From 64445c1367be039543c2e975dd41576dfb1f357d Mon Sep 17 00:00:00 2001
From: Ardy <116569704+0xArdy@users.noreply.github.com>
Date: Mon, 20 Nov 2023 14:14:56 -0400
Subject: [PATCH 1/6] feat: add liveness blog and update styling (#57)
---
package.json | 2 +-
public/blog-posts/liveness-2-and-beyond.md | 318 +++++++++++++++++++++
src/data/blog.json | 8 +
src/pages/Creations/ProjectsList/index.tsx | 6 +-
src/pages/Insights/Insights.styles.tsx | 24 +-
src/pages/Insights/Insights.tsx | 21 +-
src/pages/Insights/Posts/Posts.styles.tsx | 31 +-
yarn.lock | 94 +++---
8 files changed, 431 insertions(+), 73 deletions(-)
create mode 100644 public/blog-posts/liveness-2-and-beyond.md
diff --git a/package.json b/package.json
index f9f2aa58..a9223a52 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
"rehype-katex": "6.0.2",
"rehype-raw": "6.1.1",
"remark-math": "5.1.1",
- "styled-components": "5.3.5"
+ "styled-components": "6.1.1"
},
"devDependencies": {
"@types/fontfaceobserver": "2.1.0",
diff --git a/public/blog-posts/liveness-2-and-beyond.md b/public/blog-posts/liveness-2-and-beyond.md
new file mode 100644
index 00000000..cf9d441b
--- /dev/null
+++ b/public/blog-posts/liveness-2-and-beyond.md
@@ -0,0 +1,318 @@
+Authors: [Parti](https://twitter.com/0xParticle), [Skeletor Spaceman](https://twitter.com/Skeletor_Space)
+
+## Goal
+
+**This report aims to improve the safety and scalability of the SAFE liveness module. We will analyze different methods for on-chain storage proof verification and discuss concrete improvements for the module.**
+
+## The Liveness problem
+
+Let’s first recap the problem we are trying to solve with the Liveness Module. This context will be valuable for analyzing what each verification method can provide.
+
+Unlike EOAs, smart wallets have configuration settings, which can cause synchronization problems across chains. Consequently, SAFEs on different chains function as separate contracts, even though they may share the same address and configuration parameters during deployment. This problem becomes critical when there’s a change in the owners’ list. We must tackle this issue if we want to create a chain-agnostic future.
+
+
+
+Moreover, as web3 moves towards a multichain future, the liveness problem becomes increasingly more noticeable and complex.
+
+- Noticeable: user experience is becoming increasingly fragmented with the number of chains.
+- Complex: simple solutions, such as sending cross-chain messages with a bridge, become unsustainable.
+
+We are building the Liveness Module for SAFE to make liveness more efficient and scalable.
+
+## Current design
+
+We have first designed a functional PoC for the Liveness Module. You can find the design details on the [grant application](https://app.charmverse.io/safe-grants-program/page-19468196994649234) and [Figma](https://www.figma.com/file/3nxKWYucaDaDsKHyTmpyjC/Safe-Liveness?type=whiteboard&node-id=0%3A1&t=QY4SHW673zDAGVGw-1). One critical design choice was introducing a **Shared Proof** mechanism. We will briefly describe next what this mechanism is about.
+
+### **Shared Proofs**
+
+We want to update settings (a storage value) cross-chain. The trust-minimized approach involves on-chain cryptographic proofs. To prove some _settings_ of a wallet contract in a target chain are in sync with a [Home Chain](https://www.notion.so/732880952aea420dbeaa6b31bc68e490?pvs=21), a user must verify that:
+
+1. The Home Chain’s most recent state includes a storage root *R*.
+2. The _settings_ are included in _R_.
+
+The verification can be done using **Storage Proofs:**
+
+[Storage Proofs](https://www.notion.so/Storage-Proofs-8f5ad324afab4592b7f2882b8cf9a354?pvs=21)
+
+
+
+With the current architecture, each wallet contract has to do a separate proof for step 1, as storage root varies from safe to safe. We can, however, modify the contract architecture to make users share this verification step using a Shared Contract root.
+
+There are several ways to achieve this, but for the PoC, we will build a contract that mirrors the storage data from all safes. With this, the root _R_ is simply the storage root from a contract that contains all the owner and setting information from every SAFE using the module in a _Home chain_. Whenever users create or modify their settings, the S4M should be updated correspondingly.
+
+The crucial insight here is computation compression: users can share the first verification step; thus, instead of confirming the storage of only their SAFE wallet against the Home Chain's state root, they can assert the root of the shared contract. Users can then perform the second verification against the verified storage root.
+
+### **Home Chain**
+
+For the PoC, and despite its high cost, we suggest using Ethereum as the primary reference point due to its security and ability to communicate with other chains. However, as things change, other options might become more suitable. That’s why we use the generic term’ Home Chain’ to refer to this main reference point.
+
+
+
+Using Ethereum as the Home chain has an additional advantage: proof verification happens in other chains only. This means we don’t need to worry too much about gas costs, as most chains have low gas prices.
+
+However, we expect to enable users to set their own Home Chain eventually. This would also mean that high gas costs become a problem. Here is where this research comes into play. The report will analyze different systems that can help make this verification process more efficient and scalable.
+
+## The EVM as the verifier
+
+
+
+Ethereum is a transparent and decentralized VM. As such, it is the ideal platform to act as a trustless verifier. If Ethereum is convinced, so should we. But what does it mean for Ethereum to be a verifier? Verification in a protocol is a series of deterministic steps conducted on a series of inputs. In particular, we can write a verification program in the bytecode of a Smart Contract.
+
+To enable any trustless method based on storage proofs, we need two things:
+
+- State root availability
+- Verification method
+
+## State root availability
+
+Designing a trustless method to post the Home chain state root is far beyond the scope of the PoC, but as the whole system design is sensible to it, it’s essential to understand how it works. Doing so will allow us to pick the most secure option as an oracle for the module.
+
+**Cross-chain posting**
+
+To execute the whole verification, we need a reliable way to read the state root from the Home Chain. Light Client Proofs do not prove execution or storage but consensus (validator signatures) and use the beacon root (instead of the state root). These proofs assert that a specific state root *R* corresponds to a finalized block. In other words, a proof must prove that a particular state is valid and corresponds to the correct (finalized) fork choice. Unfortunately, the beacon root is currently not included in the execution layer, but [it's expected to](https://eips.ethereum.org/EIPS/eip-4788) be. So, how do we get this information to another chain?
+
+One basic method to prove the consensus of chain A in the execution layer of chain B is to run an on-chain Light Client of A in B. This is, of course, extremely expensive to run. To gain some intuition on why, consider that Ethereum consensus uses BLS signatures on a BLS12-381 curve, which are not included as a precompile in EVMs. Even if the Light Client verified the signatures of the [sync committee](https://github.com/ethereum/annotated-spec/blob/master/altair/sync-protocol.md#introduction) only, it is still prohibitory costly. Here is where zk comes into play.
+
+
+
+[Succint](https://www.succinct.xyz/) developed a [contract](https://etherscan.io/address/0xaa1383ee33c81ef2274419dd5e0ea5cce4baf6cc#code) that verifies a zk-proof of consensus, where anyone can post a zkSNARK attesting that the sync committee has signed a block header. Their design also requires keeping track of the current sync committee, which is also done via a zkSNARK. The protocol is deployed on Ethereum and other chains, but the light client updates is operating [frequently only in Goerli](https://explorer.telepathy.xyz/). Each update in Ethereum costs [300k in gas](https://etherscan.io/tx/0x6d608c89eb97b249f40fc1db4306fe0b5af4d0dec3e1db1b8872b3ddf8c5af75). They enable light client proofs of Ethereum and Gnosis to Ethereum, Gnosis, Arbitrum, Avalanche, Binance, Optimism and Polygon (look [here](https://docs.telepathy.xyz/resources/contract-addresses) for the addresses).
+
+[Bravis](https://brevis.network/) is using a similar [sync committee model](https://docs.brevis.network/zk-implementation/zk-light-client), but couldn’t find the light client contracts to figure out their gas cost.
+
+Conversely, [Lagrange](https://www.lagrange.dev/) questions the security of a sync-committee-based light client (such as the one used by Succint), as they are exposed to [corruption risk](https://lagrange-labs.gitbook.io/lagrange-labs/overview/overview-of-existing-cross-chain-security-models). Moreover, they claim that it’s impossible to maintain a zkSNARK system that proves Casper Finality (Succint claims their SNARK include finality, so one of the two must be lying). To safely and efficiently update the finalized block header information, they use a node’s network restaked (using Eigenlayer or other providers). This method also allows integrating other chains that don’t necessarily have Ethereum consensus. They are still on production.
+
+[Herodotus](https://www.herodotus.dev/) is another key protocol here. They use native L1<>L2 message passing to synchronize block hashes between chains. The process is quite complex, involving multiple transactions over two contracts (full explanation can be found [here](https://docs.herodotus.dev/herodotus-docs/protocol-design/historical-block-hash-accumulator/initial-accumulation-event)). The total gas consumed is almost 4M ([here](https://etherscan.io/tx/0xbce801a066b3c522eb8817b352b08eaf5d04293c60e328500469495b42e60f19) and [here](https://etherscan.io/tx/0xa70b41ebf2243ca1825b5e873cb081dba93806703c7b5fe4e84c8078e86faa10)).
+
+It’s worth noticing that L2s can post the `BLOCKHASH` from L1 directly on L2 by using a deposit function, as an arbitrary message. This needs to be actively supported, and none is doing it at the time of writing, as the cost would be pretty high (approximately $300k per rollup per year). Nonetheless, there is no need to update every single root: time batching could do wonders on saving unnecessary costs. Shared sequencer could also address this problem.
+
+An alternative design would be to modify the client from the L2 and introduce an opcode/precompile that can access the `BLOCKHASH` directly without a deposit (leverage the fact that the sequencer is already reading the L1 state).
+
+**Historical roots**
+
+_Disclaimer_: This is not required for our module, but it’s an essential part of the protocols discussed in the next section. Moreover, this problem could become relevant to our module eventually.
+
+The EVM allows contracts to fetch `BLOCKHASH` data up to 256 blocks back (less than 1 hour). This is not enough to make storage proofs of things like “who owned a certain ERC20 2 months ago?”, which could be used for a trustless airdrop distribution.
+
+[Axiom](https://www.axiom.xyz/), [Relic](https://relicprotocol.com/) and [Herodotus](https://docs.herodotus.dev/herodotus-docs/historical-block-hash-accumulator) are working on storing these historical roots on-chain using zkSNARKs. They both have a [similar flow](https://docs.axiom.xyz/protocol-design/caching-block-hashes), where users update the latest roots with proof that a contract verifies. If the roots are valid, they get inserted into a Merkle Mountain Range. Herodotus also stores [the root cache into an MMR](https://docs.herodotus.dev/herodotus-docs/historical-block-hash-accumulator) but cross-chain using STARKs.
+
+
+
+## Verification methods
+
+As we mentioned, our goal is to prove the value of a certain storage value from a certain contract in a different chain. There are several ways to verify this on-chain:
+
+- generate storage proof → verify it on-chain
+- generate storage proof → generate zk proof for it → verify it on-chain
+
+During the last few years, we have seen enormous technical advances in optimizing verification processes. The field of zk proofs has gained a lot of traction, in a big part due to their brief verification step. These proofs outsource the heavy computation to the prover to make verification as simple as possible.
+
+
+
+This *succinctness* is particularly appealing when dealing with the EVM, as computation requires gas. In what follows, we will describe some possible approaches to dealing with storage proofs in this context.
+
+In [this blog post](https://vitalik.eth.limo/general/2023/06/20/deeperdive.html), Vitalik compares there are five ways to tackle verification:
+
+- Merkle proofs (already discussed)
+- General-purpose zkSNARKs
+- Special-purpose proofs (e.g. KZG)
+- Verkle proofs
+- Direct reading
+
+Both zkSNARKs and KZG allow for proof aggregation, further reducing user costs.
+
+
+
+In what follows, we will focus on the existing approaches to tackle this verification step. Even though storage proofs (with or without zk) are the most secure method, we will also consider other options in our analysis. For each, we will analyze the tradeoffs, possibilities, costs and state of development.
+
+### **Merkle Proofs verification**
+
+[Storage Proofs](https://www.notion.so/Storage-Proofs-8f5ad324afab4592b7f2882b8cf9a354?pvs=21)
+
+MPT verification refers to contracts that can compute the whole storage proof from the Ethereum Merkle Patricia Trie on-chain. There are several working implementations of MPT verifiers written in Solidity. We recommend checking the [Lido](https://github.com/lidofinance/curve-merkle-oracle/blob/main/contracts/MerklePatriciaProofVerifier.sol) and [polytope](https://github.com/polytope-labs/solidity-merkle-trees/blob/main/test/MerklePatricia.t.sol) implementations.
+
+It’s easy to generate proofs for any storage slot using the RPC providers’ [eth_getProof()](https://docs.infura.io/networks/ethereum/json-rpc-methods/eth_getproof) method. Storage-proof verification implementations require approximately 200k gas, which is considerable for Ethereum but not so much for L2s.
+
+From the existing protocols we mentioned, [Relic](https://docs.relicprotocol.com/overview/comparison) and [Herodotus](https://www.herodotus.dev/) use direct MPT proofs against the verified roots. You can check out [Relic’sRelic’s optimized Solidity library](https://github.com/Relic-Protocol/relic-contracts/blob/main/contracts/lib/MPT.sol) and Herodotus [Fact Registry](https://docs.herodotus.dev/herodotus-docs/architecture-overview/facts-registry) in [Starknet](https://goerli.voyager.online/contract/0x07c88f02f0757b25547af4d946445f92dbe3416116d46d7b2bd88bcfad65a06f). I also found this repo in Noir for Ethereum MPT verification: https://github.com/aragonzkresearch/noir-trie-proofs/
+
+We will take this approach for the PoC, as it’s the most straightforward and battle-tested solution.
+
+
+
+### **General purpose zkProofs:** **zkSNARKs**
+
+SNARKs are argument systems that allow anyone to verify a program satisfaction claim in a non-interactive and succint way. This means that a prover can convince a verifier that they have an input that makes a computer program output a target value with a concise and easy-to-evaluate proof.
+
+Storage proofs are only a particular use case for SNARKs, where a proof is crafted for the MPT storage proof computation. The idea here is to embed the MPT verification into a more succint SNARK.
+
+There are many types of SNARK implementations, each with its corresponding costs. Some popular implementations in the EVM context are [Plonky2](https://github.com/0xPolygonZero/plonky2/blob/main/plonky2/plonky2.pdf) (which combines PLONK with FRI into a super efficient recursive SNARK) and [UltraPLONK](https://hackmd.io/Iuu9P7S5Sca0TCoYJ-sFdA) (more battle-tested, used by zkSync and Aztec, among others).
+
+I strongly recommend this resource for anyone interested in the subject: [Proofs, Arguments, and Zero-Knowledge](https://people.cs.georgetown.edu/jthaler/ProofsArgsAndZK.pdf)
+
+**Coprocessors**
+
+[Coprocessors](https://crypto.mirror.xyz/BFqUfBNVZrqYau3Vz9WJ-BACw5FT3W30iUX3mPlKxtA) are instances that work like an off-chain VM extension that can execute heavy computation based on on-chain data. These coprocessors allow the outsource storage proofs (and other kinds of computation) from the chain and then submit a zk proof that is cheaper to verify. Notice the definition of a coprocessor is [quite vague](https://dba.xyz/do-rollups-inherit-security/), which has lead to [some discussions](https://twitter.com/jon_charb/status/1698587623843823649). Storage proofs are just a [particular use case for coprocessors](https://x.com/p_e/status/1715004957576004066?s=20) but also the most common use case.
+
+
+
Problem: Computing things on-chain is prohibitively expensive (and in many cases, impossible) Solution: Compute off-chain, post & verify zk proofs on-chain
+
+[Axiom](https://www.axiom.xyz/) is the most popular player in this design space. They have a [library](https://github.com/axiom-crypto/axiom-eth/) for creating custom circuits for storage proofs. They use Halo2 arithmetization (a method to convert programs to arithmetic circuits) and KZG polynomial commitments. Users must offer a reward to initiate a query, similar to our module design.
+
+At the time of writing, they have deployed their contracts on mainnet only. A potential integration would require deploying the contracts on the different networks, which is not that easy to do, as verification requires query access to the state roots cache ([MMR implementation](https://docs.axiom.xyz/protocol-design/caching-block-hashes)).
+
+Also, note that the current implementation consumes above [500k gas per query answer](https://etherscan.io/address/0xd617ab7f787adf64c2b5b920c251ea10cd35a952), even more than the current MPT implementations. Axiom has, of course, a lot of additional benefits, such as allowing queries to go back in time.
+
+.](https://defi-wonderland.notion.site/image/https%3A%2F%2Fprod-files-secure.s3.us-west-2.amazonaws.com%2F7683bccd-1174-4689-a817-b27fd9d7ef00%2Fd4de05fd-0589-437d-a1a9-683aa8cc742a%2FUntitled.png?table=block&id=19f3eb78-d327-4b44-abb1-6e7722ce4759&spaceId=7683bccd-1174-4689-a817-b27fd9d7ef00&width=770&userId=&cache=v2)
+
+Gas comparison for different proofs. Image taken from [Relic’s documentation](https://docs.relicprotocol.com/overview/comparison).
+
+[Brevis](https://brevis.network/) also does [storage proofs](https://docs.brevis.network/zk-implementation/slot-value-proof) using use Groth16 based circuits. It can also be used to prove claims using the [Receipts](https://docs.brevis.network/zk-implementation/receipt-proof) and [Transaction](https://docs.brevis.network/zk-implementation/transaction-proof) Tries. They have actually a [working demo](https://demo.brevis.network/) which allows to generate storage proofs for Ethereum and then submit the proof to BSC chain (check verifier contract [here](https://testnet.bscscan.com/address/0xc2307a0596a69f1f4c55d2f30df32eb9ef513980#code)).
+
+[Herodotus](https://docs.herodotus.dev/herodotus-docs/developers/storage-proofs) has its own implementation for storage proofs. It’s already deployed and running, but it’s extremely expensive to verify ([over 5M gas](https://etherscan.io/tx/0x361c9b614c4247a22dd8404bccf54273c4ad4e77e876481b53f5e35d11c2f93c) at the time of writing).
+
+Then, we have [RISC Zero](https://www.risczero.com/), which allows users to verify general computation written in [Rust](https://dev.risczero.com/zkvm) using [STARKs](https://dev.risczero.com/proof-system/stark-by-hand) and their [Bonsai](https://dev.risczero.com/bonsai) proving system. They also built [Zeth](https://www.risczero.com/news/zeth-release), their own block and state prover, aka a type 0 zk-rollup. In theory, the gas costs are [scalable](https://www.risczero.com/news/on-chain-verification) (around 200k in callback and 30k in request). On a similar line, [fhEVM](https://www.zama.ai/fhevm) aims to create a coprocessor for private smart contract functionalities. RISC Zero and fhEVM are still in an early stage and not production-ready.
+
+**Batching proofs: zk MapReduce & Recproofs**
+
+The goal is to have a proof construction method optimized for generating large-scale batch storage proofs.
+
+zkMapReduce allows anyone to prove they’ve performed specific computations on a dataset without revealing the dataset itself or the intermediate steps. The proof has to prove the existence of the underlying data (a storage proof) and the result of a computation on it. Proofs use vector commitment schemes, making them suitable for proving distributed computation, such as SQL or MapReduce.
+
+This method allows the merging of storage proofs from different chains into a single proof, simultaneously acting as a coprocessor for multiple chains. This is [what Lagrange uses](https://lagrange-labs.gitbook.io/lagrange-labs/zk-big-data/overview-of-the-zk-big-data-stack) to act as an [n-1 bridge](https://lagrange-labs.gitbook.io/lagrange-labs/overview/what-is-the-lagrange-protocol). The bad news is that updating existing proofs is expensive, which Lagrange’s Recproofs aim to solve.
+
+[Recproofs](https://uploads-ssl.webflow.com/6460ebf2b6ff254688bebf1c/64e4dd54d9198fde8d58ef44_main.pdf) are a particular Merkle-tree-based vector commitment scheme that allows proof batching for a group of leaves using recursive SNARKs. This is particularly useful for large datasets and allows efficient proof updates for MapReduce systems. To achieve this, they use folding schemes, where a set of proofs gets compacted into a single proof of proofs. What’s important to know is that this proof is O(log n) with n the number of underlying proofs. We could expect Lagrange to implement Recproofs to improve their system’s proof update process.
+
+Lagrange is yet to be operating, so we still have yet to determine what the gas cost for this system will be for the users. Due to batching, we expect systems like this to become more relevant with the number of storage proofs.
+
+**Other approaches**
+
+[HyperOracle](https://www.hyperoracle.io/) defines itself as programable zkOracle. It will allow users to query any information on-chain, including state or storage proofs from Ethereum, using zk-verified methods. These proofs can also work for historical data (beyond the 256 blocks). The product is still in construction, and we could not find details on the zk tools being used, nor expected gas cost or latency.
+
+### **Specific purpose zkProofs:** **KZG**
+
+KZG allow the construction of efficiently updatable storage proofs.
+
+
+
+Dankrad does a great job of summarizing KZG in [this post](https://dankradfeist.de/ethereum/2020/06/16/kate-polynomial-commitments.html). The basic intuition works as follows:
+
+- Given a dataset $\{a_1,\dots,a_n\}$ , it’s possible to create a polynomial $P$ such that interpolates to the dataset at the powers of the root of unity $w\ni w^N=1$ in mod $N$. The interpolation expects that $P(w)=a_1, P(w^2)=a_2,\dots P(w^N)=a_n$, and can be done using Lagrange.
+- A commitment to $P$ is an elliptic curve point defined as $com(P)=P_0 * G + P_1 * S_1 + \dots + P_k * S_k$ with $G$ the generator point of the curve, $P_i$ the i-th degree coefficient of the polynomial and $S_i$ the i-th point of the trusted setup.
+- To create a proof for the claim $P(z)=a$, the prover must generate a polynomial $Q=\frac{P-a}{x-z}$ , and then commit to it $com(Q)$. This polynomial is well defined if and only if $P(z)=a$.
+- Verifier checks the equation $Q * (x-z)=P-a$ in the elliptic curve using pairings $e$: $e(com(Q),com(x-z)) ?= e(com(P)-com(a),com(1))$
+
+**Efficient updates**
+
+As we mentioned, an attractive property of KZG is that proofs can be efficiently updated: if a specific value $a_i$ wants to $a_i^*$, then the old commitment to $P$ can be updated to a commitment to $P^*$ as follows: $com(P^*)=com(P)+(a_i^*-a_i) * com(L_i)$ with $L_i$ the Lagrange polynomial that equals 1 at $w^i$ and 0 on $w^j\;\forall j\neq i$. Notice $com(L_i)$ can be precomputed by the prover ($N$ commitments). The verifier, on the other hand, will not store the commitments but can receive a KZG commitment or a Merkle proof for the set to prove correctness. Hence, this protocol enables efficient updates, which would be ideal for our concrete application.
+
+Additionally, two KZG proofs can be merged into a single one, which would simplify our current two step verification contracts into a single one.
+
+Implementations of KZG in Solidity are still in the [experimental stage](https://github.com/topics/kzg-commitment). Most implementations focus on its application for [EIP-4844](https://www.eip4844.com/) rather than for storage proofs. Also, KZG is worth it if batching can be done, which will probably not happen for the PoC.
+
+### Verkle Proofs
+
+[Verkle trees](https://vitalik.ca/general/2021/06/18/verkle.html) are improvements over Merkle Patricia Tries for storing key-value mappings. It uses stacked Polynomial or [Inner Product](https://vitalik.eth.limo/general/2021/11/05/halo.html#background-how-do-inner-product-arguments-work) commitments. These structures are [likely to be incorporated into Ethereum as the new state tree](https://notes.ethereum.org/@vbuterin/verkle_tree_eip).
+
+A SNARK can be generated for Verkle tree inclusion proofs, resulting in lower prover cost than current Merkle structures. However, implementations are still far away to consider.
+
+### Direct Reading
+
+It is possible to enable [static calls from L2 contracts to L1 contracts](https://ethresear.ch/t/cross-layer-communication-trivially-provable-and-efficient-read-access-to-the-parent-chain/15396). This would require a special opcode or precompile in the L2. Remember that sequencers are already aware of the L1 state, as they have to track the rollup contract, so it’s mostly an implementation challenge.
+
+Optimism has recently opened a [request for a proof of concept](https://github.com/ethereum-optimism/ecosystem-contributions/issues/76) on this line.
+
+### **Consensus**
+
+Some protocols can answer state queries using consensus instead of cryptographic verification. This method introduces a considerable amount of trust but also reduces the cost of operations and latency.
+
+[Succint](https://www.succinct.xyz/) is [following this design choice](https://docs.telepathy.xyz/state-queries/introduction) by leveraging its [attestation network](https://docs.telepathy.xyz/state-queries/succinct-attestation-network). The product was still not ready at the time of writing, so we could not find precise information on the gas costs. We did, however, find this sentence in their [documentation](https://docs.telepathy.xyz/state-queries/succinct-attestation-network):
+
+> Many developers rely on oracles to power liquidations or other very latency sensitive parts of their protocol. These developers want the lowest-possible latency for their oracle requests. While there have been tremendous leaps in zk proof technology, the proof generation time is still ultimately too slow for many use-cases. Also, verifying a zk proof is cheap, however for _minimized_ gas costs, verifying signatures from a network is even cheaper (generally 240k gas vs. 30k gas if our network has 15 validators). Thus many developers prefer a committee based approach for minimal latency and minimal gas costs.
+
+We will advise against this for now, even though it could reduce enormously cost and latency because we consider it is not worth the additional security risks.
+
+## Further Optimizations
+
+
+
+### **Optimistic layer**
+
+A middle ground between consensus methods and full verification is to use an optimistic system where users can request and receive a state update. This system should include a verification method with a full procedure (direct MPT or zk) in case of a dispute. Such a mechanism aims to lower the gas cost of storage proofs with only a minor increase in trust (1-N will dispute).
+
+An optimistic layer has an additional price to pay, which is latency. The mechanism requires a long time window to ensure agents have time to dispute. The longer the time window, the safer the optimistic system, but the higher the request latency.
+
+### Shared sequencing
+
+Shared sequencing is one of the hottest topics in web3 at the moment. As sequencers usually play a huge role in communication between chains, it is unsurprising that a shared sequencer can optimize communication by implementing shared proofs.
+
+This design would have a similar end goal to what Lagrange does with N-1 communication but using simpler aggregated proofs. These [thoughts](https://hackmd.io/@kalmanlajko/ByE28sYfs) are still early and being [actively discussed](https://www.umbraresearch.xyz/writings/shared-validity-sequencing).
+
+This approach is currently out of scope from this project but could be considered if shared sequencer become a thing.
+
+### Improve Shared Contract
+
+The current architecture introduces a contract that mirrors the relevant settings from each Safe. This is crucial for grouping together verifications from the state root down to the storage root for the users.
+
+A natural question arises: Is there a way to group or sort the user's data to make the system more efficient? We could think about using sharding or implementing a Merkle Mountain Range (MMR).
+
+We might also explore options other than the storage mirror contract. An intriguing idea is to have an inbox contract that stores changes rather than the entire state. This inbox contract could do more than just update storage; it could act as a mechanism for executing cross-chain actions. Even more, if we can prove certain constraints using advanced storage proofs (like Lagrange’s), we might enable cross-chain intents.
+
+All of this sounds amazing, but it comes with a high degree of complexity. A major challenge is figuring out how to efficiently keep track of update executions. This means that the inbox contract on the Home Chain needs a way to tell the difference between different chains, which isn't easy to do in a way that can scale with the network.
+
+## Takeaways and improvements for the Module
+
+
+
+In the above sections, we explored different cross-chain verification processes. We will now summarize the advantages and status of each for potential integration into the Liveness module.
+
+- State root availability: the Liveness module requires the Home chain state root to fully verify. This is another **strong argument for selecting Ethereum as the Home chain**, as most protocols working on this problem attest to the Ethereum state only.
+
+The only solution currently working and has a relatively low cost is Succint (300k gas average per update). Succint only bridges the state root to [Optimism](https://optimistic.etherscan.io/tx/0x107b36c2418ee56c46f1d380c370fb4f1a6ae40eade18072577d418e8ab60011), Arbitrum, Polygon, Gnosis, BSC and Avalanche. At the moment, their [operators](https://docs.telepathy.xyz/telepathy-protocol/actors) charge no fee for the update, but an on-demand integration would probably require some kind of incentive.
+
+An alternative way of addressing this issue is using a bridge, which usually costs around 200k for these message passing. [Connext](https://bridge.connext.network/) has the upper hand regarding message security among the top candidates, as they implement Merkle verification methods on top of AMBs, instead of signature aggregations like the vast majority.
+Using a bridge would also enable a second optimization: bridge the Storage root of the Mirror contract instead of the state root of Ethereum. This would allow users to save money and effort on the first verification.
+
+For the PoC, we will bridge the Storage root. We will do this to focus on the rest of the design and because it can support more chains. We will keep monitoring the status of the newer solutions and integrate them as they become more efficient.
+
+- Improve proof efficiency: One main point we analyzed was the proof cost. We noticed that MPT verifiers are cheaper than existing ZK single-proof implementations. There are two main approaches to reducing verification costs for the latter:
+ - Updatable proofs: as we mentioned, MPT proofs need to be recomputed and rechecked from scratch every time something changes, and it doesn’t matter if it’s just one or one million SAFEs. KZG and Recproofs are two protocols that address this issue. In particular, KZG is more straightforward to implement and probably more efficient for the number of proofs we expect, while Recproofs shines for larger datasets.
+ - Proof batching: some verification methods allow batching of several proofs into one. This is possible with KZG and SNARK using different methods (e.g. folding scheme).
+ Currently, there are no efficient implementations for either approach in the context of storage proofs. It's out of our scope of this work to develop one.
+ These proofs usually have a large cost for single executions and then scale slowly. This means that, for single proofs, MPT verification will stay the most competitive, but there is a number of proofs at which ZK methods become more efficient. For this reason, we will monitor the amount of activity on the PoC to determine if these tools are worth implementing in the future.
+- Optimistic layer: One easy way to reduce verification costs with only a small trust increase is using optimistic oracles. The idea here is to trust a bonded proposer with the correct updated information and then let anyone (bonded agent) dispute the answer. In a dispute, conflict resolution involves running the complete verification. In that case, the gas cost of verification would be deducted from the losing side’s bond.
+
+The optimistic layer would allow the exchange of two MPT verifications, which are close to 200K gas each, for a request and update, which will be cheaper. Moreover, optimistic systems can update several users simultaneously, with practically the same gas cost.
+
+A negative factor introduced by optimistic layers is latency, as a safe system requires time for disputers to act. Latency could be a problem for the module in the case of heavy activity, which may not be the case at the beginning. What’s more, lowering the gas cost of the process can bootstrap users in the same way liquidity incentives do. We could expect a first optimization to use optimistic layers and eventually move to more advanced KZG/SNARK systems (lower latency) with aggregation when the number of users justifies the total cost.
+
+There are currently no optimistic oracles that enable custom resolution methods. We at Wonderland are actively developing Prophet together with Optimism, which will be a framework that enables this use case. Information on the gas cost will be available soon.
+
+It’s also possible to create a custom dispute system for this particular project, which could be more gas-efficient. The issue with that would be to bootstrap activity from bonded actors. That’s why Prophet could be a better fit, even if it means using a bit more gas.
+
+For the PoC, we expect to work on sidechains only, meaning the total gas cost of MPT verification will not be prohibitive. Similarly to the zk-methods, an optimistic layer would make much more sense for verifying in Ethereum (Home Chains different than mainnet). Implementing said layer would be a manageable experiment for a future Home chain generalization at this point.
+
+- Incentives design: It’s easy to see that the cost of updating is directly correlated with the frequency of updates. The more updates are requested, the less gas each user should be paying, and the more users pay for updates, the faster these will get executed.
+
+As long as the state root is not organically available, the module (users) should also pay for this action and the shared storage root verification. The variable to tune here from our end is the amount of reward that goes to the state root update (and shared storage root verification) relative to the individual verification. The ratio should be closer to 1 (half reward for each action) when there is only a single request and asymptotically to 0 (almost everything to the individual request) as many users update.
+
+For the PoC, there will be no fixed cost. We envision this to work like a gas-market, i.e. with its own off-chain dynamic.
+
+- Potential ecosystem optimization: beyond improving verification methods, the ecosystem is currently discussing several architecture changes that might simplify the • problem’s scope.
+ - Rollups might make the Ethereum state root available: many protocols will be interested in having state root availability for different applications, so it should not be surprising to see rollups or AMBs making this value globally available. This would allow us to reduce the costs further (or increase the frequency), as payments could be batched with different services.
+ - Rollups might enable direct reading eventually, which would simplify the whole verification. Direct reading would be an enormous factor in favour of keeping Ethereum as the Home Chain, but would still require dedicated solutions for non-L2 chains.
+ - Shared sequencing or data availability layers can act as a way of sharing Home chain verification among several chains, reducing the cost for each even further.
+ - If implemented, Verkle tree structures will completely change (for the better) the whole verification algorithm. The module, together with many other products using storage proofs, would require a major update.
+ We should stay attentive and push for these developments to optimize the Liveness module further.
+- Improved Shared Contract: We have explored various potential improvements to the module regarding both proof efficiency (sharding or MMR) and features (inbox contract, with cross-chain execution and even intents).
+ While these modifications introduce a considerable level of complexity, we are confident that addressing these challenges is a worthwhile endeavor. We plan to continue generating ideas and discussing these topics further once we have finalized the initial proof of concept.
+
+
diff --git a/src/data/blog.json b/src/data/blog.json
index 59526999..63c27a3e 100644
--- a/src/data/blog.json
+++ b/src/data/blog.json
@@ -1,4 +1,12 @@
[
+ {
+ "id": "liveness-2-and-beyond",
+ "name": "Liveness 2 and beyond",
+ "description": "The current status of on-chain storage proofs",
+ "date": "11/17/23",
+ "tags": ["Cryptography", "Verification", "Cross-chain"],
+ "image": "https://defi-wonderland.notion.site/image/https%3A%2F%2Fprod-files-secure.s3.us-west-2.amazonaws.com%2F7683bccd-1174-4689-a817-b27fd9d7ef00%2F8e9b1568-aea1-478f-af39-74c39502a79d%2FDALLE_2023-11-01_15.45.54_-_Create_an_epic_and_dark_illustration_featuring_Alice_from_Alice_in_Wonderland_actively_engaged_in_the_process_of_synchronizing_two_different_worlds._.png?table=block&id=79955f2a-d4eb-49c6-b7fe-8b729f841958&spaceId=7683bccd-1174-4689-a817-b27fd9d7ef00&width=2000&userId=&cache=v2"
+ },
{
"id": "a-mev-racing-story",
"name": "A (MEV) racing story",
diff --git a/src/pages/Creations/ProjectsList/index.tsx b/src/pages/Creations/ProjectsList/index.tsx
index 380c86a0..8d56b9fd 100644
--- a/src/pages/Creations/ProjectsList/index.tsx
+++ b/src/pages/Creations/ProjectsList/index.tsx
@@ -54,11 +54,7 @@ export function ProjectsList({ projects }: ProjectListProps) {
{projects.map((project) => (
- {
- handleClick(project, e.currentTarget);
- }}
- >
+ ) => handleClick(project, e.currentTarget)}>
{project.name}
diff --git a/src/pages/Insights/Insights.styles.tsx b/src/pages/Insights/Insights.styles.tsx
index 9efe64f0..9194a830 100644
--- a/src/pages/Insights/Insights.styles.tsx
+++ b/src/pages/Insights/Insights.styles.tsx
@@ -57,6 +57,10 @@ export const BlogsContainer = styled.div`
@media screen and (max-width: ${MOBILE_MAX_WIDTH}) {
justify-content: center;
width: 100%;
+
+ & img {
+ max-height: 27rem;
+ }
}
`;
@@ -159,10 +163,9 @@ export const DescriptionContainer = styled.div`
}
`;
-export const TagsContainer = styled.div`
+export const BlogFooter = styled.div`
padding-top: 1.5rem;
color: white;
- /* border-top: 1px solid rgba(255, 255, 255, 0.1); */
width: 100%;
display: flex;
justify-content: space-between;
@@ -171,6 +174,7 @@ export const TagsContainer = styled.div`
@media screen and (max-width: ${MOBILE_MAX_WIDTH}) {
padding: 1.6rem 2rem;
+ max-width: 95vw;
& div strong {
font-size: 1.8rem;
@@ -178,17 +182,25 @@ export const TagsContainer = styled.div`
}
`;
-export const Date = styled.div``;
+export const Date = styled.div`
+ max-width: 30%;
+`;
-export const Tags = styled.div`
+export const TagsContainer = styled.div`
display: flex;
- justify-content: end;
+ flex-direction: row;
+ overflow-x: auto;
+ overflow-y: hidden;
+`;
+
+export const Tag = styled.div`
+ display: flex;
+ justify-content: flex-end;
& strong {
width: max-content;
text-transform: capitalize;
margin: 0 1rem;
-
font-size: 2.2rem;
}
`;
diff --git a/src/pages/Insights/Insights.tsx b/src/pages/Insights/Insights.tsx
index 2b2a5234..cc8d9855 100644
--- a/src/pages/Insights/Insights.tsx
+++ b/src/pages/Insights/Insights.tsx
@@ -5,7 +5,7 @@ import {
PageContainer,
Title,
BgContainer,
- TagsContainer,
+ BlogFooter,
DescriptionContainer,
DetailsContainer,
BlogPost,
@@ -13,8 +13,9 @@ import {
BackgroundImage,
BlogsContainer,
Image,
- Tags,
+ Tag,
TitleContainer as PostTitle,
+ TagsContainer,
} from './Insights.styles';
import VIDEO_CHROME from '~/assets/videos/insights.webm';
import VIDEO_SAFARI from '~/assets/videos/insights.mp4';
@@ -77,16 +78,18 @@ export function Insights() {
{post.description}
-
+
{post.date}
- {post.tags.map((tag) => (
-
- {tag}
-
- ))}
-
+
+ {post.tags.map((tag) => (
+
+ {tag}
+
+ ))}
+
+
))}
diff --git a/src/pages/Insights/Posts/Posts.styles.tsx b/src/pages/Insights/Posts/Posts.styles.tsx
index a9f51597..9b35b385 100644
--- a/src/pages/Insights/Posts/Posts.styles.tsx
+++ b/src/pages/Insights/Posts/Posts.styles.tsx
@@ -55,6 +55,7 @@ export const Content = styled.div`
display: flex;
justify-content: center;
align-items: center;
+ padding: 0 3rem;
}
.ytplayer {
@@ -136,6 +137,7 @@ export const Content = styled.div`
font-weight: 375;
border-bottom: 1px solid rgba(255, 255, 255, 0.87);
transition: all 200ms linear;
+ cursor: pointer;
}
blockquote {
@@ -163,7 +165,6 @@ export const Content = styled.div`
font-size: 3rem;
}
- p,
h1,
h2,
h3,
@@ -190,15 +191,33 @@ export const Content = styled.div`
width: 350px;
transform: scale(0.9);
overflow-y: hidden;
- overflow-x: scroll;
+ overflow-x: auto;
}
- .math {
- display: block;
- width: 90vw;
+ .math .math-inline {
+ max-width: 80vw;
height: 100%;
+ width: 100%;
overflow-y: hidden;
- overflow-x: scroll;
+ overflow-x: auto;
+ }
+
+ p {
+ max-width: 100vw;
+ padding: 0 1.8rem;
+ }
+
+ li {
+ max-width: 90vw;
+ }
+
+ mrow {
+ max-width: 90vw;
+ overflow-x: auto;
+ }
+
+ aside {
+ padding: 0 2.2rem;
}
}
`;
diff --git a/yarn.lock b/yarn.lock
index 86655ca4..0a19fdd5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -96,7 +96,7 @@
dependencies:
"@babel/types" "^7.22.5"
-"@babel/helper-module-imports@^7.0.0", "@babel/helper-module-imports@^7.22.5":
+"@babel/helper-module-imports@^7.22.5":
version "7.22.5"
resolved "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.22.5.tgz#1a8f4c9f4027d23f520bd76b364d44434a72660c"
integrity sha512-8Dl6+HD/cKifutF5qGd/8ZJi84QeAKh+CEe1sBzz8UayBBGg1dAIJrdHOcOM5b2MpzWL2yuotJTtGjETq0qjXg==
@@ -237,7 +237,7 @@
"@babel/parser" "^7.22.5"
"@babel/types" "^7.22.5"
-"@babel/traverse@^7.22.5", "@babel/traverse@^7.4.5":
+"@babel/traverse@^7.22.5":
version "7.22.5"
resolved "https://registry.npmjs.org/@babel/traverse/-/traverse-7.22.5.tgz#44bd276690db6f4940fdb84e1cb4abd2f729ccd1"
integrity sha512-7DuIjPgERaNo6r+PZwItpjCZEa5vyw4eJGufeLxrPdBXBoLcCJCIasvK6pK/9DVNrLZTLFhUGqaC6X/PA007TQ==
@@ -267,7 +267,7 @@
resolved "https://registry.npmjs.org/@cush/relative/-/relative-1.0.0.tgz#8cd1769bf9bde3bb27dac356b1bc94af40f6cc16"
integrity sha512-RpfLEtTlyIxeNPGKcokS+p3BZII/Q3bYxryFRglh5H3A3T8q9fsLYm72VYAMEOOIBLEa8o93kFLiBDUWKrwXZA==
-"@emotion/is-prop-valid@^1.1.0":
+"@emotion/is-prop-valid@^1.2.1":
version "1.2.1"
resolved "https://registry.npmjs.org/@emotion/is-prop-valid/-/is-prop-valid-1.2.1.tgz#23116cf1ed18bfeac910ec6436561ecb1a3885cc"
integrity sha512-61Mf7Ufx4aDxx1xlDeOm8aFFigGHE4z+0sKCa+IHCeZKiyP9RLD0Mmx7m8b9/Cf37f7NAvQOOJAbQQGVr5uERw==
@@ -279,15 +279,10 @@
resolved "https://registry.npmjs.org/@emotion/memoize/-/memoize-0.8.1.tgz#c1ddb040429c6d21d38cc945fe75c818cfb68e17"
integrity sha512-W2P2c/VRW1/1tLox0mVUalvnWXxavmv/Oum2aPsRcoDJuob75FC3Y8FbpfLwUegRcxINtGUMPq0tFCvYNTBXNA==
-"@emotion/stylis@^0.8.4":
- version "0.8.5"
- resolved "https://registry.npmjs.org/@emotion/stylis/-/stylis-0.8.5.tgz#deacb389bd6ee77d1e7fcaccce9e16c5c7e78e04"
- integrity sha512-h6KtPihKFn3T9fuIrwvXXUOwlx3rfUvfZIcP5a6rh8Y7zjE3O06hT5Ss4S/YI1AYhuZ1kjaE/5EaOOI2NqSylQ==
-
-"@emotion/unitless@^0.7.4":
- version "0.7.5"
- resolved "https://registry.npmjs.org/@emotion/unitless/-/unitless-0.7.5.tgz#77211291c1900a700b8a78cfafda3160d76949ed"
- integrity sha512-OWORNpfjMsSSUBVrRBVGECkhWcULOAJz9ZW8uK9qgxD+87M7jHRcvh/A96XXNhXTLmKcoYSQtBEX7lHMO7YRwg==
+"@emotion/unitless@^0.8.0":
+ version "0.8.1"
+ resolved "https://registry.npmjs.org/@emotion/unitless/-/unitless-0.8.1.tgz#182b5a4704ef8ad91bde93f7a860a88fd92c79a3"
+ integrity sha512-KOEGMu6dmJZtpadb476IsZBclKvILjopjUii3V+7MnXIQCYh8W3NgNcgwo21n9LXZX6EDIKvqfjYxXebDwxKmQ==
"@esbuild/linux-loong64@0.14.54":
version "0.14.54"
@@ -533,6 +528,11 @@
"@types/react" "*"
csstype "^3.0.2"
+"@types/stylis@^4.0.2":
+ version "4.2.3"
+ resolved "https://registry.npmjs.org/@types/stylis/-/stylis-4.2.3.tgz#0dff504fc23487a02a29209b162249070e83a0da"
+ integrity sha512-86XLCVEmWagiUEbr2AjSbeY4qHN9jMm3pgM3PuBYfLIbT0MpDSnA3GA/4W7KoH/C/eeK77kNaeIxZzjhKYIBgw==
+
"@types/unist@*", "@types/unist@^2.0.0":
version "2.0.6"
resolved "https://registry.npmjs.org/@types/unist/-/unist-2.0.6.tgz#250a7b16c3b91f672a24552ec64678eeb1d3a08d"
@@ -766,17 +766,6 @@ axobject-query@^2.2.0:
resolved "https://registry.npmjs.org/axobject-query/-/axobject-query-2.2.0.tgz#943d47e10c0b704aa42275e20edf3722648989be"
integrity sha512-Td525n+iPOOyUQIeBfcASuG6uJsDOITl7Mds5gFyerkWiX7qhUTdYUBlSgNMyVqtSJqwpt1kXGLdUt6SykLMRA==
-"babel-plugin-styled-components@>= 1.12.0":
- version "2.1.4"
- resolved "https://registry.npmjs.org/babel-plugin-styled-components/-/babel-plugin-styled-components-2.1.4.tgz#9a1f37c7f32ef927b4b008b529feb4a2c82b1092"
- integrity sha512-Xgp9g+A/cG47sUyRwwYxGM4bR/jDRg5N6it/8+HxCnbT5XNKSKDT9xm4oag/osgqjC2It/vH0yXsomOG6k558g==
- dependencies:
- "@babel/helper-annotate-as-pure" "^7.22.5"
- "@babel/helper-module-imports" "^7.22.5"
- "@babel/plugin-syntax-jsx" "^7.22.5"
- lodash "^4.17.21"
- picomatch "^2.3.1"
-
bail@^2.0.0:
version "2.0.2"
resolved "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz#d26f5cd8fe5d6f832a31517b9f7c356040ba6d5d"
@@ -935,7 +924,7 @@ css-color-keywords@^1.0.0:
resolved "https://registry.npmjs.org/css-color-keywords/-/css-color-keywords-1.0.0.tgz#fea2616dc676b2962686b3af8dbdbe180b244e05"
integrity sha512-FyyrDHZKEjXDpNJYvVsV960FiqQyXc/LlYmsxl2BcdMb2WPx0OGRVgTg55rPSyLSNMqP52R9r8geSp7apN3Ofg==
-css-to-react-native@^3.0.0:
+css-to-react-native@^3.2.0:
version "3.2.0"
resolved "https://registry.npmjs.org/css-to-react-native/-/css-to-react-native-3.2.0.tgz#cdd8099f71024e149e4f6fe17a7d46ecd55f1e32"
integrity sha512-e8RKaLXMOFii+02mOlqwjbD00KSEKqblnpO9e++1aXS1fPQOpS1YoqdVHBqPjHNoxeF2mimzVqawm2KCbEdtHQ==
@@ -944,7 +933,7 @@ css-to-react-native@^3.0.0:
css-color-keywords "^1.0.0"
postcss-value-parser "^4.0.2"
-csstype@^3.0.2:
+csstype@^3.0.2, csstype@^3.1.2:
version "3.1.2"
resolved "https://registry.npmjs.org/csstype/-/csstype-3.1.2.tgz#1d4bf9d572f11c14031f0436e1c10bc1f571f50b"
integrity sha512-I7K1Uu0MBPzaFKg4nI5Q7Vs2t+3gWWW648spaF+Rg7pI9ds18Ugn+lvg4SHczUdKlHI5LWBXyqfS8+DufyBsgQ==
@@ -1822,7 +1811,7 @@ hastscript@^7.0.0:
property-information "^6.0.0"
space-separated-tokens "^2.0.0"
-hoist-non-react-statics@^3.0.0, hoist-non-react-statics@^3.3.0:
+hoist-non-react-statics@^3.3.0:
version "3.3.2"
resolved "https://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz#ece0acaf71d62c2969c2ec59feff42a4b1a85b45"
integrity sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==
@@ -2128,11 +2117,6 @@ lodash.merge@^4.6.2:
resolved "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
-lodash@^4.17.21:
- version "4.17.21"
- resolved "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
- integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
-
longest-streak@^3.0.0:
version "3.1.0"
resolved "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz#62fa67cd958742a1574af9f39866364102d90cd4"
@@ -2685,6 +2669,15 @@ postcss@^8.4.14:
picocolors "^1.0.0"
source-map-js "^1.0.2"
+postcss@^8.4.31:
+ version "8.4.31"
+ resolved "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz#92b451050a9f914da6755af352bdc0192508656d"
+ integrity sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==
+ dependencies:
+ nanoid "^3.3.6"
+ picocolors "^1.0.0"
+ source-map-js "^1.0.2"
+
prelude-ls@^1.2.1:
version "1.2.1"
resolved "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz#debc6489d7a6e6b0e7611888cec880337d316396"
@@ -3113,21 +3106,25 @@ style-to-object@^0.4.0:
dependencies:
inline-style-parser "0.1.1"
-styled-components@5.3.5:
- version "5.3.5"
- resolved "https://registry.npmjs.org/styled-components/-/styled-components-5.3.5.tgz#a750a398d01f1ca73af16a241dec3da6deae5ec4"
- integrity sha512-ndETJ9RKaaL6q41B69WudeqLzOpY1A/ET/glXkNZ2T7dPjPqpPCXXQjDFYZWwNnE5co0wX+gTCqx9mfxTmSIPg==
- dependencies:
- "@babel/helper-module-imports" "^7.0.0"
- "@babel/traverse" "^7.4.5"
- "@emotion/is-prop-valid" "^1.1.0"
- "@emotion/stylis" "^0.8.4"
- "@emotion/unitless" "^0.7.4"
- babel-plugin-styled-components ">= 1.12.0"
- css-to-react-native "^3.0.0"
- hoist-non-react-statics "^3.0.0"
+styled-components@6.1.1:
+ version "6.1.1"
+ resolved "https://registry.npmjs.org/styled-components/-/styled-components-6.1.1.tgz#a5414ada07fb1c17b96a26a05369daa4e2ad55e5"
+ integrity sha512-cpZZP5RrKRIClBW5Eby4JM1wElLVP4NQrJbJ0h10TidTyJf4SIIwa3zLXOoPb4gJi8MsJ8mjq5mu2IrEhZIAcQ==
+ dependencies:
+ "@emotion/is-prop-valid" "^1.2.1"
+ "@emotion/unitless" "^0.8.0"
+ "@types/stylis" "^4.0.2"
+ css-to-react-native "^3.2.0"
+ csstype "^3.1.2"
+ postcss "^8.4.31"
shallowequal "^1.1.0"
- supports-color "^5.5.0"
+ stylis "^4.3.0"
+ tslib "^2.5.0"
+
+stylis@^4.3.0:
+ version "4.3.0"
+ resolved "https://registry.npmjs.org/stylis/-/stylis-4.3.0.tgz#abe305a669fc3d8777e10eefcfc73ad861c5588c"
+ integrity sha512-E87pIogpwUsUwXw7dNyU4QDjdgVMy52m+XEOPEKUn161cCzWjjhPSQhByfd1CcNvrOLnXQ6OnnZDwnJrz/Z4YQ==
sucrase@^3.20.3:
version "3.32.0"
@@ -3142,7 +3139,7 @@ sucrase@^3.20.3:
pirates "^4.0.1"
ts-interface-checker "^0.1.9"
-supports-color@^5.3.0, supports-color@^5.5.0:
+supports-color@^5.3.0:
version "5.5.0"
resolved "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
integrity sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==
@@ -3231,6 +3228,11 @@ tslib@^1.8.1, tslib@^1.9.3:
resolved "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz#cf2d38bdc34a134bcaf1091c41f6619e2f672d00"
integrity sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==
+tslib@^2.5.0:
+ version "2.6.2"
+ resolved "https://registry.npmjs.org/tslib/-/tslib-2.6.2.tgz#703ac29425e7b37cd6fd456e92404d46d1f3e4ae"
+ integrity sha512-AEYxH93jGFPn/a2iVAwW87VuUIkR1FVUKB77NwMF7nBTDkDrrT/Hpt/IrCJ0QXhW27jTBDcf5ZY7w6RiqTMw2Q==
+
tsutils@^3.21.0:
version "3.21.0"
resolved "https://registry.npmjs.org/tsutils/-/tsutils-3.21.0.tgz#b48717d394cea6c1e096983eed58e9d61715b623"
From db09b648c0c3ce3dc178e0da8fdb7fbabd383566 Mon Sep 17 00:00:00 2001
From: Ardy <116569704+0xArdy@users.noreply.github.com>
Date: Mon, 20 Nov 2023 15:24:50 -0400
Subject: [PATCH 2/6] feat: optimize images for liveness blog post (#58)
---
public/blog-posts/liveness-2-and-beyond.md | 24 +++++++++---------
.../alice-conclusion.jpg | Bin 0 -> 381561 bytes
.../liveness-2-and-beyond/alice-cult.jpg | Bin 0 -> 359635 bytes
.../liveness-2-and-beyond/alice-door.jpg | Bin 0 -> 525717 bytes
.../alice-final-piece.jpg | Bin 0 -> 252811 bytes
.../liveness-2-and-beyond/alice-knight.jpg | Bin 0 -> 310194 bytes
.../liveness-2-and-beyond/alice-lq.jpg | Bin 0 -> 353247 bytes
.../liveness-2-and-beyond/alice-machine.jpg | Bin 0 -> 334053 bytes
.../liveness-2-and-beyond/alice-paper.jpg | Bin 0 -> 303859 bytes
.../liveness-2-and-beyond/alice-repair.jpg | Bin 0 -> 373899 bytes
.../liveness-2-and-beyond/alice-tree.jpg | Bin 0 -> 465090 bytes
.../liveness-2-and-beyond/graph-1.png | Bin 0 -> 81832 bytes
.../liveness-2-and-beyond/table-1.png | Bin 0 -> 114971 bytes
src/data/blog.json | 2 +-
14 files changed, 13 insertions(+), 13 deletions(-)
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-conclusion.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-cult.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-door.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-final-piece.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-knight.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-lq.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-machine.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-paper.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-repair.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/alice-tree.jpg
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/graph-1.png
create mode 100644 public/img/blog-posts/liveness-2-and-beyond/table-1.png
diff --git a/public/blog-posts/liveness-2-and-beyond.md b/public/blog-posts/liveness-2-and-beyond.md
index cf9d441b..3a4bcb37 100644
--- a/public/blog-posts/liveness-2-and-beyond.md
+++ b/public/blog-posts/liveness-2-and-beyond.md
@@ -10,7 +10,7 @@ Let’s first recap the problem we are trying to solve with the Liveness Module.
Unlike EOAs, smart wallets have configuration settings, which can cause synchronization problems across chains. Consequently, SAFEs on different chains function as separate contracts, even though they may share the same address and configuration parameters during deployment. This problem becomes critical when there’s a change in the owners’ list. We must tackle this issue if we want to create a chain-agnostic future.
-
+
Moreover, as web3 moves towards a multichain future, the liveness problem becomes increasingly more noticeable and complex.
@@ -34,7 +34,7 @@ The verification can be done using **Storage Proofs:**
[Storage Proofs](https://www.notion.so/Storage-Proofs-8f5ad324afab4592b7f2882b8cf9a354?pvs=21)
-
+
With the current architecture, each wallet contract has to do a separate proof for step 1, as storage root varies from safe to safe. We can, however, modify the contract architecture to make users share this verification step using a Shared Contract root.
@@ -58,7 +58,7 @@ However, we expect to enable users to set their own Home Chain eventually. This
## The EVM as the verifier
-
+
Ethereum is a transparent and decentralized VM. As such, it is the ideal platform to act as a trustless verifier. If Ethereum is convinced, so should we. But what does it mean for Ethereum to be a verifier? Verification in a protocol is a series of deterministic steps conducted on a series of inputs. In particular, we can write a verification program in the bytecode of a Smart Contract.
@@ -77,7 +77,7 @@ To execute the whole verification, we need a reliable way to read the state root
One basic method to prove the consensus of chain A in the execution layer of chain B is to run an on-chain Light Client of A in B. This is, of course, extremely expensive to run. To gain some intuition on why, consider that Ethereum consensus uses BLS signatures on a BLS12-381 curve, which are not included as a precompile in EVMs. Even if the Light Client verified the signatures of the [sync committee](https://github.com/ethereum/annotated-spec/blob/master/altair/sync-protocol.md#introduction) only, it is still prohibitory costly. Here is where zk comes into play.
-
+
[Succint](https://www.succinct.xyz/) developed a [contract](https://etherscan.io/address/0xaa1383ee33c81ef2274419dd5e0ea5cce4baf6cc#code) that verifies a zk-proof of consensus, where anyone can post a zkSNARK attesting that the sync committee has signed a block header. Their design also requires keeping track of the current sync committee, which is also done via a zkSNARK. The protocol is deployed on Ethereum and other chains, but the light client updates is operating [frequently only in Goerli](https://explorer.telepathy.xyz/). Each update in Ethereum costs [300k in gas](https://etherscan.io/tx/0x6d608c89eb97b249f40fc1db4306fe0b5af4d0dec3e1db1b8872b3ddf8c5af75). They enable light client proofs of Ethereum and Gnosis to Ethereum, Gnosis, Arbitrum, Avalanche, Binance, Optimism and Polygon (look [here](https://docs.telepathy.xyz/resources/contract-addresses) for the addresses).
@@ -115,7 +115,7 @@ As we mentioned, our goal is to prove the value of a certain storage value from
During the last few years, we have seen enormous technical advances in optimizing verification processes. The field of zk proofs has gained a lot of traction, in a big part due to their brief verification step. These proofs outsource the heavy computation to the prover to make verification as simple as possible.
-
+
This *succinctness* is particularly appealing when dealing with the EVM, as computation requires gas. In what follows, we will describe some possible approaches to dealing with storage proofs in this context.
@@ -129,7 +129,7 @@ In [this blog post](https://vitalik.eth.limo/general/2023/06/20/deeperdive.html)
Both zkSNARKs and KZG allow for proof aggregation, further reducing user costs.
-
+
In what follows, we will focus on the existing approaches to tackle this verification step. Even though storage proofs (with or without zk) are the most secure method, we will also consider other options in our analysis. For each, we will analyze the tradeoffs, possibilities, costs and state of development.
@@ -145,7 +145,7 @@ From the existing protocols we mentioned, [Relic](https://docs.relicprotocol.co
We will take this approach for the PoC, as it’s the most straightforward and battle-tested solution.
-
+
### **General purpose zkProofs:** **zkSNARKs**
@@ -171,7 +171,7 @@ At the time of writing, they have deployed their contracts on mainnet only. A po
Also, note that the current implementation consumes above [500k gas per query answer](https://etherscan.io/address/0xd617ab7f787adf64c2b5b920c251ea10cd35a952), even more than the current MPT implementations. Axiom has, of course, a lot of additional benefits, such as allowing queries to go back in time.
-.](https://defi-wonderland.notion.site/image/https%3A%2F%2Fprod-files-secure.s3.us-west-2.amazonaws.com%2F7683bccd-1174-4689-a817-b27fd9d7ef00%2Fd4de05fd-0589-437d-a1a9-683aa8cc742a%2FUntitled.png?table=block&id=19f3eb78-d327-4b44-abb1-6e7722ce4759&spaceId=7683bccd-1174-4689-a817-b27fd9d7ef00&width=770&userId=&cache=v2)
+.](img/blog-posts/liveness-2-and-beyond/table-1.png)
Gas comparison for different proofs. Image taken from [Relic’s documentation](https://docs.relicprotocol.com/overview/comparison).
@@ -201,7 +201,7 @@ Lagrange is yet to be operating, so we still have yet to determine what the gas
KZG allow the construction of efficiently updatable storage proofs.
-
+
Dankrad does a great job of summarizing KZG in [this post](https://dankradfeist.de/ethereum/2020/06/16/kate-polynomial-commitments.html). The basic intuition works as follows:
@@ -242,7 +242,7 @@ We will advise against this for now, even though it could reduce enormously cost
## Further Optimizations
-
+
### **Optimistic layer**
@@ -270,7 +270,7 @@ All of this sounds amazing, but it comes with a high degree of complexity. A maj
## Takeaways and improvements for the Module
-
+
In the above sections, we explored different cross-chain verification processes. We will now summarize the advantages and status of each for potential integration into the Liveness module.
@@ -315,4 +315,4 @@ For the PoC, there will be no fixed cost. We envision this to work like a gas-ma
- Improved Shared Contract: We have explored various potential improvements to the module regarding both proof efficiency (sharding or MMR) and features (inbox contract, with cross-chain execution and even intents).
While these modifications introduce a considerable level of complexity, we are confident that addressing these challenges is a worthwhile endeavor. We plan to continue generating ideas and discussing these topics further once we have finalized the initial proof of concept.
-
+
diff --git a/public/img/blog-posts/liveness-2-and-beyond/alice-conclusion.jpg b/public/img/blog-posts/liveness-2-and-beyond/alice-conclusion.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..ffee46bd00402c7c87d71513b6ab6734ef57ce68
GIT binary patch
literal 381561
zcmb4qbx>SEm+#;bB*ER?g1ZD~aCaXhFt|&AK!6Z}%iun^yM^Fx!JQD?3GVPF-`1<$
zfA&?qbL)1W>C@A4`^u4Dzb?LR0NyIf0p$R2Z~y=t>;SxO!Yu-&rOnhe)#QN6vi~I*
z0>B87698~@@^I6Xm!i@)Fr-4+_^*HblUab=UH;|&3&GmGng7>105HS;zts7E6{A^M
zyMtgA{=!Z=H(2Me!Q#PqJlp@`nf~#X|HX^`r
zfAAm|w}17cV0A=3cz&LIICx8pU|GEN@2B0D%
zqaY)pqM)Flp`oH<;9+9Cd4oZWgNuzvPC`jRPC`aTMaRKNMZ-o*M#dz-%*M&Z%gam2
zC?qDxEy}^e%l)qrI5adgj5ioWn3zP|)MV7$|KIf51$c*wl#7&$07nCWe+P%~4(_!N
zHUR(}65PKV@&6Jc96SONG5`e?Ce?ZifQLgsfJcHuL`6VGL;&EzgaE{MNI2A7lE}C;
z8Wyf7c-+DGv{IV!d9~dg(}Ua-2>E2{82Ginh#
zC4mDVzm308KZF2)gLMZF>kSV69Rf8Dm!t+FE)BPZD-xbmFfEU!
zv}Imx{GapJWdH^O9BeuW?*I~jOaEb{!pub66@=Z&CnWPW)h`u3yZfd55tjAQF#=<~
z)t5B&ZJ}=VZH-OI_J!N=A($P*mDsV+kZzAjRDCXjWd~F13GA)3*5P}yR{%+qfg2>|
z6F9O6L@nhFq_tj!*w9w_O`*z3P%HQlP1?I%OY}78Ahk0@t8I1HC!4ziF}BYktsv=#}Ltazb_A9mHd-@>4i=Oj_LQ`M7E_J8{s%g|!g^VwX>(
zTe1z(cT#bLj=pFs$z(i57B#$K(iyTAw7xG#JE3h(*4fp=%FczmvTdY<+6~wl9y*Zv
zkaDQ$ilsbgR9nC$@BIv76IzV}&D}rgYP^ArtqO>%`)tXg`w$;usyLIZa)L8}r}(M{
zaTF-c(^ZBS>!{0SQ|G=%aWTFK+mF-aem7tX=RKMDY3%51
zp9BA63|fm1ijyq)k)w)jUkhPB{(wST%8;wCH1f`uZY!Hbm6WA8mmu_JTy83U*0bPr
zW+>o`$X7$u_IKloK>Y7k3|z|0*QEzg+eX@m8!37GJ~tmeYRcPJK+x@UJ6;1R&7f05
z>cecG?QWv;d?U%wfrtkm$Bcq*aKw3HjK4<}0+naKgdJa>ZRQkb_Y-U9StSS8diq#-
zW_A+1D|}q=iSlJiF5>h{&Bk%peV#>;;BGr|0yo;TxkFF_l!nd1V352YOF`6tQZn%w
z9BX!6%)-h=dOqN0_bCm_tHiOvmr9Ekx|?
z&1K1#keWMoadGgkPwqrBPdtAD=o0rTn{$}%Y4M3qfrK&nOW^>xuBxhjcJ1J~xw%-s>6%d9T
zBtA>YNO#T1kl3UJ6(HJI6>scw|D{z6jQJSJgFxO{=t3;GnH6~q+N_aTIXsZpk8Y;&
zKbMU8IO<;KDb|fwzyHw-@jRHf%%2PIGj`0!?|n-FOoN)3(y@EWS-DEeA2@vwaz^6z
zs&9)e+u>^pd?_Cn+-DwVYOkvX`$1^G84t8%_^bRWSh%iv0}4CWtIV6!f$^Wa3KM_*
z)$MJ>=cmAL`g~5ma$o#nnqR_6ScEcPEvo0b2M$M+C~K4?iM5BG4SWPWOUJ)RfewH(
zE9+U2()TloxWOkTiN_Mbg)7%pD~Z4F(7SONZ{`2;bv?0rO}zrlHB0(I*vPl@j1JcUX3-5V+
z=4^u8l#m<|@0fZ!I(`t5c%NRrzTo^PR(C7kcwE-l$jhqdBhW^BH$^oWhfBhFzdXwv
zWZ+hY=;J4vL88?@{(#Hry2gERvB>2frsK*F=%*$r_X|1MSgaPy^;V~$`4!rt`(K=P
z&EY`Pp_Ai6Ms{UDLjsPpqskH=J+;4o8>xm%;hOZ0v2Ux{ejPMm#CpeFqI2lH^$so;%E|-GsUrk;o
z?w)w8cTkstLsizfPjsYsG^if$-{0KlBhk^cm=r|U(!5z7QaYG
zakGo@tTZka*N|Bz<-?awUPi6su;>y|?)B1|H=m9cJr|?D
zE;&Xi^EVtDiElajTn5q_|0Z6mFOUdk%3!tQI89(ms;})rDCHF}oVz2~om8DO)BM5O
zH1{Sy`((LVKuHF)v`=t(&}qFas1ff(hjfXEt
zk3vmzp8gq**2@yqs{31_iPsgB5yvz&^Hr63h_Yl+W!T0DkqSGS9$z8COb36f4gf_I
zjdYZo=mq<-OGnvQe>=ZoeI+O;KYBxy$ap&SLLKYZo~Zpd>>HPzIAy|%gSklJ*
z5W>DGspFd~NMkAaP7Qm~1)x$?oV}(tsNKh?x5&UBNMp5kWcn#*+fy&*74U*hdagZV
zY_G;UFEv(6CzE@AK5pAS-#hq4FTi4Vp6Y@zNJGtjAn{B3QU622@FO-k*mi@GurriT
z$oUE`QEqm+d|tgH$Bf5KUHJ0l`1@uyKi`P6%%Lk(G)+Y{WYwDn3P;{J*DUS40zO)O
z9dmv^GBI|pIoc>ob5}GKd43uO&b>L9_db
z6R`;n7tjlJQ58fF5)DEh{0sn?TeeS&4xHIyr@IsdtKto5eEhtMkUa-D(yUhgG?S-q
ztj_`zy}@^OA|ch^UUlh<^V2c;VI!|iuD{t(Z`fEA?MyzBBNtTl?G#IgG2jtR=1?7FPx%9w~u@<9UIc&2cAyclBjVL~;4@nJqkv8JtUOxG!X
zDQF<+nh)grhcKXSxvnBW#sN!h9EC26s|h3vJ^oyFo_UJd^Pm(Nx^RXyL>gRq4T8@Xt+Mf+XU-uXTp`#0y
zN!^)B=P$hOB#J6XQ^Y3ng
zi`}|x6QxLKOrLCWX}kF?{@&B8OlzL^MoYpg`dnwGFno-XHj
zXHR;+w!2yiS3(7P^EmRD{@(B0n?egI(Y|f$Ers|rA@^X#cOO=RSU~(|g{;Ilgzuuu
zxC0J?S4156!yR=eAAoVfz-8eeJIza;+V{k&oBS!II)*xPNSHNrQ;K-=3a
zj3nL_igFRD?UzD9+|8_O+29(q$0X(+Vaz5gAhIGFEV21&{^lee-T&RV3iP92RfijB
z`oy}$b(HfD;o%yR>F9=u4UYJ=Yq3$=%k@YtJ|k2Aje(q|2{9z}OQ_2=VKW>(X%1`lksxA_F#MU^?D1US*97$}C(r`QVPq
zQF@tOf?d_X^y4RQ{65QeybmH5g%U^WiF{ozI#FIci3@y-!~-JJTQBD(QP_{KfX>JJ
ze2bQ?iz>kv-ltESabG_4`BW93RITXuvX-s{+M%Zp;NmYp`-xJM`qxK9ViJ>!fwlG{(uQrIMGNf<5#lusnw9h_J?6h{B>
zy1PeUe3%WgCebv#8(H_gpl*`O){6P;QAYXJELyLxE&1;RLyINPF&4^I3H$ad07WM2
zLq)#}-m&YY0t%md=J6*z$HLnO&3VoqE}$w+B7PLTCo{Cdg0<96M4fZ-*RV_E4~Th7
z!L>1_!ay+%-JARA{dhD_UeGj^@hbow$KdC=yXfA{YR*W!lPpC(cN?TFGwpXWJv%*!
z+!#49q%CTuavmJtNyB&DdWTo%@inrE|F5s^ua&^1>*41xlt_qg^xSM>cGP?}4
z1F;gwj(HK<|5iVFv8tbg32}$Gz(65QguFHHt;QvWF@?|@Aje>=3`xG_v4Cw92~LHl
zWNIbdtrSZqQ2}ADii6^zv7TkB23PvA=4Ly7lrZ0@$AO_U235F!w5H6MZhYe887OiR
zrf`9QKB_4jGU{C_CBOuc6MVLq1N?!qrKAMi)@-G(Pi|Zwm987SV}KyEUpqs%tsS;H
z2sL7*oMK@d%&z*quII)mqUc_%k>@$-a8g0C|2G+OhvV_;<#?^t83;*QP;ekbIDug!!>~Q{B&g=kVQ66LznpG+vfKG%?lARiSKU|
zo=RfR{2P6jij`OuR#LaqV=80FG=xSIg|mJHN1X$Ks#MV31V~&YgGl6|qTzsW5;G%F
z6?vJy+yN4DPkjF0y_?plldRc1JV@qo#GeG*L=r6u~>eJ%&Gf}g9m09$jn6oF@vj{RCNjFl=4Ig+Hu+$Vi#pzcU?<>tKBi_bq
z$~)5Kgp&DhcIfqXTD#tT>Crg!O7X9XxRyRKP|Cu(_^mO03vYs&{-J>=
zR;R9JKxxpug?Dxu-=5obwfv(#+$U>4l%L=Ux{aJl3^5c&g{dRIv31&Wq}@s`q15Ql
zHvlXqmS%qwLY?GJSrNO-#IWY9Z*oM>TRIE;GfS%Gtx?d=w#A74v5{9TQ#)?T;YoU$
zQ*vYl3`H7)eCV0)w92ir?cyr<$CsJ6;w5mJ%Ja+88;I;8im^AJHFTLj=VR5gwe_m-6~55q`2t8vBF@39>1K+i
zuuKN{Y%HCblkQR9yGQf$fXrLtGc$V;IDY{SONx?Bz#fx>5rR6F!c;XLo$H#u3;a0&
znP!+f+4XmKe^WP-N}ZA|a;~3)1J(25T4Q4&Bd^-$$|HcDoZewvpyoWVV<
zH|U0WS|+t3i-=FZ?M6HFtZ)OJ_K!7^qM;rR*{=Y_#=koSD{Je_0gK<#3XYdVwe|eW
zm5lqm@esxw+lMowI)X1X|m^j$>y4GgI>88j9;5X-SW`XMQx#!z|4cWp$&@7
zhV;DmTww+gt8Qy|X9lgqUbIze_+-VpRLEpGl`^A=G9wu<57Srj@)&tz1%-Yu=4}c9
zw7ZbZhP7605!{qL7bSqd;;y!$x(v*JL-S^6WAA>h0V1u?6k|7K)spNIpB>>k`?Oi{
zBvCAj$Y}UOVVx+3Mrt)dxR#=)ez|gM+?DqvZZaX$H8#?wRKIj3zsQbwhc#iaRqTL2
zY``ygT!?lN0ryaJ#zqWq=rv!!>rS4N|A56z2EJx0d<9H-qb!}4(${3$&YY;{++AP}Uf?-)1~)!h;~1J5
zDF}y#Y*lZovQ+(+GlJs&{^q`rJZybC&b#z6|Bt$8(?;`M+OXuAx|4~4r^%Ffp>x@C
zjqrRdwZ)xHgn8`C;1?YusYH^HjH(J4bF{g6=?via?
z-sIAK+jOiPI$n$Rkn?gIAyaTwiqa~TRhQ&CHyL!$+=?`te0c>NPXVUIVM{*%OQfRY
zzoc(6-|gXrn(LyDY0lKxu@Xha*a28j)Vz*n6YI@r7bi?NP`z|4yLaZ!3(gX(eaBkrY7#ksTgiYV
z4AY>v6EbBPB+hs-_~Y9wbH;gVQ6jN(t437>NmVEwj)Nf-hUsM*p&IA94`t6Y3Uzgu
zV`<6fGcWgLKYJ1>Zp783!KJd^_IX^)%&sQ-Js6&1VFt>WF>$q5=|@%m^s+@u8Rdn#
zn|#+I6kXbWVUz1;rs{45zj7p}p*Qi$Xrypx~Q+!jQ*z-^yfos~EM}ENy=NU~*9L$S_i)!||0~*A^CKD_w
zEk*HC1B%i7;SN;a$k`2dFBe~s%5R!l+d@Z6l-~ia1_aIi7<6K)@akdE$XfbA_F0wK
z>qan^L%Tat1QDLW*&0hz#0J4Xq!L@GKI?BCNCx@U&ymQrx!tei$P;yyjd^WWV?|8X
z%A-8Y4|aVvYRU`jox-5|WHm1cqN%F9?zYWUvp@%2HW~b61?uB6pITj3StZ`4=Im+c
zkr=w5!4$yAZsCNihMU6WfPHmFiCO~C_jdV_-
z8r|K%h!p>*67sJnqT0e)V1s~K`z&UB~8QQo_Bf`tG>nmVZ
zV!k084&@38TVq^<_N|PA^O-T{LwoQoNIV!^US5_@_=59!^)7rs!Z%SO9{=Z~gZ?W(
zwFhJ^7%aK$Zfa!V&llCBPX_%`fR&$ccmXbbGfvx10R$zgyEu92rEGp!ov{PLjDXY~
z#zt4s8Gk)2u)2fcKesd>xu^Z*VF8^1wZ0kLo)o5ll**yzFn`-mX{&yx)yuzd>mBGh
zHw=d_fm*>2!Ty~$sB-iSUjDg=M)CF+;VS@w{TF{SK}Cg57fs`j17Ms#8|F%6+0P(D
z!Kc&5)~NndYVitqt8O9RVo>`EI3a{7A(}s=f(A`@;1M6ub9NQ~9tD3bv7|6nu+uw7
zS3GR_3Jpj+Bxv)Fq)or@45upQSYtU6b+&-sJ!;HuJ$uk+IEgI87mg16{PN|xC@rnN
z%yZ%|}9c1;QG%@Dqfn2AT;_S;aPV3}Nmw2jzuAhCCRvgYp5eAW`
zEr(sx(0@il1qjBL6CL_}_Se#@q%2+<4)7-bp{Uf31kfCwuFbCu-CxGvt@VP;yYR;J
zVZcpyaI73lYd~gP+rw-IKGo}ba~nRV`FJr=$pqN!z%W$X*%O5YvU>bzkieJ4ir*nZ6)zwm?UPwn`Db-m*QN
zOpfys80cK
z(bz94^$nGQUX6A4Q@N6zTeH^@*iZDxn2a|5C+=zSGg!pYd3QBc3+eMHMNbUB4fh*l
zl~rUEp@+Gb1p>EcMFoaOV1_ChvnzdhCf)bhPn^er9UsN#tSw4XIUw^py@M=7Q<)DY
zL7qPYVhzJzMo$wGLQ_*8+~)$Z9~P7i6B^usf^Fs@P}5FWI4t1cb7Y)W#PFuW+d!~J
zv1voPSbwXGODHfzXi)9Qz*gv^#mVf2qQQ^c8CCw0v*zCiYSDDxIPi;rh1ORP
zQ60?ndK@{+rs$#{D0cB`c&=Mj!J?V%G_y7y{mHeXluGCEiOO@t9*#I7oKPTBUsQ3X
zzxKRBx^>>Hr+_$k8*1*RVmndHP*94%!h2ER8%FrIq$;eASIhn;q-Vt=a#S?l76bOy
zagP$}e!(w34_h8Do6xjP;zYm*Lb(TXD5wj#DNIfm#%Bpaf(xHa+|{?DW}|aP@rkQ!
zJgUOuO=2tAJ<&0vy9$>v*t
z!4nn;uiVHwr{BLkwFCs#->N@ics}SVnI}TcMQz{Ccr2cixkz&(HASncB?s^N-1szImn_D79zQi$TuWYhSXehcAq?t3AdB=$
z@C)*@K$jpSK2bA3m8?%A+Q7EAdj@Wt1|IusaQ-5tL$XMB`0Sf%iXy2tT0?jGFat6k
z$?E2Xf9K&PRo3w^!%kQcp5@0ygK%PuYNQ-%kHK2U0Ahu_X~9bRJ4uomUEIh`>T4}g
zh7zNS>2a*|7ATnagnmP4%f?``Fs(Yp^he__@a91qo2DU3-NL<#A@5`yi1XD2g;EPR
z2r4DG!Di#1>l!usWHKI-3)C+7Dn1>@(_uC>Fyqo
zr7V=SX77tPrEy|T{bng#)_4vET`5_Rvg@Km3~3Nk?>>kIM?WDaL4h&@e+yP5Eo
z=R7Qewk^*8QgU{v8G1YDq7$<#L43&E^wI5YE@#pToysh>t3npWmbLcHnKN^Y9dIzTXB(A=v-4IMEZ#C!@@J5g{7NGq
zIy_Xz^xkF(K{GM-o1RBao^1%#<(y{bx>W6l1)8M3%LLRfH;ov7!Sir9qbduscI-|J4v)oLS>acJk_s)DazAY!Qr
ziySYf!Uv)2>^-0x)=gDRgTq@gE!W{XCY=lEb`(C!Ek4#h2*??k2dz6z=)WB5h{I4r
z=@;kKXI8CF2xK&m@9o1wX_YL7>DFjVnZaeS@hT~OpuuW@V(4j3*Tw}xGR`U&*6NL0
z!J`oJZC>5*FIOSBu~Lu+b=~b0ujf6`(>Tp@>e;nqBI7II`_l7DR1iyvnEfFr2W!MX
zU>kc!dyK1@FK-)n4()zHb1NpPQ4wdrU*qlP+7v!4p}`KL17YxCTVqkiTe?vy6!Ncr
zz&7b_BlfeU2Iu<4Jc^8HP2>3A=C6R|+AaX6Fcz!Qmj7JGIWJ`X{;@LhyU*azli5Ul
zAy+>KUpXmlv$X%T|87>KqAS+md<#ap>Fl;v=JcqvyhF>32jkBMa6-4GTA%;ie5{29
zt1x>j%lA>C2^A5!uB)w5l`~LZ&t<0e
zB&IG57Z%L?Z$Afr+YG75DoYgwysceSftQ&A&C&8eNb`yev=C;p(9xAa$-A0&yi%
z$lHEDn?Cql*qpZc*nD3q|DIVxFD5=xdt;-?P717o7>y284
ze34J`W?IjnE3vBo{OCgnGV(bwgLU^1A0S35EF__zbP)gWh5nIi*2(jpQbpU}Aj7To
zIrDK&;JZh;Gy49wLbg)&m8|Lb#rbfV16oCKHBsK>pdFRFs!*9Z9~=#eQvOqvgw+?F
zjCQJZRe7rRAVUX2ZlmpivG#B@Qx+OGJ8io~qedwkSZqBLK2l2oNdjd#ISk`ONwo`F
zX^{sQ=V1PDQ+jfe?Ti0TiH8gz^2;eCIZo5E14ZkRW4<8=6Vvnrq(6jIuy&{pMx(QE
zL!z@O{5663cC#I?ads2g&e%*U0BUw*I(pOh`-S~3K;mBLMe2vQVpm7RqoBk@hxZ9Y
zeOd2ooa@UW_60shP8%yl{HEjVjD)biC*Pb0FhW?n<`odZBK%2}Hjaz99~mzI&Z5ZV
z_jAM#f+?r?-!6z-QJ#}Krf5FVWGAE`76rjue1F%iEH_6X2Z9@gN*%9=0ueb0mhpN5
zOW-h{s4KWOLrPO~T1SSUEg?x44F*@4`wzSZL~f$0vnDHBJjv^D-c6f-Z4M2VYzRp-
z_nf^|$#PG(ev2JjTCM&_HU*j$)lD1|kas9j%^Fm^xO-S=3J6p9s?iZ0u{vdLQ;?A#
z?@2KBb(x{)A@=)O);DTO%SQk!JAz-g_;tbgNfbn!y)!!aT6|~d#Nf!vHd#lHZ4jVc
zV63!sa+65;GCg7Kfbq8V=EM}mbChdr-;9S_m+??umVdA*J&zM(=6rWY
zV$O#-x(|u{oY%!D-BtNaH`Rd3obVrLB|ahB#p^{{Y#sHM#Yf8TAsUN_+gTtaD`PQ~9mle7s
zU;nStk>RQ;`wmVlB1Sw9*YV8>Jq%%*@}WFTXW4frIrc4$jWLgk3RcRBg1TZX#A6RH
z&Ek~-5o6oQ=s%NhG|u%P!cEDxxJzbIe=ZQUO18XD=gxOrpfR6PXK%*%#v35b$O1%E
z(<~e5Gj}OKE=mayO%0NJzYTs1F}c59Zo0=pVsKHzFy2-r;aiJ(`>ZuNCLIN56t1`;~#2Ywv9N8AZe%!6*C2g&^W>ppmSd$w>^67qQ;FblxAyi%;r<<>38ye}Z
z9m)K1ucJJu2hL;vp3MOAcoYMyNQ4jNzc8yAiLloD}HalG|M$yn{)=NRbrqiqKp
zZ8>jt?<+vYM5T-%VawHHLcm3WV@@=>@PJdHHkSX7uVV+#^-V5)J8Pi=4w<8a2xPf;
zUpReSY&AiaDdq#MsXotV@wDP{IPvOol~3bz6G|R{z^)sLIW^=`h71q-NF9!SJ!f^e
zqZ~hqU7Jq;xtT}e2_ytM>q2%?KkY5RrIcC^GyXBf&bs&Nq1@D?NziRBxhhxon*H$Z
zCE*-I6mzhU`;d=BZjb95!ovsAoRX5U21PH#8PsA(H_QWU*IhDYMEvChs78|>aHQ^V
z4D-<``k(}-!&&cz9_O{4*Wa^zhOf-
zGm77Fv-5*47x!nPpUD2&Qv8gxiJ6<3Q3`Yyi-WwWRJI8Pg&@@SdFA?dlQi+DMq#wU
zKa)p8-mp@L%%HLXpVw7Dh=)oK{r38CVtJF2{YoC??CC9s$o8x_6avz-Sj?2tRRb)c
zDbMp8rwB;E?x!-L+f&jm%$T+P-~1yEzGW6!s&AM!eqBZ^+n_N#1^y~TBbZ}u?`(8~
zNA{oDk{Z$@i#Dv)DsO{Cv9#R=iDt^=O#qU{H&OXHm)RlKOxD@y6ia`W+&VBlxk)K9
zuzR5T5kUvDJ1V38#47&1_t=NHf-x#?m2!C8a1U?rQW>^8sV}rvWg1e>;2Q3+wSE#x
z)V%!8lJ!Ji?SnEKq)?SmHVDU_sp>C9#O1~44{0h4po-b|+~C_mv|>39ylTlaz45KZ
zxf%Y9Fxbi2U5jnQqbZnl;f4Bu!Zn-uVnFztz*CCQ#J^s;Uxk$%i
zN54E1ev&=DubokMXrD(*cksLzB$61ZqrjVqsoW%0GRcM3m00>AO-hVZy-Z!BUcV=q
z#KR?KXPYwro{hYYN|{<^C$3dc#2Upm5+>q%WHOy?he|Q`%N-LB>N=l-&{D;#%(-Bb
z6yv99`B`-W9PP=Di&<4zb@HJXb+y~yvl6+bv*5}flinv?ZDB$pH}8qZyxA{*RN(II
zOPi*jBYBCK>ixBt?(X#~U{eC>&$JOlt?>*s2;@R4+M?`9Nk6Q82iVQHRJ(&BFgD|7
zMt1x;PHOR>mtW8fdwO9QNtVB-B
z$Ds90lzwl?bA1}e2N>+bq(un2RfCsb^D!L*LW$e~(oL!k{UqRg`WSmz&D;bKtX5ly
z8Gqj!zjq^fWZW8)N&mB*f0FQ{aUdRk=%d^#;G*h?{M>L7-(Gh%2qpBG&1{5N{EinYB}=|Z3(X!y(gcoa55>H;@?pe!Xo}JHE?Sf_Pu@+A^Ov!bW!XRWE(eUi6e9A+^Cs3u2g?hU(UF5!0tYIO
zrw6q@T?#0-pH>Waz-8p$ajc}3&dGX2il7FFAOXGiGBg{kr$vMM*+tr%l5>YERt?jy&&>T63&s_(tkifRA|=a}_@XJwWQ$$t7{CvJ=iuD!&WUme$zl!~|}N
z*^@fOJ6-3*Tp!l^-1btCW;H1AMie$g5N*dX(Z@>bNPxV$42}pt^00Z0;U1a#@Mb*Q
z>Vo|hC=AwO0eW;f%ntie9wQx=o1`6bn;&W4^_?oduQ}0a2+Xsl4_k%QN7oIwY%Tu6
zpCQTTK6azjaTJBywD{8z$eJQi?yMBRiX+I!E#TUnCwQSvq!?T91lm|JqcrR;-@oPj
z)^vIK7tC(4VIt9e$`|zRcV7=~Qm_zPZ=r8?)@Fc_vI->SvZte`5i_X5^bqss=`Jw#
zK0~m|Hqu!yKR!XJZf1ajKBX`HN3-KWgda$44L{XpH&g#9J-Tf{nI^v!H>tu7=3Os-
z3j-{>(NjZ
ze{Yg9oWgKbrr${WN>xW1hCd=Aed!7r2+FliEkw4yf{z(P-w}RFfWl-X;tMjSO*?52@`bKi^PCz3}
zXZ@eFoIp%!0V?>^iWP&J3_Vb^}&
zn|?+>&#h12oDd}%o9}w~Bc`{lTcGG;{n^-vd)Q&mrgu)fpwSDcG1Ni$K>zhO4Wvim
zE~q=3KYPxABX-Y3rO0%!@irOMPHILjzY{sTf8+MNEmmTCu>!_%Q5z@TtVE~Imv;Y1
zc{ZPboCUYq@3&Lxx^1_NtiVv3WX`t`K9E)NHQ{h7N=kZSM~vuM5I^z9-$%O@m9g3|
z#=m*1gLk@-THe;>OCucK24);f?_wl}4xW6=a`23R4(G-_h@dA%7UB3`d%GQM2DBV8
z7%i)cef2AExw?+^0~x!BC$9<#HsUxq@*-kO2mj`h$j5VD*1N|Mmx1u$1#fETqFN^v
z_m%f7@_6q$Y_8g|GW4p?%Q<8IN=-4QBzDnZ%sc!5u|cn{U_rz4dL=~3_*4D{S;)6dr>TYU)N{oK^T=jEOZLRQy&hQyrZCW;1{+Yoj
z9~$hC#k?BWqKYHh!w@WIHXxR{F3CJ>%J0#)1R^U7I&3`J?tTulYD$*v^5n|ac@Zn;
zDYWM{I;76``Z#Lk{%fJYWOeC~0M+UhK%RtqkoQSH)1mj!aJK2zksj(AKXiQ=HE;R!
zJp{v{D?W{onD_y`<(!UF(ya!Dv_@#jS$D3q*=&c<^aF4Nu-1GYG#ow-#Itl!ERkjM
zALC}bYV@2B`jk^!P&_qFO)#Y*HAIZlMMXcd$s_(E#7WH@jO(IQf*T%3UOb?RR@`2l
zSixiS?b7h|1soOaer{{m(2F
z1s~0F(l5!u+N~-2_48FbMroQV(Er@7uffKDlH^a{W>#l;x0ZKOLA|9>nKgnbJ;Jq={n7v_;`%
z%iYF(V%qJqSm*ljZvKlGw=FHA_OZPnrHUBC$1Ub=Ingf~%tOT|rz++#ALsIz;S
zS9rht5(1NUO^)Ja5R?=~Lwv-_zmzy;0Q;5sL-6)uzV4>-m#+HFbLzCNAy5mgNOc9C
z_#Pf)QWgR+vW;7vqURwunCp#XvAfKaAdYXgl5ZgD+>0zKMQ#aNn>Ha!AT9_4gb7H6z5ENsKd~Jgjg&-cM6b`_msIAw5doDz66N@EdaS2&1f;
zG`i400*er^r1?X3_I;f%{9`3%v6*2z%NhdsJ@IM)<33o8pgjLz%6I0s)E)6V*+bhq
z_?CKAHEl1;5XF&dJk!IriqVV?q5Yn8K|ZOD
z@p7mWFs~B-9L}T6EVa78%BIyF-ZKk*{ZI3uO&S?O{^`u)RhJ6vCKZ)G`tuUFzwORO
zh^&;eHz=5)*9Ed#OGc$D-`n*$BnR$p;$J)ugM=sFBV^|{`dOEo9eAq`jP7;)+0+br
zE2jNv-u{ppzxz#A^dT`hYx$N{XW#a{{?Ubu&SD{6G5(@!^q}OwZEG*dz1cxw%#_4;
zRR@VDv%hk`MJ;G9=yImQ%oAPCv?|!%pbATFL0-NYd;qADz=e=8_eg!&i0|ZKpll3n
zVruvfFVW*`NRzWDMrZC7rdgk6zQEeaQ!3A3Wy{NEjlIdJ6601J1azuqxbAZ*Gj-+2
z+T-FfRnpQ#Igr_j#4^kHs|Fx8LgJUu#Tlq-h@IAVSGk78}LHq>>l@CZ7Qjv72;s*`_7xP
zQz>y25mkvW4tCkvIwv~ney05Q*x>rD@ZV#M;PV+Z>-HVAep9{wniHFY;
z%jMKP&5isN6~@&b(!xl|NgkAVLo;Im1yPqWCLDBYr##9Lj#Bs66wJkW7InAX%l3!a
zbP;X4>vPH%Pb{}(Szv8PuxZDvk%)C7D%yTQu%Qs)bH-oVrp@$lSgaLpTY9~=`vbrW
zzV-Y?(@mK1ZZM)@n%izR=XSbGVFP7PQH=<%Aqk$x_Bs8erC3k1iCbE2K3($YQZr1j
z3QcjDm_Z6zUQt=QpPMJrM(8dNq`p?Ln+)RkphK4pz;`X!=Q-Tm=+kCH>li*})p{RB
zJt+JnBF){ya--rP96Snp6Wyj8y-i#{T;Az}2@xSyw?H?kzEgxLDcx
z;|Vhxh||Y!K*VZ5bW=d+>A-kxTAHb_M#bp(`bq+GxYTT}V6DOd2OC=y(2HA5F&BPmu6tn$gZO0EojM{U+tgeEp_gJSv$=t+Vh
zS`4QnoqCCROBhZc{0Ff`qsEZARX>6z@f!Qy4Ob+XATF)Ar?w=ZaF8K~gwPx%kQG$ogM8ZC6L%DI2nt%9r1=M8wRTaH0Sx)~)(KZ_$NqFFzTLOLQAcWfNvw$4-gR@XkTB~iQUPe6HS$&+ZD@|98>caaR
z6Ts{@v88r;di*zjvNhoobLi!uG_=#8vkv)_W`(j4(erTBeyT&}36W{6{0ilte+RyD
zbXFQI_Mq93B0gg6c7Xa`IKOnK8~T7Hm#c|ZT!n)(AFIN5+fcD!ZgWmyf-@xcL`&Z4wfj(QUv+3lG9QX+&)4ZAvQgI~wy{Yf?Ivr8UX_0EpQi
z0<`}CY2*(VT#!F&6^3T#KK#<*#*(nkehmrIq|(W~7i`v}l36lw@+xa(RG06XF8J&ufv9#4~U+(e%vN-1>KI4qlt3zw1+u6$u)9M;T$7;;0`pa|kfmHmw
z_D16R=+yXAR<_im^DSNDx&*Doxj1OPSKLzdRCukjrOIfM8B+t
z9Wf%GjyLg){!}ixV;pI50m7^;<^adB{g6It*yiChj(Mdxv*)6C$MMg-E^+uyIHkHC
zP2Iv^jgm0O=SaH&Q!8LMKswi~nddYWY@T|Q8&_z_VsS*p2n4K*n-6emv6)FbGqXON
z`&727WSvo;ZhvU@qhO-{08VRb8^I#nwm|GLo;p>Z`$Gm5B85)`A31Wr6`Z|Wcw&#q
zWiF=#jaTr8Wd5K3GzLn^D4Z~dMcRpeUNY{Qr^=GAd
zEsL`58^Af-JLHP=?G8ke7+NFciO_3@j%T91EM>pc9@++vX+t1cJ62ZfN|`2S
zjwcDYfWxu&tp)t^Ez~03PcA^-UghB9+J#%os~ti?G|g_&l2utZay$IdN!VM_TQqkw
zN{;rCrtmzpPC9qRCbOeUXc|WXJg7L%bCFi*a}DehU0hwExKZf@V<+5WfkBCGq_;0B
z?u;%<{vzDbpjn%S7P^^Ygcg+gReO_7xr@qU4hNhMsFTq93ed{-dTbAIY9#yg;GP%J
z3ZG-|RA~(IpDAtp+m}0oXFEsFYKu$BWZ!}ZfW-#j*pa$`IRb$Z{_KHy$2~JwDPgQ8
z@f1qT!F>!|0>V)HPV4Qo|xYRx{k1xG@o=ia5h
znkemsyfQK|#^}iWBOLy9BU|Y^#x!-&q|w>_BxGpTxmP4b*OFNiEc!mm5xp_aB?$3-D&qNs7-7w%G@Iz(GGuw
zHLvD-Xc1JSLi@vkhR@cE({Dt2nqEu3Lb)zGx93oI7TPYUq?trU*TDoF;EIuseYm3a
zUm@<+OMS&%ceY1Eo|Fzr`1q>D+9cI6*~K_97}_ySUJo>*-y)b(vgaq-ov^S6KgWvb
z`3L;Gfk+=Kyz<@tD;RMFNDMmr(NIgg6=RnJzj_(HDhE3ovF%ahf(Sg0hJ#iV=$ch~
zd4%z2j!r7d3zl>jm7px@QZA|pDVg5Z!t`{%KO!Zg{s}$>QP(R>GlaZ^%=}x
zfk#vPDh(@Dw1QiyXGVGD{aPsNAJO$6GqF9DiOxdZoC+J~3S8a&t94b{!J-3S*pQvN8%xcH`Nx^>N-tUUcl*~x79
z0hNe#9@yfv8r0VCN2%(m0gLa};?mwCxOv><7Tebxj@1{Z#H!k}I~Bv~_lUfTH^U0RI4zgZwl{#x{^QV0}6UYaHt)sb?{@O*!b@UwIgV>Lnq1I#c2kOY=ZUgZzOxB~p
zR%F9*Y$}t?PhEC8xZ;+kM|=VgntT){N+WL;}Wn800k%plninyahkOevAC{OX$}B5
z9Zfi8-)jD6*jA%Xv$xPRwAXbg{LTDW+McsN?;rAtoab6aAsgH1MP%@vmM4)BwX3w-
z1WnJ~<2_i9b6G%y0?bQ09I+>oO%Zi9D;Q|abvzGxOmkSmS7M!ytuN(R!!bwL#AJ~Z8Q$Q3Iu8Q09v*{!
zsccBf$C(@G0jbZTkn9^>bdz4V2y&2xg?@wo0D6wjA3o+7K_|?SRQ_g$GPL&+PTaJv
zU-;GEhhbOMp<+0QG^g?z6w>^0iyzA%Cx~Pc_=4=OD<0U#{*j8V930UPC!cXV#AnQr
zpFdNYjIXD#BB_ow6edYrn3Ij@in%SGx$Rco8_^$I*WtBHc@W}BiRct^YN{-4b|a8D
zt&Nkng!~6Sqn)~ztbCX~(R-YK8t3^E@Vu7z@$$^)i?wmA_?CGg0c|aZ-R;2Xfz*$!
zQr9YlP`<Z!(j
zint^ZVW!V}AV^|oWBa1E8h?N;3JI^7AV4_`d8s@TJ>(Hgnti&-D}E$Z1N1c
zzNMZI>eaLTDifP-i$)16JkMT^7$>H
z8k|rMN@sMAe`QBgS@OQT3iLk?sna|Ms%k1W%`yABH?Si#a>|jh$H+H`yl8CLX<7*u
z+I$BalZKT3@im#&yj6Rx*<0IO%Fd8}9Mwe4xVQI2^6>DMXbocDg%{OEl;2JpRyh-@ydR@UgDSa)@Cp5K*lWR8M=dDFuvFPWQWsZ$+70#gqQ%bQ$&I3DiQQX(FYhF6=o{8Z<(3)&t
zqzFx!VTIlM+}DJw6&zOF=i3u751)Mu?BIi<%uQ;N>VT3lx|swj(i
z4AQD7<&Fgg=wz%HVWcX3tI@9h%ylbY49Bav8(3tfIRdbfz++;*)Un8=(9RSGNt%(@
zy)vjw>ReKy7BqR&t`Sk1CslEkBoUEH)wxaVfy?B~Q|!=5FA
z=0k{E(I!2s*0rw%cyGkF-=(6}VufZQoNgS~&aq3hv}+KI8ytzr;Db~J=!wmRauXPNTj6Q(${
zc`m7;>KZKO4MNr6li7z~rB%9``b$^)kJ>NU~0OS7ZMG
z)F0NgziU7KT+Q@f=qr+cxp?-C2Z}lSBd|WsxUUMj{{R)M-h4ze_C08Qq+0NMzs70s
zi!UICy1Kf$Ne@o7x%)MT&GChw!)J=Zp&6~8f;>xM;hWQaac&@O`$KB%YVKd3`JMfH^-}s?fC2XLD~na)=b2!UF!TdJ6Qr7JH><
zl19g2*i^9P6F||m@HAEvj(~aC@{CA>KGvzBDGfJ=*Nf;d9<%T)~-kyPkdkG{d
z%W0va`i7Ew-U@fe3Ywvamli6^^P?nG{Mu{8A0aHKFk|`dePj
zC!8D?IOnZpZfCO+D!~kqaq1YzC*GMcC_a1LB*J%ClXSONTgt0o4Bp)WVwI~
zmP6&bvEg&v3a7c(oY^!=Jfd6hrv#6a-k_Qus&cQMYJY}i#&t&!Vy
zc%~DzwMeV0EPy
zk&?iok~!!&6*A0FF8Iq3asu=;=qHCV2^F_7<10ehsRGAu5tnm98a3Eq;+sd^rQdE*(-Px9mJM@GDfG^qZo5X--$0oee6J9L5d1!L8=Y$V
zPtZ-Yrv51By}U&~{7Y0jA%J_T_s7z*c6YyOLO&)9k&YMuf1OO;2m3+sQB~KqVGXW%
z63hr6`amDnqr?9IsSfAq0C=BXi&T|-HQ~cG>A9Fa)!F5)<^ISx{uOuPZ7g^*!L~YM
zF#E)jw3A@|Cnu-noPJfi@Q;GD9|b_uTY+(VvohXI$pgOJ{t;NcW@YFjmPK@4Ov~=U|$H|Yi-Hi_~RYwTf2CrxRtG-{Y~QL
z@+BknEsm$)b^PkS6}PIf0l#cuGI3uslfGn`&Ea9^hvx!tVd}Y`sFxM#{oxjO(se4L&6-Hr0_kJwvTOd;$2EH_gfVv
zC4REZM*w^E&1A1G=hU@3okHoi&pd_L{QOpn#`>+ilfj^Ac@{c&F|h~JESdE;`O5`mM4-;F5YvRc*BYkQ?@r0fHaZ_&}GkmYFN?k9K{I92MpbowYJ(lhlh0Z
z)HSeJKQLMk@h%(We#-v{OWe71;O{sKY?X99EA_
z-D{+3mubT+K165y$C{&oH%__foYm#)n|}^lKt>wsb2<7iAL&z`+C?Fx*+&{+?Z+e9
zw3>W>anZGF{18LM*KTJ{j`Je9-W8Clu^ry
zo5@UOL!4x0w6ejY*c0Zv-Aj%_ob&ap--2z{Ww>c>5(rg&Z0(NqadofwZ%oR?y7p1~
zy$9z}mAPoNdf9^UB#9;LjT~ND9)h#|4P5KGvTAotDnuev(Fba#HPwweIkL56iFYh9
z$rN(Bq@Rsc@WbYyX$klh%~6`C8YRuMiTR|Zq{T2h6BM}Pkz6UkbI?{YLJqX$2Q-+$
zr^Y#@Y-C#K_Ukq5YS_l%!LOmG)$}g}=~jrANhI<_7;*gbUpiRGW0hEY*Q06ab>qvs
zOI1Iuf-f(Vjw^>Vl9i*o9AhZ&qR&x%s
z64?Cf%*ez24SNsSb^WHN;p_hZ4_-L+OH{{W3!BD6*_;&`-*M24mseCEmS%w$BT
z8?nY~(QdxV^+nbl0f<{}$(XmKFTGXx<5SbE?QOIT9EP>E=1E8VSMF)nOQeOAS7)D*
z@zS^)9Q#tS^%_jo$QSmWCe$pfV6%pHNTHL>K)iar&3A}=O?l!Qv2}Psmtayr>w#1m
z{{XyKQhjl|Db3X!Sdw#H`O;F1(~5OROJ_8aVbN5u6iH%_@m(eVdOFYS*?J
zWwn%13xKQ=R0AV#Od9gPv_A@+7WO-cV<~NPyU|bVlhjwIUrj!Rq(ud~o9p}eyvA~K
z$mfsYRX=H#w^zDen=RHB;}~fB=D4xSrDsE0qru%VP?h+rE8BLrxOm)Ql#oH~K#_x9
zlwG5iai&XWfpZyQkO<_&~U3+wL(SHJr~BFHf={zSakAYu(TdkylcR~<9Fv&dj9~9bzOf-w$ra&UK?@fIQ4#J
zvh68uxv0xjtw)0$qw!Xp%6)!l!KvhvOGCk1Excvm2JnuLXFT((+*~mQ
zN9^&Mz_{m%_V2d&nn`rXk422P=0$j;uc*>slay_SOQI|vWBe+3Mpz1uX!xn%9-w||
zvgi?8J;P0rygl|eHPl>7I_=NN;=FGpo@?Av(Ca^9F{B=+i8m0up0(mqLg>V8;8zwc
zS<;=^?Ee5{&7TZwP?MDr5LFAyu-Q1Ik=agG|D4jFYHET&G`yWNyf`mB@?O#6K
z{{V{L6>q3`w^-C|mfGU_Qv$BliB1V_Bs;w<8U}R)@nA-^8L|VpZB$893N8&0+1W6YnttBbghkD-vsQ
z0=&_eV6fSQ#GT7y+PE^(RCVLovAonv%97h%M=;vc+)jItQO^hNuiblvmuP>i?&aOb07+M7t16HOV)
zf;NCi+3#LOY);Ku(Db#MkIHID$GM&5*dFW~c#z|AhY}Dg%
z!NJ-(n)T7Y1{{
z;AHZCp49PTNfy?Z0@mggF{2pUmM5q+uhVs~w%01nwjP56rFp{KDN+t|oD5a6Ur5&Y
z94jse0|Ke`B5xUQcX}p~mvZDDIP2{}i4mkSz8s!|kiR*q=-59hdG~JAqDFTBupcxY
zP^@91=HgOh7#JAf3;|HhG7E9f>qYL@k7CuxfpFhf>EQOR5r>mJ#bfI~
z{;;J>eGVd44Km{8jzYY$70K<84k{9w_Fg#OqNZI(O)rR{%Z{0Boc$}3OUZCx)8`-N
z5H=6yMk_+Mcag+i&rh+kMmXK&i3rEkR7T?RW!pXE#DDUMKz|`g&MTq5xjxFVr|R-9
z?<7W_=ap9!pQ7(DJj=USvD-Vpr5={B%0F65jol<--2QbihTbq#LY|Y^M>IaczO+<*
z!wO64ar66-wJ6gq&s{=n{n>d@~GCwOm3%A$FOCqt$}d4Q_fEvDUw7oTX6V2D}9nT*Ak_4{V?Q{sN=BQw2i0f
zfq(-1FTVAwfw&<91RsisBQ{Eb*BL#2q3(wKD19!hF=0D-`G
z^ZlykHS~?(V;v1OqB2UL#C;
z`_>^IhD()E>!O2jX-jB`@Qdj>xTBCGXEM0W`6
z>(NO(ik0-Z2dX=%pvn9*pey`()DL5M81o}UoG8xdT%JCLj+nbd#!aY+BxxG2Lb=T#
zh+MAnf?b1d*T5g047!HH`t;}8MaT1}qr}Oyu|+(R4n=L7M}CfoKI>_XyLBtoKPo=X
z_U^_}=A%gv{kV^Br32?2?nYgsrYd!v_JFCinDd6@(#a_*V@6IdM%LfPR@Sx+G#3)Q
zi_shrgY#C={iEqtIwTi5mDTkU>L47!JkzR<3k*3?O->1VHOkCWcF`eu)9;I9bYC7|3E
zJ2{iYHd>x6iuxtk6XhNCyg_9G|B(mIm)jwU*lMT=`cjQ$LB*AciKZiaeyK6Lkh^JZ}rO
z$m0YfAUnGT$9nQzUe#^x2uCmJ1e5PuFA?~nMpaalvmeCSJr^4SyghxklpLv
z%`~8*cz9skn_!XTGUt-qeJb+VpcdiqgvM||?rM%WO!9eQ_HO;7+P2bZ_Zq&7ZE`JR
zOK8_&Fpi{mHRR@(v)02OMZ8`gw$}7oAU63(dYgLcX0Okn0=h&W=
zSK&=Q*1$HmsX(u1Y0Adjd9rq2pPHuBwF{kJRJhbH8+6k#Aa+sMenXGSxzt`se+#y;
zpcP$%lahOyT6QT7b)`y+MVUMljiL^18v>gG~D8dS%>K9A(8Nf_o9K4TNuq?
z5Ik=l-Rf6x+_~;4xT2(F@TE(1n{ue~%C2%x6pl#@qSz&ND#U2I
zgT`cv4>3T=+D38jK*<}#+hj*W{$(To0D1~>Vc^ifGI35=jHd`rJGMGfDm15RoDA|o
z{#C8gtgUoQAJaOCjgd|*tjl_)e{=Cuoctn?kCqXmSXy{zN>35$@T`y0#?bI*f8Hb7
zvHG3;-mj@me|smJaWTs={hxvCDqUw;xz;b*_fVNx`YMmZ8vg2z!i2Q6z0{@=SX)UU
z=vXNrP>NCfq!#5ZA~ID5SpNXliPJQT{c`awZ6T4#=VFgj5AFHZ&cp2H-%PjtE8?w1
zENzzr#N-)VdjZ;_)ckcFwXC{dgzSc$WZss$Co{-8aC?6mSCUe70IYG2Sclghujf*DdIUO(
z%*(nvbu%`5U~&A#R?8%pS29ld-!qvH#(AWQx!WDeqe!*TEYfL<&4CJn@BaWO>qco8
zP~3Qz@3(R~s^yR<$vEH)e+q<;xakQB60=-mBiRS~&`|>%q1B3%^==0ks$y3zM6x=M
z5bqK)T}*EMNi?L7ExNBi%k!YTKc$UVR*ngHf;`JRdm!sj%QH`OWs@$>diP^m4MIQm
zYeA1sUrwWb1h*%=arR%%lRVs?82KLz6jvz~J|fir08HvqPame?L)GZbI3S7s?o>7G>FQ4ow7TS7^4nJ7&JQ!b4N&w(J;X4k?<&Rxkdw!
zDOl(loS%qS5rayn2PdUMNVHjd;jlkXSb{h+FZHdz+Gq#G=rPXJ{?&=_*Z%-_><3@h
zFZHit@mGUmzt{f&OKRGjRyukra?R^(0n)f97Uf9pjFeJr&wZ>Z8dit@0PMs13i30@
zKGo@eX?`WsHI=ir(@U6b6JU|QXn)wRGIqv&%{Dmr1m*aqKkrVeP&o>F1J(lbpXzxJsy?Mjifj1(y(^q|^7QEZC?6qRE(
zlXnHUo@;hU&q78h1_LJ)s!8-agO6iCCyLv6L%IY&7fJD|;wXFGgE$dYb0t%0Ps%rNRf0Ny8eN$5Xk}
zt`=)qnkg5fEkiLou|pHb#dalVi*#u94;$-xjkl3K{H82ms5s4L9=-phrPaAnV*~n+(mh`gY}2&TLj#@HdrW~
z5W@@#^{=yuZa>*wZaAExdUrC8dG@a_EWCMWvV`xa!^5dFiQ{G?OQg`G3hf`
z<6S=H-03Gzo!;gY9)#qsdz@4JM60M@=(Zuu*Lhzs`*%716&HytwQUzwO++&nnqYvY
zNGdv2q=wJK*0+8kyV!0@;vw$DcCJ79QG2K-c6hIk(kT32sfd6H=8!S(Sq3>ZZ>?Uv
z_4L!oa`HK1ezj6plU|N3MCQrZ`+0nuh~xkrtPTxc>z*pqb?+?R&$(g&V~lX92e7Q@
zt|tSfGm37-QfPd$vj7Ps4uF~;B%GS#obyRel?dIOde;M8gGw?^D1hwOQ??pSt?gLU
z#ICNv_B6W>#bXJI>V66T0N$syu%7l&9lS3qp2{;q!$78zjJ>d$#^A$ng(MwR^%N#6
zCuVAn#dUT*pT?gWoSMcJ2LiOd4H@xHo$)BD1y737cqs|-O@PPzK~l*701~iF-+i_Z
z_w7HA_&?gbW%}2&eYT*Aoa(hd~-Rkwn^)Th7kL5owE2xkFQ9s-`##*%K|MRGZJ181t}o*sQVFAx3wZD1dX
zBO@$+O?YpPyc2QZyQh#T`=g)K$TH-?|(_cOIuEINbGCOHQyHMI;NEl
znLOp~p>4_=s5tkgf_$_E`d!_bGr=^O70v1fqawQqwn>tI_N3j8NzF4P@H$s})-{Mu
zPEB#Hrv)a62G>_tRx#9|6G@691l>Wp3RdWR7E;fV6i(y}oufDv8^TqHD}pQNud;m#
z5B4@+y+IL{=rN6o`myz|5b++K+IG2jZo?ZSJbYBt_A*Jfi)(QmuE7Fr2Zb^oK<~v{
zL2-z;qZ0YryN3XK{c3_Dc4kKkLHuR2{Hl9BQElX80!xBURad5c&2!2vmW+}$GfL>i
zW?iUM68%ej{8Q5MCA4keMF2jP97yM}to6?vV^&4zi@5pCjs5DU=OaPG>S%ON=~dkp(lZaB9vXXSIq_NfJ|>l(<*g(s=2
zYe)pn;t;Y+B5cD91N8Z?M;eYbN1c(&BeJ$7D{mOjw?;05oZBMQ=X=-
zqwvk`=9T8h3E2t5NIw!Ek?mA>lgSjHcG?i91&3Cu!z^XdDdUuTC04e9kDg4-IwBko
z%+sFgd*t#))qy$kkYN|({MBkMKNqAP-Ot4ke8Cw#3Fp1Cx#i
z)83vUETqWZqx(Me)Z7yT0at=eNZ0_e&VOfjTvp^BB#?mr%j#G68l=m}j@T4T{{YT9)bl}m
ze;=KwUC8G?qWJ(E_5*`YOK6}9z;~H=G<+P9mfhAllf4tkz3rAQeA%%;eVAnd%ZH{)Wd8yi4E;F<;=jmHZ$%@Hik(`x*mpH};dURHE9O5z$eDd=Z1S%Cw@UL3
zy|^G?uOmO5H9y#uQRdrRaVKZ0|gy4~;3J%FwM06-dTq%2P8G2Dqbr^jz3d41}43<4W8-QEiF$T8jnj@iW`
z+jw4QD;@OkuRz2eDCic>`@G|E5#u8VBO;v@vqpq6l1Bpl(KB*(G-1kLyN_H(a+n<7+F#
zQH+z1;mr#m)?!cB>15gcHnF6sqfH*zs1AM5;ve`Ab=*-A?
zrAM}vU(1>@2S#JdeFth35Rl5_XveL2$j&MmEfPgg0*~_!qMhZ)PBy=#ayE>Nd(;FvkITt}^5!)Fb%qfhr{FAxWyJyibymYw1~X2M%|VTNNZz(M9o
zjAZqy<(qgUGkKr1dt=))B-X-kyO(MG@H^5hX*($LHmI$6XT8iz$sFQ?!}*&Vk7}@%
z)$Ns;4?n(#gY~M`cJp%Fu|2BpZIDn%uuEBU8z}(xHK_2@-$ceSszq-LbL2aJh(}Nd
zZYw{f-Z8p{2~>qcz$3kDbtvJEYiqkWl?cb0O7W5HT$#NyuMe}>W7K1}@cc;_@?tQF
zG3}9F4dPqNTd?z~V{p^4B=jrVueIM8O(lm+fH#`37_cRubroGhapnT+xgWj*T3*?T|^lgd7xH*srO^@YN&ynQ?Lg?U5|?BgcMaHo^s^u
zjEoPOMP1~8RA6V5fND|00zf!9!S7lK;I-9~5b>*ANsvr2kg@v)`cu%hWo1yTV=Nf^
zsmL^vBP426vqkPl0Q*rVOSt>fTj6}cy9cqy%|hUak^(TGlGr)Pq+=o+wgB95^`{1I
z2IG%x)X4;MF73n-!BI;Mt4teV%MaOZwLVM9PA|YkuAwcz4eC+{!RymCvbFIZ^pP%X
z?XNJZ&_i($V7zjm))+v@;R|5r1l5I&r2cLON@tFE&2wbq+B$La>7I|KL*Ol7TmAn4
zMQt(VP<+VF12^`n%~QbM5c}9e;^ej@kdV$p9DG#+JeK6hq_IFlDd~>&O{mM~N+bl8
zVf#a+XkwJM3FL~=sy4r7+8}kB>i1H*PKgv}V;`vElH=_%YiI?xhICtPDja`_B8Pvi
zVlm$oxHV;hJ-w27n^cJ}ZtnFPvvq%UEzIYg^0r9&d{jdexTLEjmqeRyu>kh2#XkW1
z*AeYZD9l$C#Yz`DjzGsxn(R<94h=XhP31S2ydl^QH)D+ZW|L^iG-%dGwBoyA&MHu}
z;FYM>L=u;8%}f`L1uhOhy=n!J?IWiZ+f7S@P6$s*)N3Kzj@0;*b7$I~Q?F_w2w1NG
zmM4MSp2CCD8EiHI_iYO8fZEqm2toeN2OXV&EhPaM44$1U3^`;z;+NvW)5yc}W|cu0lu{%ChB7)DOQcrADuv^>y%nfi{oeLy)Uic!0Y2H{
zqKykg!yt9RHPt0Z=Zmr^ThdT|((Rx&v}|$jf+)mZ3HI$!-KN`?AmvyCliYjMB@(e<
zvW>5gYHdp_Y=EneS5eJFP@GPP$gtC|-p1iBBN&kmRQnn`RPh!5tv8)}btS}}?AZh9
zR3MOet}Jt0&l+MMu6nll$aepDQT<#J$a%54R$ldI~W}O
zX#vFs!i#MaOM?3CR^o3iEa8oBA+YfFn=-YHq?fbCau4kOX1xCZOlJG!TSjujk9zc{
z^M#ukt}XQFcK#4|J68^N?C!vo87~#<_gbSHd1H<^<35yL)s10-d)4Nl5P2nd$#f0F
z5sIX7gIB_mM6J6TV7CuyWC>|KfFjXen?nrOzA
z3ny$Q)Z$T^`fI?tt&~0vvuS6I0onxkFFFfp}9u&n&Itp5OsiTcoTN?6d2Hr>cK
z2r7vT%nKaU9jZs^^GvR!h)LTTa7Q%O6|nGkfv56_i%{f}8Q#_Q=Bj
z02=gdE9|D;(iOPZZ&E1NmPI(n=TV+yil`nm(Ut8@1Jo;5<7d&%u<>Y-1ha`khW+w7
zn#!NVDWfh*z|}KR;ERc^wbov7;2*h7*$u-GFUbgwM?
zKGW{?4QYj(vBe~5xXB}6DEFjiuRhqj-g<
z(Cs4DSInAs3vNL5W2S4*KGL=8tIbWVRatEb%*=dzPYEg3f@fhM6Qq{$o_W3O@2yV1(T3+lx+
zmX{)zsrRN6WF!poYl@7IuX>b#M@m4M>E4Nk6v+9aEp1w9Hlmg%pcNY~KZR}n%jAYX
z8(0aTNmZL@RvcvXG?JAe((*q?`!3h@eT=qd7@M8)@F;&3eVuC_6#`4Bm7zQd6OmeP
zwEqAQYW6-hy0(V?XrW!ZQZ~RG4l8e?>M!EovRl^F2zhPPfaGNH(xu6b(oezjgRawx
zZYq0_Jl4m(L5i|=g==DglZy5qvJGEDvYs0jvNCFSPE^kQ5OxB*cvjo&$o~NN^QCjv
zYFYGU*2w#a8KRgEr2
zRhZyrw>KUc@P?hLKCgMHBjNnP8#o{u;+uBM#(ZAP=i3FLpTfFMp&`Vp!+hjdg-gR%
zr~Rk+>JJh;Ru(EntPD=<{wnhcIXM+<38k?m*2w7r!TM6yRmqPM8kQS}hCt}WTyhN$
zOO7Z~4Vx`b?F(Dg{5=Mddon$|IKc~sZ)~3RkCIL8nrSB(G|c4IQAo{*Z~^3VO*Pp3
z>B_mL5adF8RMA<>Gi^m?C$O(i`!Vn)o#G1{y-!qjTWem!fN@%lGsM0SvhfwJm!;_u
zx0xrFWpPrLN8ogqN0w=SXPWk?%jHR7vQVm`%(2~`spnQ{xu2GZ4Zhp-)ztUbRvy6aM
zUwdcRbN#6@x`|AE+dX?s)Kf$8W{aSLq9JGlFZqZDu)l2j39;AK`4Zs3t%ry0w43Romiy21x{(_2*yu4_*{8>B>B9@?*sDYS)>utv`m1}`GdxG3SrrTLB~?eaO!h=(iVf+TJ#~s|f7O3+39|1IzmoE6gru``!HacMh#AvX>{Y
z_^A9|N!uy%xV1=zID)G)a^&?rMN1~t-0#%4EIq0Ok*1l%192SZu=zCPXk(N|weII{
z!y1kO{`KhgaDRe$T1nZwrC8%p%(8S8k*nO?Exn9VY8NEqF@jWnf9qFv{u_xSOTQFe
zebP1=hQbk
ztO;E{$MF;XZrG_#rFkaX9U{&xCe7G|+79OWzft*7OQvb|N=>@vVnaw@oRi=4sm!8s
z$-B}A_+WZ-+XJ;iQgQ(OKmxyZ%f>N^q*q6#Lm_66{{X&j!FD;w9eF&}fZIHg#cZy&
z>b&3%z0WlfGD{nlR0p9@F`7OL1u%&`qZDJK@6Y8zjbI@hk1WhzVe~_{IjM!Uz;D)(
z61N~8{{T!^Tx&KqGBh@9*H;cUg}3!FKE%|vz8~>!vZ6;wbcKkUzgw6_v#8kN?sbJVP4?FaIr-^RAO
zbOsFrL$$Guf8sLbjSF54Kvw!Ui}jGQS?OtGZ-6|@gZ-)Ucq-1;;Qs)$o+coUN?V=}
z#Z_uPCD!#(i;L;Jv;P1NHrgt*fE7ym-G?~pDE>yIYF1AIXp?5gOp^Ll97!R_C*PV!
z@y*&d{{RouZ0%DWLgfDdO3N_G01e!91Ha8mT2+a6B84B8YjFjZH~uKruVc*moxxMa
z$j-r!%Bvbwna`N_4ZERtC;HIyOB#%{stM!_^r#yCBEG5l9Xabxpf50%jv#Xq9DI&y
zJ;brf0gjX_YBuAY>~Yk4(=<{3S|)-gN&Pb5rfA$H58LMPKW{ap#K0!DFuAD
zKNzI@;(_>CN64m8704&I+2aalJu4Ram8ZXo6hpr
zBsszU6-@_-uOS;5%c$(!(eUb)7hts3$|nbwPe~$`<7jWOGF4eXB%>!B*GAJwhpU6!
z^`|b$qupwtXj&>7DQ(d0WtJ}c4C4)9Pt&HD|cCOIW~;*$&`?jFaAqw(1~sm9k5l+k0(1S!v;h^O>e2
zlm1chRg3s>+LLzfM;}U4&2>U4BbIV(O71Cf*wawzHVS^1yeiKM(kR
z_rw>i1)O`9F}hh>go%C0{?yG<*3(Zd9AB&;<9X_SXz^_ulCq|ItC>IzHzSS)C@^qv
z$BLd&D)M71o_QUr6++oLImfj{l|-?W9PT;#RD$I01$cG*E!~Jkx{=6U=A6k1
zWh*IWBPRnGKGioAQAze++O4JQc}VJlWf8bPh&S&FDqS{R88Whr$DPV@Nnd);vOs6I
z7T#k6_<-sSUPEzrdj!@GAYwtr^XkCun&p-{cAk!?<+V+00&DLy0;DPf)8GAQacc8f
z++6vQ`Eeb%C)7#y6xr>}0T?ov-=@=?A8H(^EE^n-_1_k_=-`rfv7Gl6*r(&-yA`O`
zGL#RRb_caCDABAy2fZ%b3g9Vmo|Hf#9Q`Y)`$yO5TmTiQ)+);)!eI=2wmB=F38Vv`
zns6K(eQD~4Ad0{cC$%^xDpiP&dX-}1J5D|+ltAP`vmL26d{Ju=&ouA5@&L;piabTI
zJ)afZ4my!Vm`MGT`PX?|^zU1VxdZIr4{Ev6Vi7EwjKCP}@IW2pKZJi88s5dFWX1`1
z*n_z>d2?oEx{F7#9%tS8b_0f!yC05}cv-p8Rc8UXym_bp01XeBBYu59wKiPcPbADw
zC(=GUenPEpZQ-;;)8LRwSJiPKAC3P2cjzj%WDGOFQNYK4b4-w9Z?wcSZ`V`_g@8RO5BvX6}Qtj48(bFAu8
zUfnk7Bs>nvI|1-3jow+;gmo}i5^b`mSOX8``+Ir`R;8;J>x;35ezn7}+YzH2ni
zg$s;<@m7|M@oCP*L&E24XR7-VUHJ8*ihJ0)g~azVJd=;s^lwcE86n4{H^Hl&Cq}#R
z49^Twru0Jlov=26pW{_+2!>Wk2@DTmkZIn;S_M40BZ1FKe5%LFlwbt(~D9nlik?~PFlwzzfM;}Ur
z(Ri{tQInj10aC$k_fo1vGFaeMmY=6dZ>sFLLHfQ=wR5uQtD4$aV-F(j4bXQqJ}Avf
z=-pq-CvDhYr3Ow7Ajfh}2UEbUjlYI1q0#Nr3NH=d$}R|)XkEK`y#ylN+RO&YnLxHjO=@{
z%?!tywm3MF$u%LpsXsbe?%gTLin*!O;VLB+A^!jm=COtYP7FcLO)zvHN_=R};Z$Uk
z(v^<3D={@0IjcQWM!nL!rM!irX%~8f+T$x+?*P{KA{w+{{@s{keHzzG)8bg8jBVZqUA}#*Pd0}v@8;_FEi3Ims75TzeuIk4
z_*-Ald^h2=Ypcm5yPb0+Fbom!NTD?^wTTrOG@D4Rf&HvykLO$t5|p%b@}m>tt3zk2
z&k(kf-8W@YQHBHNv&ZoYvDP(odCC%l_%`BgYo}a?1nc7Cnv19H|XzOtd
zg@*J^qa$(aLCOZ>&omTL=x?#U$WP*~z&uj0?OYV89rH{M#%%bd5tG`djy7U2GoFLq
zw|WQJUcIf^3$%e_iN6n;akx^s(CRC;dFhPvNCpNgU*eAg>i!jF`}812--boyPv==T
zOg9yyD>S2B3_SB%-?Nn`#+qrzNtFKpI?7|>wf_KTO|!+eCy()0tqhOx1XbCf`&rZF
zxbggn8WSYJb|@UTPL-k5?o+_OW=o_@;A%IcbH)!U4`WCDq4=81K=A~#N2etEmzD%q
zGPXn`{HyQtUL~ySSDMY^+}=*|$j3QjNR_iK#aUT1Zjk(%i!`ixrq$9FiaOT!?3&%K
zJawl91eId{08D@HSP|B(v~7D(&}M1$>xP168%wWTeP~Hpjd$A4n{jL6>$#;+sVVgG
z4r|W^8>nh`T9w0GUCi@H{Ife`nh4`HqNx~4dUd8#&~>I}3XR$_9Z6qe4NE26#HZIQ
zpQ~nt90m1!
zruGUe**?#H%(OjYL~UPHxOY`2F)6@YcP5p}v}dJk@n$(aDl=NY8B3&{QcHav-^;d*
zhzxqMtiBJmG+nC%kjxMJ6yPvTcg-)wFsUAqr1+ooFWIHdj7_%U?p$zxXNu1FMq?+7
z^ydEn=dXI8mf@Zxi$0aBuLg1AZ9M+~^M*f-LB^ulRPCOb_UZos-Ag-QM66cuFc0mT@yJxOfse|)*4s(B(Eh{ckyNCYcz5^PQpvKHO1+qS{Zqphmy#GQ
zr@b;Z_i0WBYtppAT-m;0ZFEqvR9#G0(>>iP1)=svWUQeW%RM%Rq0qloO`^u&OBf!FG4
zXbHEuOK&S_V}RiB54A#baxVxdoerNJtlxRN2J+yysL0tPzG}j09ssVh0So$ypx}H8
zffs$x>j*2HZqFo&mPw_Mt+0%FO#PSn)W;fRD#QgIVa`rE3X28PR@o1!hp-e|_>V{M&7)d)Q%^x6{wv9sEPh30Z?0~y
zCO2A*(@!b&W!pc%bQCVaYEHkT=qu!SV@rq}VBF5UpP#Kz>UyrFs39+jgO%;bNkTT=P`mmt^_B1!=yCQ~;&qC-Etv{`q>vzUgel
zfuF-#yR91EPtj8L$pyg!^@_{Np7ir(!pLe?vfNC>JJRA=K_~Z`R%B
zF>m8O#;;}Y{GoQqaL+GbGDa%5#JX6vyN>$QeyVY}1^t%xt%rs$67tSFiQ8+a+l+U`
zG_#tGp2)ZCd>6j8m3rHfn(Xtsvh4_tFjj>_I^n?y~fH&eLdxT)m4
z(Mf;)E;h4n*osILC*HJpr}I+&W(wueRzH5dsN0}c!!-*S?BPjPFiSq(l=ahXrSo8G
zedNcu9FIjpHN7adUR$|Tp7H0Jlz4|pj&U+gbgl*u>i8qtmgF}WnW*j34OTmOj#F_$
zYU<-kw*6kjRmdB&+|ZYgV}Bu@8H+@(mTkByYRz>m9#v(Y<hAJ5H4h|}|iO{}cF#JRK(&ME;EsW5d
z72WjfLz66R`$OQ<3q^$?PrI!IEe+vp`SBbKeJj4~cPm-mrNI0lBwT+w
z$!);M%}oW=un^J6RQB&m@%kBL_GqLsM8HdKVgsuVQ~1)dK=Ct;uZ((^y;s`nlA#MI
z48OqCh{D{cfjk?CQAX&gpU9%K`4jgeV86+F;#SmB%Q%poK858*XA3|O>B1HL;`f!pZg
zr+<1EMyo4By}a0&4Z9!O1JY_{ncYc{<$b`)lSW8D%u;QUG5Ak8KUxi}%JXQ&a(RXN
zepL1?0^LAVZj9vP@#n1$mTuApkdVA|??$AYYh^#g-VP|nJW_?Un>?oCU0OWnEe-|JSs4zPVk#oBZ!7nlUfnb4rb*|H1dZjB(4c-4>;-)V<4e!E
zcz)&5IV1%(gp6~O(?1p9y4{|i%8|07^u=M
z#04j^_B
zYrQgmIz&6R{?vHyQ0Urf4Qj#RJWnptpnf5Od9CICg{R(2B$_?sa9+X+%^DxYx7-hU
z;hfrfJ5*y^JeyQmX9nT?qzKzyF~bJ;$F){swZ1IUnlQIgsvCtIw10+0_x!6VfyM`F
z^nN_KK=b}Yc*t%kK+P^bDL}4*0uk+87M=&aF5H~=tO7l}VwWEj@V_*rde$(|neR)m
zgHKiCnviYVj2+#L5D~8fKgOp;;ADL%BaEJ(nD(OLMK6KQJ?YXFu~HnM;FCu|X!8xK
zq@Uy{jW$0vTy6BI$;hjlAl`o4cub$Z#Bqx0jx|=!d1QA;8rQ>KZHrGdo?4z!M^~Yt
z(+Fi}WsM8tBa$m{nmTGSM6tWZp*>kA3-qY<4GtSXf+Uglslxy;Xw*sak%xOo$Z{Q>
zw|ZM{Gfjt2mRW>$@HFx_K&zV2i#LoQ7J!gR8;?(#mK)2vM09|pO(EJg0sVT>;pjhM
z6dF_-8pk#Kh40%U8)!LX&vJSLLfmR8Z3Dw@k;0(<2*)hm?0eMLQYuQ)i8CS%ts`@m
zplo7GWICM7<|?)=<8D01_xcJBG=imUihF4-Z9KOF?=t$I+ymN|NYR^8yAin&TS7O_
zD<4WPU*l8RSl?>*N>CTLnXm`9x%vukiuEgN8&ToSE>O|0s`h;U0Eqq9KGnmTZf}H6
z+%QmF4yg{>_@f-Q&fx;
zBS@U2=IxDj0FH5*k}J6*+*P>gwDiRc%u65p#WWmrtfUtm7uJ^nRpm&?jEqRA*dye8
zP*Xa)yC*@=p0u{asZSNCAmN(T;<2@X0Dy04O0VSxs{3Q)`+x_s?3V2
zOGa`V`+U&O3dTopaf+7FLrep34;l8UwowAl5RB~afI-a*A>a(>93FE=UBihZBlk)E
z28Lx8&4_
z-FA`lT(i?UVYFumB;=Yy$@)?Ht%RC=!$ji%^1nk>`K1_=DH<6S(3N#L2j;JCykDr@
zK&bmes_otfIIQ6(J!vUiENIS&9m_dlNhhf_89l4Hq^(qIv2tlEtE*A0>Q40G*0_P1
z#uz&P0D5pyKb^GghhT@5^ZNdEw5@~h7ZS_{t**+R>>8B~$N{NEmZUIU>6Q+LeD0s}ntQ?05ooU;c>xhP=;RTxxe8{YL(^
zx%)QpCY|BPwHb9e3W=f#8jh`4Jz{w7bqVH(9ggI#eX~%4{F!+&x|9++S65ZZA>L~d
z%M(p3O?7wVC{Wy)#<)|0=dCGRRupI*DcH_ETn=lnJN|U#jGw|ep<_`IQV&X84|Bo^@qt>xm$A6!o(cCfnE0t;k9ioN*{DU&QAkP86{xfDr1x4Jx{5quV{MF$)Sr)f
zppp`#f-pxEiy~vZb+CQEH1ruDQ))<5w1X5_5$a!M{u8vjX|>H!GihiyVY(KtK-0WS
zf3E6x5m{UdI3irb8n5C5-hlADR;~7brP@l~To>|`k<{Y^1K0Rf^nM?=@RgOt)J)Ud
zJY^#rb6k?<_KG(PY4_kCUz#rz{hZ#(cNp`a4U#)D_Z9OjqXxc&@dU@hzh+axa(3R|
zF~nr#jPG5t0S#n+3?Sb>_`6qIcq174QhN7d#7ny)LMqAGo%om
z!D9fkFzro~qd?OAvw!(mSCRx`ytT8O=Zf^7w4Wa7o-4RPW2b~f98Ua5Pt&F=&6|=<
zGzI?viWq*i-<>-h@G(e70FEIr32#-Tw?+lkdXep3kK#|Z8=Y58{TpRx9krIwyALct>6-FkkfD-GZ>F~;p>{_1Q;Gx19@Y=#ILcfjFCQ|(2YXrDVq
z)K0DM@lLmaz$iL(KlP%c;Hvq4mFN$>S+kWQsHVwJryk2!wp!S=vNrE%k_9{e03P0d
zg$Z#CNfS#U%!9QF95_=w#zHp%2Uh<8N*#viD(do0M-odQju3wicoimT764yENe8+n#C-`8q4XDn_uT{B6e@z3F_ZZXszg=w<*g{{X(V
zJ*~XgQ?Hh}Qh6tZUz71tN2pCL`)J-6wmOBw;7K80)kgmSy_y|^p|?<5S?TM2sN5_I
zow01?<;S?~?V2M<(KX)}vYS}Ojicv@$hHU4hx!Vw
z*L+)jtSE;+cePFyD9#2xaazqymT7z8j|67lK($-#KyfA1!yq2`HI>#iE6r-{uJsF#
zI!=fWL>|CZRn`14xQ+qlG2jLM^(~|lOyRGY))wH1x{5XBnLk5hxe=!>Hi6ULtCC}U
z(yVX1r>Vc`?_0L;#f9FC$pWE{ML3Y3Q8j>zev_(Xf#*Wo9CkGEp(SPRm!VCnz_UHV
zTfn}Sc@HDw;;*!gKGg)eb;MS#>y}G~0Pj=n??UO1ZhYlvm4xZJ2|kgYynEB`=hF0f
zqn$7C@vc=0?m6x;^F{5@t4hfgp2p+V8lu_Y6qC|qjQ;>!RfAuHewR8`q_V3fCG_n=
zed|9P>N?%aO=+eVFOSz<@%e#PiQ!#l=>lpx!=z(@1-jsVMzyadr{Hzf{MPF*yVNYK
z;g|75xN}+Ys%fz&m0~aNO7H??FY&E)kAU>6W)iipogf+AIoxXA(@%mo*pQ;2{ne%W
zB8K56dF0V*`i7okT^Vg{vAvwOU;0*OM~URtQ%`%T;EF~nLN|YNUgIX57G@=J8;?_0
zlX$~OeHUC=qC&pC!H0fxRE9+@6O!rM+Lbw
zcZY7qr=!C-A&a2SI_JGxAz3Hc>-4WV99JCWBuM7YT?cBb?q-$v0`A2yyxdMu9_AAkxxY8}Q?S|e3;~};RuDH|fBaMUG
zL%B!d*ehH2R`S_TE(aiV6`Nran%DZ$(H`qJFnskaj3CdKu_!v`n5QZpwg89^kd
zdY`3AmqeU5TC|?n0)uGW>&QJ+&{ukKw;3c5I{Z~5B5fQb1aXm4WHR%QsGt`)Ax{+b
zm6YJ|P9SdIW06W(x{>*c9VX38t=t+E8xDt5ln^C8YJrbeBnq=ji!0T}eO(nKI3wt5
zJ;Ce6F4ChtsT>z*bvNX_meN~n`D`3^M&ZAYdWtfPaCl+EBXDRKFXn`gQFR?vxvM0&
zw7>L|k`YznM^;C2-hsg^3o45Otho10V$NO*zBBd_uAPDNXU
z^Aw%L;N!3Gsqt%NIVYf55HhOFf=KazPf_{MliN!hlN*_$QTSV`3bi)U!o^v5euVd?
zy|8XU!N*bBvYna6fNk{?HwP1lGIF%kpFp;OW=RC3xb-p4dsc_RH#&x$uA7}cG;5&|5iFev#Rjah+$xm}
zm@HU+(DtINmgdI%PiRKh7%{Q@1M63YWVFan3wuYZ_`AdxHvS8@xYRt`Yq{ggM+?MgK_p*DMBgESM&aVVE^SYOaZ7feDdwnZ1^SawDyoxrd
zEEsh;t10S;{dB=b<&dfC-!$@7lNsZu(xS;Al1c5FehZ*M`3jW!EfUL5g%T~`2@$wC
z?e(K3vw^{gx|MO5-?|a|CWEk*p*bV<4a1-uR+7#;KfALOMq+ZT53N7exbix7b>c~?
z4)B$XaouT`i5=TqEX5>e&z3zW0DmgkY8nl^`h1#}n5G{PMrY7XGI~^~j=Of}2jZC_TP0+-LFK6+k;%t;h#^6h>OX5dQ_>^5o_Os=BV&f_YUWXI
zV{S&=hvVy9jkL=srix3g9@!L`Q0>{b%ueIxu@^RW@XlGLQ5;~ObDq`dGPe6hZ%j$g
zpq{mb)~%7GK3*HlJr}U6;gji+$sa~mbCc
zN3L6FHt(hAuD_%t8*XQe=gVK+2j0Bp$LmNWlpRUxO%o)A<&m;-#FE`f%|I0uN|DFG
z>r=;#K~Y)F$&k0NEc}k-`%rT*X$u3#wG(o|6h^&!@j^a3R+|J7CA0$L%u_6Jm0j6$
zjQu`p7GQ92K*cmtjtx%A&|RE{DUr7UlhpJTajRN2vfIfdK~iPk6Xzkvdd{gJ{{U*X
zf@Zn1DI;ZJ9-Oy9n&`&uQ#tY~c7g8I1MZ2vEy*6uPqQ0aCxQ-nsp7d?d1msJSzR_^
z#%e1^MVU#AoE+mB&&6hpn9G=6M7J?3G>q&94s+D>s`(d)#sOoI^v7dXcT+Sjl0%r}
zS1i2pp!TZgVUp4=<|MZ7lkZb#qGH%W#{U3z%$U@(0oxQep38J*9d~3JE@biV+ZifzgWkQ8$c;l!f#tuQmRN@Sdqmr{zHweL9}+J$>$-T>
zA40Gxc@2fLMTIN)PH$-EtdWYFkecIDs)Sm!DYqTGen)2`lYhk79
zu<70kyRnJS-tOeX0sFN~iu6hb`|P&*JLt6=2^n^}ups=5*OBYdta_yAq!1X6DJ?Iq
zH1}tMXN=^id;|#ev73^tLkuB$Fw}G6c#uF
zy>Y(JJSX9C0P!BDB$LQ9vOh=z^6g$(;i-+jw`U@p5i0)xTJ;aMDT%w&A3ur?-<3jb
z*;uQhzsH^du(8r&*0eb{>FzrmD9&&Mv6J9s=gLmQCH9s#viIO$Qa(lLG*(0$!PmAw${YF%V
z&MR>Yeq(bp5zYsT(nbJ{r*=>}09cwxEARyOc2}Ob?@J7ZIaP;aP3f9W
z4O+A<(><%fUNO*{Lv0gOlgUDNB#d}Q_&uvfsePi`_gMa^QQ_qNxhqhrEj!v07fm6^IW@27#o#VBY7V9slLxNOLe!q*YD%qZDgC3Pey*#
zoYytm-CI$bd89dG)3T3Y@m%whlcaP)DI?M>{0-pUT|Vz+s)2FQOOefH{8jd6b)eYI
zdAoW>*vRNdy<=^!Zf)mRNmvkigMusCbWaiw75EoX(=Ql3+%RQW^>9DECgS@uZ?)0j
zyH4s{W4BtGQR-qkNY60@u?72nzsl
zlR$loY3Xy~DQ0nz3}laknymXmo6YfE_J4Sa=E=8Zpw~L|1>sG%52$JL75#m=Wi9*5
z{{X#J+Odx2BcD<@{vgmoLmAwxK^?)x8>OpUU)#h6=8{!k;%G@|boP4h+Hw2Gf;73?
z@nL_Zcn!eApRIe(+Ps3(!`fwmKBbHjK7za=W!b+IsO&kkbW>Z>t92Coas*=fUeT@g|gibOH0Qd^wR8EY6pW~0{3n}&gLLi`$y7Y
z(0