From 8fe1b57173a63a58617719c18cedd180932b1c32 Mon Sep 17 00:00:00 2001
From: Johannes Rest <johannes@jr-it-services.de>
Date: Mon, 10 Aug 2026 17:23:23 +0200
Subject: [PATCH] Guard Checkmk service renames during updates

---
 deployment/INSTALLATION.md                    |  17 +++-
 ...ndpoint-Reachability-Analyse-2026-08-10.md |   8 +-
 ...k_Checkmk_Pulse_Architekturueberblick.docx | Bin 276983 -> 277060 bytes
 scripts/generate-architecture-overview.py     |  15 ++--
 .../InstallerEngine.cs                        |  62 ++++++++++++-
 src/BizTalkCheckmkPulse.Setup/MainForm.cs     |  22 +++--
 .../Properties/AssemblyInfo.cs                |   4 +-
 .../Properties/AssemblyInfo.cs                |   4 +-
 tests/BizTalkCheckmkPulse.Tests/Program.cs    |  83 ++++++++++++++++++
 9 files changed, 192 insertions(+), 23 deletions(-)

diff --git a/deployment/INSTALLATION.md b/deployment/INSTALLATION.md
index 38caa69..4aedd7c 100644
--- a/deployment/INSTALLATION.md
+++ b/deployment/INSTALLATION.md
@@ -28,7 +28,22 @@ nach dem nächsten Agentenlauf das 2.2.1-Fehlerbild `Item not found in
 monitoring data`. Nur bei bewusst auf `true` gesetztem Opt-in ist anschließend
 eine Checkmk Service Discovery erforderlich.
 
-Vor dem Stoppen des vorhandenen Tasks wird die neue Version separat getestet.
+Ab Version 2.2.3 vergleicht der Installer bei jedem Update die exakten
+Servicenamen der installierten und der vorbereiteten Version. Neue, entfernte
+oder umbenannte Services führen **vor dem Stoppen des Tasks** zu einem
+Sicherheitsstopp. Die Installation darf nur über die Checkbox
+**Service-Rename ist beabsichtigt; Checkmk Service Discovery ist eingeplant**
+fortgesetzt werden. Der Installer zeigt dabei die entfernten und neuen Namen
+an. Eine bloß geänderte Ausgabereihenfolge gilt nicht als Rename.
+
+Beim korrigierenden Wechsel von 2.2.1 mit `BizTalk ACC ...` auf stabile
+`BizTalk ...`-Namen ist die Änderung beabsichtigt: Checkbox aktivieren und den
+Servicebestand danach per Discovery abgleichen. Sind in Checkmk bereits die
+unpräfixierten Services vorhanden, werden damit insbesondere eventuell
+vorhandene falsche `BizTalk ACC ...`-Services bereinigt.
+
+Vor dem Stoppen des vorhandenen Tasks wird die neue Version separat getestet
+und ihr Checkmk-Servicevertrag mit der installierten Version verglichen.
 Bei normalen Servicekonten prüft der Installer außerdem Kennwort und
 Batch-Anmelderecht vor der Umschaltung.
 Der Task wird vor dem Dateitausch deaktiviert und sein Prozessende maximal zehn
diff --git a/docs/ACC-Endpoint-Reachability-Analyse-2026-08-10.md b/docs/ACC-Endpoint-Reachability-Analyse-2026-08-10.md
index 0f602f2..40875b3 100644
--- a/docs/ACC-Endpoint-Reachability-Analyse-2026-08-10.md
+++ b/docs/ACC-Endpoint-Reachability-Analyse-2026-08-10.md
@@ -71,6 +71,10 @@ nicht netzwerkprüfbare Kandidaten. Version 2.2.2 weist sie explizit als
   `BizTalk ...` und passen wieder zu den bereits entdeckten ACC-Services.
 - Nur ein bewusstes Opt-in mit `true` erzeugt Namen wie `BizTalk ACC ...` und
   verlangt anschließend eine Checkmk Service Discovery.
+- Version 2.2.3 ergänzt einen versionsübergreifenden Installer-Schutz: Der
+  tatsächliche Servicevertrag der vorhandenen und der neuen EXE wird vor dem
+  Task-Stopp verglichen. Unbestätigte Renames, neue oder entfernte Services
+  blockieren das Update; die Differenz wird vollständig angezeigt.
 
 ### Korrekte Abdeckungssemantik
 
@@ -131,7 +135,9 @@ Endpoint-/Namensfix bewusst nicht grüngefärbt.
 
 ## ACC-Abnahme nach Installation
 
-1. Setup 2.2.2 als Update ausführen; Umgebung `ACC` kann bestehen bleiben.
+1. Setup 2.2.3 als Update ausführen; Umgebung `ACC` kann bestehen bleiben.
+   Beim Wechsel von der fehlerhaften 2.2.1-Ausgabe `BizTalk ACC ...` auf die
+   stabilen Namen die Rename-/Discovery-Checkbox bewusst aktivieren.
 2. In der installierten Config bestätigen:
 
    ```text
diff --git a/docs/BizTalk_Checkmk_Pulse_Architekturueberblick.docx b/docs/BizTalk_Checkmk_Pulse_Architekturueberblick.docx
index 37e7de30f679f35bcc673d4f2bd47e0bc13ea9b7..d61488eb65b9761c849780721ceb4e91d616d934 100644
GIT binary patch
delta 11384
zcmZ9SWl&vBx2-p@ad&rj2u^T<Zrt77EofllF2OChySqzp0>Rzg9fF?9d+vMh{l58U
zR?nV2YOGq_t7>&UkGE)pcW6jTASfUf004jkxJA|>Z9qV}MK+v4kV1gnA`$deP_&oV
zApihZC;$K*005Xdnku<CI=Ql%I=Yy%c-q@#CCWRjvY~}M3PNwka3`0NHqrsLMY9Ii
zsYLu+rGFF4$C_(UP+!qDH=GcAr&hL)%X=pzG@5_5($H7AJ;;>mR{mOtP3#RU@?tGf
zPANo(l<^rd=ZNWMIRIamz*&n^QR=fA6P$}k;of&dqEMe>ua)@$%z3T$L{w7U(i9ek
zkf?_;szuSVcthNNs@DM7FG>jn&{h&)oU)5a>j2_->_8tQ0iuXRsD$5?F16)|07-T?
zG7*B92C4ztDhTSkOyoS5Vyv|@7*ADxoVb&!1F3C`1{rRN?_mB9{C9UBSJG+%*W;YX
z{=#ZJW@H}XIga;6GW{r)MG@WK`JY#<MZkXVVma9Qu25BV43Zk3+-`3wtL*N^FR4q-
zhplzDDTgte^xpwCC#<;<Y<qJbB$HKkG2=?QbrkjRos1?T7^ec-sS-vpK*a)t@MCqs
z4nMf2>$3)XV{pqc_AD<QzE%0t)}Q<Pg|33&MGLMH+o0@95j~_Ay;ekYs`kf@pc^X1
zNVYwqeb}#GGId)V7*Xt+2evZ<r7j-peldLWt3)}z$buASNp{KE*7BlbslmCG$tuxC
zxAgjf8`VkIfNGxM_jqe~pX0x?wbc_rN%mBNvT--I34`%*n==Q7`2V*@13ok^B+B1?
zF_b=DLQ4$*?D{7P!Qz8QT?l0o4}7yJqQiPDCIDyv87JEX$1O-~DXO0or8ArDBN!t9
zv=F^%^z>lhsW|b_0YvfSf!e}{1b19++YzT{qIZJxWB3R#e2>NkBE2jKZZCAi33apo
z?H2s!#b?u0Q;z{1#z%ObVLk^BwLOn9@O?wEhE;dJDkm-SM=$tmC)<{fu<zDMNzcct
z;k$X~Zs_{bq3GZie838RT)Pir5FNpJWp(+5|4VH7Q$C|O_Cvlb&z<Igfuh@=6W*i?
zn=YM-nUZ*<4n6v(HYnOwm$^u<AEX<X*4?vBq^I*IINxwZZ=!#qhftFAjvCPU(gxPl
zqk4=O3os0DNGX7+`1>(`!+z7C^qQF8kYx%YzKwSIgwkmV3sdX5@AI&8)ogn&GD+$a
z);UFX&m3kkX6;##;KR1XrUb<<dw34YfuV(cAaCiuni!9jYPugre^cT&eM%I%5*qNh
zm+vl-@_WIwo%c}!lE$w&=a5f)6cdj!-Ny9T*;vrFe6)hwe8~qqlZ502F06<9*t~Gy
z0>cExr>!35=XPOcNq8x>MEpDsTS<dwjy>5Z(wswy+HN?cOB9a$dV7?IIl#Y){#=Fj
z<)Biw4n!0<L3cxpRxnl^+(q1yM;Gj6WP47n-<jc|Y^y0sV-p7(oWc4qHevhhQ4nR;
zWG80VtU!U?GP<F+SzpLh6CHbw9o<focl)mIX=1Ft`W>+rI$fKRzW49mPq(!2w9MF^
zQ^$9gRDAF#9u;3+bbCxxI6A7g+#!|+fNFO7;A}E&V`9W_ch*&<gvp4GeQYv0Z|;<z
z-$&wq+vB?R(;>XAR&NFP+#b)H(N!FSVvdC0v}3?OSZZO{4(}*fkhL`vZ=Z#4+puBc
z`$6iOy*s?<#4Iwo_05=cuh*g+O3RkK-y6z;8$4BdXx}!GyOeYyn~!qROCkhy8j?7I
zBK?HY-!C6d8*tB$b6%uy&v%0iS@2)LAE|W(U_BE3AH;P72NEwgM|;5PJnd<Z(^Sse
z{1347I69A_N?4Fw(6N2xtX?Kx5OfD;1NV5yaiu+H_0&ptnjZhgcVZ+@k0aD&uQU2=
zc43d&amhE>uIDvS%_YwQPfK;rozDF;h{xQ6j6x{dMBAi_7cYSe?L`oFgFZCG?dXeu
zlZjRed${(2%g;`yBTs=^Om!h-DD)5v3sG?0#$AJ1i3SSC=MsCCK9PwZ6R@(2n;j44
z?M5C>f8@-o$(0u2^B>?QWL&d~R(-$R97x(LQ!Os?EbyRqYf&vOlF%nKkX%ty;LA`>
zhnDg*pQlDGH83?W)zj*lEb>^SZkH2p$9>0q#3y4}5${_by-SP?K$@MpQu|pT1Ka_V
z8KGaIKn8GY^(y>m<=Ljl7~H#JM=^`nKu9ut@!ja74flr@Kv_Z~E;b&-R1S23jOJE1
zmU4<2*Jnr9lO%I9=noE#9?veodSyW>83;Nqk-ifZvZilB<Qdsho)qFwiS!|E%^vT&
zE5NNIN1?+<MZ6AusG;5WW!YxlGG<faCs8A*!p7v{9gk>B^}N47|0>v9<MafQpMQSV
z2`%%Uvzyn|<r(`~^?A?a;16G2nwJCx4#zJcJ%;Mdel`#}aszXnM1k4Mw#K4L*YhhV
zkpPJSEQze?30)x!*4QksXNrF~)9#`k<-7oq$kpe=Ll+3MO7?8U>Y_khij$<T^J_So
zvMu{`)$B`hU7Sib6`&f4rf=(;NRz$=4bqN<r8aeUHDzt{EDyAVWNr<z_Vx&nf1@&W
zc-kJPRK9Ow#*ApU@y;hTlfQ#9QJe2*Mz-+)BQ#D(6|TbIqk4v}!ek<{XFEw}wh5(*
zZ+bPVH@7uwGmmt?nmNMwmbgY)*JsE^Xlq|110m5~Xl@*ZGoI5GpH2oXW%Rs#UA1>+
z9+meI^^60%B6nIhWwEe;h9rTO4&Zw4A_HwkvjOJHPc?%&r&W_09BmYaOm`Yij(dDy
z<zQ=twnThrN~&llRY*XE=Bc`zgcl_w4^hRPlRY7-?y_o4CGMvZB}MIDGRARx!COr>
zAzZtDl@v(?F=8ZG<%i@hCZAx`6F&1Pvx#X~n5KWiS8P>6Z*NTMnY;etQ96q~3#3_y
z{XtF|oSm6o`6SVIdPbDHnrMAGzihSw-k)&Kq#PUaGo58gUgd^Ef!5Sx?~v9G8)yWv
z@bf3jJyFK(!plA*Ea{=;_uIXvsZa``3(D8KO7RPYMNm+fnk-#@n}BB0{Po~P1$|jc
z@(P4$TS^1HeLkbO6No+?fXhFYlA|0Sd;awC`{?s0Z4b(lsq>2U%wkvgnWpx1aMkZ_
z#zQK=BoPjsCsB=NVplTrGe9wT*lx=*!-sccWs_f^c8>>@z(t6E_p(6!WgnO(!3<Km
z3AJy$KaEzYsBNk1=L`UFy!#)aZYpwI8#K6Z+k)C$RGi&C*h0tO?@axzQ)5jqwP<Fp
zc|o%^+Gh=Iz~SYuGdSy_YQ_!Vh#z_=UVsX;G#x|JMMS0u#RL`dWkc{QY-X?Pqo{Xm
zZ;vHIXbB8Um6AKr)=Y3-k`^hB3NJxlpP^Xo@?AQMCbd?oUaTm@O?X5vzT^&qhCLl6
zFZNch5mBvBM^G%~Ht{CZ`4%=?O7GV|nl%j9DUjhQTq=jOT^a@vNwp6cyAK;(^~ycA
z#0baethLrS_l>gz0aNijsXeyS{HL&Zw%FJdox}oSm!H`uw=j|kU%-Pq>Q5>*oGa*Q
z@Zm3bf=T<fZ2wTfs5gcBuEe^;%wHQr$nAEWlp`zGo~)3|wes#Gz3|UkO0w_=<NQC<
z8qcDPp7|h8O#rtUgM3@yOhne>dXN+{K0LS4BA!QoIPhJro`Z>ocaC-*j!57OwfRh<
zGCen{ea78)mwe^@<z!>r+NeL%9t|F%U8jh9(t#0q5>ZXqkQ7Q8l_-1cKYtC$iv9^|
zv-72&PEzs}N|>Dz6fg&wuLN+Y1hJW9l#ApC3ZT*`W~}8@GG^_8FXe@Y1g~m%!@2nY
zfq4kL@Ex&>?|{fYS_Cg6Z^?-WY&3w7;ztAs3pXw!Pf;{6?DybIkY2gSlV3248di{v
zu!J%v=lHHU6D@kVyPg7%7VENW&Z<cSsS1g^+cdwO{TkLP-Pk~PGtb<T&gN22b7^hw
zy0;G{{Em#lb#e}PY6os%0wq(I3Pg=qi9Dl_1zR9CX##sn6pdGV17afbkGKpp%dS`m
z1nHCW;RG|MSn20N5BA|2mwtt|Qa_*IG?l3K9WG!C{5`W3CvC}jBrl8-%wqPncko`+
z)T93V{StSTeg}XW4mHPkhFprM)DUse!m_zU1bZsS=;I6ix#_w;w=Bbs+1G$&`)BQ9
z^wjh4+WZgik<61legUnOn;QpS5YYnk_ak_lA|ZFDWoU~MZV`@hSj6uZ`nrZ3+p{fo
z4{dycS4oUq#cTnX-&0L+J0b{rpOKYat;hp#mGEh`9r47K?ve&QV8e(_k&X^imjDKM
z1`2ub3aP)rnZ*1y)9}Q{fo~8ji+I)ZP`!)~UR$~6SqonI#BrAsm&T8Rw8eZGhV1mW
zZcn@#&!8#MKoS{yHPh+&9KVx-Nr7O>U??YfcU$LgvDK(BsnN<80Lr}FVb56Es%xRK
zlXxU%ulq~Gz|M?ZJ6KkJ6HQ3lFg|E-)1cJt+eI4q3k>hiA0zrXtNW!Em<}5>n-tEB
z65!k(COn0zCXImwBQ5yo77N51@2`>xj+4?i&wd3>>to;d44FDbk%E_B&8Ez5Fthab
zN^ES;t#+-*fAuJ_7??9!AHYsfhP-HKNy$<0KA`BaJg&pVbw!Es*0*S^uCG_U`wV&2
zv$WZQtJxZdjb2ZJVsc42u;t?-`Om5R(SwKJBt<XJudvLKLD~ySj&|nuD7b&l$CEdO
z3Pee=P;0xJG`_#me_z{oPU^CLI<F6P_znxoWJ(w){C?7s0Dz894IANy>>4OPn;*xh
zsN<Q8YQU&y2#VSr$IvycnKH=k@^;l23DsQ!7fVxtmguj|-k*0rD)$upu%g)rxkVeq
z?${}+25<s)Z!!8}C(TlLMROEekDz>mJE=9h&^WyIC<u1}*7c8}<8&Sv)M1>85B>DA
zf`sWT+wa(ZGZ5BDG2QzV33^DLIGk$a{0KiAdkwfdC_M5Dw*ndsau~;Qx>C5h#`*QY
zwK$}ntzKar48$=KArWC|UBQ_`@kl;`v0k|~{5`u5FL6tx;OAAFwA^CM_la%->eNxH
zb%Njzz(UAX`Z7D=J<+1b48Jp~2Su4xU!f4^XTjsUYpnil*<uediUa3XIocX>IG(<*
zuG%JSpG2*f-Ch}z(zqD5VwYdV$C4GmvMg{CxU4GC<M46xJ#!AHT}`?Ug6*~P#CnCN
zN8h3lKD&iy38;3FpX>G^V_XCn!i$U_8_sDTbC7kEAIb~wpzNYu^hh!6?PPD<XpWcx
z*)Fwd6SE-Q0zO~Xx}{RW)2)|xcI^#&OVl{icZP=`a!(n8UrRQ?7dtZdi=<$%iUw@+
zt<vX;3Wp{2<m&D?9WPIXLG{M5Aazv7Sr2uX_#EuttTyi5pJq3BG%c(84V<Qh$Vw6z
zf?%1>_-b2x`nJ+(gsz+$DIxW4ius~%p_%<H2rr`tyH<qseIVCDmN^+YN#xv-DHeR=
z92=XOyO2%FULcCA>Xbtq?_w#zcK%;k(x)@?@#L0t`4$z8xm;x)&rYC=>mwWx5!bKo
zv$EbN(6wa5e+FIwI6}QtV?25K4}X7K_xqR_7N>R5V#59WDzMkJjrl9<9Zj#VVryy}
z7ca!?ce$_f0JWQ=Io6$X?}JJw`f$(Hk62ns=Gq6Ry{Gh1;tLO60Zoz)FqgMA?3v<d
z!397#-`o?TCjd2*ua5tN>9ttW+h*gjFb>>DWpZiVN;-j)7WAbnIltogoU$w*m#7fR
z&;NHHp2ivBagL6>h3(f^goaHncrHiG7h0wdf9&Lus(q0ZtVfNgs5Y#u*ef=Pn0fc5
zB6<}_Ra$>-98II@yD}<q@X41?>r8-ZI{b!-#bHW#)4nr|dilyWQ{*xV`dtVad|TW5
zP?9Zi6!3>$%*w-pcZ#L1-P*@=%u5J#cU)GeCk@?m5C#4z;p%<h#<-%Rs?)QUOU*nt
z4}uG;aN8jTfD-?~0W|vj%zlyC*gG@ClLIDl4UjlsEb2)np`+^tf5GB$mM5OP6Szv+
zBJXicZBRuYEcV`wWbn~Pa*QQ9?lmWY)czLj^P1vPJzN$S2ucY9p;&tN>5Gfd)kX30
zZfmZY()Qz`e^m3~Dk_xidCb}cl&Lu18jkN*zu#=Sl(-^<N_!~7Q}ti;cJT?au*d8h
zLkMy1z%Ec`lF(9v-Q7Y0HWH_k@NK^p6!a1s^Q;pwlmuqs7<DETi*z)u+xEvNaOoQY
z#U!q5^O%lZM|4kuT-MGuoI*&(>(G<zc0VSsr8>@vF!>BTLGj}p>RNn-uMsJD)C&T<
z^qApucdlP#1ZIV|dDy}wpF`z`im_d7R;O9Qme)se_{Ye>4TXg*WkMaUPFlba^`n&j
z&^A&I>(M-Ys%O1cX}*In*K^b+I?}>H1!FxZPuyuagJ1;N5@i0qLHwh=o(I-R7vF-q
z3U=Y=*(s8gX{KWQ^4H_yz$y!*A76y=Y2iCBT_V=Vks(7_zQQ>?b#+7?Xb0?n4~iBU
z&2ktcFN;G0J9+i)l0m>RPUe6Al^5qdtH@xI@YuHK%xR_tgQvy9rG%1xSS31=*ns8*
z!~3F;6$tKby(;RhCk87rtrln$G=XR98EfrG8?N}H#vM`GFCN5FQYbs?UA#MA2~(k9
zUqg#vntz_~>2I6u)=(p-(=Fdo@(TuQmC5-g3BU1z-%5@eRy45HX3_3Yk8nO2p?iLN
z{(YxsG|UlxO^KMX6qLh2jhE@Ey5pBv4eF!~GB$bas}n<#I{;-auN4Fe_mfI1dB|X&
zgc9;@2x;<i%j9Oo2GpjCP}y|fij%w8x_ZXwN)ieEq)2}ji=U8#jYYT0j=+nU5WD=t
zr}HHXycs7LCw1^xt@u1tIoC>i(uu=DfAZ?>Tjuusqb5Ag=#XYV=d!jz3#0rS#uHOd
z;Q}6+zEg;b4SH&?Uhm~xI;9cG&ik%&$Fgnb80#_MyQL1ND6z@9b3Jn1K&i4gM&N<U
zwN<|L_cOyj(b|nZNJ~v8<C)T7DLWvN7FgQ@94#<wyqWT~0h9JZzBSx^spyIiFLDb%
zD>I2tg@^j!^JPff*D-E+a`**uNLD&}mvFc;H#``@tM7aAvU$0qlbqI43b1|At8m|m
zC4%*1PQ{(7CLjCo)yH;pRjIlD<kd1+R6Nv(u_Y*JVBdb2-+~XGtc-U$X_<lS{%n2K
zU{f_Q$=rP-XKK}~p%Tp3>r)t#bQOu&UTOvrgT+Zml{Ifj7Pc$IKPQN6n+I{Z#5nkP
z=HJh4eyS)!UP9xV_Y2zjB%3^=mgEGAcnsD{yhWOR;udSFSi0sU0@GVJ<smX1=00;R
zfdjt15k)bb5)!7{H$*X1lInys`HvWDfS(I^WC>1Jq1#e(*7nkmxmn=2OL~#Kn2w{8
z-#Mkh)`TxKRi534#ed}WRO~|EYA0)<QR?tdmM9R&4Z4$6=&ZU0IEM!_TAVjUjj#yc
zzLD?#me$mvAs&QdD%u4Oz~Ao_JE6f22t_)PzFn6MhJ4fVGmz04PUhlfb_#^!1mj={
zynPm*6XNn4b@bkh@h*Nlg|~I@FpAw%n8jMF)yg$`I1W`no4Bu2R6|8w3J0xTcC1Ag
zK$Oz{F3@p`T=P4*4?GK>xz&(_{#=BwZ<cch?^6$?i5zSdy2l?9fGbbA={;pmQa4^R
zV=U5&VZ-k=Z|7hxEm^ZJAxiiN1XnB#3x>>-A&t%WamcZ;j}G7(6Kx|I%@FL=8#vj>
zWeA5PilbPoU}LiNUlK)Cc?l=w!{uRXj0QC#Hh-F`Gok0*(Lw*<3N^~ce6)*n3VQ^a
zQ=81NI5f5dMDD96>fzqa4_*x6k|<{L$(SCrQ5XAjQ@;AcRQ85D5FrIQf%TsFL+BIB
zVpu#=DMhdsR(D))OTN2EztRLI9Q)&+q&P+68@R}|X6o5y^Gc%<xmZ4gzFKDx)sHCq
zceB!Ayps@yJ9%L9_J1?0R&r}rVhHiN$?YXjSmz4`xs;eAI7qi{L-SOfK5@;v>fibg
zm~L^X4vpsA(DNSR@RVQ<fdh1T`9jcLD>mwsMBzGDh>g&{hYRf~K<|HtVBt$yQ68(<
zz*>0zk|0K3LvYx#1}vK?D94qxDF`G-7_Z9zmA)+cE9YU9eD=GCo{4X)yrh>T3`C&X
z-PThcrsYEzqnm<p$69HWfy{SF;C0rxm2Mw8z8@L_;V0|+VU&PDCordNBI^RriIZGx
zl&4Nux^R}-m6C;IAhb7t|I0OVLeVtHYcFXKxBgtlrNrAs+KtWJ6o@Z_QTF*8#)EQ}
z6&w1PmCx>o$R!Xyhf9hK@=k;7lgxV(2&HXLdQ7Q27<Y>cyS`s{np%*=AJwfTF$j!s
z*8*G6Lyfm^2y@M93eLYwo1sOKbxC?!5a-m#*c(8xI0msfg~coQLGHp7@X-Al(c%6K
zcl=9a#UZNQh1r5zO=~t;j~>m9z&$wIi)Db0C^TDhCPJ&uizIO^hL)grFeHu)hZa6G
zf|UX<Pjo5a)=7trf1R?jKh_tq0*|UTQqP1JAt+vyiR*3`5nQh3<i`AdLA0RyNhw4E
zF;MX%!t<*dVL=|@>=N)D=4b0!@74V?8y%9#8lf>YDH?+?(7$=!#-4<DqwpR9uu{Vm
zgo;Y|64Bj8?Eerm^mb6WoL2+|X_XFPCF5YQNJJ2*0c4Uj*+|H`wt}QETax%zj9`nH
zgo4N8-x4!z38tF(`2|=%(BK}yK;#+G6uf7OW=nOYq!56I04a3ErEsv{=as%km6jBU
ziY9J95wZh3D<xckKD*!MGkIpvDt}(|nVo`awUl<L!GBtFbv|=o>IlN1gj4WY$f&f$
zNy~zn*$&o4$G;8>tUb)N8pH!5)*(9c>sL$TG1!nfgI9~MH5&|%LLoQKKlgXot1S^;
zkgt~sxJhb0@Y$$t#r+8A?29ZZbDCc0h0mS;g}%+FffP;J7n)7!Y%6Xu01P&YVO#C&
zH%jKmU_#Z?v7kVP>7FTiXGOj$X)gMfW{e9iH`B1Khl5IC(n6^Q_IcqxIZR<}R<(B}
z@2}vNf)&R@p1*)zbtPU9OjvR2WZrG-UbGTw)GN{_Z4nY!aYqwbP}{o<JkX>PFWX;S
zgGlJaI>#}0s??Wi8Zpsod)^N}WVfH9<Z}-dUy$Tlyy#l=W5N|I&uCm!w8pB9fVb4;
zTcx(aNC=HE^de%`>_<B7Bzaj=;N|(3`2ECMu%X}Qw{X#^_4J9)nbnpr7y?4e+cZTQ
zY-cxYm1R+qdi@q9wCLp}U(Umy=iDJ@dBB2wttwJLJRy~|Qq51Iw8<Avnf~$i!2#$M
z>e13!<7lrt9YJDV3-J=M^8K;*V{$J9bJ@-I@)t>#eOMem2TNZdLQrkS6Pl}E3;%qL
z1Y3EWQHW$+G;pjUc9;<wp9<M6`E2VT+O3({sj_HVcY}||wE_ivz`Cl<mgPu@FrC#@
zzY{R250qA!SM@3eGhk`WA=@+kiZ2&^eA8kTD~A+*`sKkRLfOT(EHGH-$hhG4s4$+F
z6kobXKW`E#TJ^+!<E@cv<YBO;{Vg@535KG^c_H%zJ`CjR7|0n|OU)|6=u$Lw8-DdW
z94M{4U2=9z!B8bZrMcd7(?Urvw{JvsnB*r`SiK$8*Quwo5$TwckqO|xbt};|Mdo_J
zb3~cwlAv61Op0us3L)sLr`lP1MLs>wZ6FSy%vM)-S}dHL)VBAHt*ThI6Wla$0!Q88
z7apPBrG~_WE$CGI{v;V9@7$|<KK{#6cCLb>3`3Wr48xVU!cvvGJ1x7!7|mjKHhZ*?
zHcPM2tf|Sp(Ydj91&3helC-DGF1z!a$JO}nzVX@A%U^~$jd2@IQyGWnh6eiGFI5iV
z;l~UWs0vQc?3clOr&m-L-LdUH_h6eY<!Xmy+xhX61qFN45}hiw`<@oXtMzYTKZbmz
zu7{pCYBoY#Z&v*}e3giE-rHLqfripnsgFTk1yKd(4Tgq3HSgEs+HZ!otNnk5OP^~T
zH^#wpwwlD7748e~FQvO4IXjuLKTr*hTB*n$nsY7?8(|fE3+f(uSXb;T8^93Y%hqrC
zx{y8lN%OZYevL1C8<%C#9M5fI8V;hQhQ`F~5nFqo%@w<&#CU5p*Z;XXC{jspoBUBG
zz~?e4FHU12#gD%BL*w!X%LV#5m(8deXWdSjGDnA$XuFS@56(Kw;Z^i3R9zlS#GXr(
zkClm`GoQ#eZT#AJq|YS7U~Zw{6lZ#SVKaT4;@M$$W5`LWlgggW(u}@LKaEJAt!wp!
zT$<D+WqehP1O9f~M^wK>H?4z+h=>>qXUnh|+}i6;*q=cP>C5PkG4dx3EzX9K2B>~{
zxZZCgxnGxJ$*@ohIvhs$Cu%~#SYMK2@Q(zIRD}~r1iB02XIn>>z@6l#uD(9wz~)b=
zHL*P&HV4lO7L<&1DuoWrnkNf&aRjPH!gh8O_KQ0OP*u=>a)5uP<lr~S&a?(SW-Q`g
zH_js*cG4&!+Xa;8@Yy(sLl;BvONc1XAJ6)=oCaLCLql$O8AWGYT3yfAz?yVvw8Q)o
zvZDPexNEzbD1jht@PQ4CX|?KEV`ZI41jIqqfx;M8WkT&(Tfv;?GkhXD=<E~F(9rrg
zagO>lb|x|shzOx}RNW>$=hqgK{OHp3!y=o<RAPRc&i+dR=P*s3Sy=xuY@YWwblpBe
z&=g_MWC&v1R|s}$pcy9=3lNl7ePPbz8gD}rRMp^0d8c>*9+c~&=kU*fNi_SN)xPzC
z;|g8yH4xt^{&MBxcGOt|g-<#vHP0TEP_II)z8Q(;3KvEm<tf0O3K<OnTeVy0GhI!y
z;^R2;DD(m6hW*eHap7l6=FcT{B3^`Gsic;IfBsN*4P*mu9=^8d93*f%N_kQC1VoV~
zIa~qJHZs68+5{fZC8S+eFiXq<7P3ZZ3^G>L(b$Vex~Jj91PoYJrUS<%0MRv;;+&2F
zD%&77wz#t91v?V|VPsns{GUa=0z=dF{yx+rwJ5W`5$GC`ghrsT;ac?m*2Qg8sgCP}
z$L&S>0^aolHK#{_2G=9gj2gt0h2&f1)-nP1crmy)-b!Q~0(WK9JD_<QnUChr<dh5!
z*AsEJ$KhV|fr_I-aO8vO)NcHryi;3KQ;kB$HL{sQ%*(~by|AAvVN%97e!gXA)ytzG
z#zycVi)9H#IA!;^Busj0L*nsp>o9Y(e!?Gjs80^;zj@@{FeJT>zr^A`d>s-a`$kHh
zcn$-e0ij(5awaO=fv)zqeLVa_3`4&_G<VSEvEg9MO<Fz2udqO0h0ZFb`Qf4OT-)K0
zyYl;PELsIY{~?hS%5n+3G<Ffh4^XG{<Fsx61^1hap9DAUd!V}ZWbAl{xY|KCv#1pB
zMR<mBNRWS~fShdEKK#~MI2pImA994E-2i!TfIE_C3l5bJ*{Fe5qk=oUWK<wm37V9q
z$?J`5YjIQ%^U}Jxb(6kLWL*=(y8gr)RMEN^;|g>zWlVcYAd&Xx%$~5%M#x^<X|nqI
z6+Uz%oDG8tZ7Qvw5<=9`juF*W0z<k09)M6wNH3)-o7~sjL7SL4F}SoLXo}}b2#GK-
zLF<Rg6VWb7&nZa)v@;2ctXv3Fb_vHvA0q{EaPm%#locgi;C1nRzbY2iory#$>?lm#
z#dk?_2%P>O4aXnS6Hyof7^g5S#9VWAK4f&QP2F+A6mUJAs6zEBEqvKt4<af&=iIb~
zrI4N!>VSL6CV<s@!1zVC^%kqK8pa!Vao7RYeqmt|A&^zLZxfDh!r|d=(mmEO0s5!H
zHpV%Yi{@h*WYmb3usEK{Q`MlD=*xaym%M|ngq5o9P9(E0n?R_8G{KhKvk$d$Loe{F
z_mKm^Rx!7ENfIjb*Q;55<)OLF-Ix9@L9RB{Ju&@5naW;|@fyg>pn&hcvIH2wo)jTj
zdvk@1GDBS=b&ca+wjvp~Pb?bf`dLbWh8^2a`o2oBr%@sWuvP)kzr0CFJjAhj&}8^D
z!U%fi2D|n(#r6DL5@^E;6_JV00OJz043j#X6PS7u9k*{IZl{oIc<k)%<DadoWynns
zkUd!6XGfLPzL~jZ2zW|ywYN!tZ*NmXp&bj`)?=mqc$C0T`^43E!9JBoHkAT<27mn0
z5~mHw`{JX*@bHH90>=?Rx!ROqvq5(n+a=`V^>8w&O<sl&!+RM<{S%6YmeYfRF6@gi
zxu@NF)o4;Qu<R?x55E-5+Q5Upc_fC%rZdRIX7S^W7D@-g>wJ&$iyvo@V9`I%pNNMM
zOzj`#9hotp5Aru56FG(HCpOu9nd}lBVbS}$gdXADrfJ}QG_%(_UHrUqXjEX+i);<P
ztq@awC7%>##o#58#9imyaMSNuIKz*!8CTXC5|)9rrXbTx(XeZ&b0Uv4vhU@@x&7!p
zqd}h#NioqtbRQCrB<q<)0Ml<{C^MDmGZz(2TK7N?o3v5wnF@Z92!ViSiE5mHtw9WO
zv&lSD!kE2N^u$X(*8-~MfMjhysUH?`KFCB3D%L(^;*ns_;j=TT07zw{FN~1-LkiX4
zA^gA2nB(IpQk9Ut5Zt)sz~V52?&O0oOd0f7nlXv>LyWzbrzFz5!BqN{rTE^`lhYO<
zO+O+=B5ya0qlJw1EIKAF&IsH|d?E|9oV~lkgMozJv2*IEL+ER%T0e)E&E%j1AVAXt
zWe<v$!Ka7nOO@vP@EZeqrru0?Ws_7p4;Xmbv3H{QN?anJm(?WuxEG>AzhSIWy5l`l
zR^mmoJ*q6ywR6D#02ezW&I`m9wqlT6X2#ZGJwNfxes2wXn&maJ3-<4U%a8$qnDFvI
z1%*GGb_}E@3uQ5_IPD#z)NGA*8R|Bn+KN(J{GwLJXzOy(flzWkuR;TJ^TWMg1*1w)
zb;7D*GELAW(C-&<redn@W8Q3C=sUunshKpitj3OS%~^6K!3ACl2hv$T(M)g#CQuT0
zgGP}aIB0QiR)}R#I~iB8Vg|9WJMWb%U+;&(R4SPuW{9#x+A9;OErr%!J1U-JVu;Ev
zpJ40*QOBqm+s-xqVEnX9Nenm~>8aaXTB~FUp2gt@5rvAAnFIL6;hP3x-{Oa_J92j*
zkl(1p?UWBQz>N1(`8Q)4)AzDn^%m_L%N#Yv$+ft3PJCBG;1e86eH-V8MN)8zbkKNf
zSUg|Od^z?)^b5Nchn-bYl{?neF<*D3T7MTHQcV{&=DcYkQqV2dtXzX|erP2?a49tN
z=xD{eU_q<z5Q(ni74oYvYP&$PedpnzL1X`3EC8EaB2GWCe*<yg$d6~PQfAdrG1{rh
zUX$>P2?n!mGnXc5AuS~zisTv1b>i_!)4JBMqmCFYZ4;r%uVWtRP7J~BJzL?}8NEaZ
zCPK0+Yxl{ch?2Oh={FJ5Eu5X`oDbpu;Hm_elK<iEW|=ow|MGVY`i@+GGgaal)ZdJe
z%J$Fvm$Z1uzvIP>M;J)A$i(Tqg}<pZ|M71%uK@d>uGYfze^#lM@<9GW@in|{#j`>J
z0F^KR02%-Q@Njf7W3_N}bTfBh{|oUICCj_6lA(oOzF|kR@N1Jg?0Ry>b2zA2ewr1x
zID3diueU;D^Dk<hCEc8dRVjARr|kxqEQfidLa(oNClRTu5z<JU42$kjGK5d0Efu}D
zOxk>UjIYx&O9O#LRX;>xz#UIcs<dtMa6dw1#^x9+)n)JqRHiX9MHm=*Q$YGAh&kT4
zV*-}J8=!jDvf6FVNDFd2#3|7cz9fv(!>$Z8Z3esL6lV)mX4~EoO1aVS6v+c_K#Kva
ze>h>_3sHAE9-jKid6TqvuNi>zg=Q;VjoKq>zpQB;#TR@iaOX2yL?4!0#0IT8^jpEk
zx2PeufFo%^#j;?y<kn@GH=v)_MyjS+fOdLF!dj-3UCEW&Bbl8<3i<0J4)NA|7|MOO
zw50YU!QymGuPenkKP~PIIDB~jgC@j7OKmB-b=|xbmif`9ux{KcZpX_keO&7llCf2m
zT86|!%m&=KuSBd=Udm_g2!WbtlS#YoZtJs!H7^t5by8K>sODpA%8r298vuXEmhP?0
z^AXfK4`eZD;V1IcpN-R0(V7Jy8Gp~Ku>*be5&cbo$Q#8^pVI%jE>>3u8n~*fQx~O5
zU4d_V7U<}{*iX-K;O;&tx_7Zl+~#JI4xgD*(l=FhyzcT@{mq#MLyG<!GTrX=OPL7z
zw?LZYtTvBKdQoZLG7A5f%-gf--k3DMMn1YFV~~fFgs!|CUIowHJ}JWV?9DbPiUcQn
zOC`RowSBOK`PB}m=RdH(prgvLqe_Udqe{q@qe`gj07$pUmQ@zu4K$=%Wa<<rQ21{~
z;{x)){mYc5DslmN{#L`efCB$T6sFE_0olp^cIFT}yXZpz0Lm}`01@E-g+IhMrbIa=
z5)>s61SA&Jzw~OVA~%o-5|bs>o*PK~S3H^<NCa`4TE-2eC;h8eAS`Lv0|fva!v8PL
z`fvC{n5ABG1IhkrI?~x!1wa4*%@6><U*&(pA3`OSjR#0+^jGPHFW1!+5&(EX001!l
z?EnA({t&@w|Mz@3xTzVN*!_da{-;p{{UlL})*%=Gpo0Mb!2XZ*xS6R9JV467_Lq2o
zM389tiCcNtsffHlq`x(MULX<VQGQ};J{i-0i#B!0$!`My022rR0PjCUw+j;M3J6lO
z{*OonFOUf0DRqPwNd8yz^zSe+6^;)`3jg=v{`p*_vhe}2Atq8K`GBPVybROX<*nWT
zD1cuf)PGr~uSyN!`(MlDd_W>7B35AP84C~(M+pQC^VbI!01H3{4FI5U0RaHO{{Wff
BLKXl3

delta 11268
zcmZ9SWl$Z_60Hw#aDr=acQ^^|?gR@EJUAq{TVQZ^cb5<j7Tnz-xVuYmcV6W_y>I?>
ztv%m#@2={pnO(JduQBhgFws;L;J~;b5C{oW7g&w91_N6cSaS?R4g=H$qUht5iy5xM
zfIv=gAP^P^1TwWVQE{}hcVaiOb2MXfx3SJjP_SKwU<Tg_!EZ)!CzT@V;QB*zm9}iL
zDMa-O52EP?J~GE)--jMUJww)L%T65=vI}W!7SYo+@@6exAIt{<Edy(*2r{v6YeU+J
zN(o4Qg{0fRv!%YK01@|}18XVc<LVP25w5uf5l8xRPyVhbr|R<oA4xbJDN0e7#_5Pn
z9$`&B@lb?j^9MN(xs-rEu&HyMBHPHm<5h@{(ekB?B=i@8oW}GH!3-T>E$Yr9fC>n8
zFe#$?4>|kj%VB7*GvFzmig8ztJ>5U^)5RQ>@5yXJ(55Ld05u*Uykm83C8VHV@3AZ&
zQYtTv+Vcr@HdBOEZaH`4-Gnsf!Jqo~6FE5@6BbfDE21XQ@VF$j)mA|(W~-M=FZl1X
zj!TL6gBOxEUqpP<k5DbC(D-IMWKfxjw*_Z3p<z(Cvv9)L-sUvu6;+kAe~Bu5uk)|;
zuOfjfgkE;Uz{0yM<M)WPaG&tbggTnnn!OUwJ+;OT`*Z1;F$rGQ2u>BjVW%&rxz<PR
z6FVfk#C4Jxx(&8g=+^B$n>qe6r+3xz3O~q_5#8<*U?u(}8J}&YdJM8xCP&C6(S9Q<
z(azi*VPT)bkc$6t_wsc%$9D_T1>netrsnXwuQCGfv7g5UN?&3B-|?s+f+v7Q|2G$7
zOp#{GG$0T)kRXgm1dKQm^VRJ6WW(n5t#e?}NU34F2poz0L|x@iHmzf5c-xLD7=)GM
z{M!wu9>%@R;>m>pp*Pkf-CyV3!xAK}47Qt6{+NcG8;+~MGeRJ*v5JMSO@Jv%_Yo&-
zl>Ke@?94kx-=S2J@c2c&OdT*5JP58pdh`-$Yqw5n@G)j`1YqYcx_!@HuKmh#USF?(
zr<99mVpo$KM63XO*g6g}mpe@aRn8@CeT`L^J5r4csV~7y$5KhQ2bIBX*$0=i4h*Za
zo^_f<%G5-zO={;(h)VXmKk=qB$=52m)(@9rZoa#qwntEWGpUx@3`MlBA&_4W+bBEk
zA$BB;8J^f11i~a`+^HUYZMfpiD{eK7iH=jbhvh`hvq%p*|0JC)hV(3F&ysQh$HbSy
zSu>R+>5L_(<?^RuAw8n+dKt1B*lpg~qFYlppu3w_ZL8Y6I7o^l{vmuVe79EeRN*sp
z=R9s_SFPEGC{-1<6ZPb5^vYwSY@TNKZ1$N$py_2`3^+k0>My9}x@eq>4ltU+NAeG;
zHM8Ut;Jj)4Q;YZq2|spymG2ZW&zYa>8p%A9Ql{b=ZK@Qfnf%;t=3+F*>6>t?(fNK4
z(whAigPxzA=;hJyuO{!UA4uB_9>w%)PCRWy!4i$LIBHUec?3^gYw|XI22Dr<du98D
zcV)M*t3a`x*!_s`;LOgl-6L_E=dQcGcblA$PS)8YDx==>LP*C%>*?d|?Vjc%)SG7N
z%=xCHILMaY^{&k%xV=qdbqY=$E+u$N4C8x-RaBG&$N6b#0Wp%yW7ZPgji8Nu2RYxz
z<`X|9La97p8As6GuDvbY*^G;HCiHbOXLj%q7VzryQexklign>?s(ky9qicl8_(R<V
zo+TP*ax)&xWF_F&O-{}Um*gD+$Cn|`8^LqKd$?|U5HzJ$EA^J<k-kvIrNB2`da$2x
z_-5N7>@}JF+5|XH3Jc%w##g`H0Yn0i1G|%bi&z5I2DR)lN=h3<>F_W0WQA!2FETpO
zK%+-IKZ)skMLUzMy`@nimW86UI&C&Z3!4H5@44H)ovDl9W5doC31IM#iSk9{LsNi0
z_mPO@fm49Nx*gQcR-gP@=jJgt<F^1N7P)jaOSL8m+R*#Zmuxtba3e}mek_bk!elcv
z<K!m259}oTWEjViNy<H<l6isJDo~ymfMu~Xsb}=hw+sacCI|hM-_*@r1*syzF*;jL
z=_nWYh+k}m%#ZI|c8zmOjO^OVPuB3A$H)H1y)J@?oyR3=DMwAXuT=4IoUk^bo+isa
zO`$>~A4jOXe$%>oo468HERnq;@j2w6Z{-W&W@aghloAd?UeL;!$UaeFBEm$t18$f|
zwOz2TTfJ?_1d}wy@5r}B@xK*`KGd!6lUj>`SvDLxgBy+BOABJrGSGKge#UbJk2kL1
z;dGgS#rJ6yWd|FN`Q*FK#NGG>Q+>iE$#)Wx)mqN|71O`pI+&C;&im~*ktm9IVi6mM
z#J^Tyezkn_R9oA}mWGKEJ9Ag@P^{HdoY`QZ-!s^noo|?TLG0+>W#`iP``3!7_(-)z
z!_H=vfuP|uHX`kAzt?yVCroR!@yWil(Fe7MC5Ushz860#{v<?KUxDlTK`em`jS294
zr|b@2CIV=#|N6}mcYCbeMmxlLsz9dryA>I}K!jboV<TD@9qvqmEN#^my4G*_`_A*L
z74dB28TT(zZxHIR^BK1OW21=dt>nXkS-G8^jm2@s@$T}<C;M%Jjj!35!toz?p3ir)
ze?BfHUr6e62~A@Brh9}D{&l23fKUer!0VXf99D}-!;POW7&>(g;GiEu=Jy>B1Y+uk
zx#zjd;1^SJj>mG(oNYgR()`T$ftk78PZVUlF8O*Q^I4=Os8Z=i@_o@fPf8!VH@QZ8
zCtm+z*<j35xulrb`7WjV-UWTxmyI`Z?v-w)D|u+$+LAR_0{vy5xE=hRbT$qkMYxwJ
zkfsU|??&Q*2UU628T6?n@=)3LRLir^*I)cj61o}oq;x{LNvz{zJdVr6Y}G8UGGB?&
z2vjRj9Sjh^5tLL??9Y{Vq^C!b9t^i;`AoBoOu*F5%G$^7A~;EUWZ%c>8&*ecF^HJA
zZ;rt16L-ZgfN*eYxa8@=o$3nk6|C-s{;pnMs8!glhx3={!uvAHrZ%?;If;*mMyJJj
z9o%*g@Nb9Z-Vgi<Ar>i~300O<PB>nPiyk-14;>^VycHmKf*DDw@g|e&68MEE;-|#M
zy{Gnu-hw2A@$xtkVEKsEGx$5deN<%TDOz!Eb@0$hpw?^JnN74=lcxsYT5{XX1m~vp
zfZ=1dufG3o_$@`AD`ja8Co;X#b2Ilkx9LaQ@y&AZ;UKajM)M>E#}L1cMQMmQdUCFk
zL%zIwtskWa3>$e5moM@xICk$fHoORB-5r+eTU`A^$o4cH0~4&zAO6WOO?F_L<z0t)
z_4pnviN(B}t}~))&=>;X=*YJN0~I&?{t~IrUPU7;hZ1B8yj<j1!=9W5T$6OYW|tD`
zywlUkJLc^yLe^)j7G^25=k$;02sErY6wt4buVQN=34q<f!tvvX?8SpFsYu&1cPfdA
z7<#)RlFD=wuEU)eA{{7f@QdOYgf;CK_3(G^qG1ykgIhxW8b|@>lD)W*e=cxGVXsLE
zxSeZr`qhm#O0(4F;~Jp%7K5K<ABc(uJ@e*c6a!Bu0-7*7*G}_N!Tqr9pvSWnKCyx(
z>Uo@rDvRoMxoEeKN{-Wu%Z*|wQEp&u0kShG3gY@9bRu3cavXWa&L7$(gaOIkSc)Pt
zhWcoR1~?*!Kb!!gShg1Dnb<f(IM=8Pnn>A=aj-y-vA=@1T2yD3gt{7?AW@R>)kLry
z1|!{jjck1)SC|$;3~wGUf|-_f(P)}fLY-PIT}lerqOK!RvV>!6C~l$%;mBMH>?h>e
zeQLg!l^$Jgjbc(>YAz(|;!+eErok)2%fhagq2?*E*EQhUWF_DQ4{?$XQ52#MLvJ*H
zu|zKV;a-vwLvcKmuNoG%bN^7pA#7_)mE)Sx@)DA+<vEeegxOBMiO&=+R+p2{@IHO_
z;$w0Gl7;|V2{AO~xM|$xcQ1w<h5)}MX+5{?r48<((N`~?nFXEog^v24kgnC!TWRdx
zgw`!)ksP283z|mC-5{GRkFP~sm}N^AiNX~@3Uz`QcMh{x+k@!ZQR6+>bWzD%f_73d
z>r?Yx{O~bD+K?p5nMKQv#uPa;YwOP3ccdXY?{BH6h~9Zl$H3*`Xp=%5yeAg2tXtlm
z9$ZmGI^mu{Hz;0kN3b*2`A;XwcGeXEF2zZ0KET#l)6&eM+y|Vl8eFS~mFyuaVE@AG
zf%ib}-iByfY2x6(9D=|H#i4MZ|C#i-&}BxDny>^K`$@(kn(kubJ=Una-tRd+R@(Ks
zVkUJ3tR&ik+p-Wf51O+JO_xAL{^2{tJLD-r?w_w2-zH$aFgf7+^o&j1>1$+<^2y#a
z5|DO1_$fy3T!?y$Xx-F*4m|}4SC7LX+MIEY<D9sYaCC&M-esolS^D%9j!tiGYaOx+
zAtHOy)Tu@(eE}XzW4Ny{D=^VJxfaX&F8FM{Cz?zn9T5qU;e{TZ)W1jFscOcUS`L)~
zZ`eDtU^9W^d}>!(h+AsH)fa^yoa<+|fSjrC=h3j0o2Jjv-?=yUY%W=`8`Q25A4mK*
zXLPK%tkHv$I`6;NQ&fJjpm~^!q^UgP(OE7>lY8y!ChiqY9aFwlq7#`Mlk)jhKNrm%
zjsN_Ndbp)gZ>*oXPY@z%nyTRVP+k?CDrx^hYTdHpM%{YLhO#-lreovg*6>J91l$dE
z?^JknPmq&dmSJ!Q`iwer3dtYWCV+x5-_sl*x7`(&$l7QP&jfp#F#q*!40ZTgL3l^R
zdU=rQdsANLzoYE8!xmF;9MEG&z~>wwsI}x9M}iQn-jM`m2yGRVoHIBe)ikR#NY;vK
z`(}`tq?JXgNAfj!;k}pl?d9=o22k_w%fKxK(e73nvfZl`c^#KO-I3`+s;R)?WR@gv
zn_6<g;uU7cx?WIp4#T;A2#gS(kQvn7nnnGPAj9@s7(JHG%dRofkzUnN_G(8kQ*gFs
z?GQWLXp{aVQTpycmyK$u&)1?$0x!QnMG^JbjGD!fULJ)^*6Fq>pK!?vh?{PK_P|?R
z_=O<4yZ@e=bXO<*5sIbgevUI#HNQ=W`uOWgfUN5+l;g4ls0|kT&VMkTS+44vrYK$^
zc8_7GkCc=4xkh!|;T=mk&fPg@JT`&iy+qA)f)cqMB~69tBMpr)S;&Ahh#1xZ$CM|9
z7C{IHH~rImrFd9e0qj~T5G7XVen@lTAM1QU+1HqPo@%UkGP$Pfbv##qxUAkM)f^q&
z^s`DLWMPPdh-4}n#US<^{aGHQqx6;^t(XI|q#<PYh^0&va{emRO-V3*lPsb@*W>3g
zu9tQU$wd|P4k>CO@e@6C*gg3s;`-(KeM)zPR-@t7^UVNo$Z^01tf>Pp7xYrDhH@Bn
zHO)uC`WlBvcRw>j_9gYC$^^A;&beMR%`hLd$zG`J_L(_OytiHEn2zBQPv9JxhB)0j
zyR+ebv=HECGw#5V%Lq_)(%PZ)@_to8u&lrTBfC;|Jza;t!5aBfJMY!7(+act)Qe<t
zZt0dgwCEHuwZ2~(z-yl*l+gnJ)%%!-AvKv+)!<m6Ys7UWdv|;UA6ye=i<+=%fB#1b
z*h7I9<{68*`>OV|mP)r08+mblZRilWx|j$f!5`^k62Tzi`O)1pP43T3i1JF}<7bfS
zr+Fg!E@h%6Np)fXeOcy0>iA7ufK)kB$MD2x{DLDvVCBpnu>3;S!u7ru?zUt{)y<cD
z@?)#-dS}16E%Z-A(E5z5^4L@M^#yyX<gt*;T>u}fQ|!+MHD@kwZyJqj{{ZJsj0u5*
zo^aB**V0+jdd>ZxkSF~Fl`HOQp!*U-OEqjo2i;lD!LF{6P+{^A38QC5%O*rWU6K~!
z0-I{)0KX>><V<}mM5mjEhua8?|1k2yTPS{lAd-!8xi?*4E|$svBN=95b-kwD0lM(c
z<z39|PaC^(ixcaJfG2WK`;My4yXqy(aj-NHOK;+B(qb^-^>AntuSBkJTDP<(Eq1y~
zf0v19NYk@sL#h3BeZV^bUrXn0@9NHkt!nT`{dL0>00-Zf61vr2S=yGCjVM5Cx#M=~
z=*r~3U}~?Y>RK6bIu=Jw>OLv~iHLECS&yH(;k{9{AG)+3+Ef&3v|>P_b;UxYe-8IL
zmb|ChTIbr^8e&X(CQE09XfWBndNr-getnfWbyn)aJY-~oky^lM<S7}TExr(B84Qtr
z>C7|*KJORyMpsNsdSR!ln?yM{<2F)5e`ZMRs#i_JCVo*Pv`mTiiV{%!UHmsf^e2)J
zYa*>ThKGW;N_2)kdBubYAGd$J$#Vzat7S@?Gt~g9ot&dbF$!}?qR1q6L2o)Dy%}tL
zx=%DisKq1wGXnpl?0VJELZXS14Ke>Nq=fhZ_$<R`nw)seJ!9d9jvcX4g|e!)0J$@v
zW97TX4-+QPEhM?>X<EamV<0Q+Rm%GcM~G@k$1V<E)Ps;^xP|6?{`D!vys3S1VYZR{
z<<J7-vn75Hn#Qa1=PpeS1f~3(Q95MT^<8Y65Kc@&+fs>z;PsYn%WOO?biP5P#FfKh
zfF%BL&^HB95FI<VYKjH>kOa1r=cSN}&LhW*RHi4`4CKG72DcmQvGzVukPkJ%qO;~~
zhVgzs0_Q7=;PS;?Z;jA*E}bVH))v_D+YhLfHI2`E8-Hz;O~3JVGc%VAjC45g*&D7`
z&1}@C3YBnVLf`5Njc{l)e0o1&<Y_V`0OY&MB1&(JkI;Gz_*qWy3tV#$niiNm$A{B}
zVBrGo`|}_y{q07HJn|p9_C)Irxp~?a`T!&2@vaXNXo`CZ#EUBhfg;`HvaxP*ct`of
z3+uvP7I@@3v!eZ~Q$%T)I<F**9Ic#EqjaT7g!^dH9>wEF74f36EVIK1!$u{~fCoMu
z$?WwQp%|IHy9(vUe&|di{begY8{_4(r+2CI<B9=RhT%TlPR?0XjTZLrA6xe<9fg;K
z6#Di-YL-|joqC;T>RHr=WX5mXE?x^(u1R0j;3>vyE&cg>Teo)zjYCwcgL~n}inb;t
zrz!Y4{38t80^t8tY;+ZB#l$Qi0S8sDzfp)hihJ5W{WYgoTFJ1-I;m3Fbb{a-SvcE@
z@5!zvrk=GD2=6g2LxOs>Ll|0f3oRuiWs7<s2VLlLYlXNd=_`r}t~<_{6OB<6i>i|M
zvyH;w`K2G^+y(O5kygWn#oi1o5sT25GR#PtM2)^@VDUMJPgp0F_e_om5ObzbthyvD
zip8?$)6yGKFL^x#2Rt|X$rP)r^4f=C$IiQS`Qo-@`=X*fi?@G=8%=qnwhWO%kR~!^
z)~$A?_dDyxH|rK+@lM)$#3;$}7yZ)rTka*?1j5~2SGI7$Ndqu4Hss;3>~B1BZ2*2h
zUPuyH{t^?X71czrK*`gApgP|{BhAMG4Egtem*JaIa#m_Nri=72t(E+UF14lzm|wod
zzE0uaeHy;_F)neH(OAff_GA=dgh~>x{{4dF7xqngqPW=AZXO@PTx--5I&6W~**+>!
zj5PoB$5JY3Lq<}1LZzQ%JWT<-gtw}J`v)-?v}`*)msj#?!WGbJ;F}+gWNvkC?#&sR
z>eI|UZO5iJ&r#ZKB|UWU#Gfx-;L~UO9%Fxhz7k@7G02w@VO1ePLuxjgu`@@GXoTEs
z$r#73A*ZL(dDP!R^5eQhc*lv-&T-yT^v6TksSMaJkLp&0+Y}7C!vXqsc~F#XI$g%T
z?}1$)w&~e#VnVx0fWU6-Gl5>8a5f_p!AK?fHp9q244JGQX&cD`6flRGa^wHmXzH0U
zlf+Rr;diPpmd}2w_1IG$ZV+mDl{{IYepRMNG@e2i)_nYZ<p=OpW}}5fpg=1<0~1z&
z>qTzcJ9U=I^o{1+O1fLl_Jxa`v;<D`Y+Yj%OO9>~%TAPQ;Gn+?f;7-)Py#XgST_lO
z<_P}T{X^H92S8yA>9wO`NOMiivqc^t+@u`{Y#FNC3k$gJrgSs^I+#;DL>WN>-*^Wv
z)xB;4gLPT~E0Y>CiWh#0FJA;vCfm{KDHV`$lRK?d?0SdH)4EaYOxjWGSz$%Ca87tX
zn&@y@@&n}$&}5b|jlA8-%FP#q<y5v-ts;ihx<qP-9UCgVqXfSj3&X}&yreo<CX74x
zC>bx#SeZU%*MzKAB%{raJ0p!Ov6HMTmBr!YpDA*ZAW@vR>JWCrhflOigat-Yn+*6H
zqLiskUNONJbmCaR=1D8|9;?@lt<45r#`HKqWg%7$C=+o-q6se0&iGO7Re(OQ(HL6d
zk@_$#2ajPUO{0~Im@9$1PNj{~mMEhncPm~mD0ix^j2?zwY#m8KEl1%JqTDU~3+El3
zIF^ka3DH3U#b(VOlBBONiX`1oj^hwz3W*$%e9}2A+Gk4UR(SoXZJ1-f)3u$A9N3qW
zt^+${Ao!+9?0F>hK%n?KEFhkQ*6S~2Ivet(5n{nLEn#DiETV{?L%<p_u7xRU22S9$
zDFthTltvRiH8B(PP`&~eiT|B|xJ~v51SKSIKgpRw(|XAyzU4v^F17I-t9Og03vwX^
z7UD$GbtF?l^(?Up)L5vtGr|i1YsM)!%j9tYA47|ReSV0gp+x`bThHq8l;{5i`6hOL
zD1ucP?P$X3Y;u&*xlTczazcn+iIF8v-`|F%c?pwuDFL$7EuY()-29|d3CevL{&;_0
zRh@H?u?%CmZn<LjC!JJ>pTakp$TxXs&t)u+(o(83zjvQ?ktl|aLOfW%*Wy=Iz38DY
z-~&f!6X+$~t*0nSAs}d#!qDTFqNN}!j8H8Ni?NFvnn$q#_jTLUfGjgbPRU=6@gDSH
zreBXisWZAcSHIJMJe#_>(!b~z(8lv3=<60tbC>QnE=2Hj+W%XC;e-E1ty}q!r@7x^
zDK)85BVHU9z<}h19xi=-(SX^4Su(u~ga_v3!(um(z6ZFTf(#foR@<ptm!*T+Hp!;4
zrX(z!&2kF3;a>-d28p5W=_rUc?=nF;CnQ+eCVidvSk?!8*fHER_==)Pb4Uea%xIdW
z)LoaIMP_tUh8xUTM{iRg;JfZ{2$AbWiM)9oT?E8%$bYvgiGueGcKt+qt3?B7X!u=!
z3x722m?u1m{ieCr?!Pc1WgY*fb1a;^V>SET{36|dXGH3<a5#Xia-Otza;GKxbtM-O
zh2ZS6(cKE~mN^RyKCXOw=uqQ*-NHP0m==bcwjmp~`9hsPP3jezNt67W`Jn4ZIFt1Z
zmpB5SP5>@NUhRQ1tNz`@pMehG_~>fzQf`60Bg;p!WdBrgC+ppOjSDgv`LTV18Z)7*
z2jSd~6g8Vs&2$3N?B{$(NpB_rzs-z}?A))V)UeLvjA%2=L?sFG%8gMygZSN|F|$mb
zg@4SDp0--D#69NXq#{3cN8b!9KD?jFuDAYlnrP95%VDvnB?%LR@qHv7sIPb~ymtw=
zbUUUJ&8n#3&_!)AMK$`%Z>{CEse^1SXlnhL<;%BrpTiL?e?c!mSGC^a7aA%;YX!|@
zJPz%i$|9?-UfKWr(Q3}{DL$LG@=gs`hW0D<`Q#y^!dXW*%rSk-l3QZ)DN<Wf{<OXu
zd)>j8J@Lf9)Z<~6-v+4434{rM^x{%6uEy|}F%)7M-tF5+a^-w6t)f-?`=qh&CLB4;
zA5A)L&IsAPFvM0?3fYY<U6Ov<n1oJmItwbV6wyZH!`41!CgT3&Q2x@)HK$S&^SamB
zs*9WdBApldr1ukxMS&_hYQ0K;bj4bx3Tu3rsnKd`Zx328JOIqiTGwZ@e`u7tK>N?J
zySq!ms(jXxsGvKTccaX;>M9QV=1B2p@0{Y#UcJ7fMU^o2;{9)gfs5C*ZXXZjcnBD^
zZOTb)NLZouLH@T-19t2g^z7@T&yLRLm)E;3SM&5I1#Txbdmc|IUsBF|%803q8;6eq
z;4*ziQz7Q0fX>$G-=8gCD(8rIk2IS!+n}~5Gu*DfX5}^B?rxEz$J{KZ8_yWlwAP<y
zTkMs5mhBoaer->Gy}Qlc@C{tM^np+}^DYTL-PGM3k#}UyzLnRrW&)AF-fs8Wo@Lrx
zXD`~mTbz8AA?<j=mEm_3cF)_6_gz@_X@;}J$b6JG0nY3UYL~Sv;9l1p9wbx1J|m33
z_U&FQ?}nnzO0PK{n}#*xrxXZ6w2^k0q11F(g6B$$8E5&JY{wdIZf<37s-^1Y1{`io
z%F(8%pX0(-<CGA18fFDbA}pl5qI5ozej5GpeP)zVEjF8KaY?G7i(haXBE|w0%WqoQ
zB1>QT0_dS*T4*9z)AU3SRA*x3nd`~x5@?r%972BUr;2if@jssN41Yf_&Pm!LJAP&g
zb4pNvLL>8#osw2>xG{a^)php5O2gnSE&@Zk39CRHv_c9>SW8%UQ8q_44Gv$!4KRH2
z2s~c~b6ppPDRu}78f-&_M=Of}TuIy{qJtVkAVDVHK(M_ace*ijrIpgr$=hp$xA7x;
zWpsyI=-%U;IrRviTA)4a7o_>>7@g0C`qnHHHuGBrq!sWFIpBwJMW%I%W33&xDf77J
zHM4Nrt<>&}X2G=?A{CC4=y~M#B_u+pchG(<`yQvw;2=&uX0fT-MyIx+w~APZa<of0
zFyS9q#MU@aNdiv$JvxiluNSiPP1^(p2QHF$EGv;wi`FQ~Nv8DT8VA8FdBF_H%e$yZ
zIX(x<tiUXf&jMD-YuOW2ecI(V-x!&7eDAjwiDwp8P>UsZPLk0ZPl{4P9(Z&yWDRe}
zB4qc>z0W2%7uJhQ7^{lgh{+Pv+?-Mkj7t4VL+k(ZCkj)v35Nr|WE5oe-a5YTWCs52
zE|vM99B0%w^2a=Xu5xsZ<Di&ME1FH(!iElae4QC2wgY16*oomx^$n!TP<nZ@DCSY;
z-Tc*7jtx?OVap+%L$S(dwOAbmzqEWWkl#j1TKB&Eg?L;IrM98cYvv<CtB1f6Kzu^n
zh$Mc9pbR=J|K?wOp>F>;8DS1u!wxM5N0-Jo?hU7UM0r`AR7*$%wYpgIzTi@%F85tK
zxur_lVB+t6*j-5Pfm?9sNmrM4V1&d>*0F5pBY%YUIC~ohrfeZ>#BY6ohCohT?iVJP
z-G`pe|Ke(Ak~uNCdx6T*z3?4?U%uZs+I%!2Hc{bbpEqPVb9a4F+lD;->L=cPpnHfK
zm&4~e77#r9Gek5Nw3dm4cQTMYKz$`KKi}UEm0fQXD;!7MsQfmB5mATn$p{nhE<LVT
z98%z@1NPZ0N~l7q+ef4k@=|IN4hI?sSo`&{A6((YZ9h!%d~)8B_BfOTq6uzYdc`Sz
zkmn_wz)UG%p8InqpkFK4?`?Xy`63$zOTr|#(dR+%v1i6CALEAE;UV3J^k^cHNDuDZ
z;jw&K!e>@9UH(5XsB_Tyx*Srql%;cLL#fBoD>%dxqoN1k5ef}mHEXsnPcf64>^@Io
zB@5)|Yi&|&(4i-YfA@d|1O=#mzSHsvl|FPg{G3ZFfms1RL?-*20KYCl-+waSaE!5c
zI_aRJ6}zHz&k)DWO*`EsCEeJ%T;7hr=}q)ogG#(B%%N;SWs#xG+@HO(&39T72E4_I
zU*?a<E)mCAsy|oYRz#W_;YmJ<CnXvhvv-pDZl;NntCziph%i*^0MvDuu*DaCp~6<8
zlX(c|9k{|W9Rp|0$);Eu!Xgi)-++uw9m!~sxWNn00v+F{*G@CH^@+`t3Fa`b>;W=L
z>$$mk6n}P+u5~27Q8wJ`F(qQVc=*1<DeNpZhcEN=us!fE?fD}i6Mg5pVL|@4BNAT3
zn04V*sobpCBVD-)0Q{%<8OG$9V0l4SKL_x&eT1<nu!K9QB8;p4^6ASA;b)uBGgQ3W
znH?o85vMHr4_3>p9Vo3B2tK@Smp?bcaDT^s_A8<By@KtVV#D!ct_UncP0B}V$*r{^
zbq!jdMci#{M{@3O!q@tecP!z=<L-kRmuTYhvzk4sQr(BE7FeUF_i&VboSEo4%F}bs
zpMpyD2zF`I3Va=r?^!G0SiLu6JuAFG4hm)DTxq*kMx0RT4vz}BFpT`}?Bub&&l-TT
zCcEuN8e?3qgcEyCCWVAy|1-Rf!KS4*^N&`~iEp0dJ|WZX3obiifef|oMeJoEgIYwJ
zu$RZ}(U>-6DS#5i+kv3~`{xsh(W#^gdYF&+#BlRej2s7&+Fx_t7Z!R$_%S#~BFTL#
z`YF1Z0C8bE87uBBsT}oHzD4-Q(;GAXXuQXzQ(|oG%;#~B4tRuHZ#DNlyYCbWu#@Qd
z3SQo)I4W82Ny0V-CYvh}M%J}T6Z+v=u2*H^ac`7S+5j8XM>1&weft&l<91C3LYxmH
zs#^UbayLd)6oSd-5A`1wgu)GNIyv#L-a11Gu|_-fx}oXeCt9Ve&{%9XtfV<(_OZkO
z<*G;0h_|@dm>b1%mo77`;kykNqlphTe)zvkL|$;-7pP-Icpf_ONlMv%Oj0O4OTZ7y
z*{J226atuj{xZ-Cj1o#DT<szZM3pPW_U}IuZTrZQEvqDQ%cZy{jKR_!e~__-->=?W
zON+|S@3=lAmUH#dTdq+n&f+pwFkuYEiVr7lcfYNN(7Ri!{Wf)Mf$LcC7FVWv>)I0w
z8JYW<q?CGhOxpgd@g9Li!Ux(oc+J`LA0J4ipvyp6mG;OmPHV_T=?sft=@`w{EjFQc
z^tBj~3fMz{PhGl;doCjQmZrY_0CFvpYKCugU-ZYSAmQjCpFELXAbv~Uz18klRQ%uV
z^-mv`$&B$$La-#s0W8jh<m6OS(HLnt57WN3=yc>t+FT?4m1qXx)kh8E4n#)<b~~Z)
zWi{Xwf{YG^Q|vnrrirJzaD5iSvBS^_DUZtdfhDzdGLJtVRelroV&%vvaB)k^qN!y$
ze0XK1)GSrtp|mGU+J|Y3+cS!supKajcFR%1x>Ls!|M=}oeJ*|&qkQ~Pf!4#{m^Z~j
z?i3wZH9XmkzUa;bd(yt5bMZj@{2f!YB@jTKsG#Y%TyRNyInF{4Hy#I=bW}HK>)V&G
zs?+eIg@_J=oP)8yhmbx|$85WaJy^eIlMU8d8|6|y%8}YlD$o6kcfYQ#SmS2U!(_y6
zyy>_R^)|Iz-K<Xbw^HPlB@Q9Q0Yk`1xJ-i?N_1y3VXlQnuY1C<G3`VGRqt*Cg#+rk
zh*2kXbKz~y(WbvNiD&zl{Mr_RQx1-nJPYQux?B-(^?m%Ba}f2jhq>3BjM;UJ9A$jN
zV+Sgbjn0CMoI41<&lR3D&`USY)t9}a`Vf}Pr8`%OF_jQUf=KO}a6hCTxMU06=3&iC
z$nYdKK0U;uX~ACY*s&6cp3*Wj#!66OA*86{YB9g=ogPp+@X5tEM{(#Me<S}dH&iG~
z(tq4?<ZNr~|6Fr#`gUCZqJ6?K+`nj$0{PGV*wi@Kf0{bu4gt0<Fo7h0?q9ghzx%g(
zQh@g#3S5--pQmzu^1veh^H`CKr-`v8tp6ef*6o%lFbCG}zEE`BGuGpje>0se{q0)H
zbdskw)rJ#kqltzTx~llJ?e^-Y&#Ifu9S%<27XER@J2-Y?HKZz4XQW2+${G4Y5<ZR*
z$74&xZayI>CbEyJPY)&i9`XD0@@`26{~xII28*H|oq<t#c+W(vfARuYO%<kI@d#TN
zxS#Q0sENe#WFKlT><+GBNDnb&5k#ciSCNN)z5On3T3Tf$(4Qt$3x%PMfzVRxyiZ#M
zt$31xsBDo=QSZ%-4b{UM=BZ9$5@05di32S3l2%xgOXge!uCuNt$UmhNllUih<0=x#
z2$bGL{qcOCl~<e0PbwswlQPnejH^@txL%u&IKkTJB_;>HhvWL<_=RZOVMfL6Y!c=a
zI8Y&vFimu+ba=OlBuM|e*2$6bCB$9t^-Rq@L@H=3bcDS}$g=4Rb(Fre7cM*Xh+h8^
zu2z=@liYJEYUxF^go|it{$64mt)SvBn{4N0n`6Jv>H~OtVGYSsY9~QaeGG~q0Ff@U
z%XCX>^%-MJ6Q|LA^~iq1<&%hkg3%{9NT677do}6o3A_|B%LdC)qZaa&8){#F1zOKQ
zzb1T~-go+)qmk#w<`fH`=EXw|_VN^y473I#G4aIW;G=NQk+aq1Xmgln%*UXKVvj$Q
zoGAHHkO=cD+xU+PssS~m&Y|4ff`|Hk#2;QPy;Q1tqWA2jbU!H)mNi`8kfTgYA8lGi
zkl|-<sKqrmHupBLJ}<HWaR2X=25^;!aFxS^aFxS0aFxSd_`%i%HZZV*FX3V90#iu1
zz#{*mJ{On=>3<tOQ!=^0JpWc_xxj+|pWQEooE!Xs{2!S^>fopk0|KccfIuXm|9knu
zKvL|u!OZ^>WO9Q^U<X)Jnz_NG|McQNU80|WVL*beq5uPn3-`aBrzw;?U=kR@6k#4P
z#Xr*UpF~LU<^faxr`i)=u9FEY2=s&k0%8B(Vjy1_-jog=FeSymEhUOkHTENbKrKul
z5Z-@5Bk9S!VCw%s*}nYqB_I$80R{xZ`7fw9FGYeEO!=RB!o$0>Z6FYc9tH#=`!6ap
zC4d*q`X8vSMe)-n2m~^Q0f7kr3rb2E=LOUMYvi66OacQ<!Q%r{{*%0XU=kRa6b(Kw
zIrIN{$zeetC;|wC`Cln~e}O=5c8;d(=5}_@DMox?od0a!WO{L<(+>{hQwaC}^|%5}
nnd19jP38~IS+v1}K!Fq>5W#<?9cN3y;|DV$ba8?~AkhB+%SA)D

diff --git a/scripts/generate-architecture-overview.py b/scripts/generate-architecture-overview.py
index bce810e..5aa73e4 100644
--- a/scripts/generate-architecture-overview.py
+++ b/scripts/generate-architecture-overview.py
@@ -306,7 +306,7 @@ def configure_document(document):
     p = footer.paragraphs[0]
     p.alignment = WD_ALIGN_PARAGRAPH.CENTER
     p.paragraph_format.space_after = Pt(0)
-    format_run(p.add_run("Version 2.2.2  |  Stand 10.08.2026  |  Seite "), size=7.5, color=MUTED)
+    format_run(p.add_run("Version 2.2.3  |  Stand 10.08.2026  |  Seite "), size=7.5, color=MUTED)
     add_page_field(p)
 
 
@@ -320,7 +320,7 @@ def build_document():
     core.title = "BizTalk Checkmk Pulse – Architektur- und Lösungsüberblick"
     core.subject = "Gesamtarchitektur, Funktionsumfang und Datenaustausch"
     core.author = "BEW"
-    core.comments = "Externe Lösungsübersicht zum implementierten Stand 2.2.2"
+    core.comments = "Externe Lösungsübersicht zum implementierten Stand 2.2.3"
 
     # Cover
     banner = document.add_table(rows=1, cols=1)
@@ -377,7 +377,7 @@ def build_document():
         document,
         ("Dokumentmerkmal", "Angabe"),
         (
-            ("Lösungsstand", "BizTalk Checkmk Pulse 2.2.2"),
+            ("Lösungsstand", "BizTalk Checkmk Pulse 2.2.3"),
             ("Zielplattform", "Microsoft BizTalk Server 2020 · Windows Server 2019 · Checkmk 2.4"),
             ("Dokumentstand", "10. August 2026"),
             ("Dokumentzweck", "Architektur- und Leistungsüberblick für technische Stakeholder"),
@@ -406,7 +406,7 @@ def build_document():
     add_heading(document, "2. Was ist Checkmk – und was ist ein Local Check?")
     add_body(document, "Checkmk ist eine zentrale Monitoring-Plattform für IT-Infrastrukturen und Anwendungen. Auf überwachten Servern liefert ein Agent technische Zustände und Messwerte an die Checkmk-Instanz. Dort werden die Daten als Hosts und Services dargestellt, historisiert und für Dashboards, Schwellwerte und Benachrichtigungen verwendet.")
     add_body(document, "Ein Local Check ist eine bewusst einfache Erweiterungsmöglichkeit des Checkmk-Agenten. Die Prüfung läuft auf dem Zielsystem und gibt pro Service eine Textzeile mit vier Bestandteilen aus:")
-    add_code_block(document, ('0 "BizTalk PRD Send Ports" biztalk_send_ports_total=31;;;0|biztalk_send_ports_started=31;;;0', 'Alle Send Ports sind aktiv.'))
+    add_code_block(document, ('0 "BizTalk Send Ports" biztalk_send_ports_total=31;;;0|biztalk_send_ports_started=31;;;0', 'Alle Send Ports sind aktiv.'))
     add_table(
         document,
         ("Bestandteil", "Bedeutung"),
@@ -512,8 +512,8 @@ def build_document():
             "payloadLines=9",
             "payloadSha256=<64 hexadezimale Zeichen>",
             "",
-            '0 "BizTalk PRD Suspended Instances" biztalk_suspended_total=0;;;0|... Suspended total=0.',
-            '0 "BizTalk PRD Endpoint Reachability" biztalk_endpoints_active=61;;;0|... Alle 61 aktiven Endpunkte sind erreichbar.',
+            '0 "BizTalk Suspended Instances" biztalk_suspended_total=0;;;0|... Suspended total=0.',
+            '0 "BizTalk Endpoint Reachability" biztalk_endpoints_active=61;;;0|... Alle 61 aktiven Endpunkte sind erreichbar.',
         ),
     )
     add_body(document, "Die Base64-Felder verhindern problematische Trennzeichen im Header; sie sind keine Verschlüsselung. SHA-256 erkennt unvollständige oder veränderte Snapshots. Der Schutz vor unberechtigtem lokalem Zugriff erfolgt über Windows-Dateirechte.")
@@ -543,6 +543,7 @@ def build_document():
     add_bullet(document, "Getrennte Tageslogs für Provider und Consumer; Standardaufbewahrung 30 Tage.")
     add_bullet(document, "Erwartet inaktive Receive Locations und Send Ports können exakt allowlisted werden und bleiben als Messwert sichtbar.")
     add_bullet(document, "Endpoint-Prüfung standardmäßig mit maximal 100 Zielen, 16 parallelen Probes und 3 Sekunden Timeout je Ziel.")
+    add_bullet(document, "Der Installer vergleicht bei Updates die exakten Checkmk-Servicenamen und stoppt unbestätigte Änderungen, bevor Task oder Programmdateien angefasst werden.")
 
     add_heading(document, "Sicherheitsmodell", level=2)
     add_table(
@@ -571,7 +572,7 @@ def build_document():
     add_callout(document, "Kernaussage: ", "Ein privilegierter Read-only-Collector sammelt, ein unprivilegierter Consumer validiert und übergibt – Checkmk erhält neun stabile Services statt direkten Zugriff auf BizTalk oder SQL.", fill=LIGHT_GREEN, border=GREEN)
     add_rich_paragraph(
         document,
-        (("Dokumentbasis: Implementierung und Projektdokumentation von BizTalk Checkmk Pulse 2.2.2 sowie Checkmk User Guide „Local checks“, abgerufen am 10. August 2026.", {"size": 7.8, "color": MUTED}),),
+        (("Dokumentbasis: Implementierung und Projektdokumentation von BizTalk Checkmk Pulse 2.2.3 sowie Checkmk User Guide „Local checks“, abgerufen am 10. August 2026.", {"size": 7.8, "color": MUTED}),),
         before=8,
         after=0,
     )
diff --git a/src/BizTalkCheckmkPulse.Setup/InstallerEngine.cs b/src/BizTalkCheckmkPulse.Setup/InstallerEngine.cs
index e9659b7..43431f9 100644
--- a/src/BizTalkCheckmkPulse.Setup/InstallerEngine.cs
+++ b/src/BizTalkCheckmkPulse.Setup/InstallerEngine.cs
@@ -27,7 +27,13 @@ namespace BizTalkCheckmkPulse.Setup
             checkmkLocalDirectory = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData), "checkmk", "agent", "local");
         }
 
-        public void Install(string account, string password, bool isGmsa, string environmentName, Action<string> report)
+        public void Install(
+            string account,
+            string password,
+            bool isGmsa,
+            string environmentName,
+            bool allowServiceNameChange,
+            Action<string> report)
         {
             Validate(account, password, isGmsa, environmentName);
             report = report ?? delegate { };
@@ -72,9 +78,21 @@ namespace BizTalkCheckmkPulse.Setup
                     stagedConfig,
                     File.Exists(targetConfig) ? targetConfig : null,
                     environmentName);
-                RunSelfTest(stagedExe);
+                var stagedServiceNames = RunSelfTest(stagedExe);
                 report("Update-Staging validiert. Umgebung=" + (effectiveEnvironment.Length == 0 ? "(keine)" : effectiveEnvironment) + ".");
 
+                if (File.Exists(targetExe))
+                {
+                    var installedServiceNames = RunSelfTest(targetExe);
+                    var serviceNameChange = EnsureServiceNameCompatibility(
+                        installedServiceNames,
+                        stagedServiceNames,
+                        allowServiceNameChange);
+                    report(serviceNameChange.Length == 0
+                        ? "Checkmk-Servicevertrag unveraendert: keine Service Discovery erforderlich."
+                        : "Checkmk-Service-Rename ausdruecklich bestaetigt; Service Discovery erforderlich. " + serviceNameChange);
+                }
+
                 // Erst nach vollstaendiger Staging-Pruefung wird der laufende Provider angehalten.
                 scheduler.DeleteIfExists(TaskName);
                 taskRemoved = true;
@@ -397,7 +415,7 @@ namespace BizTalkCheckmkPulse.Setup
             new DirectoryInfo(path).SetAccessControl(security);
         }
 
-        private static void RunSelfTest(string executable)
+        private static IReadOnlyList<string> RunSelfTest(string executable)
         {
             var start = new ProcessStartInfo(executable, "--self-test")
             {
@@ -419,7 +437,45 @@ namespace BizTalkCheckmkPulse.Setup
                 var lines = output.Split(new[] { "\r\n", "\n" }, StringSplitOptions.RemoveEmptyEntries);
                 if (process.ExitCode != 0 || lines.Length != 9 || lines.Any(x => !x.StartsWith("0 ", StringComparison.Ordinal)))
                     throw new InvalidOperationException("Self-Test fehlgeschlagen. Exitcode=" + process.ExitCode + ", Zeilen=" + lines.Length + ". " + error);
+
+                var serviceNames = lines.Select(ExtractServiceName).ToArray();
+                if (serviceNames.Distinct(StringComparer.Ordinal).Count() != serviceNames.Length)
+                    throw new InvalidOperationException("Self-Test fehlgeschlagen: Checkmk-Servicenamen sind nicht eindeutig.");
+                return serviceNames;
             }
         }
+
+        private static string ExtractServiceName(string line)
+        {
+            var firstQuote = line.IndexOf('"');
+            var secondQuote = firstQuote < 0 ? -1 : line.IndexOf('"', firstQuote + 1);
+            if (firstQuote < 0 || secondQuote <= firstQuote + 1)
+                throw new InvalidOperationException("Self-Test fehlgeschlagen: Checkmk-Servicename kann nicht gelesen werden: " + line);
+            return line.Substring(firstQuote + 1, secondQuote - firstQuote - 1);
+        }
+
+        internal static string EnsureServiceNameCompatibility(
+            IEnumerable<string> installedServiceNames,
+            IEnumerable<string> stagedServiceNames,
+            bool allowServiceNameChange)
+        {
+            var installed = new HashSet<string>(installedServiceNames ?? Enumerable.Empty<string>(), StringComparer.Ordinal);
+            var staged = new HashSet<string>(stagedServiceNames ?? Enumerable.Empty<string>(), StringComparer.Ordinal);
+            if (installed.SetEquals(staged)) return string.Empty;
+
+            var removed = installed.Except(staged, StringComparer.Ordinal).OrderBy(x => x, StringComparer.Ordinal).ToArray();
+            var added = staged.Except(installed, StringComparer.Ordinal).OrderBy(x => x, StringComparer.Ordinal).ToArray();
+            var description = "Entfernt=[" + string.Join(", ", removed) + "]; Neu=[" + string.Join(", ", added) + "].";
+            if (!allowServiceNameChange)
+            {
+                throw new InvalidOperationException(
+                    "Sicherheitsstopp: Das Update wuerde Checkmk-Servicenamen aendern. "
+                    + description
+                    + " Ohne Service Discovery entstehen verwaiste bzw. fehlende Services. "
+                    + "Nur wenn die Aenderung beabsichtigt ist, im Setup 'Service Discovery ist eingeplant' bestaetigen und anschliessend die Discovery ausfuehren.");
+            }
+
+            return description;
+        }
     }
 }
diff --git a/src/BizTalkCheckmkPulse.Setup/MainForm.cs b/src/BizTalkCheckmkPulse.Setup/MainForm.cs
index 4931c0b..261f941 100644
--- a/src/BizTalkCheckmkPulse.Setup/MainForm.cs
+++ b/src/BizTalkCheckmkPulse.Setup/MainForm.cs
@@ -12,6 +12,7 @@ namespace BizTalkCheckmkPulse.Setup
         private readonly TextBox password = new TextBox();
         private readonly ComboBox environment = new ComboBox();
         private readonly CheckBox gmsa = new CheckBox();
+        private readonly CheckBox allowServiceNameChange = new CheckBox();
         private readonly Button install = new Button();
         private readonly Button uninstall = new Button();
         private readonly TextBox status = new TextBox();
@@ -20,8 +21,8 @@ namespace BizTalkCheckmkPulse.Setup
         {
             this.engine = engine;
             Text = "BizTalk Checkmk Pulse Setup";
-            ClientSize = new Size(650, 485);
-            MinimumSize = new Size(666, 524);
+            ClientSize = new Size(650, 535);
+            MinimumSize = new Size(666, 574);
             StartPosition = FormStartPosition.CenterScreen;
             Font = new Font("Segoe UI", 9F);
 
@@ -68,18 +69,23 @@ namespace BizTalkCheckmkPulse.Setup
                 if (gmsa.Checked) password.Clear();
             };
 
-            install.Location = new Point(190, 267);
+            allowServiceNameChange.Location = new Point(190, 262);
+            allowServiceNameChange.Size = new Size(420, 34);
+            allowServiceNameChange.Text = "Service-Rename ist beabsichtigt; Checkmk Service Discovery ist eingeplant";
+            allowServiceNameChange.Enabled = engine.IsInstalled;
+
+            install.Location = new Point(190, 306);
             install.Size = new Size(200, 34);
             install.Text = "Installieren / aktualisieren";
             install.Click += async delegate { await InstallAsync(); };
 
-            uninstall.Location = new Point(410, 267);
+            uninstall.Location = new Point(410, 306);
             uninstall.Size = new Size(200, 34);
             uninstall.Text = "Deinstallieren";
             uninstall.Click += async delegate { await UninstallAsync(); };
 
-            status.Location = new Point(22, 320);
-            status.Size = new Size(588, 135);
+            status.Location = new Point(22, 359);
+            status.Size = new Size(588, 146);
             status.Multiline = true;
             status.ReadOnly = true;
             status.ScrollBars = ScrollBars.Vertical;
@@ -89,7 +95,7 @@ namespace BizTalkCheckmkPulse.Setup
 
             Controls.AddRange(new Control[]
             {
-                title, description, account, password, environment, gmsa, install, uninstall, status
+                title, description, account, password, environment, gmsa, allowServiceNameChange, install, uninstall, status
             });
             AcceptButton = install;
         }
@@ -114,6 +120,7 @@ namespace BizTalkCheckmkPulse.Setup
                     collectorPassword,
                     collectorIsGmsa,
                     environmentName,
+                    allowServiceNameChange.Checked,
                     Report));
                 password.Clear();
                 Report("Installation abgeschlossen. Der Provider-Task wurde einmalig gestartet.");
@@ -166,6 +173,7 @@ namespace BizTalkCheckmkPulse.Setup
             account.Enabled = !busy;
             environment.Enabled = !busy;
             gmsa.Enabled = !busy;
+            allowServiceNameChange.Enabled = !busy && engine.IsInstalled;
             password.Enabled = !busy && !gmsa.Checked;
             UseWaitCursor = busy;
             if (message != null) Report(message);
diff --git a/src/BizTalkCheckmkPulse.Setup/Properties/AssemblyInfo.cs b/src/BizTalkCheckmkPulse.Setup/Properties/AssemblyInfo.cs
index 5aa7b40..fe5b884 100644
--- a/src/BizTalkCheckmkPulse.Setup/Properties/AssemblyInfo.cs
+++ b/src/BizTalkCheckmkPulse.Setup/Properties/AssemblyInfo.cs
@@ -6,5 +6,5 @@ using System.Runtime.CompilerServices;
 [assembly: AssemblyDescription("PowerShell-free installer and updater for BizTalk Checkmk Pulse")]
 [assembly: AssemblyCompany("BEW")]
 [assembly: AssemblyProduct("BizTalk Checkmk Pulse")]
-[assembly: AssemblyVersion("2.2.2.0")]
-[assembly: AssemblyFileVersion("2.2.2.0")]
+[assembly: AssemblyVersion("2.2.3.0")]
+[assembly: AssemblyFileVersion("2.2.3.0")]
diff --git a/src/BizTalkCheckmkPulse/Properties/AssemblyInfo.cs b/src/BizTalkCheckmkPulse/Properties/AssemblyInfo.cs
index ff889fc..21e8c35 100644
--- a/src/BizTalkCheckmkPulse/Properties/AssemblyInfo.cs
+++ b/src/BizTalkCheckmkPulse/Properties/AssemblyInfo.cs
@@ -6,5 +6,5 @@ using System.Reflection;
 [assembly: AssemblyDescription("Privileged BizTalk data provider and validated Checkmk snapshot consumer")]
 [assembly: AssemblyCompany("BEW")]
 [assembly: AssemblyProduct("BizTalk Checkmk Pulse")]
-[assembly: AssemblyVersion("2.2.2.0")]
-[assembly: AssemblyFileVersion("2.2.2.0")]
+[assembly: AssemblyVersion("2.2.3.0")]
+[assembly: AssemblyFileVersion("2.2.3.0")]
diff --git a/tests/BizTalkCheckmkPulse.Tests/Program.cs b/tests/BizTalkCheckmkPulse.Tests/Program.cs
index cbd3538..08c7765 100644
--- a/tests/BizTalkCheckmkPulse.Tests/Program.cs
+++ b/tests/BizTalkCheckmkPulse.Tests/Program.cs
@@ -37,6 +37,13 @@ namespace BizTalkCheckmkPulse.Tests
             Run("EndpointOutputListsOnlyUnavailableTargets", EndpointOutputListsOnlyUnavailableTargets);
             Run("EndpointOutputExplainsOnlyRealResolutionGaps", EndpointOutputExplainsOnlyRealResolutionGaps);
             Run("EndpointProbeBudgetFitsMinuteInterval", EndpointProbeBudgetFitsMinuteInterval);
+<<<<<<< HEAD
+=======
+            Run("EnvironmentLabelDoesNotRenameServicesByDefault", EnvironmentLabelDoesNotRenameServicesByDefault);
+            Run("DefaultServiceContractIsExact", DefaultServiceContractIsExact);
+            Run("InstallerRejectsUnconfirmedServiceRename", InstallerRejectsUnconfirmedServiceRename);
+            Run("InstallerAllowsConfirmedServiceRename", InstallerAllowsConfirmedServiceRename);
+>>>>>>> e694e4c (Guard Checkmk service renames during updates)
             Run("InstallerUpdatePreservesExistingSettings", InstallerUpdatePreservesExistingSettings);
             Run("SnapshotRoundTripPreservesLines", SnapshotRoundTripPreservesLines);
             Run("SnapshotRejectsTampering", SnapshotRejectsTampering);
@@ -683,6 +690,82 @@ namespace BizTalkCheckmkPulse.Tests
             Assert(configuredMaximum <= 30000, "configured endpoint worst-case must leave headroom in the minute interval");
         }
 
+<<<<<<< HEAD
+=======
+        private static void EnvironmentLabelDoesNotRenameServicesByDefault()
+        {
+            var options = new MonitoringOptions { EnvironmentName = "ACC" };
+            var lines = new CheckmkLocalFormatter(options).FormatSelfTest().ToArray();
+            Assert(lines.Any(x => x.Contains("\"BizTalk Platform\"")), "stable service name without environment missing");
+            Assert(lines.All(x => x.IndexOf("\"BizTalk ACC ", StringComparison.Ordinal) < 0), "environment label must not rename services by default");
+
+            options.IncludeEnvironmentInServiceName = true;
+            lines = new CheckmkLocalFormatter(options).FormatSelfTest().ToArray();
+            Assert(lines.Any(x => x.Contains("\"BizTalk ACC Platform\"")), "explicit environment service-name opt-in missing");
+        }
+
+        private static void DefaultServiceContractIsExact()
+        {
+            var actual = new CheckmkLocalFormatter(new MonitoringOptions())
+                .FormatSelfTest()
+                .Select(ExtractQuotedServiceName)
+                .ToArray();
+            var expected = new[]
+            {
+                "BizTalk Platform",
+                "BizTalk SQL Access",
+                "BizTalk Suspended Instances",
+                "BizTalk Host Instances",
+                "BizTalk Receive Locations",
+                "BizTalk Send Ports",
+                "BizTalk Endpoint Reachability",
+                "BizTalk Orchestrations",
+                "BizTalk Event Log"
+            };
+            AssertEqual(string.Join("|", expected), string.Join("|", actual), "exact default service contract");
+        }
+
+        private static void InstallerRejectsUnconfirmedServiceRename()
+        {
+            try
+            {
+                BizTalkCheckmkPulse.Setup.InstallerEngine.EnsureServiceNameCompatibility(
+                    new[] { "BizTalk Platform", "BizTalk Event Log" },
+                    new[] { "BizTalk ACC Platform", "BizTalk ACC Event Log" },
+                    false);
+                throw new InvalidOperationException("unconfirmed rename was accepted");
+            }
+            catch (InvalidOperationException ex)
+            {
+                Assert(ex.Message.Contains("Sicherheitsstopp"), "rename rejection must explain the safety stop");
+                Assert(ex.Message.Contains("Service Discovery"), "rename rejection must require discovery");
+            }
+        }
+
+        private static void InstallerAllowsConfirmedServiceRename()
+        {
+            var unchanged = BizTalkCheckmkPulse.Setup.InstallerEngine.EnsureServiceNameCompatibility(
+                new[] { "BizTalk Platform", "BizTalk Event Log" },
+                new[] { "BizTalk Event Log", "BizTalk Platform" },
+                false);
+            AssertEqual(string.Empty, unchanged, "service ordering must not be treated as rename");
+
+            var change = BizTalkCheckmkPulse.Setup.InstallerEngine.EnsureServiceNameCompatibility(
+                new[] { "BizTalk ACC Platform" },
+                new[] { "BizTalk Platform" },
+                true);
+            Assert(change.Contains("BizTalk ACC Platform"), "confirmed rename must report removed service");
+            Assert(change.Contains("BizTalk Platform"), "confirmed rename must report new service");
+        }
+
+        private static string ExtractQuotedServiceName(string line)
+        {
+            var start = line.IndexOf('"') + 1;
+            var end = line.IndexOf('"', start);
+            return line.Substring(start, end - start);
+        }
+
+>>>>>>> e694e4c (Guard Checkmk service renames during updates)
         private static void InstallerUpdatePreservesExistingSettings()
         {
             var directory = Path.Combine(Path.GetTempPath(), "BizTalkCheckmkPulse.InstallerTests." + Guid.NewGuid().ToString("N"));