibility ==
 

From 7d0c08e38acac3ef14095d0e8664c7332b7be381 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Tue, 7 May 2024 22:24:23 +0200
Subject: [PATCH 075/288] More nits from PR review

---
 bip-0388.mediawiki | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index d7ed0bec..4efc5881 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -14,7 +14,7 @@
 
 == Abstract ==
 
-Wallet policies build on top of output descriptors to represent the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device, in a compact, reviewable way. A wallet policy always represents exactly two descriptors, which produce the receive and change addresses that are logically part of the same account.
+Wallet policies build on top of output script descriptors to represent the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device, in a compact, reviewable way. A wallet policy always represents exactly two descriptors, which produce the receive and change addresses that are logically part of the same account.
 
 We simplify the language to suit devices with limited memory, where even keeping the entire descriptor in memory could be a major hurdle, by reducing the generality of descriptors to just the essential features and by separating the extended pubkeys and other key information from the descriptor.
 
@@ -101,7 +101,7 @@ In fact, there are many reasonable spending policies with a quadratic size in th
 
 With each xpub being 118 bytes long, the repetition of xpubs makes the descriptor become extremely large.
 
-Replacing the common part of the key with a short key placeholder and moving the key expression separately helps to keep the size of the wallet policy small, which is crucial to allow human inspection during the registration flow.
+Replacing the common part of the key with a short key placeholder and organizing all the key expressions in a separate list helps to keep the size of the wallet policy small, which is crucial to allow human inspection during the registration flow.
 
 == Specification ==
 
@@ -146,7 +146,7 @@ The placeholder @i for some number ''i'' represents the ''i''-th key in
 
 Note: while descriptor templates for miniscript are not formally defined in this version of the document (pending standardization), it is straightforward to adapt this approach by adding additional SCRIPT expressions.
 
-==== Keys information vector ====
+==== Key information vector ====
 
 Each element of the key origin information vector is a KEY expression.
 
@@ -161,7 +161,7 @@ Each element of the key origin information vector is a KEY expression.
 
 A wallet policy must have at least one key placeholder and the corresponding key.
 
-The public keys obtained by deserializing elements of the keys information vector must be pairwise distinct'''Why must public keys be distinct?''' Reusing pubkeys could be insecure in the context of wallet policies containing [https://bitcoin.sipa.be/miniscript/ miniscript]. Avoiding repeated public keys altogether avoids the problem at the source..
+The public keys obtained by deserializing elements of the key information vector must be pairwise distinct'''Why must public keys be distinct?''' Reusing pubkeys could be insecure in the context of wallet policies containing [https://bitcoin.sipa.be/miniscript/ miniscript]. Avoiding repeated public keys altogether avoids the problem at the source..
 
 If two key placeholders are @i//* and @i//* for the same index i, then the sets {M, N} and {P, Q} must be disjoint.
 
@@ -197,7 +197,7 @@ In order to allow supporting legacy derivation schemes (for example, using simpl
 
 However, care needs to be taken in view of the following considerations:
 
-* Allowing derivation schemes with a different length or cardinality in the same wallet policy would make it difficult to guarantee that there are no repeated pubkeys for every possible address generated by the policy. For example, `@0/<0;1>/*` and `@1/*` would generate the same pubkeys if the second public key in the keys information vector is one of the first two unhardened children of the first public key. This could cause malleability with potential security implications (for example, in policies containing miniscript).
+* Allowing derivation schemes with a different length or cardinality in the same wallet policy would make it difficult to guarantee that there are no repeated pubkeys for every possible address generated by the policy. For example, `@0/<0;1>/*` and `@1/*` would generate the same pubkeys if the second public key in the key information vector is one of the first two unhardened children of the first public key. This could cause malleability with potential security implications (for example, in policies containing miniscript).
 * Allowing naked pubkeys with no /* suffix (for example a descriptor template like wsh(multi(2,@0,@1/<0;1>/*))) would cause a pubkey to be repeated in every output generated from the policy, which would result in a total loss of privacy.
 
 == Examples ==
@@ -281,7 +281,7 @@ Remark: some of the examples of invalid descriptor templates may be valid via op
 
 == Backwards Compatibility ==
 
-The @ character used for key placeholders is not part of the syntax of output script descriptors, therefore any valid output descriptor with at least one `KEY` expression is not a valid descriptor template. Vice versa, any descriptor template with at least one key placeholder is not a valid output script descriptor.
+The @ character used for key placeholders is not part of the syntax of output script descriptors, therefore any valid descriptor with at least one `KEY` expression is not a valid descriptor template. Vice versa, any descriptor template with at least one key placeholder is not a valid output script descriptor.
 
 Adoption of wallet policies in software and hardware wallets is opt-in. Conversion from wallet policies to the corresponding descriptors is programmatically extremely easy, and conversion from descriptors to wallet policies (when respecting the required patterns) can be automated. See the reference implementation below for some examples of conversion.
 

From 96f4e5a4c4cd2e5ba4e74212077b858a3b047f31 Mon Sep 17 00:00:00 2001
From: josibake 
Date: Mon, 15 Jan 2024 12:23:22 +0100
Subject: [PATCH 076/288] Add BIP for Silent Payments

Co-Authored-By: Ruben Somsen 
---
 bip-0352.mediawiki                          | 437 ++++++++++++++++++++
 bip-0352/scan_data_downloader_per_month.png | Bin 0 -> 54276 bytes
 2 files changed, 437 insertions(+)
 create mode 100644 bip-0352.mediawiki
 create mode 100644 bip-0352/scan_data_downloader_per_month.png

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
new file mode 100644
index 00000000..2f8f767b
--- /dev/null
+++ b/bip-0352.mediawiki
@@ -0,0 +1,437 @@
+
+  BIP: 352
+  Layer: Applications
+  Title: Silent Payments
+  Author: josibake 
+          Ruben Somsen 
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0352
+  Status: Draft
+  Type: Standards Track
+  Created: 2023-03-09
+  License: BSD-2-Clause
+

+
+== Introduction ==
+
+=== Abstract ===
+
+This document specifies a protocol for static payment addresses in Bitcoin without on-chain linkability of payments or a need for on-chain notifications.
+
+=== Copyright ===
+
+This BIP is licensed under the BSD 2-clause license.
+
+=== Motivation ===
+
+Using a new address for each Bitcoin transaction is a crucial aspect of maintaining privacy. This often requires a secure interaction between sender and receiver so that the receiver can hand out a fresh address, a batch of fresh addresses, or a method for the sender to generate addresses on-demand, such as an xpub.
+
+However, interaction is often infeasible and in many cases undesirable. To solve for this, various protocols have been proposed which use a static payment address and notifications sent via the blockchain'''Why not use out-of-band notifications''' Out of band notifications (e.g. using something other than the Bitcoin blockchain) have been proposed as a way of addressing the privacy and cost concerns of using the Bitcoin blockchain as a messaging layer. This, however, simply moves the privacy and cost concerns somewhere else and increases the risk of losing money due to a notification not being reliably delivered, or even censored, and makes this notification data critical for backup to recover funds.. These protocols eliminate the need for interaction, but at the expense of increased costs for one-time payments and a noticeable footprint in the blockchain, potentially revealing metadata about the sender and receiver. Notification schemes also allow the receiver to link all payments from the same sender, compromising sender privacy.
+
+This proposal aims to address the limitations of these current approaches by presenting a solution that eliminates the need for interaction, eliminates the need for notifications, and protects both sender and receiver privacy. These benefits come at the cost of requiring wallets to scan the blockchain in order to detect payments. This added requirement is generally feasible for full nodes but poses a challenge for light clients. While it is possible today to implement a privacy-preserving light client at the cost of increased bandwidth, light client support is considered an area of open research (see [[#appendix-a-light-client-support|Appendix A: Light Client Support]]).
+
+The design keeps collaborative transactions such as CoinJoins and inputs with MuSig and FROST keys in mind, but it is recommended that the keys of all inputs of a transaction belong to the same entity as there is no formal proof that the protocol is secure in a collaborative setting.
+
+== Goals ==
+
+We aim to present a protocol which satisfies the following properties:
+
+* No increase in the size or cost of transactions
+* Resulting transactions blend in with other bitcoin transactions and can't be distinguished
+* Transactions can't be linked to a silent payment address by an outside observer
+* No sender-receiver interaction required
+* No linking of multiple payments to the same sender
+* Each silent payment goes to a unique address, avoiding accidental address reuse
+* Supports payment labeling
+* Uses existing seed phrase or descriptor methods for backup and recovery
+* Separates scanning and spending responsibilities
+* Compatible with other spending protocols, such as CoinJoin
+* Light client/SPV wallet support
+* Protocol is upgradeable
+
+== Overview ==
+
+We first present an informal overview of the protocol. In what follows, uppercase letters represent public keys, lowercase letters represent private keys, ''||'' refers to byte concatenation, ''G'' represents the generator point for secp256k1, and ''n'' represents the curve order for secp256k1. Each section of the overview is incomplete on its own and is meant to build on the previous section in order to introduce and briefly explain each aspect of the protocol. For the full protocol specification, see [[#specification|Specification]].
+
+''' Simple case '''
+
+Bob publishes a public key ''B'' as a silent payment address. Alice discovers Bob's silent payment address, selects a UTXO with private key ''a'', public key ''A'' and creates a destination output ''P'' for Bob in the following manner:
+
+* Let ''P = B + hash(a·B)·G''
+* Encode ''P'' as a [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot output
+
+Since ''a·B == b·A'' ([https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman Elliptic-curve Diffie–Hellman]), Bob scans with his private key ''b'' by collecting the input public keys for each transaction with at least one unspent taproot output and performing the ECDH calculation until ''P'' is found (i.e. calculating ''P = B + hash(b·A)·G'' and seeing that ''P'' is present in the transaction outputs).
+
+''' Creating more than one output '''
+
+In order to allow Alice to create more than one output for Bob'''Why allow for more than one output?''' Allowing Alice to break her payment to Bob into multiple amounts opens up a number of privacy improving techniques for Alice, making the transaction look like a CoinJoin or better hiding the change amount by splitting both the payment and change outputs into multiple amounts. It also allows for Alice and Carol to both have their own unique output paying Bob in the event they are in a collaborative transaction and both paying Bob's silent payment address., we include an integer in the following manner:
+
+* Let ''k = 0''
+* Let ''P0 = B + hash(a·B || k)·G''
+* For additional outputs:
+** Increment ''k'' by one (''k++'')
+** Let ''Pi = B + hash(a·B || k)·G''
+
+Bob detects this output the same as before by searching for ''P0 = B + hash(b·A || 0)·G''. Once he detects the first output, he must:
+
+* Check for ''P1 = B + hash(b·A || 1)·G''
+* If ''P1'' is not found, stop
+* If ''P1'' is found, continue to check for ''P2'' and so on until an additional output is not found
+
+Since Bob will only perform these subsequent checks after a transaction with at least one output paying him is found, the increase to his overall scanning requirement is negligible. It should also be noted that the order in which these outputs appear in the transaction does not affect the outcome.
+
+''' Preventing address reuse '''
+
+If Alice were to use a different UTXO from the same public key ''A'' for a subsequent payment to Bob, she would end up deriving the same destinations ''Pi''. To prevent this, Alice should include an input hash in the following manner:
+
+* Let ''input_hash = hash(outpoint || A)'''''Why include A in the input hash calculation?''' By committing to A in input hash, this ensures that the sender cannot maliciously choose a private key ''a′'' in a subsequent transaction where ''a′ = input_hash·a / input_hash′'', which would force address reuse in the protocol.
+* Let ''P0 = B + hash(input_hash·a·B || 0)·G''
+
+Bob must calculate the same ''input_hash'' when scanning.
+
+''' Using all inputs '''
+
+In our simplified example we have been referring to Alice's transactions as having only one input ''A'', but in reality a Bitcoin transaction can have many inputs. Instead of requiring Alice to pick a particular input and requiring Bob to check each input separately, we can instead require Alice to perform the tweak with the sum of the input public keys'''What about inputs without public keys?''' Inputs without public keys can still be spent in the transaction but are simply ignored in the silent payments protocol.. This significantly reduces Bob's scanning requirement, makes light client support more feasible'''How does using all inputs help light clients?''' If Alice uses a random input for the tweak, Bob necessarily has to have access to and check all transaction inputs, which requires performing an ECC multiplication per input. If instead Alice performs the tweak with the sum of the input public keys, Bob only needs the summed 33 byte public key per transaction and only does one ECC multiplication per transaction. Bob can then use BIP158 block filters to determine if any of the outputs exist in a block and thus avoids downloading transactions which don't belong to him. It is still an open question as to how Bob can source the 33 bytes per transaction in a trustless manner, see [[#appendix-a-light-client-support|Appendix A: Light Client Support]] for more details., and protects Alice's privacy in collaborative transaction protocols such as CoinJoin'''Why does using all inputs matter for CoinJoin?''' If Alice uses a random input to create the output for Bob, this necessarily reveals to Bob which input Alice has control of. If Alice is paying Bob as part of a CoinJoin, this would reveal which input belongs to her, degrading the anonymity set of the CoinJoin and giving Bob more information about Alice. If instead all inputs are used, Bob has no way of knowing which input(s) belong to Alice. This comes at the cost of increased complexity as the CoinJoin participants now need to coordinate to create the silent payment output and would need to use [https://gist.github.com/RubenSomsen/be7a4760dd4596d06963d67baf140406 Blind Diffie–Hellman] to prevent the other participants from learning who Alice is paying. Note it is currently not recommended to use this protocol for CoinJoins due to a lack of a formal security proof..
+
+Alice performs the tweak with the sum of her input private keys in the following manner:
+
+* Let ''A = A1 + A2 + ... + An''
+* Let ''input_hash = hash(outpointL || A)'', where ''outpointL'' is the smallest outpoint lexicographically'''Why use the lexicographically smallest outpoint for the hash?''' Recall that the purpose of including the input hash is so that the sender and receiver can both come up with a deterministic nonce that ensures that a unique address is generated each time, even when reusing the same scriptPubKey as an input. Choosing the smallest outpoint lexicographically satisifes this requirement, while also ensuring that the generated output is not dependent on the final ordering of inputs in the transaction. Using a single outpoint also works well with memory constrained devices (such as hardware signing devices) as it does not require the device to have the entire transaction in memory in order to generate the silent payment output.
+* Let ''a = a1 + a2 + ... + an''
+* Let ''P0 = B + hash(input_hash·a·B || 0)·G''
+
+''' Spend and Scan Key '''
+
+Since Bob needs his private key ''b'' to check for incoming payments, this requires ''b'' to be exposed to an online device. To minimize the risks involved, Bob can instead publish an address of the form ''(Bscan, Bspend)''. This allows Bob to keep ''bspend'' in offline cold storage and perform the scanning with the public key ''Bspend'' and private key ''bscan''. Alice performs the tweak using both of Bob's public keys in the following manner:
+
+* Let ''P0 = Bspend + hash(input_hash·a·Bscan || 0)·G''
+
+Bob detects this payment by calculating ''P0 = Bspend + hash(input_hash·bscan·A || 0)·G'' with his online device and can spend from his cold storage signing device using ''(bspend + hash(input_hash·bscan·A || 0)) mod n'' as the private key.
+
+''' Labels '''
+
+For a single silent payment address of the form ''(Bscan, Bspend)'', Bob may wish to differentiate incoming payments. Naively, Bob could publish multiple silent payment addresses, but this would require him to scan for each one, which becomes prohibitively expensive. Instead, Bob can label his spend public key ''Bspend'' with an integer ''m'' in the following way:
+
+* Let ''Bm = Bspend + hash(bscan || m)·G'' where m is an incrementable integer starting from 1
+* Publish ''(Bscan, B1)'', ''(Bscan, B2)'' etc.
+
+Alice performs the tweak as before using one of the published ''(Bscan, Bm)'' pairs. Bob detects the labeled payment in the following manner:
+
+* Let ''P0 = Bspend + hash(input_hash·bscan·A || 0)·G''
+* Subtract ''P0'' from each of the transaction outputs and check if the remainder matches any of the labels (''hash(bscan || 1)·G'', ''hash(bscan || 2)·G'' etc.) that the wallet has previously used
+
+It is important to note that an outside observer can easily deduce that each published ''(Bscan, Bm)'' pair is owned by the same entity as each published address will have ''Bscan'' in common. As such, labels are not meant as a way for Bob to manage separate identities, but rather a way for Bob to determine the source of an incoming payment.
+
+''' Labels for change '''
+
+Bob can also use labels for managing his own change outputs. We reserve ''m = 0'' for this use case. This gives Bob an alternative to using BIP32 for managing change, while still allowing him to know which of his unspent outputs were change when recovering his wallet from the master key. It is important that the wallet never hands out the label with ''m = 0'' in order to ensure nobody else can create payments that are wrongly labeled as change.
+
+While the use of labels is optional, every receiving silent payments wallet should at least scan for the change label when recovering from backup in order to ensure maximum cross-compatibility.
+
+== Specification ==
+
+We use the following functions and conventions:
+
+* ''outpoint'' (36 bytes): the COutPoint of an input (32-byte txid, least significant byte first || 4-byte vout, least significant byte first)'''Why are outpoints little-endian?''' Despite using big endian throughout the rest of the BIP, outpoints are sorted and hashed matching their transaction serialization, which is little-endian. This allows a wallet to parse a serialized transaction for use in silent payments without needing to re-order the bytes when computing the input hash. Note: despite outpoints being stored and serialized as little-endian, the transaction hash (txid) is always displayed as big-endian.
+* ser32(i): serializes a 32-bit unsigned integer ''i'' as a 4-byte sequence, most significant byte first.
+* ser256(p): serializes the integer p as a 32-byte sequence, most significant byte first.
+* serP(P): serializes the coordinate pair P = (x,y) as a byte sequence using SEC1's compressed form: (0x02 or 0x03) || ser256(x), where the header byte depends on the parity of the omitted Y coordinate.
+
+For everything not defined above, we use the notation from [https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki#specification BIP340]. This includes the ''hashtag(x)'' notation to refer to ''SHA256(SHA256(tag) || SHA256(tag) || x)''.
+
+=== Versions ===
+
+This document defines version 0 (''sp1q''). Version is communicated through the address in the same way as Segwit addresses. Future upgrades to silent payments will require a new version. As much as possible, future upgrades should support receiving from older wallets (e.g. a silent payments v0 wallet can send to both v0 and v1 addresses). Any changes that break compatibility with older silent payment versions should be a new BIP.
+
+Future silent payments versions will use the following scheme:
+
+{| class="wikitable"
+|-
+!
+!0
+!1
+!2
+!3
+!4
+!5
+!6
+!7
+!Compatibility
+|-
+!+0
+|q||p||z||r||y||9||x||8||rowspan="4" | backwards compatible
+|-
+!+8
+|g||f||2||t||v||d||w||0
+|-
+!+16
+|s||3||j||n||5||4||k||h
+|-
+!+24
+|c||e||6||m||u||a||7|| -
+|}
+
+''v31'' (l) is reserved for a backwards incompatible change, if needed. For silent payments v0:
+
+* If the receiver's silent payment address version is:
+** ''v0'': check that the data part is exactly 66-bytes. Otherwise, fail
+** ''v1'' through ''v30'': read the first 66-bytes of the data part and discard the remaining bytes
+** ''v31'': fail
+* Receiver addresses are always [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot outputs'''Why only taproot outputs?''' Providing too much optionality for the protocol makes it difficult to implement and can be at odds with the goal of providing the best privacy. Limiting to taproot outputs helps simplify the implementation significantly while also putting users in the best eventual anonymity set.
+* The sender should sign with one of the sighash flags ''DEFAULT'', ''ALL'', ''SINGLE'', ''NONE'' (''ANYONECANPAY'' is unsafe). It is strongly recommended implementations use ''SIGHASH_ALL'' (''SIGHASH_DEFAULT'' for taproot inputs) when possible'''Why is it unsafe to use ''SIGHASH_ANYONECANPAY''?''' Since the output address for the receiver is derived from the sum of the [[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]] public keys, the inputs must not change once the sender has signed the transaction. If the inputs are allowed to change after the fact, the receiver will not be able to calculate the shared secret needed to find and spend the output. It is currently an open question on how a future version of silent payments could be made to work with new sighash flags such as ''SIGHASH_GROUP'' and ''SIGHASH_ANYPREVOUT''.
+* Inputs used to derive the shared secret are from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+
+=== Scanning silent payment eligible transactions ===
+
+For silent payments v0 a transaction MUST be scanned if and only if all of the following are true:
+
+* The transaction contains at least one BIP341 taproot output (note: spent transactions optionally can be skipped by only considering transactions with at least one unspent taproot output)
+* The transaction has at least one input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+* The transaction does not spend an output with SegWit version > 1'''Why skip transactions that spend SegWit version > 1?''' Skipping transactions that spend unknown output scripts allows us to have a clean upgrade path for silent payments by avoiding the need to scan the same transaction multiple times with different rule sets. If a new SegWit version is added in the future and silent payments v1 is released with support, we would want to avoid having to first scan the transaction with the silent payment v0 rules and then again with the silent payment v1 rules. Note: this restriction only applies to the inputs of a transaction.
+
+=== Address encoding ===
+
+A silent payment address is constructed in the following manner:
+
+* Let ''Bscan, bscan = Receiver's scan public key and corresponding private key''
+* Let ''Bspend, bspend = Receiver's spend public key and corresponding private key''
+* Let ''Bm = Bspend + hashBIP0352/Label(ser256(bscan) || ser32(m))·G'', where ''hashBIP0352/Label(ser256(bscan) || ser32(m))·G'' is an optional integer tweak for labeling
+** If no label is applied then ''Bm = Bspend''
+* The final address is a [https://github.com/bitcoin/bips/blob/master/bip-0350.mediawiki Bech32m] encoding of:
+** The human-readable part "sp" for mainnet, "tsp" for testnets (e.g.  signet, testnet)
+** The data-part values:
+*** The character "q", to represent a silent payment address of version 0
+*** The 66 byte concatenation of the receiver's public keys, ''serP(Bscan) || serP(Bm)''
+
+Note: [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki BIP173] imposes a 90 character limit for Bech32 segwit addresses and limits versions to 0 through 16, whereas a silent payment address requires ''at least'' 117 characters ''' Why do silent payment addresses need at least 117 characters?''' A silent payment address is a bech32m encoding comprised of the following parts:
+
+
+* HRP [2-3 characters]
+* separator [1 character]
+* version [1-2 characters]
+* payload, 66 bytes concatenated pubkeys [ceil(66*8/5) = 106 characters]
+* checksum [6 characters]
+
+
+For a silent payments v0 address, this results in a 117 character address when using a 3 character HRP. Future versions of silent payment addresses may add to the payload, which is why a 1023 character limit is suggested. and allows versions up to 31. Additionally, since higher versions may add to the data field, it is recommended implementations use a limit of 1023 characters (see [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#checksum-design BIP173: Checksum design] for more details).
+
+=== Inputs For Shared Secret Derivation ===
+
+While any UTXO with known output scripts can be used to fund the transaction, the sender and receiver MUST use inputs from the following list when deriving the shared secret:
+
+* ''P2TR''
+* ''P2WPKH''
+* ''P2SH-P2WPKH''
+* ''P2PKH''
+
+Inputs with conditional branches or multiple public keys (e.g. ''CHECKMULTISIG'') are excluded from shared secret derivation as this introduces malleability and would allow a sender to re-sign with a different set of public keys after the silent payment output has been derived. This is not a concern when the sender controls all of the inputs, but is an issue for CoinJoins and other collaborative protocols, where a malicious participant can participate in deriving the silent payment address with one set of keys and then re-broadcast the transaction with signatures for a different set of public keys. P2TR can have hidden conditional branches (script path), but we work around this by using only the output public key.
+
+For all of the output types listed, only X-only and compressed public keys are permitted''' Why only compressed public keys ''' Uncompressed and hybrid public keys are less common than compressed keys and generally considered to be a bad idea due to their blockspace inefficiency. Additionally, [https://github.com/bitcoin/bips/blob/master/bip-0143.mediawiki#restrictions-on-public-key-type BIP143] recommends restricting P2WPKH inputs to compressed keys as a default policy..
+
+''' P2TR '''
+
+'' Keypath spend ''
+
+    witness:      
+    scriptSig:    (empty)
+    scriptPubKey: 1 <32-byte-x-only-key>
+                  (0x5120{32-byte-x-only-key})
+
+The sender uses the private key corresponding to the taproot output key (i.e. the tweaked private key). This can be a single private key or an aggregate key (e.g. taproot outputs using MuSig or FROST)'''Are key aggregation techniques like FROST and MuSig supported?''' While we do not recommend it due to lack of a security proof (except if all participants are trusted or are the same entity), any taproot output able to do a key path theoretically is supported. Any offline key aggregation technique can be used, such as FROST or MuSig. This would require participants to perform the ECDH step collaboratively e.g. ''ECDH = a1·Bscan + a2·Bscan + ... + at·Bscan'' and ''P = Bspend + hash(input_hash·ECDH || 0)·G''. Additionally, it may be necessary for the participants to provide a DLEQ proof to ensure they are not acting maliciously.. The receiver obtains the public key from the ''scriptPubKey'' (i.e. the taproot output key).
+
+'' Script path spend ''
+
+    witness:        
+    scriptSig:    (empty)
+    scriptPubKey: 1 <32-byte-x-only-key>
+                  (0x5120{32-byte-x-only-key})
+
+Same as a keypath spend, the sender MUST use the private key corresponding to the taproot output key. If this key is not available, the output cannot be included as an input to the transaction. Same as a keypath spend, the receiver obtains the public key from the ''scriptPubKey'' (i.e. the taproot output key)''' Why not skip all taproot script path spends? ''' This causes malleability issues for CoinJoins. If the silent payments protocol skipped taproot script path spends, this would allow an attacker to join a CoinJoin round, participate in deriving the silent payment address using the tweaked private key for a key path spend, and then broadcast their own version of the transaction using the script path spend. If the receiver were to only consider key path spends, they would skip the attacker's script path spend input when deriving the shared secret and not be able to find the funds. Additionally, there may be scenarios where the sender can perform ECDH with the key path private key but spends the output using the script path..
+
+The one exception is script path spends that use NUMS point ''H'' as their internal key (where ''H'' is constructed by taking the hash of the standard uncompressed encoding of the secp256k1 base point ''G'' as X coordinate, see [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki#constructing-and-spending-taproot-outputs BIP341: Constructing and spending Taproot outputs] for more details), in which case the input will be skipped for the purposes of shared secret derivation'''Why skip outputs with H as the internal taproot key?''' If use cases get popularized where the taproot key path cannot be used, these outputs can still be included without getting in the way of making a silent payment, provided they specifically use H as their internal taproot key.. The receiver determines whether or not to skip the input by checking in the control block if the taproot internal key is equal to ''H''.
+
+''' P2WPKH '''
+
+    witness:       <33-byte-compressed-key>
+    scriptSig:    (empty)
+    scriptPubKey: 0 <20-byte-key-hash>
+                  (0x0014{20-byte-key-hash})
+
+The sender performs the tweak using the private key for the output and the receiver obtains the public key as the last witness item.
+
+''' P2SH-P2WPKH '''
+
+    witness:       <33-byte-compressed-key>
+    scriptSig:    <0 <20-byte-key-hash>>
+                  (0x160014{20-byte-key-hash})
+    scriptPubKey: HASH160 <20-byte-script-hash> EQUAL
+                  (0xA914{20-byte-script-hash}87)
+
+The sender performs the tweak using the private key for the nested ''P2WPKH'' output and the receiver obtains the public key as the last witness item.
+
+''' P2PKH '''
+
+    scriptSig:     <33-byte-compressed-key>
+    scriptPubKey: OP_DUP HASH160 <20-byte-key-hash> OP_EQUALVERIFY OP_CHECKSIG
+                  (0x76A914{20-byte-key-hash}88AC)
+
+The receiver obtains the public key from the ''scriptSig''. The receiver MUST parse the ''scriptSig'' for the public key, even if the ''scriptSig'' does not match the template specified (e.g.  OP_DROP  ). This is to address the [https://en.bitcoin.it/wiki/Transaction_malleability third-party malleability of ''P2PKH'' ''scriptSigs''].
+
+=== Input hash ===
+
+The sender and receiver MUST calculate an input hash for the transaction in the following manner:
+
+* Let ''A = A1 + A2 + ... + An'', where each ''Ai'' is the public key of an input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+* Let ''input_hash = hashBIP0352/Inputs(outpointL || A)'', where ''outpointL'' is the smallest outpoint lexicographically by txid and vout used in the transaction
+
+=== Sender ===
+
+==== Selecting inputs ====
+
+The sending wallet performs coin selection as usual with the following restrictions:
+
+* At least one input MUST be from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+* Exclude inputs with SegWit version > 1 (see ''[[#scanning-silent-payment-eligible-transactions|Scanning silent payment eligible transactions]]'')
+* For each taproot output spent the sending wallet MUST have access to the private key corresponding to the taproot output key, unless ''H'' is used as the internal public key
+
+==== Creating outputs ====
+
+After the inputs have been selected, the sender can create one or more outputs for one or more silent payment addresses in the following manner:
+
+* Generate the ''input_hash'' with the smallest outpoint lexicographically, using the method described above
+* Collect the private keys for each input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+* For each private key ''ai'' corresponding to a [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot output, check that the private key produces a point with an even Y coordinate and negate the private key if not'''Why do taproot private keys need to be checked?''' Recall from [https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki BIP340] that each X-only public key has two corresponding private keys, ''d'' and ''n - d''. To maintain parity between sender and receiver, it is necessary to use the private key corresponding to the even Y coordinate when performing the ECDH step since the receiver will assume the even Y coordinate when summing the taproot X-only public keys.
+* Let ''a = a1 + a2 + ... + an'', where each ''ai'' has been negated if necessary
+* Group receiver silent payment addresses by ''Bscan'' (e.g. each group consists of one ''Bscan'' and one or more ''Bm'')
+* For each group:
+** Let ''ecdh_shared_secret = input_hash·a·Bscan''
+** Let ''k = 0''
+** For each ''Bm'' in the group:
+*** Let ''tk = hashBIP0352/SharedSecret(serP(ecdh_shared_secret) || ser32(k))''
+**** If ''tk'' is not valid tweak, i.e., if ''tk = 0'' or ''tk'' is larger or equal to the secp256k1 group order, fail
+*** Let ''Pmn = Bm + tk·G''
+*** Encode ''Pmn'' as a [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot output
+*** Optionally, repeat with k++ to create additional outputs for the current ''Bm''
+*** If no additional outputs are required, continue to the next ''Bm'' with ''k++''''' Why not re-use ''tk'' when paying different labels to the same receiver?''' If paying the same entity but to two separate labeled addresses in the same transaction without incrementing ''k'', an outside observer could subtract the two output values and observe that this value is the same as the difference between two published silent payment addresses and learn who the recipient is.
+** Optionally, if the sending wallet implements receiving silent payments, it can create change outputs by sending to its own silent payment address using label ''m = 0'', following the steps above
+
+=== Receiver ===
+
+==== Key Derivation ====
+
+Two keys are needed to create a silent payments address: the spend key and the scan key. To ensure compatibility, wallets MAY use BIP32 derivation with the following derivation paths for the spend and scan key. When using BIP32 derivation, wallet software MUST use hardened derivation'''Why use BIP32 hardened derivation?''' Using BIP32 derivation allows users to add silent payments to an existing master seed. It also ensures that a user's silent payment funds are recoverable in any BIP32/BIP43 compatible wallet. Using hardened derivation ensures that it is safe to export the scan private key without exposing the master key or spend private key. for both the spend and scan key.
+
+A scan and spend key pair using BIP32 derivation are defined (taking inspiration from [https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki BIP44]) in the following manner:
+
+     scan_private_key: m / purpose' / coin_type' / account' / 1' / 0
+    spend_private_key: m / purpose' / coin_type' / account' / 0' / 0
+
+purpose is a constant set to ''352'' following the BIP43 recommendation. Refer to [https://github.com/bitcoin/bips/blob/master/bip-0043.mediawiki BIP43] and [https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki BIP44] for more details.
+
+==== Scanning ====
+
+If each of the checks in ''[[#scanning-silent-payment-eligible-transactions|Scanning silent payment eligible transactions]]'' passes, the receiving wallet must:
+
+* Generate the ''input_hash'' with the smallest outpoint lexicographically, using the method described above
+* Let ''A = A1 + A2 + ... + An'', where each ''Ai'' is the public key of an input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+* Let ''ecdh_shared_secret = input_hash·bscan·A''
+* Check for outputs:
+** Let ''outputs_to_check'' be the taproot output keys from all taproot outputs in the transaction (spent and unspent).
+** Starting with ''k = 0'':
+*** Let ''tk = hashBIP0352/SharedSecret(serP(ecdh_shared_secret) || ser32(k))''
+**** If ''tk'' is not valid tweak, i.e., if ''tk = 0'' or ''tk'' is larger or equal to the secp256k1 group order, fail
+*** Compute ''Pk = Bspend + tk·G''
+*** For each ''output'' in ''outputs_to_check'':
+**** If ''Pk'' equals ''output'':
+***** Add ''Pk'' to the wallet
+***** Remove ''output'' from ''outputs_to_check'' and rescan ''outputs_to_check'' with ''k++''
+**** Else, check for labels (always check for the change label, i.e. ''hashBIP0352/Label(ser256(bscan) || ser32(m))'' where ''m = 0'')''' Why precompute labels?''' Precomputing the labels is not strictly necessary: a wallet could track the max number of labels it has used (call it ''M'') and scan for labels by adding ''hash(bscan || m)·G'' to ''P0'' for each label ''m'' up to ''M'' and comparing to the transaction outputs. This is more performant than precomputing the labels and checking via subtraction in cases where the number of eligible outputs exceeds the number of labels in use. In practice this will mainly apply to users that choose never to use labels, or users that use a single label for generating silent payment change outputs. If using a large number of labels, the wallet would need to add all possible labels to each output. This ends up being ''n·M'' additions, where ''n'' is the number of outputs in the transaction and ''M'' is the number of labels in the wallet. By precomputing the labels, the wallet only needs to compute ''hash(bscan || m)·G'' once when creating the labeled address and can determine if a label was used via a lookup, rather than adding each label to each output.:
+***** Compute ''label = output - Pk''
+***** Check if ''label'' exists in the list of labels used by the wallet
+***** If a match is found:
+****** Add ''Pk + label'' to the wallet
+****** Remove ''output'' from ''outputs_to_check'' and rescan ''outputs_to_check'' with ''k++''
+***** If a label is not found, negate ''output'' and check a second time''' Why negate the output?''' Unfortunately taproot outputs are X-only, meaning we don't know what the correct Y coordinate is. This causes this specific calculation to fail 50% of the time, so we need to repeat it with the other Y coordinate by negating the output.
+*** If no matches are found, stop
+
+==== Spending ====
+
+Recall that a silent payment output is of the form ''Bspend + tk·G + hashBIP0352/Label(ser256(bscan) || ser32(m))·G'', where ''hashBIP0352/Label(ser256(bscan) || ser32(m))·G'' is an optional label. To spend a silent payment output:
+
+* Let ''d = (bspend + tk + hashBIP0352/Label(ser256(bscan) || ser32(m))) mod n'', where ''hashBIP0352/Label(ser256(bscan) || ser32(m))'' is the optional label
+* Spend the [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] output with the private key ''d''
+
+==== Backup and Recovery ====
+
+Since each silent payment output address is derived independently, regular backups are recommended. When recovering from a backup, the wallet will need to scan since the last backup to detect new payments.
+
+If using a seed/seed phrase only style backup, the user can recover the wallet's unspent outputs from the UTXO set (i.e. only scanning transactions with at least one unspent taproot output) and can recover the full wallet history by scanning the blockchain starting from the wallet birthday. If a wallet uses labels, this information SHOULD be included in the backup. If the user does not know whether labels were used, it is strongly recommended they always precompute and check a large number of labels (e.g. 100k labels) to use when re-scanning. This ensures that the wallet can recover all funds from only a seed/seed phrase backup. The change label should simply always be scanned for, even when no other labels were used. This ensures the use of a change label is not critical for backups and maximizes cross-compatibility.
+
+== Backward Compatibility ==
+
+Silent payments introduces a new address format and protocol for sending and as such is not compatible with older wallet software or wallets which have not implemented the silent payments protocol.
+
+=== Functional tests ===
+
+Below is a list of functional tests which should be included in sending and receiving implementations.
+
+==== Sending ====
+
+* Ensure taproot outputs are excluded during coin selection if the sender does not have access to the key path private key (unless using ''H'' as the taproot internal key)
+* Ensure the silent payment address is re-derived if inputs are added or removed during RBF
+
+==== Receiving ====
+
+* Ensure the public key can be extracted from non-standard ''P2PKH'' scriptSigs
+* Ensure taproot script path spends are included, using the taproot output key (unless ''H'' is used as the taproot internal key)
+* Ensure the scanner can extract the public key from each of the input types supported (e.g. ''P2WPKH'', ''P2SH-P2WPKH'', etc.)
+
+== Appendix A: Light Client Support ==
+
+This section proposes a few ideas for how light clients could support scanning for incoming silent payments (sending is fairly straightforward) in ways that preserve bandwidth and privacy. While this is out of scope for the current BIP, it is included to motivate further research into this topic. In this context, a light client refers to any bitcoin wallet client which does not process blocks and does not have a direct connection to a node which does process blocks (e.g. a full node). Based on this definition, clients that directly connect to a personal electrum server or a bitcoin node are not light clients.
+
+This distinction makes the problem for light clients more clear: light clients need a way to source the necessary data for performing the tweaks and a way of determining if any of the generated outputs exist in a block.
+
+=== Tweak Data ===
+
+Recall that a silent payment eligible transaction follows [[#scanning-silent-payment-eligible-transactions|certain conditions]] and should have at least one unspent taproot output. Full nodes (or any index server backed by a full node, such as electrum server) can build an index which collects all of the eligible public keys for a silent payments eligible transaction, sums them up, multiplies the sum by the ''input_hash'', and serves them to clients. This would be 33 bytes per silent payment eligible transaction.
+
+For a typical bitcoin block of ~3500 txs, lets assume every transaction is a silent payments eligible transaction. This means a client would need to request ''33 bytes * 3500'' of data per block (roughly 100 kB per block). If a client were to request data for every block, this would amount to ~450 MB per month, assuming 100% taproot usage and all outputs remain unspent for > 1 month. As of today, these numbers are closer to 2–10 kB per block (10–50 MB per month)''' Data for Appendix A ''' These numbers are based on data from January 2023 until June 2023 (the last 6 months of data at time time of writing). See [https://github.com/josibake/bitcoin-data-analysis/blob/main/notebooks/silent-payments-light-client-data.ipynb Silent payments light client data] for the full analysis..
+
+=== Transaction cut-through ===
+
+It is unlikely a light client would need to scan every block and as such can take advantage of transaction cut-through, depending on how often they choose to scan for new blocks. Empirically, ~75% of transactions with at least one unspent taproot output will have spent all taproot UTXOs in 326 blocks or less. This means a client which only scans once every 3 days could ''significantly'' cut down on the number of blocks and the number of transactions per block that they need to request by only asking for data on transactions that were created since their last scan and that still have at least one unspent taproot output as of the current block height. Assuming 100% taproot usage, a client that scans once a month would likely only need around 50 MB worth of data. Based on current taproot adoption, a light client scanning once every 3 days would use roughly 15 MB per month and a client scanning once per month would use less than 5 MB per month.
+
+[[File:bip-0352/scan_data_downloader_per_month.png]]
+
+=== BIP158 ===
+
+Once a light client has the tweak data for a block, they can determine whether or not an output to them exists in the block using BIP158 block filters. Per BIP158, they would then request the entire block and add the transaction to their wallet, though it maybe be possible to only request the prevout txids and vouts for all transactions with at least one taproot output, along with the scriptPubKeys and amounts. This would allow the client to download the necessary data for constructing a spending transaction, without downloading the entire block. How this affects the security assumptions of BIP158 is an open question.
+
+=== Out-of-band notifications ===
+
+Assuming a secure messaging protocol exists, the sender can send an encrypted (using the scan public key of the silent payment address) notification to the receiver with the following information:
+* The spend public key (communicates the label)
+* The shared secret portion of the private key (i.e ''hash(ecdh_shared_secret || k)'')
+* The outpoint and amount (so it's immediately spendable)
+
+It is important to note that these notifications are not required. At any point, the receiver can fall back to scanning for silent payment transactions if they don't trust the notifications they are receiving, are being spammed with fake notifications, or if they are concerned that they are not receiving notifications.
+
+A malicious notification could potentially cause the following issues:
+
+* You did not actually receive money to the stated key
+** This can be probabilistically resolved by matching the key against the BIP158 block filters and assuming it's not a false positive, or fully resolved by downloading the block
+* You received money but the outpoint or amount is incorrect, so attempts to spend it will fail or cause you to overpay fees
+** There doesn't seem to be much motivation for malicious senders to ever do this, but light clients need to take into account that this can occur and should ideally check for it by downloading the block
+* The private key is correct but it wasn't actually derived using the silent payment protocol, causing recovery from back-up to fail (unsafe - no implementation should ever allow this)
+** This can be detected by downloading the tweak data of the corresponding block and should be resolved by immediately spending the output
+
+Wallet designers can choose which tradeoffs they find appropriate. For example, a wallet could check the block filter to at least probabilistically confirm the likely existence of the UTXO, thus efficiently cutting down on spam. The payment could then be marked as unconfirmed until a scan is performed and the existence of the UTXO in accordance to the silent payment specification is verified.
+
+
+== Acknowledgements ==
+
+This document is the result of many discussions and contains contributions by a number of people. The authors wish to thank all those who provided valuable feedback and reviews, including the participants of the [https://gist.github.com/RubenSomsen/21c477c90c942acf45f8e8f5c1ad4fae BIP47 Prague discussion], the [https://github.com/josibake/silent-payments-workshop Advancing Bitcoin silent payments Workshop], and [https://btctranscripts.com/bitcoin-core-dev-tech/2023-04-26-silent-payments/ coredev]. The authors would like to also thank [https://github.com/w0xlt w0xlt] for writing the initial implementation of silent payments.
+
+== Rationale and References ==
+
+
diff --git a/bip-0352/scan_data_downloader_per_month.png b/bip-0352/scan_data_downloader_per_month.png
new file mode 100644
index 0000000000000000000000000000000000000000..ffcd0ddddb8c685b39055fd19112c81c8186109b
GIT binary patch
literal 54276
zcma&O1yq%5^f!nFA_@iqA|aBZlv0w4goK22cSv`K3QB{3bPCel-6bs`-5}i@I=}ti
zd*?qh>-%P{aV?j@Ip?kC+51=fcuR^4-MT?|0}T!BmhfBt_h@LBCDG6>wOvPt{}Iu~
zkcK~AS_>#xOPlFg+i6Vui-3wjp%7tbCUSX-N0aWF8L
z{Lc&M%`Ej9x}KKz!G~a)zg4tCL&MQTeqT!CP5pp|)^8!q|60aAW^KYwCDi7mZoB8D
zXZ33x+Q&2rkLk_P3}@SA4NE${hRPW_@$MN7J3A^F>gtV5Ds9LvOgfo;e^S7vKT*pY
zK*as|#*LUOYMVou@^MaT2Qz5+QzsR^IezHHZ;O`g#4{{`0ZuNfBs7}
z_!TDd!#}|kl6=?UZ^aat-{BQx{B*+qzh1&mCm<;J+-60_$kRemI#rzV`SZR}O_|lB
z#dzu`Puge~#YIGB;UBq$bIBVH=Yq(4$sey_mZ?*19mqiqE9v|12=0GIW_N^=_<76u6sk;l)U2Rm(6myVvfp6$s$CMWmy
z^V8{x<6f8#6}Fsrlai96prU&2dTMXGF|ODnZ)Gx8fu}h|I`&!wq4c8Za=+B}3WNB@!^Y>R!XB_v#$gq;_{6br_
z#O0GyRF8$7-QvNNTWe!uqn4_;ctB|4-Nc!*?N(Cj_0juoZWpwx6}Ic`aokP{MFw{c
z#;pP!9Q5?4luJ!@r|UjFQ>`c(ox>*KA|NFtMXg@Cg3joCXdd=Vk+0HredU~Q<@JXT
zPw46C2eFgtZ#{VK!BBe|?EjFhFH@eu$dlagwO|5&HK)xAuE}UodN9`|W~0HZ_JZ2;
zV_zoimfz{p)U&g*WvFgW#Y)?3hclo1Pwkg}c)k@Aqu}6(LXPEfY<&~mz1d=;=EU?X
z4rzC9l2AE3<>f!=_o|%^^x$5x_$X%%?7$uDE!3B&uwHKPz`XaXvooteRY{33x8|4@
zo(2^a)mIX3M@EMo9baV|tA);){8o}H8f(M(3(EA-tR@))EUKM@*~;b1DbY*A`Q%s7
zZdmz+RLw~Cq50Z_(kG*T$bRX?WSDVgaU}t
z_s73{`BHVX5WQf9L&W}#q2};%Qm=w;Boascxore!Qta`YGq@;Rvb8jUiCVply
z8oW(Ps=n?hBqW4>i?HeQHLPc03<`N@I5;?W@7*)9CP7nIS4U$e^l#pQEfk>H_%*V&
zR4|aF>+}f4;E;u?%^`K(x`c^|X}vKXiFuFeTTqac?ulxpEtBaudxg!aV5)d*8EmiN
z5|ij=*3eRtKoahDX$fut6%``8af?;~?T8op*l=HrCn`dpNT>XU$EBsM?JyrI|J$$_
z7Y}b|t+3}VKE4pVezW>OEwty|J6`qBJ<+FfSsI61Gsvwn9%huwRWrGB0s9u?)y4T)
z*HjPwWL)hZCRza@p}G0_<|(%em)=$U5@BTBVPRwIwFVFq@i<3#d3lMNa+-`Xr-;Xj
zgwv}cg=2qze{Hnb7glSO+o#T0PJH;aQMt*ZqM|ZfWZU3O6akMjJKPf8xfXw}-QRCyOU4TI
zaX4+)G=}puuU@_SEi9}>g7>UxIA2?_%$%&dySu5m+2UZr4mDvn#iZGAwV|N_?K%!l
z?jDQk((fN{{2sDl!?vS(7v-UrtH1ImeSj+U;;6?hg42#3mi0o-$%gj9#zbcXlRH#E
zCfF=!a7!b(omgRwFu7Him`?a8W$UdDX8RFy4p!ZKL{Hy6OY}m&n?L!z#l_iyw2De+
zxVmdwzXWfWS?!r^uaP9~7f({x2&h9$dYuHL#YU}BEJpV5JlI{1nPHVBI*i4;9($LV
zj0J!H?hzYH{8T>YZ}E`Y8!6n4DwH_NmelQ(Dc)uOfy>E$GA!`5vC_bk&05k}aea%8
zf`aEr=@O6U=`tyu5Y*6k1h;0|9fxPSGx9~%ZlCA^0ja~^JMiHx$j|NV**n4+YS)HR
z`zEWMdY7$>%%;v0$8M7H#K1?!Ln*#<_wMD0yJ_|A7~1-F+oVI+u3cLokbsYe9pjUf
zME>UMO(rwcYHsaw-F94b9Fk7B@#$%4({O8%Cx3@rP=)mz_UO$}k!CoJx8ma1Q_iSc
z2a`?=ZfAS=;^N|H#>07^Fi4%hEiD;PiN|<}Bx`lYyc~zUb$U1#*woadK!k!?k|dic
z$F<#bkEP-Z3mnSX#U+yY!(FJ5vv7OsCnjQvIc;wf5d69)!BxL9kQvEhgm>r89Y3O%
zeWx{lc2U>zOvYHl=#*QC?Z!W4WthT~XALbhe18gyjfQB~M~kK5xuuRfu4cExK1t0|EEMcD
zEXEt7q^5ofU9CMSkSBxSCc3YUU{detWNdGUdLW?;;%EyoS
z9z56a66l0y=Z_qkh{O6<)mr&tob>VDs=jNr^N}U;qNCk@2|BH4<`2ODIMQRd9Cm^?
z2hI+ra(6eUrcODisfCt*|8U>={RT(T*_P*U`U>(U2dLYf9Vrs=IZ*c$Us}w1G&3PZ
zCKB3|&(Cj%wL;guz14{GwDIe$N*%v}
z^wWy{jS1x^w6xC|)Qb#)kjr%jjNy|QQ6q$Li}2^T+r^n|je1CM@OS8wxgz5dJV!eI
zT4`1LSb;99*`>5lfdQ9PX{n{aDMN3fL7ujQq6v>WtVj`0Y~p8OvaXxXP?Q#Q)m@L0
zkt6*4`BTQbG^I6dcc+8lDH9VDiz9=_`Zs0!#7RmDiY-(RZ^-xWO|T7*;O7t6Oo?2M
zck>BK)bh2i2_^*zk-Fd(kM1O;zfbSH$T>B_Pbe#k7#~-GQuXBN)49X#IlPndvNH2I
zf3_%fPIh*rTfTq)p8f$ULpBqw-=q!|s~-Jcm5U=bpsI?CkB@I_YfA%)e>hi9s7n9Q
zP4p{9Lpi#2A1__Kb}cg8)6-MFd|uk&9b7?t^A1#sDXr?jKpag?&4oKD>tm%!y#@qu
ziX$T<6x7sLQfl*Hn;LExU+NDLz{bX27=rtb7Vg|5pR49Cn3TTb3Qzlt#z)Iyb?)>a
zBQ4Df&b-2I69BBwk?klfFepspHbbg-+p-6H$^|-@6BRaqwA|rkD7WqHZP;lg#v@t*
zz1`gbV`jAzRk?ymGdYzT6-zd;47|LgXc7`VzNT%u7HMG=ptui{C!HI)(MdH
z=y)~v2tc6y$$BZ~ty{=0z)K<|AtBMx(<^W~*dT0n`VmAfG`p~%=jw8{H`HI{V1-&-
zsQYvUF7Jg_)AgO5oz6{dKxx&Eds-b~bh4)2leS|f#Xg$QH}KSZA|eQI1(3fl=o0#W
zg*xZkqYSG74bFYx&a02G^Tx-==})ZYL;`1KW?nluywugzW#OsG<0=0_O~@}Mb`uaS
z0CUT&>DO{u3iWFvg$`@^t%tBGKJ=&D0$9M8Ef;NOq}mCmdAO7mh%{Gdtaz*RSwfiC
zucz%`P4@SPyz#_V-68t$;X~Shp)cvjk4J-JN9`RQkxbg?2w(#shFAL7P>EDJ+K5Bl
z)RcaHe!j?XAfvqka9gxnx#~((6q{K9JpJbWPw)sATuMzRM69iuq4G9$bogc~m(H%P
zcEB2az~gKmii(T>b!lO=RFpgWdsx`l`1tr{1_O3GU(_k!m$4SO?<3__`l0IV0s;bM
zm6aiJaoDd64APn%NlD{rF+1Brs9#zy{T9Hox3aS8Vq!L%98Ww$i%Wn^@=&r1z@69pG@tY`E)CMJkK*45R~
zc04sR;#=oYA0WmN<7G2MHL02eNF7C%jSndf;|VA5yIY!@KLQX8&zkSe8;6-M_zJL6
z?@^0q^_~NeMAmOvc{vl{W7uBiKqLUwR9&2($euS;=XsUzRBg9BT;K@oj^&)&*a#3w
z&ahAwGRa*w9Qf;L4fpwQZ%AEOSXdK)hV|;;txyqxp&Zqb5|f9nuC4_BErvpZ^hDfQ
zG9d@Eme6FHs}Ckc6%+`1crUmmgS~6yCuaLQ_;!MDy_Q&|oHf34}|)4b5z_D)RKyIptlno>Y~}
zP}dW8cXuX2{}>LNcCA0@6=NSn!|8Q_jp0pXKc%J3@FP-vW>Fqxw6nck-`18snmR5X
z!!EVX63gY#r}dqIlQSBQ`q|yRtAkdE5*BnTu(8f&l!b-GDKxFaqobMGSw5)E^bfV)
zUB$pC)NDle@%5z>#H5|tY#%;9S|lw}q663!*=)c+-|rVnI|R+Xzd%8KOH?4j)M4eu4WMm7BcdVrykpx#l$T+wk}(!@q)v
zPUPLYY+GyPVb=6dclS&I4iB6U$U69@?O?QiymUn}b3iPfr@H+u-~4%~+lM$eu53Bw
zb?r6zBmi${vK+~7(9&c}vNssIfQ#gaU|rVN*H2iXE6*&a@)vxgrS%v{0pnE3Wp>-O
z2!U0My3;>1Uxv0|6)I<8^fSD1b8~~`S3Z3EOvRrSvbSkpoV>xUp{)T84_ohma
zLfhay-Ewc<87b6Hg3hEK*nV)_F!s~!blbDp6^b9MOBA33Wn<-uA+ulK$bc=n1B;ST
zlvhyjQp;s)O&eN0T277cT)l;U1%U+qIZPZJgicOQ(4n11Ow4MI^Z+s{%u%1xe~*vv
z2_WV)n5-&4`p^ko%-4j7hzO9rkkoft2`afo*b7Bv)m1uecL82%pN|6Dxd$sbhy^7_Q*+$ndJFp%9V-lPo!y{KGgCnkN)LhP$_)z
z8K~IVBY-SlNg?zFvbF{1Y1v9_$7t~T5gd3JSP5)RuDw6f*2{g@BqSu_+|C^kjx9rb
zACRwntlhTBP!4gUC(dFksoPKJdi1Ilc@}f9l^vmXaX_nLfUaNw^_|mhLkA?71!dMn
zQt6~#MymxeA0Hocb92Unh>9qqD8RwM`DZ}B_zNNk+r@jc{uFf<>KsI
z24xLtDs!!YsR%)ts*NAWl$Uq#a2_wS0JVfyEQ0ZqRFYutk2e_Y?d|N&hm5e7=i&2P
zT3bDT{-i*}l8f^L-oCy*Y7S06cbjD(Im)%h
zFv)UvuMvk=2R1J(<^EjtS|zqC6P0!hM@L71cxwlluCE4P75P)CAMX-IDH@gsMcDOd
z9v@V#*RNj#V<+Z1-DqFB7Ku$nhbHwLd0dH>Y@9UkP9-YEY0?ou7p^zdMY2j*)n8iwnv;cH00XC^K
zAQxFfLuldMM!D53eh*&QFDHjH65MnK*aL5z%g6!D>jO`58&(mjjXM7J?b~%fg+th3
zy@hHWA%a4p0M!@EEy@+!jj;Mc6;7%kCYhKlC*xYMjGRyNQ
zK=*Ug({-?8JK?T-d3(=f=GJJz;qb;@a&rE|{?c6&$`r(fsKg6P#+f>q2
z9?U75RX2l9Aek<+;O+hNpHCDvf{>cM6hJCT~pvWKh(~tJ$E$n?EeX!
zA~-nMeybiM(S68$A1C
zC>z@?YtIz?O7*iya$;T{ZgtK6iz+P8v=e8J4$BgI|F~VIEZst6Z!$ySyEKUG?WF|!
z0+GEF!;q7Mzok(=d7OJiFzJ$ey~aAD$E|(?=ClDqBTwWt0dFtc+{YF8k;fQbP;mFv
zD6yBQ)XdtNkEf@EJD1v1c!jGlyrR8b1nP84R~MF$5cMlpCZ81=8JX|WDlvi8)#UW_
zri0jTuah;&247vd@x+JE!h%O!Jg2POL5Y({b8c;&xOdeC7k_bXZH+bwB>CQ7!gr4D
zKPU7j@JEk{QOP3qF`$4y83}I@`1eJ~UMC~u6i&$b)@wjZ7~Y^EB^??c+TIfYSJonW
zH!YK*REz&zo4&wxvM6lfg#Wp8&DXg@sO41B7mmA(jt2pAU-07!Y~Lc6-xZX)wbBc;
z49ExrySWChgG0H!z5QLn(Ws^-9=``x(Z!9KgAHF$huf{2P^iX$1~*Lc){T-OHUdiu
z8$qwZiktJ>yJ?OE`aSei5^*1E-O$Jd{eCLGP%kJDFEpDXfk&<%{Vt)zY>E%H;3^jP
zj9dZ^O&ESUd&AF=<-BW!w>s!*MjX@w`Lc=%CaZ-~z~#zW9UUFT?`6W_muK|Y{6p@Q
zJx5%D`pLHG|dAn4d%R|cVg-P=2VVJLLf^>mvP90noN@_E7F;8|gD
z9_+fdkharB-k#?=Z|@2VZ~Hy8V}lx)VHp5T2|)N&KxYIjhBSrxZf&2hxdlZKhzbf;
zI8=h#1WK`#?gf*!;MPKPuF^BWma}t#7p<_
z4$XP?6Gn^WbX^VY;!B6;k&Zg1hZ*tWz2U@1*=es%>YP+F_3n(f+m}}*|0YuD*mX@}=g^@J7
zPefzDF5-pHA&C^4n<-TMf
zLFdoZYlfXoLc}thB9{PBnuX+v0LC
zAzW!o?B%^IW^8O%Ve8LwQGovT-8;?wHHPK>R8r}bDqkg+4Xj+6MJgKCy@4nCi(@Yy
zytKS|aki=48GG^&h$SN;XV{F4=pXjDsm&d)dR_u<=?|?n<_p$Eg~8?dwYARa`Ztlh
z7ZQI~oIxHnRFi+nVZG4#!S(z|0-Af*Dv8tDozt@`5ie27RyUJ`raH+3{pJdLQldiq
zV8wquJ>{x7)M8y96S~5v^UK_{)q3_xP1q*O;zJmPw_r}|!Jw3T1Lq>LXIKWsOWryzJ
z;u>#ru&@AzJ>2Q&0g10CbAppE==o+|AGK<+9o3&4G>QEpDCAk%rpvJPB~7+Cg$i%6zEV=_e36~9R*9g
zYOAGWri|Z;)$&xbjqu$xbjg>O|G*f%R6L*?Hi!&Jk>!02$KOzO3+0{v}FCDZ0dg%}NemAHVE
zm+xvlv7KMG?MWCNT}YvCm$E(OX2;$T&Kwj~A-Ta1fQ3)?*Jr$`mGp@n)%Gi?jWIT*izMaTv^`bSjAH*djTwwEL)Fj-TpMOZd|eAt>fjj
z1EOmz^Xuzx!s#atS94$L=W~q9UYl+i}(1hTg?0UG>~SBty`m88+{7&?AP5-Q+|F~R)Xhri@Uw!=~Dk9
zhf?tkfzuCDGpG^X#MP(@FT*z;YTYw{LjF)ki&wTB@ijEF+
zs{8A$)d=nrAzzc+T2}%v`K-{mw(1&-o#v2b7fOdw@V1S%Wkjm+x0<|~gi|sFJX*M9
zcJSXc=2~nzquKDQ)jR=J0jZveb81m!9(JDogb5!GmUJz!@>F&XjyoiiEvNk9sj2wj
z=#llOxHNS}#?NeQ)F-@tuKG)Q^*cZCfBNdI)|ZrmZwzKhb5l2FBPOvVI}
zk{MBo+S{8CkcSk`N>V8HJ|-q6f^{7Wd`ly_9F_WDN-PT-n`GUN+Z(lR&i))3>S-op*Y!FNqo8QT
zlv}w8Wexz{dG)@pj&_WSVi%mWD*{Zx5yPp2i-7Jdba&Cot>mKxa#y7;m1fM
ztC;9o+zStv|Ey+~RiKjE56;=^LOoC!Ib{k{)4TdIJ63V
z;W{Q}HRz)9^p(}ldVtwYPbpeP!D4hy
z$;;a_o+ksbn6u2^4|g|
zY}9s7iOh~~F*C}1wxYW}eCkIW1aJ81&W;v0p)y9Wnmh*bdr@f14wu+PLpPLfkd%Jb
z^=mRa-z>plGlQH(GMtP>GBM|uzTkDTobH%`R)xHCiq|zcRjzJ!z<5GUexm=wUuLsD
z&)x_#VPerCnV`-Z{hLnqUwkLJRO3vzh=W}7HHr0yRikzD|9FlGXNY=BE$6#?HB*16
zZ-%y4BuPB_mwp+K#~X=jFw$CI-%C+V3oLHD^xs=MKwz#Am2@4(EDz#)@{4Ycl
z&7wbGft#SLW2J=QsK80|;$Nnr84{3kKM!TVN*lV|#;N=m^E;#HyLU6S7cRbFR=UIf
zGY537Vm)>Z>-=xYm|)0v+#c?O@$L#6BYLM(AgPSz8k-%aY!@-
z8T|)|xXNlr*8z;bzBqRWs_S`aX_O@l{Lkl3`(l%B7a?D7$iuR@rz?Ydu3$s-@n=pw
zGs?Qal3y0ME2DHK!-d6LQBg|Dd0b)PD|BH8o4j5oV!
zIa~iM?N4>bjzu!gxFW28HH+7*dXMnSmuq-qK(uQPXQiPw34#sPoF?_g0o5hX;3$^V
z`wJY^`aI3EuD02Y2~Gz*Ak3e~#chz)^GF{s24xqoHw3rm_dD7W-N6e-N-))iyT3D(CYfX3)L6K}7xnTzZ=K
z!XXSU8y@%psBJ<3qZEn_=LP2M=ltaX0X>vX?SAwu>lP(tGxDgLnyeQF~Zem(Y8EyzNl-5pl_ZEHbFjJ8jE!z6~g|l+d
z;jV0?7&sk@&+P2jxRo4d(tdw|9uE-@-bT-<>#q(rssW<*A|$hFe^hy31GQeNJ~P+v
zcQAQ!9l*ZOU=PDb>iC#nP_5sJtu==2|6~sjc$!Cm2rRkbcd%y02r&QHsl^?}Xl5Tx83R4@$&}
z?_Oo+SQa?5kr&y$221^^3?~Phl}r1TcAE)yn>7o6F#&1D!9^509f+er#N%^F$UR6b
z)%-07I%vN?(kd)2u6Ml40O<3Tq$HM#sw&c}j!rh`|IW{=&fLF2=23Q6DfUzCU>ur;
zeXblk=jaA|;JVeYl-F90eAUJpt_7sOr^vQQumHsYkd
zFdD=ci`=<^?*1tvq8kDeh4|IgG*E3fP7AsHs}gTGa}g~Mu?&ySs6g^?4^k>KO9}b5
z1UB>(6u2Kls6)Cga-2=f%p@d#C-ZJOR>y&B;!8oxz%caqLFKo~N}=MU*X8Bq3(B4(
zBym9Yl4#l~LudeqZq#0osk!V?a&cFeEyh{ktwJni!R_M2!^g)G6o>ZRWl~fFmc;gI
zuAAyk1=4Y2`z*PAS>vuww|EQ=kB#haN`l*INXcGyjZXP%p5^=$UdP3`)60p9W=%6Q
zw-N0uHJ6;cF%8B%$35E7(oOT;b!{z-
zsgB*{7Yt6=U{TZ@Ej$Iw2w)VDMNUPr^;7{nU4WBq1&YU>xk5Ci5Sdg={dM7ah
zsgh4{QfPp5UIP|{SFZj{P6kDu8LUH)>89X7W3mA+4SwGST7J0cHq}sH9~4Axrge5)
z{7hjB9|4_!Ov=k&o}QoNTCWXb3JJ9;)y9K9W0;c1-%&vK1kG=S_-hKfiA~nKyEK|%
z;o%(}47_IfSvz}>F$pNOd#2%7ke!$q12X(qP&nQJYn*gkbpa+#?}QB?7#{9Bh-|0^
zkn)OXXxs+xg#;3Z)k{25QtOA)?jOM3j=eZtR0IGb4EwgpJ1|@dAjW%5E7*Q~a6P5KWqFhEygtaiUbFtn+qr>fgmh@W6#Z)&OU*w?i!)AuXjE
zZ=T=hxboxDhPAJ;>AJZge=_6+)*l%ws;OZ*x(sNU$BK)Ji=%f%UDGl%i{_^FFbV4M
zyUiyPsw&yyt8UD1CTYJi*llf~y7%M9=+?G{KvMd}oo8dD{BjU
zPV11^65eN{Dk-sLm*@XiA!Q~29yF)kztnFN>%P5bSz^gAFZkb&B1}BHzr`qeBvpT%
z+5Rzzz3B5V=C(ke=}9qSWVHprh8;eX8!t
zEj61G(b9T`fwPetcpG*A^X1h8z2G2epUejn~1>VsPq2Jc0)ggdxcURzya@
zd3tIbk|D0#tQo5^h71J1pkUO6(NqmLC~k8X=bIP5Iyx%*Ix17TqS?Yhvin`@b~%uH
zpAn)Mc&qpfYITh`f!e>mQRLLtkb(f!bbjVUS5m%(H~B@)arps>>)|&a7sJWl=1RsDd9KTQ;O}WM5@e{Bn$Pg5xgP0KiAB7E
zEVCjcdco!Y3${&y)na!zPJ4I2d`CFcWdjrhzn&w`G1zJu6N?}`Q9XNh6C$rbW{x0n
zB>e83?qHUpytRwGs1)vRqijo4v^Am}1Mwf=scb>S{JHhgb>N;5!^VL4*dkp?TW9Aq
zNELU8#xDb<^tmq@$-Yen;Me=xH#ruL9{Z{Mal9D!WCG;zYg#YHGD
z>IRDtztmXtMzb!*X?3iyA0~7|n^~W`X@IG=!3NoZ$lbOZ^jXV^yj9O
z_wV1QS4Q)Q#qSIJu%3)2kRUbrjf#_)o5EXssFr1Ocdv`B5JI;FziXwz@+y6%&s1yPW3NaPfmsunvLh=|+(;SoZnOr
z3D~WdfDNnY=bu)r9xGRgi}TcDF>rNx-Ejv%!8xQl6aw+d;9$#wmc{p(12;)s$-$`P
z&mFpw(whqME(B0q2ZkPd+-_ifHfkPhnf>Xu8=F?rX%?|~Z2I1H#2!M7QTPm9NQ%e~
zlJc6aY?^CY-X|dm0DwqI`31~C(KvF5oFpVXLcA~tJPT`Tl7SVh39AZ;tPN~vGZXf%
z?m<8*faoP+bqhEfGjOP8{AuF-5X)c}Qbq|Abt+leaAdRa@*pU}O+`_u-mWvF7j
z!SZ}04!tg-W+p8+p{Pl2fc6tDM9|>m5RIpF
ztSBVj8b+_`15q-FW#GR{06ibicL=CEP>D(wj-g}&=7EdnY=jJFWMJ=UY}yYjn!Qz1
zn>1i1+}W|D3tI$#y4r4&1aJ{*qms0*#KgnF0U(xSW$iO4QOmta_*nSejT(%SlHYpr
zG}%-JSeVfX{cmt`3g7*5``y&(Ufa?w!9>2Qr9XoQK898%ve|djkbpT9O^g0_Yyw(G9oY=OwEDtqg@r_i3&?)Pw`
zU)^$S>FQr?Z4DojkL3ew8FyGLrzV!qJ;y*RR{CSz
zvlx50mm#yE?}5?ZU%gdZ4TaDl?>rof#iJv_n7aq+@58D+AQ
z`V5~kf?;;^hGVtOO4dr_aQ?yeDN17dc=bZx^@iE@>=!fw{~Jq-m%6KSoN;cUCpDi8R6B8jrUiMoXjr_3!qwsU&k4j>9IjnU
z{vIlOaWxa#)_wJ!DPO5i^ml3woj8KS<@+8j?roXZEKMX;$jn`(WnsAwrSc69w~X!t
zWRsDx2AGX_3b*%TI$p-kRA}z{`uc~F0$qQ1$i@;N;c7B6G6;tZ+4I(^=-WWTNNL^f
z2bSARymF4pfQ5;ymX>;)>+!XkvweujCzq)1|HL4=oSPsu}_8A{X9U
zpnJWC3-y@yRPro)pd-JqkeuuX+f(`Tckw)DD_bJQ^3tLeUvAIxQ9r*iV)+Q`K4XTR
zLda>P{M^+H2)_bHD#h!7F_b!JmR(@l>yeznnNot={Y!o#KQ>S
z3~b14L;Rq>*6pIh%o!1CuS~D6tFF4_+K>xPHvI|;EB!E(Ghujc*Aur5LZMlHjePD^
z-ysMO>5rFfFAS+xwkQ!L1@{{0bcDUTNoeho&GQgx=|eF9UY17c!
zxVV;}j}@c>p@D_h`W1rlwIpVLx1+n
z*wNu(8SC3S4*mA$Y6$d`(`BaZR5US6;btsJmPMqif3afD=vSA>pZej`D>|*;NXQ1U
zQz!p}ahZwz509+60A=kPfAI~e4kgcU`*&V!HX~~^Qczs;Wt=HCg^iKsx;df8zfiSI
zYhH;PHAH>I{0*NG(K^fEt+Y@7>O@{oOPob-2qbfyR>dq6-!p*s`2F{u#{dSxjCror
z{o={aH~P4LsbqGv{Jn)DVrs;^td&(f2M^TpV8TCB`mmMsA`l>!0_RPzMf&he*o76p
zd9oXhTEE4Hbf4c{@r=
zNtv$S2B7sP#9>uDq5t8Bv4)TU%`Rws?wR4`Tl{kjGJNn{27yIv&tCfxNnyLjx$oPGHZYUP$kU?-3oIpar&ftYbvYFAR
zO6X6ouC_)nm71?++bK1Di*f$k!yDfoKs*N77g#O+fO5W0PmA*2jgEEs3b7+PApCxn
zl^ASO&dMxfI;dv+{*iob&X+GoASKwFJB0=lEU$@(#QHN}pyI{fg@vsVeRah(NNH_?
zZE(r$yqo|BM*{EJp)aIUKJD%@10ymRp#9z!68}@R5?i(#0t@e?^h}=^+3KRf%`ul5
z8eY2h_Oh%QuE1-fKZ@(8*oG%cE(stYUjo5~9sFc@waClRpGzHFOii(&MDf^7Ixv`;
zngZwY$5(fb`o}1(v?5J{kev7aI_J(Qib0!k>C)lh+yP=fwggni@2@9~RNAq{yRhDe
zBo%DAE3d#ry+<`Jp`gGHp&?qsVjq}L@o6P-ihx5j#{898gwP6@ZT(zlyI7!xAX4!w7ia`bTDTIt+>z3$!E{t?YGvjm
z)lTXlYfy9AnZktKKn=B}YY0
zqReksGe~HB8ZgFq=k4o-Gn;QOJZKM5CC#z8dmlhB1B2P~7caa5HWYMSpm#~9y1s^s
zL4&Chu{f?zAP)DXOY5U-!MU#58+7Yhd?zY8AIR%EznrQ*-SSZA%5D51cR&s`=Z;i}
zF%5aCA@!anh?e8<#snlKeK`NQv?M-m+2N0HY%ph4OvWL0wK!dW1_edmdKC}jRXBY<
zgv4&bj2FswX2v9fecJ-H3bx+N-@l#FX6K|Z96$u;W4$?f4}5RDXA!OBfnw;>hucY@
zaK;0qy#zsfXs-4%gy@o35gv^f4m&zNM+o)J@@
zT0jIU8>4=43!LGcr&qL2GX9`7h|SR;|R^%cCrKc6N5y
zM8iE8q*X>1x4_!110qpiF~{M!FQ&2F*X&2gf?hnjTPj#;YEgB%vwFHe*28u5mjc3?
zWg8Xe5S@~Sr=Z3x4(06zc5J)$=C%qn9CD{pVC8a@Ab3ip%di{LtCjX!D^i(&{FNp{
z%X79Xy0)H4#YaY#-8r_m5-Pc#&4G^}?i-g4xf|HM8P9sUx{B?qLC&I}*wt+C@Lteu
zYopFsTU=a}2qdXifV}})-RIBFFnv<5665gp;xvvhRDsR@-*6b12gfJDr
zj;&AP)(LI@lJutd>q95?Q+-tND^PRv^!3$s`Iil4CzW7~?h#Xdk3gv}xJ};oS`Efn
z`w|aNEJur1Ux7e6R${^wp9#|;*~)Cne_qMTe3uuVhPfz}btWM{f;Pm(c5rZjl`Zt@
z)t>Y{gabGqz6GUZFVh@w^a*vI=gQyR!D~JPtfD$F7XXPYLFDyAVkd@+EALV}LmxVd0m}0mRAq#Vp(7(V{
zOfZoOPJgufJmmx<_BzBZr}0!@mCjP1<&dLww~BSjzHgofQjtOx>spYr{5
zH)E`-3F2&`pgriqonLWkgTRj6?iIR7hCrzZY1-4h!?~W@cl&%0DGQd??AjV1Xk_3E
zm`$b#_=a`H9Nj{kepr8RAV$*_bp*u+AB1|f-C@YI*i9ah0v2M0^vD=g%olo{+0Z%)
zfCntBZ&V+=h9?fb{{uAGcWxwZryn3`>rLBQ^#6j4&jtkqiWgz%X*S+XPEtt;iE%-Y
zZvvQmS*BwkAf+&qQMag~7nC44GZpDSHS*NHC*zYyGl<;~Ha{PlF!V6<+0b$kFooY)
zijVg9hqSV#`*oQK%l8I@np&xMn(p-sj#$jUAonov1LKduH9u(Wv!&_E!Q^66RL&jztHhw(P7z|7vFnzn*4HZ)T^cIk4?v3T2xrp(+Qj{pXu$o*(NJ
zIg-!RlUN(}caF{sQ~dXXuu%E-DAi>&zvYK&srUNXDE|dx4Qo9t)Qkl86C0hqZf--B
zU={uMAZX?*)^{Er#G{K9LreyChg^72kT{5KU?rC=u|i&el8GtI9pivaLkDhxNo3(M
zJKDt9Q7>)XM0@Wr>%WJspZV@=OWN@|`#n>JT|{wXzQezV9byM`qdmZcc31oI_JKvd
zC4Y&;U7AaEIjWp*#r!Dg=mx6RV9ekV90I~_k>O`k7uCOB^l+hnl*`nGDB8Gnzd7P&
z#o7gE0-KNx0Lp9%fk7DW^1ewj9u7>)yQ*qjw8d)a_iNBZ>L5}3wbvl4;5<1zZU!vr
z+ydu~@hNc6QuFc>T88Km-v3`NqB=I};a$FLV)3L$NWsLtrY-Pg;9MFvS#G<;Xy_6K
zh7gSUV*~ovIoOB=?Wn+L2peS!37rJ#RC=_kop#je-VhNOUi2`K|Hg55sTt^0Cs;w9
zW1AC|(ZV4ub1N$?K!v&rdum`D?!@8zD3zYD1F_)N@-c4`Fh)Qc?OJigN~<+Q4iMsq
zV305d752c%>Rgx_E0h~zfD@)oO5AFtm0p*=$f4WXHV5C(AADyO9H8*?v20IxZT}cD
zu@`?3?O0UHvbey;z`y{@0lCEltZV4d-XX*E0O>Jc972xpW_tP)9sT$pR*N}E&ac==
z9#xOg58tyujb>rN4Pw(mX0G1vO!>=b@oqf+X=%3qz>$29FU5#k2m%ycwIiicQ@(Bo
z72@zgkis93LA62EMCC!#6z|7tSPR>~$U`o%yPnd3V5<+YH^VbmOlY%)s89Vrb?(ot
zrD+=E$^nPy{dOnqxbOPIK%136&0Lp@troEXCifTWa{)kQuQcX_4$3c3tPk-nXm@?Z
zM$a6pCr{N?RB(VjdemzqR8_@rJJ}*Q7YXr2gSobaLM_%^>Y!eMWH&PNUJtxp{kg+s
z&>j9yvX&aoCgfn5xgFhuc;(~KrjIws%3h8szf5d-1M#U(kP)7@Vn{S79`voR|1mhB
z4d>O)Hr0uwx@^}+#Z$#q5k(N103dxW7?FV4t~=mA+_|qax9TM@j=BNZ`o_j`gDI1}Zx56A{6cnr
z|F+%Z7f`LChb8C@K70g#dk+NQFZb)u&RH!BKl|UBzQ#Je5=0)PE{sK!6BI;W;85qR
z5*Y)*BQ75zduF|1oZ)^0$ILe~^C23{`slU>m<&VEig@A<<9$DBirt0uR4VZJcneI%
z@CI{KyC6ls0Dzy7bQAJ8NJIekI98TYaWJsC0_fH$Vn@7S4=T-{=H!?>UShS0Cb$kxl8Fb|mW9Gp3m%t(O2Js=dpy2(a
z>j_Jo!va&y`LQU%)Or(-Pu4-4bUvK1_7fzR;9?4bZ_w~ZKfGvg2tE{}VpF7Ie_J|b9>Fn}XAEGFh=6blxZ>h(8ZN^CE)
z;{R^8N}MsG!C+K1;NjxRZ;kuiGO!V(3fOo%BhU5RGzBh58Twl`B-PEM)NnTy7F%O|?nzgcI2P*CdN7
zOG>}C#uerNe|ce4um5R}iI_0e#w$mB<vWcYn|Bb-(di+0AAqFPv=218Q
z>4jcY?P)ZpuC}{R(v29qxMJxGJ=31RPu_w1!UN+$=>^WSO`eD`&rog#;wj|9vsB6x
z;}Y*d9$$C0{+W0zeM|3aNOom|%n$;Rn7k*xcwPF<2Bm*&<}C+KCV`JPR~4+
zemg+<-*F8l;%||w6NmIKY?~JvuO639
zu=+In;zyJs#tu?yj`xg&p{YYJhhUCEj6Os&0r452W3P3=-iCxr_0k>^Rz!f9*A)%e
zU=&m>ma|RUnGThJ2lYPKpf6;LqHEYY({u+s-+rqaVpkML}Prz?>gCW&KXlUc+jc*saPC@{7MnaSn!eYMw$94*lR`-CY
za+h=}8rsG7-p~v9jvBq$rdGOu3m9R5vFNwZ#<7uimQFhQ+pcrmhFONxILA2nZh;3-
zqe)!;6v0q%yu%c^5OzrT0r5R5u?7QXMw=B+#8&T&*tRJidJZ206H^#4-^~wfsj~wg
z(vF}uewa{l`~f66#jPYYNL~g4jpSz)SHW+kf;g*V0%Vk2YePDV_&_lD-QXT%XPaYl
zS5`sc*PnFt+jx40sCWRQIJ~C}prhbG@B|GFL}>-6Hi+;A<3bI9@B3;m9sv-4fQA@O
zYPpMx@wJPf{51FXcQ~K+CYfpOE=6Ag>7nWCEh7jH*OnhlVi-(t+{DM12fq)|Bq&Q}
zXCEVJovP}0D7Mhh&~1pt1%ZIV%X>jP=J~aRiYny=7!oh2C4u>7DVIi3$Jv+2ZTdp@
z#7mxc#4~-1{%<(qL)Jsddq{FclstBNbf~l(qRa*(eY<}IA>xdB4$K$!d0RV27mzft
z2SUCx*Uhp+?g<9xVfwB|%K_~4t_yg!RF58g1Hs)8S2>#X4#)^%n0H^v4K^Q;GHFr3
zd<0DIpnZhl1Py(C7$S8yv_{CVahNF&QsnCN=$q_rLXmriM3}BX((@N5CtJI+JqS@@
zt@$rp_<@9ye3+B@
zOj8;Mr{Ci{&{ez+m=V8ZZdbbD5gHI64#G7z>~3D7qpRLraYBwPOKCX8_K#JSNIbvEaNO_^oV9pO#{w-(}K@hV-fk>#b
ze+Xeq#E*vWBLWC0r+Wsb?^~FTgu(0u-SqVI1sCKyu6%qF!NWl&KOw_0u&~o~|2pP}
zFX7>Kp$nmqEhmC(2w+Lc%sB|YgBV(PCq0S~^fEYAy_G*W2EC6x#A7S|EN_2-wxF{Z
zzP%~lzgZofgH@YYc{_2zkmYhHMB8B^8~LIlFh_`9T6)0nE%L2Zu-2ZUY>}^(nr-ri
zDTJ?}4F3ZJVoTSElB;t_i&Xe<9-|BhY3nh
zU@yTkY8e{B2bt>dSZzXG3PP>Fb5xy>Vs^NFFLy-&x=`l1lGEkt*FRLBnsIm>tGHrV
z$Qp*ent)UqUar&b(kGZUfq3fkREhYOsi|FxKQKQj2v-b(4+k>2`j2(MbM#XXQwF}I
z0=~87e^K_8QB`$ew+9rEM!FG|6p-%jh6AXybazR2BcXI7-Q7rwNFBPRyA>n_x$EeA
z?-<|r@BVN&WDGZZuf5h2^O0fUsjk&$R%
zk&yuA^kZP4wV+#AT)<{**9-h207Ux%uwe55S_6l50Z`gG)8Bdqs{!wh)pYP4s;m3O
z=Thifv*Sh;|5rd6bG-UN9g0EXJKYbMaXRrydObHjsgU=_FPODSdtS|og6)WqGr0!=
zj!QNR^%1}(XThiq_^8zybRz<2!g4&fk0zGSY?R(_AB^D=Yl@X!w14p8>&ilL3
z&y_h{Q}#utd*$+pRWD}W!hWpv!i{DCgUTGBICy{}g+a<04kRENZFj)_$M7dVJ$-m8
zhq=D%UA(lqPmCp}yraJHkFE#CjzGY>>_zp2r4rOB2%>pVLvy-VLUiiNtX%qGEmP7I
z*vf38xe5LSl~ek^u-?l*yapwVq?#;
z_0rSOI;clnU7~OBJQ>(@NdW~vpre?A!KPv=`_{+BCY$+>F%+Xp_v4^D#l^)<0Txz(
z_NyCRbtE1VVoHqhip3bK
zp6&;1w$sn==JEtELpB^;T*_bR0!0X*XKD>+zNW&L!exMRoN7H5pCSkv|CTXb7!V=m
z$o$j6wc1H?HcLBNR4Ie^18`~q0o~EbX??XjXgG~43Iu*+3|^kpL!kPGJ6(BzfjT_m
zfV^PT9f$;4hOh=S7f{8}d<
zNaEpv-N6CW?d0Sz(@x;UqL|5_2(${}VE&T{aLz)-)SftMiTztdMjxOO-u46U0gr&7
z4;(xRP@J@9s8r0X9v(_N)>vZk0#L>>{bgwZJ({*HQeU43uRzfIcY_QzSPbne*HAf7gBw
z#?&4AybvD&l=1IF^MjA)xuu}RbHC7A+lR;wGyWlj+-ChBY?Mv#*A1%7B)y9PbZ8lw
zo3nH((7L1mQRU+ru2BBl-aH~R`a7B?^&ur*#8u&uc_Cx6SiiWPyVQaM=?`v$@^KDZ
zWd55KW6oEN$bnTzK$ze=`f
zVa%g>G$J}LaMd=(#!-njTNX%+kbN(;r$JEG+ka~-ecQ$noza6PxI`|yKhpy)TOOH-
zK5m!!z+d80$059>quV&{FNLxi!IZ$0uv`UsH8gkzgo1Lixaf&v{Xn-fdkF8BrC{To
zPp=~+{#_NBX(de@T7o6=(%iHEArN?{=P$KoL`I7|SRJ#)kI|FXWCor+pr?KG;swiO
zjmsGWKocyZGo^in-paPwBM}_V!U|Rl`gGZ?ZqVE-5GfU^`B!E7iAP52=oA
zp$uzgE4En``lo=e&h2-?qj+cmlVYBMlSDcr@XDlj^?fgI+ctj%q_PM6L4ZzEcP
zz@XJ8@Bn_@MMWnAbQhT!^*<*}qTL-5e&k+DcIqdw|K3(2yqnF-#lc&CAD*NSE^4+L
zW0!xslIkDm)8@vxJ^s}!MZ`wf7_eiXOMC*N$EizLRH8!k;ow@^^kl&A3D+s<8nWq~>THXEZ0C=Ge}Ib-;XP9A8%Z2YbDeSp=>uzVx3kf{ph_lsx=sedk9Zpqy
zRW3Zr`V-m<0>VcY;fUVe`0@(qpLiuMvGKNp+}QnpP4O+2#c
zH>HAdb`LAc(4n{@RX$!FfpY$T3~MMhKx1mn-ta?=Z$k6b^aS!$LO;6<5_W{C=?5?H
z;3t1ldf|ci54`dGxs!$mkgRb-VaZT;9dKRa;n5tM?lyYUkmB@)9@E{)VsgC-ir1O{
z5*M#a;08YLNjRVs!+m&_tY}8
zgI&+Rb+TALjbxky+wI`OEY7X)i_ubUG@VxKH9nXGvC*?^rd>Od)5`Ubwg(lXF811Q2qt9|Whe}8m_;!ipWM5n=QedNNifCOH%
zktU><;o4^IT^ie7&A^c|qI70_qH)s@EFY)AEIEZEtmC
zDTCiX_JSYccQO=;UL4yWu-Ru_QE5xcrsN`qI2h5Yd>cZhIQn!~
zgo1TGE@%qmdzvy0aL}lP6hT{f`c1!}7cY62QxFOZS6Yx7w35r^u)uSQjf!Jx3^R&y
z9a!4_3G|VnObV_qQrC~EC}bB2v))X-E7C19U&>NUvX`TN(TM?x)|R?-`-2f_&ETrG
zp38kav>A2%+tF?6$8oUx_l%>Lo$Aj_nMQbMRFG1Ozx#~Rsx*$%Yv9t8!JSwd#q3#Y
zcigey&v;6Q<4=j6N+P&
z4K_tMcs?Y){aU_O6-9r-M*$E(*AT!pYHbq|s%UCJgjNu0>gtOe90S)CdRdLSGfD_Dp%(IlMFe*Ij
z*)=&GkVSF3H%;x2b06B7_*#qZ`~>DQn6E6K@#+)DkK6Z{`1sZ>#-cjNU${pe$}_wy
zbm?v*c2-wyaZi=b5_|w+FM$*Ks5Ho4lD+h^`}4ky=UoAtf{cEw^NS^W6En#`npls0
zE}hr-=OG#(#aX{IuQswSosvT(v=tmUxu?ua4a2h+n!@uEIPjA`NK?~S-0Qhy-Odo-
zI<%C}`iux7Lc{Zb+Q;BbLH&Si`cu3|`C|G&ql9_!Sf;fQ&iF(WcoRm??i?IzN30%{
z#N*Oz@n`+Ec~C&$`4!VzMqFl5k+CvV4Jy9Zb8j@PEWLFYaQ0(o+#Ll3kEoBN^gwZv
z_(9#sN(hux-+R!`oJ8!+)ei!&5I8Su?@||Emd9&@v&y_PD|g+@O5cbC1WAtNdFyV5
zI!QMCQkEhA<_*>Di&}3K#*@@qcl`=C2L>p13`gf(PN(8b9`3W7Jd_V_g=&-J|NP#N$v&*|C>FnEVmGMON#;XSy
zsbNY3lhx+qSB)SwZ~=%u8q|H^3sC%!4U&-ZmGpt_yCMdL+4R|l(|2^j{Qi_jckp)2
zC;_wILSxSHdAg~Nvg2kCf5|cRmtciV4dVoG4iw(nd@;~)-@ag}x8AZnirasmTb5%p
zfI`fU6%fS1(wikQDLA!YIGqBwP$EqPjRE)JkjdRLyagK>YX45YJKfD$ARo1D_xk-9
z|CANM($n-w=2Ki(HAm)%Sgbhy66wtJlFx7Z1ffrl)49EEgXIdq}gBCn%`sbYzI)aLOgxMp@kD3D6zoy&ifrbPcZ?9o?3N
zO5&}&!La4Jvx++p@^S@F;XoAII!uEOzdfn8fXY~Q5#>U;8N-J(+HWI$RK;#>{t?J{
z)h3*b05<4vZ6~o2aX~)vSfPSa>x1Jw!CcD+!2d2EK2Sl=91j>=C*jwk=PQ@iTy0)1
zfeDS0jfpcQ$@Dll$*6rfc{V_qrgq_<`3xqJ-NW*vXTebKv0TpIwkIV&lYzU5^4rUq
zwB+BQ6~mzr9mV={<+f{!c$p}_6k9iWzB19vUnp5w%{02sJt|pPg1uLau0n#cgE|$9t)u&LYB`=mQ}h1QtsxR%Qs)6IGD+a0B=9W&Ae#jyZFq!)
zpDzO3uF#^?o=6O+BH4->}
zip^|k83&4Y`LB=UpK&xLoFq{i!AgyP9axpdpO%K9CiE2?34Is><;P!%whb7@ftNR>
z{^!zsSLGNIEd&dq>SZa;Z0H5zghWvv0LB6Lwv@M*`_oZCnhK_=)|9|$e9C;M_+~R+
zg&1(_;cE_uZ#Mye2S*s;5Z#3!U|E?16q*oq3TVI_0hR+KFA0f>ujY#Ybm($u(Mm)?
zMy4Pog#^f{+~Bhn&8^&jI&p)GRU&g8m@4AVy*TE)pF~YWI#-}*qqKteCVT1T+uWv0
zR)Jz8#-T!ICuh|g9;_P0UxIX?QtQ6K01lS{sA6L4@>JyXf`0xbf4q@lBc;DLN50v#
z&1vlQ7&AH4b^+CLv^;o!XYoby0BqU-;CVrPJw6~V0_$X8WWJqho>env2h9II13Pmd
z6(=WWxsz}Qu7Pkn?#<0jz_H?hfX_^f0`zDA2CIaYS5^XF>cDaOa|LnT;nZ7p=YxRq
z&(3}+?rj2TMH;B5i6Wxq1M}lC0X58fD-B2jF&Tz?N%-I#Rr^-$9niX}VH*E8%p8CZ
zGo$l9ZT8ViKihg?o-5LUG)0<$qV%QGbdo;QUiQsh$}sSU`f+*LKQc14vIS5uNWGmc
z-)EBlAt0jU`2Q9Vc_;FhE?9+&b5fJ4S+-=st0FfQ}E(5gihb!8@11jU00wDY95
zU%88A!XTb5k5)Cc5fpebjX*AP&eSmAAOdC*)YQ`3OJ&x8B+_E73}MYTFOwF!$tR9Z
z_#=RRR}-Bxv&!#|i&fF4El@7KSBhH<=>4@|Y5{0*d}p%wFWI05Z{PV>h&!cV0&z|3xmn
zG>qvA|7guMM{Pr7pFuYd*fW$%A4K|To0*vbmYvENnAb)Xt?mz28}_CEt4tCS5+>c|
zI4~zjvo0?M;-wQ@@S1Yzfh{0xE=jh^Yl^-kot3=9
zRQKec-nc+!FCTs2FDc8JCb=>k5QBvFhp9me3vv~`Qrm4}bBP)5F0JcPUI)lWA9Tr#
z-N@vPyr^-raE0~u&R;ALYk-^C1WuW7_h&GI(tZvYFIf=a8!!$WvZH)pZ~gdy<9WU9
zViJgfb(WK~KsU3eU`ItsX~*(3HX?$WlQRKmNI2dd>w>QqRBG$30ITu5Ux2*f^tkND*AQ^G-CW8|2;kf?6W7VI@bP8cl;S<3=c$pR*CFAH`ha
ziuei$#=!{zs#CaKYKfXL_*w>Xiq$8^d%f$0<>f5EEuFd2g(KHMDM|bMIWV-?)$Y^M
z`cEH3Cuy8NO)}@fnGV9yyq6%+#{8dVAnDCqxWWaA1mHSza!POG&GzZGWSV3}VhV_=
zy%ppWec=`Lgu;#7v@AGCA!HvBn%O>aUARS`2*II0*OfehA1`xy_F7SD>?bD|47pGn
zr_!Q_lVe()UlflzlC`vZ>)
zE;uIn<5}ySpRs(_SHl(VWpMK(;O6zcj<|p=%>YP-Du9g)s9&5_K+oIG#|L+@1&ka{
zAinwqTui|e)PTG0xc~E88)+8!jsm9jB&n?zm~sM3FW>-`kbn<AqtidbN9XT$@`W{Qe&ZcAiXb=~x}soFplIOHP>uW|Tu@{A{g+N9N0y_1+1VF2}+Bh^F8g8*`0*3)buGKvw6@xXFzw;qV>k!QrjPRPz5oQ%Y`?>nDpr
zdpYHqBVkQtDfEOiquZjsIKFgBcq(1Yky)
zk{)S1&b1sXp8g_z{g`aayfS{llRoNhz~fK_W?k#52A~Mg`H&@|NuQ$vSsb@`o7c~l
zO@`w_YiC!h&Q%`XvcJx#h%Z&Vg-2X)#PexY>A*|Azq3REP)__9o4;f40?2WsaQUdZ+q
zEQS<3A84U+Y|&LptU<*8`?@ByI=H59`+>ij)aV5Qz)$3&q_yc9P9$0Gf1A>Qhzjr9
z->NKT%j*Ay=@st?C|cilQM>)(x;)F*eGBWs8@lFkrI79m&-)rMD*ZV+-T3Zaj1hIp
z6l@qPiT{nPEGkr}J*F_T5*llXwvTT;qOMd*bX8Mm%2?N2Xc567HO>Uk^yfb#ua(UR
z*>ZHykBNy5kK$Mq+Wcq;tUD39KAo|WuYc859{}>fL*BYDk(gn+&K`}T*}j*d=?fTi
zg7kB4ba;f~830`yNR=|z!OkdbKGZ!3z!BkD&wBv$F`eTp>p1J)@Fs)nGQPGvo)olC
z`q4ScR*RoFGKQIY#`SxDT&aRVpw>cA8Tc%M&+z%I?rFlSw2`W?`%TeG%R%n9J7(W;
z**;>8JSF4AA_-{4APK-Fir3MEeZ4ExaoL*(4S;(q|5#m+$j|YB*)PT`;u@`*nHs>I
z;l|ZApvZb;N8FYkIqySq=XXT_u030quoGy%!X$G3
zQbDCs(tgUgXo9u+l?Zafept}<_aL5$uU+s%342pHU3X`55b$8YL&NuM4nQ)b;~5~p
zEQERTw0hJ97b`@UC|iMI1XNSu>2*RU?@xfn@n|_^oI*?GdJsOL2>Syj6s{xBRZyI;
z&kjC`3@{EMKN)OeZjz4qGFq_DDezJBZ^sLT^186cx`No^wu?c~3OWFw8UvV|s7-#h
z()}ty4=FG%TEsSoqhwJi44_5l7(?FAckz5MIyxt-4@GMFW!-x&BwkK9v<07!cyD2V
zsmJ1ZFPq~b*9XC^H~6eO-w+#3j}W^iyED@lVsgsf7Deg%NzkaC;=K(A<6s812Fkf)
zIXlA;kCyBvj-TTQzxHuNonJ2csmW**BoF~_LN})-H+rQs=?Yqw!PsW>{e0l~Q8Nl|
z
zZmyIIevyQ+nvj2q
z^Mx4O?b9^9;qx+}`Vj7;K{b_yfQi4=aFpw+Mgg0VMfaDSJSetdg|({XzA#;`=_^-Qc^?=UmC3;qicKwCEU>TrJo?|R
zNvrI^WiESHP-kUM%D1zWYfZ3f2hKl?3Y*N^O7`zd8x;(uzIzh-K8V;^4Pl7N*6PH7
zQw(Z>m^b!NT3m{uRibR1LO)8)tx{M9kJywn(TXB!P`TsJc}13X1!tEm?Uv+Kd6Ag%3jT3~C1D}ao*{3$FYgXdP}vHP*6Q+XmS=u6$N0J@VQ5EF!c
zVe4f`X3Sr|cU4d`2iGUBWH^1Bo+t2sab`0LqQMcGSfel@L
zUC`}S@foxmO!7sP7IHIm_wz}7sdh2b$(vPML!CBoOwSAmtap1Fc^!y)|
z%7saw{ebM!yw=H!vM?CYlzGLdF%wMeodq*kcxa?EjH1oM8q6k*sFoij1_|=2uD~{ve_kTFsvWZwdR$gE
zDl-=4WDs@C`7h`E*ksNO$11y*Gq;w=ZcPT@S%6rqo&`?^vf%gU2WN~J+JxDf-75@b
zY>d+6Qx_PvLUH*??c=(pwe)|hfKtbyVdkyuqY{vx!T5`k_1tD3^dZ1(E*M!ugps-&
z;IC=YDeR1Rh4BvEv5XDo{tSkt#hgknJr-Qes5&YBM179*h8TGZuofO+aynmB#&0Mfnm&6TVC4;>UR%s|wUZa)
z?~iB0LwBDuS}GM-BiI6f4&&|mqufsn3$@PA6iHCn%;?_8rD$X!%pplbGNSZUHF
zX6f||)p38K|FOQbWPzvq8#;KCt0E#h{}EfXN(yfRbtfP`4J0k~q#=8mKSnAS2oUd#
z&n-0T()>4#Rg-`q@%P3B(d6sP=M!O_0+Yi&=^CO%+#SCTNEO3oqRpKq3tcwrt^eoNlYCb8_d{5F}U^yN#huHa1NBpIdtz*y@eDemPa5leN!aL9}@j
zoS7o0zodoyvb9InH#^5kTrD(6Z^C{V%3Ao5bGqK=09hM17-23J(xb^tqG`4WRmel#
zvz5hkXZaqzwRE#|jja5hz*;~hn(c_Qk-BMxOWO%nJpc-yFyYx?(l4mF$nc~|7u3d&
z481z;n3K8a7OriY#_K3N22J{l#==_9cl-og#qsu}<+>OIJ|%2E`8;>pj1+$^G?bRA4SUL#7G~L6A4s&Ynb%
zL1M;Ho~XlIJ}Yox&HHYn_>devY^9$fWZU^B-k7nB<=@s$mbZvS2kZQE0Q(mv<_Q_l
znv^0t5GA(9!D?yImCB`fk3Vb_NavKwb-Qd(t3Q_*f0HB9L9p~`8o>Ce$z>TrHL-`b
zq=~2X?YS>wtpFUbaxWArU9nyf=DF|%Uon(pAc4i3sNU29@tI@C
zA32SSXc2g+JX2_Eviy@KVQ&cfDfgX&igYmM*S_TfF{6LIhN(}Y)Y`p`is?O))Y@Gu
za{L%HvWF}!x2ntGW^TR&ie<#>eEU7#%Dm)z+9%XV_LU^{wl|qv?IrBn<~c&mq<3o#
z^jkZH4<{ZraB%Hm9L?n0P0oEB)VBwvrqOQ?S2f68TjMHB?C}ixF%uZ9PkvLELQV63
zlo2KvF}TdV{jQC)2u=O^dQ4ZDumFOyPC0D*AyktUC0U_0k
z0nMH@Qa@_#*La}k*!kjPQdf?@BUvu__yFCiZqC
zeHPupS;_hNfj0A;=0)dw0v&ZQ=zAdJg;}*k6jqe(D&v8{S46M(gXQlKKM0KGNqy{V
z*nLROVqcoN?jz&lXK*UNe?+C2y{g}k7FbaE-?7&Gw|2&5_#rycxwA&!_|39N`y6gG
zxlrSI(z@sm0~f%WiEk}`FZA4>BUO)waqVJNwB*Q{6N4fpU(Q@;VjqK;0ErIeU?!Ku
zNu5FG2aCMNtl>hMZXFshdA>^9r2Uj
zHweJh(0U)RMB>?>H*_mf;1OI%5sy?M9!A?Am#jP=_)c{Y4f;EDo&AtRBc^f&>mV|d
zWnewI*UyRmgdXC{((#>?Es{RF@pTMfUZhi_YTONeV=&yh;G8)c$tmyo74@ZC7k@eM
zHNr$rwJ<$$CW9e+EGq?45X^{7y$9dbEr9_oF|6}et;+aot@y97*-rw^XvSiN9xV$3
zbDWIR+z5&Bwt{vqD>K+cf+ns{asXGsZe}n+kZYoalby%v(5ry>9fA-qf%qw!l;9Lm-OPOY&nyhcLZKY}qXa&0
zl3Dq@(u$;O(BF%1&2!?>290+OE@Nl?L3|=o(fUo*Leru-jN?^Go#~b
zo=hePCT{1!sS`hTNNrE+d45AWDgQ)eoa#dOIiuE-!pVNRHdYWm|L^VqdFyuFsPhrP0`X=akoP4UqXpZfSP1}~^RxJ3y=4om%w#U{r
z`8T2AKN%9_!vf-|9ptP_ZnBT|#YVd{zaQFexJ9Z#1CQruCyO;M*humuC>#P+`m0>6l(bT+4y;s8>uG0z=sc?<#f9D{7pv$7V#pt`+>0H9d}>$-_F=IB0D&H
zG^vCKdPllrFFYAxw25w30@PW#zaH&|Mzz~MzuczHM0sQQP0&Wa(&=XpK+ZJWkJrrm9`#+n
zmzqytaYrejCu=Z=z@BB3uPqzT?@iQy|lV*O8Y{Voo}Wr#<3iDuyi?L%
zTb;a0(Tjh`(f+BT)Y?3-TU7#^HymtU5B(mOX8E4ryn~j3cR{(TUMM_!!E#W1<>V|w
zKbY9X4&}D&AID!i=Y?uzQ^6jM{2@>VQ(}!Hc(oSj#~8XwhI8S<~d6a
zI?SzcoK2f;cRc&MVH!WJ>C1`y$(#2y9)*EFdnSv&r*E*YBc*5I|Mr&d`xg41`PS8i
zjpjxTvi_jW**Kk=Tb)W%{ok2msmy5(oNk*adx>^JsQ6oz0j-Lm&*Dpp^Mv5_aUWjc
zx4LJFN2K@r(
zNj9I=fW9;@IU=?pn&D@T8{~z%zMQKJdqwoVkFQX>M8aBC-f3iL+ShPS=Dbh1yp40O
z-2Cf=xB96@T*TngrOl~{j!Kc9q7{^1geq+)LVQvJ9X$JYLcU1WQPl%vw~+sGUMUmW
zy}1`79IGS>X=_V~?D_46)ibN^tNJ#^h|_3T$TZEH2j0l_?nDN^;A>97EgZ}}F=I~m
z?g7n~Wgp4*`iU{p0CA%8ik}-JrtRmRT?cN<(|141E_JMFTGhBs?Tl>~XqA)Az(-G;
zn{q&1(0cvuE7X{*X;@K-|1!<)=d0QLI=#13BfU1;ZYJu6Ow4e88S&X9w1unJ^vhYa
z(Q&_%41>d7*dqbCQ8W_LR1UVpS`I6-hv{F7XESrQq2c7d|!sbV1}*F
zj|(Mo+F1>qz_(5;vq+_mCUFy6_d1KfJz;HAn)$&Du{J4lMRiPSmPh9=ZGOIcXxrXf
zkyH-)!|_|Za;24TuyUc@QCd1>Qo2?Y7izZVA|--3QU&xeDy^`KRV(}`+Dv8`_uhN^
z`nzx&AeJ0U5Zo&G>-ZT0!Ld3CuSXTeyz))-VGyRZjJiEb4EWxfd|ceFgkig#r|Dd*m2D|rvL0`%p+l=Q&CzM%v`4`eWH
zQy63%*`5Vy_{r=q&Y~)34!a0qxiGU2uVc!O;dM!6-@|<)sWm`M`*pAo2nI`F?GdEd
zjE0pscq*sN$pa&ChoTQN#~w;%kQrJLI*t7L!7xSW_+*C_1a!wIm#j4WLniFsxcuEl
zo?4vX$u+;RPEW;McX}WBq1U5dGrjSH-u&<3CNjOljJ?Nm(O+`19yTw)EP~;wXjdB4
zI2r2OTa1_6h0v1lFVg2_-nGIxGR;Z2#el&BhWO^wpfrV((W^k6m8}AOPkc6^D3mgRojc0w
zJ|0}+#KPBLUuI2f$WDw2AX-y9HV5Bq8rG$Y$Wu#&-*s~8>dm&Qs?aYWUX-h>NWwh&
zj%`0{PYM*%W!~~HXc%ew#4B^9C9(0=A4C-vfMq8x$PJzdx$jHKd_Oqu=Y5Y#ghbuy~ST)&-3$}ZBVV0;I)P00L(uu`zkT;xqBTfpN
z68N5uKg`Nz4bfNc^am~wBYi6<&arBC)!vcS1zxNa-cK!OnLf@?Qb)JSo~wa1e$XNV
zUt^*9-y=-WB9qe36xicM;4WnkUg_a^+YkFz8(gf92?h^0mOJ
zg`C2TXOi33r!UY_oJ|lGYuyl5_f}y_wlZVWRqFA+ae!@2Hm-qJ>{O8jh>~@njV>{V
zMQ7BbUgW=>UA69@*M;K0zuw!SU8&$UbYhKWMUnzEmXKBtdPXu*!(w~>ye#8uy5T%U
z5}G3BnYM+tF<3um&s3$>LrSb!{dQe_58(rj#%f_7j%xy>?JelCt=ywyF}f8j?nGJr
zdO33kufu1*b#d0FsXH2{rZwn5fF
zbM8s{p7HB!cwAIs4v-&ZG2FspK>Ssymp+&6{7sN?>v&b#+u$8;
zVC&@Yyc;P?TDl9RZV0t2)vI)ui-vh<@=fmUAcM{?kx9Y$m`YHW6Gqzu`DPUjhP>@KX($gYQai_1y^-%Gz~%{I7*X>Bc6)iHG^_))mBOvLg#8L)~0%5T?%%~pU!rH*rjFZ=a6Q
z-oPWv(4qol#UT<_JssrcbLxGkRA-}~L1m7rQ673~0P%CJm&gZsh<;S1#8m`=n
z7%adZuoFx*2_eWyo+@H1bUBhU@|XVbz0;rj?#(altHIJ(u#BAP?K^Xw3t3A
z?APOXJ6sj5)-vcP20V1D{cf#Uzt;IHqMj%9Q%5Lf?ir#k*ic*@^j(e{bYMWjCnSwz
z7Py%(ureU_w5kw-CuRx|(|4Y#zIKQCKQQ@fzGc$Mt${^6YQaz$B5~KY>T=UVmd3XX
zRvef$j2sQ*6vi{sTRjXtB}y{Bc4JuHJdr*lSaD-8Vjx7OK^Ifc=l6a+!U!y;3@a*w
zD@t)=z9MHkM}B#}>vWbgGJvE>xGhn@noNOYefD~mC?W@@iPoFuI%dWkB)h*tqr-F1
zy?3ll&X$x1o1!Pjh9Vog4$I?9SNV&5x;#j!G;fwQXAq303ypG-&ySqGAr`ExGDYCr1ck
zG34F6{hgA5#U($_X@||9hJb3k7=6$0yiv%XWBMR`x*+
zrMQjzjJ)Yp7}+=xIf`;2EOgil-@mh&Cu=s5HO9YUrD6=Z>+x7?{$k*7=*sr1&-w}W
z@o@SaZKh0$Bar_{RSo@1B
zu7F6a94oB_K^d{X*-+#MV#@ZUzXsOycK?%TtoQOuMQx+&nF>^oIQp~x87z
zzF70P%CME9hFCN
z_@Er~v+L(T)DK-gRM|~c+htVC;q_EXLeC=~_oCwm8GCC%w>YM(jYU2PsfG$>?j`|Y
z@LeE_Fr}(?)vYd_V#5M?_OZu#quRauyAql?ic$|#d{Kj&##=teT}0tn24TF9-x56D
z=tEXt7-kcpY0VgRakT2mOYc5qLRFHerG7l2bs@CQiv=qj>QRhuvzA<9h&0vCSMWb3*^Eqymr!!uFp=O7CD#s_yhp+6D34VUP3ibTH;)(kR)cko;s#i@soTCcQH
zRR`HH4wG3tg9@#(bEKXpOT;(4&$b*K4Ak7~
zH5}2VH@baWUfpN)<*_lJvP)KQ{F-@Tff0k#(^^%0b$^rIz^=4JqwgRjgngx-Xj#z7
zpX^+bi7{QhI>i3LsR1!U)yVdGI1#+%OVKM!m`rdoebg5Lvx4|57xrbMHyKHpxQX5|
znMbx&5zTB6RKHH>o@c*B7BANjPmd3ix<5hqrZFi}BZ@G^drKio;)VP}%k@RfwAAbv;Y!VGlEjC4Om6ur5lA;(2Ms$f%NIieCW{P9
z=zCXFNgcA*ayv@vU3O2=KMjqLO+)=bd}Yf-NEq0b+$-Tu(0|6@JrKC+@A;waaYjE<
z;ax6|MJa;y@ejV2YI`9|P7`zQ`JmqRwd9m^`-+(2=O>gh*`wD_LJ$IO|nl@4VTj*mfmjuN5u
zad5wmk-udd#QlsN0(r`|!eUzdMbrX#Wt&=2?cyhGkt!yyk$CoF`o4K3uZo)#oKFp^
zPQZDoWCM1|gi-{G$%|is=Bx*#kh|k>7y?G$L5`y0uagvBtmy3*yf#ez1IMJFgkr^?_D6oR!S5q{s!y~r%N7k%
zIO`G7^_R1u#11L`_|q%hlHFfqo_DJt$vvy;_4)JU?F*Z`ySM^E#iIu)UBrw6Dr-wO
zLgIRjpTBK2bDW>C(r+u5ewB0}M=?Jm0H?-)4~p>B1Q#YJA)ce71p(`W?}(Qkod*hS
z#aDmpP`Abh*{{e94_g=+1nCGp_8!OGtf2@~@W$dPE+SD|tTT0Z@IO^z&3E*UK(IW-
z4ac9X(_xImY&~k8dmHQAPUKK|f~%-pH+rpV8XkAs&PtCYU*dOWUPx+Ohw8I~49g@4
zd<2OL36n^VN3lIdqmM82)uN4aA2!pBp$NHlC{dY5lIlV9ea+a3gPZ7g_R;1Tf!w~T
zXRXo61ruvDfqASykGBxg@?i+k&P#BI+`kQ`lV5jI`ZP0YMl^~0CrHNq-5$R%n@4@n
zL?3S5*o!whO#i~TCFMtH{c%y?w`$}k1bHG(5!yD{XbAl#-Wg+D*wWf&P(dHo@EM~r
z#%--xvm$`S9?1nMgy+}SNN|E2>ky`N714HhvC3O06wg3SKI(7T31RKEp2Sgj5+NV-
zoCR+pSTQ{4!Hbn1D$N+FvIeCT(^ebH3(MrEcnUSFynQ-GPbeOjR%_i0ou(*Nzk1XA
zS}&qIiYVCo2_#OY{}G2$L?)!TMwpJUEE(33?*Kc3
z7z>V$vNvQQm>>P*dpQy6iLPZPMp{Sw)WhKD;wMVkP$>Fx;pZK%m)-jpw#m2!F*r9v
z1rKS&goC*33qj&bwx7{?h3e&#sZyse<^B0xA%nei<0T5?SF4bML;B$`d7ow1A>$1L
z%{Hu?z#hvoOIPOC$(W``bPiLRYw%sX7zoJRQqMdD
zkNr^VhBW+qt#{U$JcGc#SFer=lB0RX^^K_Fe9_(73$|gOEG$}e`8)k_>!ZcV4%UNK
z$oEGxd%;H`WZh8LzBtBf|PPaFdp
zI8DK*k3D=b4;Jn57YbM@k|A#HB*;b#&&T(~$DU(FW^u*Zma;Mhy?Fh9I{V6~s-mvl
zLwBd7G)N;YA)O-K4bqLIH0O}gN=S=zi%7SWq|%+zNJ~iEb$s9N{C1Vg3m_YxzaUM;C31o#f=by}O8>GV%6onGlKWW)I3-En`{#BcSD7B0u9J(&1)r
zwwZM&$MBH_pV7IWVgb^OVNbm1zKGnOE?#)|B|2K6qMEZwf?(v45p3ghhnzfSM!Lh{
zqNH+uV&vdUUd0`9JUKhGuO4EC(*lm+q3$%)#Ur8q#x;9Uj7yj%h}(Nutd%XAUe?~Q
zC)zIZ9a>rFqvqDrbS)2|ty&u6$9~hNHG^_SH;mp;^*gQ!ddK~>a8=UsPOGos=S6dW=rtBfjx|&zr!bpOf-{^$I#a2`PiQ~fX7!T0S
z2@Of(U=#==pQ0t{nO6o#nfx64y<{%b-Q#}+(g}Hkc8-@K)v0AQvqqNY?gQNhb6l@D
z0_v7Y^~=>db#+km{zeJ%TJlc*Cz#B#_d^pg!?{D?qve8K_@W4>`7j$jfeEtUMF=?N
zE1PXz8kB-V!5zd@_2Ohu1Kmp1@a`QF)|e5zfmf{4KXERZR_L>1y18X?uAA&1=5dOc
zZ!gy0*io(yePyI1tYrwKw5*??6doqlQ+USl>lN^fdzQpoqZL0+NHx&Yg4OQWy1Hf$
z`7pT<+1xDpE;ZE>j659Ya_I+)`?6%pYNiuDS}F<5?M&zozq#=j15I~!&d$BG4_EzzV&B{!
zwK!jGD=`4~yHkXoEkH+}czPrZSU?fT%YB3V8zI|EAl7`c7zinh{sgi=JLlsz@Y?=J
zxSn1z86Q*=&09eN=!TF3v(yJXLM4JmCmrB|G?WI*C`#gnf|bVJ@$k$y$w7+dstF#m
zWlvH>)=_?<%~p!Oa$j9T!yVal{y2+s1pc=RUlHr1q-BFrdc}(gvuraCLM!`OOAZ{P
zw?UB@3c%CSUvN)1A*HgDh(a1cs}*L%k>kA{z&0Y}ISl`HgaNASc*6bx@>`jgoPm*H^0UJ
zY!mc=LhYA($7o+1B_NzO&4ujMjY)(XbM=3IHDunfps-{EdIATAhmj#*WK-Af>vj0V
zsLoCZ|A$PKfpZ=Xwdsr1T%F3sSxdrrJQkROOeJZ*8KggTWzauwqp$H%hqv2F7Z3_>#o77hk2&^)sAU>7RM;$FljbWvGWMbyz@75EMh`
zlLxPC+C==uIgGY0zinNsebi;JTS6tDu8KTUCISZ${A_HgBN7jOp!8o3CYwK?f*YDP
z-)J)jI~4Zt8i8xi*{nu_df*Iw(~mz3OoIlaHsQi}*=wKpGfC?R3H_DSk+tOgbdoV~
zBLMsbgTEL7>JJ2{VgYh@IzQM?V3Q-`-?v83A|6peE1NMvXbiHjM+<69R&1}YVdGq5
zf8J0QWbl=C+^l1WNf{X$j!#ZP!R*NH?JLlzbR27Ti^!FRb?WYK;JnmKf+unH*#FHN
zg1wQ_**aT1&(xgD@;e}1=3cGE}4_SJG
zchO4f%*=EFe{tbL7SKo>KNMG^lM_;TifnDMHcnO@YT;FDma5HUiIEDkH8=1@^*;y{
zp4Sci{D+9ArDAsFoDFz1EPT=v8pK8+Z^z|4_pUwbbsZ`1{Z9gozZxTSZcF`ET#2xj
zSs%uAim7oCLUnWmu|iMhu9n21_B*!HaWZ1*%mzfwrQ3ZS(O(nHadEd*SzrcU?gkqh
zn;Vz|WN$B}to+^Uh=H9Qi)jDDrj=OCq$2p|u>-Jk_LSJerAl&P=QPJBCg
zu=n=%j`zx|EvL$K3QkLy3tCpIrJKxBLmx9t+jAQhh`#Z<`}HZY|IqgzJ|78(
zJKgF`OVuJ1Z{MRE=|E(rM@T9eo-+FKeoW&;^?c~azue({9S{JS#v%hL_^|qB%$Q>y
z*~QNUNexa=`e8|>My?YXR5Ok$HB7;R~Q~veD03Qyq`ak
zj?Eje#c!xD8^+D3wTB0};@V3E;I=p4s-Wwj^?m*oM`7n6?Xzp~npPBXCTfbtPZ7O)
znwT!YnU~+Q^-ZTWvduc~6=d(S<3W6WVF7Mso#sCOYF3E?1I?uY2O%
z$N&N=Rk4;kfD6Hm#R_qp3>-zFnGR=9)t!7}n@*wnqCgo-QI?RAVjV<4k4mMK6fu;c
z{@<{PwjnpvNO~(572iauYNoTcY(F@t{hc&TqQD;iwI!9?fVg+QX47_idcJsjmkt{5
z*$Hyn2yw00RnhReUmvh$Es5Lt?K^+Dy>JC(3z_3)c=h5;MYEca!pY>AdzLsDOU-+F
zRozhpXp4KdF9plnVuB(}DGetH-To?Q5a~tWJ}B=PZLjn)*3Ly)=K@TK
z02S#$ZP}roKH%GVPOs&Oh-A)}FZ`gN7fet3LjeeTkFPco%r0+0%OYL07%(5v(b0`(
zqt8z6{~m3yn_Yj86C+k+vgE;jRyYD>38&scoA8Ku2@%RcF>VhH6?Q`SbYhVB%~qN)
ziT(?>IYP}-{;l0DYvV?z_U>(-46cpOg^ygO4?W|I=@mW)A!vptCsDkMLb-uz=ycfb
z*@{x9cOkSJxau&Wj!oYP?&DyD0`IJOQH)hf6UIaxfy5Kpjs|6kdn+}&WF|k5Z59TK
zMxaJiV+I1DU9FmI2^1xDd~CU19^%SS4yT(mGg*8FmH-it?zDoyJR*fS64s*<>4Y}C
zhmr?$TET#~uRzKi)XKiBz6;5I@A1?H?tLUw2cY8ZhiWr+RbowVcw$Y;QVBKn=b?V
zZBBz2p9(Iw>(Rq)>&W;qEo-SQ!{1ui22PM74o1VX%$!Vf2cB1R280pV-F<
z%7l%D_~qNnpC_hJ7sKs%Oyt{y)>?WU&Ue|+j*VbiIB@xtc2Fl=|H4}*fo380cItbB
zd`a22)oai85q}2y{E<5?Jgl~Kz=P2cQ-1;cMF9qph3lV?fw}a63WbvH^
zBgBhjY_t-71sFd4p+9sR_`7U9VnUTBh
z#?9Xpri6?XJ)3L4nzkptQo#}H^XwVnMS##p^`u0oU_)8{GO@j8zIdj(98!vbQ#2$^
z*PIkaBDGv7EMXp_sW2S-xXX&K%lk9tG&tC~P0pRCDTy|+?F|w97H=JwRjXdmki;Fg
zct1Xm=eAt67J%o|K^hDQpe0DEGWv_3m&bs5@_yQ%XCBemC_nsIqejDjOvf|yc~Bjd
z$fvcT9nBo|=0x1-()d(%Mut~aj?*UCmy}Z24$x%6mJ{A_D
zble@f<^u}Verg}pJx4X6c=vGoj&Ee2oy3v8c8mZkSsKph!uAOq9r#=NsRn*X(EcMj3c|dTBnodpzW^C}5lOgC8W|>F9i4PX0NOpgDc~^0>aG-GyV=
zJI<0lQ5eWQ^BWmy%=uxy&o0I<1XUX+gwq0#ywo@oS-&z~j&PYizIXgV*k~J2boz=|
zqqv1+NwoL;HQwe4pwK5=&42Q~>!tS9JGP_<*oiniuN+l~x+3JLS!rx&WK=Ced0s4e
zhjD#<-MtOi6>#Ca$ocPw3KAql*L1;X&{xtt-t}m-0rnDrw0nM#WKOXjD
znroALDwDfs?{rC=H4OcvnLNmQu!W;IOld-R|cxkyoD^3|w7kHrLLo
zci1uvv-**MCA+PdoHL|*o@VDYUTuie^PzrXx#7TJBvqHnp1nVMRLjk;1v2nWb5oW>
z2CP!@ImUz_((AbZ6nN&{(D{~fK{gQ4`;)6oE7x&2j-D+`MgNcm$Tqil`fiz4Oi8CT
z5CU~%)zY#ZIhY$kA29Vj`w@q%{x8oSCS)gyGKx&sipXwr!h`RU7d}
zOM8N_Liq_2Ve-f^0nJ+C=o?=;ePuq5bdsafq7QW==td;8{7r@mo9)rE>YS<@APGb@
zAdOhPO`buyD89r)D}sEM)MKs+f-+zcBG&82x3;e9<ppXoFPEDZA!A~`xmoBty9ySshm@6qkO
z%=YwpYp2OUDwEw#KEG((Zct5U*Vm`CMH_DcEFS8X4BEA|)ln{bts&A~8E_n{&-PF8
z`rYk5^Mf=OqK--N>Yw(a0Va=4ISvJo1|&Rp7YbM*q1N&32;z2fX-Ag&53Yo?=IKgB
z55mIW6aDW)S2&C^O^NgblPY{y-&f~E@Y%O@c~=MXKr-BzJ!E}RjmLQ#Rwy#Mw;=iA
z6UG+hDeeg0;9XtN(Mync#96jJ^4DT8bUrNb9@w=uq?>ytz-m8QFPDK0PFn_AejUB;
zCGp#549Uv*rpaAn{G4MEvXtrE%ho~emls_g=RCkF2Hr3}(bBZguOn@4eIIoAMsSBl
zR!%`6{)HYmyDJ>GQ
zJBAMz-+zr;TT5qVVu9+L;-n|{0JA4j|7UVBBdm%1a8NZZ7z%9M-i1bkckFcMXf8|W^!ml0
zJ7m3o0Z&4o`l-U5Cyp>h37;ZWV1l>J)9`twGPw#?>?yoVzAz_q>)R{Jg33?I(}_ybwxrr;5j`EWRpI*
zXCyLOOFKp7Jni@fP*_vbTUz1vtSshH`i%0eT%@I_K_XlttOSOSNKBAgsfWgLVU=Z=
zU$v$rMud7D1ilP?&L0^G7iEws`K>bG)K|-a%AFN?JuU@;b1c{+IZUSWYZRUe1FT-e
zhbeb}q)5A=gu@|)42
zU7aUL!*7^fZOw6!^L6-gkOt}Qxv?!~_cSTRKv95&fN^znR;x^cYWpwe_rMUYX&I@}
zC!1S!Q#h$DqBmLFtPJpkBh~2Wbc3wc-(IX9fn`QQyHp$LTr+e4i{MuYL<0C62-Q%h
zwfAtdgo0J=n*+P^KZ)f+Ch~QKas!m)ACt=xE%jGNER?0gxJZBcHOl<<*N>$B`e7nq
z{B=E^fB^7sEb_L#9N!^8rn>pTVVpN)q?D=XLI~u<
z@(HH>D01wOsBz8D*N^0lo(W&wm*99%YqtJE2DmT=Ln0AZp8*rRr>oA>MxgdI|5Sq8
z|L3^+PAiP_{UDoX`xGu6QSYo%%{x$pQ)e?i?4c&xtaXRWLSR>!-w&U-f0Zd{VJr66
zG9rnmQ>W?rJ6KoNZU%O<*zq1N`EaCO1RSY%E_&0(sd4r3y-B!uK^2xB>_+k`>|`|1{DHhWz3amMPA06%Ihts9(OA8I*ie2Qeh(_
z*n>&m^p6pL&+824;7cS1Yc9$sPaGw*G51eA=+e{~-vi(W7C`2y7jl0fan&X-Cz<}f
zQS&bC1gE1-R+Ei?C{+dkA1;1!bnx3Ui@{H2Rb+LpzTO5|-ZK%^v=O~k%O#1KfnGk4
zMZXSvzfA4%w5^;GzgCSUOP;~FlGBZ%tt+{9s+e_2@%uaNpdvOFywAsOk_oAa*O9dg
zzyZMZ+?4{bIrRQl1W9mZ3YyvrDX$q3&92E79b^g5t)ww_%}9O
z3a%JJC|=`z>{?`G3=}eoGq0MbD^4m)I>1Q|JzpA}WfSl(_U3rGgenyyA5mYT!<6J#P`C
zj1bt*Gi|l*OYIPj=vuw53*fsNbZ}EEc2i5L33-WXmhrNh4&fgJf*L>|?En0Zca&}`
zB{)RN1}8QO8@9x?ipB@@dAjXh{mSLJPx-$ZNE_$hN-&|wC+}RSe>)BRsou$$5P#xm
z3u72tzv}m7)@ausOoGeWHsx&q--U)2Q_g
z(B)Kzza+p^so)h;8zkT|0oVyO7aPcx(!4n;*{7ehP!wQ%k7in8*Djf`joq;%LQ6u*<&{
zF*U|RIFk#jU(Q41%bdvgFEZ&m#_(p$VMOBRC{ZVfta$rUb@e*vsT9L6YTi&u%qYqc
za*X%CG5W~JFqa5<|N1vSO%8US%jFi!$>5?4!oYtNqRWKg_PNtHHJha8?#
zbqFdj3njpd{9ce>$HMM&9&#neOV;)gnHN`!@^ney8?bKjFzs#7r3_bdR#5eHPR;ES
zaflch1vJP0O;iMhzCWmnGEK@SiKr8r%uOP1BVoMpbzDTRfZ>ziQ9{P>{JVlR?_hE#9+pR{y}w8cw^I&<-J
zJ#}=GWo5&g++MhuUPOUhdpWfSO`YGjQK6$#
zqs$-0zXlb5uCA8byj!PBh%YL2_vp#O6&k)b}t9UzDL*8w4mj6+{@oK71O-c
zWP`t?gOc%idiyjARQc?w`Yk&5s0gS|x_+vUZ@zv@U4fVM{TmN*X&#=g6zwM{ojyuJ
zq?}I+iOHdE`duxa`(&_w1j7J`sV0Y&>L#C|JdW;_ml?#(jq%;#T
zZ_EoXt(eZco|H^}-oHBL{kuq;;D`ax4M=f6tjd(=-Fj1I%`i4L`n8gDr!{|=
zr)XcR>BlK48Zs7Sm6%!K0V_*7-Emq1K8eVsz$v~=q|_h@MT#2J;L;Zyq*CR2o%jbh
z$*oV7ZXPq8OFbFb)M{`Vb*HMZVQHS{T<-iH^IMHw?Dr2!Wqv~uTJ_!?*s5|>-mjhK
z;IJCuA0dM4=<^+z5Q%UC8bHTL=sP^BnmpV+qCE3Y(#G_AjV)O~ER~I?)t$^Lb}I%$ar^SXiA1{gqA16cfV^nBJXn$UVk;X?kpRL
zY0nAeWqB1YGqs!-lUs@zcRYqAN(V(O3E^FU2b!zA8Lih!4Bt_{G?>&CC4)J4++w>+
z*USmA;bQd3$<2f5VlELYQ_P$6I7d!(>D1=^1`b+|o8x#W3d>Ai^Fx$Mo9{J^^4wd<
zU;CUs)izlUcv9|neo!e(FRlMcSN~6J)N~hq#Rr{)_la|1z!DG)AQ11nb-%p|Bft7%Tf?3ANgWHf<$6gruw#NaYmSNoF9Bd`g1C&
z=u=c$Tjm4O7QoKhUBo;xalqmSp^~M?6|%NC^)zqFx|cufC6|uxJC{+kEU2mga1@{&
zNUVJh7i?l|liJO?1;*hPjh74Kr$(>&zw!CAJX`Tw96t7bNRmn(#NC%oo&Vw?q4Bru
z@Zsh$$-5_PC>uhd7W(I22?NDIx;t#$CcWqh@TrQVWWV4hEeDh(y5XRdK#k#{i)Aw+
z>-1qndE1EX?#SFcVxJQYkQw9O&hIFiGa~h;ee@_hGM%qBPEzMLF$Z;w
z?jt3qckD_z$8q$tmz%Y3t2%z;?x#z77Ai9%Yb7l+J$HB^v&H@&oDZvw8$MUT4_o=c
zS59qe1;%j=IX~Twgyd8?1gf%Z7iCnO8Q7iP*d|xlpy~g)d8rYnCP77RQomTF{!??o
zxZ9mdHPAbM)mE>CL_GT|Z?M9-lrmlJ6F$TKhN64}IX*o2+1!VjcO~CMU68sW*4AdV
z5n`h_b=383
zq}LaoXH!19%w!3oLctI
zmT#g92-#e^E{ci^7mK0zHR=T(WTl<(HUIFzWd=OxC&9D1fQE+&P09?8;vUXnb+7sp
zm5@K7wMG+A1;2eQKcXoCQIxh?hB^wc9i2a>U}dfnJX<0F?kML};ad26R#=grLNX!w
zDt4jwYKuNj-#c?wGt*LbO>yP$;a#|q{psN%DnFEvexzmC+8|jIjVk^nyg*3yfI9*;O2IeyqU}##%g{f&8vuMEY!r3&|
zullc5adYSOYnsgh<#BFV$_M{Qc40EX#9>liH!(N1lV%
zNwgITZae4O3|bHYT+F=NgbiWrd1EV71>F>@Ma+eeBaY;w2W3_rK0}Ac)|kB5vG+Mr
z?Qg>xV*Jf6XJ3qj_e@IYOv-fM)h$XFp>0^e9&hihZu$2|gnc>@Tv3JU(}zj3!KCS6
z#%#UfD+7_EJa-qwY#|iDbWHRdT0-*%EIp1@oEX9iYnMmj`9F7ml~BaUw%F`f_LpL|
zjsRBS{Pq0!uF0Q$hlcnjC|6Pp0nKja%R;=5)BN|{JRHVqHnMIT5krGlqv$5K-gd1s
zd(rsOSGSrlP1Gi7Oqk~SUG9U>`N@ElOjk1a8nRFRTnFY;l|ZBrCgT7i2T8a1h%eLc
zYNOWS=UYZX1j9Cu$%7x`{n{3piF3B&Tc?A?dro!Tzo@cb7OE>pVg>ozmT5aUBubFR
zZ}g=fTC|3akMqi-$7hYMjhU#8HB#C#J5+>3;(0Ktv%X?Lq``RTxJ(Btpv|1~bH)>x
z7-SUnnJo|hKJ-NSNjb}^hw|PdJIZIzf9??T$I1>+^}ACI-+3QZNw%-rzASbgp25wQ
ziXKQ`3n;5$Jt0yT6EFypDap7uH?AyN`z_YHXX2gJ~lW$XT6%6bAgrm
z{Kw1_RuOz)QIOpS_WtC})cvk9G>4;9^?>M{^_?Ed^BMG@i2GcXC0w|l>M0)L0S?Kj
zdIeNv!C22lWXVEhL5DwfJ5~--(&!nOYLRG5)IG0=foEj(C-L3)Z|DgWRUc^xD#LXp
zg95)MMUQVVNhV}5d59Kq6Wr`Q-tq5BkY+1<^p^mB_d4+qOLA{nuAe&@jKx+5IYBZ|
z`L9+Sb-UQg^U12{83cmmo{ga%nIuc#3_SDGrg%jE@nU?BxWG2DRZ9Iavvdlj0$2+4
zbC9rTEVoGtKw`@5<^6qLqs%~wn~2?R^dKNAB3_C?hmi0}B>e^z7Eo5@jpg5h$}I4V
zSTTBhv+sYxesb^O?xX-O=f90gP{Pt#7U7?9SxS7YbSY!^vZ~VPO&|Ju{Ea5`SKWM}
z=C*>2|9$YW0z_aj$Xa$GiQw4+^UomJg70rZM)RA{^U?Qe6Nj)vNm-H4QW?of~h0lhibMYAO3iH?Yr%Hz6|NRUJ
zd?u5hXfYLGoom1Z(*)gr^x$U(unYK5H_)M?>fj&f8RWt5dGjuq0XY;jQRyQj2K*nL
zbuw!R{8ID`M$A0;mzHLZMr8fJT=K~tE02PL;<&y#5N9ZjyMJ%0{Nx|lY32&YYhq#|
zDJLf$kPSOdHWer&U~U_MEXxL^pc8(4ad9z&q$KU-k`L_@cJ|_PUIO?NAQQyTGe&Fz
zF3Qbd3x|Ebms)B8Ti@-WYjDq4@ckLal4+%`6{w*W#HYP`_q|9*hPtf4E#OI5!xBqoI({WFNgoNY^=KkUn6C*=F)ll;OB*7gJ
zcrx(uoi;bDG`cgu;fbT8YHNmRLom?Ju$pS*(gh|u3-1Y9SXk({2Q(e~nVQm^o}B^8
zQHw>-F>$Rwv;S78=oRYTc)koM?GlHvKxSM0p6aLef;rm#ZFlRvv7i9F^Ata86!@rP*aLNsdM8*)%yy*)O0ffoCw-hRt(80DS`337yi)5$b#Bhcj-&_1?PtR
zPoHG3T0eb41}n)D5F+unoyqSLGv_}7k%~NdD9_W$n
z{&b};kO2ZBqVSPSAsPB499j(d-_u&OTZQ#BfO*m@0Y|2%rak
z+Epo24st#|mnDlO`v6{w1%%KIOrl=&UT{vK2v=m3_VD1_+uvvLdIo=Z;)$vXq~2zP
zg6f$!HfgM!@Ympnps3z;r4dv)Ik~lRv%4o>U6x`1*}PI*=!P&qKmTK4VPDM#z-}*%
z{%GtA$J*g+EfSEx+>>z`yfuIlQLwdT2?C;S-XBlBF&)x8uk}(~Ab;QA-`@=ov_b%E
zCymPljv;1w7Vz&I?0-mwd^hJ=1#G4LPshZ<0hcd2MI5Tx&Cj$Vf%I#DM>#p^r$vJB
zQ{a$t=!fLqpBG=PlXVC?o29@7L)fJVO$xrre3|M=4FB%>|ERRX1}#2E^8Wre
zCBXo8kUf6L{^Us_P)#r#TlGwFaD?Ke*nJ%tCsT^wM980mxp2UW{fLGj!y)u$u?P|~Y;Rdh4(vwmt_8ki;-EE9
zpl^U=Hqg}i5~v~!i%goM{Tjn3vPTNRHv~+q$NOfR=Dpf
zkRl~>7KAKKxz-MWlmk}Lr{dUrJ-9StQ7yllu>ea4D=TYfLeMz_HZE>_b5(UU9-tcM
zN#!<+|M-#q_P0+*X6TRP=-Fm3b~vc5ami&(UrA}Oeg_7CGBp1E-I4_A?j5(kxbK66H${t1n*z79ebxcAobo~-=z7TP
zV@U}*c8{u^>KR`M{aI}P#>q9f_n)Jc1T-37h`qf%+?pK&?t<0MP^7EN;D<|%hG4)+
zKtM~Iu+-wSahCfamJ@vM*LpE+^z>M9z<0XZ3=fz#V2TkTKsnq`*5v>It#`W_m=VC>
zyrv*|LjYbz(){nAL*J8LvXh0Cd+*7>dvI$Z;dr>M1j78Z1nAW{Y)Au`-ZB-hpxRGOeGi(E%CPQ%T!H`0g-0M}29i6U{?
zG$zHIVlh$l;_A2ukC%rB5(m=sLP^^-;A8@dt#BvB9BT0-cOm!TcDojET_4QVp#dO!
z8Um!SuyE)1?;Pz1W6V6r?VetTG(fokbVmM^L#<^mCS13oqN4Dt073nmeBJU|=LJDH
zqJ3u%i~_e|zTfY-$HKtCcq;7gA+B6V2)<&(7;ow;3x0}|aN1i4O@e}OyT>o(s9wv-
z>FFC}b#N?{j~xmD6fpo6L#U~#qoSiTmeHOwJHyTEL2du4n{W-_@BwV$Z3R{CqS;q>
zN5Khz_9d^aZOPVPbx*P#TzJ-BGsx&CMg!>SX@R`M)QXWhA1ng?9yYkIb|Ngg_fvP*
z69wW{o3u=GTd@e)l;tcKR+454x%Po|XGc~)YP+O4Jv~iKPZwT0QHP-9H8hZ2t^`Zc
z)6!@@#>y!P?Yf{=jLi?HV>=HePMMT_qURj65(}>5kw@Xx*
zbJmR^$x*SZR~t;`|)4ns%$WnlxyAwYV)2Ib-?;2QX@P
z(+(xUbswxY<;u-;1JnwLnbmTxBIAdzwaJtXwqrDqPH+mrz+=8|8wUqV0*E1oTJUw+zZW=OSxhta#{h7unmMQLlcFN#T!_Pu
zk8%=6)_@`%Ua~P@28cfm4Gn<0?h?OTeERzW4VUWJ0PzZ(T!2zUO7aZiJ!9gN4|aW_
z!Ik!`bz=8?Zf}$a8#q<_)oV$a)(s0MfQ)+`?ozOOJ%z&+djxf3=@UORU
zwpy;^g@4=Fwv6Pb@@j_A7mS2!z|MRFydd$wq*NF+;68be3A%b%IXQcQ;sT-yMq@Lu
zLx6|g;$m+~*#DeW;%XJ?-&QasqSaJXRPg#t;uzFBkSzOcQv((!dSPL5*Y;~>W3Dt>
z1x1%W(8Ce~ZVgu`39rzI*3<9oz{+$1loe)3PLJoHwnRh6F^qdvuj7W~=I>uuyMlpM
zygZ5PO(H-_bUXHNn{aH+M-lf_>jZYt>Fa=PslJ3scUM6
zrKhL!hO8KGK89*!or=Gf9=(t<>k6rHU5|cXuW_ZR+y#^AX^S4lrtHQ#j@wfa6w9
zO8M0Od0!f5PyQPrVV?0tXTh)Ev{8r1{rgbKlMiDD2tqe_U{sy$Shr=ZIUpi$1g8F^
zmpkZ3vBl>9vC+(bEdZcFm;LuSwRLqrmX~9JF0$D#_C#=^q1+siqmBm&_=o%g0$nZ*
z49v`^4J$#<+OJ1kF@F*Md$7;&AY`w8##9D~P)@+965u4?02FJ!V2OVG_z?r)pSEUN~Lb>hYu93$K6jv5W!MFRSQHiWS4=-2abHM6`Vl^
zuHi&1YR@@Ht-x`r-~5^lP8zlLf%=*Eb6}VO`C9wd9sKx&)95S*UYY>r`121|zW3ML
zC-aWg`OVD~gwfWRwAAnzz-B&cIJ8-G2O*?4maGTBM%~=-IXOA)92~m0Mlu7d;L*VM
z@86-LBUVde$xJE`h>3~G47H59I=&bUo<5i*9tn4%6CnaDNF}w}Iy!WGe1za6i;Ihc
zguvTN908fws&~tepFcg8{vw0`+Axi6@RJAL&p@OK?+XhsfblJOmdIGCx{esZ@-LJavf&{O_;?KGoI|`~!lYNc8(0&clFZM~8Qn
zk#ZXH=T}R9k*RKKy0)P~g>NC^coudZSWrR3+ty1rUEV%+)Zx}{Hv~|6)v>wE7RybmLu*9dWPJ9m&3rt
zHM$){NJt3fLxZ=sz^xJ^3yTZ~>Bjl)gzv?ao`$jU+lmT~U~wn7m|qQMaeQjB=s_iq
z>*E~@1Zox)8;jK0;Nf@uD-EX01s0&>C3_l6ZU7-r-uv{+vxB;^_0eZX#1ayK@@am4
z{_%Td0I%zws}l#{ZZZ;^+S|CaM5x
i1m7LHl>e_w9%w_P{Ekg}yj>ySmy(>CY?ZWm*#81~WqQN_

literal 0
HcmV?d00001


From 33a99a1a17a569493cbf009bcd5458939c153f54 Mon Sep 17 00:00:00 2001
From: josibake 
Date: Mon, 15 Jan 2024 12:05:08 +0100
Subject: [PATCH 077/288] Add reference.py with test vectors

* reference.py contains the silent payment specific code
* secp256k1.py for doing the EC operations
* bech32m.py contains code for encoding/decoding bech32(m) addresses
* bitcoin_utils.py contains some helper code, not specific to silent
  payments
* send_and_receive_test_vectors.json contains the wallet unit test
  vectors

Co-Authored-By: S3RK <1466284+S3RK@users.noreply.github.com>
Co-Authored-By: Oghenovo Usiwoma <37949128+Eunovo@users.noreply.github.com>
Co-authored-by: S.Blagogee <34041358+setavenger@users.noreply.github.com>
---
 bip-0352.mediawiki                          |   52 +
 bip-0352/bech32m.py                         |  135 +
 bip-0352/bitcoin_utils.py                   |  158 ++
 bip-0352/reference.py                       |  335 +++
 bip-0352/secp256k1.py                       |  696 +++++
 bip-0352/send_and_receive_test_vectors.json | 2673 +++++++++++++++++++
 6 files changed, 4049 insertions(+)
 create mode 100644 bip-0352/bech32m.py
 create mode 100644 bip-0352/bitcoin_utils.py
 create mode 100755 bip-0352/reference.py
 create mode 100644 bip-0352/secp256k1.py
 create mode 100644 bip-0352/send_and_receive_test_vectors.json

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 2f8f767b..8f41bca2 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -370,6 +370,58 @@ If using a seed/seed phrase only style backup, the user can recover the wallet's
 
 Silent payments introduces a new address format and protocol for sending and as such is not compatible with older wallet software or wallets which have not implemented the silent payments protocol.
 
+== Test Vectors ==
+
+A [[bip-0352/send_and_receive_test_vectors.json|collection of test vectors in JSON format]] are provided, along with a [[bip-0352/reference.py|python reference implementation]]. Each test vector consists of a sending test case and corresponding receiving test case. This is to allow sending and receiving to be implemented separately. To ensure determinism while testing, sort the array of ''Bm'' by amount (see the [[bip-0352/reference.py|reference implementation]]). Test cases use the following schema:
+
+''' test_case '''
+
+    {
+        "comment": "Comment describing the behavior being tested",
+        "sending": [],
+        "receiving": [],
+    }
+
+''' sender '''
+
+    {
+        "given": {
+            "vin": [],
+            "recipients": []
+        },
+        "expected": {
+            "outputs": [],
+            "n_outouts": ,
+        },
+    }
+
+''' recipient '''
+
+    {
+        "given": {
+            "vin": [],
+            "key_material": {
+                "scan_priv_key": ,
+                "spend_priv_key": ,
+            }
+            "labels": [],
+         },
+         "expected": {
+             "addresses": [],
+             "outputs": [
+                 {
+                     "priv_key_tweak": ,
+                     "pub_key": ,
+                     "signature": 
+                 },
+                 ...
+             ],
+             "n_outputs": 
+         }
+     }
+
+Wallets should include inputs not in the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list when testing to ensure that only inputs from the list are being used for shared secret derivation. Additionally, receiving wallets should include non-silent payment outputs for themselves in testing to ensure silent payments scanning does not interfere with regular outputs detection.
+
 === Functional tests ===
 
 Below is a list of functional tests which should be included in sending and receiving implementations.
diff --git a/bip-0352/bech32m.py b/bip-0352/bech32m.py
new file mode 100644
index 00000000..795e1538
--- /dev/null
+++ b/bip-0352/bech32m.py
@@ -0,0 +1,135 @@
+# Copyright (c) 2017, 2020 Pieter Wuille
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+"""Reference implementation for Bech32/Bech32m and segwit addresses."""
+
+
+from enum import Enum
+
+class Encoding(Enum):
+    """Enumeration type to list the various supported encodings."""
+    BECH32 = 1
+    BECH32M = 2
+
+CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l"
+BECH32M_CONST = 0x2bc830a3
+
+def bech32_polymod(values):
+    """Internal function that computes the Bech32 checksum."""
+    generator = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3]
+    chk = 1
+    for value in values:
+        top = chk >> 25
+        chk = (chk & 0x1ffffff) << 5 ^ value
+        for i in range(5):
+            chk ^= generator[i] if ((top >> i) & 1) else 0
+    return chk
+
+
+def bech32_hrp_expand(hrp):
+    """Expand the HRP into values for checksum computation."""
+    return [ord(x) >> 5 for x in hrp] + [0] + [ord(x) & 31 for x in hrp]
+
+
+def bech32_verify_checksum(hrp, data):
+    """Verify a checksum given HRP and converted data characters."""
+    const = bech32_polymod(bech32_hrp_expand(hrp) + data)
+    if const == 1:
+        return Encoding.BECH32
+    if const == BECH32M_CONST:
+        return Encoding.BECH32M
+    return None
+
+def bech32_create_checksum(hrp, data, spec):
+    """Compute the checksum values given HRP and data."""
+    values = bech32_hrp_expand(hrp) + data
+    const = BECH32M_CONST if spec == Encoding.BECH32M else 1
+    polymod = bech32_polymod(values + [0, 0, 0, 0, 0, 0]) ^ const
+    return [(polymod >> 5 * (5 - i)) & 31 for i in range(6)]
+
+
+def bech32_encode(hrp, data, spec):
+    """Compute a Bech32 string given HRP and data values."""
+    combined = data + bech32_create_checksum(hrp, data, spec)
+    return hrp + '1' + ''.join([CHARSET[d] for d in combined])
+
+def bech32_decode(bech):
+    """Validate a Bech32/Bech32m string, and determine HRP and data."""
+    if ((any(ord(x) < 33 or ord(x) > 126 for x in bech)) or
+            (bech.lower() != bech and bech.upper() != bech)):
+        return (None, None, None)
+    bech = bech.lower()
+    pos = bech.rfind('1')
+
+    # remove the requirement that bech32m be less than 90 chars
+    if pos < 1 or pos + 7 > len(bech):
+        return (None, None, None)
+    if not all(x in CHARSET for x in bech[pos+1:]):
+        return (None, None, None)
+    hrp = bech[:pos]
+    data = [CHARSET.find(x) for x in bech[pos+1:]]
+    spec = bech32_verify_checksum(hrp, data)
+    if spec is None:
+        return (None, None, None)
+    return (hrp, data[:-6], spec)
+
+def convertbits(data, frombits, tobits, pad=True):
+    """General power-of-2 base conversion."""
+    acc = 0
+    bits = 0
+    ret = []
+    maxv = (1 << tobits) - 1
+    max_acc = (1 << (frombits + tobits - 1)) - 1
+    for value in data:
+        if value < 0 or (value >> frombits):
+            return None
+        acc = ((acc << frombits) | value) & max_acc
+        bits += frombits
+        while bits >= tobits:
+            bits -= tobits
+            ret.append((acc >> bits) & maxv)
+    if pad:
+        if bits:
+            ret.append((acc << (tobits - bits)) & maxv)
+    elif bits >= frombits or ((acc << (tobits - bits)) & maxv):
+        return None
+    return ret
+
+
+def decode(hrp, addr):
+    """Decode a segwit address."""
+    hrpgot, data, spec = bech32_decode(addr)
+    if hrpgot != hrp:
+        return (None, None)
+    decoded = convertbits(data[1:], 5, 8, False)
+    if decoded is None or len(decoded) < 2:
+        return (None, None)
+    if data[0] > 16:
+        return (None, None)
+    return (data[0], decoded)
+
+
+def encode(hrp, witver, witprog):
+    """Encode a segwit address."""
+    spec = Encoding.BECH32 if witver == 0 else Encoding.BECH32M
+    ret = bech32_encode(hrp, [witver] + convertbits(witprog, 8, 5), spec)
+    if decode(hrp, ret) == (None, None):
+        return None
+    return ret
diff --git a/bip-0352/bitcoin_utils.py b/bip-0352/bitcoin_utils.py
new file mode 100644
index 00000000..443c096d
--- /dev/null
+++ b/bip-0352/bitcoin_utils.py
@@ -0,0 +1,158 @@
+import hashlib
+import struct
+from io import BytesIO
+from secp256k1 import ECKey
+from typing import Union
+
+
+def from_hex(hex_string):
+    """Deserialize from a hex string representation (e.g. from RPC)"""
+    return BytesIO(bytes.fromhex(hex_string))
+
+
+def ser_uint32(u: int) -> bytes:
+    return u.to_bytes(4, "big")
+
+
+def ser_uint256(u):
+    return u.to_bytes(32, 'little')
+
+
+def deser_uint256(f):
+    return int.from_bytes(f.read(32), 'little')
+
+
+def deser_txid(txid: str):
+    # recall that txids are serialized little-endian, but displayed big-endian
+    # this means when converting from a human readable hex txid, we need to first
+    # reverse it before deserializing it
+    dixt = "".join(map(str.__add__, txid[-2::-2], txid[-1::-2]))
+    return bytes.fromhex(dixt)
+
+
+def deser_compact_size(f: BytesIO):
+    view = f.getbuffer()
+    nbytes = view.nbytes;
+    view.release()
+    if (nbytes == 0):
+        return 0 # end of stream
+
+    nit = struct.unpack(" bytes:
+    return hashlib.new("ripemd160", hashlib.sha256(s).digest()).digest()
+
+
+def is_p2tr(spk: bytes) -> bool:
+    if len(spk) != 34:
+        return False
+    # OP_1 OP_PUSHBYTES_32 <32 bytes>
+    return (spk[0] == 0x51) & (spk[1] == 0x20)
+
+
+def is_p2wpkh(spk: bytes) -> bool:
+    if len(spk) != 22:
+        return False
+    # OP_0 OP_PUSHBYTES_20 <20 bytes>
+    return (spk[0] == 0x00) & (spk[1] == 0x14)
+
+
+def is_p2sh(spk: bytes) -> bool:
+    if len(spk) != 23:
+        return False
+    # OP_HASH160 OP_PUSHBYTES_20 <20 bytes> OP_EQUAL
+    return (spk[0] == 0xA9) & (spk[1] == 0x14) & (spk[-1] == 0x87)
+
+
+def is_p2pkh(spk: bytes) -> bool:
+    if len(spk) != 25:
+        return False
+    # OP_DUP OP_HASH160 OP_PUSHBYTES_20 <20 bytes> OP_EQUALVERIFY OP_CHECKSIG
+    return (spk[0] == 0x76) & (spk[1] == 0xA9) & (spk[2] == 0x14) & (spk[-2] == 0x88) & (spk[-1] == 0xAC)
diff --git a/bip-0352/reference.py b/bip-0352/reference.py
new file mode 100755
index 00000000..c98dac89
--- /dev/null
+++ b/bip-0352/reference.py
@@ -0,0 +1,335 @@
+#!/usr/bin/env python3
+# For running the test vectors, run this script:
+# ./reference.py send_and_receive_test_vectors.json
+
+import hashlib
+import json
+from typing import List, Tuple, Dict, cast
+from sys import argv, exit
+from functools import reduce
+from itertools import permutations
+
+# local files
+from bech32m import convertbits, bech32_encode, decode, Encoding
+from secp256k1 import ECKey, ECPubKey, TaggedHash, NUMS_H
+from bitcoin_utils import (
+        deser_txid,
+        from_hex,
+        hash160,
+        is_p2pkh,
+        is_p2sh,
+        is_p2wpkh,
+        is_p2tr,
+        ser_uint32,
+        COutPoint,
+        CTxInWitness,
+        VinInfo,
+    )
+
+
+def get_pubkey_from_input(vin: VinInfo) -> ECPubKey:
+    if is_p2pkh(vin.prevout):
+        # skip the first 3 op_codes and grab the 20 byte hash
+        # from the scriptPubKey
+        spk_hash = vin.prevout[3:3 + 20]
+        for i in range(len(vin.scriptSig), 0, -1):
+            if i - 33 >= 0:
+                # starting from the back, we move over the scriptSig with a 33 byte
+                # window (to match a compressed pubkey). we hash this and check if it matches
+                # the 20 byte has from the scriptPubKey. for standard scriptSigs, this will match
+                # right away because the pubkey is the last item in the scriptSig.
+                # if its a non-standard (malleated) scriptSig, we will still find the pubkey if its
+                # a compressed pubkey.
+                #
+                # note: this is an incredibly inefficient implementation, for demonstration purposes only.
+                pubkey_bytes = vin.scriptSig[i - 33:i]
+                pubkey_hash = hash160(pubkey_bytes)
+                if pubkey_hash == spk_hash:
+                    pubkey = ECPubKey().set(pubkey_bytes)
+                    if (pubkey.valid) & (pubkey.compressed):
+                        return pubkey
+    if is_p2sh(vin.prevout):
+        redeem_script = vin.scriptSig[1:]
+        if is_p2wpkh(redeem_script):
+            pubkey = ECPubKey().set(vin.txinwitness.scriptWitness.stack[-1])
+            if (pubkey.valid) & (pubkey.compressed):
+                return pubkey
+    if is_p2wpkh(vin.prevout):
+        txin = vin.txinwitness
+        pubkey = ECPubKey().set(txin.scriptWitness.stack[-1])
+        if (pubkey.valid) & (pubkey.compressed):
+            return pubkey
+    if is_p2tr(vin.prevout):
+        witnessStack = vin.txinwitness.scriptWitness.stack
+        if (len(witnessStack) >= 1):
+            if (len(witnessStack) > 1 and witnessStack[-1][0] == 0x50):
+                # Last item is annex
+                witnessStack.pop()
+
+            if (len(witnessStack) > 1):
+                # Script-path spend
+                control_block = witnessStack[-1]
+                #  control block is  <32 byte internal key> and 0 or more <32 byte hash>
+                internal_key = control_block[1:33]
+                if (internal_key == NUMS_H.to_bytes(32, 'big')):
+                    # Skip if NUMS_H
+                    return ECPubKey()
+
+            pubkey = ECPubKey().set(vin.prevout[2:])
+            if (pubkey.valid) & (pubkey.compressed):
+                return pubkey
+
+
+    return ECPubKey()
+
+
+def get_input_hash(outpoints: List[COutPoint], sum_input_pubkeys: ECPubKey) -> bytes:
+    lowest_outpoint = sorted(outpoints, key=lambda outpoint: outpoint.serialize())[0]
+    return TaggedHash("BIP0352/Inputs", lowest_outpoint.serialize() + cast(bytes, sum_input_pubkeys.get_bytes(False)))
+
+
+
+def encode_silent_payment_address(B_scan: ECPubKey, B_m: ECPubKey, hrp: str = "tsp", version: int = 0) -> str:
+    data = convertbits(cast(bytes, B_scan.get_bytes(False)) + cast(bytes, B_m.get_bytes(False)), 8, 5)
+    return bech32_encode(hrp, [version] + cast(List[int], data), Encoding.BECH32M)
+
+
+def generate_label(b_scan: ECKey, m: int) -> bytes:
+    return TaggedHash("BIP0352/Label", b_scan.get_bytes() + ser_uint32(m))
+
+
+def create_labeled_silent_payment_address(b_scan: ECKey, B_spend: ECPubKey, m: int, hrp: str = "tsp", version: int = 0) -> str:
+    G = ECKey().set(1).get_pubkey()
+    B_scan = b_scan.get_pubkey()
+    B_m = B_spend + generate_label(b_scan, m) * G
+    labeled_address = encode_silent_payment_address(B_scan, B_m, hrp, version)
+
+    return labeled_address
+
+
+def decode_silent_payment_address(address: str, hrp: str = "tsp") -> Tuple[ECPubKey, ECPubKey]:
+    _, data = decode(hrp, address)
+    if data is None:
+        return ECPubKey(), ECPubKey()
+    B_scan = ECPubKey().set(data[:33])
+    B_spend = ECPubKey().set(data[33:])
+
+    return B_scan, B_spend
+
+
+def create_outputs(input_priv_keys: List[Tuple[ECKey, bool]], input_hash: bytes, recipients: List[str], hrp="tsp") -> List[str]:
+    G = ECKey().set(1).get_pubkey()
+    negated_keys = []
+    for key, is_xonly in input_priv_keys:
+        k = ECKey().set(key.get_bytes())
+        if is_xonly and k.get_pubkey().get_y() % 2 != 0:
+            k.negate()
+        negated_keys.append(k)
+
+    a_sum = sum(negated_keys)
+    silent_payment_groups: Dict[ECPubKey, List[ECPubKey]] = {}
+    for recipient in recipients:
+        B_scan, B_m = decode_silent_payment_address(recipient, hrp=hrp)
+        if B_scan in silent_payment_groups:
+            silent_payment_groups[B_scan].append(B_m)
+        else:
+            silent_payment_groups[B_scan] = [B_m]
+
+    outputs = []
+    for B_scan, B_m_values in silent_payment_groups.items():
+        ecdh_shared_secret = input_hash * a_sum * B_scan
+        k = 0
+        for B_m in B_m_values:
+            t_k = TaggedHash("BIP0352/SharedSecret", ecdh_shared_secret.get_bytes(False) + ser_uint32(k))
+            P_km = B_m + t_k * G
+            outputs.append(P_km.get_bytes().hex())
+            k += 1
+
+    return list(set(outputs))
+
+
+def scanning(b_scan: ECKey, B_spend: ECPubKey, A_sum: ECPubKey, input_hash: bytes, outputs_to_check: List[ECPubKey], labels: Dict[str, str] = {}) -> List[Dict[str, str]]:
+    G = ECKey().set(1).get_pubkey()
+    ecdh_shared_secret = input_hash * b_scan * A_sum
+    k = 0
+    wallet = []
+    while True:
+        t_k = TaggedHash("BIP0352/SharedSecret", ecdh_shared_secret.get_bytes(False) + ser_uint32(k))
+        P_k = B_spend + t_k * G
+        for output in outputs_to_check:
+            if P_k == output:
+                wallet.append({"pub_key": P_k.get_bytes().hex(), "priv_key_tweak": t_k.hex()})
+                outputs_to_check.remove(output)
+                k += 1
+                break
+            elif labels:
+                m_G_sub = output - P_k
+                if m_G_sub.get_bytes(False).hex() in labels:
+                    P_km = P_k + m_G_sub
+                    wallet.append({
+                        "pub_key": P_km.get_bytes().hex(),
+                        "priv_key_tweak": (ECKey().set(t_k).add(
+                            bytes.fromhex(labels[m_G_sub.get_bytes(False).hex()])
+                        )).get_bytes().hex(),
+                    })
+                    outputs_to_check.remove(output)
+                    k += 1
+                    break
+                else:
+                    output.negate()
+                    m_G_sub = output - P_k
+                    if m_G_sub.get_bytes(False).hex() in labels:
+                        P_km = P_k + m_G_sub
+                        wallet.append({
+                            "pub_key": P_km.get_bytes().hex(),
+                            "priv_key_tweak": (ECKey().set(t_k).add(
+                                bytes.fromhex(labels[m_G_sub.get_bytes(False).hex()])
+                            )).get_bytes().hex(),
+                        })
+                        outputs_to_check.remove(output)
+                        k += 1
+                        break
+        else:
+            break
+    return wallet
+
+
+if __name__ == "__main__":
+    if len(argv) != 2 or argv[1] in ('-h', '--help'):
+        print("Usage: ./reference.py send_and_receive_test_vectors.json")
+        exit(0)
+
+    with open(argv[1], "r") as f:
+        test_data = json.loads(f.read())
+
+    # G , needed for generating the labels "database"
+    G = ECKey().set(1).get_pubkey()
+    for case in test_data:
+        print(case["comment"])
+        # Test sending
+        for sending_test in case["sending"]:
+            given = sending_test["given"]
+            expected = sending_test["expected"]
+
+            vins = [
+                VinInfo(
+                    outpoint=COutPoint(hash=deser_txid(input["txid"]), n=input["vout"]),
+                    scriptSig=bytes.fromhex(input["scriptSig"]),
+                    txinwitness=CTxInWitness().deserialize(from_hex(input["txinwitness"])),
+                    prevout=bytes.fromhex(input["prevout"]["scriptPubKey"]["hex"]),
+                    private_key=ECKey().set(bytes.fromhex(input["private_key"])),
+                )
+                for input in given["vin"]
+            ]
+            # Conver the tuples to lists so they can be easily compared to the json list of lists from the given test vectors
+            input_priv_keys = []
+            input_pub_keys = []
+            for vin in vins:
+                pubkey = get_pubkey_from_input(vin)
+                if not pubkey.valid:
+                    continue
+                input_priv_keys.append((
+                    vin.private_key,
+                    is_p2tr(vin.prevout),
+                ))
+                input_pub_keys.append(pubkey)
+
+            sending_outputs = []
+            if (len(input_pub_keys) > 0):
+                A_sum = reduce(lambda x, y: x + y, input_pub_keys)
+                input_hash = get_input_hash([vin.outpoint for vin in vins], A_sum)
+                sending_outputs = create_outputs(input_priv_keys, input_hash, given["recipients"], hrp="sp")
+
+                # Note: order doesn't matter for creating/finding the outputs. However, different orderings of the recipient addresses
+                # will produce different generated outputs if sending to multiple silent payment addresses belonging to the
+                # same sender but with different labels. Because of this, expected["outputs"] contains all possible valid output sets,
+                # based on all possible permutations of recipient address orderings. Must match exactly one of the possible output sets.
+                assert(any(set(sending_outputs) == set(lst) for lst in expected["outputs"])), "Sending test failed"
+            else:
+                assert(sending_outputs == expected["outputs"][0] == []), "Sending test failed"
+
+        # Test receiving
+        msg = hashlib.sha256(b"message").digest()
+        aux = hashlib.sha256(b"random auxiliary data").digest()
+        for receiving_test in case["receiving"]:
+            given = receiving_test["given"]
+            expected = receiving_test["expected"]
+            outputs_to_check = [
+                ECPubKey().set(bytes.fromhex(p)) for p in given["outputs"]
+            ]
+            vins = [
+                VinInfo(
+                    outpoint=COutPoint(hash=deser_txid(input["txid"]), n=input["vout"]),
+                    scriptSig=bytes.fromhex(input["scriptSig"]),
+                    txinwitness=CTxInWitness().deserialize(from_hex(input["txinwitness"])),
+                    prevout=bytes.fromhex(input["prevout"]["scriptPubKey"]["hex"]),
+                )
+                for input in given["vin"]
+            ]
+            # Check that the given inputs for the receiving test match what was generated during the sending test
+            receiving_addresses = []
+            b_scan = ECKey().set(bytes.fromhex(given["key_material"]["scan_priv_key"]))
+            b_spend = ECKey().set(
+                bytes.fromhex(given["key_material"]["spend_priv_key"])
+            )
+            B_scan = b_scan.get_pubkey()
+            B_spend = b_spend.get_pubkey()
+            receiving_addresses.append(
+                encode_silent_payment_address(B_scan, B_spend, hrp="sp")
+            )
+            if given["labels"]:
+                for label in given["labels"]:
+                    receiving_addresses.append(
+                        create_labeled_silent_payment_address(
+                            b_scan, B_spend, m=label, hrp="sp"
+                        )
+                    )
+
+            # Check that the silent payment addresses match for the given BIP32 seed and labels dictionary
+            assert (receiving_addresses == expected["addresses"]), "Receiving addresses don't match"
+            input_pub_keys = []
+            for vin in vins:
+                pubkey = get_pubkey_from_input(vin)
+                if not pubkey.valid:
+                    continue
+                input_pub_keys.append(pubkey)
+
+            add_to_wallet = []
+            if (len(input_pub_keys) > 0):
+                A_sum = reduce(lambda x, y: x + y, input_pub_keys)
+                input_hash = get_input_hash([vin.outpoint for vin in vins], A_sum)
+                pre_computed_labels = {
+                    (generate_label(b_scan, label) * G).get_bytes(False).hex(): generate_label(b_scan, label).hex()
+                    for label in given["labels"]
+                }
+                add_to_wallet = scanning(
+                    b_scan=b_scan,
+                    B_spend=B_spend,
+                    A_sum=A_sum,
+                    input_hash=input_hash,
+                    outputs_to_check=outputs_to_check,
+                    labels=pre_computed_labels,
+                )
+
+            # Check that the private key is correct for the found output public key
+            for output in add_to_wallet:
+                pub_key = ECPubKey().set(bytes.fromhex(output["pub_key"]))
+                full_private_key = b_spend.add(bytes.fromhex(output["priv_key_tweak"]))
+                if full_private_key.get_pubkey().get_y() % 2 != 0:
+                    full_private_key.negate()
+
+                sig = full_private_key.sign_schnorr(msg, aux)
+                assert pub_key.verify_schnorr(sig, msg), f"Invalid signature for {pub_key}"
+                output["signature"] = sig.hex()
+
+            # Note: order doesn't matter for creating/finding the outputs. However, different orderings of the recipient addresses
+            # will produce different generated outputs if sending to multiple silent payment addresses belonging to the
+            # same sender but with different labels. Because of this, expected["outputs"] contains all possible valid output sets,
+            # based on all possible permutations of recipient address orderings. Must match exactly one of the possible found output
+            # sets in expected["outputs"]
+            generated_set = {frozenset(d.items()) for d in add_to_wallet}
+            expected_set = {frozenset(d.items()) for d in expected["outputs"]}
+            assert generated_set == expected_set, "Receive test failed"
+
+
+    print("All tests passed")
diff --git a/bip-0352/secp256k1.py b/bip-0352/secp256k1.py
new file mode 100644
index 00000000..0ccbc4e6
--- /dev/null
+++ b/bip-0352/secp256k1.py
@@ -0,0 +1,696 @@
+# Copyright (c) 2019 Pieter Wuille
+# Distributed under the MIT software license, see the accompanying
+# file COPYING or http://www.opensource.org/licenses/mit-license.php.
+"""Test-only secp256k1 elliptic curve implementation
+
+WARNING: This code is slow, uses bad randomness, does not properly protect
+keys, and is trivially vulnerable to side channel attacks. Do not use for
+anything but tests."""
+import random
+import hashlib
+import hmac
+
+def TaggedHash(tag, data):
+    ss = hashlib.sha256(tag.encode('utf-8')).digest()
+    ss += ss
+    ss += data
+    return hashlib.sha256(ss).digest()
+
+def modinv(a, n):
+    """Compute the modular inverse of a modulo n
+
+    See https://en.wikipedia.org/wiki/Extended_Euclidean_algorithm#Modular_integers.
+    """
+    t1, t2 = 0, 1
+    r1, r2 = n, a
+    while r2 != 0:
+        q = r1 // r2
+        t1, t2 = t2, t1 - q * t2
+        r1, r2 = r2, r1 - q * r2
+    if r1 > 1:
+        return None
+    if t1 < 0:
+        t1 += n
+    return t1
+
+def jacobi_symbol(n, k):
+    """Compute the Jacobi symbol of n modulo k
+
+    See http://en.wikipedia.org/wiki/Jacobi_symbol
+
+    For our application k is always prime, so this is the same as the Legendre symbol."""
+    assert k > 0 and k & 1, "jacobi symbol is only defined for positive odd k"
+    n %= k
+    t = 0
+    while n != 0:
+        while n & 1 == 0:
+            n >>= 1
+            r = k & 7
+            t ^= (r == 3 or r == 5)
+        n, k = k, n
+        t ^= (n & k & 3 == 3)
+        n = n % k
+    if k == 1:
+        return -1 if t else 1
+    return 0
+
+def modsqrt(a, p):
+    """Compute the square root of a modulo p when p % 4 = 3.
+
+    The Tonelli-Shanks algorithm can be used. See https://en.wikipedia.org/wiki/Tonelli-Shanks_algorithm
+
+    Limiting this function to only work for p % 4 = 3 means we don't need to
+    iterate through the loop. The highest n such that p - 1 = 2^n Q with Q odd
+    is n = 1. Therefore Q = (p-1)/2 and sqrt = a^((Q+1)/2) = a^((p+1)/4)
+
+    secp256k1's is defined over field of size 2**256 - 2**32 - 977, which is 3 mod 4.
+    """
+    if p % 4 != 3:
+        raise NotImplementedError("modsqrt only implemented for p % 4 = 3")
+    sqrt = pow(a, (p + 1)//4, p)
+    if pow(sqrt, 2, p) == a % p:
+        return sqrt
+    return None
+
+def int_or_bytes(s):
+    "Convert 32-bytes to int while accepting also int and returning it as is."
+    if isinstance(s, bytes):
+        assert(len(s) == 32)
+        s = int.from_bytes(s, 'big')
+    elif not isinstance(s, int):
+        raise TypeError
+    return s
+
+class EllipticCurve:
+    def __init__(self, p, a, b):
+        """Initialize elliptic curve y^2 = x^3 + a*x + b over GF(p)."""
+        self.p = p
+        self.a = a % p
+        self.b = b % p
+
+    def affine(self, p1):
+        """Convert a Jacobian point tuple p1 to affine form, or None if at infinity.
+
+        An affine point is represented as the Jacobian (x, y, 1)"""
+        x1, y1, z1 = p1
+        if z1 == 0:
+            return None
+        inv = modinv(z1, self.p)
+        inv_2 = (inv**2) % self.p
+        inv_3 = (inv_2 * inv) % self.p
+        return ((inv_2 * x1) % self.p, (inv_3 * y1) % self.p, 1)
+
+    def has_even_y(self, p1):
+        """Whether the point p1 has an even Y coordinate when expressed in affine coordinates."""
+        return not (p1[2] == 0 or self.affine(p1)[1] & 1)
+
+    def negate(self, p1):
+        """Negate a Jacobian point tuple p1."""
+        x1, y1, z1 = p1
+        return (x1, (self.p - y1) % self.p, z1)
+
+    def on_curve(self, p1):
+        """Determine whether a Jacobian tuple p is on the curve (and not infinity)"""
+        x1, y1, z1 = p1
+        z2 = pow(z1, 2, self.p)
+        z4 = pow(z2, 2, self.p)
+        return z1 != 0 and (pow(x1, 3, self.p) + self.a * x1 * z4 + self.b * z2 * z4 - pow(y1, 2, self.p)) % self.p == 0
+
+    def is_x_coord(self, x):
+        """Test whether x is a valid X coordinate on the curve."""
+        x_3 = pow(x, 3, self.p)
+        return jacobi_symbol(x_3 + self.a * x + self.b, self.p) != -1
+
+    def lift_x(self, x):
+        """Given an X coordinate on the curve, return a corresponding affine point."""
+        x_3 = pow(x, 3, self.p)
+        v = x_3 + self.a * x + self.b
+        y = modsqrt(v, self.p)
+        if y is None:
+            return None
+        return (x, y, 1)
+
+    def double(self, p1):
+        """Double a Jacobian tuple p1
+
+        See https://en.wikibooks.org/wiki/Cryptography/Prime_Curve/Jacobian_Coordinates - Point Doubling"""
+        x1, y1, z1 = p1
+        if z1 == 0:
+            return (0, 1, 0)
+        y1_2 = (y1**2) % self.p
+        y1_4 = (y1_2**2) % self.p
+        x1_2 = (x1**2) % self.p
+        s = (4*x1*y1_2) % self.p
+        m = 3*x1_2
+        if self.a:
+            m += self.a * pow(z1, 4, self.p)
+        m = m % self.p
+        x2 = (m**2 - 2*s) % self.p
+        y2 = (m*(s - x2) - 8*y1_4) % self.p
+        z2 = (2*y1*z1) % self.p
+        return (x2, y2, z2)
+
+    def add_mixed(self, p1, p2):
+        """Add a Jacobian tuple p1 and an affine tuple p2
+
+        See https://en.wikibooks.org/wiki/Cryptography/Prime_Curve/Jacobian_Coordinates - Point Addition (with affine point)"""
+        x1, y1, z1 = p1
+        x2, y2, z2 = p2
+        assert(z2 == 1)
+        # Adding to the point at infinity is a no-op
+        if z1 == 0:
+            return p2
+        z1_2 = (z1**2) % self.p
+        z1_3 = (z1_2 * z1) % self.p
+        u2 = (x2 * z1_2) % self.p
+        s2 = (y2 * z1_3) % self.p
+        if x1 == u2:
+            if (y1 != s2):
+                # p1 and p2 are inverses. Return the point at infinity.
+                return (0, 1, 0)
+            # p1 == p2. The formulas below fail when the two points are equal.
+            return self.double(p1)
+        h = u2 - x1
+        r = s2 - y1
+        h_2 = (h**2) % self.p
+        h_3 = (h_2 * h) % self.p
+        u1_h_2 = (x1 * h_2) % self.p
+        x3 = (r**2 - h_3 - 2*u1_h_2) % self.p
+        y3 = (r*(u1_h_2 - x3) - y1*h_3) % self.p
+        z3 = (h*z1) % self.p
+        return (x3, y3, z3)
+
+    def add(self, p1, p2):
+        """Add two Jacobian tuples p1 and p2
+
+        See https://en.wikibooks.org/wiki/Cryptography/Prime_Curve/Jacobian_Coordinates - Point Addition"""
+        x1, y1, z1 = p1
+        x2, y2, z2 = p2
+        # Adding the point at infinity is a no-op
+        if z1 == 0:
+            return p2
+        if z2 == 0:
+            return p1
+        # Adding an Affine to a Jacobian is more efficient since we save field multiplications and squarings when z = 1
+        if z1 == 1:
+            return self.add_mixed(p2, p1)
+        if z2 == 1:
+            return self.add_mixed(p1, p2)
+        z1_2 = (z1**2) % self.p
+        z1_3 = (z1_2 * z1) % self.p
+        z2_2 = (z2**2) % self.p
+        z2_3 = (z2_2 * z2) % self.p
+        u1 = (x1 * z2_2) % self.p
+        u2 = (x2 * z1_2) % self.p
+        s1 = (y1 * z2_3) % self.p
+        s2 = (y2 * z1_3) % self.p
+        if u1 == u2:
+            if (s1 != s2):
+                # p1 and p2 are inverses. Return the point at infinity.
+                return (0, 1, 0)
+            # p1 == p2. The formulas below fail when the two points are equal.
+            return self.double(p1)
+        h = u2 - u1
+        r = s2 - s1
+        h_2 = (h**2) % self.p
+        h_3 = (h_2 * h) % self.p
+        u1_h_2 = (u1 * h_2) % self.p
+        x3 = (r**2 - h_3 - 2*u1_h_2) % self.p
+        y3 = (r*(u1_h_2 - x3) - s1*h_3) % self.p
+        z3 = (h*z1*z2) % self.p
+        return (x3, y3, z3)
+
+    def mul(self, ps):
+        """Compute a (multi) point multiplication
+
+        ps is a list of (Jacobian tuple, scalar) pairs.
+        """
+        r = (0, 1, 0)
+        for i in range(255, -1, -1):
+            r = self.double(r)
+            for (p, n) in ps:
+                if ((n >> i) & 1):
+                    r = self.add(r, p)
+        return r
+
+SECP256K1_FIELD_SIZE = 2**256 - 2**32 - 977
+SECP256K1 = EllipticCurve(SECP256K1_FIELD_SIZE, 0, 7)
+SECP256K1_G = (0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798, 0x483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8, 1)
+SECP256K1_ORDER = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141
+SECP256K1_ORDER_HALF = SECP256K1_ORDER // 2
+NUMS_H = 0x50929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0
+
+class ECPubKey():
+    """A secp256k1 public key"""
+
+    def __init__(self):
+        """Construct an uninitialized public key"""
+        self.valid = False
+
+    def __repr__(self):
+        return self.get_bytes().hex()
+
+    def __eq__(self, other):
+        assert isinstance(other, ECPubKey)
+        return self.get_bytes() == other.get_bytes()
+
+    def __hash__(self):
+        return hash(self.get_bytes())
+
+    def set(self, data):
+        """Construct a public key from a serialization in compressed or uncompressed DER format or BIP340 format"""
+        if (len(data) == 65 and data[0] == 0x04):
+            p = (int.from_bytes(data[1:33], 'big'), int.from_bytes(data[33:65], 'big'), 1)
+            self.valid = SECP256K1.on_curve(p)
+            if self.valid:
+                self.p = p
+                self.compressed = False
+        elif (len(data) == 33 and (data[0] == 0x02 or data[0] == 0x03)):
+            x = int.from_bytes(data[1:33], 'big')
+            if SECP256K1.is_x_coord(x):
+                p = SECP256K1.lift_x(x)
+                # if the oddness of the y co-ord isn't correct, find the other
+                # valid y
+                if (p[1] & 1) != (data[0] & 1):
+                    p = SECP256K1.negate(p)
+                self.p = p
+                self.valid = True
+                self.compressed = True
+            else:
+                self.valid = False
+        elif (len(data) == 32):
+            x = int.from_bytes(data[0:32], 'big')
+            if SECP256K1.is_x_coord(x):
+                p = SECP256K1.lift_x(x)
+                # if the oddness of the y co-ord isn't correct, find the other
+                # valid y
+                if p[1]%2 != 0:
+                    p = SECP256K1.negate(p)
+                self.p = p
+                self.valid = True
+                self.compressed = True
+            else:
+                self.valid = False
+        else:
+            self.valid = False
+        return self
+
+    @property
+    def is_compressed(self):
+        return self.compressed
+
+    @property
+    def is_valid(self):
+        return self.valid
+
+    def get_y(self):
+        return SECP256K1.affine(self.p)[1]
+
+    def get_x(self):
+        return SECP256K1.affine(self.p)[0]
+
+    def get_bytes(self, bip340=True):
+        assert(self.valid)
+        p = SECP256K1.affine(self.p)
+        if p is None:
+            return None
+        if bip340:
+            return bytes(p[0].to_bytes(32, 'big'))
+        elif self.compressed:
+            return bytes([0x02 + (p[1] & 1)]) + p[0].to_bytes(32, 'big')
+        else:
+            return bytes([0x04]) + p[0].to_bytes(32, 'big') + p[1].to_bytes(32, 'big')
+
+    def verify_ecdsa(self, sig, msg, low_s=True):
+        """Verify a strictly DER-encoded ECDSA signature against this pubkey.
+
+        See https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm for the
+        ECDSA verifier algorithm"""
+        assert(self.valid)
+
+        # Extract r and s from the DER formatted signature. Return false for
+        # any DER encoding errors.
+        if (sig[1] + 2 != len(sig)):
+            return False
+        if (len(sig) < 4):
+            return False
+        if (sig[0] != 0x30):
+            return False
+        if (sig[2] != 0x02):
+            return False
+        rlen = sig[3]
+        if (len(sig) < 6 + rlen):
+            return False
+        if rlen < 1 or rlen > 33:
+            return False
+        if sig[4] >= 0x80:
+            return False
+        if (rlen > 1 and (sig[4] == 0) and not (sig[5] & 0x80)):
+            return False
+        r = int.from_bytes(sig[4:4+rlen], 'big')
+        if (sig[4+rlen] != 0x02):
+            return False
+        slen = sig[5+rlen]
+        if slen < 1 or slen > 33:
+            return False
+        if (len(sig) != 6 + rlen + slen):
+            return False
+        if sig[6+rlen] >= 0x80:
+            return False
+        if (slen > 1 and (sig[6+rlen] == 0) and not (sig[7+rlen] & 0x80)):
+            return False
+        s = int.from_bytes(sig[6+rlen:6+rlen+slen], 'big')
+
+        # Verify that r and s are within the group order
+        if r < 1 or s < 1 or r >= SECP256K1_ORDER or s >= SECP256K1_ORDER:
+            return False
+        if low_s and s >= SECP256K1_ORDER_HALF:
+            return False
+        z = int.from_bytes(msg, 'big')
+
+        # Run verifier algorithm on r, s
+        w = modinv(s, SECP256K1_ORDER)
+        u1 = z*w % SECP256K1_ORDER
+        u2 = r*w % SECP256K1_ORDER
+        R = SECP256K1.affine(SECP256K1.mul([(SECP256K1_G, u1), (self.p, u2)]))
+        if R is None or R[0] != r:
+            return False
+        return True
+
+    def verify_schnorr(self, sig, msg):
+        assert(len(msg) == 32)
+        assert(len(sig) == 64)
+        assert(self.valid)
+        r = int.from_bytes(sig[0:32], 'big')
+        if r >= SECP256K1_FIELD_SIZE:
+            return False
+        s = int.from_bytes(sig[32:64], 'big')
+        if s >= SECP256K1_ORDER:
+            return False
+        e = int.from_bytes(TaggedHash("BIP0340/challenge", sig[0:32] + self.get_bytes() + msg), 'big') % SECP256K1_ORDER
+        R = SECP256K1.mul([(SECP256K1_G, s), (self.p, SECP256K1_ORDER - e)])
+        if not SECP256K1.has_even_y(R):
+            return False
+        if ((r * R[2] * R[2]) % SECP256K1_FIELD_SIZE) != R[0]:
+            return False
+        return True
+
+    def __add__(self, other):
+        """Adds two ECPubKey points."""
+        assert isinstance(other, ECPubKey)
+        assert self.valid
+        assert other.valid
+        ret = ECPubKey()
+        ret.p = SECP256K1.add(other.p, self.p)
+        ret.valid = True
+        ret.compressed = self.compressed
+        return ret
+
+    def __radd__(self, other):
+        """Allows this ECPubKey to be added to 0 for sum()"""
+        if other == 0:
+            return self
+        else:
+            return self + other
+
+    def __mul__(self, other):
+        """Multiplies ECPubKey point with a scalar(int/32bytes/ECKey)."""
+        if isinstance(other, ECKey):
+            assert self.valid
+            assert other.secret is not None
+            multiplier = other.secret
+        else:
+            # int_or_bytes checks that other is `int` or `bytes`
+            multiplier = int_or_bytes(other)
+
+        assert multiplier < SECP256K1_ORDER
+        multiplier = multiplier % SECP256K1_ORDER
+        ret = ECPubKey()
+        ret.p = SECP256K1.mul([(self.p, multiplier)])
+        ret.valid = True
+        ret.compressed = self.compressed
+        return ret
+
+    def __rmul__(self, other):
+        """Multiplies a scalar(int/32bytes/ECKey) with an ECPubKey point"""
+        return self * other
+
+    def __sub__(self, other):
+        """Subtract one point from another"""
+        assert isinstance(other, ECPubKey)
+        assert self.valid
+        assert other.valid
+        ret = ECPubKey()
+        ret.p = SECP256K1.add(self.p, SECP256K1.negate(other.p))
+        ret.valid = True
+        ret.compressed = self.compressed
+        return ret
+
+    def tweak_add(self, tweak):
+        assert(self.valid)
+        t = int_or_bytes(tweak)
+        if t >= SECP256K1_ORDER:
+            return None
+        tweaked = SECP256K1.affine(SECP256K1.mul([(self.p, 1), (SECP256K1_G, t)]))
+        if tweaked is None:
+            return None
+        ret = ECPubKey()
+        ret.p = tweaked
+        ret.valid = True
+        ret.compressed = self.compressed
+        return ret
+
+    def mul(self, data):
+        """Multiplies ECPubKey point with scalar data."""
+        assert self.valid
+        other = ECKey()
+        other.set(data, True)
+        return self * other
+
+    def negate(self):
+        self.p = SECP256K1.affine(SECP256K1.negate(self.p))
+
+def rfc6979_nonce(key):
+    """Compute signing nonce using RFC6979."""
+    v = bytes([1] * 32)
+    k = bytes([0] * 32)
+    k = hmac.new(k, v + b"\x00" + key, 'sha256').digest()
+    v = hmac.new(k, v, 'sha256').digest()
+    k = hmac.new(k, v + b"\x01" + key, 'sha256').digest()
+    v = hmac.new(k, v, 'sha256').digest()
+    return hmac.new(k, v, 'sha256').digest()
+
+class ECKey():
+    """A secp256k1 private key"""
+
+    def __init__(self):
+        self.valid = False
+
+    def __repr__(self):
+        return str(self.secret)
+
+    def __eq__(self, other):
+        assert isinstance(other, ECKey)
+        return self.secret == other.secret
+
+    def __hash__(self):
+        return hash(self.secret)
+
+    def set(self, secret, compressed=True):
+        """Construct a private key object from either 32-bytes or an int secret and a compressed flag."""
+        secret = int_or_bytes(secret)
+
+        self.valid = (secret > 0 and secret < SECP256K1_ORDER)
+        if self.valid:
+            self.secret = secret
+            self.compressed = compressed
+        return self
+
+    def generate(self, compressed=True):
+        """Generate a random private key (compressed or uncompressed)."""
+        self.set(random.randrange(1, SECP256K1_ORDER).to_bytes(32, 'big'), compressed)
+        return self
+
+    def get_bytes(self):
+        """Retrieve the 32-byte representation of this key."""
+        assert(self.valid)
+        return self.secret.to_bytes(32, 'big')
+
+    def as_int(self):
+        return self.secret
+
+    def from_int(self, secret, compressed=True):
+        self.valid = (secret > 0 and secret < SECP256K1_ORDER)
+        if self.valid:
+            self.secret = secret
+            self.compressed = compressed
+
+    def __add__(self, other):
+        """Add key secrets. Returns compressed key."""
+        assert isinstance(other, ECKey)
+        assert other.secret > 0 and other.secret < SECP256K1_ORDER
+        assert self.valid is True
+        ret_data = ((self.secret + other.secret) % SECP256K1_ORDER).to_bytes(32, 'big')
+        ret = ECKey()
+        ret.set(ret_data, True)
+        return ret
+
+    def __radd__(self, other):
+        """Allows this ECKey to be added to 0 for sum()"""
+        if other == 0:
+            return self
+        else:
+            return self + other
+
+    def __sub__(self, other):
+        """Subtract key secrets. Returns compressed key."""
+        assert isinstance(other, ECKey)
+        assert other.secret > 0 and other.secret < SECP256K1_ORDER
+        assert self.valid is True
+        ret_data = ((self.secret - other.secret) % SECP256K1_ORDER).to_bytes(32, 'big')
+        ret = ECKey()
+        ret.set(ret_data, True)
+        return ret
+
+    def __mul__(self, other):
+        """Multiply a private key by another private key or multiply a public key by a private key. Returns compressed key."""
+        if isinstance(other, ECKey):
+            assert other.secret > 0 and other.secret < SECP256K1_ORDER
+            assert self.valid is True
+            ret_data = ((self.secret * other.secret) % SECP256K1_ORDER).to_bytes(32, 'big')
+            ret = ECKey()
+            ret.set(ret_data, True)
+            return ret
+        elif isinstance(other, ECPubKey):
+            return other * self
+        else:
+            # ECKey().set() checks that other is an `int` or `bytes`
+            assert self.valid
+            second = ECKey().set(other, self.compressed)
+            return self * second
+
+    def __rmul__(self, other):
+        return self * other
+
+    def add(self, data):
+        """Add key to scalar data. Returns compressed key."""
+        other = ECKey()
+        other.set(data, True)
+        return self + other
+
+    def mul(self, data):
+        """Multiply key secret with scalar data. Returns compressed key."""
+        other = ECKey()
+        other.set(data, True)
+        return self * other
+
+    def negate(self):
+        """Negate a private key."""
+        assert self.valid
+        self.secret = SECP256K1_ORDER - self.secret
+
+    @property
+    def is_valid(self):
+        return self.valid
+
+    @property
+    def is_compressed(self):
+        return self.compressed
+
+    def get_pubkey(self):
+        """Compute an ECPubKey object for this secret key."""
+        assert(self.valid)
+        ret = ECPubKey()
+        p = SECP256K1.mul([(SECP256K1_G, self.secret)])
+        ret.p = p
+        ret.valid = True
+        ret.compressed = self.compressed
+        return ret
+
+    def sign_ecdsa(self, msg, low_s=True, rfc6979=False):
+        """Construct a DER-encoded ECDSA signature with this key.
+
+        See https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm for the
+        ECDSA signer algorithm."""
+        assert(self.valid)
+        z = int.from_bytes(msg, 'big')
+        # Note: no RFC6979 by default, but a simple random nonce (some tests rely on distinct transactions for the same operation)
+        if rfc6979:
+            k = int.from_bytes(rfc6979_nonce(self.secret.to_bytes(32, 'big') + msg), 'big')
+        else:
+            k = random.randrange(1, SECP256K1_ORDER)
+        R = SECP256K1.affine(SECP256K1.mul([(SECP256K1_G, k)]))
+        r = R[0] % SECP256K1_ORDER
+        s = (modinv(k, SECP256K1_ORDER) * (z + self.secret * r)) % SECP256K1_ORDER
+        if low_s and s > SECP256K1_ORDER_HALF:
+            s = SECP256K1_ORDER - s
+        # Represent in DER format. The byte representations of r and s have
+        # length rounded up (255 bits becomes 32 bytes and 256 bits becomes 33
+        # bytes).
+        rb = r.to_bytes((r.bit_length() + 8) // 8, 'big')
+        sb = s.to_bytes((s.bit_length() + 8) // 8, 'big')
+        return b'\x30' + bytes([4 + len(rb) + len(sb), 2, len(rb)]) + rb + bytes([2, len(sb)]) + sb
+
+    def sign_schnorr(self, msg, aux=None):
+        """Create a Schnorr signature (see BIP340)."""
+        if aux is None:
+            aux = bytes(32)
+
+        assert self.valid
+        assert len(msg) == 32
+        assert len(aux) == 32
+
+        t = (self.secret ^ int.from_bytes(TaggedHash("BIP0340/aux", aux), 'big')).to_bytes(32, 'big')
+        kp = int.from_bytes(TaggedHash("BIP0340/nonce", t + self.get_pubkey().get_bytes() + msg), 'big') % SECP256K1_ORDER
+        assert kp != 0
+        R = SECP256K1.affine(SECP256K1.mul([(SECP256K1_G, kp)]))
+        k = kp if SECP256K1.has_even_y(R) else SECP256K1_ORDER - kp
+        e = int.from_bytes(TaggedHash("BIP0340/challenge", R[0].to_bytes(32, 'big') + self.get_pubkey().get_bytes() + msg), 'big') % SECP256K1_ORDER
+        return R[0].to_bytes(32, 'big') + ((k + e * self.secret) % SECP256K1_ORDER).to_bytes(32, 'big')
+
+    def tweak_add(self, tweak):
+        """Return a tweaked version of this private key."""
+        assert(self.valid)
+        t = int_or_bytes(tweak)
+        if t >= SECP256K1_ORDER:
+            return None
+        tweaked = (self.secret + t) % SECP256K1_ORDER
+        if tweaked == 0:
+            return None
+        ret = ECKey()
+        ret.set(tweaked.to_bytes(32, 'big'), self.compressed)
+        return ret
+
+def generate_key_pair(secret=None, compressed=True):
+    """Convenience function to generate a private-public key pair."""
+    d = ECKey()
+    if secret:
+        d.set(secret, compressed)
+    else:
+        d.generate(compressed)
+
+    P = d.get_pubkey()
+    return d, P
+
+def generate_bip340_key_pair():
+    """Convenience function to generate a BIP0340 private-public key pair."""
+    d = ECKey()
+    d.generate()
+    P = d.get_pubkey()
+    if P.get_y()%2 != 0:
+        d.negate()
+        P.negate()
+    return d, P
+
+def generate_schnorr_nonce():
+    """Generate a random valid BIP340 nonce.
+
+    See https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki.
+    This implementation ensures the y-coordinate of the nonce point is even."""
+    kp = random.randrange(1, SECP256K1_ORDER)
+    assert kp != 0
+    R = SECP256K1.affine(SECP256K1.mul([(SECP256K1_G, kp)]))
+    k = kp if R[1] % 2 == 0 else SECP256K1_ORDER - kp
+    k_key = ECKey()
+    k_key.set(k.to_bytes(32, 'big'), True)
+    return k_key
diff --git a/bip-0352/send_and_receive_test_vectors.json b/bip-0352/send_and_receive_test_vectors.json
new file mode 100644
index 00000000..f9b205b8
--- /dev/null
+++ b/bip-0352/send_and_receive_test_vectors.json
@@ -0,0 +1,2673 @@
+[
+    {
+        "comment": "Simple send: two inputs",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            },
+                            "private_key": "93f5ed907ad5b2bdbbdcb5d9116ebc0a4e1f92f910d5260237fa45a9408aad16"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "3e9fce73d4e77a4809908e3c3a2e54ee147b9312dc5044a193d1fc85de46e3c1"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "3e9fce73d4e77a4809908e3c3a2e54ee147b9312dc5044a193d1fc85de46e3c1"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "f438b40179a3c4262de12986c0e6cce0634007cdc79c1dcd3e20b9ebc2e7eef6",
+                            "pub_key": "3e9fce73d4e77a4809908e3c3a2e54ee147b9312dc5044a193d1fc85de46e3c1",
+                            "signature": "74f85b856337fbe837643b86f462118159f93ac4acc2671522f27e8f67b079959195ccc7a5dbee396d2909f5d680d6e30cda7359aa2755822509b70d6b0687a1"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Simple send: two inputs, order reversed",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            },
+                            "private_key": "93f5ed907ad5b2bdbbdcb5d9116ebc0a4e1f92f910d5260237fa45a9408aad16"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "3e9fce73d4e77a4809908e3c3a2e54ee147b9312dc5044a193d1fc85de46e3c1"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "3e9fce73d4e77a4809908e3c3a2e54ee147b9312dc5044a193d1fc85de46e3c1"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "f438b40179a3c4262de12986c0e6cce0634007cdc79c1dcd3e20b9ebc2e7eef6",
+                            "pub_key": "3e9fce73d4e77a4809908e3c3a2e54ee147b9312dc5044a193d1fc85de46e3c1",
+                            "signature": "74f85b856337fbe837643b86f462118159f93ac4acc2671522f27e8f67b079959195ccc7a5dbee396d2909f5d680d6e30cda7359aa2755822509b70d6b0687a1"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Simple send: two inputs from the same transaction",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 3,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 7,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            },
+                            "private_key": "93f5ed907ad5b2bdbbdcb5d9116ebc0a4e1f92f910d5260237fa45a9408aad16"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "79e71baa2ba3fc66396de3a04f168c7bf24d6870ec88ca877754790c1db357b6"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 3,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 7,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "79e71baa2ba3fc66396de3a04f168c7bf24d6870ec88ca877754790c1db357b6"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "4851455bfbe1ab4f80156570aa45063201aa5c9e1b1dcd29f0f8c33d10bf77ae",
+                            "pub_key": "79e71baa2ba3fc66396de3a04f168c7bf24d6870ec88ca877754790c1db357b6",
+                            "signature": "10332eea808b6a13f70059a8a73195808db782012907f5ba32b6eae66a2f66b4f65147e2b968a1678c5f73d57d5d195dbaf667b606ff80c8490eac1f3b710657"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Simple send: two inputs from the same transaction, order reversed",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 7,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 3,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            },
+                            "private_key": "93f5ed907ad5b2bdbbdcb5d9116ebc0a4e1f92f910d5260237fa45a9408aad16"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "f4c2da807f89cb1501f1a77322a895acfb93c28e08ed2724d2beb8e44539ba38"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 7,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 3,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "f4c2da807f89cb1501f1a77322a895acfb93c28e08ed2724d2beb8e44539ba38"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "ab0c9b87181bf527879f48db9f14a02233619b986f8e8f2d5d408ce68a709f51",
+                            "pub_key": "f4c2da807f89cb1501f1a77322a895acfb93c28e08ed2724d2beb8e44539ba38",
+                            "signature": "398a9790865791a9db41a8015afad3a47d60fec5086c50557806a49a1bc038808632b8fe679a7bb65fc6b455be994502eed849f1da3729cd948fc7be73d67295"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Outpoint ordering byte-lexicographically vs. vout-integer",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 1,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 256,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            },
+                            "private_key": "93f5ed907ad5b2bdbbdcb5d9116ebc0a4e1f92f910d5260237fa45a9408aad16"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "a85ef8701394b517a4b35217c4bd37ac01ebeed4b008f8d0879f9e09ba95319c"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 1,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 256,
+                            "scriptSig": "48304602210086783ded73e961037e77d49d9deee4edc2b23136e9728d56e4491c80015c3a63022100fda4c0f21ea18de29edbce57f7134d613e044ee150a89e2e64700de2d4e83d4e2103bd85685d03d111699b15d046319febe77f8de5286e9e512703cdee1bf3be3792",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914d9317c66f54ff0a152ec50b1d19c25be50c8e15988ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "a85ef8701394b517a4b35217c4bd37ac01ebeed4b008f8d0879f9e09ba95319c"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "c8ac0292997b5bca98b3ebd99a57e253071137550f270452cd3df8a3e2266d36",
+                            "pub_key": "a85ef8701394b517a4b35217c4bd37ac01ebeed4b008f8d0879f9e09ba95319c",
+                            "signature": "c036ee38bfe46aba03234339ae7219b31b824b52ef9d5ce05810a0d6f62330dedc2b55652578aa5bdabf930fae941acd839d5a66f8fce7caa9710ccb446bddd1"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: multiple UTXOs from the same public key",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "548ae55c8eec1e736e8d3e520f011f1f42a56d166116ad210b3937599f87f566"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "548ae55c8eec1e736e8d3e520f011f1f42a56d166116ad210b3937599f87f566"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "f032695e2636619efa523fffaa9ef93c8802299181fd0461913c1b8daf9784cd",
+                            "pub_key": "548ae55c8eec1e736e8d3e520f011f1f42a56d166116ad210b3937599f87f566",
+                            "signature": "f238386c5d5e5444f8d2c75aabbcb28c346f208c76f60823f5de3b67b79e0ec72ea5de2d7caec314e0971d3454f122dda342b3eede01b3857e83654e36b25f76"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: taproot only inputs with even y-values",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140bd1e708f92dbeaf24a6b8dd22e59c6274355424d62baea976b449e220fd75b13578e262ab11b7aa58e037f0c6b0519b66803b7d9decaa1906dedebfb531c56c1",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "5120782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338"
+                                }
+                            },
+                            "private_key": "fc8716a97a48ba9a05a98ae47b5cd201a25a7fd5d8b73c203c5f7b6b6b3b6ad7"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "de88bea8e7ffc9ce1af30d1132f910323c505185aec8eae361670421e749a1fb"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140bd1e708f92dbeaf24a6b8dd22e59c6274355424d62baea976b449e220fd75b13578e262ab11b7aa58e037f0c6b0519b66803b7d9decaa1906dedebfb531c56c1",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "5120782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "de88bea8e7ffc9ce1af30d1132f910323c505185aec8eae361670421e749a1fb"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "3fb9ce5ce1746ced103c8ed254e81f6690764637ddbc876ec1f9b3ddab776b03",
+                            "pub_key": "de88bea8e7ffc9ce1af30d1132f910323c505185aec8eae361670421e749a1fb",
+                            "signature": "c5acd25a8f021a4192f93bc34403fd8b76484613466336fb259c72d04c169824f2690ca34e96cee86b69f376c8377003268fda56feeb1b873e5783d7e19bcca5"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: taproot only with mixed even/odd y-values",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "01400a4d0dca6293f40499394d7eefe14a1de11e0e3454f51de2e802592abf5ee549042a1b1a8fb2e149ee9dd3f086c1b69b2f182565ab6ecf599b1ec9ebadfda6c5",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51208c8d23d4764feffcd5e72e380802540fa0f88e3d62ad5e0b47955f74d7b283c4"
+                                }
+                            },
+                            "private_key": "1d37787c2b7116ee983e9f9c13269df29091b391c04db94239e0d2bc2182c3bf"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "77cab7dd12b10259ee82c6ea4b509774e33e7078e7138f568092241bf26b99f1"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "01400a4d0dca6293f40499394d7eefe14a1de11e0e3454f51de2e802592abf5ee549042a1b1a8fb2e149ee9dd3f086c1b69b2f182565ab6ecf599b1ec9ebadfda6c5",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51208c8d23d4764feffcd5e72e380802540fa0f88e3d62ad5e0b47955f74d7b283c4"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "77cab7dd12b10259ee82c6ea4b509774e33e7078e7138f568092241bf26b99f1"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "f5382508609771068ed079b24e1f72e4a17ee6d1c979066bf1d4e2a5676f09d4",
+                            "pub_key": "77cab7dd12b10259ee82c6ea4b509774e33e7078e7138f568092241bf26b99f1",
+                            "signature": "ff65833b8fd1ed3ef9d0443b4f702b45a3f2dd457ba247687e8207745c3be9d2bdad0ab3f07118f8b2efc6a04b95f7b3e218daf8a64137ec91bd2fc67fc137a5"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: taproot input with even y-value and non-taproot input",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "463044021f24e010c6e475814740ba24c8cf9362c4db1276b7f46a7b1e63473159a80ec30221008198e8ece7b7f88e6c6cc6bb8c86f9f00b7458222a8c91addf6e1577bcf7697e2103e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9148cbc7dfe44f1579bff3340bbef1eddeaeb1fc97788ac"
+                                }
+                            },
+                            "private_key": "8d4751f6e8a3586880fb66c19ae277969bd5aa06f61c4ee2f1e2486efdf666d3"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "30523cca96b2a9ae3c98beb5e60f7d190ec5bc79b2d11a0b2d4d09a608c448f0"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "463044021f24e010c6e475814740ba24c8cf9362c4db1276b7f46a7b1e63473159a80ec30221008198e8ece7b7f88e6c6cc6bb8c86f9f00b7458222a8c91addf6e1577bcf7697e2103e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9148cbc7dfe44f1579bff3340bbef1eddeaeb1fc97788ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "30523cca96b2a9ae3c98beb5e60f7d190ec5bc79b2d11a0b2d4d09a608c448f0"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "b40017865c79b1fcbed68896791be93186d08f47e416b289b8c063777e14e8df",
+                            "pub_key": "30523cca96b2a9ae3c98beb5e60f7d190ec5bc79b2d11a0b2d4d09a608c448f0",
+                            "signature": "d1edeea28cf1033bcb3d89376cabaaaa2886cbd8fda112b5c61cc90a4e7f1878bdd62180b07d1dfc8ffee1863c525a0c7b5bcd413183282cfda756cb65787266"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: taproot input with odd y-value and non-taproot input",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "01400a4d0dca6293f40499394d7eefe14a1de11e0e3454f51de2e802592abf5ee549042a1b1a8fb2e149ee9dd3f086c1b69b2f182565ab6ecf599b1ec9ebadfda6c5",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51208c8d23d4764feffcd5e72e380802540fa0f88e3d62ad5e0b47955f74d7b283c4"
+                                }
+                            },
+                            "private_key": "1d37787c2b7116ee983e9f9c13269df29091b391c04db94239e0d2bc2182c3bf"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "463044021f24e010c6e475814740ba24c8cf9362c4db1276b7f46a7b1e63473159a80ec30221008198e8ece7b7f88e6c6cc6bb8c86f9f00b7458222a8c91addf6e1577bcf7697e2103e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9148cbc7dfe44f1579bff3340bbef1eddeaeb1fc97788ac"
+                                }
+                            },
+                            "private_key": "8d4751f6e8a3586880fb66c19ae277969bd5aa06f61c4ee2f1e2486efdf666d3"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "359358f59ee9e9eec3f00bdf4882570fd5c182e451aa2650b788544aff012a3a"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "01400a4d0dca6293f40499394d7eefe14a1de11e0e3454f51de2e802592abf5ee549042a1b1a8fb2e149ee9dd3f086c1b69b2f182565ab6ecf599b1ec9ebadfda6c5",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51208c8d23d4764feffcd5e72e380802540fa0f88e3d62ad5e0b47955f74d7b283c4"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "463044021f24e010c6e475814740ba24c8cf9362c4db1276b7f46a7b1e63473159a80ec30221008198e8ece7b7f88e6c6cc6bb8c86f9f00b7458222a8c91addf6e1577bcf7697e2103e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9148cbc7dfe44f1579bff3340bbef1eddeaeb1fc97788ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "359358f59ee9e9eec3f00bdf4882570fd5c182e451aa2650b788544aff012a3a"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "a2f9dd05d1d398347c885d9c61a64d18a264de6d49cea4326bafc2791d627fa7",
+                            "pub_key": "359358f59ee9e9eec3f00bdf4882570fd5c182e451aa2650b788544aff012a3a",
+                            "signature": "96038ad233d8befe342573a6e54828d863471fb2afbad575cc65271a2a649480ea14912b6abbd3fbf92efc1928c036f6e3eef927105af4ec1dd57cb909f360b8"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Multiple outputs: multiple outputs, same recipient",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca",
+                        "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "d97e442d110c0bdd31161a7bb6e7862e038d02a09b1484dfbb463f2e0f7c9230",
+                            "pub_key": "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca",
+                            "signature": "29bd25d0f808d7fcd2aa6d5ed206053899198397506c301b218a9e47a3d7070af03e903ff718978d50d1b6b9af8cc0e313d84eda5d5b1e8e85e5516d630bbeb9"
+                        },
+                        {
+                            "priv_key_tweak": "33ce085c3c11eaad13694aae3c20301a6c83382ec89a7cde96c6799e2f88805a",
+                            "pub_key": "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac",
+                            "signature": "335667ca6cae7a26438f5cfdd73b3d48fa832fa9768521d7d5445f22c203ab0d74ed85088f27d29959ba627a4509996676f47df8ff284d292567b1beef0e3912"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Multiple outputs: multiple outputs, multiple recipients",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgrz6j0lcqnc04vxccydl0kpsj4frfje0ktmgcl2t346hkw30226xqupawdf48k8882j0strrvcmgg2kdawz53a54dd376ngdhak364hzcmynqtn",
+                        "sp1qqgrz6j0lcqnc04vxccydl0kpsj4frfje0ktmgcl2t346hkw30226xqupawdf48k8882j0strrvcmgg2kdawz53a54dd376ngdhak364hzcmynqtn"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "2e847bb01d1b491da512ddd760b8509617ee38057003d6115d00ba562451323a",
+                            "841792c33c9dc6193e76744134125d40add8f2f4a96475f28ba150be032d64e8",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "2e847bb01d1b491da512ddd760b8509617ee38057003d6115d00ba562451323a",
+                        "841792c33c9dc6193e76744134125d40add8f2f4a96475f28ba150be032d64e8",
+                        "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9902c3c56e84002a7cd410113a9ab21d142be7f53cf5200720bb01314c5eb920",
+                        "scan_priv_key": "060b751d7892149006ed7b98606955a29fe284a1e900070c0971f5fb93dbf422"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgrz6j0lcqnc04vxccydl0kpsj4frfje0ktmgcl2t346hkw30226xqupawdf48k8882j0strrvcmgg2kdawz53a54dd376ngdhak364hzcmynqtn"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "72cd082cccb633bf85240a83494b32dc943a4d05647a6686d23ad4ca59c0ebe4",
+                            "pub_key": "2e847bb01d1b491da512ddd760b8509617ee38057003d6115d00ba562451323a",
+                            "signature": "38745f3d9f5eef0b1cfb17ca314efa8c521efab28a23aa20ec5e3abb561d42804d539906dce60c4ee7977966184e6f2cab1faa0e5377ceb7148ec5218b4e7878"
+                        },
+                        {
+                            "priv_key_tweak": "2f17ea873a0047fc01ba8010fef0969e76d0e4283f600d48f735098b1fee6eb9",
+                            "pub_key": "841792c33c9dc6193e76744134125d40add8f2f4a96475f28ba150be032d64e8",
+                            "signature": "c26f4e3cf371b90b840f48ea0e761b5ec31883ed55719f9ef06a90e282d85f565790ab780a3f491bc2668cc64e944dca849d1022a878cdadb8d168b8da4a6da3"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Receiving with labels: label with even parity",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjex54dmqmmv6rw353tsuqhs99ydvadxzrsy9nuvk74epvee55drs734pqq"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "d014d4860f67d607d60b1af70e0ee236b99658b61bb769832acbbe87c374439a"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "d014d4860f67d607d60b1af70e0ee236b99658b61bb769832acbbe87c374439a"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": [
+                        2,
+                        3,
+                        1001337
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjex54dmqmmv6rw353tsuqhs99ydvadxzrsy9nuvk74epvee55drs734pqq",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqsg59z2rppn4qlkx0yz9sdltmjv3j8zgcqadjn4ug98m3t6plujsq9qvu5n",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgq7c2zfthc6x3a5yecwc52nxa0kfd20xuz08zyrjpfw4l2j257yq6qgnkdh5"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "51d4e9d0d482b5700109b4b2e16ff508269b03d800192a043d61dca4a0a72a52",
+                            "pub_key": "d014d4860f67d607d60b1af70e0ee236b99658b61bb769832acbbe87c374439a",
+                            "signature": "c30fa63bad6f0a317f39a773a5cbf0b0f8193c71dfebba05ee6ae4ed28e3775e6e04c3ea70a83703bb888122855dc894cab61692e7fd10c9b3494d479a60785e"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Receiving with labels: label with odd parity",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqsg59z2rppn4qlkx0yz9sdltmjv3j8zgcqadjn4ug98m3t6plujsq9qvu5n"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "67626aebb3c4307cf0f6c39ca23247598fabf675ab783292eb2f81ae75ad1f8c"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "67626aebb3c4307cf0f6c39ca23247598fabf675ab783292eb2f81ae75ad1f8c"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": [
+                        2,
+                        3,
+                        1001337
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjex54dmqmmv6rw353tsuqhs99ydvadxzrsy9nuvk74epvee55drs734pqq",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqsg59z2rppn4qlkx0yz9sdltmjv3j8zgcqadjn4ug98m3t6plujsq9qvu5n",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgq7c2zfthc6x3a5yecwc52nxa0kfd20xuz08zyrjpfw4l2j257yq6qgnkdh5"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "6024ae214876356b8d917716e7707d267ae16a0fdb07de2a786b74a7bbcddead",
+                            "pub_key": "67626aebb3c4307cf0f6c39ca23247598fabf675ab783292eb2f81ae75ad1f8c",
+                            "signature": "a86d554d0d6b7aa0907155f7e0b47f0182752472fffaeddd68da90e99b9402f166fd9b33039c302c7115098d971c1399e67c19e9e4de180b10ea0b9d6f0db832"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Receiving with labels: large label integer",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgq7c2zfthc6x3a5yecwc52nxa0kfd20xuz08zyrjpfw4l2j257yq6qgnkdh5"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "7efa60ce78ac343df8a013a2027c6c5ef29f9502edcbd769d2c21717fecc5951"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "7efa60ce78ac343df8a013a2027c6c5ef29f9502edcbd769d2c21717fecc5951"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": [
+                        2,
+                        3,
+                        1001337
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjex54dmqmmv6rw353tsuqhs99ydvadxzrsy9nuvk74epvee55drs734pqq",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqsg59z2rppn4qlkx0yz9sdltmjv3j8zgcqadjn4ug98m3t6plujsq9qvu5n",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgq7c2zfthc6x3a5yecwc52nxa0kfd20xuz08zyrjpfw4l2j257yq6qgnkdh5"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "e336b92330c33030285ce42e4115ad92d5197913c88e06b9072b4a9b47c664a2",
+                            "pub_key": "7efa60ce78ac343df8a013a2027c6c5ef29f9502edcbd769d2c21717fecc5951",
+                            "signature": "c9e80dd3bdd25ca2d352ce77510f1aed37ba3509dc8cc0677f2d7c2dd04090707950ce9dd6c83d2a428063063aff5c04f1744e334f661f2fc01b4ef80b50f739"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Multiple outputs with labels: un-labeled and labeled address; same recipient",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                        ],
+                        [
+                            "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c",
+                            "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                        "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": [
+                        1
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "43100f89f1a6bf10081c92b473ffc57ceac7dbed600b6aba9bb3976f17dbb914",
+                            "pub_key": "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "signature": "15c92509b67a6c211ebb4a51b7528d0666e6720de2343b2e92cfb97942ca14693c1f1fdc8451acfdb2644039f8f5c76114807fdc3d3a002d8a46afab6756bd75"
+                        },
+                        {
+                            "priv_key_tweak": "33ce085c3c11eaad13694aae3c20301a6c83382ec89a7cde96c6799e2f88805a",
+                            "pub_key": "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac",
+                            "signature": "335667ca6cae7a26438f5cfdd73b3d48fa832fa9768521d7d5445f22c203ab0d74ed85088f27d29959ba627a4509996676f47df8ff284d292567b1beef0e3912"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Multiple outputs with labels: multiple outputs for labeled address; same recipient",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                        "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": [
+                        1
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "43100f89f1a6bf10081c92b473ffc57ceac7dbed600b6aba9bb3976f17dbb914",
+                            "pub_key": "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "signature": "15c92509b67a6c211ebb4a51b7528d0666e6720de2343b2e92cfb97942ca14693c1f1fdc8451acfdb2644039f8f5c76114807fdc3d3a002d8a46afab6756bd75"
+                        },
+                        {
+                            "priv_key_tweak": "9d5fd3b91cac9ddfea6fc2e6f9386f680e6cee623cda02f53706306c081de87f",
+                            "pub_key": "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c",
+                            "signature": "db0dfacc98b6a6fcc67cc4631f080b1ca38c60d8c397f2f19843f8f95ec91594b24e47c5bd39480a861c1209f7e3145c440371f9191fb96e324690101eac8e8e"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Multiple outputs with labels: un-labeled, labeled, and multiple outputs for labeled address; same recipients",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjyh2ju7hd5gj57jg5r9lev3pckk4n2shtzaq34467erzzdfajfggty6aa5",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjyh2ju7hd5gj57jg5r9lev3pckk4n2shtzaq34467erzzdfajfggty6aa5"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "006a02c308ccdbf3ac49f0638f6de128f875db5a213095cf112b3b77722472ae",
+                            "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                            "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa"
+                        ],
+                        [
+                            "006a02c308ccdbf3ac49f0638f6de128f875db5a213095cf112b3b77722472ae",
+                            "3edf1ff6657c6e69568811bd726a7a7f480493aa42161acfe8dd4f44521f99ed",
+                            "7ee1543ed5d123ffa66fbebc128c020173eb490d5fa2ba306e0c9573a77db8f3",
+                            "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa"
+                        ],
+                        [
+                            "006a02c308ccdbf3ac49f0638f6de128f875db5a213095cf112b3b77722472ae",
+                            "7ee1543ed5d123ffa66fbebc128c020173eb490d5fa2ba306e0c9573a77db8f3",
+                            "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c",
+                            "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701"
+                        ],
+                        [
+                            "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "3c54444944d176437644378c23efb999ab6ab1cacdfe1dc1537b607e3df330e2",
+                            "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa",
+                            "f4569fc5f69c10f0082cfbb8e072e6266ec55f69fba8cffca4cbb4c144b7e59b"
+                        ],
+                        [
+                            "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac",
+                            "f4569fc5f69c10f0082cfbb8e072e6266ec55f69fba8cffca4cbb4c144b7e59b"
+                        ],
+                        [
+                            "3c54444944d176437644378c23efb999ab6ab1cacdfe1dc1537b607e3df330e2",
+                            "602e10e6944107c9b48bd885b493676578c935723287e0ab2f8b7f136862568e",
+                            "7ee1543ed5d123ffa66fbebc128c020173eb490d5fa2ba306e0c9573a77db8f3",
+                            "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa"
+                        ],
+                        [
+                            "3c54444944d176437644378c23efb999ab6ab1cacdfe1dc1537b607e3df330e2",
+                            "7ee1543ed5d123ffa66fbebc128c020173eb490d5fa2ba306e0c9573a77db8f3",
+                            "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c",
+                            "f4569fc5f69c10f0082cfbb8e072e6266ec55f69fba8cffca4cbb4c144b7e59b"
+                        ],
+                        [
+                            "3edf1ff6657c6e69568811bd726a7a7f480493aa42161acfe8dd4f44521f99ed",
+                            "7ee1543ed5d123ffa66fbebc128c020173eb490d5fa2ba306e0c9573a77db8f3",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac",
+                            "f4569fc5f69c10f0082cfbb8e072e6266ec55f69fba8cffca4cbb4c144b7e59b"
+                        ],
+                        [
+                            "3edf1ff6657c6e69568811bd726a7a7f480493aa42161acfe8dd4f44521f99ed",
+                            "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa",
+                            "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca",
+                            "f4569fc5f69c10f0082cfbb8e072e6266ec55f69fba8cffca4cbb4c144b7e59b"
+                        ],
+                        [
+                            "602e10e6944107c9b48bd885b493676578c935723287e0ab2f8b7f136862568e",
+                            "7ee1543ed5d123ffa66fbebc128c020173eb490d5fa2ba306e0c9573a77db8f3",
+                            "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                        ],
+                        [
+                            "602e10e6944107c9b48bd885b493676578c935723287e0ab2f8b7f136862568e",
+                            "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                            "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa",
+                            "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca"
+                        ],
+                        [
+                            "83dc944e61603137294829aed56c74c9b087d80f2c021b98a7fae5799000696c",
+                            "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                            "e976a58fbd38aeb4e6093d4df02e9c1de0c4513ae0c588cef68cda5b2f8834ca",
+                            "f4569fc5f69c10f0082cfbb8e072e6266ec55f69fba8cffca4cbb4c144b7e59b"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "006a02c308ccdbf3ac49f0638f6de128f875db5a213095cf112b3b77722472ae",
+                        "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                        "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                        "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": [
+                        1,
+                        1337
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqaxww2fnhrx05cghth75n0qcj59e3e2anscr0q9wyknjxtxycg07y3pevyj",
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjyh2ju7hd5gj57jg5r9lev3pckk4n2shtzaq34467erzzdfajfggty6aa5"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "4e3352fbe0505c25e718d96007c259ef08db34f8c844e4ff742d9855ff03805a",
+                            "pub_key": "006a02c308ccdbf3ac49f0638f6de128f875db5a213095cf112b3b77722472ae",
+                            "signature": "6eeae1ea9eb826e3d0e812f65937100e0836ea188c04f36fabc4981eda29de8d3d3529390a0a8b3d830f7bca4f5eae5994b9788ddaf05ad259ffe26d86144b4b"
+                        },
+                        {
+                            "priv_key_tweak": "43100f89f1a6bf10081c92b473ffc57ceac7dbed600b6aba9bb3976f17dbb914",
+                            "pub_key": "39f42624d5c32a77fda80ff0acee269afec601d3791803e80252ae04e4ffcf4c",
+                            "signature": "15c92509b67a6c211ebb4a51b7528d0666e6720de2343b2e92cfb97942ca14693c1f1fdc8451acfdb2644039f8f5c76114807fdc3d3a002d8a46afab6756bd75"
+                        },
+                        {
+                            "priv_key_tweak": "bf709f98d4418f8a67e738154ae48818dad44689cd37fbc070891a396dd1c633",
+                            "pub_key": "ae1a780c04237bd577283c3ddb2e499767c3214160d5a6b0767e6b8c278bd701",
+                            "signature": "42a19fd8a63dde1824966a95d65a28203e631e49bf96ca5dae1b390e7a0ace2cc8709c9b0c5715047032f57f536a3c80273cbecf4c05be0b5456c183fa122c06"
+                        },
+                        {
+                            "priv_key_tweak": "736f05e4e3072c3b8656bedef2e9bf54cbcaa2b6fe5320d3e86f5b96874dda71",
+                            "pub_key": "ca64abe1e0f737823fb9a94f597eed418fb2df77b1317e26b881a14bb594faaa",
+                            "signature": "2e61bb3d79418ecf55f68847cf121bfc12d397b39d1da8643246b2f0a9b96c3daa4bfe9651beb5c9ce20e1f29282c4566400a4b45ee6657ec3b18fdc554da0b4"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: use silent payments for sender change",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv",
+                        "sp1qqw6vczcfpdh5nf5y2ky99kmqae0tr30hgdfg88parz50cp80wd2wqqlv6saelkk5snl4wfutyxrchpzzwm8rjp3z6q7apna59z9huq4x754e5atr"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "be368e28979d950245d742891ae6064020ba548c1e2e65a639a8bb0675d95cff",
+                            "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "be368e28979d950245d742891ae6064020ba548c1e2e65a639a8bb0675d95cff",
+                        "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "b8f87388cbb41934c50daca018901b00070a5ff6cc25a7e9e716a9d5b9e4d664",
+                        "scan_priv_key": "11b7a82e06ca2648d5fded2366478078ec4fc9dc1d8ff487518226f229d768fd"
+                    },
+                    "labels": [
+                        0
+                    ]
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqw6vczcfpdh5nf5y2ky99kmqae0tr30hgdfg88parz50cp80wd2wqqauj52ymtc4xdkmx3tgyhrsemg2g3303xk2gtzfy8h8ejet8fz8jcw23zua",
+                        "sp1qqw6vczcfpdh5nf5y2ky99kmqae0tr30hgdfg88parz50cp80wd2wqqlv6saelkk5snl4wfutyxrchpzzwm8rjp3z6q7apna59z9huq4x754e5atr"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "80cd767ed20bd0bb7d8ea5e803f8c381293a62e8a073cf46fb0081da46e64e1f",
+                            "pub_key": "be368e28979d950245d742891ae6064020ba548c1e2e65a639a8bb0675d95cff",
+                            "signature": "7fbd5074cf1377273155eefafc7c330cb61b31da252f22206ac27530d2b2567040d9af7808342ed4a09598c26d8307446e4ed77079e6a2e61fea736e44da5f5a"
+                        }
+                    ]
+                }
+            },
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "be368e28979d950245d742891ae6064020ba548c1e2e65a639a8bb0675d95cff",
+                        "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "33ce085c3c11eaad13694aae3c20301a6c83382ec89a7cde96c6799e2f88805a",
+                            "pub_key": "f207162b1a7abc51c42017bef055e9ec1efc3d3567cb720357e2b84325db33ac",
+                            "signature": "335667ca6cae7a26438f5cfdd73b3d48fa832fa9768521d7d5445f22c203ab0d74ed85088f27d29959ba627a4509996676f47df8ff284d292567b1beef0e3912"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Single recipient: taproot input with NUMS point",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0440c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b22205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5ac21c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac00150",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "5120da6f0595ecb302bbe73e2f221f05ab10f336b06817d36fd28fc6691725ddaa85"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140bd1e708f92dbeaf24a6b8dd22e59c6274355424d62baea976b449e220fd75b13578e262ab11b7aa58e037f0c6b0519b66803b7d9decaa1906dedebfb531c56c1",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "5120782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338"
+                                }
+                            },
+                            "private_key": "fc8716a97a48ba9a05a98ae47b5cd201a25a7fd5d8b73c203c5f7b6b6b3b6ad7"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 1,
+                            "scriptSig": "",
+                            "txinwitness": "0340268d31a9276f6380107d5321cafa6d9e8e5ea39204318fdc8206b31507c891c3bbcea3c99e2208d73bd127a8e8c5f1e45a54f1bd217205414ddb566ab7eda0092220e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85dac21c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51200a3c9365ceb131f89b0a4feb6896ebd67bb15a98c31eaa3da143bb955a0f3fcb"
+                                }
+                            },
+                            "private_key": "8d4751f6e8a3586880fb66c19ae277969bd5aa06f61c4ee2f1e2486efdf666d3"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "79e79897c52935bfd97fc6e076a6431a0c7543ca8c31e0fc3cf719bb572c842d"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0440c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b22205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5ac21c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac00150",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "5120da6f0595ecb302bbe73e2f221f05ab10f336b06817d36fd28fc6691725ddaa85"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140bd1e708f92dbeaf24a6b8dd22e59c6274355424d62baea976b449e220fd75b13578e262ab11b7aa58e037f0c6b0519b66803b7d9decaa1906dedebfb531c56c1",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "5120782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 1,
+                            "scriptSig": "",
+                            "txinwitness": "0340268d31a9276f6380107d5321cafa6d9e8e5ea39204318fdc8206b31507c891c3bbcea3c99e2208d73bd127a8e8c5f1e45a54f1bd217205414ddb566ab7eda0092220e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85dac21c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51200a3c9365ceb131f89b0a4feb6896ebd67bb15a98c31eaa3da143bb955a0f3fcb"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "79e79897c52935bfd97fc6e076a6431a0c7543ca8c31e0fc3cf719bb572c842d"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "3ddec3232609d348d6b8b53123b4f40f6d4f5398ca586f087b0416ec3b851496",
+                            "pub_key": "79e79897c52935bfd97fc6e076a6431a0c7543ca8c31e0fc3cf719bb572c842d",
+                            "signature": "d7d06e3afb68363031e4eb18035c46ceae41bdbebe7888a4754bc9848c596436869aeaecff0527649a1f458b71c9ceecec10b535c09d01d720229aa228547706"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Pubkey extraction from malleated p2pkh",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 1,
+                            "scriptSig": "0075473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 2,
+                            "scriptSig": "5163473045022100e7d26e77290b37128f5215ade25b9b908ce87cc9a4d498908b5bb8fd6daa1b8d022002568c3a8226f4f0436510283052bfb780b76f3fe4aa60c4c5eb118e43b187372102e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d67483046022100c0d3c851d3bd562ae93d56bcefd735ea57c027af46145a4d5e9cac113bfeb0c2022100ee5b2239af199fa9b7aa1d98da83a29d0a2cf1e4f29e2f37134ce386d51c544c2102ad0f26ddc7b3fcc340155963b3051b85289c1869612ecb290184ac952e2864ec68",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914c82c5ec473cbc6c86e5ef410e36f9495adcf979988ac"
+                                }
+                            },
+                            "private_key": "72b8ae09175ca7977f04993e651d88681ed932dfb92c5158cdf0161dd23fda6e"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "4612cdbf845c66c7511d70aab4d9aed11e49e48cdb8d799d787101cdd0d53e4f"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 1,
+                            "scriptSig": "0075473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 2,
+                            "scriptSig": "5163473045022100e7d26e77290b37128f5215ade25b9b908ce87cc9a4d498908b5bb8fd6daa1b8d022002568c3a8226f4f0436510283052bfb780b76f3fe4aa60c4c5eb118e43b187372102e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d67483046022100c0d3c851d3bd562ae93d56bcefd735ea57c027af46145a4d5e9cac113bfeb0c2022100ee5b2239af199fa9b7aa1d98da83a29d0a2cf1e4f29e2f37134ce386d51c544c2102ad0f26ddc7b3fcc340155963b3051b85289c1869612ecb290184ac952e2864ec68",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914c82c5ec473cbc6c86e5ef410e36f9495adcf979988ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "4612cdbf845c66c7511d70aab4d9aed11e49e48cdb8d799d787101cdd0d53e4f"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "10bde9781def20d7701e7603ef1b1e5e71c67bae7154818814e3c81ef5b1a3d3",
+                            "pub_key": "4612cdbf845c66c7511d70aab4d9aed11e49e48cdb8d799d787101cdd0d53e4f",
+                            "signature": "6137969f810e9e8ef6c9755010e808f5dd1aed705882e44d7f0ae64eb0c509ec8b62a0671bee0d5914ac27d2c463443e28e999d82dc3d3a4919f093872d947bb"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "P2PKH and P2WPKH Uncompressed Keys are skipped",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b974104782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c3799373233387c5343bf58e23269e903335b958a12182f9849297321e8d710e49a8727129cab",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9144b92ac4ac6fe6212393894addda332f2e47a315688ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 1,
+                            "scriptSig": "",
+                            "txinwitness": "02473045022100e7d26e77290b37128f5215ade25b9b908ce87cc9a4d498908b5bb8fd6daa1b8d022002568c3a8226f4f0436510283052bfb780b76f3fe4aa60c4c5eb118e43b187374104e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d6fe8190e189be57d0d5bcd17dbcbcd04c9b4a1c5f605b10d5c90abfcc0d12884",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "00140423f731a07491364e8dce98b7c00bda63336950"
+                                }
+                            },
+                            "private_key": "72b8ae09175ca7977f04993e651d88681ed932dfb92c5158cdf0161dd23fda6e"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "67fee277da9e8542b5d2e6f32d660a9bbd3f0e107c2d53638ab1d869088882d6"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a91419c2f3ae0ca3b642bd3e49598b8da89f50c1416188ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b974104782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c3799373233387c5343bf58e23269e903335b958a12182f9849297321e8d710e49a8727129cab",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9144b92ac4ac6fe6212393894addda332f2e47a315688ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 1,
+                            "scriptSig": "",
+                            "txinwitness": "02473045022100e7d26e77290b37128f5215ade25b9b908ce87cc9a4d498908b5bb8fd6daa1b8d022002568c3a8226f4f0436510283052bfb780b76f3fe4aa60c4c5eb118e43b187374104e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d6fe8190e189be57d0d5bcd17dbcbcd04c9b4a1c5f605b10d5c90abfcc0d12884",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "00140423f731a07491364e8dce98b7c00bda63336950"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "67fee277da9e8542b5d2e6f32d660a9bbd3f0e107c2d53638ab1d869088882d6"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "688fa3aeb97d2a46ae87b03591921c2eaf4b505eb0ddca2733c94701e01060cf",
+                            "pub_key": "67fee277da9e8542b5d2e6f32d660a9bbd3f0e107c2d53638ab1d869088882d6",
+                            "signature": "72e7ad573ac23255d4651d5b0326a200496588acb7a4894b22092236d5eda6a0a9a4d8429b022c2219081fefce5b33795cae488d10f5ea9438849ed8353624f2"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Skip invalid P2SH inputs",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "16001419c2f3ae0ca3b642bd3e49598b8da89f50c14161",
+                            "txinwitness": "02483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "a9148629db5007d5fcfbdbb466637af09daf9125969387"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 1,
+                            "scriptSig": "1600144b92ac4ac6fe6212393894addda332f2e47a3156",
+                            "txinwitness": "02473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b974104782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c3799373233387c5343bf58e23269e903335b958a12182f9849297321e8d710e49a8727129cab",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "a9146c9bf136fbb7305fd99d771a95127fcf87dedd0d87"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 2,
+                            "scriptSig": "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",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "a9141044ddc6cea09e4ac40fbec2ba34ad62de6db25b87"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "67fee277da9e8542b5d2e6f32d660a9bbd3f0e107c2d53638ab1d869088882d6"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "16001419c2f3ae0ca3b642bd3e49598b8da89f50c14161",
+                            "txinwitness": "02483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d621025a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "a9148629db5007d5fcfbdbb466637af09daf9125969387"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 1,
+                            "scriptSig": "1600144b92ac4ac6fe6212393894addda332f2e47a3156",
+                            "txinwitness": "02473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b974104782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c3799373233387c5343bf58e23269e903335b958a12182f9849297321e8d710e49a8727129cab",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "a9146c9bf136fbb7305fd99d771a95127fcf87dedd0d87"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 2,
+                            "scriptSig": "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",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "a9141044ddc6cea09e4ac40fbec2ba34ad62de6db25b87"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "67fee277da9e8542b5d2e6f32d660a9bbd3f0e107c2d53638ab1d869088882d6"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": [
+                        {
+                            "priv_key_tweak": "688fa3aeb97d2a46ae87b03591921c2eaf4b505eb0ddca2733c94701e01060cf",
+                            "pub_key": "67fee277da9e8542b5d2e6f32d660a9bbd3f0e107c2d53638ab1d869088882d6",
+                            "signature": "72e7ad573ac23255d4651d5b0326a200496588acb7a4894b22092236d5eda6a0a9a4d8429b022c2219081fefce5b33795cae488d10f5ea9438849ed8353624f2"
+                        }
+                    ]
+                }
+            }
+        ]
+    },
+    {
+        "comment": "Recipient ignores unrelated outputs",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgrz6j0lcqnc04vxccydl0kpsj4frfje0ktmgcl2t346hkw30226xqupawdf48k8882j0strrvcmgg2kdawz53a54dd376ngdhak364hzcmynqtn"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        [
+                            "841792c33c9dc6193e76744134125d40add8f2f4a96475f28ba150be032d64e8"
+                        ]
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "0140c459b671370d12cfb5acee76da7e3ba7cc29b0b4653e3af8388591082660137d087fdc8e89a612cd5d15be0febe61fc7cdcf3161a26e599a4514aa5c3e86f47b",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "51205a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b972103782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9147cdd63cc408564188e8e472640e921c7c90e651d88ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "841792c33c9dc6193e76744134125d40add8f2f4a96475f28ba150be032d64e8",
+                        "782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": []
+                }
+            }
+        ]
+    },
+    {
+        "comment": "No valid inputs, sender generates no outputs",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d641045a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5c61836c9b1688ba431f7ea3039742251f62f0dca3da1bee58a47fa9b456c2d52",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914460e8b41545d2dbe7e0671f0f573e2232814260a88ac"
+                                }
+                            },
+                            "private_key": "eadc78165ff1f8ea94ad7cfdc54990738a4c53f6e0507b42154201b8e5dff3b1"
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b974104782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c3799373233387c5343bf58e23269e903335b958a12182f9849297321e8d710e49a8727129cab",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9144b92ac4ac6fe6212393894addda332f2e47a315688ac"
+                                }
+                            },
+                            "private_key": "0378e95685b74565fa56751b84a32dfd18545d10d691641b8372e32164fad66a"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        []
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "f4184fc596403b9d638783cf57adfe4c75c605f6356fbc91338530e9831e9e16",
+                            "vout": 0,
+                            "scriptSig": "483046022100ad79e6801dd9a8727f342f31c71c4912866f59dc6e7981878e92c5844a0ce929022100fb0d2393e813968648b9753b7e9871d90ab3d815ebf91820d704b19f4ed224d641045a1e61f898173040e20616d43e9f496fba90338a39faa1ed98fcbaeee4dd9be5c61836c9b1688ba431f7ea3039742251f62f0dca3da1bee58a47fa9b456c2d52",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a914460e8b41545d2dbe7e0671f0f573e2232814260a88ac"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d",
+                            "vout": 0,
+                            "scriptSig": "473045022100a8c61b2d470e393279d1ba54f254b7c237de299580b7fa01ffcc940442ecec4502201afba952f4e4661c40acde7acc0341589031ba103a307b886eb867b23b850b974104782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c3799373233387c5343bf58e23269e903335b958a12182f9849297321e8d710e49a8727129cab",
+                            "txinwitness": "",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "76a9144b92ac4ac6fe6212393894addda332f2e47a315688ac"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "782eeb913431ca6e9b8c2fd80a5f72ed2024ef72a3c6fb10263c379937323338",
+                        "e0ec4f64b3fa2e463ccfcf4e856e37d5e1e20275bc89ec1def9eb098eff1f85d"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "9d6ad855ce3417ef84e836892e5a56392bfba05fa5d97ccea30e266f540e08b3",
+                        "scan_priv_key": "0f694e068028a717f8af6b9411f9a133dd3565258714cc226594b34db90c1f2c"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqgste7k9hx0qftg6qmwlkqtwuy6cycyavzmzj85c6qdfhjdpdjtdgqjuexzk6murw56suy3e0rd2cgqvycxttddwsvgxe2usfpxumr70xc9pkqwv"
+                    ],
+                    "outputs": []
+                }
+            }
+        ]
+    }
+]
\ No newline at end of file

From c2b27a0ce5e13ec5e68d658a7c815e8a045fd8d6 Mon Sep 17 00:00:00 2001
From: josibake 
Date: Mon, 19 Feb 2024 15:45:14 +0100
Subject: [PATCH 078/288] Update README

---
 README.mediawiki | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.mediawiki b/README.mediawiki
index 0ce7b8e8..5e077853 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1107,6 +1107,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0352.mediawiki|352]]
+| Applications
+| Silent Payments
+| josibake, Ruben Somsen
+| Standard
+| Draft
+|-
 | [[bip-0370.mediawiki|370]]
 | Applications
 | PSBT Version 2

From 0ccf42c869b77730b71b69dec4abc299d393a060 Mon Sep 17 00:00:00 2001
From: josie 
Date: Wed, 8 May 2024 17:36:46 +0200
Subject: [PATCH 079/288] Apply suggestions from code review

Punctuation and wording improvements.

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0352.mediawiki | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 8f41bca2..9232d319 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -23,9 +23,9 @@ This BIP is licensed under the BSD 2-clause license.
 
 === Motivation ===
 
-Using a new address for each Bitcoin transaction is a crucial aspect of maintaining privacy. This often requires a secure interaction between sender and receiver so that the receiver can hand out a fresh address, a batch of fresh addresses, or a method for the sender to generate addresses on-demand, such as an xpub.
+Using a new address for each Bitcoin transaction is a crucial aspect of maintaining privacy. This often requires a secure interaction between sender and receiver, so that the receiver can hand out a fresh address, a batch of fresh addresses, or a method for the sender to generate addresses on-demand, such as an xpub.
 
-However, interaction is often infeasible and in many cases undesirable. To solve for this, various protocols have been proposed which use a static payment address and notifications sent via the blockchain'''Why not use out-of-band notifications''' Out of band notifications (e.g. using something other than the Bitcoin blockchain) have been proposed as a way of addressing the privacy and cost concerns of using the Bitcoin blockchain as a messaging layer. This, however, simply moves the privacy and cost concerns somewhere else and increases the risk of losing money due to a notification not being reliably delivered, or even censored, and makes this notification data critical for backup to recover funds.. These protocols eliminate the need for interaction, but at the expense of increased costs for one-time payments and a noticeable footprint in the blockchain, potentially revealing metadata about the sender and receiver. Notification schemes also allow the receiver to link all payments from the same sender, compromising sender privacy.
+However, interaction is often infeasible and in many cases undesirable. To solve for this, various protocols have been proposed which use a static payment address and notifications sent via the blockchain'''Why not use out-of-band notifications''' Out-of-band notifications (e.g. using something other than the Bitcoin blockchain) have been proposed as a way of addressing the privacy and cost concerns of using the Bitcoin blockchain as a messaging layer. This, however, simply moves the privacy and cost concerns somewhere else and increases the risk of losing money due to a notification not being reliably delivered, or even censored, and makes this notification data critical for backup to recover funds.. These protocols eliminate the need for interaction, but at the expense of increased costs for one-time payments and a noticeable footprint in the blockchain, potentially revealing metadata about the sender and receiver. Notification schemes also allow the receiver to link all payments from the same sender, compromising sender privacy.
 
 This proposal aims to address the limitations of these current approaches by presenting a solution that eliminates the need for interaction, eliminates the need for notifications, and protects both sender and receiver privacy. These benefits come at the cost of requiring wallets to scan the blockchain in order to detect payments. This added requirement is generally feasible for full nodes but poses a challenge for light clients. While it is possible today to implement a privacy-preserving light client at the cost of increased bandwidth, light client support is considered an area of open research (see [[#appendix-a-light-client-support|Appendix A: Light Client Support]]).
 
@@ -140,7 +140,7 @@ For everything not defined above, we use the notation from [https://github.com/b
 
 === Versions ===
 
-This document defines version 0 (''sp1q''). Version is communicated through the address in the same way as Segwit addresses. Future upgrades to silent payments will require a new version. As much as possible, future upgrades should support receiving from older wallets (e.g. a silent payments v0 wallet can send to both v0 and v1 addresses). Any changes that break compatibility with older silent payment versions should be a new BIP.
+This document defines version 0 (''sp1q''). Version is communicated through the address in the same way as bech32 addresses (see [[https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#bech32 BIP173]]. Future upgrades to silent payments will require a new version. As much as possible, future upgrades should support receiving from older wallets (e.g. a silent payments v0 wallet can send to both v0 and v1 addresses). Any changes that break compatibility with older silent payment versions should be a new BIP.
 
 Future silent payments versions will use the following scheme:
 
@@ -200,7 +200,7 @@ A silent payment address is constructed in the following manner:
 ** The human-readable part "sp" for mainnet, "tsp" for testnets (e.g.  signet, testnet)
 ** The data-part values:
 *** The character "q", to represent a silent payment address of version 0
-*** The 66 byte concatenation of the receiver's public keys, ''serP(Bscan) || serP(Bm)''
+*** The 66-byte concatenation of the receiver's public keys, ''serP(Bscan) || serP(Bm)''
 
 Note: [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki BIP173] imposes a 90 character limit for Bech32 segwit addresses and limits versions to 0 through 16, whereas a silent payment address requires ''at least'' 117 characters ''' Why do silent payment addresses need at least 117 characters?''' A silent payment address is a bech32m encoding comprised of the following parts:
 
@@ -212,7 +212,7 @@ Note: [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki BIP173] im
 * checksum [6 characters]
 
 
-For a silent payments v0 address, this results in a 117 character address when using a 3 character HRP. Future versions of silent payment addresses may add to the payload, which is why a 1023 character limit is suggested. and allows versions up to 31. Additionally, since higher versions may add to the data field, it is recommended implementations use a limit of 1023 characters (see [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#checksum-design BIP173: Checksum design] for more details).
+For a silent payments v0 address, this results in a 117-character address when using a 3-character HRP. Future versions of silent payment addresses may add to the payload, which is why a 1023-character limit is suggested. and allows versions up to 31. Additionally, since higher versions may add to the data field, it is recommended implementations use a limit of 1023 characters (see [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#checksum-design BIP173: Checksum design] for more details).
 
 === Inputs For Shared Secret Derivation ===
 

From ef108e0e7751847bb837702ef62098231eb3da18 Mon Sep 17 00:00:00 2001
From: josibake 
Date: Wed, 8 May 2024 18:04:05 +0200
Subject: [PATCH 080/288] Add post-history

---
 bip-0352.mediawiki | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 9232d319..94c16a15 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -9,6 +9,10 @@
   Type: Standards Track
   Created: 2023-03-09
   License: BSD-2-Clause
+  Post-History: 2022-03-13: https://gist.github.com/RubenSomsen/c43b79517e7cb701ebf77eec6dbb46b8 [gist] Original proposal
+                2022-03-28: https://gnusha.org/pi/bitcoindev/CAPv7TjbXm953U2h+-12MfJ24YqOM5Kcq77_xFTjVK+R2nf-nYg@mail.gmail.com/ [bitcoin-dev] Silent Payments – Non-interactive private payments with no on-chain overhead
+                2022-10-11: https://gnusha.org/pi/bitcoindev/P_21MLHGJicZ-hkbC4DGu86c5BtNKiH8spY4TOw5FJsfimdi_6VyHzU_y-s1mZsOcC2FA3EW_6w6W5qfV9dRK_7AvTAxDlwVfU-yhWZPEuo=@protonmail.com/ [bitcoin-dev] Silent Payment v4 (coinjoin support added)
+                2023-08-04: https://gnusha.org/pi/bitcoindev/ZM03twumu88V2NFH@petertodd.org/ [bitcoin-dev] BIP-352 Silent Payments addresses should have an expiration time
 

 
 == Introduction ==

From 9929215dcf47235bc8a54b8549c2f32f2987463c Mon Sep 17 00:00:00 2001
From: josibake 
Date: Wed, 8 May 2024 18:05:51 +0200
Subject: [PATCH 081/288] Change status to Proposed

---
 README.mediawiki   | 4 ++--
 bip-0352.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 5e077853..fdd27ac4 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1106,13 +1106,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Alfred Hodler, Clark Moody
 | Informational
 | Draft
-|-
+|- style="background-color: #ffffcf"
 | [[bip-0352.mediawiki|352]]
 | Applications
 | Silent Payments
 | josibake, Ruben Somsen
 | Standard
-| Draft
+| Proposed
 |-
 | [[bip-0370.mediawiki|370]]
 | Applications
diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 94c16a15..31d64432 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -5,7 +5,7 @@
   Author: josibake 
           Ruben Somsen 
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0352
-  Status: Draft
+  Status: Proposed
   Type: Standards Track
   Created: 2023-03-09
   License: BSD-2-Clause

From 17e1d168e818c56bd0ecd634e51abbfd1df3b750 Mon Sep 17 00:00:00 2001
From: josibake 
Date: Wed, 8 May 2024 18:07:20 +0200
Subject: [PATCH 082/288] Minor fixups

- Fix link
- Add explanation for scalar multiplication
- Spelling error in test section
---
 bip-0352.mediawiki | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 31d64432..8a4da9dd 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -54,7 +54,7 @@ We aim to present a protocol which satisfies the following properties:
 
 == Overview ==
 
-We first present an informal overview of the protocol. In what follows, uppercase letters represent public keys, lowercase letters represent private keys, ''||'' refers to byte concatenation, ''G'' represents the generator point for secp256k1, and ''n'' represents the curve order for secp256k1. Each section of the overview is incomplete on its own and is meant to build on the previous section in order to introduce and briefly explain each aspect of the protocol. For the full protocol specification, see [[#specification|Specification]].
+We first present an informal overview of the protocol. In what follows, uppercase letters represent public keys, lowercase letters represent private keys, ''||'' refers to byte concatenation, ''·'' refers to elliptic curve scalar multiplication, ''G'' represents the generator point for secp256k1, and ''n'' represents the curve order for secp256k1. Each section of the overview is incomplete on its own and is meant to build on the previous section in order to introduce and briefly explain each aspect of the protocol. For the full protocol specification, see [[#specification|Specification]].
 
 ''' Simple case '''
 
@@ -144,7 +144,7 @@ For everything not defined above, we use the notation from [https://github.com/b
 
 === Versions ===
 
-This document defines version 0 (''sp1q''). Version is communicated through the address in the same way as bech32 addresses (see [[https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#bech32 BIP173]]. Future upgrades to silent payments will require a new version. As much as possible, future upgrades should support receiving from older wallets (e.g. a silent payments v0 wallet can send to both v0 and v1 addresses). Any changes that break compatibility with older silent payment versions should be a new BIP.
+This document defines version 0 (''sp1q''). Version is communicated through the address in the same way as bech32 addresses (see [https://github.com/bitcoin/bips/blob/master/bip-0173.mediawiki#bech32 BIP173]. Future upgrades to silent payments will require a new version. As much as possible, future upgrades should support receiving from older wallets (e.g. a silent payments v0 wallet can send to both v0 and v1 addresses). Any changes that break compatibility with older silent payment versions should be a new BIP.
 
 Future silent payments versions will use the following scheme:
 
@@ -395,7 +395,7 @@ A [[bip-0352/send_and_receive_test_vectors.json|collection of test vectors in JS
         },
         "expected": {
             "outputs": [],
-            "n_outouts": ,
+            "n_outputs": ,
         },
     }
 

From 3b77bc07fdda2c95f924d5760f8a0018c7195d4c Mon Sep 17 00:00:00 2001
From: Tim Ruffing 
Date: Thu, 9 May 2024 10:12:42 +0200
Subject: [PATCH 083/288] BIP324: Remove obsolete test vector file

---
 bip-0324/xswiftec_test_vectors.csv | 33 ------------------------------
 1 file changed, 33 deletions(-)
 delete mode 100644 bip-0324/xswiftec_test_vectors.csv

diff --git a/bip-0324/xswiftec_test_vectors.csv b/bip-0324/xswiftec_test_vectors.csv
deleted file mode 100644
index 985235fb..00000000
--- a/bip-0324/xswiftec_test_vectors.csv
+++ /dev/null
@@ -1,33 +0,0 @@
-u,x,case0_t,case1_t,case2_t,case3_t,case4_t,case5_t,case6_t,case7_t
-08da7c45cb204377e7e42249cda5713fa865116ddbb4cb5a1949b2e5b438a6ab,e087b707dabf2796b03b2fb4f976c3f2f5abb36110d00ef656432117f2c93f0a,,,,,,,,
-0a6361b3a802f55cd5ae06101c88a1e216320fe11cc0cfe1d791eed08a1200fd,a0223bc98997647daf4d520129bdb66e4937a00d1533af1fa29645fb96fb5bb5,60a3ed14bd9df0bfb89ada9372a7b5790b123a66bf130f5788237e8cd5225de4,9c4ee4629f10220fda49532d0c859a539dec5148eefc78bf48d93d2828027a9c,fc5e72f042fd1792cbf88728a374a2cc1e03e1f9ec8813fa3692e497cfa7d5e6,cb39fac005f26dc0a383ea64cb9b3b0b26767f20232cae4486f32904df4f04e3,9f5c12eb42620f404765256c8d584a86f4edc59940ecf0a877dc81722add9e4b,63b11b9d60efddf025b6acd2f37a65ac6213aeb711038740b726c2d6d7fd8193,03a18d0fbd02e86d340778d75c8b5d33e1fc1e061377ec05c96d1b6730582649,34c6053ffa0d923f5c7c159b3464c4f4d98980dfdcd351bb790cd6fa20b0f74c
-102b51b9765a56a3e899f7cf0ee38e5251f9c503b357b330a49183eb7b155604,102b51b9765a56a3e899f7cf0ee38e5251f9c503b357b330a49183eb7b155604,bdb5bd58ca96eae36147a6c55bc2bef2cee55a757ee193cb619edc8d3590f90a,bda953c1da02059350e740b83f59149628e0be50c24ac8dc6908a2225931b4a0,,,424a42a73569151c9eb8593aa43d410d311aa58a811e6c349e612371ca6f0325,4256ac3e25fdfa6caf18bf47c0a6eb69d71f41af3db5372396f75ddca6ce478f,,
-2921a11f25dadaa24aa79a548e4e81508c2e5e56af2d833d65e2bcce448ce2f5,3a70c472406b83d9f1c4398b8ecef786499bc44a3b30c34ac30f2d8a418bffa3,b9c76c21d3fabb948fa0326bf9e999068e9eed56ee4e76cb81558aa26969c56c,ef7dd84338732a0cac3a8995f3bacf9b2896582b8d3317ed508e5d9a5a3447af,,,463893de2c05446b705fcd94061666f9716112a911b189347eaa755c969636c3,108227bcc78cd5f353c5766a0c453064d769a7d472cce812af71a264a5cbb480,,
-33b67cb5385ceddad93d0ee960679041613bed34b8b4a5e6362fe7539ba2d3ce,0105c74958a165e016502eeb87835195505d89714c95272b6fa88fe6c60b33ac,,,069e1b3b155c6da989b9b6a8735bba3c5c1049dcf01fe4474772244db89cf9ca,c77b10bca540e95ee66c1f57ab6297787849a89b2b883116e700593e3c0fe66d,,,f961e4c4eaa39256764649578ca445c3a3efb6230fe01bb8b88ddbb147630265,3884ef435abf16a11993e0a8549d688787b65764d477cee918ffa6c0c3f015c2
-3a898eecdae167231275338e9a79153cbe53f7bf99943eeb72ee64e57bb58699,41ffd7362aaa7b90fe03936deeebe9afafd9c18967122d8f972db2c050d4f07b,60abf7ed2a7ffd3d2ac242a782331ea663d55ca157af994e5e964e9c79a0db40,3c3c39dc37753ab9160dfbc2e0596c3a5114784690caa1836e12036814453da3,adcd3f100de60723f127278998c591fbf081af8e0a77f2a9090bed67d8aa2aa3,,9f540812d58002c2d53dbd587dcce1599c2aa35ea85066b1a169b162865f20ef,c3c3c623c88ac546e9f2043d1fa693c5aeeb87b96f355e7c91edfc96ebbabe8c,5232c0eff219f8dc0ed8d876673a6e040f7e5071f5880d56f6f412972755d18c,
-46e04d129d7b45d054469ce34e24069a1426b3e34f1b68a3d1bff1e070aee192,c6ce9611bd908c16eba5c599e5219de2d18d82c96aafb0180b23ee315513618f,,,,,,,,
-47dc540c94ceb704a23875c11273e16bb0b8a87aed84de911f2133568115f254,13964717dbc998964d7c19ec3d9981fe1d4a9a80845552a98fb9352898532844,,,,,,,,
-4cab73ce2a7e6220975001c8a354143267a3c1ce8bf7692313e654481e616a93,9114cf2edd3b53dbb6581290a5cca532db38b4e9ceeacc9b0437a0e49bf97211,903b600ed648d4ddc48f0f628829c8992c88fab44b692413fb8b3d783854f9a2,2952afe39557606d08c311345788a5071413580917207c86ea7cb829cf2f2c6d,05f414320d0c4004cff10f798c3fda6c4fc335b5a2db940993b3d78147a25c18,48e2531c7e3ec99f807210d6c5330114b4f04d7345535ca5a6e6abf478bdb723,6fc49ff129b72b223b70f09d77d63766d377054bb496dbec0474c286c7ab028d,d6ad501c6aa89f92f73ceecba8775af8ebeca7f6e8df8379158347d530d0cfc2,fa0bebcdf2f3bffb300ef08673c02593b03cca4a5d246bf66c4c287db85da017,b71dace381c136607f8def293accfeeb4b0fb28cbaaca35a5919540a8742450c
-5aeca385d8b781825b07bbec7c858b7170426c88088935850bc13dd6402368a5,a5135c7a27487e7da4f84413837a748e8fbd9377f776ca7af43ec228bfdc938a,8da4f71fb2700758f623d73c24ac91747da43f2302fce16c8d438a769c63495f,6b8f345fc0a25a76455541ddbf2791ff4b943c98b16db2b6eb6cea94a6b19afb,,,725b08e04d8ff8a709dc28c3db536e8b825bc0dcfd031e9372bc7588639cb2d0,9470cba03f5da589baaabe2240d86e00b46bc3674e924d491493156a594e6134,,
-707bf0b938f307b5c222e670598b865d5e1f8a8003df82c7abbf7c9f8fa4d720,8f840f46c70cf84a3ddd198fa67479a2a1e0757ffc207d385440835f705b250f,,,eab90fb459bace62d3ce8fbd69c9f1039f0627d0e93e2f42bffd87889cb236a4,157c26578b226c66daf8edfa56f7560f1131f41d1685175e6d76cc95b4f89f10,,,1546f04ba645319d2c31704296360efc60f9d82f16c1d0bd40027876634dc58b,ea83d9a874dd939925071205a908a9f0eece0be2e97ae8a1928933694b075d1f
-766caa663e1025b9accd7ededd24fbc8193180e028eedae2f41d6bb0b1d36468,22825ee826f8b76c27220e43c79c884a8518bc20f4978cc15f83f9c48346a314,,,8fe95c178da66d1dd249ea6a4dc614a6d46d79c83cbc4beafee518090263e48a,7b044cb756eb207226db302ba05e164781c2f5161dccd72607282cb9ad86a282,,,7016a3e8725992e22db61595b239eb592b928637c343b415011ae7f5fd9c17a5,84fbb348a914df8dd924cfd45fa1e9b87e3d0ae9e23328d9f8d7d345527959ad
-78a23af8da46b1b37e8767921a2d3f528fdc8eca37cea8aea775fd2b283d3776,73d5f35d96f3ce1ef5802ead8edc10787700c593b5e0ddcc3bfb2720b9d36de3,8465ad20bd0f2b4a2d37106769af46288a109bc10b527c3b033c930c0e4b1025,1b7f03bd2c915bb736622aec85601bcabec89268c98945e19a0de4126ed62524,,,7b9a52df42f0d4b5d2c8ef989650b9d775ef643ef4ad83c4fcc36cf2f1b4ec0a,e480fc42d36ea448c99dd5137a9fe43541376d973676ba1e65f21bec9129d70b,,
-78b4be1f9eeef9da65c393e4385f67edd142709b400ca7d900bd952e0c3cf727,089329e17a58a91e71ffe6ddd851e8a352e85a29fcc289b34a3bfdeaf958fe91,,,6008d703955b38da0166bd975ad3535af3b701b2efdf653fc5e7e6eb6afff0a3,,,,9ff728fc6aa4c725fe994268a52caca50c48fe4d10209ac03a18191395000b8c,
-7a2a7c0a81d1bd595dff09b918f8ecb5b5e8493654a4f83496956ed8eb017674,85d583f57e2e42a6a200f646e707134a4a17b6c9ab5b07cb696a912614fe85bb,,,,,,,,
-913da1f8df6f8fd47593840d533ba0458cc9873996bf310460abb495b34c232a,a7803f8e02b70718443a06db502c67925640e936b3fa46dd2ed6b8f7c80fa329,67d916ba2cc154464d87ff4e0cfe3bb816b22a961831c2daf62597a8b0681e87,a4b84520f8853e5482ee7689732ed7dd7da59945d26edeee0bf5f55d3507192f,,,9826e945d33eabb9b27800b1f301c447e94dd569e7ce3d2509da68564f97dda8,5b47badf077ac1ab7d1189768cd12822825a66ba2d912111f40a0aa1caf8e300,,
-96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7,7684ab3b1a43e20a97a7b5520e5b5347841a7d95984fd76b2478a2b710f1a2ce,,,,,,,,
-99be5efb88ca2013bd8e4eb035fd42d5245468fe9afa70d8ba9c1c419a48c4e8,08ee83ae5c7af0c9b2341e595fe347537272d94f2fe9f10b9a8f913279fc6230,,,,,,,,
-9b4fb24edd6d1d8830e272398263cdbf026b97392cc35387b991dc0248a628f9,80e81d40a50b53712a8dac5f468b0903c05219544a56af70aa152ebf17887701,,,6e94af5a32ac100c5230f1e119c538742b7051934b02f3850522cff26bd32d97,e9bd309fbf041342311be3d5bab0b9d16c9f80c6640eb47e311d3178c2adc75d,,,916b50a5cd53eff3adcf0e1ee63ac78bd48fae6cb4fd0c7afadd300c942cce98,1642cf6040fbecbdcee41c2a454f462e93607f399bf14b81cee2ce863d5234d2
-9def996cb1ea87e596b6cadccca3839a352e99d9ce07e635cdb239f38ca294f8,294850a665ab014a0e75eb4b52ee66dd8a8d2b5e453074e58afacb5e019ee90a,b1a29367b95e1996f7e393fb389e7ace812d4135f6ddcdcd77467fc000dfca8c,a340aabc95b4000e3043ba6139178c450046c985fbf09676c440bc6430ddaa5b,4c4cd400d0be335dd651370c5565c2b742a298016212a8605187b3c0751a811e,d90fa208bbb5f3f6e16c5a42b419188ec1951c1eb358f04741b7b48df9e55f79,4e5d6c9846a1e669081c6c04c76185317ed2beca0922323288b9803eff2031a3,5cbf55436a4bfff1cfbc459ec6e873baffb9367a040f69893bbf439acf2251d4,b3b32bff2f41cca229aec8f3aa9a3d48bd5d67fe9ded579fae784c3e8ae57b11,26f05df7444a0c091e93a5bd4be6e7713e6ae3e14ca70fb8be484b71061a9cb6
-a2c4aed1cf757cd9a509734a267ffc7b1166b55f4c8f9c3e3550c56e743328fc,a2c4aed1cf757cd9a509734a267ffc7b1166b55f4c8f9c3e3550c56e743328fc,,,,,,,,
-a8e437abf9c0e74dc6d51eabf2d261a00e785c7e21efeac1f322b610273ba066,5a64cce4be767964e7dba23e78e30149326c539353b647e0d5d7cc361943b13b,,,6f73bdd6b748790b5f788935ca02aee3b9e560c4ba6caf47d716fbde1dd6e92c,b1ff705694188e672f58c6a05eeecc379dd1b60fd3cb9f19fcb02b1d9cab4bc5,,,908c422948b786f4a08776ca35fd511c461a9f3b459350b828e90420e2291303,4e008fa96be77198d0a7395fa11133c8622e49f02c3460e6034fd4e16354b06a
-bf60e4349cace6bce0d552e8d783428db66d0d649bd9e430a3627e2ee14ac839,409f1bcb635319431f2aad17287cbd724992f29b64261bcf5c9d81d01eb533f6,,,,,,,,
-c0ba8a33ac67f44abff5984dfbb6f56c46b880ac2b86e1f23e7fa9c402c53ae7,4767c4cab0d08133980a8e66c3f93a055c8ae62f89a92f8dcfa47607cee0bc57,4c21052f5ffccadb4f707aa1cba828ef384d7861af1690c59d638dfee9f368e7,dbcc8fe22896478161452d44688a6b138050a4d0964470c175a521dcecc5519a,,,b3defad0a0033524b08f855e3457d710c7b2879e50e96f3a629c7200160c9348,2433701dd769b87e9ebad2bb977594ec7faf5b2f69bb8f3e8a5ade22133aaa95,,
-cbe2268747c9c8072c7f9926f2288f270637dc55bb9d14d3368361d5e47d25be,0e4e25736b614910c4984843e606b1e229def08bfd672ab61e2707cde8248c6d,,,c30567184201fac8e1cb9e776d921e17d28cdb7333223abd1c8f860a16393df1,,,,3cfa98e7bdfe05371e346188926de1e82d73248cccddc542e37079f4e9c6be3e,
-ceb827ad3d3884fd4d50ae6099d6d50c09a21e72ebd309708e8b69d93df19e55,a6a0c8c94462f16f1b92502c3d5f9d1618f12ffa756227d5b19b01b9373cd940,,,,,,,,
-d57e9d4f5842134f140032eaf38b5333638e8c4b145fcf86a23d48d3e9acc0f8,2a8162b0a7bdecb0ebffcd150c74accc9c7173b4eba030795dc2b72b16533b37,349a9a592d2c56e5378ae869d646043fc09ffb8fe5fd9debd83a11274da08892,9875f58028cc991cafab9fb1183b350bc1d8d5ce5723813cc2b8434ed1a2100f,,,cb6565a6d2d3a91ac875179629b9fbc03f6004701a02621427c5eed7b25f739d,678a0a7fd73366e35054604ee7c4caf43e272a31a8dc7ec33d47bcb02e5dec20,,
-d94e7f1e9bb1f8a9b90996ba12c461b84956f0e7f230145cc594c2f80b067aa0,b4f4632803cff65c013a566748cd3386d58cd3a28f5b4721056cbe9d278a67a4,,,fad51eda7d418ee2785df9f3788ac9152576312177fc0fd83c65036750581620,749259382784be63f86cc927a5defa6aa8cecb98e38d68f6b7a7e958303c94ad,,,052ae12582be711d87a2060c877536eada89cede8803f027c39afc97afa7e60f,8b6da6c7d87b419c079336d85a210595573134671c729709485816a6cfc36782
-e545d395bb3fd971f91bf9a2b6722831df704efae6c1aa9da0989ed0970b77bb,760486143a1d512da5219d3e5febc7c5c9990d21ca7a501ed23f86c91ddee4cf,,,090892960a84c69967fe5a5d014d3ca19173e4cb72a908586fbce9d1e531a265,42a47f65d00ff2004faa98865ee8ed4f8a9a5ddc9f75042d728de335664bb546,,,f6f76d69f57b39669801a5a2feb2c35e6e8c1b348d56f7a79043162d1ace59ca,bd5b809a2ff00dffb0556779a11712b07565a223608afbd28d721cc999b446e9
-e9f86cefcfd61558fe75da7d4ea48a6c82d93191c6d49579aab49f99e543dcad,5db7371325a7bb83b030691b2d87cd9f199f43d91e302568391ac48181b7cea6,,,,,,,,
-eec4121f2a07b61aba16414812aa9afc39ab0a136360a5ace2240dc19b0464eb,0b623c5296c13218a1eb24e79d00b04bf15788f6c2f7ec100a4a16f1473124a2,,,,,,,,
-f566cc6fccc657365c0197accf3a7d6f80f85209ff666ff774f4dcbc524aa842,0a9933903339a8c9a3fe685330c582907f07adf6009990088b0b2342adb553ed,3ab8dc4ecbc0441c685436ac0d76f16393769c353be6092bd6ec4ce094106bd8,3bd189b4ef3d1baa5610f2b14cb4a2b377eb171511e6f36ef6a05a2c7c52e368,1594764c6296402aadd123675d81f3505d35f2a52c52881568eadb7b675b53f0,c64fbf71138e66de8ce0abdf3b6f51d151ca8e1037ab5b979e62b2faa15be81c,c54723b1343fbbe397abc953f2890e9c6c8963cac419f6d42913b31e6bef9057,c42e764b10c2e455a9ef0d4eb34b5d4c8814e8eaee190c91095fa5d283ad18c7,ea6b89b39d69bfd5522edc98a27e0cafa2ca0d5ad3ad77ea9715248398a4a83f,39b0408eec719921731f5420c490ae2eae3571efc854a468619d4d045ea41413

From 99435fa0b5160f90242ed1cbe852fe17cf291cfb Mon Sep 17 00:00:00 2001
From: "@RandyMcMillan" 
Date: Fri, 10 May 2024 09:39:56 -0400
Subject: [PATCH 084/288] bip-0388.mediawiki:proof of registration

---
 bip-0388.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 4efc5881..511e27c2 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -85,7 +85,7 @@ Once a policy is registered, the hardware signing device can perform the typical
 * showing addresses on the secure screen;
 * sign transactions spending from a wallet, while correctly identifying change addresses and computing the transaction fees.
 
-Before any of the actions mentioned above, the hardware signing device will retrieve the policy from its permanent storage if stateful; if stateless it will validate the _proof of registration_ before using the wallet policy provided by the client.
+Before any of the actions mentioned above, the hardware signing device will retrieve the policy from its permanent storage if stateful; if stateless it will validate the '''proof of registration''' before using the wallet policy provided by the client.
 
 Once the previously registered policy is correctly identified and approved by the user (for example by showing its name), and as long as the policy registration was executed securely, hardware signing devices can provide a user experience similar to the usual one for single-signature transactions.
 

From 3865057e2d5412e9fc7686447c5b377d8e3603ba Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Sat, 11 May 2024 12:17:54 +0200
Subject: [PATCH 085/288] Improve formatting

---
 bip-0388.mediawiki | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 511e27c2..78051455 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -78,14 +78,14 @@ Before a new policy is used for the first time, the user will register a wallet
 # After inspecting the policy and comparing it with a trusted source (for example a printed backup), the user approves the policy.
 # If stateful, the hardware signing device persists the policy in its permanent memory; if stateless, it returns a "proof of registration".
 
-The proof of registration will allow the hardware signer to verify that a certain policy was indeed previously approved by the user, and is therefore safe to use without repeating the expensive user verification procedure. The details of how to create a proof of registration are out of scope for this document; using a Message Authentication Code on a hash committing to the wallet policy, its name and any additional metadata is an effective solution if correctly executed.
+The '''proof of registration''' will allow the hardware signer to verify that a certain policy was indeed previously approved by the user, and is therefore safe to use without repeating the expensive user verification procedure. The details of how to create a proof of registration are out of scope for this document; using a Message Authentication Code on a hash committing to the wallet policy, its name and any additional metadata is an effective solution if correctly executed.
 
 Once a policy is registered, the hardware signing device can perform the typical operations securely:
 * generating receive and change addresses;
 * showing addresses on the secure screen;
 * sign transactions spending from a wallet, while correctly identifying change addresses and computing the transaction fees.
 
-Before any of the actions mentioned above, the hardware signing device will retrieve the policy from its permanent storage if stateful; if stateless it will validate the '''proof of registration''' before using the wallet policy provided by the client.
+Before any of the actions mentioned above, the hardware signing device will retrieve the policy from its permanent storage if stateful; if stateless it will validate the proof of registration before using the wallet policy provided by the client.
 
 Once the previously registered policy is correctly identified and approved by the user (for example by showing its name), and as long as the policy registration was executed securely, hardware signing devices can provide a user experience similar to the usual one for single-signature transactions.
 
@@ -140,7 +140,7 @@ A ''wallet descriptor template'' is a SCRIPT expression.
 
 The /** in the placeholder template represents commonly used paths for receive/change addresses, and is equivalent to <0;1>/*.
 
-Note that while [[bip-0389.mediawiki|BIP-389]] allows multipath `/` expressions with an arbitrary number of options, this specification restricts it to exactly 2 choices (with the typical meaning of receive/change addresses).
+Note that while [[bip-0389.mediawiki|BIP-389]] allows multipath / expressions with an arbitrary number of options, this specification restricts it to exactly 2 choices (with the typical meaning of receive/change addresses).
 
 The placeholder @i for some number ''i'' represents the ''i''-th key in the vector of key information items (which must be of size at least ''i + 1'', or the wallet policy is invalid).
 
@@ -197,7 +197,7 @@ In order to allow supporting legacy derivation schemes (for example, using simpl
 
 However, care needs to be taken in view of the following considerations:
 
-* Allowing derivation schemes with a different length or cardinality in the same wallet policy would make it difficult to guarantee that there are no repeated pubkeys for every possible address generated by the policy. For example, `@0/<0;1>/*` and `@1/*` would generate the same pubkeys if the second public key in the key information vector is one of the first two unhardened children of the first public key. This could cause malleability with potential security implications (for example, in policies containing miniscript).
+* Allowing derivation schemes with a different length or cardinality in the same wallet policy would make it difficult to guarantee that there are no repeated pubkeys for every possible address generated by the policy. For example, @0/<0;1>/* and @1/* would generate the same pubkeys if the second public key in the key information vector is one of the first two unhardened children of the first public key. This could cause malleability with potential security implications (for example, in policies containing miniscript).
 * Allowing naked pubkeys with no /* suffix (for example a descriptor template like wsh(multi(2,@0,@1/<0;1>/*))) would cause a pubkey to be repeated in every output generated from the policy, which would result in a total loss of privacy.
 
 == Examples ==
@@ -226,42 +226,42 @@ Some miniscript policies in wsh:
 [[bip-0044.mediawiki|BIP-44]], first account
  Descriptor template: pkh(@0/**)
  Keys info: ["[6738736c/44'/0'/0']xpub6Br37sWxruYfT8ASpCjVHKGwgdnYFEn98DwiN76i2oyY6fgH1LAPmmDcF46xjxJr22gw4jmVjTE2E3URMnRPEPYyo1zoPSUba563ESMXCeb"]
- Descriptor:pkh([6738736c/44'/0'/0']xpub6Br37sWxruYfT8ASpCjVHKGwgdnYFEn98DwiN76i2oyY6fgH1LAPmmDcF46xjxJr22gw4jmVjTE2E3URMnRPEPYyo1zoPSUba563ESMXCeb)
+ Descriptor: pkh([6738736c/44'/0'/0']xpub6Br37sWxruYfT8ASpCjVHKGwgdnYFEn98DwiN76i2oyY6fgH1LAPmmDcF46xjxJr22gw4jmVjTE2E3URMnRPEPYyo1zoPSUba563ESMXCeb)
 

 [[bip-0049.mediawiki|BIP-49]], second account
  Descriptor template: sh(wpkh(@0/**))
  Keys info: ["[6738736c/49'/0'/1']xpub6Bex1CHWGXNNwGVKHLqNC7kcV348FxkCxpZXyCWp1k27kin8sRPayjZUKDjyQeZzGUdyeAj2emoW5zStFFUAHRgd5w8iVVbLgZ7PmjAKAm9"]
- Descriptor:sh(wpkh([6738736c/49'/0'/1']xpub6Bex1CHWGXNNwGVKHLqNC7kcV348FxkCxpZXyCWp1k27kin8sRPayjZUKDjyQeZzGUdyeAj2emoW5zStFFUAHRgd5w8iVVbLgZ7PmjAKAm9))
+ Descriptor: sh(wpkh([6738736c/49'/0'/1']xpub6Bex1CHWGXNNwGVKHLqNC7kcV348FxkCxpZXyCWp1k27kin8sRPayjZUKDjyQeZzGUdyeAj2emoW5zStFFUAHRgd5w8iVVbLgZ7PmjAKAm9))
 

 [[bip-0084.mediawiki|BIP-84]], third account
  Descriptor template: wpkh(@0/**)
  Keys info: ["[6738736c/84'/0'/2']xpub6CRQzb8u9dmMcq5XAwwRn9gcoYCjndJkhKgD11WKzbVGd932UmrExWFxCAvRnDN3ez6ZujLmMvmLBaSWdfWVn75L83Qxu1qSX4fJNrJg2Gt"]
- Descriptor:wpkh([6738736c/84'/0'/2']xpub6CRQzb8u9dmMcq5XAwwRn9gcoYCjndJkhKgD11WKzbVGd932UmrExWFxCAvRnDN3ez6ZujLmMvmLBaSWdfWVn75L83Qxu1qSX4fJNrJg2Gt)
+ Descriptor: wpkh([6738736c/84'/0'/2']xpub6CRQzb8u9dmMcq5XAwwRn9gcoYCjndJkhKgD11WKzbVGd932UmrExWFxCAvRnDN3ez6ZujLmMvmLBaSWdfWVn75L83Qxu1qSX4fJNrJg2Gt)
 

 [[bip-0086.mediawiki|BIP-86]], first account
  Descriptor template: tr(@0/**)
  Keys info: ["[6738736c/86'/0'/0']xpub6CryUDWPS28eR2cDyojB8G354izmx294BdjeSvH469Ty3o2E6Tq5VjBJCn8rWBgesvTJnyXNAJ3QpLFGuNwqFXNt3gn612raffLWfdHNkYL"]
- Descriptor:tr([6738736c/86'/0'/0']xpub6CryUDWPS28eR2cDyojB8G354izmx294BdjeSvH469Ty3o2E6Tq5VjBJCn8rWBgesvTJnyXNAJ3QpLFGuNwqFXNt3gn612raffLWfdHNkYL)
+ Descriptor: tr([6738736c/86'/0'/0']xpub6CryUDWPS28eR2cDyojB8G354izmx294BdjeSvH469Ty3o2E6Tq5VjBJCn8rWBgesvTJnyXNAJ3QpLFGuNwqFXNt3gn612raffLWfdHNkYL)
 

 [[bip-0048.mediawiki|BIP-48]] P2WSH multisig
  Descriptor template: wsh(sortedmulti(2,@0/**,@1/**))
  Keys info: ["[6738736c/48'/0'/0'/2']xpub6FC1fXFP1GXLX5TKtcjHGT4q89SDRehkQLtbKJ2PzWcvbBHtyDsJPLtpLtkGqYNYZdVVAjRQ5kug9CsapegmmeRutpP7PW4u4wVF9JfkDhw", "[b2b1f0cf/48'/0'/0'/2']xpub6EWhjpPa6FqrcaPBuGBZRJVjzGJ1ZsMygRF26RwN932Vfkn1gyCiTbECVitBjRCkexEvetLdiqzTcYimmzYxyR1BZ79KNevgt61PDcukmC7"]
- Descriptor:wsh(sortedmulti(2,[6738736c/48'/0'/0'/2']xpub6FC1fXFP1GXLX5TKtcjHGT4q89SDRehkQLtbKJ2PzWcvbBHtyDsJPLtpLtkGqYNYZdVVAjRQ5kug9CsapegmmeRutpP7PW4u4wVF9JfkDhw,[b2b1f0cf/48'/0'/0'/2']xpub6EWhjpPa6FqrcaPBuGBZRJVjzGJ1ZsMygRF26RwN932Vfkn1gyCiTbECVitBjRCkexEvetLdiqzTcYimmzYxyR1BZ79KNevgt61PDcukmC7))
+ Descriptor: wsh(sortedmulti(2,[6738736c/48'/0'/0'/2']xpub6FC1fXFP1GXLX5TKtcjHGT4q89SDRehkQLtbKJ2PzWcvbBHtyDsJPLtpLtkGqYNYZdVVAjRQ5kug9CsapegmmeRutpP7PW4u4wVF9JfkDhw,[b2b1f0cf/48'/0'/0'/2']xpub6EWhjpPa6FqrcaPBuGBZRJVjzGJ1ZsMygRF26RwN932Vfkn1gyCiTbECVitBjRCkexEvetLdiqzTcYimmzYxyR1BZ79KNevgt61PDcukmC7))
 

 Miniscript: A 3-of-3 that becomes a 2-of-3 after 90 days
  Descriptor template: wsh(thresh(3,pk(@0/**),s:pk(@1/**),s:pk(@2/**),sln:older(12960)))
  Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js", "[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2"]
- Descriptor:wsh(thresh(3,pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<0,1>/*),s:pk([b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js/<0,1>/*),s:pk([a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2/<0,1>/*),sln:older(12960)))
+ Descriptor: wsh(thresh(3,pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<0,1>/*),s:pk([b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js/<0,1>/*),s:pk([a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2/<0,1>/*),sln:older(12960)))
 

 Miniscript: A singlesig wallet with automatic inheritance to a timelocked 2-of-3 multisig
  Descriptor template: wsh(or_d(pk(@0/**),and_v(v:multi(2,@1/**,@2/**,@3/**),older(65535))))
  Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js", "[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2", "[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ"]
- Descriptor:wsh(or_d(pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa),and_v(v:multi(2,[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js,[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2,[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ),older(65535))))
+ Descriptor: wsh(or_d(pk([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa),and_v(v:multi(2,[b2b1f0cf/44'/0'/0'/100']xpub6EYajCJHe2CK53RLVXrN14uWoEttZgrRSaRztujsXg7yRhGtHmLBt9ot9Pd5ugfwWEu6eWyJYKSshyvZFKDXiNbBcoK42KRZbxwjRQpm5Js,[a666a867/44'/0'/0'/100']xpub6Dgsze3ujLi1EiHoCtHFMS9VLS1UheVqxrHGfP7sBJ2DBfChEUHV4MDwmxAXR2ayeytpwm3zJEU3H3pjCR6q6U5sP2p2qzAD71x9z5QShK2,[bb641298/44'/0'/0'/100']xpub6Dz8PHFmXkYkykQ83ySkruky567XtJb9N69uXScJZqweYiQn6FyieajdiyjCvWzRZ2GoLHMRE1cwDfuJZ6461YvNRGVBJNnLA35cZrQKSRJ),older(65535))))
 

 Taproot wallet policy with sortedmulti_a and a miniscript leaf
  Descriptor template: tr(@0/**,{sortedmulti_a(1,@0/<2;3>/*,@1/**),or_b(pk(@2/**),s:pk(@3/**))})
  Keys info: ["[6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa", "xpub6Fc2TRaCWNgfT49nRGG2G78d1dPnjhW66gEXi7oYZML7qEFN8e21b2DLDipTZZnfV6V7ivrMkvh4VbnHY2ChHTS9qM3XVLJiAgcfagYQk6K", "xpub6GxHB9kRdFfTqYka8tgtX9Gh3Td3A9XS8uakUGVcJ9NGZ1uLrGZrRVr67DjpMNCHprZmVmceFTY4X4wWfksy8nVwPiNvzJ5pjLxzPtpnfEM", "xpub6GjFUVVYewLj5no5uoNKCWuyWhQ1rKGvV8DgXBG9Uc6DvAKxt2dhrj1EZFrTNB5qxAoBkVW3wF8uCS3q1ri9fueAa6y7heFTcf27Q4gyeh6"]
- Descriptor:tr([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<0;1>/*,{sortedmulti_a(1,xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<2;3>/*,xpub6Fc2TRaCWNgfT49nRGG2G78d1dPnjhW66gEXi7oYZML7qEFN8e21b2DLDipTZZnfV6V7ivrMkvh4VbnHY2ChHTS9qM3XVLJiAgcfagYQk6K/<0;1>/*),or_b(pk(xpub6GxHB9kRdFfTqYka8tgtX9Gh3Td3A9XS8uakUGVcJ9NGZ1uLrGZrRVr67DjpMNCHprZmVmceFTY4X4wWfksy8nVwPiNvzJ5pjLxzPtpnfEM/<0;1>/*),s:pk(xpub6GjFUVVYewLj5no5uoNKCWuyWhQ1rKGvV8DgXBG9Uc6DvAKxt2dhrj1EZFrTNB5qxAoBkVW3wF8uCS3q1ri9fueAa6y7heFTcf27Q4gyeh6/<0;1>/*))})
+ Descriptor: tr([6738736c/48'/0'/0'/100']xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<0;1>/*,{sortedmulti_a(1,xpub6FC1fXFP1GXQpyRFfSE1vzzySqs3Vg63bzimYLeqtNUYbzA87kMNTcuy9ubr7MmavGRjW2FRYHP4WGKjwutbf1ghgkUW9H7e3ceaPLRcVwa/<2;3>/*,xpub6Fc2TRaCWNgfT49nRGG2G78d1dPnjhW66gEXi7oYZML7qEFN8e21b2DLDipTZZnfV6V7ivrMkvh4VbnHY2ChHTS9qM3XVLJiAgcfagYQk6K/<0;1>/*),or_b(pk(xpub6GxHB9kRdFfTqYka8tgtX9Gh3Td3A9XS8uakUGVcJ9NGZ1uLrGZrRVr67DjpMNCHprZmVmceFTY4X4wWfksy8nVwPiNvzJ5pjLxzPtpnfEM/<0;1>/*),s:pk(xpub6GjFUVVYewLj5no5uoNKCWuyWhQ1rKGvV8DgXBG9Uc6DvAKxt2dhrj1EZFrTNB5qxAoBkVW3wF8uCS3q1ri9fueAa6y7heFTcf27Q4gyeh6/<0;1>/*))})
 

 
 === Invalid policies ===
@@ -281,7 +281,7 @@ Remark: some of the examples of invalid descriptor templates may be valid via op
 
 == Backwards Compatibility ==
 
-The @ character used for key placeholders is not part of the syntax of output script descriptors, therefore any valid descriptor with at least one `KEY` expression is not a valid descriptor template. Vice versa, any descriptor template with at least one key placeholder is not a valid output script descriptor.
+The @ character used for key placeholders is not part of the syntax of output script descriptors, therefore any valid descriptor with at least one KEY expression is not a valid descriptor template. Vice versa, any descriptor template with at least one key placeholder is not a valid output script descriptor.
 
 Adoption of wallet policies in software and hardware wallets is opt-in. Conversion from wallet policies to the corresponding descriptors is programmatically extremely easy, and conversion from descriptors to wallet policies (when respecting the required patterns) can be automated. See the reference implementation below for some examples of conversion.
 

From 1d7f12d36ab303ad750ca78404e3105822a56fcf Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Sun, 12 May 2024 11:43:24 +0200
Subject: [PATCH 086/288] Update BIP-388 status to 'Proposed'

---
 README.mediawiki   | 4 ++--
 bip-0388.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index fdd27ac4..710e128e 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1190,13 +1190,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Pieter Wuille, Ava Chow
 | Informational
 | Draft
-|-
+|- style="background-color: #ffffcf"
 | [[bip-0388.mediawiki|388]]
 | Applications
 | Wallet Policies for Descriptor Wallets
 | Salvatore Ingala
 | Standard
-| Draft
+| Proposed
 |-
 | [[bip-0389.mediawiki|389]]
 | Applications
diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 78051455..a797643b 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -5,7 +5,7 @@
   Author: Salvatore Ingala 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0388
-  Status: Draft
+  Status: Proposed
   Type: Standards Track
   Created: 2022-11-16
   License: BSD-2-Clause

From e7fef46177e092b2122abad86d5bd02797a7c98b Mon Sep 17 00:00:00 2001
From: Jon Atack 
Date: Sun, 12 May 2024 10:56:34 -0600
Subject: [PATCH 087/288] bip-0388: fix 3 links

---
 bip-0388.mediawiki | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 511e27c2..93f84bc8 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -65,7 +65,7 @@ We set two fundamental design goals:
 * Minimize the amount of information that is shown on screen - so that the user can actually validate it.
 * Minimize the number of times the user has to validate such information.
 
-Designing a secure protocol for the coordination of a descriptor wallet among distant parties is also a challenging problem that is out of scope in this document. See [[bip-00129.mediawiki|BIP-129 (Bitcoin Secure Multisig Setup)]] for an approach designed for multisignature wallets. Regardless of the approach, the ability for the user to carefully verify all the details of the spending policies using the hardware signer's screen is a prerequisite for security in adversarial environments.
+Designing a secure protocol for the coordination of a descriptor wallet among distant parties is also a challenging problem that is out of scope in this document. See [[bip-0129.mediawiki|BIP-129 (Bitcoin Secure Multisig Setup)]] for an approach designed for multisignature wallets. Regardless of the approach, the ability for the user to carefully verify all the details of the spending policies using the hardware signer's screen is a prerequisite for security in adversarial environments.
 
 === Policy registration as a solution ===
 
@@ -136,7 +136,7 @@ A ''wallet descriptor template'' is a SCRIPT expression.
 * ''always'' followed by either:
 ** the string  /**, or
 ** a string of the form //*, for two distinct decimal numbers NUM representing unhardened derivations, or
-** any of the additional, implementation-specific valid derivation path patterns (see [[#Optional_derivation_paths|Optional derivation paths]] below).
+** any of the additional, implementation-specific valid derivation path patterns (see [[#optional-derivation-paths|Optional derivation paths]] below).
 
 The /** in the placeholder template represents commonly used paths for receive/change addresses, and is equivalent to <0;1>/*.
 
@@ -294,7 +294,7 @@ Wallet policies are implemented in
 * the [https://github.com/digitalbitbox/bitbox02-firmware BitBox02 firmware] since version v9.15.0;
 * [https://github.com/Blockstream/Jade Blockstream Jade] since version v1.0.24, via [https://github.com/ElementsProject/libwally-core libwally-core] v1.0.0.
 
-For development and testing purposes, we provide a [[bip-wallet-policies/wallet_policies.py|Python 3.7 reference implementation]] of simple classes to handle wallet policies, and the conversion to/from output script descriptors.
+For development and testing purposes, we provide a [[bip-0388/wallet_policies.py|Python 3.7 reference implementation]] of simple classes to handle wallet policies, and the conversion to/from output script descriptors.
 The reference implementation is for demonstration purposes only and not to be used in production environments.
 
 ==Footnotes==

From 4c689f7cf9f38c939416b2cda5ceea31c275b08c Mon Sep 17 00:00:00 2001
From: Jon Atack 
Date: Sun, 12 May 2024 10:57:45 -0600
Subject: [PATCH 088/288] bip-0388: make reference implementation executable

---
 bip-0388/wallet_policies.py | 2 ++
 1 file changed, 2 insertions(+)
 mode change 100644 => 100755 bip-0388/wallet_policies.py

diff --git a/bip-0388/wallet_policies.py b/bip-0388/wallet_policies.py
old mode 100644
new mode 100755
index 42f615a2..4cd50310
--- a/bip-0388/wallet_policies.py
+++ b/bip-0388/wallet_policies.py
@@ -1,3 +1,5 @@
+#!/usr/bin/env python3
+
 from typing import Iterable, List, Mapping, Tuple, Generator
 
 

From f4693dc0fd10163b0a9ed3ee74d4415e1ca4602c Mon Sep 17 00:00:00 2001
From: Jon Atack 
Date: Sun, 12 May 2024 11:22:34 -0600
Subject: [PATCH 089/288] bip352: fix link to coredev discussion

---
 bip-0352.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 8a4da9dd..0eff355e 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -486,7 +486,7 @@ Wallet designers can choose which tradeoffs they find appropriate. For example,
 
 == Acknowledgements ==
 
-This document is the result of many discussions and contains contributions by a number of people. The authors wish to thank all those who provided valuable feedback and reviews, including the participants of the [https://gist.github.com/RubenSomsen/21c477c90c942acf45f8e8f5c1ad4fae BIP47 Prague discussion], the [https://github.com/josibake/silent-payments-workshop Advancing Bitcoin silent payments Workshop], and [https://btctranscripts.com/bitcoin-core-dev-tech/2023-04-26-silent-payments/ coredev]. The authors would like to also thank [https://github.com/w0xlt w0xlt] for writing the initial implementation of silent payments.
+This document is the result of many discussions and contains contributions by a number of people. The authors wish to thank all those who provided valuable feedback and reviews, including the participants of the [https://gist.github.com/RubenSomsen/21c477c90c942acf45f8e8f5c1ad4fae BIP47 Prague discussion], the [https://github.com/josibake/silent-payments-workshop Advancing Bitcoin silent payments Workshop], and [https://btctranscripts.com/bitcoin-core-dev-tech/2023-04/2023-04-26-silent-payments/ coredev]. The authors would like to also thank [https://github.com/w0xlt w0xlt] for writing the initial implementation of silent payments.
 
 == Rationale and References ==
 

From 2157872faa749e02e54d3a47ba9d17ebbefa5c21 Mon Sep 17 00:00:00 2001
From: Afanti <127061691+threewebcode@users.noreply.github.com>
Date: Mon, 13 May 2024 10:25:31 +0800
Subject: [PATCH 090/288] bip-0114: fix typo

---
 bip-0114.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0114.mediawiki b/bip-0114.mediawiki
index 410e84cc..5b071374 100644
--- a/bip-0114.mediawiki
+++ b/bip-0114.mediawiki
@@ -111,7 +111,7 @@ The advantages of the current proposal are:
 * If different parties in a contract do not want to expose their scripts to each other, they may provide only H(Subscript) and keep the Subscript private until redemption.
 * If they are willing to share the actual scripts, they may combine them into one Subscript for each branch, saving some nOpCount and a few bytes of witness space.
 
-The are some disadvantages, but only when the redemption condition is very complicated:
+There are some disadvantages, but only when the redemption condition is very complicated:
 * It may require more branches than a general MAST design (as shown in the previous example) and take more witness space in redemption
 * Creation and storage of the MAST structure may take more time and space. However, such additional costs affect only the related parties in the contract but not any other Bitcoin users.
 

From 508e3a6a40a6e73c73cbfa8a33aa18a2bc7b9d91 Mon Sep 17 00:00:00 2001
From: siv2r 
Date: Sat, 11 May 2024 16:55:52 +0530
Subject: [PATCH 091/288] Fix the four test vectors

- first two vectors of verify_fail_test
- first two vectors of verify_error_test
---
 bip-0327.mediawiki                        | 2 ++
 bip-0327/vectors/sign_verify_vectors.json | 8 ++++----
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki
index 07b40f53..5f29f838 100644
--- a/bip-0327.mediawiki
+++ b/bip-0327.mediawiki
@@ -785,6 +785,8 @@ An exception to this rule is MAJOR version zero (0.y.z) which is fo
 The MINOR version is incremented whenever the inputs or the output of an algorithm changes in a backward-compatible way or new backward-compatible functionality is added.
 The PATCH version is incremented for other changes that are noteworthy (bug fixes, test vectors, important clarifications, etc.).
 
+* '''1.0.1''' (2024-05-14):
+** Fix minor issue in ''PartialSigVerify'' vectors.
 * '''1.0.0''' (2023-03-26):
 ** Number 327 was assigned to this BIP.
 * '''1.0.0-rc.4''' (2023-03-02):
diff --git a/bip-0327/vectors/sign_verify_vectors.json b/bip-0327/vectors/sign_verify_vectors.json
index b467640c..f71c8dd9 100644
--- a/bip-0327/vectors/sign_verify_vectors.json
+++ b/bip-0327/vectors/sign_verify_vectors.json
@@ -157,7 +157,7 @@
     ],
     "verify_fail_test_cases": [
         {
-            "sig": "97AC833ADCB1AFA42EBF9E0725616F3C9A0D5B614F6FE283CEAAA37A8FFAF406",
+            "sig": "FED54434AD4CFE953FC527DC6A5E5BE8F6234907B7C187559557CE87A0541C46",
             "key_indices": [0, 1, 2],
             "nonce_indices": [0, 1, 2],
             "msg_index": 0,
@@ -165,7 +165,7 @@
             "comment": "Wrong signature (which is equal to the negation of valid signature)"
         },
         {
-            "sig": "68537CC5234E505BD14061F8DA9E90C220A181855FD8BDB7F127BB12403B4D3B",
+            "sig": "012ABBCB52B3016AC03AD82395A1A415C48B93DEF78718E62A7A90052FE224FB",
             "key_indices": [0, 1, 2],
             "nonce_indices": [0, 1, 2],
             "msg_index": 0,
@@ -183,7 +183,7 @@
     ],
     "verify_error_test_cases": [
         {
-            "sig": "68537CC5234E505BD14061F8DA9E90C220A181855FD8BDB7F127BB12403B4D3B",
+            "sig": "012ABBCB52B3016AC03AD82395A1A415C48B93DEF78718E62A7A90052FE224FB",
             "key_indices": [0, 1, 2],
             "nonce_indices": [4, 1, 2],
             "msg_index": 0,
@@ -196,7 +196,7 @@
             "comment": "Invalid pubnonce"
         },
         {
-            "sig": "68537CC5234E505BD14061F8DA9E90C220A181855FD8BDB7F127BB12403B4D3B",
+            "sig": "012ABBCB52B3016AC03AD82395A1A415C48B93DEF78718E62A7A90052FE224FB",
             "key_indices": [3, 1, 2],
             "nonce_indices": [0, 1, 2],
             "msg_index": 0,

From 2f311cc629c872cca75279f8b3550eb60e2699d7 Mon Sep 17 00:00:00 2001
From: Chris Hyunhum Cho 
Date: Wed, 15 May 2024 11:51:28 +0900
Subject: [PATCH 092/288] bip-0322: add another valid sig vector not to confuse

---
 bip-0322.mediawiki | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0322.mediawiki b/bip-0322.mediawiki
index 911d3c80..81ef896d 100644
--- a/bip-0322.mediawiki
+++ b/bip-0322.mediawiki
@@ -174,8 +174,8 @@ Given below parameters:
 
 Produce signatures:
 
-* Message = "" (empty string): AkcwRAIgM2gBAQqvZX15ZiysmKmQpDrG83avLIT492QBzLnQIxYCIBaTpOaD20qRlEylyxFSeEA2ba9YOixpX8z46TSDtS40ASECx/EgAxlkQpQ9hYjgGu6EBCPMVPwVIVJqO4XCsMvViHI=
-* Message = "Hello World": AkcwRAIgZRfIY3p7/DoVTty6YZbWS71bc5Vct9p9Fia83eRmw2QCICK/ENGfwLtptFluMGs2KsqoNSk89pO7F29zJLUx9a/sASECx/EgAxlkQpQ9hYjgGu6EBCPMVPwVIVJqO4XCsMvViHI=
+* Message = "" (empty string): AkcwRAIgM2gBAQqvZX15ZiysmKmQpDrG83avLIT492QBzLnQIxYCIBaTpOaD20qRlEylyxFSeEA2ba9YOixpX8z46TSDtS40ASECx/EgAxlkQpQ9hYjgGu6EBCPMVPwVIVJqO4XCsMvViHI= or AkgwRQIhAPkJ1Q4oYS0htvyuSFHLxRQpFAY56b70UvE7Dxazen0ZAiAtZfFz1S6T6I23MWI2lK/pcNTWncuyL8UL+oMdydVgzAEhAsfxIAMZZEKUPYWI4BruhAQjzFT8FSFSajuFwrDL1Yhy
+* Message = "Hello World": AkcwRAIgZRfIY3p7/DoVTty6YZbWS71bc5Vct9p9Fia83eRmw2QCICK/ENGfwLtptFluMGs2KsqoNSk89pO7F29zJLUx9a/sASECx/EgAxlkQpQ9hYjgGu6EBCPMVPwVIVJqO4XCsMvViHI= or AkgwRQIhAOzyynlqt93lOKJr+wmmxIens//zPzl9tqIOua93wO6MAiBi5n5EyAcPScOjf1lAqIUIQtr3zKNeavYabHyR8eGhowEhAsfxIAMZZEKUPYWI4BruhAQjzFT8FSFSajuFwrDL1Yhy
 
 === Transaction Hashes ===
 

From 4c08e2c0bfa931f0e06a008b3c21a43c92414db3 Mon Sep 17 00:00:00 2001
From: Marnix <93143998+MarnixCroes@users.noreply.github.com>
Date: Thu, 13 Apr 2023 12:20:13 +0200
Subject: [PATCH 093/288] BIP38: remove dead links

---
 bip-0038.mediawiki | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bip-0038.mediawiki b/bip-0038.mediawiki
index 511b55ad..bf3d0943 100644
--- a/bip-0038.mediawiki
+++ b/bip-0038.mediawiki
@@ -47,12 +47,12 @@ This proposal makes use of the following functions and definitions:
 *'''AES256Encrypt, AES256Decrypt''': the simple form of the well-known AES block cipher without consideration for initialization vectors or block chaining.  Each of these functions takes a 256-bit key and 16 bytes of input, and deterministically yields 16 bytes of output.
 *'''SHA256''', a well-known hashing algorithm that takes an arbitrary number of bytes as input and deterministically yields a 32-byte hash.
 *'''scrypt''': A well-known key derivation algorithm.  It takes the following parameters: (string) password, (string) salt, (int) n, (int) r, (int) p, (int) length, and deterministically yields an array of bytes whose length is equal to the length parameter.
-*'''ECMultiply''': Multiplication of an elliptic curve point by a scalar integer with respect to the [[secp256k1]] elliptic curve.
-*'''G, N''': Constants defined as part of the [[secp256k1]] elliptic curve.  G is an elliptic curve point, and N is a large positive integer.
-*'''[[Base58Check]]''': a method for encoding arrays of bytes using 58 alphanumeric characters commonly used in the Bitcoin ecosystem.
+*'''ECMultiply''': Multiplication of an elliptic curve point by a scalar integer with respect to the secp256k1 elliptic curve.
+*'''G, N''': Constants defined as part of the secp256k1 elliptic curve.  G is an elliptic curve point, and N is a large positive integer.
+*'''Base58Check''': a method for encoding arrays of bytes using 58 alphanumeric characters commonly used in the Bitcoin ecosystem.
 
 ===Prefix===
-It is proposed that the resulting Base58Check-encoded string start with a '6'.  The number '6' is intended to represent, from the perspective of the user, "a private key that needs something else to be usable" - an umbrella definition that could be understood in the future to include keys participating in multisig transactions, and was chosen with deference to the existing prefix '5' most commonly observed in [[Wallet Import Format]] which denotes an unencrypted private key.
+It is proposed that the resulting Base58Check-encoded string start with a '6'.  The number '6' is intended to represent, from the perspective of the user, "a private key that needs something else to be usable" - an umbrella definition that could be understood in the future to include keys participating in multisig transactions, and was chosen with deference to the existing prefix '5' most commonly observed in Wallet Import Format which denotes an unencrypted private key.
 
 It is proposed that the second character ought to give a hint as to what is needed as a second factor, and for an encrypted key requiring a passphrase, the uppercase letter P is proposed.
 
@@ -184,7 +184,7 @@ To recalculate the address:
 # Hash the Bitcoin address, and verify that ''addresshash'' from the encrypted private key record matches the hash.  If not, report that the passphrase entry was incorrect.
 
 ==Backwards compatibility==
-Backwards compatibility is minimally applicable since this is a new standard that at most extends [[Wallet Import Format]].  It is assumed that an entry point for private key data may also accept existing formats of private keys (such as hexadecimal and [[Wallet Import Format]]); this draft uses a key format that cannot be mistaken for any existing one and preserves auto-detection capabilities.
+Backwards compatibility is minimally applicable since this is a new standard that at most extends Wallet Import Format. It is assumed that an entry point for private key data may also accept existing formats of private keys (such as hexadecimal and Wallet Import Format); this draft uses a key format that cannot be mistaken for any existing one and preserves auto-detection capabilities.
 
 ==Suggestions for implementers of proposal with alt-chains==
 If this proposal is accepted into alt-chains, it is requested that the unused flag bytes not be used for denoting that the key belongs to an alt-chain.

From 05e2c0c12f1e37dbe031994e74d8deb390868dc7 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:16:38 +0200
Subject: [PATCH 094/288] chore(bip-0046): rename bip-fidelity-bonds to
 bip-0046

---
 bip-fidelity-bonds.mediawiki => bip-0046.mediawiki | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename bip-fidelity-bonds.mediawiki => bip-0046.mediawiki (100%)

diff --git a/bip-fidelity-bonds.mediawiki b/bip-0046.mediawiki
similarity index 100%
rename from bip-fidelity-bonds.mediawiki
rename to bip-0046.mediawiki

From 8e109f98de1dcbc8395d138f693ed42114eeefca Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:18:08 +0200
Subject: [PATCH 095/288] docs(bip-0046): add bip number to header section

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 571eca2e..b5088fcf 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -1,5 +1,5 @@
 
-  BIP: TBD. Preferably a two-digit number to match the bip44, bip49, bip84, bip86 family of bips
+  BIP: 46
   Layer: Applications
   Title: Derivation scheme for timelocked address fidelity bond based accounts
   Author: Chris Belcher 

From 64f93a239d24f6abbaa0345b190585bbaa8aa595 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:21:40 +0200
Subject: [PATCH 096/288] chore(bip-0046): fix typos and grammar

---
 bip-0046.mediawiki | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index b5088fcf..e4566042 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -23,7 +23,7 @@ It would be useful to have a common derivation scheme so that users of wallet so
 
 We largely use the same approach used in BIPs 49, 84 and 86 for ease of implementation.
 
-This standard is already implemented and deployed in JoinMarket. As most changes would requires a protocol change of a live system, there is limited scope for changing this standard in review. This BIP is more about documenting something which already exists, warts and all.
+This standard is already implemented and deployed in JoinMarket. As most changes would require a protocol change of a live system, there is limited scope for changing this standard in review. This BIP is more about documenting something which already exists, warts and all.
 
 It would be useful to be able to keep the private keys of fidelity bonds in cold storage. This would allow the sybil resistance of a system to increase without hot wallet risk.
 
@@ -52,7 +52,7 @@ It would be useful for the user to avoid having to keep a record of the timelock
 
 == Specifications ==
 
-This BIP defines the two needed steps to derive multiple deterministic addresses based on a [[bip-0032.mediawiki|BIP 32]] master private key. It also defines the format of the certificate can be signed by the deterministic address key.
+This BIP defines the two needed steps to derive multiple deterministic addresses based on a [[bip-0032.mediawiki|BIP 32]] master private key. It also defines the format of the certificate that can be signed by the deterministic address key.
 
 === Public key derivation ===
 
@@ -79,9 +79,9 @@ month = 1 + index % 12
 
 === Address derivation ===
 
-To derive the address from the above calculated public key and timelock, we create a redeemScript which locks the funds until the timelock, and then checks the signature of the derived_key. The redeemScript is hashed with SHA256 to produce a 32-byte hash value that forms the scriptPubKey of the P2WSH address.
+To derive the address from the above calculated public key and timelock, we create a witness script which locks the funds until the timelock, and then checks the signature of the derived_key. The witness script is hashed with SHA256 to produce a 32-byte hash value that forms the scriptPubKey of the P2WSH address.
 
-    redeemScript:  OP_CHECKLOCKTIMEVERIFY OP_DROP  OP_CHECKSIG
+    witnessScript:  OP_CHECKLOCKTIMEVERIFY OP_DROP  OP_CHECKSIG
     witness:       
     scriptSig:    (empty)
     scriptPubKey: 0 <32-byte-hash>
@@ -89,11 +89,11 @@ To derive the address from the above calculated public key and timelock, we crea
 
 === Message signing ===
 
-In order to support signing of certificates, implementors should support signing ascii messages.
+In order to support signing of certificates, implementors should support signing ASCII messages.
 
 A certificate message can be created by another application external to this standard. It is then prepended with the string `\x18Bitcoin Signed Message:\n` and a byte denoting the length of the certificate message. The whole thing is then signed with the private key of the derived_key. This part is identical to the "Sign Message" function which many wallets already implement.
 
-Almost all wallets implementing this standard can use their already-existing "Sign Message" function to sign the certificate message. As the certificate message itself is always an ascii string, the wallet may not need to specially implement this section at all but just rely on users copypasting their certificate message into the already-existing "Sign Message" user interface. This works as long as the wallet knows how to use the private key of the timelocked address for signing messages.
+Almost all wallets implementing this standard can use their already-existing "Sign Message" function to sign the certificate message. As the certificate message itself is always an ASCII string, the wallet may not need to specially implement this section at all but just rely on users copypasting their certificate message into the already-existing "Sign Message" user interface. This works as long as the wallet knows how to use the private key of the timelocked address for signing messages.
 
 It is most important for wallet implementions of this standard to support creating the certificate signature. Verifying the certificate signature is less important.
 

From 03a679958aedf1e152b96286571724c0199a1fc5 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:23:44 +0200
Subject: [PATCH 097/288] docs(bip-0046): change title to 'Address Scheme for
 Timelocked Fidelity Bonds'

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index e4566042..1b85dccb 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -1,7 +1,7 @@
 
   BIP: 46
   Layer: Applications
-  Title: Derivation scheme for timelocked address fidelity bond based accounts
+  Title: Address Scheme for Timelocked Fidelity Bonds
   Author: Chris Belcher 
   Status: Draft
   Type: Standards Track

From 57f1fe3f4bc902e828041ad329ecd025d847ae7d Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:24:42 +0200
Subject: [PATCH 098/288] chore(bip-0046): remove (optional) Comments-Summary
 header

---
 bip-0046.mediawiki | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 1b85dccb..e179d937 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -5,7 +5,6 @@
   Author: Chris Belcher 
   Status: Draft
   Type: Standards Track
-  Comments-Summary: No comments yet.
   Created: 2022-04-01
   License: CC0-1.0
   Post-History: 2022-5-1: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-May/020389.html

From 5209a28c1a25a853b0d5afbd90136a446484715d Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:27:20 +0200
Subject: [PATCH 099/288] docs(bip-0046): add Comments-URI header

---
 bip-0046.mediawiki | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index e179d937..0766796d 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -3,6 +3,7 @@
   Layer: Applications
   Title: Address Scheme for Timelocked Fidelity Bonds
   Author: Chris Belcher 
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0046
   Status: Draft
   Type: Standards Track
   Created: 2022-04-01

From 164412d08b7c67cf5a9b7282a4aa2a15863fa40d Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 14:30:48 +0200
Subject: [PATCH 100/288] docs(bip-0046): add Copyright section

---
 bip-0046.mediawiki | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 0766796d..190c9caf 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -15,6 +15,10 @@
 
 This BIP defines the derivation scheme for HD wallets which create timelocked addresses used for creating fidelity bonds. It also defines how to sign fidelity bond certificates, which are needed when using fidelity bonds that are stored offline.
 
+== Copyright ==
+
+This document is placed in the public domain.
+
 == Motivation ==
 
 Fidelity bonds are used to resist sybil attacks in certain decentralized anonymous protocols. They are created by locking up bitcoins using the `OP_CHECKLOCKTIMEVERIFY` opcode.

From 00c7d0b8151046bd4058deaabf67fbc48b8c05a3 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 15:48:23 +0200
Subject: [PATCH 101/288] fix(bip-0046): change license from Public Domain to
 CC0-1.0

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 190c9caf..ea006664 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -17,7 +17,7 @@ This BIP defines the derivation scheme for HD wallets which create timelocked ad
 
 == Copyright ==
 
-This document is placed in the public domain.
+This document is licensed under the Creative Commons CC0 1.0 Universal license.
 
 == Motivation ==
 

From f9d370d3da35a242a6568179aee8d7ab66b37e69 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 23 May 2024 15:52:46 +0200
Subject: [PATCH 102/288] chore(bip-0046): scriptPubKey -> witness programm

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index ea006664..7f2ef5e6 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -83,7 +83,7 @@ month = 1 + index % 12
 
 === Address derivation ===
 
-To derive the address from the above calculated public key and timelock, we create a witness script which locks the funds until the timelock, and then checks the signature of the derived_key. The witness script is hashed with SHA256 to produce a 32-byte hash value that forms the scriptPubKey of the P2WSH address.
+To derive the address from the above calculated public key and timelock, we create a witness script which locks the funds until the timelock, and then checks the signature of the derived_key. The witness script is hashed with SHA256 to produce a 32-byte hash value that forms the witness program in the output script of the P2WSH address.
 
     witnessScript:  OP_CHECKLOCKTIMEVERIFY OP_DROP  OP_CHECKSIG
     witness:       

From 04d3a0609b548805fa2ebaf5d3a495f1b81a003c Mon Sep 17 00:00:00 2001
From: glozow 
Date: Mon, 15 Jan 2024 16:26:55 +0000
Subject: [PATCH 103/288] Define BIP431: TRUCs

---
 README.mediawiki   |   7 ++
 bip-0431.mediawiki | 291 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 298 insertions(+)
 create mode 100644 bip-0431.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 815e8c3c..41c729d4 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1155,6 +1155,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Pieter Wuille, Andrew Chow
 | Informational
 | Draft
+|-
+| [[bip-0431.mediawiki|431]]
+| Applications
+| Topology Restrictions for Pinning
+| Gloria Zhao
+| Informational
+| Draft
 |}
 
 
diff --git a/bip-0431.mediawiki b/bip-0431.mediawiki
new file mode 100644
index 00000000..2af0e53c
--- /dev/null
+++ b/bip-0431.mediawiki
@@ -0,0 +1,291 @@
+
+  BIP: 431
+  Layer: Applications
+  Title: Topology Restrictions for Pinning
+  Author: Gloria Zhao 
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0431
+  Status: Draft
+  Type: Informational
+  Created: 2024-01-10
+  License: BSD-3-Clause
+  Post-History: 2022-01-27: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-January/019817.html [bitcoin-dev] discussion
+                2022-01-27: https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff gist discussion
+                2022-09-23: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-September/020937.html [bitcoin-dev] proposal
+                2024-01-02: https://delvingbitcoin.org/t/v3-transaction-policy-for-anti-pinning/340 Delving Bitcoin post
+                2024-01-16: https://delvingbitcoin.org/t/lightning-transactions-with-v3-and-ephemeral-anchors/418 Delving Bitcoin post
+

+
+==Abstract==
+
+This document describes pinning problems that can arise from limitations in mempool policy.
+
+It also describes a type of policy with adjusted topology limits which, combined with other policy rules, helps minimize the potential pinning problems.  These restrictions simplify the assessment of incentive compatibility of accepting or replacing such transactions, thus helping ensure any replacements are more profitable for the node. Within the context of nodes that implement this policy, fee-bumping is more reliable for users.
+
+==Motivation==
+
+Mempools typically accept and relay transactions that spend outputs from other unconfirmed transactions, but restrict package sizes through ancestor and descendant limits
+https://github.com/bitcoin/bitcoin/blob/632a2bb731804dffe52bd4cbd90bfee352d25ede/doc/policy/mempool-limits.md
+to limit the computational complexity of mempool operations and mitigate Denial of Service attacks.
+
+Users may also create unconfirmed transactions that conflict with -- or are "double spends" of -- each other by spending the same input(s) in both.
+Instead of always keeping the first-seen transaction, many mempools also have some kind of Replace by Fee (RBF) policy
+
+[https://github.com/bitcoin/bitcoin/blob/632a2bb731804dffe52bd4cbd90bfee352d25ede/doc/policy/mempool-replacements.md Bitcoin Core's RBF policy] at the time of writing. It is slightly different from what is described in BIP 125.
+
+to keep the more incentive compatible transaction, i.e. one that would earn a miner more fees. Users utilize these rules when they create higher feerate double-spends (replacements) to expedite confirmation of their transactions.
+
+However, these policies make imperfect trade-offs between incentive compatibility and DoS-resistance. For example, malicious actors may sometimes exploit limitations to prevent incentive-compatible transactions from being accepted or fee-bumped (''pinning'').
+
+Pinning is consequential to contracting protocols in which untrusted parties construct and sign time-sensitive transactions to be broadcast on-chain later
+Posts about pinning in LN and LN-Symmetry:
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-May/020458.html "Bringing a nuke to a knife fight: Transaction introspection to stop RBF pinning"]
+* [https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-April/002639.html "RBF Pinning with Counterparties and Competing Interest"]
+* [https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-June/002758.html "Pinning : The Good, The Bad, The Ugly"]
+* [https://github.com/t-bast/lightning-docs/blob/master/pinning-attacks.md "Pinning Attacks"]
+* [https://gist.github.com/instagibbs/60264606e181451e977e439a49f69fe1 "Eltoo Pinning"]
+.
+When the funds available to be redeemed by each party depend on a transaction confirming within a specific time window, a malicious party may be able to steal money if the honest party cannot get their transaction confirmed. As such, the ability to fee-bump a transaction to entice miners to include it in their blocks is crucial to the security of the protocol.
+
+===RBF pinning through absolute fees===
+
+Imagine that counterparties Alice and Mallory have transactions (or packages) A and B, respectively, which conflict with each other. Alice broadcasts A and Mallory broadcasts B. RBF rules require the replacement transaction pay a higher absolute fee than the aggregate fees paid by all original transactions ([https://github.com/bitcoin/bitcoin/blob/master/doc/policy/mempool-replacements.md#current-replace-by-fee-policy "Rule 3"]). This means Mallory may increase the fees required to replace B beyond what Alice was planning to pay for A's fees.
+
+1. Adding transaction(s) that descend from B and pay a low feerate (too low to fee-bump B through CPFP)Example: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-December/022216.html.
+
+2. Adding a high-fee descendant of B that also spends from another large, low-feerate mempool transaction (where the fee of the descendant is too low to fee-bump both B and its other parent through CPFP)Example: https://github.com/bitcoin/bitcoin/pull/25038#issuecomment-1320295394.
+
+===RBF pinning through number of conflicts===
+
+RBF rules require that no replacement trigger the removal of more than 100 transactions ([https://github.com/bitcoin/bitcoin/blob/master/doc/policy/mempool-replacements.md#current-replace-by-fee-policy "Rule 5"]). This number includes the descendants of the conflicted mempool transactions. Mallory can make it more difficult to replace transactions by attaching lots of descendants to them. For example, if Alice wants to batch-replace 5 transactions but each has 21 descendants, her replacement will be rejected regardless of its fees.
+
+===RBF incentive compatibility requirements===
+
+There is currently no effective rule to enforce that a replacement transaction would be more incentive compatible to keep in the mempool. It is difficult to quantify the incentive compatibility of a set of transactions, especially in comparison with another set of transactionshttps://delvingbitcoin.org/t/mempool-incentive-compatibility/553, but the requirement of a feerate increase ([https://github.com/bitcoin/bitcoin/blob/master/doc/policy/mempool-replacements.md#current-replace-by-fee-policy "Rule 6"]) is far too simplistic.
+
+For example, a user could create a replacement transaction that pays more fees and is higher feerate, but has a low feerate ancestor and would confirm slower than the original transaction. As a result, all transactions signed with SIGHASH_ANYONECANPAY are vulnerable to being replaced by a transaction that will confirm later than the originalhttps://github.com/bitcoin/bitcoin/pull/23121#pullrequestreview-766271585.
+
+===Child fees don't count towards RBF rules===
+
+A transaction must meet all fee-related requirements (Rules 3, 4, 6) alone; its child's fees cannot be used. A ''Package RBF'' policy would allow a transaction's child to be used for its RBF requirements.
+
+In LN Penalty, conflicting commitment transactions signed with the same fees cannot replace each other, even if accompanied by a fee-bumping child. This limitation necessitates the presence of two anchor outputs, allowing both parties to fee-bump either commitment transaction that enters their mempool.
+
+===Package limit pinning and replacing CPFP Carve Out===
+
+Mempool policies limit the number and total virtual size of an unconfirmed transaction's descendants. A fee-bumping child of an unconfirmed transaction (CPFP) may be rejected for exceeding the descendant limit. When a transaction has multiple outputs owned by different parties, a malicious party can prevent the other(s) from CPFPing their transaction by attaching enough descendants to monopolize the descendant limit (''package limit pinning'').
+
+LN commitment transactions rely on CPFP carve out [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-November/016518.html "CPFP Carve-Out for Fee-Prediction Issues in Contracting Applications (eg Lightning)"] to avoid package limit pinning.
+
+There are weaknesses with this approach of using 2 anchors and CPFP Carve Out. This proposal helps address a few of them (see Related Work for how other weaknesses are addressed):
+
+* Cluster Mempool necessitates the removal of CPFP Carve Out https://delvingbitcoin.org/t/an-overview-of-the-cluster-mempool-proposal/393#the-cpfp-carveout-rule-can-no-longer-be-supported-12.
+* CPFP Carve Out only allows ''one more'' child to be added to the transaction. This means it cannot guarantee the ability to CPFP for more than 2 parties of a shared transaction.
+
+==Topologically Restricted Until Confirmation==
+
+This section describes one approach for opt-in policy rules that can realistically be deployed today and is useful to today's applications.
+It is based on the idea that most limitations stem from existing ancestor/descendant package limits being too permissive for the majority of use cases.
+
+The scope of the policy's anti-pinning benefits is limited to the individual node's mempool, and the degree to which a user's transaction is safe from pinning depends how much of the network has adopted this policy.
+
+Similarly, there are multiple approaches to creating a policy to minimize pinning, more may become available over time (see Related Work section), and the details of this approach can be tweaked if conditions change. For example, if loosening one of the topology restrictions enables a new use case while still providing acceptable pinning bounds, it can be changed.
+
+===Specification===
+
+Senders can signal that they want a transaction to be Topologically Restricted Until Confirmation (TRUC). Specifically, set nVersion=3.
+A node that implements this policy would apply their existing standardness and policy rules, along with the following set of rules, to TRUC transactions:
+
+1. A TRUC transaction signals replaceability, even if it does not signal BIP125 replaceability.
+
+2. Any TRUC transaction's unconfirmed ancestors must all be TRUC. Any descendant of an unconfirmed TRUC transaction must also be TRUC.
+Rationale:
+* Requiring packages to be all-or-none TRUC makes it possible to enforce the topology limits. For example, the TRUC descendant limit would not be very meaningful if it could be bypassed by creating a non-TRUC child.
+* Combined with Rule 1, this requirement creates "inherited signaling" when descendants of unconfirmed transactions are created. Checking whether a transaction signals replaceability this way does not require mempool traversal, and does not change based on what transactions are mined.
+
+Note: A TRUC transaction can spend outputs from ''confirmed'' non-TRUC transactions. A non-TRUC transaction can spend outputs from ''confirmed'' TRUC transactions.
+
+3. An unconfirmed TRUC transaction cannot have more than 1 unconfirmed ancestor. An unconfirmed TRUC transaction cannot have more than 1 unconfirmed descendant. CPFP Carve Out is not granted to TRUC transactions.
+Rationale:
+* The larger the descendant limit, the more transactions may need to be replaced. See #1 in Rule 3 Pinning section above. This also makes pinning using Rule 5 more difficult, since a directly conflicting transaction has fewer possible descendants.
+* These two limits (ancestor count 2, descendant count 2) effectively create a cluster limit using the existing ancestor and descendant limits. Increasing them to 3 would imply an infinite cluster count limit.
+* This 1-parent-1-child topology makes it possible to use ancestor score (minimum of ancestor feerate and individual feerate) as a measure of incentive compatibility.
+
+
Q: Why not allow multiple parents to enable batched fee-bumping?
+
To mitigate pinning through absolute fees, we need to prevent a child of an unconfirmed TRUC transaction from bringing in more unconfirmed ancestors. See #2 in "RBF pinning through absolute fees" section above.
+
+
Q: Why not allow another child?
+
Allowing another child disables the ability to use ancestor score to measure incentive compatibility. Imagine the original transaction, A, has a child B and co-parent C (i.e. B spends from A and C). C also has another child, D. B is one of the original transactions and thus its ancestor feerate must be lower than the package's feerate. However, this may be an underestimation because D can bump C without B's help. This is resolved if TRUC transactions can only have TRUC ancestors, as then C cannot have another child.
+
+
Q: Why allow any descendants at all?
+
At least 1 descendant is required to allow CPFP of the presigned transaction. Without package RBF, multiple anchor outputs would be required to allow each counterparty to fee-bump any presigned transaction. With package RBF, since the presigned transactions can replace each other, 1 anchor output is sufficient.
+
+
+4. A TRUC transaction cannot have a sigop-adjusted virtual size larger than 10,000 vB.
+Rationale: Limit the amount of virtual bytes (and thus fees) that may need to be replaced, while leaving a comfortable amount of space for payments, HTLCs, or other uses of the transaction. Generally, having a smaller maximum size helps to better define bounds for algorithms and memory usage, and the existing limit of 100,000 vB seems much larger than necessary.
+
+
+5. A TRUC transaction that has an unconfirmed TRUC ancestor cannot have a sigop-adjusted virtual size larger than 1000 vB.
+Rationale: Limit the amount of virtual bytes (and thus fees) that may need to be replaced, while leaving a comfortable amount of space for inputs to fund the transaction.
+
Q: Why not bigger?
+
The larger the descendant size limit, the more vbytes may need to be replaced. With default limits, if the child is e.g. 100,000 vB, that might be an additional 100,000 sats (at 1 sat/vbyte) or more, depending on the feerate. Restricting all children to 1000 vB reduces the upper bound of the additional fees by a factor of 100.
+
+
This rule is also easily tacked on to existing logic for policy and wallets. A maximum size standard transaction (100 kvB) can have up to 1000 vB of descendants to be within the default descendant limit (101 kvB).
+
+
Q: Why not smaller?
+
The smaller this limit, the fewer UTXOs a child may use to fund this fee-bump. For example, only allowing the TRUC child to have 2 inputs would require wallets to maintain a pool of high-value confirmed UTXOs. However, as the fee-bumping child only needs to fund fees (as opposed to payments), just a few UTXOs should suffice. With a limit of 1000 vB and usage of taproot outputs, the child can have 15 inputs and 2 outputs (calculated using [https://bitcoinops.org/en/tools/calc-size/ this tool]).
+
+
+6. An individual TRUC transaction is permitted to be below the mempool min relay feerate, assuming it is considered within a package that meets the mempool's feerate requirements.
+Rationale: This allows contracting protocols to create presigned transactions with 0 fees and fee-bump them using CPFP at broadcast time.
+
+
+====Implementation====
+
+* https://github.com/bitcoin/bitcoin/pull/28948
+* https://github.com/bitcoin/bitcoin/pull/29873
+* https://github.com/bitcoin/bitcoin/pull/29496
+
+====Related Work====
+
+This 1-parent-1-child (aka cluster size 2) topology restriction makes the transactions much easier to reason about, which enables additional features like
+feerate diagram comparisons
+
+[https://github.com/bitcoin/bitcoin/pull/29242 this PR] implements feerate diagram creation and comparison for sets of transactions in which the maximum cluster size is 2, e.g. all TRUC transactions.
+,
+package RBF
+
+[https://github.com/bitcoin/bitcoin/pull/28984 this PR] implements package RBF, enforcing incentive compatibility by comparing the feerate diagrams of the mempool before and after replacement. The feerate diagrams are easy to build when the relevant clusters are of size 2 and below, so package RBF is restricted to those scenarios. As TRUC transactions always have this property, package RBF is enabled for TRUC transactions.
+,
+and sibling eviction
+
+[https://github.com/bitcoin/bitcoin/pull/29306 This PR] implements sibling eviction for TRUC transactions: if a new transaction would exceed a transaction's descendant limit, it considers evicting the existing descendant using replacement rules. Sibling eviction is feasible for TRUC transactions because there is no difficulty in identifying which descendant to evict (there can only be 1).
+.
+
+The [https://github.com/bitcoin/bips/pull/1524 Ephemeral Anchors] proposal builds on top of this one to add more features.
+It changes the anchor script to be anyone can spend, allowing anybody to add fees and reducing the onchain footprint and fee costs.
+It also allows anchor outputs to have 0 value, eliminating the need to deduct value from the input amount in order to create anchors.
+
+The [https://delvingbitcoin.org/t/an-overview-of-the-cluster-mempool-proposal/393/7 Cluster Mempool] proposal makes fundamental changes to mempool structure and policy rules, enabling the accurate assessment of the incentive compatibility of accepting or removing a transaction, among other things. Notably, Cluster Mempool introduces a limit to all transactions' cluster size to make incentive compatibility calculations feasible. This cluster limit is similar to TRUC limits in that it bounds computation to enable improved policies, but is applied to all transactions (not just ones that opt in) and is much less restrictive than TRUC limits.
+
+Cluster Mempool provides a more holistic solution to some of the problems listed (such as adding an incentive compatibility requirement to RBF and safely enabling package RBF for more complex topologies). However, it does not help resolve all problems (such as RBF Pinning through absolute fees and number of conflicts). Also, since Cluster Mempool is incompatible with CPFP Carve Outhttps://delvingbitcoin.org/t/an-overview-of-the-cluster-mempool-proposal/393#the-cpfp-carveout-rule-can-no-longer-be-supported-12, TRUC with sibling eviction and package RBF provide an alternative solution to applications that rely on it.
+
+Building on top of Cluster Mempool, there are also various ideas for extending TRUC transactions and creating another anti-pinning policy
+https://delvingbitcoin.org/t/v3-and-some-possible-futures/523/3.
+
+[https://bitcoinops.org/en/topics/package-relay Package Relay] includes changes in p2p protocol, transaction relay logic, and mempool policy to enable nodes to accept and relay packages of transactions. Much of this proposal's utility relies on the existence of package relay for 1-parent-1-child packages (the topology TRUC supports).
+
+====Backward Compatibility====
+
+Transactions with nVersion=3 were previously nonstandard. There are no known conflicts with previous usage.
+
+====Intended Usage====
+
+Generally, users with no interest in spending unconfirmed outputs from a transaction can make them TRUC transactions for more robust RBF abilities.
+
+This proposal allows for a different solution to fee-bumping in LN, in which commitment transactions are signed with 0 fees and include a single anchor that can later be used to add fees at broadcast time
+Proposals for changes to LN commitment transaction format using TRUC and a single anchor:
+* [https://delvingbitcoin.org/t/lightning-transactions-with-v3-and-ephemeral-anchors/418 "Lightning transactions with v3 and ephemeral anchors"]
+* [https://github.com/instagibbs/bolts/commits/zero_fee_commitment bolts proposal branch]
+* See "Intended usage for LN" section in [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-September/020937.html "New transaction policies (nVersion=3) for contracting protocols"]
+.
+A similar fee-bumping model can also be used in other contracting protocols
+Examples of non-LN protocols that have shown interest in, designed, or built fee-bumping using TRUC:
+* A LN-Symmetry implementation using TRUC and ephemeral anchors: [https://delvingbitcoin.org/t/ln-symmetry-project-recap/359 LN-Symmetry Project Recap] [https://github.com/instagibbs/lightning/tree/eltoo_support branch]
+* See "Managing Fees Safely" mentioning ephemeral anchors in [https://jameso.be/vaults.pdf "Vaults and Covenants"]
+.
+
+==Alternatives==
+
+Various alternatives for RBF
+Proposals and discussions dedicated to improving RBF:
+* [https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff "RBF Improvements"]
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-January/019817.html "Improving RBF Policy"]
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-June/016998.html "[PROPOSAL] Emergency RBF (BIP 125)"]
+
+and new fee-bumping mechanisms
+
+
Proposals and discussions dedicated to improving or creating new fee-bumping mechanisms:
+* [https://github.com/lightning/bolts/pull/1036 "Add option to sign commitments at various feerates"]
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019243.html "A Stroll through Fee-Bumping Techniques : Input-Based vs Child-Pay-For-Parent"]
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2020-September/018168.html "A Replacement for RBF and CPFP: Non-Destructive TXID Dependencies for Fee Sponsoring"]
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-February/019879.html "Thoughts on fee bumping"]
+
+have been proposed across multiple discussion threads.
+Most alternatives do not conflict with TRUC, and some work in conjunction with this proposal - see Related Work.
+A few popular ideas that were not incorporated into this work are summarized here.
+
+===Alternatives: add static incentive compatibility rule in RBF policy===
+
+Add incentive compatibility requirement to RBF policy using some existing score or static calculation
+Examples of incentive compatibility score proposals and suggestions:
+* [https://github.com/bitcoin/bitcoin/pull/23121 "check ancestor feerate in RBF, remove BIP125 Rule2"]
+* [https://github.com/bitcoin/bitcoin/pull/26451 "Enforce incentive compatibility for all RBF replacements"]
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-January/019841.html
+* https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff?permalink_comment_id=4081349#gistcomment-4081349
+.
+
+As the incentive compatibility "score" of a transaction must be dynamically calculated given the structure of mempools today, there is no satisfactory solution. A full calculation is too computationally expensive. Static values can overestimate or underestimate, leading to more pinning problems Four examples of static calculations and an example in which they are all inaccurate: https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff#mining-score-of-a-mempool-transaction.
+The ability to calculate incentive compatibility scores efficiently is a primary feature and motivation for both TRUC transactions and Cluster Mempool.
+
+===Alternatives: replace by feerate===
+
+"Instead of using Rule 3 and/or 4 (requiring an increase in absolute fees), allow replacements with a higher feerate."
+
+One variation of this proposal is to apply this rule in certain exceptional scenarios or when the replacement would confirm "soon"
+Examples of Replace by Feerate proposals and suggestions:
+* [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-June/016998.html "[PROPOSAL] Emergency RBF (BIP 125)"]
+* [https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff#fees-in-next-block-and-feerate-for-the-rest-of-the-mempool]
+* [https://petertodd.org/2024/one-shot-replace-by-fee-rate "One-Shot Replace-by-Fee-Rate"]
+.
+
+The primary problem with these proposals is the potential for free relay and DDoS attacks.
+
+Removing Rule 3 and 4 in general would allow free relay
+Examples of free relay with the removal of Rule 3 and/or 4:
+
 Consider a rule where the fee can be decreased (remove Rule 3 and 4) but the feerate must double. In this scenario, a 100 kvB transaction can be replaced by a 100 vB transaction paying 200 sats. That's 200 sats to relay 100,200 vB of transaction data, which is less than 0.002 sat/vB. It becomes quite cheap to replace large portions of the mempool, decreasing both its average feerate and total absolute fees.
+
+
Consider a rule where the fee can stay the same (keep Rule 3 but drop Rule 4) but the feerate must double. The attacker can start out with 100 kvB transaction, paying 1 sat/vB. A user can reduce its size over and over again, doubling the feerate each time until it gets too small, and end up paying 100 ksat for 100 kvB(1 + 1/2 + 1/4 + ... + log2(mintxsize)) -> approaches 200 kvB. This means the attacker pays a rate of 0.5 sat/vB to relay transactions, which is below our "free relay" threshold of 1 sat/vB.
+.
+
+Another issue is the complexity of defining and implementing a "would confirm soon" or "is in the top N portion of the mempool." These proposals require an efficient way to assess the incentive compatibility score of a transaction and where it ranks amongst the other mempool transactions. This isn't feasible without something like cluster mempool (also see the "add static incentive compatibility rule in RBF policy" section above)
+Concerns about Replace by Feerate proposals
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-June/017020.html
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-June/017002.html
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-February/019879.html
+* https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff?permalink_comment_id=4044451#gistcomment-4044451
+.
+
+===Alternatives: implement rate-limiting without fee rules===
+"Since Rule 3 and 4 (requiring an increase in absolute fees) are for rate-limiting, replace them with a mempool-wide or per-peer rate limits on replacements by outpoint and/or bandwidth
+Examples of general rate-limiting proposals and suggestions:
+* https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff?permalink_comment_id=4081349#gistcomment-4081349
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-January/019820.html
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-June/017024.html
+
Related proposal for changing the amount of bandwidth that replacement transactions use:
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-January/019820.html
+."
+
+A problem with any global rate limit is that, in the absence of reputation or identities, the limit could be exhausted by an attacker, thus restricting replacements for honest users. For example, an outpoint-based rate limit could be exhausted by one dishonest participant of a shared transaction, preventing the other participants from making any replacements. There are also other concerns about implementation complexity, free relay issues, and other unresolved edge cases
+Concerns
+* https://gist.github.com/glozow/25d9662c52453bd08b4b4b1d3783b9ff?permalink_comment_id=4081559#gistcomment-4081559
+* https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-February/019921.html
+* https://docs.google.com/document/d/1LpYF17HdbXPGHKSl3WYdxG4XTJBNJKSn-c2UJ2yphhE/edit?usp=sharing
+.
+
+
+==Acknowledgements==
+
+Thank you to everyone who contributed to this proposal and document, including
+Jon Atack,
+Matt Corallo,
+Suhas Daftuar,
+Mark Erhardt,
+Antoine Poinsot,
+Antoine Riard,
+Gregory Sanders,
+and Bastien Teinturier.
+
+==References and Rationale==
+
+
+

From 0b353bc7dbede1a8637f9074484b8a257ed2d575 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 27 May 2024 10:10:22 +0200
Subject: [PATCH 104/288] docs(bip-0046): add Backwards Compatibility section

---
 bip-0046.mediawiki | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 7f2ef5e6..b793a1a2 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -31,6 +31,10 @@ This standard is already implemented and deployed in JoinMarket. As most changes
 
 It would be useful to be able to keep the private keys of fidelity bonds in cold storage. This would allow the sybil resistance of a system to increase without hot wallet risk.
 
+== Backwards Compatibility ==
+
+This BIP is not backwards compatible by design as described in the Considerations section of [[bip-0049.mediawiki|BIP 49]]. An incompatible wallet will not discover fidelity bonds at all and the user will notice that something is wrong.
+
 == Background ==
 
 === Fidelity bonds ===

From 722a388ae3e400db6e1928bcd90d8c9ece324c31 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 27 May 2024 10:13:28 +0200
Subject: [PATCH 105/288] chore(bip-0046): fix date format in Post-History
 header

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index b793a1a2..f1fe01d3 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -8,7 +8,7 @@
   Type: Standards Track
   Created: 2022-04-01
   License: CC0-1.0
-  Post-History: 2022-5-1: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-May/020389.html
+  Post-History: 2022-05-01: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-May/020389.html
 

 
 == Abstract ==

From a6f1cf3e0d391fdc7c6d8eb1291868d35e293c09 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 27 May 2024 10:25:14 +0200
Subject: [PATCH 106/288] chore(bip-0046): improve timelock point in time
 explanation

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index f1fe01d3..fa4dd5c0 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -77,7 +77,7 @@ For index, addresses are numbered from 0 in a sequentially increasing m
 
 === Timelock derivation ===
 
-The timelock used in the time-locked address is derived from the index. The timelock is a unix time. It is always the first of the month at midnight. The index counts upwards the months from January 2020, ending in December 2099. At 12 months per year for 80 years this totals 960 timelocks. Note that care must be taken with the year 2038 problem on 32-bit systems.
+The timelock used in the time-locked address is derived from the index. The timelock is a unix time. It is always at the start of the first second at the beginning of the month (see [[#Test vectors|Test vectors]]). The index counts upwards the months from January 2020, ending in December 2099. At 12 months per year for 80 years this totals 960 timelocks. Note that care must be taken with the year 2038 problem on 32-bit systems.
 
 
 year = 2020 + index // 12

From 25361d28ed534d06da89b92257aae47cb08db5b4 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 27 May 2024 10:33:17 +0200
Subject: [PATCH 107/288] chore(bip-0046): add tbk to Author header

---
 bip-0046.mediawiki | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index fa4dd5c0..3576345a 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -3,6 +3,7 @@
   Layer: Applications
   Title: Address Scheme for Timelocked Fidelity Bonds
   Author: Chris Belcher 
+          Thebora Kompanioni 
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0046
   Status: Draft
   Type: Standards Track

From 2bc326e6afc6d976b22cc8cf68ecc45d35761bb1 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 27 May 2024 10:33:48 +0200
Subject: [PATCH 108/288] docs(bip-0046): add Rationale section

---
 bip-0046.mediawiki | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 3576345a..7bb80449 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -28,8 +28,6 @@ It would be useful to have a common derivation scheme so that users of wallet so
 
 We largely use the same approach used in BIPs 49, 84 and 86 for ease of implementation.
 
-This standard is already implemented and deployed in JoinMarket. As most changes would require a protocol change of a live system, there is limited scope for changing this standard in review. This BIP is more about documenting something which already exists, warts and all.
-
 It would be useful to be able to keep the private keys of fidelity bonds in cold storage. This would allow the sybil resistance of a system to increase without hot wallet risk.
 
 == Backwards Compatibility ==
@@ -54,10 +52,11 @@ To allow for holding fidelity bonds in cold storage, there is an intermediate ke
 
 Where the endpoint might be a IRC nickname or Tor onion hostname. The certificate keypair can be kept online and used to prove ownership of the fidelity bond. Even if the hot wallet private keys are stolen, the coins in the timelocked address will still be safe, although the thief will be able to impersonate the fidelity bond until the expiry.
 
-=== Fixed timelock values ===
+== Rationale ==
 
 It would be useful for the user to avoid having to keep a record of the timelocks in the time-locked addresses. So only a limited small set of timelocks are defined by this BIP. This way the user must only store their seed phrase, and knowledge that they have coins stored using this BIP standard. The user doesn't need to remember or store any dates.
 
+This standard is already implemented and deployed in JoinMarket. As most changes would require a protocol change of a live system, there is limited scope for changing this standard in review. This BIP is more about documenting something which already exists, warts and all.
 
 == Specifications ==
 

From 1eefea0456d661b4c51f3a40b7262d6a99161edd Mon Sep 17 00:00:00 2001
From: Alexander Cyon 
Date: Tue, 28 May 2024 19:25:46 +0200
Subject: [PATCH 109/288] Fix typos on 17 files.

---
 bip-0015.mediawiki         |  2 +-
 bip-0047.mediawiki         |  2 +-
 bip-0049.mediawiki         |  4 ++--
 bip-0085.mediawiki         |  2 +-
 bip-0087.mediawiki         |  2 +-
 bip-0088.mediawiki         |  8 ++++----
 bip-0098.mediawiki         |  8 ++++----
 bip-0119.mediawiki         | 10 +++++-----
 bip-0137.mediawiki         |  2 +-
 bip-0140.mediawiki         |  2 +-
 bip-0158/gentestvectors.go |  2 +-
 bip-0327.mediawiki         |  2 +-
 bip-0340/test-vectors.py   |  2 +-
 bip-0345.mediawiki         |  2 +-
 bip-0351.mediawiki         |  4 ++--
 bip-0352/reference.py      |  2 +-
 bip-0389.mediawiki         |  2 +-
 17 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/bip-0015.mediawiki b/bip-0015.mediawiki
index 52a698f2..1e9a9bc4 100644
--- a/bip-0015.mediawiki
+++ b/bip-0015.mediawiki
@@ -208,7 +208,7 @@ NameResolutionService::~NameResolutionService()
 
 void NameResolutionService::ExplodeHandle(const string& strHandle, string& strNickname, string& strDomain)
 {
-    // split address at @ furthrest to the right
+    // split address at @ furthest to the right
     size_t nPosAtsym = strHandle.rfind('@');
     strNickname = strHandle.substr(0, nPosAtsym);
     strDomain = strHandle.substr(nPosAtsym + 1, strHandle.size());
diff --git a/bip-0047.mediawiki b/bip-0047.mediawiki
index dc1f5880..a15a15de 100644
--- a/bip-0047.mediawiki
+++ b/bip-0047.mediawiki
@@ -275,7 +275,7 @@ Normal operation of a payment code-enabled wallet can be performed by an SPV cli
 
 Recovering a wallet from a seed, however, does require access to a fully-indexed blockchain.
 
-The required data may be obtained from copy of the blockchain under the control of the user, or via a publicly-queriable blockchain explorer.
+The required data may be obtained from copy of the blockchain under the control of the user, or via a publicly-queryable blockchain explorer.
 
 When querying a public blockchain explorer, wallets SHOULD connect to the explorer through Tor (or equivalent) and SHOULD avoid grouping queries in a manner that associates ephemeral addresses with each other.
 
diff --git a/bip-0049.mediawiki b/bip-0049.mediawiki
index a13b437b..3e37a016 100644
--- a/bip-0049.mediawiki
+++ b/bip-0049.mediawiki
@@ -92,10 +92,10 @@ This BIP is not backwards compatible by design as described under [[#considerati
   // Account 0, first receiving private key = m/49'/1'/0'/0/0
   account0recvPrivateKey = cULrpoZGXiuC19Uhvykx7NugygA3k86b3hmdCeyvHYQZSxojGyXJ
   account0recvPrivateKeyHex = 0xc9bdb49cfbaedca21c4b1f3a7803c34636b1d7dc55a717132443fc3f4c5867e8
-  account0recvPublickKeyHex = 0x03a1af804ac108a8a51782198c2d034b28bf90c8803f5a53f76276fa69a4eae77f
+  account0recvPublicKeyHex = 0x03a1af804ac108a8a51782198c2d034b28bf90c8803f5a53f76276fa69a4eae77f
 
   // Address derivation
-  keyhash = HASH160(account0recvPublickKeyHex) = 0x38971f73930f6c141d977ac4fd4a727c854935b3
+  keyhash = HASH160(account0recvPublicKeyHex) = 0x38971f73930f6c141d977ac4fd4a727c854935b3
   scriptSig = <0 > = 0x001438971f73930f6c141d977ac4fd4a727c854935b3
   addressBytes = HASH160(scriptSig) = 0x336caa13e08b96080a32b5d818d59b4ab3b36742
 
diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki
index 7311d8a7..633210c6 100644
--- a/bip-0085.mediawiki
+++ b/bip-0085.mediawiki
@@ -364,7 +364,7 @@ This specification relies on BIP32 but is agnostic to how the BIP32 root key is
 
 ==Discussion==
 
-The reason for running the derived key through HMAC-SHA512 and truncating the result as necessary is to prevent leakage of the parent tree should the derived key (''k'') be compromized. While the specification requires the use of hardended key derivation which would prevent this, we cannot enforce hardened derivation, so this method ensures the derived entropy is hardened. Also, from a semantic point of view, since the purpose is to derive entropy and not a private key, we are required to transform the child key. This is done out of an abundance of caution, in order to ward off unwanted side effects should ''k'' be used for a dual purpose, including as a nonce ''hash(k)'', where undesirable and unforeseen interactions could occur.
+The reason for running the derived key through HMAC-SHA512 and truncating the result as necessary is to prevent leakage of the parent tree should the derived key (''k'') be compromised. While the specification requires the use of hardended key derivation which would prevent this, we cannot enforce hardened derivation, so this method ensures the derived entropy is hardened. Also, from a semantic point of view, since the purpose is to derive entropy and not a private key, we are required to transform the child key. This is done out of an abundance of caution, in order to ward off unwanted side effects should ''k'' be used for a dual purpose, including as a nonce ''hash(k)'', where undesirable and unforeseen interactions could occur.
 
 ==Acknowledgements==
 
diff --git a/bip-0087.mediawiki b/bip-0087.mediawiki
index 308e8521..920bd3cb 100644
--- a/bip-0087.mediawiki
+++ b/bip-0087.mediawiki
@@ -48,7 +48,7 @@ The second multisignature "standard" in use is m/48', which specifies:
 m / purpose' / coin_type' / account' / script_type' / change / address_index
 

 
-Rather than following in BIP 44/49/84's path and having a separate BIP per script after P2SH (BIP45), vendors decided to insert script_type' into the derivation path (where P2SH-P2WSH=1, P2WSH=2, Future_Script=3, etc). As described previously, this is unnecessary, as the descriptor sets the script.  While it attempts to reduce maintainence work by getting rid of new BIPs-per-script, it still requires maintaining an updated, redundant, script_type list.
+Rather than following in BIP 44/49/84's path and having a separate BIP per script after P2SH (BIP45), vendors decided to insert script_type' into the derivation path (where P2SH-P2WSH=1, P2WSH=2, Future_Script=3, etc). As described previously, this is unnecessary, as the descriptor sets the script.  While it attempts to reduce maintenance work by getting rid of new BIPs-per-script, it still requires maintaining an updated, redundant, script_type list.
 
 The structure proposed later in this paper solves these issues and is quite comprehensive. It allows for the handling of multiple accounts, external and internal chains per account, and millions of addresses per chain, in a multi-party, multisignature, hierarchical deterministic wallet regardless of the script type '''Why propose this structure only for multisignature wallets?''' Currently, single-sig wallets are able to restore funds using just the master private key data (in the format of BIP39 usually).  Even if the user doesn't recall the derivation used, the wallet implementation can iterate through common schemes (BIP44/49/84).  With this proposed hierarchy, the user would either have to now backup additional data (the descriptor), or the wallet would have to attempt all script types for every account level when restoring.  Because of this, even though the descriptor language handles the signature type just like it does the script type, it is best to restrict this script-agnostic hierarchy to multisignature wallets only..
 
diff --git a/bip-0088.mediawiki b/bip-0088.mediawiki
index 49be7dba..db21835e 100644
--- a/bip-0088.mediawiki
+++ b/bip-0088.mediawiki
@@ -41,7 +41,7 @@ addresses differently than the one they used before.
 The problem is common enough to warrant the creation of a dedicated website
 ([https://walletsrecovery.org/ walletsrecovery.org]) that tracks paths used by different wallets.
 
-At the time of writing, this website has used their own format to succintly describe multiple
+At the time of writing, this website has used their own format to succinctly describe multiple
 derivation paths. As far as author knows, it was the only publicitly used format to describe
 path templates before introduction of this BIP. The format was not specified anywhere beside
 the main page of the website. It used | to denote alternative derivation indexes
@@ -52,7 +52,7 @@ an ad-hoc format only intended for illustration. In contrast to this ad-hoc form
 described in this BIP is intended for unambigouos parsing by software, and to be easily read by humans
 at the same time. Humans can visually detect the 'templated' parts of the path more easily than the use
 of | in the template could allow. Wider range of paths can be defined in a single template more
-succintly and unambiguously.
+succinctly and unambiguously.
 
 ===Intended use and advantages===
 
@@ -71,7 +71,7 @@ into using well-known paths, or convince other vendors to support their custom p
 scales poorly.
 
 A flexible approach proposed in this document is to define a standard notation for "BIP32 path templates"
-that succintly describes the constraints to impose on the derivation path.
+that succinctly describes the constraints to impose on the derivation path.
 
 Wide support for these path templates will increase interoperability and flexibility of solutions,
 and will allow vendors and individual developers to easily define their own custom restrictions.
@@ -89,7 +89,7 @@ installation of malicious or incorrect profiles, though.
 
 ==Specification==
 
-The format for the template was chosen to make it easy to read, convenient and visually unambigous. 
+The format for the template was chosen to make it easy to read, convenient and visually unambiguous. 
 
 Template starts with optional prefix m/, and then one or more sections delimited by the slash character (/).
 
diff --git a/bip-0098.mediawiki b/bip-0098.mediawiki
index 8540d1ac..a296fdc8 100644
--- a/bip-0098.mediawiki
+++ b/bip-0098.mediawiki
@@ -241,16 +241,16 @@ Disallowing a node with two SKIP branches eliminates what would otherwise be a s
 
 The number of hashing operations required to verify a proof is one less than the number of hashes (SKIP and VERIFY combined),
 and is exactly equal to the number of inner nodes serialized as the beginning of the proof as N.
-The variable-length integer encoding has the property that serialized integers, sorted lexigraphically, will also be sorted numerically.
-Since the first serialized item is the number of inner nodes, sorting proofs lexigraphically has the effect of sorting the proofs by the amount of work required to verify.
+The variable-length integer encoding has the property that serialized integers, sorted lexicographically, will also be sorted numerically.
+Since the first serialized item is the number of inner nodes, sorting proofs lexicographically has the effect of sorting the proofs by the amount of work required to verify.
 
 The number of hashes required as input for verification of a proof is N+1 minus the number of SKIP hashes,
 and can be quickly calculated without parsing the tree structure.
 
-The coding and packing rules for the serialized tree structure were also chosen to make lexigraphical comparison useful (or at least not meaningless).
+The coding and packing rules for the serialized tree structure were also chosen to make lexicographical comparison useful (or at least not meaningless).
 If we consider a fully-expanded tree (no SKIP hashes, all VERIFY) to be encoding a list of elements in the order traversed depth-first from left-to-right,
 then we can extract proofs for subsets of the list by SKIP'ing the hashes of missing values and recursively pruning any resulting SKIP,SKIP nodes.
-Lexigraphically comparing the resulting serialized tree structures is the same as lexigraphically comparing lists of indices from the original list verified by the derived proof.
+Lexicographically comparing the resulting serialized tree structures is the same as lexicographically comparing lists of indices from the original list verified by the derived proof.
 
 Because the number of inner nodes and the number of SKIP hashes is extractible from the tree structure,
 both variable-length integers in the proof are redundant and could have been omitted.
diff --git a/bip-0119.mediawiki b/bip-0119.mediawiki
index d661f4c4..be1f70cb 100644
--- a/bip-0119.mediawiki
+++ b/bip-0119.mediawiki
@@ -193,7 +193,7 @@ Deployment could be done via BIP 9 VersionBits deployed through Speedy Trial.
 The Bitcoin Core reference implementation includes the below parameters,
 configured to match Speedy Trial, as that is the current activation mechanism
 implemented in Bitcoin Core. Should another method become favored by the wider
-Bitcoin comminity, that might be used instead.
+Bitcoin community, that might be used instead.
 
 The start time and bit in the implementation are currently set to bit 5 and
 NEVER_ACTIVE/NO_TIMEOUT, but this is subject to change while the BIP is a draft.
@@ -314,7 +314,7 @@ We treat the number of inputs as a `uint32_t` because Bitcoin's consensus decodi
 to `MAX_SIZE=33554432` and that is larger than `uint16_t` and smaller than `uint32_t`. 32 bits is also
 friendly for manipulation using Bitcoin's current math opcodes, should `OP_CAT` be added. Note that
 the max inputs in a block is further restricted by the block size to around 25,000, which would fit
-into a `uint16_t`, but that is an uneccessary abstraction leak.
+into a `uint16_t`, but that is an unnecessary abstraction leak.
 
 =====Committing to the Sequences Hash=====
 
@@ -362,7 +362,7 @@ scripts cannot be spent at the same index, which implies that they cannot be spe
 This makes it safer to design wallet vault contracts without half-spend vulnerabilities.
 
 Committing to the current index doesn't prevent one from expressing a CHECKTEMPLATEVERIFY which can
-be spent at multiple indicies. In current script, the CHECKTEMPLATEVERIFY operation can be wrapped
+be spent at multiple indices. In current script, the CHECKTEMPLATEVERIFY operation can be wrapped
 in an OP_IF for each index (or Tapscript branches in the future). If OP_CAT or OP_SHA256STREAM are
 added to Bitcoin, the index may simply be passed in by the witness before hashing.
 
@@ -476,7 +476,7 @@ An example of a script that could experience an DoS issue without caching is:
 
      CTV CTV CTV... CTV
 
-Such a script would cause the intepreter to compute hashes (supposing N CTV's) over O(N*T) data.
+Such a script would cause the interpreter to compute hashes (supposing N CTV's) over O(N*T) data.
 If the scriptSigs non-nullity is not cached, then the O(T) transaction could be scanned over O(N)
 times as well (although cheaper than hashing, still a DoS). As such, CTV caches hashes and computations
 over all variable length fields in a transaction.
@@ -616,7 +616,7 @@ sponsors might be considered.
 
 An opcode which verifies the exact amount that is being spent in the
 transaction, the amount paid as fees, or made available in a given output could
-be used to make safer OP_CHECKTEMPLATEVERIFY addressses. For instance, if the
+be used to make safer OP_CHECKTEMPLATEVERIFY addresses. For instance, if the
 OP_CHECKTEMPLATEVERIFY program P expects exactly S satoshis, sending S-1
 satoshis would result in a frozen UTXO and sending S+n satoshis would result in
 n satoshis being paid to fee. A range check could restrict the program to only
diff --git a/bip-0137.mediawiki b/bip-0137.mediawiki
index 575440b1..ccba17fc 100644
--- a/bip-0137.mediawiki
+++ b/bip-0137.mediawiki
@@ -15,7 +15,7 @@
 
 This document describes a signature format for signing messages with Bitcoin private keys.
 
-The specification is intended to describe the standard for signatures of messages that can be signed and verfied between different clients that exist in the field today. Note: that a new signature format has been defined which has a number of advantages over this BIP, but to be backwards compatible with existing implementations this BIP will be useful. See BIP 322 [1] for full details on the new signature scheme.
+The specification is intended to describe the standard for signatures of messages that can be signed and verified between different clients that exist in the field today. Note: that a new signature format has been defined which has a number of advantages over this BIP, but to be backwards compatible with existing implementations this BIP will be useful. See BIP 322 [1] for full details on the new signature scheme.
 
 One of the key problems in this area is that there are several different types of Bitcoin addresses and without introducing specific standards it is unclear which type of address format is being used. See [2]. This BIP will attempt to address these issues and define a clear and concise format for Bitcoin signatures.
 
diff --git a/bip-0140.mediawiki b/bip-0140.mediawiki
index 88131f49..c8f22f78 100644
--- a/bip-0140.mediawiki
+++ b/bip-0140.mediawiki
@@ -62,7 +62,7 @@ This is the standard ''m-of-n'' script defined in [https://github.com/bitcoin/bi
 The existing OP_CHECKMULTISIG and OP_CHECKMULTISIGVERIFY have a bug[[https://bitcoin.org/en/developer-guide#multisig|Developer Documentation - Multisig]] that pops one argument too many from the stack. This bug is not reproduced in the implementation of OP_CHECKSIGEX, so the canonical solution of pushing a dummy value onto the stack is not necessary.
 
 The normalization is achieved by normalizing the transaction before computing the signaturehash, i.e., the hash that is signed.
-The transaction must be normalized by replacing all transaction IDs in the inputs by their normalized variants and stripping the signature scripts. The normalized transction IDs are computed as described in the previous section. This normalization step is performed both when creating the signatures as well as when checking the signatures.
+The transaction must be normalized by replacing all transaction IDs in the inputs by their normalized variants and stripping the signature scripts. The normalized transaction IDs are computed as described in the previous section. This normalization step is performed both when creating the signatures as well as when checking the signatures.
 
 === Tracking Normalized Transaction IDs ===
 
diff --git a/bip-0158/gentestvectors.go b/bip-0158/gentestvectors.go
index e51b9842..2d11b144 100644
--- a/bip-0158/gentestvectors.go
+++ b/bip-0158/gentestvectors.go
@@ -37,7 +37,7 @@ var (
 		{49291, "Tx pays to empty output script"},
 		{180480, "Tx spends from empty output script"},
 		{926485, "Duplicate pushdata 913bcc2be49cb534c20474c4dee1e9c4c317e7eb"},
-		{987876, "Coinbase tx has unparseable output script"},
+		{987876, "Coinbase tx has unparsable output script"},
 		{1263442, "Includes witness data"},
 		{1414221, "Empty data"},
 	}
diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki
index 4815f409..181926bf 100644
--- a/bip-0327.mediawiki
+++ b/bip-0327.mediawiki
@@ -554,7 +554,7 @@ influence whether ''sk1'' or ''sk2'' is provided to ''Sign
 This degree of freedom may allow the adversary to perform a generalized birthday attack and thereby forge a signature
 (see [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-October/021000.html bitcoin-dev mailing list post] and [https://github.com/jonasnick/musig2-tweaking writeup] for details).
 
-Checking ''pk'' against ''InvidualPubkey(sk)'' is a simple way to ensure
+Checking ''pk'' against ''IndividualPubkey(sk)'' is a simple way to ensure
 that the secret key provided to ''Sign'' is fully determined already when ''NonceGen'' is invoked.
 This removes the adversary's ability to influence the secret key after having seen the ''pubnonce''
 and thus rules out the attack.Ensuring that the secret key provided to ''Sign'' is fully determined already when ''NonceGen'' is invoked is a simple policy to rule out the attack,
diff --git a/bip-0340/test-vectors.py b/bip-0340/test-vectors.py
index 317f2ece..9a5a1401 100644
--- a/bip-0340/test-vectors.py
+++ b/bip-0340/test-vectors.py
@@ -99,7 +99,7 @@ def insecure_schnorr_sign_fixed_nonce(msg, seckey0, k):
     e = int_from_bytes(tagged_hash("BIP0340/challenge", bytes_from_point(R) + bytes_from_point(P) + msg)) % n
     return bytes_from_point(R) + bytes_from_int((k + e * seckey) % n)
 
-# Creates a singature with a small x(R) by using k = -1/2
+# Creates a signature with a small x(R) by using k = -1/2
 def vector4():
     one_half = n - 0x7fffffffffffffffffffffffffffffff5d576e7357a4501ddfe92f46681b20a0
     seckey = bytes_from_int(0x763758E5CBEEDEE4F7D3FC86F531C36578933228998226672F13C4F0EBE855EB)
diff --git a/bip-0345.mediawiki b/bip-0345.mediawiki
index a6ead315..bc12f047 100644
--- a/bip-0345.mediawiki
+++ b/bip-0345.mediawiki
@@ -10,7 +10,7 @@
   Type: Standards Track
   Created: 2023-02-03
   License: BSD-3-Clause
-  Post-History: 2023-01-09: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-January/021318.html [bitcoin-dev] OP_VAULT announcment
+  Post-History: 2023-01-09: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-January/021318.html [bitcoin-dev] OP_VAULT announcement
                 2023-03-01: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-March/021510.html [bitcoin-dev] BIP for OP_VAULT
 

 
diff --git a/bip-0351.mediawiki b/bip-0351.mediawiki
index 0a31ca8d..a782b0c8 100644
--- a/bip-0351.mediawiki
+++ b/bip-0351.mediawiki
@@ -31,7 +31,7 @@ A recipient that wishes to receive funds privately has several options. Each has
 
 * The BIP uses a notification mechanism that relies on publicly known per-recipient notification addresses. If Alice wants to send funds to Bob, she has to use the same notification address that everyone else uses to notify Bob. If Alice is not careful with coin selection, i.e. ensuring that her notification UTXO is not linked to her, she will publicly expose herself as someone who is trying to send funds to Bob and their relationship becomes permanently visible on the blockchain.
 
-* The BIP does not say anything about address types. Receiving wallets therefore have to watch all address types that can be created from a single public key. Even then, a sender could send to a script that a receipient cannot spend from.
+* The BIP does not say anything about address types. Receiving wallets therefore have to watch all address types that can be created from a single public key. Even then, a sender could send to a script that a recipient cannot spend from.
 
 ==Method==
 
@@ -113,7 +113,7 @@ Notifications are performed by publishing transactions that contain a 40-byte x * P)[0..4]'' (4 bytes)
 * ''Nx'' is the unique public key a sender is using for a particular recipient (33 bytes)
-* ''address_type'' is the '''ordinal''' value of a single address type that a sender wants to send to (1 byte). This must be selected from the recepient's accepted address types.
+* ''address_type'' is the '''ordinal''' value of a single address type that a sender wants to send to (1 byte). This must be selected from the recipient's accepted address types.
 
 When Alice wants to notify Bob that he will receive future payments from her, she performs the following procedure:
 
diff --git a/bip-0352/reference.py b/bip-0352/reference.py
index c98dac89..9f43695f 100755
--- a/bip-0352/reference.py
+++ b/bip-0352/reference.py
@@ -221,7 +221,7 @@ if __name__ == "__main__":
                 )
                 for input in given["vin"]
             ]
-            # Conver the tuples to lists so they can be easily compared to the json list of lists from the given test vectors
+            # Convert the tuples to lists so they can be easily compared to the json list of lists from the given test vectors
             input_priv_keys = []
             input_pub_keys = []
             for vin in vins:
diff --git a/bip-0389.mediawiki b/bip-0389.mediawiki
index 500d7e3c..72121b74 100644
--- a/bip-0389.mediawiki
+++ b/bip-0389.mediawiki
@@ -36,7 +36,7 @@ For extended keys and their derivations paths in a Key Expression, BIP 380 state
 ** Followed by zero or more /NUM or /NUMh path elements indicating BIP 32 derivation steps to be taken after the given extended key.
 ** Optionally followed by a single /* or /*h final step to denote all direct unhardened or hardened children.
 
-This is modifed to state:
+This is modified to state:
 
 * xpub encoded extended public key or xprv encoded extended private key (as defined in BIP 32)
 ** Followed by zero or more /NUM (may be followed by h, H, or ' to indicate a hardened step) path elements indicating BIP 32 derivation steps to be taken after the given extended key.

From 996e31fa168a6b243ebae54f1bf0b2b8052cc659 Mon Sep 17 00:00:00 2001
From: Tom Briar 
Date: Tue, 9 Jan 2024 11:47:40 -0500
Subject: [PATCH 110/288] bip-tombriar-compressed-transactions

---
 ...tombriar-compressed-transactions.mediawiki | 301 ++++++++++++++++++
 1 file changed, 301 insertions(+)
 create mode 100644 bip-tombriar-compressed-transactions.mediawiki

diff --git a/bip-tombriar-compressed-transactions.mediawiki b/bip-tombriar-compressed-transactions.mediawiki
new file mode 100644
index 00000000..3392234b
--- /dev/null
+++ b/bip-tombriar-compressed-transactions.mediawiki
@@ -0,0 +1,301 @@
+
+  BIP: 337
+  Layer: API/RPC
+  Title: Compressed Transactions
+  Author: Tom Briar 
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-tombriar-compressed-transactions
+  Status: Draft
+  Type: Standards Track
+  Created: 2024-02-01
+  License: BSD-3-Clause
+  Post-History: https://github.com/bitcoin/bitcoin/pull/29134
+                https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-August/021924.html
+

+
+== Introduction ==
+
+=== Abstract ===
+This document proposes a serialization scheme for compressing Bitcoin transactions. The compressed Bitcoin transactions can reach a serialized size of less than 50% of the original serialized transaction. One method for compressing involves reducing the transaction outpoints in a potentially lossy way. Therefore, it is an optional path for compression. Compressing the outpoints is necessary for compressed transactions to reach less than 70% of the original size.
+
+=== Motivation ===
+Typical Bitcoin transactions usually contain a large amount of white space and padding due to specific fields that are often one of a minimal number of possibilities. We can use this fact and a few similar methods to create an encoding for 90% of Bitcoin transactions that are roughly 25-50% smaller.
+
+There exists a working-in-progress app that allows the use of steganography to encode data in images to be passed around via various social media groups. When used in conjunction with this compression scheme and an elligator squared encryption, this would allow for a very secure and private form of broadcasting bitcoin transactions.
+
+=== Rationale ===
+
+The four main methods to achieve a lower transaction size are:
+
+1. Packing transaction metadata before it and each of its inputs and outputs to determine the following data structure.
+
+2. Replacing 32-bit numeric values with either variable-length integers (VarInts) or compact integers (CompactSizes).
+
+3. Using compressed signatures and public key recovery upon decompression.
+
+4. Replacing the 36-byte Outpoint txid/vout pair with a block height and index.
+
+
+=== Backwards Compatibility ===
+
+There are no concerns with backwards compatibility.
+
+=== Specification ===
+
+==== Primitives ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| CompactSize || 1-5 Bytes || For 0-253, encode the value directly in one byte. For 254-65535, encode 254 followed by two little-endian bytes. For 65536-(2^32-1), encode 255 followed by four little-endian bytes.
+|-
+| CompactSize Flag || 2 Bits || 1, 2, or 3 indicate literal values. 0 indicates that a CompactSize encoding of the value will follow.
+|-
+| VarInt || 1+ Bytes || 7-bit little-endian encoding, with each 7-bit word encoded in a byte. The highest bit of each byte is one if more bytes follow, and 0 for the last byte.
+|-
+| VLP-Bytestream || 2+ Bytes || A VarInt Length Prefixed Bytestream. It uses the prefixed VarInt to determine the length of the following byte stream.
+|}
+
+==== General Schema ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Transaction metadata || 1 Bytes || Information on the structure of the transaction. See [[#transaction-metadata|Transaction Metadata]]
+|-
+| Version || 0-5 Bytes || If present according to the metadata field, a CompactSize encoding of the transaction version.
+|-
+| Input Count || 0-5 Bytes || If present according to the metadata field, a CompactSize encoding of the transaction input count.
+|-
+| Output Count || 0-5 Bytes || If present according to the metadata field, a CompactSize encoding of the transaction output count.
+|-
+| LockTime || 0-5 Bytes || If present according to the metadata field, a CompactSize encoding of the transaction LockTime.
+|-
+| Minimum Blockheight || 1-5 Bytes || If present according to the metadata field, a VarInt encoding of the minimum block height for transaction compressed inputs and LockTime.
+|-
+| Input Metadata+Output Metadata || 1+ Bytes || An encoding containing the metadata for all the inputs followed by all the outputs of the transaction. For each input, see [[#input-metadata|Input Metadata]], and for each output, see [[#output-metadata|Output Metadata]].
+|-
+| Input Data || 66+ Bytes || See [[#input-data|Input Data]].
+|-
+| Output Data || 3+ Bytes || See [[#output-data|Output Data]].
+|}
+
+
+==== Transaction Metadata ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Version || 2 Bits || A CompactSize flag for the transaction version.
+|-
+| Input Count || 2 Bits || A CompactSize flag for the transaction input count.
+|-
+| Output Count || 2 Bits || A CompactSize flag for the transaction output count.
+|-
+| LockTime || 1 Bit || A boolean to indicate if the transaction has a LockTime.
+|-
+| Minimum Blockheight || 1 Bit || A boolean to indicate if the transaction minimum block height is greater than zero.
+|}
+
+
+==== Input Metadata ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Compressed Signature || 1 Bit || A Boolean do determine if this input's signature is compressed. The signature is only compressed for P2TR on a key spend and for P2SH when it is a wrapped P2SH-WPKH.
+|-
+| Standard Hash || 1 Bit || A Boolean to determine if this input's signature hash type is standard (0x00 for Taproot, 0x01 for Legacy/Segwit).
+|-
+| Standard Sequence || 2 Bits || A CompactSize flag for this input's sequence. Encode literal values as follows: 1 = 0x00000000, 2 = 0xFFFFFFFE, 3 = 0xFFFFFFFF.
+|-
+| Compressed OutPoint || 1 bit || A Boolean to determine if the input's outpoint is compressed.
+|}
+
+
+==== Output Metadata ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Encoded Script Type || 3 Bits || [[#script-type-encoding|Encoded Script Type]].
+|}
+
+
+==== Script Type Encoding ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Script Type !! Value
+|-
+| Uncompressed Custom Script || 0b000
+|-
+| Uncompressed P2PK || 0b001
+|-
+| Compressed P2PK || 0b010
+|-
+| P2PKH || 0b011
+|-
+| P2SH || 0b100
+|-
+| P2WPKH || 0b101
+|-
+| P2WSH || 0b110
+|-
+| P2TR || 0b111
+|}
+
+
+==== Input Data ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Outpoint || 2-37 Bytes || The Outpoint Txid/Vout are determined to be compressed or otherwise by the "Compressed Outpoint" Boolean in the input metadata. For each compressed outpoint see [[#compressed-outpoint|Compressed Outpoint]]. For each uncompressed signature see [[#uncompressed-outpoint|Uncompressed Outpoint]].
+|-
+| Signature || 64+ Bytes || The Signature is determined to be compressed or otherwise by the output script of the previous transaction. For each compressed signature see [[#compressed-signature|Compressed Signature]]. For each uncompressed signature see [[#uncompressed-signature|Uncompressed Signature]].
+|-
+| Sequence || 0-5 Bytes || If present due to a non-standard sequence, a VarInt encoding of the sequence.
+|}
+
+
+==== Compressed Outpoint ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Txid Block Height || 1-5 Bytes || A VarInt containing the offset from Minimum Blockheight for this Txid.
+|-
+| Txid Block Index || 1-5 Bytes || A VarInt containing the flattened index from the Txid block height for the Vout.
+|}
+
+
+==== Uncompressed Outpoint ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Txid || 32 Bytes || Contains the 32 Byte Txid.
+|-
+| Vout || 1-5 Bytes || A CompactSize Containing the Vout of the Txid.
+|}
+
+
+
+==== Compressed Signature ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Signature || 64 Bytes || Contains the 64 Byte signature.
+|-
+| Pubkey Hash || 0-20 Bytes || If input is P2SH-P2WPKH contains the 20 byte hash of the public key.
+|-
+| Hash Type || 0-1 Bytes || An Optional Byte containing the Hash Type if it was non-standard.
+|}
+
+
+==== Uncompressed Signature ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Signature || 2+ Bytes || A VLP-Bytestream containing the signature.
+|}
+
+
+==== Output Data ====
+
+{| class="wikitable" style="margin:auto"
+|-
+! Name !! Width !! Description
+|-
+| Output Script || 2+ Bytes || A VLP-Bytestream containing the output script.
+|-
+| Amount || 1-9 Bytes || A VarInt containing the output amount.
+|}
+
+==== Ideal Transaction ====
+
+The compression scheme was designed to be optimal for a "typical" transaction, spending a few close-in-age inputs and having one or two outputs. Here are size
+values for such a transaction, which demonstrate the effectiveness of the compression.
+
+{| class="wikitable" style="margin:auto"
+|-
+! Field !! Requirements !! Savings Up To
+|-
+| Version || Less than four || 30 Bits
+|-
+| Input Count || Less than four || 30 Bits
+|-
+| Output Count || Less than four || 30 Bits
+|-
+| LockTime || 0 || 30 Bits
+|-
+| Input Sequence || 0x00, 0xFFFFFFFE, or 0xFFFFFFFF || 62 Bits For Each Input
+|-
+| Input Txid || Compressed Outpoint || 23 - 31 Bytes For Each Input
+|-
+| Input Vout || Compressed Outpoint || (-1) - 3 Bytes For Each Input
+|-
+| Input Signature  || Non-custom Script Signing || 40 - 72 Bytes For Each Legacy Input
+|-
+| Input Hash Type || 0x00 for Taproot, 0x01 for Legacy || 7 Bits For Each Input
+|-
+| Output Script || Non-custom Scripts || 2 - 5 Bytes For Each Output
+|-
+| Output Amount || No Restrictions || (-1) - 7 Bytes For Each Output
+|}
+
+=== Reference Implementation ===
+
+This reference implementation adds two new RPC endpoints, compressrawtransaction and decompressrawtransaction. The first accepts a raw hex-encoded transaction and returns a compact hex-encoded transaction; also included in the output is a list of warnings to help ensure there are no unexpected uncompressed values. The second accepts a compact hex transaction and returns the uncompressed raw hex-encoded transaction.
+
+https://github.com/bitcoin/bitcoin/pull/29134
+
+=== Test Vectors ===
+
+==== Taproot ====
+
+===== Uncompressed =====
+020000000001017ad1d0cc314504ec06f1b5c786c50cf3cda30bd5be88cf08ead571b0ce7481fb0000000000fdffffff0188130000000000001600142da377ed4978fefa043a58489912f8e28e16226201408ce65b3170d3fbc68e3b6980650514dc53565f915d14351f83050ff50c8609495b7aa96271c3c99cdac1a92b1b45e77a4a870251fc1673596793adf2494565e500000000
+
+===== Compressed =====
+96b1ec7f968001b0218ce65b3170d3fbc68e3b6980650514dc53565f915d14351f83050ff50c8609495b7aa96271c3c99cdac1a92b1b45e77a4a870251fc1673596793adf2494565e58efefefe7d2da377ed4978fefa043a58489912f8e28e162262a608
+
+==== P2WPKH ====
+
+===== Uncompressed =====
+0200000000010144bcf05ab48b8789268a7ca07133241ad654c0739ac7165015b2d669eadb10ea0000000000fdffffff0188130000000000001600142da377ed4978fefa043a58489912f8e28e16226202473044022043ab639a98dfbc704f16a35bf25b8b72acb4cb928fd772285f1fcf63725caa85022001c9ff354504e7024708bce61f30370c8db13da8170cef4e8e4c4cdad0f71bfe0121030072484c24705512bfb1f7f866d95f808d81d343e552bc418113e1b9a1da0eb400000000
+
+===== Compressed =====
+96b1ec71968001932643ab639a98dfbc704f16a35bf25b8b72acb4cb928fd772285f1fcf63725caa8501c9ff354504e7024708bce61f30370c8db13da8170cef4e8e4c4cdad0f71bfe8efefefe7d2da377ed4978fefa043a58489912f8e28e162262a608
+
+==== P2SH-P2WPKH ====
+
+===== Uncompressed =====
+0200000000010192fb2e4332b43dc9a73febba67f3b7d97ba890673cb08efde2911330f77bbdfc00000000171600147a1979232206857167b401fdac1ffbf33f8204fffdffffff0188130000000000001600142da377ed4978fefa043a58489912f8e28e16226202473044022041eb682e63c25b85a5a400b11d41cf4b9c25f309090a5f3e0b69dc15426da90402205644ddc3d5179bab49cce4bf69ebfaeab1afa34331c1a0a70be2927d2836b0e8012103c483f1b1bd24dd23b3255a68d87ef9281f9d080fd707032ccb81c1cc56c5b00200000000
+
+===== Compressed =====
+96b1ec7c9e8001981641eb682e63c25b85a5a400b11d41cf4b9c25f309090a5f3e0b69dc15426da9045644ddc3d5179bab49cce4bf69ebfaeab1afa34331c1a0a70be2927d2836b0e87a1979232206857167b401fdac1ffbf33f8204ff8efefefe7d2da377ed4978fefa043a58489912f8e28e162262a608
+
+==== P2PKH ====
+
+===== Uncompressed =====
+02000000015f5be26862482fe2fcc900f06ef26ee256fb205bc4773e5a402d0c1b88b82043000000006a473044022031a20f5d9212023b510599c9d53d082f8e07faaa2d51482e078f8e398cb50d770220635abd99220ad713a081c4f20b83cb3f491ed8bd032cb151a3521ed144164d9c0121027977f1b6357cead2df0a0a19570088a1eb9115468b2dfa01439493807d8f1294fdffffff0188130000000000001600142da377ed4978fefa043a58489912f8e28e16226200000000
+
+===== Compressed =====
+96b1ec7c968001981431a20f5d9212023b510599c9d53d082f8e07faaa2d51482e078f8e398cb50d77635abd99220ad713a081c4f20b83cb3f491ed8bd032cb151a3521ed144164d9c8efefefe7d2da377ed4978fefa043a58489912f8e28e162262a608
+
+
+== Acknowledgements ==
+Thank you to Andrew Poelstra, who helped invent and develop the ideas in the proposal and the code for reference implementation.

From 73cfb05b94058e7acf06ef6762b4a4158b631731 Mon Sep 17 00:00:00 2001
From: Murch 
Date: Tue, 28 May 2024 14:35:46 -0400
Subject: [PATCH 111/288] BIP-0337: Fix Comments-URI

---
 bip-tombriar-compressed-transactions.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-tombriar-compressed-transactions.mediawiki b/bip-tombriar-compressed-transactions.mediawiki
index 3392234b..e87c5bc2 100644
--- a/bip-tombriar-compressed-transactions.mediawiki
+++ b/bip-tombriar-compressed-transactions.mediawiki
@@ -3,7 +3,7 @@
   Layer: API/RPC
   Title: Compressed Transactions
   Author: Tom Briar 
-  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-tombriar-compressed-transactions
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0337
   Status: Draft
   Type: Standards Track
   Created: 2024-02-01

From f240c402848fc467d2aa9a7062c943a9bf3b1f4c Mon Sep 17 00:00:00 2001
From: Murch 
Date: Tue, 28 May 2024 14:37:43 -0400
Subject: [PATCH 112/288] BIP-0337: Add table entry, move to numbered file

---
 README.mediawiki                                           | 7 +++++++
 ...compressed-transactions.mediawiki => bip-0337.mediawiki | 0
 2 files changed, 7 insertions(+)
 rename bip-tombriar-compressed-transactions.mediawiki => bip-0337.mediawiki (100%)

diff --git a/README.mediawiki b/README.mediawiki
index 710e128e..c82b2bdf 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1037,6 +1037,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Standard
 | Draft
 |-
+| [[bip-0337.mediawiki|337]]
+| API/RPC
+| Compressed Transactions
+| Tom Briar
+| Standard
+| Draft
+|-
 | [[bip-0338.mediawiki|338]]
 | Peer Services
 | Disable transaction relay message
diff --git a/bip-tombriar-compressed-transactions.mediawiki b/bip-0337.mediawiki
similarity index 100%
rename from bip-tombriar-compressed-transactions.mediawiki
rename to bip-0337.mediawiki

From 46a2440718ce96681155e4c96bfc373d079d2eef Mon Sep 17 00:00:00 2001
From: cocoyeal 
Date: Wed, 29 May 2024 16:18:11 +0800
Subject: [PATCH 113/288] remove duplicated words

---
 bip-0047.mediawiki | 6 +++---
 bip-0093.mediawiki | 2 +-
 bip-0115.mediawiki | 2 +-
 bip-0116.mediawiki | 2 +-
 bip-0135.mediawiki | 6 +++---
 bip-0350.mediawiki | 2 +-
 bip-0352.mediawiki | 2 +-
 bip-0372.mediawiki | 2 +-
 8 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/bip-0047.mediawiki b/bip-0047.mediawiki
index a15a15de..c44bea9d 100644
--- a/bip-0047.mediawiki
+++ b/bip-0047.mediawiki
@@ -17,7 +17,7 @@ RECENT CHANGES:
 
 ==Status==
 
-This BIP can be be considered final in terms of enabling compatibility with wallets that implement version 1 and version 2 reusable payment codes, however future developments of the reusable payment codes specification will not be distributed via the BIP process.
+This BIP can be considered final in terms of enabling compatibility with wallets that implement version 1 and version 2 reusable payment codes, however future developments of the reusable payment codes specification will not be distributed via the BIP process.
 
 The Open Bitcoin Privacy Project RFC repo should be consulted for specifications related to version 3 or higher payment codes: https://github.com/OpenBitcoinPrivacyProject/rfc
 
@@ -350,12 +350,12 @@ Version 2 payment codes behave identifically to version 1 payment codes, except
 
 ====Definitions====
 
-* Notification change output: the change output from a notification transaction which which resides in the sender's wallet, but can be automatically located by the intended recipient
+* Notification change output: the change output from a notification transaction which resides in the sender's wallet, but can be automatically located by the intended recipient
 * Payment code identifier: a 33 byte representation of a payment code constructed by prepending 0x02 to the SHA256 hash of the binary serialization of the payment code
 
 ====Notification Transaction====
 
-Note: this procedure is used if Bob uses a version 2 payment code (regardless of the the version of Alice's payment code). If Bob's payment code is not version 2, see the appropriate section in this specification.
+Note: this procedure is used if Bob uses a version 2 payment code (regardless of the version of Alice's payment code). If Bob's payment code is not version 2, see the appropriate section in this specification.
 
 # Construct a notification transaction as per the version 1 instructions, except do not create the output to Bob's notification address
 # Create a notification change address as follows:
diff --git a/bip-0093.mediawiki b/bip-0093.mediawiki
index da349fdd..22a7ba32 100644
--- a/bip-0093.mediawiki
+++ b/bip-0093.mediawiki
@@ -354,7 +354,7 @@ Instead every different language has it own word list (or word lists) and each c
 We would need to encode the choice of word list in our share's meta-data, which takes up even more room, and is difficult to specify due to the ever-evolving choice of word lists.
 
 Alternatively we could standardize on the choice of the English word list, something that is nearly a de facto standard, and simply be incompatible with BIP-0039 wallets of other languages.
-Such a choice also risks users of BIP-0039 recovering their entropy from their language, encoding it in in Codex32 and then failing to recover their wallet because the English word lists has replaced their language's word list.
+Such a choice also risks users of BIP-0039 recovering their entropy from their language, encoding it in Codex32 and then failing to recover their wallet because the English word lists has replaced their language's word list.
 
 The main advantage of this alternative approach would be that wallets could give users an option switch between backing up their entropy as a BIP-0039 mnemonic and in Codex32 format, but again, only if their language choice happens to be the English word list.
 In practice, we do not expect users in switch back and forth between backup formats, and instead just generate a fresh master seed using Codex32.
diff --git a/bip-0115.mediawiki b/bip-0115.mediawiki
index 8bc90f69..042d0570 100644
--- a/bip-0115.mediawiki
+++ b/bip-0115.mediawiki
@@ -98,7 +98,7 @@ What if ParamBlockHash has leading zeros? Should this be prevented?
 
 * If leading zeros are included, they should be compared to the actual block hash. (If they were truncated, fewer bytes would be compared.)
 * It is unlikely that the leading zeros will ever be necessary for sufficient precision, so the additional space is not a concern.
-* Since all block hashes are in principle shorter than than 29 bytes, ParamBlockHash may not be larger than 28 bytes.
+* Since all block hashes are in principle shorter than 29 bytes, ParamBlockHash may not be larger than 28 bytes.
 
 Why is it safe to allow checking blocks as recently as the immediate previous block?
 
diff --git a/bip-0116.mediawiki b/bip-0116.mediawiki
index 86b0f9aa..70b340f5 100644
--- a/bip-0116.mediawiki
+++ b/bip-0116.mediawiki
@@ -59,7 +59,7 @@ This includes execution pathways or policy conditions which end up not being nee
 Not only is it inefficient to require this unnecessary information to be present on the blockchain, albeit in the witness, it also impacts privacy and fungibility as some unused script policies may be identifying.
 Using a Merkle hash tree to commit to the policy options, and then only forcing revelation of the policy used at redemption minimizes this information leakage.
 
-Using Merkle hash trees to commit to policy allows for considerably more complex contracts than would would otherwise be possible, due to various built-in script size and runtime limitations.
+Using Merkle hash trees to commit to policy allows for considerably more complex contracts than would otherwise be possible, due to various built-in script size and runtime limitations.
 With Merkle commitments to policy these size and runtime limitations constrain the complexity of any one policy that can be used rather than the sum of all possible policies.
 
 ==Rationale==
diff --git a/bip-0135.mediawiki b/bip-0135.mediawiki
index 1324746d..a4c06472 100644
--- a/bip-0135.mediawiki
+++ b/bip-0135.mediawiki
@@ -170,7 +170,7 @@ A given deployment SHALL remain in the DEFINED state until it either passes the
 starttime (and becomes STARTED) or the timeout time (and becomes FAILED).
 
 Once a deployment has STARTED, the signal for that deployment SHALL be tallied
-over the the past windowsize blocks whenever a new block is received on that
+over the past windowsize blocks whenever a new block is received on that
 chain.
 
 A transition from the STARTED state to the LOCKED_IN state SHALL only occur
@@ -183,7 +183,7 @@ when all of these are true:
 A similar height synchronization precondition SHALL exist for the transition from
 LOCKED_IN to ACTIVE.
 These synchronization conditions are expressed by the "mod(height, windowsize) = 0"
-clauses in the diagram, and have been been added so that backward compatibility
+clauses in the diagram, and have been added so that backward compatibility
 with BIP9's use of the 2016-block re-targeting periods can be configured for
 existing deployments (see above 'Optional full backward compatibility' section).
 
@@ -261,7 +261,7 @@ proposal, although a conventional fallow period of 3 months is RECOMMENDED.
 Due to the constraints set by BIP 34, BIP 66 and BIP 65, there are only
 0x7FFFFFFB possible nVersion values available. This limits to at most 30
 independent deployments.
-By restricting the top 3 bits to 001 we we are left with 29 out of those for
+By restricting the top 3 bits to 001 we are left with 29 out of those for
 the purposes of this proposal, and support two future upgrades for different
 mechanisms (top bits 010 and 011).
 
diff --git a/bip-0350.mediawiki b/bip-0350.mediawiki
index 439b2a25..4c30b8f8 100644
--- a/bip-0350.mediawiki
+++ b/bip-0350.mediawiki
@@ -217,7 +217,7 @@ their invalidity.
 
 Checksums are used to detect errors introduced into data during transfer. A hash function-based checksum such as Base58Check detects any type of error uniformly, but not all classes of errors are equally likely to occur in practice. Bech32 prioritizes detection of substitution errors, but improving detection of one error class inevitably worsens detection of other error classes. During the design of Bech32, it was assumed that other simple error patterns beside substitutions would have a similar detection rate as in a hash function-based design, and detection would only be worse for complex, impractical errors. The discovered insertion weakness shows that this is not the case.
 
-For Bech32m, we aim to retain Bech32's guarantees for substitution errors, but make sure that other common errors don't perform worse than a hash function-based checksum would. To make sure the new standard is easy to implement, we restrict the design space to only amending the final constant that is xored in, as it was [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-December/017521.html observed] that that is sufficient to mitigate the 'q' insertion issue while retaining the intended substitution error detection. In what follows, we explain how the new constant ''0x2bc830a3'' was chosen.
+For Bech32m, we aim to retain Bech32's guarantees for substitution errors, but make sure that other common errors don't perform worse than a hash function-based checksum would. To make sure the new standard is easy to implement, we restrict the design space to only amending the final constant that is xored in, as it was [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-December/017521.html observed] that is sufficient to mitigate the 'q' insertion issue while retaining the intended substitution error detection. In what follows, we explain how the new constant ''0x2bc830a3'' was chosen.
 
 ===Error patterns & detection probability===
 
diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 0eff355e..4cbf9d72 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -451,7 +451,7 @@ This distinction makes the problem for light clients more clear: light clients n
 
 Recall that a silent payment eligible transaction follows [[#scanning-silent-payment-eligible-transactions|certain conditions]] and should have at least one unspent taproot output. Full nodes (or any index server backed by a full node, such as electrum server) can build an index which collects all of the eligible public keys for a silent payments eligible transaction, sums them up, multiplies the sum by the ''input_hash'', and serves them to clients. This would be 33 bytes per silent payment eligible transaction.
 
-For a typical bitcoin block of ~3500 txs, lets assume every transaction is a silent payments eligible transaction. This means a client would need to request ''33 bytes * 3500'' of data per block (roughly 100 kB per block). If a client were to request data for every block, this would amount to ~450 MB per month, assuming 100% taproot usage and all outputs remain unspent for > 1 month. As of today, these numbers are closer to 2–10 kB per block (10–50 MB per month)''' Data for Appendix A ''' These numbers are based on data from January 2023 until June 2023 (the last 6 months of data at time time of writing). See [https://github.com/josibake/bitcoin-data-analysis/blob/main/notebooks/silent-payments-light-client-data.ipynb Silent payments light client data] for the full analysis..
+For a typical bitcoin block of ~3500 txs, lets assume every transaction is a silent payments eligible transaction. This means a client would need to request ''33 bytes * 3500'' of data per block (roughly 100 kB per block). If a client were to request data for every block, this would amount to ~450 MB per month, assuming 100% taproot usage and all outputs remain unspent for > 1 month. As of today, these numbers are closer to 2–10 kB per block (10–50 MB per month)''' Data for Appendix A ''' These numbers are based on data from January 2023 until June 2023 (the last 6 months of data at the time of writing). See [https://github.com/josibake/bitcoin-data-analysis/blob/main/notebooks/silent-payments-light-client-data.ipynb Silent payments light client data] for the full analysis..
 
 === Transaction cut-through ===
 
diff --git a/bip-0372.mediawiki b/bip-0372.mediawiki
index bf98b7c0..ee40dd0d 100644
--- a/bip-0372.mediawiki
+++ b/bip-0372.mediawiki
@@ -17,7 +17,7 @@
 ===Abstract===
 
 This document proposes additional fields for BIP 174 PSBTv0 and BIP 370 PSBTv2
-that allow for pay-to-contract key tweaking data data to be included in a PSBT
+that allow for pay-to-contract key tweaking data to be included in a PSBT
 of any version. These will represent an extra-transaction information required
 for the signer to produce valid signatures spending previous outputs.
 

From 4f75edb2b85f55f5723e379584e52181f5f44269 Mon Sep 17 00:00:00 2001
From: Matt Corallo 
Date: Sat, 10 Feb 2024 22:46:16 +0000
Subject: [PATCH 114/288] Add a BIP which resolves human readable names into
 payment info

User behavior has clearly indicated a strong demand for the
resolution of human-readable names into payment instructions. This
BIP defines a protocol to do so using only the DNS, providing for
the ability to query such resolutions privately, while utilizing
DNSSEC to provide compact and simple to verify proofs of mappings.
---
 README.mediawiki   |   7 +++
 bip-0353.mediawiki | 130 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 137 insertions(+)
 create mode 100644 bip-0353.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 6dbd7984..8e6deb8e 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1086,6 +1086,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0353.mediawiki|353]]
+| Applications
+| DNS Payment Instructions
+| Matt Corallo, Bastien Teinturier
+| Standard
+| Draft
+|-
 | [[bip-0370.mediawiki|370]]
 | Applications
 | PSBT Version 2
diff --git a/bip-0353.mediawiki b/bip-0353.mediawiki
new file mode 100644
index 00000000..16466724
--- /dev/null
+++ b/bip-0353.mediawiki
@@ -0,0 +1,130 @@
+
+  BIP: 353
+  Layer: Applications
+  Title: DNS Payment Instructions
+  Author: Matt Corallo 
+          Bastien Teinturier 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0353
+  Status: Draft
+  Type: Standards Track
+  Created: 2024-02-10
+  License: CC0-1.0
+  Post-History: 2024-02-13: https://groups.google.com/g/bitcoindev/c/uATaflkYglQ [bitcoin-dev] Mapping Human-Readable Names to Payment Instructions
+

+
+
+==Copyright==
+
+This BIP is licensed under the CC0-1.0 license.
+
+==Abstract==
+This BIP proposes a standard format for encoding [[bip-0021.mediawiki|BIP 21]] URI schemes in DNS TXT records.
+
+==Motivation==
+Various Bitcoin and other cryptocurrency applications have developed human-readable names for payment instructions over time, with marketplace adoption signaling strong demand for it from users.
+
+The DNS provides a standard, global, hierarchical namespace mapping human-readable labels to records of various forms. Using DNSSEC, the DNS provides cryptographic guarantees using a straightforward PKI which follows the hierarchical nature of the DNS, allowing for stateless and even offline validation of DNS records from a single trusted root.
+
+Further, because DNS queries are generally proxied through ISP-provided or other resolvers, DNS queries usually do not directly expose the queryer's IP address. Further, because of the prevalence of open resolvers, the simplicity of the protocol, and broad availability of DNS recursive resolver implementations, finding a proxy for DNS records is trivial.
+
+Thus, using TXT records to store Bitcoin payment instructions allows for human-readable Bitcoin payment destinations which can be trivially verified on hardware wallets and which can be resolved relatively privately.
+
+==Specification==
+
+=== General rules for handling ===
+Bitcoin wallets MUST NOT prefer to use DNS-based resolving when methods with explicit public keys or addresses are available. In other words, if a standard Bitcoin address or direct BIP 21 URI is available or would suffice, Bitcoin wallets MUST prefer to use that instead.
+
+=== Records ===
+Payment instructions are indexed by both a user and a domain. Instructions for a given `user` and `domain` are stored at `user`.user._bitcoin-payment.`domain` in a single TXT record.
+
+All payment instructions MUST be DNSSEC-signed.
+
+Payment instructions MAY resolve through CNAME or DNAME records as long as all such records and the ultimate records pointed to by them are DNSSEC signed.
+
+User and domain names which are not expressible using standard printable ASCII MUST be encoded using the punycode IDN encoding defined in [[https://datatracker.ietf.org/doc/html/rfc3492|RFC 3492]] and [[https://datatracker.ietf.org/doc/html/rfc5891|RFC 5891]].
+
+Note that because resolvers are not required to support resolving non-ASCII identifiers, wallets SHOULD avoid using non-ASCII identifiers.
+
+=== Resolution ===
+
+Clients resolving Bitcoin payment instructions MUST ignore any TXT records at the same label which do not begin with (ignoring case) "bitcoin:". Resolvers encountering multiple "bitcoin:"-matching TXT records at the same label MUST treat the records as invalid and refuse to use any payment instructions therein.
+
+Clients resolving Bitcoin payment instructions MUST fully validate DNSSEC signatures leading to the DNS root (including any relevant CNAME or DNAME records) and MUST NOT accept DNSSEC signatures which use SHA-1 or RSA with keys shorter than 1024 bits. Resolvers MAY accept SHA-1 DS records.
+
+Clients resolving Bitcoin payment instructions MUST NOT trust a remote resolver to validate DNSSEC records on their behalf.
+
+Clients resolving Bitcoin payment instructions MUST support resolving through CNAME or DNAME records.
+
+Resolvers MAY support resolving non-ASCII user and domain identifiers. Resolvers which do support non-ASCII user and domain identifiers MUST take precautions to prevent homograph attacks and SHOULD consider denying paste functionality when entering non-ASCII identifiers. Wallets which do not take any such precautions MUST instead display non-ASCII user and domain identifiers using their raw punycode. As such, wallets SHOULD NOT create identifiers which are not entirely printable ASCII.
+
+While clients MAY cache the payment instructions they receive from the DNS, clients MUST NOT cache the payment instructions received from the DNS for longer than the TTL provided by their DNS resolver, and further MUST NOT cache the payment instructions for longer than the lowest initial TTL (which is signed as a part of DNSSEC signatures) received in the full DNSSEC chain leading from the DNS root to the resolved TXT record.
+
+=== Address Reuse ===
+
+Payment instructions with on-chain addresses which will be re-used SHOULD be rotated as regularly as possible to reduce address reuse. Such payment instructions SHOULD also use a relatively short DNS TTL to ensure regular rotation takes effect quickly. In cases where this is not practical, payment instructions SHOULD NOT contain on-chain addresses (i.e. the URI path SHOULD be empty).
+
+Payment instructions which do contain on-chain addresses which will be re-used SHOULD be rotated after any transaction to such an address is confirmed on-chain.
+
+=== Display ===
+
+Wallets SHOULD parse recipient information in the form `user`@`domain` or ₿`user`@`domain` and resolve such entry into recipient information using the above record. Similarly, wallets accepting payment information from external devices (e.g. hardware wallets) SHOULD accept RFC 9102-formatted proofs (as a series of unsorted `AuthenticationChain` records) and, if they verify, SHOULD display the recipient in the form ₿`user`@`domain`. For the avoidance of doubt, the ₿ is *not* included in the DNS label which is resolved.
+
+Wallets providing users the ability to "copy" their address information generally SHOULD copy the underlying URI directly in order to avoid the DNS indirection. However, wallets providing users the ability to copy their human-readable address information MUST include the ₿ prefix (i.e. copy it in the form ₿`user`@`domain`).
+
+== Rationale ==
+
+=== Display ===
+
+There are several ways in which human-readable payment instructions could be displayed in wallets. In order to ensure compatibility with existing human-readable names schemes, @ is used as the separator between the `user` and `domain` parts. However, simply using the @ separator can lead to confusion between email addresses on a given domain and payment instructions on a domain. In order to somewhat reduce the incidence of such confusion, a ₿ prefix is used.
+
+=== Rotation ===
+
+On-chain addresses which are re-used (i.e. not including schemes like [[bip-0352.mediawiki|Silent Payments]]) need to be rotated to avoid contributing substantially to address reuse. However, rotating them on a timer or any time a transaction enters the mempool could lead to substantial overhead from excess address generation. Instead, rotating addresses any time a transaction is confirmed on-chain ensures address rotation happens often while bounding the maximum number of addresses needed to one per block, which grows very slowly and will not generate an address set too large to handle while scanning the chain going forward.
+
+=== Alternatives ===
+There are many existing schemes to resolve human-readable names to cryptocurrency payment instructions. Sadly, these current schemes suffer from a myriad of drawbacks, including (a) lacking succinct proofs of namespace to public key mappings, (b) revealing sender IP addresses to recipients or other intermediaries as a side-effect of payment, (c) relying on the bloated TLS Certificate Authority infrastructure, or (d) lacking open access, not allowing anyone to create a namespace mapping.
+
+==== DNS Rather than blockchain-based solutions ====
+There are many blockchain-based alternatives to the DNS which feature better censorship-resistance and, in many cases, security. However, here we chose to use the standard ICANN-managed DNS namespace as many blockchain-based schemes suffer from (a), above (though in some cases this could be addressed with cryptographic SNARK schemes). Further, because they do not have simple client-side querying ability, many of these schemes use trusted intermediaries which resolve names on behalf of clients. This reintroduces drawbacks (b) and often (c) as well.
+
+Finally, it is worth noting that none of the blockchain-based alternatives to the DNS have had material adoption outside of their specific silos, and committing Bitcoin wallets to rely on a separate system which doesn't see broad adoption may not be sustainable.
+
+==== DNS Rather than HTTP-based solutions ====
+HTTP(s)-based payment instruction resolution protocols suffer from drawbacks (a), (b), and (c), above, and generally shouldn't be considered a serious alternative for payment instruction resolution.
+
+==== Private DNS Querying ====
+While public recursive DNS resolvers are very common (e.g. 1.1.1.1, 8.8.8.8, and 9.9.9.9), using such resolvers directly (even after validating DNSSEC signatures) introduces drawback (b), at least in regard to a centralized intermediary. Resolving payment instructions recursively locally using a resolver on the same local network or in the paying application would instead introduce drawback (b) directly to the recipient, which may well be worse.
+
+For payers not using VPN or other proxying technologies, they generally trust their ISP to not snoop on their DNS requests anyway, so using ISP-provided recursive DNS resolvers is likely the best option.
+
+However, for the best privacy, payers are encouraged to perform DNS resolution over Tor or another VPN technology.
+
+Lightning payers should consider utilizing DNS resolution over native onion messages, using the protocol described in [[https://github.com/lightning/blips/blob/master/blip-0032.md|BLIP 32]]
+
+=== DNS Enumeration ===
+
+In most cases where payments are accepted from any third-party, user enumeration is practical by simply attempting to send small value payments to a list of possible user names. However, storing all valid users in the DNS directly may make such enumeration marginally more practical. Thus, those wishing to avoid such enumeration should carefully ensure all DNS names return valid payment instructions. Note when doing so that wildcard records are identified as such by the DNSSEC RRSIG labels counter and are differentiable from non-wildcard records.
+
+== Backwards Compatibility ==
+
+This work is intended to extend and subsume the existing "Lightning Address" scheme, which maps similar names (without the ₿ prefix) using HTTPS servers to Lightning BOLT 11 payment instructions. Wallets implementing this scheme MAY fall back to existing "Lightning Address" logic if DNS resolution fails but SHOULD NOT do so after this scheme is sufficiently broadly deployed to avoid leaking sender IP address information.
+
+== Examples ==
+
+`matt@mattcorallo.com` resolves to
+`matt.user._bitcoin-payment.mattcorallo.com. 3600 IN TXT	"bitcoin:?lno=lno1qsgqmqvgm96frzdg8m0gc6nzeqffvzsqzrxqy32afmr3jn9ggkwg3egfwch2hy0l6jut6vfd8vpsc3h89l6u3dm4q2d6nuamav3w27xvdmv3lpgklhg7l5teypqz9l53hj7zvuaenh34xqsz2sa967yzqkylfu9xtcd5ymcmfp32h083e805y7jfd236w9afhavqqvl8uyma7x77yun4ehe9pnhu2gekjguexmxpqjcr2j822xr7q34p078gzslf9wpwz5y57alxu99s0z2ql0kfqvwhzycqq45ehh58xnfpuek80hw6spvwrvttjrrq9pphh0dpydh06qqspp5uq4gpyt6n9mwexde44qv7lstzzq60nr40ff38u27un6y53aypmx0p4qruk2tf9mjwqlhxak4znvna5y"`
+Note that `lno` indicates a value containing a lightning BOLT12 offer.
+
+== Reference Implementations ==
+* A DNSSEC proof generation and validation implementation can be found at https://git.bitcoin.ninja/index.cgi?p=dnssec-prover;a=summary
+* A lightning-specific name to payment instruction resolver can be found at https://git.bitcoin.ninja/index.cgi?p=lightning-resolver;a=summary
+* Reference implementations for parsing the URI contents can be found in [[bip-0021.mediawiki|BIP 21]].
+
+== Acknowledgements ==
+
+Thanks to Rusty Russell for the concrete address rotation suggestion.
+
+Thanks to the Bitcoin Design Community, and especially Christoph Ono for lots of discussion, analysis, and UX mockups in how human-readable payment instructions should be displayed.
+
+Thanks to Andrew Kaizer for the suggestion to explicitly restrict cache lifetime to the relevant DNS TTLs.

From 87bbc4aeb6d7da736de63e86f3cb43cf87e39554 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 6 Jun 2024 12:51:44 +0200
Subject: [PATCH 115/288] docs(bip-0046): add bip-0046 to readme

---
 README.mediawiki | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.mediawiki b/README.mediawiki
index 47d3822a..f84fcf0d 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -252,6 +252,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Standard
 | Proposed
 |-
+| [[bip-0046.mediawiki|46]]
+| Applications
+| Address Scheme for Timelocked Fidelity Bonds
+| Chris Belcher, Thebora Kompanioni
+| Standard
+| Draft
+|-
 | [[bip-0047.mediawiki|47]]
 | Applications
 | Reusable Payment Codes for Hierarchical Deterministic Wallets

From 0a12bf8572c64f8b3217b58d005aba05cd4f66fe Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 6 Jun 2024 14:20:22 +0200
Subject: [PATCH 116/288] docs(bip-0046): apply minor wording improvement
 suggestions

by @AdamISZ
---
 bip-0046.mediawiki | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 7bb80449..70bc703e 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -14,7 +14,7 @@
 
 == Abstract ==
 
-This BIP defines the derivation scheme for HD wallets which create timelocked addresses used for creating fidelity bonds. It also defines how to sign fidelity bond certificates, which are needed when using fidelity bonds that are stored offline.
+This BIP defines the derivation scheme for HD wallets which create timelocked addresses used for creating fidelity bonds. It also gives advice to wallet developers on how to use fidelity bonds to sign over messages, such as certificates, which are needed when using fidelity bonds that are stored offline.
 
 == Copyright ==
 
@@ -24,11 +24,11 @@ This document is licensed under the Creative Commons CC0 1.0 Universal license.
 
 Fidelity bonds are used to resist sybil attacks in certain decentralized anonymous protocols. They are created by locking up bitcoins using the `OP_CHECKLOCKTIMEVERIFY` opcode.
 
-It would be useful to have a common derivation scheme so that users of wallet software can have a backup of their fidelity bonds by storing only the HD seed and a reference to this BIP. Importantly the user does not need to backup any timelock values.
+Having a common derivation scheme allows users of wallet software to have a backup of their fidelity bonds by storing only the HD seed and a reference to this BIP. Importantly the user does not need to backup any timelock values.
 
 We largely use the same approach used in BIPs 49, 84 and 86 for ease of implementation.
 
-It would be useful to be able to keep the private keys of fidelity bonds in cold storage. This would allow the sybil resistance of a system to increase without hot wallet risk.
+This allows keeping the private keys of fidelity bonds in cold storage, which increases the sybil resistance of a system without hot wallet risk.
 
 == Backwards Compatibility ==
 
@@ -54,7 +54,7 @@ Where the endpoint might be a IRC nickname or Tor onion hostname. The certificat
 
 == Rationale ==
 
-It would be useful for the user to avoid having to keep a record of the timelocks in the time-locked addresses. So only a limited small set of timelocks are defined by this BIP. This way the user must only store their seed phrase, and knowledge that they have coins stored using this BIP standard. The user doesn't need to remember or store any dates.
+It is useful for the user to avoid having to keep a record of the timelocks in the time-locked addresses. So only a limited small set of timelocks are defined by this BIP. This way the user must only store their seed phrase, and knowledge that they have coins stored using this BIP standard. The user doesn't need to remember or store any dates.
 
 This standard is already implemented and deployed in JoinMarket. As most changes would require a protocol change of a live system, there is limited scope for changing this standard in review. This BIP is more about documenting something which already exists, warts and all.
 

From 821fb900f8c550b7414403a59cfd5a2dd11a6050 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Fri, 7 Jun 2024 12:04:30 +0200
Subject: [PATCH 117/288] chore(bip-0046): less ambiguous message prefix style

by @AdamISZ
---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 70bc703e..a6bc1809 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -99,7 +99,7 @@ To derive the address from the above calculated public key and timelock, we crea
 
 In order to support signing of certificates, implementors should support signing ASCII messages.
 
-A certificate message can be created by another application external to this standard. It is then prepended with the string `\x18Bitcoin Signed Message:\n` and a byte denoting the length of the certificate message. The whole thing is then signed with the private key of the derived_key. This part is identical to the "Sign Message" function which many wallets already implement.
+A certificate message can be created by another application external to this standard. It is then prepended with the string `0x18 || "Bitcoin Signed Message:\n"` and a byte denoting the length of the certificate message. The whole thing is then signed with the private key of the derived_key. This part is identical to the "Sign Message" function which many wallets already implement.
 
 Almost all wallets implementing this standard can use their already-existing "Sign Message" function to sign the certificate message. As the certificate message itself is always an ASCII string, the wallet may not need to specially implement this section at all but just rely on users copypasting their certificate message into the already-existing "Sign Message" user interface. This works as long as the wallet knows how to use the private key of the timelocked address for signing messages.
 

From 8f0962a1ba1168a81b185593e82dfb4c1c9bbcb8 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Fri, 7 Jun 2024 12:05:20 +0200
Subject: [PATCH 118/288] chore(bip-0046): remove superfluous newline

---
 bip-0046.mediawiki | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index a6bc1809..5e5ab437 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -172,4 +172,3 @@ Code generating these test vectors can be found here: https://github.com/chris-b
 * [[bip-0049.mediawiki|BIP49 - Derivation scheme for P2WPKH-nested-in-P2SH based accounts]]
 * [[bip-0084.mediawiki|BIP84 - Derivation scheme for P2WPKH based accounts]]
 * [[bip-0086.mediawiki|BIP86 - Key Derivation for Single Key P2TR Outputs]]
-

From b33c948f00af1e93ca3be196ed7a55b58b53ed88 Mon Sep 17 00:00:00 2001
From: Stacie 
Date: Sat, 8 Jun 2024 23:00:17 -0400
Subject: [PATCH 119/288] BIP79: remove repeat word

---
 bip-0079.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0079.mediawiki b/bip-0079.mediawiki
index 797c8f14..0c31c1c8 100644
--- a/bip-0079.mediawiki
+++ b/bip-0079.mediawiki
@@ -84,7 +84,7 @@ After adding inputs to the transaction, the receiver generally will want to adju
 
 === Returning the partial transaction ===
 
-The receiver must sign all contributed inputs in the partial transaction. The partial transaction should also remove all witnesses from the the original template transaction as they are no longer valid, and need to be recalculated by the sender. The receiver returns the partial transaction as a binary-encoded HTTP response with a status code of 200. To ensure compatibility with web-wallets and browser-based-tools, all responses (including errors) must contain the HTTP header "Access-Control-Allow-Origin: *"
+The receiver must sign all contributed inputs in the partial transaction. The partial transaction should also remove all witnesses from the original template transaction as they are no longer valid, and need to be recalculated by the sender. The receiver returns the partial transaction as a binary-encoded HTTP response with a status code of 200. To ensure compatibility with web-wallets and browser-based-tools, all responses (including errors) must contain the HTTP header "Access-Control-Allow-Origin: *"
 
 
 === Sender Validation ===

From 44984acde9786ce5722cf2dc298e7ef407a4d445 Mon Sep 17 00:00:00 2001
From: Stacie 
Date: Sun, 9 Jun 2024 21:56:51 -0400
Subject: [PATCH 120/288] BIP340: remove repeat words

---
 bip-0340/test-vectors.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0340/test-vectors.py b/bip-0340/test-vectors.py
index 9a5a1401..5a131c46 100644
--- a/bip-0340/test-vectors.py
+++ b/bip-0340/test-vectors.py
@@ -24,14 +24,14 @@ def vector0():
     assert(y(P) % 2 == 0)
 
     # For historical reasons (pubkey tiebreaker was squareness and not evenness)
-    # we should have at least one test vector where the the point reconstructed
+    # we should have at least one test vector where the point reconstructed
     # from the public key has a square and one where it has a non-square Y
     # coordinate. In this one Y is non-square.
     pubkey_point = lift_x(pubkey)
     assert(not has_square_y(pubkey_point))
 
     # For historical reasons (R tiebreaker was squareness and not evenness)
-    # we should have at least one test vector where the the point reconstructed
+    # we should have at least one test vector where the point reconstructed
     # from the R.x coordinate has a square and one where it has a non-square Y
     # coordinate. In this one Y is non-square.
     R = lift_x(sig[0:32])

From e4267374fb4642051976ea046ce0aebfb22d36f8 Mon Sep 17 00:00:00 2001
From: Dan Gould 
Date: Tue, 20 Dec 2022 13:00:13 -0500
Subject: [PATCH 121/288] Keep input utxo data through input finalization

The reference sender implementation and \`payjoin proposal\` test vectors
are adjusted accordingly.

According to the psbt Input Finalizer spec "All other data except the
UTXO and unknown fields in the input key-value map should be cleared from
the PSBT. The UTXO should be kept to allow Transaction Extractors to
verify the final network serialized transaction."

I ran into a problem where an LND acting as sender FinalizePsbt gRPC
fails when sender utxo information is missing. I see no good reason to
remove utxo information from the PSBT.
---
 bip-0078.mediawiki | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/bip-0078.mediawiki b/bip-0078.mediawiki
index 1893f0e7..78835bec 100644
--- a/bip-0078.mediawiki
+++ b/bip-0078.mediawiki
@@ -263,7 +263,6 @@ The sender should check the payjoin proposal before signing it to prevent a mali
 ** If it is one of the sender's input
 *** Verify that input's sequence is unchanged.
 *** Verify the PSBT input is not finalized
-*** Verify that non_witness_utxo and witness_utxo are not specified.
 ** If it is one of the receiver's input
 *** Verify the PSBT input is finalized
 *** Verify that non_witness_utxo or witness_utxo are filled in.
@@ -497,9 +496,6 @@ public async Task RequestPayjoin(
             // Verify the PSBT input is not finalized
             if (proposedPSBTInput.IsFinalized())
                 throw new PayjoinSenderException("The receiver finalized one of our inputs");
-            // Verify that non_witness_utxo and witness_utxo are not specified.
-            if (proposedPSBTInput.NonWitnessUtxo != null || proposedPSBTInput.WitnessUtxo != null)
-                throw new PayjoinSenderException("The receiver added non_witness_utxo or witness_utxo to one of our inputs");
             sequences.Add(proposedTxIn.Sequence);
 
             // Fill up the info from the original PSBT input so we can sign and get fees.
@@ -659,7 +655,7 @@ A successful exchange with:
 
cHNidP8BAHMCAAAAAY8nutGgJdyYGXWiBEb45Hoe9lWGbkxh/6bNiOJdCDuDAAAAAAD+////AtyVuAUAAAAAF6kUHehJ8GnSdBUOOv6ujXLrWmsJRDCHgIQeAAAAAAAXqRR3QJbbz0hnQ8IvQ0fptGn+votneofTAAAAAAEBIKgb1wUAAAAAF6kU3k4ekGHKWRNbA1rV5tR5kEVDVNCHAQcXFgAUx4pFclNVgo1WWAdN1SYNX8tphTABCGsCRzBEAiB8Q+A6dep+Rz92vhy26lT0AjZn4PRLi8Bf9qoB/CMk0wIgP/Rj2PWZ3gEjUkTlhDRNAQ0gXwTO7t9n+V14pZ6oljUBIQMVmsAaoNWHVMS02LfTSe0e388LNitPa1UQZyOihY+FFgABABYAFEb2Giu6c4KO5YW0pfw3lGp9jMUUAAA=

 
 payjoin proposal
-
cHNidP8BAJwCAAAAAo8nutGgJdyYGXWiBEb45Hoe9lWGbkxh/6bNiOJdCDuDAAAAAAD+////jye60aAl3JgZdaIERvjkeh72VYZuTGH/ps2I4l0IO4MBAAAAAP7///8CJpW4BQAAAAAXqRQd6EnwadJ0FQ46/q6NcutaawlEMIcACT0AAAAAABepFHdAltvPSGdDwi9DR+m0af6+i2d6h9MAAAAAAAEBIICEHgAAAAAAF6kUyPLL+cphRyyI5GTUazV0hF2R2NWHAQcXFgAUX4BmVeWSTJIEwtUb5TlPS/ntohABCGsCRzBEAiBnu3tA3yWlT0WBClsXXS9j69Bt+waCs9JcjWtNjtv7VgIge2VYAaBeLPDB6HGFlpqOENXMldsJezF9Gs5amvDQRDQBIQJl1jz1tBt8hNx2owTm+4Du4isx0pmdKNMNIjjaMHFfrQAAAA==

+
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

 
 payjoin proposal filled with sender's information
 
cHNidP8BAJwCAAAAAo8nutGgJdyYGXWiBEb45Hoe9lWGbkxh/6bNiOJdCDuDAAAAAAD+////jye60aAl3JgZdaIERvjkeh72VYZuTGH/ps2I4l0IO4MBAAAAAP7///8CJpW4BQAAAAAXqRQd6EnwadJ0FQ46/q6NcutaawlEMIcACT0AAAAAABepFHdAltvPSGdDwi9DR+m0af6+i2d6h9MAAAAAAQEgqBvXBQAAAAAXqRTeTh6QYcpZE1sDWtXm1HmQRUNU0IcBBBYAFMeKRXJTVYKNVlgHTdUmDV/LaYUwIgYDFZrAGqDVh1TEtNi300ntHt/PCzYrT2tVEGcjooWPhRYYSFzWUDEAAIABAACAAAAAgAEAAAAAAAAAAAEBIICEHgAAAAAAF6kUyPLL+cphRyyI5GTUazV0hF2R2NWHAQcXFgAUX4BmVeWSTJIEwtUb5TlPS/ntohABCGsCRzBEAiBnu3tA3yWlT0WBClsXXS9j69Bt+waCs9JcjWtNjtv7VgIge2VYAaBeLPDB6HGFlpqOENXMldsJezF9Gs5amvDQRDQBIQJl1jz1tBt8hNx2owTm+4Du4isx0pmdKNMNIjjaMHFfrQABABYAFEb2Giu6c4KO5YW0pfw3lGp9jMUUIgICygvBWB5prpfx61y1HDAwo37kYP3YRJBvAjtunBAur3wYSFzWUDEAAIABAACAAAAAgAEAAAABAAAAAAA=


From 14af3d6fe996547f8d053db3d1072dfd90d074c4 Mon Sep 17 00:00:00 2001
From: /dev/fd0 <147166694+1440000bytes@users.noreply.github.com>
Date: Mon, 10 Jun 2024 20:05:49 +0000
Subject: [PATCH 122/288] fix bip number

---
 bip-0301.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0301.mediawiki b/bip-0301.mediawiki
index e1522f86..966db25a 100644
--- a/bip-0301.mediawiki
+++ b/bip-0301.mediawiki
@@ -78,7 +78,7 @@ Bip301 makes this specialization-of-labor trustless on layer1. If Mary takes Sim
 ==Specification==
 
 
-Bip300 consists of two messages: "BMM Accept" and "BMM Request". These govern something called "h*".
+Bip301 consists of two messages: "BMM Accept" and "BMM Request". These govern something called "h*".
 
 So we will discuss:
 

From 85cda4e225b4d5fd7aff403f69d827f23f6afbbc Mon Sep 17 00:00:00 2001
From: Glen Cooper 
Date: Tue, 11 Jun 2024 18:23:48 +0000
Subject: [PATCH 123/288] =?UTF-8?q?BIP=E2=80=AF15:=20Remove=20broken=20hyp?=
 =?UTF-8?q?erlink=20to=20Vanitygen=20(#1618)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bip-0015.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0015.mediawiki b/bip-0015.mediawiki
index 1e9a9bc4..635fb7fa 100644
--- a/bip-0015.mediawiki
+++ b/bip-0015.mediawiki
@@ -36,7 +36,7 @@ Their FirstBits alias becomes:
 
 It is enough information to be given the FirstBits alias ''1brmlab''. When someone wishes to make a purchase, without FirstBits, they either have to type out their address laboriously by hand, scan their QR code (which requires a mobile handset that this author does not own) or find their address on the internet to copy and paste into the client to send bitcoins. FirstBits alleviates this impracticality by providing an easy method to make payments.
 
-Together with [[vanitygen|Vanitygen (vanity generator)]], it becomes possible to create memorable unique named addresses. Addresses that are meaningful, rather than an odd assemblage of letters and numbers but add context to the destination.
+Together with Vanitygen (vanity generator), it becomes possible to create memorable unique named addresses. Addresses that are meaningful, rather than an odd assemblage of letters and numbers but add context to the destination.
 
 However FirstBits has its own problems. One is that the possible aliases one is able to generate is limited by the available computing power available. It may not be feasible to generate a complete or precise alias that is wanted- only approximates may be possible. It is also computationally resource intensive which means a large expenditure of power for generating unique aliases in the future, and may not scale up to the level of individuals at home or participants with hand-held devices in an environment of ubiquitous computing.
 

From 6a7af366a507192d6801b0fe5f507ecf2c34b242 Mon Sep 17 00:00:00 2001
From: Tim Ruffing 
Date: Thu, 13 Jun 2024 20:54:57 +0200
Subject: [PATCH 124/288] bip-0327: Remove obsolete paragraph

---
 bip-0327.mediawiki | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki
index 181926bf..b659629b 100644
--- a/bip-0327.mediawiki
+++ b/bip-0327.mediawiki
@@ -190,9 +190,6 @@ The aggregate public key can be ''tweaked'', which modifies the key as defined i
 In order to apply a tweak, the KeyAgg Context output by ''KeyAgg'' is provided to the ''ApplyTweak'' algorithm with the ''is_xonly_t'' argument set to false for plain tweaking and true for X-only tweaking.
 The resulting KeyAgg Context can be used to apply another tweak with ''ApplyTweak'' or obtain the aggregate public key with ''GetXonlyPubkey'' or ''GetPlainPubkey''.
 
-In addition to individual public keys, the ''KeyAgg'' algorithm accepts tweaks, which modify the aggregate public key as defined in the [[#tweaking-definition|Tweaking Definition]] subsection.
-For example, if ''KeyAgg'' is run with ''v = 2'', ''is_xonly_t1 = false'', ''is_xonly_t2 = true'', then the aggregate key is first plain tweaked with ''tweak1'' and then X-only tweaked with ''tweak2''.
-
 The purpose of supporting tweaking is to ensure compatibility with existing uses of tweaking, i.e., that the result of signing is a valid signature for the tweaked public key.
 The MuSig2 algorithms take arbitrary tweaks as input but accepting arbitrary tweaks may negatively affect the security of the scheme.It is an open question whether allowing arbitrary tweaks from an adversary affects the unforgeability of MuSig2.
 Instead, signers should obtain the tweaks according to other specifications.

From 48ebcb2191e9738efcff06b425cec41985c43f5f Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Mon, 15 Jan 2024 14:54:19 -0500
Subject: [PATCH 125/288] BIP 328: add MuSig2 derivation BIP

---
 README.mediawiki   |  7 ++++
 bip-0328.mediawiki | 80 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 87 insertions(+)
 create mode 100644 bip-0328.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 455d5225..1e784053 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1016,6 +1016,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0328.mediawiki|328]]
+| Applications
+| Derivation Scheme for MuSig2 Aggregate Keys
+| Ava Chow
+| Informational
+| Draft
+|-
 | [[bip-0329.mediawiki|329]]
 | Applications
 | Wallet Labels Export Format
diff --git a/bip-0328.mediawiki b/bip-0328.mediawiki
new file mode 100644
index 00000000..3c07daba
--- /dev/null
+++ b/bip-0328.mediawiki
@@ -0,0 +1,80 @@
+
+  BIP: 328
+  Layer: Applications
+  Title: Derivation Scheme for MuSig2 Aggregate Keys
+  Author: Ava Chow 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0328
+  Status: Draft
+  Type: Informational
+  Created: 2024-01-15
+  License: CC0-1.0
+

+
+==Abstract==
+
+This document specifies how BIP 32 extended public keys can be constructed from a BIP 327 MuSig2
+aggregate public key and how such keys should be used for key derivation.
+
+==Copyright==
+
+This BIP is licensed under the Creative Commons CC0 1.0 Universal license.
+
+==Motivation==
+
+Multiple signers can create a single aggregate public key with MuSig2 that is indistinguishable
+from a random public key. The cosigners need a method for generating additional aggregate pubkeys
+to follow the best practice of using a new address for every payment.
+
+The obvious method is for the cosigners to generate multiple public keys and produce a
+new aggregate pubkey every time one is needed. This is similar to how multisig using Bitcoin script
+works where all of the cosigners share their extended public keys and do derivation to produce
+the multisig script. The same could be done with MuSig2 and instead of producing a multisig script,
+the result would be a MuSig2 aggregate pubkey.
+
+However, it is much simpler to be able to derive from a single extended public key instead of having
+to derive from many extended public keys and aggregate them. As MuSig2 produces a normal looking
+public key, the aggregate public can be used in this way. This reduces the storage and computation
+requirements for generating new aggregate pubkeys.
+
+==Specification==
+
+A synthetic xpub can be created from a BIP 327 MuSig2 plain aggregate public key by setting
+the depth to 0, the child number to 0, and attaching a chaincode with the byte string
+868087ca02a6f974c4598924c36b57762d32cb45717167e300622c7167e38965'''Where does this
+constant chaincode come from?''' It is the SHA256 of the text MuSig2MuSig2MuSig2.
+This fixed chaincode should be used by all such synthetic xpubs following this specification.
+Unhardened child public keys can be derived from the synthetic xpub as with any other xpub. Since
+the aggregate public key is all that is necessary to produce the synthetic xpub, any aggregate
+public key that will be used in this way shares the same privacy concerns as typical xpubs.
+
+Furthermore, as there is no aggregate private key, only unhardened derivation from the aggregate
+public key is possible.
+
+When signing, all signers must compute the tweaks used in the BIP 32 derivation for the child key
+being signed for. The IL value computed in ''CKDpub'' is the tweak used at each
+derivation step. These are provided in the session context, each with a tweak mode of plain
+(''is_xonly_t = false''). When the ''Sign'' algorithm is used, the tweaks will be applied to the
+partial signatures.
+
+==Test Vectors==
+
+TBD
+
+==Backwards Compatibility==
+
+Once a synthetic xpub is created, it is fully backwards compatible with BIP 32 - only unhardened
+derivation can be done, and the signers will be able to produce a signature for any derived children.
+
+==Rationale==
+
+
+
+==Reference Implementation==
+
+TBD
+
+==Acknowledgements==
+
+Thanks to Pieter Wuille, Andrew Poelstra, Sanket Kanjalkar, Salvatore Ingala, and all others who
+participated in discussions on this topic.

From 6b9138c1a1511719eb0477d2375c81a598ba07a0 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Mon, 15 Jan 2024 14:07:44 -0500
Subject: [PATCH 126/288] BIP 390: Add MuSig2 descriptor BIP

---
 README.mediawiki   |   7 +++
 bip-0380.mediawiki |   3 ++
 bip-0390.mediawiki | 117 +++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 127 insertions(+)
 create mode 100644 bip-0390.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 1e784053..3d4f2595 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1219,6 +1219,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0390.mediawiki|390]]
+| Applications
+| musig() Descriptor Key Expression
+| Ava Chow
+| Informational
+| Draft
+|-
 | [[bip-0431.mediawiki|431]]
 | Applications
 | Topology Restrictions for Pinning
diff --git a/bip-0380.mediawiki b/bip-0380.mediawiki
index 27b7908b..823a92cf 100644
--- a/bip-0380.mediawiki
+++ b/bip-0380.mediawiki
@@ -332,4 +332,7 @@ This Table lists all available Script expressions and the BIPs specifying them.
 |-
 | tr(KEY), tr(KEY, TREE)
 | [[bip-0386.mediawiki|386]]
+|-
+| musig(KEY, KEY, ..., KEY)
+| [[bip-0390.mediawiki|390]]
 |}
diff --git a/bip-0390.mediawiki b/bip-0390.mediawiki
new file mode 100644
index 00000000..05f57347
--- /dev/null
+++ b/bip-0390.mediawiki
@@ -0,0 +1,117 @@
+
+  BIP: 390
+  Layer: Applications
+  Title: musig() Descriptor Key Expression
+  Author: Ava Chow 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0390
+  Status: Draft
+  Type: Informational
+  Created: 2024-01-15
+  License: CC0-1.0
+

+
+==Abstract==
+
+This document specifies a musig() key expression for output script descriptors.
+musig() expressions take multiple keys and produce an aggregate public key using BIP 327.
+
+==Copyright==
+
+This BIP is licensed under the Creative Commons CC0 1.0 Universal license.
+
+==Motivation==
+
+BIP 327 introduces the MuSig2 Multi-Signature scheme. It is useful to have a way for keys to be used
+in a MuSig2 aggregate key to be expressed in descriptors so that wallets can more easily use MuSig2.
+
+==Specification==
+
+A new key expression is defined: musig().
+
+===musig(KEY, KEY, ..., KEY)===
+
+The musig(KEY, KEY, ..., KEY) expression can only be used inside of a tr()
+expression as a key expression. It additionally cannot be nested within another musig()
+expression. Repeated participant public keys are not allowed. The aggregate public key is produced
+by using the KeyAgg algorithm on all KEYs specified in the expression after performing all
+specified derivation. As with script expressions, KEY can contain child derivation specified by
+/*. A new aggregate public key will be computed for each child index. Keys must be sorted
+with the KeySort algorithm after all derivation and prior to aggregation'''Why must
+the keys be sorted prior to aggregation?''' Although the descriptor's written form sets an order
+for the keys that could be used for aggregation, the order should not matter as MuSig2 philosophically
+operates over a set of keys, with the order merely being an implementation detail in aggregation
+itself. Requiring sorting of keys prior to aggregation enforces this philosophy as keys can be
+written in the descriptor in any order with the end result still being the same. Furthermore, this
+aids with recovery where the descriptor was not backed up as users will not need to also have
+backed up, or guess, the correct order of keys..
+
+===musig(KEY, KEY, ..., KEY)/NUM/.../*===
+
+musig(KEY, KEY, ..., KEY)/NUM/.../* expressions are also allowed, with the same usage
+restrictions as in the previous section. The aggregate public key
+is first computed as described above, with the keys also being sorted after all derivation and prior
+to aggreation. Then further BIP 32 derivation will be performed on the aggregate public key as described in
+[[bip-0328.mediawiki|BIP 328]]. As there is no aggregate private key,
+only unhardened derivation from the aggregate public key is allowed, and thus the derivation steps
+following the musig() expression cannot contain
+/NUMh or /NUM' derivation steps nor /*h, or /*' child derivation.
+For these musig() expressions, the KEY expressions contained within must be xpubs or derived from
+xpubs, and cannot contain child derivation as specified by a /*, /*', or /*h.
+
+==Test Vectors==
+
+Valid descriptors containing followed by the scripts they produce. Descriptors involving derived child keys
+will have the 0th, 1st, and 2nd scripts listed.
+
+* rawtr(musig(KwDiBf89QgGbjEhKnhXJuH7LrciVrZi3qYjgd9M7rFU74sHUHy8S,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+** 5120789d937bade6673538f3e28d8368dda4d0512f94da44cf477a505716d26a1575
+* tr(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+** 512079e6c3e628c9bfbce91de6b7fb28e2aec7713d377cf260ab599dcbc40e542312
+* rawtr(musig(xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y)/0/*)
+** 51209508c08832f3bb9d5e8baf8cb5cfa3669902e2f2da19acea63ff47b93faa9bfc
+** 51205ca1102663025a83dd9b5dbc214762c5a6309af00d48167d2d6483808525a298
+** 51207dbed1b89c338df6a1ae137f133a19cae6e03d481196ee6f1a5c7d1aeb56b166
+* tr(musig(xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y)/0/*,pk(f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9))
+** 51201d377b637b5c73f670f5c8a96a2c0bb0d1a682a1fca6aba91fe673501a189782
+** 51208950c83b117a6c208d5205ffefcf75b187b32512eb7f0d8577db8d9102833036
+** 5120a49a477c61df73691b77fcd563a80a15ea67bb9c75470310ce5c0f25918db60d
+* tr(f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,pk(musig(xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y)/0/*))
+** 512068983d461174afc90c26f3b2821d8a9ced9534586a756763b68371a404635cc8
+** 5120368e2d864115181bdc8bb5dc8684be8d0760d5c33315570d71a21afce4afd43e
+** 512097a1e6270b33ad85744677418bae5f59ea9136027223bc6e282c47c167b471d5
+
+Invalid descriptors
+
+* musig() is not allowed in pk(): pk(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+* musig() is not allowed in pkh(): pkh(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+* musig() is not allowed in wpkh(): wpkh(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+* musig() is not allowed in combo(): combo(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+* musig() is not allowed in sh(wpkh()): sh(wpkh(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66)))
+* musig() is not allowed in sh(wsh()): sh(wsh(pk(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))))
+* musig() is not allowed in wsh(): wsh(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+* musig() is not allowed in sh(): sh(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66))
+* Ranged musig() requires all participants to be xpubs: tr(musig(02f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9,03dff1d77f2a671c5f36183726db2341be58feae1da2deced843240f7b502ba659,023590a94e768f8e1815c2f24b4d80a8e3149316c3518ce7b7ad338368d038ca66)/0/0)
+* Cannot have ranged participants if musig() is also ranged: tr(musig(xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL/*,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y)/0/*)
+* musig() cannot have hardened derivation steps: tr(musig(xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y)/0h/*)
+* musig() cannot have hardened child derivation: tr(musig(xpub6ERApfZwUNrhLCkDtcHTcxd75RbzS1ed54G1LkBUHQVHQKqhMkhgbmJbZRkrgZw4koxb5JaHWkY4ALHY2grBGRjaDMzQLcgJvLJuZZvRcEL,xpub68NZiKmJWnxxS6aaHmn81bvJeTESw724CRDs6HbuccFQN9Ku14VQrADWgqbhhTHBaohPX4CjNLf9fq9MYo6oDaPPLPxSb7gwQN3ih19Zm4Y)/0/*h)
+
+==Backwards Compatibility==
+
+musig() expressions use the format and general operation specified in
+[[bip-0380.mediawiki|BIP 380]]. As these are a set of wholly new expressions, they are not compatible
+with any implementation. However the keys are produced using a standard process so existing software
+are likely to be familiar with them.
+
+==Rationale==
+
+
+
+==Reference Implementation==
+
+TBD
+
+==Acknowledgements==
+
+Thanks to Pieter Wuille, Andrew Poelstra, Sanket Kanjalkar, Salvatore Ingala, and all others who
+participated in discussions on this topic.

From 806b8b886fef460a7a812c219f30d5b09d74d2d0 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Mon, 15 Jan 2024 14:07:56 -0500
Subject: [PATCH 127/288] BIP 373: add MuSig2 PSBT Fields BIP

---
 README.mediawiki   |   7 ++
 bip-0174.mediawiki |  60 +++++++++++++
 bip-0373.mediawiki | 216 +++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 283 insertions(+)
 create mode 100644 bip-0373.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 3d4f2595..91f7c4ce 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1149,6 +1149,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Standard
 | Draft
 |-
+| [[bip-0373.mediawiki|373]]
+| Applications
+| MuSig2 PSBT Fields
+| Ava Chow
+| Standard
+| Draft
+|-
 | [[bip-0380.mediawiki|380]]
 | Applications
 | Output Script Descriptors General Operation
diff --git a/bip-0174.mediawiki b/bip-0174.mediawiki
index 95a5573b..94a52f2d 100644
--- a/bip-0174.mediawiki
+++ b/bip-0174.mediawiki
@@ -483,6 +483,52 @@ The currently defined per-input types are defined as follows:
 | 0, 2
 | [[bip-0371.mediawiki|371]]
 |-
+| MuSig2 Participant Public Keys
+| PSBT_IN_MUSIG2_PARTICIPANT_PUBKEYS = 0x1a
+| <33 byte plain aggregate pubkey>
+| The MuSig2 aggregate plain public key from the KeyAgg algorithm. This key may or may not
+be in the script directly (as x-only). It may instead be a parent public key from which the public keys in the
+script were derived.
+| <33 byte compressed pubkey>*
+| A list of the compressed public keys of the participants in the MuSig2 aggregate key in the order
+required for aggregation. If sorting was done, then the keys must be in the sorted order.
+|
+|
+| 0, 2
+| [[bip-0373.mediawiki|373]]
+|-
+| MuSig2 Public Nonce
+| PSBT_IN_MUSIG2_PUB_NONCE = 0x1b
+| <33 byte compressed pubkey> <33 byte plain pubkey> <32 byte hash or omitted>
+| The compressed public key of the participant providing this nonce, followed by the plain public
+key the participant is providing the nonce for, followed by the BIP 341 tapleaf hash of
+the Taproot leaf script that will be signed. If the aggregate key is the taproot internal key or the
+taproot output key, then the tapleaf hash must be omitted. The plain public key must be
+the key found in the script and not the aggregate public key that it was derived from, if it was
+derived from an aggregate key.
+| <66 byte public nonce>
+| The public nonce produced by the NonceGen algorithm.
+|
+|
+| 0, 2
+| [[bip-0373.mediawiki|373]]
+|-
+| MuSig2 Participant Partial Signature
+| PSBT_IN_MUSIG2_PARTIAL_SIG = 0x1c
+| <33 byte compressed pubkey> <33 byte plain pubkey> <32 byte hash or omitted>
+| The compressed public key of the participant providing this partial signature, followed by the
+plain public key the participant is providing the signature for, followed by the BIP 341 tapleaf hash
+of the Taproot leaf script that will be signed. If the aggregate key is the taproot internal key or
+the taproot output key, then the tapleaf hash must be omitted. Note that the plain public key must
+be the key found in the script and not the aggregate public key that it was derived from, if it was
+derived from an aggregate key.
+| <32 byte partial signature>
+| The partial signature produced by the Sign algorithm.
+|
+|
+| 0, 2
+| [[bip-0373.mediawiki|373]]
+|-
 | Proprietary Use Type
 | PSBT_IN_PROPRIETARY = 0xFC
 |    
@@ -599,6 +645,20 @@ determine which outputs are change outputs and verify that the change is returni
 | 0, 2
 | [[bip-0371.mediawiki|371]]
 |-
+| MuSig2 Participant Public Keys
+| PSBT_OUT_MUSIG2_PARTICIPANT_PUBKEYS = 0x08
+| <33 byte plain aggregate pubkey>
+| The MuSig2 aggregate plain public key from the KeyAgg algorithm. This key may or may not
+be in the script directly. It may instead be a parent public key from which the public keys in the
+script were derived.
+| <33 byte compressed pubkey>*
+| A list of the compressed public keys of the participants in the MuSig2 aggregate key in the order
+required for aggregation. If sorting was done, then the keys must be in the sorted order.
+|
+|
+| 0, 2
+| [[bip-0373.mediawiki|373]]
+|-
 | Proprietary Use Type
 | PSBT_OUT_PROPRIETARY = 0xFC
 |    
diff --git a/bip-0373.mediawiki b/bip-0373.mediawiki
new file mode 100644
index 00000000..d9dec456
--- /dev/null
+++ b/bip-0373.mediawiki
@@ -0,0 +1,216 @@
+
+  BIP: 373
+  Layer: Applications
+  Title: MuSig2 PSBT Fields
+  Author: Ava Chow 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0373
+  Status: Draft
+  Type: Standards Track
+  Created: 2024-01-15
+  License: CC0-1.0
+

+
+==Introduction==
+
+===Abstract===
+
+This document proposes additional fields for BIP 174 PSBTv0 and BIP 370 PSBTv2 that allow for BIP
+327 MuSig2 Multi-Signature data to be included in a PSBT of any version. These will be fields for
+the participants' keys, the public nonces, and the partial signatures produced with MuSig2.
+
+===Copyright===
+
+This BIP is licensed under the Creative Commons CC0 1.0 Universal license.
+
+===Motivation===
+
+BIP 327 specifies a way to create BIP 340 compatible public keys and signatures using the MuSig2
+Multi-Signature scheme. The existing PSBT fields are unable to support MuSig2 as it introduces new
+concepts and additional rounds of communication. Therefore new fields must be defined to allow PSBTs
+to carry the information necessary to produce a valid signature with MuSig2.
+
+==Specification==
+
+The new per-input types are defined as follows:
+
+{|
+! Name
+! 
+! 
+! 
+! Versions Requiring Inclusion
+! Versions Requiring Exclusion
+! Versions Allowing Inclusion
+|-
+| rowspan="2"|MuSig2 Participant Public Keys
+| rowspan="2"|PSBT_IN_MUSIG2_PARTICIPANT_PUBKEYS = 0x1a
+| <33 byte plain aggregate pubkey>
+| <33 byte compressed pubkey>*
+| rowspan="2"|
+| rowspan="2"|
+| rowspan="2"| 0, 2
+|-
+| The MuSig2 aggregate plain public key'''Why the plain aggregate public key instead of x-only?'''
+BIP 32 requires public keys to include their evenness byte. Aggregate public keys are expected to be
+derived from, following [[bip-0328.mediawiki|BIP 328]], and therefore will
+need to include the evenness. Furthermore, PSBT_IN_TAP_BIP32_DERIVATION fields include fingerprints
+to identify master keys, and these fingerprints require full compressed public keys. By including
+the aggregate key as a full public key, signers that are unaware of the MuSig2 outside of the PSBT
+will still be able to identify which keys are derived from the aggregate key by computing and then
+comparing the fingerprints. This is necessary for the signer to apply the correct tweaks to their
+partial signature. from the KeyAgg algorithm. This key may or may not
+be in the script directly (as x-only). It may instead be a parent public key from which the public keys in the
+script were derived.
+| A list of the compressed public keys of the participants in the MuSig2 aggregate key in the order
+required for aggregation. If sorting was done, then the keys must be in the sorted order.
+|-
+| rowspan="2"|MuSig2 Public Nonce
+| rowspan="2"|PSBT_IN_MUSIG2_PUB_NONCE = 0x1b
+| <33 byte compressed pubkey> <33 byte plain pubkey> <32 byte hash or omitted>
+| <66 byte public nonce>
+| rowspan="2"|
+| rowspan="2"|
+| rowspan="2"| 0, 2
+|-
+| The compressed public key of the participant providing this nonce, followed by the plain public
+key the participant is providing the nonce for, followed by the BIP 341 tapleaf hash of
+the Taproot leaf script that will be signed. If the aggregate key is the taproot internal key or the
+taproot output key, then the tapleaf hash must be omitted. The plain public key must be
+the key found in the script and not the aggregate public key that it was derived from, if it was
+derived from an aggregate key.
+| The public nonce produced by the NonceGen algorithm.
+|-
+| rowspan="2"|MuSig2 Participant Partial Signature
+| rowspan="2"|PSBT_IN_MUSIG2_PARTIAL_SIG = 0x1c
+| <33 byte compressed pubkey> <33 byte plain pubkey> <32 byte hash or omitted>
+| <32 byte partial signature>
+| rowspan="2"|
+| rowspan="2"|
+| rowspan="2"| 0, 2
+|-
+| The compressed public key of the participant providing this partial signature, followed by the
+plain public key the participant is providing the signature for, followed by the BIP 341 tapleaf hash
+of the Taproot leaf script that will be signed. If the aggregate key is the taproot internal key or
+the taproot output key, then the tapleaf hash must be omitted. Note that the plain public key must
+be the key found in the script and not the aggregate public key that it was derived from, if it was
+derived from an aggregate key.
+| The partial signature produced by the Sign algorithm.
+|}
+
+The new per-output types are defined as follows:
+
+{|
+! Name
+! 
+! 
+! 
+! Versions Requiring Inclusion
+! Versions Requiring Exclusion
+! Versions Allowing Inclusion
+|-
+| rowspan="2"|MuSig2 Participant Public Keys
+| rowspan="2"|PSBT_OUT_MUSIG2_PARTICIPANT_PUBKEYS = 0x08
+| <33 byte compressed pubkey>
+| <33 byte compressed pubkey>*
+| rowspan="2"|
+| rowspan="2"|
+| rowspan="2"|0, 2
+|-
+| The MuSig2 aggregate plain public key from the KeyAgg algorithm. This key may or may not
+be in the script directly. It may instead be a parent public key from which the public keys in the
+script were derived.
+| A list of the compressed public keys of the participants in the MuSig2 aggregate key in the order
+required for aggregation. If sorting was done, then the keys must be in the sorted order.
+|}
+
+==Roles==
+
+===Updater===
+
+When an updater observes a Taproot output which involves a MuSig2 aggregate public key that it is
+aware if, it can add a PSBT_IN_MUSIG2_PARTICIPANT_PUBKEYS field containing the public keys
+of the participants. This aggregate public key may be directly in the script, the Taproot internal
+key, the Taproot output key, or a public key from which the key in the script was derived from.
+
+An aggregate public key that appears directly in the script or internal key may be from the result
+of deriving child pubkeys from participant xpubs. If the updater has this derivation information, it
+should also add PSBT_IN_TAP_BIP32_DERIVATION for each participant public key.
+
+If the public key found was derived from an aggregate public key, then all MuSig2 PSBT fields for
+that public key should contain the aggregate public key rather than the found pubkey itself. The
+updater should also add PSBT_IN_TAP_BIP32_DERIVATION that contains the derivation path used
+to derive the found pubkey from the aggregate pubkey.
+Derivation from the aggregate pubkey can be assumed to follow [[bip-0328.mediawiki|BIP 328]]
+if there is no PSBT_IN_GLOBAL_XPUB that specifies the synthetic xpub for the aggregate
+public key.
+
+Updaters should add PSBT_OUT_MUSIG2_PARTICIPANT_PUBKEYS and
+PSBT_OUT_TAP_BIP32_DERIVATION similarly to inputs to aid in change detection.
+
+===Signer===
+
+To determine whether a signer is a participant in the MuSig2 aggregate key, the signer should first
+look at all PSBT_IN_MUSIG2_PARTICIPANT_PUBKEYS and see if any key which it knows the
+private key for appears as a participant in any aggregate pubkey. Signers should also check whether
+any of the keys in PSBT_IN_TAP_BIP32_DERIVATION belong to it, and if any of those keys
+appear in as a participant in PSBT_IN_MUSIG2_PARTICIPANT_PUBKEYS.
+
+For each aggregate public key that the signer is a participant of that it wants
+to produce a signature for, if the signer does not find an existing
+PSBT_IN_MUSIG2_PUB_NONCE field for its key, then it should add one using
+the NonceGen algorithm (or one of its variations) to produce a public
+nonce that is added in a PSBT_IN_MUSIG2_PUB_NONCE field. However
+signers must keep in mind that '''improper nonce usage can compromise private
+keys.''' Please see BIP 327 for best practices on nonce generation and usage.
+
+Once all signers have added their PSBT_IN_MUSIG2_PUB_NONCE fields, each signer will perform
+the NonceAgg algorithm followed by the Sign algorithm in order to produce the
+partial signature for their key. The result will be added to the PSBT in a
+PSBT_IN_MUSIG2_PARTIAL_SIG field.
+
+Signers must remember to apply any relevant tweaks such as a tweak that is the result of performing
+BIP 32 unhardened dervation with the aggregate public key as the parent key.
+
+If all other signers have provided a PSBT_IN_MUSIG2_PARTIAL_SIG, then the final signer may
+perform the PartialSigAgg algorithm and produce a BIP 340 compatible signature that can be
+placed into a PSBT_IN_TAP_KEY_SIG or a PSBT_IN_TAP_SCRIPT_SIG.
+
+===Finalizer===
+
+A finalizer may perform the same PartialSigAgg step as the final signer if it has not
+already been done.
+
+Otherwise, the resulting signature is a BIP 340 compatible signature and finalizers should treat it
+as such.
+
+==Backwards Compatibility==
+
+These are simply new fields added to the existing PSBT format. Because PSBT is designed to be
+extensible, old software will ignore the new fields.
+
+Reusing PSBT_IN_TAP_BIP32_DERIVATION to provide derivation paths for participant public
+keys may cause software unaware of MuSig2 to produce a signature for that public key. This is still
+safe. If that public key does not directly appear in the leaf script that was signed, then the
+signature produced will not be useful and so cannot be replayed. If the public key does directly
+appear in the leaf script, then the signer will have validated the script as if it did not involve a
+MuSig2 and will have found it acceptable in order for it to have produced a signature. In either
+case, producing a signature does not give rise to the possibility of losing funds.
+
+==Test Vectors==
+
+TBD
+
+==Rationale==
+
+
+
+==Reference implementation==
+
+The reference implementation of the PSBT format is available at TBD.
+
+==Acknowledgements==
+
+Thanks to Sanket Kanjalkar whose notes on this topic formed the initial basis of this BIP. Also
+thanks to Pieter Wuille, Jonas Nick, Tim Ruffing, Marko Bencun, Salvatore Ingala, and all others who
+have participated in discussions about these fields.

From b7a5f9ce60188e96364d54a85784f04630542aec Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Wed, 19 Jun 2024 14:06:41 +0200
Subject: [PATCH 128/288] docs(bip-0046): apply minor wording improvement
 suggestions

by @murchandamus
---
 bip-0046.mediawiki | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 5e5ab437..84fd2e2d 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -73,7 +73,7 @@ m / 84' / 0' / 0' / 2 / index
 A key derived with this derivation path pattern will be referred to as derived_key further
 in this document.
 
-For index, addresses are numbered from 0 in a sequentially increasing manner, but index does not increase forever like in other similar standards. The index only goes up to 959 inclusive. Only 960 addresses can be derived for a given BIP32 master key. Furthermore there is no concept of a gap limit, instead wallets must always generate all 960 addresses and check all of them if they have a balance and history.
+For index, addresses are numbered from 0 in a sequentially increasing manner, but index does not increase forever like in other similar standards. The index only goes up to 959 inclusive. Only 960 addresses can be derived for a given BIP32 master key. Furthermore there is no concept of a gap limit, instead wallets must always generate all 960 addresses and check for all of them if they have a balance and history.
 
 === Timelock derivation ===
 
@@ -162,7 +162,7 @@ address             = bc1qsqex3czzqzrn0n6rjayvhddygj0rz8df4fj2uwk9dkzdqkt9f7zs5c
 
 Code generating these test vectors can be found here: https://github.com/chris-belcher/timelocked-addresses-fidelity-bond-bip-testvectors
 
-==Reference==
+== Reference ==
 
 * [[https://gist.github.com/chris-belcher/18ea0e6acdb885a2bfbdee43dcd6b5af/|Design for improving JoinMarket's resistance to sybil attacks using fidelity bonds]]
 * [[https://github.com/JoinMarket-Org/joinmarket-clientserver/blob/master/docs/fidelity-bonds.md|JoinMarket fidelity bonds doc page]]

From fe0f83531e35f76d3582813da4cbb518d9bb1d12 Mon Sep 17 00:00:00 2001
From: Sebastian Falbesoner 
Date: Wed, 19 Jun 2024 23:56:42 +0200
Subject: [PATCH 129/288] BIP-352: generate `input_hash` after summing up keys
 (simplification)

For both sender and receiver, generating the input hash is currently
listed as the first step. This already involves summing up the public
keys, even though summing up key material (private keys for sender,
public keys of inputs for receiver) is then again listed explicitly
in later steps.

It seems to be more obvious and less redundant (and also hopefully less
confusing for readers) to reorder the instructions to calculate the
input_hash _after_ the key aggregation is done to reuse the result. In
case of the sender, the private key sum has to be multiplicated with G
in order to the get to the corresponding input pubkey sum.

This also corresponds to the current BIP352 implementation in the
secp256k1 library (https://github.com/bitcoin-core/secp256k1/pull/1519).
The reference implementation in Python here is adapted for the sender
side, the receiver side has already generated the input_hash after
summing up the pubkeys.
---
 bip-0352.mediawiki    | 8 +++-----
 bip-0352/reference.py | 8 ++++----
 2 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 4cbf9d72..f36f3592 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -98,9 +98,8 @@ In our simplified example we have been referring to Alice's transactions as havi
 
 Alice performs the tweak with the sum of her input private keys in the following manner:
 
-* Let ''A = A1 + A2 + ... + An''
-* Let ''input_hash = hash(outpointL || A)'', where ''outpointL'' is the smallest outpoint lexicographically'''Why use the lexicographically smallest outpoint for the hash?''' Recall that the purpose of including the input hash is so that the sender and receiver can both come up with a deterministic nonce that ensures that a unique address is generated each time, even when reusing the same scriptPubKey as an input. Choosing the smallest outpoint lexicographically satisifes this requirement, while also ensuring that the generated output is not dependent on the final ordering of inputs in the transaction. Using a single outpoint also works well with memory constrained devices (such as hardware signing devices) as it does not require the device to have the entire transaction in memory in order to generate the silent payment output.
 * Let ''a = a1 + a2 + ... + an''
+* Let ''input_hash = hash(outpointL || (a·G))'', where ''outpointL'' is the smallest outpoint lexicographically'''Why use the lexicographically smallest outpoint for the hash?''' Recall that the purpose of including the input hash is so that the sender and receiver can both come up with a deterministic nonce that ensures that a unique address is generated each time, even when reusing the same scriptPubKey as an input. Choosing the smallest outpoint lexicographically satisifes this requirement, while also ensuring that the generated output is not dependent on the final ordering of inputs in the transaction. Using a single outpoint also works well with memory constrained devices (such as hardware signing devices) as it does not require the device to have the entire transaction in memory in order to generate the silent payment output.
 * Let ''P0 = B + hash(input_hash·a·B || 0)·G''
 
 ''' Spend and Scan Key '''
@@ -284,7 +283,6 @@ The receiver obtains the public key from the ''scriptSig''. The receiver MUST pa
 
 The sender and receiver MUST calculate an input hash for the transaction in the following manner:
 
-* Let ''A = A1 + A2 + ... + An'', where each ''Ai'' is the public key of an input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
 * Let ''input_hash = hashBIP0352/Inputs(outpointL || A)'', where ''outpointL'' is the smallest outpoint lexicographically by txid and vout used in the transaction
 
 === Sender ===
@@ -301,10 +299,10 @@ The sending wallet performs coin selection as usual with the following restricti
 
 After the inputs have been selected, the sender can create one or more outputs for one or more silent payment addresses in the following manner:
 
-* Generate the ''input_hash'' with the smallest outpoint lexicographically, using the method described above
 * Collect the private keys for each input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
 * For each private key ''ai'' corresponding to a [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot output, check that the private key produces a point with an even Y coordinate and negate the private key if not'''Why do taproot private keys need to be checked?''' Recall from [https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki BIP340] that each X-only public key has two corresponding private keys, ''d'' and ''n - d''. To maintain parity between sender and receiver, it is necessary to use the private key corresponding to the even Y coordinate when performing the ECDH step since the receiver will assume the even Y coordinate when summing the taproot X-only public keys.
 * Let ''a = a1 + a2 + ... + an'', where each ''ai'' has been negated if necessary
+* Generate the ''input_hash'' with the smallest outpoint lexicographically and ''A = a·G'', using the method described above
 * Group receiver silent payment addresses by ''Bscan'' (e.g. each group consists of one ''Bscan'' and one or more ''Bm'')
 * For each group:
 ** Let ''ecdh_shared_secret = input_hash·a·Bscan''
@@ -335,8 +333,8 @@ A scan and spend key pair using BIP32 derivation are defined (taking inspiration
 
 If each of the checks in ''[[#scanning-silent-payment-eligible-transactions|Scanning silent payment eligible transactions]]'' passes, the receiving wallet must:
 
-* Generate the ''input_hash'' with the smallest outpoint lexicographically, using the method described above
 * Let ''A = A1 + A2 + ... + An'', where each ''Ai'' is the public key of an input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+* Generate the ''input_hash'' with the smallest outpoint lexicographically and ''A'', using the method described above
 * Let ''ecdh_shared_secret = input_hash·bscan·A''
 * Check for outputs:
 ** Let ''outputs_to_check'' be the taproot output keys from all taproot outputs in the transaction (spent and unspent).
diff --git a/bip-0352/reference.py b/bip-0352/reference.py
index 9f43695f..9b35d040 100755
--- a/bip-0352/reference.py
+++ b/bip-0352/reference.py
@@ -117,7 +117,7 @@ def decode_silent_payment_address(address: str, hrp: str = "tsp") -> Tuple[ECPub
     return B_scan, B_spend
 
 
-def create_outputs(input_priv_keys: List[Tuple[ECKey, bool]], input_hash: bytes, recipients: List[str], hrp="tsp") -> List[str]:
+def create_outputs(input_priv_keys: List[Tuple[ECKey, bool]], outpoints: List[COutPoint], recipients: List[str], hrp="tsp") -> List[str]:
     G = ECKey().set(1).get_pubkey()
     negated_keys = []
     for key, is_xonly in input_priv_keys:
@@ -127,6 +127,7 @@ def create_outputs(input_priv_keys: List[Tuple[ECKey, bool]], input_hash: bytes,
         negated_keys.append(k)
 
     a_sum = sum(negated_keys)
+    input_hash = get_input_hash(outpoints, a_sum * G)
     silent_payment_groups: Dict[ECPubKey, List[ECPubKey]] = {}
     for recipient in recipients:
         B_scan, B_m = decode_silent_payment_address(recipient, hrp=hrp)
@@ -236,9 +237,8 @@ if __name__ == "__main__":
 
             sending_outputs = []
             if (len(input_pub_keys) > 0):
-                A_sum = reduce(lambda x, y: x + y, input_pub_keys)
-                input_hash = get_input_hash([vin.outpoint for vin in vins], A_sum)
-                sending_outputs = create_outputs(input_priv_keys, input_hash, given["recipients"], hrp="sp")
+                outpoints = [vin.outpoint for vin in vins]
+                sending_outputs = create_outputs(input_priv_keys, outpoints, given["recipients"], hrp="sp")
 
                 # Note: order doesn't matter for creating/finding the outputs. However, different orderings of the recipient addresses
                 # will produce different generated outputs if sending to multiple silent payment addresses belonging to the

From 0f1eba2a607e84d85c1787b127c14333adf358ee Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Thu, 20 Jun 2024 17:29:37 +0200
Subject: [PATCH 130/288] docs(bip-0046): add test certificate for the 960th
 timelocked address

---
 bip-0046.mediawiki | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 84fd2e2d..1dc124ef 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -122,7 +122,7 @@ redeemscript        = 0400e10b5eb1752102a1b09f93073c63f205086440898141c0c3c6d24f
 scriptPubKey        = 0020bdee9515359fc9df912318523b4cd22f1c0b5410232dc943be73f9f4f07e39ad
 address             = bc1qhhhf29f4nlyalyfrrpfrknxj9uwqk4qsyvkujsa7w0ulfur78xkspsqn84
 
-// Test certificate using first timelocked address
+// Test certificate using the first timelocked address
 // Note that as signatures contains a random nonce, it might not be exactly the same when your code generates it
 // p2pkh address is the p2pkh address corresponding to the derived public key, it can be used to verify the message
 //  signature in any wallet that supports Verify Message.
@@ -158,6 +158,12 @@ string locktime     = 2099-12-01 00:00:00
 redeemscript        = 0580785df400b175210308c5751121b1ae5c973cdc7071312f6fc10ab864262f0cbd8134f056166e50f3ac
 scriptPubKey        = 0020803268e042008737cf439748cbb5a4449e311da9aa64ae3ac56d84d059654f85
 address             = bc1qsqex3czzqzrn0n6rjayvhddygj0rz8df4fj2uwk9dkzdqkt9f7zs5c493u
+
+// Test certificate using the 960th timelocked address
+Message       = fidelity-bond-cert|020000000000000000000000000000000000000000000000000000000000000001|750
+Address       = bc1qsqex3czzqzrn0n6rjayvhddygj0rz8df4fj2uwk9dkzdqkt9f7zs5c493u
+p2pkh address = 1JmTqEXY9pHwrao9XXPo1MeiQerMETmwP3
+Signature     = H9LWcv9PXjOLdGmA6s6jRKnPP9bKeOSUGN7ZF80dphKOUrLQnoIJx8NtHraTq5o6BbRBoNjKHuo4Mnok3/JXGBY=
 

 
 Code generating these test vectors can be found here: https://github.com/chris-belcher/timelocked-addresses-fidelity-bond-bip-testvectors

From 47033c62dc101080c31c1e8a88118ae8288f6d36 Mon Sep 17 00:00:00 2001
From: Sebastian Falbesoner 
Date: Sat, 22 Jun 2024 01:18:37 +0200
Subject: [PATCH 131/288] BIP-352: sending: add step to fail if input privkeys
 sum a is zero

The test vector data was generated with a Python script
(see https://github.com/theStack/bitcoin/blob/bc15ea8d0f282908b912dbf62bba816ecd82424d/contrib/silentpayments/submit_input_pubkeys_infinity_tx.py),
leading to the following output:

---------------------------------------------------------------------------------------------------------
     Privkey 1: a6df6a0bb448992a301df4258e06a89fe7cf7146f59ac3bd5ff26083acb22ceb
     Privkey 2: 592095f44bb766d5cfe20bda71f9575ed2df6b9fb9addc7e5fdffe0923841456
      Pubkey 1: 02557ef3e55b0a52489b4454c1169e06bdea43687a69c1f190eb50781644ab6975
      Pubkey 2: 03557ef3e55b0a52489b4454c1169e06bdea43687a69c1f190eb50781644ab6975
scriptPubKey 1: 00149d9e24f9fab4e35bf1a6df4b46cb533296ac0792
scriptPubKey 2: 00149860538b5575962776ed0814ae222c7d60c72d7b
     Address 1: tb1qnk0zf706kn34hudxma95dj6nx2t2cpujz7j5t5
     Address 2: tb1qnps98z64wktzwahdpq22ug3v04svwttm7gs8wn
-> Funding tx submitted: 3a286147b25e16ae80aff406f2673c6e565418c40f45c071245cdebc8a94174e

Taproot output address for spending tx: tb1pqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqkgkkf5
-> Spending tx submitted: fe788cf6578d547819def43d79e6c8f0153d4885f5a343d12bd03f34507aabd6
---------------------------------------------------------------------------------------------------------
---
 bip-0352.mediawiki                          |  1 +
 bip-0352/reference.py                       |  3 ++
 bip-0352/send_and_receive_test_vectors.json | 47 ++++++++++++++++++++-
 3 files changed, 50 insertions(+), 1 deletion(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index f36f3592..def4d0b2 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -302,6 +302,7 @@ After the inputs have been selected, the sender can create one or more outputs f
 * Collect the private keys for each input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
 * For each private key ''ai'' corresponding to a [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot output, check that the private key produces a point with an even Y coordinate and negate the private key if not'''Why do taproot private keys need to be checked?''' Recall from [https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki BIP340] that each X-only public key has two corresponding private keys, ''d'' and ''n - d''. To maintain parity between sender and receiver, it is necessary to use the private key corresponding to the even Y coordinate when performing the ECDH step since the receiver will assume the even Y coordinate when summing the taproot X-only public keys.
 * Let ''a = a1 + a2 + ... + an'', where each ''ai'' has been negated if necessary
+** If ''a = 0'', fail
 * Generate the ''input_hash'' with the smallest outpoint lexicographically and ''A = a·G'', using the method described above
 * Group receiver silent payment addresses by ''Bscan'' (e.g. each group consists of one ''Bscan'' and one or more ''Bm'')
 * For each group:
diff --git a/bip-0352/reference.py b/bip-0352/reference.py
index 9b35d040..7882ad1b 100755
--- a/bip-0352/reference.py
+++ b/bip-0352/reference.py
@@ -127,6 +127,9 @@ def create_outputs(input_priv_keys: List[Tuple[ECKey, bool]], outpoints: List[CO
         negated_keys.append(k)
 
     a_sum = sum(negated_keys)
+    if not a_sum.valid:
+        # Input privkeys sum is zero -> fail
+        return []
     input_hash = get_input_hash(outpoints, a_sum * G)
     silent_payment_groups: Dict[ECPubKey, List[ECPubKey]] = {}
     for recipient in recipients:
diff --git a/bip-0352/send_and_receive_test_vectors.json b/bip-0352/send_and_receive_test_vectors.json
index f9b205b8..c0288bc5 100644
--- a/bip-0352/send_and_receive_test_vectors.json
+++ b/bip-0352/send_and_receive_test_vectors.json
@@ -2669,5 +2669,50 @@
                 }
             }
         ]
+    },
+    {
+        "comment": "Input keys sum up to zero / point at infinity: sending fails, receiver skips tx",
+        "sending": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "3a286147b25e16ae80aff406f2673c6e565418c40f45c071245cdebc8a94174e",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "024730440220085003179ce1a3a88ce0069aa6ea045e140761ab88c22a26ae2a8cfe983a6e4602204a8a39940f0735c8a4424270ac8da65240c261ab3fda9272f6d6efbf9cfea366012102557ef3e55b0a52489b4454c1169e06bdea43687a69c1f190eb50781644ab6975",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "00149d9e24f9fab4e35bf1a6df4b46cb533296ac0792"
+                                }
+                            },
+                            "private_key": "a6df6a0bb448992a301df4258e06a89fe7cf7146f59ac3bd5ff26083acb22ceb"
+                        },
+                        {
+                            "txid": "3a286147b25e16ae80aff406f2673c6e565418c40f45c071245cdebc8a94174e",
+                            "vout": 1,
+                            "scriptSig": "",
+                            "txinwitness": "0247304402204586a68e1d97dd3c6928e3622799859f8c3b20c3c670cf654cc905c9be29fdb7022043fbcde1689f3f4045e8816caf6163624bd19e62e4565bc99f95c533e599782c012103557ef3e55b0a52489b4454c1169e06bdea43687a69c1f190eb50781644ab6975",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "00149860538b5575962776ed0814ae222c7d60c72d7b"
+                                }
+                            },
+                            "private_key": "592095f44bb766d5cfe20bda71f9575ed2df6b9fb9addc7e5fdffe0923841456"
+                        }
+                    ],
+                    "recipients": [
+                        "sp1qqtrqglu5g8kh6mfsg4qxa9wq0nv9cauwfwxw70984wkqnw2uwz0w2qnehen8a7wuhwk9tgrzjh8gwzc8q2dlekedec5djk0js9d3d7qhnq6lqj3s"
+                    ]
+                },
+                "expected": {
+                    "outputs": [
+                        []
+                    ]
+                }
+            }
+        ],
+        "receiving": [
+        ]
     }
-]
\ No newline at end of file
+]

From 59cc43d727000794f18dac0a502cd87c0daec22a Mon Sep 17 00:00:00 2001
From: Sebastian Falbesoner 
Date: Fri, 14 Jun 2024 14:33:40 +0200
Subject: [PATCH 132/288] BIP-352: scanning: add step to skip tx if input
 pubkeys sum A is point at infinity

The input data for the test vector is taken from the signet transaction
fe788cf6578d547819def43d79e6c8f0153d4885f5a343d12bd03f34507aabd6
which spends two P2WPKH inputs with negated pubkeys (x, y) and (x, -y)
from the funding transaction 3a286147b25e16ae80aff406f2673c6e565418c40f45c071245cdebc8a94174e
(see also https://github.com/bitcoin-core/secp256k1/pull/1519#issuecomment-2143167510
and the output from the script in the previous commit message).

Co-authored-by: josibake 
---
 bip-0352.mediawiki                          |  1 +
 bip-0352/reference.py                       |  4 ++
 bip-0352/send_and_receive_test_vectors.json | 42 +++++++++++++++++++++
 3 files changed, 47 insertions(+)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index def4d0b2..0cf63a9f 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -335,6 +335,7 @@ A scan and spend key pair using BIP32 derivation are defined (taking inspiration
 If each of the checks in ''[[#scanning-silent-payment-eligible-transactions|Scanning silent payment eligible transactions]]'' passes, the receiving wallet must:
 
 * Let ''A = A1 + A2 + ... + An'', where each ''Ai'' is the public key of an input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
+** If ''A'' is the point at infinity, skip the transaction
 * Generate the ''input_hash'' with the smallest outpoint lexicographically and ''A'', using the method described above
 * Let ''ecdh_shared_secret = input_hash·bscan·A''
 * Check for outputs:
diff --git a/bip-0352/reference.py b/bip-0352/reference.py
index 7882ad1b..b4eaf945 100755
--- a/bip-0352/reference.py
+++ b/bip-0352/reference.py
@@ -300,6 +300,10 @@ if __name__ == "__main__":
             add_to_wallet = []
             if (len(input_pub_keys) > 0):
                 A_sum = reduce(lambda x, y: x + y, input_pub_keys)
+                if A_sum.get_bytes() is None:
+                    # Input pubkeys sum is point at infinity -> skip tx
+                    assert expected["outputs"] == []
+                    continue
                 input_hash = get_input_hash([vin.outpoint for vin in vins], A_sum)
                 pre_computed_labels = {
                     (generate_label(b_scan, label) * G).get_bytes(False).hex(): generate_label(b_scan, label).hex()
diff --git a/bip-0352/send_and_receive_test_vectors.json b/bip-0352/send_and_receive_test_vectors.json
index c0288bc5..264f7bec 100644
--- a/bip-0352/send_and_receive_test_vectors.json
+++ b/bip-0352/send_and_receive_test_vectors.json
@@ -2713,6 +2713,48 @@
             }
         ],
         "receiving": [
+            {
+                "given": {
+                    "vin": [
+                        {
+                            "txid": "3a286147b25e16ae80aff406f2673c6e565418c40f45c071245cdebc8a94174e",
+                            "vout": 0,
+                            "scriptSig": "",
+                            "txinwitness": "024730440220085003179ce1a3a88ce0069aa6ea045e140761ab88c22a26ae2a8cfe983a6e4602204a8a39940f0735c8a4424270ac8da65240c261ab3fda9272f6d6efbf9cfea366012102557ef3e55b0a52489b4454c1169e06bdea43687a69c1f190eb50781644ab6975",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "00149d9e24f9fab4e35bf1a6df4b46cb533296ac0792"
+                                }
+                            }
+                        },
+                        {
+                            "txid": "3a286147b25e16ae80aff406f2673c6e565418c40f45c071245cdebc8a94174e",
+                            "vout": 1,
+                            "scriptSig": "",
+                            "txinwitness": "0247304402204586a68e1d97dd3c6928e3622799859f8c3b20c3c670cf654cc905c9be29fdb7022043fbcde1689f3f4045e8816caf6163624bd19e62e4565bc99f95c533e599782c012103557ef3e55b0a52489b4454c1169e06bdea43687a69c1f190eb50781644ab6975",
+                            "prevout": {
+                                "scriptPubKey": {
+                                    "hex": "00149860538b5575962776ed0814ae222c7d60c72d7b"
+                                }
+                            }
+                        }
+                    ],
+                    "outputs": [
+                        "0000000000000000000000000000000000000000000000000000000000000000"
+                    ],
+                    "key_material": {
+                        "spend_priv_key": "0000000000000000000000000000000000000000000000000000000000000001",
+                        "scan_priv_key": "0000000000000000000000000000000000000000000000000000000000000002"
+                    },
+                    "labels": []
+                },
+                "expected": {
+                    "addresses": [
+                        "sp1qqtrqglu5g8kh6mfsg4qxa9wq0nv9cauwfwxw70984wkqnw2uwz0w2qnehen8a7wuhwk9tgrzjh8gwzc8q2dlekedec5djk0js9d3d7qhnq6lqj3s"
+                    ],
+                    "outputs": []
+                }
+            }
         ]
     }
 ]

From 496e4295e76579b75dbafbd8a6c6e49948cc0d8d Mon Sep 17 00:00:00 2001
From: Sebastian Falbesoner 
Date: Sat, 22 Jun 2024 01:55:00 +0200
Subject: [PATCH 133/288] BIP-352: add change log (SemVer format)

The first paragraph is taken from BIP-327, with the sentence
about MAJOR version zero removed, as it's not relevant here
(we don't track the pre-merge history).
---
 bip-0352.mediawiki | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 0cf63a9f..c9f18547 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -483,6 +483,17 @@ A malicious notification could potentially cause the following issues:
 
 Wallet designers can choose which tradeoffs they find appropriate. For example, a wallet could check the block filter to at least probabilistically confirm the likely existence of the UTXO, thus efficiently cutting down on spam. The payment could then be marked as unconfirmed until a scan is performed and the existence of the UTXO in accordance to the silent payment specification is verified.
 
+== Change Log ==
+
+To help implementers understand updates to this document, we attach a version number that resembles ''semantic versioning'' (MAJOR.MINOR.PATCH).
+The MAJOR version is incremented if changes to the BIP are introduced that are incompatible with prior versions.
+The MINOR version is incremented whenever the inputs or the output of an algorithm changes in a backward-compatible way or new backward-compatible functionality is added.
+The PATCH version is incremented for other changes that are noteworthy (bug fixes, test vectors, important clarifications, etc.).
+
+* '''1.0.1''' (2024-06-22):
+** Add steps to fail if private key sum is zero (for sender) or public key sum is point at infinity (for receiver), add corresponding test vectors.
+* '''1.0.0''' (2024-05-08):
+** Initial version, merged as BIP-352.
 
 == Acknowledgements ==
 

From a1590ca121c112b1ff51b01a1215d719ec3783ae Mon Sep 17 00:00:00 2001
From: Orfeas Stefanos Thyfronitis Litos 
Date: Tue, 25 Jun 2024 17:13:41 +0100
Subject: [PATCH 134/288] Fix typo

---
 bip-0143.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0143.mediawiki b/bip-0143.mediawiki
index 81763a07..59b2bb58 100644
--- a/bip-0143.mediawiki
+++ b/bip-0143.mediawiki
@@ -114,7 +114,7 @@ Refer to the reference implementation, reproduced below, for the precise algorit
   ss << hashSequence;
   // The input being signed (replacing the scriptSig with scriptCode + amount)
   // The prevout may already be contained in hashPrevout, and the nSequence
-  // may already be contain in hashSequence.
+  // may already be contained in hashSequence.
   ss << txTo.vin[nIn].prevout;
   ss << static_cast(scriptCode);
   ss << amount;

From 3d299b4eb026eb3983966711b9ee43cfc1167aaf Mon Sep 17 00:00:00 2001
From: Elias Rad <146735585+nnsW3@users.noreply.github.com>
Date: Tue, 25 Jun 2024 20:26:19 +0300
Subject: [PATCH 135/288] BIP39: fix grammar in wordlists doc (#1626)

---
 bip-0039/bip-0039-wordlists.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bip-0039/bip-0039-wordlists.md b/bip-0039/bip-0039-wordlists.md
index 5acf87d1..7cf8fcb2 100644
--- a/bip-0039/bip-0039-wordlists.md
+++ b/bip-0039/bip-0039-wordlists.md
@@ -28,7 +28,7 @@ for two smaller words (This would be a problem with any of the 3 character sets
 
 ### Spanish
 
-1. Words can be uniquely determined typing the first 4 characters (sometimes less).
+1. Words can be uniquely determined by typing the first 4 characters (sometimes less).
 
 2. Special Spanish characters like 'ñ', 'ü', 'á', etc... are considered equal to 'n', 'u', 'a', etc... in terms of identifying a word. Therefore, there is no need to use a Spanish keyboard to introduce the passphrase, an application with the Spanish wordlist will be able to identify the words after the first 4 chars have been typed even if the chars with accents have been replaced with the equivalent without accents.
 
@@ -92,7 +92,7 @@ Credits: @zizelevak (Jan Lansky zizelevak@gmail.com)
 Words chosen using the following rules:
 
 1.  Words are 4-8 letters long.
-2.  Words can be uniquely determined typing the first 4 letters.
+2.  Words can be uniquely determined by typing the first 4 letters.
 3.  Only words containing all letters without diacritical marks. (It was the hardest task, because one third of all Czech letters has diacritical marks.)
 4.  Only nouns, verbs and adverbs, no other word types. All words are in basic form.
 5.  No personal names or geographical names.
@@ -104,7 +104,7 @@ Words chosen using the following rules:
 
 Credits: @alegotardo @bitmover-studio @brenorb @kuthullu @ninjastic @sabotag3x @Trimegistus
 
-1. Words can be uniquely determined typing the first 4 characters.
+1. Words can be uniquely determined by typing the first 4 characters.
 2. No accents or special characters.
 3. No complex verb forms.
 4. No plural words, unless there's no singular form.

From 3b995946605623c16adc954b5c841104db2d3022 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 10 Apr 2024 09:37:34 -0400
Subject: [PATCH 136/288] BIP 379: Specify Miniscript

Co-Authored-By: Antoine Poinsot 
---
 README.mediawiki |   7 +
 bip-0379.md      | 423 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 430 insertions(+)
 create mode 100644 bip-0379.md

diff --git a/README.mediawiki b/README.mediawiki
index 548e3c03..fbddd61b 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1163,6 +1163,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Standard
 | Draft
 |-
+| [[bip-0379.md|379]]
+| Applications
+| Miniscript
+| Pieter Wuille, Andrew Poelstra, Sanket Kanjalkar, Antoine Poinsot, Ava Chow
+| Informational
+| Draft
+|-
 | [[bip-0380.mediawiki|380]]
 | Applications
 | Output Script Descriptors General Operation
diff --git a/bip-0379.md b/bip-0379.md
new file mode 100644
index 00000000..10755d4e
--- /dev/null
+++ b/bip-0379.md
@@ -0,0 +1,423 @@
+
+  BIP: 379
+  Layer: Applications
+  Title: Miniscript
+  Author: Pieter Wuille 
+          Andrew Poelstra 
+          Sanket Kanjalkar 
+          Antoine Poinsot 
+          Ava Chow 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0379
+  Status: Draft
+  Type: Informational
+  Created: 2023-10-10
+  License: CC0-1.0
+

+
+## Abstract
+
+This document specifies Miniscript, a language for writing (a subset of) Bitcoin Scripts in a
+structured way, enabling analysis, composition, generic signing and more.
+
+## Copyright
+
+This document is licensed under the Creative Commons CC0 1.0 Universal license.
+
+## Motivation
+
+Bitcoin Script is an unusual stack-based language with many edge cases, designed for implementing
+spending conditions consisting of various combinations of signatures, hash locks, and time locks.
+Yet, despite being limited in functionality, it is still highly nontrivial to:
+
+* Given a combination of spending conditions, finding the most economical script to implement it.
+* Given two scripts, construct a script that implements a composition of their spending conditions (e.g. a multisig where one of the "keys" is another multisig).
+* Given a script, find out what spending conditions it permits.
+* Given a script and access to a sufficient set of private keys, construct a general satisfying witness for it.
+* Given a script, be able to predict the cost of spending an output.
+* Given a script, know whether particular resource limitations like the ops limit might be hit when spending.
+
+Miniscript functions as a representation for scripts that makes this sort of operations possible.
+It has a structure that allows composition. It is very easy to statically analyze for various
+properties (spending conditions, correctness, security properties, malleability, ...). It can be
+targeted by spending policy compilers. Finally, compatible scripts can easily be converted to
+Miniscript form - avoiding the need for additional metadata for e.g. signing devices that support
+it.
+
+## Specification
+
+These specifications apply to P2WSH ([BIP 141](bip-0141.mediawiki)) and Tapscript ([BIP 342](bip-0342.mediawiki)) scripts, with only minor
+variations between the two. Differences are noted inline. Unless explicitly stated otherwise,
+specifications apply to both. P2SH and bare scripts are excluded from this specification.
+
+### Translation Table
+
+Miniscript consists of a set of script *fragments* which are designed to be safely and correctly composabe.
+
+This table shows all Miniscript *fragments* and their associated semantics and Bitcoin Script.
+Fragments that do not change the semantics of their subexpressions are called *wrappers*. Normal
+fragments use a `fragment(arg1,arg2,...)` notation, while wrappers are written using
+prefixes separated from other fragments by a colon. The colon is dropped between subsequent
+wrappers; e.g.  `dv:older(144)` is the `d:` wrapper applied to the
+`v:` wrapper applied to the `older` fragment for 144 blocks.
+
+The `pk`, `pkh`, and `and_n` fragments and `t:`,
+`l:`, and `u:` wrappers are syntactic sugar for other Miniscripts, as listed
+in the table below. Note that `<20>` are in hex representation in this document.
+
+Miniscript fragments are expected to be used in [BIP 382](bip-0382.mediawiki) `wsh()` descriptors
+and [BIP 386](bip-0386.mediawiki) `tr()` descriptors. Key expressions are specified in
+[BIP 380](bip-0380.mediawiki#user-content-Key_Expressions). Additionally, BIPs 382 and 386 specify
+restrictions on key expressions and what they resolve to - these apply to key expressions in
+Miniscript. BIP 382's key expression restrictions apply to Miniscript in P2WSH contexts, and BIP
+386's key expression restrictions apply to Miniscript in P2TR contexts. From a user's perspective,
+Miniscript is not a separate language, but rather a significant expansion of the descriptor language.
+
+| Semantics                                                | Miniscript Fragment           | Bitcoin Script
+|----------------------------------------------------------|-------------------------------|---------------
+| false                                                    | `0`                           | `0`
+| true                                                     | `1`                           | `1`
+| check(key)                                               | `pk_k(key)`                   | ``
+|                                                          | `pk_h(key)`                   | `DUP HASH160  EQUALVERIFY `
+|                                                          | `pk(key)` = `c:pk_k(key)`     | ` CHECKSIG`
+|                                                          | `pkh(key)` = `c:pk_h(key)`    | `DUP HASH160  EQUALVERIFY CHECKSIG`
+| nSequence ≥ n (and compatible)                           | `older(n)`                    | ` CHECKSEQUENCEVERIFY`
+| nLockTime ≥ n (and compatible)                           | `after(n)`                    | ` CHECKLOCKTIMEVERIFY`
+| len(x) = 32 and SHA256(x) = h                            | `sha256(h)`                   | `SIZE <20> EQUALVERIFY SHA256  EQUAL`
+| len(x) = 32 and HASH256(x) = h                           | `hash256(h)`                  | `SIZE <20> EQUALVERIFY HASH256  EQUAL`
+| len(x) = 32 and RIPEMD160(x) = h                         | `ripemd160(h)`                | `SIZE <20> EQUALVERIFY RIPEMD160  EQUAL`
+| len(x) = 32 and HASH160(x) = h                           | `hash160(h)`                  | `SIZE <20> EQUALVERIFY HASH160  EQUAL`
+| (X and Y) or Z                                           | `andor(X,Y,Z)`                | `[X] NOTIF [Z] ELSE [Y] ENDIF`
+| X and Y                                                  | `and_v(X,Y)`                  | `[X] [Y]`
+|                                                          | `and_b(X,Y)`                  | `[X] [Y] BOOLAND`
+|                                                          | `and_n(X,Y)` = `andor(X,Y,0)` | `[X] NOTIF 0 ELSE [Y] ENDIF`
+| X or Z                                                   | `or_b(X,Z)`                   | `[X] [Z] BOOLOR`
+|                                                          | `or_c(X,Z)`                   | `[X] NOTIF [Z] ENDIF`
+|                                                          | `or_d(X,Z)`                   | `[X] IFDUP NOTIF [Z] ENDIF`
+|                                                          | `or_i(X,Z)`                   | `IF [X] ELSE [Z] ENDIF`
+| X_1 + ... + X_n = k                                      | `thresh(k,X_1,...,X_n)`       | `[X_1] [X_2] ADD ... [X_n] ADD ...  EQUAL`
+| check(key_1) + ... + check(key_n) = k *(P2WSH only)*     | `multi(k,key_1,...,key_n)`    | `  ...   CHECKMULTISIG`
+| check(key_1) + ... + check(key_n) = k *(Tapscript only)* | `multi_a(k,key_1,...,key_n)`  | ` CHECKSIG  CHECKSIGADD ...  CHECKSIGADD  NUMEQUAL`
+| X (identities)                                           | `a:X`                         | `TOALTSTACK [X] FROMALTSTACK`
+|                                                          | `s:X`                         | `SWAP [X]`
+|                                                          | `c:X`                         | `[X] CHECKSIG`
+|                                                          | `t:X` = `and_v(X,1)`          | `[X] 1`
+|                                                          | `d:X`                         | `DUP IF [X] ENDIF`
+|                                                          | `v:X`                         | `[X] VERIFY (or VERIFY version of last opcode in [X])`
+|                                                          | `j:X`                         | `SIZE 0NOTEQUAL IF [X] ENDIF`
+|                                                          | `n:X`                         | `[X] 0NOTEQUAL`
+|                                                          | `l:X` = `or_i(0,X)`           | `IF 0 ELSE [X] ENDIF`
+|                                                          | `u:X` = `or_i(X,0)`           | `IF [X] ELSE 0 ENDIF`
+
+### Type System
+
+Not every Miniscript expression can be composed with every other. Some return their result by
+putting true or false on the stack; others can only abort or continue. Some require subexpressions
+that consume an exactly known number of arguments, while others need a subexpression that has a
+nonzero top stack element to satisfy. To model all these properties, we define a correctness type
+system for Miniscript.
+
+#### Correctness
+
+Every miniscript expression has one of four basic types: "**B**" (base), "**V**" (verify),
+"**K**" (key) and "**W**" (wrapped). Then there are 5 type modifiers that guarantee additional
+properties: "**z**" (zero-arg), "**o**" (one-arg), "**n**" (nonzero), "**d**"
+(dissatisfiable), and "**u**" (unit).
+
+The following table lists the correctness requirements for each of the Miniscript expressions, and
+its type properties in function of those of their subexpressions.
+
+| Miniscript                   | Requires                                              | Type        | Properties
+|------------------------------|-------------------------------------------------------|-------------|-----------
+| `0`                          |                                                       | B           | z; u; d
+| `1`                          |                                                       | B           | z; u
+| `pk_k(key)`                  |                                                       | K           | o; n; d; u
+| `pk_h(key)`                  |                                                       | K           | n; d; u
+| `older(n)`, `after(n)`       | 1 ≤ n < 231                          | B           | z
+| `sha256(h)`                  |                                                       | B           | o; n; d; u
+| `ripemd160(h)`               |                                                       | B           | o; n; d; u
+| `hash256(h)`                 |                                                       | B           | o; n; d; u
+| `hash160(h)`                 |                                                       | B           | o; n; d; u
+| `andor(X,Y,Z)`               | X is Bdu; Y and Z are both B, K, or V                 | same as Y/Z | z=zXzYzZ; o=zXoYoZ or oXzYzZ; u=uYuZ; d=dZ
+| `and_v(X,Y)`                 | X is V; Y is B, K, or V                               | same as Y   | z=zXzY; o=zXoY or zYoX; n=nX or zXnY; u=uY
+| `and_b(X,Y)`                 | X is B; Y is W                                        | B           | z=zXzY; o=zXoY or zYoX; n=nX or zXnY; d=dXdY; u
+| `or_b(X,Z)`                  | X is Bd; Z is Wd                                      | B           | z=zXzZ; o=zXoZ or zZoX; d; u
+| `or_c(X,Z)`                  | X is Bdu; Z is V                                      | V           | z=zXzZ; o=oXzZ
+| `or_d(X,Z)`                  | X is Bdu; Z is B                                      | B           | z=zXzZ; o=oXzZ; d=dZ; u=uZ
+| `or_i(X,Z)`                  | both are B, K, or V                                   | same as X/Z | o=zXzZ; u=uXuZ; d=dX or dZ
+| `thresh(k,X_1,...,X_n)`      | 1 ≤ k ≤ n; X1 is Bdu; others are Wdu | B           | z=all are z; o=all are z except one is o; d; u
+| `multi(k,key_1,...,key_n)`   | 1 ≤ k ≤ n ≤ 20                               | B           | n; d; u
+| `multi_a(k,key_1,...,key_n)` | 1 ≤ k ≤ n                                       | B           | d; u
+| `a:X`                        | X is B                                                | W           | d=dX; u=uX
+| `s:X`                        | X is Bo                                               | W           | d=dX; u=uX
+| `c:X`                        | X is K                                                | B           | o=oX; n=nX; d=dX; u
+| `d:X`                        | X is Vz                                               | B           | o; n; d; *(Tapscript only)* u
+| `v:X`                        | X is B                                                | V           | z=zX; o=oX; n=nX
+| `j:X`                        | X is Bn                                               | B           | o=oX; n; d; u=uX
+| `n:X`                        | X is B                                                | B           | z=zX; o=oX; n=nX; d=dX; u
+
+#### Timelock Type Mixing
+
+There is one additional correctness property that Miniscript expressions must satisfy:
+the four timelock types (absolute time based, absolute height based, relative time based, and
+relative height based) must not be mixed in an incompatible way.
+
+Within `and` combinators and the `thresh` combinator where k >= 2, it is illegal for both absolute
+height based and time based timelocks to appear, or for both relative height based and time based
+timelocks to appear.
+
+For all other combinators, it is legal to mix timelock types. It is also always legal to
+mix absolute and relative timelocks (even if one is height based and the other is time based).
+
+#### Malleability
+
+Malleability is the ability for a third party (someone who does *not* hold a participating private
+key) to modify an existing satisfaction into another valid satisfaction. To analyze the
+malleability guarantees of a script we define three additional type properties: "**s**" (signed),
+"**f**" (forced) and "**e**" (expressive).
+
+The following table lists the malleability properties and requirement of each fragment.
+
+| Miniscript                   | Requires                                                            | Properties
+|------------------------------|---------------------------------------------------------------------|-----------
+| `0`                          |                                                                     | s, e
+| `1`                          |                                                                     | f
+| `pk_k(key)`                  |                                                                     | s, e
+| `pk_h(key)`                  |                                                                     | s, e
+| `older(n)`                   |                                                                     | f
+| `after(n)`                   |                                                                     | f
+| `sha256(h)`                  |                                                                     |
+| `ripemd160(h)`               |                                                                     |
+| `hash256(h)`                 |                                                                     |
+| `hash160(h)`                 |                                                                     |
+| `andor(X,Y,Z)`               | eX and (sX or sY or sZ) | s=sZ and (sX or sY); f=fZ and (sX or fY); e=eZ and (sX or fY)
+| `and_v(X,Y)`                 |                                                                     | s=sX or sY; f=sX or fY
+| `and_b(X,Y)`                 |                                                                     | s=sX or sY; f=fXfY or sXfX or sYfY; e=eXeYsXsY
+| `or_b(X,Z)`                  | eXeZ and (sX or sZ)     | s=sXsZ; e
+| `or_c(X,Z)`                  | eX and (sX or sZ)                  | s=sXsZ; f
+| `or_d(X,Z)`                  | eX and (sX or sZ)                  | s=sXsZ; f=fZ; e=eZ
+| `or_i(X,Z)`                  | sX or sZ                                      | s=sXsZ; f=fXfZ; e=eXfZ or eZfX
+| `thresh(k,X_1,...,X_n)`      | all are e; at most k are non-s                                      | s=at most k-1 are non-s; e=all are s
+| `multi(k,key_1,...,key_n)`   |                                                                     | s; e
+| `multi_a(k,key_1,...,key_n)` |                                                                     | s; e
+| `a:X`                        |                                                                     | s=sX; f=fX; e=eX
+| `s:X`                        |                                                                     | s=sX; f=fX; e=eX
+| `c:X`                        |                                                                     | s; f=fX; e=eX
+| `d:X`                        |                                                                     | s=sX; e
+| `v:X`                        |                                                                     | s=sX; f
+| `j:X`                        |                                                                     | s=sX; e=fX
+| `n:X`                        |                                                                     | s=sX; f=fX; e=eX
+
+### Satisfaction
+
+The following table shows all valid satisfactions and dissatisfactions for every Miniscript, using
+satisfactions and dissatisfactions of its subexpressions. Multiple possibilities are separated by
+semicolons. Some options are inefficient and provably unnecessary to the satisfaction algorithm
+described below, but are valid according to script rules and could be used by a malleator or other
+non-standard actor. These are called *non-canonical* options, and are listed for completeness, but
+~~[struckthrough]~~. The fragments where a satisfaction or dissatisfaction does not exist will
+contain *(none)*. The fragments where the satisfaction or dissatisfaction is to provide no data
+will contain *(empty)*.
+
+| Miniscript                   | Dissatisfactions (dsat)                                 | Satisfactions (sat)
+|------------------------------|---------------------------------------------------------|--------------------
+| `0`                          | *(empty)*                                               | *(none)*
+| `1`                          | *(none)*                                                | *(empty)*
+| `pk_k(key)`                  | 0                                                       | sig
+| `pk_h(key)`                  | 0 key                                                   | sig key
+| `older(n)`                   | *(none)*                                                | *(empty)*
+| `after(n)`                   | *(none)*                                                | *(empty)*
+| `sha256(h)`                  | any 32-byte vector except the preimage                  | preimage
+| `ripemd160(h)`               | any 32-byte vector except the preimage                  | preimage
+| `hash256(h)`                 | any 32-byte vector except the preimage                  | preimage
+| `hash160(h)`                 | any 32-byte vector except the preimage                  | preimage
+| `andor(X,Y,Z)`               | dsat(Z) dsat(X); ~~[dsat(Y) sat(X)]~~                   | sat(Y) sat(X); sat(Z) dsat(X)
+| `and_v(X,Y)`                 | *(none)*; ~~[dsat(Y) sat(X)]~~                          | sat(Y) sat(X)
+| `and_b(X,Y)`                 | dsat(Y) dsat(X); ~~[sat(Y) dsat(X)]; [dsat(Y) sat(X)]~~ | sat(Y) sat(X)
+| `or_b(X,Z)`                  | dsat(Z) dsat(X)                                         | dsat(Z) sat(X); sat(Z) dsat(X); ~~[sat(Z) sat(X)]~~
+| `or_c(X,Z)`                  | *(none)*                                                | sat(X); sat(Z) dsat(X)
+| `or_d(X,Z)`                  | dsat(Z) dsat(X)                                         | sat(X); sat(Z) dsat(X)
+| `or_i(X,Z)`                  | dsat(X) 1; dsat(Z) 0                                    | sat(X) 1; sat(Z) 0
+| `thresh(k,X_1,...,X_n)`      | All dsats; ~~[Sats/dsats with 1 ≤ #(sats) ≠ k]~~  | Sats/dsats with #(sats) = k
+| `multi(k,key_1,...,key_n)`   | 0 0 ... 0 (k+1 times)                                   | 0 sig ... sig
+| `multi_a(k,key_1,...,key_n)` | 0 ... 0 (n times); ~~[sig/0 with #(sig) ≠ k]~~        | sig/0 with #(sig) = k and #(sigs/0) = n
+| `a:X`                        | dsat(X)                                                 | sat(X)
+| `s:X`                        | dsat(X)                                                 | sat(X)
+| `c:X`                        | dsat(X)                                                 | sat(X)
+| `d:X`                        | 0                                                       | sat(X) 1
+| `v:X`                        | *(none)*                                                | sat(X)
+| `j:X`                        | 0; ~~[dsat(X) (if nonzero top stack)]~~                 | sat(X)
+| `n:X`                        | dsat(X)                                                 | sat(X)
+
+#### Non-malleable Satisfaction Algorithm
+
+In order to produce non-malleable satisfactions we make use of a function that returns the optimal
+satisfaction and dissatisfaction for a given expression (if any exist), or a special DONTUSE ("don't use") value,
+together with an optional HASSIG ("has signature") marker that tracks whether the solution contains at least one
+signature. To implement the function:
+* Invoke the function recursively for all subexpressions, obtaining all their satisfactions/dissatisfactions.
+* Iterate over all the valid satisfactions/dissatisfactions in the table above (including the non-canonical ones), taking into account:
+  * The dissatisfactions for `sha256`, `ripemd160`, `hash256`, and `hash160` are always malleable, so instead use DONTUSE there.
+  * The non-canonical options for `and_b`, `or_b`, and `thresh` are always overcomplete, so instead use DONTUSE there as well (with HASSIG flag if the original non-canonical solution had one).
+  * The satisfactions for `pk_k`, `pk_h`, and `multi` can be marked HASSIG.
+  * When constructing solutions by combining results for subexpressions, the result is DONTUSE if any of the constituent results is DONTUSE. Furthermore, the result gets the HASSIG tag if any of the constituents does.
+* If among all valid solutions (including DONTUSE ones) more than one does not have the HASSIG marker, return DONTUSE.
+* If instead exactly one does not have the HASSIG marker, return that solution.
+* If all valid solutions have the HASSIG marker, but all of them are DONTUSE, return DONTUSE-HASSIG. The HASSIG marker is important because while this represents a choice between multiple options that would cause malleability if used, they are not available to the attacker, and we may be able to avoid them entirely still.
+* Otherwise, all not-DONTUSE options are valid, so return the smallest one (in terms of witness size).
+
+To produce an overall satisfaction, invoke the function on the toplevel expression. If no valid
+satisfaction is returned, or it is DONTUSE, fail. Otherwise, if any timelocking is used in the
+script but the result does not have the HASSIG flag, also fail. If the satisfaction is both not
+DONTUSE and HASSIG, return it.
+
+
+## Discussion
+
+## Security
+
+Miniscript primarily aims to provide guarantees on the correctness of a Bitcoin Script. That is, to
+guarantee **consensus soundness** and **standardness completeness**. Consensus soundness means
+it is not possible to construct a consensus-valid witness for a Bitcoin Script unless the Miniscript
+spending conditions are met. Standardness completeness means a standardness-valid witness can be
+created for all spending paths of a Miniscript, assuming the resource limits are respected and there
+is no timelock mixing.
+
+Additionally, Miniscript can guarantee the non-malleability and maximum size of a witness. These can
+assist in assessing the soundness of protocols where transaction fees (and therefore transaction
+size) are security-critical parameters.
+
+Hash preimages are constrained to 32 bytes to disallow various forms of griefing, including making
+non-standard (un-relayable) transactions, consensus-invalid swaps across blockchains, as well as
+ensure that satisfaction cost can be accurately calculated.
+
+In order for these properties to not just apply to script, but to an entire transaction, it's
+important that the witness commits to all data relevant for verification. In practice this means
+that scripts whose conditions can be met without any digital signature are insecure. Besides being
+trivially insecure, note how a transaction lacking a signature check allows an attacker to change
+its nLockTime and nSequence fields to meet additional timelock conditions.
+
+### Type System
+
+To statically verify the correctness and malleability guarantees discussed in the previous section,
+we define a type system. See the specifications above for a reference of each fragment's
+requirements and properties. Here we give more information about each type.
+
+Every expression has one of four basic types:
+* "**B**" Base expressions. These take their inputs from the top of the stack. When satisfied, they push a nonzero value of up to 4 bytes onto the stack. When dissatisfied, they push an exact 0 onto the stack (if dissatisfaction without aborting is possible at all). This type is used for most expressions, and required for the top level expression. An example is `older(n)` = ` CHECKSEQUENCEVERIFY`.
+* "**V**" Verify expressions. Like "B", these take their inputs from the top of the stack. Upon satisfaction however, they continue without pushing anything. They cannot be dissatisfied (will abort instead). A "V" can be obtained using the `v:` wrapper on a "B" expression, or by combining other "V" expressions using `and_v`, `or_i`, `or_c`, or `andor`. An example is `v:pk(key)` = ` CHECKSIGVERIFY`.
+* "**K**" Key expressions. They again take their inputs from the top of the stack, but instead of verifying a condition directly they always push a public key onto the stack, for which a signature is still required to satisfy the expression. A "K" can be converted into a "B" using the `c:` wrapper. An example is `pk_h(key)` = `DUP HASH160  EQUALVERIFY`.
+* "**W**" Wrapped expressions. They take their inputs from one below the top of the stack, and push a nonzero (in case of satisfaction) or zero (in case of dissatisfaction) either on top of the stack, or one below. So for example a 3-input "W" would take the stack "A B C D E F" and turn it into "A B F 0" or "A B 0 F" in case of dissatisfaction, and "A B F n" or "A B n F" in case of satisfaction (with n a nonzero value). Every "W" is either `s:B` (SWAP B) or `a:B` (TOALTSTACK B FROMALTSTACK). An example is `s:pk(key)` = `SWAP  CHECKSIG`.
+
+Then there are 6 type modifiers, which guarantee additional properties:
+* "**z**" Zero-arg: this expression always consumes exactly 0 stack elements.
+* "**o**" One-arg: this expression always consumes exactly 1 stack element.
+* "**n**" Nonzero: this expression always consumes at least 1 stack element, no satisfaction for this expression requires the top input stack element to be zero.
+* "**d**" Dissatisfiable: a dissatisfaction for this expression can unconditionally be constructed. This implies the dissatisfaction cannot include any signature or hash preimage, and cannot rely on timelocks being satisfied.
+* "**u**" Unit: when satisfied, this expression will put an exact 1 on the stack (as opposed to any nonzero value).
+* "**k**" No timelock mixing. This expression does not contain a mix of heightlock and timelock of the same type. If the miniscript does not have the "k" property, the miniscript template will not match the user expectation of the corresponding spending policy.
+
+Finally to analyze malleability guarantees we introduce 3 new type modifiers:
+* "**s**" Signed: satisfying this expression always requires a signature (predicting whether all satisfactions will be HASSIG).
+* "**f**" Forced: dissatisfying this expression always requires a signature (predicting whether all dissatisfactions will be HASSIG).
+* "**e**" Expressive: this requires a unique unconditional dissatisfaction to exist, and forces all conditional dissatisfactions (if any) to require a signature.
+
+
+### Malleability
+
+Since Segwit, malleating a transaction no longer breaks the validity of unconfirmed descendant
+transactions. However, unintentional malleability may still have a number of much weaker undesirable
+effects. If a witness can be stuffed with additional data, the transaction's feerate will go down,
+potentially to the point where its ability to propagate and get confirmed is impacted. Additionally,
+malleability can be exploited to add roundtrips to BIP152 block propagation, by trying to get
+different miners to mine different versions of the same transaction. Finally, malleability may
+interfere with the usage of hash locks as a mechanism for publishing preimages.
+
+Using the malleability type properties it is possible to determine statically whether a script can
+be non-malleably satisfied under all circumstances. In many cases it is reasonable to only accept
+such guaranteed-non-malleable scripts, as unexpected behavior can occur when using other scripts.
+
+For example, when running the non-malleable satisfaction algorithm above, adding available
+preimages, or increasing the nLockTime/nSequence values actually may make it fail where it succeeded
+before. This is because a larger set of met conditions may mean an existing satisfaction goes from
+non-malleable to malleable. Restricting things to scripts that are guaranteed to be satisfiable in a
+non-malleable way avoids this problem.
+
+When analysing Miniscripts for resource limits, restricting yourself to just non-malleable solutions
+(or even non-malleable scripts) also leads to tighter bounds, as all non-canonical satisfactions and
+dissatisfactions can be left out of consideration.
+
+The malleability analysis makes the following assumptions:
+* The attacker does not have access to any of the private keys of public keys that participate in the Script. Participants with private keys inherently have the ability to produce different satisfactions by creating multiple signatures. While it is also interesting to study the impact rogue participants can have, we treat it as a distinct problem.
+* The attacker only has access to hash preimages that honest users have access to as well. This is a reasonable assumption because hash preimages are revealed once globally, and then available to everyone. On the other hand, making the assumption that attackers may have access to more preimages than honest users makes a large portion of scripts impossible to satisfy in a non-malleable way.
+* The attacker gets to see exactly one satisfying witness of any transaction. If he sees multiple, it becomes possible for the attacker to mix and match different satisfactions. This is very hard to reason about.
+* We restrict this analysis to scripts where no public key is repeated. If signatures constructed for one part of the script can be bound to other checks in the same script, a variant of the mixing from the previous point becomes available that is equally hard to reason about. Furthermore this situation can be avoided by using separate keys.
+* The attacker is constrained by common standardness rules. A miner may be able to malleate a witness considered non-malleable by Miniscript.
+
+#### Non-Malleable Satisfaction
+
+Malleable satisfactions or dissatisfactions appear whenever options are available to attackers distinct from the one taken by honest users. This can happen for multiple reasons:
+1. Two or more options for a satisfaction or dissatisfaction are listed in the table above which are both available to attackers directly. Regardless of which option is used in the honest solution, the attacker can change the solution to the other one.
+2. Two or more options for a satisfaction or dissatisfaction are listed in the table above, only one of which is available to attackers, but the honest solution uses another one. In that case, the attacker can modify the solution to pick the one available to him.
+3. The honest users pick a solution that contains a satisfaction which can be turned into a dissatisfaction without invalidating the overall witness. Those are called overcomplete solutions.
+
+Because we assume attackers never have access to private keys, we can treat any solution that
+includes a signature as one that is unavailable to attackers. For others, the worst case is that the
+attacker has access to every solution the honest users have, but no others: for preimages this is an
+explicit assumption, while timelock availability is determined by the nLockTime and nSequence fields
+in the transaction. As long as the overall satisfaction includes at least one signature, those
+values are fixed, and timelock availability is identical for attackers and honest users.
+
+The description of the non-malleable satisfaction algorithm can be used to show that no
+non-canonical solutions listed in the satisfaction table can occur inside non-malleable
+satisfaction:
+* Some of the non-canonical options (the `or_b`, `and_b`, and `thresh` ones) are overcomplete, and thus can clearly not appear in non-malleable satisfactions.
+* The fact that non-"d" expressions cannot be dissatisfied in valid witnesses rules out the usage of the non-canonical `and_v` dissatisfaction.
+* "d" expressions are defined to be unconditionally dissatisfiable, which implies that for those a non-HASSIG dissatisfaction must exist. Non-HASSIG solutions must be preferred over HASSIG ones (reason 2), and when multiple non-HASSIG ones exist, none can be used (reason 1). This lets us rule out the other non-canonical options in the table:
+  * `j:X` is always "d", its non-HASSIG dissatisfaction "0" always exists, and thus rules out any usage of "dsat(X)".
+  * If `andor(X,Y,Z)` is "d", a non-HASSIG dissatisfaction "dsat(Z) dsat(X)" must exist, and thus rules out any usage of "dsat(Y) sat(X)".
+  * If `and_b(X,Y)` is "d", a non-HASSIG dissatisfaction "dsat(Y) dsat(X)" must exist, and thus rules out any usage of "dsat(Y) sat(X)" and "sat(Y) dsat(X)". Those are also overcomplete.
+  * `thresh(k,...)` is always "d", a non-HASSIG dissatisfaction with just dissatisfactions must exist due to typing rules, and thus rules out usage of the other dissatisfactions. They are also overcomplete.
+
+
+### Resource Limits
+
+Various types of Bitcoin Scripts have different resource limitations, either through consensus or standardness. Some of them affect otherwise valid Miniscripts:
+* In P2WSH, scripts larger than 3600 bytes are invalid by standardness. In Tapscript, scripts are implicitly bounded by the maximum size of a block (1 million virtual bytes).
+* In P2WSH, script satisfactions where the total number of non-push opcodes plus the number of keys participating in all executed `CHECKMULTISIG` is above 201 are invalid by consensus.
+* In both Tapscript and P2WSH, script satisfactions which make the stack exceed 1000 elements before or during execution are invalid.
+* In P2WSH, satisfactions with a witness consisting of over 100 stack elements (excluding the script itself) are invalid by standardness.
+
+A static analysis can be performed on a Miniscript to verify if none, all or any of the spending
+paths hit any of the limits.
+
+
+## Test Vectors
+
+TBD
+
+## Backwards Compatibility
+
+Miniscript's syntax is compatible with BIP 380 Output Script Descriptors, and should be considered
+an extension to it that provides a new type of Script expression that is only valid in
+`wsh()` and `tr()` contexts. As these are wholly new expressions, they are not
+compatible with any existing implementation of descriptors. Additionally, the scripts produced are
+unlikely to be standard scripts.
+
+The `pk()`, `pkh()`, `multi()`, and `multi_a()`
+fragments overlap with existing descriptors. These parse to the same semantic meanings as those
+descriptors and produce the same scripts.
+
+## Reference Implementation
+
+A first reference implementation and documentation for Miniscript in P2WSH was originally published at
+https://github.com/sipa/miniscript .
+
+The reference implementation for Miniscript in P2WSH was introduced in Bitcoin Core through PRs
+[24147](https://github.com/bitcoin/bitcoin/pull/24147), [24148](https://github.com/bitcoin/bitcoin/pull/24148), and
+[24149](https://github.com/bitcoin/bitcoin/pull/24149). The last one to be merged was released in Bitcoin
+Core version 25.0.
+
+The reference implementation for Miniscript in Tapscript was introduced in Bitcoin Core in PR
+[27255](https://github.com/bitcoin/bitcoin/pull/27255). This PR was merged and released in Bitcoin Core
+version 26.0.

From 8ac84bd344c2375c4ffc57e65da1527ec191cc5f Mon Sep 17 00:00:00 2001
From: josibake 
Date: Sat, 29 Jun 2024 14:28:37 +0200
Subject: [PATCH 137/288] BIP352: improve input_hash wording

Since https://github.com/bitcoin/bips/pull/1622, it makes more sense
to define input_hash inline, vs having its own section.
---
 bip-0352.mediawiki | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index c9f18547..483bed3b 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -279,12 +279,6 @@ The sender performs the tweak using the private key for the nested ''P2WPKH'' ou
 
 The receiver obtains the public key from the ''scriptSig''. The receiver MUST parse the ''scriptSig'' for the public key, even if the ''scriptSig'' does not match the template specified (e.g.  OP_DROP  ). This is to address the [https://en.bitcoin.it/wiki/Transaction_malleability third-party malleability of ''P2PKH'' ''scriptSigs''].
 
-=== Input hash ===
-
-The sender and receiver MUST calculate an input hash for the transaction in the following manner:
-
-* Let ''input_hash = hashBIP0352/Inputs(outpointL || A)'', where ''outpointL'' is the smallest outpoint lexicographically by txid and vout used in the transaction
-
 === Sender ===
 
 ==== Selecting inputs ====
@@ -303,7 +297,7 @@ After the inputs have been selected, the sender can create one or more outputs f
 * For each private key ''ai'' corresponding to a [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki BIP341] taproot output, check that the private key produces a point with an even Y coordinate and negate the private key if not'''Why do taproot private keys need to be checked?''' Recall from [https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki BIP340] that each X-only public key has two corresponding private keys, ''d'' and ''n - d''. To maintain parity between sender and receiver, it is necessary to use the private key corresponding to the even Y coordinate when performing the ECDH step since the receiver will assume the even Y coordinate when summing the taproot X-only public keys.
 * Let ''a = a1 + a2 + ... + an'', where each ''ai'' has been negated if necessary
 ** If ''a = 0'', fail
-* Generate the ''input_hash'' with the smallest outpoint lexicographically and ''A = a·G'', using the method described above
+* Let ''input_hash = hashBIP0352/Inputs(outpointL || A)'', where ''outpointL'' is the smallest ''outpoint'' lexicographically used in the transaction and ''A = a·G''
 * Group receiver silent payment addresses by ''Bscan'' (e.g. each group consists of one ''Bscan'' and one or more ''Bm'')
 * For each group:
 ** Let ''ecdh_shared_secret = input_hash·a·Bscan''
@@ -336,7 +330,7 @@ If each of the checks in ''[[#scanning-silent-payment-eligible-transactions|Scan
 
 * Let ''A = A1 + A2 + ... + An'', where each ''Ai'' is the public key of an input from the ''[[#inputs-for-shared-secret-derivation|Inputs For Shared Secret Derivation]]'' list
 ** If ''A'' is the point at infinity, skip the transaction
-* Generate the ''input_hash'' with the smallest outpoint lexicographically and ''A'', using the method described above
+* Let ''input_hash = hashBIP0352/Inputs(outpointL || A)'', where ''outpointL'' is the smallest ''outpoint'' lexicographically used in the transaction
 * Let ''ecdh_shared_secret = input_hash·bscan·A''
 * Check for outputs:
 ** Let ''outputs_to_check'' be the taproot output keys from all taproot outputs in the transaction (spent and unspent).

From 2a99b8f925bcab62dd106a46fbc80876c1030db9 Mon Sep 17 00:00:00 2001
From: Sebastian Falbesoner 
Date: Sat, 29 Jun 2024 16:08:49 +0200
Subject: [PATCH 138/288] BIP-352: use own ripemd160 for reference
 implementation (#1616)

On some operating systems, Python doesn't provide the expected ripemd160
implementation anymore, so the reference implementation fails to start.
E.g. in Ubuntu 22.04:

----------------------------------------------------------------------------------------------
$ ./reference.py send_and_receive_test_vectors.json
Simple send: two inputs
Traceback (most recent call last):
  File "/usr/lib/python3.10/hashlib.py", line 160, in __hash_new
    return _hashlib.new(name, data, **kwargs)
ValueError: [digital envelope routines] unsupported

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/thestack/bips/bip-0352/./reference.py", line 228, in 
    pubkey = get_pubkey_from_input(vin)
  File "/home/thestack/bips/bip-0352/./reference.py", line 46, in get_pubkey_from_input
    pubkey_hash = hash160(pubkey_bytes)
  File "/home/thestack/bips/bip-0352/bitcoin_utils.py", line 130, in hash160
    return hashlib.new("ripemd160", hashlib.sha256(s).digest()).digest()
  File "/usr/lib/python3.10/hashlib.py", line 166, in __hash_new
    return __get_builtin_constructor(name)(data)
  File "/usr/lib/python3.10/hashlib.py", line 123, in __get_builtin_constructor
    raise ValueError('unsupported hash type ' + name)
ValueError: unsupported hash type ripemd160
----------------------------------------------------------------------------------------------

Fix this by providing a manual implementation, taken from the functional test framework
of Bitcoin Core. See corresponding issue https://github.com/bitcoin/bitcoin/issues/23710 and
PR https://github.com/bitcoin/bitcoin/pull/23716
---
 bip-0352/bitcoin_utils.py |   3 +-
 bip-0352/ripemd160.py     | 130 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 132 insertions(+), 1 deletion(-)
 create mode 100644 bip-0352/ripemd160.py

diff --git a/bip-0352/bitcoin_utils.py b/bip-0352/bitcoin_utils.py
index 443c096d..ee55f2d3 100644
--- a/bip-0352/bitcoin_utils.py
+++ b/bip-0352/bitcoin_utils.py
@@ -1,6 +1,7 @@
 import hashlib
 import struct
 from io import BytesIO
+from ripemd160 import ripemd160
 from secp256k1 import ECKey
 from typing import Union
 
@@ -127,7 +128,7 @@ class CTxInWitness:
 
 
 def hash160(s: Union[bytes, bytearray]) -> bytes:
-    return hashlib.new("ripemd160", hashlib.sha256(s).digest()).digest()
+    return ripemd160(hashlib.sha256(s).digest())
 
 
 def is_p2tr(spk: bytes) -> bool:
diff --git a/bip-0352/ripemd160.py b/bip-0352/ripemd160.py
new file mode 100644
index 00000000..12801364
--- /dev/null
+++ b/bip-0352/ripemd160.py
@@ -0,0 +1,130 @@
+# Copyright (c) 2021 Pieter Wuille
+# Distributed under the MIT software license, see the accompanying
+# file COPYING or http://www.opensource.org/licenses/mit-license.php.
+"""Test-only pure Python RIPEMD160 implementation."""
+
+import unittest
+
+# Message schedule indexes for the left path.
+ML = [
+    0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
+    7, 4, 13, 1, 10, 6, 15, 3, 12, 0, 9, 5, 2, 14, 11, 8,
+    3, 10, 14, 4, 9, 15, 8, 1, 2, 7, 0, 6, 13, 11, 5, 12,
+    1, 9, 11, 10, 0, 8, 12, 4, 13, 3, 7, 15, 14, 5, 6, 2,
+    4, 0, 5, 9, 7, 12, 2, 10, 14, 1, 3, 8, 11, 6, 15, 13
+]
+
+# Message schedule indexes for the right path.
+MR = [
+    5, 14, 7, 0, 9, 2, 11, 4, 13, 6, 15, 8, 1, 10, 3, 12,
+    6, 11, 3, 7, 0, 13, 5, 10, 14, 15, 8, 12, 4, 9, 1, 2,
+    15, 5, 1, 3, 7, 14, 6, 9, 11, 8, 12, 2, 10, 0, 4, 13,
+    8, 6, 4, 1, 3, 11, 15, 0, 5, 12, 2, 13, 9, 7, 10, 14,
+    12, 15, 10, 4, 1, 5, 8, 7, 6, 2, 13, 14, 0, 3, 9, 11
+]
+
+# Rotation counts for the left path.
+RL = [
+    11, 14, 15, 12, 5, 8, 7, 9, 11, 13, 14, 15, 6, 7, 9, 8,
+    7, 6, 8, 13, 11, 9, 7, 15, 7, 12, 15, 9, 11, 7, 13, 12,
+    11, 13, 6, 7, 14, 9, 13, 15, 14, 8, 13, 6, 5, 12, 7, 5,
+    11, 12, 14, 15, 14, 15, 9, 8, 9, 14, 5, 6, 8, 6, 5, 12,
+    9, 15, 5, 11, 6, 8, 13, 12, 5, 12, 13, 14, 11, 8, 5, 6
+]
+
+# Rotation counts for the right path.
+RR = [
+    8, 9, 9, 11, 13, 15, 15, 5, 7, 7, 8, 11, 14, 14, 12, 6,
+    9, 13, 15, 7, 12, 8, 9, 11, 7, 7, 12, 7, 6, 15, 13, 11,
+    9, 7, 15, 11, 8, 6, 6, 14, 12, 13, 5, 14, 13, 13, 7, 5,
+    15, 5, 8, 11, 14, 14, 6, 14, 6, 9, 12, 9, 12, 5, 15, 8,
+    8, 5, 12, 9, 12, 5, 14, 6, 8, 13, 6, 5, 15, 13, 11, 11
+]
+
+# K constants for the left path.
+KL = [0, 0x5a827999, 0x6ed9eba1, 0x8f1bbcdc, 0xa953fd4e]
+
+# K constants for the right path.
+KR = [0x50a28be6, 0x5c4dd124, 0x6d703ef3, 0x7a6d76e9, 0]
+
+
+def fi(x, y, z, i):
+    """The f1, f2, f3, f4, and f5 functions from the specification."""
+    if i == 0:
+        return x ^ y ^ z
+    elif i == 1:
+        return (x & y) | (~x & z)
+    elif i == 2:
+        return (x | ~y) ^ z
+    elif i == 3:
+        return (x & z) | (y & ~z)
+    elif i == 4:
+        return x ^ (y | ~z)
+    else:
+        assert False
+
+
+def rol(x, i):
+    """Rotate the bottom 32 bits of x left by i bits."""
+    return ((x << i) | ((x & 0xffffffff) >> (32 - i))) & 0xffffffff
+
+
+def compress(h0, h1, h2, h3, h4, block):
+    """Compress state (h0, h1, h2, h3, h4) with block."""
+    # Left path variables.
+    al, bl, cl, dl, el = h0, h1, h2, h3, h4
+    # Right path variables.
+    ar, br, cr, dr, er = h0, h1, h2, h3, h4
+    # Message variables.
+    x = [int.from_bytes(block[4*i:4*(i+1)], 'little') for i in range(16)]
+
+    # Iterate over the 80 rounds of the compression.
+    for j in range(80):
+        rnd = j >> 4
+        # Perform left side of the transformation.
+        al = rol(al + fi(bl, cl, dl, rnd) + x[ML[j]] + KL[rnd], RL[j]) + el
+        al, bl, cl, dl, el = el, al, bl, rol(cl, 10), dl
+        # Perform right side of the transformation.
+        ar = rol(ar + fi(br, cr, dr, 4 - rnd) + x[MR[j]] + KR[rnd], RR[j]) + er
+        ar, br, cr, dr, er = er, ar, br, rol(cr, 10), dr
+
+    # Compose old state, left transform, and right transform into new state.
+    return h1 + cl + dr, h2 + dl + er, h3 + el + ar, h4 + al + br, h0 + bl + cr
+
+
+def ripemd160(data):
+    """Compute the RIPEMD-160 hash of data."""
+    # Initialize state.
+    state = (0x67452301, 0xefcdab89, 0x98badcfe, 0x10325476, 0xc3d2e1f0)
+    # Process full 64-byte blocks in the input.
+    for b in range(len(data) >> 6):
+        state = compress(*state, data[64*b:64*(b+1)])
+    # Construct final blocks (with padding and size).
+    pad = b"\x80" + b"\x00" * ((119 - len(data)) & 63)
+    fin = data[len(data) & ~63:] + pad + (8 * len(data)).to_bytes(8, 'little')
+    # Process final blocks.
+    for b in range(len(fin) >> 6):
+        state = compress(*state, fin[64*b:64*(b+1)])
+    # Produce output.
+    return b"".join((h & 0xffffffff).to_bytes(4, 'little') for h in state)
+
+
+class TestFrameworkKey(unittest.TestCase):
+    def test_ripemd160(self):
+        """RIPEMD-160 test vectors."""
+        # See https://homes.esat.kuleuven.be/~bosselae/ripemd160.html
+        for msg, hexout in [
+            (b"", "9c1185a5c5e9fc54612808977ee8f548b2258d31"),
+            (b"a", "0bdc9d2d256b3ee9daae347be6f4dc835a467ffe"),
+            (b"abc", "8eb208f7e05d987a9b044a8e98c6b087f15a0bfc"),
+            (b"message digest", "5d0689ef49d2fae572b881b123a85ffa21595f36"),
+            (b"abcdefghijklmnopqrstuvwxyz",
+                "f71c27109c692c1b56bbdceb5b9d2865b3708dbc"),
+            (b"abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
+                "12a053384a9c0c88e405a06c27dcf49ada62eb2b"),
+            (b"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
+                "b0e20b6e3116640286ed3a87a5713079b21f5189"),
+            (b"1234567890" * 8, "9b752e45573d4b39f4dbd3323cab82bf63326bfb"),
+            (b"a" * 1000000, "52783243c1697bdbe16d37f97f68f08325dc1528")
+        ]:
+            self.assertEqual(ripemd160(msg).hex(), hexout)

From 5700a230dc9c1fc31748a3155f4984cc7e5b95ef Mon Sep 17 00:00:00 2001
From: Stacie 
Date: Wed, 19 Jun 2024 22:13:28 -0400
Subject: [PATCH 139/288] BIP78: spelling and grammar updates

Co-authored-by: Dan Gould 
Co-authored-by: Jon Atack 
---
 bip-0078.mediawiki | 48 +++++++++++++++++++++++-----------------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/bip-0078.mediawiki b/bip-0078.mediawiki
index 35287256..cc3ef5c3 100644
--- a/bip-0078.mediawiki
+++ b/bip-0078.mediawiki
@@ -95,7 +95,7 @@ The payjoin proposal PSBT is sent in the HTTP response body, base64 serialized w
 
 To ensure compatibility with web-wallets and browser-based-tools, all responses (including errors) must contain the HTTP header Access-Control-Allow-Origin: *.
 
-The sender must ensure that the url refers to a scheme or protocol using authenticated encryption, for example TLS with certificate validation, or a .onion link to a hidden service whose public key identifier has already been communicated via a TLS connection. Senders SHOULD NOT accept a url representing an unencrypted or unauthenticated connection.
+The sender must ensure that the URL refers to a scheme or protocol using authenticated encryption, for example TLS with certificate validation, or a .onion link to a hidden service whose public key identifier has already been communicated via a TLS connection. Senders SHOULD NOT accept a URL representing an unencrypted or unauthenticated connection.
 
 The original PSBT MUST:
 * Have all the witnessUTXO or nonWitnessUTXO information filled in.
@@ -108,7 +108,7 @@ The original PSBT MAY:
 
 The payjoin proposal MUST:
 * Use all the inputs from the original PSBT.
-* Use all the outputs which do not belongs to the receiver from the original PSBT.
+* Use all the outputs which do not belong to the receiver from the original PSBT.
 * Only finalize the inputs added by the receiver. (Referred later as additional inputs)
 * Only fill the witnessUTXO or nonWitnessUTXO for the additional inputs.
 
@@ -187,10 +187,10 @@ The well-known error codes are:
 |The receiver rejected the original PSBT.
 |}
 
-The receiver is allowed to return implementation specific errors which may assist the sender to diagnose any issue.
+The receiver is allowed to return implementation-specific errors which may assist the sender to diagnose any issue.
 
 However, it is important that error codes that are not well-known and that the message do not appear on the sender's software user interface.
-Such error codes or messages could be used maliciously to phish a non technical user.
+Such error codes or messages could be used maliciously to phish a non-technical user.
 Instead those errors or messages can only appear in debug logs.
 
 It is advised to hard code the description of the well known error codes into the sender's software.
@@ -213,7 +213,7 @@ To prevent this, the sender can agree to pay more fee so the receiver make sure
 
 * The sender's transaction is time sensitive.
 
-When a sender pick a specific fee rate, the sender expects the transaction to be confirmed after a specific amount of time. But if the receiver adds an input without bumping the fee of the transaction, the payjoin transaction fee rate will be lower, and thus, longer to confirm.
+When a sender picks a specific fee rate, the sender expects the transaction to be confirmed after a specific amount of time. But if the receiver adds an input without bumping the fee of the transaction, the payjoin transaction fee rate will be lower, and thus, longer to confirm.
 
 Our recommendation for maxadditionalfeecontribution= is originalPSBTFeeRate * vsize(sender_input_type).
 
@@ -244,8 +244,8 @@ The receiver needs to do some check on the original PSBT before proceeding:
 * If the sender included inputs in the original PSBT owned by the receiver, the receiver must either return error original-psbt-rejected or make sure they do not sign those inputs in the payjoin proposal.
 * If the sender's inputs are all from the same scriptPubKey type, the receiver must match the same type. If the receiver can't match the type, they must return error unavailable.
 * Make sure that the inputs included in the original transaction have never been seen before.
-** This prevent [[#probing-attack|probing attacks]].
-** This prevent reentrant payjoin, where a sender attempts to use payjoin transaction as a new original transaction for a new payjoin.
+** This prevents [[#probing-attack|probing attacks]].
+** This prevents reentrant payjoin, where a sender attempts to use payjoin transaction as a new original transaction for a new payjoin.
 
 *: Interactive receivers are not required to validate the original PSBT because they are not exposed to [[#probing-attack|probing attacks]].
 
@@ -257,26 +257,26 @@ The sender should check the payjoin proposal before signing it to prevent a mali
 * If the receiver's BIP21 signalled pjos=0, disable payment output substitution.
 * Verify that the transaction version, and the nLockTime are unchanged.
 * Check that the sender's inputs' sequence numbers are unchanged.
-* For each inputs in the proposal:
-** Verify that no keypaths is in the PSBT input
+* For each input in the proposal:
+** Verify that no keypaths are in the PSBT input
 ** Verify that no partial signature has been filled
-** If it is one of the sender's input
+** If it is one of the sender's inputs:
 *** Verify that input's sequence is unchanged.
 *** Verify the PSBT input is not finalized
 *** Verify that non_witness_utxo and witness_utxo are not specified.
-** If it is one of the receiver's input
+** If it is one of the receiver's inputs:
 *** Verify the PSBT input is finalized
 *** Verify that non_witness_utxo or witness_utxo are filled in.
-** Verify that the payjoin proposal did not introduced mixed input's sequence.
-** Verify that the payjoin proposal did not introduced mixed input's type.
+** Verify that the payjoin proposal inputs all specify the same sequence value.
+** Verify that the payjoin proposal did not introduce mixed input's type.
 ** Verify that all of sender's inputs from the original PSBT are in the proposal.
-* For each outputs in the proposal:
-** Verify that no keypaths is in the PSBT output
+* For each output in the proposal:
+** Verify that no keypaths are in the PSBT output
 ** If the output is the [[#fee-output|fee output]]:
 *** The amount that was subtracted from the output's value is less than or equal to maxadditionalfeecontribution. Let's call this amount actual contribution.
-*** Make sure the actual contribution is only paying fee: The actual contribution is less than or equals to the difference of absolute fee between the payjoin proposal and the original PSBT.
-*** Make sure the actual contribution is only paying for fee incurred by additional inputs: actual contribution is less than or equals to originalPSBTFeeRate * vsize(sender_input_type) * (count(payjoin_proposal_inputs) - count(original_psbt_inputs)). (see [[#fee-output|Fee output]] section)
-** If the output is the payment output and payment output substitution is allowed.
+*** Make sure the actual contribution is only going towards fees: The actual contribution is less than or equals to the difference of absolute fee between the payjoin proposal and the original PSBT.
+*** Make sure the actual contribution is only paying for fees incurred by additional inputs: actual contribution is less than or equal to originalPSBTFeeRate * vsize(sender_input_type) * (count(payjoin_proposal_inputs) - count(original_psbt_inputs)). (see [[#fee-output|Fee output]] section)
+** If the output is the payment output and payment output substitution is allowed,
 *** Do not make any check
 ** Else
 *** Make sure the output's value did not decrease.
@@ -287,8 +287,8 @@ The sender must be careful to only sign the inputs that were present in the orig
 
 Note:
 * The sender must allow the receiver to add/remove or modify the receiver's own outputs. (if payment output substitution is disabled, the receiver's outputs must not be removed or decreased in value)
-* The sender should allow the receiver to not add any inputs. This is useful for the receiver to change the paymout output scriptPubKey type.
-* If no input have been added, the sender's wallet implementation should accept the payjoin proposal, but not mark the transaction as an actual payjoin in the user interface.
+* The sender should allow the receiver to not add any inputs. This is useful for the receiver to change the payment output scriptPubKey type.
+* If the receiver added no inputs, the sender's wallet implementation should accept the payjoin proposal, but not mark the transaction as an actual payjoin in the user interface.
 
 Our method of checking the fee allows the receiver and the sender to batch payments in the payjoin transaction.
 It also allows the receiver to pay the fee for batching adding his own outputs.
@@ -344,7 +344,7 @@ On top of this the receiver can poison analysis by randomly faking a round amoun
 
 ===Payment output substitution===
 
-Unless disallowed by sender explicitly via `disableoutputsubstitution=true` or by the BIP21 url via query parameter the `pjos=0`, the receiver is free to decrease the amount, remove, or change the scriptPubKey output paying to himself.
+Unless disallowed by the sender explicitly via disableoutputsubstitution=true or by the BIP21 URL via the query parameter pjos=0, the receiver is free to decrease the amount, remove, or change the scriptPubKey output paying to himself.
 Note that if payment output substitution is disallowed, the reveiver can still increase the amount of the output. (See [[#reference-impl|the reference implementation]])
 
 For example, if the sender's scriptPubKey type is P2WPKH while the receiver's payment output in the original PSBT is P2SH, then the receiver can substitute the payment output to be P2WPKH to match the sender's scriptPubKey type.
@@ -358,7 +358,7 @@ A compromised payjoin server could steal the hot wallet outputs of the receiver,
 
 ===Impacted heuristics===
 
-Our proposal of payjoin is breaking the following blockchain heuristics:
+Our proposal of payjoin breaks the following blockchain heuristics:
 
 * Common inputs heuristics.
 
@@ -408,7 +408,7 @@ With payjoin, the maximum amount of money that can be lost is equal to two payme
 ==Reference sender's implementation==
 
 Here is pseudo code of a sender implementation.
-RequestPayjoin takes the bip21 URI of the payment, the wallet and the signedPSBT.
+RequestPayjoin takes the BIP21 URI of the payment, the wallet and the signedPSBT.
 
 The signedPSBT represents a PSBT which has been fully signed, but not yet finalized.
 We then prepare originalPSBT from the signedPSBT via the CreateOriginalPSBT function and get back the proposal.
@@ -674,7 +674,7 @@ A successful exchange with:
 
 ==Backward compatibility==
 
-The receivers are advertising payjoin capabilities through [[bip-0021.mediawiki|BIP21's URI Scheme]].
+The receivers advertise payjoin capabilities through [[bip-0021.mediawiki|BIP21's URI Scheme]].
 
 Senders not supporting payjoin will just ignore the pj variable and thus, will proceed to normal payment.
 

From 7acfe207e0e78ee6fc6053789cc90ac848dcfeb2 Mon Sep 17 00:00:00 2001
From: azuchi 
Date: Sat, 6 Jul 2024 21:49:37 +0900
Subject: [PATCH 140/288] BIP-0386: Fix uncompressed private key test vector

---
 bip-0386.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0386.mediawiki b/bip-0386.mediawiki
index 759887d4..2c2ab808 100644
--- a/bip-0386.mediawiki
+++ b/bip-0386.mediawiki
@@ -101,7 +101,7 @@ Valid descriptors followed by the scripts they produce. Descriptors involving de
 
 Invalid Descriptors
 
-* Uncompressed private key: tr(5kyzdueo39z3fprtux2qbbwgnnp5ztd7yyr2sc1j299sbcnwjss)
+* Uncompressed private key: tr(5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss)
 * Uncompressed public key: tr(04a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd5b8dec5235a0fa8722476c7709c02559e3aa73aa03918ba2d492eea75abea235)
 * tr() nested in wsh: wsh(tr(a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd))
 * tr() nested in sh: sh(tr(a34b99f22c790c4e36b2b3c2c35a36db06226e41c692fc82b8b56ac1c540c5bd))

From d3ff66e984a951b9497a84f90368e707b4c9bf4b Mon Sep 17 00:00:00 2001
From: douglaz 
Date: Sun, 7 Jul 2024 01:01:03 +0000
Subject: [PATCH 141/288] Fix typo in bip-0065

---
 bip-0065.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0065.mediawiki b/bip-0065.mediawiki
index 1365884c..15dca784 100644
--- a/bip-0065.mediawiki
+++ b/bip-0065.mediawiki
@@ -170,7 +170,7 @@ Proving the sacrifice of some limited resource is a common technique in a
 variety of cryptographic protocols. Proving sacrifices of coins to mining fees
 has been proposed as a ''universal public good'' to which the sacrifice could
 be directed, rather than simply destroying the coins. However doing so is
-non-trivial, and even the best existing technqiue - announce-commit sacrifices
+non-trivial, and even the best existing technique - announce-commit sacrifices
 - could encourage mining centralization. CHECKLOCKTIMEVERIFY can be used to
 create outputs that are provably spendable by anyone (thus to mining fees
 assuming miners behave optimally and rationally) but only at a time

From 0cdb745ee001b11fe4b1da55ec1fb4f2351b6451 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 8 Jul 2024 10:48:53 +0200
Subject: [PATCH 142/288] docs(bip-0046): apply minor wording improvement
 suggestions

by @AdamISZ
---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 1dc124ef..83ddd5eb 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -73,7 +73,7 @@ m / 84' / 0' / 0' / 2 / index
 A key derived with this derivation path pattern will be referred to as derived_key further
 in this document.
 
-For index, addresses are numbered from 0 in a sequentially increasing manner, but index does not increase forever like in other similar standards. The index only goes up to 959 inclusive. Only 960 addresses can be derived for a given BIP32 master key. Furthermore there is no concept of a gap limit, instead wallets must always generate all 960 addresses and check for all of them if they have a balance and history.
+For index, addresses are numbered from 0 in a sequentially increasing manner with a fixed upper bound: The index only goes up to 959 inclusive. Only 960 addresses can be derived for a given BIP32 master key. Furthermore there is no concept of a gap limit, instead wallets must always generate all 960 addresses and check for all of them if they have a balance and history.
 
 === Timelock derivation ===
 

From b916adebae2606edf4934eb6f4a1d056425abf05 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 8 Jul 2024 11:01:26 +0200
Subject: [PATCH 143/288] docs(bip-0046): add cert format and clarify expiry
 param

---
 bip-0046.mediawiki | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 83ddd5eb..7eb5d990 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -99,6 +99,10 @@ To derive the address from the above calculated public key and timelock, we crea
 
 In order to support signing of certificates, implementors should support signing ASCII messages.
 
+The certificate message is defined as `"fidelity-bond-cert" || "|" || cert_pubkey || "|" || cert_expiry`.
+
+The certificate expiry `cert_expiry` is the number of the 2016-block period after which the certificate is no longer valid. For example, if `cert_expiry` is 330 then the certificate will become invalid after block height 665280 (:=330x2016). The purpose of the expiry parameter is so that in case the certificate keypair is compromised, the attacker can only impersonate the fidelity bond for a limited amount of time.
+
 A certificate message can be created by another application external to this standard. It is then prepended with the string `0x18 || "Bitcoin Signed Message:\n"` and a byte denoting the length of the certificate message. The whole thing is then signed with the private key of the derived_key. This part is identical to the "Sign Message" function which many wallets already implement.
 
 Almost all wallets implementing this standard can use their already-existing "Sign Message" function to sign the certificate message. As the certificate message itself is always an ASCII string, the wallet may not need to specially implement this section at all but just rely on users copypasting their certificate message into the already-existing "Sign Message" user interface. This works as long as the wallet knows how to use the private key of the timelocked address for signing messages.

From 4f788d69f501d26f6c88db7fe0cf19696b608059 Mon Sep 17 00:00:00 2001
From: theborakompanioni 
Date: Mon, 8 Jul 2024 12:25:37 +0200
Subject: [PATCH 144/288] docs(bip-0046): add endpoint signing example

---
 bip-0046.mediawiki | 25 +++++++++++++++++--------
 1 file changed, 17 insertions(+), 8 deletions(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 7eb5d990..e3ad5750 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -131,10 +131,10 @@ address             = bc1qhhhf29f4nlyalyfrrpfrknxj9uwqk4qsyvkujsa7w0ulfur78xksps
 // p2pkh address is the p2pkh address corresponding to the derived public key, it can be used to verify the message
 //  signature in any wallet that supports Verify Message.
 // As mentioned before, it is more important for implementors of this standard to support signing such messages, not verifying them
-Message       = fidelity-bond-cert|020000000000000000000000000000000000000000000000000000000000000001|375
-Address       = bc1qhhhf29f4nlyalyfrrpfrknxj9uwqk4qsyvkujsa7w0ulfur78xkspsqn84
+message       = fidelity-bond-cert|020000000000000000000000000000000000000000000000000000000000000001|375
+address       = bc1qhhhf29f4nlyalyfrrpfrknxj9uwqk4qsyvkujsa7w0ulfur78xkspsqn84
 p2pkh address = 16vmiGpY1rEaYnpGgtG7FZgr2uFCpeDgV6
-Signature     = H2b/90XcKnIU/D1nSCPhk8OcxrHebMCr4Ok2d2yDnbKDTSThNsNKA64CT4v2kt+xA1JmGRG/dMnUUH1kKqCVSHo=
+signature     = H2b/90XcKnIU/D1nSCPhk8OcxrHebMCr4Ok2d2yDnbKDTSThNsNKA64CT4v2kt+xA1JmGRG/dMnUUH1kKqCVSHo=
 
 // 2nd timelocked address = m/84'/0'/0'/2/1
 derived private_key = KxctaFBzetyc9KXeUr6jxESCZiCEXRuwnQMw7h7hroP6MqnWN6Pf
@@ -163,11 +163,20 @@ redeemscript        = 0580785df400b175210308c5751121b1ae5c973cdc7071312f6fc10ab8
 scriptPubKey        = 0020803268e042008737cf439748cbb5a4449e311da9aa64ae3ac56d84d059654f85
 address             = bc1qsqex3czzqzrn0n6rjayvhddygj0rz8df4fj2uwk9dkzdqkt9f7zs5c493u
 
-// Test certificate using the 960th timelocked address
-Message       = fidelity-bond-cert|020000000000000000000000000000000000000000000000000000000000000001|750
-Address       = bc1qsqex3czzqzrn0n6rjayvhddygj0rz8df4fj2uwk9dkzdqkt9f7zs5c493u
-p2pkh address = 1JmTqEXY9pHwrao9XXPo1MeiQerMETmwP3
-Signature     = H9LWcv9PXjOLdGmA6s6jRKnPP9bKeOSUGN7ZF80dphKOUrLQnoIJx8NtHraTq5o6BbRBoNjKHuo4Mnok3/JXGBY=
+// Test certificate and endpoint signing using the first timelocked address = m/84'/0'/0'/2/0 (see above)
+bond private_key          = L2tQBEdhC48YLeEWNg3e4msk94iKfyVa9hdfzRwUERabZ53TfH3d
+bond p2pkh address        = 16vmiGpY1rEaYnpGgtG7FZgr2uFCpeDgV6
+
+certificate private_key   = KyZpNDKnfs94vbrwhJneDi77V6jF64PWPF8x5cdJb8ifgg2DUc9d
+certificate public_key    = 0330d54fd0dd420a6e5f8d3624f5f3482cae350f79d5f0753bf5beef9c2d91af3c
+certificate p2pkh address = 1JaUQDVNRdhfNsVncGkXedaPSM5Gc54Hso
+
+certificate message       = fidelity-bond-cert|0330d54fd0dd420a6e5f8d3624f5f3482cae350f79d5f0753bf5beef9c2d91af3c|375
+certificate signature     = INOP3cB9UW7F1e1Aglj8rI9QhnyxmgWDEPt+nOMvl7hJJne7rH/KCNDYvLiqNuB9qWaWUojutjRsgPJrvyDQ+0Y=
+
+// example endpoint signing two IRC nicknames (used in JoinMarket)
+endpoint message          = J54LS6YyJPoseqFS|J55VZ6U6ZyFDNeuv
+endpoint signature        = H18WE4MugDNoWZIf9jU0njhQptdUyBDUf7lToG9bpMKmeJK0lOoABaDs5bKnohSuZ0e9gnSco5OL9lXdKU7gP5E=
 

 
 Code generating these test vectors can be found here: https://github.com/chris-belcher/timelocked-addresses-fidelity-bond-bip-testvectors

From c88c3970ed8194a166f783aa748adeb581f79321 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Tue, 9 Jul 2024 15:15:13 -0400
Subject: [PATCH 145/288] 389: Explicitly disallow duplicate multipath

---
 bip-0389.mediawiki | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bip-0389.mediawiki b/bip-0389.mediawiki
index 72121b74..6c88a89a 100644
--- a/bip-0389.mediawiki
+++ b/bip-0389.mediawiki
@@ -48,6 +48,7 @@ This is modified to state:
 
 When a / is encountered, parsers should account for a presence of multiple descriptors where the first descriptor uses the first NUM, and a second descriptor uses the second NUM, and so on, until each NUM is accounted for in the production of public keys, scripts, and addresses, as well as descriptor import and export operations.
 Descriptors that contain multiple Key Expressions that each have a / must have tuples of exactly the same length so that they are derived in lockstep in the same way that /* paths in multiple Key expressions are handled.
+Duplicate NUMs within a tuple are not allowed.
 
 The common use case for this is to represent descriptors for producing receiving and change addresses.
 When interpreting for this use case, wallets should use the first descriptor for producing receiving addresses, and the second descriptor for producing change addresses.

From 3fd971455a3fc3a49ca47ec7fdec58c358da33dd Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Wed, 10 Jul 2024 17:58:48 +0200
Subject: [PATCH 146/288] Add paragraph on key reuse

---
 bip-0388.mediawiki | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index dc1b5080..1fd69948 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -42,7 +42,7 @@ A more native, compact representation of the wallet receive and change addresses
 
 We remark that wallet policies are not related to the ''policy'' language, a higher level language that can be compiled to miniscript.
 
-=== Security and UX concerns for hardware signing devices ===
+=== Security, privacy and UX concerns for hardware signing devices ===
 
 The usage of complex scripts presents challenges in terms of both security and user experience for a hardware signing device.
 
@@ -57,6 +57,18 @@ The hardware signing device must guarantee that the user knows precisely what "p
 
 This makes it impossible for an attacker to surreptitiously modify the policy, therefore stealing or burning the user's funds.
 
+==== Avoiding key reuse ====
+
+Reusing public keys within a Script is a source of malleability when using miniscript policies, which has potential security implications.
+
+Reusing keys across different UTXOs harms user privacy by allowing external parties to link these UTXOs to the same entity once they are spent.
+
+By constraining the derivation path patterns to have a uniform structure, wallet policies prevent key reuse among the same or different UTXOs of the same account.
+
+Using distinct public keys obtained from hardened derivation paths guarantees that no key reuse can happen also across accounts, and is strongly recommended. However, wallet policies do not mandate hardened derivation paths for the public keys, in order to maintain compatibility with existing deployments that do not adhere to this recommendation.
+
+It is out of scope for this document to guarantee that users do not reuse extended public keys among different wallet accounts. This responsibility is left to the users and their software wallet.
+
 ==== UX issues ====
 
 Miniscript (and taproot trees) allow substantially more complex spending policies. It is a challenge to ensure that the user can practically verify such spending policies per the screen.
@@ -189,8 +201,6 @@ Implementations can add additional metadata that is stored together with the wal
 
 Any implementation in a software wallet that allows wallet policies not matching any of the specifications in [[bip-0044.mediawiki|BIP-44]], [[bip-0049.mediawiki|BIP-49]], [[bip-0084.mediawiki|BIP-84]], [[bip-0086.mediawiki|BIP-86]] (especially if involving external cosigners) should put great care into a process for backing up the wallet policy that represents the account. In fact, unlike standard single-signature scenarios, the seed alone is no longer enough to discover wallet policies with existing funds, and the loss of the backup is likely to lead to permanent loss of funds. Unlike the seed, leaking such backups only affects the privacy of the user, but it does not allow the attacker to steal funds.
 
-Avoiding key reuse among different wallet accounts is also extremely important, but out of scope for this document.
-
 === Optional derivation paths ===
 
 In order to allow supporting legacy derivation schemes (for example, using simply /* instead of the more common //* scheme most software wallets use today), or other schemes that are not covered in this document, implementations might choose to permit additional derivation patterns for the key placeholder (KP) expressions.

From f3bd1eba67e5e60d40b54c2d949ff1984da56363 Mon Sep 17 00:00:00 2001
From: Pieter Wuille 
Date: Wed, 10 Jul 2024 14:55:20 -0400
Subject: [PATCH 147/288] Mark BIP324 as final

---
 README.mediawiki   | 4 ++--
 bip-0324.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index fbddd61b..194f0bc9 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -987,13 +987,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Karl-Johan Alm
 | Standard
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0324.mediawiki|324]]
 | Peer Services
 | Version 2 P2P Encrypted Transport Protocol
 | Dhruv Mehta, Tim Ruffing, Jonas Schnelli, Pieter Wuille
 | Standard
-| Draft
+| Final
 |- style="background-color: #ffffcf"
 | [[bip-0325.mediawiki|325]]
 | Applications
diff --git a/bip-0324.mediawiki b/bip-0324.mediawiki
index 8050b15d..2119a851 100644
--- a/bip-0324.mediawiki
+++ b/bip-0324.mediawiki
@@ -7,7 +7,7 @@
           Jonas Schnelli 
           Pieter Wuille 
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0324
-  Status: Draft
+  Status: Final
   Type: Standards Track
   Created: 2019-03-08
   License: BSD-3-Clause

From 729c44c4eaca2de76e83430609d1f271add0533a Mon Sep 17 00:00:00 2001
From: Suhas Daftuar 
Date: Wed, 10 Jul 2024 15:05:06 -0400
Subject: [PATCH 148/288] Move BIP 130 to Final

---
 README.mediawiki   | 4 ++--
 bip-0130.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index fbddd61b..7650a2fd 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -693,13 +693,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Hugo Nguyen, Peter Gray, Marko Bencun, Aaron Chen, Rodolfo Novak
 | Standard
 | Proposed
-|- style="background-color: #ffffcf"
+|- style="background-color: #cfffcf"
 | [[bip-0130.mediawiki|130]]
 | Peer Services
 | sendheaders message
 | Suhas Daftuar
 | Standard
-| Proposed
+| Final
 |- style="background-color: #ffcfcf"
 | [[bip-0131.mediawiki|131]]
 | Consensus (hard fork)
diff --git a/bip-0130.mediawiki b/bip-0130.mediawiki
index 8d96c0c8..d88329fd 100644
--- a/bip-0130.mediawiki
+++ b/bip-0130.mediawiki
@@ -5,7 +5,7 @@
   Author: Suhas Daftuar 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0130
-  Status: Proposed
+  Status: Final
   Type: Standards Track
   Created: 2015-05-08
   License: PD

From 56f7e7099167173bf36073790b7aeeb1164f7ae5 Mon Sep 17 00:00:00 2001
From: Suhas Daftuar 
Date: Wed, 10 Jul 2024 15:36:54 -0400
Subject: [PATCH 149/288] Move BIP 338 to Withdrawn

The PR implementing this BIP was never merged into Bitcoin Core,
in favor of an alternative approach.
---
 README.mediawiki   | 4 ++--
 bip-0338.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index fbddd61b..26c01f84 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1050,13 +1050,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Tom Briar
 | Standard
 | Draft
-|-
+|- style="background-color: #ffcfcf"
 | [[bip-0338.mediawiki|338]]
 | Peer Services
 | Disable transaction relay message
 | Suhas Daftuar
 | Standard
-| Draft
+| Withdrawn
 |-
 | [[bip-0339.mediawiki|339]]
 | Peer Services
diff --git a/bip-0338.mediawiki b/bip-0338.mediawiki
index 65ab616e..908aef63 100644
--- a/bip-0338.mediawiki
+++ b/bip-0338.mediawiki
@@ -5,7 +5,7 @@
   Author: Suhas Daftuar 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0338
-  Status: Draft
+  Status: Withdrawn
   Type: Standards Track
   Created: 2020-09-03
   License: BSD-2-Clause

From 79e2d28efbc47212604cd41eb8b8466dc0e9a30e Mon Sep 17 00:00:00 2001
From: Suhas Daftuar 
Date: Wed, 10 Jul 2024 14:54:52 -0400
Subject: [PATCH 150/288] Move BIP 339 to Final

---
 README.mediawiki   | 4 ++--
 bip-0339.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 95651ed5..88458ec3 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1057,13 +1057,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Suhas Daftuar
 | Standard
 | Withdrawn
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0339.mediawiki|339]]
 | Peer Services
 | WTXID-based transaction relay
 | Suhas Daftuar
 | Standard
-| Draft
+| Final
 |- style="background-color: #cfffcf"
 | [[bip-0340.mediawiki|340]]
 |
diff --git a/bip-0339.mediawiki b/bip-0339.mediawiki
index 806ba1cf..7fb6bc4e 100644
--- a/bip-0339.mediawiki
+++ b/bip-0339.mediawiki
@@ -5,7 +5,7 @@
   Author: Suhas Daftuar 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0339
-  Status: Draft
+  Status: Final
   Type: Standards Track
   Created: 2020-02-03
   License: BSD-2-Clause

From 6b4a03bb5deb624a1bb3d0c2fa0b69434df65f34 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 10 Jul 2024 18:59:57 -0400
Subject: [PATCH 151/288] 371: Mark as final

---
 README.mediawiki   | 4 ++--
 bip-0371.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 88458ec3..cffa3691 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1141,13 +1141,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Ava Chow
 | Standard
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0371.mediawiki|371]]
 | Applications
 | Taproot Fields for PSBT
 | Ava Chow
 | Standard
-| Draft
+| Final
 |-
 | [[bip-0372.mediawiki|372]]
 | Applications
diff --git a/bip-0371.mediawiki b/bip-0371.mediawiki
index 45b69f8a..92275698 100644
--- a/bip-0371.mediawiki
+++ b/bip-0371.mediawiki
@@ -5,7 +5,7 @@
   Author: Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0371
-  Status: Draft
+  Status: Final
   Type: Standards Track
   Created: 2021-06-21
   License: BSD-2-Clause

From 516fae672639d998f00025809c57473d704a8f61 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 10 Jul 2024 18:54:37 -0400
Subject: [PATCH 152/288] 86: Mark as final

---
 README.mediawiki   | 4 ++--
 bip-0086.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 88458ec3..3eef5095 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -448,13 +448,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Ethan Kosakovsky
 | Informational
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0086.mediawiki|86]]
 | Applications
 | Key Derivation for Single Key P2TR Outputs
 | Ava Chow
 | Standard
-| Draft
+| Final
 |- style="background-color: #ffffcf"
 | [[bip-0087.mediawiki|87]]
 | Applications
diff --git a/bip-0086.mediawiki b/bip-0086.mediawiki
index 529f0946..7bcaf146 100644
--- a/bip-0086.mediawiki
+++ b/bip-0086.mediawiki
@@ -5,7 +5,7 @@
   Author: Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0086
-  Status: Draft
+  Status: Final
   Type: Standards Track
   Created: 2021-06-22
   License: BSD-2-Clause

From d71428ade56ad9a90e18d643eefefefb6088fbd7 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 10 Jul 2024 19:02:19 -0400
Subject: [PATCH 153/288] 380-387: Mark basic descriptor BIPs as final

---
 README.mediawiki   | 32 ++++++++++++++++----------------
 bip-0380.mediawiki |  2 +-
 bip-0381.mediawiki |  2 +-
 bip-0382.mediawiki |  2 +-
 bip-0383.mediawiki |  2 +-
 bip-0384.mediawiki |  2 +-
 bip-0385.mediawiki |  2 +-
 bip-0386.mediawiki |  2 +-
 bip-0387.mediawiki |  2 +-
 9 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 88458ec3..01607425 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1169,62 +1169,62 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Pieter Wuille, Andrew Poelstra, Sanket Kanjalkar, Antoine Poinsot, Ava Chow
 | Informational
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0380.mediawiki|380]]
 | Applications
 | Output Script Descriptors General Operation
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0381.mediawiki|381]]
 | Applications
 | Non-Segwit Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0382.mediawiki|382]]
 | Applications
 | Segwit Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0383.mediawiki|383]]
 | Applications
 | Multisig Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0384.mediawiki|384]]
 | Applications
 | combo() Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0385.mediawiki|385]]
 | Applications
 | raw() and addr() Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0386.mediawiki|386]]
 | Applications
 | tr() Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
-|-
+| Final
+|- style="background-color: #cfffcf"
 | [[bip-0387.mediawiki|387]]
 | Applications
 | Tapscript Multisig Output Script Descriptors
 | Pieter Wuille, Ava Chow
 | Informational
-| Draft
+| Final
 |- style="background-color: #ffffcf"
 | [[bip-0388.mediawiki|388]]
 | Applications
diff --git a/bip-0380.mediawiki b/bip-0380.mediawiki
index 823a92cf..17e48e32 100644
--- a/bip-0380.mediawiki
+++ b/bip-0380.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0380
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0381.mediawiki b/bip-0381.mediawiki
index bfda2c8e..8d12c7a4 100644
--- a/bip-0381.mediawiki
+++ b/bip-0381.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0381
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0382.mediawiki b/bip-0382.mediawiki
index bb1951d6..261b7e31 100644
--- a/bip-0382.mediawiki
+++ b/bip-0382.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0382
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0383.mediawiki b/bip-0383.mediawiki
index 66e2f160..522eb0cc 100644
--- a/bip-0383.mediawiki
+++ b/bip-0383.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0383
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0384.mediawiki b/bip-0384.mediawiki
index ba12b55d..585af5e7 100644
--- a/bip-0384.mediawiki
+++ b/bip-0384.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0384
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0385.mediawiki b/bip-0385.mediawiki
index 3e922b3b..1686ef7d 100644
--- a/bip-0385.mediawiki
+++ b/bip-0385.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0385
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0386.mediawiki b/bip-0386.mediawiki
index 759887d4..55f0d156 100644
--- a/bip-0386.mediawiki
+++ b/bip-0386.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0386
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2021-06-27
   License: BSD-2-Clause
diff --git a/bip-0387.mediawiki b/bip-0387.mediawiki
index 5c039b8f..0f8c88d3 100644
--- a/bip-0387.mediawiki
+++ b/bip-0387.mediawiki
@@ -6,7 +6,7 @@
           Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0387
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2024-04-17
   License: BSD-2-Clause

From 8c2f54d33beb3318f42032715bac5df7f0d61149 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Thu, 11 Jul 2024 10:31:01 +0200
Subject: [PATCH 154/288] Add references to the miniscript BIP-379

---
 bip-0388.mediawiki | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 1fd69948..b417ac47 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -40,7 +40,7 @@ Moreover, other limitations like the limited size of the screen might affect wha
 
 A more native, compact representation of the wallet receive and change addresses might also benefit the UX of software wallets when they use descriptors (possibly with miniscript) for representing complex locking conditions.
 
-We remark that wallet policies are not related to the ''policy'' language, a higher level language that can be compiled to miniscript.
+We remark that wallet policies are not related to the ''policy'' language, a higher level language that can be compiled to [[bip-0379.md|miniscript]].
 
 === Security, privacy and UX concerns for hardware signing devices ===
 
@@ -137,6 +137,8 @@ A ''wallet descriptor template'' is a SCRIPT expression.
 * tr(KP) or tr(KP,TREE) (top level only): P2TR output with the specified key as internal key, and optionally a tree of script paths.
 * any valid miniscript template (inside wsh or tr only).
 
+See [[bip-0379.md|BIP-379]] for a precise specification of all the valid miniscript SCRIPT expressions.
+
 TREE expressions:
 * any SCRIPT expression
 * An open brace {, a TREE expression, a comma ,, a TREE expression, and a closing brace }

From 0adf7c36e1796653d2bdf778ff6f241455fbf85d Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Thu, 11 Jul 2024 10:33:13 +0200
Subject: [PATCH 155/288] Nit: it's not 'two' descriptors if one uses the
 multipath expressions per BIP-389

---
 bip-0388.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index b417ac47..225ce7ad 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -14,7 +14,7 @@
 
 == Abstract ==
 
-Wallet policies build on top of output script descriptors to represent the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device, in a compact, reviewable way. A wallet policy always represents exactly two descriptors, which produce the receive and change addresses that are logically part of the same account.
+Wallet policies build on top of output script descriptors to represent the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device, in a compact, reviewable way. A wallet policy always represents descriptors which produce all the receive and change addresses that are logically part of the same account.
 
 We simplify the language to suit devices with limited memory, where even keeping the entire descriptor in memory could be a major hurdle, by reducing the generality of descriptors to just the essential features and by separating the extended pubkeys and other key information from the descriptor.
 

From e7286a53566c83cf5d796fbc2285732338a500d9 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 10 Jul 2024 20:37:40 -0400
Subject: [PATCH 156/288] 370: Set reference implementation to Bitcoin Core PR.

---
 bip-0370.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0370.mediawiki b/bip-0370.mediawiki
index 98f18002..9dc09158 100644
--- a/bip-0370.mediawiki
+++ b/bip-0370.mediawiki
@@ -497,4 +497,4 @@ The timelock for the following PSBTs cannot be computed:
 
 ==Reference implementation==
 
-The reference implementation of the PSBT format is available at https://github.com/achow101/bitcoin/tree/psbt2.
+The reference implementation of the PSBT format is available in [https://github.com/bitcoin/bitcoin/pull/21283 Bitcoin Core PR 21283].

From 968c4ee20064dcf4223bbe183b81f685bfd79941 Mon Sep 17 00:00:00 2001
From: Ava Chow 
Date: Wed, 10 Jul 2024 18:56:44 -0400
Subject: [PATCH 157/288] 370: Mark as final

---
 README.mediawiki   | 4 ++--
 bip-0370.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 089e4183..1c9a2348 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1134,13 +1134,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Matt Corallo, Bastien Teinturier
 | Standard
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0370.mediawiki|370]]
 | Applications
 | PSBT Version 2
 | Ava Chow
 | Standard
-| Draft
+| Final
 |- style="background-color: #cfffcf"
 | [[bip-0371.mediawiki|371]]
 | Applications
diff --git a/bip-0370.mediawiki b/bip-0370.mediawiki
index 9dc09158..885dfc8c 100644
--- a/bip-0370.mediawiki
+++ b/bip-0370.mediawiki
@@ -5,7 +5,7 @@
   Author: Ava Chow 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0370
-  Status: Draft
+  Status: Final
   Type: Standards Track
   Created: 2021-01-14
   License: BSD-2-Clause

From 7a8bc14b80de79a6287a790337c5156c0891567c Mon Sep 17 00:00:00 2001
From: josibake 
Date: Tue, 9 Jul 2024 17:06:31 +0200
Subject: [PATCH 158/288] bip352: update appendix

Numbers from the appendix were slightly innaccurate and out of date. Update to mention non-dust UTXOs
and update the numbers to reflect current usage.

Considering the appendix is purely informational and the corrections here are minor, Ive left of
adding a changelong entry.
---
 bip-0352.mediawiki                          |   4 ++--
 bip-0352/scan_data_downloader_per_month.png | Bin 54276 -> 169753 bytes
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 483bed3b..634e179a 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -445,11 +445,11 @@ This distinction makes the problem for light clients more clear: light clients n
 
 Recall that a silent payment eligible transaction follows [[#scanning-silent-payment-eligible-transactions|certain conditions]] and should have at least one unspent taproot output. Full nodes (or any index server backed by a full node, such as electrum server) can build an index which collects all of the eligible public keys for a silent payments eligible transaction, sums them up, multiplies the sum by the ''input_hash'', and serves them to clients. This would be 33 bytes per silent payment eligible transaction.
 
-For a typical bitcoin block of ~3500 txs, lets assume every transaction is a silent payments eligible transaction. This means a client would need to request ''33 bytes * 3500'' of data per block (roughly 100 kB per block). If a client were to request data for every block, this would amount to ~450 MB per month, assuming 100% taproot usage and all outputs remain unspent for > 1 month. As of today, these numbers are closer to 2–10 kB per block (10–50 MB per month)''' Data for Appendix A ''' These numbers are based on data from January 2023 until June 2023 (the last 6 months of data at the time of writing). See [https://github.com/josibake/bitcoin-data-analysis/blob/main/notebooks/silent-payments-light-client-data.ipynb Silent payments light client data] for the full analysis..
+For a typical bitcoin block of ~3500 txs, lets assume every transaction is a silent payments eligible transaction. This means a client would need to request ''33 bytes * 3500'' of data per block (roughly 100 kB per block). If a client were to request data for every block, this would amount to ~450 MB per month, assuming 100% taproot usage and all non-dust outputs remain unspent for > 1 month. As of today, these numbers are closer to 7–12 kB per block (30–50 MB per month)''' Data for Appendix A ''' These numbers are based on data from January 2023 until July 2024. See [https://github.com/josibake/bitcoin-data-analysis/blob/main/notebooks/silent-payments-light-client-data.ipynb Silent payments light client data] for the full analysis..
 
 === Transaction cut-through ===
 
-It is unlikely a light client would need to scan every block and as such can take advantage of transaction cut-through, depending on how often they choose to scan for new blocks. Empirically, ~75% of transactions with at least one unspent taproot output will have spent all taproot UTXOs in 326 blocks or less. This means a client which only scans once every 3 days could ''significantly'' cut down on the number of blocks and the number of transactions per block that they need to request by only asking for data on transactions that were created since their last scan and that still have at least one unspent taproot output as of the current block height. Assuming 100% taproot usage, a client that scans once a month would likely only need around 50 MB worth of data. Based on current taproot adoption, a light client scanning once every 3 days would use roughly 15 MB per month and a client scanning once per month would use less than 5 MB per month.
+It is unlikely a light client would need to scan every block and as such can take advantage of transaction cut-through, depending on how often they choose to scan for new blocks. Empirically, ~75% of transactions with at least one non-dust unspent taproot output will have spent all non-dust taproot UTXOs in 150 blocks or less. This means a client that only scans once per day could ''significantly'' cut down on the number of blocks and the number of transactions per block that they need to request by only asking for data on transactions that were created since their last scan and that still have at least one non-dust unspent taproot output as of the current block height. Based on taproot adoption as of July 2024, a light client scanning once every 3 days would use roughly 30 MB per month.
 
 [[File:bip-0352/scan_data_downloader_per_month.png]]
 
diff --git a/bip-0352/scan_data_downloader_per_month.png b/bip-0352/scan_data_downloader_per_month.png
index ffcd0ddddb8c685b39055fd19112c81c8186109b..a672a91add714f825d4b2fd8e0f9cbd3cfcfe824 100644
GIT binary patch
literal 169753
zcmcG$byQSu)HaL-DhQ$iBBi1z-Cc?(ARr2gASEqb(y2%)AQD5PNQg>cETvU#@bE~qk@vB0;weUW$MEoEB=0_Th*=u3
zcX+D5TerR{$52Xe`imF&1*eP)!O5pjN}hDSSM#v5H*c}%k1cNCJk_`Uifq1`P
zbL@W9YY7=?k2_8hyDd97QZB9=caERAHFKa&foh3VTH%hAoNe4I3##QHIzjsH6>QvM
zY=`&nC(>Z=z%}@41+pH*TCKBdhJxa@R=5QLw2?ua1@q+AXOh>3>|f$;9NJ
z66dt=VXrk-81?1^f#T!Gmb8j~zP>$=nDqR8eWjCz3T*=CtmP`Bs0`%ebH*VaBpt&!nlRp$G<|+iY5-lq$Yg>jvFu)z6Ey@a8rpmS_
z31QH_{{E90+mU7yeI3r;^BMB18zP`Rszi%z}+0>Ff&(y6at_z}Tzo;NmxxGG>^&-t>vs22T
zUf4oMSJ!bWfL~fpjz`!(LT_hdW@#ut=tp|d_a2+LxVWDh#o=G2g2J6v_EyX5ySp)=
zXxEL#TaN3s6pj;K6a_0qi~Xg}{K#B}@+~rY_BZm+QSq(SQCY+&UF+`d4&l_T<8c0C
zN>u%==JoaK*KK`Tm+;_k#o`j&pP}u&Jxuu_F37_J4~14#RFr#o)B3=5tM~cq)zMh*
zb5!9@>CV`d{jEMN7WIOU(dI>sg}Ake>Yr-)f$!PNB5L1Lpd3fFtG!7tT$pqbc|G@7
zM@L5`_Z8{#VBU{?s?_6xf`Z%I+YvNVB~)TA0yze)I;~N>n~QzzO9C(k-oOWcH_tyP
z=+^b?2~SBce%35?O8VuB9kKsF#UIF~QPlC{IeU8XijZ>Jiy0TU`L3j4yCE}4DXH!(
zT`6y3nx+qw+?hkmZ0N!XZz^9uziWJa;Z)`YZ{UAg!t!w0%(ht1u-(2rUWktSYB5&!
zdhvIF@JfMawGRnuke!n=_*T5jCzwEIp^YIJNOe!Dl1B1JcidK=Tr}S~4=Rh2PC+sU
zm=0M{ijr!+In8r*t5dN;wmNeiUs7Vezj*qz21amM==E(HVLQFG@ye3@jb=8JP0_=B
z%;tP|z5cuYZUu4qr%ywhPY+H{>mkR1+mIN~q%R#YYA-^Hjo)e(oG&ZzglrdTRk#8W4FqdgR$EfpasUm%E+3o_fdCB^N-K|Bb`al{=PMvq$
z)qX_P#qWZfTK=bN!==&SNjz)){rhYETnPrQ&Fv=B_zy
z&fRT~6LnmxBxr1E5}GPKHjPH-SkF9UD;R&v6_4HAoc<)srhTx#!#0F&k5{;J2M-Rw
zOcC)N-0s#fOB)-Tfde>P+}6|5XzcI)EZv=hy;TM0^o!-`?B)AhxIJtN%yHPNo`zcJ
z^|zjbXg)KY$r``SxlT`HZ(xBj=y>;{B_*z#Vz6g>E5$*u^;XMyeQ{jXV9l^(mll7g
zO+^~UeSv-3Tp9?u73c8w?c3vA+}w`iZwTgke^8VA<4tQcKc-E1HPf)2)}STg*c~v0NKt3LV*6D)x6%zL0NbW2ZmSO8=Ry{*QZj;|EE9Hl7Wnk?}qn_HAhaJ(eh^w-is_RVG
z5LQlCZv+P+t*Ce*NMys;W~|T#-IXj)g-=5Jq18YaoZSB2*kK(95puNAZW*P2u2__A
zkyB{ACPm(A`Q|g>YUW=uGdpGm3kwU?;XvNFdD99UQ}?$g^n9lM70vABEuCMbkX4MO
zTrFB;JJ`o4q?hd)!&0;ci61!BWhnTus{MMbq9VQbXIY_8K~9b+f7qIEeSQ6%kI#u(
zuNFA=+Bvbi@$;0Flx-hmWMoQqW}_XPoVZ-JEzx3HF6*b-MKDCL6;t3%Z-|S>#|qnL
z!}dQ2xMEwkkBpc6y_ZY~L-40hRX%iX4R8Wm?8jVvP$&w#AI~!kx)NnxFZBmEhTPK4
zQrX^J%qW~sjz&&DT*pojoom$nYP3WUJL+svn5-<0Y2oh4(28eNO3s9Ph#l_R?Bj3)
znc61;uJBI6;n%PACo6$3OFnqOWzcdNy{I^frKpH^KWO}PQ?}sGpvn5y*349pxB=KH
zi&k08`1ngUIP`y3$J+OIFpk?3K4*xD@hvIIoRe*0zPaxG`KeWY@BzyXepsIa0Rl{&
z-=F>X0H#j~?v6XXXn|=8&K3`BrO~BJmkO5h-4ETqnhpJ`8?hfV>tD7*p{a>|FsraV
zN$Km`Q$bW3MXxzGFqqh(^zs8IdM>W6?b&FHm?8Km-~hKrrIaiuXg0e%lus2L99$Qo
zAU2o7#M`|
zYwPN+AS1j^PcJ*t{WVBz!FnIU{YzMwE3oW*MAaM+$&f2df$QakAHib;{4yK50{DOz
z+}m-qm4Y}fx3k#Z0^Mf-cX^wyKuRZfQ|?M+?8pUeOT8k
z$f)5A&3`g$3T1o%9-Wke!hW!C0SuMXn}~AKCFav7o!4_6l?BVchSW!e!3}03*FxMu
zn;Ex33rCUNvM~hr_L&&=(#=oEIhh)-^kkznY>Sy6PWkq&0old?WZ*wC%9z3yCBX*o
zr}llR`Fz*&!;pD#>un|`u3hY^MN0%{HOGg^3|$!bI^Y5-E!V9uBS<|d5iEFufH;N^1KV-@l7fPGr=JN$cvwni
z=EvMzo~r8VGpA3#9QtLJQrb2!-0inyC;US>4T{qXP04mCH#LQaHhz>+>>aJlhHezL)U9v_UpWk3yb6ofA5O4DB$yaGvS(~yz0Cxc8
zz}Ien?Rkm=lP!{wZIbmjf@Ks>|6xV33^6#GQ8KA#on
zdmyS|kFKeal(=_KFBdNs8$iV$&a|(muRpQ6+Ft2NaO_oQf>$#J
z;&#$mKPxLMSU^l@fU=^JQY_^ao>v|j85zwOh-M-)u3@zT)t45Ye0{JEMvwz(#cX?g
zyDusI!%`oG-*602My(LCbRp7M&x9+{sE)
zY@WsG$OO@fZUdkaupGxj7F{ZcR)vMU$bPjA;-Ji{SGS3MzP1Fvy%m(q`XsJzQf_i;
zst{tjQSWy$B;|xiS~W5ftL3)iHIQQ%-)k~sDKIxyE}lQ?WD?mPuTCVYcK7bxJL^v2
z+S=MF!x^$DHh>Bk@JXLOetew1#jG&9xG0Nmi&gz)8ks}o07FoPWJmmPpPTu4x*h~#
z07*XJqoPxlQsS1)1jAfh=^V!2DA_#}FJvxENipX#=Y#UV;}%VR^R?r#3Mq1vwN2JduKh
zYHNkYU5RJFF>Y@=pq@nN%VRW493bQSFab%mwRv-UJ3H^Eji;w-Yzk98emq}NQqr_^
zwhZtz*D50$Tbq85iM2IXWMm|dQCCf2nqKHAfX^myB{QbhJ&<_Kw#CZAs)9p>xHj>D
zviU2(ou8VeQAd=0MBXZIOHteqdnhe^m5FH~cP|hSFKoqo0HE<3&J%JE
zg+@`AxV{v86ws+T{ouo8*qdVjA|{se$7cTwS%~XCS)ay6XkV_Wtrc8NnzsFe!3a;8
zIF^NBanDG@1f969UHj6~If|^O!3%nX`e5pXQ8iI}J>{}3oIbJN@#P*Q;t))~_B0fI
znv#8>8S796bD0H7B{h8hnqKGnTuGQ
zGhcOH52O`c*dIi&ES%U;_d{3k#>xxZpBQ%yZbRO6{m~ZAg%1GM>^|*9Qqo}mPTwO>
z@Dzd12zqx}ugx{?^{=Xu_?@BEP9na4Cxk)%valV?;}ZNa8vEf&fK`ooeVWZTQR;7D
z5Pr3RmbvZ~#pD~d
z$FZnndH`ZW7kLA+t%uh@Pf|7!tq5d|yK7C%86P7eq#>0pKiFl4d~+%}+T1#QaiHAY
z9X6$KDp0s!ci{)nT$jNq-P~H}oto?X+J^CZ_s+7JHGd6qG)o9|Hl6n=vdo6~lz*z+
zwY1D^&b##}rUBe!4YGDKD6L06#54`9t@?fG8c3Q6K@0epDnM`Zqou-!SocFI9i8jo
zn^{z|6NkN66ciK^zJ66Lb>i(#mKRHyY9Zw60EXY**;$8^jM|H1QgR&AB74GhWhd;p
zrgn`lDWuxmuR1;}cB9+%VBx^)aqBgFJZpF!=5fSaCVmoKt2n{(BG(u3=k4N$F<@U;
z_|01oLyEN@oj1il!C^MY6UArN1SC%tjO8sH+b2(+w6#rDR#qbP*FIYOaH99Q)=j`Z
z0JFL?w8R-6#i*nf#yhVFzV-A(I1TXil&-s*6JS!dl!d3)=Dr32j6i)-+u
zO44t2(~i%_4iB*9kOl!q0|$T_N{DI*?N
z(;a6^&Zgdg5GHV@Al4AXX!L$@*jxbw*#?fI$^8IB2m98}+oyg{TKY7SjW-Lf7NTk4
z1Z+cOQz^D%1uQ;`!;T?0wI65)iUBZPg#D(hjUQ{GhOg`QD(e-`z7#uh#ez5=wAZ!)9;2$$Q4qLgKGiCFhI~|HncD>v4<5hGP3^w
z`qFI(LA>Edk^TDhXL?}WNFZm6ZBH^UnvF8q22i-Zw#Ffh5ZM7qN5nB;0eC%i{u{So
z!0`Gm8u0gS$Q^@?6^`&0@^85RA5#N@Z|8`rD<(RKT#r5qUZ^q7o6Cvvl|J_}??t8x
zi{Y?>SIfhfSt@`yzIeLtB#1`adjuv?NJ@dc8qPdrOqH-Jrr9pO
zbJLpP<|^xy}IKJujGSYN!ryMIrLE6IC@F5!s`1S?3!FuN*TQil+}kT
zyxvY*3pUfz7u50(YEfEl%4UR-i+zWXqkNHz{T>|gZ+zBn-#!{81c^D(X=#ZYwC$gE
zcXvmjVFdCIZ4Hc!jKKZIT9pG!2zE0vf)h!+@ZYe52jxukqHc3?z6obl3uDqbev-f^
zbnutMx&(uKQSh~UyEgMlo&|d=GGND7&=}_D2QA`*mwwYS5oK3Ar>-|8kOM&Pph^DWprJ4IuIWaFZ_
z(Yiof5kJ>-r1T`vsyM(oAM<@b)UF#OTCq0aNhz{@oZ(T)n`b}V7;OVeov|FY3p7Nu
z!|~1Rbd`XyBE%1c6TUiI&vo2IyTK(LS4-_5(ukW6-v%aJ24$wIs#@}A@DM6C()i~V
z>YqIim?2Wa&3+Esapg
z{!k`O8Nq_Loq>0fQc9a#j03^S%8KdGFE2BD#bUbSPw_3MRFVkDdLQ#>|Zr_do-0BY-
zA3r>-ZeETv$9s|cO2*CYV4Y}8>G8+*xlR-urZ?s8S0R2)q!%+Nmb=}C7;;fla}>D4
zP#?Ooc*8iy;P-4-PTqO=kP9sD&4{`E3ctlDKMnSN!Ds9#2}KR%T%iwFWty
zPMa#QKEV+Y6&B@b(|?9mlhyKR-+A**!yGI})%@t(_ul|7-<73{&MCX~&q9l&z2q)x
z*tBj9yC3o}$Q162oT*`6>3#UKk>sR=}YDz~XbG%rI
zoU637l#%6UQn!gH<_U7ckz9MpkTeUffe3oWw!
zbBQxwNh2AcFm<9`6srXlTfcx2;77$VJ7^n+r7VJ-aZkZq(*b`^f{U3i(sEyQF65#I
zi|t9c4a;hGx7?2sS9Bmvvz;ULl`9L14ky;IB#`v=+Z4su1w{FmF+3yNegOH$(fxo&XruphaEc&B^9^Q%)F_
z_99Pg**2Qr;x42&s@Zy^oSeEIlUtm^ujeGYlUtcw=>E;bHuh{}uVkZd17i3;RRv%|
z7UAq#51YgD!xp!}MI_4=o};4!KwIJo$7gb4q7n#ahsCscwg58^MS5Y`7=dRvQwN8F
zbi;YeOYy5wCgzsuGmhC!EK9L2@!r}{d8JD){Zq$W$*i)YQ~NGYppGs_>9)
zsFAkz7Yr|RXMvRxFum;#%NtCTRzUs4ajyvLHE<*=xO*kZQiR0E2SI_U;iD|mO`rcU
z^sl^J^0{ufA}*=jG))}y8a8wRyaEE_$30c`0|nldOR2;;ltBUkuArHzQB$+B@*1R`
zo~vbhQPb1YitQ;$NrH!?8CveY%yI7l%om6pLQNo4C|xEb*>o^>RDY<%QA;;}NaNQz
zT9HszHNG6X$mMfr_uIu8xIN^a(hSl>%KZs8!dEiF+8vyMD5oO0Uw%%7iH1W|i!av|TSw
zJDpx^K9d}suG90a*=V@nOlm5l>BugHR3P<4H3|B-<#HZ>7JMH(HPckRRsagckC}D7
z2d=N7ZFJeXEh3`XVLk~BML72^uofL%dzf~VqF0qkMrrV~AIgxRVL5baZYLxReu|E+
zA1%$=-^Xx4(Qxl91x1Q{aeVPgQJCMw4BgGSEFR;Y2uK{V!5x6tuGb%vWv6L`n18w=
zEq_!si{jD0g^79Ez|#rYSoOw?tZL5e^V!xt?}P-2D||##8_o4r-SQXLu~_>R=fyPp
z4p=2fV{HuDTrMgou)oL;w6v=rCL%(L#uEYjn)a(}HFtEZ=To|;-Bn(v8Rgyj#La)2wC-NjYN?%6?!L3iQuJ(sUkL6%gZOylwz=~jp%Xc=K9bu*W
zmjuWZLAwBTr1`N!2_R|xxK}c;ACMCxJ(D@`^CZDu_>QVPBps-a=e351+e(fnL#~r5
z0a#DY$>|C>fv%&x=4c4KQIIY?eFNkXl$6a4+T);lercp=i$nO+zcUz+ERiftw*6=5
zFbm8b_HtwH>miqL;Q#zSg_n!j?{`CJ)8~J~=(qx0D6h|dDHdsJlG}^;ia|3OgL+8Y
z1T+4YjUbi77Yw!jpb)-Pb^M*zc85sI*pf7i3hi|yE`jU!T-_rvJoXYV{-A&`jhq2A
zFkb&4J+HKjVmM|s%a8JB=Or7+qv)Uhmtv*foear7_NuFb!h=1${!_G;o&kXRV2s3n
zSy%9tDh?vFZ%Z_rnXKnkcCKtfl}w?wX+5~}vwxXc@RjQ~>4S6~?-!`D@>tBZ_ud=C
z%bX5!_@rnf_Xq?pig`~PLeBybLl$yt?15a%V+4?HucJ6!cblQe9>3l{Hy76uiCH(o
zs+POa0GJ)f(pA&Hk3Zh=#ZyuW3u2+9FsGwTB^bk)uJ^*xRcqKxx#&Spif;3H|0Vo*
z)*&-%AsF^|eQsfo9u}Ypb1lZ+fFrnm_3B4}$SFWKF`JtOfVY6L#*?kT^e)+PCq``wyUUDIn-gobQsSY)9
zE>Ht?0oo-F$UZ!X%k2djK!>*SYw1o@0nx(#a=fB)*m+ePs`sKZoI5)^C3`DG;cOZb
z%E}BA6RZ&&+7|#0H|Uom{t>F>nYN4MMAe@m%>unpEX0-k7R<_Uq37O8bjv9U^@e*S
zqCl&U17OWG9k}o}DZ9$_T~tA2od=Gge%w7|64NgJ!kP`Hw6l=9y*>>8IT|IYXiO~I
zchk}+-jaI~QnaUxWL)xkm+{-(v*Y?}h?LUlI(a_&WGuQV*UA--JbLnkbPu~aVw`_|%Y_KaDf23Q)4^*1zgNEA+te)HKE!zv{L%AXh(jpGKB?t7cHz#~T
z7t4+;?E8zx+>MU&bR{AW-9w8%D_w5pzmdKAm_Z9y;^W7;+-@%kmd^xyiXYI%BwBr?
z4<4}|uDWZ{v$LbX_BSScR@cWpu^Uay+%flSln_UVa)o+-6(PGw>n}64CKf&O!Q5jW
zm7YFDrgS3PI)E`EA)$h+fk0&fG8M6@E%!Y$G9Z|=tKP{BTUMV$p|8^qaX~H*Y@e{Y
zvQ)2{`lo({DFbm!w4Gz>KS96&BYAn_03Hkz(o&5?WY3rfd&Gd-Z45C
zj*!ovUji%J{_ac&lRoPc#4dtuNKv8Z?qIwRQifBWP2nX7^Xl|!`D}02Ylzq>Dg4~c
z{|R38!WDA{Gz*Lm?)vWCJMNWeC?afZ_h*>`Jp&xETjUJ8==3s~Q1oDqZ+3;=5^dwEPfK$dEV-wua3d({$$
z3Ceb6B-SYQ9;~RiEl4m_keyJQTAr^vs8-!C+UeNw1;=i!`RyYk+H~mANniE}d9j4ghYLM(DK;L}WHJ+k1%9
zP?Nm!=FJ-LV=lGKNVJNKz&nonKbzogVGdve!_
zqsUzr?*Q9OYrS#yhe$jyPCK7dXB4ji^{O!V%S>wVx7pg}<_#p-Lc7VqPnS7fj#CD)
zv#^YVMWPW51Kb6aB!xh@@C7`W{t6vwr#B>2H6TZnaB~xzm}phao+bdMp#{@^7;jT9
zyb=LPx4mV%sJ+$B%oN}s!@hJH&;gKMw25pMball!?9A{-2<15(&UcSpZx?G9nJQ9%1xJzMxV>xo|%~sK3uUCgi4AikQ#;}2mZ|I*F{AGQsUj-
z0=$MYSA+P$dWBJtOi8eo4J9eyOqlpNTn*it4*cPC<!+z*h^n{krJgcXsZ0y)3tdYXw~bzveLfn=H`Z)$COME#Vg_qY-Z+FG{b**
z=T^=d=noz6@GU(`_kRVKM+f{vC%r1#!Lj!k>pi&bS;SReedI^|F~YAfY_?N+?65nF
z(0sj-|M$C9ox1%r_->;s?@l@>Z*K>?s-0h2m9c(6``$e$@|{ck+)zo;
ztjo+C1-9+@kFSRB*;o0t
zvjX{ONBkR&XuP%gpyDiHYIF=FKhrLX|4Gpkql7}E?%fSOpWoy*j{a2TLuqiA)(3Fnkv+MtC?CeNYec@_v&C`+7t_){6x&RYdwe{a%(=0RRRnDV
z%O1ndr1vlhaddOiltl1yvVPnvoD1;a|`0gLT80uiRQ$E6fOT
z%zj_Qmuz%GJaC3=z16=o%nlG&@OQwo5e7ZqIH8;~bc9F&J^p(5Kre1_H{zCc&Wpm8
zNj|*&63$M?bMWXq8_ZjLX-9N)ePdvCE#1~CA<_W|OK{QL;i;|?c$c0hC~=}kh{l7u4G*_a;c
z|7G^RS?rbqtN6gzpo0+M)sm#1KNe*>biktCF)(;AGyE6d^M-y3mU`qyYOYKue`Q;F
zcPE4T(i@-Fru272ZewnVUG1O=R2)DG3X4S59tp>7*vv5%*5riVhr5dpHC@(KA@QvJ
zcny_lgSMk}-@k@(C8iUrNkRoCLNW~KBK!5c4nq45fgO;IkCm;`?i&;5zE)gZ2qMp#1s-
zbVEQ0$LxXRwQV5Mg#q0=Q=YAlvQe?t}=Zvk()~)9Q
zH=ll19}2;+r$&?CU%lAzV_Ux1*3{}F-PWL68HM{m(^1rveiQMPJizahGl^aAl7pIi
ztZ+W}%ZfXwWpLeAjwSAgVvt(7JqRdzckF}{x8+MMP^1W0UQHkF%YKnoQ=?utSxX3_
zzT^H^ZzV^NQID{PSyzlr&H_lU&xyD`cMJr4*MJ;;w^()er-#8?J$4AGlt4XP
z;8*+xwTKGWP$}8FB8O%i6}b-St}mi+fy&Qc8HUEF<#4
zBTr`fpfHwtn~W=|%DiZv97x9sn|54up2>4er_^c=&>?6HAcd--As>|10ZI8`nK#sL
z)&UAjc;b^$1*j%ymA?X^I!G?KIXO|!ew+QBqZ---?C1g3LdGLV*hk3*;!l-haXNTd
zM<^J}SS>!gBTI%=xVaL?Bh2sK*-*$kVNjo{
z=+utP<8;M6i;P)mCpN6cNEk7zM4QWM8^#=*j$G1Ww_V|Rbz19p!Vbz_C{vb
z;7Eo9y0s3B@D+^Yb0X8$_~Jk$pD4%KM$EMZ$TcGaOaQs;)a0bYq~EQArR?TcV`ZYC
z;7=LGf*>6-Vr@il3Q~d`mz@p8JrJg>H_!)lfYP|gcCikcO9ZW_8z^lcQ#c2$P*%X&
zhdZ$e3rB-k?&9C(r{&>;j(a4eWMnh@-C%MLf@oWz!l&9+Oo4bK(o`p_df{+>67GzT
zl+)v5beg~UXL+a|{P=AqATFNzyu=AYQ_I=tzoQf+nGB-fs;1hFjM9D8p3FnE
zehs5?Z0zt?dk+gN;^Rt*Sx~3!fON$H^ojEwU#c0g&hRg!X#+cKLju{^OlnG80tmJd
zsdHgFv?8hG8I!e(?Xe)0`i76!AY(KEm1M|G+3*-nSx}{{Z){8g%CsI3b3br_&Y%~w
zoSK@N$XtPE?gGILGQ&Yw()7i@rPZf-Ro8_HLf#XY#H>CLzm-#{T4?u*3NJiecKmS@
zrxFHC;wjWm^Wq$_;LS5Z(gv}1CEFFs_lN`zbYggjAO{*_pxMQKr5hx{aQS+FGUhf1
zn&{R#Xe5accQ3P1Gd5-dUAowEC^lqgcQ@SRx~A4GIU=aZ_^8e+68~ap-6O^uGbRwT?{fdtiHZO}Y>L!(k&q1N07{4krF^KjnJ9
z3Il(B*L_W&YQ?&^>xQ$l29*XsI#wx>^g5ATTHwX-T+00j@s$;Q_DI_@4SSgzYJZY4
zZMB%(mt~Wj^-ko_hsib?=4Oi_XT0_4yjRPI4@7v7AgTXCiLg0}adTgEKkQPv3F;v5
zhO&j}y&zD9ic>wbEL;XH8g#S>EWc_&dX=IsxP#(}1KN_THCA6AKVBkh*4%7EFF5c$
zAv83)TD#IX@51FdPZSC@V1*2CT0}S|oZ!yW_vZm+%Rf?L5$H!X6FgX($sTd}Wy()s
zXW=cy%a|Q5r5fK0lQHlw`IF+DFTYq7IwvNswb|})B6mo7yld6
z5Lx`$JJna&ySl!&M}<;gUsZLDO$o+)svf>SL`gHU(LxZ}(%Sm)j)#5Z(XgD(oL*z=
zJH7jmT@N20|MJ7lEw51
zMW&?O0*2pOYz4ZZKzN0SnviChlc!FF?G@e18KOz@53_S#Ruea<^^b>~yQx2GO5>OK
z-ckstl>@*jR3++>VFyhP>zl&Fp%u{8!Y)+t={^E|Qk|EG2?##4-N~L0l#=?c%0TBurFNl(^NoAYe(n)ML0P#Lf-y+{1+mbU
zsFhlqfL$I!i%2;lDnj^py;F*g6MSJ#lNvPWsH>}c1*N@LPT!9NyxO&N8Hokg^V%jt
zsn7aT1NQ6WsHtBPNZK?S`{tbpQ(qed{8OgdUEspj84fScCpvl^5YW
z$c8|Mj7M~t!vic*IYV=K*l?`O6^iTuQ22Q|7X@M|9cUE=EyedLM{tti2gl-vE>peF;|a$Q%09Z+mqF2{(%MPhS~3nwztg
z?{5&|`T6+)Yb#6`4(F2L#*LF6(92_ah{Il_rF|4H=BiR)c?}ACvml$Ziu(Z!5_B*F?4VL7?nu!Xf<5-Pe>C^sinJe#t@J*(2(45MJUk!;@#fO5
zx?y{Bjtmc~&Tl+C?##9y27+G?g_0|{@B~K;xm@fn38YDn
z7mAL|0MANB6_1C6b>vcB(JR{7_WK%C7)+g~%kC80fvpYu&)*BrUy}iyoGRhf5*m6b
zSw4C;J8gPhiq2IMRviy%3WcdgavN@}6t5!wa@1k!9Gvo5>m@`WhiMl_x^nLVRSQC1
zkw5*q{ie^lJ?Fs3BDyj>5F&Ob%3K6pU<1U(@6%2*+L!T91xhHTFKgS@E4~@q9Cg8@
zL1`OG;qlO-h;K>L7!?(Tl)!3i`$j&*$J4ErVDN)Pti_?7C$_n7)BP}7cJEKD!`zqp
ztfBXK4$FC{?SnmwLa5^boS;X96lwX%Q(zJioVE8CYHCh`Dvta`o^dOEkceNe@x<4l
zQNzJp;Ye;Yvtd>i3yJ7!I;kKAt3w>g6dGL*+PH>bdYOVk+=v+`;A~i9U`r@~D<-D)
zMT6?(=FOXtQnZZb*LjV5WFp^@!CKWD=yb@onsU-~m@oo~0zTBc
z6f`wy;T+!-7XC4uk%vUD9?|uB!bqqS$UU-lLXo_xT^$Ot9GB)RHx+95Y%bq|;5l1K
zFD7sKXg+EPW8(p^z0gX!POl$S`RbM$gcRG?f_5M$Svi2CD9yX1s{NwYB
z2eKfd5r5m{L2jDrT<7kK!@)N)Ur1Y;E1
z<4WORPBa83PVJ>#6LP`>$zq!;G#UDR_@GlCXqM8FXEsE>zrP=IUk*=PTpW}%%h~bT
zmqEQvonG!H;z@ut9Iq%7+3L{+nvIxN4zB`Y@M0fdrnTi^kZ@WKXl92S!?0fyRll5W_@W=j&&cQp)FaXx
zQA=U711VC{AI3suRYk>5XU;N>w9HRaYq@axP;zTd4VqXaI%DI&2BD#ePt$EjoDIui
zJ^c!*mbI|WUHKO7^cY9_4soXR;%3t03F!ewS6-B+)Vv3b1e9qb(BN_A
zDVjrBcGj$M&{m|ArQ(2TRV^q+u}ORT@Y}ESWoR98rF;b8Y|Mr+h{A7)il+4-1Ud>~
zu_50(27T3f=wG-!*+V-)p4@AoPu8t`>j>KdH68%bxy@owqkjnnI#`h$7DX&;&Fg-(Y18fCVKb|NX562RSkb>Z%ud%P&ymmk&oGkE2L5XH=!*
zF2N_`I+jjNU70M(xa6x~IMVhNOy3xhRi@S=HB%#?=?N*?rt0Y^I-z*}=FMFwYH!E1
zQPPgaz(EDQxq@XYFMmgwtCYXLKQJzF=csNhiC*esj{?7haPkn~7dIelF1`2Q0d$UUT@?^`C+e)DT5QMrT*G!mu=Ejf
z&J~?|YaqwnI#Ej5nJ+k&Hdv1qUrx4JbaE&{xp%yQ{NO%Nn`FoVgI0u@-sgw1Ae^f9
zsRsqRLL9~sG~Ds;eE89zls5RYqzc;E^DudcxdK?D!CXpiL$`*ONQ-rVwI8FSWub=~
zo}EAi6?(y$LRNCK!kaqrP$;}FcZ*Y@hyMGq6C-`KWeKGM#0wo`#>-(4S5&n8^{oe
z3Ow7w@GmEvdf(W%ej|j}Y`lJaMP6ms@VE_XWw!B5X=a#i)Mtb$nm_zctjy5Z$UF%=
z%wvpDIBF)FP;C;u+*UcQ%c2$k%8nZ5sQ*vOz}fhQzP7t*@stC6#oRi|2E91bMn*wq
z&w6OrE5;Q>77-&2TX6B;17YMYJeN%li=V4%3ortPet7?SnPwKiZ&>U1|JZh&PlFv<
z`+CYhyiC~5PgFF?`}Eu2?w*!}@2LIX?-WdVwG3v8&H4@UoJ-L1@xELUlT>U8)YH-Y
zAOA=6*PJ}%Wk-Ayjdy;uqkWnu%wo9Ww8+Rve@H}QRGLp~AnbCU$G^%2gS4EOcQwZv
z#_m@CSoe}Z7+e2X$P=6z-rCHD==3Z_Bo#6j5%64f0);w~kf3M$Jl=rEEie9V1B
zjOP0}(?KVwAGLA{1_Kz<`=^PIxXQ*z_01KEO}}p@h=E|DdWB=#bih1k3O4T?)C?Ly
zYaJYK(L^`JB18b?K9C=F!sf!FsG130ukJ(#|f9SIBR#mMgkk78d5k$yN
zEq&+C%feNSBd?Q9{iyLvX2TmOY{8}id1aLA{0X>6o8>S3ANUqsXAUbZ39r2V0Qx9qal~Si?snh_5;8`cp
zRWqm{=%P7rY|=4Z9d$M8=K!dQ7R+D%3lL!kH6qyqj`pY!%35bgwyIxLi(QOKiy(Y)
zer~ZcI9J_G-M-@JOrAi5f`BPnXl%)SPmva&uERI60YZ$5ly=-2Z6
z5cW6_d|p#Szo%wq?!zaMpfCfj2AaffK@UTl4a~*|_P`O^VSu28Za0RNGUqFH#Uq6Z
zIR+D;$Oa#2wz)_F6y=b`50zi0@N59NNpC8K7``99#y1&exnTP4ptsQgr~y2`l!^*H
zpk;V4$q_4Z;R$>j*ZbPHwK)d3
z_F`CXXe4u{7Ik_jAB}`(eyHv|fIO0bxCS1>f-m%X?p><^J)}4-EkyXl;M)rU?}3a6
za1b;`>BDW9p~2e{l*o9XF1!kIe0cIpT8qso0-wiEpS}Yk0TzwpWkrSJ9|3YqgZ-IvW)6cTU%s4!UVS=3@)juWgaik-H3UZ~9~H}HIf%Zty=D=Q?A4hV
z`~oVH2_a<*d7YQ}47o;E^z2x`_g~|=A0)D=@}Rx;`q-FiL;+>id)V-
zzOGShNAUT1#wY}O?VQ5yUuJuXNK4}SpFhdE^^a<5mziziL9bM-KGxj)9)^!}VJ6EL
zhxGJ>avRX{8WWY{e)$*Lh<}j^(tPK|`+c+T=xJh!B7p|e!O>b!XP21TEigidak{dH3$HAU}0$qt_Qao7Y7riHzn#Sph^3;mBD4dZqw7W*=o
zZC#=51pxjz5z*2DbX+mCX^NYTy5SPeoIPs*{uAnN%8u;sj!xOBS~|8k<X$%idqC_QU=PK#5UiUS6jX6R8t4OCJ;zJ4b}d;r(y)#39_qIR6(u?UioSG8_y>
zS8bsrxeA<>a;74Z8&<{}Ne;$eZg6`4dDWChA*H;qV|LUfrtgMueG4~l)KKJGwC{O2&R*iTqr0P4)06*k6bqZavc<$(p8;G?U|sRIR-I0
zT=xGJJymmMV;TjNJx;y){dwgPD|_dc`=>>(Q;l;F&9aRIFcA6sHq7_85MNacyTWVS
z^8Hy-^r<6WKjIo&szZ;qiYT3k=&;-)B~f)=fw!&BO8vB`x_IHBt{k&(NAM%6>!?c^
zQX$NZmF?V(Sz8w<&n*x*a+fFw;Kd*2M(;}$A1!XtKSjc{Nat>ZKGkTx;I(6MiF&g+
zugppi<~Q;GkoDGaRd3Jt@DW=Sm6TReM7pI!x}{T)kZz>YAOtCqE(HYXIHaV~4N_9l
zAl;4dn}ZkqJm1IH{pTv2^N!iGXV$E>cJ#lW*eeT8gK}|dZn<9Rl|SL}eN8M;8G{d~Q7V=Uc_>a6E*FTUu&>a*=md{mkl8vzz`5_DNBhj(%EHrmG5k
zj1z3)0who2&W6;5=f+ZwpGmp)gk6!kIe#7^)PwgHLAE*NO_)6u#NTJrEv>@hXyt+8
z5&$#&T~yRp;M~`ONW2zA!u5dUX$At`ol^pGEL3p>C@D&IMns+If`n=uRZIa33RL8Z
z-WUNh^BD}YKBP0;J5fA)?Cchr9iTQs@j(8Qh-qfS$WA`H)Zjjzw(A{~)J|9T8_f!s
z!l{5#Jy{aNvp2(o5`O+*dye#^fwQr|3?!-1xwU&xf;Ba(V;^hMVNz(dR2PEC{NWf}
zQlmyijR{Mo+Q8oPOFQFLzbkEO)q^t@b-H=6y?MYWD_^V60EaC)*etc&wkW~gkO`8>
zufalYkj3cyEVp!;PiuhL7?zGs!0zZV-y{f?0T#{xe>U{Jg&b+n9ZP}N3EU1z#0LLX
z&m>A12#995(?;cV>Fkj-Ftfl`gc9)I8z4U7jE~nEc5_&>24#J_9zfp0>Vpk{BVZF@
zaCfIxeFNqx$jx0J&s3m32c;c?3?`Yt_d9k75B72&j5wo#{9d&Rk&|phd1SFU>Ctz5
zA;**~=6qMNn_!=rQg_vEM7?JJR^|~?
z@c&?T??QusfO$OqWx-+s^v~x%m=9rOs^-Pw(7Mk6cT68z+pG9Cmr=+w!g*&|5@6Z{
zx9!Uu!&WTN^|x;X5xY==(CXp`y#{(1%lRdEXw`!e7sz0;Ks#60(BK1GNmz4uTwEQX
ze-c(!j0mtKKvChjfThsc>HTTj5*`w$iJk$1(*DQ*diJWLFE3qI+&+BEIVr&!n|ksN
z7vGX%fAt<|s--f>HPFEP{owUU<0_S$Hf@mcvFb5YhA)u5mqCeRi$Eb~!!s)@vX37#
zLPkUZ!<(DW!TW69CLRQPDInv3&iRYk%1Bwx#>&s1KVbu%_|-)|-3)V=x%;}0tUqFo
zHHIjV@|*PBQqJ1apSH?;oWYGOM$s^zi8Sh%7BD10kTSvho`L@XJ?%
zn(@~!)40cmO+UET+tIPb!ydzZ{`~ZUva0e0&zCO`6-ZbdS04lVd8`V>QhiWWv={m;
zlhxP_FurT~?`jlIdI{bOpM#y)>F0XihQ(l5Q}9Nd&zQW$k-HUj9W!JD81qHTl9c5i
z`Oj3UAFHIti<}Ti#+JtoniDokE2UtTiU2_u{g8r!!Wk%?I4#whQDqw}`Q~q48$U{I
zF9P433@S|p7F4nqTe7-K>GO^3q85n->!odWZkd2d3){*0JLU-0bx|I1V=h>OA(-gO
z4QuOoF}qe>7|0|s;*XC~V)1}Oi7EqtK~F#Au|J3M$S@wQ6!dDJU0#-Pci$5+3h)0c
z7lCxyp+^lXQlx7DKhgLUk1{9{nooJR#T4VUucL&FMt-MEBq7%DdaTc}>#CLssqFPc
zf;r$h7pu2RSWoI5c|6FPvtB@2;TYu!0hQ7QYT$+pCU+0Qcr3r;TtJ
zY6n1z0fwRMur}gt>p>4<3`GYaN4DWqW7n)J5E$T(XGzU~Cv@rPAg*Nl)3-6PN42@g
zLxC!vii67)$>u@0Jz3XMj>ZjyIcXV6yBDCY*f4+$k~d%mWJw~F>=A~sDCTbo%pUH!
zW-nxyh1Axb1>>Nq#`bny;536e^?=Kei1FzS(4*<^u14DOMW70%OR+!lG`(7FyFSM=
z;O&^zCyq`=m6>rYX`Iuu?fyY@lf|{zg!Hm#(D=%v4D4Rpr0rzvOoIHgCnU?xAEOe%
z;r4G6$@)`x|F=>x?HY<6TP~v>Usz}W`#|01t*v;}&89s8pm#lkwyBL_0>F^XJI6%R
zGk9yOWu}ch%GF`7$Vv)icWHJC|LIoRwagv?DSw~Z`;3G3&o{4=22dB|HpDSi)PSYPTBMj|A@?)@=*pEY~M)IOG=W2n1+
zck)R~)qx%9+`t|LSDMB;`eLhk?zI|Ecj9lqZuWY@d=jxJ)5ypb*K;0F0R%YOkfWvx
zU|SFd;9(>&xRL-u@n*LMFd4v%yIFrpe9zIll|^tdSo`U0M#2vKNV3e{`mAbT@-*h+
zN|PO4@tF@wNr?NnVoj~&bdpt?!ReolL;VoIUD4}GOeo#z<8BQ+Ny~*|!)p+k9MHUo
zFX4BQp7YTmBR9nw>np+9OcNy-)ZZ`i^2_%yZZ|
z2{iIyij6$idt}9%C0B4zPjGO0*k$lg>@}!TVzx$>X`|(D>>Wqfnp(7^@H)}
zlyH@zhuYVHPj$Ka*nL1y=A;xhN#%DSnJ%XD$x|Kci`<6MaoAvL+uEa<7s+PpSNz%?
zgwg~R>Czr4XAu7U>8@{>dS+~V{0%q`aD^#~dh0xfoM>-P0RN<#wNLyCm13mvJX~1~
zRDG|e&^3&du)Vbvk1#H3=MVcokVy@G*n&tknYr2?s=TMXsL6QWLWWVPli#kQZOPOQN}0eT3$rri44(m}lNU0@vscy?)Yp({
zqH@i+M%zVUpol*JK46Yypc>}mZ0aTkB(~wpXk+=m!l(DWq?#T?xnQzbab5)@h(`kV
z61+YBqvGVpmOpyOvW_rHxf!KI&)NtBQr5F$$Y*6VcMD=-#gb=iZe3Vm7?!c9jOzPiP65v}{k4YvhD^LMFBq0J8P9wFf4I;b+<{^N
zg|2R7L))q2I!I=w6kdyIO|&+X!p<+&2t;1A7QK?tDO*`$CRUjwr7LpQ|9?r+fkD1F
zA?uP7ZR0J|d5E`!KcaJQBwQf|?aw98ALpR2F*(IR<(no#B?x{SxwUSjIg~vni@6~G
zcnWo60I$g>aS~lX;+iFWXcQ=$`FeG^tKi$LFK4C9j0Jpz-@lKLND0r-+uQrgtX3_f
zdsDSd5d(2ozpGgFIUi3U6Ge~0z)TM&h{0fY-T91Wt_f+
zXj5wBS@}k|&ys73h4^{wp3!71Wa52RG=I;2nh%kUk11a9FbDY{2n0a}AM41w9H^63
zfX7XJTFu{+`_^T4^(>m}@a6RlMsAt7=L24JdFuCTNyKK2oU>sQOfMuWd!@EftmAO&
zdBA7cV;P;<=auZzFA-UxG)jVhAMf*t0-F{!skZmFcw>_SF$Q&}TjqYfn>HccdltQX
z7(`9=&{f2E7xT_0Xh4SOE!9l_3k8S$0^U}%vPDX^`TW^j>tcXwQ}d~rUU`{LAWE!N
zv0qfq^7)nj&*I;6C8IuV!ICl4^qjUj*%C{FOWiyO_RiafcKa&w?|Io9(ESM1c{qx3
zZEk?QK)#(2b4*ywlNzJu>FC#139eMJ%YPq&c*w}t7vv2<;06dTilBezlaB9oFZ+u_
z6Y{9nyL7lR%S-WT259(@!=Z;RC66|8E>*nt_XC=M;NrK4QO+}LbYsfgKK4NyC{!}s
z1QG0YDUq=v$*(DGAt1*A9Xk@H;YF
z-L_q{@ML0{rYM3h3c5C0TRp3y
z=`a6&>1{6Fh+$W5b`Dw)8N#j^xL{KrTzdSN3fRO_GUU1#HH^ECYckBXSB&LHBU%{D
z)TaCI8}A|yAcW+d{$`7Fl%|aA=41YC(xipy{|qUy@-VcN3u7k-Z_o#ex0Oiu1_Q+21p?oW2sDh3ehc5<-C
zCD0F?ul{^Q*FHp0`7@q9nr-#$)8f9S_Y!|K7L-=(`^LWvZ7{jinl{(74&-U_x#13M
zj&6B>y@*~M8mcYSB69S0vH!4Ki$BqL?Lk!DWyn)ue;1N1Xb{(Y*vODyOh{&AJ##KX
zTC^t?gIw3>gksB>4Mg~rwKZokEml|7bfPW)u|Qc(R^y2_Pt!1!W%RuB&qF;mzHk2`9CX5N`YBy>GW|l
za``#1?{^us&ZoQiKON4*g+j=NlMOY3QZiX1U8|+iADbSprz0PP5=W{9vn$zAF(oBJ
z^4aM`39f_s+1VQ;>03-0v;a4o*Stdfz|N41l6RpbYMTK~$e9vnF+u=)Vxm*^PaZ|{
zhf@rN%f|jbU=+v)3$EoZr4T6^I0MA3(NzItWdgH(TP3-+oLiLQaZZJ5AJ$Tz8|CwfH;HwHX{jyBp_TUpVOe9Dm*3=WE~ZG*tDZc!2RN
z|EV1jg5#<`Sz`wb-s*-kmDM>g5VzUyj0`i%PoDY|*wefHXm?(n;2@Zy{8DGDCaY270ZB
z{MWOqD4Kzb_kVr|saGnZ-*@Sz^x3uTf{-|k#!A5`xKb`d?uqZa)+1*SR97wi6CAcQ
zCK5qW2&HU$BRL)I=pv{5tG|~TzK*^`Btc`L_3@EG+f!TQ_cWzTh?s52nLTDuhnE*W
zVFwoUEj~B!wgybJI2$r>mJu61p9xtCv=-sT(_L;NxXHazdkYZ7@S@
zHwN-Y0JW3j@ARj=C>%*VTR;{~qD`%E&0~t_bhEVypSVtHxrsFc`dKEffcGj5%6C*f
zVPh0;Yh{7Oq&9#Z(+WC}TtsnwLBmkDfqioKJsN$JI4Lf?)8aYyQ_19l9(#YmIzioN
z!>hiAvb&Z)lOXsu^rx{`zh37?lq5T_KthWm{7f{+dKt~HAE%umH-=EeYay%q~*t%tkyt9`Yp7IOWQlOI=2>;lIXZ3
z|6YX`Y{0LRK=*bCnFL4aJN7ddO@i}Y1jJNq4TDSKnM2m+I5NC6^ajT*Y+1PFOAD=K
z7-Ts(e0x;?eS{zl7xnmG8y`^Zu!2gr$4-n4v*Y#G)o2qIa_YBhO!$=*=syH|^)Sbv-7mr_~iRDE%{8
zZ-2<9CZ9GgdNmGSVWPO3b|_XHF-Jz2a)5tojVZiX!qexW7+k{`tI(ph79=H{?UTyKGL9eNAtrQD`WL#{O*3SMEhA|15Z68K9Xe
zbEKRP58xF(1QR5mTBV6DGnmigd1hP`?S!{9B{ZA;e^yw{uj7)F_K*x`3RTWRHh2Qv
zN!z2}j8}i;bM!)9l@YeTh@7!ZZCw7Kkl}pw*Y_WbVqxEgxZHHxvQ=o_1H+~N
zF2;{r^E;~hAN(L$J37)LobJC@wM0!%1L=y8RD<{l^+6s)h_RV*a}b_zaLM%=PsVD+TUgvk
zll%88yUAt`1Kdqw0_g;;km{W8-_?W^5JBoEejlS<>w;dShrqM95Q^~Khs7X&Q#z32
zu*(KR{>(i=h`uP~JqW52D?K<}UEL@mRe`m++Kq3aOp>c{;UIoSDJ4taR
zhAe~Z*V(zc_Qnkgzo%OxKFm$ayPw|3dxaCA0&1l!Y}^S!qg)PQ`&Z@%-SAa*wbYXK
z??RqDOmgPaw3eeqPR6RB;^?o?l&g+Zu3>!;Bxs$V?AA7I>=+_8#&?#)4=aCP0?80$
zw8`;hNX#4eCLHhBI=mFom)JYa@A5L%KK?)$uVE!a7R?jM@l?2O#ACDF4!IW=AJ@^~
z?|{abuWbt>OGdcx{x8QdYMMx(Wo=F72oWG{3hwtx}SSFa!1VZrvDL
z5C~2H{YSFjkKxScX835;RB%i8@@+Qmu&;=Jol)lbG(4m1(82;0AC8NBH$iU34aD~e@I2vPa6ti7K!dyke4WR4ko2(Pt=P2&GGUv30}`O8
zvoD?l2Pu*>pIAAg4qjmf-k5N16{-zf`6vYomd!B3FO(jx2ORHFWM-W_Y!3x*@a^rE
z<^ZohT$lk|u11-#0v8+39&$l|-7o`Ss4(Ei2M^+nxBd9c`jW|&Qk|C+6q|%!gnINw
zKT5IJQL%iG)Pw7zv${KdOZ#{JMNis`qBjUMw-K3N>S4vC7~ih4P86f7Vi#1667hi?+X_Z%B=>
z97+(;3E^XCE`^Z+s;~wCpIF12F*n0+lG^XC8a0a?lw_Of`a(0PbA^Dlzq{Eji_h!K
z3a1;O&Q}5tn|L^7;cTwMiWWk>$ZXCAEFb9X5ZfR{rUvh)3vjj-sVwgnHUbQg^}w^bq!h;kX`qj-GH@1zQ-O3&
zn(K#AsMCMWqvKkQ*!6<}mo89D;k=`M8uTb|#r)JV2`ljkBwX*0XJqc&epnTD63l5?
z7^!$UTciVIug9L!i7SQ1wip)vB>tvaP8GOx@jHH}g0$MyVl7qj1`w?g!(2rySuq)R
z-Sa&WmViJsHZhRVjtcmToH67Rn@@(KHe0(Y{vwH^ClKM^fvNVp`1lj=UGw6R`dBVo
zU@)W?n4(lkKri!w`D`8-6@xPTMX&SxXvuGIR{jX5BtZWPzY6CFag=QJX~0QF%UoF@
zU_<0Tl0A3f4`khy{W}fu`n*#}xP2?^AS4zR${_#hm_w=$8N9f!b=I_)$ly>oOEX*+
zizetL88?GlK1Ny12bH164~nn$bp$II^>PNAA1LhEF5E$@VAU
z2pUkQ6UL~%95k~1={Bc)cHfi*v2C#R=OeT4PZu3`Rq(*
z!Ha~W5$zh(^Z#rh09l<#x?}pGJbS=`DQmW3>v8zXowZ*~fS#2uzY|-uKg-w}s6;2s
zdim+lks??oqxPBZO=5o
zOB`l&aALqYPY`m!0z(HQ`>FiVzq+gG;|oDx%ntG@)LCsf?O#m$=@DR$N$U!>G4Q9y
z-6N=evu=sCMOA!B@jEm(W`0fL$y80WcPA>&4>5ZFk_q_Lm+}=qC~W~++FIQgP_leS
zZUCm%s~9FlR|S^oPM}+LoQX0-8Bn9L0t6QvSP%po1NTl0^Rp|Em-xrW$H7+52hLc_
zciJ%E12gI?PjbK-8g^EaR0jH
zFH0LtCPC=@cQ-|Sr5ndoweD1EEgOiwBN+3acHxYU7p*|Z0%Bjk$jSB+0MnFfhn!Xv
zF+W~kbuPNb#{EuF5EefS`w7A0`6+l%xo-8UpiJLDiVAaorHGIq5D-tz%mD9E3Ux#q
zB(x?ldJ!nL7)d9?MS$jy5dlYZfC{G@b_5v0vOyTiJwvI~VFQb%J=*ncow=vqCk{Xz
z3g@bw(lZ-~kx1CS2BPZT;qVHY!}2>fJwcY;FocwlU?`Lq>V62wssR9|Hdk)s
zD8(eXQ-rHdC|oA^HH;;O`%r&eaayd8FEAl`YEMB!9n&UZm23IQRrvrWQ^4Jp1%$NJ
zT+v5D;%;FVz#b$Ch2c=3|3?^#CQcJkLvAsm#Dd`ghfaqnTF~-r+@+{3)_l@ZSbajY
z^KGO_HpB}KQ}FH8{b+pFE;BnrqOa-DRQ3vnPd!>wnj4Iqz9Z3%ZcWsH*-s2{YCVnd
zE`TV~?jJ`WQxN|J4z56#OVGRVwPvJkid8qfPa17?E8iMQFy4#3a%#;*77aK1%%s2R
zzCd-mX$kl^$_&;1Pd#K8Fb+-sDm0tJL*hDM
zw)3YnJkD>Y-fE(1
zjeHQmo4u8;pD`GRq1KP)u3RCREEKREUwf5kUY3r!%i&}y>nnzzZ;LM8)Oz-|COPv0
z55J|uAW_2l7pEXVe)8bMfI4-p8c6qDtcv`!?MleU{7~dT=AQtn7wU^ni9}-f7)08n
zNP%EHKCNY{)R6fPwnElBHqhuGFlxqrpC4+X&BcPzlcbAJ3~`z=v@*uMoQTd%oBvLM
zfxu+0HC8W;O>SAUV=iv^6mnAIMVb#JTn0f$L(NEYZKOT4T}bj?f_88I%X2dqLQMYR
z(afLqN@Fvv-L&T~I?L%h)X%Ye*1&>qeE{=T-7_$A66u
zcrt%S3sV#q0}b>LFDgmS?K?#ii>8MFz00vgL%gMVwmQTNIoarhoAAD_Txqi}yzPg2daq8ykQ$g~HusjTI`dQky0m^uFJTOW_EGN
zFR!jKa>*^J{NHu-w@swJo6jvKMGw?+A6TZJ&L6mZ2j0hp)qbsj=FBD3&^)>dhUVxG
zyt{bwUkrrIpYyMKRJ%4eU4~UClY)JE9_`e*i=jbs`W&bZ>h|LRo@BFj6rPOiJD5Pt
z$7fOV@j}6&Na9o(nkcR8_G$UQ28~#?)WoC#`17f3t5fg42w}@IjDFz{BP*+c)S(1C
zlxKVULI?}|0SrC5E0rfX7?8kzC01gv2UDhJZ(cjN3e%AHi;TS
zj$Hf>SwrbIb&l^2p2fwdRy$Pf7F#w)tms=c-6H|9hh!L3q<|MHp8XqE4~bho@nquq
zBj0}Qz>LF?Nrjf)Jk9op3;KOpUc&a_
zM^T9CXTLQj=Eep>pg$0$k7yS@*596kvaf=%?39q>|5P(0#$ZL~YAjTn2~_B8rYs
zF0kE0_F3J!0G3i0$0p+2a!cn7Uqq?1Vbr2Qi9=4#4S=pLvm3`Bk1L{Cv(2O}rcbd2
zG6qXXE_N?~69G%Kmg}#FZ{2V$H)Az^e8{5K-6H(=jweD3_)-+5B77$RRv`#HaN@+e{pvN;Bv$*F{ntJ?q>YqlY4^{Qag-M;3dr(t$dY&QAk6Z
z$v9jwJb(saR;3zJn$xs`#Z1Pv
zOorw+GQc=mr1ccix&#UmOU2QP4lyVgi3*_Fa+#T#3L4I<5M(w*5TEO_?c@l}LGEGr
z|3v2(TIcqho;uuGn3
z$*Op*Djf^fh*0&yoG`p;N$7kbjWvIy-mZ`;W=v9k9F5
zjXy>`)su?IPRrin4o%b^g0;KHh6_DTy}t&nmb8iL4~%~X6`H@J5ZE~Z#(AnzG8E5H
zW?VjHVSg7xBp`Uf4z@f2%NUD01Vt#F$JFd(KdxaF87_Y0L6dgjRw5B`D;UqNa%$+{#3S#
za*NY(^?U)$AecO1{DStI2Nk25v%XdRO{^z@_Q2nrfh1s{SWxig@2v`Lg+ty7Kxa`7
z`KS`{CTe{*C?=7nU4@o^(gOJoCYL7zr$!ozPt&>XvvLUfC1MMB6TZGFCc6p|e_#0E
z=z^XJ?Bd*D!3J@0!H=*>Y^wn9>RS&}mA7IQ!af-o*_PWnxys}2nWQVto}z4a>aOza
zi1Ck5%Y;p?*fA@>4)m<4nP#lN%?D9Z5G114$BM#L*Egz{8Gm@(1s#`7{NHa?4jB>n
z);00SV1p5O5H`;(p1`VtScK9Bb}DL(O1_YnWEa~A_q*A78c{I+owQ&GP|%E7qvn#VlJ
zf3;k4yC1iXn-mUfGPB(qPCnE`TA8-WoJ$JU<`!D{uYsZ$1J+ab!&ndBNHQ+5Wx31$(--B+N_Z26!HpeuwT@SNProe&pXtx
zqMh8W|0H*c#VIk9AyL!ECJ3i$AVI(~(k%?sF3bg*Uvhz_E04M6k53_R2}ICe7MNfo
zsx71$aumR}?a!e$Os{GfIjvB0`Gh9p=8n7fZqFXzS?Lpfo5y-xw?};=LzWRY;o*Hg
zfx3>p3p&>Qg9!$?>U7UdaK6oFiJJ|EK2mhdg>AW9*wkNC4`cr4Ifm9Ih`%n)<6Y|?b3|xJ~AGjW&LYp
zv!lYY3v0Tm8+n#DN?c6iIwep-xr}0}JdmA%3n6MN#El6SFw?!j&VerI%*qD4=u39$
zOqivg+84@GpNyIB_vDCVg{fc{-$ZD{pj!pKt#1@>Xl$wu33WeQnQJ(XKjY=}IMOF1
z#D|xBZj;)6W4CN<&ShRM-f=&DOic!|>eE71&Pdm{*PA;QBCIX(j+Q#_~W?R+wrN&?8)z8~p5{^71W7Gl|)zPc~@_uLLc
zD=obli6sBWu_*75(DC)imzueFPxXoG;_Ws!?_{#~&n>jSoPBe?^Y(o$ch&oBsSh=A
z0MLJ9hP!*b_}d|vXeVmS$%6&yTDVi$^^l|Unr!g7U%ZIsw?g>Ml1U+~JFT
z_yi95^i0^E^#xO*2s3L
znArX}75;H1oX#mO%GdpKy6t}S<;RJ47%?MlC*i;QrT!XS?=E)?o3^f(-=CXn5l|Dx
z$>T7YO(7d}PT}ljqJJahQ|_3FhxMa0Ex0-HL-)8Zj-qy$=%|q|x?A_VMonsp5SrH~
zm!Rq()t&6}Lwyq&%^pteEQ2Q}b!fi7&Omo%>f)~gG3z0ttlk!PsM_lD=gX!u^+$U*Yib>TNI++%wjBvh_;B(-9{JiC+ORhdyAmnM
zeZHr~i=&Rd!DQ;dZBv<8DwpqnyX=zrn*}NI7x?j|_r{IAshQ|aO*v*$zp~;PxIE(6
zpGehMnopCE@nD|AZ!Jr2d(t&r8*nbgID3=y>or>1OOM~p8tR+Ghx>;v4rngI>uS!R
z-uI=x%KrWtvh+d6oK+tYIji{Qi1x%!*X!BQBSi_?37WgzEIg8|*^_n*TcP5a=ifDA
z|GCsm?vbXVb-zS}MgRQnglTJl-rF6-74Y|0}ozOII}
zZ6PSjg
zE-_tl5hqhXh1a7?dCQv=L(MAPi3vULNDH51rSmt88!3Ayrr&+Rb7@MTYob3Yj}_Bh{$1m{)k?E%Hz|Y<-maAa1eU=q~xq`2nsktKHt5vrQ}3pNjUy!w19%S|BSf)
zm6J=l(-$Y{@2)II);(TiLrvr7H_>s%0|T3$Z?=}X2-XTq&n(;;m1D{92gW6GGwk{bXxnYRO&L;Zc@Nj{Ut)Hw0>jUx?B+b#IcAJal5O3QH&>zD{9HD`xZVUo=S2A1+&+m#l8Sx9lI8FH`nvF4k)+0Vfi%fUcy1V{!Cpy6D{>S)f}DaMQ1dKZ8>!P9f2Y2w@NTwYhuDu(^AGU(b3!
zcf~u=YX4h{j88+mJ{i)~DtxZ=b4^#K`O@$1=T}?DzGIV&C`>=+G?mc(5U@LkhgjuZ
zz1H)PUfr0tq&#wiF4W?BNKX&o+dHarwi>Le0tei9J(mHXc44l$vi|={LI*7SAJ@}N)v@)P2ViDdy
zZq$dtf=ji&zk|SXm^@p;uBu0m-R7m-b;)yC)y0YAX<>wap)_XHX;Psq%quT4vnvQA
zOnL$rIJTV>W@-H(_AOSg-eK~zv6R$y_>zvp+O}82vWfF8Pupgmyw&%DH?{I@LkpvS
zzo%gCHn8HUZ9-Q*IC{a2r+t;uLUU>rV!>a9XC{64!o$RsOstPxRs*q8
zc}4%$VD|ItS=j;8=tIpJ#YsjPNjN`csw|ILk~Su%oNS%)$3sZ)fqxuIFmN{xvGvZ-zTM!;O`N}LUZxgizy3+wJg?dbhADKHM!avF9R|5xLwjyQj9mg5Y`VbY1#+RRvSe
z^MCner;)KztM{!yGHKzPDZ7ZHdD*;zEpr2-bTwvmKWLrRzgxA_tZ6Ll*lhl|Hf!*%9Ltvdfzr}8vQ>{VP|zdHYiP8V-H6rFn0V`
z=fT~(uI3APt0w*`{a@HPG_I2Jpd_w!0D4)(s0
z{M)t&dC_sAqO?bh>Swwx4kE02m+jdjuQFrBOh?SdpMUDHBxu%}Rk3Vquk`cGLnPCy
zo7P1Y!?V_TpQuP759U|6QUX2pqaLqkVVb7WCxQ*-DCd`rrlV(g1CZkZ!pj47K>%xWOv!ycU}M6@Lg~@_&jSv0oQ{C*65!r>IZ0AM;i0!_@l^Ghy5i
z3yjjC+C{uAnmj_!l(|T=hN?1Wmp%{r=zjaqU)ShWV;s1?Z*QJIqaVK<%oRmD{(B?o
zt&H%cea+!w!Jo9WckCy2Zt0DTU7K)OjcKvybx@+5)qfD&sE92LvG6||k=IezjW0Tw
zt6%OmZ*f6HKB>&oocXO5cr|WpQPaTLao_V!$SL80@)luO6ru8GgCc_s>RD8u
zI>o>Jsgw7e=B7gU-kVmhqV;s*yDer3S}i{pJtAyFmr9g4w1@VcShwnjd?e9?-}UIA^6?v0H~#+d+H*+x0rX*Tm)F
zo`w6ZO^ZkmnG{Kd0oC}k)n1h}5SMe*f3G6i@D^1?#%D6yJ0UdY(^q{&_uLLP5Il0n
zauR5D9KY4M{j>Jm43m-qizE6~rXhSHV}iQ5ZWD%E*87WQnY4~v6Mm0(;UqG?DF}@o
z-bBPdA^jSbnO=^s{>(;Z<|$!{#qrf2`}!_UWvxw`q5q2U4R7iip~(j%5fV;c+m!GJ
z>LQ8jA{WmJ*C|zW&sh=a#c(@@f#_qyWGip*L3HO^Q3`*&V-R9V&KtfUvr
z{EkC+^nFh9WX;j?bxOL~s4AkGW
zc5Z~ZijB)&+P1Y1xtg1nQ&rGwi~KY)L!GbwC0uKL{ar4yuV%jOtQO0$?$A}lC*Cy*
zQ+6p`e(2)l_6*|+BQsma^ScHIdt?>=^XTLWTTE3HG@RNjL?^A(M;8%L*PN>ky_P^R
z8d01%8|D3VN|HhSm^+jib@C
zrlTr@zvR`|-iEj~|JtOv8-t%gYub5b)
z+q>rYILh91Q?u1`dwptqU4i(!RwdCF9aMFKxVWusc=*{@3in`)>us0J>bX_kO}h8b
z0xeWA*n)l3AD@q;*w;{Aw2R2NT0e$q|OL7n!~(
z(BdCmlWc1;TZ*S3=qC<%#>Q!F@jh?vlA1fm&a!G%(~-ufpyxMSj)M@p%LfD|%Hw_s
z*2Xe30}Gm^>+&%zWj+RPnhs2)|5Z)Wl7)bfoVPAx^+{5THNMsN?OLCuhLd8@+GKbt
z6Vrf-J$IRZ@o49ULT}`N!|AA6f+=)d{yZ(S$7Kq5i6-?X?Fxi5CnKp&UqOhNvI)EevBm7(L-
zABUVyKQ;M=R^JdhTe#}J9MBUz)5yQdiEt`jLc2Ze`i#uhMTh(f7RHPLPF$U;hT~bz8C4da}iOJ?vVJI-X|$fd!g3p=VGyevU}m2?YZG2
zLg%BN42Dq?t&0X0~1X%tu;3Ow<)0
zPaBU!KBq>|2{2stDURUioq_I3s$FD`IM1VI!=#fRcS5m&^NQ7Ky9spuVQ=^F$t({M
zh@I`TCHIO`eoJLF6I>6mdMaZeXd`1Fdd%uQd|Q>}U*bX<)G$#QBtA4y(I;RbzZH7+
z!)JJ0oWy}k@ujO5Qxdze5731oMJZ2Q0EWYFV%rJ_}{?Tu~K
zHFeic9c?q4?b7f)>MMOhpka!R7|^PW6l@xZEH!&r1-2@*
zm7g7hHWnr_DSSV?jVa8ySU!EBKo8QO#1?1dBq`c53*r0su{nsZ9OE-4GE{t~ohmONYce*a1*j#u9R
z$=hJ0zdi1ZzI|hC>-Csu|8)x_o8H=51sn9(4=CG-sjS!B9<#Y#_aLl$CTm)$uKH@C
z#oO_mTXJ_ei-Kl!bNxCIV(=ivj8`N1UwdJy++mfT#bcYnr1QHdtfSUoZ@Sd*%n$8@
z8-%u|mb+{-Kluf8&92hX#>AGbRLrksE-8C0xE`E;D>miVU>}}5*uo1NdMaGib_XL?
zAQypTiqo_Z>E)5+O6G`t{jywDK0Slijb&AcYTJg?EC9`z*RD^j4Gv0N%D5ZAMh3(NEQz;VXGoHgf
zqyk%-PoB-t(|moRc=e0SuIms^(9-=P%=@!wB#9Ws5wnIaX*5mW&b5oV?7bAb|J8J5
z=d9J^bSBG4<68g*k<^kKJ&RdeJoH^+D!G@nZ6k_%q&RcNN`O5g2mgOxV&D4U)$B&8
z&G_>QqHVOIZFIH|h=z#pAAFt5Ghh{-%qez1vm%jl`+M)337e3e)ujG%5jkwM
zq0H@dtBtTX@2_#O>6fAjv4(BWEnhWas4A$?RK-XjpdgZd9KAAI&HtRuV}n~kAJ%x4EunOxUrG3x
zsLhK_j31i?4$A(-S`n%`jjzf1RS#H8^zdTauo*t(1GRpU+(^lEj`I7nN>Rzj@
z!yjQcI55k*b}(wjyC`$I(=%f(%d|F`eTMdOF(LoAS>F2pT&=wMbd+X5+Vx^V)^k5^
zs~cBzkN=oxt90Pv9|#n++bGOR5LGCQagJ+>xcD2zsZZ+m0tp?dzYpI
z&R;80!c(vasC+{&I@F>Bc%(?iy$!{K{hwME|6x#FLm8_jmdh(m&N$G3zD+xW?Lq(Z
z;Fv&IT$XKtl>6vgPRDV)cEN9hrUjz7P#ScPKJ0&`Q8EC4%p4(6zxXbDW;jzfOH*ws
zhmNn_ty*y;@q`9kM0{*U{mE7-m%&eWbkD=Hk}7&B=MmZjSlRQnv?BnG3_~YLX=$&;f@s&ock{%6DPpHj)LLmps)g$^
z`B#QP_g8N&tCEwq%i7;}hM54JVjQ)Z1p`C-RtVwd2SO^m&|`YvUP)BG$-6-Gps!{0
znBTIS<^C}vI>3F1%Of8=S_cC)G@_@iSo;m6uIou%dzm<%{&V>`r}2(_2cc%{+}D-$
zwXhUwxv-dn2PUyPGL
zC)wX*%|3L^Ul}f2oTZ5t`OuVJe%0f11y4h$^b-p@M3w-<8+xCi77jIAW?6^K4z4H$
zl0x>dl>tpDL7)B|{{dA5K
zN}(-XrDp1UY5ZeoB2ImmT(Ur!9~J1e_c%C73|y(MR5xuiU1$)*5TyV-o|A!%6nX+~
zb4hv&C9+;+E#y!a=XW{_ie2%RoKESuC&EKNG>T?Zv|CuEskEJMdX|gsB$a4#Y#vq@
z5hGs5e9N~K5In^m
zXjvunyt9!P_$}Qo0J^O8qjrh1%&2k5H~sV5_8=DaDo30=^@20y0={i}ZwECzyMi-q
zmVYJGGfHc8;L`qyt>(C;FZo+EY_ei7Q&8=2#>I?^8c??pO{=UCQLx|M}50
zo=8h%^KpVFCSvy!&g_l#cl^ZmLwwpJk@P^!7s&5(FK{%i!^agFT9&+6*!_z4MP
zLBt+s#@_4)X)%!{rafiJeajWqv~5!{`cvpXpyDA4Ea*MS^BJo5vu(2-u6RW>V?L>NlRM2!;Ued}ZH}
zp-Zpoe6`CCo}8^@w@sjN^x^t2vi2?KmXqDEM&62FL(COI1SiKpU}f#0q>9OShZVPh
znS0m5_dA8FsnAkno1m%@U!_IpET9>3FN*N{h6q|IRDXb)1d5rtwJBi2YM1{H1}T>1R>9@EZI!F
z+l$&L49G;L3RgTss+C*_m+J{hi*q$ay=6KdSd&D|Pe=wN2rFevQTOVr+_c(@k`?+D
z|D^o$qc$3mCYtlz4@r$AHOl+twWBUpd$|K>V({N>N~N-~7&p|TVGEB#WhAlj`!(5R
zD3+dcK7b7U4L?nozqbzXlo?9F&5!?&tG5h`>W%t^2MZAdk#4000cmL!5G6$%Iz+mL
z7`jG9L|Q~*NC5$9siC`TXpruf?wt1?{6Eh*=l$R}uFGrB-uJ!M`qjd}b35s%pjTc9
zfZ^IjA&LL+dCUH#o2BOfo$=3jX&O?A`{d$7i|tDBnGW^S{x6{fBs6qov-!bg#l~em
zomLza=Pmd&CdA|IECF8@~IAkZw&@n4sky33!Wf-?n#o!@)hhuT1K+?!|)N(r}i&
zP6eUQF86CTc9>IFtlr^U7QOh~btDX{Odak!^FE`=x#m#1(4MIXRUOec=VG$JbLThp
zI9?%KA}1QD1N`6%?rhKb1CH_By-rtMg}YaC8dYj;zTd2~{c!^Ca~|Sf!aRA*tKy`7
zJ#fDZh`H
z8OG8}&b3`fil2;Zm=r2MVkuOiRH4Y>NE36$!c*qo&Lt6;lQRZnfU?>w&#b=^L)F4C
zKO=G4lDO{W*eZ`&La?8~kRZ4NKAazPqd
z9WqNaz+H7YLjPs})HcZMxiq$se>)5FyrV%a_a=_oX7N0%|5reJRBVEb&bzQzM%Bez
zOS6hRGe@(#JbGkGKYm5`OQS+<&Hrlx_jU6f{#_0OBivazo<=5wIEfxJ!xFGyIolFR
zNVVNhTzEWz9|d?dwV8ic=|M{)m|B9mFGd%Xaldor{wqOUXbI|!l_Z{4q#=LiQ1#W(
z=ur1uuXxE>OusEd^G!edsPA{ji}~S4?b{D1V@cy&?y{%MF5KV586qd}vbkT@!PNq}4viX4s)
zM~>=Gnz=CY6TJ_VE^M3)wAG+M{;R3CSR8#KVVq%QUPd#}P_yHS@tTw?zcaB^@t1vU
zW1vsjxZYlwCuUWgGcKUyJ#z36zI`V`Yr(S!h6$+L7{_J%5*m_x!)JaRJ{3^O`aU`H
zT1>W#{I6r`^#xggOe*vQ@{TT;d$?IDo9;H@&H5Kdxw`Rc1-qRtzLVd%N+=gT64b*S
z)*yAG7CvT>6fp!U>uxw*rNmp7?V5ojE%DJE4ikz+;}8SenNTQM{IYFxk$o=0J~wpy
z2kyk9vgqtdiY$f2^A7G$cV^2)aZRH`SHYVOL}NsMmr%>*Yxj7_En0`X!WN|GhxMMF
zomtHSDfg|6M67ti+>Dp6rMJZNk_OjIo?IW#w35|#+4)-B$-J2)_o`}=%&qG?_8LE)
z@s)y%1)`FF^en;oQ!`hU
zjr2Rifmu;;56Li8;XC&rFoxWCf6B3$d>?U)kD}fYN_s$T6o&V_Ay9)ji-o3c-Ov1{
zQRQi*kv_MqDqszH_LN4PbN}a#Tkb>cTzMl~wkX)-=DqRf^_3S;px*hi&lD~U1T!i=
z7C#m>lE5TMhYmn~QQYY~mb$XFU4HeAX+&P@8rr3ZWW`+0zO2<_z85@K$90r8nPC{3
zaL;Zzpv9qT#JV+qG)~8d9$ed;0rhBOEGS+q$hNyMSGD}PZ4tCV(0Nh7hy^BkQ2|wh
zK>Sx0ExeMKTJiMY($_c`UpDCP=b@hc%l$>2+s+EP>!qO~o8Dhv&wvas
zD8=eT(z)Iko4#X&-$q5yq}8eDB;HS!
z`_+-LkUxqGU}ZLI(aX#hgEDX{Gr1+utL6EbhW=0FFY(0OLud(%Pnsv>Im3
zsycIQIf~Jmf6Sn?b<&0vt+=f1z8U88Do9-JHMlxmwYK}qjT2rttzB;B?v}cw1gZYL
zpmwAuEa}59$X2*63g;8_TQWu+su*R59rn93Vp$nY6Vqq;zBbuodEu?uoZU(JtV9!!
z+*Vxk=w|RhAq_#^Zi$WyzM?J$W91G01PyB&l{c;)Ipkhq8{7T`t48g^f3>%JHU$NT
zJUYC
zTFk&%Oc7o1#c>`okl5AJRFrr+Ke+im;Yrry2ah!-3o!*@NAJl48bw7I&q(pt&Kgyq
z|5#!b>j`dJDo
zN8B&V#N6nI`ie<_vo)spkd#7{P_eQL`>vpt!P$+IovD~#{sJpPQb!iX1KOyg0$ycg
zbU#A&DI;&Z@V9j_P=p$_zgu#4w;o5gp&W8dDFVt*YCf-gMyqHiu)-QGI&G&f+AGvI
zily(TO-T~`ETJa3_dAtXAh_`l<#yN%C%qb}iJ^y^RV0Pc-{iveg|^J5eyg|2i}@&G
zfTqr0lNhhc8CbF7Q-8NCp09?uQF~fDta{bWLd=R?px&SyOpArL6Yq_|ccJT<$$inb
zP!nzuHZ@f{maz^JR7q4ved3_yJ_euT)19?TvbBJN&&67|JV#tsm6UL!IFrvnbW-7&
za36W%;ta}jG`NqSorVAgDX*|5a*^b?iJ61nQN=nKh}W*wN0nJRDF%sO6Su`o=h_8-vAEuY#t&^%}U05^@tVs(X;Rp&kcvvYK7Y>Xnv9aa7&ju
z{p&>M6?df9hDJSgM|TjPKm&a4^5*K+Y;S^K;reUvY%h?Ztdz*#fUeZGa+{rf2`LJA
zPI?$@3qdp6Gu5eRd;7vx|8h*CCkrGvPfiNuLVu_zB`qw3Rk=(BR3E$}C%-5{y<^Rd
zW6RB;24D!pyluxY$jL}i%th^JXMG_H3VNN3crs7{L1jhG>b1O#lOkXTz>^MXsFaPF
zk_;;a7*XE!%dzh*fwHi8y2FnD{p~vkSb?8G%ATc=E`!1=mGmcGr9_)R+8j^5yaA1wSa>yqQNEo;!dY{AxPV-O4=qwWMjIOR6k*A9H
zHr_%_EtMCMXnRMa{b2l6I%G)Z&X$L5zmKECMD}LzAwU!)M$^f)8du%gAz=&IN^R~Q@8kPwg;yd#
zvbH9>?cV0KHACjLp30sne{Tc?*p`(uW`nVrd$6h0^3m)NtqsrAn=pl*B}UShJ-t$M
znzX{4`&4@&Tr8wZsd?>o#e4v!!V=)xo6pSA*bjX`H%eR
zzWT&e(R#pD90(f49Iz|{A>rz!UO|&ZyMnFvc6i^%S|!BR7(z}kCbMUVUv_wU^>m99
z)YOM*Y$6Q&bEEAZ${#F}$={@yQUHyKQXq5kS?Q(XEMfwkI~$R>FM`Z&?yNfWE_!R%
zWPo@8riY%9EE1$-R20|o{u7|LsiZM-Zyh>%{RV0XAnxuAD5}cy9cz8BdKMRE+Y68;
z;ET)2OFB%r(dD~2gYZdC&Es$r5^AyKJ_D%vfW&jH-^NYd=B-no(##cQSgGO-&Nj2u
z3-EOHJ6j(%yMnPjKl&t79Kuc5bvJMgl&1fAVUNd5ihVXq{VhAcf23vbh?U35Xb0lg
zeAG`4KC2Est}wT|n&&nP0JcrYKepegauY8*CgHp|>AjG&vMNpfT7sz!0O1zbO0>w3
zy&HkcaJYszAXB<
z$NlW2%U9}dfL}%@hZ&+v+Crou%k9ti3Y_;t{`i6V>E_(v977ywfXWE&HGe|_v`hfM
z9Yd3qJimlRZ$+oIjiB)$DBH?o8CKo$tKMhhH<{FSOK2~PYmsaH55&W3Pn0Yciy~v)
zKgw)Uy>(*a(`o63mtyoF)qQ)+-ox!B*Hq{M6qhYgGWS6Lxc&E<{ldarM)s9{=J8R7
z!8x&S_z3rbYlSiL$-BQM?sNaC&WAu%ml^PR%jG3Ie3|g{rACNe2rd>!|D)^O3341b
zH`Y)4-6u!#)kBC9WuDG-0C+*IxG28(Oa!S8bxiKAmPt!y$A|O%Yeh>1|6Ou#%^5q7
z6t6|46{MaF3E`4t2*9hAW5-&BA7&OKm+Nj+HrQ#%LVSqB;55(oqhCiD}Qx>AK&w3Yj*_ud5^
zzEc$G*Qehrqxi;?mCCW(rFK>39cYF=_zt<+zx;bHWfN1KH#7?B?;;
z@qxqeH5WxSmwKW^s<$vn?~Xh+ENq$~R=k`p;2~RLK9vcCK{0w3N{T=G0mTrOu`IxH
z!IL+W%U$(*BX~VERJP!i%mpf|9tZ#dqK0!Kr%2NlfALn}ff&>gM=kk6&c&r0z?s?DxE%QsE)
zM3qOB`AoctRZ+4a&o8aZ+C0o@wZe*_m9?Tnkxv7?75kZcz3xJ6B2W>D|G(Lr)B7`V
zFyH=37G$2`ap`Oxg6Zsbtg0^eT@sQ;zZ-e(o@QZCUgxI@chu}0FNZyyL*_8e`uxX{
zbLMN0!V6U$eCRhu)fXKfQ#A$2MI+Wd-cpyYZr1A|G_<>|5?8e;Nwyc7yMHc7oEv5)
z>*rT_@&+V7d}G3TlA9Z#92L{|P@FsB6?0vW>mL-nsY}6%ao45hluku_`!BS4cjz}&?M@QZLBPq@!N**)t
z%c_3&&Fs`r-fN4L1V3NaXlg)bCo1Q2Kwc-O`hG&t
z>IXOgd1?4iV0cL5Z`w2q?uXHye?vINxieDBb%8y=5KWMB4S#Fmbg(FaYJwey%dH81I)g`
zaXLuZ&dkj0*;g=#3}ui)BMzs|UH(p1#cq0SdU(z=G0ZSr%rLml_)Hn`gkd^
zW_1{Iwj@Pz^IGn4T+L}k&D=_Q;vz-O(RBpo5Ydgx;8_dS5je@}KD!zA5`CyltU?L8
zgbemuxqsFsM>L-qhJ=pT#krtG`RB0McPaFRuVpF6p;M8@Q)>rEhqPlxH0`)
z_FEOJIhmbmRN`!f$FtYGQtns6g8g6$o8%jVtbpC!Mh)X&MM9*T?Oy1b$R(cY&KIsh
zx++46nHWv&?vvkX#W^lj=`a!0*^x&$S`RD%W>*32Q}xmMI|Nu
zgM&`HHHM&@OexfBvsrMu&MA7Rpavxzx43=iy=_kP`98lPxURA#8^R6W*$Vt#Pwtl0Tego#>e?d4}>c=PoAP7eAmkM?u+E8>tU@yP;
z(hCBG6{>{Pg<0mzWV`8*Jy^5861Zkh7KwP5%wFwgZA~5{ixSd-pwiakMuR|Ujw^0O
zKs=RGFX&-yEA%~%>*EwpM>~XBgrkVCvqpifQF*C|MOm@)>c9gb+sRJEF%QN!@nSE%
z6OAtLI&}s|dmmvk%)Q32laN3^yZx93fZDTVU?JL->`XK`;Vj)?!}ttX5;6}0t&G4@
zN)YY?7D?7loli{lj*hx_Em3}c${1Grh``;$<2VX&Od$jte<3a1z;&J=*mW!f2If(I
zAv!}l@gN|D|Hac-To3mx(50s@s|t{+@(QB}-T!T?vl38U4ch52SXIh>h|u?i?4z1+
zVa`#+jYqu!mRs{=0H!JcLu2=70zi2FMC)|S#nL}l>PPJ#qX`#z;&7Ex>@XKaXNahi
z5a*Ps!2;Cg+mrYbq^%9B*(r*X9-dT?QtHp-v)Qk%{ZvnbqPc0#H84>#<9Afo!t0Uh
z{P!eF&qex0&}qg{t+dCEouhB6OENwckkN(~jmqjw-UA2!7j@k^=0;R^)X=W}io4I`
zi1!t4DTDEo2QA*pFwV*PtSUc?*wXiD4+5QIki}wO;@#=1YTVk^)L+9QquOWh0mXRv
zXVX$Ig_onzY^@Ge+J8;993xWLEkV$P)C^R2|DrlugZt2Wuc6SIvtW5_$&3<$VY
zeOR@bWHB0iAtXgwQk6OaaKD-5GF1p_U{MX45EaRv;AxGIaLe;MsJ6I~&S`KIV|jVGS`5%N&1L@1l`(z@mrY^zPUWf2-Wd)3
zD?jGzP9KbvI^uNXl=p60ZhMvRpQFcQMzwQ~F;fyw9@#Q!Dl_&^YFy*at{UhkncH?s
zRB(s@fny;B+fl5_h8^=~E2{XorK(6nh$P~NJ+z9b?}4O91$x9m39)&4D__y|>xSwWm6mV$*DKrIj!MvVQLw{vX00@D+{
zWBU4H^JHR>NV(zQSa0w#>vnjUWvi#Ajf%6fNn405P12cE+B>{YCyJk&LcpAgYXJtR
zS)`!OhtiNvIR3!kf**|e0;Dee*(=xsAUyq8NvHf6nKQ=4i|(6U6iU;cn<-7tGj
zT>Ha$hc$J3j`8ks!UOID<*%_3R9q)D-YepuhJp^yFw$eNlBlmuz|j#in^iwZ%UEzWn#1#Op;_?2+AM7a@g&gpVfxWo@kCIzW*eDPzi0r
z5-Pnl8PzDSpJ2h@bk=QA)!w$vll4&&eC}~^v>?up{981{&CShvqCDcj*$VvvmJ2H>uZeC7Kf@03P|
zmRmBmt?f#EC5=UO9I{e;mPi@h$ln)7E-#$1}tov)D5!8+l(njGT%X
zDs9pCBvuTs9kMBH&+5A{b8G-tjKh|?2Fd!m$zrFL!@-18Qvo`1vx~>!1E$0Lpfa7LQuO-b2hM
z$#Fs$!z3<-d;$`*cRo@%h@oF%6T@P`rN{lt<#>-PNHckBK7ij|AT)mNBESPMPFds6
zlMe~<6ZlI}biY|p!GQY=4D{jel$$NpD;X;0>|^6&6MA;&f9=m4$=?xHU8%WL#$>lYKf)#mB&pRlwzr>aknI@RarGue!x=
zAob6<84N7k`EvMI_Uyi_G}vDGikRMB(*^95rH9+@h?Qh@O6w@!#NFSPKA>x;Zp+jZ
zo8aBhB#82un}_s9D+3ua9ZgipCzqUlxr#6GM^_=$9yI|mdf;LJLesO{b2rF^W&a%M
z3I80%uX(;c5l}+RK}{6gR?s19ZLewCH2M-2)U3Fa$WtO9jI^>lI8nJ1^0K2Q8=JEQ
z)(&ZOW`JAvXIUB2W-PnrD}AV+*XhCbY#@*R_V`jFA_1(3(R1nTUZD5dQ^o$PK3}(;
ztE#hcF)}hzR960$n23<>CVBS7QEbe_i*iC;<824|P|Km#uGyrBSYwg(8X%VQZ|xE2
z7zkO(Q!sFuu=NYPbWFTf3x&rP);(0)yp;VD{3rVdB?b_)SNW;y)U;&Z#`2GaM=_O7
ztj^*W$2AG$<-QwJHSQAn8=}Ow=4_})_(NrHjM}I@*PZi$Gs^1Yr-nK7-SRqxmYmpG
z+{2+i1;1GOk^byq8Z}qbLb5gpb#Di1Fy^+prM2auB@|>rf8S64?3cNrwB{z9%$F5p
z?Lw|9@qE~^8?;@=Q1%Pm9;0RH1Jd{h0nelzJls4mJI<(^WA^-h?BsS6$D1o1Yhi#aI=P^>O?5f|NH4Hx|E5Oa<|
zNH1N#f^)H8aN(N{7NM07JG;2RcjjM$hVClZ^?3baz2>}xJ)nL`^018N!t2(38PWLl
zqS5w};So4)aS}(A5}62a(`hLGqqaJuGFug0mg*g-!o7gq{6|@DCQ208qndzw!Q!8L
z!Bq^n7k=)G^M}1%g<7?#TwM52#n0~y4yU+^FRQ6F-pEyc1whVUZMlut&>BNHXsF3h
zq)9l*9@bO17Vp6P`8yL=gJM?`umk?KUF+KXp{bB8=N-%|@#$`Bg9~Q3|KjlCJWMT)
z%1TyEpnCjBYk(k=K!Yrz`Qr`9C@Y%BJwBN|DwFRt*2e$#k7^EN>)&u0Q&xqJDRU_F
zc*CWp10-A?Phk!*@z?>0iIX!h5zI`a6cjwVE-iE}TL{b)Mwm@GZaQ}AjI~?hkQUsI
zXSk9(VWB^n9zrhW5NDyDAR}@K-{9y97$-0<9#PJ>NL}!Pv_`X0G|;fn2$BTY+qY)&
z<#UE*u(v;hE&@?5i9grm2IzF38GqdH1+(c3AqhZtT^2>Y?3D(q|`?gZ18a4NPy0
zBU1M(V=vp-MOH3i2hbxw#F3vbCO0#)d;|XJ4x^fYK~W~Jm3)Eqgru8}G%w4s_jA@I
z5l{E80C^vCMu8sGp2@VH7f93CpE$iVEdp)`&Z%{C+Kygcr?4oGNyv0yaN_;3@JT7@
zegUNT-W7-&kyOB{GniT;?u?hmZ;kMO0@M{eVF^8JBR=f(1)k6QE(X7Q0McwMrCqnv
z@-yeVUTlCXutcVhwj9-`?1#LmNLY{gfe`pKoU+{mTZ$qS=?dy3cAGQ6v9t9c)z}YN
z6Q3KB@R$)}@0BIpg6Gp!i_y{@%k#Y3e8HKsO_pah|=1}Crmug>oofukbS=Bvmy{k$-e!><~?>J9edKK8kCoVH^1mGK0
zL|mNw9Oii~YN{V1qx`5s`4Ka#LYlIwe~{z)laXfU5{i!WPCu*0H=TMl!*OdL;ErPb
zI2P*(GEh?biiV4T0mbmrEkgg?xgX|7^cT*fa!N9HiGeUe2ST4&9aTOaQviAedGc#qM^Qm*Wc?p`~f*(WO-Lp$zvzHMy3>w*gnAShKa1m>><@Rt-bXuIc5y+eQ?X`_-wE_tL5I$aEq8ugU6xtx42G4qPp93S1X!RMUY)6
zFE)#>zEV^wSX?{I5Y3v!TQamb*B5upd%l$*4?wz&8LiQBHah=HDo?%}xa*g)PCI3+
z4e$GA9e{iTE#3bE09WBdRabeIKWb}-njNI)O#2ZdFnMHSz05a(OluQ5Me%z(%r}dH9>s?+tb54~uLf2ATGZ6^l<)k52#KhO+
zDNwgHFaDK^3<>;o%*i0rVjx)?_zwpD2O0i=MTUuW(29yG{HM7Q#$`ibtf#OZy%F#%
zJ1?qnU;r9wmD!AXW>w*4RW10sHe-E(Ds&Xwr5X;PY!zq_HwKAET!?4&C4wso3dgB!!kDjMY;Uq!l$fjQC5n<
z`K|5kfOlNys`+bwb0o_nJI31M|BzSFG6coV{Mo{K$a7Y9
zU9B@mW8BZ7oibOZnuCv4*K9=KEEXdpu2$Lej-_C+==XuR&c#M%bMBy(`$2eSqa7|b
z^2JeO{A~QB{<}cv0Q4Fq)mgmz+w|{Ra(*TpZtx^8e*byiNx@TH|H}1~wF-G6?8tSr
zyCRM_l=r9#q#NFa0LXo2Xn|)z3lPupSsbE;_(7c@;{b<1NbwOKjX$?**~4`|*xqa+zrdSATPf(Ot>ni+87c!Tyde5)^>
zO7)g1o7ngC!Wh$${*>6R?Q;k?2je>QFHVsl>7(+`IW;74?Cjc8mwW4G`mnzvQ+H{W
z-v5pUe*D`~=qBW8aGhI%pE%OQI?4
zDcV`IB^x0_fHcbMq4Nj03H3EmB^R7yutqZojupg>5JNPl>Ojj{Q}3bW43rr
z4L~Eb+gsjZE#|Q}QPR6)YEMQM<}|jBim&LqqLU*dUy3!t<+_h=?&OOgNFX+{>axb;
zN$U%-9Pn)qJy4ZaXyab4X>EV1>tM@n?{7IA${v;3m;XY4$_0ufF!OF+MT8$n;Wr2z
zxvkkgQuNVl8Y|0jmDBD%{ryUTUyY~g=987-nwRLRL!BD$lRd#Hrs3CN(B~+&z-Z!h
zt8$OtwSjs|pf_n`T4tgvp+DpMNq*r-)OA;785Q>+^50!_A3J%6mKhnDGV`sq!~eXF
z_k%@OdX6K>A7DS*2KUc7LpzFq=*Vmy;3!EhjkASgejk2TwlmGXuGD+9mSa$xT5c^e
zEI`0Yq~#xS)odo$8RtS1|8y+dEPVJ7DX@0z{?&}03kf=0n
z&k*s!gvs@V&0+#x2?{2jj)v--EGz$hdHKDPJ5omHdWRsG9a*;{t{SBM@8}Q0!2vgx3LbV
z*wK!_-7}yn0jxl7ot6%owBz6HbVr)Ru-S|e*zdUpkAb}Qp5W&4e)#z(rh_6l_WcL?
zvk?Fx(G$=BnK|ej125B59EJ(PFy;EbJ=*;!PaFgw@`qV~DnC?wUY;EN8
zx7!Ch;Hc&z^%)1-klrCSJSvztMbP+d|BCoE0mx=<8?Q9-PV+CVYg4$j6GvaUq;Q`%
z%$UrAY@n3terB#Zhc0
z>sm)C?6+6V5qY0o$UJ_6p)Hg45LlomYJ
znl9!K@c!Q2D`Rin7Nrg(PN=6`zsAQCW&ykgHeR2<&>I@TxPZ9ReC-(ExR85?b$+T|
zX!N;0-Us7vtmB^RGV;|tp{v=q6cy1C-*N7^n0p)_1Yc*@RLJiWq+V8BdVJOBz9)S!
z5Iv+V1P$KX8B*buCSeyzb=|ypHrfp$7Yx8c1A8X)Vx`i!TD36t2p?3rM2mS72n6rg
zdeIDeteDx^f#_^-l(i4mQpqp&(1ed@bUe$&w)0rhoNgOEzk%Fs{Mm1V-9*vN?LPO5M0DOSsb?)&O-3kWZE
zK58yK$0sSgN)Mb4ZOW+`9J{_uLz`=L6QG+r2;yuN*giOX;aG_q5P$)xB0y-Gc)T%f
zk5)m=sZRhuLLuscASg7LZznJj=hcx$Vq;0tMnH>?nDdo8RlwtBX{nWmT}08qW2t{Vn$`be!S;C#8NPq#g@qjK#h0c_c_7~tz_eAH-TJ+eY!*|2iVTZg
zz-lYQA`LGcIQb!5)(?5$ARt4fIAZv(vp@(D4Po$>U&sIob}@lm=7=N%dGSZ3tQ!lQA#MIw9yW+&=K;v1#)0DFjO`jo+hx7P&3c0
zzYxpRINR5_Y6Ob|_92{qs#I(FQ)GWHRe}wMM`?pCw
z_vSS8=Gwa&VijSZ(FytoR_U31Q8D3oKT=Uqha>&^`Z_VeW2t#ULOV87N4IJHHHGA_YP%x24SB%K+9{@4KNKd(_jR*D4yfk>mH_4zQyTUI
zU`D5$o2dP>qoc=#EjjagK#gxBAr=pM!QWl-KR=OM@Z_~~uua9vb$;nrg>_N709*zr
za1{=jdym>-dfr&yR~bOWKgR88+&87}7sxJ)&VK~dKM4{Dla8_)NsPxL39)5CmTT#%
zBksta
z`=I`!@zuxczkCHlnjOlb-1XBvnnz8~fIZ9xqszO$bN>;+S+LTPr6qXaiH~Ei;e2^j
zTXL$T&g41@2<;+DbNWssanLqw?44r9L&Dcz=U5URnXe`2<`2`w#w=-$-GtyCf&gX@
zv8L{7<0_0G(S={)Gu8enZA@J&m2yaeEc6Xla1moUC4T?Z)(r8c4|&JF%tt1~MEO_TNjk*5C^(
z<1JhS!rp24?sV=gi2mbu7+eQ%fxRt;vczNZAO>B$yN?PzARBAx*3y6k(Y87|(BYf0qLYUHLgFldkBxSdtx3Re?6apOZ8dWGnpbk@a<3U=Yx4a1K;=$RB2|c=+sWA`$Dr?dWOFW)v-XcH=qo$MnjN(+6~@#6+03`cVDHaJ!D;EIyhY
zq1k@V&gMnRUq#=zw+a15J3s)Aic?Td>oI)S9t2Zdo1U)T*9f*)wP(!p!ri+DJRjpq
zL}LycU|WfikdU0kk54Va;+7rA2Szo=g86kgMdRY~H6WCKvPkt!#I&;2ipugpn@M8f
zUlC-)0lH0*tBX3}CO=8Yh(lVb!F(AjL;mn#ufB|o6Z9PPfq0@*oa&~^MgX$kHL
zDt%*+1LKsRV}}pv%KbE`FA2<`rU+pLBPB`tsP;z1@729MTs4zx40|NOYj4QR@@*PM
zHD?`}fQQ(RcQSCctNw6W*xD_$SV?!fs&4Lb&@L>sF*j1diYR{_$Mk|ZIzEkUXH(b=pLWNQ6`gBbG=`4WF&9++k%T)*tkK@{q+SZBb$pg
zMj&!%eWv3!v3m3*I>yg2+vZbmhMQjsuter302FkWHy&o8XU>_24Lx{FjsK)&KvsVv
zU%R~KGE41%&D~6emW`M9Lu9=4!NdVKWr3PqEYyM;X3;DV1a9Tsf&&MQoZ>U)Uble+
z2+y3omB66(gk(C*-os7YaBIh35)1?y@w{`Sf4@q-d7FtUl1E5pf6e8j!2?$GEH?dV)k^h9UjLvrhA2P)w
zdz)$omx*;$+^OzTAYjN^4;Q!ngAcmm1eL;P5-)Cgxl^mSU6)NfAHOYOuz$QItR1o1
zF#*&MSU~U_oDWK-k?NFkuh(ULn~+n9{KA<2@>}-#U&DkoyN<-weg+k^tf;5^`?BK&
z8)oeH3~K@wq*u%z(m3#Qyp@6O6+hxhZj4??Q`pXF$P!g71E?`A;jvOPF9>#*x{24T
zzszobJ?vo$X?#o3w4nW>55N*2<*xs$u72OFYHfriPmQ@oG`=&e0QTKwPlewjod1HL
zf4(V2z0Vm#H&|M>_jGl*{ZIS$!Zs|j=+RTE3GEY<-{-fOkoz5!6
z6@lP_nscGdrDj`2jhMMclKr>|zDec?K$7W&fZVIY%7aXK6uVCw3Nu
zT^EteR491#fj?eYBf_oRD6Ve%k#}CRPX(vCP%S}J=@E|quB}h{6$qW|NLi{iSzAJRxnLtTU-;kbIT6gPcI#>Qo|1`4eaThiQ?34{s>LMPJWnIX%M8E1C
z{GkVcoc9uKjyQGD*B&{=Cv74q06Q}E8+qo#P_{DcKtVQ_@#|WHCf^LAj8;Vms->P>
zX){|7j_XJhds*sRYUUfGFwy3P*QCCmfns#jMA`KDWrD+FV^-P}kJgjdD4U3fCuQSw
z!7QYUu1LHVx6{90`)9D^)|@-vTca}Mm!!iI2%3!#;dMczD4YHOk94~+Emr06cxGD^
z5PXzc2`3crwaoqwulRY*MU{71bY^#0`6ubgF3^CsH2&<`EEw%rYPQjNj`Jgon!C>jLJq4$-OGH!t^-iVMbKJ~q2{^+Ea-{bC9x_Gun^5aT3RN8GrAqnGW
zFAKyEf_tNnIuiXIi&9R`zkBW4st)KVPyoZObh--nsYnMh9B(LD5HgV_g52k0<4?J?
zGtl<+34Xu>0h?h_3r?bOG>d(24yG)iCe^M*6b&D4UB!+@a@}7BEj8Ds6#>$IeUDQ9
zH>CK-X#Qh&vr`eFGn`wu46IJX>AR2%qW&XPrju?oz&Cin#bh6o%zh1}<^SDocNTsE
z;sedtxN)*vf=+GhW0egD1~pZAS#D
z0OhfQVl}5zlb7bJ9LLZ@Jmj5UM|r^c|EkyTt>qau&$$W@%-H@;Ul&pXDJ#-l
zX5>|-X8D8qlYI8{{ADYmGqnc}P$+ri#W;vJ0oj!;-NBG3a*15rG^@Vcgv+8@E`M20b1O9FoxEs-lWzD>&fM9hTkmj3
zr;URs3*r8JtsBw}f%;3Cz|Y?lN8gNfWV%MZ{=a5}bGS%T-(}lK_((B)F;JZmE;q3n
z6Y3_C*wWPC!SO-C<<%W`xTYYxF{+Hx=QRreiS1=${U7Po+ul~4FNn0&Pz*+`JZgy_PQoCj&=o!`s)*^u57mPtIP%~Q!HIe#~WOV>;njlpzD
zVQ_R6JN%6e=uh5*^YLH0tm<*hDzZ@tX)(YbvU;H!7qzgkVKZchsi9qQeoPGxt(9uG
zor7eW4^0QjggV*JEC-r^MQ7$4{Q{Te=MXx%ph@-$nX8-@?GXHxF`x=cjJo1x*+_S|zy`sc9^^9R0b@ffepIXRv
z??Ul=VOEL@-RM>3+!l%|bnzp$!t4E|`7G+fDb;=M7~QX33n4laQwi9#1JT$xfXtC~
zw^WYTRSm_TfYWOX3j&`p*>KhG{P8*&(;Gz*E?s+%?oij~l#ghjTJj%1GgBdxADzL=OK3kVcY4!p$Ow_4Vl=vJ8hykALas^|A**B_lr$Ts$KRRtJQYBFvjMIdV$yoC&bMBqVZZDv~D|?8TsqYh_pw?-gDoh0*Qej
zZL1@pd$~Ifb9JUsd{B!_T>Jbzm)Vt0TJP|lHlkO$-0d~{q?uw~IwL-pX`0I1YwohD
z=JM($-2WV%0a!<8poVPT_lGsH0l*&wviCOFFVAk*e>N0PDHb=Yr3Qp$?82DY=V-z<
zJ$dk5bEdd70+U_$!8f`WQ&H=wKT#1`sj;ulMM4_y1o(;YzJm%(7`R0-@j_(W%aOKL
z*P$$%z2~6K#3NPGF>krelTvjCqEK^{z$2rLqD@c640$xv@BCn%3WY@%F-IwTM;pde
zg5vic(7t&m#4kDwV_17j5Vy8(TDGx{>o62AjH{(|RZ2NfLsgF*`oqmLC77t+HAn}Y
ztu8@Gy;u2Nv--uZ3YNl!A-hYXj~K&DB-jMm;2FUAt6fkvo-2X`lL6Jxg$fHmB_DxP
zOcXLU{6f%FUK+|B%i-{1x%rvcH!Rtl#SLQc-lKMm1>;FV2UaCbX$Eu$7showr#&vAq4IY0}tiJ3}-9FuTyKY
zAN0taKQBeg4BK1X$jzMbn6`a2u$TU_e%mcU@=y!{LZ7~_{%tQx#Cy9c3VQAeH653gtfwp8gC-^w}!KDE*o}EF_QWf<*zn@-{B_;p5}Z4m
zk1bWcMvXviSrS!Tf{b*HW_kkUvWcH!L848k5$afyPV?5x=4;{=k^$r;;&(?}Pjd@Ci{oC}`
z3eG?1@rI*VWxnpF6-XHVruQkvR%LL&PcM4)EwlJ%m0bt96`0&R2zIdVaRRXz+k-H>
zharly+}zE2+PBJK#p68h%<`ck&hFXQhnqpTO)%f)T=o_BSHgUM+2u*X8AfOCDmrvrgV#~wRwi`}j7v7`9O~|GHfTQoy`)`=?
zM(22ORlJhkV{!V=OK61e?M1(k{bZh9p8)KK%mwJ2Y1f16j4zs?+C^!s>V|@tQDNE
z$6M9_u@NvQ=H{dV4}eW@2cG{2^;sL+E7M-!OV(XUtfT42&hf(Up?VWvYk1equ26>E
zl%B$HQ{EUk-C#6Jtb#kA$CmtX^;+)lm+>f%+K=m4GL9MkMX%hO`3=|{nEA+Lld3t0
zz8*NRUG|OEjwpT+hCRFI2xx*<{(S+k~siKhuAkwUL_xylEGUm
z;1>ZYB;hIQAOBVdc!e}V9(f%p0f=|p#N?XGUq|phNp+*c%Ul^#TMeE7@j`=udBSQb
zsPHRKJdOoHN`c~M5&OxLac4UN_oy1XmwL095cRu_rJJx;K8&J
zA$hwuT*EBM7nJn_G{%TQ6kHAPE+BJY=5a~q`hrs#&DJj%IH&+VBCkS2%g9Kt8(Bh(
zHbxb))%$>{{-v?#CGTe#?)q#=x0@LmWYo%XcT*hn!nyJ3uwHNl
z|FCG3`|KYa^3Yu`v+4}^1~!yDa6owS<{#sUSDW-PCJsWkG~)%*EWDoQa5$UN=fuC;
z#1O;XDOtYyxlAotixhgKMQONa-|FG9J|^{!&CFU-_O9KFwSAxb>L9pA7XO-!$YBG3
zaiz_adDh%ZRzW-h$?rYTDbmPrp-g*5ffvYdMg>#k*=_&j3?IZ-35iUJDLpj&nz)`?
z(269w+CV-fhr(Fdi?_vWZb~Q
zmUDUGGKbNVmP-tq!)Om)ZR+v)k+3#ilwHTH|Mz%oN97NvBnzHCF#4R{10uq@Z@d2j
zp7LqH2^G#z+QtL0k;!A&TQE&>QsEMjnmmP)s@yv_qXuIB)7z}9F5frwDFwg6{8t`)
zM(ka!rN$#Rw=P&1x5C@_gY#tX9ff~JhKYok2%HZ`XUQ1o(*Be9#N13j7q=I@EUQXr
zW`H(kaoSloN9q+^rQaCSBCN%4b5j79aAWW)6^er|UVASbB-s7#xnW&0Ua1)g+noAoW$fvv$!I=i1v-07OkrxzsbBRcNKT6n
zu*{T!W(*RK8@wetAD>4?Z=b^8rKxZKcSa&@2JQW5{bKr|(Fhfj8U;u*D!<2P4
z*~R=kaD6vXcBUVxlD!CW*{U9+yGylI%ZXCGzR{ZFk?R_@v~C%Hz#sR$NG92R9m^@M
zq;Hki@oL@v#_FdQG<@3aT)TU(nb{QtB|UCH$c+FgZwy8Mj8%Oz3`;sM_jzhc%7jBs
zc>)K@CLBVN*A52=cT~9px!=e;d8LQaqlxtcSRi*EZtk0rWa_gW`HBJWfIF=RUYa}U
z5+%yU8(wo8Q*$nUK*NSrcs}%}R-Z5eeSk^39gXYVK^EAv!qtU94XCALYi^u4^V#(-
z&`U&&FAqCizbS=RY0k#0m)7$2m_(j~xx?c`!~V|NygI%aAkF-hvbpC=A^bZoo%#07
z4=gZ%7akv4m2L$qjmr8Hwe~B6=bs|T#S|Z)it~tNK()H`?8q~hU})v-YXvTcSqaAT
zs{SSlfe0pIu(?}lkC$v`%$Zq8*<=YyeE>JDMnn`o{euaonY<6g9f;f6x4;s)mNf+{
zf;QeMm2pC$l7GnQ0FWmC+k7V`5qXsL4v6(%)i1e1pj8{`IA>cMT?Ae`n8Hj>sYstA
zJ(o17%~pTFKy#2zEef9pW~bHIc)3v5B-51Zi&(fd_oKEI6?71L9-oc8r~>FR1?
zN2w@hbelOzqXdFxFWG;)SRjodncF+1wSb9{oV2~OdV=`Tv&;jqZ{7@a@K;q9CyrS(
z`uG4z$FQ_!Lqnirbw!_pj+-KCkbFm!N=1N#MR6HYXDV=L1a56wr6ze>+c$K^-5Npt
z;<{Q#|GTB_%5bGP6vD}FLeN;!zki6PPMO2tvgQ{+l(eQ2UKWZd0RfSGr1^}cI&ug1
zsm!|z3tbw1);x$9pChM6RC;VN%s$|rA6#9a?*80f(~6x>2FPaP;Osb>bcTYttK*z9
zL+;zgCXR+qH;PB)6csTQ^iV3cb&Ov$&Il0WHgy|ohk`nfe95CE3fl$Cw@s&wb6}>X
zfrXhcVTlXx=5eFgUy}5mO#BM6hO0;WMe>@yzBpd{-Q|g{Y$hf*&fRZ~H?7qhW
zuUj0crn=|?eae|$vWW74y}QP3F}f*>%?XG#m9ai2u2p7-j_&0-q(p312p-oIrSrW=
zNh^-_*Y=(0!lV)2WOuuI-f|$7H@84AH1Z~T{J1$t3=Fuk0I#^vw5ZX$_9Ej|m>i!J
za0$6ICn;X(nZRz3bG>AyequQ1@r2>&ua)Tp$8>wvO*`{_6A~kRd$b;O2Dc=D(VJq|
zTOP~KxTQ!^|9>EzlK1f!{(qm09XrIRmljJyE_-&7V)9G4!TPI$M0%2;}IEB
zt55bzNlCL@4U<0jetRZ{Vlf+j!e*_+9M_R(-QW%7a-P|o$qDRrC469#q{=r@cu_1L
zn0J2VrsFo%4Zt}R2-|@A_Ff1^JUzMqMJlD5Jg}C&aCqU(-_#jg7k+~4^i*FbcaRwt
z)f1;xlh?UX-jw8D{pr95qtbw_w4ie^Vl=EgM=Sc|sR$39zP!&0Qpaxl0BY1OthP>R
z1S0rGB1^JJ`IIbK0u}h?qoTmy{i-Ogb1)sD{j*`uRgc%rKrjTgk&NS1AwePOgiU(b
zVEyY{du&3BhJxfEl|a-9o66^!pD$z$abqb{SJ}GVWPl*a2UIVJrqZYjGViLvs0tW;
zz#|VcrMrVI!URd%#aK>LW43?}Xk1%u(i&}R!V7WWB?<-%m(*y9T$t%@o1MNBntmE4
z&Lfp$8I69VH+;Gb=T#MYg$z-eW31lJAsuWomoLSfyz%5(aF
zDd~xd`nnw2p9)HGTs%}IudIP1~N&&u*i6K!YB3PWLC8tZj?K1
zVw@!Y_V%mkNwl2zH~N>v{vR1sRnLYe1L8n)c_su%BS-JsljGP}k0ZQIJ5;^!(QH{X
z*8crs7s>kRF8>LAohkh9qRnj$1Pq9?xv+zg-5`u3wv(P=2oC?bYb`FWsenC&;Wn7Q
zSl=?0y1wYPdymk%?0zWz0tNgEU~P)d9MbCp9w^I1#fJrL1+blE6?12Fmg;Y#-j5Y?
zU*iw`aCQlalS3=i(5Td?n8jT_8=o?;wDMRG4{aF)$g4xReM%H!lGoY3R#Z{l0bKPe
zE`W~;v4}?JAE*5bW-13lfdp-BLZOo=l{*dqQ;}-
zwXrP48V5!p7J~KoZ9R_%ml_ZnoyYLx5H`G+T94n{t@{4T$p(IbUfJIP{y4hBA4`bk
zyDxVa#J~-Ge`q=Rg#bAm#)Yw5eO1mFoURd34?K|F1aJ`Ww`Y+nCU`|o7z?dqU!m()q9Spx0eR
zCn2x&nK$nlN$PO7Ig<_;((MAbqP}&`i;e;)O1^6#XWf21mj_0L0QHnP*=6{@I`7S?
z`gQ+exeuDG-v$X7(!n{gU@Sl05}s3I#scGbKdV;ClVN&iIEVg^Md}}x*WSi
zH31b_w>>tosb1GW!HfHJR`z7u8B9$$Jh7U3kn`R`*L!@u!?Cd64mrEC;9+z@m*OFv
z{6p82_JOa3bLF0N|Dj;N;RJSEFs6SO|4JQY(+DZS>dpIuAunU6vI%vdF(PrNF=D=(
z<@~q;gu#)e4;ro)5l>^-&=Km^*mVJ1OrC%O?L8pASksjx@m{I{_JWKEaAogp#sHC~
zYCe5_?n0Z}c!!?oJ(E^5vj^hWoZU(v<)=LZs&M#VJm-M$DZqt5t`;aKO}Gw3v*~Q}
zOYK?+Jcxn!Ti*O&Fb=soFeYznx5dL#IA~>>uruN@ZF+g*X1=pxH`RU5kTFhaC(oW7
z05mFc
zdsO8IS8%%J-adv@L~XsC(%;Q=_!VBM0092W+ae$891jsqnkI19RVN
zv4J(|MPES8$F}gs8cu9?&wpX?MqAL$RlkDMH%yI|;7xYrI!}fpN&rdWHvo7-PPt2$
zjd!lGf47UumlSt^LKA$GTwuSTykyg@21c!qs<(Zmsi}|p(OIDauBPtit=L1_p2S8L
z$sG%%2=lX^5Fq)zZA@@qP~MfriofDuh80=YJ!i}0Edphp@JFPVXYX*A)W1h1MsRx-
zpp)5Mi=;SKaRBKxumlB0eht~PB0Naw#zkRB|M
z8C>eu^P>c0^4{#esYaiN@jNwNCJ%sh^_45brtoZY0;Cp!GpOjBFU~^5zNEm5e1>tS
z*lxO&0xT$`Mz^*z|EN^NOE~0uAXyQU3syxwn?cM`6bUkD0VCaqB}=bOLHnO3qi>Rg
zvOcHc3UD306G|l+SCVPm)N^^=(}}8o9}b&e`7FJ<5M3Kk^qtzWqJ!fDmoDUcm#%Vq
z;PL_Tsdw3O`_3aF$l*5LHwUMbO3h{dtDoCzg^qXXGfnYc_|@S0>*cy_0b(y8XCbF#
zHG`4|2otja8=w6WCInTDu9*$l-?AcE=UO#oELYfsq*(*-o1NTj746s4lR=C7ayR)|
za+)Vf!Bc|rIG<~*ECA1YSA_Tq*qFMzR!?ES|^hYqplP*xtfpC{ko$voBR%DabwrSjpQzcY#Dx
zX=CmMu#IToIi-Kb-|PpBGV-dawv9zEFJD}4vq5mYc2GgNHtd;+eOEp{<*_FiuJjbq
zR{%>@+#@22Ivxrxe|LRn=W3T-zG`GpcQv0Jpk6Bg_aW7PN1{$1Fx^Z>)OAnlY1a%9
zvo37Tpea3-?e?|+oKDsU|DNMN$~Vfl?vQEi;skGAT~L1%g*{t^x{w0--_R+~8@Fdt
zz%I6Px|u09DR=N?gP8i
za#qNV-SP#g=3U9iaIOF9LQDvNrPmt$oB&(+D2I1|HE7EaR+>oEqZ%YGb{RglLtmc5CCgMAqakVVqweZ`+n<+3m^Y8T
z?>2ufh8kEr7)ch#)@~t?
z?Ce{=QL60q0EveLvLHg-Ad@nrBwVsW!-@Z8FOf6Y1CXS=*`w_1~Pxb3+>9g6RwpV)zGN=
zp9Y=!0o(QJW^B=m*}rCBl)4<=FpF40In@nRZKuC0NQ1TDZzQR(98{nJ5x_*4_R5q=
zHlU);AL@dkN#b#OTgI>pU){F{c0HdyH^&eN1WHQp78COm>8&HrAqZOP0c=_5ejR<~hJ)kxu0=`&&w9;?0`CTZ&{($%tH(g)masejuP*p8_sRG7
zlek!a;AZtsKF{#cVjEw5e@>UjWzW;$)Yh*~K)*+o_d;y##S7GhAsj37Usd_j%meN+
z2=h4;mQz(A62CwRT^Qk;Rx_KcqA_~iv`jaexpsvRDv9im4rbThcbmv^`A@`&6e{3G
z5sN76ogb+lMoo3|f|bw5vd{Pr*depLP@j0M#1l3$|Hlm$mkbb0r8!A0E9uF8qVscE
z2`Q<0Mw*N>`;(sA9>juaO#m&yAQKcev+1(~DeDY40i#*X8zy6KSkTzS
zW(`j|+*5J@y-lMCzZM`%#F?%_^#(I8F^&Mp8r{v>=Ezf`=ia1yXCbpy-QvgISubg6UG@G$rNg`3%WZ-V$
zFRxDE1a{w|xVkeK8Jc=c$B05-Qs*J*iC{I-Yv2%2UnN*t%s_oZ1RRUJHpti2pEtOC
z22F4|MGwp?^nmyq#WpyP&T@|`oz+MySGgB{;i|-@>;As2sOJebSXWjF{f`
z(xUvU|7otFD^1{*CnbO{LwWB<5`Nhz1fE?o1O1gLcg?b>KClm@iAyY+>>dI5FsXfr
z)C7rD|6`i<;
z9dqTbD(!9wYK;|e-l-lNTlq6TT-(zsbkxgmGb5N=JnPkFf_LZ3xOn~RAL@l{gUJTY
ze@7nRVD9!{7aUkiE1+)&o}~;*N^e}UM%)~Mw_@BPLz@E
ztl|_9QcQqV+_-(F>E21>vqtrUr7wycMmsRflt(_G4WoTdNFc{Ya+FP@hj1;aUBgxd
z`iMW3_*W-gs37}+yIGEE5}5%c*XUqjoFWUSKUp^Oy0&1$$`goLLr4l?UwFHQ8Z3+t
zGVtOA#{3qKKb(LS6n6KV-)zBY)CLR|OaiVmn;c5|_MZF@%O%O4PPEnZRTT)O|EE#h
zZw|KT;CxR1&Syh8px}9F;rEie{em#gRrZV{Oq+wzYF+-q!uw(H(u48s6`PB5SHP
z+23OTrk9h|i`}>>fCjmvKX=^S@QLQG#>KUB?wt=R*o>3;?Z6bz7QSa~z%X8^0Xo?=_qPJLmD4s5hZ@~}XzUbXdicF;&1t%IWA22$
z;Q5`_rWRFL+;(RgW5sjtVSNUb(wKJMvHlY~g-~qR;a5my#dK(H8cqJ1$nlFg?rSnY
zUf!*XmgVcbRT@fQWm#lFYB(hZvnBI8Qyo>epGuP}2>ur-t?Bhg5rmHRBayU=MSB{p
zyHaItXo=WLDF@7F&(rUJafr$AxdZfz&wKs!HHi`*89-Oxy8=VX|6fPf7XUwJEBey9
z{OKUyLFD`{VwG(xjlRSnDO;nSoF6s)pC|&9FyeE|bVl{Z&an~bb#
zCQPz7b+(qJYUIXl^?4l91{{HdGn#@q}(yL#gupX^C#9D#>M*6rM&P1Oa@Web!
zg0Jt&w{`8jDMNVmyc1&;`w$rM$zN4HMNL1=az3=99H6@JPx8Qk?DFdf?i+$g(V*$!
ziz(WlLPH?CeP;gT`rMQs^W~qRo_YQi3oeQVdv+x>TK&rB1Y&lrc>}@qo5x
z9d}#?uroqvUC)&1KI6`<^H{ntVd4U_iwmTmQ`1Mbv{juV8FxbySI-M#AZNfcc097;
zRsPxofXDu4uePK4GvP;x-p+fH+WC6-!QB+uW?yGsu`w{iR3ZUFjzc1Mjage%u!~?3
z6V)+YFArYVkMJu|`+OC7Zm__swy^rcbOw7=Ji0Oq)N-rF*#6X2cgaLj}=o0Nxr9dP4}+&lp4)lSG|NZT~>O5ksZ_uU==}+f6M#KML*vizN$==BPeN
ztzE7jaE|pGAkYR>Q82{7xWuBen&rx
z7C&suOcO}eJKUR<$SIy*td%y7=BH2#ySqzB$uhWZhk&7`!!vFNAu&43w;xwaqm07wtetDa^UgwL+{H&K2Q2j
zgvLyAkRATbt+G)!$QG_W6>B~c>V&)+jk7>2%vdj^Z-Jiy7B1k9m=Q66cA%(-WH>c9O`KCcojeAGT+Is)oB0Fp&92<%ZeO$Li-kkNGAh
zhJKvcN!eaes=cZ{aP^xZ`=J`)@^f875H5!?zrCA&+KLDH*0AxsXM$UB&b}(1o~c4b
zDTT%!p3FB)Wxsl0ClNiEbxHd4?6a!2)j;?157CDM15lz;7^C81fyPtBkI!>;qi4d=@
zr?BW#Wv4MZ6}d3A#Et7*w`!qYI6OeiN}q>C#@?%FS`OU6oMG!nW6j+K$aUJ>rjH
zv$rC#6GqHw`Bai^+js1X4P)IzB9!BBY;&ycJUDm>H%q2v!h^9Q$dI!>5`6l+W8-9y
zdB0gPkqj%Y=|eo8tXVB?md3&%cG3cd*i%G7)fD^8C_Fz;y9%D6V4flLa15Byp1YEp
z5-D=^Ro1GL-^Y&7k}4DxeS~mr*`6Ibq51}9woM+dT}d%%j(8sX=0|Z_Gt?W6E4m~q4R-9Ql!5Qu#(i*47~~7_
z{>_v0`RGOC9F@Xj`mhe1yF*k*zrs->qZxhoA&+BvAy2iK+;&^}HoFHiv~)qi$g73v
z@#mNH(pfd_>!h|HS=Xsi)=CdbImFxM8?0hZl~{Jlu=N8n-_$d&U&3a^-A({$$~;DCGV
zuK}^S-k~@5g@GvLOOY(^%*D+-bn(RDIKHq6j(Oebs$v=0uL??Co)UjFFzM-SichxrN_Ka^MnyGOPd-Yab=lX_l&r^Un?l8N^(B5+>+c3a4=rZv
zp>3fg4_==9HGfxK!OS(G+gRNOpH9xLo&L%8;mzP>VVZSXt%sT0xh*@K>RXtfUt!7f
z-A*P5v(^DWdD1KDONSumeT!a66BEsFPnMb?rYBucoh&y#2Z3XAIh@y=R*^+>NBXdIjoB;g>Z%L6_%9zfKQxKw
zUV_(yLwMQ@Y!ZaM#4j3Z#0Ok6dF**!BD%
zS-aqzud?3dIizK>doU{xqYJ8^Y@7Vk<$1;8M`;VF^Ydw(NLc3Z?WGF%{nG+NUY*|{
zhmq45xHCEPrsX0eWe*OefqZgZ~5Rxm7k(usD^FY8%-t7s(DZX>h{D+X49CX3CT@&j^GVll&`)Nh%7P&zWsGq?3)4kKS+V7I8N=oThHoR21
zF-F#w65+p|pLc6)AJQ<%Y9hZ~0ZAe;@vA`~LLurLYoc~RHf;e@@&joRcnQAHNoLB{
zq1t84)-F%bm*1xW_0jC|)3wB54h=QCD8@k#jk0dq|8(jU1529F2*tqnTRV+=i3-!V?Lder8(^@F{oqG+3)7jJd
z)K?CJgThwm*QNs*KMK+UnP#o$qp~m+TuaHO7o@tC*(a#%cZA=YeijH*6ZrG3dyU7~
zt;!ldI>tR0D!k46NE9`bcn+nDgad)fwQhj{V#QP$mUhM=IAP3_uCt?mH7-A}A%5OO
z)*-6jaiVQXF2PfHa4^E++7T`lnjZRKZ6Ij#2>(Vn6ND;h^gdGwiEv?f&&#L(PN_Ht
z{oI~~h5eD7e-L05#y4YD$1%#p*_-KJE;|QUf=>}&)n;~ep<*$wx2Px=bkmE3`?y~Y
zbB;EFRO}EQ68ND4(Xp^_m_0ZZ^8|9ksyy*Dv9rJX)6~k!{90D#&2`D?-)x56C;Gy}
zCC>{GB$|gOJ~^ALenEX(%;8Ti`4B3dYP9$x?jvB=?ex^5VsiCim7%p5-lkLh9iy?{
zyMvayD;t03Qd4bh|2}8ze?0TUMplQZj_Df1`-_HEOD!$0fqS7M7)@WXrzE}yZa1%t
z9fjE7U6I)KjV2E&h|6vr8uhM0=C@<1;Y>LtLmApNMNjn#24(h{ff*}Y*H9krduxrhf4uM
zef96D9+F?^`^}Y2DL>c~5usX=v5rlD24Jbt&>xoOfmp&o2{Cz@bsese1;)}alJAb|
zYym#iG2Ls6HvP5`C*O}9{qvVM!?E(bPN{*9EwLPF@Yjj6E&yv2qp8ryQGp|0OhfD~
zJC~iFn#q;80P}IwbF0$VhOu6o=OUZQE3Ql*9AvgMp|W~=1S4PZqd28
z;|Lh5ECy$a85?~5k91@VogmR!2`x8Pos3b>LWc2ra}Fhd!|=4lW131nC=ny+k_=P2
z6Q+>96_S|N5jyV%zQX{Au9*B<%sOtm699mHE%QGEL!i9jh?~VCuh}$54co(`a0JbF
z-@r+B=Q9IKT8P6zj%5yJGhFe1ag^GS3a6!$We{dn|6Dz`ki1lhi`h9!exPsX1BkXN
zUS1nTC2#U)?kgj&X5488*@I!EoN1=tYbZbUB)%b+SR67(-8)w_>#jLF%U3s0dtJ!P
zGQIFnS4*X5e#&~`XSS%qh#Iy|)nM)~{JilxjCfI*5*|)Wp;_hHs9jlUrkEqi3cU2c
z1TC<63P=#4m1u|r`WZx
zR5Xj{(c_Z?Z1QQlsXTKP5hLBf1lzO3(vY$U;wX-79+)VL)!Pj#;lnpR2Rt9|(f`l@
zw0SV14rlFmx*0)EPU_E_Tlkf;Qo_{>W2nQ)$xWFG
zr$w(d_nV{6hMMrmvnq{>e;~#+mM=Iifk5QTO7k{9u2nd>ZErb!vPZ68XlS|p_Gr(q
zBQ5N^TbXG_@U`VlKG8c6a7+o@sk*wHGpsRPH{((FKJc<8%v2H;q
zSQt~~avIkp6VWN9q{OW@(IRGj5fR6oi{1PpA5OuAIbk7+Puemw8Nki!-c|-G4Wfo<
zpBb_2^+F>@3lcj$#t*`LlV_0n@+WBA2|{>Ru6Cp@D7_qhL@p9Bh(pZYc{Yd#78Qd9P5ci^et_&EN5pp|=2
zMP&PJOOU@5H!TVc>odzd%#2Ng0d2Yiwlq@{(uL#x1lQ}s)s(HGX>qJ|0~EFJ@BJ6I
z=l_Lgo6I~-DLTvw249KV8&_nIzk>m{9FfVK#`$hVlS?7YETuWEs*|AV?t@^G2x~u(8nS$Y2
z>d@&Vor`<*V0&BmRT8o=>GjJ2F){tV&Zd#+pt|D3SV_hNN7%<{Gq2b7zmhlY3S!Tz
z@kLzB1zN`BiA%=<0s|GemFGf-w-dx?ZDkH*qA480zmQAnNba0Rz=nRqWecJxZh1@>
zZw>Jc)RL=r#<0IAjH&LGWnG?C?RV?QN_lR(8ACCO$)zvZu<#6%SFLvw?(@ONWE`ao
zBi1l{KSI_8O}C_;kpwo^^9a#dfj?~p#q0+Anew3W?Tn?To2%q`P{)X7xMGQ$lHE~+
z-x1ctu%E~mTt#Ebuk6F|(;YUmmqnU>?h$K$_-h&Oi^Fcl^0-R=c>A=lXo6Y;gZ(5&
zF@4cx+dD<2^z4Gr(_6V-N9X4e_^YRm1+RB52#vLBIITF`)cU>6zcadH
znm(g>VOMd19mha5;9*5xM_L0QZ0XK7T3VoEWi)d=UZ
z8OiB>=yqKdq>`w+Tp|k*znR5kTqh}OGNRMkl{HZAN$LRU$knX$QC7dNhyW~HDrQI4
zfEEPPh-BR*Qc@Jy?sC+7hh$s;cCr+b^xsTFEsXfNv*kgGgg8ZId}P_!AaRhJ9U%S3
zaG>N=BW6a)f&%5lR0<@rBJJBf|D;zW2kF%_XtLyTjLXBZWI{4BL>371i!-k4=xh}U
zVTS&6RM(5k
z@2?k|*4oC@pH1uHHNuWUP4utD%il;PSYxi2B|-5Ta$JyV`kQioO4Vz*7>mmaU5JWp
zxUQN)^a^STrm6>$5$guV-*-c7{wSuq@s|`x|N0$f;x9I$NZ=Q5q?skFgB<>aXWEws
z`gFj>cmCfabj{&e@%l*D<)7eui}9+Go{~StdM_rj!TBdg&mee&k0S^szv36U|B5@#
z>rSo;Rr_UBLXkRD!5$}b~Nb0Y^i
z6uXniKk-E^%3^$Gk#$<0hw-Iul)GjF`t!Ho1
z9eCo*t>|8}aXp8ttR#)mZdhUVUp~IC1tKCs{#Ierw4#_lFu}LfAKwn0_+Ep%hgmt~
zvGY>I&69oP>t>+w+u?yVOCfj}G-b>yeM2h;`7d(^(%tz7GY6EVf_JVTUivSIyYXiO
zWoHZ3YV0MIC*c1cbtY>V5)%V(l+EifH7-?wO&*xvtzv1R5IJj%59;BF%pG71=H^S>
zA$XMXMhxvj?Y-V>DGR3e4|MwlZD|3Xd^N48w6re#+TOepJb}ol&El@l@$=>{tTNjN
zze*SzNFH3IY_k!&i*U~-TN&g=ttZvoefv~u+DoVzVv2zRPZ3J_;e|(%_UhzRfVd7W
zTU5{11`)dGPkTVnIV<+hWHC+RaB%om6*oMOrDh71g20VCBV*iYp>K&z9z~!Jx6Wa#
zmti^(FD#8RL0oia_zgr15sxnH_m3QgFAsJB<+qI?6*nx~`uw4FaqYCW?L+BdBdr<$
zEY!j`98ZRKi4tv-7-w!@3U2%q9RAbzhz`;BzHaRi>fLz7{*sL4^LR(b$XhLM^NNc(
zK9a)SboYU0t0v&fGg?qh`Qbad6vZ9m6g&}9tIAvesM*_d#4lxs!ID@p=&VU-)f{g9HN9;?KhjURLvVG(H+#br0jAT_5Px|{UOoD
zG~kmy(=To8H1je$!|R8>I6@SYwX~Dj)U-XRT|V_i@C^B^t&=`rwr;?iz^WV$mu|^&
zt=e&f6!h1J2TNo;s5$X433zvE?HRnfuS=sTxurDr#o-n;$#I*9+~>huBP6*mL~Ts{
z$jFW|{H7$S>kq}+r>3A)fFET2(Mav|;?&ap7F{1Te+fU;lY}n1Pea+B2-eu#hy;q>P7R(}B4amLw
z@*hc^?T@;jL&|mH13U9{_R7$Zh{xuX-n|#aA*l$h&@RwTapsdt?F;NPYe`(P_F;xA
z#8CiKqX?nkO3L@0=&lhfD=Q|mdr>jw@vHC;1ulabg+dK(#*GF1^F)iCU2FTMPYAIj
zD;d|iytUlxk>*@cRqWY{Tirv>3pxAz
zrcU!Q+CDZFz`MxO!#{aem_(?bU9-gGnOB^{%Xf0OjQ&6`afI&b!Z$cdE9+Qs$_0`-
zfd-FfC0Yx4LQ_nhaLcP12xmUBgclxS91R~{u|a-ox%2yt55V2Dp449);b@1x`=Cy4
z{{H!Goe}fj%7p@~@S)eXH6FF+A0GL@P9VZOUgfU=Q(9*Ps^T1mI7CT4=m?kNkd#b^
zXn@pFOiV@Zi~zH$$MK~ckGY`n@7m2K@8b~1^JzZ$b9((*TUN56O0OCIjt?dZ1bwTN
zNVA^U-amFd@PragxN$MchmIjZDm@Lds{k+KD8<>%7{H}i_KY{M?+aq?(&G>|y;EJ*
z^^X2;D9&%1(UgtbzDE%F%F3UgnYiBvyULeI7Q~>~plH@hu~Cvz)sv&_?n2;GUAD-{
zEG|6k`3{#G#PKblg1>bHYbLADyoMQGO}W!-SdpgIS0j6CsjMK=%Nwz8RPFD4zzQd`
z;jXJax8oKPBi+w?HM
zL;ll7M6MZa|5*LIb{D*`w#Ot4u%{7>r7ez%F@ZZ-p6EI6mq)jSEm5~6EEa+~p>YM7
zqLKR(va*E%U5#lK^GDpK#0lpl9}f^4hGu>lAQ_;1>W&SZ}Z22v(0Tkic_`^
z9es9deRGQ*OjuB^EQp02p)zG@7bq&}?|!{`AmE!pL!N=;^r5UXZ!ObZ(qFcCp%gTY
zGVJ_>{&-C#Ciz$trSNP4LOa?1+Te9bPJ`3mA90>$ZmuG#UEMR6UdUFwc2~4$6rVPU
z&-=15X?AnpF>Sh*F4z2y*MI1=eg4<|n4-3hA24O&7bn+%?R?Ynlr)ru44WO@ePpX8
z-#{XhnUmCeQtiUv{U8m%4{|VSEh+?p!l$Z>A({Z{VHjWN2MmQ}SS|e(4%ed}*MgoX
zIr;JufftV&(2!S)>CLbZuRN=c5${I?_a}N*JGR~VN?=NX>*F8%&*l9SiRkG6s;`|}
z#oATVS=UFo;h;Kp
z0n(joWXzhVvHq|IVE5TW&n|ttP;#$URsz~@51+oPAH}{A6bk=x9=`jkv)WtpRQ%NT
zB=P2jw{?D%PvW{Sx|4d)K6X3)`J(-I@((0#FOqtnAH4WtFCrz)1i!rWD3&#vv4F8s
znC8?@Q+0L6u-~@`Vtt3V(^FxH-dHT_#+?y{{<#%K5BF|Tl_R;kib0_N(wJ?IZ#2C@
zF=VDItqiXHUKtVcXANcOGC^`YP92-DkSCyE3#hyv#fvVB;9-|-rvaw>Pi3MuhNtHf
zZwB6yqRG!H>J~)=l^e4k^cL?>aqYPtw?0`x$~G7HT|7t-yc~){(hzUG!$Bu#Q6&5a
zn~>K#5Rwkx*lxo}AVQrS>sTcSb~Dj~oZ3I#(Y(W`e(f$C;?#hU*CcdWH2y
zW&=S_wLyqH$$8HXw;nC?wS5FhB(QAVNH||plJaAXw+OyA@B7RQ@p--Jf{%eQD{05zx{qg`GH)yc0@)Ng0Eq
zu_r5Hb`P!=2#FfM$BG|3(j0Pg*)`RaAuU2t4&X%cY78GST3)?;?;lde%=veL}p
z6xFJ#+%icZY{SCpooyfNNhy01+yxY+g2U|dTL%Yr?ACh`g^-<=!t@E`u-Diumh}uT
z$B3Ll_k>$Z0H&lsF|Xp@oxD4`3Hae9vgtvgAA35;Z$^3Fk@zt4|L-Q)XxV=B8_-kw
z8UOxTZa8SuVPg}5;`ozzgoS9_+t>RaN2I36ae1l#Ja9O++pjZ4|Fq2kazbR0CdR8lJ9BZZ}%6?xu2D)Qqk}SyX0PH%<8i3}w?he?Mn
zuJ{M6z1R;5Gm>0ray<3*c*oti*G~GeFz@ZqrUdLv-ayDiUE;BQgaN*W1P$cmjr6vGCowwF{DPzc}^*W3OBs>I=@Nht`%a}=EWd_#D&Y`x&j&G(H!1?oB92tZ_
z7)Z-Q8Z~J9LgCl>B^a8EMk9_An)69rlrLTQg+(OAb7aHN64&aQ4cNvb2$oe9x}=rW
zz^P^cyR`n?*I*NZT$i;(EXO;AFrv&un1(Xep^o<18ckHu7VC*tLJcqCi8#0_naTs%EY2
z@oTMfVp?j>{03zU#d*euhM#Pi<#9r7cCErDkbo7NQf@@%gZqI(#;GIkDG+ptP=qScH
zxaN><8FPCG(R!K{wVU+fz}|LJ`N+49}-dRvE3t?uUypb6PXtVeY?Wr2CnA@yUGyQ&U1)|
zC9X;GJUZ<`WJ4g&pHBuMzdZ(F52{u#8Q?ah6+~*`u0TBzw3Q2kK5RKvC!al{e)24V
z6T9TH>wEjlo?dlDL>}Vg9Y(&ox{?BhZ=E911{aA4N4&=M#_@k6Cgd4tYoe+D1-~Z1
z@s7l?#0EFjsi~n!A1_>7nF6}frv9|w#LB%=NFA$SHr^jmksWL}N9NExpDl|!CX6<9x79}fInEY@J}J=x?&PVV%>61|ILZR@msZpq40uzW)N{Dw^Y
z<2r9Ojtl>jO94|P-If!n*XcrDtkxeCgM7jJXeIb)@T@HGfgJ>rl(QrcHO
zyo5~Gta3il6Y_eZHq3t4@|kNC)|uReej)e0c@WIZl{Dg)(dac~SFo{SR2Mhx?|)iW
zBE>XDvF0=TZIwub*aB1Y*Ski|*g`+>{SW0F&0LS#k2pw#OD^@5zVg_5?pd3>w~={F
zPt{qZ%vm6T_&fU!7VGA4Z!^(_mgCcOd_$2$ivWP3)KT28^>i(vuRg@byMd3T32Qo<
z?c^`5-|QU1+b*BE_NRoCAO8NoYzf=+!c%PHmDS6xU#jRwry++YbhwpTC9+ab9iG5P
zk_ETR+37|*3UQ#!RTeQyOO@vUf
za@F4$NF|>>74J|v!$mwQ%hkf=xGd4>X{*Op|A1O+V}Ay{o}HVkH-H8_2-SbyK_W5a
zwd-;IF_`SNP~Ym&SC9bvXe%!%>EXS|22^j)V;N>uxoVlkiz5kkX>@ys1?TN@dPsfF
z&PVDF1yR5-Gb%<5cX1V>$f|KOD=8OXeo(7YIkrvdo-?;G{{HpqtW9*o^FjiW#xy1U
z+b>vf#+rr@-_CAPmk@%t+b3i_;LH8GVcdm|YevOyLNBGzJ<(Y^zi|n}f_0cjNgLV#
zdPj>qjRJKZ;ZW-|S)-?2-F0Q~bcZpY*)OhZ&Ui3A+dph=*tq?R@^yK^8oie1T!_>|
zhf5Y_KX#ADAmX)a(4O4l7Obz#UgiGKxR40Pp9K>Q{Xk`p>MMb~qG6k31l1)>Z@xbq
z7)gU$F#OY+v}p;54={&^nV>qqVf!%ICI6MDQMV1eP1S-MmJS||-mf;K9$?JCS4&%+
zJ(n#_UNJZ{r1T$x!fns`NtC;btlK@w92LbYChr~(88FVr>>^o#DFwN2gLW=W2oqWt
z$-LLwiNhXiIZ;vO%#1LX(>lQ^bMEn5TkM>)urOlDzP}mAy4=vgHtEx7J=V>Q4WcE$
z8tl6n$pj@bZC3jW8(E^qvz|IiVqM);PUw}mw=Z9FGh);5Ji?h%EEagGcscOrQffGQ
zDvS*Kxg&q!-z88v;oD(G7)Z~jrdg*)2*FF0+uAqW7GrMeV-qT{U=uqatRxEPzklNQ
z!$1ya%l;^;H%O{Ivtse6$^<{5%0iQiWlwB_$A1-dR+s7H$A3YVV5Ilv!*+P$8O02C
zyTT0##IG!dEY4zmcSf{r1In1y;c4^vmN0T31Rf2*N9BMLoZ$Dy
z$ur`QJn;xJ^bdr0Wx=S9o%fu#I0#J8yH{DZ0$w(RtbE_gs@G}U0&>A?zZ!aMIKS_un
zD(lL}GuqBeDkJMz#wK|OPY{KQENoiNhNUgv`Qbct4{LU{W#Ngf1a)sH6~}DAaQ@!8
zf8YH?$FDS^{rpQU`R^hY~!Xo`{sOXdcQBk&yCVZgYRn^1{)fJowkzF|Ee~aijOeL5}$iwIk3_
zFcK9`o%AM3ZP5AT=)nKr;H1kNP%pB?t)u?sLX83;uao1GB$d+hwaGR0`pJaoUXZ4EN|`kHaUO
zk>_Gd94oI|yV}1edpPzH9@$hM@k3qung=b_Gv0oi!&G~Y{a5emhC0K4muXzru?p}F
z`N=-369O^jVbi7p_v}1enWUiDPI`Yap|TSVNQu~W$VyzP>q-3|rrt6t%JvKUMiCGt
zL{M5(T1vW0KtN(dq)Vi`I|c=$TR?K8kp__trMqEhq`Pwln0ZgU|Ihn8A6&~1=vrLY
zb?$S=?>P1!L6?HMIcHIX0uPK($AX+Q(SYcyPeNEIEp<4aQ28XD^?dD%*~LC)LAFrJ
zeRfH^XbW-CzI1W*tc%BJ-&XY%NOqsuU&7SQI4$0{VM4n>8u=ff=&7EJk`|a
ziOpEQHC?IeF52m53XxVGS;Gt4*O8x7avv&YtXZ3XM-w*VJUwi(GaArFE;zN+vSJm+
z^qYPKZV!2o!MduKB^Z9ASvCR<+>GagC*35N&;*Kq7xP8(R*1!F?GF`cO+3R$Q_n4X
z(x%Z)jF(^a&m+VW>2N{oOS0J#lSwRfAI;J;6zE0a;H7eJnCSJFj@g~!jeBkaH;K#V
z<|5r^d?V8Op5JE=6SGF5CYH2P#cq}`zori7Q&)X<6K&4Q@i>s#kgT^-5AfvK{cPO7mGbIwJl{iSNZVH^u=LT
zxc3<@1~Z{(xER+9rb|{*10UCWrLxZi*?dQ_kH%_?NA~3x#@}_0z
zx$zGV$yDD-j@pk+4Akl~ZZjp5y;d8Bu94*Vf+AFhKDo2}yQa4u&pM&BCVUL4(RE|)>q~lDZis`b>BY61gFV&;#cf^!0L3fbg1%c
zN}At@c?jkRjfG&HwUp40L-h_S{dqxqp?`TltCc>iXx?<7wbg?&(~tI31@mtkfYFG=)2i`ndY
z7#PK7z7SDE=pgm{>Ao#rNOoTvCcPziS-Gx9rS?b;8`C1{n!G~mq+NHwnm*^Le2tFI
z0Reu0o$Jw`_jA8@cB`FLS683M)PDWnLs52#ShT+c!-|z`_I_fb`5r=v(+mZ6iA1jR
z%?F?;I<0GdT_K%8Q2F<2gVcO0(CxWOXF#Km~{Sy$u}`W)kbTq_T64UrG!l-|EMo#_w~5SYB=eWcrxEP??gxO
zYsSqDmy=PObHe3VIt$BnPdA(PKlC)%2U!)9AoH2}1Zy!SS?1$x9b98ZUq*OxUJTpfBa+~TgGe*bhPgsXY3RQf-YI5_P
zMxva?dvMZ0{b-Jk9FId1lg=eo9{o$}we*_^)Uv~n7avqzGz+azOl%^Mx4U<7$_Ozk
zfv_@+kP#hh6YhGDn(48{c1v%yMm^h1l;!C9@S|`ev)PO)OTM#8!KsCMAk$>M)9JK$
z8$6&dTl!*N`zxR4y|gq)KPv~7Hq+SI4W@3hd2$yT9s89gCSDQ)mhe%s*Pd@m+}A&@
zB8>C5epfF0(v7wdM;SO%eK1&;1QTu6x~R(FuUH0FoZeYk&ezDBL}!NMxh0(5FhuIE
z2)HO-x_Q)U**)i+w$gR#=l%K>n1}cCA8+Qt20Z%3uNDc5w0?exjeXeB(b06c4!wp$`@uh|L8C77
z#9R;lN=_7Mai2E3Y)?2KRuhj6(A!WG^GKu4&rfv)3K)8N!kiLKp^A39d4FA=cjjjF
zz7Q@Q9H(FXSbHS)a9~yM%}#KBL7Y?n`Q=I{D4PM+P}(Yg?t^3W#{Hp?LSXOa4ZwskS;0+N
zXtQ`tni!ipj;rf&tWAfjtbTTYNdI!IY}#YWo!||{ip=s%UtPsrVC8_f=g@X$BYJxo
zJ$naaRMm71L@*0J`;KFu2&N3Ooc$cf=R3Ik!hfrVeqZR#!`skMPca6_E0)$)5GCbN
zksD#PvB27&ns+?^$zYMy{bhB`xBLpvRYxd?bBbiV{Z&gk~yUn(a3n
z6QEa{uSiSk_k_~DkK`vx4F+Lo1k7ovEyP1lrxbp?7(|nP%$YaZ%?R`UJZ_nG=7c(=
zLC0w5dj#HWK$fNP`6}vlcEArk=3hVM#r<5y6(QW1x^)7{W*N}(yyoO>56c72YvDO?
zpi%rJW+j@NMu_njl$z-wxx1vX;n{cDnU4wOJQ2&-WA_h?3&5xT@jV~m(iu~mY*H7#
zDx!3YOmg>>vFT(T@xe|EFwULD?s8QOF*I?MLso_CjB^mwLz2KQHl2{^a_;YNgGhpX
z(HoqK@6Vgzj?Ex4b`6ifke#OT2lAh%kJ!(ACf(<|`?}|UoFyaZ-+^jalob+D$+acu
zbYSMV5mk*CYA9JQM%?*Tjf-cBw&=rRxbmd-5m7t64Vv?8Cd3-1dUfBo@3j1_w_DCH
zdBsH`f4vBMmeOw+CUaLr)$}oPQj;eNXT7^l3$9FXB`7!+kf{v&d3(rA@vJ*_!T-*)
zi_ghj)|Qq_?W6`bD|inpp(s1_ncb{?EB+N&c}zc3ZMP2A^`a%^<#C%Y+Bw!-u31WI
zK7&oY>#0#b$jv;mh}TutNlj5oU?2B3ywvP?t$)^Qzwv5AR(z?Kqq)r%hCcL^e4w7Y
zrRr}k@j5eNvg>zZK3hWRB1W@A%=Z*&v`5vDnt@BD!Cw?&zL&Rj{O$D#j?NQdncx
zziW7z?lv~g_0r=Za^~FV&EQ=Hs#gbcu{oEnzeimbS4fvay(4GC$U>8hxwgqQ8wLsaac~jDRMRaQp%2bnem*
zcR~!K?s2)g_S0c5+dBN~t+eky1jIe5a;gO%7_w6i^U?C_r{e$KhVd_-^<9yugBnes
zbytna?xb0tJ)+|1^j7m303(Gu>R)zwR^?dZZTymLo*tb1bp2F58}*mddEx+1Nb3bp
zzxZF-(Wh=ox5=kIDZSyK52R-X+)4A-UrTa020jxa`^LG<-1qgQ>5^vxe|q?eHZdwx
zvorw{@)QCfD>iZ!O3q!JJ{NJ<>*_|3P3Vc0iZ&~&JW4M?QHw^3eN^HU(LKVzPBWB*
zYqJ9OM-PI!#}kns=Jv4BNCPC6p9j_Jz+MCoM3J}=;GxL2#p4BaV2Xn5nB5Pt#0cL&
zj3kU6J!UWu=>wtRtpNxr*HbX1%k}<#RLWW@qu}w;(Sc`U<*)u!BG`Lv?Kj%m6kcaL
zw>~&Ke{J+ScWlMy@4FBzC|Ej1*w@d!S5rGY8HG30DuJZq+d
z8593ieys2L@c*8@pp#DNR>mE?H0xhadU1IF^>e2qp0$o_uA(oSGiq!Bd8LW-r0F$*d
zm$6g>SYO>AY>}QMsaGJ6QsM?TYce4MBH9ZoKW{t9-Ea)l$W~_HlS%QRz3M(Au&heWek$>Zf{t&k6OTT0TLpf^_(HHD#>5|HgL2G3*Z~j5JOo
zi^=7FlhW|mJ40DK{UeL(E7q?Xxs@l<$1I)MjxeJ%hzun^9HoPo6h{br>hA4_Ty(|m3LZ7
zi0}H?UE#{w;KvTjt--FzvicuZX$CwP(kUy}>2&uH9O!YhF03%s)lRL%-uioDPHEd8
zX!9jVqoe4dcZ5NP^ZP9Lg6J;AGw08-U016dPkGVt+rPY2%lweT9M@9UDPF6WNhjVH>TEdT;(`69AJ-ote)>kbbUqe>9@CYm<^>NG
zlC7zz)X@J77sZFE2s_61PF!3XJ*=lN`}laiNjVK@TMBInJa;uHT0FXkM4ez`AjCbtW-pE3T-?-fnHkXJ+j{eH
zzuB$BrF>E@>P?1GWs0jC<`w~;cabgKL%;2Pa$~eSI4zQ`i;q-Ki^LG
zInyF|A|kMU=cu7UK?d-QVDMZ$%9TgQDx>P82k%J}W&Ej^e1YLSc@u5(cWr
zdbzG2E`XOAM{A?2o$yBa8^ghk$jK$h($n6H1k9$}rcMk!8i72n9NCJ3Dzg!os{PM^!cn|h!wI5a#c^Ey+{I~Ga3fZ?W)@IVC~i?
zV#{(~f|!Wv=a8?#+m3w8yH+OoA32(exZ#IY@R#~1T#Pk6LN1ZDTWjfh4pqLL80hoA
z#7qS(YhO=ylpE=+_lp}_TY1n6u+O;H3vM<-{@L!F+djHi#pK${-z02Cpu5g%Hu7WT4yJDBaZ;FB1}UUxTZSYTh&uHo=C
zd-K(iMO>cKkJ58~mxu_xTH+(XsOstUz6>phAu)O;$aip^^te@Z5B9!fa6XtS?%`PD
z33DN*0gCDABB%@?i29omOYQQANVsPb@{A}leFvlg;966N>|M^vwD_p)vH0+tdb&zL
zHVl2;;=PkXcJ!0p1Jm?+$&2AXjPfrfMH^^DjWjOkpYUpYPRPBbO@RaI@-&TAg9AcB
z{(a5%j<736&U2qJxl`%-tWC|Zs~}gvP#-6|m&Cb{w3FU`JM1=ba`cU7r3PeK+(1KWZ?@SaHG3E+2n{D
zkkfbOJ8e}OBjAfRR!VhEV|T&t@&xTNpti|=O2b8D`go$glG3gr28|F$GunZDh6`xa
zxuEL~nK&9TI8|mSHFS1$b4K=R*Pk?<7TX;{QG@7b{QQZD2EIuQcb)Mj=tg9mXk+NY(AWmD{Zz1WF5POIN1Q~jkze$@
zoh#Y?>vl2+S$W+8MYDa{cU9`ve4jipn2X0cnZ~Ij$TGhNMDfP22Xv=}4fY05DQJdN!3S^Cgv$
zTzFkf6&9|$?7AFU4ap06QZ=3k47^VxbG**keB*^*GMEnZoj};k
zK1ge+?}|*$fty7mz61e56z&jDCP!^}zRe;f4_!c_AR{TLl?p~femb0~f3{k_lKO6m
zvu&nJORl)_?jFX0%X=*Lw~Gx}CYA^|_{t;V7$M4+W^QvXq~MRQEF3&>SKH?6GcCCH
zb-h>SfQ_|!&`XK;UWqL4w1&S78=sHl`Lc6L|+ER4|UCt{B{#pKk@{ws5?(Z(}hrL
ztYo~P81EEDoTLdEYh`|zs}*;e$b3%qYh1vxAh_|UK(N$mScfUNJI6NvQ)rWAiM9(l
zhNI#OM_q=k50qOUgvr>xxu&8IW>jg}u1W^Pza1s3)lbDfY><+7`bRDLhH&wHVdjo&
z^J;zs65@mZ(3vcprZ#=8$Y1um;h-&b|3dZHYmAULGyk5D7XPl0o+r^8GqyKgyd-+$
zMPOVVTqg*o-sWok{um_2(nfsjY5Zg9(~v*guOj;;616CfuIc4Fyb-OahxbZ}LD3No
zfcqnXSG$=@BC?`Y;-EOem6e;ESj6&!n+VX#>Su)+WGZptsjdFOewbHSlN9IkdN|
z1cn1hJoI4fjqvjH-v=11p?33J;sFp*s{nAaV~+!MUktzUow~C419>6LghDi?qqPud
z^MHr)d95mlKH+T)eTY|S7tY^fVru7;h#iZaR_}2yaWD~lM
z`VMuE2qEu9dO=h^34Y&Hzo&1^?7fNQrH19d--Iu5L-;aS|#;xcL00$*x=0AQt}*u1I|Qd~~La22=vZVNx*h
z>x0U-K#{--zkU?Ui|vw+xsHSWlH0exiFW+Oz>=U;NIcBrz8Z&^1BdKs(R=0UsGg9m
zz+yvI77ZaQiNmK;OVP`iaHw4uui~l%8;0;G>3Q-tC3(i>W*$ax?b3_qZ{Qr@AxWz7
zp80G*MfG$NUcIw4{zj{f1ZusCZTQI*As*gYL#%PV
z#C0I9f1gH?ooTU}IClT@)4mmHBXKbqdfxdro@53rK4$UpI7d7SsFGHI2TCfkGgk#B
z3R@MtIUj{&0TjwiScFK|Z=XB%zP3oa6vO@Vx8j{k9NJ;N=vad$M~
zcxBp=`1`U)@fd%Xh&v5ocMKr$v7CX58{>~g$1q_(D-M!!kr(S|Iuire)pEXUAxvX
z4q7wJ0^|9ss_wc38h3^a3YkT^qq*4EcPff>RUQGL^Y&x$6|;*hLi_g`&&ctz#g51-
zBu~~b0iaEVY%%byHPPTx=ak-W=&ERo=P#xIe|1ZSdh3ukbzt-s5izi>4J4{oINOJ;
znRRQLc3AuA$OnF2@L6SFMfbSTYrCskz$>JpeQ7_8+4n4VL
zXQ}X7YI$X-PfZJn2Zd?>sLh#Nsur5h_K)hq-Mm1oI|{SLFD+)$>iAz75l=Nm5D%Jd?6;A`Ps9fl%bqQ
z*gJJOeYA6(bjbILS9yOqUQw>e}Y~z1n!@IEpsMUefN@%5$r(*ifNMLX<*gz
z2>{x!+h}Eh;m6{3QHn#_1Cg6ycMFzWMt%kW?wNnUp)pNyK4oTDAS|mb$f!!ueER
z(j%LY`1-WhF?+OI*GGpaNwEB);l+NFdLXSE=1cSqJCfVe%Ys}>yb_rS_WH{BBE7ZH
zQ;W3v%gm9Tz`oU;Sho*;dwH-sPfgF`rETxoy;IYiW&rLBfc$rb0m95w_l8$S8h;78
z;g#(r3z9)$68Bgpp#8y``IX2jim~SlZ+$eI3Sc8lJ5KpOXjW4W+4~^xH0=e7jvElL
zYr$S?e~xg-ORR1Zq5g+0zS^>%OR6}sPkv*JT~^evAo!AZ$dFUY*V6z+J-=srQeK|z
zeV#!-TEH+1z}5YK;OZlW*rpfWq9hvk8gDd8VL+qg56?Oe`PZk(v
zbo!2cDuPV&dc@IO;+<}IeiulipS(b+YchVl0Yf1ok(Sj)Jp<1cOT1bhhn0yao^}@%
zNvN8k<~f49B{??990^CacVG@_Vsp??0}%ZP|2yvQUA7dVeK`{3=28}g81gNeo;EeD
zN%3^@-`G(ENHt1{!$ohj8B;6E&l7FN-r1kRG=4x;JjyNLv}^}1%=oswqj#c*+O>kI
zCaY)9#!#bv0qljWAK=#&#}6ndtd`Z|K4@u%C6&_#k%e(n-$xTfPt&v{&OrgTESqB_
zmD1>i-rRQT6Pxye>I2P9f6bGGc5m{q33SlHG5|)ZH08WbWV^oPI50_S*4^+hY>)rP
z!_*AqbI0-z15xNEASYi%I|F4=epcfr0*!C}|GtAiD(~ZyfnuYNeuT!!@m;N$*?q^c
zk^OzzZmu|G6FYENtIYih=VOvXu;vMnbN<}&@;M7_<2@7#byZK
z2yu%*vG>QWsMN3i))54KylM+$(J;OHR7cCyWZ%~jW*EWsd)P&RR+tZG-uyjfqPiGE
zd)6*yvOdpBR3F@59r!TjaGlnkoh`dKnk10!%9|Fnt}$PbcuLYW%7csB~;^^Gh?-?g&(c#@*f1oyIJA!3a-qfqSf5(6QJ)F!nkuXIIqHJkg(<(_#^BeB|0K;hN6r2JST_bKU
zFEoTCKAca?&uI`cEW!=Btvj$crRT>g55U8$5)-C><<6bC5oQ)~f;&}34GpEC4y9@4
zMkMWr>oC8u_wjpq=@KpiFV|NdLXV4Yh1t*xxPE_h`7Nl+oO`?4
zHZ3)8A#T{%CfQEP!pX`AklGx}8LOYD9h=69TexfdVJiyhHECnl>T%pt7&2SK
zeDm8Xw1M9+6afwZjb%$75}b4}68M@Jl=|NrPTGm8Wfvw$qe2<@r-z}
zGjQ?3D05n2*26%(P`14Xi0z-WHY{LO^*l`cVn9cLatq*C@1FSL$v2ltO0o=hMaK~b
zUD5Xnmvl*$5~44Q;(LrIoaU4~r0bA}AO7A*7%0BgV-3_@yaI9>K-`rYtv&IhUe*)Q
zIeth%k(h1JMo&(P#dUSOwjYM*{eg2g#BH8>!aZQMQ~TZR{|V*$aEM1}-v#qX|5X=B
zrLai5Irgxw6PK~RX*booB8NTCL9jPtKJ6USU3T9V!%2W!^!@Bsk=HD_#@&cu+EoKS
zMYi)w>xpqXZfhSnH!XI_*Lw>}{>_IT@N{lpzI`7N-gfuh@{MMtPeVVPe`{=J!v}f>n=y$avbZP+ge`MaCKbU!NqGe?Cc62a|&u3;PD`E(PRM
zmb9nkG$A;5TRcW(UmFe_LiYzC|aQ0pIWO!^hX
zZPm1_-y<7Qn?DeDylq!5Se=O>rwO!r@7NPqeDA~tl=^a{XW0b^XZwX!Qq*oPS!19M
zJh<5hdxSlJS_=bYccu7lS_s_VK)jo8@%K{bI*(J~;RKOYq+scw8WllZ`qiWS7cn#J
z&$lweFdvS-86M%0P*}zQGWF#iZ_YoWcj)Awo9OfD%d_yHC$|7Hc8wwB?SAQeuQ$=g(GwwZ
zX*@x|*H`m8)@5V#YFFNS_jp^C<<6J??zbO;qQTh4bko5RJb}EA``7>IoId+29#K2H
zaImdW+*x^CkKrD9jXT&TKN`OhszgrLu1Qwz<$hk6q@V;eN(n4LrP92@UIfY`A>Iwy
zW=kK5l1-Hc?{OCrzqED171>c9PXl)XApHCiARXIuEFtkxo0&vrwKwVt)AtQu9x+$}CL(H}|o${z!kK=a7j@P=}zRDJ#(Tg6V2NoToW}a66*IcPjh+CZ1
z=RwM|1~i+fPveQmF$qRFTvwqD`TJMW19lN2lkHmog8S|%!d;RAT+4(e25Q{aP(SPN
z&=}8T@UC!~|GVej2@c=nwO4tZji;AGx<+y_xEoH@z!}T$Wl1C6@|P40`+XnVEe7Wt
zpitSXn-$MExRxr$>vN0))lV4}b>Y6$I8R0FbGeZF2Dhbl?IfM>{Qrcr7r%T87n#tB
z99^fIr|O*!Nf|>>%%SOxf(Smd#vL7GZLlWzwN<`*Pi1Rn+;t<$J&sfZOyB2^dh6nP
z@;b!ug=i(`qQG($e!Hgk0~g=CrUyf++hU)@gnoH_Dls?KDQ<<1z19ngiFVJw(8->R
zl{%#FlRNd?M2;`#D>DLzI6!@I-$Xqakm31QQzdu$XO*~ixD4kqjaW0Ao2OD)0|m0L
z<6j75G?d!2?myt36i;b%;H0w;-wx3BYJj%K@he}^&VHG=b0^l}cy~i%A491fG0gE6
zsjfcwEuxTED~{YBo_B;?|KBzDodAA@p^#rB(s)^D&B|OAbQWdpUGTJ6OFE3@D
z6nbCcimlqP`~LpQT26=9+S-OMG`{7m*O4<>dcWoE2so=fM~qQ937)o1rC&k#&uV3#
z_x?e3d2!O+$35D6&Dd>;t$gI!s)I3`4#ku?{N&+RMs{7=7+$~1Q_=r=D@&Zjhci$n
zj&4)Y!((*^haFThX1j6Z@c|@BcauMlsPQigJuCY!yMOHkO9OTuul*GzUn^=F9i|C|
z@=XL8hyE@z)zCD;<&lqlX>cS89fZJe*3)5`k!N3oi~K+_?^Vhqal5HtGvkL7-Rv`5
zpx0{4ZGA~v}xBOW&PSCc~BM}2l-w*r#V6L&}|O?
zR)`rrV(X`A!;`?3O1TM=pz}Kmfj!zQ9Cp7nG>C{y)_@KpIGBr*Yh$H2@rC_lv(_tN
zEq#4%O~{NUBSZsDfFA+epzJ+NFBVcFsRi4BX&Pqq(Y5T$w!r4(H=5+2M-tL^bfksz
zHGPiJsmcWza^yJ7$nAXdt0!R8_fqaXV85$IY_b}tRZe!YczK#B_a?!0Im3k-R<~~uN%_@q#)g0-%
z%NJQ#G_Ysh;%H064w=Mbtt10?t_jA+#3tdX=j*4}4YtJc@Vm5(b;gIQxuj@{tfDijo
z=FeKQej7vd{>J8J#`;tqFr+*4eEtUW*h}I8Mp58)bogs;e@u6wX*1nK(l~$p3GS6A
zz$XBF1#`w8wHtBdTubqq4_dmG)h@l
zGUg0!Q|+O?r8}aPVloaM8Xqq$oD?Sa3_?WOop?Ep!;bRokqOFK7E=`dt98xTS&slI
z24{qPFOClIvCa4j>(^EhJNExKOlERG!({z410|j&{K89n
zx^VDobw`_4En@y1t2*X&<8s6G8!X#IyRAVuBNF0B;qv+ki%+zik+eA`?DYZ*$BlH1
zlt{kk1`SnLra{EN8RemJB`m1(e({yz(l`>R_+93vFKRE1-!M=*W}<(|fIRZ%Mtwzg
zf+utlwD2US+~`iB{9tjtBe*wuQm`-bNTWEpq*QGU7q_&(0C`RunUj0(DpKd|bfH8n
zXM#R)wAJ3eh%^wFV??y(T}+iTlAW@qaoOrwQzTfSZaaH==S3~fqgz6m+nY?S9+$^3
zV87P$wy*i$Bw=zGDaM0eq551t6n8<|7R=nfTWoMC4AZmvB7fyt?Cc6)TtJKl@{HBN
zg`Dm~VPZ^XWJwX?wottxpiYrE+MB^~)p}L6)6?;h_lw~3KXta54GqZIqlw8ol>c;4
znR)+52X)5C4R2dJ{ypt=(cRH07bS=9(PzN#y7812=5t%3hw#bcyzhxjN~2^uKUH0d
z{0Zmt7ZEUMyA#^iPXp={P!;m0Kw-}K`RMp;02kk}&nU>skr@mP1$IFA
zt$o8I%0H@Fsw`@y`v4VoJ=O@_%Gu2We3Yozm#W
zK6&1fy|5SRZU0ZStDlCiQ$QmP&&Yc?Kd+*t`R_k7rSB`&3CF_;IMVKwZ;~x7ahjNZ
z&NVD8_~xLO%oZqTbmz%aS0y-Z9)9>{mhCo(QzQ&_Ku7f;*6V>=D8$CHDkE>=ZK=J-illS*{nm#H-6;tJ1T%k6
zs()2fwxqL-YN0vj3;L(>Kj!1wTQi<{iJ>zQz!9^_3?+Pz1#J3Gn6W^(Z6ZKN!y@EO
zCh?p!jBA9aH@!|xFdptTP^y}$ODt*1BfUC)h|S~v9$-0+HsSnh#{4onJ2NUw3gB>j
zsQ{2>q?5HDZOj2)06;I`aefZOSPEHekz0pDh(d$!wR)QBrO!|aGcD93SW0TVp7k99
z4rLK;P=oeS@tHxZK`M}}rUUup0Os0@;ci=MGi
z1VPw5OC>lHbp12h4BqV{cbL7Yc?~1Y4~^xQ=2@=zXT5ss&3CngOs+w%?wC^x^t~u#
zUIG1%+B(yG-Jsv^v<_!?YN}n)Tfa*@@DM7ZPk;cJK6x}!EIX)34qG)8ZA8XCRtEIn}Um|_n
zugj-Twhe`e0||@PJ`K_z8Xc0k`7b!U-wqbSkahRNxlGSg;`$2Jb+rcpCMK5J9%MmR?uBA^U^s%$DD^y5BuYHWF3I%AWj&=|OsP1*igvtq
zABm(MpSQPDM724bZ?ZeF8b$$W)yVN>|AkrogGk064%-Xx*dipC~
zZW^9ll~c5nHoco1_QxSZEOFoXSNP)jgv&+Zq%5g!T2roVB(ed;xZus3KwZo%d!J4*
z1GVF!CrLPiXyMUv?Z%Pr-o+mF6J#&-th*aCB}dP5dQplrTjcw9x|tCvdu+fXd4h=C
zN2XRu$4$Rj%A2!VSfbE7f}w1YV5w
zVr>>_!2N*U?JgDq8@~TXN
zk2-EmkkSPR(}9+!AbwQ+4;T~6f^N;leEH2c
znumW@twp$0ePlwUZQs`=`eNno60uDi{dBNG84;zOOdjE$Pf%WAT>3f;>*-!cN_p}9
zJ}JCKU9r+vkaecCVp``a{LxXtvxt>nQ<;ps++QmD%ttCd1}jvu)z}2k$pgCtIu`y&
zVw@R)Gc`)^^9^TxDxrMYeu`wl3A>4P(Rfky2sr$O`6hYm_e77CTo-Ghs3z5l
z9S)6%D8Az(S$uET2LC@Qq)~J40;ZUJo!5J}Rez*y@KThZz9qwb*061^Ps5rdRe9s#
zl=HW*_|1Sv-)ITl;dy6v#^5|zv=tu#|LF2Ydp36ky+>=2l~1dbv-l+?@Ia}<)^U)R_^4?S
zNp0RPw)Tu`x({jNB>s)`6@--Nlb|pT{D&!^k)-!0d6%avi^xjqe|{5%=68tg{SgzB
zvl>kb8LeO?qBc8ZV#Dg5FEDg+>+E{J
zR8eh(rzTjf-Sv?-I$;%}n`_$sAn^nK1+#ObWanDiR1vehA(~N%2ey;9rO6oatI@iV
zF6fuZ55xU(D;B-M4HO4?semMy0S?rZye#pHJY>ItI23_LPq!S=q4_c
z=Xu4m&kycU`z&AW{Bp#8JtwV=e-$MBrduIOf9O}qbgH~=c9KE!s`wNF(kwh+Ft7H;
zIl#Szn7wBR^B1suDQW@n3pZ9cnm3mH3Sv&W
z^(9QbyfiZ|T@nZOWczP{N9ym#H)zuji&euHEO2kzhDZCDA9SIZu_WJcBtW>XrnCE9
z1o+DDx&Kxfj2${CY83`IUk~{0G>?Si2?{!NE!;EheB`m=@BI#>kxHbuVU^m1q&Z5E|tn7{DnZ8PRZ3X-Z(QY>yVRpd{Sc`NeQJlg5T
znnZ+p_a-s}cN97mm#PoIajfKwJERx2=kWe?wk?NkL{8fj&q8ZB+q47NFW^o!N*Gt(
zSo39GpF9ADb;jU-C*9|N>(meiaJRVR+Oo?PiLw%w+i3)LZv5%#w&C5QG!L{WtCOR2
zn!nqY-BKFOy{?a=!}WPhG+)O7V4N^%(+4*V&O4gBo07h$&KIe+G~EvBzK$Bq^5ssD
z?$rKV-jFMCBFYQ+!X?BVb$u+0=&kRSgJ?G8!C&PZjU`#EF3QbX6nxJ6NQlufVnuq*
z(7)<*X!;ZF2{$p24{+GqzoivhON(ZBjz`om-Vk)Ia}_tRujfSR=x0kt`X(~C({UGK
z-*6hmq~}s2=5_CQPZraameTTZT>1=q_iC*uqsMWts_y&LS8WfO(tyF?w}GK=DPPWr
zF!+L)V>XLt!qzCHLKP)o%{Qhz$Kg(ygA26w>r_&{z|X=zs|vf@obEKHGa7%%?aaC9
zss>kWxT`OOzW#$p^=GZkqU}&}?@Kl+-f{B+p>;1vmi#`%-lRj(M{$&A2lx~tcZhM7
zg)x0xL8AeT6C3r6PF&N3XNNxWD$?@~va9eba+7{=Mkj{v&D@W@5e#NTMIt&V3{7nl
z69=k@>KKRyA*+*0_sk|TQzqnT`j7_jA;b#;rQ&X~lTvI2Mw
zQ(GFT0_w$cOA!x%xn=fbr{&N%#VFo&FU@bVad7t=d)(qu&q-bYd1
zQyve1p{T#ixnXqc<-6|+nqa;!4%Ez$Ltg4Oo3Pe~>-4gYO0xPlqZb$E!n;1M^RsTD
zc6z^r{*D~O
zsGX6bJbo97MM+^41IU@d#6ObdxHTP*$keR6AJCU79i8^ozdq{6`^>`umKDszO{8L~
zzMAGiSX@9s>mO-HCmnoLp>OTZMDYDK>>DIW2}XUH0~pUDKoOX_v6e
z&m0)aK|uo(M0L}zH-N3&_d!$yFZkIX?+z=AzR}OLswdEczI0qOdkjeDbJwIv@p&6l
zEjP?Y+Y6ayVu?=XiwsCr>U>|skb8~uj+StO?n&p$J7G=8?uTpOI_!fKl6XbECGm^!
z*-Trb=gXT~_Ksh!MZ@W;#r&k(J-=eBxC<1%73W4COtI;$e7QPm52bW`EANEzi5wIlc1I9Y`!-+t||lbnF{v>ZNn;bxGfVs}Ep=LANFYK9RO
z8OB;m=`8my))OHIn}-DK3*VG28w5nz0N3bL!`?93;}d~1wBs+Au;C}Ng9)YC^r6Q2
zGzBp#U}w~Wh}{Z()waeay^9A$Z{)}w{_sY`Kz~EJ*PK5tlWLgI-GPD8qF()DU;rvm
zQ26+3S852WLL0+muu|C{EhiPw^31p;jM-=wo8o`%n(E2{n!K-r^iplf1c;5+M5W)b
z$NsWjYPL)hY9uEzc^KmOn{zMYr;U37FqoN#mV9&Hem}y+%Pqv3M^4)Mk=JqaSD{w5
zSUhn49+~6p`7;Pn(V1_LWI57|r=h9X$I{Uv_bF`($U@PDj)n|y`802|)O`LSy|&l4
zIm0Knc6X)CdaOy6iF&;2mZuHzz)jbyOioM&ge4bmtttH9r!yK3mpQdvlE`*S3*ICC
z^OE%+)m8$I6;TGwYOTNX!?vqSA97q7sJir^zc35)zF=K#1Y+PV3Cay6GWagI>*mcp
zNnu+?U`$1idmrlA`0U4>Le%Arfg}ISZDGpj}x?Fp48y?%#6Pnd-}>H4at6n>05{Fw3ug%>M1e(!s@^(
z#xUJ_JG2ZY5ZPE4TC;73hxEnHip(BkihY+gfT$T=1i8uOHSWOPmTI`?2~))<73=Vc
zli{~cx#-;CY+==O-wD5GaULes-efc`!&9!govU5nk14H|9@?zau@6==ZoZ5E_OQEn
zK?@?K!~qIAQ|HNcuTqV;B+6d!s-%t%+PT{3*RvW83rsPJD$pf>)Ll7T@H03yWQ@1!ZECc`3q`uc~ji!rR5S#h%D
zXNA~FCo&&mq(#r-wT2v_{)N3Vl;`Qr8Qn2`Jlsa6px80K-AIzt)sv=zpHg+afA!(ff-%CgPWagv>cc5Jyk
z9L_#uCh|*rbBH$C6pzC!&nBk*n>|8C)g*>Qc04L-5dgmM_iY)XQ3bDmMC*Pmfzjqk
zqxzb{_wf=ySy5vakkxg%JNQG&rj#h5!~qMh7&R@N?z1gKd#<7sLJ+@76y@$
zRJuV@Kw7#brKMZCOS+{&y1PNTyQRCkyIZ=yoA-C-%$aXy|Hm+U&-2`IU2CmtEd!ek
zQB>dDb?fD>>VGwpH+SzSfd3S}Cmw{}c&u2@{^0G%Y=l|DfR`GC!yg$w_P)hg(Nly`
zNL0toVHM>v_`VgIapm+cptB>(6RvDzzg(s4=)j4JVjv^iI6m!^(-sxlzc26EJTcC@
z>0W&kVLfQkWkvgjIFDGzG;~8A=UMG#xSf|vFWd5HlMs9sq>-db;>iNTYTQWMaWM2$
zzn|6txsZMz2V;s+0;ocIM3;AqBgtO+yQccl;&H|khOkziQpR(P9t;}L4f
z7!I5A)cZoMTJ5;bgN?0>)U>+T5~ID&n+oN)QFbz**#*WAJ3nsZUONG4eTx5UOD2ky
zjuDeUuaC7N6F~fyU*ZOv&$T4weN#XJ9I2;`5l+$fkDVU|F_M`AgPG2|(hCdB3D?rK
zxO=phR59ZwF(mp6O688|h?Jt!Ql`dU>Jqs_3r1J{@hj?u4l+;ls>AGm%p}%-aMb_3{2(67~wv&oRV%y~mOw$QJtxN?hPfYElFooUiJ%;D7LK
z0sd6(ORRT-#`ixsT^XO=X@VKj13TT3LCWWzWT@JkZFxYLx`f9pYIk_8lE>Q4BY~oZGE*ffx*0oY~8V
z-t=cki|SWGRkvl|DiTq`_RXf`M_L%mmB>yBBDS+$`lR_rR@IaQ%(o;*VJVlC`M?qw
z747{3Y&w|2=6%M5@VAerZ@d~H6IPsCb%slD?i>B9?%6Rt6=+@&aetOA*7z6MK;si|
zzg>k5g(&_kLCz?Na_HAxQA(2rq(Xk5VF0Y|yw1VBthuMBCk~=~Ce!SaL&tL{$w`x9
zLiTJ+53z3;<~$Amj{Rs$ZTEoXP5-8S!|uMkxvSA@J}!fV@mr=+>ghrkEima1A)Lhv$TNzVj!fGa&x3*HD
zJ})`XUs{C#S%@G2E$rx-z|07dhSlGjVdJC`=fR)w_I*#DBXi;$Rm>zT)d{>*QJlbtQ
z2mVTUwMMTOVHq!%u)95qJ;pNF%X$|h=D*qg4BxIExCzIU-cW*Z1o8T-Fq2tu3HAqy
zWrIBm2H9(etjlr+&)SebEngY)%KU{{fcF?Yw3J2d5SnJudMOUNLB7XJJEam|Z<@u-
zLK&kU<`@56ah86v+SS&kCGZt+VE;@xP&C_sby(-@1p|Ihs#a3dqf|$*U`n3?0V%Lp
zdIM^a&aBced$=3fGoz68pI`iOC^w;hiyLiKOu#y~?qGyn$6c5Y56-zu(+$_N=Rb^y
zgh^kg54jzt%PvscoVp`VlB0Ys`oPvAy#ub`*Ion=i=l%vd6B4S2_Dvf4%jX7oD;X*
zrHXo+tQ5eTxC_qj218|jb$?0Zy9O%zK{hRVjHc8R%5(@R(u0juA&b=Ku0IfTdGVl!
zdh-MDCA3O57cGEBXB}#A2J;R!3d--@!5O{0x;!ItDnSnsVZBJ8@=giXT}Cx7FsSMS
znh|+8bK9z$mS3iq)%9w1xGOfEJu~aUpIno(rNb`upkyk!@X$KxtA-;>;Et#?GOuhE
zAwC?Kc3_hjgNswXm9%CQ%wp3m1e!tC^e$&pi#76j
zSeDDNol;mv^z%aBe7payE;V^j?@+FmW_ot@hf1*T@D~AX)gJ+utj}8pFDnP({O2T;
z+gTE-OL(<>Us?i`ujEjpxsLavevE+;H`+#&*c$2_No4S>fsOZczJ-=Odncpc(TPszlmH<1r7Rc!9~_1Moxto1A;*0fVz?6_U@DaJ;AF1Er<)McXA|@
zV?=1X0s1^C@|WY-?Jf?#+
zpat9D`S|J`?xN^e|3oFnvhmoV(`DSpjqKqgj=2G%o3t#?uI{JVV%48{Vm`n+tFoB8
znw%wR)-Uf~4GkbwPn&VX
z{69Qq{M43_j*fXZIb!P-CH|K$%+k8ZEH9ltM(5Xd+2Nt2+nE6%VNWpOGYkOm#Rh*T
z-Y5Jq2?=k^i%NQhv0(ARS(szc6A_0Y<@Vk8_709zHBJR|$ju#Zkxwl$4^&|D4jxP_
z2=$+8C0Wf!yMCyspnO+1Nd!nIqwPm#dQLna^B-NzBEUJXI&l92>OMr*?Mge#P66_U
zmWoivMdE_(H!&?F&sXH<^*d6~e*!V+U6JbyeK6S$nQB!1!#}rH+bdHt_-iG*bE~$p
zzx&t2PyK`7M=GTKL%IJnfMlWCP^M?
zyzohOsZUhhX+C@a4q9vT2k~bG>krS2rA_$%N0^7KZRR|us~T9mB?cmL-kkmG4b4x&
z+zEVj@&wUi9MfMg<0^j|;8^n-^bkt0p-bA<{siuVZTW0%}
zP^w<90L@)$!IF=8FJ_;d`S6boA*
zRrCYKUz4(nb&hj7i2Ea{Jzc1qU#0(#+}kXVx74KtSf42y6Qa!22zO}_)VB-L$mv-S
zX&(P)5~G=hcVg`e5oyN>!bl+3^5LH^e=3_HxYM`6@pl|M>h{ya-KTk@rW0fqpH$%8uioXSI@$r=hUA|SX?^KJqf`)%=TU`)~ndVnNWd~Xm
z((0SkRr;&#EYl4ZLmeern5T|!?=U-n7JisFP(P?gw)||J-LktgJ!u7M4UBmPu|gX*
zZt9wU(;7vQXbX^ImE}?yZA*8GvMJ-Ctq}V!P~a}z`ktHp<`Lb#nvJ%CR>;mb2#;P3
z`tK>9S;w*B&MhLK7XNaf|1sGHel0zmVX~g8_({`G&U1DE)q?@BP_Nfqan|l-wV|HWVzj+d)=BZi6x_6C)-u>J
zlSv!61eU-2LCSUl2^l81r$naP@m31!R|UnRGHWk4C7~o%zC^Sj!0Is%mNgpJ%D{SR
zn6K43CTY^g)^mf2`E{Pm7vz;n0p|cd6J4r?cj9el@^nNs9wX(hzU;QNV0;Ohx=UCc
zuPy1Nd|eLYQ0IxN-|dfUGi~7_OVCD1hXYtzG;CDJHf+P`R9jY4PbbKLSA>J0cE79Hx&zZ=B}*(u2=uK&tXjX8bdTrRTK?OhQY|KUmt{shwZ~
z(dU$gv@$X^!%t%mZE#RTl$#lg
zjV%h(X{KxgegwSbd5kyq_cD5MWW}U2_)x#B^nFiOxuN+%UU#5M8%c(1Da(K9WTsF*
zUa7XLjce;%MluRrv2QTK?Hm#XN4ghD30$2W6t
zjQGjkT~}PErv^Q{n$eZA3AK96e&a4S_Q1Rr_k}M2x^mc1FkJr888SPOi~eim*ABJ_
z!GXpt7Fo*I=I`)W+;yVsyPo-5(Ru`8e|efN?yeP!l+Dq0;ex%|T8((rXDKrCaoe2p
z;@ECd)!xel9;gNUr`lr{uZW8{KKyhO?~OO3<*%>igy+qcd;^B>wnU7o7z#`ln3yL&j}H^u>5?Dg2T>2EDfZT>$KH3iiM30_x>aZa*g0
z-;6vyzFgfga}92Ha-_hiI}uI7L12&Y4ML{D=YR2a3qE6%llJ#4002ki-ym?*>mNk9
zCG;+reI=)^TBMHZnNUE*<~ho4)okq@zEWu5=HL0Yay+nRY}M8oIK+j_rh)lbajO)U
z;|m!OPbNUdTgXAGG|
z%@ROk#wNHzapVpfiETNnu5iI1^6DfX**u-MTPN>Ox$W$xd#OA!p{Nvj?+Tg(6@;fv
z4CA;Rj+X#@0Wu@AF+SeIJx~u;P0nq#8MZdI1lI60y1{UxCJ!_ea-&11+gCu`xG0=H
z^qS@jri;g|c2Cp!2KG-F0rc^_>5ez2fxWPEvrZ=Q!BH!&7izXxAnJ#<0oKdC8i#Zp
zJSoja~JE_``zHHthM@^8RaJzxt|#HZ
zM(dfR*MgxFB%Iy|11MLBvl+LLx{a3dE}PbW6It`EbT~*(`NqEXrjCv)
z4o+fkA?{VXQij06i>7I)%3s!ErQ0_;QhnSP6;f2=_dKf&MSKqYy>pG;+O@@s{Kx*Z
zeaz6e<*Yad@!Di>qd^qKo}H7c>)9prpU)A0OfI<}SXQ2SFX7>HxNqGf5wYS}f~Wfo
zW=qz?PA$nec;0~sI$;0lw9O`JY=X~jR8rFQlC%wm_HdGU#c@nRh?$uP60)1QJJb6V
z8V|+{aS+LdUTY$(oP{`&=UJ<8CWeEL95WrBEc{d~*W>oRCUXwpuFSI=Q}
zC+Wm;IQ&?CM8ZlIw>F8MR(iiYbvY-?yk*&4{lp8g1gqW6#Yo^-&;-0~5P`Q%txnkV
z&3}qUrTl`*f2h3W)7;YBibSAACz|`_1H?_zp|x4jcIGmRAqNhVPlv!1%&%mX|I(ld
zs&@99;{T74A?dTjM2K7BhQR;g#eu>4crF@3#PyDoz$E+`F4bcFIQA_`Ow@PMhGVY7
zd3QY$z~lfv=k&Stx1&~(J{W=fMM8%REH;gCuL~1V%!cx0{@}-Z=?A?@ht17nEY}`_
z{`R_;N4yFxpSNSt*q3=hM(SPD16w4%s}7$Z-QdehmE-KWT*@6(FCX*aeEnDAx9|eG
z#*uMZxlR(9xw$T}McSt>CoN4{GM=+VT7HeBxyGNgik;Bkz`uXf#dFxi+{TBQPZAmW
zuUVU3i@)+>sLEI0vGpR>+M~h=TfmSfj~dtce%S{-p3UL1HfdXf)zGbsSQ5sfDP=OT
zf>3t+8pod^$7pcotp1i|lFRV2)s)bSCW`6lrNDIC(E0Wy5Mo+bY
z#t4s{R!l(7_#y0ae__}EF-L^#Lq1Bz#wLnQTwDe`GR1uy@EQLPYR!0?@8Gh9x#_|b8^08d(hW9x)+VoXE7QaJYHP=dw*9o*X9P*`@GFw
z#kM}M8s5Z$mD`FxP454T)z4}ALn(G)VWo>B35_E<1jA2RvYS!D5b4Dhis(884Ljnt
z2EDg0s!7t~v9U%gTz#Z$6pYnY53we7J$KIu$1Eip6*C*0t#}Zc14Ec)Rk^nkrua3!
z*xrdBxZ0H$&6GiO0F@5!vx_G${nAj9H!?(Qq)Zimabw*q@2$SL$RC>C{+D0tiOR|frRAcQg*B{Qs=dd7gUfWhC*9(yp0~S
zdGsgyUh@-rCR=bFgiTe05NzCV5_XJa)ZLuVG>J*+P{c~?U9lfc*kbnC$Zqdk
zqUxK!Aw{|kCc2*bHoed49X?Wz_hIjw%ekZVx@)+bSW>ylWY&_l;tcR=vEtQ9cJ)6)
z1RbM0*&BF3{>GD1;9l6f#VnCK%-8!G=?K@+{LDON)_5ZOMm#EE(u(t$lX>u`a>dn@
zG_I!733fAT=#mE;0-1OZ`?-ht3@3MPZ$-%q-{Z~`@_gF`%vPw&=L^cq&EYGK;uX!l
z`W)joPmL!pVEBYHK8%XSkzh5*v_zOGAS;w;ce3UtK6m|$J?LLBu{8X~*5V5+f8Qm}
zEfV3zq^-RudEPRhYVu%^OynnG{o
zK0>MOQFwoSN@!q+%tD(!T8I&KFG(eMNO{{mV(??0&fK|Smom{aT6*RK(M0-DA%2(=
zQJXQbJQmv<=l03`t8J=UP6c&>!s!PIjvFI&g8I}ohm4u{%>pYyK6M|QI}Oo4Gqb8JC&Uc7Q8d9B>b+t22vGnmAz8ykVbF^b{`O*+eoN0Ujxt
z7uS}!=~F(#urfB4&5@%HnAW}a@B}U70;r8%%(0l#iYg;9p4L$TY3d3ljZIGw38
zZ~i0L#hcZ2u>YocMC5C?zMvODf7Q_Luu3?sy0BCJomF{(VC7lc{)s0r5Ocmr`Ga`e
zIUbX557a}2zCkTjgldxwR9tnZnA&F^Lbtb}tFg;z5_?+U(6QvlZrKzRTlM_y(-fRf
z8uHY#Bim5$3%=!H)9Cs6%kbKmm%j3Lgna7Y)SMZ8V=DyfUF{hhJ%9o6VTip
z&I-s_K~z6K_R8_Bm1nTi%G&PyltJ#tcH*tNa4Vlg_tk&*DAHquy7$C+Z2!XXG2)Y*
z+4Pk|nr6~S!8-()RQ~`=>~B9`uANC&WB03>ZiaCLRU#s5Tz{+76h#zraybrT`zlS|
zoowl2q@*gXuvKe%>@|j2LdPR<)Kez$eopRiseDFvl|X)DE#GVvKx|h%KHhmgndHQC
z$WvML(~0-^3!!8yY*p#g%F#CwPf2DEZ~N_ZIa6t!2jB+CoGvs`y;{Ap1N>5iz=%RDQo#vHKeHF+~oGd%hoBCpd
zNHBvo%vKsSdeuKvG~ByylWDbn1u(@7Hj;g*K7n}4hs?rv?8Q{OP^mR55PNKI(sw=U
z*t`o}UM!1z3MJ@}aF6dKrROh?C$6oa`JdiIR{LY}%+7o$yA`ZcR9N_1H8@dVX7@pV
z=Ax?u{XURuREk341DobzdO0!asRjE;Y4P_$Jbdn-dLKM`My|3+FOD+OulK?WTr}93
z+aN{^ld3ada|#P-2Q@=~59H_TTp}HKObViP!d|ExJT<4BQ{34LbGz<&a!0vXH6b%c
zL3OmW4^5A*ed=#-wSe#GN2%U3n<0d`g4a=TV-K*UxpR`B<7?ok$*v=V6U3TbG1x9F
zT$5CX`bB5bI7)BrkamrHm$(*|>oKebk%hVH#ry5jxf#D{xO?Szh4(zWEU1%AEkPr4
z1nIG2H~p_(O~$#|f|R_B9x1pFj*f#lezFLlQPypg5dviWec`K?kdE90HT551@c5i$19!JJr%=&_?tp78s6e6`)PwNGTcSUD+oR2+>2*oo3Yf@`BBsb=T
z>-IzVpB2#@?FXshY2TZ6mSZ{d!xx{2E@k$ouZ$Y@woR#R4VG!#ze3Oy^|yh}MqBth
z7gE`Wx0w$dn&W-@-w@P7yUK5`3q)+N2t^7wpj^=IGh31DR5X>4GuG)gH=4gp{-aYOg}yLqc{D7%JlK0!>6X2XLZO?D;WOs`sUm-dk1cNgZR||
z#c~>DvkiMSeUR%svD*7W?Mo&=@+Nj3`;!=E4ed=a#+opnPbdk&4^avD4
zKJE?O(v&@IuzWb@aP&DXB7P;m!5d%-&smW;{dIjPUvwNBc)s9TZskf~bkDi9M!5H(
z)THi$O;jO}NM7V}BlxM?t(iQW#D>JUQBKcN0Ci!s!F;HzRp+(_WH=WV?p85gea-v0
z@4hIlZ?#XNL5Rinry;Wu)53{8vTpU$8)_+8)tSD?&Xs2qWf_8Bw85TLG>NNYLRQ2V
zVoK3(62EA>g^`m!nQIRPj3-DQmrDrjaS!!>QVA!_6zwO8B7A0ia72%CzeT+3rT)Yz
zH(Xxi!d$)zaUF9+na5d|UAIUbr4){i3JLjM!&Kw&&LeFVN6BtIWYk3#!%8W?1=5tR
zwe;Vags~uK*b=
z722e;5!DGkBRBk}s&5?fChLRM%#ye(MgKc#vI|X{;$vNs_Blb7I6vfnpE>B#Yb+z
zy0xFKPWFn|cf>nL$~W7vRWQNCf5QD>6K}7MJ8{tQLOS=?=W}t~5(O)SLZrY>+2
zgWMN+Gh9609Y*wv-S4c1mfEtEXIdjbT-=ZTUF#HIF|cYASkXg~dv157LJk<6xr*g?
zhv36~{<`7wpmW3S#OMyckD+?p2>W!_V5}?uceA7R9NKF0P`b~2it+TI6~e7C8=`1=
zx}6K0B1IgUCYd<{zm-U%7o-igM>>sM^^jXJ=eHIS>YEqdm>U=+RIfhRa+#kXeNL)(
zBOl;W6X-ACtX503iGHxZbnun_Yqdr^W^Apjv_VbZwztWRgcQ?!KXJ#3EPzH)yGj9_
zi8d}OoEaPj6Ao)udvi}tJCWW{_s4n}>FXH^%MTOl2`(#ko8Homv!E2@6`S3U;!KsF
zP^FBms$2ZCf{6ln4Pbg0gBhfrNj!i*w)6Vr?dl!(PyR`@h#;!)vF$Gl8jpwBEY}2|
zMM))=xXc)A%T8#%g)Ri9%k|1wiW?k_QK2htmwtMEUM9MkWIY;=KS;`!YCK>D+f0o!cQXv8HH1p^Frf9p21ftyRML5
zOr*G@e$szh|7t^HsWs>pzif0}vv>!r8CmurbAG{r4#Zqt`%3!p(6?0TSUjA857&Zj
z=7{cK?-+ywr;
zp?O|DQOB*HE^}2^Zy`E+dp1_Z?~@S-Bv^47kb2R63E0aiO}1#9z+>+-H0L-9}hb@8W#peLY>)#m;{sGdr4+W
z(3DmDyKI8(=TQvk&)BA9%VXdz5CvuU;-snmNivV`{N@IPN>x+D>@0rwvB_$N?99B$
z_VKvrSmI7(3ORu
z^PcbOq!UvMCim*u&K-KLvHgAzJa7!osZ^INkI>@`CH&!ehf9#QftV7YRJYiW{Iw{u
z!Jv|D(RkBKcfhQepqUhu;=f;;pp;|-4w>hK6GXNQXc%YEnp1F>be1P}o37|J{?%rduVwq8yd0E&T84-z25<<2Os9>3L}s#vL^f
zsjOV`q-HAI#*mY`lyA!ab#W?fm6+6lWB@0k5am_)Ul(iNmb!6{f3EC&JHYB0Yt3{*
zkIgk=HU%Ocx?Kf7zX?+-Rp)_Uwe&PM3YhC0iO5mDyascFTWe8N~!((ihVB&h>
z1eh+;WJxDn+;Xff?K8%&E;o7RvJ}wpuIDJ@dUXwR&v!O)ZSH{+^7hBgnvyB#NocpDir9d
zaHE6rxlT!Tdijp0=D{4VP3Nz~CH5bf5Xmwg{Y|2L?b%KX+mDUDW@AW6aQSn!&E6BT
z<8-?g$bhys_y<7-k4#v$HrFo^a*GBsOUyi_aUlAiIu~+_A2qtYYgdi8GIrWTw0;-0
zhW)}wj)Zs!Bmwo)_T*Jlm1gokS#Ii<2Y*y7dhfQ5IvicS@mp9B&_4ICtyT4)v@CCH
zI=;o7u{VVLED4^V{`ICOE5U5b6o*h@nxMbME-5znVa-P?5G$m)`(r8Qc@GJfdJy;S
zvW11UjQ98ShWV(4qxx&p#-V*gzmqG&Y}0@d^$>6#+}#Ox&1QF5TWTEi)Nwn#vHteq
z5FGOB^rwUw`PG?Hqs}?yxQc!W*36j}a~I+!#XYHYun_L17d{bm-NV1RPlZ=vR?y&>
z{ciQON1~V&=pNqwI)i4*4u5u#fW8>(qKi!B_;RggN#q8?BCF~yiOURHd?qJ(Ra^XR
z>PSQ{p#z{7d$8n|Q%^&M%iugqr9vUsvWK0i2*!eyP<>0kDo$TKF)n5oYZQF$PCd0q
z&XT#ZSpBA`*zfry{8(&h>RpZ4d`OaBx|)iSnxC~N1jLk#9tRNPi?X+b|FzHP5Qpzi
z&pv?NqWO|={GwrU0|k0Z_a7`iQ7vqD
zVMg&6^A9E;6ZWBA9~{o_tbgr2n{L${SQrT`wEn%8-#YTG9?YTE|LJDGxjjxL4GLnA
zpWWNCBEtW;DWsU3daB_$)a7B35}J4gO-0DU^I=Tr+UojzQRX;nLP2&gUXsaXYvxl$tlqY
z#Am8lKX!+<*_~bUAiUC(;Qoxv{9-R2)m(xW0)YNhZ2S`$Fg4$+X8HuRz>6@N*orAT
z-t{L7{=(wUWVyCPOf+mWE_1`*jN!iKShnq?V^e9araxIHo`uOjf}st0C2~yl4v7b^
zZ|E9$_iEL_m^sANP3&fhMuh6J#}KqN!Hb@YYfMjLxecvVc?~r;zDXgZ^f2U!
zHl(ng)a(S;wXC{@-moanoP{o`tXUxcpD}Xw6hbYP$o@Y*D_VSPGPr+_XOYY=An64!
zd|`0!z~VzZLGuPRPJ;oCxeV9w#YKMMHzk3^n_dM1ObyXG$m;x4WuK}@fc!!xES|cA
zsI4}W6stAiit0dCrW48CEIH0+!fKLmF>~lrh36~<$mwkfX+n+?J`>r8)eav(M?iHj
zN;{)QSZ})p(d-Vg@)_AeCtVE@;=%s?cT8!`zL@u@1s2`zQbhXJvyO#Fwz5fahrJsc
zguhPfaF3m$lI(MT0K}2>l~LE(p?jl;W1P(zy8Rc{#~~Myu+z!$#rK>Qw(d;Fe$XuV
z-2Br<>2FXQZjligTR4B3d5?WEdGm(h`hucXg^4~T7H1nvAdm#RZiAw%cI~m3)b%Zs
zksK36RaoIW1T((=u6=85YozsmLg-?9mj|@c&*$qT6aT2kP4x*INg@x+eq-b!r^bM?
zCEQ9{M?;t8cj3S5-CmW}Ctn%ZhLqBB*~LAfvRIrsnm(gLkNAr|CF}XfuP&MUsY^$j
zv*>PK%X)cro-(Bej2)D&mD{`WEi+suTtClK_XLxa3Rf^HnK!@QpLdXh2U&jV0xM&nlbl}F@F(m@$|)jpL4@+~1`||y01Eb9XewSx
zJm<&<>mD{c2zPC=h9=Gfkq#^Gqdkkp7hl31DzIlYRdMn0=eFHLv6%~q?j80bsqHiy
zBTz4S^!OD&Id7B8D!%E}lp4D=<8%Sf&*UyI=gkjsnWnW}a&cX2V{Qo1qHxbc+xAS4
zA=Mb~@toY|94~u`D(eOzZ$XLI^;VEtP<;kua8y(#e^+xhjq3i?4kp`X+E?Qyx*8!F
zp4_rS%$$7MsQDsl-GGr^obJquXDgeIYNr+|GxJC{ecTm$1r2c@gENerl5R<>GrQjc
zv4qZtrE2;VuHL<#Vb@=@0&|otg61@xU|2RjU&ZVSd$|R;MpQ$@+zF-bHk8(`{hlaR
zzA}$FbC!xvYc_g|w{HqtDuzer@i|L|hNGLkyhm@+avEEYVNKz^$7)h&&2pM&{IzJJ
zC)zCXVrgn!z_N#GJqkNNd#V6Eh*;Qti}UA>^
z&^CxaPnVe}pHp8&*>dw7Vogyx8CVWAEfNK2Gl8{YRhXh;EJlNwtekkL*hk)+beU^~
ziX$`)gIr^8pCAo4qu|;7qxr=59y;6{8#=m=uCk}*YkUD(&q^jD>Jel(lR2;vZ$8T6
zQCC>FV<;YLSW%0R2{Du_qe|CxfUQdB`HL7%ImUhWPb>;tZ-!NJvfFMwQyWA$8b=mU
zQUVFDy0U%KreA`#
zy}l221~puKR`|XjD+}WEc8AN+9yC!jDklVd5OdsjQv&8q%;|n~tf{l^
z0a7RK)WgQ?Dl||T%P)ZXt&R6v=YjPkA4P=rDu;Kz?09iAO(R7vC7)VCh+G-q0*>d`
z>;_>Q=29(x%1pnpm?e@|L{GsvgdC%k5sgY#PKs5uk4Z_=sE+c-gJo%}+woJWtjb?J
zIIhESA9Xi=d{S>QG#VK}WP1Crs~mQp2t8ofV%M*Fwy&6b;?HgjqM_s@A#^CRj1A1l
z*P?|>w_zaksgpd9D?I9_BYlx{hdmWT^&QzrHrUQytp6!&uVQWJsvUmWY52hML#fFE
zVT9SJ9EYs+8>_8E2hv{B9j+Vscl6j)ybB2IlnI|eV@7OoW85~9uR+aE(k?uAwun4>
z021{E!AVheyfl+h9_ze`fWoMNT;Z+48W?yRc!JRtlKf%ZnC#s};anvJtnj%eP3?*F
zTP8ngVMRryQ@X91Y0)z(YErb1xAR##Z}0cHT+9S%$gYuIu^Y4xKQeL#1}0DObIPj?
z1QJrBYwCHZ*9Anf1SNS_3gVmgP)#*)u!r_wG#8uoFxY7R%|I{|+lGEhTR$w>3I6|&*-{PEX
zgs}2x+g=^N@2l@JhTvU@I-Fdo@+P*^^vgw3n3*3x)Q`Ha13Hb}$j@t)BmrF+$I%B>
z_RCjSy8)p`(&t8EWeVRvy4|?UrV>ceXI3`9ZxI+&ob7q-e(8jw$h;|~d!|hQ!+TT+f5A`XB#j*^o%K*-(LL5XWlo<8&gd)8k~Z*C*9^EaznAj-2k1i1PO;
zThIB-U+A*2_H+1$1yOSah}S*Z@^NTNHRbW?sZ&2C-~5_$-e_Y%Y#C;
z+^;xJDy!h<80Imw6K%nzssZp9J0Hq7)U}_>GNzQP_wSMp|Cl{w&kk&*7IN`rs-XJP
zEHM3?IwIowj@N}-t%IW>DEXU~
z7d;Fvec2^9cG`&H1e5>av0#gr^=it8UMQSH6I~4RCJvA9_DnVSM3VLOQyI)s
ztRnXxmkJTf@1dI`v%P4>wTFd#AcMDTvm|DdA^b&q|6oUx=_TUP;Pm$EhM;vl_oJgK
z%p!8S2G2?M^X|tJ%P&$OecdU>Md8>Ak3p>yP^f?}@$}C5V
z2$hnTEhyC{r&%LOsRfZ=mUx{=qFr6{j7$5}JB=u3>h^=1b(VCu0$bP0e=J_UDO{X4
z+%+wYfPk9S#z6R6X+de-&|UpipgyW*xB92@h=YPF)OY^33(v!cMDCxiJKh{Pol-Adrceq<>~Is}-4s_Z&afCC)&yYP7Uv^-_vG1F;it*}vH`iRJ6
z5B{8Q&jpwjgNflAh(uVKDo0l@I72OeIQ@47rHv~ipdtF$lz|Hr{uRkliQLV~qE-^d
zq#h!lWoRXJ+`h9EzB@H%?*TtiHtDRhvAO4)b0|_MEn~inSn|mE&6jC$HJo;R*
z-YkZB*G}#G%~hWY9?=>X`qCuafmK)7Ut_Aa3|AM!V;O_{A@d-Dp4s!S`OZ}`K1c0F#AmF&NL7fsgo2D`wFb)l(rw_ozo@d6gq0Jy3bCCkU}!hIbT9
z;lVMs9d6V@z9Y-80~^m}K2CegsH5Z|8AZ8fC=Z3$6n3a~_@Iz5!jtHlrlx^PkuZE-
zsK3+lu*8EOA^8E%&yxVK3@hh5KVyT>P+#w%;_2x5C`mpg!B4hq?*+6`?~I*9x6T{0
zk-te44B%9q`K!Ic@wec&i1&~SSSsvb<-T5ZcmT`rV6bIi(^$s(Wv`8Keo$zxaUvmO
zHb@Otbnnf(4*fIt3r`tEMu0y=kX`oAvK`KSkig-R_JscHeaq2TLR%+~;aAC~En1<*
z*mXs2K9izUGOLlw$R!^|RvMh#W#MBfD5&e$&l{)T7CyLX8hz3Ktb?7$4JTF~<{rds
z)%#HM-ZZd+~WNMav163s{rC-|`7>7eFp>gJSOyJ@q1B3Ls;d1V{3
zLPO8z66wXa`o&H~rbqf8Md{I^oY*~YWU)2lYul4h{79YV{DN8&D(&K*d^em*8W?P;
z1(Pyn59)!XqKBWS#qGxWLGGf1cQ?HzEDLmmF$0{7M7G9wv9alcJyX{NLHOv?#d^wH
zr2=voQJn!y3^`XwlV)`m?Ji_^09fg5xgj;-GBhU2|O)n{mjwR6?bbzSIA(GDrnQo>ii%&w~Ss
z!gr0HcK@!#a8qSwuI9{RK0m?zau4#5lt_|FD6pWWYeWlIUk{EIrQ%TxSE6LL{Q00@
z4stEvv_S2NSmDmESYc=gz%rjv7^Vv|1Z$_HIJ*cJMJo}_W!PWK>eAL^$01g%OT(}A
z5=pBhUuTsBvo$*p;%}s#**X+T?tBXhSx3Xd#UQ=a@3?%AI3vYU%KG#n=i)q08$0Nd
zFi5?@X3je;J_=I{tvBpIlV~i5#Gf29@(C%nUgijzKb@&cwbxL2+dAhS8&|wD6e`K_
z$d6q@B3}cf!>=P)imYbqxoT;0b6qSW4~|HNN^Y#jxH1}F;+OHXd!n=n`czd&jpP!s
z;z^lPJ1xzz@`jsQC10?_(~8q3ZG0BEV|qf&8{q0~eJfzhcV~1^Q0n+&%nac4tZa7>
zOLq^lhl78A@NyvzvlY%33zk@A%xHgI-fNc(#5t_0X`+dr>})hpMaM4_%8pE6b!2$<
zDmm>3QkdfDYWKxqNqcTct_oKm%wM?UfjXmP#mtcu
z?7yb(3bEUZGG{aQ_<*%J8Z-9zDM9Tavbr>X`fVw9+gZ-161CCz){&7EIR4|fVS=R8
zL{!dSl>R({Z6lI4ohHwxYZ40ch3+1N;!%uJjYOXqKGamaTbxmrjg_bqFs6rcg=JxPVGD~9PY(Qp)M9EicV}`2)j}iw58fglGzFJk4?DEN}J3tFz0$iez
zlO`xHl6ylF=i5$PPKeT3Kv3*T&=_Zc@W
zEq?JY9Q1O(d6-jr!pJS1S~R0J;q1d*f`%|5;x;j+4P%{@5iC_BiDRWc_XGX6o~en4n`%UMuQZhQz^KZS~dxgELtzDv;ePpAvL2
zW&{vyiO&fv5G5iTVme6sl!gD@4Ap44sRIK%l#_CWGF~Hr9(xMu#RY}bo5?z$=+F}0~Y@Uit3oLEKWr)86cs0|)tHumOy7Can(#eDg;7Q5{H
z5}0QL;aSs@FcA^xeuW)>6h%KB7@l5WC}y_LixuRC05W5Ox)N-C2cCIGsaand>FnWd
z1R5p|EsbE2xcb9;0gcq9?CiSflcl`yA20u;reID9FpmG4F@$OQ>N8{?dScW{(Pz!X
z>uKI$A?jHPv+4iCm_Fkr`}?=dl4wMNrmBxFf9DPZhc=BhqQBEM(z%w;P!}&|gd^M>
zvJQ%)m@O$GQ;K)wpt6$AlN6%rUMnEI)c*MW5%irxi7GTd=fw
z+G|^8I}94qCgKP!yVHBX`z+Yg%Xz$i?XI-MTvNgA^ulq;gp&LC%R|83&4o}(g|^4+
zq@(rt3jokFgN_1NS-bOgje|hbCog)vbJ0S1r!PSmm+9#6>IntXsyQ%1@MDq7&H
zF5Xp`k|IX$`ZUB|fTRdhf_r5tIVnMJB&m}=yN5j=VOYxy<)MRe=oPY(XNE`YwS3phCfrb}4P`s04OW
z$Z&O%Q)6g6UY?F(zo4$meK)oW1;y^2+R44jA2zDScCVinPlvRJge&#*x<>PSx27ao
z4pu_Gr|q%=VPbh>TOd(Odm>AnFr}gJ@ei<))HT-FMH;Jyo;K+|pQfz;Sqn*=_?1z*
z9@gSC=OTPu=(>~p<<_sUnn^?*7e&@*#VhfBEfX~oM89VYoxfmeAXwnh)8tSvl1n(Tduw;EiLWo
zIY5~-$#+~MGX61=r4JNdoG$9%UVQUI`W%MoGtR#CV9DxB^GG+HB--g9@GW@oTcaOc7@(5s;HRq`w$OOY;YbT=jxD;tL^!=Vf2&f
zpqka4iPY`kP=dYTr4&8|6}S+RUkkD}KI!cCgO4m@f6)-W@7en;3pk_?{cYX+tPsqW
zEz73QPim$u_gYO!@F|rzvTM0Kg6)^7mz}i&I{K`coG6tRzlLEnH
z`O{H#Z9O66+uMD27rNQ=)ck80vKNNxrzFA<+NzkUrzuMa%irmf2f^h7+Y&ahaar*1
zC=RZ
zHGLlKysA}hooZVLYP2FaFNeS&e{2x!AW=mO%o(>Bujvgks;;gS;r_R8gW7q)`$+X$
zjSvDPYHaKV?Pp;kf~S^VMC8!C@@Fyth_P`+z-Ns2X*hPG&d?8TDCi&oG*SPgK+rY6`+USzDxpzVm)QoiRi+#PY0*4r9#}2`C=9TIqGXL{`+&eMIHN
zj}8}2whK4f6I%%(+(G#^3?~A*tl%taGJhn)v-uUu&j$S?Sq_5~5Lu@USfQS?2-l8r
zN0L4wqbSj*8_U`0))};+bzyFS-3A7_r{}y}0XgG3N!M^Q7@k4})EyOvnjy0*hgDbV
zrh?y4YVouyeh}Nr?(xrHS?;Jv5&kZ$HZD(9qOpB?%q;%@$a<@|D!cECmr_7dLOK)#rMnve
zkrEM*mhSG_G)Q-M2uOFQba!{BG@FLAcz^$k^Ev098=hxBYt1?4cZ_*M=`*fyS#eSP+Zqo9~HV)VU6fcB&trTK&pcTzrV
z!j7Py`GTpFZ0-j5129VtnOSrfi%klb+ZX;+7T7G&pTII+t3q_-?URp&3tBciWb7oj
z#j*VjJw+0+IK6EQqh+g%sq`QZoej*db2e7WGb`Q0b_Py6rPGY4t
zRjH*ziJuVF8-X!cN%38KPk~L%GZpp%DkU9>?eI@Vd+jyy~xOeVtMzQNOFeN=Vm!_(SD$`zk+I==8vme4L&o`I!ho)Gdmk
z3?bXCZ1Sh)&N2B%J!|@*x5`}kkFZ_KzrWE*xhhNhU$v&~yg=T*y%8NF>U^IJR2xHmS=ry~*%)P8q&>RTS*Ldn@4UpPnV9roz|6HN
z@e-C$WrKdlp*Ev5=VcHUbWG5Y*riYqJ}g{bJK{jP$6n}&&|
zvOl0gnM2e9C#`l`u5?64e>fqQHDG=w{>go>$JpZ%Tiw>YFVWJhw<=^DMeI0RtLt)gMEvv}Scl)l$6YT3t1yG=qRDB%r8jzI9nG0h7R!g{SKeX_ffonEk`V>d+0*aZDR#
zb95P>dO4ViZ#Zvf>{E|!%bwh9O-oQ77kp1xZ3_eYOknr%kp0m+8O~ioJ>3by_i7p(
z)0-Z!ZG(^rrUO;YnuCHrnTO4eFi5G~L<+5s^qPgN2jG{A?GoBmbiVPAg3LOf58l(&
ze|bB)F)E5uH^qr8PA*-fn6am3%Oj!W2{~%f8ZV8%V@R5KI+{K}_Iz!d@6l=GgPzLb
z38wGSx|_;P8&VbF%2Sd2{(yD*^(&Z%vN-{j^G>{U9h%aP%;;Z@H?q>Ir!8BJfZ8p4
zIN!*pLB+@F+f+d|nqNJj1x@O88aMX~Lu2H)iwl&OEIk+af%2xG6k{!~VkZ;Fs>$2`
zjudGhW#L#dRf1wDoF&0gjfSd~HXBQ+iRYDou499(vDbEOcK`w^K`|8eH{x+iY`QJQ=2h$-
z!oU-NOHM}M=sar(97~^W#B5|nnCS&t3kseO*DjOxQR=X=Ia{?RC1q;{URI;OpI}UC
z&2o3cTf1E7@-&78-_iJyQLXrik6Y#Q`C!;8WfT<1O~?H=1Aq@D9r;6-5+HEi*HHXS
zae?X;)T$M%l{x<@is4QJ{j{Dnw6u=7rSOVk6TE%Y$A-jc)w4>a@T(Ws2v{59RW3tE
zRPIk7Yl^R4G6&>9fA${=zx(wOoUML9WP>TwGsvJ>VZ@7npSTv;7xL?i{#PTuW;hot
zGb9sv%yZ%=A$VI$nQr2Yyxj5rq;OWNSv3yxroz{y5#Dn71^sFVwp<#|sHNzC3LSuF
zPUo&dsERm2zXaFjyvw>sJ>gbiA@$;VFOgRO-4j=9Th~^dz|sUEvyoR*U8=b&a4sKE
zsF>-crQqWtSwQv_nBtsE*gJ0ZZC}fz`q6WpObV3tCGgWZTv6#g8lr~z++2W%o!b*k
z=K`$X4Bc$xq;qg8N+TO~{KSOC&hdvO&T-1B!qB_m
zImasEP`cBT&_D#oiAPkxR}U_S=+9X;6Sx!7`xjbtTP|CU`Eqz8QL2`}|gkrjrL{#udo5Sidb=3^k%Y6)~dD9mSYt-P{+FTYP~wR8NeNM-l+6c4He
zOI$KhvUz1{(;px2($Qz??DfF-uGq2qrxhRbPfywDIc%5pQog~^L~4s$Cn;iF+^np&
zhwsTIVj+N8h*Jh%t$U4wlr+Iua4#nI0sNcop6*=FgG(Y
zjFh-bV;V2zU^sUzr7n}nM_!E)AXU|AEb%6M1lM-q^K6q^t=TckGLg^oTC<&`F_R-}
zGFDsd+z|-VFXBmnJ7+ujF+@P0>Kkk2IgX;XM!Wc9{OKExTD0Pv%wd(0$^cD+t3-Dh
zO$m;dKN}uGh<~ep*89Ov~E_LE4KRvBnBz)|5g
zK{S!=#C5ZL&`T3@6;7^yn4(lVrvWNO=m_w;tlUA&?8l$eUZ=DuRAAc6eFDKvb&NG&JuWnxC&u!s?&b^As2J>(gRE
zz?E&>=~_8%U2JZww~N$}p>EOx3T5lhn0c(C^he~Ga+0BCHOIW!ed{f!Cyk4btjP``
z1!Z)O>@dn##G)9s--AcAnk~?v-fnt;*K$4jH|oWd+T~Zt>Jh-cW0aic`0cnbap{T&
zCT^=l=PL0*Kt*|cmr2GQp%35ln?2Uuup@8PR!7;j)yuAz8_*AQ3l3Qw(6>k;2PA?j
zQq5C-t&%+%KUU&nc`G@*7Xpc=5oJnqluB!lgRg#ZP5e@$V7@L15Q{jX3zyJ7-_ItN
zVHAt{IX;LGCE?I|H3GUbWkOpWtj}0s>pJRFivJ*w`DtE*>Jh&{&42cZJz0rFOuoVJ
zfZH0EzA6D&%EtSpf!5|Cc5ORz>C>>3{9SIyxTx^ad!sPCZR68~Ez|Z358-q!+&?d{
z!{s>RPQu|wA{Fg%ii@_O!YK9Z&%Qm@tM|*pDUcb8x8>&-%J)|%w3FQX$xSsi65h3w
zP0H__Qf6xz+iU)@e^*|(B0Z#0pG$7v_=FxVI$>)S9X6*>kvFv4~WdmD~^%jCIO3A(XLwXZHU|h!*Xnv^mBr!8!-Vw
zQC4ItUbKdda?|F>&pezBA6D715w~;R0goA@H+hw;T3l?QY%*s=ASY2}_3;kP{+H3x
zJ1m$U-`BpEhYS1s4u}@<0cf-peY~n(bW+mEoW8<+VeOvpNCPyOc(!VdX~iCNj2dGQpPjZ|l17CgOoG|&4y4%)^@7^)-9
zmX~*?y%Vh{47<@YHy^~jps<8%D?i}p+xjovB2GaL`J^4Ti2-WSOLkue#hL?Vw
z=fRQT*hEfiELoi=?e}h*8$b|~-!WUA6D=*_aEtEJ23m>JVa2GF5q`i
zcYF)uAXcKQ<=x?pgXvXs+)G7L321h-67hEre-kk$&Q^7|&VGYo$SA@KZ2LQnB?jBM
z`2Rgf3lg^U*O4EczGIZ?w}@(*d&x~t=M8^aFvS00VV11F;HdBgzk2#bS@y+I$76K)2aKx)}E}_`W^=v9qrjz6h3JLj9hZLIWitcHK
z4xCA#FyvBD4_MC7o~D=VgrfZ0H3$3PkOT|_h-u|J;5!modepp}D2si;
z(8#XvXD%qgha4)3ylMrn4CseQ$RzeXPXKCXnNNxr22WcCxuuRNc*m5$Eb9U@aVaPc
zwVX>HaxsJ-$!qS8)3Ma*2E5>U8F^qvxEFzIpJl
zId_!IKLg8p&5I>Lp^f8}Ec+6+e~GCdrC1!%>-{pdeXKq*Xv%u{L|+z@CA^np>6W~r
zcp;w2p`^WX_Nri#VaMTkINC2Za@#J7UCB1bUT0qR}
z9!)J}??mSDksSmHuJcvB`i?PQ_c{SjAd~^39$dNeYCq`u?s2ELc&I014208=3?2x=
z*9SJUhpNI~Q7sPxUv5Oiti1u*2`S^-HtBP>t(?KiCcMV-G4vW
z^E&=l0b%Lj>25Am*eF_WNNXXcG>*+wBs;9qe_ScEMs^Q2|A5uG@-T|4<@Hs|)Nsqy
z_`C8Crn`g0TCUh%yPjdoabTC_s5qtM-<0vwt*sqY*}e8Dg=TkNj3a@*wNhD!lQ1_?
za0E~(e2)dwq|Az8SwQ&R?Vt)Dty_Loti`@lCewX59QnYW7b)$9pC{nG*U%I3;H_4Z
z3oNb|q>r{7yZBppeIpVAV1MvAwI}GQ?cJ$Pt@<%eCXzlB3HGf(pK4WpmqyX);tOC*
z6s1!n!T~p@?gLoo5_W6?g*3cVR2)!3MNoBj(5$Y_=-rRLAmje`?8*%wV-gTr5k
zQvpp|SaL~~;a*+rIq0L|0eNOKWNJ(dVH0l@0h}8?EcbUM=U|t^w3Y%e=+urC5j81J2V10i6n7
zdIBFMomYCeTT0rt5n)Q`a}nU?Y~ol6VKQ+=hsv^t6WG*D-m@PrtO(ijCSMXa5`z9P
zra)(ua1MySPhDlZ8
zq_Pj~bEMUm;Q3A&=nHFwFhGbK-hzG*aC*O6n!w}jR20qHongfc80ZLM*1%Rbg2)Ob^&+$!;-8L_rc=ujruy?Th@Pga#z>~Ws9
zu@xrPb`M%@9u~gY{{N2He{F0=m{FSHjk$z7e}?5>u)CSjQFJ?7G94`@^o(6Zp)boH
zJXZpg#?G-t^NL7q8Z*?GL{s(yI^W|-?n)fXiy<$oOHhH$aN>eYJLz6jPj?_)IkwpU
znQzsKB^DCV0nW?k4^zDOG^=OwcuuU3mQkA*5;8HuFSRsGg6D4LtA#H}a`S=WodSTP
z!oy29n^S(*@s&^=%R^DR**5ZaB^F`+!#IEvbu#I&^6mV5F2Scnj776WaBF#76o)gV
zJD-`Q@z|c8C$F)_zru0lCAr-8=>FgqGoU`Q#lkr~fzO((Rk78Dl$D
z)#eiIL$KxUq20Kv=F|_pK9F1zD>%0kzKk~8H)}kMNQe^Y?^d(j}|q
zALq-DMYL&uV{7y3zvHX|iH{QPc5^S@y=m#+&#Aymn896MKN$CO#AkqfFInnq
z(Hp>ZASLsc&Y2>`Pm|6i3i}I@5o+B|AS5^1n@SPV=l%&NCxHK2APX#p
zvH>y4sK1bPE>=H(U)`XuPtDpC10j#Rs^5LOj;Kb93^OngJM#-%1c($sfiAgnX4Vd}
z4y1{$ep>zc-0Xs7GxUk`tO+Vtkv2(`KPMiYYPr`@-9cCsEM4IsA%UAPg$GduQziJ*r8&a&b=
zY7^1-Q6BiYiGp2D|1cs@=|>1bi_G|{_Dp9Ui;jV|9G3ZBXEPih$7RnWuOU_I8+4i|
zqX0oBMS3y)@e6Q_!F(@P7rt>lR<~;?r<9ZqZH@zMWJl3uc7En8@Av#%XZ@`CgtyDz
z&eMF_|FyMj;T~$W%oTqb8qwD^K~(oUBy*VSv80>-(p>3frGP&JC0xm}oi<+xdRAEq
z-`}fvus}pD`Ls=GNj{+&5#HF+;^TPE
z4yI2`{ApgI6!JK+j7p@Lbs3keu=5MCH?pEeSc;0ycjv?)#R2JJ;`9Vf(uiH-xHY8l
z1KPm&%4+`&7R=J<$7Q-f&A?*SneCc$m+3~gxK>i!SkS|tMz3LD8@#IDw64~&xa0Z7
zZTu=S_*f`P|L+bX`B}|^a8&+6ODroRfB1Tn(^qStnhBC!ay8$(j<1?*)>kRdDK!_UxXM#2}RDU>>UiMxPv6V9e3q3M=7hd9jF|yD=ikQDiEiAcG5{eCcB+pG-`f(_?)3?I;eYd#Uv^CdZa@cKV
zT_!*Wb2h0RI4Kbj2@Hv!=3hu58FtGA?%E~&Uu_|5_x3Hm&Yfq0PG8eCT}T)>t)dOk
zvX0xVaKig{1}eD~)ECAUOyWxLVzK6jwte!hX&O;gqMUa9KZ!K_@E`*dMe_k#5IYlW
z@<;ep$X~V{W&EBMubf7wmHylh)iI|d@Qe{kk0h@u7^&*8NEUWQIV31NJtC%ccL$f?0jF`_YYbKv8eB2OA4zuv$D|KA
zDk{3q1&K37ZlauvlxAUYx!bLTy0aF$bLepIvz>t^X}Qlx#8nG=nx6V2K+PH(+>V4MpEZ
zW4i9qbqsgMwvr8uYi$fKz(@Hq+_(&)Jo?s1h!oBUsHgP_qVvfmR;T;U3-fM$(V?c
z1Dk&%-n5D`%A1!OPoIxNzg)y6U44cDS9aW!_R6V4JRQ4ok$qj5D;hU
zqNOC*?=9Pe@$ti}sc)g~=T8jtvRTDI9p9GQMQkh3@MHVYxO~+>ZfB?!A1iTN1xze8
zZ(x?%3L}T;T|IU#>aMvSD7y2U5i`XG>tW5UW?V{lQ39YTdOdi{R|Aq1Itgs7?Ri?X
z|5bu4)Om0}`J+PjEi}ZG)kcl_gLxp9FO)O=XZp3LzLc)ekKrPGBwhk_Xh=vccja;_LXo{hC&@aBsK#o1iDUP8hpb47qLtBDXwCVyOh(XK?xK)vn2y)F81(@Fzw+hW~
z4wp1x+J0G=hosN9igAhnantvx4<9dpiX5}cpd-$;DZAEIST)r@5d|wS2pLT7EBCWe
zO$v%gnu`a(G<{8Nk<<^o1$jejENqMIBLbg>&SVxvMZnoY4Yc17!$^vQC-Pr&J=Z#Q
zz{x`o3J2d%>RMQ)`YU$6I2S>$+kvatf*T!pT(V{iq23S`U&gw6$){ZZH0F!PspHX}
zi@yrW1AjdDd@gq*r2zHBKsxEer
zt!dj=(V5i;4>Rj>&1OhL|IY;iEWvb*WrWEcGG(o4u+83XHAnT!3Gj0P}vq1^oNBy6F(N;4y&9*&#pH4M)>e(v(0^J#gaO7Bg`=X{
z$*>Tb53&m^c5z@p7=YLxM$0LeA$Bf?m`T{R4+Z_yYRU0k^hhELTv|#3AF$>mN@>&P
zS?f^H;WFe>rz+TSFpkMo`lk>N#`2dRwH^%_$4d}EmX!Vwa|K2!?9aa!PW~EG_B8RJ
z3i5?cCEn>lqTBQJq4a&ezIUL>s@U&9B|K0|yC0hdDhk(e;o&!qRFZ3}mBY86{BG?}
z!Wd)##KpZ(PWOP87QMHedkN42$BpAL->cI;Zin=_ktY(DL_!Jr$XqK3$GW`ur{5fV
zv-|d@`2b6V$+X>m?a*=m=0!al#6Ty_2@43I?HidF)lc%x+7Iu;$4u=O**D+3=^O!k
z2{fK$dj(M|t6yoU$aY{GQ@YZ_OTeB3ri4PRti+{Z37%f&H;qL~A`#3e^+=srdcTa=
zLcaavYXekmAo?e}3mlA5Oj^t%30*8*Wu0DGKIZyyTooSPOKUR;V>Mr9?nXMb)M7~tf^=X)=_0MOf{MHg
z9QbR=kyf^CTt5$-%hHnZf9N+n-~rAWnt6eaQD3OZ7-6!kg@j{KL>(5jQT3-qo8%Gb
z%$)P$E3G2Fzo&;Rl*qZmB!i>cLx8sfwZA&|plE=%xKCjbs-f|Y#f-t(1T*k|f>a#B
z{X>8Rkre*6rD6^g%7qcKcBZf_9)bM{trI{E4&PlR(MTHq>SeyvYUOrARcF@w`r#z`
z3CDlUHga>?FtP!MlWd!A=K(aOxSWz}qSrV1J-d5kOF0{b(?wY}T`Vwvx0gO&Hxa4D
z{-HjwyKq_+_Re#Gr;e2p%)Q^hVB{tSCMBxNmZay40ra8YHwYdftK2pP$?<_yeT1ml
zcwq2F{XaVg-N2J4ZL7Uka?R@S0;to(Szdq;4#&Qp=~>e`CmUWEPSgbZxxjOvfvJ9Q
z-vAm|N$M}|kM;V=Z{|ZedCx}>LP!t`z6{+~r?}n9aRmjdRV`myDI%H_WFvVfom~2OrYP!Qp;<;{y8T3}Br
zNf(T{e%o@OK?B~6om|D3uhw7kjB`VMxCEeVHnYC~^KAPm4scL;ElpQ+hSyNSCBi8+
z2IDE~t=rL}{v+xKfh|DD(TFLa;i}}&R=HK<%c~U5?qD)_4LOGdQ?YeZ@8p-yoE>I9
zm7fo4Qc@aRr4GYOI_iukCE2-6?T_TE*28(05p8307^cZV-}kXZ23t_Ltg#{NLruN;H)()))itC{cFAhStlE$huc6(bKqL00}F
zcTZ9b{-AC_n4Ld5L62t=1vACQ&`B#W(*b>X_Z2aS1yh?Ni_)+!>T-<+sZ+AfNR-G|
zry5}PXnLwj&+O=?H7HJ>M@xTy-qA5>Kh9eQ#NdA;r%L=GXWAEF?!-Hgzyb215Q6Q3~K%gs5Me%8LZ%k0vdOFCq3wB@U
z=es4<#&K2(wv7$8BvyEQ$mMPoN?%X4+wWfvxvU(PH#zz!EAfXLjfdj4J(}TW*1IA4
zkdZgUw-cC$hKA$Jxyr)*n_Y#Xezjad^s>v@)$n+P+I~e|IPWtiCi4
zn^+T6gn?7PO(c66qE5^HBy={IjT+
z(+opk8xIJW7>=HV7HJ%Go0!nmEoqeESWcC|DII+fDvZ1tBB9vDUb@$&HkVPvQBNeY
zBK`qOif4p|U(!IZ6e0Op28oGdkGP=!nJM5aM;BB4b$Z+mz8x%!SEgsDinPjKn;qDn
zoiS7ww}}FC3tb=qYi%%i1YGdDx-PHJJEM0+7#_A&6%||fnghUruX@4P+UL%KwlF=@
zrVZPSyit9Xb--KkTP|;^s4%@=M669V9v_Dn7cOh`rjEW1(`PbVRMMSJ|HdP^-D;MrLE=G0
z(UOoedEs57fH38gzd_P};n40kGOYy&$aiM%kcThqfgE_6e6?Uus-j=Gw&(t2FdmOf
ziNnnVB@;TBHqPIQa4K+7qgDg)bOh`8+y
zemIie?Pp~->p{REdc@~u!-0RZlf5ssRJ%U!mJRw(>MKo?iX`wpfWkDCc(su<&7sx@
z!zRwUY%zJCpT>l%7A+}U({^us)AqaKZ*ZHLOqYV_#ceg@dW(h;sN+Xyv{=gH@zdI$
zLQx{ZFN4^EU8Cn`T0Nj!)*Nw*f2m9XQNpLyhl(YX~biXQT1#Bu$uR$%6zjuH4<339gFgdAoopStm#Z+?V-pl=n4otbws
zx96Z?Vy-sKL(wS+BI?Oh{GoimOw>7<%p`ja3$(0DW6a7$)%I5OmbUgYJ3UE*wKiu^
z`o(R(V2*b`v&Xa@GynId6M?B4`WC9(DuzcA+Srh^-pU_Je|4=NPK3D_uNC5w0;~t+
z4d%~{7h_NjN26u#A({V5idL3X8muR+>BiijZCrX60s1ZJD_QFqbbQx7^4y6Hy)EQp
z-Mp*B$s%$pp(SYXk4lz^DpimGC4|7-_*&x!S2N^{_1znK@$o$n8!Ug(v-0g}>WIoi
zYnPn|lHkVa4(Fl^F5Jfx)9>>IYE@*C$H3C6n=!S)of>++nn$mi_xnDC=h+@Ypxgyl
z2J-RJ)Y81Bmg{dfkVG8U?VLaJYAGEh(-|2;sh)E*DB?apF
zn3!00aF7Vz>p+Hga2ies^CwnSnc7C8qGSHPS!l?@*uVhy0ZHa3d6K6PKqz`2AA1d0
zE7A$(Mlj~|L^uc|QN<~JU?oc>#`nMjIle3u-*~tjYFqyewP2*K*JG_%&m9+xJIqJU
zS6}B+ynOtIbK(T{(;qX&qfG5xJlf2H(+($j=x)G7xco;`51UtS??q&ZUHk}8tp^(s
zxmA`wx2AdBuh#&YJC!>3-ygcaEf4lFG{=8qufV-q4eK#>QcDdt+Fh-YYu3_p9Ye7|uVu
z?$DYcJQ&Pk^yC5^;cm)$^(@G$Fteve5BckY(RCM~w{zcY1w*ip#qb<&_^aZ+sd;Zj
zYr)e%P}0S*ZB8@g4p2BMbAQ6W_5TSG+&0`zX8yCNqV#1QExzLad+&6ZtC!U!)=YlA*siq1a57W5Q+MUjFWAj~*b|G%6L3+cnC4xa#$~6w
zHwC#s%MHVYFBxnh&6TZ%PGp5Cce8UnG&EyAcbQXKkA%(VpGtilG7D&qEx5Y-&cxyF
z?fBe8b@GsP3IMq9Fi;M;#rdMh9Mw*?u}P+r^yn++lMqx;M&$wjG~k2+UTSLw7leCX
zVhCMF$?d-VhTH(S*LdlEA!nRk<;}=J{JHJ%!CK9}0miS5_UHQH6UKIQq*b0`$RMws
zjhJC%6|{soi>h;n{6=@E&;G2d&eOW{p{u~B%PRAi@vOT18Ciic&3c%X)ABvQ
zeGXHn-8N|Of>|*t-i@uViaM5A)rubQ?{+wHvIcfq=mtP8s?r;9V???^5
z5I#wDmly%vA@N@HV{}ROLc2DQu0<9s?JC2cHm?nx=-zZ2Iw4~FE-|&LAu`M1O+7c?
z;O)ut!za{oiTwxU`OUHE7=pl_T
z^jvh~IGl!s%6uIvFHeje3}fF(o~$-~dJd@Vl$28;o!;_jb9Q3Se>D%u
zK54uu-F;alK(Uq##!8HaO?|f_mJ!GEnj1G`Wr#>DY!9Iz&Gft5HEDG+2OOqz&k}-M
z(qSckO^g}S=y|3Da)ZOWe44G}Rw+=o#?uGKQU-zuo3m_fLCUXWZ3I#upSVu=<`lVy
zRz!ukAhwWDhQ8$D-Tp;S`%5i(!Xz?$^H9qyS#h*%0E-O+C^!%yYC7KO*9XUi>
zTBzCj#`O^y(15$HN2W8Hej+^)Y=nQe2PvR4t)eTH)M>Xa!%ZhzUshDTdkh*6Pyau|
zzZ!((h2^Yf{BAmtFhUqvqMA^~j0O^LsI%Wfkv6X!L-mBDF@ZE`7@u1Sv6Qb|kOwAu
zZS=f=3+$F;r4ko)L(2;wQy5fg)dJ5bmwH-zoiy#s07Q3bM(@(p$$fWwB{AxPVL83f
zJ?z00v5)v6GOcR>qz0&<_oL6d1U6Gl7?ptGGDlb80CkLCg{QQim-l!C7GqG_{szM1
zFZR^_o~O@jAep^#`*m5FCvP%Bo(RV*>yGf81SZqce4w>x<==Yj5k{fdGup>k~t@8ix<%Yx@~~1TEgNygM^A$?Ugh(8i`jJs}{R$28yY6x^Mu
zM1oww>#qEsJtF+zA@hx`3(lJ+E2&BkCP_m2?($llrX%aoyUds!U6n`IML(GV156eY0+LpmC%KKik{5hhBvNknoS{0|88A?NS&+(GB*pU&+8Mb=d66
zLuAB338G{cWCuOy@mj6OFaS>DOWns9AUJe@?@zDeBVcZ+WWx*RTqD?2r4`78fvoTy
zPZtaV0-Cgu&Nxph)dH+#Y%sp###!*UADD)%+Bwg=GlDi#Z&P{A?xQavL13_jDp9bM
zHOY$Ke+l>*!DKTI3BGP)-PO2`u=Vzyt5HS@Yi
z)s1ZaRDtq>{sjit{GMwNu3hCVNdysyVj5D7p;
z!uRh=J08Pekf&oQOqIxB!L^;7CK7fMm$cAw%?K?O5K(kfFew3Iak$xwwg{V3GigOd
zm9$2}6WN?_lo0bXZk)Vma4LHD_<)-XA;fsOD`S+umxuo~Cu7#k2qch!56)2$7x12r
z{eq8}U3*QN$oGN#bNcuH9z?&-)Y2_{$3!T7kZ3liaFbUmp&?B%UViI)yGihQ$O!E4GhSBR
zC%Kg7HIw+JcrOw5*K%}K>EEA9o+Qn`-6LUHA84M5FUSUFRcg)_FzSJRQ%N-7Qg3nd
z5$13Oq*b)6JMgzU{ceE+U=*WAoQ!#PG^sXZk=3?LZlF3@%6`7=*bQ+ZsWo#to&wl?
zHJ)^(qe+EWZtpJCL3>8sBlv7iS^Kt#iY&8=mra`ID0H4%RTv~P$7?BnwZ#!Z2@Hqf
z8K*PXcBL(E>@E>p1a7$ig~HAoyzcRc=BTj*F0DRQ3nDx0TB<<_3ggd(z3b`Em)88f
zsuMl;M;IMx7vCSK|`(i|)bQLH+-Q-y$(Hi+0&ggHNyT26D*
zDARSQ*t`Uln|$rcROSk&NY6P@f>65PV_*jIG7)|?5vSGJh({;H;lpTG=gW)r%otbj
z?LQ~w-}Op-FgZs=H*!VqW^#E86Sj1`@lkN>o_Y-)UnQn)vVj?zv5ctDM
zs_<%(;P)|aSIuP)EPm9yPhTZs=GZSO5W5PL{-Bt#W_)`YVwlF-&1m;)>BdyGCRHui
zICI{1Fk}pIL3<{j^o(3SR+rX;5V>b|M50Ml+0KVbNAnu5s(k1`WfsRi%;nMbTCpa5
z{zY3z-ABF{8w>-D^W1+0;Kis}er-LMvcx=JzC$MFT;91eM|te~b8)-J2y!!5KhWe{
zTY9vsOjl{Y1#`)@z%>l49E^;~Z{5!`OQo%?0pnJwaURMFHnpClw+z!YEBrb1sU=ZZawe%{ook}NL
z)lpPg5jQ1Z1|~x)#XpCY?dC^7PanXr#~KuK4V)H!`VJ@fG0-(By6&5OSJZzR7ICmV
zT}J)#KW_=ez`DWj=WmCt2aL#2i8hL%4>qC6CBZ
zdhs6BZQS=jkCvoFME>4riTa~zkLO6$6nP}d2!<5czpQtfT@
zxq$t$pDQg03k@CsCw=?ES2yX>HU#@fe4LZ9Y!-*w1m$_M6Q!m63uHOAZ#E__S@N8T
z!D-?x)n0Xn^%g7+2=|PaPEI1Y~`SvpVsubb_njsJ&+~skHQgeS#MY6z{kI{;M
zNpbt4OWStgMyp$`h;eo@%Zx>1<#oc&6EbicanU`K1`mbdYTr$chL<+}J#68Ha6k^l
z$ZCH(Ax=RFz0riFgUwx(f_h9cFNS7dk&>8RKW$DL9LpQI24$_6H5wN=epN8eY|2Sf
z@M8z@D4R|W1ako+R!)}8cMdoernaOD(_|Z9N;zvjbgXcr0e-HX{FiJX6Tm0yYx6Cu
ztiU-Qu^|I#FA-K;+yC2rWDLPjmHf+fDv*<5^j(S_3c|N&hMpi7vA;k*UyCjR#Y^#3
zXns?@KmY~@Y0tmCI(}pk<;sWul=_
z=-q}W{mZKaGRAYL%}>MEFxk|d%mzAw^44#ks}p*FY$$6iJg1BV%@jYUj7;2r8QwOD
zo@}aJb_q^Mz=zxnXklSt{XJT0yjePiNEjP`3>UcFz3C~|XpCEVICA8>UiAqfVD+~@
zm_FUj4nKRmJC06Da=95Ytu|Y%i@Z7CNqpi`;HnHp)Vd|qLYe9#n~XBZNw|4HN^?`Mr~;|UWq)iPVv6c$-y{X1&5
zg~<2~M5m#kz)Y|?d8@uq{<|N@ngkR;^yk)J+ofBlfIKsOCL8qi$Cw#BOLgX(o}Gz$+FVhn{%xc*Q$c|lDiYr7Mn
z20oiB_89o)-`io$>8t(ozi4&&(<;=Z6-Y&(mh+e-KyFOyOtM=NbM=_wCY=4cIdq>o
zcv$UPsvyDBnmt%SbVksXOR}dekXz5^o<Sk4A@owQz}QwH9Kf
zGtp5|-a`g=%gm>zr{D~OWwP1)OpJ~=!gr4PCiq2Vy>12Wg7?(XwjXXH$PWSs@w3$S
zuLV(2u?e;?WCS+CJBwNK4!&v(9ym9_z95Y7;-8?PgAxCfYqgN^0>4^@v5-gN(&;%}
z80`+~Exv)K6L#`|nFY;3dzE!H0_jVP*J?{j?MlRZl$uPv!nC{Ga&-q@`Cu#yN)B@W
z@NoAp;`$sadN$ms@(k|E9w@I1~JtV&@U9idq*u{?$ZE
z$WVmSX&f9)R8O|Vq}1+ku7F~y?z=PPDogk0Z)`S4IC6!V+r9I2Rn91&A+23Uqv7G_
zB1t>YUKY+;@*lXXiN=FlS`O0U`YOEIb-p*yH7P5CqXy-!Dlln4Mc;i8X
z+Lp4}H|Yy4?K1!1VRAHbsL{j7L))0{2`EMO)GU7v_2;ZdV;D>Ge!9Ro62*IbNdBPf
z8q#@GQ%UED3ufD3xRo$@w{MWDfKBLQ{THLm@`h}fcONg3%Y$Ogia(n@x1~VWrSlDoTPUkD;9nX@zU4=*7N+^LKpKPLhEh{&Z_I4{!sHkW6r^1puud8W<}xP%yoh@t*z7y={>EpL_Gq3^#Bj)XymhKBEqiZ|Y{)e6_?rR!PC8=R4)Cyl4#S^6Y~H;M6#C`^y$;POo%d+=>w
ztd&3Qlb8)7%Lblj3c!*fggrfuWJxxcc7tD7?kWl}`2EdbW-2i}w}{()8Pcu*fm5Cq
zKUC8aWqk_o6)q;j87HK`diU!ULA&h$YkpDXIoMoKZwbW|r(_eP)x<18XrZHZB-KRo
z1Ze@ixouQrwZLoiJB|gbUtdHn#+we?`oMfCcX9sTS(*0MYuU7X@woS3iZA^nyl(hk
zA95W9oN8(ONVQU#Or=4W1CQtlYx{tB;VSctO{pkWu07IEt?MuE@YQluC%PU
zs6RbESl6rL;NeZQdOS&$B&MWDkEHS6+@FuAG&wO}US5Jj&*!~V+zE8SQtJd?Ox~(-
z$%&8D#@5z(Ba{=L(}Ebbn0Rw6F_*YxUZrhq@k(Sn8U#@9E?JwoG;4LBe-0
z&NOyn-*%eZ{<&HBuDPi9_$4jx*^d6_1TvH((qZ5+|G=#{k`&HTf7JaJ^<+%U{5s|%
z0@Zt)+iK+3E!SR0|Zi9f&3_DUu5$gdhFr=`$lL+KCRs;rNl)@MLel%@fr?g
zR6Q*l>&!3FC(m<4aNX=rNKSt7x`-^6>SgxqCDj2PIbKqxdYhuGvD<7v=y*o?6p*m~
zu$5_9_J#nvVuX^`Lnwf5>Spgk1mRp)L#W#VV}j3W$CK$Yy*{qMv*-&@Ny)|a3MS6|
zHT8xYSn}p}C
zXk6Lk)600&Y*x3PCog+3b_%&ot)T#}?wgk1D+X_fq=f#QA`(U_44=_2Z0bi9pYDBw
z-ZI$Xva+H{Z+N@jqlMkpu?Kv1X%f1Il3EK@f)q+D#wr3;cKeUNMf%YFxLHv)hQ2;G
z(vu#U=8&I8N0+!YgHnK*#Yv1)^)EJ7v(8~Dnsc^_?_;NXiD!{
zroTG{^-YYvlsu81Y;qvtSu8oZya;tD82&Vnu&v$gABhU2)Z(@|;&)j+DlK5YX5HF;
zNrBVr2A<9nv>pYI8pGfx=%FMzZ==`zAUEiY%}We31dVs&XYAk`g1(v|op!P4j0+-i
zVa`#xgB$wu6IC~O%~ZBOQifu3vLCtRw2K_W#{?md)--MmJg}pBySDFh*azT2r>nG|
z{P?)Kgq_!*LJz&rQw`#cA^e5|WV;=YF0y>ZaR6A4cYh?4%~IZF{I7a>*+65_J>)OSxg8?l1?z1$4BG(vt~
zR=p=H15XC_FV1=ijKg0qi~h-$v3hgc^To=W`-;;S-jI8u;g0nL8yRNNh3(B6{rX{-
zi!1{ASIAc)vGlKc0EON06Des5v7-8xH+7
zI^Q2W!G~zNAP(eP4_ueYoSd2cYO~+PR}L4A{cN<38QYaEG{p@4QAc995Z_OW=2QVS
zQMJS@9ISsd27D#m{p=U5y|D9(pl_Ij|E6{ITH>0|H*aU;gk5}-R+{bE7keW!Ur8H?
zz>kC@u>kF)d?@zrW<_wC8L$Un4r5P4Q-?d#eYlw;yo1230c^zV50RxOBD3CqIb-|C
zY$uWn;%-geOum+!>=5NTSt}5YAf)nL`?0w56g@LD`Rz(U@GuQga#vaaow=?+@HBDE^&-iV71a
zXB+?`FZK!{u6IWbf(N$&NqzaX-XY~&LIyP7^)iEdwqJ3I1T7TwHXH;d|M^sEhm4%p
z3Ew1*vDr={m~U3Tb}pz&o_VwKV^J$oYua_FgR-@C>!ou;?o83T>!-0y$?CVZFq3VJXu2^|{gyk?{`ZfZ+PaCu*QvD2Qt2K^NbqQ_JQAJFn=EhRSQ4o0it$-HfaTV2S
z68^+D{!n3;b;++GPNUKa$10wTWHBKKPAc?(SF|o|n;!fzd%5k)ymSqWT&%}D#gXNp
ziN~r{a~pEp%{)LiesdsHS@ZQlG}`*Nm-EpTT0m-e@e!fS2@nOvQxG*^b%KYVr`dq;
zhkr{qrZn)YoBo_o$G^wbNt!8L*b%9xk8K%&O6?>l{d-1ZvQ~n=<@l;2e-H};iL%Dd
z?wN>06^0sJU`yqzBwzs|;_j`Hs%TRln{+x_v(+C=x&Zi
z`H>*j6tc4-enr!%p}$>_4qJ>Y8NsFVFc>f?bPsQz;eLG#imJ{TrLK|$gD
za5d9D6IyK~=~O?^WSFtDxwDf$xwpI2yw~buIg;5UdeS0eZ_geXIfDH?`=Bc$D{G;2
zLxc#J_c@8)c$vb#>NN4VM`gE`6qLGd_kB>h6e50vYl<$rCU_!fExl0CF!8tA9pQ8O
z3|M3ecqrcvoJM4d({5zFOiSYBk~qON-M_l@Kg1l4RFGJ7nK6z6$pbmBx^V%7+#cV%g@%P40y#!q-NIt)&gS3DJYdV^+I3VE_QmVrjn5;s
zyc-n*tOOusB%-p-t6KhBj6Ye$C!*WxnAM`^(!3;g)=dN)`33x-f{6I)fu*?B@8&T_
zKqZm)dLW|)M{2XaxYon&bEixIyCpFxuLon$SYI2)gCy~!*c+qQj@*Xcrwob!r<^E0adUKGyT{vLiv$eh!LroE$SKQKmCIm>9
z|1!QY4`YjwQ=3gXYE|R0{b*h??OIUr>~Y}~xw7}9ui3FgP5k1#zk6b;9pDiDS<+Li
z0Fgr<-TaI71EtPwAVn%V2HjfVqO%`s@ZY@H@c*=a7$j@H3pW%H5SWYU@qY^**|(p{
zba>J4zh6{1`^SR~UjjxO8yoxc*RLGpmV039S|5#H48Ps<>7pC7%Im}saT+0+@a@~*
zE_}(w(u=G8spvFA-^eV-KYP{jBO@b>92~JS5qM{FR*VEd)Ah@P2wK8QO2JN0QS)n+(F4}iqITsq8waJHuRKvoxwmF$bp9#Pn
z&C@*j6pD|pz7r~16EZf(uai@{q}~rTT9)w)zG3R=*LwN}32D8HtEiShN+Lx3%uf>D
zJ`WC)LN$4g)i3+>MyhPuphQxxY^vPJtFB9{ghbDwZd9ve8uu&ho0m_`F<#IHC$xHv
zO6;_O!Bo#_*%)@rJFfi2{AsNgcifVlA$I}g2W~9X%HG#yXdQgl)tusmJyU~zJ%}=0
zM{8(@w(gf{d#3A5B8U-2)P9tfgs&ThN^?YG_s8-^p7^oKau3VrbYTRq8l}6G^buv_
zVPWJpj+HgAGJky)r-t}Kwa~E{;GVIwvazWGGm0r}3JSv2Co{l{(}m5|BBiNGytlV^
zzltGgygi&zD2DJmY3)-5!`0j1`)qmns#J?hz)xx$8Xl7uTBXZIuh|z|8$JqCGqZt_
zk*&WNAoK38gjR5Y`0+*igR21Td3(pei@_PbhGw!f^1cA=txH{t)MjV?axNnv!X(Yb
zwm*C2k9)O7)t7wG9rAXWIjC*a<=Kl_%nlGY+whx)mo@4m9%ye~=J90Q(^*<-1!?(v
zeiWmzMO>j$XFaSLA9fx@e)n2WJx*e=t5^-cpRsWjF#AW|Bzz~*+Y^rm1N5{ODDVI4mOGRq%@-mEBAN?I!K&nB}00j&(!GZJxN7!zOcA`;d$ef
zpkacprXCv0=(ICAzTHV-yO|i?)Xn7Hesy8)?@4*()b@5k8$sKdo;a8*+8)iqpQ5Er
z37$LmqR3Xp!BSYg+c>8CH+IG4Bz7mbu768~vK`$PVIn_Mob0EL2$ubhbQZ)*OZ&}D
zbYqmG2+!>RlQX?DVk@(;+DgR|c=>N#oX?(N*mgClXm6Ne=Bm}XeV_?}E7qKvPnjHk
zRSo%meO6q29)GXh@ATR{oh5Q;MLejYtW0kQhWOd?Gt%PZsP{mPEcwOXdpkGtX5w*$
zikTP0#1qUjw$jh(;-(g@ce;@FeI_@+7-p}9V9Z}*v1$%ecX#=;FAq-{`^8AFt_Q{o
zUyI$Y938UQ(eca=ayjM%^}M{tcPK7iU%qy+N{Kh=#!*st!i0VQ0JzhZ+tQyL-Vs#n
z)BmOD^Kx^d?+omX-AF>84WOh7?Osh*gr%$#)w-tFa`?ozm<-XQsx3SK(
z6(&S6(*P0ex5Di1ZrCwR^cwg#9At#Erc-l^2?!n5^4Mh289x&B9awu+Z65h&?mLhv
zi*UC2z8tXmI~VdZ;DBV`(C?X%oanB5x1kHM8Yx%q_*AF59wZ-#xz);-ZGzX$I+q43
zR0~ZANpH_Gl+f^m5^%V{E1uT}Cy|*FLxf`47Xya+LLgG*2LuLm_fwh1r4eFpjzfADbJ>T|N<-
zVu~+TQ>0`sUXY(>^^NUfSe|+rJE5^juu7d3{ltqkUDnL!Ci8WIc#k6$5?I0r9u&M)kQI^OO~cuKeNAG0qt?B4
zZuA&4t}daq{UGfxKK?Yz^EXe7G{LwX>5Wv5qix4AoU5wuTtt5RZ?jOnzq_Z~mWjuK
zJ>-S}BUYJdT={D`4Jgk=onB#jErw4U@1FDcN5$jcfG3*xr99o48sh(aBM7bQJGfvq
z3~V^#`X@}$_}YO<+dR81uiL6Y9ex1WaIk%4I`96%v8lE1;5lFO$jDCg%}2ut9I5T!
z-UTB=V%rO>g#Mg`X{yUh?>&6jfN99Nv^ZlOPv~`xD7ljzTU|wah{K%#$}oACe9ML?
zU%0Ke?ZJh+w>?g@(oP%C%HQ7y^H4~!w~PP1P}}^g+Hn@03fMCW8KhlZt!V50#m3U1
z7~fwX#LvI_yyEo6NgLt2$_}1_b`9E9wt9>sM-dS|He?XuzHH1QbB1t?O}C_j11}e+
zJ2Hnuf>P~={o1}m=LK)~4IXQq6t0k3u0*T)|K?WsccX%mYeravC{aj~`UyLPF
zW18XSo;nzrA!^dKHyD3dOJ<+;fVYFA0B$sj#9DlBb9#iihcHl{a)T3y0q
z+M#Q?=X=beh3d?bm(NpwkU!DAnyYZw(EitQ`3mN*Q!Sg|zH&468Or{3QNJb@49ZNT
zu#4Mn&Ua!IcK;YZedRN!yUbyzl+KfEl!MIY3}50$`UclmOq+a-ra#h-&*Q&gr^T-=
zt|rm)*ZA7n6>C^wvA<{%LzeTpY%`$yKvU<|g%0Cd0EOFQl-re=0b{EU5WhP-i0mWp
z01Gg**m3#A&I222$beBpYtZD5xyJDGwk$tvUx%6E!k2oy*EfOT`_?j&hp5B6?F(E;
zc9y8YJ0mLN0qtKXn|QHn$3t?a{9X@=M0D^^Hp-$92No-{w@W-n8@%U<89V|Rzfq27
ze*ZagZ#m;`q)y+F2%-zPw}D&?9t+<7@uXCke(LzSV)gZ`a(}v5A_x}PF+G*#=}@*A
zy@ha$FI{|UISftYlI+I(pSV)j^ubnK9_%~Nl!wM_<*~`VprmAdYw5IKmSmWl(YZ198t@cY3z;`3GasuvtJj^G4Wa-3Bt*wq;igxudk^`-#{^
z!l&v{f#J%lk~aci9|Fzr-(+lV6;ujJ`llsjJw?D5`v)2|S67D>RJBw1#>Uro4E3$5
z89hH&`&TnnI+STOVWINOp%uKgSh+K9&OkmOq^pMX_`FN5S9Q*rKN2gcx5c{r%g!wo
zB@iHhV^#l
zx~Ea_0pG#=#dLW54?s=%teFDK$8l%Kdh8VKg1v>SHBz>M`AD$6D}Ahn!w=p$T`@S@
zSnxDx@oYdTBWawgJ(uty^l66l^Ko!W8ei2VxcQ?$YexS1XYYfjm~Z^lowBK@Il1E7
z{$v38nI2v4{1n$`7qvxjOR#7Z?{Mh5bkPF72z_ePO+JWfmV`l5^S0C;7j%q#N}Teq
z()@U^DV$6ZdXs-K=b#~R#W0$PW?e@2Q|w-5*ha>;ZPzWirZjob3K3FKM;zeJH?RUG
zQ=iDtEcEcUZ)rKez2+l*!fkcx&I$765jo1JQ*N)j37FOjeE-4vg`~uZUm>nX3kL_)
z{S{PAMC7ZXGfS1Wk)Lb@sgh?_7F2@uXLaqfQ|&Z;A+N^T#2fnJef&(pGV$k9mMW;c
z+g9jhv1*zxbtQ}xx|*HxeZ{QHw8YY&+rmdPu#f3t)~^KP8ViOK)ggRFDR&IVMiD<89uSv8kWJDBC^K@a}3`}LVUk8|HOQTqxg#_D}H
zrar_&Gwmiwlo&E1+oP_!Dxwo2zz~)k0S@zV){T$%E5G3Tr+#*sKxcZj8
z3tH+rT?m80Itoi)>*02M{k^vM-OVhm@Qt>|zte~ch^!hh4V9l@hFak=6HoycBj7LV
z?{m^WVerDN+7AUoaar*MF6R2eh3sj7k+Mln3Kgw#9MQds>%&r$D`r16&HGTsaw_6~
z9diZ-@2}boJ3PjW0ye4nv(u_|ozwY;KeQ&4L>SEfiuMM^^aHO2TNty(!`_*+!Ue54
z9=xQzvqnZ%mZ62e^N4YsM`CccRVmnm!*|u0Z9(`A6zMc!*JnvCC%VCQ58$z|o)@kU
zpz&0ECOR{na$pNI>l8T7MYbpMLoX(4ATPg6@_E0I;Kpdk!Tu$iaVye{3p$
zINH#R43_%O3xtfqKF~Qcp~JslQOf%>7R&h7GU(~uCT!r#r{&MBpd76(RYwXrS=V=C
zhS*XzMZIm8nE&Er`RLSiwk1P2MJn$)r)KxP>5%-khrlWi5fV$o(SJWL&|H7)AMEC?
zbAfv`wW0+0lK%mR!s6kKqQ%jHTxoC}pA@%)Eo*XZHv`A
zBQT3wFJIJCz*Q940%oSRoJ0}tO(rFJySGl47WGu_L^$lU)NkNy)|bBM$n}}@MDw5?C)DCCe6gIm@2CTTaQdigH^vC;i8_6r$y*wBtZWGB
z1Zy3djd+5cd2Gy48%99E3QRAe4c!|9?rS)RUxKD2Bp87D?yWsYk`Q>UuU9}n<}KPqg(qr(Te`&qt-`r#*A`gInrg~wHF3+tR_Y5P;`@HPvH|wGpS9FG1D6jQ8
zx6#rQDj=(Q)aOUacmG)>tThRCI9M=jkDkF^?%Z=DG{M;^U(8a7f38&bvm!qP=ls
z+Ovbr+1dR~!3uxnh_0^W#dpU#3Dp1aA-V
zzTIf=YicJ`v?O7Pzb8{pxJePuIZtGgxbwzWX~qau>#OzY8ld7o{lf9w+Of6afB~y_m}G%N;BG9+oSO!BAiQt@5)Clyg!%&?@D$!-gIr1tJ^b5Y`Zh~J?L9k
z8MnLZG*CM9v-
zbK*rOY_Flu1jn=|_3>XWK|G1VH#nDPcLPb8;pm5}0oBt`b3BfZ@MoPVgXMYw*6;U3
z$AehF2nz7bn<*(w_`b9+E}p1`(NjqJgMv;6)a4tuu6dV3&$H;fEdOyIlX=ja^p1`8
zm2w*OiM|KDuzkKZLwf%_8u1S-k(J6>u-1zF!JnmYH)2L+3O`1b2jpdlby~f4Ry0~B
ziLmH$s<~eiKI7my5q)+aQAn={C3=3Gk9I5rzqrV5h22U+T4tJI_rgc~j(T>sE~l0x
zmjMH8#+-wdjv6~*GWIb22ew+m2e8rf7ZQx<<)Olsax@@ik6cuz3&i*KG9L90`*|3LHnd
zzAAt+tZnQ0xlAqXRQka-mkj=C)&Bro%D~EaEHb_lPd{b*G4#Kb{u(R;U`&#jqzyL6
zp~+Dkt2AIu>9OF`jb7z2Zg46LusawUmom^Uv5RJFRBq>;%Ia$@!+vlMlNGOQS#VZ0
zDKOZ}W!!gDU;pWBbEC1OcJ)u3^P$-(Q1T
z0QB`cXs->ZLJul%7GG-!%=%_#nSI?zgpmcD%k`xTA;91`tX-{R{o-E&-vKp?l^DL(LVGsNW#wKs&;Ls2|
z6FSbcb^rG5r^Go?OyooRpI!TZRc@kFz$%rgquykJu+0@n;;hD6Z*JxSjep%y-uj=>
zWaDuG5kP*yOPGzAj-
zCj!1A7G+veX<3P69{`Exfz@ELGwm3I#H7<_x9j3Ce^!@B6ZS>{47=S9q&@>Y
z^$`;CILjx@4WW9t+BY=c9x|(rYRIhKVHnw@|1CQT+UVI$gR)l0PnV>W4QVR`8R8ad7
zR*N};d|Oiq^NGlLc^G#m<3mRb^klXsRo9CufM;EH0uA4UT;wt)9$3?)sHk;1@D@D#
zoib}gJl_d8h(kZDBJXq6++qgt(*WtdO^+RpOL@PNBw`TpC%ru5u*)p$^{%!Wz$T6FX&S6&Rz!)cF4ff=XOe-g#O>gSvBN2JAI>yb*^0~83WhG4b(@o=Z
z;DxyzHUeDe@^~o7-Jt
zA5bqD1U96+lP=YPk+H7F>)mhw0_T>q%cjJF?pALPM;R9vuG=ln=s;p~m4Fozi
zz4>d2!kHx&#>T0HKbRI|y861v(QGRadtr`6*WE$)
z){+amd*Ez||L*g-CW~xnDrDtNaB^cuLqE%?Cly32{1X`El8K#EJV=6(*|=|I>SO;<
z^GXK*Apmf8Jl^okT~Y}})htx9+x~YS0j1m^K6tTk@;CIIvIQHED+&vPQNhrJKH%OR8{|$UIuAL#Q_3N!
zohk9zdp18^(FOeG`3i9K^rBx%nFOTs%M`}!ZC!hrP~b;0w~Bt6)2X_=yFom@v%S0K
zGvAk{MAA*>CXN-g3ZCBfVl`Vnd0tfJ^YwT*hQwuaN{hIHFC?})i4X>Pz+|c{^xo&crtzUpg_8hrYGzGiZHs4f5lAv5v8y
z&X)12Yb}IlXtvzR6>U%N?%JQkrY0PKvFEe;%z9oIM1`twb|(+c&2B)Q?W7F
zggOE&vhhM@AS-!rthDio_OD#u)_-mAHx5Q+XtdjdC6R5L)j=3FM|uq(A8y{~jwitL
zA*STt$;UPzAM~O_i9sZvw2$zA%R$nHZ+X95e-N$OT>)6`&*v%`-*$sb4-r?`7N;m699dF_M)1ZL2eV;0PU6*h;|?sdq!N6pcPca<)??as>Uqf$
zTvmWz?{PcT^2Z+E5c0v*{yDyWlA^!HDbg>xZOT{U&ii2eXk+edm}UjJ(5Kp4D<b<
zN!2U|x7Bbcd#FYMN=0V$Av*X!d_9@aBRMZFEUYCs?|nHnBD5s2ts=jr=cXdw|5Ma|
zL{lhLBG}eWn&?HW#b5f}JQeY$c_m^J_)dobY0CV1Ptp_lA`jkFNLAq4GsZNx#YIU<
z#x)cX%1EOE_?t||-CfFver%DG3xEe^J2S*Eyt?{WvYh^I8=2?A%6fXh*GrwnI$Kjy
zZ~@iw{+ZFDP-MQvkSmCj-I@>3>t_#MHoAYvg1+wYMz-&5s~<0TF}0L&BqR1oVIuR9
znP5zp8Frk0m*(}3Wppi$rO<_~F7s*Li$wN`h@qZzA)t)>yWZeAF}>bx&*MDcA>56R
zg+M7rmm^Yj2#C{?!>;)dvuR)Stb!B}2Vt(XrBq_>P~T8FP0?hR7)c#jKb3+A6JOj4
zX1jiH1=q9}r&z5F71nhrfBg&<*WTu~l}Acwe?4X?x>f}teW6tVS>MOROV1Vg^~r=p
z;H$Rn4~HlBI4B35D?g$?NUUuLXgFJW%V(ASqKP
zKQ8>8KyI1Yd6{AIRIbi1--@bbXZ;tEOfMznPabVm&D4LKGN$L{Pn2`)$M#-Gs&JIN
zRz;w4QqK1?uw&E6Qc|R|_5#gXk*kbE+U8KY%>)Id+MhbVr-!Lc(T
zL4F?}93%0DHMfFLJ}U21V}7Qx5mmR%4N5{b3EYmm
zoZ!-T>1ZAWG~^_v?}Gd^P+Q?7(w6>)`l!O9PZKd_z+KxM+Gh
zwi;pg_+rk(#i(g0%>pooKd*!|FRlbq3+$n;JKYQXNk}mJp8tosu`Q4kdYlpz)%zmO
zW^iP8k{KtRgEMo%KT5
zBeM^92!w9g2%eU|judbjC_YJ_(uFt-bO(A^nhXq6!5^i36nJ&Zz5sw`U{Dzcevn$H
zeL6f1UcVF`h#cO`oRHT|<$R*~9z^`U)4}V-n|)YoVgUbpp_#U@iFHut56~OD$>gl@
zFPAG^-{Q8<;NA{%hSNvIPmFDkX&t|(g}>#JEJRZ)85zlR0PF(-?eAdShu**oWnn!r
zr#@a-J7wl~(3i`qQvoOb(|AcFaolr1Gp7YnwbgkeNd=bV2ZKo#t{rsb;$GeUkb@gI
z8&$SO)j>#p6esWrB}P}!gb%Ra%|@;Mhr&ny51{cXKJAH5>BY*lM*Bq5|{{JN8MQG)`*%9zd_EoRfJ#V@7
zE{Fe^Keg$CBPGi6z^At_fmEnCek_7A3i+n8{PSNf23`*bqgeC9d$Fhpm$UraRG$}h
zKsT(go+RiidCgZn?*|v+iDGD|-$Gww1ILpo3|Z_)@`{Y7btRmE87M>91hh}5cMzux
z^eou`5k}2TRMGHr@@MUuk)rx-esC;bj;%!pCczI
zp^(*_6Fq6^Vlz*Lhk)+@O{TBeqVceU_9+ZDNuCOAlc_}UoGv_OC1tbDw(RDQXgJAI`n@?&e1V{Oirt@*@}9VeH6
zyvtVG53Of$JF@>yHUTMi9);>IOFt#$k(+6|7KmXfdhASInmiojO&)0Wujv0xy|MrZ
zQFE^#X#M8x;l{J8o?!^>h
z>k-Su<2#z^!*2$@j*}BTd@VPUwU)d#?SZv=#5o326XsU87|-~oZ`q9d3=;;su_rMW
zpZbiqAI@t0g+p)95_n$4eNKy$0&UjsIC$LN+s(AAsb!@2(rM#2zwG-iZENUD=;TIZ
z&G!!49+u8lE}bvxnVVkx+S`+(@9N5L)h%>1$fi@1%ys9-_%(9PtZu~f5wU89;B9NMnqfm|ru!x@OgKD)~9(36MFcZcIP3iPmb|y1-|L`dQkFc`XRo%zn<
zb1FVsl)SANciH%Am%;a1D67Ajb?_1A!{!%we&I1~VMx9sB_TDML7&e7H0~JPG*JHpHVS4#9rO2{qMZ+y
z&_t*sy%yiYeqN~F{$H}wlbKMR3uhjFeN=97RQMja2g6!uHC)u=Y%;ptO+S9;#z9F>
z-l}ONqRTm-O$onU;XN+dAGvQnbwJ@%fDDCPHo*=B_E-Ev0nx`3;}M#kT)$&+M*@PN
z39X2WXzf!?5|rFn>JXp#qg~TxL$xJsDo!pgfBlYYQ)HUN1yh0RQ4Egz+tO{4La*H7
z*c83NISri%Rbj!$j76d#dTs~`W>qR8JGSR?a$ivf~
zJ%+V<(XZ(uWx(;YOj}|oE{_)ehw3x~v`_NnZ@8~#h^0&kC4fYV)a)=XWm?_mxCwQst6r%Hkz9n5@-msv9+{)
z$ca@EHGJ6STLt
zPA69|*m;d9mKO{o95`{~QH!~-upCO#e|a|=RQ8s0e$8i%0o~o=VFKENqNAs8mF+IKi=FM=c8qmDc_Yv;Fqjdp|!7jj=e`
z;}xOj?sCy+KXPHn;ZAP`wYPk}!U-2KY`!ItdMr5oTBNZz^${I?}3o?={
zw=q48Lr)rQx}}+zZ=sas=dP@z;;{hOE9>dZZ9ZXSV7>|K`*_IFIQ?)pmS&wBE8op`
z051mJP36u1|`rw)(>V4@+u|M7YXiFa4j_
z=ueUvpbKe7-jIkHhO-qExb^(I3~DJ~x9&O{F#1S=7xEWSKArqfJ)WltEnHXkZ_&Hw
zv16S^ooB^^+UvZ}
zOL5j;+(83#tUhRJeu$==tFOw=jG`~|-|I5#7X@=i4m{+)C~)ZVwKYVL{=cF^sr(<8
zGm?D^v+}TiHVn(2a#BW<8`oz&QLnDIXHXxZa`sU5uf%tktPx8i6JDNb+DmbOdhj@f
zp8O3vlXXR5F{{&YK$?eU)|id^BWRHAft9cj$4C4Dx63a4;X--d?o5FxxD+A_UN2+O
zNW-1!Z8$yrj2*`CwD57Td@)ZK7rrQ$3GZ=#yN~
zf2(k%cC<0DHcSo~gq1eBl?U9v)2N_a$dY{LQEU1=koilg*-gOpYePiio(-UDQTjjy
z<)E)9yc**A9k68tR7YR#kK=(Ig?E-`FiGBks+O-IM^h-9D)N@VceZCr@DTFf284>I
ztH#Te!j-wd<%vw|uSV|A0Z3bopH@+X+Bd=c@rc7(+N_cjMmOL8T{Wb%YU=!cRQtCV
zpD7?)ci6;@i5%KHb5ZSeF_uhG6%Sr_HXbG0#^>P((EF=yIMEG<;=9)q%K-ukePM2(yjeKs2
zPjx@1dRo_ziqG1Vu?_&JLdC6&-LfjI(d
zO19aCW|FOs%|`C}&wYs0$pqfCsjf8tucB~jr94Vj2B6hL_<6bSPKt`#&##Awd%Rn*
zra#iVaY2tS_AaDh{#bUYM+c<@-@VredX;IYYPrY&{WW;IeXzV&Jl$QE1Q0a&o}1%{
zAW5C5MZG>=bY8s1!+_7~0IFAsg3Y7|;^LWbyNf&Tb4g$V!wjp3?^gD*i*xsaOF_lr
z>iPqs#vdf{-ojb>HNL)hX8LnCBd!uC6&};Vk>fly4bXrDf3)!eH9h=Z5!GMbh$AGl
zHJ|=*eRk^B@)%M*(MM&F+bL
z0D8x{y)t7iOT?>>^CVSV87Qn8{Q{(g(XF|kR)f{W~DgkC*bUsQWAH1@IT_gRrMJN_(G3}Er0ne(@2pENYSyf3)O$Vs03OFwh;m2!w-x@KNdADskZgNw3I~01jtQB4yqE%w@uaSXCNukSL*sEaHv$kor
zsVM{qbMHlj!p@I1CRtT^6Z7RE0Q;}mR%aa91n7t~?Q!8OTI0D@z^v#Bdoi{3Bn6$?v?P*<@ZIdwo@n+FAJ8eOA1d8jCLeX<}bQ;*o&hHPO?g!u%=g=XDfh
zFC8p;XU%OulDN<|4uc5vZc82Mq)oXWRdwTWZiugP}95-`=Ib`BN%-vp;IW!~R>Q@GwDn~;;cG*{B{|27ChCsP#DZ@Yx^Q=d-P7lx+D3EO`h>
zOc{nvX~nwb(|hF8uP7TnK>g-l0cq4lg?NZ4a64aVR$n@KP#R;;9n2?8N%bMx(`JKy4Y$wS|seljAG}DW%~aQ
zb6@>X)z-C(q99!Y5*tJi5CrKCX_OMBySqWUq#FTAC8WE%JEXf?y1U`d?RnpW_q*R8
zaDTw#(d}Am&o$?mV?5(|o{4kw{eBM%;bE_y;URKzVT?Rs@p&n-pF+@aT8ZBjfA=cC
zVD8b|KRo?i!Qqy|qS4WIq>BRSAvqtpl$E%}XnJl3s}C)NS99DlwxDXX~fp$7=yX8l~ut%Mk`a
zBK3lKCF4g|5>kuOwa!kh{IsGRp&_QqnU~Wqm>jtcLvM++Rh$b7sx+LKjd^E%voC$0
zt2v)!Cf%x%2}<3UQ``Gp(%{sGgF!REz{kMQ`W;;nFCwFG<_QIp+-_)hcLE>K{Z{eX
z@E~whY5O=P*Tj3Mp4K)RAZxzZ_rsj=g`<6Fhy%xI^FwHjvT3Ugi4+)enHMnLp53gk
z-eeieo0(@Xn#MQM87j45u*TFW?0!cX@V=`a4&Q8(I^pDgEYxzo$d@NC~~qrGBkh#$DVr!f)aPTWwbV7
z$wK7=ikmOl*{^3m{BklzO?nuc6*l7}i@G?LA7ArSwr!Qoa_e-EW@ZQV?gnzY`#6FG
zM?nAlyqAvQ`opNs#Lw)m4<&qkb~o;Te=>iE^1g)+s)n+eV~#(2mEEjfaTAdo1smjt
z-*@9M&v#PP({a!ecytrA`Y~Pmm-hwn2
znZk0F{&8Nb^0K2%&u|gQ-HZl@Gl|f~eyD`+IxUora()>ZT-8~Q3-7x@KXIhdCQoCq
z{b-c9bHg?OPLP#Vq@HGp`YcKDSX44l2fUY5WdF^Iyh%{4=AIXR1y~B`NxT~#28@-o
z`Fwf52*cbhjjrj7362>ruh`1tYL(<=evjK~K)&FaY6znF3|67>Nsnl3v(44>I5lUC
zHZu`oh{VthnikOy+o|POkYKh3du;U!Nf@B7y4~zK|HQv&@7U3v_F=F!$zH$S508z2
zR<~Y0XSek~^aI7Z5qbO#VIr_Zmx1#uG&i$yp*18kYZ>#T-*{$iN>a&h+_4JW|!UHp-zpbq0jlSNd
z43|VO;q`@-^sE_XgA>{!R{vhv2?vCT$H5Ml8QavL3_rcUUq{fa-&Y=SQ2DP~H7VC$
zy|yxp<@@&|5ps)hUDBExiLy=Gh4W)P=TWD(868|(cbcNa^C>6nb+l^K=WjUiZDFCJ
znf%U}P!>N=9MIRk$vGLRKV`@s7XxxFxLIprC4qfq2W%l-b61q_V??cH*06MxFFinG
zz>k=TPU$DS2N*+67TFJ#CHMs$cZ+ndo5kl^pB4*KXgwKv8=em`gWOx4H-F@5Its{)
zZ@M@#$Oi*UqK6kXH|}hul_z~9LFNfK-@O4l;4FFIHX7`7u5tG<+q4XZ%%HhSFNHv$
z$gSD22U{M)Wn)E^1C1(#1!yV#E6%B5m^3Y8GG;?~9CY^Q1X(A45UHt_M>l&)co8wf
zbj&xK?xQs!uoFrWA(GR;#ZI||d?GZp7pqvLne-?qZsa{iY}6pvS=<}+5r(}@%v-ao
z?*W;7sxR6q{PLbq&fv$J(1zjL6Y~EM)t&M%i$T{uyyD2v)K-IOBL)zVKKgX3Eoo`o
z=gVQ)*<9Dh_yJT(@BEP#^;xAFM|y2_+vWn6BN~#Jq5!m`JLkC`QS4M&FDwGytg|8{0fdAG(h{j|qNRN3EI18c+E8lC?;Gp^Kgr1
z`U}9JrA;MZo)y!!+T5ZTh&P$X#PBvsk+~i=w
z5r?bQIMZ5{eRA*x6UDE2JozyT_htp!67Qbiqj1%8LLaTlcYG~2u8xOsPIq%PuhIkh{P#ice|ymL86&-Sq2B^3
zIY^7Hdn298HemviF>y3klc`JmiJ!V&QXtX8ybAa=B^5|HBaQN3WmX;jRE>+7T%=pq
z;m|0Xi=;3%XG~cYY+ka~djfuFVE5Zp!j1+@b?TUx>oN6%0fiSp$$}?v>7`Nsn8Xoe
zZy;cRfnK1Q+`Qwzq@0>yIu>Y8ks=OdVc4il9JIBAhl<2dLxaVJ-)OmB63Qfo4$a>p
z0tg&~Q7>$NN7-?u4%*xO6^e9lA+v7x`(x{uqL>4WX64R=9%s+@7P
znzP0`N6b;n3YU+vQ?Mlz2*)0W0_b#ouzF0^?03V}oQO2`$CmIa&NI2>o-l5X)hv5u
z0;H5##TV+pu%zDiueEzi|5+pMclh^H?#a=f)hf82w9X
zHr4lr*Sbd>ZWat$HZO+X^lhKi8HFZTBq%H|guhWPs+1{RTqK*nb9pUL!_(QJ{K?CB
zM~sr@)?E%*AEalorj!Z88J_U}V3(Esu!*_=EGf?x
zT8Xl<oNB@93q&#-sTRkbBeLS~Z++!sJlTV#oT=eSmi#H@keRIE6fq)i%}#q8
zLx&FW7rc?zJ`WS-FA(vWt}U8xQoS>ljLkEC>+|vzP5U)$=mG5$Y99fIAkb_mNDDTx
zfB;mr91+XKnKF;Ohm~A&zt4?~tO}mkOMhd$liHw}^;s@y@a*@brN`>7g?B0?j`?3O
zSlhuhQ`5BF`GUbBQzV%5ktVV^OWgF41zFAPY>-(Cv*hx;-TJvvL~ltVo)Ay+ec((R
zByUh4{Y%|Rys~#28X~FrN2-n3qSM!=~i{#RbOmV>%
zKqX!}q9P;n2I4ofM3hP@K%H6kK*KAyp%BQq78qB`2+`}2IMd|v%=%s5&hW!nT{!DZ
z-hU&!m|m&|VruXFVT`7gHH!#$F2K3=rSg8%4ot;OXFMFzWs~+mMyNnycwoB$dx|z^
ztt8R(IT=m9oE}<2`)CX88y~y
zA8mvgoZ8mtNJl*VJ-)zs%!q}dOJe>JF_ztby{0lTYj|<-sLhFTcCTUo*E5Wcpo`dN
z5+FV6GaX&Ydwnxc3rKolgE+Kxt~LW_8Qj1(cT!co@wP&Z#7Tr3M%VDC*ZiR=IdX!Z
z+;CZ}blXI{ZAz;KHkia?
z8H2(cJX2?7`~-jn$7@$kV&xhnrEGlYKF0w$B_H=;l_VC9uWKjU
z@y7CC8yb?R_wV}E8?KTaVi+#AQ!|DXhHK^G>kTxvfKv<>OH9xDt2@VQ4vJxg@uqOQ
z!=kd9A_bJ!3NfTD2d#?tJHDfdQ6aa!~~z{pm5&1-s5zZ;Q|zC
z3Z`0fsvtoPhZ!D3TbYuhEkvMDf_WCiA-syBb?orU%Lih}$Ia!Zu^fjfgZ(0zM#ZL0
zR152pHVGrSVbj36=zJ%hiFJZL&PK)gGisM%m`infxr?{V^$y-K3x#coPaCcraUb`GIb%dJ)KfW+6@e#rjji}voYaE7f<
z^wj!@yQ|{rY1PF|dIo4rFfbcp&f{C6z?c%SLh)pSAYo8|!6OgSKXB?zi3C(TKn(#+
zgJi8-Fo**7zhleVkm%9xH+0ba6#**(EbKWK^@kd9Hjs9Dr0SbEqC{WTv-*y9{JYz4
zpTfzlR97R{%f6st*X=-O;%5#PHxzezcJEfsJwz~!+1cB@1-d}5Vgk9X8^!$89Lq)R
z=|z@>!vhn;Ka6%_3N){v9Zrf3$3)CIr%8X#;}Em`Kk$)Rv9}%s84Y~
z@g8!PbVryOOz34e1zE?cQCob~$DN&>%tUxx5kx!_F!b^BNF9DD0^T#9pflfSzA4|b
zxw+2bp-7X=Iq}q29*I(y4{+)pw{84hc;gySQ573QT|mA%)a`kA2^!UkR~tMs*#EFI
zQs`n=#9%CK|H4!^Btx>tgRNJrLGAEG*wbMO01}+4obw28>Eo7`GWf
zqaO9WvFTM*LDtooF`%FD<($ZCsyR9gWYbZLDJ$Fo&oU!Um?wdB)<7E$DxS!(MQZ?t
zeA_YCnr=VrtNZW(*w>jwqs6Ordt3X`YuO}UJD?{c0r?9!iOo0M1qDVto-t?!q06P3
zylo|URsAkiJBQb6CfrnaHU{0s5ti{|I^7#nayd_+;5{Tf#~-gAmxh?S!?koO#*nKy
zwF}6%PKwDo10~&OpXltojm~%_NOh_SG?^r3z{z7~SST<*W1AQ+P6RBGZNnK6&!f(*
zdB#f?D{Ya71N(D#27vSo?PP`CqUQa)x=M#?iA+?Ko68G+J@^kKqgt(ju9fuH_+^3d
z>-Je5*54o9hK+yFz3nuJhBv)4P6d3Uh&lfP#}WsLv{hF?S^)AL!#hVTnD$g1%)Lsa
zqpu_n+-Lx7%t-(M%+$=mJ4bTJGDSuhCl8(~E_|b3iI{{glxbxLM;Asf2i2;At=y%S
zfdmdmNczG`h`y%cBB#F{(5Jwb>8k!G~CM14-%o>KBo&NN`6vogV4laOf9LNQ_Xcoq{!umjYmVe~IhJ*CN?
zA`Lv8#)~e>T7Vekwr#Lr4BH%>K%b
zE&~l^eaqcVs&!U5XQDR0)Y|A|A;^F>hW*>RLRKXfzn=yu{CeYbZ*LBuE!Z;5{gxrG&2&IT
z0y?b+p3Mq{bQ%5B3w1QTV65a-;Kkl%kgoce7qP2$|0$bqH_NxzduXND&PE}PRi`h%
zr6a=Fcy?$cI3i6AEQo)>sS^P?i*oT}urw*luD*~G>z0MR6Cn@oKt)in-!aE6*x$3B
zEDiNE?WhPu3l=5i{ijOb$|r07(X6A`dJP{8Wt0>m%ab)769E5OQdxBU_Gtj1K|(
zx5S$3`!7qtqhq)CZU6ugFhTyFqLs_EuLWS$y%p7m`vA4zgY4Kt_ckMqrBWN=AW6ZT
z$oF`_vxFtJoa=H>DYCSwZc{BsMy`F=|u}?b`6+Xl~v$
zV&bNNXL>hQpKK!TSx8!Ch3lgLTx2~!s?mDJjwRvVfc&%x=u6*g;{mD80nyA5o+NR4
zFhKy13!x9m@}Mv(;=~pUTO5aHcO8WRZfHfjEnGB(5$;|lgpF15I
zgT53~P(n;|qE<6K~oEapF&OY
z^3FO#=RaMf9t;=^qWt1uGIS=K8fdh!W~-GvWd`eQmI9aF;<$PA@H|}i94WbEZl^F5%6iFTRYt5ndjm6tABCd
zxmeXBI91KDa5+HCqykD0y8h~n>F-?yIa8g=PP~m7m!c?QtGhGG{tO~;CUrdDgRAdu
zeNPLuVN_aF0vz=B<3r}Z-PS^nOJTmMZfO;J&@i!XcH;^L{Lc|Xnqqd$x+p&3qVk6v8yuO9PZ|-JWpN@u*O7qlx*e6+acB
zx&tKv)Q2*tx=~itc6&y02V@$?h6f-QV+sWnXklYy6Kp-;G?o*+n^HE}fTqW9#TKEj
z`!$A;XkZ)zI9xFT4?N)GxI1&I{lVx_i%2^o6E$k!=z!f8)teNnK}P%U_=8G$$kkVB
z{K6n$Q`Hch0bl(znQ5a3e)J-ihPc47iIcH9aIl_
zCiQmyjZ9h5$Ol+o0XmV<{8IX(=c?asvZZm#x-SC
zwE!MTQ@zuavc`akPVZk{A}M)TAze2seB(BsWLn2d#!N;QZhsZ8;1lnPxE*T&_=GB-
zn)CByVZ6NX0UF~Ogki}*F9$rPUM0$Fo)iPxh3vG$cexxAUD2mtvPJN4rAw7RJOJw7
zlQSV;Jme`SHghun!fK3=2_FTV`}@-oDG<%sQ5Xa%**4{CY-kUqn&WLs(^pQkVXvHl
zbtj@I|4;t`>Y=#uirKyc=iaaa=}n8HPmn+~Q*y^>v8o|%e*pe!A}vw;I}^0&HYp)l
zSry&130o5=acrN38K_VBG0huFL^^g1><+p(YYZ~C-WH5QkvTxohb=WCfn)iXm4xdM
zXZ-5!sxGFl;lc8HV9n>C{|op~7MXhs#K?_f2Ho@Tc8uQuh1#jSW?z+GOin(6J+_|1
zJ1k?KNfD>-NbcM8{wj2gun~$=r(Wn<&jHQ+V{Jylk_QLK`#H?VH_D(*T4xY$L|*VFF#|)vqg*06=&W0QRljy+w_#|Leep{t->plmm0ZLlOOhNEF
zfkYnEo396eapp8qG`Mb{CG{!Ht@#{bs%`l-y{|{NI75n$)*!qd!+Do|-1nlLnGld~
zZhJq@B$8Tl!H@9&8piGw)J4i<{zAk&!FL7fJT7sHpHTHh}vFqh@=8xdxiXbfnZy4s?b+4EE`qwDzyt
z#4k;6EboonHrCiVe6bBNYiy{xPTkmGAOT)geVCxL@nM=znhyf1@QEpqOvmQIF$lNP
zb8#lLe%ntnCm909Ay8d3FgOGP?;+Uvj&DDld$c!qf+=Dxc(8I7Tlqr&G#*eBJo+EF
z1(rZr`#wQvn^$<0GC~hRVMkrgiLVYC>^P-oZ2@as{pP{Q80qxWq`@Syo^2C?ai6x&
zPBf?m5y`7JPg$^wG7O17hxlmkR;>5x2%&7vY%z>s4)2U_BFaizL=vTHuc4Z7mM>Fr
zvXqW?w4!s6hkhM&02Y}^%*W32lOB-KT-9t2m!fim%pB_sjX+zW;aP>FPUL
z9iQJ5mw+G%IMcnngb|lKVJEz$>UlHvP{S{f0_?m+dU_}46C&0Vvw*!4v()Se1JIlv
zm9K3{-*ziR5kPh|4{*%t|gQoQUh@dQOFb0a%9b#pS~
zU}QW67z+UdH9!l4oK^0Mvz^K9wE=i+M9$6k3y;gg^jGu3#=*$HoHkIh`<*BaxG*`g
zi8_iJ?A(^mh$slFRX=lvK$?eTmAI>ahuvy&8)^?KRgWL$W(K%b+iMU0v^^MFo@(>;
zLL=vd=I*h4=D5BBG|P``HYTbdK&yJLq#QbvHK;)pXGvL0=t)Mb{Y2-Edc
z@Xvu(g%L-`c0-^6eeK1+fh{_|s|&D%z_}|0AOFJ=(gZ9aU8}b|zo%^Xl21pY_gOBc
zmtW}jzdYSEhE?*;`eW<>rTb*GcnZS;iDfL^OO!gkY~WwCq_TMQN+zoOgUkmJz(?US
zQ(tod<+hJ*2R#UBVS{6h4Yp34vi;nF+Vg4y27YyVB+^H##CEhheO}g}Xa;@n8O|t=
zZ1-1>fO0vh|Ho90z?O{cq!Tq=o@H&Jr{kd?Xz(lBN^JR@gM~|
zcyQv)u|FT
z4v+Ymc7W-IRu<$GivLlE0V_O0pmUvzUpQ2l80XxDs!q*YR_xTq^$Qnh`(dT0cRd#(
zk>tCdYXF6WN=SjiXb4DOlPmV)f0!p)6&uN45TfGGIRuWCT)GeDj{zZpE+@))k)KIV93
z#Qt{iCkglGQ|;-tUJgdZLErR15nW7u6tfz(^E+Y=G@{mW>+cP^wYAqVS13i6UWD1z
zr8;_#Q+2O(e*7=xwLt+z>m>hQ)t@0VW
zF-y_73hq8t4>zYV6cn4GB?c6kg9v!WQ;(*hJ~A)#rDtZ*(E#syiajPRJ>-1sZUmPm
zNC$d@c%(~(3Qk1VfOpfK9XWD$hVtPl)Qq_L>`R2Chwasjv)b)T>X0}K9tMs;YF`?*
z#UyS3fOg$I9bY|bT6<83A#f@_U=U*7%fsQdElGXaWx&)S_ZGii`hkN-KyjJR4bY+{vBggy+FtpdY|nft$lK|R$43FAsrV~Z
z{D^SJH2nXEA%K@oDTsTYk!{ORhybubsn|mbHUE)@jyR58P<2s<>4$(}z8g;S;c7i>
z7(f}uG_S$h^4lhYoP7r_61j@yp}>X>26zN$w|l(STGENjffhg@v~AB1zqRCpjADzN
zVvHC(f5{!NNQxy&OyoH@Qo@~VT4N^-NDL_xJL@Sa@2cct>If57P?x&G15gijmb
z_Y6nC(zkI`t(7~+;oP))K_e)b1b}uK>gq&~|E~6^#w$3{;@8@bE-!0Y*#n%s4tZspOo=NS?64-|
zHlim#)NqApMA8Gtr?x_?=5rY%uppAjrw(=7kg
zZU?R${=)M|d_l8CZc^OTytJ)rpZvv;b(_kn6a<1@ig8HbsQwDe>%S+~4VHkf`o~G>
zV6~KGWzzh`Yrc&7Bo0X1M(XWsg`w&RJIrOwGdFC#(@y9#P>S2mRjQ7TLv#}xP5Smk
z?{z2guSPg<;=o!0z(s`~e}0NPGB{+T^EGfVmDI)lH8dAzAlnRTU^|*Lk-1ymn?SOK
zMYmoV6;!vHG^EByD~~+jI~eLiSR-+yKJw||Sn)ct_Le$WJgl;~nDM=}j6atzAgEYs
z-}o$TnzQ)U_!ZAdCk!P@T;IkLX)+@oX2KNp&eFo3R?*Jf3h`J(1FX8!RTw8T{_7SW
z;;B6bwB;l|7o`U|*;Lc4vW1$Fcl}yZh0j*i5`vp3VX?j0KHaB90A?zxO!ETP+A06=
zHh}U>*Pyjad8WDT_JfLoh@~bs#5BL}ss{&n6ImknhfvVJtnFSS8C^?(THqI3
zJ%-W5qJRc)gW!yOJbDx>k=g2%-AGb0T+qs_g+6%8AYP{@&+}iJG;ED9b?auRm1W>|+`6RSgUZ
z^0s823IT6ep{FJ}aL?_W86x!cMJa;NXUXm%fE1~at!$RVu{ktQRo`)Tb3=3az2Tes
z!=l+ifdK$}Y#UxjjGs*+m;L$MNM%FjYv*0U-wy2@C1KWvepU*`De3cir{A2)2oyBn
z?1=aV)(!EP<6Cu7iA9k7QS@OB8>@R|2Y4Jcy1Lm{X>;yo|I*%NZKWVI!s~BgFtJZ8
z3rY-vRBBe7O1HDcX7YFr>_G{8>gbx
zTR*vFB3e%&YvHPe_F+~AzyW);txJY-S6QFr%x4mg={YyLQi;UUBRxstV*Aj$^CI^Is!=2~P0OY$fgfGdo$OZ61#Vp*1
zKNw`TuScCIV`Lu6uS{T5AmfEzoRHn+^Kzteow8rLPH62}vlZ_3@s2RmW2tvY(=02Q
z>UZ0($8ZJtcSxn}z2TTrbq3`X{wBx3R#{K|>+e4mi(KknlfZG^hX~n`(WCyIf|87?
zC+=dyYnBIJ6=zW&Vn+u8y5smHPDW@5`QjMo6TC>QLT1C2uXH~s>hpWwdvCTI_AUbzrBOI2=d
z74A%c$_RD)>ePKtlrpzW384#b#~hD1a@bs{T`CRC&zF1K&11XGTFi8JQ-qk|%~y_!
z{6Dbo86Cf6Yn|P?%ri?^HGmQeIPv{%`^;-`EU$TsB;^8uS;UnDhg6`f=YAn5T?RVd
zOTZ*Dp%Rh3x%#SVKS&44op;#K1k1I1=kVjl5mE4FS6)gG-n`QL@ct1r4${BC2|SrF
zdy?3~*NfDzJ-v}AN#wGj+p6MbvCCYN#4wVhL
z3En({Of#sde(t&PX%*xbS;Jr;M-yu=bRB1Kr2=}F&Fzl-hX=pU#X2eP9A~wki
z;BTqf8@S$}fbj|;kXnkL7cvf~^}21>uh5>4lw-b)~PX))>f?g?-~8yj5Z
zV7jOcxr__xoBqs!0!(2*Ad&(W7LJ}FW1rPO0vIGy?M?cKO!)2{k55btk4ha3I8j(@
zx+p#*e%kWs&XsVt{S%U^6a+|wFEa&vJaa0V{FDpG6E_d#P(gXz--i#wAkxOD?TW*3
zGg$+1M|Zh5k`gk_M^%CFeCWG|&0Mk_KEJJDaw{j4!B*8F^RJlW6Wv{R&o2Upw=j1H
zK)nIz0I3WBf*K5HKTfH^B1)zP`!CpGrDYVP#8T>xY(1q#9Q9rUU=VBBG-JhXWWX|sQ)pnyVhfJ?e6hWjUdO@y$1%Gi?%{9Z2KYTLyzNUZq02m;=
z*EK|n)TJ4buOKdgGy_)L4_0Q0@)L{~qW9}#EIuLyT#NZlonOY-T@yEuur8UM%e~D(
z1{Qf+yz}!Hd2R}o{u@V(?<7J|Cyb%X{su5nnZ_n5srKcKfS`(Fk5L&p6%FB~RtF+D
z*VN#|5tJ9fey=`VS+wc%CieQ6%JY=RPZzDMrA&kx;f-$;>gizshcJ?qBQQ;lXZdTo
zwq!H&Oj3$-y|agKjB=(veADJN@)e1DCmBelE%?Kk2fErK#3|>vh6CD7rSOD7nG${<0aNB=&
zEJY@>rMT1Z0qN$24J`i}+eJK-2bdYF`B^`;J6NDt0wwLkmCm)7rUsb}y3RI4;1Goe
zvmY~9fnM)qbVnwt?1SPIKWGovn>!OBqp*f?v4y9WiiX3B0NUnm$|$1c?tMQ;QC=z}
z1okS+WkYC&c@)M=ozApB_@+T-ZOFg-&EZgS{7rDNL$jO;QPS+whj
zkFwaRf{zeb=YJh!Z`~j40)d2->3SwN`I9X6=t}eWTu4P73N)K@^vY)uXMR#kFSm&={UAz_qXd_UUFKI}VLi>aOs1dqO
zDs->&0n@^g#k!{UY2KSu4bum~?e;RgVQ3$LaSiYZmumN8do8C;oL{UjBP(Rdf#w}%
zI)7dUF&E*iFBfRo+n-N&Ud
zuhIjr$F8c@zG?xqJINg~(bHCa5lCU&3fc^ikX@15;vbJz$19nz)^^q`?RSa0~Db-ibRe
zs0l!GN!(YoxMc;`fu{wmizAAL1gxR>pAb)&Ar#KFUAeqZjV@by!7eCGPvRvM(?>b*
z3Hx!I*&Z^a&eSyi&eeu)5>L*y)U)6264uSLU1t;d`APhj->fZN7RQUX(`Dqtcn!jC
zqjQ^F=}U*}hNmzbby2Oq_xl36D_iLfJ3tMF!$S?P7r0?^Nkug4Zc#V!
zxq%~sfmz}3j6p_To5PUyI*QT@QVBt?O@xX}uZ>x+#l|I5ksSlh(zD;vkr5C`hxo}Z
zRo>)v@Mh=!CpoDEiKgEh6C5hORJ1ouE39{JhGqDe;VtiY0Aj%Zk&UD7Q8fP#l>5Lq
zHe-^aefP7Dj+z?g$#=FcFqd#DU8s~nd8bw#3J#WQY|tMEOlLu1W!O`E@YG&x$u8Y`
zP@jI83IYNC7oNM-@WD+3lf^qmrYUKIl49S#kD*4|Mu*t8`AJ||_3(Tb8P4Q+onXs9
zL*sjE__B4@V{|w`^5kckLP*|MWE25nB3E&zv%xz96j;0YzPA8Gkclj_l~XNenhLE_
zPx*4rr%9G36dsNv1iE5yfXCdb`0ihf2ejUb_tM4<6|N6{QuWX+HMk%FMGVq}F(7gS
z*NOAXK+p49L_n55(no%&uQKF5;rSkXhi9EXbkk(GuaM``(`k7{_&i(CeP*BebCaRg
zyoCEs@&h&ZoXx=k2S@V-6-(=U_S|GXkw;f9TB|bqR^^WbZIAAB$7#z@P*Csuc+Erk
z@?pxmTV+H`+I!2}u$-S^y>_m+?gI!|z>slzy`>q}_PX7X0JQkhfNIViv=PJ`*dq2t
ztsDQ$XY`C!zzJS$bJLjrxlaS(NSwIdgKHhpY!&AU-Dys~>
zE%3Jr*qdO*BQo4I!ImN-e3cmLg--ETLHjnIu#SirdRB;wHhVTA(57SoUfXNV-Q3J<
z=)D9N0QDnJ;&fS{kNnDVab6SPfPR#LyuZ1!!xoq4=3<4(c1D~mMka7jl*
zVEpV81$dWULY=1^{C>lK)rrp~LjYws_fqFgo&+ik6qo+IOJ^9032xMiC;b#e$PW5N
zJ!?8yjNpK*<%6fJe~z5)lObB|>1VQEq#e^fMjK&FONn
zaCl??$Faj0`m!bV59uPgT$1)-xFFEFkul%Ot<0q|Z`MyGmvbu)1!5~0Qeg@Php`W_`Or<>Pi>{JCNyW^7!BVl{+L}jV)sKPo|Smx
z#!(hXNQmQJ&pE1y8Zm7=`{t+<+8uL_jzH^;{@}hoDQ4tmul}Jn=2o8wz*v|kNUZcO
zuH;!8gH1}w&==H-2X@|4CWv~ILpGnld@8E}-Z%U~MN7Qz=st4P;6Yzh{_~(IIeh8$
zxMMHs7d50|jd^LB#}?t9>#Jab^G3Cqy6#ZHu<#!PKj(yVzD0mz@~)n0!=XU1Ey`IY
z`BF&e*=tLd7|cE>G$eeZ1)l`Ru)w|Ra|~bPQe1b`SCJkEB<&n&9uf
z(Dg;Zxr$iC@5PUy<=KU1&qT)92XR0Vn|{znOqV)^v8EDqW-guXpxeuxgiZSHv-+fk+u`b5xA|M^8y
z(xc}&Q2x|il;tW{5m$5v0_Os-+2gS~6qYLe^+`(~vQA{EG7dOKq|~P3xr1Xu^=Lae
z%+Ox_bveOt(XV)Kp*xl`z&4}*>{v{Hb}Vsm?oxFCW&P*Ap#I#9J@_{t|Lw&lzDr*S>_d>jfjlKj_JSZ}sG%srs7*6Lca&y%7b&
zm$-jjSpj<_$M2Zr97iHOJ05qrZmI
z#6oLa4wl*!^2V@u^yg|FYEQ(%{1
zAa6eVF)^WVczDR+#;e)q#z8PNzzZEe)=U1)shj
z0-f8f^HU+s+3L?3F0Qt=ECN2r?CDh2y>ZN7{RiPOR+qvBws}Zqv}~OuY#jbQ>+uAG_8o$s&mczwpHNgjezw5LU@{Yn-Jq@<=MB`5b8&5=K%b$h-Hj;Q{;
zCqejCUmZ(C{$d?zVMPDbX1L|f@Dn&_UEQ9X*(6OPh)yB0?jyA~uof=<$4jUq%RdkjCCI&Lh;$jr7
z?7*4gS3DvjNhhZ(%ZiHfa!d@2!Ifnd$BnewtKAy1moMqTz}s-lz9S}pKqSn}%+~fY
z#AEsS_#Q~{T%_d_wT|IUHqd>$l*42kdUmnU0>
z#>QK*&*WM;=jj~%~yuR-ssL$TI!d=0jW@f8?UsqwEi*IzgGZR$KGbi
z*dc*g<(F}Fw|MY#v`|yAXit?Is@N}jbDd6T&wzuvudn9sR*(95_qKGQ`;IF4KNmhCOAVIvTlgd!
z*%pXveS5J6jqt-mL(L%A4LaPl2NOU?1q81dx4WC)D=YM$H)RssZZEV$tk2gzul2>N
zxZRxmUR^y*yt~e*m=8gR?ORMNy1u^FHfuPWbE>*n{eER2%a5#5P=84UX5@@z2c%=x
zZY|yptly@bg8C_k>2lNQ%H722`G)8Xgs2FayW{L
ziZU`X$5T!ifIkmrprfx!f&Z;2C<6r(C#yeGM@B|MV}W=)M`UNGD2Oo5Gs~_Af$Cr5
z;-CSpa=W{-~EV)FG&2d2!K~coi(}HE&!sjbGnh)t#_F=XkB!8}K~ZV8;UM
zh0xATRP+gSz`>u{*Qu48Og4jEE@*mZwWxzgdoWq3CxQDru$fv~UUoR0)PHc^gy!0)
zY+ly}euSKzoy{9)z*w)*RjFa!gw+?|KKEj?qfx7U7SYuzgsbY+q@e+JGw0($kqMJ>
zZQ6(Zym!v7VBdqaSoFpnnwaRc?&t0}8CMUL+q&avUq09$5I`%^X!783cmv*fpJ{Jz
zZ{@5R916b8PzN$T)060KAu%x|x7(w{cVc48qw?xP8N(0gK5vfnb?E8q!+wp55>``F
z`!Ej8XMgzp89yq9nstAQgoWa6T5T}hp)&@0#dJ*mF&jW3Z<)whl
zFqTn&==5&7<}M~Xhc{&TO}+)eqbHP0$L}?Cg`>30em^Vs5H`~On0Eo|DW`)Y&QxCe
zTB!|Z;JWM)O@X#WG{c53f>ke0_ZTwiB}w3g6vnFH(2K`4Uz42g_PgW9b9`)9)av>>
z+S}KxQP=9xruEP2=g+MBGHR4(XJ_LWbOTETafKDxrlE+{o~73fRN-v>vyjd#^P%c|BLY0P%BM!z
z!?QDaXXo0uxHz4PY3!#@e~*||OplI?q=LJ9gJ;&DtDK>STbTNq^I%t`9?rZC65DdT
z60L3omMq|YUt#0oW`OibG<<4$I{s23o?~=l+K+R$QXpK#EDO$A(cHWMA0Pi)c=(H)
z(aqx$vsn%lWaLi0681~=S{u#1xjK9h0*KkZ+!?InUxMoru2ol8k4#N%W_@)hP}0*&
zmrUTw0&yX_9Q+c`PaR_8prN-m5@!U?Q;o6TMJrd<;K!!9%hJnWv0*~1a
z9&=!5C>ew_>8`G>UwwUJG4$HM*VZyJ5*&Z6wCEZbWDe64^FNSBK|v{=-chQy$->0M
zRGF$Uo6VlBu`?dcmJLsZg-6XSEtT>2_n&HTYp~s!N*h;m>MgQlayMply|$M~~W?(PUO@Ov;nj6q%uzU&ZKq9X$X&m+2ie^Goe7pQ__!F$MT&xi=#
z)cAOYyE{wO5XRzU4g?_Ta(z8LDn`an;K_r@40~eer)nLJbg$M{S2@CkVB~Gj
z_cbMcunk%gLLf9?ZjI>QUSCLdsAxBif=KvDNolI#|Fm`W(NJb#{LQ4!wv|<)G-YY1
zl+>&u3^fwtV{Eo4Ur8!6O~Mpnd~EI1>0^eJvj-W5W~T8mvogev9ks>kgKCII7_E%t
zTNq4gpO?;_{bTQ6_q=!J-se8|_xnB1^Pcm*??l#4I{)c-4EN?uJ>Kox6+c*Y^8a<9
zdTOatNJt*}mJK&A&jj>`+Q|28t)vSC54Dis*Gt#f!ZRG^18?qm357z=(uD|e?|WYi
zq9huB#BT|RQ+Hm_F?V!44Dj)jF)A~&vc@~&htAm$5#*vcHy1u6d>~GhabgV0kT_c`
zf{0dC8X}WhsvkUfu-j|lTUJz5RMX3s+!V*puN%1t+CHZQEI}9s@u5NQUT~d2KjpFn
z&FhEr(6Ord@b6?hyk#1PBl<}|rodkPNV8E&h;mtZd4W{wf3H0nK2#Z4u$~i31XW-s8Zm}{E(hSV*-L9`YpLB&(&OH9
zFJT8PEG!B{A|E=vlx^fFx^rg(kI$!0jdlY8qsHEVuL=qaUv+edIy!;?a=R%M3J@*Y
zK2ir=dF$v@E7R7_ZhOpNfMOsTJZx@a^7rr04Unz&4*qpTMMX`IE-x>O8>fQK^!16W
zeU2RA!tc{>+*n5{5X0;Ak8p!x-)a+v?_=&NXipwLehFEF)zR9;q#k9kj*&wV6hP!{
z+qO+l_2i60neo2!!G*hi#q1WlvmZck(#C)vn`~?j!Y;m&@yeAe_9K?4afsMT4(7SJ
zx#{WY;iT;j-i_MG;v3HguPa`?>K?84gT-k(vSc$8{s3Zh+mKuNNu!JNpa04HcEz$~
zCRb~s6p^63H*<2tkj1$IdZe_)eJx_&W5;;1FQ4OChTEU8N-?lj^6Fm&qh+JkYT)o)J4VXxHc%$gl9V>_(e+tUD()t@$phsLv~*iTJ}85x})3Ag3cwM=U?2lns3-PRVsWHKu$W(X29svxR(
z42Y|+aqozT-&$K+aio%x5^_R#^-T1*THRN7eVs4XCC$u>(=Xq#b!#r1<
zRRQ23nnoK5x<=$TIHrdK65U)~Uo?6-Ce(M0snv6`4E0hwuU)A;Y?L_3h5XfM1}Ym+
zhtg-qOWoYv#Z%i+n>&y1ST@!A=5%%Oqepw{IRs7hFN=_h28JwE(cWI%-%kTKQMzhb
z_>~Rfaw9^V1Sb>-Tp(1EXDn$(cpIBL=g(`ENhD#Qc@U)9Ob-tM!_#q)7`vO@AX)w~
zmWIdUu|2c?>0#}WO+3_b41m928;u9R4tA)XcmAHAxLscX5nM~$j
z;a~1SAP`zhj$R@XiP%$48lI%AZ0A6>yt$bVLg<-k^_Ws5mwOK=N?r7?Is@a^H23Kc
zjEC+i6Z2EQLC@S^rI0ZIo;Z+{R4s383=DB4kzRsA!gnX)V#rI72o|F}btfEYRh2#5
z>!3h73n+-9=2%hELPA2udIdS=rlvKK9mh*46a5OjA&X7-FQ@GT^fnhAq91VAy|^Po
zHtDI4F2+!}s!ozfB%l|$M>hRo)1l4!5Fw=Y8u0T@U^AnOWj$77a5!xI!zMK!0ffX`B8LwI*{c3`!G`+4nn_>$8!e9$nsAI24**l0t+P)s|*h_L1bQj{t8`P
zW0K$9(93Jjz0>vN*dJPOVfR9vwfmi&nZW2X$^-iu0TQ35HsG9s
z;^MQ0f{KcRAjcKAKR&HHNu`218z&_tfnnV$6&3Eow4A(xx+22Ku$KYuJvzJ^i^Yze
z`3}7ZEy8qx*H_I&kS`aBz`xlhb}?Q)*Gq2sdUUAu`|9S;UF{tIk8JDVXVHWpv4lk#
lbK^+WTBgU>ZcxhqPOCBcYo3ovR8=uMCCQn*M??%h{||y#{b2wA

literal 54276
zcma&O1yq%5^f!nFA_@iqA|aBZlv0w4goK22cSv`K3QB{3bPCel-6bs`-5}i@I=}ti
zd*?qh>-%P{aV?j@Ip?kC+51=fcuR^4-MT?|0}T!BmhfBt_h@LBCDG6>wOvPt{}Iu~
zkcK~AS_>#xOPlFg+i6Vui-3wjp%7tbCUSX-N0aWF8L
z{Lc&M%`Ej9x}KKz!G~a)zg4tCL&MQTeqT!CP5pp|)^8!q|60aAW^KYwCDi7mZoB8D
zXZ33x+Q&2rkLk_P3}@SA4NE${hRPW_@$MN7J3A^F>gtV5Ds9LvOgfo;e^S7vKT*pY
zK*as|#*LUOYMVou@^MaT2Qz5+QzsR^IezHHZ;O`g#4{{`0ZuNfBs7}
z_!TDd!#}|kl6=?UZ^aat-{BQx{B*+qzh1&mCm<;J+-60_$kRemI#rzV`SZR}O_|lB
z#dzu`Puge~#YIGB;UBq$bIBVH=Yq(4$sey_mZ?*19mqiqE9v|12=0GIW_N^=_<76u6sk;l)U2Rm(6myVvfp6$s$CMWmy
z^V8{x<6f8#6}Fsrlai96prU&2dTMXGF|ODnZ)Gx8fu}h|I`&!wq4c8Za=+B}3WNB@!^Y>R!XB_v#$gq;_{6br_
z#O0GyRF8$7-QvNNTWe!uqn4_;ctB|4-Nc!*?N(Cj_0juoZWpwx6}Ic`aokP{MFw{c
z#;pP!9Q5?4luJ!@r|UjFQ>`c(ox>*KA|NFtMXg@Cg3joCXdd=Vk+0HredU~Q<@JXT
zPw46C2eFgtZ#{VK!BBe|?EjFhFH@eu$dlagwO|5&HK)xAuE}UodN9`|W~0HZ_JZ2;
zV_zoimfz{p)U&g*WvFgW#Y)?3hclo1Pwkg}c)k@Aqu}6(LXPEfY<&~mz1d=;=EU?X
z4rzC9l2AE3<>f!=_o|%^^x$5x_$X%%?7$uDE!3B&uwHKPz`XaXvooteRY{33x8|4@
zo(2^a)mIX3M@EMo9baV|tA);){8o}H8f(M(3(EA-tR@))EUKM@*~;b1DbY*A`Q%s7
zZdmz+RLw~Cq50Z_(kG*T$bRX?WSDVgaU}t
z_s73{`BHVX5WQf9L&W}#q2};%Qm=w;Boascxore!Qta`YGq@;Rvb8jUiCVply
z8oW(Ps=n?hBqW4>i?HeQHLPc03<`N@I5;?W@7*)9CP7nIS4U$e^l#pQEfk>H_%*V&
zR4|aF>+}f4;E;u?%^`K(x`c^|X}vKXiFuFeTTqac?ulxpEtBaudxg!aV5)d*8EmiN
z5|ij=*3eRtKoahDX$fut6%``8af?;~?T8op*l=HrCn`dpNT>XU$EBsM?JyrI|J$$_
z7Y}b|t+3}VKE4pVezW>OEwty|J6`qBJ<+FfSsI61Gsvwn9%huwRWrGB0s9u?)y4T)
z*HjPwWL)hZCRza@p}G0_<|(%em)=$U5@BTBVPRwIwFVFq@i<3#d3lMNa+-`Xr-;Xj
zgwv}cg=2qze{Hnb7glSO+o#T0PJH;aQMt*ZqM|ZfWZU3O6akMjJKPf8xfXw}-QRCyOU4TI
zaX4+)G=}puuU@_SEi9}>g7>UxIA2?_%$%&dySu5m+2UZr4mDvn#iZGAwV|N_?K%!l
z?jDQk((fN{{2sDl!?vS(7v-UrtH1ImeSj+U;;6?hg42#3mi0o-$%gj9#zbcXlRH#E
zCfF=!a7!b(omgRwFu7Him`?a8W$UdDX8RFy4p!ZKL{Hy6OY}m&n?L!z#l_iyw2De+
zxVmdwzXWfWS?!r^uaP9~7f({x2&h9$dYuHL#YU}BEJpV5JlI{1nPHVBI*i4;9($LV
zj0J!H?hzYH{8T>YZ}E`Y8!6n4DwH_NmelQ(Dc)uOfy>E$GA!`5vC_bk&05k}aea%8
zf`aEr=@O6U=`tyu5Y*6k1h;0|9fxPSGx9~%ZlCA^0ja~^JMiHx$j|NV**n4+YS)HR
z`zEWMdY7$>%%;v0$8M7H#K1?!Ln*#<_wMD0yJ_|A7~1-F+oVI+u3cLokbsYe9pjUf
zME>UMO(rwcYHsaw-F94b9Fk7B@#$%4({O8%Cx3@rP=)mz_UO$}k!CoJx8ma1Q_iSc
z2a`?=ZfAS=;^N|H#>07^Fi4%hEiD;PiN|<}Bx`lYyc~zUb$U1#*woadK!k!?k|dic
z$F<#bkEP-Z3mnSX#U+yY!(FJ5vv7OsCnjQvIc;wf5d69)!BxL9kQvEhgm>r89Y3O%
zeWx{lc2U>zOvYHl=#*QC?Z!W4WthT~XALbhe18gyjfQB~M~kK5xuuRfu4cExK1t0|EEMcD
zEXEt7q^5ofU9CMSkSBxSCc3YUU{detWNdGUdLW?;;%EyoS
z9z56a66l0y=Z_qkh{O6<)mr&tob>VDs=jNr^N}U;qNCk@2|BH4<`2ODIMQRd9Cm^?
z2hI+ra(6eUrcODisfCt*|8U>={RT(T*_P*U`U>(U2dLYf9Vrs=IZ*c$Us}w1G&3PZ
zCKB3|&(Cj%wL;guz14{GwDIe$N*%v}
z^wWy{jS1x^w6xC|)Qb#)kjr%jjNy|QQ6q$Li}2^T+r^n|je1CM@OS8wxgz5dJV!eI
zT4`1LSb;99*`>5lfdQ9PX{n{aDMN3fL7ujQq6v>WtVj`0Y~p8OvaXxXP?Q#Q)m@L0
zkt6*4`BTQbG^I6dcc+8lDH9VDiz9=_`Zs0!#7RmDiY-(RZ^-xWO|T7*;O7t6Oo?2M
zck>BK)bh2i2_^*zk-Fd(kM1O;zfbSH$T>B_Pbe#k7#~-GQuXBN)49X#IlPndvNH2I
zf3_%fPIh*rTfTq)p8f$ULpBqw-=q!|s~-Jcm5U=bpsI?CkB@I_YfA%)e>hi9s7n9Q
zP4p{9Lpi#2A1__Kb}cg8)6-MFd|uk&9b7?t^A1#sDXr?jKpag?&4oKD>tm%!y#@qu
ziX$T<6x7sLQfl*Hn;LExU+NDLz{bX27=rtb7Vg|5pR49Cn3TTb3Qzlt#z)Iyb?)>a
zBQ4Df&b-2I69BBwk?klfFepspHbbg-+p-6H$^|-@6BRaqwA|rkD7WqHZP;lg#v@t*
zz1`gbV`jAzRk?ymGdYzT6-zd;47|LgXc7`VzNT%u7HMG=ptui{C!HI)(MdH
z=y)~v2tc6y$$BZ~ty{=0z)K<|AtBMx(<^W~*dT0n`VmAfG`p~%=jw8{H`HI{V1-&-
zsQYvUF7Jg_)AgO5oz6{dKxx&Eds-b~bh4)2leS|f#Xg$QH}KSZA|eQI1(3fl=o0#W
zg*xZkqYSG74bFYx&a02G^Tx-==})ZYL;`1KW?nluywugzW#OsG<0=0_O~@}Mb`uaS
z0CUT&>DO{u3iWFvg$`@^t%tBGKJ=&D0$9M8Ef;NOq}mCmdAO7mh%{Gdtaz*RSwfiC
zucz%`P4@SPyz#_V-68t$;X~Shp)cvjk4J-JN9`RQkxbg?2w(#shFAL7P>EDJ+K5Bl
z)RcaHe!j?XAfvqka9gxnx#~((6q{K9JpJbWPw)sATuMzRM69iuq4G9$bogc~m(H%P
zcEB2az~gKmii(T>b!lO=RFpgWdsx`l`1tr{1_O3GU(_k!m$4SO?<3__`l0IV0s;bM
zm6aiJaoDd64APn%NlD{rF+1Brs9#zy{T9Hox3aS8Vq!L%98Ww$i%Wn^@=&r1z@69pG@tY`E)CMJkK*45R~
zc04sR;#=oYA0WmN<7G2MHL02eNF7C%jSndf;|VA5yIY!@KLQX8&zkSe8;6-M_zJL6
z?@^0q^_~NeMAmOvc{vl{W7uBiKqLUwR9&2($euS;=XsUzRBg9BT;K@oj^&)&*a#3w
z&ahAwGRa*w9Qf;L4fpwQZ%AEOSXdK)hV|;;txyqxp&Zqb5|f9nuC4_BErvpZ^hDfQ
zG9d@Eme6FHs}Ckc6%+`1crUmmgS~6yCuaLQ_;!MDy_Q&|oHf34}|)4b5z_D)RKyIptlno>Y~}
zP}dW8cXuX2{}>LNcCA0@6=NSn!|8Q_jp0pXKc%J3@FP-vW>Fqxw6nck-`18snmR5X
z!!EVX63gY#r}dqIlQSBQ`q|yRtAkdE5*BnTu(8f&l!b-GDKxFaqobMGSw5)E^bfV)
zUB$pC)NDle@%5z>#H5|tY#%;9S|lw}q663!*=)c+-|rVnI|R+Xzd%8KOH?4j)M4eu4WMm7BcdVrykpx#l$T+wk}(!@q)v
zPUPLYY+GyPVb=6dclS&I4iB6U$U69@?O?QiymUn}b3iPfr@H+u-~4%~+lM$eu53Bw
zb?r6zBmi${vK+~7(9&c}vNssIfQ#gaU|rVN*H2iXE6*&a@)vxgrS%v{0pnE3Wp>-O
z2!U0My3;>1Uxv0|6)I<8^fSD1b8~~`S3Z3EOvRrSvbSkpoV>xUp{)T84_ohma
zLfhay-Ewc<87b6Hg3hEK*nV)_F!s~!blbDp6^b9MOBA33Wn<-uA+ulK$bc=n1B;ST
zlvhyjQp;s)O&eN0T277cT)l;U1%U+qIZPZJgicOQ(4n11Ow4MI^Z+s{%u%1xe~*vv
z2_WV)n5-&4`p^ko%-4j7hzO9rkkoft2`afo*b7Bv)m1uecL82%pN|6Dxd$sbhy^7_Q*+$ndJFp%9V-lPo!y{KGgCnkN)LhP$_)z
z8K~IVBY-SlNg?zFvbF{1Y1v9_$7t~T5gd3JSP5)RuDw6f*2{g@BqSu_+|C^kjx9rb
zACRwntlhTBP!4gUC(dFksoPKJdi1Ilc@}f9l^vmXaX_nLfUaNw^_|mhLkA?71!dMn
zQt6~#MymxeA0Hocb92Unh>9qqD8RwM`DZ}B_zNNk+r@jc{uFf<>KsI
z24xLtDs!!YsR%)ts*NAWl$Uq#a2_wS0JVfyEQ0ZqRFYutk2e_Y?d|N&hm5e7=i&2P
zT3bDT{-i*}l8f^L-oCy*Y7S06cbjD(Im)%h
zFv)UvuMvk=2R1J(<^EjtS|zqC6P0!hM@L71cxwlluCE4P75P)CAMX-IDH@gsMcDOd
z9v@V#*RNj#V<+Z1-DqFB7Ku$nhbHwLd0dH>Y@9UkP9-YEY0?ou7p^zdMY2j*)n8iwnv;cH00XC^K
zAQxFfLuldMM!D53eh*&QFDHjH65MnK*aL5z%g6!D>jO`58&(mjjXM7J?b~%fg+th3
zy@hHWA%a4p0M!@EEy@+!jj;Mc6;7%kCYhKlC*xYMjGRyNQ
zK=*Ug({-?8JK?T-d3(=f=GJJz;qb;@a&rE|{?c6&$`r(fsKg6P#+f>q2
z9?U75RX2l9Aek<+;O+hNpHCDvf{>cM6hJCT~pvWKh(~tJ$E$n?EeX!
zA~-nMeybiM(S68$A1C
zC>z@?YtIz?O7*iya$;T{ZgtK6iz+P8v=e8J4$BgI|F~VIEZst6Z!$ySyEKUG?WF|!
z0+GEF!;q7Mzok(=d7OJiFzJ$ey~aAD$E|(?=ClDqBTwWt0dFtc+{YF8k;fQbP;mFv
zD6yBQ)XdtNkEf@EJD1v1c!jGlyrR8b1nP84R~MF$5cMlpCZ81=8JX|WDlvi8)#UW_
zri0jTuah;&247vd@x+JE!h%O!Jg2POL5Y({b8c;&xOdeC7k_bXZH+bwB>CQ7!gr4D
zKPU7j@JEk{QOP3qF`$4y83}I@`1eJ~UMC~u6i&$b)@wjZ7~Y^EB^??c+TIfYSJonW
zH!YK*REz&zo4&wxvM6lfg#Wp8&DXg@sO41B7mmA(jt2pAU-07!Y~Lc6-xZX)wbBc;
z49ExrySWChgG0H!z5QLn(Ws^-9=``x(Z!9KgAHF$huf{2P^iX$1~*Lc){T-OHUdiu
z8$qwZiktJ>yJ?OE`aSei5^*1E-O$Jd{eCLGP%kJDFEpDXfk&<%{Vt)zY>E%H;3^jP
zj9dZ^O&ESUd&AF=<-BW!w>s!*MjX@w`Lc=%CaZ-~z~#zW9UUFT?`6W_muK|Y{6p@Q
zJx5%D`pLHG|dAn4d%R|cVg-P=2VVJLLf^>mvP90noN@_E7F;8|gD
z9_+fdkharB-k#?=Z|@2VZ~Hy8V}lx)VHp5T2|)N&KxYIjhBSrxZf&2hxdlZKhzbf;
zI8=h#1WK`#?gf*!;MPKPuF^BWma}t#7p<_
z4$XP?6Gn^WbX^VY;!B6;k&Zg1hZ*tWz2U@1*=es%>YP+F_3n(f+m}}*|0YuD*mX@}=g^@J7
zPefzDF5-pHA&C^4n<-TMf
zLFdoZYlfXoLc}thB9{PBnuX+v0LC
zAzW!o?B%^IW^8O%Ve8LwQGovT-8;?wHHPK>R8r}bDqkg+4Xj+6MJgKCy@4nCi(@Yy
zytKS|aki=48GG^&h$SN;XV{F4=pXjDsm&d)dR_u<=?|?n<_p$Eg~8?dwYARa`Ztlh
z7ZQI~oIxHnRFi+nVZG4#!S(z|0-Af*Dv8tDozt@`5ie27RyUJ`raH+3{pJdLQldiq
zV8wquJ>{x7)M8y96S~5v^UK_{)q3_xP1q*O;zJmPw_r}|!Jw3T1Lq>LXIKWsOWryzJ
z;u>#ru&@AzJ>2Q&0g10CbAppE==o+|AGK<+9o3&4G>QEpDCAk%rpvJPB~7+Cg$i%6zEV=_e36~9R*9g
zYOAGWri|Z;)$&xbjqu$xbjg>O|G*f%R6L*?Hi!&Jk>!02$KOzO3+0{v}FCDZ0dg%}NemAHVE
zm+xvlv7KMG?MWCNT}YvCm$E(OX2;$T&Kwj~A-Ta1fQ3)?*Jr$`mGp@n)%Gi?jWIT*izMaTv^`bSjAH*djTwwEL)Fj-TpMOZd|eAt>fjj
z1EOmz^Xuzx!s#atS94$L=W~q9UYl+i}(1hTg?0UG>~SBty`m88+{7&?AP5-Q+|F~R)Xhri@Uw!=~Dk9
zhf?tkfzuCDGpG^X#MP(@FT*z;YTYw{LjF)ki&wTB@ijEF+
zs{8A$)d=nrAzzc+T2}%v`K-{mw(1&-o#v2b7fOdw@V1S%Wkjm+x0<|~gi|sFJX*M9
zcJSXc=2~nzquKDQ)jR=J0jZveb81m!9(JDogb5!GmUJz!@>F&XjyoiiEvNk9sj2wj
z=#llOxHNS}#?NeQ)F-@tuKG)Q^*cZCfBNdI)|ZrmZwzKhb5l2FBPOvVI}
zk{MBo+S{8CkcSk`N>V8HJ|-q6f^{7Wd`ly_9F_WDN-PT-n`GUN+Z(lR&i))3>S-op*Y!FNqo8QT
zlv}w8Wexz{dG)@pj&_WSVi%mWD*{Zx5yPp2i-7Jdba&Cot>mKxa#y7;m1fM
ztC;9o+zStv|Ey+~RiKjE56;=^LOoC!Ib{k{)4TdIJ63V
z;W{Q}HRz)9^p(}ldVtwYPbpeP!D4hy
z$;;a_o+ksbn6u2^4|g|
zY}9s7iOh~~F*C}1wxYW}eCkIW1aJ81&W;v0p)y9Wnmh*bdr@f14wu+PLpPLfkd%Jb
z^=mRa-z>plGlQH(GMtP>GBM|uzTkDTobH%`R)xHCiq|zcRjzJ!z<5GUexm=wUuLsD
z&)x_#VPerCnV`-Z{hLnqUwkLJRO3vzh=W}7HHr0yRikzD|9FlGXNY=BE$6#?HB*16
zZ-%y4BuPB_mwp+K#~X=jFw$CI-%C+V3oLHD^xs=MKwz#Am2@4(EDz#)@{4Ycl
z&7wbGft#SLW2J=QsK80|;$Nnr84{3kKM!TVN*lV|#;N=m^E;#HyLU6S7cRbFR=UIf
zGY537Vm)>Z>-=xYm|)0v+#c?O@$L#6BYLM(AgPSz8k-%aY!@-
z8T|)|xXNlr*8z;bzBqRWs_S`aX_O@l{Lkl3`(l%B7a?D7$iuR@rz?Ydu3$s-@n=pw
zGs?Qal3y0ME2DHK!-d6LQBg|Dd0b)PD|BH8o4j5oV!
zIa~iM?N4>bjzu!gxFW28HH+7*dXMnSmuq-qK(uQPXQiPw34#sPoF?_g0o5hX;3$^V
z`wJY^`aI3EuD02Y2~Gz*Ak3e~#chz)^GF{s24xqoHw3rm_dD7W-N6e-N-))iyT3D(CYfX3)L6K}7xnTzZ=K
z!XXSU8y@%psBJ<3qZEn_=LP2M=ltaX0X>vX?SAwu>lP(tGxDgLnyeQF~Zem(Y8EyzNl-5pl_ZEHbFjJ8jE!z6~g|l+d
z;jV0?7&sk@&+P2jxRo4d(tdw|9uE-@-bT-<>#q(rssW<*A|$hFe^hy31GQeNJ~P+v
zcQAQ!9l*ZOU=PDb>iC#nP_5sJtu==2|6~sjc$!Cm2rRkbcd%y02r&QHsl^?}Xl5Tx83R4@$&}
z?_Oo+SQa?5kr&y$221^^3?~Phl}r1TcAE)yn>7o6F#&1D!9^509f+er#N%^F$UR6b
z)%-07I%vN?(kd)2u6Ml40O<3Tq$HM#sw&c}j!rh`|IW{=&fLF2=23Q6DfUzCU>ur;
zeXblk=jaA|;JVeYl-F90eAUJpt_7sOr^vQQumHsYkd
zFdD=ci`=<^?*1tvq8kDeh4|IgG*E3fP7AsHs}gTGa}g~Mu?&ySs6g^?4^k>KO9}b5
z1UB>(6u2Kls6)Cga-2=f%p@d#C-ZJOR>y&B;!8oxz%caqLFKo~N}=MU*X8Bq3(B4(
zBym9Yl4#l~LudeqZq#0osk!V?a&cFeEyh{ktwJni!R_M2!^g)G6o>ZRWl~fFmc;gI
zuAAyk1=4Y2`z*PAS>vuww|EQ=kB#haN`l*INXcGyjZXP%p5^=$UdP3`)60p9W=%6Q
zw-N0uHJ6;cF%8B%$35E7(oOT;b!{z-
zsgB*{7Yt6=U{TZ@Ej$Iw2w)VDMNUPr^;7{nU4WBq1&YU>xk5Ci5Sdg={dM7ah
zsgh4{QfPp5UIP|{SFZj{P6kDu8LUH)>89X7W3mA+4SwGST7J0cHq}sH9~4Axrge5)
z{7hjB9|4_!Ov=k&o}QoNTCWXb3JJ9;)y9K9W0;c1-%&vK1kG=S_-hKfiA~nKyEK|%
z;o%(}47_IfSvz}>F$pNOd#2%7ke!$q12X(qP&nQJYn*gkbpa+#?}QB?7#{9Bh-|0^
zkn)OXXxs+xg#;3Z)k{25QtOA)?jOM3j=eZtR0IGb4EwgpJ1|@dAjW%5E7*Q~a6P5KWqFhEygtaiUbFtn+qr>fgmh@W6#Z)&OU*w?i!)AuXjE
zZ=T=hxboxDhPAJ;>AJZge=_6+)*l%ws;OZ*x(sNU$BK)Ji=%f%UDGl%i{_^FFbV4M
zyUiyPsw&yyt8UD1CTYJi*llf~y7%M9=+?G{KvMd}oo8dD{BjU
zPV11^65eN{Dk-sLm*@XiA!Q~29yF)kztnFN>%P5bSz^gAFZkb&B1}BHzr`qeBvpT%
z+5Rzzz3B5V=C(ke=}9qSWVHprh8;eX8!t
zEj61G(b9T`fwPetcpG*A^X1h8z2G2epUejn~1>VsPq2Jc0)ggdxcURzya@
zd3tIbk|D0#tQo5^h71J1pkUO6(NqmLC~k8X=bIP5Iyx%*Ix17TqS?Yhvin`@b~%uH
zpAn)Mc&qpfYITh`f!e>mQRLLtkb(f!bbjVUS5m%(H~B@)arps>>)|&a7sJWl=1RsDd9KTQ;O}WM5@e{Bn$Pg5xgP0KiAB7E
zEVCjcdco!Y3${&y)na!zPJ4I2d`CFcWdjrhzn&w`G1zJu6N?}`Q9XNh6C$rbW{x0n
zB>e83?qHUpytRwGs1)vRqijo4v^Am}1Mwf=scb>S{JHhgb>N;5!^VL4*dkp?TW9Aq
zNELU8#xDb<^tmq@$-Yen;Me=xH#ruL9{Z{Mal9D!WCG;zYg#YHGD
z>IRDtztmXtMzb!*X?3iyA0~7|n^~W`X@IG=!3NoZ$lbOZ^jXV^yj9O
z_wV1QS4Q)Q#qSIJu%3)2kRUbrjf#_)o5EXssFr1Ocdv`B5JI;FziXwz@+y6%&s1yPW3NaPfmsunvLh=|+(;SoZnOr
z3D~WdfDNnY=bu)r9xGRgi}TcDF>rNx-Ejv%!8xQl6aw+d;9$#wmc{p(12;)s$-$`P
z&mFpw(whqME(B0q2ZkPd+-_ifHfkPhnf>Xu8=F?rX%?|~Z2I1H#2!M7QTPm9NQ%e~
zlJc6aY?^CY-X|dm0DwqI`31~C(KvF5oFpVXLcA~tJPT`Tl7SVh39AZ;tPN~vGZXf%
z?m<8*faoP+bqhEfGjOP8{AuF-5X)c}Qbq|Abt+leaAdRa@*pU}O+`_u-mWvF7j
z!SZ}04!tg-W+p8+p{Pl2fc6tDM9|>m5RIpF
ztSBVj8b+_`15q-FW#GR{06ibicL=CEP>D(wj-g}&=7EdnY=jJFWMJ=UY}yYjn!Qz1
zn>1i1+}W|D3tI$#y4r4&1aJ{*qms0*#KgnF0U(xSW$iO4QOmta_*nSejT(%SlHYpr
zG}%-JSeVfX{cmt`3g7*5``y&(Ufa?w!9>2Qr9XoQK898%ve|djkbpT9O^g0_Yyw(G9oY=OwEDtqg@r_i3&?)Pw`
zU)^$S>FQr?Z4DojkL3ew8FyGLrzV!qJ;y*RR{CSz
zvlx50mm#yE?}5?ZU%gdZ4TaDl?>rof#iJv_n7aq+@58D+AQ
z`V5~kf?;;^hGVtOO4dr_aQ?yeDN17dc=bZx^@iE@>=!fw{~Jq-m%6KSoN;cUCpDi8R6B8jrUiMoXjr_3!qwsU&k4j>9IjnU
z{vIlOaWxa#)_wJ!DPO5i^ml3woj8KS<@+8j?roXZEKMX;$jn`(WnsAwrSc69w~X!t
zWRsDx2AGX_3b*%TI$p-kRA}z{`uc~F0$qQ1$i@;N;c7B6G6;tZ+4I(^=-WWTNNL^f
z2bSARymF4pfQ5;ymX>;)>+!XkvweujCzq)1|HL4=oSPsu}_8A{X9U
zpnJWC3-y@yRPro)pd-JqkeuuX+f(`Tckw)DD_bJQ^3tLeUvAIxQ9r*iV)+Q`K4XTR
zLda>P{M^+H2)_bHD#h!7F_b!JmR(@l>yeznnNot={Y!o#KQ>S
z3~b14L;Rq>*6pIh%o!1CuS~D6tFF4_+K>xPHvI|;EB!E(Ghujc*Aur5LZMlHjePD^
z-ysMO>5rFfFAS+xwkQ!L1@{{0bcDUTNoeho&GQgx=|eF9UY17c!
zxVV;}j}@c>p@D_h`W1rlwIpVLx1+n
z*wNu(8SC3S4*mA$Y6$d`(`BaZR5US6;btsJmPMqif3afD=vSA>pZej`D>|*;NXQ1U
zQz!p}ahZwz509+60A=kPfAI~e4kgcU`*&V!HX~~^Qczs;Wt=HCg^iKsx;df8zfiSI
zYhH;PHAH>I{0*NG(K^fEt+Y@7>O@{oOPob-2qbfyR>dq6-!p*s`2F{u#{dSxjCror
z{o={aH~P4LsbqGv{Jn)DVrs;^td&(f2M^TpV8TCB`mmMsA`l>!0_RPzMf&he*o76p
zd9oXhTEE4Hbf4c{@r=
zNtv$S2B7sP#9>uDq5t8Bv4)TU%`Rws?wR4`Tl{kjGJNn{27yIv&tCfxNnyLjx$oPGHZYUP$kU?-3oIpar&ftYbvYFAR
zO6X6ouC_)nm71?++bK1Di*f$k!yDfoKs*N77g#O+fO5W0PmA*2jgEEs3b7+PApCxn
zl^ASO&dMxfI;dv+{*iob&X+GoASKwFJB0=lEU$@(#QHN}pyI{fg@vsVeRah(NNH_?
zZE(r$yqo|BM*{EJp)aIUKJD%@10ymRp#9z!68}@R5?i(#0t@e?^h}=^+3KRf%`ul5
z8eY2h_Oh%QuE1-fKZ@(8*oG%cE(stYUjo5~9sFc@waClRpGzHFOii(&MDf^7Ixv`;
zngZwY$5(fb`o}1(v?5J{kev7aI_J(Qib0!k>C)lh+yP=fwggni@2@9~RNAq{yRhDe
zBo%DAE3d#ry+<`Jp`gGHp&?qsVjq}L@o6P-ihx5j#{898gwP6@ZT(zlyI7!xAX4!w7ia`bTDTIt+>z3$!E{t?YGvjm
z)lTXlYfy9AnZktKKn=B}YY0
zqReksGe~HB8ZgFq=k4o-Gn;QOJZKM5CC#z8dmlhB1B2P~7caa5HWYMSpm#~9y1s^s
zL4&Chu{f?zAP)DXOY5U-!MU#58+7Yhd?zY8AIR%EznrQ*-SSZA%5D51cR&s`=Z;i}
zF%5aCA@!anh?e8<#snlKeK`NQv?M-m+2N0HY%ph4OvWL0wK!dW1_edmdKC}jRXBY<
zgv4&bj2FswX2v9fecJ-H3bx+N-@l#FX6K|Z96$u;W4$?f4}5RDXA!OBfnw;>hucY@
zaK;0qy#zsfXs-4%gy@o35gv^f4m&zNM+o)J@@
zT0jIU8>4=43!LGcr&qL2GX9`7h|SR;|R^%cCrKc6N5y
zM8iE8q*X>1x4_!110qpiF~{M!FQ&2F*X&2gf?hnjTPj#;YEgB%vwFHe*28u5mjc3?
zWg8Xe5S@~Sr=Z3x4(06zc5J)$=C%qn9CD{pVC8a@Ab3ip%di{LtCjX!D^i(&{FNp{
z%X79Xy0)H4#YaY#-8r_m5-Pc#&4G^}?i-g4xf|HM8P9sUx{B?qLC&I}*wt+C@Lteu
zYopFsTU=a}2qdXifV}})-RIBFFnv<5665gp;xvvhRDsR@-*6b12gfJDr
zj;&AP)(LI@lJutd>q95?Q+-tND^PRv^!3$s`Iil4CzW7~?h#Xdk3gv}xJ};oS`Efn
z`w|aNEJur1Ux7e6R${^wp9#|;*~)Cne_qMTe3uuVhPfz}btWM{f;Pm(c5rZjl`Zt@
z)t>Y{gabGqz6GUZFVh@w^a*vI=gQyR!D~JPtfD$F7XXPYLFDyAVkd@+EALV}LmxVd0m}0mRAq#Vp(7(V{
zOfZoOPJgufJmmx<_BzBZr}0!@mCjP1<&dLww~BSjzHgofQjtOx>spYr{5
zH)E`-3F2&`pgriqonLWkgTRj6?iIR7hCrzZY1-4h!?~W@cl&%0DGQd??AjV1Xk_3E
zm`$b#_=a`H9Nj{kepr8RAV$*_bp*u+AB1|f-C@YI*i9ah0v2M0^vD=g%olo{+0Z%)
zfCntBZ&V+=h9?fb{{uAGcWxwZryn3`>rLBQ^#6j4&jtkqiWgz%X*S+XPEtt;iE%-Y
zZvvQmS*BwkAf+&qQMag~7nC44GZpDSHS*NHC*zYyGl<;~Ha{PlF!V6<+0b$kFooY)
zijVg9hqSV#`*oQK%l8I@np&xMn(p-sj#$jUAonov1LKduH9u(Wv!&_E!Q^66RL&jztHhw(P7z|7vFnzn*4HZ)T^cIk4?v3T2xrp(+Qj{pXu$o*(NJ
zIg-!RlUN(}caF{sQ~dXXuu%E-DAi>&zvYK&srUNXDE|dx4Qo9t)Qkl86C0hqZf--B
zU={uMAZX?*)^{Er#G{K9LreyChg^72kT{5KU?rC=u|i&el8GtI9pivaLkDhxNo3(M
zJKDt9Q7>)XM0@Wr>%WJspZV@=OWN@|`#n>JT|{wXzQezV9byM`qdmZcc31oI_JKvd
zC4Y&;U7AaEIjWp*#r!Dg=mx6RV9ekV90I~_k>O`k7uCOB^l+hnl*`nGDB8Gnzd7P&
z#o7gE0-KNx0Lp9%fk7DW^1ewj9u7>)yQ*qjw8d)a_iNBZ>L5}3wbvl4;5<1zZU!vr
z+ydu~@hNc6QuFc>T88Km-v3`NqB=I};a$FLV)3L$NWsLtrY-Pg;9MFvS#G<;Xy_6K
zh7gSUV*~ovIoOB=?Wn+L2peS!37rJ#RC=_kop#je-VhNOUi2`K|Hg55sTt^0Cs;w9
zW1AC|(ZV4ub1N$?K!v&rdum`D?!@8zD3zYD1F_)N@-c4`Fh)Qc?OJigN~<+Q4iMsq
zV305d752c%>Rgx_E0h~zfD@)oO5AFtm0p*=$f4WXHV5C(AADyO9H8*?v20IxZT}cD
zu@`?3?O0UHvbey;z`y{@0lCEltZV4d-XX*E0O>Jc972xpW_tP)9sT$pR*N}E&ac==
z9#xOg58tyujb>rN4Pw(mX0G1vO!>=b@oqf+X=%3qz>$29FU5#k2m%ycwIiicQ@(Bo
z72@zgkis93LA62EMCC!#6z|7tSPR>~$U`o%yPnd3V5<+YH^VbmOlY%)s89Vrb?(ot
zrD+=E$^nPy{dOnqxbOPIK%136&0Lp@troEXCifTWa{)kQuQcX_4$3c3tPk-nXm@?Z
zM$a6pCr{N?RB(VjdemzqR8_@rJJ}*Q7YXr2gSobaLM_%^>Y!eMWH&PNUJtxp{kg+s
z&>j9yvX&aoCgfn5xgFhuc;(~KrjIws%3h8szf5d-1M#U(kP)7@Vn{S79`voR|1mhB
z4d>O)Hr0uwx@^}+#Z$#q5k(N103dxW7?FV4t~=mA+_|qax9TM@j=BNZ`o_j`gDI1}Zx56A{6cnr
z|F+%Z7f`LChb8C@K70g#dk+NQFZb)u&RH!BKl|UBzQ#Je5=0)PE{sK!6BI;W;85qR
z5*Y)*BQ75zduF|1oZ)^0$ILe~^C23{`slU>m<&VEig@A<<9$DBirt0uR4VZJcneI%
z@CI{KyC6ls0Dzy7bQAJ8NJIekI98TYaWJsC0_fH$Vn@7S4=T-{=H!?>UShS0Cb$kxl8Fb|mW9Gp3m%t(O2Js=dpy2(a
z>j_Jo!va&y`LQU%)Or(-Pu4-4bUvK1_7fzR;9?4bZ_w~ZKfGvg2tE{}VpF7Ie_J|b9>Fn}XAEGFh=6blxZ>h(8ZN^CE)
z;{R^8N}MsG!C+K1;NjxRZ;kuiGO!V(3fOo%BhU5RGzBh58Twl`B-PEM)NnTy7F%O|?nzgcI2P*CdN7
zOG>}C#uerNe|ce4um5R}iI_0e#w$mB<vWcYn|Bb-(di+0AAqFPv=218Q
z>4jcY?P)ZpuC}{R(v29qxMJxGJ=31RPu_w1!UN+$=>^WSO`eD`&rog#;wj|9vsB6x
z;}Y*d9$$C0{+W0zeM|3aNOom|%n$;Rn7k*xcwPF<2Bm*&<}C+KCV`JPR~4+
zemg+<-*F8l;%||w6NmIKY?~JvuO639
zu=+In;zyJs#tu?yj`xg&p{YYJhhUCEj6Os&0r452W3P3=-iCxr_0k>^Rz!f9*A)%e
zU=&m>ma|RUnGThJ2lYPKpf6;LqHEYY({u+s-+rqaVpkML}Prz?>gCW&KXlUc+jc*saPC@{7MnaSn!eYMw$94*lR`-CY
za+h=}8rsG7-p~v9jvBq$rdGOu3m9R5vFNwZ#<7uimQFhQ+pcrmhFONxILA2nZh;3-
zqe)!;6v0q%yu%c^5OzrT0r5R5u?7QXMw=B+#8&T&*tRJidJZ206H^#4-^~wfsj~wg
z(vF}uewa{l`~f66#jPYYNL~g4jpSz)SHW+kf;g*V0%Vk2YePDV_&_lD-QXT%XPaYl
zS5`sc*PnFt+jx40sCWRQIJ~C}prhbG@B|GFL}>-6Hi+;A<3bI9@B3;m9sv-4fQA@O
zYPpMx@wJPf{51FXcQ~K+CYfpOE=6Ag>7nWCEh7jH*OnhlVi-(t+{DM12fq)|Bq&Q}
zXCEVJovP}0D7Mhh&~1pt1%ZIV%X>jP=J~aRiYny=7!oh2C4u>7DVIi3$Jv+2ZTdp@
z#7mxc#4~-1{%<(qL)Jsddq{FclstBNbf~l(qRa*(eY<}IA>xdB4$K$!d0RV27mzft
z2SUCx*Uhp+?g<9xVfwB|%K_~4t_yg!RF58g1Hs)8S2>#X4#)^%n0H^v4K^Q;GHFr3
zd<0DIpnZhl1Py(C7$S8yv_{CVahNF&QsnCN=$q_rLXmriM3}BX((@N5CtJI+JqS@@
zt@$rp_<@9ye3+B@
zOj8;Mr{Ci{&{ez+m=V8ZZdbbD5gHI64#G7z>~3D7qpRLraYBwPOKCX8_K#JSNIbvEaNO_^oV9pO#{w-(}K@hV-fk>#b
ze+Xeq#E*vWBLWC0r+Wsb?^~FTgu(0u-SqVI1sCKyu6%qF!NWl&KOw_0u&~o~|2pP}
zFX7>Kp$nmqEhmC(2w+Lc%sB|YgBV(PCq0S~^fEYAy_G*W2EC6x#A7S|EN_2-wxF{Z
zzP%~lzgZofgH@YYc{_2zkmYhHMB8B^8~LIlFh_`9T6)0nE%L2Zu-2ZUY>}^(nr-ri
zDTJ?}4F3ZJVoTSElB;t_i&Xe<9-|BhY3nh
zU@yTkY8e{B2bt>dSZzXG3PP>Fb5xy>Vs^NFFLy-&x=`l1lGEkt*FRLBnsIm>tGHrV
z$Qp*ent)UqUar&b(kGZUfq3fkREhYOsi|FxKQKQj2v-b(4+k>2`j2(MbM#XXQwF}I
z0=~87e^K_8QB`$ew+9rEM!FG|6p-%jh6AXybazR2BcXI7-Q7rwNFBPRyA>n_x$EeA
z?-<|r@BVN&WDGZZuf5h2^O0fUsjk&$R%
zk&yuA^kZP4wV+#AT)<{**9-h207Ux%uwe55S_6l50Z`gG)8Bdqs{!wh)pYP4s;m3O
z=Thifv*Sh;|5rd6bG-UN9g0EXJKYbMaXRrydObHjsgU=_FPODSdtS|og6)WqGr0!=
zj!QNR^%1}(XThiq_^8zybRz<2!g4&fk0zGSY?R(_AB^D=Yl@X!w14p8>&ilL3
z&y_h{Q}#utd*$+pRWD}W!hWpv!i{DCgUTGBICy{}g+a<04kRENZFj)_$M7dVJ$-m8
zhq=D%UA(lqPmCp}yraJHkFE#CjzGY>>_zp2r4rOB2%>pVLvy-VLUiiNtX%qGEmP7I
z*vf38xe5LSl~ek^u-?l*yapwVq?#;
z_0rSOI;clnU7~OBJQ>(@NdW~vpre?A!KPv=`_{+BCY$+>F%+Xp_v4^D#l^)<0Txz(
z_NyCRbtE1VVoHqhip3bK
zp6&;1w$sn==JEtELpB^;T*_bR0!0X*XKD>+zNW&L!exMRoN7H5pCSkv|CTXb7!V=m
z$o$j6wc1H?HcLBNR4Ie^18`~q0o~EbX??XjXgG~43Iu*+3|^kpL!kPGJ6(BzfjT_m
zfV^PT9f$;4hOh=S7f{8}d<
zNaEpv-N6CW?d0Sz(@x;UqL|5_2(${}VE&T{aLz)-)SftMiTztdMjxOO-u46U0gr&7
z4;(xRP@J@9s8r0X9v(_N)>vZk0#L>>{bgwZJ({*HQeU43uRzfIcY_QzSPbne*HAf7gBw
z#?&4AybvD&l=1IF^MjA)xuu}RbHC7A+lR;wGyWlj+-ChBY?Mv#*A1%7B)y9PbZ8lw
zo3nH((7L1mQRU+ru2BBl-aH~R`a7B?^&ur*#8u&uc_Cx6SiiWPyVQaM=?`v$@^KDZ
zWd55KW6oEN$bnTzK$ze=`f
zVa%g>G$J}LaMd=(#!-njTNX%+kbN(;r$JEG+ka~-ecQ$noza6PxI`|yKhpy)TOOH-
zK5m!!z+d80$059>quV&{FNLxi!IZ$0uv`UsH8gkzgo1Lixaf&v{Xn-fdkF8BrC{To
zPp=~+{#_NBX(de@T7o6=(%iHEArN?{=P$KoL`I7|SRJ#)kI|FXWCor+pr?KG;swiO
zjmsGWKocyZGo^in-paPwBM}_V!U|Rl`gGZ?ZqVE-5GfU^`B!E7iAP52=oA
zp$uzgE4En``lo=e&h2-?qj+cmlVYBMlSDcr@XDlj^?fgI+ctj%q_PM6L4ZzEcP
zz@XJ8@Bn_@MMWnAbQhT!^*<*}qTL-5e&k+DcIqdw|K3(2yqnF-#lc&CAD*NSE^4+L
zW0!xslIkDm)8@vxJ^s}!MZ`wf7_eiXOMC*N$EizLRH8!k;ow@^^kl&A3D+s<8nWq~>THXEZ0C=Ge}Ib-;XP9A8%Z2YbDeSp=>uzVx3kf{ph_lsx=sedk9Zpqy
zRW3Zr`V-m<0>VcY;fUVe`0@(qpLiuMvGKNp+}QnpP4O+2#c
zH>HAdb`LAc(4n{@RX$!FfpY$T3~MMhKx1mn-ta?=Z$k6b^aS!$LO;6<5_W{C=?5?H
z;3t1ldf|ci54`dGxs!$mkgRb-VaZT;9dKRa;n5tM?lyYUkmB@)9@E{)VsgC-ir1O{
z5*M#a;08YLNjRVs!+m&_tY}8
zgI&+Rb+TALjbxky+wI`OEY7X)i_ubUG@VxKH9nXGvC*?^rd>Od)5`Ubwg(lXF811Q2qt9|Whe}8m_;!ipWM5n=QedNNifCOH%
zktU><;o4^IT^ie7&A^c|qI70_qH)s@EFY)AEIEZEtmC
zDTCiX_JSYccQO=;UL4yWu-Ru_QE5xcrsN`qI2h5Yd>cZhIQn!~
zgo1TGE@%qmdzvy0aL}lP6hT{f`c1!}7cY62QxFOZS6Yx7w35r^u)uSQjf!Jx3^R&y
z9a!4_3G|VnObV_qQrC~EC}bB2v))X-E7C19U&>NUvX`TN(TM?x)|R?-`-2f_&ETrG
zp38kav>A2%+tF?6$8oUx_l%>Lo$Aj_nMQbMRFG1Ozx#~Rsx*$%Yv9t8!JSwd#q3#Y
zcigey&v;6Q<4=j6N+P&
z4K_tMcs?Y){aU_O6-9r-M*$E(*AT!pYHbq|s%UCJgjNu0>gtOe90S)CdRdLSGfD_Dp%(IlMFe*Ij
z*)=&GkVSF3H%;x2b06B7_*#qZ`~>DQn6E6K@#+)DkK6Z{`1sZ>#-cjNU${pe$}_wy
zbm?v*c2-wyaZi=b5_|w+FM$*Ks5Ho4lD+h^`}4ky=UoAtf{cEw^NS^W6En#`npls0
zE}hr-=OG#(#aX{IuQswSosvT(v=tmUxu?ua4a2h+n!@uEIPjA`NK?~S-0Qhy-Odo-
zI<%C}`iux7Lc{Zb+Q;BbLH&Si`cu3|`C|G&ql9_!Sf;fQ&iF(WcoRm??i?IzN30%{
z#N*Oz@n`+Ec~C&$`4!VzMqFl5k+CvV4Jy9Zb8j@PEWLFYaQ0(o+#Ll3kEoBN^gwZv
z_(9#sN(hux-+R!`oJ8!+)ei!&5I8Su?@||Emd9&@v&y_PD|g+@O5cbC1WAtNdFyV5
zI!QMCQkEhA<_*>Di&}3K#*@@qcl`=C2L>p13`gf(PN(8b9`3W7Jd_V_g=&-J|NP#N$v&*|C>FnEVmGMON#;XSy
zsbNY3lhx+qSB)SwZ~=%u8q|H^3sC%!4U&-ZmGpt_yCMdL+4R|l(|2^j{Qi_jckp)2
zC;_wILSxSHdAg~Nvg2kCf5|cRmtciV4dVoG4iw(nd@;~)-@ag}x8AZnirasmTb5%p
zfI`fU6%fS1(wikQDLA!YIGqBwP$EqPjRE)JkjdRLyagK>YX45YJKfD$ARo1D_xk-9
z|CANM($n-w=2Ki(HAm)%Sgbhy66wtJlFx7Z1ffrl)49EEgXIdq}gBCn%`sbYzI)aLOgxMp@kD3D6zoy&ifrbPcZ?9o?3N
zO5&}&!La4Jvx++p@^S@F;XoAII!uEOzdfn8fXY~Q5#>U;8N-J(+HWI$RK;#>{t?J{
z)h3*b05<4vZ6~o2aX~)vSfPSa>x1Jw!CcD+!2d2EK2Sl=91j>=C*jwk=PQ@iTy0)1
zfeDS0jfpcQ$@Dll$*6rfc{V_qrgq_<`3xqJ-NW*vXTebKv0TpIwkIV&lYzU5^4rUq
zwB+BQ6~mzr9mV={<+f{!c$p}_6k9iWzB19vUnp5w%{02sJt|pPg1uLau0n#cgE|$9t)u&LYB`=mQ}h1QtsxR%Qs)6IGD+a0B=9W&Ae#jyZFq!)
zpDzO3uF#^?o=6O+BH4->}
zip^|k83&4Y`LB=UpK&xLoFq{i!AgyP9axpdpO%K9CiE2?34Is><;P!%whb7@ftNR>
z{^!zsSLGNIEd&dq>SZa;Z0H5zghWvv0LB6Lwv@M*`_oZCnhK_=)|9|$e9C;M_+~R+
zg&1(_;cE_uZ#Mye2S*s;5Z#3!U|E?16q*oq3TVI_0hR+KFA0f>ujY#Ybm($u(Mm)?
zMy4Pog#^f{+~Bhn&8^&jI&p)GRU&g8m@4AVy*TE)pF~YWI#-}*qqKteCVT1T+uWv0
zR)Jz8#-T!ICuh|g9;_P0UxIX?QtQ6K01lS{sA6L4@>JyXf`0xbf4q@lBc;DLN50v#
z&1vlQ7&AH4b^+CLv^;o!XYoby0BqU-;CVrPJw6~V0_$X8WWJqho>env2h9II13Pmd
z6(=WWxsz}Qu7Pkn?#<0jz_H?hfX_^f0`zDA2CIaYS5^XF>cDaOa|LnT;nZ7p=YxRq
z&(3}+?rj2TMH;B5i6Wxq1M}lC0X58fD-B2jF&Tz?N%-I#Rr^-$9niX}VH*E8%p8CZ
zGo$l9ZT8ViKihg?o-5LUG)0<$qV%QGbdo;QUiQsh$}sSU`f+*LKQc14vIS5uNWGmc
z-)EBlAt0jU`2Q9Vc_;FhE?9+&b5fJ4S+-=st0FfQ}E(5gihb!8@11jU00wDY95
zU%88A!XTb5k5)Cc5fpebjX*AP&eSmAAOdC*)YQ`3OJ&x8B+_E73}MYTFOwF!$tR9Z
z_#=RRR}-Bxv&!#|i&fF4El@7KSBhH<=>4@|Y5{0*d}p%wFWI05Z{PV>h&!cV0&z|3xmn
zG>qvA|7guMM{Pr7pFuYd*fW$%A4K|To0*vbmYvENnAb)Xt?mz28}_CEt4tCS5+>c|
zI4~zjvo0?M;-wQ@@S1Yzfh{0xE=jh^Yl^-kot3=9
zRQKec-nc+!FCTs2FDc8JCb=>k5QBvFhp9me3vv~`Qrm4}bBP)5F0JcPUI)lWA9Tr#
z-N@vPyr^-raE0~u&R;ALYk-^C1WuW7_h&GI(tZvYFIf=a8!!$WvZH)pZ~gdy<9WU9
zViJgfb(WK~KsU3eU`ItsX~*(3HX?$WlQRKmNI2dd>w>QqRBG$30ITu5Ux2*f^tkND*AQ^G-CW8|2;kf?6W7VI@bP8cl;S<3=c$pR*CFAH`ha
ziuei$#=!{zs#CaKYKfXL_*w>Xiq$8^d%f$0<>f5EEuFd2g(KHMDM|bMIWV-?)$Y^M
z`cEH3Cuy8NO)}@fnGV9yyq6%+#{8dVAnDCqxWWaA1mHSza!POG&GzZGWSV3}VhV_=
zy%ppWec=`Lgu;#7v@AGCA!HvBn%O>aUARS`2*II0*OfehA1`xy_F7SD>?bD|47pGn
zr_!Q_lVe()UlflzlC`vZ>)
zE;uIn<5}ySpRs(_SHl(VWpMK(;O6zcj<|p=%>YP-Du9g)s9&5_K+oIG#|L+@1&ka{
zAinwqTui|e)PTG0xc~E88)+8!jsm9jB&n?zm~sM3FW>-`kbn<AqtidbN9XT$@`W{Qe&ZcAiXb=~x}soFplIOHP>uW|Tu@{A{g+N9N0y_1+1VF2}+Bh^F8g8*`0*3)buGKvw6@xXFzw;qV>k!QrjPRPz5oQ%Y`?>nDpr
zdpYHqBVkQtDfEOiquZjsIKFgBcq(1Yky)
zk{)S1&b1sXp8g_z{g`aayfS{llRoNhz~fK_W?k#52A~Mg`H&@|NuQ$vSsb@`o7c~l
zO@`w_YiC!h&Q%`XvcJx#h%Z&Vg-2X)#PexY>A*|Azq3REP)__9o4;f40?2WsaQUdZ+q
zEQS<3A84U+Y|&LptU<*8`?@ByI=H59`+>ij)aV5Qz)$3&q_yc9P9$0Gf1A>Qhzjr9
z->NKT%j*Ay=@st?C|cilQM>)(x;)F*eGBWs8@lFkrI79m&-)rMD*ZV+-T3Zaj1hIp
z6l@qPiT{nPEGkr}J*F_T5*llXwvTT;qOMd*bX8Mm%2?N2Xc567HO>Uk^yfb#ua(UR
z*>ZHykBNy5kK$Mq+Wcq;tUD39KAo|WuYc859{}>fL*BYDk(gn+&K`}T*}j*d=?fTi
zg7kB4ba;f~830`yNR=|z!OkdbKGZ!3z!BkD&wBv$F`eTp>p1J)@Fs)nGQPGvo)olC
z`q4ScR*RoFGKQIY#`SxDT&aRVpw>cA8Tc%M&+z%I?rFlSw2`W?`%TeG%R%n9J7(W;
z**;>8JSF4AA_-{4APK-Fir3MEeZ4ExaoL*(4S;(q|5#m+$j|YB*)PT`;u@`*nHs>I
z;l|ZApvZb;N8FYkIqySq=XXT_u030quoGy%!X$G3
zQbDCs(tgUgXo9u+l?Zafept}<_aL5$uU+s%342pHU3X`55b$8YL&NuM4nQ)b;~5~p
zEQERTw0hJ97b`@UC|iMI1XNSu>2*RU?@xfn@n|_^oI*?GdJsOL2>Syj6s{xBRZyI;
z&kjC`3@{EMKN)OeZjz4qGFq_DDezJBZ^sLT^186cx`No^wu?c~3OWFw8UvV|s7-#h
z()}ty4=FG%TEsSoqhwJi44_5l7(?FAckz5MIyxt-4@GMFW!-x&BwkK9v<07!cyD2V
zsmJ1ZFPq~b*9XC^H~6eO-w+#3j}W^iyED@lVsgsf7Deg%NzkaC;=K(A<6s812Fkf)
zIXlA;kCyBvj-TTQzxHuNonJ2csmW**BoF~_LN})-H+rQs=?Yqw!PsW>{e0l~Q8Nl|
z
zZmyIIevyQ+nvj2q
z^Mx4O?b9^9;qx+}`Vj7;K{b_yfQi4=aFpw+Mgg0VMfaDSJSetdg|({XzA#;`=_^-Qc^?=UmC3;qicKwCEU>TrJo?|R
zNvrI^WiESHP-kUM%D1zWYfZ3f2hKl?3Y*N^O7`zd8x;(uzIzh-K8V;^4Pl7N*6PH7
zQw(Z>m^b!NT3m{uRibR1LO)8)tx{M9kJywn(TXB!P`TsJc}13X1!tEm?Uv+Kd6Ag%3jT3~C1D}ao*{3$FYgXdP}vHP*6Q+XmS=u6$N0J@VQ5EF!c
zVe4f`X3Sr|cU4d`2iGUBWH^1Bo+t2sab`0LqQMcGSfel@L
zUC`}S@foxmO!7sP7IHIm_wz}7sdh2b$(vPML!CBoOwSAmtap1Fc^!y)|
z%7saw{ebM!yw=H!vM?CYlzGLdF%wMeodq*kcxa?EjH1oM8q6k*sFoij1_|=2uD~{ve_kTFsvWZwdR$gE
zDl-=4WDs@C`7h`E*ksNO$11y*Gq;w=ZcPT@S%6rqo&`?^vf%gU2WN~J+JxDf-75@b
zY>d+6Qx_PvLUH*??c=(pwe)|hfKtbyVdkyuqY{vx!T5`k_1tD3^dZ1(E*M!ugps-&
z;IC=YDeR1Rh4BvEv5XDo{tSkt#hgknJr-Qes5&YBM179*h8TGZuofO+aynmB#&0Mfnm&6TVC4;>UR%s|wUZa)
z?~iB0LwBDuS}GM-BiI6f4&&|mqufsn3$@PA6iHCn%;?_8rD$X!%pplbGNSZUHF
zX6f||)p38K|FOQbWPzvq8#;KCt0E#h{}EfXN(yfRbtfP`4J0k~q#=8mKSnAS2oUd#
z&n-0T()>4#Rg-`q@%P3B(d6sP=M!O_0+Yi&=^CO%+#SCTNEO3oqRpKq3tcwrt^eoNlYCb8_d{5F}U^yN#huHa1NBpIdtz*y@eDemPa5leN!aL9}@j
zoS7o0zodoyvb9InH#^5kTrD(6Z^C{V%3Ao5bGqK=09hM17-23J(xb^tqG`4WRmel#
zvz5hkXZaqzwRE#|jja5hz*;~hn(c_Qk-BMxOWO%nJpc-yFyYx?(l4mF$nc~|7u3d&
z481z;n3K8a7OriY#_K3N22J{l#==_9cl-og#qsu}<+>OIJ|%2E`8;>pj1+$^G?bRA4SUL#7G~L6A4s&Ynb%
zL1M;Ho~XlIJ}Yox&HHYn_>devY^9$fWZU^B-k7nB<=@s$mbZvS2kZQE0Q(mv<_Q_l
znv^0t5GA(9!D?yImCB`fk3Vb_NavKwb-Qd(t3Q_*f0HB9L9p~`8o>Ce$z>TrHL-`b
zq=~2X?YS>wtpFUbaxWArU9nyf=DF|%Uon(pAc4i3sNU29@tI@C
zA32SSXc2g+JX2_Eviy@KVQ&cfDfgX&igYmM*S_TfF{6LIhN(}Y)Y`p`is?O))Y@Gu
za{L%HvWF}!x2ntGW^TR&ie<#>eEU7#%Dm)z+9%XV_LU^{wl|qv?IrBn<~c&mq<3o#
z^jkZH4<{ZraB%Hm9L?n0P0oEB)VBwvrqOQ?S2f68TjMHB?C}ixF%uZ9PkvLELQV63
zlo2KvF}TdV{jQC)2u=O^dQ4ZDumFOyPC0D*AyktUC0U_0k
z0nMH@Qa@_#*La}k*!kjPQdf?@BUvu__yFCiZqC
zeHPupS;_hNfj0A;=0)dw0v&ZQ=zAdJg;}*k6jqe(D&v8{S46M(gXQlKKM0KGNqy{V
z*nLROVqcoN?jz&lXK*UNe?+C2y{g}k7FbaE-?7&Gw|2&5_#rycxwA&!_|39N`y6gG
zxlrSI(z@sm0~f%WiEk}`FZA4>BUO)waqVJNwB*Q{6N4fpU(Q@;VjqK;0ErIeU?!Ku
zNu5FG2aCMNtl>hMZXFshdA>^9r2Uj
zHweJh(0U)RMB>?>H*_mf;1OI%5sy?M9!A?Am#jP=_)c{Y4f;EDo&AtRBc^f&>mV|d
zWnewI*UyRmgdXC{((#>?Es{RF@pTMfUZhi_YTONeV=&yh;G8)c$tmyo74@ZC7k@eM
zHNr$rwJ<$$CW9e+EGq?45X^{7y$9dbEr9_oF|6}et;+aot@y97*-rw^XvSiN9xV$3
zbDWIR+z5&Bwt{vqD>K+cf+ns{asXGsZe}n+kZYoalby%v(5ry>9fA-qf%qw!l;9Lm-OPOY&nyhcLZKY}qXa&0
zl3Dq@(u$;O(BF%1&2!?>290+OE@Nl?L3|=o(fUo*Leru-jN?^Go#~b
zo=hePCT{1!sS`hTNNrE+d45AWDgQ)eoa#dOIiuE-!pVNRHdYWm|L^VqdFyuFsPhrP0`X=akoP4UqXpZfSP1}~^RxJ3y=4om%w#U{r
z`8T2AKN%9_!vf-|9ptP_ZnBT|#YVd{zaQFexJ9Z#1CQruCyO;M*humuC>#P+`m0>6l(bT+4y;s8>uG0z=sc?<#f9D{7pv$7V#pt`+>0H9d}>$-_F=IB0D&H
zG^vCKdPllrFFYAxw25w30@PW#zaH&|Mzz~MzuczHM0sQQP0&Wa(&=XpK+ZJWkJrrm9`#+n
zmzqytaYrejCu=Z=z@BB3uPqzT?@iQy|lV*O8Y{Voo}Wr#<3iDuyi?L%
zTb;a0(Tjh`(f+BT)Y?3-TU7#^HymtU5B(mOX8E4ryn~j3cR{(TUMM_!!E#W1<>V|w
zKbY9X4&}D&AID!i=Y?uzQ^6jM{2@>VQ(}!Hc(oSj#~8XwhI8S<~d6a
zI?SzcoK2f;cRc&MVH!WJ>C1`y$(#2y9)*EFdnSv&r*E*YBc*5I|Mr&d`xg41`PS8i
zjpjxTvi_jW**Kk=Tb)W%{ok2msmy5(oNk*adx>^JsQ6oz0j-Lm&*Dpp^Mv5_aUWjc
zx4LJFN2K@r(
zNj9I=fW9;@IU=?pn&D@T8{~z%zMQKJdqwoVkFQX>M8aBC-f3iL+ShPS=Dbh1yp40O
z-2Cf=xB96@T*TngrOl~{j!Kc9q7{^1geq+)LVQvJ9X$JYLcU1WQPl%vw~+sGUMUmW
zy}1`79IGS>X=_V~?D_46)ibN^tNJ#^h|_3T$TZEH2j0l_?nDN^;A>97EgZ}}F=I~m
z?g7n~Wgp4*`iU{p0CA%8ik}-JrtRmRT?cN<(|141E_JMFTGhBs?Tl>~XqA)Az(-G;
zn{q&1(0cvuE7X{*X;@K-|1!<)=d0QLI=#13BfU1;ZYJu6Ow4e88S&X9w1unJ^vhYa
z(Q&_%41>d7*dqbCQ8W_LR1UVpS`I6-hv{F7XESrQq2c7d|!sbV1}*F
zj|(Mo+F1>qz_(5;vq+_mCUFy6_d1KfJz;HAn)$&Du{J4lMRiPSmPh9=ZGOIcXxrXf
zkyH-)!|_|Za;24TuyUc@QCd1>Qo2?Y7izZVA|--3QU&xeDy^`KRV(}`+Dv8`_uhN^
z`nzx&AeJ0U5Zo&G>-ZT0!Ld3CuSXTeyz))-VGyRZjJiEb4EWxfd|ceFgkig#r|Dd*m2D|rvL0`%p+l=Q&CzM%v`4`eWH
zQy63%*`5Vy_{r=q&Y~)34!a0qxiGU2uVc!O;dM!6-@|<)sWm`M`*pAo2nI`F?GdEd
zjE0pscq*sN$pa&ChoTQN#~w;%kQrJLI*t7L!7xSW_+*C_1a!wIm#j4WLniFsxcuEl
zo?4vX$u+;RPEW;McX}WBq1U5dGrjSH-u&<3CNjOljJ?Nm(O+`19yTw)EP~;wXjdB4
zI2r2OTa1_6h0v1lFVg2_-nGIxGR;Z2#el&BhWO^wpfrV((W^k6m8}AOPkc6^D3mgRojc0w
zJ|0}+#KPBLUuI2f$WDw2AX-y9HV5Bq8rG$Y$Wu#&-*s~8>dm&Qs?aYWUX-h>NWwh&
zj%`0{PYM*%W!~~HXc%ew#4B^9C9(0=A4C-vfMq8x$PJzdx$jHKd_Oqu=Y5Y#ghbuy~ST)&-3$}ZBVV0;I)P00L(uu`zkT;xqBTfpN
z68N5uKg`Nz4bfNc^am~wBYi6<&arBC)!vcS1zxNa-cK!OnLf@?Qb)JSo~wa1e$XNV
zUt^*9-y=-WB9qe36xicM;4WnkUg_a^+YkFz8(gf92?h^0mOJ
zg`C2TXOi33r!UY_oJ|lGYuyl5_f}y_wlZVWRqFA+ae!@2Hm-qJ>{O8jh>~@njV>{V
zMQ7BbUgW=>UA69@*M;K0zuw!SU8&$UbYhKWMUnzEmXKBtdPXu*!(w~>ye#8uy5T%U
z5}G3BnYM+tF<3um&s3$>LrSb!{dQe_58(rj#%f_7j%xy>?JelCt=ywyF}f8j?nGJr
zdO33kufu1*b#d0FsXH2{rZwn5fF
zbM8s{p7HB!cwAIs4v-&ZG2FspK>Ssymp+&6{7sN?>v&b#+u$8;
zVC&@Yyc;P?TDl9RZV0t2)vI)ui-vh<@=fmUAcM{?kx9Y$m`YHW6Gqzu`DPUjhP>@KX($gYQai_1y^-%Gz~%{I7*X>Bc6)iHG^_))mBOvLg#8L)~0%5T?%%~pU!rH*rjFZ=a6Q
z-oPWv(4qol#UT<_JssrcbLxGkRA-}~L1m7rQ673~0P%CJm&gZsh<;S1#8m`=n
z7%adZuoFx*2_eWyo+@H1bUBhU@|XVbz0;rj?#(altHIJ(u#BAP?K^Xw3t3A
z?APOXJ6sj5)-vcP20V1D{cf#Uzt;IHqMj%9Q%5Lf?ir#k*ic*@^j(e{bYMWjCnSwz
z7Py%(ureU_w5kw-CuRx|(|4Y#zIKQCKQQ@fzGc$Mt${^6YQaz$B5~KY>T=UVmd3XX
zRvef$j2sQ*6vi{sTRjXtB}y{Bc4JuHJdr*lSaD-8Vjx7OK^Ifc=l6a+!U!y;3@a*w
zD@t)=z9MHkM}B#}>vWbgGJvE>xGhn@noNOYefD~mC?W@@iPoFuI%dWkB)h*tqr-F1
zy?3ll&X$x1o1!Pjh9Vog4$I?9SNV&5x;#j!G;fwQXAq303ypG-&ySqGAr`ExGDYCr1ck
zG34F6{hgA5#U($_X@||9hJb3k7=6$0yiv%XWBMR`x*+
zrMQjzjJ)Yp7}+=xIf`;2EOgil-@mh&Cu=s5HO9YUrD6=Z>+x7?{$k*7=*sr1&-w}W
z@o@SaZKh0$Bar_{RSo@1B
zu7F6a94oB_K^d{X*-+#MV#@ZUzXsOycK?%TtoQOuMQx+&nF>^oIQp~x87z
zzF70P%CME9hFCN
z_@Er~v+L(T)DK-gRM|~c+htVC;q_EXLeC=~_oCwm8GCC%w>YM(jYU2PsfG$>?j`|Y
z@LeE_Fr}(?)vYd_V#5M?_OZu#quRauyAql?ic$|#d{Kj&##=teT}0tn24TF9-x56D
z=tEXt7-kcpY0VgRakT2mOYc5qLRFHerG7l2bs@CQiv=qj>QRhuvzA<9h&0vCSMWb3*^Eqymr!!uFp=O7CD#s_yhp+6D34VUP3ibTH;)(kR)cko;s#i@soTCcQH
zRR`HH4wG3tg9@#(bEKXpOT;(4&$b*K4Ak7~
zH5}2VH@baWUfpN)<*_lJvP)KQ{F-@Tff0k#(^^%0b$^rIz^=4JqwgRjgngx-Xj#z7
zpX^+bi7{QhI>i3LsR1!U)yVdGI1#+%OVKM!m`rdoebg5Lvx4|57xrbMHyKHpxQX5|
znMbx&5zTB6RKHH>o@c*B7BANjPmd3ix<5hqrZFi}BZ@G^drKio;)VP}%k@RfwAAbv;Y!VGlEjC4Om6ur5lA;(2Ms$f%NIieCW{P9
z=zCXFNgcA*ayv@vU3O2=KMjqLO+)=bd}Yf-NEq0b+$-Tu(0|6@JrKC+@A;waaYjE<
z;ax6|MJa;y@ejV2YI`9|P7`zQ`JmqRwd9m^`-+(2=O>gh*`wD_LJ$IO|nl@4VTj*mfmjuN5u
zad5wmk-udd#QlsN0(r`|!eUzdMbrX#Wt&=2?cyhGkt!yyk$CoF`o4K3uZo)#oKFp^
zPQZDoWCM1|gi-{G$%|is=Bx*#kh|k>7y?G$L5`y0uagvBtmy3*yf#ez1IMJFgkr^?_D6oR!S5q{s!y~r%N7k%
zIO`G7^_R1u#11L`_|q%hlHFfqo_DJt$vvy;_4)JU?F*Z`ySM^E#iIu)UBrw6Dr-wO
zLgIRjpTBK2bDW>C(r+u5ewB0}M=?Jm0H?-)4~p>B1Q#YJA)ce71p(`W?}(Qkod*hS
z#aDmpP`Abh*{{e94_g=+1nCGp_8!OGtf2@~@W$dPE+SD|tTT0Z@IO^z&3E*UK(IW-
z4ac9X(_xImY&~k8dmHQAPUKK|f~%-pH+rpV8XkAs&PtCYU*dOWUPx+Ohw8I~49g@4
zd<2OL36n^VN3lIdqmM82)uN4aA2!pBp$NHlC{dY5lIlV9ea+a3gPZ7g_R;1Tf!w~T
zXRXo61ruvDfqASykGBxg@?i+k&P#BI+`kQ`lV5jI`ZP0YMl^~0CrHNq-5$R%n@4@n
zL?3S5*o!whO#i~TCFMtH{c%y?w`$}k1bHG(5!yD{XbAl#-Wg+D*wWf&P(dHo@EM~r
z#%--xvm$`S9?1nMgy+}SNN|E2>ky`N714HhvC3O06wg3SKI(7T31RKEp2Sgj5+NV-
zoCR+pSTQ{4!Hbn1D$N+FvIeCT(^ebH3(MrEcnUSFynQ-GPbeOjR%_i0ou(*Nzk1XA
zS}&qIiYVCo2_#OY{}G2$L?)!TMwpJUEE(33?*Kc3
z7z>V$vNvQQm>>P*dpQy6iLPZPMp{Sw)WhKD;wMVkP$>Fx;pZK%m)-jpw#m2!F*r9v
z1rKS&goC*33qj&bwx7{?h3e&#sZyse<^B0xA%nei<0T5?SF4bML;B$`d7ow1A>$1L
z%{Hu?z#hvoOIPOC$(W``bPiLRYw%sX7zoJRQqMdD
zkNr^VhBW+qt#{U$JcGc#SFer=lB0RX^^K_Fe9_(73$|gOEG$}e`8)k_>!ZcV4%UNK
z$oEGxd%;H`WZh8LzBtBf|PPaFdp
zI8DK*k3D=b4;Jn57YbM@k|A#HB*;b#&&T(~$DU(FW^u*Zma;Mhy?Fh9I{V6~s-mvl
zLwBd7G)N;YA)O-K4bqLIH0O}gN=S=zi%7SWq|%+zNJ~iEb$s9N{C1Vg3m_YxzaUM;C31o#f=by}O8>GV%6onGlKWW)I3-En`{#BcSD7B0u9J(&1)r
zwwZM&$MBH_pV7IWVgb^OVNbm1zKGnOE?#)|B|2K6qMEZwf?(v45p3ghhnzfSM!Lh{
zqNH+uV&vdUUd0`9JUKhGuO4EC(*lm+q3$%)#Ur8q#x;9Uj7yj%h}(Nutd%XAUe?~Q
zC)zIZ9a>rFqvqDrbS)2|ty&u6$9~hNHG^_SH;mp;^*gQ!ddK~>a8=UsPOGos=S6dW=rtBfjx|&zr!bpOf-{^$I#a2`PiQ~fX7!T0S
z2@Of(U=#==pQ0t{nO6o#nfx64y<{%b-Q#}+(g}Hkc8-@K)v0AQvqqNY?gQNhb6l@D
z0_v7Y^~=>db#+km{zeJ%TJlc*Cz#B#_d^pg!?{D?qve8K_@W4>`7j$jfeEtUMF=?N
zE1PXz8kB-V!5zd@_2Ohu1Kmp1@a`QF)|e5zfmf{4KXERZR_L>1y18X?uAA&1=5dOc
zZ!gy0*io(yePyI1tYrwKw5*??6doqlQ+USl>lN^fdzQpoqZL0+NHx&Yg4OQWy1Hf$
z`7pT<+1xDpE;ZE>j659Ya_I+)`?6%pYNiuDS}F<5?M&zozq#=j15I~!&d$BG4_EzzV&B{!
zwK!jGD=`4~yHkXoEkH+}czPrZSU?fT%YB3V8zI|EAl7`c7zinh{sgi=JLlsz@Y?=J
zxSn1z86Q*=&09eN=!TF3v(yJXLM4JmCmrB|G?WI*C`#gnf|bVJ@$k$y$w7+dstF#m
zWlvH>)=_?<%~p!Oa$j9T!yVal{y2+s1pc=RUlHr1q-BFrdc}(gvuraCLM!`OOAZ{P
zw?UB@3c%CSUvN)1A*HgDh(a1cs}*L%k>kA{z&0Y}ISl`HgaNASc*6bx@>`jgoPm*H^0UJ
zY!mc=LhYA($7o+1B_NzO&4ujMjY)(XbM=3IHDunfps-{EdIATAhmj#*WK-Af>vj0V
zsLoCZ|A$PKfpZ=Xwdsr1T%F3sSxdrrJQkROOeJZ*8KggTWzauwqp$H%hqv2F7Z3_>#o77hk2&^)sAU>7RM;$FljbWvGWMbyz@75EMh`
zlLxPC+C==uIgGY0zinNsebi;JTS6tDu8KTUCISZ${A_HgBN7jOp!8o3CYwK?f*YDP
z-)J)jI~4Zt8i8xi*{nu_df*Iw(~mz3OoIlaHsQi}*=wKpGfC?R3H_DSk+tOgbdoV~
zBLMsbgTEL7>JJ2{VgYh@IzQM?V3Q-`-?v83A|6peE1NMvXbiHjM+<69R&1}YVdGq5
zf8J0QWbl=C+^l1WNf{X$j!#ZP!R*NH?JLlzbR27Ti^!FRb?WYK;JnmKf+unH*#FHN
zg1wQ_**aT1&(xgD@;e}1=3cGE}4_SJG
zchO4f%*=EFe{tbL7SKo>KNMG^lM_;TifnDMHcnO@YT;FDma5HUiIEDkH8=1@^*;y{
zp4Sci{D+9ArDAsFoDFz1EPT=v8pK8+Z^z|4_pUwbbsZ`1{Z9gozZxTSZcF`ET#2xj
zSs%uAim7oCLUnWmu|iMhu9n21_B*!HaWZ1*%mzfwrQ3ZS(O(nHadEd*SzrcU?gkqh
zn;Vz|WN$B}to+^Uh=H9Qi)jDDrj=OCq$2p|u>-Jk_LSJerAl&P=QPJBCg
zu=n=%j`zx|EvL$K3QkLy3tCpIrJKxBLmx9t+jAQhh`#Z<`}HZY|IqgzJ|78(
zJKgF`OVuJ1Z{MRE=|E(rM@T9eo-+FKeoW&;^?c~azue({9S{JS#v%hL_^|qB%$Q>y
z*~QNUNexa=`e8|>My?YXR5Ok$HB7;R~Q~veD03Qyq`ak
zj?Eje#c!xD8^+D3wTB0};@V3E;I=p4s-Wwj^?m*oM`7n6?Xzp~npPBXCTfbtPZ7O)
znwT!YnU~+Q^-ZTWvduc~6=d(S<3W6WVF7Mso#sCOYF3E?1I?uY2O%
z$N&N=Rk4;kfD6Hm#R_qp3>-zFnGR=9)t!7}n@*wnqCgo-QI?RAVjV<4k4mMK6fu;c
z{@<{PwjnpvNO~(572iauYNoTcY(F@t{hc&TqQD;iwI!9?fVg+QX47_idcJsjmkt{5
z*$Hyn2yw00RnhReUmvh$Es5Lt?K^+Dy>JC(3z_3)c=h5;MYEca!pY>AdzLsDOU-+F
zRozhpXp4KdF9plnVuB(}DGetH-To?Q5a~tWJ}B=PZLjn)*3Ly)=K@TK
z02S#$ZP}roKH%GVPOs&Oh-A)}FZ`gN7fet3LjeeTkFPco%r0+0%OYL07%(5v(b0`(
zqt8z6{~m3yn_Yj86C+k+vgE;jRyYD>38&scoA8Ku2@%RcF>VhH6?Q`SbYhVB%~qN)
ziT(?>IYP}-{;l0DYvV?z_U>(-46cpOg^ygO4?W|I=@mW)A!vptCsDkMLb-uz=ycfb
z*@{x9cOkSJxau&Wj!oYP?&DyD0`IJOQH)hf6UIaxfy5Kpjs|6kdn+}&WF|k5Z59TK
zMxaJiV+I1DU9FmI2^1xDd~CU19^%SS4yT(mGg*8FmH-it?zDoyJR*fS64s*<>4Y}C
zhmr?$TET#~uRzKi)XKiBz6;5I@A1?H?tLUw2cY8ZhiWr+RbowVcw$Y;QVBKn=b?V
zZBBz2p9(Iw>(Rq)>&W;qEo-SQ!{1ui22PM74o1VX%$!Vf2cB1R280pV-F<
z%7l%D_~qNnpC_hJ7sKs%Oyt{y)>?WU&Ue|+j*VbiIB@xtc2Fl=|H4}*fo380cItbB
zd`a22)oai85q}2y{E<5?Jgl~Kz=P2cQ-1;cMF9qph3lV?fw}a63WbvH^
zBgBhjY_t-71sFd4p+9sR_`7U9VnUTBh
z#?9Xpri6?XJ)3L4nzkptQo#}H^XwVnMS##p^`u0oU_)8{GO@j8zIdj(98!vbQ#2$^
z*PIkaBDGv7EMXp_sW2S-xXX&K%lk9tG&tC~P0pRCDTy|+?F|w97H=JwRjXdmki;Fg
zct1Xm=eAt67J%o|K^hDQpe0DEGWv_3m&bs5@_yQ%XCBemC_nsIqejDjOvf|yc~Bjd
z$fvcT9nBo|=0x1-()d(%Mut~aj?*UCmy}Z24$x%6mJ{A_D
zble@f<^u}Verg}pJx4X6c=vGoj&Ee2oy3v8c8mZkSsKph!uAOq9r#=NsRn*X(EcMj3c|dTBnodpzW^C}5lOgC8W|>F9i4PX0NOpgDc~^0>aG-GyV=
zJI<0lQ5eWQ^BWmy%=uxy&o0I<1XUX+gwq0#ywo@oS-&z~j&PYizIXgV*k~J2boz=|
zqqv1+NwoL;HQwe4pwK5=&42Q~>!tS9JGP_<*oiniuN+l~x+3JLS!rx&WK=Ced0s4e
zhjD#<-MtOi6>#Ca$ocPw3KAql*L1;X&{xtt-t}m-0rnDrw0nM#WKOXjD
znroALDwDfs?{rC=H4OcvnLNmQu!W;IOld-R|cxkyoD^3|w7kHrLLo
zci1uvv-**MCA+PdoHL|*o@VDYUTuie^PzrXx#7TJBvqHnp1nVMRLjk;1v2nWb5oW>
z2CP!@ImUz_((AbZ6nN&{(D{~fK{gQ4`;)6oE7x&2j-D+`MgNcm$Tqil`fiz4Oi8CT
z5CU~%)zY#ZIhY$kA29Vj`w@q%{x8oSCS)gyGKx&sipXwr!h`RU7d}
zOM8N_Liq_2Ve-f^0nJ+C=o?=;ePuq5bdsafq7QW==td;8{7r@mo9)rE>YS<@APGb@
zAdOhPO`buyD89r)D}sEM)MKs+f-+zcBG&82x3;e9<ppXoFPEDZA!A~`xmoBty9ySshm@6qkO
z%=YwpYp2OUDwEw#KEG((Zct5U*Vm`CMH_DcEFS8X4BEA|)ln{bts&A~8E_n{&-PF8
z`rYk5^Mf=OqK--N>Yw(a0Va=4ISvJo1|&Rp7YbM*q1N&32;z2fX-Ag&53Yo?=IKgB
z55mIW6aDW)S2&C^O^NgblPY{y-&f~E@Y%O@c~=MXKr-BzJ!E}RjmLQ#Rwy#Mw;=iA
z6UG+hDeeg0;9XtN(Mync#96jJ^4DT8bUrNb9@w=uq?>ytz-m8QFPDK0PFn_AejUB;
zCGp#549Uv*rpaAn{G4MEvXtrE%ho~emls_g=RCkF2Hr3}(bBZguOn@4eIIoAMsSBl
zR!%`6{)HYmyDJ>GQ
zJBAMz-+zr;TT5qVVu9+L;-n|{0JA4j|7UVBBdm%1a8NZZ7z%9M-i1bkckFcMXf8|W^!ml0
zJ7m3o0Z&4o`l-U5Cyp>h37;ZWV1l>J)9`twGPw#?>?yoVzAz_q>)R{Jg33?I(}_ybwxrr;5j`EWRpI*
zXCyLOOFKp7Jni@fP*_vbTUz1vtSshH`i%0eT%@I_K_XlttOSOSNKBAgsfWgLVU=Z=
zU$v$rMud7D1ilP?&L0^G7iEws`K>bG)K|-a%AFN?JuU@;b1c{+IZUSWYZRUe1FT-e
zhbeb}q)5A=gu@|)42
zU7aUL!*7^fZOw6!^L6-gkOt}Qxv?!~_cSTRKv95&fN^znR;x^cYWpwe_rMUYX&I@}
zC!1S!Q#h$DqBmLFtPJpkBh~2Wbc3wc-(IX9fn`QQyHp$LTr+e4i{MuYL<0C62-Q%h
zwfAtdgo0J=n*+P^KZ)f+Ch~QKas!m)ACt=xE%jGNER?0gxJZBcHOl<<*N>$B`e7nq
z{B=E^fB^7sEb_L#9N!^8rn>pTVVpN)q?D=XLI~u<
z@(HH>D01wOsBz8D*N^0lo(W&wm*99%YqtJE2DmT=Ln0AZp8*rRr>oA>MxgdI|5Sq8
z|L3^+PAiP_{UDoX`xGu6QSYo%%{x$pQ)e?i?4c&xtaXRWLSR>!-w&U-f0Zd{VJr66
zG9rnmQ>W?rJ6KoNZU%O<*zq1N`EaCO1RSY%E_&0(sd4r3y-B!uK^2xB>_+k`>|`|1{DHhWz3amMPA06%Ihts9(OA8I*ie2Qeh(_
z*n>&m^p6pL&+824;7cS1Yc9$sPaGw*G51eA=+e{~-vi(W7C`2y7jl0fan&X-Cz<}f
zQS&bC1gE1-R+Ei?C{+dkA1;1!bnx3Ui@{H2Rb+LpzTO5|-ZK%^v=O~k%O#1KfnGk4
zMZXSvzfA4%w5^;GzgCSUOP;~FlGBZ%tt+{9s+e_2@%uaNpdvOFywAsOk_oAa*O9dg
zzyZMZ+?4{bIrRQl1W9mZ3YyvrDX$q3&92E79b^g5t)ww_%}9O
z3a%JJC|=`z>{?`G3=}eoGq0MbD^4m)I>1Q|JzpA}WfSl(_U3rGgenyyA5mYT!<6J#P`C
zj1bt*Gi|l*OYIPj=vuw53*fsNbZ}EEc2i5L33-WXmhrNh4&fgJf*L>|?En0Zca&}`
zB{)RN1}8QO8@9x?ipB@@dAjXh{mSLJPx-$ZNE_$hN-&|wC+}RSe>)BRsou$$5P#xm
z3u72tzv}m7)@ausOoGeWHsx&q--U)2Q_g
z(B)Kzza+p^so)h;8zkT|0oVyO7aPcx(!4n;*{7ehP!wQ%k7in8*Djf`joq;%LQ6u*<&{
zF*U|RIFk#jU(Q41%bdvgFEZ&m#_(p$VMOBRC{ZVfta$rUb@e*vsT9L6YTi&u%qYqc
za*X%CG5W~JFqa5<|N1vSO%8US%jFi!$>5?4!oYtNqRWKg_PNtHHJha8?#
zbqFdj3njpd{9ce>$HMM&9&#neOV;)gnHN`!@^ney8?bKjFzs#7r3_bdR#5eHPR;ES
zaflch1vJP0O;iMhzCWmnGEK@SiKr8r%uOP1BVoMpbzDTRfZ>ziQ9{P>{JVlR?_hE#9+pR{y}w8cw^I&<-J
zJ#}=GWo5&g++MhuUPOUhdpWfSO`YGjQK6$#
zqs$-0zXlb5uCA8byj!PBh%YL2_vp#O6&k)b}t9UzDL*8w4mj6+{@oK71O-c
zWP`t?gOc%idiyjARQc?w`Yk&5s0gS|x_+vUZ@zv@U4fVM{TmN*X&#=g6zwM{ojyuJ
zq?}I+iOHdE`duxa`(&_w1j7J`sV0Y&>L#C|JdW;_ml?#(jq%;#T
zZ_EoXt(eZco|H^}-oHBL{kuq;;D`ax4M=f6tjd(=-Fj1I%`i4L`n8gDr!{|=
zr)XcR>BlK48Zs7Sm6%!K0V_*7-Emq1K8eVsz$v~=q|_h@MT#2J;L;Zyq*CR2o%jbh
z$*oV7ZXPq8OFbFb)M{`Vb*HMZVQHS{T<-iH^IMHw?Dr2!Wqv~uTJ_!?*s5|>-mjhK
z;IJCuA0dM4=<^+z5Q%UC8bHTL=sP^BnmpV+qCE3Y(#G_AjV)O~ER~I?)t$^Lb}I%$ar^SXiA1{gqA16cfV^nBJXn$UVk;X?kpRL
zY0nAeWqB1YGqs!-lUs@zcRYqAN(V(O3E^FU2b!zA8Lih!4Bt_{G?>&CC4)J4++w>+
z*USmA;bQd3$<2f5VlELYQ_P$6I7d!(>D1=^1`b+|o8x#W3d>Ai^Fx$Mo9{J^^4wd<
zU;CUs)izlUcv9|neo!e(FRlMcSN~6J)N~hq#Rr{)_la|1z!DG)AQ11nb-%p|Bft7%Tf?3ANgWHf<$6gruw#NaYmSNoF9Bd`g1C&
z=u=c$Tjm4O7QoKhUBo;xalqmSp^~M?6|%NC^)zqFx|cufC6|uxJC{+kEU2mga1@{&
zNUVJh7i?l|liJO?1;*hPjh74Kr$(>&zw!CAJX`Tw96t7bNRmn(#NC%oo&Vw?q4Bru
z@Zsh$$-5_PC>uhd7W(I22?NDIx;t#$CcWqh@TrQVWWV4hEeDh(y5XRdK#k#{i)Aw+
z>-1qndE1EX?#SFcVxJQYkQw9O&hIFiGa~h;ee@_hGM%qBPEzMLF$Z;w
z?jt3qckD_z$8q$tmz%Y3t2%z;?x#z77Ai9%Yb7l+J$HB^v&H@&oDZvw8$MUT4_o=c
zS59qe1;%j=IX~Twgyd8?1gf%Z7iCnO8Q7iP*d|xlpy~g)d8rYnCP77RQomTF{!??o
zxZ9mdHPAbM)mE>CL_GT|Z?M9-lrmlJ6F$TKhN64}IX*o2+1!VjcO~CMU68sW*4AdV
z5n`h_b=383
zq}LaoXH!19%w!3oLctI
zmT#g92-#e^E{ci^7mK0zHR=T(WTl<(HUIFzWd=OxC&9D1fQE+&P09?8;vUXnb+7sp
zm5@K7wMG+A1;2eQKcXoCQIxh?hB^wc9i2a>U}dfnJX<0F?kML};ad26R#=grLNX!w
zDt4jwYKuNj-#c?wGt*LbO>yP$;a#|q{psN%DnFEvexzmC+8|jIjVk^nyg*3yfI9*;O2IeyqU}##%g{f&8vuMEY!r3&|
zullc5adYSOYnsgh<#BFV$_M{Qc40EX#9>liH!(N1lV%
zNwgITZae4O3|bHYT+F=NgbiWrd1EV71>F>@Ma+eeBaY;w2W3_rK0}Ac)|kB5vG+Mr
z?Qg>xV*Jf6XJ3qj_e@IYOv-fM)h$XFp>0^e9&hihZu$2|gnc>@Tv3JU(}zj3!KCS6
z#%#UfD+7_EJa-qwY#|iDbWHRdT0-*%EIp1@oEX9iYnMmj`9F7ml~BaUw%F`f_LpL|
zjsRBS{Pq0!uF0Q$hlcnjC|6Pp0nKja%R;=5)BN|{JRHVqHnMIT5krGlqv$5K-gd1s
zd(rsOSGSrlP1Gi7Oqk~SUG9U>`N@ElOjk1a8nRFRTnFY;l|ZBrCgT7i2T8a1h%eLc
zYNOWS=UYZX1j9Cu$%7x`{n{3piF3B&Tc?A?dro!Tzo@cb7OE>pVg>ozmT5aUBubFR
zZ}g=fTC|3akMqi-$7hYMjhU#8HB#C#J5+>3;(0Ktv%X?Lq``RTxJ(Btpv|1~bH)>x
z7-SUnnJo|hKJ-NSNjb}^hw|PdJIZIzf9??T$I1>+^}ACI-+3QZNw%-rzASbgp25wQ
ziXKQ`3n;5$Jt0yT6EFypDap7uH?AyN`z_YHXX2gJ~lW$XT6%6bAgrm
z{Kw1_RuOz)QIOpS_WtC})cvk9G>4;9^?>M{^_?Ed^BMG@i2GcXC0w|l>M0)L0S?Kj
zdIeNv!C22lWXVEhL5DwfJ5~--(&!nOYLRG5)IG0=foEj(C-L3)Z|DgWRUc^xD#LXp
zg95)MMUQVVNhV}5d59Kq6Wr`Q-tq5BkY+1<^p^mB_d4+qOLA{nuAe&@jKx+5IYBZ|
z`L9+Sb-UQg^U12{83cmmo{ga%nIuc#3_SDGrg%jE@nU?BxWG2DRZ9Iavvdlj0$2+4
zbC9rTEVoGtKw`@5<^6qLqs%~wn~2?R^dKNAB3_C?hmi0}B>e^z7Eo5@jpg5h$}I4V
zSTTBhv+sYxesb^O?xX-O=f90gP{Pt#7U7?9SxS7YbSY!^vZ~VPO&|Ju{Ea5`SKWM}
z=C*>2|9$YW0z_aj$Xa$GiQw4+^UomJg70rZM)RA{^U?Qe6Nj)vNm-H4QW?of~h0lhibMYAO3iH?Yr%Hz6|NRUJ
zd?u5hXfYLGoom1Z(*)gr^x$U(unYK5H_)M?>fj&f8RWt5dGjuq0XY;jQRyQj2K*nL
zbuw!R{8ID`M$A0;mzHLZMr8fJT=K~tE02PL;<&y#5N9ZjyMJ%0{Nx|lY32&YYhq#|
zDJLf$kPSOdHWer&U~U_MEXxL^pc8(4ad9z&q$KU-k`L_@cJ|_PUIO?NAQQyTGe&Fz
zF3Qbd3x|Ebms)B8Ti@-WYjDq4@ckLal4+%`6{w*W#HYP`_q|9*hPtf4E#OI5!xBqoI({WFNgoNY^=KkUn6C*=F)ll;OB*7gJ
zcrx(uoi;bDG`cgu;fbT8YHNmRLom?Ju$pS*(gh|u3-1Y9SXk({2Q(e~nVQm^o}B^8
zQHw>-F>$Rwv;S78=oRYTc)koM?GlHvKxSM0p6aLef;rm#ZFlRvv7i9F^Ata86!@rP*aLNsdM8*)%yy*)O0ffoCw-hRt(80DS`337yi)5$b#Bhcj-&_1?PtR
zPoHG3T0eb41}n)D5F+unoyqSLGv_}7k%~NdD9_W$n
z{&b};kO2ZBqVSPSAsPB499j(d-_u&OTZQ#BfO*m@0Y|2%rak
z+Epo24st#|mnDlO`v6{w1%%KIOrl=&UT{vK2v=m3_VD1_+uvvLdIo=Z;)$vXq~2zP
zg6f$!HfgM!@Ympnps3z;r4dv)Ik~lRv%4o>U6x`1*}PI*=!P&qKmTK4VPDM#z-}*%
z{%GtA$J*g+EfSEx+>>z`yfuIlQLwdT2?C;S-XBlBF&)x8uk}(~Ab;QA-`@=ov_b%E
zCymPljv;1w7Vz&I?0-mwd^hJ=1#G4LPshZ<0hcd2MI5Tx&Cj$Vf%I#DM>#p^r$vJB
zQ{a$t=!fLqpBG=PlXVC?o29@7L)fJVO$xrre3|M=4FB%>|ERRX1}#2E^8Wre
zCBXo8kUf6L{^Us_P)#r#TlGwFaD?Ke*nJ%tCsT^wM980mxp2UW{fLGj!y)u$u?P|~Y;Rdh4(vwmt_8ki;-EE9
zpl^U=Hqg}i5~v~!i%goM{Tjn3vPTNRHv~+q$NOfR=Dpf
zkRl~>7KAKKxz-MWlmk}Lr{dUrJ-9StQ7yllu>ea4D=TYfLeMz_HZE>_b5(UU9-tcM
zN#!<+|M-#q_P0+*X6TRP=-Fm3b~vc5ami&(UrA}Oeg_7CGBp1E-I4_A?j5(kxbK66H${t1n*z79ebxcAobo~-=z7TP
zV@U}*c8{u^>KR`M{aI}P#>q9f_n)Jc1T-37h`qf%+?pK&?t<0MP^7EN;D<|%hG4)+
zKtM~Iu+-wSahCfamJ@vM*LpE+^z>M9z<0XZ3=fz#V2TkTKsnq`*5v>It#`W_m=VC>
zyrv*|LjYbz(){nAL*J8LvXh0Cd+*7>dvI$Z;dr>M1j78Z1nAW{Y)Au`-ZB-hpxRGOeGi(E%CPQ%T!H`0g-0M}29i6U{?
zG$zHIVlh$l;_A2ukC%rB5(m=sLP^^-;A8@dt#BvB9BT0-cOm!TcDojET_4QVp#dO!
z8Um!SuyE)1?;Pz1W6V6r?VetTG(fokbVmM^L#<^mCS13oqN4Dt073nmeBJU|=LJDH
zqJ3u%i~_e|zTfY-$HKtCcq;7gA+B6V2)<&(7;ow;3x0}|aN1i4O@e}OyT>o(s9wv-
z>FFC}b#N?{j~xmD6fpo6L#U~#qoSiTmeHOwJHyTEL2du4n{W-_@BwV$Z3R{CqS;q>
zN5Khz_9d^aZOPVPbx*P#TzJ-BGsx&CMg!>SX@R`M)QXWhA1ng?9yYkIb|Ngg_fvP*
z69wW{o3u=GTd@e)l;tcKR+454x%Po|XGc~)YP+O4Jv~iKPZwT0QHP-9H8hZ2t^`Zc
z)6!@@#>y!P?Yf{=jLi?HV>=HePMMT_qURj65(}>5kw@Xx*
zbJmR^$x*SZR~t;`|)4ns%$WnlxyAwYV)2Ib-?;2QX@P
z(+(xUbswxY<;u-;1JnwLnbmTxBIAdzwaJtXwqrDqPH+mrz+=8|8wUqV0*E1oTJUw+zZW=OSxhta#{h7unmMQLlcFN#T!_Pu
zk8%=6)_@`%Ua~P@28cfm4Gn<0?h?OTeERzW4VUWJ0PzZ(T!2zUO7aZiJ!9gN4|aW_
z!Ik!`bz=8?Zf}$a8#q<_)oV$a)(s0MfQ)+`?ozOOJ%z&+djxf3=@UORU
zwpy;^g@4=Fwv6Pb@@j_A7mS2!z|MRFydd$wq*NF+;68be3A%b%IXQcQ;sT-yMq@Lu
zLx6|g;$m+~*#DeW;%XJ?-&QasqSaJXRPg#t;uzFBkSzOcQv((!dSPL5*Y;~>W3Dt>
z1x1%W(8Ce~ZVgu`39rzI*3<9oz{+$1loe)3PLJoHwnRh6F^qdvuj7W~=I>uuyMlpM
zygZ5PO(H-_bUXHNn{aH+M-lf_>jZYt>Fa=PslJ3scUM6
zrKhL!hO8KGK89*!or=Gf9=(t<>k6rHU5|cXuW_ZR+y#^AX^S4lrtHQ#j@wfa6w9
zO8M0Od0!f5PyQPrVV?0tXTh)Ev{8r1{rgbKlMiDD2tqe_U{sy$Shr=ZIUpi$1g8F^
zmpkZ3vBl>9vC+(bEdZcFm;LuSwRLqrmX~9JF0$D#_C#=^q1+siqmBm&_=o%g0$nZ*
z49v`^4J$#<+OJ1kF@F*Md$7;&AY`w8##9D~P)@+965u4?02FJ!V2OVG_z?r)pSEUN~Lb>hYu93$K6jv5W!MFRSQHiWS4=-2abHM6`Vl^
zuHi&1YR@@Ht-x`r-~5^lP8zlLf%=*Eb6}VO`C9wd9sKx&)95S*UYY>r`121|zW3ML
zC-aWg`OVD~gwfWRwAAnzz-B&cIJ8-G2O*?4maGTBM%~=-IXOA)92~m0Mlu7d;L*VM
z@86-LBUVde$xJE`h>3~G47H59I=&bUo<5i*9tn4%6CnaDNF}w}Iy!WGe1za6i;Ihc
zguvTN908fws&~tepFcg8{vw0`+Axi6@RJAL&p@OK?+XhsfblJOmdIGCx{esZ@-LJavf&{O_;?KGoI|`~!lYNc8(0&clFZM~8Qn
zk#ZXH=T}R9k*RKKy0)P~g>NC^coudZSWrR3+ty1rUEV%+)Zx}{Hv~|6)v>wE7RybmLu*9dWPJ9m&3rt
zHM$){NJt3fLxZ=sz^xJ^3yTZ~>Bjl)gzv?ao`$jU+lmT~U~wn7m|qQMaeQjB=s_iq
z>*E~@1Zox)8;jK0;Nf@uD-EX01s0&>C3_l6ZU7-r-uv{+vxB;^_0eZX#1ayK@@am4
z{_%Td0I%zws}l#{ZZZ;^+S|CaM5x
i1m7LHl>e_w9%w_P{Ekg}yj>ySmy(>CY?ZWm*#81~WqQN_


From ceb4f332a47a80a5012e6e01f33392aff769d444 Mon Sep 17 00:00:00 2001
From: Sjors Provoost 
Date: Fri, 12 Jul 2024 09:11:17 +0200
Subject: [PATCH 159/288] =?UTF-8?q?bip353:=20improve=20=E2=82=BF-prefix=20?=
 =?UTF-8?q?instructions?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bip-0353.mediawiki | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bip-0353.mediawiki b/bip-0353.mediawiki
index 16466724..0a7981dc 100644
--- a/bip-0353.mediawiki
+++ b/bip-0353.mediawiki
@@ -68,9 +68,11 @@ Payment instructions which do contain on-chain addresses which will be re-used S
 
 === Display ===
 
-Wallets SHOULD parse recipient information in the form `user`@`domain` or ₿`user`@`domain` and resolve such entry into recipient information using the above record. Similarly, wallets accepting payment information from external devices (e.g. hardware wallets) SHOULD accept RFC 9102-formatted proofs (as a series of unsorted `AuthenticationChain` records) and, if they verify, SHOULD display the recipient in the form ₿`user`@`domain`. For the avoidance of doubt, the ₿ is *not* included in the DNS label which is resolved.
+When displaying a verified human-readable address, wallets SHOULD prefix it with ₿, i.e. ₿`user`@`domain`. They SHOULD parse recipient information in both `user`@`domain` and ₿`user`@`domain` forms and resolve such entry into recipient information using the above record. For the avoidance of doubt, the ₿ is *not* included in the DNS label which is resolved.
 
-Wallets providing users the ability to "copy" their address information generally SHOULD copy the underlying URI directly in order to avoid the DNS indirection. However, wallets providing users the ability to copy their human-readable address information MUST include the ₿ prefix (i.e. copy it in the form ₿`user`@`domain`).
+Wallets providing the ability for users to "copy" their address information SHOULD copy the underlying URI directly, rather than the human-readable address. This avoids an additional DNS lookup by the application in which it is pasted. Wallets that nevertheless provide users the ability to copy their human-readable address, MUST include the ₿ prefix (i.e. copy it in the form ₿`user`@`domain`).
+
+Wallets accepting payment information from external devices (e.g. hardware wallets) SHOULD accept RFC 9102-formatted proofs (as a series of unsorted `AuthenticationChain` records) and, if verification succeeds, SHOULD display the recipient in the form ₿`user`@`domain`.
 
 == Rationale ==
 

From 8ba081f4722a425cf4167ab6698285aa52fc35ef Mon Sep 17 00:00:00 2001
From: Matthew Zipkin 
Date: Mon, 15 Jul 2024 18:46:02 -0400
Subject: [PATCH 160/288] bip353: concatenate strings in TXT

---
 bip-0353.mediawiki | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/bip-0353.mediawiki b/bip-0353.mediawiki
index 0a7981dc..9deba50b 100644
--- a/bip-0353.mediawiki
+++ b/bip-0353.mediawiki
@@ -50,6 +50,8 @@ Note that because resolvers are not required to support resolving non-ASCII iden
 
 Clients resolving Bitcoin payment instructions MUST ignore any TXT records at the same label which do not begin with (ignoring case) "bitcoin:". Resolvers encountering multiple "bitcoin:"-matching TXT records at the same label MUST treat the records as invalid and refuse to use any payment instructions therein.
 
+Clients resolving Bitcoin payment instructions MUST concatenate all strings in the TXT record before processing the complete URI.TXT records are defined as "one or more character-strings" in [[https://www.rfc-editor.org/rfc/rfc1035#section-3.3.14|RFC 1035]], and a "character-string" is a single byte (with a max value of 255) followed by that many characters.
+
 Clients resolving Bitcoin payment instructions MUST fully validate DNSSEC signatures leading to the DNS root (including any relevant CNAME or DNAME records) and MUST NOT accept DNSSEC signatures which use SHA-1 or RSA with keys shorter than 1024 bits. Resolvers MAY accept SHA-1 DS records.
 
 Clients resolving Bitcoin payment instructions MUST NOT trust a remote resolver to validate DNSSEC records on their behalf.
@@ -114,15 +116,28 @@ This work is intended to extend and subsume the existing "Lightning Address" sch
 
 == Examples ==
 
-`matt@mattcorallo.com` resolves to
-`matt.user._bitcoin-payment.mattcorallo.com. 3600 IN TXT	"bitcoin:?lno=lno1qsgqmqvgm96frzdg8m0gc6nzeqffvzsqzrxqy32afmr3jn9ggkwg3egfwch2hy0l6jut6vfd8vpsc3h89l6u3dm4q2d6nuamav3w27xvdmv3lpgklhg7l5teypqz9l53hj7zvuaenh34xqsz2sa967yzqkylfu9xtcd5ymcmfp32h083e805y7jfd236w9afhavqqvl8uyma7x77yun4ehe9pnhu2gekjguexmxpqjcr2j822xr7q34p078gzslf9wpwz5y57alxu99s0z2ql0kfqvwhzycqq45ehh58xnfpuek80hw6spvwrvttjrrq9pphh0dpydh06qqspp5uq4gpyt6n9mwexde44qv7lstzzq60nr40ff38u27un6y53aypmx0p4qruk2tf9mjwqlhxak4znvna5y"`
-Note that `lno` indicates a value containing a lightning BOLT12 offer.
+matt@mattcorallo.com resolves to
+
+
matt.user._bitcoin-payment.mattcorallo.com. 1800 IN TXT  "bitcoin:?lno=lno1qsgr30k45jhvkfqxjqheaetac
+u4guyxvqttftvqu0f5sneckep3lkwdut7mmhhpcyjmlmnjn4hze8ed7pq88xqkxt2dcw5mlxhz644fms82f7k4ymfxs2ehhpjtxw
+xly0w5k8xdtlvpqyd8xzdq4tq8lgupnueshgydr330lc3j5kdcqh54gt7jdg9n68j4eqqeu7ts8uh0qxamee6ndj37tc6mzgejth
+vvjqj96p8dz2h" "rsh5z5n27qfk6svjz5pmkh0smq26k0j2j4q36xgq3r5qzet9kuhq4lydpen5mskxgjdvs5faqgv8pmj7cfd7
+ny84djksqpqk9ky6juc7fpezecxvg7sjx05dckyypnv9tmvfp6tkpehmtaqmvuupetxuzqf4t0azddjdcpasgw6hxuz9g"
+

+
+* Note that `lno` indicates a value containing a lightning BOLT12 offer.
+* Note that the complete URI is broken into two strings with maximum 255 characters each
 
 == Reference Implementations ==
 * A DNSSEC proof generation and validation implementation can be found at https://git.bitcoin.ninja/index.cgi?p=dnssec-prover;a=summary
 * A lightning-specific name to payment instruction resolver can be found at https://git.bitcoin.ninja/index.cgi?p=lightning-resolver;a=summary
 * Reference implementations for parsing the URI contents can be found in [[bip-0021.mediawiki|BIP 21]].
 
+
+== Footnotes ==
+
+
+
 == Acknowledgements ==
 
 Thanks to Rusty Russell for the concrete address rotation suggestion.

From 0b3c79c257067dabadb34829fa616534a54f23af Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Wed, 17 Jul 2024 10:18:53 +0200
Subject: [PATCH 161/288] Apply suggestions from code review

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0388.mediawiki | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 225ce7ad..fd28f044 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -14,7 +14,9 @@
 
 == Abstract ==
 
-Wallet policies build on top of output script descriptors to represent the types of descriptors that are typically used to represent "accounts" in a software wallet, or a hardware signing device, in a compact, reviewable way. A wallet policy always represents descriptors which produce all the receive and change addresses that are logically part of the same account.
+Software wallets and hardware signing devices sequester wallet uses into logically separate "accounts".
+Wallet policies build on top of output script descriptors to represent such accounts in a compact, reviewable way.
+An account encompasses a logical group of receive and change addresses, and each wallet policy represents all descriptors necessary to describe an account in its entirety.
 
 We simplify the language to suit devices with limited memory, where even keeping the entire descriptor in memory could be a major hurdle, by reducing the generality of descriptors to just the essential features and by separating the extended pubkeys and other key information from the descriptor.
 
@@ -65,7 +67,7 @@ Reusing keys across different UTXOs harms user privacy by allowing external part
 
 By constraining the derivation path patterns to have a uniform structure, wallet policies prevent key reuse among the same or different UTXOs of the same account.
 
-Using distinct public keys obtained from hardened derivation paths guarantees that no key reuse can happen also across accounts, and is strongly recommended. However, wallet policies do not mandate hardened derivation paths for the public keys, in order to maintain compatibility with existing deployments that do not adhere to this recommendation.
+It is strongly recommended to avoid key reuse across accounts. Distinct public keys per account can be guaranteed per hardened derivation paths. This specification does not mandate hardened derivation to maintain compatibility with existing deployments that do not adhere to this recommendation.
 
 It is out of scope for this document to guarantee that users do not reuse extended public keys among different wallet accounts. This responsibility is left to the users and their software wallet.
 

From 29312fbe912a0125ad70a95d61a3734692a25de6 Mon Sep 17 00:00:00 2001
From: Jonas Schnelli 
Date: Wed, 17 Jul 2024 21:46:35 +0200
Subject: [PATCH 162/288] BIP150: Deferred

---
 README.mediawiki   | 2 +-
 bip-0150.mediawiki | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index a5ad2277..b6eaf4b3 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -832,7 +832,7 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Peer Authentication
 | Jonas Schnelli
 | Standard
-| Draft
+| Deferred
 |- style="background-color: #ffcfcf"
 | [[bip-0151.mediawiki|151]]
 | Peer Services
diff --git a/bip-0150.mediawiki b/bip-0150.mediawiki
index 277341db..bddc2e11 100644
--- a/bip-0150.mediawiki
+++ b/bip-0150.mediawiki
@@ -5,7 +5,7 @@
   Author: Jonas Schnelli 
   Comments-Summary: Discouraged for implementation (one person)
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0150
-  Status: Draft
+  Status: Deferred
   Type: Standards Track
   Created: 2016-03-23
   License: PD

From dfacb8de6ac5f6636c3d3fd55cf817c0b73cacea Mon Sep 17 00:00:00 2001
From: Jonas Schnelli 
Date: Wed, 17 Jul 2024 22:00:11 +0200
Subject: [PATCH 163/288] 159: Mark as final

---
 README.mediawiki   | 4 ++--
 bip-0159.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index a5ad2277..1b42ca90 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -882,13 +882,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Olaoluwa Osuntokun, Alex Akselrod
 | Standard
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0159.mediawiki|159]]
 | Peer Services
 | NODE_NETWORK_LIMITED service bit
 | Jonas Schnelli
 | Standard
-| Draft
+| Final
 |- style="background-color: #ffcfcf"
 | [[bip-0171.mediawiki|171]]
 | Applications
diff --git a/bip-0159.mediawiki b/bip-0159.mediawiki
index 02266925..365aee16 100644
--- a/bip-0159.mediawiki
+++ b/bip-0159.mediawiki
@@ -5,7 +5,7 @@
   Author: Jonas Schnelli 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0159
-  Status: Draft
+  Status: Final
   Type: Standards Track
   Created: 2017-05-11
   License: BSD-2-Clause

From 1c6ac0c4cf1f39ea806b8594d6060b6d52fd1439 Mon Sep 17 00:00:00 2001
From: siv2r 
Date: Wed, 17 Jul 2024 15:32:20 +0530
Subject: [PATCH 164/288] bip327: minor fixes
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- An error test vector doesn’t specify the InvalidContributionError type
- In *DeterministicSign*, use GetXonlyPubkey instead of GetPubkey
- The key_agg_and_tweak fn doesn’t specify the return type
- In partial_sig_verify_internal, the pubkey arg should be PlainPk
- Remove unused enumerate() fn calls
- In test_sign_verify, add an additional assert statement
---
 bip-0327.mediawiki                    |  2 +-
 bip-0327/gen_vectors_helper.py        |  3 ++-
 bip-0327/reference.py                 | 25 ++++++++++++++-----------
 bip-0327/vectors/sig_agg_vectors.json |  3 ++-
 4 files changed, 19 insertions(+), 14 deletions(-)

diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki
index b659629b..77a0024e 100644
--- a/bip-0327.mediawiki
+++ b/bip-0327.mediawiki
@@ -619,7 +619,7 @@ Algorithm ''DeterministicSign(sk, aggothernonce, pk1..u, tweak1.
 * Let ''keyagg_ctx0 = KeyAgg(pk1..u)''; fail if that fails
 * For ''i = 1 .. v'':
 ** Let ''keyagg_ctxi = ApplyTweak(keyagg_ctxi-1, tweaki, is_xonly_ti)''; fail if that fails
-* Let ''aggpk = GetPubkey(keyagg_ctxv)''
+* Let ''aggpk = GetXonlyPubkey(keyagg_ctxv)''
 * Let ''ki = int(hashMuSig/deterministic/nonce(sk' || aggothernonce || aggpk || bytes(8, len(m)) || m || bytes(1, i - 1))) mod n'' for ''i = 1,2''
 * Fail if ''k1 = 0'' or ''k2 = 0''
 * Let ''R⁎,1 = k1⋅G, R⁎,2 = k2⋅G''
diff --git a/bip-0327/gen_vectors_helper.py b/bip-0327/gen_vectors_helper.py
index a70bb6f3..03c2dbb2 100644
--- a/bip-0327/gen_vectors_helper.py
+++ b/bip-0327/gen_vectors_helper.py
@@ -153,7 +153,8 @@ def sig_agg_vectors():
         "psig_indices": [7, 8],
         "error": {
             "type": "invalid_contribution",
-            "signer": 1
+            "signer": 1,
+            "contrib": "psig",
         },
         "comment": "Partial signature is invalid because it exceeds group size"
     }
diff --git a/bip-0327/reference.py b/bip-0327/reference.py
index edf6e76b..cc1af505 100644
--- a/bip-0327/reference.py
+++ b/bip-0327/reference.py
@@ -317,7 +317,7 @@ SessionContext = NamedTuple('SessionContext', [('aggnonce', bytes),
                                                ('is_xonly', List[bool]),
                                                ('msg', bytes)])
 
-def key_agg_and_tweak(pubkeys: List[PlainPk], tweaks: List[bytes], is_xonly: List[bool]):
+def key_agg_and_tweak(pubkeys: List[PlainPk], tweaks: List[bytes], is_xonly: List[bool]) -> KeyAggContext:
     if len(tweaks) != len(is_xonly):
         raise ValueError('The `tweaks` and `is_xonly` arrays must have the same length.')
     keyagg_ctx = key_agg(pubkeys)
@@ -367,7 +367,7 @@ def sign(secnonce: bytearray, sk: bytes, session_ctx: SessionContext) -> bytes:
         raise ValueError('secret key value is out of range.')
     P = point_mul(G, d_)
     assert P is not None
-    pk = cbytes(P)
+    pk = PlainPk(cbytes(P))
     if not pk == secnonce[64:97]:
         raise ValueError('Public key does not match nonce_gen argument')
     a = get_session_key_agg_coeff(session_ctx, P)
@@ -430,7 +430,7 @@ def partial_sig_verify(psig: bytes, pubnonces: List[bytes], pubkeys: List[PlainP
     session_ctx = SessionContext(aggnonce, pubkeys, tweaks, is_xonly, msg)
     return partial_sig_verify_internal(psig, pubnonces[i], pubkeys[i], session_ctx)
 
-def partial_sig_verify_internal(psig: bytes, pubnonce: bytes, pk: bytes, session_ctx: SessionContext) -> bool:
+def partial_sig_verify_internal(psig: bytes, pubnonce: bytes, pk: PlainPk, session_ctx: SessionContext) -> bool:
     (Q, gacc, _, b, R, e) = get_session_values(session_ctx)
     s = int_from_bytes(psig)
     if s >= n:
@@ -523,7 +523,7 @@ def test_key_agg_vectors() -> None:
 
         assert get_xonly_pk(key_agg(pubkeys)) == expected
 
-    for i, test_case in enumerate(error_test_cases):
+    for test_case in error_test_cases:
         exception, except_fn = get_error_details(test_case)
 
         pubkeys = [X[i] for i in test_case["key_indices"]]
@@ -572,7 +572,7 @@ def test_nonce_agg_vectors() -> None:
         expected = bytes.fromhex(test_case["expected"])
         assert nonce_agg(pubnonces) == expected
 
-    for i, test_case in enumerate(error_test_cases):
+    for test_case in error_test_cases:
         exception, except_fn = get_error_details(test_case)
         pubnonces = [pnonce[i] for i in test_case["pnonce_indices"]]
         assert_raises(exception, lambda: nonce_agg(pubnonces), except_fn)
@@ -598,7 +598,10 @@ def test_sign_verify_vectors() -> None:
 
     aggnonces = fromhex_all(test_data["aggnonces"])
     # The aggregate of the first three elements of pnonce is at index 0
-    assert(aggnonces[0] == nonce_agg([pnonce[0], pnonce[1], pnonce[2]]))
+    assert (aggnonces[0] == nonce_agg([pnonce[0], pnonce[1], pnonce[2]]))
+    # The aggregate of the first and fourth elements of pnonce is at index 1,
+    # which is the infinity point encoded as a zeroed 33-byte array
+    assert (aggnonces[1] == nonce_agg([pnonce[0], pnonce[3]]))
 
     msgs = fromhex_all(test_data["msgs"])
 
@@ -626,7 +629,7 @@ def test_sign_verify_vectors() -> None:
         assert sign(secnonce_tmp, sk, session_ctx) == expected
         assert partial_sig_verify(expected, pubnonces, pubkeys, [], [], msg, signer_index)
 
-    for i, test_case in enumerate(sign_error_test_cases):
+    for test_case in sign_error_test_cases:
         exception, except_fn = get_error_details(test_case)
 
         pubkeys = [X[i] for i in test_case["key_indices"]]
@@ -646,7 +649,7 @@ def test_sign_verify_vectors() -> None:
 
         assert not partial_sig_verify(sig, pubnonces, pubkeys, [], [], msg, signer_index)
 
-    for i, test_case in enumerate(verify_error_test_cases):
+    for test_case in verify_error_test_cases:
         exception, except_fn = get_error_details(test_case)
 
         sig = bytes.fromhex(test_case["sig"])
@@ -702,7 +705,7 @@ def test_tweak_vectors() -> None:
         assert sign(secnonce_tmp, sk, session_ctx) == expected
         assert partial_sig_verify(expected, pubnonces, pubkeys, tweaks, is_xonly, msg, signer_index)
 
-    for i, test_case in enumerate(error_test_cases):
+    for test_case in error_test_cases:
         exception, except_fn = get_error_details(test_case)
 
         pubkeys = [X[i] for i in test_case["key_indices"]]
@@ -747,7 +750,7 @@ def test_det_sign_vectors() -> None:
         session_ctx = SessionContext(aggnonce, pubkeys, tweaks, is_xonly, msg)
         assert partial_sig_verify_internal(psig, pubnonce, pubkeys[signer_index], session_ctx)
 
-    for i, test_case in enumerate(error_test_cases):
+    for test_case in error_test_cases:
         exception, except_fn = get_error_details(test_case)
 
         pubkeys = [X[i] for i in test_case["key_indices"]]
@@ -796,7 +799,7 @@ def test_sig_agg_vectors() -> None:
         aggpk = get_xonly_pk(key_agg_and_tweak(pubkeys, tweaks, is_xonly))
         assert schnorr_verify(msg, aggpk, sig)
 
-    for i, test_case in enumerate(error_test_cases):
+    for test_case in error_test_cases:
         exception, except_fn = get_error_details(test_case)
 
         pubnonces = [pnonce[i] for i in test_case["nonce_indices"]]
diff --git a/bip-0327/vectors/sig_agg_vectors.json b/bip-0327/vectors/sig_agg_vectors.json
index 04a7bc6b..519562c3 100644
--- a/bip-0327/vectors/sig_agg_vectors.json
+++ b/bip-0327/vectors/sig_agg_vectors.json
@@ -143,7 +143,8 @@
             ],
             "error": {
                 "type": "invalid_contribution",
-                "signer": 1
+                "signer": 1,
+                "contrib": "psig"
             },
             "comment": "Partial signature is invalid because it exceeds group size"
         }

From 0d79b5eeb56af44281618b12d3ee35ef0de932e0 Mon Sep 17 00:00:00 2001
From: siv2r 
Date: Thu, 18 Jul 2024 17:09:19 +0530
Subject: [PATCH 165/288] remove P = None check as cpoint never returns None

---
 bip-0327/reference.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/bip-0327/reference.py b/bip-0327/reference.py
index cc1af505..dd3bf68c 100644
--- a/bip-0327/reference.py
+++ b/bip-0327/reference.py
@@ -440,8 +440,6 @@ def partial_sig_verify_internal(psig: bytes, pubnonce: bytes, pk: PlainPk, sessi
     Re_s_ = point_add(R_s1, point_mul(R_s2, b))
     Re_s = Re_s_ if has_even_y(R) else point_negate(Re_s_)
     P = cpoint(pk)
-    if P is None:
-        return False
     a = get_session_key_agg_coeff(session_ctx, P)
     g = 1 if has_even_y(Q) else n - 1
     g_ = g * gacc % n

From bc1c18a289770928bb5f185f2d13f392401aa604 Mon Sep 17 00:00:00 2001
From: omahs <73983677+omahs@users.noreply.github.com>
Date: Sun, 21 Jul 2024 09:26:16 +0200
Subject: [PATCH 166/288] fix typo

---
 bip-0388/wallet_policies.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0388/wallet_policies.py b/bip-0388/wallet_policies.py
index 4cd50310..754d2010 100755
--- a/bip-0388/wallet_policies.py
+++ b/bip-0388/wallet_policies.py
@@ -142,7 +142,7 @@ class WalletPolicy(object):
                     continue
 
                 if op in operators_key_all_but_first:
-                    # skip the first argument (we now it's not a KEY expression, so it does not have a comma)
+                    # skip the first argument (we know it's not a KEY expression, so it does not have a comma)
                     first_comma_pos = descriptor.find(",", op_pos_start)
                     if first_comma_pos == -1:
                         raise Exception(

From f61bdadafb82ae37166a4c2eb1ea1e4bed357f3a Mon Sep 17 00:00:00 2001
From: omahs <73983677+omahs@users.noreply.github.com>
Date: Sun, 21 Jul 2024 09:31:28 +0200
Subject: [PATCH 167/288] fix typo

---
 bip-0390.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0390.mediawiki b/bip-0390.mediawiki
index 05f57347..1024fb72 100644
--- a/bip-0390.mediawiki
+++ b/bip-0390.mediawiki
@@ -51,7 +51,7 @@ backed up, or guess, the correct order of keys..
 musig(KEY, KEY, ..., KEY)/NUM/.../* expressions are also allowed, with the same usage
 restrictions as in the previous section. The aggregate public key
 is first computed as described above, with the keys also being sorted after all derivation and prior
-to aggreation. Then further BIP 32 derivation will be performed on the aggregate public key as described in
+to aggregation. Then further BIP 32 derivation will be performed on the aggregate public key as described in
 [[bip-0328.mediawiki|BIP 328]]. As there is no aggregate private key,
 only unhardened derivation from the aggregate public key is allowed, and thus the derivation steps
 following the musig() expression cannot contain

From f1a5c71094f212e088b9960eb69cdd5a9a27cb5e Mon Sep 17 00:00:00 2001
From: michael1011 
Date: Sun, 21 Jul 2024 18:32:51 +0200
Subject: [PATCH 168/288] BIP46 clarify witness

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index e3ad5750..1602f811 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -90,7 +90,7 @@ month = 1 + index % 12
 To derive the address from the above calculated public key and timelock, we create a witness script which locks the funds until the timelock, and then checks the signature of the derived_key. The witness script is hashed with SHA256 to produce a 32-byte hash value that forms the witness program in the output script of the P2WSH address.
 
     witnessScript:  OP_CHECKLOCKTIMEVERIFY OP_DROP  OP_CHECKSIG
-    witness:       
+    witness:       
     scriptSig:    (empty)
     scriptPubKey: 0 <32-byte-hash>
                   (0x0020{32-byte-hash})

From 26bb1d8ea3e2f0f7e02e1ec37a4b70fbc0781f85 Mon Sep 17 00:00:00 2001
From: Jonas Nick 
Date: Mon, 22 Jul 2024 14:14:33 +0000
Subject: [PATCH 169/288] bip-0327: 1.0.1 -> 1.0.2

(cherry picked from commit 4f2e6e7ffbd2fdc095ab8d59827be9da18b790be)
---
 bip-0327.mediawiki    | 4 +++-
 bip-0327/reference.py | 4 ++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki
index 77a0024e..c9e88abd 100644
--- a/bip-0327.mediawiki
+++ b/bip-0327.mediawiki
@@ -782,6 +782,8 @@ An exception to this rule is MAJOR version zero (0.y.z) which is fo
 The MINOR version is incremented whenever the inputs or the output of an algorithm changes in a backward-compatible way or new backward-compatible functionality is added.
 The PATCH version is incremented for other changes that are noteworthy (bug fixes, test vectors, important clarifications, etc.).
 
+* '''1.0.2''' (2024-07-22):
+** Fix minor bug in the specification of ''DeterministicSign'' and add small improvement to a ''PartialSigAgg'' test vector.
 * '''1.0.1''' (2024-05-14):
 ** Fix minor issue in ''PartialSigVerify'' vectors.
 * '''1.0.0''' (2023-03-26):
@@ -825,4 +827,4 @@ The PATCH version is incremented for other changes that are notewor
 
 == Acknowledgements ==
 
-We thank Brandon Black, Riccardo Casatta, Lloyd Fournier, Russell O'Connor, and Pieter Wuille for their contributions to this document.
+We thank Brandon Black, Riccardo Casatta, Sivaram Dhakshinamoorthy, Lloyd Fournier, Russell O'Connor, and Pieter Wuille for their contributions to this document.
diff --git a/bip-0327/reference.py b/bip-0327/reference.py
index dd3bf68c..17831c5f 100644
--- a/bip-0327/reference.py
+++ b/bip-0327/reference.py
@@ -367,7 +367,7 @@ def sign(secnonce: bytearray, sk: bytes, session_ctx: SessionContext) -> bytes:
         raise ValueError('secret key value is out of range.')
     P = point_mul(G, d_)
     assert P is not None
-    pk = PlainPk(cbytes(P))
+    pk = cbytes(P)
     if not pk == secnonce[64:97]:
         raise ValueError('Public key does not match nonce_gen argument')
     a = get_session_key_agg_coeff(session_ctx, P)
@@ -430,7 +430,7 @@ def partial_sig_verify(psig: bytes, pubnonces: List[bytes], pubkeys: List[PlainP
     session_ctx = SessionContext(aggnonce, pubkeys, tweaks, is_xonly, msg)
     return partial_sig_verify_internal(psig, pubnonces[i], pubkeys[i], session_ctx)
 
-def partial_sig_verify_internal(psig: bytes, pubnonce: bytes, pk: PlainPk, session_ctx: SessionContext) -> bool:
+def partial_sig_verify_internal(psig: bytes, pubnonce: bytes, pk: bytes, session_ctx: SessionContext) -> bool:
     (Q, gacc, _, b, R, e) = get_session_values(session_ctx)
     s = int_from_bytes(psig)
     if s >= n:

From 9a56d3544eac1f949a747c251810f7a440d63fb9 Mon Sep 17 00:00:00 2001
From: Orfeas Stefanos Thyfronitis Litos 
Date: Thu, 25 Jul 2024 18:35:39 +0300
Subject: [PATCH 170/288] Remove trailing whitespace from all BIPs

---
 bip-0009.mediawiki |   2 +-
 bip-0017.mediawiki |   2 +-
 bip-0038.mediawiki |  12 ++--
 bip-0042.mediawiki |   2 +-
 bip-0052.mediawiki |   4 +-
 bip-0064.mediawiki |   2 +-
 bip-0065.mediawiki |  20 +++---
 bip-0066.mediawiki |   4 +-
 bip-0067.mediawiki |  46 ++++++-------
 bip-0068.mediawiki |   6 +-
 bip-0072.mediawiki |   2 +-
 bip-0075.mediawiki |  18 ++---
 bip-0083.mediawiki |   2 +-
 bip-0088.mediawiki |   2 +-
 bip-0090.mediawiki |   2 +-
 bip-0099.mediawiki |  28 ++++----
 bip-0104.mediawiki |   2 +-
 bip-0105.mediawiki |  24 +++----
 bip-0106.mediawiki |   6 +-
 bip-0107.mediawiki |  16 ++---
 bip-0109.mediawiki |   2 +-
 bip-0112.mediawiki |  10 +--
 bip-0113.mediawiki |   8 +--
 bip-0120.mediawiki |   4 +-
 bip-0122.mediawiki |   8 +--
 bip-0123.mediawiki |   2 +-
 bip-0129.mediawiki |   8 +--
 bip-0132.mediawiki |   2 +-
 bip-0134.mediawiki |   2 +-
 bip-0141.mediawiki |  14 ++--
 bip-0142.mediawiki |  22 +++---
 bip-0143.mediawiki | 166 ++++++++++++++++++++++-----------------------
 bip-0144.mediawiki |   2 +-
 bip-0154.mediawiki |   8 +--
 bip-0155.mediawiki |   2 +-
 bip-0156.mediawiki |   2 +-
 bip-0159.mediawiki |   2 +-
 bip-0174.mediawiki |   2 +-
 bip-0176.mediawiki |   2 +-
 bip-0199.mediawiki |  20 +++---
 bip-0300.mediawiki |  14 ++--
 bip-0301.mediawiki |   2 +-
 bip-0329.mediawiki |  12 ++--
 bip-0340.mediawiki |   2 +-
 bip-0343.mediawiki |   2 +-
 bip-0345.mediawiki |  54 +++++++--------
 bip-0347.mediawiki |   4 +-
 bip-0380.mediawiki |   2 +-
 48 files changed, 291 insertions(+), 291 deletions(-)

diff --git a/bip-0009.mediawiki b/bip-0009.mediawiki
index f7fbad1c..1883562d 100644
--- a/bip-0009.mediawiki
+++ b/bip-0009.mediawiki
@@ -119,7 +119,7 @@ other one simultaneously transitions to STARTED, which would mean both would dem
 
 Note that a block's state never depends on its own nVersion; only on that of its ancestors.
 
-        case STARTED: 
+        case STARTED:
             if (GetMedianTimePast(block.parent) >= timeout) {
                 return FAILED;
             }
diff --git a/bip-0017.mediawiki b/bip-0017.mediawiki
index 671f75ab..aeb87644 100644
--- a/bip-0017.mediawiki
+++ b/bip-0017.mediawiki
@@ -86,7 +86,7 @@ Avoiding a block-chain split by malicious pay-to-script transactions requires ca
 
 * A pay-to-script-hash transaction that is invalid for new clients/miners but valid for old clients/miners.
 
-To gracefully upgrade and ensure no long-lasting block-chain split occurs, more than 50% of miners must support full validation of the new transaction type and must switch from the old validation rules to the new rules at the same time. 
+To gracefully upgrade and ensure no long-lasting block-chain split occurs, more than 50% of miners must support full validation of the new transaction type and must switch from the old validation rules to the new rules at the same time.
 
 To judge whether or not more than 50% of hashing power supports this BIP, miners are asked to upgrade their software and put the string "p2sh/CHV" in the input of the coinbase transaction for blocks that they create.
 
diff --git a/bip-0038.mediawiki b/bip-0038.mediawiki
index ab1a1583..6bcf4119 100644
--- a/bip-0038.mediawiki
+++ b/bip-0038.mediawiki
@@ -64,7 +64,7 @@ To keep the size of the encrypted key down, no initialization vectors (IVs) are
 * How the user sees it: 58 characters always starting with '6P'
 ** Visual cues are present in the third character for visually identifying the EC-multiply and compress flag.
 * Count of payload bytes (beyond prefix): 37
-** 1 byte (''flagbyte''): 
+** 1 byte (''flagbyte''):
 *** the most significant two bits are set as follows to preserve the visibility of the compression flag in the prefix, as well as to keep the payload within the range of allowable values that keep the "6P" prefix intact.  For non-EC-multiplied keys, the bits are 11.  For EC-multiplied keys, the bits are 00.
 *** the bit with value 0x20 when set indicates the key should be converted to a base58check encoded P2PKH bitcoin address using the DER compressed public key format. When not set, it should be a base58check encoded P2PKH bitcoin address using the DER uncompressed public key format.
 *** the bits with values 0x10 and 0x08 are reserved for a future specification that contemplates using multisig as a way to combine the factors such that parties in possession of the separate factors can independently sign a proposed transaction without requiring that any party possess both factors.  These bits must be 0 to comply with this version of the specification.
@@ -75,10 +75,10 @@ To keep the size of the encrypted key down, no initialization vectors (IVs) are
 **16 bytes: lasthalf: An AES-encrypted key material record (contents depend on whether EC multiplication is used)
 * Range in base58check encoding for non-EC-multiplied keys without compression (prefix 6PR):
 ** Minimum value: 6PRHv1jg1ytiE4kT2QtrUz8gEjMQghZDWg1FuxjdYDzjUkcJeGdFj9q9Vi (based on 01 42 C0 plus thirty-six 00's)
-** Maximum value: 6PRWdmoT1ZursVcr5NiD14p5bHrKVGPG7yeEoEeRb8FVaqYSHnZTLEbYsU (based on 01 42 C0 plus thirty-six FF's) 
+** Maximum value: 6PRWdmoT1ZursVcr5NiD14p5bHrKVGPG7yeEoEeRb8FVaqYSHnZTLEbYsU (based on 01 42 C0 plus thirty-six FF's)
 * Range in base58check encoding for non-EC-multiplied keys with compression (prefix 6PY):
 ** Minimum value: 6PYJxKpVnkXUsnZAfD2B5ZsZafJYNp4ezQQeCjs39494qUUXLnXijLx6LG (based on 01 42 E0 plus thirty-six 00's)
-** Maximum value: 6PYXg5tGnLYdXDRZiAqXbeYxwDoTBNthbi3d61mqBxPpwZQezJTvQHsCnk (based on 01 42 E0 plus thirty-six FF's) 
+** Maximum value: 6PYXg5tGnLYdXDRZiAqXbeYxwDoTBNthbi3d61mqBxPpwZQezJTvQHsCnk (based on 01 42 E0 plus thirty-six FF's)
 * Range in base58check encoding for EC-multiplied keys without compression (prefix 6Pf):
 ** Minimum value: 6PfKzduKZXAFXWMtJ19Vg9cSvbFg4va6U8p2VWzSjtHQCCLk3JSBpUvfpf (based on 01 43 00 plus thirty-six 00's)
 ** Maximum value: 6PfYiPy6Z7BQAwEHLxxrCEHrH9kasVQ95ST1NnuEnnYAJHGsgpNPQ9dTHc (based on 01 43 00 plus thirty-six FF's)
@@ -272,7 +272,7 @@ Test 2:
 
 Test 1:
 *Passphrase: MOLON LABE
-*Passphrase code: passphraseaB8feaLQDENqCgr4gKZpmf4VoaT6qdjJNJiv7fsKvjqavcJxvuR1hy25aTu5sX 
+*Passphrase code: passphraseaB8feaLQDENqCgr4gKZpmf4VoaT6qdjJNJiv7fsKvjqavcJxvuR1hy25aTu5sX
 *Encrypted key: 6PgNBNNzDkKdhkT6uJntUXwwzQV8Rr2tZcbkDcuC9DZRsS6AtHts4Ypo1j
 *Bitcoin address: 1Jscj8ALrYu2y9TD8NrpvDBugPedmbj4Yh
 *Unencrypted private key (WIF): 5JLdxTtcTHcfYcmJsNVy1v2PMDx432JPoYcBTVVRHpPaxUrdtf8
@@ -280,9 +280,9 @@ Test 1:
 *Confirmation code: cfrm38V8aXBn7JWA1ESmFMUn6erxeBGZGAxJPY4e36S9QWkzZKtaVqLNMgnifETYw7BPwWC9aPD
 *Lot/Sequence: 263183/1
 
-Test 2: 
+Test 2:
 *Passphrase (all letters are Greek - test UTF-8 compatibility with this): ΜΟΛΩΝ ΛΑΒΕ
-*Passphrase code: passphrased3z9rQJHSyBkNBwTRPkUGNVEVrUAcfAXDyRU1V28ie6hNFbqDwbFBvsTK7yWVK 
+*Passphrase code: passphrased3z9rQJHSyBkNBwTRPkUGNVEVrUAcfAXDyRU1V28ie6hNFbqDwbFBvsTK7yWVK
 *Encrypted private key: 6PgGWtx25kUg8QWvwuJAgorN6k9FbE25rv5dMRwu5SKMnfpfVe5mar2ngH
 *Bitcoin address: 1Lurmih3KruL4xDB5FmHof38yawNtP9oGf
 *Unencrypted private key (WIF): 5KMKKuUmAkiNbA3DazMQiLfDq47qs8MAEThm4yL8R2PhV1ov33D
diff --git a/bip-0042.mediawiki b/bip-0042.mediawiki
index 2c5de6df..c233e268 100644
--- a/bip-0042.mediawiki
+++ b/bip-0042.mediawiki
@@ -42,7 +42,7 @@ Note that several other programming languages do not exhibit this behaviour, mak
 
 ===Floating-point approximation===
 
-An obvious solution would be to reimplement the shape of the subsidy curve using floating-point approximations, such as simulated annealing or quantitative easing, which have already proven their worth in consensus systems. Unfortunately, since the financial crisis everyone considers numbers with decimal points in them fishy, and integers are not well supported by Javascript. 
+An obvious solution would be to reimplement the shape of the subsidy curve using floating-point approximations, such as simulated annealing or quantitative easing, which have already proven their worth in consensus systems. Unfortunately, since the financial crisis everyone considers numbers with decimal points in them fishy, and integers are not well supported by Javascript.
 
 ===Truncation===
 
diff --git a/bip-0052.mediawiki b/bip-0052.mediawiki
index ea60f139..aa42ab38 100644
--- a/bip-0052.mediawiki
+++ b/bip-0052.mediawiki
@@ -25,7 +25,7 @@ Bitcoin network cannot profitably mine Bitcoin even if they have the capital to
 invest in mining hardware. From a practical perspective, Bitcoin adoption by
 companies like Tesla (which recently rescinded its acceptance of Bitcoin as
 payment) has been hampered by its massive energy consumption and perceived
-environmental impact. 
+environmental impact.
 
 
 
@@ -137,7 +137,7 @@ x1 <- keccak(input)
 x2 <- reshape(x1, 64)
 
 // Perform a matrix-vector multiplication.
-// The result is 64-vector of 14-bit unsigned. 
+// The result is 64-vector of 14-bit unsigned.
 x3 <- vector_matrix_mult(x2, M)
 
 // Truncate all values to 4 most significant bits.
diff --git a/bip-0064.mediawiki b/bip-0064.mediawiki
index 82a6cfdc..02c4c2a8 100644
--- a/bip-0064.mediawiki
+++ b/bip-0064.mediawiki
@@ -86,7 +86,7 @@ If the requesting client is looking up outputs for a signed transaction that the
 client can partly verify the returned output by running the input scripts with it. Currently this
 verifies only that the script is correct. A future version of the Bitcoin protocol is likely to also
 allow the value to be checked in this way. It does not show that the output is really unspent or was
-ever actually created in the block chain however. Additionally, the form of the provided scriptPubKey 
+ever actually created in the block chain however. Additionally, the form of the provided scriptPubKey
 should be checked before execution to ensure the remote peer doesn't just set the script to OP_TRUE.
 
 If the requesting client has a mapping of chain heights to block hashes in the best chain e.g.
diff --git a/bip-0065.mediawiki b/bip-0065.mediawiki
index 15dca784..db10c0ca 100644
--- a/bip-0065.mediawiki
+++ b/bip-0065.mediawiki
@@ -205,19 +205,19 @@ transaction output ''can'' be spent.
 Refer to the reference implementation, reproduced below, for the precise
 semantics and detailed rationale for those semantics.
 
-    
+
     case OP_NOP2:
     {
         // CHECKLOCKTIMEVERIFY
         //
         // (nLockTime -- nLockTime )
-    
+
         if (!(flags & SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY))
             break; // not enabled; treat as a NOP
-    
+
         if (stack.size() < 1)
             return false;
-    
+
         // Note that elsewhere numeric opcodes are limited to
         // operands in the range -2**31+1 to 2**31-1, however it is
         // legal for opcodes to produce results exceeding that
@@ -233,13 +233,13 @@ semantics and detailed rationale for those semantics.
         // to 5-byte bignums, which are good until 2**32-1, the
         // same limit as the nLockTime field itself.
         const CScriptNum nLockTime(stacktop(-1), 5);
-    
+
         // In the rare event that the argument may be < 0 due to
         // some arithmetic being done first, you can always use
         // 0 MAX CHECKLOCKTIMEVERIFY.
         if (nLockTime < 0)
             return false;
-    
+
         // There are two types of nLockTime: lock-by-blockheight
         // and lock-by-blocktime, distinguished by whether
         // nLockTime < LOCKTIME_THRESHOLD.
@@ -252,12 +252,12 @@ semantics and detailed rationale for those semantics.
               (txTo.nLockTime >= LOCKTIME_THRESHOLD && nLockTime >= LOCKTIME_THRESHOLD)
              ))
             return false;
-    
+
         // Now that we know we're comparing apples-to-apples, the
         // comparison is a simple numeric one.
         if (nLockTime > (int64_t)txTo.nLockTime)
             return false;
-    
+
         // Finally the nLockTime feature can be disabled and thus
         // CHECKLOCKTIMEVERIFY bypassed if every txin has been
         // finalized by setting nSequence to maxint. The
@@ -270,9 +270,9 @@ semantics and detailed rationale for those semantics.
         // required to prove correct CHECKLOCKTIMEVERIFY execution.
         if (txTo.vin[nIn].IsFinal())
             return false;
-    
+
         break;
-    
+
     }
 
 https://github.com/petertodd/bitcoin/commit/ab0f54f38e08ee1e50ff72f801680ee84d0f1bf4
diff --git a/bip-0066.mediawiki b/bip-0066.mediawiki
index 936d5075..53289f55 100644
--- a/bip-0066.mediawiki
+++ b/bip-0066.mediawiki
@@ -75,7 +75,7 @@ bool static IsValidSignatureEncoding(const std::vector &sig) {
     // Verify that the length of the signature matches the sum of the length
     // of the elements.
     if ((size_t)(lenR + lenS + 7) != sig.size()) return false;
- 
+
     // Check whether the R element is an integer.
     if (sig[2] != 0x02) return false;
 
@@ -140,7 +140,7 @@ An implementation for the reference client is available at https://github.com/bi
 
 ==Acknowledgements==
 
-This document is extracted from the previous BIP62 proposal, which had input from various people, in particular Greg Maxwell and Peter Todd, who gave feedback about this document as well. 
+This document is extracted from the previous BIP62 proposal, which had input from various people, in particular Greg Maxwell and Peter Todd, who gave feedback about this document as well.
 
 ==Disclosures==
 
diff --git a/bip-0067.mediawiki b/bip-0067.mediawiki
index a31cc3d0..94153d37 100644
--- a/bip-0067.mediawiki
+++ b/bip-0067.mediawiki
@@ -19,7 +19,7 @@ This BIP describes a method to deterministically generate multi-signature pay-to
 
 ==Motivation==
 
-Pay-to-script-hash (BIP-0011[https://github.com/bitcoin/bips/blob/master/bip-0011.mediawiki BIP-0011]) is a transaction type that allows funding of arbitrary scripts, where the recipient carries the cost of fee's associated with using longer, more complex scripts. 
+Pay-to-script-hash (BIP-0011[https://github.com/bitcoin/bips/blob/master/bip-0011.mediawiki BIP-0011]) is a transaction type that allows funding of arbitrary scripts, where the recipient carries the cost of fee's associated with using longer, more complex scripts.
 
 Multi-signature pay-to-script-hash transactions are defined in BIP-0016[https://github.com/bitcoin/bips/blob/master/bip-0016.mediawiki BIP-0016]. The redeem script does not require a particular ordering or encoding for public keys.  This means that for a given set of keys and number of required signatures, there are as many as 2(n!) possible standard redeem scripts, each with its separate P2SH address.  Adhering to an ordering and key encoding would ensure that a multi-signature “account” (set of public keys and required signature count) has a canonical P2SH address.
 
@@ -27,31 +27,31 @@ By adopting a sorting and encoding standard, compliant wallets will always produ
 
 While most web wallets do not presently facilitate the setup of multisignature accounts with users of a different service, conventions which ensure cross-compatibility should make it easier to achieve this.
 
-Many wallet as a service providers use a 2of3 multi-signature schema where the user stores 1 of the keys (offline) as backup while using the other key for daily use and letting the service cosign his transactions.  
+Many wallet as a service providers use a 2of3 multi-signature schema where the user stores 1 of the keys (offline) as backup while using the other key for daily use and letting the service cosign his transactions.
 This standard will help in enabling a party other than the service provider to recover the wallet without any help from the service provider.
 
 ==Specification==
 
 For a set of public keys, ensure that they have been received in compressed form:
-    
+
     022df8750480ad5b26950b25c7ba79d3e37d75f640f8e5d9bcd5b150a0f85014da
-    03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9 
+    03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9
     021f2f6e1e50cb6a953935c3601284925decd3fd21bc445712576873fb8c6ebc18
- 
-Sort them lexicographically according to their binary representation: 
-    
+
+Sort them lexicographically according to their binary representation:
+
     021f2f6e1e50cb6a953935c3601284925decd3fd21bc445712576873fb8c6ebc18
     022df8750480ad5b26950b25c7ba79d3e37d75f640f8e5d9bcd5b150a0f85014da
     03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9
 
-..before using the resulting list of keys in a standard multisig redeem script:  
-    
+..before using the resulting list of keys in a standard multisig redeem script:
+
     OP_2 021f2f6e1e50cb6a953935c3601284925decd3fd21bc445712576873fb8c6ebc18 022df8750480ad5b26950b25c7ba79d3e37d75f640f8e5d9bcd5b150a0f85014da 03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9 OP_3 OP_CHECKMULTISIG
 
 Hash the redeem script according to BIP-0016 to get the P2SH address.
-    
+
     3Q4sF6tv9wsdqu2NtARzNCpQgwifm2rAba
-    
+
 ==Compatibility==
 * Uncompressed keys are incompatible with this specification. A compatible implementation should not automatically compress keys.  Receiving an uncompressed key from a multisig participant should be interpreted as a sign that the user has an incompatible implementation.
 * P2SH addresses do not reveal information about the script that is receiving the funds. For this reason it is not technically possible to enforce this BIP as a rule on the network.  Also, it would cause a hard fork.
@@ -75,11 +75,11 @@ Vector 1
 ** 39bgKC7RFbpoCRbtD5KEdkYKtNyhpsNa3Z
 
 Vector 2 (Already sorted, no action required)
-* List: 
+* List:
 ** 02632b12f4ac5b1d1b72b2a3b508c19172de44f6f46bcee50ba33f3f9291e47ed0
 ** 027735a29bae7780a9755fae7a1c4374c656ac6a69ea9f3697fda61bb99a4f3e77
 ** 02e2cc6bd5f45edd43bebe7cb9b675f0ce9ed3efe613b177588290ad188d11b404
-* Sorted: 
+* Sorted:
 ** 02632b12f4ac5b1d1b72b2a3b508c19172de44f6f46bcee50ba33f3f9291e47ed0
 ** 027735a29bae7780a9755fae7a1c4374c656ac6a69ea9f3697fda61bb99a4f3e77
 ** 02e2cc6bd5f45edd43bebe7cb9b675f0ce9ed3efe613b177588290ad188d11b404
@@ -89,12 +89,12 @@ Vector 2 (Already sorted, no action required)
 ** 3CKHTjBKxCARLzwABMu9yD85kvtm7WnMfH
 
 Vector 3:
-* List:    
+* List:
 ** 030000000000000000000000000000000000004141414141414141414141414141
 ** 020000000000000000000000000000000000004141414141414141414141414141
 ** 020000000000000000000000000000000000004141414141414141414141414140
 ** 030000000000000000000000000000000000004141414141414141414141414140
-* Sorted: 
+* Sorted:
 ** 020000000000000000000000000000000000004141414141414141414141414140
 ** 020000000000000000000000000000000000004141414141414141414141414141
 ** 030000000000000000000000000000000000004141414141414141414141414140
@@ -105,11 +105,11 @@ Vector 3:
 ** 32V85igBri9zcfBRVupVvwK18NFtS37FuD
 
 Vector 4: (from bitcore)
-* List: 
+* List:
 ** 022df8750480ad5b26950b25c7ba79d3e37d75f640f8e5d9bcd5b150a0f85014da
-** 03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9 
+** 03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9
 ** 021f2f6e1e50cb6a953935c3601284925decd3fd21bc445712576873fb8c6ebc18
-* Sorted: 
+* Sorted:
 ** 021f2f6e1e50cb6a953935c3601284925decd3fd21bc445712576873fb8c6ebc18
 ** 022df8750480ad5b26950b25c7ba79d3e37d75f640f8e5d9bcd5b150a0f85014da
 ** 03e3818b65bcc73a7d64064106a859cc1a5a728c4345ff0b641209fba0d90de6e9
@@ -119,13 +119,13 @@ Vector 4: (from bitcore)
 ** 3Q4sF6tv9wsdqu2NtARzNCpQgwifm2rAba
 
 ==Acknowledgements==
-The authors wish to thank BtcDrak and Luke-Jr for their involvement & contributions in the early discussions of this BIP. 
+The authors wish to thank BtcDrak and Luke-Jr for their involvement & contributions in the early discussions of this BIP.
 
-==Usage & Implementations== 
-* [[https://github.com/bitcoin/bips/blob/master/bip-0045.mediawiki#address-generation-procedure|BIP-0045]] - Structure for Deterministic P2SH Multisignature Wallets 
-* [[https://github.com/bitpay/bitcore/blob/50a868cb8cdf2be04bb1c5bf4bcc064cc06f5888/lib/script/script.js#L541|Bitcore]] 
+==Usage & Implementations==
+* [[https://github.com/bitcoin/bips/blob/master/bip-0045.mediawiki#address-generation-procedure|BIP-0045]] - Structure for Deterministic P2SH Multisignature Wallets
+* [[https://github.com/bitpay/bitcore/blob/50a868cb8cdf2be04bb1c5bf4bcc064cc06f5888/lib/script/script.js#L541|Bitcore]]
 * [[https://github.com/haskoin/haskoin-core/blob/b41b1deb0989334a7ead6fc993fb8b02f0c00810/haskoin-core/Network/Haskoin/Script/Parser.hs#L112-L122|Haskoin]] - Bitcoin implementation in Haskell
-* [[https://github.com/etotheipi/BitcoinArmory/blob/268db0f3fa20c989057bd43343a43b2edbe89aeb/armoryengine/ArmoryUtils.py#L1441|Armory]] 
+* [[https://github.com/etotheipi/BitcoinArmory/blob/268db0f3fa20c989057bd43343a43b2edbe89aeb/armoryengine/ArmoryUtils.py#L1441|Armory]]
 * [[https://github.com/bitcoinj/bitcoinj/blob/master/core/src/main/java/org/bitcoinj/script/ScriptBuilder.java#L331|BitcoinJ]]
 
 == References ==
diff --git a/bip-0068.mediawiki b/bip-0068.mediawiki
index ea0761d5..a84fce7c 100644
--- a/bip-0068.mediawiki
+++ b/bip-0068.mediawiki
@@ -33,7 +33,7 @@ If bit (1 << 31) of the sequence number is set, then no consensus meaning is app
 
 If bit (1 << 31) of the sequence number is not set, then the sequence number is interpreted as an encoded relative lock-time.
 
-The sequence number encoding is interpreted as follows: 
+The sequence number encoding is interpreted as follows:
 
 Bit (1 << 22) determines if the relative lock-time is time-based or block based: If the bit is set, the relative lock-time specifies a timespan in units of 512 seconds granularity. The timespan starts from the median-time-past of the output’s previous block, and ends at the MTP of the previous block. If the bit is not set, the relative lock-time specifies a number of blocks.
 
@@ -65,7 +65,7 @@ enum {
     /* Interpret sequence numbers as relative lock-time constraints. */
     LOCKTIME_VERIFY_SEQUENCE = (1 << 0),
 };
-    
+
 /* Setting nSequence to this value for every input in a transaction
  * disables nLockTime. */
 static const uint32_t SEQUENCE_FINAL = 0xffffffff;
@@ -245,7 +245,7 @@ The most efficient way to calculate sequence number from relative lock-time is w
     // 0 <= nHeight < 65,535 blocks (1.25 years)
     nSequence = nHeight;
     nHeight = nSequence & 0x0000ffff;
-    
+
     // 0 <= nTime < 33,554,431 seconds (1.06 years)
     nSequence = (1 << 22) | (nTime >> 9);
     nTime = (nSequence & 0x0000ffff) << 9;
diff --git a/bip-0072.mediawiki b/bip-0072.mediawiki
index d5e295e1..ab9c32d0 100644
--- a/bip-0072.mediawiki
+++ b/bip-0072.mediawiki
@@ -69,4 +69,4 @@ bitcoin:?r=https://merchant.com/pay.php?h%3D2a8628fc2fbe
 
 ==References==
 
-[[http://www.w3.org/Protocols/rfc2616/rfc2616.html|RFC 2616]] : Hypertext Transfer Protocol -- HTTP/1.1 
+[[http://www.w3.org/Protocols/rfc2616/rfc2616.html|RFC 2616]] : Hypertext Transfer Protocol -- HTTP/1.1
diff --git a/bip-0075.mediawiki b/bip-0075.mediawiki
index 8c49645d..ebd5b37d 100644
--- a/bip-0075.mediawiki
+++ b/bip-0075.mediawiki
@@ -18,11 +18,11 @@
 
 This BIP is an extension to BIP 70 that provides two enhancements to the existing Payment Protocol.
 
-# It allows the requester (Sender) of a PaymentRequest to voluntarily sign the original request and provide a certificate to allow the payee to know the identity of who they are transacting with. 
+# It allows the requester (Sender) of a PaymentRequest to voluntarily sign the original request and provide a certificate to allow the payee to know the identity of who they are transacting with.
 
 # It encrypts the PaymentRequest that is returned, before handing it off to the SSL/TLS layer to prevent man in the middle viewing of the Payment Request details.
 
-The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and 
+The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and
 "OPTIONAL" in this document are to be interpreted as described in RFC 2119.
 
 ==Copyright==
@@ -217,9 +217,9 @@ message EncryptedProtocolMessage {
 |}
 
 ==Payment Protocol Process with InvoiceRequests==
-The full process overview for using '''InvoiceRequests''' in the Payment Protocol is defined below. 
+The full process overview for using '''InvoiceRequests''' in the Payment Protocol is defined below.
 


-All Payment Protocol messages MUST be encapsulated in either a [[#ProtocolMessage|ProtocolMessage]] or [[#EncryptedProcotolMessage|EncryptedProtocolMessage]]. Once the process begins using [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] messages, all subsequent communications MUST use [[#EncryptedProtocolMessage|EncryptedProtocolMessages]]. 
+All Payment Protocol messages MUST be encapsulated in either a [[#ProtocolMessage|ProtocolMessage]] or [[#EncryptedProcotolMessage|EncryptedProtocolMessage]]. Once the process begins using [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] messages, all subsequent communications MUST use [[#EncryptedProtocolMessage|EncryptedProtocolMessages]].
 


 All Payment Protocol messages SHOULD be communicated using [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] encapsulating messages with the exception that an [[#InvoiceRequest|InvoiceRequest]] MAY be communicated using the [[#ProtocolMessage|ProtocolMessage]] if the receiver's public key is unknown.
 


@@ -257,14 +257,14 @@ When communicated via '''HTTP''', the listed messages MUST be transmitted via TL
 
 ===Payment Protocol Status Communication===
 
-Every [[#ProtocolMessage|ProtocolMessage]] or [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] MUST include a status code which conveys information about the last message received, if any (for the first message sent, use a status of 1 "OK" even though there was no previous message). In the case of an error that causes the Payment Protocol process to be stopped or requires that message be retried, a ProtocolMessage or EncryptedProtocolMessage SHOULD be returned by the party generating the error. The content of the message MUST contain the same '''serialized_message''' or '''encrypted_message''' and identifier (if present) and MUST have the status_code set appropriately. 
+Every [[#ProtocolMessage|ProtocolMessage]] or [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] MUST include a status code which conveys information about the last message received, if any (for the first message sent, use a status of 1 "OK" even though there was no previous message). In the case of an error that causes the Payment Protocol process to be stopped or requires that message be retried, a ProtocolMessage or EncryptedProtocolMessage SHOULD be returned by the party generating the error. The content of the message MUST contain the same '''serialized_message''' or '''encrypted_message''' and identifier (if present) and MUST have the status_code set appropriately.
 


 The status_message value SHOULD be set with a human readable explanation of the status code.
 
 ====Payment Protocol Status Codes====
 {| class="wikitable"
 ! Status Code !! Description
-|- 
+|-
 | 1     || OK
 |-
 | 2     || Cancel
@@ -324,7 +324,7 @@ For the following we assume the Sender already knows the Receiver's public key,
 ** Set '''signature''' value to the computed signature
 
 ===InvoiceRequest Validation===
-* Validate '''sender_public_key''' is a valid EC public key 
+* Validate '''sender_public_key''' is a valid EC public key
 * Validate '''notification_url''', if set, contains characters deemed valid for a URL (avoiding XSS related characters, etc).
 * If '''pki_type''' is None, [[#InvoiceRequest|InvoiceRequest]] is VALID
 * If '''pki_type''' is x509+sha256 and '''signature''' is valid for the serialized [[#InvoiceRequest|InvoiceRequest]] where signature is set to "", [[#InvoiceRequest|InvoiceRequest]] is VALID
@@ -366,7 +366,7 @@ For the following we assume the Sender already knows the Receiver's public key,
 The 16 byte authentication tag resulting from the AES-GCM encrypt operation MUST be prefixed to the returned ciphertext. The decrypt operation will use the first 16 bytes of the ciphertext as the GCM authentication tag and the remainder of the ciphertext as the ciphertext in the decrypt operation.
 
 ====AES-256 GCM Additional Authenticated Data====
-When either '''status_code''' OR '''status_message''' are present, the AES-256 GCM authenticated data used in both the encrypt and decrypt operations MUST be: STRING(status_code) || status_message. Otherwise, there is no additional authenticated data. This provides that, while not encrypted, the status_code and status_message are authenticated. 
+When either '''status_code''' OR '''status_message''' are present, the AES-256 GCM authenticated data used in both the encrypt and decrypt operations MUST be: STRING(status_code) || status_message. Otherwise, there is no additional authenticated data. This provides that, while not encrypted, the status_code and status_message are authenticated.
 
 ===Initial Public Key Retrieval for InvoiceRequest Encryption===
 Initial public key retrieval for [[#InvoiceRequest|InvoiceRequest]] encryption via [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] encapsulation can be done in a number of ways including, but not limited to, the following:
@@ -387,7 +387,7 @@ Clients SHOULD keep in mind Receivers can broadcast a transaction without return
 
 ==Public Key & Signature Encoding==
 * All x.509 certificates included in any message defined in this BIP MUST be DER [ITU.X690.1994] encoded.
-* All EC public keys ('''sender_public_key''', '''receiver_public_key''') in any message defined in this BIP MUST be [[SECP256k1|http://www.secg.org/sec2-v2.pdf]] ECDSA Public Key ECPoints encoded using [[SEC 2.3.3 Encoding|http://www.secg.org/sec1-v2.pdf]]. Encoding MAY be compressed. 
+* All EC public keys ('''sender_public_key''', '''receiver_public_key''') in any message defined in this BIP MUST be [[SECP256k1|http://www.secg.org/sec2-v2.pdf]] ECDSA Public Key ECPoints encoded using [[SEC 2.3.3 Encoding|http://www.secg.org/sec1-v2.pdf]]. Encoding MAY be compressed.
 * All ECC signatures included in any message defined in this BIP MUST use the SHA-256 hashing algorithm and MUST be DER [ITU.X690.1994] encoded.
 * All OpenPGP certificates must follow [[https://tools.ietf.org/html/rfc4880|RFC4880]], sections 5.5 and 12.1.
 
diff --git a/bip-0083.mediawiki b/bip-0083.mediawiki
index c6690015..8c6f4443 100644
--- a/bip-0083.mediawiki
+++ b/bip-0083.mediawiki
@@ -83,7 +83,7 @@ We can continue creating subaccounts indefinitely using this scheme.
 
 In order to create a bidirectional payment channel, it is necessary that previous commitments be revokable. In order to revoke previous commitments, each party reveals a secret to the other that would allow them to steal the funds in the channel if a transaction for a previous commitment is inserted into the blockchain.
 
-By allowing for arbitrary nesting of sublevels, we can construct decision trees of arbitrary depth and revoke an entire branch by revealing a parent node used to derive all the children. 
+By allowing for arbitrary nesting of sublevels, we can construct decision trees of arbitrary depth and revoke an entire branch by revealing a parent node used to derive all the children.
 
 ==References==
 
diff --git a/bip-0088.mediawiki b/bip-0088.mediawiki
index db21835e..c4c02e79 100644
--- a/bip-0088.mediawiki
+++ b/bip-0088.mediawiki
@@ -89,7 +89,7 @@ installation of malicious or incorrect profiles, though.
 
 ==Specification==
 
-The format for the template was chosen to make it easy to read, convenient and visually unambiguous. 
+The format for the template was chosen to make it easy to read, convenient and visually unambiguous.
 
 Template starts with optional prefix m/, and then one or more sections delimited by the slash character (/).
 
diff --git a/bip-0090.mediawiki b/bip-0090.mediawiki
index 4c966986..48d41519 100644
--- a/bip-0090.mediawiki
+++ b/bip-0090.mediawiki
@@ -82,7 +82,7 @@ https://github.com/bitcoin/bitcoin/pull/8391.
 
 ==References==
 
-[https://github.com/bitcoin/bips/blob/master/bip-0034.mediawiki BIP34 Block v2, Height in Coinbase] 
+[https://github.com/bitcoin/bips/blob/master/bip-0034.mediawiki BIP34 Block v2, Height in Coinbase]
 
 [https://github.com/bitcoin/bips/blob/master/bip-0066.mediawiki BIP66 Strict DER signatures]
 
diff --git a/bip-0099.mediawiki b/bip-0099.mediawiki
index 156eec02..5368b537 100644
--- a/bip-0099.mediawiki
+++ b/bip-0099.mediawiki
@@ -23,7 +23,7 @@ not always well-understood, and the best upgrade mechanisms to the
 consensus validation rules may vary depending on the type of change being deployed.
 Discussing such changes without a uniform view on the deployment
 paths often leads to misunderstandings and unnecessarily delays the
-deployment of changes. 
+deployment of changes.
 
 ==Definitions==
 
@@ -43,7 +43,7 @@ deployment of changes.
 : a theoretical piece of software that contains the specifications that define the validity of a block for a given state and chain parameters (ie it may act differently on, for example, regtest).
 
 ;Libbitcoinconsensus
-: the existing implementation is a library that is compiled by default with Bitcoin Core master and exposes a single C function named bitcoinconsensus_verify_script(). Although it has a deterministic build and implements the most complex rules (most of the cryptography, which is itself heavily based on libsecp256k1 after #REPLACE_libsecp256k1_PR), it is still not a complete specification of the consensus rules. Since libconsensus doesn't manage the current state but only the validation of the next block given that state, it is known that this long effort of encapsulation and decoupling will eventually finish, and that the person who moves the last line 
+: the existing implementation is a library that is compiled by default with Bitcoin Core master and exposes a single C function named bitcoinconsensus_verify_script(). Although it has a deterministic build and implements the most complex rules (most of the cryptography, which is itself heavily based on libsecp256k1 after #REPLACE_libsecp256k1_PR), it is still not a complete specification of the consensus rules. Since libconsensus doesn't manage the current state but only the validation of the next block given that state, it is known that this long effort of encapsulation and decoupling will eventually finish, and that the person who moves the last line
 
 ==Taxonomy of consensus forks==
 
@@ -76,14 +76,14 @@ without burdening them with specific design choices made by Bitcoin
 Core. It is to be noted that sharing the same code for consensus
 validation doesn't prevent alternative implementations from
 independently changing their consensus rules: they can always fork
-the libbitcoinconsensus project (once it is in a separate repository). 
+the libbitcoinconsensus project (once it is in a separate repository).
 
 Hopefully libbitcoinconsensus will remove this type of consensus fork
 which - being accidental - obviously doesn't need a deployment plan.
 
 ====11/12 March 2013 Chain Fork====
 
-There is a precedent of an accidental consensus fork at height 225430. 
+There is a precedent of an accidental consensus fork at height 225430.
 Without entering into much detail (see [2]), the situation was different from
 what's being described from the alternative implementation risks (today alternative implementation
 still usually rely in different degrees on Bitcoin Core trusted proxies, which
@@ -104,7 +104,7 @@ rapidly by the whole worldwide community and nobody is unhappy about
 the solution.
 
 But there's some philosophical disagreements on the terms of what the
-solution was: we can add a pedantic note on that.   
+solution was: we can add a pedantic note on that.
 If "the implementation is the specification", then those
 levelDB-specific limitations were part of the consensus rules.
 Then additional rules were necessary and any alternative
@@ -126,7 +126,7 @@ another consensus fork to remove them. Two theoretical consensus forks
 instead of one but the first one deployed practically for free. The
 practical result would have been identical and only the definitions
 change. This means discussing something that went uncontroversially
-well further is "philosophical bike-shed" (TM).  
+well further is "philosophical bike-shed" (TM).
 
 ===Unilateral softforks===
 
@@ -157,17 +157,17 @@ that this must always be the case.
 While 2 chains cohexist, they can be considered two different
 currencies.
 We could say that bitcoin becomes bitcoinA and bitcoinB. The implications for market
-capitalization are completely unpredictable, 
+capitalization are completely unpredictable,
 
-maybe mc(bitcoinA) = mc(bitcoinB) = mc(old_bitcoin), 
+maybe mc(bitcoinA) = mc(bitcoinB) = mc(old_bitcoin),
 
-maybe mc(bitcoinA) + mc(bitcoinB) = mc(old_bitcoin), 
+maybe mc(bitcoinA) + mc(bitcoinB) = mc(old_bitcoin),
 
 maybe mc(bitcoinA) + mc(bitcoinB) = 1000 * mc(old_bitcoin),
 
 maybe mc(bitcoinA) + mc(bitcoinB) = 0,
 
-... 
+...
 
 Schism hardforks have been compared to one type of altcoins called
 "spinoffs"[spinoffs] that distribute all or part of its initial seigniorage to
@@ -224,7 +224,7 @@ Let's imagine BIP66 had a crypto backdoor
 that nobody noticed and allows an evil developer cabal to steal
 everyone's coins. The users and non-evil developers could join, fork
 libconsensus and use the forked version in their respective bitcoin
-implementations. 
+implementations.
 Should miner's "vote" be required to express their consent? What if some miners
 are part of the cabal? In the unlikely event that most miners are
 part of such an evil cabal, changing the pow function may be
@@ -268,7 +268,7 @@ that's why the voting mechanism and first used for BIP30 and BIP66.
 The current voting threshold for softfork enforcement is 95%. There's
 also a 75% threshold for miners to activate it as a policy rule, but
 it should be safe for miners to activate such a policy from the start
-or later than 75%, as long as they enforce it as consensus rule after 95%. 
+or later than 75%, as long as they enforce it as consensus rule after 95%.
 
 The current miners' voting mechanism can be modified to allow for
 changes to be deployed in parallel, the rejection of a concrete
@@ -355,12 +355,12 @@ worth of blocks).
 [5] Original references:
 https://bitcointalk.org/index.php?topic=114751.0
 https://bitcointalk.org/index.php?topic=43692.msg521772#msg521772
-Rebased patch: 
+Rebased patch:
 https://github.com/freicoin/freicoin/commit/beb2fa54745180d755949470466cbffd1cd6ff14
 
 ==Attribution==
 
-Incorporated corrections and suggestions from: Andy Chase, Bryan Bishop, 
+Incorporated corrections and suggestions from: Andy Chase, Bryan Bishop,
 Btcdrak, Gavin Andresen, Gregory Sanders, Luke Dashjr, Marco Falke.
 
 ==Copyright==
diff --git a/bip-0104.mediawiki b/bip-0104.mediawiki
index 1244b3e4..4d81110a 100644
--- a/bip-0104.mediawiki
+++ b/bip-0104.mediawiki
@@ -65,7 +65,7 @@ A hardcoded increase to max block size (2MB, 8MB, etc.), rejected because:
 Allow miners to vote for max block size, rejected because:
 * overly complex and political
 * human involvement makes this slow to respond to changing transaction volumes
-* focuses power over max block size to a relatively small group of people 
+* focuses power over max block size to a relatively small group of people
 * unpredictable transaction fees caused by this would create uncertainty in the ecosystem
 
 ==Backward Compatibility==
diff --git a/bip-0105.mediawiki b/bip-0105.mediawiki
index 3643562e..af416910 100644
--- a/bip-0105.mediawiki
+++ b/bip-0105.mediawiki
@@ -13,21 +13,21 @@
 
 ==Abstract==
 
-A method of altering the maximum allowed block size of the Bitcoin protocol 
+A method of altering the maximum allowed block size of the Bitcoin protocol
 using a consensus based approach.
 
 ==Motivation==
 
-There is a belief that Bitcoin cannot easily respond to raising the 
-blocksize limit if popularity was to suddenly increase due to a mass adoption 
-curve, because co-ordinating a hard fork takes considerable time, and being 
-unable to respond in a timely manner would irreparably harm the credibility of 
+There is a belief that Bitcoin cannot easily respond to raising the
+blocksize limit if popularity was to suddenly increase due to a mass adoption
+curve, because co-ordinating a hard fork takes considerable time, and being
+unable to respond in a timely manner would irreparably harm the credibility of
 bitcoin.
 
 Additionally, predetermined block size increases are problematic because they
-attempt to predict the future, and if too large could have unintended 
-consequences like damaging the possibility for a fee market to develop 
-as block subsidy decreases substantially over the next 9 years; introducing 
+attempt to predict the future, and if too large could have unintended
+consequences like damaging the possibility for a fee market to develop
+as block subsidy decreases substantially over the next 9 years; introducing
 or exacerbating mining attack vectors; or somehow affect the network in unknown
 or unpredicted ways. Since fixed changes are hard to deploy, the damage could be
 extensive.
@@ -36,14 +36,14 @@ Dynamic block size adjustments also suffer from the potential to be gamed by the
 larger hash power.
 
 Free voting as suggested by BIP100 allows miners to sell their votes out of band
-at no risk, and enable the sponsor the ability to manipulate the blocksize. 
+at no risk, and enable the sponsor the ability to manipulate the blocksize.
 It also provides a cost free method or the larger pools to vote in ways to
 manipulate the blocksize such to disadvantage or attack smaller pools.
 
 
 ==Rationale==
 
-By introducing a cost to increase the block size ensures the mining community 
+By introducing a cost to increase the block size ensures the mining community
 will collude to increase it only when there is a clear necessity, and reduce it
 when it is unnecessary. Larger miners cannot force their wishes so easily
 because not only will they have to pay extra a difficulty target, then can be
@@ -63,7 +63,7 @@ honest.
 The initial block size limit shall be 1MB.
 
 Each time a miner creates a block, they may vote to increase or decrease the
-blocksize by a maximum of 10% of the current block size limit. These votes will 
+blocksize by a maximum of 10% of the current block size limit. These votes will
 be used to recalculate the new block size limit every 2016 blocks.
 
 Votes are cast using the block's coinbase transaction scriptSig.
@@ -77,7 +77,7 @@ If a miner votes for an increase, the block hash must meet a difficulty target
 which is proportionally larger than the standard difficulty target based on the
 percentage increase they voted for.
 
-Votes proposing decreasing the block size limit do not need to meet a higher 
+Votes proposing decreasing the block size limit do not need to meet a higher
 difficulty target.
 
 Miners can vote for no change by voting for the current block size.
diff --git a/bip-0106.mediawiki b/bip-0106.mediawiki
index 193d4cd8..84b04980 100644
--- a/bip-0106.mediawiki
+++ b/bip-0106.mediawiki
@@ -36,13 +36,13 @@ https://blockchain.info/charts/avg-block-size?timespan=all&showDataPoints=false&
       Keep the same MaxBlockSize
 
 ===Proposal 2 : Depending on previous block size calculation and previous Tx fee collected by miners===
-  
+
   TotalBlockSizeInLastButOneDifficulty = Sum of all Block size of first 2008 blocks in last 2 difficulty period
   TotalBlockSizeInLastDifficulty = Sum of all Block size of second 2008 blocks in last 2 difficulty period (This actually includes 8 blocks from last but one difficulty)
-  
+
   TotalTxFeeInLastButOneDifficulty = Sum of all Tx fees of first 2008 blocks in last 2 difficulty period
   TotalTxFeeInLastDifficulty = Sum of all Tx fees of second 2008 blocks in last 2 difficulty period (This actually includes 8 blocks from last but one difficulty)
-  
+
   If ( ( (Sum of first 4016 block size in last 2 difficulty period)/4016 > 50% MaxBlockSize) AND (TotalTxFeeInLastDifficulty > TotalTxFeeInLastButOneDifficulty) AND (TotalBlockSizeInLastDifficulty > TotalBlockSizeInLastButOneDifficulty) )
       MaxBlockSize = TotalBlockSizeInLastDifficulty * MaxBlockSize / TotalBlockSizeInLastButOneDifficulty
   Else If ( ( (Sum of first 4016 block size in last 2 difficulty period)/4016 < 50% MaxBlockSize) AND (TotalTxFeeInLastDifficulty < TotalTxFeeInLastButOneDifficulty) AND (TotalBlockSizeInLastDifficulty < TotalBlockSizeInLastButOneDifficulty) )
diff --git a/bip-0107.mediawiki b/bip-0107.mediawiki
index b82db614..915657aa 100644
--- a/bip-0107.mediawiki
+++ b/bip-0107.mediawiki
@@ -24,7 +24,7 @@ Over the next few years, large infrastructure investments will be made into:
 # Layer 2 services and networks for off-chain transactions
 # General efficiency improvements to transactions and the blockchain
 
-* While there is a consensus between Bitcoin developers, miners, businesses and users that the block size needs to be increased, there is a lingering concern over the potential unintended consequences that may augment the trend towards network and mining centralization (largely driven by mining hardware such as ASICs) and thereby threaten the security of the network. 
+* While there is a consensus between Bitcoin developers, miners, businesses and users that the block size needs to be increased, there is a lingering concern over the potential unintended consequences that may augment the trend towards network and mining centralization (largely driven by mining hardware such as ASICs) and thereby threaten the security of the network.
 * In contrast, failing to respond to elevated on-chain transaction volume may lead to a consumer-failure of Bitcoin, where ordinary users - having enjoyed over 6 years of submitting transactions on-chain at relatively low cost - will be priced out of blockchain with the emergence of a prohibitive 'fee market'.
 * These two concerns must be delicately balanced so that all users can benefit from a robust, scalable, and neutral network.
 
@@ -40,7 +40,7 @@ Over the next few years, large infrastructure investments will be made into:
 * '''Phase 2'''
 ** In 2020, the maximum block size will be increased dynamically according to sustained increases in transaction volume
 ** Every 4032 blocks (~4 weeks), a CHECK will be performed to determine if a raise in the maximum block size should occur
-*** This calculates to a theoretical maximum of 13 increases per year 
+*** This calculates to a theoretical maximum of 13 increases per year
 ** IF of the last >= 3025 blocks were >=60% full, the maximum block size will be increased by 10%
 ** The maximum block size can only ever be increased, not decreased
 * The default limitfreerelay will also be raised in proportion to maximum block size increases
@@ -49,8 +49,8 @@ Over the next few years, large infrastructure investments will be made into:
 
 For example:
 * When the dynamic rules for increasing the block size go live on January 1st 2020, the starting maximum block size will be 6 MB
-* IF >=3025 blocks are >= 3.6 MB, the new maximum block size become 6.6 MB. 
-* The theoretical maximum block size at the end of 2020 would be ~20.7 MB, assuming all 13 increases are triggered every 4 weeks by the end of the year. 
+* IF >=3025 blocks are >= 3.6 MB, the new maximum block size become 6.6 MB.
+* The theoretical maximum block size at the end of 2020 would be ~20.7 MB, assuming all 13 increases are triggered every 4 weeks by the end of the year.
 
 ==Rationale==
 
@@ -63,19 +63,19 @@ For example:
 *** Setting the parameter too high may set the trigger sensitivity too low, causing transaction delays that are trying to be avoided in the first place
 *** Between September 2013-2015, the standard deviation measured from average block size (n=730 data points from blockchain.info) was ~ 0.13 MB or 13% of the maximum block size
 **** If blocks needed to be 90% full before an increase were triggered, normal variance in the average block size would mean some blocks would be full before an increase could be triggered
-*** Therefore, we need a ''safe distance'' away from the maximum block size to avoid normal block size variance hitting the limit. The 60% level represents a 3 standard deviation distance from the limit. 
+*** Therefore, we need a ''safe distance'' away from the maximum block size to avoid normal block size variance hitting the limit. The 60% level represents a 3 standard deviation distance from the limit.
 ** Why 3025 blocks?
 *** The assessment period is 4032 blocks or ~ 4 weeks, with the threshold set as 4032 blocks/0.75 + 1
 *** Increases in the maximum block size should only occur after a sustained trend can be observed in order to:
 ***# Demonstrate a market-driven secular elevation in the transaction volume
-***# Increase the cost to trigger an increase by spam attacks or miner collusion with zero fee transactions   
+***# Increase the cost to trigger an increase by spam attacks or miner collusion with zero fee transactions
 *** In other words, increases to the maximum block size must be conservative but meaningful to relieve transaction volume pressure in response to true market demand
 ** Why 10% increase in the block size?
 *** Increases in the block size are designed to be conservative and in balance with the number of theoretical opportunities  to increase the block size per year
-*** Makes any resources spent for spam attacks or miner collusion relatively expensive to achieve a minor increase in the block size. A sustained attack would need to be launched that may be too costly, and ideally detectable by the community 
+*** Makes any resources spent for spam attacks or miner collusion relatively expensive to achieve a minor increase in the block size. A sustained attack would need to be launched that may be too costly, and ideally detectable by the community
 
 ==Deployment==
-Similar deployment model to BIP101:  
+Similar deployment model to BIP101:
 
Activation is achieved when 750 of 1,000 consecutive blocks in the best chain have a version number with the first, second, third, and thirtieth bits set (0x20000007 in hex). The activation time will be the timestamp of the 750'th block plus a two week (1,209,600 second) grace period to give any remaining miners or services time to upgrade to support larger blocks.

 
 ==Acknowledgements==
diff --git a/bip-0109.mediawiki b/bip-0109.mediawiki
index 4822d4a2..ec1d7e5b 100644
--- a/bip-0109.mediawiki
+++ b/bip-0109.mediawiki
@@ -65,7 +65,7 @@ SPV (simple payment validation) wallets are compatible with this change.
 
 ==Rationale==
 
-In the short term, an increase is needed to handle increasing transaction volume. 
+In the short term, an increase is needed to handle increasing transaction volume.
 
 The limits on signature operations and amount of signature hashing done prevent possible CPU exhaustion attacks by "rogue miners" producing very expensive-to-validate two megabyte blocks. The signature hashing limit is chosen to be impossible to reach with any non-attack transaction or block, to minimize the impact on existing mining or wallet software.
 
diff --git a/bip-0112.mediawiki b/bip-0112.mediawiki
index d6ed5460..f38fa15d 100644
--- a/bip-0112.mediawiki
+++ b/bip-0112.mediawiki
@@ -69,13 +69,13 @@ address with the following redeemscript.
          CHECKSIG
     ENDIF
 
-At any time funds can be spent using signatures from any two of Alice, 
+At any time funds can be spent using signatures from any two of Alice,
 Bob or the Escrow.
 
 After 30 days Alice can sign alone.
 
 The clock does not start ticking until the payment to the escrow address
-confirms. 
+confirms.
 
 
 ===Retroactive Invalidation===
@@ -230,7 +230,7 @@ The 2-way pegged sidechain requires a new REORGPROOFVERIFY opcode, the semantics
 
 ==Specification==
 
-Refer to the reference implementation, reproduced below, for the precise 
+Refer to the reference implementation, reproduced below, for the precise
 semantics and detailed rationale for those semantics.
 
 
@@ -247,7 +247,7 @@ static const uint32_t SEQUENCE_LOCKTIME_TYPE_FLAG = (1 << 22);
 /* If CTxIn::nSequence encodes a relative lock-time, this mask is
  * applied to extract that lock-time from the sequence field. */
 static const uint32_t SEQUENCE_LOCKTIME_MASK = 0x0000ffff;
-   
+
 case OP_NOP3:
 {
     if (!(flags & SCRIPT_VERIFY_CHECKSEQUENCEVERIFY)) {
@@ -290,7 +290,7 @@ case OP_NOP3:
 
     break;
 }
-    
+
 bool TransactionSignatureChecker::CheckSequence(const CScriptNum& nSequence) const
 {
     // Relative lock times are supported by comparing the passed
diff --git a/bip-0113.mediawiki b/bip-0113.mediawiki
index 36867771..d7362809 100644
--- a/bip-0113.mediawiki
+++ b/bip-0113.mediawiki
@@ -45,13 +45,13 @@ BIP68 (sequence numbers) and BIP112 (CHECKSEQUENCEVERIFY).
 
 ==Specification==
 
-The values for transaction locktime remain unchanged. The difference is only in 
-the calculation determining whether a transaction can be included. Instead of 
-an unreliable timestamp, the following function is used to determine the current 
+The values for transaction locktime remain unchanged. The difference is only in
+the calculation determining whether a transaction can be included. Instead of
+an unreliable timestamp, the following function is used to determine the current
 block time for the purpose of checking lock-time constraints:
 
     enum { nMedianTimeSpan=11 };
-    
+
     int64_t GetMedianTimePast(const CBlockIndex* pindex)
     {
         int64_t pmedian[nMedianTimeSpan];
diff --git a/bip-0120.mediawiki b/bip-0120.mediawiki
index b951e93e..c9c11e54 100644
--- a/bip-0120.mediawiki
+++ b/bip-0120.mediawiki
@@ -52,7 +52,7 @@ A proof of payment for a transaction T, here called PoP(T), is used to prove tha
 
  OP_RETURN   
 
-{|        
+{|
 ! Field        !! Size [B] !! Description
 |-
 | <version> || 2        || Version, little endian, currently 0x01 0x00
@@ -77,7 +77,7 @@ An illustration of the PoP data structure and its original payment is shown belo
  |input2 4,ffffffff     | 1,pay to B              |
  |                      | 4,pay to C              |
  +------------------------------------------------+
- 
+
   PoP(T)
  +-------------------------------------------------------------+
  | inputs               | outputs                              |
diff --git a/bip-0122.mediawiki b/bip-0122.mediawiki
index 3fb5df87..6243c64f 100644
--- a/bip-0122.mediawiki
+++ b/bip-0122.mediawiki
@@ -43,7 +43,7 @@ Where:
 | rowspan="3" | type
 | tx
 | for transactions.
-| rowspan="3" | required 
+| rowspan="3" | required
 |-
 | block
 | for blocks (supports both hash or height).
@@ -75,9 +75,9 @@ The '''chain ID''' of a chain is the block hash of the corresponding genesis blo
 
 So, for example:
 
-Bitcoin main   : 000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f 
+Bitcoin main   : 000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f
 Bitcoin test   : 000000000933ea01ad0ee984209779baaec3ced90fa3f408719526f8d77f4943
-Bitcoin regtest: 0f9188f13cb7b2c71f2a335e3a4fc328bf5beb436012afca590b1a11466e2206 
+Bitcoin regtest: 0f9188f13cb7b2c71f2a335e3a4fc328bf5beb436012afca590b1a11466e2206
 

 
 An example of forked chain (Feathercoin, that forked Litecoin):
@@ -87,7 +87,7 @@ An example of forked chain (Feathercoin, that forked Litecoin):
 
 Litecoin   : 12a765e31ffd4059bada1e25190f6e98c99d9714d334efa41a195a7e7e04bfe2
 Feathercoin: fdbe99b90c90bae7505796461471d89ae8388ab953997aa06a355bbda8d915cb
-
  
+

 
 
 ==Examples==
diff --git a/bip-0123.mediawiki b/bip-0123.mediawiki
index 2404937b..a0dfd2ce 100644
--- a/bip-0123.mediawiki
+++ b/bip-0123.mediawiki
@@ -72,7 +72,7 @@ There's room at this layer to allow for competing standards without breaking bas
 
 ===4. Applications Layer===
 
-The applications layer specifies high level structures, abstractions, and conventions that allow different applications to support similar features and share data. 
+The applications layer specifies high level structures, abstractions, and conventions that allow different applications to support similar features and share data.
 
 ==Classification of existing BIPs==
 
diff --git a/bip-0129.mediawiki b/bip-0129.mediawiki
index b5dfae82..1eaf55d6 100644
--- a/bip-0129.mediawiki
+++ b/bip-0129.mediawiki
@@ -95,7 +95,7 @@ The Signer is any software or hardware that controls the private keys and can si
 * The Coordinator verifies that the included SIG is valid given the KEY.
 * If all key records look good, the Coordinator fills in all necessary information to generate a descriptor record.
 * The first line in the descriptor record must be the specification version (BSMS 1.0 as of this writing). The second line must be a descriptor or a descriptor template. The third line must be a comma-separated list of derivation path restrictions. The paths must start with / and use non-hardened derivation. If there are no template or restrictions, it must say No path restrictions. The fourth line must be the wallet's first address. If there are path restrictions, use the first address from the first path restriction.
-* The Coordinator calculates the MAC for the record. The first 16 bytes of the MAC serves as the IV for the encryption.. 
+* The Coordinator calculates the MAC for the record. The first 16 bytes of the MAC serves as the IV for the encryption..
 * The Coordinator encrypts the descriptor record with the ENCRYPTION_KEY and IV.
 * The Coordinator encodes the MAC and the ciphertext into hexadecimal format, then concatenates the results: (MAC || ciphertext).
 * The Coordinator sends the encrypted descriptor record to all participating Signers.
@@ -110,7 +110,7 @@ The Signer is any software or hardware that controls the private keys and can si
 * The Signer checks that its KEY is included in the descriptor or descriptor template, using path and fingerprint information provided. The check must perform an exact match on the KEYs and not using shortcuts such as matching fingerprints, which is trivial to spoof.
 * The Signer verifies that it is compatible with the derivation path restrictions.
 * The Signer verifies that the wallet's first address is valid.
-* For confirmation, the Signer must display to the user the wallet's first address and policy parameters, including, but not limited to: the derivation path restrictions, M, N, and the position(s) of the Signer's own KEY in the policy script. The total number of Signers, N, is important to prevent a KEY insertion attack. The position is important for scripts where KEY order matters. When applicable, all positions of the KEY must be displayed. The full descriptor or descriptor template must also be available for review upon user request. 
+* For confirmation, the Signer must display to the user the wallet's first address and policy parameters, including, but not limited to: the derivation path restrictions, M, N, and the position(s) of the Signer's own KEY in the policy script. The total number of Signers, N, is important to prevent a KEY insertion attack. The position is important for scripts where KEY order matters. When applicable, all positions of the KEY must be displayed. The full descriptor or descriptor template must also be available for review upon user request.
 * Parties must check with each other that all Signers have the same confirmation (except for the KEY positions).
 * If all checks pass, the Signer must persist the descriptor record in its storage.
 
@@ -126,8 +126,8 @@ We define three modes of encryption.
 # EXTENDED : the TOKEN is a 128-bit nonce.
 
 The TOKEN can be converted to one of these formats:
-* A decimal number (recommended). The number must not exceed the maximum value of the nonce. 
-* A mnemonic phrase using [https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki BIP-0039] word list. This would be 6 words in STANDARD mode. This encoding is not recommended in EXTENDED mode as it can result in potential confusion between seed mnemonics and TOKEN mnemonics. 
+* A decimal number (recommended). The number must not exceed the maximum value of the nonce.
+* A mnemonic phrase using [https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki BIP-0039] word list. This would be 6 words in STANDARD mode. This encoding is not recommended in EXTENDED mode as it can result in potential confusion between seed mnemonics and TOKEN mnemonics.
 * A QR code.
 * Other formats.
 
diff --git a/bip-0132.mediawiki b/bip-0132.mediawiki
index 173c9198..2b2b26c3 100644
--- a/bip-0132.mediawiki
+++ b/bip-0132.mediawiki
@@ -83,7 +83,7 @@ The author doesn't believe this is a problem because a BIP cannot be forced on c
 ** User communities
 * A person may be represented by any number of segments, but a committee cannot re-use the same resource as another committee in the same segment.
 
-'''Committee Declarations.''' 
+'''Committee Declarations.'''
 * At any point, a Committee Declaration can be posted.
 * This Declaration must contain details about:
 ** The segment the Committee is representing
diff --git a/bip-0134.mediawiki b/bip-0134.mediawiki
index b7c33cf9..4af4844e 100644
--- a/bip-0134.mediawiki
+++ b/bip-0134.mediawiki
@@ -58,7 +58,7 @@ various decades ago with the XML format. The idea is that we give each
 field a name and this means that new fields can be added or optional fields
 can be omitted from individual transactions. Some other ideas are the
 standardization of data-formats (like integer and string encoding) so
-we create a more consistent system.  
+we create a more consistent system.
 One thing we shall not inherit from XML is its text-based format. Instead
 we use the [https://github.com/bitcoinclassic/documentation/blob/master/spec/compactmessageformat.md Compact Message Format]
 (CMF) which is optimized to keep the size small and fast to parse.
diff --git a/bip-0141.mediawiki b/bip-0141.mediawiki
index 117ca59d..4ba67984 100644
--- a/bip-0141.mediawiki
+++ b/bip-0141.mediawiki
@@ -43,13 +43,13 @@ By removing this data from the transaction structure committed to the transactio
 A new data structure, witness, is defined. Each transaction will have 2 IDs.
 
 Definition of txid remains unchanged: the double SHA256 of the traditional serialization format:
-  
+
   [nVersion][txins][txouts][nLockTime]
-  
+
 A new wtxid is defined: the double SHA256 of the new serialization with witness data:
-  
+
   [nVersion][marker][flag][txins][txouts][witness][nLockTime]
-  
+
 Format of nVersion, txins, txouts, and nLockTime are same as traditional serialization.
 
 The marker MUST be a 1-byte zero value: 0x00.
@@ -67,14 +67,14 @@ A new block rule is added which requires a commitment to the wtxid.
 A witness root hash is calculated with all those wtxid as leaves, in a way similar to the hashMerkleRoot in the block header.
 
 The commitment is recorded in a scriptPubKey of the coinbase transaction. It must be at least 38 bytes, with the first 6-byte of 0x6a24aa21a9ed, that is:
-  
+
    1-byte - OP_RETURN (0x6a)
    1-byte - Push the following 36 bytes (0x24)
    4-byte - Commitment header (0xaa21a9ed)
   32-byte - Commitment hash: Double-SHA256(witness root hash|witness reserved value)
-  
+
   39th byte onwards: Optional data with no consensus meaning
-  
+
 and the coinbase's input's witness must consist of a single 32-byte array for the witness reserved value.
 
 If there are more than one scriptPubKey matching the pattern, the one with highest output index is assumed to be the commitment.
diff --git a/bip-0142.mediawiki b/bip-0142.mediawiki
index b11095b8..49ed8dca 100644
--- a/bip-0142.mediawiki
+++ b/bip-0142.mediawiki
@@ -24,14 +24,14 @@ To define standard payment address for native segregated witness (segwit) transa
 The new Bitcoin address format defined is for the Pay-to-Witness-Public-Key-Hash (P2WPKH) and Pay-to-Witness-Script-Hash (P2WSH) transaction described in segregated witness soft fork (BIP141). The scriptPubKey is an OP_0 followed by a push of 20-byte-hash (P2WPKH) or 32-byte hash (P2WSH).
 
 The new address is encoded in a way similar to existing address formats:
-  
+
   base58-encode:
     [1-byte address version]
     [1-byte witness program version]
     [0x00]
     [20/32-byte-hash]
     [4-byte checksum]
-  
+
 For P2WPKH address, the address version is 6 (0x06) for a main-network address or 3 (0x03) for a testnet address.
 
 For P2WSH address, the address version is 10 (0x0A) for a main-network address or 40 (0x28) for a testnet address.
@@ -123,25 +123,25 @@ This proposal is forward-compatible with future versions of witness programs of
 == Example ==
 
 The following public key,
-  
+
     0450863AD64A87AE8A2FE83C1AF1A8403CB53F53E486D8511DAD8A04887E5B23522CD470243453A299FA9E77237716103ABC11A1DF38855ED6F2EE187E9C582BA6
- 
+
 when encoded as a P2PKH template, would become:
-  
+
     DUP HASH160 <010966776006953D5567439E5E39F86A0D273BEE> EQUALVERIFY CHECKSIG
 
 With the corresponding version 1 Bitcoin address being:
-  
+
     16UwLL9Risc3QfPqBUvKofHmBQ7wMtjvM
- 
-When the same public key is encoded as P2WPKH, the scriptPubKey becomes: 
-  
+
+When the same public key is encoded as P2WPKH, the scriptPubKey becomes:
+
     OP_0 <010966776006953D5567439E5E39F86A0D273BEE>
 
 Using 0x06 as address version, followed by 0x00 as witness program version, and a 0x00 padding, the equivalent P2WPKH address is:
-  
+
     p2xtZoXeX5X8BP8JfFhQK2nD3emtjch7UeFm
- 
+
 == Reference implementation ==
 
 https://github.com/theuni/bitcoin/commit/ede1b57058ac8efdefe61f67395affb48f2c0d80
diff --git a/bip-0143.mediawiki b/bip-0143.mediawiki
index d7e514e0..3146b5ff 100644
--- a/bip-0143.mediawiki
+++ b/bip-0143.mediawiki
@@ -31,7 +31,7 @@ A new transaction digest algorithm is defined, but only applicable to sigops in
      1. nVersion of the transaction (4-byte little endian)
      2. hashPrevouts (32-byte hash)
      3. hashSequence (32-byte hash)
-     4. outpoint (32-byte hash + 4-byte little endian) 
+     4. outpoint (32-byte hash + 4-byte little endian)
      5. scriptCode of the input (serialized as scripts inside CTxOuts)
      6. value of the output spent by this input (8-byte little endian)
      7. nSequence of the input (4-byte little endian)
@@ -77,7 +77,7 @@ Refer to the reference implementation, reproduced below, for the precise algorit
   uint256 hashPrevouts;
   uint256 hashSequence;
   uint256 hashOutputs;
-  
+
   if (!(nHashType & SIGHASH_ANYONECANPAY)) {
       CHashWriter ss(SER_GETHASH, 0);
       for (unsigned int n = 0; n < txTo.vin.size(); n++) {
@@ -85,7 +85,7 @@ Refer to the reference implementation, reproduced below, for the precise algorit
       }
       hashPrevouts = ss.GetHash();
   }
-  
+
   if (!(nHashType & SIGHASH_ANYONECANPAY) && (nHashType & 0x1f) != SIGHASH_SINGLE && (nHashType & 0x1f) != SIGHASH_NONE) {
       CHashWriter ss(SER_GETHASH, 0);
       for (unsigned int n = 0; n < txTo.vin.size(); n++) {
@@ -93,7 +93,7 @@ Refer to the reference implementation, reproduced below, for the precise algorit
       }
       hashSequence = ss.GetHash();
   }
-  
+
   if ((nHashType & 0x1f) != SIGHASH_SINGLE && (nHashType & 0x1f) != SIGHASH_NONE) {
       CHashWriter ss(SER_GETHASH, 0);
       for (unsigned int n = 0; n < txTo.vout.size(); n++) {
@@ -105,7 +105,7 @@ Refer to the reference implementation, reproduced below, for the precise algorit
       ss << txTo.vout[nIn];
       hashOutputs = ss.GetHash();
   }
-  
+
   CHashWriter ss(SER_GETHASH, 0);
   // Version
   ss << txTo.nVersion;
@@ -125,7 +125,7 @@ Refer to the reference implementation, reproduced below, for the precise algorit
   ss << txTo.nLockTime;
   // Sighash type
   ss << nHashType;
-  
+
   return ss.GetHash();
 
 
@@ -139,42 +139,42 @@ Since this policy is preparation for a future softfork proposal, to avoid potent
 To ensure consistency in consensus-critical behaviour, developers should test their implementations against all the tests below. More tests related to this proposal could be found under https://github.com/bitcoin/bitcoin/tree/master/src/test/data .
 
 === Native P2WPKH ===
-  
+
   The following is an unsigned transaction:
     0100000002fff7f7881a8099afa6940d42d1e7f6362bec38171ea3edf433541db4e4ad969f0000000000eeffffffef51e1b804cc89d182d279655c3aa89e815b1b309fe287d9b2b55d57b90ec68a0100000000ffffffff02202cb206000000001976a9148280b37df378db99f66f85c95a783a76ac7a6d5988ac9093510d000000001976a9143bde42dbee7e4dbe6a21b2d50ce2f0167faa815988ac11000000
-    
+
     nVersion:  01000000
     txin:      02 fff7f7881a8099afa6940d42d1e7f6362bec38171ea3edf433541db4e4ad969f 00000000 00 eeffffff
                   ef51e1b804cc89d182d279655c3aa89e815b1b309fe287d9b2b55d57b90ec68a 01000000 00 ffffffff
     txout:     02 202cb20600000000 1976a9148280b37df378db99f66f85c95a783a76ac7a6d5988ac
                   9093510d00000000 1976a9143bde42dbee7e4dbe6a21b2d50ce2f0167faa815988ac
     nLockTime: 11000000
-  
+
   The first input comes from an ordinary P2PK:
     scriptPubKey : 2103c9f4836b9a4f77fc0d81f7bcb01b7f1b35916864b9476c241ce9fc198bd25432ac value: 6.25
     private key  : bbc27228ddcb9209d7fd6f36b02f7dfa6252af40bb2f1cbc7a557da8027ff866
-    
+
   The second input comes from a P2WPKH witness program:
     scriptPubKey : 00141d0f172a0ecb48aee1be1f2687d2963ae33f71a1, value: 6
     private key  : 619c335025c7f4012e556c2a58b2506e30b8511b53ade95ea316fd8c3286feb9
     public key   : 025476c2e83188368da1ff3e292e7acafcdb3566bb0ad253f62fc70f07aeee6357
-    
+
   To sign it with a nHashType of 1 (SIGHASH_ALL):
-  
+
   hashPrevouts:
     dSHA256(fff7f7881a8099afa6940d42d1e7f6362bec38171ea3edf433541db4e4ad969f00000000ef51e1b804cc89d182d279655c3aa89e815b1b309fe287d9b2b55d57b90ec68a01000000)
   = 96b827c8483d4e9b96712b6713a7b68d6e8003a781feba36c31143470b4efd37
-  
+
   hashSequence:
     dSHA256(eeffffffffffffff)
   = 52b0a642eea2fb7ae638c36f6252b6750293dbe574a806984b8e4d8548339a3b
-  
+
   hashOutputs:
     dSHA256(202cb206000000001976a9148280b37df378db99f66f85c95a783a76ac7a6d5988ac9093510d000000001976a9143bde42dbee7e4dbe6a21b2d50ce2f0167faa815988ac)
   = 863ef3e1a92afbfdb97f31ad0fc7683ee943e9abcf2501590ff8f6551f47e5e5
-  
+
   hash preimage: 0100000096b827c8483d4e9b96712b6713a7b68d6e8003a781feba36c31143470b4efd3752b0a642eea2fb7ae638c36f6252b6750293dbe574a806984b8e4d8548339a3bef51e1b804cc89d182d279655c3aa89e815b1b309fe287d9b2b55d57b90ec68a010000001976a9141d0f172a0ecb48aee1be1f2687d2963ae33f71a188ac0046c32300000000ffffffff863ef3e1a92afbfdb97f31ad0fc7683ee943e9abcf2501590ff8f6551f47e5e51100000001000000
-  
+
     nVersion:     01000000
     hashPrevouts: 96b827c8483d4e9b96712b6713a7b68d6e8003a781feba36c31143470b4efd37
     hashSequence: 52b0a642eea2fb7ae638c36f6252b6750293dbe574a806984b8e4d8548339a3b
@@ -185,12 +185,12 @@ To ensure consistency in consensus-critical behaviour, developers should test th
     hashOutputs:  863ef3e1a92afbfdb97f31ad0fc7683ee943e9abcf2501590ff8f6551f47e5e5
     nLockTime:    11000000
     nHashType:    01000000
-    
+
   sigHash:      c37af31116d1b27caf68aae9e3ac82f1477929014d5b917657d0eb49478cb670
   signature:    304402203609e17b84f6a7d30c80bfa610b5b4542f32a8a0d5447a12fb1366d7f01cc44a0220573a954c4518331561406f90300e8f3358f51928d43c212a8caed02de67eebee01
-    
+
   The serialized signed transaction is: 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
-  
+
     nVersion:  01000000
     marker:    00
     flag:      01
@@ -203,38 +203,38 @@ To ensure consistency in consensus-critical behaviour, developers should test th
     nLockTime: 11000000
 
 === P2SH-P2WPKH ===
-  
-  
+
+
   The following is an unsigned transaction: 0100000001db6b1b20aa0fd7b23880be2ecbd4a98130974cf4748fb66092ac4d3ceb1a54770100000000feffffff02b8b4eb0b000000001976a914a457b684d7f0d539a46a45bbc043f35b59d0d96388ac0008af2f000000001976a914fd270b1ee6abcaea97fea7ad0402e8bd8ad6d77c88ac92040000
-  
+
     nVersion:  01000000
     txin:      01 db6b1b20aa0fd7b23880be2ecbd4a98130974cf4748fb66092ac4d3ceb1a5477 01000000 00 feffffff
     txout:     02 b8b4eb0b00000000 1976a914a457b684d7f0d539a46a45bbc043f35b59d0d96388ac
                   0008af2f00000000 1976a914fd270b1ee6abcaea97fea7ad0402e8bd8ad6d77c88ac
     nLockTime: 92040000
-  
+
   The input comes from a P2SH-P2WPKH witness program:
     scriptPubKey : a9144733f37cf4db86fbc2efed2500b4f4e49f31202387, value: 10
     redeemScript : 001479091972186c449eb1ded22b78e40d009bdf0089
     private key  : eb696a065ef48a2192da5b28b694f87544b30fae8327c4510137a922f32c6dcf
     public key   : 03ad1d8e89212f0b92c74d23bb710c00662ad1470198ac48c43f7d6f93a2a26873
-  
+
   To sign it with a nHashType of 1 (SIGHASH_ALL):
-  
+
   hashPrevouts:
     dSHA256(db6b1b20aa0fd7b23880be2ecbd4a98130974cf4748fb66092ac4d3ceb1a547701000000)
   = b0287b4a252ac05af83d2dcef00ba313af78a3e9c329afa216eb3aa2a7b4613a
-  
+
   hashSequence:
     dSHA256(feffffff)
   = 18606b350cd8bf565266bc352f0caddcf01e8fa789dd8a15386327cf8cabe198
-  
+
   hashOutputs:
     dSHA256(b8b4eb0b000000001976a914a457b684d7f0d539a46a45bbc043f35b59d0d96388ac0008af2f000000001976a914fd270b1ee6abcaea97fea7ad0402e8bd8ad6d77c88ac)
   = de984f44532e2173ca0d64314fcefe6d30da6f8cf27bafa706da61df8a226c83
-  
+
   hash preimage: 01000000b0287b4a252ac05af83d2dcef00ba313af78a3e9c329afa216eb3aa2a7b4613a18606b350cd8bf565266bc352f0caddcf01e8fa789dd8a15386327cf8cabe198db6b1b20aa0fd7b23880be2ecbd4a98130974cf4748fb66092ac4d3ceb1a5477010000001976a91479091972186c449eb1ded22b78e40d009bdf008988ac00ca9a3b00000000feffffffde984f44532e2173ca0d64314fcefe6d30da6f8cf27bafa706da61df8a226c839204000001000000
-  
+
     nVersion:     01000000
     hashPrevouts: b0287b4a252ac05af83d2dcef00ba313af78a3e9c329afa216eb3aa2a7b4613a
     hashSequence: 18606b350cd8bf565266bc352f0caddcf01e8fa789dd8a15386327cf8cabe198
@@ -245,10 +245,10 @@ To ensure consistency in consensus-critical behaviour, developers should test th
     hashOutputs:  de984f44532e2173ca0d64314fcefe6d30da6f8cf27bafa706da61df8a226c83
     nLockTime:    92040000
     nHashType:    01000000
-  
+
   sigHash:      64f3b0f4dd2bb3aa1ce8566d220cc74dda9df97d8490cc81d89d735c92e59fb6
   signature:    3044022047ac8e878352d3ebbde1c94ce3a10d057c24175747116f8288e5d794d12d482f0220217f36a485cae903c713331d877c1f64677e3622ad4010726870540656fe9dcb01
-  
+
   The serialized signed transaction is: 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
     nVersion:  01000000
     marker:    00
@@ -263,33 +263,33 @@ To ensure consistency in consensus-critical behaviour, developers should test th
 
 This example shows how OP_CODESEPARATOR and out-of-range SIGHASH_SINGLE are processed:
 
-  
-  
+
+
   The following is an unsigned transaction:
     0100000002fe3dc9208094f3ffd12645477b3dc56f60ec4fa8e6f5d67c565d1c6b9216b36e0000000000ffffffff0815cf020f013ed6cf91d29f4202e8a58726b1ac6c79da47c23d1bee0a6925f80000000000ffffffff0100f2052a010000001976a914a30741f8145e5acadf23f751864167f32e0963f788ac00000000
-  
+
     nVersion:  01000000
     txin:      02 fe3dc9208094f3ffd12645477b3dc56f60ec4fa8e6f5d67c565d1c6b9216b36e 00000000 00 ffffffff
                   0815cf020f013ed6cf91d29f4202e8a58726b1ac6c79da47c23d1bee0a6925f8 00000000 00 ffffffff
     txout:     01 00f2052a01000000 1976a914a30741f8145e5acadf23f751864167f32e0963f788ac
     nLockTime: 00000000
-  
+
   The first input comes from an ordinary P2PK:
     scriptPubKey: 21036d5c20fa14fb2f635474c1dc4ef5909d4568e5569b79fc94d3448486e14685f8ac value: 1.5625
     private key:  b8f28a772fccbf9b4f58a4f027e07dc2e35e7cd80529975e292ea34f84c4580c
     signature:    304402200af4e47c9b9629dbecc21f73af989bdaa911f7e6f6c2e9394588a3aa68f81e9902204f3fcf6ade7e5abb1295b6774c8e0abd94ae62217367096bc02ee5e435b67da201 (SIGHASH_ALL)
-  
+
   The second input comes from a native P2WSH witness program:
     scriptPubKey : 00205d1b56b63d714eebe542309525f484b7e9d6f686b3781b6f61ef925d66d6f6a0, value: 49
     witnessScript: 21026dccc749adc2a9d0d89497ac511f760f45c47dc5ed9cf352a58ac706453880aeadab210255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465ac
                    <026dccc749adc2a9d0d89497ac511f760f45c47dc5ed9cf352a58ac706453880ae> CHECKSIGVERIFY CODESEPARATOR <0255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465> CHECKSIG
-  
+
   To sign it with a nHashType of 3 (SIGHASH_SINGLE):
-  
+
   hashPrevouts:
     dSHA256(fe3dc9208094f3ffd12645477b3dc56f60ec4fa8e6f5d67c565d1c6b9216b36e000000000815cf020f013ed6cf91d29f4202e8a58726b1ac6c79da47c23d1bee0a6925f800000000)
   = ef546acf4a020de3898d1b8956176bb507e6211b5ed3619cd08b6ea7e2a09d41
-  
+
     nVersion:     01000000
     hashPrevouts: ef546acf4a020de3898d1b8956176bb507e6211b5ed3619cd08b6ea7e2a09d41
     hashSequence: 0000000000000000000000000000000000000000000000000000000000000000
@@ -300,7 +300,7 @@ This example shows how OP_CODESEPARATOR and out-of-range SIGH
     hashOutputs:  0000000000000000000000000000000000000000000000000000000000000000 (this is the second input but there is only one output)
     nLockTime:    00000000
     nHashType:    03000000
-  
+
   scriptCode:  4721026dccc749adc2a9d0d89497ac511f760f45c47dc5ed9cf352a58ac706453880aeadab210255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465ac
                                                                                        ^^
                (please note that the not-yet-executed OP_CODESEPARATOR is not removed from the scriptCode)
@@ -309,7 +309,7 @@ This example shows how OP_CODESEPARATOR and out-of-range SIGH
   public key:  026dccc749adc2a9d0d89497ac511f760f45c47dc5ed9cf352a58ac706453880ae
   private key: 8e02b539b1500aa7c81cf3fed177448a546f19d2be416c0c61ff28e577d8d0cd
   signature:   3044022027dc95ad6b740fe5129e7e62a75dd00f291a2aeb1200b84b09d9e3789406b6c002201a9ecd315dd6a0e632ab20bbb98948bc0c6fb204f2c286963bb48517a7058e2703
-  
+
   scriptCode:  23210255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465ac
                (everything up to the last executed OP_CODESEPARATOR, including that OP_CODESEPARATOR, are removed)
   preimage:    01000000ef546acf4a020de3898d1b8956176bb507e6211b5ed3619cd08b6ea7e2a09d4100000000000000000000000000000000000000000000000000000000000000000815cf020f013ed6cf91d29f4202e8a58726b1ac6c79da47c23d1bee0a6925f80000000023210255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465ac0011102401000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000003000000
@@ -317,36 +317,36 @@ This example shows how OP_CODESEPARATOR and out-of-range SIGH
   public key:  0255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465
   private key: 86bf2ed75935a0cbef03b89d72034bb4c189d381037a5ac121a70016db8896ec
   signature:   304402200de66acf4527789bfda55fc5459e214fa6083f936b430a762c629656216805ac0220396f550692cd347171cbc1ef1f51e15282e837bb2b30860dc77c8f78bc8501e503
-  
+
   The serialized signed transaction is: 01000000000102fe3dc9208094f3ffd12645477b3dc56f60ec4fa8e6f5d67c565d1c6b9216b36e000000004847304402200af4e47c9b9629dbecc21f73af989bdaa911f7e6f6c2e9394588a3aa68f81e9902204f3fcf6ade7e5abb1295b6774c8e0abd94ae62217367096bc02ee5e435b67da201ffffffff0815cf020f013ed6cf91d29f4202e8a58726b1ac6c79da47c23d1bee0a6925f80000000000ffffffff0100f2052a010000001976a914a30741f8145e5acadf23f751864167f32e0963f788ac000347304402200de66acf4527789bfda55fc5459e214fa6083f936b430a762c629656216805ac0220396f550692cd347171cbc1ef1f51e15282e837bb2b30860dc77c8f78bc8501e503473044022027dc95ad6b740fe5129e7e62a75dd00f291a2aeb1200b84b09d9e3789406b6c002201a9ecd315dd6a0e632ab20bbb98948bc0c6fb204f2c286963bb48517a7058e27034721026dccc749adc2a9d0d89497ac511f760f45c47dc5ed9cf352a58ac706453880aeadab210255a9626aebf5e29c0e6538428ba0d1dcf6ca98ffdf086aa8ced5e0d0215ea465ac00000000
 
 
 This example shows how unexecuted OP_CODESEPARATOR is processed, and SINGLE|ANYONECANPAY does not commit to the input index:
 
-  
-  
+
+
   The following is an unsigned transaction:
     0100000002e9b542c5176808107ff1df906f46bb1f2583b16112b95ee5380665ba7fcfc0010000000000ffffffff80e68831516392fcd100d186b3c2c7b95c80b53c77e77c35ba03a66b429a2a1b0000000000ffffffff0280969800000000001976a914de4b231626ef508c9a74a8517e6783c0546d6b2888ac80969800000000001976a9146648a8cd4531e1ec47f35916de8e259237294d1e88ac00000000
-  
+
     nVersion:  01000000
     txin:      02 e9b542c5176808107ff1df906f46bb1f2583b16112b95ee5380665ba7fcfc001 00000000 00 ffffffff
                   80e68831516392fcd100d186b3c2c7b95c80b53c77e77c35ba03a66b429a2a1b 00000000 00 ffffffff
     txout:     02 8096980000000000 1976a914de4b231626ef508c9a74a8517e6783c0546d6b2888ac
                   8096980000000000 1976a9146648a8cd4531e1ec47f35916de8e259237294d1e88ac
     nLockTime: 00000000
-  
+
   The first input comes from a native P2WSH witness program:
     scriptPubKey: 0020ba468eea561b26301e4cf69fa34bde4ad60c81e70f059f045ca9a79931004a4d value: 0.16777215
     witnessScript:0063ab68210392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98ac
                   0 IF CODESEPARATOR ENDIF <0392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98> CHECKSIG
-  
+
   The second input comes from a native P2WSH witness program:
     scriptPubKey: 0020d9bbfbe56af7c4b7f960a70d7ea107156913d9e5a26b0a71429df5e097ca6537 value: 0.16777215
     witnessScript:5163ab68210392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98ac
                   1 IF CODESEPARATOR ENDIF <0392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98> CHECKSIG
-  
+
   To sign it with a nHashType of 0x83 (SINGLE|ANYONECANPAY):
-  
+
     nVersion:     01000000
     hashPrevouts: 0000000000000000000000000000000000000000000000000000000000000000
     hashSequence: 0000000000000000000000000000000000000000000000000000000000000000
@@ -357,7 +357,7 @@ This example shows how unexecuted OP_CODESEPARATOR is processed, an
     hashOutputs:  (see below)
     nLockTime:    00000000
     nHashType:    83000000
-  
+
   outpoint:    e9b542c5176808107ff1df906f46bb1f2583b16112b95ee5380665ba7fcfc00100000000
   scriptCode:  270063ab68210392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98ac
                (since the OP_CODESEPARATOR is not executed, nothing is removed from the scriptCode)
@@ -367,7 +367,7 @@ This example shows how unexecuted OP_CODESEPARATOR is processed, an
   public key:  0392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98
   private key: f52b3484edd96598e02a9c89c4492e9c1e2031f471c49fd721fe68b3ce37780d
   signature:   3045022100f6a10b8604e6dc910194b79ccfc93e1bc0ec7c03453caaa8987f7d6c3413566002206216229ede9b4d6ec2d325be245c5b508ff0339bf1794078e20bfe0babc7ffe683
-  
+
   outpoint:    80e68831516392fcd100d186b3c2c7b95c80b53c77e77c35ba03a66b429a2a1b00000000
   scriptCode:  2468210392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98ac
                (everything up to the last executed OP_CODESEPARATOR, including that OP_CODESEPARATOR, are removed)
@@ -377,7 +377,7 @@ This example shows how unexecuted OP_CODESEPARATOR is processed, an
   public key:  0392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98
   private key: f52b3484edd96598e02a9c89c4492e9c1e2031f471c49fd721fe68b3ce37780d
   signature:   30440220032521802a76ad7bf74d0e2c218b72cf0cbc867066e2e53db905ba37f130397e02207709e2188ed7f08f4c952d9d13986da504502b8c3be59617e043552f506c46ff83
-  
+
   The serialized signed transaction is:
   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
     nVersion:  01000000
@@ -390,7 +390,7 @@ This example shows how unexecuted OP_CODESEPARATOR is processed, an
     witness    02 483045022100f6a10b8604e6dc910194b79ccfc93e1bc0ec7c03453caaa8987f7d6c3413566002206216229ede9b4d6ec2d325be245c5b508ff0339bf1794078e20bfe0babc7ffe683 270063ab68210392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98ac
                02 4730440220032521802a76ad7bf74d0e2c218b72cf0cbc867066e2e53db905ba37f130397e02207709e2188ed7f08f4c952d9d13986da504502b8c3be59617e043552f506c46ff83 275163ab68210392972e2eb617b2388771abe27235fd5ac44af8e61693261550447a4c3e39da98ac
     nLockTime: 00000000
-  
+
   Since SINGLE|ANYONECANPAY does not commit to the input index, the signatures are still valid when the input-output pairs are swapped:
   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
     nVersion:  01000000
@@ -408,37 +408,37 @@ This example shows how unexecuted OP_CODESEPARATOR is processed, an
 
 This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 different SIGHASH types.
 
-  
-  
+
+
   The following is an unsigned transaction: 010000000136641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e0100000000ffffffff0200e9a435000000001976a914389ffce9cd9ae88dcc0631e88a821ffdbe9bfe2688acc0832f05000000001976a9147480a33f950689af511e6e84c138dbbd3c3ee41588ac00000000
-  
+
     nVersion:  01000000
     txin:      01 36641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e 01000000 00 ffffffff
     txout:     02 00e9a43500000000 1976a914389ffce9cd9ae88dcc0631e88a821ffdbe9bfe2688ac
                   c0832f0500000000 1976a9147480a33f950689af511e6e84c138dbbd3c3ee41588ac
     nLockTime: 00000000
-  
+
   The input comes from a P2SH-P2WSH 6-of-6 multisig witness program:
     scriptPubKey : a9149993a429037b5d912407a71c252019287b8d27a587, value: 9.87654321
     redeemScript : 0020a16b5755f7f6f96dbd65f5f0d6ab9418b89af4b1f14a1bb8a09062c35f0dcb54
     witnessScript: 56210307b8ae49ac90a048e9b53357a2354b3334e9c8bee813ecb98e99a7e07e8c3ba32103b28f0c28bfab54554ae8c658ac5c3e0ce6e79ad336331f78c428dd43eea8449b21034b8113d703413d57761b8b9781957b8c0ac1dfe69f492580ca4195f50376ba4a21033400f6afecb833092a9a21cfdf1ed1376e58c5d1f47de74683123987e967a8f42103a6d48b1131e94ba04d9737d61acdaa1322008af9602b3b14862c07a1789aac162102d8b661b0b3302ee2f162b09e07a55ad5dfbe673a9f01d9f0c19617681024306b56ae
-  
+
   hashPrevouts:
     dSHA256(36641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e01000000)
   = 74afdc312af5183c4198a40ca3c1a275b485496dd3929bca388c4b5e31f7aaa0
-  
+
   hashSequence:
     dSHA256(ffffffff)
   = 3bb13029ce7b1f559ef5e747fcac439f1455a2ec7c5f09b72290795e70665044
-  
+
   hashOutputs for ALL:
     dSHA256(00e9a435000000001976a914389ffce9cd9ae88dcc0631e88a821ffdbe9bfe2688acc0832f05000000001976a9147480a33f950689af511e6e84c138dbbd3c3ee41588ac)
   = bc4d309071414bed932f98832b27b4d76dad7e6c1346f487a8fdbb8eb90307cc
-  
+
   hashOutputs for SINGLE:
     dSHA256(00e9a435000000001976a914389ffce9cd9ae88dcc0631e88a821ffdbe9bfe2688ac)
   = 9efe0c13a6b16c14a41b04ebe6a63f419bdacb2f8705b494a43063ca3cd4f708
-  
+
   hash preimage for ALL: 0100000074afdc312af5183c4198a40ca3c1a275b485496dd3929bca388c4b5e31f7aaa03bb13029ce7b1f559ef5e747fcac439f1455a2ec7c5f09b72290795e7066504436641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e01000000cf56210307b8ae49ac90a048e9b53357a2354b3334e9c8bee813ecb98e99a7e07e8c3ba32103b28f0c28bfab54554ae8c658ac5c3e0ce6e79ad336331f78c428dd43eea8449b21034b8113d703413d57761b8b9781957b8c0ac1dfe69f492580ca4195f50376ba4a21033400f6afecb833092a9a21cfdf1ed1376e58c5d1f47de74683123987e967a8f42103a6d48b1131e94ba04d9737d61acdaa1322008af9602b3b14862c07a1789aac162102d8b661b0b3302ee2f162b09e07a55ad5dfbe673a9f01d9f0c19617681024306b56aeb168de3a00000000ffffffffbc4d309071414bed932f98832b27b4d76dad7e6c1346f487a8fdbb8eb90307cc0000000001000000
     nVersion:     01000000
     hashPrevouts: 74afdc312af5183c4198a40ca3c1a275b485496dd3929bca388c4b5e31f7aaa0
@@ -454,7 +454,7 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
   public key:   0307b8ae49ac90a048e9b53357a2354b3334e9c8bee813ecb98e99a7e07e8c3ba3
   private key:  730fff80e1413068a05b57d6a58261f07551163369787f349438ea38ca80fac6
   signature:    304402206ac44d672dac41f9b00e28f4df20c52eeb087207e8d758d76d92c6fab3b73e2b0220367750dbbe19290069cba53d096f44530e4f98acaa594810388cf7409a1870ce01
-  
+
   hash preimage for NONE: 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
     nVersion:     01000000
     hashPrevouts: 74afdc312af5183c4198a40ca3c1a275b485496dd3929bca388c4b5e31f7aaa0
@@ -470,7 +470,7 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
   public key:     03b28f0c28bfab54554ae8c658ac5c3e0ce6e79ad336331f78c428dd43eea8449b
   private key:    11fa3d25a17cbc22b29c44a484ba552b5a53149d106d3d853e22fdd05a2d8bb3
   signature:      3044022068c7946a43232757cbdf9176f009a928e1cd9a1a8c212f15c1e11ac9f2925d9002205b75f937ff2f9f3c1246e547e54f62e027f64eefa2695578cc6432cdabce271502
-  
+
   hash preimage for SINGLE: 0100000074afdc312af5183c4198a40ca3c1a275b485496dd3929bca388c4b5e31f7aaa0000000000000000000000000000000000000000000000000000000000000000036641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e01000000cf56210307b8ae49ac90a048e9b53357a2354b3334e9c8bee813ecb98e99a7e07e8c3ba32103b28f0c28bfab54554ae8c658ac5c3e0ce6e79ad336331f78c428dd43eea8449b21034b8113d703413d57761b8b9781957b8c0ac1dfe69f492580ca4195f50376ba4a21033400f6afecb833092a9a21cfdf1ed1376e58c5d1f47de74683123987e967a8f42103a6d48b1131e94ba04d9737d61acdaa1322008af9602b3b14862c07a1789aac162102d8b661b0b3302ee2f162b09e07a55ad5dfbe673a9f01d9f0c19617681024306b56aeb168de3a00000000ffffffff9efe0c13a6b16c14a41b04ebe6a63f419bdacb2f8705b494a43063ca3cd4f7080000000003000000
     nVersion:     01000000
     hashPrevouts: 74afdc312af5183c4198a40ca3c1a275b485496dd3929bca388c4b5e31f7aaa0
@@ -486,7 +486,7 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
   public key:     034b8113d703413d57761b8b9781957b8c0ac1dfe69f492580ca4195f50376ba4a
   private key:    77bf4141a87d55bdd7f3cd0bdccf6e9e642935fec45f2f30047be7b799120661
   signature:      3044022059ebf56d98010a932cf8ecfec54c48e6139ed6adb0728c09cbe1e4fa0915302e022007cd986c8fa870ff5d2b3a89139c9fe7e499259875357e20fcbb15571c76795403
-  
+
   hash preimage for ALL|ANYONECANPAY: 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
     nVersion:     01000000
     hashPrevouts: 0000000000000000000000000000000000000000000000000000000000000000
@@ -502,7 +502,7 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
   public key:     033400f6afecb833092a9a21cfdf1ed1376e58c5d1f47de74683123987e967a8f4
   private key:    14af36970f5025ea3e8b5542c0f8ebe7763e674838d08808896b63c3351ffe49
   signature:      3045022100fbefd94bd0a488d50b79102b5dad4ab6ced30c4069f1eaa69a4b5a763414067e02203156c6a5c9cf88f91265f5a942e96213afae16d83321c8b31bb342142a14d16381
-  
+
   hash preimage for NONE|ANYONECANPAY: 010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e01000000cf56210307b8ae49ac90a048e9b53357a2354b3334e9c8bee813ecb98e99a7e07e8c3ba32103b28f0c28bfab54554ae8c658ac5c3e0ce6e79ad336331f78c428dd43eea8449b21034b8113d703413d57761b8b9781957b8c0ac1dfe69f492580ca4195f50376ba4a21033400f6afecb833092a9a21cfdf1ed1376e58c5d1f47de74683123987e967a8f42103a6d48b1131e94ba04d9737d61acdaa1322008af9602b3b14862c07a1789aac162102d8b661b0b3302ee2f162b09e07a55ad5dfbe673a9f01d9f0c19617681024306b56aeb168de3a00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000082000000
     nVersion:     01000000
     hashPrevouts: 0000000000000000000000000000000000000000000000000000000000000000
@@ -518,7 +518,7 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
   public key:     03a6d48b1131e94ba04d9737d61acdaa1322008af9602b3b14862c07a1789aac16
   private key:    fe9a95c19eef81dde2b95c1284ef39be497d128e2aa46916fb02d552485e0323
   signature:      3045022100a5263ea0553ba89221984bd7f0b13613db16e7a70c549a86de0cc0444141a407022005c360ef0ae5a5d4f9f2f87a56c1546cc8268cab08c73501d6b3be2e1e1a8a0882
-  
+
   hash preimage for SINGLE|ANYONECANPAY: 010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036641869ca081e70f394c6948e8af409e18b619df2ed74aa106c1ca29787b96e01000000cf56210307b8ae49ac90a048e9b53357a2354b3334e9c8bee813ecb98e99a7e07e8c3ba32103b28f0c28bfab54554ae8c658ac5c3e0ce6e79ad336331f78c428dd43eea8449b21034b8113d703413d57761b8b9781957b8c0ac1dfe69f492580ca4195f50376ba4a21033400f6afecb833092a9a21cfdf1ed1376e58c5d1f47de74683123987e967a8f42103a6d48b1131e94ba04d9737d61acdaa1322008af9602b3b14862c07a1789aac162102d8b661b0b3302ee2f162b09e07a55ad5dfbe673a9f01d9f0c19617681024306b56aeb168de3a00000000ffffffff9efe0c13a6b16c14a41b04ebe6a63f419bdacb2f8705b494a43063ca3cd4f7080000000083000000
     nVersion:     01000000
     hashPrevouts: 0000000000000000000000000000000000000000000000000000000000000000
@@ -534,7 +534,7 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
   public key:     02d8b661b0b3302ee2f162b09e07a55ad5dfbe673a9f01d9f0c19617681024306b
   private key:    428a7aee9f0c2af0cd19af3cf1c78149951ea528726989b2e83e4778d2c3f890
   signature:      30440220525406a1482936d5a21888260dc165497a90a15669636d8edca6b9fe490d309c022032af0c646a34a44d1f4576bf6a4a74b67940f8faa84c7df9abe12a01a11e2b4783
-  
+
   The serialized signed transaction is: 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
 
 
@@ -542,35 +542,35 @@ This example is a P2SH-P2WSH 6-of-6 multisig witness program signed with 6 diffe
 
 These examples show that FindAndDelete for the signature is not applied. The transactions are generated in an unconventional way. Instead of signing using a private key, the signatures are pre-determined as part of witnessScript. The public keys are generated with key recovery, using the fixed signatures and the sighash defined in this proposal. Therefore, the private keys are unknown.
 
-  
+
   The following is an unsigned transaction: 010000000169c12106097dc2e0526493ef67f21269fe888ef05c7a3a5dacab38e1ac8387f14c1d000000ffffffff0101000000000000000000000000
-  
+
     nVersion:  01000000
     txin:      01 69c12106097dc2e0526493ef67f21269fe888ef05c7a3a5dacab38e1ac8387f1 4c1d0000 00 ffffffff
     txout:     01 0100000000000000 00
     nLockTime: 00000000
-  
+
   The input comes from a P2WSH witness program:
     scriptPubKey : 00209e1be07558ea5cc8e02ed1d80c0911048afad949affa36d5c3951e3159dbea19, value: 0.00200000
     redeemScript : OP_CHECKSIGVERIFY <0x30450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e01>
                    ad4830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e01
-  
+
   To sign it with a nHashType of 1 (SIGHASH_ALL):
-  
+
   hashPrevouts:
     dSHA256(69c12106097dc2e0526493ef67f21269fe888ef05c7a3a5dacab38e1ac8387f14c1d0000)
   = b67c76d200c6ce72962d919dc107884b9d5d0e26f2aea7474b46a1904c53359f
-  
+
   hashSequence:
     dSHA256(ffffffff)
   = 3bb13029ce7b1f559ef5e747fcac439f1455a2ec7c5f09b72290795e70665044
-  
+
   hashOutputs:
     dSHA256(010000000000000000)
   = e5d196bfb21caca9dbd654cafb3b4dc0c4882c8927d2eb300d9539dd0b934228
-  
+
   hash preimage: 01000000b67c76d200c6ce72962d919dc107884b9d5d0e26f2aea7474b46a1904c53359f3bb13029ce7b1f559ef5e747fcac439f1455a2ec7c5f09b72290795e7066504469c12106097dc2e0526493ef67f21269fe888ef05c7a3a5dacab38e1ac8387f14c1d00004aad4830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e01400d030000000000ffffffffe5d196bfb21caca9dbd654cafb3b4dc0c4882c8927d2eb300d9539dd0b9342280000000001000000
-  
+
     nVersion:     01000000
     hashPrevouts: b67c76d200c6ce72962d919dc107884b9d5d0e26f2aea7474b46a1904c53359f
     hashSequence: 3bb13029ce7b1f559ef5e747fcac439f1455a2ec7c5f09b72290795e70665044
@@ -581,11 +581,11 @@ These examples show that FindAndDelete for the signature is not app
     hashOutputs:  e5d196bfb21caca9dbd654cafb3b4dc0c4882c8927d2eb300d9539dd0b934228
     nLockTime:    00000000
     nHashType:    01000000
-  
+
   sigHash:      71c9cd9b2869b9c70b01b1f0360c148f42dee72297db312638df136f43311f23
   signature:    30450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e 01
   pubkey:       02a9781d66b61fb5a7ef00ac5ad5bc6ffc78be7b44a566e3c87870e1079368df4c
-  
+
   The serialized signed transaction is: 0100000000010169c12106097dc2e0526493ef67f21269fe888ef05c7a3a5dacab38e1ac8387f14c1d000000ffffffff01010000000000000000034830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e012102a9781d66b61fb5a7ef00ac5ad5bc6ffc78be7b44a566e3c87870e1079368df4c4aad4830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e0100000000
 
     nVersion:  01000000
@@ -597,11 +597,11 @@ These examples show that FindAndDelete for the signature is not app
                   2102a9781d66b61fb5a7ef00ac5ad5bc6ffc78be7b44a566e3c87870e1079368df4c
                   4aad4830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e01
     nLockTime: 00000000
-  
 
-  
+
+
   The following transaction is a OP_CHECKMULTISIGVERIFY version of the FindAndDelete examples: 010000000001019275cb8d4a485ce95741c013f7c0d28722160008021bb469a11982d47a6628964c1d000000ffffffff0101000000000000000007004830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e0148304502205286f726690b2e9b0207f0345711e63fa7012045b9eb0f19c2458ce1db90cf43022100e89f17f86abc5b149eba4115d4f128bcf45d77fb3ecdd34f594091340c0395960101022102966f109c54e85d3aee8321301136cedeb9fc710fdef58a9de8a73942f8e567c021034ffc99dd9a79dd3cb31e2ab3e0b09e0e67db41ac068c625cd1f491576016c84e9552af4830450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e0148304502205286f726690b2e9b0207f0345711e63fa7012045b9eb0f19c2458ce1db90cf43022100e89f17f86abc5b149eba4115d4f128bcf45d77fb3ecdd34f594091340c039596017500000000
-  
+
   redeemScript:  OP_2 OP_CHECKMULTISIGVERIFY <30450220487fb382c4974de3f7d834c1b617fe15860828c7f96454490edd6d891556dcc9022100baf95feb48f845d5bfc9882eb6aeefa1bc3790e39f59eaa46ff7f15ae626c53e01> <304502205286f726690b2e9b0207f0345711e63fa7012045b9eb0f19c2458ce1db90cf43022100e89f17f86abc5b149eba4115d4f128bcf45d77fb3ecdd34f594091340c03959601>
   hash preimage: 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
   sighash:       c1628a1e7c67f14ca0c27c06e4fdeec2e6d1a73c7a91d7c046ff83e835aebb72
@@ -618,7 +618,7 @@ The new serialization format is described in BIP144 [[bip-0144.mediawiki|BI
 
 == Deployment ==
 
-This proposal is deployed with Segregated Witness softfork (BIP 141) 
+This proposal is deployed with Segregated Witness softfork (BIP 141)
 
 == Backward compatibility ==
 
diff --git a/bip-0144.mediawiki b/bip-0144.mediawiki
index 8ec2191c..56e075a4 100644
--- a/bip-0144.mediawiki
+++ b/bip-0144.mediawiki
@@ -79,7 +79,7 @@ The serialization has the following structure:
 
 Parsers supporting this BIP will be able to distinguish between the old serialization format (without the witness) and this one. The marker byte is set to zero so that this structure will never parse as a valid transaction in a parser that does not support this BIP. If parsing were to succeed, such a transaction would contain no inputs and a single output.
 
-If the witness is empty, the old serialization format must be used. 
+If the witness is empty, the old serialization format must be used.
 
 Currently, the only witness objects type supported are script witnesses which consist of a stack of byte arrays. It is encoded as a var_int item count followed by each item encoded as a var_int length followed by a string of bytes. Each txin has its own script witness. The number of script witnesses is not explicitly encoded as it is implied by txin_count. Empty script witnesses are encoded as a zero byte. The order of the script witnesses follows the same order as the associated txins.
 
diff --git a/bip-0154.mediawiki b/bip-0154.mediawiki
index c1e4cdb5..cf8f9562 100644
--- a/bip-0154.mediawiki
+++ b/bip-0154.mediawiki
@@ -71,7 +71,7 @@ solve the challenge and reconnect, or discard it and find a different peer (or w
 
 There are two POW identifiers currently. When a new identifier is introduced, it should be added with an increment of 1
 to the last identifier in the list. When an identifier is deprecated, its status should be changed to Deprecated but it should
-retain its place in the list indefinitely. 
+retain its place in the list indefinitely.
 
 {|class="wikitable"
 ! ID !! Algorithm Name !! Work !! Param size !! Solution size !! Provably Secure !! SPH Resistance !! Status
@@ -173,7 +173,7 @@ Additional notes:
 There is only one Purpose Identifier currently. In the future, more Purpose Identifiers could be added for at-DoS-risk operations,
 such as bloom filters. When a new identifier is introduced, it should be added with an increment of 1 to the last identifier in the
 list. When an identifier is deprecated, its status should be changed to Deprecated but it should retain its place in
-the list indefinitely. 
+the list indefinitely.
 
 {|class="wikitable"
 ! ID !! Purpose Name !! Description !! Status
@@ -236,7 +236,7 @@ Normally mid-layer (all but the last) POW algorithms have a zero-length input. E
 |-
 | 1..4 || pow-id || 1 || sha256
 |-
-| 5 || pow-params (config_length) || 9 || 
+| 5 || pow-params (config_length) || 9 ||
 |-
 | 6..9 || pow-params (target) || 0x207fffff || Resulting hash must be <= the compact hash 0x207fffff*
 |-
@@ -248,7 +248,7 @@ Normally mid-layer (all but the last) POW algorithms have a zero-length input. E
 |-
 | 19..22 || pow-id || 2 || cuckoo-cycle
 |-
-| 23 || pow-params (config_length) || 8 || 
+| 23 || pow-params (config_length) || 8 ||
 |-
 | 24 || pow-params (sizeshift) || 28
 |-
diff --git a/bip-0155.mediawiki b/bip-0155.mediawiki
index 0ec68019..bef289a6 100644
--- a/bip-0155.mediawiki
+++ b/bip-0155.mediawiki
@@ -44,7 +44,7 @@ interpreted as described in RFC 2119[https://tools.ietf.org/html/rfc2119 RF
 
 The addrv2 message is defined as a message where pchCommand == "addrv2".
 It is serialized in the standard encoding for P2P messages.
-Its format is similar to the current addr message format, with the difference that the 
+Its format is similar to the current addr message format, with the difference that the
 fixed 16-byte IP address is replaced by a network ID and a variable-length address, and the services format has been changed to [https://en.bitcoin.it/wiki/Protocol_documentation#Variable_length_integer CompactSize].
 
 This means that the message contains a serialized std::vector of the following structure:
diff --git a/bip-0156.mediawiki b/bip-0156.mediawiki
index dcfed1f6..3fa486a2 100644
--- a/bip-0156.mediawiki
+++ b/bip-0156.mediawiki
@@ -109,7 +109,7 @@ Figure 3
 
 To avoid this issue, we suggest "per-inbound-edge" routing. Each inbound peer is
 assigned a particular Dandelion destination. Each Dandelion transaction that
-arrives via this peer is forwarded to the same Dandelion destination. 
+arrives via this peer is forwarded to the same Dandelion destination.
 Per-inbound-edge routing breaks the described attack by blocking an adversary's
 ability to construct useful fingerprints. Fingerprints arise when routing
 decisions are made independently per transaction at each node. In this case, two
diff --git a/bip-0159.mediawiki b/bip-0159.mediawiki
index 365aee16..a659e726 100644
--- a/bip-0159.mediawiki
+++ b/bip-0159.mediawiki
@@ -50,7 +50,7 @@ Pruned peers following this BIP may consume more outbound bandwidth.
 
 Light clients (and such) who are not checking the nServiceFlags (service bits) from a relayed addr-message may unwillingly connect to a pruned peer and ask for (filtered) blocks at a depth below their pruned depth. Light clients should therefore check the service bits (and eventually connect to peers signaling NODE_NETWORK_LIMITED if they require [filtered] blocks around the tip). Light clients obtaining peer IPs though DNS seed should use the DNS filtering option.
 
-== Compatibility == 
+== Compatibility ==
 
 This proposal is backward compatible.
 
diff --git a/bip-0174.mediawiki b/bip-0174.mediawiki
index 94a52f2d..8509f97d 100644
--- a/bip-0174.mediawiki
+++ b/bip-0174.mediawiki
@@ -881,7 +881,7 @@ If a field requires significant description as to its usage, it should be accomp
 The field must be added to the field listing tables in the Specification section.
 Although some PSBT version 0 implementations encode types as uint8_t rather than compact size,
 it is still safe to add >0xFD fields to PSBT 0, because these old parsers ignore
-unknown fields, and  is prefixed by its length. 
+unknown fields, and  is prefixed by its length.
 
 ===Procedure For New Versions===
 
diff --git a/bip-0176.mediawiki b/bip-0176.mediawiki
index 2f5ee9f9..bfce9a22 100644
--- a/bip-0176.mediawiki
+++ b/bip-0176.mediawiki
@@ -48,7 +48,7 @@ The term "bit" has many different definitions, but the ones of particular note a
 * bit meaning some amount of data (e.g., the first bit of the version field is 0)
 * bit meaning strength of a cryptographic algorithm (e.g., 256-bit ECDSA is used in Bitcoin)
 
-The first is a bit dated and isn't likely to confuse people dealing with Bitcoin. The second and third are computer science terms and context should be sufficient to figure out what the user of the word means. 
+The first is a bit dated and isn't likely to confuse people dealing with Bitcoin. The second and third are computer science terms and context should be sufficient to figure out what the user of the word means.
 
 == Copyright ==
 This BIP is licensed under the BSD 2-clause license.
diff --git a/bip-0199.mediawiki b/bip-0199.mediawiki
index e463c7f7..04a1d0ae 100644
--- a/bip-0199.mediawiki
+++ b/bip-0199.mediawiki
@@ -19,13 +19,13 @@ This BIP describes a script for generalized off-chain contract negotiation.
 
 ==Summary==
 
-A Hashed Time-Locked Contract (HTLC) is a script that permits a designated party (the "seller") to spend funds by disclosing the preimage of a hash.  It also permits 
+A Hashed Time-Locked Contract (HTLC) is a script that permits a designated party (the "seller") to spend funds by disclosing the preimage of a hash.  It also permits
 a second party (the "buyer") to spend the funds after a timeout is reached, in a refund situation.
 
 The script takes the following form:
 
     OP_IF
-        [HASHOP]  OP_EQUALVERIFY OP_DUP OP_HASH160             
+        [HASHOP]  OP_EQUALVERIFY OP_DUP OP_HASH160 
     OP_ELSE
          [TIMEOUTOP] OP_DROP OP_DUP OP_HASH160 
     OP_ENDIF
@@ -44,28 +44,28 @@ The script takes the following form:
 ** Peggy spends the funds, and in doing so, reveals the preimage to Victor in the transaction; OR
 ** Victor recovers the funds after the timeout threshold.
 
-Victor is interested in a lower timeout to reduce the amount of time that his funds are encumbered in the event that Peggy does not reveal the preimage.  Peggy is 
-interested in a higher timeout to reduce the risk that she is unable to spend the funds before the threshold, or worse, that her transaction spending the funds does 
+Victor is interested in a lower timeout to reduce the amount of time that his funds are encumbered in the event that Peggy does not reveal the preimage.  Peggy is
+interested in a higher timeout to reduce the risk that she is unable to spend the funds before the threshold, or worse, that her transaction spending the funds does
 not enter the blockchain before Victor's but does reveal the preimage to Victor anyway.
 
 ==Motivation==
 
-In many off-chain protocols, secret disclosure is used as part of a settlement mechanism.  In some others, the secrets themselves are valuable.  HTLC transactions are 
-a safe and cheap method of exchanging secrets for money over the blockchain, due to the ability to recover funds from an uncooperative counterparty, and the 
+In many off-chain protocols, secret disclosure is used as part of a settlement mechanism.  In some others, the secrets themselves are valuable.  HTLC transactions are
+a safe and cheap method of exchanging secrets for money over the blockchain, due to the ability to recover funds from an uncooperative counterparty, and the
 opportunity that the possessor of a secret has to receive the funds before such a refund can occur.
 
 ===Lightning network===
 
 In the lightning network, HTLC scripts are used to perform atomic swaps between payment channels.
 
-Alice constructs K and hashes it to produce L.  She sends an HTLC payment to Bob for the preimage of L.  Bob sends an HTLC payment to Carol for the same preimage and 
-amount.  Only when Alice releases the preimage K does any exchange of value occur, and because the secret is divulged for each hop, all parties are compensated.  If 
+Alice constructs K and hashes it to produce L.  She sends an HTLC payment to Bob for the preimage of L.  Bob sends an HTLC payment to Carol for the same preimage and
+amount.  Only when Alice releases the preimage K does any exchange of value occur, and because the secret is divulged for each hop, all parties are compensated.  If
 at any point some parties become uncooperative, the process can be aborted via the refund conditions.
 
 ===Zero-knowledge contingent payments===
 
-Various practical zero-knowledge proving systems exist which can be used to guarantee that a hash preimage derives valuable information.  As an example, a 
-zero-knowledge proof can be used to prove that a hash preimage acts as a decryption key for an encrypted sudoku puzzle solution.  (See 
+Various practical zero-knowledge proving systems exist which can be used to guarantee that a hash preimage derives valuable information.  As an example, a
+zero-knowledge proof can be used to prove that a hash preimage acts as a decryption key for an encrypted sudoku puzzle solution.  (See
 [https://github.com/zcash/pay-to-sudoku pay-to-sudoku] for a concrete example of such a protocol.)
 
 HTLC transactions can be used to exchange such decryption keys for money without risk, and they do not require large or expensive-to-validate transactions.
diff --git a/bip-0300.mediawiki b/bip-0300.mediawiki
index e5048e75..fb2070ac 100644
--- a/bip-0300.mediawiki
+++ b/bip-0300.mediawiki
@@ -213,7 +213,7 @@ M2 is invalid if:
 * An M2 is already in this block.
 * It tries to ACK two different M1s for the same slot.
 
-Otherwise: 
+Otherwise:
 
 * The sidechain is "ACK"ed and does NOT get a "fail" for this block. (As it otherwise would.)
 
@@ -242,7 +242,7 @@ Sidechain withdrawals take the form of "Bundles" -- named because they "bundle u
 
 Sidechain full nodes aggregate the withdrawal-requests into a big set. The sidechain calculates what M6 would have to look like, to pay all of these withdrawal-requests out. Finally, the sidechain calculates what the hash of this M6 would be. This 32-byte hash identifies the Bundle.
 
-This 32-byte hash is what miners will be slowly ACKing over 3-6 months, not the M6 itself (nor any sidechain data, of course). 
+This 32-byte hash is what miners will be slowly ACKing over 3-6 months, not the M6 itself (nor any sidechain data, of course).
 
 A bundle either pays all its withdrawals out (via M6), or else it fails (and pays nothing out).
 
@@ -283,7 +283,7 @@ M4 is a coinbase OP Return output containing the following:
     1-byte - Version
     n-byte - The "upvote vector" -- describes which bundle-choice is "upvoted", for each sidechain.
 
-The upvote vector will code "abstain" as 0xFF (or 0xFFFF); it will code "alarm" as 0xFE (or 0xFFFE). Otherwise it simply indicates which withdrawal-bundle in the list, is the one to be "upvoted". 
+The upvote vector will code "abstain" as 0xFF (or 0xFFFF); it will code "alarm" as 0xFE (or 0xFFFE). Otherwise it simply indicates which withdrawal-bundle in the list, is the one to be "upvoted".
 
 For example: if there are two sidechains, and we wish to upvote the 7th bundle on sidechain #1 plus the 4th bundle on sidechain #2, then the upvote vector would be { 07, 04 }. And M4 would be [0x6A,D77D1776,00,0006,0003].
 
@@ -313,7 +313,7 @@ Important: Within a sidechain-group, upvoting one Bundle ("+1") automatically do
 
 For example:
 
-{| class="wikitable" 
+{| class="wikitable"
 |-
 ! SC#
 ! Bundle Hash
@@ -350,7 +350,7 @@ For example:
 ...in block 900,000 could become...
 
 
-{| class="wikitable" 
+{| class="wikitable"
 |-
 ! SC#
 ! Bundle Hash
@@ -414,7 +414,7 @@ M6 is invalid if:
 * The txn fee of M6 is NOT exactly equal to the amount of the previous bullet point.
 * There are additional OP_DRIVECHAIN outputs after the first one.
 
-Else, M6 is valid. 
+Else, M6 is valid.
 
 (The point of the latter two bullet points, is to allow the bundle hash to cover the L1 transaction fee.)
 
@@ -485,7 +485,7 @@ As a soft fork, older software will continue to operate without modification. No
 
 ==Deployment==
 
-This BIP will be deployed via UASF-style block height activation. Block height TBD. 
+This BIP will be deployed via UASF-style block height activation. Block height TBD.
 
 
 ==Reference Implementation==
diff --git a/bip-0301.mediawiki b/bip-0301.mediawiki
index 966db25a..dc3eb15e 100644
--- a/bip-0301.mediawiki
+++ b/bip-0301.mediawiki
@@ -89,7 +89,7 @@ So we will discuss:
 
 === h* ===
 
-h* ("h star") is the sidechain's Merkle Root hash. 
+h* ("h star") is the sidechain's Merkle Root hash.
 
 In Bip301, a sidechain's coinbase txn acts as a header (it contains the hash of the previous side:block, and previous main:block). Thus, the MerkleRoot contains everything important.
 
diff --git a/bip-0329.mediawiki b/bip-0329.mediawiki
index fc5da425..13b332b0 100644
--- a/bip-0329.mediawiki
+++ b/bip-0329.mediawiki
@@ -39,8 +39,8 @@ The Electrum wallet imports and exports address and transaction labels in a JSON
 
 ==Specification==
 
-In order to be lightweight, human readable and well structured, this BIP uses a JSON format. 
-Further, the JSON Lines format is used (also called newline-delimited JSON)[https://jsonlines.org/ jsonlines.org]. 
+In order to be lightweight, human readable and well structured, this BIP uses a JSON format.
+Further, the JSON Lines format is used (also called newline-delimited JSON)[https://jsonlines.org/ jsonlines.org].
 This allows a document to be split, streamed, or incrementally added to, and limits the potential for formatting errors to invalidate an entire import.
 It is also a convenient format for command-line processing, which is often line-oriented.
 
@@ -48,7 +48,7 @@ Further to the JSON Lines specification, an export of labels from a wallet must
 Lines are separated by \n. Multiline values are not permitted.
 Each JSON object must contain 3 or 4 key/value pairs, defined as follows:
 
-{| class="wikitable" 
+{| class="wikitable"
 |-
 ! Key
 ! Description
@@ -71,7 +71,7 @@ Each JSON object must contain 3 or 4 key/value pairs, defined as follows:
 
 The reference is defined for each type as follows:
 
-{| class="wikitable" 
+{| class="wikitable"
 |-
 ! Type
 ! Description
@@ -107,7 +107,7 @@ Each JSON object must contain both type and ref properties. Th
 If present, the optional origin property must contain an abbreviated output descriptor (as defined by BIP380[https://github.com/bitcoin/bips/blob/master/bip-0380.mediawiki BIP-0380]) describing a BIP32 compatible originating wallet, including all key origin information but excluding any actual keys, any child path elements, or a checksum.
 This property should be used to disambiguate transaction labels from different wallets contained in the same export, particularly when exporting multiple accounts derived from the same seed.
 
-Care should be taken when exporting due to the privacy sensitive nature of the data. 
+Care should be taken when exporting due to the privacy sensitive nature of the data.
 Encryption in transit over untrusted networks is highly recommended, and encryption at rest should also be considered.
 Unencrypted exports should be deleted as soon as possible.
 For security reasons no private key types are defined.
@@ -120,7 +120,7 @@ For security reasons no private key types are defined.
 
 ==Backwards Compatibility==
 
-The nature of this format makes it naturally extensible to handle other record types. 
+The nature of this format makes it naturally extensible to handle other record types.
 However, importing wallets complying to this specification may ignore types not defined here.
 
 ==Test Vectors==
diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki
index 85b7bac4..d26f8b44 100644
--- a/bip-0340.mediawiki
+++ b/bip-0340.mediawiki
@@ -58,7 +58,7 @@ encodings and operations.
 # Signatures are pairs ''(e, s)'' that satisfy ''e = hash(s⋅G - e⋅P || m)''. This variant avoids minor complexity introduced by the encoding of the point ''R'' in the signature (see paragraphs "Encoding R and public key point P" and "Implicit Y coordinates" further below in this subsection). Moreover, revealing ''e'' instead of ''R'' allows for potentially shorter signatures: Whereas an encoding of ''R'' inherently needs about 32 bytes, the hash ''e'' can be tuned to be shorter than 32 bytes, and [http://www.neven.org/papers/schnorr.pdf a short hash of only 16 bytes suffices to provide SUF-CMA security at the target security level of 128 bits]. However, a major drawback of this optimization is that finding collisions in a short hash function is easy. This complicates the implementation of secure signing protocols in scenarios in which a group of mutually distrusting signers work together to produce a single joint signature (see Applications below). In these scenarios, which are not captured by the SUF-CMA model due its assumption of a single honest signer, a promising attack strategy for malicious co-signers is to find a collision in the hash function in order to obtain a valid signature on a message that an honest co-signer did not intend to sign.
 # Signatures are pairs ''(R, s)'' that satisfy ''s⋅G = R + hash(R || m)⋅P''. This supports batch verification, as there are no elliptic curve operations inside the hashes. Batch verification enables significant speedups.The speedup that results from batch verification can be demonstrated with the cryptography library [https://github.com/jonasnick/secp256k1/blob/schnorrsig-batch-verify/doc/speedup-batch.md libsecp256k1].
 
-Since we would like to avoid the fragility that comes with short hashes, the ''e'' variant does not provide significant advantages. We choose the ''R''-option, which supports batch verification. 
+Since we would like to avoid the fragility that comes with short hashes, the ''e'' variant does not provide significant advantages. We choose the ''R''-option, which supports batch verification.
 
 '''Key prefixing''' Using the verification rule above directly makes Schnorr signatures vulnerable to "related-key attacks" in which a third party can convert a signature ''(R, s)'' for public key ''P'' into a signature ''(R, s + a⋅hash(R || m))'' for public key ''P + a⋅G'' and the same message ''m'', for any given additive tweak ''a'' to the signing key. This would render signatures insecure when keys are generated using [[bip-0032.mediawiki#public-parent-key--public-child-key|BIP32's unhardened derivation]] and other methods that rely on additive tweaks to existing keys such as Taproot.
 
diff --git a/bip-0343.mediawiki b/bip-0343.mediawiki
index a47edc05..cab5cb70 100644
--- a/bip-0343.mediawiki
+++ b/bip-0343.mediawiki
@@ -19,7 +19,7 @@ This document specifies a BIP8 (LOT=true) deployment to activate taproot.
 
 ==Motivation==
 
-The Taproot soft fork upgrade has been assessed to have overwhelming community consensus and hence should attempt to be activated. Lessons have been learned from the BIP148 and BIP91 deployments in 2017 with regards to giving many months of advance warning before the mandatory signaling is attempted. The mandatory signaling is only required if miners have failed to meet the signaling threshold during the BIP8 deployment. It is important that mandatory signaling is included as without it miners would effectively have the ability to indefinitely block the activation of a soft fork with overwhelming consensus. 
+The Taproot soft fork upgrade has been assessed to have overwhelming community consensus and hence should attempt to be activated. Lessons have been learned from the BIP148 and BIP91 deployments in 2017 with regards to giving many months of advance warning before the mandatory signaling is attempted. The mandatory signaling is only required if miners have failed to meet the signaling threshold during the BIP8 deployment. It is important that mandatory signaling is included as without it miners would effectively have the ability to indefinitely block the activation of a soft fork with overwhelming consensus.
 
 ==Specification==
 
diff --git a/bip-0345.mediawiki b/bip-0345.mediawiki
index bc12f047..12980c47 100644
--- a/bip-0345.mediawiki
+++ b/bip-0345.mediawiki
@@ -52,23 +52,23 @@ A common configuration for an individual custodying Bitcoin is "single
 signature and passphrase" using a hardware wallet. A user with such a
 configuration might be concerned about the risk associated with relying on a
 single manufacturer for key management, as well as physical access to the
-hardware. 
+hardware.
 
 This individual can use OP_VAULT to make use of a highly secure
 key as the unlikely recovery path, while using their existing signing procedure
-as the withdrawal trigger key with a configured spend delay of e.g. 1 day. 
+as the withdrawal trigger key with a configured spend delay of e.g. 1 day.
 
 The recovery path key can be of a highly secure nature that might otherwise
 make it impractical for daily use. For example, the key could be generated in
 some analog fashion, or on an old computer that is then destroyed, with the
 private key replicated only in paper form. Or the key could be a 2-of-3
 multisig using devices from different manufacturers. Perhaps the key is
-geographically or socially distributed. 
+geographically or socially distributed.
 
 Since it can be any Bitcoin script policy, the recovery key can include a
 number of spending conditions, e.g. a time-delayed fallback to an "easier"
 recovery method, in case the highly secure key winds up being ''too'' highly
-secure. 
+secure.
 
 The user can run software on their mobile device that monitors the blockchain
 for spends of the vault outpoints. If the vaulted coins move in an unexpected
@@ -80,7 +80,7 @@ Institutional custodians of Bitcoin may use vaults in similar fashion.
 
 ===== Provable timelocks =====
 
-This proposal provides a mitigation to the 
+This proposal provides a mitigation to the
 [https://web.archive.org/web/20230210123933/https://xkcd.com/538/ "$5 wrench attack."] By
 setting the spend delay to, say, a week, and using as the recovery path a
 script that enforces a longer relative timelock, the owner of the vault can
@@ -95,7 +95,7 @@ timelocked coins for perpetuity or relying on a trusted third party.
 Vaults in Bitcoin have been discussed formally since 2016
 ([http://fc16.ifca.ai/bitcoin/papers/MES16.pdf MES16]) and informally since [https://web.archive.org/web/20160220215151/https://bitcointalk.org/index.php?topic=511881.0 2014]. The value of
 having a configurable delay period with recovery capability in light of an
-unexpected spend has been widely recognized. 
+unexpected spend has been widely recognized.
 
 The only way to implement vaults given the existing consensus rules, aside from
 [https://github.com/revault emulating vaults with large multisig
@@ -114,7 +114,7 @@ Unfortunately, this approach has a number of practical shortcomings:
 
 The deployment of a "precomputed" covenant mechanism like
 [https://github.com/bitcoin/bips/blob/master/bip-0119.mediawiki OP_CHECKTEMPLATEVERIFY] or
-[https://github.com/bitcoin/bips/blob/master/bip-0118.mediawiki SIGHASH_ANYPREVOUT] 
+[https://github.com/bitcoin/bips/blob/master/bip-0118.mediawiki SIGHASH_ANYPREVOUT]
 would both remove the necessity to use an ephemeral key, since the
 covenant is enforced on-chain, and lessen the burden of sensitive data storage,
 since the necessary transactions can be generated from a set of compact
@@ -141,7 +141,7 @@ operational overhead using a specialized covenant.
 
 The design goals of the proposal are:
 
-* '''efficient reuse of an existing vault configuration.''''''Why does this support address reuse?''' The proposal doesn't rely on or encourage address reuse, but certain uses are unsafe if address reuse cannot be handled - for example, if a custodian gives its users a vault address to deposit to, it cannot enforce that those users make a single deposit for each address. A single vault configuration, whether the same literal scriptPubKey or not, should be able to “receive” multiple deposits. 
+* '''efficient reuse of an existing vault configuration.''''''Why does this support address reuse?''' The proposal doesn't rely on or encourage address reuse, but certain uses are unsafe if address reuse cannot be handled - for example, if a custodian gives its users a vault address to deposit to, it cannot enforce that those users make a single deposit for each address. A single vault configuration, whether the same literal scriptPubKey or not, should be able to “receive” multiple deposits.
 
 * '''batched operations''' for recovery and withdrawal to allow managing multiple vault coins efficiently.
 
@@ -163,7 +163,7 @@ In typical usage, a vault is created by encumbering coins under a
 taptree [https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki (BIP-341)]
 containing at least two leaves: one with an OP_VAULT-containing script that
 facilitates the expected withdrawal process, and another leaf with
-OP_VAULT_RECOVER which ensures the coins can be recovered 
+OP_VAULT_RECOVER which ensures the coins can be recovered
 at any time prior to withdrawal finalization.
 
 The rules of OP_VAULT ensure the timelocked, interruptible
@@ -172,7 +172,7 @@ withdrawal by allowing a spending transaction to replace the
 some parameters to be set at spend (trigger) time. All other leaves in the
 taptree must be unchanged in the destination output, which preserves the recovery path as well as any
 other spending conditions originally included in the vault. This is similar to
-the TAPLEAF_UPDATE_VERIFY design that was proposed 
+the TAPLEAF_UPDATE_VERIFY design that was proposed
 [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-September/019419.html in 2021].
 
 These tapleaf replacement rules, described more precisely below, ensure a
@@ -205,14 +205,14 @@ The vault has a number of stages, some of them optional:
 === Fee management ===
 
 A primary consideration of this proposal is how fee management is handled.
-Providing dynamic fee management is critical to the operation of a vault, since 
+Providing dynamic fee management is critical to the operation of a vault, since
 
 * precalculated fees are prone to making transactions unconfirmable in high fee environments, and
 * a fee wallet that is prespecified might be compromised or lost before use.
 
 But dynamic fee management can introduce
 [https://bitcoinops.org/en/topics/transaction-pinning/ pinning vectors]. Care
-has been taken to avoid unnecessarily introducing these vectors when using the new 
+has been taken to avoid unnecessarily introducing these vectors when using the new
 destination-based spending policies that this proposal introduces.
 
 Originally, this proposal had a hard dependency on reformed transaction
@@ -237,7 +237,7 @@ When evaluating OP_VAULT (OP_SUCCESS187,
 
 
 [  leaf-update script data items ... ]
- 
+
 
 
 
@@ -413,10 +413,10 @@ that contains a taptree of the form
 
 tr(,
   leaves = {
-    recover: 
+    recover:
        OP_VAULT_RECOVER,
 
-    trigger: 
+    trigger:
        OP_CHECKSIGVERIFY                     (i)
        2 $leaf-update-script-body OP_VAULT,          (ii)
 
@@ -434,7 +434,7 @@ Typically, the internal key for the vault taproot output will be specified so
 that it is controlled by the same descriptor as the recovery path, which
 facilitates another (though probably unused) means of recovering the vault
 output to the recovery path. This has the potential advantage of recovering the
-coin without ever revealing it was a vault. 
+coin without ever revealing it was a vault.
 
 Otherwise, the internal key can be chosen to be an unspendable NUMS point to
 force execution of the taptree contents.
@@ -442,7 +442,7 @@ force execution of the taptree contents.
 === Triggering a withdrawal ===
 
 To make use of the vault, and spend it towards some output, we construct a spend
-of the above tr() output that simply replaces the "trigger" leaf with the 
+of the above tr() output that simply replaces the "trigger" leaf with the
 full leaf-update script (in this case, a timelocked CTV script):
 
 
@@ -461,17 +461,17 @@ Output scripts:
 [
   tr(,
     leaves = {
-      recover: 
+      recover:
          OP_VAULT_RECOVER,               <--  unchanged
 
       trigger:
-          
-        OP_CHECKSEQUENCEVERIFY OP_DROP OP_CHECKTEMPLATEVERIFY  <--  changed per the 
+         
+        OP_CHECKSEQUENCEVERIFY OP_DROP OP_CHECKTEMPLATEVERIFY  <--  changed per the
                                                                     leaf-update
                                                                     rules of OP_VAULT
        ... [ possibly other leaves ]
      }
-   ),                                                               
+   ),
 
    [ optional revault output with the
      same sPK as the original vault output ],
@@ -499,7 +499,7 @@ entails trade-offs.
 
 ==== Unauthorized recovery ====
 
-Unauthorized recovery simplifies vault use in that recovery never requires additional information aside from the location of the vault outpoints and the recovery path - the "authorization" is simply the reveal of the recovery path, i.e. the preimage of . 
+Unauthorized recovery simplifies vault use in that recovery never requires additional information aside from the location of the vault outpoints and the recovery path - the "authorization" is simply the reveal of the recovery path, i.e. the preimage of .
 
 But because this reveal is the only authorization necessary to spend the vault coins to recovery, the user must expect to recover all such vaults at once, since an observer can replay this recovery (provided they know the outpoints).
 
@@ -513,7 +513,7 @@ These limitations are to avoid pinning attacks.
 
 ==== Authorized recovery ====
 
-With authorized recovery, the user must keep track of an additional piece of information: how to solve the recovery authorization script fragment when recovery is required. 
+With authorized recovery, the user must keep track of an additional piece of information: how to solve the recovery authorization script fragment when recovery is required.
 
 If this key is lost, the user will be unable to initiate the recovery process for their coins. If an attacker obtains the recovery key, they may grief the user during the recovery process by constructing a low fee rate recovery transaction and broadcasting it (though they will not be able to pin because of the replaceability requirement on recovery transactions).
 
@@ -521,7 +521,7 @@ However, authorized recovery configurations have significant benefits. Batched r
 
 ==== Recommendation: use a simple, offline recovery authorization key seed ====
 
-The benefits of batching and fee management that authorized recovery provides are significant. If the recovery authorization key falls into the hands of an attacker, the outcome is not catastrophic, whereas if the user loses their recovery authorization key as well as their trigger key, the result is likely coin loss. Consequently, the author's recommendation is to use a simple seed for the recovery authorization key that can be written down offline and replicated. 
+The benefits of batching and fee management that authorized recovery provides are significant. If the recovery authorization key falls into the hands of an attacker, the outcome is not catastrophic, whereas if the user loses their recovery authorization key as well as their trigger key, the result is likely coin loss. Consequently, the author's recommendation is to use a simple seed for the recovery authorization key that can be written down offline and replicated.
 
 Note that the recovery authorization key '''is not''' the recovery path key, and
 this is '''much different''' than any recommendation on how to generate the
@@ -542,7 +542,7 @@ the trigger authorization pubkeys.
 Note that when using unauthorized recovery, the reveal of the
 recovery scriptPubKey will allow any observer to initiate the recovery process
 for any vault with matching recovery params, provided they are able to locate
-the vault outpoints. As a result, it is recommended to expect that 
+the vault outpoints. As a result, it is recommended to expect that
 '''all outputs sharing an identical unauthorized  should be recovered together'''.
 
 This situation can be avoided with a comparable key management model by varying
@@ -589,7 +589,7 @@ are essentially dependent on v3 transaction relay policy being deployed.
 
 OP_VAULT outputs with the same taptree, aside from slightly
 different trigger leaves, can be batched together in the same withdrawal
-process. Two "trigger" leaves are compatible if they have the same 
+process. Two "trigger" leaves are compatible if they have the same
 OP_VAULT arguments.
 
 Note that this allows the trigger authorization -- the script prefixing the
@@ -617,7 +617,7 @@ can be recovered into the same output.
 
 Recovery-incompatible vaults which have authorized recovery can be recovered in
 the same transaction, so long as each set (grouped by
-) has an associated ''recoveryOut''. This allows 
+) has an associated ''recoveryOut''. This allows
 unrelated recoveries to share common fee management.
 
 === Watchtowers ===
diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 981af812..930fce74 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -44,7 +44,7 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
 * Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
-OP_CAT was available in early versions of Bitcoin. 
+OP_CAT was available in early versions of Bitcoin.
 In 2010, a single commit disabled OP_CAT, along with another 15 opcodes.
 Folklore states that OP_CAT was removed in this commit because it enabled the construction of a script whose evaluation could have memory usage exponential in the size of the script.
 For example, a script that pushed a 1-byte value on the stack and then repeated the opcodes OP_DUP, OP_CAT 40 times would result in a stack element whose size was greater than 1 terabyte assuming no maximum stack element size. As Bitcoin at that time had a maximum stack element size of 5000 bytes, the effect of this expansion was limited to 5000 bytes.
@@ -109,5 +109,5 @@ An alternative implementation of OP_CAT can be found in Elements Roose S.,
 
 ==Acknowledgements==
 
-We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill, 
+We wish to acknowledge Dan Gould for encouraging and helping review this effort. We also want to thank Madars Virza, Jeremy Rubin, Andrew Poelstra, Bob Summerwill,
 Tim Ruffing and Johan T. Halseth for their feedback, review and helpful comments.
diff --git a/bip-0380.mediawiki b/bip-0380.mediawiki
index 17e48e32..eea5ce14 100644
--- a/bip-0380.mediawiki
+++ b/bip-0380.mediawiki
@@ -212,7 +212,7 @@ The following tests cover the checksum and character set:
 * Error in checksum: raw(deedbeef)##9f8spxm
 * Invalid characters in payload: raw(Ü)#00000000
 
-The following tests cover key expressions: 
+The following tests cover key expressions:
 
 Valid expressions:
 

From f085cc29221f0f28310804d4482b33bb1afd9e07 Mon Sep 17 00:00:00 2001
From: Orfeas Stefanos Thyfronitis Litos
 <18602747+OrfeasLitos@users.noreply.github.com>
Date: Thu, 25 Jul 2024 19:50:08 +0100
Subject: [PATCH 171/288] Make link title more specific (#1652)

---
 bip-0341.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0341.mediawiki b/bip-0341.mediawiki
index 639cec6c..bd45f3d9 100644
--- a/bip-0341.mediawiki
+++ b/bip-0341.mediawiki
@@ -41,7 +41,7 @@ As a result we choose this combination of technologies:
 * '''Taproot''' on top of that lets us merge the traditionally separate pay-to-pubkey and pay-to-scripthash policies, making all outputs spendable by either a key or (optionally) a script, and indistinguishable from each other. As long as the key-based spending path is used for spending, it is not revealed whether a script path was permitted as well, resulting in space savings and an increase in scripting privacy at spending time.
 * Taproot's advantages become apparent under the assumption that most applications involve outputs that could be spent by all parties agreeing. That's where '''Schnorr''' signatures come in, as they permit [https://eprint.iacr.org/2018/068 key aggregation]: a public key can be constructed from multiple participant public keys, and which requires cooperation between all participants to sign for. Such multi-party public keys and signatures are indistinguishable from their single-party equivalents. This means that with taproot most applications can use the key-based spending path, which is both efficient and private. This can be generalized to arbitrary M-of-N policies, as Schnorr signatures support threshold signing, at the cost of more complex setup protocols.
 * As Schnorr signatures also permit '''batch validation''', allowing multiple signatures to be validated together more efficiently than validating each one independently, we make sure all parts of the design are compatible with this.
-* Where unused bits appear as a result of the above changes, they are reserved for mechanisms for '''future extensions'''. As a result, every script in the Merkle tree has an associated version such that new script versions can be introduced with a soft fork while remaining compatible with BIP 341. Additionally, future soft forks can make use of the currently unused annex in the witness (see [[bip-0341.mediawiki#Rationale|BIP341]]).
+* Where unused bits appear as a result of the above changes, they are reserved for mechanisms for '''future extensions'''. As a result, every script in the Merkle tree has an associated version such that new script versions can be introduced with a soft fork while remaining compatible with BIP 341. Additionally, future soft forks can make use of the currently unused annex in the witness (see [[bip-0341.mediawiki#rationale|Rationale]]).
 * While the core semantics of the '''signature hashing algorithm''' are not changed, a number of improvements are included in this proposal. The new signature hashing algorithm fixes the verification capabilities of offline signing devices by including amount and scriptPubKey in the signature message, avoids unnecessary hashing, uses '''tagged hashes''' and defines a default sighash byte.
 * The '''public key is directly included in the output''' in contrast to typical earlier constructions which store a hash of the public key or script in the output. This has the same cost for senders and is more space efficient overall if the key-based spending path is taken. '''Why is the public key directly included in the output?''' While typical earlier constructions store a hash of a script or a public key in the output, this is rather wasteful when a public key is always involved. To guarantee batch verifiability, the public key must be known to every verifier, and thus only revealing its hash as an output would imply adding an additional 32 bytes to the witness. Furthermore, to maintain [https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2016-January/012198.html 128-bit collision security] for outputs, a 256-bit hash would be required anyway, which is comparable in size (and thus in cost for senders) to revealing the public key directly. While the usage of public key hashes is often said to protect against ECDLP breaks or quantum computers, this protection is very weak at best: transactions are not protected while being confirmed, and a very [https://twitter.com/pwuille/status/1108097835365339136 large portion] of the currency's supply is not under such protection regardless. Actual resistance to such systems can be introduced by relying on different cryptographic assumptions, but this proposal focuses on improvements that do not change the security model.
 

From 0963e43860e2c8e41c0821e2bc442bdd337a0ded Mon Sep 17 00:00:00 2001
From: Eugene Siegel 
Date: Fri, 26 Jul 2024 11:46:37 -0400
Subject: [PATCH 172/288] BIP 324: fix python aad in complete_handshake

---
 bip-0324.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0324.mediawiki b/bip-0324.mediawiki
index 2119a851..941d96e0 100644
--- a/bip-0324.mediawiki
+++ b/bip-0324.mediawiki
@@ -384,7 +384,7 @@ def complete_handshake(peer, initiating, decoy_content_lengths=[]):
         if received_garbage[-16:] == peer.recv_garbage_terminator:
             # Receive, decode, and ignore version packet.
             # This includes skipping decoys and authenticating the received garbage.
-            v2_receive_packet(peer, aad=received_garbage)
+            v2_receive_packet(peer, aad=received_garbage[:-16])
             return
         else:
             received_garbage += recv(peer, 1)

From c2655e0ab988ea2a43264186a368b7b4ec3734f9 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Sat, 27 Jul 2024 19:36:08 +0200
Subject: [PATCH 173/288] More adjustments from PR review

---
 bip-0388.mediawiki | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index fd28f044..7f0aab59 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -14,7 +14,8 @@
 
 == Abstract ==
 
-Software wallets and hardware signing devices sequester wallet uses into logically separate "accounts".
+Software wallets and hardware signing devices typically partition funds into separate "accounts". When signing or visualizing transactions, this allows to show to the user aggregate in-flow or out-flow information for one or more involved accounts.
+
 Wallet policies build on top of output script descriptors to represent such accounts in a compact, reviewable way.
 An account encompasses a logical group of receive and change addresses, and each wallet policy represents all descriptors necessary to describe an account in its entirety.
 
@@ -67,7 +68,7 @@ Reusing keys across different UTXOs harms user privacy by allowing external part
 
 By constraining the derivation path patterns to have a uniform structure, wallet policies prevent key reuse among the same or different UTXOs of the same account.
 
-It is strongly recommended to avoid key reuse across accounts. Distinct public keys per account can be guaranteed per hardened derivation paths. This specification does not mandate hardened derivation to maintain compatibility with existing deployments that do not adhere to this recommendation.
+It is strongly recommended to avoid key reuse across accounts. Distinct public keys per account can be guaranteed by using distinct hardened derivation paths. This specification does not mandate hardened derivation in order to maintain compatibility with existing deployments that do not adhere to this recommendation.
 
 It is out of scope for this document to guarantee that users do not reuse extended public keys among different wallet accounts. This responsibility is left to the users and their software wallet.
 

From eeaf21d882df2cda2b0434918f2f15a62db79590 Mon Sep 17 00:00:00 2001
From: Matt Corallo 
Date: Sun, 28 Jul 2024 17:30:57 +0000
Subject: [PATCH 174/288] Consistently refer to them as "human-readable names",
 not addresses

It seems confusing to call BIP 353 names "addresses", and most of
the BIP refers to them as "names", but a few "human-readable
addresses" snuck in in a recent change, which are fixed here.
---
 bip-0353.mediawiki | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0353.mediawiki b/bip-0353.mediawiki
index 9deba50b..43e424f8 100644
--- a/bip-0353.mediawiki
+++ b/bip-0353.mediawiki
@@ -70,9 +70,9 @@ Payment instructions which do contain on-chain addresses which will be re-used S
 
 === Display ===
 
-When displaying a verified human-readable address, wallets SHOULD prefix it with ₿, i.e. ₿`user`@`domain`. They SHOULD parse recipient information in both `user`@`domain` and ₿`user`@`domain` forms and resolve such entry into recipient information using the above record. For the avoidance of doubt, the ₿ is *not* included in the DNS label which is resolved.
+When displaying a verified human-readable name, wallets SHOULD prefix it with ₿, i.e. ₿`user`@`domain`. They SHOULD parse recipient information in both `user`@`domain` and ₿`user`@`domain` forms and resolve such an entry into recipient information using the above record. For the avoidance of doubt, the ₿ is *not* included in the DNS label which is resolved.
 
-Wallets providing the ability for users to "copy" their address information SHOULD copy the underlying URI directly, rather than the human-readable address. This avoids an additional DNS lookup by the application in which it is pasted. Wallets that nevertheless provide users the ability to copy their human-readable address, MUST include the ₿ prefix (i.e. copy it in the form ₿`user`@`domain`).
+Wallets providing the ability for users to "copy" their address information SHOULD copy the underlying URI directly, rather than the human-readable name. This avoids an additional DNS lookup by the application in which it is pasted. Wallets that nevertheless provide users the ability to copy their human-readable name, MUST include the ₿ prefix (i.e. copy it in the form ₿`user`@`domain`).
 
 Wallets accepting payment information from external devices (e.g. hardware wallets) SHOULD accept RFC 9102-formatted proofs (as a series of unsorted `AuthenticationChain` records) and, if verification succeeds, SHOULD display the recipient in the form ₿`user`@`domain`.
 

From a35650e14e5e3afce269efa0926233c30871b140 Mon Sep 17 00:00:00 2001
From: Fabian Jahr 
Date: Mon, 27 May 2024 23:23:06 +0200
Subject: [PATCH 175/288] Add BIP 94 - Testnet 4

---
 README.mediawiki   |   7 +++
 bip-0094.mediawiki | 120 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 127 insertions(+)
 create mode 100644 bip-0094.mediawiki

diff --git a/README.mediawiki b/README.mediawiki
index 710e128e..5c993a68 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -491,6 +491,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Informational
 | Draft
 |-
+| [[bip-0094.mediawiki|94]]
+| Applications
+| Testnet 4
+| Fabian Jahr
+| Standard
+| Draft
+|-
 | [[bip-0098.mediawiki|98]]
 | Consensus (soft fork)
 | Fast Merkle Trees
diff --git a/bip-0094.mediawiki b/bip-0094.mediawiki
new file mode 100644
index 00000000..06f8f531
--- /dev/null
+++ b/bip-0094.mediawiki
@@ -0,0 +1,120 @@
+
+  BIP: 94
+  Layer: Applications
+  Title: Testnet 4
+  Author: Fabian Jahr 
+  Comments-Summary: No comments yet.
+  Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0094
+  Status: Draft
+  Type: Standards Track
+  Created: 2024-05-27
+  License: CC0-1.0
+  Post-History: https://gnusha.org/pi/bitcoindev/CADL_X_eXjbRFROuJU0b336vPVy5Q2RJvhcx64NSNPH-3fDCUfw@mail.gmail.com/
+                https://gnusha.org/pi/bitcoindev/a6e3VPsXJf9p3gt_FmNF_Up-wrFuNMKTN30-xCSDHBKXzXnSpVflIZIj2NQ8Wos4PhQCzI2mWEMvIms_FAEs7rQdL15MpC_Phmu_fnR9iTg=@protonmail.com/
+                https://github.com/bitcoin/bitcoin/pull/29775
+

+
+== Abstract ==
+
+A new test network with the goal to replace Testnet 3. This network comes with small but important improvements of the consensus rules, that should make it impractical to attack the network using only CPU mining.
+
+== Motivation ==
+
+Quoting the original mailing list post from Jameson Lopphttps://gnusha.org/pi/bitcoindev/CADL_X_eXjbRFROuJU0b336vPVy5Q2RJvhcx64NSNPH-3fDCUfw@mail.gmail.com/:
+
+

+Testnet3 has been running for 13 years. It's on block 2.5 million something and the block reward is down to ~0.014 TBTC, so mining is not doing a great job at distributing testnet coins anymore.
+
+The reason the block height is insanely high is due to a rather amusing edge case bug that causes the difficulty to regularly get reset to 1, which causes a bit of havoc. If you want a deep dive into the quirk: https://blog.lopp.net/the-block-storms-of-bitcoins-testnet/
+
+Testnet3 is being actively used for scammy airdrops; those of us who tend to be generous with our testnet coins are getting hounded by non-developers chasing cheap gains.
+
+As a result, TBTC is being actively bought and sold; one could argue that the fundamental principle of testnet coins having no value has been broken.
+

+
+Since then the issue with block storms has been further demonstrated on Testnet 3 when three years' worth of blocks were mined in a few weeks while rendering the network practically unusable at the same time.
+
+== Specification ==
+
+Consensus of Testnet 4 follows the same rules as mainnet with the exception of the three rules detailed below. Additionally all soft forks that are active on mainnet as of May 2024 are enforced from genesis.
+
+=== 20-minute Exception ===
+
+This rule was already previously implemented and active in Testnet 3https://github.com/bitcoin/bitcoin/pull/686.
+
+A block with a timestamp that is more than 20 minutes past the timestamp of the previous block must have a minimum difficulty of 1 (the network's minimum difficulty) instead of whatever the actual difficulty level currently is. This applies to all blocks in a difficulty period except for the first block. This means the blocks must change their nBits field from the actual difficulty level to the minimum difficulty value 0x1d00ffff.
+
+This rule also led to the block stormshttps://blog.lopp.net/the-block-storms-of-bitcoins-testnet/ which the following rule seeks to fix.
+
+=== Block Storm Fix ===
+
+The work required for a new difficulty period is calculated as multiplication factor to the difficulty of the previous period (but no less than 1/4th and no more than 4x), depending on the duration of the previous difficulty period. On Mainnet and Testnet 3, this factor is applied to the difficulty value of the last block.
+
+Block storms happen organically whenever the 20-minute exception is applied to a difficulty period’s last block, causing the block to be mined at a difficulty of 1. The difficulty adjustment rules then limit the subsequent period’s difficulty to a value between 1 (the minimum) and 4. Blocks will be generated rapidly in the subsequent low-difficulty periods while the difficulty climbs back to an adequate range. An arbitrarily large number of blocks can be generated quickly by repeatedly using the 20-minute exception on every last block of difficulty periods. The block storm is then bounded only by miner hash rate, the need for last blocks to have a timestamp 20 minutes after the second to last block, the Median-Time-Past nTime rule, and the requirement that blocks can't be more than 2 hours in the future. Overall a sustained attack would eventually be limited to a maximum cadence of six blocks per second.
+
+A block storm does not require a time warp attack, but one can be used to amplifyA perpetual block storm attack with entire difficulty periods being authored in less than 3.5 days that resets the difficulty to the minimum in the last block of every difficulty period would adjust to a new actual difficulty of 4 every period. An attacker that additionally leverages a time warp attack would start their attack by holding back timestamps until the latest block’s timestamp is at least two weeks in the past, and then limiting their block rate to six blocks per second, incrementing the timestamp on every sixth block. Only on the last block they would use the current time, which both resets the difficulty to one per the 20-minute exception and would result in a difficulty adjustment keeping the difficulty at the minimum due to the elapsed time exceeding the target. This would allow lower the difficulty for all blocks to difficulty 1 instead of difficulty 4 it.
+
+The mitigation consists of no longer applying the adjustment factor to the last block of the previous difficulty period. Instead, the first block of the difficulty period is used as the base.
+
+The first block must contain the actual difficulty of the network and can therefore be used as the base for the calculation of the new difficulty level. Note that the first block in new difficulty period does not allow usage of the 20-minute exception (this is prior behavior). This means that in each difficulty period the first block should always have the actual difficulty even if all other blocks were mined with the 20-minute exception.
+
+=== Time Warp Fix ===
+
+In addition to a time warp attack potentially exacerbating the perpetual block storm attack, a time warp attack provides an alternative way to increase the block production rate even if the unintended reset of the actual difficulty due to the 20-minute exception was mitigated.
+
+To protect against the time warp attack, the following rule proposed as part of The Great Consensus Cleanuphttps://github.com/TheBlueMatt/bips/blob/cleanup-softfork/bip-XXXX.mediawiki is enforced: "The nTime field of each block whose height, mod 2016, is 0 must be greater than or equal to the nTime field of the immediately prior block minus 600. For the avoidance of doubt, such blocks must still comply with existing Median-Time-Past nTime restrictions."
+
+== Rationale ==
+
+The applied changes were the result of discussions on the mailing list and the PR. The selected changes try to strike a balance between minimal changes to the network (keeping it as close to mainnet as possible) while making it more robust against attackers that try to disrupt the network. Several alternative designs were considered:
+
+* For the block storm fix an alternative fix could have been to prevent the last block in a difficulty period from applying the existing difficulty exception. Both solutions were deemed acceptable and there was no clear preference among reviewers.
+* Removal of the 20-minute exception was discussed but dismissed since several reviewers insisted that it was a useful feature allowing non-standard transactions to be mined with just a CPU. The 20-minute exception also allows CPU users to move the chain forward (except on the first block that needs to be mined at actual difficulty) in case a large amount of hash power suddenly leaves the network. This would allow the chain to recover to a normal difficulty level faster if left stranded at high difficulty.
+* Increase of minimum difficulty was discussed but dismissed as it would categorically prevent participation in the network using a CPU miner (utilizing the 20-minute exception).
+* Increase of the delay in the 20-minute exception was suggested but did not receive significant support.
+* Re-enabling acceptnonstdtxn in bitcoin core by default was dismissed as it had led to confusion among layer-2s that had used testnet for transaction propagation tests and expected it to behave similar to mainnet.
+* Motivating miners to re-org min difficulty blocks was suggested, but was considered out of scope for this BIP, since adoption of such a mining policy remains available after Testnet 4 is deployed. As 20-minute exception blocks only contribute work corresponding to difficulty one to the chaintip, and actual difficulty blocks should have a difficulty magnitudes higher, a block mined at actual difficulty could easily replace even multiple 20-minute exception blocks.
+* Persisting the real difficulty in the version field was suggested to robustly prevent exploits of the 20-minute exception while allowing it to be used on any block, but did not receive a sufficient level of support to justify the more invasive change.
+
+One known downside of the chosen approach is that if the difficulty is gradually raised by a miner with significant hash rate, and this miner disappears, then each difficulty adjustment period requires one block at the actual difficulty.
+
+This would cause the network to stall once per difficulty adjustment period until the real difficulty is adjusted downwards enough for the remaining hash rate to find this block in reasonable time.
+
+== Network Parameters ==
+
+=== Consensus Rules ===
+
+All consensus rules active on mainnet at the time of this proposal are enforced from block 1, the newest of these rules being the Taproot softfork.
+
+=== Genesis Block ===
+
+* Message: 03/May/2024 000000000000000000001ebd58c244970b3aa9d783bb001011fbe8ea8e98e00e
+* Pubkey: 000000000000000000000000000000000000000000000000000000000000000000
+* Time stamp: 1714777860
+* Nonce: 393743547
+* Difficulty: 0x1d00ffff
+* Version: 1
+
+The resulting genesis block hash is 00000000da84f2bafbbc53dee25a72ae507ff4914b867c565be350b0da8bf043, and the block hex is 01000000010000000000000000000000000000000000000000000000000000000000000000ffffffff5504ffff001d01044c4c30332f4d61792f323032342030303030303030303030303030303030303030303165626435386332343439373062336161396437383362623030313031316662653865613865393865303065ffffffff0100f2052a010000002321000000000000000000000000000000000000000000000000000000000000000000ac00000000.
+
+=== Message Start ===
+
+The message start is defined as 0x1c163f28. These four bytes were randomly generated and have no special meaning.
+
+== Backwards Compatibility ==
+
+The rules used by Testnet 4 are backwards compatible to the rules of Testnet 3. Existing software that implements support for Testnet 3 would only require addition of the network parameters  (magic number, genesis block, etc.) to be able to follow Testnet 4. 
+
+However, implementations that only implement Testnet 3’s rules would accept a chain that violates Testnet 4’s rules and are therefore susceptible to being forked off. It is recommended that any implementations check blocks in regard to all the new rules of Testnet 4 and reject blocks that fail to comply.
+
+== Reference implementation ==
+
+Pull request at https://github.com/bitcoin/bitcoin/pull/29775
+
+== References ==
+
+
+
+== Copyright ==
+
+This document is licensed under the  Creative Commons CC0 1.0 Universal license.

From 00fbea5dcd5e90449f270a046ac3fcfdea100b65 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Sat, 3 Aug 2024 17:05:46 +0200
Subject: [PATCH 176/288] Nit from PR review

Co-authored-by: Mark "Murch" Erhardt 
---
 bip-0388.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 7f0aab59..6524441b 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -62,7 +62,7 @@ This makes it impossible for an attacker to surreptitiously modify the policy, t
 
 ==== Avoiding key reuse ====
 
-Reusing public keys within a Script is a source of malleability when using miniscript policies, which has potential security implications.
+Reusing public keys within a script is a source of malleability when using miniscript policies, which has potential security implications.
 
 Reusing keys across different UTXOs harms user privacy by allowing external parties to link these UTXOs to the same entity once they are spent.
 

From 0c2a2172f76d05ecfdf55fed5650cc3ebaddb34a Mon Sep 17 00:00:00 2001
From: Fabian Jahr 
Date: Mon, 5 Aug 2024 23:05:30 +0200
Subject: [PATCH 177/288] Change BIP 94 timewarp delta to 7200 seconds

---
 bip-0094.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0094.mediawiki b/bip-0094.mediawiki
index 06f8f531..bda96e12 100644
--- a/bip-0094.mediawiki
+++ b/bip-0094.mediawiki
@@ -62,7 +62,7 @@ The first block must contain the actual difficulty of the network and can theref
 
 In addition to a time warp attack potentially exacerbating the perpetual block storm attack, a time warp attack provides an alternative way to increase the block production rate even if the unintended reset of the actual difficulty due to the 20-minute exception was mitigated.
 
-To protect against the time warp attack, the following rule proposed as part of The Great Consensus Cleanuphttps://github.com/TheBlueMatt/bips/blob/cleanup-softfork/bip-XXXX.mediawiki is enforced: "The nTime field of each block whose height, mod 2016, is 0 must be greater than or equal to the nTime field of the immediately prior block minus 600. For the avoidance of doubt, such blocks must still comply with existing Median-Time-Past nTime restrictions."
+To protect against the time warp attack, the following rule proposed as part of The Great Consensus Cleanuphttps://github.com/TheBlueMatt/bips/blob/cleanup-softfork/bip-XXXX.mediawiki is enforced: "The nTime field of each block whose height, mod 2016, is 0 must be greater than or equal to the nTime field of the immediately prior block minus 7200. For the avoidance of doubt, such blocks must still comply with existing Median-Time-Past nTime restrictions." The originally proposed rule has been adapted to allow for a delta of 7200 seconds instead of only 600 seconds to allow honest miners to mine at the current time even if an attacking miner has postdated the timestamp up to the allowed 2 hours in the previous block.
 
 == Rationale ==
 

From b6bf97ba9ebb70cdd2943cf31f38592c91403ae2 Mon Sep 17 00:00:00 2001
From: Jose Storopoli 
Date: Thu, 25 Jul 2024 16:24:00 -0300
Subject: [PATCH 178/288] bip-46: fix typo

---
 bip-0046.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0046.mediawiki b/bip-0046.mediawiki
index 1602f811..2bc4039e 100644
--- a/bip-0046.mediawiki
+++ b/bip-0046.mediawiki
@@ -107,7 +107,7 @@ A certificate message can be created by another application external to this sta
 
 Almost all wallets implementing this standard can use their already-existing "Sign Message" function to sign the certificate message. As the certificate message itself is always an ASCII string, the wallet may not need to specially implement this section at all but just rely on users copypasting their certificate message into the already-existing "Sign Message" user interface. This works as long as the wallet knows how to use the private key of the timelocked address for signing messages.
 
-It is most important for wallet implementions of this standard to support creating the certificate signature. Verifying the certificate signature is less important.
+It is most important for wallet implementations of this standard to support creating the certificate signature. Verifying the certificate signature is less important.
 
 
 == Test vectors ==

From c25032a3ff2bd0140c56ea6dbfaa885c7ee75bfb Mon Sep 17 00:00:00 2001
From: Jose Storopoli 
Date: Sat, 27 Jul 2024 22:58:20 -0300
Subject: [PATCH 179/288] bip-75: fix typo

---
 bip-0075.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0075.mediawiki b/bip-0075.mediawiki
index ebd5b37d..50572064 100644
--- a/bip-0075.mediawiki
+++ b/bip-0075.mediawiki
@@ -219,7 +219,7 @@ message EncryptedProtocolMessage {
 ==Payment Protocol Process with InvoiceRequests==
 The full process overview for using '''InvoiceRequests''' in the Payment Protocol is defined below.
 


-All Payment Protocol messages MUST be encapsulated in either a [[#ProtocolMessage|ProtocolMessage]] or [[#EncryptedProcotolMessage|EncryptedProtocolMessage]]. Once the process begins using [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] messages, all subsequent communications MUST use [[#EncryptedProtocolMessage|EncryptedProtocolMessages]].
+All Payment Protocol messages MUST be encapsulated in either a [[#ProtocolMessage|ProtocolMessage]] or [[#EncryptedProtocolMessage|EncryptedProtocolMessage]]. Once the process begins using [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] messages, all subsequent communications MUST use [[#EncryptedProtocolMessage|EncryptedProtocolMessages]].
 


 All Payment Protocol messages SHOULD be communicated using [[#EncryptedProtocolMessage|EncryptedProtocolMessage]] encapsulating messages with the exception that an [[#InvoiceRequest|InvoiceRequest]] MAY be communicated using the [[#ProtocolMessage|ProtocolMessage]] if the receiver's public key is unknown.
 



From da1e3ad5456b800120a7f98a9816024465dc50d3 Mon Sep 17 00:00:00 2001
From: Jose Storopoli 
Date: Thu, 25 Jul 2024 16:24:55 -0300
Subject: [PATCH 180/288] bip-119: fix typo

---
 bip-0119.mediawiki | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0119.mediawiki b/bip-0119.mediawiki
index be1f70cb..6ca0adb5 100644
--- a/bip-0119.mediawiki
+++ b/bip-0119.mediawiki
@@ -392,7 +392,7 @@ transaction preimages.
 =====Using Non-Tagged Hashes=====
 
 The Taproot/Schnorr BIPs use Tagged Hashes
-(`SHA256(SHA256(tag)||SHA256(tag)||msg)`) to prevent taproot leafs, branches,
+(`SHA256(SHA256(tag)||SHA256(tag)||msg)`) to prevent taproot leaves, branches,
 tweaks, and signatures from overlapping in a way that might introduce a security
 [vulnerability https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-June/016091.html].
 
@@ -494,7 +494,7 @@ The preimage argument passed to CHECKTEMPLATEVERIFY may be unknown or otherwise
 However, requiring knowledge that an address is spendable from is incompatible with sender's ability
 to spend to any address (especially, OP_RETURN). If a sender needs to know the template can be spent
 from before sending, they may request a signature of an provably non-transaction challenge string
-from the leafs of the CHECKTEMPLATEVERIFY tree.
+from the leaves of the CHECKTEMPLATEVERIFY tree.
 
 ====Forwarding Addresses====
 

From 498668026ed3527e8ccef3f6dfea7416607abe4a Mon Sep 17 00:00:00 2001
From: Jose Storopoli 
Date: Thu, 25 Jul 2024 16:25:15 -0300
Subject: [PATCH 181/288] bip-152: fix typo

---
 bip-0152.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0152.mediawiki b/bip-0152.mediawiki
index fad17460..eb7d5450 100644
--- a/bip-0152.mediawiki
+++ b/bip-0152.mediawiki
@@ -209,7 +209,7 @@ There are several design goals for the Short ID calculation:
 * '''Space''' cmpctblock messages are never optional in this protocol, and contain a short ID for each non-prefilled transaction in the block. Thus, the size of short IDs is directly proportional to the maximum bandwidth savings possible.
 * '''Collision resistance''' It should be hard for network participants to create transactions that cause collisions. If an attacker were able to cause such collisions, filling mempools (and, thus, blocks) with them would cause poor network propagation of new (or non-attacker, in the case of a miner) blocks.
 
-SipHash is a secure, fast, and simple 64-bit MAC designed for network traffic authentication and collision-resistant hash tables. We truncate the output from SipHash-2-4 to 48 bits (see next section) in order to minimize space. The resulting 48-bit hash is certainly not large enough to avoid intentionally created individual collisons, but by using the block hash as a key to SipHash, an attacker cannot predict what keys will be used once their transactions are actually included in a relayed block. We mix in a per-connection 64-bit nonce to obtain independent short IDs on every connection, so that even block creators cannot control where collisions occur, and random collisions only ever affect a small number of connections at any given time. The mixing is done using SHA256(block_header || nonce), which is slow compared to SipHash, but only done once per block. It also adds the ability for nodes to choose the nonce in a better than random way to minimize collisions, though that is not necessary for correct behaviour. Conversely, nodes can also abuse this ability to increase their ability to introduce collisions in the blocks they relay themselves. However, they can already cause more problems by simply refusing to relay blocks. That is inevitable, and this design only seeks to prevent network-wide misbehavior.
+SipHash is a secure, fast, and simple 64-bit MAC designed for network traffic authentication and collision-resistant hash tables. We truncate the output from SipHash-2-4 to 48 bits (see next section) in order to minimize space. The resulting 48-bit hash is certainly not large enough to avoid intentionally created individual collisions, but by using the block hash as a key to SipHash, an attacker cannot predict what keys will be used once their transactions are actually included in a relayed block. We mix in a per-connection 64-bit nonce to obtain independent short IDs on every connection, so that even block creators cannot control where collisions occur, and random collisions only ever affect a small number of connections at any given time. The mixing is done using SHA256(block_header || nonce), which is slow compared to SipHash, but only done once per block. It also adds the ability for nodes to choose the nonce in a better than random way to minimize collisions, though that is not necessary for correct behaviour. Conversely, nodes can also abuse this ability to increase their ability to introduce collisions in the blocks they relay themselves. However, they can already cause more problems by simply refusing to relay blocks. That is inevitable, and this design only seeks to prevent network-wide misbehavior.
 
 ====Random collision probability====
 

From b87b21e7c1f7ee1a1ff17f610da96fd9f6cd7780 Mon Sep 17 00:00:00 2001
From: Jose Storopoli 
Date: Thu, 25 Jul 2024 16:25:27 -0300
Subject: [PATCH 182/288] bip-352: fix typo

---
 bip-0352.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki
index 634e179a..4462efca 100644
--- a/bip-0352.mediawiki
+++ b/bip-0352.mediawiki
@@ -99,7 +99,7 @@ In our simplified example we have been referring to Alice's transactions as havi
 Alice performs the tweak with the sum of her input private keys in the following manner:
 
 * Let ''a = a1 + a2 + ... + an''
-* Let ''input_hash = hash(outpointL || (a·G))'', where ''outpointL'' is the smallest outpoint lexicographically'''Why use the lexicographically smallest outpoint for the hash?''' Recall that the purpose of including the input hash is so that the sender and receiver can both come up with a deterministic nonce that ensures that a unique address is generated each time, even when reusing the same scriptPubKey as an input. Choosing the smallest outpoint lexicographically satisifes this requirement, while also ensuring that the generated output is not dependent on the final ordering of inputs in the transaction. Using a single outpoint also works well with memory constrained devices (such as hardware signing devices) as it does not require the device to have the entire transaction in memory in order to generate the silent payment output.
+* Let ''input_hash = hash(outpointL || (a·G))'', where ''outpointL'' is the smallest outpoint lexicographically'''Why use the lexicographically smallest outpoint for the hash?''' Recall that the purpose of including the input hash is so that the sender and receiver can both come up with a deterministic nonce that ensures that a unique address is generated each time, even when reusing the same scriptPubKey as an input. Choosing the smallest outpoint lexicographically satisfies this requirement, while also ensuring that the generated output is not dependent on the final ordering of inputs in the transaction. Using a single outpoint also works well with memory constrained devices (such as hardware signing devices) as it does not require the device to have the entire transaction in memory in order to generate the silent payment output.
 * Let ''P0 = B + hash(input_hash·a·B || 0)·G''
 
 ''' Spend and Scan Key '''

From af9557b589df19508e1b6937346a4b9724bd90d8 Mon Sep 17 00:00:00 2001
From: azuchi 
Date: Sat, 10 Aug 2024 10:19:39 +0900
Subject: [PATCH 183/288] BIP-0094: fix block hex

---
 bip-0094.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0094.mediawiki b/bip-0094.mediawiki
index bda96e12..24a6af59 100644
--- a/bip-0094.mediawiki
+++ b/bip-0094.mediawiki
@@ -95,7 +95,7 @@ All consensus rules active on mainnet at the time of this proposal are enforced
 * Difficulty: 0x1d00ffff
 * Version: 1
 
-The resulting genesis block hash is 00000000da84f2bafbbc53dee25a72ae507ff4914b867c565be350b0da8bf043, and the block hex is 01000000010000000000000000000000000000000000000000000000000000000000000000ffffffff5504ffff001d01044c4c30332f4d61792f323032342030303030303030303030303030303030303030303165626435386332343439373062336161396437383362623030313031316662653865613865393865303065ffffffff0100f2052a010000002321000000000000000000000000000000000000000000000000000000000000000000ac00000000.
+The resulting genesis block hash is 00000000da84f2bafbbc53dee25a72ae507ff4914b867c565be350b0da8bf043, and the block hex is 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.
 
 === Message Start ===
 

From 52fdb00b6d5844f48cb30b5c39b6fe23708281e4 Mon Sep 17 00:00:00 2001
From: Jose Storopoli 
Date: Thu, 25 Jul 2024 16:20:55 -0300
Subject: [PATCH 184/288] ci: add typo checking

typos is a powerful source code spell checker.

Adds a CI job that runs on every PR and
push to master (but can also be run manually with
workflow_dispatch) that checks for typos.

Adds a config file .typos.toml that deals with
false positives and only checks for top-level/one-level
.mediawiki and .md files.
---
 .github/workflows/github-action-checks.yml |  9 +++++
 .typos.toml                                | 44 ++++++++++++++++++++++
 CONTRIBUTING.md                            | 12 ++++++
 3 files changed, 65 insertions(+)
 create mode 100644 .typos.toml
 create mode 100644 CONTRIBUTING.md

diff --git a/.github/workflows/github-action-checks.yml b/.github/workflows/github-action-checks.yml
index 8a7d2ac8..ad76317f 100644
--- a/.github/workflows/github-action-checks.yml
+++ b/.github/workflows/github-action-checks.yml
@@ -20,3 +20,12 @@ jobs:
         with:
           fetch-depth: 2
       - run: scripts/diffcheck.sh
+  Typo-Checks:
+    name: "Typo Checks"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Actions Repository
+        uses: actions/checkout@v4
+
+      - name: Check spelling
+        uses: crate-ci/typos@master
diff --git a/.typos.toml b/.typos.toml
new file mode 100644
index 00000000..15d831fa
--- /dev/null
+++ b/.typos.toml
@@ -0,0 +1,44 @@
+[default]
+extend-ignore-re = [
+    # NOTE: use here for regex patterns
+    "xpub.*",
+    "xprv.*",
+    "3.*", # address
+    "5.*", # address
+    "private_key .*",
+    "privkey .*",
+    "tt.*", #  tags
+    "code.*", #  tags
+    "\\w*", # prefix for  tags
+    "OP_SUCCESSx|\\d+",
+    "pay.*",
+    "ser.*",
+    "prefix.*",
+    "value: .*",
+]
+
+[default.extend-words]
+# NOTE: use here for false-positives
+anc = "anc"
+PSBT = "PSBT"
+ser = "ser"
+# Names
+Atack = "Atack"
+Meni = "Meni"
+Ono = "Ono"
+
+[files]
+extend-exclude = [
+    "/*/*.csv",
+    "/*.d*",
+    "/*/*.d*",
+    "/*/*.go",
+    "/*/*.json",
+    "/*/*/*.json",
+    "/*/*.mod",
+    "/*/*.proto",
+    "/*/*.py",
+    "scripts",
+    "/*/*.s*",
+    "/*/*.t*",
+]
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 00000000..df6d947a
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,12 @@
+# Contributing Guidelines
+
+Apart from following [BIP 2](./bip-0002.mediawiki),
+we do CI checks to ensure that the proposed BIPs do not have common typos.
+These checks are done using [`typos`](https://github.com/crate-ci/typos).
+To check for typos locally,
+install [`typos`](https://github.com/crate-ci/typos)
+and then run in the root directory:
+
+```bash
+typos
+```

From 1811613e07f878a42ebeb57e714cdc93664082d3 Mon Sep 17 00:00:00 2001
From: Salvatore Ingala <6681844+bigspider@users.noreply.github.com>
Date: Wed, 14 Aug 2024 15:07:55 +0200
Subject: [PATCH 185/288] Further improvements from PR review

---
 bip-0388.mediawiki | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bip-0388.mediawiki b/bip-0388.mediawiki
index 6524441b..895e5a08 100644
--- a/bip-0388.mediawiki
+++ b/bip-0388.mediawiki
@@ -14,7 +14,7 @@
 
 == Abstract ==
 
-Software wallets and hardware signing devices typically partition funds into separate "accounts". When signing or visualizing transactions, this allows to show to the user aggregate in-flow or out-flow information for one or more involved accounts.
+Software wallets and hardware signing devices typically partition funds into separate "accounts". When signing or visualizing a transaction, aggregate flows of funds of all accounts affected by the transaction may (and should) be displayed to the user.
 
 Wallet policies build on top of output script descriptors to represent such accounts in a compact, reviewable way.
 An account encompasses a logical group of receive and change addresses, and each wallet policy represents all descriptors necessary to describe an account in its entirety.
@@ -70,7 +70,7 @@ By constraining the derivation path patterns to have a uniform structure, wallet
 
 It is strongly recommended to avoid key reuse across accounts. Distinct public keys per account can be guaranteed by using distinct hardened derivation paths. This specification does not mandate hardened derivation in order to maintain compatibility with existing deployments that do not adhere to this recommendation.
 
-It is out of scope for this document to guarantee that users do not reuse extended public keys among different wallet accounts. This responsibility is left to the users and their software wallet.
+It is out of scope for this document to guarantee that users do not reuse extended public keys among different wallet accounts. This is still very important, but the responsibility is left to the users and their software wallet.
 
 ==== UX issues ====
 

From 2c259b85fd33593fd3028c5fdbc9abddea388fef Mon Sep 17 00:00:00 2001
From: Fabian Jahr 
Date: Thu, 15 Aug 2024 11:06:37 +0200
Subject: [PATCH 186/288] Revert "Change BIP 94 timewarp delta to 7200 seconds"

This reverts commit 0c2a2172f76d05ecfdf55fed5650cc3ebaddb34a.
---
 bip-0094.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0094.mediawiki b/bip-0094.mediawiki
index 24a6af59..d7e436d5 100644
--- a/bip-0094.mediawiki
+++ b/bip-0094.mediawiki
@@ -62,7 +62,7 @@ The first block must contain the actual difficulty of the network and can theref
 
 In addition to a time warp attack potentially exacerbating the perpetual block storm attack, a time warp attack provides an alternative way to increase the block production rate even if the unintended reset of the actual difficulty due to the 20-minute exception was mitigated.
 
-To protect against the time warp attack, the following rule proposed as part of The Great Consensus Cleanuphttps://github.com/TheBlueMatt/bips/blob/cleanup-softfork/bip-XXXX.mediawiki is enforced: "The nTime field of each block whose height, mod 2016, is 0 must be greater than or equal to the nTime field of the immediately prior block minus 7200. For the avoidance of doubt, such blocks must still comply with existing Median-Time-Past nTime restrictions." The originally proposed rule has been adapted to allow for a delta of 7200 seconds instead of only 600 seconds to allow honest miners to mine at the current time even if an attacking miner has postdated the timestamp up to the allowed 2 hours in the previous block.
+To protect against the time warp attack, the following rule proposed as part of The Great Consensus Cleanuphttps://github.com/TheBlueMatt/bips/blob/cleanup-softfork/bip-XXXX.mediawiki is enforced: "The nTime field of each block whose height, mod 2016, is 0 must be greater than or equal to the nTime field of the immediately prior block minus 600. For the avoidance of doubt, such blocks must still comply with existing Median-Time-Past nTime restrictions."
 
 == Rationale ==
 

From b0d5a0794333bfcf103c3642b168c4338320c48e Mon Sep 17 00:00:00 2001
From: Matt Corallo 
Date: Sun, 28 Jul 2024 18:34:22 +0000
Subject: [PATCH 187/288] Add a PSBT per-output field for BIP 353 DNSSEC Proofs

When using BIP 353 for on-chain addresses (incl silent payments),
it is useful to be able to include DNSSEC proof information in
outputs of a PSBT, which we enable here by defining a standard
field for it.
---
 bip-0174.mediawiki | 12 ++++++++++++
 bip-0353.mediawiki | 27 +++++++++++++++++++++++++++
 2 files changed, 39 insertions(+)

diff --git a/bip-0174.mediawiki b/bip-0174.mediawiki
index 8509f97d..5aeba564 100644
--- a/bip-0174.mediawiki
+++ b/bip-0174.mediawiki
@@ -659,6 +659,18 @@ required for aggregation. If sorting was done, then the keys must be in the sort
 | 0, 2
 | [[bip-0373.mediawiki|373]]
 |-
+| BIP 353 DNSSEC proof
+| PSBT_OUT_DNSSEC_PROOF = 0x35
+| None
+| No key data
+| <1-byte-length-prefixed BIP 353 human-readable name>
+| A BIP 353 human-readable name (without the ₿ prefix), prefixed by a 1-byte length.
+Followed by an [[https://www.rfc-editor.org/rfc/rfc9102.html#name-dnssec-authentication-chain|RFC 9102 DNSSEC AuthenticationChain]] (i.e. a series of DNS Resource Records in no particular order) providing a DNSSEC proof to a BIP 353 DNS TXT record.
+|
+|
+| 0, 2
+| [[bip-0353.mediawiki|353]]
+|-
 | Proprietary Use Type
 | PSBT_OUT_PROPRIETARY = 0xFC
 |    
diff --git a/bip-0353.mediawiki b/bip-0353.mediawiki
index 43e424f8..9c48f911 100644
--- a/bip-0353.mediawiki
+++ b/bip-0353.mediawiki
@@ -76,6 +76,33 @@ Wallets providing the ability for users to "copy" their address information SHOU
 
 Wallets accepting payment information from external devices (e.g. hardware wallets) SHOULD accept RFC 9102-formatted proofs (as a series of unsorted `AuthenticationChain` records) and, if verification succeeds, SHOULD display the recipient in the form ₿`user`@`domain`.
 
+=== PSBT types ===
+
+Wallets accepting payment information from external devices (e.g. hardware wallets) MAY examine the following per-output PSBT fields to fetch RFC 9102-formatted proofs. Wallets creating PSBTs with recipient information derived from human-readable names SHOULD include the following fields.
+
+When validating the contained proof, clients MUST enforce the inception on all contained RRSigs is no later than the current time and that the expiry of all RRSigs is no earlier than an hour in the past. Clients MAY allow for an expiry up to an hour in the past to allow for delays between PSBT construction and signing only if such a delay is likely to occur in their intended usecase.
+
+{|
+! Name
+! 
+! 
+! 
+!  Description
+! Versions Requiring Inclusion
+! Versions Requiring Exclusion
+! Versions Allowing Inclusion
+|-
+| BIP 353 DNSSEC proof
+| PSBT_OUT_DNSSEC_PROOF = 0x35
+| None
+| <1-byte-length-prefixed BIP 353 human-readable name without the ₿ prefix>
+| A BIP 353 human-readable name (without the ₿ prefix), prefixed by a 1-byte length.
+Followed by an [[https://www.rfc-editor.org/rfc/rfc9102.html#name-dnssec-authentication-chain|RFC 9102 DNSSEC AuthenticationChain]] (i.e. a series of DNS Resource Records in no particular order) providing a DNSSEC proof to a BIP 353 DNS TXT record.
+|
+|
+| 0, 2
+|}
+
 == Rationale ==
 
 === Display ===

From 3350d941a8eb0630511d4f6e7504a9cbcc88774b Mon Sep 17 00:00:00 2001
From: Ethan Heilman 
Date: Sun, 8 Sep 2024 14:34:30 -0400
Subject: [PATCH 188/288] Uses consistent source for "CAT and Schnorr Tricks"

For "CAT and Schnorr Tricks I" we used https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298

but for "CAT and Schnorr Tricks II"
https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html

This commit changes this so that the original source wpsoftware is used for both links.
---
 bip-0347.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0347.mediawiki b/bip-0347.mediawiki
index 930fce74..0aed70db 100644
--- a/bip-0347.mediawiki
+++ b/bip-0347.mediawiki
@@ -42,7 +42,7 @@ OP_CAT aims to expand the toolbox of the tapscript developer with a simple, modu
 * Post-Quantum Lamport signatures in Bitcoin transactions. Lamport signatures merely require the ability to hash and concatenate values on the stack. J. Rubin, "[bitcoin-dev] OP_CAT Makes Bitcoin Quantum Secure [was CheckSigFromStack for Arithmetic Values]", 2021, https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2021-July/019233.html It has been proposed that if ECDSA is broken or a powerful computer was on the horizon, there might be an effort to protect ownership of bitcoins by allowing people to mark their taproot outputs as "script-path only" and then move their coins into such outputs with a leaf in the script tree requiring a Lamport signature. It is an open question if a tapscript commitment would preserve the quantum resistance of Lamport signatures. Beyond this question, the use of Lamport Signatures in taproot outputs is unlikely to be quantum resistant even if the script spend-path is made quantum resistant. This is because taproot outputs can also be spent with a key. An attacker with a sufficiently powerful quantum computer could bypass the taproot script spend-path by finding the discrete log of the taproot output and thus spending the output using the key spend-path. The use of "Nothing Up My Sleeve" (NUMS) points as described in [[bip-0341.mediawiki|BIP341]] to disable the key spend-path does not disable the key spend-path against a quantum attacker as NUMS relies on the hardness of finding discrete logs. We are not aware of any mechanism which could disable the key spend-path in a taproot output without a softfork change to taproot.
 * Non-equivocation contracts T. Ruffing, A. Kate, D. Schröder, "Liar, Liar, Coins on Fire: Penalizing Equivocation by Loss of Bitcoins", 2015, https://web.archive.org/web/20221023121048/https://publications.cispa.saarland/565/1/penalizing.pdf in tapscript provide a mechanism to punish equivocation/double spending in Bitcoin payment channels. OP_CAT enables this by enforcing rules on the spending transaction's nonce. The capability is a useful building block for payment channels and other Bitcoin protocols.
 * Vaults M. Moser, I. Eyal, and E. G. Sirer, Bitcoin Covenants, http://fc16.ifca.ai/bitcoin/papers/MES16.pdf which are a specialized covenant that allows a user to block a malicious party who has compromised the user's secret key from stealing the funds in that output. As shown in A. Poelstra, "CAT and Schnorr Tricks II", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-ii.html OP_CAT is sufficient to build vaults in Bitcoin.
-* Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://medium.com/blockstream/cat-and-schnorr-tricks-i-faf1b59bd298 which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
+* Replicating CheckSigFromStack A. Poelstra, "CAT and Schnorr Tricks I", 2021, https://www.wpsoftware.net/andrew/blog/cat-and-schnorr-tricks-i.html which would allow the creation of simple covenants and other advanced contracts without having to presign spending transactions, possibly reducing complexity and the amount of data that needs to be stored. Originally shown to work with Schnorr signatures, this result has been extended to ECDSA signatures R. Linus, "Covenants with CAT and ECDSA", 2023, https://gist.github.com/RobinLinus/9a69f5552be94d13170ec79bf34d5e85#file-covenants_cat_ecdsa-md.
 
 OP_CAT was available in early versions of Bitcoin.
 In 2010, a single commit disabled OP_CAT, along with another 15 opcodes.

From 34db0e99fa4436aa3c4bdedc718c5bc94e10a659 Mon Sep 17 00:00:00 2001
From: Paul Sztorc 
Date: Mon, 23 Sep 2024 19:02:34 -0400
Subject: [PATCH 189/288] Link to latest code -- also shorter/better
 explanations (#1666)

* Update to CUSF activation client +shorter +clearer

* remove superfluous images

* link to CUSF client, shorter and clearer BIP text
---
 bip-0300.mediawiki               | 203 +++++++++++++------------------
 bip-0301.mediawiki               |  97 +++++----------
 bip-0301/images.txt              |   1 -
 bip-0301/m1-gui.jpg              | Bin 113155 -> 0 bytes
 bip-0301/sidechain-headers.png   | Bin 42977 -> 0 bytes
 bip-0301/witness-vs-critical.png | Bin 268309 -> 0 bytes
 6 files changed, 119 insertions(+), 182 deletions(-)
 delete mode 100644 bip-0301/images.txt
 delete mode 100644 bip-0301/m1-gui.jpg
 delete mode 100644 bip-0301/sidechain-headers.png
 delete mode 100644 bip-0301/witness-vs-critical.png

diff --git a/bip-0300.mediawiki b/bip-0300.mediawiki
index fb2070ac..9260cc6c 100644
--- a/bip-0300.mediawiki
+++ b/bip-0300.mediawiki
@@ -15,31 +15,28 @@
 
 ==Abstract==
 
-In Bip300, txns are not signed via cryptographic key. Instead, they are "signed" by hashpower, over time. Like a big multisig, 13150-of-26300, where each block is a new "signature".
+BIP-300 enables a new type of L2, where "withdrawals" (the L2-to-L1 txns) are governed by proof-of-work -- instead of a federation or fixed set of pubkeys.
 
-Bip300 emphasizes slow, transparent, auditable transactions which are easy for honest users to get right and very hard for dishonest users to abuse. The chief design goal for Bip300 is ''partitioning'' -- users may safely ignore Bip300 txns if they want to (or Bip300 entirely).
+BIP-300 emphasizes slow, transparent, and auditable withdrawals that are easy for honest users to get right and hard for dishonest miners to abuse. The main design goal for BIP-300 is ''partitioning'' -- users can ignore BIP-300 txns if they wish; it makes no difference to L1 if the user validates all, some, or none of them. The second design goal is ''security'' -- users of the L2 should feel confident that, [https://www.drivechain.info/blog/fees/ if the L2 network is paying a lot of fees], then miners will want to keep it around, and the withdrawals will therefore be processed accurately.
 
-See [http://www.drivechain.info/ this site] for more information.
+Once BIP-300 has established a "bridge" between L1 and these L2s, users can swap coins in and out instantly, only using BIP-300 for final settlement. This setup allows Bitcoin to process all the transactions in the world, of any shape or size, regardless of blocksize, node software, tech stack, or decentralization level -- all without altering L1 at all.
 
 
 ==Motivation==
 
+BIP-300 allows us to achieve [https://www.truthcoin.info/blog/zside-meltcast/ strong privacy], [https://www.truthcoin.info/blog/thunder/ planetary scale], and [https://www.truthcoin.info/blog/all-world-txns/ hundreds of billions of dollars in annual mining revenues], all with a [https://www.drivechain.info/blog/fees/ security model] that is [https://x.com/Truthcoin/status/1701959339508965405 much stronger than] that of the [https://www.truthcoin.info/blog/ln-blackpill/ Lightning Network].
 
-As Reid Hoffman [https://blockstream.com/2015/01/13/en-reid-hoffman-on-the-future-of-the-bitcoin-ecosystem/ wrote in 2014]: "Sidechains allow developers to add features and functionality to the Bitcoin universe without actually modifying the Bitcoin Core code...Consequently, innovation can occur faster, in more flexible and distributed ways, without losing the synergies of a common platform with a single currency."
+The original motivation stretches back to Reid Hoffman, who [https://blockstream.com/2015/01/13/en-reid-hoffman-on-the-future-of-the-bitcoin-ecosystem/ wrote in 2014]: "Sidechains allow developers to add features and functionality to the Bitcoin universe without actually modifying the Bitcoin Core code...Consequently, innovation can occur faster, in more flexible and distributed ways, without losing the synergies of a common platform with a single currency."
 
-Today, coins such as Namecoin, Monero, ZCash, and Sia, offer features that Bitcoiners cannot access -- not without selling their BTC to invest in a rival monetary unit. According to [https://coinmarketcap.com/charts/#dominance-percentage coinmarketcap.com], there is now more value *outside* the BTC protocol than within it. According to [https://cryptofees.info/ cryptofees.info], 15x more txn fees are paid outside the BTC protocol, than within it.
+See [http://www.drivechain.info/ drivechain.info] for more information.
 
-Software improvements to Bitcoin rely on developer consensus -- BTC will pass on a good idea if it is even slightly controversial. Development is slow: we are now averaging one major feature every 5 years.
 
-Sidechains allow for competitive "benevolent dictators" to create a new sidechain at any time. These dictators are accountable only to their users, and (crucially) they are protected from rival dictators. Users can move their BTC among these different pieces of software, as *they* see fit.
-
-BTC can copy every useful technology, as soon as it is invented; scamcoins lose their justification and become obsolete; and the community can be pro-creativity, knowing that Layer1 is protected from harmful changes.
 
 ==Specification==
 
 ===Overview===
 
-Bip300 allows for six new blockchain messages (these have consensus significance):
+BIP-300 consists of six new blockchain messages:
 
 * M1. "Propose New Sidechain"
 * M2. "ACK Proposal"
@@ -48,14 +45,15 @@ Bip300 allows for six new blockchain messages (these have consensus significance
 * M5. Deposit  -- a transfer of BTC from-main-to-side
 * M6. Withdrawal -- a transfer of BTC from-side-to-main
 
-Nodes organize those messages into two caches:
 
-* D1. "The Sidechain List", which tracks the 256 Hashrate Escrows (Escrows are slots that a sidechain can live in).
-* D2. "The Withdrawal List", which tracks the withdrawal-Bundles (coins leaving a Sidechain).
+Nodes organize this data into [https://github.com/LayerTwo-Labs/bip300301_enforcer/blob/master/src/bip300.rs#L79-L96 a few caches], mainly these two:
+
+* D1. "The Sidechain List"
+* D2. "The Withdrawal List"
 
 ==== D1 (The Sidechain List) ====
 
-D1 is a list of active sidechains. D1 is updated via M1 and M2.
+D1 is a list of active sidechains. D1 is populated via M1 and M2. Fields #9 and #10 are updated via M5 and M6.
 
 {| class="wikitable"
 |- style="font-weight:bold; text-align:center; vertical-align:middle;"
@@ -87,12 +85,12 @@ D1 is a list of active sidechains. D1 is updated via M1 and M2.
 | 5
 | Hash1 - tarball hash
 | uint256
-| Intended as the sha256 hash of the tar.gz of the canonical sidechain software. (This is not enforced anywhere by Bip300, and is for human purposes only.)
+| Intended as the sha256 hash of the tar.gz of the canonical sidechain software. (This is not enforced by BIP-300, and is for human purposes only.)
 |- style="vertical-align:middle;"
 | 6
 | Hash2 - git commit hash
 | uint160
-| Intended as the git commit hash of the canonical sidechain node software. (This is not enforced anywhere by Bip300, and is for human purposes only.)
+| Intended as the git commit hash of the canonical sidechain node software. (This is not enforced by BIP-300, and is for human purposes only.)
 |-
 | 7
 | Active
@@ -118,17 +116,17 @@ D1 is a list of active sidechains. D1 is updated via M1 and M2.
 
 ==== D2 (The Withdrawal List) ====
 
-D2 lists withdrawal-attempts. If these attempts succeed, they will pay coins "from" a Bip300-locked UTXO, to new UTXOs controlled by the withdrawing-user. Each attempt pays out many users, so we call these withdrawal-attempts "Bundles".
+Withdrawals are transactions that remove coins "from" L2 (i.e., from the BIP-300 locked UTXO), and place them back on L1. Each BIP-300 withdrawal can pay out up to 6,000 withdrawals, and only one withdrawal can succeed at a time (per L2). Therefore, since all L2 users share the same large withdrawal-event, on L1 we call these withdrawals "bundles".
 
 D2 is driven by M3, M4, M5, and M6. Those messages enforce the following principles:
 
-# The Bundles have a canonical order (first come first serve).
+# The database has a canonical order (first come first serve).
 # From one block to the next, every "Blocks Remaining" field decreases by 1.
-# When "Blocks Remaining" reaches zero the Bundle is removed.
+# When "Blocks Remaining" reaches zero, the bundle is removed.
 # From one block to the next, the value in "ACKs" may either increase or decrease, by a maximum of 1 (see M4).
-# If a Bundle's "ACKs" reach 13150 or greater, it "succeeds" and its corresponding M6 message can be included in a block.
-# If the M6 of a Bundle is paid out, it is also removed.
-# If a Bundle cannot possibly succeed ( 13150 - "ACKs"  >  "Blocks Remaining" ), it is removed immediately.
+# If a bundle's "ACKs" reach 13150 or greater, it "succeeds" and its corresponding M6 message can be included in a block.
+# If the M6 of a bundle is paid out, it is also removed.
+# If a bundle cannot possibly succeed ( 13150 - "ACKs"  >  "Blocks Remaining" ), it is removed immediately.
 
 
 {| class="wikitable"
@@ -145,7 +143,7 @@ D2 is driven by M3, M4, M5, and M6. Those messages enforce the following princip
 | 2
 | Bundle Hash
 | uint256
-| A withdrawal attempt. Specifically, it is a "blinded transaction id" (ie, the double-Sha256 of a txn that has had two fields zeroed out, see M6) of a txn which could withdraw funds from a sidechain.
+| A withdrawal attempt. Specifically, it is a "blinded transaction id" (i.e., the double-Sha256 of a txn that has had two fields zeroed out, see M6) of a txn which could withdraw funds from a sidechain.
 |-
 | 3
 | Work Score (ACKs)
@@ -158,20 +156,12 @@ D2 is driven by M3, M4, M5, and M6. Those messages enforce the following princip
 | How long this bundle has left to live (measured in blocks). Starts at 26,300 and counts down.
 |}
 
-D1, with all 256 slots active, reaches a maximum size of: 256 * ( 1 (map index) + 36 (outpoint) + 8 (amount) ) = 11,520 bytes.
-
-D2, under normal conditions, would reach a size of: (38 bytes per withdrawal * 256 sidechains) = 9,728 bytes.
-
-It is possible to spam D2. A miner can add the max M3s (256) every block, forever. This costs 9,728 on-chain bytes per block, an opportunity cost of about 43 txns. It results in no benefit to the miner whatsoever. D2 will eventually hit a ceiling at 124.5568 MB. (By comparison, the Bitcoin UTXO set is about 7,000 MB.) When the attacker stops, D2 will eventually shrink back down to 9,728 bytes.
 
 
-=== The Six New Bip300 Messages ===
 
-First, how are new sidechains created?
+=== M1 -- Propose Sidechain ===
 
-They are first proposed (with M1), and later acked (with M2). This process resembles Bip9 soft fork activation.
-
-==== M1 -- Propose Sidechain ====
+New sidechains are proposed with M1, and ACKed with M2.
 
 M1 is a coinbase OP Return output containing the following:
 
@@ -197,7 +187,7 @@ Otherwise:
 * A new entry is added to D1, whose initial Activation Status is (age=0, fails=0).
 
 
-==== M2 -- ACK Sidechain Proposal ====
+=== M2 -- ACK Sidechain Proposal ===
 
 M2 is a coinbase OP Return output containing the following:
 
@@ -219,46 +209,32 @@ Otherwise:
 
 A sidechain fails to activate if:
 
-* If the slot is unused: during the next 2016 blocks, it accumulates 201 fails. (Ie, 90% threshold).
-* If the slot is in use: during the next 26,300 blocks, it accumulates 13,150 fails. (Ie, 50% threshold).
+* If the slot is unused: during the next 2016 blocks, it accumulates 1008 fails (i.e., 50% hashrate threshold).
+* If the slot is in use: during the next 26,300 blocks, it accumulates 13,150 fails (i.e., 50% hashrate threshold).
 
-( Thus we can overwrite a used sidechain slot. Bip300 sidechains are already vulnerable to one catastrophe per 13150 blocks (the invalid withdrawal) so this slot-overwrite option does not change the security assumptions. )
+( Thus we can overwrite a used sidechain slot. BIP-300 sidechains are already vulnerable to one catastrophe per 13150 blocks (the invalid withdrawal), so this slot-overwrite option does not change the security assumptions. )
 
 Otherwise, the sidechain activates (Active is set to TRUE).
 
-In the block in which the sidechain activates, the coinbase MUST include at least one 0-valued OP_DRIVECHAIN output. This output becomes the initial CTIP for the sidechain.
+
+=== Withdrawing in Bundles ===
+
+Sidechain withdrawals take the form of "bundles" -- named because they "bundle up" many individual withdrawal-requests into a single rare L1 transaction.
+
+On the L2 side, individual withdrawal requests are periodically combined into a single CoinJoin-like withdrawal bundle. This bundle is hashed [https://github.com/LayerTwo-Labs/bip300301_messages/blob/master/src/lib.rs#L374C1-L419C2 in a particular way] (on both L2 and L1) -- this "blinded hash" commits to its own L1 fee, but (notably) it does not commit to its first tx-input (in that way, it is like [https://github.com/bitcoin/bips/blob/master/bip-0118.mediawiki BIP-118]).
+
+This hash is what L1 miners will slowly ACK over 3-6 months, not the M6 itself (nor any sidechain data, of course).
+
+A bundle will either pay all its withdrawals out (via M6), or fail (and pay nothing out for anyone).
 
 
-
-==== Notes on Withdrawing Coins ====
-
-Bip300 withdrawals ("M6") are very significant.
-
-For an M6 to be valid, it must be first "prepped" by one M3 and then 13,150+ M4s. M3 and M4 are about "Bundles".
-
-===== What are Bundles? =====
-
-Sidechain withdrawals take the form of "Bundles" -- named because they "bundle up" many individual withdrawal-requests into a single rare layer1 transaction.
-
-Sidechain full nodes aggregate the withdrawal-requests into a big set. The sidechain calculates what M6 would have to look like, to pay all of these withdrawal-requests out. Finally, the sidechain calculates what the hash of this M6 would be. This 32-byte hash identifies the Bundle.
-
-This 32-byte hash is what miners will be slowly ACKing over 3-6 months, not the M6 itself (nor any sidechain data, of course).
-
-A bundle either pays all its withdrawals out (via M6), or else it fails (and pays nothing out).
-
-===== Bundle Hash = Blinded TxID of M6 =====
-
-The Bundle hash is static as it is being ACKed. Unfortunately, the M6 TxID will be constantly changing -- as users deposit to the sidechain, the input to M6 will change.
-
-To solve this problem, we do something conceptually similar to AnyPrevOut (BIP 118). We define a "blinded TxID" as a way of hashing a txn, in which some bytes are first overwritten with zeros. These are: the first input and the first output. Via the former, a sidechain can accept deposits, even if we are acking a TxID that spends from it later. Via the latter, we can force all of the non-withdrawn coins to be returned to the sidechain (even if we don't yet know how many coins this will be).
-
-==== M3 -- Propose Bundle ====
+=== M3 -- Propose Bundle ===
 
 M3 is a coinbase OP Return output containing the following:
 
     1-byte - OP_RETURN (0x6a)
     4-byte - Commitment header (0xD45AA943)
-    32-byte - The Bundle hash, to populate a new D2 entry
+    32-byte - The bundle hash, to populate a new D2 entry
     1-byte - nSidechain (the slot number)
 
 M3 is ignored if it does not parse, or if it is for a sidechain that doesn't exist.
@@ -272,9 +248,10 @@ M3 is invalid if:
 
 Otherwise: M3 adds an entry to D2, with initial ACK score = 1 and initial Blocks Remaining = 26,299. (Merely being added to D2, does count as your first upvote.)
 
-Once a Bundle is in D2, how can we give it enough ACKs to make it valid?
 
-==== M4 -- ACK Bundle(s) ====
+=== M4 -- ACK Bundle(s) ===
+
+Once a bundle is in D2, how can we give it enough ACKs to make it valid?
 
 M4 is a coinbase OP Return output containing the following:
 
@@ -283,35 +260,25 @@ M4 is a coinbase OP Return output containing the following:
     1-byte - Version
     n-byte - The "upvote vector" -- describes which bundle-choice is "upvoted", for each sidechain.
 
-The upvote vector will code "abstain" as 0xFF (or 0xFFFF); it will code "alarm" as 0xFE (or 0xFFFE). Otherwise it simply indicates which withdrawal-bundle in the list, is the one to be "upvoted".
-
-For example: if there are two sidechains, and we wish to upvote the 7th bundle on sidechain #1 plus the 4th bundle on sidechain #2, then the upvote vector would be { 07, 04 }. And M4 would be [0x6A,D77D1776,00,0006,0003].
-
-The version number allows us to shrink the upvote vector in many cases.
-Version 0x00 omits the upvote vector entirely (ie, 6 bytes for the whole M4) and sets this block's M4 equal to the previous block's M4.
-Version 0x01 uses one byte per sidechain, and can be used while all ACKed withdrawals have an index under 256 (ie, 99.99%+ of the time).
-Version 0x02 uses a full two bytes per sidechain (each encoded in little endian), but it always works no matter how many withdrawal proposals exist.
-Version 0x03 omits the upvote vector, and instead upvotes only those withdrawals that are leading their rivals by at least 50 votes.
-
-If a sidechain has no pending bundles, then it is skipped over when M4 is created and parsed.
-
-For example, an upvote vector of { 2 , N/A, 1 } would be represented as [0x6A,D77D1776,01,01,00]. It means: "upvote the second bundle in sidechain #1; and the first bundle in sidechain #3" (iff sidechains #2 has no bundles proposed).
-
-An upvote vector of { N/A, N/A, 4 } would be [0x6A,D77D1776,01,03].
-
-
 The M4 message will be invalid (and invalidate the block), if:
 
-*  It tries to upvote a Bundle that doesn't exist. (For example, trying to upvote the 7th bundle on sidechain #2, when sidechain #2 has only three bundles.)
-* There are no Bundles at all, from any sidechain.
+* It tries to upvote a bundle that doesn't exist. (For example, trying to upvote the 7th bundle on sidechain #2, when sidechain #2 has only three bundles.)
+* There are no bundles at all, from any sidechain.
 
-If M4 is NOT present in a block, then it is treated as "abstain".
+If M4 is NOT present in a block, then it is treated as an "abstain" for all sidechains.
 
 If M4 is present and valid: each withdrawal-bundle that is ACKed, will gain one upvote.
 
-Important: Within a sidechain-group, upvoting one Bundle ("+1") automatically downvotes ("-1") all other Bundles in that group. However, the minimum ACK-counter is zero. While only one Bundle can be upvoted at once; the whole group can all be unchanged at once ("abstain"), and they can all be downvoted at once ("alarm").
+Each sidechain always has two "virtual bundles" -- an "abstain" bundle (0xFF), and an "alarm" bundle (0xFE). Abstain leaves the ACK count unchanged, and alarm reduces all ACK counts of all bundles by 1.
 
-For example:
+Any bundle which fails to receive a vote, is downvoted (and loses 1 ACK). If a sidechain has no pending bundles, then it is skipped over when M4 is created and parsed.
+
+
+==== Examples ====
+
+To upvote the 7th bundle on sidechain #1, and upvote the 4th bundle on sidechain #2, the upvote vector would be { 07, 04 }. And M4 would be [0x6A,D77D1776,00,0006,0003].
+
+If block 900,000 has D2 of...
 
 {| class="wikitable"
 |-
@@ -347,7 +314,7 @@ For example:
 |}
 
 
-...in block 900,000 could become...
+...and then D2 wants to become:
 
 
 {| class="wikitable"
@@ -383,18 +350,29 @@ For example:
 | 22,559
 |}
 
-...if M4 were [0x6A,D77D1776,00,0000,0001].
+... then M4 would have been [0x6A,D77D1776,00,0000,0001].
+
+==== Saving Space ====
+
+The version number allows us to shrink the upvote vector in many cases.
+Version 0x00 omits the upvote vector entirely (i.e., 6 bytes for the whole M4) and sets this block's M4 equal to the previous block's M4.
+Version 0x01 uses 1 byte per sidechain, and can be used while all ACKed withdrawals have an index <256 (i.e., 99.99%+ of the time).
+Version 0x02 uses 2 bytes per sidechain, but it always works, even in astronomically unlikely cases (such as when >1 sidechains have >256 bundle candidates).
+Version 0x03 omits the upvote vector, and instead upvotes only those withdrawals that are leading their rivals by at least 50 votes.
+
+For example, an upvote vector of { 2 , N/A, 1 } would be represented as [0x6A,D77D1776,01,01,00]. It means: "upvote the second bundle in sidechain #1; and the first bundle in sidechain #3" (iff sidechains #2 has no bundles proposed).
+
+An upvote vector of { N/A, N/A, 4 } would be [0x6A,D77D1776,01,03].
 
 
-Finally, we describe Deposits and Withdrawals.
 
-==== M5 -- Deposit BTC to Sidechain ====
+=== M5 -- Deposit BTC (from L1 to L2) ===
 
-Each sidechain stores all its BTC in one UTXO, called the "CTIP".
+Finally, we describe Deposits (M5) and Withdrawals (M6). These are not coinbase outputs, they are txns on L1.
 
-By definition, an M5 is a transaction which spends the CTIP and '''increases''' the quantity of coins. An M6 is a transaction which spends the CTIP and '''decreases''' the quantity of coins in the CTIP. See [https://github.com/LayerTwo-Labs/mainchain/blob/391ab390adaa19f92871d769f8e120ca62c1cf14/src/validation.cpp#L688-L801 here].
+We call a transaction "M5" if it spends from the escrow output and '''increases''' the quantity of coins. Conversely, we call a transaction "M6" if it spends from the escrow output and '''decreases''' the quantity of coins. See [https://github.com/LayerTwo-Labs/bip300301_enforcer/blob/master/src/bip300.rs#L462C1-L462C47 here].
 
-Every time a deposit/withdrawal is made, the old CTIP is spent and a new one is created. (Deposits/Withdrawals never cause UTXO bloat.) At all times, the CTIP of each sidechain is cached in D1 (above).
+Every time a deposit/withdrawal is made, the old UTXO is spent and a single new UTXO is created. (Deposits/Withdrawals never cause UTXO bloat.) At all times, the specific treasury UTXO ("CTIP") of each sidechain is cached in D1 (above).
 
 Every M5 is valid, as long as:
 
@@ -402,19 +380,18 @@ Every M5 is valid, as long as:
 * The new CTIP has '''more''' coins in it, than before.
 
 
-==== M6 -- Withdraw BTC from a Sidechain ====
+=== M6 -- Withdraw BTC (from L2 to L1) ===
 
-We come, finally, to the critical matter: where users can take their money *out* of the sidechain.
 
 M6 is invalid if:
 
-* The blinded hash of M6 does NOT match one of the approved Bundle-hashes.  (In other words: M6 must first be approved by 13,150 upvotes.)
+* The blinded hash of M6 does NOT match one of the approved bundle-hashes.  (In other words: M6 must first be approved by 13,150 upvotes.)
 * The first output of M6 is NOT an OP_DRIVECHAIN. (This OP_DRIVECHAIN becomes the new CTIP. In other words: all non-withdrawn coins are paid back to the sidechain.)
 * The second output is NOT a zero-value OP_RETURN script of exactly 10 bytes, of which 8 bytes are a serialized Bitcoin amount.
 * The txn fee of M6 is NOT exactly equal to the amount of the previous bullet point.
 * There are additional OP_DRIVECHAIN outputs after the first one.
 
-Else, M6 is valid.
+Else, M6 is valid -- and the funds are withdrawn.
 
 (The point of the latter two bullet points, is to allow the bundle hash to cover the L1 transaction fee.)
 
@@ -429,6 +406,8 @@ without it, sidechain numbers 0 and 128 would cause the legacy script interprete
 
 If an OP_DRIVECHAIN input is spent, the additional rules for M5 or M6 (see above) must be enforced.
 
+
 
 
+
+
 ==Backward compatibility==
 
-As a soft fork, older software will continue to operate without modification. Non-upgraded nodes will see a number of phenomena that they don't understand -- coinbase txns with non-txn data, value accumulating in anyone-can-spend UTXOs for months at a time, and then random amounts leaving these UTXOs in single, infrequent bursts. However, these phenomena don't affect them, or the validity of the money that they receive.
-
-( As a nice bonus, note that the sidechains themselves inherit a resistance to hard forks. The only way to guarantee that all different sidechain-nodes will always report the same Bundle, is to upgrade sidechains via soft forks of themselves. )
+This soft fork can be deployed without modifying Bitcoin Core at all (i.e., via [https://bip300cusf.com/ CUSF]).
 
 
 ==Deployment==
 
-This BIP will be deployed via UASF-style block height activation. Block height TBD.
+This BIP deploys when/if >51% hashrate runs [https://github.com/LayerTwo-Labs/bip300301_enforcer/ the enforcer client].
+
+Ideally, a critical mass of users would also run the enforcer client -- this would strongly dissuade miners from ever de-activating it.
 
 
 ==Reference Implementation==
 
-See: https://github.com/drivechain-project/mainchain
+The enforcer is [https://github.com/LayerTwo-Labs/bip300301_enforcer/ here].
 
-Also, for interest, see an example sidechain here: https://github.com/drivechain-project/sidechains/tree/testchain
-
-
-==References==
-
-https://github.com/drivechain-project/mainchain
-https://github.com/drivechain-project/sidechains/tree/testchain
-See http://www.drivechain.info/literature/index.html
-
-
-==Credits==
-
-Thanks to everyone who contributed to the discussion, especially: Luke Dashjr, ZmnSCPxj, Adam Back, Peter Todd, Dan Anderson, Sergio Demian Lerner, Chris Stewart, Matt Corallo, Sjors Provoost, Tier Nolan, Erik Aronesty, Jason Dreyzehner, Joe Miyamoto, Ben Goldhaber.
+Also, several example L2s are [https://releases.drivechain.info/ here].
 
 
 ==Copyright==
diff --git a/bip-0301.mediawiki b/bip-0301.mediawiki
index dc3eb15e..b6fc9e30 100644
--- a/bip-0301.mediawiki
+++ b/bip-0301.mediawiki
@@ -15,9 +15,9 @@
 
 ==Abstract==
 
-Blind Merged Mining (BMM) allows miners to mine a Sidechain/Altcoin, without running its node software (ie, without "looking" at it, hence "blind").
+Blind Merged Mining (BMM) allows SHA-256d miners to collect transaction fee revenue from other blockchains, without running any new software (i.e., without "looking" at those alt-chains, hence "blind").
 
-Instead, a separate sidechain user runs their node and constructs the block, paying himself the transaction fees. He then uses an equivalent amount of money to "buy" the right to find this block, from the conventional layer1 Sha256d miners.
+Instead, this block-assembly work is done by alt-chain users. They choose the alt-chain block, and what txns go in it, the fees etc. Simultaneously, these users "bid" on L1 to win the right to be the sole creator of the alt-chain block. BIP-301 ensures that L1 miners only accept one bid (per 10 minutes, per L2 category), instead of taking all of them (which is what they would ordinarily do).
 
 
 ==Motivation==
@@ -32,9 +32,9 @@ However, traditional MM has two drawbacks:
 
 ==Notation and Example==
 
-Note: We use notation side:\* and main:\* in front of otherwise-ambiguous words (such as "block", "node", or "chain"), to sort the mainchain version from its sidechain counterpart. We name all sidechain users "Simon", and name all mainchain miners "Mary".
+We use notation side:\* and main:\* in front of otherwise ambiguous words (such as "block", "node", or "chain"), to distinguish the mainchain version from its sidechain/alt-chain counterpart. We name all sidechain users "Simon", and name all mainchain miners "Mary".
 
-Example: imagine that a sidechain block contains 20,000 txns, each paying a $0.10 fee; therefore, the block is worth $2000 of fee-revenue. As usual: the sidechain's coinbase txn will pay this $2000 to someone (in this case, "Simon"). Under Bip301, Simon does no hashing, but instead makes one layer1 txn paying $1999 to the layer1 miners ("Mary").
+Furthermore, here is an example of BIP-301 in use. Imagine that a side:block contains 20,000 txns, each paying a $0.10 fee; therefore, the side:block is worth $2000 of fee revenue. In BIP-301, the sidechain's coinbase txn will pay this $2000 to "Simon". Simon does no hashing, but instead makes one L1 txn paying $1999 to the L1 miners ("Mary"). Thus, Mary ends up with all of the fee revenue, even though she didn't do anything on the sidechain.
 
 
 {| class="wikitable"
@@ -71,119 +71,88 @@ Example: imagine that a sidechain block contains 20,000 txns, each paying a $0.1
 |}
 
 
-Bip301 makes this specialization-of-labor trustless on layer1. If Mary takes Simon's money, then she must let Simon control the side:block.
+BIP-301 makes this specialization-of-labor trustless on L1. If Mary takes Simon's money, then she must let Simon control the side:block.
 
 
 
 ==Specification==
 
+Each candidate for next side:block is defined by its unique side:blockhash "h*". (Even if the entire rest of the L2 block is identical, different Simons will have different side:coinbases and therefore different h*.)
 
-Bip301 consists of two messages: "BMM Accept" and "BMM Request". These govern something called "h*".
+BIP-301 consists of two messages: "BMM Accept" and "BMM Request".
 
-So we will discuss:
+# "BMM Accept" -- A coinbase output in L1, which contains h*. Mary can only choose one h* to endorse.
+# "BMM Request" -- A transaction where Simon offers to pay Mary, if (and only if) Mary's L1 block contains Simon's h*.
 
-# h* -- The sidechain's hashMerkleRoot, and why it matters.
-# "BMM Accept" -- How h* enters a main:coinbase. When Mary "accepts" a BMM Request, Mary is ''endorsing a side:block''.
-# "BMM Request" -- Simon offering money to Mary, if (and only if) she will Endorse a specific h*. When Simon broadcasts a BMM Request, Simon is ''attempting a side:block''.
-
-
-=== h* ===
-
-h* ("h star") is the sidechain's Merkle Root hash.
-
-In Bip301, a sidechain's coinbase txn acts as a header (it contains the hash of the previous side:block, and previous main:block). Thus, the MerkleRoot contains everything important.
-
-Note: in Bip301 sidechains, "headers" and "block hashes" do not have significant consensus meaning and are in the design mainly to help with IBD. (In the mainchain, in contrast, headers and block hashes determine the difficulty adjustments and cumulative PoW.)
-
-
-
-
-Above: h* is located in the main:coinbase. h* contains all side:txns, including the side:coinbase. The side:coinbase contains many "header-like" fields, such as the hash of the previous side:block.
-
-Mary controls the main:coinbase, so she may select any h*. Her selection will determine which side:block is "found".
+As a miner, Mary controls the main:coinbase, so she may select any h*. Her selection determines which side:block is "found" -- and which associated BMM Request she can collect.
 
 
 === BMM Accept  ===
 
-To "Accept" the BMM proposal (and to accept Simon's money), Mary must endorse Simon's block.
+To "Accept" a BMM proposal (endorsing Simon's side:block, and allowing Mary to accept Simon's money later in the block), Mary places an OP_RETURN output into the main:coinbase as follows:
 
 
-For each side:block Mary wishes to endorse, Mary places the following into a main:coinbase OP_RETURN:
     1-byte - OP_RETURN (0x6a)
     4-bytes - Message header (0xD1617368)
+    1-byte - Sidechain number (0-255)
     32-bytes - h* (obtained from Simon)
 

 
-[https://github.com/drivechain-project/mainchain/blob/8901d469975752d799b6a7a61d4e00a9a124028f/src/validation.cpp#L3530-L3572 Code details here].
+[https://github.com/LayerTwo-Labs/bip300301_messages/blob/master/src/lib.rs#L252-L264 Code details here].
 
 If these OP_RETURN outputs are not present, then no Requests were accepted. (And, Mary would get no money from Requests.)
 
-It is possible for Mary and Simon to be the same person.They would trust each other completely, so the BMM process would stop here. There would only be Accepts; Requests would be unnecessary.
+It is possible for Mary and Simon to be the same person. They would trust each other completely, so the BMM process would stop here. There would only be Accepts; Requests would be unnecessary.
 
 When Simon and Mary are different people, Simon will need to use BMM Requests.
 
 === BMM Request ===
 
-Simon will use BMM Requests to buy the right to find a sidechain block, from Mary.
+Simon will use BMM Requests to buy the "right" to find a sidechain block, from Mary.
+
+For each side:block that Simon wants to attempt, he broadcasts a txn containing the following as an OP_RETURN:
 
 
-For each side:block that Simon wants to attempt, he broadcasts a txn containing the following:
-        3-bytes - Message header (0x00bf00)
-        32-bytes  - h* (side:MerkleRoot)
-        1-byte  - nSidechain (sidechain ID number)
-        4-bytes - prevMainHeaderBytes (the last four bytes of the previous main:block)
+    1-byte - OP_RETURN (0x6a)
+    3-bytes - Message header (0x00bf00)
+    1-byte - Sidechain number (0-255)
+    32-bytes  - h* (obtained from L2 node)
+    32-bytes  - prevMainBlock (the blockhash of the previous main:block)
 

 
-We make use of the [https://github.com/drivechain-project/mainchain/blob/8901d469975752d799b6a7a61d4e00a9a124028f/src/primitives/transaction.h#L224-L331 extended serialization format]. (SegWit used ESF to position scriptWitness data within txns; we use it here to position the five fields above.)
-
-
-The Message header identifies this txn as a BMM transaction. h* is chosen by Simon to correspond to his side:block. nSidechain is the number assigned to the sidechain when it was created. preSideBlockRef allows Simon to build on any preexisting side:block (allowing him to bypass one or more invalid blocks, details below). prevMainHeaderBytes are the last four bytes of the previous main:block (details below).
+h* is chosen by Simon to correspond to the side:block he wants to mine on the alt-chain. nSidechain is the number assigned to the sidechain/alt-chain when it was created.
 
 This txn is invalid if it fails any of the following checks:
 
 # Each "BMM Request", must match one corresponding "BMM Accept" (previous section).
-# Only one BMM Request is allowed in each main:block, per sidechain. In other words, if 700 users broadcast BMM Requests for sidechain #4, then the main:miner singles out one BMM Request to include.
-# The 4-bytes of prevMainHeaderBytes must match the last four bytes of the previous main:blockheader. Thus, Simon's txns are only valid for the current block, in the block history that he knows about (and therefore, the current sidechain history that he knows about).
+# Only one BMM Request is allowed in each main:block, per nSidechain. In other words, if 700 users broadcast BMM Requests for sidechain #4, then the main:miner must single out one BMM_Request_4 to include in this L1 block.
+# The 32-bytes of prevMainBlock must match the previous main:blockhash. Thus, Simon's txns are only valid for the current block, in the block history that he knows about.
 
 
-Most BMM Request txns will never make it into a block. Simon will make many BMM Requests, but only one will be accepted. Since only one BMM Request can become a bona fide transaction, Simon may feel comfortable making multiple offers all day long. This means Mary has many offers to choose from, and can choose the one which pays her the most.
+Most BMM Request txns will never make it into a block. Simon will make many BMM Requests, but only one will be accepted. Since only one BMM Request can enter the L1 block, Simon may feel comfortable making multiple offers all day long. This means Mary has many offers to choose from, and can choose the one that pays her the most.
 
 This BIP allows BMM Requests to take place over Lightning. One method is [https://www.drivechain.info/media/bmm-note/bmm-lightning/ here]. (BMM Accepts cannot be over LN, since they reside in main:coinbase txns.)
 
+
 ==Backward compatibility==
 
-As a soft fork, older software will continue to operate without modification. To enforce BMM trustlessly, nodes must watch "pairs" of transactions, and subject them to extra rules. Non-upgraded nodes will notice that this activity is present in the blockchain, but they will not understand any of it.
-
-Much like P2SH or a new OP Code, these old users can never be directly affected by the fork, as they will have no expectations of receiving payments of this kind. (As a matter of fact, the only people receiving BTC here, all happen to be miners. So there is less reason than ever to expect compatibility problems.)
-
-As with all previous soft forks, non-upgraded users are indirectly affected, in that they are no longer performing full validation.
+This soft fork can be deployed without modifying Bitcoin Core at all (ie, via [https://bip300cusf.com/ CUSF]).
 
 
 ==Deployment==
 
-This BIP will be deployed via UASF-style block height activation. Block height TBD.
+This BIP deploys when/if >51% hashrate runs [https://github.com/LayerTwo-Labs/bip300301_enforcer/ the enforcer client].
+
+Ideally, a critical mass of users would also run the enforcer client -- this would strongly dissuade miners from ever de-activating it.
 
 
 ==Reference Implementation==
 
-See: https://github.com/drivechain-project/mainchain
+The enforcer is [https://github.com/LayerTwo-Labs/bip300301_enforcer/ here].
 
-Also, for interest, see an example sidechain here: https://github.com/drivechain-project/sidechains/tree/testchain
-
-
-==References==
-
-* http://www.drivechain.info/literature/index.html
-* http://www.truthcoin.info/blog/blind-merged-mining/
-* http://www.truthcoin.info/images/bmm-outline.txt
-
-
-==Thanks==
-
-Thanks to everyone who contributed to the discussion, especially: ZmnSCPxj, Adam Back, Peter Todd, Dan Anderson, Sergio Demian Lerner, Matt Corallo, Sjors Provoost, Tier Nolan, Erik Aronesty, Jason Dreyzehner, Joe Miyamoto, Chris Stewart, Ben Goldhaber.
+Also, several example L2s using BIP-301 are [https://releases.drivechain.info/ here].
 
 
 ==Copyright==
 
 This BIP is licensed under the BSD 2-clause license.
-
diff --git a/bip-0301/images.txt b/bip-0301/images.txt
deleted file mode 100644
index 2fbbf637..00000000
--- a/bip-0301/images.txt
+++ /dev/null
@@ -1 +0,0 @@
-Images used as reference in the documentation.
diff --git a/bip-0301/m1-gui.jpg b/bip-0301/m1-gui.jpg
deleted file mode 100644
index 8f3aab1a5143052951672915b341d9b28aa88a01..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 113155
zcmeFZ2V7Izwl5r{cj+P}C?FyNB2_7|0Rkc-Qlv#h1w;&pNGAdUQX?R;1tiit0i_Fs
zUR0V?=}AD4not*z@-6qh=bp3AIp1yHd-uKH_uGLL7As?xG3K0Oj`E+OjnQTyhYj@%
z^dNL}bdWpX4}>-WxePf(NB8UZUtjc$^uJzA3=H&)%uLM8zb+P5c2*V^HWp@PHcmD+
zb`J2x%*w^h$-(vO{#PZxivKDF{&KJ|v;3m?uf1qZ5FQqK(?jRz>5fAV@zBxp(9zl;
zPzZ#M5$x@+4*%
zL$h1v7M51GtsU>(f8gZo^3e0C*E4S)U%${7Vc`)kBcl=$Unjju{_Sl_W>$7iZeD&t
z;fIeEl~vU>wRJ76ZS5VMUEQC*4Gs;DjE;RD$KeTc^FJ0Ae=dLVSf8*@$_~HTiIs}dZ1M@Gw=ni><7d;OH<1r;B-ixNp4jz2R&jz#bUy9EtZ)TNL
zzDX3g`(%JkP)Y?SP5Q;!@0|VT7z_DtarSSF{gtnA2nRhKIC%6t5Ez6qQTvJQoJ64U
z{pp9A1`DW?%LPj!o_$E`=Hcx$8PmOf#)%$;3+(K+#zM(`JD8Ok<1b%O?Jc2kwL^d?KZRPJS}
zmVp9`RC7HfATO9B10#lZ_GwTj63M3;UeqNNwWG6*@qs_Q
z+nl-+Fk;BKXW#j(MAK@rpv+Af>XlSe8pJ~=XXS+WxXe#EpB_(Y8TBc$qHYph6Z^tNU0<*f`3OT73AejM=F##p9bkq
za-l&&g|hzm-`F+ndhTyXz!*7U(u?|+KUlTDt@dy4|JuZ_s{d@_PeJ`Tqkb*JKi9?o
zm;yFAQ6M>I(5>^5|tw**GKyM_Fldwfn828iX~42I;%J_l*W=xeIHY
zc^CBPZ^@9Yc-3Px$XRm?mBSw8aAt=HGaPM~!0dOBm*%UZu9|K>+s1s&05_6|A=si`
z1*q~-%!;4R1xsk;>xA2VSLjQO%P6rmbf5L@z4
zK7D39wUmcFmpcP>E0jh1x((R80`t1*$ZC%!$9Abn)B!Fqe=YB?d7gKIfDC<6Q4
zt*GNs3Ecc3<2kfFP7W0CY=&hfd_tyUg+*erxeK(C;#BoYrfZRn6uZ%DV>qqE05Vqgzw6H%>zUwYMOqaDi%cJJmdTbB~H-|(xex58njQ@5}98OYwaB)k2HtxxE-nEnF1(z@dv(Ur>5eIPbz
z1;6N0?0R(g(?t)r(}uf^C+qIDa_0RIY>w=^$DHm;vTRS6j&2v19jZL}NWS7XFOk~E
zS>?giy7x-wUtIMsq_6O2dudQ!Go~}R20Q=zTi=064SDg`+ftXxKYP4Le|c4hu$lGi
zt(XR>I6(EHe!V^aUq_v@xzXgU6})_V#$^}!&TnSLjM#bws3w&YNLt2TI0UR@0C#Z2$M9gM-~-@F
zq(R`ry1-xwM)m5p@#%|BdEaAC$kkRdC$DNK;HqDJvL#L}21R
zGVSXG6E>qlqfEO=`=8%jlx^S)oY1v6V%Owsjj+x(Pl2H2$M_%Xus1=EbtlIiu
zYiz}_hWqfHbKl;NBAqDi0DEgAGYQ!a1YE$9Ac@LG+N
zci84=5FG1>&N1>yV6?<;(O#6;SdzJXRQg?SG~Cf{U`&^c?GL5@oYjltlNgVr}G*oDI^zKd;4|VZ2lMSe6c{e<-QR32bo~1AlZkc
z7`_b?bf(IZ5MlLl#eKy-&x|>HUaKqp^yaN_pDe$hgnK6ON_k`9Q2i%d=gRHuYp_+Zz@JlA0GFjB?}Xib&B9D?YEib)Nda
z3cu;ja*p9!YHabv+5B$t(0SOwSsG;K@{naQV6d`mYrXTeQP6E)U{TPrE?Ddpy{zKriXY|W`R+G?Pa
zQF@BYPf;*=OINhTC=g34}JJ1r-va-C$ya{oqN=KOUg6S2hw
zi<&*Ll?RbVXCU{|FKp*hvUVMSvDRZBn=$=}adq6i0sHSrb=WH~Lb$nLC+tAYXX3NtU6GJ1De;z9eHAe@h@i)MT;-bm8A^1$
zrVDdS1%jP?xtt^uLlqsLgfCkw4cPbgOP5c0?f56koyIFC7{<6YH!)$HXUg?oB$z~~
z`OzTl$dy2Ue0a1|k&B>fhE`dYiJXMN{3hgr;p(J2D^tY}l&8+^XFAB+)n)Vv7w#~-
zU#BB?$TE)I<2WLq&E=!IyboPL-N%_QK1`WuR}=!Z5NECx5VG5PrqwaCD$Bz=@L^%H
zo2dBRmsv4M(qDLu{8DDVVed?Qf{XjKOjwds@>-{l47h3OrJy6WTq-qV{Y~n06Ikz5
zIK@8a`H)OE^QD_HPT3?yyY-D7ir(N_7-X)?{W+3nXFFFOUmtu~_Q4|E+^DO|EFwZ5
zuT$jYOX6J`Y_T9_6PH+gUFPO>UyXBf1Qk#HnkQe%H_uKn2{Rn_We~3j
z%$p4ILhsCI{*ZYyH#Y#*vez&9zjN2RV*6Os?*U4KpdA5!SWeuhL9T!{V4txG-@9vz
zP#371nnIB$FVAz5_-|%kWakJ`>ssCiQb3|Ukdfi6b2PHvDbHuJqET>o<+xLXRj{wO
z=0$cX*HD!}hhw2(5<{EEi+yL(khVcOuR|7jhJw6C$o@o3Sfh~ZGe7PKukZB+1wThh
z1ZxYLPiaR_@onnfYkJi!{CV%YoCIBPb1BQ@0k!g?;}w&nzDKKl*c{$#4i<_VVZwKP
zntIQXT@kbB=0HyZHX3d?kic?0S~%24RYZzcl^{)VcC?~*O1QV6%$87o0%EJ
zhXS(}*va}w#CoqY|M1DLznp0gD7RUrDCD_#nZI|f!Q)QaR@daj1{EZE!Zu=GwZkDa)>H7Q%|Jjq*M9B6bPjBI8Dbu+fP
zO8f+gTIn%c#HlN2r2@F|+Uy;_&k@rWKhK*TP<&Ro3v&e+0GZg(We%6FB{IjU8ub{m
zq?iwG*BnnOy}DR*Hci2#B(UMYVlf33R)3DU4awz`0Ofob#8T-}|ITnO7gac3zPI|A
zPtrw;CGF|mEUc)^N+k()n^H@5;6`n;u9FpUGc40bRMwd*Rs}NzaPSnuO;NEIybdwJ
zuPz7r1Xh%K7xKV3bdLLo*Z{_acV?~j(q*XzqZKxxZhRiZZ{U6q*(=$!9%N
zt=)_q$Fye^3Cs5~+xi}=&y_u@T%&I9x>}cJG$_|u@4Ca#8T!kB1nR5D{-oQ#0JDyUO4t2FXz#zg6yAYV*v^Y#>83mW$I
zkTg=+WB9~t(5umF?7?eqNciE)vO+)P+lL{*T~H);b|ZQ-_C$w<=)w|N`~7G3`lyJm
zQ|AYYq6@xeeNf2hXFDgR?b--%lU4$l60L_-dQN>?Xdk^H;s&*5==0hcJ*TE-+t+-`)HHeO`281o{m*;%47Qbl|
zbGlrV&@nyrBL6sL!2Fb~Jl&H0!HsR`JLp64tj$6db5Fj{e|TW}RWxV4lG}7|U?*b<
zc0Nm2wE4eFFdBHENbUa^)C(2fn&G2_Yuoq2)cS4=&fVeN==Hf5;?um+aZZyIZ||gg
zVy)QHCcT~X5E;DbW52f0Gz#PIs8;#BvvaiaO?uUcv$t~a`Mw4sQ@<6{Qz~PnRHyc;w5h<*z($%lBI6uc_F(8&ZO9Hxe^-rBz7(pL~
zxna4M?Inp}U#C@pQIbsSKJ?|Ps@>%aq}Oj~5C^q#gNCdtHg5%ecPic+4oFBh;uoB&
zNm)A^{aT(xO}xyD<0NPshW860I-0#i!?kRD;%B-j4BU2;TD>39X)^RyvfV0NZp2phB{6)IboTP>FUg1Dbw@Q
z(H&=t`rT=e%7|417gBV~`JlJCWIbSzV02ZLVaUF-<6DbE<;hPx7o%`5VzPkx%Bh%D
z;r4)CU1^4h-abn}ZH9%f)zpOGW{H3N4sRsaG60KMS-BUCW6NMOkSu=Lp({mddbov&
zf>y^RlSE8_2CbtOIe8C*G={V^6(Sf=;>V5U?TjYt0@7W>ZnlXEK0Y6{=NI)%ps$>J
zHJSJ*z=LGcZnA<9@5W<9ejcqjANTgOAktwFfhbmxd}C#+wyPIk!~9D4iLx=^1P%;$
zRm5yxC|SDzSRlZjW9o$*D2YPkW1AC!D66m&E_mhBiH~EG-Hp4SdvpqrR{3iW+o5%R
zTz4Xg&^AQq`fOihvJN=Fk?@!6T9>n2$E}g^L00nA*sLXLK>xVZ0S^+P
z$UIH91(Hi9`Uu?2wmyAE{g0kv`CQaq85R9J(K2u><>Y8z%;_g*)A)M1RiSaP*$f>K
z(8cA{v`v5>weNHxW|&*dNo?xn=i#+v4MaRe%Dqw~{2%G0pj{{z1AH@Gf`eXOB~UPPVoE
z3ooYj?~w#Yxjeg^Cbt?Xdb`nfgh+riQIrPxINd;SMF=<6;xKg1)jO|TToBT6HAO1x
z9NwIAtan-3?geiicE#28j|Ny40BP2omv3T+beiu~Swwm~=@YB0J98`YRt%(grHSjg
zpVu@{&qgld3{LhoLIxxas%Xi<#5);b1VYy&OkNm
zM9sF*grM@Z6P~%|;xF
zA^NJDrsuS=Y=#yWp9LlNvRPwb0nlvp}HXaju4DeCY|`mmTFRru_t?8=_1D?5z6
z31GT=`-4qEuSwUC={=$Q1F+X>$sCq33FpW)Iln7q(@e~7eXkpS*StDI+WHH(ob&$s
z`q(>&iBhQLMeM{my(IHx_(ZLBw%VWiPRVi;pX!8ew&?A>?<1{9B2|A3-C8vDnNskP
zjhpa+KG*t->bE>2B4~g5)4bJ!V^T^)ZS
z&M6A7&QXxp#V-&ySH+QgUgJhyA
z&IE7(wK%NM;*44bu18Pa;8s=tfqSlme@H{%a%^U*w*_NXErp9L2)rc@QrY0|fy?dV
z-Y-*4EBh^1lXVXJ#ydpc=;Zcgo{7JEj)i61ozr{fNC4yPdN}s*O3>+tLB}GRh5Sx)
zx)x4r^-o+Z8GrP-*&Y7y-HU**AcsMj_tZyZRlKoTi*?HMPrvkxoM~~b1Doow*Ia3`
zoeP#^C(`9MG~Xp80*JOBNdzqR_b->lp%py#MitA?H`K1r5O1wdL=EoXD7hy_p291*
zSr*^q8GN(9(Je)K^JQ}7(P68Y4dqb#pP*S4K75orbR6iCr_|4QW7p*OEf;+5w#x6K
z;3a{-K2IJRnZPO3c$YHOEMO=~FOaH;gSq{q1v1@tWk2qkmiazHH|`VKZI-
zrD;5pRoqAGp7`)24dUWo;_)urDQ4{qW?Pj2KfF%d@EqH;#}Fb(9HEn=QDnWEJ^0TH
z;++R)g1#U*8l}j*-zpoBxS0^uhP(SeHdif2$2qe%dZKG3QJy@tWzpSQL{GcTpjIrS
zuOrbPhkSCCn2tsTUGt?p>9#B#uh34>sac^FD;g)<@-z{Ph(sO5q2idO-`fJUv(c}lHDj=E~oFYTz$Oh%0;y=~;
zXH|b0)<0$S=VbV|HU8&h_;WJ+IT`-kCjN2v|Noa};2v|GEpW#Y^MZ~%mVqE!r1QW8
z)!eDIpg-6zL)NI5swILQHeX`ZjpL@Lu6$6j{Ba2~n|8#E9*jp-?Bz_RTkU9I0Ed|n
z^p<`j7>CD6=OIajMDB4#96F48nC$iOTYxNXN~rbxqkZGbp{lz3F&58O`n21wwOi6>
z#yz(jKiS+baI;YFQu=#8%PwR!Lom!m9wx;N=gbThYJ8BDb!*yDW1}WVI3GBS=BmY1!{5F+!
zm-*Y9c%9k(n}d+dsFVMti+WtMlvVug+|6t^$yM{y-#Z}Peen5P+j}|X#I+0+-aX}Z
zhJ;JN)O^?RC&hsmPHA9zpo{^Ilq?k_aAGxYRo3g^;>CQa^JYt!D|RKvxa^@R&nGD70_CmmPWrcwy^d5a3*9Xr6|a|KFfZ!sVpVn-y
z)8a-_SeFmWr!^Z(i_l@2c^~C8{kg
z$KM#t3Y{XIk$Oef;kVzvRk@!_#mPKFT{M}NaQIx_B$=Uwd`bS9YYri|K4)FX^+5fA
zDZ%B)4=LsKV2EYM4c!hOhw^F3h%s2{c`o7#bN4j?cL>^7!ZOv+!}f
z3tE=?Bm|Ys7zcYngNRhpAQ9z0o_J`CmM1R1_;Gj=j&ky$kUEdO!n)cS=&nZyT3G{f
zH!syj{_|i^MF09h{Te}3bSLMQ0su)Ig?Pes$Tw+_kQa+E&U!~r97V1P%SZMoaaJoc
zDQ(6z98&<-5p*-_wqx89TuDE5{tV(6>!YV#%|$_AmNg`dtV%?${33a2v3oQxa;xtp
zpOm=Jw=E;)x?$B%xxI@SRgc`_uip9m)llG0=P8$5F)!^2=!tb)ukwTzN6@{XyHP+9
z&S}**pBwBFoFB^pM8V`k`y(VNc_)dQgTVZ_*^c)a=8#h0i=O+l@*}D{
z1#X>EchbN2o~pC$OP%)EU^|%^(h_y@{h|Nt^+87x*?k^dhbzJ`>ho>PZ72_R?wuJ!)ndvM*SK>6To1f!;N$++yXmR26X5fj
z;vP0Ew^NHQVELX>SWm!__8iG_*!Qej-UGjD0L$C3qr2QAtR@r_uur2+O_heKv9wpnAaJ93%)1%EN$T
zz$R{n-F~_86j6!>nV=r;-xj;Hw$o}~&SxarPkD1Y{qT~~$rwH6YbTFj#?+n!=a^Q;
zdsaJh{@jR9oAY8uTf6y=S8`wl
z2k6_NRhZ{gWdPe2q%#o20>X!eEY4d-)+-gle|G0gv66|&dR=#=-U!-f(~oBYABmQ@
zyf!eAHPeRT4LFq8j^%l8BDlD}{<2h2VOz|QV1K~T->nh3Hl(t6OeDy7KE_EZZS-dh
zTE%D2oIbE?V)qISQey^LI#s|^_-EKLeS7lJ0=XijO_a`B=K^xo?%*j|
zjZ#cKL;ZT#hmE?~26qD9IePlLS1Dg+N>05^Ldcz6H9+}%;PPyL2Iqn~qgaDF;nkh1
zVooHO*YDXnWFjVxwL!Jq4G5eqA%ttr4;#~$Cc0-MLlf0
zn0!?C9riid-v$59^s!y2Z7T=g6#+vD4qxbR+Zb1fqBi-Pdn*lo8L1nv`=
zcSe8(?oP~6@^!!q8e2Ix8lYMDGw8&KN}vpU@JDsH;<1$evnu^%5+}UxJQWxN4qCw=
z-fvH_-;MC_;4KgrZcFANDpVKu4>yO#jD)WzE2x@Fa2
zyRvyySH3F%W^eTPuDd6w-mWDp#}GtPJ@3R+4;{Wp)-^=c)JLb*&%7m8x6F*wx4E4RZfvLX%KTEoPDr8lDJN}1zIPJ5CcLZYFiaI!v`Dg-iGxyban
Xpn9U;7|QDLxcSE8ukNc(wsW3?|=nHP55H({qKKn@xZl+
zt_;jNm{MjnG{`P?FCG{A$hU+J*LFft0(f|}_o{h5wHwW_Qt8Hib#NQST?FY`ilcK;VQu^i7qQIeD+{g;rca)wamn?OK^@D;RSs-}
zf9QbwIC#Xgf;yFFn5t|5BS;XIvUF
zIyZ9jUG@l(ekh}Srs^N3{a&c<_=oonWNk)Y&=fGhJeJ8|*uwZCaGn
zcGSBC16@Aa=118YM}F_f5NJe8whP}T2(fishjid4y)cg{=`@HNEF4y;y;I;gi{aPL
zU$Q<8b!jNCE&DWxaKlYi_bAzBYGypvYWifAettmMUg2`kO6@(r-1XP#U((Rm+?~0O
z5HEJhpfLcnYcv$u+N;BC6L3?97YWtps!*lRe0$7a?wB@_9Qo{7sl9w%Qt8W$x`
za*XV}B}E@-?$nX0BJzDG3aeT$T&kEgk|j5aR29vq{kdUb;Yy+_
ziMI~8!tf#!cIqaz;otDcN|R^J$1d`g&Yiw0Eb+w8QkWD?WfLJL&YHw*qd0+2?a>H4
zH@7~*H!x?yrMh}F@$wlRn^t~9yZ$@#uX#4mhIx;}qk3$2V5%Ow5qZ`O&llpGB{uux
zDmSY>f=j}Yg04Vt|EvooUmrxMOzBF#GRhsBhU-6wD{L;k_E0y|Av|E}lV|9+GT0;N
zgho)`OhrT!>j_f$+ibELDb0FiytwbEk$9e{8c&bgyt16(6DzkdF6#FJx7_5nqT}jg
z`vtEtrl=ALx6U|^(ee7x9dAmhju>^Ay1I3%gOlxodCaG9WcR
zd1vK@XH%&K43I@P)#^xNUfAFj()LsBwO@EfYnJDvRz8V+tQbW}?creAXiZ@0klpiA
zuzpyjJ?JB`p|RX|U71{PwHYG`^c)0`Pf^mfOp6w&N+drQ>ot@s!>-z)&rA3p<~4WA
z_jodYIEHCf(Z}ZXkLE9)r(mMCG_`NGj~j^@GSpQ+i^My{4xLSiqnB+KJ=3+`qm#_%
zn(_EQYnT3K>Hd@UtM}?A4I-nO3+^NhU}`VNQgtUPuz3p;jYXjM&XuTB+kZD}f0?gb
zGzbV>wR~@h{mMf
z@&7lM^_Nfk?-C5ZO@psmx)Cw9z>RUm_5&J(Yuv}kzShV+r8h$?Brt~k7~2i0sc!3KRX4FU2zNM^VaFilaZt+&*>c_Z2)xhdho`wN0=$D2AO7^I$v
zjfuY>9dFbCbvP<|T9n#Fa*BA$E#PwLqDJ}f%FT_TGe`Q8kDnDJ>pBI<10u8VkQCc0
z9Zn+R1zFZ92vQfSKd`C-tRLn}ia!=3C(A(WJwIZ|o0#Ail;dfwE}Hz27tjmp%VQdu_0j#|^a{eW{LY?CdaXCvHWNp6Dd0cvFC0Ap}F=nhav
zFg-l4&`@}hxNaX|mTFiVV&wM2>ZruVCBsO_f^eU}&hY?oVgQs&sD%~hMi(GEU#x%m
zs8?Be)7{oHWj>_73lH;xVIc4z0?Y_0Z2hc1H;ZBM@pDs>4*3?Sc`bzAS!yHHji;le
zi@A|WyKwx+VD%nvQtC?ISMKlhIC~VyX@`GUi;+aXlQ~?^HnMv@JQ+j=*p~+1-4TMj
zp%vD>+;$RwXfTSFOP$^DOxcIFj#r1noYsL;F)jqLXDy@p^?+%v3zdDOaydUUWPY~h
z`xD9dkhW@$q91NISS@<{<(AM#sbAn6K~g{q?640C*ZI7X;%jbRDW-p=qW%+9{qvPx
zI!5>NOq~VGHfY{PULPZZUMv%u0AmLn+egl*0jplIYI2K0{rT}{V>E-qw(u1w11f_?
zsg0M8Ii-BNkDcsFDZ}3LpVBlP)H290#+SI1scaNPQR^erSu+0+Ca>yasLN2y`H%`<2=XbHaiDTGnV)EZa?7~rfW6TM998SI2m5xBD8N3e)_Zm
zBH*I)^*r{{2R1#?=Q}(UcrKMa3i}B+I1So_&DV5bVHSj0YJ$hmbLk=0KAHFT*Mf+1
zb4T}2P3&9(jPsT(cc0N9oI&E&(@WW@KMBO`kZxr7)Z5#4mp}br;Qculf$=HNMb6m5PJ~!JtEj(Z
zh=kzDp@2^pMCsx}zoCymU0@uUd6nQXmyFniX*9A>d#y*?XU41v9pa4fr*%$|&jN|~
z67Lr8;)$CsX67}@-wlybtPZ^w2}m*57lT1^%?DON9oTAARDgQk%tcD$$f%i12a|ua
zFyWg#!^r%FNvYUj!u<~O_+Utg+_p?hBj13I_*l0~#?O=oC|8w1TLZDA%wq{IY4snJ
z>Az_5TJ1`WAj2E^eaxEIOS`iHr&d1$l6+h8(ZcUztwK95;?zEUz9hENDU~>SZe3q)
zC)Mq4agwHuCms%*1nt>blu*!TH0041hJSJVT`!h^Vlr{ze79nDzDeP(ysY`%XHU*f
zox@xLShK9{kj-$Ub85FkRr-Mm5gUH&WzS~dJE=HFNrw(5&#fN~%U3C{gZKc8HKSNX
zT=MgZpZDr)T2;{zk22GGKXj_6eGB8Vt-Wg#a`i-AgJ#n>QzX9O^6lzxPZuj=O&#K>
zR5`Cr4BWsx;D~_CO)8c+G4*+-F~_|WIu2HP0gpNz8|cA3M#n_7|A$!9I*)C(g_G;yyrUep|gbs5%5`p2|R>z
z)iW0WNrpAUkGI&>hv>O3`_4VS$^B8iHcw1!-(JnuLu0kw_$z8d|FY4gD)28%;FYnsYu+uQOUq=PeBGLtau+Gz&
z>+%yXa&Yfs-B4z*?$o5IddkbSvB~EN%#Z`Fq(ZS_qQ
z8}IIeCybN=^%pKW=I8E3g8)dab`UIij2vNVyeTvk^wjs)Gy1vnQHb9fvo^E7!oic@
z&|^bp0l&z^e-(ee$Ca7-LouJc_Up4CgD)3(C^551=w;`sh{;Q6G-wSZR
z`r9sC2>8FS(cyTK2-RQ&OM~3$ra`utOFTD%)0GFOK?}@-xc+Zm`*1e;=Hu9V2cbXV
zLP0aI4Nq$XC3<9L-`o@KoHq$I1U~KT(IAN_gUA*8DiBLjl+yMoDF}>f7e*5?7celu
zn_8&Y(r_pw@?T0NJ=0ws#r~is-TP$kO^qSJXXA11bQ*fv
zv3F%U{CTsEI-!_F>2ccT$ctReI0Hi8o>-7L*Fu{Jjq9
z68pBLA;)k{DfyJeqA#4RAOZqf&a8_eabQG^lmf%KTOs>3JK=!Q!x{2}h8yn+4HnO%
z4b@}Ex_UjLP%hl_iesY)Lv)B%L8H>o`Z!4hjvN03{!e8HGnDQNd~
zxSD{cb~-SC4eW4`?4rk5Rl3em@azs(eTy!#T3E$R&YTZ*O(A1`l?HjxAYk_8#(PKl
zBQhF=I~A*sP1>}>5PN%oBsi)#_c0JBBe4z+2TuN1H%$QBs>@V|Moln0WN87mt-5^6
zY=>A`i#!}B!i$|>m_^AzkDR^=Mr#pqGzc+i7z+Yrh}Ff&MG*p)EbWD$D%+RqijPCT
z01?B>$iBX2@oPb6tWbO5z&eQdu(SCE%Kl8f33o=o!{R_#tYgWQ3ghTU@!(>
zC7}5Z?1vZuLzb=tE7d0}utWEmeU`yW+Pp+QuSAbo(jaJXY|vCe3W`D>;Qg18aQ;=o5saMA{F34CL%kg(>+ftm
znXv-mi+=HMLW8geby9=>Dpas*(|^yufc-SIOS}b3CX;#QK*|0=r21s}W#~TBUqv`t
zY^q<4+Mr7A2+$x4zeWY@N5dcc0mC7zz%OA???eKIOTXsa-6-vPWHO1{0Zt79C58lS
zMqpciWj>24xcvv-Tt`l3O?2)d5C7T7pW^y+cKt<3{I6Lj4ti^8l#|So+I2rr2)IjVLWE0ig1kcjh>gG*t_M|};IrUH5p2L?Eq@5c^IGuwV
z{hm<&`w)8L!0)-ge~g`c_7?ajJ9g+LlRqT(yw-Fy7k}XZ#7N2%TeKN@k$$OfOrL6u
zY@OMjra@>Bqtc=QEh8G_7?uk;b`dlx-dJy9|09Zz%F3PS4OoCW4N@MA-I~a^=>NitPo)Z^$KrZi+cxa7&s;8rcf01<6wJ>jerB8zdlu&^*%<(u$v7+}MxF-Aow}4m
zDMq>?Sb{oW%GjUq1MFDoCk@OKYaq)reWmg=|PD&~MQP$Y%!nJzVdod1CiTxuHt14zx@zw*?
z@QH>kZb1k$iH|dqK;8R=CAQScCVZ}|^3u*Zxux%WAlm(d97rjga50|YFOD0G!H{oI
zj}Sui=Uf+MVI%4zjX@L?Yz|8u{tZOi=7C^=d|0^LqVTVeDvnxSGS%f5dd6?6OXm*4
zF4)8PO)q$!`OBT{$;_xjI9>i5Lcj7pH6SVDuUxdkAISed5m_j7^Cz6vd&XG*nqhv7
z{+0S2*{XJogsVs#KS?HRTBFj9
z>%r#Z2i{NQ#|JLZAO>-`Myt;;iOq977i^R9;uwr8@`F&+0!blSFbuB<=xv`|e}u2y
z#PLe;hCAOA`N*>r{95hXSvq``R-jBOvCr0_clDHG6F3FkR=5{+lHQV-+fu4ykl<#0
zWXYNusUCqq)T`%r?FUq!xLtCi^~^;Xx+|$lwYO$PcS>Mla{(Ho-lFK0+6|8wGRlq(
z{>kX;CJpjKZtf9g>Ytg{2ZoLEe@uFOjWEMHS;DU`zK8l2yh^%j9573z90y+(&9K6JGt8?0s{7>@e
zLJZj!zSUwy0s8}sx_-s2oU%mIepNnyguvJE@pIJ^wihPe-Ml`^*)1SJ!nQ%M8>fBL
zwKwsyG{~Mk@}0{`&ki*ww!)v5i7wxh$UFz!0iu8begb~j#{>s$g>o+Mh>VLF84}-x
z<&5*XKkE^77(ydPJ_W*Yjj>>2!DM7z<&(%ePyM*7r@dHLhu7Q$Z}1wUCfw~^UxB6{
z0nbcfqq2kcV-y(IOxnT{(*nS`k^yf<0;aaejmE^*?#587FWSdf7eV#=0TZTb!cBIk
zXY@0ldwADvdaKbnke
z@gUJt!;p-iCe!txK|b%pa2h}`4RQ$^0;-wJ8X9CiP`t%%0B%nu9H4Gw)?=xBsF%d1eynvBYl)s;mEGBmIH?2dFje
zOHmsj!2i0A1hOA9izS~dh3&!h$uiKxutiHEoXT$rC1bM2jOw^CNDoS9zNtOvEdE0e
z{)rU*S-mfAudl&sw%O#qfc*XgpU}S-Gs;0>QKx~@xhtNb>x=yRF8qTaR-~txN3k_j
z!q7S&WqJ?Ix1=z2iYY+}?8Dp(wdvKz
zqrE)1TyEPGU{ZkUzmK#X=>AjujCLIUpVo~cU5ysjPcCe}dx#XK&YgN7qH
z2z#S1g2vDlrL_n0KFPSaGPjCIEl!M2=1gn)sdW4aYryNOfl(~h>lt&`}1Nx
zta?t}T9e{3+@`NQsrmN8TzL!1Y}H;2+`<7_SkrnqoL7dJ`;l-UCvVs?@1}51P$==X
zOQP~4E16HaXC`#klkdf_NQ$|765y-d#E(1fB-?TQ*Z>DER6*`b=S1t|uNYVH!icZNUp5s*%Lq<+mJl>sK*EIjLOTqZHZml*s?aH3tuvFe(&-=GWf{m1<8!LqmQc(uDIB%1MNh6
zLMxKD#I1t+<>4hEQ|Ej@zEAHgpBNmRmO@gD#u9JBK|_K*NZJGk=LL4YK@Zxpx6Pql@w6P0@X92?|))tk5{qH(BIeLSbpRU$0vZo^2$gom$3?xf48_5FbtWoBoh
zaOUaSUzxT=3>-qcFt;U{V;rkwe_}7%X&1^*5x;SZ};rivqQ^e
zpx@yvWET>3GV4O!3g~+rWgNW&x+wh$pBVW~^@9Ho6#9Em?PxLT<;=$QN*d&V35*85
z*FKrU<5pe_0$Ann>k|vq>#ks8yxebs1~DvkUFH8Lv2>%~p8Yd;o57XzKf2t@lL5aY
zZ~qcS?`IxHm!ZfhV6Ggy+yEY#Ot!Pk^hu^(4g%p)WuYM8?R4b=@;{<@;6#7m7C;}p
z^Bd*0mdk8Qi`6;t`k6YAULO4DA^NuYLTOg
zd%#JebY3XlfS+79-}b=RJY?so%opvBNm0v1>2mpC9`>^Jz3|!ZNAAO{+lh*;2<`yo
z4-KKM`{IeXMOC?4#nMsZ4{^}SK8f)Sqqy6V-7=y-5@J)SjgEfpx=)ecV5hP7Fkw6P
zFiK*8+brTGvVxjH#FJEGpR{%a2{eXYs!%ePUoJ?>{#12vIr36O?5?Qt9VOK*nb!3e
zjbeka*1obErbZ_0#L|C!g-W7PPA&%&QKz&vMcQSf>C36~m)%x?Chp56%Xb
zxM{U2CWtbciW6F9J;t7voU6ocSHARU=u5&r1dZd{WF1OYB{CAr-Kgdx)CA+n=*N|f
zKIP_X$R2-I?Zgp#)|WKzR2ASZWm+xM0Hy)LX%J`dxP0PH0wp5AH!y1g@H=Q1OqZ!i
zG>MFiym!D`r1faB{tEdsm?z9u_d9^%EmyjU3k2p!$q};MEc6hNYFWWnX8$mSUucwv
zZuiO)jnltvv0W(nf(@S*s~J*>&U(K%gCNeGwORZ|2|x3+^6ix;d#5wZpA?>_>vXU>
z(6)>>F@F$XdB8%x2Y3@8*A0?SV}N0b1mO^v*x+x}v?BVeFupai4frbg-ca6X*D<2gO!wrY6^z%F|r9n;&$=6h6u
zu2&rjij7BIjWxn}8Ebg#$3H}{@0R!KByB&8QM5hSA2D8dz7=TJzGFSNZ;`g&o>NhE
z<{|Hdq@9gT_i6uuBjR)u=$6W)>U<4Jt=TwqvVe{LD;uM?>|k_+?tkL?dzCZBVz7uj
z)d|EY{Y|c}pXtLt0YPCZ%zk0}?GC`h2;Ds{*d0Y1GITY=z^`5duDW3t;<9Lv=e)=;=pS3@&y2fMjs{mV
zXEm8Lgd`p^A!bo|MG$+0eDKRk8PGUu{+l&ceIO&@6I3um4$#Q}rhgzWVUwLa?F72x
zm)&R(EiWh;l1M)J2YQPze%n7O{wlveY8
zU+_~9R2}?hnldo+pIUMc_5Kek&~i}cbdG?bJ-E!Cg?HPGF!YemL(SjZ@C}W1HAY4!
z?=yra9o+G>K93>?x*)eVkV#Ll;#sb4LKlas-bCn+l$73YB0Ro&I`FlZcABSLlz(r2W~alGTz?E0X3`O&0_pEzgyL?f)P4-UAxW
zcHJMAkcbGP6J-R6PKe${3W6{ZL86W5qD6?7F{4CpL68t8f*@M-5;4&UL5N;w^gg3L
z81w$0cb9X{oAaLi?!CVM+57v}x3iYDvUp~myIlAE+|TtZ*V7WGJyjWCU}m>pLQLk&
zPDinLcIuGrYrcs9GVO%Z&y2IgWuraUuLI(AxQ`Y3>SW--{h#*3N6+NO+gu+QOJ`tK
zPhuF9IhfW@-EtD?;5a_XMz_IdHshOBz_PjIVXibEg$OcI|0?A20XFn8tVKtjr&cZ-
zR3$p!FiqUfhe*Bpv4!niPbEvald!P;r5fhz96u2yG^8HWpe~=Ngc{x1%Oz@@Kyo?F
zc#^u&Y~Wk}a%%cSU09H->*cZ|rXu?*_nU2B(qAU0eY*u!M74OJ!$5n^<6wbh((FI<
zxF-7-23vVv+)k0m)ZFZJ?Lyt9mIvIn9@9)sa9eRz-0Q~2ho3j_}>He?;!czg<~r
z`tb$hK`2(V^mELbnxL5n5-t@?xNHKsADu81Gkry41ybTQlC7uyGM+FCB45LN+{3~V6
zG0hH-**{-3T6>qaqA6AGAD7GLE_iUu*^je77!=4rK+?W8i3%YL#6v?WH^Y-(tPB~8
zIQc$ycFisSn4abk`mEzeqw9QwImnxj+&>|ZDtD4i?qaYjC1GDNSXyJ}4z6
z12cX9v>y>ZoE$N+2t{g41i3PFCc8gTU*FRFBmCCxzJkBXPr*#hUx0U}69PZKDDOjl
zL!SY4@%DeDdjETL@i}rVcC*fLm}Xm_YiM{)tZ|-E49(W*;-kq6
z_Op#3U$F3H-q~z-fx`$WA~X4(ZB4&Kp$vye5nby-j}v>stsGVLvS>vHT7IJ*rTm?e
zY>pY@AUohO0wNGhl$3jZsafltZcfV{?NN6~_w8b8n+%@?G`2Soc^2>6hbcqwVLvMn
zWyr^uzB%TopYMP85_carcZ!mWjMF;O(6}Nps=sMoOCJ3SS_W@Al7Nspr)2SREfQm>
zJAk`SYFq8YS?Jm6YncyTy-(i#@wM06WiN~&gpOlF-tLQ)(=Of2W=LT@4L+)A?DFfp
zu7c${)i_6MN0f+&%9`Z$@I=WwOeu!vZjpI>VUC%d9(BUzwz@ID|Ad2uPMsRwtyGVZ
z;ex4E*40G|eZ^^=5US>Us3&PYcc)PD122X82}47*vy^INWJoptQ;%|Nt?oUosnCy<
zyn9DqL$DP*6Guv_ono?z2J=X4SxjXAvS0q3VH)aj68O!sQM=IjJG$)ukyQ3N)A+AR
zrEM@h{pW35@Z>*Bb_p6|re_N}<&EUI0(U;-<2tUNd*BnH
zArBcz35EdkFhybDQ&S<*mbJ`Qtq1j8{FAX4t0j2}e(}e^ld_LL7`>H`NDL#G#oiVu
za0$$_<9>ZDuaY>}CeV?n+)zN|X3J7{fMVihuju2or>(*rTvQb2Pis*Is5q%UDFn9(
z;-yklFFG8B*Len}Y=2D)Im5RXaS$Q{$ebfEPv{Bm@zB_6C_wlXyR$GE;sScnWqg?1nb&JSY_&H1ks4|J$wIVRq??
z?@$g>>i_OOvONvxSb_9s=y~v9oxJ}GSvZ*1`mcQz>C1bEweAI_G5__xaX){mMDwoH?{N_BQ2cWMP1|MYoEyI67zv7Cvb~=g?8S!R3Q5!;N)V#{41d_w
zqU-a{p5T%``7KK`wrT7>+Dpl<2)vdL6@ppagB|mIDyAfzWj%W6I9+PLwwmu#x45>o
zvM-*h5o{~kB!l^JS&7d8jfFRS8>hTn`Z}AA7T`O&PwJP0S39H6)|<;ULeB$k&3?)t
z6I2FrX4$W(;!sEW*}6+$ZC%pMG9IHbHGZynHdlYDFFmXNiz}wm~$z*XdEn%Xh^uxb`@3v
z6x<0mt*Sxa{W0HN?)%WJ{2I%mA$f>8m&hV?Y}gDiIFj&zz=7H$Iil0|dL>*}S4mYP
zR*brZrLHG_RwUovfS)Qi%%1U<`Rn@3#`V_Q(;`|2{y39darB&jdM-k%22zz#j?G7)
z$btqMOCP~zu-Of(r=L|D{b-od7^ZX*4BrmWlP}3YxuOA)#b$qjJxk!VL^ECZ9(lVT
zb7ASSNwgPZXKt@Ma}!^)+fz}vZL-A!ueS9LTq#MwWVJ#1xItBdhIh;fNCXRv@c;xUKg&D+cez92??R`BSM>u&&ID)Rk1PHse%^$cB{x!jLLO_fu
z{uX&F4+SGM*ghh`sK^
z=Tc3vg!l?F_ONSk5W8wrMcGfEMeuzBA_{z*aLq*XI)ZC`ipe*8nqGpE(-QW~a+KhA
zz9$OqA#*!iBFI8UN517uo>#60Nv_wpTE%!VuQD;8d!;Kc2mUi4Nbnw%Py(E!WgG!r
zWA_H>-pFl@u8nfOO^npMF56DHZZ6^in
zocQp&ne^Z1M5z6qC?SCVw^j`nv%fU}3Q#RPevX^G#5KP`C1#u?4fmfnPj+
z4!*r=*_J5%!370Z#lK<^*4T&f=&H^()N;?#U~d%sB!Zr>f2(SM_;epF0=Y>vmPa
zG6WkrYFC~O_MSnuf=5SXO585tbPOKz#l)yV%J^<2emz?*+9SQ~=Cy6^HKg@a^{?z&
z0^RXRPdJeS2Kt%}>4d~S|r)~DREj=k-F1F#U
zj{&awxm9014C_V%#HmMKIh~&G7(Zbm-p51{sc!l9#1{&89sK6ZerN+7@YEB1#>eA2
zzUoy`pkub9`^Xm#OEp8r6KZ$JW&=P)!yj}u=flU0!nGdQBS|xRq5$_rkfNg(1_K|fJ>dWSQRhg!?~D*7@N6Ex_LKzeRd129wu`NC3X}Nl77A3~uikYlJ(VR+4g7s2
z(gziv#fL;XGA<{J>1mnLw0XT^{J8r8eLiao$+23HKJHoD=8x3)@X>7Ke^B53u5(eo
z;J-A<_>uMp`)n?}nW(uSI7RVnOV-|XV|1s43d}h~k-l5-AA^ZhTQPXs6kYI*S_1R?
z%-s7U#g*ipb~J+%=gSq<2(^Y23St>=hF>FekKbb)AtS@r;T#BqK2>I)VeGf(`7EEj
zXX5ilR>o)w$V}YCamEj_Ziiad3cpE=eROa0nWxu5aR0Ds%ZmfCume~oE`VyBG(GtX
znG=S20m6oH=?z7f?}t?QTen(BRFzf|M5&)OHwXNd=1@@*l_Nigo
z$5kYzRm{l})yt#6zJ@AQd97@<;>##e3AZO_^vPRLege*c^YRQfGsQmHgNYbeH)CDx
zN)71&QRr%jK-m^7#}@`tTfMQl>sMt9+-9cFPnzjwHtv1CK6IqB1u
zdVZW2+5uCL8p#5P5iqziK&dI?YLvzB<nlou#6
zEXtZF;GVftKz6O`q+0tOMbf>9qsdQ5m&Hf3>Fw-ah$1cZLf|(t0ZOyKkTEThxV|G?
zPVLp=G&4k;M9hV^Zk#JsjxX=Y)HZ!_=fx$FMeF$O5y-}3XTiLVj#&ri%9ARk0aVk2?ciAykrTM(%&IaY5kLs$R~*YYeNHfOIG+8+iJO
z%k}FCx(M1Aht@tpzVzDRqSo9Gy}|0lpF-VZMM?m=BP-BlFni~lIgtbBPrgC)MDIV?0&5```_8BjpRHWkIiS*JIBvD`;b*sS37@pydVLPl
zS7-M6)xi2ANKaM|0C5gckRhmV39^}^$UrXh{gaV`@4kS4V)?&w5%W)AMv>po#+!pD
z{t+tjgVcZ7xm(p1jGU2)c54vRAP(EU?ia)kd4d2%RpBEU9ZmkkJ{KeB!;{a9yopS+
zd#!lp;kEc#7#Z-aB^44~|BOJbk)rk;q4dt8H6N~ZsZa7?;mqsov4S8|S4!qxxwr=Q
zB?v1K;{6uLRr?N}JJ+vWHv?bH-&vUST`S_Wer2FWc-}C&x|_9u}JzA%t_>B%>q&%dfXjoZZ$F~
zT8t=`F~2PHeK*a6_2uh8zDoY2OYz~N*JcOSHY1?ah^qvTX3Pjl6h9S%OTU7?GV-WO
z(qdeR_5?NW6-oko;V0;57Ixz`e!=ausSo)Vf{!-t8lS_9C9jXmaXb)_3XTUz{V&V0
zZwzI=(P(LZZEr?_UW=%RU&t6p45U8HY4OTUDxyAtB?iARYdTPGkG(&{Udh(r@GX5p
za#Q`&7iS0Z11u}m&4;q-S<6>C`8ypQT??q}
ztwj>D=ThvQ4-=dgr^m1E-K`;@f=P5fZdfp_AynlVKtGT}+jN=!2i^DabB~7E^YcrA*Uxd>2a+G{G%e
zAMi(kC(1BPI&umr}}d~i-a(wSZ^oJ
zSQNYmD6xxcr*I`~X4jnX+qe5#N<8UC0Tf_KRDgUDJTv`AVXO)P83LLX5C8%GCttJk2U
zoVes}$Mz47MB8TFkqfG~4p6kbS2HPdES0sfddxQi2|_Xrcy0o+iw}-u(#wiKnr~&n
z!Q8DulZD0ZS0Yu|n)7<{OM0jLr;p@2wn)7e?w5f6i=
z#x62l;SFG>XCnJR_Upg1HS#%jwr8|gJ2E0AHH0pN{E7kcyo=Tcaq%oBE70$}l@0WL
zm(&2OA^h+D^5^HpP#yV2CExL3t^z)sP;c{p;O75d0sy7^=^NFRM42+@#-ujw?#5uaqgLA9D<;b0AB@ML>yW3@q)+*)~t
z^BMQc-3X&U0{?a{EBO(66#nAW+xt4Q`|kj+N&~Oq&{z6P7cux0FsGoJ0j4Dy#lVym
zz2W0r5Y8%Ud{$RJzI7&N|M^oL*^ld9F+6BTvd
zj$+y~N`5mtv(TR^jj|Q&KEBh)#wPYyU<+gJSuQvSl@V7Wsw}
zznMvNtD-*jP8}LV5A-Q`f%1aiqMJV>xjW}aoxR)K*R>YKCpOG%&Mnrq193gEw$*q3
zzV32cY+_0KkJ#2%Ta}($jxJ9B;Rv-&xq1;t#ok{iNcl1lonE?1oFS2
z{%}(Jg+~6g
zIm_L=oVr++gKYH`UrWVv=z&y=@6MFq%ieE5YNnr>;&%orfz{Sy1s!hCl8@y6FpgLr
zKMzvlOQ2dFCeqE{>Zh=zB1;UQT5k>uUXjfX~!dZ)(r@h^F@eRRPu%DBIqk6O9Lu
zVRTPjNz^&YCJenhXzB+-87#Y9Kh-Lzx&PG$(D?Egaci_}g`9IKBp2?KiU
z_AAwGW5&=kn=RAKtLr5`ntRWGsL}%7+8@2^%j25r?DEN7x)UapQ?6A-KV6Oh0Eg
z<8#UJ8dGN5%B}$nUh<6!6o=CR7<>3wb8FQF<8WoIqZ>;WY(Gl)BR4jiFK7mdmUu>;
zl6Q1r@rC!kj4t!7RT$6kFq2z{5|pshM5eGk8Ui{HWe;U^;J!Rm&rF-1zg%aL8b_h+
zyzwwy?2F~;0ZvmjNNeowG*JND1iOgm2su?@*(*~#g9x$NBJf>ngUFZXp!nRc2kk}n
zfY*UokA*x*A$J_pbHBGRI9PSje00Y?3)zRNT7#COBRDkSp-@(Y!(Ot^Q-5C&%7{u=
zoaA_KYk#|j^T0ueHVKVG0YVZ1(hyLDO{;93HSU9Miy)YLU|m?%29U!Ak5=M+69Vbu
z4H22?M``oz0{JCrBnjl`)TKeNAS^l($wts@bJ3ZZ#5~_*7;b7{>#vt{dX^6~4X)oc
zP?qqZ=)K}C5dLCqj+5RDy0+_x_s|0SWk4jW1cq@%9@zJlIjWhLgK^YX-5pVH&5K%a
zY6I-j{C3lYd$AbRs0MY8F>XQOLCA>3r&sqo=`w=5zK;ld
zH{N}C9J%cMJ^x41xj6Rcm{-{h*;!HvKKvdQCHQHuq%Ri5fw066Kd*#PAnxJi3FW@3
zoP$JICWnfg`3t^V`AiuPJ>$RYyp3lbIjJ3e9xU`eOvr7WuAn3`Ud0W*ufz#8@cJ05
z6B>fw1Ey_vmnmK4gw9Au1P3Bz)k;#?bh45_eL8?^To?E0*
z>%8GuUKp&-f)XEH7U%NCJM+Okrz}S#g>Hl4vd79gs^tX$YfcRz;-@BBbH~{iLwhdQ
z)~1kO)W7FyuM)s6GXtT5&g7_a12KfSW)j6>%m6Ja0mc{oCQd^v$X6@Ds
zmP9LtaevAj#0|O@G+^=zSvBigvu`f($uLrJWZWm=&_&~!Kc#Nvcj*WY-51WL;m%p^
ze2jtT5|!Ts=*Vj2H8_G^Jf^Idf4KU)fbNxzdeU?kfITM&HBlPqoOL-p`~a=t#^{j2
zp%cUG`Y`G3tB4EwSNUBFFWl-Y;VM`*PO_|W-jq1Y`0`Y?=s10%1&t~7iT<;5@BciimAHA4RId5Gbi0+|(+dmoukyy;*2g3~ersFWN>fpM)?#01
zK@qG+L*DE`)W)}m$@GHSX4ZO2`&nJs5#+`&LLFOKHc(03&Y#V55UTF@SldnAu2-*e
z1zOo2^Ar*aFUxIlV_2$o$z7R(;2SdYN6mya2{(n^Q+WJTzsSiT6~K&0Vc5Hy+=5K
zv4TcRepJfF8|AW57F;#yAv;V^eJ=40~Jfi^^}rp~fo)WWLV!Z+BG=S^%VMx~Mt%*2$T!=W?j7VQ11oQ@4lKQIm>
z$|5gl24YTT?E=5}3!GR?$lH6mvPm5Yj!dT&%mCT|K!*CB%z>id&>i5-;?Km-#Ys=iV13)z|KRvI{V
zDiL)V?LYeoLi<|zDs{Vv#+GkRSA}Fv^Mvr3Evj!`77{?g+s>oM#47`dEg5pjpq37w
zT!gZ=eGj7~^7%!d>0`-Qkn-*n=+0zE)vGwoqC(-7?IB1iRHK+U)c)I(UNF%eGWs6y
z(8v1$qRYloQ!91BR1YIp&NE7l-*Ojtb%M=#F~<+xToPIr*904n+PjT^U&)Jl!SPTdj%|`>2Dd_;ST_gc13s`@l-Ytb?Z}*AWeC;4&e@|YN})mU|!f{F;~tWzdXf-_5nhc>Vi
zZ3)R?_C;n6Wj={F@oV0S!sd-vZ>aM7-Yky41#U=5iLo_B&@d1N63ZlkN^*$qVkE*2
z7O*azw(d1;RvULjeKTr}0h9Ky$EsVW!TRESIh+$=3LMYGjc(!^vV4!^5IVzlgrQ7a
zyjwAmufDYYN5!Pwf=+sMf>=fTL9%F}jkPdx>BW^>3!fw+(bO_-(NH$%%v&TAesc^C
zA0|RF$3}BSx3rGqRp&W;?VLZj|M<9DXzhK;CCId9SA;Z$!ryxa4TqE-54Hy*R0wHb
zw2B`c-UU2bjZF-e#=MFkd(TCV(q5uu7#tcc%RZzSwE8;{#`ng*BguVwx|$vXrtL^o
zg86*PUV+0D)4;dgZ$)`lLAaSt-ZSx$FEZo0?*%5p&mu?R)zD^i90acmrvvz!MNksa
z6~06Tw|u}=<-&>r5hC{ahn8UNDX2$9fuP+N9((0s(<4hCokk25W+vBymk`$`ah`Y+
zZ{NJh;RDmF{Ejfdu6y6>Ul+}-Oz==CY8kS05&ssSe5y>v@viPy{b%s4OB=a!{`WvP
z7<8yCs+@nC$yHn?O@+7po(s#YR_%bfOpVM_CEAzH2M;~z@ZuiP(a{&S+{Q3_--lGe
zgHj_Dskkx*4{i`A3Jxk?#YU94$Ux{F;iGgCou9r{CCE*UTOWN1=z4R7GLisRQ8`EA
z0^Ig&@DeSkpi-aaHVhr&5+Ss=ZAv_OzEZ_#)gb)F+=N-~*!gddKXh|;oDf*Bg30f~
z$Bp+!0P76uzy6xmy}bCDVW$A~A)-=z
z2%UhLdkQ~;n#rGH*S(6JObJ&8w`uL~^;%r9uOH63*k5y7Q_wPe>ZQhGjp+34kHFW;5kxoR$mBk>h%cikO
zSUCQUjsuu8oIztwQ(RR2=7^gp83kXg3tiy!Zp<|@`dlY_lcU0IkZ%Zi
zku;QX3TVgDjV`vOYDUzfa+gR-gq)oBAYr_~uWDJEY$L?6W$+UmTY;Zwi+#pRA#$p@%a
zkqj&8?8PHWHR64ne3y
zl^8*KJ=fsZDjf^e9P-r^x34&MlM}Hd6#C@`rVQQ=*)|GK0u2g
zt5R?#3fCTaC0$nN$6`BISdPDIL8aObThXPgvNif2CW7w*LqM}q5Muj>emKEGr>KKV
z7NBdyN84#q_@f0R_}@+y0_AbAICO`yI1Ps(CX_IsMx?+@+)Wt|C{1;vsn0>V9FjRn)Um@;aW-_U9mofTF%J@}QC-aqq#
z0D8s&X>w9+gh%Av0<
zLI`vxE
z^~n=sSDG=FtOALvuo&G6b&b>CzucQy#OE)4Frg~Q{&ZdjlhEu+KI@8QM^nJHZiZRbhTmcTOSqm(9&tYXn&ZoKqX*Zh92haKk?!7^3yU>+&o5CyWihkCG~bZ@tXD(z3cnj&9o*!OKGfwPtB
zB22qiXUj&;7g~GX?1=hEm&VT^btQZ5=*_@bpUG=&O4_-r9je<;?`V;WtC6!WNv3{M
zr!k)}>TjV}pA)oHwGo)7c+NgILq>^vWMdvqseI03C^^!qDj9^4PRe}IXYcm{V7lUcIw<@4}6v!D(@<{}D
zU)15ng4Y0u&G7HHK=#gowzz%V0W!a9Z1g|abvT^-*9#J=|0+nBq)lq-{EggT$um!y
z<-f!x$P)Sct3Llfy!QVG>)_=&!7W5<#=lArwcbC6lGO*|Og2)IAlg_NnyW{5)NT%p
z_qy>Uv%lkE3uja2uFa)3zfX5?p)&4>;CO5)ur09Sc)uWhNU-%W#%>U^^k@jW*@^}y
z@cW*NDJitbnnZl?3)z+m3-!OR`S58Kx&_F=
z8e<+%`ku|O3?4pGAoyHcqJs^3`ooL{7OT-MCZAhBf00xcuOe*TC4)*o&L@wv*y#;l
z$p_8;sA~iV1js#Hc8p%&mJk*$BJ+CHA
zA;M1{3+JxI;o(ge;9#1U1CX07X@N&uFf{brR@ZzSB)S~eX5Z@0J4#A%uTB~U3_|z=
zP75<_jIEi(tS|U0Fh(>vUnDlx%5K+qbnGsn_%zmTu>z6hffFCr&mn`KEDk*0Es1QP
zLXMHx06vgUu?Ac#1g>I9dHYcM+zXl^$`H3g_W4u~{soPM<%6x+Ysntbw0fsJ4&_=m
zSrNbD>othWWdzV3A}ub=j}$)>gT&#QbPZ*ks7Jb!ZEa$3O6)&Qk}1#Wugf~w-S{py
zax{u`o_)i~>6JrYe$kRj|IM4nl8q%X#A_hTU@$C-P{;%J)dAf+AZlhK%xf7lPLj-Tr{*Dfl}=9#fhrZ_jt>}^^U(p~iotwD9-aV4Z2lTurap
z-zf<~xs=2-T$xX3Jt}WR;iA(d
z)ZT4eu4PK~_-!RL1Wk`*pCn2VJWZs0!t_GLo^UO2=RWVJp1n$TjFvR#u(j%Bdjfqs{`i_}-i(=)g!dEo696|yr
zJ{zsJP@15-hQ#(KU8;`+MCcE$*pO2MFYBb6zCK-DK5=-%>p{B@2_S6__rFZ9#1DbV
zms75U;_@Ro2RJ)FK>nc}U+RLb`>`uT)M6c5dt%6+%%)0A?l8UB(Wsw#^r-h$zx$0{D($$iZ4QC+NL+y$wSSYIVD
z?%Ado5+ov3Pfw$oa{DT62gK`jSfkd}XUCPN?wS?7@ln;c$`(m))T2`^lU`xR*_vO_njM8D3xO~PwuD$mTy=QTv^Lq0!)T#LBZ
zwqD~Bz3$a}<}oc@?z!A0%_7l+GXWFV=Z7Q{qsuvkkF{oKckz^Kwns)_9>)z-K}bYe
zNP+~uljF@6LP0K?S~V|qpStjyJpCY(t=ImLK~Im%2bsk)ta9|2GytV12_jSh6-W${
zb_GLMQNn=G#81>|yl>!*GKgoI%n~-g&Zk-J&GwZ+O@ZuvR^F85E!1`Y&WB$ALqCr}^m!X!U-iG-fQS4RWTQ8lM2#->Hh=2b0rKjOvB$4|6-6
zo^s~YAH9xGriXMhYfg;^zA;d?2WO3%U^694;7-DCV>zef!oHjmtB2)PNAi@iuyPx}
zmZ|*sLa5d!RKxJeW7^Z|tfM~$9|l`7aU<56hmG-_|@9S>`TQ>dO?%D6~K
zX-bQMv}Xtsm@L@(l_gjsii)l3Yg2fIRHr|FxIQxLSKuW~N4D_&<4S#R)~odwLfANU
z72PvaHXow8>dJ*<3z-61=+qu~EZ6uAry_fyOvp>X*0^CD4%*Dtz@ckhF?x({Nj_{b
zj_P@A-ER4eHY~8e!RfdfdD#h04W>phr{3e+L&WQCOCG778+P&hCPh78`n=n@`|`Xr~*|u=4in}fJHW(p8!x;iD)+$v7KH9$oX+yWWGnB
zoAl5{^6{+v>xQq^C!^mO$|j?SGW{j`ju`0oLcStqi;Xh?65{UZ2`L52%#v3`{iCNu
zH3F)wgbSWwKXADSY^RJa5~c`uQ^$E=BnZmu0a=|n>i|pgjDAPY4{_oKrHe+
zAPYJBhy^KFGb}Bc`3?8%;Fa`6XFaY_-|nw(GMqLqJ!Z^1Fc!!N9(wulbdJWihIt{A
zDb0o4W=J6Vyec!Y6avp)=8-m6I2%?Xd3kBL7pID#U(Ff=GTSQrLhqAEh_m=Y&U#}JjCdf2<*
zbXgl|3YQPpv#ZsMHfXwCt&Bw~C$vKE>dnwPEukY!yum8R(DB!#%V1WYM)?8GEo@2>
zuO1dU)!St9Xhn|1T3?oI9HQDqyE*ZaNAmVtt1Gu!{nP6GBIV-r_2hKAQ_g%=gzyk8
z8-_p_1U9C$r%xz;J>$l?Y;q~1wiuSzn!mJdI^j^7E`^h~`4pXd2z{j;h#@Ptv>6(1
znLY)y!2zM&+{g+ph<<`#1Kmohe{q3W)^U)^wcRuPk(6m16wgmKQgxEOu{8dX)}EK;
zv&&>UF}F+9*<4DQK;8tM#vc->XT8_lxMFj$AZe);%5i&-Rh7T$$NNDSqL>3=xq3j6qj=J~s^y?MJI)YmxE
zyz1X7G6W=Z4D-dqAN+aP?<5#+gO!rVKUL@Boe*3E8#vyr1$i2F)+d<6um^a#nBF9P
zOFPn87qH(z_EvXqD-u6>tiv4uVHKV0fL2aUp=;{P3pX!bL}=V~cl#)EdO4I_HK}j&
zPjh-#zk*XKQc^2-oVbC!j&K6p2okelYxX!UXp6;#<9ua90&dx(V602Ez!vMU2hX>y
zywm08&PMiXkXD;at<~QU*EP+AY)4g>M364Z1=Rb`q9}sH*2U5+A)sm-Z#2$V!kgT$LT@!IdN4x&iK`f=rA>E$?$v{szRV)%yzc`4N
zBK4wapQeMw=^Y8P@K4`ml*~B{`w$9F4?pNS@_VI(FsyaI_}c6oD)p63=#uxjS($CU
z$|G?ffj#8$dy<3>!G6z~AlEu6(MA$TYqj7cKtqXwB;K^I=~lkZ3+fN&6cucY9tJVZ
zMjl_8Qc>q<&&%z~HojFr<;cpt2y&mf>&5V|kl)aB2&EFzw_nH@p;(TLv1jX-yP7Om
z5==MAClYHySYV6ex4WO9g872f3SrL|?}NR6_|5G$FpBTRRkzZedZa3n0iksmi+%AF
z#|+oD
z*xs{FkDc7!jd0{vJI+@~3SXx3y=A1tnppW!zN8dfvcJx?{JLv!RGCvP0o}M6GM2KQ
zbYw&{0^)IQr-0lhRWbr);6=bc_df8hv10Ouv61gWvZG66SoCR|ky~@t%phmHQBe6J
z4jK-x;4aDoCTV`4%0pwPsXU`nM7y3Td*AJP>Jw5|KGu59ceT%W9L_-yFtUaOJKJ*IP-l$5iCfSZ+t@y~^i1aXpJ*Qk1-b9Y_WFz>sz7BLyJ1
z5vkB$S#rUNTex9BSyLQ5_~BzG8xh}R8YE=H2VXH8nU7NPY?~RcmEz%8x!@htDFD_6
zmfJ{)dUsR!L{UR*x>w4czON)9p&UWSJwIC
z1x~VSXP;0`fLV61%{(9@#1RY9+i%n0O4hpE))P+{(0|@a=^ZnkA75~5lW*6a_;aMb
zuZR;Q4PU9a`)~CzW09&UOf@rbT(8E
z0S84Qzp9@>jY#b_vvGnv54Rsh&-S785Be7u$B7o{D+*sr!JWz)$R!0HvXW@Up+GBSgd_ywAIK2U
zq9Q7eBx(MBO;#!P*3SFvWnot%BMVO{L0K8+Y_5Hz;60(}2N8$qFG_#jV9L
zp?X9A1?(^4KiVYsl5_8b8qz0E$mWlkDw7W|9aPfLLXY@bA=}tY)C_JGths&n
zr-pdZ@Z8bjIklp-tfSKOpta8UeoA19JiCgJ(4_gPx~KBfzrESDe&svR`R423rqbFD
zR=+H6Gp47n37Hr-R<=2$^Sk6;owqqXP$c2_4(7hKyW~Fo2W|IB(onTstu8^>L(Dw1
z`ziPtPLP#$E>ThpEPB-x#{SfJ{o{CC+yVZtqc8GND$kB1)F7Gt=<~t*c5kM#jwpU-
z!ujINK*3ub6kZ*C5EG^*ExrVBmNfr!mSDf_l6jh5yk@ekA$h($7p4X2Sr|=s<3PV>
za%@EGoqSdfknT6K1O?B?g}2JjG(VUa0Y@fbT%ZV9E4>
zB318a%r@?rKNz%R1=V)Sk%8ME7`^7(ITvGnm<}pxrKZ|19>?L(hm=cjKpq6oW|>gG
z2{|toB^ZcAd~rwrw1hQ(+Z1ER
zg_G{_Z|vEL&~)DJV%BrHsL95oX>EnbUpIrl6&GHY)ij=5aSujYP%i2TezB+Adbegy
zD+lg8kpFq-$*_r#>i!_b%D*o_h7<_gydAkAWG7gr(fy(D-WC4S{Nz9qk3U_GxW98)
zPNMxEL<-VsF>lVsV=PYci30nI!XYZ0*h=d+f~Yf_{d?w%5Z~J$Z>D&ff?4^b;su4B
znnHKf9}Jf5V(#l|zm3`G?OwhE$k+5wJkNIabJ!cQ=KB{}e>q|9
zuU&|B-+E*J+d2Jj;T6HuSFo32C~(KF1qe*fH6iTsohp>G*OTTg<#YOocQ-}{c9`!-QSQCT1)nw;8J3WI)gq^bZx=Lq
zbuU$vX0hn=JL`YEMG^2NddAp`|C~HuHOeAsaf;y=vN+S;BkD(xL(@x+99M)vsgh>?
z^rLF8L-Uw7@7nI;UQL4XGf6ct`6fDDPCk%DXJS}Okj{dRj8Q2pk_4nOPy}6!+ChF5y&eHtGSwR!gJnP^_;f%wqxacWmZvVk+ME+vwD&HW6W#Dyr<|y#T(2A8&C}m8OI|1EpxzxjD%Bo
zcE7SSD}!xKT|+aSp#tM7H{WoDi@4L#H#uz`5q?Ic<`12GJY0GMCv8q74p+iv3tE4u
zvaTAu_kv}A<6SI1=d2E4c?AwmG2y%wcsRG~{j@r-`UnGR-{)c;LH5W|$4rCs88}7h
zf8e|meEnZbLZDSP|IhOac-EfDM^$qDLbjHEBqdvtwc>{iF7}BsD#!Pv6~H?RT(We0
z<}J2#+a2jOqMKC+7A5k%kwg)YD7}SR=9=^cwHV-6$c2++5KMhCbY~q(eG)AI|5+}P
zHrYebZrN4d{_ADev+-=reCO$mn3L4s*$!kBar+;g0`{@D;ViB$J8?17to5kbN`X;qR##aocglb?(loU?RX&6ABr8q;Cz{;CLBGcZn)%H!0XdY_g(n3F1{2=YIL^y
zoP%-n1s4$JjE@txH(Zqg;X)`(r3`hJo-OuqYjP_Yd30CogC@VmtvN@gWJ;y@JNCsQ
ziz-+57zmrK@DZn3x>03H2{1csNH{y*-f$i-`|hq>btbnXV4W_
zGGuvj-SbF8@ZF43e8OvsV;U>uD2WN*+d9n#bX^DBkHo+UZ}We68BavY4W@WTCEhuXpW?P`rBx8tG>be;+)KvCMWgIMZ%>Ul`~cPtjiW)eUUg*Q
zChvDGa$cyBweWNw*UFnH%iZX|WbDD`LS4fcnX>o#IA{Q*EC)SYft;$RqU~CTXjF#X
z+~(AW-2?j*0p8N#mAp&4OYFCKkKzuJiOO_oV+UmXcAEb0kh*w
z)hj-RJ35Y)T(Vpe78f+)vQOP^W;AJfr}WaUi6v=kl1`@8XB?*)18x#;q38b(d+!<5
zRQK+Sq9{lQ=^_LLMMOYAKx#y#i5QV4H6kiai1Y{{5tLpcBBHd2fQXccl+Z&*M5Kds
z5|CaJN(iKQ*1OL>cZ~PH&)NI^aK^o3+_6765D06{HRqc1ne%ymg~2edRdp5
z>|}3%G4-&J8gHC(tGwz}JBNdpyp!>G>&;F!-Ffa&KAH)#|Dd;{cYMaGPyaMRl##QE
z6hP<T%u8T)0XFmHZD>*K%;_uv?Os7X`5Z8`YAcj^t6o?SDhDtKUXhg
z{*<~13|=z*5w(o?>2aepou7n>t><%@jW@q$Hz3k$KeQ0XDE(dMC4OaG2qbSeXm^v?>7o{xfa4o<4
zQf>2F~P>Vygd~8@f>nSZQwKJ@mkY&DMBqtoD2v_0h`R#o_gx3`u?E
zFQ24M0A1AAzsoXHdOh2zd$hxJBp}POE=kk1_n0|}fMS;pYzk0buupdp;6dpM(oI*h
zRAEe4!i%I^r@4QzygbwsWTUS^Mz7@pbvS#_1uU7EAKu>Kb+D{
z@ZL?G%S+1^8h%h`vT^kr+sUV%H?&wTo}axJmtso70cS85&;%C&94$@FB6D>%a#O#k
z^C(#2$jHxu@&T)>p+VUSMM3vOq<^2>e>&&IqJM`y+XLWWiMHXznB9$+$p_S{djKO5
zM-G}HPDc{#ak@tZ#T3FC`w_lhpO_*Ub{eDuCyH4Lzex*Hk#2@gq80mJa&
z`U;E;eHJQy?r2&kHsKZh+Q5cQnAA_F+h@^%z86;dmJ2_2WH<`He9tNucfdX;x>i<#
z93Z*dCzX*kiE^zBr5RJURRdDe$Mh?r*V&$?6AT`4n$Eo^HtGOW2hVkY9I&n^ht^l7
zA7y-0x`aM9V+xAUmG>f5F*iCPEQ_>TM94XDr3bT-EHC7eQkTG_+o17@PAPdj2^W3|
z5{0Q?%b10UEq50?7UZnIU3$K?BbN$>#2et><
zd4_M@lB`C6(FN1yd~zPnDcZKlG~@Ztl3$E}>jl!XA6W)5dicc@
z6&a6Ci$X6bsTEZLZCcf1ol8qVp78*SRDPoC6}vaekU4?(-z$nZm9BVoP|Pb}T5XG-
zWhJEmY&zXQ@kn+uc&)C~z1FQ67RMAJ8At524Q8}3PmvVci^nU=5<4bB?F7TdE{k_K
zrfmC}!`+%OW348P_ju2l=vrLsAC@uN9YBt?n?S+J#Z_iqb0F0tCGlj9f_XE^VwDLK
zAcL!?$+2A}n~dJ%OqhS7W`op(v$jDiuyi5IrgTM0ba6AOmvA(e{BU?`_(j<-_;dTW
z`!*Ja@=&E~KCCwgroT*ns@cupL|^DSkvb`OsyVs9fD|2r2+o0PcLMwne1ZF$8PCQj
ziDnM77)6rveT}S%LreaST{ph#&CKhUP>jIq(KHy{1fb@ug!{hr(bkDDE3F)2)o#DoR1m6KvIK7LM@elxnK~UwQW^rYOST%^m@iL>z%c
z)my*k(Xkr7M221P*VPz!HnG+8VNPpFewu>}iott;CvexPbq|5y3yYwGNUP1`iHU33
z(tWqmir}w^fV5Y+nbGa7(~s|o8ywluU8r)pF(X*7NA4yv
z@nrMLRW5I^`A}tGni2VE+g_-1`=#~j>s#F~W3%euKQHg0l4fwmF}lLE>vApVC=9n7
z_1&Dgj;VRDZFuF|OYw?QV-pVy3jzbDf8Bc@o>eddlBdfsO4XHP@Fy`qK>=_w!&mfD
zD9M*z!Zlk*Fr2#z@gNQdw)427^~L7?=gyn?S!QP$W2psq$(n10v=DeSF^#SOjg?X+
z$+crSmqq$9eD20gcfa7w|v%iJsCx^
zY=Tyewy&-q-ZL7##3#_!o$D#cVLyGKcmCK9!_j&8izGV-u7&VwUc(?v8Kw;uHID6s
zaCVg++qWttzQ32;<7W?B!vguk
z@y=QFdfG=QRiaIw4NuJ?N+?>k2Bo)gae4ALyFDU5>^d*m^3;!~(<}OpA5S1sm+Y1R
z_CfO_L`Y7UW@rqCx3pfE*rU^?e|l&)jEe>~?<0J@BU?GRaU(KIoaz+4aGOs$?p)sf
z(_zeh@*RzoxbffUi8{)SK9n0Iyitvs>PyB@lFg04s$mKyE>Fnyy0r-S~oeYA}a67Hw5N
za^V$J$u`NIX}%Ivu53N2wn?^KV%(;85|0p8
zr%UaTIf6}9#eO$phQG;3_^Ci|Aaona&~!Bk#~ApysioZ
zoezKbq1rBcas6h8*2!}Zr5yO%=mpuv!J0}3ygHQ=mQzeU=9K9fulfIO)6B
zjO19!ytY)u!J~q_$%$o32Yjyjg`o7)V9mFmKNxHudhXPj_<#&qv!`ZLs%@UXo?)!Wh#4pu*7&HE_WRe$ySDJOPlYML=H8D)`b%-fX+1PGPpLz|
z?k)*&kpzCuR7LjLZ@FJIo8vptTtYW!99}#A9XvHLp{>E9`pu7BT)c_cFheO~V3~^a
zqeHr;pMkRL2HkcR!(mss&a6dPdwVIinV$H*4)f@~d^5X14yL5vLg0Oj$U-6)%VgolBHy{x&*(03Wo*R}WXl4ru+muRbJh_hIPC_)Eqbe5D!KB4R-G_v(3LaPHaiJk4
z4O0|X8}7-m0W+h(hx;5dvY+IHr{MTG(FA>QRI>|GcAP5MBnlOv8x+#@`hGhc9dQ}B
zpy=X|k-TteOChFfJ+eEf#~)Rx*)aoR4*y{(SAMQ5{sD2A+MeTe0EtCt1`i+!%72c$O8vuP#%bLMr~b;XwMCKn+NRYQS>V}E06TPou1t+2{OvL
z`D821*H?#?U1wWPwRqiy)6wK6rV4vBj-rxMXaq%!Xvsyhw90-C|Ka^jHV#JRmEXlz|N|rKDWIpAK>r7FG25uwjaVv;b;Lvf5
z42@v2z|rl#PJdC(#Y>p#P@_?#6shrD=_QTT3rSJ~GixHGr{>4F1ra6RlN=ht#K~Ng
zZ)CS77$^NADSz*UWhYdU?()9Ey%DP0YKrXYJezxEVTKTofC`3+2(c&l+u
z);(;gx%WUuc64N#gBmuQg`#Ltsro|5-t3E1yUZj0SQd`U=#Zqs>n*5C`h{r)4yb
zm+Ig71$LVZt>Q;}?&qUsGo&s6`6~ftUk+XJBOOc@?dZCIX`SY7Q{Y9reEfVSF^>RA
z<*K*9zWqF5-38>l{LJf8K#`6VfWeJwHm%dO@
zuW)7Um7{StgGB&yj6rP3H1!l&v>il(pkhFx2nix85+qD_$)y%`Y6HPs3kx@Eg%ulw
zvArjokR9K$K2>d7`_8q?3Gvjpp&TGO?ZoR(X`o^Y#*t&r=LYpJ1G&KGB)2BlR-3eG
zHuRNI2cxp#1;*w?TbfEl%9OFnm9mX#>(}dxfKJ*hW<3SSMvY-8he87V8z(xKUn80r+_4ebd`bYYX_l6dDNcqXPh$s938b7A%a_*CQt
zFHCtUhRizqGlw)V>Od_a(5BAstFMOHYbNITjf|>v6vx2oDW|08A^nh)>&jlTnKe318;=@OI5pj)IwrRqE0TV#8El969B
zN;>{#I(lLRsYwPH@h5yP3Cwo&MxN?#UxBAqn%K)@x$Et?T+(O-!S4p&Z}3==l6&$O
zb?`**PyVaSj5Bb|+I}dR7e+nD*Zzr)0=0qGDsYCR$G&#ob)^p=8{CNvLIsrAuo;D_
zHP%jcso~j{TNwXp{+V&yKD#*k`l}G%eVgRT{u1s@u8Yv)aGWgan>jnv)PD3khID5$
zR+PQt01`zXjW(;Qqy@I*y%l_gia)R&nwA2St>IW^3(&{QM@tYusr)Dhl|5`u#|hj%
zenB}h)U&EFrePo><@1(;eUw#$k}rt?=g%VO!bEi=op8FrNY)l50nZ
zaXhRdjH|_&n?xr4M0*IrbFD@dQ|sw?2<(5h))p>gL*
z^xpB@f?ixz)0AGB<4g-w#3Mwmh3|w1Zd#$CZzJ%GfpCIGUC#nLfb^cU*;_NCfoBlc
zsP8_mj%sYR6MFf2DAA7+&=n?ZLaYfVZI|HnN+%M0)xFFnZA~>BhBvVUS8_eCjHomG
z#^n$s&7-PTmJ-B(;F$8sqOBl-!&8?gl1x`=I6wvox@8o|M>~XP#(5TzAL031pY3|Jp|*@F|NXag!-}bX#wD!xt;By$WB#iC{~nJSLcc}V-28-RrkH@=v673_
zly5X6oCtS9!m1z)*&0yK>oAku(q;XJM?!2lLhq|v;R4^l-69Mw2)13>B3*>*`QM^x
zeAb2+-0g%-+N17r(7O)O%^gLeeXJI9=%0Rt@%?r*9;<{M{2R#=U7nZ`L+
zQfgUQ4CF^CLOYy5aO
z_WofrKKqUko!$QNmCxlXJ*+<1mn=UuT`x6Ncq8+_Y`K!Tj|}dw@iS^&LY*i6Z5VR@
zK18=fdEflQX6IZHiH7}QVF5-3@?Ve2@>aq+1q5J${_4Q$e;MC@9sZ>2XFdSqB3Jeg
zhDGUWM(sZyL(4eNwyeg#dI3Dk{-3{}g->o4W#wFjOo3A`pX$7}Z!7qB=JMa)mBD$N
zGQA5yV=i>Lt^9F_>%OhPfA;ad*>@H}I$;HU{r{vpqK^!R>q!1vvo(M&{Le2vkg4_3
zapT$LT;UeR->2ulyrJhkSW|zl3bhpI{g)FPl48br@Q)iXzYS9P$CE0?+4vv7`F^Kn
z%z6LuIHv@c%b-)!T96oH^%o^%@j23Vs5jU%92@Vtr^Bbe{E4aT-c#HI{lMU^M;xLJ$h^hNs?YbWo1r+8JTbSbWcdF6in8h!Jt
zLnvH?>u!@(lJMPrl|fFe_6GpWB6ScT!735~r;kY#IRN$d?*mJ2ntLYC7iyka@b7OX
zESsgjK8`feKL;SeNW}<)t+JVX$8$Qq)vxcV?8+hogWKG|Z2v0`e!#E>L{APluMS2_
zIT-sFnyOy>iCje`KBiKRq6yj6FVCKKQgu(hvb?1ld9WiKKWdrxf3)g(aZ~Dybi}bE
z0@IDkj7HS_Ld6VCv;@ENd7=E$|EP*>{Eg=O+eqmj)EQlQb8xzyz^+AST8Gfe~*5#6)Adj3{PD#dBtF<=;XXO)dt!B%cRt<4d8;8@X%Qz@GK}
z#}r`WT7%j@|BUbNw*)q6$J!Se-1a!e!T$`QT|~YEP7g3uA?**#t51Kw+Iv=}Kz#3k
zSS5_M`)~0X)uIC69IlA~!4+BjZ*lc2z}ARJhcG#T6zBYB{l8z01xW1Q-)2TBIxrb_
zf2lKoND0oUzV;&2Oc4;V|FyB`zh8{yzaRa-NBzHF`2U{kf9=@+zA*jk%JJXJ-2W3)
z{{ObZUk0{EA5*%TfG>{q7&_;B2QL8gYHI?dUmfxE)GL5e?BC+ye+W4bM}cjPd>-oG
z<74d~79hN$|2@32{D+A4E^v0NbhNv6WY_dm;J8Ko3mfsN-Zaki;IT?TnO=@knq0jl
zN>g&g(9=JuJ7fhL43w&~H4NlOjL68wDV_=c!Y8NiPfp03%V&WZS?4;vn?R?@$$>1P
zqRbiamcKoW5kE3>VC@feHzy??uo!6`Aog47niI3snvoK5|3VL((Xv
z5!k|TNQ_CE2Vg5ZDI=A9UnYJ<`IZ(YJ?FHc2qP~wkkU7Qu>T4-ctHa-Nq28)dH#KT@WQtXD!nWZFyG^!Sr`qzm}7XH$E+u3hOZ`oz74RZ_C6NG
z44^G`>4qO7?{u;}SQL}0OaU;yQtrqL!lQ}Hc?HuFE7Wr3iLGzbw+{2e$K#yxD0(LJ!g$qcS=Fr1Kc9r0-vt{?_HkJUXvf{{
z`+nv2-KvW$Km7-{^PulcPljhEPq51EEW}^rJZITpa5CyhgiiQKs#W7fj&GAHlOcnk
z>t}?Lh$^qHNcwpg_hbgm)9zFhOMi%zNR634t0_R&x-5Q>uET_us_f4r@5f%siWd51
zVIn5dVHC94iNg-OCh^hq!agng27a-)#$35lvQ-|y9^ug?XeMoF^T_4p`v=)WwZGW<
zO?cN_vsz^)ZLBfq3Ps}%TPaE0NX0w4fg4P6^1v}TxpJQW+l@|ztGv5L=bP^)9OvZ|
zDrHLLRDD(dl*9M-eUicDBf)yUSLqC`PIk${DHaPmeKGQM^xUI{6B_0Do}D*`KsV||
zY<+tvW^F7D6&W03su3Isgl95wBjdiAz5uCE>fA@b3Gp_&E^If<-*))^pwdpA*iO;w
zgp7C(w+rUACQn!kf+YETEgKVwKn`v}^S$@aL)w?-!29YJRKsUv_INGO)^P~qRAm9e
zgqr&SAw$aVC@G%e3bm3w_iaic>Bgsxut-PwTmDwFrDKT*L+wjb_DNlVOY#GV8+`OA
zI)JQ>c#7XY``W!x4!kYi2M0=o$33XPK_`8`bd$*$NGZ8ql{OpSJ*6Us)+?P7PrH0H
z4J5DE>DnG@ytYlVqWV)}1|KlHJud8;us!n?>TgX`b%<^UHTnhnqt(>Et@Q8tioh^9^dp`>dS1`~l^qkn243Fd8Q_M=V%vcsSp%eBN9yx7D5p9|aH;V;
z8QjDWIbcGh+{X_?E^Kq0YOmiE#&6EYa_m=;wB~Kc0)Im*qT74ppq#LsN7PW#OS(l_
z{iM1ej2LfzJXHB6R|G3?z_rvFdwRmsbeaKqH~)MV)C8f*fjeN5bha{5TAVIeDN%Mj
zDJu{aT;l2-Hm>XXkqg_ocLV9#C<7>yLA%TdkWQw0znLxn~5Tn*_H9wx@1RP^QfY8pfy{XA;M}1
z!9|(|#WC5bIVIPKCW+V>?;W#-6Z-`Isi*N;Y}X$hedheDbhH%+^SW-IfgPa9C2Y(A
zCK_CRiK9`tG(2D#0EhhwWFI;nj9Yzon5XG7t=WIN1RK3@Zdv{`WQ>)P1u!Haj?~Io
z&`A#|AsjWH)Um~-T;cv|vNd;=E6`oZd;YNbRss8kIF4He%Z?wA0~jfNP6UeT_JM9w
zMtvAYz{HMc)?PIwoC?8>pXp3q=v=t8UiILzjNgaFBhR#LwE)Qk2(^X?6Jq|-Y~=sL
z66Z%FCSh_~33{f1$8yqcdwD6Q@jtxfJ(SQPS(Xq!Qoq`Y`4WWlC6CU!#n#KwG?(z4
zL;&kFu-A4X>nE;Y+DmhpVrTKuBR6=vuT0#7B{{a6r7g~?VNq16?!~C$dfz&r+b(Ad
zfLJ9cHRO@VS)c&7TszaMe8S1zp|jvu*h?>;s;U>JzS6SgS(A-gvgu2Ky@0jB+-S36
zC?Psl{}eo!5Q5O7reK#3SeM7uW@jb1g=aTV+knLAwt$%$bxO)
zuekMaf)|)a_8__qc=vmXsGc+HRphe;k6p^8T>W&vUeyqMo+@+FwwyVEKMX)5+z4qc
z-fFD}kZ~;Fp~}}9vQcz=vMJeN-2P{Y{1HqhR(5@-=Uix+->M(3uzO%8X9Zd*+F=Hi
zq~|C>X`A!GtE=)&>;v@~6a(ra8A|j?_L@Tr
z1Nv;5F^yu*%db3nG$ZC4UM=*$QNGwNi&nTMgS~3v`0^H;FJMA!Y&EijV)0CCJlS`T
ze74f-agSSGZ=ht^km{3f1NeM~YB{kt~ab^eiP1Ef&<6D8c>1b5Cq1|PJ-LqdA)%sv+`K;t#Cx#CWCS=eR
zzQ%>!7&WMWvjj)q9?W^2Q?t!4mis7%;{`H0Ar2_Qdjl)G7;+d?IkQ$6MlfXpupU8j
zP*&lpvt&8h8SVec5Z>b=v^IJ}mh*-JJ^$H46LrS+Vz?xnKfkLMh|l)Vb_Vezfz<}8})rJfH)SD>kKoi7l+Iqv$BLyZ@`
zYI_!=HY(IkModqK%Dr9TEv(7(-s1mUCVL@yKC201@rCM3R-VleOW6GlFEg@)K9@OKNoIa^z9g2w&;dqA>T$H&AeOHhOT1*$#MW)NRt3%8*|4s
zg2CV(SPl44peNK~N_o}zEeq3k{615ULLSiWuWOD4&I1rXprN3A)1nD?MKC7xe
zOcRuMlQ|<;zI?IQU#~d-gKTRme7o+5O7lW}iWRU`@`KL+GwcvTF4usj76Vn=dL&cExN5&!h8SImZ+hwC}XYRBh8vjV+ZSXHuZ(@ZR?oE>PO
zOb3&f3dyBEB%#{vywyz~cNDqid)l9&^B+4YT1z0N9F2k6kM8Tc+Ez3gVbq=C|CDbX}|={%OioLI9w-`n&Y1$`|!CpBCGp(w%2cLxcy#75aTP}(+dv|IEm3?Pi%PbOk{-5W&*
z8_yU72Io61kC*JWx>NS5a9}=FLFP4H6@3~Ju$tXesz<$arGN@%U?m#m<
zP|;rbSofUyiOuHNV4j8@mG6DMUb41_-u6`UUQLMLW%Fv=h5SMjd+91~A_-`!ap|r}
z01%c=bjIxdVc|3^ZGI>hyW_FxlNTpF5n0VGDe<7RWH5*)5cIWkEt&|8MBx-S+Zxzs
z-J+Ps;Wtn$PD>
zykHKz9?up#C*gnzx1{n}1c$k{9w2a7B8d0BxI<{vHn*4d&JzKvFPB+-oh@lHaLioE
zXdK=>hlIIB^`-F05r5(W&-`JD&#S9RyYu$5ptsLy30Da=Rw-4(06}Ii>Nrx9IRe<5
z1hY4JLBq#4qt)Ao5QfBRgt^O8M$IFE)OFo>J1&#E$+Rwhl@60G^$qZs(PoqoT?%vp
zPmmdS^fjd&FR)t@YK&fgIjQ)&qzU~kH4~JgF!sgZh?Jofl3l;*II7+&zgLwUO&1QC
zF=NC49kI98C_(}hK9#3=q{fx`SMU$}12W#WwJdnWc8N!+9y^l!lD)(Y*$X0Bn{D#L
zaYRsLU>HEYYAbPVndZcFox93o3t@99*@UB73vX#q7x2$6f+)&so80VgqC
zKr6B|fN|nlfuUU71?98DrSYiFFRv!_9UlavI$mqz819M#(2+$I8ZW@$6+?NfgIgOf
z4XIWI!`$RGv9ZnE~9Tx@
z(vR4Zy!)Z&H*91{tcOE}R&sfL4pO;{{GE<5wVC}Gek40{5Wq+Bk%C*C#T%-Ib;T7o
zGBnB+TO5`;rhSj=bs5_{;Jke(Gc$a;209L`P|8Hi3$XAGI#QFV$jGM4%q2=(s~oPk
zD1}#1Rywb#I!YF@Wj%gm8Y|8E=7P0}>>k#36v<6Z0<3E}y$O(*Hz%G}ldRKPi`IpA
zWdW>vpi&O(ynI4ta+xW6^^s9_z>+8oIF7V{CtPi*4YTNId)xLYzRnQ!(qt?(B<#lE
z&6>di+~uSN4ke^z^61GscTzrmpbSNh_MhB~05X+0rZ(gCX);^N2dY~eN(e^x1*U5E
z&5A*FnZWm6C+Z%whYB}6LY2LJUCmO~EH1n4oKZqYQOjuO=`6r~(T$heNuAbTNbQ;0
zZ&G2i)!0*BvG3Xxj`aGzY^o8z$D-%!SkQ?H#|r`$hsw{8qGS;aiFO?bx^h7BC$WSM
zY|8!2?{mfMo~cT>YO!&T@x!k+Sbw*S3~2`ZSY~rDU-#ND(bL*gC!k$%<~AMElBX9I
z+eXIU*VM&XXZd-@K8%0TvA}Y$eeHGXdhJYK>FDbITiZV@l{1~#v7e*ONEIrMfRDOE
z*CW5lcl$715aqm}Xxn<+sk=%>?fZf}rR?rh?(MqpCh@~qFW}FNJ7KZlDo{H*63=r9
z8+Ct%klL7mP{#@whxC6_@~$6=F%-C2CcVYWuAlmoev8D{IWqyf0{AmwPSVu}>Fhbn
z_CK=`s|ki>DQ>E7kX{9Ysahk%Ks83C|XVdzHHp$ecJ
z8QRg6qZApCreZS4$o_8f(e_U8(MjX!#ca>a^x>zkHa=jS_>Pcp>w7d4`W?nwT>~=2
zgyh!Z#0sH$!qzJ56t6C9Ev#ClH&dLt9?U(7Q&xGn)%wc%35V>79Y`Vu7ma=hDCvr}
z&T!GS2=Qsu--J4br`+iHd}r={5Cy05P8_6+`!VjoDjW0(d5rlZ`!Wd-;4Gixi@;X!
z$+b(JYan}fymMEY4Xlr%Je|iag6l3wJ}F4Xc)}v^kN6~)z+wR2kYTiUwI{k2bQrpn
zE$hCiII$M2?Bd36xVVR@Hx`FBR3w{^O$;Ni7n+{^!&34Cd>A=0Q?ZF|)P#@D{w|0{
za!tVJ2wM}Lw%KPgXjdV8j^k4@x)<|5eC?q`jW<=9OqPrStAiBQcNX>QG%ALv*dM^7
z+-VPs%O`P>2Ep=C;?AnqJuV$NE;}#MypX~a9(}lwPlZU&TC5;_VmkUY{vzO}W7B+A1wJer$kCQAGOam%^hwLvW1
znzR{-
zY{HcK@S$)*kv>pv=a9+@Q_i$_tymq+o18KjbnJ**`tQFyV#lx@C?3>oI#Z4$RhbJ=
zUP4|Y&zX5CS2oLKQM&62z2m;~%6!*;GMSJtY(`9b1$~<~w*3GJW;E8jk~P53oljD)
zimroh0>mwgRwyIoyJt@W;cHN_80ERIC>tA{fL!eW9R|%I^Dt|Ep6ecUNl{#
z`*vkNU2iV5R}k4-Tkw3hd*ZSz$p(Y1&({1}QIq!I)@+?}`m>x@{5fgK;m|AaZAw11
zh76_Tk)f@d&qJWCZRJ!CZ#T`D-5F7dcds1ks^7RPuFK%8PSuxhs}Q_m8SfA}&!9p?5)vAqKG7#FKZFkWe^OO@=pqrK43%H$X&eWuOg)|5#Ft=gH7
zW~>J3>YhGx(uEOj)*k%Nze%Swm(0%8&sfEbLTo~>F2Z`cHo}(O<<7>j0W!H4wXmEQ
zp#s$M|A`eg86W+ICs{&8raZyI0f{_Qz%g^}@f*V2RHb+xtR8ZUJ>+1pHJW)IBm9Tu
zmkpR9U5OQE)Pf(a_9mn&zNvZNf-dnmMyj{#s*TBy(&{&*wZO*5Te0UGS>`H@>fb@tWo|nM
z<|1srrcoxol0{z(7grRmKjQL!@${LYEsGodO9X~SfUk7WfCBb*GCX86rLvvdzautR+!~aV!JMH7;nhIRCrNm_8<;NGr
zoo7dvte5Y7K?^z;r>1)-?TswXSMy=#JYAj)xjahu3$v*U0XfqlZ744KRebP?2Xv|T
zPa(I+Vx7%d*O*NJ@bN=>5#8b?C<=KRC~%%##MAg}5axj2j=u%ql_rZhkS`+JY;2&H
zFMoV>b17wmFCXDV1E|nlJsx<9vIA<_y6693yyK;I=l@I5n@25xXIp+Aq+0)VMH65f
zx6Kc37@WyOX|tTmV}J53|Fh35@GhCO03JGK<`Hq{a`T^mb}?k}F>g(Nr8bdN5fFxN
z@08qM-tRkP$er(SFK6M{yG)FePkr(s?wssj
zPdTrvbsjBFEeuv#9Lfz8|DCp`(Ve_rb2rQ?Y54OQOZv6#Pjo<`<0?6;WztjII&rvz
zW9GbTA9qF|t6U99@Y&ELWKs0AdVG)2^{9JhxS&BR-gWBQrBc2s>{}%{h;W
z8sFNG_&BI^I>9Z?FX=G)PME^AHuJjKj`zmWOFjlbi6mgC8xnyO99*=M?yLCqJ7L2%
zN%dk_s|Lq`^=6ET3>8-T>ClydMV3R)^o`cX-}n6=@q=;y8~?yh|JRU%agw?2OTMAo2*d9Pqq^R(RSs?AX`@(cYfkd}Cwf
zSbjbs+w9PEnZ77<5X{5WoSC$zDiir4bfJMBpe$YOvvppdOga6x0Y;G3lc&1AP@u}z
z3@as;0XwEZc=pqh-*w^Y=EBp*T-3Ur#DBK;iFFmf;K2S&3oAyNt_0G><0%v})f&`-
ziVRt7NkkEV8WUZ1S_wab&=HMRBKH4|bFa^Ne4{5Qy!lUWy=coRQ%vqp
z#Mk#EXlgInHyh0PyWW;u-ooUhW)Z;bE48l-h!BaeT-u4zZ|~Y?#w>rNDCK&3vx9GW
zZSN6bbRn}2D1W02{U(GLVMumsWq_N~dp4r;+yUwat@rq~V)ep@sf$B*&fcYW-g@@?
znr+aG*e)6k1_Gh_98}1?m(bvEKZr2%E%He8K2z>6$)m12d^hi~p;Pl0F*mUuTh#^A
z*yVt|vb}&;FI*a)xh<#cq33$!pNMLS?e-v{z`25C2?5dX#&&7mGaaHBF@zpXRXH|b
zNqHB#US}rv&gX381KNeFOhbd;<-#&2y_e*153oZXp8Y$0T8@-SQT@gD2ZJ_-f#0MP
zSYL)pMd86rDdZGh7-32iLU;`8YLzZQh3a9Xx_0m{5hwtpYEK)MbYJR%?q$>n!
za5#&u&5e_(7R;CX*8jXu;fD+sV_0wuuB|n%_94Bu}X3j
zd=3grIlcGFtf=h3Q#RqcoksC_Rh1@-K~gbaJis3WlavV^bwFJ~$hrOFQufJ8nm2vz
zt0~3Z5~Ovv`IMiZDHfxS8NWfJgfrswB@iZM)Jg(&jDfIwc=R{3q{wb;>iohP5AXN1
z2N7qi{jT(0(ZXixy3s7XP{68w4>BRwqK$7;=A}F0s2=%Zmo`N`6ntEVN|cI^&v|9s
zzo+!B^{JcZ7wISG9gFuvmTYgi?i^wEG5NvA5h?_kqW$SpWScZ4T%NsN*7x|LyH#)e
z+KqlbxMN*&r%B2a6%RT=S0*Xk7}(_#_LRBxbvV$=`|tp)ychnkz80o*j`DtA^+^tz
zy%JG!F9=xk0Hei6kIU{Og*_)zx>23c;2e6Q7pmF)?9{3feY#xj5vm
zb_;couiVewbot7%D^?(X2IX)>ZxJTj`{h9*z4fK(RD{7#$Y{g0#gD%w(voaK*z@yjzNy33pZw+jSTem#BsX3IcY-1yj1}IXnK&j
z?KndhVx>GMLz)iFVU90DE78yDPZhdreDzERx2|@FDQUq*j`in9J$eJHxP*SwDUl)G
zuHZpmH&K$Yak_hVnr0b+IT7#G}L!%IsxM$bJ>wcJX3rpx=3n-O|h`iBc!FC*QGIY2}zAkdx*aKby3;lhg%zzeq`1*HKM|oLS
zmbju-n2vD2+78>571QLPswYNk&u(4rMdq$1TdQaJb+@Lg|IGd5Z2!xHa=W3YeYmYi
zNP{fh{cWS|{O1S`*;&>eL=maC6D$I#1#M1rwm^Ax!^r2AV?)^6oY<{~9&euMQ{0K~
zIlc0u=|>R-@ih6Omc-BXJhu@ns@Zy10?&_7p?Z@R28d>t0fXm1ET*K9+zUsFG_pCe
z3GA}ZEDmQsW!bir*S}6ELJgjn>TnoetcLeeQUP6?xz=$TAoUD5)f)^{{<4`fZx{;f
zc5nzY(m0e#NS?e9XK+MVmfz6R8R10A&LR=&U44ltJ_CXfj^^t1%JX(<`WIi?;1h@L
zv2DJLAgzmTJA{$L?v!Wx2+sT7sLbW>98PB3FE3*=^pDV8(FDGA
z0Rr?We39Z0IPCEFcc}Eb5gLLG>&u3{H-AU*X}wQ3$u+%~{L+V|M)u_VF7_xRy-^lk
z)FE|}nnA9DjBT_ME7H?qc0B^UUE8#GZaZ>unWdR1K32>(Bp)7+tAJF%=tbt*2rLAhv^cOtDTZX=DIbNoYc+}F}G
zGOVGM+~>t;r0PONH(NuJrS!&wnzXqT6$h(B210VoW?o~Lbt^LkL{
zUfXuUehBF$rYs_YH7ap~bLrRJlVzzWj*+gp!G@f^ubNq*V%`6X!9*MFqiO=uq1!@u
zj@m-}am40zDg&!AA6~d@JziAwH4QmxY1`#1kd9IkOw%Z1Z&{4NIj+|2kovXQiCzkx~r&X2iXyXP+nFagmLGpG{Rdd<{6Q1pZB#yv19-zIHpyrBZD^{2$-*5wVXFN8J?tG2
z3c4~lrN=NvwGno}f(@t^Qd}^sZuAG!89WDS>MAJCpJM$3|F1q#F5mmxEUi4Ga?gVC
zSrr|&&04Q!Z1@M$-4UF*QO_yegju+bX#CLw7qa)I)M)YhDRd)}=L{bxk%>8AyUZ&h
zN6F|J*_jQ>7m*6~(RsCzIaP-tb|dSuJ;A_TC?HCda|#K)owkm2
z+fxQ6NqnHk6b!Ly)j-)Eq03i|cSW5o4@i`%#a$dfHH$vb`-as)^vddh+mfo34$s3k
zvQ|D&5d?&0z5fpN(AEL8gKO1rCZ4OMtlCb<_{|ET_}H&{ZmW1mxJpEv^yD|!vRt2^
zKF#4~LPo8HQkBj3KdDPm{jZyZH(i=oLyD*?<}Zhc2GzR>8HLJbi0?$j3kdlRLW-17F#-X6_xAGInZc2Awr2Nys&4IV?<)(!8#BkItnB?t
z+LGg6lSRgN!ntc5g5ozO)QxCD`)|Qx;dIhMXDzYcW7DVxkEh-&FShD&+B#y1!#SrY
zhFoIFj=>uK+9N8j8Sfb}20<#XA2wp1mkMv~*@kk@Kk}D<6c`P5j9h`IQhn$|-_YAP
zeB{xOAMQ=gjoo(Z%V@MNRjRma-ZKZ~2WA<^TS&6#%(H;#r{4(27hD}t6ra`+#J#0?
zr9DGSJE`@9JL)yrXHlszU$SCy5GZo;6|`LeF>)0KPbK`5BT2MJzHs
zpOgAIjpSE-hIshl$8R3N1G+NsEZ{{UrKdE1qR9OtDEEG~swV{0g1jz21e>
zgf?hq$d7w_A3S>bAnhsGR@rD2$F>8-uL1|1U-^lmye8=RDdA;jZxo+NMy5c|-_Q9G
zrYG#SStsc&_2pHX=93AA0MZ}ur=XhW*(ldx%nb(bml!-1!-}&o9^L<~q$vhdgchvM>GO
zq_%JCw=O;5eqJ5V?uDY56>;4f(d0z1lFp@iN`D2tG8+7HfU2!yC$n82laqRDSeOP5
z`*51v&(2KVIieTfaJ0a|$IbtgvQqWsvU@iDBEVwYD@pBN&OGW>=C&KIJWjJ~NE=Yu
z1Ds{TC{Q#se*Og2KeSkr9g#{@3U}lv_^_0DZmg1@G$t#oExj{1ec$no=;31@4oC2N
z=qav=@SDsy{aDzjQH*39Sw@|(uZvyMzF9Las}S|zl0
zTOn{4eq(E{<8eZMypE>BksfmNo?P_37$X;(+GV1ZLu9T9Q
zjCV38Cx(lk25G
zP_A)BfX|$sWNrP0zE@{e`m)@`qz*#PHkDlI5p%S3w_i2e4i+4}7O%gyPO1vc3HTa+
zY(iE}PsQ1D^RifCuuIrC*W60*!4$oFIz#TQuVW1*x$O~Of@kx0M@Gwpr@)NFMG&me
z>W1e1TfZ8f#5nviMTyKaGM3rSzvu4Oyj_no@nHXZj`PpCOBGAP)b=3Jl5p~7h%i{B
zqOpQxVXZ)>Nw9*ROa=4CKbRyGKY|^UM)yCMax4^S|6NV<|0aJZRd(LhPeZWtxMQVY
z@^I8QjLpjzi$0jhGOeEgFX=U>ex-wl2$VkPKt4Dd9Fn}%)2Z`2K*
z0Kok<;<;b`%1n5C>c^?B?_cKT21>4aJP#XKyO#I!T+&mS3*RN^QYxq=XOJyTbp(O=
z+oKd>7rkHg=e^)r89V^Fg}k``j(&tXF|f7RBBD$|$GUI-JUM6depP8V%;qvvxDRWI
z=~ZTCVVx&n#p}o+;ChJ03JfAjed)>L65){FC7ev2cAdZG`Np~NnEP3m(eDovweEUr
zt=<{6?Z{s~M9eOfQ#Tp8qb
zIFp%M2`5*7P8kI&8&U1B0sc=~ysznS7k>5{;1=u$I`*C-WdJTJ+=${Fi8THS;LK0<
z98GulIKPs5vO|=|z;RFg@#(0@)AB@wI`z)yZCkyM`yAUyrI(?9F!AW(2Tcl5yk2V8t&4Zf*8R@v!bv3P3p!8XB-
z!IO>OmIwYcu*TrPD*t0(U)5O5=zqDK@a5q`h*K>bRM{3m@=)|{g#GLcxlE~k@wnJF
zD}oFj@7B(~NsTabwYn-=!yK*h+_(qz*H@GcP8K)WeYRcj)b#fylnOhg&gV=SFcIu0
zZL;YsEV;+6rTthbk$H3Kkie@iDO+J|n7@}j7TaWJp+vq;0-x}q7A%kEDMY>P)@Lw5
zoRN)sjN71>j??q9ooCeEK8SaJ{PW!Iy=4^98axU8=lsa}r*Am`1~yp=*iVnU*r14`
zYf)~ZNgDcxTyq`?ek-b6A3A;VTkD2!&1nkcX#Ep!lWMrd}lKnRI`d^gNxXDb=@`9K*DQPL#b9^*$xH_)`I%pvQwh@0X1^Zg2Tmca?53^9WX{>MH8#cTgPoFOdk<
zT9L|#K>f#*wzAXQ&kqqmN>OiEL!%gH0j{>R@n&sa>?b!`ioYpyXKQKC+0wa$SPmcC
z!Pm8-qM`ze9|J@DB&+CXU#!%Z?_F(@uOA}P+eNV6zaz~ujA&y}g8>W`>A2fveHeOb
zalHGrc_|eS@nqhKW1nM*5kpKpVtXvVHrwzNGtBg2`%L(@6!lIUDBOhgo*2wul~sC^
zb#^Kb_Z|G}JAS6UqdcLv>0WiOV8tNxO
z_DFw=o!~@t{BzW*i%5QOyEg3W!b7seNP%164kn_aXVXup&xlpcjG)o+xsUr+u~&-I
z=>wT6xleC{A&_O@&#?gdPs?}QBphC00n$b==QbH9JcSWzov8a=GpLfv0(ZT&X)$(&
zQPr21fxG4(YpL38cKlQ)%)1r4vqKg8KJC}Eb6h8tsXG4okwXm;$KE{eD?Q*e#la*-
zy_QU4epqbo8If2lPePqw+wQgU0W~zXv6Lc5GUGxpDwDa#agbp&sj{aVG692tNGt+m
ziU9m*H+bJtIB3c*QrF07!ZZL-(dT3g|BnoB&;jZ9PX8a@WV*v9+unsc#
zk0D+)vZEG95g{C3R%TLgIm>k#FV2#JW(z8!=jXYa6TUv+xw}AbCr5t<9H`|jcp(KV
zKiQ**>NZW8(RVMk#V2AuT}82ZAdcCcb7WtCJ1p>VOc|o@>Qxur)+qpz@+p+h25t`q&`-u
z8tu4VYe{hnq0sK`uebaCyw+)rCdM@hQqzqNoyI;3S
zYUZ$iItz@e#ZxPXo&W2O_vgU;2}KzpaG*fzkRzy8)B+Z`@%)G?g!TO}ay
z_?)g0_cTnWTR`A}mcWXhb>{sca8Dyz{rM_jT>MM$T49SW_3S<#yD`YWJ9O?2-Dpxc
zh{_QC!R>SDZ~ts$dFsS6)n|&
zr^j^b*GYNi)CXbxCBpAGy=*?3%^xME>}6@Vd>{ErsO|r2Bm+m<;7=LX&WPUG-nCEK
za`!JWi~DrGMZc4gLd=yJo?i2B@GTZgXisEH(6_=
zx2RSV5=YHm%I`cx0o^B|?x#M9LHh64GI&G!!DE2}h85A)q1)D8*DK!tG1dJe{E_m}
zb1&P=Rc&-h=VQW}9@gJ^BC2i%w>hnrK&f;7iojZ*-h%motfB6mH^jZ3VufjBm%NZo
zLBZ`ahd#g3k<#T4XL`84#?c
z>sDGmBc>m#TCzT0glgpqjKTs&eml3jPE0-1z>^6)%r9O;P5|WzV1ZH$n|doW$<*UCmv0&n|6+$M#Ze|0(0g
zITPmJwEdXIZj3NLqe}rkALuv0L--pv#yJ4yY)?e701~arO`MZ{AWd$0s3Uhp@bhR_
z*_ABjz7!*!xPurIvmy4=&$ixN6entz3oTSKi$%k~zY_$^Rug{sNA>S1!z8_Ht
zHr6z?!jBB=Ct7|k%ytgq^a<i2c>FxXO
z^^EmO%aT9a-POUL3|%v_BGkVKFHeMr308v?21opq5UmKn@O20~*abs7?4(Pd>$@xU
zP6*&;wyt3B$VHl(D8zLgsFD=pNM1#i55|qs1V%LZyGSO}lZKSk7j)x1E0>qRim@px
z{-kD(Z@T%9+mW+{2|X&z2$@;i?jEvcKP8=Zr~y{a+=-27Qmida86}}(klIC8HQs`#
zakb!UPt(4X=`+clvv^`BCl!OCUEY7EsQ^LGLqLQwDq<4GL1+GCxiVts@^rGG7?D#L
z@XR(K`s|COi2LZnNwLw229@7DZ+;vBnzlg2Tjoy43A#9yIns|+cBYRw*@_-f_}Vnu
zAdGU%j`Dn{-=26pbH)BLCyhluqPyR56*OZ9`3vz-HoTK32ZG~=0mURfL~Y5qXvKPT
zc{SLR2+GZW$V8o;F+Xpc(XF-5#0@4phxdT`1uPfxK`Dhq7aglW#Rzuh7C^b&67DtC
ze$)%hRf;(gKGd0BRm^|?>A>YY)WTcT33VZgC=G#aX*x^k$9CYK37RgyytiV$)s$4&
zC0%CorFHFj|6Mh?Y?&u|+)42%tgb#|vmnJH1QPPu?yLzX=vkmOAzEv--rz}surJs7
zRfQf9ed2O^g4zD9)3q##9FT{ky=UX5d2YX^5*u!TI;9TX(?a+#P7DHu>y<@kS&uD_
zY;aO$`yO}p%qXhovjlWr?(m@d?Y{(>Gh=v`1|cu99-xG@U+@I^;E99Rs}mV;j+K;B
z-8*ZOvI-{WRa8iFwd*#}gD|ka5LM^7-i+mIaF=Lnlrl+bNkUlc9cm?g?Qj&e)w|G*
z6TAH@iz%$bV)9UqtFVn{Ue39MMOBM6B5`w?%wRo9`EDy+>8^d3>ihy}@##@rd~S$`
zW5&#$NpMVNwA>SBEvXT_8}=kTWDL#=UC={s=8kOJNLlWfLLx4&Gb>NEFg
z^c;xXYgNxoo}pjePp{nMV$2gD4Dk-dM8Kz&!8g9GHl=K^SW%s1T_(qL`I)H4TlSA-
zO_xwDl1&Hb-at$NqOBdzO4lerlv`!U6#J=U*Tj9#5OpCrpRAc@#uxeM%G+(G)8n9B
z{a^9&B*M}BMlj6D&{-*Wb!{b#sD$=D2-_pd>6ajazV$SdhzXR%1rA9lzlnmgwe;S&0^A)V?+92GutPFTO7=fMyv;oRd<(5BZ{GD
zQh+R-8$xUPO{8!o%L=$+E75I9pAdFSE4*M0t7^p5sPC%W`$})eJ)8ar&o>qq@0<<{
zwxPm_xK?2keHb^`_P1$~)lB{HT(hXyy30F-H(dL%2!f>+c3w0Qu?ZJ70oO_;Fq#w6
zWhV_tfK3RxB@1MIHO1ZyK~KyN=xx4HJgAARlHp--p~*2tQWBX@e?2x
zuVWAZ>ouLLu!F$;8B02xYStCmAWRIJp6R`utuZEdRymES+UkSQ3uperOqcEQDO_ZA
zC^Kj&GsuE~bb<{Ubc80m8$-chjjl#w=cRR-SB;&EhA6aLEWMuCa^`A{ce
zCp%}sCNi%%ls}Fh%^qbYjP7-SXaQRkgDX23qYBs(`F;NDGzkZy!9{|$s
zltD^yqYzoS-E;bRTQ!V@xmgk^8_b*KNc!dLKl*_h-FCQ&I^$Ztz^(l7_+j}ZsVp{0
zmBA{c6!?IGfL=59sHQr?eAZ-$F8v9qKki8ysw@&34Dc;F^I2|Ywyu_GZEHe~&#SqU
z9OhO>_P!Pji{?$(rxwHBOO;+(VG>Mhjj
zVS0Jwyn$}+m9=#T6B-48Q?wUyTReq+3#mXFqzVwJU9CnzZaTvwKg}j94N@P8=RbHT
z{atD6#6z~XY!)v;(UD(d&nZ!w-+o%iu{lKIY8yj-(%1fIEzSz?UhKHD^m1xeBAphb
z?~t71=b0K{nkCS4*g~6xopz&D)a;k-5Tb{yLk2Y^^c@qsT2eyJOjJfOLK!d%~)=K_fKjHm1Soz|*5LKJJfu^Q5-$Ar>rp;%(M+9mZwGmEKnxIF4
z2OF-ZU^5r(1W0iLV{9H~hZ4PFe;dRtV6f#s>0)q-iEKn}SK2c0=KV?2(=K)Iuez?}t{JL7HRrpDT+z>I_P`M`X1bhqlv3TcXA>v5*k#8@X=hwV`NQP&PsYx1|pDs#O`<7DM?@wS1F%OQi9
zOZf+0s|ZDbW~q5;(MFD*pOgCwRtCWc@)#=gNYx{TC^dz589W*?80gngjlDc3?MqAB
zf6X2lLDR~)dZk%ly~7({g2G(HFJxiM&XwjOZ=;UWjjAb|v7Qa;X*t=Kny@6l(l=t&
zjhJ3fDb9DCCj}%UeuY@)kO!x1NS0H3C2x&d}SY4IY^*yu4
z?38`H$?40@i<6n7pd=Aw21?XhgHyR$?3k(kZA%S7ROT)|#_7884Y9iN%IMbZH!>&H
zBL#KRy)G0U)!OWES?`ls%OhL|*@(y04=i}H1EUO{i-LxfHl?eTzz%oGlpFI^
z<6rlkv)dvWm$*ir{p>DXFD0MQ3w;IFvG%i2P6P<@A~=ZI;0lor-H{@2fv5Mt?Vpp?
zlX2>$?RC=4MmAm<30k#>N|zvtOR!S^7VM1L!a)!TAy^#_bB^O9RwkU?r>hmYDGPqi
z_3T%Bvz~D7&6MMt^hBQ|JM^9|qrYykLv|);!8z8qXKi7aA+VAbw~>D;oW5)t#2kM8
z(NV}}y@MYv)4ang4eIwhd4#^D+nUk`Ghqwwp{#TVG8B-+t&MZUQI)MIX)BT>rO_0E
zL0P>qFT!^z(?F>gJs|h>>)ZAI2g+#B>xodM+-aq$M3|JW-`duCI0-$@2mCOFKP|UZF$X?
zhW|1RnoFD6-7eDvV`GpX==bKg|0aYNNa>}`w#=YA*?sig|0
z2rzL~>`ne2qjOmZH`*P*b72#m_N^(M40$orAaZ6{u~Cmzgl?(c&Jm9@V%WLZrj+@4El$!{^t
z3X?~^4e$IIy6wI?x-|x<>4C<>1&m&i6M$X;zC}
zTqEh_tvf7Q6I*_%=M-cVGOG!VfF5QX1MnpOSfnt~-So%x(!Cqi%DXz*KP@K3bsEd$
zMY6lKy1tF_ETqCqa@YAtsObk?G}O2s?)flMskE$OD82n@2?11rG0wH_&a`GVk-l#b
z-C6tOTYwnXL}N8Ae?JjCTF-FV0tW9`)A>PRL1hb!HB~zN^N3L6y_t8sRV`fSm+RT4
zJq&lp)Ot_hx(#LI>Q<1YAYoA#y&y|JIWRHV?%Xy5kKCkdyOR6;b?QQi6;$2=#pZfd
zzukDJ1E<<`
zIz|0RbWo5_=M!6441e=(8*Onv1w_bLfIAF2yi!9=hngCSG;$y{vXD(fKaS?qS35*{
z@Tym*^md6~oe4>9MHtcU1AX8F=1^em@R&&$#P_wPpbk10wZ3h``Fv$fT1F*Y8$UCRV
zMq?E%vRHlt>FNe=-S+b{$F7Lx+L#(x&v|fKB=?)d2>N3*PlWW>*t!3DyKwWeh?)u$1Yq-r$dA^>05a;>fk
zQ5w;SPTzBz66h~T*Sqwly<7CxC4Nd{fe#tB=1#?t!Q(F{QfHhD$l?&2#Fa-cABl*J
zG3JqqPh@VMNs&ww5SQ0|#{ONV5q(t_^sYKL@tzD3L4t@+vg-n|mcg&-0F(>LMvXLOoC6LjN=T{Hl=}(PfoOau-
zpIO?{ziuZm%%xwmb@qZ+RJTie*7KUTv6Hn70*VW?=n9b@FFw6r*l>vQNXlJ#U=%42
zYIPR=RCWowq5spgFxx1Z>GS|pvA|MGWwbqr#r;CQ+3-%J=1Jczk9)WU<#9C_(8ORaEvlj{@ue)g^YgC))&tQz|DY4XtW=UAE`@m4n+zn
z$8KYI+!%)%DA|n1P_Y!wHnH2ADniv4Vq;%kwp9X?^ut}$!5659o6iDK=mrzwoG9sM
z^VNFeG3yzp;mQ-eqP5k@Oh0&4Zuyy!OK=vT4gowCFGxQ^h90MT#Sr~)XrxKDarRZ$
zg~i4yN8-*ujAVY$3O}&RB*xP>APhGK{Zt3|6pN1~LUcg*8<3R1Ms0J@$qeO?r
zFt9>yeFEkR(>ZO{mR8ekf_f(;E_2#=g|MD5v0lbIqrwQ4ddpTRNkhWO9Z6-+X86gs_9%(Fl|dAP)$1Fhi4mX7T*pQwCG&*3yUwd
z`|W6x_a@aH3jy9fTVob7yk=BkPHtrdrX*!)_BB%{?8@lrldCh0S&ZXzAHXnx{j?XA)91Yy)0J-H;`;pWFIyZSyZ=RBBg
zT4UAd_x4NaclOliR+Q^i_)3d5RCHiOBRK=swu^5A9xFuJ&Ck=8iRZ+toa!LQo2AdF
zV_r{mwP9b_DUab7DzRKLB+$>x#>frIvK07YB0p<+K#`Tp&o|4&$yeqRMC5+k<-?1L
z%yczRvK^ixN=$9*%WGmmzzqQRVi)DbTSJLkZupZr_UewA_R@8)A3g~Op<72Hzi9Ob
zOH(#!k0+6edm(f!Aj?Y{O&1N3q;w`^S=qdQd9OpfaJ0K4;?mKF(2VQW4RAMx?$*=C
z-_(Wn6hMJGPz%f&%-;Mui}Hbj&UtRCa0eqN&o=lY@r5`hE5kS1X5ljfOh!71hsDZ1(!+2$#je
z_xZ!c7>dd-8V>x1((+R!(0=gn-Hr0RNADfbx56Z^-#Xc;b%>2QZ`Ce;Pl(aEi++JL
z=8HjEhaGok-WAS+&mRnwKl2r8C$+6^{J8#TDbHNv(u|TDZfA`C{9>EaRFD0o?Xkwm
z0OgPjNKS~9DkynVOqEeZJ^ZqOY8J^LnfwwB#O#NH-KAk;vnI)U14>_e;o`+z+X?**
zLzMy%QE(^~^H5XlAU6Jv1*xBK7p32!P&n{!IAWFmA9Td}6S>#i$+jl>0Tmu0@cKf|
z*YKz-EbK+Sv5bpZD{T|?&Dk8u9kx@mD^Ck}<{FewIGhnVBRPl@dr*cY4upy(`bwWp
z^ft1(X0ZEK(D+`Clt^;)WjpXR$}-yq4#a_BJmn~q@(!s)`E?&w;`_MzDvdv2|NJ+o
zn#Sq;!T+#4YM7#5p-{|WQ`RzEDX<66zwJ`N{wx*(LJ&Bm`MzC&E!}#8x*#qT^JeDr
zcE)c9EeeNJKcvl;3Hpo4
zg+lf(+YN&DcQVmiIA!n;?nJP~#0S~|WRF#W=BTvN9>f+08vMS&->jVi
zY5@0le6#z{vpfba)A)U`y)Ti@dRe+s*55E@%CiHZ0_P&rrp!gAw55@YUG$&BaEja_&$VFIBqe2<^$OPmf6T8bZIF
z%hV4=|4;N#$!#}*#y~=ybXV(;5-G6>IN$=$T9E?$C(4D{CBmn=frUQra>FwWE
zXLl(z!vFImyI`ge{e3C$>i_><|K-J5c*XvH@!v*q|7EiM^GyF#vN34HM2fXY`=7`A
zZl0yThAj7g8E$Z?{blOMU;UAp`rj;K5YF-E*R6N@ZSntZ>6{An8KK@d?*kgc{Wr7p
zuM4y>u?C*M{QD*UujZV|%cPOtwqJj9PHQ0i(-Z#F7fUVsabaz{gyVm++~F6*w%>U}
zs^O1*fFw1^=!qXsq~gqhA6-Ycu0cr0L}vvE%jJGAB<@&U#+e_fYft-X{ZA&;
zT0ZnY{4{@-G#Fupq2IOUgYO;#+jJck4gt>Yfh2?V_irL+1V|PaE*v1PtLSRBxlC=`
zzlkz@RaofMFklJhM?I&poGwD>IhcD4h8~#EbP;f=))XCz+6W==!GIk<6a}+P*oKsY
zV20zr!yqgdHKaMn0NIyjwMvC24CTJ-VS!DO61o@xu_`Z{s7UXtj}gdHP|1rpV(F52@Yq+VWC5IUa!$kQ##7$+uQtAjUO&BOW)j)u-`0o(
zi|48X$zEjzMBUFK_xbxr1zBsv<0sf3nvaO8=L93{L5Z9QJx`LrAZf#BHPz6aV
zsEi;?{4Q*45{(3V_7)Oje=w;s?UvKP_?iT#{M`4)g9wn-PunJ7UefK^hNYcA?Te>0
zZ2pT66n=KbFvI~LqQnasur$H5x+@XkD|G_zI_BrLR9Gba^O6qXVr*WmlbL{eB6Hwk
zlK^8J&Zep8CUKME-;O$fsJ_KiS~=Ws)fIK=Q2sP`?3ZAv7T7{{HyD{WFkEuWV7Y@c
z&O*nr9Mh-Q)S2%Z*{6T)Qx!xazH$L2bZZq`fo>7n6rdk3-G5uLF5jt?DoL8k9o@v<
zdD&?ytuo)NoP27q^;eg4C_(X3szTx3l+V4YYFm?0b+Fk&cy>kNN3jEGvvZJ@evI-W
za4~uZQIR3Hu_df3nIhnUT>j=4f2G~!xT$Tjzi*F7BT+eq%ou?}Fu6ok^Y9
z#vWKrb1zPCJ#{kF@l+M7JbTxX)PPQXfer*m`JOA?7)v_~T0h7}Cc208k%JKCQmLcT
zU-d>w)Pq-rYvStUK7>Q!vlJRX-SS3FRPou!t{Pz<0YPMo2&5U+qP^+ZXeFcqz_d(E
zRHr3>YEgeM!TPSBD=KpKbTDQsK13JV>Pir7QUKg&!GI46TrK>Mw2dj>Q$!7lQv`CS
z#9!(veTZG?Mr`wJY2Bqn4|
z5Z<*3&Vm*hKX{agJbZHXBZ!{f7PZhqq_ICLfaEQ&Y>?Hn>uECth-q~bUD*?He&6e^I`JxM2WgKshfU)
z(hHtglGT9n%pyk~f5;8DeMF?j=`h(phdI_OhR^>D>lyQ-tY+w2?`i2YYR01k>yjD})%=v5vvc(W2U)bW~#}Azkc1
zytjV$zGV5mi%N-K6cS>B5E*mxXBpN9Y5{2Om_-Xrh;atgm|zZ>5%uHonK?>;B+@#e2}wgl*|(X
zL3&X(yD+TttD3xH+2a=rE7da2t=K;T5pO9Y6>=R_T8Ex3wRuy#I{c)=<7U4d=NFIc
z96Pk!%=0T_j}M_oeww={N54gdhB73lk!mCK%VZSKz2!RfkW*ESs%;%8FR7xjE#dB1
z?=1dRxW2?Xb0N}WKa3$n*8*QeE)f!%8X`4%afjW;X8dB2L?~OynZ#r4v)TFwBpxNb
ztSRs|2v|B_UxCT9T)WowEIVJ~ooF8Yf{Id>yy`C_AHcZOxE*jL323sleFZx&Gb6(Et;U+pYj
zS#0rZ8heAz4-69rXIP2fFfm9`&Q;WlZve3lX)
zpc~!%o+>>?x@SGgl*Lnas&F6gx$WNdG79>rp3Y`x*`Id12m2p&^v>A5612+AB&f
zI;*C7v|_12Ze5|gaeQudKU&v0#c6LKu-soPO(fB%m)I|&r#Rm=4&!EMBKQ^@b1E20
z)Z7Sc4(ZeTyp2^
zZ0+)ubpDuK+H0+=-==?6$5rmAeDpfqovPge#!KwF@ZPzLf=|E`SpndGk7~V?`s93U
z-=mVVHaFf(F>d#U3qa3w8TQ{?ky?j!=S!(P)teJYlp)LjLVYScb^t~oF
zjd*@&tV%|kS&2HC28VvqlmVuRpgxX1h(+58Hjr+(O2$-xt=8Gs=lmM>F8oS#(o*`^
z>>YqhZ#sf7x(R@1)FZY)=mLSw(%NO7pNehUgK!yqTpkiH%2s_5_>-%54&VSjM4RM0y_xnKE7z%(9nXfGa+L0+dQH1kl54>S%
zXBhX`>7_HvA@ap*)qRuS)StL5;$Oh{LnP=t`?yN@bHWLv8?;?0Sg&OZfo}^D7gT@B
z_f)Rs$(ghn%a#^+U4Zbh9o*{%JjMOI_tA9U%&a2C7XAK<3JBC7UhP;Ksiy)m>4@Iic=*u<`&?-u!@B=B+(7)
zDal2^xFQPHx2HHvnjgQ8+%a2@WxESbgq`AiP#Bi0705yb;n
zin7L~XV!G&LY7|B^W8JF4~zS=9nwy&-WHj_oB6EwN~Vmm#`q@qyZf;zvz>xk2iwhX
zW{iWnc<(@&h+7B#-5)FHN&MFgH;_}whW*W{oGipd61HxFk#O&*30S$%U~-fAf5ypY
z5G<>O#W4Dt&h8iBAFjh&LLgY}N~-wW_Y9QFZaaoOLFs3yp}B!*yus0Hi{Z<57F1T6
z!~O@D+ni0SAgrU`hzJcwG7|?+SR>+BAj~HDaQModS$)Si)_d)t7G7T$f|(8X`2Qjp
zk;A{$_uBg>CdC8PS{jUn9|d6yxJZU9U?tJE3U)MOEa&H~fVA&K@gdowbw;mvOz%;Z
zSMR>)22NrT&Wz*fh`#<0MVuNzic^Y!hUQDVsn)dZ6
zu68MFx+^s~sb~X9fUOw^kTz$8$lt3;tQi_~0V=vp&=Xy>Ui3A&SUQ$>v`wn4W+`Oo
ziAF(t)47lqLIu79IyKHXx*{S2m^KLvuSr*|N{5_8?H3hU&lqN2x44`jSs;J85g)D26HMIKhm@_Pa4t_8bLg{*IeOPF#{R^;K{*aSBUH$)
z;q8f7v{GPhtGfdc79qx~RF^}b#oC=l8{Yf%wB_WD8%ybTyslj754P1&3z}>qTkFVl
zb*Es<&|R|AvsTo348{2#0LJ-adht8y86JGp3-cK!tv@a5n}%ujoWDFmGrGS7%inRu
zQf{Ub&?21sY3eFOTf2#$H-XC}mC8oDt!)Fgne={lUx}A8S7fC&x(cFqC!)O!mE63l
zrb%&o%5LC%K5_`m9m-@Cz-pf^ig*BIf#0?(Iixiu;x
zFFP&>ZL;(nGJYasJT^IO#I-*AlWD+2>%f}SY~DvwTFHkQb4`h|-`gQwdk7S|z(r^t
z9#sT4^l7>_U_t7j1}6=Qw=FA=u+HXBsIVNIZhv4j#&^$PbA}V3pXbdsL
zoZm5Ui&FKz+)xo>Y@j!>~U9);cr;`oVF27c3clKY=jVKbdhg95i#h`xPMGNZD
zT9UM3uf7wu$8tv~DmxtR(tJUTDSiqk90N*HP+40*`kS*r#ShAAM~EmOPVCt>*1Jws
zsMgaPOVdvX89tSubLPkGSL?l*m*GCcRySEp7lWetVgqh(p_<{-%B0N}d=x=QJzyV4
z*?{rT4a!FFWzz1Vb++;bX(K8QE`-OAww{CLHj+=YPsm4Oh?8sYsSaJR%EfTTMY=JX
zs1zEsur9NDv#Of%$aYY(X7X~`AwTKXclr(k*JMbI2No7K-&0hkas_^6ND~HzB{ep_Fu}Ynn-8rmZ>~Z^Gk57rc
zawgFty8LC}LFW5Gw?@3bi+3(}%2Q3uh*{EM*kLfJqhS;@i28G)9x#7sO{+Ij0S^ew1Kqc`J1)u5B`Lk#T&q7!!Vc&dmMsrHtJ6W
zw=JIUD@ttr5HlR{xc~0SF
zpZUzE{GJPuB6`;!`k8kBYGkvxu?HN5zakz(3z{2J9M>ZILB#*fUM)dL1SA9-gwjr@
z-@7v86?cExr^n!UY}DfXjh)wp#y#+KY10M_C%S>Kt@7mSIUV3!2~MG&yA@$oqKbDN
z(tBO|#xyL$=&Q`LjAjlk)8T{069%JPD)C9n&5fd}Yft-&M0M(~bX9XWs(6sED!*bMhr+SwC%&^$luQw`G-KAcCr|}kvy#mPG
zm-hiYSZL>e@7JSx+So}0hM(W2clwFfLD$4L^cJhMKPdg7QT(hWe38+&?tukcqjc5j
zo_G*nE01BaPjguQtKxnGL&rez)N1+vsoL~E5M=+FFl*5(nP6$CR}kVLr1~xdXMy^E4!^^2`hOph8&3Hq0q_Sx#9q<3=?fKrw85M=?~$IX3uWLRKoW
z7xXqe>OOsv&~E>pd}~6BoE&`?@b1JzgJ!<{Z(q;fy3wXUH+lHy)Wc~o>wZW{eFYBt
z%QXby+@&K_M3j~^neG923_4-i!?WBE8lG}IOL-i7rbZ_u3xV$Wjg8lX5YAC60Ncyp
zb)o2aM%wS6>(6?}e(rn7^G_+ZZ=feA!>c*k?qs_V#!2#m#OdD3Gp`*s*Poovyx8OH
z@;ZF!+P9~bspl`%PJRg}e89=JAIYcHu_l&KA@diV2nJC51|XsiG;pOO=g7Ev+>Y6T
zv-0~}t!Q!yDXv{&98bQ++|1IZg_nZFn^d|ZZBxz|z72Jj3X8JtI$QF3Xit@67B|~)
zNm8Wz*iB8SaDGbew0#AK;ZJG!=cq%cF91Cu4e=>5rl9rF9H0xV>XR}Tq^NTgz3jI)
z>6*=ByJ{yD|99TF;6oe>S!62ZdfFf`g
za#qt;^B0V?4rMyTk*-Z`F(f=i(3e0k9taoV2@w<7J&fUZY5d
zM&n74gGld2-wTN?s^vNvysIBj9EELRN#3`k6;pLRB2Fb@3vl+96fz_MYR#RoOg?Rc#TJ@~_wp!BucN
z{GC(qGs7ZJpR}~lPBkT$h9572@`4aDGqN`3s+3dFsBB|`K&kifoi`G15OVX7YhSabS1J&9%^v(`t~-q+I?6O3&H-F
z*befi3;%?buv8t|XB53s=h_VTXId-~=CL=P8_|<>0S29?eQ!8@a41mEpgT&efF*|x
zv-u9lNh76avTXm3rC@1;ax?f)*xpJx(&dL+^PA1lOOi!hPO)Qlst?ZzJU^UhRIKt=
zu4Sh4;&XE70`IuOV{@n6rKn1mabP$cBHGO_JNmX)<3wvky_7m$<)`*ad&Q`Z0JZB!
zFpD%p)<*@5Fb*!1mcYjl4GHZr?^$BLN6gc0}{a#V|Yg8^&@=v4=P**pMUaa}
z{|wfu*y)nmEWviaPnl@b(BgjG7>;ebQ-j1Hz8AfvEu$T(g)d}sHVV*!~r6pH|;(d>=CR1VS)
z98()9n~P*AcQOp=1QP7=m~f&Q4I8edNzxYM+}GltGkf)mg@*sTJao7-y
zG}Q>>L)cp#qD=*A>E}5FCoEs-UafF!tvH*W?GvLn*|UA`!=1a*l12}!$3Iv2_mGVS
zMJ3lyF7YfjDl#t`)P5zQ
zV7xh%w#5Bf+p8hHN&P*RI^sn_PF;F3WKFDM>)o7PYSxc;DVr~vW&OOCzi-;Z9F0O7
z5^uR|npuXu1YR8lB%ERzYI>9E4aSh%epvr#;*d%PFSGFd?DiPNV_Lrbh$djkK=UzE
zSi-YtIa+iEGl^8CoM!PnIK+%WI0ctGn|`|b>(gkrCI^ErN=pA~x&45cvPKy*-&G5u
zcH!WG&A5FiuJPx&S0F{^^?1j%p$Ca4CysfTjSBvHl0$9Q)hAoXbU~3yw4`5lqYNuN
z5!+Qsm3w7_YjAZeDR4Lue>+I|v-^J1vtzBE;+{(Gex>(Dy1*p*0fPfH%s*pt<{%{f
zg+OW?r8G=fmkMiC2(>!ZFA+4N9TG}5)YhB4%ekY?^<?yq~%m>fyd(Q}N_s)Dv
z?omHSEqREUumi&O5XfEM5G&Mz`6xF%S9tc-+R@YVzNENM?2`=p`n@lCQmO*P9#?EG
z6S*+Wxl_#GVhB?%Hl?m{`{SiXv0wV&YsCwZ8aL|9^+op8ZR{MClnmP!Y9d!(Q;<2f_n)SKT
zh=0QIa{BQ}w~F09i)sroR%5auZXbM|)8~7=3#+Q&FKTG1mf<;X&wMCzYRkm{Q|g;I
z3<<$~Klugdx=n0dw^`f6+WY)YFIC5)rL>kegg(>aNxkTU_t$w;iZ-QWePc48AZ
zWksP>V^@_)!~?LtmQ`3sfKCoG2s1Ij(Eg3hatXu~md{olXdrwOrcN<~pa7X}gV+3v
zFJvn!7=A~41Y_pb;7o}MJPy<)Oemli*1|X$`&^f!AY|!AIe~M1@w3ID(}Lv;BIC~VrXK!W`_|m>tL|6v
zjc}2t4W2D4jdsSzhCg<5K4O^CZAgScJZrbbmQMS)lQ5i`LWovczyRe=DchsCyuDkN2S`E6A_(ZF+(
zi~p;Ovnzx%X;utYJB)2g>20MfhD(y-y`eYY%^@
z#4WI~ZJqh$`U_uLXNm*#z4wA32|9RxX${>~+!^G~I2Bvxv~#$@vhbWgl&OSx*{
zb(N)u2ke)*#}keeVk?d=Ke(edTH&bzk|Oglg@_QH!{|D+Jnc%E=R3z(q(H4k;LKA)
z6mf7FJ}E2L7K1-^QD5`9MDhxBXn8IB12c*+o>G#kkzZu7U_MlTsh}s;(7SR_t5w8M
zA^wouG0VZBs+-nT9w3^abUx7=ATKy+klIe}5nY~c`gx?|r80t@QShTXJI@AuGda1@
zODyJ`zYhZk=Pw{FwpUrNM|peEdq;oc5kZN9>O$nb5Z!Ab9`Y}yO5D%KQ)In+K6gWI
z5??dm&j_}}VHlYQS`6|PPQs!p-DrXJXnDuy{vbh|ba^TGT3tcT8FGSVl2e*#@UwXK
zXQfvRa$NvX*NeJThoj5D=2yvcJ|G+G03F0~uQskOtPWp3?j|4My1#$K?!i@_N1fX2
zU#kYjkECoF57I02LdiCrwdxGjJNpcWM|Ttp^m&>zaXib2x*PnA(e}3SdMvy6?y@ai
zbbGZpJqwi6-Azk)E|)F@tGB#nRMlsl@@(W{+!rmGy=>=18|(xH->}rYDi}}R;Uuf}
z4KeKL80zejK7j_uYAKSm^+bi?v3?b!rtlEk@G+@VDmLhCAc!K`e{S4`8{MWOP0s{A
z=mPox1-}z{+aXnr&Xl2t59s$e^?yQo?8?B-d!5`-%d@sGfeqD|*?bLgk2QuX%#0x1
z$35~QKp3#BnN7V!{Op=5@(tNXa(_u|ESK|sBJ^9=r=Y1w)2ulV073%E*UMk%*Wf+I
zzp=p!z7;*Um`M+57i7Dxk1YMTmyPpNm8QwV!2ZqxWs7vQ6XPC8o|}b+BMQ;k)HITG
zL?wIfbTzD}NH}|rxXTKOG&38i(`|g7)U{*&8C$A_y>M0Md%)n8Zbl5tHWT@@48}Xd
zyu`LqUFw(k5lGVuAkLQ|QBpdW+kW??yHtCt3cdb=S~FC2X9bi8-9ivxsj)s=?V)ux
z8!m;?W-xm)cbx=+&FNQ7?9mlL>mtxWW1wUq}$p{thzk
zCf19=`YQ$Az}IjB^t4NbQKUzs(O<(PEbd)>VJFC#YtRCD0o(g&>!F147YGQ8yQJ*3
z6*90+N4{V{zL?Xen>*XSIL-G$-MG53fmL5A@TKrF6LhrEU0~FN1s>_wWrKdRpd3cM
zm73%z(`&$FRq84322Jh%Y*;3y57M1H{rqgHlf*~qy>AQ!U)#hUNphw{zRSs1_!t;0ZYoQIuIVw~VC
ztwr7Q+)W9?gFZCVGh3}tQT&Wz)tA73!oldH+DZJ_bEs!XKU?@W%w9V8^#Rx&+!tJf
z`9M%H77F6ruf%1JB0JA_uM8^7CK+EAMTG^Yv!`B<8Z@|E=@x^~Mfrg9yAp$gUh6=S
zyPN0csBLh9ov+EpG^i1
zs!1~xyIC?bVkc-`W$*4UxL|-fJ47Vy%ydil4>#*GIl8L2=Td%C{raays52>E9bZ_z
z4c#Org(G9IXbFaO?~0RO6ARYG84{HjEYg~Z^wX~wC@%FevO0V3!QwrW2ir^~A2p*p
z0k^_s;quloq`n^AiRAA$P6$Iok@wFzX3T-+t_5lIYIyy|mN57#M3KAFZO7Gl;z_|Q
zXIkk!!ilj3jJYU$A!2-z8r(zAtRobBjibdiib)mND_ac2ffU)|u&cobw0pRubVW_X
zZ^g`60dM7Y2HlVZ;{&mQD!B{ys9tfjvy^)C#oTP^puCl$V(jU@;JyZIdX8yMh(clE
zv!|c7E!Q
zEFHFWgkjJ8RfkO~v!3Zl>U^RjfsAM<9XmqvU`Z5}74|4|E!}K6Y$1F@LBxLE%lXy<
zhq#!GO(o8Qa56Uy9U95%NcL(O;Mv2Q-LM3Vx{c0w_J2c8v;M!v-n&RSBQ|jFMPOD0nhb
zgnqCLcg>b~acmqy&BYI5*6z`vNCp=@G
zk&xGH{Ec5q;D}lbN%7Q+JHwJs1@n_9l^{IyYb1q60#*ppgne8sPs4{XJjq*gqXIVy
zss3a6J4@3qJepq^uR3qPz{A0|=z8W{s=nChJ60R4h;so(&EHo96(lZL(DVUhL14a^N~ql&
z1yw{GX<~A=-SB<)P4Z`*UeB0cdZXPc=pyfsETzlSy#29zyI+!T;~5k2u@Jxk{V>l5J+s2>F%%qSv?&BFEo
zpewZAN}`aa8nlQ~6rCt{#<|}g?&&=BNMdP6-~&!UN`_3-w_^Eeqi|z*OR74}lvLX2
z5<;L}g$$avHWT)X)6>#N95)-Nh?bZ2X(KnUl%IQ?_EB=)c~B&9tPC4yB~J@&Bt#>`
zbfj+rkORCa%J4im#FD1*41Mw;IfC4=&#b5n><_M!F;
zutXqSsB`^CXaX_hk1jd`q?C&@H*d8&P6Qr|saW)newY!k)PC$}wr82f7;}$%6QYz8
z9Len0=$zwAkA@~Q>xW$;lC{?eo;g-CF;_(RRit)<#_
z(1QIrTeINLu2G+Q;E_FyfvL0mMJ;m+X@qALMrs<4MUoI84c8s2e
z*)pS7kX;((ENWHVkexM-B+ed>LyJLP!ggM}a!>GdEj(Df&7~D%pz6iM{8DDAC)>Jw
z4BdDV<kQgUMqNV6%fZuK1ILDt;%~3$j$ZdZCs2r7#rOUkz2quYoYphS~{)!pT
zfE5nZ0&8j^_6bTDR5oWpo|EB?gNsgD>UV51>NeZga@`K+6Arvxj&bVv>cBp9;*_gn
zF*6RZxQRomYerzY*AL6VNvdHw2kCG$?#{dWoL55|PR>MpIO9B>J*nBWO`hz-oxF@-
zL$@MI6dqN>K#gCyzS8+YGGagdG3iy$s+@&se=8CL-@f71|5>U~($3-Pd}b^}((Yu=
z>%_~jZK+|IWpl)0>^$}juw+C!II_0>-+<4bHQoulHQ(t~q)2lwypPI-b=iCfP?Ak4wO9>tDKpZG4Y{
z1=hLv4yX1x^S2-NN$hpLqVqbuz{zlOBdOM`iG_)wq{`8;wB@zqOk5>9&Bc-)bBB!I
z<=nM^Iy1gb?JItv;S@zlzj(X+?7f7WgI$KIa=nj?Sbfma&L=M4fhZy<&Ce`xWF`rn
zNL|$2HMV?)?&M8wt@2u%Wk1!Z6|ueL;6+Hj_yC*?{}MqNXu@*R6-jmt(0wR1L{Rm<
zs-8E!%A!Kt{r!x~J0coxKeiwB`o;Ei$H$Ab7)x9Oe()RxQV#)W7~DbDuKQMOHgv3=
zgA*CP2U(lb*0@amGed3AiYjryp%sU{Ti7Wmlg9HkGP3}00k%%prxa-=0%0Ioak
zu?D0DDsq2J^tnlqhDX0?IlAy}aNnS_TpHF5s~Ns3O6#tYMRZ{tc2)1PFLdz6?0iE{
zD8;K}yZDK{F5kY^W^mzd%#A$0&wI6+PFo1d$Ocdq06ydUTW!MZL#|V-@FWY%`%87E
zXx`7@P|O{c;}KzzR_>Q1UAC*cy>gQ$+Ev5Y>sK6ZLr8B{_9I>341vmApU)a62Kj;=
zT(&-0Qb+!AqmEW}0!6R4GGgMz>@knGdGgK|xTdsHEfiJT+!3Bg3K`S5G^DvUKufHL
zhZ6U~NG8)zE)S;Ms{i?Eug%7<__xHY*h5J+znnk&OB}Xs&x@$3`D0t>>4|Hm`Al4~
zw&OSh$}|7KNl5}fREze^j#BAA|7~DCLo4V-j$;CEX_jbqC5<>A1vqAq1@&x(9$mt7
z{BEjz*8?Sgj2;a$bT(~Jw$aJwV9EHR+aWeQq3W`>>Tu?0Z->+HNHpZJEPWZf4s+7iCS{$?n1XrHMpdkos?ovUKN1-?R{FICaCUozO4
zxv={RyXg;i7I&}s+tq*8Ki*Tc?v9&(QrdDnYCYXKXS7AS%GVSGQLMpfrSm=gK+pfr1i$$WB_hxx__tex&37;Y1ezcDaDSBE>=Ny14So@;YNeiTG}<0=f!QA
zF<^8z@7E4Z%jc;_vK#?cAy#*rW_qXF;g0r`9iwR}gSWnZP#DT4lj%#AKrd4oq3aBj
zuT*6reHQiWWi{Qs{ajsg7bX(E^@+@%516#f5Y}Vk44=OZ9^{U?OGSs#{OZi13>m={
zY`D;y{49vT>@io?;i7QnV0&R^>@-Q$X}ih^#pw91L39n`AQ}RFTz!-(mO1W76h^7j
z{W$9v9=0MJKdiJH_uY+XOBl1~Xg!eg*6V3N!P>(0cyjpMt7R=KE$mrl5aEHs6ZE0N
zP|{j9x%J8I=QRn_4;E2Efi^GVEbF>ng@aQBa{lW4T|JCVvN9;T~;is@vRa9>Ol^BP4g
zjnqtoHp|HmT&T>a4&5@ynC`MTKj(5-X%;UVvdi#PmYN`k+Ce44mnq6XBVK@^)Wtf1
z3?=nV1)vYkmJId6N%SSCG0mp$wNtTU(X(A?YV{}1n!1U*nUGU6VX_r^>x_fgi&WK`
z&cWeZ{Y4<4X>4DwmOFXt14ElMzNw^WiMa1wa8SF{;0SjC<+v9u#$=osrKP#0#A?>z
z>^iQqXBr{6x)jR4?~Glh#+RA_RpZ+uBgYdh?pSt~m1)`KdLsBRwhH@D_n0MG9F)t>
z{_53YjFUZi3QD6ViefEq&0U-1tiiRV!^TfZ>OO6j~5>`-a*=2EZ(-G-b3
zyBKIuPPeDx6EiI=EIvIQ&56OJRkTZQHkY>96c#@b9}wO0xXD1%q#65Ljp=a|SXi=G
z)f@V!dc8hR*e)oq`Cx6j#mH#maf2O0&{KM+XVY;>B@+RTv(OOOdte6fAtNGmPSJCjzd*xumcD5a
zhbqRU8=MepJ-`}*^*{vb@Y6dg1ffdSscc%#3q{Gv##|*fWKK
zI~Uf0j2Huv>F`ht&v6tV1=KI}Dwoe6&wl>)`1t#ZkhOj?vi}Z$Q&jxToJR*Q1gQyM
zz`xc}pTQJ)rI0JU=$7DQX+Bqfwn1+#^{A7caD+uL<)PAUveC?kZH`#F^43w56*Hw8
zLT|lBC5CBnWi#vmc-I6N9(}USZk>CzcrRMf?$8sTYIB(d{o5jMTiE*JqI$xV`hG>l
zw4*x+qA%%ATi+`?S*bHq7}`{LBU-Vb%!T*9hW2Q5mSffvHlLTV_IJWBOmZzRw0s07
zS;}o|D?e|13=0a>lta}rtR4^*7)C2uC-oH}cwbcmKQKs1Fw%1UUldaPlJLmINQU10Na
zZ!t3ueid>TOy$2_ElG0*p3{4lQ$3tk+G
zXJ9}_OpRt5{u|r8tRO?D-qFf!>o%($LH%qc9P+j9d<3GK{Y2u1$@TfNCB%(d`mEZm
zPs(n>PBULo2r-*ykzPg`HxXFObtIvd7*XEY(6Ufz^vspxXNi^!ebJKeF8I_GNNrmZ#W74#&N~v+kK9m-3eHRZ0M4w_ibX!~Bd=>tMxTe~xB|)~Yv>^BHHMEC)UO3C59_UJf
zh;PymugH!zUzDHZEiCDE6et813zMZOWy
zh(2U{`(0uzzvTE)l~Nf+dI2^YV!pKPsfH<^_Z^q4p&V~7>d2YMAY@RcPGwB^Crk*?
zYYaYn#2U27*>FkEx;iL7{58kd1d?$G53D@FjxRBvIrRTdJt*g7vMFJ{(-CAWmHM8k
zBdq_1Q81r|uCM{W-glk@NCnS(1dd{*j0O@7kO3Q8V=?`og~*+4o8puO}X<9M$b^PXCTB$P73=
z^E(UV-?jUOo{Gsqk3Z8u{^C7mP4tsy|KLn~PyIK24iv{9CJ#gQAARS$^%ipBi~oPA
zr#s=
zS9UO)7e{vldxJvc3Vt_|&@huV%dg>n3n5!4pLqc_xg}b#XxVVj*+dWoe7*Cc7m^aJ
zLBcxx+O%O|0K@GBxkVK#w6n=|P)+paSJXea*GgY9Hb1K7##IB!xX-3W
zWSe7DcO#zN@4F?11Ep09VPeI1OjoI~b525(dc%_r=`)cenj18m%^wb5lWk1308~`C4fBNQ(
z#suO)uZJO2$~O0#?&F?1ME*eEMy;rW3-
zUkM{2kbn{73t?@O28<313duI1nZ39^6-U#lo&vV&&uIRc+f1fA2o@Y5GSJbtCr|uz
z4G2wLf`FKD$QiJcp8t)F?C8hhL&yKdrmak1K#3UICX8e{16%H~03HV>(3PQS&yIt0
zWnDE;vzcrwP{wvR>j;)^`a5+<3^Xwy>^HWC{`H@lkEz3VW2W8!Ctl#z5(}o=Y|Y8y
zTMq?uj1%bRV9>C*KQ&CA{{#pP`SSq$>(2c7nx8xKn)H89J9($<09OMWt>A9w`DC%`Nm+v?6$4%%flVA{Bm~A^)@t#$en<
z8EOi-U^cL}z!46FY8P~?9$og#DIJ9lua7K8!!UDKDEYyEwF*F)LM7bB%-?VH{YeB6
z5R;lrWI>h)bfy6Jq07|e(^lpDK^mS#SD3JnKR_V`
z4uct0!)=9Qmp$VIVgi%6e`E8Ha(Y{b&D@xWJ$)zs5sbDEP(?Y<{%rx-|NMdD-Eg+%
zpFjNHZ~gCh{ZGybhc(vrZaI-dO6?lkGQEu1Ua&YfclW&x*y}OP`F{FeMZU?_%cPVddS|LM0iL=5K5_1V~notT5Ci<}Jh-MmAye^Z_IlI_7^F>D};Z*?>M!
zPG7hJ4eVXRAE3wV(z&yy#J(ypFSd)Bs0FUJ#DlG_WVTA$1V+1#gtO|v-|42FQ;7G3
zmMuBDheyKz5LK3*R>9dR)e6)+B#=*Ot04PH_MNw)=FJfio=A$?(wQWI?4whnj>+`6
z?E6Cs^$R9*x<#Qzy-wq&%!eu#4tx;peBdQI2ll+dW!7%KompwKUWmQV?8hX!RFe|U
ze`9q;Vr6+Bi-?^ZP@cYBkfSH_>pLUUk_3xXJ(y12xT9Y5v2V+=nLR9#O<6L$;j#iL
zGgv{{-)nIg{yrc3)dwzB7{FP!l8xR^L#I%%dxq{OYd3f&dy;oPz5vkn9X-?aAG99t
zaU}16^Mj4@JWJ;2VSnKobCG62$D!9jW6D#1VH;?QXO-)o|7iO%IQ8Bo1fnPDAZ_U077&B
zo?f&C8~ZYhTqX-VsyyKKPNLO@pMW=?!Fz=jY3d#Eloxn7k>~coF4t@K?zb&1i~f!P
zIdPQGhzZ4T0$eU)r?Ntr$kH>1yNgO5CgK`0fBojx5LBP%gRgZIxFBggBd>Y-z|Z{G~ZRcLcrcLi1?$Wwg+5
zxM!hcx-gE2C>*zz>O00sD(^subrm(oJUWn>Jm8y>oBq}5il%1Je*JwTY&(2Rd3*=_
z{I?8H_Dme%t{j}Qgw-<2bW}u!)+g+rPUS4>x*a{NS6Sup%{E~|wCCgYfPzPzlI-x*
zW0uUZyL}Z3Gf+8@
zKj%pTZmm#P-nbin72?jHrUrRWWxr0i+RdziE3B-hCy>Pb^QNO7f3XgHR0~T%`=Z;4
zMZiHHg(*5Xq#v%MZH78Y`&DCMw2&cJP4!Qgefy=^wFNrpEPqJ5=_;GlS#PRO$9?<)
zNMqf>K~n%4o+GgG@1_zPU!`J22W*u;>vDG`=(9m1bkuv|e${w&&c>jdQj3
zHGlrNb7Y&l$x8e)-7!@Q+`~CUk$#{DRE(}zZ>q5x)2}0*-i<^b3W_`O_NjPG(!EP>
z*+iz)#KY&5Ma@N3nhb28N>#cgA?~1`jWh%cCt+`^YX_s^DNt;GDnB!gU<2nxsrD6R
zy9A@v-}m1$^w;P4fBbt_v>H+q#Yg_e%w+V$2Q@3(Ou9z
z9z-BtHaz7Hm?1Pe<~}0LYNXEHdGG4#yD2t4aH*8bT`*bI;IQU1jlI_ceAGp5n@+-N
zI)`P=nMttmXM_S`;EErSu2)QaLUb;6y4wjP1LBLyS^-?DzSeqI%-EUKS6%_`J$$p6
zLM-E;YU3DRA6l-F?62R5*bj`Uh#l<|QR#-w^#B*tG0&;F~AMn;Ff}q*2I6;>MT4t+eR%d%Lyt-@GaG8MlCO
zo9jDT^R``8{0-
zJ}{JB+;a=I}8|(Q!sv%XCF(B)d=$Qb;K~jtwQ$RH`O>VpmXW{kom3WPkLj7rrIRM$L|3t1uK97G+S6I
z7qhU^g^D1nMjasQR!5LpAqVY!Cz8)=T>f-?dE|`b0ZILmuE+Y$$7-!^RTBa-wo>5~i=gG}7eK;!&C%E4
zZ2xb6WGM>6pY7ICdoc62N&s{5dH9w}wFA2Dj7RIiT$-TOdQ>xGvR
z`-RQz-zDOlN1V2^#SQQSC$%>l>Fklq>g
z%1qZTv*sN*r^!jOu_vrrM?3m;c3w#-yus+1(NFf5P4JXfFOTznuvp)fc{VofvbpTN
zo6Av1Q&0_xU_}dEm;?JO`GKmC3qwNZ0JS4G-O9XGqNwMx$LC)?jniEZu22H4hQH!2
zYW2*RJzSV@?8=+Mu?BEl%1|t!V5tGRW5(UQ@g1_Te!cugWob0)st-x_L$HVk$E@2e
zZ$OagVF_f;L!e;)yMNMQ-I3JFt6VHAb-ZLCAzN7T9YhZLEbvjs&^lCU(+E7ps{P@I
z^<$b)iCJhtX)|^RfS5RXK*A|ld5N{DYy-y`=T1=5O{3l--+k*jGMcHF?y&8};=RcC
z#uv5+$hM({>|uhYtle^3H||5ZbA%Y`v!&6@N28E7ww&}
zC^3hXT=wj2s360G8LOkk>L1ut38TbN4GpMcVR-Xdz-H+(z3PNk%gv0Ugh|9~YwAdw
zy74ezV%zC<4>46{97_QOWxho@(KyFbGsd}Ah+$pBEo8_ZWYyx!(xQseC+8Dg4e#f8
zpSV?kwUV9f{NoK=Jf@kubCq7K-Wk|VIZwxcv{$Z)YGD_?Pd15Hb)ezbdnh~)C9oaa
z^f}Z2+m;TNbMBO-*_T;?u&gNKjylsjB^SJ&S)Ipn
zsMqiHcbvih@gyf{d0VbxvFoT;;|g@?kXO{uCTJm7m+~`ZZO(Dqq-^v1%a&mhANuZ<
z7hWiBhEgBbJWYGlQ*4WLSvyZ(*wR7yCiC^$lSJ$&EB6cPIQ|&sxf(IAP+>^H$nrb5!5bFp-uyJELyoM#-
z2a0uLNzK7>R}z%dEmj8b4_-Z~zmF9o9yciZ9Dxz>u|LD0oNBso
zl3A5QKXTcHl84<@H*
zVAjL~gD4N?bB3W53oC`IgK*7i@E0FSfUlHg78I8rIUX6`b{TueQaYGmyWsder9223
zNKPBOiG$3cxeBQxZW5p5_mgGIzRC}Z>fGt9@`ES)f0u>(x`+cbsixV^R;s#!&?Q@X
zG0FA;r%H0z?LDWZZs!Gg(}!N-DfLz*tCYoYJOfq8B}H;Piad86Id{vJa+@EDY2
z6}aY0(SZ&<&8PZ#fj#7-STB19dG4&YtFNzV9DUeew31Sq;g=Y;!pNdj`D8{GS$-lO
zoAtZO`40UthKXClbbV%Ic2=>8(Ft*zrfy`*ZNvsI3;9#kw<09v*asya?Br@$#e)*<
zTj%WwoYm05=>c=AGB@SQ!b|sxqls*-n(BhqsmzTm7tHvpRKA`tB56sm1j5)F5&=1Z
zcNoE%;mw(lAg}zl9A-58t0z?EPQ7h@4|zntiasz5*@&W700Xo;hUQ6LCs40Lw|_Z6
zs83Z@)80{>2@J|Pt$4a@Xuzv+aK?g&+%q?`23yJ{=tpD0B@FeQ6J{C!n;4?)04v=M
zCg67y^2-4*A*tS~zp)7*GzkoTC}~8WmxOsz>4wW6bO$u$co38^UWntR+=T?QB&cqH
zpaDu@C!L1sgF9q`E&nAkg7C);^cgaKE}Oi6Z{qSbOsxY;NES-ZKucoA`4WL&z!+0M
zt0RQ@oK2Gee&Za%#;E|E1R%ZPPQS68AqZf`7hPELSo-xf;)*cMo3#goiIeBP;^_YH
zde|mk^?%&P2$W=g_nkO)wzL7u*aqbP#3!~*3l^VtDRU8y8tAZ
z=JVg!BJjx=(kg-n7|KoPF~GY1y&w7vooo`0xtq8jM%~>C`g@FM@o1&=$DVj#e(EU#
zc+Kl)s|A6zKlkq)!P5Ore`usJ$BfI5J(>Qwr`5nK6xxRZI>RdqvObI54D-zfO5MbV
zU{+*N7l0X5R)KZtB_xCJV^4rb`G<~fWU`<)sGY1}moO-O2iPZCeg)(FQ~Uml1N~zk
z{^thz=>Km=C$2t~EuXrWBX8nwJUb*3g~jj^j*`5gvxBmLtKqKj!DFYTvkcl4j<
z0gwb=gx`)LK!C+Ry~}@^Yu7&9+~V*Q&ZdB*ou8)Rzj}r8{5mzGdb2=^{ud@rL@@Tf
zs!@40?4R5CPjeM`f#!L8o$*-U_x#JXcJzN6{i6u^zjvgK2bzi0O>78mMTYSoax3c^
zi~Ah4FO&h|)AoT~=6CrD-udPda`oWLuhqIxsu?`grKb-38$;dmUHZ!O;Te4EBt|8c
zhoL+5!aw@^hu<%$7gS36T74TNuRYF3?xr)U`Dq_Jz4G&0Ho@r+I%N(_yv9pAi4?m~
zt@~vYnAd|?CSJF$xeM8ds@*a-^UquhD5PNLh0$&x6V+RJV1`(l7^3WXwHivh`Ej}g@>laRw@$(;k8)rdG`z+~#4?Lr$BuM)zp6{Ej-TD^NU6{gtB(KV
zsG&1Y>#*mjXWSq;k*cr78q8Svkg+>mOzKpvkoZ@?SkIIFN-Yo6&vfdw$+!{-xt|DL(=yU+U^{&O
z(o4uTu*12q8bRm>$j8R}gTMZES5V{Q`xgVWfG?D=1%gh1@^QCn{cm^u$M@K%3Um_?
z&j_T}|33bI2mk+`skal#OW%rD2I@GP%(}5yPa;6wSF*(EE`h8ZusX>lggvksuqG|8
z(ET36ykIhG!kEx6EcOkPl+b_^;F{~~UxlRWDc@N09xHjx^0Mu0$s=B*ibK{R
zla@Nz@g`%KcaxghOCHE>y83lI=gS4FP!g8+$skg#IRpL@dCi(93mWX@s}TA)nDTz%
zG{2U5S}^wtUj@ir@3TAKrSkn#bK)QeBb=?b*H`GPCjvyoT+=(8yA#|YxHH@2dEWnd
zclYd`{k$JIboW$O-@3Q1|0-NbK@t^-00{&Fp-M}MsenMQL_r{!TLf6(3H*mV8sHy{
zvx=k$sCtxeAGmpKAuKNp0@cMJKN`US_lS;C+Rh*lTKCHzOrJxkDF{^JCM_nc=3#LB
zgziE#leHU}ob!(R&3hv(Zq#>aaLJAeh`aLrj#DeN%8Ql6reY_9z5?gt3SRXm?Fo^6
zb%#C&-L>|_Z+MB>(gYb2dh(R-R@&^5BTu@b-hW)tBba27kVK6)ss&-$
z*2Xa%X+-3pBx5?WK$Rcl0l&HfJejW
z&VQG=69MtBUal2teWG0R<8}-
zpQK9CsTZSeBLopd>?6PD)US1OBV3&*1_J{FsL2#c$f)68UK%eI8u+4;x<+l0ByTw1
zw10WEQc|8rQAkAphRa
zDz$8-;k|n+W)#zy7e~qUu>JCWS#xmNinB{uHRUgO)uo8L7xJc2mB6`b#cqbFi;%~^
zm*veRyw}IJ3BN|q!EZ_jf9ylp+6PlEJFRH`Ny+34s9Bx*}C|M?0A@DBZo{
z)VgW-P7c3#Y9Zb1qoha2UUNb+zNj(y!spy*V0%+FRFBMAf6YFb7cWrtHuuz7Du&qc
zvV1!b&7_8P`)&}FY<;L*!W?ypB85+b;H8B@0=yaE1uKI#9Z&~}GFEeO%zgT@GIT?9
zz}1#fpvO@}?DN7TdXz-MQh@@Ki{zOOhZd8ylkFSy@91tR?=}v!=QPfJ8vnaWEMS!q
z!-B{5cU?bgFv2=d(u6X{wNIAm*7#jGRxIO_Cffso*dtOh<$1s}U*c21ruB%k?o
zp2_EXdFR%A9QNYtu=L>FQl_Kxn1Rl>2QJn}uvdGYW-XBcOGh)QXJJo1?JsmT0`kI!
zL1a;kWs-{;vHLcq-Uc#uTT1okdPxr8(_CU*LExgGL$3u5?rH8>-RH
z-+pi`It0(X`>Xn+c5y?kEdBeMbC!i)v#3#Etpv;G4cjBIb0Q;g=}6D7a0xJFgc}
zSOYAh{d(;invCieY3lwUKo%&`N6s4)J09oNUt!ybda@U*V|R&iRzp
z`ToPlmsMKiW^FnWpM!1v)C{}`Hzx+NVW=kfyiT?<>9{kkOQ+lfB_TW~b44?kaLG>8
zHs&o$r<3V7E)V%57G6dXKE$oHcDu{H@(qMR7qRZ_zQUt$%e2%3;wC}iUNGt<*_?pu
z3`hrdhD=FSANDwXz__FMIMZd0AfxUZm3+JOl^@RbOQXnuY8f1j6#1^@ZQB#Z?OvZz
zavMx3brHn?YzaUDcC3uWmn0>3-F(Zmz82$yi`)b7$G%a%;Ocif&32fPa;;17@X7qO
z-gg}Up
z3zXf`Iw@5m$e5HG8$@;QTLl9qMceVh!r3S3Za@i1NcrbxDM}9UEf4Xvs0&xiyLml%
z{!G`6pQ{5C<`M&TNBmDnqgGHEzHQ(uNx^
za=$tbT(u6!5_yHnxMqQE5Hr-yt+svGY7s2c;N`~bj>lfg!&tKXP7t3tjEr%yeUY9zOUzNC#6;xDVBb;!58KF(m|SQ=V;Nl1Qu+fZKKld6L8PQpP<;uA)394O?}0=$Mkq)|9*J|
zqx7w*WAl8M{gFtSEJ@)-hc9>^=0MrrrR0s`(hb}SZZm{$;SDXoCZS{PjV$Ctru~|W
z1Y;ObK(3(n6|}GXKw&4u+q(gB*~Yili)T>PF8jH=MLX*9)}@G={@~t7L?TX<(UKsI`XF-=e5iid
zFLutRFyaLT$bbjL^=*JCMX8y+hopj1A-z}p_$Y`mvwv~D0@O6Zy^o=7Un=BL6qF}Y
zTbHE(Z?muFTEw*-@mk(XnXq{FvWgPB*Y{}M3;i1#>U1`MZtHcN3v6ARRW
ztTSm3Ha1Ym@JE>*>nYUiqQKK5m^5vpKx}mRkvm|v10g3`j@o_jBrtrxg^uXQS
zg#+J_^vt&CCY7tTGE7(caC}}(Ykr`$w8&98K9)r$@fu0E5Y0}ykh5JG|6ey&5(IFnIcLnvL=^IGH%Y1q7+dp
z74dCqngU#r`Tdb^?^<2sF4nxf2gWMjX5AsUV10iDDy4mKA+@RVY2o4Fag}(I
z4O-Jz8g3~oNGNtZq9Ry}g+vV$6ck6!T4Jyu+*kirX==-xrR+SVr;Nu2!^Al7HDNg{
zH5g9Bb)igcAYZ{Hkr=`*OwTN8t-#y}P%1Ew|1PmVKBuEbg_I?w;|xCu7AN@GbOuUN
z@k?Q6dbWcPB5z%g$<}5@n?WJ{DXvbuu2r{&t!Ed!uzCqzt_1qB
z)2^nj3?PZhoJXA^AwCb8nF6wBEh?u;J}El9cdy-U95ugKm-36MnTf)E!7X7^L(rK!
zc;h^5-{O17aRKZevb-GEf4hee*gYRwfJ7t`u@CZH8_YM&!)k=9z*jU{GlZ-vDqQ^;
z?w5jv7Nv5O~hAb23!iHnb-ox()6H66bVh?aK^j+hj*Ne2-zxEmhltn<4Bo2
z_3o!-e)`6El%5Hg-|z|pMyy@5Pp2>T=#9a-ak)7r;Vo}K0rw>h{@z!niX7iGXN;7r
zfEc7Z7nv)J8zhv(?+vE8ul}|YmP`Q}6*;_r*ox)n`@=lz
z8HauZTEqh=Sv?sHTO!ruC&YM+IO_2D1Zx_}#mKF2#%8tR=(YRlI0})Gt;}{wjUno#
z2Su4<>I)jxdg}K{+~V)&KDrf}6>E|#9A2FmHKp+`K={Xd_uiXjAK_j7*a*8!3CcAI
zPd^H-U=$t@8c+{H7VNl5diGxPmeo&|<94Ip29l!hl$1lS8JW};D_M{H@O5-n7WRvI
z?OHFU%M$dYFvZ2wjuPn>d(`g??V0-JcX%Ei%w`mPzous#&MS~u3uWO(m3i|ot%_9%GHTD8T($iC5fG>*`{=z%
z6pvBdHhmT?HMd5g6OprI;W7`eW(Be}aaGb7^*Y{rpMu@grbLlhemC`oJ7yuLmt~l(
z`E1NmDC#)}w&-CWbOAw`rJVe2CdDj!S@Ldg0ml`Oq;t{+yKJ+loS)wHl8-
zb(r4{-|-sbP)kT6J~s=!9u<`j!g>RVn&8|#{%cvaM4>69RjsF^IY8toHA>(5cQcgw
z0p4JrBz5?tlT@ZHQ?ui49N%|wL3h)^@4{fz{m{GUo{)pn_p!aQ{7Bo4+pm|&Ydhnn
z!+q<=;OtuoIXi}(mrNDw3&i^Ouc^N2@%6Y-7k`V#`LdX-oiu1ZDvLl^jB=8(Uf+CN
z@<0Vv{3@jV9y_M!gx`4Jlf>Gd@_7V8+~NCOJ&vtGqqg`Q4yErW%#?*&^=xx~4Tn83
zed=fv(5GqC2O9rM>5BIq+4pC&W{Dm)&@E1XTwGCmI=Yep65YAyRCrEt9`aE>-r2L8
z4$o6WeNvs-!K3-8r_5M4jcZ*C7f(%35_;jH>$%dAUz6$%iWO>hUCfk#(fD*LwNc2G
zVL)W;kpH!BjPqRjy2Q`&_$kk9#mbCCmHTeMw-20McQ0A>>`D(Gz*-tA$mPUS)hMYM
zlXH7E+_*qv&(G?17}M#0jLLYbg#zJbC>zw>Bte{U-RWb@(-yG_WrV?|ARe
zX#IS9C=x^jjp}a)n6KR%SBmMTqRq_jET)<;d&VZoN7BLUqh!bMve(&JASRE#jc*;Z
zHXi8WUI`^kZd`07`(AX}+|PjzLOLqMUa~gl5l(TDTGpZXz25hg$dbKdkGFZ8op*o3
zDa!l%2aj$v2YfGDo~vEk@iG^?`_jOo0Q&z}91=DRmS5|d*joE#cJRF$$>S!A#E
zK<8>@dMrb?`C1sAVM8>l?%>#Jb8hC8aH>i<|KVCPkwPBKxmOKGRu*)twLiPzLlNm
z6vbr{y$p?Rbmxa(;#$2X;>bLhfQ;(cX}8fk6U9`xt(Ns_!C0!~ZpDA}+d-%a{c+W|
z*7>p3)y#jb9#d4$M$lDs;9`b;TXY2r$MjM{rHpjqu@~DJ!iBC9UWb4=F&O3-$@
zrW1_DE$18P;+gc6$z9k-k!=|_j(8>7zM$7V$YsILV)pk_6Bkv8YWrKNi*Gvb>z+PV
zBpjGn;;?fofyEt7msidMn=w4uP6->idT4iVGZvg0Utd)@5q~)L-}~0aC`IK1auuH&
zts(T;WVm5Gn5ez_BN~}78N*2q*OXSYSh(msM8U~DaA51K6kwHP2FF_@^KGkM8`qb6
zSBL^B(?ToxO3>WQaFeBMCX9k|g>P2-nup=(9Zg7wovUAlsEhQU_7RWfZ-1QQcx@;%
z|rsW_pX`Fh#OMoZ4owZ;w4tg
z4Awgcl;REy@~;E7D!iH2nW09RN$9svsZBim7A3+Ej1r}>Jt0F26DmaVg99VDM8NvV!e=nhx;Z0&Ag&|qFb=$`;
z@v?ySU~%3fW6UxiLj7bIxo~WhBaM$a_&NcNOIBSZU*J<44ecfC{FXpjrmBtB&S;S|
za^&avAn)&XBk$kj+jq#8-!lYx7)>!8FUgY6@z@&Or7LoO|)V##aGB&O!$&ze;xA@25fDKRz5H6)lPF
zg-o7>$ph$Fx%%ZJ&3naWL+>nZB?fQGUvJLj5kLR&aA=982^;w0l}E^dTZP}KVKn;m
zc;@V1yUPH-c6-oe(eW34+&tFx7vJuJY^M|4J>Uu5xA}JoovbeVhAIE>ohK+)wPx%A6My3mN%U
z$kx^-y!Jsst*HTDdttQy3cZ6##m1m4TG#nqU+tUy@6tOvg@b>>GKt?&9skiXzD+>?
zalTWVHK_f>hkY<-`s7sa@4e@Eo4Ny2TJ*+B_*BTd6Hj0+Q4O_QQ)S>SB$I=ZZDmv4
zd3wlNJE8TGU3rx33#~OZcjrvA>}uRF&Mc35r_-oM;-)%cuPz3V8^{zKcCairSizOF
z)I90Ok!EdeFFWT*A=s~V$M1Qs%ns*au^jo`#qkj&9CM
zc)u|smxJ}@|-e>(@#Nx^la!ATGy_$-*kc$d~pf{G7vqqO92Fj)m4+rNqkovqxdo4
zHu_Z$S)inG@RiC8J!Y1VajtO`C|cs^11@Zg-;+ksW~pOyTasAt3>LYb@AZ+3t9LsB
z(@Z=0>D%3iC3v5j?@eOjJ|J~cei6a8!lk2ctGA=~5s0f;a!NHk7Bh&WtDg&bXw=4ZHKkp#K)p_zUuC|$+HyTJW5*!6>
z%RRz8;NS?DTks8DluK<^Nwd*G6hqKEI=4z_Iwr?Nk&2=Hi8$sxwcSeM)b~7N30>%+
z&m}*IyRmgU<9#ljP8HV-S??PLSA22unj>X!M6IgI$B=n@wwg|C9M)VeZmxZdPT36O
z*p{rN`ENl&fkOBDYSG`92R>KI=k^T`U(_Ex`#rOwz+nbwNQQ9&UI#pe&!VxIOenN?QP%TJJnbe@B&ZJIWwk9SmcWuAeZw>CeM$4s^x6a9~dqJ(+@D3E`Qmfq7P6&6d
z8*xN5iK!U^U9XBc+aJIF$GhcHy)7tLMx9ycjj>25v>mgW1VV1u583Awb
z?rqfanHq=sv6MwiC!61o_}5e{bZ^y1ntb|==|pM}Ech_J)g#W5gI0YoU8}a)381l0
z4Tidcp3Tr97p#-AKp4~D&5dTsQFOYLxK8pwl0sWItC`YkOR%HA8g(?B`I!EPcFXek~
zb5vsic=Y)(CnV}|sBdhr{?U$MS9C=wO0j8!Jt!fnYk)t6mD6x=xrEubSL|6oMWNhA
ziJT_qy(b#_$7HWt{hgaMA^lc%Gr1GI%F!(
zsA_8YEGG2a`)a}=WPqWsisCrvE!kxe%1DGq7}8jB&1;4=XzrOSoS%p
zvRnTzWh>u}I%N`SzjQt>E-$0|Lw1diVl|DKhKt?(FN3;2E<0M!X7I`y%iR}CKB}gk
zr=wz@1Q+
zx6?yEnRl#H(B-lIGER{fIxyPt=+Bej%zZd~059kr-^#{_kZ|SyAa>$V-L7r+F*|fQ
z=u-8xMnIX0nB@uiFcjWXd{HX>YD4&dHo|Gg{xhIvZt*9!xBSnT!4)H(xOg_^2N4n{z^_^((7=G;%0k!7PTO(M3-64<
zl$!?4ez#_a=$z()uI52wO)U$HPR+k}Cm$h|WS+Zwm9dr%kR-v>+evV;!JM!A{+xZX
zH{-Tx)?H^k@gvh=91#Vb^12OlZDvmV`g6<4kVtP<^QKwm5RJcc)wXA9dj#12gpksR
zX7mrYz|ev9z*-%30kI&otEiQCQf;@%zjFsF!4VQdIK(}OX*V+6S^NCA`G_+o=eF14
z2bylj-QZGT)?7#*L}Aw^f3#~CdMTSzFWrlA`WSW2BP<`!dsZ5unAh4{_+H6-$=dq0Op=qcv^V;=$Eq>&)kK3eL^mU_C+xpbkQqiL`|*>F@LhW9ty!~eDe|hAb#1=!OooulV}#I
zAqI4E*mL4rQ@x@(N~S9RgeewrGtOD9NUlMBz#3a0JFn2JvMN@!?=>myCo}k?z%we*
zvQIn7{&L)q7$~z!->M@=S*Z!HWaFP{8U<+QuK(IoGsHb`c3AIviN@gO&{eM&s^{7M
z)xbgFeHCN6DL-oSoBW;ia4{f%_=u$NB4t@U^=I|Afs#2SNBP6`y
z_!wBVtQ}2o0*SB4;L%`bNzQ<4maMutnZW*IKt~Nk#Q^6Ipv5e@f{)TAW?4`AQ`jx!
zxAQwz&UjNXkI7e|yb>K<1*MB~P`Syi$s&xyJM;#=qX!-qe3b{pMRZ>`5L#UQcAUS3
zwz=30G8c4^qJ+c!R?eYA&QYiP=T%;4c*olGfb%3}r-7)-P5}pA=P)#FQ_+^@ARKS;hs?+CEsh!LJI02X={!mRUT54%8gpf
zKeg)GNxbe(cyqi>Zw^ngTVTwK4gJA=&P%60?S;;Gsc9=?E51|CiUd)8cvOFSC^(-M
zRzhlan@&Hh$$BQboxesP-L1ih^Nj|N)^eFDy12kMlEQ|MsJvHATJ2Orq>HaGS5YVigd(oy1X_`ve*#?PAx
zv8IUvIu$u-XH|1k0B`Z90s*
zJ1}P#UZgYJ-beU1?tD^_TwNU7kg74OyW?zr&T4}@)4ah7y>a#SAHZ7rO)`lGS(VH>
zU3OzTlr1N{j!MuiDt)Ti9kZB?-+K5}=kLr}CR2ZI(I>b{&Ph1X&SXuwUrK);jZ%>)
z+t_Wc{Gd#7&gOd(+-K--dV}b?@4PX&5)IYmV0b+@BR56D;+M9pC3fI`f?}
zabdJq!=*0mBpOs&1ux%JD$-Di4%%DJpswKGIbBrwCkFX-r1rEO;gKzSUn^oIp}GOd$8jJElO#5Z->YU4(a9Vuf7<5cpZVH-10v*y8MoTK*0Yu
z)*Var+xwl|t8w9YW(o?Z+H7p)!Z?{52qLWhJW}GFW07Ru{ty@m_{8d&?`B!oEV}5>
z#rxIlJn1^RfmXr(C;vSboljVA!967s9X;oJSq?E1H<*pfi_sX#F>_KinQK1jipv%l
zZsUvB4!`v;BRL3DcJ-Q5Vs);l+x6!}*T9g0%QtmKgN@MD`+=IO*3Qedsj7A{^e)}A
z*usLp$1@;}SXftmmcJjhLluH%(042M4m32c`iohBaz(|LnwQk<=x;cUyQaP9XO)&D
z^z%jn?!LNuijC!za7O5X=LLDD(X3Jv{nmNh_o^q~xNWN%ttNL#46w>q&k-7ldN&1C
z-{529(qO(siOP$5w#4dXH?b@6(KNZbT&blK;haKNLfK63F-bYPN`{}FNQ;9(M)FQHb`V!Uw@
z&1k~`qka4PkWY4eB{+z7Uio*p%=huQ$Jh)>b1aITzKi;jxlv(u&bUd4J#4pyEq@rB&NY-)ml|i;
zQ`Mf-vDOIU^Kzj4eQN%n#@OuKXYT05!;xc`5O=&AT3f^TQT8&&$nk|WmXqoCy?jYS
zSt@Z-%$u?@GUC6}&cie$<&~Ppj$qQ$neJ|ee0eagYEBQ>)kf^Z6alFuRpqj>V
zmQD94j=Ord<}Vs<%oDF$&3B>SE>1<(K(FpQcx1EE*zAtHztjEeIO;&e-j$eCmq<=1aFYga?WxIfxeHM?6{(jM-0S4RAWy&i9SOWx^A
zZjS21W{gdp*CqT#khGL_Q_-E1gQYTHgCREkoa4Rvg%`7>D#b=;TEwN9A8f?!?wk0@
zppV>2IpYt)MF)W!kJ?VYoahwysvEYL?_;e?TkU2qlW9sRUHptI
zqYNSDHg#PoA&EV}sMA|?Y2L?DjL^`Tt2R@_Q^>i!i{9eKW2H(!oqYQv4m}&EGd55#8r30_OlX{o5M64l1!)TFl)Kn2%!cV%Iv2A$AhzM
zPS3oQlWS0QsI~V8d)jbX-2Aq4xx%5>{AxX$O}Xdu;Aow9dGkG_mR?(vugiX*lyUPC
zjz!AU_gi22T*JhW@2L62Z)%a3_n3U6r`=X40oqFE#oz8!`@W3~1vSRlBtV(y`KUkK
zk2wkloIgbP!rB`yI%DCqL4ru>fZi|V*OHzrZzH*A`t$MfRK61D6KR7rnTXw;CH?T(
ztFt@rQ{f!6MG6OGk;dUtU1DSTpVKjTKg*%{9w`ytSx1FXmy!}q+5nP!X~->vyZ
zBW#e+W9j(^)f8sjrh?32vKzL}_OE1$OpmSN6vO#TIQ$P3Ot-&IQb@?^e(dj@9#6Oy
zo^e&*i(q1+UVfEUDm>CDm
z@O@8@aek&`!vgBqLj{r%tAvFCW+^z$r;mfH4;sUS#&A3GO|PN?veHuDP3*ER>{m8<
z2=M3EOw@bsLzFB}z6O7GHb^CyG=w{P6`S~y4}*mnN&)anZi|@7=PLn!f1d5XM%+0SY61-U2V>>aD-K
zP-*jC4=eGx792$S0C4!pDDFVr6uv_%Cq4dIGm249hcHszrJk)^e&bxabKM7$RJfEe
zziEC|ToB*4#mciEUhpz#YH_7f`8Po_OvK70m=O^B)kxEww+>Jv%#RFy?o&v!(!2&Y
zo2JLmJ;c>EiUIN|n^TO0F}cWha>*r%eDTxuF%@`**Jvg&bS!w
zE?Pw>a4SjExHW9qF#wPY)lWWdC35MV0UR}O9@0dPg!FHJYGj@rjLg?N3O23R-qu;>
zmf2~ZA{otzWainKDHIv+X=ZS03CY+M6-1ZgKGD?VZj0dbWO9ErKIBhM7a}qKKWE}2
zIOnecd&h)SUSt`}6+b5@b&1ESjYp4-=l#7q!aMtJ@aAOdjlnK-y~2B=M!H
zkQqqH0tSKVCcUB>CeEW`nq@G-;
zq>RAFL0d19N*RtyFT-+`0l*aw1${vIM>p+^
zTEZRxAQTV+l0jpnmKL#(#7uta4->!wQ{!7>{jaH|0H}j{scmi5CnLz>2jH^kV3td5%)i$uU^2Pe1(4brL1^Kx+vvEk%Lw2
zgFL|SaRh+8dP}(dSDr6~+5ZnFI@tp&um~
zno$4Bx8rcRR$7-Y{asWUw8XFy<@9HL^-+h{iF#L-2rp>LByxokBNv=RR1xCGi1^JT8q#u(@B?2X0BxfM1!)X=>m8V+p0!
z8Azt^kKS`^e8th2x*GND?iiB>pBnl-zU7FZ#>|5QB`7_W`qmkvWD1xld~1%DLrEu(
z`QTy~SEkx)99_ufxz2jwJ$$Zd`et*l_hIk}0EbRQu)`fKVfAx{|kP
zz}@%;z|;d3le*yA7s)0Acr>;6MP$05ZBW1L|08Z~d=hwzzMhs9`JW)GUI8+D7fF=|
zteupYm(6K^Qmj`a#Z|W87Ex#gfFqXwCP!ifrUU>U2!NepWvuoP(L($FiQA$yrKAJC8O+iDXS`V%22IX`k$K@Bv#iawvh_uH9Lh!au0r`Y
zQZuh2lTYGLeOE-H;1v3GzNg1hH3|xU3pe$Yry384-Z}b>fY>bcKV0w75{B=FOY16F(rGM`OBYPx)JC44;_bU?qMA=X1~{
zLWNZCs3|)y>8~ux3T6;4CS$x<%1Ivl#$7f
zF3mOH=xE4%TWRUPb7*hhvd{<{^?BWbxL8Iox=K+ZWodp#0;iAo9sa<4JKRHD*E0%%
zWo~TRixMTv+ObxiTxX&P%)4hQe)5~)=4dZZptF&fnPcJ77wsC`b>MVjoT8fQ
zxL1ehWv?H|C`{-|6@e@bj)r@Bdcr<|#92h+U2ya%l)mK2TS!@oWPCSqGc^tJMT_kJ
zO+8YO;I>FoILw_ur-5q4D><3qEG5sSk$%y1lY?zdC-WT#D(hxeoWx6>uDl~njJZ8L
zBPqeBII!7WSeJt~EMeP@Sk?6g@
zRB|>CnDX3F2OA&}_li0R(4DGqyONngN5$#iazeSsHoXgWzV9gmw#(WcB`x=|}$N1Mxj3o}CXx6py9!)S7M
zqMulVqkI~?iu~&rG**&Wmv{KphmOtK5pun6zDlGd01J$#tAg^ILjZ05RwxPEu;o$e
zYWnNPP-d#i?%Z~885snxQfS=9(^Nzkfr0*Zds+P#ThqLJ6Q|2r&+pVdZ{pWPdAH@&FG?!$?W{SF=h+2lmBOf2
zm*%{e$O>WN-zG`AUL|0G(FJEl;C*|l?&_M3qUK&>5>&EDb)JL2wwK%&m2cZ}j(n7*
zW1ZFs1bN8|Rt;ljJrS;`aPY}y(>Y&|w$xcNkf_&OdXph}_h-9Y-_!`iAFAQXeOgI>
z{U93E?Pj`IvnxnD=INXu_Rmom0FDCCXN*&L2^9yyPh>X;kDod5N6tzhuXV0_VQABK
zZmZ5#ZSuUk_ULJYOBKpF|CR&pWE=_b1W4m=>&u>JXaM`J#0ap^l0Y2uKheWJ;H0-F
zg}x&G^Aqv_+Ko247gH2~aR4wmdqC3K?3rqSD*(M6qMK^6riw?-G%!SY)*yUCzfbY%;29M_>T06ysjKdDK=YnA|Jq;o+yfTQJ(O)LdjCpzN&D>wI-QT%EA
zoRncUOwnfBneUfrTgZ)`%Y&AKLlO~|HMq^VD$ug}Qtk9v3vR$H-qW$JGo>;Xy5E
zDF$$hoPd**Mi}s%pcl{SrydRqyPFFQ?~4bx|FZt&hqR@r_;z?
zxpSkO{^{P7Z6gx>1e@8Lx4Q-Me86kp$GboIFJNTM`vnDB`t}fB!
zOL0&pEo%!5!Al&ITDoV|^A-?dZkZDyO;%QFZq9{lN@3HWStu&(FuwVdNr|MXdUHKn
z;k1suM`UTNtGpRx8c~;=jLK|Tj9R0&4(wQ2d1OVNvGXl6lb^c%Z&vJY?%e>Tclo??
zufFPCB2(2RGx3T-JlpBvIQr@4M`1orYI!?1z1zHmwJ0Xdpq%7Gqw0QL%q&8SSkioM
zs&C;BJs{j1Yn45EV@V5$?C>kFaml$pCD&~qX1gq^n#1fw6qY=4>6D&RhW?T=rlT`0
z(SE0IOjqRexs)@5fpYWR0Ud>RJ)2e2N4j16B1x^ls6wqc0CO+eu3L{$wP%Y@P^_Xs
zp6^xLz%`^!`eAoipYP{7GY-b)zU?CmB)(peh?|^w+216crfWV}NInhA*AZ32-X8C<
z#@ehzgTyJCmJILkjg8O@h@JXHS@#snWjF|;4!J?WQgGBN+SlgE+!(G28JUIkmpelG
z?e&$POVq;S^fdabKgSMB<(4E)rp0Hbj?OOeva=`RfaNK&jI7c&VKgy4`S6)pQ&?iQ
z2dDn^-@izs#UsKDsLo7(-hKg&mV66euriSUnMQGmEpFm`!R69!b|R8kDe$|X+B-(e
zRL5iUD#KNwoNu(41j$`Nzw*633OYOUmV_^rnr=yHaG8gfa9v)M4U?*ce?Q)3Z==>t^-4>9GW
zo#y4gnLa0>f<7mOEu}D66lv+#&0OO#F)|#i=QjaLbIbrhXd{<|Ajw*eV8tI~j1asA
zhUW^wL7I+RmM%i+Vy~*N{4>hU)_qoci6F~zq1N^*EKYAS8>?`GwQ%RiQfZ`V3ZDag
z6vq|uYk)jR(cwbEyh72QbyxgYC=f{3&L@!A20rMbvBN=*aQ*ko*(j5lVkP471;}M<
z-d8h9(0e`wTF4$?M@(>Vs1a1wmFSG10c~g7ZEAhw`zQV
z1AGi2-~+_i4N*YKsDO)+2PG1I7*B_x|Cdm(69Rkq!w5mgix&aT+W~g}*LScb(m#ju
zk^$3#U^RiagjN8)!+zIMLgE3=>IsPg%LkCOaPEuNdO1H-UU>W<=Vd-HWCC9xOj1xC*Wj4
z?mCcT8i?C+}M(s)7OjUf)G#V{r77msQjaCO_EtYBAz=o9~F?o=W
zlvs>yqRSm^VnM^KpWZ(YAfFe3Gz~kJ#WUal4%8E$k@;PPE{v;IN@$>wHkSJCOEp}s
zi`bEMY6s#YndIo)MP}ZrZL}mcMM1pZC4*(;IUfZ*kHlPicQ@E&YUtZF6$2XTz_L=O
zwWHeS1C8m(v*eLMp9yxu&TMC9KeMV~%dT5K-)7g8HoZC1^PT+SRhgm@qAx99R<&M0
zHv!ZVzVpoVc$TG-1$jt9z5$Aberf%S$y6clS;9X~UP^t~rhya>BLCS9wJT${c%W-X
zj(b0slCi%;Ba#&S#j!aXt|loY$FOt_q_h1R_t&VS%(j*E+S?LS^Ya})8-BYZ1V-3L
zV$4z-yq+x`jC*v3B-pd@not=SP(-hS1NGBqZ93gYlW?+rm-L|5T~GxD>gba~Ht;k4
zl8TkL^Wx|>HFt_sOs&Xzgm&Efr4+joQ<2cC2-{N*OfmaBQt>MW>Nzu0GY5muZEy)}
zCs?_>v8tC~_{>aedkfb6Oy}IvojS@IL|hmEem4-0P5T*yiIv9rDQ)P^E97->O*eg5
zmQ3Ak_%Va|rwqZ|GV}mk!K2lL+?7uQ26brqXr6d?{(4U
zwXD}bRjg3)*3~EFPUbC3W?n`HXC);@YAO3JoBZy;QF~|K0TFCx=T3Lx5**K+^xW)#
zcpD~Cu?RRBya1#);zwmwg1)m5CjD0l)lo&5JdEfoLr}Hfy4sveW
znEr4#b0lxwe{x*4wHE6g!_=*1!=j)AQ)?wS&q&e26GYmb2u3m$vWx#tP0x+i+GsD`
zV~Y>h@N(6!MeDTIp3{C`ql!gWwHHGEpt$oQ34d3b#`X4L5r_Zp{Y{q;DTt9XiC&@oK7!
z99A-jFE%$sVD$n({ya5Ou|dj95F%gq@0TO;<0?J--$RJ>efQO=7NwpZ+oclTsBo)%
zg6z*3G#Z>!Vhdk2PQJBRYebVp6h{~`kY@&)5t6aILLm7D97GT;6H`Z^#SMD{EZ9}b
zgr0knhcLNy~oy+D}95
z*QgAR>z6>&9t#JIqUNy4spNjuOsb4(^c)<4(ieJ-g%Z_X@0ozkf7-}IE(Q-TL5F26
z%gR+nGzT)&3e1f%{~AHXg|nykCIZ1$g2*a14CzT_`}sjFsn@HBnJ13
zOk`qz*AJ2;>$6S
zMZL}CPm^wC)S;LkleQcQDF;2W%Lfo*KapeQr8!3IR48)$cPW%9PGJv(ajsvq3dD{!
z1nA*62s$P7nd`+=*)SsJxR)brm_S1C4MVUP(dD(lS!wAm?IT{;j&dqd1!V2)k_^=`K87&k7vf04eYr>~-%
zZC!G5HLr?5c`cJnKuMN;-GF0dtI$mTW_T9!TWHuK`)Yk1g`o4VY?r7$zPd~kGqp{!
zGmo@5HMhuJ@E<;Z;LxY9oC0Yhw$rtXX_u8q(4*Jf%65>4CQ51tcBeI&7@Q9+LD)BI
zA^$@)B+%!eu|k%xs;_Q^xIM0n35B9k7X2pDMRHrJ=ZL%s;m8CYS;v~Jnq}k4yar*C<>>R0PZw>a@UYU?k*-RC!{s%aMFo&%6F)f>@VJa%mY-$oZ4Pz0W_04aVSx
zi!oF?FU`aqmgiMEb76AR^m>VBVNk@N=-O7nu|z~Ou5!UV3~d7&cGnUsC%hP{$*E-W
zH98}x=%0!r8+0F(>8|n1Rr3&qxu8CW4TkQ*TmLNZBdhV6CEs{rB%;uOl~6ACTJ8<*
zp(999Zz`O7Ddaq3_ox!39YQkcG&hyX$Za#`iqW}<9Na)3zKcN@Rn}@8;%{4o>ie-G
zj0^QXnu)N|jmmbcu8Wa^-OLan9+#f}Z+R0N=9w}HTv1e!MCZnIQ<o$%+kk8d}3mFmu2nPa*hXys2yA#dWRoT(7Dsk`{ZqwVJOHNbVpKLf+Bc!A_P
z9)bTrS9FRPt}xIgd$!6>jfXhM?^Rgz#j2%y*$GY@%^^Q*EijparhN
zcUf+f)KNjY!Ev=4Kpr9`VYZPxRKfIG;ee8@o)popuIoL}3Iy^W;xrBi)%DNIM%%Zs
zyu2a+^=V&DgSRxaOn=DYy=4R{~%HOaa>;O0eS~`3X
zrX3do;^&X)w2t^J0sH4u7Wb#8lqH>4aQjc0zv>Sw9Y6+|-*aEmIq5?DP}yIjnhHPG
zb`)r$6ZlwN+dTg8o7eW4RVU>D)YUQiu;RWbH=Nu=uch-UF66LKzae1J<*_0FpPQj(
zQ~`!ry~V?rX@(RMvyY}K1d}k>D5=Zus+H0KCmsR`Q6-k8X!|p5ZP~M`zdD8-Tom4U
zeT{kPP%8>w&1_EK-23pTRkhUEJRn!|uqf@DaQCM@;8f#;QfUZ%J}V?!PsdR@WF_nw
z%O0dFBhCR`DxeI&Z3r8se%dx90wHoi-{_mB)ykT66Mv6%^X%r%h0>bHdG{0XvQnq)
z(s(Hf@04XMYX$>Q!k)&WWD7GVkXfAS56{b}QbuFfjy%uXi@+l(OJ!sa?e^F$0^4}s
z0|Gb?4>}4@#jU-CRp$|ue*yolTmg708bp1|Sfg*C38XPc9Gh{zY
z=|?AZq)9d%DQJjam$7?
z0#qUpdFIyal+;ibvbqxSMN6R;nT%?6?13NE$v@lZd?v!j97V_=6Zsqc-D^Dgp#P}9
za)1tfn>^u`={r#X=wYzJ;nURKy6M{5D~4$eB%ux>{0JkN*WKIoL0+s*9k*`k|Aa6+
zRo&pw5nABMdm@2KFBF-Epyi~t^YfR3@%#7+*9%DCwkf6iRtz?SXH+~JnZ1D6gQ=?}
z!E=-orAaJFPwZOrz>kZnHX4j#w0RxXsJ!U*z@KXDP^ioms0clqSMQnDQbxr=FcFPL
z6?|)BH5G1~xTs24R|sxmi)Gn}K+)2%93Is;0-}<5FGRF9D)85y^~jmz5ZZPR#lP5O>W-xRs~2`hinbro{Ub1NR;s?r#1V#ZP!4Eay`W9Ymh{+f&}L
z5+9=et~Br>;q4S)m0czv$S~dE1+joD!~r2&eJSi#BGL=@)^`LNW*qzx&-09TR=^+C
z@oCy%p`5eBV2J^Do3~!<(l3%@wSz6FxBm!m*?0)zZW$1M5x{Hdq)pGLJ^y~?HEC+|
z+7A7oj>t~#@9)nVBy1o7I5c=A{##ITc(+rFIv$Pp(e!?1S&RA_#8Ff
zoUx=_kYr2o=pVe(5`3z5|7)PAyw40k*A5a}M%KMC?jK~5!d0cWufp%{M^GF=y2}U(
z9EDO;G?u@RW*Dj3Kr-|xybAxt(~*bu_gTeey?dX@&3bvdR-`&4GdA?5^;Jl=1C
zs~z1nZ!c2vNH{x@Zwow|uIvPwlppz`?9jS|zj{6EQ_Low%du+#Ki>Av65!%?5xe?%
z5_%UY9Ae?Zi_P{Z#o*M5FdcsIP(-Qgo(xdWYo3eVF0j#J^gEC{VA^1?(qvwvqBt|9
zz^zswb1@prF=gTUiT8aexA{#E&iUze0>MrOJh+@2RO%~qL^PfD*avG=VLC><7TE%f
zUtKHIyWtS{%H@r6vBwOiL_tA=kj8D2=B(cvPLtbda4fAxWa6g71FZqf6^alUO)6($
zK^@-r^(#~W=ag5HSW=~~>W{0U1oh@6HLiCU$>qTB6LeGa0~=Y*gi`F;<2ua(GMk_{
zkPKfJ4~+`B{SA}JFe~UdEwc
zDKPqN<=3;wN-I+cykx3hN)9RURzNi%Fr=mW>)xu*p(|oOJ2(;QrVk@z5AQuAe=7!{h
zMg%;pL1h200mUM1)5U62*QPEngWb=)18umK|BTvoNOVBj9X`oLS_iOZ^gD1?menG`w3>D~Lj&WF6X@~ElLcvM0q0TU*NuJ5fdByKkDREpe
zG3?vcf}l`&29H1>Y6LiN2|NEvFR9mT*20(Hi*%sl
z9xzdu5Z;}UO*rVkl9?DEMd`3LXp*rdTQQ4aYa`a9s
zTM}}1rPeKyXy!nl!$N%posh8k@6qJRPNMXoZ}=>%em&7X$^Gq<>I|4!glm;677}_!
zI7Vh^F`HT+$uFjw7U@Yd06acFS0Jmt?7k!ePv_`Nv2>PGoDY`6
zXga3eM4Ot>R%joR+!C~1@!FDGw<9fXYn3HR%l+VK`dK?hZ_WKuZMOC{k&AC6@KHgo
za|(u?a>$75H*yyA!$Rq;kR}j?d3M}%p@zVVMkP2*Ssi&p8eKQ#h1-H1F*o`Gj(F5!
z&XEPq*Fix5>GTHEgk{)2%U44tNZGg~Q?mZRL+O)n6|M+M)5ic1N*>Qho=@&{o}Z+(6Q(F@6(^{PkPnv@G@NE@p97k2cW$$-*B~j14ggm6+1IxB)&1r@O@Sg
zY7p>=Ap=M3G;QVRYc>?nU7fG@M^Z0;%FoMA;MEZ+mkudnszusUBu|sG*c#1#$(AtK
z&Zf&NeMB|;EK?%WGEE6&s&_PPE2>t`Vu|ti3n20v;b*8wO%0n8Fg$vI+_!;JHh_#0
zz5%2qqzH?pRO&83kM6w`N(%6K12RUkd~#v-YSNRHU`Yn=di9m1Kr<;KnY=x~k&G3<
z+<>qp0};gi^;lWKT}5JY>gg)T|iYhz`2|)*$tREVW#}pJpZ!_LVW!yH_
zAsG00ntR@^Z@`3D^yu{R1o!RZ2gG&*G-8n%_QRwa?5nJY_s1XaDDzD>AtCaR^T2eF
zqQDK`S2(y;PH`{H2uP)%=!r&y*$D!b=yqlG2HxA>^x86adUT)s$$hRO
zT5k#v7H0L~t)n5KQYuI)Hw9dh?`$|a1%DlUx;S>zRZ5UXA4!OFSefoUn
z{#?s*NFi!#4xXiK>kN|MC5i>~m~qW>Zdhh31!h1mdM9cgXWVT;)r(<_Ettw8Ba%I1
zxg&wr7KJi!`X}XMv|YTKmSj3Ik@>{rItS65tsx*rpiEqfRG%VjtRZ=1N~Yi*9#;;w{(XBHL}g@q3@$
z`bKtrG+shOgb{EX`*REMwpJC(iAoC-(q_w51U{NnE$eAnjTNEl>$Pd+IhzOXdjq~M
zm6P8%qnDGn_^7nR&)c6mry@Or`iSZOCHdYb(MPtYeUz&Cd;{D4G?$Bm;M3yE!+K1X
z?@3#i10IAUzBow}qb?tT@A_7Rdt4ybIcJ_H@zkGP+NbnK-2Yagdb;y?CnA0oV67-b
zdhRKn_fMl?K*&u+42iU6V_nZrsY(3wj#1b&P3oCya
zyh?>B6Sgfxw}%!woCtjfBFre9Y_+s@e+t>|D8dN(d@4gJl7yKb-PD%_?>ggU=D_<5
zWy&GXZl#~G9;6$;VI&8o)gShH+p#Z65%P~=9>1N+jmG{V`*^d$3>rl;xl>NrZ^{De
z;3lBll#GlZD^w0X5Kxiqv6GhEZE>{IqoAKAy?uj4t#9@2J7ExZzll-|J$8;VwNWEK
zN5J!e(Ca;PT|Q!iwqWuCGa5|5#y1vLhGXzA3xECvXm}nvimZsfGI&En_9LLa%9{jy
z8RT)v%gtfI6vegrtY#Dz&!@T6T{9Bx1@k{6th9FYx>W_S+=sq#4M8kPK$qz>BQz72t||8=x+KXnuz0$l;VjG1a`7KFoyDRgpEOOjZ1ps
zpTFkq+ynIYP@Zat%>(_>{4)Z$DHpxckX
zi3-s-3_l8?laqIyjTJ^Bfx2+lx0h?1PiLM{edE-JjB8Er*syzE{S4|iC0)>pN$cMV
zy$Mg1C(%`~Qo)a@DkhpgxSX3%kmgX7S`qb9>hypdGx=j`QjO|;B9*k$$ani0QgXuy
z62r3`N*^_9-0F%vG~YQGVQ#~7|H)lNk+0Ae6*z9cWnDx*Z3HSu26id1pb1V{*IUJJ7j*Jx58Hdi3?x%Dr$0F^ApM%xJfBFjD@I!qdZ8FWQw=
z2DH_4$|-VsYB}Q6XWi=Tx$3dcw__KNt#pXdwtk5x?;}(Rt^Nt8`_CnLAQ5mmqV=5x
z=(BZ#vG~j^_FPz42rC(;wo+Thk_FIOC5E}vZZ2xM`d(?60t8;H?sFZUOhZP&IT^Ah
z1E!81(d-^2yig&Tz0XoHQ)|BFu@NllYvSJqhkT0>Hl_;O0C+Vz`_7))+@Qsb?Z!p!
z`D~KohQ{5+n~Dd4_BO*fGUIlU$fZO%@$mL3!)nmiP3r+0h$(DywW6{%J8D)ak4BsT
z-Kpz#RDLm(sbZ(BOwfKi`sNSENye*fR>oDXE%$^?du6y%G`g!2G!`CA1r{LnDxsVKFqaveE%iK~uPW8OP5oQOQ=V;w
zFn|5sfe%z3D(=>J0{dzrPqjifmnAoA24R;-+)uW`aIl7RSc9fVpMSjy(!HY^^=m=2
zpQ=8y(2!;6?rK(TcI8?6esl`omiDsz%H4(kY7r9gPXOxx9_uYd^O*7M3R6X6P`i{k~Cp`Og`_J5uJ@A
z-z=a%OTze=o3Gf7*quy{#?Vf`+rNYmDWuZ|-68_`ntp)J=Y|k=C+*rI`q^GMjr9!D
zpKMk;{yHCC!887mdaBI5IzY>VZm`DNC%i=UNIlBvZ2sFL?=9$n8VQ1J`)tP+uV~lF
zvDQ2OhXq`HPJX7GrJFNOlk)g*!odvotqjYhk|cWNd(E2aN_A01u!P_Vgvcc|rOBm3
zFfX+1WYH{nxd!5h44~)9OW58@`Z#q3i(?AksR!k_KG5pV!nz|qO8%WsnAw$8@(tI|
z@}ZLs4?M^uN*48nbVS$S2AS#CBx$-1l8FsVkcTNqU0<$oV+0a-6B%6Qs`pZ3Rtj@!
z$co5v>=ER>dW%k8=)ftjXnqL9zJr8{MoZ4hb0IH>fQUy!<-@&YV?nXI9Mca|8PL|N
zlhcHPvU#B*tQ4Wq>Kq5G!L(rO&;`H6dC!ki)_171AGI7
zKfu29H3n4!cnj~FbPS^;D)Umx!i6-+dnGc%8e6WFjGzvOGdpqg)6RNZsmbFF3+9<;G`eHDt
zIAnz$+DGx9!m^7~mz&q(x4eEKWL5&WU#8z-S~kbiwn}*Nn$wvLaE2KdX9K_a$jcAy
zpO_jo4Rg*tF46~zL^KkJ5dnL@)ah6A-b6|{v%WEFgmN~P>TIB6<6)rB-#S4ucyQ&=g5B3*E_9#Z(arW3Rt4v9$@b;eTxO!(@iS+$q
z-#KEKgOHJ@T{l}ftMD&*&PP+2Dg*#D9R7!EV#GOgQ>J2b=>
zIuVmC+RT=lDX@?MA(%Qvvt){1dStf@RNz
zKD4en_vrR;-$x*7pw^c5Z))N%WHVSsiOi(r)vV?$CczM9W#J+=;rqL)Y0@Cd$sqNUPWO{(D>5HC_jAFm-$(0Wp|)7Pb>j
zZ#_ZwHM<-A8BnP7zj8IFpCk9tWYwFJv9V3>pV~uv3
zUzQ|XT0X=Lsk%&QPv%7o3G{18iTj-AVLw6vc*#5wCtPUec2?A7hrrW2c}AM9W6(c^
z?#@qz2b$Yhsht_tM-Ewsbxw#aSwlh=700Fe7RPx6!t$Y{=aF;SS?qeqxw6Ep%#*|>
zK7^BY&dYXY|D9fv%XUQ8Wh!kZl*$je4?dSsiowK^@_$Gsofg-zw0zURZ5f_86Y_DT
z1$AV^0*%YRJNC?fPjY1-cY~vMQZE^`7Eyj@}6v=f85(`mHu`5KN{`%D`x#Qx=jn
z!uDe41wELX95L9@)jFS^=(?yk$;L2GQ8M6UBa9?u3b-G_PYPJLt3D4B>sBRw$$|#N
zQpadoO5&2m+>Itf_I*y`)ZG@)vxtCn1l8w(CFLrj3D?)w0!+V|o;7bCPv$qKGMkPZ
zm<~tzhqHwZ^LIX9BaRnG2eZAY1%c1r9UPHID<1JTTve5}HAoC9H_YUmECR*GpM?>`
z4G@>>*f;7hF#hnGB$;$YwQT8F&oS1b)zfh}!^hgA);l#`Eg!zO15ZpX!%1L_CvyJ(
z&1()|c5p>_T`I$eR&^SII%2eq5r0Q8who($um;E|p5x_MbvHEe;
zCK?8MNRKm#2w@zANnx#cT57u--}FT<_Z7RvV%!YzTP3#FRz^SeqZK#9-o0hW4c2;y
z*QEN4v-}Q^>=khXN!>cO&pdw)Euud=@skl^wkS5>?Dfi)dMFjmz&lw>^&;!!t5VjG
zrvF;H5cq#Hrjz(l{muoTNg+yc6`gqUNGE3U)SpNX`AY&+W1j8umm){OoHp}`V%+tS
zMrv7K9b$D^Ob}Ztx$WZAEp|}~Cf>DJgl(kHvr>Rf9C%<|h7c!2l;-tqcxIG+)4C6e
zf|Pt}O?rp8;eFkDI&sr2Nh7f@
zT2EwI@&*0%zUtAmne5lVk=ZlNKu`du^r-pGDP**h-Yfjh>_V}i;tB7K7>h-F?0079
z$_Wm2Py1)*;4vRRtp`XoSD`>uDV3
zVICT2pdPpfHJK%|wS)lON_!NjszRv^M`|6B>P^p=SAOBf;7L$F#2vdUk>vvC;_>6N
z9%eq;qmNkbUT;AWnf_Yd{N{=VkUjG@WGw5Gh6X<@PCFm6G41gDwTHHudct*4N~A
z{6A&v{jt`0ThBp4bk8ZTqjE0qkN_x0V%OvhN!Yqb)M}f~gDl0_`df>i#{cn&y#g$NW$fB>?$T8@-=+K5
zGB4fsg$m}`#nL@30QioVbx?Pk<&s;kcxo&vsPqq3!C3
zkZGy0itKBkB|=zA^mw<}8SS^GE|uUk%AKvmb0KM@
zgP-a$0JWaE<#RTwSw@3-6x#y&W)@buKHXJcmAOQfOsz#>C-g3Facm!_fSMth&0HFO
zJ$W>3(Xq8mkE3GSo?rk^foC4B)109*a(7)qqe6scG6=zVm|lanE68$XjGc34S}(j~
z4*z32(#?*pbEZ?yws9z3M5E1_-gcpHf52WTOI4^x!Y_MeifeC~`6eVuEg(R*xAI+;
z*!cv58o8&{2s%JD>;aq3v#n#DzOu9}INY(O9lrgr7Tj%Zh7zn!^N1HC85>o4B_
znh86bS!X$(Sr@7^4L3BQ-2F>BhWH|r#EqL#H7MOf?RcN72MggkE5)*<7iU^J{(`!t
z2s#w=pxtr31T7hCOA(6v3Cc|wL5i>W8koW0{gb)`$M5RlzQJ%0V-0o>l2QvAgIyWK}1PqTt~|jVcW7Mr&+a!Osewi&@188_W~@;bXHLwnBRT
zxUcj|rR!!MAyBReW=2^5iT7a2B5LYz8SHjZrW`WC?{5+RwG`>${l9e&9{0a>PxW+?
zR=LiHK=ap-FD3x(BO45GK5xLFDh>grjsSsfVB>iDBHu0V4#5;446n3-JZR
z`71r%x1)E3Y&v=o0fIy$ThP(
zSXfd?swVW$@Mxj5xqM`vB}a-SXd=t+Mbcs95Kxpq1?)oRdH$M`9VMt??n(#6gWV)#
z126)aNKHD}1Z`e>?MbmIkFD<%Y;y=?HkXW)4l*9X^)yW&;~Mez_;AQ
zkuaek)`Jr}@V@5M$b0epEXap)A)0Xh03m&-g!7^uRR3?xO;mT{ATInKc6x;do_4=D%#eSW?wTen`=<-S&i!Uo
z5BvbTPV@ycTo^C_pbESE_LjeI}kvIkw!%LQewC9RY>hFnI=9)
zT{j!AhJ;jW*MPw*bH$`Z1~$*|ZLs(YKM-!0)G8W-bIm9$)4JPCecohxE>k`LL}ZZ@!WPr2jXW}K6V_uqTZu0X7B!XHEdr2)#>+u~Ik=s^muvq)1ucxxut&s^y^l5IZu{
z;WL8q_kN!rC3&~D^l&zmsQ8fmu6KYPZ3o$MeZsCO90V8IcKZ?VxGDYpP6&2|r6`GK
zOw)OI4P00iyBXz;Cx10HPafzw^f(R3))RQ%9Afv~FLJ1g^!x{=7K(vHetEBJkh
zXBp0qZ%@LqPWb;UxJhx2tCL?YgfY`4z@`hky;~>)M|wxhq(H9e3ZDyQZX}ZtrWJwr
zeK>&2PSvL1*~psb@neFrJGr0(A>&dB`8`~TPhH0rLVnUt-qYbwbKOMO-Fr5>j<|0j
zah~{3HSuCY`@Q${#Wi=eT-Iu7X_H!kXITPMFieI
z;f99--ZKRt9W|BeA166F=Yf&g{e>0Z6#edyXdh)_&?7FqWuNNVOnJS_q<7IVRw(ZG
ziJFKGX&1Zc_YMuty4(C?3S1!73L#i^#t0o(m7h}U;|5w{`$Ta}vnFI$Bx1Rs}omxNIVrrulu<|2Gd
z{~mTd26~)VG#s<`jaR^NoxU#jv;FTKBU_^7rAsnn&N4z6NoYR)73v~UT!v}dnbqp7
zF;E%tbOY&G$U`g8)wDzW8R?T|cVnLn<-zt2mQ=sQJR6zwaP$d{$K|2RO7+hm5HM{-
z0LE)uyn-j{P9AE&Q|pNl>zY(M$gVuOZ_-TlI>-h9@&_Yzys0i3cl6Jo7ItM9V_k}W
zX4bw)gc(K9oh3>`pg%o$6sQmoMW-W4CV%cEk<7eb|3vO!N^{b4OBp1>#hN*MdM*7~
zF^5FP)kex-EQ~>E?cu4WmBW-u&8s%<2CL~kmqZo8aG`nu#jAYqfQQy$x7WWh9UP`G
zGx;wp52AV?0R0!K1qlqO3-NOD*WH{bt-&n3IV*1(S~nDbG?cX9dUz+@fabu>pSG7)5DX;*~R4p
zFADqtfol2!-M1PvDGN}-GOq2HPySxTZr?WHI5aVJ|2Eg
z_s?t%HkvsO`nPimft$Re)uS1Zd~cGeAc;ckP=X33YQ_b81fC7kLVXxmQY|dNilLxF
zu!?pUzTLLn(_IBKR*0YXY?Rw1H8~YS6`lK?6q)=2rGfiJ{w{0Pdu)ANsd1uBp#Wtg
zw0wrriskfz-M9T}#C51@*roS}z0VGw$pOEToT2dpHyBaaT(7sfREN+Zfo(KY{gaJ`
z{F9UXgTc!b)KMSB;zFsXA`{F;TI+#u-xMB_Y3^>{`Z&E<6J686)6VI;re#XhAVth8
z+eWDOXtviuyf)3UD<`~j_aYoxLyY(Py;R>Y*IQ=?jT@0fJwhD9igYYd9vV=68bmSQ-Jnk`)oP?W3QECP$JJxWLN`&hDTxy
z06$G=V>)cZxq){JyM<8}UgPs>LXgs?6Y$>P*i?_}buzQuvGEEinIvm$FYQ0Q-6#f&
zmmkcW>{7{X^hI#B=_w41a$8m1ymqSy^_CJf8)D_^ek}~wSDw>prn5;A6A9f-&wT#G
zEUvW~T%D_@^QX-N$jo1Cfbz&jX$f{wqoDz~D`be)J6@VWCMt>f3Oi7Xc-i#ici1k
zBa{jAz-c&WBQiF)sVBd9y>2o6@gMkuD5+XBfNeGDank)M!{c{dCT7hw(chW*M+Czq
zD69}%`Z)w&6H4A=FPmObNqpqeVC-%AYA;)dE5&h}_vs;h^ImpCmw(?7Lnvy68=)MK
z>S_~sbsYzroULF6dkVD%6_~IMcex|*ZZBKx4vUFpoe{K7e^)jzAk<3XH&SqG{M%dQ
zDfDZprODQwxX+F;(ht9wq2#X0Q7*jXy@vgZvc|U-5`_!?OY)g5VGt?Ffm%Ur*2ns%
z^cJediUL#naPPZ@lT;LcelMSCLf>q{K#p3briy5at=}(~m(MG*+U3l@qv=U|ydXp9
zERh1NjbnSZMuiPOV5%sF9GmFQb_HEz!8ud@&nUr`(6(*mLrihzQf)YdYfS=
z33*E^Rrp@A>j9*boTox}7b+D>xi^b-+mGrZcK4(T&V;jug!lt=>MifieRooc7G(dB
zQG;a+q>VN-sjxq`z@UV%QE+zFcP8;hiy`Zy%y9w!pyaG;jROgKD@bO=Tr1dir@mXb
zGvlACX@wd944{t`hS-g-YnHSfLYs|Gj`X42ugfLb>4N&hk{EA{*G9!shN
zRf}SWW|K{ZzYfl>G)dB1r8s>mxMnb51}^RguuAw;Q(^WOj&rhH9;Uf^e<;HbAfT|A
zK9)s=YYR_)68WWDHP(m6
zh{^lGHpeK-GIfUO98ZaS
zWOi6H0i0t+eqMC=56(evg5EXGlF>WENkAlwF6!9+Fmz9qw|d||5);RI%-?n4{YS@K
zM&{iv;e9&h-@?^`Iv#UZFAa9iAA}#?SWvy3#*EA?w>a$Rhogii*UOR3>`R1$;X4{P
zzf8>LBn>o)_uRBMUrf!}j?yd-$rNW)8O1ZRxPz*IZi;tA_{3YQ6T9`TL`H1gO8*j;
zC-S15U}lP&#&s%k)kl@T`@uyNT-rF|W()Ia5jlR`>x(dxEpasp
z=trhFFOx>%pTEj{jqR#EvEUX|G*5p^FIwPNGj_FEZpwZ12kPSdaldu%8-?4wqOOoj
zmBSEvXx`aVXU6jk7M(fU!*2yuZ=D)tXw^dW83x9uJ0J?8NqS=V|G|yg}+z-RU>zPo2Av2hB(}v*K9X^g&WSn+$
z!H5kWVNbSn*&;RCSe}`xsLz;~tDUV=gXBt{#nf53{8L64mG57qdFX~!L}EwUs4wwz
z^TUaU)l~RpvClbaFvs5(d<_P>A>^9VzRqQsQo!VE^~houdhL3{cjiU@gqh7ahjCnLeO=Ate-oGecgYzcv+Dw3
z`-=!fg%>3ock$#p6IPNsER`wCLPV84dTC|hxQIxcUfs5xTVgoE46-UM1bRBA~Bk-y`_O33uqA0S9#X#`{^*
z|4@-hQ~5A@(>E3WnfCic@fxSk2blFmp|7p%G$V;}X9T=H-K^Vt>@4sjl#ogY^K94D
z71%(bNtcLE#9Ql4QMP3xD9wzriU}IdHU${K|KC!xQC9xUGV^Z*Rw=5HP@_f>L@7c9
z2vYeSfr#4U$nr8Pl*_25?(a7Eaz$V+L6P#qf_?ks&pcz7L?QYD%}MHW3k$~Q+Azsp
zPhS8B7f4m1cnUeoL2XE~y)k)Kw7Q}oZxgb(FJEHlQ(bbj*Qi-L0s)k=2aio0)vN^k+is+U^?<+C)eZJ~nMEkqB?N^m)Wat0j8Z*NxZ7t+MM
zdSA4n(&sD*%EU5WQ*VOaL~N!VESB`15Ylf@EZXt%zm>A}&{zM!G$bGQRFu-UHkR*d
z3p?3U&2$Cy?`-9^l^PNf$i4y7=?eHsk2CYMDdq3uI{ylltIMhO)~?O?-V)y^=AEBB
zJ_Hl;%eOV3pH&yY-A?%&EKbG73H1aH2~>2Oo-U%`&*wj$)$ZR`6`&CcOk$Td0^p5n
zgva-3`?6rS!7Tdl@Ob6I|CGd!F1CpwEgd(|NIJj4ChPe6jq&m~Ftr!`VBP
ztTKTH{F3ioT^$An)OjIPl%LPc?am$q?8DI*PgIr|CEm_5@@?8$=3Y~&L^f!Lwh~+!
z8;hGC)UJ)M^C%Tsjx=58e&LWRD5A2rlRCO+b7#t&2L6WR@wE=@9;9NcqB(I>ZCJw$0
ztr45ULfJqe;Msf|GeNI&Ki=8ox=eD^mYrJp^s|mfX{^0*v!}t{ZT!^SC%~=!xjN{l
ztMoBvDKY^51P|Mf=~6JpJAItyUV?99WBLY0lj@%L7b
zu@oH`od|{}EzC6d*tVPZzZsfWYXPVaUH_mB*i_n1!o_ohyBA1JEu%5`V4;)L-^I|k
z1MTc`us&y6w#J2HZ%AP8iPES*NDg9sy{`NF2v=EVs#?(KK9*9oK1P#tc!blZ7|gDK
zRz{p~wmh>P=RU**+9W(cYm^HPhB{rWgE8>Jo$<5k2n;ut<}!jY(qx+UOiV01C{Bjb
z_qMSU1Pe<)fkr7?QRtw7GF{AKXfTUyR8kV3^Bz7|H97s+AZ%Ry?Tw&kk_Wk}(;)H4M
zM8~uAvmiaX$N91xcY6k%;t$1(O(@lvEY!1P)$DbPO@s1$dTCVX78K10NhN%v*Mr2k
z`Mk$uv0lVjy@phU*f|CJ5cB(qUqXNUhZ=!jMOpJ_HZCs
z$lCr#bzwBKO>bE9keB7o<#ij3?*(}@?rg}CvFV~UtWh*!kc1*OcQ+5_AJ`B!l&-wy
zwdT<;m8#vTQ>*rS+Zp)hy|P0Hh9ibX+Hi{-RliXf`o>3->;vuWae8YK4pdc@IV2?^
zHpc{l{Oh_<1JgeQdUV2ix4bEIv3F)_CbRr
zuu6e{Yx(R}7G~<2$=UVs9Cb>ookdfoV(D$KR6o0QR8+)O68h&n0JJSNR{3%Z4vSDc
zTB5K6KW!P4Ov$s1Jwa2HL4|VECA_T9URc?%@K&@&Cg0j|_MqX<7J%(>(KC#hJm}fH
zvg)z@Y^;vVoTz$Kw=WgfbVH$RP0>^AVWcef&DWv}^b#6zT5V~Nxfg3tuZuy-&gi;*
zR5v}qu^t|3;ESx%D2lyuuIp*M>To3QbiwYB{;q7Q?%n{Pqk8R?Ni#G-{uLz+szyDp
z!-1kkftOOR^69YVuGmvFnF2nJ(iCmdH*A8FbWz>Xb|76gVtADDiX2c}=IzTOpmEc%F+q`2o5(ZFSEPW{zbU;-rvf*J|w
zUXn>?y9m=FW^y$h!O(!z71)v
zugADwXY9eNv5b5S)Eg)azImA+z8P)`NbShX&s}7u$s+Xh{hn|4pvU;M>$LT={;>#Z
zeZH*d%&O9W=Y3f6;Zs4!>e=RYY$?t*=id04s&6QuuyV=p5Nfj_86+s<^+rgwZbqZonMRnYh{)*|q%cMvSLn_?B4UxXR`I#9$7|SHDyV
zi#$;+qt9B~oet62L2>0?hEh_SVa)cYF5#L;56DqrFJ>HvfJ#d%enfkrlP^BKbUMsc
zjboXuMmpnhF6IpkNI(f_z2kUv6Fvc89i6Bg4UeXQ>8WbhHz3DN=o&V^)BDwA?O`)q
z?r-Anus)q3i~0u~HH2?B=tU239I$zo!&h*XNcdu6xkY_R2kn-`1}&YFX8L2Z>MT4D
zhPyw}c3fqIg;CX^0JB~RtFD;^3)q5+Z&hFl)hYC*WYod~l6_GxVrWQQxN?z{WP&aP
zV0Mr1Dg_OI4!}5IaN?io6!8cf_~=FC$%Q*os5~_R%J5qs`Yr$IyMasunzmw97w?e*
zp;5CNAwlU)rI+>ftNNoLeW++@l$5pW&~LsgqglFzriRyAPf>l~Xt-!?3u&$n>+P4L
zy<{Br%5T!Fx2mHBR#dubAmdY;JyH}YBkg5G
zVYW}Lz6;%eUGMA5kRd?n}S=W^09iFc`d;x
zEBZl#>ov0Xyf0W^>OW>;CZO5s&8nsK#hmf`cl~oVtpDqfm&8H52=p=}aQvk#K6i)Z;jczquP@hHhFQBXpvjs;i^=)>
zNeB^TYQI^a-1AM5Z5
zNYg`v;=cDSoxPovtQ^|+dSr6OxCfGcbK9t}NRjF3V{0Se*8Nv>-5N9w7dt`ABJ$P6
zGjl|L(2~rXdGHNEgj@!BryQ+<4fLdL#i0*>b>6fx7`qjn?+E6jj%)MmC!`E?qaf!llx@M}T3Z(UCGgsqOg^Wnblb-s
zJsEmrY9G8qpc*`#oD5rzsvJVXZki)QkDg!IO(m;BFIV=S
z9(csXxJ7!|=SN%!bJeJGW?aep@$!Uv@6(a-g@#&iPVmu2y%aYXTBEnLSNMBVB8UAbHO_1&`wB4+zx`{}d^Z_3CH
z35tD>ze`GybHZ0g9RS;elpM@+K;%(w#pm$G@Uu=ge^RJ%BH!Mwy3060#v3F)U=5R$
zS1_?UL4chtF8<(WE$X3NIP_>S^BAxUwHRuUfrI?{n&NfDr5DbG0GGjSOyFb%5L=yA
z+T!a|ncA6ozk!=`M%A6w
zGTD9f8Y8}+J7MJaw~DQN-}eK`pV@up?yH>gi-Iz?seq4V{WzW7leYfe5sDgrl+<&!
z#@iZVS2?ZT81$)JPd>!e$gf)j&QIIVLaXdP>O?9vX}Ft>ua>vn<$cy{Z@lg^?%u`H
zVXG%jH?Yy|uB+bdwb$23qh$S0`t{@Ra9diHz;6$dN<#I;zr=pODwLcs%XvDCJPwGm
z(1a*iw5=5~_H
z-nwf3?xxM2;2vc1PH*_lj?36Yp?0(Qs0>4|hji~~z=bW2@i$&3mlQh`)@2)X#QEfP
z$RD-o@Xw*rjg^+etg&?oY*3w&nY0(kJetGDYM6m6o}(&JS)mBM#2bNFll8}Jj@mK6D-}Aooh%u~-QD74*YZf!Kt?*;yG!j4TP%Iw
zq;f`M!TCr0xD=~D#C(qazdf*OG2vkKmNqsdFplq9siubFh)bTTTHKU<_JJ}nmiR`_
zGVYvM=n%vzs(wMS^m}~9xm{fgUEj8wryX%YDB$}3`A6qTdBq3^1RXqF($06;=`mlM
zTNw0GyGPcG<)*iX>*o+l1fp+qkuK?CeJ;Co8laPY(
z!`F65Bl#HopZlJ&;JF&o@PAczmS0h|ZNo>o5D@{TC6$l{=}tjV3F+?c7zSi$6cG@R
zk`C$a8U_YYLJ$~Y=7vRt4&h#LJjL!n<&kk$8a
z5Oi|vrPNw{Y`nr1IH>ha22OK)v6f86n7Cx@cbZ)1b(zkkH-sVm`u_NrT)6vbMVocE
z?F6(Qp+)t@-m;Lh{Ze2(r1z>@w32JTMSiLyUFumQTkrrc{HK;nDfbG1qHBpCUu)Z!
z3!$jWnTxhB#^I^lyqu`A#oOS5uJV25-QC$C+rCyV&9!!3oR4S<%Idg>xs<5zRM2U(
zi<4pDdRR7E$#QFF*V179i_91^rJ~PBA^kf~)o_>4sNSvzchqAdVIupH7HLS=fctTZ
zP5PL$q{REXE!5=#nI8WMRzR&$R&cpr%SdNu!$!IJU
z)zE-xz;WJZM5)%GhOPZJy|jJ;l8pKK
z=)jeNNG`yeqNC;`%bUG%BSaNwzf{=l^?N5#a8oAeOj?|9PzX9`YYXE#VdeVP>eLtB
zFrSo}RkTrZ_>RMok28G}Wl8vKCS_sk7N-f%hLuAp+sOCRRls_t%z#tgwSZa!-X2R&
zG@^8uQtn|*zg)UxL%%rh>Z+G|28Q+dI6W0}fnYtOp`NmS-Ben|997wT?YCcE_4Q^t
zRluwR$Uwtu+)~o>-`J-n6t{lC7l!Tq4jed?kK|0>!Th|qs?E~i%l*ds2agKmRNcn(
z#gjBV9yPJ>%3!`xr?Kw6KTY;E`2|FkY`_kcofB{(+Saw)oxda3f_jsmh^!oh83h^R
zxdFec7hs(FLYGTEP|`tydc
zKKT<>rt=+Xw!7A=y>W;Ex*URt!8vh{?|l3?Gvl5Vr5zvrd;0oUzt4EpDk(?!y{80l
z?J-RllF0B9rOM5i(B?sANw8?uOh58XU*xktjDF4vvwX(Tq|wNt6Z%mh@58xArJA{lC!wL6?sV%y3*?~S60IA2K`z089m<~Mkc4Ug!UW#U{
zpPwUU{qjp|GFKJ(>}Q96xE^uon|MZaQ0nR)ObRvd5&bvF)F-L;&guJ)(TJU4WT!Yq
z6k)Xr@Z|T|E=AsJN>tT+MiKrmDnAAIL$2v^luB4o>8W
zwDW$DlFb3cukJWLFbv;uQ}+`{%$302TY&GrkZGD
zq4VZOHb+1LO7GIXE~eE_@&;2}&anz)!~%?98UhVOsWXn;_>&B>T1IE%_?I~h`H~vu
zd?FzS_cTu9<*S7}{t1&9eY!!8UMeYc?nIpUdky_){`&-%VdJTxj!>4*I;lI`3u8
zG5)M?!m{H$zUdDB-rDb29Ni8$Y~14P7XM*s>LPogBt#~`c>XYd@Q#BLaE+u7o9+&a
zwXo$7@0)?AB#X6PNQf-fgVIu8Px#yt3$Huxq@n*mUA6m@*}_%LzU_H5k&%DvHQ9?r
zAN%4o-({4Za=@k9&xZ12q3IZOaihgDvKBACujbG?z_}JaQi)2leN4#~mMG~S@M&ZN
zr-2EeK^>^@EB{nCyF1K;bm)GGN1Xw}e?5CnkS0)Qx7)loBP1y?{JkI&w$hn5I&ZX9
zm67xgGX_zknk44R_L!;vF&M61
zId2|y){56Xk|ucyJ+8QGonv_wL;eGk%kc~(2YR=?xG2H&Ke310(2HY~`*%L@9XY~x
zg|d2#Rffe{6q`%2B$IzzR3ayRgIUOuj{RY>kHb@V=_Q)&macYKhWMH(X@F1r&7dVsFYJt>OfKD!Gi;uckX^rdqv;0A-2yY5KNdfvz7o^`2N
zw|cf1fI`L%YzhgbSD<=&fUDJUPYc3)1@!>#ZD6X&a3tw7$k9bXxTj{#|6FXj$lOBD+c!Hb?
zFXm}%%74USvx)Lb`J%{S)9+q2&TUaoLk{|bO^S5>NkQ_?i(wd)8;ND153@505tI^2
zCySe~KuaI^7~PGY^_M0q9($otm4-FnaU5*k2Z+DWt@Td8(#=_GTG~Zf8e{sf7DU&y
zXgBvn@}B-2WN-b(@U-iyTVF=%b_1%hX43+!a4n}!)nPKNJ4MxvX5xpnH9pfZ`qc;O
z)4tYTDaNQQ|Fb!^r24wR?aE1~%@yN`G?0DH^+BFLyNqzhmENuQt;RwCYK|+LHoj?8
zqwFcKg6l5%KbvyLp{aE25l#Wag!z)2O)-&;^z(Zd26Gt|FB?eEY#=CqPIGo?2#}Iy
zJitODE1m0OcR0#4G9oB)zBQ$Q_~DgJ%k-Qj^M5L83B57WlI?@e
zZTMCkizl#}nYpwqC)kr*pn%VbIx#~Q)mCUj=lNg5pj1mk_ObmC9@odz+bO@d{bDPL
zqOww}0qljzD}(1lDo>O%pW(e;LF}e;c5DLhiuA-9?PS}Ri!m0)2n{gDOoA|2xB7jj
zc-JPdveFzZ_|I~KDZ7_L!(Gqg8JI={MU^1o0wjKaWGIUOFJ*;x<(v>}MQJU1pPt@b
z!}lQr?8mN1Ys%j2v|Z_Z!ZdO#q$ao|&}lQ%V5+n7)j9WE@Mn@W6&KE-JMk|jOeQCo
zeL|lXotdQ47*MXp5ySW;=6m3W?OYMQ^P=`dpUD)7dDtqqWgeaL5`!JuKYT>0_5~jG
zN5;KosBD9*H$x;k#_P2{4)enO)G0d9-`Pz)ZPVW>g;SU;PfIcNRc2C-vBF;B%(dD1RZ`{uI%=L~p5L&7u8gpV1&yqR2_+pv8nc6Pc9##EHVVewHwK5Jlq*
z3syG%A}fKM2z(lZN9lv{@u1SC#6K?hTwpc_8}`R1C{0T+UZSRU#jVp%!W~ueKX$CHS;@NZ);gz38PZU-)LU&Sg+i3Gryz#7G;6w
zv;Jnnp32-0RRLOA^`JT~c#6>GK&!4KoMw9a-&}D4*_BFD2+_?QY3|MCZE-LbZ=iYt
z8jw;+qE;uR&0u7;WEo>|ut_Jy{ez?n=1YuwqunVe006P9xF{E5l-#xzit;KSq(y!j6(L*&X(nJ$St4Fd;t{uE3(e1%
z5o~r&_f;WooN0_*)3nsqdA1WWDTOTUPpXV4EDQT>ySL81yj6Ax@nHnD1X~0+jh06
zegm7dUpyEs3(NlYkJo~je5HB^o!CbWL9ox+Vtde0M`kjb)EX5Qed}@gxA!)D_Q3}#
zSq9*{e&gTfzR9>xH~WAlw(Pq0ZY~S){)NL}E6MimxsQo=T=aF<*FLsUts&*}efY%|
z4x{ti@j1m8JkDjm?DLDhRFbClqe9HJMJc36Q~2l8;~Zd^%q?~g)H$)oPH1<7BZXRzb7bB2ah2M?isCI)}LMM;f~H
zq$3rULEIFxaI56GQCj^ALTkK*tzs;;o|F9<^-nS-&BAQYsF?Q-Rz|esm|)hoX&ZQaW>XfvmosWY%I{AS@ESu``n{hVZS^?oK_>L7
zTA21Utn!1vqP%353U5kJ9|e@6PJmu7hfOs(E>a%MF(i~P0b7S1H@H->@3XiMC()7i
zuT(k*p%+sRcAj+ow;BS#q2YyO>K)C>b6q{}0DN*?e&>@&V^nrj<
zf2!Lg$h*w}_uXt--R2P8T;xtu^^@0Y4Dt*1n6y~g9hK#MK0fRnPur|O?&+dYdV2g-)Nq@*oyEJBJb
z<@D&l-4P~uM(85D<~_rAX?HGEUpSs!s)6#4xCOMi>I3uj0SPVgI-?$`xWVeq>lCH)
zG;8VXyhOq#*y%DXMNe4O>{(KxblbFx5NiZl+)(CbnYvbZ%F{%QGnQuYg%aCV!lbo8z;
z*y`_bd_`vL;Tuv2@|8A($%H1r%4|?VK1xWz6o%w|?z{1;e#m%Jt=A^>Q!lNHQUJj7
zPEh4j1;dJIJb+9AH}_08H$cgPoejhpxy~oOe#jl{4?$ng6T(CsKR_6e0T$EObw$qK
zBHUodgFiAPnk#FOM28in(E
zy(Q-GPU>paxS6f8Z1#)H_J!Sa8crxWI)3$yy!IVwAc0D=C_9bq*}5~ar{4HhHk5+_
zwJR1-V!bGrk%R|md+uv!Cs#noGoC3w44g`0d){DO4VmzJV12V)+tewEOUlD8ztIdv
z^vfe0xbm;Xs_*$$lm5!xab66W23`fy6zP4z!)%StS+q)<|Kk}76hdd&Rj9)bG
z3!$Vy{eEeDg8zD@HX=Jem`_F$5WgtXhM}zMc-0ml2Eft(7%cO>Uly`^m4-e>XoZ!j
zW%-@`(y$R8W=Cpz?5{;%e}EwVu?_?(;T17fl!WFQ=BX1NT%E3j9RlSY}Wu|(d=YfQTn*XT{WXkK*lM*Jo8ant>{q*
zPz~9pq&1ZcIaP}}OJw#ui(<>rH$hiAe@pOYp7&W5&ho9OF_?-kBSS0nWgT+CD%yZm
zcIOWg&w;KWmD!Sw4>wclU{V7P3O`-JuKx`WHK{Wy4ftT;9+%6gUDR-^aF6Ok65rc>^c>UAaOIIKV;Oo|CbFP0MH)Kwr--*i3tX~
zZR5`qVW;=LPgNB9o_IfizM|RhrxhpnJsU(vBfLD^w&|G`?Yom5%jU*7@aEF|D2ni6
z!bPW?Vi8#Z_GoFH(5|uQie_~NvCAE*;E0SCaWeb`gKK)rHA#IsnWsXA1!fhTIqxHW;hmjn7GaUGWMR^M+4jDFgbG9;XrYD7XLdE0qC)?biaaZ}r{bj*a)1vH}hR)uWvh
z6ZXH{V0#_N&Y%{jMHm!CU4*_?tT7qs(Vh#sg%4_x=z5JSFhFd{V>;H}vlGBYi90TCmT~pxNT~;6
zdMSLOSAv~GzU$)1g>NrYG+MoOd4Jbjy1vC(pUR-;@g}cTj(F}@OqdoDF
z;nJk~^VjuIT#LHp=#FfI`Z>aEC2rL`gn7_;
zHA%-W`|n14Mzm<}e`J2|_EABdP`*L844yXM7;!O7jE?=Ti_o8>5uz>NjRJaw4He9}
zfig)4C|oMLv;KJ`4FPlw%E=W$@8JyZ5Vx3M_Mmb`?!66sQrANO{I*;u1xfBrs@Oq~
zli$y6-zu>HIR->`rj*CYK{`V7M%r11QX)=xY*{!UWSjA}Z?mGe>-}zY2jr?7F~=7B
zYW`xVxC_|OMj
z@!+E@@dWv!fpP**$abHvjM;TJqJ_*jxP~p>I}WUqS#%2bEoiqnP3O8`
zY_`MkYuQOh%qd8WNVu&{QNw8`VfiLhn;&cI>kSJrI
z9ap>>G-Qx{PEKt(yuee7L{S?@UifH1W3
zK8?GXu2y$jSn4j(b6==A%rf`9361Lx$){#BeYvyAce90^Qp9{AHSh~427V#4`MJ|@
zHA*MJlWFFhs@f=rAf{@=Qg~aXojDXWYCRz>+Y;Fx1zL*EVb;%K;Wz`b*>v=oAynK;
zYYGwnG-Dr&;*Wok5jY_bd}ja!0E~2?bt-ln@(N4Q21c$XHW3^c4m#L^W?*2a1a|v>
z<&Q
ZTiIeuWA%cqyjbkHua(pls}wB4{vV~@%Vhun

diff --git a/bip-0301/witness-vs-critical.png b/bip-0301/witness-vs-critical.png
deleted file mode 100644
index 79c84b1fc5ddd95f0c574951e91f50ba7efb925b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 268309
zcmce-byOU|_a{0)2nia31t-DX-9iZN?hxD^24`>*+}#IvCkzh3-QC@tL5Jo0+qb*t
zytn_o_qI<}_dV5pZ+F$beX9ENx&22`UIGo702u%Pph-#oR0aSLxZY~T2l%&^l?d~s
zx5GyVNiAmp0R7*8DqJExIw1f+29WwGqUxS;vg)QgBT0yKVbD0?bxtOIPDYdWOBA!l
zNF$*Rx;Ex?SC^4Rd~0*yb+_gPC#IxmnfHNiil2cP$nEi}`7^(G|FGu3TlfiS(In2C
zDt@p|DyiU02%N~LcW>pZyk;aZ;J?dCgi@0q0?6LVKlJ~NgmJx=D;i3`kNaPj{LY?V
zZn7`KVt2xc{Ey0qA14l0a`CTSBA@<6?_cc>udS^`68AP?`(7y-hhDHdoz0ilh~7)R
z{3?-BR*v)c7g>cSGwEqN$LWfZ|JPkV@l*UyN!T(h2@{*FOWhHAwpyf+t-qF4u?!V_
zp!xWHB$$zyDx1cLOt#IHac4HUGD<#`-BF(JrMUok-Dcf^_1rn!M`sqNq;g5a-R1Pi
zdXpRdWZfN`M`y}MWi;t|qS3{Z6r*ZkTznYYcaZ7HDcfSL)FL>zpQ?Txc=(`E-fHI~
z{0q4en2=S&UB4C(Iko#QnWbwuMrAcl36DFCwwm~9M2^M|(xe!4ob*_q-u|qXn{$K)
zdl{sk_lXX?eaK|A_2nNbn^bMCDbhu9k9zSr%W%Cmt4d{M{^g}A=@gnU;c*ZM7uO+N%jnuzxv%Lg1>+4yQ1E^NpSS9p%%qilA-1VeB
zhW@tyL~$wjl21zjaFA6eRXCE?
zNZ~*hph`v*gZJZFZmh4u#Q8$1J3h1RMwB;$f?mCJVr9pqO^gK>lr1O2KJ6Z~!T$Vb
z@@ICpqg)S&1mIy#w1Ayy7|a=~A@tS$^$6F=z*+V8M``hOJ=%LsMa^xSEL#@Kt0m#R
zNCMC#uU#PY5Y1WO;wA$Q$+eDZMi-;$Z
z-P{588Fms?LVh7V(V6E0MwIfFKdnM}PWU@2ds9pe_ylni4;Af;oTu8>~K)t
zsEJyD
zCNkVkR?;x~-cj^f&b5nWa+ZaF3N17`&#v+UOo!c0??zJqLJR
z=1lIw`7W)^ZjV^1_2%tNy+zc$C9}FFUSEW2t?CWwNX}ARg(!A*6aG}8?(Eq`pn7^N
zYDLQ7iKB5?@7D6)pOt=OJrGHLs{fp*o9*R>|Oj})tQfx@yc*ANM
zFsHCcq+M9ZFg!e%Xv^+8d=hna9$I&GW8T3v0be4n7N?hmG|
z)K$CgdR%PVam-(|wS*+HgzD1{|DF=$D_yZn(NncAbe(UAGp^I?%5*|C;2s
z8MlO8LN5%L3UG`!6RO%e<
zh;jC?`XRjG#6qpboj;y^eq1d9=Um9q4Cc2M&HOr@$c@Q6c`%2=&itzy3w@-244J`I
zRPsZi?7ss<#Xp_hJ~1j1mP~)S7B1*j*(MChAV35Izxz*LPG5)fH
zmo#8!<=*{_Vc_-OyyL%4g^WB_czs_xrtrkut)T<4Tp!q)mY~FXbALkPRcN~0ia@*C
zMbzL`mNQorkTIIydP|^DBf4cXFhn}Ct=#H496
z=1(>??c<0nIQ8A-mvUSs7I(c6uAqyxU(toffcTR&bUV{4-CXFSkj9j0u0%NhG&}E0
zGDG8Tz~I?>DRdMOc2xvq@S0?zb+64V
zqw!lRNvbk+e!@geUY-qC%eMpX`4^?EN75)nzEj!LIo!UN%XzSzTa~6XARu||w6Np8
zx6W*FqKz8Puf*HwFmKh*<2t0iWR14rk$CyHXd~|k|$XSD3w
zSzNxGS|LszAGwY7dIjzT#`~Y!FqIR7`^0xfBe%I;$2|gt
z3^vHDg>lH6Zw`u8uQA_Q%17P5u!Z$+PKlwWgnqS+!9%unLnRIQL+HRjpo7p^(OJsp
z%x?i27pD-~-X|)619a!xc8u~eA^LjM1X#NbhUva%JYu@t5)0VIIXL;2LqmPXV@V|EEpctFC
zD9cruTka~#B%q1N6uMc0
zRk&S+-{Y`8P=4mPczX(;aauYCz)Y3D8=$Kpx=F^o-=LJ*mp)0`c^sDr@T+9Fmfqb(
z5ZXy=S=SrBVy@fLb;H$xcQfI5XC$K)R$#TX8ixW%2=fmiyD9k2y%!w!b8)XAoHmEz
zFp-Q-AlGSz8N32yz|Wp)0Lxf6NvS+a&soHe*LOa-ueD3no^wgeq;PS~S=^^GC8hP|
z%+&%q=agcKY4S03sPpfiCrN>+jtVH5(da>t3dRT>C>Qn`b_;i;gO}_<9;%!w=dg4OvPuJ`z!C	i-?%wD^)_l+fCZ27~Y7Xt?O)S{qMtTu$C+?R$ne|@0q^aDpEGyCr;T1P<%j#OfO(}ZNARcLy&PH>
z6r|vILSLrgiR5RkXeMju3?bLuv&miNO*Sy+xne_hJRQ#Nzn&1ikLC#a8Rgg>8w|
z%~oq&#<)ns5w2h@Nzs*Sw62qgNE5s|G#v+V_JdO&o~A&_i=y2DlXyY*dm
zvNBA`>f0l8dq@c6V-*(MhwJUR5xq}Zxrc>}?k{`9fQeq{x%lxMbbX(od%~rn{#0tA
zPCXo5;bhy+&Pq2SS!((gWLx#^R%&6`<{DiTer(0-smcB#u`D13tQ8^%lt0}yF=m1?
z@kwan*xsDB2z&*+BgSw~)7H|%#7rvfn*TS>Qg1>0nTa?ZuWGG{QEIHRjtKC~qAZ9Suc0J1e1oNVDW#
zYH|INLbP=k*eCJ&whSn}rIyvp2;;D!Djqhgb7oBzWtv*$cKdI3-YktHRxqfH6C9MM
zv~^K#?=zG)s~nZL+dOTV_QI&mZ|ZQ`l+K5Ql?;+3gOQz#sj7gjE0zZnpR27R&Zm5LfHa+Y5`srBTI5G$4Bw(^zyP
zvk>srbwAiSP0EjUxEXXjx4qyNsTb<$5E`yz?02vnZuNgL-CGSYp<}rVYm~pZsTL=hWs&Vk`57h*IyizrF?5k)4QKUs2
zQ%MACjDl5XX35X>_|7dRAPOD$KIWY98CQEFd&1<}==z2)Prz4TIPQWaQ+_rvv9tEk
zM%>uP0lYv>2qz
zubsuFG7LNJ)Q!5+r<}j1GkWCj8877jigz!neJwqrj7{!dt3RGr@Ey!K9F}f5reIvW
z-;kc+*?bBcU;})YN}s_4O;RJ6OVzPqobVJ(u8vOr94-r2p?}5SZe027<6tax*$BOk
z*JrKWdJJRH+J8x7@IMF47Wfo0g8P6o3k@c)bi2?q0u-*-DJjF5Y%I@(pIN*~Ma!%C
zeQvZJ<%koNDxpNTv{XjAc!DXDPR-BnXc^v&%;=Uj1$`&itV&`3ZpUN{(0N
zsSf+|sO+TPA>TmqcaK{pby7j$J?^0cz#)x){uG0Y?L56eLeRNQn?MG1sPz=uGpm2q
ze-#gW!5!6J*>gpNMAl2cie^K+g?T3D=m&k@5%E28>jfOv1PpYUjJ%MEx{8+Xx
zH!8PoUHu9Ewy#271>IJdgELA+ulkEzO8K#{Ykn$jKXP*Lf!5Se>s#=1*I+BvPH-n=w)IQpC
z?DMmlO?Qblmv~qadYnLG16Cz)(?Gq
z-y@cT*B*;$LJL2cEBH^T1$*Y$3hl
zek9*tpOL3jEk)k8lJDJfUMF!{FuExs0P+&!%IVE5@luV4)?tKxdK58#+OR-$gj)Sk
zqh(KmSuKMW`*~xbvVv$2a)I2w?aGN|;di*4eA^S-e1Hd|v0G7Tm!kggLR*31Z6{5Y
zsY%)B7`-7cWMM!tZtkwJ7CTL=sXk^j$|te%l-1*rhMAZzwZO=xu&C1b*e(zJ0r2a1
z0g|reW^m7BE|vo9N<;}QxH!zUgc@pHjXCej&uAoVmezj}nyC{I6k-#qGhH7n134ze
zP2SyJW16)^dXq4(t{A`cEt(;dk_bHn;KtMgtEahYFKw+evhI_pjrpzetD>Tm_^AUG
znrvOQOlOzAN+|<+OIn71YSPI!=%f!@9ZvS@($U}T>S#ChR5|xs4$5q8*Z#)=nKqD{
zQ`I=4aTVa(Ob;BRB3K#~Jh}agEivAuC#K1e5T_tr-VIL3s7RaDYYy0?J{q2~HWx<1zp&#fYP;Ncm;LP>lp2py4(D(1QxoarF_+Ws
z#+}-FcC5PNt;M+s45Km=L~U790sstk<^+F30Z?GO5_9CwM4s5D<4X<@y4W8pCOmL`
zEgL8ZTz8NV#07+{wrYi!X39I3y_yXkr5;(r0T!%6&>soRk{+)v9a+7_%Ko%@rP3hl
z7fe!(-l`?s5=C(Ea6Y1HXorIs?YB|!;0(w9SFr3bmY*&OcrtNIE|5MmG_61+h&0S`xyrw}rs%LwSnk|<84%oYJ
zAzu+@M(!fX$O&B%X2M`FadGjy!R#CH{c-1-3&Jh)zVda~v7E&D{7U9m%|>j1B8={G
zHfdKz?ccUB?qzfgcmpeCDrGZ?c>G%P40hai=VWo>@FCzHf3`gg_zHXJL;L*(NX*$HWva
zzKD+|;C~lzZ;1cp;8^pB6NqgEjEgne?z<*k@Ks#e3~Y7qJ@E
zzIAGZ1BhSjP1Y=1PGv%%mQ)YX`~fWdHz2odMt(F`CCepJvApiF(Dt%}wYKcan+`sL
zG#W!KeOaSIM-*p|Giard%H`SID@oBZkmxAyk<&*!h4`_f<)eCL2#8XEsP5ot>SZpI6g>F)JjV
zmyN3?C8%G3c8U}h0!~z@p+v~OG->%BlQP`){7(Xt8`=Bj0F{fatL6;}Q{}DM!B^f#
z%Y_0NsKGU_u(9v^4by{MR(iK0WLTgaYt`9H!_&>~bJd|eAZ6qtkbhj4F}CE)Y2=!J
z`IWE69NJ&CApuobYsOAjzZiw5e(Ms2y2j-Fyj{Dd2e(UB@H>G0IM-ZR;}l}*_!%jW
z=PjgWMETC|GP4|qRA0!4c?*rQYWrxlN)AN~Hy*SzfyVALHu^MP;A(?}dRjmWHxbMo
zMe30dV?WoI=+SYPcaxmVr0*54MptD#2TpE^4O1PevqsXlY?cZMMqV1Zv(5VA4f}Cm
zEj_AQ_1l1)Zm4bE!OidWhh?8V68{5iYCZ$uKcQfnUHB*H<34d{i8AiM3k&OsAe@=;w9ll&hi|Z91T+aL^Cea>ba?`E1sIQ
zl~=;x_T&juYSAi0er>GLMhuP6Qh;#)4?wgr`9jZ(n4y&ES^ciH`oe2mrOs3}Vny5I
zV5pi*me2Jrq!nCcbacv-WDD}@9T=DhipY>oiYW20=4KZSqxBtRKUr?F=EwKL+$$0f
z6#%7b>E;&Nu8l2<1RxFANPb^1>YD5u2Lz@VLo$`$qTH+E5|5i4%RsF%5+b
zJ>$*5Lz~8c#f`hs#CpBw6)*f+4-s<(lTxjQn1KpA)*3#)V-dWy7Wb`+jKk`vQ%!&h
zf!p(tPgx^E1t*1mUyy*;b!8l7+4{)fY+foyx+k&E^<4N4dRC8YLUYL_lu6KQcBw+<
zZrj?NR2NC(+U@{h8r^Q)25ENwg~vt2-GxA=AH(YH#iAjd<2KzTU3~e;2>0Fbx+6t)Lr4
zjzKzJ?_q8HROJGmCo2yf>d(#3M(A=<#mfiI;T|58sGX|1=#asw!}%V4SXIGGp$*z^
zNguc8^8y6i^MOx(W5|o3=W}Q3y>YY!Z(b>fy^TCtLhhA_un&-0PtINezY7C}@o8`p`exzu-j0X3IGUdH%
zN035r31*AJ$w#@7_c8ch&WE{zHN4*HcP~Eu@Z@2pig7m`#$G_u=Qgu&PP@)*iLbm2
z4*R>u-hfX(Gqr0kM;I+V9+!X}2I>sFu#3sXYyN%4>t*LxO22-LsBOJ{^|9`YCDSg*l6HpaDOSZFn~i>m{8eHHgsIiMpFit<1j?Iu(wf>XE6e}*5kQYg
z477s|il!#&@*Tt4x1a7#GumIeQ!84MWmnrgZr3_0^%h&Kw!=_(IaE@Wn*I~2*PqHT
zHp>Txxf5S%nv?spb#e6g`_(gBo`67Bb*@^~q(oaYTks%GDw(P%dF^YP;UfuXAUKEKI@DQamo;NwT8?c~>
zb6$3On#6I^PtEdoz0Hp-P__e@BuKi$=rX-(+S9f?a{AG_^a
zRi}`kYfBhNf{KNx73yuNpwF{See>tzv)i3@tGiFOPZ@)S=}HOJ3;AaJJIvKDrTvyL
zLfN(O3xNSmuMxcyQw2e-Ia5)0eOd%gUTZA0M|u6cPa%UMUsH$TlOx7Z7aO=M|Gpmh
z@#+z0>BbXx?9WW+V>12O^gu<8d>)gxuAmU9(!AI1UU2I&0b%j#D=x^$h0qSmdkluw
z6$+_50QV<*PWD8hj70V{5~oWn-s9laaW-#dw&_lFVtz+sW|WGy^k-nmUh*Y=4y!$t
zRk3Al*UmLEU^B5r!$RwLjiln*2sE5qubnEDyqn*Pk~3R=-QKJsT%VEx-YJ)BIPiL)
z<=~k9p{^%Yf0?3$>1$!BsN7_DjCboq@8ve_c9u8sdt#8JkQU#PA@L3phTTbFo*!Uc
zU~h8BTRl2jbS@wP;~mz%S`JnNLFwt`eFj5I3iU^~3(a1YhS5sH=H%`=o9h@dN%+-A
zY{z`+Orh(G_Unnx@!5&&AsKnDGA~9HOJ_R5)5=mDoox85h7Sp8;RW9i0kYC&bQGtq
zYP=p8J=bLO73WJ2m7k3z?&Ks5D_(7@v~R-3Kte+slbGY^^M?#Y&P>P&m#0kS#1(97&C0W^-XGOr~H6lPWEG>-<
z8}Ly|s<1vGI~lWU`{39L;nyJk-*jhyU!1C08}X)1VIc*zIR{J(-@wIbo5LPlH2@!z
zm1TK$Lgq=(qQ&0B{AX@r;$m89vAE_x`23+i3Fx1FI|++z6L+@3d^*A?)2}eH?qyiC%X`
z-avVWqcn;6Lu?qo-EJt(CTwddRZF8?h{L7TEnBUH@`ji(K~qbM*3>Vnkwo}zVY^-$
zDg;K`{R@y#l1G=7qU>Pfqz_!~Zfa}h>bwX;UcACRa*FikDK52?Qli
zJ3z*hvy;7H*VY=B`ZF{l%Y>la?DG7#_aD*l%t)A?Zp?_pKpVY1qLUB5SE!iKXGNz|
zZAdl1k{6K|IWZCESFK9jl_{f+r4!Bfn6$*PN!Q6(5zmor_$VNKynRY`ZthufVyZIo
zfu+xlYew2j5udimbLvICQ*sto+ORV%ZJnix`pDUY05^GRKiSphVSJ5NR0X7cd>l~t
z?HgT4?6hsk*Cm79lGMY`eHAYGKMhl&EsO^?@vi6=Dj<;)$%dx+R38_uk{}t6p6wUu
zjR+#2jN~#Z^DeKA4fb_X2vx8pMrT~t=8WgO%lulP`wys?qvl}-5q66qoR6Jtk+!C(
ze=!;P<~m5wCDQWf=^p@{3Hy7~fP)Bjm87i9n(d76*wUYaB}_eUu28mVJgEJc+(XMq
zi=`(<%gFc?=T3`zO!^aX0N?HJBOf)>w-d*Mwq6)QKM91%#{}rVy_1HhbrmKn#>P05
ziSH|ws@OQDp-t<7sG6_Fh)~!HpLQj8BH|<-^FY%mtE8h4ipWB_8GA{D#w~*mkR;G4
z+uU6Kml7l~DcC<&_&qrx(Qnmziw7k5G0e;YH{2Mk1`%$QmFk~3@ClnTzPQ>0zA3YQ
z6)8$OiQ}oWGL-hDLx{>M#AW6L$Hj4D3#RoabjZjQU~A*k?G~9#iwkD#(E5$ZkBubP
z0oCnKFc@qo(PWset_`vm97`8+t^=Z$KIMn>CDB?RS}D4xWDWU&s|r-gdjDnoWGCbl
z@JN5AyXsPzu9R6xA3UX}eXk>-l!QjcEl4Z(o6B=l@k?ylIIy&pR9-$z
z^{}m&r%~Lx%>MD0spu**onSCrK~aHxHi5N0+1q
zKc%472Viu&ak%}t=f#fD`g9b%HlncL4UU1jj>3#y>ea!H&C9QC9<4?!hYoQvveRuwgrk?<{_@N#Z}x*+XcEVu#XlS@|&48n(
z<_9l_g3l6s7`^s!8F*q-3?2j#dlkWR=#58`Btd)$(F}E;tpSNru@YPF00#+0IB7sZ
zoz!CsI%?97-YQxxIk~ZR{}PV{-UG6P!tbw&J6P!ac$SI05O?VObaby3TF1z1s(2d&~dH;yui@x@k
z=(*XMZ2+n;`;A&~NMR+-xJik&OES>GY~R-men6k^m+SHrxHhsf(rHmrZyq
zPG8Ue=uPbd{Ky`=^J>!X4whYsmh7Jut$U}YjK0QXq{25gwinhqu{(S0towZFN6Nf5
z86Hh8I1L@Q`YNeVk>FUvWdMx$uXHvcj-zP|C~KN5`byd|!ybhNX3;
z8eUsNCmJE&q#&Row<=fnEkuZ9dZkqgDV}#isNuuaV5cTp36L;?Ap6hCPH*IJs%w9{P)TNfc6Nrr)m`*09dcnT18_hyc-%A}1{<8K25^&|FduY2zDk{y2$m|z{
z;IQ+hLGlDtQm~WMX^)Mp-zk03_9P;srk5+uSyqnhyk_6lOSY08<+i{1V#_qF~_wf|Sj8AM=T4iI>
z==yhYEpyo$GE&h-B3~EmPcL5e=sK{vCrw8nWJ`gcwzqKKU?TU0$10#QFC*#r%C5E}
zDi!1&(;NEZ^fB_p%kuHpx}qo}<)AdqhaiJ{3ND$Rv+z9lf+DeT(vv4)TT`ZRgP=Kj
z0SY=q!NOU(gWLTTDcilf6L4AIm^3|plMRZR-b-ryn#P3H8O8jA4-(
zaMyH|<)yevOlsWMpoT&czoCi?9ea-Q)_={K=ZmP2?txttFRuWzcp#y<{AD<&rNUFf$XC$LbGM;0u|Ys799-^(4u
zI&JjTuXSDNe%!U|!Ig8E-)eJL?4EUGHA0YeJn4}YU!DI^bBRSFJ=youasAXyclE4I
zTMM3MKw1i~TU-U>Q=v(I4fcvlV)0OUw2tgZ4QhjG3cbQNL8MAtJ@KP0&MmRMsF(DY
zXla?jGOZDV`r5!;qL!JS#f!d3+n4xJBJHx{>gL|4J|abFrV0joM1w=_>;}t4*`BIr
zgD(x76E8t;E1_R>8Vq;(m%dW3B}mi_FB71ddIqscr_@-mfC>ibC6t%4E2$x6gL}x2
zQXnglat95(p9hZaoPodz>-bG#E^S_RtzJM^Yc2Z&)y(y!Y3slq&F3p(rJz}8F`hl3#P*10QAYB3OK
zTpHA;!4YtP;dn>M$gI5~16+Yd9n~3nFP}kO)1TBMzkdo!A*Usn{9v_*`(`qQF*9Wj
zt
zWTt)c;cT^~5AERi!d*a2thX;}%bH_#K$xD9Yqs-y#~Vgx=DQ(yYbh+=yS=?FCo4<9
zA7=l?1Af=n%Y8dZAP144q^3ST=AJdIIBfKuj%@vkHf!;Q;!PLISzm~oW3{a=yV$F8
z|HmXRZ}T4^dKG4o&lScO+p7D+Z`g0NWW-~vCpkdm^XkvgC@R5&H*4Ih8|ik#Zz_aS
zijh{kwmXDB{*!n9wgw2zxA;FO72S;&|Gxoz|7~9V|1Q`5|MRw@ITvMR
zW$?et^VosjNE1Hl=N<4{c%<`ARH+$S6g@*IR!dUE4g6rR%`CIJ
z8cEzU@9b=S@&Oi1<;4(9YZm#k8MW?t>E4=ZtE4}UryK+S0D@lkmIt*z@bl6ae~vJ=QY#JBCA
zpaSU**R?=}o4u*?gnfu~!|#@Wf6&IU+9)NxJgbVfNhoK*Leq8ALw>bhFRcc?U6sse
z$O|G$%T}#XPgRJS?lo-~=gY*mH^-gV?d(7KqvhLx%>|q2ls!mKfmZ6JY);%I#xd(d_y3*rGyWLs{w
z0hxA4#$U#VJ*&XdKdoTd?iTesk+
zD0VkvW0F_iIT%zP=q0NB>XWgj*KeS?EQ2e%mWqirum3LJeEg&-&$Jkot8rGZN#(JKe7uWcM3nyI|WW>ano7
zy|$dr$j?D`&jY<|9OeffLPWWG##avsZxsuVGcPL3JjLAHqELq4so)A315Jx41q1Es
z@8}@H#sz+{z?4Pia_f#8=EYmxvZ$tRBq5J)o*qoMuZ^78`9Zp8kRg*h8+3q(vc6Y=|uNxXwn8w%He+_+^MIXF=3!9T4^LRdhbDuYQ@hzhJlQaG(|Cn&a
zF&l@?u<7+1+g6De-zU%K`A(%QV(2|>dSw`;OeKuSCOOII^;Yq12V`f&cF(y?Yn00y
ze35ywBlpCB0;>VPb`J#epboF?Jw5`S<2TtxrT44nqP}%#G!|cY<~H84EJ3c7sX<5U
z3RiGDL1)(cuSh*6XlH_Cg2u_sYU{coAot!6f{2!pxRqs96k+145>MvCH$v5J4=kMc
zQYz6(lav5GciUb7f?9!@?K4R$y+=m_pXspyDnQX0+|4Zrxdj1jGHQ+|evrK!F0L{4
zUDbw}k@$*yY<)xk1hodulJgzV4ALEFG9tHzKO(~e=+GHR$}7l>mw*GOGxY?7a!
zZWIMR63kOgQ`H$w)SWAWV3tv@7QZ`o0;kctdxxiB7Nz2_276d=}b=Xs$
zPqfiZGeG5mio>D1e9cajKT^A6*A*Xu>|o~eKI{z1UN?iKP3K9ez3jaG1u0qRpgSK2
z0bVT;z5Y@L@0OeDsU+NFz@G(>sC|Xr7bo)r`#yFuxKbFc3VBJfJ}H-Cf51^4iEi2pD`&V3Yq~h^vy+X1}LI-azb>Hjj&_
zF2*S7b8y_MqQ5DzkvzBLP>d8
zA0UMy<%*c=m*g&NLF@8m^7?|$RWS8P*{L$HSR!<4xWir8mlFow^tF3I@BMA%wtJzw
z4`&-K{!`tp88q9{Ugk+2J@ih+`|Khvi=5wui2v8+WV(m<`_5bP4nC+`$5kV0=k{<}
z=2HtXve#dSzsJwpO$Xid+Zq+G(L#4tUpgl*dt^jO@WjE;Dgb~Woxc-=?>S&}E+nbU
z^ZDaNjnO;o{K;+{jn8m?z9?0&4~qe~1d7~&7WoAzHAVo{#Ea!uA)8~{50IrF@|b77
z?!p=BjB|Y$4f0Ii5>U%eHa0#m8`ubi<4WD%5&&2pQV!6x#N6+{`Xf=Hv>}lh#!_rbdX(l$!R$wy2k@J0*!sS!{MC|FhUZQS2w{QKmv!Q`y-amvF*8b{PF*LFI
z5y_y(^^-2i)_SJVk?_ADW)*gN69!!lUeW@Khrwu#N`grb_kKHestnIN$kFQ1%?p2#
z8~)jv?cUDxrNDbX7GBym$<_8qzOv`bb@J7ayA|Bt;~CqLom?#bltYA*F@0kyj7**q
z(DKXjT*h_@J(ChkRqp@1Tw}S;{mQ7m(w}GI4
z_|c1!VB2MO>kML8SM*`lGX&B`5TfnY^~Le*QFu7*&uGGwbs#PzI=1eT6OBbE
z%cSxgZO;s6V_l0FRLwRmNdUhdLyeGkES1;s&dz%+J1*Hk)|>kfA^)37LPIyGy!SQF
zJ3vZYI*L_tq=1rnjnyn6+FFsUlyd53xnBFx<7$0TO$zp<6f
zer)fP;gik_LUqx?(OZbfB3en5l+~NaQnrTKmof%wJ8*HESJ$gS={2j=W1bz8rQf%h
zY;AbY#&+7cKN|(CN;5+ucn86}s@e;rhE)AMpVxG=9nGdgo}()PAM6o3(uBq((%?H!
zXVxtKjCXSKqp$i9#p^JrPR?!A0{FaO^}X6XO+rz=pLs@I7VABwTC(6+CX0e2`50Vc
zey6e+FPwT;c&H>dC3$hXu8kbPe-&o^7O&8T@+gzD?yIZuBLyGb+#+PSs7r2}F4auuqiB~BoYJgK?Y`sl#nS$r;Ju!uXrd!&p9>3X_Wz{%Tp0EAR
z>k>6Xvz|S9Ea@d2TSZJsC|8x#JSvfamy}mPl#x>CSy--$CJ47(bcN;l`z&NHFEw>l
zeRsTk()ehBER>%6Ig-5U;^ZBd>aR1C=W`tGCUK|to`i-XUKD9tT14n$eH3`QG60HL
z+z=M5Aj*wLRGTHhd!8CNe-68#F8$xd(tw;gR$JB(d$AiVS@zy~j~r`;Mz?PSLJPtN
zGbGd)c@fbSbn_`lY}*O&
ztqPn_vY%MAulV04q)i3Z5135F2`O-
zCYYB%JLrv7G?QD`&{Y-+H;kS!YrSn=r0olYULC-T9Dy09x!+6jpk@nuD_R~jx>CRW
zB537Xhkbe%RdPjI93f!vUb@@n;*RTigI0zr*on`jNfl1h$*C4wMqBLLX>_EazGz7L
zp=G1PmHu882s$PT0Em^i-W*vlGBVnm8)so+y6zjM{8{g=jG_v`trX;Ig73s`)6^)k
zakn__wVG3^S5i}>#MQ*E4}IlZ7?jPHlVap|07@yCV_~6;I|d$NPbRi5!C|xJ(3l8-
z=wg((>!6x#mu_BKhY-ZnZamOg#2J_S--^^f`ve!E_C5yn&hirl;|P|0{3C
z)^C3qbjTXIwfe{-lNIqfq2rHGkM+Ju5xgHgWf{Y0T%5|3Vq76Wir)Uu%Dw${wa!aQ
z!oEV-Vj6iN1L5H*|G;R#Xf*`|jbfa7p}4H!8%sGj$qf$PlaX-qByoaCMO7~
zx!KPu4|pZTD5YFIOJNo)Sl-v-i;CYiDUCAI^u@&goI4@jv9T)p2C52D-I$DpfQn~o?HK7QE&WW
zm~C2ms#JeBxM0@VL>q&U$hoq)EHR)Yu(D1`dw`xwnCZ?tZPTwyT6{FZ7ylbl82tC#
zn+FwbalOH{9@p)2D>hDo?6Iv~DSY)?@BC98r(>egVRKg=r-7w@F5A
z59EKkhaTDwnCZ8B41Q0EOYM6j%@PgaT;3Q{O3SJu@L^srU9i(rrQniw{e8628Y|A#
z)wuz|@9n_2-d5Hxizs!k-R;BGs=;x56cjnRAAJS5LJS8S4lKI|31N?auRrCGEu+Rm
zM6}?5f+FT3AA&-Rc9CZk44;!sWeF16XIb>mXW+Vq|e#Y34T8L)8igvgu+AS?Vt
z*uN!)-MPVw(Nj^1n-o`3`WG7ydtwcX4|$@_pOf$~^>+R@e3o!<1mB5Z^`+Z@;%%!+
z#T~<)xs@aT2lAw@RT6Y!$7`l?%CfmSLy~vw)$R_n`H9?4+poQWF1I8`l3pZz;2CW#
z8nyq%+gk-i7PM=Z1vJojL*v@GyE`=Q?(SN+ySux)ySux)Yvb9J3lSb^gP*^(svzm$A4nP!%Yf%
zzRzg3@250>q)ujktB-43zp$@=Sl#;Qv~$}1p;ft6EfN!#DlE2kQfd!^Y*dVF+n~`H
zLpC8Uk*~Kr<}BHKX=OYF*qfVbjt*{4tb#_**_|x%Arw*vF26oJoz65DLy_{_Eb@Nj
zJWghj*kIK%TsQYF#@Auy&1T=;nxE``BW}U{7Ev;iwt8tXJgq?61^QXC^Mxe=8K!XJ
zYBF;5ggm}^p~AvbdtIjsKZoy8e5ff2=X;Dna%yT6*Oe6#YDdRL
z>rW-fl%*}NsKrlrkkc$SDCYxe5+oy6$pHXJ(z8?%+MzKcR2R6@gIoRmn_(W7Si4S<
z)KTsdQsty5t}upxnRn^vbh^Qv+3M9aAcuJkU}yX&7St8!&WsA+{!NLYcYRh7cAR5T
zbrGy?m+D>`3V2%S!Z1+-=oVNM5D@;1_L`ivJg^`Ni{4wekeq6*FHeG3C$7G_V6;+p
zerkw7<{{&z-pmW}3`Jq+x|G%g=!%bz^No&*CKVeVj;~3XlSqKPH&nnzNqbYL(sGC1
zN{AOqDGGT@c+_>*8Xl_%VR=fS`M6<4UYS
zP+*eL8hlP~X$=d-et84DCm}K=s3i!0LW>6b{n6LeKXN@>Zo6Axl%AftJHLdNJm=UO
z=mC}c@dL(8wavi7%bSX<&#%PAuY3BgcW-L7^y!E(d)kBNE;Uul2Na;LC{AvJ4(Rze
znky^nujOnU5}$`U>8A0W_Bvso&Bc>>y~?X$bUr$dVYH?x9vSm~j&S-R9wtsi#co6l
z&^0A9l?Ox&Q=1QO;m{kInsxE@yT`0&6C!WvOok|c%PJXv2SXef-Yu=Z1_I6_4XUZS
zX3Z+hkK1J5x*88#JK8WaGwx5GyHN#XG*sRxc!+rn2M=75;k{cZ<>(WI;E_I;6RNB$
zjQ3YCzMx^N5}^=$S~?1Rf};Eg2CU^7#9c2m7cl^t$rIB_&2|TM1GUovdjSNnLH)pT>VR0~koCICCx82S$IH{_RfMNqkz?g7qmfDmL99sBtzJlii2;
z$NkegD&}VNZE`t7$(aH=T(>OHT>DZm3}8Uw^&HR(1}*0b`fABgo}xc`ab!*As9{ox
zkV+`({X2t{#koNd6wt=STa0a|etKI?pzYgRYi11X({HgF3OQ4loGl~~(5Epih!n~t
zP$dqPOhkGIv!B*(w~FkuaBrAYl?#VO{!WBXCZPZWDE&UIGS$Gq034KJcoa#?NQ>?6
zA*D&X(>aX&0RXB~;hyZ{*LA6D;@YBGTU{fg#}RP7YhEYn7~7x1Au8Rw8O4=0W5gU&
zTMX?)^4nO;D@sxlQw91{K<(`BEHs>#_YxOT%i)CNkih|YDVf3f3%Hvr6QD$9?N$$!
zjz2V{=g*7H#=SuK(4;TVJ6G6VtRhh`%1(o*0&i+aA
zxw*)KC<=U^Ne0Ey0E2^$+2{7kDk?dfiGTuF-YIjmBs`yv&0pV(mA{kC{Ehu(`PQvc
zVVx@&I-rjlF9x&qej}e_U~%6?(&T_u(+l*eVLP~9ljE$;z}s5(L2IEFoT1Om6{sChcI07$kXGDnwkk2;i9QzfQ~^ks!eK$!Nj8L
zdc1P=F*t9!$#$P|^2fQHd~M^bDF16T@8NQX4#|9A$^RuQE3X?ORA}S_P4r^q$^PR#FWjhyNY4K-itBPY`mare>eI=S9+B-~M?wdC|I5qE@;5
zw;=!``~mMis6|~fWJ|mKQzj#Zu}Z)Mx`fK^)nRnAnp|sJJ#xg%SN3O69dSh_Q03}85vr|R$qiR%qa`x)BIkKtPinegwz)pTv?
z2_j_zxfgam2?U@OGPQM$5!S@aTgugw#%#Qp3C)Z`RH$sI!VgcT1eiGq+5_&apy1N(
zP~t=(dQVDmwe7b?P>>w*dMQ=u>+8xF+7qKf{qX6?-~!C}1wUQ>RHSlW8HLoL1Q$@z
z3WS@9#?wZ$JJ*^FK*$Skh4+{FoHg2QK}?t7wc=e8NP~&XxK7|wb+A<~0{kK77E+m(
zjqKZNQ1k(gELLM1J25R73%oM~>g1j5Oy$-K`e?j`o&`B3h72N++`*(RKyU()4T%Dj
z9*7vaE1oa6Kjf((q@bTWyUpG|+o1p}mh5fMQVX1cq1~+++ueI7<er;XKh{j}GTd*q73bPh{C$(phomj!o-{}$6@bFp4fmC3ERL@I71^lgEr>{{
zFYhP3q)pQ6@#l+6nY|Ym1;3aLt|C{Ot^2Ldu{d4Tc;Fz5l@Z;OHeFtC$9fGA22t8g
zQrTb`JDtznK69MJ?TT2q2TWuF8HHVx;r)H&73Ialy==RUv`_h{T+eAJSjDxxX~KFkZ=OMGGqX6~HqGWFW@ZWJO~4R>s9EukX7W
zhpQohn`|#)rGwcDBBqB0*SQB_qPA4?ZZfkcr
z|ISIBvo6}L8V?bejcrf2Kf
zvvc+VNdo$Vy;$qxz=!}jFO3>#+x5X+g$ZII_@EFyq8cKt__!Hh(9DBfW4$`GJL}%T
z0bjcN^ElNrn-~a-a+5nkjy%lunKt)Oxfqh6XT2GQ)Xna8+Vg@XvYgeHW3*XZT?|G|
zg(iUP`J_5i=y}J2BbHp!x^_*LV08fR@hOUxA&h
z*N@az=l%OeIptKSUcZ?!(EvFTzi@m_rfv49yiS5(At#)`G!V!5-m$n^eU+MJ;{p>j
zYYt@JA!4s`N&@3xJ0w0#FW;ycrFuvD-=1(T*q?zoROcW)0ih?5JICrqPl-^|G;y)Q
z802|3%Z8TSe#^EYt{_1iOk^0@ibYaG6>SPTXW?M=wv5PntTWB5`rv>bdcN=~HfAVF
zRAsJXWlT8nH<;iVzVQnE-HH7WJ4|rf^=QjY55u!VLXBoED9C0Z=idh@*Aj2lT5KK;
zi#qs)nQaJ728`-y8Uptu$D02}b5JCjDmh=d>bWRS#K?ga))TtwEvw8D-JKU^MfZU)
z99M(+lIoL_Lws)2_@UXBJ=k<8z`Shz?%j!cF=xD%_|87(3*HmMU+kV{S{C
zF3|Ld%hMZObygn%k9*#52i}ho6>v^lE)JHh7D~9Cw3!I!wRE=c3v!Y*L+?CJ>$eXF
zKCv3Z*=gK3v))OAb)5MXNbW6-*XP^RZ|+&Qec&?n00R>m3fTOVR7bW4lJ)#e0AJ?Bwu2!QT2{H>*Yo8U@jUw+q6>N
zd13>xIU{B+IGx>!Zy1ylN*vVOt^d%L)t7%fXI4jXeVWKtS1mf3pYW1f%DhDqexx;<
ze?@R!e+F5VIiksmZ%(D~coqKutQc!VT{Mev^EO3ich)aAP&)@_hGfl8gTQ8XH&;@y
zKe}5$4)fGcJHEIEaDX@CGd@0>yl-sn{p}hZLA9Hc69@y+>8B89%bQgT%Y{usJSQiT
zop5$t<@&B3CKs+Ap*3Q8b7c#QT|=!cTuOAEjEM$+>Xn!%*0MrG
zmlq}^XK$B!BAje?I&l|MU7kE1pDs0`T{gp~a7{@wauTvKAX9ajbCL-e=J&Clk=`QHoX`6M6cd`nf|i0yyH&*h>A6ZU8WKat>n4>9
z$D5ndF)=i}k(sBg*xcz6n!LFFcK`qx=k=+ZhtT$>CLYJD$fMZtd9?0*wl*B*H?TM=
zucz+C)ADn}sv7su6rR`ein{Ic$jNiHyNVT0tziyyKXbW4xuf&mPiML2O<249E5>Og
zu$NTV{E2y5iW!Sn>*yt$6uaZEbtwmJYN?C!YyQWqlZjs<0SiQvjd!wjUVc9)S^Z9b
zs>)%uZ3Fv~Ucle&)+i^XDmrqURCnA~mrEWF{_~
zh9C?sJkWDu_GPj2`ucKeIHSEwIuFr=RSv$YM@>_;B)vOYKm8i
zpf`x4O59fo?l#TWW4ps
zJlMb)y&tbrfjAOFq=~sBDF@0X6dclhG`taKVN-i_4)mJa+nC0=N6@N61{-EGeAiGZ
zYo4}fQpPCbW1>^}vDv7u|IYbOwojfJ*oo&?y>T!XGCIA#$`lY+4Gyu>w}+EK-`zgC
za@@~MzAjfi4oa{738lZXBNvh$i0YPD|B$_Wq)GUG{@~&fR-E>Ip6g?3WI9d7}kFd;yCj@!8OOdrg<&FV>VMv|FzG
zy~`yJNxNG<8ydpJbM3ARzbvYhpu7XvL`;k#$aML(Or3J%@
zsCn+3XMO&4FY**y3!n{aoi@+Bz4JF>Htz(n-XpwwT7g(_VRle>R%KGdIW;o9hatc7
z+L+US()_*NHWl=I3sS&_#ABU+7Vey8{Bn=wdK?tV&(*OB8dhQYwV3qvD*mHKNIAXE
zW~UF4P&g$mO`H^K`j`{nU#r@d5yk0};|&?$=U;1s@8?f>D2I$nQ}GPO^PZk}98vt+
z?X7FQ-daF!qe@T?vidN)@pYcD-Kl&6ce$J&>jYEt)x7{7J)T21qJivA`aDUx?fxl-
z=Fdg8Qo3R!{8z;yZ>z`RD95YGS7%2JB?2f{_+*>%RW^vOIm@x&Lry*Xz|Cd;O{v4zDYreEBjPX<+8;T%3-znu$~C6OK;3_an83
zm2ZOA7CMuq5slra?7E$%n=EA5xr+iX>>
z`{~fVjVS+%?$?_`4liLXH}0Fy?Z{L85|(em3NzEgLqj;JXz(A8Iks!6gyEMvg}~PM
z+FiX4Vp%5L%>Yzklz#(rcdtN*gWB5QZ}Mp*)ishN0Z7W_d@P|OE>A~)YxbV*EpWLM
zm)!uT=w9(Kh9%P#Ii?fx=a23i>fsE`rDee_St$H`(}%b_WY%Z&e_x$@rZ#^w*nFe>
zui1}M&A&gP9s26MNS;>jq|jphNW-hrXtuiDAH5Qp^@_pD3=Ius@Mh||`A^heUQ{%s
zxcKNPDzEpwN2JV(SGbQ>r)#6pV)+V3NWi>p_&Y5hMdGDy(Z>Frmamoqk`w$d@DY=9
z?tk3ArVgTL|DE{Ho5j~+`Y$XpL^#;tf6T*}IRE<_h83Bebc2F{1;gXGU2SzXofPZs+Coy^*>bf?=Ko22{(mu_|JQd&
zx$$IRVBiXAc$qMkmF3o~qDCRQ%NZH&kdOE23a8Im-}1ea&=k-w(co1uN0xZQcHtg;
zP3+XfwDQnt@NAcrwaw{QJ!5!w`xS<6;N9{{so>@1wK#gJ#k5D_{xfu_D75Lnsn5#M
zbF0$w^8fq1Gi97+i4Y~e-M5b*O7|}ZvQ2_RdAkYeUjZGjb!^{eRhp|#9+4$uUU1P<8ez9*Fat)VNLdr7p(m7zRyzz^AWMn
zW@_yBkNIZTYT7qzi9dqx!GsVz?dc@s(qU;EZ-1kCmV;nh*j(h@g3b-ZOt@OOTZR+)
z1*(5IbThfS%hmn>@R~lPK5A9N<2uy(>pYhZ`_LIrjd(9@{`R7vCT?!FGBAgDdFnv^
z_2;9#ndfKRbNEHu(X#R!PjUg7<75t&{i7IQ#^}A$pb8Gp*?O$yth*XfF#(*zb^Cpu
z=QH{3k$t=Ap|djC?5DwDLaPe(WX9fPyj72mYhnPJ+h;q?(8UWjPTm(hdJ`n9uw$a_wfO
z9>86&Y$F(rh)a4pVcJ=|dg7rK6aPwN4WcNbf1{mT|uoPDW*(`|P>QekRRE$HinT
z;SR?KUwTgKnltS%x!UlKpjESvMMpj*sg5Y@<88C8CA}=llA!fMY>{eqEHT$sBp(nW
zK}}u^oi$fe8T%L76{x~phPSb;Aebt|Smg6pc8PqQr>0kS{&4GTWxQLv>>?zTX3OKk
zQj=i3%ki=#4F|K0g)Ac$&i09m$hehsWheTrtt!v^>`G3cH_L!#`rpUa93Mv(&uDcS
zTpZxi9&nw_0&P+zpvQdca7N8DlVaH=?ioT-?8ljvXh?0olmEJB0v|8jagi;=g*bOaOxzy!w8!DJa%_Wr8Nu6
zVLI}ZSbw8+WTPK{nk40$Qhc60{?s+qGx()W2l8i+JOi?q1as1er4i|T3rxqGj<;2g
zUKy{a*MhFJzEv0f?;6v0P}l1h?y$
zj#IE~OhVQe%avKleU~L8$u!3cOyu#phW92Glg&iZ4X~1*J`n}wGks2{nnqp9uVRE;
zi^Jl>OK(*7NCeXOVN1KqJNIY^_@q-lDzh~6V&OA1lsYdE&bDSgF~N0OOpN8uiuPcB
zwB2N%ET2oZ=O`L=Gb1oAl1Q}i1zbp=(rPz`z~-M*==qf+v8|oPU}D`G2Co!1X|i6a
z#@HUn!e}%4#llPGSo4pfyu2_;>7;q?0HH~W6A!6Rr^8^~#>Q|bINY5>$dsq
ztk?>6iebs{kfg&Avr+$3MmrbMxM5SSqo&=rb0hh_>2PQch_$
zy@>+ey+b&qw7qP@ysplUdwp@M56ml>6q!J|O|P;|_^vI*y3g9gnb<%0Ev%&H5|>Bg
znwnJI;v*O|1&U)QnKOdCzE-(f&@hoy
zjYoa5)x5N=%9zMxB<1K9;M4A+ky-N8j7zp2&i-DWn6A56mGt{xEI>oFaz>L;u+eRx
z4h6#T9H8|DZyH!Vt>2tsNPCK#M(i~Ic@I@Y!f|Ey1vSp>A!2?f&}X1ChV}Z{s2f_D
z7nMoFNWohi5ria|Y^@Vt!trRi$#A|_q_uo?q+myYul^$W+*urK*L(2!TN&K}i_*o8
zpl~qTzEa1M*Zo^GhJ=h}ljfMlYZQio@^sXat*r{j&gd?$Ex*#G@P;>72o*4hBxKNy
zt1$G^)Zuv_-D-l{^mLMu{(kOgo)z0)vKS9>T6d;&6#(^g6_F-iW>IX_6Dt}{lZkO@
ztol06J-t&EW2kkFbK!obd6SF5zYeqMjtOlaH=li^_FzvYPD|IN0&X#Vj0LWQX
z(lA;)6AZ1ab#HHFiI&M~cEb1sA6694c)af&Faw7czP-(h0|g(Z=7fE~Aa-WmQnypv
zn((VE%X}cK@VquU^e60viKa+B=9eXtud`@(%(6?gLw4S+c=Q9h&E*ZsD=;IY4i1w9
zW=maFN&a+A)Sw`vT%2jfq`>NNjYb>eFMm-E6H^}+cz9XT6}rY$vQSb9jck=yFnHyydFmRcd|a1yco?I34_
zpXhtEqq-kxdXtS04uXd;)jf1Tw#^w5#0@0In$--5(nOd3YwuVv^mh_%Tm*lIM_9_Y
z3I~?0#4`H&5$W(eFbrP2uD7W_ZFR<2fAs4*2N_kfq&&A`$`)BmB*L+;g}UVhi{Q~<
zR?Vg%HXT0FY2}#`ev(i0`+RXAg}1lu^Jc?Lwlc1fe*KRv9}Ej0A<0h|u-uZMb8MHd
zuu`jIY=FB$O~$nf>$BA0B%kGGU>_INmanVVF&)a6HlGty(X=22;5A@AUT
znJk@O$4_wRl{&DEG^iNe(Uj9rsq$L=+dza?oIfg_RXi}%r2GpwwSSp32j4}MQRc~E
zWTtXkGqsq?k|e}>3+FYWH@y`9prR!*W^h4Hr$x&-UOg)$4
zC5K7whNnF_i3ktWP1^UH4X4H%x1W$x0#?~E0OJ!YnnGf!G~S%1$2OIEq^!-9X)oP+
zvu;tqRyzd!yg>7&evUQ~?oPxTsVHc>I0ON1Ix=4M8>x7-Cl*^
zQn?qDIP{CsezJh{y4Cmr4t_i9e#i?JLI6%nN0Y*lc6^5-Hz3UvD(|R=a
zO0E6Xy>yws_gVt6-psp$ST^qwwQ7gi*ILBC`cb3}&c-7$?sL9>S&ro@jsHRbK2uv<
z72SW|%-)=@R-9ehbvD9){Lyl_br%jpvEd@kR+`NXXdknc*y3Fe1I)NdNic`e3Pt-d
z?-cdhQT~*ql(T`;ItGKG{cn#rKi5{TcDwixdvxi*WwIJ^I8A!zx{Dv_w7Lk$y8k%6
zy!YTTHeIZBlG-fWaRzoE@xR1Npj|+|*IHj?5xO5Hf={(#4|%(ouZOX9QBlr?G5d1u%ikUxEfQd1Iev*3KYE8Z?oGMPmXUO0s&bnEfun=|f?GP+r-
zPRUzrPOKyoCBLaMt?Ip*G%1k05+(OO)*s-wT*xl^WuIG~#Xb~frJ|+glbK6DE9fqi
z3}N%vi~1oSFL~#Ni9YPmb%u5l60;YTGwMECeJ!G&AeqXCG@$_Eqy5@vpYsdT1$2jYF6!%g;rH^@pKWg;^5uHN
z%D5@J^XGs6`3;wX_Wq~;H5G%w;cia7K}NME`)v~E;dR^I(Gm?^J_Etr;BLl34bqzI
zbO^|7*GG7CFp5;B`}6r@eb#Adu=A9661CW*B$yzFvX)a78_xhg=iyE2v)^l!dU4j;
zT^Q~Xy^YNJVmVWxkP0e1AY|5Uq0}qSR3p0-Dc))Q9TsAGWzZOW7nV(ZWOchR3Y`Lbj72D=6kec%K
z&Zjy&ZowRzu0c~=QVtH#HD7C@8vi$Mou6B%q4u>Zj?MAb_!C*feIsCQ7+;6cL+71>
zA$WH3=o+N^LnJM=V0-g31C^NP#WiSXrVz);6395lL#oyXke|-}^{{f>Y$6jZK&t*=
zs-~>znBCV**7T2bZ<{
zM$relYOKBAaxs$o$7H0ba`8vI+zxKA*1N*Fk?$zOvAez>5^B^DSgScWFQiGezG_KZ
zbGVw0g#@gmLsoD8I5za6DEy~eFbNTpkp)_m8yni6!JhwsPL(|y-0WTbsV0X1{Epy#
z;M0UdbJcSR_v_B~5A1g?$ez}vlt7nYsGZOhOMh*51mt`pT)OPp>^Bi?4Tz(}J3Azn
z3jQ+{QBNs%PB6X=f^zj=BliHkk6ABFr>mZwix3UpoMAGA-V<0&uCU0nnQ&q1XjG4X
z=K;aVa*9zBX!QRO&NuzJ?|!jC>ba)0KqMutG@#IMFdr&&JBHUfb7QOfgA!ppoBiaN
z>iPUo<%X6R+O0$%t)8)lRF8F<+_#{U7qZv(RoeM5m1
zVa4VFc#G~K`VMZ4|I|((BCKUrak#j_Z#J?@lK1OGeGK$`;jiX5M)}Pufbul^&|aNaX+`$hVqy~ROiga0nSydO=D9@DN63w0{rXLmp)??|uOo|K^>
z-LXLz1Rx-is+L9D+ukA=OvAW94ydWG7h)n>rIq1DG*yR~lxTyV!JwK9SW%U;R8P$c
zqz41+U%WNUxXNo}z)F?#&_DzDN+UBF?z279tqxG3$MfyN4+@?N)s`|R*kJ(_WfZ#`
z8+OF?vH9H1)acn8t)1z?N3`*;BMLK_T}lo+V{M7e5@Yi)red~YW|9+F!CCQauz-d0
zk7htetE}fTt-&@M?0euiD8K@Xb7&oCt5y$CWorHb5Kk>1o**OtsPQBEy6GqKM;rnO
zR@0!EvNY?0tNU-JLq<>knMO7qoqutXU;Nj09s?d6=zFJ
zSd}o<>a1pX_!QiHnd$j7$V5Em*?K2vuKbtbIL>c3?|8()z`6NtFKM;$^pb6Cf3KY9jcHbSXInSPT
zt%%0w-4P+BiFIxR;z2^u^$}%>JCUgo=K(pF1f(1!F??N@hbjrr9=-R?D8;ma9Q|Cs(Zwo3;`=Z<#mgi`thehs8HpaqBcWLHd>A
za)C~(r8Kybb1hoJH~0Gc#+$k+t10RjsM+=BY-5S~<@I98k#RiKi;UXN=bwf6GAjw;
zt-ACP;ij13K`}Igm0IU3qjyg5KzL!?ym+9^(#5#
zds}iE&>(NpJ@6ZZ%0I>dC8u{z(2`1jKF37PR=x4ce{DS<8W~(2R2_G|dAARxq9gLw
zVFpPN2w%c+Bz}8C2SpeG^5=~?kF25Q2cTS=>=?Z5SDNy(qJeJ;>oGeNECBg&8x$ai
z7gDWvhl!lH<4Ha162-cZTRv$J?Kb`$^g{#>ZkAo%d
zy#$4S7CRl}_c;@WPhfocTB(Yd*&zO?v$$DOw=*fkOwsth0dUC7!eUsSF
zF!Bivr$}qSI33`Cipy0!`pS!I^DCtl<|XHYLfi~h<7`jLC+6B7W)EMXl}OTor$H!K
zTpxOKcDXv39wlwNP5ycV!g23=7r2Lml@TsY;*^#r+&))R1Ac(|&J|m6!Tk7(qLet+
zFhYNftfM-
zhzKUGTgsCNGe0zGMDgdvMK1$Z#ns7wms`p72qR);Vi3@t?iES|6_k@hM3UkZQG)hK
z3arGG9=-{GakhSbshTqqmuH;kFNFzzu||3Z3@>+PVu(D`efR5D;G{M)Gl{@#m*+Np
zn_cH;wSvg9`FvTZ2qixu*QbMP?Z`+Dt|!9u#EDD=@ExJ<`;IOul1opK&EA_1#~1t5
zB}6zl)%$9;zOv*Y<;GNM(szwk%@h)>v=?#cNSRmqIe$G#UeaWM^YN}@Q{2rvM}Y1xDwzZ`iE
z^h{yt2^BL!*m!}s-Eo*znxO1}><&GMPp@9C;*XK#OmJ8@?(8V+hp-yt$yOh}SL@Fm
zq2i(~^LA$-BUY8>P`@GKALO5A5E5B%fCK^wU(lSzy{FvF;O_PAgO_aoOZv43cQ^Tu
zk5$n)!h!^3bif}djZDq+1^aQlR9|~(NGhC$Y5H@#%BpsDz#sCEw?Rs(PLXVj@vUXN
zraGj$dLEpw<-C?Px44jiWf^NL*Q{lGLu*2ohl0Ej48Hfv|EwL#jCQY*ZVal%MX#rT
zAAznXNUEjwWO9r-Qo_T`hwDvWYNnNnyBe)(1f8EW3F`MYd0OmIC53uO37
z)+hU?r>EwF3giB5eie2Ti;G?uuZpkAGiNH+09ow4CNA|6MQ6wVyms-^^(pBlEiu$e
z=WMZh+r77qms}M5lP;UYE#-z8B;72(sC!nY)QRyKB&gm{{agM#oW8V6{%$U%Lq+$;?Z)pNMc
z1cd?+4Go4qsAHKerZy+!HKFDgwEO_f=S6xbYsUQo1YFTru6egMaS|~9XK|>RDZaD^
zBYk{qva-@n>95ZEHe{y0yzK9x5F?GgRa6>SiP?tc#mP@6mv@8lR9!$*_l6
z7tAN%>vnq_Q4EBa7H-YUDGQR6o0%tC*v<`_jG2%dNGyfJp3osRf#gpk*7|Tvyxp1gC)S3d@4v~Qh-6W4H$6|oQP-)
zuY#Lo9Q8cR0)nO72%DhIe$%8T?5^sQ6>5M#qbU44
z^T}4Q%$<*!kslw0-W-#zS4Y*<|YY&f0mR2+qJM&0TOb$$mfkLGofVhfeR}3Vd
zDLBs*+QXE{OuS!-mg@uut3dw5NPAU>(tBbx4&G$rI#a&(D`cG~3l#{eBj9R5r7(!Y
zM%jrTxB%xx#_(s$7j)Dk8jryndyBf;ui}hWTd*~rPOb}I1R?1R#82kJGmUaY_QJdp
zSTSW~FQ`ARznrQwl)n+P-^GF^KUIe`fgxep+MAyQ!6$|$;|Yemk>v7Aa|bM8CNpIt
zE&ebVA#J{lXL75!{BEF3%zvryq^oQk!DZlNlQ*m97KM-J!^%m`3J=l!Mf^+QRa9Cy
zKvs1rdnQoTN>Rc)-_V%X^UI*)ZSO&pB?X<3FOdy~u-VpqiG6AqSkfTi3>O$w!sG)`
z!3K%HAuhkJpVoUIf1ZeqKSPmyBR)W5L}efDt@VAp{VBJGxoS~z1AlskwfY`kL>?ZF
z>Ps*#K2+Zi9
z!v90%()`g!sPsG9>rj%t3ENc9wKWE{zPd@Q)p>9950B9#rI4&yGPEf@)`Za3(yXrU3Y;v9G3uc*wnRvw;($r$58A%xcs
z^%I5^?^>O^__9xDSo~{GPkJ$A-EEoTewWy|3@`}<2k8c8A5N}xp4adx?d?s{A!EGn
z4O>Ox7=GX@O=_lEA6|8%6ulju*Zrc-+zpY)wdG)LqlA?^4T|+L&tH~4)QvNYKPB$tji(5<;LZ1$UgPsS3pg4*dwM;k4?{M4TuRZU3&JvdyR>?1kysp)b8u
z7-Bg51esuW2A&-oL&V@D6_*7RXbY2tS{4ZY?iS5ZtMKU55G79BaIVa6oDwckdjf
z&#PZ(c=mlQ%TDCr;lX?Ean?k0uE2(~Ow{xAZw|HIHBTBjt&hbvX}stiPaJ
z!Kw^XOp?qCrY2^q{cv=o^CV>?ac-^ET<=hGeeYb!U;|opWsUj6Rgfa6v@dEB
z38*Rs^iH#&%1fJ~AnNv!ArsFRUaA#nag_P2b^8}nJ6Q(YC`Qht=IS0Wl)V=HmkUx7{$Z3>U2Qa0v{>y%$6C$HY-!+Fe-f4LvO+_XcQ+1T!uYU5
ztF^hl_CCm;VtJ#ua`>O#
z<{-uuL7omJ%bi-MRU3*(u_s>lZozUaxnCC{$-~)c$|$YlDUZ#@pX|JamH~pu+Ir)c
zG}AIWDUB0G`!Eb?E2lA7Ax=n6X5e@>Fehm_T|uW{LHYc$-iF#RIU7WltwG63@
zy_OUpXCGyMUvlEyz2V9#C-(>6_{`Gsn!JX>_)Oj842S_ox_Od{8cxps{l@x=syQX4
z>4}=tIh~b_j%GFYQb+NV)BYAvJ{rMH{v(Oq3$5mNPEfjlrVR}kD
zHBaKszNhx=*m%73&X`{?k=1rz@|>z;B7AQfDnY#wdr>9TWXzsL&K5zILPoOVhOd{q
zr-fK$ekw}Lcar&t9gC41AX{rUQ-Q9LxNK)S_`0Aed&>S)RVJl2-*F%^O<%i+Znlm#
z_7btctelJ7I_Y&ObU=c3II1C)ZlG6AE$N!7y^?p3vIPwdyLh;Cs}^gADos&z31KB1
zNKY?mk2ehm)6l2}V7t6l3O9i$5H`h~MTR~CsoxWIDy4_`WjW&-sLKINp*Fi!lXJr6WV
zTLNecr4W;@l9l{l7p~$6@|-HTnrOKsPUul|p)oifyfb0bcts#2d0u
z8GR9rOMwlme-6(n%>@a99!-L!FA_2gyqe{oNWLtFL=vA2;$vkQ&mvSCtXk^GxPMHf
zPi@Kqf+RE*{OdFR3A6kUbb2T)oL<_%b{Hxb7Yvwjr<9fNQ>5WBcsQ^i(H;^#Sz&|=oP@YTOW7xa=>DQHkP;QGv5C!8M(;q%#k;!
z4-!}HhGG2ViwskfnMwtpO2zB?O(Ua>qJWfCqj;ZTnUO*H#kJ;O!?@67b8)GwUs7IW
zbhTo3K7w(PW~Sg1Rjb8G3ByfYRhqb51G49)Zl0LTE;Kc~{&dEUN9<~>GRvQ6y<3IdBL4&Qs=YsZ^sGfKN0Td0>x=cWe6?3YI%sHEH0T6Pb$G8;q)XXw
zccER}HEAR@+1fRYs;+BKIcOh`ZneK|uBkca(jsu%^f)_DKd*00m*O}ae$?+xJ;f=J
z1phxtUe7}ng!gVz;Vby(GmeTcfA{BYz6tY*(Y_PfFYSh}PEp*q8>J<*jGY@4IKjq)
z?k*${o7lx7D$N#~fe^%^qN2IcBG(S@UlXD8LA09QJ&q?M*6+m9aMfh^hW9lF{j3?E
zb#K^Zvpe6{-0nDMt;VZf+BWt
zgAoAR_=U3@@p7@+dHJZl5!Aj&6tP*OVKf?OEDg8D3&uBUzt$!)k)G}*tP_{5_j2YZ
zT3Lo7G7E7A-A4zu(y0;OS9Pou!`@>#A-4pp@tJ6KZ
z9m+38jOQY_4e$(~Zz|Ytb}h%W8y@@pX1|Cn^ahe}HtrJX^i7D~9Zr@zB2UiG*S}&)
z@$2j7P2fdZzkidS*~mypbAsXVl5M<~v1RMga)Pv!M$Q-CkIh78W6~~dXQd=JUcS*u
zeW}-mC5Lgzys&}i;Wp8#3suc-ug+7$cn|2X|EhbnJ1pGxKlal|_>(-u{}Q1xaTJ6L
z|3{7bWA-?P2J^olRl$6L|LqO?%UCi~Ql7PTpT%EZUWjgmk441SqCE>vuMLPawY5JX
zMTL~4o?5=mv4v??*HWxU=~nxVrPM;-jg?5too6E=BfIrvwsAZzg25TVO49b)%C(IE-%ZJwN7)NK8ez--p<@OLqz@a^Yba_Ek)1%
zYC-H-ad9yPCB7#2^5&!qmCP&A3hw1}SOM6%!bZIRcUtU0o&{zgik4nd!;_Ubj6@#lk%q-2-X4741CFvHp++UAT#
z_}!cqq(xsMG9g$)G7W_I(I{MnLCm_?6e6SmjWU_fi9HksLcOq&1uO^)dkkA|RrIC5
zGmMqWh-s@Uoriv+!Ne=l9&WH%E>Q78p`rXH(!#6j^$4um$6NkqQuyGRIt#^k@sVJ5
zZ6`~yi~DYo5iEo-BT;-fm%F8>zPOBK1MywN6VX(ZJF^|>`T$T-6!`@mf1|PIYE7S>
zE5)P|bl`S1Da?PeNqbrEK6vZU?aIo{qBrJzm($_}^c1V&CWHXg1R3
zb35~LC{}sL|H@T82@EFhVX|KN6ZD-6wSk8G<8f)9{{U$oS^VmET(1KUV<4;PyWSwDbtc9GdxD_!>yS@e3b?t>n7fJ0iPF20?%Pn)3KF{t3)&(BstisE#SzjH
z-rg5E&%{nPJZZK|_FvhK#pQK|lxU$s=V{3yHJA0a(8cCPRkb>@gVa-#e9JkzwMw>-
z6h~Mh)_9MU6caxW9Z0FSZM{-!k(hy@aPy0NFokfomgz|`H=(@zATfi{e}*QqPXfCR
z8d;WRH65F+5RImX-85mwC!lM<=d!*srJd1>HCYO=+up`MHd~QZti!HpVGM0i
z;4rhob*;EDYO&OHwqh;w8v;u9Hx9f75)*q=9BEmnRqTn^L}7Sn=RVJ!zH2M#UZc(@
z9ZKY5Wae`cyL+P2Bhcd=bB1z8Z?Ep6dg~^Z-|Zv{LiQ{o-i#b?n5phrr&Ri0y%QB~
zHhHfAfs;Ue6Qrt8ZyeTp@>x{*-NM60ym(y^gL<}gG&whTrRmGvW#MaCuz4U5fOi(G
zB=p77)D+kKuu|1PTU(pZ$?&u@V|WD9NW@)+T(apj#?g9i_)E{S@;3}&7w(TE%}f0y
zmk>~^X-^*y86L=Zj)r0|-!iW}Sf|RGyQ1%^ae6{y^hzXSkm_Av?BkW~d&I10Y|z^v
z9ErWoDK|(i+<3&!Xbq`H@#2zZA`o+E!uehJft-IT_)dzT`VlDV=}3-yO8MVT^|xM$n`ZWkYamEryGAoPPiXQn*V662;&c}Ty9x8?HY4|_C(!K6LO?X&j@xil2+mls8
zrpX;ZeG>gtw}3o(SJhl7dzzeiC5;87q@+xev|pWo_9NTrm9C3dKD{#Bd;fQ~2M%mf
z@eIFRD2mibExl#ZV1tjLTBQ(OBC!=q;fImlVf#q)G=kQ%ICO%~gpo8GtH
zFmnx2mXgo_(Vv!Cp*^iXL{u%p!}QnsCtiglCI7(sNuV-AP1J!42((DiAAn*P-vW|h
zbs;j6gx}r&u7E5LeGQ31Wx`1$?AGU(sE+&M0i0RIjRX!QBAL%UFI&1I8C^M=#RLzB
z*BQ6hXBTy~QY4#axj(W9mS6zDEk3qyr&)>f`!0^H$4gJl85$8EuKt4`0h6Fm`qNx=
zI7;YrDb?m!$nc4m&7$UcRYx`T{WeCCx*O*ON7*8slYeWs?TIZh=wzZGG?a8F764lM
zk}1fYe$X;Sl6HH55BD~|?)1&4@)BlNZomO1Su1M=WiCM#K3zVvp;UnJXjwyAsVpoY
z-y3CV&OOb7amW5V))4CTWXSAc)HS0_EHlk)xcUv}I_%+Uj6|z7REHQcm*q`?AS
z&f-J4j|RJyB>cxMg-q~H6XAKkBV<(n
zl^c4SP&_9&s~gHD`MYzZ*#Msb8eK
z7`|41vA+Y8^_RY{(gl(?LmDKfY>+*YtEJ1&r|;rS-Mf@~`Gir^2%M_Q92HYntsVDs
z8NIw!X8BhzU6$E74sUF;hh9=xy(Ui;I$RG+5QWUf`~kKz8vq{C*YtkjLzsr0nbuN%WREUf~~X
z%ocqU?YE==+ec3e<=?_eZy#fq=KB5;YO;{m>tMr
z#^Wc2H64I_QdV)KQ*q;mE`j>wXEF35TlErG75`GVKfTn%Y;w+w5^&hk5i{;DVGutk
zacUhI&zZ#oda?*)459b{U8&h}QtEe}8K(>^KuqB3wQk1cQA10lv$($~|A9GkK|+kx
zP|d3c8~{zAOd|?IWr*;l3jD_tJw-BGRDa{>bU6R`o17eX^Kc{s6eZVepgMB4^weEe
ziEs}GF-AC&7VAU4_@C5;^%}E4Z1NcnExW^hA4o9qgTBW2ghf|Bi7*zT1s|r`j2dEX
znz*)=qn*eb$&#U=l43JU*ZuArA#8wBmH?l{gQ!r*yeX#xA5N=Kl9lG}3YLGvG6uO0;`
z6;S}=R_(L%tqB!YhH+TIpHLO+Q79tp@Srvhn|T|<54S$p&_>e=rHR=e@`2ga_6ayb^*3m3j_2vWDfgs>zW%FL^}|}_a7dkAu9Lm
zOJqWWq}@kNlfHi%Hk3wvbM+2(%%W68TCn2b=Pp(F-TEa#hV;EePz8P8|C?L)y|=zS;^wMVXN9_EBoJYo8o@~>GI
z&4k}~9=}Bi@W)o4M6S=-J*jRX(IN={C#nO@r#z1l&*T)(%TS(1d#N%rnbK=
zb$W8a1SUsGSx!5>E~KsDDW8iH0?-`WPnU2Bq!C$v5S~}(?>>K_Y7_`hrECF}p!k8n
zeKMAlDhM}5suQ24MG0t>h28nD@!W5+C|3LQU!Qc|W+xg+H+|JLk-E*G+J*BUpA8M0
zJB7firnlBd>INz)#9p#Sn(US$goz+q_3
z*#50`lE1_^1mIjG9XL&h(^4eDRz^hN+GU|i=w*F6%1q`R|GJ}v+Esu}(%7Ix_LHsB#RtLF;GKH4t;V6FNo5M#seYox
zMVw9TIL*PK@R2iY>x1#LyeJXFdU{csl=yUgHL2JyjA5echZ7xp-Bl^}FXbgq3xsS+
zk;lo8K6sfaJ?72f@4q}4Sp_=pj7XN>)T9eM8aZbByj9zXa^jV8VXGCIRld<)U{0dxE5
zK}k)sBr&h_RvX2$mLe&8$qg+`pNm6N00@B(7vFF7tvecc5i3#y#Q3cWGFP^iJO#qU
zrUu(Eh(R@Ng4ZjBB#j0vST`|g)xR1^l)!U13RAq%G%OXA!w+_jDzNO((!<}26P=ca
zFW~_W*0&Z5skuUMK)YZA;~NQ=PX3%jn|PP4%$+rH06;8TU0;3-XRKPBzkl`~a!3kg
zf|Kt`RunjS$-R1gQGFN2*?3cJ?ql<9`UnEiI$1wubv?YhRrNgWgjA;r30e&L$lUz7
zjFw}~fNdve)6Y=?B3t5?$?64VJ5nP?gwq$Dj5ox95cxts8-@5G&)9tZ*}9muy90O>ZQ-I*>EK?F$1kc~5r{B_H8vR&Ik+@bc&m@z@YP0gq=@|tEBnx=wMj#bQmf>$
zv4jsQ2K5I-@#Twoo$0ESu|c>OA$~%U@{*BVT
zq%N6NU7X#PNXDQDPOr~hrNp+lFc6^r4LjNM=g^RKZv>Ia7g2SxtgBJ1b##ZSjxS=&
z>S_3C*M*CpOjL-_@=tC@MICb=N@}K~p1}2PY7V~IVFMT7CzB=i5L}@0c;1^NW`$K4
zhRA?`fB;fb(nY~Ag18l7){a=-f)a9&r>Ccf$7>>@?*!+DTtT{}Ymw0A;0!l%9(Lvz
zf_IB2C-lQ(#8L;4+Wn=>J0b~Gxx9P&)C6Uk)#?0mGK$cV5PNI4T_}ai61}>l#)mBM
zh)VuaR?BCbuh2Ei^c}IH8!R|JQf1`OsTH+)8v5tS_{Dyyd|r?J<;zJDkb3F??(S4o
z$-OAU2Z1EIp1f=#qABnMo>FNQD%W&Bzw~%^AL<@^ZpPdDXxVe9{!8z`01W-k5`~OO
zFMSyN1Nw)D6JWr?eN4fAOUbfS=1Aod&RZXVVL6H7u3vbV|DQd)k&VN9+TPyg{?Z$<
zJC@aCFZLHuNIhls3zW4tn|TPGt~7xbd`gH0|NsCCJP>1JiIIB4CU3c
z*!y<-yiG6|Tv=HOgVxq@E1PdSVgnQWD&$TxlUMrFCN-iTA0Md+&n0O8F&&}mes~p;
zCcTKuzGvXHat_p28-HIz(XNLW$hF-=KQ1ju^Qaa<&f-a5*D3TG85Z3
zkcIbli>X3j3a)h1ZqI^M7S~&UN{D-;c@zRJj
zln4LI047AL^TFF^_aE9{e4kcik@7W}AY*XBWAFBL^7D-k^6=e$RcPq$>#|Al9|E4;
z`Mk+HX;&F)EW-=+ZtCFbPpL~=f7si6I9><(am3{Pt2|#iIXySvk-uo
znJSgaBjbGOtH=W{_8c14i#`PygX
zTV7o|$AENdMf8MMK?U2oA^n2GCCla<$gfD?F4=j%h}Ma?%)9%jft;tdqSN}{N~MnP
zKyn@VNX=+Dd!#>zqrolK`DV_>V^QK5K=S*C>QK=nH8sD(OXW(iW+Lu2+o!BqNWz`@
zZo$AkCsm$#m{`bc&`djzFz8eu49XSRe{guwP?T2r;tUv+-A16m1VgTuH1aQNA!?fG%4XZ+551<(^1P{H$e7A*+U6>m?j5ZOz$0kJdiIB8a9_15vEyx}@J|!(PCdP(#slVunBWsmzpKD@<
z)L!N{+o&jYgetu@v0E`s4RAre#VkZ~2E5d(
zGl0E*RX}kkS(>P1kVxu3DJUYos4gBT#2NtffZA|qmQmkV$*P~Z4<%+1#?T;`T
zZ&l0ri_9eFKVH)(n8(kR*(&N{m+(=zBPAsDXW1HO8|JMS=y%TMV_0oWg-nK!pX`zd
zFGsU(MSK#5UaX!Zyg%j1j!q~A3UWb;OA;o;fr;eMn$`X4xBK&}c)Jot_5NC3_mPMF
z%t*~K!B@WAhK72EFp@EEXB0OBIyYu(F?kn^M
zgXkAiuUQnxk|J36I(F_sduFNHUs`^Gf)S8{wsGMs=c=}Q3C2gf-0QRlgX%u?ZOU(HPVamKYEs6dX^Uv9)#XZFj-;_Z7OmPBU`i+{m0EM?WN!sM~eg
z1Uf$i=g3yDP%$+g^EQ0a5PmouXneqU<=h%4p_HO}5}zSI+hgFhv;WS7?jlTKibWXHY&W`|_hAQKNGd8${_WS92Ry0$8B4RDbm5G|y8vQH^DBf3a>q!709_
zYz7lul2B=v69cnXg^g%7nPuwJD2Ji%@7{NsJ(`+w_Lf-TDE6+G6i18OlblN23_9d@
zKXaQN1ISF1jS}c5v*=48Ddl)NRfIbxH<|D3jkJd7>pY}-IG&QQJ{~J}h(dRyo?e*q
zKFaJ;z|3D1ih4cPo824J=e;MEAw^Vw(kyFk&5OcU(nzabbJkPdM24THuLE+{MZ)lK
zg6svnV6OG_s9l}HpZ7~QLS(3bNe^X5YL>I%ZgJb5qa*?csOy2R9|hZs`zJIrj0q5Z
z9`)aTR~M>bButulz#;glfHW8b;(+DVoEzHw=GP%_sNpp_C|4Y1t#7r_C`QzeD^VUF
z@ehv>eo2)|nKA~dfr#ijbH~!Crby5!Y(jbn>?MDUz{Lk7E-fq-RrA0)ESVDz8
zdz(W5Kx&Jz^8$1ZdD?A#@Ebevy80HGmSG}j;wycu>PJgUfcoKN-Z%LvJTxayeCLu{
ziFc^<>?haBxLjG1#`cjSn<3XH@zXz>Lx9gI*um?Nz8)kTmpNYWj8
zB_ZcRYS4IJu`3O%nNy=tbq&VdZ<(mKrl!CHQf1Dxj48U`f&PvBdW&2Ib50;zw;7bs
z2B(9Io^AF86A)9&9-6%f%06IQ5kF%)URy~WOpWU=w;K8|vBO}{CaWPG+u-5~wkvJ$
zxl3C{X>G~Kkv{>=uT&-qPyq1IhJ}j0^iF)ecf(S336tpNk$x=HjPxEZ8Xv&58119EW1gOfZ_aU$b+Sh8u}q*TxHmvYzW`
zzU%jHZk1-E<51EN@3*Sb)yBV9L~TE+e%ZEtlhCSL8dY%qgPrC}?~e#a=L-@0LP^{U
z4-Sl$UhCpgM56o9EC1|%pfeQ_2&kZzCm!Z~UiOO^t}}LPB7|z{YFyrtt67}Z`AKNx
zmA6b~JopqXB>lPHObxc1Pn30(dsC&X^_8CCU6%=0@mGKnPV8q{{3*BmG}&d39t{$i
zR%}@r6+NEL1bNOtwTP1Kfrs~-;J4~fiZ^&fur}*20pM=8Nk6?>(&Cf7fMuN4TyzPo
zrt)XjbHY7?mK8$d+PQQxE`ptu$1jSi_bD8>dGQyn+;I&P(HfD%00!jRcKMKo4j9W5(t(K-
zZ9`^vnTBLbpt9#(wL%`q@%;^t!E
zU&2&y{@IRiNn`bQH;Tm$Gu8o_ebjifi}(z@Gxgcphn
z^Yj6vf{%(f6dMpr(!^JvQ7jglnc=L!5Cv6BtmqmU>POks6DFkoac|1P4e79P%gA`V
z&1x;PzMRy%j{WO0OukTuv1I+7jhCs17h7J@oRwrl-wIwY4vv4kP`#nP+n6Gb95`_L
z<(^C~*Wonmz5&XCM*Lc`&k()-UlU$Oak_vgKo$O&Jb
ztgPv@mG`-2+bZ&L709Aa2+}VCqb$caR)lrE=@d{f;-Z;&4m-DaSgtj0dp7n)8hpij>4eX&z8rrdDt`<505=4VM@I5z
zBVFXQIzhYhm88r4I6V`dxvb=Mre*E@WT<+}Z*Sgq3%zi^sq=4EPquQEVX#yW@?|__
zT3nj0grV^(sQ2wPicut1Ev=Vxqi(-@V+N
zs!ndsi9nz}-koKS=+#B^^`aE;XY4wiV?eIw_
z%y1$*CNe5A5@9rPQ&)G5NnA2qhO)N258CDidKI<(yxT4M+ck`BW28(}l5hbzR#TCd
z(
z@3?OLou55CtJvmfoGDN{0zw6W>Yya!CLk7~?v+BseU
zCiFdOv@7!`3zg+G=wil;7}*YJ&H0(Ll(c1@9iObye0jr|WEsQca#OHe=9_eNV&!KO
z&B3F*Wb5-`=8K)@m_n^F2?-`x~lJS@%6)6vs^CwLL(
z4V7kMWvwFOH2X$a5Pqe+w*7!PHnAXt&sv3?#YE=d!4imeZrvAzD>`=DQB}Xnp5^MW
z{`B+fNpc~Nw~S2PG#KrHYW8Gzp@LLPfz09*cosG?GSZ&2r<{3|_3XU*OG=@lp*cA?
zSio{2WdA2O;s4BlpcPOP{PH@L4LwOT^=K@CP-E^j#$8)e!mhc=MONA8%-KjGo|51@
zB0wk4?t~qznFm9=)TRf~xx#)crBj>PtlwwnqMsX|9sR+=>VW}^f`~yl_cs|rASYPo
zdZnmbxqY0lBzLS7@J$N)q5(cN*#}}0Ic`pjNW~f9(MF*t3b6@=z
zN9Hvlz)&l2dPSajY=c13F-C}&U}kcAn_%K-!Zm^+(^AX*qrE<+$=q912qMnyVpM5a
z4g{3O0a?S<8aV;riRPL?-3y8`O2#
z17hrxRXi`;`IK~Ou7){Q-?hp4F9!XL3H-$o(i_$b`$*S1X#jNX?Ok3+v$`Pel|W|f
zWa#-oV4I2Q#4BZs46m$^b9i#vpeq@cGL5qC!Y3juf;k8+R?gDRsB{_F>_4jhd
z9XmqRcZlx_?^$p~#anj!{Kd#Q_?H%OVg*y3t&kRi3h%byhwZ^u?BZse4T=}1x=ici9{-%tIqc+&0
zzB5N-1KWf*S|og0VBbQa4MB!*xq=sH9gVare*I>iA86X9-ajF&CFh&}Y0*p7uHgP$
zYv&#)O@%uI_Drz8$!Oue?BxIOkKjO%nGgsXJo7T%{r&#(Spy8FaAQ#v)7s5i%*2hw
zG|{{;D)ZSj_&~Fv>GQyRC>3a+Ncwcuzh*K%i71Hyy*FD1daEsIRJ?
z7wi27+Lf(g@ZPb&&RtI`fck5pt$-zU#mWPvM+s|hWvM!+sfp3egJT+wKjdbx$8d@d
zkLviuDmJ_@sG}0e`1$bH@}>l%YsSN6K(v=2bP%7b)_8p?l(Yk+wP_=&p#)>bNS~Sn
z1GTh0*5|UXy~?-+IJXWjRBXpQ(u(Ho^GO49IPC($DvutX1I|V^=-)&)+eilc57are
zL`uEQxxHIHO3?jF=7O2|!e-Ca`UPg}%x^5LKKwi*49*)GMB++nq*1j_7{=`RP9Q3J
zfBm>{blzDZr8Pve2~cvi|H8joIxh2nl#oPUl!DUrmqea=w!VRIh~9R=h|o01uy
z$dO@p_mODm_xtb!xUwOnpQ;Cw(Dvx_eBWBUVzk!FLBaB(g3rciMz$s4Nr4@Ww%Q$g
zZ*^*8G0QH|OpZd>4^()tV5J3+ZHm6%)b$2dQ@;ZIC3tId>pr3xw6R;hJEfw(9vS8!
zJM2snf0N>Lm3pLGD^Bg!XwaSL2EBA!I&y=#F2%yeVKhjnjfJJD7PT@UhF^p+m{@7m
zdp+(`VGm^F9h0~Km$|KT7E|8`^OwJC=h=JhRoeE-aV`ce3fmyogK#l-kmJ65maGN2
z{Y_coobn=5N^}@TD4e*3f4Qft`~Ir*@Q^lXJMqQg!Pd^REZYOWp^l&JXK4SmK}Ax<
zafeeFhT4RKBw8fRmXqAe>>9!*24Z4gaGi-0TUG_F3>+ZQH-Z3U7y42&FGa%S5rg*&
zJ%bDpj>7OQ)7E9D)zIP=(D^)?z}^|Xa75SYEoa(4R6~RasN!9REKK7O1hl`K(uh|g
z2pZbznkiDwvr#5k0<$YTAALIp{~E!PlYUR
zAb|b^rSE_8I9H1yeC2ba7HNUBtx%K>Phzzy`jxW0qOuI1i{J&!OkYKI!SZ~vIkvMY
zvtTTB!aHj2FX-@y-f@V)`jV0F*KKz)g0?VofoQ$MosOe7S%_$;QtxBDzfuYwE&L(V#4xCMv*}r$Li@_S
zt-U!Gg-tU=h0Rn5eF1bJdEXm-{&?OqAX|Hm`~nB<9c@T~i&FvNdwdN9pxuD)&#Amz
zmuzZ{AB-w{vmZhzAc(mATq%vB4gRQKkzdrksVYu+`$)p}x=_oi7A2E;p539yba2YV
z?0C{^1pve*_MEn=2mWZbFgD$`k`=vZ_8#JX0y`sTyBXB2-3_WirZo|zKw&3k*IQtm
zxRd^g8j?;g(uIsSV;XLmsC|vSZFU;QAtG7)fjPrl$;pi%g-A)V{
z-RQfvOC%Q|L^GOmf1W(v#$afQHS;gEQbs4|&GXz29ZIf;C7&KaJ`eLH5o`V=<@yvy
ztWx4j&5rFB*5oJbt{OYkkfW{%9;bk5wQT8hR$e@{-i2Ga8*N9O(kfy#C_&Q
zbbh}+@k)E4TrdlcufRQe@xf{Iz3GTWPzGlH`-D_cQNhNJrrF(l56zPH@Ca+qj8y7R}1TY>Ptb58)aveUT6VIgaPIMW@Qr>8$9
zAlAddK>JLSJ&g@p!Cu!=hJZkyub;)aKZVX>rH>JHlc
z|4MPZzrTkCk&=2HJB8?%3Pb+xNYvi+l|)Kaaf
zLRv`hUp);1e~X!PpZQ1n`gEPa0+q0DbFfg<|Nr+8O4D*S$ynU6A@zH2J&f_3ap(%+t!@XoKR?{scRkc5wrO>S
zVcvzr>m+mY=
z9_#KVQ>(KCvrtxKGev1o*Gn_|}!>I|NAtGc)I4x2}!ajcY&KJ?p8t
zFGuBC5h(wnnxY3q7H^4KQjFQx-3&aR`zGqevQ9dr{75^z%YCSDH)qb@zRJ7ex?U8-
z`70^8GU*ek_{3P#p}ML&1L$d<_}@uOjPKDA2TKqgb4@NmJ{ViZw$|$ArQs(LJUJh~
zm(`HvZ;~+3S#Fuj*7;&KII&GV)Lqm=(c&^Z{
zAJR9LfuT6%yb}CA*p2tJ(QWj=fEMzewr^f{(Z;Yj_Dvs-<_6&-9ov!4WLti2?Pvbh
z^n#imm$?$*a?kqvD8N6I^|9TX)ok0;ve-h=Ib*W=Ct;w@^O8JJTv3MPA5)A2>v?c>
zU?%Fb#Wk_2$*m~@2mXco>(q&p57wp@sUTBJSm=-0zSUl%RMB5)Qb!W|d+4hP7^kzm{TK3)uv
z`DHn>*j=NodU|^0=N*RW3|VLp0|^fDR-lI5=!okGA-_NRU1hE*oQS|p<%(2}>Pl~C
zq;eR6Js7m!``n1dwfMjX+XRIbDUMqg?7J(0x;YREhq5v(eZKxA^Q>h@c}+Qd02xBo
zZg$%0*#mwZu^XKRN7=;2%l4QO8GPM~)X8O|V4!n+*4t^zBr4)@{`RfM%nA3d56k1D
z(d>wY@GMS0lj(@`-p3)1*SNTXap?e?E5R4WR_|y
z!HDBa4V@?gfZrI_*xI;fZ_8~9#Kadc)+M@f)zjml0T#s;c!~JoyzaFWbjsfWF$0~7
zHc-=WyP~q`-JE-)94nQP){I7*KorilIWXQC8kk~SNvCD|ePm^%dN{Y&SqLkYcO(M)pF%d&EL=VsTfV7^LIGgg8Bo<6F&$#$
zsf#yCNKHWlu2=kK7v?$k4QjViXVF5`f3=Y8kz|mnYyHASy#;>mUbf8q@mt0HHz<-+
z#R)pRu(Zn`dD>BPZ8D{`VdwxF)1Bw`c1rn6Wy>y4t{JX0oAldp0&yG)0#wSN-;gTa
zveFXWi^JOaX+APcGEPZO+a!1ZFBv~sGvQnhf^VUz55$=JPSVd7g;(G!%9|Z*7$qlZ
zCg>3B?OE@KXV%Eds@NT8dE$kg375*}jfP{E15~|nWrQ{~A9DZn%V1ZHf;qw(1@l{Pjz}?~F
z*V?e!SQ;IhlH18lChCXVv&<4knjJoAEeFtkQOQE8^Pb
z(`z-juhr*jH9xj25Nv%09+{fhstOwmO=GEGQ`<|s3bvf?!zR}rt?(ealW&*Sl5UhS
zUwWx5cea$gktp&N42&0fRn1~5s~O?~VMFrW*5sX@ae6!_>3w?6?RXU1)CN6;MsQ@0%Z
zdBP9%20hheW=5Ifo04GJVTHf&
zdqr4txRps;l_?MA`bAY{P5vGpc%rn3raEqN&^1=FQ*-sqV2f};ZMr>1P55HUL0QQ49;
ztzyP9l7rXv;x?z6TAGFCMF?WFl68eEs}s5x;g@w6wcHvr*9})oTt9wK=9afJfoO&_
zRyD39_-aI^$Wj;o1?{14)0-qgs>i3lT&cDrFa!Ps_{KAs7?nd~7C9_qk^d
z#NnnQ)=A5=6+zwYNt$vPg%+2Ri)BF~B%}`G
zuA@df)BQc!B)OZLs6TB@Li{NOMRT^>gH_9%pDlUqx=Hy|lVT`~ON_0ot+7chI@~H?
z(QsN@5U7V-SeN*fBubE-O1rq>ik1xurLwp1+C9m`zSu9$Rmx?dzm
zVm26*Q^b3!m}qNSPGY`B+Y<32So!o0_&Abf&tVz2ciK+K`k}q!GE;Qd%rus|#Kh7P
zc7=`IJnB}J=d%7gbT@0dOk2ut>UBg8uN{|7vXT0$7BBa~0)@ns6qk4J$Os7qRa8KM
z(VPR)C(CKuyS!)J-Y{+(<8&=)SW(yg3)UK$cX2$t`1Ug
z720bUCsKcVfEQVimp9R5KOce_R#>>4#7bC!kuJ#lG+VJQBBCKc23RN-rl%4Es@q$D
zn6gxG@8|FGABr^`HRT9dZrj?_i7>j<@=WmXoykRg1)OPkIj44tvfd*h&dlgwlTT}E
zh1f5b3V-rn-$R^jV}5HpT4x7|TF_@e^)*3~+i@zLR9^pJn46QDhlh^0P;{5&YsEEe
zQCL@4>#LIrUKa~norN|*caD=4GViO
z#ObROzfvclu%~ondh2%7?|bpS%+D`U#7FikW#6i(!^xkGe%a8c2Pvdf(Bk++>}_*c7FU^B;#()MJy9Jnmg~I=nUwJ6@VwzEe|!Ei$4vRG5}sZE2w7
zEjKqW$+5J+JNpkY=stZl0eYo(&IP9@Lrq
zQ+v+Hi9|%nOw6YE_0ab?}HnFbLQcmo{km}cpZZ2+~H@Wv2(Z4Q{xA<
z?XWYb$`E`J0Qg_&HIcWr=!|9@dK|q5&KMY2_6|PmUwv0o%hj7+y}K29EldpbBBNN}
z>`y(Cc@|jDT})4>EG)Q~nogvq#=SJQWmebItN-D7eUK*??~t2>1+q;jv&SKQXtQa?R4GSVcRHHkI)`LN0{C+EP;
z?K(iN&9Td2n(kbMkC%2gED>K)-C15jq9ZQ4P+6(N#nRKP5Oy-E8a*m5R(L*ls=sodvszlwOz2jY)YF!=4@hPhSnu_^|
zyny@Y!cyBEp|dkQymxwfJqi}--Ciu6vrmhs>()vKp1>2zcar^75Z-(9wwAWGsr@O;
zB?iwY-K3GE_RX{H#fI26cR{1(am#xbZ&zj*`0yh3W7ReM^yw@NKMpGOc$0Rk9zcnl
zAxK+Pcw;e`@R-aRs9ipOGzTkUZ`4`3e*20RW;xuJ8oyt_5=huz&mPXkdi&lNC08bt
zm%oR_xad;S%3MxIVW#-vE|;4=ne~;16=bGNDqKTH=Nw2w?JQ+j?|uP7KzKM_>Uj|}
zF<(>K*jS=n`Hf?``~h;vz%abL+!KvM97SAkZ%H$)=&H|>sGJ;|Ojs4Gu7;sDi@lox<$Rul`J`-y&)C8eB5GUJdL
z`rZE`@2$V8`o6Hy0|<(A3rKe(-Jq0o970;UrKLlVZjkQo?p8v&yQLeX8}9P^8SfbP
zhxaeIcMpa`@Zi~J?KS6o<};r;*F*JGM&L#LVhn(ysy(FGK8el_+@l+
zDf~Nq6IhJr4<`~6ClcS-^@=M{+hbzx8-G5#yVHw{ou=44k8NwKArV|RF%2b-!d_NZ
zQ`cpdzt`0Hi6)FKDaHdf80*;~jlx8^9*ctXy1HsKrAAr?8l?5?Yz8HhlKwRyg3%IS>L?Y-(>X`Gg-5%I=NCmyE$(eds>5V%Z8M=%
zG6Y^KCvvZ2D3n3B3rx1GjEXYt591mt;fe-Y3tC~?U42ExuKJs}xXdED=IDd-OAhF&
z@Dr(jC$`N=>rW9#6ck#M%02pJ5LfB7mbwzz=BbOoN|!WSW-
zJXT7vU)^HUzXQG)y?{)+x^nvaufOY4!)tQ332AV?RxRO^%g{Z^*$Kr3R?b*bTDtWo
zv#>-)k@m&=A2c+vWkkr4U0LsvfU)$)WovcsFIQdn7f})DKOUy65pcZ-Pv^p<)3hY=
z&qV?{RDoB%WA=_JtX%nheN%A>c>aM6%UPiFeX70v&JLyuKnweHp*U6L5MGxt$9)wP
z_xlRV#2#25a9m^zUWeHJW209&CITG6!|_afJeO6U{Yq;bQKpT!R6-serae_40|;h@HX0Gt2K70(hP6epH7sfF(M@#5*xpNuTV
z`47y`N2QzrsIsQ^&W^FL*Mr3}9}!-HF3MM@l~BB@Kr{dkc{*p+mxdd_katiA-`5BD
z#X?5fIREPn2tLuK*+@{9&j&(=-mvUxN
z(Pi)GWCi~ufKuExou4uB>9P-y~kqhj6?a_+z
zr{a{@ivW}jb=ADpRyy6-n>{$YZ0^`C0oMuJpZWB{&z@AG0g(5U?(U&}bP96Ao>!%}
z`a#nzNm6PWNu;m(8yb`3Q+`(zyS2DGLx0ucj(f_hy1K4&0$;9@o5!j7=|Y}!9L1OE
z--F}%lA77vyg~tM;E00*DU5%W&qhJ9wcaCPc|Qa`yIWTPj7Vn@be+?cMb{P+Yuf$N
zg2(9ICTJxs#c|EoMGm0wOKNemC#B4iV%YZ_3zlwv(%(J2K)`#hhXWZVU*&HWM-xGh
zIotZfa+!pX<1nvwTYU}frOfjk@yJB{2;ya@y@}n&dy4C$gLVV|O==KqTbJt?Y@Z%R
z&bNbCL}ma~9d|EqOidjU6u?x-XrJ!rnC|okPldCmr|IcQYG)L!%}eKkpmMuXqk;Lh
z(?7E(^j1~X%HbTDBxA~Qc0bOJ$K|idYP)kF>Jb3<@qTdOJ@nxb@@;N$nTis3w=h1f
z-@f&v@*>j63#1DzTl|96)zIi;=@@&1JYG`V9@0=%b=qjh=Z8S|hHw@er){}L@{>Bv
zfTVcoY^hX>8>dwlg8TtW|bai=ue>a1|_5-KS<
zJC6?uTUx>#O+9sXZdk1LFDgsJLjP-W|J9Wu2mEdTPI602pv^Ktt&!CD!7O+tz|>FA
z$;B)5LM1%K46T+9t;Uf|-gER6fW$)Vcpmx|Ba7d~w!Fi;yrZL0(^^t;oHyrS{X=Ym
zcbhd~c#m>j{Wc|afc47I)OgX2Xj(%~UMoZ>w$d3hg%^xlRQmz9}yPg$&W
zCc?eUzB-CkRUEUkEBYvhqR~P8DtnF4`I#!VKX&zS4#WBI4OB+P`R^YPfz&N$ClY1*
zqbs*b;PG)~7RTRlll~c>D$;zsQ!+A+V`OwhK!Jt0ii)ZdrZ_j)1X?fTa(nPp)N-6f
z3h%c+Z32HtDNdj;KCr$HzV^#F>>WU#D8*BEaIVA7kjZdNDnjOUxlYq)x__xw!F)r-
zrdBuD26rU9nBbW26g_X8He(g<8{5;8_b=0Vvdj!Ho181218+r&?Csq|0|&hC$e%_H
zQ<6~HTqjqT1wW6xg+v+GyiDWW;MVsw!jCK0=|zBtXVQHzxxb1eOippuX;x|7wf#$)
zF(}vM^6qki3c~tEP}8O_YPaLb!i$o8|LO|tw%+ISNHZlhss1nbSLK88!AO0TpK{>f
z^cc0`50BCuk5kR^Qj;~i?hk}T6`@d@diPUVIABM?P>zUySo&d7)`NnctDIMqlqj{}Ilv*4?W)B}c-f*w*
z>fOLEwozX#FE4J_aXP@Y+Z$h7>k||G;^F%KJ^0$RawirDlI0Mm$oVEDM0UQ@p;ZY4
z(Z~TuzVP5fXQiii4g?i(N7LxIpcmC(I+JaEupqj)4a5X
zP_-suI`Ldyme$tZ#b9bMF&QHvnIJLmhfh!AAR;aWAi%@HQL(e@KbLW3RTUSnAE-md
zb|QVpP@A;z+rTRE|s5jE$uz%g!Fpld<&ctPMH4xw)HA2LF7vZDO>r
zN%z;awYau+;lV@P&=978?`<=#->=V4_cx;{W^a(UZG7c8kP-ZDPd4z>9SvCDfWL!(
z<*f`303Q*2H+lS%n&98hSl`IDY|!Zad-4Ciafd`^>;L!qTK@n0%i;dL!~b4>glhHw
z^%uX#V&dW9Atfb!_bxj14Iv>RI=Z5U#w`oIL>xF$o;9Vas_IsucWf|6BFvL00j6Y8slCFJGd8Mhm@}
zZM-*pjFLvX9k!qSg9C17qhex`*^CFgHIe>%4Gnsgw$HE6LrLttqoXXs!X0^&V3;5t
z0vtvo9L_kU}zIYHI2&_m{UR!_;g|p7&Q%MNn&NYgJX%%gam2aDvP2;gtF&
zCrs`yOSaDcE;MB17Z5Zwv}==)kdVHZ1Qxxo&dv%SKf0W6%RN6ma&mA0-Go}{r*GSz
zEG;ZRr!KG69IJzagR!x(gTr}~!;XoOQIx|gWMnbCv(r;MTU$j{)uXARNuZ>FSD|NQ
z)ULPED3DK6QB@5O4}Xb9?6Ea~Q!Vo8(_Du4(|nm0HxnSQ<>b`WXG8H=&Rhh(dE9tB
zT^`JW9K5istSm2YYkl2*dnoDmZwW`oqlLO|Yg`;04CkY@wf7@NdlPxxSzrl*8AXFt
zJG=f}IgO2TKpO#6DNv}xLM<3xX56W9>e32EGlC18brL<>`Oj3hJBY^_`0$uCyEjgm
zbz5oA%=Gp3D|FkKwHwEZpatOJ(bCf&FVqb#FYEloDb3B@>IM?HC)Kl^fYG*@D)b=o12?>EV?&$cc{by
zjoH}-KYd^{H8p!9Nh*qpV0^&G0h`_H{%W|t-+UyMSEt#r3D9>rIfj~=1ks|px*#cF
zK_%j=bvZS#v^@Cb_p%^2S2l%{U3RGdEkWmC^Av-_#=q;C1#Ak
ztkVQ$or#HwWLEvoM!SuW&`{8=-QjU-UyYnGn(@x?cd15AOl+)VB(b33Z)AM@B;ltU
zze)mC6_ubxBi1+FIwd6~vFA#vs?$?bDoRSOr|a-;9;7GySBFX8X#)Rw%^`1whm7&DF-1kiKj*hy0VwPo9GkX0
z9zx!C7kiMu$IJYb?A}ivkhvCTmb=*A4Y_myd`N3sTfc^&_tRU*=GGQizNM+D@0h^)
z+1c4|J=#Hge_9$*#%M)ZnfPy*gu$)zTOa~DK0X$sMk5ijva+Il8X6pgDk)V}SFa;w
z<>X9eiN0LBQ2Qnk85KaT(eQ-`LQ6}#)M)4T@!{dt!P8SPV-#Fyh=^o^6cmO}54U0i
zTZ0KOB2rRxOiUemz$k7OV>9x`n}r$b=umRdQ$_kM(2|iWCRL+
z{*;db-cJG$BPiDh)+QQ
z&0S4-`N+fsCggkEdpuYOa7U-~{|hwdtJ0x%;{t+$z*aK^T*<8_mRp<^q@>KZ2I6S_
zC33R*S=Q$HAc{&#ypFr*vA4^6a*~q0Q&ZTF62f5P)z;Mw4-M@)@<9LzfQyZdUJwat
zLekP9H&8vj)t(+IDyqEJR_)ZaTQqi;zn_ij$(z3((Nj>sLBOyC&$|mU8B`J>?f37$
z3491hbc(mqx
zXbwo58*-$+}PN_!p8oQkPwKgnV*{rfrR#8CWhT}-ySurYVxV5seJ`&
z7!(u)Oe8;_8e(Q)VNmr6)&O{fZX4il%+1ZKSL1*U)Ye{<>$FJA$N*9sj0@s#-U_R1`ZAtadGf=;F8eLz=u3}y{hdHmEp!AA+fQvYyo^PFi+#
zPi|=F_d7MnGRs^MG(!Xbww|R+_5FkZ(#IX~A4D2orzL<4rEuHyMi8y6tZa&HDk``j
zVSrW57KM$HRMQ*`#-hp2&Yl4=&}LPrGk}oS-pI}Ej%8<_y4DfOpkB_%#N>IliJ06e
z8kG7R*9X=UIN9|0cw9_O`|IOnVDret0zAO_`=<%I&kPR_udeFp>Jq2fgYn+L
zp^(4)!EE1ev^cRq|LuRbB|*M^wL3LFjt}A@u;2bH?eMTL;9(~wC;R6jj)N
zs4?*wgVHMJcyCVw+&MbBNN!(WUt?1f4lZsse9Eg@>F8G%t7@b#8PC4Tf{#5oG=xoO
zWp1wV=@Tvb_tHAjlR|L+di((U0EG0mDU%HKEze)1+e~y~SYFW@c*JaJYJPq#m&Pvx
zKj^?%N)UrKyPKQ&)*k9=YhNQFd0P|Ca8+P3;v)4t{k^<=^q>6CxL8D%#AqPkKAaBc
zls^BlIG8E>_3M|z_Ru_d+HrBJW@fu1Y5c(Rzwotx^aP_>94_}&fkKps|LgAFUK==a
z8Qd(GHNM*JiG`~Rim4qP&wqaT(a5LLGB8-$*sxSi(&7L>x4pGhXS>!3kAzFw3knql
z40Lo#>Nhv18_;}NjcOyr*#1_4Zh&8nI@d1YaoV3s<99Y0Nu4i((tu5VeX>fz|5a8&
zVRU#H1rhjE^d4eRvEH4?lL0`k-g@!k@)DkLYB+`a9=QMImWJG1qlcT**RNlno}Pl8
zd473`GiUELSE&!YE(i};)Ut{yDk{p#{zfm0f07QU7u@;)8
z|GEfp2rrI}{Y5G;{0H{WSA9g#QOTJJet|t5MTvnIKDx8o;jJer8Q2FB<&p96aafJ4
zcX2u`UxUN0vNAJSUC)dzT0{d;zkK6Fl
zd{Sa!rp7o}n9yKOas(Tj6A-+CtH}v{-ThJ2ZoE(YJy>LuiCihMs>Gxu|G+@PH~%hl
zHZzw!u!T3Vz&O!n$GGb9k^iFw*!%FXcW_{7Vj|%s3*O((&TbQ$F5vp1I~T;_^z?Mo
z(R6qpa0W_L&)L}-c(9_#9WVfrz=3y#=K#(@uic|5D~s&)v`j>Fy~T8KJiUU83lAA}
zmGrAX-NgnQ5(t1YuW9`@{!4DoCqHzm{o1lOG&BV5W?;}uX<3;!6Ba!{idkbC0L_@w
zc}cdAgAN>k5WyoI8HunWeEc8;{Ime^D42Kv!0@NctgJPFtY~qCle4XZfye6Z78A;_
z(bqp6g(tk9Eq?JIw7-04{y!<2-)-Q{vgkNxt|Cg72ULcwi>-vWc5&X=Z
zKVzZ%FLOiAU;g&LobR7Oetr4>rx(kfkzh2eJQrMmW7q!|S4j$HIq=rGiN*hKtMm&y
zX`tM=g#pJvd1RL(!E^#a;5gQGf6QzE8F(Hl>SG@kMJeRdNLIqP+=s70wCju*9*HOW~zh}gO=MV^l9
zvBwe+5;}1@r5?Toe~xE$PIL~n+K`Vk%>y~?bfMFw4GAtd`yOlvD4OU7$po0LfWy>&Udfbnc3fz
zy&ShT1T>|In`7hp_v>Y1GcRjj)H?R)9Yfa(j!eJ0g{5o3+ZI529$
zhRb|Kp(=?Y
zvU;AI`{UdsE4nM5QlhFkRG#b5jS@@C7npJvVL+|hPq*%l2%#-u43!BVWf~|kQ7@q{
z;`@56ufLR)7aH>3ATD!7Cdier{uWA#Zsr)2JG8kuwAooru3?VP&%h7%6s)NdonXj-
zVii?417p>9BU>VOlKb2-5j5lzKg(@
z80^e1Bkl!HA6opt^kP@x$q-eK5P0SB@xk2M#M9$Z$)51@Y;^+3C;W_fk=(Fdeve6C
z6b^ziRW?i<1RtLggJsB^nvs7#u
zyixbA!uauOGiFF`J@xxXtN
zi31y6K0H0=VIX5A{kF;IRr#Gx%ilkk34>J1xbmsO?qM(Oj(-gXdg$F^NJg&mG+A7Q
zyn~YnZ88vr8cK=NwM2wJBEjq)$ybdB@0{f@*a)@axbF5P`?a-P9Q}ddP%l~S)WL3WoKc7WH!wUK)9hW&L6XZ=;
zzXnAY$sET?NMKxU5MU4vWi&LMcYO}=?B*tmo5(3d#?kuF+9{Itomcw{xc`!Q56s9v
z8#}f<;6c)t(682h?ov!3GoRl(i1_li*>UXm(89vh>;9>!YKo2QA!ONm{!1ieq+-iL
ztdZ-zMN>3bk_D}KYrR%gajC6!zYdQFo0Aro&(CLq--p&pBsV58f1?nzxSWxHC32r_
z5(K*kIN`oLYNddXPL11n_mLB*vf@IAK}A{9@IfIrf19%nPyOEU+G6ztn{|opT!JlM
zxKQP+Pgv>@&}P$*iX?WaM|9`?reM&L(mho*s+`peoFQ6vdEV9epzm9ISgZ9UL?1#A
zx&X@B6eYg=Zby2Fy}5bKw7N0ZBx&c`{}lQ%-Ty}GjdLQK72Bo9KH+}CiC(mNs_?w$
z#K(rUkh2h8|E3CZKg4gqS2{mc>HH~88TE)^kGKJ|jM@
z{&-h{j@qGT$arKq_0~hzLXDuQrm(nt!NcBC)NrF**!jZ2al^K0mPGG)@OmI0OUuSp
zho;2niX=U3UEDmAu;}1
z`t`^P?~c()E-6iB+3J`y=cpQ^)C
z4a}|HKjcry^nDyeKH(o~va~VOp}-N3EA>5OZx|IqLm5+<)D|$taFWx!Tu1loZqO$b
zf}RnzSS?)c@d#r}(QG?A`?lWbA(WV2b~Rftbnddg+(1?11D
zxlHzY_KKHFN?e9@whc0*$GC@OrGsN^MsKew^}Q*;16JotY$o$JgbH6|-?9;V{!{{h
zqjL0o@h!7yKehsgk8roEt(EkW-_JmpESPRn#}ry*$n2G_nyNCq&oE8HlV*)+l|}`*
zuPU}G*N7eq1rr>E;tqARZ@Bexh=!HXR;44_NS`>e;Urs~?jgEIDM);GfCfhhW!d{P?Iu|YDa9*Op
z1vc*7cFCw^LLx)Vh)bP;-y`cTo#5QANTw`FA*}dAw^-Zot=>sV2}#gI%UsKkAB#&0
z(T)W_wk{Bb4Qa(F{ZPjiay;qr1V%sPRCr_cj2JKf?3dVy;A7{9yuWX$aGUCieRz$Q
zWJZOPS74K&!(slbKcxU3m6Lw4EOS%q+Me6r#J1`4nSB`@N1$;qj!D{K4mQqHH=pko??CJ*?r
zZ_krJ=YzPu
zS!g@Kd${Dp8M(ZK%6B#M)wWo6A@u=Q-{S5ipLwrtTXv@8YSr3!x+zYr=K>Vo3xH+6
zj$EM2@wwl#!zcJG;L#
z*`vbplTFkQn8$-NVmk6bkb?dI$aijsl^|T=DTHXs@(6{2#~35s?IID
z=d-qli!yJ{mW9s7t_Q^PpxeufLuBF%)5TwE0T;`YgY7$Irb5wGO0cR&PlGS_c=z1n
zkC(j1Wj6gWCos!}+i)@n^i~yZvTfMxc3(Irkads$C{=;%8ch0sRD!D2aMeY~1wY1L
zhad8tuRjh-{_+B?FC3XphoAYKAKq4*U#>sO;G5&4P0Y26>3(msGP8O!@7yTjW~XtA
z(_smaYut34W^uBg8(Q+^BJwvo!&7c5WH-y1S509-(M6@@VIkrB7L($+i&(J3K4vAB
z(O7j;9Ot3uP1+HOmXDt8Tb=;vIUg@*&83ku@gH>$L#2}XU)!I-xuYg>doj;1)36HA
zZf>*y&^9r^rh%_P2*fpA1+RuqeyGP~G#wEUV}aDN#o7LED&tKI>7wZ?00SYkbSxMj
zS!n56PcKYVmICe7nwqPd+v=95^kbQld*2v9*I~PS4ZtD1gVHxYxu?1DSDbHX8!%wI
z#38mf0~nr6k9K~)U#FO@y~AMqdYM{Pqh8yJXA%f>
zfvK_*(D`r%MPJRlc%575&S#OofMYgz!~18-i52Vo3nf+1z%
z*GUZvhKJ-fNJwONGIEvVW~=DQL_SoGi#Te^YcA5urj>Zj+6Z?X812lBjx*7*yY97b
z^{tXX2!K>VMCq7@M8R0x7=nH?#lXxUfcizarY1ADQZKT-t@$EMCj5G-X%o6m
z<5=6CB}Bp9wK5`93v%!wXu0!}CkOvj&IWIn@BB+m8*nqTiq!#nQV-Hb|2
z1(uu=V|*v_0=>)ltG|uzKs)I4eJT84ewG`v2%;unoxOVj;nVVRUbsn)?%p_eTi~^G
zUHY3C6!^Z~MmV6-(%a%3q`83j=h_O~k(9HRllYP!pPZi+L8eh%-_A_CJ`JqCB4So#Cjoz)S}A2O3C3hfs#QS?ps9
zE8lRX%@L%$VHblq&#vNUSADS0nDPYAzRP?qBI-x3TMS;KBD)@^OjtUu|
zmw^${lj)#>S^FPy*$B+;#Jtys+&o+k&OjGILs-DIT}6?x`=iq?eUS|%`de|))nEI?
z`*oLfFj*`_{Lb7HoD+)EKBZIZX9nMx8>vDVq+uYQQ(jUbbc_rH`vPwsHMDgZ8PC}m
z6`^vIzv@#0icKtyDe1Mf)nFmJrLF6&U{_>~h+=Qz808v|WpSw_^7R;t&tB=gn_)-r
zc?Tysx?2Btw{Bzh8Vr{O4U-VsCs&c|OdfD_#Fq|;?cXzfC!9-jiu{mPF@5v3C!~AT
zA1chpJc03e)7)H)%PofwZJ~bdXc8p876Zi}z0Vqy-b=wieyGJ~3;R*%3BSHNSQ%gY
zQw(QcZ4XgYROYeVIDAY%UEy^MmB<0D%4fG8f^y45rq1x++eHBN5jJlqupOR3q1=!=
zlnbH`U`M(aNFboZw>WzExk@8Y%{?nv9m3V*H{G#_1$J;or$(86N=
zUH>~0tn9SIw=^vZn2H-my-~g~zOU7`7SU{KURMixrAQ(3W`2l@jZ3Lo^l2UflvBzIc!Ue{{T(J|@V
z`YRx9e(~cJ$?FjB;mzZW%Jf{d8B_+&C0s82=>%2Qagy_b{4u0
zM1?!N@85No^*SfyTc>Mjw=|*e$Eo~~*I{42KX&b`>F$00DzA_F&UCrkT(k8c@@=$R
zl*^kXt$#dpS;HdODp0)o@!ONwm{^Hr
zp()VkAe=9?A#tZKag1{}dH$s?wstbWBa11rDTIUIn|7~61%({!biiM`gZWb3N=8tF$`Fv1B1hx%80hT+Z@p19iW&jRZ{D_bF!r))T
zp1A|gb%GHoKqYc_+&}%t#py>xmn*##bubp+x|wq6go5ZH>~Z-D(sv-DCyo&4<>l=%
z{42g4n$Zf{Vx}4mX6y}a8%k@3hLqT6h&7(CHncV^wm%=B-|cyd>>_pA9Lgxmy2&Hl
zYF_KEy!3H$m?gbOh5*J+vKgi0@!^YwT5?dQRU=lm@xmqSb2l`VLHBeoD#2v8Ip2}Pm5w7Vh|dgPE|)%h?aUcBD__<|xHz;awEVQHNRoEb-}`)J
zp1~e+_WCR2KbjD<+a0ebjgp!8g8MunrxH#b?KBG_1rs9Sftm-Sx
zvNl#l2u2rmB=cW68=+LrmE!4tGs53rCWu4ur)6eAe8$w*w<5DoSCP$uvrzRN+L%>%
zgZx_&4}&;q3I})ehkh)g-hHqrjkcQ$FArNH>$ufWX<#$*-e)srDyq2TIJd3wX+Tr{
zE5El^F4J>hGRl#te(d%)Cl!;FJ@T`yLGjk}7L{;V`
z|C;F?Ickk_jX6{}vA3{aFpG%;JSj#E`CM!hlb9Z4q&VQ5#HF0b2b-1htS&#DEyOSgJExk2;lpJy4OOTVPxOTGA^IETTQ+tcS-fdv%DkQ>9o0V8$j6
zB;+>$qVW(Sx$%I|(z77=9Qs;OvKOxg@xwSjt_s?iS=b&<{SGMb92veVwatbC+QI2;5J`zNpAAQ_`C6{DbiBcu6V(4cWRiR+{B1l6v)n2W82
z4Z<3(5uvKJMv=-?kWYh>0IvFv)?hb>!RM=;3O#u%ffWHVc{rbB&8s-UglLlf#`g$$
zIC%*qI;ZZB-416TAb)ImEF(%I!@}PRo25E5te}LWD69%;c{^?ZH}i^H)tqk6uLKQU
z-SKcK2O1b*8ClwK^QU6`(OdL*PN%db>Ln&fPXJx8417b#YTdH;F}7E=nUQgBA=zsx
zcq)4l>RNQf`K4C?3cta#86cW2!o}pg9{@-M$#yRsj3Fad;5rP8
zZR`O~bu3%B(?m_^D%yCZ06KWV8Fv&fA&vxX3fCm%zn1y=0H>8ZWVBY}ORhUTGyTM6
zmHU&&+t>*QBJldk9s7{RHpIgL5!yue9c(}X-0Ftvns*Hv^)@}xmc1iZLQ?VLGh+x4
zK(Q5!L=1$`t3Q_C-mFT*f@uQwkg@)3iuuuog0{&mN%a`Ej$Uj}f-^>PY6IX<7zEWa
zu^Wgz@s9ttK5a?}OEyFhS^3Ak@DW4T7DC9->iwc_P7Gd
zr&N{^9+!z6+v`d!IyyeuKpNBtlS2!yMg<2k+1vLm544g$?bFf1h-esVfKp80AiNKt
z5`{7MU1a%Lm$Z&nc?0JH#y;~n&zm>wIk?<%K*0(td<3fK04Y*LvhpZwfXFxWOOYEB07
zbA)OURA}~|k6qX63?YAvc6dw=Pe8UuZBz&b^t^`w{>}Sr8{hBOn}yET!~jdusvxp4
zxf<0=>j%^J1sCERYI40JWUzI9B)S(wI(?3L>nF>x-}XJMR`wiI{6JU7Or6B1V+m%0Sz_y>`qF05by!=OY75
z19CdLuSb7fMj@L`RGWpYJy?5
z;Y9swsN`o=q!0xrigQD%5udWP)Dy@mY+&N|M#IOB-njS^6F1&IZ8MwVtX
z+PikAT-c0b;W5X#Zn|#MXcO`W#=M6O#?@C=PwTlmAP4*!PU&kDRTK~{3}+P}KEdsX
zkUr@_(24eK@7CJX{{+?vi!YfEl9`(+7NIGhGyVf7Zm?uvT!rnn6wpbKpF!=uas*ov
zU$4kXv-Oo)>0na%_={)+ZAvNpLIyfcTWuInOJic=_^Z|u|8^?l
z<7+?)F>yw)F;XyhK$(O)rCf4`nEb8t7oj$slrv8fc+>zy0m~C61{#-l_-{
z8hu-rE@l*mzA6I-u7({pH(ADyYHMoiX6I%W7UvS2of2_090Pt%)-NRFUh$LW?)I*P
zaa*oPPV6VDK2X)rlWbRmsvRt=c77~#@uyOTYN7n?>c4c?V`6ILixkn)A%qmquO3WP
zTw)Rw698A$8sQe38t039PtsvmUEO>J^5@M`5EWj?|M)~DqRjGs%lamVXXA#wABDU*6CK9}-7kqMG
zOrZ8vKcYMz^>Wv@ew&MfK#p{qE%}C&oYRq`0p6$kqGA)W`VoOBo0&paAJoYmL~Fv9
zhSsYMj<#*?Zl*GRn1l2sR{dhKGvi_112mp{=T7d4#k$<+<5npBXTt0mRRi?%%Q#&0g&v9LTEDppG@qwNz15
zCS{;lj6tDfVX!GQ1o@i!>YNCVHBeqitL1^|Og^6R(J2@i@t+M%m;{u=mxx}=Ac-Fj
z`r(P}9l&R@83
zwuql2C1JhLDvHEF5C|4(yYpvht8yUn^?
z{MV0L7=`x`F-n-yfI6@-{|@dEJpn~5rE$hAGtriefbTo7x|5xaWCa}kv%CD1ll=F
zkVEKok}F`-!F9gpzPmnrIs8bv4yrsrhAlD*BZ99=HC@i7a~^V@gVkQKQe0NyiH}Q5
zL3OnLcbTcHe?&@G{>f>IaGjt3-J>PQMZ=RgPp|UGMa9>iRSw0Y)1GnYO85{eR>iH21_o#cM&}~Gpr-}WNPyHHH2LP_>4g;c<}}1Hi%T4
zNE_y-aCgQ>SE9>+-W?|#P5l-5<%hsmp4L|4s3s>D#mxiZ}kE7bw$&&VHNn4J3in8KuB>_lkk&aA@(rTF3-Hk
zkfCJJ0URX%*8qN~YigKSe3mX1#)(=xzx5VuMTT@n1e^#5#;L|%9*s-R-H^Hv6NubB
z!a`mJde*{rl%Dnax#Qr6&6HzaRG-X`&H4P+L?8W-j-;KPn|(3bHaK@#*E>VB_t^+F
zdv~#|0vo#jKB_|GJM6krwre)qgk}xUECCj_JHwGrCo`rZrR9HpN?`zEGbZv>Xz0_>
z<*R)DgpLspDhVK0hM9=<%{br<9OU)bdIbqHzZ&A4ddE8T?&il$k_+xz=D<(sj6R9~
zigeNnAM&I>9#VZb7V><20L35&QFihf2#zr&7cHRT#6Mo}qo{`K>bx+FRW^6TEP0XC
zYZFx^BzuGI0<=aDr?fM3ph7};ry6w3I*@9WDgny7<%5oPv>FA%cb6JL&mdPGETQMqaD0frK3eya0o{Ky
zqra?xqz~=`TyCPWUz+%f4WOv|#OrW-eC}@gUdg&SbJP$N?k%
z5*F+&oc?K(U){HW8q{dE=~=StI5684`z`Sg@8*|YX?2`v)rXS^tgze!gG!Ev&}dVM
z16D!5@TRMkbn3TyuV<5k=djVF%~BQhmw28`|H?J7Z|~{J0Vh&7_rTG)rxC>T=?JP?Qt}RH_3sFlgXQ;cKa34(PB>I
zbIT6U&5UNSszX&bCTCgHiFLq#!^Fr$X%Cj+F7%oOFmKAMpKNk1FP)S=Qi?|~X*7;3Y8k{Y6I*w*Ko<~po7yh6h^ja7$MTfL(#5gMG%GG{mZ!(U1&s;@Y;U}5(oMFF
zfo$&mO0w-hvN@n5zz8*!8q4%RA%$USQ3h+oZ-DMQrAzm2gF(}^;mfh6!JD`kwip8JUo}xX+RV<0
z2a0R2zN!!qUDAI$>;upQHWsl=Inh85C=xe7#)WWosHdpucsFB?khV77`iX^-?_z1$
z;on^y;P(&o8E+chw0RA!*@Hw`?xs?Ck4pYF6$mSjfTznU|Hc936Xf35OECqqp4b3+
z%HKd*e&T-J(>7dCFZV_u;=SpMfS2%+?eWj^dQt14q8=$QW$=*{P9-H
zo?lKvD@AGr7C()e^~M~*R`L0E>O~7j0BYzZgzqRY*u=)T;b4?V*PCd;`4j?SeG>+<
zU_`P0%A*Ky3fv5?;@^fikdJRaueTCSkEfrlQV4E!J5h
z9sur^%L`!Gpa34kf&g?pWFx`?-)pBhB0+ugU@2V&?fC=UKK(u+o)!8W=`D!pxGip<
zD`3b4twA+l(bkps7N{oskYM?=96$Uzpj%M^@+(j$560IEh5{N7h!17EQxsK|_pIjW
z$f?;bCfz^em&hed*QiIo6iaKlT4}Z22u>+zed7DB%qYiL&%E#fJ0dIMSATf#l^);j
z{Xpbgc1uCpBtYiDEbLIxnyB3|pxwcoPbNq#Ppk{mwg#y*V0-%bWv^=;H2F>IW=2tU
zf$RsPDmuBCK>mv9i%Vu+K5xJ01OP8lHrc`L{q4prh$IyM5_kF3=Y$iS+8a?_wJ&=Y
z!ouEp2n#-S_sX8m6h
zRo6iF|8Vw}VOe(F*Y5=)DcvC=NH<7#BPHG4A>EDANQiVuN`rK#ba!`mce9tz|E>M*
zz26V}IPOoka49F}T5HZReq*kxE~Ou{yFc=96MDSQo^u4BuK}(6B%E_erHT+*1Jk7|
zY>4oxtxfk;9ntVMrq)#Jg_LA#F2W&kziWokHRAX;j4rPIo+bC|Giy?iuXG@Y#@
z>NAtdtmuOW?&1?vG;|7zGZz2OY8z`ihk=mrw2om8rTWjMB_X{r<
z-;leDAsHd9)yOMp`3F7G%g|{h->lhj_O1K`eq41y^=S)v2`KE$woO!(RSIc}2oCTO
z+&;3iv-u1R7|xWxJnPI%PXFF9wsY53^2Ut*%vwuTTGym5E;Tz+PQk3K$BiYKeS)oLS8vze0To0R8?GifE1{=ZoOKn
z3*zk7HgR{<%4mQXJ{hYr^kztN|EBW>10t`epsA?a{>P|@x(KY`u*+kb0;(bUL6umw
zUHwTRbfe-AWCum0bd*Qj4|8dGWp(i02>RIj2z|;-i)V0m%9!~$zWx*F
z5dS^Y(TXr9`d}u2`JcoR2yV1O{{QASzLksU2E9%Lz-CSl;#ye%G-y5#zomW~hvrXT
zY5cy5QwW{}f<44`_91m1q^TBsKq&XivOfHUkwe=*fXw4^VvQV8As2
zmjV#VyB&a9|`@TFNh9w3h
zGLQzsfE#mId>G)mxn;+d-s1BNR*isC-u0l-$pf;KH;
zXcW}+a50`3Xa!RGjAs+)IOn*+!cjkzqtwQC=XN8|QgAsr&9=DFLMH!Z8NScn6F@di
zwi?wJvRBRu&e}cuQg-o?PVyJl0s!z@0u4754DsM_SvOU4#=d
zC={|uN=Zn_%27m8R6{`?VJvh^g^kV`+u4(r2cTrC)H3ClVFS{_0)c=6qV1&x;lQQo
z$GnyhLsUTc0QvKWQf$v3qXVnGdhWWg#o*+D4WIC+=j5cx+1dP}0y4CFLZRk?`xHq4
zvPdTyW^dSW0wh?eLJ_RYmU!J2V($Qd*Ke~413dxeUzf_^iFmFA4T%^i*=Pa%gkX(g
zYHGecKO{ziMs}qO4e2kUVc@UBOOKb=(0T3k+!sM9bJ=QJ_vy_3m7s-~g}5$7!obmN
zW_Du9wdVTGkYi4c@vt?|#81H@-NtWh1%EPIerHv+Yz;|3Wqea9zc@S&xD+*vx;ahB
zgl6&IslT`tuud^CGCiu^_Y-Wp1S}QLuhOu=1vR;m%)GH4WZX|V*f4OuqmFB
z9M>>zak0A)B!z
zQvE*vulRyYuY56vvJE20_i&`oVx(XI(h{-$K3Vc5Il5}xs@kv2?~NqQ+WPs=oQHU`
zEwkv)<&}p`zFquT27t{xJYUxNTlirhocMGhc||RnOq?GuKuoT>XSxuns%rSYH74sJ|3()nIj?Y{+d3u{aX+T3RlQXu3yHk3p`Ag*oG6Za;
z16#z+K3)UuvYW^gg5v`w6QT6Q>8@Jhpp;3#h5iv*v))E?jzb{11`;FDwKhl7LTd?g1MEjYD{5cWe)R)w
zw~s764+}&8U|UtIQfpgTMne#{0shXPW*wqbdRe+^Wwrqg?Aj;WR(PaEyDt-6Z+GDF
zSJa{a$j>p!tj#ht0SH@_jxgy6Ts%BZAe91hzD~#plrWutjDRh@qY=^?S1|QEbEQ^#
z{r`}xNWT4(lXW^#J3#JZD#s1kIQkn`x=F{a|u9JBYHSi+&l)R7vs&RlmX(FLb{>@
z_&-T+h`#;^lue{}sK9GOL20@*OBZJ`l{=vOJ~*9Z=jEtrt2(Xy&B?Dr1uZ;(78pr)!UHzdX5vk{4+7hZGixn^+LA=WwO|@FK
zP!!~KI?5wJ6$7qiWd>XfN`m9m$vvR0uC-@(svQLE=|i3CWJkwFm+yL9zIFnM7ockQ
zTvue2pljf>PmeXrXQrnXE9!Kq`nin?y
z;nhs0vjoSofJcJI+n|~v4A0>sXBTBc(rlUd^m{&i2kSX=71^xP2+gky6Rn7`zr!k_Fw
zY!G}Mp83Je?&RCPNsdXzl~&SHPTz`$-_bT5*jw0+h>oF4RcIyq70)Qj`%G~du!s>h
z4@tj(+dCmH^NYhKGB#HEHX%fovIaEHMU`TdpyvBPcD7Yvu+05cp$edBfS2K#<3W#)
z$q6-yl3O||IRtbAKwCxlgWOj5TDMOdz~Hc$R?-hN;k}H*QJ!3&u
zr8$3zznirZ6qhqK)y?gNJ7c_{rAYphE4O+F`RH}ez^(kd%hB!%YP}Xf?W!a6Ah!q*
zZ(ul%QhWeb@3QMKH7$*&Enmbn_tbxJ_-2aQs{b@QKzYUy58yimeQRoGAE7sjk7zyH
z?CyNOF~*@}H+j&s{gmQ9}}7umel^TA(0Wd>q-$na`;;
zA7~i%kAiE#$}s<3RT7&?x^eNy9z3AI(uFz1`Np1@C=(wi!`H=
z^I-eKT4p&J>Oq63GdtqX^UjWUp5K&Ly1Jhr+~El)ngiVstPQFHDn9RrLm<4#E%PF0
z?dluz*SUTt)RCq$(2-qwkT}8Mi>zsw2FtUjH1U?4dRxl}C%NNjXV!KxqrB5EDKaQB
zsIWVg{sN@NqGhW9j%KT*oI7R?bhFTpEMU7A?GyzCd%crm8n+iBx5-?%02s@^EEc?t
zvz4inmp{42E~KEVP9!5CdT^R0zGaVcvt@swEDVp6@z+q;*jQyG*UO%*
z*H+Cgoy(qom#@NR>r~~1#6*QW6u8H8M0URhz$h*YpoEL;uLj@Lw)mdXCD0}jnO>*5
z5A%Bt&%JhpkVZ?A=}2tiY>82bXGKqIw4;3yA&ovgKnB;?c--x&blymQe20mVD2QqV
zA9{D*wvrd1V3}{lWHl&r*5CLA<>Bz@f>mN<*MMQ|>UD|pfz^SL#Hbmu4YD@OdMt^9
z65g<%xM-YcV6P{
znD@0!I(hP>MI?lf`}ymx^ttLNEAi!#*;sW^cB>kY)_1o)*O<_y
zda+@_sL}%!Ry8SF#80C7q|Gz^j*Tn4Gm0}6)n&57QqL;q(#e$hoSjd7L>`-wbzK6&0Af3kF;2_9hPU{7bYxxRgGBsNTujf{@+qJjGTRXrkz
zrLE4qjpmnlg~-iWub+nukEE=oK)An2k&VyNN!XP-Vw{oNvfUeD1d(4+M}@p2`!?>N
z$sx|Cb}V}AAxg{vk-V(Ml+ZA_%XWr`>xmO%jnG$D=ys5+Hi-@wwVog{g!7pDruJVtL$7BHcD9)
z4QwN8O&e}V9cNux^6X!QbiLOPU3uiE^LTzgv=U!INL_7=Y>*-Kf%Usqa=<`TPjTrX
zppwU?3m+n!iN8ZGRt0b68XKMF%n)_|dj_UxV)5JP
zXt&k<_evrYp&~sT6&hyGd^c??62FH^%v|e+7F&0UFXZkUou8zRoeTyfh52
z81znRq0L;h_Vw1l?%*T!8Wr*A)i45aLG#rj{Z^pbnx-N_qa7H8=Km>zh8Xc7*jkjB
z*%+VS^72_Xque36B9hk)X+z|#PYA+kMt5*ug!Mx0>N2WMzm0SO1R!nch!QpBi;?Nm
z^FlE8gDQ3$u90uMrC}*w1(bDggezf!-lKH#4nFJ)qb&qNj~PZn!@R$hr*_inO=S?<
z%O5Iwxwj^mDgU$5=V9ez1tBm!ud1A6-^f5R0%u6k5S3$9&V0pk6yvbs_6hbunsqFi
zv0U$@xq%T4QHMyIqAo&BMfK|1vuy2FfOq-i{RZy3@9F$ne{#RQNcS~UE&s(y{b(K2
z+)vk}By5B$UQ
zx`_s}A?r10ze2@_o{~ZoNX5#t7^h4ChC?8fUsbBp>q23HhZd8#EvU?|wk=IV487gy
z7b7q@Cww-JtdM+~YR}~TLQBXGy>ldA`5@RIA^Q!M5W(*TkhV34^RSEiOFMZ*<^JA>
zyZg$O;1CjV=f)mUc@yst`1^;^hS^PZiAJAnxCoHEn7?|+Hpgf#3rw3uFj8|uC&j5JzOtM)8LxTEi9-@XssP7nc+aZI=lIz;WFi+gh3zW*5AAJr_;@
z`xnlyRepWs_xXO9y?;+e>1-gkG+wTI4{KXnF&fcI@Jw6OL!Bs8AO`%pALgzAfQWI%a*GX-i8c=D70irKf|opRZ~yIR{7%H|vPl!}#t9ceXtyv4#kG@m&+Py0@_d=2)~&#%12
zRPUR;7(j-0!*vd_YNcJ2-LTm+BpB65@LMpoLzL>h8s5Jd6l{}hm#FTZ%L_;sH}B?G
zj!y6WrNX4%VylavSQJ>1&Ye=&YM9`!xK
zZt!W;E=iz_2D|rOp$2WI=jY^pno=48=bhM~8XC4vC!&r66wgpLA>(O@luAo!SFUJB;fMoV5hW_rQDK-eynfnX5;o87DBP+
z!o?iW{SPmgVmT1r5Ju`pOpwzd%~~))DlW)%H}4RFgvdsG2MxzDuMBUNBoS#;3JDm(
z-a-qfAzO@;wgY!Ox
z^_^r+lyHw5V-8%&*!A;YNe`
zxbSP5sh5F;7k=K0%lW6>$yZgK{c9gHTO*{x_}z|}0%hF2@5miIzgT|fvR-$f!a|G_
zZoYaP&aRCD3(SX?Oi^M_yL;fw5vOc1-(
z{k6-*%hdM8U$ib%<5=M5*^W0&hK>kn6ZOFRE7+s&l@j~|l(^wz6Tm5ZqJK~1{_6C$
zDaQ3PkTImSp@l}LNBQfwW}l0KZ60U#r+5b4XOC6V*1vyZp#rBBWcA*cLxbpAT)Q|Q
z9zb@vk%=t%CxXDx-oM{p%^v}K1n=-kgX<={#|rs)2kFiieKw+I=hQ!f3oTA5RR^Y<
zPnXvh%&aUryzbFe>=)o17v{s;p}jkHr&lU6fkbg*j`3UliE
zsNK1;lZeI=+GIWseW~)b@Lvpc1gSA+N#EQHuQHm;b&&|2wsUygW${P(l58;+7FGpP
zMe`G}7yL`_&PA69vawP3?jC(pywzu0FKKuFS7tApze@1WGfw;in#Fk)Wq-~xCd
zMy-e6L#!$v_+TL6PH*oxS1mN<2w29lVzTE_b6;cT8Km%l%InKuNhQ*U;->!9yPaLo
z&v9Bn#iN?+O_IMf+a}m#|H)+F+^@|1^S3`~;H-!FCGD6(6=dKF<_Z#9f5}sMUCp7|
zMQOocaQ)YT1yRLJ8QIbEa>4JEoH9=|NZ8>Ch;l{2-(9U=xb9uTM>~16O
z>8&^WdPqhWWB%e$%yC!O2Rt^?7t^gZ`kzR#EH25Fa854gu?gOVJ??~5MGqK!a#{hhpY>N48B~(qfCPneRiws-|8)E4`xuyCnuq%i{L#&aHL=I3%
z@+Rq}*`EeqK>C;{f#75w3~7-xW`V#5LW3%sJK|4vL3ZJ9P^UoQrioBQ-+H}=BoZb;
z`BiJULeMP8a6e$+Ljs_`lFE+B&y-cvjCW?F2$H}+zT{N>EA(I+!LJoBC2uD;n|)W(
ziVzwabI$<5}i3
za!%{X5N0P1OCGYQZ0WLpFyiwY7}v{jtMJV*{?2^0|-@L1c`nLBWQgm2FIMYH2lA@9-OuIUi>F2
zW$9ld`75J8Wmeh1f!ZGegdMnm*IA3gy$=CB8}D=8KzR8}GpaIDd^jF|7XFGWu9K`v
zWY#!*J#Td9a_E>&j3V-D5yy?;84J6~u$yIFP7KT(>#$OjaTqKfV};{ES!Z`#34}dt
zC^PGe?K;@0y?3KeZ=s{1zMpJn190XAcX~owwT`6{<
z*9HqQkV-Uts#Cmm8+$9$r(17nd0Z|ll)`@pP~i~$?}SbSmIU4R;@EYvRpCwP(3$#z
zrBLIk<^{_8=X=tOd<_-HyFpw=W(5WLzM)TGluuDnfjxb**6Kp2piDJIWBx-X`n
z1Gv2$s$BL#o~^U5YMdov&#pPQI-CLhpa2U7<4Ju0m$Oq?e4EJm1_f+v
zinyk(${R}>%iAhzNsA0zgf|s=I&Xf;evCGD?fn}V=;%rgUxhWZG-(;Kv5MUD;{G&e
zdzqm?buOr(fB*?Xw(I%)`0AmK!i3^w@Fg^@9K-=2Wn8k})(jQ)<;4b%VO$@8IE^EG{GN#{fez&Fb#}KvI-&~r&>Be#F9{PD9x?r??
zTiJjjc$7Kvf*z;hM0=y?(hwJcpPEei2wL&KpIOz8vZkjr8Wn@_0K=w5>zMu`Ad1>
zQkLIhfU>QCrbu_ib!)P@@;$R2zeKP+^(20Fo)%t8db6*tIQM&WWIqX@ndsnNgFwc=
zUx#nKVlFKdBuSKb{-xH_6DTIih*xGlrdB8D@*2I_0|$S_&ZM)^Wy^ppfO%r@X5If7
zNF_XsCv%Bfo=3dFgO^{uwE;W^`XokwU54Z)G;Wr9h#xozAK3haGs9!D1jdRD#)jH+
zYAYKGyI=XHg9kQiQ=$Ep2gU-_Xo<*IB(`)AKdFZ?*}O6Ae8l2h7iKh;TpivIDdwbS
zSX8x)zvL2T6XAP}jjK~3M1_aaC(B-jI)C&FSP$wM35pADBeIgQ%6QgPNAFM5Lp#-k6(T}16bsDL;oXCtTjVJb$Z8`pmrsy{7GmX<
z^g1>!29XCtkz{@cqZ4TSB<28#c+l!C#&6eVo*18-QM?v$Fw4V5-uozs|Pg!F#-}gVAFUNxwDQo2Ep@*dz|<1X#ANq
z4!%b0`Ucqv86qevhWs)tP8vO_GG(=I^}`hkov&C_4cafE?vN6%Oyv`)wIFdYI`@1B
z3Hxq~*$2eH_P^e6YiiR=aBr^MFPOkh+ezk~l(?XI2&FBhdAH3QF4?p>`#1aD?L#jL
z*jeenl5E&x!uzx--9A#YO1y0Q1wC&3@lFc6GO%wSx>D;rO56-8K&Hen;N)B1NN`#9A&+%
zwt_5Ll9W1pEU*mR-tn*45Bt~<7i!|H!^ZDH#n$+XNfd@+yaS$;ndP>pq_hOwNL~dn
zJOJZ{JZCzI0%R#>kuvMeu;f|hP_zpgVmmqH
z0^~AbV7Vh~EX}`Fy?5B{-exByk{kHM#>&#A#S4TOH$9wWXxYzNr4=<8@5m{$n3+J+
z;a4U|6G(IPS`(%Vy9*-dwJDsEi<$Xu9vVk&9i(|EV3+chE$ziVf!mn%7Fx_*57qh@
zT`)aoA+BCF(M{JWDCVLh3-I3WIRA^`Xh};sF@j$k?&(3IbC{FZ<{v3h)NGTh
z{&^`jY_@3M#15WlcD&#Acp?&>>c*pN738~)nSu~&Qy3>>hp#n)P~U`SFhhs6&DC
zQf67<%+nRM8z_CI;cO)v)K_ibLr`
zZlFZEusIMvcf9MP?|;B}h!f82_1VMyngfRSWC%h%IzzQ#)S`YnAp+G3kUt=~weH)b
zXN3nvXV#;U7_hi-W)S!=L>zccG8}0<^3bHC>*0_Bel>IH4?(9~`<0Ta@T_E&#M|uD
za|PuEM-^AolQU9HWDp?cwmhvf$bJp_j6#cY>P=_(k
zaMXjAgYWF(_Evzdh%SZ63AzSaNc5HRwCa!mfgLnrAaBnojR_1C_(+%lazam
z2Ne>mODjhwvaDbbBSnV1v|M+a`?pza8#Zc+&inDAe7^~IL&d~*ieI9GB4J_1AeR&o
z?0PDL67zB>FqsY__nH`+6v9L#jyM#L=D>uw5nn>vMKxAd!9@4S!W=&>fy0;4UvGxR
z>a6F?2x`sy7H)ATYLxwyxi`_}>_^jB-*y?_@QEg`JCq(t-OGH+!r)Sw{@Z2coAdgR
ze1DwssAXOhh%t-%$x0&>(42OECES2=sq)aYASYKtRppuCV+J@chsSZgn}dmZsT@AT
z*{+|b-#wTCUSAop>*b*F@u%0$@~g7cNgApCfn56LV^5=lJ!@ZC9iVJ4dH4j2l9r^r
z@JwXKG;g%EyvmNrLe=5nwdtKr%~}NNl4YTV;hL!^46I+ZCyS#Kw0(NFh-DMO8th}L-4J@sjpx!6tR!FSa%c*K7t!0yNU
zW$B0MA-$rKKM{|e!91uP>qT3_A}ZeVy#=KL57xXb7JZZCLENxhfm~GCBYM_^wBXmh
znH!>i^_LCQZJ+`t*e3u7vu^~F?7*jq>Cx^PpSXn%F#T)B+m>YbU8^^S?{i-VMJ9$r
z)G{B!3wmZr=C7Y|$=?PBUPB0RihFd=F~(cqd^}Mh`P(|?kF^#34iLO!mNzE$hjdav
zo&3NmP+2R>2nL;AHid(AuSkV80@8*NrldqJCnwK`8yDVcsKdmpF~YfCVTdT9cUg=4
z2>U;&zw?X3{JOYa|L7=#EUPew5IT~@Cf}y>EyYe<__oBXR=h5piIqj=H|-Yo)}60A
zD2!AG)q_SvXlrjwBa*h>onK#>31rGM)vc`J=t}F)K5Q1p+T3@O*k5RCj{Tu9~f?F-0?4@^{F)
z=(QEHH_pgv8|QSOAd#>oW;BSMPt-E9kA??^Lkg~~a5}D>CK?)!+ut2U(1I}@q_s-<
zEP1;}iIT1riS(;z$npK6X!s2O#`7O4k(6zQcRX9n@G41h`@2s|JNp8Sy`mNTUcLy02TsEo{eL_-%kl=6T`VS%iDOgsLeZ0TQ1Z0wo_(eIioV}U++Vj8P@WDsSG{H4N;GV2vS6o
z5eI@xt{n!aC}&R3kgyO<7FWwta9;dgGPNdr|*P<+&F=r*4=paN14Uq1|!F&HO{QEb;qhJ;3ls1!H`K
zw4wF<4dx)i_$(XwBl%au{itR%%RVph3D89KygdS^3V{Bu&SiC%T3%xE46pdDS2ncG
zdk-GchAVl^xq}~v72*5Z$=PnM-Z0qyp`E0{lk?Ftpek0aQPn+*hKlM}Tqpa;@Ppyq
zSKZeSp$UV~eywJun#(x4%ha*(@W{MRCnx9QVDEPQGyDErkv5@2HZ^yn_OoFie8goq
z=ymIM#`z&`j#H>sIKPM-H@lfX<|@Z3Uq6A119H4ci}jURb8XXdvNMldx8mx)0pW_v
zMOP#A+wOP%k=E(?w2ujs&Pn+1R2@(|ICb-5M7H@zrO0A2^pifFIk4=G^641pCc$5->
z8uS6FoPylDn^cusm@QGxH=UEo+6It+mNNJ|6h4iqQ!=Jj>0cGc&927LGW}iValiTK
z)8{U~@|8#JuiT@qWTlarV8eaGFyrh81Q$G4iiYifFQxyETA|61##gG#(0
z$?3K4>4!F4$1=j7pZ_}xFpy0>s!f#YO1BV%|5OGo>>TVX
z^wxjA4>Ku1@6z95!m~@T_5h=(k-L{h^OJssvL^VdBX`j_T$@n
z;O>akn%aEvakyZn`zdo=#bft=xKg!Kw1XchusyXs71kviGz7uZOiWA~gJFeX_u{!2
zI%DIViW*X0CS;AwwNz1ztDw*S{=vEia`_Cc)lgN#x@ec?;4gCF24fqBE;0AEuknxEaePSC90n@qw
z%U_GqtE8SvQq^y#vzsSYJ
zH{|Ao=7c+-J1DeMQI{5z#Pn@i;6V#oSXiX0
zq)^Fzz@T7CO7p#EV+&`8t&E_Gtt$Mgky>isxZZlx0f=LmL{84g&aG02AUx0#*-{ly
z1w)C8zxvT}fOfz#vDz3zV}9aLlzvPD4KeVJ{0>aBP2NuiWdp{=7*Ke3aCQo)i!@U-
zq$hST@^pkLG;te70~wq$k#u&2ai8^|ZL`p2kLUl#{{esaVz$dN_P>77Nald(f$;zM
zzFUD{2F#NGeE)yGYVC!nL8j`zf8@UpaQxptK*+%viWhj7X12c$CMWhr?_c@aeZ|oo
z*zn6kUm*jJOgK}2D7BRm8B>-`S4q$FW@~9OwF*op0OH?a{TG`rK|VkPSz+~gq@m6)
zD4HH0b#S&rr?z>Ab+-rnO(3nk1#VsP8(x0KMv@(~=g-PE?c<%}L-rwV6qLkKxJh_%
zDnEucF2b+E7vbJue}bn}!wXms``O!>4@!I!u^fKB`wY5e7Lt+D>AD5gmV)Kl28se!mv>iLg1eH83mfT8#mt2v?W~866)o^p#rU*
zl*^f0Y_)3f@^+9?3-zTeUFH|1v~N@Y569PxMBGtrEbBRjAOg5*wiP-e~_3o{GK
za;Wy3%ahgAd+<03GGDAIIGBF(E
z*50#Z_~8j?d{Nc5)K(BfC<-+xHrw3Zq$n58`Z6UE(BVM+9t|FhmhECZ(x1>0jX@jh
zn0q}3=9MEC!|Kp4y^j<*t&e2x9qnkfmA%iPEuzx`(kTEVeox(DOPE-zfT?lt0-@Q(
z6})usi{mxSip@T@o7A~kxS)q9K?|{ubgkJBv$lSC=?XL(CkQdeU=RKkn?zTh1N45q
z1^!zyhbaOf-_3+J}y4xKhJ$2Vyij|__ZDv>edg^
zp9#69fQ3Tmu7jDNq@mRnt>Nr^uy=H3fpANvxv$y7@wN+f9(Y(atUU73_&{0OxnSgN
zs`4GuEpCEEH-M}HrvT`r2!X;hfnh92sJl}ymo+it<7(f269e;~xZa+Qo}>Be)TqZ*
z&yf_G&ja!C)oNB}C4E|xUB|bpUDoeI^9~+_GzZ_A`n=bdTU}j0Rx{=$d0uXp|44Kx
z7_lX;V_*r}Bn4nk@6ZN7Qcfo8Z~O)t$yeZojWCNUY6^2o%>Q}|*eVlf6X_D0!BtPK
z9?*RqarXoRmk}Qn(W?p~M$IOHgng_m?El=euX*KVwJ?E$`o-(H?K-2-X6;#o^
zk8y#BJ6!WujV&*Qy>G?H#gAG&LZ&*ieo#|AHAJV4-Muv{8=P7HQ37STZv}?tkG5H&
zQPY#4*ho8?SYyZYzJ)OGHqj}5BY;c~Y56mj`3oh-lZ;c4o$P>TCrUsok9|7#m=rPC
zKTpG-j>_^r1%#?})aVyB1LX)3uOeik9C?%~eAS326lb^_pJF9n6QhT`p(1^}yuLZ}
zIU4FxLC>Mqo~?1BO-mOPyh2|q)0V0_)$Dvn4$*&2439{Lg*dV-aC2WNa7~#&tTWg0
zh(?JvQTw6FD
z6BDm;7?N&B8&=nqxL5gx)Z+AysYo!KGIls3Ah-Dx1t0ckoMB}5u!?NK)h~^oQ@~}h
z5fqN?E5Z1ON>xEohsET~Pxom`WvUX%fq}2#@ZGt%gox+Wp-QJo8FMZEXpwI^u{UT*
z>gb0I&I~xxm##Ta?hcz6P08Lh`25Z℘uCy2$hoxOOl^Dty_~{bh|%!c*&Jd}fT2
zO6H5y;SsJYveO$m8!j6&3$1}-KKmVIpr0JHaDcK%TzgfVotA=px+0|uK4C4L)IX(8
zmJ}KG+MciC>__k49;nZ(7p%dJZ+aqAeeK?}QCe^B;vejkn6Q;cE^`y3;mmeq^(@*~
zh9bR!^w|Cam?%qG)WNugFCgqxrd5IFrKs@pqJ`mGYCF*gk|$RFWQjC8stXYv7GedG
z1MnERoqhuDf6Zzf3fKv}p!SOs?ux3FL%-EAZv$E-;J7%ep8ft&CJ8V6$d`QXHI5Q6s*$+iR_*%{RLIAm-MA;*0`Y3WwYGTi_;vBw8}q
zzWNB#2Fit|q&M_JO+&z(=t%WV@Q77Vks;Vr{6@lUqMvqiE!8I{Hoyw(y^SyzA
z)sZ;6uhi4Ee@>4m_%_}SI*G!9{9p4P?aTeg(uXr-98ur_-ORb`t;hNeZ`6Om+ui*>
zVhGTuckKe}X63{CYrUORETO!XtG!KGk3g9@gB5l2d8u~2y@3a<_;tx#QE5qn&X4Au
z@fL}bv{|jW4N3~2!E%0o|M+5+g#ZIBj+|X;{SJS=tf>JS((p-Bhwzx!3%nz<1F2sl
zzeeT`hdmYP`d*)a{0(T#AJx7WNK4`60HW_H{`6lf0s*c}%FkbgC7I0z&)gsON1tts
z;Gz)Vk;0`Sg~UIi8?LbU-sMtT@Ef=06&}h
zRPr#!?9LDwgtN@%9ZmJ+NINq4!%X|k*Exaa4?r6YsX_>SQf#LJGt1h66$@!w?zb6O
zm-S>k@qIi-$Zg+rz=Mc4My7(xY~rMzR5VEx61sA_D!F6hcTRuH@Z2mO3VsUMf4Q!NF`!~Vp9&->@uNik8d
zsWPEu2Y?YV;q0OT?r#s_AfBox73`I;el0cLeDSs`_BK1d@6rI`_pUm+DEMnz#sM0Q
zRnecjWp$pL6WXZKr@!d}-X{Ya7wm(2!Pi4QD8yi9)cN^D5$f8z(;|O|F>2lfBmhXB
z1>ZhyAc6M|N{zIp(qnd~(|fbN>ZBhkl!D-WT2C-k+cbHK0=g@qW6Bn5{M%-CUON8b
zU!fE+9ipbpZ!l!4lJAqj{+0bR>(0yPMOO|;8`u`|{Zz=0*Zg3XQ*lLc=m7KRnCrXM
z7I1mY<8((fVGlU90!RSJ@K0)yt40aeFfv1Nb`VkHa@fFwWb9W0u36sN9n!Y{?!aO%
zOnd%+q0)Vj?NjPwmV6)X#K?O95(~&drl+E!
zoQ07ZTjBegK|Kw(p5m(1s^F8f-==wBw3(yP1=ogY)H{~zn
z+;D=QHb^78ev*k<(+%ZuKIrq`nVH)LMzd&WNISI%Ib*A9W`h=Je&AE(y@
z%bw#?e*;BH#VEV%$>itnfBnJ~fi$ET(D5B#Js`K@t6eG@)BTzTQo2eVc5HI+d^%Ep9!xbi$QZ)}=i#>;Yh?cx1&mVgw0m?F(bN
zU;qST1u1#$Br?TU!4w
zvU_EqA>q6KcTi@l3dPs1_~-xLZ492=t_`JLl%JqiZwig2(ktN9)bT57Z&if1Ct}&dnPz_0KoVkM%1v0vj
z>ue(SS$d|k?RQyI{+~<~&mVmneIGCi(slGgDWj>vvzs?k7;OPv9enL7BB5A00cq=d
z=1>c{Jbl+Du!$Tflf>l2>++$N2@X=caDqOYs73kPcZ7bhOQs4HT}Z-~D0^a8gb1#P
zs;D!s`(2AqfP&6f>(soh-=NOCpSz(iqI*eu{>8Yupfxv_xDW#WBR-~P>+)LMCA-M~
zd&-19MG*k7gBAw)u1C-zy}b|AXoz6U)-5zY%P~Ns!DMGfmPcTheO}=yD#_%t=~c&R
zJR5A?F;?R!waQ0|Kn3WkXz4)bYg5Nr!bp&U5tx`BcWGLv3)>HK&4gm^E5C_a67gjC
z={Yh83jyJ_oIbLM^ooT|tSxB2Y75um2xyhR?X&+byU1z~Hbf0^OoRuePKG=cNEb9G
z0COBn8Vq^ag}3)v_HYSa7<}>^rU`AFN@}f`CY}S^m_$RQd=_mp67rjf7m71pumC_h
zvOlaJQQt;jQ$VBNplkPtTnrUTd<
zK?(>#8eZVygv*r7aj&ZN)cU{D7E8Q#vh$55prE@q`j>0~)&pf-#0C-!;IBR}a$&n|
z&_jTV)<0hej{n5VoiXQ)JK$f#Yx#%pgbFGr#{BJbvnXE
zACl@3MnLGm6)v<6)}Rv_C{^ic7&Sp74{Rz}KcJ`FXA^#(uig7E_FLwSkKWb)q`zls
z?ki0CC?Kn6?!dRD3#Uh^UP*Wj0hcp6F|o5T@Y5UAU6iR*s`l3*2PFJ0h3JRPk{K(j
z-KJi$v$DMM+sn=^;jh~UoKi4l^O?2qMhD0$StdFED@aTNrSll}tR5B~=l@R}HYvm4
ztWY+YuP8tAV`+U(PJ;7iaoH^(%L4)47w0K*>-~7g+pdwvbf7BQfad=%N%%YsL~zaG
z|DGsN=n%B-FY5oi#FdkoYkzY}kJb0rV%vth{O(NPYMX$;1Wu@*2xS-}8Fz;9-IiwBvaL?k5GiJQ15n`
zHr^h-wMJ9lz|Oi{sZPhQV7A(i4}nc<7w!);#9iA)-yUT~hJf*E2!aI`XNI5~U1N7-
zJZf1TU%-dN%V|}(%_yFk0!VT}1NHF0t=2w`mbdIRC8_4OI*Kz?_lF3*_&ilyzF+_SzQu-RJ?eUKqaK~K6xWLfuUn-1#iEg6aEeycW;mG
zb(S5Yr81%0wtCdkVei**-|}!zfCmltf06dpQCY6rz8@hWNT+mzq#z*OAl+TkASK-;
z9nv7(AuZh@4bt66hjcghai6{KJ?D;d_Wk3I;n3k)3l`t|J~8L7ruThTcCp_uLbu)L
zWp6-FBw>`4mTCR2+}*BTe9jG}9yw=sc$WJ${N8h8u2b?HkdkaZCVbB~hUPx?MO}-5
zBWPmDt7{xZ#V$0CEgV2NqF*(k;apgl2;ru@He$lP4+=2*y2c!Mgzu6R4mbjzyY%J$a-TfmzL&vrt~^f2
z9w;(Lab3utNU}@6zjNx27xID!LP_;mb$AIcl(2_QJMY<6ih40MB%sp_=29EQ=e%Dj
zxhH!|)-U=8jViI0F&ey5DrMZ@=MVsRe35xa4xXo1kXH+6%L=7Rmx12B23{
zu2z0a1Jp4$puvEATs!n($qM;=Gv9{`5XKF-sJ+!c*DvwWr-MmT0puz~9Y}N*>Sf(G2~j)%Yo8pW3!!KJpj2S~qL+h8D9La3OaVS`Z~d)0
z2;dvV<9nQ`UIcIZEltax=VfENIRZOBKXO15BSqd>eYgB!zit0u$FPXiD-U`9`SP>7
zjk}z|5s>0wS%fW_+BitF$@+-{{hsR+7dI>fM^4KZX#X|1od$f47r!1wjyPtY8VreV
zFWEV8?{E4a!@}}0E(4@JCpPB~L2^~Df{7scC?M12ZMf>5_p=F}mxU#QxKI~c2Qk|>
zmlSKM?QptCQ#OnKDP>QsOwa472f)Sk>dFq*7Dp99pfFjOG60tlR~|@w6^BnQ7Q~dZ
z(iiNZwUKTajXg^Kx5EI{Hs?^YHGJ5B?Gt@_ueTS*?mY#?=~;&KT*}Gg>`J}eu*O(LSKnqJlj6@-uR5f_!BWDHXkgopt*jgqQ1!P~DoKcC#+D?ue
z20&JnO~EHa2&mbt@A4qDQsnMcF9}V|00b0XK)(xwumEc>jtvu}h1Fpo2%EFrW)JQS
z1{g4~DrDsZK|umd0?T%wK32UpjYTAo$+ukFGE4r7ea
zQCw)>#u$9ykadEG#Lxu(U2?##z}w>7L)kaA5?aERVl(=p9i~R(!^|rz&JoS67Cg>;jdh
z=zEaW;BkAJ0AyMj^e*dBzf`^Oj2$$XsLWs1RP)FgS*LjbP`-5s+|(}mPdwJ$Dxx3A
zI~o3s`5|9n^ZoJ@7@1VXb7yUoR4+}ZOW$`$a2weFbeB-beu*Ug1Yl$I
zj2-M9C||~-f_GEzA}+taDc1fr|MamygnlWmXQBWDDr)o|3m+I=^fk3Z?H#ZZv7sQ%
zp_gXVDep2QX!?LRLqcEMXLZ#Bu${pAbbQaJ(PVa;z=!+RC|Bf@>;gkjc6#W{e<<4z
zm;F_G(k}l84Z3G?M)orj;Jm<4qY_(Vy%S#Mw|;S9l*yV_I8UU5>HoJ9
ze$>)pW@K|%drp{h*1=!y_{g-w#ic*n6SY`CLr>*bQyj#1Nnd0>3C%8tTL?aVr~TRo)0}
zChYx73vjuYEWy}>|*G+c1#
zZ(R*RN2LoeHL;FyIV=*H;CCC4^90+HymBF)scz;&_fAw#SoOF)u0dC(a+f20$HD$(
zE>|Vt+l8pUgipZviSLh&?xDO9_VI3@mev6-Aq*etP(pRZSW-axD5)#b$RWmDFoFDS
zzv7NhpPa&ISXmsx&p3!zK^tUdW?}isJS@Z6{HXVA3@mMXM0tWnJN*Wlnu>(Tn08(&<%tQhL7pJL^t?1
zmWIYgy=O=cTf9;;{(mxV*ah8*Q}<6*;(@N?pAHdXzSK!kAROOf0*FxO`OJCEPGeZr
zo0?>EqVzo}JSt$5@c=!y2iLC`sa;PyH`^C2$VOg91P%lg*zAARljT6P#K!Dx!3%11
zASr^%KH1NZ4*83P*RxgvI&2YCFW?g!Cm>P7&b^U&Lsrq^p
z5UZ=k|~K^m#=UHAnkjb{6Om^0z{NT?I_+m_z@e^alD;zc%mD
z4*&x6zenk8?`cBC+dtnn@YI3^U<{)S_%l?rvoHf_`0RJr(9*Hewc{6mHQ~k(AJMLO
z{w>Ou#4;;m+R!0cGG2J2c+=Rv=RPVq^iUnYkVd;}F|Nu@vn&;66$PnheD`OdYauqVUqnATwq*Cokw$Fg@hVEJlc6i4$Oj!V=hnze!C&S@#H%<^&U7C
zfJmpoAy6Win2MN|x7crbfXsVca53boAvvhjAl~rKwVyCj$Q=VP$T>%>w*eYHCh0rZ
z(Q>gX1)!h#!@^V4KgudULTb)?N7LDyodFq^EHg7ZV{6Q*Hm%B2Z_R}1^HTKvL&@gs
z%;X}77yt;-cX}N7H|m#?yfnaPk{tkYFM;zoaUwm7g{d_?Gs8_qSADsA3yc{C2frCf
z<|LN+dW_dI4{&Oj(!M5wxOx&x1#sB+;FUrR^8IOZ6y@}{kssxShSVf0uac_vz21M^
z#;%z+V83MNb
zCO1Iw4&E&8=Q$7_080rl+T6VtneX|TESF1@M}-h5Y|;F3;yr^APS@CoD9{vL)Lf1!
zk>MPvC@GTL!yHgw%?TNu2)%T(MygAX1a4jVie-E^eE6BezD|d3GIC?OTr9{5)GPAe
zpBo_^){C0pAqg(dV8H#AlpBR+v6wHa&pnYo@q!LOq@R97dRVf$x<<@$!S$l13f>oF
zXL>fUFT{unK>319CVMq06YKo$VpIf>a|A3$*we_Ko3JmPgq%?!r1F774@2k;uC~1H
zNsACj9rB8E>>Ef2PR{uG8*72`Jg1Sq5K^!nN-L{b%n;V0wVkR(%@R+WtZYqyB}p_^
zG4M1~*_)ugGgQ7E@~si|p>tl3X>&vf(~vvSx4^#(&R
zHAMXOCGT7V;TWtR^!AF@I);UAE9Z%yr69L1hFZ!^mM><83sz39aCf6%{k2l
zL%4YW_CWn!on3+UgFM#*J4+qH@yzNg2(&Ovr9S?2MErq@36;qZljHGmxuB{m{zFru
zX1IX7tk)lPFCs6XiUF(J)sp``=n;PWVE?C(zBho*AfD1R%tnl?F?apJ_-KJ6aLs!paxFj3cwPMd3s66D{|-U=80DYk8IkXFtz
zun-9St57H{ExX(4HpL0{8lNm_F4{zJX)KNcC$fTYOLw$>h!1c^iE$z^_!FV?As_NY
z_wA%#UqSosHBdIChk&0AFg|nY?{NNM!eC8iV9f#_M*(C91g->%4RDbW;M(#DxiAIb)j
zdRRghY=Bqo4iDXNWHEel=q>v@vH7mkS3rjF-)Ouo-r77<5Vv|@JW&X1i||mRIVRUz(Cacrw6Ft2A62GR3o|UbIx~ldi?QbAuVs}2lV@Ud7gG%9g
zt0O9ov5?B+e*PX3J+Rs8^BfssVPo-x_9Wz2%wqZ@K(zPYx)6M_l;sOUk1(OTRw}q!
zYykHQ)Ucrcy^c60>GYSg=8NPlT_y~^s5-jjq842X>I4D-861EW1^4ZgCDkA=A_JAG
z7N_knK(W+GbgGT_F~G<;AdIgMIH5)%_*H*)oi+_(NUXRUowkOy;JD!cbpVV9Aeh5o
zZ4lt3!1wHZf4S^u8EhJvveID##L^t;;<(HmVFfink%FO|gNE*UUu9i_T0ZY-|L2P&
z(%&i6J*|+U0%ypRE=Tlz`X!UR)+@CvHx$p>6?{^EE$|
zsw(H-dIT2Y-wSyU_6#P|qpZH)2c$8evH>arRKykK6+bx-c{WK#*+uRyT*e4Qy-w63~JdQiq2;|A+RP0ruO^7`or{J&RSE`J}q
zWur451nnw7rUnl;g#Skefy^`-KHv%6F1Akro%gko9p^j*7=Y{CPN^?6%l84>Ngm(u
zbm49)RF^u5X2eH9ocS$2`GJc&K!)5_w+az6B7_*u_m&t*0{AT6?#^_4@+5iUZzhHB
z30pr_EGJIn*+u&=?vorrV55nP8J8q?W>{@on-geeKF|aK8@a8yf*tZhGB3lBulVlq
z*pqm?>p-3_%yTf-%bt}9Cdw;I6(vU?Ul1YGmZkr~t;RGe@rrQo@OT6FOk7)}52(c+
zVjoK6%O@=yA4>S`WG7zJ{$}D*5VS#UM#X!5bNCpO+NU4~zj+LDKj&X
z_#E%tZeO0jC(CSSBy%}zFC{DY4zsYcWG75?66?P3O*Sgb9o+0mxzI%p{t;$s@yYG;
z@RM(~$94KDDg@*X@ZeZ4dwLS+`3YwqXyW`hzbKDB8H+wqfP6mQZZjI65rgVHwSD4A
zV*Cp*6i0b7mU@j63xt2q8P0sqOigFH<;M;I{prYSPNRvFiuofDkmUZpfzn4tsL&9h
zHO-?uwH3$5Of~Nf@uDjw%jVc07u$)dNyY5i#>*fs%Ts@H)^6lOwt!z-8I44qMz+R>Bf&FyU)E2IPmvvQx3%8cXg6$iUn={3Yo|uC|53MEY0mQ&
zc6>pzM4PJ&oHG4Ii>u3{&B3$jxGsTrfqIx!_)O7c4JG-@x4LGify9Wf+P~mxrD$Qq
zQ8sZk9ci}loSbEY>``b)f>b*9C)V-uWMt{+&9!A|mjk}*TmBWF+~N#a7e
zTD){xIfry=r4rS3ja$5Ek0Tp-g#rFov+(P53OEG)S{
z54MVy5G5lyjBonvzy1T_#@8p;!5pyugRv%mZSS-fvQES6gN9gKm=LfQ{(f_;YQ60*
zR4}*O;tCJ;b-EcpnpohRc#`U!rCR>y=8b_Iy?d32q(W
zY-1uOj{2sZ22?(2R%zY6+L#EiTkKo4uWG4-s3$0Po>)KPiPPt^S8E?IScxg~eO_po
zjwp6F^@kSwIXI-G-wpR7yRxyeAtzvThkyX@S#(esw#`>xMQ^FYNw>2?C2j
zu@w5TDk;!JOe!qwO6@9#uH&=&%R!`6&EY$4_w8QY?(L=gS++sTLF}S16t$~Z&$GA4
z^u@HF%s)*{&(yM3V_l-|oVwPqY9XbX7=C1+lQ5Ijm34Cptn?d~r#wBN{Rw_xlj$v$
zH`7yNDhF$_JQaKulEE~LB#Ej0U%HF2=ZXsn
z{ajd*vf@ea$s8^<)w1wQDK5^f&7G4`OSl+>GlfZ=EG{gwv^2Q)F@Ou`FsueHKA35$1oWwZd^fIPq)0N
ze0;j9WNsXYDtfS~z7Br{5_a9P1In*@W{kAS(R6qHCqHBof1kQ;U4#{EixWrL8k&<2
zY$rt!GF231%}#>6MQcW@9<^N^l?nP1ylHUTDp~mqWQ8f}_Iy`S1^$L=j8u}MtkNGb
z^X4{I)O5+P_=%)lJAgBm9sbIpYegBFt6w)+`$HSJFrYeC7P3XSHhiE7nF_O7qNfKZ
zCMRlZe_+>A-bWdhjlTOL@l69;7KLjwTI3(UMd~Bxgi*gGC?K@&Cky_M-=2Mh%5w((
z^*8&6(f_Z%dYXO*SKCx+jj397c1Ct)Gf9SqKkpo&Gs>Z|qMM?Za%*vMiuCMJt1d4U
z6@CJuJJF-HxS=eOuCngr_`*tVD*WK#OUNGAaljel?-TpIuj(+qLoKCIjU?dsforDBdq|yFDRm-z~McTEKht7Pb
zR^P|{{P4d1!W}LM5l8NBryeR7DyykZOUaO(O+=YMcsp@K7(17HO;;GE8ptrLqOS!j
z>3D#%#+$CJvQbf6S(_G{0s`Fl*O>xX>hVBCwYRr>+u$yp6E{6LLO-%mW5*!F&>gg7
zRH?~4sh2RTvioW8;`{>l6{m)-cKYd-(Ti4$E?8a0=DVwXdX6NVl7#f67!4&&Vbv_H
z6wNEU^F1`_-vF2Jx!%)NMpD+7SREdpo}ZDlqM$robAT)SYGiFn^%`C34q+obmet+q
zs}qP;-eSiF`$Lyew}QA;OnIhiuC(T$rYhy78vU=O{-M<_efI?kN!WAOmhOnWmRL_<
z5wbC!X?GDAr;R{}y=f7N=10N{$~Vp5!rDA>^^{f)f690i%{3mNOyWg#Vd{=NNwYqW
zPf!^-XOFX3#9CXUk2}{!l>Ch6??wxVK&Ges4pKj=`J`3
z)jUl2qs4a~cb5MqM&T2s|A<$2*nKtB!ayaKA3)E1YR{TZ&el1EL!FzQ_+CQk^V&*&
zNmNDST=PxiwW>naddcbKJ*PxDA?7`1_P{+J+yFZEr<@=
z@@X`pGTxF;DIHF=U-gw&Gn(8?AJd%LQD29vYq*%hNEL*3eOTRH#r6m&;Gv_SBX!j`
zI(La}alhzQ)rGofQ_AX<#a58NLcm5_a>uw{C7LqdEFZQ>Dd_0X0Wa}I5_+=8w
z5{=gi_N|z5YQz~yqsdQd&w7Nf2uNOdgH)SnDr($KrZb<`5#q=iV)YuSKkG`W(m@o8
zRQNM}F7{6kk?LQXyb_M?-k~IOz)8_c`h#lSKlq$cD=DwdY<>uZ>w$X)8@IV87o3M)
zZdn=^AO6~J$T1EIKN0jPjBhDkKz1$u9BNngwQ4idG1k{q;k~Lo6re7RM`TqJM!*Yt
z`}z}sPZ|#^DKpjQki+1VG&;I$Df%!TZ#8fYj
z%ggfm*j8V&nwGtT{0V?=egLllfV}3
zo{Stm=X{xds`9pYWQBj{aJ%f3F<-a8YmD=F)%|j}6_h7NUb*0uW$dfh^{~%P)#cPt
zal-leOhgUW3-!wx5u4hSlF#SdFzZ@y{H{i6;cI^?i2aadl#N~R#3Rtt(909NP4=*6
zrC1^pr4moYOG;aHQ=|RpPQpnt9tqApFvCaPs_z*|>Wwt0=PUBFojzW+FCV1o7qq=Z
zSZThUo8bwzU5hD_E|vnzFU^V&j13CWth9@tjko-6F@nd_S|46mSK#c8cz9EbiEbAK
z_*vWsE|QAGgm0>g3V$}XDbP-ot0zPk!MM%TDC;uI;?=v+ZFKK0i~JV^Q8p+oSesUV
z0@|s)nI2d>ZEt?Gi5!+S)&0W%eY;z
zw^TK;gBX<*q=8gd>GxoPnvig2YPOHQ<772@$Fk!6VL|~DvpWs>z0SzbUqXhr%G(Gq
zq2tPmYWT}O@wOFhY6XelQBkSpo7tp$U2QjJXRO8A-u3}GTGL{41ks5$Dm?Cs7lH9Z
zHOicFBn_@V!YkcuapliokGU}wlvKG7>)U}op(HOaK0c=9vioY;?E2yd=p0yZiWx#j
zC55*c2vPWA6EeR>cGOO>0}mK9Gs%Lh-$y4U$ROmW>62s0d4m
z+?!oNsh|8h<@4eq#sub<<1~FA*Nyb9`aF`KPq4;kZf4mcO2RLVZH9?DeGEbiwhOFj
zTs|)@TrsTjjafpXM%(Xp_qT$xwdD^Q&|R^o$=H_D^B3p-$mGl`hSM@Qj
zHGvOu;ke)EJ+j~w%&`R00(RC94PQt5W;wy1K7V}`;li-;)VM2+!dO_^6yb@1VMD-q
zbH!yXd-$8EaQszDs9&gmElg$Pu9LyZp#y{^=yT!88$KwA+Nee->%)5uo}pW#tBl`X
zhC)sytG#2pBJHvsC(n-Rq`DPf<>Or(LBohU
z-EZCu_UUejnw-9#mTF2;3|8uyedkz(1-|_1OPifq5-k@r0hVvwO-dT%g};?$?5&u0
zGJz{na*w>5JjE^>AXUtxjF?6FVd{j>oF&YUK8Mv=s5ho-tyt~
zctl>UR)1(kCgFo5vD8S@2Yc;rC!aJRC}PWE{JfNX19D1TDAH8_w3
zQW<~w=UIAcBqyJ0$M$A7Axe+m`|*f9Bd)TVG;Wj!X)`|nD|$YKC*Zjg1K6>xA}@8sTm4tyenkW2}pLcg(k5%3k7q
z#0$cX$1dmo0hb_8$S+hw7l0e8xWsXk^wimuimIytk{tDDPVJbbK{Q<&_3SDEhKx%Kr#5(t@lPHbTPII}RPj97%9xVPPs{J3!
zSk$1@Hm^8mVdBnfD~yN_@^OkSU@#vof=K~@)*)KBs7Apk|Iz})QhM^EGLsGL;01x(
zYu!TFSV)sB$Ux0Bk>VjJir^hier*C55^(cC%Z!y-a^~YgIO`+mzaqSEnwo
zV9Zyqd7CbwLAQ0xakJ|ab%aq%UI`1+5j={|BXvt?e43EuOHD
z-HlbfJ9>LIYxFT_E>M#Sp|5=_UZ(s57PsA2P}X2iYJu7p3xbotWWn4
z8DemeqkAy8YUDwTcWcvSsiBI%*C@}6Gdpj|HuG9=E5G2u&1m)z@+lvJ>Al*$;r;)~?!4(lCg-|eXS
z(S?)+h=PjZ6xo+R(!^jBx%we73DW@dlzB$!>oU;nMjdfV>1#jVO{S(s+Qg{fQ_65k
zf*56uMA9#PJ5+fz5JA-7t`H6IS0$S)h>SYt=HCy?{KMPtfXb9+WcNvi(+x5*g;gt=9s;yP4Xk@wgIluxgAU&2p
zkwHvoF_HrJ34Vawczir}g6^-Rgr<;=r_yGY@$<}RU>KmEGQwpvwq~z
zADuYat9yDpc<#cC@`ndGy-j7j1d^3qEKL>i(=+cq+GMQfu*khfiypKK3v9
zkNKNj7HpM4@Es_RkJ=h$!EL-GXkcVO2TK8JB-SCNV*XEZg%nyawRe>(YP-S$9^}ZuNYcbdc?NMaUiQV8{q->}Z^6?>h756~L
z_1(eE^ka4o-zQ7kaL-2_31x|0PiV*&VHA-4A%B0!Tqyzt0h(`x-L;q}3U_YF_{0**TkH&6S^L%I-S#a3l&@YN1OlTg0{Nb$o@ZPTc|ug4
zU7np&`lap8VkycE0x=Scx7ZW3wZCh+1J}rHDs2UEMq)uCToar^tb9db_%d4(gQ=rZ
zL_yQG;Bm$5m}^jdMLNBFm>P#+I`-*yWp!`kZCI4x(t0tq)sERJ7N!uG+;@KrDOcH@0R9weR?
z6nuUku(4GP9c^((K`-90tfA)3QEoqw_JYrv50drlx~VKy0Sj5$3!wZdjP|RGwNQII
zM})KsV+dz^&d;chVGb687i9guWp6mR9vmJp?$>>PK4jXQ*(V`XGC)DVKLSM%oT-tg
zmZzlZUa1}1Np06Blgt)xDG6nogH<%gjCVE1W0%34FKd4|oI3ls27=(iGK#U$JV+j#?>el)T
z0B8oDN#_Rf>21ql_|*qDRh)n9zNo%MXM38G1R%j(1JK*|*Y#iNb?Ekye?3K7sHYT_~p&-at_{b2h8p7-uIXwZdv);XC#p_1vrB@C!
z=(BSh>hcYT)<`sr9YpCMBGNP>eFXPpW3s*6Q;i-80xg1aX?NaO#k|@3vqV{3j;V-Y
z-qpBTkQ9PG_6J`Qe*j?5!sUCQ*u7UjWM^mP^SECEsJtz2>)xNE=F3dRoO7DMkFc09
zaWSjNoq(cz#^Y{FpMAPpCQz~G+$V-urPUL!4gtwtA2Ob0S=Z^%$IPD}1YjWF
z%9lNwFA5SSx{1$w3u#!ilR)*c;pvYC#*b}xEl#tkOWOHzJMbj+7%<0eAK*UU;E?@YQajH@ml{*BRQ?+!Y?00i*g!%p
zA6HCBR%*H$Vn+KtGojTd3oQ=oqPifCH$vfCQlfZpb9>e_$3(5I-Xl$Q97lC=Ja5|5
zharfGA8V^X2Wk;2+)7MKOvS8>h*Pwi<{XOdD^A*FPo{H!?hXhb&wbg1R80B;Tjs2a7%xach
z5||Fq0#MLhl`(BHVdCCJkRE#SqP`0j&K|(K)`fEpURB7nyW1LKC1Kh{(!24NPx>pTq=6+@8zVd@nsX?`K{x_
znT0f_0OcX#ipz8#%a*a-rQ-*SIz2NtyFgJxPens7z$I+h
zLM+|B#x8n74vfSG^7rpsrlN#RTMyaFj0cIi27Qlw51v#GpgFthnmgH=OdP1$jGLe%
z13P5g8C=tc42SmSTrxPA>Jg-2DPZ^r2XsE)Mzf~
zs6HdFYPD=yS_mWv5d=Og-6{X1!BR&|cu4c&Y>jL??WZ=O+JY&0qRQZi@q-32Fh-D%
z)}}8YA$U+hlH}W+t>K_g>3jA1J~x#61w?DEbj*vapTVeej0x~eWNX>z%p}YiRcQT{
zurGWEK0P_iiF&3kwSQW@Nx&p&cW<&S${$b>2Jqm-yi}jy>7rd`Kk(sDB2W}@fD+?FUIDSj>47y`&iaxqS!8kSPf`{
zUteUcP*PVqTodm0#W%}PGuh;gGuz8q#4g!o1m&X(|M&YDuw;l!_Vnd{b*eqr!yq;@v+IQ
zcDu0p*KMFxjk_rXwPW&I=OztQ49Q7Z@!NrdEr{T1h8HEe4BTeDDVpjyD9N3TyRyML
zu@zqd6DMR38Iiy!*+SfS?B7GD57tvFzr6&Z0GPckz8w}8R;s3EqsXM+Erm>k6#X|t;_F&PI6j+XS_5O_EUxI}4)Wv}hdZQ%Q~g8R>GN=92@POv$t797L{pJAB?-FRf~VHEbE@TL
z$VfAnMslIP<~-G2FCzM)bsfAiz;6qWu>N!z;jB(kAJw3{BPG0NCa!r~pZv}+C!U*?
zM=T%@{b?m~0TuVwl}8{u2begjKs<-|S9I<@$}SE-;(?;V+{(tW&IvSBqJ4^B%!BI#
z@herQmZvK*ZFNw9b#hd3l>ve}Yzie<&+3ywId4NjQJ@>J!0=+Ax`DaSpbrA~=vx?X
zf?amV3pGLbgV)8KOz%+*JDCNLFTpbsFgry3`n?#+H{8o5XTCHl)#Zch?zbG~T?+g}
zP)_aC)uW?+sCieT)8s7wOAg=`qBsJ(hpVELL$Hwz@!tkW;$RXFm2k74pAkSd$FA7Y
z{7ez(?<@$+zy);Wa*eruI2x$WLA3m-)YjA03r!J;Oyskj*lFPXH*n5IS-lTX*#Wfz
z_*#Rg@|CEj=j$X3N=Y$X5$Zb(3Do}K&M8G@AkQ>+)i_B%|0_;#bM+eQrAYlOv`qFT
z|K!Ke9vnt^B(F3=po^j+$l_5ktgS=9mP$E788C<*!gxPcZZO%?+Z_C@u3#h~5
z7VTe38Tfz*c$jK-mzUDfWZRORlbcZkaY6DrY?kbA@W+~;JD0;N_}e(fECsL2mqQZr
zWjOJ-g6EfDt7g8)M6ad@Svf-;6YFupR7|ta)Y@|uz)^!`>!P=$s-`5)v6seS1IQ?_
z%8{D=?PepuL(3x&0C|+ir}$}ry}6esiSErU$bo}gN3EcL&HK_`l8l$s!C8VtxGSY`
z(apq84^VG+-&siZ++X4jw4voFd?9|}ppOSr;#Rg=x>#gNExyqHL|`l>p%i0le$l3z
z4CW9(`^w^`p7V@`anNqYP;O#g)DmH@T`x#5XF@t`$?If6>YeqWweqY_dxT&?O87NH
zt^zHHQ5v5e7a3QB8zl;w6+*OMBKl{Yl+-^8~C-urzsL`c|m`qjaz)*-S
z5COR{sU*W&to
zRu`xpbdM5uvG|MvqYE>7L<~;Rt;9`qv%H2J*UO)^0KKB&Ai=bcq!u~3AH~NDy1hD(
z=3O{gZPo|H1i(l7OU#Skyn&GNJz*wmLVW2cXyji%0mZ`CFJHb?w%LJ3wXSlcBpCND
zk@x3>o5r>yOsJSd233GDm~OB*V)>0+JfNUi#9rg2bV$$V)oh?V`8>-+Nf{V;8x_-W
z+|qDebaH-C>BF2{g|KP~`lt%hB$EE_dicka1%?Y!R_$sTI-#n6z)A*)tle2Bo!y0?
zc=FD8tU9X(?TCcRxUpQl;}$$bMMY(8QTo@YUmjsE*=Ywv;0t|4Q9pCG+vSO{H#{%{
zAE;fOv~`7)R|l>$^#pWSY(PWm4@=Sm$^xxT^>A|i$f$Pfa=%h|HurY=5xx~24UWNY
z{+{oQRD$28OYjIm-l(guJzt=jw?{;eP!Osh^%lLp-o4XTR2-j}stQxgFV1=MC=LN5
zTPW-N{rh(KWJ6T)-h^dnU0xs17@vf%Gv74c?_2ySD*FCL0ZY_~+-K559Ep*U4q!bK
z2$(#9nO6pQYCYeT)Rku^aVkb7g$&#bI2ii?nfT@W|NcC@f~@Av6SiB9<^>wncK`wBm)3P8`Rw-=bayq~sBSY~@^j5|b7}E7q8pUS!B_RIW0Y2b
zLYe-mq7%YXd7DIQ3)sy-M)BB>&`_Qp1Z0R{LL>P@hB%RHSX-dw2SVdTlTPH{y^Y6DBX3d8kkc$C0eIU5C{Uh-L
zZV53Vf^2ISeh-e)O5PBCB(X+;!~B)(GW_mh^KO4Ckjno40s#{7j8lXvE2ul^Qbs=5|e8K@}#D1LOoJMk!=%wsqe6&P#7Xyf%
ztpFuhU5Lx3ZI96!vl^UpX3^jI-`owh?RUI(=kvNtvTzm8`g%TtH0_pxMpvifUWk?#
z!4lceIePlRh)%QU)liVo3XBi=+dt|OPJzAFmt)H4>UxP&xk?si*n*=V_>pwfAY{YjeXcb#)A;C_qevf%o#j~HaoKZU#Y
zxPuB9&f2&2{B?WZ=e(BZI_3s?PaW2FI?seX^`j&s{cXbmzu|{0edBQ_;C{Jj;Yn#@
zD^!tdwq*teGHtxBPDoD3trb!8cK+m?a$V0x00fht1i4KFi2spbKJ&@|j1>=zoKp-6P^qLW`_6ZkguHi2gF4L#ikRQUj!
zOb~z&Iiocki3~%{Y%}B^wU-A67Skn-%zH_8UTlD7ecz#rH76`}^l49adjxK-wdfV*`F5A1V)PktnaAvds
zUgWJhyKhgm8X-3ok?$i0~UF7
zn}mho87`(v)rr1My%E00rFIXRDUPX(Rxgw`qH0|A#4H#$ZKTCLqXMXoS{jfy?^;rk
zo0;$}T`Xh}1|t2e^`&CYh3l9?AK)}_l)W{Lwy?UALIR}ROP
z-~SR#o@kgW9ab8r*Q}0+VzD1%c^Mp<1{k->Bb==yZk38p|aPq!IuC)y?bYH^Bmvk+541ZUtt$rj-YR1
z>g+JM`&&^(2qW0legW~MlXR@w4uwBp@eQd_Qt{BQZw##72O)ZT+}52hP+(@5Y@0Z}
zL3hbw8}TV&?PV+I7jEz(ejcD!-ABIwI%2vhQ{8-W^E`JO^rW_
zmnF5OnG04s{oH2i-R8_#0Xmm(fsw`OaJ&$w@%TVq{$sr<|HHzzD<9ukUq++=m{CtY
zn)uJ~^`_fzRI#Vw$5Byq9#Xa>C6vvEOI2MlP-6je1{CGDyeoB>JYy09F00l7R+OOT
zG;>Mgf9=e`{T41=EZZzpYh~!aQM?O;V(&U#Yz|=obDu4G-?Uutg&f%j5`zGs3?goJ
ze>e*FfMn%o*Sg%=kjWFWx+dR+4SXV=F#ADC1Cwl3ZGI*Ig45dI|!*Rtq8YHlma(0FA4)a*A`YD%h7rGoVN<5Cuoj|LMj
zP&wN@_99z%p1fl49?9RnhLjF5xG*mVwu7-MEowIO5K6O`eU01aZVh4EizUaP5SP;t
z0K6gE8@qo<-aUe$FO>hYay}#&yfd??OsYKVX6}pkwU^y7^b(`1%^_0pSP9+4o>G28
z=x`XhJKMX7+VL(sJ-RKCi9s_0Mmv~@rd3H`-n1~LeJ$Gr8)Zcfof3AGH7^F9{VupB
z0QU8L42a9S(rR-!&nB{Si@dzmPqL%CfSN(v))4qjmqm_K6KIk($5dt+${Bho>_LrV
zlhhoUgd6aePzFVPoTekCL7v%rx6Mr;K_R=>0+i1q{q=g{^1pUalNL80p-!woL6(C=
z066w$hxMdusx){ko#+eMskt~fxKJPu%a1J{uIK{($VCk@RYZ{`II$w7twlP>$OntjBke`@yq
z(atag!_NFqW_OD~ra9K!LX9ER%uqU6Vu625C^bySqW@
zl7_QfBwzO}>F#ee7qyfedamy#zQ{RMf?X<_EucZpSJh00vWe1a!#H
zYn*HvXYc%VncXIW;DP2n=la*1ePdqi10W#xv}GL-WOWU>&}Ii!N-7R7>X=Hez@*XL6HR)tr8Y^
zU#JcQzU@A!rDPW^n1w3Nk_MOCxQzL&)(<;v}yp=1L7d(ZFx
z&wu~PFmU`&ARJKPS8cv};<5km;eUUa;rIXa!-{fyHRJO_g8Z359r?jkh9|&uWhip1
za-RD=^Ce`>WPQJMAB^$?oC+}*dSCI9=N(xwxMRCK(;o6l^7Nu*4&KjAjVvX8t)k=K
zA?mlIdd`x#EFxWxF5o%5TJy1FsDx5HarOI0<(FKVLBt}6dbyYs{-3Kv-1+qtb!Xnjy~InVn+g+KN|%d;3Jil
z`?6D-QnHIj?PQB(94s^5|9<~kFCr;ADWi#nP3AQSS@@bl_a_q!@Z(Qg^nVTn=9!FT
z&)Wy4mh?|Xp95kau5Elj@EJ){EROMjE+84IXeh%MV9WfT_oo)lC`+t6xA`xuDO|pJ
zGVitI#XYoe>?2m;Xbh5c2Wm7yI|yt$K=6OV)_Q)!%py3(=pJ+V?nWdpc@;AAF?IGJKBl2uYytFpV{_J)7>
zZ#?_hVr^T@S3?O_2&njAsB9`%L_kP@5@mG8EEXk9M+Kn#Q$G^|i^IG3V=L7ev%Tzm
z#4K%b)3b{OrG-rVA*osqlyIkfa!<#%SW`NNGrj2PS&Hn6G}YA|e$4|$bVo4==CcBZ
z)$1}b|D{N8v>Il#t|gF+OS7#;+TPcVF1|wg%H1@MM7jC#+zd)S`DJf%e4HCUjjKuZPiRpzp<4BJ>gWZk2OS=fYH`IUXCVJ#_Z)Pw~&#BBP
zZ3JsWr}_aaat$j0f!Pv71~`^hMxpcoHc6vn&M$-&C;Q#*FgEoyCaLlFDn6veXO@|x
z$B{_v|4j`W#~FU(I<6N@RLo2Dew|+ym|g$_(!)hWwqgdo{mzQ_qSjNuP$n%~Q_++D
zic*cXP?aFkx}WZ9bLVhxd-o}XzaqkScI63H;tXWTijcl)2VHX@&?$vUiWiZ8c|*rD
zBaJ5w^Ya#vKPMP~&sVg5IYJ*}{;A8nl&79LCBZN8ZrbO3+J|ccgL2b|miR5EaCA}q
z-H}6VQ)7AaeA82ahZ{kF%Is>xL0SDRb)4oPyayYg=5Hu5$U<=i
z%mF}>52gR2+*#m;xebb>$XO9dZg^=+&=MD{A!B&-7zc8D3!pE88*JEHJ^38=tZhFU
z=z0)9^}Lrn)%S5ZPpM95@S@g?Vxs7Rf`&-wemv>Sc)h>_U&e1KMn2I@%OhK|X8Fzx
zu;2>|3!^>2p{NO>0j-F&Nha$w4N1BG_3Q!c7MwjL8VUPFf&m$b$GdM2Mi;s!hQ@|K
zA8BDZAu1isbLZ}+gW!m;H6TkF2oQ)`-(`0-!P`E_)K4@Uy_qdPB)_0=xca^JK)coB
z+YCgU;d3!IHGnEwmp=QE;+Vdu+U-Fi6DN;eVrp(-r+KMa+=U1w(c#!WDk4uoRW>#!
z2=EKs%LUu(^UY82;af}IXwBpoIDAgT6O0jNX(hR12_XW
zo=VHjVO?h
zymKYqCO<1Eq0J=G+JW$NnN3m;?2tNDqJOEK`vGnWyMs2@;~zy{1tO9-OF%IKIT_M>
zw!tH-Fa|4U4Tvuy<{#Q++!zwG}NbpNUBgU8kuvs%(zG9Rb|Ao)+e8Oia~
zJYz)jSUIa7cB26Y>e%-!w+t@@0|(G?-PyW_L@j=pdMfH)FbH+OYVmoT>ACxjU&kWn
zoU!6XMRx!r=#ASIj}|ZPFZ}6O1h(SK?$Nj{fU6H}8o7Tmltwj8Y4p2*PNX584SB)m
zx&EJ4*MacB9;Rsz1|bZnrfe5FN#E}l`IDL@3Oo-F~@qcOH;6|qqL9cy|
z$iYZ6)^pT25>c#wBeAFBN+u&P{NSjRba_4GfuwPIe?Utsgg31zM=ndIHZuhYC1woa
z37PvF=F)($ZajwYi*V@2&v~O^lIqJRN3v3iKX68V>Ha)u{v*1FvTiXDvo0o^1P{Dl
zT?+-^!ewP%3U+1ANls_xWdZN4PT<;<#}`0vx%^8dUtz{^y#>2Jp!g`T6IPfheSW>OtMT`iV60wKAvpuR?OC_6j7U(_O-_!-&vE_wAyz(&sNIxT`S>7|&
zpP-56%8Vn*-(jG@50sP)-P9fHJ<9LGNq5?M%Bk@g2Mfh4W2Q{tCU%qO4j_vTaN*G;
z((>!4LCNsFQ84%Ko0J}sX*oH62?0ME+>c+n7E0bKz@ZG_XQeHGBxfzrwo#Hme+!d-
zk2ja8{N5Tg7;=GMJ5fU*)|`>Io+bazUrTYSsi?)IW961KHkUM(q@=wXz6Om8@Y;T^
zYVQmat08fbf+a-ZH?}nu0IMok2j5Srg_UI-E|=eX%$kI*a2ExJX$B*>0{*^%ZcWd4ky%pZqm{>Wts
zimh&#p|8BKm@Mf)?M_YS4Fr|eKwgw>yBOn!J^3_Gj$SiSp_<6^-vcS6uB9}zvH_Iz
zDxN4(B5Ebkzp(ItMAi-v-!Y|yuGv&qhoF5zOS2k7xxsSED;iRbzmNK&Gc#mabWi%N
zhO-vtTR~PqHb?KKB60`d)xk6#uJKp!ngGK@ulccJC?5^@Tz*W+#J=EjW?-sql(FN{Y
z0Ji@&Gqu`13J!2!BtbEF4#xeEtZ}Dy*&;T3N;Ud}c0rh;B2W?!%xU&>B_&{`G`)fC
z{3SeN7prx}2q`CaEzL>v$**#80yi{FZ`$*UFI8XKnlduejht*Qz<}8B7jo3d_wIj$
z?Hh$-zDSf8BQB7-N&3T3|*^C&HNoKM?vd6&yk8A18_-$3J)
z7|LzcpF05a$1RFjA
z7t`o*1pq78v7dZ>D?jRfw*f$Qf}OG+eJcR_yD%*wLWOhhfFl3Y{RJ9(QJ1oTYOBM^
z9{@B%Zyz$w%&n8XfI0}s+D`KmI?2a_wOx}fidN>3%qm>8&ADC
z1;7UbK9sCnA&47}A1)z)U@Qw)yTw^O;C<
zA0b(jGP6!Tp+FlKOA)KbTLQx
z=Zss~fS->^p6P|-i*J+}28uL=S?Kxf8v{MR87|)@UZyzFo*#n`D@F`W
zL~JoTxL$JC2TZ~^2>t$$%1!uLt5PCQ)znpM``N@EF68U2E?h3vCr7l#s|Q9~h-<@p
zT`+`P$3J;|()ook$sV@_d14Q*(@=ek0S0mjAw^`ryWZW}DCpc>W=;opvyY;6pwcBH
zQszPZhpJDp9CrHOO#Lwd3Q=?i^nv@gfrp0&cwRyJh_k_M85Qq`p~A-RH$MX4cyxGx
z^;L9PDwXT-i;re{o5x436{B6gR@F}Y;&?9*1_G*~3LjB48j#85c)u1-iWiMI;_8_`
zOTod8A=G&4a5pb)OK^F$oxRN8485H`0+UyhsU}4LeFQqjAb@w|=y`Vl8R+L3X!^~N
zy;&la7AM$$g&X}0V%BfEbpDl=kVfr@de2HtSciFYTi0g($fj$p3ZbE2;zHfXSj6mP
zp)kO0!7Vuh-g|i_xkaCy$jlAUyvesq_qsoP0k##ZL#^heVoAG7)U26TV3R&5-49Su
z1qL6G6OzhfUp32$_6)S%?F5?nn+2r$n`-5ZL5$KvC_>YmQ>=aG`vMEgt8Bxte^B5z
zPa^66#SX`Ezw68Zorccb&NcdE;5vHNwx-Xt9~Tz~1SZjra$o@eJhBt2!!h6=@~N-a
zj!O#!Pxv4c`5X>k0}X_9K!lt!yrMPY;X&P_E@R&5&mT>XaTo(Q@Gb@)W%sTDIQT0t
zvjRF;9yv^veL_KxxAI^!f&ig>ojHiz;#0>vcnI6=x7~9*Z)9Bse8PE#+
zuVW!>K>Y}N`t($bxs)Cba%Mm(wB#eUyN{NqOQORJQaE-x8nD?A2=QtBwVQxvlFyRV
zC>6I4lr}>tmBjoQC!4GIEY6
zoR5ZQ2~turpw&?we@0`GXU)^trM2R^AgC*cEdTehZ!aI5XW!XOFj;X8goT)_HFjIk
zOm#SnEEDGg=RvzBI584OQTy4Z`KPRJ5QIz3%Eqdptid+Q38vhmy~Pc#-?`z2h(1iAK*2Zvi3fk#rS9th_O=lN!R&bKnhIUkzhD*&^y%%K
zJ#J4eoaVe+vyA%|ursS|xoL1=S!t`|
zs8wUqx3gfdA-d-Ie|V
z1?kME47=Dz0xd2z&L5)iLnKkiC;wX6!vC6oVcK4t<}^l!KlcQyFNcY&hj4BQ^(YO5|pOR^gB0*%Oe*@Q-0Dk%dg1a
zl&;Tcak<}e>HH^f7D)pO304LnzUUlZhV%(6BGcBriKBijB;3M#ct3R6L9)MJ{c2=z
z_)s9pZ5xk`xYhd!B-+xMvad0kHn|@e8>D!8Z$r$sUE{eT^RzlRN*Knz&tVhmd9LP+
z0k9&S6rLDU>&U5COS^^CrPSpmQ@@dnxcs-3V=PP&WveA68$nHibk4^Iw*rOihDX4*<8
z!)RF)l$MB)0_=LO*@q{7qLVh+npOLvz`)9}JrKmmySAJET`g?Or
ziROydMR@JRp=>~`7(9pU?d^M~K~|4YV?2|9Bltr2x|+1
zUzRb&d2`=}hDIl?
zbjH7Cd-fH7ju~cG_n#6c_{-!1X6ANHwY_QbvR6!11q9iHS!>cd#ey^XPrL#n#0WVk|15{Vp`+mYw43S$x~Twa
z;?=bC`<3Wtjeb%i15!gWwY4>X6XcraehQVBwUo$}^s=LqkSAderVsPiOxDI>{i>qP
zo>5RNAqDxo_&9lBJYh#4T-OH#-?%|jkV$pwky&4oQ`V{=zn%z_9Vd)@5G~&+Q$f1u?>xm^$Tz^
zaDv~wR->%m(Z@o^Iy#ovayzFxr%a1gNyI){O4%M(do`*|r&bw+(mJmw+9@Dzszfsr
z^PMzLJlU~_=dNEP)d%Y8Aw+a79V1!A*`WetD{;Rt>e^`JF{t~cKjK!wby*}!<)4u3b0sF
z4N4uwg~jEV4mHj9cPLURargVm3Q>carnaZOh;3VtvFy
ze-MC$7~9eYOdMv7PV7MMqKUV$qwf6g(9u0^w(&b+1JHH6a6S-cL`~V5aPdXCMEeTA??HnLajAr1Px_x~vZR1rMPzis(kooiY61_x5!|+mIs4bn<
z`26FM*G|_`P&o;Du^e##-^&m&ucccqA2K{JeT{}U|B_^-C%<`bz7HO9b!y&0XTjRS
zc5n1_K7N0anXOW2j0#w8BWrt}>Z~xnY6^@Hkk|MO8gk|55`9(9sZCEMOOlWqaO=1i
ztN-TqX4Vk~JBI6h%9}@dYByM#wATxyj_-O-{_HqZ+78Mv)
zvngL^wfCMRNC0M>#`~M(Bf?KqmM3~VHNT;``21Fp8KF*p90mZEKRR3
zykolpF}t~IL7sF;Y-8#~gZRqfv;q+}^Vs-D?oHqgJmz+`FSGdIIv#TswCJ(HJSh!~T3bB0MA}
zej{wEndjEr=)Uy4vE|_^j}1;@qM!yRn#C{MkU@4Kfs*UZ;kT7F??bOI1G0*Gyu#Vz
z!CGeERZv{v0Z%Il*y9?rRGfwX_|2eR!#;!==7n}$$H9xkcR5K;kB|tKr@8ZP3N9=R
z=~@dFC%v3jQYV>n5&Kbmi{!$X&TjnW(|2!kZ|dg)+)h`fBG$vRa|4&9dd*h92FKb!
zCWj7;DDv-}Ha5rk2l67mwwG?Dw|XT22PzE{Nm7ejdeWyt
zD+^5u{_Mc+8~++Hj!8k6ee23a0T!$)t}OOEalQStCSK=Anc#U(FZq=-0KgdIM$o*gmP78hP3^jY=@`3^4a?g#yt)Za7(JnpMgPyz$AaEJQ4D)
zFymr$XqjVXaCCBPdQ3>Nt*Vipl8b}tRc@LDuf40BHdbJQfmM~7Oo9NTEK=kd-WloD
z&n*N^OOE80T>TGnQl=ttv1ulXJH(I8?2ljDA+(HB=Hnq%2&4xh_>R_dcbQQ^qfIH?
zZ(iG+k-&qeHsqJI&(iCui8&ys<_Bv#9&LGX1+}=2i*V=%(^@2E$8T6ZFx1haIuXcX
z4)kHPy-6{;DfmTJX_QEE1uB$3ANS-nb1ZPoS3KRVF01ru(S$?2W`%lw%r|$WT-90F
zX6zmA8Vr@T61$4pQ(1=|twqg_R=bQ`I-h;#_&%vJ!N|uLd;sR+w+v8wikjM0(}c=66tu4-vl#Et6`)c1%%MCrj|l
zmsM0uOt)JJU|Fs;9rPWW*Wt-68Sf!eY}RWDuD4`bwuSvgJzrvI(HiD?-E(LL?u_Gk
z;a@?9!_NIY#}o&TuFDshUQgLUXr~oR_V;Zq|
z6~hGIS@)2UdX<4VLQr=gtZ!!7+5@)7G_f`dT?0tJ?9hx@L}`SB-qXKdz_B5F+6b`m
z0=4;;L>T{yyyUziyR+`=u=|Lji@jydA3NoOH*QVcpuU(M(WjxF@I+!sY4iu5#pU|)
zp+klX%9zrW7MBg;8*52an#c=>8R8aq&!d2m6l3iam%sj2E0X|4Vy?*>#vp_!vM;!+~4;gi1o$1(>G$X6meoP;l;
zd2`o--w`B%Mk6ZsR)_bRPK99`FNo9?u-2UG#OA7yijq9V)6vowzaRbWm!e=T;IYFe
z^J}@wEA}YRM?A?#WvzML)6ohIOzHstL2t9{4IKS2UNxgse@v+mX!
z*`1Fi0Q;;Y-SgAuON5I#frO9fK#tbY)x2f@Jyl%r7CLr3oGYzfDE+ozY;2gdBHgz1
zpHH(VA3}WPz{v8OAmi#Jf@CIK!N(t4qML-YSpCC--!mGWwgEDHQh214)e!y0tuFJW
z-Q~=p7^Prjft6t?bF@@kQik?WaV2|Y+<7fH&RFOe%2q21v5Jy13ny{&t3WZ+XSN9|
zgy67ezTALJot;w>CzG2@kmTi}Ef|`SC5PA4T#=)suASTR?$&%Ai-UtJXDcsMj9eFq
zK>G2X+#EfnV|!`}Adx!BS`VwwjM1wL>PtG6W>%Y)kbeK(t9oADP^-tpDKCpDTZjS!
z1{hb9RtNS>%}n1$94tS3t*78D9MPPrhfs|Y!$g7h9MmEGbBqERXdRL6Qg)jr#d$6cH8
znKAx-D=LNQyERb#$SCASryHpXTs-Fd-6RDAUaoWi+%GX&Q(M2VENgjr@b^(lF4^jb
zH((q!M2_i&S^1i%>f9((NlQydYnT~KskbxN9Ryzm!gy<%Yl;H1bEH6lY5iWDDPv@W
zeh}Op>Ly0n$6wh_q2_BS_tP^m8iABb?@LY5KiooR-Kdb7L-DJ#>bPA;aFyQ{Tme&6
zYn}M`ZSM2*u5*_U4>6^Ya+2A{SaFe``u%*%`bcStdBD2?WBeaK@gPtU5(s`C{PM*1
z4{H2>{U%(w6u1=2|M&`}ZuWr1BZyR#cOSHoqn7jEd=
zUJFvas*O|E(KNIuumT%)P=pvC4@Aq%fEbEu;y@qn_yQDOObw4#Hu^SNcPY(To^ReH
zr{(H{+Q;6se7$NNZ1Jf3Y;V^(;YXj0P#Az5SL3;wTw`UGh1Y{$s_KrG*|p`c&D3WU
z^be@GPS;QCK{*Pai)_m@BQ*nbSygL>?z?r*?mFH?7+;XzoR;gVAt-P0^3|QF7+q*#
zQOSFg<)2;40kgg07<~eRILDx@72NWqw@8Eob9{319TZQ~X#{al63?g)ZG_)t5{6GN
z*LZ=m)6$TUJs>wM7&W>?CV^eQFjOAL!h>cVt2`nxDuI^M!mP0>+Xly8Mn>bkp1q!^
ziC=htykb6a%n&)+b8-Q(ysezRzP_eeUYE*`QG*Es8?6y9=orl`i{60(pN{iK3?nYvtp{^Ljm6qemjMTCSOMyuY*O8&WS{5X+4O7jp|_GN4T
zaP;6f1K|-RjYaU7*W;3}0b!VkSJ$2a6}C^H*>S|)KIa`YsxmWQ=}IuidZR7o9lZF#
z^Hp7fZ1(sQppxPK#wXUQoEh(oiE6<8@N0kRj67N@g1QIi7#N6DXFv!^W^gp9UIzY@
zMJ2mQGTfdm3}Xb{vJf?c!1<4sR_{DEM?^P?q#F1RWB3O~rzf9PF1&!ioE-24r0D@0
zGmkpgx6e-x5|s10f(|X{7(@TQT6a5FO`c=yXRkC#bQoA@>Kyw?_)|TC#oEJ~2b;5+
zkA_)Sr|$RL3F*Z>%{3%tE!v|_Y}53?P+RORY>bK6h$|A_O_$lh(YRUnH|4ZGJxTiD
zG;T^ftf{N=Ai}J=nEb;TG_%C>0Zv>LtVY?J=I_lhwXWmsYb`-1@OJ~KWs9!v4n1@F
z9*GAJwrL9ja{+Tr!-vYsDxe?<(zVbu7oR(H@JRQEcV@K`^ggzeqUPsrF$q%WXbE!u
zekhi!l8tE+X~_D;%Slvt(DOV
zo3Vst+hxyBtNk4eIIzs6yp1RG%M4P~)O6c}X%3*b1Ol}xs%y*~X2Da3;zM#W6RygT
z#{vg=*|d}*affaZo{*i+Eqq&Ea>t~L6wO%l`dA(s-eJBH4(3MyYg;|BtI13Qe^cT<
zsVRz{KwN4Pd*dTZYunJqw0&LL@(Cs5Xm@+ym2}6>*$kmUPf?K;x5d!kLi?;*gG8tL
z@=kzPR@eBEP1{t*bJsheoxLAyje|ZBZ38$5o#CqCcisB3&S7VGR#|q|@88bPw2U0J
z$vw6%_Rnt7*rukwa()?3-TK&lyxj3pQD=8;cB#F0QEBFb(#R(tIfEyV;tC&yX_;Wl
zPn=_%u#A;1VAE3Yej5pseG|c0OzZLIPqmzyh@-UIJFsYfPz4+?kw`doVO{
zpV%SE;;rPL`Fxfni-Z^XSre@~Hkks-zwhF@SlC$Q2+NeF;BUQ}xiRtcxCWj;{5`zL
zL&5jkyDKoO-p6p2i;FxiM5|*NR}Pgf55Jzza8G75y6Nbv-%oa9wk$PY)LsA~PV(~6
z%s1$qzcj`8Bqv}(Lc!^~3;QHz4J&&Fk8wZv#_DSq!9T^jtR3i;&5b&C+~p5Tw|!%q
zyU)K=_Y8uQs^4f6D-Mf1DQcD#`pWJZ(-Kbv#;)a$p=g^MeKe91QrC`Otk{iI?*FDz
z;Kz@EZg$Ooj^G=9Hbd|mpMD}9M_zAqd6J%ki=&*D1QGCV-;Q^>-6aO{m_V?@7{IkT
zeBi<*&U`i%_t`NB&ys&K;_v@@HRw^$oZ8$HzZBCK8bH1_)iV?P*);myN#?Eg^8xaI
zoqXasVOi>G>UT~XYT#}oM7lfQXZB!smSdo;uIh9%JlBh=OdefeMUx1>;q}5v@F+tE
zTybM@H%xbEw>hZ0LGRS)qaFJxdq0D=qj+Ol?m;KnhCWZDlnimbDKL_Pl+Gx4Zku^R{NTtPui@Gv+6Ho`m>XL#2mrr@jAt)iyN=(CqOb#K*lR
zV=sT*R@A5>Dqn3SnfNO^Pp0t{D>42`uoXWROZR7?W&UzmXlaN4&o(F4Js~jFRk88p
z+}z&$d3l1xH30X^t(2+R$-Z=yrk@O)ZwKv~?su3{Hia`jhZB-9?~m`9iFp;X_j_+Je6R-ve`CUd
z^yAB+?%%Z&REAl_xvHIv7|*UU%>1P!BGH6~a3CL87V0Yd198M0lzIcq;fm
z8qQ*ppf3%2J*L>ElAggr*(uQ>VclN0y0-Ud(lZ9jNnmyP|
zBpL(hWemAL*K+MaP!fF7ZpGiRs6a*Ty)Gy&fD=+MVt#XS--AjJX~)IMN;E!@AK0@5
zZaZ5D-p0@MygzJpPw0Z{fP0ghPrtNovsGVH
zU*l;|AwiUNLSU%--{a)xo+L2R$7t$%uU>-Ck-TKk%UcE;5kt{z)5yUa&n>B9Q>Ec0
z!bY$VEEI-I9&UonR0e}_(JiQ$$MBvUrc-l`s>N8|FCRRIx3Aek*oK`I?)h)j)irIe
zt%_GV82p8B2oUhY6TYU)(Gt&fnQkY9#4Pbe*NAm7lIxD1A1
zgmMztAFM~2Vlo=u)KIYY@wE9g6qS@Ql^W)T0QKIG$7)BxLqu{5n6Rhzr=W4l*_^DR
zQ5eQv#rJPDSnw6?{KXFf@Mwa~GmYC81p@souR12iDCgYI&36r@7SXzWV1J4*eB2xN
zYRgr9gnU869Rjnyz)B#6Pe8uOU*@~r_W1Q%yJ_b+eEdLpX$+%@*W}sWFP(3j_G@oB
zC~EDr9#kyHCxnz-omAam7eRc7$jN6bq9dXwV+$p=weR&7eYodm#Jq(`W;#>#&4n&&qAL^Y!y<4{$H-fEy1N!6I
z!SPD6&{?`gtmEZ-Tu^LR;FEY0QBR*3?QwicW)tpg!IeQ?lFRP==4`+P3j+GtIp2B!
zC?WtICoJqdgroa3%s_68{$-
zI$hg!*wSVb3|=er1Lt_hPXEKD_>UYTOmL!^#nG9+goB!jjL&1(Qt?qRUU9Rp)Oki0
z{-GSTKJBkEs0gFRAYI!-$rk8U|e`|{GsS=!}Rt1L5XOXY!
zMqV7_`aX>ZRa>H*f#>Maagm?TALlb$OY3@)J0;RpyRUWOyVr31Hv|(^>arS3L1Q#mos=4
zj031A=0C%`W2B~|tCqY&&dof_puxJt#3$
z{Uhdqx+816NE(MDEKgiwYzDjM>2Fah%5p-%EAI7TLFdu0Ad>-XHWZlQx&!dO1E_b7
zHI51;f_deoIBB>ZlaISMCIsaN4I-Z3yU10+bP>nOkHK=mMMZ09vW*XoZeMhJbYK6h
zyMEtE-ILzzhJSxFJ!jLg=p^Gv<*21;hy;Ck{spQyxk{KUnH;<;QGcZ|ioJXB;^Ia4
z3(%opCQ5@@HQOvsYP*XNNF`*Zp-X7ZSr4+0${@Vm4fE02bOqgC
z4&;RO3c&d)9Pl|b;_7nW-zy4p1RuhigC
zX;9ZewGH=4iS=v-Z*z=MpNU9cWgA2+fy^QRVNe}nMRnuA{ODTVI%qn!u=88wY08QN
zi%|8vii$zu1H-O@p3L1hVz@@<8=mg$6@??vQ6(zjeOK^~{c9LlN&$198BYbvFJl><*#V0Qq<9+USk!J_CD
z*Y%q|P^YL-!7PqR?}m6MrwlW4%q*_7S&{5<*ob9uFTbe5((>#vOM8xn
ziMo*+!N&Ktrrsti>W-LZiP2mCUP`sH0ds)2fpU6fI-8qUYMNMF$;dBC8dP{Ucm~zt
zxIrwGM6j4BLNLDg#Fyg{p}j~Jjy@aq&evVHiNwv`9FKJkVjo$^4Z5j&Knn^q5FpaF
zdI)l@)iceavYF=G+I#sp8L)G+vCft2YAb$CO`XZ#E&S~WoDx!^9UrwcmzS6J6s`p`DWN&o2nT5g
z%nc2I$JZR&lmhbw1TH7wRzz))r>3Dv7DOqK5gCU1aYe&2$uB3P)tmd{>;saJ^>
z8db<%0yi4koc0*HP|#+Ok&*=w{0>LsrRrX;2m69WdgTTOwnnC~UkP(bv&Myu==LO=ZnI1{k4y6rw(Z
z@k9Ma{brwEs>3vny~P_$^Cyz;|435sQ&>4ziGoSwZ`G^liy5vB*Yyv0>U!FHjrYG9
zW>RseO+~BEbanq6?mvvwmqooHda$}@gOoBE;DA>C65<-v1@;>fT2JQkG7VvaPtO#Z
zK$HW;Ll0Oa`3qiT2ozA}cc-__rLD$egle7mJF=xIvC0n;)WxJ8YY|=XQ}IBW%zK(=
zxlhK#okqA7s;UnUflpwRBQ=>G8l4)q(eZ_YZVr+M#MHGf$}f7HL6e^F{zhG`f>8c2
z@gbWrZ17T_j})(a-Q-WcAZqD^RldvHEdk>w6?zVOoBeNWAUWmg_!n^Y9<)>lu1WiTkQ(^{*neX*7%DP1b^Rw_dXHMwgF@QnGh(XMHWQbs85&f0KnPSiggo
zkG#J6#wlDI*t^W{c|;}5lm^@U5_A1;MDJff#6kQaGQs$~$1`RV30YWwr3T$?L$}S9
zg`p-B4-e?I+ZmRhcFkVofxm;-CG%1b6G_|cUAirbtuc%fo}7f|Z(afiE3g#yJXMTt
z7qtN9n7O>+J|&3Xl>wR%L&tzhOQdJk$Y
zQ1+?EsX@M)0~E}O;t~n})>y&0?iLfp#N=GTC!CUhVpY1P4(F-Ar#Vy%#zw&NK;IDY
zH&?~K73Lx4pa<&;y8r<}fmmQS!gBFHS%ALFI=9Xp=j+yZe;QuHACjL&Z-#M&Oh323
zb(h~W0eOU8fsDvYUT*$v1y9sY&_L#`3eWiaxWfrtGC)YK~$50$RBq
zyBS+`mK=yWP?dkh2=Lyo1WB>4%Gai&P}?STP6+VQIqH*j)vvl%V8A&^(~AjsSz8qP;fFqNC?)m5{!bO%(~q
znZJ#E0NNTl60fPUgtRgubV%Gt^==qLHHub<`Pu+jK@IdhfW^5dzncP+iJ2;0Bs0pQ
za^aojo7vZ5RAOe>rcS>{LsHK=W+GwU(!R@tV24~16B1#4!3rjqTL4@~XV$3T@!I
zZdfWaM#z_eFMpx3+XgV46^g5BJ()67Pk@8gOcP?FVWADLZuCD%Qk3N7L)HV9IJxg-VYjlzzoTazy!C
zm4KYZ-elyE7w}N!ssZvgcd2qGBP@h@Z?|q1T>JH_oQ!!@QYPJXioTu(`Sw)+pZ&P~
zcyiH(X3`?H*`)d;SQ5Nk5B%bcvc1|KrjM;C#8O0JU-re2)v{jB8;~REffmLl0YAoPA5PWY~
zxJ6!?jsAhawhJ;FD+Sl-O(&4rUW^88-xjrfy#?)rXt8H3(Mr!K32;F32#{W&N&7T<
z-JMiPt`=11<5_bbvNBx$&X@<#L=5|GoLW*5zJj;(r%w?AAGvko{vO}ASP5~U)&KR8
ze7zNasi__`fU;pIJ7X*IRmzbm1HOeRd;vp44pEk(T5|JCEv$^r*lta@`lR>F)L0=j
z2D~ZtDHvaMZQ*ClUr;2h5CyFyasd{ovL7h{YK9u%#TdrpMGD!H=?ruQI_&q>>Gs*r
z$I(X{ZZ0lo!CSSs
zK2|BwQVvA1;H{38w^pw8Z`ge|FS06-oDfoBIJ{hy`KW!eYTy@=`IFuGIxEfR!=7u9
zCW*D(dw7gV&dJahS0}$+XVMpe0nAV$aI{hC6`vU~ovC6@iHFRB7faP{;
z>LgvVSt(9)_t!XFuA{?lUP;a!P=)Ia3$;mr0&&1-6M~KEwdeu&1H7WasU-gay|hUP
z$4ckr{`(f1X|vp%^qN+VzJis@=lDk1+CDX}(cH#s323~Zj1)mIOGqnQWegi21d2&h
zw11Wq6e;B~cuC3fefag(OSGf=n!vI3>SFKR9(;fxYB-W=7DMHmeGrnrWeR^MuA
zpR*I{7%0#LH3&HU^$g^du0l6vBCM=_gNt`J3O>a(yog@24<6LpgcYVQAi%*@Q&3W0
zQ1Y6N;+OmC3)7R5^oE!Zu}5#0ALddlltb8rJ~iI(fD+{ASb5q$VIR8uJ&9oxkz?0OoggZd7PpORD-W}_#Q(Uol~YW#iIf&{oK&;p4hx^l}%
zs#!d*J8BmvR|bm5ck?DdO}6Y@V#j0OMr6!1bXcgC*OyQVTrnNFtbIas}6yjK{l&AzC
z&lhb^fuTJ_7lOO
zr8B2nehOe@cNFI-kHASn!%iX0m(v_(85VRu5VM!4(zTcY!=cFoboVrwd2?(IRSiu67nKk`b%_T?9S8)XpmCcX6v73XY8dS2BpTRrdR+bSaAM$GYm5zWH-f6#zsxnYHFyhguU<>RD
z6tChc_U@LezEpkUe~NtTEOJ)xSlK?_E{=(VCac&BTH8+p`NO4x)l`)k%-BE)6{Q)+
z?bI2UKAgcs4DaSfAAtWLKrX;(ASzEm#o#m&-~|T25NwxHtoPvm#?Ld&?auAQPQU_`
zM_^}QdV`mSzPeZSk%Te6@=H8z;>L`u525VTD28zVH2ckZAz^}$CQl6yHgut$MjZb
zC%=t
zTe`bjKFR+ChRKm!OShMbQ*Z)a3Q^ZXx{zx`&>4i>R+P
zz?i2$g3ns$3}5)nHOvv1IX45t9tf7zYhzn!xf}CAyu4l+rDr+cdqMRLxpVO!g{edV
zFGAOXU2(6qB5gC!QZMmlF6nJjMMiZ#i^Y0Hm`=;n>Q|1VB{Yr(KuHsX)}j(xH4Y!V
zLk@J|bk+l*s;k7;ojo(@H2bNkaUu9>8chUeItrUM8b(S$NN#5bBlMNPFSQ^nJAFph
z!jQ^SkhmlmYcK6=3B7wt{gqr8OUDeG^%pD%{F1&*O7aINcSTxrGMxTP`U?Y!(E5|E
z&DbFo`yp*go?gs}gqXnBCW_)z7`kq@H=s^J6j|lF`u67E8pB&=5@T_|Kp&pnfs9>n
z>LNiyS$ciQO!%{Z2m0uAhCzeC_V-^FM@~yJBEG|zN#fz8q(;2)uJ@1)vxkfG_F@U)
zF6tRcxcFOun}J+LW3z{dW`ok9kH}458yWzES5+kAA=xMi1030`mm4M1shO#HgGsw-
zrPDxF-_PsO2Ri?hgdP4$%KtDoDAW{q(DBXv&jr>N9~(;p+M3KTSrH=(g4!tA4dzWzHfq5RMd>rX4TgoE$KD7%9{ibAj3ft
z7_7I>yG1?Qbph0GlU90qO}UEo>ySh-kp2W)rR9F-f@_)^;rRI5wzyR_p;a4kHTk
zg3+k5G{rRVGPuH7qacro?^~;?qN4hqcA&U^YQQn?GXEgYIR)@+AH@l4<1G!W7&cFr
zX~5=#l__wq2!5~#qz*;gwKM-pv1JBAXgRHD{O44lmA$B$ZsOA+89svbgdWAY3QTnDO4er4Of1){^d6v9Cg~2gQlpiB8{d
zK}Cv`s}yRrq>gG%a}lQNgO#O8viG)Ec86TQJ~|@E
zZ!rXt)xZDx2WNkB{huo*d`VEJ@c$*8z*T3Az7qc}y_mzF5$*iXzxrA@{O1?_`y&7M
zS2@=IDa}Y^f5ra)^NRx=(aV1PI6mK**!xp9Uu`y0rd>NQIQV4niwu|5{Cip1L2H><
zis^K@4h03p(Q@lkyN7rf&RCX6Akh#R8Ch3X*Lp?k<88ag`zI`Xq~5MBW#401$KrRC#>f9?9IRY5l0j{Pm9yuA8-#AmX_|@
zqgjWGjiI91Gcz-1TO(ka)dTG<>i%qXL4JOIQMHqk)5^+<0RQEgvbplWJ+{<`56H;K
z6(uEijR-XK^oYpFjP&#mjR>DCyLx(RsB*Hi?H_KPjEvU21&RI%k0i=BgM*2Ph)7OO2KNTM9OxZFYh3RMf2-5zJT*D#Xlr|XcGhUWF;J+O
zGd?i^qkn&W0!}=pSOMJ7XqL!ynRX!3NE*-9nZKUbjhGT)S~9ye9@OM=@(qRG_ODN=
z^|60Php?XB^5wz2rMdac{JhOvwcgg@1iET_v|-QD-L
zx3_n9kqEe1DJTLwF5A97B-6S%gcC2=0>lFhLVz!{CrdJ2#g==
zh<_=Kjg0|;DT#`T0{?n-xLBdvOhYj`I{L$DPtDTOlAfNPk+I_V*j96XPkVK3?G++k
zZdsYNscDVd#i#z8KS4o3Vxd@EJUn~5ySv-lE^cn=JYVFgFwkHhA0G?r!OVCVXd+*Z
z6z@ClsMA_c_-k|u@Hm#AKH=fwA`30Hc&+D(Lsj0tHIIi|*CuU}F_>|wWTNRd<$Cv7eigp2!l#`QVV`C#AAONpJ;^$Ja
zYDv(gXh@VhUHfWxXs~h$yLI$j0Fb-+8tc7<`f6|=_4PMlxGbkWOZZA~`F|z{n_PCQv#oIT;U}9FXw-!NCvdytCci8{h{oHhwWrQZq6kZ((5}_N4{XsLr6}pOcgOIHgX#HAha-A$x
z^rKMDmz9#1PJVA7Y+^z#?FwG=w-*S-B_)AK1amYdo8Xiz#&Z`I7JxW*_x4hfkaP?V
zhTdCzkd}srhfn5m$j`{gsI9GyiBZ&@^%l_K=H_PayMx-()6@PKO7LtcbS&VsP!Xhl(hfGX__wS#8?v^)T1dV>NBa8^Xc?jKFZ4=;gbV;ht^dgI&K8_3u-Nea
z9Wc*c$|f<3iHI28T^@kPewShg+3rpj={CE)BWg@yG1Jo4CgOGs+Qz}d!xMEMH)qZM
zQ`n1U{^=9YB6D-|=PzEMvXO%>3-Jj2db>4oSJxX{7E?|h9=!&~{>8;Kt31%%g$hjk
z(!b9mIAQt)E@0_yGKA0Rdm{**LEt-p6fD&{1oj(;kZJtThk;6Uo3%hHKlbkG=vf=E
ztz!mGPQQR)2Ly-<3BgFaUhd=4FfcPKk)c^Hw-7)iBqU@k0(Psrl>l{9VMvF?Sdu>4G&K`XRId-*LT<4+PbW)
zEG;8rna1Svatk8l2@brdNQk<=z8;uRc6N4A_iRN(b#--N(}7rO$QBrGkmR@hZlL(_
zW0(>lpPT4s15itwkWi4Dn_E$lk(L&&yq?)
zOU>?xh=^V9eB1w-zsgFBxQ?JuY)06&?ojL$G(pbprdirqjoY}cKH0JGEIUoYTNIqS=dwap1*VorWL$Xz$Y1PXy_A-i!iU9QsY}$H0
zaGZ*YiiQ`=9REHx#ed+~QxGAMK%_Wc{~kkN+38T=6yUWQc)adig!8-k>D0bYD*toh
ztzmV+6ew_iN;Pu|3xjl%LCYji3E*+bpVxh4NR#JaVIghNfHN~Q1NQAayxwUK3!>Bb
z;X^lC?_k#9BN*Qfu)=6jo=gJT(}y(fIO)8qSu3XQM>TYMPEH(%LOxYezO=M7SAmLD
zB7%&PWbJglKSsGgK2L!vI^Q^Sz{S-SM$pZTn+r9`7vK+x!0j{Vy+8EA(C@s@Ge2Mm
zvaxhqKF1;zqYlt
z0pW;xPYc5K=fLEjm^JqFM_^5t-$-fFfg5Sge22rGE~0DJhp
zLT<5L={RbAiWmxNXy8^>o&Y!@=G6)qCP70>nZ*q+y_+8f*XoC27Ke
z0U@j2IyyQKF-5R~OhaAWca|?sP7lW`z8ZNz92N5vg!+O*3S*7==jP_(ueBo9PNY@0(L{-*!QVjlTA%&Xpj!nFqR;Z*Vem
zbI(Z!zT1#P0CRxM6hlHuRu&9oYHIrD&mZ7|foXWl?@^bMk^)rRSkuD7!pqAmI5=2U
zRTV5%#+3NnTv$j2;qbZ~N2=Gmf~P1{p}B#P2n1dd;5rF`9+cnb2C$fzaS4oikH2Yv
zt_*o2+o2<7<>as!0h_{N3W73#d*sr%ow`FX(J5pzCw8dhm0VovR9a7g-vwHFK0Es7
z57uDJb%uOFV_h9FIzSM8V`EHwe0UVIqK?iYum+=}#7;ZD8Y-yZ5$x+B;@ef6K*P*TWZthc?}{h0#X^&*
z3yVCoOtSm4-$2*5x9PmDN-{DCH%-b#D)9c%Nl9S1n+YRAcpU)f8k(BGUutS-K!Q?I
zQkt5YC8rjc;Oqnn-`uEu>skb=2TWVCfOku4YimXZ5d;vi)k2-!c&=0zIq@(JhKqg=~CV0o?
zSYhG)nSrB!%ki1l>zMJYsoX)!E;A*KTfa0i*zS96(!O1RKj}
zB!QELxSjW@rrN~JOkfaqgFKPCwQy8vczCpBWMua3SJ$N1ef{z_&y-_>gMv6+PjhQ)
zzv$}|EB*$m(CT?tqiRCH=LRsX>Ba68z&pYj9uN+@l?Di5{+(J^)6;T681US-wzis@
zvnd=lgaTe3;8NfYQxX$h+})oE0`F5%Q2{`^sHk6D9A*O<0|U|x8yXcjB2g0d6#C1(
z?E;a430fK&5Dsr_Yy^us_ICf#{ug>~Hbz-Q%CnMuGo|8o+IR!G*8
zL`hk>Kd=u8;Xj|ZK$rot9~R%7gV0BsM?rhf^tPYU1t3dzTZ_Ha*QjPToB-
zVgv3E91jmLN+q#T2?@28mHoeetE#ER)5%zAWaBD)T-e{Yvd>O5@uBI~e@})$5=PeV
z@yXJXe68TVj@caPGeC95fNLNZ`xNk-m3Y9cKbqW63iLvEHN@}V>(}1YgPn5#Gi{IM
z0Eq9C3eqYtkjMQs(BLpUwvZnqf?9i7JdfZFVIgEI6)o#nLO-gi(1Jyil9JX%9VP#u
z{0q(nzSRX|p`Zxr?jl0~E-~u0w5jew9TST&|BFX@}{iW#-C
zx;iC0Q;0oe)?n`=vteEVw3g@uaGXnMn%Ri0EiE5)WBRp~aW8Q6MA=IzK=E
zyx1UxG+P4~*eO&gK$g?Lk0dlSR^(#CqES1>=-d~uBg9D)U$cPB>fEVA|^_#pN@E%4?tNV$(06t(f^-)k%
z1a<@-5fOyO9>C~;se@M5)_3PSq(-zLt|9_206^R?j*cIj-JC$gc;n&a=y*O=q7ELR
z&g;Pql9ZR%t+V}y0B>1=OVerfTI}z)0LBVH14{3tWOdVxfjDsInyp@*T3T~`QKSH2
zIXF0E06_V--PhE)4y|)&$O_o>t&xljPP^46*E8TuK|}_yo+x{T`_&;Iu+G3-ySljz
zX9z4041{zW`uq7^-`y=YenCc5jR3|B+?m;MD%1P-+sm!q($WJUlmk#ro2RSFVj>@)
z^*2QP9)M067#NUTLdMOjf%s5}sadd$qsXm8y`-VpM-06*veej#>HrD>#6s6S4}gjI=;&)}
zYb>TiIKVRjMALC}03u9t;_tm{FpzIMF(Ehjk?V@w-jDYniYDN8lmxLNc>LMfS>Qkc
zsMD^ovQV}6?2G+xEkHLaNOE@@!n8%&Foyo4Kq^qQS6nxTa6#l*^$(;ZvsrctTLH4^
ze0M68&eX`r0SIi>5YVpCD^(d8OK^UD_52JB5h#g#?(E;cz01-s0P;foJV-+?T2kDh
zZ)Ajs&&?5t@o4G9m*;=$9JY{LlLLgaTwGk5+%BZa&;W-rGdoL7O^rJE9+ksp>A4R$
zhVP_WzY5=kb|>??R;4be-)Trl1P0MiMq@d_9(+3PCGtk020_~TgKGdXQG_7_iV%k=
zNt7V*OoJ2ctOEc6kvL4>@I&Z;+1Ch@${DM%nq56ST$-yh2PL|I6!RO2PfH`1lM3@l
z0TG9>zP=y^D>$?m$`7z@v(;wg4m?h~D&Pczll1JBt(IHTsK7}c3?;GjHTCuNnU@U%
zBAAtRa$+JT(F+ry?d!MCR`WGwMT6QZ;-8*lvBHaq#`g~mIojF1bLVpgFp!wo$D<8SeZ8yl
zULUZ>W7oa0)XMh{4`-*REk=ZA8D#YIWrc;3A|jpR(>$wX`e&;4wZP
zjW4L@3|IhQrQ~E~OUueqqAjefWaZ^et7mU-Z-FOPT9Y87q)bRi0Q0{0_V&C3@q&P=
zb#;kiVqyY2Q)z+~bbITzu4ZCm6G?&F8VOV{l1Kp7Cnv{9dFA~hlUF=*TwENG$f>C*
zxr3W-Tcnkp*B08Tayssk*iq@*M#7hY6k0Yd3k?L4ghzCJ1{D&UB09UaM@*4zGB
z)=1Jt(K|a)64VtDMCjt;0^Ao>?ESJL{=Z`Nf8-41V>wX^;H1C@Xu_|W8q-P*U=HYM
zXn=2@TvqvC7c!tD9xxr>-#9oH=Hxi6_eBA!^ii(+|E0C>y;qNtw?#3qvB4ux?3@ET
zAmb$8@eeTkBN|VylKdl{7f-ezGx<;D4Kdw%lhEtJR=Qsh-^hN+&=?
zEzS_=y_*5Okf0`4?1fm7`mYdBat!i@wKm~+CXaN>df%2FVnv!hgZj)|@+99GDqqdG<1g*(}RGswS
zeW-BH3Ff~{DyULs3@{Fxy$|hL|24@5_EdMFr5t5=z&tJXUV*%Mh;)2>KzySJ2Z9j-
z6X<=Qr6#Ta5v%yS><=jO*xR3LFKv$18a$2{d@j+7akPPcmY)}8a}+F_Fh0{Ogt
zgLUaRj!CBPlf}4NDs|m~5$e4%k}|P0puoWS=K)D0vp~Z6LfG}>H7NDr33moPDf@KR
zc_C8P27dcC(I7`VMLFHM?9W0wAWE{bQ0WlhhAdQIyu)q?TCKx0xrg&|20@+a`gzxR
zuHR3;PoKkUOnI&t4nb!_^fddK;A{U5F!ZHg2EUXCojGW8xzl*ueuDAk#{rY|(_I%Z
zWcac1q0h|ZhBYSYHsT>RCO$q!t%D|ymWq3Zvu=i`Ht~Zp>sdUC$Sx1o6cq(EJ2|cY
z2sTLGyEq->WtWmTgAV7&Ym}t)1W?fgT6~*7x?2=mcm>w{ZX!4K-Uc;mJy`LlVk3Qn
z8Z}?UTsO9k22S?8%kDk9`}jLw!+_Zm7weZ`$~-8glMZgWRb$S0NI+Whw2S2Y`Rga&
z>DIeb0?_Cyb4e#NEc;F=zztE8!weC0qQ%LE!ar;KpT<^-B{$Gfu~chVF>{qE<`47t
zpu@k2QXVCcTc;7p^)Yqna4)dtYv=3p69aK^G-~$Nr$f(2UQGiv;f{%SA}(SX0{UYm
zYOaqL35%tgPrXa-5@MCS2A#j6Qdy#3z@Va_Dz>FMTqalRIt+)vIH<`cDk{GBg{Og|
zk`^bI8Mf<3Xv{@iCPG~M(YTMKyL|PKc65v%8F)~XRJ60>){x)WfQN2gS_r4pl!!{O
zsHE&Gt#)=p{5%-Gw}AZPRee-?!r1s6EaZ&kS<$GASr_E3(YDiQcJlC55b@~C7ZdjP
z{zvi@QO|6=1sUcd92z^k#s5ZrD*Ti>R+2vrP2Y-fimVF&Qv~6SJ?KUr^X)!zed2(S+Nm04~lW{OFUK&pI
z#yLBraW~Q$T0qw^z{qd^;kP^{O3&cJ)x|yjo!B}X<32A>;Zf%BIVzMfBH;eCu%|Cj
zx?VLMcOX+M|CR}pcGk_!{o}xwdrg`UnqCe9Oxq8nYov?35z~LB4at!_ZyS%A{T?@M
z>oM8lhMXr3-xM6CgPK)_3K|K4ii0ml(~U&Be-E&|D{3QO4BP)Cw6z#{v0u=2iJOGt
zG`XgMSdFE}3F<@A25Xf2FwR-t@fn1tWO8sVnJl!Zx*zM&iE6;UqhWGuZ7hihi13Z$
z3l~2!F%KAMeY|#FX(x~RRcSkZe{uFFn3wDg3A_wz!+1!QwV88Jla~$pV55W$y2>VF
zc2V9XRye
zR);@*w&1tj_*+Y~0{JinA2(vzD1cqlQ8v4m2FUj!QtJk9*oKmwdfA~il)H9&W_#vw
z=4%nr22&U~Te_SE!-;-+u$S2d*RqlZ>J85$oOz5UjX8K~*f$>H$QL`@o0I=?aC
z1$NH5TX?JLTs%&>_i{(})ARw|I!bCZqYwMdgx&b{cZhrl)1d*YN869gpbucjatB`P
z-RcwbcAOmJUgsVX4K>xGtLq3)+tzy8L_rOHuko-zU1Dk+v(e~Gpx9pycY4BtuCdS{?2ay~phOj=I=
zOihz;ag{15@fPslJh{L5p<2?@^|dC@0^Qaf>IL?*#>p|#?(*|gc3
zI9Z#eHDWSXjE)-n`4Zm*ND-lNb;@gYyiE;O*1K(pY`w)BiC4PEJQg{17yFmU2+$qe0!_-S;g!gRQ
zTwm@5Bu$S77Ga6b^Dy(kVnBR-7D4&^-)lEBOwtt(a?K@;3*Q410^LfU*wgkRhX>E-?WZ$
zRQNuCMkM5NF8xBw#N;%$?d16+_bs}x-<5XMEF#s9YM1QIRzIhHC2MPUtak9GFV4Ao
zT~(j)CvKQw8XvTP`M!Cdb$-tF4+oEInQWT9{{8}0v`ZpdYCY=7E&N-O0>GzINQm~}oeop@UOwb@i@r4+MI^_D<|+~Sef-+(=~{;f5^@8p7Xz3Ep?-(!=)dM+@H
zH+*wMh8K8h?^au|u`>)7uU7UxgTpwZ9M|GZ)yzrMKR
zh&uSY@|F?eth@Ay2tb0YQd{{!3%<;L!hJNX=xi8GPw#OXVRFNKyj9kBYWphtz&{Q0
z^Sl##Wz+jiEMo=FP;p7%-CM6#Y`MUMO0k$+qf~K9Q?lkaZWk-_udGmnv%$P5?_G@V
zlAT2SD({(Lq26k&LsL<(h
z6Y5Sjs-jEmT2QcWFWAo66zvhE^LKvas16KqC<;wGNCkCpCB0+e68Sdi8wAG~IROSp
zA}@wdUEI(iieDqtP@7Jz_S~*@%xA4nKU`OOzKwqiy6*eCJ&K!?|9bhVH77g&G=fExR9KRQ79e^ln7nJaDaG?!iM+sPkSo0Yd^0FmiV-=^YYMf_Qx9
zDrQ^o$nUzyy1|ma-#Bc|GU)9U0ynU2!1;h)T9~#!3(i|r2Ry?EZnrBpS-;99O((t~
zUMq*?)6tm5Hof+|ySSS!BF)e2u;eE!Oa0@(BX6YKd0qaElMoEt4md>q$VC<4L2x@W
zpFHpEtYUbFzxm#(r*LPcFEBniKDlbnemV~5{f~bI*&P?l4>Qz2bP8(Ik{j%9?<$U%
zA_IYXQI*iV@*yNB(1HZ@wDmH}!OFN3ZOU*roZv8`?Kh$r@#c=FRi_2O1zsWWhn5EJpSN(&Tfii%lQn!7N43sTObRg9IqXwFS$(*V_sgziL{yIm
zgl9fwq3o8$pCF&4tl6p^nMgN$&33mLAmQ_~%
zu)4}Zha#!0x&}5;v(yepe30p*?Z@UCna72zdhR$}DT~FzNh2zyYq4C+7xbPIDe1d%
z>|NI~4;6{|=?^JLK}S6%HmS5Yx54XBYZB+>d}Ej$-T@I7N)iseeeOpx;4M*eNV8=V
zK52}Kg^CPcKLJ!xYdj;+#le
za%XT*q#%;0u_0^Z$lJ~L7%XH?m=`UZHOtE0z-MH_y(D24#fZ4Z6(Wf`_Bt&5N~-s=
z8U6|N>qk}+_-PZ9DHCIJPELJ0BQmsp-zGI~j)`XRxr32Mh%?@~~{k^Tc)
zP#p9z&uHBrimGC$f+l-(7PPaFGf{CHTi1_IKOiwK|MrKEKZL_nnKZ7dB7!1~RalPw
z!)O8umOHm|6X$NV5KS%=eZ}e1tG>(c9p`>U75V_{5i$_Ms>-${hmuSAW{Zz;`_uL?
z4x7%5*xG3wlv#9pw-p*Dr
z+6I~iW&@6|ZG@L$AVU~l{(x7v0oNNC8__9L%#&{~${
z=H&w5vGpO5_B{*mR$aDM&O%6$Bh~vB!B3e4=4;pB+`vk;dh?*;sko`*VQx3&kN8_M
zDv5A1aDp@2K~y3?0#KhHC95VPLix9?M(P$S$x-D7&l+J;6yt;TztKT$$`Dwqml*Clu?EXaPR+aWBwNyb^~ADlDsbK*Ki8
zHlss9@VGsk?VMherX2{lAYvZGO|5-#TkXfe7L1$=h#~TA63WHy#2%xa0bLE;$ltAsYhQI_@J%0Z
zc+0>3=5{z*c-9)&VTc9-${X&PX~uKw5QVO#jIXn8U^p$9=A3q82G(5=%}y>Dha;T7
z6Sk~kt{MOX)!?O7KsV^SbN9m~C&
zChuEK6`4a>10fh#@h$Azm!kEL)SA?xSM;72J5I=Qi`1PIvx(Xg=zGKQY7jcbH@vRw#3)uVVXSZ!7ll=h~mAVTt
zWO4GEn&#SMv}81Kq~oQGU*HZa^?9PX^9Nlu!Us{qE}`#6FBDX@UqcOet*`h$Ebw3O
zT?B%~8Gi59UY*-X4oPZxd&CHmk)Q@`&20WLg}xtg>XcJez(F%VQUgL7(&Kf7G~e;#
zzh@$i5+%9lc5Oz(e0;VgF|!RvL;7X~PaGw;K4cdj%*#+S;iwewKychP0!_;m`K2#!
zl7JIM8kXfl~MqXNSm7BT=8O=~(F$6iP
zG39V_Gntl7;BaYjQ8!?4iz*nX*)c(VyW5c9&U6Lhix>H4TR9nsVqzW4Ake95XlM`#
z%+8>L!L>g46A&QFSV2fCK?5@TyW1)c_x&_9!peo-c>%$KVv4wF-;i-=%BWuW49rPK
z6=aHY*%bywJ$nNjG1X~IQ|bK=80#}O5B{g)3sPCEvxNv2^Y=s$gL^%Qb+B+yS^v1c
zfqvl4suSv|MytEItn$0X11EF9+p7I{m5zNcb?e5C!H6eC=q-!6O4kV7kxv1AS(#dX
zGl;R4VEA8h-@e7Zj~Hv&cgm~JyE$D7eRj(UwE>Wab%@HObh_VpR{D+Z>kDPrzbCHq
z!-rj75e~SG?lqBB2VgNaV8$f_)&B`=>n(ZvAUxCrflT+k{*hG&J
z6=2jKXU&+L`s6v5UDN$JJVb%OMWXskRVXS$OG_J6)_=7Zco
z>G3(V;|t&Drsy{Jbz9C?<@kndRSbvx0;4^snC!KzMoR*yopdF1JWhA9(ci|?NIAy#
zEI(N+IU1goZG90(218UZ6VzhOODymFoA{1gzxHlr?Y*h_!c}#Mf;F-_wck8{3x~UpX|2WEPd&tCcoE^^Y(dM?;sNNJpYFgS;&CxAD+x_w**sO7R2iPHZ(Ex!D;M7m-O|7m
z!-Vuz)c=AZTI7(=i;HJId&v&~bI;j&OoS=280Y4;KD>EKzcpH1_(kE?s!T4aQdctk
z!Ax926c;9_)Zn=gc3EY8uyB?F^<>J3jeE1FRiWj!!zI(M4PHtLcjH$mIr%M&UXLz*7@6IQt3bH#vI;w;(r=kt!O<;zFD*7m}ZxKdA{_
zmT&On?u-MhL0?Aih?f@Bfscg%6*4o^J2^e(h@WU_^|2<0#9=za-T9J`DqpXN^xfZ(
z(KvZ|@vEv~F-{B^Mp>{j$Kko}Yjo^P48+GfC@DwD(w0mlMF_2>Ql#l*r4K5#0TdHHO1eSQT*=_?h=T8bce
zN~>Sn40_!P`V@)wc=HR=Ux$ki4vn0jdmgXMOE4tR;;;A}Q=EgXrMPXt%qtbcSKj*6dD~FKLpR*c1&EF;e|R=BbirZ)YZTDp=E~T=>_^0
zeOe0!kKdmX{$uyT@@%hzHcWaputihj3**%@btHbS2e>0%z$JuRMwTnYDyQ;)n)_{5
z+v4>U(EU@&FTQva%q=YYT?$y6P~2`{mw>lr&zQU2UiTfoR}TiO8a8+CMg=9jS8`v#
z1_F!0=&mE=y=T6Szi9h>dHw-Y3*ASrPa8^Pl^xaeAlL_kM%9NtMr=7Ef@Zy0juZGb
zp|0(gE`O%Ci4Hx(SczNkk&#p-bZ`00F*Y+`d@yw2wWVdd-Y4K6!s1*v`$4AZl0X|U?MXU-`^{pbJ;!G%`6{6(
zNiuAnE!2okuyimvIi;oG@fhj2e$!J&R}CrD?~n%hi3!f0j_{)NHish;pm*2|6xfw$
zJepnh=29@@cNZ^lmBsS!yC@^~-6X03S_(4??08Io5nup4?2WmPKw#OEpYUrwpi`op
zh|m2AANnqtt6Hr#w1?9}skl;JCHfz&d!)xF=VRzd%W2B#ip&2M
z7d0lM3DbEFg*hTBS1U)op|Oa0m-+ttym4Vw)oDP${;FYjI^WmcXONQnI&K5@v5Wof
ztqQ0Gv$k%CM$?lF=v{#zcs&u8bXewpE>j;g*?kb;MYz6gssAcO-5McgzNyYrhsS%fXy16%7dRsP+q(|GuPUUqu~83
z=(*aACZ6`+9a1iq8>b&fpf~sVpO>qOT8cF%UHNmj4S=amdV5h^SmbiuV>$aZPJ#m;
zcij6uw2rj_zuYHGg)o+Mx3zAv9zUW%v1#yyVLsx)dScMcRv^K(5&NZ>7ih^WvL(~=
z&=U5tXa~IWb=(x#(ayypCNIuVK=qHE9NBu7feh{Ei$hdY^dPqYbOF3p`9;1MomiuP
z#A4j(WvKUuhjcK7GB)D3DG1H?DcE!JR~?47C}H>oyt^BZ8W;EnKfwCDWFI`c_QZhU
zGg65hNFD&BiC31*^yAsl(cJbnVrIsy7?)u&SW(7jQZTt+TkD#$C3OUiIvzG{#594y~&oNS>GtP&ctIIjkD&a~t9#B#COkq-9d
zf~%{|?lHAFqNcj*b)=A=(aB$1&bvh&865J!KLi+(i@huM-$?koDSA~WRWftAz=~F=
z?XxlJmoYMXIxr82-MZhTf)-eoQJIF`l=Sz{wnZQC9H
zt5hGS_m>-7Sfp|KK7Y!c*ruZS7S!SR0t_UxHYc7icTiHQqo-%(s;>%ygEFaq&T^IM
zh|hPMp!y1BP4u&BS$a16$fEnUTYO^Hs~K|Xd6NtVXb|Hzz>XEdlE9;X1?cnQnK}@}
zw`c@-_?W_Z3I&nLrn#0bmyfP1lPv(09+-K<`;%0W3b|bLUoBaFFyoz=GU8S@QvAQd<(y#t5O_2U`Z3NKgZ+Gy16Y`*Q_l6e`c85jBq(mAZh`yYAlUnV0
zSkzeXN`psIMv8-#9d22Yc;OuxH!ID%0qf2chN*)5$l$C_LYTu`6%AmkHgVKbRV%sKa_?r1M5J|&Tags&MD!hX5Xz;R!NsHgVBoS91qIyif%}K~g!ewaJNMQ!YmO16R
z1Va)Koc&33(@&%c9%3G^`dvnU{T2QN*Nc+$W}}!j05-b(W}O0t6LV#@OJ`Zx*-mdf
zT)&Dholpi2ayf0iIlfW9(h+B$S{_&u9WfrZ=&#ei2E41@fz5M=1z<4pAkIU7t5xCC&&`48TJvs
z2L1goKGJz4SVk&LKSZF+oT6tC6+H4?okgpnx-l7bY1zpg$>cXs}m
zVc}qq&3TLk>(3&nEb1#v?l6%*}GAeTZt`;vKpA^@Fcw
zhw9XmDRaee1qGlvw3Mv=?SP2>+dVrj6|Rp+(thlQH|C`%d69Tk#xBTZgg~hwVulT#
zV9^dUe^phb%0m-^IFvY@L~D~zRpGpRT#ufm}C@xTsF4v9WVl
zlvpShO_~v9OjtOsh}q%*n#S$#)p2h{#x`a0uGk6z&gguXcQmY^h{VGf68w{0V^B>p
z>Rgx*$&B1S$i`yCW2G96S~7&2^Kzag^0|#xEez~2Q2tC7y!%k3-(@wc)r~HGbe*kprHvKehWGhCJ
zZ1p8MB&Qla9-`DlkFvG$1WPg*xN`3s3IaSV+0Y2aIZ9nrbcLbvf8fy@!%sNA`g=##hDph3$;l50u2+!4bQ>KN?WEc?NxJ6Dc-J>k
zlGnyM5+a8hgkP5^;-T;0stiJc{!EcBlP+31xdi4hmSO4v6BVZSMj|rz?@fZJO2=9S
zzV~A?5!9SgMTWpa;V{;;nzDQtk#43h{dNd2u%{m0vDkM>2JQ5EJ@Q9gP;RF2&`
zoQYyHo3HL5D$X}8NPe4g#mu_*4r4MntFQ?U@(bTEa?y9N92{a|dC~B1328-{o|YmF
zJ-M85J1={uwu)|QQpUz;uh5W+q_P7G#9I4GDU1yLivRDl;O-
zSYi0rD7)lSN#>#=Dbk6oFv@BQVw(80!jvGo?hJ`0?-V5Xtb}lGtDf6u#OAZL#m3L^
z`71GELj_pDD>!ad<3=bO1kK0h$`
z=H%ucHGF7=9Dxxsqr4
zG%z$$^`5;q$S3Fxs(&Cd4$^^fppW=PWgb4rGpVUh<1+gtrRku})yUTV%6d0HpF%=v
z#A$&>GxnAxAips2?$kutiH*jft4FQ7x8&+5GW;j*Nb(EF;>)4_K<;ug0&jZ%{;YRx
zz-!^QB-ib$!k^iW_kT}dMJPZq#g8Msso1HPbKKuhyzX!7ug1Mdbvk9-8A4>8Hx{O)
z)Wk1ANck1njXy(AXS$|;3bK3!!G+!Xwd6sWiHi6c={~Px`qvj}o#F4nG)WA2ldF)l
z60=(JJk~>l=g^8k=g9!+6DGm<#BNr>)SATZ2dgZUz`>j215({eKyScufDOFwp*IHt
zF5nycki})_PRvZOH~o4%@)f9Nun7Y=GNNd?bnEPa{R7n@UiXK=g04JN{|3Krd+
zT51MCYUgN;LMD3cYx3HrqdP&t5|BNy^RHCy!XXg89tkR*D}MLzD)jtyzzlMhq6MQs
zbI)Of4=w>}Cq9cg2DIRQK%MEVEW^TnbzlfE7NBZ>+;Kff@ST~ZW^&qMN({0AN?
zQUZ|w{WL=@7xxiW-x*{Zxaujy9Cs>IXe$XKR`lC<1<943+!4G8LR==pt$
zaN_>=Do8j>15ewp%OgTIXxGvpRIiIn(EzgL^twOz{;vIOlM7#fp{zXJ_R`A8)m1=U
z-QuF=mllA~jSqK5&PQGXpFe_*6z!y;nP;zjWC?9g$(&IavqUa>BN;uO_>EVDf5NCN
zwEK?Z;j!~@8*c>9G}Y&oBSE8283_z8AT)pG^Fy6gc=bOj*}o*sjd?1_h?=R5_>8Rj
zue`pftCCNp-%@}y+`U;BC|UxMb%|*?iaE}s!BPFkLzjfg4kLCzVDStee)?=ZrZ8q}
zqn8_?zgU8ND<2&bH(z5uSgB2kb)Zvae)=uljRK#LgN^n=#O1F>!PsCv;|s{z=>TL4
znjh{D|NiP^5tlD9<8a|^Bo|BA-A&FHQ^so0<#Js8)8A1=B4ZRfkSxvkL|H2S2d7|c
zCVLo@C7!6>&Jh$nm6(>r#z%Wyp17(?cn86Cw0JjyLZV}sPO$7dFV7gzs`tXnwsol+
z6A7zE%9#%n*|ouWeNNK|6vN2Dj~-_?);|*kayyJD(heb?tGx!X#2j6@ndU&4#Ci@h}j?bQa}2WGi!=y|%O
zMaRKI+fRWuO$x}hj&p{d)(;`OA^z@I$Oi&lL!&CHiobqVor7pboGnMsrf~(S^GB$p
zRfg_Sy2l-Ed2w!XY*cD&RM@obLzC0?#AWf-1(@^l?o#CZr~7Ep`F?ilmyCxLZSBpl
zwD53Fv|Kh4a|>%=rJjXLzda!1)@%Z_-v7haTSsNteOtqqAY#znAky6((nyzdcXu}^
z9g1{|bT>#NAl=<5-O~MSf9IU{yyF}17|%b?eGA<8wfA0ot-0o0GtqZ=#rLxvPlL(y
z4z4B5-sZ>6V}U#5UBTyYYp9AiLXl$z<`EiL@dDUjGP%n1<5~ILMsYFHLz8(wDd5L=
zsy@sdui&N5QmMhAb{@<$t$=O`Y{&AGm+@hw;sk)T0VGA-=Iecpy-@1%Pd=OkD>dLV*szy^RzTcqTV`8LsUJc*SFITtnY-g78fqdTottDi
zlrJQL0PY1S32Sx|Uqi@+y=P=T8=;S*m)|YEmpuYZwCe}}DWck3^X5FQ`j;Pra-%e*
zR#->lu&3NzUQgb}#ip6}%{TSHRdjMwGM%ea`#SubvLCt~R2~<7^}!m|7QbFZ4#Hm$
z&ML2vfetQcEGtXM#Ke3H`w;Gfdi_l<`-!!TUW^YkE2}@_{7-pdnDW$n`>Dq^;~EF`
zoSF0`gy4Msr9_bK>)p1pG1Fr;-RiyQT^pEaD{#SsPQ02QjTm^~DAg%b0ZLJ{GIPldBWBQ?zzP94!
zjygZRsdKfN?T?4v=Z%%r+tvzt<1iXEIhlc`>Uz){Ay!ie(h)Pc{sixt%~Np`+Ve$_
zQ7hr%+F^R52l{SoEAY1uU4x#!S>|#gKWeiLo!W%Y9U{~LL=D6l@A<^2#+VUO)lYjsd24Zj>2JIidyKC+1JVPeS)!wbGt$lfZTY;t^DRY&1
zu+2EvFD3A{S?U0P=Q4tqit=k#^sn0ns}aGUv$^;H-~HAXr
zKDT1k@g~^zjL36e5IV1}_#AyH&uDN%iU)uck@g17Nw)+N!LLnwq@Tp1f`E^Nw0cPg
z;}5p~54X?$xi|leGFt0eOKKvcgXI+dXEql_lo3*|@*BMnMcaM7JT=)lrMW
z7E$N1d9`O{<2jeJZMupd7MRwt*GHRJ!$>bmB5Wm!f_IkOS47NhFKT8%B1tw5oXbb)
zy00$JjR4i41z`bA7F`9W3y%;cI~+A0r?jkuqdjlp!;}a5R{uc%il^`0WO|)T5Mbe5
zmur&-H~39010tCGz0V?FbQT&3ptdT_JYFiuidGJJR{|sJ>Lp
zB)w#4LOF9gR{NRDuH%Q@%##xReZ7R*)nEn&toxcxL_L5?+FpAGl{eZ**R3j#NU~AA
zBte$`+*PJQ+Vf+Sjp0j#Yh-(8_u>m~6p=gR8@J0M
zuX6q|Qc4YrWZ5?ykM|eK?PBO7XwNexbyWq*$&jTXO80j8A4?%8nEC5TcBrDfZ>*PwiN>pJQAOQXHy4JM
z3J3t&!o5ibGakD6BYCWBK$kP0DN#HZi~x1zD3JblbI%2F*A8mx$fge)?(r&LKi;oY
z)+{C@6kWU9I#o*@FOOUPP!?pHnN*>qRNis^sHIg@vqPrE$X7S`wN({0hf3bY_8Klzgmi+$$5Ow#
zW|HlOF_oQ40w>(POSjkKVku%w_&pS?;2BOY+a
zT(FED)y$(vKra(OK;SA!vDEA^@P3Z@s09@G4Zj=MU26No`$12aRHBXy@82I|=r1&z
zDyAvivAjgVrRpvyqoQH_p;Tb{BCn%C@o}bo&3^oB9AGC6F&<`z)rAezO;jOMy-JD-
z9Mh~=H+fz77$Ke1h8QzbGmc!^^e(7T&(@wOke@K4ZS*+-%=65@Fl&xj0uk+5$UqzR`nVy~j7648S+Q2V1PV{gDUG3)}Rf>M>zKyiO+N~$xPbJ}4Vn2#IuTZ*>7qcvoT$;yS@IT#s-qB%@g
z)7I0|)>GqS1Dj5NV`6PDVP4oI6DlrNDkk1tLqW5;hLA-?i!`z>YJ66?SHSFp!p*X|QahL(dyNJ62A9Q8uSiq(*(=hAed=>aQ-#EXUyr;IN
z?wn;0ly9#N)fpkueiD^Q6)@dhvDY{TpDSGP=l7cT?h%HVVkZBDIQ1aKJ^@URYTn`d
z#Pmn7HBD{OC(7O00B1cMqZjx_tFVgF#3seWea%o9u~bl2b*XV+L#w4^D~=&VC63Yi
zCjVCX+~pj8p3Be+=N&L8DtB0UJrGfVAq5&9fa){b8vc@iVH*Hf9=~sZtrY7-~1HHjFiTGZ3K>MW=&EnCQ!ZR^RmybGvck
zQctdoJwm{r&5CQF`K|+U56z5^Nd_uey
zx%XNi^Xm9u3O(ettt3e+VrOQY(&5+IL3h3+u
zrhI^4QC5+I;l!ALsZYhXqIsHU%TKUu9Gswa624Ng^Jq1q#dx$TU4XII4TleM;ULEQ
zlf#X$g?y%zOLy0^gJ{+y`Obo}S!YLS-wy(h82=@-=vshc@F+-QlQSC*2ayhJbT3+4
zo#vtoJ9({f$#e~%PbkXrw{^@AubkWrovL$LJl=ZjkFGF&
z(rvjt=c(sH&OO&+Hky;lvQZ-Actr}-N!%lEuH#m=y0;Rqw7br@P)(QskstP`EDZMp
z8x8$|5d0Du&HZJBpnwo}VD^PSz%QI#c_DLiWAMf5>gqycVqO9OLs3~{paj#Srm@WP
zaO~ou#PgX+idG7s3y0S60P`&Z26&!UiO;>)lAK>QYA@Otk4E#`?v|z9pMjn)SnSuy
zfpsktW24+{8Rqi8eh-+GuP%VK^<01YcGRGNr&8u`bA4
zIWH}szh|$0(U!acN=DNjSyog~&aWOK_rmU2#{Rt9d(5uah3xMt;4^NS4q7WH$$6*d
zhWqjo5ux6``{5|Mm}l4Ck8^k1pinX(Pi!f()@%IuCjkOZu%HhHsPqIS2Ns8^F;CBU
zl#{-*{ErsMa-nN;-uKG4Sh>F?IP?q(!FnA`FVopB!Sl
z5w~1avD7-&;fqozi&8+?M$Rw&)_Ari^rlM-ST^}
zKSV&dVMuONR};zqkwaNBgfhI)(ai)6DYOe@eCXI8}w*p87vWxD4CJd-5@0O4k?OTGEB0$m-w`R}f
z#dug=RJ`2gd91$842;A8g@E7bswAkA`w|s!U7%h@ddZOiCeFRw{M@U@1^BfTT=R{c
zy0wb;YalM1FP`E^Un_is5_p`^jXKHdS{zWQI^h
zNulxVZw4rC`grr@ZMc`oO_-XIE{CZ5$zw%Du_aY-41Py$UfaUNSgz3^f4IgNGl|1`&qX;--p|*#({n5Wfq&)SdU+
z?i~^=X_c#R+q4Z(tQij<2W$(5g~RfVQwAv|;bNjc0SN#~Cxk{E?v9VOLPmzSv?2^{TRY|AJ`u`G=4#T|
zzOk@MkOlC%Y&!$4CQ$PDor?d@X}KPG>H5wKNS>5=t|-E4*4jf!=-I&-NL%MRm#Czf
zsH_17yx89e(XSQ1sm<40BIEr{=Q0)sBrbHn2gAnt-VePXoauXM0g|4Z*V6^8
zsm1cK50~~Zs0_!_HUORk0xby7KG&Ded|p}>TebbXMo3MXP?_SY-Rv4Ht=^bG`z!T#
z%o*+9J%Emet~p4R%;bKblZF1QeZ0$XphFf!D&jV;Ko1o(%oqNO(eEgbh~#sX&ZPc|
zHJSsTOPHpZirJEldO5rcrVeCV8=dCOug#=kqMjFhYB_46IUi6Ium4-219?i|Z8lob%zty*bux7~yDpe0DPQFqX={s>l)A
zdAlc)`4YDI@y{CwG`^YHncyHm9RO0zW3KxB-H>fSpnR>ZFxV0*GAQ85C6|zXcL7n9>_PGJ44`^GmPLqv
ze#Qh66a
z9sNV!WR?yB35YVy<|fbt$pLBdG_1|d*$}}}9F&F-$*2^84T0Zg&Tq2cI~KC={=Hr1
zM46m}22`rmdo+7KLpE*sk0AK9ORVJ>=kj@8k#Vy&6gKn$W6;Z4jg7P(eTgyg99pvy
zlxj}W)-00$BgS~%4@S%{66?th$R@_d5bkmrZVqC?;Maqe3t;lyhQJwPZ=KwD!xBD#
zSn!WIv~m_bu(9mr^R$%c@2T2SC^Q0CQ{j0M`sp*I`Uqa0#D>f%NLGgp&&<34$VY`m>gGM9_W5L)Y)P41k=dB^oShF17#Np
zK`9j~@jIAQtrSYc-BJ1v1lMHaWMnkj>Z&U0s^%7k0kz&}VQd`^?yd%MqTbKNTe~C-
zM!a-Kr$*D6EgPAH&=r$Nfaosc`87s7rbUtEaO%kyN!-&HaL|;?)Qk@wDf*9}+GQ;t
z+iIUmP(27;(eDl(&RE4|dpKV9d>Yt<@y{!wP!0U22i`HW@v)IHl+k;$FdXP;k3H6o
z4YVGKOj19!kuH^2>D~bM=pfC`5^zDKi^09Z*Ljsqwz_|plrswgZ1)xgp!~gk2%$@>
zc|SYN^tJB~Q3^k(Zt!OV&j6X_gTQeng;{O|{v5!$8C>N6Lf_4yYrR<`;JpEKZXtkb
z1;Ft1sgq;RRfmU87>rGf7gtWGjMQk1FnXrgro=0MT=#}?14O{LvgM3^2I1-4;SeQ#
ziw{RS)UAB;+wOxgB#@c;@hiPp_C`+uK`A_-xfOg~!T%w6dL^F8oDB9>#l^X+%JNKy
z>uwFXdui8XhA2qgVWD0@bl5OLc%g*%AZUv&2QqzLs1QYA=0SL>OUR^TB}xj?HaBQ7<{rGPwBDQhbkEQ#;ht5acgR0Yx4rS
ziB@I;R2InJCzP$84c6bghXI%0##WK&HdzOlDDKe0e@f2U1-zp|Mme=k1dCj6iLcRcYL{#fx&+n40YZMez=Y;sGYOx_tC&SJJ4&C}o$Uzl7plaYvs#=6d`YAlLh}M6lvs==P=v%FyPVA(ZY69@RjY-k
zk?)$#)fY5VF~4(ASP?29V}6GU-Co$Teg+96pTNkNCzRMD79EpPrTMgc>8`e%m&hI@
z`~e79F6Y~Ad#U@U6clGB_MA0dR0s5}IkKs+cZu4(!6Ae|a@cye*BW0q1?@kp8n42=
z!Odtz2FLY?pmlEUAD6gKgBr*LVbV{FCyq5)mn{h|5ZZuH+
zh2I-n>hp{ZbLUgJ0lLrYAM01lAUc(ll%}wI=GlM#dQI^R0y@;8?fL{c9lAvm7${jr
zRaF57!q}#yCof%moD#Blx=rkbfL@*`lXB)1wLqmPvPK5P105g2+ix-PF=E&f``s1z
zeNt}rfxl<|b8^niPxi8n5ie$Il
zzwv&2*|Wx?!~!k^@31=>dn{B<^!H{6BpFpZY}6`;fKdvOFw&MUF55EWlG>;%>c;eJ
z{Ad{|#CT2dZpya#-$|Lw&idiod7-Hnu>z})dKv=~^K;KDcaSGR-+vUqK#|eW_SD(W
zp$dJaF&0e8JhTVnNfqHcHV=K#uZ`iJg3`R~CN5BWt0FjIa!UfaIp3YPdu1^!XC}v+
zce}QVCb2sGRzjpK-+fA-0}@?b?eUpObp>T@sw
z@j;E<6cGgAx2ECan@iSvY3Mv{c^M`PXoA-%Ve-;Ir%JrfhWCI$JK<&%@k2gX2*S+70<;y_eLW)MhU2upy^;nGn<3<4l_61c4
z)QwGb4;2a4wKcYZgWIf%v-o#r>D()>2qA$Kr>;PRC
z;79;@*(HVyR_s#m3!w3#`GYA7W^^Dbg2tVVjSqceIYc)7U#AHk<%sKL)o0OvrwOI2
z-rzYiSf{aC{sX-|#8dZ+U3N%@=+>+I5={C4p=rR25ou=wf`ATR^JjjiI}JEd!ICe&
zN@@UIN6hxd|Iu~8C47M@IhswzD4yw7UX&-bA}~|O{=UaS{hVlFY55$YZUo-n
zlR(f%W!!IdmAE6zSvS!9a9`F?YqGyiul^=BPntfZ*?uO7UvIs25by>6DV4MtuEw(m
zicQN2cDd5#+M7?$w?JdFjIW{53do8^y#HSAHU>BH)4F8`@biIa75NB~tcX0i`%6|n
zG9C=8IL1KT7|EPN={l(m3XdQ`LvgO?_m8-c`o+Q0N|B$nW6Ap(DQm}rsC=8Z-AFzJ
z+D}VgT)Jh4YykBbzMSa8klYX$zESHP!lu*M07OrZXjW)sN}zzy4x6U77<_G
zddr?$<@ImT5ga|%=ME2r@Wo**SsPN_4AcmaW>E@oU9aV+R#H-6FvakKzrOGPu;6XE
zpB;-l+7v1kX~@YwoXUh5f#kZoZ4C^NlApXtVnc<1Io3Zp!683Sl#~{m#~ScHKYb0j
zE1*fKm7*?(=J<)JfTj?T^#(8Y3`)|GU2qyf(K}cx98m`-t}1GZZLX`~2`Q$|h9ymj
zcLB8UnQ6YCEx3FpYXFGIevGfz<_G3~YutRY(g79y@j)wyMSMQQcso0cAdy@Bijxi8
z(v5hF~Eeii-t
zng0#?w!w$c1R0I<^M~r;j8H`#R9s>cOMRN}SzX{d`Ze};#Wxs`MlajwMq_)S|4U&q
z_{AIb8toxKCX9q^nh5ot-sCySq63QYt1yK31nUbGT@*s2J1CD*cA;x?J=lP$*TWN4
zS8sXd1;AY2$6E_q>*#w{XjEw;h0C~O0=dm5;AQEn_hhgrStU=hq1R}o#pP$nZ{COT
zD73?ebpFEnrBpa+GLfKt*;sYCb312b3RGvo-Jb#IT})dHG6c!)#ex}quf+0|wg=E|
zS5K_eX4syh)T3vYHHD28w!q&a2WoM^papFm@Kh}OE&sAO@(B<_6(>A#Guc5Cf5{ml
z|BL0nIfd|#R)TFv8k)2G&HW1gYR1x3RqFB%Yin6jNAM0s6-^
z{PN#-35~}s)|R8_daRIs&cFF2;r)tX_6KjlESlpZK(yelIU@N+rVH{e&}K{=fQLlD
zB>4CB?E}sq4M@$cEfFFSlvEX5kM<|0oXGznsj-sA;Hq;UceViWJ3Qqze<=|k5pkCs
z|I7asPjr>El8pzOMJ0#zT^(6)cQ{=4e=44EoPcfheUJX0JBWL9*_;_La#kB;eh4}I
zOuPSf56XlS;uI{3K-#~}u-;W~s*f9&u&PTa!3?31-##ftDe$Vt6G}6H=LTp~`hBe?
zYL_~eoX^o9whE1mp5tuuYTRs3m1&jbtBdnDK24XIe$V_n*AAL1D0!GYw+e9OTt5Mz
zcE#s(#mQj>&>d!mFj3on7Z?JtG(;{tbKX(d9YrT{?CqaKjOM3XfnuhnfF-b)img!O
zG?RO}=VtXw_B}G0JJT&M)mzDE9r?^mAm)z6&
zaw*Y`Pe9&1%fE|atljqK^+^@rf8<{_Yzcl6eF6D{ttL((n%?L|(L~jwFvG-7yLpHW
zv~v8_Z>pJxDPh8DC7%09yo&l&807!Z-KuWw?2M@+%ES^4n
zl_Zm22_YJ>edZq!{dkjZ=B79MDc`03A_VBFUR~b`T&$5pIQoYb-nUgCd1J!mw$Om|
zIoan^7Fyd*qs4O-3sqdv@$D;5s2n1CwKWd%>b|_iwV2zQ#=3{0`oDSV&(m(zGQE#m
zE}iR~<{PY=PT1ib2_(mI%~kM$c|
zRnB@l?gxb=mJ$Di`3dZ9XV~xR8I~izy{<~d+huEff2${udA#KSl=ik@stt_Lil}8$
zXykvCrgaUu9^<27odm%@G=-~Q?3^=D%b;Zb2%L*Lpx&SiOCH%nKudj&8Z@?1or+(m
zQgnq|t}0gy@?Ar5w3k7{p*;W$jdG3xqzwV;i(uYzsnp+#GdkJj{BIfj?c2;_pY=Q4F^
z%dWdIci@==jlSj!s6@tVLk;$SRR_MUZ_d6*g{JVEZq<=%DfWS6@{zyla!jinXhpoP
zYPwcx$^sg0&g&YVzO-B+S<EB|Y)l_Ds=cVUz*mAYZ>#9SG
zr9dsEnBuP#zpMpAMuswec4zd*^MkOXjz`t^WK&|8D?`@lp?RS3(K;TddcOud8s#o1q-I=kQ1C+%-r
z;Ejg!(r$TxM{cD**7c(_dp(C|kyrt6%3He1H7s2ai5Y8UHt!~AsvZtZ$2VLnqDJjJTPf>Gv113#8u2A(?
zq*(r3MK0<{V(}#7yD3G}JlSs{@1Z9k*TRxk9x&REUd@-ih`RW$U-jn}4z)UX>>C`3
zVbx=G?-xHXRm#9=PU2DE^GY&O6k;sx<=qK&Y=~@8QQ`Rbcokc1$@Y|5wUu{D0_`(@
zxoluSZ#y*@AE}uakkMKh;Gkm2263@-qs^<&15Fx!=!13d8l<&8owW7Q
zI7Kl{$cbvm5L?Q(q{&bsLZ8UA-W(Fl@F@Y8mltb_hMI
z(qKa3f%&W+*U=8u0ywqMS!)ouew2;Rj(Ru!F{OVNrd|G(%vbDVJ(%_a-zQT=%~B~8
zRGg1(MUAf^z_U%EX0gN>U0nLeZWx9WB!tK2M&*in7;}-zKRVoh^ti?=`dsxj4@sYm
z5=V_4ZMhes_Pum1VbLzdP^-!j#qW4>n3xmbJpa8w-x)6GP*(D3((bZ->_MU|v#G46
zsH7;bDAr4YO;F@~=a0xl9&p9&GiE^xGd3}Wll3je+4)LXXCI#w^Bi*50+U~EJ+EX3
zKFIgWbjXjndoQPST1nGLA(hPM-$EB|1}SbltqS&Js|8uDYw>$kx-XFo_0f3`9|7%rT}=Y1!cT2y+T
zBrIKE!yi}^&h!!!Hbj$FXcXptpJ&}g-2#{U-zG#UWyixxz$_CuuSe3^KF^DF6i^YB
z!HQvd31*pu_9g%d0j|j5@X<9jH5HXKEX=R%&1#v<=h^6p
z<+}1Eq4xQ*7Asz;cknL!%XOq`!XDeYQUBYx!i|V
z6|vk)H{4NyM#N{*EKwR%X)+9!pfXvfTDLw%di_bJ3RDJuN?7Pm^tQIQ`^|@)35QSJ
z44HK@r*)#5N&3ly&4Yu@7(boldsR&~uUzBXYYVPF#aD}6TM#LB0`cao~mrC5w6
z`rLMV?*nNJ%Nfh5n>f8lvyvtm{qLPU+3Jy)q%5+6PRBUaco--_28LSQx1p@Vu%m?9PhR;!LzHqP7yqPF?`8>?U$3Y1r3hB2B$r;t*me
z@ZEmL;EvzfUcxR{g#2N|uRU&3a8h>IkiUP2sl|ej>(bRUKPD*0?N5wt=L`20*tBG>
zV+TER`JY|G`^WizHw_D(Dif_LkvchS@;FNQjzV2?pJ5z3WA<`M0MDEEUB(Y)F;_**
zlbnAhoqn$qTisEay(H3biqPmRYq-BI;`rz#O8k`2Pv-YJ_SstcM)SS?du(}>5w76yqUT9d3a?MGVwp47po%yGe2qQY9zT5LDfY}M!Xws-7Lw7wJ=
zSXW3;1^On#H{Yjl{3^yU>{D
zDLM;E%HjqNr+e+d6MH^HXdZk?1Oq(_;M~MZ{%w#Y`1OO(uM?ED$~9q=4~^;sswzq~
z;0Tv9{5^FEE9g2OoA~2PJ!uX;@dA?_;VHc!DHfEn;9V)|ebDUy;c%KG{IV1J@33VF
zk5sD~_#KWUP?M122bw4kVK-xRu#DO(_@!ZcstN2<$YTH
zk*Q|qgns5Ielt<=9xJ5Q@z${>H2mk;p028ps>Bu2i^dnpH+p)_ejg}eIR~}AaPRN#
z?f|FjyZcXXiUHT3-PBaXs54hW4R9^d(y;C8FPFqG@lgpbJjcq&(SsxFYil+qoxZhE
zwB4XM+FuAb`!{?^)Pt`_T01>1z%KaYg|yCQZ~J^1O}fiTVo1n~Q#i&R+-oo~qa9uA
z=jo*Y?t4(enCpohuexwML(t916$OZ!Rz}7#1oaF
zm+~~S9|D@e?Gk}&ryl#!HfhYa$YCmYCkMgrsnjof&<=KOehvSQo<>^Ybp@XfGyFNg
z*v(l@#{R&~5`sq3`Tf!vm~jDwF0Kq2$7rO6%Il4uuBT_W0^E{)Qv6S=Fpb--1MnyD
zcuRh9YE5O&wUS25M~92m5_KJ@9e76$|6buIXnk|L8T)7iyRrMz=-v|Ug}=mL2%IvvPe+wpC4xOezwEdRF@s-P!kJF9m|3SywRs7;
zQF1DaOaRh+BC1fNrg;6OF09Xs@2TpkT2CDM=L4Z?3nPbVOzs4UYJR6{*dNW9{)Y=-
zlEQ%~SWGgWW%|hRaM<%Tn=|?>$Q#}Y9wRbUUyLd89I*!p?~IPm{-!mawP&z~qq?7d
zxaDG<0~+i&>}5=AUOj%d527T$T}P&>sp@IrtC0>^Sp?aNb^<_Y_I^CttUh_4EVH*T
zrACGYC($A|Bv)NsLpaNp+95ofS)^G%nAO3YdZ71G4m>4RT
z=WIjnBUU3)XSdjS&We6klv1Pypx(wSk;nI+ybv2t?^Rcuu=B)C1qhq4<1o`&+%ocH
zV^iax_X?9%VWKQQzO=2+BcsNf(}${qXyeJoJ1_Hsujm@iSWD85J
zFC?O$J@76Of)K=>Ry-Zx`J)DLIR}2t2duUWbxGB{wscAQE>&>o9I8i*c%{9l)=lN+
z=GYlML5gsJ_?S|O_5hyQA`ros@HYDX%DHjIdjL~E07>+^Lv#=i_035e_6_y?I`tc?
zS$1%INCm}U{G)<~#%e>r?2T~7?DAqgb=^=HMHv6efK$-R??JYm_LD)B{qgNb=f+A_
zB7-Z#zj>8?u1uzp8LA`2ZN&Hb;PM#7NY8~I&O(Ih=w^-0EW8+ZegVvC4AZ8_^^2T9
zlJv7MQJ&_lc0i{87hfn==T#25H%v!tc?c*ILh<3EAe6*;x*9e}lFaZPW2mFcyZ?mR
z>?lKw2w$#F4*qdI;tHF2oU^(4Y<?YP!_G&ZpD!Q~
zodA?0M|Am)(zJY--$;3#<*dz6?V$7^;h_@anBKO)%-yi_lyKWs*TWm}ZZbMoP$}{I
zkb9U)pdXfm^W{!to;f&*lF2%td)`v>WFtcrp0;kjQDHSF=lzqV76$gcj}dIj5Q#bg
zmgii{Cr;n+OM$n66YYeHR$mPzF+>%`m>&fIEf@S(fIC(q2~u#3pH2&MUaAK?-VZwg
z#UYTt423))v&myugCIEq>g4MZ>6yyPidRvHoz2397<<>hHdJM_f(4oGt`4T6?z<~~
z+G9*-fq?fVS^$LM4!^{Cq)q)pd-I_HFt*`GVOvJ@^5t(W4)%ITRGrldGhN&d@AiCk
z>i9z}C@H1~b=k4%zpX9QUQLUo%CGQyUEf|A(;dm#E@0br*8O`j!`1>GC-X68Ya^8<
zv;4dlvrKmUb$=rH60PY
zpI@ir<@qo_u@COr2K2|s8?@93jQrOdchN~zo5q1OW10oEP$&qYS%Ni%^RW+<^r?-1
z%-SSv_E9BDnfmkuvoiwQm5icrx#s`hhl3lD00ND;cwQe11H)+9vEZvyv#KJ{&j=Sz
z=bqzY0KX0tRo8zlhyLqWp!o`M9W6_o!^eKq(bOm^FP`bniW)~^ObC555I(D2mz80F
zFQJx;f6pgSUeKI0(+ko8g&4TViS|B5>hDTaw$ZjVSj}Bsh7P(G0`&n_md1uw7WtFO
zk%|L!r8K!;sgI&<>ETMrg$e5!%Gp-ltE~);mFB`WroE68vUux1xZJP1t7w@llb{7C
zrBhAwO;iGMA9B9+@AX@%Myb=)u~m01USRam_L(`&)+KOs=}g8;71srY#TAy6(V4~J
z@8Q=v*xMAEXo{^)2Zl-&V5*a0nP6{*ijsodM$g$mHNr9gtSD}+j4iBMV%bD@7GevW
z-VYGT#`{^O(&cPI&?0_o1ZjYZvvV#xmyr}kuYH7e$j;oFiJ8f@(oJ!X`5jh-leFW$
z2coKJ0)3x$H&wB*Dll*3p5uA6rZRdSBS#r8C0#64tTCm!rAlwIv%zK$ES~oExOvzb
zBU&QDH(G>an99l8Vn)ETQ`!qpQTwLXW5T<@{nUi_%m4((NlpLpA{KG_PvTRmODv)a
z3!au1Vg{3c1&zo
zd4Y(>_8;@!;3tC<<(g?dw3&ZSzW;gkB*Hw;{J-CRf%wGDrp)%g|C%7>e}A~s4`~QP
z_P>AX`kd1KqPSt$|P
z^`lAXN|3_Oc#_40Wf!225*NhOYI$|hE*E`Mz+{1=9?7_hHC3K>j>qs=D(71gW2FY1
z2FB}JEndckRZEuWMB&yVpo4s3G^UR1Fh{kUmYLJ
z*l2VMeo~Xrm)gHdBBjC&9cF>y1FRQ<0$!_jX?y9%!f7;M7PpPDUDaR>hP>q#X5!Qi
zg6j{59f4ox;fSz#ljXt`du!EbdgIjImKNLQZ4(nEHEUs6hLNT5e1i?8JT`JJv5L^U
zHf9>?MsQYy-+DE=U+(PG=MbK&tfri&#YbFlsI2u5CMuh>H7j15{{EpO9ejiIG37-m
zImm!=rj#3NkL#RvFBAHyYS9cUxwfROT@|C%N$YAWc4u1bq=lsXmd@i<<9~aHl^V?K
zjJp7dJnAuuyrrwAl9nF`RCc3n@jnGjk?Zgo@F~X!S
zqhhei0Cfe%$B6Gptd=;$ZCxr;Oy@2a3p@=jRx`503IJ{(%kf#~upg2gd}zM6ri(M%
zzK;*cu4=4$|8_^PqkD0FZWtHJQKH6jK$NGvioT`Kfdz5NDZ;5wQ!`wn;-#t-yCts<
z?T>jR;x-S`b!FrBWh53wU$pl&64%YkOl0g&$PJM;9c{N#cQHro_YB6Fvik$3V4t*&{;~?$P+AAK
z#CBcU(R8bp^o8(CQDKT=O|fXpz)44S^}nxg>h~-Y4>Y=MRxb}GH~w^QT-Sq1@6!aj
zT0@Tlj+rffzDt=_JxKSmb2cgt=iR52S@M;ML<~gv92xCexTK{LIS8l$AV+9=>KBT8
zivxk7F3!e>2HaCBwDwjXi#|So{7b(H>IQHYskpx+n$4Uo3=2C2{s=_Y;SF38RZQ}4
z$EV^gCGD9Z++B)G3Sz`KX!xndU~%>PaJ$LcA>t3>&lM&w|_XX*1)9A9qgVQ8QC2_D1m_^}lyNG>lAtL_}(C^}`m2_eY$N
z^ESBg{k(;+Y*@%?;fVRLn176%487qntdpUOVbYjN!y5lu|5=8@sH$j=pe~#xT=hqq
zV(Zq4X55EB8478#Z|L>%Hd-}e76=b|Y(5~cXnQ!yQp76uVqgf=c)=fwSRv`ZZGA5M
zYnpXIkj(EnR5BPjHUZKY6|vkseEg&mOH_uHI8DM}Kd>`BaB-ctH+32!9E-$6L!PaI
zVn!`P8%)objR$O6kU`=<(8u;gKPUKYNC?|r$ZPhPQLV|KxKWNwFxE#Ly~0;mLv|?w
z0vCJ83=P)Lsx!l$Jm*k%W0tw;i3O$Vi2@AE$)T(3eNmcRJks6!JT9=;g)$T(HLemt$y!DQ~k-
zq_;-_Qb>7wA(5Pz~`?fmLDVickm
z!{M9o*S7nMuHjE#+#i_r3~MDdLF(Pl2%I=+%|Cp5GWhp3#FVfu)aaIh+CWz45bWCf
zhu}@DZ5yu2-ILmPV8O4qHEWy05x|PqfUJx+(Uy~isqyyD?ZYZOd>IkXPfKFeV9EVL
zdJ)mpAAi?<5|MFsa0#?q+R}@+?>>hvVPDzuG;FR_!mF#RkiyhU<$>99uL
zuDevdymofMxyii&(;>$v#`r5NGv#}Zz?S({90IoJ62XED;VCZ-t4r6h<3_y<1+V=D
zN|4O2FYtE^hkn>kt!mpDV3KiFZG}Nq60u;<-flrZC2fc#-Mq7-6MK{C=J{qDA`X2*
zsGUID!|H|LT^Rva^A?FJ9X)Sp%EzT@C;38^Z(lDzT<~j+uVn@@t`ax;c1f-jl(i!H
zr7yIbOijrVUr6X3w{l={M5Ywc%9oMn_{=+c?g!ayE8qf)dE+)zfVJ^z^5X2`V}8WQ
z^s`^P2;tnK*phbO?tko=_3(956g#a^^c&1%N|eg&_6=Kb^jrWG4W34q3byJv+I!kO
z#<%oqe>aLj)dsJ6c;>!Zy9ATgiP23>EW2lCw0@tuGM0(iaykLu&YQ?be;9|k`3
zFa`+vJ*{h8JGoKTA4b&k%<-6PnH+J|-<@1!|66Lz7`<{8PzAU#u28$3+KxVy1eQGG
zf3eEgIN#J8)k+_v?}J5@q^J3P_V{1a73I;f8q<82Za1^+yX3u;zWC2Dg1ZF%7xHrV
z=YPw-S0>$MC!8a)c7r*Q@45=X@I;RNK#8CF2z~d2EvtGFulUzF^s7{Eq-JnbP;Gb`
z8I5g6fkE>Fj-i=Flj$W5zYf1N>j0s2T}mhfrHZ@=owo
zzx7X)L|60;osK&e@taVAPKhgGv0R0P2G6pTN+p`uWgnO0{MPm92wtedr%x6C4Zcp}
zQMkpxJl9Wg-*7q_Msc{%8lo5$(dVsCw*l&;x*RSaw(HUXIKZ@$wecd#WSV7V6+`8}
zuX%UL5ur6T5r*StE~^8XT)|(UrbjC@28o8RZtJ{?jTdbbKdtLnjm6ccr(gZfr#pN#
zS19*_MzHT%{RIczs1km^eaFa3$Ix7CmYBVdF7@fP3>enaYG!&9t0yCUF5SGB$<`Dn)gm#OYo<9GE)bM)e0KJXJDouZ`4
zz|UgQ#mZ^Fhmr`O&?ONPX41+L(MN>HW%G81=J%UgQU(*st@#n#bz)jCt_c1d{js$$
z-JPhs%VLLrwpuHkm-zI|a$ntodpA!!Zy=9hENdSOS8iSQ0a*iP_~**k+=0Gh=VIRB
zF#gGHvUdN$tYxBP#@?gF<6LCR7-B#r88?Z!g>cYM-i9Y`-)L>zS`;AI|A-HeUi=lp
zlO}6XXLS+`?fdO-picoVm>1XQ^(@tnZjPBu#(e#4(e7ASFQHUyYiB3tY^4GnzQ&Tf
zGrMG&%aK&mzER&6C8TL2$Cib9>En(nVKZK{2E^ye@01(9NyVao`(v9(Tb;{8Aek<+
zB1At|MI>jU7ORwfoKVBdeDQlF;e1U!fFqqxXIqU^v!g`BZN)#BygE%q*;T-4Gryfg
zA`o@P5%I;O2ggx&6pYX+q=EByLLSam2?OikrFJB4as;;|F|tBcxVR_cm%R_rR(<5x
zO^gSnrN!|9G8D0!@qfyBu6=&+ILtneYpSR#1B1R=ApeZg6<-9Q2J2_~oy`~K5&RtN
zx-_v!C%a$BlUO*JkN3vNsad&;nefjh-+rsO)cRHb=1KcD;VDXP0(XlyC$DbmOOq7W)qI)SsKBK8jh7>yDfXWcWzCCYDVX8)8B1(qD(ik)mbq4
zAbu-8;)Vbg0#U!C?EK;=TXrg1HY`>uH%Vyw4IHxW6FL^Yu7*xwarQ#7(+FJbmXUN5
zd3-K;Jo%wEeanQm(``HtWTb+QMk2uz7
zl!p&BK&x1(l#~hD*)7uO>SySG=FgC!Q$b4+OhGhER5(}ID?|G*8F5t(>9aAMl1kO^
z_;v8*hE1YuM*aop+bfGqnk399nAZ4YleVJ=0F^}BMEPKMXTNz==I6b-Pk93C@@skT
z4k1k66>o}XaN|r@>_v}n7<~~{*+x|qLS)N=TPmwfOAg#|kZV6xz1_}EQV&rzSkG^o!152
ze~*!t;#_s7RE0_7A^(O-T;FLE3(Hp!S{P2#I87e14|XGW$6^-&)b*25Sc~kMWyj9p
z%qIJ5(x}%jWGPx{dRh7>oEu)Yknc$7GOvd>&WKt)FixqfA{EO-W*pp{@de$rGi`nM
z1jDe!bCG)Tx*YI+I`xcL^mzf)7hJ((1@qUnxf$u6fT8^}&Xjd`8jtIwIqDVaOStU2
zK3+n!KeJIAby#%(?-g{apG(0ym3sCbuKMqAaT9o&mfW?#QZAjJ=Ye_MjZ=d2x=$`K
zCH)dyg1Zg4&Egrg4KBnW%6C$3ESa%7vf8#aCT7GAW1pm3r&HX?;~jA#cqOh%!b2_>
zE{Q~XVGn4Ov3FMctrJL5nzj-brzeB;p$BM^ESB_I2Dg&c#z(oRl
z^M2bYgOl}gDi1m9M-Z@y&r%IZol-lh<%l=6);G4+|6Jz+Rkq2UF`$nF|9n!z+
zqJH@JV7`ts;sr=wA{B_gf9+Gp)trcw0LI@sLJYCac!abfwzsE$!=0W%#oQfBeTdNC
z@UzKj#COF^UZ+PUpv!sfd2{P=1JFnTucv11
zxLRMeY1ePBw*ms>m<3PvZPaAmxGEuF?VC{fF6D-(fh-b4g&$pVa`
z>QZIUE<6hdQ@*8L8C%XzSinf&<(`$!hQs3C?>7tB)6_h<2zm;qrVD6gNr*UL{HVcesp=SHn=IOy%7QuD%Y
zmT(ofrHB_koG+7xt7f5Mx&D2Z7>--JLMf{4g+~(K=jpr$a%X!Vod^5?&cs8lw^$LW
zpHU%yU#ETljPln~@o%zWrg*efbiKjgn%AaccN~Y}SHy=$JC{7SLyM(n(lpYizsZ#P
z0JsL$6o1xxLIRHcz!IvcHFq!&*pjBxYd_9e?K->JPdqep<5B00Jm784n6baURiumH
zfY{jnVjb%Sb99AVoib9wHVk(kID9C%%w^&0<<%I)Kf4~s-xDxvU6;E=vN{Q*Xq@}vB+RbKe1w`u0>hjIrBx_*Rsy~gwgpY
z`QA^LH?DMz=R4sl6og|vZFcnnn1lTfYDoQ<12lskSVY(N4+D|SG7a?r?YLF>BFB%1
z=K-h$@|`eXp4ka(sU+RE{v6LC{!?ms;NJGPJ!fu=0R2Su2^rAY
zKE>}`@5uZt;FF0m_6-53K0zZD%oO{jbZP_J1De
zY`X!B8lU#PagK;JcMCr|t&REd+w=w3*I&Hq&9Bg~LZ-geL~5FP+6K3l3HUa7KgE9n
zeribnA7gJFRdx8S`+iBK8&OJ-?gnXTX;8YmL8PQZ>5}f2l#p(aZt0Nj?rzTOZ=b!-
zx#NyI#vQ{y7y@gt)_P;k=lRSzxzOL-g#+)Mnv>7wZ%f>lXH9Iiw?<~PZi*3v9QY+1471hWhD?sMYeY|4K<^}Ys9cN)8)w&g
zuUNf%<~MP(#N5@+te0@Ey;T8Mkf{V4^YG(nmkejoo?Iq0>SSC`x1J6v$r)e!@@jV
zn$Mjf<}g0)GQ5c4C7i2xQrkaxcT2N=l6ONGdq@ulRmLMhdEI&Zf=5Gvm>Cg^;HEe2
zHdT!6C@{%1Ufd$pzE}OuxmLR)YRg}!wn`1?u>58opJY84<^{r#&N1Vwup|(
z6r21foCB`R1Pcu0Srn#(pOL(L#3!qu7MUj}YWINR>z(`Wroxg%4IjN)4HrkKgoTR!
zPD%@56J2OBV67#LK$(6Twl=m8_X`6?+!00*<(|!V`2^S($=K0~DMyP#v_gMG3O5C&7wCa3)I$VPP!s1J_2y
z4O^QQoK&EbzvIO|`PQ6fM=8*A88walb_rzgV5TRm)h!M}vvRfuyeI@0YcCfqD;C;&=(n*7dvcy?++^IdG9nI;+BWQA-`-q{wDmuD
z>v%ajnIC1DqlNWKO@HLuom@~GDH;Le6ad)n{pNUTSHpW{!vptJodR1$Rjnl)2`^Y2
zB*;C?peIB{Nn`@4^S7YBqDP~J^H2IsLAuwx@z;9uC4zR`GmhV(5i2`?G+w9iUk
zxh7i^GgNXMd*(>V|ComV-s-kMXheq2pBG?b*O55o*w9G5P5#1w%hWHcNO+Uer|Y)n(gm7+D2a!mbr
z3uTZpMXKh-dq<==cq~L&HJ0t`wp0RrW%}OEn^-&C6AO!2BA*uH8PUOH{nn5t%oX~=
zqvv&O_Gva+5BK}ru{>#4umBvB(N1{Qk#6BGJjpRXBJmF|HN*Ri!X-NqVFyq24A|YR
zmL$07@;C3S@0V8^LtBR#7#>$ddi(c6F9@%jHW)LyDU}N&^$h8L(g&Wu3L7GUeDdTv
z!8|;$t;PvcXmhy2a5d*yjRRv_lsrz1$}1!G
zXLSd`2g&;g;<4m?q4$A#XQdW1T|5p~^I$9_i9bIGaQB|H=YXAl-v}(`wGI{a#6%a{
zxxyb6KT0iN#eRT3wVpzA?b2k~9Rx+I*$;YwKfu@}wxo&v!RS0Wc6P4u>Cu>eV<@v7
zNiD)}3>KWtBCCJ-j}AqjAUQqieW;042MS%?_XZ+=Xg+3$os38+iRkKz8lV}=WgC@BahwZDs
zKqCB}f)V=uKG)Hvp}L+krmL#9B1YN-@;QjZ{O2A_Acrl$L#Z}t0P|9M>A2zk66j&d
zxtikose%DjF!Aosd8Bb^OAB1UC5p5
zRUF@vJS@P9sL|4R%=Q@^H+~m+u01ASvyq$MRGG|l7%I7*>}^liQ@UO>xdHA66A30W
zD=KjD;*;&%bfbdfSfF@g{PopIf>b96mr4d1fIcZcZG;ChcBo)&3PBtp$49ppM}`4^
zZS4aQI!{qq4tMR1&jN4?zJT&Mkhc-b)Y6kge{%WU>b=hN&-?n*cyd40o)%imxVRd5
z<^}`R6MWt_0q!0YM7auD6@Zyl_c7(EfHb9qUN8R*ABZdiqPNj}CaYtEytedxH8l(f
zc6z3WySfuqv-~vb4WFdBYHb0JAdou8rZET_r`*>&J%T-a>vR;_-CZke!Q~eplegq&Y#@5sF2d+`csgWgR##FJHa3s
zg?s?~5iA$X_vPS|u0=~s$p=&0?t$J+E_54EpdWOF;78{>+G~dzjK;~ua=Et~+FB|%
zDOhodc{v6oJan7cGNG1}-IzV2XA$pIq=w&nu{j1Rc%X2EvpuN{P|oK9wa|!TEj$5&g(k&ci;lVWiz?|ZV#9|N!SQl9cu5#
zM+6Qb8lRD@J!CPFd$+H?>F)x$4uo>4H{;gdwEpBK6}{A*e@1b9x^HP^Ad{u|>J?!H
zaz*mnBIY^Q-9Je{lSrzShZP1ehC|O&{gDuAvVsm*%A0|!5@UzIAkPIs>UJLw
z&~8Fc&X^uOwWa3|H~8YZiK0cRV!+_qs}F9gU}R7rcg7bo0IpWyZtbj&{*)QEAT%XG
z;+g6hz&MJh-^vcXwSX%FmD)Gq0MGl=@&1q!i(W}x^~**dC(vov_9C-c^MKIJVKZCu
zqBi3jf6}7I((a4;1KeT4B2I>xoSV5N+=+p8pnVHsB-y@ESM~GA|&phwz
zOZtLC$Nx>moA0dk5`VCeMoiQhcML{%39=XvSlmpydUjad_xv^i!S0hQQyxtlo$8>7|
zP%D`h?^Bs^iI8|K3+%p_OpEVNtb^#_bC&H6$8CV?p6ZZxUxCT1?HwSnNK#7B}RDp8c{1X7)5VDtbACh!Km3z@Xhm7Igi
z8iYsdT%>V^rq-JaEps3gD$cg{XbQLu*d$I>!;tf=>4W9qgQqit2~rPUFVh3asa?Y2
zHK&i)!rh{qJs<0vLZ^Ilz8)&Zs%n5)2sFS0D+t#|3{G1>zw
zIZsZeUn;uKm;yUkDtFn;Q60e?t2|=hrqD7Q$5}h|o23)Mfh<`WC+d2ze+dnoFd%-e
zFqR4pra6$Wr%Y9Gkv9O#1r81?hwPPWq#BZL5Qf6&e{99S>OBTV%10J@#V$}lfc%Zi
z{4i49mmKNpf7pI_dhwjmEQ^NXSCeTGd2*6*Hhp#qfq8I{f;|7n)KkNO0?Pvy34utI
z<24tH-6qFey^`Eq&bqBka6w123%x-(23@@d@5{bS+d$WMy}TZDDAmLvnLBS5+v#2x
zbOeDDx8%P8c8tt0)mNihV!vuDp81?^221u6m|Q26UNS+7K%HHEIk4Ez^oBbpRVhHc
zWf=uwvY3>l`XBM_o325mYHS$mAM6i27#cU8XnuBPcJ?EBHwMV3!A;)YB)GaBZ}#bP
zwF3<3e8Ps;p1I7FG!!Y872mdc0-_Q>laDB}(|Pr?jUXFku_T!B@%=NP-;Rk@hev<0
z2m6Ezr0-rt0M!)yFxP2_FtqNjB^8AyU+FZ!!BgAePn`$NLW(R2zLcH4az^8jn*ft)
zUBjCUngdsJG&9p&#KEaIxP|-H3P<5sL@|*4^Ej~$(eYU&vMHtBZ*Ft8P9VxBG%7eN
z$(!ot1%^s$QM>S^epmplqJR`b%x%taaxT})_+5QATkCCeUfYAw!^>J>4yMSC3legmag2bLdM~m1>
zNMZM5_W(lyn1)|D>S&q1r8zS6kI_ekk;7?;`V9BBpm^d+FYC3;#Y@ZTv_F%Jlw}mm
zKUrj0;qcnK7AZOT!ut&AhLU_0tpZv5i~8qNlyN{dgly^$@?PHFY~25%>s?U3N5#NE
z9|9HHHqF3YaL8XVi!MHLj%95yc^`}Zlpl$5zC9tTCVAy40?%bJGjDbDVclX!G2L8_@(Rv!=`Q~_S
z5^K?)Fw*|ompd#1I(l<}|JN2|zUv#5fK>)s@}E8;LJl|%K)eCl6->?i>{M9tQ{0Y>@7$h3O+PmA^1El+}VPcmGW%q
ze<1p)hnreu*AV)UjeD~*nX?%7nD-RQbDKCpP0{zjhu){$U2bmhaM=ObQ@${b@E&VW
zW`Sv&U9dXR3%(an&<*xiLk2R%N6G|z!{rC75i}vM#~>X8d-ZK4_~s4$wF2?6e%gM(
zly&xdNIy|vA^`zsRJKZzniP5-jMg#xD@^H9ysZdx+5it|EHzG_6+jt}lwEuUY-NT=
zmhhhj07v0|9e+_<12l4Xr^9!-ilRpCEOYcReT!X^5cK#QDWYRn)#>S%e7zj5@-o$`}&$Xk;>3SQ(l74cyku*-k
z6Z=w@$sFO59`coc2GImq3NOpmF9t3+s~?d;pC10A)x&yZWoB8_CkGKrz^}mu^yE|i
z;$gr&MT0+K4lO?t=_fbRF9a(vhI0@NRYU>xYQ
z;E*)OYF8X)0o>1L(+dA!gq(O+FvfO1njc)O>BT#Gm()CGQOjNV@o1Rc;#|?2zp90Cdmf)xzV>5m^6ibF|jiV
zeE1FN8yUnzB_t(AscUM8jOPI>wCR331bCSsQ7BL2Q&1b89<|ezY?Z+11b-o*)V2=w
zf@H(m$q#wd`QRm+Bi;vdj<6RL8GxHw^`kC_)u8OYB3;zf8|8qY-?s8Li(;+8GI9|1
zF~U8_b(%uGmnJJw1ceJU|KqMve&YOj3lL23vRN~XKo*D~^3KZwOh$BkZ$cYi=Lxd1
zj8@OWqQZW>9>~oD`j&
zQvTFW#+C4}Rrhz1xCyutYC?3hw`bGL%7wAgxtsV~#ArO-s}=QV+T4L$i7s7fYF8x9
zo`VG@U=GbcreNY=TvJo??rGM_=5cL8Sy|$=I)55`T0n(Q1pK6^C$L*T8dk-}$A1{_
zDAgn`)mNo5q1sBo1E&edaBW+gKmaX}Bs-O-_(bql<%A0Q9vzpQ81?Of$I+yxUdNcR
z;^)`B!1YM*+Gm7B1w=XA4jMl%w+p?XPmIe|$*mW!ZyPO(L?i;f=7)P~qZkW$fi0z8
zqhu~dCdxm9oy8GaE(bdoV0i({IfH-SU7p2^FMsPu&r4c?gNwr!_c$X!Ky*~$_ySlN
z`^DDaPY1c&_~)_e>T3F*^x!&jKfWc46Ip1|kI_!`2mBGD8{!cTIq(6DAs{bqX!ZMA
z1twJw8UPKN-=|dWr@^%Gx~YfMqj1jXUY%1^204i1C^3-|RP)N_kGgv3T1(G^^iQY3
z)?WN%$9-$eVa$`)Ib*?b77@xTO;PPAEh#RQ?Z5Zf-#nSvuM*Vt3eDpPeetvh_e_Ka
z`w+ljbTKwsP2%>t?(4UsGLdDflON+$;&Qk0mN2|N-EHVFMo)p|zpp8uN`UzV2U?fF
zuZ|nb+5_|Pw%0MRGRQ4B8l)Kd>H8XAoG%-lJ~O5a0x|NZD*Il#L3t@K`!z0GW_smx
z7rfc>OK<68U_MV)l>aI$C=I&CP5K@W%mVNl1@fU?v@kwAc(A7QqB#A4?)W+#v@CT(=XI;6F$bre~cBQ6eq27D+p8C+*vI*
zy!|}5@tT2&pOJcDaHiN-?dj5J`>(s%P}tC(>jmJZv$nLViKVe}^Av1Q;Cy{WOVHY(s?BBZjWGu%J`YKTkby<5#=nb|5XpsWf~Kd9b)K_`#IDB
zkeo1}B@KF43w8VdN1cWA@!IqCsW(y5$MoYtzyeg@^T5?9NWU
zvKoFWdxu^AWpC%Gj|rGjwM?^q&3pfY{vS4aK+w74c@6VoMPdDK%My5h*|+s8*DF3b
zqwh%tbE&gK0dc?gbbptx?1W_?Rn`XUyA0${W`U-#QZRxSNwgcZcOjy$G@YX34S(b~
z-)Z}~gn{oh4E>BMPMn|75r3=djPR^=B+v|%b`|;yF
zcIklDp`&8wdIY&0NQ^~{I#@Eqf!^$OT!%Lvzv6ipw0*p~^dgvY6m+iy7b6WaVQt
zy9T_H7Hurw-f0f~mlE}{*pYatd^kWbR6Uh7n+tIi(yk`Nl;8+1KgJ`Z>@(OLAqdQP
z+A~ur1J&b;oe&h;Q*<7Jxr`$t1*(kldT
z{+}i4vs#o0pH0Wh->6m=0b3hH)j)gg@1zD0Ab?P?g2lkN2F7}4?Em7oQ`Mq}H-CWu
zO;gi@@_#RSRT&!{8w-`Bk945v_O*DN{sbF9@@b7j8gmFAKO&3J#l@?}fk!VHEYXxs
zA6PpBEURlczYKe5{3%B*zO1T~g-KycsV-q4SLd6!`$lHNDK^4aguq<{BNtSN>KV;q
z)mZ3l7>eU~MS{8j`N#kQla+n4+QDE@pY*GKA9TA676TYqA%SHDUX&Cin6AlyE)yu>
z;`B+yjX$1wc`I%cOnL-$R*f@_G&ZUKRe*p;HyQ%oOJIj1o4!rUTQgpxaT%+rDUDYe
z0CieUJG?eTvosHQ&v!owl!5sKdgO6DbG)>1^;N(T9mrIw*4ftyN@cJ`@`DRR1|=A@
zImHnJ_@R_QM!jTYPA~M=&oyS#c&7pLGs4E&eBXR6lN>w5@*BAUpn=|Gm|5g$TbHY+
zswEHGEGNH80+IzSnt*60I*NEZ2&t1~H&^CWN7DiPpfaiAbU{S?syR1g`fL|v02$`@
zP+xQIa~@!Zz0=I~2jHddxL4iH<56O^#mN6IJGd9Z0A)fMf=vIX4B<)P|99mNW>n6iOK{udebtGc3&C
zn;}RX)6rS7vl$zfi${_;ez@sj<-m4N27#C!9q{=~%oZF91e
z5+j>~mRNeU~SmMNneceJ_UY%4u3UQRZh(FY2;vzF^)De
z=nJ<|!1U%2aXiz*-#e80`Q+h@F8=hal$59xEt#$&A#eG`%D{(^QKh
z4Fko|(8Px`DqB6rvz3RMn-2of#Z=GI$P*2(_7lQcOAYFQch{UIjCLD
zeEnP8XS}kO^mIE)rA+tq3KsHN*J*4a;(rbq85xzc`7`Tw7OQ7fc_duyxs&k1Lvf^n
zP1|#7hdNgpmA87$A+@8H2;CoEVPo$fVL$@tMB5GaZ|r@sNaLA@`CZW6Ee;O^*eKvr
z%3_;b&%7?J1#>h6)rS31?ox%y#2?d>ug)GH`rNOiUlEqW8uKn34ZeKq>u@+9oGPS8
zhnbmxl){bSeWUzG)Bf~Sgi5|x?k0-zyI2+jX0R774b2z!&lGoa+^?gmXmAUqaL=ao
z;B4nVrEvt;{f02B&6RdixG%c8wl}t~j%=Qxnok+JUs2gw#mg+`)Hs*rNb;?E8M0=O
zKHeRPGwVV=@ijFcX~HO@8j7_7y{yDzACWVz4jI3kido#Ow6#UNk${9}Vrl)7Uv
z!gKTDxTr|?e2?0=eE;D=vc)w=J#+nF?pI$7nzr^nBF0qq=(?=O$=)$CH^L#qsj^cS1&db#bkO-<=K*VqXza&v`L-he`V1sUf=sr(OC
zQqRY|Y(|vt!XV7fG>FDWG
zIJ4&ONw8r!KhtgaP2YY2haq)FHp@Z$hSY`Er{W4_l%i77W3!W|nh`0n$
z1uQJva9ZW*8KL7A`ocWF#nzt*qn>Ph27;*{#o&gRm5|Wkw*E!PpJ-~S8551&=yp*%
zkl<8O(s(rM-~ZA3(fV&?e$RZpYO`BZ@A}yH?{!Xl+4xKxpPZ@*&jrYs_~_|BFY+e`
z_l@K$FgCa_e>tTvyxboN#_=BhlefLC?}T)DwY9$GqFvp;HY{Y(-R<=Dtt$rUDuS1g
z5#rrk?H{XYx1;&@d7~j;zjoxwx(YeunUv|?US7fj6)}2QKRP~s@2ItMY#f|oA>nye
zR&zH;tp@?9te>2z#&=X$S<9`aI*YY~RqYj%)&<-{benz=vKjvlCvpMk-W7__tw|n
zn+gg-_^oIV7!15+Q#6Q;S?9LOwKA*GeONS*p~2+F|}R9$%Q^Xgj<;!P_y5bMwkl9VZ)`8&rwileK!6qX79-9wsi;Qi}Xc
zA1uN>E~9`DlOu0-@ldHSSf5GuClT7<`Ly{bA|W%-u1+af$vi|=t4Dg^JvS$t4wn;B
zf8ywL<1i?>c&F4>UU*{k?D3MhrHb;DRA_U3qdHAs4y+%T-`Vb0i`4Spn1A<+!xj^Rh&11~)wDH$gC{Gw52ql!>P}
z`kPaAO9zkW!~6^bHkjjhiV@Dt4BB>Gm$HzOS{cvZFJ`Dp-eofoxucX}VVrRJG*VsT
zwYhe7F-B?qWzTb;z>B%!VYMs!_V(Io55PZRa-+(TqzTCW0_Y@Fmlp_7tG+^yf65XNZimSYXdnc|C?*VzuYVtMH1SrOq)NQCnuXjOTC7H~7EYZZ{i-eqT+{
z3h?nkEPG?Qb2T>L5_o}#*e^Hw@g6y3I5amaYc(L?QYOLhrv?*GsE^c41p@Rv0P+FB
z$lS-9^Yxczf4=vw*RY!zs%huTTJX8o;K%iYRqkyXqDqAO@pwIW>2D=zeD4-=r?6EL
zVt>sk4wr2#GJJ<#OJ@!CdIJGgPyzfKGP0vKxIM3jfL1qu>D{?Gt;_wJ%B9?+ZJxj`
z5hK~r&==DA=9YX5PZAyqY1s=ca-cmDv+hR$aZ#aKGL5g&
z7lO{kY`0HFM~ykz4Gk?SF`?8(v6h6e{9h>I)V%K83U{%(|A
zKC7{1hd|Y&fE(In6d0+|`X%inT)8?b^c7XmHXy52d?CdhbR~ll-2ys8ObbB0dwZD}
zb!TU86H^h5rLC1g0V|PBAX7@EaahdxJI(-uD7$q39s$Nex-OQ%{)sWOimUsVXNoGt
z{l}l6Us_eq?d$}+Tadph;bHl{r;wuf(Ub=Lo*61(<8P8Nwd3C^YgO0KU_Y7<-s57x
z&E(-x?_62lE6_GiP8sLmL^wFO#$$tj!;znF_HdKGbudRP-mGe=Cj80W-rn6HYqZXu
z=NXt>+~|*@p`j7CvSMESeZkEnf>=gHWrK@D>YIoo553Dd;DWay4iGpAM5JVyu
z8Yxb|>5lz1N5MMA`-Tm3kXb{jbG1G5H76Y0-p!f2)p&BkG$yGXrwh}ld%*pkg^a1`
z>QsqbVPO$3uX8AVJqeHS__k7MDJw1Q+Vx5IH+ZbToULu1d%dSu6(02ya^I{kQ_u)g
zr^>h;o#Q>lHv3{GM@ONN=qMQI8p*G3qHudZV0vDg7|&$&uykS)wEs%8KR2JOG;7*4
zm1D1LlZod!n$69=%t9r78Bc?bjtEV|J;QCq39Xwi9?zGtT{2bsI8t5B=;5J_K|-;p
zC$6Fb{al
z`N@lR7)D;SqfyVRFeK==7B&`*Z9xbyq=o3GrYeH4I#df>_2ciDbWHOhw;i1+5d-j)dHL(5nn0b9g8y&er=PRt@D)LZcS&*|DU}e8WbfC?pE?$B%Xk7M5>&JTI@Y*4R)gz4$A3#K&Y-D_KzaK0PkC{qBf!iaRvQA52~q%^!by
z&Z{zh-KOCimxKf%=18mvDJiK;5^~9oOa(NO_xXKL15v3!v*6#!NszYi9xXEdlwK!4
z8lyxG=Mq~%k=_{3&n{(JdmnR5Pk|I4)Malql{l1WFnvc-ZRlr03J)Gra!s!fA)_n$
zIeaocJ~B~iu0-V0Y=2?lXn8edf1JVavtS+~Rp*-W6hfU3m9&(USMC1U%lfoE2mql3
z+i4aBCD?u9!fpvR&T{qe@hv=1<`W6T5@{$x_d7F}l3X?iK^3Z#k1n76x(JcaWZDXUr&)*5_+tDAl+ufZ+EicBXE^Muc
zOGL!$`q}AY>`s-1bLfk+DfuAgRShwa$%(%ZgT+=_yl|BvdM#A(Y#cHse*<
zvDj$8;4b{dMeOoAIyN@$*O~XDZ+ycdap~#zd_!ey^)nYove1`2a*E0_+?Ic{dwa{K
z~DnNl`naWt19XP__)>3KO}i}E}W20M&^X8Y`Vm~+~aLy)BI&9
zGlS`nWl$uBgG(9Z^;;xfKGMd<7rM>;j`rnx<=LFv+=hRMXx);>$HD(kcXeqDrCA;9
zX??n|9E%`Uwqc7P8EXCPZ(wYEH>p;Gg8zw-aBZqMc&RDLqYOsazfJfo)Y?-;N9SBg
zF6&u(EY&;oGUYb%ZS+pXk{Oks%2!AE7M8rlnz`-z{1+!tPGX^Vk9V^P%ud8aM5?76
zSEohZcbCC|k~_`r$U#w)kgz-kJ>tvi09A7oJG*ygW_<^9^}fEG%(}1VmC*}`&Pl2ziE86m?siMaHaJ)jzZi>0Yf5xQiQEsiFCKvv2x)Jc_
zkKI(6q$IK!O&S85h-3gkwBKJnH}#X}-hT1hMTH=0Qk)#`5FIL@qa%&YDrJI3I5<9C
zNJX)l<+_ZDq%Rf~m1*u=4K;{c!3fh}+wxSE7n!Ay;+G83_T4cqA6L}N$R<)DZ1}rm
zETr%{_uuc3DzJF#)SAta@^O*;ti$!Ij=3Ow;+r!uC2VT%dho*DEpvIHQtcp
zl&qPOV5>*+Ws98k$Lsx#wSsH&=@ladYrcqtvSGUZDdp+TI}GR*6_p5A<90WigMz{W
znJ9;>oYvTQW6{si%WB-~k`l^V+rr(Qzn9uci`Fxlw$}V^DOK<3UVvMKac4*MY%@zA
zlbq+`0{mF8E5E9<^Ugx!tg~~>(=EzVJVo1Ivp>Js*jslO;+3V31D_=&!wN6#P4D+h
z-sW|bjSdwfaqUOh=0gVfgJis>@NPQqrP$i!wLH9p?+vbZ`U
z<728=#!TMvEN8HA=Jg~Rttx^|r-#?d#U3ivxZ7g>HR`dJW`Nh#Le)S54Ak+<%*zWr
zX9CE1)_`KO-``)yX+n+poGWv}-PFClzF%p!z^oHZSc?L6
zOqGfg7G!>g|H#h?ExNsBFV(BPybvd4Mg6z&BD<0=
zuFEIq>$eTthlR}21a+{n4O^{~<|PLz#3VJ6YO0+cb7kzfZ94^AOCIj|{l4xblXAQt
zE7cjIrOk0UB=X)TKyIbOKnp*;Qdn%9epnTcHj+`^K4sQpYH=MO9CrZort2zAMMYq3
z(_$AJ6I@pOk^%!2)CsbGRc5cYRG#gTda1`|MD`BwIu$kl!n`8FM1hYqaSq1zderD#
z84Ql7Nqma~rF!3N=qj9HK@#`p<6+*9N_)=k(LrJchlk(;k6dig85oN;?vcxv=S<_p
zgQBkvZHE3h|E-ifiO1_5?+APMHFN8d-|-BIZ4=78octO69dq1be6zbVQ);-=W{yoE
z{l}$8M$*Z!&{RuHUHGDkmiu%ct?Mue?F)piS5WVcL9Sxalp<+88X8$m&6oA>i@yv6
z4Gff{DsNseZ@M_-1SI`E&&*up%5opa-XtNB2?+_x?+)g3HcsbJa=T)}rU6I9YK;vl
z)!D$gW7SXYFMZKw0(K&%_`T25lns5V^e+=gRQcQ2tHmz$yx(8n{|O0MP2r}5_3a5K
z{IZSuwNLE!7cW)b<&8rM0*V_-3(Q}gs;&3TpxFMjUS?Dhm}(bIc*-`Yj%X1!g4Tw{
z*q`p&A01j3P%-Qs?B^<-xx+DE3G^GRw}n5`oK>eTeY9seJ|1u>w`#ey-P!Nzyptv6
z4!_2Er4fwtx3XC^6YhrwNXoSZ_P&XXnashgqMz4r9PsFvLf*IEbDcS=dpHU6EMt805a
zAS`#S^uxuFM#6V;f`R08bVe3Q1RXX9@aVy0
zW^oMc3pO?o@LNbmY@-wNYHq3!N?!i0tRBvoW7dms*C4M@nV5uG?y4}c|3MdB3ay%CZ);3VMqe3(J_gBoeG12q-)irpA?6pigr^1HQe&vsTA
z5WmHHozv(i+F9>MM@Q4bz!;Jo-K=&Io0t^H=~y$+(+_y{Vb2S~`IO&X!TFQpnfr+{
z$vo%d1(C){3U?z3e_h?L5h2#m!Hyhq4vuoItWcg*KYF#Q;^J;%!LY!dx$B#k4Rx`L
z%|G>f2!zg=LHhg_*j}&WJTDm_Sv1tnm&$XqZri()2mb!os$zX<
ze7JaVN((xQN-9oZ$h{P5ZF%|OB>m=0d9NTG#3&;ZsPglNdCl=DxupnQxanQji$wML
z*i_ky=?p{-fw1C+=(*YxIb1I*dSvc4C!?J-kZ4=Zaq;5>o-w!f9tzBOoggU5a}EuL
zQ7hOoGpv`ZcbbN9LN5hm5v35m=Ge{}uCC0EDo^94NHPL|Zh5Vh(wx(u;
z)zlY(FUwDdX$tCzAi_$Woi#h#sy#Opyv(CaH0qXez4*(h{TxCI4&F9$GXC+aa@=4;
z`hEiMZ7Ys9*ru__#4in{kWE{+4RYViQ!_@@*=T|N{MKwZq<$WJ4BH6TI3q?ck{Zi0NMAf*e|
zs(sZ^CrkOGCfiZyIdo1$Oc)cbNLNRamaX`&h=S*AQNYnS)5eHhPDfyVoPBRFsV!7!
z=8y(^vAxG^X11C`Zm6iYcVfxwr{~RQ)h|5utZx*48S<3sSgjom8
_t%5A+A-%HF
zP8K!2r*!vk3;IR@R0ETY68!6mV0|ou1j;KWv!B
ziPBu(*~v0I4%%>aDNasPQ#p&&yr$qH;G`3&AzszNts${zysE0$
z;}l*1ULYv1l*!y`jf<<_Hh$n4QWm)Oiw9+GwB{D0YYnj98yRL7mD*a#%Uj8#3!;c{
z5kj*l$ccacU`G`&3h9|0>#s89O%%$3@9HPUmM~v^Yu@Y%t$2pP8xkT$gdSipAAq=B
zL-;83{byhj6VsHJ7sxO{)PSl{E<%pGiHK;ap?RvM`RN11N>}~?RaDeQORF=Rhk{(m
zUP?+%R#r_8O*(K?SN%EE9)WIniPQB;xR8VjDc2IMFDjt?B#e-IWXU#Pfjd8Ms?|#e
z2ghjT01cx0ke4W%NMQu8v|y>Hiji%4!T>*?RtK4C^o^{+f>c139K+Z2V@b0O8#bcQ_K#
zhd&wAqUpG9iRRiQFFIHl!%2RoO-M$mpWkh)`51T~2!0(it3xNXGBc>XSrU4>8TOX9
z6@q~_I5!dw^vBF86A218;Wm<%2LS2&m~-ND*k@t^;D9NP=B3iWw~mV{?Uje^kSkX
zaA}N>J2
zGuJmOLL4cqUyF)nQ_m}Lp_xbO3J{VtW++L4NOtME154?4ew|tg@+9ut`
z!XkV-+c^}zvwJ%+uy>Frcc$9{4+Tq|yB%nvc5DiIM|ijo3Gkyzgnijvi}__TP)x0m
zd1Re4;fvbw>%R3VZ)~Tc<%Wk>TE#((VP8EBZn6hO1TANw30*7vnE
z)x?Vivv<9wU&Y8dOen`|QXo?KC
zfg?yF?APUmC%=(|t+3C+YFBS-y~4IZHjwOKpp@}7+~UfgG1uh{S$SEx2J7FkI?qkl
zBqKh2P>~sW-^CIplJ#T5M4w=j%MF_~dwjuZ_u`kg@@M6!VCSvB>bTcxUl;>P_fd
z10~coYxWQ*Y5D-?<6PqygoediQ`6Kf;cSwd{uS;ItB#7wYaBGi&v%z8q~09%E*Y*{
z5g!|NWuLIRvDUB$(;T
zf2wvllfKXVdcUscE%)}5{_W&Xptnbp5iFqjzgFCFG?vSL_THoizv6F{!)DbBe7A+x
zB|?nq%?$*jv7Vnd(26moTHfAvM&&EgSRx|M
z-@378lx63sUhU#ZQN%lJVv1&1-#>u$|I_s`)jT_jtgh@=;@g-uh{A&B@#5&aU-CehA3q%4f`a
zh^TkPINdc|tCCoe)GKEvLGsCYR1gC#qe@I)-#2;LS!9$hZQHgb?-%e0p4YG)P$n<$
zE!$UC$BW%U7#QPTVFt1b@=)H0qoqu4-<|2Q0k;LLB>33!Z}D+>Wrbh>d!=F-@pNfi
zN=$tz^&TItQA{i;^>$NY+?vy42K
zqabuq2yQ9Sf`uZxEa@30Dr%@c
zdzgrI4wSW;M!Xa~AMP?(JF;Ujgg^PGA%YdH>abOW@k(sZHK@D4&q7v8zoDVOWS;^B
zEAZ=+LV$kG$y(sUG296{&~C%uzn3uTdBw|@6XVVXPgvgo8#jA?NL>Dsca59;+hOR<
zz1ibqcwgVYal%=#pOyAtUnMDF>HPgyuZ%zv*dDZ=Hnrk63YgXe^F79=h2+CG#Q9Os;ibQ
za20XM1WRr^0=b(!Lq!}n9<>MBMM8w?!^1Z)NG+2=#eI^fpdHVt?ar>Npnp^Q|Dx+H
zpsMWF_TPnw3KG)Y-QC^YAl=>4-HixHgLF624HDAQA+2GgU)S%tAIHVZaHQ7|H*s+XVc0h^T0wj3QyJ-tK#-5-B^G$AcS1$2{6JJl
zMCt-=Je;B;@J51S5L>J>Wr`1YxW0~zfGV@21-GoE)Jj`3C*-90`BNfn5Z@2pH_Can
zc5xYqI!!UDuHyDI-F|__{L#VvhQI93&5%H}-pc(nFs8%T#2Adiqt4nE>f1soM;5vX
zh+S?^Yi_=L--#5S`0s6()x|N;-u(q$gy5`~qWhGxHXK$FLtR(7kZk?d7A!B%VG0BJ
z_IiA}JwA%9=)anP!8hhz2ft%Gj=6iXE659M0|bP5bpO^2K2U-TTPCnwr_FDSp=DKR
z!Ly9jl-1TAYSz`A+*k~#m~c(Q;CXeNbs!Pr5t6V|@07Z!mh7up@agd(mR9$>?YDe;
z;(Dr?X#DyKe77Rqf{H?)TL%Qw+eg<1x=`
zxhe&`4!fn9Z$j&WE=nw312Lt6fhrfdyU|@=m8_L5wl-%vePGpS^tpwoyE!g)WRZjU
z5I`kd{OT1+emHzL5TRyPI`Rt&uD8PZ{z`XbWMbla__3)85n{jxo)hpFU?<9H>TRf6
zTs%!<4b9ASCLt{(gL)m6AVL}(=YB@wa_>i?Ii8J#^*+L(1CqGX6&v~81BZ;Ck`ht^
zkCgJR%tDRN4<7QT1sywRD2JU!|S@UCS1VVIB@hNy|MhzLK%*fh$Qg%TSQsQ$SqN-uBv2&9)8xr+qsA6)>qf)w_
zGtO-{4vq3-v+m__`OYqyPM6ESSpce8o6S_f>9MghDG8H>pw-jSftHVrg0k+740a3g
z2AvVGwDcq??+>-886DtzPpRBl=mJ?r(cewU)RmXxqM+>Z@C;(B_0G(=EY>e#GMc)_
zav>m)dB5BYL4>?w)FRn-S|b!xc&LmRL3i8f!Ebjdjp+6CUk`arYKI3%Ehiatlj(87pBrgTbl_y3adHm$yn~;ZV0Xmk-j8AHF_CAbYHm
zBx*EL{n>~DM`vTRMI-?kKAuQ15JQd*V}ym3%Af{!jaZ2C=jeQWO02EPiHSXuUxPjF
zcm*0VZLjr>64@cn?UV>Ic>Icb0>zqz6r5H{BD{D&hZf333lI5)lapUxUuB_gz*3i^
zwmbMvRD$VV7Ks+$h@~$lzPhhEL{HE1oxl%PvBkItuhnx4hy15EJl|1I>E!9wiUzuT
zFlB9X$_qDkn4f=NNaDuY-g!OEQ-t+@Px=nZXQ%*&Rue%=Zbdv>D-9L()~z+2N51Xy
z^3tvmnNCbsgQTifkGb%~%Ht~4?9Lc2EDw(#8f(l~@YClkK?E>qO!5)Qgpi7J1N1L=
z?(~;lIu=XOj?>uI(Np_VOUUki&$n1K%k~_0>05^j>d459?<<6^5`lWBF9{G{Ck3CCW@k2!ohXlfPR4%*yLz>W132&J(laxk
zZ`O<%-1`&-e@`;Yz#dCR^Ez$TwB276$`0Uj_ZYIQWpj1gSz=urRR7^#yx$n0B@}$m
z$!rx7E9tk+MS&+6<921NQMpe=&FtbfMqGdh1!0E{mM&Jv?UJ-zOmsgpzMITf!vR&Z
zw%dvR>~t~3@p0dWDB$Q}=yu?Ad9pUuI8KDXR<^X1zD9&3?N4Qn&RLJ)1%D<5{U>sr
zIdRwG{_bu@*OQ77)2WmP%S&h>dm)Gnd&txHpGWt4ua?7wV7^DtzXOMJl%L=A@KB6T
zA86Hu?k6uogERyTv9REE+Bi6genp0dUsUO7zkg4kmWDkL1102;q=KHq%-upx+H3jX
z0ka?q7aT+;@;k1&>wVlFvtlkLOmWrm3S*bh4Y9b6p8!w(B%y%M<@J#VEBY%^vo!&@
zq+u7=O8*Ori%n^IT3TI;H2Lh~uh!~DN=mzl)Cvdl2R|3iw6*t*O+MN$pZc8!>?+*f
ze&BbZnwq~UO_@)9yl`^vMy^NgW>_bSnCl`o8{`yOX@`IMGUTwKhk^f;oNh0tu$!{}4jOd?B#4)?s_2k87rPADV
zQ&OoTPoY?3W!-3Qk+Rw*nX3}XF1q1=2aCXXNBD_JT-M=434kE^Yh`;)ANZ5hqfPF
zJDI#6gM-)Xm#Nl2fa^e$%}1S7%FOQe{FGwgj}MTdgYIB9ginXh58=~wsr4C
z?HM&-WU5_VrpG6Mda`K3Qk7Bn+fDBw2EB}+7u(6YI07o_MH;J)vs1j=VUCsMI|L$J
z|K}c?d1H+#m&YSc1l8$9jp`{R!nxWSVK!2#SqND!*au43UnOv#7iX^$3O;$g(&Zxy$-}ISaI-B%-cel&F8o1Q@&dv+LuK|X!PeI|~!hr~*Ei$sWII++|
zLPrM{#z(EXmz9-i#R}4e0u!~hICn=)Fd9{S292XuD?GwFOKtq#mizmCai;&;gP;pw
z65!Dej95r35>tU_p>loFr1w>5Z79;nw6Ch(|fOa&YaHc}!MvMfn|8`%Gv-;dO3W
zom_fGha7olotL!IHEvOJh{2eAH3J1n7)tmuJykoN(Oq4#f6zw26B1q@N8C(kw7$LV
zc`*0o>R_YunE+DaayLk?(~qL^^;C-v@@sCM^ieisWVOT6Q`AnIg(U)+AChBaAM?c$
z6jR`E&Sum}p2B}LWwuFHTVV#|1owE>_bTnAMfrf%$f0^#4Y{@pP8F+q@Z}Euu1*rV
z3JQu>dNa5jw!^mtOq8>bUcP^3`91h
zE{|p8T3K#p2og4#Bea6Oab+wEf9~-!-(a61jq3+f4Gj%(3G39ft8D=~O9x8Cw@tZF
zzHAqlWa*aa+uNjmchrtc9Fam0h*xiz=SrL8C3TwHR#Z%;9^gWNT^w9h!h{8kYHj{$
zeSd+9?a?&9E9;)QN{7~iuh=}i7W$G?=M+Nx20uoG0RKXMqeRZ1&MnG#@
zf83occj%(O+aavCDd{n6K3tJSlM6;BeOT@EZF4l?G5S2``T@jrP|vc+n;e{Bb+mSK
z#Zcu-Cx8X_?c2%G5@5?x0S1#5GBny7Y-AepRAgg4_VMG#=e^?fxOYAyp#MWr?cPJg
z2LF`u;c!xQ=OYG0&DGUHw+&;3wRb-bown85Minp_o|QlXrF^(w`|G3OT54%~g@yE0
zYFz-SWahJx%{)#t4!Qbdd1X!jS9`_HiPp&)bU;i8zclKn0)qF1Y$beb_4T~@QBSA8
zRbRZ2dxMUwrlxMe?}<|P!Dv4a8k`hLYHIz5OBz>~R;qD)Bk2cmb0d2reb5Nqd)jtW|n%540wY&JFw{TU%x9S46aDtXKKo
zGBU2WO8iqNO9Qc-0vq5drV^Ue%-{-J>F8kUx4l}q?^fekG1?lAELQl;t(^oD+FX<2
zaS`lZCPhX=#rQ5#T+}X%Wd_U1e`w=ErcAc2S?_Mq3k+*zL+6flIIyLyE`9g$docWK
zt#r*n4nyakK)iz(I`D_2-pXO%>*1TtZb4E*YeI8ZUnBUrE=Uewx|x|tT2c2-DEaqA
zj1R+{F6@?79+j0MySXq$M_*=UczsEIW)AxP0?Mgm#@$IpdvJ@jdw6V{o!x3_aabNF
zdLlh#ptM|ddY%)DUFJ9jxw@r=oe?xtZ1nVnES%S*WX8;Gd4M{hM1F(D_hwf7or_Be
zF7_T0;ggl|wg0>JWDJ0cq-SMymnb_eD3YMn*4EutRsxQL$IT6nFI)f>CHE^itLnsR
zm6=s(j)aAdFjR5ldvy(srMdUVZ&9#aW@qX#F;(|mdMER}WoLRy%WW8G@+K@7=jK!#
zMK*<1c7dr53Wfk9&<{F&1b7VSF`W8*1mGa?NtlsJKQodkkm1sR#i4$7_b0KD1+R7)t7@v)l)mn0
zY2|Eft%?#+yqwiisWkj$f+5YTTjck0@Ldf_dRjx^MK;#^NQA5NIfll6
zT76KDo-yCa*F(V@LZGp}L0&NhJXZ^|O>VX;BmCzpQ1HL}F`+3I|Nia2zVVqGKGpJH
zFZlbV=N%@)y#IQ|L$+w_hd@F!HoSj+=D%L$j|%zw4I$m;qM~*Z{|}GMScmJ;F*qp5b9>${a&Q2HS;e(8lB&af*)%58pXFDmK4nzo>Tot2-zWt!1d>-QdMnk{2v2&HNWF8%!>a
z-3hQ)k>StfzW~EiSRkcWP*S4l;fY*LMV>nPhEyt~C;8^Y^T!V$y=@-sUxrmJYJ;2?
zUH3D20U>WP$eL6P#43k!f*aYPfvBOP^0Vn@Q`ql7SnW{fDYmhZRhJ=WRLbV|0vbY+
zVz$%%{yPMZ_xpa7snG=e;8s2^t1`y|5)8g<`_rw6qk6r`z!+3fkLzfVlx
znH4B4BipwI9D1m{3$Z2R~PbihD4ekxZ6apq?
ze~Pr3K!7hy$$@z1;dVJ7U~XAgEzE87>9LCc!lf8rAmjX?x{uaDU7hmjY~T$aCO4Ei
zIP&RqOYCfHj`yV1ReKN2UkEvCYj3uD_KAFz)0pS}{JF0_A#}d#`{QYF$oOkGm@Py%
z%?>Y61oxS>Z9U#ca66yglO6qJ-g@wC&p{AbMiNw$lvw{x=nM4v0|peiEJKJ#oukQd
zi!&iC0k4~a8k+r)y0}EAZcF^U-tfC_$D>8+o$(D=rlES`>C!>Z3!2{Ez;CYrQpb9-
z$_}^)`!2K`77`M-Eg5}PRKM>&+oPQrcS657*!i;r@FBJj51{MrdkFNw_^7H18dtQ3
z3^F8IiM!vuW-Ml&@67pqt=YXfENiFeiez3=Bw4F$X?Hx%N(6Chd)G#lOxM>2XV5QvW|^b9CVOY
z;Yc4_bRVMNf|+j*wMq-Ig}Zx%!wgx7#(T4k^I#X3KpzE;w!_Z5GA=T)89mmRHzVB6
z;5R_X%w!)O_4xD&l;h~HUrYMm7W#|4Sfv024`s(C(pGi!v1*7W_kAF
zu5WNRG$acMq-p|2mHeIvfwc~_tLftzrFJIyJ%((31C+r3cqo$JU6CzwJp1tl!oI1Fp1jrZGqG<@zKmxq
zsO#Z3x!L`mEe``+XW<-~h!Ie^oc0fjA0Ii(y0EXlV**~#1klg*Rb^QMg-WFWdu%ed
zXhN};8p-1XRVzRbmz{S2AaLF67~E}IM8Fm2d2YI#&c3>`*wxXjsje~axuXEUG|-iU
zO$W8ncBsokxwo(Hs%dSo2`tm1M6~;@k)sqkW^me1tm*^0aIRDpL{JzQ=nfNz8cfY4
ze9uCo%F33~Sb_d)j3Pa9e`9xhyLlocwv|8${Lq_`6#TCHV^lwdu<#_~&1CvU1K-&V
zl(6rWTB3#1Kg>skFz@<$pIHGq9-*nMKvU}LkG!m}G?9_qkH;!8u-dtMcQsDQ%gFQ<
zAjwnSpQoQWfV#scB2vI${&WTmpE5glD+(66Tr}(9o_C$vUT9yiQMnfk*173v^2o
zVs3s#1v7EC-}fj1yXY%MP*W_2g(-tj#h+WNrJrBR%K#x+9TOF$-~8dJTx0V@)cm(0
z5APRmuXMSr3NthE?XzJ*ey=8r@w(d!OiT!wX*y?
zlqQE*owoN&V`Iy`qGdHfp`z5?rW2F|PiUy}Bg59}Hng?Jv^_nW>6UdpJpzqQUsD|)
zy#R3s1YK`sQi{3{zN20Rl|`TLO=eaCs$ZCF7zW9@+gu+l73$casEt-ar8SC$_^5Feufr%(mN2>DzqCL9qkIzl#eGWDx-K
zs`zxkSQ?){p~xp^-YQ+?@+P~q_6`QHBeF6wGnWEt-E(Z5H(sYiePdMu3{?PJ7@z#S
z={rb=hx+^{_z&uiUK?+goD@W{<{4mrkOk&
zOkGZ*AYCzvq{8N1k
z)mmmB9{UC4PcVcC!14RLmJp%PZ)cBg38ku&?^#>zr|P`QfjO({^cT3EzPoZ-0#!cn
z>P!7Eiaj@5F2%@XwWUok#v`D5Z}u|C88|r>n`hSTC&;WjY*)v
zeYgKD^8WpMGY>A7Nz?I-RFeS}b#=fNqU6475stGGEm9RbmSl2sF8^CuR#E7KUfKeW
zU;FA1yShbddertbo_ws$t+d3q8Tg>=MT3F6IkY)M+GNX&#}4O^;}H_rx9f}J
zMGC-WTCP6g7rkHea5;gV2$C=XMnLbs9!cQ^F^5D9uQtd0#>z_YdDcpV#ry0}LiT-MSMn!Wmk8zvw9o&(AfUo;mV+D9K1fiHZPpQ>@{wq#GkH
zoD%S|)<2*rx;xP2Y9h(zvNKi_3#?in>n`U;6$lagZ13ix+JTfyXeu}Z14M`kj;`Kz
zn_e<0{BJ7d{i5$~X!y|Am&mo#^5%sbY;1j1y08$?#JME&A1ADpVlw<9>9w--xEWyt
znscg@DThh_ACrNC<7wsh?>&yRj_q
zlTNUVt5)z80p~qv6CqgdlI76V)jN!OwWp>Rl9J$PKFSJHch@4lfCNwGpH*)LjT=k9
zd?Ek#ZHs+bN5gHsg5&-^L}+OaqpN3l*lYbaXa)hyB5N_0Q8Y6%1N|BY1=T{(Hwy6=
zKvS4%e)cTskYLP;vbpdaobH{+w$@*$1*`>hgnc~^`1u~IUFj7ii-G=q=$r0vPVrk(rc!Vjg>1Bs)mi!)~nVT&CT_nYe;
zk&%Tu*Kowj$e5T^R>}Rn|A{tmS@ygH;!kU%o3ob}DA2*J@dOJimO1WVdc<6QbNX0DoUt2JpmQw
zvD_T!z3Q5r1iHLj;=Z}$wW%P6eFWTXR16B-x>7U%5nnm1zFAy4(C@19eOm5W`qFH~
zWqY&;#JCqiz^-U7qKL)iEbtq{VteC-Gs6{XNdhI*(T2d>DN%-yt_@Um;xBqG8(}TQ
z#m8~PzyJW*1-;qXO?kG$m;N4crPPp_4!<8&74-&<@V=%uhcL+h$|dkV$SnDY6#s7y
zfPi`$2U5HVWi7o5!V8+kZpSpuow=H*pht>GzIw
z{mj~+lT5J3R04_kdHwstN6g7J9CLGkN1JkTprOk7g`kr@pKk$*{Rbbv1;1bPF*F1L
zED9LP-Cd81jaU$bSu`C+YvG(^%O#QAg
zAd|pe#-Ww?Ve{V?%F_1svMOexT-<`nbhoT(jL%iZeHRcWx#NEogI59niB$9;9d3#+
zBhi|{?zIhlv1g&h2N=Fg=YKH#g1mL$PtTNsyCQ|(8}QTc5aYmKHPPCvH>a8^YGQm(
zvdcB37k!aaZSIZ;5XeJva_*Wh=h3+t<3jVyUBpq}S2f@%1a{U`dullJN2k95RWEpP0S&1S
zj9x1?2*{FB)xfN83Lnn^1bh_uU?zjbI`~RJi0)_*8F(g=CqE~b?6w+jLli*6)N5m(
z<*^>3-6U)KAGkfk2Fmd8=}{;*ak(W}fFxN;&_a-k#@ZglbM|i*fHjM+rQ>VdfH5^5D>qh)*;|Hj(x)rN^kfXL1PT!-q#c76
z;O2u3vB!YHYJVS8xqV_Jo9UzH^eoW~Z@CXd2h^g}Oh!kZ%A^
zH1-Q|?|L9PJk0p;;NieI$;8fnjr8n=5~
z+J%CI%4FiaV*+=~A+T2Ibdu{$!qWo-=O6DuGwF14JM?!s{U>oiEnx5}lus^nCw#7L-FOQ|{9!pzXeHJv*r5vNoCI!oNhZqbm177vW5jVTMPEesjtKVAtVtBr^
z2&`}wWerJzP_9I4l=HWe_J)Qa{Q>OehOM30#YVf))s8wE##0+KhZgb{hDun@6^N;3VI_YdENNvmwovysW|$hs
z1SG3VbYm|BlMQT6`<$*7g=~8T`AYxCRtk##o~1TLBq!arx&F260pr<$?`98A_xu(X
zYpGbkW|w}-*jqO~+R;G9!Qn9*2A3O%5FizqTu9zk2(uRB_Hey)DELg*?gnz}Y2IFL
z>gr}7xSd<)465$cFpP^48gbUA-Xq#eOM>-
zr@FS@YN!X9Yj!e<^YkyDTfvkm%iEU$0O$lIl$Dj%?ItWFXQ7WN`rov>H5P7NZ5>nq
zw>kV-qeNBJV4WC7PgNDL+rmC0D{ILLGsyY`5lHk0){BdX{H<*uIdyp?%hL(-%Y488
zIBush>#?(AcRfE%%+7*j5w4)%0H-{mk|q{aJ#z0^a>+w
zCeUw3#^2qOw0=6>
zpIX{H8~q5>lmD|hU&wjMrS8~-1_4MYzH%fo>NA|d-u86Q8h*|j|Pc03Y^|=zj|M6Z1=mk`tEOCxlI>&u2=|}{_?yq2WdXw
zw_$Wyp+Yo0yki%d7;T5qeCU;DXRkhe@&!dCKthsNJLT2YUA3DO#wX7JjOp=*O;6{`
z{7uvV{;v~Ta$-A2RjIXR()Rzu%1^{`vw~<)F~*cohKRlb7KL
zsu^QZNtus*y}{sDcX6G?XL;E%+*DA!(IJsPe|l{XdBHJv~?}T01i3~
zHy1AZg}iT9stmH1>PYU1$#b1PR=dDDqm+{PXZ`&GM2t&fq6c8!?m0Ba(p{IjiS3WH
zK`~sqoRuy5RfT`_e*t#48!@GCpvDgJC~Vq0PDxVuOPl8<-b4ijn`l(#DNz9$Xc5e~
z;?es#Ihm18L%yOSSip>>#?HQ=NeJJoU!|*sipmOtsD&aqgO*@J4Nne*f$SpTnln37
z^iD864t}msE$#<~L8p2vTf!s?SNeY?09K3hIpY8B@20k}c>Ho~WKv!V3V!FQ=hG^?
zBuXVS-5)W)ZaDkBKW_^`TvN)9lIVnwI-%?TK%EC)6aHUFU@;3(e4V8hWo2-w>`n5+
zN~!f^Y5hhpjB)XGbo5O~+iFz+kB%8!RYtSBm;C2e$X&DsSi$(zFqcG`Sx6}Vjcn_L
zS$?-0bT8YyKH?O7vRpqFxERAP{VdtT^mylLgT02&S1$=A`|IRj;rUi^y3JkeX<<>ybC{vi#F
zTE6I#b=Uja!JyGM{)@Z06MTL;I@xa|cBkKrh*(vVlPKG`afpj=If!^k!)7BvQn2BH
zE{M6c2@wMK7YN+@5(rY<8795sfSFX|snU~`Yt6&V4}@*L;bdd&*KSP=2pj0Ve(mPTEiam1ZN;7_0*078LkAF-rKqTj+Xnk=&D>>K2ET#t
z72_kIK#>mV>Ff`m!h&B8tvl?7-WA}W07@bzbA}jQ)f)&|v841r@R+5md|Hh*SNGl6+>Jf$%)Fs5)AMR|xo-YV0NZ<{F)4^W+0E)*k`pf{>6E?h{dcUq(f29%!67Lg1tdXXLC%2wt_@sAx
zE*jDSaGX!C>5Gdb!b2YQ{>?&@VrM088L*!~JjFI1-iZKgXizg?HogEOge5Akt1}LH7NP5qcRbZNgJ)ZW8c`8Ji
zvJDkihN=2M&&C>q!eh&HsbF_J?5EmU4hH5p?hfx7)aUzsY29VqBJA8&~Nx%=MD=U8^!(x0B
zE)s-vUGOtOXudGxjv0Q#EhT%Z_N!qG_H=5-C`n1u6t848msu1#*I8I!u2GH+dJ7GSQi)MpNGCT{P?Z%0sy6OnO
zf7Vjn>RSOXQ;F2k-CQoZ_3>#$f|rnW1tia0)xUF$Jcdx1Q|>!=c!<}XCOrxN*5+7L
zSFs}b%9izj;jVg(ly?nGabSR^<{$WuS0W>*s)E?MwLyDaC23^2061lGlz;|$x_3-P
zUwKeCm+NCdTguT<_tKMJ7Zg{;Rb&0*igU=Sr9xNpyHEk038;oxPD>)dV$JnUPyz{4Th1s(Ia*=IrLrq16{w7Cg(
zb}&6+<}GH#i1cWlI3RlfLjhu9K(&ne%0!Qg%lB3gk}ChjoZH(?U99gTI<3;s$3)+I
zED4ExFZ1A0gf~J%P7}|dY>fdAn;j=Ow>ki<@%hh{$J?pGjTk&5rnD2qj9(mV(Lko>
z%N_easN$O3$`vaBsA!#?Glkz{
zA~m(d-gsT4gi=a>7cH6z@?n2}_3`|zOZjKe#}r6|pF-H-%WJ(+>+Z178@?wQ>+~i4
zu=63lsB~y}Z0zYm@gy8+h?1x2>}FiRnZkT1{M)qVSU#YZ2s31A%@5m?mW~Z&&S~G=%IoQR;)uRPbRgDyc9-uOb
z15;96RaBx~m&zPA-U|zIj>f}9gHFXl#Oei19DalLKfn%ez(mJxX?2^O>lAbpnOL<4
zBRCQhCU#IO)Q}ROunFD|qr8bK{<0}kj5fyWj`8|+*GjW;-|t->E;Rv9mBqTL^5ljF
z(1eO>Y7Te$V$_+#YU==zD<0RSy2r5Ka0$@PX;oD~^EA!kD>X9_&f
z(g9^Ksz;s;I12TZm2a!{dT%;PU0Q)UjH;MPV!s#5>!k(~$Qish?QKjEASgHeMuIcv
zPomBIY3zTIkt~yR7C*|OB8UiX_kJ!Za``R4&nm8bQG$e{Mu4Neh>uY&=<^4NL8xG6
z5H7p#m6p2w+7}nwU$8sL;qRHQLMv+TRWNk3z%e$lnJi=d*SYE(#(
z%TM7cDpo5Bk~2s?+!j|>i}?z+#1!EPh_Ii|xc8U!cCZ
zUG6eV#^}D+DQB&1y3uYq@5VI9vAi+w@cIOl?5~-U6!tP{bOt{Ni$7%(=H@AX?p>rr
zI*m-DTBkrAXxsA^^@Rgf7Jv3I2OI0b5Ul;Ot~CbY6e*mksZHY=P&hIo)0NA%SIMyNY{SveUUA`}YG`~C
zkta^#C@7ZI){e%b0Xc!Ui=|Ov-G)q9@UMbB6XMkC
z75rt4|M^q5;gg0TIzsS2f4N-=U2ggJd%&L@@HNGI|MiN4Z!|dnd=YC@=k@!^f4y*(
zrxl|oK3b*Jc4)+gp5awtJRa{0<%?f|V)Vx>#gegOdDxBW?>UN!r?KF}9XDnKlj<8e
z3W|nbzEDL%IfHxV
zePO6CBd%F|S}PlfUG?=e0$CcGC2CZ3ch|1zTxVMuhO@;5GyI-CjPzz;FbNW274v1A
z2m|BCm@4n{klbPmUa$HnTv7CT7uZl;eegiXm5l+X&x1b~7L1m;&@P%q2`cI7N~)?_
z{IgTC8SSl&b+ovn@yiJcV()Y&V#YB1I)V`)`(TLycVuiVxxTTMo^DlMk)St)AAG1||9(__R`D`9-?rP^=VHz{p@a&Tbg|eX
zhRhX@$#xUqoFd752V&yOHI{})lHk7Q(Cc`)L|=*NRX_#k(#3pmZ^C7z$XQ9STQAPW
z&}(M8I@_3E2TvzG_&mv#11^_qEMfWP%v8fW@To6nu@3AURNvF-NRY`aEy|FPf=ytT
z4#WMIQ25zK8;&)0uBxePWRLSsZBMVx+qYXNk<)#VPyUZEkcX+MF_C2)US8B*-QvU&
zMOoDNAnMOGmuJe3>4m;d$}~ynH8l-GLvW=t_1^9&6G}-DK0JjllVln&FeUG9Jx8-D
znS+YquB@z*njAjj;v!U3+DSw!A&G*VbczzO>r&(BN?UNXF7bW0eR&BLn5JZ)Up4Ui
z=j)eoqEgC|#fcN#yHswl`|Wb`m~*q=eg7EQIn@@F!WPo)V|{>w99L_H=HY(EZnx8U
zZm^kkC{d$v7)w=7NR^tOf7T=;@lR~AP@G%skk``6QG$F6kpJQ%jd-d4Ze~XJ`X+^q
zo%ywZhBb%HnTd()#;d0nU1h#4O?!X#i0yfihzKjkbHaTS3K5h8#-`-qt`(03{;
zJ834Rn~|wakhl2#-`Lf74}!#IJHRC20xf=qti
zpm5?RJiPuaej8A>U(qzFtBHNWonK~l%ep%Ky}_tY7K;iSi;0h?>-{Y7d7az;sRa5p
zo0q}N6uAcs3}=zNXgAF}HVS8A>UX(g7*(A>4RdzCK@!Ak@E2t6Q1*GtlRMQ@Z8Jd}
z;_9j)5&H@PE?#me^#VevN@;tOt(Kby7XbRBf_O@j;;uuUh3rMCi{(ciX3(%1D`KfYR!b&itlF#
z{iGIZ#Tn30vRQr}BKtoGANRJrMk))>QrqJQDx=vKTrY0o~Wd}Zb
zV+wf^F$Bm5Utcir*JYNmN#XM>`EZp%7q@R~WO=!-A(5Uz_5^$sqruZau#aSW*PZpC
zq97DI_2*VIS>*vsg_qrvlL|)&<<3sX>>T>pYP%WnhGKrMy2+YjOk<4uXy)Sxl;I`
zU;)4tX?$#lOF@uVWkS_fkJ
zSN+#a=IB29J%UQHB^;4|se#sfy)VtvbH=Q^xl~$Hb^2t4QBOovURU>znHg9|G+mCQ
zZg-bM?k6Yjq*JkD`}jJClka~v9T#dfsA3TMGx5P@TP{rr%j2#d5Cm|g;JJ^4s-4eI+tJw5
ztSk|>TK1ut>?2^XpJ
zfyHl<1hhN%0g!Xl*M9f(;q@f;mNv2-^)#E=d{&2>Xz8gX#~-_7jgQtOEWlyFV6tL9
z`hgfmX}^puS(c2mNC90<9RV~2J779VDI3^;E!x~x^u7{Bpb6+ws)@Z%859Jgj48mc
z(b|?UjUOB|bMJWS&`W%-tic!~c?1%b7
zpO~OAj}Aw6a(dK@v^6lcsZhQCQm+jSW#|{7znG2(!AXZkW@>7K_sxaLKtw296E-W~
z&RAic<_~Ue9P~HyrK;YHdNNYdCX$k(xL-a7zXBi=rWW_aLQm+<*clug_-665mz6%g
z;g9DdKlY}x?bisvqaub`$+>T{=|v<5jCkD}H@A}|#L=_(m)iK}vJ|2-GcC~3-rcuI
zTwiZ6=tg{SE{}l8apu=Ghx15(103Kui-d(8`g7F8EE)SEfFL|yKYCQ~DTf&=
zi_j;h&f_I|lfAT#&PtJ@dp0vPWLK`}#C?rl(661EwT@hn&<=4}EKkzFztX{qn_Gb3
zNC1nMr;Mto*X@|h!RSW6R&02O(*M@%ddjA!lOMttigYtFHl1BeW6?&o
zYTh^HPIr`tsut@w44r`eV5s^FJYit?pMrR9G5fN!qvg#ZmasH_n=-@<{
z&}34^eVcK-qP~tS?a}@R=IyB04TT$Di4^RWdg1v`O)VXr6SI-Q^2S9gX2n_8#+Jh^|EYTba=<&;Y{+9_e89@
z1)qie(+B4^;LcX(N4^qOJYlEl0e4wybL;i7>1Z82eQAZd%rAcx^VoTP
za^kX1=R;!g4l&{m_2ir9^>Oh
zn>Re5Qcjq;eE47^JtPRT?NmC$^Sn7Uk}rY(+bLFCOYaL;O)}b#oA07~F11rfKtF>d
z>UPK!?53r=nbQR^)z+!rqL1Kn#Z?u9wx9UKa@W>q=7l{Nd`vx-K*{>^uogrT;9z8w
zIe&`~n}C8=eX2Ym-nbZyU)c5dIeM7Ubklov0K?ACXl-hoXY4S*!Xi=!)AcB@#mp?z
zvTU}mmS-K-*vLUD2}eVNqoO*r1|A@Nu9#tngL7@rq#*mb4li2va`Dj-0h}T9x2n7e_=I$Lqo%6j>^floF@33`sv4{{fhlqx_Gj#7Z6Ba>J)cRF*(UX;@}11NqDl
z$UZ^Tj`Mw;tbDHJs8e(haKz^JPX!zWZAO0We{wgf%wrd|nZ$VH|
zKZhh|V>N#AGIULntm_W$9}JqtgQs}8%1aKkCBmaU9AlUnbN6J
z-6VmU`Ulwj^z^CunhD2#wL#vIP`1X2j79+m*J(?sY3t?&Mnar65%+;}tGzVRuyW~2
zV&XShffwuJgHUCP5EFa6c{9_W(Hz6Fba6lju`hIalVLdZff&wEXtO-C8+PhjZiyS
z7rP1o5%TUML?7V;cHusL_QAd|f@c~If$R~525(?eFChPW^HY`(9krgGVtkyO0$-hEXG9fo-gA=aA10B`Iq09{^`JXCZ2kFN$c&7
z$qM3u!S+u%8r8m1k4?JT3Nh~j;xo+Wp>@1;uXAk7VTf)qdf0Nw4OX7x8Jy
z-%NBrNBk-@NaOdY&Zn@{LZ`Cu37>n@c0H2oTbW3f?$PZa*%dW0(Yy^0hXQmg!Ppz!#
zi5|Y2$qt2<^cQd5{F|)c%*u|;FFs&m4C^K_!xNTxR&C=VIxykVJljCc(z~1F_>#{>
zsj20rO49FvGeQ?F0SnJgsHy#odxofJWTf9bHwkqsDDlg!NR}bIkGLoY3jc7WYF)J|uAuxAYcJvF^=8P%pHIrX0=ILCI|A
z?hd5ONJK&E!s2(<=X+p1fw
zp~!-#-3ieZR#j3--v=92DIveP5p8P=3id5`GE!0^Oql4oW*a;k7n<2@Y)sgR2FCjb
zo&EflM+;nQuj`X@=?D9EmOT!z4K~M-5q#oLXOx`!Uvh9L@L!+qE*^P%L%2q_v?Nwg
zgfQ~ryU9XU)Rcs06dNw@bd=|xF!@E`dMHBYlIiaT)*5I3SmO>iYSLy~xXFpYL}3~|Pp@9$O&ldq6|tzY-QyG7&;9@it5PlR$y$p7FEa9xpk%#$4c8H;op`_3`huF
zX=&ddKPuC1QO6&y;o6-Rf7OXrcRfZDlr1X?JNTE~G^^r+ijvHqZ$qXs)z_#0`=dMz
zjP`;O9|#neWr^KPNoHMLx<5NQ9zyo*0?q>f%2Babca&(?XzcBM33jS_Ws@1{@0(UY
z{xva(F*tc^Ec{|QCReipkYOz
z!Dml6Mszn|w{L^hbX7=0+1PZo_e44h!;^SM9bPD<;KXerA>ZIXQh8=uv$Qm(3>1MK
zQlsYm6b5Qo|5jV$Sv1QJXzb)AmPonM!^BHjnsfC9^AEi~My0CJ
z&+M;4!zfra2I2%p>~mRf)6Tk&E@p(v$-I>h_b;*SsdtC$iEi2E0C%;o&kLJ2ED9M-
zTX{j7
z7ZgtI{{EB>+Z?53?j9Rs(;;`v$bM?lT3V6{&ky~?!(mm2FP}z59~elJ%t$|JZr)-u
z#yTTJJR7%I_!g9xkB*2%MFn4wQ>4GR(nZhfif6BW&~Hw)7%G5xXW;a*Us^gb$+atG
zHX>$p=YSp|J~@H#(uI|R(5YEpVKEMn)GaSllboo|7eA2|)3$aOA@Xzaxj13MsihlcbMCpDOjw8zvkdw>L_9
z4Bnj0nheIMgi>`HYz8ahVcWVMZNN27GCWnDiRxkYj`CmVjFHU9K&GIWdCGuR?=svr
zbJbokiEUcN(2Z0C?6<|7;~
z%evlf;VDMcD%sy0xbO)z^mvw5iQD&2<%gxc!8oZ=dc`Ok=jjZwS9%51lAo+*-xA^4
z11sm-90)~@eh3-0Cc1F6b6tc)
zKK%vL3Snv4qn_PF!CdD*-%97uzfEy#Waps47d5`GXv)XH`qj{4%67i-13t4apBn+3
zRdAdiJ37`QX|Y?V8Yd>c*Em)o-{CGTAS2}Ac5yfm{^;=l2cFZ0USLAJ94BR9JYc2X
zGUNcp8DKlD>;Cz|XU9OXZr^QZ(5Fyz7KEW4g~fG#JgCn2?M$wGIQzhhw$rSMUzUQiq4iPC%b
z@&9czv8YQ#zO(e746LbFAj{kPIR1r1T;9pT>u4U6vHK5SurHDFYXMV{Q%{DD>!-xf
z?{Zg#R3PFQEn)so60I!%WVWo(t0u2t;{HbcZl60)uZuWtIK9s12TY5D-<5-!OFht1
z4E_c&H|CFzKp?nD5l~(X_Vta86K=Al@9$_&Hw}d-q~*Bp2!{SK?dY=T=u%>cHW7hJ
z5?N5vin+qmQ^Qpk@hi``cVfw4>6O?i+A<*aI+*wMi^msPv>u<)y*9Dqo|t^iiegD_
zLf^G0oee+LMv}F+uP{R$m%EF(?tJWGYdgR1TLPV@IKZ+=iHIN*6Z2t+
zWj?E}xecs)`ou)hYEPAP0xAN4g^ULe(vgr;E{_siYx;3tGoBx(geNg!-z6FtRP;P~
zVso+stfCX3=E;hSnyCZSN?U{K_Zy0YR!ek6fNZ@Nh|g(gkjflyyOa95!6W$JKX&QK
zKyew<#JQ(dv&_}+y^k-dq#nyLL^sA0nT!%61fN91X=bYNsOtsM0yb@jZ{w8D9c!t$
z0nbg1#v!6QLlN`!=dGa`4WF;~BrhXrhwt6P<+SDwA}`o$+8Z0Ylj3RhZ;`Dyhhx=J(n#el2Ko1}TwT}vntz_P+iny)^e_PBf2oa_+?`eN-??}s{ZePCI
zOs#&K_27`Hw$_ZC_aWztNAYn-cv%B3N(Onri#ltMI1f+(sA}AB5pnhhvn}=;JsWnE
z1a68NL-fMg$xG;{dnGD*c50u(CiW!S$nP^T4|f1D(U)M=IJvRdWUGa>@6F9Pufq>D
zjJT0t^pMA^+mjt=g!w-NwI!6Osn}PSDt-NOot6gfB{dTj>i)SL{sF1r@#zw_yX`*k
z9YlkJ=$jjD(F63g$i&9)1ZR*riw8Pi;bpL_7*NhJCdS>qxj
z1EUUVtgqqn_6k^GQt#j19~e>bdqoj0ZWR`ib-fQi!}};HlGOcVXJ^(!_%*+ib#QwXw!PRz`r1E|~E|(|VIGx}&nn_Nmnj$pzr|vz|Jc&k&E7VGjQVe@?#P-+%q;j7kIt
zkD{5qwcPp%9st!q(Qnm7P@Vi1OpZG+8!56|6z|#8Eo2fOpI#T|Y0dI3da75;;?l;}
z-V!m7Gcx^@PhwC>5q8AvbT7HNO_w_kl6YHcm)H0
zy-&bM|B_$3(cs}>S%QZnE`16nnqP;H5;KpaSPYOO2NZy-^^9cD=@0*_F&i#{g>xaH
zVlg@Xb}9@zOYP?=?q403?oNDgAQ15Q#W|~Wv`={!U0L)fN`k48B*#B*lz$L6k)LUK
z*X8Hi{QiNM^e8WxJP!H+$6b{S&S4-Z^e)b&P6
zR_hEq!?t68cBmyO2%o1?{>?jtA_tM$?;h`>tF(F!mrV1$0JGYrnTu*Eg*J&h)1%<$
zM~kB7?rta<+T&SSVVaImgn-mimc2lN<=Pg%Pkc?lN-b}dT&(NPJAlqvBBCS^bfLl1
zy++5e0-j4Vb$#_sOlB3Oa(Bj&(<6uN@b15$D-K`lVmt5jme3oiaWsKRzbWyRm55-`
z6WUh=I&z8`Vd7oYTM23%tF2P8eGxI7TNlp3$!GR@YikVO^Os}3#yh)Q>2J!bpqe>E
zp=8U>YSvFdv-U=u$d@nRPlFTON&)kY`X0#RF>`e`O8dl|FCXPXsRW7>i0b%
zX$eURkE74|2}&)9wEgONL9?F5h2t%x==6vrX+?(Nn7;3k5yeMaWu!0GlKz^c$ICiy
zJpN3bQ|V5OXv4E$C+g;6FQuW+-8-`UmY!CTTfF4OSffnxj>FJc$90wTYte4gm>L5{
zZ{HgQT-6PR7}jv{CwPuVt@}2qd^osevQt~MS}1R9*}^7Ba51AlOWcSm0$5c@MR<5p
z`ec1@bjLoHe{9W9P=dq=lAIa#cA
zSkA=LyzVRGlRyq!YgzH5-1sPZ9Km=p7%P*iEln$E)Ohxd92rt>`NbCc=#Gak?tDx7
z-PwBw;S-`V5V2ykm#d7!7Es;E%<$~s5UA&{YrAyLJv20S{NhwEwPZ-3;CC4n70aV>
z<;-=H^2Ov^%;?l~pX^zMGWX9T;}+m0DF?J0VSmOAVAk?-aHT}_adL8&mM!Drh&$Ex
zxCzKVQZI1KGVkijtMg1*U;jaNEls(mfD{e`l(pzK>fKH|n`?zZ_R~010m-5qLz!6R
z6Ulq5+)p$2&YVbFkw#myui7I4RFn#yAyqvs{;VtpQO0Rl97)2PqQS^q7EGu=FdUft%#o*Z5?Z@sKLHbDA4xH+jjaPRmX
zV(w_Grmub>xD9G~gy7E!y7aJifWixE?ajdpP7l+FuRX39HDMN8B72EIL#cWOa>5pw
z1S9auzU!krkqKKRMxf{a%EZ9Ne46>~^1^m)B%jQ7#jZSX^_d56=TIrAY2;lu!Y9N+
zLBCa5U!PN>xPb*gypKYh7~=y3PLe=DRHx;TaG6OO7mI8rGl+SjKYS3(#+K>Itwmwb
z7B;>~IX}xq2+IQ~0n!LBg*PJ!k1|yY(7u1y5*8Uo&P`L?UF!3_7*L2dd{9a$Mevw1
z%u%r9s9Uc!^>KCm&CP#^5Y1J>OX7jXGCn5&VxU|e7#X?u{5cGzUK(#Ft2rNAK}iXFyhi?fdgKp}tlh6M
zo7A(h-B(yI@=HLQ3lkfuH=em9gTg|}`Nk|Jf`Mj#NZyoB$o_EAx?Z<%+_&{kl0v$O
zE_cCD;5NUjitL`~>BY$h#CsF+`|vE01)19|SsH3}Pk%gGT9r6Fj+Sq?v>qUS4rb+&%#D5&
zs<86$JemK!nj(flJOY)#KEHdDv@~@Li{z=>0?A=&z9yu}v#{_PnAGB`sqD#$`{rh-
z7E|K=xJ*KjRkaO2JQDyaJKW+>y@8C2^yq4@6XGG6^;lm-!a50&nTdHP3o~^&W)p_%%@d>F`*-5D}&*3f5rU_05EC<
z@8#+0z*E%+78Yg^5pBtth<9zh0@w{SK=n-L$cJp#DmrXVY;xJku}8Pgy8S6HrU*%B
zZ(fKEdsroBVq$%rI?eR5(dFd5-h@Lkd%N@AQbcD=MoaK|iCa}#K2t*;yRe>S!Ok6I*Su&Ta(82UG$$6#Y=XqZcRHFdqg
zNE*%?AZ%^7kwUVKK|A4>)bu{D(wWV4SptA}O-YG}hO>Yc1FVs8C5>2#b@};$LS0bz
zPKHwg`wZFTYkcM*ey4W;dyAkQZ~^*SiOK&Zj=lZ(d^_&bCuo~smJ1}kvO7OIqm|A3
zj6TT5_QUmn4kX1yFvGf_p>02<_Y?YSe3q=M9iPIVJ(d&fS>f{fqM|JYSd%~Y|3?eZ
z5YpiE$kO5;j=G?8R>nsyMh}k-0&N{~={g3vaICur<~MZHUNJUdQlzA`!T{iANi;I-
zz|r918GZf?r{L4p)SK8X`53H;r+&ac&Lr}?@043Yc2xBlb9AO*8|KBxJ7tH3S&4kc
zOXkAPF4*SK|5RD@+XR5d&5aUbj7oYLg!zx|+NStjKt`L{ai
z`cFZTlT%(qWH^bZHHkc)eOFoWLKh^)wpB}md}k{w*m`PkuRT)1sR(EVS{y`HYtlj!t6=*wn3
z%ebtBY3cnYrA5ZQ{2C4X=Do?lp~^#pKj4^LAC$fGgGqR&v$IoA@4@EAP^dDJS5b!k
zyH~FORJ|97cjLwXmYIYDinBB)3?$+cPU{v}=}t;^MPbI{B_h|?)^J5(eTZ>3f5%TL
zzRLAD|EQ3ISus0=f+;<ah`b2@Ng?olBV8X+f(1B1dAVeOUtY4A70|QpPL0e7efJ_A*WoWW3?nduj~B4x%uQ)
z0ZOLAcvLj?_k7@?pxhX)$Xv#HBcc(n#mKQeo#1k@9V7DpBkeDj1(AHt&z`2?GB(;P
zYb*~_`hvnROVgWeQ`8Kq#%;|DEylgy-0F)m7A1*yfrADiH-U=_Oi=Iod19%WM$e-u
zr<`eRWpyJ@x9^8n1LQA#Xe)T}?dfynAaN*cH*4F4TA$L*#l*0UTR`kr`$lJ_E*m8EnF{S7sds0TvzS-4
z{@+4>rd}*46|%A+%2o376Vc++r_3fsQd(NRuz4?c&oRg4M^;u=9-|zCG#@YfS$IEv
z@!L)?m{B_F(hPtbN=p3f?a%P=Zr(%`qCiywB#*$Mv@kO#sjHMJE0r#-0xEu^rW7y&
zVgWH16TQ2)UuJhtNE#jVK=d)TynJPLbE+{#cQ<`PC_uapw=y+k@Xpe5ZAJ8AgX;XW
zFE3s9f0Xyn3~)DfE~dTyquK{aKUd-Z$ouz4yp`GitKg5V2=VMRd9=U%{Q4Uzemg-^
z-+0p5K+}z;f93j-)BjoYAJ54RbVX)=Ka|v8{r$n)7(}keofmsHd>F0#kAHQHR{W67t#sGyf1Zxw4GLGTMmG?#*b9IBRyF>srR6!@
zmoJ@?Sx57K0yHZ?nmpRtYP#?$8gZ!2^d5qwrZd-MM~B&*U@+nTzX<*g0)WF1TPf5!
z3>yg}p^?R)R;=8n!Dic6*Yi@+TMl+B;ZK*|m>$~(+QdnXc)jJn$!U&i;+HKauorp6&iM5xPgeLb-)=
zttmDgjvXK0x63gUR8;NiA?od@+Vu3;d)V=|HeR9`Y;j;%rUvY1JGwSsVrwbI7VueA
zzBB_E+3+iQe>If*eX8Wo$D!}5fGI-9)ql3a@#0@xEW%5Qs``a3O~Ao%x&nLraf}Ye
zzrUE5GXc0Dp2d!t@^?YetcFTOI-))7WVeW@2{$0P4
zz5Pujq&*B$g?k&R*w^moNE8%p*K%sK&>s-)fr@|x6oi%*0uCGJ%gf|}%`o*4RBS0%
zun@7zw#nTFleA-^ZqlXc%W*)!N=5n6`NckDX)$H#WTEBRe7+cOdrZ=G5QlE
zf@d(4Y@iqMYph>BQxxbmIt*qmt-0YE`Bi||^He%FptLTm
zB2U@|?tkH>j?UD)o-wj8xfso=+Z9`=*R1y+9jV?LJ*4nI>Bc9xX}F2KMto<`*li9(
z%+(nMM;EXJi?WrLA5FqmkN_6#bPq*cOG{~m2=CzTuoMqHLc;zyshIXiKBL~Rfv;YL
z{hmU;6U7<_d;yPiVq4!Rr@bR4uYG{2N$kvXg0C`K*;2c)F9I)Q2PV)+DU;G9(62W+
zap*?|CS8BE1T#cSobQUI_P3DmnJp|df@u}I*MN$#8J{`zWhwy!OZ*bXPk
z;z~68|Dg51^ID6CI7fnZ`HV$qV22l@;?kmKYI
z87+xZ_;^R-I{xx1FD}m7u%LK;J(R1tUFVpkS^#P?(1?Ms|9h>in4~+7jq}X>A8`3l
ziks&~$+tFwkFQu-RzE$%Lc9mwGkl1B_z|6
zS3O*cg>wn`OmKXz^nQn$_iWDosri|ktVSg%A&unqEA7@RXHkrULH&Qzo@at-au1zN
z*eCw}&hY2e|BQ+xs3(DswqK1FbQ3wcJQ2#c-Jst>VCVgv2W@F)9!pr33WZTt=P-0LhJH2@9RV$P$Y^oHMT0EeCWbvtscm*bc_s#l8l+07a-29SI&&YHx4`L|>uhxvr7!yHf(i^Fxf-s!8eNNx|pnxQFn%D8Be#)|4E*@3dVvkdp%``jXy<
ziYFq_u{P+qxd6SFcC8o`vU?L{hoR)I1?p^0lN<&a+9ZU|l#CnwpU|&7uY>o3_}yO8
zP%W7W3WA6?R#Y@o^`}xxGdc{{2K-PC)yHZYk(ysSl_!R|(3AiA^-TjIg+dDn&k6~a
zaAF>$cf6A|#~Fv~?X4JXk1apdcHTqOYnBi3yE(1?!8~`rswyh6b(fH6A@>BH^627Z
z5x*io2Z1ORRgMn(#lmzL%SWt@)nbctU+es@Jp9zj_GGrTQC5*}Ii=V{2+6&h=L)i<
z9rcFfysPh&_<{Q&WQMj?J&{+>dkZYT-$6*SNg~8Moi(QAu-V;6s`D)K+^cvwBlN0P
zrf$`_F?Lrj@!AL5Bi`v6J$ZOfZ)=)h=|x|EOaDL@mPGO>$H;`n_y`9qA39TcZTZ^f
z>`&_aV(^3DgTsSRe49pz5MnkJKEGu^B@y93Heg`|3S{SilmS`)^V!;FaHNrg}k>nsAirBTz8Q^OU+NG0Gy2F>
zsUGI$LSJHAe-Q*k1Q7M9fU8T~+*_5pnx?slC3>4}YfCV|pmlgmdPIaER^>h2s_Ce#
zoXerh^1g*QxcHk9q~qDmWAlmzYy1vsd2}@2`Jrm()g|%3z+Wl>HDCk;DAJ+N5c2*i
z@!JR{XJ_DIcZZZqf%%WNsj7BSa=3Ka7|Mkn;0z2>RtFn1aY@PX;^mK_y-f+6T+=nk
zh`xV_R3*CDPoG+PdZ6VB5G6S}gx81%L!^ZFpyQT>+mVHYjZMtOClj&7>c_!H>A&E4
zppRz#%+j$8*MhO(|-DfW&QLkPX^k
zpsN+Gu&p+a=J~E@`X}*lR(|rle2@T=14K67aLv=-Zz5y=08NjG;G5;-*DBYFV|*P1
zbSGfjtjd7?5W2PSlKG`a2iHLe19c4qi9t3_F~`WgQ&nW-8;<9LZOO*0&TKOZ!gqKW
zbh36xUeIvc#pM*%qi64V?QT;oOe3jQDxRw(Q)_>pR2{^*g*$rz7--ed54AJ=1K~Ag
zD}L(69r%KhO_4dgFenI^KZF;gLn6lBrZ)P3~-o%Jkl
zP6}r8$ixbMBd}XH;&XF?^9U@lJu$1VsljaoA3l@9?s-5T+Y1yg&?pI|y-$4R?Up`B
z&B$muSq|kySO6*_>*r5w>#4BP(!1v7pw9%I?VBH}$cXu40hl)c&ytF`?v|jG_}v0Q
zA6=){7K{y*V<78~CP1yda03k~v^2JS!%jL{YfZIKGnU?(
zP*M4W_Qp-p)jMH-Z%J5p>$eX8ZVe|N749LHi;B+2H^?CGpQ=&)L)<6Pb9I@j^u6Fd
zct9jUX?JwQvpA_G&xZ1}uP0y3lC8=SUU^sOW2kgR7A5$zB
zAtQ)?cv>ML=w$UJGo+Yp%N;!SQCj{}w+VQC51_HKLe0eDu8vh;z+vG>5Yt_>J27`5S0O#v*KIeg1^8-HePE;Z^@b<0fA
zH(~t#%|H$)3G}*&Xb@>oi6~9g(&M8^Pfdkc-;7RJ-|l@%mlG5yLip`J^cv_6xu|^g
zyt`eFNPv^OTD=@r&FP^0^QWdaF5|7mX4Km{hMey<_t2Fqs@d3{ug{ivzP4PB?81qn
zczDl>s(G#CK=c8D3}5eDy$?G2gGI6#)A@Zl2^FEE{fLX?pL`qD<7rXPMMRN*EmuBm
z8Z4Nq`mV%){OMwm-m+`%IpQIqW1M)E9S;^FOtpkl>wg^9vw9e@varD5RbS=YUuA3f
z{CTQUhhO7&U*D70fsnsI$v{&+3C%bV?Ym(N3Nscx6_${)vbvoeq%+XQ;No%e1Od%k
z_&U`?CmZV03Rr``Qp>(k+4d%bOscVOkl23C%e(AFb#FHz8z{_A4GjTkp`Z0kAtkfg
zSimB9)bjd1VCa+g+4>%RZJ4k}@MQt013HS5V)ZU&0hUc|dEk)|Jt!*Kc~zH1v&DUG^nS
zV%NvK6bvi;0AJ#mJlcy^IMzmZ27EnkT5q+p3bH*{`(fGQ7TXJsONVjJCY6lOC9YD!
zT|Nh&1(Czm><;#JC)+<xdDkos@U;+gg&$OZH$5M;2+3$$<0
zQ)abikX_ngVfTk6Cs*pdwiiYUZ`?gNI6D~R2M$RRURL8kCXi*=u2}%7p285Iqg!|l
zCXb5CkU%0sGV5#%L~e@=Y1SBsY+;}PAQOmRtj`InZH7orL7khh=Jw2Z|I7%cXmG#`Qbcd{ITQA+-
zi`{QPK@dD>IoKWKkE;`2ewWe13!M)aU9*q+v*m8vVN*u-@@wI4;J>QBR}fsWTtJSM
zT&u=uUu=J2by~rv?HaZZX}!h7rKRp^;ESHL%TE>><^5gX{#cz5(>=q;2>DMPjYr98+72K~Yv_>P;DpmBKbQ#<@~J0mZ4JL%9MCn~fcnxzhDi
zTGl63xzwmmU^72${xD|{*U*sjr3TclIDSmo07(ddQQua!LclQxKW|L<2r`GWf6Hud
z*4v+{8~^&1MRm@TSok$EB3CM2bx(^Sx_YAKz0^yheZ}@a=8L#raf@Q5FljND=B1L>
z&el36Boy^SYBDs9-@ZocKud7$c9^!{VVk+GxF7Ui1n+|L2J)LRYGWW0MforIx6*Ly
z=*a)SsNeq=(ueVXgM+p9eM)Zb|AQ1>t_;K2X=L;sIwe*B-2#{ZXobymmWV7Ba!
z@8A1oAE5r3nVD&BZtm*~YYY4ORYhC7``xpaU}7;U2r)3D97!;gj898j+j_R1DO?<8
z{GviP`4afO_MRS8FWo<%KD;Dh@RNjTL3w#@@^Unhoy$jC)0(of+lCAQ&gWz0mXll4
zH3eE#3yX{U499W2&NeXm#KYt2$JA0!5|8al*Xh}MK@5}T5ySEC3(R|HXbjBEJ>A`x
zI{3GtCU|?NBcv;lOOe_qEp6Ty)Nc>(%6&2&%t|{bEoEQO1l7Bc|75wPB181ouU`?r
zmTfW>=);X$f(Yq)FVByohn%i2kCoB%&CIHG|DeW6iSA-pGbt-8Q;G(SRoky$S3hQP
zI-Yi%bw8fwyy$yjK4O9b^Xi#2D7`ny5bWO+N+gBL`1Z-NHi?4@7`7|c&pql5?*FLib2TwiV@G)$mr^H
zHAS=B;t`r3kHf~_HTM~YR}}Jkdg-4(xBlnCVQces_1)`GxI9%w#mLxLHATgJBeLTo
z!6HA;vwyVwDc9EcsBnEV58^GMI41_6p2L1^Xt^_{wYiy)m^cLni!q)zHa7Moa`{~S
z%*&G!7r%>+PCfe@AnB8x`E1z~(U=$(ov#v^*fdg3{uFR&RE&%k(8@UrS-6D-W3cG?
zVyFPz<=X`nz}E$&snewX(D%>cqu->ubrNrg6SaMA8n|^
zsKs4ib=+?L7@y^Bltd=t{n^34BK=l)HVt|o?qHDoU0R|F7e_-wYx_qln@sY;3@4_u
zthhM-<%fkopD~r|)!x44x1QluRUHKr1IB%oi;GKFS9gAX{?#Xx`*@6MgGPxJ8bu(6e-iF{6e`9XMDh$7qs-gA9@y%zImON&uk*ppeeeRQ+i
zuioE$cBZOqZ$0MV;HXSW;&F5+d(qL^3D&x@wbe8K-sN!Z5Uj_)S#M!byT$?K&K>Bm
zO1X#z)4K!P-$X^zI}7U1&|r+=&F2%{0|qj}O{QA7q`A4dfPet&hRc!Z>FKU6i=iC(
z+}vCSPX8}ob`B3;u(9p$?QuKp%ts*ho^|$L5)5Vj$wkK}aNcM2O
z!E4t;+_sfj%{A^xKJD3v!?o>E$87de=e3
zdwO~_G&JJlVbN+bSOgxLUo1jseY)P=b!{jYJO!Bi+1Z(XOOW&aigdP8aA;_&Dwcs|
zQ)diIv(=3)CA=45{U0sB)z#Jb__!iW85|uQ9UM%61>zna{6dCuNp7cmnGFpMumu>t
zFezyowgfjTMX2|dl$1DbjKPc5efJJ#mzh~xH`uR_R9ADi*93m~5)0H~cz8JcN=C-w
zN_Rq$uJA`Z(K4dlPL>AoGF`B=pV~Dpz^0|A>*?vSTF=zh*7DXOese!S2&X-xzWKaf
z+YEz`9qs@v_bv_&&eFm`KoxLUSOCR^>Yjiwn34_7^YsocEeKJ7Io>F<6Hf
z5(!2&xKuwsKT5F>_Giy3!6pLnS+KCNcO7xCuqYhTf`WolQ&Yi=-%)c~&m{7>a)1gJ
z(w5?48*%ZrAVRji{r&5+brvZjI6%kSv)j`($6%`o@$nH65f0m+z&+QM^T%yn~f
z+7HjO1Jm(hLq6A|o72bb9}s}105p(p^(`-W_*WXNOo?G(I~S+>r~9kfnVE;%vjR__
zuESe{^V!?h_G@b$9z!4=)4=d>62H3(SXuCcwSSyUpq@|`t
zC+2vdLwI-Zbl;eTg(XeyrRf0G>({S!bY{I^?L-`y|EEu%TwGj^{tb#fepm}L*ykJl
zc6WEdHEcv3!f8*<$r-D0+=hd#qN;ia6%`c)WxCGQaiPiocA4Qbg1<|D+1|W)bFT(U
z_a@1&0N;3CO~HXbTpPCIu7j6>i;D}703stND=S616gZOo)!x?>@={V=JM(|KyStH*
zkg{OTsF~SBwk-LEFzfoM&mBxRH#e8#Ek1*`ht$-Wy(t3lIIX6@3=$I)!Hi>)
zlHB3qZoIIV7%?$1B_V}9fxM=sxw-j$1e_s7P|Ke@d?PL{&K;~~L8QT42nHz`!>nET
zUKe5_1aBJ~8~8bKL^tKq>MGnJcp64p+Rwsix4~1vwBYxhC|%v%uPMSSDvlGmY~hs9
z(9)`EYu8zfv;MuX@fHgu)1{^(>uGL&O^1_?WjF1Od}m~IG$SH0kp!aX)2C0RQ1knF
zTn^~CAv1VY@Z)tLo~|*+^PA6a9rxLK_mdy1D=Wonj4+`;FON~FaoGm^-9I~+jE=!D
z|NbSS@8(GkP=wRHcu`hWrM@vzTvBrD-O4;E3Bn@$kn@a5L_xeq2pY%Sf4sT}G4by+78cA?ypv@lmbbMzd3jA3
zni?8sN1O0(QK64{AHJgK2dj4GC38?yQ_BHYVrV!_@An7-2V!o0eKHxLaq!Ei1Rj4t
zT+X*|R6INhsjPpoBqSsV2?=wS;9t-S_7mp|4GwPZ@lva>N>aO&l99<8{0DwB)H5
zgDcY4CSFOWrlm#x)#Q&oJUr~oo2-PtxiMY>Zpa4}{l;gAQ=L7>xBTUGtHiiBnZr^8
zn&}b0W@h+byugjz-P=R*f@JCfv)}a+4F0biWF_kAgx5xUySxAL0wICpKvX*IQoKd&
zCV)M(4@g&*mS7Y^IHlptM1x(wu!zX5cN3+iCyi@sW@vt_R#PwC<{=*6ngefCV$=;|
z_l1On6lBMKKMjM|v%U#`7mFzF8p+q}e-fajRbqsGMI|F6b8;rQloeJ%NArl?l9F*ycApjH?6ARwAq{eShw^4`OHTH*%59M~vI3XdQVuIghWfZwui|%gSPE
zew7l6Xt)_S){qnnyZ*X;_Q*A=0z(GNQ
z^z_l)+tt<8dwYAan)L9Thek&+iP%m0QiTe18ouUY-GdP;n3V46`{3uu$jD4yuYw1M
zl!2IxjF|)50FI-zwdeKKC4|0tW9A*0NLKJvCGYONd%OGlkqm;qj@vWxxkF#S;-$$!
z{z&lfp_eq!I*stcadD%+-F&F*BoSUJFeNaHn~Mt<4^Kr&$;riKA==K?c0G^i(IXg;
zFf~O2zo>oJ@8q3xY*2786BCn~KBF!I&~RX5N0Qfni0h!Er+;FYYR|3&yMh?$
zhrnMo{`sStr}lewe-y^~jN=l&Vhp;MF;4Ca7le5Co7>;tA2GME@KL}SzH4z|f!kg&
zVznPq05-Nidih_xtX?S)zG?64>w`hRS=rf?p?8|a=Y3fHf35CcUS8_dxhSitjSUUm
zMwptK{^ixfcF=By{8^20q(L6_nl3szdULK4MXJkr75`|prJ`fO0M^3+)Yr9pcHF{jnzf+5I_!MjG>o4KMEkGqf0tX275XhT--0~-#S;b4|Dgn*dH
zND(&aq>o?xp5x%+?vA1$mP~IUi2NT(sxvx>FJ(>e$YyJ?Q*1szrnG8v@Iixcx$iNl^p~(Kk%;MBX4b9-tF8L^)2cuHb&@;DD@Li?>^YQ2
zIEArfx5E<}dwhH|ld~nGAV+@bxRnU65CW$|0@$U;@s@V>Py4;4_So21$Rjo;D=;;8
zpSc{E6j8Tp-~YaUt!T*ob2T_P7{cRlU*DH6U;d8d6Q8xWhLX#_yp5XBjpzRg0vg@;
z;WY+LBpjV_7$HY4AttM3QHOH#oO+Sd__(XIm>=4jUyU;A)KC5TH3#MfnIq!YyJrym
zAk>aolz+e7X3NUX4o%8*E~vvn3-l#HRFriP-)a;$J3(ltmr!(4-y@K(Feb{1EuH0G3_p#G7E3BY<
z(IW7f-IviYUtiy)Y~k|2k+HEa3TkiAM@~cGzToKF>+3HM%#CaR(#
z2}ZomKYu6%1jq$2sN#CN+S+npqcgZp(}=ihxt4(G8ppu0+~Q)^=j|9^vPza=Rc2c%X658Fn57GP#4Gke}e9FS&=-`kHS&3&}
zqLK$77m#;@cL9(E9pcmaNPZ23nXgQm3W|!Y!Nl3w+2Clfac~Y!cJ(dBtl?=u@e2``
z+vOmqzWyqhn3F1dQ#6|zt%$t(=5*!SPx+nMys9p{a4z!95-c-Oi
zb_RwSIHd43aH1g3MiSK0nks0x;)XmO0t_Et9lR7s?GlQM+?t53YKcd3b
zdtv-G#Zb8#vK>$SlpeFOmZ68}6_B@sW|E
zX@Wk$!*W>7ilobbJ)ED($N%`!w;iA~=%=)kG}vaNF#*NLom2~H^3(wFF)%OyfYklv
zxxNHvrzbW0jvvkwA0wUt_`nbV50Vb*3JSm_zu|spYy_XM-gZUkUQRZZFZB7gnYp<{
zj;n>GBpeiQj7aaWBb6}voT}aVO
zL|1q5$1C*liHVV-F=X=PIsGv4eMU
z7kd{W4h*IW+!PxPIQQ`tl94731znqItxzN0J$Rn#5{8Cke8XGu%!cwq&&zNB{+1zO
zVP!4vif6;K0!zhT6M73=QyHzkp`krMv1UmQWK2vbQr6O$Be8TE;22CUsLo+0ayp;8
zW)Wlu<*xxTrPJh$s10>lJ`C8-@gU$%fsX0l3{#wG!l@1Dk|BTnPbIToPGQ7z%D=#
zb98h(FdwZ3ksk{aGe0jcJ|W@Zj=qLlAjdcGXKHF{M1($Yw&vzD-thxTlG4(2V60zt
zH8|(|28JC4yafQ)Ant>07a2A3F9Qu}FR-+-^7@3yBnFT?NGD<1Mn=k;9dMp-b+SVS
zTp2JBSXo%WJ_GqF57Lc=wY99ccwT8Kz|$<8oKN~OMv;I%N=+@z$XMOp4tQE8CIO%S
z)s0t==pF{hLlt${K#uqCicEzOddK|_+Wyz|C?$>^3Zl@zYdv@EDHlB%SR1eo;Ow9F
zekG9qpNqfkN$x-11NTct)PMgH_$?oYk^gx+PwxMGyZ^U-uzl^5r*-rsw{sG;#xuC~
zRE4mVAjL=d-%tGsd&lRDvsdB&Uk0Rx@lkl|jy+@>1j*MbG0L~~u6Snn%TIr>kH_p;
z6)Tkf6#ju}8~8ggHseDx9Q{E~(d4wJGrS2aB_=<{KZ+-r!IR5d9t9OUAu(ApmsQ&`
znV@K&LQY5|$IutG%a}sHTwkSn;#SiY&hu}x)Kf=shP#7!&eSM_MktX
z0$#m*{{4P=xnf#9@z*cir^klF!$_)?iAfWFXZfUrzVUH3TprbWEly_d+oq<~va;DC
zx(N9^Ya5#n78uDlWLWSJUutSfoPv&8aZ#S7>7tGzq@bbXc=LOsGbC%b0S_fm){5Ia
z!zSc`otKlBaz$82I5{UV$G_4)CDz()D?(DjMdGV|*f{@=`EDX!{AzV*K(KVb%+~8`
zaOb+bclosWK@UH~W7;}CugGY#&ty0Dhh@)kXLF#Zd^%TT&@-_G7DK2LNROl<+O
zUblY2Aj>YIIuT7-SIaM!G9JYZK@C1J&7lbw$e*QteGY#hY;t!tI}rS=^sWe?=GT(1
z$yQ0<6}+34j`fN0sVqi+EOqH}@%=?wo|;EfI2%6`fXTu31-#}<@E3FC#E29HBL78$
z$wI3<#HVY9)~au^nF;s_ZtolWnb$jIg+%;bvbY6C?~jk~k4FY6=KN}Ej%f}qK10@i
z4!w^tKH_U$Q?|vJ4&pt~wrZ?q?(fN(#_|jvCu*3vh_>8J2P#G1XBc0CuJ5s&Os`ru
zOFwR~q{5!~&6KxC-Y1Dsp&;;4c6$!WuADeGByu*3DqxOsTXx|;2!KA
z$cbylPo{j(frpG$HgH{V*=VcdJQ(v~^SR7h!b>(WHf@vY{sjHuyu6dZ{9O8iSe*h7
zuil)?T&9Uqm_V3JM;MpV%s&i2nLIU;|KR-|tJ{2$p1<_Z`_C_QRO8g^yyuQdPJ}(p
z^@R<6T4GajgL4~#@N}2As|{`Vnl2VRM1@r{o1@ULIE_YUxTSww($SqwNdIkD3>vi`
zQzO#W($(=slDkXQ;dDBvgE3_CR(Ub$E*;eMBqF0>HB8jlSri|J%B(nNh9@o
zFFq)PMRl~zO5Np?qk$NjD$AeG>zhlQ;Fu!WzFuVMb|xM
z0s>rH<3@kf@UP!U>^eFhTbzG`4s=Q9>gwMe{`RC~pVap)AeYxYLdO1AFiso3IF>_jB))
z7hLgX^*csdBUz$&e=QIcy@dq4yTrhxzU`k!D<4V1nfuT=Ws4IkE$-Xw4w5A!kL8ZS
zba@yqlUtV9QPYa(ny+bRjej9U+B!hBAI=
zJt)eo?g%fCj=t^ot0*{)#UfM{>TCyFK-bk)lpJlu+@a+gG6Xgva?xUsiDw~)w~deW
zvqg+XRhv8Ao+s`g#=wx^bFS9hhQqr|yS7+CJhe@L3pDNR-escI)Drz9VL
zN~X8eol6%rh6jZ&x_>E5iA_mLe&<7CYHSerAhD@LJk4ZGOV@|Y+3M<=LHspv4^@y
zkZ#EXhB^WrrBs2cq8s#GW%YNzKe8V0ABF+cKoN+^t9|}?>rkB4%U4Dm+!Bde&cJ36
zLlG69W_9BxD6m>?r;m0s3kU1MM8oVXFZNZg)$FZ2tTa^W1&FtoOJ3dLv)p)dOFzrU
zioLO*wAQ!74jtaI`Os3Ik@My32;bl3&0uf;yshQh?|1&-UdzKRrO^9RzLp@VA_4my
zq;Dz<*WWtQ)pj!KSRkt{cfDD+`s)*i3_Q6L-9k=A)|Z>#OOL;6uXOmzyfz5;L5~H2
z)PQ&*({)^SE4{Uu<+P)|oVgZHE^m^0xQ+vl-k%#eNPakxWM%2>FJbSJq5+0*OL{qhpVyseXySAE4?Q5u?dy2
zo4GBunVxX0v0N?bgp9-Gw!(agiwl|euIDp(3a#1M%j~((#L20+=m)*xxMyx
z&h!SUygfVjE_%MQAI_>*}a=?HB3O7w%4~YJKy6&YBmi|$}Y`TQ&qWqw9kT-
zTG2CmSnI8_1=5?YyEsQShs)x5LqiiC6|L&4(Z{P)vY|!3)~`br_xYQ0@%}`?n0Kl}
zz5Ua+mgqjRdhBO%PNq%~;_)d--d-yc;}e!#)x`-tbJYf>UYs^90=5sSdtUqv4L9pG
zS}#h`<4C>_=w_6pmlWiDxy{Re(7xL--?5{WWaO!aVQNr`ar3@Q3vC`)|?9*$*Ga52aVHSLBOB8(3cMR|NoVJ7*{dK2n(Yu4M7-5!y
z{rYh$njoij|=G$lnsA#<<@A6PvMnR%CUmDfT|!z%&4{a@ZB)#yx3v)bNud_hXU*|
zNeg6wGD-3*ifFZ%tFPPi7zhSvd=5jT#V9ro&&*5vcWGbeZe%&umf^4Q7Wiiq#7KsQ
zJ=xw)COpI;hV*ih4;*i!PVTngAxo_aQ8}sb
zL8H?6nt}PexjAGT`{2``Q117$`-j(XRu2=EYP4mTRqR!@j5Cs%BfuA;REH6wMv!Eb
zJ&nz|!+6a^Qy{5czTq~^yZd%iG~X&w>dK>V3HL7Q$WL$~Ch1Bd@&gvHi25
z*<+}~eI{?G1Ds2+cu1$2Cr5Q)-j7s>AiY;
z^DkdC0W-n-Rhk^doy*~6<6p*+5x7!4PC|CckzVoUkKrvJ!*Ig!CbTsY9FKH!F$m|~
zKJ{*3V>|syWtY8eLl%<|rGaq7liJ;&RGr3VIyIuY&tB#gFZTLKBfAF%jV4-2XQBe+v3SC=qe35MVwwk@_fNtM2
zwW_Us`W_gO4@&uQ60$zTWIy0AXU&0uAgUuu&`jRW=NFhfSnU7qF+F$?Cb{0D#doQ~
zW+SDqg9>*S2WJNlai90oA)`H$H?jm#y-et$wXVf($!;mV}CBaebv{$s#ClAGloxpnl1hm*wN^HnGMTykX}xrf=&N)S*KyfF)82k
zX(}lB^vmhvZzraNN9#p{1K+vc=if#a$tdKe1=mC!jxhq*q)8E+Ft2n!P_JVQ5^{dt
z7~rQ1p?6?+TyQ<_+_Zur-j#BYaLM^D!k7svkSy>TQrDjwr2KHHBWRvJJ@cpF
z&+t6o)m_$eHoW5Icd^lAdlFaHs0SC&v%<~-jd!U!FZpU7%betFR&!8%oHNOUK$@kd
zaUH(XKWxp#p0Q+0rb7m2<@3s?XE>D!8-f)g5;i4Xwdq}NE$U#=8%(Y!yQbFc+XGSUAdD(HLD2=XlKX8Wj8n1w6<2C$MF@~;V@S;7825x|5;GY4q<$7qeOct
zO(mUHGpSaSl49NJDVm;+nacmUp$-zz1v9=Kl0M)nbsO!g<3%Mro#%^FXUXS7X=e8i
zQP}Bghbh-sUAN%Mi50(EpA23L05&9SAqc;t=_A3La8$y=M<>Yr8xO*}VK_}wq{_^5BD;v!1H
zj?dl7iBnT!+DPCqnH&?7wc9y7UBEcfgW5poDo?Tq2cPNL556JV-W({qvHsv*Z)=5W
z?-idfHY%gd^Cbpq8nCrfxE1eTM}nGPlu$T)6b$6KXGkjKsN*Q@9ugI5=!Pl;eKQfL
zny5bZ)wDm
zzTw}A{7W({zvUHeh@6x&?#ZsyEVis@!b_2yTS~HKv9J?D--+F-c?Zb0%C2)LGp7gy
za)MN>aCb7AuP6xL+rP(PM&H&u8~E0KzaRN2?P|>p6>*or$MDR&AHwBtP5mx#ow5${{85WI?w8BH=gsy#2Brh*~Pg4I+rC$SbO>Hz`?wnxUgbEhcYoce6+dDUi
zx{wb2U1@%4z3r2tk#@8=`Il;Y4Gv@Tp7J4sNBHkbzw2+O8M#Sv8cH;!RP1e+ephx6
zwZSR|a&lXvUmaGu0USiXj!_;@CuJC{2OoOnaMRLRVfY%|h27~-`znK)m?tHqj^pv<
zZu%D&Jk^W&+tDD!{L9tX*S!%(`sV(UEN3hb@SL!WCgzr}AY7LOg1&flNWjF@$cR>Z
zPF_n@rKB|5-$pjJ8w>gwkt(RY^5@zal6Nvg$Im+44tRJ4(XOt+2xJzA_+^q^Qsr-@
z_x0t^&Yl(&?wy^c5!7{cL1{)NV%qwo^7+at6qw*2#=Ae!rWwNEe|Rwn5dA$?x_I7S
zj>u@)+{*Z(-G<%71{<>VQo}`Um+f~Lfvz)Gcq?4m5yj5z%d-`{@2>B^F3p4sKcy>}
zliecrNLG!rAv(S}lRQ0%kT@|v0R^=DYID?lG{n&PF1~)ici9f>&phWUL@vQ>@?l+ZN%PjxCP&z%u$tFgr}drbTgL0)RiX2*l%=in;0^N4hQMsbHCfKEOv3NnMiz<
z2xyMG?4k5x8D+)WVb4%QuD!1MVeIzU=ATSqOwPLfhDxhvwIVXD_V-g0k_e*?GmxZuh7*lTnj3UVfpr>SbBmrPrW(dGAP-fg#Cq|>cYi6IRBB6#
z^|i(k{@ZnxvotX??<+{#QYVc*pKB*v2$rxFN&1g8*4@}t5k|WB^ju4v0Cm7U+Qsoi
zW-U<%UY(T?_uHaET?8+A;C5zw
zK3e7H#wX)pgNhcD><%Yv2J)TOgB$
zGO$xwl@C|cMKc}_9TE;5f`v`JkF!Lv5$h#JiLKck?UGm}Htz#r~x{d$0n3|GW
zrR`nD>nny=qV1?D9l-ry#l`G5pL?7t06w-UF;EMK{Nu<^|H6`jA*)qBx2yJI|H6op
z2)_dO^&ERzF6XtD2OL#xRc#fmhs%z+`PHTwLsJ7?lH7u~nq-8liY?K~(Ma}0-;uat
z-by3@N6bFKrem4RuFTH!j!a2kRumUX)5H9Nkhx~)SC6dn>0NJsUnW1Qa$R~E3N-EN
z3dz4E)J=^uWwyfOF0vt*Z|^s{zN@^rxB#kEeV_P{5^E_BkK0gucpvzDbjwwQPmI@}VkQPdMUh4VQVWa`+Qz?YBT~)6`76LgdcVO6~=6r(mil
zB;X-pvm0ZBJ)TmUJ@_bi9J}Lpq`b63+C@9~{A}LWoU}Iw102%UdC1oo7ZEqIh``uM
zvP8B^yE`T(V=)}0kTRi9WU4?Y<0ED}G
z*F)_Fg4eo$(I7y%ovv=|PiKE2uWzT(S0rP9smJB8bxiN@nk7|8nCxnNaEvyH*3-=+
z0`bKaLDOOH)g6V|O1j63kM3c|$Sob8&C4sdhw|ypkXx*ZOsfoTS<2n`H?Mdx766hs
z#N?Z{s9UWtfIcy6oYl~Ye|D6J!HBM*U;OS-xof^t{OhDgp>=I9{BdGwFlnm&^~;Bk
z#LG51O|L7dP;u$m2ko_n->_&N%GH>ylK3jl363kb#?^_Q|<<9<+{A{5XhkuSRW%2ObX1358_5dtPzT|gfZ?l;w;y+;_xW)%^;GUV}YQ$>)DZ+Ex
zuQu#meRFb0EdkDf1z5kuoW_rw0i09~MYZ8`*DD|eWoF&MXY?UI)nCrei)4;$v)%f-
z#Q{*pHo{r&u}!JDJUc!ABhLMtmYACa{=o}?W_w#ya+$$Uh?tQ|Z@5^m{7SCnn;bY@
z7&mc6Zgl)yhVoQu{F0T&TzNJ#3i+?_ZghyWFS9Z9X>KREFQE^_*}bh|<3G%xbpo*L
zZ-qfxd+!JT?`Y$u#Kg4UKE59aV}8q5R(3r8c<}Ew*x+}=0;92fWm995q)aPMSm+TE
zmEnCPbG@dU!Gu@1f|{DBsHg~ODW7vkPC&14#KgJjG?16(h|Ra__ySJ2QSL~u$t$p#
z%!L6G8gnM-+Kq7
z%0FL!|En;S!s8j%oShsLX+e_vm;d^5swkTOscPD;?p5lGkqQxL-b-)V`X;N~+Bs+g`L@48)btV{Ik9tDA0Ux;uZI
zY21qU15lFXtP)C-&|KS4juq_|)xgoZ7s$#S$R+k0_mdFOPY6YNIWDJ6(aztD{?eDP
z-|4)pte>`*&;6n|#@{PxH|fnG&r3+Vfd{Uwu=nRp>wqYOGniv>77+J$($)0nmyOvf
zgN;tats%+|%yE?(MS$(ohA>!hlS|qGemKZ&o>nR$w4@?u_iSo-(qyvN4T1;|lNEHy
zjy^O7xBeVp*z+=40W0by9YnCn*Eu0OkD0=<%DG=cg_z{Lk#1w=kQX03>D_ulb7ODf
zIVpcd67K~Moly-mKAbabKA`7!OgK)Ik_rQiD?jiSe$pGgoGC($Rq!=grw$vfFDXg@
z)Fv{F1If2l$dkiD&-xHRQ1Gymd{c_KWqZxqA1zuc2K{h>i$D!Ly5`Ecs5A4!5{N{nvZWZ
z{#~-c)9iXF%!2O!7?fNI&}Z8s9G2xBF9i?#`}>(6zt={x0f8`Q>ln@$M4rSnoz_$^
z&$+z2Hsvklsr3wU=kr<^Y0X&6^dk81d!gQjwe+TMF0D1pDv`^idz5BLC^?`P5|Gi6
zkymGuyz@60zjo)VQBDzO9NA1by#WD(eig$?uR-REN)M=uaS|Zs;v5MzcoX!PA!$pGa)JGN5LI0d$=ho?!iOxsZ`8<>!Kg{_+}G4+t{M
zrY5Hh78DFzS2KTp!yJos`e_vm%6iZT0=2*}^Hp|Gi~!t|RH%qZucgDx^BLlihOQLY
z2w-~P?1UfjQJiub3F_8u#rM}GwzhP{rgyRp#`pbt41QB>IfQB24c7Ai~F2Oyzk
z&@xDb6nY*jr2F{?Uxb*y5TontMdxO4C$WJ(X{iY*RyT^%$TZzo6)Q*9QkSZ$JiyJE
z&G08qD4OA~ev2fI$BVz*UCAlR`*Kj8>UC_z_BQlQkCk=S*v{h%o2p|ib!k=iSx%me
z)XYk|Bs_v*g47hZ_B7UQ2Y|a?*WpN$van!w%fdoh*fzTCdvX{~z*|Qf_NFr-ks|cd
z(7*^tdGN;kj{g-+zI=j%fItBhvu*OXlg!MT#$cM2>6iCxTwJt1BZ_KNlw+MM$4QAr
zTSNa+)%2n_khqwv#0NPO(07pP?jG_n{PM$`NqbU2yN;-n{aofAGSL|iNGtK7Xv`Q+
z`ujcM)t-TS>7tLGmycbCXKvqMhd5+!HE%%+0ibc&c~pq$J?~YNU)DzOeC;$VKbPh5
z<%%QJE@vx$-|)!fN^@zqP0vVmbTxeOf{{>~h!^pta$t9kScEt^#~|a^0HN*GF|?mu
zoy#2T1%(1280Il50Qc6b}04=WETbSd8F6i{AX
zNnT0eW~~XF0rSit{fGNcNs-?plU=Tm1BqDAD);H#KuOgdCUvRzX>Xb`KThB&;s#^4
z9uXpr%~YiO`%^rV$7#!*B-d;ywXuBpmJi8;vNWOM>5sSWrM05JshRR@mOi>u@)CL+
zn*T32j;QC*SFDATh{t9E*Bf|knLb%Tf4TPW87(3*c(;4IGllYjPI9H9JaO8{O(RQ#
zjg9s6f(ZlnMH_C9;5KWRD>+8lh46AVv-Dpj1e~MckVf=w-5-K`jg!^*pl$H;dU?qo
zl$oh%sJYZ9hK9aL;
z1c_v{aSF2G$?Tdrm`1oGIRB5OeG_;v>aT>pNv2=gKeW)cS2w;+7L)6f?UHnlJ$P>i
zir&{_My+em-~L6bMMit@~ncg4^eF({61}LehO{m7HM&s?_8Wz~nN{*z?DtYAH
zEdyPEe2Rft=nFb}#^(@sav0u+pxe%jne(a(2ogOv3@^SAN{)!gE-RV5iu!a}T$I25
z`kIoPvJ+D*{gyf-_0Oj?ndf+?XD|Zw>_J3~9rD+g>$_)XFxWe#mL`*(E8|-m`I;Ji
z`R-afV}DiQBV4wI8jbrMnw#L4nx(Af%t0~c_0B}c;L~zw&~6Z5DRmGDxRX7vZg{!;
z-Ue}4t+ErH@)i~4xtnjfSmO2rzM)*C2nP@w&%P<>u2%j^ZRrjaA$96$xfXm~n(}b}
zSpUdOg9Y4w;WGdrZSWm+r{w+ljaU*OChO&CW2IQ}0{Quwsy(h2__rLg15myyb
z>Y2_*rCdOU$z%^wA^;5bm;0h4+7R|%Lf3V$MUE+k^dchnuf;Epcj=uW!dW98(m~ns
z)E;(3tGl!om#UWvdKoNdte{{ZfM>?6sk1ks1y?z1#395Z@u`EB+L*$V3lmVvTeFNL
zyv!V2SoL}$MzZtoRdm!m%m!haru%!ZVx`#Y%NjGAQDJ()Z7CGxfj^t3%KBa-@&j>3IvCs2Mx%CxbO?x^A62EvDk
zCT9f0>xS`m;LQq=iu9Q^s5l9yqSYD0^R^~o-1X|d(dIU3H{QJnxWUg$Uoli?KAr&&
zhnr17Nr{TWnC-j#lf?eSe7WyQK%?10;|!%KC6%cs`{W&#ikgyMl3HYGVg8t4VqMOr
z31nuSEG8PL6**TzDAf0-{4ET4J*>c&O*QvOS8|_65p5tHO89cR@MaK<*Wki@OZPyd
z`Pzp@SVX@#h1Xk>J~;4qf3%n=%s16in-MBN_Csxff#nYmZe=7d`s(WSS$=JASH$C}
z6xyt1%f!S?n41StQqmn9J-RK9<(7iO4IS)o330?t1HD{O6zckacUJ-V4G=rcyVj+X
zto~|$Yfa{4wnTD`0S`ucD9S~u{EUf@Ffufu=fajBF7}y}uz17vJfvB{Nc9z$->=vP
ztVG4m@AL?Blu0`#pZpNAtzrGjSdSQLJcKl@UB8%AR3}u&1ZI1O!9dRSmmQPL#H6dF
zfWkpGbz(PWkNtoSMUF;6pZ*;8#d}er1$JT`Y9y)WnB>N)+8&z<7pDHq6w4h8bqECz
z8Z7lC{7T@5=NRqU<6l1#Gq0hTJD9~v(jg{KM@43(RY6dh^)rg!j8=`h$i;pgqqb9=
z<32_)D6e4BO43v6q!q<7%2QBVUNADeGqfBW?n76Ze(N5dsa
z)Bx_@!Z(m_wr^~)mO+3>2H;CLf>D}B)L0GsonOR(MoThGKsi+Fl?7r^&pGp`>=k#Py
zZQvd0YW4@=p^go$Xko@XT}!Mx$AP58Ne|gb)>Z&6r{gsYBicm(A^rw}b4C0%IfUdb
zCQ?q}D1rgH2zOmvCQMAQnjbG`rWEy3caG!?%caGSW(L@92t!s!lT3{5`4L#TGBuq#&&0*fB5$dE}f
z37$xS2#}5qHkq6&e1D1H7S#F^2;nM2$3Uvfn6KCAAfPV{{T-gL@3?oo_FCk$F>IrKRa;q`Dnrj0|7OXuG>B*sJArKe+J&%A_um%R7%37udo+|nYmo8cxi19
z(B5RXp+9?kgWv>ItW?x3>--ADh$>vv`_lU?;P8`7=M_nG}vkYi~#}d&-llq3dhVRh(
zf1G#5cXIFue4-*T(Enb#8Ac!S(HYqCDvFcl=4JVX0$H<{VU_|I0G`$3U-S}~ba
z_N1x!^)2^B`GHAhW{HxH+QVkYTxSTmXw9m_Jn3Rrl$YLWrRCnv0U%sU3bI^Tw^dcF
zCIFNzTXB7k+e
zFHW1VnX;9g;}uza&YJN_&*_TidE>fwm-Qu8r8jF)2on`|xo3`Yoz&f8n3ug?gyiu#!u(-t6zTv-#JY6WIrZhF$Nea+ems{N3`^%Egd4Rj6chsjT^}X6(
zV1-X+?(`^I*Sq7sVCLM7O-QZYZA-L+>#11R0I?i!YQ#N1@2swCrCUV`ItQ4?K(W#8
zdUu3UH!7lJ1PE3@H7h{p^Wd+E*R_nd_Dco%nK|6*GnMOLn3M((VuGeIPoG||aJ6C2
z-z#z+Lr1#r?OJjQx^qkI)Zj|~Q5w;4pIE@1e#QDqGLjx*A0pWN0!$~=MLb@6eSIc2
z_!~$u!xORa9yZ&XrGUZ@DACxI*+DP?Byop9hu+fzLICe`9hn8@hmS8>Tq+I*!e04w
zPucAOHk_J~DqK%Yq_^GB)RMRQ-yO--ZfTI~TjeiFx?Rd^w_=HwE<}a^n@Qt
zU@ZPv7~Xl!1#L}{wDKV#x?`XbqrF;4p4Ymj|E({#Hiq`5>f%L}DnBWUZi%i_>eAd7
z*Sk&V0_=-h|
zb<=eN02?6TFz!zOiT;2zw_br0!T0phz7vq4j_i)ulKXQw7?;Y#C?Ush#h8wwah|2Z
z_F4eKJ9cLK1G@
zsmH^XBQfv^e;ZKlT7iHV`Zk><2Nn_rIsk<|LuWgUSJ3&1o%)j5mKk?8QHRY|h1c3aAdTWwqO)O&2{pOEYrNxaH#1ou_Vi
zfm~P${WTpNB&4CRGmPuCEX7Ce`C-?|UH%BBYa`p#IvG?(E48p?QBOEArV$EFOXfZ7
zjs`+2O~Vqbt*1j7G008H`Q4rj;_px_YtcwUtqJ6n#0jEp5)CHo2qYVXEj
zqn26|-EMOKHz#NJT53kjW2?fdk#XOH@C2Gy^N%?MeEY
zp;{A4OY@bfDL8@OtS36`zV3XR8K??%E#)wdhyfrvIZTfYRVy*zLE3Kj^sGPM3R{ns
z1zuA#09N#K{V*W(-Qh}Z;eo)~RBOvBn3M4mmFUuo;4G&m-C91?`})278}3j~_l^<3
zyLA{Yd5GT!Ajq7{Ob+Y#q`F6FPykg7QqkfTkd*AQVX7m{Vc9G?8@zth+!R}2IDGE}
zTt*?x)G`15X((T_n=5@{)$!3sHH9qxq`q6j+n`}R{xuyo1m7>V7cC3em!P=#)+4Hq
zd3`e^HS|IWYBQ)9vf{BHIJ)i+P@8s23d%shLJ>ZuDN1NAD9=ApQ5FXv8*=7$JKtUT
zdgYST++?KbY?~?wW+DJGxYhQGlve*QE;{^Eg~9C?hhCG4^Qv=Qv6lALX2AC|`g8*=
z+Z!UY?Za`W{tOu^n-o4ElvFk_Hz>C{QKiFgOb`2=FVl0S$8}Dx%(xKX}%TxHy0w-P>_f}SHXzwS-4;J4uQ1Q%)`QG**wWFsx(w(g*JN4YDlg6^xz#1)GN1T;|C#Ij
z>IZlJUlDQM9D$tU%x&6in4%lOJVQj6yr;u^Z9VBreqVGN8}q7Lri?kbA)G_5qN0NP
z(T9HOne@PvlL{KCFm0a6nY&%I*HawhumY~u@SeZlLuUErLG@;!H2L21p|g4G3PwOe
z(EKVWd3v2p(91CTN*o0E*{A)H&rAGeZtBxBYYu=$1O(5oMfX!6amPOLO4>B|i+i1J
z4BA9b|4DukJlp7ZC!O9!N5^5<1w~`3{G6h>tfbVnm(Z{?w!(}N0!E1@B@i^yZX?kz
zV`Fa4%*teCgB~*LH(PXX37>4OZ%M*2v_z8-hAC#WX{s`%y7zgn8e3^8rM+dWUC1o)b#7hUqDgA#Lq-A?mcLW|33QtwBQSYOmY}!Q&mec?BnGLboOLtmnpER!^6G9d0QNShpo+(BgrkxDgq;n61VYd
zr{;R2X$ol>scAr2Cmuhcwl5=;tPWPpTc(l$9~B{usLqcuvJw8f1a@jh6L_xAYrePC
zq^w`TpNOext14=%c1D{fY~xCay+A838&I=#E+MCs-D&cD2UKO|1;=-
zehLQPV34(!{MWtu?>apq`Hx;Jq|txPZ2xuL>=6Iw4`?Jf#mPy?&i_w0*Q3<`>Mz>K
zG((*Cn<84oh{h_Q%|Exl*njUmxK(Ng8a>c?4c%$EJ^(OMwU*y(j9jj>`WfG%gTJMp
zkv?tAY*TC#s5K1m%VE9&MGNT28I;W)!)2%$iriT^4LXZtiIjRLnUt6WoY9A03)$9F
zc&V|+6cKCdy5<58QN9T@Z3lI8cnC4rlg>TY1?JUI~$?w-Mom3Mk)Q^BtQ6>bfG)B1Ft
zqNG8I_6l3()+73=mq>oIRUtm$;y*iJ@)Nc|N7jFI1;O#zZC^#998x?sw+jro5|Ama
z0H_N@EgR25sg;01u{~gKVqn1IGFf_Bt9$?
zE^#eCC7%nlm@E6~x!Lb%$j}18A_Vsbg9$o%J$wYeWOkEE>WZ94hA4y={O^yEQVxFq
z?`|ok)Zy^|-B-1Oz694cPk*+7bBbM)dY}$NT51yl1aq>F1pec*%^*aBU!!ij~m`dRhT$g_9Zo
z;=v-hd&f6R{m*=#6V-jm^IaNEVR=^kQDhU8dfgZgdP*E04}FC{BL^LH&?@OCOp;Nb
zrP4^t!q#W^0TTgz96*$cHoU41dIB7-zCg!c4szQRenjEwGS**9
z-uV4e*|TnOW>{$b!h7tO?3?UwuSXk0d7%W3w0jB#`}_*fKtQ2kjJ=umBLHNZI>hBi
zKS9Y6Mcr`6e9QII1)qD0^lEcwt1=Fl$HOC#(+)&CA9>si%=)I0NTqV(a-EXn(Gy6;Gd8CB{zx7C
z%^jxxJ!F$QdT#qpJHIi#m+wqkf+^{Lv3k~wFG+%CA%auh5UY|$joh168^^ewf)1pk4K-3sH~GE`y`Y1Z|?r!_Rk>h
zKg1!myt=HduIgfA(xG3_Ff?i4uEW{E9m%iC3R!1$8cuHTn4Rw}YE?2kT)`i<_VYxv
zceI_UxAbqR(KYeRnMz1@(p##nt?8NF*h}M-gH7R{;dU*ZFHX;~yXbS&dwSttLdey0
zNKD#G^M}h}BOoa9G~Mxq4uLk#1SZ&)F6jG96HWaCOC~6Bgs6%4k>5d+Qht6Of$mdn
zbM?a3HshT;k|o$iN1bqV93G8t&?CUh^!k`k@qVC*Nl2>h=6RECcrFqD=<>J6dq0P5
zll=G33wX%=A<
z#;gB^&tkb374Ac0qLaSebg9qc2j@H6wemqvD#A~{fAbU|KIL-j_%ngI-mg%N&|I9K
z^tpWN>$~bJY*so4qxuqPdQ-A;if(CWkGC(@wB%fP`8ND<4v)rdmMm=Y8xNaLWQJv~
zw)eb~T`qU(!_b_JgYukcfP%5v}cs}xefi;$I!>)
zp23E%d;+XXmiI*E-sjzdt&n8)y5Ub`ykuf3H!)OG8BvB`e=WG!P2CVh$h=t73lo1C
zO!*YZ+0;iF1!?G2wQUb~g+wmFhZ1h_#Y(2nYRwfVHLB8~F1dN=U2gV=mx7vLUrK9j
zx3@YSpTouW@}dve{SrDs5}_Nm`13mc&X+{83Tf1%+fq3U9Fv?w^h5M??}XSwXuI#q
zkSTAw@v(}O6jVp1MwTiK;=X@xUr=)@&w9DW+g+So=_)Y%2vp8uu42Hv?mr*mLC*N2
zzm`v>ESaF9)GO>i$A*UbK8l6#J@AHXwR(%szb(A`inoJH^NzL@Agtg7M|o*^PYD=O
z=ZlSMaXL*VJ3f{z&}Y1_R~aXpd3VcyPqKrWe&TT_K#f+CSl`|^86lY-=77&^KHUil
zaZc%jF&1(9q@!d)XZ<*o;y&`KDo7AzaZxens4{6{P3+Db{YN@1)&g8HS3j#PMUu{e
zrxfsVEq2;F1^KIJ{|y*LY%g3e_rwk^cISn>WngY3uJW@H9>>chmd9uS^r8UC18h4SN@zm*OaM&EHGgdi9Eits
zGIY#i#NoqdF3u7h~!mC1w7Dm_C(MzDx?fTVzbZXMR%4cY>nSTtTCR><5emIy
zv32YM$d>;S3(31aGZ!aEd+Zpgd^)Crk?UyjBjfpi>K7;;{&JAfF#e^Cqs~Q3@Cyj?
zC}=^x`B_q6z^eu$3Q4?o{p
z5p$YrpU<-$}4|7*?>b
zr`v@#i$T2-!XayzTWx7Bsu!JDik9F03Oqo5O^zSV`MI=2BwSru^+NL)+9w3a$GKnw
z`?;OgI}L}Itr#0>e&f9;*wu8pl#`GzD5{tKB#E4r=<7@)J1E(Fe(NP^j2PEl&0G@?
z?5I1w6h=kf53}LZ?;kG@ZcDecVn1mywTqAXxw}iSf%&6h?x*-NOb%?BuA?x
zWq^be=+BLxUP#j5mMt5x^wAd14+~E@Oe%uuZSp%Ervo^MT2l<<6K01Qw?4xOj8Tj(
z%FD4ZAK7V5){1-%X$@*NX%L2%LXldLi*xpHS+Fo|=-cnd=38(f;FZ!d8982BOqq9!
z1o9L^4*sC-Z8)Doh0sIPy+U)yr@js&O1qK$6X&nY+%dIb_+=iefks#%6+Il=|2(Nr
zMgf{*k-dh}94O#xBOKgugaZ@J2@s{fp@vI}nT+fO7go~o2){*ouP%X~l1&3#;`Gms
zt#e8XOAB&+sYpV;!is*hIU9T3J^)UA&_z(&>=M3)Q*88r60~ErTzvYa3@#J7*C1l&EZ9y%S!0#A@#+Cj#ig@u1&&#Ut$c;$r=LX5yWmRQ2oD
z?3IbbanL9)HqJ!YlbRSTU0U@t3OY0WLFR+a5Mn?ts#<6i&5(=6iZKV+%$~PpPUT?&
zD%qoE`;m9kAoAcJWRk(P@(67~uYHlw6d^z*-?g`R3cLhkWWWVJyW0p2U5wlPmc&3o
z@?x8Miw(BMHxhnRC13*y$V&1Gl7)oEE#9l^S$Y1_QBn}a2o~P+|0Mtk@dsA#t!Vhl
zF&m%Q%3;VY;E~oN>X~XY(G9tq7hi*{Q6ZC
za};{;b&}+8zsJ??P3Ul$Tv05N8NG&x<8#Q=!rZ
zuCe#L`)S)j1sjSZ3b-YcG<);a4W}cJtQ(O=pYT@z`Yw7N-XVxzTuKX*cnvoKAQUj^
zl{G)=F6MIdl$0T;(3mCb9UZM(^t?E>5jIcwcP4bhe+O{nUPrHvgFu=?`dHZ=dd)*g
z#mO<$F{w2*-yEkU%f4`Ztu;j3rv=!b=y_J?69Ff>IzjBAmb|7;XkT=DgR2D$Xdb-a
z(aPCtqI1ap`&jF4K*J~3Uv!=VJ$%!}rjNq*5J8*0C2DN3#eOVCF*d~O2O0%9AAWi#
z6g!fja6)X3m|vX3r>Bi!u89~#QzyEW2{7oS$}!6Pw+)ykby+-H-saKQ2)n%>q_mJA
z(3fBT%n8GQ+MLM5SKW{P0`=G$Efq{z0OwZERavj~$rZP45
zs7q`6lt;|vL+2lZq~n&BTF+AzC|%yHPqL3=fWTMICm|)?k}A*l+qK#BOqkd_8}SEu
z*U?n$Mo~0^=TK-KQ(~>vYIPnLDAXN=S7+x%Xsa+x{I^8&4p{b-pN2mDj@AI5(cj1)
ziE2nkz>^ki>-idUr&`
zI!31f7g3a+E+n7++09||sK_1X4-VS*#gAKq0lAB>arM+U;e|IA-CcEQR{ZJQS
zdz&FHE-zQkS=}y}U+Z~1Ql@wOVcCF)%0qU5X#fVYOoKp6xDG~fv8&YNv4@pyNd=!(2_(WxMV~?5e>B{{HehCgzOH?EI+&C=M
z4P}vy4SC~tK(DK#faP|&cZ!9arSf~1uqLke*VT`z-@&8{Tr(j!DG00!^2FzY9Fh(_
z`$zibC8dR_KN1wwRQw!hgN4s7#_ij}(-d6LuMwd?u3=qihFs+^D?8!q4=J~U_`FGy
z8BN#sd#k*yCDgUc{2oXp%e&^gl3iMM`y4`1rST#2)pPSp+!q!zf#nc`&(J!W?8)1x
z*Fggg5SSr-F4!PBRr#ky`!UMaelpt(%s^>V54Sc&jNmHU-)SSb+;%e$@eWAM#=X>|Bh~casS)<3?1}2R6o_ZG1pzeeDeXO7=
z9EnqxTF29M5c6buSSN6oD}?>F>D0b9c>xEDkR4OCTJIr%>;V~a0~?>mIw+|qbIXfg
zm6SR~`vpfEq?bH(XZwHWd3^my7oxdo?If*W13$kY%+;tg2E&{i$aIt_oqJsk`eC8HqF4v6AJC`F`ClMlA|
ze7d)rQQdwWMo)uxr8;E!xsEcb7kV8PgyL|q%ii!k_j}=w5G*!$@Y^I>WA*FR2PdrV
z;q1tx%-^Io?fn3pkfFjvjiNRPWa5o;!`~qQbjFg4mxb>%>2{M$mh(sQC>SAf9QrXV
za0{n5r~8ERsZ$>T(w*u*B{3jvIX_2p?Z-U%>|PhG%0klOZfY>f!6t}gzy6xM*~zS2
z1I{Ps-{?$``QC)U4E`TDAZ+SI-0{qmXOw_P(hXdK7LVGRnmV=SQ+?L4HP{^3U?6-j
z*j{@m`ip9dA7&aP|vMn(s*nSxY|@9h6Bggg}Gh9_s{W;0qtX>FNM@{o7MFz
z^z?#U?(#UzP^32)pk|u7mo0?1e=Sa`y#hDr&Wr5$=ov2=PjqE~|0L;pWBo#O6+`g<
zkiA59&tj%0tiQ2pA@(cO4g?I0RVwH_Z{F3PqHJW=eE;58HwT<-c!kvQ9p*-wm&A5A
zO~qds3_J}AW^C~M$o0G=T7p{;mWYg~-_n^h3h5Qza$lveTYk;VR4~+^sHWyxlRgJg
zKmU~rFxHYf<3UtLTv(95%E)87&%`PLRqW1BKfQO-yQ=n7JsH*9Xa{#<)VPlPf@_S2
z&6cNc*ER?y%|ktI8GuG2HgS$&mb@xn2$w#BeA??y{O{9ebc2OqF%Y0=RW>L+y{hXE
z#cb`XpBO*2;th;Vr{poH)P}%NTD}ZAEVO+thts1R(0M$3T#~-BT+OB_$)u&Hoo2Rh
z^;mlMw*qtvbdq$C&p<0(NFM|meQs73JAk${O@GJoxM!OFwLd+4R}`MugzANvfX8jM
z5siX0mBn_%^bu5L+wDm$G*u8G{@bl+xa0c7E~ISSMm
zd#on-^tS3?aP?nq(#Gt^f0Z8~3j26eLgT?xBl2U7*CToH@^(9AaPg#W-g%GXTtj>w
zhvGV7su%uZ*(pz~0o)Z^F|A>=o&Ld
zLt7Vj8;dIs=6>#D2FgSdE@~l~YS*w=9PFx=XEs4ZU~
zTq!c376qthWff!rLHO;EI#h0|abl$kZimR1i54hO(7$8?8Vn6QT{QEwe@9LDA9!_z
z!$XEkOxX;E9`NQM6Kp{I+EqD*eF_6zf~dS`@V~ob`SM-28Tazm_q1Pjf9x#hmRu~^
z1YEdm0|Z4qc)ZSq-!`VcoH`N<8A4-O(EHEo-nlOt&*FAl6{QG1M6Y3GON~HiM`3Y^
zo#U679FLnDY$%MFyje5=XCcaj@WlpCfcpB-0>7%Jjyq^e@9!~Qoyr&HgXykC>{w+|
zh2x|yfae7W3^;zEAc&a?m~O=ax4s>|(82a)wPC&Y<2)P?&Dicpm4qDAE6UK0KWW8J
zr(f!HS}6gz0zj^ltzj~zZ#Jz>m`MbIs-q`l=nyDt2!60UCAKJ~;1H!3M^dk}BDy_L
z&5)v}<1vlWvV6orCf*h>?oUhFw0k!;cn)v{m$zPin6)y`g*}qloTflI%weJ(je%Br
zX$936HO#$>lyV4`VN+0vsaMmOULF>e*z}V16q+uU9FA9xk5#tnN!2(q7{6D~$S8$D
zq@2!@a`w140zUTPPyI6c#*>3n?SDGko-9Pp!gG;%YW&;
zkjm|C?$pBK90>$|+-h1-rf!y$9a)t4HEfGG14f82)^o&At+#itg}X6No_~M|m;6YU
zKBjS0D1`O{aS{b8>?<@)#t0VqZA;b{BB^%&$0>Cc`rxDE^KP*s48BnFjqmCFcD)7E^yo_>s?8lQC{Pf%>AuG?|HUWT2eH6lx
zt3iJ7$Dwx(>T@K^E=ux%$P%kweNxKXe`V|iZ^(+T`1n=-8%*sll8-X-GLkBVDau^;
zZa7~{av0ee4fOI0OJE@eqYvgPA@x!C+P**}uzpr&&RF|}T=zFGxEz3~<}>kUmhKp*
z_lCJ2X^gSfdnNHGAs_ChqN4nL(><&>++W<5*seIZ1TndJC4p0?EP1tSXZq@WHNV$-
z5>Rs7oG~ejN?TCpImx=dG>+G{)U-sW%5@YYgrH1~kJ;~YK>q7-NK6qgp{CfQU;(eV
zv}b&vVrDM9(NM`%0YC%j4N7v-J6}_>c;xU%whL;>$h)FLJx(-cvR^YE_|kWgUaU^W
zO=AQbs*6&RPNMbK>^}>op2Yj%cSFS3qqY
zUXKlWhctrwTuKXLIAiu3Hs=LP2gm))LDTJLp&cIzxKCX!R#~bXmKx6YmP&AI#ZZW7
zH(h-6HXvE3?(u+1W2B>P^L&P}M4glZ&eenDcF>TmW38ilqS`W1VazcI^ynR%=jBHM
zZL4;2rk~XFM4#K(*c_zO)Q^Y{({S)Ia&pw<7e~ruc?Tmj-0y@m6gB|B-;V9y3UxOH
zOY`KSZ&HMWM$7&!Z;i2JPw)agPZ9{?TOQA-DCu(wYb42i589KFT5t^%45Tl@xtJDw
zV)0Cs=n{lcL(w9nLdWIC#Rp}0?H<(NYW1eih}B-Tn-QA4=z12T6bmV5A%BhKYh_&@ON!KOfgzl)D4mjm--}2#Jf?;
zi8G}AvYEC_U;KuDg)BD6hOf~q+kz&E=OHlu<~iUNwLkAoTgaBZ><;M6{iCd;I`K=r
zK)v911sS;WaDOW*$oKsIh>?It3$t?S8oZ2&rp2ovuf;NE^^DW#afIgdEj|@_b3{}c
zAS@i%9cPH9?#g|!~cmv6=hD2dr0DzB##*+pw#^I8VpUm=ni>f4F4e(oAeu2mz=lb0zO^+A@_vnCjBL$L
z0e}3dPn=|f@5}53&ifPDC4mQ)HN`KM;%?dv;tX^pG$`Lu5FQ9PvxjwOo#4-md8k5f
zb~+4r!buYF3bJw(Rdt*XcQ4DYzkpWSj3Np1bXIfTJM10{hg3yfQzAzWM2(PRP@rnx
zx(k)T(6DELv_=3Jg3rz|$wBC{kVl$!^Rg8?#4q;+RhBJ}^*nMC9^T9D7bdt{Z%lGW
zOsgvUDydo3^KG_%>(RJMXF3`enOT+!$Oih!`m74=vtN^O1e{hpn8Yi2s)UB>RCd9H=`!
zwg#;7=7N9|#C*MM6D1AxTS_V#9_~cR471SP
z3cu@XL#XRsjAepgRPKmuV3=VqYq1${ukadv2a`6eqf?9JS+q@LL77B62H^
z<&$47W{Gdm#hDb+{l`SXU0@3XUl4fv&vHJU90(?NuWPyN*!Lc@W&(ERC%?B2n+Zot
zGAceL&xT`TBeFWDRqv$!}0$j
zll<_Z>s!W0FiJTE`OC*MI}pviD=REcRQ(YsA~K~kzHqipHT(JwaEQ#ammPO#9qlRN
zdN*N4plX~3<~2T=A=hjl?HyGcTCn}T$Wg9V20+|5{jX4)`0&nkE`_#cgt4m_m;3k9Jh%SA+CGU7~ng!Pymb7&tliCyjz#*_JO}=%%
zBWkr>+uT-t3ronD<=OCe%Dit@*Vxp_up`407mcXN10GU}R&si~T%nb#V8!-HK0SHK
z?F>L#0DuB$L(rf08U21z!knq-%PNPwh*YnmCBdG?q4t@z5uKOJ;mIo(i=6C}>_nDs
z!c?MUY$P8*vz>%v-N{hb6Dsuvry1?;wPT|q7d6BD?RUy~Py_%gSU$WB@qEl017m|^
zJvLKn<&HsTcPpw51U;{82Z3@Y8m#XTYD1m+foTy0Wg!M#2i=GPylXj7R)ftw<^abG
zV`+xawN+gK+&BOU>ZlyfWIT0fo%p~7x~@3o=%2lYAXjuMz=bL)K`~w`N3J2!8HmV1
zX9=DV!=d~kLrzDG6iJunIa5TER&Yvq+l
z_QLvrVD?|gsLRZ)%r6#KR?i7lkDL1X4J!s0F!v60gMAZwxR!)(^`fIyqQNX!v&zwB
z$Of`Op*OiNaw{cD{XXb{8>ifx1LN6}!>SCcteO^Z7t(oyQO#liE2QPA@i
zywq;_UDR%))t8&5%8)U0W0VA8Yj+hZT(AqVktQ!ytE?o$sMv+wr&rt^PKe|+jdN%sEu@5g|rwIX=DN|d43_|J#`UZB$(HHGef
zKR(0d3GE97q%Wv#(bzG`mPv4(t5MNW$?>Ub!^XR&=6~(?OlG4cKjZKTpc#ocR@t^y
zp2Vs|GtD>Z1NOgOy>=rrGncjKwUqCtqy3q%(P043m9m|&q`a#wf1|dd^!Vg&5l;VPtZUfEiOX?!=i|d>J1(cn
z^s3h!^d(J&$^Gj<^ML|psL3%(nrFz~2cLzr#@-&*pJZ`8y7#C^(qI^GnRpIAe8+GD
zsWgCZp&>-xa<_JKvvvbf&g9`oru#GV+B{sOFMQ>`9EaP?Of!o*`U{h5b6U|N9z9_W
zQZ+IM$`6hxOn2&c8h~*H={r)X-V|_=qa5y&CHdEC1^AP%PTQQicHK-?D}z<<4@7qw
zeH-#H5LFUB1|e8NFDx&&qd#So{);fS1qCh&w92}|Vz}P7Z`SM_Q&I-Izf&p}94=G9
zRfsF?9P6Ot<_TrtySm^t^!Cnmny}iZ@#z_x(C_VOe2P!EUL?=Zo0+Sw2chKO!<9KL
z1#PQ?hGluY_?|8;oaCc~8JzgPq|dke3n~?O4>N!8^zvFd-(CnoOVn(x+H^xdqnwTmcp|?mDgdV+znfYZp_sfiI`pYcpCvQX
zTtSh0b5jW$`@!oWED+@F~_d)PlUcnyf4aHmHr3u|!5X2HxMz
z^N!A3s=Kamut!%|qyiDqkLY`1PEJ>yZJ#Kke!U}B2h;|(5_{kLP*xHiA7RGl{50Gp
zlBnDsQ}{`o1_60PS(P3i4-b_nf4-4B{k|-k89mX7@^ey@eA-V6$2jns+GzrI`%8&J
z1buxQ+GDm(DxA!b?h>8rH%`0yd=5M1yv`@vlo%3PqN1MKB;s$3v&8zFYY&~4e68Ze
z^DMAFc-&7v+*!1Gu1`>xm~B;H_zz&;njaoQc-?g{v)W++IKR(rl+jfIYvmB4F#
z1#(_Dr#9xs32A7@v293SCjBu)`Vf_$nfpWH-Onar@>y3WRRvMjm=7o|mkIAW0F+Jm
z-TH^7v9raU#a&tYG6hZqj+BPsb>*);Cx>7n*jabpoypBob2B4H7JDNK5Hz_C%h7Qv)THv8i16$9
zWOM}d#>Z1*u5#=iL>i9NsMOJ5X|a+|N$v)XDW!1e4Q`HeH|H}M)@cF;0v?em((^CU
zdM`-%6VcIqQz{#xnT7>oeYSYERRx#7!i>r?$OA62bES|*%zJK7rG
zI(~NyRMM&AiRd6<
z7XmHZIQh5Q`FLDT4V5D!ao=*ziDw7Wj=e7Fv@emhYl?Rkc~#!S@DTmI`Bf44@-epT
zC2Hr9dDQ*uFwuSQ`?`)q4&r`h$Z(+nyU8*kz8ek$;SEM)6!ULM1VVxq2DQlZ9rRSo
z52pF6ZN9`k%;?5JBd?;q++OYn*WrBC%yW?*tseR38c$yORlVyQdk($
z+BY!t$ZRC(s88+`Ae_N~4qx6831g
z5nuGJf5?azwDABiZ5}#ky1Q*@uI7*Zjr&pM{gkJ-4rp3=R8lPYgV$&Cwt*|u@W(};
zWg{}-&d#ysA)})zV5-4@NaD#~&Su^G0{P(3*g!8UuRwFK*mdP;#nYwjYMi(9sM!yG
zhy6C5thN4EN3=-{dom1i%Pd>W%_3n
zg7&FmJz-%7o%%|!#n*%CyuaNapUZlOhu7ezui9()cvgQ!l`XFaw`p$s!k<3`?m^i+
z+idW>-QlS<=eL4W|9f1Nm?VpgMA6HRKpwOAD!^iV{2LBqriEF!%dOII7v~c{>u@kcW(O-C%qTL)F9$t?uI@bGB{qNCp
z@FE2g-<0GODz)lHJO=PkG&LK(%V@c|P1IN=)Y=r`5&q?OfG<+YXcY|pRFle*MMarI
z#i4wKLPto*Yqemywp(CqR*;^r26m2C=zYANt0t(a0VUA!bq5G+e;)o
zPv#G#Ha6kbi-|hn@Z*%jo
z*`Fuh|G2*sJJL0Vo+4}SJW;>f5w13yqqR6xs5N!E*8{;gTrC+LH-U`^Jp+AWi|v+6
zgsrwz_N1t~(uC5`0-yWMMb7q73P4V=!{IwB)%KeCIOq?%>hnrUm_xeO)HSz&-{>~w
zL3aKf^Et)n)1rp9&^=#aik*}7lPjpF*gb!NJ3|B*%7>Ut*8HeM3SndKKIj8~dp
z032!UgaiL5bo*(2Mn}e{(6W&PfC)LJ%(E3QkNhi&hKf_NU?%u?p(>Q!e_C6A5W;oyYa
z-r6G~MP-opPjh{_vYda8#Am%E?7Ye6b#FUY#RS&$wtADMASCm0?JqUY`ui8=mgJ_t
zj|}Qk%~$Gp|BdR|^ImPMS_R^+FDI2o%Wrj@T5aJp4Mbl2`W?qK`&R2VG~pCH@oK)-
zte`++kx;r7zt+ZEy*zzCnY-g?$x8aiZ>c!1Ry(7U&HgK?*d9volf4!jr*rba9`TX#
ziYTcLCZ-k>^Fpu!5a6V|y(Ps;6O+$A(EDV)~A?4ZK5#Kt-hr*KP)3XsR>3yTRJPY-|TiL~|g-H}HB{Up;a_@07(
zHQ#C;BZ4U56^8yh(^tO<(BI1o`8@SREvl9hIcN`2bA65MZ!XRDtDOnH_CSvdRa)W=
z2te7~tW>E=Gu;-X)+0|r{kX8yY`e6y4hv_bJm!}rmQ`!*xKz<`+2%VXeA?vw6f!eI
zS;Fx8bNfSVO=gBa9?0-IKvvKnS(Bm&7f*cgfKyY&4%-IQB9%zL&`KBonR};P06OWh
z-*u=j8k|x3I~x6`(XTz&w%{b{@XIi2_s8!_Ris90h+rucFav-pRJ95tO7#;Mh=FcE
zoyf_89k6}?yHojy^cCb}BcXW!WDFRy(ny+B2TYgS0+fVs@^0WV{p8n3&p3IwbE`6|
ze7iYDMoHIL4Ug)$=_JScwf}FrQ+FT0J|TZc=^Yp@E-q2Xrk_)HOyV~-K0a#BK?E!(
z(D<|>Tn#e~fd2zo8PLZkGdu7B!FIl6uU%<&{>0=06%}QG{9v0>6~HHe6GjTCS;Q-m
zTwY4H{kImteu~(-icA`x8=vy#&xrM})i2!L*2(b)H;pACs_Iwm>m8uAT?*Tq^}hb;
zlc%TC5fvipr^lagWneNHo+(tIHwE^9R^2a7s9&5I{-=&wUJ;XWEFhRG7&ud2+K}cN
z=GYOu3up-Vmb{o7ks83dJPEdY8yW7@H|Q7ny}{^po2%N}*Z{ZC6FLG4I=a;zc~N1%
z$d1vfU;7ot;e*NCGn1Ll$8X4^HaB`_nsO`+4d1zZkvvjMsPBCEVLLn!W#4%tC{g5B-=pjAuK{Ovk>WxOr7|*CHg?Lp
z73MKr*Qd|uC*_fGn_S@xD<`9A@ucJM*~W&_hP@vM3QSvn;8zJ1e;v0TwPCU57r`<8
zvo>Abko%te=VYTpft0MxH_@(6zsyW>5ub}+q+i|K2kwbFlo5ccB}j8dVQhT-aIukr
zy=rToi_zV^ezQk~Zhwg%ByC+$m8LxqbqL4ba1)SY#3HH4%eOCkV63?C!Nc&EGZyb`XI#2t_
z93`WQ^(xX~?HM#-WDF}bF;(JVWd)_1nYsvg1ReD?I7eg_FIe1N)$EJB8k2f4bTtG;
zMvop`$Noq_gqjbNwl9~inzK#+X@oWL;PC%Pc1$H1;q)PGSy`o;nbRhmijVAT
z|2hxn>~k2O{}94X0vU{^)coi-(M_Dq>a7=nV!BGNp_Tp{qK8c|E$Ihmml-Sr>xqi8
zO7qSARN*%ZKgO6NH&lzs-_>A|$H2-mSaNXOe7fk=ha`Ifd_X|1KNvRf2l=L??3;yx
z=oxqhT$YB*892qqNOxB^M8Fk|H)b-j^FAwIY40?NIuxH$P>VK09LV00q5mbKMFU`%
zBhWZUFUDr317VNv;|^o`sj7CVl%b
z)qles;E#d=G|r|`%p}q|U`Oh=wt%4E!`9&ObgA-cQz%cQ9yz##
zq%AN?!y;rG9d_>~i^6tHXB!KD{!HWH&AYiab=o)P^%jtpq92;Sd&ri+z{kXet*vA|
zzOiR~`SLy$*~{~xi0tDCqSti2y~Wtr(s%sv7eytj)N?n(5@6(4lv5I3N1H?cFg_v_
zctItrNEWD=@N1?!XIFuvDqKIL9AG8rucW>
zpl^d-zd}?w($S)c2)E&0#vI241x(*f-_rcEj@UGQR#MDg0sdP)o|_Q>@bjJzKb!;2
zxmO4x5yzJ|PCt6}^`*Q3;oTo>m2s-~zT)>0Q+R5jyUGE<2Hz`1Tsm_)6RXs9pfNgT
zz5ZX?;Cek6Av@!c!XJGRDs(iQb)W(Us1ssgM(b#l>$W#dEfGL(fL4{Z@6c!(Q)kfe
zdu7k3
zt2abG@v}iIb}JAC&u#zx4ajIJ)KF9MdPuZ8O77|mu3Q>)9Zs9x-sE7$a|K;$Zru|nV|W%T$Q9LV*!nkOg&*?C3Euo&eTVFjSUYO|KZ0vqQqIzZhQ`;T~m*l;KA;>B}Y@BG^Wz{-%8^iUj&GW??TU>yGV1EUNTaT4+vor7`86t
z$IF%Z_=XmFBWkWk%`Qs3t^YU>BLmjZ=UaL==^zX
z?iWh(Ht_fW#mT%|&r^4#QS(tk9--0Pgz^xZy?D9Y-Nr-lm%=F>0mP8}j`ZPml=wN-
z01A-Khuwx%9Ioztrv_>l$4bXA@vve877isser?j1e3Vh*gt*1s7i^|xV-(s2CZuU%
zlw4jvf$Z91^%%*>?A6}v<=tE2Y(+Dd=W*}mtU3Qj;#`6+S>FT_@yBg-wFgi7(7<$*h#E~>?1Avu5Vy>6okIusquo){&$6b+ia=@LVve>L2
zSM>3Gn<|R)Q?>-(-NlDDIE;yB)VUy{IyIK5<~6o74tAAVGqjh8DZU9rv9(XYhxFl(dK!xWz;;
zNz%Cry;zb1zHq@}-%aP{Wo4y4vcozdEkoUx`z$){fgBcVS4V@c7x0RsbI+qB9pO8^
z=6--)gE381Ny*XfEFB4#rmybErpiGf;{#BMXh
z(kFtQG%fS*@u*GSV3Pas0xkWY9_geJPUVowv)81g{SsrTa3H7!eSbP@8Gr^IqT6DyY
z=@R?d+F`djc5O$;syNlhP~4~_PLvjx3OIbKc4XVc8p>jG<0j)xl4i*0Q*&~&*>8*mVu_SfzIOUEMP
zk^^HiO?gGzyUj&GC#I!Vx8qlFe{vprvh%I-ngDbNCV18nj-G+xrqlZ=*fPN(*OWhe
zkur+{Z25nMYPAp5+HPOpX|!ZGu9XLW{2ainJ^(ZdK+%$NTzztI#db|&0fO0VJ}wz!8v|Z4ShyYY<5
z8y6_V14ObQAD~1BR=gQYRv?D};wNw^1LgZQtN;X15?CnDH(ZIGDJ@Pp67YfyT#3^W
zDt-TV={1kk|0%s*wASUWH*K7~z7_0Y8UXI$5X<~G&o-2SSRbZsY=)eX7p1~?sON}`
zvYk0AqyngY31XaF7MESDG(l#8Ks_TJt$E0{A=fqxpTM!>ND}x}Z-u9YT0Nth37EIS
zpj9t`nA1&)=ox(Im~a%MW0V;g-gR~DX*Kw$Aw$_zHc4kEU!Yf~E}+Cny}`gL_fb}Z
zhpKmXU0}Yd73&*|%B!fbvS*u_ifhDvB>x$Oi9qmd^vo9vz}YGrH3nRL17z{
z6C>3d!Ui|>|E|02+?OyuxhcdHbckKb=JG>j`e4(=aw}RqpL!S2>i$7dwm&cQ^8@%f
zpQ97W-Dy^I=tX3a>hsIXgSE8OyU~c&k_QQ-y&G(%{>lfVZllTrg1nWu?75ISGc|?T0(nKYxrDS{6NT
z>>wH>w3kp}qQ*Kr1OWpec}79eG)Fk(0veDBuP1A6GmM&V*ih#Oy~Dr9;Los<^`b8z
zmjZST?1z(#zmA;55q|@%u;QggkZQ^%z(VG+u}6}UHUVg|0`@NyM^BRIkQWyis6M$&
zWQo<3*&J&%W_wWPC|8A|c>?WV;3JQZtHNLBJwea)0U%1baCA`4rU#b*FiC$EK8u*f
z_ayd&zU+>6&rP^3Mxo>#C-Ya_;6cC{S86g{miAY*aZ+C1`t-pMXL?4O@V+TJ;%z|JwJL)?1LtiRj;MtqWG|g=!r6%E_C{ze^F#Q^-FE5JmGujr+B=q61XU
zVVB`n43=R^6Ht0#O<_$7&iu@8Ll&4eXgi
z;3+$3fdPaMyc{uXaS_&L=x@GrCQ5_7Vb#>r)Tk-C%ONCS{~B;Ew5@VNZD6Cq)bJCM
zh|<;`3LvN;|P#hVy3QDL?Mu(sk$CIR<&K@(0JWI8a>&vYpR>RpP
zY-jDo%P)?{OI;*E)q3R8UwaGTApQ~@P0SM^`v9LVa>asiMMV)00cDZrgi+`ywUro9
zyRC0DGkjuAr(#kc3lY01$+rxltf&H|_n!PMM1_e2alc>L)h|9?cbK0U7B=ueuL%kY
zr20(YiO=@;;0sNK=_bjLDI~FQ+rYxoS~incMX)$h@8!`4A3)`+ki)BVC=e#czuU!}
zL$hGDjIa6j?I~X#)U*h%2ZFcc!s$jfHha4T`B|9WC%R|7KNb3!5^HLp^urZh7VCwg
zjF00?+EuA6aP=@`a#+|=CK1-hOMs6RwEF_DRX^sj@Xq5IBDvhelqlI6IIa#_pYO%O
z;58ea?zeGJE5TKm81Sd=tVNiYeDBOS3W8Mpf?T3^+kuc8ynPtATSjt%b@mC0|Nue(WEest8a|(uzlcL^iuXfM-o?
zjj4d>&i;;M-srl*dgNG2LRv5GiHUV8o8fP{3)~b8IEenLjHFVRCaYm~F|f-T{bf!n
z=u5C^GQ@$yF-hl#;K4Au8aMDJzs5pVXLbN`I4~rxZ*EUR%r%4Iu;F%OKLh^~zJPSb
z*EF+6M<;g2o4Fc&Q&Q7>D;TTcs#1j_CxPOgppZafSHkoqY1}Zc(|TP);cdtI-(lC3
z*=GH`=^s`K7AEl5(&8fqeRy>O_MIx6kb~qv
zoq(VDP=d1ye^33hhs)-or8z7<5GDA9SM(=VYB$#wpbw!cqknz?ALw-TjE#Vlu
z;d*~YVSYOHOG7h73pz1kv5x=+z>#*6B6wCnGruD@MZLbPRQM53V?(G(C$?TGnaU2_I5vXRE7gVZ8{A7)>!iG&g5C9IzM(3r4pN
z5RFxe=~RI9qoI2`1trpg@p@4
z$pwQwkPqj5w-LR6`)~Ta+Uu_(ysFoqjJsJEnAilx!0|Qx_GSu2KI^j1Q`6~LJQe2A
zcU8@#^XrNqzP_&gB~Xv!d-IQ!WwZi}w)dZTpSb^{TZ7Em92gm!nq!5@N2{y5JX-Q;
zH>#5frKMqfsDIiC&4mO^$z|__TY8$38&>SY2rcwYfXHRB{NlPLY<-;d2%aN%$`Re>ZCg_u=_zfJEK?DSy9$prw=zc_~SFIcl
zSkjF^Z1#akl^iSNIjkK$x5gt18#@Y0wnV5%<~{D)d~@^b1?j`sto?(}__*Cn3=>DA
zO>D$g@8l-TCjV}!O4exsfZEvD2*yW2af)h#r?+o7E@}1?A|PUe2?#7zN`BCN_LWg(
z;n>8&r63*r^U_F)P;fX`cRP6P_Sv2)h)4(E(xm~`)9FGz^$XAa_QgXyoY|Nga4i6m9%B7&?B
zG6sRB!W#3Se%%2@l8@>}__aB#z>?-deDUIom+JGJ=WDSjlzBAU7IUhg##_u@ivrKW
z`l%}rmg5ZqXMw_SpGCnNm^P50h0^o_?1tGWkC-VcENX`b;pAmcaFKyPaPXz|N!ERv
z7^iEJ|M6ENL*qrw#dmS#_s>L>7+zzDP!dS6Q{}UWhI5orUSVkJON3Q)en)9c|B8Z*
zWkyG?@NBpFNFnxc^KZAmty=8js^>$CP3kgRT6cF~N;9wh)<6QU$r1nGetM?0P8=ccTbS|n8d0`Ov-M{pLJ}92L0`k$>FI3SD
zR;pZG$yKc{n;y`doF~f93WtNz{bBLmE@eYQ0+Vyh?|4ox-$uba^G`n=!rm
z>Mvf@VB=0Z47vr?FRbmDCdS5ks^QJ8@!3;BhL2~VA8Kh<&nu$fk|JL
zIdU|4%qGWlon3Yj@kVO6GaanlK)QkEoBEdKb@}v$y)u%d=TpT-?UikDts=
zAx%;@dXQ-F;PqJq=}V}1&|4Z04i^_Od@4D{e^^%`CGz#=`DJqQ$WNh(xx#WEbjS{k
z81}Q$E4r;9o7YD>H1F(REa&Ew%l*cisjugdO@ob@%lm+yeDC4U_}pYjyzcWyG&IYR
z&7bhd5MmjhdZTk~T*Kkqg3Fd>q<5UKaOoKmc)3MmHF=<
zLJQw}dMF!he8scX5fQ2PrA7)L4SV;c0;=}8n(E7ndKX3tgU0ON9?By&zk9FqQBB)0
zC7;(}{}tC3(yXS>I=3|_&~v_~@~!q|V6sbxp5PxC9~fsCeVJ2qVy7%>s$Coy!B!`{Q8|x5
z+aQJwfS>*H#mv+gMz4;;v
zWz%GoRYrps7!ei{<`;3kYX1mlV`oerclhShl)egDlzWD
zRS2UaeVx!AGnA$`R9R6Sa)ICWl|dp;ylB3@ZYz6%VpsY=Y=UKcaE`^Rrnr<`Wo=u1b
z-HYRw=o0NGLx%>qP33Imcyk*s^D1?}kui=MwSP{==!vC|KF~VpxHcgZDY)Idtq-#C
zY4RES#*NEs4I(4yB?XsC7v`~XEcF#Xxx}A8%iL>0L>_Ex?3hi;vapnFn}5sU$(8wV>}}8o
z!qBVS3|C3ecVkc8^}*G^y+K%q#PeXzOZ0VCY3bd!XD*`Qi-hchcU#F02m5j5<>ijx
zc#494ZFQ3!T3+7zAWSI_4+nFLXHrs`>{e_US*Cb+dUuqKE@ugNZh_Ofioz)!e%pyRmT#dHqeQRj`k(>88|pOk7SagPjBF&>8Gl$|C})$ZObV-
zqCX^88lkz0qb`=f_&IbTz`w4k`GWXthnrIj{#)Jp`Y*F7Z-KwRO1!9iU`XDQ3iQp-
zJ1_Gg`^jVAs(9X275VxeRatz2BPBP$#WCDG(zdB7KETwX-WFX|i;_VGwX>_z0=?JEerinOqMxdj^b~=it
z$Y+WvbLWgh6MiBejD>@+@GQ=A72ps4X90=hf4Wuq8_P^dt$d7+*YA(Iw!YE0Scjc6
z{#TP)zE59&68(Vae`^7l+03nPS6_g&vo7o5GGSZx6zp)p;mBsoByW+pTHJqczFJ2bmAZr%NwrGJp?~}D}6uokrJ_UfOB5S!fwrH
z_A|d6Uz5b}Kg;w}A$Bjw&d*M-);YcJE~>zVbj)<`_GId-i5Gl`cDdBJ;&Cm%IF-!7
znm_Tk$uDJXM7g^!lrmO7+HC64@FVyM+!*v+(gsu~1#!BOZPGv}j>HWvEB;Bs^HQN-
zFj6rB=pOyPP45@(JJB!s(2^4z;9s|e9LX$k1)t8CGFL`>G@eU6;y=S3;8S_Jp47h^
z+;4t3e|f40qZ1eq9+C9+ZzR(=^XuUy<^u~?+s!T;5-av%CA&vIS`J|tdHLA$zrg{>
zMvUDKvf7~Q^St@F!?~BXn@-Rj2i{xdyN*z^vZePzdcyN=RP&XtI6
z;c~|6PZf{hJlU6vt^{s-Hb$u>x^MwS509@Cxg3M8bFjt>u4
zYK>~+qrW_sThdL&0886#Y_9lQ>Pn@>2A7^}Fj3w9gtT|ma(Nfeen);N;=TowTwb}L
z`{qohB6*owucJ}dkheq7#zlXB0aIt^zB0Vj|Y&u9hyIx4-
zmYBm^N>erD^~mqoSi57ADom+&@0PSZ<&HDVe*F@!dsP4jMSpL#cywP+oALKoUaSvD
zem3dkNOU=86{a~fBJ+U(Vh9O24I|hw7fhX&PT<(xmb>479}$@*OYxSGQS5BfgTsqx
zqb7|p)|cI~efIu;!gkET;evoLI6WOaxczh)KH|{gRXNc&Ee8Nl+n%TKoYm|T9e$c@
z|NX-N94v&0C$0QBz+ZQ`+3T~Uq~6!BqYW-Vb)mz+MzuR)-_haKp;C0bw^thOCnx7^
zH{$J`=p}$pHf@kA($#Ca>Wdg;x7l!5w^vC+Ba+Nz@MfBGK3(5TB6H-_I$tU_D@)Mn
zh{#()IUw~*I_AUMC^3orUJeTaT7e~_T=A-pg8}y
z*-kDAg%|F~L7(`AbSf(xDkj(`s%_^gUQ3GNi)M10th2C|;d5UTiro6YoO~%hq(&Nn
z^&9(h#w!&>6~7Oee<~cL9HbHqgM{=9_56`psYoJw@^gY(7D
zD;yFJ65OQGY+N*0DtFD7fcLL}+=9>|Q^^3b#kY%3Qk5Q0`px&gz^uTa+9n4pFENug
zTKMuQ3&c*;qyM>vV
zu}cqAE_85EKS*dmRaHK9xVtUAItMTIOaEXGhAoHM=H{)m^cRh1L~jGy276LXO!3@Y
zbQL}$TT@fbii`gtBNKr`IA`;q#72&1V&1Uj?CZ*|e#r3yvzN+ehLiJKrwEUzsQb&s
zryvH3_}ZL8slM^??y+*ChKTP&qN+-iig`Z4!J}KDKigK66`#k&?{IO6Bqbpu@nR6N
zvJy^AtX8pQ<>p2Nh+6qbBW98!YfwWcm0c
zrN0|_&w+dz*dY}g%T)SjV@=QoV6UnBL!62N90W%3QdgHJvNw>M
zt5;uNeX%)vbf@60pt*nm)~m+j-Q8UUg}EO;KtVk=K2F9l4f26XBO9;Y-_Z>X#Xo*L
zPdE`BkAoMe^tZabF=2>RNa8)ZX-fhdu9n5j=+9^}W7A)K8@l1d_;qz@#X=Sq6G%vf
z!opy>fcbXU6X}Md`i`PRlE%{WPI-8|oq?@WobgiZwX9K_kYrkBNlBwnDFr$BWczOP
z{q#S57N2Fd);CXg_rUx!Z1YzQ#Sa+T8`Dz8;kL~Y93-jo}iR)O>L2nx5Qrqg;S?z}wk%PoZw7J(LU_j6dnqS=L7JgdWR
zMKxeuv43kcCpqnZaT5ztd|wvNf|O4jE=r1?LOQV77LYFR6KW~USzh0uT*xkJY>cSq
zzE@ZANsJtmQ_8fi)uvHbc0JpyP$@p9e8eUhMeBS2E3Umg`rchjGch_gR_gQfUzomu
z9RulOJ|^emHAE}t!i$rE{7p3*am)TFxJ=;X#AO|>_9j8(S`JD
zd1e0qtw=}rv*T=&JZ=vm
zW0QIYrksx3uiZC9LgrT+z{db5VX$xC^CJitr8@(kOQyjJ`>{2-IvkY`VX?`-3Ayxsdo=T}2pKxsIbs$`$syIBqek(EhjB?1G{+1LfqC|K0q2c(MuSk~RxcwnvT+6vr>
zZ?RU#C?*`Ag5l;vPhAQTyFh>Bm@yo}TLZAK!G(pDyP{$Yt^zd7h!7&gW5K
zqyE1C?kxtvpq`nU1sTzKpc5_rOtK`#G5n+l59z#|jMuCO_x$tp=8FVgBqx|W)i-B%
z@2wBcw%+hQ&Hs+2#C{I7*q(3q1O<6uBRrpGz=)*a@VGrFZl+=>iDl4TeFzs;8^Xiu
z&6IbCi!MI;KK+F-e{j5sDd@Y3ChfkKs|>AeZ36hy*nEGi*p(FfxieU7iv*ILwX9}-
zRT_oIHa9P1h+*MLE#;zBHUyIFY%eRRNN{llvJ|-=ljwG$fH>PrApxfptLOUmTg;VR
z?!$QJ=H`Bpk$1dvL@wI;yH;s9P@?VS*QEVS%j4mog%2Yj-MZG#oUOP{jVvPPx^ULB
z=JfF)J0jxSVI}SY4$W(q_2u2=CyUVBVkG8gc{wy
zT=$?A-YFXILsedG=9%jQw#V0tc_oD|=}zLn&+&IXXpV`~@1g@oy7X0^7VCG}hddWp
z8jkjT@WUE>#j%
z_Eee;;nKNZ-)w1P<2p(3OJ|1FPZx4j2gRr)f7jpIBpXOB&MoG>>_pvLUJlF4GkSr8
zmBgvfWIWu0O)ZOWL7fjuk{Ac;k|bZa(4GPrF|mi8?B51`C>k2(syol2Z
z3jUZXn$aJ(Bblh6`7K9B85F1+VZKVsow|u@J-w`YiCp%YQDACNnhO1QNBdXv>0_PV
z-}EnDj2Qn^eDBI(fmd8L>GkAUebf{g)M4d#8@U6ZPepPzV`Q@QvG343M(q!vQD^Mntv$nuv+|sioeNal~miz
z>nD=$dd*;Qu?v2XZB9X!^4}(&k!|ok3Jy@w)+SDf!FJvEJUdJ
z%jq|wHy4C?(AFy1&{$bm0FR0~gZL6lv*FtK_WXEUaiaG=S;2niS5e}^I4=FMlJR3e
zE7X!98h(Cvu~#T%=jaHMeMuaN;qmWFmfX6nHASObuV?NqSsOhMrqj<+`Q@W&_hRE3
z&~o+z)PsMpprSNP6;-}O)_aZ5-s}-yXS;E?)>TPMQ}QFa{Xn6zh4$Gqu_cc#1|~eO
zv#i`=D}YJ`MMQ*W$vl;n$eJ7=XM&`N*y|?q`w&{4ZHLV)OYE0~N+X%g%L60~3}#!~
z@h2itkQjfMDw_H3|5B@2YiJ}wMN<=aUF|6zc)@v71=Hnab*Ypii!6n#ii_{~jweb%8(x4-Oke|j}o
zV{}6Ik`4p2i4PU%%j^C|m{aoI9_qPV=n+8vwJo$p9V(sCLzLA$N!Px4Av)^ODKoj~drx#PigNbb#6+>fV
z03_j3pPqfW)ZAQ|l0r&Xv_8uk?)PG3vw+9VTi}h`A;D~0Nuygn(I=XEm-5UMh*w`2
z9(xwfJ4u1|4L%#+mAKL4-Q^0t^V7YZx>(O0CV8)(zMO7Z@7)yuQ5Cmve-JQ7U3V(+in$jYTfk77$p~%&^@!&Q=7l*7H_;2Co15itzfyXriw!GRm8_y$xHXYumB4M
ziL7$aD^O)Mf6EiLuo!B(8ys#+FV+_h{83Xgiq9@`f1z@kCj8Vn#IMP_&tVbQl_va0
zG}Fv1-$K`>Z;1ZssF@Krw8kS3hvTjVCiXLn{SZ;GHw0NHah4x;1cS|#H-Y!4NeAZd
zSgz;&m-)p*7JZTCz~@kksqwYt+~rE^GiggpGr5RSS5a}3?rw@E_Zd8_9PT%NzK||f?@pz{aUZl#wpPWr44|TE
zeXL+BzooQ&7AihAGC5ObtZ;q0gL|m)2ZM<)RD!3+S#3d<*=F2GH=P{D8%)k0Gkt9L
zwL7Z|5_2);!gp^+$!-@7f)r2JRDy>azJ6}G-fwkcCt7GocIS1UR~+A*KX?I^xQvJ>
za#`&Z5Hl|tyl<4GD$XsbE_+A85TtfHPhPgv7%7pN<>`5iL^%iasuKer!ZhgUKYBe{
z$_{ffm)m7!mA(^MC*mYM_~B+e*b582m^V+1&ZPv^Q+nC2$mC-8aOn2o4$eEL5_|5O
zm(Dv`&grnCorcM@w8>Th1#RtpN{Lk21jByF8ysV{uOb{n&zr<~mREnLD%kcyS^0`w
zrfA1wGnj-ax8itT)xWg#0ZU1E8?`Q3QDy-09{7#~$zI5o?z8)cRaW|kz0_icNU(#n
ztd=}$y`IWNM5^K7_OvLpKhSO3GCLhMaDMGpeU~0wRdvSJvz%hmUVl_+5Bl3!N`6g3dM*t1CVlnZ}`G
z{LL>?uJghs^D%aR;PPz!PJtO2?C7{-HboWE4w?pacY}{{OZGrudULnHE$O!5bhsR!
zd-%coIFvF*oZ0Kp-+Ou;7ck_%N%NZl`b{n
zdoFv+S5nB@pQL^7QrI2HX+nlbHfydU(ZBHZ!*|4oJPh6{kqfWb-
z8393MVL{t!&cB+VRtOg2Vq4h7+xwyp2Wjb4vW4t^y|Y}%bNnt}=&$qw1p?Fht1%O4
zw)@!JTeVqrrZQ%5syf3{0eSAs4pXgp$dWN$rGid0M&H~-e#Drfta4ygMuQlPH^~z?
zphX1rO|ICKq(?kiWY6umzd&lp8!iMh%za{bh@MGdxU07=ueVOziJYA#FciFq&xQlZ
zm&pgdkW7o#0*xk>aT0i_v7etOCeVn6cZ%wXU%Nvst@;=!`ufoJ8*+7L9`q?)I~QC#i-`s}STlI)uO@JIjEr<@Y0>HG
zCd|)YBVn?*!5<^X#UF*dY3u1>Jh?o48eq50tze_vnYq7N8lQk+j3mj?h0v=i<^iDI
zJvR1%sqE8-4{k?Vj*e_NBLbNte`s(0+Z}Y%Z1PVv~)W
zZ=!Ou$B3uDLBq>%RLn}RtNX;NG&YRBAoaR(C<$9cm{U65kkR(5i@Et}tDgXy+i{)4
zwz{0#U1CcM2=KX~Pt4X1g`Vfzi|s)?PDQitf95#B!fpJAv9s4)_{MD1TbH$b;>uSl
z1o35#F&>Oq7nRRy!9HL5W94|T%Ff0$@aJvJ=O4uyLBzbCtLdW3z}089HjE)^4N
zC6n>ELYMVUPF)7QXgU#Pw}Hu@iV8M8oYgX&F
zK3)zMpD_hf|5zZzA$g`4~0x`%V?8z_bj@|frG@tVzdmghZ@5J^lQv1Fo}&6c#PWQd?M
z2gIOSV1r8s@hJ%ifCBpESk{f@!fd=H<7pVtv-t!L8+>I{4Bfyv27lzp&#F}@cXQ)I
z^xM5rNfH@$kGB$JSXD7GxSDnEF@riaYxt%PswfH$K)t>-bd}7554l%c)E{nKxX!Un
zxtvuD48SZe_`ntV`At_w{}6KO43VP>LXL#I$CEvO9Xn$Z^OPaIM1YPQ_KKXGhG9sS
zua;l{Q-q~i_jUa+?00SsszW0@dJ|)9RMc2`8H%O`)bbEOtOo?3s!jL71vKY{fOj*l
zqjg;W%&(s=uM3g5oaoWo*%d40|Mtx1Ticr&uv(m!N(!+L7QIk{y!~V7?OqZhf3y*}
zh!e&0#YjpDV>xqNYC50DU)rC4bKKSS+OG1U1lC0~4DvR+f?j=WoXIxz89DH`ys7&2
zD-RJZq4`k_Z2yAl`1P0@wl|T*%{V19sZNI}z)wmCUao*u4n
z`=WWCqd6t8Nl~G%6Z6u=eC`wx)$PfmlkoRoqz0@L^h}hyRc-FUWXqv+D#F
z`V|JHBK`I<)?p{Xm9mKU-xPuP+=?u7q=yFoprfay7q$(5O)19u-sAdIRaEOK(BgcK
zf$1OE^4?S~VLM}Qx6b3~;X0nZjhTsTzUklBF3#Hg`^~CP@+uRr^ZYY;-j7V6sdrZ7!Vmd|QBzIHAop`X}Xa_iJmK
z=d-r`K#%MF;%|}1W5UB>Vrwas!u9s8!$$9vdi5j-N*>SqKjlW)mdqcAnx3?V$Jd*k
z=-axVTkyM$4UfL6tm=G*$eYMh529&2cm-`86!_Qd5`@&$XBh9)Uc7jw8C*VYD&qri
z*P8R-gc6#yOlDVy(N{-^g=!n+Ht#N@CjKx&vhEwmY*qB@*0O)fYw8VW
z`+DV7iu%7)7j3T!6PoR%^u?Ss34rApVlbYdqEQdHs&hbYllzvHwMwmGe{kTzX4Prc
zMXDJ12c94G9fH-g_hX7Ih4D^oYhM1R2)k`r5RHS{UZ5c81z@NQl>s617$(D&Q4)l!w`HJ`>Gz#&r|&LeR+%U%p~AeT>yTW$5WC&g1YAPNk@wg;{4u9#vEGen23DxO41!S7~!F5uvC^%WRUuVmRI-5Bv3n
z1Pd)K^Ic(k}`X{*!SCBQz~#zqS|L#e|Cf91LieRzIeCmgYG$!)m)(dWCgkwKgywEKEF%C@3%B%jS
zi90U@h|G5;n+;ZX%Lmdq)1JFb0w(iQIY`Hp$-p-DGfivt%4v;+6YY}Y*SocIa!C<(
z-G7KHPKO*zaKyWllkUq%a+D+h$Sgr-5wa)P<>LYjrS31pJ1}3Un
z&&0&ULJNZrt+d(1L4Acf80b2@2ED8@LqL&~3>-S^Vc&<0jEwd;xh~nXks!;n&5ipL
zQC-E~LL?3ndZefm_<}JU;%Mum!
zs^5z>D`0%Du~7IjVZAlT#)c;+E2~A}PDvv9uXdPYh2*gaH4}dh%V~zbVywWyf%UE_
zL^TML&F6UrBmw_OAqP_*a+x1~QQ;>x1cSk%J
z4MhiaxO9c>%+4am$78eTuO1LaB-5{)04>GR{wy{=Iv^gA8$km}ZgNEExRG|OT?k+;
z>Z(B&ChiyFbWv)E&qi2Sqk6@<-v^q!hFC&Fj^7DZJ@uu5v{Y0~h+pwDn+j2AuUHhKkI1-tg2Vp2NdFBs=f~@Jm({V!$shn2A0MTPwXl=81880N-6IldF@pdj
z17c15{&LQLd^|!lY#G0#E;~_p)w1e3w1z`5LV{Z1|jl|?U|uf
zaShn5)O;v4dB6ftSIe4_o&KmAwgQY>D3t#y8IyZbhl
z{cv^If%fq~k>w)*14*m*0ZTyVOF}?gXGNn(b&hKG70);0eI#&+#)6hlxdsnE>KmFP
zLu20x<2j^^^aeXWHI{Gp5r3kRrDJAi)Hi05M3DkrjlNQRPBBYFjS`3u-+*+iOc0?#
z#|J2-*rEgu#@jc_L(7K9)VIpMD%D;~DvNCFo54u8Nd;qdbk91(x5tGJfZp*m_cY8Q
z0Lv~uJi0BE8(q`#r8dmeo^9M-Kstc$$HTp1_(*{NdpD>kG<5BJ$IobRoX0Dy4&iM)
zs%>pip@kJM3?v2TThiXX#d|Mnd!W`6MXe|$1)w0*h528&^ppFZG+CuK*^yZ2EvFZu
z#JrCkWd@PSpOmI`7fbbH=c?!Y{3t(G{9JmsX`5^BDr8xt_&#lKTc?`X6g+c;@Ql^)
zE5J%)o!yuT2!Ik%g&ar|A~>?MFB#TtZ|=sj!JD3nn-8T-Af5F?OH6`(7DktHyRCXS
zM1S*{Z%wFm_LLXd$$(}VUXPLb95}Q&P%Rp!Sc8lwNrpV5dviVQ@2`c=@GldpFJY*t
zB6#+TT1eak59k<$K@9-s9o9>oIr%=&_+&rqg>==}}(>?%5ur`virKokkG
zq?pgn-Wj*qYid#^hj-LLP}}gZ`S$SccX$wDn>DhA*mz{5C2WE(pd75-oVUbFiviBp
z#=|U&F^+XMvy!yXvHd0A;~Tx{lvFT(o9GWhcE@y0;UJloE8B}Yr*k?@-=fsiznI4m
z^a5{ea&)tz5{Si1Mj|_}LnlW@VIZR9fQN+7`1^cNiOGt8)DoTOj-3l^6Pc!hZs>8DnMHizOIu$0?uxYz`N|a1w
zF)FK0P0g@Zhq3uyB32Qz^n8$w#=r<~N?*$eKm*0gy+4A5ghXADWp8g3l!6Wu+C|3k
zr$=w%19{*3SND9vCsEWrypP5huV1@gyNY
zUlV)TD=IOfpaSSv)x5xTz*zmumr%lg^0~2i_U+hEgkx}v&S)atE6ZMfMZZVqqns7v
z;W1F(Vf{*#fQOBh%^|hVVh8m9)u+3VqI~Y1k@TbqvT@{lq_>uB9!y9TIfX`t&M3%H
zv-G5Chco4~?LvV0KgK-AFnL{$=nnVH4T2@(e^>RN6*zF|4{~)Xy3?uU6o`>EI@
zp&~QaFuStIQZNSxkJJf-0N74|p3yJml&S&?NBrgCmNulO^+Fb
zQm^>KHI;E|a7N}ZS_He!|0|So+k*+Uu!9`%QXzXXJ7fH#i{9pz=&(OP#^FOl`wxXh
zhg~R9GXJy64ybNIDcR`(3HXwR9-1DG)avhXfL?S!svoB1b920kMUK&Pi12>!GlB%O
z1e9Y{gb2|ZZnc{U+VMasB+O6=OXX@s2NA5a|dv8Omw_0O=1<*i0~z*#uV@x{C@Uryz=3ri|B6G
z>&MQoaXQ*zUn+5TKj!axoz>LDmkH+BGW%q9CXBbqR2}EJ&GHZIX?;Grn0!rWI{p$O
zX};o!N=o^ep5!A6*14*%-1AMTZDdc<8e$KlE&qy&%U`c(U>d&-?mqFttcNwwcLBy{O%oH<@5l|2L&z&nGGf
zTH8VqQCh5W1H+Gi2r`~Utgl}({f>c_o4xuiYt+WxoO%x{whI4LXD6s%kC)O|1-T|C
z9WlxEYL7}EboS6UY+c+`-)L$l&v*!v6Zv_*hB5?Je2r*QD$w&07ftp8%oaxOaHb1^0D$)G;t%ImR
zW@$Eg6-MFmUoPVP>PC}4fi1I=7Wj61dAFuMp942MqIxrEEodbX6e5d&&;RlPCZ(xX
z9o@rD0u$2dx#dZihaoBEAnubyfGBKuZ;>A&R1#uT60D47YUgXB=9J}BO#U*lvoVlP
z`{(vpm)X$dQdt;VwnQgxx_3W=3hDsHkMAeYLw)EN^H#TnO$eS$E_n5~wdmD7BNzj_
zJ4dJ`K)c%}>Nn)AqH<+=W{4LVL`$>9&L&$`NgoPN;fAr6O$*a<_;#c3rRX9>&=kweXQrlEgGe985yEu+4yy}QtromCZa=M
zOKITX=6(d5)oqFZR>#JkMM|RY6HP&RXelF?>b?qK@KQ5fUJF$OEVHvkcXgVotIdA*
zr*il6x5HxFB;tZ!ct?fBq5#ksfJ~2g!%U-lNa&^th;|MR6uR7E#L8F({?@e>%&%B_g6}kQSdl;@+w;UkGfd1v0H%0pgr6SkspW51101<0YB7Ge
zwYA@}|3pT`#CQ#f+=jq=UmKlFM`ynYVyf+*s~kH6syT2Fd=GsOeeUhGa^%lTc&K54
zYYv5wLs4Dg&O}6yy4vn1eKE(Api2Z`M59!O;$yW8o&xj@~au^=+*Ad-Q)3
z$r%_fh0yQL(|_qFwZlTa?*9yX{)?826R51kcHB#2&ajIBMnS3De4Y$+?~yseHdwTV
z*Vce9?~_Zn2MhK8sJSyuRKMs1??Wj7r(WAiJ|L4CttvC6rtIN$4AIs;YWCvAVUj1p
zk1y5r9mCZI>g-_$`{{pL?u4H~LZ9N<*S260tmXlPr)*S~wll_R|L;{!uX_yJJsdW~
z-{=^r29}l|tx5a@asz{@n?2O0{=!JOp+coFFhDdt35a`X=~q4}bey#S>qwC;(SYPr
zk3GNq`8_mMRVBUG+Y!!y_PnJ`?e706t@l4CY;6NFRZw4hR9lQyRTPMcyO!$*6#2qc
z7Zk|M3SuSkP-6z)d7ViOwFg;bW>(+d?~_ThTwF|)RvygDnC4}ru8_=|rUSJ;TcfAN
zC-<7HRNb|{m?N2_3}fSv+dC_BnztSUahnA+0ms%JMn-tPe|vgdylyLg4-uERb1Gv`
zQSZ`2l@++)8iFx{jN`OYy)Nkczq-38}cTA*%clc
z!O+ylHkJAo=#Rldb~dp&fJFsXT=kfQghsFCqD0MP95}MU*fC`d^VNgIUH>3y19_LM=gcZr#q1
z)OsgS(c>oY%>9hpn-vQ~8d};{;Ro-LA3$PrO5Ks%5Pt(!#_b)ZC?@nZ+_$z>Rcmtm0
zcG;5ePiHE`bTLBy8}Eivac{0@9_Fq40yQ$F6
zHJ;X+*n#9{ten}BCya5FJ&q~M4p~W5!fkN8`&~?U(fviX6`<<=9$nwf{!^51=ZB}}
zd^+@fXuKa=%(CEVuxJhZnby0yHYJU>`^J;U#4vgG|IhPMFwh$KEV$~aW~Z3;#XFqW
zyKl5Y>f24$`cad8H;s^xL6RhlI{?T@P<^)?u^*0oxbS~;&~I-f6~@5)Kx;8@fQ7P3Pk`b@>;8J}E|R=dNKY9^L`8Ri1RcQ9
z_R4(OvgYK{1P5Xwwl<@M4I*`?rPss2q@n8Tq_>vuV?r%K-cG8)NUe(
zc)gOjaJjZg=yl}!^K_fP_Z?JHUICs_1~#!zl_OIlPaX$8|12vtp2!v_#4P50t5VmA
zD7J5|`$jFA6Bn!R){7y&^pU1p8rZ&b5g~^CB)Dh}Bc;>!Zs`
z5MqT!e%>bKaO&SfMyP3}gbpSOApIREv#3*i253wr&eH8gp+%Ulr{o
zWeu7baa0WrS3_@jC{__H*IN^ly+Wjf>guZovp|9wBr972ly_?5iAld%j+uI-G+omBv009EwJe=~BZfXht?D2gL
zFvoGPD5<>QB&aJY0>W=`!B#(lm(^(k!}F3;BaEl#il5bjvkNPJt1D;iEe|u_&_dnq
zt3Yc9%mSw;a)h$Qt?wbe>Cx7~!O7tfT~wlb;^<|?1&N$SMhu`eO$2Ub6UNK)_hn>j
zPk0k5J|tj;res#2iz#<^$1)sBrGGf~LUoi5ODUBb8o>yLKM<4Phbhhy8EfGi8j;J*
zo>P`@rKQgvHU?mRZ}N+F^BTabSLOtYXU99cTwGG+sI^hSC%NUS^E850J1g3dhmgmp
z-t&v<`;V`JGIGiS`}P>v85MFyZcf^{XT_-`cJS~99S2dQHg0Zq<91E)OwS!qZ)dnJ
zCcR#nC}^mTjsmT+;f%U>^A}P&nkN#RV8TMe;jjJ)|NmX
Date: Wed, 25 Sep 2024 08:00:54 -0700
Subject: [PATCH 190/288] BIP85: Update/clarify spec, add change log,
 Portuguese language code, dice application (#1600)

* BIP-85:

    * Add new maintainer (author unreachable)
    * Swap chain code and private key bytes in application 32' for consistentcy with BIP-32 (major change)
    * Correct derived entropy for application 128169' test vector (major change)
    * Clarify big endian serialization
    * Add the Portuguese language (9') to application 39'
    * Add dice application 89101'
    * Clarify Testnet support for XPRV application 32'
    * Minor grammar, format, clarity improvements
---
 README.mediawiki   |   2 +-
 bip-0085.mediawiki | 100 ++++++++++++++++++++++++++++++++++++++-------
 2 files changed, 87 insertions(+), 15 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 170b0531..d92cb786 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -452,7 +452,7 @@ Those proposing changes should consider that ultimately consent may rest with th
 | [[bip-0085.mediawiki|85]]
 | Applications
 | Deterministic Entropy From BIP32 Keychains
-| Ethan Kosakovsky
+| Ethan Kosakovsky, Aneesh Karve
 | Informational
 | Draft
 |- style="background-color: #cfffcf"
diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki
index 633210c6..9534cc92 100644
--- a/bip-0085.mediawiki
+++ b/bip-0085.mediawiki
@@ -3,6 +3,7 @@
   Layer: Applications
   Title: Deterministic Entropy From BIP32 Keychains
   Author: Ethan Kosakovsky 
+          Aneesh Karve 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0085
   Status: Draft
@@ -14,10 +15,10 @@
 
 ==Abstract==
 
-''"One Seed to rule them all,''
-''One Key to find them,''
-''One Path to bring them all,''
-''And in cryptography bind them."''
+''One Seed to rule them all,''

+''One Key to find them,''

+''One Path to bring them all,''

+''And in cryptography bind them.''
 
 It is not possible to maintain one single (mnemonic) seed backup for all keychains used across various wallets because there are a variety of incompatible standards. Sharing of seeds across multiple wallets is not desirable for security reasons. Physical storage of multiple seeds is difficult depending on the security and redundancy required.
 
@@ -33,6 +34,9 @@ The terminology related to keychains used in the wild varies widely, for example
 # '''BIP39 mnemonic''' is the mnemonic phrase that is calculated from the entropy used before hashing of the mnemonic in BIP39.
 # '''BIP39 seed''' is the result of hashing the BIP39 mnemonic seed.
 
+When in doubt, assume '''big endian''' byte serialization, such that the leftmost
+byte is the most significant.
+
 ==Motivation==
 
 Most wallets implement BIP32 which defines how a BIP32 root key can be used to derive keychains. As a consequence, a backup of just the BIP32 root key is sufficient to include all keys derived from it. BIP32 does not have a human friendly serialization of the BIP32 root key (or BIP32 extended keys in general) which makes paper backups or manually restoring the key more error-prone. BIP39 was designed to solve this problem but rather than serialize the BIP32 root key, it takes some entropy, encoded to a "seed mnemonic", which is then hashed to derive the BIP39 seed which can be turned into the BIP32 root key. Saving the BIP39 mnemonic is enough to reconstruct the entire BIP32 keychain, but a BIP32 root key cannot be reversed back to the BIP39 mnemonic.
@@ -51,6 +55,9 @@ For each application that requires its own wallet, a unique private key is deriv
 
 The HMAC-SHA512 function is specified in [http://tools.ietf.org/html/rfc4231 RFC 4231].
 
+Application codes may be arbitrary but should be semantic, such as a BIP number,
+ASCII character code sequence, or similar.
+
 ===Test vectors===
 
 ====Test case 1====
@@ -78,7 +85,7 @@ BIP85-DRNG-SHAKE256 is a deterministic random number generator for cryptographic
 RSA key generation is an example of a function that requires orders of magnitude more than 64 bytes of random input. Further, it is not possible to precalculate the amount of random input required until the function has completed.
 
     drng_reader = BIP85DRNG.new(bip85_entropy)
-    rsa_key = RSA.generate_key(4096, drng_reader.read())
+    rsa_key = RSA.generate_key(4096, drng_reader.read)
 
 ===Test Vectors===
 INPUT:
@@ -93,14 +100,15 @@ OUTPUT
 
 ==Reference Implementation==
 
-* Python library implementation: [https://github.com/ethankosakovsky/bip85]
-* JavaScript library implementation: [https://github.com/hoganri/bip85-js]
+* 2.0 Python library implementation: [https://github.com/akarve/bipsea]
+* 1.0 Python library implementation: [https://github.com/ethankosakovsky/bip85]
+* 1.0 JavaScript library implementation: [https://github.com/hoganri/bip85-js]
 
 ==Applications==
 
 The Application number defines how entropy will be used post processing. Some basic examples follow:
 
-Derivation path uses the format m/83696968'/{app_no}'/{index}' where ''{app_no}'' is the path for the application, and ''{index}'' is the index.
+Derivation path uses the format m/83696968'/{app}'/{index}' where ''{app}'' is the '''path''' for the application, and ''{index}'' is the index.
 
 ===BIP39===
 Application number: 39'
@@ -143,6 +151,10 @@ Language Table
 |-
 | Czech
 | 8'
+|-
+| Portuguese
+| 9'
+|-
 |}
 
 Words Table
@@ -207,7 +219,12 @@ OUTPUT:
 ===HD-Seed WIF===
 Application number: 2'
 
-Uses 256 bits[1] of entropy as the secret exponent to derive a private key and encode as a compressed WIF which will be used as the hdseed for Bitcoin Core wallets.
+Uses the most significant 32 bytes
+There is a very small chance that you'll make an invalid
+key that is zero or bigger than the order of the curve. If this occurs, software
+should hard fail (forcing users to iterate to the next index).
+of entropy as the secret exponent to derive a private key and encode as a compressed
+WIF which will be used as the hdseed for Bitcoin Core wallets.
 
 Path format is m/83696968'/2'/{index}'
 
@@ -222,17 +239,26 @@ OUTPUT
 ===XPRV===
 Application number: 32'
 
-Taking 64 bytes of the HMAC digest, the first 32 bytes are the chain code, and second 32 bytes[1] are the private key for BIP32 XPRV value. Child number, depth, and parent fingerprint are forced to zero.
+Consistent with BIP32, use the first (leftmost) 32 bytes of the derived entropy as the
+private key. Prepend an empty byte (0x00)
+per BIP32 on master key serialization. Use the last (rightmost) 32 bytes as the chain code.
+
+Child number, depth, and parent fingerprint are forced to zero, as with any root
+private key.
+
 
 Path format is m/83696968'/32'/{index}'
 
+
+Applications may support Testnet by emitting TPRV keys if and only if the input root key is a Testnet key.
+
 INPUT:
 * MASTER BIP32 ROOT KEY: xprv9s21ZrQH143K2LBWUUQRFXhucrQqBpKdRRxNVq2zBqsx8HVqFk2uYo8kmbaLLHRdqtQpUm98uKfu3vca1LqdGhUtyoFnCNkfmXRyPXLjbKb
 * PATH: m/83696968'/32'/0'
 
 OUTPUT
 * DERIVED ENTROPY=ead0b33988a616cf6a497f1c169d9e92562604e38305ccd3fc96f2252c177682
-* DERIVED XPRV=xprv9s21ZrQH143K2srSbCSg4m4kLvPMzcWydgmKEnMmoZUurYuBuYG46c6P71UGXMzmriLzCCBvKQWBUv3vPB3m1SATMhp3uEjXHJ42jFg7myX
+* DERIVED XPRV=xprv9s21ZrQH143K4Px85utdpu6DFvY2NpHkJajPoupAznfiacH2MC9LasyW4uvqKXNxLWcjqGTbHKAhoZoMAbmRe5g9tAPA7cUUX4UVA1vFKFm
 
 ===HEX===
 Application number: 128169'
@@ -285,7 +311,7 @@ INPUT:
 * PATH: m/83696968'/707764'/21'/0'
 
 OUTPUT
-* DERIVED ENTROPY=d7ad61d4a76575c5bad773feeb40299490b224e8e5df6c8ad8fe3d0a6eed7b85ead9fef7bcca8160f0ee48dc6e92b311fc71f2146623cc6952c03ce82c7b63fe
+* DERIVED ENTROPY=74a2e87a9ba0cdd549bdd2f9ea880d554c6c355b08ed25088cfa88f3f1c4f74632b652fd4a8f5fda43074c6f6964a3753b08bb5210c8f5e75c07a4c2a20bf6e9
 * DERIVED PWD=dKLoepugzdVJvdL56ogNV
 
 ===PWD BASE85===
@@ -295,7 +321,7 @@ The derivation path format is: m/83696968'/707785'/{pwd_len}'/{index}'m/83696968'/89101'/{sides}'/{rolls}'/{index}'
+
+    2 <= sides <= 2^32 - 1
+    1 <= rolls <= 2^32 - 1
+
+Use this application to generate PIN numbers or any other numeric secret.
+Roll values are zero-indexed, such that an N-sided die produces values in the range
+[0, N-1], inclusive. Applications should separate printed rolls by a comma or similar.
+
+Create a BIP85 DRNG whose seed is the derived entropy. 
+
+Calculate the following integers:
+
+    bits_per_roll = ceil(log_2(sides))
+    bytes_per_roll = ceil(bits_per_roll / 8)
+
+Read bytes_per_roll bytes from the DRNG.
+Trim any bits in excess of bits_per_roll (retain the most
+significant bits). The resulting integer represents a single roll or trial.
+If the trial is greater than or equal to the number of sides, skip it and
+move on to the next one. Repeat as needed until all rolls are complete.
+
+INPUT:
+* MASTER BIP32 ROOT KEY: xprv9s21ZrQH143K2LBWUUQRFXhucrQqBpKdRRxNVq2zBqsx8HVqFk2uYo8kmbaLLHRdqtQpUm98uKfu3vca1LqdGhUtyoFnCNkfmXRyPXLjbKb
+* PATH: m/83696968'/89101'/6'/10'/0'
+
+OUTPUT
+* DERIVED ENTROPY=5e41f8f5d5d9ac09a20b8a5797a3172b28c806aead00d27e36609e2dd116a59176a738804236586f668da8a51b90c708a4226d7f92259c69f64c51124b6f6cd2
+* DERIVED ROLLS=1,0,0,2,0,1,5,5,2,4
+
 ===RSA===
 
 Application number: 828365'
@@ -374,9 +434,21 @@ Many thanks to Peter Gray and Christopher Allen for their input, and to Peter fo
 
 BIP32, BIP39
 
+==Change Log==
+
+* 1.0 (2020-07)
+* 2.0.0 (2024-09-22)
+    * Swap chain code and private key bytes in application 32' for consistentcy with BIP-32 (major change)
+    * Correct derived entropy for application 128169' test vector (major change)
+    * Clarify big endian serialization
+    * Add the Portuguese language (9') to application 39'
+    * Add dice application 89101'
+    * Clarify Testnet support for XPRV application 32'
+    * Minor grammar, format, clarity improvements
+
 ==Footnotes==
 
-[1] There is a very small chance that you'll make an invalid key that is zero or bigger than the order of the curve. If this occurs, software should hard fail (forcing users to iterate to the next index).
+
 
 From BIP32:
 In case parse256(IL) is 0 or ≥ n, the resulting key is invalid, and one should proceed with the next value for i. (Note: this has probability lower than 1 in 2127.)

From e1aab46c6359fcabd77b8d3c2bddfc8045bd5cca Mon Sep 17 00:00:00 2001
From: Matt Corallo 
Date: Wed, 2 Oct 2024 16:46:57 +0000
Subject: [PATCH 191/288] Explicitly mention care around payment instruction
 expiry in 353

If someone puts a lightning BOLT 12 offer in a BIP 353 entry with
the offer expiring before the DNS entry's TTL (plus now), they may
get stuck being unpayable, so its worth explicitly mentioning that
people should take care here.
---
 bip-0353.mediawiki | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bip-0353.mediawiki b/bip-0353.mediawiki
index 9c48f911..ef4b6c0a 100644
--- a/bip-0353.mediawiki
+++ b/bip-0353.mediawiki
@@ -46,6 +46,8 @@ User and domain names which are not expressible using standard printable ASCII M
 
 Note that because resolvers are not required to support resolving non-ASCII identifiers, wallets SHOULD avoid using non-ASCII identifiers.
 
+For payment instructions that have a built-in expiry time (e.g. Lightning BOLT 12 offers), care must be taken to ensure that the DNS records expire prior to the expiry of the payment instructions. Otherwise, senders may have payment instructions cached locally which have expired, preventing payment.
+
 === Resolution ===
 
 Clients resolving Bitcoin payment instructions MUST ignore any TXT records at the same label which do not begin with (ignoring case) "bitcoin:". Resolvers encountering multiple "bitcoin:"-matching TXT records at the same label MUST treat the records as invalid and refuse to use any payment instructions therein.

From 3f4a0a17bcadaf1cd5e00d6065417979a4d2ff1d Mon Sep 17 00:00:00 2001
From: Jon Atack 
Date: Fri, 4 Oct 2024 16:18:52 -0700
Subject: [PATCH 192/288] =?UTF-8?q?Revert=20"BIP85:=20Update/clarify=20spe?=
 =?UTF-8?q?c,=20add=20change=20log,=20Portuguese=20language=20code,?=
 =?UTF-8?q?=E2=80=A6"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This reverts commit a1be309f91f70b855626c823af317d9b1163309e.
---
 README.mediawiki   |   2 +-
 bip-0085.mediawiki | 100 +++++++--------------------------------------
 2 files changed, 15 insertions(+), 87 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index d92cb786..170b0531 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -452,7 +452,7 @@ Those proposing changes should consider that ultimately consent may rest with th
 | [[bip-0085.mediawiki|85]]
 | Applications
 | Deterministic Entropy From BIP32 Keychains
-| Ethan Kosakovsky, Aneesh Karve
+| Ethan Kosakovsky
 | Informational
 | Draft
 |- style="background-color: #cfffcf"
diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki
index 9534cc92..633210c6 100644
--- a/bip-0085.mediawiki
+++ b/bip-0085.mediawiki
@@ -3,7 +3,6 @@
   Layer: Applications
   Title: Deterministic Entropy From BIP32 Keychains
   Author: Ethan Kosakovsky 
-          Aneesh Karve 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0085
   Status: Draft
@@ -15,10 +14,10 @@
 
 ==Abstract==
 
-''One Seed to rule them all,''

-''One Key to find them,''

-''One Path to bring them all,''

-''And in cryptography bind them.''
+''"One Seed to rule them all,''
+''One Key to find them,''
+''One Path to bring them all,''
+''And in cryptography bind them."''
 
 It is not possible to maintain one single (mnemonic) seed backup for all keychains used across various wallets because there are a variety of incompatible standards. Sharing of seeds across multiple wallets is not desirable for security reasons. Physical storage of multiple seeds is difficult depending on the security and redundancy required.
 
@@ -34,9 +33,6 @@ The terminology related to keychains used in the wild varies widely, for example
 # '''BIP39 mnemonic''' is the mnemonic phrase that is calculated from the entropy used before hashing of the mnemonic in BIP39.
 # '''BIP39 seed''' is the result of hashing the BIP39 mnemonic seed.
 
-When in doubt, assume '''big endian''' byte serialization, such that the leftmost
-byte is the most significant.
-
 ==Motivation==
 
 Most wallets implement BIP32 which defines how a BIP32 root key can be used to derive keychains. As a consequence, a backup of just the BIP32 root key is sufficient to include all keys derived from it. BIP32 does not have a human friendly serialization of the BIP32 root key (or BIP32 extended keys in general) which makes paper backups or manually restoring the key more error-prone. BIP39 was designed to solve this problem but rather than serialize the BIP32 root key, it takes some entropy, encoded to a "seed mnemonic", which is then hashed to derive the BIP39 seed which can be turned into the BIP32 root key. Saving the BIP39 mnemonic is enough to reconstruct the entire BIP32 keychain, but a BIP32 root key cannot be reversed back to the BIP39 mnemonic.
@@ -55,9 +51,6 @@ For each application that requires its own wallet, a unique private key is deriv
 
 The HMAC-SHA512 function is specified in [http://tools.ietf.org/html/rfc4231 RFC 4231].
 
-Application codes may be arbitrary but should be semantic, such as a BIP number,
-ASCII character code sequence, or similar.
-
 ===Test vectors===
 
 ====Test case 1====
@@ -85,7 +78,7 @@ BIP85-DRNG-SHAKE256 is a deterministic random number generator for cryptographic
 RSA key generation is an example of a function that requires orders of magnitude more than 64 bytes of random input. Further, it is not possible to precalculate the amount of random input required until the function has completed.
 
     drng_reader = BIP85DRNG.new(bip85_entropy)
-    rsa_key = RSA.generate_key(4096, drng_reader.read)
+    rsa_key = RSA.generate_key(4096, drng_reader.read())
 
 ===Test Vectors===
 INPUT:
@@ -100,15 +93,14 @@ OUTPUT
 
 ==Reference Implementation==
 
-* 2.0 Python library implementation: [https://github.com/akarve/bipsea]
-* 1.0 Python library implementation: [https://github.com/ethankosakovsky/bip85]
-* 1.0 JavaScript library implementation: [https://github.com/hoganri/bip85-js]
+* Python library implementation: [https://github.com/ethankosakovsky/bip85]
+* JavaScript library implementation: [https://github.com/hoganri/bip85-js]
 
 ==Applications==
 
 The Application number defines how entropy will be used post processing. Some basic examples follow:
 
-Derivation path uses the format m/83696968'/{app}'/{index}' where ''{app}'' is the '''path''' for the application, and ''{index}'' is the index.
+Derivation path uses the format m/83696968'/{app_no}'/{index}' where ''{app_no}'' is the path for the application, and ''{index}'' is the index.
 
 ===BIP39===
 Application number: 39'
@@ -151,10 +143,6 @@ Language Table
 |-
 | Czech
 | 8'
-|-
-| Portuguese
-| 9'
-|-
 |}
 
 Words Table
@@ -219,12 +207,7 @@ OUTPUT:
 ===HD-Seed WIF===
 Application number: 2'
 
-Uses the most significant 32 bytes
-There is a very small chance that you'll make an invalid
-key that is zero or bigger than the order of the curve. If this occurs, software
-should hard fail (forcing users to iterate to the next index).
-of entropy as the secret exponent to derive a private key and encode as a compressed
-WIF which will be used as the hdseed for Bitcoin Core wallets.
+Uses 256 bits[1] of entropy as the secret exponent to derive a private key and encode as a compressed WIF which will be used as the hdseed for Bitcoin Core wallets.
 
 Path format is m/83696968'/2'/{index}'
 
@@ -239,26 +222,17 @@ OUTPUT
 ===XPRV===
 Application number: 32'
 
-Consistent with BIP32, use the first (leftmost) 32 bytes of the derived entropy as the
-private key. Prepend an empty byte (0x00)
-per BIP32 on master key serialization. Use the last (rightmost) 32 bytes as the chain code.
-
-Child number, depth, and parent fingerprint are forced to zero, as with any root
-private key.
-
+Taking 64 bytes of the HMAC digest, the first 32 bytes are the chain code, and second 32 bytes[1] are the private key for BIP32 XPRV value. Child number, depth, and parent fingerprint are forced to zero.
 
 Path format is m/83696968'/32'/{index}'
 
-
-Applications may support Testnet by emitting TPRV keys if and only if the input root key is a Testnet key.
-
 INPUT:
 * MASTER BIP32 ROOT KEY: xprv9s21ZrQH143K2LBWUUQRFXhucrQqBpKdRRxNVq2zBqsx8HVqFk2uYo8kmbaLLHRdqtQpUm98uKfu3vca1LqdGhUtyoFnCNkfmXRyPXLjbKb
 * PATH: m/83696968'/32'/0'
 
 OUTPUT
 * DERIVED ENTROPY=ead0b33988a616cf6a497f1c169d9e92562604e38305ccd3fc96f2252c177682
-* DERIVED XPRV=xprv9s21ZrQH143K4Px85utdpu6DFvY2NpHkJajPoupAznfiacH2MC9LasyW4uvqKXNxLWcjqGTbHKAhoZoMAbmRe5g9tAPA7cUUX4UVA1vFKFm
+* DERIVED XPRV=xprv9s21ZrQH143K2srSbCSg4m4kLvPMzcWydgmKEnMmoZUurYuBuYG46c6P71UGXMzmriLzCCBvKQWBUv3vPB3m1SATMhp3uEjXHJ42jFg7myX
 
 ===HEX===
 Application number: 128169'
@@ -311,7 +285,7 @@ INPUT:
 * PATH: m/83696968'/707764'/21'/0'
 
 OUTPUT
-* DERIVED ENTROPY=74a2e87a9ba0cdd549bdd2f9ea880d554c6c355b08ed25088cfa88f3f1c4f74632b652fd4a8f5fda43074c6f6964a3753b08bb5210c8f5e75c07a4c2a20bf6e9
+* DERIVED ENTROPY=d7ad61d4a76575c5bad773feeb40299490b224e8e5df6c8ad8fe3d0a6eed7b85ead9fef7bcca8160f0ee48dc6e92b311fc71f2146623cc6952c03ce82c7b63fe
 * DERIVED PWD=dKLoepugzdVJvdL56ogNV
 
 ===PWD BASE85===
@@ -321,7 +295,7 @@ The derivation path format is: m/83696968'/707785'/{pwd_len}'/{index}'m/83696968'/89101'/{sides}'/{rolls}'/{index}'
-
-    2 <= sides <= 2^32 - 1
-    1 <= rolls <= 2^32 - 1
-
-Use this application to generate PIN numbers or any other numeric secret.
-Roll values are zero-indexed, such that an N-sided die produces values in the range
-[0, N-1], inclusive. Applications should separate printed rolls by a comma or similar.
-
-Create a BIP85 DRNG whose seed is the derived entropy. 
-
-Calculate the following integers:
-
-    bits_per_roll = ceil(log_2(sides))
-    bytes_per_roll = ceil(bits_per_roll / 8)
-
-Read bytes_per_roll bytes from the DRNG.
-Trim any bits in excess of bits_per_roll (retain the most
-significant bits). The resulting integer represents a single roll or trial.
-If the trial is greater than or equal to the number of sides, skip it and
-move on to the next one. Repeat as needed until all rolls are complete.
-
-INPUT:
-* MASTER BIP32 ROOT KEY: xprv9s21ZrQH143K2LBWUUQRFXhucrQqBpKdRRxNVq2zBqsx8HVqFk2uYo8kmbaLLHRdqtQpUm98uKfu3vca1LqdGhUtyoFnCNkfmXRyPXLjbKb
-* PATH: m/83696968'/89101'/6'/10'/0'
-
-OUTPUT
-* DERIVED ENTROPY=5e41f8f5d5d9ac09a20b8a5797a3172b28c806aead00d27e36609e2dd116a59176a738804236586f668da8a51b90c708a4226d7f92259c69f64c51124b6f6cd2
-* DERIVED ROLLS=1,0,0,2,0,1,5,5,2,4
-
 ===RSA===
 
 Application number: 828365'
@@ -434,21 +374,9 @@ Many thanks to Peter Gray and Christopher Allen for their input, and to Peter fo
 
 BIP32, BIP39
 
-==Change Log==
-
-* 1.0 (2020-07)
-* 2.0.0 (2024-09-22)
-    * Swap chain code and private key bytes in application 32' for consistentcy with BIP-32 (major change)
-    * Correct derived entropy for application 128169' test vector (major change)
-    * Clarify big endian serialization
-    * Add the Portuguese language (9') to application 39'
-    * Add dice application 89101'
-    * Clarify Testnet support for XPRV application 32'
-    * Minor grammar, format, clarity improvements
-
 ==Footnotes==
 
-
+[1] There is a very small chance that you'll make an invalid key that is zero or bigger than the order of the curve. If this occurs, software should hard fail (forcing users to iterate to the next index).
 
 From BIP32:
 In case parse256(IL) is 0 or ≥ n, the resulting key is invalid, and one should proceed with the next value for i. (Note: this has probability lower than 1 in 2127.)

From a34cb4f769a1bcf93b025d1441590d055e63b563 Mon Sep 17 00:00:00 2001
From: Jeremy Rubin 
Date: Sat, 5 Oct 2024 10:01:53 -0400
Subject: [PATCH 193/288] Remove j amesob from bip-0119.mediawiki coauthor.

---
 bip-0119.mediawiki | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bip-0119.mediawiki b/bip-0119.mediawiki
index 6ca0adb5..8e73a33c 100644
--- a/bip-0119.mediawiki
+++ b/bip-0119.mediawiki
@@ -3,7 +3,6 @@
   Layer: Consensus (soft fork)
   Title: CHECKTEMPLATEVERIFY
   Author: Jeremy Rubin 
-          James O'Beirne 
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0119
   Status: Draft
   Type: Standards Track

From b0125501f824804dc5f39f143c3c674f3eac6c7f Mon Sep 17 00:00:00 2001
From: scgbckbone 
Date: Sat, 5 Oct 2024 14:44:06 +0200
Subject: [PATCH 194/288] change BIP85 status to Final

---
 README.mediawiki   | 4 ++--
 bip-0085.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 170b0531..6cbc02a2 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -448,13 +448,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Pavol Rusnak
 | Standard
 | Final
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0085.mediawiki|85]]
 | Applications
 | Deterministic Entropy From BIP32 Keychains
 | Ethan Kosakovsky
 | Informational
-| Draft
+| Final
 |- style="background-color: #cfffcf"
 | [[bip-0086.mediawiki|86]]
 | Applications
diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki
index 633210c6..2df26d60 100644
--- a/bip-0085.mediawiki
+++ b/bip-0085.mediawiki
@@ -5,7 +5,7 @@
   Author: Ethan Kosakovsky 
   Comments-Summary: No comments yet.
   Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-0085
-  Status: Draft
+  Status: Final
   Type: Informational
   Created: 2020-03-20
   License: BSD-2-Clause

From 80f8011e9cb8aec32d013363bcce1924601ab79c Mon Sep 17 00:00:00 2001
From: Jeremy Rubin 
Date: Sun, 6 Oct 2024 14:55:31 -0400
Subject: [PATCH 195/288] Remove j amesob from README.mediawiki from bip-0119

---
 README.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.mediawiki b/README.mediawiki
index 170b0531..261a1380 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -641,7 +641,7 @@ Those proposing changes should consider that ultimately consent may rest with th
 | [[bip-0119.mediawiki|119]]
 | Consensus (soft fork)
 | CHECKTEMPLATEVERIFY
-| Jeremy Rubin, James O'Beirne
+| Jeremy Rubin
 | Standard
 | Draft
 |- style="background-color: #ffcfcf"

From ca280b9762f7ce8db2c8db1149fcae0270c27cdd Mon Sep 17 00:00:00 2001
From: Jon Atack 
Date: Tue, 8 Oct 2024 10:48:57 -0600
Subject: [PATCH 196/288] BIP2: replace legacy http links with https

---
 bip-0002.mediawiki | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/bip-0002.mediawiki b/bip-0002.mediawiki
index 4bdc23bd..291a0b1d 100644
--- a/bip-0002.mediawiki
+++ b/bip-0002.mediawiki
@@ -362,28 +362,28 @@ In this case, only the acceptable license(s) should be listed in the License and
 * BSD-2-Clause: [https://opensource.org/licenses/BSD-2-Clause OSI-approved BSD 2-clause license]
 * BSD-3-Clause: [https://opensource.org/licenses/BSD-3-Clause OSI-approved BSD 3-clause license]
 * CC0-1.0: [https://creativecommons.org/publicdomain/zero/1.0/ Creative Commons CC0 1.0 Universal]
-* GNU-All-Permissive: [http://www.gnu.org/prep/maintain/html_node/License-Notices-for-Other-Files.html GNU All-Permissive License]
+* GNU-All-Permissive: [https://www.gnu.org/prep/maintain/html_node/License-Notices-for-Other-Files.html GNU All-Permissive License]
 
 In addition, it is recommended that literal code included in the BIP be dual-licensed under the same license terms as the project it modifies. For example, literal code intended for Bitcoin Core would ideally be dual-licensed under the MIT license terms as well as one of the above with the rest of the BIP text.
 
 ====Not recommended, but acceptable licenses====
 
-* Apache-2.0: [http://www.apache.org/licenses/LICENSE-2.0 Apache License, version 2.0]
-* BSL-1.0: [http://www.boost.org/LICENSE_1_0.txt Boost Software License, version 1.0]
+* Apache-2.0: [https://www.apache.org/licenses/LICENSE-2.0 Apache License, version 2.0]
+* BSL-1.0: [https://www.boost.org/LICENSE_1_0.txt Boost Software License, version 1.0]
 * CC-BY-4.0: [https://creativecommons.org/licenses/by/4.0/ Creative Commons Attribution 4.0 International]
 * CC-BY-SA-4.0: [https://creativecommons.org/licenses/by-sa/4.0/ Creative Commons Attribution-ShareAlike 4.0 International]
 * MIT: [https://opensource.org/licenses/MIT Expat/MIT/X11 license]
-* AGPL-3.0+: [http://www.gnu.org/licenses/agpl-3.0.en.html GNU Affero General Public License (AGPL), version 3 or newer]
-* FDL-1.3: [http://www.gnu.org/licenses/fdl-1.3.en.html GNU Free Documentation License, version 1.3]
-* GPL-2.0+: [http://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html GNU General Public License (GPL), version 2 or newer]
-* LGPL-2.1+: [http://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html GNU Lesser General Public License (LGPL), version 2.1 or newer]
+* AGPL-3.0+: [https://www.gnu.org/licenses/agpl-3.0.en.html GNU Affero General Public License (AGPL), version 3 or newer]
+* FDL-1.3: [https://www.gnu.org/licenses/fdl-1.3.en.html GNU Free Documentation License, version 1.3]
+* GPL-2.0+: [https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html GNU General Public License (GPL), version 2 or newer]
+* LGPL-2.1+: [https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html GNU Lesser General Public License (LGPL), version 2.1 or newer]
 
 ====Not acceptable licenses====
 
 All licenses not explicitly included in the above lists are not acceptable terms for a Bitcoin Improvement Proposal unless a later BIP extends this one to add them.
 However, BIPs predating the acceptance of this BIP were allowed under other terms, and should use these abbreviation when no other license is granted:
 
-* OPL: [http://opencontent.org/openpub/ Open Publication License, version 1.0]
+* OPL: [https://opencontent.org/openpub/ Open Publication License, version 1.0]
 * PD: Released into the public domain
 
 ===Rationale===

From 2eb22b8ec67374573efc158ea64dde1d1da7c6dc Mon Sep 17 00:00:00 2001
From: Jon Atack 
Date: Fri, 11 Oct 2024 11:09:08 -0600
Subject: [PATCH 197/288] BIP327: update status

---
 README.mediawiki   | 4 ++--
 bip-0327.mediawiki | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.mediawiki b/README.mediawiki
index 261a1380..6c48d0e2 100644
--- a/README.mediawiki
+++ b/README.mediawiki
@@ -1022,13 +1022,13 @@ Those proposing changes should consider that ultimately consent may rest with th
 | Chris Belcher
 | Informational
 | Draft
-|-
+|- style="background-color: #cfffcf"
 | [[bip-0327.mediawiki|327]]
 |
 | MuSig2 for BIP340-compatible Multi-Signatures
 | Jonas Nick, Tim Ruffing, Elliott Jin
 | Informational
-| Draft
+| Active
 |-
 | [[bip-0328.mediawiki|328]]
 | Applications
diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki
index c9e88abd..7eb8d1a6 100644
--- a/bip-0327.mediawiki
+++ b/bip-0327.mediawiki
@@ -4,7 +4,7 @@
   Author: Jonas Nick 
           Tim Ruffing 
           Elliott Jin 
-  Status: Draft
+  Status: Active
   License: BSD-3-Clause
   Type: Informational
   Created: 2022-03-22

From 2e98c7115cb524037300180560f5c399edb6883c Mon Sep 17 00:00:00 2001
From: Aneesh Karve 
Date: Sun, 13 Oct 2024 17:02:11 -0700
Subject: [PATCH 198/288] BIP-85: Correct bad test vector for Base64

---
 bip-0085.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0085.mediawiki b/bip-0085.mediawiki
index 633210c6..ff5b16fb 100644
--- a/bip-0085.mediawiki
+++ b/bip-0085.mediawiki
@@ -285,7 +285,7 @@ INPUT:
 * PATH: m/83696968'/707764'/21'/0'
 
 OUTPUT
-* DERIVED ENTROPY=d7ad61d4a76575c5bad773feeb40299490b224e8e5df6c8ad8fe3d0a6eed7b85ead9fef7bcca8160f0ee48dc6e92b311fc71f2146623cc6952c03ce82c7b63fe
+* DERIVED ENTROPY=74a2e87a9ba0cdd549bdd2f9ea880d554c6c355b08ed25088cfa88f3f1c4f74632b652fd4a8f5fda43074c6f6964a3753b08bb5210c8f5e75c07a4c2a20bf6e9
 * DERIVED PWD=dKLoepugzdVJvdL56ogNV
 
 ===PWD BASE85===

From c4264ae98025e382ae19eb8a4a933b157cafc7f3 Mon Sep 17 00:00:00 2001
From: Bhaskar Kashyap <31563474+bskrksyp9@users.noreply.github.com>
Date: Mon, 14 Oct 2024 22:35:43 +0530
Subject: [PATCH 199/288] fix typo

Corrected wording in comments
---
 bip-0158/gentestvectors.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0158/gentestvectors.go b/bip-0158/gentestvectors.go
index 2d11b144..2df15d20 100644
--- a/bip-0158/gentestvectors.go
+++ b/bip-0158/gentestvectors.go
@@ -223,7 +223,7 @@ func main() {
 		}
 
 		// We'll now ensure that we've constructed the same filter as
-		// the chain server we're fetching blocks form.
+		// the chain server we're fetching blocks from.
 		filter, err := client.GetCFilter(
 			blockHash, wire.GCSFilterRegular,
 		)

From b7bd93fed7a5827b5652dc27b0dfd51d5ad3a429 Mon Sep 17 00:00:00 2001
From: Paul Sztorc 
Date: Tue, 15 Oct 2024 01:09:16 -0400
Subject: [PATCH 200/288] heading typo

this section is (rightly) commented out, but it still (wrongly) shows up at the table of contents in the beginning, this should fix it
---
 bip-0300.mediawiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bip-0300.mediawiki b/bip-0300.mediawiki
index 9260cc6c..74231fa2 100644
--- a/bip-0300.mediawiki
+++ b/bip-0300.mediawiki
@@ -408,7 +408,7 @@ If an OP_DRIVECHAIN input is spent, the additional rules for M5 or M6 (see above