From 796f4e127ee29dc252690d5a16563a85fe0ad4b7 Mon Sep 17 00:00:00 2001
From: rivassec <rivassec@rivassec.com>
Date: Thu, 15 Oct 2026 17:51:04 +0000
Subject: [PATCH 1/2] post: publish The Laptop Is the Point of No Return: DPRK
 IT Worker Fraud

Promoted from the private staging queue (Publish_on: 2026-10-15).
---
 content/devsecops-guide.md                    |   1 +
 .../detecting-dprk-it-worker-hiring-fraud.png | Bin 0 -> 14980 bytes
 .../detecting-dprk-it-worker-hiring-fraud.png | Bin 0 -> 39295 bytes
 ...op-point-of-no-return-dprk-hiring-fraud.md | 123 ++++++++++++++++++
 4 files changed, 124 insertions(+)
 create mode 100644 content/images/covers/detecting-dprk-it-worker-hiring-fraud.png
 create mode 100644 content/images/og/detecting-dprk-it-worker-hiring-fraud.png
 create mode 100644 content/laptop-point-of-no-return-dprk-hiring-fraud.md

diff --git a/content/devsecops-guide.md b/content/devsecops-guide.md
index 367cc2ff..dd427919 100644
--- a/content/devsecops-guide.md
+++ b/content/devsecops-guide.md
@@ -45,6 +45,7 @@ fires against your own tooling, or the 208th day of uptime.
 
 ## AI Security and Threat Intelligence
 
+- [The Laptop Is the Point of No Return: DPRK IT Worker Fraud](detecting-dprk-it-worker-hiring-fraud.html)
 - [When the Output Carries the Signal: Claude, SynthID-Text, and the New Detection Attack Surface](claude-synthid-text-watermark-attack-surface.html)
 - [Prompt Injection Will Become a Supply Chain Evasion Technique](prompt-injection-supply-chain-evasion.html)
 - [Catching a Nation-State Proxy: OSINT on Twitter](venezuela-twitter-proxy-osint.html)
diff --git a/content/images/covers/detecting-dprk-it-worker-hiring-fraud.png b/content/images/covers/detecting-dprk-it-worker-hiring-fraud.png
new file mode 100644
index 0000000000000000000000000000000000000000..86809b14a2a1b1d23da1a2da5c898284d41f101e
GIT binary patch
literal 14980
zcmb_?2RNKx)Ta~)BhgEuhA6@4ogmQ}CEA$i6NDHodeo2^T|^gx5Zz$(PRv9^i-Z_;
z2%?TIh|zZB|KI&~pZ%WQ=i6t^z4tx$zW4lo_ni0KGUJVYq_24szziTEA-SoorDjAz
zaur2Fa@m*c3bDmMC)SO4k$$9WqJES1HtW5Ix45L4c@(G^IOtgT89BsgnC>#L37wyx
zKQ2ChoszBj$i~qvaCvRBXJigl)2R8XuOZ(ok%Z(9iMHB96aUF|9Lz4ih56dI>eMm}
z&&jz>YehxsgUdT$pCNNa4qpY8CZ!Je$D_ULMAHA?fBtVeEqleT&g<A;+SPdy)|LeM
z_=5ocHL!sUqYvXj{hXx$^53m~U`r0X$kY%rV!ljqHSHrU<PM6On6EODA+xSyg&8SB
z$zO$TMC7iiJgK1`6qK3D?TlRL<TxK^E7H+T{G+G_Vm~Vi-Dv5`=UtX?ZgUb3BNd^6
zK)0h+Um||=vg)7bP$0KYXXk$R2H7G$Z598F3S~K)RFBQf87kRH>b=U?20_%bfVCEq
zkB;L+Dp3)ayf6TmtZ4^2hD9V(*S5>}Hx%)(mqwfce3-2LfjlBntnH&tus|6qqEOE{
zX6Kg!19qoRiZxwIE?0Y@Kbaip|N0{#OCVf>0sKd<v$*>!zxaG|5TUe51<#Aq`cA*l
z3lczf(R#o7jIJw-V-|T!<QOr5K#S1K?^<U=wciay8Y>G|^X4*RA1ZSUl446D1j<pq
zI|D7Bp1{=>NG}-T0fKQ?1iAH>Fr9FyEy4xCU~2aPgf16A{_wHX8su}kpNX6TiL`$V
z=c7O#0R-&@kyWenA2TXY=$&*6Fr+s{o7kz%p6IM0KW*6#E18?fH#d>r>qmn)z_K9+
zX~B>ko>g50gG|na3t%RYg^xNjJghe@bP5c<fFZ@6z+WQds?ySX4A`MIv@Kl4Q|bHF
z=65U=ABdFe7#&l{gtGT44RtI7I9(_9IYR37;5-0E4dG<##C-N*Nc$MR+`-Mtr!Ssc
zG}_}K`q8bLO7KSOmt_KK(+sK}Uyl0eBZz#f>D8i3zfp9zJ6#aD`Y6g`n&-v`w|Wx}
zY{~QN&Fyn?Waq*|eW((urBDfZuW5;Zs%!zt-s)!eeAPu8#?TQVMMiWL2yJPLn7b0l
z>38bgmpkzsg0rVy7Sd=*k0a5O%*hy#1^VMa=#p0gKB@It9VmxpbWBc0N4M6YsL=NA
z-fI5q7YR!r&)1T+y{(6?f-_cEnGd1yIcgmb5&L@r5g6kE+-x%dHtyeLf0@F1K1sBN
ze)`nP-*i;hz$|}d)webLIb>mM&^tLW^k}RfegboD`AzY>jf&!oiUGU*{oQwkI@&N(
zBdGco|6l@!x$~PlEkr_O8#KuG{m(EFGDifJHj71pu7mTf1xryKo=(qLv9}qphpn&u
zI0pv!M*YdY3nrODwhO`#=X8MoeHsCY^X-8xCox}4w96pdu#YOld@<38^X+mNf|xIQ
zXd{ma3m>nB6<*Y<=^@)s!uB<XOR9dFUIxV%c7!tlfa+<x0Bb%J$yLUeA20t$K@A~R
zsUaknDgG7@Y%g7=AQoiAxlJrc!btxXqAU=WmrR@}V*Sp)#Z^Y4^k2pK@5*5gbVSDg
zjLa51dVs6MXD!<dyBZ$`uN-%{f-h5?sc%6K3qy8EtwvkJDqrCAgi$|L@Y~6kHjK^8
z3@tavkp_dCtRv9`8wjrJa-DwD>@0V}6wVMqLuhI5LKrG!EKbp-n?c(y353<3x6nW?
z!>sqY!}fXVILz30PC=~tTghzzmM|YT#3(tC0c&>!7D|nsDu2phJ@2u`hqs~t65~Fg
z9)N!YvmD9Vqh-LhWLNs!MSb1En4gb?nJN#B;n<|LLpE}RP?Z+TQ@^3OBM8}u&lxpD
z0J*0VPw+E4_LJ!ym{hc}wW6byX$JYv+RYivBZC%&fx*N+p{?i^=ZabV1ymWIB4dOZ
z+^Ti5L&jAQC0vOTV8C{oKuw2kL0bE-%OYi5n|uq7gA)+W--fUiN_P800Ya$X&{9-R
z8ycY8(#ta}g-KFMSip1r?C4Rs^|gJntxe&zH%CbJ=1jWs2ec6s=Y_*wKkn>kJl&9=
z$vuHU{B{PrbZk>oEw}n}4T(r0jyUXxuGxeQM8{V3w^L;ei4zrDQwxSPKzV2%&dPLZ
z8+avoGYB|cP_@a?%<W=Iv|xD}H@egwn3gwtsL1Gh-U%pg85=4=n-d0xXii=%*Sk$U
zRp@k?<v2O{H8u9I>4c7>%K=|~KD{>nO#t^ONSHO`AbGu5R`<;xmt6}V`LPX^*5!Ij
zls0Yc`Sh3E)(@^qfTawZRu{y6297N_JHkGY$@TQp>@Exv0({pQGy+1K9u4FkE_Y>b
zj#N!29GD;v^`s;Y15hF=xasnD{^voOQ>$2y*$xJz8k_!5xzxn#_M@EHB1*&7^8CSc
z_oHyVU7Cu(F0i$EtK$UjSoQov7NuQB5Z*7kGgxTBBIIV4U_^wF(CmQX@q4t+8FGq3
z0NIdrAD{ZJGFvHp2Aq{;2AML=y~WZ#IZ&xK`bqG6l{mkW-y40iZPDDd^)!(x6gXIh
zZF`E5X*9Y%aAos#UxEO0ULA{T@m^y{`go__)0?2z2*jE|Z4l3%($zEoUfPemyk)&N
zn%D9VH~uXHHZc3ey9K+-ucgcA5+G_=P}c3REp2F;n`57Jh$7bvs_5Zo_IzP*sjnip
z6jjE;N>Mm<*IJ1ID`EmM%?-lB#1{gVno)xCF1#D|lyO7B9esxb1!<K;KvcuVz!d3I
z0i<sKGJUpkqrcgN&(<W1DTE4#+fmGe+FI4^8#92jEHFuS(4sYWiW$W`G$9^PE=*`C
zT|4PmDQ5vg^knvczXTd-H%{(0kcLS$hFc}i25qQQ9Tv&-mbI>|w$=(DH8(c}D3QKi
zi&z6w$i^_UwF#6#I2V9FV*n@PD88H7b#AYp#tR_#Ev?nJ=%T?~enpLo4A^ymM)!kf
z{mWp;s09QP!D0gGY;Ro#q;_evyWsf*kx$S1H}e7I9!JC*kD!bCNq?~ZfrGV&jwTRy
zT#)MN>MiGp!zxC~!tU2tz4q;#*wLR~_vM7rU6K}p($nTPt`R4_pP$qkM&50Ng7`FK
z87D;pS1iHMRH0cF#D3qFcc%@b+gBv2C12!sw<gljJudrsI!ZX?OQ%4<x&r;^9nzsU
zksGTuOYhS91(D7SxmSa&#&*~+0bag{{cW5gdl9|S@$PU%ZW)SzP+d-Hg%|c0qgz_g
zWicH|tsSnDzTV2g-)<UrQ-zJXj@0?wJ3G6@MlUh%)lfwho4U%L!^)c5FJ+FjW0hQx
zx#m49Li0ySZ^2QcWBCUUi+;9^gb;D&c8eHJvJ*-gF)Y7vnww{)z8mZvt(pv2kLw)x
z5B-fHW#~)`Ox2LEOGWAY;&G1Ot&p=nEiu*zpJV_YRX=-BPdE$R*)A5w?QFkzZ8qgB
zvgYR8*B|}XLd?fG3RDNNszejk3CJ?-s#CMPz5TwIE6?Mqlue^8OrZ6TIi$5DGnb30
z3fdO;1dy)EZtJkN(33l^H49sJntiEeaS{r$-0svlwfn6D)o-jZ+fuKlt5L$O4`pkE
zdK9azHGOb9!3+XOV$cn)^6F=I5SZ69&lUo&{wzsunw@@+p7i~YcxiU_<Bk*NSL51Q
zl$^D6+ai1QpweqG7r(Ldo|*c4y)o!-rXu0pd*_|LQ#m0dv}93}BgtNVFqnJ!16s;R
zvU^Sb@5sb6e%-OL5!Zpf{j=qd<gRrT%zLe+gu}hfyw5V@7W@GEQ0RB7YWI?(_vvmR
zdFbA4364V4Og<m&a%pqSeq#eE|E{k2m2%Yhw*I8-(h-DV_RFnMM>FwZ%+<Fyd_zf-
zo}BReR~UHwM$l*@5CXUJP~*O_osAnCXEa7>Y(+ef-PBFWClV>|Rk<)Wj;D3#%N8pX
zCeb0Q(N(j@IVpKs(0xP5LHjca&)52GUf>z6=Of+Bh1n<oEZcwE@Y(8m?H#S4Pan#D
z&F}y6k9B<vZFU$zUzclg5DaA25f(&F4QAaQQ=Pnlr(Buxe&u?2gcU^A;%-*m^eN@J
z;)691Kw45<LZmV&{~;7IFy2Ls8bhCL-qh;y{wb$FWN5Hm7wy-)&^k-o!L@NZd);Ne
z&|I`*aN1qt&it%7i4kOhR&xu+Ea@_HQk$04PduSIEKB7^`|m8WBYav~Lj@FX3g{Sj
z7VJ{u`53^J2q6H4jj|EM@g9=%)*JLl30;3wJ710MZ?R(ru;`Sd6ab`A9QVaO@g;iR
zSt8eew2MPcPX{`u^Z6d~XM87X^U%+aa{@O3cuPM=vmZP&2VisMQk18Viy?$z|1QEO
z9Q~y0<*!h)F;}yF*WEAj_B~3)QZDpqmH+?<fg|MVR9fo@B1I(>uGu-s#^0s|P?(8p
zKuO)dVeOnXY+Cn?Aj>TZwOCIb!=S?bWB`R5Gz(o;GAmfbXav#Z2VyXn_{H=Urr(tM
zJ0g5~SVb=B2q4AQ#(+m>*Nh;-=C;4$^JwI%<D;MReDH)!En4Z9msX+WCvc)R?PKce
zs1O~fgZX$7${DW-z>lYHJ_PXITFO<e?AGv*LDbWZdKh%Dc(?{Q7X(wVW$6e%00?%-
zX2kQ<+}-D~qi3{T@wsWQjPR*x74shJB79+N;74W>f?X+N*&-i6Q>(<j8+6>|2zBtF
zL3Rn`3Gd!Xsat$<vT-X*^AF}pnQIr@)2Sty^@AQl(sSNRGQQJGkq+hBDDYS_%MY_)
zr2C|KMk6?GlAzA}Xq{qv_PPD79PFc+8Fxq%y@1EBq1n8<x60_&xZK6k_`Op$66t^q
zDi2sn4M#gM+&MYSwhlhMvdP>AlTpQyF=D@^b$gXQ;U07Zuh<7;%FOQ>Vq?yKU`1LS
zZR5@f%GU*eGX_w(-%%5W&_P;@IKVOUcw7xSriHU4!``R2?JM_$G3|5^5-pF$_4*<u
zrj@W;g(&~8mG%2m_kd@lfY?(?#QsQZ8XW`HHk}v!#6!Y`-}l9dxBm^-d$&KJtfh_&
z9E@gs`w%y|d1PC^;ija&w9apD)L;lC(5|PKUfgKrzhvC$#4IQJSqmBrqZABg&Dk+{
zPB4{2>LBWM5^gv=-kI`*9NcWoX&3YULX%yA@?A!Cs6yEgTF_D2G%a}Weai=>yQlE_
zU{wdKD3cOJ0a^c&6NZ5SEX}Rg(0>P1DH?72%C{(u`zO|F-R*2^XW6$0INor$S=~_z
z%Ts#{b3YYu(SnbfLYp`44IlJf(Sv+{TANzt#`da~7An;Iz*GI^6A4xcZUGw`&uneC
z3U==`_0ro0U!ZIoZj`Yp=J?#*G*m-~%~9I63_mio($iE$0*c5o<`t2#;6nP}%1SfI
zQ29^>$0%Adk6U`iYyWvwD{ID5T9{x4iEKVjH4VpG!A>RU!9J&2P^)aru+!`&H<J7v
zA)O55Sdc0Fx=dc;4nag{c_|66i_SgY{R8vgg|lLxZO*u#8q<Sa|558xQyn5(x~%_{
zDQPpyBnhN(BL!o0TSqinWewz(D~$-;m?oD)Vy3ehA%VzH9m?{CkOEZYSExE@8O`@h
z%7?{M>c?0Qx+dZe;pa)ZA77Y;sdAMwuZMr?2G4??I6s>Rtg)ni59bLfZa(h)vVm1r
zg_@2f&|^md{bn~4dp57jXC6Px2)vt7dz%|*#SNtBV~r#;A}5`3G0HQu5&z6BXnOh!
ziDqdo2SYaZaJX(lFnt={g18EqEu+FUBk&c4jkt<(G@vp|HxU)CHT)pQTt!miK~k?!
zsj2Bc&t2Vlj?>~hv}&|zrwkXiD*^fsDmeI&{S4skgRhjmu~`xWIVs;(?*NoHNT{(~
zxfHL^$^L__Jx8;t<kvfX3NkI3qVJ95nOlj+pu!WD{C!wFmR?yL=521;p86tEtFbeL
zM0CsjNCptVXDd(jPxjrg7+W#{;ic}&K!U%b8YFgfAzKotbB@f4cDH{Ml-4@-6p(9w
z8zyplq|}EX`|ADCm0efH@s?zw9jXm|1O<9Vmx}g_1+f_o=*c*?!h(_1XxcQgm^aR}
zuO@?DuyP{<>*smqLuh%=?vD}L`&Sc{V;e2qCzr2V`}CIRD`q;4u5*9pJc&bMItBse
zetE5i@KLw_WwfLlI~H$VkN}}#1JHCiw1CS~nrruDa(sF3w6m%Q6G18x!QoGZZSj>}
zGM<ai%J=>5A$5W4NTTNiw(rt|s}nNwu0zRDDQL9ehv#hlVRhn6gpyYS#TG5zEyf9z
zU&1DW>;7sdp)xCG&(cKcC=@OhP68`<uApdGG#m_h^Qorn0R){dk0puBeAJxbeb-*e
zo=9yaYoRF~7Miu#xGC>vcX&`|-f0D0d;+y0#%wTgleoVi{sF>)rv11ht{RORPR_Uq
zBO?cJo{5Y+;IrME)6wv8PIN#HE8V`-Z~;JGK0(+32+~m;uMzpLctR$2X2HL|4rgSq
zoi$P#aRbxHN=(|NX}?<Ri(Vpp{bXESlw_D4aLo~MZR9WvYqjilvbhSzZ;`DK9Z*Vi
zK*A#kUQA@NZodG4elpeMp}MVq{SMM8eVaL_^bd=}Q(ufvS#k@fJJFa${lTrfF9;)Y
zo@iMPC!Eh_rQGJ6P4a#g1DKO>^1>f<o{%A?$70#CR-5lk;Xe3t;k7&Aob-$fTr0Me
zfRq)rp_R6wrZ5dk^*tzvXxUepS#KL;&bJwZdZKY=*#;v|FCJ_>;(!>2Wv^EFu>QZQ
z_H%d6>L1kJvI7P7t%Z-~#ycGu!voi^EU|XAsKgP@I58H3Zi<#4tAg0mD})}|P5;{2
zk^8joSm9={VJ4oxs+?d<a9d!!yKHW@=!V7M+N6I{W4EH^VR`uFtRyckB<OjJ#8s|&
z;}2^?+D7+nssdA<ugodS>`n6w@{B>=Hu?}$@Jb^%Q|uOtQz}-zHAD?E`wF)#eTq&Z
zzsd!?_*@PnizSPFa0ksr4W%JdgIs*BUZ!EBVGMf!-!JAA{&4dlT%CCP4Y5ZQN(-9!
z@0A8h6NMrxK#>uFj3EF0dZ8Ld|5ulX7EhI?d*=f7Z|h%<i{6*R{t+*Th$QNFsENEp
z@nRT63S#en#Q(G6HXj*m$F}IV)MkcpaJpn%wZ5Qy2AyPLHC9_u62jP4HN!AtD!(IP
z_Br%TmY7fQeJvp=EhUp1XFSe($H3bC<+C9iRm~Z!hrpo;i9NZB4xr~|*fGVbF*ZEH
z)_@JzEDi4<Ie!W&RC|%fie*v3&K=X^|NIzIcnBY@0F@+gBBhL?Y5<Hi0dCEMU!FG#
z*1&n-H~Un}x^m!)FzzfS+oyLq9gTl3SY<?`T71YALaCv+2#tqu)1T}(?<~_mtHiDE
z!pzr}F=YKIrUNxDF=Izi`KA|l5c|#WRCaygyU1?6jklK{zgr8r1jXq}O5%$ATDVvw
zYFLf03j)P5Z`_RzB6ZA8b}T?CMWd1ydVS#a<JCtyyI&+fEmLEkn2fl3<_dbk3&f(o
zzhVI2*|ir&q>@oJvdWLsKz-I}H*3ktvtdih`6#0}!(g*^LGkW#f$Quk7-lKUNKr(p
z)|0nS%+u+y#nfQVyU@z5_ySanG#V$h{+!g3@Y3p=$35r~?7DPZLHc@Y(aWLFXVyIE
zwFw^D*y`7Oz~k`8qRA#kkO}t4S|o#l<t3W5TR`83m^^rDvbG^WuxR>~F)?W5{m5Tj
zf<F7a)pWX1P*B<%_69vE%sOs<fCWvwXZvA*x4PtWIFZLBnUV}8e+cL3U_G(V8d6|=
zhvq_zHiJq8$?!_M73VXey_B^0DSB+}(BR1Xy4cYKq2!n2eYtFvB;&SehWDaR;S2+t
z+g&8Q)${aV*3mAmnk(4LN$53QNLDw*kp?Sat9I)k{xMR-7$PDV^&-bTd)(ov)O&~J
zUf#%}05cN5m9>)vC;&!sTYI@@g|oFJg&x~OgXQ(m=LPcmN4C?<mZ97-)u$f|PFFDL
zc04$XHkz-&G4v`tHC28qLWi9$K%qwuu85`->R|h;RoVEFn~#(7GEo|Z^(p4%c~_w7
z(PQ3kM`}N<1|fKUv^zCbj0}-FE4@U`AY`N1Y|o%vZw)K`)OTMy^+@1VA@P9NFqU_&
zA>9!`lTuDB=H)XU<dZLEJ*!o`z*pKTyf={rOqV}HZ>GdjxOqJk2zT*lqkxp01Rf2z
z9m#cho-O);Z{;HT|19SQ=n|}66n7iKdDK2ao_?mm{z{H<@>QRwG;Dr92SG5*EG6*+
zlW)9oS>b%rPAz&HQ3wsrq<W!SJw}tZLLLf2GRb#IDM4Lx-_u>eJ~Hz*nE`}m7|$8(
zHK>(4Ze7kmNq4d|LDK!-S)PymIcGWvsw$EG-q3C`l_~*i+7eGByRCB9eebc`1?OwA
zffcIyOHB`!zC|<N-Bu19Yrx5uUDX_>O=B86KcB2lW{Zq)b4z;nsnUFTPPa|S{$5P}
zGh1GM*69UF&1&^O<_cqiaGE1cf0mYevqtL%bHJ_^{paG~54Kiu%Q7JY$0a(nsoLo_
zN3?gX9xa3y-s&<+AtM(u>dLG)5ty^FtE$|8ijiou2qk23oqx{cmUM|EPrFSAWcahC
zF5b=HTKSB^&$C_QR#<4v4dsx{yddLh5k3gFF76%#tVCtYVOsIKG;N5^KLQhjk$h|W
zc+Ex)J?=D9S0&S<n{y1q-jGp0d-Llmd_%U2*&6~ENGp}-^l+{!lyP1PK!{#G*Xkqx
zetfO3k^VS<5=KkL2S^((RBR3`DZ3ge#iVm1o)Wb29HO)s%N1S-Qt2K1wO%<BG*@2w
zcf7}0rA>Xy3P_5r)S?oE)z>SuH5M98)|_!4m1*U@vQymo4@gM`H{GnI$iVlunB+Jk
zOo4{ETPR&?Yam2JM~#UGvxOgwVbe<RfwZWjoIYB)<3&6mSqp1&0I0fmz<o3F_>r!C
z0M!4Cl+aY4uq)Kv@y_-(THcBQ8C$u*bh}vK_VNuD{b!z!G!>8@Lh`^_QCePlljEy`
z9=LL+i~u`Gka0oi-tXngsjzSd4N^gmr`oj<<4W`DE(Tk3MEil~D|;2x4}qD7=G9gA
zAUn3qQek%>qk3f__aCVG8q}pb>H9*?%)KGIwzARTQXBZe%wwVMs-v%_DjobuI%AS~
z(72b83P4|R{0HTUw)z*a*>2)^WzQb>=1LoN6pp9UAz5tZxw9Y90M%jLFqlirW8ajr
zPuKiAK3RmxI1w5{V+DGlS2kylt~{;6JUQ_{sHQkP1RyeHzd>nKM1-V3GC6V5>Rgbg
z+<9}}k?JA%PR1zdnI=dao2IYSCnDFavx@l}m5CR=DX`rURB5xFu+RHdBT(qXn8Z>~
zl~&;nqA-~Xn2@ev-<6xOC+~0M#MfA3eWviJ4gi(;^)1Q6YU@oA4?M-30HTaC4(e)b
zmqgE!xQo$yND6!A{<~Nn+0+^tgh*3sF1o+TaIM*zQ}?SfEeZEoUFtuq-Myg+ytbsE
zomAaM#}&>pUOZO>znI!Hf!bx+&u<Gi$RZcrlImtkyjVWIO^8P!>3!;snoLzPm&Umu
zOXk`}PR=oED0^2W71R%p8?lmMI;0lK)b9t)7&mSaCs*&0CN1*`7qaxnJsZJ;{i~qj
zq)Je@145@LaA?V`?CUD0?iozO{ise}{(;`R)NfCUH~b)t<U{Gk#-!w05cTxLbsDG=
zf9Lx@QY};N%&q`)WGPSISqf%89AX{Sj!+pdPsTH#3r_BmSN_QLHS7Sdg8*0^4bWYR
zG{6&q04HvD%T|P)@J(Z`!HlRw+lgd0#@i&d3GKhl3%GvRwY12LWa~rABKRMB0zT*^
zlBMAX9A9K&%+uFb>4H<V-+GV`jnF>Q%t^HO-hV_ykCg}JkDPxFt)yXk{yhh7s$%hd
zEMmIpv9)x<J1^M@D1+Z?9xMImiO={RYjlvp_>1tuBL16ndvtASMOxgIUOs=KDPjFZ
z`Vo}EAcDOxe6*h!2DE3-_%D^G@76!DF-BoQ4N_2ttDs)urr)1ccpT7+;TnnCwdcM$
zfbx&Q3@`2|-@ev<55gfxf~RS3=7P8qM#ktz-B(meVbf4oSlWIbT}z-j!Ng1Vrezg1
z?_6%G<4ABy6~l2r_<q92ounZ?O}R_Mq_k46qx7;rc`WtNfBv~@66w$vyD2#O9+m#^
z*zN*zf{2-+8ahuInflC%>rv^;>dEno!IGWF@UI4^$k^T79xH}R{-#X|SQs`PcF3!*
zUXoYPcG|o7Gy#(dql8t)rRUoyfKX|MU0j5b3bRyqZ?#AIK9FCRoj|c!P5k*wPPkqo
z;4gS7Fl1Q$$h=wvk8+~_Mi#yZdS2F05{M~qh$+(RsMueBOWE&Q9|iwiS9=x4%mA$Y
zz(4N(r&@cinNm=ynKw1(9-|~ErzxEn30f2Q5Mi~S%opKi%EmZI2MD)iFsRzr8>ray
z6*WQ?siX9tLn;{)sdIgkY-tqQ>hK2XHuIDeeGGbtJngw&%KqVN^?{lwQ4*5drx))6
zJbR_)?s~6xK>7=DtZI>qX(~ZA`Y-l<!}nLPt6^LXK*#}W*KU@P!d1K;E7(;eZzcUe
zl5{VAira&^&rf**%2Sb?E9Sf~Uwr?&_e=aMO2I~VO3LzXsH=b*slo4Zhr`<wvz-{|
z+c5QRKQG7*D{mdxR8-+&M^Vg+W7lR6L14I;9*9)84ZIDw+LGA5!64Ejhdfy|lST4I
zrY<q=1Hhe_c^5<GpKWMp>Z`t%(y}(`7i(UQ#`fw#1pWZ68buwHuN*Rd$-3p;x-cOz
zE%+@ynHBsLROJD24OdU9zHdQS_~KMv7?Moa<MRn6zzLM5`mOLB7x}*aZG#UENB_)*
zu;z3(8Qo%A5qLGW2yUPo2zR3WvP|Rc89WUwY@ioIHt^4B9Cp36?wXuN*?xa+6$4F$
zD3tqoLT);?XdWufmOWL<=cn!Rq#BYI<#+LbTm;FyG%Ak0J9N*`xN_>=SR@<RoHRHk
zbeW$s5vIH-^_(BLUskG6F}G6%=9#uskEluGDe?1wFj?qXHewdP=p_Quj$Yr|Hvky;
zLaK`*-EW>LtvTo9?=}lr<1DwlAzwk?(Mo-tjhK9|bI+ny!T38x>1ARHy-=#WTD}`{
z$n9cQ?6-FKbxDNfr%$=pc8HJ0`RXCAEo@ILV1BkR9dAY1ucx8=dF{iAg#yww-giaR
z!s}Pym1N_nH2t!&$4y&zt;=0jPhBYm<+i={L;IkKvEU!y!+E6D^T=9^#%m}DE|Cn4
zLx)r~tcKyx{?)~Rbd0CQ{kzr4yIY&6Kd^CD869pLlghd_lfp8F%Z(9R?~Yl)Di3^4
zRf+q#S3i{}<cTqT3?#5hSr!K!oHpt5=p25W)7Wmg^&E1@L}ToBeD8dQ61Lzc-mF=N
zj<#%wk4r5Pcnp*aHMk8cdKy`;H%w6@mS?kuqF0R2k=KEy+cLN{(#5_{R`GgiyAcOf
z_k7<R5u^WtYCU0NF(3isnG2PK`qannx^JOq*9xWb3f+Y(6H&CLg<iqoT3HFTtybTB
zjgal+^BEvbVb5RZrIh%E`$*9c_B8Q4RGW8(ZLcP<SABf<tf^Q5DI3*Ihjz^6Yuor0
z5Q*`em`-T3WLlh^feJO;f&9*=n#)<)J({^}s-4rGGRXWiEGg3q(hIxSC5t2wSR?nN
zVs5;XEi39R@Y^lu+`iXEo0b3Q)1(~#eH_$ES19mhv)7w%#N{7H3DR%g$h*%94rr#S
zAP=a)e|WuofN<TJ)jrwowWii!`XiYy8JQT`^Gke}jt%?e?WVfqwT#!W7$chCWb_^z
zV{)imuW}Mgt3vb42I^PJ6nkH1J7)efFW(J?G22Zm_k2H&<7&{M7Pa_xx!@t~G8N{b
zh(+c^Y47s0D-kvZ+Z<Gx!>}v^FNpIB_Fb22x&kT4Ddq`{ci}f7<#iP8aniA&l;i%}
zI9#wLhX-UeY~A_gF7e9BUmCrRIhnjHp=AoSG~*N$6B^c8DB3&A+IZ&uRWWBFXATvy
z$>TDq{G!P=nz7vEs%g~r0%bq=_dR95z8~@`iTEp&g4Krsa3Wf-o~gE8NvUr~27BRJ
zUr*OkX+yI>gLj$7r36NsquXN0I~t(RSNq+T$<w~kr@|@xKB0V4FkBNWmJicYC?8Wk
zWE#_C#Wo1JpaZWj&Y`3?*?q;0QUoP#9MUHFQx}V8>fGyzN-RTvwx(4i9#{c`6F>EK
z1Z%VJL5z%3Vo?YZi}Th^dgOgZ1qR@|kJIdx39`V|v`Wf83>4@7jiSc30#?m{5uXOp
zuZ|d6I@fRHy^Cc9nbvNzN-UrI3)4Y26QFEsD0E#mKM|2W7NWq5*!MG4D25A2{g{xn
zY>si*m?xh4hL@Q_jK+13Zd1nYa8<sTCT|t@fIklw+~KWfesT3{`udpW%@SosjHk5n
zjo*++9!d2=G98vy5b8hyXhC5LuepN%MR<eJQGM2sMRZ%-$5#94x8dW72fu0M?|t@)
zQIF&OC8y_guVCz|66Ny_jL{yn96qdv)C64kjSIV^4L!9I2_%JO3Bn#m&po}K=vzr8
zkDN+*Iq2H7Qy5Lev>f^hLkEQ9<RAP_vX6SbZ0ub7+9AF#_MH#(Ysm!J7#(X`jK+x$
zufJhM-Nc;vfwX!BnLI!6SL1zXs;Jd9%NQPd##rWNr8N{>qR4`uDl+x>QV}n9u;{t4
zqU+vQYZc1SI1MMC^IRQJ+ckySu2}Eup!?0!D^a(H%liysp{{FUk2k(}p9_C_5jvYx
z?VefR$X}*jrw_;#<<Skl5*KDZW!(^u|3HcVY$i=-T5ou!$I9qR1+Jzq6w%Z#$0#cP
z!ls8yJ7-aK^oRvS4n0&4PFqm|wfR^V!u|30CssxocfW1mB{()uZNASoGKP8<YIH<s
zoSnN94?QYF&FBD!>CRAP<=>j)>EH5R7!^^@7fueX`>?HEXR|b$x?^`Qmg9WCD@lHF
z^gv-}){A^nE2?U(wRTQU>aa?!@Ym&0tLhZBsMagTgt7oPSQSV1Q{2nW$lRX+3X7p1
zZ28|aa3q=jp(lBne5q@V4)}$Z<N?aM>&Yb&lCH}nBrk3MQ{e&eUBSP%E(DT05E7!&
zzXAz0@Sm2y0tp!-$$tnWS1CyTw)_=H!byp59THpq3V-P?TK-qwKgQuct}jp9Q)$`@
zFG&%*?q`w0UJ*xim4fmw7%L-@`zPvR3|-+ELT<Yk)XjwS;|hs{e#6Uz^K-|lKGhtJ
ztj(D^MaQRG1yQ!mJHM0PUm}64qc1;za05yH7XEzDi7gpMVimq0`~X5iMghG<f>t34
z_;Z>xNiYniZYqq#HQw6k?mWhNVtFo<g$4|b-IXa6d6m`S**zbYWXF_17R<4FgmKBS
z<JIw9`@g+TWm75o<8Id8AF!;7`BpS*#0m7_Lgugb-XW6t2tg;f+?%}%rzo210_33D
zI7{{j6bUu>N-BAOTs?~Y>6(yYwpwvvIXP%>gS3K-f&{9l2Pw^5YEkKSvetokx-~dc
zGm@YKGEpwRUCVo;{=R`j_pG%bHD0B1+HlgBs2m<7a9g%EYUd>4(-8tbI_Sm>y>ti3
zM=qFKKJ3U@!kIEf4vIH(`>t_et;#@YqyA*&fKR;v4-$<CTnJFRXx2d!UstKmDK<<u
zdONu7fB%|Xl*!`-N4hlD*nP8vdY3o8f4iBZnd@&!^WQY0H~KDK#%mFON9ir9=JuJK
z@M=;wP#Jysj~;q0sBKIi($go<OwcB0bN}+zp~rK{i(JrR_)XAwMn#4ukx$SxhCe7Z
zKwGEYnuNL4nv-$<77O{NHQMON{CmMvkPqX9`#0dDfj3^Ih>K)6LvbL;<JXzHU$0)=
zFrZ6g|J8k9V*qJU9!ygQUU(ss9ACp~-q4(mV)s%W=Z_`&7+VW36s|+YjT-Ou`)%?d
z`75lhD!jV5kqnp0sc%w_^v?Ob*@(dDLKb=@PMgxHiM|Ix?37JcSC7V6W{4uJ`s9&2
z(eh4hh;j0fCpzGkqV<syHVcnBdq)l<hEJz4#J4rC$UX{BpF<8(Y&|_nCMSkgkR!CW
zikqSDSvQbLN;-CRRc1!nogW0*r&+5R(}mEI%)CC=hU{8GHhQ4(dq14c3koAppXs25
zEHuPt4S2kCA9~YxL%`K6a=`Q$GYFT$s$WD#`x}(YnYSVAhi_n>3pw5mojI(@mEOEb
zb>S7MVsb$Wh&hrJT6KhF1+O(W3lofeVHbccStx?`vNl?PL2?v5%x5%w0Y)@?wV@gI
z{#!_hs@|c;l17XGU$w@CFE@FCQ!w?qNhVw>KuFGE=nV~S?Lxy!hxmTYUW99Xu2Pb_
ziT1|H@naTFp#;d05#U0N7_D!OT=sN?;~^8~N6n8jrE^0C{|?QJ7A%1DUVYd>P;AIm
zoEH!Shqw<-w}k780As7FE&>8?gchGTocuIgU6JWIifwQL0W6S;*$UduGlSfH?ni%T
zsyQ(}m|ouIMDUZQ)Y;&ABoIB0^=b9WW$tRMECy5m_7PC|b~HFN+HDgMJgx&#ZIth4
zCO+~F_&!Rpu#WMy4o|>k+Ci$Ttp?$u_bV<D{h$v~<$I!6gbUI1(5N>P%{WND<QRPs
zCOCNg)1rd~2Q^KIYuD;;e_H5GS3AAS7qjb_9Jc>hmH$Ix(b(Da?&zJs#yQDMn_$F+
z+9{kTGBSfj<8}a=nY~4dU)g($1(`V;)J>;(i5kmCi?zP%)#nu3zIzbKY4&a1jgIx$
z0N<bKSCNb&2}wm6A=;+HX?=4(?+nR)o%9#V{*e~A@A`Pur5k}U)DAWsz3mSpIpKl^
zUlL%}u|nE(%9mF@xvy$KT+>KME>^Y6#3hfo3{#L0*NuN`FNv%7zcn~1$-gz?`b6??
zji~l-?OzaL?O%}pfc*ag@}G|DBQKDYWLuBO`2RSx{}lDY_W#XVvRKaln$`aS{gQGR
z$PsJHO3nCD=0Ok=7>DVkO_LNn2_yOQu8JBvOOrO*AU6Z9YO6-UCtiQ+So*QwC@Dhu
zBlY0-zBLJy6S-%M^kMHCy@s9aA4EP|x9)88yEjWIza3r;|9<Qqx@h}}6pA>=A;Wji
zvUQLSKu<^D_1P~}Iwt#=HXoHhrA7m~TZ)lpaf`Iy3tt_z!1w33C}(->k3zSpXtC|(
zw_Y5wrikR!VPELDEfIoLRigT@d+|e~4~```bfZxrU8J0L+f{UFN8#WzbMz#o`}viI
z!TQq*u|H~PBPQa0NvL)i0fQ^X!ttT0xft<P%e3cG2dl3fCZt)DQD|X~A)TP_Pt@gU
zs+oj}B=ihjg<>0&up`eD*~c~y*6hT#_>t7C*iSWsA6GV_aPU^&2?xaqc)tXC$cy4!
z=F|F~rS>T@;J!8{7ANGEc7GzT#P@d^R+-|Z(r8M3ZEnAvT)+fizAFk+MN@2k#WW7{
zJq(X?VMspnmV<0xLDb*kBM|}09G%V03dM#BeL7pinBitMs%=+OkfBrw`5w%?>icnz
z?O-3Al*#B~T~_8Q=&%9$6SC1(WU#<z(`|_dRSCK4hRWsE<o%L<B?yK9Exb(ecs@$)
zgYSWtDx@Rb5@KkaPa|qUBv)Pkc<4q2HGLI}3MoUOC)krlX)EZlPstCtB+|4&YOUOY
z<}K>v2EHDH?3(RtO}z>DV7jzXH`=L9%5jx2558k|hEE|+&CR;6lir=~dGdsUzM+I&
z{{=@x1EcHk!|{KNcmFl5YoA|Yb!O@9`Fmbi2-D?K5%aCBN%WBbN94C;$;wloggZzV
zj|JN<D*7~qQ#vTy7@W(Jh7eQ_G-R2v?XWkDr{z>J)P11&z1l{)aMImQj{6`{s+F~B
zMgdw;T(Vs|p%3X}>2@7AdSxhHknpI>Wqy39D?i|^^SbqO<+pk@s;Q{yP4uWAU#HW+
zGe)MD4jafu4K$$r*LAvAqt+hK_c71O*tpyApMQSt3g_SlE<BZx*lY5qt0apT*)@wO
z5}>J|%^huUeeoUKUtpFqSLfs+6r(G<R<ZI1QeNK(f=qNj@=-7TCHC0<kfbhm$61*!
zfvThI)Uu4`J1M#%mrB8ey#Lb|?tl^PzHWN9;!k~(4(>k0-N3tPOXW|88a@W4_^4af
z|5C)PiaONc)zmQO$t~#7`Jo}i&B#eGbtmTAtyb2tV5sxVM)UZo-W31DtoCq9&Yt>e
zDVM!ndGtYw*pa$iZ$ePa1{)$(ckn(9_zw~*#7#YysT)<0iVfNPB)x;V?-!DeHhPO{
zAb|G~i)G`YAHZ1QK-d7Z9$sIp#lc%eX(C1$I9DCm#w}Th`q}dpnyTDXE?RDMz1xRs
zhf6G*X%-z~I*;eAJ&g6sJBF2mD;TQVt4DdwDU1Nj`#i^j$MwmO(7R9{6)i4c^O+S2
ziuOM*0M5An0YXjrR$rjymrngAHHA-l(uyjre*20+5iUO{eX_%dUr#yo#&N&UNo064
zK>w6F#F32Y^H_?*{I8^_TJyOIlT@<$pkF|p2tgg1uTengsKw$A`NwKG_Ik^Cm#Ha0
z`3=f45#;vw^v;jumzIst0RliDUgX!9KxG3r{3P4Od2=(>NmvDc!$gU48Ey2JCbqAK
z%dwnC!r)!xVeGA#R4TW}szS)~$<_~xTCR6q=8rzAr(#)xo}D|^UQwxo-)gP#?PJf)
zGU*n)`Xu!&2;@9>bgQ{LNZ*W&bx^gvkO>@(a`rf=Uq;Qupc)==adqFdu*UMKLlRQ!
z(8<T=^{?j%ljmY+0Xy_u)OOj2$q?dywy~>J#~Gr|KX&nF3L=B9{eHbrhtgKTRm6Vl
zj={TS_3N6+7-xE)*Qh5UVPr6iC=hybjB-Jd1}qZR$b~E{FpG<4=sB1hrys#?ng@o$
z87!V)H%{3`4^(9$dC*))JKd%qe;l&5LgMzhj#hVmwH6~jci5lu$4eLS_P{>=bP{gq
z^oC0nCi!r>-A|a#_T$!Koo7MPViz_9<`&M!CAEAEUKmX!xNaE3tnM1X>z!XT<r4Bg
zw1kW!OpEK(AaGMp>_P@-%hulNAjk>pxZ&Lilmpr8c&!*Kud;vmP<n4t`_L>7bx<<r
z8^oV32;F$0(^zw2BVI_Ln{*yj%CX?41L}PaWL1DS*bg-L&YF*Xk$@`dkJnO8O82mh
z?qhO3fGt9qp+XCiA#G`>n6zQ8+2<uiQq!A<Mn^5&R@Hy_LK+P%j=5P`^<W8l<`}#>
z1poV>#$YVPWY@<Gmt)HO+_1f}DAi>vNX4uodtRA2<E)o%&SGc5$ys@H(_8@u5<vzW
z!c-eS2zq8=UauYJS#M#Vw#a0+%8W_B9Am&r<3e<s$Al1|+UY}TZS4crloSrPdZ!7#
zrLo_`nR*P1>Xu@%0RrYrX7Q-}&B=;V{bwMnf_C^mMMp(WYEmg~qcQiJDQNcR;&@Aw
z!?)$rrRPWrVXt@2eii$N!xVzUOC7%>DjEi%n(AXz>4D^tgEZJ7YHW3w2-WAcukV<T
zSk?PW>^pU4zSnwZxpQ^uhIrJ8#5{*H*hrycggv70rs!Ss@L+wyIGeFeg$D~*#AY}@
z{tRAeKDsdZtOrJ2G_vwcadQ2uwus(}Ii6XLLU1jud;D_-%uLeN+Q(#y>e!~CZ7iPw
ztn2EP%sEFzgY9_b9{Y0Xggt`Rue$;Skxf<GJBtwdn7O=iDBe?jlTTk$lP{>244>F<
z(z(ZUo^9N+VJNrsOx|<UlUb|c?A8HtiVC#ji=KYxQ6^nXv3cImSUY<-z0_A<zdSwJ
zoVe+{zuD?4C$?U)SvO7fOy#%1bMuNgs8_?vNgNqWpXSki7xUb@cHxl_V3B+_6&X#b
z=M47V6*O4B|H4;3KnY3>?H<d<$dkKt46LnmTEYAjK}iA%>+@@u(?^$NzWQV5SKW7C
zYt%elqn%|*y<1wf6?u<p*sh;C#1}3lw2Ba_HV{#q8Stx`GY+t_Int8i$%@l)!xHp6
z+pU8+Y<?)uCivgsP|W^@bE;ov%E1uq^T~hAD~_I}2fmOmK5T5PVGX=aPJw%GCxK;8
zSJny9JHG2)h6(r54i-PV&96HZg87Y#vvcx{gFkT>=NROR%TLlWIQSEWj-f&xG#}DV
z)hyV|_R6c*vw|{ymVc)2=J&G8zxyO+Ey>cT3dK?3P981EJuZ@CpwDr(Vje90Gn(qe
zh%h*myVoq>&VEW}w<rY?1sB-l*Y+rgq10#%jU~sto_NSk#%f3uL>2Ykk_;7NjOMrn
z4K6n@{h>Dy`XakV$LS{ZgxPn(8vTvJ=jH<yov*(jYfZhH-i=#J5=iiaiPqTV>*Rvl
zw~?K)>#D+aBGAi=S7^kPm94?~htAC<g1zVOL===^`xPwDG6|>zQRt<rqB<;<SDed8
z)`nhbP<#(B^wJ;ci*NIniHUgH{U;HR-2WuvDg19D9=`uc#MA5FL_8J$lZd+iq`wIN
v1B493^k38<GXGy_|8JcC6T(M|T@i)#y4K!T!!^X;cSy9=_0=j>Y{UN>TzwpP

literal 0
HcmV?d00001

diff --git a/content/images/og/detecting-dprk-it-worker-hiring-fraud.png b/content/images/og/detecting-dprk-it-worker-hiring-fraud.png
new file mode 100644
index 0000000000000000000000000000000000000000..9afc53064c0215fd1a4d6fd42d488dc5a8d5218e
GIT binary patch
literal 39295
zcmc$_2T)Ys*DYukK?DUsP(V;}lAJ+7L~;g+t>m0@Y84R4k|pPyb8K2ba?TkPXqud3
z)7`wo@Be0MzE|IyssFt9&D^4B%i{Ju=bnA`UVE)|0+ke`@Nvm;uU)%_Fa7?l%C&2^
z%C23z;evAm{Le3%Exc>j;@?TXeWT_!vo&w*MJz@2Yrnn@@5k%!0Z+(vgBn$X;z-!F
zpJ}IMXR~H!o0Zc@>J+snFDcjsy!?@NuVtxZFu2NHe8q*`BM#l1+Vt7T#m3gf)#Xws
z=M^ve3-F9<*J#5@B>(xxEx&(0ZixT$ah>|=<MU_2tB=>Oajrg|KfiVLK}dKtx@$N%
z*RMYQcii^5z{yWZ>FO<9du~SkU-Xb`|JjtfgecO}{x!!T@&D^2zc0-jM~i0u|1hNg
z{+3q~!oG4|J^phf86obQ_x}v;E89OKy7phTNW@S6C-37wE_z0t98+7-Kf_Z}x!D?-
zJz5d>%o%Y4wUPKIZvNkn)8g$X1FbNy4Z!sV?|&r(U-z%!q^A*IebMXxxU&CoCjV~u
z28DzvDg7%@{?kZp4}T!>&&K#4p89>MdF$4u!qs>_r}_VXva9~nfdB8&)s^<b@9Y1r
z_k7#`YFgL6lKiivj?WFl55?awUVYJj;S2JAE%k=%|M3|?coft>HSS#f-7VICGcEdk
zE0XBq{O6|sBbR-T9KFgdpC1)zR~Ja!A+S<{>#vVw)6l%IU8t+JKa5@OR8--7EuHp?
z*--K74MfWk(T6<cJ8|@<IeeZ0yEsuy5atmTO`%~Dkcnd&&l|pbyg6B@o$Ua=g@sji
zeSN*XqvNeq=dC-pMcmQ9cmK8}^4TsnIScXf#xBu32MP7F$x{J?wW@r`>d~b41%a2S
zhj6yqBelFgoK|Z;cIF#4*4L%!6y)TrMoXgL&})cyuk%`xlAaAF3FgoVjpobN&erZ4
zp|X>cxBVS+qisLHOy+<5P*O06NfPm%8y<cm{k2fD)Om9_;OmXLXj~#^ALZn{$jGRu
zOmJmnwzalW-4*sZ>$=>T_e8Smeh&*{yn`?_RNdKHU+%g2`HSzj6n^(0$NVRw6BCq}
z^Y8YCooj1my>l;_1RE@>wY$5!qf<WK2l?RjzK;ek*VV;rYp9x^k$YC^{(JV~U;<u4
zA?)-aGc{1idF%P~v$4zzsat;SKg-L9QO<>%<HeaH8j~e@^yI{SoS@DqajtJ{@Y>AT
zO^-kZlSPJWZBvUfce(u&6D^ywzI+=Q9@eT};#1FjL+w|4YAh3eRR+_tDp?^uCyHFI
zHj6T2x8#rdCr8QoY<>pgv+FgBuRpx1im!2~EyfG#T~EU_inYz=QpCK@7$76Bi39`%
zk2WXyNS}7Jx6d~?C*B|qp}zI`>rkas?fIdPa!QVYap@9A@=bna>Y(A*MdO9Bipjj*
zn~+&<v)WTCettx+bWgxTo5k{A=Bf|mVlGu-3N|;sZ1UOA(a|}K<7r=IoV`nWCf4Fq
zXu@=cBp3b+GLGFB$$q9T{S~bDtIQCFl+3%;vo+SNV%{<`GAKB^p24+G99Gn7(Ov8%
zN*5UAu34EDY29m`Usco(Eu##7XRDzV)CRnig>znFtk;(&tc66OSaH=8_w%6fZ{OZc
zv&q42FIxhmax7N0I&agq^cFS*1_l~cz%CvX={5dcz}&re?_RcSTup6dv0me<Ki<Na
zq!ZcgYu6YasHmzsZlH5OY-DFUNHM*5(FXCsmha}?<jEr>VbS$M|L&&ty*p8=St}Pm
z^6+5<pY6g-o%?3FAw9oD5VHVRu+2=9^Ni+V&gJR$Y_08LGtB;wBwOkVr6|eiHo9c$
zgo{pNrPGyu#>dAn8EefKYQsF78=cn846In_2j7K?t_`KnxA+F|<UO;QZ{Tv7dpQsg
znORgFb8t&qTG|oGnw5rw6I@BJm?FquU)V67GCymfcB&Hj{MD<nH*Kp)>Hz-q+X~+&
zxVoU|v+k04PbkWL;QQayP;vn|h04Eq58JqzpTCth)ap@j|LS>4>F4LCqV!eT7;Nw7
ze&4@;|H<XrV%qkuy|Yu6u0*3)CRwnWfjf^C56=;CPyfzcRhe5?ImB%cOu9LF-#00m
zVx~5`F0IDN*(rwp<EMN7Kma4d-U(~dfs`n@i5zF<9^B7hlLX1QKTYgWXNsw=;pO2P
zAD##c3%ut;hTe;~%#_0B=jY$XtmFE(wzMqF&-ahCwvLUBO-(WI^71k<ZS>E&5>SbH
zV9}Bt<5oXdy}i8^6<uc!5c2Z!{e5!y`1s4q%bA&mV0?G)+(BK4v9)TtYHMph77@|a
zO)4%f4h^{v{-Ukz#SP!DHjB+qA3jX4H`dRQBLiP!X=$lSWJp956+JeV*OdpZUun;&
zsNgi07VXtj{v%{)J>4V<3W`2Cd3iZG@JmHiQVm>APHt{>aOkf})4_bXyu;w%BiYOe
z+%{Rlp)i;pNPvqlPtB0cY_y<radA;!Uq9~U7=rQ^At8xGSl9z^v7PyBSt&4uN_j#`
zN}r>tKvtd0W(S0JGt>jzJX>u&pYA<N&Qr)7AH>SbJ8>}*1F|vJab*o8Gyw~;@gilI
z<s{qj#<;zs^Z4-a0Hc<;cq`_vC~^=Y?6UPcG_lrUzs%Uw)bsD0G{Ss?$L!z$;VFT`
zq-IBkn*I|;F_Vy(XexBwH@tK)MdZSDXNKY#T4umzEML{Kvxc=`2kq<0SBZfITefFq
z8O2m^a&VZBSGYI2SZ|CMsy3)G(lYw$Hw(M&w5GR74Wx*q{`m2uak-GLy#%ZICT@Vj
za=c*u?_ZOTAJbkMTUiyAF1AI{EAEQft^IA2x?L+P>64*?EPT2v8@Jf(tpgSU(Jd@8
zKbQ*7vsm@lV(-q6zJpKZ0|HnVSq8mqQO@i%ZN^PX_Bh>{K5iS}<waD?GqJFs*UFc5
zYOvnN8_xYO@$tVOkR^70gvmnAYjgP$HBjwFmo`_izNPrk&x978U0rrPq*18j&BDyg
zt)F1_r)yZ{@Et0>x;0FHt=P)si|ESA(K?PyQFK{lO-+rFfrLccYJUQ^?ZiqW8H9@8
z&24<wa(Av?XQWhuB3V&voy%zNwUpFdf%W5~qXJL$!X5SPL*=$q5zl7((b&+$ns<_t
zkLM`K$;rd0F3yM2ePfb7;`(P~<Vr~@hD#H5+RW7%?~fqdy?EGg&#I5QBHB<#JL#pR
z>|EZZDf6DkTa+Xu%`WrbsyDF=ey7##rBgAlUcGuEZ1#FF+*5#ms+T>r3hz_v8OJHr
zSs$cqZEbjY?0oFppP0x4vJ>65d~mtAT344xOla{ImUV!ya0)B8$jQlxq7U6YHHXl$
zi}(|gkgSS$I&Ds8&YmBV!sGYbz)sAVs@@=l8{)S-5htc5HO=+*bh%GH204#<^Nxx;
z4{CQ=A`0_d#e8vICE!wcCNx&8qbZ<xCq5&MpwVdt?%LT@FBTV>fUSFCIp2WT&%6sg
z!|KEjf24cx-~=LnanP6l0_Neuo+eUNQ880#ISZz3l=88mp~3ggv6%gqQlSRxSlKV|
zMswsbOLNo9H&IZULxrSu4&x=i@&!@_{AYXl;^_=^7#5TE65UAxp;W>1!7;|D6)E3%
zwSu+!)l-B}jdi|Ki@#v1Ae>Mb)CSJb_;_=U!nn6KbnL_3gw#U2vyFyBzkGT!TSCZr
zt?br*?R;%)u_w3za%*=~OAVZ_zP=uJTq?i++;{?+`3;H6EL6+)+WWP09V4cET>iRg
zv3a=A^pvRc!DOkXW^~=RH`})G_!{u&fdK`YK|_Moe$07oHk_P{Y;{*bTSsSms%Cmr
z72zzz%E~%XqR;UO{iK@dFeruc?&&VMfI%Lb-aJA=ES0MH(&ez@7||2M`u(5z6}=1%
z)hzkY;5Ljt;N_(eL%HnCR>GV&W3LwaHtS0@k3e2kqNpV`c0`T85<TqnVt@i#pXUP~
zot#YNJ4HTh6Jx$JX}d2v@%;JQ;a7Zoi&gf?F)`{Tjz13&S#$k<69BW#UM}div<pC*
z-{-5uCh`@tE0kXI521uSz0^IO{_*Dgr)jPNMU53!qWdFdI;x1WHx|3Gvhs8D8C?h!
zm-~nt591+$Xdc|KQ^VD@7Tr_!sqIdq3pQp~UZuTgDn@M7YOb!tyOH-i5xJobKVHK=
zbQX2?X%Q9c4h%Bp{$nNsdwEdP^k!Wpn-^O@F)~6kc`lcTk_;y4=SHDePddqO`7w|?
zBGE>cmWiEmBz>vYwzjz=bgbIkI&c?tEbqJZwY9$FL)Ff(ZQ0f@0I2ELtV|M+j}4wC
zS*o3CSDHxbFD#mJTdb6MIB%|SM3o!9%WoTX2j7qV02idnL~z$2dUvO4Xi4SWX|twc
zYKd9(n$k={H*QB9CP7Si@*v??k@V+-_WMrWNQp+CJpG>DFC^mVqfr6@dGD8(4Or)v
zxu(?1Ip1qHS`D%#4^6gbY6d(-O-xJ{eGX&LM>aMkvT-b9qod5<JL@FzkP`*!l~YuW
zwz-Oy(-rR5jTh2<V1L^V(k<n+EH?+GLc8MhQ1+{?B_)r8%6`qy&&RT!S3g(KrhW_7
z$5OMjuarZ%J%1`@bF@(k%mR0Z%xQYWzoX;bKSA+U!O+~u$Y?(=?qJHe3WUn}$irW)
ztzIZih{e*hig*|g4vzAz=AXjU@Cu93hU`AJyWmz!A4tk>Y2DjzEfc{c13cW^#O)r|
zfnRQ3JYJKMOM3OrLDWfF$Q2y}!N2kD-8Zp*ls@r1Lv?kbCb5~-M^n>_*%8Te&Sv-&
zaih^M-cRTc@qymnn3~<GYOnU)ULT!$kPw+QOK53n?~&cKJY=rQ8OR+NY+y5kd5rX*
zg;R;KQXWTk&1P|e{-VEhZl>BYs`1{`+la7eHtJ6Dug3IBXPm_gL{Fc34qqHZbt;Ot
zwSq!S@oY=XOlh#MPp->TUI;V{jH>WhIRT%!C-D-A;u39add-iBpAeIim>3zUP0SQ1
zB+odY7(wP#JU1|~*IRm*uH<z&&&O%G4LXmVx%vy#apKvTo2sfR-z2W{#uz6LPt0M+
zvGn3XFbR9_auQ#>&ms7e;Dxxaz7WvafGJJ%SBv*2@EG~Tp^i6dEN4-BVp3dKPFh-?
zQ4bky?U~5RK}6LpRfXUuiV55b*tr<j-G#=>U-bNEF(qLN(+<WUL>*jQ9v$2XINF%T
zl)`I~-UaDj*<755DkQlC9I3Y!p?28Tb}aTfP4CnF^i+IGQLFC<fn?wAQ<iPjJ{}(C
zaG#rP6;RGU<jJG6ovx@)$~f6S?q63-P-jO-wg)}t(qnNKaIUVd7JJIMmS_vtY-3gv
z33r}om4-6sW@l$tEy#ASkLzTFXgYu#@d=NB08({UE5>IN79Kw6RDFu6J0*?kG;K_A
zrYqLwCE^r(fKMj;nsXZFc?vovFHoY#SjG$DG{@QL6wOBJA`YJ2xqs$#Jaf#he~Sd}
zI}SiUduc&rx6AHy?cO9USnG#c6BZX)wyEs!pU=<5F>P$g2Tur1i1*IAT^BKKt6TNa
z(Zu^$oo=vEyOVl-mi+AFX`(DAOBx$AyU!9+L>l^2`E=Yx^?5dWpubO#oT!E%8lGDK
zH6vL+L_1d(Ch!zMxx5RK^sPs8eC*FsGynemYoWijk>*~R6KQUOIqL0Ex2(XZzJI^Q
z?zoyN1pPFh5F<lU%E!%ZHJx$3;C=U?uGZfU02E85<WePuccIVd;#v65#sTsQhQOlZ
z;&jiQH%xGG#<y|R3k{R2?MAGotI|Q*lW`ET+uK8CcH-eQgoqQJUEFor81X(%aE>p~
zq<*WSGC~El*_bIl?Tu>@@5nHXv`y~_Bcl~iK3MICI%CT^0j5@|^z3%ooJdx@z)yjH
zjQHVkn;!(WfqRq3$y$!^8x@s<vwM&b3O+_lZU(>a!NEF}F5d9#5|4<8VvwroUxSl`
z3i}$>E*?;&2zt}0exUJl+o##<WrT#2i--ycXbpImYxI-*>;75p@M1G<DJ;!}@)?Xx
zSxt&I`z)J;>!%iJHR^Xg>Ef{am3v-|B-h)DWYRcLOZn5$uOlGoyFQQ#=QrMPqKz8?
zNC7la8CUxl()R5^tfM@}apl8)Vcgi?F%WJ2%V_R@B}7^lmZrte)QYL1s`|Hkz3hr~
za%&>tv8<N!<q|>&fvp*s>xSmy`v<#PRc_NW)ldD#{D|ldH0(y6gS^zA$fKNMg5u+H
z*_p`{?nm@$@}bL>-^1EU*486Vy_>zxH>UQZ3=IwaM|`}+`q0t}HdN5L!dG}rO`-C$
zH6vVPEcyqtsZaTsrGF$Pq1*aW2`EugoP|EAC;iJCD(z`g{!RWQG4yp#>p@9gF53&9
z+cVD8Z)Ie90IUzE6lr#v4&pGRud$w-&NQedDV{0Sxun0UU!of$^~=%h^xe|#3<2a4
zj+?YRg3g;06W{S_j3_P5%wFgHkva*_636m$cn+XR*}uN5Y;f7`0KrA;SXo=E8YvAx
z9CNAhSN-NB&f}-?i#wgEs|;|CCr_SmThG)nJjh_EQ)LhotSQi(2Q6;s6CRfZv}EJy
zR-@;seg_*fDU98Ap+a6k1N;~1h-I|SYB|HBM~^xb(VW!O$_~(p;zhTUEq7|el@Fiv
z&A>a+IT+u9T@b9Ye_)AMw<!3DZr7xyPLH%#n5`-1shq+)R*}(3kh`a<N)+$OdEQ$p
z1f9w>KqQ1FRFQK!jV0CNoo<Qj{pw`r;E*2O!5KTZ&_n8IYb#uOY>d$2A%yJ~p?@6z
zF45xW#~tX4`a?Hn3KzK&bLM=<mh8V%IbWpvEBV6k?oBs)$MyYw%4Z!xDz=j6Tu9Qx
z2dT4@23=YoMjEvL>K1-Fg(UsKi^{U^-|roJyY2lE3ywqcy3DOSNN!Ls(#`boHAy{s
zD!klC1sdD1KCfsweR?eXTeTMDsmnY{3=zH&FJkIbF!m8Wk}d1$R`*!jyw-x&8@E6C
z)Uu#S;8sRPMl7aAg;Q%YmQ}{B9M7HT2ZQ2JiM3_?wj{{1wKnt03kfpGiplH_JQ_oN
zeSOo@`<W%lNHphWYkkyJq}Oj(7&8ZJ!Ll@ROZ@%o-|1G;?tPFLGA8!lLZ1f<^hd;u
z_b1j?p3KBS+F}`1a~u#dGBu&0q4TwuX)+hkv%QB10-~M(AyWD`?2r@@PaiOB+xdnU
zD{R)Kw1y0D8%kHJ<(%RJqQ!d0T~KetJDTD$$^>aO3K%$)wx=tR^a@FlsmN7UsI=&H
zKI;koa7U=6Q+cl#lGb->QIl;vx>Iz+tH1aV^kDm4y9za8;h5b;m^b36`$e!%@?@?n
z!Flf;H%LR%<*#%D4R-UMeCDxyL$7<nS19pQqy2I$`Zu6V22(^xA9+_f=nkgo!)AIm
z<9anq+JEPrd=nKETm>6d=20}WX3ZJ?i#~QLmvyxvD*Md|3WQ!$#f<Bpv?O;tyxi{_
z<HaxBRfX;Tloil#cdMGdq={F_KB#!sltbDmN6M}rDK}d7$(JiP%!k9hsj=~CoUn5<
zLz&5I*fWOIXfb*Yj`Aq@8B;DV6@GCX_u7~`746{%-_L~ptS?`_&EwC~IcWYlnmU)A
zLWe<9t}Zd3ouQ<K+g0)d`|$3n7iu6HZQ)p(j>+2?EmAhO!iMhkQRK@};+ce22k|u3
z+`+tr?e3`DY%xIsWbxI2q{5y>jmq`_u++B}(HXV{x8H7^8SkYJp_(sH#}mMNqJmUK
zk_N7<tZ*#TF$J1(SLu(WscL#h_Zi}c>IMAJK%lc3n!IQ-Gt^Q1S`@s*^+l84e0a^)
zOnnbv{K-iaHggTx`FE99s%rz~>m7`HwP&Y5&skYrTj^+T?_%#VGCHdIH<-cUl7i|C
zRiI6*m?9b)9IRTwmPFV(Jgl!(6XYfI&c^03?vjw`-hPbS@`g6`h1Gb?6dpze*X_V)
zZ~>zyw#CAg3qrrvVmxCUnmMxo^K?b-U>aR_=bIf*dtxki)x73dnzY5=B$wU;c?|GM
z@toU<nVkv@0&*6b><EmUMx|<PTFKDdEx!#{f|0&X>atfN(Gdc;0+6X0lKuoS@?qAO
z@B}Pio-D@7zBD!_0zS1eDk>u4)9}tnTR^zqhHWS2CZ%SHnzA%Go?~$9^yLA<I-1@M
zg9=^oTr2W2<_?*fiD55qXIo@<B;ht6$%`IwmyiA((4W9-Gf`!)Ex&fUH(c*X>aw%o
zh#U~v@Y+DrJbe6^$7Akg_x?w6ZFcja{6bNg)$%*nse`zP43}xnbq!x+F6os4bgC!l
zYBkzmj6od-75s2~L_(PoT-=&%W9v_{mLP-w4i_J<SF*<5-oCuN{M)y0x1C^S9_78H
zPl&mV*1C!ldDk{KgPTIHAKJNspQoH|pHmmx9v4n*%~jLW()xQO3c`nU8@!A+s%+6W
zDM=?i?$IJCZ-Hj{d1qo(pnV`}uJzt+5HgO(BlQB6rqveH;`oKTfK}49ddyfIlai8B
zQ{(a}x@;`^vvP!TJ!`yK;2|%8l<H`(9_?hw{Mzs)Q8$?s!qL@L=aub=Sis3dk#h3Y
zQwfFLQBLUJ?4BoBH3jax`r}7310p!L{9X?zMm01@9@IAoHndj=13)S0v+~E!K6Bii
zd_3!SmabLI&z}rNN8#!LQM??C$}27$()nw$wZBOk3vA|_N7I+35^J%^Nl8f%caOS8
z>kCW6OCRt2hWtak_f}S0<;(PUpu81Y!7f6s+l(jwdMeP-UJvlW`EjY?Ro0^x=M|D0
z=T2-3P<1K_qRb7ANNO7ynV=PN)pKzN1uw%)-DZgxbQr*@v^7(X)GxW6z{~T2z--oj
zd;w%lSDdmD=>NsAuU;^6m>*8S^BwaJ4`~<~83hID1nE%Qv#wZdI0kdGWU<cuyhr^U
zZ}YLQ$GvBkKry3X5=;>9B0b(5@0aENnUH`wn&z_IWd=nN<Bh1ek^H%3?Dxv?Cf~W}
z5d$5shP;9{k!sZ3LP%(~O~>%nX!;k$J_7hLaOR`YOVUryV>JYtG2F+x2S1VFVm_|B
zSYMsmU8O@MByweAd~@Ezr%3d6Vao9%{t1TF>(pF5xbk|=;?oH?&aw3mA3p5iOFCa3
zESxN2r?h-cJV#Id^yy{8AJX&Tj{s4OnhvIldY^1fAAbJaNkDlv*LeAyle0oeBbm^p
zrsn#=yLKZZTU+{v@ozgBa1niRNv7>JO`%~mH3cG%t*v`yA9Mh4u4$%LUO1Q?O-Kb@
z8xjk6fO+A^U~H~ctQ}JTGG3uZw#9f4FQO;kD`0d2Yl0d}fr&CkmgcBDmQRMTY<eA+
z#vS-9<<I8pRC#8vo<7$|zQ*d;6_u-)GG3@7C4J-R)2A}hD!cmgy>W3V_XTNa3?_GA
zATPpQFz>8}dA8g<Jdy-F6|&`7SXp~wt2I*S0P}2jBKBv0`40ZZz3juHx;p;ChCT^N
zMaA`S4Ur6H-gdTwYUcI)QB%ca(ZrKQPU9XmFih=nrfSQ{D=gSoFTFXDua_-@069we
zQVCgj6J+~eS6llz<@sF(#Xn11ZyBXGMswqg5}Y?Lf5JbOqfLH&T}G&@AIld=i<yaf
zv*DUkNJ6O%U8vM;JH`uTp`8KYXj!Xr(j>sbr|{b|Sts)u8ZL)7xR42%L>s+i@iQB4
zV!Tf6+?+5pbQMZCCS<q0yuD-S^EBZlC2W=2jE0{+?d+@;2=~vq<H0X{V*AX>(sHxS
z7n<_FeEA}i=(IJYz}de{uZWxbYj+X)JU$0d90exK=M<oQ^!D<)dU)8{+8Uq%t1L$M
z0ep@OEL1Cbi;+k!r2~cI#ucyexy}nwaNxcj8XA(oV=ecFQ8`~l(qCLF0G$@c4%KOv
z=}Iw@J8!6>5!3i?Ghg73J^~5LdbTQ7&IN<&Z)M!GoV0ykvOZa7-!_sh(>*v^sI5*)
zYKkzoS*(9bPOf1PEaH0q{(UCRlCf$_Bxul{V9s&kbtK=u4S6aiz{8{NUICUv>FS-|
z`#;~gfq?-#q!~=St~^t{|728AH070#T)>GnpuxxO#<$SwJtIImkc}(J%F62MlRw`}
zL38@dnVokUcm27(x@sbBapSabvLvuIfdxBPk0)+n|5Z8jTkoLb(r^1nbA=RPy~tp_
z2S8l0P%m`aop9cW?zYrm7xP3-0m}Ko&SJIM-=^Wz@FzfLl$FJc*AnqYZ2@{x+(4R5
zWW#R5E1fs^gP9rZRv6DML!2)X0hi`eWnUt1f$*o~b?Pcuob2iw8W?avO{$J0)-NqD
zgUsROh4J#nfZu2@syi?*tt8wbeh4xUd$z3aUp5GcmOBs5ocd?*BN=;Vr$U}!<A3aT
zs5zMDc<JWbf}*;eCAe~QakLC5dY_kuza<Y><!KY&0=4LLM@We!ScEEB)O~DbMn)RV
z>od1TwuoV%X9i54qoX6jT)a)3$Bb5S18txvv6;P;OIV^5#^bkIMaXm(fq7vxXjqg&
z6_<P8b!U!Q;Nf{yepI9PnEJo~P>4#;tfe~?!cizx43qlS$#4K@XUjj$?~<}7X;*sq
zuTuTKynOray%R<LpCuZuLf&GX?j7}?of(7>Z=P)F<##=&fb%x%-#|E!NX|7I)*cis
zEoG4^y4t(MYAIbl6QCr1x&J-Cv=nY~jC(ayt$KbTcC2&CN^`P+=fdJ;dB<Z<YKRPS
zK(>j8YUpzG!S-zTbf^uLH^cO6)Jk`y*Cp!Q6LiU>y@C+OjqE1U2#@53+b;ejzJ|pU
zad*Td&m`iMyB<>zRUVgaN7`<ZvYjD1<GG?w&kA<bt&u1FV8t|2W}7j0@h&YVO7srb
z4O6|&^C57Xj-*8xo-%eAG*l-?cBGs+!;mI3pY+Gy!)i_nVtP^D3CpehkD2PME<IJV
zWga8sZdE`we)f=^zjE8V7B7^Vl+@&cp^EHIdPd>0J*6#x%$G{wv8?c(r2_(OcacV^
zer{m9ewRXO#0O1@bR`zOijOPb(|b%6P<w3(l|E>NgXI$4?#rEuf6ebxGUSZAR)6HV
zg@eCC5%m*^?@P#9MB$2B1x6He2D$=pONsUD1jxJD_<x2cCtV#Kx91x>Q=vuEl^3>r
z`RBYqN_apasFEbZ{)*wf`weUB?L|#iRTWMT50BJv@*3kq4+#n1);UM;o62-xs@B!>
z5}R7bFGNO0W?^X=2b$%&;k$>(e$hIpsj+({zs+2gdd2cm;}61aubCS2YNLI0&|?w&
z`}c`){j00hF&@qv6Zy&3OQ7`K5%!^pH}%J5^K`*fJ9U56U`>pxEguFK7^q#@C73eQ
z>I3Z4d;vg>vL+5ozw^0F2Q3ZCNh@ARg-KJIfx+gh(j^PpyP@lbLDJ^t<C9H{>K+>U
zHQI(5RYYyglsoU29=<d+3JnVsaNm$?hWdMn0Y)kql3ePyIw6}N?tK;XV7F2S%`?}g
znhYji^s-PJj(i6q%HcY__XsvII;kjg34Og18c#(<1xb?GZ4dtSxl=KkeF5?3BlPSK
z5a>^+gx$`7d<)uEpzQ(af^x?OpL`6c7dr8r*})c<h3dsB#TGGD(A=ynGxPitK}KO=
zgK1l4+9(l^6)GYkOQV+@Uo3z))#$VXu)@_<Ll3%;jZwbDNf_vO7QGJJazZU>#k4gw
zYaMeR0B}Mmo|Tisl=_Ibu&%Do7J=`n+GarNFZ!vwK;1G|KA9zcWMRRk^=z1^BV0j<
z0brJbfwvXbvjbm0jB_n2s%@Z`G?C2d>&KBO)l}waLww*K3QDz}bpcA=2R0NuKN<@<
zJSYYRJBwKW^v_BW+f=6KWVNM+Zi5>teb;*NE+4y|FsAd{_zS7~tSe@F#&%_qJ_ZG=
zytdfVzkeS(>?FsP>c+(9il@I{jOvMT+!A)*LHn!2OV!P7)nP<<)H%>Y*osq}h0d1$
zZnzkq^n>DV4<)tGJ3ya2-OR|oee^nYm!8SlC$J&jLIai+NL`E4O}_$H8FkWtV-@=w
ze3!rrcjpD*JiSFtzOKv|B&>n&K~6I7O-<Fou}o9Q+;}ciAiN@EH98fOP|Jh;oJ70R
zm13k+p8yALYMM9-fu@L*zBXL~QeA`ftgE?Gd9b+c%V)d>PG4$pXzA&p`-sWgwUnA~
zlJdsRX@l;J%O<=pzKR(f5HgD>HO$=y$NR_3-}_$B(4Yv;<i>Mu%I||_`!Ta7QdZ-T
zl%>HNY4c^rT32`O$QIglp{o6BnH~s^s^%#+(96%dUP>`c0%7^G($Zu+9!)E{boGbG
z4puRYu;yqmY;V5a(Y9yI7MJb*Pi+4wm;%$#J;WjAZT0}WGIyT-$Phwg42g@l>O9+r
zHYaU8j?gQuw|CL~ynptic0?{vC=r$p$y%rBo~H2g1?Zol4W3QBPqvCl{MAP52Tdz`
zN9&d07Y}gm;j8C=LKdzs0v<fyi&RsvTSiW9>kst{KyJM_sNOefX{8;7pNrDcN`hg%
zzhcJL$_5X;8OuQI4I9$gEF9D_{5ijgw*-bpO1pKtFlS6w{HCd+df`=Q-4G|1h=_<t
zJ)t@{+;Tr3U*G)I(w5wKw0G#K*3`>NP5rkrJyQXIusAb2v>!WOvFG?#f7z9yA1SQ6
zvYHL2TTg)kjKGJnLj{Z*3Ut(CwSB1>8O>XNGZN7$MCj_thyD7MChC2cMZ2kJir6!P
z-(%}-t&R7=ek<Jma3Vm@^YOrqJGY%cMTlb{S7SGS=G-VQ04N1NhS<_YjUwIo8ofAR
z!gxtfj}%Oub=^6^)?MZec1lS~#`rk|hlf*fyPchip|dR7-WwP!0mi8#Bsm(iF1Yr$
zh6%W!SeK5zsVV;Sp2DGXJd#t4(H~$Yay+dUa@nDLWi|zjKx%cty`II5j*}@G)`HeE
zXw8yf4o*&o?h!=stjozsvu<Ay>^<NJsyFxkYC;B;*6mD>&$>t1bG+t@FFJ3J)tCRc
z+Odx$Uu@9IXMNLT_(yyCMk(elXtI@M!a7r|U#Xu>Rstv_m#w*Z=r2<}(JieJrt0YE
zXdu#>O;@x5W_g7rE;=%@0(ekdC>q!<tkolq?oaP^=8&+??#@D$DvUWnR%)Y4OyISx
zbnCWtcQ+yyPZD&_k)Iu4)+mV;V1GYdF~Lc1095T`FiNwztYh0=O%ZpL9F}b!=6Q*n
zJ|yS1;;_YL0C;JjwI%u3+zQM!la94h@$6tMpG&&H%m3%kDPXVh;dN3Aj@`b*dP@C;
zJiqPw&(b8QfTiJS0!yRBhwI2pFLV98YqSk!0}}-KbZ4go(G$zV!NbA93$(bPkPz^5
zpCEkil%US_vIP)`CHgRZ2aV)MGI5j^Q)O?qwRs9OPb;cfZEb8!Y)oPScTYiqIY2PO
z0|)?&bXi&32a*S3IbddbIz`M=*FB*{;+;`)RNKHnjbVTbsPHb%#UG8;J6=P?*hEEz
zg@s?eTAL^qiera}fKnnZE{-LMXm0k2>cF?0DAEUx8TZ)(6O$a1oE*Sh01po6x~S9B
zuU`+}T|BJ^EG}>w=sM*b+qo8M!fhlK2^0x{!-JXV>RJZt1PmT)d27FZJ*R@ef$9VJ
z?4O<IVmyUY!9TLIB}2)_nKcVOWINDGNqGVwe|48?)L3-%)YKHX@mE?JuveU&o$0}S
z4o{LBEmWe2j{;?qAsNKlFg1s~?Z-V=ZOdnxADdmbh=qV9`5$A^zhO;Qs`|%q{JJ~y
zN8C5m7lXUk{s;TwYvORWOegspxAaKY8{U`S{Ga$y8GMLWCkCSbWr+UAh6OBx|E6Q`
z|Heq2X1D(DxLDJND??(<OcgN8YaiL;t!5?{trrel7sPB<Pe(6KHw%UP%N`nH1sswh
zueQ!3Qc|j?q!+9Gv%o4wC3*z+JZ(NjFqi7XR$K4j?%a@5PzVFwp`fs^pdeg4Jm^u^
z;_lxUVsNR`9Wfj{Jk8o58gJXSw$__q;~oKPAM64-=qc6to4A);&Y`nJzi|PE%ymD<
zF{SSmX~c5!@kPmzJ$^i1+)3Z;Lx6V}-L;M<C?J?5>i$8V?biU+$yII9cL3IlI>%8R
zMMXvT3Q&%qq9z7AqD!YSva?k->B9Ysv##Eth}HK(Ps3PwEZi6si5`(_SGr^Z8`Gl?
zva?sw@2Cc%KQ&a)XNlOA8yJBi^C1doWLLTCt~dkkae8*Pv5}FPk<ka>u2Cd71=f=+
z47TOwB1Pi~aM&?(bBCzhI7kN0l=%33U}%_ug0?w^(nGJ&=Wwl@NGd$V4ZV`zux;(0
z=<t}?BMSp8JHx;>1jjDe?+rz)tQc9mI`8Z6pD5O&rY8q45$o0W8y$Klf{l%B2hh0y
zN~xw4DQqXy_d?Q@vLG`uW2HJmuIHPZo0|D5(wx)hhYPe^<hRy1nZ^!D&bE*8qkZ4y
zeHb<b%CcLk7>9MwO94gJYX{6n1v<GClcUZ2&Pzj7o0{IwkMp$soSdDX@}WMiFP$S5
zsMas++5N@e;L`<!g$?v9k_ZS1^hl%UPsNf2y~8#${v?UGDs#$%H29$2q6c&UwPmm3
z<W~QDv{fy!Vml~Rh9#7glo(YwBH10%uHO*n898oK2qouDd&cem<x9)=zY<|o(~AYh
zjxskHjN}u!XDZC+n?<0=hA$a*(d@Q|hef+CR<moX8ehoeMvCGWd4G^1OZ85XR8MQ|
zsEPBy*LF$AHd>Ye*1JM=qFWNndAhMxkN3<h?bQu&e?r=GDO#}sv<5`6lu$G*a*$m^
z!*~MSY_)VYOp6vq2Bgx|UjtCIV!KofdbVR}_(H;YVNjdLa%=inb2GL-_zk{>UG2}m
z5_gZ+=Oq-dSCGkmf?d*WgJfHoxvCL8-*}1$nJHFnG-2bkRf3oF?W(}_lXX`hxiwDE
zF?z+++qds1E6441O8Vd;14zWvN8Y0brSLPKaSwo&-RI1wfo{h=oRUi9UR^1=bE@mR
z#Qo}QC5Agkmn*3fp2BnUWA0*ranLB%9ck2bwJ5U!9HrMrw6ufD0(_UtWorfGa0Tqw
z*vLqS;fu(S&t)3d@t?~P;5c%8t}&5k?>0i3QQo?x_ilV7FG2#40*rS<N8yk~AlIrq
zcpXtzTRYoqZFrN1QvK)257cPUt~R%=3_e}OeM{Xcvy#}@qnm9&NWBZ?<qYSl6VDs6
zRP*?*=Z`xO8%x4uyt%5Ku9mODNhBmBq@@+3%m^hQ-~)-6>^k*L9I({sIjRr)63$r>
zX@MQ#7fH%#ua!A?crb>T0vBr?yyFy7)Ah*PCnqjrA890N$EyqDde;L9iHL-Z*7E-R
z(M;O*CnZdQJ<qK#btxtnufFbAz=IlBwJ%W?2#p11UQ#v>$M07GHJ<hcW<%wi{tQ>!
z!oouQfx{%3w5;rA+%y+xu^4n-6A$B6OTq{C3p6B?nQ;M?kqSknkjtU@YWp`9p_S!~
z^hQpQXMBHy0j1@bLYk91m?Cy%MAEW;>=|0{jIiLR{y+#P==p=ce_tWI`PCU`eB!7S
zE^L3`)Xd%z5>lcEAAS)q9`zX4AG9T)Fd<|fTTUFI%4F$5F%xi~nTe%BP5+{m)l_PF
z9WgXH38{84k1K&4)S(;tf?E6fs-m;AfhO;9yy3Jy*D^KrK_LZfkhP)a{uT)-88`eK
zC5F|(3oVmtm!pG+VU!{*WNbkhlWU#c9;>@=Gmr83pBJ$jex|`w099k71gwZ^u3Um(
zXme&p9y!5_e=gv2^I6-AfUL4?Eo`>|{}U6^+;-@fA`}7>Wn&97xD{RJvF)L-AJW|1
z91)RT9TStBY#qZCV=-Bx1=pt#kPQmFBzdRPVDzSR0fXxSTL+nPZ|^(!=~PVFS*W}M
zI^PJMaytArb?9gfeX_4bd9&3($yYvsA0USs2NjzI^eI5v<LGFggQNH;Sz7hl8JMFb
zutY|`#JPXpVyaI4p-<@{=Z)3^b!L#oIy*aiyUWCH$8j3V;Hh^$)7Jjx_pL|T%G8wE
zbX}Yz>DpCHLjd<_Iawerkmn2NEs#5h^Bu!M9YWkX1g@Tpq0hPisS@DhA0B(Up?~K~
z217R|FDuEb$p_ACCZci&{k9$$ig<ddbv05vd??_$P}=q_JmT<!F6c|eb>1k8Se5}2
z5?IOY1Q>z7cDWrAuS+UPLa4tNyX99@ShxvD&6QJJKbqyDtcrk#J@pj^hRY=ocz4Tf
z92|etU^aGCadCZZ=yw4dsBTP$%B2z)HN>Pp!T~1bMVIHRZvy@zfw}Ur!OU29!GPCK
z_Am-Df#pUm2bCJz$(-L4AFD0L(Z)4JPX>4YW-4dW)6vp9J|>PC8Y;Uu^?n)kc#ZRs
zIF9-a@pTaZreq8ZXzr3S^nLzu9PijY-|q~RtXp`YBx>D-Nyy~JQ$A~y?0ZE#HBDLB
z#wW?CMY%oU+Pa^mrMuy!`is@Goerz<RaI4IUSoSS(}Ts(ZGL7$n~sTM9WxXB*hvZ?
zgM+Xw2a1T%yWIu<`;?qaoSZVm$o2-Fv`4XAb0rGf+MJGsntXiMKLJ9+Xcf|^An$$?
zCqLW$&Y#>pAEyHnqQ_9_?ry=E8Jf=HuTncgc58q(@WPIv`5BCRqOU4PO${i6yg;;;
zmktaGx<U-N9_!1SxnxnU`T7r-HA|mz=cS6LD~V!Yg@wV3ZBp*$R4!$;Kz^w%D|^Mm
z!^6uN6dD{F6y$SpvfUPd9faH>*~sX_RlZSb02t*2o~CCM6f7)#QIDd)xe3UvI}1(j
zLQqAkr-=^gOq#&s$jQewJ~12^80Jp)485lO>&4~guauWL>7;3dOJBlm!xu0vXjr+G
zmL>J@e)DWAByP1W!MR`;If5u8=fl2!U!44*K`tLagdhlhj!`FYAOjdoXNundVCdkt
zaG!@y^1_b8Gd@6dUH*=O(ifeZuQe(wt0Q}`u(Gw1x6%U?#9s3h09;(T996r?r{?DR
z`m4VdeO6KyPKBz~xpzY^(kU^kV{7$!L#ZUUqI!ru?-F1~vmNh797fM^!Ba)ezBd%P
z*%%m%R7j43G&@<SBYRGPLG=Csm68&RT$^?zC3^HIsDB@%o9fa<2>`jNtCeioD05}v
z*v4z*3s1JSCyV}O8=(RKV;~z>`b^9o)iu1#B%l2u*QMVYipk&5pKo-eom~VTpWd<X
z-hqLWIrBhw&TscAoYB9{&r_S%2YK+t@=9N}#B(7p2*~LiQuJP*v-yAXAI}?CYT~Oa
zJlOjrF;in5b1dKQC#~wby^yPdy&!l-DdM6s;T-FEx^eO;PC=mG3wU0Aw$8eXq1JGZ
z?K?3>8o;OI!)tXku$>q^$Zcq0F_S4Zi4V16LyI&yt@nVo@}=p(-jSUcw54%s?Bf!g
z(faK`?<+PP&c*qDbp^Vp=Ch5CP@SahjXyo(oBR9wfUoUg=OZAf1+<AI<tiR%W2`P*
ziXF8{vTc&JJHt{RJ%UA8GC&up{oF22lEX_=6T~iwkNTMx<r4+X&xTq?2w(wWUZN%$
zXug!&7~QP;+X}Bg%q59B4vdcKb>mmKSJJtsrs=LosdjYzO+DTjmp^BvHbkX}h;B?T
zXO@-i0g*(v_LE_`yOsl{gSESpQD^pm39-Jl!f$f)9k_JI2I}kilhf1RROW;x@>mNm
zC+6QJpg8wFMhUs@+A|^~tg|x@LGO8gZBlc9B|?0s$4xLkC7w?H*%evm6isP{hj&Oh
z-*~dNaE!jaOSU-Zam4UBGpZY;1RtGpkGUs-amF`M$E=Z`m2m!gugm0yZAa$<#g%R4
zbJ=H$vJe#q%3VIpCVL{U`Ahn!bG*1MF}t6Kx_SM=ikc<*wm?+=;elkJAY`Jzb^G&2
zOyIVk_;+C5e1F%k`ViW3?-+_@{GJ#m1MJcO$pWf(6|A`NJKqhouG-3Nwx4P_XB-?H
z`b}>QhI7dl<+wOF7z;#z{W4L|cxhVo@@V(8yl>{!Xy&%xekOa82yYq`(tYYe{uc<1
zk><cxXuN7-X13SnIvP$fJ-MC9=3oJnQ&$1J;mHoxa)(_kwxVjq;*q-!+-80Q;d{p`
z0e;*V7G~3tdkJf-d9ZaE7`AnDe$N+m_rzwf*DpSngd~bCOrQ#igb8U<&cR$(_EG?$
zS|EsQ^w4fLs5XMi0@23QG?!)?hU9EOCC0~FcmTlk^lrrVZlmjk-Oy)6#7dbVG9|lL
zLxnLv=CI=1!->A$5YA7Z{*p#FQ$<vgrzh20udwr{KO7Xh?Q|GfYM)8qlXPC3<gE4W
z!BbXKeP$jg8`HrJ`sXYuV1id3D0gI1g>f;xBDv1XM&$Z>GjzA+VcWMA`)1JeM(vt<
z!S=()0TnQQBtb$+$rj(yHKe4V0aBV^8Q`XUs0y_afu}+fr(65O<(U^72#XEgtazS7
zo$fb~`m~Ehf8a$s46}af_%I3R>4O-AlmI)VGL&ACQjCA~@FD0=o;)QZBPXwGtPgv_
zyE3-#%bLJ<^(<1-TAwz$ZlnH0UJ^+zKEu4EAmvQUGAmkoT2q}#%+d0F>eAZnu~HMI
z7x$`lQuG@bbt;?(S{4R6a&#4--YZmukH`yF`~hG}>6sh>iw=&XMTY#DXyg~UBp&LQ
z?MlJ!)n?<pTyy}%{{gwM_<&60#-*-W71(49LH2l`fKZ#!4rf%HxEu`!C|<Yg;^d95
zhY)sw!L%s=-8q^(%cq|Ar)W5!uWRT%XK2!=n*dmyd2Uj%v7M`ugJW-enDU0bNquHY
z?P{wDz~z4J(vs4ox3;boo4m9!kGN1L%u$HXv%o<j)Sb6C7D4T(^nR^XZD7yg=3C}?
zs^7gJC7;O46zM%0yMIvk9woP;iBIQXMJ?B(EmW-A{9fT^FOVGr!pS>5u34;s?l%3?
zr=HQNXy(GE%JKt2<nRk9wI9gBw1!Fm$fUmv*w9y}H7)f%Vt5WLj0T5jRXaX*YFmfo
z>OyGLmJ%Tqm6+4i8o*p6zQ~LWR=XRmOMQJ~YB->2d`LxQERj@QRppa#tf#*amscQp
zn6o)qqJ-sTBkhT+oj#dNjePN8EZ&%Ly%W{d#n8Q^*NEbK@j@b^G<gQumoi;`v+y~t
zI)qjM;}FSE7I8=Xd#X>8a&wbBrK>|rQz{~SYh+|3fy*-|QfjZNQgT#N5CH53&)w!9
z3Hb2$f`vL=A8vCnF=<O!zM_p>+~q7#VjyAr$%-7q$HSu%2EFnJ{+LK|8F_h_-QUPA
zol<24Gok1K0ipOAQ}T|a`-5uZBP|ivzXs**SjM5mxR*C?`i?Wl0WL}=MSzH2vC##S
zlVqTI_^*kJE6?fR$d9o71Q`h@-{j~z1{Ku0akI>5Usz!CZJ;i!QVV90zZ&LVsFI&y
zl<@sK4lUH#vAE1=c<w8MzQ1_69d=8br_j;3dos;OPg67QMvtzhRIYR3Du9kX0oU4E
z(S`X@#&jjBxv>F_i3i+a4^AR0-{!%CN!ghdKN=bR>@*X0)lEt^{;e00@WGcc?#L%@
zSouXjPyBm24i5XNu5yPN!skInlWYFMcl>%xqutMjAUJ=QFO<xm8g2_eFc7Ba`K;ud
z0>wRArA2<q^f<PNWQ1akv0r>I-_wnLM`qBlfc1SeY|On)B^91r=e!wq@Eas2Mn4X>
zj*gB(D8$6dNX?Gwlc{N=Q@59Vl3_<zSJ^v!(Da4hphSLXdiM@qs-3V~N-6p64KW@m
z+Q7{0S37M$`j<Cf9t@2SkH^2Vaq>Y-lvp!M-Sre;wCv%R^(U;hFh@7~&bnshMlz#q
zHh_53lj_|L6?w^1a))Sy)lZs?YKT58&Kav1f3giMp7{}D(*RQ#-+xh*pXDv*ZaH$3
z3PSxGb0I1-qE@I)o7<Quo}Q<b*{~8KMG7k=4o9YbZFZN|ErTd1aZ*_|0L{Gw<(+(F
zm`f*2`q=slUTiW0HLIWbYTt$PXsTtjraD)1GVj6R{_O_YD7p{;_lPPw9}Bzvd5YeM
z0g1f6Vgh)59bFuV5AHCWfDE@d>tZpnk2;DH?THhWU0#k_9-Ce62y<|7`f;cQwjUrX
z@$Y+(k&v4hSs7UytLM7Ndy)lov@GldcP~SK3J8tvs;a1P;^U8uOvFCJOBprGSSq(^
z07ilpuDAMXMQic-egI51vFrJuSIj?{{RF4se0}wNQO8CDy!pk&B1U_kZQ&QnU1kcz
z2dmG=k6xT9bvU?}u(6pAB(e9wET%K^lMFWst2o|@SiYie^dFk)GW(03c6cYqqE%yn
zEP)9V;8a5{57#S^J&V%yjrHL8lYfBeXzN^>zFxZ1!R%z|Vpb?M0GEC1EZ{U*zE-A3
zO>nhaU1NM=BI6}4IOqr{H#SO8UAzw;$&kiB;jsE{Q~`F-;2D-)fQ;m?W5hdR{_CFt
zKPFH=7lyW6Y)#|!(6d`CmN*Bm$}1)b>%G2MUjMrQzod6ip%iv9YAKbiDEXn0`EBy3
zv^jcIP|UgKH#F>7@5w-Vid9bx1&40KqoY%3(rAW+4Up#vHt6Hq0Q*dWZ8$m$9Mz)l
z+bhs8J^+RSE?xY!N!RTLF-VixKBjt;Z=SiCj|Px|C5NkhDk<ur+W47<1~OynWRD&>
zocA1Smg-BrdzbJtfnPvSEnk<>RhGvn<PJC*NCJ+_+K)owSLY{&htKO22fK+nWkmb4
zB*`6ah{xY7e`y*x^gTeWo7-JWU2&x#V5I9|sx%#*&oPrL9s}tod^$BUiL>KLh)fv!
zBk^baXM;doaeqQcUUBAk@L4HcX{<zj84SJP<V4Q)33$^-$DUV2GcDJs(Nn^S0Y~Vt
z!5%s)oR2-?u!-G)B)-mb7rRy-73ruSqb8pcJO=-D4@VaF#qy~K9a`AbC-WVC^eOGx
z-^NmQ4@gjGDD!s=8JCA&lH^DZRLBwdN2jst0GGm0N0%NmD=oe#y!?S90Lt{5oc!NC
z%U8*kDb}eJSD3u?4Y*X+Xi^z<vs!4_o+T5bqop;zm;|n;lc)SnTWb%&k&K5jiILwP
zknt~HXz3b=x3~W$WySUbYO$y`i7AG;TkExSx5UYx!FRyjq-!*q5qSi}HNd6Vq76gk
z>nkG5<<Adz-@IY>A6r^>IN3lQ>m>MeWf%gZi9yVu#78SDwV#dLN0nb3^j}g5IEXJ>
zyrM4je<h7GT(^JM`{D@f!cLV#oKUiNZsoh3Fu$=SB7s|e&e0lLd|WlljQ4OhkwauU
z6W7GE3mGkr4i#JGn>cUV_QtVBvt*~G#rcXoeN05ed|Ix0Gc_2vb#5Et$cD-3jRU=4
z8n_~UY<w2A*~<GmMFv_nYvVqja-->>BnyfC#ivX0m8;JLK`*}s&%z!)voJTWww*+E
zrO&6NRM6d>g<qC+eG=&gwg`qrm(vss#2cfhP_5t4E~{CjcbR*@4fAwnj#MAuR#R~}
z=+lB9tqbjCoFc3=Ij@$sO$uAzE6l>;_3O{y>36<lFFJt2*W;ebWQst5qcZ2x$Jt(}
zt$OtB1b;eqeC?mtKOq$;nv+-xH7~)5OYXuuL=~V|$;qvvg;l#!!r)MNc>Y)J)^ofC
zAVP~DyBmW;WQ9%U`v)<W>zB<Q+utIiK~n2=!5Vc3aR>^c0KMM6d!GB+R(}a2NjFif
z#a7?-*2rk(SIdhL!E3T3zmXZ@%%E6Aw!i8P-iEBQg#<<ZJh-T&zFC=E|G`0;4I#QS
zs(R2q2-31c!zob7eK?F8R%o&&CNzLWNp0{o%*#Cym<{Ap_)m@kC3@p9OqB$`0;6&r
zwco8TFNj1>V%Z^gdLa?#xv5A-f>*$(l)!7=MN2n2X1-XWbs=@#Sk!b!Twq=euwnJK
zm(<-xCoUt)v??kpISPsCMm+UdD=Yb<%`r{w7JhE|l7}H7A$XtoSXfz_Q%>3=B^?pM
zD<W=xz=@#>lktxSorD8tCIyklot5>d=A@U7w;l$e5VF7LJqbX^tWoVSQBSiuS(@3T
zeh$1^oHxZqL|{cxIx|zzQNjo|4~TTnd1&IQ=q2%5zwEdqU1VhByAbkSdPB3?RZ-H%
z3SaOVLSnhKAWksv3!C9c1Vr&d{QOszme>F=bdJhB{3v4~qwkWV9&8e6zRLQ6g=;G$
zC<tYJzB>v>sk{#fw4gJUS@O~>G;xOC<#X83{Lx5D1!&KhIacjzixRIx|KQm6_V(`G
zxN5ikgY(1a&?%eY4D*QS;*M$5q)T_Kdqe=o9iXX3#Ji2I!W(?1q*tU!8^J;R2V^Jb
z743Kx12&H+C`5dg#%|!h$5mA^h#bodX=eCY{xv6uE?YL{;Gke8&1W8*km^lMvYS3w
z1f@AD-v=XDz=pIoGkXPH7!>h5jk59<j}UU*5w9+YiMeY9x`Cdl+iLHRkxkAQHXX{Z
zKr4OcHcYKTTW)@)noX}Ea^0b8`I<Ps_Z9fk%<;EFuyAr1&(uzb?XmC<O8Tq*`AX6n
z`Gf-;!8SK$%XZ%61828my~x*2l;h;!a?%5sd0?w5Fpwlbn5T$9(?`5`b!x1lnj%5h
zs`heIk%1T&_H1QGO9rRh29qkl8l{&bx85TYcM0<0EcDM087fzB{HG_l_V3-}`rj|X
znRfOwXY(&E6*508T4h`hCn&nh?;dpOCX0BcYxO>mjVnIdKMoEBd{3z7Sr-(sYnfQP
z;ReoT8#vx_K7N_g9}*lqXgC+M9S&dIp5<!--OSnMSBS^y2Adf96<hEH9Nh;yvw+1g
zvC)C@Wcqo*i_j<U7~<(He}5=6!KYnk*F73INR(wNj$2kQw$P8wnjHEEycp{miB}lr
z5-v@)!?%B6PE?6Nt}4FD_<2QqyMT$@g`%}kk1z(}IZ}k@gUK|B*wboSW;%69;oHvN
zNrK)A@8zBUXs7eD9JvF}YARIgxr6=>P4|8MdI$McoUM>{&ux@E?LCkbdS8i4gVQ6u
z&$fRE@!2dyr1Eoc>`xz(_KX5gOx~F2f8*^fprT&ie^K3T6$8NyihzKKbc2A@AP6Ge
zAUUFRcZWfU(%m85(hR8}9Yc30-Q6*BANKE@v(`Q9f7Uwpp1ZEg?b=I+neTk#eV^y^
ze1g~V=Zpgx0;Zs<O$=ok73;tzIKFz~ek*BCqq&_n7HvNfv9F!@5XkvR>6pZpjdO40
zr+Xj$2wpC-M2qTH!BV3auavKGZyWPPePg3NaLxNxRB@fSQfS>v`$FkMrNToY1wEc@
z%OMG2uJhx}WJ?{92r(LmwXxmRZ~6@LdDj2l8Gn0GSNa#b<~*}qsF_O!@n>#t5*~W*
z;PG(vp9NK6j;`f?L!c+lWpjoaYiV;K9znGrV72x6*Dq0OTU&axut$>X_7tCiM^l~I
zt=Nh_`!8Z1cEtA>x}Q@Kf3q6kC}!h{0tuJ?WH|8otqJOa{f`H~Ut^5_;qmh<$=+tX
z#;+kHIM`~w-G1JfqilFEOGl<{JPbg$Jh`oQO`NW-E|Ai9AK|N@B&jKj-uO6fyJF~<
z;-c{1LRE6HeOqn!g=bIS99(1?%!9R*&I&l<di#@jLR=OD&yVB$VM{(o8JnIw+;d(g
zre5TV2pZ6jtiBqk&8Un&lhrd<{`12p@fzn{RpYD5!Y1F6FDKy=2XCG(%q=DB>2Tpt
z>eRA~l>L6P___V0rb##i4I}EFp5)&eIJ*ka!$ODr5TGvt)9*E&hvJyap}6niaU~IS
z@yc1hjqg2Ws(c)4$-*KFeEDT_ejOc^2p(R8{5_pom-S8Tvv&hg6842A%gi3|l2Eep
z2y|9n%72PKkyi(4GPlNkf*wYFrEh<_fy%<asYSSYUqq}86GC-rj;wXzG@N=&$wk|h
z=J&3j$ImaIYrkc5LEt@q7jS198XhY%Uq;r8??eW$godJX0riKX&12v^42n$pX^QFw
zZ4%A1de;==#9IuWz|JXn6vHbjDtdn@CNh@c<~gIO!(e7#(5F7sT2sBP^56H&#X=5r
zewXN`R+vxcr*ORn^~_0y(47ZQMY=me;GQW|MA=9@v*$W=5n|->heE8fx;isctvD<B
zsDhm>PEKLUv=k&d%k+#cF6}sPYa`sK>|w!Lic`Z3aIOwn!nV@hl$kqit3XNU)OMcI
zVU%b#u{VsHeKkYq<h#-dV|>k?f9RSr8Oi;~uV%9|Go0Pzk&WV{x4PV<P85RVJfe9u
zWy1ok@4Aa06KG$GeO25ag5MzYDA~vnEE#gO5i7PcbHph{T(5PQ&g@4))>H3Bd<J6~
zZ-2j``<++`8!fsoJ)f@EQBwY6%HZTusgE<oz>wgus@VPETPuqF80)MWuJNY7<?s)H
zl};G?M@SF$sj)Ez9yF~0(T!$&k=AtsPV<vP3CZCc;B=hW>^$4vbV*ilUUJrdvhTwm
zHCgav`X<praqsaF)4nk_Wyh5)`T>zbQ|2)b>2o^mbPbL!s%(k4Tir0<ppi`+TAlrH
z`Lf*8s%r$!PWdRKww+Q>%c&}v?(n@0ivs8-|4gWALI)Gt(mPw99ts{EYqmNyEMVi&
zolyPQ_l7_?(+kDyP{R`=lQxThcB1&-$KrF&H-?UF4d&lk@uS85_QKEE6F$_eHTbmi
z6cm8j>Wxx3!1D-M#p@d!?3#Uxd|dJF+Y=!TTrQK5<d?XGZcI~uJvIz5dv42>r6&GL
zhL7msSx)dF12^}^$hJ}vF6rbqmCS_dgL|Jym>lnr^X;rVmT+JUR@6A>q@l=dy~NAd
zA#6^R^vaSl?{%+|M3&X^PTAbU$c~$ML6wfv;u2IrVPUhLN%JhJ^>pwUWLeMRUBf+k
zGEKqn%<_*k!zcgy%$WRlr{xC+<&u5=r2IBNlJEX;#=)U(p&*$*5RB9_^pB2?ejLMJ
zEneus%T+}_Q8B5ML)1RpPqP^Qq8#sYeA{!3jotSsvxk*#$0i>NwuApA(g6KrcVWF6
z^a7xOu$-uIKW;DkxZ$hb$`#!@NVq;rE88{Dx_jpQJ04Z<!SgOQIM&S-Q<F62xc0Iu
zJFz>lny!SkVh0o7u1SJMZWYAt?xiG>TYv_aotvW=rj+3Y^R}R<Nc0r_S*YTKX`n{d
z`-(&m8EQ#_X;zk9m)rR|UVHyj^S&&T2uZjAC``CfHu+uD#xjdK<x8=qEKRw|QQP~H
zG`ZTjF9GD9zhCImX^TThJ6Y{Xmqz<lD5<5gBU|JiwNL^1V6BNqPqIQTi?(Y}(lh(E
z;)um=B-2>-+gsnRDGfpu`NB7-tNbDN8R{5nR*`1u_x%~tGf&jypmU&rSyy-guZ4vL
zjn`HyTeN)EGkN)AWWSE{D;7$t^AqN_m&S>nJF-ZmXKw>indH2~HU!+va`<c)&g#y6
z`5a9OpLD^1Aj4gdYMA2geU_q=7;|S*bMyRo7e~4nVJS_`ncC+%B;2=JL8t%?l?BY*
zgI%Z{_C_RlOPHk&77}<(yJO2dt#Yn#04Mk0v@|H*6!rIg*}CC349*8<Vp!ouTN1&D
z*jPUOl?vZGYfssF)Dq?D<xbCR=PKiMed*kQgu;&<HddPJdF8Y}hD&|U`$9y--JOB~
z86^O4b!MQqF|QPhw$;JeRk$7=w;x74q+VKH#>~%I3t^tB86?8Ptbr49YZ@I-MqaQs
z14VLKy0>?z@JPF$$C>D>e3G@9wLFvZ(0<Pwlz;t2o~!!-E8tqEC&x)E?u+3dm+;01
zJ(*f!a!sEsYg6XS9>siFwx>_$#>C5;{mFHWb%Di_Dt;MW!x%FkR?ijf2JrIv37!ff
zdlmpk5PLt4i4aMNKJAch<G%m-+cKAnu+6chx5%GA8#!r8MLSAQxw&QAL{~X9aj0D@
zcFw5ipFAmboEEmp&>-We^i1`^^_t+VaAJA<$ZKV)&i(LfpU(5KF^%(6_xM%RcXGrY
z(J^}pa%k`!b$=QwYpyDY7#snEY}0$!;{TMBGeUY{lXaUcAt6Ds!Pv|sXRIW_8^t?}
zD9%xDG+i>hLLFv)WNYik{Ov6N=bY;t#n#@aZJVCy5Qfq)upjhi25y|*1Uk6ddv$p=
zO&24ud~@g7c*D?6<DWNTj32J81JNy_ke=f1UFX9MLAaY9)6h8d1cv~)bH1{=>Fpo&
zY<Ho%_<OMZ>;mfZdwf*seBnBbE7U@h)zB6&rbl(0O<h5@Jw-jR>PvAar5wcj+0r5>
zc*||0Ml3WT8-U&xH-r`kBL&hgWC*6zLwlpmz{tP;IjXEYGARY-p!xZ@L<rGHl%8t-
z>%7!_=Cu2Fr;2RlBv`WC@_ve5zHN8*ww=f3nkHaU3LW=lc-IGIL`C&v8DD<JYTyV)
z+<8>vq`>z`nd9GG4uz^hsmRx%;yn@tuyar7d7bAL2|)10==IF*C@Y>ftRtcfvn;OO
z7$w<Ydlv^s?DGB}41CduiQnL<Bo)OHQQcXHtfxo4k)3^sD;ZH7o|LIp#sCF@$O@Ok
zMx@(4?_!^k$oz5YFx;hSwd051MLxqkl|E?jKXR6|-bKULuPgOpNw{*dOMk`J)gg!w
z961{4eFybeCZ&v0y>=K02bVMmvquJTy%u&lY87(#6PY)_?$vg3U;iwk?Itq1B|ChR
zMbaSLnfOfdxb&&9#Y7ER!mdEP&S1{S_~^X8^X){>CoHwd`!F73Ij^7g;9+EAdnNm1
zBGpx`O^^By3IuXjovv#a+2qqjxAo8G4elPdrtIv-KhrJMiw(={&a(Z0tvaeO%2rRg
z@SJgD7k*`56&(NCaxFR}XJd-i-8F!MC+Ec}_eCM}Y510gqGG6?I+xkVa}R83kn7>^
zQ1Rwl<^!!M{1ukP#SBz>w_T3Sn>GnGJO<xf)thfG1Knkmw1K|LLJLLRA0v|?6R-J>
z@qxUM*|(uYb6xj<l4wW0sA&lLn(*l(*dSYX<#hB&w1JVvwf(hlu2W_E+~4@lfr9|i
zhxgwvF{_s=cDt5ojZ|+Y>%{_no|)H&UuM@p23qGQqYD>pvOUW>Op8HYr^BJ%a>u;3
zCWk@Jc4<q2a&V8`Z0Y&&DKN76&vRK@g2?vA`>xUkZq$1&w*Pb=C+a+P{`LJQXfVs$
zGJ8jwbEGTs-Dvzui9D{Hc4*X<zZDDWP8heXT?|S0Zi3qG&ib_VX7~Jc$3k-68rPL@
zKbzR$fiEc3=<g3niO;GwJKART4j!EtAGq<#3^nN>hTeR8!<XjHK2OTqAMda-QlQjQ
z{!qTm=AtnP*aBxH>(pz!*S(_jJidhLq}s0zC>HC!c@uobo9=`O0Z*)48v_h1F*=oR
z%Jl>?QqW?L9x2~~fop$#j5<Cq76|q7JyMiq1Dz`>QvE|j|491&#j0`ib&eJ^)<36_
zlbItY=ZE{iG{DLJFaUkGh;yuV^??KnA@6>N-y~v%$*>TtM50(Vjf{+fw|kUx=0?|3
zyMg$kRqt@zWZR-zsKKx!u!0^PRq#*;w><Gza(8&Oc6v+fmK7O2PE~AzAB3A837?0x
z;Q1fBIW>JDZ-(mH=Nc46R6e)}`?Kc&g?f<`8tNPC{#pJrRHd@JJ^Rvps&Zj0qGZ~G
zbFf?1qN2GYsxWe^_tRB{Pxpdhf*i#hH5kdi>udRRL;K}+WOTIC{0i5602-zFPQIq1
zt|@&&M$=tYXZI0WC?}TRvuJKhh*C5^c2GQsqyQSJM~?=cEV4Rv5Rc{N%*}<{lXBl6
zUcI_GQJ!s+{)Ly?XsC4ipdJ(4&$)G2MmkVm3Q+0XZM$sXo>iCUhcAM1hb%OggDLuO
zH%Q1W)eYeeULIhtlm|n#orwdAXH0NHEL)R3b~;voun=ktG(Vp6?ds5q%)uPhsS?|-
zsh<SZTy&hARkW*J)XS*~0r-T)O{-96{qaQYSec2yc75D>(B`=*PeB5|o7M0pW0XGy
z{|cBvDZ6mtpRMdiZzClOD&=ip3Z`lm$)rucc-+_5@b*A%+V;7(3p2u6VJ?SirsKC7
z2LV_RgjIiV;JA*zbC#Op<>j?akl7m3VAUCYx82ZCrE&2wKE6pbg<%){=c3kC9<xxb
zU~wD;7*uW~#6__r4(I4|0tUzj;MmCtJaHguKWeFpSRH1G;;iWM3j;s9+T^?Gway*f
zyn=EWZoI<c;^Gn?=NVNycukT#`cBVAQ%ejy#>-`-;%xN$b&6M3SF2H~OOv_dNvmq>
zqo^hs6RxSA?`&<|4>m<ao;YU6tVT-R@5+DO+xX)-a4uhKY63*ZpBczE6;;p*3{rwH
z+*Q>)?Q_k{K=Y2svZ3A~_|2j@R0Zo%J+t<A!(r89bK%zIJA8%*c#;`&py`Q$S=vs&
z3IW*D;F58l4CW5UUx9nc?=Mo1v!*CyM+|PUN{4|BP40X7AYHG=Eek(8L?V{=SaL!U
z?u^H^iq05?h@hb9v#Whlek(?%*s3?>MIj;A1c_4KFUkLX^~sZ`djQv=&-D%J4lf-W
zH0K3)p0Q*mWGb~dB=D6><vIgpP2Sw^;}Ng|`ojBUB_(5dJbU|^b|YwEpt5!-VM%RC
z{GzeJ1Mr+~v*lE<<~fp>)=Ao1k3jUj9K?jxcd9?2pkPf?eg4JIkBcMp^;xZL=0O5~
znH)3{@N4y(EqDO6B;CG0%EY)g0w^>%@3f9K-tUS_v)7U~?QA<BbU8Tlp8H{^r;;fv
zgXhRYS?2Ttst=GpXqwg8gH7JZHgW>xnnaKcWQ32lppI9`9S(Si5apQnx6DYa|9!rr
z&*rN_c65Sp1BOP9w)6ZUk&GNG%IgKq1;_XX?)-7)?>vp#I<Z|EV6aD;DV-n0Wh-U4
z=hCCa@JsPc;z8unW)^&xp>9ia|I{UdTcM1bP(&K*u&}%Mfkb)i`W<qVySR({c+op?
z2BfR|_`#%jAi3Ic*OxD4Q~RV9m=jmSDe?DueC^9uxWnzD)lnu1In%N!@_Mc})6>$J
zw97*owdV{b4_0hK2Xj<vN8ILtHz#+BC+M>FM7;jF>GzK%Tf_P`KFTq%v7K<SSS<MP
zua=MuIXmxqFQhkZ)_gH{50!#}1J%wu`raF1^`Tk?FK~LR)hf!(HB8!V@7`p3r2P4x
zbE;gvwsW-Fv>U6TE>cCv;$Y(HRX)<4l`_)u&53+<>Ldn5m@n1^v$yN-EjC6hastA5
zog?yRSJ`j1Lh+!ucm~CJw?aWzytx@FSX|fF%uBkq24YHvEhpNeSc~^J$$)dc>w<r4
z=P#z<v)$Q&2$WG=y0@5u&iltgL=&r1tNk5nh1r_-w9nvDF&26K@?y=9jp9sohYN~0
zPpj~mD*Kuo$nZPKmf@Ng0^vcao5JA!YnGP5pZClYIi%%I#^r*c_adOOq`3QlaBs46
z)TVBKEvdeO#WZ~bEk@!&opX%G>~)p#(eE}(MpdF;Uz5-+(tNfDZo+H3%`%?nPhIP1
zA`iqiJBZbcy4nDR85xUI3w=bx?eHV`t__VstM}*6t(QOfNCAP>0$q0n6}OZpIsb*X
z_MD6p^A)a&fJX@EX4HkyQo-zIWa{4D9U9icUBjaHcQQU6xp$p7kO_f0?T0mMJW1Yf
zt$J(INuK~4McFt$Kj+MWUntw00PpJG?({@SHo_6#IS~j9(2NAIgdf-W9Vjr1(eXSo
zyNjKQeX%*JaPM91*AJ&@_~^d)-R#(8kYXvlB)~6#RKRYpd-8Or!m_PFtRn+`#7<4E
z@<Ix;$a{+#`DS%_Stdq6#~A^|-uh@}ea<YM*WQ4+oa^4k=IY@q43DI&?D@%fjLp#H
zj<kziW1jfIks=s?@cMoELV_@Hv$K;{d}}im_)Zx4{%W|V4rh(Wd1U9JWlEcj7u3ht
zEb(dh_Ca5z@Jaf~)0Vkj|BM`&IQ}}{>G@92=$U0VNXgApwq?9T`blYYuGQbcaeA!0
zip}21%zBE~6_Lv`Gi$3&o7J`(B>xG+T#T5>T^724#W+%%0}v0M{#N4hVEO0i-TO;$
z8NcD*|0|aJ{Pbh=J3){x&CC_j$YLaIA|6l{{#=}u^JUT~7D<&FZ)vft@JB?#qH+if
zUgy}>)+~=JzFpn*l-<|wkS(7nP}KVdDNpvm;zHkVFvswyvlq6K7TI7fX8Us1U7y>e
zwue)nO2dLp1sp>{=VGAM*qx9eW*vAl(%1WrwtD}p)G+C?O><MqBa`ocfu2D~f9y7|
zV<}&msRwtZP>V8Ie1zbz5sZb>JBCFIRL2#mx5c38qwKam((kry)_Xetb(?&nfMi?i
z@1JQLu}jbpkC$(<BzHP)Obu6Q4|i#nQ!kY7>geeWgz7Vn+byZ$EBz*{1KxsU;J7j!
zAyO`mNpH_Vv&h7}I&kuEUFeBn`+odHooykS_LC3=r$qPGhS~Z^nd9%^5U{CLqI{IM
zMxUm7y4+ih1)EV7_c!O?$6J<HiD_th^_AxehWiH!>y&K10b5k=e1*U3O9dbk=)~$H
zfHQeahAfso7aemcm!-9}kmS7wcMNEe>gUqp1+4w&M0fF5N{@ae@E?9lO%*F>e&1&4
z+gYflEr4yc+Zh;zZz4ehZiUFw-%+Las0OeX6+6jtCUU{o%j>@ULZMDQW+jdSTsZ69
znn-vPocktg58oWbds93$7WDknH!*o-K>p2}9^mc+3Za>)8aKo|r*{OhF80}av#Fff
zSbI+a&%0TQ_3dQU2L}{SXBsUi7S9cASN2fcWC)ESll)F=ef|7=>P(V)m}11;q3DX|
zQtNiR1h7LU`lx8uSCB&J*z<Nw_^Vqft@~Dal#R`Lr!M?_d@j&W!DL7kEhr}`dj~HF
z2biT`TLMdkr`g0#m%loQ-Ewqt73x1U4q=OU+1NhM<|3fci9YXWAYx4mDo#wCIzyEx
zCz#<s#`<RJNJz@Ee7;J{!ROhlxzMxZdgu;do*wl6JhQd@w26ruNLlhs*kD@4Z+^A0
z2p3_W{j;G_Xh8<dPB}atQ$`RufsO5j$mw5=)4w98X<s}yH#D;Hm#roXK!=0*O5=@_
zgI!%^TD+zgFMs!rnK>UcQSbz8ZQ*!gTfj>cd?|jfl*L^w`WAR0yn0D7koRYPUM1bl
znUs@LiBqXREo}~rf<L#m1_ytC-x5S2uvKe!oKrYW72_TOWTBPe-2Sxf>(HV-;~N2w
zC@6!P0F@UNMR@G2bx*oxqT>(i?9v~(Afl|&CDrec9~tLHcJ&+lcDnn(X=W~lYZc>m
zeuC?L<&pq)OY84{4TZsby@L*XhySPKhgLGOs~672|FcT!|7kwN`?3E&Oy2)*0<7nC
zeRpr(1b=K0X8l)Q?#~Gu*}bS;@&9Dco|2KR-CCbr=+rEAo7a%7e%sbvem1J)8=gtb
zVb%$SDIFuc3(o(U%!>ocyLRnbhZ0!1!a-K{zYvz;`%{XhuyJ!2fCwinwbt9)`R!Xp
z7#n~6ksMdC0T($ZHUbF$zP`En0Rh?BexOzQ@Ilv2#7)|+6N>Z?!mL;RN_;{?6ZzvG
z?x#<)wA%W6dw))Jb^>{fh2=o|)lwKOdSl8}p5qp{!-M#s)zG1Q9-YXS_C(m|_3JJ^
z8BR<FSe#J#+%X%^NCzvOj9&yao@K7+%P|z%sV-#&+I$1~N*!JKB13t7)K8uWY;E(y
zG6BmsK-6I{w%wdoz+u-Li6)>$x1w!leN=!}oC&nz5~6Fj$z#4!y)`fxL%pkp_ZiCi
zlb)X-L*Qa&HUTGDweWm)A)i0~2OQUhPZk+7Swdl^%nH_+0-m87y}rZQ#81~fW<cUb
zTMJ+gU?uPf_>-{D!Eh~(+j6|dUK3oSw;6S)UNj0{5h6y|1;YuFAF~-LdJ%VLUDI;B
z$nb#m78J+NIN`o{1U>_QrGq`g!D0H9(?jsL8OhNvN%eJb$F3{?Yp8qR00`+bXFDW%
zL;I`xwralO^6$EOTDga*0wmIz@^miyOD<N^)7{;H@$vsT=$|LszJ;VbCc&#+;L(@q
z$#r~q?<@G}?^MzPUp|rZ^fdkJ0tqq6{h;FYvGm!%daRY5GD@#Kg7Nfl!Tz3BJg*QO
z+4JY0KVERb$tMwn&P%tC7f&KyT-)zx(Owxz>B<oD<N?3xBOuTQ?k-}oa&zNWx15fP
zuR<prpALtCPx8!1UYP!s0-^E3O>Ys?l_&ze#f;WI?yNGs-uP?#t8=FXYKJ*hF7q>T
z*KbS7%C^~FX1JLgpU#=5oqJM)G+0O{D!^~(8k`3*ooaywQWQyW@wTP-_cd`>hOP61
zPi6i3>tiRrIfwl<R&la#f_G|`>~lXa-TOEc>8ZfcnBzuqxB;e+&8UlLm%l{jXkT3U
zBmwhFmtB&<T->EY>kk`$j*6(-!|C(=^!evIw!x9ND=M$FtSpi>p=J5vr+yX_w2Fh*
zIG3q%$7K0U@0n`L3_8N%6FM;Fs<u7Ez^Drx$GfCu7%Hm<vQ=JmhsS}}1AK0s-Y7#C
z!^oG!4Z-SMHm3gJ!#|U*2-Z(XV^h-zMpNw)pQzMXSI)8p7sAKzIS_Gk4?0<$I+yeP
zT%Nlj3K=xbfq@4w%j+DI9<EWJH5p`(S|~T1PC*i}dhX1r54|q6Od=1X4Gf8APnTLe
zAR)pJq~KRv==sTM$l95>yLyE}C?tJ<e|#CKe3;XI<Ho<Ifbbefz=>G3m)(~^@MMx9
zq>`=0jzA!0EnVz3zX?>pjI>RuZnAdqdATPD3Xs(v{R!20+~-A#&bw+?iD+$YOJM(y
zp>MX)&(|zBVxXNr^X`abMkbV%dgH^Cd860$$6g@~-r95&=f%~63<UZ7Se?2<mPPik
zrRb4Z``88cF!&UhTvr-QHpl-nQG57k)-%8#oN<iP1klTz2J?it8PzuXClsVu5{@OM
zlv2x_Oy6;+pq|cuKUg^qDKEF%{hh%)9*H@q?)wzF(->si5zaE1{Z5nRK76E+&hxA{
z!Z)&Y!NbVK`7AtbPERaRtu*>z@NnF5BO(dGO_T9*okmvn4&3LAmCsOBRp4a=o+#kr
z?1v>G#h#dE#@`0Vmn?xtgd(psUV|{b_lDS1Uuih|`U<Rn6b9WPnB;+h!VK(|@TV%+
z+KQJh7BM4AQOxP;W&(VQihZt^*WVyj_3#Md!1MuU`6^N7&3o}M+F|BQ%4@t;0&>*;
z@P?;cT-jQvZ+gYv^%%f>=x7^ZO9x(&$KkrNtTMbOPGrJ!%$J}b<k70-al|+niY|7$
zS{}XYSRX&sv-p-zU8|T>5ZGL!m8G5QqvzQR`W~o8+R(PAfwk7w+wr;Z9<YcZs+Zj7
z_v0$WDz7B)S1`)XFE6Y-j#)^eqJ@l%`9)#^0^6Md;%<l)xCD--k3F@k?8=N}?~o;Y
zxi?wuF;axhq#(-Nv9q(o=ZK7z=Ni97R9I>`9NT{negM{PIjG*~mx8{RGbnXufW#%&
zX1;xFG_s<i!rsBg&cUJc)QfNB0Y2Y|M8@{^z7p5Cmf3}3nb7`uYnt!3SBsnx3Yfbg
zA;+%K@Dbp!Zhj;z2-duCiQqRtYsXtxx%6TcZb{vu<RV6wEV3#y@4~G6qw&j&Rq7Vy
zKv+nMZYIcxD$G>tb<BZc8LD-soxsai92gZ@vE~4to0#N?2>$??^(Ejv&y4NI37+0&
zx<=X4gT8i~cmVzDSM)oRH%7?<!r=GMQVjS*fS(_ITL|~X8No?$fP>QBS$(LfN&01G
zI!s6N?Y#i7T$`AWj}8~zhVKG}$jUdF+yyBj^kDCw=UAjx&99FiP!{u?Db5#RJD~ha
zAqSVlh$tfv8|{NZp{M2ez63TUBt)Sp<MrEjZ>eXhwCwW+hlgpmAo%5dPwD-Je-PJw
z9w+q??%m0%!2{YZ^nalg-{30=xE{<bmk@!CJ`QMsKLkymU$0|m{%|uO+TbYz-^*ig
z<H&&jV35afuQI{h`RCJ%*e0l~280XADI!^svaQh<t<4qS23L8^s+yT;DXiy5Mw;k`
ze)u3<AjC+wq#v-N5|O#RXI1SsUnM!};!<Th1ScE5r%8$<I_OD%9`;>FgIIm`3rBg-
z&qwrWzK)(hDM>`Qf`%Yh<DSZu1``#=e}CpVn-9KNcf-U)SN_MHr@Qx=&i}OVa-{yO
z@ed4(|0RZ_Ff^v&;R6pV_;WA1cqR%s(_FZ0spc4r7nn=Q3c#U*Ny(B*-cpL2_a12U
z)bccFIeDP0ebG4K*n9idtte?F?Hs(t(_6;MV0P27kAe1Dvs;4<7SNsDJe88F+5~1=
z@_#R-!X8XG<P(4Q&6@&$4rFK0O6WMy!2i>{d`lh$MKD+gMa1YP=}hhv3tbLMs_}pp
zbkwVeYJQQ|`i!od@881_VSYeLN-u}cT(&2Ixb{ZmbA{!La9TDF4w9b2p!hrnmnz4N
z0hXXsTg(}C+f!&jbKxlBC&nsF2a`R>{>PiV3cPJ+?GPTLvZ~qzGJ@EabCmsQfnIEH
zs*j6G?l%D$fWu)cD$LJMXgMDRC`*q7=;v<B0;HsVF&d0&JMpI-c=0xHNMOHF<#fm*
zT1=D$lyg0Vy~*&IJqGPOodj;45*fXNgXgyAUovD6t@Of!3=t0I*#4hCSvF6>%XQum
zjeJGJsFbmHkiQD|XnLCY78;k)|28h~JiIgPO!jvP3G)O#l$Q^+&)=HR(iZLJbPjxo
zaO$UE+~r7+=7T-OyJpmMC|{@CU~mR9C&J6h`-U!lv6z|<)@kSJe_h;|DpHu5+3W*1
zt>L^$I@)xgjLLZCX&jF?02DPgHU=&iFa{kRA9YwAGoJN{=(vwAW8+zLgBtby8#0ls
zAfgY#K}iDkpz~rK0Lt}`srrL8e!HcuB2YAnh%}a#65d}}0AmX<3Eb$-mjbV#T~p7q
zD~aHMssXD4uU{OG=>+VgrQc<6Le}lF(TVj|-_c4+e-`q`uirU(?R+=Ax3AA+GDjV*
zMxTSk@m@ZB{Y&6HIaM^9>3e6H6;<`-Fo@3)n+1N|=$t`Py=z{N8|muIJd?l(#Oyd0
z=@A<ebuJ+*n|M4s0ixuE4wf5~z-nAp$(Pi*Z}xActNk*BmD}QkAAz7m76X6n)OCDA
zz`*9D)0y|yrS|RNa_zc0yxl}}Hs|87`A9r#HQ_)1@HxTOIr8j(JPLxIcPn=e_m4vd
zKO#M$3Q26;{a$NLkm=(qKF6N)<42TGmk#g{qFIsV2k}T&Br5UH4Q48GHU?_&h2R<X
zUaYuh3bcXf7U??=1&STco83k)elD!;3~0gB!@QzmVnGiD!I+T`o(!Y|J*X14df1)K
zswPVHPZMje^G^Tg&fp3S4rVi(JL)%NnWH9&KWf@5ZPVUqf-)K$iWwZ&U11G+A?{!8
zy7>YBF?-TqB9x*q8Ndot0ag)T-Q~EB*qX#E;T`?YyOj}8B(Xuw4t(6^U%znf#dR-q
zBRMQ)O3zl}V=S;gJzWln_m0|>BFcBR-ABq=GNV|q)rq=_Zxs<6ioj{F^aJa(bN5%T
zvd;3M1&Cxib>9iMge{J@|34pKf8p3-(YT<xUX`y=D=hm1I)!5FZy~bkJ)JrmbDb(j
z2J6%AS_d*$%+c-{D9J^dW4}zh9V#srxWl>>$^M|@u=WJ5SOzmct41-$(V%JDFGIBU
zS`TU%7Q^{>yBG0U@~wpF?P_U+l6SPVCw*{NhVqtGCUbKjo(2^Izl;?XZS3s!pi9D|
zxTb}2IbYgVf@u|D->n<W`7ZXRJjN5r8iVa18Ud;N$%zXP@Zc=My#Auzg#HEO1I%;D
zQc_a69<^f-)uEYhqEAbE-IkN{-MiGIBQHlvO1VS<ki0DXY;1vX`=Z^&W_y_u{<!qq
zXsKcErX;N7uyMcp{~|%rKADP;@ZtmhUpJ;+e5}&w_PvX@`0t5j|5Zlb`xy~m`hP)y
z|0&w;zj`rL`xo!`-@f(#HcaroA?5!xm+rm%toO2d)WvS|UpM^!+XwUCzQcQ$p8p?$
z>HhxTHH~@I_rEwAx^BBAww!of<I^vb8FBooU)>KIAOtR0Jc{n36S&m$>6^bcm!z=Y
z2|-0%xUJNwqs`k1Z{CF2Mx+wczh_JP<yRiED`9&^@;E8^rf&>1{oY>OsPb9{#OY|G
z?$DXkZyzZP%qabFs^t7G{)LXbG@!FX@up;rt5ff<F)?(hU1uEaVTC*Cy*a6vi}%ED
z(z~4^_@5j7q7J$EyGN3p4;uc-?j2~n7RhalmHqOSk1I7L@I%pyR1f{!3Qi{d%=CO$
z`{N(qX?Zx(!L;c-TgL5(F;}vy<{FbER$ozTFNPvE;|Z<7dGbwjasG-2v6yL|L%GQ@
zHrbl`Jh5X9Z6?M6_Hvscb~Xvw&oZA~h%jphn$xz0n-67VB-)l4=?FFS1xPj3%=Hb_
z)Te9m$`f^MM6}$Fa<>*8KU$LCbarB&=8;y)5t+2%;)~^1<@`>UnVy>TfPnno*;YP!
zG)nF8N%Kp(>7j;fADJ%Mg*$_{nas=fZ->r&dpj+Nhg(Tvr|-BI*WxUc=iD~kknMsZ
zNnm<di<#s`oJ^Y+Zuoi3vpV1R7OeBIZ+b*2Y8>QqfO`@>raHjR7U;1%*VI&x)EN)+
zc(^YuIXbketBvy3rRVo9m+c(SEVQ6-_VAFh5xE_4_Y$F(&3xYanwh=5J#d`J1zo^g
zSQ^gzWnF_R9|JDma|?|rC4-ZSy2XFqHP{6(VdDG;M*7M&_@{T(l{C~WLbmIF^4v+o
zYD#Gimo@%<ig!X+T8i})xGiIUTP7ec-ps__&-rxiXW-_GD+LB!Lj%pJHk%YOW)ss%
z1cR?zel%6)Nga<-_z3LPRqLCG*co}4(|Pr96=&^iuk~%<a$pqEY0C7&F6mmUs8W*S
zt=}JiNR5}U>Qe2t*BVA_o5e3jRlQs=I8b>QciYL@IBvSmnO<TWCGgR?6*=6Kr?^Rx
z&%oWaC#7B8Zr~6>MtbOZ@uDf-(Q9YKv}r1Ir3?p01#atj{hr1Kn%Rm$n@sUJ)6?89
zaCEi7%0oxUWR(<)wF*Cc%Dkywci_u2<o^ZN`DX;qC1aQUlh)DE-f8Ui!Mdvr_H$}#
zKgyQh(Q&vG3mY)AdU5Fc@6TWiT%b`F>g#*qdkEoYGcz+&wZMdMwp;A3O-p+caLV`c
z<x5DG<KpDxciL(NR#&X+^1X$_1P=Wg{I{nEg1{z3JqEjr-G=NY`QzSX{Ks6p%Y*Aw
zl79(pBUh8GM{mwxas3o5H<DyeD?~IiPm<H`1R&ZT;2PA)wm%zqu%l^wh{th0l@@Qh
z9<s`D)jlTNCKu^C=K_zZ+o(K_u5xqH#t3uFx1Z7q`b`$omF1*ylSI~e{034PMlv<i
zCdO*@Y60j-)8(bb43V}Mn3wtwR|6+w=}9`P%=7QA+68n*OorW-ei*xlet?_7h^#h6
zt&nxD<tm@+=`<U$%_5X3Dn+F<qZsdA+EJKo#_jv|6Lw`VRi3Q0=BK1A%5rEP986b8
zJptH!MG0Y2DaBA!%)sfim1#a+Zf9e|#?B5^D1^&7Sbewb&o~aIJkQH(H=5wFv9@N=
z92x^A^~(U0rUka_6L;Rl8#rHm0_$KMki!J*DJm(3>DMZ{IG_J;EmNEa3`;d~;pYM|
z_VlE?ckez!lq!`ZY7qU<FhkG7JUcxVnT|$}x%d!!F8A)|=2?pknZq4C!6)4sg<Do?
zpX<Rf+*9l}^y8VW(WKjF`$5%FGtG9@9b4uEQ~eVybwexi9klg0({#r~O3tEqf5e(k
zVhBoUmvY%qA)}s;n{27~_^an9?0|AeY%Ki;YxO7_E`A&Kzn&v@wyX$5CaMqLH2N^R
z9+C@K&q&|h@Q>5<_Q4%ol~BfYlt3scg-z8~LlPk|MUoZfES*`?Ay4PL1?<-fv`~rB
z(MGzuQ`L?a9aYzfB2a#T9Zp6{>bSd*Fk>BUvkhlvnL|SqEJsE7Ia&|@d^k?Itfr(C
zY9G+46#7rNB_U?dV6A%5Cw(2e%Bwy$QKT^v7Pl$x$2=88d6;>4%igR{Xf`P^Vf^T9
zB4gxx)R@c5`J9TwGpksU)9Dwfre?Y-C@~kLl3<u(WOo^d#c9LoCT-?Wvv(aVNJZJb
zZTbCAn8^gUk>dlYFTVEq9L&4Cp!8Duik9whO|y)CK(J9^*}Ym#8%pr@w$vy*>AFg}
zyI9K~3H5HaSY;RK`3alX&E_DpNsNDee%3JLwS@mdN^>#tMaS?)EJm&R8o;=t_(TVa
znBER4OiYE0gtMDl)7P(_w4%Nwug9M8U^~log7)eo^M@Ap6H;R|eEN-7Nlh~|5WHmv
zqoYD$Z>gBIS5;QF6Y63HJ+)s5df`hHg&?XuU2L)8_}{el56HDMjFvI=O?^3vCCQA{
zsE3yy)juF1xe5HuL`A|Tx$_fy|9}9{$#I*FklfwgoNcdmyhu_x+}>X8&#W#gQh-+k
zlJTbtBN=FD48Rncdht<Y=_aEQrSc)?PFGlN$8{fps_>z_@CO8m@%W6W!4A^v(|A}7
zgR{cKqI6WM+KK0EgN_fP?!a;@*%0InIZ-@!L~AOe9#Wj|bzZA?w|)2Glc<S_jho%?
z^mR0=SzEM9bF$cUC*N$+w`qZcQ7%T7J$;R+fkmQ<lZ|s~YI;hBqu$(caq=XsFmjtY
zmlw=r?x#NPVm`sELq685g`0A5*QvSZnriDa>-Tw2v4T%o<EB2SN{LTnJ_Sv?lG@p!
zup#<46gJ^Q&04>njvMIRE+W(z)6Xqa__Npb0yApnYUcc-D8hJ_c2)$57~$m<^uhA5
zS#ZB@>;7AN{B)`3n^#tF_}nkYy2TC4q!9WKn{`OoJ*8zo!>)UyriSYG$jxn!Mkck#
zmp-4lO*4Ao-zH&-ga{HZd@$gb47!H(<iB&%W9x?;&Y!ilSHhQp3mrqAbR<aBFK}&o
zWV6r2>BKWXx75k$jmL>+hq6g*5rOem*NbJct5CBDA&U5BOOs-3V8?vY??t_gmG#H<
z^puV2bD>Em_%?N3PhL~QxzygB*B`dv@<J*~1GdCvth@WB=-62<@iB!?s5K6f7~O2F
z8?Em>#^;kk9DBbpF;OR}Y^y`nlz`~|!+U3JE9uCilJOlpVVxaxskx0v=k9I{Qt235
zlBN}KXZd>TK>4>1-ZHYd(Qv{$j;4csiIhSK`o*t7{$EYizRv25W>QJPdW-(E_6#k*
zOOMhFf=0gULgdOTxSs?BCxHM8U>UiPhs#F1qsyC~3QIg!*Xq6eDu?rm7Z|`8!OS?8
zJy!^O#z;exAra;yD|-Oe<fPnYckXy3L_SwjYw5_%@%4?1P%#GkV3;lf1p=6D_0GH8
z{W_3w3wF<qjg5nSeIlBg`~m_EX!P{>sid2m+tB&;mX*xuQXJ3b*)H0;EkS`pw|S(9
z>NYO!9dZGi#qM)yPYzB_NN)8hDG5WN)IsY4KA@YEu2!c9wc%Kc?RH0rbi4>A2}&>c
z*91PUg!qTxdIxPEC{x_wH9)FUD!HAEp95+jkzc>`uv-pmBiXi#ECyZ3LBS9v36-x>
z#lJWfGUnLSUq?gi=qsEe%jpyV6G}FmH>W0HT#|@zuLJ44NcEm_6-#(jVuVTz<Vuc=
zjso}t;^N8L(;wrfUs6-u(TUnH1@Jt#cOH@hFN)LOpQ^~oEkJT-eCmLyaddL>>g))9
zkN@~g-Qt9$rN;gK_E`Z8QA@ETk;R-v)<G`IQ7=4u-FfGCH-kC7MbMSuy2kt^JNL-q
z?htOW5{6(lD|@1P3(xu&b9%X+<_cNEX?GR5Qt<L`#H-J4aj~(Fi*tu;YIRSDqzP6$
zsZC>B-_)m#wC)|X|5}))k>RXvCl0IK6-+8)wHT19SK=h0X%d^C!JnhXN{`p=^G0#W
zXuY=5`~AtEzH5zfkr2Px`|moT&+OFn+#=|-z51UfcCRydWoN0T^;S@wP``xk?d_c$
ztgDx=)lce3OZ(@l=FhFH)L73>gK0B^zP^RUSgk7&RqEb{lP`PUQye!fpq0gXVvUS-
zjg1wuLl+YTuS1lJKF)(qcpF^{40bpJaP*-<WVOiEOqn=LV31tvX*bSbTsNe2rY257
zws1)aqotu5M5lfM`HQM?)Q<k5wzf9>^QXW-*^_}n0Q)WmCOOIzWv0ltZ&?=q3J45j
z=j4Rqw9Vm2{X&KO_U+IOG3BwaznI$u$Tz@22f##gvvy~vN_|`$D6k-C&I|u=^OUeH
zJ*s8(n`Fcni1!`pJ2_k)ZfK~1Dr3G~eHsdnMfd*mxv)e~z!D#VKuo_sqkg&$H)ZU}
zqi||ob{0p{x|$-PcQtz2C^3!aS^1{&WBXX!X3=ZMqV+dh9mo}O+nJdXOo`R`i8aO;
zVyvI0Ua$7Z<F!+9=?{a&`d$AAV|G1}x$)0GuBTic)|uvwwI}{GVQ%zBH*C9}oI-a0
z$SP+?aDb<x+hKfZcodBjUv0z|bZj`rovA|c4S7}XHV&tGgo5Ok9UX~mEu%}pjudY4
z!@qtVC3yx4d6EO|^>ucrIC!AK!v=}WMfx3gD1Rji`r6sS5a)%@-tgccug#q3^B)A1
zq9P&-Ej<}Br0E$Mm|gUCa`GE(?S!o@D@w1(NYx;6ZLq%wd<8r^kC#F`wY0PVuq5F!
zkq3R|9Wo6e_Y;BIh*YIaZiowjG-mMN_JGlqjm^a~1JxXqVx?xId%u6CE}!<78mGdv
z0j9<eK^u<g&T0omsOupMxJbY~MZ}`z0;w`EZiT`IVgpA;BQ}TfZJQs5PEa4)j2%NC
zQf<GQCr_tSgHvTQe*)VlASVC@0&Nd+_soV12J75?Z4do`ItG80BmWa66?Kp)n*hdq
zgo+&sIi<85QXJD#OjPr}%NTbg@I!$J4ybob26}(X3KlS6M;+|DD@RA^@bM0d$*!%n
zJFbnW;%pz7w}S2w+`!(wc_WXqX@b~X6Vt_`_=#j;Z7>X!K80-Do^taJnYi+Mzj%>n
ze~FAy_vv)f*@Wy2c6m<lyN8gss;gMswK7Y`|5hsA=)db-Q&T6TgyFkJbFW&aqF{)|
z)U!8U=&*iRB*;=rlRfS2p`~;?O5a2Htwx5w;VegDz~oratvdS=NA%jS=q&+@XyZU7
z-qQWs{SMFi%iC@g9lO@eUp(nFFMai^&HGN>VQi{V(EZrE4||j4<)z@f2OSY5I`tk>
zuV0VJFzhvbO@;v-oaATEM&hEQ0SXisZ_#rjAR-_jA}5bAw*cC#>9B>rf9Fx3yh6E|
z`imD=D1U8CUhf}%>3Yijl#R`4<ojiK5uAQw!AmmI{{4I@WC%9_^PX7znXWiTUERBr
z)s8G`1$pJ=vNkq0W0*9q*VHsL*`=Hu8?2k>+1k~SaM^*dG+t?~=`uj_;K9QO4<_<8
zX|G>*6&Lr-luPOur$$la=q-+y8fVMXxw(;pZ#-SCrh$A<?)UGX%gr@`)$Kgr9^juK
zHP7#fDF&Af2x4MX-P_u;gX!rpq!&TymEm}|Qxx_B^-vTeOLpV=CQUnDKg{+aa}+4H
zkS$Anz9$vN{dFN#JZN^7U}wuHWhb2$W10|Vt39VIYCcx_N-C*{dAsRr)ZM!ZGO<rv
zji-VASTf1O&#%eJS@QYwtC%QoBxw!sTIzB1AnNl)$3!0X@RWQBa#9*g4QcJMXFFQ>
zbC@a8n=5Feosq@F!u0GU!V~)J5MjjFNi)=qIQs5dmaf>bj=uDAl_r{nK%ES3a^hKZ
z>7CC|MDvtwSJv$H`!`bA7U_Oj>B?MIu*g6;+uYS;h>AMnG|x3Pi#fmd&2SH+Y8`)Y
zN!|-mu@9%;P1i%=uTbrPOX*c+AG4RK$P3<s`xpWgzDSK5agEui31e;_@C13Z*ccct
z$i)s0<*+`d1%;kK7G$9uc&A;KiozsPvUHupDm^sMX#P$~7RP#RWLcW33@}F_$8P?o
zPnjHh)ixZa+H*<+WJZ7eO7q0<h8PD=!7X4ilm}Xg=Kg*`$LesP7g^7i)5svQR60PR
z1s=LTM@NNmw!tx<-;sO*jP~g1d52vUaj0Vs8zG^4cW>Di08g-9^S_)D(p!HnwmG>=
zA1cMlI_wQwbm`S6V96eqZMd8+r3MzH!1TyjsRNhM5VPmkF6-*l)_6Rcbz?}MB>h`^
zGR~UoI9Pn@M#$!*@|w`mvv*G)?DUK~qFH+_G1HU1RVJp(c(O9M`}LvR-{ex#&9%xu
zqTC~j2gmfZrg|##zPdLCCB<unMd8jiOy}-wn4QcFuBUR`qD7pkG-F9LtMw?Jn;2(i
z%o*ITteHzP9?#3Yn?WR&QJG*%e(B3j`RR^I#x$^Lpy`KrTL=Zr3RlSpW^Hum;95<B
zmH>Wx<DZ;dTb`|i?*GC%fydJB_m2>NxvHF(pClb#W<A?B(1?FjY^+$VY;~P_JV9<8
zfc)gjO0%hSg!9fsdyap;IZDgZ$i`-;EzGdCwh&A{+Zr3o+>UJ^g&o#deW_eNdlM+a
z>b1RXi)g*&L!E^tL_R|u1Qiu%pFxT#L&3Scu>qb;a18zR9+XHIXB3N;)<bW6z@`Cf
zCWyJdkal!@JY1lyz3<+i2^%4k6@UuTfkCp!t=e$Y^Y57zxJ(#i{@?ZWUbXm--z`PN
zhT6E!rlnOLP8nqsA~U_}jESijGkaQwp&u}jw1F}uE6U?Tlw*~Be6)2)qvE}bBu<q{
zHjXXf=B_TX+zvdP#-wSedHcw5%k1_zx=!D|ZZH2iH_2|9`0}cd|4k3V6;CmYXsUCY
zP=7hVZL1HW^+;e7Rp=flf7?7QT36Y^i+4$kuHTA&d-KU-37B={bazLDho`wQg#lI{
zp+bD?7UZRr?5TA33q66U?NYB&0$-WEgTq5Elh&_9!sw*y2v73pA#It#&2%@zxmTtF
z&gUmGe<;Gu91-T8P(VW9IjxNrV;@}*#YICs-@Xr)AEXZ+RH9JI1#8PoMwY-rN)?Z)
z$BaeX@6E3I?`Izer~|ON^!&RBwY4m!997h3#o;#$AL`bzRzBYC>*%o8H8ElEa@uD&
z4Mp>{6vn$tCB<I@5fmLYJ7#~9V41N*^Vx8zRZe0Na%R<)mc#t*8+DdO{jm5QkM!hx
zL%rc-!@$GL6G3wmd-igNUUs(oA`_zm^Mm=Gzg)wTj||T&U4nYFEFa8xLP;a5c{uGT
zRBm5|sQ=D&Fu5yT(yF|EDz#Qk)LTd)Uhn*n_~=nSHS^Qol8Rc&C&k2oss+kiM<D7L
zX3M*oeN2p3W5aE^=ocBhaGq5?e)l}fP$OeT9I2_AMM`wA1AxNj8H>RLH!IXIs+#DY
zI^AjMaaALJzS&3U)<;PrJ&(GbFVRggsM=Zf&0PUgLjQWVQ*Kc?IUc2;GPqHxs8UII
zEZ!KZO~FhvKUc@i?JR(_0-aE;+$!}bqpa^&Q&X-4d%N-Xu4lf6<Y2G?Nf6lXgwy$s
zsMDoXSsI#VW=(GGYKM0$2cnab9JJfpHy|PsD)_`i3u9PfLKH6V6WwFr)?V1CdPQ0n
zXa2%M<IaHW-(DgCt^pfzcsRIB?Gd{sv>bV3QT73+b4OV0ODW9?$s`I2a*c<iJ0dMV
ze)XXuO{<HVRl9kcliDN}?x^%*HBpOrCmH(Cvr2xx**nBVH$U~G?0m$3IrSsOf_3BE
z(Nc0p^%^Or+NZj_&N@M1m4ZxXXJNzd*9eZeV54He{sf;42ZOogALZF;HPzEaLH=rX
zW(^My-CWzR=)MwrV?mLW^z)e+<c;1GpZnahUB2Ok{VIB&gE+mjRfLY4;E?be(&BT6
z-y>^@4*Z=@nch83Ts<opEg!_8{B>)yo*=dHHd8w<7sXqp5~bz@XB!hiL;g#jXX<90
zqgd9x@nI~5K;R+kZr{Phy@iV_2T8k7lnqfz!;@h#RWteP*T~PG-H-qva+Q{ovmbh=
z*BTldQ|`%ZhXU*D8b~D4ydlDg5-QCwDskBb0bxhUI!_CE`7J*J!zw#tOMR8Gfq^Gr
z7CR`YP!Xz3?gEuMs`A<D$_g+Got>2B=?LKv;KS~(2hPK#i91kI<2l`W;%@gC2WL<r
z3mb8?HN0%fthaVIwyZu2`mbf^g(M$0eimNM$p-|h-;hy8_H*x0M;(FKR=}rw8bLig
z08<1mP95Jm>_(>1(9)N3QglHu0076kl_~f$y??0F1xZLEtnsnTCdlj-$8Rl;^b$8T
z_*~Rm7Ov`y#bBmeTGZ54%-+78Wx>Q*Hm46-MX5G&dQ4;0W`+;+A4+9gYS1u~oLO>^
zyXUrdB_&P;TZh%mVF8ihxEB|lVVRq*lG2rR)BL5rCQaccxu^Xq8=Q1P%Q6$^8<Y^v
zVm?(P*gs|`d6Fn5CN^Ea>58o@6iG1}$iiHw7=T)pS*^g#YAd&9P5OfKlG1u`{A{(+
zdh7``<WSBR{jGc=Pu*v*11yv_;{~~p(`DQC*P2m~0Mq3l;}D|DN8s*W+xjZvP&7TX
zvv8)J%o7Wb!-d%?&<j00Fc&qQ!nas0nH(J=<4?Cc!s!#%kx~)GX&)IL+2wX!&(5a*
zS#d{yH<4<`yp?J*uin$aLn?!-y`KglfvrFnB-xzgg{K{j$JKRKS-l;)^fE2uWFvu$
zcrLC5xBssJeo|V)SQ1+ED&-L8mF{RwPk^BdjU^Qu)@6`@2P*HlV{2_|Di^B_9Ws_B
zsfl(0u!Ga@$n73eMr1U^;pb$%`7@B>+2G~m5h>Fvd%L@6LR<#Io2IKAG5-KX1%f!c
z2+8C57ZZji^z>CU=ESKqhZf&3=5iRDG8=rs^}=s%#yXI6rs;QN?5_^D4d8KaQsn#s
zu6%zvgLYMTt3{ir3hiY{!*@#MN}1&sWGbbM@K)WypV*ImSz2p;lGHKCCTbi064|l0
zpCDllXf0qCu!4`ja8mWkbfok<8=9L0a-&i{K7OQZI$HkswP}I)SZ(BIsNOBl!NHU}
zj@L>_Nzu*Wd~YMAA{2eo(`9vKM|fGAujC%-KTfb`5)om$qj0_PLs-vii1u$dr<ob#
zxBj>u6?O2{$%ChV^WBsHs&sBvx)IB9qpE6gtUaY|ll6p%Vw+}dd*6S1Jnl5J*dlKA
ztiQar=4cksvv99d*l2aM5p=U(0x!Lv0f>>C`Bm%QDfkKkw($9IxPctu_U3Ryn`56D
z$dMAJQvQB^ZAZUZyugy2AO|g`Uh6XGk1K!E`*Gt(v&XaHq{g_c`5IhZd&2h^o<UVm
zYut~=fiPSwm11zu`Ukp2iMXhAsPbb-AbD5%^k5y~u=d?Q?4^rSWgsa}jap$)c%Bdj
z`QzXjb1B5F7!M_POibii&w{Vy`}di~+W0Dy1QC)P^<ShUS~Jf&C2nEk6QD3$hl880
zagMX!xp%A|=g6Q<q<*EL^ksu;eyo8>aG^q~hAgx1v0}8hx+o-DHmS@(k@4FXj9cBD
zsaj<FHi1DOJv>+-T*z^clr+j(*=V)dxBjN9%j)Q802Jgd8TwBUEL%U*k*-nMBfqL7
zr2tsDc3;2D4i_eG|9lf^NSbtBbi{N`641B#9m8_*m~v-*f7%!JIi>F01k^jO7acnq
zE<W@(imY`DAL~rG+Ml+<VDK>)*SI+>wibEB#><M;0PS6j^rRw&``BLv1_e4F3ao9H
zCFi=@-c;H&OPo3G9ZqK$@Vj;Efd4z&!g~K%7ZNAr0fEQ6bt9=ojd>G0Hpjga$8oRd
zXh(FzUr)-fULxd#NB7Ph2iVWHx0yGm+`%i~)W85dr_v=O1i(|gf05*#2<YI<2C@>1
zih602_9~sWF90`tJ3F$6W?-I8<pojzx1BlX3|W7;qv6(u{s5MZh?3ioR)c^y2e=Ee
zSP`y6{7;_z8W<?msnr0~2ePZ6`H$(NK)BU-ViAy`0Na53pN4s`A_T<%q?y9~p@ahr
zqqW6FR+LnZN7g^ScgVn_t0F=B7;`REXSZx(wRMrR2lmDgUI7d**l0Q{g`i7gXJfN+
zaDbjp2|+7qXV(dxI4M`o=G+{cQ4g(J;neM$H)UVFf+3KDgF_xP7jkltYrWhVvx^$P
zxPK_VO3h82tF*=Ju8n>z<t%|w5U&g^RlV7+Z2GE*9&wxV%&!>GLXVD)9;}Zyj-Q$U
zwdBJG50L!AYFz7a&TY!*?s3mR_x|0>DOJySs@>}{_jE>-(%oOd(AUb&`A6^ksE<xd
zhBA@jx$^XcP=xtc^~>gT7*e*Favxoba+uVTSgEAT%ur2DjIq`I-oawag9^P7b&>Uk
zy)iM&5ocWNe9}8~S1#Qgg|10UI{|9)nwlKY*-Bu~%S?HIHw#sf999Ol-ViEUKy!5U
zRcOq~Nw%?N_-`S2Ajz7$$@S2U<Y^Z8@J-aZ8dCmh^u5gQxDhrH1AkUmSF2|IhLtcw
zvqBb||2nwlUCY!^ew^PL$-KkH#BjQlFQmoUZ%nYPCULNIB=)mppQK3seZ77PWs8Iw
z0M`G(qIYr9WJ->ki0IXOjlfAvOHEZO)X7&&XM*lLk?SqQLMQp>5@l7<?nuEYXUqh@
zRCGM}0bR#CTN%g(?48c5weppFi2QOD{wSAIB!m9wcU?hE&A8IS_ywR!Lbhjz9n(%N
z+tsjknBRw6wY9a4m#=5T^BlpD2zRg|9U*`Pa6JwttMNDlCvQ?(Oje!Fh{*#i3_uMS
zEoY>q`S|(@xjnGjU+I!oT7--M>~_l#09#|@<FU~X;-Vk4#edgZ>~=3RRV##{D`YW<
zh%|s<E2~aTygji+i0;{VESD$X*^}VU*4fDf{Q#tYA8s5^RM`WSH<5Q;kp-blm$0w5
zzaj(~4gfL1%cRA{`I(p=Kl;D+;N#QN*B39k7v1s`c%ve4Zjy(u?&)jo)ye08{sV5T
zSsS-^)!eyjckZ0o*H`A_lM@kf0~k#}kDuRF()h<VaHY!U?K@n`oUK&P&jB`gfx!km
zRs5fg!EK4?tDDX$|Ge(H?cChYb>H5&zP)9dlXFT+N(wk`V-GwQ@86%Nd-@eafQ4R+
z%PY6QWB0mm$pZuN!inXTtx1oL1OmG~?fmllOJC;|{+%^ds}dONpy|?&k3wZifP2zF
z3np3wfVmr}4jAm2r!QykniJLltjC1^>vAzcmf1LQOf<Xk_2J=$Ev5!0QN2>3z?)=a
z_Et^x*>7%Q;`4hJ@Uj+}Lg2AjK(iLK0DC}drcFC^^QK|$y2ZfTMMazSpT2psV*UE-
zz)>>b`5o`>e(vn)F)}gHh`+Zi@9r#M>l}E~05CH@xWIi(0JPFb_0EZj&A_RP%l~SD
zJt|@Kb7IZ<OP4RdzOy(w{Cdu_eor5tJKNvSZ|DDO`2{$q1F}`c*v!mJ+8j9NR`>YW
zTWRw=@&5Nyf#VLz$L-9`#r4-~0k=f}z3u1c2RsUhgQEgC*r>}Uzy;lE)8q-+e57<f
z)=hK@$O+gNJ2hz3C38qRaex#+EGBsc63Gjfe)_m`u!8nm0K>&lK}80%$dJKtdLW1*
zb@>y?mZPj1a(IVvS(Je4($)!Vpcnw{+kgZdH5Q!_y}GN&7alr<Bc$Q~*7)Nlzy(4K
zhc~hOpLOwouXf^n1JJ@KaMI;b1hT+Oh@62j+@J^y=>s4?C4hW{OWA>=AzDCfHe0fS
WSr?0)z4QynVeoYIb6Mw<&;$T?CDAbe

literal 0
HcmV?d00001

diff --git a/content/laptop-point-of-no-return-dprk-hiring-fraud.md b/content/laptop-point-of-no-return-dprk-hiring-fraud.md
new file mode 100644
index 00000000..d9164d4d
--- /dev/null
+++ b/content/laptop-point-of-no-return-dprk-hiring-fraud.md
@@ -0,0 +1,123 @@
+Title: The Laptop Is the Point of No Return: DPRK IT Worker Fraud
+Date: 2026-10-15
+Modified: 2026-10-15
+Tags: insider-threat, north-korea, hiring-fraud, hiring, detection-engineering, edr
+Category: Threat Intelligence
+Series: Hiring as an Adversarial System
+Slug: detecting-dprk-it-worker-hiring-fraud
+Og_image: images/og/detecting-dprk-it-worker-hiring-fraud.png
+Author: Oliver Rivas
+Summary: The DPRK IT worker problem is usually told as an EDR story. By the time the alert fires, you have already lost. Move detection left of the laptop.
+Cover: images/covers/detecting-dprk-it-worker-hiring-fraud.png
+
+[TOC]
+
+---
+
+The North Korean IT worker problem is usually told as an endpoint story. Someone installs a remote-access tool, the SIEM lights up, and you pull the machine. That story is real, and I have lived it. It is also a description of a failure. By the time the alert fires, a hostile operator has held a corporate laptop, VPN credentials, and source-code access - for hours in the lucky cases, for weeks or months in the reported ones. The detection worked. The program did not.
+
+The uncomfortable part is that the cheapest, highest-yield controls against the common operator belong to recruiting and HR rather than security, and in my experience most teams are not running them. They will not stop everyone. A disciplined operator gets through, and I will come back to that. But they raise the attacker's cost and catch the high-volume, low-effort operators that scalable controls are best positioned to stop. This post is about moving that detection left of the laptop, and about why the work belongs to a program that spans recruiting, HR, and security rather than any single product you can buy. It is the defender's side of a shift I have written about from the candidate's side in The Trust Decay: hiring has quietly become an adversarial system.
+
+---
+
+## Why your background check is lying to you
+
+A background check verifies that an identity is real and unblemished. It does not verify that the person doing the work is that identity. Those are two different claims, and the space between them is the entire business model.
+
+These operations run on real US identities, either stolen or rented from a willing American. The SSN traces. County records are clean. Employment history, where it was ever real, holds up. Every field on the screening report goes green because the paperwork describes a real, law-abiding person. That person is simply not the one on the video call, and frequently not the one at the keyboard.
+
+So the first rule: a clean background check proves the identity is clean, and nothing more about the person using it.
+
+---
+
+## How the operation works
+
+DPRK IT workers pose as US-based remote engineers to route hard currency to a sanctioned regime. Three mechanics matter for defense:
+
+- A US-based facilitator runs a ["laptop farm"](https://www.justice.gov/opa/pr/two-north-korean-nationals-and-three-facilitators-indicted-multi-year-fraudulent-remote). Your laptop ships to a real American address, someone installs remote access, and the operator drives it from overseas while the traffic looks domestic.
+- One identity is often reused across several employers, sometimes simultaneously. That reuse is a weakness you can exploit: a bust or a burned persona at one employer can surface the same worker at the others, which is sometimes how a company learns it was hit at all.
+- The person who interviews may not be the person who works, and neither has to be the name on the I-9.
+
+You do not need to be a defense contractor to be a target. The [FBI has warned](https://www.ic3.gov/PSA/2025/PSA250123) that these workers have hit US businesses broadly, so if you hire remote engineers, assume you are in scope.
+
+---
+
+## The laptop is a one-way door
+
+Before you ship hardware, you hold cheap, high-leverage controls. You decide who to talk to, how to verify them, and where to send equipment. After you ship, you have handed an unknown party a trusted endpoint and moved the whole problem onto EDR, SIEM, and the hope that the operator slips. The door is not literally irreversible: you can still contain the machine, reimage it, and revoke its sessions and secrets. What flips is the economics. Before shipment you prevent cheaply. After it you pay to contain.
+
+Reframe shipping the laptop as a gate, and give it the seriousness you would give to granting production access. Nothing crosses that line until identity is established to a standard you would be willing to defend in an incident review. Everything below is about earning the right to ship.
+
+---
+
+## The program: gates and owners
+
+The failures happen across recruiting, HR, IT, and security, so no single team can close them. Give each gate an owner and a written standard.
+
+One thing to set before the gates: no single signal is a verdict. A VOIP number, an odd address, a fumbled local-knowledge question, or a VPN ASN each has an innocent explanation. What matters is the combination of independent inconsistencies. The program's job is to define when those inconsistencies trigger additional verification, who is allowed to make that call, and what evidence gets retained. Treat everything below as an input to that process, not a judgment about a person. This is hiring treated as an observability problem, which I argue more broadly in The Discovery Layer Is Broken.
+
+**Recruiting gate.** Owned by recruiting, running a security-provided checklist.
+
+- Camera on for every round. Treat "broken camera" and audio-only as signals worth pausing on.
+- Force live, unscripted action. Hold the ID next to the face, turn to profile, put a hand in front of the face, run a live coding exercise instead of a take-home. As of 2026, real-time face swaps still commonly break on occlusion and profile turns, but treat that as a filter for low-effort operators, not a dependable break: higher-end tools increasingly pass the hand-across-face test. The durable value is forcing live variation the operator cannot pre-render, not the occlusion itself.
+- Probe local knowledge casually: the weather right now, the nearest major airport, something a resident would know without thinking. Answers that fight the claimed time zone are a tell.
+- Check persona hygiene: VOIP-only numbers, a two-week-old LinkedIn with forty connections, a headshot that surfaces on reverse image search, and near-duplicate resumes across separate candidates.
+
+**Verification gate.** Owned by HR and recruiting.
+
+Independent employment verification through published main lines, never a number the candidate hands you. In my experience this is the control most teams quietly skip, and it is the one that catches fabricated histories and "references" that ring a co-conspirator. One honest caveat belongs here: verification usually reaches only the previous employer, since candidates withhold consent to contact where they work now.
+
+**Identity-assurance gate.** Owned jointly by security and HR.
+
+Tie the same live human to the same government ID at three separate points: the interview, the I-9, and day one. Use an authorized representative or a notary for in-person document inspection, and make sure that inspector is employer-designated and independent, not chosen by the candidate, because a candidate-selected notary defeats the whole point. Even a clean inspection only proves a live person held a valid ID, not that that person is the one who will do the work. Run E-Verify, and remember it passes valid stolen SSN and name combinations, so treat it as a floor.
+
+**Logistics gate.** Owned by IT. This is the last checkpoint before the one-way door.
+
+Ship only to the identity's verified residential address, signature required, cross-checked against the address on file. Be clear-eyed about what that does and does not buy you. A clean address match proves nothing against the facilitator model, because the facilitator's real home is the address on file, and the laptop ships straight into the farm. What the gate catches is the reroute. A request to send the laptop to a different address, a freight forwarder, or a mail drop is one of the strongest single tells in the funnel. Refuse "I will use my own device" and "let me start before the laptop arrives."
+
+---
+
+## What actually happened, and what it proves
+
+At one organization I worked with, a hire cleared the interview loop, the identity checks, and onboarding without a single flag. The catch came on day one, for the least sophisticated reason imaginable. He started a remote-access tool as root, and his sessions egressed through a rotating set of commercial VPNs in Western Europe, with the occasional US residential IP mixed in. EDR did its job, and the machine came off the network within hours. But containment is not prevention. The same day proved the endpoint controls worked and that identity assurance had let an untrusted operator reach a managed endpoint in the first place. None of those indicators are DPRK-specific; they are generic untrusted-operator markers, and foreign commercial-VPN egress is the opposite of the domestic-looking traffic a mature laptop farm produces. Treat the story as illustrative of the access pattern, not as attribution.
+
+I share it as a warning rather than a win. Every front-door control in place was defeated, because a real US facilitator can appear on camera, pass the I-9, and receive the laptop at a genuine address before handing remote control to an operator overseas. One [convicted facilitator](https://www.justice.gov/usao-dc/pr/arizona-woman-sentenced-17m-it-worker-fraud-scheme-illegally-generated-revenue-north) ran a home laptop farm at the center of a scheme that placed workers at more than three hundred companies, with some of the hardware shipped onward overseas. When a live person fronts the identity, your pre-laptop program passes cleanly, the laptop ships, and you are left betting on the operator being careless.
+
+He was careless. The next one will not be. A disciplined operator runs a KVM-over-IP appliance that presents to the operating system as a keyboard and a monitor, so there is no remote-access process to detect, and routes traffic through a US residential proxy that geolocates cleanly. None of the signals that made this catch would fire.
+
+---
+
+## The runtime backstop, for the ones who get through
+
+Assume some will clear the front door, and build the net accordingly. The net cannot depend on the local network: a disciplined operator sanitizes the segment, so a subnet scan pushed through your EDR may see an empty, curated view. The inverse is worth knowing too - a residential LAN noisy with corporate devices from several different companies is exactly the farm signature the careless tier leaves lying around. Either way, point the sensors at what you actually own:
+
+- Remote-access tooling on the endpoint (TeamViewer, AnyDesk, RustDesk, and the rest), at higher severity when it runs elevated or lands in a new hire's first weeks.
+- USB and HID telemetry for unexpected device changes and unusual hardware profiles. The KVM appliance described above presents as an ordinary keyboard, mouse, or display and can spoof standard vendor IDs, so treat this as supporting telemetry, not a reliable KVM detector. It gives you a lead, not proof.
+- Egress anomalies: non-US geolocation or VPN and hosting ASNs from a device that should leave the internet through a US home connection.
+- Interaction latency, measured at the endpoint (research-grade). A remote-desktop or KVM channel inserts a round trip that surfaces as delayed reaction to on-screen events, and adds network jitter that shows up as variance in keystroke timing on the device itself. Two caveats keep it honest: it is endpoint-side only, not network RTT to your services (a US-local laptop or residential proxy tells your servers nothing), and it is far too noisy to stand alone, so it can corroborate other signals but never drive a decision.
+
+Expect some of these alerts to be your own people. [Every Alert Is Your Alert]({filename}every-alert-is-your-alert.md) covers closing the true positives your own IR tooling generates, after I watched it trip the very EDR it was working alongside.
+
+Wrap all of it in a heightened-monitoring window for the first thirty days of any remote hire. That is when these signals clustered, in the case I worked and in the public reporting, and it is the cheapest place to spend the attention.
+
+---
+
+## Do not make the laptop the last gate
+
+The case above proves some operators clear every pre-shipment control, so the laptop should not be the final trust decision. Treat the first thirty days as a trust-establishment period, not just a monitoring window. A new remote engineer starts constrained: no standing production access, step-up approval for sensitive repositories and secrets, tighter SaaS entitlements, risk-based re-authentication, heightened logging. Access expands as the role actually requires it, earned rather than granted at onboarding. This assumes IdP and entitlement tooling mature enough to express it; the minimum viable version is manual - no standing production access, and a human approving sensitive grants for the first thirty days. This is blast-radius thinking applied to the identity layer, the same argument I make for [IAM permissions]({filename}iam-blast-radius-architecture-problem.md). You cannot prove a hire is legitimate before they start. What you can do is avoid making one irreversible trust decision, and increase trust only as the signals you control keep checking out.
+
+---
+
+## Do not build a discrimination engine
+
+This is where a program keeps or loses its legitimacy. Screen the fraud, not the person. Detect on behavior and fraud markers, never on accent, name, national origin, or a vague sense that someone "seems foreign." That line is an ethical and legal requirement, and it also happens to be better security. Nationality is a terrible feature. It buries you in false positives, it is trivial to spoof, and it trains your team to wave through the domestic-sounding facilitator, which is precisely the profile that clears every gate in the case above. Write the criteria down, make them reviewable, and keep a human in the loop on every adverse decision.
+
+---
+
+## If you do only three things
+
+- Independent employment verification on published lines. In my experience the highest-yield cheap control against low-effort operators.
+- Verified-address-only shipping with a required signature. Make the laptop a gate.
+- A thirty-day heightened-monitoring window on new remote hires. Your backstop for the ones who clear the door.
+
+The alert in your SIEM is the sound of a control that fired too late. Move the decision to the day before the laptop ships, make it someone's job, and design everything after it on the assumption that a good operator gets through anyway.

From 394705bff82d5f5f4fdf9e6ca685d4767ed24bde Mon Sep 17 00:00:00 2001
From: rivassec <rivassec@rivassec.com>
Date: Fri, 16 Oct 2026 10:49:48 -0700
Subject: [PATCH 2/2] fix(post): drop horizontal-rule section dividers from
 DPRK hiring-fraud post

The section-divider check failed on 10 '---' rules; each one sat just
before a ## heading (or the intro), so they are removed with no text change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JoTNmbmc8o4TJDUGG2gd3P
---
 ...op-point-of-no-return-dprk-hiring-fraud.md | 20 -------------------
 1 file changed, 20 deletions(-)

diff --git a/content/laptop-point-of-no-return-dprk-hiring-fraud.md b/content/laptop-point-of-no-return-dprk-hiring-fraud.md
index d9164d4d..802f8a1c 100644
--- a/content/laptop-point-of-no-return-dprk-hiring-fraud.md
+++ b/content/laptop-point-of-no-return-dprk-hiring-fraud.md
@@ -12,14 +12,10 @@ Cover: images/covers/detecting-dprk-it-worker-hiring-fraud.png
 
 [TOC]
 
----
-
 The North Korean IT worker problem is usually told as an endpoint story. Someone installs a remote-access tool, the SIEM lights up, and you pull the machine. That story is real, and I have lived it. It is also a description of a failure. By the time the alert fires, a hostile operator has held a corporate laptop, VPN credentials, and source-code access - for hours in the lucky cases, for weeks or months in the reported ones. The detection worked. The program did not.
 
 The uncomfortable part is that the cheapest, highest-yield controls against the common operator belong to recruiting and HR rather than security, and in my experience most teams are not running them. They will not stop everyone. A disciplined operator gets through, and I will come back to that. But they raise the attacker's cost and catch the high-volume, low-effort operators that scalable controls are best positioned to stop. This post is about moving that detection left of the laptop, and about why the work belongs to a program that spans recruiting, HR, and security rather than any single product you can buy. It is the defender's side of a shift I have written about from the candidate's side in The Trust Decay: hiring has quietly become an adversarial system.
 
----
-
 ## Why your background check is lying to you
 
 A background check verifies that an identity is real and unblemished. It does not verify that the person doing the work is that identity. Those are two different claims, and the space between them is the entire business model.
@@ -28,8 +24,6 @@ These operations run on real US identities, either stolen or rented from a willi
 
 So the first rule: a clean background check proves the identity is clean, and nothing more about the person using it.
 
----
-
 ## How the operation works
 
 DPRK IT workers pose as US-based remote engineers to route hard currency to a sanctioned regime. Three mechanics matter for defense:
@@ -40,16 +34,12 @@ DPRK IT workers pose as US-based remote engineers to route hard currency to a sa
 
 You do not need to be a defense contractor to be a target. The [FBI has warned](https://www.ic3.gov/PSA/2025/PSA250123) that these workers have hit US businesses broadly, so if you hire remote engineers, assume you are in scope.
 
----
-
 ## The laptop is a one-way door
 
 Before you ship hardware, you hold cheap, high-leverage controls. You decide who to talk to, how to verify them, and where to send equipment. After you ship, you have handed an unknown party a trusted endpoint and moved the whole problem onto EDR, SIEM, and the hope that the operator slips. The door is not literally irreversible: you can still contain the machine, reimage it, and revoke its sessions and secrets. What flips is the economics. Before shipment you prevent cheaply. After it you pay to contain.
 
 Reframe shipping the laptop as a gate, and give it the seriousness you would give to granting production access. Nothing crosses that line until identity is established to a standard you would be willing to defend in an incident review. Everything below is about earning the right to ship.
 
----
-
 ## The program: gates and owners
 
 The failures happen across recruiting, HR, IT, and security, so no single team can close them. Give each gate an owner and a written standard.
@@ -75,8 +65,6 @@ Tie the same live human to the same government ID at three separate points: the
 
 Ship only to the identity's verified residential address, signature required, cross-checked against the address on file. Be clear-eyed about what that does and does not buy you. A clean address match proves nothing against the facilitator model, because the facilitator's real home is the address on file, and the laptop ships straight into the farm. What the gate catches is the reroute. A request to send the laptop to a different address, a freight forwarder, or a mail drop is one of the strongest single tells in the funnel. Refuse "I will use my own device" and "let me start before the laptop arrives."
 
----
-
 ## What actually happened, and what it proves
 
 At one organization I worked with, a hire cleared the interview loop, the identity checks, and onboarding without a single flag. The catch came on day one, for the least sophisticated reason imaginable. He started a remote-access tool as root, and his sessions egressed through a rotating set of commercial VPNs in Western Europe, with the occasional US residential IP mixed in. EDR did its job, and the machine came off the network within hours. But containment is not prevention. The same day proved the endpoint controls worked and that identity assurance had let an untrusted operator reach a managed endpoint in the first place. None of those indicators are DPRK-specific; they are generic untrusted-operator markers, and foreign commercial-VPN egress is the opposite of the domestic-looking traffic a mature laptop farm produces. Treat the story as illustrative of the access pattern, not as attribution.
@@ -85,8 +73,6 @@ I share it as a warning rather than a win. Every front-door control in place was
 
 He was careless. The next one will not be. A disciplined operator runs a KVM-over-IP appliance that presents to the operating system as a keyboard and a monitor, so there is no remote-access process to detect, and routes traffic through a US residential proxy that geolocates cleanly. None of the signals that made this catch would fire.
 
----
-
 ## The runtime backstop, for the ones who get through
 
 Assume some will clear the front door, and build the net accordingly. The net cannot depend on the local network: a disciplined operator sanitizes the segment, so a subnet scan pushed through your EDR may see an empty, curated view. The inverse is worth knowing too - a residential LAN noisy with corporate devices from several different companies is exactly the farm signature the careless tier leaves lying around. Either way, point the sensors at what you actually own:
@@ -100,20 +86,14 @@ Expect some of these alerts to be your own people. [Every Alert Is Your Alert]({
 
 Wrap all of it in a heightened-monitoring window for the first thirty days of any remote hire. That is when these signals clustered, in the case I worked and in the public reporting, and it is the cheapest place to spend the attention.
 
----
-
 ## Do not make the laptop the last gate
 
 The case above proves some operators clear every pre-shipment control, so the laptop should not be the final trust decision. Treat the first thirty days as a trust-establishment period, not just a monitoring window. A new remote engineer starts constrained: no standing production access, step-up approval for sensitive repositories and secrets, tighter SaaS entitlements, risk-based re-authentication, heightened logging. Access expands as the role actually requires it, earned rather than granted at onboarding. This assumes IdP and entitlement tooling mature enough to express it; the minimum viable version is manual - no standing production access, and a human approving sensitive grants for the first thirty days. This is blast-radius thinking applied to the identity layer, the same argument I make for [IAM permissions]({filename}iam-blast-radius-architecture-problem.md). You cannot prove a hire is legitimate before they start. What you can do is avoid making one irreversible trust decision, and increase trust only as the signals you control keep checking out.
 
----
-
 ## Do not build a discrimination engine
 
 This is where a program keeps or loses its legitimacy. Screen the fraud, not the person. Detect on behavior and fraud markers, never on accent, name, national origin, or a vague sense that someone "seems foreign." That line is an ethical and legal requirement, and it also happens to be better security. Nationality is a terrible feature. It buries you in false positives, it is trivial to spoof, and it trains your team to wave through the domestic-sounding facilitator, which is precisely the profile that clears every gate in the case above. Write the criteria down, make them reviewable, and keep a human in the loop on every adverse decision.
 
----
-
 ## If you do only three things
 
 - Independent employment verification on published lines. In my experience the highest-yield cheap control against low-effort operators.