+
+
+## Security
+
+The security of your cloud infrastructure is the primary driver behind the internal architecture of
+Kosli Capture. You grant a read-only IAM role in your account, protected by an external ID that acts
+as a shared secret between Kosli and you. On Kosli's side, each Kosli Capture job runs under a role
+scoped to your organization alone, so a worker running for another customer cannot reach your cloud
+account. Kosli Capture holds no customer data; snapshots go straight to Kosli through the same ingest
+path as your existing pipelines. See [Kosli Capture Security](/administration/kosli_capture/security)
+for the isolation model and the full list of permissions.
+
+## Hands-off operation
+
+Kosli Capture has been designed to operate with no on-going support from you. Once the initial security permissions have been created, Kosli Capture will continue to operate in a headless mode. As your cloud infrastructure changes over time, Kosli Capture will continue to find resources without you needing to do anything; your application teams do not need to take any action in order to onboard their products and services into Kosli.
+
+## Finding resources
+
+Kosli Capture finds all supported resources within your AWS accounts, and determines which Kosli environment should hold the snapshots. Kosli Capture will create physical environments for you inside Kosli.
+
+Kosli Capture can [filter out resources based on AWS tags](/administration/kosli_capture/getting_started#excluding-resources).
+
+As your cloud environment evolves, such as the addition of new AWS ECS clusters or the retirement of existing Lambdas, Kosli Capture automatically detects the changes. Because Kosli Capture creates physical environments as needed, when your infrastructure changes, Kosli will keep up. No changes to the configuration created during the initial setup are required.
+
+## Multiple AWS accounts
+
+Kosli Capture can operate across multiple AWS regions and accounts, allowing you to snapshot development, QA, pre-production, and production workloads with the same process.
+
+## Operation
+
+When Kosli Capture runs against one of your cloud accounts, it starts by gaining temporary credentials for the role you have created. It then uses these credentials to find resources to snapshot, such as finding all of your AWS ECS clusters. For each resource it identifies, Kosli Capture generates a snapshot within Kosli.
+
+
+
+
+
diff --git a/administration/kosli_capture/security.md b/administration/kosli_capture/security.md
new file mode 100644
index 00000000..bd06e37f
--- /dev/null
+++ b/administration/kosli_capture/security.md
@@ -0,0 +1,350 @@
+---
+title: Kosli Capture - Security
+sidebarTitle: Security
+description: "Learn about the security of Kosli Capture"
+tag: "BETA"
+---
+
+N+wvsyM$ulAOUMo+o^9150L? zYA1ggsg?J=IgT%!G*gkqFASXuVWiy&8Kl3~+pRGh+Tk^nS)4IMM;lkt$D>Q`zxf=f z=FTaXsK9eP4pz2Pn+8hw-AcL3)OQmWlifP<8^UabV3tOp8Ga?DFwy?$2BSJdC(xM- zN^VbsKRhY``>fg8*{e13zzC=yJmU>wQ~pqIM4-RVgoc9VU^&DVb+3b+GBh!PD;IV$ zf_%mpw aa7!<`o-+)Tj+t$b0S?{Jbw}Hnq*lha-QyRXyzJP zGA4b|U^{-X(efrvQ;jkv?pxJQFO+ntGSz3-Ea@<$sqjO8+KT$o5scbK_Yj$?50=H9 z&&H1_5^evupIlyCKM^iORXU*O`WkVwRbODVS{VDdx&K*yOrj8$25L7BJRyH__|C^M zrx9Ok^}UrEu7_EdihZchuAJZvW>jl`Q>E%+=wlzA?b7C{e;YTNq^1oHm42_UN!Ra; zSx|+$hOns7j(7uf+8}FT@A2EuP+Js}!XpNZiE+S=54x7y4>DFjs7iF-wCfOgcla`Q z4E`1)tjylbuprJR$u<0GF9>UR)8YodNWT%GWG~q2s z`#JeTqG|WET)(p}C2vg#yo^{Wmyg@cK5o(yr0(l6nV1$gyx8dG6-xVIBFs|WE7K&6 zWU*hZ=y>}iI^xl+1wVRxZ5+L&6pdmb>jFbqn)0XtrD#iD4#sXztys$6HC_EvL4t;W z0Xdu(Avq$0Pbu!kBgo04Swx6|S0qMat^9O+c(dwtKpzod&I=kS^sn41zDxEeYO0=- zdfe6QXZMCAD2;T*JPFeZd)_K!)}*9;_v=f)8sWbP ex5^C{OXuM8fF_ow}VOzFzpO37u-KkDAobF9<^uWmY%nvs#KlxFl-#BuRoPb~K zOz6j|c47u(tVBb)ka-1Rh4uUeI^Lf&ck5F>RH3v4T-miZQFqj@_R_sisVtFyUh(8m z%Yk_KWcWX!MdYv(-^%G@y?%dJ(cLod6O}|amHXfUC(yy#2>QP_IPVyLMy$w_(w%~h z?Zd6M*#R$@^#!t#yDPD6PbvC$fdayVJTu%(&RU+!g9y!Xpr$F`)sLv7cgdAqA%wDv zTrq$6;8EJSbydC=$wKjpaGmcj-{|*`XR-l(7xJ7nq62Xn^k~3o7={ipU!w`dQR9_Q zsuFkdW~?VMm)?+=#r*!R`f$A8pf_jXxt_>^IX+0;-Xr<4 NhbmN>UE{ZU9%jE(&Yt zfAR-2h{UsHYc_tRPz(hkdJc7GChXNV*91Zr>F}Rl01tr$WhJFm&zmrVa6+8{bSVt9 z^5ui=RCny7fydn%aa~sV)X9J!X6$9a zyrxZsfL63ogfJzJ=`-ltycYrb?Eq_8YE9O$JIVnCSChc*oCmDWb{MP|2dZhf{^k8i z67t4?mJ^u`N-)vozT_?^@5~wH?F9ttR);rxFyApLvE4~O)wTgoDD^WmG8&vdeZ&-W z_Mo;ir2R_!LtXj3N#R$QvoQ1WP#J9?imCw|H=EBIw_gbcRNE0iwGGccykzl)tf&XT zL7`5{Plrw5a$#QSPw=S69gh!OXan=M308OvYFrZ&s%8+p{p&!>x_t5>>2O18lB`QD z+LcZWBS4jod8xWf$Fan?8=yb0tQ|N3XxrQ0KjzG?D$Wi_d}71Dq@<(>!pK%{$V>GH z(44 _FJquWgc3*(~ z#jU&ts>`?`?}4c5I?jioR3`*W2D-sQtKD>l29P0u4r7vXH;W*Ui+;8areb(A8N_)_ zh%9^7VJ6U9xUA=xm#0Ak)4XTS-lhjV1H1(K;Ef}MJuLMa(o<(;L2Yb)KVZDKo%a(k zRI7wJ3^riruHX>AIyKSDoeO|TR9^cg^oO;dz`qffLA3q-`QJY125t_0g8yGjCI{Kt z;dt%TCb0G)X#&JF>u#vF`aPySF$$eodW=X6pmddh2~tNMoYV40_Zt0OgCOrvmAh^F zyF2G$BWVYy&W=a`@q3>ZSd=6~N-RE {!5n&8I&lCMo%^4tXlSafS>8DP5Kus- zX`eim_4^Vctxtxz8<9ZVp;%Q7vLK*^J@j*}p(vy^a_%yJtGcq~iGUwZWn1rN|7(c1 zr9ag^AeOT|zk*2VaeY4p5?|;k%fFv+M@Q{&6buW0xM6ixEY|_9|F{aVZoHU~djF?5 zETT$DLKVpMhL%DH;D;ze(`m<6Pi#1XLHz0B;xe`uBijr;W-C~m- c>=!>`QnOMB z##y>2ePaAzzb$x#1N0S1AP{tFE6pI1EkP;oeGK?IU{^Cy%}kdciSi~pB9ebU=63Cn zg$WVU;PRI@m$SFPU|TRd73VPrNWt^&6;fKK{`f^$nCC+=Sk$M#vb7vY1y!<_CI(ix zT%dY|8)7&10*3q7Xp_EUY@te=RvX{}mWEsqgi4|15tjaQcAy5i{?xDTc Sx^|-IYR;InO*We_ 7U(k^JsHq>2)N2!fSWLVlZtpDY z2ZMbc1;Wq4={LCm1?*TAsIA>V4SWauwYMF}G y+Gjj%Mjfw^3#9~2R87wU3q83->E0y0W$UKUmcRZZ^W9KF3W ~x&C&rE2R;o)pk7b}{l!YfJn*5-rGZ>8P(S_pJp1kF(D8o{{%eE(U;4pE ze}M?ZXV5lbc4ePocA`NI4Um);kQCM2nYk$tk#rNt%bA%WlZPSg5XAR`EdVBvSbVKt z4KtSqtI^;{HWSUKqLWsZr&e~@2$nu)@+|GnK5Bv#z@ybbLsz}jq_=cN!ugjvx&W-w z2-(Lm7$7fEgt}LoVTI q*{K_qMGu(_+hh58QLw>b!wegiOxvCLw$<(uXKytW?I z*a#_~_4wU-DN$=gAgti6nLxz3ISgs(T&QqE>eHz(t~6G*ZEctlNhT4(4bNLg$SXe+ zR<_y;mO3*-K9g2>BsfFj_bC9vHaxGs{pB7ItX)}NxrF5o{jnAd3T;4;+VQUO{>FD0 z*!0Rs$W0>r*OMqvfd$tmBg}#7#oolf9}+`N&?@pK1_}59pb}vQE@IGJ%;T&TDzK1X z!;i8)drpG%$$lxhun+n~csPf^ILaA7n*6q>G_dF9Nxc=eUUQ~1Wc&~Y&raewtl@Gc zsDVbOr<=s!zD&9g$rj3PvpQOXddtIlzxF3MFw2CrV4HtH6AB3?TDlJsm&VY`E}*I? zI8V%DhFBAu<7NpAelgeXm*EO^pojYe4EjD(E>T%sbqmZqG1Q05slF<1Z#-KszGef< za1fUjU+JxII}hlgA#ols^XsH3U*Hs7E#0xa-`7(#S-qb9@+^32^xTIFU~Zj30^H5z z0-fr=1BK@GnQ_JmjahcG^hSp&I*@_1bSC`YmjSy?E`-~GnQ;#S_e@w?da!xtFOhcX z?C;D8jqu2C{PW*~wF&!wG{~~v!ZN(Kc$O$ZEXm&BSsJ}d?uz#HW4pG$6nMS+_Vx3_ z1G%zJcAt*3kHoYVsa+#yS#%3wFS_M4SHIA_{txOKf76*GMz3$mUpyd! (D{N-$K7o5p;C^;4jPp9jNRV_#cRVoA58F0{toW;;-Zn z9XOm7{KafTNB`e$_5AuO!nf=-PCx!ZvFCl9B>5N!kl(Zt^1MP7y;$QOgS7$etDzwA zueC9f`yde=M0NOqmTSrw*ngp?v9CFD7!*h09Y`_VpAI!ZI=b2L&0rAYB$Cen3c+7j zc(#63I;(gl|4t3qcZ7W7((MX1Kb$$aDlJs;GF!D)1Y#6uGN5>TB9Ha6vdxlktxEkC z^~fIRF|p1^R_)QC<_ESKzzsy~<=%q5E%0Qwr_T_iAL&rMh0cR@8?Kou`ElU6Rv~2> z^wJE}vs8 ;%m(B4PWfzNpg8tLu?>fvqVE- zCv)N3hZhJCv6{S#^B1iO+ kkFTjNymlT%uuKc}_EI|Bx# zkb^;)o#XRi`I~N7S5Q?0n0%lpPt{s3RKL9b(+Q#?OH0assmVQSDtLf3{7>YAkc@)x zu|V
eo;yOyzL)n7sK1lCn~UK~Iz;vc3a133d3p!%yA{|9p32 z+vFf2?bi5ZSB 6D$ua#_+r#dkpp_?FIR zE_x*(u}JNX>VCB#t>tiP!!@qw>S%9Q{sm2F1i}gXZ1C8teN7inm71R&0ARi|VDVDv z)B@c{W|veU{W7eSdO}0$xOGm~#DTjl4?Zb}?iN;&^WU9vKYZAvYaVKJAk*uejQy5q z)Mr|h x}kKO;NV*1}h zv%E$YQay@O+@^H1+!dyUOg%g%!A#GmJGhU^@1w-(>GuXtpooL#3Fc2Gq(l4*be)M6 z8J^01#r;U^XQz9_;fsCh{n>O-C1skvD-W^zQQcc?OD|0G?eTS~FC+y`4Lw$Hbe7c0 zJu=nFEn+d)!GxP0z3nx-a;mh!L%_(1YoVg_S?%==^y|tJ?jHDkCeuasT}Q_&oBkGV zuUZ$SaS+qsB(l_l8`XG86+L`@h#_LptJ-t smM!U{T5Ht5TgI;fK>TOJ;d zz~bh;Sg&*IN41-?!m7s9cvA34C_6QL%v)Q_rO*1aTW`3PA8o9&8xIViUz0yXH4t%z zq`QcfW&W7Za;;YZo#$=vN|}D~oA}Tbb&>1miywy%x3O6f-h$Zs{YgOq_cOs*W^J@zSt-Oq^Icm0 zD?V<{#ceMMzW&5><6(*1@tywTQJj9Sc0zfUC!Uw-h`&m|Ms>$--nZ|aonym^OkDW& z(;kvDulE{HWIhbEtiUYPwDHahp9mCreT`Oh`Goa3^1}FT)7KuN;{Z3Rb3D>G;cCq+ zlr#b`lTiP1EndJj=kC4p(5|u3TXNP+W1`Bgx0S7N7CZ0mF|MO`$dKw|52Bbm4pTaM zI_hZ1Zs( Hl$4?FlKI{#vQuQD z`*eAIoY0c{gSX7BZ#*rMDg3JmhkMSAHQDs1cFJy{4Vv_KBwYKTzTF&(OqR5@q#LpR zs`dTO`Fei;Ba15AJ0jw8r&2U&thVHQr<7-i8~<>gjL}OFlEOi~$s> QdN5o7ZWp9;wo?)}3Q33bX}Y^d9TT zU_RJsx2qbU=CO3I39thqcE2Mf@+e`u@&)00&XOoJApj*9av!JqYI`8wXz}I`^N{r9 zvbYn)-c{XKUt8j+MwUQA15m=gwb(XyU14kdIM8^F=@=8nXfO9W5-#6@&taSM&! A?WQ*;vI00(O%LzCzNHjZd9B3#SrsN$k9uZw-}u4E<5{dWdQrp1xPr`;*J1Tr zUJPC)+Ohe?clYSD*JQj$LfF3HjrFPq8+JncSi#-*Lfs%QWj}86y8b4O X`x&+95jJ3aTq7cg$HI3CDN4K_kJ7G4h*YAB z@A6Dg7kFnzpaj#ry KVJ)KP zTnCDmqafbvjO~d_r(bPOnr1@W!70RuB~oN$PXYB(=J=#SiP-DH)%e-=3r&T#9W3Bg zt&0|}ixVFy^eXrGc~rk)PdOO}Z4ZG+A>=}j@@H(s5ZGGMfl{J(EV$oMYtEQ<(&L{F z7j}@V?#sjv_~;owQ=Q7lg*oehxNG#SG-|I)+I^`eo2F{yZi|ej*b+u{a0cB`)|FPj z!I=;*-oJ`^jNu*MSD#uD-l?li>IHP>*s!U{0f%qo 3Ikk) zg4}CC3LLA*z&Ii#D{L<$_OCiJxmk~wSFx#de}ID3mc@12lpZ{BzUXcV8mbjHBU0ZB zHY~B#|4! 32+dBEmOg7CP}^N) R|B!U|yK{hBZ4wKmYF_{TqF@zNcXP7T-Op#Z4Dv;&G~;3CHZC$KQN(!zT1pz9rOd^$CHciqO+A6W3_ z2Dj5GZ$NR>a7}jY8`m_1BDlVQ?-49b&wnXuSO83sET4Jjc?}8dD1{#2>Q>NJwe(v} z5V PQX#K7!o>ZIv6-Ap+;v3}Aq4s8R&cuMX^p z8Pi!{h#TJErCuJ3Dvnf@$TYN`83 @U$W-Z!4O zfRn%$!(UY|fI?ur6`x*Xt ;$3& E$bL#W>i_5!eyp^*=B9dO2H%ZAxa`{te5_k;7gKL9y_yD-G z;!+h*^L7c@ROo m0Ab1|(9nAMa{n}V8N!KAwNT`#fNmAJ) `WZ#y_HOMk`IqpKQT rMF!jbp&kE}D{^lMZo>s>qG1d#HLr$){FT8UIz&rJXih8LtnVn?|H}njW z*!>=a`=cko=FHx7s@<)rO!~wDUg)>%=nk44?s1q)X8$;8`pxEcp!n(1bRFuy^)0A4 zS}W>O3M-YYy6L7MMQI-eT4Q6GA>N;Zf%?R)msXB2fFg$2uX^Z~LFoi2?|tqC^G^pq zrb-k`R(7a}Z!pA`F#^l8HcH=lwq?&06*R<&ck6`sY8{1eVX#Hmb=2hwOr^vNf|GcK z#)gGHzfe&2zZP2bCa`d7#gyS^HSt1D(HSL?hb2x+E$n$E&|&w5+)^h}n_EuOAFF-c ztTI_eGdUTrPqi7%vE@rdEYGSVyK{{yiZPc{ggwBzrEFaDzKAl}tu)b=oK%M+T=0*e zm+k}a ztxU5-%CIj0%|8 b=Luz30h+% f2Gl-&>aT4l3G!|C0Y?lUkmK{?m+N) zAvJKAe=sz~d<3FVp$R(nD qsw7Y&dBu=}t zY8__KJ@YZwedAvee- TRNua_|C35QOjcr zzu^>J+>cV{jJ8_L=$v>_pK+-wv!oxH!tNHaH&3h{g_);D9>IIk)W(C+Y&aU|Kwxr4 zYpHIRf!76FS^qu*!60Euk2`kwV$Zwqeu1vQ@$aq{=vdmle^?GfHZPCd3bC$#gSn1p z-GTS*sbU5v;poDfac2?|Uk~*ayZ0-HS_RyHbYC!*6%eiZ%_gYR 5F zc#Bqidh^xd8m=o^v~*w)yr0BKgQ9;;Kpn{J8V>%#uCcOTsv=c9S_;i?LH#$0aLGSU zq>nFeup$I{F{n{Ry|nN!NMcjmum3hS1lI-z=3b)WH~~oZ-1$Jk9Jdu)*+<6@l^!p& z>w!n_4iTwy&g5m}T`h_BZK~yu-1!)+!`89x>G0)r2LdnOVnf3Hv(e!WfFZkIZ%4g$ z82S|wul*{#%W`sNp|&vlCus4yC0{(Qo?XG+ @LJ3VUxn{Kg zt}`qu(R{>e!}XfN>nat}kSSc(V0`S+#x~Fl34gs8b?{=cit~|6-k|sVa_iU7J(@OJ z_S<(ge<<)9JJ?i|xaEox&J0fpzyz{{9TzrfcDVGkGLK
I>SHGvv>`PQUl2DT;{J&l4o($GK z5*vTR3W?LCZ_csk`5<&1DXnIbG8}9y{xMw)DLkF4aRT Sjp&gDz1GXT^&3D*Z>_j@6QG_^LLi_I?>| z!>XgN3x;bYE9R@!f)`b(6?;ec0i}w8(yJ$2*Jx#lO0Y|RV~F&HQGcSp^{dXn_8z2g z!@vOWsCDbGGi?ebtNBbKd#&TwRdEzaKd%2)h#{_H__N4M_lytUe_fW_rIQy+E+@Wl z-MG6uDolJerSXLC;Knrcse#9l#kD=~iou-RkapeahIL_0niaMy!@K5F(>?_VmR`%* zG@5IawxO5}QYer|MO@mt3Zo*nzaHG9<=7Iwj}W!ap|^hBcnny9ScA1yZT_kf z=3@|1F1cucoy?Aw-cy|ssV=d{;G(iXW4L3xcd25M>drITh1kDrj$FpAyMt14Y}L{8 zM!c<@^p2h?Zx7!`*<(kM%1ycxB+Vu+Na5)BAZ|qcZhx%azK-zzMmpGMJukA(IqkaF zK8C?i)-*!ot22WYrkLzlaA%ZD6U-g11!&TFaxC@#Fm>gDP_FHJDxI1{eH NN*vw9O2#XdtC&0^ZQu?5B z99rjvD^9zkm9x-Q4sFRc_WJka=SDBh0CONWT{k$d#CKwa1cnnNeMc6w!2)1r#^|ep zez^82vG@K`d=ih-9X-8|=Xld16S2QJG7!{4k;4XRb;pyvE$i`W `HqfhnnW56c^>pvcp=D zjBwDQ)voqyGdS+`e6*+3r=UG(uoBHRL7Hyk>fw{0JNm_-U8cO|sA-}`UbB#F8EG09 z$L!{DycUx{r{5K=={MHce+<4@M 58Bq$bWi%#@AtrL&ZjL1|DU_A{g|Nl193{Eu9JOrn?4|lMi;`YsD6~ zfTk2CnEI=vDRYGHlX#7OWz)d)FE2^IG~p%ozU-w(Ec`9g^KuT|1uHW=_}9fAL{hmO zU1{VbWAlvkeb*EG-wjgxBg?DU{l?uRIon(p$mh$Od(5P7QBe|(B%Z<1WQWSP-~3e{ zzc}eey>lyk-sXAD)Vm}4-Pz9l3O|LysdoVQs6<>q^|iRlV0!Gu2JueaC--y7AA>v? z(m>w2YDWY4e`~Py?a0W#&1z77YuDG;drc`_`Mzm~lCUG=1cqofc6&KYGP4Jp)v)k) z4UQBrNqVZ&80C-L-sC}}8LIZTEwZuw$fF1>$nwj$w&!yPq}rc+=Hw%{K61Zg0e=Ee zsZ4Pef^oW-!nZK_?ahOC3K(o{`J?cu0zR|PtbXPFR^+Fav7HCtO0F8pk1^h#(`I60 z(1BA-t%<{bSFuH1CY)Z!Sfo}>z7y-Zs7hb&MKsWwiQy#+;|Fb2 7%W!nFHtuDJ$9638!)41Wg?VqQtqPb$O$j8b6nD%XMK7OvdF` zjokj^#m$HA{T#d!;eyylpQj7;Ai`ubtmJuNX^Ev3O& -~y@R<{AKI1(q9U%zWHUY>tQ6Z931{h}Ep zRc_W@hdKI}Th|oAEhX-b5sv$|h(-6l@TYzdO&ylQB8-GlVIAZ@322{_O5S}$Z+3aW z@@SNF0vsj-|L;u)fJT5ckp0#PYXp^rZbC(rfC7Jo!N(O~)JOpuH!t0EbCUidP@w== zM8Cwb6;v$|4% JI?X@?|Kl1O}u6LKqDM3q{cc$x% zG5wHH^m^Mq9i8UacIvS93;z`S7FluU4uL9L2GF~+*2{_l3Q!FSG0s#4Sk+Jbk#@6P zFWp~!r8Mh&ahRM~y^G9sPzzo9;c8tsy;8kZK{o%u1uKmIhxWTO0l3|M6A`U2vjTmX z)iqh*p7EfvG`jb~^;BH&339_ ZRYBaA zeYerKqVFl^qx-b2*2jC8q(QLcbS8+3M3gpi)_Y$X?pMS;>Y4P)* g-&7g#Yb5=&rSQ{p%FUUzxrhCnS?G2QZSn z+FHvcuf|x$L0aQ@PPblbzK{e=-uKrr1g_*5LoJ;M;j!CdcsHaxt)INW%)?#g>o$1U zC&Liv#s_UL 9ur#%HCd;Gh$S z49X1Go7p*D_3LBVQ}=9Y_rMIE{1+#KCAbd(cDNP+-cia^-_~NdW5w@q=fXQKX?Tip zR8?EcDxTqjP}k{MSdVpWMo+NAfo~Sy|L*tT%d#-cSBkg;d6H|dWf*Rr%Q$L%{>9Q= zs_OZ^9`jNsAJjJumyvE9H#lwo;kCfQ`;qV6W^ctK9JyKaxCRPSMcL2@P9f;5A9dl_ zHB_!Gx!9K6DU4X7t!`f(E<_>V_qS%yQ4Mfli W+jO`_rd}jIX7Q`(RXPB{)9FQuF@{iV%nh z<_JVj!K?(~mb?cXsmi+yuBCpRA|HBY$qcCIz|AwjPDwk&+h!jb^!Hu h!7dnSCT-vKyC zfh=ZQTt%(pF%CPoI$*L3nQYdM0BQaMCy^*G2mX!YJ+sFv< IuS9;`I8$*t{3-vK1UUwPOUEq!9MOCtIJ zOkM`M^NuqoLqJVJ&@?*fUmyJy>H~(lWiUPP^V(Z$GcKh2N#}RrK&1AkE>B|H)|?TY zFCgDTP$NhqQ!mZ7MzAvqM2zTtf&j3pKz2hcCrr8*w0x277ygipA~OzQj*Wsnp=nX~ zf$KN9sr6?P(PKEw(I~S?9n|Zr$R8BymYRTyq!^o^R^7sm<@6(!Q$oQ`yVv=IljtI5 zhhiA^zi{;0U5$Kxn0nk{n-ee=5v-DWV;3wQ;yew?xdedMW#9l3t|I$ECqAguuJ9%W z;bPBsvtKmc?d5DbJRXE`mvc9&euBh2BNPP$;~Q7hp!+^)z&A1##T`ie8q%1|RV5URv4-Q1ge=(55~cSjpiV zPq~!Wj+KXD9PdoHj{d0khU9{o5pKfzSG%KtmoBEKSWs#Q^=*IS%I+EL+PvasQJ+LM z-R{UD+Xk1~ON 7ao2N0Tdhy^H2RRwKRwcoNBN?@8TUcqp~PuG z{IiWMo*RJFHPE3{Xteb;6ri+Oj7J1BU*RH`)jRrr@*^5Ow`m0;Wx}8DYy#^&!=>s0 z=gtIpl>}@@bSV7+Sj6pXm5uH_ITJ4jDNpKAw6_t40{sQIegJvPh=SZr&!uuz D04M^=MxKm^ZD*{f~4g0zCR#M}*o9T7vJM8)OCE%3%?1CJ;Y|^ibhXOP` z8wU539^f^ny#EB
RzWaXMy2P9By3x`;$BZ6q; z_v&1mV@gilX5B462gpZjrCdv#BDZ=MmD$G1_}kf #}Rl^#xH$7d6QMywXXud8io0< gp&_u73fzH1D$k#C+p2x17OyAZ<8p|~k*Ocv($ Kh@snd8>$-Be&0i38T- zpvZ4yLrD20WurC4yf!nefxySy`LK6O%P0way30RF$LF+pZZVoObeNJ4X{iJpwg7FE zf`5R3m@ZU2@P+r7#2=8*tAC?4ZW5Az@ecsVx(V<=`{KXGj~PvFe>|O(AY6!3L81bW z=l>>8&TGF8^RrTCaUJn|rQrOdZaeM_e>9yK;0_9C3M3W*nUEV{hR|4wL^G?WT8cDS zEI=l|WCb-5EGN|G>lPzPa}r!69>-CJnS=2w#hy=TIv*Q)vR5gjUSXCZc^trxF!{C> zRm^F<#GeryKsNEW-|c>vDo3zwuviL+7J9$=?i4j~FZZ27o{fweb_T9d0CZz*r~^vI z;6dCZsiVP+M_A%+dev9JwkXM8I0o-_!3Mc>HhL9R5anL0IfR)rg+Bo9!8Of3RY_@e zVssIErX_u5(V}QxoIHQDH6hICNSLhN^U%e3xn{+!+R(+Lt!1<0hKyw>l*w2E&Tgcg z$lo3(D2X~&T(Q wgbgQ`{EffF3!o5*6Md>4O-lSohVe ~2%zn-ZpHDhIN zo1N}go7L<;(q1O^A G?Z4ZQy?a#vXKhO-r*FxnGp*G3T?Hb9nd*i% zG-P&Pp6+wnJoRc!XWptbv^6Sd{p-@4o3BGIaW-dBi-B720mU)M`}7xEA|_+g(G$UL zO8a_5$*M!_M4gRgovNc?RYR$Z)dhG(owVGwl7qbbtqE~oO3Yfl9!Zc_NWl91g6Tu~ zyv8!yu9p)*B)ARhMM*sT3x(;_qXsYj>&vJw3YqFhf%;@OAE+aT7QZMaDMwpNKj6)H z#AVIK=0v#K1}-2)WbR)5