From 53e25d9353d5551449e6d0862b0dee7fea5fa587 Mon Sep 17 00:00:00 2001
From: Khafra <maitken033380023@gmail.com>
Date: Fri, 25 Aug 2023 17:53:08 -0400
Subject: [PATCH 1/3] fix: adjust number of arguments in `Response.json()`

Co-authored-by: LiviaMedeiros <livia@cirno.name>
---
 lib/fetch/response.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/fetch/response.js b/lib/fetch/response.js
index 66c0e50e32b..88deb71a062 100644
--- a/lib/fetch/response.js
+++ b/lib/fetch/response.js
@@ -49,7 +49,7 @@ class Response {
   }
 
   // https://fetch.spec.whatwg.org/#dom-response-json
-  static json (data = undefined, init = {}) {
+  static json (data, init = {}) {
     webidl.argumentLengthCheck(arguments, 1, { header: 'Response.json' })
 
     if (init !== null) {

From 65431fc39772210f6d21cf93c4c6fcb9a5e0db40 Mon Sep 17 00:00:00 2001
From: Khafra <maitken033380023@gmail.com>
Date: Fri, 25 Aug 2023 17:56:19 -0400
Subject: [PATCH 2/3] update wpts

---
 test/wpt/runner/runner.mjs                    |   2 +
 test/wpt/status/fetch.status.json             |  14 +-
 test/wpt/tests/.azure-pipelines.yml           | 125 ++++---
 test/wpt/tests/.taskcluster.yml               |   2 +-
 .../filereader_readAsDataURL.any.js           |  14 +-
 test/wpt/tests/common/media.js                |  20 +-
 test/wpt/tests/common/rendering-utils.js      |   8 +-
 test/wpt/tests/fetch/api/abort/general.any.js |   2 +-
 .../fetch/api/basic/integrity.sub.any.js      |  12 +-
 .../tests/fetch/api/basic/keepalive.any.js    |  36 +-
 .../fetch/api/basic/scheme-blob.sub.any.js    |   4 +
 .../tests/fetch/api/cors/cors-basic.any.js    |  44 ++-
 .../fetch/api/cors/cors-keepalive.any.js      | 118 +++++++
 .../fetch/api/cors/cors-preflight-star.any.js |   4 +
 .../api/crashtests/body-window-destroy.html   |  11 +
 .../destination/resources/dummy_video.webm    | Bin 0 -> 96902 bytes
 .../construct-in-detached-frame.window.js     |  11 +
 .../fetch/api/resources/keepalive-helper.js   |  30 +-
 .../fetch/api/resources/keepalive-iframe.html |  12 +-
 .../tests/fetch/api/resources/stash-put.py    |  26 +-
 .../response-body-read-task-handling.html     |  38 +-
 .../response/response-cancel-stream.any.js    |   7 +
 .../api/response/response-static-json.any.js  |  15 +
 .../resources/content-lengths.json            |  16 +
 .../corb/resources/response_block_probe.js    |   2 +-
 .../corb/response_block.tentative.https.html  |  50 +++
 .../response_block.tentative.sub.https.html   |  44 ---
 test/wpt/tests/fetch/fetch-later/META.yml     |   3 +
 test/wpt/tests/fetch/fetch-later/README.md    |   3 +
 .../basic.tentative.https.window.js           |  13 +
 .../fetch/fetch-later/non-secure.window.js    |   8 +
 .../sendondiscard.tentative.https.window.js   |  28 ++
 .../resources-with-0x00-in-header.window.js   |   2 +-
 .../resources/document-with-0x00-in-header.py |   2 +-
 .../fetch/local-network-access/README.md      |  10 -
 .../orb/resources/script-asm-js-invalid.js    |   4 +
 .../orb/resources/script-asm-js-valid.js      |   4 +
 .../orb/tentative/known-mime-type.sub.any.js  |  10 +
 .../META.yml                                  |   0
 .../fetch/private-network-access/README.md    |  10 +
 ...eflight-required.tentative.https.window.js |  91 +++++
 ...ubresource-fetch.tentative.https.window.js | 330 ++++++++++++++++++
 .../fenced-frame.tentative.https.window.js    | 150 ++++++++
 ...treat-as-public.tentative.https.window.js} |   0
 .../fetch.tentative.https.window.js}          |   0
 .../fetch.tentative.window.js}                |   0
 .../iframe.tentative.https.window.js          | 142 ++++----
 .../iframe.tentative.window.js                |  26 +-
 ...ed-content-fetch.tentative.https.window.js |  92 +++--
 .../nested-worker.tentative.https.window.js}  |   0
 .../nested-worker.tentative.window.js}        |   0
 ...preflight-cache.https.tentative.window.js} |   0
 .../redirect.tentative.https.window.js}       |   0
 .../resources/executor.html                   |   0
 .../resources/fenced-frame-fetcher.https.html |  25 ++
 .../fenced-frame-fetcher.https.html.headers   |   1 +
 ...ame-local-network-access-target.https.html |   8 +
 ...nced-frame-local-network-access.https.html |  14 +
 ...me-local-network-access.https.html.headers |   1 +
 .../resources/fetcher.html                    |   0
 .../resources/fetcher.js                      |   0
 .../resources/iframed.html                    |   0
 .../resources/iframer.html                    |   0
 .../resources/preflight.py                    |   6 +
 .../resources/service-worker-bridge.html      |   0
 .../resources/service-worker.js               |   0
 .../resources/shared-fetcher.js               |   0
 .../resources/shared-worker-blob-fetcher.html |   0
 .../resources/shared-worker-fetcher.html      |   0
 .../resources/socket-opener.html              |   0
 .../resources/support.sub.js                  |  95 ++++-
 .../resources/worker-blob-fetcher.html        |   0
 .../resources/worker-fetcher.html             |   0
 .../resources/worker-fetcher.js               |   0
 .../resources/xhr-sender.html                 |   0
 ...ackground-fetch.tentative.https.window.js} |   0
 ...ce-worker-fetch.tentative.https.window.js} |  33 +-
 ...e-worker-update.tentative.https.window.js} |   0
 .../service-worker.tentative.https.window.js} |   0
 ...rker-blob-fetch.tentative.https.window.js} |   0
 ...red-worker-blob-fetch.tentative.window.js} |   0
 ...ed-worker-fetch.tentative.https.window.js} |   0
 .../shared-worker-fetch.tentative.window.js}  |   0
 .../shared-worker.tentative.https.window.js}  |   0
 .../shared-worker.tentative.window.js}        |   0
 .../websocket.tentative.https.window.js}      |   0
 .../websocket.tentative.window.js}            |   0
 .../worker-blob-fetch.tentative.window.js}    |   0
 .../worker-fetch.tentative.https.window.js}   |   0
 .../worker-fetch.tentative.window.js}         |   0
 .../worker.tentative.https.window.js}         |   0
 .../worker.tentative.window.js}               |   0
 ...treat-as-public.tentative.https.window.js} |   0
 .../xhr.https.tentative.window.js}            |   0
 .../xhr.tentative.window.js}                  |   0
 test/wpt/tests/fetch/range/blob.any.js        |  11 +-
 .../interfaces/attribution-reporting-api.idl  |  16 +-
 .../captured-mouse-events.tentative.idl       |  25 ++
 .../tests/interfaces/css-anchor-position.idl  |  11 +
 test/wpt/tests/interfaces/css-cascade-6.idl   |   4 +-
 test/wpt/tests/interfaces/css-cascade.idl     |   4 -
 test/wpt/tests/interfaces/cssom.idl           |  16 +-
 .../document-picture-in-picture.idl           |  34 ++
 test/wpt/tests/interfaces/dom.idl             |   1 +
 test/wpt/tests/interfaces/fenced-frame.idl    |  15 +-
 test/wpt/tests/interfaces/fs.idl              |   4 +
 test/wpt/tests/interfaces/html.idl            |   8 +
 .../interfaces/mediastream-recording.idl      |   2 +
 test/wpt/tests/interfaces/notifications.idl   |   5 +-
 .../tests/interfaces/permissions-policy.idl   |   1 +
 .../tests/interfaces/real-world-meshing.idl   |  21 ++
 test/wpt/tests/interfaces/resource-timing.idl |   2 +
 test/wpt/tests/interfaces/scheduling-apis.idl |   6 +
 test/wpt/tests/interfaces/screen-capture.idl  |   2 +-
 .../tests/interfaces/scroll-animations.idl    |   6 +-
 .../secure-payment-confirmation.idl           |   4 +
 test/wpt/tests/interfaces/shared-storage.idl  |  80 +++++
 test/wpt/tests/interfaces/storage-buckets.idl |  53 +++
 test/wpt/tests/interfaces/trust-token-api.idl |   7 +-
 test/wpt/tests/interfaces/turtledove.idl      |  29 +-
 test/wpt/tests/interfaces/url.idl             |   4 +-
 test/wpt/tests/interfaces/webauthn.idl        |  75 +++-
 .../webcodecs-av1-codec-registration.idl      |   8 +
 .../webcodecs-avc-codec-registration.idl      |   8 +
 test/wpt/tests/interfaces/webcodecs.idl       |   1 +
 test/wpt/tests/interfaces/webgpu.idl          | 244 +++++++------
 test/wpt/tests/interfaces/webnn.idl           |  11 +-
 .../interfaces/webrtc-encoded-transform.idl   |   5 +-
 test/wpt/tests/interfaces/webrtc-stats.idl    |   4 +-
 test/wpt/tests/interfaces/webrtc.idl          |   8 +-
 test/wpt/tests/interfaces/webtransport.idl    |   5 +-
 test/wpt/tests/interfaces/webxrlayers.idl     |   9 +
 test/wpt/tests/lint.ignore                    |  28 +-
 .../tests/resources/chromium/webusb-test.js   |   9 +-
 .../tests/resources/chromium/webxr-test.js    |   3 -
 test/wpt/tests/resources/idlharness.js        |   7 +-
 .../tests/functional/assert-throws-dom.html   |  55 +++
 .../test_partial_interface_of.html            |   1 -
 .../test_partial_interface_of.html            |   1 -
 test/wpt/tests/resources/test/tox.ini         |   2 +-
 test/wpt/tests/resources/testdriver.js        | 171 ++++++++-
 test/wpt/tests/resources/testharness.js       |  10 +-
 ...led-dedicatedworker-postMessage.https.html |  44 +++
 .../controlled-iframe-postMessage.https.html  |  67 ++++
 .../detached-context.https.html               |  19 +-
 .../service-worker/fetch-error.https.html     |   8 +-
 .../navigation-redirect.https.html            |   4 +-
 .../navigation-timing.https.html              |   1 +
 .../partitioned-cookies.tentative.https.html  |  48 ++-
 .../postMessage-client-worker.js              |  23 ++
 .../resource-timing.sub.https.html            |   4 +-
 .../controlled-frame-postMessage.html         |  39 +++
 .../controlled-worker-late-postMessage.js     |   6 +
 .../controlled-worker-postMessage.js          |   4 +
 .../resources/fetch-access-control.py         |   9 +-
 .../service-worker/resources/missing.asis     |   4 +
 ...ioned-cookies-3p-credentialless-frame.html |  53 ++-
 .../partitioned-cookies-3p-frame.html         |  49 ++-
 .../resources/partitioned-cookies-3p-sw.js    |  29 +-
 .../partitioned-cookies-3p-window.html        |   4 +-
 .../resources/partitioned-cookies-sw.js       |  29 +-
 .../resources/resource-timing-iframe.sub.html |   2 +-
 .../tentative/static-router/README.md         |   4 +
 .../static-router/resources/direct.txt        |   1 +
 ...mple-test-for-condition-main-resource.html |   3 +
 .../static-router/resources/simple.html       |   3 +
 .../resources/static-router-sw.js             |  35 ++
 .../resources/test-helpers.sub.js             | 303 ++++++++++++++++
 .../static-router-main-resource.https.html    |  58 +++
 .../static-router-subresource.https.html      |  48 +++
 ...ket-quota-indexeddb.tentative.https.any.js |  35 ++
 ...cket-storage-policy.tentative.https.any.js |  21 ++
 ...kets_storage_policy.tentative.https.any.js |  46 ---
 ...nager-persist-persisted-match.https.any.js |   9 +
 ...socket-connection-ccns.tentative.window.js |   5 +-
 ...socket-connection-ccns.tentative.window.js |   5 +-
 ...e-with-open-websocket-connection.window.js |   2 +-
 test/wpt/tests/xhr/blob-range.any.js          | 246 +++++++++++++
 .../tests/xhr/responsexml-invalid-type.html   |  21 ++
 ...-authentication-basic-cors-not-enabled.htm |   5 +-
 ...entication-cors-basic-setrequestheader.htm |   5 +-
 ...tication-cors-setrequestheader-no-cred.htm |   5 +-
 .../send-network-error-sync-events.sub.htm    |   2 +-
 183 files changed, 3461 insertions(+), 661 deletions(-)
 create mode 100644 test/wpt/tests/fetch/api/cors/cors-keepalive.any.js
 create mode 100644 test/wpt/tests/fetch/api/crashtests/body-window-destroy.html
 create mode 100644 test/wpt/tests/fetch/api/request/destination/resources/dummy_video.webm
 create mode 100644 test/wpt/tests/fetch/api/request/multi-globals/construct-in-detached-frame.window.js
 create mode 100644 test/wpt/tests/fetch/corb/response_block.tentative.https.html
 delete mode 100644 test/wpt/tests/fetch/corb/response_block.tentative.sub.https.html
 create mode 100644 test/wpt/tests/fetch/fetch-later/META.yml
 create mode 100644 test/wpt/tests/fetch/fetch-later/README.md
 create mode 100644 test/wpt/tests/fetch/fetch-later/basic.tentative.https.window.js
 create mode 100644 test/wpt/tests/fetch/fetch-later/non-secure.window.js
 create mode 100644 test/wpt/tests/fetch/fetch-later/sendondiscard.tentative.https.window.js
 delete mode 100644 test/wpt/tests/fetch/local-network-access/README.md
 create mode 100644 test/wpt/tests/fetch/orb/resources/script-asm-js-invalid.js
 create mode 100644 test/wpt/tests/fetch/orb/resources/script-asm-js-valid.js
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/META.yml (100%)
 create mode 100644 test/wpt/tests/fetch/private-network-access/README.md
 create mode 100644 test/wpt/tests/fetch/private-network-access/fenced-frame-no-preflight-required.tentative.https.window.js
 create mode 100644 test/wpt/tests/fetch/private-network-access/fenced-frame-subresource-fetch.tentative.https.window.js
 create mode 100644 test/wpt/tests/fetch/private-network-access/fenced-frame.tentative.https.window.js
 rename test/wpt/tests/fetch/{local-network-access/fetch-from-treat-as-public.https.window.js => private-network-access/fetch-from-treat-as-public.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/fetch.https.window.js => private-network-access/fetch.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/fetch.window.js => private-network-access/fetch.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/iframe.tentative.https.window.js (63%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/iframe.tentative.window.js (86%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/mixed-content-fetch.tentative.https.window.js (77%)
 rename test/wpt/tests/fetch/{local-network-access/nested-worker.https.window.js => private-network-access/nested-worker.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/nested-worker.window.js => private-network-access/nested-worker.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/preflight-cache.https.window.js => private-network-access/preflight-cache.https.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/redirect.https.window.js => private-network-access/redirect.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/executor.html (100%)
 create mode 100644 test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html
 create mode 100644 test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html.headers
 create mode 100644 test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access-target.https.html
 create mode 100644 test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html
 create mode 100644 test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html.headers
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/fetcher.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/fetcher.js (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/iframed.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/iframer.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/preflight.py (97%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/service-worker-bridge.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/service-worker.js (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/shared-fetcher.js (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/shared-worker-blob-fetcher.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/shared-worker-fetcher.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/socket-opener.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/support.sub.js (86%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/worker-blob-fetcher.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/worker-fetcher.html (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/worker-fetcher.js (100%)
 rename test/wpt/tests/fetch/{local-network-access => private-network-access}/resources/xhr-sender.html (100%)
 rename test/wpt/tests/fetch/{local-network-access/service-worker-background-fetch.https.window.js => private-network-access/service-worker-background-fetch.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/service-worker-fetch.https.window.js => private-network-access/service-worker-fetch.tentative.https.window.js} (88%)
 rename test/wpt/tests/fetch/{local-network-access/service-worker-update.https.window.js => private-network-access/service-worker-update.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/service-worker.https.window.js => private-network-access/service-worker.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/shared-worker-blob-fetch.https.window.js => private-network-access/shared-worker-blob-fetch.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/shared-worker-blob-fetch.window.js => private-network-access/shared-worker-blob-fetch.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/shared-worker-fetch.https.window.js => private-network-access/shared-worker-fetch.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/shared-worker-fetch.window.js => private-network-access/shared-worker-fetch.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/shared-worker.https.window.js => private-network-access/shared-worker.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/shared-worker.window.js => private-network-access/shared-worker.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/websocket.https.window.js => private-network-access/websocket.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/websocket.window.js => private-network-access/websocket.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/worker-blob-fetch.window.js => private-network-access/worker-blob-fetch.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/worker-fetch.https.window.js => private-network-access/worker-fetch.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/worker-fetch.window.js => private-network-access/worker-fetch.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/worker.https.window.js => private-network-access/worker.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/worker.window.js => private-network-access/worker.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/xhr-from-treat-as-public.https.window.js => private-network-access/xhr-from-treat-as-public.tentative.https.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/xhr.https.window.js => private-network-access/xhr.https.tentative.window.js} (100%)
 rename test/wpt/tests/fetch/{local-network-access/xhr.window.js => private-network-access/xhr.tentative.window.js} (100%)
 create mode 100644 test/wpt/tests/interfaces/captured-mouse-events.tentative.idl
 create mode 100644 test/wpt/tests/interfaces/css-anchor-position.idl
 create mode 100644 test/wpt/tests/interfaces/document-picture-in-picture.idl
 create mode 100644 test/wpt/tests/interfaces/real-world-meshing.idl
 create mode 100644 test/wpt/tests/interfaces/shared-storage.idl
 create mode 100644 test/wpt/tests/interfaces/storage-buckets.idl
 create mode 100644 test/wpt/tests/resources/test/tests/functional/assert-throws-dom.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/controlled-dedicatedworker-postMessage.https.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/controlled-iframe-postMessage.https.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/postMessage-client-worker.js
 create mode 100644 test/wpt/tests/service-workers/service-worker/resources/controlled-frame-postMessage.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/resources/controlled-worker-late-postMessage.js
 create mode 100644 test/wpt/tests/service-workers/service-worker/resources/controlled-worker-postMessage.js
 create mode 100644 test/wpt/tests/service-workers/service-worker/resources/missing.asis
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/README.md
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/direct.txt
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple-test-for-condition-main-resource.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/static-router-sw.js
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/test-helpers.sub.js
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-main-resource.https.html
 create mode 100644 test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-subresource.https.html
 create mode 100644 test/wpt/tests/storage/buckets/bucket-quota-indexeddb.tentative.https.any.js
 create mode 100644 test/wpt/tests/storage/buckets/bucket-storage-policy.tentative.https.any.js
 delete mode 100644 test/wpt/tests/storage/buckets/buckets_storage_policy.tentative.https.any.js
 create mode 100644 test/wpt/tests/storage/storagemanager-persist-persisted-match.https.any.js
 create mode 100644 test/wpt/tests/xhr/blob-range.any.js
 create mode 100644 test/wpt/tests/xhr/responsexml-invalid-type.html

diff --git a/test/wpt/runner/runner.mjs b/test/wpt/runner/runner.mjs
index 0b66f58466b..5bec326d3e1 100644
--- a/test/wpt/runner/runner.mjs
+++ b/test/wpt/runner/runner.mjs
@@ -312,6 +312,8 @@ export class WPTRunner extends EventEmitter {
       `unexpected failures: ${failed - expectedFailures}, ` +
       `skipped: ${skipped}`
     )
+
+    process.exit(0)
   }
 
   addInitScript (code) {
diff --git a/test/wpt/status/fetch.status.json b/test/wpt/status/fetch.status.json
index cb5949579cf..b9311abeb68 100644
--- a/test/wpt/status/fetch.status.json
+++ b/test/wpt/status/fetch.status.json
@@ -2,11 +2,13 @@
   "api": {
     "abort": {
       "general.any.js": {
+        "note": "TODO(@KhafraDev): Clone aborts with original controller can probably be fixed",
         "fail": [
           "Already aborted signal rejects immediately",
           "Underlying connection is closed when aborting after receiving response - no-cors",
           "Stream errors once aborted. Underlying connection closed.",
-          "Readable stream synchronously cancels with AbortError if aborted before reading"
+          "Readable stream synchronously cancels with AbortError if aborted before reading",
+          "Clone aborts with original controller"
         ]
       },
       "cache.https.any.js": {
@@ -33,8 +35,12 @@
         ]
       },
       "integrity.sub.any.js": {
+        "note": "TODO(@KhafraDev): sha-512 tests can probably be fixed",
         "fail": [
-          "Empty string integrity for opaque response"
+          "Empty string integrity for opaque response",
+          "SHA-512 integrity with missing padding",
+          "SHA-512 integrity base64url encoded",
+          "SHA-512 integrity base64url encoded with missing padding"
         ]
       },
       "keepalive.any.js": {
@@ -128,6 +134,10 @@
         ]
       }
     },
+    "fetch-later": {
+      "note": "this is not part of the spec, only a proposal",
+      "skip": true
+    },
     "headers": {
       "header-setcookie.any.js": {
         "note": "undici doesn't filter headers",
diff --git a/test/wpt/tests/.azure-pipelines.yml b/test/wpt/tests/.azure-pipelines.yml
index 20d5ec0f431..75a87df90f0 100644
--- a/test/wpt/tests/.azure-pipelines.yml
+++ b/test/wpt/tests/.azure-pipelines.yml
@@ -21,6 +21,7 @@ trigger:
 - triggers/edge_canary
 - triggers/safari_stable
 - triggers/safari_preview
+- triggers/wktr_preview
 
 # Set safaridriver_diagnose to true to enable safaridriver diagnostics. The
 # logs won't appear in `./wpt run` output but will be uploaded as an artifact.
@@ -34,11 +35,11 @@ jobs:
   displayName: 'affected tests: Safari Technology Preview'
   condition: eq(variables['Build.Reason'], 'PullRequest')
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/affected_tests.yml
     parameters:
       artifactName: 'safari-preview-affected-tests'
@@ -51,11 +52,11 @@ jobs:
   displayName: 'affected tests without changes: Safari Technology Preview'
   condition: eq(variables['Build.Reason'], 'PullRequest')
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/affected_tests.yml
     parameters:
       checkoutCommit: 'HEAD^1'
@@ -76,7 +77,7 @@ jobs:
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - script: |
       set -eux -o pipefail
@@ -93,17 +94,18 @@ jobs:
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wptrunner_infrastructure']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
     parameters:
       packages: virtualenv
   - template: tools/ci/azure/install_fonts.yml
   - template: tools/ci/azure/install_certs.yml
+  - template: tools/ci/azure/color_profile.yml
   - template: tools/ci/azure/install_chrome.yml
   - template: tools/ci/azure/install_firefox.yml
   - template: tools/ci/azure/install_safari.yml
@@ -111,20 +113,25 @@ jobs:
   - template: tools/ci/azure/update_manifest.yml
   - script: |
       set -eux -o pipefail
-      ./wpt run --yes --no-manifest-update --manifest MANIFEST.json --metadata infrastructure/metadata/ --log-mach - --log-mach-level info --channel dev chrome infrastructure/
+      ./wpt run --yes --no-manifest-update --manifest MANIFEST.json --metadata infrastructure/metadata/ --log-mach - --log-mach-level info --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_macos_chrome.json --channel dev chrome infrastructure/
     condition: succeededOrFailed()
     displayName: 'Run tests (Chrome Dev)'
   - script: |
       set -eux -o pipefail
-      ./wpt run --yes --no-manifest-update --manifest MANIFEST.json --metadata infrastructure/metadata/ --log-mach - --log-mach-level info --channel nightly firefox infrastructure/
+      ./wpt run --yes --no-manifest-update --manifest MANIFEST.json --metadata infrastructure/metadata/ --log-mach - --log-mach-level info --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_macos_firefox.json --channel nightly firefox infrastructure/
     condition: succeededOrFailed()
     displayName: 'Run tests (Firefox Nightly)'
   - script: |
       set -eux -o pipefail
       export SYSTEM_VERSION_COMPAT=0
-      ./wpt run --yes --no-manifest-update --manifest MANIFEST.json --metadata infrastructure/metadata/ --log-mach - --log-mach-level info --channel preview safari infrastructure/
+      ./wpt run --yes --no-manifest-update --manifest MANIFEST.json --metadata infrastructure/metadata/ --log-mach - --log-mach-level info  --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_macos_safari.json --channel preview safari infrastructure/
     condition: succeededOrFailed()
     displayName: 'Run tests (Safari Technology Preview)'
+  - task: PublishBuildArtifacts@1
+    condition: succeededOrFailed()
+    displayName: 'Publish results'
+    inputs:
+      artifactName: 'infrastructure-results'
   - template: tools/ci/azure/publish_logs.yml
   - template: tools/ci/azure/sysdiagnose.yml
 
@@ -133,76 +140,79 @@ jobs:
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.tools_unittest']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.7'
+      # TODO(#40525): Revert back to 3.7 once the Mac agent's Python v3.7 contains bz2 again.
+      versionSpec: '3.7.16'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/
       toxenv: py37
 
-- job: tools_unittest_mac_py310
-  displayName: 'tools/ unittests: macOS + Python 3.10'
+- job: tools_unittest_mac_py311
+  displayName: 'tools/ unittests: macOS + Python 3.11'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.tools_unittest']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/
-      toxenv: py310
+      toxenv: py311
 
 - job: wptrunner_unittest_mac_py37
   displayName: 'tools/wptrunner/ unittests: macOS + Python 3.7'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wptrunner_unittest']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.7'
+      # TODO(#40525): Revert back to 3.7 once the Mac agent's Python v3.7 contains bz2 again.
+      versionSpec: '3.7.16'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/wptrunner/
       toxenv: py37
 
-- job: wptrunner_unittest_mac_py310
-  displayName: 'tools/wptrunner/ unittests: macOS + Python 3.10'
+- job: wptrunner_unittest_mac_py311
+  displayName: 'tools/wptrunner/ unittests: macOS + Python 3.11'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wptrunner_unittest']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/wptrunner/
-      toxenv: py310
+      toxenv: py311
 
 - job: wpt_integration_mac_py37
   displayName: 'tools/wpt/ tests: macOS + Python 3.7'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wpt_integration']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   # full checkout required
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.7'
+      # TODO(#40525): Revert back to 3.7 once the Mac agent's Python v3.7 contains bz2 again.
+      versionSpec: '3.7.16'
   - template: tools/ci/azure/install_chrome.yml
   - template: tools/ci/azure/install_firefox.yml
   - template: tools/ci/azure/update_hosts.yml
@@ -212,17 +222,17 @@ jobs:
       directory: tools/wpt/
       toxenv: py37
 
-- job: wpt_integration_mac_py310
-  displayName: 'tools/wpt/ tests: macOS + Python 3.10'
+- job: wpt_integration_mac_py311
+  displayName: 'tools/wpt/ tests: macOS + Python 3.11'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wpt_integration']
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   # full checkout required
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/install_chrome.yml
   - template: tools/ci/azure/install_firefox.yml
   - template: tools/ci/azure/update_hosts.yml
@@ -230,7 +240,7 @@ jobs:
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/wpt/
-      toxenv: py310
+      toxenv: py311
 
 - job: tools_unittest_win_py37
   displayName: 'tools/ unittests: Windows + Python 3.7'
@@ -251,8 +261,8 @@ jobs:
       directory: tools/
       toxenv: py37
 
-- job: tools_unittest_win_py310
-  displayName: 'tools/ unittests: Windows + Python 3.10'
+- job: tools_unittest_win_py311
+  displayName: 'tools/ unittests: Windows + Python 3.11'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.tools_unittest']
   pool:
@@ -260,13 +270,13 @@ jobs:
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
       addToPath: false
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/
-      toxenv: py310
+      toxenv: py311
 
 - job: wptrunner_unittest_win_py37
   displayName: 'tools/wptrunner/ unittests: Windows + Python 3.7'
@@ -285,8 +295,8 @@ jobs:
       directory: tools/wptrunner/
       toxenv: py37
 
-- job: wptrunner_unittest_win_py310
-  displayName: 'tools/wptrunner/ unittests: Windows + Python 3.10'
+- job: wptrunner_unittest_win_py311
+  displayName: 'tools/wptrunner/ unittests: Windows + Python 3.11'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wptrunner_unittest']
   pool:
@@ -294,13 +304,13 @@ jobs:
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
       addToPath: false
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/wptrunner/
-      toxenv: py310
+      toxenv: py311
 
 - job: wpt_integration_win_py37
   displayName: 'tools/wpt/ tests: Windows + Python 3.7'
@@ -324,8 +334,8 @@ jobs:
       directory: tools/wpt/
       toxenv: py37
 
-- job: wpt_integration_win_py310
-  displayName: 'tools/wpt/ tests: Windows + Python 3.10'
+- job: wpt_integration_win_py311
+  displayName: 'tools/wpt/ tests: Windows + Python 3.11'
   dependsOn: decision
   condition: dependencies.decision.outputs['test_jobs.wpt_integration']
   pool:
@@ -334,7 +344,7 @@ jobs:
   # full checkout required
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   # currently just using the outdated Chrome/Firefox on the VM rather than
   # figuring out how to install Chrome Dev channel on Windows
   # - template: tools/ci/azure/install_chrome.yml
@@ -344,7 +354,7 @@ jobs:
   - template: tools/ci/azure/tox_pytest.yml
     parameters:
       directory: tools/wpt/
-      toxenv: py310
+      toxenv: py311
 
 - job: results_edge_stable
   displayName: 'all tests: Edge Stable'
@@ -360,7 +370,7 @@ jobs:
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/system_info.yml
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
@@ -399,7 +409,7 @@ jobs:
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/system_info.yml
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
@@ -438,7 +448,7 @@ jobs:
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
     parameters:
@@ -472,16 +482,17 @@ jobs:
     parallel: 8 # chosen to make runtime ~2h
   timeoutInMinutes: 180
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
     parameters:
       packages: virtualenv
   - template: tools/ci/azure/install_certs.yml
+  - template: tools/ci/azure/color_profile.yml
   - template: tools/ci/azure/install_safari.yml
     parameters:
       channel: stable
@@ -490,8 +501,9 @@ jobs:
   - script: |
       set -eux -o pipefail
       export SYSTEM_VERSION_COMPAT=0
-      ./wpt run --no-manifest-update --no-restart-on-unexpected --no-fail-on-unexpected --this-chunk=$(System.JobPositionInPhase) --total-chunks=$(System.TotalJobsInPhase) --chunk-type hash --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_$(System.JobPositionInPhase).json --log-wptscreenshot $(Build.ArtifactStagingDirectory)/wpt_screenshot_$(System.JobPositionInPhase).txt --log-mach - --log-mach-level info --channel stable --kill-safari safari
+      ./wpt run --no-manifest-update --no-restart-on-unexpected --no-fail-on-unexpected --this-chunk=$(System.JobPositionInPhase) --total-chunks=$(System.TotalJobsInPhase) --chunk-type hash --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_$(System.JobPositionInPhase).json --log-wptscreenshot $(Build.ArtifactStagingDirectory)/wpt_screenshot_$(System.JobPositionInPhase).txt --log-mach - --log-mach-level info --channel stable --kill-safari --max-restarts 100 safari
     displayName: 'Run tests'
+    retryCountOnTaskFailure: 2
   - task: PublishBuildArtifacts@1
     displayName: 'Publish results'
     inputs:
@@ -513,24 +525,26 @@ jobs:
     parallel: 8 # chosen to make runtime ~2h
   timeoutInMinutes: 180
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
     parameters:
       packages: virtualenv
   - template: tools/ci/azure/install_certs.yml
+  - template: tools/ci/azure/color_profile.yml
   - template: tools/ci/azure/install_safari.yml
   - template: tools/ci/azure/update_hosts.yml
   - template: tools/ci/azure/update_manifest.yml
   - script: |
       set -eux -o pipefail
       export SYSTEM_VERSION_COMPAT=0
-      ./wpt run --no-manifest-update --no-restart-on-unexpected --no-fail-on-unexpected --this-chunk=$(System.JobPositionInPhase) --total-chunks=$(System.TotalJobsInPhase) --chunk-type hash --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_$(System.JobPositionInPhase).json --log-wptscreenshot $(Build.ArtifactStagingDirectory)/wpt_screenshot_$(System.JobPositionInPhase).txt --log-mach - --log-mach-level info --channel preview --kill-safari safari
+      ./wpt run --no-manifest-update --no-restart-on-unexpected --no-fail-on-unexpected --this-chunk=$(System.JobPositionInPhase) --total-chunks=$(System.TotalJobsInPhase) --chunk-type hash --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_$(System.JobPositionInPhase).json --log-wptscreenshot $(Build.ArtifactStagingDirectory)/wpt_screenshot_$(System.JobPositionInPhase).txt --log-mach - --log-mach-level info --channel preview --kill-safari --max-restarts 100 safari
     displayName: 'Run tests'
+    retryCountOnTaskFailure: 2
   - task: PublishBuildArtifacts@1
     displayName: 'Publish results'
     inputs:
@@ -551,22 +565,23 @@ jobs:
     parallel: 8 # chosen to make runtime ~2h
   timeoutInMinutes: 180
   pool:
-    vmImage: 'macOS-12'
+    vmImage: 'macOS-13'
   steps:
   - task: UsePythonVersion@0
     inputs:
-      versionSpec: '3.10'
+      versionSpec: '3.11'
   - template: tools/ci/azure/checkout.yml
   - template: tools/ci/azure/pip_install.yml
     parameters:
       packages: virtualenv
   - template: tools/ci/azure/install_certs.yml
+  - template: tools/ci/azure/color_profile.yml
   - template: tools/ci/azure/update_hosts.yml
   - template: tools/ci/azure/update_manifest.yml
   - script: |
       set -eux -o pipefail
       export SYSTEM_VERSION_COMPAT=0
-      ./wpt run --no-manifest-update --no-restart-on-unexpected --no-fail-on-unexpected --this-chunk=$(System.JobPositionInPhase) --total-chunks=$(System.TotalJobsInPhase) --chunk-type hash --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_$(System.JobPositionInPhase).json --log-wptscreenshot $(Build.ArtifactStagingDirectory)/wpt_screenshot_$(System.JobPositionInPhase).txt --log-mach - --log-mach-level info --channel main --install-browser wktr
+      ./wpt run --no-manifest-update --no-restart-on-unexpected --no-fail-on-unexpected --this-chunk=$(System.JobPositionInPhase) --total-chunks=$(System.TotalJobsInPhase) --chunk-type hash --log-wptreport $(Build.ArtifactStagingDirectory)/wpt_report_$(System.JobPositionInPhase).json --log-wptscreenshot $(Build.ArtifactStagingDirectory)/wpt_screenshot_$(System.JobPositionInPhase).txt --log-mach - --log-mach-level info --channel experimental --install-browser --yes wktr
     displayName: 'Run tests'
   - task: PublishBuildArtifacts@1
     displayName: 'Publish results'
diff --git a/test/wpt/tests/.taskcluster.yml b/test/wpt/tests/.taskcluster.yml
index c80e92af204..c817999b8e6 100644
--- a/test/wpt/tests/.taskcluster.yml
+++ b/test/wpt/tests/.taskcluster.yml
@@ -57,7 +57,7 @@ tasks:
             owner: ${owner}
             source: ${event.repository.clone_url}
           payload:
-            image: webplatformtests/wpt:0.53
+            image: webplatformtests/wpt:0.54
             maxRunTime: 7200
             artifacts:
               public/results:
diff --git a/test/wpt/tests/FileAPI/reading-data-section/filereader_readAsDataURL.any.js b/test/wpt/tests/FileAPI/reading-data-section/filereader_readAsDataURL.any.js
index d6812121295..4f9dbf7a754 100644
--- a/test/wpt/tests/FileAPI/reading-data-section/filereader_readAsDataURL.any.js
+++ b/test/wpt/tests/FileAPI/reading-data-section/filereader_readAsDataURL.any.js
@@ -39,4 +39,16 @@ async_test(function(testCase) {
     testCase.done();
   });
   reader.readAsDataURL(blob);
-}, 'readAsDataURL result for Blob with unspecified MIME type');
\ No newline at end of file
+}, 'readAsDataURL result for Blob with unspecified MIME type');
+
+async_test(function(testCase) {
+  var blob = new Blob([]);
+  var reader = new FileReader();
+
+  reader.onload = this.step_func(function() {
+    assert_equals(reader.result,
+                  "data:application/octet-stream;base64,");
+    testCase.done();
+  });
+  reader.readAsDataURL(blob);
+}, 'readAsDataURL result for empty Blob');
\ No newline at end of file
diff --git a/test/wpt/tests/common/media.js b/test/wpt/tests/common/media.js
index f2dc8612660..800593f5343 100644
--- a/test/wpt/tests/common/media.js
+++ b/test/wpt/tests/common/media.js
@@ -9,10 +9,15 @@ function getVideoURI(base)
 
     var videotag = document.createElement("video");
 
-    if ( videotag.canPlayType  &&
-         videotag.canPlayType('video/ogg; codecs="theora, vorbis"') )
+    if ( videotag.canPlayType )
     {
-        extension = '.ogv';
+      if (videotag.canPlayType('video/webm; codecs="vp9, opus"') )
+      {
+          extension = '.webm';
+      } else if ( videotag.canPlayType('video/ogg; codecs="theora, vorbis"') )
+      {
+          extension = '.ogv';
+      }
     }
 
     return base + extension;
@@ -46,10 +51,11 @@ function getAudioURI(base)
 function getMediaContentType(url) {
     var extension = new URL(url, location).pathname.split(".").pop();
     var map = {
-        "mp4": "video/mp4",
-        "ogv": "application/ogg",
-        "mp3": "audio/mp3",
-        "oga": "application/ogg",
+        "mp4" : "video/mp4",
+        "ogv" : "application/ogg",
+        "webm": "video/webm",
+        "mp3" : "audio/mp3",
+        "oga" : "application/ogg",
     };
     return map[extension];
 }
diff --git a/test/wpt/tests/common/rendering-utils.js b/test/wpt/tests/common/rendering-utils.js
index 8027cd5f848..46283bd5d07 100644
--- a/test/wpt/tests/common/rendering-utils.js
+++ b/test/wpt/tests/common/rendering-utils.js
@@ -7,14 +7,12 @@
  */
 function waitForAtLeastOneFrame() {
   return new Promise(resolve => {
-    // Different web engines work slightly different on this area but 1) waiting
-    // for two requestAnimationFrames() to happen one after another and 2)
-    // adding a step_timeout(0) to guarantee events have finished should be
+    // Different web engines work slightly different on this area but waiting
+    // for two requestAnimationFrames() to happen, one after another, should be
     // sufficient to ensure at least one frame has been generated anywhere.
-    // See https://bugzilla.mozilla.org/show_bug.cgi?id=1785615
     window.requestAnimationFrame(() => {
       window.requestAnimationFrame(() => {
-        setTimeout(resolve, 0);
+        resolve();
       });
     });
   });
diff --git a/test/wpt/tests/fetch/api/abort/general.any.js b/test/wpt/tests/fetch/api/abort/general.any.js
index 7bf98ba9b24..3727bb42afe 100644
--- a/test/wpt/tests/fetch/api/abort/general.any.js
+++ b/test/wpt/tests/fetch/api/abort/general.any.js
@@ -566,7 +566,7 @@ test(() => {
 
   controller.abort();
 
-  assert_array_equals(log, ['clone-aborted', 'original-aborted'], "Abort events fired in correct order");
+  assert_array_equals(log, ['original-aborted', 'clone-aborted'], "Abort events fired in correct order");
   assert_true(request.signal.aborted, 'Signal aborted');
   assert_true(clonedRequest.signal.aborted, 'Signal aborted');
 }, "Clone aborts with original controller");
diff --git a/test/wpt/tests/fetch/api/basic/integrity.sub.any.js b/test/wpt/tests/fetch/api/basic/integrity.sub.any.js
index 56dbd4909f6..e3cfd1b2f6e 100644
--- a/test/wpt/tests/fetch/api/basic/integrity.sub.any.js
+++ b/test/wpt/tests/fetch/api/basic/integrity.sub.any.js
@@ -28,6 +28,9 @@ function integrity(desc, url, integrity, initRequestMode, shouldPass) {
 const topSha256 = "sha256-KHIDZcXnR2oBHk9DrAA+5fFiR6JjudYjqoXtMR1zvzk=";
 const topSha384 = "sha384-MgZYnnAzPM/MjhqfOIMfQK5qcFvGZsGLzx4Phd7/A8fHTqqLqXqKo8cNzY3xEPTL";
 const topSha512 = "sha512-D6yns0qxG0E7+TwkevZ4Jt5t7Iy3ugmAajG/dlf6Pado1JqTyneKXICDiqFIkLMRExgtvg8PlxbKTkYfRejSOg==";
+const topSha512wrongpadding = "sha512-D6yns0qxG0E7+TwkevZ4Jt5t7Iy3ugmAajG/dlf6Pado1JqTyneKXICDiqFIkLMRExgtvg8PlxbKTkYfRejSOg";
+const topSha512base64url = "sha512-D6yns0qxG0E7-TwkevZ4Jt5t7Iy3ugmAajG_dlf6Pado1JqTyneKXICDiqFIkLMRExgtvg8PlxbKTkYfRejSOg==";
+const topSha512base64url_nopadding = "sha512-D6yns0qxG0E7-TwkevZ4Jt5t7Iy3ugmAajG_dlf6Pado1JqTyneKXICDiqFIkLMRExgtvg8PlxbKTkYfRejSOg";
 const invalidSha256 = "sha256-dKUcPOn/AlUjWIwcHeHNqYXPlvyGiq+2dWOdFcE+24I=";
 const invalidSha512 = "sha512-oUceBRNxPxnY60g/VtPCj2syT4wo4EZh2CgYdWy9veW8+OsReTXoh7dizMGZafvx9+QhMS39L/gIkxnPIn41Zg==";
 
@@ -38,13 +41,20 @@ const corsUrl =
 const corsUrl2 = `https://{{host}}:{{ports[https][0]}}${path}`
 
 integrity("Empty string integrity", url, "", /* initRequestMode */ undefined,
-          /* shouldPass */ true);
+         /* shouldPass */ true);
 integrity("SHA-256 integrity", url, topSha256, /* initRequestMode */ undefined,
           /* shouldPass */ true);
 integrity("SHA-384 integrity", url, topSha384, /* initRequestMode */ undefined,
           /* shouldPass */ true);
 integrity("SHA-512 integrity", url, topSha512, /* initRequestMode */ undefined,
           /* shouldPass */ true);
+integrity("SHA-512 integrity with missing padding", url, topSha512wrongpadding,
+          /* initRequestMode */ undefined, /* shouldPass */ true);
+integrity("SHA-512 integrity base64url encoded", url, topSha512base64url,
+           /* initRequestMode */ undefined, /* shouldPass */ true);
+integrity("SHA-512 integrity base64url encoded with missing padding", url,
+            topSha512base64url_nopadding, /* initRequestMode */ undefined,
+            /* shouldPass */ true);
 integrity("Invalid integrity", url, invalidSha256,
           /* initRequestMode */ undefined, /* shouldPass */  false);
 integrity("Multiple integrities: valid stronger than invalid", url,
diff --git a/test/wpt/tests/fetch/api/basic/keepalive.any.js b/test/wpt/tests/fetch/api/basic/keepalive.any.js
index 4f33284d0c7..899d41d676a 100644
--- a/test/wpt/tests/fetch/api/basic/keepalive.any.js
+++ b/test/wpt/tests/fetch/api/basic/keepalive.any.js
@@ -14,16 +14,30 @@ const {
   HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT
 } = get_host_info();
 
-for (const method of ['GET', 'POST']) {
-  promise_test(async (test) => {
-    const token1 = token();
-    const iframe = document.createElement('iframe');
-    iframe.src = getKeepAliveIframeUrl(token1, method);
-    document.body.appendChild(iframe);
-    await iframeLoaded(iframe);
-    assert_equals(await getTokenFromMessage(), token1);
-    iframe.remove();
+/**
+ * In a different-site iframe, test to fetch a keepalive URL on the specified
+ * document event.
+ */
+function keepaliveSimpleRequestTest(method) {
+  for (const evt of ['load', 'pagehide', 'unload']) {
+    const desc =
+        `[keepalive] simple ${method} request on '${evt}' [no payload]`;
+    promise_test(async (test) => {
+      const token1 = token();
+      const iframe = document.createElement('iframe');
+      iframe.src = getKeepAliveIframeUrl(token1, method, {sendOn: evt});
+      document.body.appendChild(iframe);
+      await iframeLoaded(iframe);
+      if (evt != 'load') {
+        iframe.remove();
+      }
+      assert_equals(await getTokenFromMessage(), token1);
+
+      assertStashedTokenAsync(desc, token1);
+    }, `${desc}; setting up`);
+  }
+}
 
-    assertStashedTokenAsync(`simple ${method} request: no payload`, token1);
-  }, `simple ${method} request: no payload; setting up`);
+for (const method of ['GET', 'POST']) {
+  keepaliveSimpleRequestTest(method);
 }
diff --git a/test/wpt/tests/fetch/api/basic/scheme-blob.sub.any.js b/test/wpt/tests/fetch/api/basic/scheme-blob.sub.any.js
index a6059ea93d9..8afdc033c9d 100644
--- a/test/wpt/tests/fetch/api/basic/scheme-blob.sub.any.js
+++ b/test/wpt/tests/fetch/api/basic/scheme-blob.sub.any.js
@@ -57,6 +57,10 @@ let empty_data_blob = new Blob([], {type: "text/plain"});
 checkFetchResponse(URL.createObjectURL(empty_data_blob), "", "text/plain", 0,
                   "Fetching URL.createObjectURL(empty_data_blob) is OK");
 
+let invalid_type_blob = new Blob([], {type: "invalid"});
+checkFetchResponse(URL.createObjectURL(invalid_type_blob), "", "", 0,
+                  "Fetching URL.createObjectURL(invalid_type_blob) is OK");
+
 promise_test(function(test) {
   return fetch("/images/blue.png").then(function(resp) {
     return resp.arrayBuffer();
diff --git a/test/wpt/tests/fetch/api/cors/cors-basic.any.js b/test/wpt/tests/fetch/api/cors/cors-basic.any.js
index 23f5f91c87d..95de0af2d8f 100644
--- a/test/wpt/tests/fetch/api/cors/cors-basic.any.js
+++ b/test/wpt/tests/fetch/api/cors/cors-basic.any.js
@@ -1,37 +1,43 @@
 // META: script=../resources/utils.js
 // META: script=/common/get-host-info.sub.js
 
+const {
+  HTTPS_ORIGIN,
+  HTTP_ORIGIN_WITH_DIFFERENT_PORT,
+  HTTP_REMOTE_ORIGIN,
+  HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT,
+  HTTPS_REMOTE_ORIGIN,
+} = get_host_info();
+
 function cors(desc, origin) {
-  var url = origin + dirname(location.pathname);
-  var urlParameters = "?pipe=header(Access-Control-Allow-Origin,*)";
+  const url = `${origin}${dirname(location.pathname)}${RESOURCES_DIR}top.txt`;
+  const urlAllowCors = `${url}?pipe=header(Access-Control-Allow-Origin,*)`;
 
-  promise_test(function(test) {
-    return fetch(url + RESOURCES_DIR + "top.txt" + urlParameters, {"mode": "no-cors"} ).then(function(resp) {
+  promise_test((test) => {
+    return fetch(urlAllowCors, {'mode': 'no-cors'}).then((resp) => {
       assert_equals(resp.status, 0, "Opaque filter: status is 0");
       assert_equals(resp.statusText, "", "Opaque filter: statusText is \"\"");
       assert_equals(resp.type , "opaque", "Opaque filter: response's type is opaque");
-      return resp.text().then(function(value) {
+      return resp.text().then((value) => {
         assert_equals(value, "", "Opaque response should have an empty body");
       });
     });
-  }, desc + " [no-cors mode]");
+  }, `${desc} [no-cors mode]`);
 
-  promise_test(function(test) {
-    return promise_rejects_js(test, TypeError, fetch(url + RESOURCES_DIR + "top.txt", {"mode": "cors"}));
-  }, desc + " [server forbid CORS]");
+  promise_test((test) => {
+    return promise_rejects_js(test, TypeError, fetch(url, {'mode': 'cors'}));
+  }, `${desc} [server forbid CORS]`);
 
-  promise_test(function(test) {
-    return fetch(url + RESOURCES_DIR + "top.txt" + urlParameters, {"mode": "cors"} ).then(function(resp) {
+  promise_test((test) => {
+    return fetch(urlAllowCors, {'mode': 'cors'}).then((resp) => {
       assert_equals(resp.status, 200, "Fetch's response's status is 200");
       assert_equals(resp.type , "cors", "CORS response's type is cors");
     });
-  }, desc + " [cors mode]");
+  }, `${desc} [cors mode]`);
 }
 
-var host_info = get_host_info();
-
-cors("Same domain different port", host_info.HTTP_ORIGIN_WITH_DIFFERENT_PORT);
-cors("Same domain different protocol different port", host_info.HTTPS_ORIGIN);
-cors("Cross domain basic usage", host_info.HTTP_REMOTE_ORIGIN);
-cors("Cross domain different port", host_info.HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT);
-cors("Cross domain different protocol", host_info.HTTPS_REMOTE_ORIGIN);
+cors('Same domain different port', HTTP_ORIGIN_WITH_DIFFERENT_PORT);
+cors('Same domain different protocol different port', HTTPS_ORIGIN);
+cors('Cross domain basic usage', HTTP_REMOTE_ORIGIN);
+cors('Cross domain different port', HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT);
+cors('Cross domain different protocol', HTTPS_REMOTE_ORIGIN);
diff --git a/test/wpt/tests/fetch/api/cors/cors-keepalive.any.js b/test/wpt/tests/fetch/api/cors/cors-keepalive.any.js
new file mode 100644
index 00000000000..f68d90ef9aa
--- /dev/null
+++ b/test/wpt/tests/fetch/api/cors/cors-keepalive.any.js
@@ -0,0 +1,118 @@
+// META: global=window
+// META: timeout=long
+// META: title=Fetch API: keepalive handling
+// META: script=/resources/testharness.js
+// META: script=/resources/testharnessreport.js
+// META: script=/common/utils.js
+// META: script=/common/get-host-info.sub.js
+// META: script=../resources/keepalive-helper.js
+// META: script=../resources/utils.js
+
+'use strict';
+
+const {
+  HTTP_NOTSAMESITE_ORIGIN,
+  HTTPS_ORIGIN,
+  HTTP_ORIGIN_WITH_DIFFERENT_PORT,
+  HTTP_REMOTE_ORIGIN,
+  HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT,
+  HTTPS_REMOTE_ORIGIN,
+} = get_host_info();
+
+/**
+ * Tests to cover the basic behaviors of keepalive + cors/no-cors mode requests
+ * to different `origin` when the initiator document is still alive. They should
+ * behave the same as without setting keepalive.
+ */
+function keepaliveCorsBasicTest(desc, origin) {
+  const url = `${origin}${dirname(location.pathname)}${RESOURCES_DIR}top.txt`;
+  const urlAllowCors = `${url}?pipe=header(Access-Control-Allow-Origin,*)`;
+
+  promise_test((test) => {
+    return fetch(urlAllowCors, {keepalive: true, 'mode': 'no-cors'})
+        .then((resp) => {
+          assert_equals(resp.status, 0, 'Opaque filter: status is 0');
+          assert_equals(resp.statusText, '', 'Opaque filter: statusText is ""');
+          assert_equals(
+              resp.type, 'opaque', 'Opaque filter: response\'s type is opaque');
+          return resp.text().then((value) => {
+            assert_equals(
+                value, '', 'Opaque response should have an empty body');
+          });
+        });
+  }, `${desc} [no-cors mode]`);
+
+  promise_test((test) => {
+    return promise_rejects_js(
+        test, TypeError, fetch(url, {keepalive: true, 'mode': 'cors'}));
+  }, `${desc} [cors mode, server forbid CORS]`);
+
+  promise_test((test) => {
+    return fetch(urlAllowCors, {keepalive: true, 'mode': 'cors'})
+        .then((resp) => {
+          assert_equals(resp.status, 200, 'Fetch\'s response\'s status is 200');
+          assert_equals(resp.type, 'cors', 'CORS response\'s type is cors');
+        });
+  }, `${desc} [cors mode]`);
+}
+
+keepaliveCorsBasicTest(
+    `[keepalive] Same domain different port`, HTTP_ORIGIN_WITH_DIFFERENT_PORT);
+keepaliveCorsBasicTest(
+    `[keepalive] Same domain different protocol different port`, HTTPS_ORIGIN);
+keepaliveCorsBasicTest(
+    `[keepalive] Cross domain basic usage`, HTTP_REMOTE_ORIGIN);
+keepaliveCorsBasicTest(
+    `[keepalive] Cross domain different port`,
+    HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT);
+keepaliveCorsBasicTest(
+    `[keepalive] Cross domain different protocol`, HTTPS_REMOTE_ORIGIN);
+
+/**
+ * In a same-site iframe, and in `unload` event handler, test to fetch
+ * a keepalive URL that involves in different cors modes.
+ */
+function keepaliveCorsInUnloadTest(description, origin, method) {
+  const evt = 'unload';
+  for (const mode of ['no-cors', 'cors']) {
+    for (const disallowOrigin of [false, true]) {
+      const desc = `${description} ${method} request in ${evt} [${mode} mode` +
+          (disallowOrigin ? `, server forbid CORS]` : `]`);
+      const shouldPass = !disallowOrigin || mode === 'no-cors';
+      promise_test(async (test) => {
+        const token1 = token();
+        const iframe = document.createElement('iframe');
+        iframe.src = getKeepAliveIframeUrl(token1, method, {
+          frameOrigin: '',
+          requestOrigin: origin,
+          sendOn: evt,
+          mode: mode,
+          disallowOrigin
+        });
+        document.body.appendChild(iframe);
+        await iframeLoaded(iframe);
+        iframe.remove();
+        assert_equals(await getTokenFromMessage(), token1);
+
+        assertStashedTokenAsync(desc, token1, {shouldPass});
+      }, `${desc}; setting up`);
+    }
+  }
+}
+
+for (const method of ['GET', 'POST']) {
+  keepaliveCorsInUnloadTest(
+      '[keepalive] Same domain different port', HTTP_ORIGIN_WITH_DIFFERENT_PORT,
+      method);
+  keepaliveCorsInUnloadTest(
+      `[keepalive] Same domain different protocol different port`, HTTPS_ORIGIN,
+      method);
+  keepaliveCorsInUnloadTest(
+      `[keepalive] Cross domain basic usage`, HTTP_REMOTE_ORIGIN, method);
+  keepaliveCorsInUnloadTest(
+      `[keepalive] Cross domain different port`,
+      HTTP_REMOTE_ORIGIN_WITH_DIFFERENT_PORT, method);
+  keepaliveCorsInUnloadTest(
+      `[keepalive] Cross domain different protocol`, HTTPS_REMOTE_ORIGIN,
+      method);
+}
diff --git a/test/wpt/tests/fetch/api/cors/cors-preflight-star.any.js b/test/wpt/tests/fetch/api/cors/cors-preflight-star.any.js
index e8cbc80b808..f9fb20469cf 100644
--- a/test/wpt/tests/fetch/api/cors/cors-preflight-star.any.js
+++ b/test/wpt/tests/fetch/api/cors/cors-preflight-star.any.js
@@ -80,3 +80,7 @@ preflightTest(true, true, "PATCH", "*", "PATCH", [])
 preflightTest(false, true, "PATCH", "*", "patch", [])
 preflightTest(false, true, "patch", "*", "PATCH", [])
 preflightTest(true, true, "patch", "*", "patch", [])
+
+// "Authorization" header can't be wildcarded.
+preflightTest(false, false, "*", "*", "POST", ["Authorization", "123"])
+preflightTest(true, false, "*", "*, Authorization", "POST", ["Authorization", "123"])
diff --git a/test/wpt/tests/fetch/api/crashtests/body-window-destroy.html b/test/wpt/tests/fetch/api/crashtests/body-window-destroy.html
new file mode 100644
index 00000000000..646d3c5f8ce
--- /dev/null
+++ b/test/wpt/tests/fetch/api/crashtests/body-window-destroy.html
@@ -0,0 +1,11 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<iframe srcdoc='
+  <script>
+    let a = new Blob(["a", "𢕾"], {})
+    let b = new Response(a)
+    try { let _ = b.body } catch (e) { }
+    frameElement.remove()
+    b.json().catch(() => {})
+  </script>
+'></iframe>
diff --git a/test/wpt/tests/fetch/api/request/destination/resources/dummy_video.webm b/test/wpt/tests/fetch/api/request/destination/resources/dummy_video.webm
new file mode 100644
index 0000000000000000000000000000000000000000..c3d433a3e02e86eee1026b6620dc0c50498e61a4
GIT binary patch
literal 96902
zcmcG#Wo+ia(lz)bdBV)hnM{~D6J}<fFf%hVPm&2UGcz+YGcz;u&b{w`+WoZBYX5A@
zmQ`x|=ya)0xx4Jf5!ueq77XzR5q$o4-uVLs@BN_!1A<(Q4Xg!2|Cz!5pjb+NrXYZS
z4a7qgSti}7U8X%!sXPc>qSQpG!aw(aEDYr;%YW92OncP7J{0ACQ>BUkkXV`a=zk`j
zQv1KoKoAf9i~j-v0P6q2`~Rc;hgBWba%~`@Ais=Xw6wm92`eWZ6FVIv1B05t|85J1
zhw&HB{g=gm==0ZA{h#cFm;FH;2g9V4Y|_By`M)y!0VItXfzCEYVg7)SU{zgJdCow8
z5Yqj?Adrt7m7T<z01*B*|C=;_P?ef6mF9n!7JtzH1@?Q{AM_vC_;Jj>68GrP{|*)+
zperY@qNG|DXh@f%+8zWPXaEHIgYL#<`-3!w@gLj$mz{x;Kaycyyqul0qqwoY5eNte
zh+q4Ed;a5S{tZXR9K#+z(~&fh{7?~DAvs|YMd8r@eXNd->xMm%hX2=~Oh*d;?{}yC
z^OWH~Pci@3Q$$wg1}=7Pv@Uj>rXzVG`C-B;iUP_Ka<amq2@DKe|2dfH7#P?Y{@VZm
zN5_@_LH}Q){O?o$7nj8U2fFRQvHZV4vvB?|XhNYTXJXgkV}C$?XaE4<_wxOfZ*b=i
zfb<KH2owaM-XJ`Ia**L+VF93!d>7w-ne2Vgzg~^*djD+SI`r@zeC1nu*-qZ`i3xx0
z!rZ&|oD=6!qdns(exH{&f`7MnhAg*!m%6&j#BsfbZ~>3dp`IpSvKvR9)Wd7uN+A@&
znBM&}8>Q(zL?c(0Mv14!Sd#~*xfh!6DtdM5+ilaO>?%gyhR~Vcpa(AP2e6E~7rB4>
zh>6X~tdWnQhi`z}XQ{bU)HZH4K7bgs5-4q;B*6$M*v*!P)Fgu)O(Or~=x7ZM9~OaX
z%hNWOKd5pFJk^j=QnGK^NvsrCiIc4iZ!@y!#<x(BC;waBeF1<ub(u9>3vdm|k1?yY
z-A~VGT{y?JYg^^=^zPzHq291ZRYB~Lj9($ex$c$e_Ypb3I02wTewJ-^2DuVb{KX=?
zZrQ~1xUAtcT)V3P`H-Yk(j5)gO6O#rC>}AQ-`V;_Ywwl6Q13~lm=G%Dr+w3!o-R*s
ziGShccgv>Dg6O~pF=goW>k;*bVMxe87Ck&~-1tNN_tUlPbNThnSjrdV1F1t}`$2x?
z?m!4+tm?#|Oo%aBe(W3EgMu`ZVjDPl8=~iv-3{<9W-t4hT-uTrM7p@p@-N#YHF4qv
zFUatmGwjPmM|B~JksCq*4XqgczU8cy)d{}<_yT8$;M5pEPHwX1$IdU|npaxcb&9(K
zjkXhdh0;1HVKL2;IL?o;%}6?-Y~$gKL+j}K<eZJ|nPA=a2R;=$yuk(MWM^}!f=bvN
z?b#~-PtElr0YQ8S6X(nsOAWj~b1iZBE8~i}1r(J6Ti<U^+4dw+aJ^b`Wb^Ubx?V&#
z<0)}s56Nn(3DCNQQu#Q<!&+7#BWTb9vF4YyAu8Dv?e@2buAHSqWg6|$`R0eK_g4Iq
z#t^CQ@(-7+xy!7JihH!wQBK5M-CFG1FN>$KO-I!BB7!f$D~otS(g-{N*F9}gxXcOa
z#wc<=b+Y!RUW!VvmSH-?JZp_nK38iJ{>i0_cY=by+B9BR&oe!_!e|N|7BJety3yXf
z?qQc{OK1}TwWa!^h~CvQfXh@!b`R(j8Vzu;6uO_4XSig5jZrXwHR%LetVkuF)^tJT
z4x{NNs7;#k@%rI6SNFotoJcmbYF1$QHkOu29zK)tMhOd+-RiNzFua!9M$ZMjpqurO
z60SuWvf-Gy!+VFUJUyZb>M80AT;{ZJw!n3?%(1d8O?Vyd`*e_(MRP~6Zz@_E6zfGn
zP6&;HLu$lUP${+USkBo1DF3wlh6GHarse!8Iu%YABa|G>_6gHI1;U|_54}k3XyF=G
z!fisuExbY-Lh^34LaPzsREKtzo=d_yb6jmin3|zUb?cNC)Z5E)*QcRH3O}tUdb5tV
zACq)qH$v{&Ebwck#?Z}pQIYF-y~f|@PmQ__`FVE4(dUKOA+o(}Q142gsr$E7NKB$j
zx57-HcCtgUW|FxJw*MjyJ+TzQFc+=lw<YmUi9#Wq2q8MCx>$;uZHOkkyg7BjU3=rU
zHn?K_Fv$^zrBl-7;?W@^p2dV7h<dlfsE2sg8@fwv6L*G2F!FUPkvrrkvgE7@zP>yU
zQe4oaOP*gzKisw6U&StD=qSNyuy&D*iug4Ls}vYhE28ljBWRAt$HTv7vzr({5>-af
zIDTJ%0t&9MXZ<B?qwS)R>;H_JuXDmCxOxs8HMfEc&K&bi^_ppii66QPmSCRZotCAl
zJcAc(@doLQW*|6|vxLJUvT1NUJ22X@W!ui>lSt!ubjtMc#`bd^TZj$w@YQT-q;`<b
zZ_o`h5@Hc2z{jR*9PXOCa)OMkdEtJw$-8YXBhFa2J1Z&nHchTPv_<R*yo_RTR$BN#
zl3m+o+S?n%4*6&pCqU-ZC`a+g@5W$I*4ju`BwCuV#!!eP>Qx37^?B<6voFc-afU3c
z9C*r)S*_Xo5ry9}&_g{rdI<tHn2P57ozeHQK8Sm(O2b<D6`M9wUvgftlk#C#nms-3
z<qZN6^c>-=|6EI{c$g5I(6DB&(m9S%Q4iz_DhZ7?t-?{8M2KDLOFC_5-->;=yAC}j
zENaD}fvCmK;{??PJ~3Lg-KKc4`-e8yo~nBXU_hC|<a+(Ihb~8z%j$bETbUv1#A;6;
zhg)zp>J-#&wA~f6+~aH+jWN3+htHD%M=_9x%wZ4NoDhGF93-c?uvj^%Szlk2Ftj(S
zuQP)HhopcN{OLTeS{_Wm$_qbm*$_gP?8otQ=Lfwzqk<DkKrJ}gZ<Rci*Uh(Vro5r;
zLi|Y)X2=O!$MmShS2BWX3iV4T2AA4D9Ii9u?fI~Q$)II}HD?ZPA98tBW^rGJF@>Fa
zm^?i_ngVMPLy>`+g3oj;p+X`uNT`uqA}CTVyk4smzb(Rpn32~Le~w~?<l%AUIhB<1
zHW=-^Q0Yx12gGRg=Jh>Ur(9Fo!Z@`DYOt**wqD)}Oy4YLM|8eb6?RaN0pzGFzD6C+
zIAHBldPDX>Vwf~Tl5Po?jn=g!I|$gvj;Mv1L8U@t?!SH*$Mj^EzW-962wCGJs(9|0
zXm4^cpPwawqheL<v-df!YGIE*#7F``5>6mxE7tl-HiG|}i9sZEYVn44RX5XF1O@Jt
z>F3e*bp%|kK&2NPvu`HZJS88kerO%hr66AVQ@M90O06;F^a#YdRM*R`yR+RKX}-li
z+|R#k;H{o_;^u}k3jIWcL+?f~ePlz`I5QX8)}XlKT_TOeFmtE)Y4|ho;joDVqBV{n
zhjJ42r}#6gh13~JiFP#g<q1?D6KxPqV42qO{h&XsyTp}#Hz>SZ;4SCxcG^4^o{IfV
zPvx~A3Je=iWT5TyoEjHH=7wK)XM5RdalF=;u3)}>q`@mGANXqiko9o+P1FQ)*n6(K
z3M<X^iVb0!#hd(rVN6S*7s!?`z3kY%n5&04@`5;&Ebm2^xiC06qrWZJd>>6X01KeL
zFl$7&Bb!@<08nxGwt()BCP-{Nf*XWFaP#xQq-SPTADTZD7KF$kroCz|4~g%p8<K|$
zP!seXvi*z|w0Xp7s#;En8{ZGC0>8Nk-zq$%#)5q2O0$d14j6td&9Dyt&|SwG=}enn
zcoWu!F2W<ONyS<jJCoDn)UmP{={2inzE>lK+MMpfWDj1A+m>|bQ#D3gE`OETjCb*b
z>{=Pt-leZXia}AwpAJ|3Uhb{oekCJWD|@8WMP|>Aba>PQ`PKTe$PP{1?wY0XEOhM<
zT90$_9xCp|vb3}iV^>(Vfp3^zW!b9?$%ZMM@!173{8M^5JHFw^SLX;SY;WqXp42F^
zeCg|1uW|F&u1on|==Opyjx&)NcF>42fzgf{gQaH$vW;1a=)$UTeBqm{Ml&w@kM2Oe
z&0O~Pj<YkItAP;_^!Vf{?ETgmZ%~h^p+x%OJ(hbTur#IiOpyGL30NFU>Cae^cM>@X
z@WReioghvDUf?8n#zgE|Cwa#uAEow~hl5_Xb{hXT1P_TZ*Ka-n2mUAbO6uSm5&5k>
zA!uD+h5JQkgDw^;vg&JiO5m|dOe$LR8>$v;asG6%ndewdE&N7_8;s^7sDv1X>CP79
zhMI3<i>h%p<WItc*F)R0bKo8n(a|c!kudxqH}DqQ-J=rm*Sd17U3q|&+6b2EgVMo>
zxJM?&f$1%A6k?Siiz*rV)`$_^H5hu)8l&~Wz$vs71jLmvlS&|<!3}krWM_0EvaH+$
z^>1)dI^mhvA@Nuixo)k4minAq%vIk#`W7?6R8J61b8;M*6{_M?WqZY9a<curNJy5h
z3y-`Jn^VRs)b=JUE1_%_yKLX-^9zOY@qq(I=p??hZ7ccHozTzoMYb6!i{t`jFfGP9
zTX=KDePc&xaq0Mxm#69ZNSTR&lD_GC3BEov)*m<o^4#79fvVXtANpI0A2T>0;r&L9
zg+32BH;ce-*U`#~u<Fvw*AN2>IbK`TgC~0U-f5*WO?i5XtO`ix%LU0}`$|zIm9IuY
zbp4zLL*O}0$i>g0XTBzr?*VXA3x=B%Z=m83Fs_P=k|9h9p*>SlRzdsEu&V%;PsG9Q
zvxsc9_OiF(pVja0&sW{W2v5mD&Op((1p<(RgthcIkh@xN1gCu4#pAXa{=XPnbdP%c
zCxX?3deIfFbjdz#pk_YUClZqBN2mn)(p%th$`=|Zf+1TAB;w7Y;sy-_9aPOXqzJlK
z400agM`Zq^nd~G;V``Z)f4vTJ%|oxo#zq0*ei1?2q9(bNm3B?R8uZchc72x)@Vp(T
z0_gM$k6H<%TjPP`b1{fuEG0r__2Y)I@A_FeJM-j{$4fMJBWXs0ewB1HSBUeF%|_*$
z>&zlw)x8?91&sq22I?+C1!Bm#iJU4cX%=2en}0djFCRif($s!^b<z$x6ZnYuNkvj!
zumf{rZ4UNw<%#ea^7AdrB<v;@sFXs8^BArS?uM2D9vL}#F5JbdTP5DZZ>hm%9g@5x
zUM3)6k-l)APcATP&8HG;!TqS-*o37f@H$vML!&JHS^iu?zGcRO{8mIAzhuE#&L`u!
z=wAd<Ktf329&l~=Teh?Yxf?d8N7Lq?ZT)(%nmbv+Ow8ah^{!*ztNjS#W9z!t$mS@&
zed{Yd+4Ojep;|>a)P`&OQlKKQltX{>uReBFRl?#=pBQR+oKC5CsZ%l&eRv$_0T;cx
zp~xm+ld*n?RY-3ILx;yN^D8^?gHnNHYq#=?&cVBF_BfP|mI<M`y~wzwxq%{mY1vo;
z??_aJ{p8atKPquI10hsdwsLsA1M2D_G!}fQ=#+$ih0m6roop$kBDxy<%FUhgE&_4i
z`j)f#<7({FbGM_MiP<N6b>8I~-=M9FItKr(Xbi?<EwlHSVdiHKIB}VpR31In-s#7P
z;pcW(S7CkgH2}h@W+smp7!VkN?~IRQ8a>l$g2P5~^031EU~1W&FeQO~8B)vmSiUtu
z3zjp=Ec6IZl+~%V0`jn7Fb+%H!SJ!ZMtSCU*@%_~xJQ?^R9jP<?6brNhz<v`>b?+x
z<IKc4dAN~v315b(ux#O}ZESmfoBzf&<GV14>54EuO?|aH<qM;;SQzwBP%%a;vGt|G
zgWN0&+G{1#vmV3zb&>qtmoodc-_Iak9;gTuGR2nrqHe?=2S;C_Xr!VQ!uqI`b_4nT
zw!^E3$BacUN@L5Og?8;{<3wJzO(>%Od7!}sfMzTk7KY2-qhwJahH?DW?NT{?8T%RV
zJ2`y`r|El3xF3}*%!jh?u4*V?94KB&g0D=@_}lkT_bRv>^6%c@dv4JcCsZK@LLJ_v
zA1LTO=vS^uA*Q`Gc}_}i=0d#N?863@zQ;fxey`zgROu`=qi#|u5Y*g$!bCyO4&>*r
zr#AF;|K?~qUR&$KQf!SGerX%<Zf!L)S!j-CX;X?8tzSwqSy9@>6GuvtM`}!&j10O%
zb7+wH=?dH$=nH!GeG!92%)Gnqu9kJGL)l_`L>z6p7B@Vpk$p?T#)Uh4KIrY{Z-_*`
z^#*s=pMvSnxaOQYvve_Hf!2C;9Gq5WsNfg1R;yIK1ukMua+=Aje=u(SCTwiKa`qPH
zrybUy8B9Pxvo`kt&z{DAF_%nV$b<A|+e>l4eXVCQBKI)lLA|)Ol$i`Ul14OPLbn<*
zp05?=%f4EVkynnbC<dzl`d7*#EuDBX_a@#*tu7!7rluKwEx|(PHTN}Bkrr?*X^|Vl
zpV<~jpAczsf(Eh7&2EcGUxP2V&bX}-+lm((U6rRGI)=eg+Y89x;#)$m=N^vln_%)*
z7f<E-V^mYK@515yykXa-<lbrNiB%+mmI{QVHT!=3ngltIzzpZ<;$w*#7-1~wFSR2+
z223WjKnYc6&9X3@K-wC?DUPSWKhAX8owKfD@*zeSBF|#N?Q!94tXg?GhOveMJW06$
z75PSCF3BKyGgsf0OU!bcmwx*znJ}$Ngv)E;#lW5<{>BrD(5k-~REGu`Nn-XsRKnwF
z>F8o@ZE;@J6pJXsm|EgOX;2`#t9Q%(c+X%;DtsYdK1?xk)y5EOb?P$Ox}ax^r9z9t
zxw&dqh5mSG8ZdGF<Lfxq3>T9W_XhFPMte4$mA<#$0^wAS$>kKmaFz|VNaXLuSTF1<
zhEsW3ShVy>Z-~#sk_XZ^)4-fSqEV}09@qtqK&}0PS&|=8tie=l455F|jtC=0KVaA)
zN=f1#^*o7<GC<E@;<yKcm$R(gTS8qr;+_yt7o*7FaDDM;BA>XzekHBm6_`Fev4kK%
z<<v1}iDTYs`#!|$W|UtVC*4e%$Wd$MQc(mlZN&PQ{r2Y~O<iOY`l0}z1E`zFe4+IO
z+owX~P=wYYf{>Nx(l3Q{nA<Oa3?oq$*iA)ut-jbH|6(WsA`qB#YRTU+<k#0T8tK58
z7{x4TUrv6@{dIrKI>EeQ_G?ID-hj}0^iQDqUA^>x8ZQm;=W=wJ%y<}9y=>A<xQ%`=
z=zfWp$$aNTeRT(2tqx6&{_wNZXQJg`$k@TR9K<UdRFsP<6c+C3UPdr(%0f%#F6xFg
z=DBde#(krtWLlN?Y)9gBfrI_XrBxi{%mJwQO#`vKmAi=uMDS8L3%)M<qWK-7&aL}(
zBX9~haADrF_x0S=&$TFUV;@n`5;LZT+3v%29&~8v3jON_jd`%Ue3fBK2W6xr`XUo;
zCqI9P8zvo-J$#N~#OlsMm!Le3PK1e!CiFz1m!>@|4c+W(b>AUL%HCq_3g8gKxMBSx
zZr9|%koqVPw?F1&o)&Tao{+ub&@9mQyMi=;wP(wP?+SP}xKYa>IC?xeDpby!6KoV@
zE>&kXI^QCDqVffQA8!NR=|0op9&24ravK=TLMhgoO-Grt{>$mNwGUYMY!hez*LRK<
zWyWYm$)}cBwlJFokRvfA|IK-ASJ6{#{eCQslP4ryu|<~~bTGa*@5TaB#c*vv?t+wE
znycRD(+e+6!i6hj1N;Tc4}YR0QHSce+Jb~!xO*&P0!4%8Dg`dMN0)B3LZ7F8q4;Q+
zt7)@Z4ymjYGYH7;YgRTjE_5e~!LCJC{LB=|0_!wlP8WiYxO1MK@?1s^x9=#7TaGxi
z7F4Cm<|bg=DR^BH?nF!pu(!1Wfr{&oB?d`?x(?)AQlZ<27)em(r_?hl<~?x;UGB-1
zhdg6Dz#)<J)yYOw7}$)<C4Yq}^prC?UU)2Hp2Y|%!zzYL@`iq=+JCm8%O=*I*za0E
zYF_dr%%$?#CrB=I&W<${g0o>YEkLxt(h&HAT}ztF2%tub4xr?2oUr=Qf%tEM;EMc$
z`b8vR68~t=yl9{BrJWJ_7#=e@uH>4xB2(<-;!gCg@6ugJq$M?@J1)_YTB?4G%(*E8
z6YvuZ6uq&j1F(?}tbNfs?$Slz<evjsKfUs@qqgK^;k(&3*es9yq`96pDHdi$^-h%U
z^~}}^dlr+BJpciqqO|@Hw{xY`+(j<se!QoTp$^~7a&7tkFeRG4P6AXYIZC+!s-#+<
z0&Y{k9_3~&u2;lM?s|X@7psdJXmr9m`M>RQRw5Za1}4)Ujf?`&+uLDqYc-@yz@g}A
z>?DyzW=8fnMoA>QrA~Q?{o4dG_*wJUt8vUb;`JfDUb`by><Z4PpVUX-W^IT-okL=b
z8j*523>SRH_WjJ?<KR3{<X$V<`HOBrA{dpqEMJm`Xl!T11&WVH_YQ)4QAi}Uk1Tdq
zc5d&@ZYPP9T;WYq&8bD4FPFhN`Ng4aRXjAg$g7Urpm6<vHf(<KeO?l3FiRkS?*5Sc
zT>bPGQxE1ALfgNpcnf#K_u)>IA-JyKOttsYvO03oYLYDrNh~`R>*gvSO;*f|=G@+F
z>Ls&#)27cBPKDJ|WA_M>5Cn+Q+F$l2PKs{0q9-NQj<E-#q9>qmn-^Q)i*|SCy!D)}
z&1KSmH>YyR#6AJj8?u%kSwP1?kDdwId;s~?57Ma!<(H&+RyZUQzSj`cOSDLuRgXVu
zrN-qpmzJvKEdd#gvFa^ZmF9v6y`yT03Lk-WaRed&=>t7cFpjpJK(@~Gk!w-bW(2ak
z3Ekw}-L&<<6d@6XwQh0dXXtF<R?OS2iG;FdbqTgi1Ua+Ers^gGjoLMq7?-?6x{s=H
zh7}9llfZ@cT#&)!nT5`~MAvyyx^Eq^VEe_ETcV%E$H|&s$HOFHCj-XiotXLoq~JP>
zHMce7A%TBSRe>m8Xy7cS$YD=;YA6!qV7U!<xd|f_r1G?i2y$_$nAHnnE3b(cQchj#
zKH~lH>6gSKFZJfIbI#CN>q)mrkWi%M#;v&|&+elSMRieCv8{Gge?mv<J(7MOF3h)#
z`=^%7{vf8k(42sv-0{H0+pc{6__HN1CZp}X116M2+!a100$(rVPlX=g^oxu2x_DIS
zoV(C#p)tv4lV`tHW4}#4vn6PstZkLJZg=axp?Kj#0R1itmdJg(xrU41qrGB6huLly
zJ#KQT+Lv>TPTqCh^0spM(!-ALFBW1W&Nn2|224P(Mf#M&Qx+1|CWo<m1~!0ToEFqo
zysr(_{lGdA3Ed%7&wl!?pz$i;8eH-vKo41HneOm3nrZtOLQzMLt~uy~(2h$Yk8h&B
zJ>=X6t2(#f?jhM(5w%a^rNc^*t}6c)jFjsHAuCS=x?U<m^f$TkBQDyLtMmI$AqU<a
zqUx6Zq9lHFEsb}06#}jcHs0MSHR|Vt`gwZinU&Hv%z7RwtoEY#pr_vaR}eix*<Yz%
z<%;NM2@obcI>AM5`Iw=H&8p#daX#DD7joD+&oZb+u$0=8qlaH3=&_`Eb^=OlHIJma
zkYBh*x!7pvl`QEi;XY_t`5Pjl&)OB0hP+_z;`b^tj#)p%e#LyYmq)h~R(e_9wE(LJ
zKbYq#%obD}&f-C#%CG&GF_Zmf6#Xl;vu&IgmNjgPw&+C_FC3j*@s=MOIzNT@rQcT`
zrpl=V%-Xys39-1O7$8RtN}Dag|M2Z~WefZ;;Zbb7aWI`kp*iKk5|*wu(A)W&28=qQ
zpvQ+gakou3vd1G@$x=p*<$W(@HFKC9SFTR=6k`1PSE<*3X#q>M>>=fYLM!@HQQGV4
z@NUHvJgu*jMU{?vs^n#=QPr}%Ei2JolHohX)Gr>!SvxGJ@herMQ()H-Tf0hq=2p>L
z>C8Kwgo@@CF=5|}2wg223>_5_UF0M`b*)n$MAuGPUE@N3q&g`8x0RB)erTd)q5E^#
zku|Osd_e=q+<W~k=KGy5$WkScF%5M*XszRY*C<E=7US+f%yaI8(bF#;)XgBoGhW^@
z=@-Z<rN&|VK!m!e=-{=@Oj;O4`A7({@tX2xes^a=p(_guH7nxHYQ_TM?~EiL=Jp8f
zlz{=V6lU23Ie8fiK10bkZU*zd3-xeN{54^Qu${XHw$>re_cfEx*TS9XyYr1jRS=4r
z_Fen^y{o5XZ@juK&R1pinnXBN9hvwuWYa^6g_-5E5(+E@A|I3vv0l3ULsp<OY*%D)
z-E`Af`0rlmN|;U%=)fW3WfsckCAGFo#i!+J;>owH#sKqEvZl`0HNuaPiVh5fd#Kf(
zGs(v*55#MgadVH9hLNqXME}ALezK9ScXUUX;=etDYNLBT$xWYWBH{?Yr7`1yw<vtC
z-7+_}i7KXE&Z#E2><&D`w3`_2haz|kO!$E~cbi86-J+0NYh`c`@;mg_5+u^3Ykxv;
z4bQsd>QJ~}#ZeleWt>5tUu)y08uqJhMgYNHFMo?UAB&Hc1egv8%qnOTfA@mB{qzm#
zJfFPl>s&r{q$3b_i>+WDTKQ?c?;2u!K%c?+4ocrlm&AtOrsLM+f8zQcH?p$hN&2ny
zv8AVnx#|lEK?!1OkwJEp?L|mua*ufP>4{yb{e3!gI0S}es|9ahM!sx4VJ3Q-yGvH<
z_bYE+gj2ug`7eW991+eHn}9_Ve7n=#JJ~|V9@FZpIcI+ImM=>dY=cxVq_WhM|K4x8
zrOd4_R18kF;}%6+6XIs%+02?o!A#e$dsmGgo%n}(?+qR8kA!C;%U*p^ac24Nx&qSJ
z$I#C|z>9`gYso@Nf&FQXa<~CDh7ncV!NyDjkZzh}JxwqJ2SLYbG1$?&&X3DwuN}=N
zUeJ4T^)~<kYO{vl<k~*Y^3wt3%uE7o2I+5#%z(#l7)|WJifmFOhvP_T{VXqVrsY>=
zyF2umvnK8`P{ql<11!Y!0A|utVjmot+>$l}I+5waDF?}v@!LveV_2(p9>Dd=5Wk^w
zPQNsGr-bi%`zzwegqT*G>VQuIwqV=c*t8EL1dX3_2>mHT7KPUUZAS<qd(d!<ttKQg
zR1F+X_eyLxM6n0<89668m`9@}9%e%K6;;`f$q4p<V5C%pRm!0pHPD$>sT*UAj$c?(
z<PVXEF}D8}cT>1F-bEW5C%oAA2+i(+Qe>I*TT(|da-YAK-SHa%x6v<?{eOIym*>^;
zB>X6Idm{*Gw5lVl5@lw{p~GX!1Oz-{Eud&arKcZw+geRWnriu1Y15XHQ-=|ld#hpk
zIt3U_Y1dTypXM=(<O4=uNMu^bcvEIGYxN{IYvjbtyT2`()-G>=uLCT;w2ilKns+;4
z3Kc`$s2W?B>iT1dAT@`Rp(S2XAz4kFjb-I4^t7M$`_vC1>R&_5U@%-ni)aZ!ff5bk
zN9%vy&S^<4nh8dv0?DAM;t|3F(C}}z-x?aD|Fl?)W!U<<9b<(e!p~2;_-;V_7Em0+
zDc*xGPd}E*ewSjA)-00Pk_<VyC4+S>L@?PlR8xl&6iV#6fv?wy8XlQfwK7rHL*{^7
z?NmSlyHz3N%1Asd5#WRz)EtOYzMRAH7fCeW70(!0R_Tdh%b~V(1#_xl;Jr=;-=uLA
z5(*~%WBb)L0fOyTylq+O)2L<~RCHOrt@IGib^Dt|#{^69;mgOV&PkXu&3k=xv+GOo
zn>=YCnX`_-Ci90X9fQ7%kMvEu^?c}JoScV^fJLFamY{9R16e+bdqs@ulC;%9DWTTX
zfhlIEzWrgAhOhjm6PbZEgpmSJG4y%9;j3%OJ+LZIC>1}UZ!kL>3K>uoX4ZnEr@s!3
zO27Jtadz15b+8Xoll>~@nLwX@ykhSSFko5Qofwj%--R`v=Br`GW(@Wnhr{U@I?W?q
z2*s5X{r*(YV(6s(Hwu4A9NXE^^1HqB_a;pTR<n+Nj!!lVHzaK=_jjWE)V;s@6gxs<
zq2=*DY`tRwMIRt^cBVAlqCSw*uDJIK(^<xFAZo~p7*oQl`kBSTL-J}A`&@Dk1f9=z
z=d16A`PBxXPmKQXf}*u77{U%2d@ui$QvRtNb0U=uEJo&4ZHDuO@WING-~z8CWJwpL
z7VT;untc+Jn*V~z%?KPb=5mto=4#P0vD}tc+-Hr8OOX)Z`zyO20npN`7f>tSRtfvG
z^|Hx0>=Nzoor9967;xfmFoJeCnvW8K4wyr&X9JaQ<xd&!F|>CrX9$cMZ?R}+NQDmr
zX(JEHT5Jb8#ENHe;sJgfc2zuw0+b%($Umm{sr1p1p4&d=Yt$<B{SDUWM`Ly~vg|)@
zLJ;|2g#;ehrs^4c1XTtabxk@=8-vGnt5w>(aUuO?JAO?GV;%0@mQ$YRqta+`)=s}i
zwp60Zwaoh7u=iCn3{jqYkb}D-Nc^elOOj~dEL^qe{}$>nMW^7o@Gboae7Tl{jwbz~
zVv&9-+lz6$H+|TBrD{(0wYi@qp!es>Fc6x~Hw@|*kvc}^<QYWS3t7R@0j9#f#^~IS
z4MRY)ZlG)7HIgZ0pEJekUUS{uh1bLB4pNG5=}XVD3f!Gp)K7g@iPB_jh2bpu-Toff
zl7M8o@8^~Y{(J$}006q*iv#?j=Hq92X<u+A2+9xtM{8n<*CB_1y3Vqa{{5HsHl31t
zl5AsJMaRjPpoCo)C-M^skXM0`%eE_$>nE2a_1B>Y?&;16zS<K+zvn$vLV4*DfvqS4
zD&G_9@=xc7WXeV!=U0yZKYq>n|Aq-}sb=`Bn>z_Rf+kNT?3e{onJyjh63%VZJ9en&
zxI2Rj8mkxv49MJ1)>8t&U4CZvFt>mu>p5H?X!}fUzq){N`<dFoU4Ch$7Tvy1p+o0O
zBKQL+06_ph2@j|sKY)=JbkO|v<A(Ydudck&u5|uH>C3K(dscRVRvyY=8=kRKO&K;@
z#16#E=2unAHN{&jK*N@yXMW-RsdPAf2uJ(3lUh~I<+t>~W>1~Whurg}ie!`{(%0q_
z*`hTfC?SMyM0N{Tv?Z?XGaplW9<YoK7x7eSW5~Nb`@6!1T(h_{*#kbp=xe{pHRR`q
zV6Kom;kR3e4<dgzr&oydcjcq>?l(}5M>xip9q7EYhS8&4`YNd-ezr9Q_qWP-)d11h
z_x8B00J|1zvB|{s$=oXs23~uu57e=>2r)Po!F!MErCz6*j2J<D`(m5-OJ63dVb@|g
zn($_k4JSzI{1e18H$3~E_;L<F(aVQDRiijr;$Gp1JF6_c=`M0RNc9VBjdS2^d?p1h
z`r)>%&{gTWE&c%4L))EnaO3CxR(m+jV~~d%mnkZxyz+AOvmG`AR#PG2_vPdFsnJ#Z
z==R&!Sh;--ZBCo1=C!Id!KP50u1*Gryavy{bftppe4|RzYo54{zK?<JvL}A=Rn*PX
zPj3jcVnq>bB7^*BFKfg4bBRsh;7xCQm^JjVT`2H++e|1vl0=yPygth#^yllI@nK24
z#P+mlGO<q;6?!8?bErqr>Fi)sq&<?PzbQ>MY~HTC%z0z-^w$)$@2-tuh3L5t$p!rZ
zsW3H4YVKNO*=B5MtBQSA+@)`gx14cw_anaBjrwgWvxCW5{ml24^j@UYOHSZoSu`lK
zV0L?;!OhAA;_yYo_vx`>P+)AXXU^sQYAOUdJw|9$GW)=Vhw%1<uJ0-Mo$ZLzBC*h1
zZ>V$3s^*O9<Ks<=%&9Q`DLMWzXLrlesON6|ztqQC!`@`la?BhMbGco@S%ooL;un*~
zmw}7<{RBe2J+tA^a!1j3M$`#%?39MH#4zw@QU~1Wdx&{WH}lVGZXb*F<9wEbm7>{-
zM@5DWJkBglr5F$(w=n1U_Jjv{r*bF@TqFH{$j<z3;~Lx*4Qp>n2kGVG2ZW1(QA_4t
zHdx#<Lre6dAf@XQi!#Jwb0f->WX<>DXZFtFCX|>utqG9AvKdSFmEDUGqnK&4>6vw@
zmdL72P$Gn8)tOp=0@aQ|)2lLDDw9BdDi>61jI0VObJn1~vG&Uh0}+*&LW+WKJ$D?i
zM2@gKlOTq#9%2~#C1-8{s?dr8O=xMp6s>OiT1mv)mc_XA#XmA_@uvRObgs{^u?$+l
zn$N7O3o^>~J-{KArVFeKKlOr*|1zT}tDxtSFo2oIT;NH)J+9I7#H2s+?TaIErtrOB
zivH^NzsEiWIhQTS)|0|8e-eLp@7`E_)$87eJes&Wni));euPTI_R?H`hX+cqr~~t*
zGf8fue*VfARf4vs`<S#u<*G&bCI}$;Ff8ZrH6_+r1K6hY*6|+tuHUQjW>nH=`1(L%
zNHu?*A4a?qzI8xODb>Lq89*_&#L6EL^>#}^6DU^xm{$mbVc+_7RJ_X9M!bE1UiwHf
zf-tV)detJnODtJMGoG^XxM_V8vFjWX5+&_adm77%ex;NX#V<lndyjBJ7#rh%hja;F
zZ~y91tu73AJ#niE;Cpp&KkA>glC^{VdgjR;H*w@0nBeo>z>yG7m#;ZC`_rJX$T4c{
zZgMGY8i4$Xo#Wc7?;B9A{pB9Ge21M2TlPw+UMl7x4FhJ^9%yU-`^M<1I<B~l-f;nV
zc*H0(D|U>eOJzGvv@&11?y4DVHf--@Rat+W&9B)%OC?^=iaXr*S8%}<v$C_T-&=v0
zpN#QitNga#mVWZg2|g&^4-ONZNbL5~P_f831M-C=65w_~ntw2Evq+*Ue`|ElWBk$y
zLmzD~rF+E*!2^DP=j*PoSKTv(+^UkP`6%jEp|Sq*tJpal6nep@uMSy??FQHl#<arj
zz9k?VMrt}|dR{a(b+g4*+^x%m4MFlfITnMq#J%KTT;kJSnD0}7XT!4rWmQKAVje=L
zzY@+?-w)equ+B-R^ieJWaddaZ{|p1>ZvyV0O{0r7T{SEy-(aa!ob?Q9^=@xUn>P6A
zGl#BZ?O{L-({s%h-Cd00M3N>(Gdu;vp@5ijI*F0&a|P_>Vd$N7?0h1~2~8rs{DlAB
zM|h#=|GtOhZB!0I%(dYzGl>|9({-*sDz8SiBJTc+qw~nHcrF8nRlG(kKwxsfw1h+#
zmMRg!ZZkNxo$o|kZ36%fQI}51eJ+w6A@@D<;VdeJ;t%cW$F~^kxlUQb_~=^c4puE1
zUCbe&n$6l5{t*=EAmd=bplB4v!jPAWZOYyyspd<QT@n7Jjj%Wo?}as#-%2l2bD3g3
zOGbw!oIJ97sD26Y8)f>aQEbmT&2N5mo5$m6CxT^U%Em4t@nDQQJ~yj;VCZM&eP3Z`
zC-FF<b9c0zaFY?@Mi-XUYQ*rC#B?W^*jB1X=&4WiRC0RRsyQCDAn$@Rft~K>M2cD2
zi-)l=kZa+uUI9m#kKE#NT*ul|*pr=>8g!D$pPXhb6x^)1y$S|tq3Cx4C8RYoqRSL&
zMoFZt?1?x!D`spCP_?_{&Q4OjDeL-sUK@s0XS?P*eBtcB=o{-a2OyTk;YOlOlm5XA
z3R1ow%~Qe{<#<@!h)Yro2uETw%8U4PA@J?)zu&|k2-%i=cooVlum(WXne=}?4?`MX
zcS1-WbH&|XI2*hmU2Z+C=Hk@opxH=CvwHT0-(^9%%;qMJO{u6PSyJa;%)NdsZPkD^
zTA28CFgZOL!D<rGR}2etecRz{iPQqw#trvOBS#aOE^G}A&ZtiGJLii+@0R0ulq>6M
z2fk0q1baW`dTT)YAA?=WHKwrZ+2<p%K|~3Lx4gf3D0HAtzGIR!+c>_g)75Hi;;@aM
z3gzi{b0%~;H~A!qSFK;#*)QBb5Bc$LozEBZ21MkLnNt#xK&`>*Am`{~PKOTsLIC_p
zw+a*h0E0^i?qg~Le8s(nAHbv=(qJk^1c)=Uh^gD-QG<P9Wy_d`o!XB|q`{rO4q<l3
z@gSIOx2hY$y--6!r8F`F0d77g@VtJ@f*d?$k6sOTM!4h+)FE_K92H8qy6ARqgb(5x
zQ=KO5>dwS*vk1>zjYgBj1i21=(>s1ypfxu~S>Fd8EDIU7ML}{=?aarxTs{9AUF_x;
zADIbuo|8Y-_-i<4_+hPigR>?ED3&b&Q??z*2c4s48B{?FacB)pRVz&idfn}5!Alzl
zltQN*;&pjhq?LXCl9@>|kcXSHTZnih|1D2omhT}H<OQtH1O&I%&(`ppWgv(K?Ifia
z_DBx+N1O)pU=8W&Yz~N%u}y(G16MdcSH>WWy~chvU~FL6nT>b$+&;!}P~J33M?Mzn
zaK9IZ2mJ-4Iy-daO2k!rU-nkXkJdvefQ;q~a0UP<{azZS-=I73nQZQ6h_X{@{nv}?
zNQIf+Q4UFs)yFCgWZP?gl{bstwG2N85#HB*<1I8oC?N{?J9YTYxh0zm^;v_0#>pCb
zNhc_(5nk{Tur>DZl}3oC&#Zz6yZqG+;F=1JDC!i3{Ru_yiJ$lPx+c=SSfXsfNINNL
zN1Nq_{R&Sq0EGJKXUKKYF;$$?^9e8o)hQsw-2+LRA6H%yBX#kV3j)mh@jV?1m|7W#
zvk4RLW`VV1(eeYTq<EgU>7`IaO%<$KYLRs0=_E*DtUCf#Ayo#n_nc#3p8YZURl~na
zsC6&E(;Y#3{^)g9y?p_QCf4y<0gh!X44GLb5!PplR|G}t+f43bI_D9~0ueKv(xg+=
z!H5|lX7E+ZE1%%_cY`EV$ELD^p+bc$%`bMUdbc8<|1ki-<M+~F*N*&ma;21|OP&sv
z5{C^}AOgPAB`M<EM#l8)mY>KW6?^OQ+yNH9MH6f;o})6sw$I3FaY0<&_pt<UWP}2e
z0RB{_(_qxjcg6K`t402$lrfA({Iw(VJN5*feb+(O(2y?F-Mk&~fR;B6-yOogX%3$a
z_tZE4(RUQ(vA+n;q;*(;e@_)ZJo9=8S>f)$tDWWUsev>)GO>Kh#@91PXo$CM@^H%g
z{fD=b>gLmxIZ+N@{Y}GW#0Na~8O|ih;0dZ?F%AkPM1@p*ULn-&vR)hJ3%T>FNL<2h
zAz)0$xc*PC$qS5;bkI?qQDIfSz^p$&67U~I-pu|}B$^$RZw|nel#n{9EN;FdqRbMU
zd)e&BCS<ykS0gpA@|%!7o-hs@cFX>+HCh^;SL==GiT7xXQ^}uz6o?~kL_pc#BI%w)
zgA8?2n8dXx2TSa%@}^QJp17ulUY{&4Sn%zmmgsO1@@BiBAdq$l<*I+xpd_P5VYkdC
zeR)<qKJ;Ux1~}0Cc%`LlIVO==R)FN4Vs)XTNY0Rux|q^>dyZt%cLPcpnXAdMj1k!|
z?ah;zC+5}1;I1rOl2vBotK&X=WXbL!|B9)c36L=lkflA)#)^tLeVB!eP}ct&gm>nc
zGuOLa)Mr*T;&6dMAnF7L0UTR>6?Mf@<|!-_f29aWxWt3UUDbDx^Nzf|eAvFf!y_<8
z53$qAZgah42;Sx*I-y(l82kdKVk}F<taH#b+!w~?QU@A~^ydCOdT5GVLmfvee-v8e
z1nM}%bVG>he|OWcvCSyiS3D~!Mg5gi>!fhzHL=-}O1u9Gpz2o^t_NYGKUZ=Mht^lo
zk?e|@f3a6Y<Ena0kh~d+X>A4TT&r#2vnZ;d-v=RPq1@Ge%f+><{!JVr!aB}EqBxN(
z#=N~E?lrI38<rCdA7><%k<XtM08sFIsl+_iL94|U?IrdWBmSw!+#=01`|YJ)tWQR^
z7096D<#_P~HnS$5j57CrN^N6^Zhtm#<`+0*z1y-nSj5<>c7^LQ2lMpPE<Uaz-+r7+
zfA?&3YEe$+55BL>BptgW*@XqV=BPb7T%gWc(FdtZo}pS3qOfJRMqx+2M_PYf@%sKO
zo&`HRS1}paz{MQ&s%+H=wMH|cR#iTKQ2@Z$@1^|Gz$%6T+2EJjGXpk=HD?t6hm|QX
z<R*CYef{oYpIX6~CV049xTFKVbrW2|eHG>%58?~1tW|lm01BF~Q>x+A)19=cqn1>R
zQDM~14*M5a4YZAMaDT!TlfTp<(2*d3DqBF~lnsZ23z3ZG)$;oZX>%^-svvJ8JMHWX
zu*Tf==kAyZbTxS_Is9FLM6d$DL@q93rNuSDmJY5$mHtm1mHq(B|4kiEfPd=XOOSsf
zBoqq};h(-?3-B@h9@BJS<F-P)nx=mfHsoH-LwGg>#iLalh-Fa@Wc_J-q`Zr!r&mJr
zTbB~3vKES%jsz<i&y5{>qM*`b`S4)&dF!_ZRRm442Cb4QA`1ByG7sI8poTOfs9JhF
zdwqWL6|Hf`@;Iks-cNexhnu>Tic)@Id_XGSacl(L?)$YuD0biM9$L*Bp9$nvP`UWK
zdV)T|3jR4-`M$U577*tY|6Fn(oGJ4}G(8PJzQVQ0xVFO6=cJnEW=g|@rkT9i5;FWm
z(Z5JLoYxV7MA$uBN}fw<%>g!d3r%`WuJ<D{Iigy|fyWng4<_xmABVj+@|E}K1@#>X
zEGeed*gob?-)3Ug!f4m8`F#)Uhd*h#Na)WR$o-x^WK?i=q}^6W4~e%%QzDC|D5lf$
zWuDWPkk}{@1pAn!r7RzmM^EO3s<FuSl{t{){g%T?p0IoO8IZNTYxyNOL89tX28!2^
zU>CsSmqADwWqcEOG6Ei|8?;Hd^&8dHS-22n|HI+<@n>5ctx|ZueEzZkfcw9|8t(Qr
zgQ-SfMMu1{LSt{f2QxrXKfRMn7_sOU^eJh@0V~G$)E&~(1$Ca^N>Ri1$S$c|>IDB2
zw0@w-g0j|TkZ8-{2|trz-sU)>#{1MAP)M95Dr$gvNp)J&mp7wU%sf-!-txqZ1A`w4
zqnO8mx?!GJi;U@>Vrnr+Q?1h8#NIuqnJyRk{@LcIhGX~we2d)MQ?<TI{>bWcz#;Oa
zGz!<R$`{1*2Soi(aP9s}y%a8D=g471kQQD5Q%1J9`qTNLs;w${bN*)@4u!d&2${zv
z-~rY)8GN>>o8vp;@ataS-WAL(#8`6a7fdtBlmhv>QN?7N^I@~GOrW8O9@R~s?FuqC
zKe`%D+IrFNGb9x#)&m{D0@Pwl3Lzcn4L)cCR%a5UdyZKZ@RQuWd9MT*HgwB-d0-^`
zvAI}<I&4GD@F#`Cp##v8BBYN)6tzoAtpRdjFm~o<48T}cm-H=#pNCye0ls@p>AIuz
zqH$^nS{E9!G_qQB{Q6#WUwzP5(xV_9hVKDm%9y!{U*v_R$kPr<OPtdxIwvtcuzIEB
z@~-c#$8M~(3e|jhsS$rq7c9GqW?Z=%V^z=cH+2ea{X!Vw)CO+JU8szM`a#!1*5BPc
zhSNPsW(UIz=|WZ-@UD_d%*{JOW(_3V(1FfgpQx}xN?|6kgZ<L>^gOp%1(+-|V3lxE
zxLP7po5jc6>sHg>$HiQe_)iH~>4tTJ%{Rgj1o9X+9b9~UE3$aKF>QH1(bfti!|p<Z
zXdhD-=-53Z!*Qs4#`ol5eiojz#2)1+4nU2x*HwLidB`0i4@fY8D&&W1>83N0G~Gs4
zI5dS=h;NrWU@&#bQn}azVSHgNdMq36x%HiQX1=oJH3HAzbY03Sq_C<sTkEdkN6tQb
z!=@S*=I;TtRPK5`(ZZ8I&W&EPb_Gs3|4ow7|B2<UWq1-H6`Xnfcbq&2$fabM(*PS!
z<+tncPZE=^%+G(j%W$Gkd`(oHz|eu(`z93{ss$9ftJ?JemUMqze%#mp36(;fFU%F0
z?`XXk5?q{n9A}1sv!4pl;<8_cGHSjJT3w6>mdZ=Gyil=P3d}uzN5Z;vu+l~4v~`tw
zPBv2R{Pt9I>O_Qvuu|PHpJ&=mbF`?;H2BhF>|nbc0sEKD3jzSS|A-Ei4D0EG>xzod
za9BCbZ2Ea-{<stnyjk6SKbBmx1sKT{jU7Wy%i5Zi{{4ziHUPq<y2YAE62c_7e>{k2
zhM8Cnk>o_nKTWXzFzc-CFcLK3iLv<&<^G2g<$<Kaby!c{IqWNH%V3C{YWO(GYsXLs
zquf=HM)VviJD2+3J{e;H-}n(!Wg)Do!*$o++MD`9WZkoDA_AW?<<NYl|KvvC52*Sd
zx#j+o8=RdyzbO+YihHf<x=`ycrpwHVgIJhN-lRwdx^T6~@ACocp0x+n{fUxf+3|4J
zB+#3V_rlmOu-my9)hRzu!e`=zJ_H0at?{pMpvG$t``KUSRuyW2=tw*w(&uz#Fh4`X
zF0A;<zyi_6^6XxhECrfF2&zy9<lfhuOo<f#rY-yhk}!5|UNMijv?6?`$rL+Yod||`
z6a=^w(Ob3-3iOR*Z5lVm77+BRf?S+7+Y1#GApfbQ2UJDqI7Ga-JipJmKMH@dT-*#o
zw$6J39eJrz5uqI!B1HfIHs)(zJo)LH>3PBNLC-txcY`x=Pa69D#p+Ra)vI&<O7ya0
zxhRK}p{UcLa^<Y3#yL$!M;SuA9tnTMxjiqh`5?Z>fTRY%Ugv~^WglTbn#<w(W)mun
zR;lLsFMGYrAW4vi#Ii<wW6)0u^6XE<P1jv^o!-kqDfh%5|F$`uq9j!z@y0NpJ)P%D
zJ+uGrU+e1x8(LL(R8oqxX+2xYjm@p-uzbnQ)0sWqm}{;vlaL))5PuIAT6KFsA}wa#
zOx+bBwQ2<Z(q~54gY8`6kz#ETnJ{L&g^uPVUl6ll;&cQQ{i~pqjX~*EoTti@AE~_H
z;#|OU%k_#dR*!ip_wDd%bW9Zyw>!-Py%O&jQ<mnJ0SB$L*SazlQrZ>PXhs+bl|Hn#
zR3_}6^+|K`na3Zj`ha}?`~X1Xzc{9R&ZJ<Ng2h68xZZy+BK;d}`dELX4c9U?$qsr%
zG|7_Q3d^IKlJc)=wrY_Vh5a(tfvH8JJ&oy9IycXi;K0HmcWkEPR2<W)tkB*Ss>j{V
z(^N@Z%UzzWCY;|Uqu{{UkmEaUS*saBn7}~y=Mc)qQcB#`ib<r-m&%O!bF<;e|IR1Y
zJSpn@b@*b}#V}HxzPItgu|pjc%8K@%+DZceqyJd`n>(H46CeDJs+0Q@&Yu>%uCO`)
z9;x@xjmH!&%l=5%tD~!s{1(>*2gHeTYT26!*@1o+n>yvnAs@%@qjWr<K1cf0c^%u@
zikoUu>fP+TW-u{fZnQM?rB5n2`fA_ikg{4U2rC%$P+WQwHGZI!%CI9TVXRHBS)Au~
zv}lS)KIVCjsxg&ZAn#9;y(|c@L;_z&PpcCw`?w;GA?+2Br2IF1^798w|5tLi|5;pM
zIkw+`<o);UcFN_p=Yz?TXg(0ba3DyMb_+S~Gw3Z$g0@iSI5Yl9&Pc66n>I!ZlYUF|
zEY8;{A`Yhq{(`ZdNqLCDXA{yx5*G>*XmyyE)}vHs(X3{m72nz%T?@=;I9vO2cPj1S
zn$+~}xc|WQcxg4@{`Z+Ic|a`iNxZZMoBGrDQZJ2aUtP!;Z-D<z%UV6*?!8z|PqZ7w
zv}h;zZopg(%ykybrC1*QHvyMxt9>NbrQD$my5~Bvx{b!;gU3G9F3HRb!tyUd-t^Se
zXT_b&5xp_+&jyl<QsakKl7e3`+ob|<7r7_<bEqFb&J}C(U^(GCeB1Mb3iCpUr}`#>
zrG9w6V0|mJ5C>HrHHd7KRCKU&LkG5wnEk3$-=b>P)H!S?bm~Y+*Fu0UK&#e9v#-ZI
z>+_-Te2~Bk2iw-71n0gmP@RQpAhTm-Hd7r(?Z54%fxFeqmNDN#z(3D<Oz9T+p<$57
zcW(#xc9YNF5CGWxpSQ>k<<JlMaX}$P3r2<N`DU@jP#+1WL<rzsp+1t%yUVc!2Pn+_
zM{Mh+?Yb#A+snKwW)$_)9PdHU&#qNk{mpaFDUhbF*MfpyYMetX^7!Ajdg7gI_n<U;
zLem;nrWikA+-u8WkJ31I{b_#$=iI7dS+fOf3oc=FQC>3@q1AB*y9s~Vr{lNL;6~8Z
z&8H5I*V-w(h9`<}mA%Tw8Ss5!c|+9!F&qYwcmG9BuRq}Ce<J5UbEE$zYeqJKFtTVL
z+>V!WlHk{in3${NN0w{I(*c`sq7#M8V2*{o!R`+e4?AuFIO{mdSY3g;7bQXEug#Jp
z^oak1jCX9$Yz?+XW81cE+w2ZH>e#mN#I|kQw(X>2+g67sYpr+h{o(wBS@Wt<HEPtj
z%hhjN^H+jN(aE0&<1sWaH)us$VK|Ae{`TNbpUC2zFLe|+qE%et_p;e6zc@(={bt<I
z0qJPD!oK?;G`~C&a6FXlll1}Y7FLhVme%S>s6Q}+6IutB%9yHpJx1GCq07}#ku%$G
zV-5Odo|?L|Zl!QgF`QwnHVr}7TbABm)(qiByHxhbkusz_i!(sBZGo1#m0-Fv5nBx@
z*`2KjHo<G|%31ol+R?UvJ132KVNW~R>>qsWv|;RnVxS&7_~~_dVOqV3jh|3`Y=;pH
z&VF*gF=O%@VV<_70v#eMC<P!*!?V=M$j!vJJkPro%Tv%Gnz~srFybRgE9Zfgbf;o7
z^nEi$UEgK<^s+}xkXYBNS&TF_DAsYS@Okx+uiSxHUO<T>gkUo=4|@hv>%&1mh)Lx(
zkQ&GFi7*4THRk2g1(44e=B{y~qVxnnwSq-?vIThDVF<>^6HSgAOs*vge?!vlM-Y>Q
z_)xgfJF3JM2-W)o-Ts$)eX4)VL}_NLsz`;IP^Q?ko^>d9Gjz<i`Uv{VG8~IgHjq~s
zBB8GB*c^pGy6>c}{oF-!Owk^T_)z%^gARJJCq9J17&OvoRu;uha<&E`4K|Y<i7PaV
zkxzN9>GH+0OIPkoTED0PgxQ!{x@R8nZ3K`CI?Nd)lw8bj0tph#Rru=b^zy61`y@EF
zQlZbAGR}F<Ni8@|lR<B*4Lmsoe^>50p8ozzX1<SmfPZUfdtuLNW1sovSK{n59uAqt
zz8@eR=guTpwk}+xtHCf8B>|dbCZGKeK%+$VT^vdQ3_rmv7kjeu)QYKa<F)L|y;I5W
zk9X$!D9B-h$A<jI(fPJmdwhyAA-q?J^3p2<;A>B#t1@gHjY^<8&0;vf+SyCFJhFvF
z7aZDsG_E3QcK9n2jF7+zecPCwXD6cW`ZMq#Zx+i==u1#s2FYBbOH~51kH2wp>IaPS
zA5QfD2PglMnlM&axFAZ_1giTP<ong5^5D?(YB)S1!E%F~FRVyv$F@@YeUkoNfxN=l
zj-H066+^e;^TcM1Sm9d2SabQyX#KgzJL+EjmnPK)B#6>`k#p!;Z)g~zGp5A@E8ADB
z2r4gYI1XAq4psr_S}Xn@++V}Cv+1eU`&npDu&+|lm@WeJL7U7HGk3a548%}_vNLRT
zHV3A|gvo(Xb8Z=RC<wG(k@RHeLa9hAhG6)grg7!x1H`27y?r*i2TmF&waVQTG)#Ao
zUw0pW)Ae~-(*(V8Y}qy*!G2p<-|!qkytTC3tXHG?UI)9Yz$(nUmR(v-c{XCBtd|I^
zlp_frglC{;E-my&g1&DTbRWSCV_Bo|sH_&syFhqQS~+@@VIKMO78GT@^qc2xvZXZM
zUL=z|gDe7!t);Bo6+cTs1Uk-DsBQzD>Mir5!R6zZo`O1H-WP0=A4UOXe0;<j#;B58
z4khACNlOGE*>@byvXU^|k3Zc;Wr*0)2IpxK$Ds_ZtFMGd=UY>s1{e(rDxfK87!-uL
zL`uzeKaI5iK>4~}7zXvjzYRhw-7KaKR6|jeEt){$4M;BGnMFa3^7)0}m}#ttLzE%`
zv$qdF91wi-lQMr`?C;b}L`#0J*^>9fKc=^n?S>ckQOuc2_!Z-?4&8pmi%!J!8=t*r
z$NkA`9(DzCwpYY3lk&&CMblBCjn5Anu~6U_R;grgGnx1%bbN8)%M?{+?8ca!Cds5f
z>8W~^S%Mc3`dl)A%aGq&Og=p*n?>=bJr6PlB(pxs5`cq@T&*`<jXX96Yz<nSj4IFf
z6!8xp<fV~!RoE(I<<Cef472~oQodnC{~t@KgffkO`)O#;ngZu-x$>Tq1F0Bn2jLa+
zOgcNbZw(waT&G{bZaam-=^pdYEQwHK3#|ZTfce`ZN5lc-8rxtiU~>v6N!5E$5hOul
zsR&)i-He|RqGY}#0?Y@o6}XDSN`u3zXLvg5^aFkSNQS}UCkY7fnLVBoH|eb<LjrP+
zK`WoO)~Ct7iEijA@47VDb`)$gt-w{E=~uTf!9PTW_8Uefe!#5%!ASUjVDwMB(UrdK
z3Jx$?v{}Ju@-Sh&*Tl<Qk&WINrC@X-%J&OOf%9iW4CP4xzrbq%j=N|_VJZzmF0m;1
z=oZfDT%<A>$b&k4_5wxK&A4Y>a)t?H%Cxe7LlMCMt2Lm|F)NE8GMu|kZ>>F4L$9=F
z)EQzM(#sa|wk^PGvYT>C0&hMWO>c9E1$BC!VrR0aUUII<t{JPUt!A7ez&<%N_8XLt
zr{RYFon~Ct|Ii6V0&fn4)a-}l3~{j5*moy!A<TuJ3S-}Vx-@9tSEQX_72vM2$Q!vp
zdoiJ-J`7fU63dpc*icPhn2`lxNQ+vojboB@VUrE<zE{0WED7t(*`1JetK^gnX!N;0
zcsD&6?&h(CX#uJP)VI+DMA$wimKN0fuHV7>Q+ij2oME@)15M+`cgY@I(oif*74bzg
z_UxBvEXs)ZV^_>)aIQafeuCTon~qfb0}KD#6IQ)I?nH5FPgq1i=4{mX_c^TDMSrA%
zf^jRO=m>sXG%^(`dGa8rWOct(kyRwwOy{Qj5ErGB-e9J2*6hDUV*()vF<ny2I+M(Q
zm8vp3ePJS4d$?-LeLjsEeye))S2klH51DP@?YAb1<^~*!-6jc0-c$H{2wIsd&LJ0X
z5kO)t1+SB=yNxk?H2>sL72uOAr#P!gJa5+cvO0s2M?p{;g5Lk08bSSlfBj#9C2|x+
zeBF@{0{VA!+}<~qln?7NA!px*kH1dMeee5B<iyX6`s-Esx8p%aHdvTXG+@%Ou4z2A
z-ESXl{gR7QHv|$ia+<-WhaOXK%a|DoR{Lpl$@``NoEatngemo`HG-&`HL5F;blL_g
z&nWn(E>}4iteLPV5BGMKKf~NF8a|57{TMsi+Tvqr+fJIFFRI%I@k_^Q?F({}N0r+~
zQ1(1#X2B?Z>P7?v0Pe|@*I@5+2(Y;nUw}V5Lzk3X9v<o3u%a%XkA17aoh>SQdLX|>
zDr>e`=VK0a^8-X|a-`@?0siyrVPN)TLykP?XL6ETXs}P>k`^ok5TFj=cIQ#eFG=Zw
z7*Cw@a#Kcv*>@pb`&G|jv}GkQy3(5zM!aeF$v-zZeEPlg8({W$XT>6^{F*`SIEg49
zW!;+g#Xi4k(S|mMIb?&|mH3KUH{v4Jr$rvk<8XodxP_s5yF`_X)8R^!SV*IlIhJO1
zodgNcO~}HCZ+A<BMW$?Y<SCkrk}BvO$Ds4k_8JYPb9c;xz%Dp2eIwK?VrPwb%G;4y
zsl1m0AH!cPrqEYEa7*_D8j1r7%!6x0TLd-4AwjsF_UY%M+gnrtbxDWlPBTIsn_<?!
zl6BEjm4!Wu^5G17tSH}lD1+VaKTKG~3xwh%DiG@O2UhtvZ8ywOzQFXIvZ>Zpy`5ra
z_etktG#Rp(4Znuo_(Vfg;+^M;?n$bCK<_(OhgEG4CbH>u{!tmAH93tG%|)P*d$ie*
zD&P#6Ut;x+!#C{3UToNT(V*_IS;dZVqWqBRa<fzOn2NI|V|(|>ru?crgq-4?2$sI;
z-R+>bWT3G~`x)NE#;rqWAYeKd0DzWLJor)TszpbGctczqgE4=crke19$~DcXsDs}|
z2o?^>cC&s=4E{Ydw)q2_e}DhCM3V;kXjCvP-7SMCP{v@7gLg3`n!}zW{km188`o-e
z%UnS*ZC~djdCIdCkN;X!8Gely=k6OKB@?+m=vSOxk?DNpWfRk8cp^URO>PyxPi2Dv
zGpE>3FKqPky(QN7x#513(1<Y~qL()Q(m7nIzHN!EcbXb|Y&aEh?8@$yDm=+CXMIz-
z$}Is?n>6R%f=^Vn^v3XW-D1CQQ^c9m?Z}HC%v=0DXVh{)tcsHL55+O?19tfrfj9R5
zQ=3_+7!M{&c#Yie$ax-0H#sCEeD#l->W;(8ZI@aGDX&Mqu0+(P`xte(vn*Peb*Bj4
zhxSt*lqg@>i{yf$jTA@e*m#>IbQz3sOko1Ji81rsLk<*lxivtbTo(*S&9@EjzueTY
zeRn0oc&{A$FS@xLz8u!`hsy5z`-24b$=fbZ|KhEe=WgI_-?t9Z0a~}}O0G|4N*Sng
zd`vK3PlQ6qh^0W6u+{tM))4A!h`E9gJl*y9oI@apli39*mYpc3G$<Ar?rSOH3!!ub
z-H`WOtg&YWAEII0I7{T^dxL+I0uK!g{=Uk~+&Ik;p+vv;m@IhEGFhW;3XSui?AKR=
zUmHo!I_~yd6AK;3cK9VQ{kbDmohX%0cYtA0d9~9)_71DU-Q{caf!v<I(h4fQpVy`0
zkT21qsdoY_%)T~<+#*N+5)Q<qmr?&~zVVw|H2MPrz7ynI`=A4}%(NH`2WKi9&}*-@
zDA_qtTBorUei}*WNU2@M5$Gl*OyL6qTD7m{bk3LRAc1@wuDb*ZIDzke#w8RGODL#_
z;#l;4bk{y8tLn8TyoLl$?E$D8tj7?(-X#0?xSWf_u*8fnHd4~?*_TmnpMB!>ET@Sm
zZ=Ku~En|X6Ki^uIt0vimw5PrdXDH$#LWkWQ%^Yt{<?u{nns7Dwzam;<F7Ye;Kbq0&
z4;=UX+23NwX1OIs8`os8*Rm0lzF#F+`X)Jx1g*0zWZEJT?5u`<k|4GEMfEEXW%$_<
zEzB<GfVMxVFq4)y|LxQdwn`j0pT&m<*qlq7ul4ixvHcw2oEVWzVhMsEC8Ee6NuUQt
zpGf!-QAt_V1fN^vtx!#6Ig9gNrpf}0?x7wvw#2-(i)}6R0aI|~kO?)#sV5P^V;Kse
zIqx+laA`5Wb=388nPV0Wuw{37`|xo}OLmOKh#~*-MCIy&6hGh;pkQF2_{{G;ED$IW
z5Ri?BvIv!LfzYl$aM3?Cr^m-+KCT_2%tow0^+Gz3JsHgxnE0*v4CJd1Q3Q8>$P`h%
zLMwzk20W#^`=~GIXq>f~{uf8TIKk;LgUIs-E(4wwS#ebw_4T_vugwQ%VK}fa1(H^c
zD7lq?$M)dMymavBNLU*i`ivjeWl9tU7|1qP8?cM&R+b)Dc)-y>-LTkkoDZW-!I+Zt
z9E-YOAuYdqP48L{%Zl+H(G=0ML>X{AtCwJ~Azvb5>kgWe`-FNXEw42)e>pV#G@ETa
zlVw{;P`*sasYY!+bKCK4RN9)5&J+Wi$Ut?0jIAGV>$infD98gT*cV8^10LM+IRgx*
z>u5`{{iItVvbbYTR{OT>CswOV%=dA{lV%b_vTPIb7G5aaCpcky%>&ZjAaK4RVv258
z$P>Il64IC56tWo4Y6>t6liUMWLYWZf!K63Myi&W6$zH3NRV{MHL}RBCJ6AaZ2~#j8
z-VuPM=)2i_mX3!4!`b}Mh^1H^jU_#LV=jIY?ar6<$0orE(^vN{Q#0BkKM;>q9@}Jq
zpPFvOhl%(BX4R6`&p6iR5|_m@4O=mdXsf4Bqu)N6OmCEm;%K(O6-gXbFMST5LG7@*
zI!G2T2#(SNMU64!Z66Ds#qfX$XR93tzIPp4_Pi8Iajb?HMswL&PTe08&2L{HDSyu`
zN9O}Zw#^ms7M^@SUL1OHOe4WKGtb}I`Q09U9=VOLLKV$JK7OjSxlPy}f_XXka3Q80
zS`0?xH#p7k@}7rThhe@&1SHScHIa~L(3kfFs9!_7U{R>ooH`@K^qmZ)%#Rb4I*P)?
z)qoc0<*nRp2RbW`srB;tQo42*)!4qg(lmzPz`O0C<Hca2&Ev^81P9eTi;Ea(0iarP
zJqKn$%rXpnW%;6hd|k`(ue!!&?5!^#2Yjxyq+W+TaNe8ZB8zPRbssQ<#+``d6lDLo
zX(~YcL}5VdbOzNJbH9#1%0`Q#W%}@Tb}5mcUF0mE`_aw7d&>c<<odd9j1^D`wm~x?
z(km)U4$*$?lg0wg+bQ(a>#q7vUD(z96@}D)#UJvQgM}5j$9w+5dZ!PHObPY-B9}$g
z2@^%%VLW$?PHQ$Bq_#K*Ynbvzp)%N;lI0tQ_t0N7kq&obX2Ls!vk#4q+a71eh$W>R
ze7rh{O${!&$#AP6Az}NJm!E|x>+EK3-|xP`kgG}CQJQ~SLt*){?PWgSPUj%Vu-dyu
z=CW{#{at=^bqA#@{OeRljX0=ldnM{G<-A^D&mOB7D0x}++QHyvBphreVdmG?YR&gR
z!}g(;Xd3e{pP+gOS6NN|Rx8VvC5Pk8`d4nWo%4PuKC}`gb9-gcg%A=}Qk(-w4)OWA
z<@oyk<%tK(l=TLWthk`xnOBHv9<%5j-h;3%kMGmxb`snhI+k-1SWkh8uS!zV$R~1*
z%l~<$QuC1)!gK@mzCdj@{>8sV6ZW0|Ea%mCnuVWMZe&O`M*l$ldgYetTu4bdbz3ka
zBTAD-Q>Ra$GN4?wqR9--a#Xto$4Du-C-Mmw32Qu}gORW+m$-Ckz!*&ht6M~t*A>N>
zW-zAq3Y2d4f-9C8kL5NP;d8hT-QI8a;ZNZ#s+ZcTE{eeVa4yXJUBQZ6RXHNDV`@HS
zf1uDU*1ki{I=jL2-JukPSKE~|r`$n30~w0J{sUvtZ~c|2r#&oq7><ncdW$5>211@+
zWr&+P_cq(D5K5976ouflLIhCy#oh`4X<g$KveTcg>o9=QQwLWP^Vo>~UPF}>U+9oR
zWi5uI@BlQk=qJ-$@Z@A<#$J9?^{TEZ{KGg>2i#KpCHP~@DKv|hGFzRo7FukzVZN>u
z<c5vZO&A6Qau9<U8=h;Hn5Ed~u^KIK-@mB~9evaj!=1UnEMvtp)s5C<mpu#!_u}R7
zY>376mX}{RD<KdqPdu-L%PH9C+E;C(PhKAI@u%5LSoRdCnf&^VF70>yKf3m;ZG7(C
zOu6P8ZG7*|zIvW#aY##GkE~{r$l*80c5exypr?<_c<a-K^-cYhbH>FK;7$~uf7bCb
zmd13Tyr)N$q;G?DYLhgibFRr+*dq1ilzj0i2AuBrJVFzo+HFL>^$dW&dfYx?e%+OP
zot_I2%LlZGBlAvi=g|=TsUn2~+i*|SR%B^<&vhFxIdsAA%DuK9Z4XqWPCVD{wB?5u
zGOjhn)+!2}F~snQhBvkxDpFHo!OVs35b_$<mc6$I#h;>}e2v!Ye*BYq96X5-YCLoV
zpvVk6m;_mp2n!TUqfY%<ytT2(>Oa6Fkb(i8P|-#!@Rl?)bXV{=Q)vpBYU#vRJBM{(
zh8TvoD2nh}i&H>r6~~gE$0sp;9})a9=x*9P%-|J{qv3RhQV%7z3jU-%(`LDS^{H72
z?(oVk3JbdT&RneoySr4Z!F+*XK1g9~d_ZGcydfNFwEb9Qe{h;5WuX+UR}nCn-)No!
z+fyPc!T2|Z32CD!jofbUtcxF_X74<zzr;zs5!r?Y`XuraE95&p6~-oy9RBR*7LJSB
zu^?{+Xbafh+&nJHOju?jszzH5qZgUbcQ?MB;wEm1``YiC9Wgj`e-Sr<(!rq#VVy}f
z(KAj#<#EQ79q7&jat<{rjg;5xM=QHrFG{xplX_Im4R6ZX0BmLa>chOcdo3f}BSZuR
z=|rr3K96kA{fGHhxV7cC!I;s=U(lKs?)Y?&ay^^!W0<)F2}^(vfqPn(Lc0r2EJoN<
zXa*cov%&eyl7Pz%&1V>vJcGQ5=3)efR|R{RcCmNx9G0-p!2KotT<2c+v69c-jiBVu
z@MA$rD$iZD`yssf3)p(f#!j_Ia^q3<FS0Ge-}yx^HjtNhN1&dJqC^^T3u;z%EYHn^
zqx@#}DH-)6F*u3xO5vkK!up5}M3;kEmcct`#8STjJDbMB=`59`_~5IulXQOd3R<6P
zpyQAbeeWU>vF7n8#8$I=PPh1u{Vh=TEKi)R<INvfzVZRa{R1JixdsZ!!Z<w^V$bbp
zkPJ5?%2LS9GRl(~Q4@KP)jc)p4A(%L;m{k8GSNgAO64=@?%=E+kSW;=;?Qm}8?l#i
z#_V4N!B)St^^Z<_bsYBYg+0shwJmn}BZIK2TV${b`<MVa)?``D@k-g!TcFde1Ozr8
z8A5+jaGH+r_yWOqvKDM-7KtD-OPYuOzWA#kpNyT;#qf!^*wdCGfJnjGE#jPS$`&^b
z=mi4_Bi#J2uF71va@=;vNLsKsxCS_2rcKuTz4CgG&=!t2>LALaJEWBBkQQJZp*GSr
zodqRZ`l<kXdL#OdwQBJk!6W4UdUFxxyr6rN&ReT_;ll@(7>D7V7Az!CS#FZUOh9l8
z3Hljf1#Z7E%nffXul5(3Ft5vT{RRS{c-Df>*7)q#Vk4QQjg<2)vfYv{tgL@A30&*C
zDaKoVWb~jtK+QK#C0VOtl++GOTfQkc*mLRkK5H!n@4GLS?RRWrDlYg=C_!G>YJ#+{
z;OD?O{0Eku9mHO|x*Q>cBs|ncj}1{E*Uok=8VpR7h@`&}+1#i$fg-Q<6$h7>Csluz
zOa2nrH6r%U!K0v2Y_N!;L@`uLwV8?IM<Q=s149?Hb=Gbe#<+_dl#Mqg)xmW)&;2>c
zMrI$XlO0Rm<Le`+S|O~#^JlU4Q+RkRHsDAxkXY~@RgUAwkpXFW*(!)V=1o|do_s>%
zHW$abyX#vPE5BR9vF~1q<xg;iw}pj}n|vThk49!(f~^QI2RXO2?UJ@7umSm1y}s6N
zJN&_<YI{3`f>)IpYp&0%&wVC=0xcvZdb7-EM)H<*{n>gxK3!R$u{5a3Z;z}{k3VqR
zw}`rr_Gxvxc3#ZMYwz)c>Bhz95YgM>9q6`xBuj%8i3@l5^axU4UIUX9Q3K)g?~Z5<
zI*Lk6Kq_jZD_^WoE}3~n3CV@uoi4lCgq#!7knPgPJG0@-Vg#;;rItY*m(LaOtm_}^
zi{kX7Ds#}E*4p^VE2@CF(q;<^A*Qw5+rR*1(Ld;}DP{C$4XUn~#)sjk^0+VFI)^1;
zoh(iFwd`wXoxepA-qpA^YZSNe^9&6?2jH)lhj;$5TXgsXPyM^0c+yBM9GHckT2<1E
zJb2WF%jMvKe}U^z)@~lV>WNr8(Fp*%Kt(<I%l3<^il17Cl31d+?TEdj|7YTpBDB?X
zwhnh1v|g2X7p1oh(sP|stwKK-b5Z>!I2f@)5@=`6g~v~8+CmKkS+^!y{=uxnbrT*L
zfLAW$;QTG5>D{*f{pF=Nv#;Fktre4v3tCj4DL#D|uK^gpmt1}WVJ!S6rMUN1-Hg-v
zfpAhV;!%Gg+55!zG~eO}y!JiK3nSeAuhPnN%6HY;;>7bX@~qLP$glDq>*mND-lsOH
zxz`RH+W!eZ1br}R*muk-x#Aj}=&<ZV!JqY8G6!75XQQLb%&$}5o*}0=&0xVup4&Wk
zoR0F_n1m^{UTX$X6<;p(k^s{jP4yLWo?FeYe+cS7Z4;Ox@!sce-5klce%1ZQhHAiI
zWTsv2#epF}=yM{E;iY~Yd3+^YIKZ^54)sq>Nj+8j9U_djUY*VGe$t;;V`0-l6_q$e
zU?$wmivTtLTV3@}d91VMepm8()m#4%!PZ-a9A9m@u%i6AzAvgUrQC6cu8gO`CLve+
zZct)!9pat`Gwx(l2>lLhTR6KTrBsa;F~`a<u1*<xBzHHx5wD1bI(?PJb>skegM07=
z7Gf&`IrOrU9W#{WRYm2tUbHtxWk(dgPza7TZWC4v_^Oe)Iv}*jtl@P%UOho>B<2(@
zt~o90@B3h;J*EVl#e%pVrbCTkRJ(_~^$|}hC4h%{znn<tF~9HC{bD)_+21IhpsA>P
z#+PD<B;8f365zb~vHOh<gbO1w#%AX(x#I<VAA@zFe>Je(|0DuDu$U7wJO0cc?RX?l
zC2GIIhS)iPE<&Y^GB3UgxJ4c=6_|wVE-6s~)@yHhW<Gj$WBONq^%EzJdwD1LIk!Z2
zj$;t(_tAGiFi|O82?dIiv67*Qku)H=dsncGY0D-m?QSws&pN)(+5_1eYLDoLX49)$
zm+iZmt%poRB|;DcD~u$|L%i*=9ss9%wtcH{<sR|Qdb4VrdP7#}mjse~qdF<z;Uxc$
z)qUYwk6tjWWwmeIbo&E8{-+gG>1#%QmO3MaA%34!KyS1$(i?c~r?5aFo1y&F*iYEa
zd5t%(VC&a!)ZGQG9kK^-kLO+i$SF=7YKJL_pZupk<b}o{Lz<XE>`z}&qM3@Rmo=v)
ze%oLZgM|N34&50@Hjh(ZY0s%tec^ynjL^At(AkWQW@GjbJ%V#-WzfkSj{&r~HL<z@
zg@(}V0DyV*dH;T2N53jKZEk8}6u;zT(Lljmosdje6tnqx4`w;yZ;_<(Ekzso0l)nV
zo&T)bK9MkH-#RqWBq+FLw^PqF5tngGM}4>gMJV~ZxY9K_&4c4#Nbp6w=oD)rpPR@`
zjvG_g(S0~J+Ui39i7uCHf_ZFGyHNaPu22~mI0@&8Vo;fIEB1nGY;beUk@-!wo=fn1
zrOsPJ`QejHjb@&zr~hDqPhpo>CO0IpBna1rM=~);qo~m95A^(L!Z(FlH>lY2as*7G
z)Np~N_CJk$h+TeR`IATV2|=Qm8a9f>9|UQqn!ES+xv}^Dl5bkq!flhSJsY*36&*$`
z)i{(R{`q=avG|vdSWOE`E^XBlr1H7jS^5)Eg%Qx_T~M?s`Q5QPw&W}{JAe74J?ezl
z-#Cio-5dqQtCGVPV+wICU0J#nJ!V%Gh4-o&TmzQR<pa9}>@{~z?8Ji!E>cz_HdW<s
z!4t<i$e6Ih#c3@Rr?M-)emH)lY%}|{ks{7+{urd;-;oSxAz>0t7Ol;!Kj%RyrNf`G
zIY}OCL+H{Fc;@{%B=E96xc^H5Q7WzrjztQHBHe@Cs#0;|m4y$c_^R<Zifp0jnAo?8
z%V|rbxr}(3*mts|Idx=;;mXs=Ep#suxi;MYVVCl&f^tglh1|u!{y_Du?z5b^B&Hft
zWL@y>e1a<XH4dvqSM0~FU_bTEZ|oVvyaTdobxcLDXvK<790U87CT0IwrGxbpb(Sc$
zb*&W<*8DW@RKS-ZJgT40Tot&fAsU1vu%EnryrN&cuVJS~LVbqgELg}??6L8p^yI(=
zsY(^WdJh^14A5|fCx_T`ZYMenm2}JTY&I_USMRqJ*zOMk{g3X{y}DeAe!T+e54T3%
zFc529L;L$g<`U!Sp|WD7N~UkH{;(yFXE53$#_M+SwDJ|j6_FZL85hUKAiyNJ;mS2c
zZ#M-*)+wnr%X~_zSh+av-8O<wT){F54nsG6eZ_n9(>D$2@2*E=Wy3W|6och4NjwxF
zDUOOoGav)~4y$?S61S8vJ_k3B9K+FQ9}Ykhxaequb+WU4j85+yryW4gQvo}jWm)zR
zbcEv%g?AWF@+~L{Z~1}X{nuWYzr|uam!N=#-fzqH6iZ3L*8-wH>NZ8YmFdOS+-BA!
z^d!5S`-OGsPvu^p0!5M&66eLeWm(f;=0<XfhonfX@ZPVZbu$1#^Qd>P8|7q@0O&8!
z*k5E}`T6FGe$d%f>M}P8>pFjIXV$P8PbH(di$EcKx^b;XT#i7UT2>f5K<tub3AFqi
zGHF>|55LyTnTsyrZPT%P)k@ZvCV^~Tks*bb9wpHDSxjrtjp-Zq9xQ!7aTmk7#4TNn
z6uuu>Vk)YEtdG$ya6OyEqK@+vP{iRp$I$reF)1Rlr|wOEK(Ggo@j#w}3eln`0ISlS
zWg5B(SC(BQ%8b+N$pj*$$Z74J=%F8*$THRYl!Dk~9A-vcpmwcrJm{d<dGJLFSJ?`X
z1A}pv*fFKPPWB7ld%%=qQvPBMj=`ENUe>0{b@YkyB$W}|(mBRs;yGbNhjyTBPVVD?
z7bR~(us}PE;ekgJE97?qhsm^t{|s=S?-lujT;0&=z;)-MX%5EQi$ZS|kJGe4IGl^!
z?f}C=5I_N$$L~i+HvD@O32EDe`^lk3h`}t#mx@)?T>qHqWPvHSbc6lJ470DaJRa89
ze9R6iXw8K1!wlO4T}?*vU(aw#lLDb3e-QkCvvc{H2{@*|qnOgBW33!YDb_3~pnx^{
zUWU;R8bx&qmh=9j<S?VlzdjIvhIbWf>R%;^4M5=EI6+h4SD#e>b$~Vt@Zj~al@P;Y
zZ^L&`g#l%I-BsC^(XX&Luy-cLZM7JV#w9rxv&^97voEqV6~CSsVS}WZI>38F)_#vb
z!6}`1CX7!+B`WX=IyKPe^peWeL|lf&)@!Cuxx+0%KE7mg;3=aS^XHAz+W*)p%)`XS
zluLNx)vXyJ`e!54=MTdC9mjBKIq1Bv2;vIhZTxy9k-I#=2<09<@zTNmfw!}b1Iv~?
zo0onLDRoI&Diw5d(_>8!UU^3EGT_vt$E4<mz5LVQ*GejSe<?yE#_^xu0paYrl$+p1
zJfpQ99iPlhU#+GpC{|GLLUctSXN~cl3c;1>%+M~Fj^?7LAck#<Sw<&8Y1T2*S>)}s
zwiV%Yf>IiL3+ONmjLu``B~0{1KmBv1kWZ88Hz{GGc~_1H^A4>|hs_~HD#bo#zQH!&
z2O{uaL)!fY8<q>C9&qD7_Pz<W<;!crw-M<V?2A|5i_o6YWQb0nOc|A{{<Q6?1Qx=~
z5>MX@of0-JK?X*GQM_Pz#qs+EkBUJ6)0N<KXIGbi+T`lP&1$QnI1&;~(Xap;#Ov*G
zKuK3q3osg7$OY~|De<`39|x!pT;t>-1lF4tC(0<L-bH|s1bQ#Ed0j0^H0(={q#r<@
z|3tS73NuCwlpGlkAodqGPK18?Mq&e03bpeKXpmI!OMUTZg#cBN^hY2*H9u<K?h6f8
zTh67J@}m#u)L%x?YZ9glA+)k=)`i!G1N;4=$Xpz2&p76n)hBIj@zNj7fmuUGzTS7Z
z-0q6|hHyHI2uj`=2~7jC2m6@5{NPl*jbOHpl@vW>U`KH*xoF9W0C&iJs&9+vy!vw-
zaF)5EZkm+>k-DBy5ZAO=Z+0~a)0d`mACVO*?&l~x{=FDHY4aKIfe8iAXG<d`l`tJ@
z5`YiEx~Vj~=e1tAT?d|ZIvqrc6PUxD?b0*|wmSrLfwEKl?BcqDPmP2Z;n(*LA(+YQ
zc3sdwJrJ^4s0Z2?&z%jaz(V+UlpFblps;1j#&^9R@COn9&cyH44*`{DV;bo#P}+mE
zTUb&YGHA2gfOVR1f9VL?9qONWABsm9a?cc;kP&RII8D`91G{uPmSLK4-rPBkm6-8t
zQ9oxFH1k&+)bXl*k(7QKHA6EbIUH9_{b=OE*^9xy`n7|#v<RGsG-Wza+k;e0-jOHX
zQIm9vSaV~C75nOyQEP824FdQ2JtIB>cg38sRZ@EmcGm0Hh4QgA<LqTu2xBh`By&Do
z%ycE7CFkHTX7c6|r+qM3EB~;&5q}Vk?<l@EK`Bger?>Vci9_djyl-xk(z7yl3KHnJ
z1i{T7Fpj2de8p6hCFj0uUrpN)7l?4s);2-uzoQy-d)DNo4jdf<ChQp)gnv#jj_#x?
z*{Ol4l+?<6>ho<yWUN-N^uMK1hZNHVS%T;F0exygRq_xO`YsUfCD+PD8rF)W?-46H
z1H@X)W`4Hfzs<(e1Y@_w__1Abb}*gs-oF3QO^|#eG%-s<bJO*6uxX>c@t+%KMZsc{
zfR}itMh$+oNcxUM#Ly2!_ditieWQxV1v+d8Nb0+X{p0J}%+0bXdYus3QFWfSU0=<{
zdKD)Qg*&MG8iA})0`uz_l584&DpK*S9r}`IK1<p|rLQQ0qcvVkkp>V(pn6d_hJ0kQ
z`hnf(Ddo~5O{{^DakzBz84W_`f1k%0AxWB;E~=xj7<{Wt4<Q>OeKYACt+d&&88fiV
zLoDf!DV{OI<R8&s7DndZeCKOvWtXuA@9Maj4R1YN>^qH}X`tkE<#>2Em3YA_-?3-H
z#mig1i&}4YPmmD<Q@++k&=U<>t3c{UUIt|+BN#~jKxJsvc27tQ1H5`i*=I+P73L0k
z?yPA2JT`#L_@xeKWmAi`n!Aj=3*II=x%uiA-;i7tT9NtZ4cMM{cR6q_*_K8`YH<r!
zmh{jy82zphm(Jhlt1s>K@?Ot+kjFR$J3~X@T^H8BwxTn3@AjIk<8dG{{cXvf5?^nY
z?P#{+@iXc(stah?`%f};#-gHdlWR8!<P6pufAs%832D`ZG&1y(?cLyH&!H<gF!&0X
z7Ac8X1WPQ{Q)PvJV-NULh87>TDT(-ih@Zv@{HYQr0+r^{l5?BJ06NK+s_>iZ;-kXB
zw&Qj$&7Ax`rJn)?vcFc8f;f8xB2Anxx1ChOJJu~63H;fmDp$ykkrIMxQlDBS2fA^^
zP9RxTO4Qg;YF9EZ>!`4f`KIaYhi~7ggv>3guvi~$GMS{hr2_F!)TV9)-Q<F{X-MIV
zB>NNe8q;i)w7A++X1=LL)?4S+47uj~F=6)YWdy&|yDn8&-_t@P<bPP+cmJ{ew~wwx
z%I?W!>&0ml4B4|69rg7@?J$IHly^|@(qk^`qqW>c8O-6?hah5Wz5``jPCH%w3Z%j2
zODM$X=aGV#MKG}WWD@7QoqL0Z6cO>1jPu|ofH(N^nd*#5+`(xTyw+{4FZ|v1r;lNp
zbir5>yC9i1*yqW!X?$B`4^lvmemvGfmZE48vBf}J*c&>`89Bwr17oGLl63Ob#o=TX
z*J?}*rPn%jvZ5SuI!m|nO_7(6j*9OvoTTTw|7`k!`2Ju2L9^3{{D#T5Z!1hzEi@*@
zp8f~U2CdriqL*Q6Fzef)DB{Nh*jdpeuk_<KQCe7zN@qu%JyIwOYd&RMe*EZW$j|nZ
zpYcI-=0E7WOL5U%<j3|i^f>(c34fO25;F++DPp$80yWKT)9LWBC@1Daxu5Kwxnj@G
z*uoq8emju~=YyvartJVAw66?vVpJPvCk{QUg=+{&RTcNDZ}WkZoOSrFpItwk;{<@x
zEO>vt!T#k&@Qn87AQ6tBnIhWM+z}{n(rYZvu&*b?Icr~6cL06iOLc=be4lioDt`<U
z*Kou=(Okdd;lkpO!Jwd|Oj-rSe9*Qtw`&?U0{fZUN5}c~!ObcZ;ZXTV=VE@1l{@Cw
z(AP=3NjnGv??5V&`9cmh?2Z!y5TN<U<1GKQ`I-$oJ2dOa=jCt}_)`C!t%k0UDto!n
z>+|H%@yZ1t*cWBq50{|+Oz)BEOL6-|a5%9Ir}wjoF+%>OUKrCAiB+c^UiNs-+@}N9
z?Ifg1*U`qNQM$kSp1+6_N}RC&qRq81zLAT4x@b0ThX`x`)5nH=9(fB-78ypBR=2%~
zGST9;j;9*-Z&iEFm0V!5U@mn}(<ARP$Ox7W-?puXZ-LO6KZxJIIqI&q4+RqL7g``9
zs7W{(L@67|OVqpZlUn?4;)QsID3kuM8xYb!d$a3xZb4hW6QMF=0K-`;$w?2fa-fmd
zeoHTh)<qC^Y`2Mx2!_gAdf0!-8t*by5)pICH*u&l7fTifSE--C`Ai3mG<HdO(dW}L
z!9+u=)Lr+NQTW2;=vb}SDdYzEGvmOWn($=g&*-k9bkZjp>a9FkE4z3F+GjYnY`wd*
z&CVY$c74o#9Eo97qyt$U#1-y4zEup|1`rmfK)uK)l6s29jicWy>ecqrHRiKn$qJpj
zKS#A2j*0$}^+x?clKzwRs$Bct8SDEMV+GkDOF(V6(VA8Aifajc8QYn&mzn}W@u4!f
zo|I&rBX4o%<a*yNNA4jviOV#nPjid4XtM(EXZm}t2*mPup|H^{v%c1EunnU7dy27>
z9v&UXcNLkKA-zl^vA_d1*USPu49_w2s`cMh)3~l8SrT=-bK7L*hMC2w-cW@;B>jKz
z6p{EtWWgTQX=wL+G;J56n4o}?7267DAsUe`&}lY5g@2T9(T0f@EbR?n`-c4@d;8Y-
zL|*+s^8Xvc^1eG5m19{45fzHw?#jR15aOkW5dr4B_M8Msgm)C2KF>hNl`zE0v#RWR
zq!)#@h5$Sb_k3j&3Yv)emO!R;i$54RNd1L4@CH&cWJF(MnU8$Hx^N|=$@ad|iqG3h
z>~cFsw`+vbI+OcTlk>!^YR=S52QJJfTCL}WyUB|@|KwgjQmkdiAcn2U4a_(S$@D7I
zsgc>Vg*^m}vT<Suwk>3(sC{$A0wPxwkDeB!`AOD<Z5HXdG80p0HFe)Kn0|p))7$h|
z9b@{ygpyExeN3*O=hL3Vc?S>a$wU~h-+X^Y+F{F(hg1&o*0?}cBl+31F?~u4(x<mS
zfm8Ynm3gGPB)LpwLlt13RUhC1Unau+F8n(_J?~`F>mb&oGCQ(+i(8{p<J=Qprf|vs
zR-M9N5%&)g<E`&`l`r_aQZezhfzpf`z_wmTQU`$fLFst$POXj;%=5Lu>P;@X@j1}j
z$}M|aT%J~~<eU$j@*|bE-6+U=J4!?ufXc^r`(o<{`xZ3JCy1s;Ij4;doc@O<l>Owl
zl<m+LoSN7g5PaHYn^x6U3M{j3np{1q-cXxS@z{{FxhGZ%MV>xw{w-Rz%x3<n)<g>3
zW1k1u(CR0P64S57D{b<kzVH{owRS_Ol)d^fI9%l0Wc3#i0j#ybd18P8w9{&79C8bq
z04mEMJ7SLGwP>$Ow7=k5<l3<l`^%d#4`3hl+h!dqCf3#AH~O=ifVlPiWKRF`CA>+j
zriZ`7A~u(b;;>X+{r&}7z6qgYh;<HWps|IK7(-NBJkB+<&DuLWA8kF1F*nMZc1_eq
zEhAJJ{8z+q=T<{e9Oyuqi$_=h2?>@sW|gFoVI_(gACjn*p>Fn7L|N0b0>>P(V)q?p
z+x(;)g=uJ4jhuYWuk&Uym^AB~Fx)XOaDor(^9V$~_=fcmS>=tY(mALgMq;q|_cfDe
z1>d4yva_&aDq3A}!ARZk#IQ4Q*jF*}J3JxKjcB0-LM{FvW#2eXL`wlJQH~m#i?rEM
z+#x$>t+FY@LWe1gOqjstEJkYmb6f5hz;Z4l1Dpg;qE+nQ$0`M0kd+`zt>P*3;^{I*
z>!$6#k6A=JL`)i87A9?bp;KMmK;sKAObJC(mZcXY>wUH&E@!mJgd25OPPt|U9YhSn
zTmWO37K{s8PbfqkZ(HxEIN=xpw2-7zGT+>Q9t~_n6V6^xzt`|*@aktW_P+e_f2UV8
zWU2NAfiwE&Wm&&JNY{T9x~d&%r>2#d*GH%00#La*;mY3+!#AWA;J5U71;WzlBTVlf
z!CSN{&R7d=y(z${^uc6cg!hB?Ou`e7QIXeK2G%nT$YU5W>nj08@?1U`*2sg0aZ4j3
zpD-ugl0=HD7UU8k{zW6T(}43bzw_zX;yE@ZzAv$J$Rd~YQH#u0Go3=)j)pQh5wU3r
zp?B~J{5S;jS8RU9n}jcH!?t*=Y0IySYNLAS>bq!HI4t-&Om{IWaes@%Z}u#l<p(nG
zA1Ao|u08*~@+3+CxnY5mFwwDTqWnBoXCSx}@dO%c!M>{Z1pwhf%aQ9JwZ+B@+Ky_B
zYR~FVv7X_yRa75kweSOU5P)+~PM=C~+E=<Mj-wQnHaf&QbJC7E3T9a)62oM@ZpjhE
zTJ>ifX=)hYAn<py_IrqwiJqo?NF(g{Rew*bM=&DB^KF5%l%AV1TcCDA|GC?$=S?av
z56yGb+3f7mswK3Mllr}UGd`JQthR-=@@ry41Ho4o4O209Ia7SIPg8uu|NF9$C<$W6
zuP=84kI}t~nTj4PQ$`n(1eTomIqnO3Lqv-4W&|jmUlR7RQ@7K?+q*3`0H!j1(|z+A
z^^N;2riB{ge8we1t3^h-0C)DFXAk^9khK~z_zy}=gVYn{GAC}6)kKxN`A4$nV~^m9
zj2gn1z$0L~Wtde>K>=7kUb3^=NTL(FPHcxad_v04sIlJ<Q`G*SbLr?AxFi(Je|;I=
zTUx#I5X~m&zaRCt%2VIJs*qv?=31;8gbzE=sC@vZ`VaQ@LScCC{Ih=pnfs4-hS0A`
z7uqFuhtoq&LBGwF&Lo0heFDi1)7O0dATx&3CZp3QcvU93vbDHmVcFaA>6VLpPt+yl
z?O#Z}f|dE4WM2?l@7RaPY<bW@6>=6^ufwe$;W&YtW>Pn4x!?wCqC8K+qeSJMT)pPh
z4MjIxvQ4<AlAgp5XQV6%$U$D)Kg1yv^7UN@*|*mJr2IJm`^yrNmVBIyn%|ZhTB(OW
z0XxZAqR6B_%M$Pzmx9v>fmam%kHjdH=?8M~Uv~rkpA7qlbILJ+<Y;IDZBvx86shr_
zImY9fdXSY#85hL+3|g%{#mdJ{%nkmEQLm;xS)HkRBIE=CFO;PD+l7@(Id9A#8J#yh
zWyMd!KL?+kI5R;n=N5b5tD0iD1To-zlKZKh_NC>?ef^id0x52_f*JfQ6YT(Dft^o0
zs9ZHnky;KX4aHAN%h$g4Ulbqy`-7L^4^TAS9C_x3W?S4%tji$Jp#>~VnC;FG97wd~
zj4UHcY)Kz819oibQqDl5@2VGnRoY@`8=>1dtULQCZ!FhYo{KX4YJhZFy&zpR`bf98
z?rx=o-E6rp3VJ;69W8d6H6$BJXz-rs3e2J)X`E1VpK+-y7s-`ge>vxFR=ZC90WF>d
zp@IwW>C0QoSBXU0Ps37RsIntUVVNonE;Yh%N^)!IuG8A@P$%l-)#_@t&gR)|_)i_{
z_6Pa<9mKa^S;3NPdFImn^PQ6P6QUj@UO(4<sK%7CiphM1QrcpeskgGrK{L@@w6(wo
z?MEh_0HeKM;7yjNT#`q7#4c6iD5h1I^2ePtf2A*IPZ1!nQU;>~K4LU+i91tEC{pm#
z=5#s5kk-^`&?o5pBD_Y+7tz>|U6+@nO=)Cx%EQjG(_>cQ{gr9`c8%K2O~pJvza!yi
zEH(wUAo6lN4DxB3`#)<=5B1|->xp91J<O;6N^!oaZwdtA2MY0D8TvodGG+B0)kz_!
zhJFuFRnjRE8<p`ulN2hJ89c@?fQ34S5Uf<vF?n!TC3X(}sO2XIl;4KZZu#-enuZDe
zaJ;)z>4kh{|ISzNjhR|i6Y`aDTg!MLL!p2>8XAWsF32Q`&n^-)XQxh;gA@QqvDF!W
z-J<VH_nS0t&&PDl1bxK~H>AC*v%%ERR^coPmsg`hAoP4$A-?J!m5TTb!B4=&e0|mw
z9x0F|2%dbZRU=IKO<_ZJd%Dz#wSIv|Jj#gYB(%%jplQ9Nlx8xbgNrxfZp5#lbsftY
z^H1xFXPnb7#z+$)Hchqm{D@kB=Qxr@*7NJSbInqpE||u{CMw9SxzcVfaFisAOFHAw
zuDyG-t)dQ+%(lYu3y`^_Yk;h%lM&cs^f5h5QANv8<TKs}7U4!;Bgp(aSX=e}NXv)n
z1g<kBv`W48Lok6%rJ~FX2uvUrF~X>#_X1+hn%{9&*J|^agOq5i7TTrZ4k1A*;AqLH
zk(k9WWF+!tl`JTbVUJf~Okel-OA&Bij?RQPSC4lnru+(YGuQY50+&l6FS@G<xRSRg
zUn|D)Lg{Xb=7(M`9Uhs)VBe*n+lB17LGUe72^;|JG!S*e@VczEdm1;&IQ)X-`-@P)
z-2U4za$3K1;jnf-JvGpWbqj?*eYzj1K&aOr6#hGtztuI$tEA7byb+F)8e^qd%3u9k
zuCc09NCcgwaKFamgg?EF8EjrYrH^0v@p27WFU@j&r+0Vk-|Z~PEn8ekNS*tyD2+5*
z5Pr`Kaf7Yr<EJqf^@3|H=9sQfT-RA~rI{1rX=YsaV+OZ4#f}PjYv|R05hC@S%!wfg
zm>0dM8-y{5sPmF^F#}9r5Vb=Zxke??n3hyb?eq`F74izCWkwRdr8Qh)dN8Peq&4*(
zE3I4KP^1-&?}FFo4@&$U!nd>*(SiOdx!%Bw&7!bhGWkBMo!u}8Wml(+BCqX7POUFw
zjsXWAChn|-HDIW+GtIzQfU$wU71`r@2dF73C@GyvlAgU@o2Uxfz~eHHa%UA8_H(A>
zIR$)Bzh}}X?BE3gG!l(FN#fC($icnVe7$+)O#fP$Cq%eZz6zI4roE4Naj`8evz_@c
z#ef=M-OUR_14SX)iBe4U(nvPUX^QBC|L3w^9pMWfht{*k{iX#T;fde7(-c2Y%5OOO
z!TkSR*5ARg|64BC<m!peq}(lketM<%-s{V&7_j}G{Jrnl;><I16C1aDtKQ#}1IZg2
z>QpI?2U1eD#P#UfR+(lO8gAb~d)|6&a8Ca??iwbxD&iLR;x?2yFgi;FSeR0TeRH|Y
zG4BjTew7qKA1R>zqSiSA`>pPU&tggTcfo9&vo|?1I1$L<jyzeWUz0)p>0bFK#qX20
z^t_Ll<~^H9b8+WjAw0XtxG~>t>NK@qmYE*itdEVj=uU9l6X7I%)dlhhexOqS9RkJ*
z76M{(Y|4>7XJh+#;~b#PcxFc1TjCESN%^x61*Cql<8A7W9=&Y0lRB|zr?ZwbD+ub5
zwN(#Vm(7Av4Em1QPU4Wa={45l4DZX8%_*Ixl9jJ_h~cxwKT|chinxtA#4VsTxLB5J
z_oTPt-aep^EQJY#z_u2R3^JuuQ`Bhuz~g?s_X{5z!kRs4BZc#;3yVf9SU@pBd@D;a
zCd~GvLfQ3Zarv<}5qKGG-s=+7u)R$g^|0SmQjIG!Jf+ssPK@6J_-d2!kL@B}*SJ)L
zZFy%b=+{lQ9Isb&lrNL!#DcU`K>qJTuj5APN|Gx_jbtT9NgViP%{SjNy^B~e@^_pj
z5#h4>PgT^fjri0XXRZctpESe%X$a)Ai=1Gt9L+^MA<yWTeHm6;hxs=|$~et}ak4V#
z$4EPGbamn)rRLcAJ`{Rk&ok019CM7ujlUqrDNuGAw8FhZa)+2bC2kzx_7N*giL7BX
z*&2(V<S2Bs+vYhx5`Q5-Q(u*j!2U?+B$ThtjO3nL#oNp{??MSe1D?d$a1KW{{F{CP
zarGG0ML(R{4$mC=^Vn~C?lQ5j$&5Fr_h{gE(|n4&V+ys;g8%-Jpq#MFlayoIO)3WF
z@|%B!))bx|20KfJmu26PZ$;app{k}vZkd8gJe+=5X*bBtAX2!6^K`a&@EANO(6;vx
zgG_oW$UWPk(1Do%{vUqhwI7vypx9Z4<Tg4SLU&Vdoq!pNOx%XA8Pdz~-WaK7VDY9o
z+kR&Y*I!s1Z||$AC{M{O+xi<Q=`{D?<?f7dw(|Z6R%e(>s&oZQP~My$Mn%4jq^EEQ
zj_S19>aa6n)THw>-;&6jsfLaJyueKbC!+`TX3hmQ(|l$^|1b8qAQaorfZ7v4kQ<`Y
zzNo<|O**`wJ;%p#lBf|oCpXH?5~Lcc^`D>_0$0A}frc_gI2iSWZ0}x=HB@c+$&2~B
zY>aOCo!G<=x+LY}xpuMGop!Q#^bhoxVsIa^m{a_8aDHGqwmUS3Gw7Lq!mKB9&->O9
z9t*#h$Ud{qlvMb@jxzurG895j8QoO|yTVx<w5bi)ZV6sMnmOY{;p+7>WMVYBXk>F9
zkgIW`KSexo9Wrp5)m_FPl3TB74S^wMMIw+WmrLp*tZZ`8Y42tgb0@&p8=K#bX1Ql5
zZx6+Z^V5bdt3Q>3zf*<Op-kePYisx}TB4XU%s|Q1FEC(QFuAubG^cvab5ifcSyZJr
zh%JMp?#mqfC>ZDJo3{asPd=;7PmhhazBYvZ6fk(}Ya#Y-$v%)$d(<o=Rf=u_lOsCI
zJv5Sz_lD(a;PRG-4puP>3yX@J*m3bLnoOBIgENwhwG-?^dAb)bS9%i8-mp}E?^{SK
zU(elIvCagu35vJZ&0!FVmCE`~$Nq)=u_CHMMS9~X;|KgiW{`)8!&4XO6YecH(!MSO
zb6p=+gYNZZy+^O)=o?}$Z;ZS|ZPOEAz81Hr+DXEll{EgB8PCZ(mC3~7NZlWz$*nZ)
zR?u2_MlC00kkH3UQeIOAj8MmuD(g)@*DuuL%Z`p*U^jWf>6QMlUWs^QHmr|VosEab
z^ALrUm%Td8-)bk48>tLUlcqPtO>Z3gDgshU>a!mYl8=Af^uYJ1+=db@hf|O!0s5cP
z0tzChO>71cqY8e_T5410^!K%f%eJ>o8=m{1Ki4MU@A<$XHUuOeXlML?Y`tT9U|X;*
z8g|@q$F^<Twr$(CZ9D1MR>!t&+dk=Dd!Ktg+@DbM8Dq?<dS%28T>>NJ+Me((AAO?b
zqXc`xRb)kviTvKIhO{Z{$tZHOB-gEyV0RoNI2T}*D+A+BitG5R5=AA2{c^Vsp<5vU
z64Ar<{&(sNXqG1yN}C`j(i^bM$rMMBSnUmq$_(9ys`xGmiHr_(Y;SZ(6cUQk^hITL
zP|K~NvQ#C7H=j)HL`u08K0*$Bi3lUo=z?6?>I8<#rLrw&GWf&Cr;PaFs2K@tKG!f@
z39I;C{9^S|Q_kdM-kM`d0Zh~Z*wNK6m{5AyT=$Ks*;g_T8F}Xll{@!En_Y5x(pS?D
z4u?R9w({`AdO&>awf%CkUGUaB%C6<qxc$`r2Q^EQ!MBQRXt_sh%tl@?fpe{>=&cNA
zes+Dp%&{oL_lurA=h5)cDcpgH%E)qc1Weew)kN3V+wu`Y`bSIsHbbMlLIK#ECHd!4
zmM;W$r=9-y#n#m22i<HuWI%sPb<>v;y_R&x@r0uBlmMGkv5`|J-zJgt&dieGH}i=T
zGanh7P-qLww*J(;ItD?}j-`o8F5{mnm0g^_JkRz80j<gB(GOMU2r+(KYBJSFw8Cg^
z3Y?k)X7c_ise+v7o<P<F-p{o^-ImM>uNe-nBbd;bxs`*0i)0b@Py~jge37#jJJY)2
z-aEf=NbEzTaj;AuBt=|b@7S^Qg&xd<UT`IcoW#{|I(A<!F4U;m?}|mX#;e|RGMPG1
z5^j*&(h*3JqGBm@!|K0}Jf8%C`ncuh#tycR+^s7B-vm`Vxs_mFaArZ`)qR>junBkb
zJqg<emgr7i{$Zh0lY3|MG)VTS6{7zos3)^mVA#!&9b{{DF036wGp42}_U7W!$VT@@
zp>}P&x2T^H7_MTr0YlG58uK%QG>yfO1_|NAvrHdjS~cdijAhq-i1l;C|8~5gjlfk-
zh5t)_8F8&D2aI7qCDSEi9}D)q5C4i9H^dd{s5*z~99=OUZ9jU$l_vFt$mfKnM7<mf
z@vaXtt#dZ$bah-$hi8UO-A(EeqVjl!SEYx964E_~66-6^Zfk!1kD#u|A6mM`)GfRW
zI1qdCviSszc$XH<cS5FYt@Jowkd$zDc^?nIFES!G`f$g%fepPjpOYTp$KvYN3bJ`D
z45(l3rI_azJ>JBtiMz1pr`hvKO;h4?23Mb>6}714&7>mRQZkIG9^M<(>0E}9FndWb
zMlugX)p18>`NAG5&KMoDF}06*QlH&%#Pr(~{m5v;UG))VT6U9h+VX}ZDUX~{mLueG
zEc@mVOeawe9o(_Tem|epM4P)dm)b<^U{9`*2G~2Kd)%U2qFdVJlpO9)NkS+Wn^&xZ
z+3^6@v3+C}sf-J6CLR{i>DFi`mb9xyB=E<Nbet_@-$n}>5M@vHz>T$WA3ZTF?t~rt
zd;OC&LOi!Vp5J-9GrkO6u)1;F5Wt)+R2&O;Y=7k0Je+h=zl*<q?uvK^L5PSg!kBPV
zWKFTym_?n*_THc9G7^7hW?@YEtcBNU@BS9;RRw#eU9nZgx_6zwk;-g;rza>}UIc%p
z;rvMcl5TzQqs1i<|1Ps${*o+8TDKl5&C`8iDx8CE+AwjF=Y1-(XxWG$Vv@nXr}{Uh
zVwY)p7p_j!$ByhgSi>iNLs<boqLM;~V~`+$CFH}d^2E+}1`As<?~Dy=hk_9>7=cl*
zI?>wHV{xJ}_OoD2k9+*mO=HlH!RDYYrZ@#+kT+Ujsusdgd*E1}E>x0AgI*~7T2GlJ
zrvxuaY-muSB$-#rMR)3Z%R>JmW|9;V><*EnFpa&oyynYT6^_6wJGgJgrC;nWMzJ-z
znnOTic7Tx1Su%AShhfbVwAcP%Ka!wa$eXJ=hrQp0A#p<TFmuqeXHBR<Sh@jsn%%5r
zJKxc?I{$ht?mv^++V7PKlC2RQ0D$oWtq*_skjv!NO^rBFY*;^5mJr{P<_u0Wxf|61
z`M1}#?l?Qf&HYS;_=sNndl<wgbhs9HyqSb*>+dk`{QXx?QEFOLe~K4w+3L6|foG~<
zFqSJU#3|v=(O<7hSCOXy?C;>r8dvJkZ+B?SCDIyt<^dvuY$Zddr{1a6i(oR$PgHzN
zbb2lI-j;G{9OOi$ls-tTgaNB1xwaU->&HUEDWM)E-VPBTuZ-h37@UgyM03&D7fL?{
zcv43$CW6RL+Y{r_#%scFTBi{(P%ZtcAn>fx?_@9pW9W1|p%O{lWj@c0s=)2_>GYQr
z$Si=4i#}*T_u6cav|*A#Mvbh7Vxa1DAX+|Qfz8myt_G$O*YdFP-U-9GXAi$nWp_<|
z2ismJz<;qGDxuTo6WXM$4pdB#@sYX>4X1w{ICEND_+u#V(`a=yZ!!7mX5}t!`0Ac5
zSLLI^_1F_a7{Iq{a~j#695Zu|uf@L`(?*@Zys)g6y}|)L=~OHyG5CWw?!a=;)Ji9l
z+_O^7^%)(>HMYs7=oSLvsDCmdd<ukcg5qO1<WrX5p{Gr~a1JfCtxHx(qn?1OEvO0f
z-<FwS82@Qsvz+W&^oR@Q6rg*Qc`pos?CCGz67B%Q!apOUU^wB<2twbQVx?^O_{F6x
z{&G9z-TIKU%)A^|XsHEPb1m$|f^@{-cQabLlV<C+inMGfQT)3ZQXWH*jGngocdI4C
z>^%uo?_!rkRPE0L3iei&fXcb-52dsgF!2i`y;Ng8QKAGS&N<7DX<2|v?pW24JV*ne
zZ<2qXKd{)pp>7G-UG1s1F$RtCHeW;+%s-B~<S6s;wcFv3wU{0is0Yx|yI(q%S5v9U
z*{#c|boOz2z#KBTu?WDQo4_u4-$<%fo8#;kX%xN8EONT>2-9ddBNt*llStM-cn=@u
ziCvT~sZtvUAKelRzOwD{PZLthSZM4fK1mNHVx45LAJxQngGnANno&yo--&OTD+fJ3
zwRWiL*h1ete*~s7d%8d(!6Y-Nt_I2fmS8w=2W*q<JIzP`C}I=-z*^r`43?G_n+rck
z3@ax2bw$?Ve=!U>ep8F^44b;65uzbN_Nd6r<abjvfIn@6f#wIpY@^R4XhJmryo&G$
zw3ZN8fbUCbS$;^zAOZ3|ED_<$*c<D%dbsLN)<8qQpJ6{w<BnK~`Tf*>a|4D9#8{Op
z*gkufzl0x%)5zKLSPZ}Ga}E+|r*e2CZOQ;jS(5r~dR9*>gDi(T{ALGw9l*yxvOSB~
z@^$0mon|uJx*1@#ft?1=TA$5#h1{R_l1Vy45Bm)ZzJKq;_}2Y^&A*56|7$gEMDh*S
zqxEAwKR;z-{C2;$p#tMBZ0*`=OZu8n5>>R`tIlobje?gkWvqc9tA&oOEt6|-U{LzS
z=CBed8P3`DdEOb6pJ1vA!t6ypJT#7aB+$WDcRFv~T@ZLQ?HUk~e+>!Xl%=j$@n@o*
zQfYonyLbsE%y_k3j`lY)_s&DG6ANd=L;VYCX=X1gar4B)U}tLH^ey^a-`Lj%a>GJv
zCrI4H>E<c~FfJxcL9*uZmNwiy6BBsrszu41X7@R=2%L$FmY+cSyPf2xR+bzw)J-Dv
zdi)Z0Qy9O5;&oI=lg|a9zdbeCNAYVWV<p3iB|H#owM+1y;e;y*-gk+hR(}`hPp~b#
zS3hAm?<&{US0TSja{A#=i)SAQfUl=O;ahW*yUs=Unr2ihDYJP}^i&HKm`c3&ae5lk
zEJ!8W{B?L=f~a8SBcKQI02<1`upk{!{qATLDXGZV_ds!rsTfKemzm`hIG?s|Eif&I
z=0j8@wKHUlM+pJ`yO7?`3%nHTP^czaR$8wmxD>1`w@t4+(_X`ZE0o!21~{0{y&%Da
z+;8#|6#{Z+9kSroF_|U>3rUPwe{AUq%Z@H~&-2L=2Ca1)*-+PCr@3)|V7u?*`j<zB
zaEjq3Vv2RVI#}2D(Xg*GlZrjBqbtSk&nR{8caoGJy^$P(bN_?ds(pe#vdC!ENCMNd
zpif7UbdiDY*`*SuN>IGiul2*m+ov>glzGo8GpEs3kzZx>37d!;BoAC}gK${zS~u7`
zeXbtL1)y}#KqI6^*=uDTe<T(7WZ5rAqEef9o+-~_=I8uVIA8ZI`OB9e`)pkhO?BH(
zaaBL7?K&Id$l82)hr#&$;r5vI8D_$DQ2)0@55byNUvSiaTd#h9;GpkvF7&OsLc9<`
zelB33Or;viDi1#JkvzQHNkLlIi*<JxKPH+YRJYDB1M8xyRzG+vF6$3V#um&$=&wAc
z)I50PP6G^4v~!}NtnL_*5QsBzAg%K&1M1b8&{tiq=~*TE*kv2@cD-}H><K&xdo|rD
z4d=I)6ou{7-Y)$SLmG%blIr(d(^#~cK<`?8HXOWwyBhA-6g^tet>NnZfn)4bpP%y=
z4~tEj6u<q8hq=K(!;}ez-)jtf<6+;6FTQ?1;E4Y&-Om4_73gdQw`7S}Un85{#@^Nw
zB=MwHp1&{EcebN7RT6;Te$tu6<_r}G3eYHs6DvbWQMEyGp$7Ew2>6h0vJw#c>MPaF
zI7mIFL+UKFIdtkGeK5;v>6xkXI+noE0;Fxds=rAbUhb2FM@V!U`40!`00-m=wH2uE
z@36c&sYnwV?mK(thOwLrgvJ+-kf-*x)k~sT{n)@u#|bnzr)dohIl+fKen8=OQrkjW
zu_Mq+N&leh%+~&#Ce8b3`XTm)5Dmhc&!^}V10U?qX#}xE+9NqfDn)$IVSU@v(iW8h
zj2Idsz=_z$RqgLboGupv*o;&|43JR+N$n}>jM4kBhaf~?T&(J*MJv}tLU@p$7m#Bl
zX4<P`)a@D40`dbR5C$i-ZHkbO(XBd30bo?<q%Gt(u@XqceN+*Ak=ao4&$SYzD7MG-
z{OQHKjSd(SR`_HX!E@$!h5a`{IDT<`-<DhKkq>QQbNFDr<J;Z#ZAiy>3Tp43&+?!k
z=g69wup<g{pA+Yk!Y0Q|KVX!O6DR!0wWv_sU_$L*n5R@M3)~@t7Qcor=+%Deg$S>k
z+OVpX{$+;%r~Uh*t(3n;e8=VdAk^>JAKw+%ToE|4*h1=#MM%XEVqFrkHzuO)__g^6
zkpp_5y6qtBBBRG{*C5Se?Ufs#MFlAPDuC`Bfvq>1gRr;982bWxj!eQEZzf4cUIx<E
zu&rRR>qe60+Q;fFq82|*`$NWTbF&mH&L`Ck(_}5!m_~U@of#1UhHRU>jK{PzNygLH
z@e?u3cAoEw@v&Mcvck`J7O5}?$@d9<#B)H`H1Ac}vh=ar;1qK@Miv!q^xw9UU*8Y7
z;@^q9`O6OZhtQ(+V}m4{_N0`L#7xyu6*?tBg>6{9atai`p4l)e!P8(V2Y2A5rp~V<
z1HB15Z-?(v@|2oIvDA7^dkVMugO8JOI(ILKR^0y9G;*s#k&LE!Ey&Zpif{8?*UIca
zus-2U*xf0mzq_q2>P+_eFq818w)LB3MdB-{mu`6AD)4Y9$cZUPp<svy10bGxHZI3G
znp=izo^n9-O9;aS6R=)-B@2`8=bu|U1qWY@xaMj@H1FoM(C!_Z`*0EvyFi(!R-qvg
z#4gnN_!$7@=@@|07SC;$Uce+50m~uAHk3?AsH>mgy;jIc(7(0X>q5OP5M!%8m{;7r
zw6BtswyE_Y8}$>o?uhBJoDk^@n^LQ9aT<h6uyoJf5=zWl4%6NVRYG&r_l}2jY_fJN
zd_)73G$x(dW==c+@FzG*O5quBz=V*t{!(tqVy|p>x$Uf0B$smm5p6BD9xY&>I%G?R
z=~zKrnxwiYE}6m0WG%z~JHkv6Rbr4QsI_Pb=f|#XgAO9Sr2}bhFva`CPful3W7MDL
zrn{(|Rn5}!KN`0xfCX-;SJ%O<7=&08Nf{5gB6~|{5H(}xhOnDAHem?rOak678_U$U
z_qX~b9$?g-0473|K$to9Jfo^pZK<%KvE8*}S6ULg-?8_IX0bHaD(3V#dv2A+z*uq`
zGu}X5f^*+G>+i~|bhShrF26or15VFrU?}hEA1eR2ri$*D!beHAH*(S2b}Q>u@H30^
zG^a}0>~g;wkOmw>cRz0(Qd6-qUFnj9KB()2mLt9w@S*zySANHN)TvVLS4GdXfKEr=
zKR|2>m-8m@ewM|=cpQjo23^uF`q4Z$Z9I31sA_gMDd{Pm%7;=*-AuU;XN5Nmou=ST
z&x7kmJ65(#@ElH<E6i8`uKxmO`w_BCBn&tqbn7~5hA&3L7?siZVpa^bF18M%2T#J`
zoeGI?{&r{P`DnM;8B1M{ewyJ(N-L$<_ZspTMW}NE-ge$3%}xZp^tK?mN(`ofkcqo(
z6HQ0mH@{>6sg^4};~yvWQzb`^*j5qXfFP@!lhjO+_<h?cyDcOnAG0+CI)6bEUi~(t
zyH9;R&gbG?4*AesyA~9ndKKKSOwTb#XaNs@rX)f_QKaq2@%L*xFe$uZtoP^`O&=c*
zF#qRwssZn$KXC8&V?wga0Qe^~^2(X7qSbid?Z&wq1`BTrG!q7~lkiJG;bJ#}gb&yn
zu5Ik|>c@OdMqk3RS9An5Zm~4J19tfb^kElctF*Gc(nePue@)*XYPRS`<~N>fwQYn+
zyWJ18m+{f@iAqJ^ikV0jA~w*W1%y#Y^9-Z9;yZ@9k|V42mU_<S(78o75UXD5xWe%>
z^M+FOG82?)Gq5>v=#nsu@$8<9s#*R;0Fk&DSkbZTyZ9vRw71m%=`6=+R)7jywQ$Z5
z0l(2!BtPKE|9*0M|NEqT|Kx7ucux0-J21$Pm=pq3*+l50=kxRE&$t7y8`|R}pBjhx
zEL)pPXvw+4m=Ad+3yPEh0qtrO{IF>DGo;eas*+r;^6P{JL4W#D4X@FhiQdeDDY#mh
z*`t$>scT$qwPE_#VeKZBakVmYGg`zP=lp4yfI~50{i>VP8d|gOO6tSjsoOB34=WzR
zoKnJ6>_JH7lE$&sxMIwXg0>POY*yU=1LKxK3f*)*ha<U5yTE*LecV3tLo|pN`mQNx
zDKN6J?aIFv%V|?M?8;WLmfMdyYNvr(l!9cr+2+8;z2Iujs=F+-e28P-kH`$pTK-QP
zx-Wc&!(j~hH54ri)Cwwi<q63r7dy)It--yZQDN$ku+<F`)MYAW@UAvHNqPQ}>LC0K
zpMz=M`2>i1dW}Y<r?b_j{teVIGq#O6<k}TEl22VUkS>HanH8429P@P)1W^&oyyLMH
z^%eCo)7#~ezzho}(E(+*<8O^3+!uV2ZIA^7pNzV3;wvK$oL$U@S*<mSuj8#ZfZNC+
z?=Gxj(ve$~QLI?^Fw>0QUsw+p8uYn_T)b1C20IB?_eWNvTyC$SleoqTk||-W*#5ZQ
zpI%d_67$KfqjLIjquK+%+h{Ez?lefK+<yZ746>J>>quMTh%BD>EWygerWK*|$TWL}
z)iLImPUlKeruYwgUHGpfrN%|joQ3LXC@^HD&d_az^o`hZe_Q`z4ZoZ7vPOebn+<Kg
z&Evp@cH!=48}005L!ze+B=}qnwpyrNFqb_4-2ngenidxKeCASA4ObkfWXt@!q(6Sv
z+}W^_3@BxV;sB}gxvf-02A1R0es{#yq;cIPKs}rJ%_Mdm3`nFYtCj`eL%|&pOc-W~
z$*m<wXh$&Kr=kpuhi^>6w`(vyDTY|+a9D!I?*P>QHI%JrPB|CkKkRkLANb^77y1`_
zg@|&y!T2BSl`L#nz3PtZy@Kvd!BwzVxON(&fwn|GLK26aw`m58=k8$CNCDe9K0&{R
z<VAb;4J(5eQ-dS-<jhbPp@=2z-Dfp1SC0I5&jesBYWtjIp^(d3aeg(KWepXK2?84D
zT@kiA9BQ>C&H_RQpk1S49oe2%{X!fN0l-;C6h5xLR#=u&ZjK*EqjW1ISFBfRrw|7)
z@TZM+iP>LSL;EPhFH~BRn=tgy<p`i~#qUN`kj@YI>c8Lq-#g0c!s^<=<gGcg2@gGk
z_B{qRwRju-PQwopxnjQ6w!#=z<low#0f{)E3s2Q>Ovw=7RZi>|(#QnlqLKwnKATCs
zLt0ihF_EVF01}~H04?dxRw-bB)x!E1DBpL*FE&8}bj-QY9FLTPs2GXOWCSL_WCcs0
z!~UU>?eH!`EZ3_s{PWOx?|h}hHz=(lB8OQyl|1$y8{S3P;Bla({qDJ1`=np`kIP-)
zV|h2}&lXj}U-k(=p=Kl314uS|rlg3XVRYLah@&sf<1plgq%<sw450W^8TWnUribB3
z25foA`$a3TqVXY)>Fu`3ziD9?LvwuR<P*0y_vu$MSIQ0p=^ovz6EO&Uq<1N#Me9~T
za!L%KkF+GQGw#|jAzOESL591fdfvjK9YeKqy&E|8V)@(;n9Err%;+!=zV*gI>ppPE
z4^N(3R*o4Vu`j5{ix|5q>JT2kI95)tR|n@9CQ_!{%^;x3)9(j!2L%HV1qiWD*gGU>
z&Xmx}gR9eZ0?}3yikkC3*kJm}l2jpa3_qw{R|xkxmO%AOb51te^Rb^A07lV4?EEK2
z3q|5}HkpB`^g+_f9DSqC#-Z2Z$n=X*um<t*dAc`iXh_q)EQewEXJigXS&8V|U0h-G
zI4bc29{r{&LdJ<N3;~%sm*<rL=7&O*p?w+?4-+UtP*=(XR?an%BH<+><!%%(t?>OP
zF}fwq1`0n^aWfFo_TPW%Kd_h4DqZ$r{(yoJ13bMikf5eg1uLF+u7wgF*w36`$%v+V
zSK8YFW|y>unR@iDp6+#qO?}{>Rb^`C6~%=tFlK$ZJdM%IpV%TES^BnlN_c$}c1fSK
z0Wki3k}~-=&e`Il5h>}R$Ei~n>k4n*K*%#nFH6xHY)LyCtptQ4!1TUl$XaDVS3_;E
zT*@q0cnNM`fWFgFEzlMoI15vvsjx(@@6@MSWkW%?*`I;ulacjYt27E;wT%j=W{ox;
z<i-=V{gvOXo{A;Sf8PNo6<+YlyARW}OzPBa(g&wL>YHpScz~U^y>DMYJV0q-7~iAr
zI_Gr@MAcD)WYRkg6uSJ?ir1K;xC<mM8(*oP=>)skdE6t4RD%D_+Bi(Lx|3bYtO?Wo
z^V$NGps|{LlVVlLT`z8IL;I0OF2Nx*hrK#;;qq33NZ4#JicMm~_2zsd<C)>U{{<|T
zGl-q`HF#^8Ur#k-cn+_9g1xow4@-NH<T2tk(8$=jxNdb)x=;XCF}Cz&>=DReMbUw>
zuy(w^Ht!Qns0QCUIe9$8DugTVDPfT$RxXx_Pep<a>T9P1x>B_034Je7+PfzJUlp#H
z8)?;h)hxCB7W!bA`hZeUc||Pd6PS%g=8Zh~YZ3FXARQ%p$dnbs>eI_e7OdAl3(?om
z-;0HOfqUUwq%z_U{PAz<Sp~Gf<AYOr4yv~@f_`ue3%%Os3NY$91Xr#IcN=G=#N#(Z
zrJXBsy>YrLn&C@bz-Gg;!EC6clG~;LC9S>dER=tHDU@-J>tBuY?^uD)uq)f$B-<j%
zewlHReI$RJmPA3bX=EPW21ReSbsu+|MyB*4fbWI!?Myw*c{+PLrHYY%GT)z=qPn&c
zbM0BYWTt;xHayb^XF=>(UX`x>9((*<byuHWVLb;-P16yo6UXAqgYLOzR58*1jy-?H
zDjj|xaR2Wh{=NGudj8V#%(S_8(O3ZPl0Wn4TIWi5QywtuDM2Z82o}-?IppAF>nV!l
zM_YuE4z}NhwY-5q$Uzs(Q7b$VE8Etwf_fL`kL_gM^(UtaAYrJ^*VKDB984-M^6`Qd
zs;Z#KpzOO4_Jr8Q_^RM|$gZ66*<EkDM~rQ&qV9C`N{8MgsCZ6e63l|xo?oBtxTkca
zS*~y!H8_1~0?OxInEArKC9MT_;&#%)!=6b;uc^j-9Af`dBt<!aH?i++E=-E+15@sv
zU3}dnzsR7>b!ojt$POzs%8v8Vj#v2<to#d$7&wB-KtwcBR;RVIZgf5)Z##aP=_A9<
z2WGF!j-15$mnTN)QA=ss4Oj^>o{UDHC=5RPbkCu&zmF6C*Ao3^+;(o5Djt(-g4LuM
z+t5f6=KQ?N;2zFx;cw<C<_2|m-#};1=cWk}@E=HJq+N_&Vk3{TdDn{R$F(xrYJB5$
z%jYhQ>XI1WqySCz?xaWY+0-iCYsoprpJZm~0=&o8*{foC(elZe?i42PYT|vWIhPID
zr{fdoMD{Q>0HdEcVPsW7a2N2WO#Xj)Tp;lOj^fHdmr)_?T$9mz9A3mzux|$?62tDv
z>k2aUS)PTelbkjFSLvqUM3b>3_E2SHsrhHkyJM9eP3>Y(tDH#XkXy94`+|Jb1n&pu
z+l!l<Zp_8{uLg}|&4yY}d^|QK*py9D3ysEja^=b~Q)Ee{#zc}8vV&u=$}}VDQ;<8Q
zeL}czLnGXG61aJB<D1cC0|SD`XwWFLef87g`Bv2aK04QW8<JOIyNznIO{|Jf;-ehG
zZxh&m`{X%)5TfrAzW2#J{mlFb<S~sAu!#PP*QXLpeApP}hc*1cMpqL1vEmIZ0mU0f
zaNOytC_)CBXv-BN^=z<=*5?}1NODqOw1p|cFbx?KNijOf&G1l)_NE|wJVI)~A;lH3
z=R#YO?QuC-*Eu^8Mphy?jy6&3G!K64tx{Z}S8Y%nS-^Mr$IoUln2m0-j<E`HqPGme
z-yt{N^evBT+~v`7Z-sVJSTm9Lv?HQMr{XmrE@vsN=JkwOT~9lPNBEO&CV#~y(|_Fg
z46|Sqi8%j?P2&7O=>Ok)^&RW;-TOcIyf%T*YzBzT0Y1=pIgJQ6fo7=~3gSFhfIa-^
zpQ5-?D>!|Ij6-a_<QZ;i$YU+sD1d@NL3_RiB+Bq<b)x#g)&j|zY!c|C2yt_YgzYXq
zjU*0RX;ao&qdgrwr$77%Q;rvhPnI5ji`tR^k{v`rqv%x85vxmm6YhpHc9Gy=D0emf
zqbMNv7=6KX0=?P7RhPre<oP%7K75mhX1+7HPn8c(MHjbgy=Vvi*%l^odw4Dnb5RJ1
zM~M7j0HEa+(fsCV-3+<^Q?d4gNkGYw*E7%pAohkY1x4iP%=H%4*&`IIse~4Yxgvu)
zmf-^wT<2?Y=GyyVS#4(_C=l=g)>Jjks!pII<sFXt`ns4lP_d<B(7uQoo(epqKOwqj
z4KG|Osq5JQum6-O`?I^|r2mn8%&aHLAkfNY>KGm(d029w6nU$Xi)Yl5<Pjw<8>S}t
zq71BTZC0Ra7GAY3;mc)k+?-382MWKvMB=wB=BZ2CP^C*4MBITREZA+3;}?wNnY%93
zimtHCykE`$8J-4PyhoEzdZc)f$!Wp5&HP2ipLFE&<a3-3L0%Zsc**hl%u@%Rd+}>{
z>;Xv<1_OXOJr`cw_jyWeim|x<p8EwW24DLimPP%LA7iZ{=q;&oYwF{(eouSQTpss%
z%Zog@46diYATVTSzIqN7tK}hMx22Ds2wJ0hAwyKqTkZX($#K>YoN9OY5yNkF_(~0!
zC1=Ey4zlQtvwgV+&J@qD+bfWk4WcQ0*#}5~i2#%PQOhWlp1EV;Byo(+taS4uD{{Z1
zlpOoLE;&g;dJ?=<$Of8q@1PWV25e3jSUr{(ucnYdIm1Z{_%QrI*nFScRONAC7c2@p
zkH0!6x;@a<oCD}dd`VSBJb5-fxHp{CTYhJ`YC42EL|w4N#JNXHY4>EH$bM%7!~2hd
z=xnRpWcRLASb`})r+*N`GL)#b#u%Fac?KLj@bkb(RlrQh*-Le3pyTNxnXkeN@Hx&L
zi^xiHJcVj!%S`M&J&Sc2VT83q?s}HZa;8DY(%4m#wtdC7uMWg^hb9hu^wR~ziA;z%
z^{)}-L@m!J53bdy3}iu5dl7-OYG+h6P#ic7kcQH;!StZtPcnMmWFLhzzA`fV4B8|1
zzyBD^Fe~LVi{UYOojllNkCIsKQfdJo7bHE;VX2MOQ$!u{wEY~Bo6DSTz2Vzo2tzDd
zYDg0^zk`zcjvW2AZ~&3=eQxU7+;pjU+*j<O`_k_x)f#C>574>#6FdKTUBd)3-KSD}
z8$5g<8=q>|+SukLKR{i$cwFG83{jXd@n>9}e3f7%nnng;_XpRO(yH^cPi|OLdhY4e
zuTVQ#ddf{p^UeELdj&0oFh};M@SleQCa(ey8v2qie7ea!0XClQ*#=lgoMZRExsz-B
zY$-4~1w$AsOQ_9KBBkiYMdn@`W2Qq2=wA59XyeuYccMW@CGw9MVDWP534^TsetAg!
zKotIadH%meX7AqN^M#L)2nn;@<HWBm6lY0Zr`tXv%Faaqey6~|Zlh_tI%{`99yp6-
z2<$AR!?sV#8g3^^OxT*2gz}Yxz;5lKVetDY_w7!}@_i^G4lqm5_>^e3{DJTl9Z~vS
z=Cx7)&(7r`;rLghrlr|Jv;BxqS<Kw;xW$dk3_UVci8ameaQq2?=U%GLq8R5R`r@Tj
z{s8zm>)+Jl^wejek<LW)1-CG30b}dfgaOJNifGyRUU_0ASQ}CIO3|78Do#Oq{z~<5
zM&qA3uxnkh2JJlhm&(LhnZ}RXnSY26HAu}!uKQ@8I*wEBlVKOD;=jrt$;s6kA#pep
zNM8VBwmc)%8x=|>^`x4-2WTnbB~)tHafvI79&2TQ0wp7b+AX2+sXfWd0$@~knTXMA
zf7{D=K4{tv*|#VCA^C;KbYSXej^kfn@?IfX%N!;}*p6Hy8oXP}*e>6w4d0-m?rUbw
zl2UKGnCxCxc+LjHm~9Vg<ev-MS(eZVnjb!v^F!2g$~a%VBiL3Cp4Gs*+k;(pETj@=
z;^|9b{*R*oZ+__l9?c{V%1E^>O>j0&@+Z`|!*iqWD)lVH&2zm?R>z*D_c<MkWRBw6
zR?4rJTF#`3;q%PG5uB?GA^JFu3kTFG-kVF~Y4lhHHXG`RUsiKMj$^XRjh2Z=q**=3
zk(FU%QCIxf{6tdoK#2k}Z9smOdNSXQ?1Ddt-e1=_WO++<dKKcRAcb}gP~3r;L<ddC
zxU*m`5(1Eod6#6GSoJc#{)*pRcnin8LSNxx9bLccJ~en%3F?wI2@eh%?*n6ixTZ<Y
zO`Qo;okVaA86pTd!Xo7r8j-}+<B`q_sjqrQrv;HNt$+&Z5n$3E-f94;i^-*dmjXhi
z7J6RqvFC>m8bSK#D24NzndV}qyl8<<-i>MIK=<oqAad6-CW;F2@|N)L%am~TD?sHH
zQ}Q9g1CGWqxIQ}?gAT+6eOTs&3IxNjjgrs_zM03o(S9I~{|)v3sjdDtwYN@X{(Moj
zHAFWvD&ug99a&>1*MmXQ#b{h_;U`uhTVwKdD!25)>Ly_Q-`j!*t~`-8<?|HWkH%9x
zV3ntOK&Ng?A3|0qHx6TNrFcTC{HNbP!Ts1dNGpQjziFTbK0I-eE|)i9LytsaEW+?c
znjN@RhiTaOC_nNj|04e&PJcf%(pL~(6V+s$oTu#2jhH3y@{RbY686pLXZ1X{>NxNL
zFoMfu_zo$3gb=ND%u*ms0p5gtUim~9Gn`ot@j*cB4O)E5kbG%Eacn)fcW}%Gb|P&+
zg%smETd2jnpl-?W%`Mve&Rv$V%JXamvt7*~f?S;;>SF4zYiC83a;B+Y6S|mYZ|+Pf
zOR#eSNJY2|Y)MR6rpp>AOy9^qvg9}NpAzKw7y18R`3wGAOSv(JUh@$S*!O20^alz1
z*Qu4=kL~3bSDxGA6!G{0Ap{pVi({iQUYNd(3rM6@w)TE%M;`~!k7;Ah7ZtfP2g9O1
z=M9np5B>4zW9;ffy>C=~Q9bv`j$LpNaC&SlNh)3L9NGu6)Y+o_jShW2w@bAyA~zAb
zA90=DehS&4cI-FAi(lz1;C_k5w)ZvTus`6GHO@onZZ)gg&86LS=}<1;mx_tS8P7tQ
zA#-_hAe?DmFF&qdFh{8#x?sX(^|v{j9kgV$rw;mV&i=|^H2gr4|2rT5R|bR5r4&QC
zigt2j;>zCD{xn#UtJEMDX+X*_uOtim$_A~kQF&m3>8=}>n(FfStB1LJs0-~!RqLNK
z{P^G13rQv#2F6dE7c{z_y|a2MYg2G%Q8?#sGTj)s?(60DTIgyD?ZoxjxUC)Wo_pHw
zIw&68$-!81)6wu<?^s|`gC@=3z=rZ9nPbhpRjP1lX;=`iPpYVAy&51CI!>}j<vs({
zz683}5xjZ8{u0Ykqi+L~7_8h=v$q@t)kEaDQkEh15+u0KF{=C*%8;Em(VOgq0sMPg
zqH!>EXBI*ypA^VNg}~J|1{2RAe6(9p8J6Y!iK0Xkds~=vKVQd*B;DUYHBG%`K8$j(
zB}8<7f61b<rw`tY#>8l2HM%w))3l{ku=xuNfWNdV*`IsHNpMG9-G}btx$@OFT*`w-
zyxBJ4Mcx1O8EPbYCpfbBIh*Cm{Eo*_vNN9okF=BdvYVjVy1fnXe%gU5_(QDPlI-(I
z@1&Vi&3?gy&$Y~9Ct-L{+WL$%$O?lawMQt+_y-X_Yi-eqHJ-_xMP2IAN|Q0&r-Q<%
zI_#>JU51UKntrM~vB<92sOuf_q*~o%JN67o-{S4^Ipq%YOO;rCg0?S(##h+}9FrTE
zjj(^$8%ddjI)O;`#pomrmKKt>cTz(i0ksFV{FN0utg@d&sXu!EPb0T=1$60IUK@^d
zz>V6x(;z(t#)Jq8?3gq!)A6SWf;q%g0$a|H_peqYkmA+LaY~x#es7e@H4YUOdckS<
zA8tSZof#3M->>Q)e~_&2Yx2!FponPe_(&*V_#WZm-?eI|ySz!t2&t&e+VMlFN(Hps
zFmiY#*2V{g#-3*BU0|pI!Y=thd#E4+gtxclj3<%r{k0GlbqtjCNMrFh6pgh2^+`1{
zRWr1V_iUe08)(X`;f6%AIu?Ifit$jcz=3npDeeAXjyJ`uOO<uV4e;DSugan968!LO
zo|KFbI{{L{!sQP87*s4V+po#b)v+e}R@Xq!_+;RFT7#cTfWAg}cC+5-hN2GtRo4vp
zgVcT(@mF1Ae_rX94TA)CGgS~IyR_gxw%qxB%vC787=thq4=>mFHa6jIh&<Hbt{ml0
z72Lx__(@P^C}0kr??#kXn;pb&6b~Ea-c&FmP(b3~p7a6gVI#zA5$V^HUv|0fIXGCI
zmKjXR_iQ$0G_ofO44kLRU3)!%Gb>YjTbiDJFR%T|VaVy{IYV9CJGI=_27a$}!$M5+
zWf3?If(!2&|1uu%j`*Jq?~Zr-DB~(BtxbT3I(SR?>p$sjiXTYx|9_Ifus_JacZuJQ
za_+4%i0`^v$Pj@0Z~4!|)M*}!VcJ2IFfzso>=6;z5IuV@ER|#pToc@%n_H+d()us=
zVXnAvXMqUuLHD^H^g1QEKc-C%C1qpqd9$DSjMMS3-<7~}DjM+y7EhMpIfhPCxmXn>
zy8)`IGlXK^H&{nkoWT%m%6E$dB3s<(wX$W%DPFTz4%W5w=zAB}%Ts?Gs4O%`DvTF0
zJQ*AltQ!Q38?U9qS`O$!=DpT*NW@o++@LjU+lHcvhZB5@KgGcPK$ibEuz(i;-x1@I
z<80khr0cPQuZH3HUqk`jdS1q|f)HKAwijo4cvOW3W3n4BfOEJ;gy3?Yxu&LNSiWhE
zwc+z6xKCl`=<oQ)iyw%_y}A-+^kgr`Y7j&oHk<@>5c;28AG-Tz_Umfs@Dk1_;@LIM
zUK?MJqm}sbzW2)A0V54O6{fuGQ4lR!Ujjkq4P&nn^4(IC`Pwn|t_Q(%3ZfRtr%h{m
zKL;STHz_HC)^a>gK{7GJjiPVH5N%|I)8NOrB0-Ei=f0@Uw8m^oq@M?Tg+Bo~^XKBl
z<v4;Y#ZFu<7mMh0jDfaN?zg)Eh?cMqgyUFVVLKj*W?tl5OO|u?!&J{8i$!kzsbC?w
zW#<F5W<s5}8cl6PO}e5U5HD(jp$n-)4Jy=;w}wnIMWqB@8ETh5JEq+jQZdJGyN@fk
ztWU#Zf!b9tVR##9!J{e@1EH}us@+tz0J)36$=*aFg7PQ%nt+Pi(n(qf>AYsxp7xum
zNxC^XsIbpV=OrzQT8`d$y&Qa3FyPqg2|Cd_DB@Hf&WyM+#CLgrdx_k0tGMT#@6e=l
zoUo6HM7_XdSqPQoYgcb3b9v;iwr{94e+^>eU>xAdZ&m4>z6*&`Z4?wihP>IkGWfKJ
zu=oE0<p^e?@z=TkDxv)$T)gg_li1$U{GkfmPh=V&;jGQ3!#F`4TPkQz-!1p6xA(Nb
z4@W;Rf-Zn>08V4XKwL83!QHM8NQnkA-geEkeC*K(u?bIfZQys9%vk*EF$-<di!G&K
zm2U?O=QGex(zU7ejvhGQ5AB2<Uh1LVgE!r4VzxWqEW);{<>6*_!vvQDey=|`+#L-=
zPWzHJh?i3(@DwMiUoR$72j%L1%@j!5SXit34lbLkJ1@PykzqyQXt`}}n~#o>-HU^E
z9LJqiPvh$T<Pnl@k!osK>79#9Fo@YwABp4Rz#KtPaso}0Qf8${5z1iRnq;E{T!bpz
z_#_|nU>;SDr^C8a&qx6cfgRxuAr)uW(R;+v5pD0a(0nmZ7G57IC0CR~g%EVrc~%q-
zHnKA5MQK?Nxutmo1v@!9*Ey`_%sHFvnQYtToZT}nhqi47GKf%veBJqHEC#b3b4p)4
zOE9)kcB`%%_jaT>-?_>Q!5+BHtLtOdlaY|6s-Tm%`0YL-rIKsD&V0tjWo<)a7MQt^
zG-D&zU$$tcf9xaGnXQ2lgn!jb42W+@H`lV(1eiiaC(EdHowRP?5A~7B^@95Au6UEU
z(TjDbl1j4ZG0lMayaXAQ?p?NAeoH_6X;oYC5J1<@$XhL_GeggCX*R>~cOBXIgQQ}5
zhisM)Ri??s>rnUJ3;;^l$2N%e!VW3coqk3`e{9A()EzwYR-}U1oh1K>yS_9}0EqpO
z6!$bL)7(ZL2i^yF(ACc<2AG=)NkN|zAQsrmaN$*bILT@nvPhHDhh1p(IR(3jpSZD_
zrx=Zdwsc7)`vF{$+~#4{S9}O()Q5-d!e_TLW&90Yr({ynyq1Tx9z|a<!XLe`i4|`U
zvw{V6|K5E~G}pYiTpv;SEUDjV!(+ySbqMNI=V|HjYrtCD<_QDtPgOVZIKc&g(Kl7x
zR3lf@$euAxIY|zJ=M9Iv0v!<XdP|K4y7;||M>Xh`JaL(yp7Xsrb%(6(luxk4k7WEQ
zyRDM(bfif!4Lx!-iJ9f;okNNUjT{5}L6i#3nB||I!`_!jvpQ<<bL-(_8}B1j1gB-I
zARwba8(od~kbk8k^t?`-;=YU0^KCmO4X?S#@iw`eCaLT-ao}-Ok#jo%*jT>)JWe<R
zJK0MX?X6V`D0sHT^yUx}(`CVp+bq|UuP;M|lPi}gPVPjZGMkLH<Xo2WGvOD<)QZdi
zS6EBwt<|x)-}!X<UA;O0I;PiD40m#gl9|MDFA`fj$VvU-WS@gOGcd$fSg>Pu*6O60
z;$a4OLahKs=uQ0&ya{$#>NWz>q8X_C(3gSp>TsshS#Tn_G`v<K8sVS9!A-s3Qro~P
zY5Qb~a5`!)77hs-zz>sAn%lSs@zU9aJX}%_A$4UE#U44k)?B>g4;C5>@oAO`T&rxP
z;1>72cZzJeHS>7E=Q{QDtynw^%MikTOgs&Ou81%C2<I@i)SuH#fBchfpYG;qf%!=G
zIX#6}(2%Fe<wm$?-4U}Qb%^xhORJ-4ka2nQN}f(PI-E3eK|j%nX9Jpmix61Mw?1H}
zvx<blgY&U=*eSuA%P90o$6r1f5M=AQTH6_V$Mg|;Yg#6gtY*<v=e~`W8O=0*8G)Nd
zJ4gPoXC;VRbO4J)JEv;xrxTz1qKz1kHaR$w(YDl{5IHFs#(d59c{I(=YUu2!Y$pyf
zT)IU_2mX?!s55FTXe)GLfNGWIf?bp5SF4}v`EK#Q4ZQ*XaWB3{z>@Wm3T2&a$*E)H
z5Pr56riCrVF3Ha#oHwQ*puXV{k6W=HzjZzki1khfIceXpf3j(8KS6nDOY(F-yyZxa
zr(;eg-^gVfYT|qM|M3e^CLBGfQbT$B=$&Gazqb%FMM^M11CBgEf$;lsu_DIfLhlTE
z;v0H20l9mG7zB**S6H9(HO%om;$cXoGan|pk(G=|l%yp2OoZwpdyC*ggyox9;~_Fx
zhBsC0ijz6@4A169!k_;Fz01llh=e~t>=*|JK(I!vNGNqy!T6{f%`31#Tm2zrdAky_
z0|e}nswfgHBG3%VeKI=6^^Bn3IZhIb#Cd-Qtm#}TudK5FQ)8ojK{3O;p&)ry8~u1c
z1qbjxsAmFwu{e|$*PWW<ZMcIsgyRBI&7rYvX!ihQ)bMkWUYCX&<hCb-{e|=8CSlnm
zS|ZcuRb%0X?aQGSJJWdvC6rI9y9021foNCr7vA*mF5K<Jp(fi`3%q-Ld+~1LVz6dd
zX$X8%@bum@fIc`tegGcj-Rb-WS-tFn4R<-l@ea3iwR3TlN7y0YPFLsKQ$(h|s#YTW
z51yNverbWjUD0tdV^PA`G^dp&evP=Fn7Tb@*%Z&RbxbNUw(tj>YKl4tK=S)pjdd)a
zBM4yUf1UJ4{6SX!b#?P*U7E)uB!sW{1D+<MBN=nv`e1u7^JOMTPZ|zM`pY=m+dmU2
zR&5%`g9&xW5@7<{wCyX&c_OpldrY!%@@m7#sZU}*VuSS`PlD7L*q$s8M3pbAHAbp`
z*~{v!I%p}#dqDAiQe$$cG+>sbS@d_5DzD}#U_o^~>8QubgY^}qRW)z_xzL{<u3BP5
zVgk}yHc^@|3@Uhp7U?68^wG7>m?)^1j3gh}9r6EXzI6_##S+al`~$`Pd*H_XJ8)0=
zgIs*qGFUoH-vbH!KHM&JQ^0%1!V4rZd`(x=^JGGdAQEkrAp1^rQV?7>ytwDhwtgds
z_kMUo+<1Y(Dj{1f0c_bwMc4dRY7Lm<%zX1L1MszVnx1Q|9oOr-FvV{X-c!%dNTChd
zn1Z1T<7+>4cg7f$nB>JmoqU<{&cOJo{)scd`K#Jx>aGWEa=;g=(Z_6{$rrhO4tlWn
z*Tj7*S^B=6caqF(AG_pDO<;8;RnAk&p4GxP*`CdW`(Vp1OrSGVIZ)>)>_1q9&&Lns
z_20F;{%<q$4U3??e6a5KPrPwE>!(12*JqdESuHm$)5OEn=1Vs_yaN7m#`?%4R2e-L
zaK&XE88j=T`<bb?vEOqx>0rLyAB5OUZh5mFLV#nn3BQ`7w5f&+46y+N_V&l9;n(Qf
zu`Tae6D}Kmu<SzsPuK;mml<624XL2doKoA`p;O^HT3t(py_R9;iYr#Tc}1cGy})dj
zT6s}L2EMAYTP~*?DSMxuTSIuql{O!4t807303zeDUIUFaz(gCCmw$LCYDV9%@h*g(
zW>h_0R+pg%0TXZiLfZqg+b7UF50)&k!Hr~hNCA~#>rExG!eV@}6!vQ6!NAqg#|!Qg
zy9>-}tk{G?szeOpDx9jy9@boLHQ`mfolR=rVq~f#qDX`KO*%_YgW_?3koTgG7&1zu
z|DSsGwb)zlX>GxJJc-JS1ru&jn@??s4BjC=!ZO^=d>+QD+Y8v%&Q&mIB4~Ls+=h_%
z@k^?&Ga4)GA|wLe0^WXqP{8jq^>;cA!=?~tv9MX3VQWyG{^5XzKi{5?tx!p%kHNFC
zy+};Je6$R?s|14^TaPS(63PV@X{MmJ@uQ-z<Vecv_)AT8(eqkV!XTeTRm7Q>I!h$*
zBG6Hv#N7`Di;UofnuS<^zLr{*nAmQc6M4niT*2knug<q+(~t~TmWJ$cfziQ<cV-%B
zJf~v&TC%!p3t(}5*DIKuPGv(^JBi)HcH?F+B7>7))9x?Y<Yc4ta?meD>$t@mTyVH$
zt?#Qb;tz`aUB>r(8bb@OkF{~BOAoZ_w%c1n`3?Yuf`KNLU1HMpXa13!YgWRJ59K=@
z;oG7!@c08rn@LVeqW1<~YZOc;tcuLI&Uq40{{crjBm!5)R_9L)5s04^w$hZ6XD-hW
zE{99hs&y-KY{4H*CTJ4>oE4d{EK5VhG8;IO>{kk;5(+M!;h1A-psPopZd67LnErEw
zGJTKtSK;5=q87BF4v-$EL-K(!UMOk+$nq*|6vMH9IY{WJV#UbR;4Lvg;eWIC_@@0p
zG5+6w)!$3;3h)6?iQe<OwNzcsq}YO{@YiKIynZEg#7@+}J6wn5kbKqM2J=G4%lCwq
z+9ZiK{GG4D_JTTsqYzsQ?P)_I;8wJ56<gpj%AH$eAg2G=&Rag&keL4z%J>{+)l7)<
znQipNZYwBMtN;M{_J!&53W)7>RfyqlK>}d_2fv-Om<eEHeyxIoM`pIA1bZ8vR*{^Z
z;)Ks!pSO3CH7(Y25;k<*&XJ4!6WPk9Ch|Jla&Dt3B}}o8x5-4wB^Jg6khlt4B_`-|
z^Zj$dmL_7T3Wg%dd-UP8tjd+N<(>PsM4<c7?;%`*ivS30JDO_*>rj=z<-OF^Y0?NG
z%o~_+biHUgn(VEmcVw(-zblnK)^o<Xd1lbY-t)tZBb_L+3>&PK9#~e@l2H<|GwD^~
z@Er;dvRSylUgr%+;s}upxxD@~;fU>}fd!pZOq<$q<XA8~K%8g~Jc?h40F?PjLCo0O
z!mvRo1L6!s5x-&}9*v(iN1s(`8O?I-HoegB$%7SQjaSqMr|;SdD&VyygNMOhlLHxB
zA=uk4hWo>vZ%8YSqv4s;5?@=OlRFI`NGHtwb!L3lEPqr1_22O%`}Y@GQT!Qobz!9V
z8@$&-{VC}Si(cr*N;!KbVXWY=U$9xZi}wgBBb;)=)V#1*!0nC_O^4)ZWps?R8t9QI
zGZvuS+WPZUeqG?>YaUcR4W2qSGL;-2qPH5gxKW^RjUV_ac(ke5a<a8rtVyaH%eLn%
z76+LGPo5tTkUy~uDM1FSS_LO8f1jVx?vdyR+orp<A2PBOIhxINZ;>AVxrIx7+orGK
z>CK21Se*easO*QzsP%(K(Cr%@fh20{*gx}n{!~9u&i~%*oqw&=e{Z&QQRNPLo;m&p
zvQ9HRK2H|RZRMuII#R-KV<?-;7?ET-dX>h2x8eMQN4W#z1#tFrjP(L85wOW$<}7gc
zXTIXN7@ILzZ4gTB3n8o8b-CF?IUGKzlBti|5em|>OSHJoaTCt)Prk&|Dqo&K#n+r)
zg>~4s+8{XgdN5s^9lm8?%e`QA{Wq4QuG&AXAgpOiU&*z$g7~zPcKJ07X`rRSh<*Zd
zm~h2hxE%HVra?I{e{Nlnlg$cp@tSk*bE7pbhh+8eD!|nB5J{90_DY~uy$+}wDC<jo
zL0WY>D%7(0Z5t2NVMk<GZl-Wsb8eF%t^-2=V+Xok5(fSta2~7Oz>Oi@yZscDIun;9
z-;{_2Bt`y&90}Lu=bIH|hfK2d9S=<e&*hHJA7hK&es8uQp0LoN;JcP`<B*mW;l99p
zCwVZJ8B!mZ>A{C*6-o9K5U7gG`~!c(kh|ErO~zb5ONc`vRHF=K=R?}-ScB$Qw(9$?
z0eOzz%!bYfZkv;eVf~c^*&RrBO1gq-C_8ZC<y&Weq18er2=CW5_`}_rJd`k6dK<7^
zsAks*d0}q~eOqJZb6^bX{A`QQPNBcXpX=i<C_`}pts)Bqud?Wn+CWQD(y+M9cE~ky
z($2gAeL_~&NO@8)EG!4~_DAQjP<1L_K9*!Hsk)IWC#YryM3aN%jABpKM$xLL2>8m;
zb!}mQw}`gn^N;IPMxiscB3<svIqF=)dx#hA?)yz4xQJOtd1NwhQ-QZxjwZc=ACBrI
znwFPTdd4z#eyqOHaYrMN;1%4msl|~mX%aVL>hNjlDn}D^RCPS&+>xiagAbw{Dd(E$
zq)Xznkv%nSwN{#c#a*CW|E}56&rX*0$6J0^d*r!dIIG!Q+*x%i(Jo-bJ0ztXM8ULR
z+d?yN$E>qaVu^zl39Uw4bJe7rE+-2Wk$CQP-6^bjI^+G-ISus(y3bS*%SD*s-`E^q
zkKdl>K^O$2cNwbXTCVQuH;&5|CG!=&Y>cV-JHiziJJwxlKS4}2?&FogT4l^N3s^t|
zTE4bs-X{rOx5omWZh8WR?P!GxcKm(7Y*}P(_NSnk5|PbX#~W)JB#RT4aocRLp}M;z
z6Lr4*#s2H}K;^#687wVFPt+n)zF%!OiH?5}TcN6M&54wx>c-N`|6ua(i~c`sy<>Q$
z>#{8zt79h}vt!$~Z95%19ox2T+qP}nw!ZY7YwvZwbDh8Mzk1%f3!_Gj>M?o5fL^fW
zv-K{{g@?pgWnaBr>t#fi$4y_(3}qvUg(QpNu{F<3tfP-1QDmq5LxOTBKj$u-ra>a&
zNI1BUX8l+}ktX2waip@f@@(#(T$tz*IezCY7m7J<OqSfN%>)5Omw`LCVyDZW=RFY+
zYSx<b*;l4=kBFJL26-c*-Pa;OWvOk>E|k9#p%y<{M>wqTM8EQ0_jkE+ldk${7yf(F
z!u5B#(%J`9``_5n^Bp^oZS>~7zge}<UTc%=8AcFKoJJ5k2+-6mSFb3vaorfR9^Ywg
zW9#fP__Of2&5=fcJR<vjnS4ajDD3MEzPJIJwh+65UI(b^q5_&6R&Pgu=T*Gl^=3W%
zVJ-96!5qTL!lUw%2G9JwK@<qWZ6x0O_-pcxBX+nz#<k;~#}!26_ZUcNIQ_(K<sN6c
zw1_71T4!YM+H<Lu$N-PL7Se&+(3MHQGrhF!8~a?i?~o6P2h3vV^zmMW<YfbjuaF(!
z%^M>@1_$JsZ?qR6__cQ;ad1Dnk%tpr&wVS`mkXyGB{e6&=XSNK#nq7mA}vp3GOsSq
z*&|Q<?b=7H7&|{xH*ZFHno4h&KYNgdGc8eRgOo*H9@*p*@rf8|7*_6^PkXy_{fWwL
zQzGHjklR3~y|^U*eUJ~;p`>s5Aaf7?>{pg)rS1=~_JM9tI5sJ?65skKiTyud`;}9=
zK<Dj2Hh*ahphn+5^lyEKRziFs^Pl=|<MQ;bt#V~1O37NR9?}N9@Pt$d-u;WYm}s9<
z+RU{{eTJH=a&mTbTpLh_`Wl|7srD({B@C-`8giK^FU(>ScYrp21^bm-shz(O<r4gS
zJ+0&yiYzusqix>wDT9XWnfgWIEBf{c;3*kDb{Y7AKF=TtzQX-OFs|^7i7lt=GO1Z)
zQsDChAU6XchqP88Tca69n!-QI`BbQX<-Hzz3oFIH2N3Yf8s7!ps4uANw;kV$jy|2s
zvX`ztWhr#h98g0eT^mo0#&zdX;Lc(gJ}+lhG_Ww>NUc@NCc?)bt=SXKm2H$1x1;f<
zXKGWqcR+%j<#blQEY1&_1-QT?1f;<wF5L(DAU>~v#5VL^euohX-TJyzX<1CERRfj!
zvTr6o9aJb-#~HjD+hL_MdH{LZe0Jb2h;RLz#n<;@=>2GpIa{N~mwP{>%`~qXO^zBO
z0gK+K;U^!^u?@Ag+@+Q={#JPOHev<4cBW0Cub~Ow6&^o^52)9F+n)bC157T7J4=eR
zeVEl49jZD3fxVw3CKHM42ULEMRYG_k{55g)lR>?7B$l*W!ydbz(!rU%ptJqU#*KK1
z3oU5zvy$Cc@?{8S$o(mMh%opjgf;3>{n8u&Z?6Kc@rk1dB-`1sn?OQOu8<Cy)Uuma
zLY8B#dYWJNVJHBCyaC=%KStbu8i?IX(3js%HufnpP+C{Pw8JQ$zxHt8_!80vuEy8C
z_}8ptWyvN;>EZSlso6D<m9mXm=j3)45Z|XnCKFp-y?0fwJE0akYnE9Et5>=aGgAui
zXE>?E1MzQhGA=Vohq2i<tlWi{TqKSdA1bwXF+iINAUnwm@Y`%?Vmp78K3ZI-WOXRe
zFw=<G0=*uy1rfAa|4=Oy_?!tkj=m<+Ghiz+G7q~Dr42y_9)Kn_AVMh`*4ewx3xLL*
zPh)WGzs(KQL(YqycVs;}>jjDi8osG-(KdtbHzstHvRKu`*<hBTV3#|tqm6bxxmp3I
z<>o^3>eC#1LNOKdsj*3qFl)~~R7@?WaFvRbxCFu70*)H=-sb2Q1Dy2Vk|tyim#HA#
zf~G=S{74U4B?q8|Ju$v9hbf{Z=n~25bb>GMM(NC(72FYxh`HR_Z8e?;&tTfv7tYWb
z8-4T!F1=v1_I(4<K;8+z8-*jkD{G*+qInID?&}!V!XBd$xIFVOXZ;=*es?kv|KzY$
zA4ZVQ=`exCNAJCGmqf7bolg)POzL+khlb~$hbmG<I+qj>N@Re}D=DL6Zrd7kYS((3
zbhaDy6Bx1yec+Sj%LlX9i!7@cuO|Rv$6PqNgdU}`uEioFYO#;d%%a^k+nen}YcPZ=
zaVl=RCtn0X1nHZ1LKC)HupAQ*e6=x>T2HgXt&dQwTPY2Kl0`9L(%~rwA9`Fj8dip;
zt+vr+M$ck~x^{dkcKR$^(;uqZ$d2yV&nr|=)p%+Wp-6x49Hsk!X8+gE|5>8^W<6dI
z96zR_3SpzsOWsj5oj!{+X^!jhwQCH0Qdw0>`6^cZJTrR_vxYi}@by1~M_Ri)r+Ikr
z9}RcF-(9#VO#ND+QoXVoSG#kwq6wm<X$k}p^2v-i=&{&Pt^M_8zdJ8IeV>h3(onCN
zwTze|0vM+Bm>(u)>KU}CnRw<J_t*-@#(kpp``N^0G3UPekHqoeAJ4|!+r#uA7U60B
z%9>d6pM-6$n~n?k*gsH2@FSb#R#e7lJDa27HRG;~049f7U)C~)?Hu@IXs!-2;cJwp
z4F-|Pl2W=DDhGlw2%TPv5L_sX>VYIG&6)MXj}1#@8q>a&W4@Gj1E@Wg=%zqLbYw6a
z^TwtqzmHrBpdFpm5j7zbTJkz~&E5g(lv8S@NWSHHFQ$@-P!k8L>zSG>SA^{#MTt?|
zdhu$vk{5-#UzID*n)_3yz~6yfkgJx95|H)wmWCU`P--reWR$l!wRsl37f8?!ZtRm`
zcDik${JM+gL)_Rt(IZ4@@{H{_9oSB5-}-j7VPDXke_U-zwWH#K@Vb?50N9`*UbI_V
zqlqdS(_j9NoUJ0+hqsj)_Pw31BkfGtJVao1J}s3lM{b=4PA4>`<B7r8Onz*2vGhD5
zwBpvMr4MecBAAmO9rc@<s8_hu@|YAGY#i63Nj(coUY*#U?v=-)XEVaDH-`PmVLXyk
z1Zj<%6j7H7S3Ce75$xb#V38n|<p!$cvIbz=I`i=X+~}HcAd+jF#Ush6#{?_a*pKg0
zX>Vg0Z`b69F5%s`3dOfB{og}H->;_O+m!E8329RB{pYv-FA8ASr?$$~^l>XRFQZJc
zA{jGKq-8p$Z4*?<XQT=Seu|Y^$7j#6+%w24Q`m#Htg)f8Di}q7hk9vGNzx)E6P=Jc
zFe=7v4WToX5__884|;87j<g8CRbXhQ);+nn&qse29my?Ct)R(C@2$FsHnzrECk8wQ
zfvLkCqv%14_QiY0np=Fxm)kCqDQ928^f?-6R-oZ{cnku?scpT(qa5^-Z&2)CI?5;C
zjl?eO|Ikq+eL#EveKj-x(_mrpa*H!QX9IXj_a4Z{DUfRAGRilIS`E#ZPTFvo-Iq5m
z>vsImsO9vE#R5q#2y;4+K}8NWk-u31(25*EHFXZZs9pnxn>9oIxVBrrW<8x8+T0<X
zf2ObSyceV|^``-+q1FqDY$*dxQZG<I$}6p1?jc!-LoCDwI#uoV;Ncr^cZSx$;k%`B
zhNRixj(YBraWF}Kr8=(bd(hQtsP%oYxogi0Y1ABpq@EvRP6-8^=e+&u=TzKpo#{F}
z^A?3)fJA!j_$0{&&Aq1~gHztb+ifpqAqScb_+wudK$T7jYrP)^tavrT2f14tB{|uO
zvT(H7zB~%)n}ra|K59nZvdA^^!Az0h+a<FDuWpWjkBV{b?as=}DC(A+r}OhO{XRIY
zp7=Vy79RP}dh<gpk{d|&EMAb;1$M#D-Ld%KU*Ujl%SeVGIv@&e4w|<RpVcljX{9KA
zAtt%iShtD?uBS447+^uHHk9sF^R#9P#UM=uvNQ?q)I<S#TvlVGVBE#l@(edBq-&ql
zrs!O^A5jPcHeDrl1H@jU?!|?QAt3pvJ$^iSG71pS`*0B2(2|vT6`L)yNHf3rRN3H7
z>V6|{m<dAQJ}>0B%p3@UgMF>{4d|D@5DO6pU^Qm0v)kh47(g$hWY|>h7t=ZksaO6i
zgf|hN#*GAVs4)z=r=;Y9^O5OuU@f5)b^fR`<9hZ0f}XD3T>VMQjZZGPR2AWV_mxX`
z3+|EM$er5-C(H$!vPgqK29U=m>I*vZcgfhq@|23XGOJGCtG6Q=S~~%ppA{rMH%OY7
zxfyzr4=gUnhi+hb3<B+H?90CQ_IXhLmlY%NkL1Y|?l*KHSI}$;+G@AYXpfMIW4W((
zL97nFI1gMAp0Ad%oTBi!Vi;nU@RB&cB8=?bf(PZaHPK`z;rX53FBwn)N#<PXmu4by
zysI3GA{`6ZA}yhe1S6$*vT7YJlONe?UoGpl78!<spCF&FcwB2}A`tUhL_6vnxK9%E
zjmKZmx1T6qoW7E1Lr|44U$+5eq*-l;m<enKKgV}0t5#o-!>1&s(#FeP%isBMOnVEm
z@`1ctww-Y;H8`)~&eH7jWo5MAwU6G<AOeuN)+8qM0v|ljxhQD_SX1S~96(rr81tjI
zix}p>Q1jByg1tgUjuDyrTgIPxv2AYSYY0dR*6<hZB*x3Wqs*5t=!W-mg_qEes%KpA
zc6e~V3oLaB?wM8rPWs*9R1er{y5u{C%5G)0M=B|zYiU(DD`HP4?002eila{_^8AM)
zw{!|p&vO^BvE<<M)ESgZk7zzXYidnd`aY(<5g2RC3+BOyiH9NzwnP^;Dvg@t9Ah9E
zRDe!pQTmbK!0GAQgt|@v<#ne~=+fnIbD5eS04;3zm~}Ty^wZ#)=U5r|0Ou(lGEbU~
z6K6)73xS%&HHqPiFF+6j6s*mhH62?P#DQ#%57bC$nljusp>VQF%KZKT9#xP(*LsYi
z%&R=4<&|m5GEq{Fvw5~Y9u24q7lee>X_YuL>~-UDzgf|ILq4E;|HP($=4j~l(V~E-
z-yPgQh17><hVR9Avv=Bcc<FMCt9tF-kT4w0(Bu~P?+7<8TyW0SSKf_9vx7>HI*GI`
zqaSCEtfkxfhjB{o7p*AH!fpyy74HEe7k}v8J_tsi$v7Pta(7)|An!d1x1!X*o~x)^
z%<3*`yB87P!IZW^=bzzT=`!KVBEqBhdE<mx*Ie#-U|0B>z7FH6&B#71s-8G`K|VHw
z6+y)%Dpd!<eeP7JDwvacSJgM6x|I}US$J+iF5JM^&<`n-t~1JinOpDxDzpmEsL$n6
zL$-B|m?Knn*_fr**bbcGn3`NG2FY~OwygUa!C}8LG}eJY+UyOTTG0pOW<kMGx5ISz
zc=P!i0VK}GS?;1yR16giKxY@Tjl!DgggkGy#7&yuf@&nhG7&4^wvjqOq6JH!pGiaj
zq3KzR1sVoIXj)9uNG9O4cZ%WTI|)n0<k+W|E`@;rmSu$`->MXO_h4nyRB}QQrxoV2
zxGgwcP<b(FStBfiDU0iO92w|Fzpu+N;dEBXubmY%bdL@&pG__2&O6Y}iL`<|aV`dn
z#kVXLsIfAwt;6&<?<aGe7CYb^=kXExg5LZS7UDQWU0|wn{!Ctk?DhY`O5x9t`(?A*
z|Ku+q$vFVN_k#~nRkaroiD0roI^k*3qKmLBcCtUwKdSb^oN@$c>3d(&j?Hg{_48-W
z!slDbBTGnVURB<Jb!iF!wq0=`-SU=B)e>u=Xkk+|`f&%@>Hv{a@d;nVNs>Ey4Dl2=
z!w9R9?;5^nHFCLDnByKB#N(izq<9J%Y8eo4>VtqtW<~zKt&St)rsJP;TIuMB5$77K
z@Br3ek*g<>)JV4@ro_%ReItt9$<X)aWJVxNYT?V>2GNqxeEW|M4rqY4O37Q|sgA96
z7%)t`xl!00AmXJ+wF67*!qEuF!{=LsIbcB=(2tU-6Y}Gs)(EilUv2=?+^9WfPW}rQ
zm3dD-U?Bgx`+u3kFNld4G>Sg;wD7hDv?XKI)olxv0$T5asX_4aO`i=o4f_;Gx={C>
zzOuZd^!g^YkI1I*z+h<ydu2}iW%;G!aO^UAzqv0z{}2Nivrttb4zP)<^};It)Oi$s
z3V$2e=(q|L{7VrA1ND9`FQ1+k;ar;6km4bFY5*oXJSln^1iWBx3q3v^ZxLAEkrFP7
z$dOM0J1F#Aenh%8eJJzUDL=rF4Fb<1?4LRy>%HU;Qby>(9oCsV8Iwr(mO5Wu>p-K-
zBCWkAy_j>5E2vR@Sg^VztBcxG>T3q_r2kCRAiPnJ?RB0_6@Y)*c~E2<sqGMVTbqyW
zFQ)`bx#AH_7$nh%h{pb=2qPILiqj>T82*nqn96NChjVfzSUEe-L13}%cfcI>1;hBK
zEGq@+s9ogD?7$><$o-Y*t~lIU-do0vrURNn(z{s@tu?(6Ml017dKn$S5dgR|HTQ!^
zXs|^##)>`cfi;)!&bGv@(@(Us+mjU>%oovhB6|*eXUOvv&;@!TijT{N=I(t^_qF^1
zz$bI8cDQe3Jd(QiY~n~bB@G1>%p=!&Z6R)$CuZ1I)%kSw&{agS=;bY_D+{Wa=#N6-
zpDM?NHVYy@A=yQja49;vXNVFLE~`z7EWhe2=~z3sztGj+Gm=9-U?l&#!hfKv(Qgg`
zCR>(_vP2$LaW-B<)S;adkVW{i{v8_mQBh+#L3{WVWa>oRA6>kl72+u!rjusYy{{HJ
zSB>?mKq6{$`lJjS-LN4rN0xi5pAC!_zSvI#2Sd=(s+pmmVwtRz?eQam#ZwD#O%17Z
zHiV;|Uaz!4$R~V`@ec6TY7UKqRO!Ny%2(+Y8TzvjJk+DhaAu!hyw&EV+q>+vP0qM=
zQ*=Ziz+b{&Sr0}>0ndB}x{%}VFGbaJ!rR)<6vVAsNkAd?6|qTSoI87;<|I`%Zw6bl
zC83`NW{2e!?Je*6-4PmESSIJ}PDIhOqEr)3XeW|uSD^}dyV)wSYZoWWoS%<V4)}L<
zO^M81L`yfd@G)^MQ-r3EQ{`2>5YbADG1ukxt%*$|X+d^dfhnuM;D5ztRdNY0BHb+N
z6OK=gQShSl@Qn6XzleO9t(NETo>ERQU2(C?K;QU3+LEr15mu0Zwpb6(jqCM}p&><k
zRP&0Rz_0^De#{2wt(Am~v8np^o>Hd*8A(F<uX;Z4vQZD_(#yMT3zovz?!Cz!V)knL
zCL<NA)=L*6ZTSW1wfDFy$&E(;<*kEJeLLkhBu1vAcKsa=R}<Q&hL7v6(Q-t>vZ_d<
zBC_c1!~PV3bGq)8yX<~pxDN?+4?=7ZTDH<Z!X_T8;lYnB{2t>YM~6j<&FE#xIIZ`b
z@2P(I7^^HE(g#FTi#QIKTiT~#B4u`%dyuO<ca^7N6^$y!zV9yQ_r6<mFNR&19ne#U
z-q%RD*LH}S)X%{W?bMBW!j1M`a>a6{ne|2Mu*2aW8)aC#`4(Nk$o;g=RY!$b4+Fig
zVdW8T;QhwL{ti9AUl-rEA>TvK#Oj0eW1c`%%}m|^7ezM**?N7)p%k)t>di9gDF#pI
za~t{q;|IdoY`{Q>Wk-2|yk+7im&lB8GU#RuVF_O|@XnTYZCV8LUc_{`Bkhn@5c@XL
z6SG$9nYQv;6%6Z-P@7)IwcSQR0t2|YG7*%YX6k;~D?O!>qCw4bc?{LD&%0km6?X;c
zlp$N>%fb#IV(=(fKu&f5jAJ}Ek6(t3_B1w`>C}n&m7Y?fB>%E<S-+GwN*BKov455C
z!9>0v*Z)KLzTX#2>D$I{R_*{roXzoa$T)g*UYkwexKb@9!w!KACp;Jhyccuc1|zN0
z1~QPOdt^YJK}9PbRb2EeVbUvsZU1dPCi+rH=-nMvA<$X)I!;x2GE9dHT!aj2bj}X!
zIx=W{94^$`4e9x19+En?d#%C8Z+t8SBhK2C6Ic0z`!NHn;pWg^i$)XB-zx#+2SP0B
zxaqIa$!#w`g|qgc&4_4FW;eaLte9FDdF?1^8D+nb5Ld_2fhU5k9A9X)f5q=5a(uu{
z{}sQ75A+7WaS9lIO0`*c8P2Y{;qwMi-RV>-POHQ%zyv+iGGHPKPl7)JB0b~6Y?ZSr
z^4)Ff5(ng$iVgaZ{NnSJ&@-I+rF+7<8&a-InI)m{xQH$Grb#Iz(VQ#6;yq9*i|lin
zIQC%T+OMD;zsh#0leIvtk5T{YoZXgA*c?P8qLN-r(akqQSb*Pa>kZ1_KK_iX1d{aO
zM)${)A<)*`*DZF&M#ynt-awyYG!=E|2+qU(vk)Lc4LJ+Aej3mU*6$}TxA=?)77yN%
z^4;YH0pG5${S|C*WjsIvXXks95T3LaC1&G0CBYvWfJ5_}urNcu!D7M)hR_VJi>5jt
z;T-u`yD&Q>19<soG^hC4@Ht?6lDl`%X#6{tsrbE7URrwY!#ok8*8C_+o9YZZ**?XM
z`O#JlbNoNf$$4(Q>J&7~(l95Qq`frKJ(2xRE=gUlW;)0N0^mp&CV}a=^OQeE$>&ET
z{WK=~$%d3FDEnBIM!}ZA358rY3$&XT#dzK3lPCx%J!9xG_c#ynxt3*Ap5L5E-G~y+
z(m`W-?D<Xm75aXLo{%1C25RNfQbdk$@SY83ErynKq5QUU<sg*p>TITHOrf!;0-{_w
zw=OJ4L+D@(ozM6IZNHNpHduufN7G0B@{&B}IW-BnRn;q|yamS!-Lg6nzLPIKCvEVt
z`bQ|sL=af_OID=yXBYHu!jNFNUDj4?r<)mvB6*^~X$P*y{JQJO=wyXM<r(z!MrTVK
zsjmYLY$p`M96_s&)4*aRR;}!I3c99GN=;a|x9c4Yar)aN5*5%X!%gbLX6ishWpb!-
z2X9FJqf4iNvv}3pu3d?7XN)D-8EBWXd@=Lk1aet%@IqNJSG`veRZ$C%)+TrweabhS
zfvi{7uCG`4LWU#4q<0!*KQ4*W97`}`jJ00Yku5}YRwzATB72tb+F|opOZT#No&-z4
zsR-SPm-fTTJ3#4*AJev^Sw*sGO^#hRb!r<UI;HY#7+*g_={=62X=;asu&Y0QugwPb
zrdfJO`b00po*#k7EQTY2WgK^15vs_u##`r7nRO=A^a*LNwXhkF$^9N?+U|{a*0}57
zm*CkkW0iCDBISUHxXD>`TL>N~17h?L0GvVWrdU+HQ-Zo^^&$ss{qU>e#CV_CkxD~~
zoqQIRdBl-NwJ@h6x>&fJ&XgBl2h1W)7&AV~B4>27iX=+0%GO%eNw^&`spVR6J{Z#n
zt&<S$N1?dMv5UP_Jf@3w!o?$qY=1cj^_u?`Cg-r6l`nI2r(S@`qSws15<B2EuXiVy
zqhU4I_YRw-Z;n>u7R51pO4;{QsWJ=J!ny^w{(+XXnWMPdXMy`|V#tIizn%6<_0At&
z+<v{dDtEV!4o`|Iquffou<P1Cb7CHgs?6=+_=@mV0(Y-8x7x7rI!i1h56p6MFa36k
zHrg8HB*$8I1^u2q9}2Dq-3@~8+4rs^+0V)4=bQBxe~`9@<&X;Qm0*o2Z#|PdvM@hY
zqRv1T%y^^VnqHF1!+mtG9BrRtw$n4CBLCFQH}B9=pRFYjnR#Cef}&w`&<;s~_G1Q3
zSQxI+L!w%o)fT7@OvRe0bTW`lv{?CI7Ta7xkgj2Hv+{8&!munSXr|<t5;jbujn__m
zQDLA&B!oKH82c{j0t;2`X%f%*E@W+OD3uj@yvaEn0dH$C{QUVgH=L;?;-nuw{No%W
z#bhX65<UXnum9aaV3qkwR3T!}p|;EDHj=mTRmN{(W^l$!b_4eKA`F?fI;B)D@fcj6
zO*1s1=t?X#C~Zx^fwD1wf*@rrADr$Zt!l26P7XtV3w8hIIZ}W)fP0z$HyaBl%agay
zqr9pAk;f4ggI5~@19LzFria4PZgTp^Q(2ZrgZbOQ0>NwCzQx05*4|)Ewr-HXvVn*z
z=-|i<xQWXoZ&~%+iX~5f3oeBKN_4meTH4*0Rj2WvPAW)Y!!5y*SY0{+8L1CA9(euI
z0YCo6150VFrIu5)Xkh+}(w;CIht-)8E!a2=&npxdJXzVHCSu*&t(y`G0E<pfFkiK+
z&&gP*uB*?@4Y`2bEqAyMTzo}e{`*OpSePj<#qr;TwLg)geZhZ7D_G@JlcigOTx<qN
zpQ@EIMez4L`zQrnvX&m5R--`Ub4^imJTBQRu?)Eq9yv7;<N$+R((CPgMAB!@Z-*FF
zL~^jtK<th7O%yF2WcC)r=wm>;4sBxvU+L_;vhtu^muqYA%b5=j{WkwS5rVHac7}ZP
zAYk7h`sWFMFdIm@NRhL$?I8(1JgK_V=;D}byunq~SySnbIZP2{xN<qm%e{t7B3&jC
zS6Ps{Br9s=2JiYolRl6a1Y2COVHzp9n2eptqB=_MSC!HL7OPb{EDiL7qwk0+%cGRf
zfuGEf6WqSpLVTIWsK^((dXVZ;a!%N|vxNy3cI?)^HI`2SnrFd&;b{PcYMn`RsEFN<
zwy2_LaJ}{*pPw*>#SD<dH0?5rVXI&Pj!-o$W7%2rHlL9JYSP73fNSCjrN_<&=T$C>
zzt93KP-w-U;{a^=A-$a~fDM~tl7#Ba6*{1-EN`#eOSbeJw6e6G3aNhGamsH?{rtR1
zOID@}Am}+jNs}J;?O5sWA?s+$k)ias%q#?5t6||_zC)gP1z$~O71mlk&X2@;Z5LCb
zeeWg820Ay#;tdv82i1d1vx`1B_TfV1<m(@(>V~lJK%|jjT++My6f6v1TH%o;riJGs
zKLs6A@c)(wUIU0MJu0uE(Np~*NxFqG=@pGA(C>X%k=O9ky<*;AMX&f1;Y6sjRsa6O
z4?ntyU~9;86fpHJRvTJwIv^j?XP%Izukop+|Cvj<83(7$h?9l|g2JPt7LWIrfP~s)
znq87KILDU`&sV2r1|+|pJvm!erPuKV^I~(xm9m$B&%R&SRd<)_0UZXiy!|b^3%v{0
ztaBUJEO17TD(0#bp8?`tKq&?zXaqSs&<(IeVsMXLt>iU)JQw}Xd`EOs*!_$sbub~$
zId;A!^f`pagJnDGUSmqMbKP~-!M)Q0XyTkCV6pVR75Hbu&@8L@I3q2XJACusNpP#9
z4}b{9%tBUR8&6+JC!f|6sko?SRgb!JA!kO4dK^oo!UHJGe^zP?v(_+PB@w!vL7Rjk
z`443g=9w`Or>4*PjKKCKHY{z)q@Gx!=8~&^%4UW<_u`PO@FEmlWpaRtDCm>9T8J&Q
zq4l{TnlK}85GU0HyV6M<Z?UI5LExSs^R?&yo(eXVA`%LeCo74ny7ow%oCm<t08!f0
z9KVK%$SyH}d;s5HBwp`=k_YSvAc&10$j5ZPle4D(^!`UP`hO`=m}{qSFWxjqNdwNo
zksc(5d#kHzMx0=l9ZAe%4wD&;wx~7y&;bWTZYeBzh0^6j7rz&l=Ls&Vz(%V-)SeJ@
zdr4MbPuydA3HhLBML1bj6rRfYO!z$bG)6SD0^)6}PBu-aGBAFYXhGMVRL<G>SkqKD
z3&LmOKq4kQ-UY`paQFNfL&!pzA+Yh9jhy1REs(@+lyv+JxwLOF9hE|Fv~33|?r;w-
zeAKN7Utq%%0<Vt0+!>)lw`Ikf*M+5wh0heI4puZS&C=F4OKMyXv#?c9j&rTdsDq4!
zMQ?SlId;hut%|6?5hhQvlw*f57PUI2o<<4$13S{>t7C5JqbNicidF~8PuLh-DuOlr
zb$_Vm2czY*US1e*O?oM$5lqA)gJF^w!UG;+?{pweFpv4@;5uDiHe<Q6#7XuD{K>M^
zbo3>VXDmJWi{{P#xS-AVZ(|u{Fvg+-$<D$bvbvAPI$G4)D3>feg0)XPw#YHG!4E$a
zbtDszF$uK~8qAk5Q@p%O+kcdP0P8Gv9#B@kbTt2Rn|mMEY)`EJ(<VUQW-61Qc$*MC
zvI*JpmnuHw3ug9DtFZ`$+^3v>cng`c!_>;)Vy^?Yx81|!8W?I0N)sMAtLNZ>Q%EG7
zM~ke~L^6ProYQCQHQj^0##_8`p18?qSJ3PJW`UiwV<tTyA~UtvXK>F2Atr~0OTYoD
zH~ZvPlk-$!g)m(s!lwi+^as_0dT_CyOu#Jt40c@LnF0pR%&mG2fus**{F|vK&xkxL
zw&o1jG2mW7qK})_IS6Q#&}>odZvY`4LVn`Q5&zFLY%5CDm7^J!{V!4c?=)=87tG_^
zl5Y*2B+~f#n&9{pDv#6?_+)C1nY-WG4wkb))+e-JSXAIF+{kFg-9f*{%nKTZnidiS
z41OOukuaT^I|v0NFx`f0X}VLY6*^*%%0ngmyj+oGtQ%WJQ_ko#->hRnWR%*Vk2O(`
zrP^5JIi3=nz<98dYLg}xa#MJ(>fT04PTBgE#sSZT{CJg?_vz?mCvQUwJ)ku?WO@iE
z&-(SEWa5LjgeeLgOS@l43T_PeACmar_3WgAeJCQ`zw@wf<VAqg2Q2ivIs8^+|KHbz
z(d!H8`B@`}kIFUUq(t|&wVUrE!^CvBvwZx}y>2@I%v+St0|wx3xZDKidxDeyOi-_t
z4rbTBKZiHpX^m~^OkKzZe$Vzuy0cDw)QcG_`c{CO&kkHvP{u=C^D4pyv9DA=kA^hD
zzQo<6%Uv`RAQh}=I9BdMNPiV8{K!0?rL2KI!nj^;vH$KRjLMC+aJFz4mrh2U<@f7L
z7Xe@V0XKIQ{$UB^bhY#f$*h$tfE;_QDHbCW0Dec*5eZ>IJw`ytiKh9g;(^Y-%w>hv
z7UC%DX2R_2t2XRLh0Nd+(L*OLN}-wT1;c}_4=6pVonW1Wuj}jK>-m(!`p#KQf%3(Y
ziBJa1(0lc0v4W)z_(S9RFuAkN!}al3DpFV{!#2JPr(O=|U{ouM(!Ni^de6EcE!Tb&
z$T8CEB;T!O^EEgSvR)pJ4(bSL2Z@JjFIs1XUv)zy?My?nfRKYXKv0n|83Z1oJv=pc
zGX0O*OJ5&(4jVz;Ib)w=U6_)uwt>*@{bJX}VG1ur2zr1S^OMxhmXA=B0i%zt^Eq>e
zKT%Ac2htWVH;S9M`)gqv=mcX+hVRdUp4+SJQ?#b;6etj>Fq*-hQyEr26F<f`KPs)O
zuSy6eHy?Jb4r9W_EqopslvxD_+l>y5plh6dr5AoeKE%FwW)ay(xzbICjLEhGd%VMA
zWM4(rBf8MBK{zEsk6jsKxc%%Qd~cX18FbrIz3}3wOe8PSv4B*hl=0A-JR&#U<{pq>
zLbp2cjF>`==rs?i79#-6ysZHQlgtiTAgEBlU<pzwGY^rm^(-8@<FE%OuB+(<xBVpy
zrl;Q>&&h17yd>@(>d+C@xIM#=tayPz=$RpmdZtDn(Vw3C1JCcoIn<0<Fcn`3K-znT
zW{)MI_nPfVzwORL>jUD7Cf+%Xtu+kNl@!7on*UC<JeG%%s2m?GkhCUp!nuvurNIIf
z@+wFmzac8qK0;+p5+Ly1i~FW_!3u_4+g}z+4@Sj*rQu+W1mB}cxfJn-c&dpH1TKss
zm0Utn=zI!n_xC`5+!rk7``v#dTR6Ym>r)7CzLn0QV~~J5lak<6yU$0{NnKlW=Hj3c
zgr&BlW_IAUvi)}pFxL)5?U=E2hrNdB9L!9v^c;a(3IT_&OczTi&W3hsRA!ocM4oz_
z9os$eKwm*7NK;aioS;pg&n%pd%1xKvA2?(B=hR_q(1ge_v%-|6Vs>UG{16@>RVNuQ
z#6Lj$8j!^310B?!6U8>NU%%|T5@5yMt>fL(?2Sqw2Qj9pVeJgHhR%YRiRPJnpFePC
zx-0&2zP^{v`QUuP3jPWd#dep=+*k_CpKz3c{qWFD-4@D<5diH`iLuGIU85Jk(j4bC
z-`IldrUoG$UV1>YL`l_Bsfn3=_{F_y<d~$L=T6T6<GG8=cfUQDr5SDx?=w6GCnHJF
z%kn}aC<{3MhO&vNBQ;vx5)&!T7M|s$jF`mVmmaPIXDoCc$t8{N$i8iNHi^r@F82)2
z>LsLOx=kQGtlRvn=O_tkOF!b1kS}}HJv1=PCLpIRZfQ}D-5$XeaWu9AUNfTa%$p9$
zX1}#SpipApqP=mf%?9x+)4Pe(_wehSFkV%>RM{8PQY|?^>yylw6o$4Rn_6t$1yK{O
z`v=2-EeKJNlbVF7!?BN!Cosp>_ZRW<0W14A6#ffBgC=$Zm=ty;Ii~I_g_5ONa!7s|
zzo;5}>`Y>zA+XXxuf31n3hUcfYpkuZw`Vt%=NU=$bXHVdNaF!nfOz@H9N~DcW7`jj
ziOC^EOy7NYCmj=!RW$XJPPoA|T2l=>u;LdjYLpM%V@A47tF>w0XE87y@n2~E?p~_2
z@sM|C?y*~8g`tKjG5>go8VIm1*uv2z%`8N!Y+r3pAS?9!K2fCHVk-6tkr)et_n5=B
zVt!Qk%c_XNKJF*RBI4SG90xGecqJyou;kiv5`cAMu+ReA;%H3v(+l+g2EutGg%<Mo
zgGuDCA5+oG7W;e=*<oD|MxJ$$VOro&37FI@xI4^FJ#B>D{*@!VkT(vO^1uTFyp~_K
zfhVZ0cR%Qo_1gwx`hFD@D?G>N^948g`)$;&ax^crD<5QT&4q#T@`~f|m_(MkHaQv~
zuMhuhb<7W|a8yTY-_0z9ofB+>zLQBDdUHAU9|1{cmr`b|@Xq6%_XTVDmW5JEMJXM_
zRvln}WcrX^#5}@glAxX^NYphF&`1i7oIsEN=uE@?DXFM%QQpkXxmoP`BG^cp`cpgq
z+FRm}%$rvd&>Xo0?%P|fT92nS7;*;|^AF?s8{n#IU%iY;4nJ5_4bV*AK>>(R;Wspp
zF%)`PFg!3_gHLGxF(x-w`P0Cb5Yt&NR$%mK=tOg<L+LwUPGDw+q+blq$xzQc8~6*v
zMS98Wf#yBWX@3mxp*FoU%X<bcJPsi{KTXAZ?{Wprtq;C-#P`tY-+fI#z8Q%iK49bj
zca9yXeJNCQ@yqkWEZiHEFeC>#+)C(QM9<PTxh%8*aw=es!^Rr%uMt)2Z{Oi@i^HK&
zuQjSAIAQZOPFrM*VMqs{>TDiJpHD{ZYWE)gp&t+kwPBI!e|n&S@2GP}kTUs|Z4H#a
zW^Cj|W-u<r?_}Q53v%JOtZLDnfZ)9ci0~61qDJhi)cV|rwJ!^%_>br_*s98K%zDu^
zQdZ?xn>mIGp>O(ARv7Y)FQpKB$E#R%qs~`6y?@i_c=(*cC+yAD2$H3WBXlm&`-kz>
zY-21AvLq<PJ7+VR4R-lG^p1uo6_|L+iWKC$lLQBlEZrCFJY5y}`s<fkMN74j-bp^I
zjswRh?^s>vt32iNE}fR(ee9WrJOmCto_Qz?grhwllax-p4f5D2o%W@$!niPWiKrtx
zc=<6oDH*<Y-VV36;xFE(!7g)HSDkx>6<y_zO9z({NjrJrpBU@3$QuBTQ7T@c557{j
z*6M&1SeK#>735O2Gx}SZ1_>11>5RXd<@aOsVuPbg>a?0|_1|TpY*bfh+=gwZlW3ZP
zFZL3CshLJAq?k1IV#r?c!<KHaNhj|Ktf2!MLlCU~{Cqr5(jgI{57@5*#DMilhSG^|
zF}6VoLJdBL>d~2jfJ=QgqIuKj2-t$Z9L*&wCU2|yP9Wc-k%@nWiGr`PFj{6eiE-2B
ziKj48iE8&a6wf@2D)ON=-qqVJldmhPV1M{VVWFK**u40Q2!Y^|#7_%>A7mBR2+RBL
z-cRJ@%6yqp^0+l;GQFN|7$Jj+U~{Kg$qye7P94?Z&w8@mSL*l^=K*Sn(^B;ZSPU1Q
zK5QV{_j6i@<0reVyB&{7|5>2>w7u~!LaAcFc#6!#zoX2i1kT8fuD^jnQTsz%g=Q)*
z{a`32$B;7M`=hTZ(txzGh~wdA_*-lJZw0*bZOCrOlR&R0=}bO_-_yDGSf(4Tt#SA)
z6@U-_+~(OQn?fx2RdXv5Fmm=uaiY2L2kSQsQ&gk#QEx(rR)gg-8}*sYpl!<!@*2*l
zV@ofo{bucbYrrED5wQ2mZiS)K*#jCw@K?yAyp$0`eR1yS8k9+aqY};1)H@1|5eDnN
zDWOh#n@hfn5_|!z8G;IKU1J*-((#tQ9cE;%S|UqlIaV2!Bu`#JW=Ue$*RdLE@_TT4
zU1sB7+WfWGJ%H_GfTG~r-`OLw57^~Duk*j#%YTEug{s=QTAN5%4?6d|n6xfv4yeL7
zCr+3MNSqNCxn!5GkJZol@Qh6+XxKJ(v2n)k$vq)nbc_9k06jNOvTND+_L<a?2Eadf
zc*{l7H#nY6kWo3C3`*?MItWNzwkFh9(syNFOUrM%f~`q199AP7TX!hrgB&Iv0~Ias
zY?@#na(ewSoi6Al^Ws$qlm>$S?X={g&Vz7v>wa8Cucr>{H_OWmOuoCR_+-Jtx7U@A
z&%QthiG80tUcuhLmgxQ~KEqN=m3bB?7hOU3T)wUjw%T@|$!;RVx+537Hl$Dif12SN
z$rkP}>GIOp1muZhczj~h{kmN%6K(YpPQSf%$`|b6`%jKXPW-?R&?}!f=xP_29Tn=t
zfj~Y0iOI1rFQfP7txZYEg0t<yk(Wz|%z+AXPBRm2cxTok*1*@)=4vzP<fGm{q-Lt<
zwgyH<s;p+9NPwFtU!fdl9~Z6gFo#}Ap<;B|R(qH;z?_jCHM)bjWR#3O9~cy?8MW@i
zSBW`?ThGUFpIxpRb>bk<M;0l?<6jz)qchILl0?GlTD1P<7;zt86dpe6<rLmKLto_E
zNhe9jAdxypa0GVS)Snvk%r$*hw&)B0>z{KzqrTvf-xfVwyuu+uCCq(a;2}%`S>?^t
z#h(YNyYhaz(=@q98oeX`89>hW7)OfoXJfMGgG=M$80L2qa~ro<tuOa;@dBvA?-HLR
zltk8%WG8q`h|#(*a;}{`)Or9im0&)>U6Yhjok2XHY2z*0oOIN?ctD;mFP|&oh_PDq
zuWbKj3s!Fzih+?Y!ljN2z3F&bb@%3^PG$3eCXHl6Q|6<|zzg|pO|M!FR?$Vez@+4V
z_89+}>CxN#vE^_TT?hjzMN#?ADfm9%aR1FI$Tkovc;Cg!V7(M&w#zE?VCn`5UMx!7
zbpqxA_QeS4K5@rq4W|E$s6`Zoe~=g+lcwCKy*_1AoP)#)j;=hmu22{?rlK8w(DH$A
zr-f#CYFO8iy;hQ-NXR8Vwu&-OX;c>y$P<F{<kG=GE711doPG+(QOPKz<?miTvOmRi
z*`UnOrGi0E!}Xy-PU!RMwqk{Ar^8r8PcowM{V=^&H$t1w3uH?5>eA1R#yvQ9KiJ3(
z`t1d2vo;F$P<^<Ls%0U58hxKwAy;nhvUaEp2dATYXP!4nC}OLDY^fT*zsk2iM?hH=
zhDHB`vjv_H$LV9l8UlsrLU9r?st3PN@S#dAsQJ_iKR@}rn+Od$)^a_hw`<QwH0SkZ
zg<#?Ojp8TYnZo^};!-nb8zG`^R$;q-wtSu5|4V<k@i{^12;UV(z!Tr1z6asHo8pt}
z#X$sEY75kyAY%(PZ^3yIn&{8sL}Uca1+BBz27NpXDCJ#wO!!DMW_EdEUBOw>8r5mf
zg!yA|iH`TYrg{;O)nF;x=u;TRV&na9%hr{brT(7iD)BD!jwJ8GES`o}=YCA{v`ht%
z5i-|YlFi~8mtgpk-&ycy2;(7iB5Yl9RP7!Ymr-p$^?U?c)juJ6pBRgvrQwIskMnKu
zRbjX5lpS<&7dg*hc}`Jd2o)FO*4HI&QN4rHJsbvy1iR0oUbX%Ib}Ylb;Mo5r9QCA<
zzAIvp_{S)ZQ6xXc;2E4ck22MgVeFr#SCjxgymJ9?M@estAED>uzcOQ<SBq;oMZzHI
zKEKGW;#BI@my~UatpGGkr+OXw_U^(^W%>5*e>K^bO9ZNvRisXJ3o)M<^~`v4wGSJl
zGRz!Nd3mml`TtPz{mSx_IoqCysI1k4W!h*B<9{m`wu}dees8n)vVh?_WLiFq54u;8
zFxq@IeRfUtbol3DP<4A)xVhN_hjJG@#NQF`U+L^zA8^|L)7?P}uD^8#ZwUP5o2PTr
zv6@m5!<ah6KqRN>0fy{TxX#n5l(yHHbO$+vQR!8^5M7w9&Ln?(4+5g8fWB_W5M4tv
z=l=MtkV_INYx=s1YP@K03{?ka#xvmknz<4fwU$++j++M;E0>zb267I^Pda{mB^q>1
zAj#DUIBACVR7`G-#v5a@oCmD*0mhQ;*9mUP&Z}P)K`h+33f5x9zXp=>v=#(jT{CRu
z*RQ)KM9gvFB}7dqjwN66M5(#H5S>m}=jh^V?1sop;>TbvVE-j#nW+1Mw3CquNgZo8
zGs*<5uQMG3*o6mBi*d}s#*%PHXf2b^DsIxt_0mS8uU@4fa~>b#2l^C8GGR*B#MROd
zDGAw!wYM`$w(zO~a;ud>*!v-40}8)tWIhzUUmkRntAWkAplu|D>Z$`NaW(LHNs3n$
zJdpb;jUvE93p>h82YbS2O<;$?J(Va$$EUF`j79qyqsTd+b}TR19oXd5DjjTthjsTG
zSjhv))G0rGZ9A2p9=y_~8Rbd6`MC<F?O%VR`v>D&qT%mh9<abkACWxVYvfw3i3b>|
z;xn)K-IroZAxwR<1zH|!z78n+y+eU_^tlkHKJY%kylR^FC>X+wN_G1A>)vZxEs4N<
z;EOdU>v4hc7ANWzSJ6+&L3t_H0cRfce!!V9_O|qzz4NOkd$c00`<@a0*_m!5o3zP@
zJYH+M!*sC1013CzgX-bapnKL6KaR9RPor4!1dkd_5{O{Q@YWMxHCky_Z4UG=<^5wb
zF9*%bn%)mgedl{S@L$S1xX?c!U+I1bnUk~tYbY{?9ZLw`yRU-4kqe08JEk@|ej+`i
zBdb)-sZACn?_sis?-DAxk(@$5)^%M#vNNB^ywT-6wCa+m_3zKTF8{<WaJnv9j?~dU
z0~(Fm-x1V>?0IMGskMv3=FC3_kZVjx-pv=5Za-A|{L4koq8JK{#F8J$_0hzyVUL9G
zm_Xyy(R;m}DilzF0ZYnA6ddBy!Lm2+y_{vp5?)3pp8H_vUjCQzUay(b#Q#ls7yRew
z;;0X}{C^9a?^NOZO|B|<L2-`$B{U~-j1zSSuk9!yVAB#(>5=M&*jH%^?y;D@6Z7k~
zpa@dBKtJw}p>+AOn!QWZk%V1>f7X&rbZyt%pTSR-nz!yWMQjpSVti;0#ZQ+>I=qeW
zwGA#^cUd=GjRnt#+mqH7ercwRdNh-rEw4#$-kCLFFFa$Zx!BS%FPvxRWte4;f@()6
zgRcU^@bSF}(#nn*RWa?rkp4_TcoAZ2+^c!ZDme^;sbDsEfz~p3Wz(Qk8<CJ>6N2e&
zbHsLUH%a2do1eHT)vKudx*OfmcWXr1+hOq3azhep1Z8Z}xlx;65;~zSno=(n3)-?c
zTq>E^{qZ@a5#GoX1yh7+rycP*{9=2?28ZPCq6UqqMo_p|2-zH4lCo>)g@Z``{OMI4
zw0;FsF=7T(LQG)DWIL`?IE>f$n~C7ehAz&|&m<w<j?sSdtT$KuXF>DlCd+{$I$KB-
ze&%#hZc1*dSkl%Yp>|(9tg^AdsSWC#&m~hJMPkLy1(cHa_K+6hNGm^v!)H?~$U=ep
z(}ZBj@v39A?#c%V+TjNPI4$cLF=a>}-Gb%h&L#yPi;bU(xAS=Ce8JWJMWJw^Pr8xw
z#hEl=LC2gB)DS?zt&RPq3%PY953bHdX6)!`xA>=BqJ3N_SwSnf$!ZfTW?%$1DCvbZ
z8=V%k4lF2-ICEPq2RR@iefL{wbK9Fv_A}Ju#Kz;8+L>?OYc4+ywD5N5>!%-Bo2ncA
zr`*XmmQI_N^Su%=IgY%dwQR3x7Z$HwYwf%6IVcy{(F)xe{do?k6Frh#cr0p(0>IrK
zMCzI4+CVO9x-|iFJqM!Y7~s)X>Q?Mop}p_I9vO0Qa|{2LX5ZD!H?{`;``fC&mlnem
zPWsh9c^ASEm3bguDOaM@jvC^^;zVKJjNJ58-Qbln1?8m$VCS}xa_4-7e7E-o=mS%#
zNJ<RmzN%5Vl~(tmzwDl}#GNwBL+UQaG&E(_A~7vhy-H>bZdjul4^lEjMBU$U7Y*&t
z4kVtuIhbWb7}X3Bq$I_}ZPi5=8GTq?rtR(l66aY55g`cmWru&{W2RpcTX-X=Pfla_
zy8F=SoU_LlaR|H)x2hvKzAXJET+!Qb8dYSvJbe?c{vNvF+xG#t|NmvHRPVn?QaE4w
ziE-&7_}AAL*v<T(Jz8c+Qe+RX1*(~^#1?(xIO&C;q`Z8v=Uj9=t4`Bg)pd4(WB1&0
z=M!6>>dZf1poP!%jptI&tU4t?+5%sOHFDC1Rf)eG1IJ1c7Okee9Y6ZKrnJkMl=x^a
zZQq}MamY=Z;PB%hpLk_)7}lt?g2lWcjknM9V|saOE9vMBMNH-$f>Q>?SKC*BZkcQV
z-fzDmT!Y);yVgB&-EyPLuez-HurQPl_VBF$-Avhbk7+1q-=y<0ds8<EH6Z_7@N(Nx
z*cWB}U2GVz=RWe7|7Vjv5EV_;PX&Mhj57aJz=M%1Visc9hW{f~&SSFJ2b2OQ{Zr19
z6DBHl%D&9IcX<{91-S28Iwc)L05^d-k!kX_g`4JuSJT1Jg(Q+d8bXD9jcHB33;#In
z)HJy|cx)Zdm<6Kq!BMb7%f+|%9YH>j<Kjizb(Q2j89*#JRqyg<RoJ6)_JQB%gh3D=
zbNl7Yv_U0Cz?u=5hj&~9To!#MCm-nHV@qB!RWYkH?xDO~F8j|NYunCr>p-fb$!FzS
zy#T{)JnV+6WNwBu_a*ba>&`B;-BCTj{qOVr!6s}SXHfl<8Ot`Oo}BCQzbz8D&)<C4
z<z+k@(+XB%C77q^L`Wf8<eJm0mpYVRIktfb6x9Zko5^6yh*wJx5^eAvEQo$VL!IG7
z^|fOUq*6ibPJd+boBqcb6+_D0-WoTO=XHD4oE#Z#TF3Ok2ng!uOEJAhXyp|_(mI?U
zuz7Oaqz8Qzs}A`BW1Y9P)MzO`?T~V5C!21G^$B#Vl@keAM?twq_)Re|?rd@`%mzte
zb$S_?Q-u#quQ)}1;8oLydqaWHA!JT&(1}`Yu6PmnzEJhBH{8L0#GJEyz~lc-6$pP<
z$h`~z{-%l>g5@{dUM6K*pfA#O%WC<?%)T<8Mq9W7v2=s4wPf*ibib`C4fm3Kg31}7
zQ9*VHR4^-SD4@>Tqb(LvwrLOFq=8}(C+@>~Y8$6&uiD$sqyj|H(o0;`-F3U-a{U{z
z6|F~Y(D5dz`(+Q((;}K(1Y8>iX-wk50nd}BAoPnn6bT{+?KFp%@Ax<93!d=zn|H1(
zk}2X<oNY`BK$TX>@d6Ut%Vd&{RT#dkjnULH(bWg35F652QsHLN!Wn?R$<p=U4nQlC
zUT>&<^2&2WAh$)+c2bH*K1eNwXOE!yyq{3Q;Z9^83Ng^S3Td9Q)`4)N46@S%7OE_{
zDQAmSSy%-NMdg7;96|WtKr$pbS%UIczWvec5ja4~Qxnwxad^v$wquuSi$z=i;qlGh
z#$sCQX3j^I$TWlcJ4S5N&fAJ|yfI00`WAQ|!Ug^gc@w_iCEtb&7MBuAshefZ5k<`c
zKZXUAB6|pNo*=6+Ci~t4WK)(yx^KDnwkkxBm{b57oSlWL=0Q1VowC}p%id+Zxe0tz
zS9i8^MudGZe-kJB1p!@QRq9vrYyPZ{ZY4ik2q%@D|Jk)wXe1Q>V}YL&?}ot01Ey6S
z@MU{vQ6Pp$u*%bT5#LnKvi?C|ykm%a%F&VXb9WOupj!iFN%4}_57sZgtV*VW==10#
zQS;<UyZ{aR{}?2;Ya&(eWB*T;(d+}>_^<2yW%DC@Y5(Io-&ID`5^0+`JJ->j>yfx<
zFy+&Z0l^LU$Oos}<=D*+74}vZT`cZyk^;`yu*L)pdfG>BGw$N3brF>cOEOzt_D-)h
zX302U_kbo>1^|0wU3tz!dasP4YIZ50`ZT<{fx+!D_@#>v0IO}GEfMgTxz+rjb2Gi6
z;UfsTyfA@33U&Lg*D=!Q{(20TdO?yrJF5LZ+&Vnof8N^L*o9CLxVG71S0>l^O~RTX
zK&KPztKf0GZGnGL?UvTRl()emqIsDFl+P@~GLMFF(HZQdTuD5x|M?7;dXQKKE}E_!
zuwMkL$qCTqoL_&=cv{)X80_h)KZIbP+A8+oQcYG++UN7e;b<+s2)U~mf==@ML+buE
z;TtBU$-s=lV;+;TxK}Vi>-b{$zNKxl`mC5q2-$VYQ#GmuEaZ)4aeoxp(MrPe*7Bvr
z-xec0SNU2;ZT$d(O}q=fxwTH%{P|hi_`ofYj&u{{`{KJ__5ZQ;4%~VELAP*hJ87IW
zw(X>`Z8WxR+qRv?wi?@wZJY1if1h)nwa$7!!mMk4*X)_uv-g<^XDFq(UCM}pTr0h4
zef*!~XjJd9j}J)ak29o-pX{ICB=*<`D4o-PH_EO&YW{hz3k+X80C2VegOM&kDgriJ
z6d769bE3*8#VD|8NuVLA7;QyC=Ptfu-`S>mSRj`-jZxZYDQ`%R4IC>(kIlkymCJ5_
zZM`wU3^<2Tx*dFnC2ky(7ik~!9LFVScmr&yA6{8?1nzu>Un?EY<LhQVH{(2Cz7AoD
zz0msDqoNM7h_a{jKYNON#rZ_#vY{Pm%6&sZxExXzsZ3xi)}*wCe_$+xXiFH<4a#MR
zFf9ZMvl&MvE8&3bBbj*na>*S5qal`Ag1^k88@lfi{@ZH-hLe!9fM5W;?GU)p+uk(H
zBh^X|7a`{uh)M<@13SM{yHf7{Bzhd!VFb8OHl=neCr_C{k>Fp)!L-^g;Oxnb2z1?I
zrd?W|rRzhpL7As)Jg=J~m#MkJouz(I*cBfPM4tRXU%Aw}=fu;)ARv)=@5`1cmccLs
zG8Hm)u09&>TthL%*v8B&xsJ`%HHO0u-KbE?9|2Z2T~%C3cW%QjpKldCcO7xTz@-s9
zJ*$nm`7aPUwEx5m{vrwL4QR=<Wq@VgKk7E*GEfLGP(l`vBoGiNArO#_hmsJ5-+$li
z;NO2xi8%kYxLE$^Sit)U%I*0pqa_vwA4oQG?^!_@B&D1%HR98DkUCE4v6{)Gej)hh
zeKqY6P!2GpLB+eiSlpxI?7=QR(5F7v$6fZMdB5532T!?W5H4}T@e}r#1ZatQdMFjs
zY=7OAg)}tuybWYtGn`T7xZp{RsI(L(A_)<69r^;EDR3#P7!>S4JIj<eG>7Yxc4uQc
z^tFQN=NXX6BFZ1R!UmqRqgF$vJsBtfKVX0{*4I*E92{2qcmxWdyZ_<p5BdCmB$a`H
zupB#5F&dJ9rQIy`fmBYQ7FdwFfuiu=tFHBpKAb9e-~H@1m{~W|a>k6AvOD;Z5Xd&S
zV|Or6BTSFoCjJ;cJedT3RBKw$8q~-1UL7dqK=zlCzXfhmDm(saq)fr@Nl@>qOpFHk
ze2USBM@xKjeG>|`eX(K;^|uwmoypKWr(+D_J2P4Q&ci~*HYP>Xh#k)>;FX{Hg%CA!
z+{KD}>5lkv#`~^_K9$e%$a-BWBfCacs&{vqR~0`lDMMHTnJm#%fcHj0e89iy6KdPg
zpzW~5mdP~ip2>wp0?7htLqP?uG@ti!#GV=)nYcDvI)RX7T9au)gfZ1*D<&>HaH+s{
z=hBn7HBUHmxqg>oC>s*IRqrY6cv+T$`<rfGuXrqv>-a<-g%2nI3VX$U&(9>Ohv1Gp
zcazq6{gi7(mc~Lutl1k_>0!s_ihQtE0qRuYy_R3uyiDmE{YsPqb{6C7T1-mEy557@
zz79q-p~GhA_vRiHw<^Xq7USKQ(>c{&KDkt?XXjXaU#YP&A2*)1cKjDW)~JWoALS+E
z-cu(_isIHph@bbisO@%+DZSo%l0s9l+U4r%7<SEkXrK%;26vDNiQzj&UHA4wf$pt7
z?vS}Zd}-yaiX5vyMu(H1?X4sFlfeBq<jhYKwx`Z%gULB3Du>VX-AH*u{YpO1rKEnH
z;+)~@FJS~>|B(OH)8eM%GvqJ;9ow}(Sot}tW8=gUuby8Fg?2*BnBBhao(%h>?!|r}
zS`*PmuUmsZs@I_6;(^wfl)d94*$Q3m8pc>r1$H^nD-d9=9!23K7EoIeu9<o{g}r47
zgkt1B!-wENjXbZGI%TRbZJ6U=EyHaVrbzdGEK2hPXB5d_<}Ya>ya%cgs)sh$4-e@C
zdqfXy|0+C*q18JlOh|s^^qX@=0!ZL>fc{6F(4()QHul6<AeeGon^t>L_QX$iQkR$c
zP?sjSf^Vt;<)F=PTsVOoZO5$BwepTN2l}eg>={m{qPY{h2_NVljgu;!W9zHidMj_#
z9J%zIYk4cC1CV_apNhhAk*|8W9`(;}LvGJZVnj=EaVwQ*VL*Mq3lEclY_s$s)S;N9
zjg?OYn7<&X0%ALgcVf+Vt&;>dLIO2`h+lz(D~rYqiFHW!oqrah)C7VSn%h50jdUJ~
zbW5e)7#VH*+t#O7!6xO*2L3)~(cvoHeGgAO`D_XAf%2E}qNif&>__Ppb{3mm{V;&K
z^x6eaDU?I&9Hd0E5xfzc6uof&S(Bs)p{cH7&Arn^%tJsjh!KIMQF@HQB2yhIFxoM$
z=eqC?KI3juF^jH28vAp#@%t**a)zCxph|JA-?JDD_&I*a-AH?5?X4f!V%ct+^K-q-
z>rNl1-Vqh*;Sx<V6#AI!g@4Wh$la|g6SxH}dDOZg1z4v_5qZB(+D74Ho2<8oI!(!o
zNXbEq!rbz{_xiF!r=Jalb7Y1mnbp?{)`{zhz&as?BU5FhZ9WCN(B|1n^_^qJ8)J9#
zY5ecOo`u512&S$?OdxG6nf>%*pk+sBpZKcOA+unJ9D>_c0>&yWwjxE$RYdJ{1k|ks
zs;R+)JA8HR6_aPI?PQmb8jb}!gNbnx&`UfxFvZvmB>^9H)|5#KlYR;k{?|qYoCg1{
zg>uH=YLvHrx4~gpqWy2?#y7TugJgePy0vZJP>wHP{s<F%thZ+*k!7+(x#tk^Rvz4=
z+7f_hhOBA5#5m|>;CuBm#G39*oas(tS^N}X&x<=f2O@!~_HQ6F-@%Nf_TU-g8KFW_
zFddbf26adkUkc$#yMmi9DBfE7N;+SeC$uZU1&1OgP{O-Xc}Q$~J<-U?HG<`o)6q}>
z8W<*n!hP)JJ1oHznZZMn<|{=&T7e<G${St&*nn)Yi(rkd*2$d&#;zM8EXK2dT3`0f
z=pH>S57=-XTKB6hiAk;pabriO>k(`zP%<&1?#=Kz%#>K-_<sJOpyB&#><?Q^%(8+v
z<{&V`?MQ}fvZ20&m^yOw-QKrw!ML;E2vdR`257pKHjxbyqGE&lwg;)ZjNu=(oPH^3
z6pntVrg;W3Nx=etg@&&U{$fl!3^71^0+1Sx6hX9PO~1fhTH7=`Hfqlb;}1aMJi_qf
zPuA-hVuxvr5kvlZq*&SHq%W4^l;?;qJF9*UV>{^X^z(8NOv|UJOf=-o0FKe$lR1?f
z1Sv?kq#6;T42HBe?YuI=^HycBkI3B)cz(GtkRtWv1!u1Us<Uv%udZVkmy8kG$HwKD
zoDh4VFrR6X!NLXCr?ekE6m;v<_hOF9zvR#Dr+=}shseshBK4fUrPTi_!&zw{g29+Z
zpY^?=RI;2*Wtm;XTC#-L*8tPzY(4qOm_+-EncTyhm(R!mn<z13n)~V&hI0~a*kCzA
zXI;&??m<3~@l?jpP2Fo4nngKL-5i?4g<DD&;(ND}{H{!fUc}6)x~53_4*Lwl5;Vl-
z$`CN=f9#J#FUC2s2zg-{(wYC1us=!xA^Mk=34net|G|i5MMV$Oj|pVWeHaTI3BOOn
ze!mz{EOHk3kj|xF?Dx*@EQonKfwS=bd?$^P!WqHV(b6$B4D|QGg`E&H`ZiK5)99du
zcIBz9QCRX_kvjA$GX=)7a<dfWPDvTm$;CO^Pl<D$3nzB~FScdur3DU`r*+%!{OAhr
zaQoQhJRP;vAu^;2`ihHR7ZiAs3JOXT6O#Sho?!8(0b%dCzZhVhs#g!B;-fA)FeAxe
z4Gi0c>}v&k@aNV|&Tx~q8h#V}9oo(YK*0lo87}*sj;IqfcHve8*%Y|^yEv^YyaHqH
z81b5y<4jju2|9%EV<eTXRH_#7?V7MQ;;`t;w59`Irea{b9$OYK>%MN4%_ljjn!@*%
zE{OKnpHk8h`!_?3PoBOE2jOfPg#xlx62G~RWEUSnuSv@$&6B-rjckrDI;nyrm?0{Q
z)>jp(yR6_Y1~1X<?hN4EyWke!;vj^_yCc5&fs3tWElE_cu`ws*IGk&+O>IAtne32`
zNF;GFZhAZ2sfH5T>FTM&-vX~J`qw^3Fx(#s2hdglQr;er@>q^0o&WV!j}kRxzf%eQ
z3EB3q>1XxjK)1-SJICGZF*liIGMwh;`cxEz^8KJCBv_B4B{&Yo9cw)nFq)+#T7Ef@
zt|CHT39z5lVY+oRxXwI;#+&7{U*2|Epm$l({_#d)r;`7pI6^d|^uX0v`{b=PhC-m{
zTxmC_x2&X=ZYDc(c9^Hu_YNdqI_8DROG$7;%+^KhjHn@vnx<An;087ff#DDHeEGhI
zZONl)yTV!{i8MR5PC2HGnx5sw5x0u11irSiHlUVSX+MQ%8%oq-K-!=8<}^v38oy*2
znzV%r8h<nM9Ad^trXv1HWR;BWlINwQius}|EVz`=epGsEt~wq`(Iebe@*TXwyNnZc
z7@CEJZD(>oEl$W|G$OD(S<!~YVTrMBZx(NMY%-1iE@uB~9<R9$W$p)%vuP0_kyV>X
zW0&5lLUSx4a-V0z#i?Xwqck4X0e(sOTw5be6ATbat8zdVp!%nal+w1G5|Kqw7rO)f
z<vl<V0rCsbCsC2Km~0;*4hX$R#<lT4BI6^8n!Db3L-D2fNbo71%X^bnu?$B3Qu7lY
zg=khFjJ9dV)w?QJD+ltBzc(Y;a)ITBznC!gCOit@nBo_RS1n_z;p-OCgbGaE36eK6
z-Rp)Nj?<K~JdcC+0sc*j)d(GjI{W3Ga^5nVAYqzFpB{aS4nNrTM`P;B<=#e&OOlxQ
z<=EwIOI!8IcC24{gff)FxH<Bzpg?_3!onbDd#i#5v0MuLWf}cC`-~6@>%VpQQ~(q!
zAR0iU)X*WNhY>10E9P{JDpx!zLdnLZ=-(QtYy(9ZoGH!X1Z<fxlNOXIZ4o~z4Du49
zFAE$+73+}&*~Km#ly3ETX$GKX{TjbL$o3IwI@}U7*^Mp`qT~ohO_2j39mOoP2@#FC
zVFPv}jo=$;w{&grWRHXARPhKffA!|3=RazgJ?}jj&c%4I$n!<<T}hZ+zfBNF%GMRy
z&qWM!@)bb;cw34K#w@4Ja;-b=o&hRIbY8)p9phX#2a<`A8zJ7o09z>gJ9W+ThvNSC
zRQ^sN;Ozd6t{w&8Z<A75t&LmNe@0C%whVhT(Uv>Qmq*^Q6&cSNth}@2{5bYS48BV-
zxMp`V$*qHyo?*a$w#7|~59j9rVjI7NJ*Fj|XR@D9CR>4MoONE8+YP?Axfdu(lL$=x
zpnlV-OyIDJI8H}J|I)kTYs$CPuH&oL0Svdf#sNPN9XnV=#wCM<ngPZ1^3~H!OCc}%
zyDx5S2fNVyaPgYsvwk+q>em;Hsv3Kd?Hia!K9uHEhlJ`6tN0JgEJ8XF?AOwpi0iS&
z=rsa$cK6f|gSMmBpix5!8_+E?uyKC&CYYTl#xhw!nac7JWyS{-i;7kAz91LUI-|N0
z9_Yez;C{={eTNUezC}5h1{2D>qC-Eh^IyUGLlK6mKkdgDqpoj5u*<i+Z-xa~REl*q
zv_PR(f{oB3FC%N$P{HAKT6^~lOk~zb7Kjp{!+&X*b)b(VtM-atR5yaFeN-w3fKj5X
zOMxJw=I=fF9BmYGIsgIxLbmgitqUl_uSG>zjfMQ_>6rq5ewR{7*REeENFD$s@t-b+
zWy`P?<z9c)SYaxiwt_7cYn2`%3Kso38}|%Z()>0*>-6{U8zWb63a=aBmk(ccSh_zl
z9Yh3r()34fk#2KW3A>Djf`5V3|Jl15H-3y^30>|Ti~LR$@}8ZcNsqy<qH|<L@0*SM
zX_vuB$YVUAZd;d?vzj%$q=g>jMpW=PmyTM|F2LzKZH(p&ip4ggfTKp(;RqgWD}e&}
z0au=^ld!s?icY>lVp?nSSWEx3ikN$JkJax$DM<ap-+^z*kG5pePxe>S1%=CEi<&kN
zkB#h>Oqwg80W|#)H#E}RNxBznOI;+hOBZf&+jul$2cBS%mtp0{t<zT=%ZG;KBc~*x
zg_^6}X;Qy8K_sdjXRULNkR+{Zc8l#IruhWmcVPHKY5zaTTr#}y;W&NqmgxRCd9oW~
zcaxVK-0c#p>`HFZKShcpv2SxB3`ZqiWw3JX>x0E?Wl&pWVK?%XZr?#G8~O{L?@^+4
zOjiFx)P7J6mL37q^Wg2e$W|KXprz{4yO)<Au0R(+cw1z9qW~Yftf8$;QM6I|fMS=l
z1RK6@1fR~Hwt9FrFdv=!&H-ZIGT(Ye*q%%6*sDXxz*&yPh`x8~)CMkgCT<De#-l5^
znVdn%G?a$^Q<I^?YPM<n_}fFu>_8~5F8K`C4cj#w9g@0s@)aUS3B0f(H;UDQ@I7kq
zX)kz!VO2zgHa}_3phCEJFc*^vol)eFh}Twy43T)XLtsUeH21sB@55(LfrjMF7zBeW
zuhag|ExgLB@AWCZOA(zVTGDwlRE0zJ_6eOyC2`gij+r_>U||C#jIaHaf~)!23{2eL
zDh+A<h|Z2Y@&K@puGzg!PZUuDUPW{B$TNb_UyRR&-XqwBk6%dC$^_Lc(D%cVcjHx&
z4_`pk<-}Kls(NN4ZUs!NX1>o0@}O4@*jP60OWm~aEy}liFB>AqDJgSYF{As#UW~{^
zh*-PTCBw8$#HOTsW#!nW^h2ctg_G+uPBf&ViSt=YW_1UWuZ9VmEFj?Hg!DtakwL7h
zB;aG9D@+I2%0J^fVsNYSWe~phnEsuNpM+~K*kZ2;pa?AnK<WI`E)l?oH0mpnsMP!x
znIFh$(QRRv_{Vbse;SIDOajXKB%QhNVYGYek|B}R^G(4c>B=AoZG3ZaxrB}O5nE4J
zfTDP8?)ebmTUg<|^mx1JJQ+~<Ri|cap*rLgEwDD4T>B8M)OjV`V2L2b0MpNk_^z>^
z3agjS$oJ7kt6KI)--r)PkA?S*q{;7$7L3~lI8Zu?B^kJ5PORRnzu{JMJ}-D64+(v7
zsJattt0wO0m9n!tY*pJZZQ&>|hb8I<V3#z2TBsmh!H$!aSpvWtpd8u%2i__%DHISB
z1DT&`#?pE%>1Be|U^+iT;RgDCj{R2A98txm7~Jrpmf^|Ky{1oa(;%Uo;%r6A*#90G
zcpCU#8+sVOqM4MCaxAI3sw1t2U-&-RVc1K)_~@QWp%p2!c(W(vX7)^9l6{h_*l#Ww
z9I_0Ln0Is6MeDSo7LtC@+CCN)zAMq<k5>$n{3#}@%6+oIk1g^+3h*i_{GFQLoN;QJ
zvk81|un|*~Idq?nBE-x5pB(Qg$6)?PB&^XcZSX(jCWP(}<@4_a|GTUKlp_GIFmMuK
zb?FM<xo|!GcfY^{2j09&o6}I7>49bgMrbQ?-VHwit;>RQKTX~e<(udqv3E`ybq`VV
z(#kv9?bsvkRUB?R{o4dHw7T5fv87--9)K}6m^y*f_X3q;@E<vE(qf1p`d=%P&*f30
zdalqO`?#U)qG3vRD?GDol~ABXWG6()a6<rVP8;bvHHdB)0HJd3CDhh;1U{S~DD`&_
z@wX%#5K?mmwd9+LLVHW`lc<eEwZ&)8U&p$c&*B_&`4o2&;9=F(Req75^)y7Oq=lE*
zK)NP5Sy58oE7zi+-VObLp<U`133Qa@tmHb#6Pd3dF`<T5znB0rJq`jUbUbW#t0)pZ
zY=Optl21{(Y{}wB1J63=;!N$IYHq=Av3DpO=<}adLLk#NV&IP?M2@PqeV}rtN_J(-
z2tQ1SzP0>zsjPs}L%042Z1{LqFfTwQwY_;q8$e1Wo-~}zQl&r+vF8(DNcwzfTu?BY
zK!7dE)1Ro*Eyp~A$#yGtldJ5O<D*D>wx`+d9}r6sq}xzO4x^+uw@={9I%|keD8ioc
znVWN?Wl*7U3dpjzweGVc^apDPxn3~QjlN?1@$zm})@qw=$ZmX>HtYsuOVmv=4HE*H
zPn<??eX0pW^`OB-rFg5d;0Rvp*bHv7Q8-4>?g+G=W@s-}QKO;&A@EmC5i0n9P^6w-
z={cmz%fR{*jp07iJ*}<$$P6Mcy;UQx>*=hd1-Z*!&Ab%iyo(VL%PIWBuZP|g8+KG6
z6!O_1%=$U5{jN=#NPbhjRd@mx+6Z*Tv#zKaZnTwa{%qR$xSkNk`B`_?!7!!{oliyG
zz;!JdM){k!Ue=ANRv%xHZ)~Y;>9b9RN<u=&E;31)j(qp$kO{h>Tb8+(jV%-5s4La9
zQ<x3nx5!admVp`Rm_CNuRT8bR;9q(|MCpdxVgE2B01>DE!;q0JliqqB<|+5;zMxV*
zI94o%w!6L|WY?qapwrBqr*~V_hOmyG12Q_fEKooj%^u^VJzrx-3AK#lH5=QD_2E@=
zk9f9J%WJ{P0{PFTr{_T)2Gb0J;&I)R!(EcEuF<Snp5`u!t9&W0zXR~DF`#`u{4|IX
ze)7a}f(^dk+W!ELDtOWo!A)A#$4nq-z&-+N4xPGCy}oBG{}f=XI3bxAJ(V)0Uc1+T
z&^6%xALU>cKh*~#QK*%_?uCB=WUxO}?*G<YG&}H;+P@G|q6V{KsxwQO(Iqhzpm6X1
z6q)XNlVxNR@x0u5t(tTwW+T-}kmq_mU#Qk*V;1}?^ynD1nmQkBY7!B1yqyCSC|J|U
zE^ny0Uow-Fv2H}Nn=ZP-bG-5xvhJeU@)$GGo!+NWK$=;C(vU`W(78@n?oP>!o+)md
z<$})e_E?6Rb%lIMI=@lIDYiJ9nvj2dbk3?Yu)Or9c}1!Mo(NnT_?L)-BWw0v@tX;r
zp}q+DR%}1GQ%wTqAWfdy{2@6@F&}-k%)mos`(Ql|-<cU*9f`P6M(A0p-5hz065r=Z
z^`p(+ZmZh_QRwg~tn}QGFa8?{_h2Zq@Y6yLYOWTgXJ){Rst{xEG-)yF)~wg}E;Mbv
zzQna!>}FQV`U`l0GhRvW9|Wdb4+pH$qx;6ca=W^JLnfsP-edgE7jY?Dbl{ed!c=KB
zo4^)R3fKJ&6fuldBmdh=dj&#5INrvnrFFtl%b(O}pD<{bg<lO&;wA#1ssUN`yT>gw
zA*uooG2{EJMD}%L1fE|UXw3;p@x!XoCb&18JA9NONF>QFFDlED?`;$+zW>TYNl9Wu
z=v0)$ggeq3%X=OeSn6Nj4#-AMJ2yfNpp)F?I($NP&5)^dg(!>JVJHwNfz^FZwNb)j
za_{G#^u#6kN^bXe#X>3OefD0e?lMur@Z(3(M>iKvyG95#{X$Xs;S8D&TX-pLy!T`P
zMd0f$MhlaYAZ1@oM5{sDp5>I<&f|o#y?5TBv^U=usf51{$$~rnQ2*?){^!K<Zy^|N
zlqiXS`X#sSboYoS+&;_mjo)B(Z)%R}k6k(ek&(4`vgF<-HOHt1XQDER@28XI<x=>2
z6T%%uK-aJGoe`K9?1gop-3pJm=gP1l3$Db2l;_5&SHm7#;Y4yo#@*!mn!OX(T@p~!
zm=v&?E3Ri4B2OKztr1pw(_XxDzWCZ00I5oBB=*K(UHiAb)}-Qk0eFWeEPU8!Uq=&*
zNIz|Y5i@r+GA9Z4XfYILx5Ov+uMdYW(jvB0WRY_FYzH0b4Sm;X(Q{pWadIuYbP-&e
zsawXwDsV>?${hdQ&l=0TdhIVrpKjwjpuWSKhklZx-lH<P5C)<uyg%xrBGvI?75W5}
zUR}doy^{DRQnpK5c=XCy4()ycWg1)e<@olvwC1j!O+USSuoq>kFvwqO*2^TaJM1c%
zae|5^ixi}Dy@$}sE)(et9Xv`zd?JaaVMExp`}uLQ9N-uvn$V~{Uw@gOz20$_B6bU@
z#+kbxy?MeXq+ta>u;q@WpRqTZ_~?o|*F>|Heye57fp0A)^uRa_aD}HDXJc&RpY0mt
z)w-kBub%A@fur{k-z6eq9@h1Z96GmjA22`@{557KaRYzw6ISg<=m24agIl4%eE?M7
z-<0iMH|tsG-gHcR=-d_+@m?&^;SAR(rw*=-9#-PEPCfbtA(u`OGRW?wQHVyUCiQTy
z7vla6MUl)8l2O}6qjfu##5%n~G@)JcS)|pD%%a+&DX{-tF`4dyYgJ^k-f}D%N_bMR
zo_f!5Rn+g2U?Cwmrd2s220@!|q-gq{3kfz^0DtQTs><Cx(#C#qd>qh`EQWiU#(m5a
zmy+e&VrEv4y_p#^5Dolrr&bh->-UoDn6a7Mrw4>PlpYy}$9s@CgePg3r<tN~8(?#J
zy3uAz=wOr|SARhpQ^bK6st>QxnbR5s=Kx^h_SZyVB>-v>5H{cz`rEEaromEBs!SYq
zHaD2y)5hEIhN8Z03>96TU!;;Mr7F(?%eivnz?H3$0-YRY1glR?jLvDJTqZ(9W*QM?
zhi|R*w3z^XvLSlfg&Rmk51i&HJxXEqdxlZIYzhOLjIhYvNaJga%`#HEf%LbO;*Y&P
zYVQ|?jYeP4hs3IHl{pRQeB*R4k^Psd_(#yha{(C2#z>pyn|sSxr^m-T?m!&qhgW$B
z_r=`5em|2j&B@X~K$nuEToLsp?N0f6Ew+UVZ!axZll}o$CjHBr{M&%-{woIY|2s_p
zOx+GU(3XV_^`CgP>aKLLg6+w>#xLdwFOhxN7w@Hhgh4T#)7l1c$#~Y@aQDjihHxo{
zp5YkoE4X6i#ie?$<cyysBQOpBOdDF$6kQ}ba|017Ymu(mpi>c8xNKP^5IpBPFf{sE
zK;=VI$i00*!q5H~L-j%2@PXLxwvqfn4*AuvZl~oa9_ZhCVHng{fmU=G6uc#FE)iXh
z*()|`Pz;BHepM;>K*^lp0Ed(p2O*XR)8c?XnW_H(1Tb>Zv>KQ4Nn<z4tFGYNbQY%D
zbg6)Wk3qw_m|bw2jguO0TRzhx>bh_+l5m{VI1UTpW0|f+R6(?DFiug6D_&qe;idf~
zmKB?r{aNy;s@UR3DFO#qe&Fiu{NORt4bY1Bhv4&ZyuPdY-Pq*rWfMlxF*58}a&8EH
z>6kT6F#Lx%eKYfY9<DU=;84VKW)cP{p~><)HaA+9qYg2;1qgMEss4&q3u#x<8YLau
zy*dOX$>X8`Drv<xM8z=7yJIZX7#eStIZf$zZ{*#h1-}$FdC&wubxt1OpcOUeg8o;p
z;Yf3DY|7A+{lXwOt;Z)qlXA<5nVO%esxV;Ji^00yvM!5GkzR=f3?VYO8j}^J2oeau
z@N1LY0TY9IJ)mN_+E~MyYrb^1f_2`f&;??DFp~U!&(KAxav#3-lV`pMnF6ZQPyo~k
zAm;&7K<cQEaKhR}b5tcQ4hiP;`poVE&`ZnNAnqPar!jXh7Giw;{MmHRea_7FQ>Zyu
zEK>_YeQCD)G1(^z^VQ)t(*qyTd@liHQL<J%-3~S%9;k7l&$ElmE|2<zPGnWw-!7;~
z4)8z|*0^4GOm3r0-r!B^o8J^V(7j>W?Is6zunyPr`Pm9XSKyGMrg1KwmU17suP63M
znPGTb6otd}yN4410(YVXpKL-JV1G>??tKc<v2OgJ|6w;kmHhz30hs@tY%||ESL+9t
zH|Rb<4xr+tk~F+>iF8nOyjd8YPk!XiCM;BFBo?glzT)CqHO?dkP<)K43H&V3NLbU~
zq2Xv$nmaXd&c-MdD{RG5hfHql4aK~Le`0g{h_ku~5Iw`q*vv-JJX`wS(uQzVc|(}Q
zh*a}X=`hX=<<~1zoB@Ii#>~OJ{;Z}3CgH|OB30a2gC93b&hz6aO@Y0Hq^IiQ{^gL^
znWEd$@oVxu^}Ay&vujeImpPCm&a5hOEr4^G_!qo+`9p*Ld#``5cmJFI{cX4EK@Q8r
zVco}NHi<*%vM}B#ZQtTYm}p28y1yk8Ke~ABL!DE1YP-N#!jPP8|GEvvMh6SCu&3^(
zEInG~&oU4Jh}F01aHNch(=hdNWBbD8SAZxtTFgoMz~Vxu>-hO+A}mCRx_xx?d1N7y
zihv<%zpL*z*kL&y9pysL6xghE4p6yS{g^Y>miFVQcmB@xx?*2+M&uA$i`PAzdR;+O
zxB_)<!sum6b&o=M_zNZQ_11PX#<`=pVpkVGtBQ&Hq*9%}?iKIy5AVy|EV#4sg-PlO
zErdsYkf|Kdj_ME4)7g!#@%>9GIcUeETnO7g-(623-Cc$0l8m$wF)ZuwsoaRnFCC(c
zWHm1s^Ht-P*)M2VqD!9lZ5dn7{C``zP4FEBMst6{$E;wBj$tR(=WBFSOBh8p%YvRY
zB--YQhGe53hX7Mk4JJZ`jooi}Pp)mk%fn<h)fgo$&fj#^-Z9iv{Jk|93xG!cuK=!b
z>Eb0n+@tNniZpu@C+!12aq>8s!l;DI3uDM$m2GemyN*lY?4YQr?wqusQjK!1oXGop
zPkMg{jaIg`G<*#hZZ?uGFCRvSWr|a|8b7FYRKe(zpda(FQd<N3%5K_iF#LI#8^Vsi
zhn0YoT)Vk}g-rb%pzs(Dc9AABJ!?-&EX*VD1}2KJ`Q+RV+|YGMNhcL=&fwRdKk<Id
zY!<JHAE-YDVRn$7xiw;7u^d;|b@J3}xV@}2ILFc$`*&^f>JLr&UoQRcNnr6~qfYl5
zukcF6-MvcX=IImrh?ti8oHi_zgg+9R+ntkY%<fxyI-V-xnHn`ZDVja{X99BKo0%3(
zg^7+NyCHv?`FzE4NIjqERCM6f?@~jf<8mLl6@y6vAA6vH>E2^3dh*old5?wBhvt>O
zC%aHZ+-;et41^wzqF3r;Qo5C7zc#wY*_0!IhnQgm|6av;Ud(nOo1tbi>JJNXg3_iu
zSB#r{w3m3(M+hxS+O;@JTK?n{1Nowp+3HshJbRB(LZ<12Mve;UB37Les|&=pk~_C=
z$OrUHl|S#j3K@Itic&8+M}~t{@V$*L@_!ol=HOC^_H`l%bV`+fr^VGRAK1d&!0#Z!
zUtZCnQNy=09+B`S!JEz{y_S9)(##1OiC3ChY1zd#eh@_V_(S(w`&O^`EvC2IcjKWs
zweax8en$)pHj1Vf)1-{XwuVv~j))d)9#;_`F|clkHiFwKAIaMa8j8S=zDR6^;HV3s
z&u!YX78UcGz4WO|2L_I(uA5nCTDtC_RezYH^~w%}OvBg~8z#OE&BfCKvQ3jtXTQWe
z*qu|kP?{*~i=c$qcN$ZG<VY{$pMpWaQU)p@;@;k#>|9PoQmvKa&;GKpR<Le%!1YuF
zUMvGH_F!umjXg)ukR2eC7XqNa|Ch;2RwJB;`55V2GkH_R^e<<mT*rxJy~6AG5{E1A
z_Ci-B=#-S;`z*c8$$Mw`1Y}MRktmZ;XF$BNE~#R^@fut3W>zKP6`h~EbTh_3o8UWT
z<8l#jbErVqUNG8%^q%eWJNC?I9bTzCgg0Q({S^nJYrKa#XWk~BOp<io&taG$$Q`@0
z{ol7`jy{upj#fFnJJB0ZU(QofOb|K8mU#*?jTjV`Uk%0MNmstbvA?j3rX}6P0HB)g
zN(_OgEFl}Oz6jLHm9Oo;ix$8G<phKU;G51$6UU?-BwGw~aZ9%{0h{b(KI;;%D=mqy
z>;?}mWMuZeqHG3wlwT|C<jz=tHG5CY0X=@ds~>Fi>&&_y4@T|iZ*`9L?RY)wHEB(c
z1DR1e1LIiQB1-TjOZkcH>L~01BVA$prZHK*uGW-SaO`_2-Ym*w@$Jv44!+h{Ulz|u
zTGbs?DUNArdWU}@)$VtonJM8LCl%?(w?gCOTS@XBpf)?UoLL$*|NqFQ|6Cm2BzK#G
zG=u+vGeHM`Xt94k`@gd_z)6et|7of!epe>Fa+Nga1rjTC*2C!ycTI<H86>ixFb12X
z0VdDa7la6d4|@yYU$@7J95X*ouqAl?1JSPT--WQ&s~|Cve&+gsFoVfLG$y?MY-vW!
z(VZBzE3ntSkXXu>`QmcPz7KvDUo!t<kNbrIw)Y`cJmCvM{<EZ0-H!@dgMuA#i#B$a
zO!|X0RZb@IR-sT&SM<czIV<*3N6U<mR9*k&$E=5}fwudX!rSz4xrMGc3tzmzoW#yH
z2lB}S>W7n}anb<Khf5Yqb`MbCrW$m(B}EYC2R@kgW#zCjP{;Zcu5I4lLw)xdb5&X$
z`br^pLCztyu8}F&g;*a>JYAcgQ}D1&-_k8+#gTO{hyaB(i62*7ey~Ek*pqU#*LPNg
z<za|XN#o$52M#7ODAcNs;Gd^~bhH9X>S6_;5%)c8!)JfygZbNFPvi-Ony9WUwgcmw
zlE@Llw*R)}&@zAw`b!gK?7cd2`$~$EpWe9@@v6}6ar{bMb1S^g`~wY!Sz)dF!5+z}
zlS%5-NN}e;@90jr21CRK;S$Xo<j8DSuC3ODwe()Q#Y7`KR;0@b1e&$DxrjQ~=G$Fc
z>D%P7iEjkOB+JUM?Qw+t88Nr*BRKAvI0&K%3)NeqwNdnCv*}B=QFWNYe~c(gh?w?8
zZRb`%)-gb8d@sfPY;J?A8b$49!rjFit)g)88IrI+($&{Wqm2ldT|MxP-?v$8hhzOU
zy%GcsfHnYxb75$U7w2q}EoF*Ga5XXBc7`=FLEEKj>MRV>Uw_v&d~9biEDT%Yi1EC{
zV!$V|;QuG~hkeiUkoS%KLjNdLM1^ZS4tSAWdZSA%BN#+kq<tr;1_eLL-6^=|OjX=T
z^)P%uHWCO*qVJL(x8H`;LR)`<*&K<|8H`4es?qDy4t;~=UW{z4t0;xq&`YK3w;#cG
z%`1WAl@Ga8PYZ315&B0<ZqfLAzAXk7478Orh3toY?OL04j5~u_LhPWva$g-Hq*y<o
zG-!Lj!RjOdF)I9VYew5W-1pDB#+P%Q@?SG1RHN3-%j1pc+EhrZD+1<tq9sE)qytB%
zQmQFT^@lbEJf#00ZQ%6)Xy?Db!5-H|by9rTOP+w7WV;#heYxfr`z?bLlv4~X&!T61
zJjGN#d9iIvPf$~2)gg!&BV0Fq2)OYic(x+x`mDrsyqQVgNIhg+`d8Wy$tb_90BVXW
z4#|x0Nk%5Y)*&wI(>u*^rR7H=^ADpoF@O~lvK!ckPkCiEm~KGiRR+(D(Ec)x(l*qc
z{)NY+;IV;cj-DLu?4G#?9E&MehjO<Zjs%TQgW=;0GvBO9r)1aE$1IM`gVPU$TJnn?
zqt#n#mj5(^@gK_m95Fg!Ms}=9Mi2wslO)9ap~L=Z2Fr)`0-?FYnf}RvgGd4b(m60m
z+|S<(NDd*@efzqk{H5TSuDf+*A{)A>lRQ)!du@!SmHoqQpl;Y9o+SO4b1-xp{66mD
zpdnH&3`GFt@xJHP4GY-%jRe%s36X#N=a+fvi|C0vtm7)2^6%oe?ol4%&pnQpyYh$7
znC*D;M3!kh&1!pk!s!oO?=%*%$m%R?EhvMcpnJ?R51Z`AIn(SjtBCw}Bgt&ouGA+m
zL1$fkgl`{~I*Kt8+gYae(NxRcV`T%kl<6$$AGAnl%sqTVQ-9nRm;Zb^#O+CgK)})t
znOM+6wHLghr`5f%VqZ#BEwqzvRW$q_mX-g>7!hHTA7@^$tzyH0HGJs06SU?=1&0be
zQ;v9k%dg}O+cP3EBK~^Lis@$ueLvk9QO~4u&vf@^IE0#(xZr@lAA?BeKzsUI4&-x$
z=B|5rg=R-B+zz<+T=~=1)34iP_YP)yd05<F*A}}zs4A2Dja6i89hzQeMqkP2Bp}om
zU7w49N7Iy}CJ8e^uUinCtzWP!;0Dcwe&qAhy{wHh3`~)T5St~Ca}rNogx0@np)RPB
zHg-PVXt7a1>cU?1q~j!mP$OfKh|aFxs<KEq+7~y0j75%pXDD^YwI>EFKpH7t<X0Qs
zS(dIwm3S$##OR{iD{Q+8=<#$6&9L#w&qh@2jRv3FC_bS^O#EO=hy8u7pzbu}q$lK<
z_bP-VhXy_^MEk8>rbIh~bEix5%z)SY@^kQKZDw$Bn9ev+v+jHr6lC*W?A>vSZ3n+Q
z{WO*rxrB+1iRv-(D{dNiCqL9_77fV~BP#;MT`Laf)I@Z6stgt>F&gPOlnNBFYXgS1
zTE6f@Mu8cd|9)XE|0k3?f?&`_gs77J0+L~lX)lW>^DKm4Y_Mt5cAI#>@(MkDr$?r`
zwk;={NH%x(A@JlWWNv-CQc5Cl#+QExHcGZ#hn8G5`&Rg-ve7As(8`OKQ_m4iS47(m
z-1w#=MV#wnK=g;`rT{3q{HiZQz+;-&69z$y6GfjxKuw6UbVT0nTf@>DvCgxmly(kD
z(0=%CFt!?%?PqeF?lD%{@cUiW2I58px0hLy1rGbiA=j<gqAPL{2Tii>jS|}*no*P2
zo-EGa3??!QtpvXu-?rYTzogBGXuEr@+jT*N?Mt;q?wlhrCy}cT?OPqfg~TMjLU~|4
zcMi1rl&PUHrX=gE4*Qg*U3rcBOWDa#Qk&{4v52xph?L5aFniU=w~}^!AY6<JMso=1
zbP`|ncG%jg?>Y>u;!op=#w0JLk8~8$T)=60qL`2-a?P@d--`tpfOz`qrR~A>E6K&5
zQ)X(vwj#gDrMuT(j5}=pp1SF6xc|EFZeSd=B4PZs_<b1bQf}oF4<cLEAeLF3yhhfu
zr5_h9oz{=cEu1lE(tTE-WYoMKN>2Ll5wRIbpLPPqfNF33w9SWfoRlpo&DJGv@2Tqr
zsgBcyH4BH3ijlQIZNQ)?z5aN%7;3a&6bMn}xEO(|{bcHo!F#N6pxh$x(e5waRiOO_
zsnb2kZi8bcys($^1HSBDJ`Xw$l{|U2A4`XNyZ!o>^h?{mJ@Ye4*T<h{4Y<9whb<{x
zh{1@V7j#n7AN2$cW<}C)^KWoz<I}s%4gDaZ3YGLr>ORGl^CG`hfg+UGWcXA=5*xUc
z##&bijch^@?%R=AXLL~1cJ^krGsI3T7&7o@G?xf@r;r+as^U9WSCv&SezYs!q8tDC
zW+L&kSRTTMkhoGf-L^_hr=R%i(N34yb@H0-lTS>-RnKU@MOZ2vi3MA8>Bqb^9LE*P
zQbs>3FTfZbK3L+pU=!8UG!g<exRYa&epH{eC7*J)PRsn3;sKvCBNzBOLBdAqDcv^S
zc%7B##5*qqmq*C--V*O@b?5c~5!hbF>K8vnKdE2_q>nMjF&ozDwtZ%UE6{<+<c%1f
z|4Z>4RB5#JP+m0ndK*v73o`Y?HZ_EoZM+F~Mcd;{mi)<QqF?Z$Lqah%s0j_(Y81s0
zUK#<+5`TK=0DA7b`Q0}Ql#a3!2Cbh<AmMS9OZC{o4p2#Q50oCunz>w<@vr&FtX{J+
z{S4p!bdiX8mzP;d@*nD_6dxy}k&>38q-fgoI_<ay2v&N8dt?e8w`-1)`2b%Deqmy>
z#Vpc0=;^Ta&=q*_;V776w2U3#ld$l~=iWq;z?72~80t_4kj(n}WLifwS8ykT>dB+d
z4M|>nHb#yc3#il7V{0!cbr;BP-|3mCG&yvbCMudpQ&HB&Mr*hhM!_8c8%mpJ(;(}4
ze!PBj46gJ0cy7%M*$)lvWw7jAK=f|pV0IX|ITz6)GKob3Zs>Ntqxcfz?_?(n{q;QM
zps-4q0Oa~94lQADz<?;S;Gu@M(CR6&hD^`qNGyz^(*Jx-xE4v!;rw;|SbDlQ%Hzke
z9B8`vRW#7qAI&+K1PktaCGjSVDPq$v;oY|Mhhz{2(xMEWER)A#q3}?@_TFIksqChG
zAiZ0fY00eyNSHDK3c<kZ415}gW~>coLczli(Y)d#+5mI`<VqD9fI$Efly(1ia-(r;
z%dC{=zT9}Tn3b|S$Yh1q{=T*?peC(j6yhn$W?>xlj4_u=wuA0nL*A<?u-fAwUPzVf
z!CujyEru>+z2~Cp$=^n(0FYKe)$vA{8=jI4o?i_mfDP!7PM=lGm39ufonwUwm}Gi@
zZ>hI?-q=X}eyQrbl+<bXj(+&&s;BJQYxhR`=Hs6H?w<mL1W_lE$+kmqsI4LX#V=~3
zPLWrEyk`^c)1>aRw97juR6w+`mMCr_5>&6wKu_maYmf~rTh>ErX&6&7)gk_=8<*Da
zO-(<Kwxvgu!9L0QN;k+-nzK)FSQR?iVg~jzsbP@`vh^p@9GJ$5Mf;X+?b;h2Dgn2Z
z^W}c62Eor50ooWuiN*8LucvY-t9|?B$*RU5Rt4~ZOTRUJKQ)n-9|-QOzQ#s|(F-8|
z(8NyGEER>l0pH%H$9g_NySNWa4us&SR9J39UCj52M;HztVqoOsMu38)U%d@eqMj9w
z&VBuI<uqGN*AY(nL5-aR#RZ(vxVV_(n>_w*DS*u}Lw%zB0hJ~g$m;_UTgnih45^ms
zHyR09_m@FD6966lPh=!$t^h#~rN3T6SrgsrdGUE2#Xy0pFfK$B+rC4Uge9(le6ED>
zhDz9I(A3Vg?Yc1g#wQF-MzUd>-G8X`rn`AP&H9$e-?o%|Y_R(*^M}FLAsj4URbLI5
z9BGv+52R{hU0CIsuIVpG9_wDO28w|QN;F{1J5c3EIXx*jb+EU!BiW$`>oTE^i0Xa4
z8vH^?j9p{2EP53s?ro>vLyj5_CSk<(nz9o$?zHL9ia)N#FM=bEa6bFMgR5@8QJmTT
z@iiUZ{>vkt4}i`FgtQxe1WZ3UJRmRVrJf`GailFDA7I*wlJdy97=P3xI!p`x0)Zw`
z5ES+&*B6oo;HB#3eAFio{LSl&vL~z+IOyy)*E3%7hNs2x3dD7?hPc&?;KGhZ>*f~J
z^M*3ilOY{=3_L#m%h0&^5;8skD6AiuLl|Wy6^wD}rxFAfIq8>tEVV91K%@o8GZ>vx
z-p4$*x{KNg(~-SVQ-O5)zO~lG%U$kj6?w9Xz=|+EK}Z0!^+d93T+!q1l)LF)rPus<
zesxkUcxlr2aX`Nl?GIh?-!r@UzYC2Lja%)ayfiAHAHX);cA(QD#CTy&gJ#xoDm(oI
z0zsyq+zvNNH5J9gVVD(<lgiDG{sj>YUoZ?5#Ac`_j{<iNM=memOD_7(z@#i~r0R(I
zKl2elDi%vX6`l0-VnXcc6#XFa<4UrV7db(PX)0(s4*OO#eb-s^_CEvfW$|+@O>nn&
zSKk~<H%iX8E?ULs$-b@Ob*dV03qQ=Dsqzu|_)_K!pF}w^G{919b^bJ&j61*F*XwM<
z_z`Yclq_<LWb-lUFFnCvwk(oYFT;I>msbNNsp>OCYWi^qWqtkjS_`-*)mRsp1bxpf
zil8k5{`pn~N7twrqvti?5LpM?m)V_`Q^6Lm)gIS=hF_)3_|vWns2%JNXa;8NO|fIv
z;$iQ&GwbD9_C*%`p7Tj%n2v=_z3^66zE@++_qIj#!sAueqJ`X;1E%UZ-p{;uV4Vu=
zbl%hU3M4(ZLCX~7Pw%1@G??0c%Cbl1msJ*%Fv#b6$b0CcL1Mt1X*vM94v=L4fvq=6
zR~Vi1aU2YEWkFJ(-Z`)O3<w1!;GeWmvf6`#TjQR*`F+11;N;$L?Iq5@s#AJWw7(rp
zGJq>+DAp!!K_$sl|FW77kS=ikRU&%lo^3~Quea+NS+QAebK?xHyLZz0>^fbAE=viQ
zg4;0AdUDbA=LekdlPA*XDO^aT9L#<@yZgp(nqGl80U&t!6;}G!FaL81RwW1Z_4q)S
zHB>Y-6rWsHs;Kv!mAz7w1EbM+&p>yrLYr+G%q>faWyokC1d5TrHqui8&_jTT9xh%k
zJ#_l0z~M#zlzd5V9$_#&pJP%qKe!h+H!Wr^=OlBG>e#TPtFnsTO0b~2dpQo>1-J-3
zUu9Bc^!d`5MR~<Gh&&$6HO7|LgeT$T`LT=>CU>|g5judcf$uiEAxIaZ%wPMy$)%pI
zXiFZ|n`OT(M54bxW~XI;|89>;ZcK16$0S}uyin6M?S%+S!3QT$ftHARdvK)S)wU)l
zHOSV9Vvbahxb95N$UiGbdYOpQ_SZ_<GV15H3!mNSo)-N5A{Ah#Amr>1J^ueb8BMB#
zKCP-xjtSKb%6%I9kiIUA&xz1YY%5=RB0kyF5NjbYZh4Fdu<(l26_LzMSqZu`X?~#<
zj?D%!UKmvUS=m*B`KxbaP#NmT{W_qTDpR~offUjOMmGjiT&YE~hOMC-x+b4`ZV{u#
zb}`Tr{l3E!-SYQZHO2;kubVG6eqCI4V+M$F3pcZ$>cG-?g#-3c#l7g84JwYcNH4u5
ztOrv$+M<im$w>DhRmi5s0wXOnl{>5>UcV+GHTt0kH}x2b=6ZVTzZcYB`Ek#MNuLQM
zGVOmCLU`Y;3JRGgYM%4X2WLPdCV`2h@Y_X}z@r`G<LmJYXnm<&>WQt$T9mkTz9OS|
z@${DSgouSgH)gLJI5k<xr6sY>#jGe&nT}q7+5*2_%xo$#@MU?w{|sz<RdVZg!dbq-
z^Dy6PeGqrePH{~=AB(AKFHCl==v)l>c!D<mur0BQdgpt-CpJC|+n)@>#u~OYQxaHg
z8Z}!G<H+z-_pG^mmwvNJ9{aJuf<%V2b%Yk(tL)W0%@&<%%z)*K8G(Q{jLLy|++=#O
zWH4g#k&>(mf#F+uW|EqQ>{gHJSadd3l*lssSg-YbSb(_NcsduO!7~G%7`o5TvMO51
zy#7QRa!<7`r<lTjO%m8WiTKO0k%)GZ9Y`F7<jZ^d`$#WKw8<FRR$JD$E*pIMMg5GJ
zeHBN~nZlwqo6$eK&t(lbWZTOyq;^ca`rMFnJ5fO}8X?}Gw#qr(4Mu~7{!Jl7F6Bx+
zPe_|WH+hI9ZRT+F?R5CswI-w2lg@;{dq;<MtsYh>KdX5C{vH}Yul}9Abgxky6`IU}
z#qK6yjW$HDn#jn61^nOzo>ddwU+LCS*EQbaHmX^SmkAS(O<zBZi&yc17jK`yR}mma
zR?4{2R=Q-V^<RHbQG`r(-9x)R`Plnh^ZF=o_Ym9JXQ==USwfo=5c%n?*LvDY^_5;m
zU4$W40{#JKl=8!kO#{~#Jk45NWpQwwpHGB@5Y5xkDxELpG%okzy(xck<yh8gK*ESf
zwZZstq9{fa(P`N9KmN;JLdDkI8*?cI)+%6|@|XWI;SYWO?-l*s%mIeAE&_iUFj)^l
z4V%R5FsgMKZYh(JDh;Ebico=^J2e+4bn0p_gRLH1;GywMwgcmHem!E@n8k8AtYXK6
zR6;<AOo^MbL+)jX$kDH?YgPC-C_mzn%ZW2TrDup~3z@C&qK8wE<q4o;lotr1mFtf9
zvT*U1NZr~+2&%SrbR|70Jl)oKjKG^kI~|YucuQaWTC!AdN=oj(vne<#fQgYmNeUYB
zwF4~<0qu%R$6$F!K<Z-7g0qD<igf`d*$UyyPUboUS7&ieQe{!ltIEl=0W!6APl@K%
zT|B=@Q%E_i8*|88VBNYaCG7B%lA7bo7g`lvORdnVoEJiv@5tY-srxJhL|Dz)DDwQ%
z>Jo@fTle>5cYGyt4lO}OVtIo@&&6@p3!;!$lxgx1&@Pb4Npf@P9NcrD5f<aS2QE1|
zwrFH;IcV~3pQN!9x3=@avIxL{u6-a%HxG;yxI)c_iT|V`Gk>Qot1QEANvba?B<Q(n
zKOqTvjwzHb<>-v5gbGYKF!9gG93T`vo{n{-ue`=5(M@qEdBglYDuVFpy1EWwWj^H;
zff&FBlPb}3TF`tu|17UYxBZs(SGWTD;=klv2K9(FTuqL{VRb5z3w&$aVc~x<5+iCf
znelI`#JUg@a0QVEJ11fD-7?C|j`s64hDKGo*;uqxSqWDY7`SVn$Z%e<OCQ_9<iXfR
z9g~5~mzrv@hrENxv7Vee#YdXn0V1o(XMi@!NW28tD<9%Esx7Q8VFIgGQIN(N3Fqc9
zleIv$YL+!w@3-YzdYiF3uicscNL<1@7dDUWsiLKxgPLKNu|JS1Zb(8eZ+r0uNPX=l
zt`N4{;(@30RXObd^!)#FSSA8sfC2FU79;zih1S&U!5+5?uWNfbZ8lGL^aPc68L%}t
z?w>7v@^s$ZHu+`@I%5zC3$yE7Q`;{tNK=ifRLva2?*76Nbfiyk#bw({tSK7cO%v}{
zZmh|D_J%7e@COb>w~3*lWefXc-pr@XBwJ#p{(Y5+m&e&l+}r%8@-7aw-~3u|8n+LA
zt&k%Bv13&2Y7ePxHuy@|lb^WuG8+1$sw=uzbZw-mw9g0@6E3Yllkjgf!guf&=9PWc
zeHP&c17P0YgRx_O7=-_QZU6S*6Hdu$UL@Zs9F<ik)|&u@3iesW;QeTC#VAtbo(Emj
z9LJ}o=w8T{nWg)lUG@kM6X7`jTNxz-_v$p7N}*(*MxrHIHEW8<MYT1w&+!+gYqfGt
zUvZIHbrRRfLSp>x0yGB?sscff%4LXO_EP)kA0L*@^|3n~wC@8ZW(y*m5C30d@BCi*
z6McKeIx#xz*tTukw$-t1bZjRb+qP{x=@=awlm7H~?#wfDf4JvAc-OP5PVH4|zZP<Q
z@uNhmYKysk!W>y{v8JqWHP!F;!a3IL+TXyue4qU>L(J%#NeGmb1H@v?{QdNp1>ae?
zqAsA5meFk+j!C9<R(Gq}>9*;vVFHin+e%C}oiCzM*+4)bHV!GZ6A7h~BbhgA7`kOs
zrv?L8Wv(p_1>*E>6GY?ax=%b>;mDbbk&$w3<65Zw6d8HlF{rj6<hW-A$67eGIPri2
zGi_t0dzyGvlcRW2s)y!d9C|(vC7|(unB6qKa)m69VUrvM>RcdAD5dExi->OH*hb@-
z`$LP{Pb@58c{M&5V$q??D#pPaSpF29HK3K3fDh~DobRy&<w)7x2b{X*k;+~3jHKwJ
zPac}U^Mf}ecTSPti1^e$+6h}<vIraK&k9r<CGjF0yPB@!^mKSaeN$nqNE$&1jEAo~
zIhCD1Ek9>x_grxk%77|8ZJ_Z~geVo3_X+zu?+AnTRk>deGPty16D)W##Gsn&w?ZVb
z#wR&VT$*a}qkMa}XB?y!B*nwB2lsRiGD8-W>1B3;%9nJ0_%y}B1nwX(uEcDGAdS*N
zS81<)PRgIIY4xrx*?W#f&@pElu>PP^k<Pjq-wF|*OQXh}skGvE1{E6%^QMVPO$O7&
zrQKtw?|-h;*i^Kbb2=vp_`upc|JbLil~S#IY4a6<B$^}>I@u7uMNwEZ#~JOu;iNy$
z>dvRd8;XxtAQkycJFv@e1?}s?5eS|DL8kvNcJVO)hT`j+zFaBSCxzjRvYzctv_0-?
z+csfh7LS)l5kz&#sRt259@!}eVH#OzQo9D=3~J{=A+fJy-}Jx2gaw{o$w+z>BgTUX
zaE}XHss%Y?cNbg{a>us^7RD0Kpl*!KH(^rRP8(MrA@?=&ieU2EB{Fg;&_^d)OKWQR
zcD%ayg?>3y6OZ{&pTx8|V_?2$q;)bZ?1?tezTy|UhYZi_{fdnGoEr%R(@HT@aD+8Y
zF`l9v!3l@Vya<X@i8`BK!!u!WOhn5r=+A;|)Lja;RkOYF{<FGl&dRsFBRo(cj|cPf
z5BY>fYA^MBq^<b_D>xd(*Gr5bg+C14e;fDee~qsdO*kdWH<l7lvv*9G1AN6Eo(<eM
zzAMHh4ze;<q5i~80hUU9&>5)1;bj81&4_El44rUdyGHAxe4;Jzv3R@24^@`Y-YJUW
zR_sKKS&}`j6rgVLl9M^pCon_k)#F3yA&^6+!K|U*W=^yZmd{N1irNlFm6b9JJ4jKx
zdr|C1QxY#~_pQhkKjX{7KBuV+YZS=4VSujB6VV{-lIIl~KTlL1W-J=)A7wDi&7L!G
zXEw-yH&VR5QKMFrZ_c1gxk;j;?Z9N&q7j?Qss?O?Ei&s3Vh*z`NU<@7FzvF?g2+St
z9!$C&Bz86OivoIU(Ai9<`aDvHzK?naM{Nr`@-Xl#b(z3@v$$A?7~=HSh$dj#395?x
zF3}^H5hWxC_-w)0RDo09A+K<f;^4^SAIM7b`i>b$aoEVOUQxmZjL&zpiIbR(0{d8+
zwlVhdo@V{>!<xIF=co5za7ljm>EI&CN>pZ8HBn<i8SN}m=yHeb>)^C*7N7=O0rLBi
zpL5l;p;3ew5BJi3IvF}xLXv}Q@bb}(@Q3iRx|<1iu?lWT*T|$$zIjw*?-q;41sgZB
ziibhr+zBZR3uj(C=&0u6w@Ko#i{uToJ21Tb37k3N+3ls&1R6qkgXaZ^<#?2c9fSr}
zp7G}*j?C_IOxa#v^^fuPob)UUSVAg8kA_OJ{UIhXf0Rp)-?<&?#G>De0p*qj{ObWQ
zJby(OG(}Iz9B_GEkw?Nm1FH9G!7!~fkU%>t+kxRWTv`+b<$2gGLu^@+NU*orp~;V#
z-rJl;CTphbp2@!K;(_-%!JZ!d6~WuILPCJ0fFTr`JLvqj@f|H>b%V7%+{Oxk4C&5$
zgpL;!FcFM`>i`)wbCm45;tdUTk00@XHbT2s327^*GD*aN@+_b{%c`UpGChumNo_Ma
zgvW&2;Eeq_gg?=|#;G7>-4H#0|GFU+-31X%Bmj_zH>V_*L8@wTzZkry2xlTUYh*4(
z4{wr0i1PQsxZ)2Z|Nq$ug%4eSM3^*ul*pAh;S_!u+rQQ9H8Ijzr1P8#J($?hWmU1*
z4L6c{p@6(pPs*9pIArhXY-p{D!jnfjFA9o=E6h)XU*od)1yvHH6et!#iOk_pD;KB%
zmW_Ly^4#fl%2{y6l*>dVX;a=`tbY7zJZEUd%4gs){LqO$VA?v4RmomEEfbRq60)IV
zKU8bS*=vF|Q2|137hlM5XSJ>O{62SjZ}-&Aze?W;r1)k7fmD*hoh++p5X1SS$gj?=
zwHHNz>B6cG#6puMLvzvtM6h&PZvi_yB9<unIY)K-{BDS|w>g{`Y~5XE_w^g9O8tb`
z_%^~b(o#Cu=9mTWh1Y$BA@1p@bgM7jtWAvOV6!Vak0xz7()-(00PKo32UXl>+4|{x
zc|dAw1wZwYIKeRb{BiWHMeB^Bg6_<n<Q$cu6Gkw23e#pyFux!~DjfFRp$#pZnJe0t
z3r&60GqEvlVnVKyE9`wKYXe`pm+2;170=9U`&aHWPj}+)o^y<^;L4t?H~xkgorIG4
zJR`4q;KjS$dxTlk!K|0tt9g3D1-lcS;^W0DCbPmcvjpZy(A$vgRltrKtsYEjJ*eMx
z@=nxW(E~=|Z{ebTkT0@JCB-GkwZ7vr7`N;S3+ty${WO<q!`>5z2P~hFfVlD1n}Euj
zCVh(XtdZFwl`W{;ud<Ei<&N|##Fv6<@+TK}C$HozZku7G0Ky%r2UC0d;D1505*_tk
zxhm?Lx$2(;Lv5>Vi*PRy@Z*t?w3>wSS38UCjH)W0XhAmQjSFGEfLmiyob^rQkZKxl
zQ4H)GRD(+*MtM(-i5VMZ(bnBBAmOJFux!8>TA`8X(j>g2uy39t>V7ZO!7UZj(yJfZ
z`DcNKG5PwUz3_+Sg+e?oOV=l7yw~8*uN?ACMFt3y9Qcaw2w;t1?TF4@wK`fuf+bsh
zRN7(L5f(^$3~#?_>Y^wV_D`G??4TZ%T-S|NVdGDQu}B?6+?{sLHf0y727jMS@age8
zcv734Fs;GZt{WKF7M>zH?5ug{rr<kuBUx-Y@d^*``C~<ae5Im!1mB921-L`<P$-on
z%l}BKE1gk7jPhjO97@kd>p8a<BP2_PkCDhNzme|nt;iN$3%Qvl5csk{|5FV2P|$Vw
zc9E1xxV{ua!3}>HhyQ0EVz|)8{$&sRH@i?tB$Vo9cW>J*6hpXLX)xJ(aDq9khh3qe
z0l@Z=hE4kB<R6Y!eesK0fv(uaTip0J$CMbA39a4k?W;QfpfCgNOz0nxHCX*cKHV-T
zzsB`Mqz*7>_W>;-ypSB5?Av?F9Bd@Tm&W8(5yp=BrnCFVHti~hG<vNvB=KMt)J_4)
zYFlYEZ0nul=5vTi;rotu2`O@o>mSSY2f9-g?6L8-XNbXe6GB&Q+J#cu9L;sAkjk>f
zy*Z81tHpEY9R>3ds!EGwYBYK{8qQGAb`MPIHu@trkODUKG`BR#B%14)0zci}*q#k4
z3LTS<d~XxPk-UnxSHHlnPl}}jiq?>xs4qGSD;~)HK@{J_l^c<&q4#6^j6gt9F(9zC
zq*XPA{YmHIPsOI=yZidF!V47|X6lp5&N_Cf4MX*}w_^W1rz#Q9exEnG$Ira7(t}gg
zZpF^IenumQL6=l*<>1$ybxh0>bnTMpSwyJoCBT<||3RZO#ZpRhNEH2BPA8(|r1A+e
zK-y83{=;A045UDIhU8=VQ4XV;fc5&sh4XYR%CfOhasIG?jbi0;8Dg$g4OQy!7A);L
z?Y4XNH`$$hbmnHl+%<uNlRf-z)zaStjMExk%5N}W5g(7{zta)2wl<ouBc|03ue|p4
z-C`_=g71g^sB={|RGch+MzsRteh2}5{u$-VszM8+NVV=Tbm7FpFbRufswv#Z%9v=X
z22z$DBrAn@s4PVyOU?GlKZw;>LXXGoHzLZT7LMw^ytSSlH63#oBs)>N^WL1ci36)q
zR6sF*0goXIXUV-yix_0^H9RPi?3B7Fu6W`Lc|?`teeQLZ)DIgVNKqCqNl~EKET`F8
zez+sY$q4B-Xq5||x{T@J+pVOFxjSkRUY^re-3+De$4dj}B;$fmGL0pz7U(N#WXjst
z?1R&^guDAYhzH~Tm4I}jCjeahr=A=3#yJHU5moXRS12q?>XSg$VyQ{1d%ubN;`n4M
z<m_oO64e89M-Z4)iD89~0`?IrEVp2w#VaI%QV2ws{%Vvxd{jKd!=~Z-bKf077s~gB
zFmafT_`Nt<iGW7@XK3WPF^92O9g0fqb?QW&=ZfM+I~6uoNoSl>a!#Y>ShN?plYS8N
z2E}NuT`AalNpLjR3*};OeEhEAe)_s~5lYW+EQMdS^iyxsRNsid%-px7gguRWxlkDY
zBfY{z`#rTwvHt?**1`b;xp~LPqtguHVw_V)9ASw^db~Sg+&`_6ZfPnlIL<7CQ9%;Z
zB&v?bg!q6dLG3eE(BZvf_O~BI`Q>?twcZs;+&>EP#C6m|@YxDEbV<Xb_dVTva|$lU
zcX0GirzIZ%(qb^0iRvkI3eeQ$*LLu;uC)(1f1jOwt&!9W1#pXyK9iZI0lj`yF0q^b
zvuZRT@>%Z%N|YC$0`fXcVHILF7}rJWxcl(o)FmU0I>73D$5;pgWWJighn29Cg_7dy
z4v^^&lkl&N75Ea3Fzks=+!wyip07?exgB~e$XYZu!Mr_zJ9Y6m>pgExD)nR&MZ!G6
zN&$L}DX>;YD*Qnkr@I*x1&4wZr&9Ykr|FZKu@etT(=n}~Bua1oTZHwiL+TVTD~%XZ
zdVYI}9rldyr9L_<oGj@UL+4`nH}D`Yw>1%Gd_wX@DN_gGI>ZZp+GMe?>x5Fo5)P0U
z8L>-shd5HN?{V?f-UaswS#lJi6f9g40CG&Rod-IOX%Xl!dgfaL=_b46MAuJ-fP6i#
zLOJhngFr&B*KhZvuJHZhFf?&TX=~qK+Ek79+piz$8f(=CY$aq}m1qgNnh!wzRelI7
z+T`0`?t>u<zP1zm)COg)voOCEF3nQN!JsTHFo6+#sq$x72OD_r5VZ~kCqafer|jLL
zAbvK6(~{8L&u}x^UAy%QkW7VQu4+)#gj8EjE{T&>_2nHQ3!jd;n^V2V9|vPO*z^*x
zLapu_5-gzUPkOOdTU^K3q71o)o-<(XSI$rQ)qB6^f1U!C0AbzgZ;afF1o7AI{ndKr
zebw6+iZ~bjCi7<95X(kD^wkFzlxBjg;9EY_Ev1rL*VvFm2=){gBjm$_zaoN~veV`z
zFFYbrKMAOCQxqpIlEFTgx4~1NnJbF-WuBKG{5O~Qbh^XJHOPJ6*JRn^0hgamgSyxG
zi)zO7rIeC_KY7~Omd<VMmoFDxNluvtcLj_(N^=bIb48Ik4xt9z;7vo~a^s`JrFTJH
z*=_3(sw^6q8A~J(L$uUK`01MIv<Y0r#V;{LJ>T7}08@!Z(lLF9y!!TjCP`R-bxQs$
zf0%~<N-oOjFKqFPA7XwOQyT39ArV!K3OkE3|9V5ZcljnBts)ZB6#0439C%2E6K0xs
z^5zZP%dEEIx{X~7MmaLBT;(2gev`yT3`ibCg_H=7)(82KK&IvvC*hvetk})?MMe=h
zw;2l~iPJaLAMic2_sIn<QudBF!<tK>ZE|cs7N*+^%wac=<6d<7Fy4}uCD4Od{=#%l
z1;8}^x8^0}P9r3_>hw@Mr<YKKd80aMZJH&ub94iN1R3j!+U;KP63K63^XsOjCD9q7
zn1ey==FSkW)YDiHp1LtiV^ItBjtl2!{5MDL<JmQ2#`<r#8AV{R9xm-KjF%;~iS8F7
zZHzCX*9Crm^c+}Rx%TSct~6PP^dW_iH!Qhqb?42nT*XMRc~am)HnLckZz5$+WTHy2
z?D%rWTe`P&gB$<kLuIPw7gO0{*pX8@S3dg=B}(VZtl*CYV&+<lRjBG!|9fZsx(tr~
zyE<u6AcHeHq+`^oH$LJ#bq3du7b~(53}!CAv;m6nA`C(ptqS7HQF%MY@*0t4oH*m0
z&hEC6tqP^iDB&*#)O<5xWNurC4C9<ev#*cN`Fl_IXQ}$R><RL5Q<nC~`!MK=NrSm2
zt1jjP{A?tHde19Lj77Kju5B%f;~uGdlG2QLCb}rpkc1gj86J5Lx@}%YdyG#+k|vuk
z?M+;UkyCAJJFcKk&$y=vwgn*8>%M0G8O;8PZz+wIJHB62%m2i;dw-ave<j5Ize=c*
zC@Ce@2(#_Ef<S?aT?BI3&~&z#UmFD9^*5~b<GHiuQ({)fc&NUH2`oaf)BPMI;RDN9
z%B15MxBYBo+y_deUR1HTB>)PX@Y9|A^*Zv-H2zS$WtERLRjn<Ajdr`Xt8_-WyF{bz
zW+rPi!@ByIDFU=xBhAYQR&lpvnUl^q+4G^QoTT!Cf)EehVr#Lc?xPoxKkDJtNB70=
zEfQoi2Atzm!8d`dEooocm@;SG_O$Yo$u$58A}2ZA%L|fJGf;KvY=Il3pxm9?{W2{=
zCTaArjGFWA5`WgIn&P|C(Hb(_aHUil*Z97$W=BYV!QqJ3^kWkSxYZ~%=O2dIrpBzk
z$LDkdd_fd&kY(U6w*=!ec_qw_ug|I(65Gf2nPe(2A78J<?r76_ey(=0+&#~Bf-t_s
z{iOym<vfGg<FPRs1^H7DXS<rxt7XlHMh}~Ex;)VsvH~wx>fuHu-ntcuDc%!=%r(x4
z3rB~Co3u@5cfw2h*={Y5T52z7+hMlUL!LFdBkQa1!q`ua0BZ%2dHljE<+sbwoykvn
zrD(bWY0F`Ao6%^|SMn$<!UGemF*IYYH8xfWF?Vl*{*`S6(*!*lR_fW<nT<<_`KM<D
z8E8^QVWe-KJW#3HU&rBi0L<n;C5}8-!@%Z3JMWGb;Co~$R65O@jf#5tqlVe;{!ayP
z0ph^*<`V~B9if$=uY8%dq+}<8W#<;7G=Aw1n_mvfPWtctXy5xOGvX!Q_tK<=q?zA-
zt3-MMpE@N<E5H8iA6VnMBiDdD-L%KI%Q}}Sls~~)XHb!coBGk;7IOD(D=|G$<mqBN
z8@2>jwnE0gF}sV7u&o2&NiEf`ra}ejQ%W|m{f*I+N3L!$cCa&p)5q$aTH*_#`-%*V
z#bEh&s{h|RF3j~m4K9Wrt_WrLQlAlI&3&)8hPsA0l@Mzuyy;*+E?%iXy`V@!ta1j1
zRgAetXA7@pY?-ce+ygHzvC9k}tw7v?Xq1q#rg#_L%G_r!59D39?)tdBUV$cf<vV8Z
zERu14d_1XMg6B@X8JA?$t$CNo9#9~k-y1E;^3VF;px6N=zMBXY*SHJvz7oxZJdUu!
z;T*Vh-G*FP2u%T389G}h=x=-C0a<_3lGyn5eP?~l{?3Lia9cDO?}WrQa#C)816!o}
z&*TjA_`jv-3a|tK!2j`xx|y{lO$-UgakDs`>a%uC0^n-Vl?Oe$R0+ARVIL^VYW@KK
z((nF-bDdw2#7H4{a#{%FLz4!D->v99ai1HbI2Qlzi1JNmjqYSiS9?g5TM_A1^}$}7
zy2hd7IOTBC%inP?c8A5FufGS<h&!HFKlNbV2w2OT?6>Rns6AA5pqdOVV~o0osr=@t
z3%(lyw=~_)=XYYrD@(%l&AR!yw=!b_ju6eOMzd$C_&L4Qy?Nj1>l3}pX)h?(#9-=$
zm1^7z?@S`Zz>%l?UH9C6#%><?MI<vM5gNyX!QeE;tq@tu<BbmH?n7$I9)9<b4w_wk
ze6gewP4GO)T*98%$bq#c9_&D_89GE-26l{EfenmD<qqR=l<BnCw<u>w@|E<wh5*o;
zhY*d|ssfQ?e*nh+0DHrGfFQp9Ds>J-CMyTN#i*>3&taAT*-L%v8lolUIh|o)Oj|wX
z2Uwmd$-|@TG#dGiQFFjJTz_881Sd#Q+3*ot3XjgQ;Cxnx@<e)}jep1?Djpl?eU`1N
ziPR#kwos66I~Jzs!EEE*A1EiKZhSV-qsnEdG?T;zaJ{vZl8=7O_mSnw^U>)VsUDeP
zbdB!MU2O+ew(WVAiJ=UT(iJE?4jA}{k;!&htJ_BH7Ui|?1jFF?2ykQ@XYG(6u+Q*r
z*NzJ}S&cb?WUV9(HdQqC0ZwH-`dNFdTEkTI0xU8<1h{Jq(inqIB0?oTX@zwvL!y{y
zfM_k5X|h{O34wn-6bTXq`l1W5X<<)R_lq95ikl{T6vSK()<BP3^(b}`#Yn8&FNMdq
z!*Hjo&BQnb=LZ>8x8MUg^xZ!oRet~RtXU|2OrjGNAag$;rE2lvWf-s_%`aM&KBcR{
zE;lhUWV{I2b~gr!9h6<XTUM>gtzKDk=L5;?YEy{se>+#Smr_EruGm()3G9LFeGq=d
zH9VVvhX0)#_GUx5d4m;BMFpmRqv)7DS@CjHem7-ypj8VSo48{sSMnN+>@HNQmQU;n
z&pMRHSZ>{x5M0*lDHGVhEl9W{3^Z{2Np$kQD^=|xyLgG6JIeT)#Fx6fr0-}jYdzYQ
z-q&qNGSONFQgG+Hh&?hqzzRPY>AKDmWyF8hFLTl^fZwsh<0G{`^7e#X_c4bGdht$@
zJB)|9yKq)~FpI)lO8O&e5uvOj0~QYL-3JV#FQXYcTOgEALYv$7(v^0kg0brR>m;pD
z<w1G6yxKE!H^5y38LuS!<szD|gRt{EobKDmsr%3kA;%IuiADrxx89-Yb6Slwl1TOB
z16`!ARPY`r%st^Jq(HG@BTi_IifUk<>gByXGxv5#=uAX`yRFz9Pxf`ZFYTvI%30Zx
zzv;r~1fs7y$@fUjBAhKbce|8U^<!|E0jYcRpxz4<ranyJH`oU)?kEs%B!N9Vnl~j~
z&!Wq~RZwTsm^Z|P{^MX@y!?;*uw)iD;oV{gP4QGr&P%(!oMMw;Ss7QXimTmvuWOJk
zp`L^W5wN*myAi;83ztN5h~qyLx}qqXHBs1X8RA4vG4p?Y{J~1{*Ccal^1@wX#WyfH
zwFOc&AJQ$DgZl`PkHPJjZ+`8BaAUsH8#FI7*Z1LRAa}#eac@Y|ThW|pD6pZt2hkDK
zln?d$j~n^7fBN?f=q(V^gaB{>8$W+|Zj||+4)Rb8mR7qA!#4MPvCzrgZ%+5V5$y<m
zrlinP3>+eD5l0_xf>_VUt=G&ydwbx9Q<fSg5v}#BxAAp>_)it&Cf>DD8c>?Xva1ek
zW%CR}0exn|<0r;KL@Sb_wh-GU?VW!%l$T=o^SAx`Hdg0i>r>d{7D@V;DAv?2(O`8|
z{<Y9L+rmUb;T*qCnsN5}Lct?u(EP%P-s!eKFNU2&?|E7#Wad1HIZHCfr&7(@F)7pD
z1XAxphUb-y-U7)6IDv+-*jj9};H~8CDp%@IKZ8nKs81PJn92Yhc5t%V1$2OE*&N|I
z;thuH+Z<R{2YYLQq*yk`E!JF1>w+X6^;vix@5Lsxh6^>b1*|UZ%B~9arAtLGb-3%E
z-_%%Gd)4G_T-GbaeXY8-26D=Q!8o9}`}x-n-t<>22z=&uQLJ4?<UF<&+imBgyzyF7
z1Sg<+Tl&2+&yn)c*K=X^%b7L%{Q*1rH_utZZQs7+A{^cH$!VU_=qA2N%#wn$V-0M4
z9fE@xpe1Fl+hf;l@cOge8&_AdueKOy4XF?by0pq@n%`oTgv@K;_iR2o#hX&R_X*;;
z%A#YV>@C==!#Hmb8Z(nCZ?3T-j;D?U)hSUfN&FTs=B7%NaWs!{QCO-jj+s+ApUR!j
z?p)hNG8LBn?2U(va!eh4G5y^^+PaJ81ogw`LLwE!(hkc&3^SaF>KSXZdJJfOG0<o}
zC^yJxfdF{`0Q2iFlFn+}T&;0KeG?1_$L&wp@D@4IM1_lo3XYJf>MdE<el}#c|CU&x
zA?rZC5RNctmw_NYUfxc-ME_5_(Y(Q3;}+WM(mcNyEUqZSG^mdK6+O23m_H7k6uVgu
zT|V6M-7?X+`5D7HLB~zFN`H2|y~uD)5lubXzaVsGPX`proQ`-P=#~4=pj-<%P%=vL
zv+AJUDdB!wuX^$t(^2Gn?M@@_g-+k;va7HAtet#T3_o!B2}ZJVcixbRyiU^gro&7=
zenHJ#v&z}b>CCHqO{j38Gzp;h$Z7PuO{@WCIdR$Ez<hu3#B^`(TW?hfzh4kkg^QT#
z*yO>NOIp>#HtX;q0!d~b>TKon%!`BT23IpE1*5`G5_3U5cfMA`|GfQbAeRCFG+*~7
zvOOkm1=nTv9ROUOf8H%g0H>&(Gyw<>m)qtGFzH2sn9e=U>r(UDc`WN0xo`^#BJ+I8
z*6+hpejuI4;ku~xMh$}Nn$6WAj2V<oJX<Xa58gwS=9x~ACS>ZP!$0~!txHUn#}IaV
zAYAIM^DdBW-f6{56n{o<uXzn-28#Kpa;I{XzP*(y0coaMs1U<D1OZMxq-g3gq_*Z2
z45v70ATaXo@n|F}Qa25;daMb~e2)aMO~cIuwgdwy1~Xq${z7Qiq9fxJ7HZMQQN9eZ
z0>l0Q&abxS3qqUse;+1=t(TvVf6^V~{59|?#X==DgR3jcZR1)cf0XAPCyi*3&C!FR
zUx$jvFxp2u%?RYHcG~ya(~o$Rs~IwpODuFe$;mg;=Iohb{$M1Abj5Fs?3|suHFW=u
zl)_cU38md@efiv62F~q#P)C;52TORc#<Lz3CxBP-?dKsC{fglTC7%+vn|<U+t$+}-
zV|s+)O9Yi#>gp;+58^N^O{nvA<q-xIgRJg(2j8V!%!2aWTLqo85py|axOz!8xd^Op
z2DA%@as3>TY=0gD%R>_Y#$U5w_IkF#>a}a&z&fr3w>#Z^Mk_K_is!)OE0=6}V~bAA
zU|ok`-tiNy8_iRdbQbmdc59=wn49SD_7grIrEl^;trp78csvAFZ<Ho#(4*qSmZ3;S
zL<iRrapNo|f>cqGDy3m18A&pwCPkJz7%LQr7r+}4W)H8F1hHJ(>l=qN?p1X#U|DP{
zpsO_!CrX_?E0=9~?GC`Q9%J|G^m2TU-7U<Gg0-c-tbtP*@LL&emu+xao?qJC$O74N
zo3PJCO;_MWf!_lk(82N0$syKrBxy=jX-jOBtZD|nK^dv7_+Rr5K;U1aLJi<rCuL<_
z;G4)UUX4XU0XOCGd-=8-qdAs2C9m_9d8=LFX%nd)#eEm#4-Q)tS!(hKHM5I6Aau<W
zkqE}GGF#V>_<1GGY*xP<Dw0%E#7s!-f)UJnrCk{$+klp<m(Wwg!goe7D6QX2w#S0s
z9qC{}>DkJ$_anE|Nuz5J2wl+BbjetaKAB}CwT0Z1zKEbxcB7%fsCRlV)UEah8*&RD
z{;O2<@K4L!kobX-*4`FcD1?%7@RzqX78WC*aE#@@t;$>gK;>Vnvi@U?b_kVe1Sx)E
zrZwakWUxOMjW8N%;Ebgc#9ev~sJO$wWUEM-|A8Ojk7j5GF*LOx29qtFgD~pYmMwy|
z9(G?wPB&c~2lG>kb+aQ<U>zl<LaiinU3A3j15?MEr?{y83R!)(Gy>k^qdsWs`oWfJ
zH)C{e5vo=wa;rL(v;0)WtP~%3d6LmKkx-Yj?tJlwj#+L~E9NxZ{J=@X<L%v#NR?|;
zuj~`+eWq!=Pqt?He@=jT3xV8oUSOQTCX#zJ>c1$9L4SbOf7|Wa;J@uA&u@kWEz+{0
z`gv%cqb=#k$MrL4@J0DCD6_~uG|L`N(Y2t!54x7XFG8Qpi3mT#FrNBXBjfbr!+7y3
zP*bEmuYvX9Pl1hG7|UlqEV^!?_lp6kT$Ln$Hn<U7Aw{R{Bn`~E$s3G3v0qNevGJ#i
zy~+V;Eq^El*j0;Vx6-%*kE|qBMpPVDtT@B6mhYeOSz1S9vuN8F#zn9A64ud+eG-?+
zGVv-8g07@HuWN?C-?lQiU~G`?na|QiQm!A7jrb4YC9UwxWh~@x(d^W=0AVkNC2xPA
zrN6K8jma&7A+vp2jzak~EWSn|{`T$9tSWz0_Dx8ix@UP}0e-QwoB^X(E5DOYDnQ$A
zc*ZUMO}EVvF{e!{yG4Ke9oJ4`uTY^b3mF8rL#zICZmT+c`Za6jmtDK}TPZ7z+JnxT
z?A(IK$ShLyPkvQtoxo&y$zg#2+in9zJ^L`0-??9$qWwnC^MyNvZKJ-Fk~IlaT;-DE
z{2Cn+1Ed2fS55~DZ&HhuPsjuT8a}++d%bQme&kCY{)?XF83&|2*euQzPH+H`iqoU*
z!_>Y`B|(_Q9KYg~J@c0;Fd6``_$tmX8>bikEjN6dE#I?Afy9>LcJB8>=!{2;>BSYR
zkQy+(T6zZrnHxS0gQAPB8Kq90o*p-~y9>2826<qJIisFi0me;cR#rXwJki*|LQY4L
zZt)BuN}AVcl=t_bY-2f3v1N%ctcgIotY}hl|DL%$ZGBqJ)!>Oaj(vqRZ(0*B)t#G0
zof7~iy7i6qs4vz{ascqQ1ojdowXP;|Y^$FZ2QdZcLy&>R7sTv;0$AVUtLmSY{os!A
zTmL73_0u2V_5ZHPzYl@l0-pT#Sx1d$d%Ds%zjOKg*MYa65#|$}wK3M(<}pB;U}@;8
z{5dF}>RbJPQ16~7fnOKhw1Q9`mHvE0O<MpStgYBFh|gFY%xwn$I9&!o8mevS;<nVW
z+SM3HVxtn=aGe00^5$G~`gmC8g>AjLV4H*GM@~YEs*&@_XY4o_z5n_l3;R)m>t#?G
zu8&L832ex}aiDX`p%abHfZP>|CQAI<n&3h>t`<_{3YB{GY6jIhbAUR`E9Xx$jl^_V
z3P!t+l~;_sAuIXmOE<yizR%nWyO^)cTF~}j_7vCc`QE}&B+VN%MAX+DcXTS`GR2g$
z)vSL>tm%pavNP%@_u$VDjh}R~4nT7B6h98NyPa*Ps)(fSyYfdo#PSglC6ATFaISOV
z-sOg>t`w~a@VxBrhsCa!ff=^ludWE$&o@Z*!c3z_ENioIUN^kxGLewTvRqh*s>R02
zB#mx2m0M>R$?<ZX8Go|AB7Iap6^_5TcF7v8+CszHhl|Q4S`sA5>QlfX^_w(@Cnb8D
zZeBtn+Y@mkjwLEjuIJX$3xbl~7IU#{BKqR_s$I}hvnGKK3a-)w(n2hwIBLujZMXmG
zUEpO0onE}tZGaN^Ji9mZ03`pAU(-?|*&%5gls2I`YP-nye#5X%EfC-g0C@k^O4MoT
zV|}p}{haRK@7Q%mwjUWQiQx$F&IwG<xh3Y-w5j%FLqav|n9-an4uel<&~(AuhJ=bp
z*ywU0=$M7|c{xK>x;CNaMg)!?l`2Oa>zF-ax&72V;&)wjoPJUn+OSi%dD+2KSh*E+
zM25+~9^cn(ZkN4euA!)X3hPk_Eo;S>G}30{=AT_{l~i7-B1Fvupyq!uuzYU+fRx3H
zGD~$Me?h&wD_VRSwUGkcSKK-8S^a4WclUdwxGGoYj#f_AgltIb(5#LINNtRt|3q^o
z(eqv6op&qTG0Y^gPHWJnfl{T@^Zm5i^M)#DsL`uw=SI{`9sBGD9UK7bU`)w#b;ugC
zT0YQiVTO`SQ5`SLx4INX$#bltA2zQYQZGv)yK5!PP>=XPv4z6(@Ar=WI?~Ak0C8W7
zS3Ui`t660M(SkxfF^yp{S(+xyVHZYwyPVnHz;SWUw<&*ZH7iep(#UyvZ=LT{mDk>F
zg&szrm#mq}N*1NL(id&fji`Z+7#dtjOLwa*{alQ0v(5=@eK@Y53>&{8e+jX`IUy0w
z4C&2b{zr3{@4cbZOCYK#m+`C2EQe^B=mq<@`&-#$#^E_U0q{v8ZU-!d!<skC0%k`b
ztrO2e$RdW_PTAu{?2AYefxh3*9c_Ww0K+E84Zny%!;^~+l_=F`IBxKJ48-F2AVogN
zbLgGiB`xsSVa8tJ+95yeD>d#gG;imRNn;bLefjZkeGv2$sG@gsbhV_s3f0X668)7O
zMfv*@qm4{uij--KV$aC&F?IYYQadv0>j?wxI)8x#fb6ex=Kl{Q5MT%Z6n-rs%@tf#
zTc(c=OF50{a<%g4yG3PNhwueXW|$~M9;H*l=O*bezKYsFR`{h%<Qx)lVq|$90MoF0
zjMXatz3wq@gC&YgwZHJZHP(olKgtkZ0I%RK!RI;yDcu7U$}`C@@2udd>|U<vsS!Y}
zslvsetASUUh(!YKxq4VwRn|*Dh7c`evTumyvM;KC^`tyg{yVCrS%}!&E0tg~dH;y#
z9JpQET{4!_V^$!4w5<Lx4;KyXLBm|cb73+nniv9W)Se<PiN(!y_D==vrNsIf+0G{3
zgk+4owtHb>rsnKatE+8K(gvIPv@UHgOa$#jjiSRvnvAK8!O$J1pp$ir3w*xgWOd7L
zEy_wHhfZV5C|;tb6^{FSL#ZYGVLL;F^re(|AA`8b`!9;P0DJ(T^}n*i996v+zPHy|
zEfCc_BnaBemvnu4eBE5@TR?jZ!7a=nyJGf)Wf>TrVWK+$H5XIUA5nRNAWSG*eV{s6
zn}Jn;dyS5mE}gmea5u2HPukV@CZ;&B=<66QJ&S@AtMZH-7_xLs#_8l1BL!^Mv$x0u
z8&fYF6v;x!1Mw^E#ZruXxCpb*&vVIcxFB@~hBiCX37xi^`ms3d!F`UqISR5jB6Ri0
z-=0__DqHmz&u-SM{x+K`maH|0td8qG1IqEX-|ly`jDe9ojx`8L7P5xQ?jv3g!5Uv_
zZ_lH&&)C?cdEY^XLhjH9(c!SoD=|3mTP&$7vdfl&K%2N~&%pX+Be|3R{cAyR0sxbL
z7i8X-YLMQHwetl009E5mWpse;&~Pk)J+3=cQ9Ockvzb`V20&!u{tTSmBcXLjLP8tt
z2FdL=v>ow?oN}lu9kqHTd-9>V5Aa>VjtELiy}V<&+FjjiiMt+gut41nF&e%z)QTod
zP6sY7?HJh}R!r#Jy3Ed`Wtb!n5b)8jFC3xIK7qY?39rr0OvvFCFE~QoS>)PPyRUu-
zsEpddXstl_X`Vwki}}2L-!w>mb-3e4P#Zb_q7Yb>n`69-Nqk&4G9#eS0J8(-^ZhQ7
z8(NN?kL@?B1Hb{%L3c|U2F``;xpt#hyC&ih+(`bC``%Izk_lO+K2!2KAM<855RqED
zH;!E8z}1brK^5Nfy!xfDAiOG9fGh9sHroYy@-_-L&$}-FVfqsKPJfUlk;9LkYTDJ!
zz&DbvEvGE4ycmFb)a6}BVh^&wgbZ<6s9+C-K~}wFC|K(eQO|-_R164Ho2JFxcl(W!
zfPz+%Qr^sUB@s8ma8)!8S&y0{O$P{uE0R2l#ddBmkVuA|7wt886D9~!LuOI*Cyo-@
zqyKUm{U83$f+^46lYWOa7MB9Gfp<aLLQJZFCTwUF?eR>VI|!qh5TZibs%>O8PAJOw
zk7BS_0H*h~O0-Ngi?TUI_x;#UJih=&s{XlR7!tYU{P@gUEKyfLz(5d!#L7TG#uT6*
zKtN!?&vvYYM+`jA_o|@M-u@6pKp^0x$h?VirVy6-&iO$=bzo;WO6^v0?J@QKkj)W~
O{=nA(AP!glu>TjvI>Ctm

literal 0
HcmV?d00001

diff --git a/test/wpt/tests/fetch/api/request/multi-globals/construct-in-detached-frame.window.js b/test/wpt/tests/fetch/api/request/multi-globals/construct-in-detached-frame.window.js
new file mode 100644
index 00000000000..b0d6ba5b80d
--- /dev/null
+++ b/test/wpt/tests/fetch/api/request/multi-globals/construct-in-detached-frame.window.js
@@ -0,0 +1,11 @@
+// This is a regression test for Chromium issue https://crbug.com/1427266.
+test(() => {
+  const iframe = document.createElement('iframe');
+  document.body.append(iframe);
+  const otherRequest = iframe.contentWindow.Request;
+  iframe.remove();
+  const r1 = new otherRequest('resource', { method: 'POST', body: 'string' });
+  const r2 = new otherRequest(r1);
+  assert_true(r1.bodyUsed);
+  assert_false(r2.bodyUsed);
+}, 'creating a request from another request in a detached realm should work');
diff --git a/test/wpt/tests/fetch/api/resources/keepalive-helper.js b/test/wpt/tests/fetch/api/resources/keepalive-helper.js
index c7048d1ff33..ad1d4b2c7c3 100644
--- a/test/wpt/tests/fetch/api/resources/keepalive-helper.js
+++ b/test/wpt/tests/fetch/api/resources/keepalive-helper.js
@@ -1,19 +1,35 @@
 // Utility functions to help testing keepalive requests.
 
-// Returns a different-site URL to an iframe that loads a keepalive URL.
+// Returns a URL to an iframe that loads a keepalive URL on iframe loaded.
 //
 // The keepalive URL points to a target that stores `token`. The token will then
-// be posted back to parent document.
+// be posted back on iframe loaded to the parent document.
 // `method` defaults to GET.
-// `sendOnPagehide` to tell if request should be sent on pagehide instead.
-function getKeepAliveIframeUrl(token, method, sendOnPagehide = false) {
+// `frameOrigin` to specify the origin of the iframe to load. If not set,
+// default to a different site origin.
+// `requestOrigin` to specify the origin of the fetch request target.
+// `sendOn` to specify the name of the event when the keepalive request should
+// be sent instead of the default 'load'.
+// `mode` to specify the fetch request's CORS mode.
+// `disallowOrigin` to ask the iframe to set up a server that forbids CORS
+// requests.
+function getKeepAliveIframeUrl(token, method, {
+  frameOrigin = 'DEFAULT',
+  requestOrigin = '',
+  sendOn = 'load',
+  mode = 'cors',
+  disallowOrigin = false
+} = {}) {
   const https = location.protocol.startsWith('https');
-  const frameOrigin =
-      get_host_info()[https ? 'HTTPS_NOTSAMESITE_ORIGIN' : 'HTTP_NOTSAMESITE_ORIGIN'];
+  frameOrigin = frameOrigin === 'DEFAULT' ?
+      get_host_info()[https ? 'HTTPS_NOTSAMESITE_ORIGIN' : 'HTTP_NOTSAMESITE_ORIGIN'] :
+      frameOrigin;
   return `${frameOrigin}/fetch/api/resources/keepalive-iframe.html?` +
       `token=${token}&` +
       `method=${method}&` +
-      `sendOnPagehide=${sendOnPagehide}`;
+      `sendOn=${sendOn}&` +
+      `mode=${mode}&` + (disallowOrigin ? `disallowOrigin=1&` : ``) +
+      `origin=${requestOrigin}`;
 }
 
 // Returns a different-site URL to an iframe that loads a keepalive URL.
diff --git a/test/wpt/tests/fetch/api/resources/keepalive-iframe.html b/test/wpt/tests/fetch/api/resources/keepalive-iframe.html
index ac00f3a331a..335a1f8e318 100644
--- a/test/wpt/tests/fetch/api/resources/keepalive-iframe.html
+++ b/test/wpt/tests/fetch/api/resources/keepalive-iframe.html
@@ -3,12 +3,18 @@
 <meta charset="utf-8">
 <script>
 const SEARCH_PARAMS = new URL(location.href).searchParams;
+const ORIGIN = SEARCH_PARAMS.get('origin') || '';
 const TOKEN = SEARCH_PARAMS.get('token') || '';
 const METHOD = SEARCH_PARAMS.get('method') || 'GET';
-const url = `/fetch/api/resources/stash-put.py?key=${TOKEN}&value=on`;
+const SEND_ON_EVENT = SEARCH_PARAMS.get('sendOn') || 'load';
+const MODE = SEARCH_PARAMS.get('mode') || 'cors';
+const DISALLOW_ORIGIN = SEARCH_PARAMS.get('disallow_origin') || '';
+// CORS requests are allowed by this URL by default.
+const url = `${ORIGIN}/fetch/api/resources/stash-put.py?key=${TOKEN}&value=on` +
+(DISALLOW_ORIGIN ? `&disallow_origin=1` : '');
 
-addEventListener('load', () => {
-  let p = fetch(url, {keepalive: true, method: METHOD});
+addEventListener(SEND_ON_EVENT, () => {
+  let p = fetch(url, {keepalive: true, method: METHOD, mode: MODE});
   window.parent.postMessage(TOKEN, '*');
 });
 </script>
diff --git a/test/wpt/tests/fetch/api/resources/stash-put.py b/test/wpt/tests/fetch/api/resources/stash-put.py
index dbc7ceebb88..0530e1ba5b4 100644
--- a/test/wpt/tests/fetch/api/resources/stash-put.py
+++ b/test/wpt/tests/fetch/api/resources/stash-put.py
@@ -1,17 +1,19 @@
 from wptserve.utils import isomorphic_decode
 
 def main(request, response):
-    if request.method == u'OPTIONS':
-        # CORS preflight
-        response.headers.set(b'Access-Control-Allow-Origin', b'*')
-        response.headers.set(b'Access-Control-Allow-Methods', b'*')
-        response.headers.set(b'Access-Control-Allow-Headers', b'*')
-        return 'done'
+  if request.method == u'OPTIONS':
+    # CORS preflight
+    response.headers.set(b'Access-Control-Allow-Origin', b'*')
+    response.headers.set(b'Access-Control-Allow-Methods', b'*')
+    response.headers.set(b'Access-Control-Allow-Headers', b'*')
+    return 'done'
+
+  url_dir = u'/'.join(request.url_parts.path.split(u'/')[:-1]) + u'/'
+  key = request.GET.first(b'key')
+  value = request.GET.first(b'value')
+  # value here must be a text string. It will be json.dump()'ed in stash-take.py.
+  request.server.stash.put(key, isomorphic_decode(value), url_dir)
 
-    url_dir = u'/'.join(request.url_parts.path.split(u'/')[:-1]) + u'/'
-    key = request.GET.first(b"key")
-    value = request.GET.first(b"value")
-    # value here must be a text string. It will be json.dump()'ed in stash-take.py.
-    request.server.stash.put(key, isomorphic_decode(value), url_dir)
+  if b'disallow_origin' not in request.GET:
     response.headers.set(b'Access-Control-Allow-Origin', b'*')
-    return "done"
+  return 'done'
diff --git a/test/wpt/tests/fetch/api/response/response-body-read-task-handling.html b/test/wpt/tests/fetch/api/response/response-body-read-task-handling.html
index c2c90eaa8bd..64b07556661 100644
--- a/test/wpt/tests/fetch/api/response/response-body-read-task-handling.html
+++ b/test/wpt/tests/fetch/api/response/response-body-read-task-handling.html
@@ -35,9 +35,7 @@
 
             // The fulfill handler above shouldn't have run yet.  If it has run,
             // throw to reject this promise and fail the test.
-            if (executed) {
-                throw "shouldn't have run microtasks yet";
-            }
+            assert_false(executed, "shouldn't have run microtasks yet");
 
             // Otherwise act as if there's no "then" property so the promise
             // fulfills and the test passes.
@@ -49,6 +47,40 @@
         return response.body.getReader().read();
     });
 }, "reading from a body stream should occur in a microtask scope");
+
+promise_test(function() {
+    return fetch("../resources/data.json").then(function(response) {
+        // Add a getter for "then" that will incidentally be invoked
+        // during promise resolution.
+        Object.prototype.__defineGetter__('then', () => {
+            // Clean up behind ourselves.
+            delete Object.prototype.then;
+
+            // This promise should (like all promises) be resolved
+            // asynchronously.
+            var executed = false;
+            Promise.resolve().then(_ => { executed = true; });
+
+            // This shouldn't run microtasks!  They should only run
+            // after the fetch is resolved.
+            performMicrotaskCheckpoint();
+
+            // The fulfill handler above shouldn't have run yet.  If it has run,
+            // throw to reject this promise and fail the test.
+            assert_false(executed, "shouldn't have run microtasks yet");
+
+            // Otherwise act as if there's no "then" property so the promise
+            // fulfills and the test passes.
+            return undefined;
+        });
+
+        // Create a read request, incidentally resolving a promise with an
+        // object value, thereby invoking the getter installed above.
+        return response.body.pipeTo(new WritableStream({
+            write(chunk) {}
+        }))
+    });
+}, "piping from a body stream to a JS-written WritableStream should occur in a microtask scope");
   </script>
 </body>
 </html>
diff --git a/test/wpt/tests/fetch/api/response/response-cancel-stream.any.js b/test/wpt/tests/fetch/api/response/response-cancel-stream.any.js
index baa46de4039..91140d1afd1 100644
--- a/test/wpt/tests/fetch/api/response/response-cancel-stream.any.js
+++ b/test/wpt/tests/fetch/api/response/response-cancel-stream.any.js
@@ -55,3 +55,10 @@ promise_test(function() {
         return readAll(reader).then(() => reader.cancel());
     });
 }, "Cancelling a closed Response stream");
+
+promise_test(async () => {
+    const response = await fetch(RESOURCES_DIR + "top.txt");
+    const { body } = response;
+    await body.cancel();
+    assert_equals(body, response.body, ".body should not change after cancellation");
+}, "Accessing .body after canceling it");
diff --git a/test/wpt/tests/fetch/api/response/response-static-json.any.js b/test/wpt/tests/fetch/api/response/response-static-json.any.js
index 3c8a2b637f7..5ec79e69aa3 100644
--- a/test/wpt/tests/fetch/api/response/response-static-json.any.js
+++ b/test/wpt/tests/fetch/api/response/response-static-json.any.js
@@ -79,3 +79,18 @@ promise_test(async function () {
     }
   )
 }, "Check static json() propagates JSON serializer errors");
+
+const encodingChecks = [
+  ["𝌆", [34, 240, 157, 140, 134, 34]],
+  ["\uDF06\uD834", [34, 92, 117, 100, 102, 48, 54, 92, 117, 100, 56, 51, 52, 34]],
+  ["\uDEAD", [34, 92, 117, 100, 101, 97, 100, 34]],
+];
+
+for (const [input, expected] of encodingChecks) {
+  promise_test(async function () {
+    const response = Response.json(input);
+    const buffer = await response.arrayBuffer();
+    const data = new Uint8Array(buffer);
+    assert_array_equals(data, expected);
+  }, `Check response returned by static json() with input ${input}`);
+}
diff --git a/test/wpt/tests/fetch/content-length/resources/content-lengths.json b/test/wpt/tests/fetch/content-length/resources/content-lengths.json
index dac9c82dc09..ac6f1a24680 100644
--- a/test/wpt/tests/fetch/content-length/resources/content-lengths.json
+++ b/test/wpt/tests/fetch/content-length/resources/content-lengths.json
@@ -31,6 +31,22 @@
     "input": "Content-Length: 30\r\nContent-Length: 30,30",
     "output": 30
   },
+  {
+    "input": "Content-Length: 30,30\r\nContent-Length: 30,30",
+    "output": 30
+  },
+  {
+    "input": "Content-Length: 30,30,  30  \r\nContent-Length: 30  ",
+    "output": 30
+  },
+  {
+    "input": "Content-Length: 30,42\r\nContent-Length: 30",
+    "output": null
+  },
+  {
+    "input": "Content-Length: 30,42\r\nContent-Length: 30,42",
+    "output": null
+  },
   {
     "input": "Content-Length: 42,30",
     "output": null
diff --git a/test/wpt/tests/fetch/corb/resources/response_block_probe.js b/test/wpt/tests/fetch/corb/resources/response_block_probe.js
index d23ad488af2..9c3b87bcbd3 100644
--- a/test/wpt/tests/fetch/corb/resources/response_block_probe.js
+++ b/test/wpt/tests/fetch/corb/resources/response_block_probe.js
@@ -1 +1 @@
-window.script_callback();
+alert(1);  // Arbitrary JavaScript. Details don't matter for the test.
diff --git a/test/wpt/tests/fetch/corb/response_block.tentative.https.html b/test/wpt/tests/fetch/corb/response_block.tentative.https.html
new file mode 100644
index 00000000000..6b116000d45
--- /dev/null
+++ b/test/wpt/tests/fetch/corb/response_block.tentative.https.html
@@ -0,0 +1,50 @@
+<!DOCTYPE html>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="/common/get-host-info.sub.js"></script>
+<body>
+<script>
+// A cross-origin response containing JavaScript, labelled as text/csv.
+const probeUrl = get_host_info().HTTPS_REMOTE_ORIGIN +
+    "/fetch/corb/resources/response_block_probe.js";
+
+// Test handling of blocked responses in CORB/ORB for <script> elements.
+function probe_script() {
+  // We will cross-origin load a script resource that should get blocked by all
+  // versions of CORB/ORB. Two things may happen:
+  //
+  // 1, An empty response is injected. (What CORB does.)
+  // 2, An error is injected and script loading aborts. (What ORB does.)
+
+  // Load the probe as a script.
+  const script = document.createElement("script");
+  script.src = probeUrl;
+  document.body.appendChild(script);
+
+  // Return a promise that will return a string description corresponding to the
+  // conditions above.
+  return new Promise((resolve, reject) => {
+    script.onload = _ => resolve("Resource loaded (expected for CORB)");
+    script.onerror = _ => resolve("ORB-style network error");
+  });
+}
+
+// Test handling of blocked responses in CORB/ORB for script-initiated fetches.
+function probe_fetch() {
+  return fetch(probeUrl, {mode: "no-cors"})
+    .then(response => response.text())
+    .then(text => {
+        assert_equals(text, "");
+        return "Resource loaded (expected for CORB)";
+    })
+    .catch(_ => "ORB-style network error");
+}
+
+// These tests check for ORB behaviour.
+promise_test(t => probe_script().then(
+    value => assert_equals(value, "ORB-style network error")),
+    "ORB: Expect error response from <script> fetch.");
+promise_test(t => probe_fetch().then(
+    value => assert_equals(value, "ORB-style network error")),
+    "ORB: Expect error response from fetch().");
+</script>
diff --git a/test/wpt/tests/fetch/corb/response_block.tentative.sub.https.html b/test/wpt/tests/fetch/corb/response_block.tentative.sub.https.html
deleted file mode 100644
index 860e0d3b93c..00000000000
--- a/test/wpt/tests/fetch/corb/response_block.tentative.sub.https.html
+++ /dev/null
@@ -1,44 +0,0 @@
-<!DOCTYPE html>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<body>
-<script>
-// Test handling of blocked responses in CORB/ORB.
-function probe() {
-  // We will cross-origin load a script resource that should get blocked by all
-  // versions of CORB/ORB. Three things may happen:
-  //
-  // 1, The script might execute. (CORB/ORB not supported. Or a bug.)
-  // 2, An empty response is injected: The script loads but nothing is executed.
-  //    (Expected behaviour for CORB and "ORB v0.1".)
-  // 3, An error is injected and script loading aborts. (Expected for ORB.)
-
-  // A cross-origin response labelled as text/csv, which will call
-  // script_callback when executed.
-  const probe = "https://{{domains[www1]}}:{{ports[https][0]}}" +
-      "/fetch/corb/resources/response_block_probe.js";
-
-  // Load the probe as a script.
-  const script = document.createElement("script");
-  script.src = probe;
-  document.body.appendChild(script);
-
-  // Return a promise that will return a string description corresponding to the
-  // three conditions above. Not that a script_callback call is processed
-  // synchronously and hence will occur before the onload event is dispatched.
-  return new Promise((resolve, reject) => {
-    script.onload = _ => resolve("script loaded");
-    script.onerror = _ => resolve("script errored");
-    window.script_callback = _ => resolve("script executed");
-  });
-}
-
-promise_test(t => probe().then(
-    value => assert_equals(value, "script errored")),
-    "ORB: Expect error response.");
-
-// This test ensures we're _not_ seeing CORB behaviour.
-promise_test(t => probe().then(
-    value => assert_not_equals(value, "script loaded")),
-    "!CORB: CORB would have expected an empty response.");
-</script>
diff --git a/test/wpt/tests/fetch/fetch-later/META.yml b/test/wpt/tests/fetch/fetch-later/META.yml
new file mode 100644
index 00000000000..f8fd46bec3e
--- /dev/null
+++ b/test/wpt/tests/fetch/fetch-later/META.yml
@@ -0,0 +1,3 @@
+spec: https://whatpr.org/fetch/1647/094ea69...152d725.html#fetch-later-method
+suggested_reviewers:
+  - mingyc
diff --git a/test/wpt/tests/fetch/fetch-later/README.md b/test/wpt/tests/fetch/fetch-later/README.md
new file mode 100644
index 00000000000..661e2b91843
--- /dev/null
+++ b/test/wpt/tests/fetch/fetch-later/README.md
@@ -0,0 +1,3 @@
+# FetchLater Tests
+
+These tests cover [FetchLater method](https://whatpr.org/fetch/1647/094ea69...152d725.html#fetch-later-method) related behaviors.
diff --git a/test/wpt/tests/fetch/fetch-later/basic.tentative.https.window.js b/test/wpt/tests/fetch/fetch-later/basic.tentative.https.window.js
new file mode 100644
index 00000000000..a8ca011a7c9
--- /dev/null
+++ b/test/wpt/tests/fetch/fetch-later/basic.tentative.https.window.js
@@ -0,0 +1,13 @@
+// META: script=/resources/testharness.js
+// META: script=/resources/testharnessreport.js
+
+'use strict';
+
+test(() => {
+  assert_throws_js(TypeError, () => fetchLater());
+}, `fetchLater() cannot be called without request.`);
+
+test(() => {
+  const result = fetchLater('/');
+  assert_false(result.sent);
+}, `fetchLater()'s return tells the deferred request is not yet sent.`);
diff --git a/test/wpt/tests/fetch/fetch-later/non-secure.window.js b/test/wpt/tests/fetch/fetch-later/non-secure.window.js
new file mode 100644
index 00000000000..2f2c3ea8d34
--- /dev/null
+++ b/test/wpt/tests/fetch/fetch-later/non-secure.window.js
@@ -0,0 +1,8 @@
+// META: script=/resources/testharness.js
+// META: script=/resources/testharnessreport.js
+
+'use strict';
+
+test(() => {
+  assert_false(window.hasOwnProperty('fetchLater'));
+}, `fetchLater() is not supported in non-secure context.`);
diff --git a/test/wpt/tests/fetch/fetch-later/sendondiscard.tentative.https.window.js b/test/wpt/tests/fetch/fetch-later/sendondiscard.tentative.https.window.js
new file mode 100644
index 00000000000..0613d18dffb
--- /dev/null
+++ b/test/wpt/tests/fetch/fetch-later/sendondiscard.tentative.https.window.js
@@ -0,0 +1,28 @@
+// META: script=/resources/testharness.js
+// META: script=/resources/testharnessreport.js
+// META: script=/common/utils.js
+// META: script=/pending-beacon/resources/pending_beacon-helper.js
+
+'use strict';
+
+parallelPromiseTest(async t => {
+  const uuid = token();
+  const url = generateSetBeaconURL(uuid);
+  const numPerMethod = 20;
+  const total = numPerMethod * 2;
+
+  // Loads an iframe that creates `numPerMethod` GET & POST fetchLater requests.
+  const iframe = await loadScriptAsIframe(`
+    const url = "${url}";
+    for (let i = 0; i < ${numPerMethod}; i++) {
+      let get = fetchLater(url);
+      let post = fetchLater(url, {method: 'POST'});
+    }
+  `);
+
+  // Delete the iframe to trigger deferred request sending.
+  document.body.removeChild(iframe);
+
+  // The iframe should have sent all requests.
+  await expectBeacon(uuid, {count: total});
+}, 'A discarded document sends all its fetchLater requests with default config.');
diff --git a/test/wpt/tests/fetch/h1-parsing/resources-with-0x00-in-header.window.js b/test/wpt/tests/fetch/h1-parsing/resources-with-0x00-in-header.window.js
index f1afeeb740b..37a61c12b56 100644
--- a/test/wpt/tests/fetch/h1-parsing/resources-with-0x00-in-header.window.js
+++ b/test/wpt/tests/fetch/h1-parsing/resources-with-0x00-in-header.window.js
@@ -15,7 +15,7 @@ async_test(t => {
   // https://github.com/whatwg/html/issues/125 and https://github.com/whatwg/html/issues/1230 this
   // should be changed to use the load event instead.
   t.step_timeout(() => {
-    assert_equals(frame.contentDocument, null);
+    assert_equals(window.frameLoaded, undefined);
     t.done();
   }, 1000);
   document.body.append(frame);
diff --git a/test/wpt/tests/fetch/h1-parsing/resources/document-with-0x00-in-header.py b/test/wpt/tests/fetch/h1-parsing/resources/document-with-0x00-in-header.py
index 223b3c40278..d91998b998d 100644
--- a/test/wpt/tests/fetch/h1-parsing/resources/document-with-0x00-in-header.py
+++ b/test/wpt/tests/fetch/h1-parsing/resources/document-with-0x00-in-header.py
@@ -1,4 +1,4 @@
 def main(request, response):
     response.headers.set(b"Content-Type", b"text/html")
     response.headers.set(b"Custom", b"\0")
-    return b"<!doctype html><b>This is a document.</b>"
+    return b"<!doctype html><script>top.frameLoaded=true</script><b>This is a document.</b>"
diff --git a/test/wpt/tests/fetch/local-network-access/README.md b/test/wpt/tests/fetch/local-network-access/README.md
deleted file mode 100644
index 8995e3d7ef6..00000000000
--- a/test/wpt/tests/fetch/local-network-access/README.md
+++ /dev/null
@@ -1,10 +0,0 @@
-# Local Network Access tests
-
-This directory contains tests for Local Network Access' integration with
-the Fetch specification.
-
-See also:
-
-* [The specification](https://wicg.github.io/local-network-access/)
-* [The repository](https://github.com/WICG/local-network-access/)
-* [Open issues](https://github.com/WICG/local-network-access/issues/)
diff --git a/test/wpt/tests/fetch/orb/resources/script-asm-js-invalid.js b/test/wpt/tests/fetch/orb/resources/script-asm-js-invalid.js
new file mode 100644
index 00000000000..8d1bbd6abc8
--- /dev/null
+++ b/test/wpt/tests/fetch/orb/resources/script-asm-js-invalid.js
@@ -0,0 +1,4 @@
+function f() {
+  "use asm";
+  return;
+}
diff --git a/test/wpt/tests/fetch/orb/resources/script-asm-js-valid.js b/test/wpt/tests/fetch/orb/resources/script-asm-js-valid.js
new file mode 100644
index 00000000000..79b375fe054
--- /dev/null
+++ b/test/wpt/tests/fetch/orb/resources/script-asm-js-valid.js
@@ -0,0 +1,4 @@
+function f() {
+  "use asm";
+  return {};
+}
diff --git a/test/wpt/tests/fetch/orb/tentative/known-mime-type.sub.any.js b/test/wpt/tests/fetch/orb/tentative/known-mime-type.sub.any.js
index 66a63c8b28a..b0521e8b363 100644
--- a/test/wpt/tests/fetch/orb/tentative/known-mime-type.sub.any.js
+++ b/test/wpt/tests/fetch/orb/tentative/known-mime-type.sub.any.js
@@ -74,3 +74,13 @@ promise_test(async () => {
 promise_test(async () => {
   await fetchORB(`${path}/script-iso-8559-1.js`, null, contentType("application/json"));
 }, "ORB shouldn't block opaque text/javascript (iso-8559-1 encoded)");
+
+// Test javascript validation can correctly parse asm.js.
+promise_test(async () => {
+  await fetchORB(`${path}/script-asm-js-valid.js`, null, contentType("application/json"));
+}, "ORB shouldn't block text/javascript with valid asm.js");
+
+// Test javascript validation can correctly parse invalid asm.js with valid JS syntax.
+promise_test(async () => {
+  await fetchORB(`${path}/script-asm-js-invalid.js`, null, contentType("application/json"));
+}, "ORB shouldn't block text/javascript with invalid asm.js");
diff --git a/test/wpt/tests/fetch/local-network-access/META.yml b/test/wpt/tests/fetch/private-network-access/META.yml
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/META.yml
rename to test/wpt/tests/fetch/private-network-access/META.yml
diff --git a/test/wpt/tests/fetch/private-network-access/README.md b/test/wpt/tests/fetch/private-network-access/README.md
new file mode 100644
index 00000000000..a69aab48723
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/README.md
@@ -0,0 +1,10 @@
+# Private Network Access tests
+
+This directory contains tests for Private Network Access' integration with
+the Fetch specification.
+
+See also:
+
+* [The specification](https://wicg.github.io/private-network-access/)
+* [The repository](https://github.com/WICG/private-network-access/)
+* [Open issues](https://github.com/WICG/private-network-access/issues/)
diff --git a/test/wpt/tests/fetch/private-network-access/fenced-frame-no-preflight-required.tentative.https.window.js b/test/wpt/tests/fetch/private-network-access/fenced-frame-no-preflight-required.tentative.https.window.js
new file mode 100644
index 00000000000..21233f61ea6
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/fenced-frame-no-preflight-required.tentative.https.window.js
@@ -0,0 +1,91 @@
+// META: script=/common/dispatcher/dispatcher.js
+// META: script=/common/utils.js
+// META: script=resources/support.sub.js
+// META: script=/fenced-frame/resources/utils.js
+// META: timeout=long
+//
+// Spec: https://wicg.github.io/private-network-access/#integration-fetch
+//
+// These tests verify that contexts can navigate fenced frames to more-public or
+// same address spaces without private network access preflight request header.
+
+setup(() => {
+  assert_true(window.isSecureContext);
+});
+
+// Source: secure local context.
+//
+// All fetches unaffected by Private Network Access.
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {server: Server.HTTPS_LOCAL},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'local to local: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {server: Server.HTTPS_PRIVATE},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'local to private: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {server: Server.HTTPS_PUBLIC},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'local to public: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {server: Server.HTTPS_PRIVATE},
+      target: {server: Server.HTTPS_PRIVATE},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'private to private: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {server: Server.HTTPS_PRIVATE},
+      target: {server: Server.HTTPS_PUBLIC},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'private to public: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {server: Server.HTTPS_PUBLIC},
+      target: {server: Server.HTTPS_PUBLIC},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'public to public: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {
+        server: Server.HTTPS_LOCAL,
+        treatAsPublic: true,
+      },
+      target: {server: Server.HTTPS_PUBLIC},
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'treat-as-public-address to public: no preflight required.');
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {
+        server: Server.HTTPS_LOCAL,
+        treatAsPublic: true,
+      },
+      target: {
+        server: Server.HTTPS_PUBLIC,
+        behavior: {preflight: PreflightBehavior.optionalSuccess(token())}
+      },
+      expected: FrameTestResult.SUCCESS,
+    }),
+    'treat-as-public-address to local: optional preflight');
diff --git a/test/wpt/tests/fetch/private-network-access/fenced-frame-subresource-fetch.tentative.https.window.js b/test/wpt/tests/fetch/private-network-access/fenced-frame-subresource-fetch.tentative.https.window.js
new file mode 100644
index 00000000000..2dff325e3e1
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/fenced-frame-subresource-fetch.tentative.https.window.js
@@ -0,0 +1,330 @@
+// META: script=/common/subset-tests-by-key.js
+// META: script=/common/utils.js
+// META: script=resources/support.sub.js
+// META: script=/fenced-frame/resources/utils.js
+// META: variant=?include=baseline
+// META: variant=?include=from-local
+// META: variant=?include=from-private
+// META: variant=?include=from-public
+// META: timeout=long
+//
+// Spec: https://wicg.github.io/private-network-access/#integration-fetch
+//
+// These tests verify that secure contexts can fetch subresources in fenced
+// frames from all address spaces, provided that the target server, if more
+// private than the initiator, respond affirmatively to preflight requests.
+//
+
+setup(() => {
+  // Making sure we are in a secure context, as expected.
+  assert_true(window.isSecureContext);
+});
+
+// Source: secure local context.
+//
+// All fetches unaffected by Private Network Access.
+
+subsetTestByKey(
+    'from-local', promise_test, t => fencedFrameFetchTest(t, {
+                                  source: {server: Server.HTTPS_LOCAL},
+                                  target: {server: Server.HTTPS_LOCAL},
+                                  fetchOptions: {method: 'GET', mode: 'cors'},
+                                  expected: FetchTestResult.SUCCESS,
+                                }),
+    'local to local: no preflight required.');
+
+subsetTestByKey(
+    'from-local', promise_test,
+    t => fencedFrameFetchTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {
+        server: Server.HTTPS_PRIVATE,
+        behavior: {response: ResponseBehavior.allowCrossOrigin()},
+      },
+      fetchOptions: {method: 'GET', mode: 'cors'},
+      expected: FetchTestResult.SUCCESS,
+    }),
+    'local to private: no preflight required.');
+
+
+subsetTestByKey(
+    'from-local', promise_test,
+    t => fencedFrameFetchTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {
+        server: Server.HTTPS_PUBLIC,
+        behavior: {response: ResponseBehavior.allowCrossOrigin()},
+      },
+      fetchOptions: {method: 'GET', mode: 'cors'},
+      expected: FetchTestResult.SUCCESS,
+    }),
+    'local to public: no preflight required.');
+
+// Strictly speaking, the following two tests do not exercise PNA-specific
+// logic, but they serve as a baseline for comparison, ensuring that non-PNA
+// preflight requests are sent and handled as expected.
+
+subsetTestByKey(
+    'baseline', promise_test,
+    t => fencedFrameFetchTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {
+        server: Server.HTTPS_PUBLIC,
+        behavior: {
+          preflight: PreflightBehavior.failure(),
+          response: ResponseBehavior.allowCrossOrigin(),
+        },
+      },
+      fetchOptions: {method: 'PUT', mode: 'cors'},
+      expected: FetchTestResult.FAILURE,
+    }),
+    'local to public: PUT preflight failure.');
+
+subsetTestByKey(
+    'baseline', promise_test,
+    t => fencedFrameFetchTest(t, {
+      source: {server: Server.HTTPS_LOCAL},
+      target: {
+        server: Server.HTTPS_PUBLIC,
+        behavior: {
+          preflight: PreflightBehavior.success(token()),
+          response: ResponseBehavior.allowCrossOrigin(),
+        }
+      },
+      fetchOptions: {method: 'PUT', mode: 'cors'},
+      expected: FetchTestResult.SUCCESS,
+    }),
+    'local to public: PUT preflight success.');
+
+// Generates tests of preflight behavior for a single (source, target) pair.
+//
+// Scenarios:
+//
+//  - cors mode:
+//    - preflight response has non-2xx HTTP code
+//    - preflight response is missing CORS headers
+//    - preflight response is missing the PNA-specific `Access-Control` header
+//    - final response is missing CORS headers
+//    - success
+//    - success with PUT method (non-"simple" request)
+//  - no-cors mode:
+//    - preflight response has non-2xx HTTP code
+//    - preflight response is missing CORS headers
+//    - preflight response is missing the PNA-specific `Access-Control` header
+//    - success
+//
+function makePreflightTests({
+  subsetKey,
+  source,
+  sourceDescription,
+  targetServer,
+  targetDescription,
+}) {
+  const prefix = `${sourceDescription} to ${targetDescription}: `;
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {
+            preflight: PreflightBehavior.failure(),
+            response: ResponseBehavior.allowCrossOrigin(),
+          },
+        },
+        fetchOptions: {method: 'GET', mode: 'cors'},
+        expected: FetchTestResult.FAILURE,
+      }),
+      prefix + 'failed preflight.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {
+            preflight: PreflightBehavior.noCorsHeader(token()),
+            response: ResponseBehavior.allowCrossOrigin(),
+          },
+        },
+        fetchOptions: {method: 'GET', mode: 'cors'},
+        expected: FetchTestResult.FAILURE,
+      }),
+      prefix + 'missing CORS headers on preflight response.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {
+            preflight: PreflightBehavior.noPnaHeader(token()),
+            response: ResponseBehavior.allowCrossOrigin(),
+          },
+        },
+        fetchOptions: {method: 'GET', mode: 'cors'},
+        expected: FetchTestResult.FAILURE,
+      }),
+      prefix + 'missing PNA header on preflight response.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.success(token())},
+        },
+        fetchOptions: {method: 'GET', mode: 'cors'},
+        expected: FetchTestResult.FAILURE,
+      }),
+      prefix + 'missing CORS headers on final response.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {
+            preflight: PreflightBehavior.success(token()),
+            response: ResponseBehavior.allowCrossOrigin(),
+          },
+        },
+        fetchOptions: {method: 'GET', mode: 'cors'},
+        expected: FetchTestResult.SUCCESS,
+      }),
+      prefix + 'success.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {
+            preflight: PreflightBehavior.success(token()),
+            response: ResponseBehavior.allowCrossOrigin(),
+          },
+        },
+        fetchOptions: {method: 'PUT', mode: 'cors'},
+        expected: FetchTestResult.SUCCESS,
+      }),
+      prefix + 'PUT success.');
+
+  subsetTestByKey(
+      subsetKey, promise_test, t => fencedFrameFetchTest(t, {
+                                 source,
+                                 target: {server: targetServer},
+                                 fetchOptions: {method: 'GET', mode: 'no-cors'},
+                                 expected: FetchTestResult.FAILURE,
+                               }),
+      prefix + 'no-CORS mode failed preflight.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.noCorsHeader(token())},
+        },
+        fetchOptions: {method: 'GET', mode: 'no-cors'},
+        expected: FetchTestResult.FAILURE,
+      }),
+      prefix + 'no-CORS mode missing CORS headers on preflight response.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.noPnaHeader(token())},
+        },
+        fetchOptions: {method: 'GET', mode: 'no-cors'},
+        expected: FetchTestResult.FAILURE,
+      }),
+      prefix + 'no-CORS mode missing PNA header on preflight response.');
+
+  subsetTestByKey(
+      subsetKey, promise_test,
+      t => fencedFrameFetchTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.success(token())},
+        },
+        fetchOptions: {method: 'GET', mode: 'no-cors'},
+        expected: FetchTestResult.OPAQUE,
+      }),
+      prefix + 'no-CORS mode success.');
+}
+
+// Source: private secure context.
+//
+// Fetches to the local address space require a successful preflight response
+// carrying a PNA-specific header.
+
+makePreflightTests({
+  subsetKey: 'from-private',
+  source: {server: Server.HTTPS_PRIVATE},
+  sourceDescription: 'private',
+  targetServer: Server.HTTPS_LOCAL,
+  targetDescription: 'local',
+});
+
+subsetTestByKey(
+    'from-private', promise_test, t => fencedFrameFetchTest(t, {
+                                    source: {server: Server.HTTPS_PRIVATE},
+                                    target: {server: Server.HTTPS_PRIVATE},
+                                    fetchOptions: {method: 'GET', mode: 'cors'},
+                                    expected: FetchTestResult.SUCCESS,
+                                  }),
+    'private to private: no preflight required.');
+
+subsetTestByKey(
+    'from-private', promise_test,
+    t => fencedFrameFetchTest(t, {
+      source: {server: Server.HTTPS_PRIVATE},
+      target: {
+        server: Server.HTTPS_PRIVATE,
+        behavior: {response: ResponseBehavior.allowCrossOrigin()},
+      },
+      fetchOptions: {method: 'GET', mode: 'cors'},
+      expected: FetchTestResult.SUCCESS,
+    }),
+    'private to public: no preflight required.');
+
+// Source: public secure context.
+//
+// Fetches to the local and private address spaces require a successful
+// preflight response carrying a PNA-specific header.
+
+makePreflightTests({
+  subsetKey: 'from-public',
+  source: {server: Server.HTTPS_PUBLIC},
+  sourceDescription: 'public',
+  targetServer: Server.HTTPS_LOCAL,
+  targetDescription: 'local',
+});
+
+makePreflightTests({
+  subsetKey: 'from-public',
+  source: {server: Server.HTTPS_PUBLIC},
+  sourceDescription: 'public',
+  targetServer: Server.HTTPS_PRIVATE,
+  targetDescription: 'private',
+});
+
+subsetTestByKey(
+    'from-public', promise_test, t => fencedFrameFetchTest(t, {
+                                   source: {server: Server.HTTPS_PUBLIC},
+                                   target: {server: Server.HTTPS_PUBLIC},
+                                   fetchOptions: {method: 'GET', mode: 'cors'},
+                                   expected: FetchTestResult.SUCCESS,
+                                 }),
+    'public to public: no preflight required.');
diff --git a/test/wpt/tests/fetch/private-network-access/fenced-frame.tentative.https.window.js b/test/wpt/tests/fetch/private-network-access/fenced-frame.tentative.https.window.js
new file mode 100644
index 00000000000..370cc9fbe9d
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/fenced-frame.tentative.https.window.js
@@ -0,0 +1,150 @@
+// META: script=/common/dispatcher/dispatcher.js
+// META: script=/common/utils.js
+// META: script=resources/support.sub.js
+// META: script=/fenced-frame/resources/utils.js
+// META: timeout=long
+//
+// Spec: https://wicg.github.io/private-network-access/#integration-fetch
+//
+// These tests verify that contexts can navigate fenced frames to less-public
+// address spaces iff the target server responds affirmatively to preflight
+// requests.
+
+setup(() => {
+  assert_true(window.isSecureContext);
+});
+
+// Generates tests of preflight behavior for a single (source, target) pair.
+//
+// Scenarios:
+//
+// - parent navigates child:
+//   - preflight response has non-2xx HTTP code
+//   - preflight response is missing CORS headers
+//   - preflight response is missing the PNA-specific `Access-Control` header
+//   - preflight response has the required PNA related headers, but still fails
+//     because of the limitation of fenced frame that subjects to PNA checks.
+//
+function makePreflightTests({
+  sourceName,
+  sourceServer,
+  sourceTreatAsPublic,
+  targetName,
+  targetServer,
+}) {
+  const prefix = `${sourceName} to ${targetName}: `;
+
+  const source = {
+    server: sourceServer,
+    treatAsPublic: sourceTreatAsPublic,
+  };
+
+  promise_test_parallel(
+      t => fencedFrameTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.failure()},
+        },
+        expected: FrameTestResult.FAILURE,
+      }),
+      prefix + 'failed preflight.');
+
+  promise_test_parallel(
+      t => fencedFrameTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.noCorsHeader(token())},
+        },
+        expected: FrameTestResult.FAILURE,
+      }),
+      prefix + 'missing CORS headers.');
+
+  promise_test_parallel(
+      t => fencedFrameTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {preflight: PreflightBehavior.noPnaHeader(token())},
+        },
+        expected: FrameTestResult.FAILURE,
+      }),
+      prefix + 'missing PNA header.');
+
+  promise_test_parallel(
+      t => fencedFrameTest(t, {
+        source,
+        target: {
+          server: targetServer,
+          behavior: {
+            preflight: PreflightBehavior.success(token()),
+            response: ResponseBehavior.allowCrossOrigin()
+          },
+        },
+        expected: FrameTestResult.FAILURE,
+      }),
+      prefix + 'failed because fenced frames are incompatible with PNA.');
+}
+
+// Source: private secure context.
+//
+// Fetches to the local address space require a successful preflight response
+// carrying a PNA-specific header.
+
+makePreflightTests({
+  sourceServer: Server.HTTPS_PRIVATE,
+  sourceName: 'private',
+  targetServer: Server.HTTPS_LOCAL,
+  targetName: 'local',
+});
+
+// Source: public secure context.
+//
+// Fetches to the local and private address spaces require a successful
+// preflight response carrying a PNA-specific header.
+
+makePreflightTests({
+  sourceServer: Server.HTTPS_PUBLIC,
+  sourceName: 'public',
+  targetServer: Server.HTTPS_LOCAL,
+  targetName: 'local',
+});
+
+makePreflightTests({
+  sourceServer: Server.HTTPS_PUBLIC,
+  sourceName: 'public',
+  targetServer: Server.HTTPS_PRIVATE,
+  targetName: 'private',
+});
+
+// The following tests verify that `CSP: treat-as-public-address` makes
+// documents behave as if they had been served from a public IP address.
+
+makePreflightTests({
+  sourceServer: Server.HTTPS_LOCAL,
+  sourceTreatAsPublic: true,
+  sourceName: 'treat-as-public-address',
+  targetServer: Server.OTHER_HTTPS_LOCAL,
+  targetName: 'local',
+});
+
+promise_test_parallel(
+    t => fencedFrameTest(t, {
+      source: {
+        server: Server.HTTPS_LOCAL,
+        treatAsPublic: true,
+      },
+      target: {server: Server.HTTPS_LOCAL},
+      expected: FrameTestResult.FAILURE,
+    }),
+    'treat-as-public-address to local (same-origin): fenced frame embedder ' +
+    'initiated navigation has opaque origin.');
+
+makePreflightTests({
+  sourceServer: Server.HTTPS_LOCAL,
+  sourceTreatAsPublic: true,
+  sourceName: 'treat-as-public-address',
+  targetServer: Server.HTTPS_PRIVATE,
+  targetName: 'private',
+});
diff --git a/test/wpt/tests/fetch/local-network-access/fetch-from-treat-as-public.https.window.js b/test/wpt/tests/fetch/private-network-access/fetch-from-treat-as-public.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/fetch-from-treat-as-public.https.window.js
rename to test/wpt/tests/fetch/private-network-access/fetch-from-treat-as-public.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/fetch.https.window.js b/test/wpt/tests/fetch/private-network-access/fetch.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/fetch.https.window.js
rename to test/wpt/tests/fetch/private-network-access/fetch.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/fetch.window.js b/test/wpt/tests/fetch/private-network-access/fetch.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/fetch.window.js
rename to test/wpt/tests/fetch/private-network-access/fetch.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/iframe.tentative.https.window.js b/test/wpt/tests/fetch/private-network-access/iframe.tentative.https.window.js
similarity index 63%
rename from test/wpt/tests/fetch/local-network-access/iframe.tentative.https.window.js
rename to test/wpt/tests/fetch/private-network-access/iframe.tentative.https.window.js
index 6a83b88d3ff..0c12970557d 100644
--- a/test/wpt/tests/fetch/local-network-access/iframe.tentative.https.window.js
+++ b/test/wpt/tests/fetch/private-network-access/iframe.tentative.https.window.js
@@ -1,6 +1,13 @@
+// META: script=/common/subset-tests-by-key.js
 // META: script=/common/dispatcher/dispatcher.js
 // META: script=/common/utils.js
 // META: script=resources/support.sub.js
+// META: timeout=long
+// META: variant=?include=from-local
+// META: variant=?include=from-private
+// META: variant=?include=from-public
+// META: variant=?include=from-treat-as-public
+// META: variant=?include=grandparent
 //
 // Spec: https://wicg.github.io/private-network-access/#integration-fetch
 //
@@ -18,22 +25,22 @@ setup(() => {
 //
 // All fetches unaffected by Private Network Access.
 
-promise_test_parallel(t => iframeTest(t, {
+subsetTestByKey("from-local", promise_test_parallel, t => iframeTest(t, {
   source: { server: Server.HTTPS_LOCAL },
   target: { server: Server.HTTPS_LOCAL },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "local to local: no preflight required.");
 
-promise_test_parallel(t => iframeTest(t, {
+subsetTestByKey("from-local", promise_test_parallel, t => iframeTest(t, {
   source: { server: Server.HTTPS_LOCAL },
   target: { server: Server.HTTPS_PRIVATE },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "local to private: no preflight required.");
 
-promise_test_parallel(t => iframeTest(t, {
+subsetTestByKey("from-local", promise_test_parallel, t => iframeTest(t, {
   source: { server: Server.HTTPS_LOCAL },
   target: { server: Server.HTTPS_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "local to public: no preflight required.");
 
 // Generates tests of preflight behavior for a single (source, target) pair.
@@ -47,6 +54,7 @@ promise_test_parallel(t => iframeTest(t, {
 //   - success
 //
 function makePreflightTests({
+  key,
   sourceName,
   sourceServer,
   sourceTreatAsPublic,
@@ -67,7 +75,7 @@ function makePreflightTests({
       server: targetServer,
       behavior: { preflight: PreflightBehavior.failure() },
     },
-    expected: IframeTestResult.FAILURE,
+    expected: FrameTestResult.FAILURE,
   }), prefix + "failed preflight.");
 
   promise_test_parallel(t => iframeTest(t, {
@@ -76,7 +84,7 @@ function makePreflightTests({
       server: targetServer,
       behavior: { preflight: PreflightBehavior.noCorsHeader(token()) },
     },
-    expected: IframeTestResult.FAILURE,
+    expected: FrameTestResult.FAILURE,
   }), prefix + "missing CORS headers.");
 
   promise_test_parallel(t => iframeTest(t, {
@@ -85,7 +93,7 @@ function makePreflightTests({
       server: targetServer,
       behavior: { preflight: PreflightBehavior.noPnaHeader(token()) },
     },
-    expected: IframeTestResult.FAILURE,
+    expected: FrameTestResult.FAILURE,
   }), prefix + "missing PNA header.");
 
   promise_test_parallel(t => iframeTest(t, {
@@ -94,7 +102,7 @@ function makePreflightTests({
       server: targetServer,
       behavior: { preflight: PreflightBehavior.success(token()) },
     },
-    expected: IframeTestResult.SUCCESS,
+    expected: FrameTestResult.SUCCESS,
   }), prefix + "success.");
 }
 
@@ -103,23 +111,23 @@ function makePreflightTests({
 // Fetches to the local address space require a successful preflight response
 // carrying a PNA-specific header.
 
-makePreflightTests({
+subsetTestByKey('from-private', makePreflightTests, {
   sourceServer: Server.HTTPS_PRIVATE,
-  sourceName: "private",
+  sourceName: 'private',
   targetServer: Server.HTTPS_LOCAL,
-  targetName: "local",
+  targetName: 'local',
 });
 
-promise_test_parallel(t => iframeTest(t, {
+subsetTestByKey("from-private", promise_test_parallel, t => iframeTest(t, {
   source: { server: Server.HTTPS_PRIVATE },
   target: { server: Server.HTTPS_PRIVATE },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "private to private: no preflight required.");
 
-promise_test_parallel(t => iframeTest(t, {
+subsetTestByKey("from-private", promise_test_parallel, t => iframeTest(t, {
   source: { server: Server.HTTPS_PRIVATE },
   target: { server: Server.HTTPS_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "private to public: no preflight required.");
 
 // Source: public secure context.
@@ -127,30 +135,30 @@ promise_test_parallel(t => iframeTest(t, {
 // Fetches to the local and private address spaces require a successful
 // preflight response carrying a PNA-specific header.
 
-makePreflightTests({
+subsetTestByKey('from-public', makePreflightTests, {
   sourceServer: Server.HTTPS_PUBLIC,
   sourceName: "public",
   targetServer: Server.HTTPS_LOCAL,
   targetName: "local",
 });
 
-makePreflightTests({
+subsetTestByKey('from-public', makePreflightTests, {
   sourceServer: Server.HTTPS_PUBLIC,
   sourceName: "public",
   targetServer: Server.HTTPS_PRIVATE,
   targetName: "private",
 });
 
-promise_test_parallel(t => iframeTest(t, {
+subsetTestByKey("from-public", promise_test_parallel, t => iframeTest(t, {
   source: { server: Server.HTTPS_PUBLIC },
   target: { server: Server.HTTPS_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "public to public: no preflight required.");
 
 // The following tests verify that `CSP: treat-as-public-address` makes
 // documents behave as if they had been served from a public IP address.
 
-makePreflightTests({
+subsetTestByKey('from-treat-as-public', makePreflightTests, {
   sourceServer: Server.HTTPS_LOCAL,
   sourceTreatAsPublic: true,
   sourceName: "treat-as-public-address",
@@ -158,16 +166,20 @@ makePreflightTests({
   targetName: "local",
 });
 
-promise_test_parallel(t => iframeTest(t, {
-  source: {
-    server: Server.HTTPS_LOCAL,
-    treatAsPublic: true,
-  },
-  target: { server: Server.HTTPS_LOCAL },
-  expected: IframeTestResult.SUCCESS,
-}), "treat-as-public-address to local (same-origin): no preflight required.");
+subsetTestByKey(
+  'from-treat-as-public', promise_test_parallel,
+  t => iframeTest(t, {
+    source: {
+      server: Server.HTTPS_LOCAL,
+      treatAsPublic: true,
+    },
+    target: {server: Server.HTTPS_LOCAL},
+    expected: FrameTestResult.SUCCESS,
+  }),
+  'treat-as-public-address to local (same-origin): no preflight required.'
+);
 
-makePreflightTests({
+subsetTestByKey('from-treat-as-public', makePreflightTests, {
   sourceServer: Server.HTTPS_LOCAL,
   sourceTreatAsPublic: true,
   sourceName: "treat-as-public-address",
@@ -175,49 +187,57 @@ makePreflightTests({
   targetName: "private",
 });
 
-promise_test_parallel(t => iframeTest(t, {
-  source: {
-    server: Server.HTTPS_LOCAL,
-    treatAsPublic: true,
-  },
-  target: { server: Server.HTTPS_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
-}), "treat-as-public-address to public: no preflight required.");
+subsetTestByKey(
+  'from-treat-as-public', promise_test_parallel,
+  t => iframeTest(t, {
+    source: {
+      server: Server.HTTPS_LOCAL,
+      treatAsPublic: true,
+    },
+    target: {server: Server.HTTPS_PUBLIC},
+    expected: FrameTestResult.SUCCESS,
+  }),
+  'treat-as-public-address to public: no preflight required.'
+);
 
-promise_test_parallel(t => iframeTest(t, {
-  source: {
-    server: Server.HTTPS_LOCAL,
-    treatAsPublic: true,
-  },
-  target: {
-    server: Server.HTTPS_PUBLIC,
-    behavior: { preflight: PreflightBehavior.optionalSuccess(token()) }
-  },
-  expected: IframeTestResult.SUCCESS,
-}), "treat-as-public-address to local: optional preflight");
+subsetTestByKey(
+  'from-treat-as-public', promise_test_parallel,
+  t => iframeTest(t, {
+    source: {
+      server: Server.HTTPS_LOCAL,
+      treatAsPublic: true,
+    },
+    target: {
+      server: Server.HTTPS_PUBLIC,
+      behavior: {preflight: PreflightBehavior.optionalSuccess(token())}
+    },
+    expected: FrameTestResult.SUCCESS,
+  }),
+  'treat-as-public-address to local: optional preflight'
+);
 
 // The following tests verify that when a grandparent frame navigates its
 // grandchild, the IP address space of the grandparent is compared against the
 // IP address space of the response. Indeed, the navigation initiator in this
 // case is the grandparent, not the parent.
 
-iframeGrandparentTest({
-  name: "local to local, grandparent navigates: no preflight required.",
+subsetTestByKey('grandparent', iframeGrandparentTest, {
+  name: 'local to local, grandparent navigates: no preflight required.',
   grandparentServer: Server.HTTPS_LOCAL,
-  child: { server: Server.HTTPS_PUBLIC },
-  grandchild: { server: Server.OTHER_HTTPS_LOCAL },
-  expected: IframeTestResult.SUCCESS,
+  child: {server: Server.HTTPS_PUBLIC},
+  grandchild: {server: Server.OTHER_HTTPS_LOCAL},
+  expected: FrameTestResult.SUCCESS,
 });
 
-iframeGrandparentTest({
+subsetTestByKey('grandparent', iframeGrandparentTest, {
   name: "local to local (same-origin), grandparent navigates: no preflight required.",
   grandparentServer: Server.HTTPS_LOCAL,
   child: { server: Server.HTTPS_PUBLIC },
   grandchild: { server: Server.HTTPS_LOCAL },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 });
 
-iframeGrandparentTest({
+subsetTestByKey('grandparent', iframeGrandparentTest, {
   name: "public to local, grandparent navigates: failure.",
   grandparentServer: Server.HTTPS_PUBLIC,
   child: {
@@ -228,10 +248,10 @@ iframeGrandparentTest({
     server: Server.HTTPS_LOCAL,
     behavior: { preflight: PreflightBehavior.failure() },
   },
-  expected: IframeTestResult.FAILURE,
+  expected: FrameTestResult.FAILURE,
 });
 
-iframeGrandparentTest({
+subsetTestByKey('grandparent', iframeGrandparentTest, {
   name: "public to local, grandparent navigates: success.",
   grandparentServer: Server.HTTPS_PUBLIC,
   child: {
@@ -242,5 +262,5 @@ iframeGrandparentTest({
     server: Server.HTTPS_LOCAL,
     behavior: { preflight: PreflightBehavior.success(token()) },
   },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 });
diff --git a/test/wpt/tests/fetch/local-network-access/iframe.tentative.window.js b/test/wpt/tests/fetch/private-network-access/iframe.tentative.window.js
similarity index 86%
rename from test/wpt/tests/fetch/local-network-access/iframe.tentative.window.js
rename to test/wpt/tests/fetch/private-network-access/iframe.tentative.window.js
index e00cb202bec..c0770df8385 100644
--- a/test/wpt/tests/fetch/local-network-access/iframe.tentative.window.js
+++ b/test/wpt/tests/fetch/private-network-access/iframe.tentative.window.js
@@ -18,55 +18,55 @@ setup(() => {
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_LOCAL },
   target: { server: Server.HTTP_LOCAL },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "local to local: no preflight required.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_LOCAL },
   target: { server: Server.HTTP_PRIVATE },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "local to private: no preflight required.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_LOCAL },
   target: { server: Server.HTTP_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "local to public: no preflight required.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_PRIVATE },
   target: { server: Server.HTTP_LOCAL },
-  expected: IframeTestResult.FAILURE,
+  expected: FrameTestResult.FAILURE,
 }), "private to local: failure.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_PRIVATE },
   target: { server: Server.HTTP_PRIVATE },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "private to private: no preflight required.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_PRIVATE },
   target: { server: Server.HTTP_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "private to public: no preflight required.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_PUBLIC },
   target: { server: Server.HTTP_LOCAL },
-  expected: IframeTestResult.FAILURE,
+  expected: FrameTestResult.FAILURE,
 }), "public to local: failure.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_PUBLIC },
   target: { server: Server.HTTP_PRIVATE },
-  expected: IframeTestResult.FAILURE,
+  expected: FrameTestResult.FAILURE,
 }), "public to private: failure.");
 
 promise_test_parallel(t => iframeTest(t, {
   source: { server: Server.HTTP_PUBLIC },
   target: { server: Server.HTTP_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "public to public: no preflight required.");
 
 promise_test_parallel(t => iframeTest(t, {
@@ -75,7 +75,7 @@ promise_test_parallel(t => iframeTest(t, {
     treatAsPublic: true,
   },
   target: { server: Server.HTTP_LOCAL },
-  expected: IframeTestResult.FAILURE,
+  expected: FrameTestResult.FAILURE,
 }), "treat-as-public-address to local: failure.");
 
 promise_test_parallel(t => iframeTest(t, {
@@ -84,7 +84,7 @@ promise_test_parallel(t => iframeTest(t, {
     treatAsPublic: true,
   },
   target: { server: Server.HTTP_PRIVATE },
-  expected: IframeTestResult.FAILURE,
+  expected: FrameTestResult.FAILURE,
 }), "treat-as-public-address to private: failure.");
 
 promise_test_parallel(t => iframeTest(t, {
@@ -93,7 +93,7 @@ promise_test_parallel(t => iframeTest(t, {
     treatAsPublic: true,
   },
   target: { server: Server.HTTP_PUBLIC },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 }), "treat-as-public-address to public: no preflight required.");
 
 // The following test verifies that when a grandparent frame navigates its
@@ -106,5 +106,5 @@ iframeGrandparentTest({
   grandparentServer: Server.HTTP_LOCAL,
   child: { server: Server.HTTP_PUBLIC },
   grandchild: { server: Server.HTTP_LOCAL },
-  expected: IframeTestResult.SUCCESS,
+  expected: FrameTestResult.SUCCESS,
 });
diff --git a/test/wpt/tests/fetch/local-network-access/mixed-content-fetch.tentative.https.window.js b/test/wpt/tests/fetch/private-network-access/mixed-content-fetch.tentative.https.window.js
similarity index 77%
rename from test/wpt/tests/fetch/local-network-access/mixed-content-fetch.tentative.https.window.js
rename to test/wpt/tests/fetch/private-network-access/mixed-content-fetch.tentative.https.window.js
index 6f7d765617c..54485dc7047 100644
--- a/test/wpt/tests/fetch/local-network-access/mixed-content-fetch.tentative.https.window.js
+++ b/test/wpt/tests/fetch/private-network-access/mixed-content-fetch.tentative.https.window.js
@@ -1,10 +1,10 @@
 // META: script=/common/utils.js
 // META: script=resources/support.sub.js
 //
-// Spec: https://wicg.github.io/local-network-access
+// Spec: https://wicg.github.io/private-network-access
 //
 // These tests verify that secure contexts can fetch non-secure subresources
-// from more local address spaces, avoiding mixed context checks, as long as
+// from more private address spaces, avoiding mixed context checks, as long as
 // they specify a valid `targetAddressSpace` fetch option that matches the
 // target server's address space.
 
@@ -16,9 +16,9 @@ setup(() => {
 // Given `addressSpace`, returns the other three possible IP address spaces.
 function otherAddressSpaces(addressSpace) {
   switch (addressSpace) {
-    case "loopback": return ["unknown", "local", "public"];
-    case "local": return ["unknown", "loopback", "public"];
-    case "public": return ["unknown", "loopback", "local"];
+    case "local": return ["unknown", "private", "public"];
+    case "private": return ["unknown", "local", "public"];
+    case "public": return ["unknown", "local", "private"];
   }
 }
 
@@ -169,66 +169,64 @@ function makeNoBypassTests({ source, target }) {
     },
     fetchOptions: { targetAddressSpace: correctAddressSpace },
     expected: FetchTestResult.FAILURE,
-  }), prefix + 'not a local network request.');
+  }), prefix + 'not a private network request.');
 }
 
-// Source: loopback secure context.
+// Source: local secure context.
 //
-// Fetches to the loopback and local address spaces cannot use
+// Fetches to the local and private address spaces cannot use
 // `targetAddressSpace` to bypass mixed content, as they are not otherwise
-// blocked by Local Network Access.
+// blocked by Private Network Access.
 
-makeNoBypassTests({ source: "loopback", target: "loopback" });
-makeNoBypassTests({ source: "loopback", target: "local" });
-makeNoBypassTests({ source: "loopback", target: "public" });
+makeNoBypassTests({ source: "local", target: "local" });
+makeNoBypassTests({ source: "local", target: "private" });
+makeNoBypassTests({ source: "local", target: "public" });
 
-// Source: local secure context.
+// Source: private secure context.
 //
-// Fetches to the loopback address space requires the right `targetAddressSpace`
+// Fetches to the local address space requires the right `targetAddressSpace`
 // option, as well as a successful preflight response carrying a PNA-specific
 // header.
 //
-// Fetches to the local address space cannot use `targetAddressSpace` to
-// bypass mixed content, as they are not otherwise blocked by Local Network
+// Fetches to the private address space cannot use `targetAddressSpace` to
+// bypass mixed content, as they are not otherwise blocked by Private Network
 // Access.
 
-makeTests({ source: "local", target: "loopback" });
+makeTests({ source: "private", target: "local" });
 
-makeNoBypassTests({ source: "local", target: "local" });
-makeNoBypassTests({ source: "local", target: "public" });
+makeNoBypassTests({ source: "private", target: "private" });
+makeNoBypassTests({ source: "private", target: "public" });
 
 // Source: public secure context.
 //
-// Fetches to the loopback and local address spaces require the right
+// Fetches to the local and private address spaces require the right
 // `targetAddressSpace` option, as well as a successful preflight response
 // carrying a PNA-specific header.
 
-makeTests({ source: "public", target: "loopback" });
 makeTests({ source: "public", target: "local" });
+makeTests({ source: "public", target: "private" });
 
 makeNoBypassTests({ source: "public", target: "public" });
 
-// These tests verify that documents fetched from the `loopback` address space
-// yet carrying the `treat-as-public-address` CSP directive are treated as if
-// they had been fetched from the `public` address space.
+// These tests verify that documents fetched from the `local` address space yet
+// carrying the `treat-as-public-address` CSP directive are treated as if they
+// had been fetched from the `public` address space.
 
-promise_test_parallel(
-    t => fetchTest(t, {
-      source: {
-        server: Server.HTTPS_LOCAL,
-        treatAsPublic: true,
-      },
-      target: {
-        server: Server.HTTP_LOCAL,
-        behavior: {
-          preflight: PreflightBehavior.optionalSuccess(token()),
-          response: ResponseBehavior.allowCrossOrigin(),
-        },
-      },
-      fetchOptions: {targetAddressSpace: 'local'},
-      expected: FetchTestResult.FAILURE,
-    }),
-    'https-treat-as-public to http-loopback: wrong targetAddressSpace "local".');
+promise_test_parallel(t => fetchTest(t, {
+  source: {
+    server: Server.HTTPS_LOCAL,
+    treatAsPublic: true,
+  },
+  target: {
+    server: Server.HTTP_LOCAL,
+    behavior: {
+      preflight: PreflightBehavior.optionalSuccess(token()),
+      response: ResponseBehavior.allowCrossOrigin(),
+    },
+  },
+  fetchOptions: { targetAddressSpace: "private" },
+  expected: FetchTestResult.FAILURE,
+}), 'https-treat-as-public to http-local: wrong targetAddressSpace "private".');
 
 promise_test_parallel(t => fetchTest(t, {
   source: {
@@ -242,9 +240,9 @@ promise_test_parallel(t => fetchTest(t, {
       response: ResponseBehavior.allowCrossOrigin(),
     },
   },
-  fetchOptions: { targetAddressSpace: "loopback" },
+  fetchOptions: { targetAddressSpace: "local" },
   expected: FetchTestResult.SUCCESS,
-}), "https-treat-as-public to http-loopback: success.");
+}), "https-treat-as-public to http-local: success.");
 
 promise_test_parallel(t => fetchTest(t, {
   source: {
@@ -258,9 +256,9 @@ promise_test_parallel(t => fetchTest(t, {
       response: ResponseBehavior.allowCrossOrigin(),
     },
   },
-  fetchOptions: { targetAddressSpace: "loopback" },
+  fetchOptions: { targetAddressSpace: "local" },
   expected: FetchTestResult.FAILURE,
-}), 'https-treat-as-public to http-local: wrong targetAddressSpace "loopback".');
+}), 'https-treat-as-public to http-private: wrong targetAddressSpace "local".');
 
 promise_test_parallel(t => fetchTest(t, {
   source: {
@@ -274,6 +272,6 @@ promise_test_parallel(t => fetchTest(t, {
       response: ResponseBehavior.allowCrossOrigin(),
     },
   },
-  fetchOptions: { targetAddressSpace: "local" },
+  fetchOptions: { targetAddressSpace: "private" },
   expected: FetchTestResult.SUCCESS,
-}), "https-treat-as-public to http-local: success.");
+}), "https-treat-as-public to http-private: success.");
diff --git a/test/wpt/tests/fetch/local-network-access/nested-worker.https.window.js b/test/wpt/tests/fetch/private-network-access/nested-worker.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/nested-worker.https.window.js
rename to test/wpt/tests/fetch/private-network-access/nested-worker.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/nested-worker.window.js b/test/wpt/tests/fetch/private-network-access/nested-worker.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/nested-worker.window.js
rename to test/wpt/tests/fetch/private-network-access/nested-worker.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/preflight-cache.https.window.js b/test/wpt/tests/fetch/private-network-access/preflight-cache.https.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/preflight-cache.https.window.js
rename to test/wpt/tests/fetch/private-network-access/preflight-cache.https.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/redirect.https.window.js b/test/wpt/tests/fetch/private-network-access/redirect.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/redirect.https.window.js
rename to test/wpt/tests/fetch/private-network-access/redirect.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/resources/executor.html b/test/wpt/tests/fetch/private-network-access/resources/executor.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/executor.html
rename to test/wpt/tests/fetch/private-network-access/resources/executor.html
diff --git a/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html
new file mode 100644
index 00000000000..b14601dba51
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<script src="../../../fenced-frame/resources/utils.js"></script>
+<title>Fetcher</title>
+<script>
+  const url = new URL(location.href).searchParams.get("url");
+  const mode = new URL(location.href).searchParams.get("mode");
+  const method = new URL(location.href).searchParams.get("method");
+  const [error_token, ok_token, body_token, type_token] = parseKeylist();
+
+  fetch(url, {mode: mode, method: method})
+      .then(async function(response) {
+        const body = await response.text();
+        writeValueToServer(ok_token, response.ok);
+        writeValueToServer(body_token, body);
+        writeValueToServer(type_token, response.type);
+        writeValueToServer(error_token, "");
+      })
+      .catch(error => {
+        writeValueToServer(ok_token, "");
+        writeValueToServer(body_token, "");
+        writeValueToServer(type_token, "");
+        writeValueToServer(error_token, error.toString());
+      });
+</script>
\ No newline at end of file
diff --git a/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html.headers b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html.headers
new file mode 100644
index 00000000000..6247f6d6321
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-fetcher.https.html.headers
@@ -0,0 +1 @@
+Supports-Loading-Mode: fenced-frame
\ No newline at end of file
diff --git a/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access-target.https.html b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access-target.https.html
new file mode 100644
index 00000000000..2b55e056f39
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access-target.https.html
@@ -0,0 +1,8 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<script src="../../../fenced-frame/resources/utils.js"></script>
+<title>Fenced frame target</title>
+<script>
+  const [frame_loaded_key] = parseKeylist();
+  writeValueToServer(frame_loaded_key, 'loaded');
+</script>
diff --git a/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html
new file mode 100644
index 00000000000..98f118432e0
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<script src="/resources/testharness.js"></script>
+<script src="../../../fenced-frame/resources/utils.js"></script>
+<script src="/common/utils.js"></script>
+<title>Fenced frame</title>
+<body></body>
+<script>
+(async () => {
+  const target = new URL(location.href).searchParams.get("fenced_frame_url");
+  const urn = await runSelectURL(target);
+  attachFencedFrame(urn);
+})();
+</script>
diff --git a/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html.headers b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html.headers
new file mode 100644
index 00000000000..6247f6d6321
--- /dev/null
+++ b/test/wpt/tests/fetch/private-network-access/resources/fenced-frame-local-network-access.https.html.headers
@@ -0,0 +1 @@
+Supports-Loading-Mode: fenced-frame
\ No newline at end of file
diff --git a/test/wpt/tests/fetch/local-network-access/resources/fetcher.html b/test/wpt/tests/fetch/private-network-access/resources/fetcher.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/fetcher.html
rename to test/wpt/tests/fetch/private-network-access/resources/fetcher.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/fetcher.js b/test/wpt/tests/fetch/private-network-access/resources/fetcher.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/fetcher.js
rename to test/wpt/tests/fetch/private-network-access/resources/fetcher.js
diff --git a/test/wpt/tests/fetch/local-network-access/resources/iframed.html b/test/wpt/tests/fetch/private-network-access/resources/iframed.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/iframed.html
rename to test/wpt/tests/fetch/private-network-access/resources/iframed.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/iframer.html b/test/wpt/tests/fetch/private-network-access/resources/iframer.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/iframer.html
rename to test/wpt/tests/fetch/private-network-access/resources/iframer.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/preflight.py b/test/wpt/tests/fetch/private-network-access/resources/preflight.py
similarity index 97%
rename from test/wpt/tests/fetch/local-network-access/resources/preflight.py
rename to test/wpt/tests/fetch/private-network-access/resources/preflight.py
index 4b0bfefd4d6..be3abdbb2a1 100644
--- a/test/wpt/tests/fetch/local-network-access/resources/preflight.py
+++ b/test/wpt/tests/fetch/private-network-access/resources/preflight.py
@@ -85,6 +85,9 @@ def _is_preflight_optional(request):
 def _get_preflight_uuid(request):
   return request.GET.get(b"preflight-uuid")
 
+def _is_loaded_in_fenced_frame(request):
+  return request.GET.get(b"is-loaded-in-fenced-frame")
+
 def _should_treat_as_public_once(request):
   uuid = request.GET.get(b"treat-as-public-once")
   if uuid is None:
@@ -155,6 +158,9 @@ def _handle_final_request(request, response):
   if mime_type is not None:
     headers.append(("Content-Type", mime_type),)
 
+  if _is_loaded_in_fenced_frame(request):
+    headers.append(("Supports-Loading-Mode", "fenced-frame"))
+
   body = _final_response_body(request)
   return (headers, body)
 
diff --git a/test/wpt/tests/fetch/local-network-access/resources/service-worker-bridge.html b/test/wpt/tests/fetch/private-network-access/resources/service-worker-bridge.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/service-worker-bridge.html
rename to test/wpt/tests/fetch/private-network-access/resources/service-worker-bridge.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/service-worker.js b/test/wpt/tests/fetch/private-network-access/resources/service-worker.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/service-worker.js
rename to test/wpt/tests/fetch/private-network-access/resources/service-worker.js
diff --git a/test/wpt/tests/fetch/local-network-access/resources/shared-fetcher.js b/test/wpt/tests/fetch/private-network-access/resources/shared-fetcher.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/shared-fetcher.js
rename to test/wpt/tests/fetch/private-network-access/resources/shared-fetcher.js
diff --git a/test/wpt/tests/fetch/local-network-access/resources/shared-worker-blob-fetcher.html b/test/wpt/tests/fetch/private-network-access/resources/shared-worker-blob-fetcher.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/shared-worker-blob-fetcher.html
rename to test/wpt/tests/fetch/private-network-access/resources/shared-worker-blob-fetcher.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/shared-worker-fetcher.html b/test/wpt/tests/fetch/private-network-access/resources/shared-worker-fetcher.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/shared-worker-fetcher.html
rename to test/wpt/tests/fetch/private-network-access/resources/shared-worker-fetcher.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/socket-opener.html b/test/wpt/tests/fetch/private-network-access/resources/socket-opener.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/socket-opener.html
rename to test/wpt/tests/fetch/private-network-access/resources/socket-opener.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/support.sub.js b/test/wpt/tests/fetch/private-network-access/resources/support.sub.js
similarity index 86%
rename from test/wpt/tests/fetch/local-network-access/resources/support.sub.js
rename to test/wpt/tests/fetch/private-network-access/resources/support.sub.js
index a09c46031f5..27d733d8b7f 100644
--- a/test/wpt/tests/fetch/local-network-access/resources/support.sub.js
+++ b/test/wpt/tests/fetch/private-network-access/resources/support.sub.js
@@ -75,21 +75,21 @@ async function postMessageAndAwaitReply(target, message) {
 // Maps protocol (without the trailing colon) and address space to port.
 const SERVER_PORTS = {
   "http": {
-    "loopback": {{ports[http][0]}},
-    "local": {{ports[http-private][0]}},
+    "local": {{ports[http][0]}},
+    "private": {{ports[http-private][0]}},
     "public": {{ports[http-public][0]}},
   },
   "https": {
-    "loopback": {{ports[https][0]}},
-    "other-loopback": {{ports[https][1]}},
-    "local": {{ports[https-private][0]}},
+    "local": {{ports[https][0]}},
+    "other-local": {{ports[https][1]}},
+    "private": {{ports[https-private][0]}},
     "public": {{ports[https-public][0]}},
   },
   "ws": {
-    "loopback": {{ports[ws][0]}},
+    "local": {{ports[ws][0]}},
   },
   "wss": {
-    "loopback": {{ports[wss][0]}},
+    "local": {{ports[wss][0]}},
   },
 };
 
@@ -127,15 +127,15 @@ class Server {
     };
   }
 
-  static HTTP_LOCAL = Server.get("http", "loopback");
-  static HTTP_PRIVATE = Server.get("http", "local");
+  static HTTP_LOCAL = Server.get("http", "local");
+  static HTTP_PRIVATE = Server.get("http", "private");
   static HTTP_PUBLIC = Server.get("http", "public");
-  static HTTPS_LOCAL = Server.get("https", "loopback");
-  static OTHER_HTTPS_LOCAL = Server.get("https", "other-loopback");
-  static HTTPS_PRIVATE = Server.get("https", "local");
+  static HTTPS_LOCAL = Server.get("https", "local");
+  static OTHER_HTTPS_LOCAL = Server.get("https", "other-local");
+  static HTTPS_PRIVATE = Server.get("https", "private");
   static HTTPS_PUBLIC = Server.get("https", "public");
-  static WS_LOCAL = Server.get("ws", "loopback");
-  static WSS_LOCAL = Server.get("wss", "loopback");
+  static WS_LOCAL = Server.get("ws", "local");
+  static WSS_LOCAL = Server.get("wss", "local");
 };
 
 // Resolves a URL relative to the current location, returning an absolute URL.
@@ -341,6 +341,40 @@ async function fetchTest(t, { source, target, fetchOptions, expected }) {
   }
 }
 
+// Similar to `fetchTest`, but replaced iframes with fenced frames.
+async function fencedFrameFetchTest(t, { source, target, fetchOptions, expected }) {
+  const fetcher_url =
+      resolveUrl("resources/fenced-frame-fetcher.https.html", sourceResolveOptions(source));
+
+  const target_url = preflightUrl(target);
+  target_url.searchParams.set("is-loaded-in-fenced-frame", true);
+
+  fetcher_url.searchParams.set("mode", fetchOptions.mode);
+  fetcher_url.searchParams.set("method", fetchOptions.method);
+  fetcher_url.searchParams.set("url", target_url);
+
+  const error_token = token();
+  const ok_token = token();
+  const body_token = token();
+  const type_token = token();
+  const source_url = generateURL(fetcher_url, [error_token, ok_token, body_token, type_token]);
+
+  const urn = await generateURNFromFledge(source_url, []);
+  attachFencedFrame(urn);
+
+  const error = await nextValueFromServer(error_token);
+  const ok = await nextValueFromServer(ok_token);
+  const body = await nextValueFromServer(body_token);
+  const type = await nextValueFromServer(type_token);
+
+  assert_equals(error, expected.error || "" , "error");
+  assert_equals(body, expected.body || "", "response body");
+  assert_equals(ok, expected.ok !== undefined ? expected.ok.toString() : "", "response ok");
+  if (expected.type !== undefined) {
+    assert_equals(type, expected.type, "response type");
+  }
+}
+
 const XhrTestResult = {
   SUCCESS: {
     loaded: true,
@@ -393,7 +427,7 @@ async function xhrTest(t, { source, target, method, expected }) {
   assert_equals(body, expected.body, "response body");
 }
 
-const IframeTestResult = {
+const FrameTestResult = {
   SUCCESS: "loaded",
   FAILURE: "timeout",
 };
@@ -429,6 +463,37 @@ async function iframeTest(t, { source, target, expected }) {
   assert_equals(result, expected);
 }
 
+// Similar to `iframeTest`, but replaced iframes with fenced frames.
+async function fencedFrameTest(t, { source, target, expected }) {
+  // Allows running tests in parallel.
+  const target_url = preflightUrl(target);
+  target_url.searchParams.set("file", "fenced-frame-local-network-access-target.https.html");
+  target_url.searchParams.set("is-loaded-in-fenced-frame", true);
+
+  const frame_loaded_key = token();
+  const child_frame_target = generateURL(target_url, [frame_loaded_key]);
+
+  const source_url =
+      resolveUrl("resources/fenced-frame-local-network-access.https.html", sourceResolveOptions(source));
+  source_url.searchParams.set("fenced_frame_url", child_frame_target);
+
+  const urn = await generateURNFromFledge(source_url, []);
+  attachFencedFrame(urn);
+
+  // The grandchild fenced frame writes a value to the server iff it loads
+  // successfully.
+  const result = (expected == FrameTestResult.SUCCESS) ?
+    await nextValueFromServer(frame_loaded_key) :
+    await Promise.race([
+      nextValueFromServer(frame_loaded_key),
+      new Promise((resolve) => {
+        t.step_timeout(() => resolve("timeout"), 10000 /* ms */);
+      }),
+    ]);
+
+  assert_equals(result, expected);
+}
+
 const iframeGrandparentTest = ({
   name,
   grandparentServer,
diff --git a/test/wpt/tests/fetch/local-network-access/resources/worker-blob-fetcher.html b/test/wpt/tests/fetch/private-network-access/resources/worker-blob-fetcher.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/worker-blob-fetcher.html
rename to test/wpt/tests/fetch/private-network-access/resources/worker-blob-fetcher.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/worker-fetcher.html b/test/wpt/tests/fetch/private-network-access/resources/worker-fetcher.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/worker-fetcher.html
rename to test/wpt/tests/fetch/private-network-access/resources/worker-fetcher.html
diff --git a/test/wpt/tests/fetch/local-network-access/resources/worker-fetcher.js b/test/wpt/tests/fetch/private-network-access/resources/worker-fetcher.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/worker-fetcher.js
rename to test/wpt/tests/fetch/private-network-access/resources/worker-fetcher.js
diff --git a/test/wpt/tests/fetch/local-network-access/resources/xhr-sender.html b/test/wpt/tests/fetch/private-network-access/resources/xhr-sender.html
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/resources/xhr-sender.html
rename to test/wpt/tests/fetch/private-network-access/resources/xhr-sender.html
diff --git a/test/wpt/tests/fetch/local-network-access/service-worker-background-fetch.https.window.js b/test/wpt/tests/fetch/private-network-access/service-worker-background-fetch.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/service-worker-background-fetch.https.window.js
rename to test/wpt/tests/fetch/private-network-access/service-worker-background-fetch.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/service-worker-fetch.https.window.js b/test/wpt/tests/fetch/private-network-access/service-worker-fetch.tentative.https.window.js
similarity index 88%
rename from test/wpt/tests/fetch/local-network-access/service-worker-fetch.https.window.js
rename to test/wpt/tests/fetch/private-network-access/service-worker-fetch.tentative.https.window.js
index 3d0f6d8097a..cb6d1f79b01 100644
--- a/test/wpt/tests/fetch/local-network-access/service-worker-fetch.https.window.js
+++ b/test/wpt/tests/fetch/private-network-access/service-worker-fetch.tentative.https.window.js
@@ -1,5 +1,8 @@
 // META: script=/common/utils.js
 // META: script=resources/support.sub.js
+// META: script=/common/subset-tests.js
+// META: variant=?1-8
+// META: variant=?9-last
 //
 // Spec: https://wicg.github.io/private-network-access/#integration-fetch
 //
@@ -75,13 +78,13 @@ async function makeTest(t, { source, target, expected }) {
   }
 }
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_LOCAL },
   target: { server: Server.HTTPS_LOCAL },
   expected: TestResult.SUCCESS,
 }), "local to local: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PRIVATE },
   target: {
     server: Server.HTTPS_LOCAL,
@@ -90,7 +93,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.FAILURE,
 }), "private to local: failed preflight.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PRIVATE },
   target: {
     server: Server.HTTPS_LOCAL,
@@ -102,13 +105,13 @@ promise_test(t => makeTest(t, {
   expected: TestResult.SUCCESS,
 }), "private to local: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PRIVATE },
   target: { server: Server.HTTPS_PRIVATE },
   expected: TestResult.SUCCESS,
 }), "private to private: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PUBLIC },
   target: {
     server: Server.HTTPS_LOCAL,
@@ -117,7 +120,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.FAILURE,
 }), "public to local: failed preflight.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PUBLIC },
   target: {
     server: Server.HTTPS_LOCAL,
@@ -129,7 +132,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.SUCCESS,
 }), "public to local: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PUBLIC },
   target: {
     server: Server.HTTPS_PRIVATE,
@@ -138,7 +141,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.FAILURE,
 }), "public to private: failed preflight.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PUBLIC },
   target: {
     server: Server.HTTPS_PRIVATE,
@@ -150,13 +153,13 @@ promise_test(t => makeTest(t, {
   expected: TestResult.SUCCESS,
 }), "public to private: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: { server: Server.HTTPS_PUBLIC },
   target: { server: Server.HTTPS_PUBLIC },
   expected: TestResult.SUCCESS,
 }), "public to public: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: {
     server: Server.HTTPS_LOCAL,
     treatAsPublic: true,
@@ -168,7 +171,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.FAILURE,
 }), "treat-as-public to local: failed preflight.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: {
     server: Server.HTTPS_LOCAL,
     treatAsPublic: true,
@@ -183,7 +186,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.SUCCESS,
 }), "treat-as-public to local: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: {
     server: Server.HTTPS_LOCAL,
     treatAsPublic: true,
@@ -192,7 +195,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.SUCCESS,
 }), "treat-as-public to local (same-origin): no preflight required.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: {
     server: Server.HTTPS_LOCAL,
     treatAsPublic: true,
@@ -204,7 +207,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.FAILURE,
 }), "treat-as-public to private: failed preflight.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: {
     server: Server.HTTPS_LOCAL,
     treatAsPublic: true,
@@ -219,7 +222,7 @@ promise_test(t => makeTest(t, {
   expected: TestResult.SUCCESS,
 }), "treat-as-public to private: success.");
 
-promise_test(t => makeTest(t, {
+subsetTest(promise_test, t => makeTest(t, {
   source: {
     server: Server.HTTPS_LOCAL,
     treatAsPublic: true,
diff --git a/test/wpt/tests/fetch/local-network-access/service-worker-update.https.window.js b/test/wpt/tests/fetch/private-network-access/service-worker-update.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/service-worker-update.https.window.js
rename to test/wpt/tests/fetch/private-network-access/service-worker-update.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/service-worker.https.window.js b/test/wpt/tests/fetch/private-network-access/service-worker.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/service-worker.https.window.js
rename to test/wpt/tests/fetch/private-network-access/service-worker.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/shared-worker-blob-fetch.https.window.js b/test/wpt/tests/fetch/private-network-access/shared-worker-blob-fetch.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/shared-worker-blob-fetch.https.window.js
rename to test/wpt/tests/fetch/private-network-access/shared-worker-blob-fetch.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/shared-worker-blob-fetch.window.js b/test/wpt/tests/fetch/private-network-access/shared-worker-blob-fetch.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/shared-worker-blob-fetch.window.js
rename to test/wpt/tests/fetch/private-network-access/shared-worker-blob-fetch.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/shared-worker-fetch.https.window.js b/test/wpt/tests/fetch/private-network-access/shared-worker-fetch.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/shared-worker-fetch.https.window.js
rename to test/wpt/tests/fetch/private-network-access/shared-worker-fetch.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/shared-worker-fetch.window.js b/test/wpt/tests/fetch/private-network-access/shared-worker-fetch.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/shared-worker-fetch.window.js
rename to test/wpt/tests/fetch/private-network-access/shared-worker-fetch.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/shared-worker.https.window.js b/test/wpt/tests/fetch/private-network-access/shared-worker.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/shared-worker.https.window.js
rename to test/wpt/tests/fetch/private-network-access/shared-worker.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/shared-worker.window.js b/test/wpt/tests/fetch/private-network-access/shared-worker.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/shared-worker.window.js
rename to test/wpt/tests/fetch/private-network-access/shared-worker.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/websocket.https.window.js b/test/wpt/tests/fetch/private-network-access/websocket.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/websocket.https.window.js
rename to test/wpt/tests/fetch/private-network-access/websocket.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/websocket.window.js b/test/wpt/tests/fetch/private-network-access/websocket.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/websocket.window.js
rename to test/wpt/tests/fetch/private-network-access/websocket.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/worker-blob-fetch.window.js b/test/wpt/tests/fetch/private-network-access/worker-blob-fetch.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/worker-blob-fetch.window.js
rename to test/wpt/tests/fetch/private-network-access/worker-blob-fetch.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/worker-fetch.https.window.js b/test/wpt/tests/fetch/private-network-access/worker-fetch.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/worker-fetch.https.window.js
rename to test/wpt/tests/fetch/private-network-access/worker-fetch.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/worker-fetch.window.js b/test/wpt/tests/fetch/private-network-access/worker-fetch.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/worker-fetch.window.js
rename to test/wpt/tests/fetch/private-network-access/worker-fetch.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/worker.https.window.js b/test/wpt/tests/fetch/private-network-access/worker.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/worker.https.window.js
rename to test/wpt/tests/fetch/private-network-access/worker.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/worker.window.js b/test/wpt/tests/fetch/private-network-access/worker.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/worker.window.js
rename to test/wpt/tests/fetch/private-network-access/worker.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/xhr-from-treat-as-public.https.window.js b/test/wpt/tests/fetch/private-network-access/xhr-from-treat-as-public.tentative.https.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/xhr-from-treat-as-public.https.window.js
rename to test/wpt/tests/fetch/private-network-access/xhr-from-treat-as-public.tentative.https.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/xhr.https.window.js b/test/wpt/tests/fetch/private-network-access/xhr.https.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/xhr.https.window.js
rename to test/wpt/tests/fetch/private-network-access/xhr.https.tentative.window.js
diff --git a/test/wpt/tests/fetch/local-network-access/xhr.window.js b/test/wpt/tests/fetch/private-network-access/xhr.tentative.window.js
similarity index 100%
rename from test/wpt/tests/fetch/local-network-access/xhr.window.js
rename to test/wpt/tests/fetch/private-network-access/xhr.tentative.window.js
diff --git a/test/wpt/tests/fetch/range/blob.any.js b/test/wpt/tests/fetch/range/blob.any.js
index 1db3b248f6c..7bcd4b9d11f 100644
--- a/test/wpt/tests/fetch/range/blob.any.js
+++ b/test/wpt/tests/fetch/range/blob.any.js
@@ -10,6 +10,15 @@ const supportedBlobRange = [
     content_range: "bytes 9-21/30",
     result: "Hello, World!",
   },
+  {
+    name: "A blob range request with no type.",
+    data: ["A simple Hello, World! example"],
+    type: undefined,
+    range: "bytes=9-21",
+    content_length: 13,
+    content_range: "bytes 9-21/30",
+    result: "Hello, World!",
+  },
   {
     name: "A blob range request with no end.",
     data: ["Range with no end"],
@@ -201,7 +210,7 @@ supportedBlobRange.forEach(({ name, data, type, range, content_length, content_r
     });
     assert_equals(resp.status, 206, "HTTP status is 206");
     assert_equals(resp.type, "basic", "response type is basic");
-    assert_equals(resp.headers.get("Content-Type"), type, "Content-Type is " + resp.headers.get("Content-Type"));
+    assert_equals(resp.headers.get("Content-Type"), type || "", "Content-Type is " + resp.headers.get("Content-Type"));
     assert_equals(resp.headers.get("Content-Length"), content_length.toString(), "Content-Length is " + resp.headers.get("Content-Length"));
     assert_equals(resp.headers.get("Content-Range"), content_range, "Content-Range is " + resp.headers.get("Content-Range"));
     const text = await resp.text();
diff --git a/test/wpt/tests/interfaces/attribution-reporting-api.idl b/test/wpt/tests/interfaces/attribution-reporting-api.idl
index 76640f54c8d..ed4497b56ff 100644
--- a/test/wpt/tests/interfaces/attribution-reporting-api.idl
+++ b/test/wpt/tests/interfaces/attribution-reporting-api.idl
@@ -4,9 +4,23 @@
 // Source: Attribution Reporting (https://wicg.github.io/attribution-reporting-api/)
 
 interface mixin HTMLAttributionSrcElementUtils {
-    [CEReactions] attribute USVString attributionSrc;
+    [CEReactions, SecureContext] attribute USVString attributionSrc;
 };
 
 HTMLAnchorElement includes HTMLAttributionSrcElementUtils;
 HTMLImageElement includes HTMLAttributionSrcElementUtils;
 HTMLScriptElement includes HTMLAttributionSrcElementUtils;
+
+dictionary AttributionReportingRequestOptions {
+  required boolean eventSourceEligible;
+  required boolean triggerEligible;
+};
+
+partial dictionary RequestInit {
+  AttributionReportingRequestOptions attributionReporting;
+};
+
+partial interface XMLHttpRequest {
+  [SecureContext]
+  undefined setAttributionReporting(AttributionReportingRequestOptions options);
+};
diff --git a/test/wpt/tests/interfaces/captured-mouse-events.tentative.idl b/test/wpt/tests/interfaces/captured-mouse-events.tentative.idl
new file mode 100644
index 00000000000..7b081cd9fd8
--- /dev/null
+++ b/test/wpt/tests/interfaces/captured-mouse-events.tentative.idl
@@ -0,0 +1,25 @@
+// https://screen-share.github.io/mouse-events/
+
+enum CaptureStartFocusBehavior {
+  "focus-captured-surface",
+  "no-focus-change"
+};
+
+[Exposed=Window, SecureContext]
+interface CaptureController : EventTarget {
+  constructor();
+  undefined setFocusBehavior(CaptureStartFocusBehavior focusBehavior);
+  attribute EventHandler oncapturedmousechange;
+};
+
+[Exposed=Window]
+interface CapturedMouseEvent : Event {
+  constructor(DOMString type, optional CapturedMouseEventInit eventInitDict = {});
+  readonly attribute long surfaceX;
+  readonly attribute long surfaceY;
+};
+
+dictionary CapturedMouseEventInit : EventInit {
+  long surfaceX = -1;
+  long surfaceY = -1;
+};
diff --git a/test/wpt/tests/interfaces/css-anchor-position.idl b/test/wpt/tests/interfaces/css-anchor-position.idl
new file mode 100644
index 00000000000..c5da3f43f72
--- /dev/null
+++ b/test/wpt/tests/interfaces/css-anchor-position.idl
@@ -0,0 +1,11 @@
+// Source: CSS Anchor Positioning (https://drafts.csswg.org/css-anchor-position-1/)
+
+[Exposed=Window]
+interface CSSPositionFallbackRule : CSSGroupingRule {
+  readonly attribute CSSOMString name;
+};
+
+[Exposed=Window]
+interface CSSTryRule : CSSRule {
+  [SameObject, PutForwards=cssText] readonly attribute CSSStyleDeclaration style;
+};
diff --git a/test/wpt/tests/interfaces/css-cascade-6.idl b/test/wpt/tests/interfaces/css-cascade-6.idl
index 37cdfb82930..3bdf6ba3a6b 100644
--- a/test/wpt/tests/interfaces/css-cascade-6.idl
+++ b/test/wpt/tests/interfaces/css-cascade-6.idl
@@ -5,6 +5,6 @@
 
 [Exposed=Window]
 interface CSSScopeRule : CSSGroupingRule {
-  readonly attribute CSSOMString start;
-  readonly attribute CSSOMString end;
+  readonly attribute CSSOMString? start;
+  readonly attribute CSSOMString? end;
 };
diff --git a/test/wpt/tests/interfaces/css-cascade.idl b/test/wpt/tests/interfaces/css-cascade.idl
index 9011dc7fd9e..0dd9969f6eb 100644
--- a/test/wpt/tests/interfaces/css-cascade.idl
+++ b/test/wpt/tests/interfaces/css-cascade.idl
@@ -3,10 +3,6 @@
 // (https://github.com/w3c/webref)
 // Source: CSS Cascading and Inheritance Level 5 (https://drafts.csswg.org/css-cascade-5/)
 
-partial interface CSSImportRule {
-  readonly attribute CSSOMString? layerName;
-};
-
 [Exposed=Window]
 interface CSSLayerBlockRule : CSSGroupingRule {
   readonly attribute CSSOMString name;
diff --git a/test/wpt/tests/interfaces/cssom.idl b/test/wpt/tests/interfaces/cssom.idl
index 222b3dc09ec..0574f1a771c 100644
--- a/test/wpt/tests/interfaces/cssom.idl
+++ b/test/wpt/tests/interfaces/cssom.idl
@@ -96,17 +96,13 @@ interface CSSRule {
   const unsigned short NAMESPACE_RULE = 10;
 };
 
-[Exposed=Window]
-interface CSSStyleRule : CSSRule {
-  attribute CSSOMString selectorText;
-  [SameObject, PutForwards=cssText] readonly attribute CSSStyleDeclaration style;
-};
-
 [Exposed=Window]
 interface CSSImportRule : CSSRule {
   readonly attribute USVString href;
   [SameObject, PutForwards=mediaText] readonly attribute MediaList media;
-  [SameObject] readonly attribute CSSStyleSheet styleSheet;
+  [SameObject] readonly attribute CSSStyleSheet? styleSheet;
+  readonly attribute CSSOMString? layerName;
+  readonly attribute CSSOMString? supportsText;
 };
 
 [Exposed=Window]
@@ -116,6 +112,12 @@ interface CSSGroupingRule : CSSRule {
   undefined deleteRule(unsigned long index);
 };
 
+[Exposed=Window]
+interface CSSStyleRule : CSSGroupingRule {
+  attribute CSSOMString selectorText;
+  [SameObject, PutForwards=cssText] readonly attribute CSSStyleDeclaration style;
+};
+
 [Exposed=Window]
 interface CSSPageRule : CSSGroupingRule {
            attribute CSSOMString selectorText;
diff --git a/test/wpt/tests/interfaces/document-picture-in-picture.idl b/test/wpt/tests/interfaces/document-picture-in-picture.idl
new file mode 100644
index 00000000000..742f65e6f06
--- /dev/null
+++ b/test/wpt/tests/interfaces/document-picture-in-picture.idl
@@ -0,0 +1,34 @@
+// GENERATED CONTENT - DO NOT EDIT
+// Content was automatically extracted by Reffy into webref
+// (https://github.com/w3c/webref)
+// Source: Document Picture-in-Picture Specification (https://wicg.github.io/document-picture-in-picture/)
+
+[Exposed=Window]
+partial interface Window {
+  [SameObject, SecureContext] readonly attribute DocumentPictureInPicture
+    documentPictureInPicture;
+};
+
+[Exposed=Window, SecureContext]
+interface DocumentPictureInPicture : EventTarget {
+  [NewObject] Promise<Window> requestWindow(
+    optional DocumentPictureInPictureOptions options = {});
+  readonly attribute Window window;
+  attribute EventHandler onenter;
+};
+
+dictionary DocumentPictureInPictureOptions {
+  [EnforceRange] unsigned long long width = 0;
+  [EnforceRange] unsigned long long height = 0;
+  boolean copyStyleSheets = false;
+};
+
+[Exposed=Window]
+interface DocumentPictureInPictureEvent : Event {
+  constructor(DOMString type, DocumentPictureInPictureEventInit eventInitDict);
+  [SameObject] readonly attribute Window window;
+};
+
+dictionary DocumentPictureInPictureEventInit : EventInit {
+  required Window window;
+};
diff --git a/test/wpt/tests/interfaces/dom.idl b/test/wpt/tests/interfaces/dom.idl
index c5b5c94dbcc..c2def872fa2 100644
--- a/test/wpt/tests/interfaces/dom.idl
+++ b/test/wpt/tests/interfaces/dom.idl
@@ -95,6 +95,7 @@ interface AbortController {
 interface AbortSignal : EventTarget {
   [NewObject] static AbortSignal abort(optional any reason);
   [Exposed=(Window,Worker), NewObject] static AbortSignal timeout([EnforceRange] unsigned long long milliseconds);
+  [NewObject] static AbortSignal _any(sequence<AbortSignal> signals);
 
   readonly attribute boolean aborted;
   readonly attribute any reason;
diff --git a/test/wpt/tests/interfaces/fenced-frame.idl b/test/wpt/tests/interfaces/fenced-frame.idl
index 2869b95e6bb..440ec2bbaa1 100644
--- a/test/wpt/tests/interfaces/fenced-frame.idl
+++ b/test/wpt/tests/interfaces/fenced-frame.idl
@@ -1,7 +1,7 @@
 // GENERATED CONTENT - DO NOT EDIT
 // Content was automatically extracted by Reffy into webref
 // (https://github.com/w3c/webref)
-// Source: Fenced frame (https://wicg.github.io/fenced-frame/)
+// Source: Fenced Frame (https://wicg.github.io/fenced-frame/)
 
 [Exposed=Window]
 interface HTMLFencedFrameElement : HTMLElement {
@@ -10,19 +10,22 @@ interface HTMLFencedFrameElement : HTMLElement {
   [CEReactions] attribute FencedFrameConfig? config;
   [CEReactions] attribute DOMString width;
   [CEReactions] attribute DOMString height;
+  [CEReactions] attribute DOMString allow;
 };
 
 enum OpaqueProperty {"opaque"};
 
 typedef (unsigned long or OpaqueProperty) FencedFrameConfigSize;
-typedef (USVString or OpaqueProperty) FencedFrameConfigURL;
+typedef USVString FencedFrameConfigURL;
 
 [Exposed=Window]
 interface FencedFrameConfig {
-  constructor(USVString url);
-  readonly attribute FencedFrameConfigURL? url;
-  readonly attribute FencedFrameConfigSize? width;
-  readonly attribute FencedFrameConfigSize? height;
+  readonly attribute FencedFrameConfigSize? containerWidth;
+  readonly attribute FencedFrameConfigSize? containerHeight;
+  readonly attribute FencedFrameConfigSize? contentWidth;
+  readonly attribute FencedFrameConfigSize? contentHeight;
+
+  undefined setSharedStorageContext(DOMString contextString);
 };
 
 enum FenceReportingDestination {
diff --git a/test/wpt/tests/interfaces/fs.idl b/test/wpt/tests/interfaces/fs.idl
index e2474132abf..e341ab387d9 100644
--- a/test/wpt/tests/interfaces/fs.idl
+++ b/test/wpt/tests/interfaces/fs.idl
@@ -15,6 +15,7 @@ interface FileSystemHandle {
 
   Promise<boolean> isSameEntry(FileSystemHandle other);
 };
+
 dictionary FileSystemCreateWritableOptions {
   boolean keepExistingData = false;
 };
@@ -26,6 +27,7 @@ interface FileSystemFileHandle : FileSystemHandle {
   [Exposed=DedicatedWorker]
   Promise<FileSystemSyncAccessHandle> createSyncAccessHandle();
 };
+
 dictionary FileSystemGetFileOptions {
   boolean create = false;
 };
@@ -49,6 +51,7 @@ interface FileSystemDirectoryHandle : FileSystemHandle {
 
   Promise<sequence<USVString>?> resolve(FileSystemHandle possibleDescendant);
 };
+
 enum WriteCommandType {
   "write",
   "seek",
@@ -70,6 +73,7 @@ interface FileSystemWritableFileStream : WritableStream {
   Promise<undefined> seek(unsigned long long position);
   Promise<undefined> truncate(unsigned long long size);
 };
+
 dictionary FileSystemReadWriteOptions {
   [EnforceRange] unsigned long long at;
 };
diff --git a/test/wpt/tests/interfaces/html.idl b/test/wpt/tests/interfaces/html.idl
index 33d4de0db97..99b33705b39 100644
--- a/test/wpt/tests/interfaces/html.idl
+++ b/test/wpt/tests/interfaces/html.idl
@@ -1643,6 +1643,14 @@ dictionary ValidityStateFlags {
   boolean customError = false;
 };
 
+[Exposed=(Window)]
+interface VisibilityStateEntry : PerformanceEntry {
+  readonly attribute DOMString name;                 // shadows inherited name
+  readonly attribute DOMString entryType;            // shadows inherited entryType
+  readonly attribute DOMHighResTimeStamp startTime;  // shadows inherited startTime
+  readonly attribute unsigned long duration;         // shadows inherited duration
+};
+
 [Exposed=Window]
 interface UserActivation {
   readonly attribute boolean hasBeenActive;
diff --git a/test/wpt/tests/interfaces/mediastream-recording.idl b/test/wpt/tests/interfaces/mediastream-recording.idl
index 99f30282333..496bfcf2e27 100644
--- a/test/wpt/tests/interfaces/mediastream-recording.idl
+++ b/test/wpt/tests/interfaces/mediastream-recording.idl
@@ -34,6 +34,8 @@ dictionary MediaRecorderOptions {
   unsigned long videoBitsPerSecond;
   unsigned long bitsPerSecond;
   BitrateMode audioBitrateMode = "variable";
+  DOMHighResTimeStamp videoKeyFrameIntervalDuration;
+  unsigned long videoKeyFrameIntervalCount;
 };
 
 enum BitrateMode {
diff --git a/test/wpt/tests/interfaces/notifications.idl b/test/wpt/tests/interfaces/notifications.idl
index bfcfa2e66af..4300b171071 100644
--- a/test/wpt/tests/interfaces/notifications.idl
+++ b/test/wpt/tests/interfaces/notifications.idl
@@ -28,7 +28,7 @@ interface Notification : EventTarget {
   [SameObject] readonly attribute FrozenArray<unsigned long> vibrate;
   readonly attribute EpochTimeStamp timestamp;
   readonly attribute boolean renotify;
-  readonly attribute boolean silent;
+  readonly attribute boolean? silent;
   readonly attribute boolean requireInteraction;
   [SameObject] readonly attribute any data;
   [SameObject] readonly attribute FrozenArray<NotificationAction> actions;
@@ -47,7 +47,7 @@ dictionary NotificationOptions {
   VibratePattern vibrate;
   EpochTimeStamp timestamp;
   boolean renotify = false;
-  boolean silent = false;
+  boolean? silent = null;
   boolean requireInteraction = false;
   any data = null;
   sequence<NotificationAction> actions = [];
@@ -72,6 +72,7 @@ dictionary NotificationAction {
 };
 
 callback NotificationPermissionCallback = undefined (NotificationPermission permission);
+
 dictionary GetNotificationOptions {
   DOMString tag = "";
 };
diff --git a/test/wpt/tests/interfaces/permissions-policy.idl b/test/wpt/tests/interfaces/permissions-policy.idl
index a789d41738c..16945e3a9b7 100644
--- a/test/wpt/tests/interfaces/permissions-policy.idl
+++ b/test/wpt/tests/interfaces/permissions-policy.idl
@@ -18,6 +18,7 @@ partial interface Document {
 partial interface HTMLIFrameElement {
     [SameObject] readonly attribute PermissionsPolicy permissionsPolicy;
 };
+
 [Exposed=Window]
 interface PermissionsPolicyViolationReportBody : ReportBody {
   readonly attribute DOMString featureId;
diff --git a/test/wpt/tests/interfaces/real-world-meshing.idl b/test/wpt/tests/interfaces/real-world-meshing.idl
new file mode 100644
index 00000000000..38fe71f6c66
--- /dev/null
+++ b/test/wpt/tests/interfaces/real-world-meshing.idl
@@ -0,0 +1,21 @@
+// GENERATED CONTENT - DO NOT EDIT
+// Content was automatically extracted by Reffy into webref
+// (https://github.com/w3c/webref)
+// Source: WebXR Mesh Detection Module (https://immersive-web.github.io/real-world-meshing/)
+
+[Exposed=Window] interface XRMesh {
+    [SameObject] readonly attribute XRSpace meshSpace;
+
+    readonly attribute FrozenArray<Float32Array> vertices;
+    readonly attribute Uint32Array indices;
+    readonly attribute DOMHighResTimeStamp lastChangedTime;
+    readonly attribute DOMString? semanticLabel;
+};
+
+[Exposed=Window] interface XRMeshSet {
+  readonly setlike<XRMesh>;
+};
+
+partial interface XRFrame {
+  readonly attribute XRMeshSet detectedMeshs;
+};
diff --git a/test/wpt/tests/interfaces/resource-timing.idl b/test/wpt/tests/interfaces/resource-timing.idl
index 151e5d46d84..33fed05b756 100644
--- a/test/wpt/tests/interfaces/resource-timing.idl
+++ b/test/wpt/tests/interfaces/resource-timing.idl
@@ -18,6 +18,7 @@ interface PerformanceResourceTiming : PerformanceEntry {
     readonly attribute DOMHighResTimeStamp connectEnd;
     readonly attribute DOMHighResTimeStamp secureConnectionStart;
     readonly attribute DOMHighResTimeStamp requestStart;
+    readonly attribute DOMHighResTimeStamp firstInterimResponseStart;
     readonly attribute DOMHighResTimeStamp responseStart;
     readonly attribute DOMHighResTimeStamp responseEnd;
     readonly attribute unsigned long long  transferSize;
@@ -25,6 +26,7 @@ interface PerformanceResourceTiming : PerformanceEntry {
     readonly attribute unsigned long long  decodedBodySize;
     readonly attribute unsigned short responseStatus;
     readonly attribute RenderBlockingStatusType renderBlockingStatus;
+    readonly attribute DOMString contentType;
     [Default] object toJSON();
 };
 
diff --git a/test/wpt/tests/interfaces/scheduling-apis.idl b/test/wpt/tests/interfaces/scheduling-apis.idl
index 9ed49cfb689..1e84e79cd15 100644
--- a/test/wpt/tests/interfaces/scheduling-apis.idl
+++ b/test/wpt/tests/interfaces/scheduling-apis.idl
@@ -45,8 +45,14 @@ interface TaskController : AbortController {
   undefined setPriority(TaskPriority priority);
 };
 
+dictionary TaskSignalAnyInit {
+  (TaskPriority or TaskSignal) priority = "user-visible";
+};
+
 [Exposed=(Window, Worker)]
 interface TaskSignal : AbortSignal {
+  [NewObject] static TaskSignal _any(sequence<AbortSignal> signals, optional TaskSignalAnyInit init = {});
+
   readonly attribute TaskPriority priority;
 
   attribute EventHandler onprioritychange;
diff --git a/test/wpt/tests/interfaces/screen-capture.idl b/test/wpt/tests/interfaces/screen-capture.idl
index 9abd4d2c1ad..830b96d16fa 100644
--- a/test/wpt/tests/interfaces/screen-capture.idl
+++ b/test/wpt/tests/interfaces/screen-capture.idl
@@ -13,7 +13,7 @@ enum CaptureStartFocusBehavior {
 };
 
 [Exposed=Window, SecureContext]
-interface CaptureController {
+interface CaptureController : EventTarget {
   constructor();
   undefined setFocusBehavior(CaptureStartFocusBehavior focusBehavior);
 };
diff --git a/test/wpt/tests/interfaces/scroll-animations.idl b/test/wpt/tests/interfaces/scroll-animations.idl
index 14215509c9f..31b3746e9d4 100644
--- a/test/wpt/tests/interfaces/scroll-animations.idl
+++ b/test/wpt/tests/interfaces/scroll-animations.idl
@@ -36,7 +36,11 @@ interface ViewTimeline : ScrollTimeline {
   readonly attribute CSSNumericValue endOffset;
 };
 
+dictionary AnimationTimeOptions {
+  DOMString? range;
+};
+
 [Exposed=Window]
 partial interface AnimationTimeline {
-  CSSNumericValue? getCurrentTime(optional CSSOMString rangeName);
+  CSSNumericValue? getCurrentTime(optional AnimationTimeOptions options = {});
 };
diff --git a/test/wpt/tests/interfaces/secure-payment-confirmation.idl b/test/wpt/tests/interfaces/secure-payment-confirmation.idl
index 9061b243477..08ec8065c53 100644
--- a/test/wpt/tests/interfaces/secure-payment-confirmation.idl
+++ b/test/wpt/tests/interfaces/secure-payment-confirmation.idl
@@ -15,6 +15,7 @@ dictionary SecurePaymentConfirmationRequest {
     sequence<USVString> locale;
     boolean showOptOut;
 };
+
 partial dictionary AuthenticationExtensionsClientInputs {
   AuthenticationExtensionsPaymentInputs payment;
 };
@@ -30,9 +31,11 @@ dictionary AuthenticationExtensionsPaymentInputs {
   PaymentCurrencyAmount total;
   PaymentCredentialInstrument instrument;
 };
+
 dictionary CollectedClientPaymentData : CollectedClientData {
     required CollectedClientAdditionalPaymentData payment;
 };
+
 dictionary CollectedClientAdditionalPaymentData {
     required USVString rpId;
     required USVString topOrigin;
@@ -41,6 +44,7 @@ dictionary CollectedClientAdditionalPaymentData {
     required PaymentCurrencyAmount total;
     required PaymentCredentialInstrument instrument;
 };
+
 dictionary PaymentCredentialInstrument {
     required USVString displayName;
     required USVString icon;
diff --git a/test/wpt/tests/interfaces/shared-storage.idl b/test/wpt/tests/interfaces/shared-storage.idl
new file mode 100644
index 00000000000..eb5806f9a6d
--- /dev/null
+++ b/test/wpt/tests/interfaces/shared-storage.idl
@@ -0,0 +1,80 @@
+// GENERATED CONTENT - DO NOT EDIT
+// Content was automatically extracted by Reffy into webref
+// (https://github.com/w3c/webref)
+// Source: Shared Storage API (https://wicg.github.io/shared-storage/)
+
+[Exposed=(Window)]
+interface SharedStorageWorklet : Worklet {
+};
+
+[Exposed=SharedStorageWorklet, Global=SharedStorageWorklet]
+interface SharedStorageWorkletGlobalScope : WorkletGlobalScope {
+  undefined register(DOMString name,
+                     SharedStorageOperationConstructor operationCtor);
+};
+
+callback SharedStorageOperationConstructor =
+  SharedStorageOperation(optional SharedStorageRunOperationMethodOptions options);
+
+[Exposed=SharedStorageWorklet]
+interface SharedStorageOperation {
+};
+
+dictionary SharedStorageRunOperationMethodOptions {
+  object data;
+  boolean resolveToConfig = false;
+  boolean keepAlive = false;
+};
+
+[Exposed=SharedStorageWorklet]
+interface SharedStorageRunOperation : SharedStorageOperation {
+  Promise<undefined> run(object data);
+};
+
+[Exposed=SharedStorageWorklet]
+interface SharedStorageSelectURLOperation : SharedStorageOperation {
+  Promise<long> run(object data,
+                    FrozenArray<SharedStorageUrlWithMetadata> urls);
+};
+
+[Exposed=(Window,SharedStorageWorklet)]
+interface SharedStorage {
+  Promise<any> set(DOMString key,
+                   DOMString value,
+                   optional SharedStorageSetMethodOptions options = {});
+  Promise<any> append(DOMString key,
+                      DOMString value);
+  Promise<any> delete(DOMString key);
+  Promise<any> clear();
+};
+
+dictionary SharedStorageSetMethodOptions {
+  boolean ignoreIfPresent = false;
+};
+
+typedef (USVString or FencedFrameConfig) SharedStorageResponse;
+
+[Exposed=(Window)]
+interface WindowSharedStorage : SharedStorage {
+  Promise<any> run(DOMString name,
+                   optional SharedStorageRunOperationMethodOptions options = {});
+  Promise<SharedStorageResponse> selectURL(DOMString name,
+                               FrozenArray<SharedStorageUrlWithMetadata> urls,
+                               optional SharedStorageRunOperationMethodOptions options = {});
+
+  readonly attribute SharedStorageWorklet worklet;
+};
+
+dictionary SharedStorageUrlWithMetadata {
+  required USVString url;
+  object reportingMetadata;
+};
+
+[Exposed=(SharedStorageWorklet)]
+interface WorkletSharedStorage : SharedStorage {
+  Promise<DOMString> get(DOMString key);
+  Promise<unsigned long> length();
+  Promise<double> remainingBudget();
+
+  async iterable<DOMString, DOMString>;
+};
diff --git a/test/wpt/tests/interfaces/storage-buckets.idl b/test/wpt/tests/interfaces/storage-buckets.idl
new file mode 100644
index 00000000000..f3d500a5711
--- /dev/null
+++ b/test/wpt/tests/interfaces/storage-buckets.idl
@@ -0,0 +1,53 @@
+// GENERATED CONTENT - DO NOT EDIT
+// Content was automatically extracted by Reffy into webref
+// (https://github.com/w3c/webref)
+// Source: Storage Buckets API (https://wicg.github.io/storage-buckets/)
+
+[SecureContext]
+interface mixin NavigatorStorageBuckets {
+  [SameObject] readonly attribute StorageBucketManager storageBuckets;
+};
+Navigator includes NavigatorStorageBuckets;
+WorkerNavigator includes NavigatorStorageBuckets;
+
+[Exposed=(Window,Worker),
+ SecureContext]
+interface StorageBucketManager {
+    Promise<StorageBucket> open(DOMString name, optional StorageBucketOptions options = {});
+    Promise<sequence<DOMString>> keys();
+    Promise<undefined> delete(DOMString name);
+};
+
+enum StorageBucketDurability {
+  "strict",
+  "relaxed"
+};
+
+dictionary StorageBucketOptions {
+  boolean? persisted = null;
+  StorageBucketDurability? durability = null;
+  unsigned long long? quota = null;
+  DOMHighResTimeStamp? expires = null;
+};
+
+[Exposed=(Window,Worker),
+ SecureContext]
+interface StorageBucket {
+  readonly attribute DOMString name;
+
+  [Exposed=Window] Promise<boolean> persist();
+  Promise<boolean> persisted();
+
+  Promise<StorageEstimate> estimate();
+
+  Promise<StorageBucketDurability> durability();
+
+  Promise<undefined> setExpires(DOMHighResTimeStamp expires);
+  Promise<DOMHighResTimeStamp?> expires();
+
+  [SameObject] readonly attribute IDBFactory indexedDB;
+
+  [SameObject] readonly attribute CacheStorage caches;
+
+  Promise<FileSystemDirectoryHandle> getDirectory();
+};
diff --git a/test/wpt/tests/interfaces/trust-token-api.idl b/test/wpt/tests/interfaces/trust-token-api.idl
index ee339590827..f521acea1f5 100644
--- a/test/wpt/tests/interfaces/trust-token-api.idl
+++ b/test/wpt/tests/interfaces/trust-token-api.idl
@@ -5,14 +5,11 @@
 
 enum RefreshPolicy { "none", "refresh" };
 
-enum TokenType { "private-state-token" };
-
 enum TokenVersion { "1" };
 
 enum OperationType { "token-request", "send-redemption-record", "token-redemption" };
 
 dictionary PrivateToken {
-  required TokenType type;
   required TokenVersion version;
   required OperationType operation;
   RefreshPolicy refreshPolicy = "none";
@@ -24,6 +21,6 @@ partial dictionary RequestInit {
 };
 
 partial interface Document {
-  Promise<boolean> hasPrivateTokens(USVString issuer, USVString type);
-  Promise<boolean> hasRedemptionRecord(USVString issuer, USVString type);
+  Promise<boolean> hasPrivateTokens(USVString issuer);
+  Promise<boolean> hasRedemptionRecord(USVString issuer);
 };
diff --git a/test/wpt/tests/interfaces/turtledove.idl b/test/wpt/tests/interfaces/turtledove.idl
index cd81a3d87ef..f5867e995a8 100644
--- a/test/wpt/tests/interfaces/turtledove.idl
+++ b/test/wpt/tests/interfaces/turtledove.idl
@@ -1,7 +1,7 @@
 // GENERATED CONTENT - DO NOT EDIT
 // Content was automatically extracted by Reffy into webref
 // (https://github.com/w3c/webref)
-// Source: FLEDGE (https://wicg.github.io/turtledove/)
+// Source: Protected Audience (formerly FLEDGE) (https://wicg.github.io/turtledove/)
 
 [SecureContext]
 partial interface Navigator {
@@ -25,7 +25,7 @@ dictionary AuctionAdInterestGroup {
   DOMString executionMode = "compatibility";
   USVString biddingLogicURL;
   USVString biddingWasmHelperURL;
-  USVString dailyUpdateURL;
+  USVString updateURL;
   USVString trustedBiddingSignalsURL;
   sequence<USVString> trustedBiddingSignalsKeys;
   any userBiddingSignals;
@@ -67,9 +67,15 @@ dictionary AuctionAdConfig {
   AbortSignal? signal;
 };
 
+[Exposed=InterestGroupScriptRunnerGlobalScope]
+interface InterestGroupScriptRunnerGlobalScope {
+};
+
 [Exposed=InterestGroupBiddingScriptRunnerGlobalScope,
-Global=InterestGroupBiddingScriptRunnerGlobalScope]
-interface InterestGroupBiddingScriptRunnerGlobalScope {
+ Global=(InterestGroupScriptRunnerGlobalScope,
+         InterestGroupBiddingScriptRunnerGlobalScope)]
+interface InterestGroupBiddingScriptRunnerGlobalScope
+        : InterestGroupScriptRunnerGlobalScope {
   boolean setBid();
   boolean setBid(GenerateBidOutput generateBidOutput);
   undefined setPriority(double priority);
@@ -77,14 +83,19 @@ interface InterestGroupBiddingScriptRunnerGlobalScope {
 };
 
 [Exposed=InterestGroupScoringScriptRunnerGlobalScope,
-Global=InterestGroupScoringScriptRunnerGlobalScope]
-interface InterestGroupScoringScriptRunnerGlobalScope {
+ Global=(InterestGroupScriptRunnerGlobalScope,
+         InterestGroupScoringScriptRunnerGlobalScope)]
+interface InterestGroupScoringScriptRunnerGlobalScope
+        : InterestGroupScriptRunnerGlobalScope {
 };
 
 [Exposed=InterestGroupReportingScriptRunnerGlobalScope,
-Global=InterestGroupReportingScriptRunnerGlobalScope]
-interface InterestGroupReportingScriptRunnerGlobalScope {
+ Global=(InterestGroupScriptRunnerGlobalScope,
+         InterestGroupReportingScriptRunnerGlobalScope)]
+interface InterestGroupReportingScriptRunnerGlobalScope
+        : InterestGroupScriptRunnerGlobalScope {
   undefined sendReportTo(DOMString url);
+  undefined registerAdBeacon(record<DOMString, USVString> map);
 };
 
 dictionary AdRender {
@@ -96,7 +107,7 @@ dictionary AdRender {
 dictionary GenerateBidOutput {
   required double bid;
   required (DOMString or AdRender) adRender;
-  DOMString ad;
+  any ad;
   sequence<(DOMString or AdRender)> adComponents;
   double adCost;
   double modelingSignals;
diff --git a/test/wpt/tests/interfaces/url.idl b/test/wpt/tests/interfaces/url.idl
index 6549e45f419..a5e4d1eb492 100644
--- a/test/wpt/tests/interfaces/url.idl
+++ b/test/wpt/tests/interfaces/url.idl
@@ -33,10 +33,10 @@ interface URLSearchParams {
   readonly attribute unsigned long size;
 
   undefined append(USVString name, USVString value);
-  undefined delete(USVString name);
+  undefined delete(USVString name, optional USVString value);
   USVString? get(USVString name);
   sequence<USVString> getAll(USVString name);
-  boolean has(USVString name);
+  boolean has(USVString name, optional USVString value);
   undefined set(USVString name, USVString value);
 
   undefined sort();
diff --git a/test/wpt/tests/interfaces/webauthn.idl b/test/wpt/tests/interfaces/webauthn.idl
index 58a9e285232..9a37207ba2c 100644
--- a/test/wpt/tests/interfaces/webauthn.idl
+++ b/test/wpt/tests/interfaces/webauthn.idl
@@ -12,51 +12,56 @@ interface PublicKeyCredential : Credential {
     static Promise<boolean> isConditionalMediationAvailable();
     PublicKeyCredentialJSON toJSON();
 };
+
 typedef DOMString Base64URLString;
 typedef (RegistrationResponseJSON or AuthenticationResponseJSON) PublicKeyCredentialJSON;
 
 dictionary RegistrationResponseJSON {
-    Base64URLString id;
-    Base64URLString rawId;
-    AuthenticatorAttestationResponseJSON response;
-    DOMString? authenticatorAttachment;
-    AuthenticationExtensionsClientOutputsJSON clientExtensionResults;
-    DOMString type;
+    required Base64URLString id;
+    required Base64URLString rawId;
+    required AuthenticatorAttestationResponseJSON response;
+    DOMString authenticatorAttachment;
+    required AuthenticationExtensionsClientOutputsJSON clientExtensionResults;
+    required DOMString type;
 };
 
 dictionary AuthenticatorAttestationResponseJSON {
-    Base64URLString clientDataJSON;
-    Base64URLString attestationObject;
-    sequence<DOMString> transports;
+    required Base64URLString clientDataJSON;
+    required Base64URLString attestationObject;
+    required sequence<DOMString> transports;
 };
 
 dictionary AuthenticationResponseJSON {
-    Base64URLString id;
-    Base64URLString rawId;
-    AuthenticatorAssertionResponseJSON response;
-    DOMString? authenticatorAttachment;
-    AuthenticationExtensionsClientOutputsJSON clientExtensionResults;
-    DOMString type;
+    required Base64URLString id;
+    required Base64URLString rawId;
+    required AuthenticatorAssertionResponseJSON response;
+    DOMString authenticatorAttachment;
+    required AuthenticationExtensionsClientOutputsJSON clientExtensionResults;
+    required DOMString type;
 };
 
 dictionary AuthenticatorAssertionResponseJSON {
-    Base64URLString clientDataJSON;
-    Base64URLString authenticatorData;
-    Base64URLString signature;
-    Base64URLString? userHandle;
+    required Base64URLString clientDataJSON;
+    required Base64URLString authenticatorData;
+    required Base64URLString signature;
+    Base64URLString userHandle;
 };
 
 dictionary AuthenticationExtensionsClientOutputsJSON {
 };
+
 partial dictionary CredentialCreationOptions {
     PublicKeyCredentialCreationOptions      publicKey;
 };
+
 partial dictionary CredentialRequestOptions {
     PublicKeyCredentialRequestOptions      publicKey;
 };
+
 partial interface PublicKeyCredential {
     static Promise<boolean> isUserVerifyingPlatformAuthenticatorAvailable();
 };
+
 partial interface PublicKeyCredential {
     static PublicKeyCredentialCreationOptions parseCreationOptionsFromJSON(PublicKeyCredentialCreationOptionsJSON options);
 };
@@ -87,6 +92,7 @@ dictionary PublicKeyCredentialDescriptorJSON {
 
 dictionary AuthenticationExtensionsClientInputsJSON {
 };
+
 partial interface PublicKeyCredential {
     static PublicKeyCredentialRequestOptions parseRequestOptionsFromJSON(PublicKeyCredentialRequestOptionsJSON options);
 };
@@ -99,10 +105,12 @@ dictionary PublicKeyCredentialRequestOptionsJSON {
     DOMString                                               userVerification = "preferred";
     AuthenticationExtensionsClientInputsJSON                extensions;
 };
+
 [SecureContext, Exposed=Window]
 interface AuthenticatorResponse {
     [SameObject] readonly attribute ArrayBuffer      clientDataJSON;
 };
+
 [SecureContext, Exposed=Window]
 interface AuthenticatorAttestationResponse : AuthenticatorResponse {
     [SameObject] readonly attribute ArrayBuffer      attestationObject;
@@ -111,6 +119,7 @@ interface AuthenticatorAttestationResponse : AuthenticatorResponse {
     ArrayBuffer?                                     getPublicKey();
     COSEAlgorithmIdentifier                          getPublicKeyAlgorithm();
 };
+
 [SecureContext, Exposed=Window]
 interface AuthenticatorAssertionResponse : AuthenticatorResponse {
     [SameObject] readonly attribute ArrayBuffer      authenticatorData;
@@ -118,10 +127,12 @@ interface AuthenticatorAssertionResponse : AuthenticatorResponse {
     [SameObject] readonly attribute ArrayBuffer?     userHandle;
     [SameObject] readonly attribute ArrayBuffer?     attestationObject;
 };
+
 dictionary PublicKeyCredentialParameters {
     required DOMString                    type;
     required COSEAlgorithmIdentifier      alg;
 };
+
 dictionary PublicKeyCredentialCreationOptions {
     required PublicKeyCredentialRpEntity         rp;
     required PublicKeyCredentialUserEntity       user;
@@ -136,37 +147,45 @@ dictionary PublicKeyCredentialCreationOptions {
     sequence<DOMString>                          attestationFormats = [];
     AuthenticationExtensionsClientInputs         extensions;
 };
+
 dictionary PublicKeyCredentialEntity {
     required DOMString    name;
 };
+
 dictionary PublicKeyCredentialRpEntity : PublicKeyCredentialEntity {
     DOMString      id;
 };
+
 dictionary PublicKeyCredentialUserEntity : PublicKeyCredentialEntity {
     required BufferSource   id;
     required DOMString      displayName;
 };
+
 dictionary AuthenticatorSelectionCriteria {
     DOMString                    authenticatorAttachment;
     DOMString                    residentKey;
     boolean                      requireResidentKey = false;
     DOMString                    userVerification = "preferred";
 };
+
 enum AuthenticatorAttachment {
     "platform",
     "cross-platform"
 };
+
 enum ResidentKeyRequirement {
     "discouraged",
     "preferred",
     "required"
 };
+
 enum AttestationConveyancePreference {
     "none",
     "indirect",
     "direct",
     "enterprise"
 };
+
 dictionary PublicKeyCredentialRequestOptions {
     required BufferSource                challenge;
     unsigned long                        timeout;
@@ -177,10 +196,13 @@ dictionary PublicKeyCredentialRequestOptions {
     sequence<DOMString>                  attestationFormats = [];
     AuthenticationExtensionsClientInputs extensions;
 };
+
 dictionary AuthenticationExtensionsClientInputs {
 };
+
 dictionary AuthenticationExtensionsClientOutputs {
 };
+
 dictionary CollectedClientData {
     required DOMString           type;
     required DOMString           challenge;
@@ -195,42 +217,54 @@ dictionary TokenBinding {
 };
 
 enum TokenBindingStatus { "present", "supported" };
+
 enum PublicKeyCredentialType {
     "public-key"
 };
+
 dictionary PublicKeyCredentialDescriptor {
     required DOMString                    type;
     required BufferSource                 id;
     sequence<DOMString>                   transports;
 };
+
 enum AuthenticatorTransport {
     "usb",
     "nfc",
     "ble",
+    "smart-card",
     "hybrid",
     "internal"
 };
+
 typedef long COSEAlgorithmIdentifier;
+
 enum UserVerificationRequirement {
     "required",
     "preferred",
     "discouraged"
 };
+
 partial dictionary AuthenticationExtensionsClientInputs {
   USVString appid;
 };
+
 partial dictionary AuthenticationExtensionsClientOutputs {
   boolean appid;
 };
+
 partial dictionary AuthenticationExtensionsClientInputs {
   USVString appidExclude;
 };
+
 partial dictionary AuthenticationExtensionsClientOutputs {
   boolean appidExclude;
 };
+
 partial dictionary AuthenticationExtensionsClientInputs {
     boolean credProps;
 };
+
 dictionary CredentialPropertiesOutput {
     boolean rk;
 };
@@ -238,6 +272,7 @@ dictionary CredentialPropertiesOutput {
 partial dictionary AuthenticationExtensionsClientOutputs {
     CredentialPropertiesOutput credProps;
 };
+
 dictionary AuthenticationExtensionsPRFValues {
     required BufferSource first;
     BufferSource second;
@@ -289,12 +324,14 @@ dictionary AuthenticationExtensionsLargeBlobOutputs {
 partial dictionary AuthenticationExtensionsClientInputs {
   boolean uvm;
 };
+
 typedef sequence<unsigned long> UvmEntry;
 typedef sequence<UvmEntry> UvmEntries;
 
 partial dictionary AuthenticationExtensionsClientOutputs {
   UvmEntries uvm;
 };
+
 dictionary AuthenticationExtensionsDevicePublicKeyInputs {
     DOMString attestation = "none";
     sequence<DOMString> attestationFormats = [];
diff --git a/test/wpt/tests/interfaces/webcodecs-av1-codec-registration.idl b/test/wpt/tests/interfaces/webcodecs-av1-codec-registration.idl
index 00e4493d3c0..ab20879728d 100644
--- a/test/wpt/tests/interfaces/webcodecs-av1-codec-registration.idl
+++ b/test/wpt/tests/interfaces/webcodecs-av1-codec-registration.idl
@@ -3,6 +3,14 @@
 // (https://github.com/w3c/webref)
 // Source: AV1 WebCodecs Registration (https://w3c.github.io/webcodecs/av1_codec_registration.html)
 
+partial dictionary VideoEncoderConfig {
+  AV1EncoderConfig av1;
+};
+
+dictionary AV1EncoderConfig {
+  boolean forceScreenContentTools = false;
+};
+
 partial dictionary VideoEncoderEncodeOptions {
   VideoEncoderEncodeOptionsForAv1 av1;
 };
diff --git a/test/wpt/tests/interfaces/webcodecs-avc-codec-registration.idl b/test/wpt/tests/interfaces/webcodecs-avc-codec-registration.idl
index d4074f647da..2b952c22194 100644
--- a/test/wpt/tests/interfaces/webcodecs-avc-codec-registration.idl
+++ b/test/wpt/tests/interfaces/webcodecs-avc-codec-registration.idl
@@ -15,3 +15,11 @@ enum AvcBitstreamFormat {
   "annexb",
   "avc",
 };
+
+partial dictionary VideoEncoderEncodeOptions {
+  VideoEncoderEncodeOptionsForAvc avc;
+};
+
+dictionary VideoEncoderEncodeOptionsForAvc {
+  unsigned short? quantizer;
+};
diff --git a/test/wpt/tests/interfaces/webcodecs.idl b/test/wpt/tests/interfaces/webcodecs.idl
index 77649029db6..0b95dc8b757 100644
--- a/test/wpt/tests/interfaces/webcodecs.idl
+++ b/test/wpt/tests/interfaces/webcodecs.idl
@@ -161,6 +161,7 @@ dictionary AudioEncoderConfig {
   [EnforceRange] unsigned long sampleRate;
   [EnforceRange] unsigned long numberOfChannels;
   [EnforceRange] unsigned long long bitrate;
+  BitrateMode bitrateMode;
 };
 
 dictionary VideoEncoderConfig {
diff --git a/test/wpt/tests/interfaces/webgpu.idl b/test/wpt/tests/interfaces/webgpu.idl
index 284327a5789..25943d99c35 100644
--- a/test/wpt/tests/interfaces/webgpu.idl
+++ b/test/wpt/tests/interfaces/webgpu.idl
@@ -18,6 +18,7 @@ interface GPUSupportedLimits {
     readonly attribute unsigned long maxTextureDimension3D;
     readonly attribute unsigned long maxTextureArrayLayers;
     readonly attribute unsigned long maxBindGroups;
+    readonly attribute unsigned long maxBindGroupsPlusVertexBuffers;
     readonly attribute unsigned long maxBindingsPerBindGroup;
     readonly attribute unsigned long maxDynamicUniformBuffersPerPipelineLayout;
     readonly attribute unsigned long maxDynamicStorageBuffersPerPipelineLayout;
@@ -26,7 +27,6 @@ interface GPUSupportedLimits {
     readonly attribute unsigned long maxStorageBuffersPerShaderStage;
     readonly attribute unsigned long maxStorageTexturesPerShaderStage;
     readonly attribute unsigned long maxUniformBuffersPerShaderStage;
-    readonly attribute unsigned long maxFragmentCombinedOutputResources;
     readonly attribute unsigned long long maxUniformBufferBindingSize;
     readonly attribute unsigned long long maxStorageBufferBindingSize;
     readonly attribute unsigned long minUniformBufferOffsetAlignment;
@@ -85,7 +85,7 @@ dictionary GPURequestAdapterOptions {
 
 enum GPUPowerPreference {
     "low-power",
-    "high-performance"
+    "high-performance",
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -98,7 +98,8 @@ interface GPUAdapter {
     Promise<GPUAdapterInfo> requestAdapterInfo(optional sequence<DOMString> unmaskHints = []);
 };
 
-dictionary GPUDeviceDescriptor : GPUObjectDescriptorBase {
+dictionary GPUDeviceDescriptor
+         : GPUObjectDescriptorBase {
     sequence<GPUFeatureName> requiredFeatures = [];
     record<DOMString, GPUSize64> requiredLimits = {};
     GPUQueueDescriptor defaultQueue = {};
@@ -115,7 +116,7 @@ enum GPUFeatureName {
     "shader-f16",
     "rg11b10ufloat-renderable",
     "bgra8unorm-storage",
-    "float32-filterable"
+    "float32-filterable",
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -151,8 +152,8 @@ GPUDevice includes GPUObjectBase;
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
 interface GPUBuffer {
-    readonly attribute GPUSize64 size;
-    readonly attribute GPUBufferUsageFlags usage;
+    readonly attribute GPUSize64Out size;
+    readonly attribute GPUFlagsConstant usage;
 
     readonly attribute GPUBufferMapState mapState;
 
@@ -167,10 +168,11 @@ GPUBuffer includes GPUObjectBase;
 enum GPUBufferMapState {
     "unmapped",
     "pending",
-    "mapped"
+    "mapped",
 };
 
-dictionary GPUBufferDescriptor : GPUObjectDescriptorBase {
+dictionary GPUBufferDescriptor
+         : GPUObjectDescriptorBase {
     required GPUSize64 size;
     required GPUBufferUsageFlags usage;
     boolean mappedAtCreation = false;
@@ -204,18 +206,19 @@ interface GPUTexture {
 
     undefined destroy();
 
-    readonly attribute GPUIntegerCoordinate width;
-    readonly attribute GPUIntegerCoordinate height;
-    readonly attribute GPUIntegerCoordinate depthOrArrayLayers;
-    readonly attribute GPUIntegerCoordinate mipLevelCount;
-    readonly attribute GPUSize32 sampleCount;
+    readonly attribute GPUIntegerCoordinateOut width;
+    readonly attribute GPUIntegerCoordinateOut height;
+    readonly attribute GPUIntegerCoordinateOut depthOrArrayLayers;
+    readonly attribute GPUIntegerCoordinateOut mipLevelCount;
+    readonly attribute GPUSize32Out sampleCount;
     readonly attribute GPUTextureDimension dimension;
     readonly attribute GPUTextureFormat format;
-    readonly attribute GPUTextureUsageFlags usage;
+    readonly attribute GPUFlagsConstant usage;
 };
 GPUTexture includes GPUObjectBase;
 
-dictionary GPUTextureDescriptor : GPUObjectDescriptorBase {
+dictionary GPUTextureDescriptor
+         : GPUObjectDescriptorBase {
     required GPUExtent3D size;
     GPUIntegerCoordinate mipLevelCount = 1;
     GPUSize32 sampleCount = 1;
@@ -228,7 +231,7 @@ dictionary GPUTextureDescriptor : GPUObjectDescriptorBase {
 enum GPUTextureDimension {
     "1d",
     "2d",
-    "3d"
+    "3d",
 };
 
 typedef [EnforceRange] unsigned long GPUTextureUsageFlags;
@@ -246,7 +249,8 @@ interface GPUTextureView {
 };
 GPUTextureView includes GPUObjectBase;
 
-dictionary GPUTextureViewDescriptor : GPUObjectDescriptorBase {
+dictionary GPUTextureViewDescriptor
+         : GPUObjectDescriptorBase {
     GPUTextureFormat format;
     GPUTextureViewDimension dimension;
     GPUTextureAspect aspect = "all";
@@ -262,13 +266,13 @@ enum GPUTextureViewDimension {
     "2d-array",
     "cube",
     "cube-array",
-    "3d"
+    "3d",
 };
 
 enum GPUTextureAspect {
     "all",
     "stencil-only",
-    "depth-only"
+    "depth-only",
 };
 
 enum GPUTextureFormat {
@@ -388,7 +392,7 @@ enum GPUTextureFormat {
     "astc-12x10-unorm",
     "astc-12x10-unorm-srgb",
     "astc-12x12-unorm",
-    "astc-12x12-unorm-srgb"
+    "astc-12x12-unorm-srgb",
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -396,8 +400,9 @@ interface GPUExternalTexture {
 };
 GPUExternalTexture includes GPUObjectBase;
 
-dictionary GPUExternalTextureDescriptor : GPUObjectDescriptorBase {
-    required HTMLVideoElement source;
+dictionary GPUExternalTextureDescriptor
+         : GPUObjectDescriptorBase {
+    required (HTMLVideoElement or VideoFrame) source;
     PredefinedColorSpace colorSpace = "srgb";
 };
 
@@ -406,7 +411,8 @@ interface GPUSampler {
 };
 GPUSampler includes GPUObjectBase;
 
-dictionary GPUSamplerDescriptor : GPUObjectDescriptorBase {
+dictionary GPUSamplerDescriptor
+         : GPUObjectDescriptorBase {
     GPUAddressMode addressModeU = "clamp-to-edge";
     GPUAddressMode addressModeV = "clamp-to-edge";
     GPUAddressMode addressModeW = "clamp-to-edge";
@@ -422,17 +428,17 @@ dictionary GPUSamplerDescriptor : GPUObjectDescriptorBase {
 enum GPUAddressMode {
     "clamp-to-edge",
     "repeat",
-    "mirror-repeat"
+    "mirror-repeat",
 };
 
 enum GPUFilterMode {
     "nearest",
-    "linear"
+    "linear",
 };
 
 enum GPUMipmapFilterMode {
     "nearest",
-    "linear"
+    "linear",
 };
 
 enum GPUCompareFunction {
@@ -443,7 +449,7 @@ enum GPUCompareFunction {
     "greater",
     "not-equal",
     "greater-equal",
-    "always"
+    "always",
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -451,7 +457,8 @@ interface GPUBindGroupLayout {
 };
 GPUBindGroupLayout includes GPUObjectBase;
 
-dictionary GPUBindGroupLayoutDescriptor : GPUObjectDescriptorBase {
+dictionary GPUBindGroupLayoutDescriptor
+         : GPUObjectDescriptorBase {
     required sequence<GPUBindGroupLayoutEntry> entries;
 };
 
@@ -477,7 +484,7 @@ namespace GPUShaderStage {
 enum GPUBufferBindingType {
     "uniform",
     "storage",
-    "read-only-storage"
+    "read-only-storage",
 };
 
 dictionary GPUBufferBindingLayout {
@@ -489,7 +496,7 @@ dictionary GPUBufferBindingLayout {
 enum GPUSamplerBindingType {
     "filtering",
     "non-filtering",
-    "comparison"
+    "comparison",
 };
 
 dictionary GPUSamplerBindingLayout {
@@ -501,7 +508,7 @@ enum GPUTextureSampleType {
     "unfilterable-float",
     "depth",
     "sint",
-    "uint"
+    "uint",
 };
 
 dictionary GPUTextureBindingLayout {
@@ -511,7 +518,7 @@ dictionary GPUTextureBindingLayout {
 };
 
 enum GPUStorageTextureAccess {
-    "write-only"
+    "write-only",
 };
 
 dictionary GPUStorageTextureBindingLayout {
@@ -528,7 +535,8 @@ interface GPUBindGroup {
 };
 GPUBindGroup includes GPUObjectBase;
 
-dictionary GPUBindGroupDescriptor : GPUObjectDescriptorBase {
+dictionary GPUBindGroupDescriptor
+         : GPUObjectDescriptorBase {
     required GPUBindGroupLayout layout;
     required sequence<GPUBindGroupEntry> entries;
 };
@@ -551,7 +559,8 @@ interface GPUPipelineLayout {
 };
 GPUPipelineLayout includes GPUObjectBase;
 
-dictionary GPUPipelineLayoutDescriptor : GPUObjectDescriptorBase {
+dictionary GPUPipelineLayoutDescriptor
+         : GPUObjectDescriptorBase {
     required sequence<GPUBindGroupLayout> bindGroupLayouts;
 };
 
@@ -561,7 +570,8 @@ interface GPUShaderModule {
 };
 GPUShaderModule includes GPUObjectBase;
 
-dictionary GPUShaderModuleDescriptor : GPUObjectDescriptorBase {
+dictionary GPUShaderModuleDescriptor
+         : GPUObjectDescriptorBase {
     required USVString code;
     object sourceMap;
     record<USVString, GPUShaderModuleCompilationHint> hints;
@@ -574,7 +584,7 @@ dictionary GPUShaderModuleCompilationHint {
 enum GPUCompilationMessageType {
     "error",
     "warning",
-    "info"
+    "info",
 };
 
 [Exposed=(Window, DedicatedWorker), Serializable, SecureContext]
@@ -604,14 +614,15 @@ dictionary GPUPipelineErrorInit {
 
 enum GPUPipelineErrorReason {
     "validation",
-    "internal"
+    "internal",
 };
 
 enum GPUAutoLayoutMode {
-    "auto"
+    "auto",
 };
 
-dictionary GPUPipelineDescriptorBase : GPUObjectDescriptorBase {
+dictionary GPUPipelineDescriptorBase
+         : GPUObjectDescriptorBase {
     required (GPUPipelineLayout or GPUAutoLayoutMode) layout;
 };
 
@@ -633,7 +644,8 @@ interface GPUComputePipeline {
 GPUComputePipeline includes GPUObjectBase;
 GPUComputePipeline includes GPUPipelineBase;
 
-dictionary GPUComputePipelineDescriptor : GPUPipelineDescriptorBase {
+dictionary GPUComputePipelineDescriptor
+         : GPUPipelineDescriptorBase {
     required GPUProgrammableStage compute;
 };
 
@@ -643,7 +655,8 @@ interface GPURenderPipeline {
 GPURenderPipeline includes GPUObjectBase;
 GPURenderPipeline includes GPUPipelineBase;
 
-dictionary GPURenderPipelineDescriptor : GPUPipelineDescriptorBase {
+dictionary GPURenderPipelineDescriptor
+         : GPUPipelineDescriptorBase {
     required GPUVertexState vertex;
     GPUPrimitiveState primitive = {};
     GPUDepthStencilState depthStencil;
@@ -666,18 +679,18 @@ enum GPUPrimitiveTopology {
     "line-list",
     "line-strip",
     "triangle-list",
-    "triangle-strip"
+    "triangle-strip",
 };
 
 enum GPUFrontFace {
     "ccw",
-    "cw"
+    "cw",
 };
 
 enum GPUCullMode {
     "none",
     "front",
-    "back"
+    "back",
 };
 
 dictionary GPUMultisampleState {
@@ -686,7 +699,8 @@ dictionary GPUMultisampleState {
     boolean alphaToCoverageEnabled = false;
 };
 
-dictionary GPUFragmentState : GPUProgrammableStage {
+dictionary GPUFragmentState
+         : GPUProgrammableStage {
     required sequence<GPUColorTargetState?> targets;
 };
 
@@ -731,7 +745,7 @@ enum GPUBlendFactor {
     "one-minus-dst-alpha",
     "src-alpha-saturated",
     "constant",
-    "one-minus-constant"
+    "one-minus-constant",
 };
 
 enum GPUBlendOperation {
@@ -739,7 +753,7 @@ enum GPUBlendOperation {
     "subtract",
     "reverse-subtract",
     "min",
-    "max"
+    "max",
 };
 
 dictionary GPUDepthStencilState {
@@ -774,12 +788,12 @@ enum GPUStencilOperation {
     "increment-clamp",
     "decrement-clamp",
     "increment-wrap",
-    "decrement-wrap"
+    "decrement-wrap",
 };
 
 enum GPUIndexFormat {
     "uint16",
-    "uint32"
+    "uint32",
 };
 
 enum GPUVertexFormat {
@@ -812,15 +826,16 @@ enum GPUVertexFormat {
     "sint32",
     "sint32x2",
     "sint32x3",
-    "sint32x4"
+    "sint32x4",
 };
 
 enum GPUVertexStepMode {
     "vertex",
-    "instance"
+    "instance",
 };
 
-dictionary GPUVertexState : GPUProgrammableStage {
+dictionary GPUVertexState
+         : GPUProgrammableStage {
     sequence<GPUVertexBufferLayout?> buffers = [];
 };
 
@@ -837,17 +852,43 @@ dictionary GPUVertexAttribute {
     required GPUIndex32 shaderLocation;
 };
 
-dictionary GPUImageDataLayout {    GPUSize64 offset = 0;    GPUSize32 bytesPerRow;    GPUSize32 rowsPerImage;};
-dictionary GPUImageCopyBuffer : GPUImageDataLayout {    required GPUBuffer buffer;};
-dictionary GPUImageCopyTexture {    required GPUTexture texture;    GPUIntegerCoordinate mipLevel = 0;    GPUOrigin3D origin = {};    GPUTextureAspect aspect = "all";};
-dictionary GPUImageCopyTextureTagged : GPUImageCopyTexture {    PredefinedColorSpace colorSpace = "srgb";    boolean premultipliedAlpha = false;};
-dictionary GPUImageCopyExternalImage {    required (ImageBitmap or HTMLVideoElement or HTMLCanvasElement or OffscreenCanvas) source;    GPUOrigin2D origin = {};    boolean flipY = false;};
+dictionary GPUImageDataLayout {
+    GPUSize64 offset = 0;
+    GPUSize32 bytesPerRow;
+    GPUSize32 rowsPerImage;
+};
+
+dictionary GPUImageCopyBuffer
+         : GPUImageDataLayout {
+    required GPUBuffer buffer;
+};
+
+dictionary GPUImageCopyTexture {
+    required GPUTexture texture;
+    GPUIntegerCoordinate mipLevel = 0;
+    GPUOrigin3D origin = {};
+    GPUTextureAspect aspect = "all";
+};
+
+dictionary GPUImageCopyTextureTagged
+         : GPUImageCopyTexture {
+    PredefinedColorSpace colorSpace = "srgb";
+    boolean premultipliedAlpha = false;
+};
+
+dictionary GPUImageCopyExternalImage {
+    required (ImageBitmap or HTMLVideoElement or HTMLCanvasElement or OffscreenCanvas) source;
+    GPUOrigin2D origin = {};
+    boolean flipY = false;
+};
+
 [Exposed=(Window, DedicatedWorker), SecureContext]
 interface GPUCommandBuffer {
 };
 GPUCommandBuffer includes GPUObjectBase;
 
-dictionary GPUCommandBufferDescriptor : GPUObjectDescriptorBase {
+dictionary GPUCommandBufferDescriptor
+         : GPUObjectDescriptorBase {
 };
 
 interface mixin GPUCommandsMixin {
@@ -900,14 +941,15 @@ GPUCommandEncoder includes GPUObjectBase;
 GPUCommandEncoder includes GPUCommandsMixin;
 GPUCommandEncoder includes GPUDebugCommandsMixin;
 
-dictionary GPUCommandEncoderDescriptor : GPUObjectDescriptorBase {
+dictionary GPUCommandEncoderDescriptor
+         : GPUObjectDescriptorBase {
 };
 
 interface mixin GPUBindingCommandsMixin {
-    undefined setBindGroup(GPUIndex32 index, GPUBindGroup bindGroup,
+    undefined setBindGroup(GPUIndex32 index, GPUBindGroup? bindGroup,
         optional sequence<GPUBufferDynamicOffset> dynamicOffsets = []);
 
-    undefined setBindGroup(GPUIndex32 index, GPUBindGroup bindGroup,
+    undefined setBindGroup(GPUIndex32 index, GPUBindGroup? bindGroup,
         Uint32Array dynamicOffsetsData,
         GPUSize64 dynamicOffsetsDataStart,
         GPUSize32 dynamicOffsetsDataLength);
@@ -932,21 +974,15 @@ GPUComputePassEncoder includes GPUCommandsMixin;
 GPUComputePassEncoder includes GPUDebugCommandsMixin;
 GPUComputePassEncoder includes GPUBindingCommandsMixin;
 
-enum GPUComputePassTimestampLocation {
-    "beginning",
-    "end"
-};
-
-dictionary GPUComputePassTimestampWrite {
+dictionary GPUComputePassTimestampWrites {
     required GPUQuerySet querySet;
-    required GPUSize32 queryIndex;
-    required GPUComputePassTimestampLocation location;
+    GPUSize32 beginningOfPassWriteIndex;
+    GPUSize32 endOfPassWriteIndex;
 };
 
-typedef sequence<GPUComputePassTimestampWrite> GPUComputePassTimestampWrites;
-
-dictionary GPUComputePassDescriptor : GPUObjectDescriptorBase {
-    GPUComputePassTimestampWrites timestampWrites = [];
+dictionary GPUComputePassDescriptor
+         : GPUObjectDescriptorBase {
+    GPUComputePassTimestampWrites timestampWrites;
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -973,24 +1009,18 @@ GPURenderPassEncoder includes GPUDebugCommandsMixin;
 GPURenderPassEncoder includes GPUBindingCommandsMixin;
 GPURenderPassEncoder includes GPURenderCommandsMixin;
 
-enum GPURenderPassTimestampLocation {
-    "beginning",
-    "end"
-};
-
-dictionary GPURenderPassTimestampWrite {
+dictionary GPURenderPassTimestampWrites {
     required GPUQuerySet querySet;
-    required GPUSize32 queryIndex;
-    required GPURenderPassTimestampLocation location;
+    GPUSize32 beginningOfPassWriteIndex;
+    GPUSize32 endOfPassWriteIndex;
 };
 
-typedef sequence<GPURenderPassTimestampWrite> GPURenderPassTimestampWrites;
-
-dictionary GPURenderPassDescriptor : GPUObjectDescriptorBase {
+dictionary GPURenderPassDescriptor
+         : GPUObjectDescriptorBase {
     required sequence<GPURenderPassColorAttachment?> colorAttachments;
     GPURenderPassDepthStencilAttachment depthStencilAttachment;
     GPUQuerySet occlusionQuerySet;
-    GPURenderPassTimestampWrites timestampWrites = [];
+    GPURenderPassTimestampWrites timestampWrites;
     GPUSize64 maxDrawCount = 50000000;
 };
 
@@ -1019,15 +1049,16 @@ dictionary GPURenderPassDepthStencilAttachment {
 
 enum GPULoadOp {
     "load",
-    "clear"
+    "clear",
 };
 
 enum GPUStoreOp {
     "store",
-    "discard"
+    "discard",
 };
 
-dictionary GPURenderPassLayout : GPUObjectDescriptorBase {
+dictionary GPURenderPassLayout
+         : GPUObjectDescriptorBase {
     required sequence<GPUTextureFormat?> colorFormats;
     GPUTextureFormat depthStencilFormat;
     GPUSize32 sampleCount = 1;
@@ -1037,7 +1068,7 @@ interface mixin GPURenderCommandsMixin {
     undefined setPipeline(GPURenderPipeline pipeline);
 
     undefined setIndexBuffer(GPUBuffer buffer, GPUIndexFormat indexFormat, optional GPUSize64 offset = 0, optional GPUSize64 size);
-    undefined setVertexBuffer(GPUIndex32 slot, GPUBuffer buffer, optional GPUSize64 offset = 0, optional GPUSize64 size);
+    undefined setVertexBuffer(GPUIndex32 slot, GPUBuffer? buffer, optional GPUSize64 offset = 0, optional GPUSize64 size);
 
     undefined draw(GPUSize32 vertexCount, optional GPUSize32 instanceCount = 1,
         optional GPUSize32 firstVertex = 0, optional GPUSize32 firstInstance = 0);
@@ -1055,7 +1086,8 @@ interface GPURenderBundle {
 };
 GPURenderBundle includes GPUObjectBase;
 
-dictionary GPURenderBundleDescriptor : GPUObjectDescriptorBase {
+dictionary GPURenderBundleDescriptor
+         : GPUObjectDescriptorBase {
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -1068,12 +1100,14 @@ GPURenderBundleEncoder includes GPUDebugCommandsMixin;
 GPURenderBundleEncoder includes GPUBindingCommandsMixin;
 GPURenderBundleEncoder includes GPURenderCommandsMixin;
 
-dictionary GPURenderBundleEncoderDescriptor : GPURenderPassLayout {
+dictionary GPURenderBundleEncoderDescriptor
+         : GPURenderPassLayout {
     boolean depthReadOnly = false;
     boolean stencilReadOnly = false;
 };
 
-dictionary GPUQueueDescriptor : GPUObjectDescriptorBase {
+dictionary GPUQueueDescriptor
+         : GPUObjectDescriptorBase {
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -1107,18 +1141,19 @@ interface GPUQuerySet {
     undefined destroy();
 
     readonly attribute GPUQueryType type;
-    readonly attribute GPUSize32 count;
+    readonly attribute GPUSize32Out count;
 };
 GPUQuerySet includes GPUObjectBase;
 
-dictionary GPUQuerySetDescriptor : GPUObjectDescriptorBase {
+dictionary GPUQuerySetDescriptor
+         : GPUObjectDescriptorBase {
     required GPUQueryType type;
     required GPUSize32 count;
 };
 
 enum GPUQueryType {
     "occlusion",
-    "timestamp"
+    "timestamp",
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -1133,7 +1168,7 @@ interface GPUCanvasContext {
 
 enum GPUCanvasAlphaMode {
     "opaque",
-    "premultiplied"
+    "premultiplied",
 };
 
 dictionary GPUCanvasConfiguration {
@@ -1147,7 +1182,7 @@ dictionary GPUCanvasConfiguration {
 
 enum GPUDeviceLostReason {
     "unknown",
-    "destroyed"
+    "destroyed",
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
@@ -1166,24 +1201,27 @@ interface GPUError {
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
-interface GPUValidationError : GPUError {
+interface GPUValidationError
+        : GPUError {
     constructor(DOMString message);
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
-interface GPUOutOfMemoryError : GPUError {
+interface GPUOutOfMemoryError
+        : GPUError {
     constructor(DOMString message);
 };
 
 [Exposed=(Window, DedicatedWorker), SecureContext]
-interface GPUInternalError : GPUError {
+interface GPUInternalError
+        : GPUError {
     constructor(DOMString message);
 };
 
 enum GPUErrorFilter {
     "validation",
     "out-of-memory",
-    "internal"
+    "internal",
 };
 
 partial interface GPUDevice {
@@ -1220,6 +1258,10 @@ typedef [EnforceRange] unsigned long GPUIndex32;
 typedef [EnforceRange] unsigned long GPUSize32;
 typedef [EnforceRange] long GPUSignedOffset32;
 
+typedef unsigned long long GPUSize64Out;
+typedef unsigned long GPUIntegerCoordinateOut;
+typedef unsigned long GPUSize32Out;
+
 typedef unsigned long GPUFlagsConstant;
 
 dictionary GPUColorDict {
diff --git a/test/wpt/tests/interfaces/webnn.idl b/test/wpt/tests/interfaces/webnn.idl
index 2c2ab35e909..17e30803b88 100644
--- a/test/wpt/tests/interfaces/webnn.idl
+++ b/test/wpt/tests/interfaces/webnn.idl
@@ -127,10 +127,10 @@ interface MLGraphBuilder {
   constructor(MLContext context);
 
   // Create an operand for a graph input.
-  MLOperand input(DOMString name, MLOperandDescriptor desc);
+  MLOperand input(DOMString name, MLOperandDescriptor descriptor);
 
   // Create an operand for a graph constant.
-  MLOperand constant(MLOperandDescriptor desc, MLBufferView bufferView);
+  MLOperand constant(MLOperandDescriptor descriptor, MLBufferView bufferView);
 
   // Create a single-value operand from the specified number of the specified type.
   MLOperand constant(double value, optional MLOperandType type = "float32");
@@ -489,13 +489,8 @@ partial interface MLGraphBuilder {
   MLActivation sigmoid();
 };
 
-dictionary MLSliceOptions {
-  sequence<unsigned long> axes;
-};
-
 partial interface MLGraphBuilder {
-  MLOperand slice(MLOperand input, sequence<long> starts, sequence<long> sizes,
-                optional MLSliceOptions options = {});
+  MLOperand slice(MLOperand input, sequence<unsigned long> starts, sequence<unsigned long> sizes);
 };
 
 partial interface MLGraphBuilder {
diff --git a/test/wpt/tests/interfaces/webrtc-encoded-transform.idl b/test/wpt/tests/interfaces/webrtc-encoded-transform.idl
index e48f1080c41..6dd2ba3fffa 100644
--- a/test/wpt/tests/interfaces/webrtc-encoded-transform.idl
+++ b/test/wpt/tests/interfaces/webrtc-encoded-transform.idl
@@ -27,7 +27,7 @@ typedef [EnforceRange] unsigned long long SmallCryptoKeyID;
 typedef (SmallCryptoKeyID or bigint) CryptoKeyID;
 
 [Exposed=(Window,DedicatedWorker)]
-interface SFrameTransform {
+interface SFrameTransform : EventTarget {
     constructor(optional SFrameTransformOptions options = {});
     Promise<undefined> setEncryptionKey(CryptoKey key, optional CryptoKeyID keyID);
     attribute EventHandler onerror;
@@ -72,7 +72,8 @@ dictionary RTCEncodedVideoFrameMetadata {
     unsigned long temporalIndex;
     unsigned long synchronizationSource;
     octet payloadType;
-  sequence<unsigned long> contributingSources;
+    sequence<unsigned long> contributingSources;
+    long long timestamp;    // microseconds
 };
 
 // New interfaces to define encoded video and audio frames. Will eventually
diff --git a/test/wpt/tests/interfaces/webrtc-stats.idl b/test/wpt/tests/interfaces/webrtc-stats.idl
index 7e820a26df4..b398c73e3f4 100644
--- a/test/wpt/tests/interfaces/webrtc-stats.idl
+++ b/test/wpt/tests/interfaces/webrtc-stats.idl
@@ -13,8 +13,6 @@ enum RTCStatsType {
 "media-playout",
 "peer-connection",
 "data-channel",
-"stream",
-"track",
 "transport",
 "candidate-pair",
 "local-candidate",
@@ -94,6 +92,8 @@ dictionary RTCInboundRtpStreamStats : RTCReceivedRtpStreamStats {
  boolean              powerEfficientDecoder;
  unsigned long        framesAssembledFromMultiplePackets;
  double               totalAssemblyTime;
+ unsigned long long   retransmittedPacketsReceived;
+ unsigned long long   retransmittedBytesReceived;
 };
 
 dictionary RTCRemoteInboundRtpStreamStats : RTCReceivedRtpStreamStats {
diff --git a/test/wpt/tests/interfaces/webrtc.idl b/test/wpt/tests/interfaces/webrtc.idl
index 578cbe92974..4c31d3be67a 100644
--- a/test/wpt/tests/interfaces/webrtc.idl
+++ b/test/wpt/tests/interfaces/webrtc.idl
@@ -441,13 +441,13 @@ enum RTCIceGathererState {
 };
 
 enum RTCIceTransportState {
+  "closed",
+  "failed",
+  "disconnected",
   "new",
   "checking",
-  "connected",
   "completed",
-  "disconnected",
-  "failed",
-  "closed"
+  "connected"
 };
 
 enum RTCIceRole {
diff --git a/test/wpt/tests/interfaces/webtransport.idl b/test/wpt/tests/interfaces/webtransport.idl
index 2bea483e1b9..a9f514e2366 100644
--- a/test/wpt/tests/interfaces/webtransport.idl
+++ b/test/wpt/tests/interfaces/webtransport.idl
@@ -98,6 +98,7 @@ dictionary WebTransportDatagramStats {
 
 [Exposed=(Window,Worker), SecureContext, Transferable]
 interface WebTransportSendStream : WritableStream {
+  attribute long long? sendOrder;
   Promise<WebTransportSendStreamStats> getStats();
 };
 
@@ -130,12 +131,12 @@ interface WebTransportError : DOMException {
   constructor(optional DOMString message = "", optional WebTransportErrorOptions options = {});
 
   readonly attribute WebTransportErrorSource source;
-  readonly attribute octet? streamErrorCode;
+  readonly attribute unsigned long? streamErrorCode;
 };
 
 dictionary WebTransportErrorOptions {
   WebTransportErrorSource source = "stream";
-  [Clamp] octet? streamErrorCode = null;
+  [Clamp] unsigned long? streamErrorCode = null;
 };
 
 enum WebTransportErrorSource {
diff --git a/test/wpt/tests/interfaces/webxrlayers.idl b/test/wpt/tests/interfaces/webxrlayers.idl
index e182f47b9c5..c8b3a71c699 100644
--- a/test/wpt/tests/interfaces/webxrlayers.idl
+++ b/test/wpt/tests/interfaces/webxrlayers.idl
@@ -11,6 +11,12 @@ enum XRLayerLayout {
   "stereo-top-bottom"
 };
 
+enum XRLayerQuality {
+  "default",
+  "text-optimized",
+  "graphics-optimized"
+};
+
 [Exposed=Window] interface XRCompositionLayer : XRLayer {
   readonly attribute XRLayerLayout layout;
 
@@ -18,6 +24,7 @@ enum XRLayerLayout {
   attribute boolean forceMonoPresentation;
   attribute float opacity;
   readonly attribute unsigned long mipLevels;
+  attribute XRLayerQuality quality;
 
   readonly attribute boolean needsRedraw;
 
@@ -106,6 +113,7 @@ dictionary XRProjectionLayerInit {
   GLenum colorFormat = 0x1908; // RGBA
   GLenum depthFormat = 0x1902; // DEPTH_COMPONENT
   double scaleFactor = 1.0;
+  boolean clearOnAccess = true;
 };
 
 dictionary XRLayerInit {
@@ -117,6 +125,7 @@ dictionary XRLayerInit {
   required unsigned long viewPixelHeight;
   XRLayerLayout layout = "mono";
   boolean isStatic = false;
+  boolean clearOnAccess = true;
 };
 
 dictionary XRQuadLayerInit : XRLayerInit {
diff --git a/test/wpt/tests/lint.ignore b/test/wpt/tests/lint.ignore
index 6f8ec10470b..489c717cd6a 100644
--- a/test/wpt/tests/lint.ignore
+++ b/test/wpt/tests/lint.ignore
@@ -48,6 +48,7 @@ TRAILING WHITESPACE, INDENT TABS, CR AT EOL: *.bmp
 TRAILING WHITESPACE, INDENT TABS, CR AT EOL: *.sxg
 TRAILING WHITESPACE, INDENT TABS, CR AT EOL: *.wbn
 TRAILING WHITESPACE, INDENT TABS, CR AT EOL: *.avif
+TRAILING WHITESPACE, INDENT TABS, CR AT EOL: *.annexb
 
 ## .gitignore
 W3C-TEST.ORG: .gitignore
@@ -225,7 +226,11 @@ SET TIMEOUT: service-workers/service-worker/activation.https.html
 SET TIMEOUT: service-workers/service-worker/fetch-frame-resource.https.html
 SET TIMEOUT: service-workers/service-worker/fetch-request-redirect.https.html
 SET TIMEOUT: service-workers/service-worker/fetch-waits-for-activate.https.html
+SET TIMEOUT: service-workers/service-worker/postMessage-client-worker.js
 SET TIMEOUT: service-workers/service-worker/update-recovery.https.html
+SET TIMEOUT: service-workers/service-worker/resources/controlled-frame-postMessage.html
+SET TIMEOUT: service-workers/service-worker/resources/controlled-worker-late-postMessage.js
+SET TIMEOUT: service-workers/service-worker/resources/controlled-worker-postMessage.js
 SET TIMEOUT: service-workers/service-worker/resources/extendable-event-async-waituntil.js
 SET TIMEOUT: service-workers/service-worker/resources/fetch-event-async-respond-with-worker.js
 SET TIMEOUT: service-workers/service-worker/resources/fetch-event-test-worker.js
@@ -247,11 +252,16 @@ SET TIMEOUT: webaudio/the-audio-api/the-mediaelementaudiosourcenode-interface/me
 SET TIMEOUT: webauthn/*timeout.https.html
 SET TIMEOUT: webdriver/*
 SET TIMEOUT: webmessaging/*
+SET TIMEOUT: webrtc-encoded-transform/script-metadata-transform-worker.js
+SET TIMEOUT: webrtc-encoded-transform/script-transform-generateKeyFrame.js
+SET TIMEOUT: webrtc-encoded-transform/script-transform-sendKeyFrameRequest.js
 SET TIMEOUT: webstorage/eventTestHarness.js
 SET TIMEOUT: webvtt/*
 SET TIMEOUT: workers/*
 SET TIMEOUT: xhr/resources/init.htm
 SET TIMEOUT: xhr/resources/xmlhttprequest-timeout.js
+SET TIMEOUT: fenced-frame/resolve-to-config-promise.https.html
+SET TIMEOUT: credential-management/support/fedcm-iframe.html
 
 # generate_tests implementation and sample usage
 GENERATE_TESTS: resources/test/tests/functional/generate-callback.html
@@ -361,7 +371,6 @@ SET TIMEOUT: speculation-rules/prerender/resources/media-autoplay-attribute.html
 SET TIMEOUT: speculation-rules/prerender/resources/media-play.html
 SET TIMEOUT: html/browsers/browsing-the-web/back-forward-cache/timers.html
 SET TIMEOUT: dom/abort/crashtests/timeout-close.html
-SET TIMEOUT: common/rendering-utils.js
 
 # setTimeout use in reftests
 SET TIMEOUT: acid/acid3/test.html
@@ -427,8 +436,12 @@ TRAILING WHITESPACE: css/css-fonts/support/fonts/gsubtest-lookup3.ufo/features.f
 
 SET TIMEOUT: css/compositing/mix-blend-mode/mix-blend-mode-parent-with-3D-transform-and-transition.html
 SET TIMEOUT: css/compositing/mix-blend-mode/mix-blend-mode-sibling-with-3D-transform-and-transition.html
+SET TIMEOUT: css/css-backgrounds/color-mix-currentcolor-background-repaint-parent.html
+SET TIMEOUT: css/css-backgrounds/color-mix-currentcolor-background-repaint.html
 SET TIMEOUT: css/css-backgrounds/color-mix-currentcolor-border-repaint-parent.html
 SET TIMEOUT: css/css-backgrounds/color-mix-currentcolor-border-repaint.html
+SET TIMEOUT: css/css-backgrounds/color-mix-currentcolor-outline-repaint-parent.html
+SET TIMEOUT: css/css-backgrounds/color-mix-currentcolor-outline-repaint.html
 SET TIMEOUT: css/css-backgrounds/currentcolor-border-repaint-parent.html
 SET TIMEOUT: css/css-transitions/events-007.html
 SET TIMEOUT: css/css-transitions/support/generalParallelTest.js
@@ -593,7 +606,7 @@ AHEM SYSTEM FONT: acid/acid3/test.html
 AHEM SYSTEM FONT: resource-timing/font-timestamps.html
 AHEM SYSTEM FONT: resource-timing/initiator-type/style.html
 AHEM SYSTEM FONT: resource-timing/resources/iframe-reload-TAO.sub.html
-AHEM SYSTEM FONT: html/canvas/element/drawing-text-to-the-canvas/2d.text.measure.fontBoundingBox.ahem.html
+AHEM SYSTEM FONT: html/canvas/element/text/2d.text.measure.fontBoundingBox.ahem.html
 AHEM SYSTEM FONT: css/css-font-loading/fontface-override-descriptors.html
 AHEM SYSTEM FONT: css/css-font-loading/fontface-size-adjust-descriptor.html
 AHEM SYSTEM FONT: css/css-font-loading/fontface-size-adjust-descriptor-ref.html
@@ -602,7 +615,12 @@ AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-012.html
 AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-012-ref.html
 AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-013.html
 AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-013-ref.html
+AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-014.html
+AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-014-ref.html
+AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-metrics-override.html
+AHEM SYSTEM FONT: css/css-fonts/font-size-adjust-metrics-override-ref.html
 AHEM SYSTEM FONT: css/css-fonts/line-gap-override.html
+AHEM SYSTEM FONT: css/css-fonts/parsing/font-size-adjust-computed.html
 AHEM SYSTEM FONT: html/dom/render-blocking/remove-attr-unblocks-rendering.optional.html
 AHEM SYSTEM FONT: html/dom/render-blocking/remove-element-unblocks-rendering.optional.html
 
@@ -655,8 +673,8 @@ TESTHARNESS-IN-OTHER-TYPE: svg/svg-in-svg/svg-in-svg-circular-filter-reference-c
 # Adding the testharnessreport.js script causes the test to never complete.
 MISSING-TESTHARNESSREPORT: accessibility/crashtests/computed-node-checked.html
 
-PRINT STATEMENT: webdriver/tests/print/*
 PRINT STATEMENT: webdriver/tests/bidi/browsing_context/print/*
+PRINT STATEMENT: webdriver/tests/classic/print/*
 PRINT STATEMENT: webdriver/tests/support/fixtures_bidi.py
 
 DUPLICATE-BASENAME-PATH: acid/acid3/empty.html
@@ -669,6 +687,10 @@ DUPLICATE-BASENAME-PATH: svg/struct/reftests/reference/green-100x100.svg
 
 SET TIMEOUT: mediacapture-insertable-streams/MediaStreamTrackProcessor-video.https.html
 
+# This is a subresource which cannot use step_timeout without becoming a test
+# itself. See https://github.com/web-platform-tests/wpt/issues/16933
+SET TIMEOUT: scroll-to-text-fragment/iframe-target.html
+
 # Ported crashtests from Mozilla
 SET TIMEOUT: editing/crashtests/backcolor-in-nested-editing-host-td-from-DOMAttrModified.html
 SET TIMEOUT: editing/crashtests/contenteditable-will-be-blurred-by-focus-event-listener.html
diff --git a/test/wpt/tests/resources/chromium/webusb-test.js b/test/wpt/tests/resources/chromium/webusb-test.js
index 94ff1bcadd9..7cca63d9196 100644
--- a/test/wpt/tests/resources/chromium/webusb-test.js
+++ b/test/wpt/tests/resources/chromium/webusb-test.js
@@ -440,11 +440,11 @@ class FakeWebUsbService {
     }
   }
 
-  getPermission(deviceFilters) {
+  getPermission(options) {
     return new Promise(resolve => {
       if (navigator.usb.test.onrequestdevice) {
         navigator.usb.test.onrequestdevice(
-            new USBDeviceRequestEvent(deviceFilters, resolve));
+            new USBDeviceRequestEvent(options, resolve));
       } else {
         resolve({ result: null });
       }
@@ -457,8 +457,9 @@ class FakeWebUsbService {
 }
 
 class USBDeviceRequestEvent {
-  constructor(deviceFilters, resolve) {
-    this.filters = convertMojoDeviceFilters(deviceFilters);
+  constructor(options, resolve) {
+    this.filters = convertMojoDeviceFilters(options.filters);
+    this.exclusionFilters = convertMojoDeviceFilters(options.exclusionFilters);
     this.resolveFunc_ = resolve;
   }
 
diff --git a/test/wpt/tests/resources/chromium/webxr-test.js b/test/wpt/tests/resources/chromium/webxr-test.js
index ab2c6faa0ee..c5eb1bd14b8 100644
--- a/test/wpt/tests/resources/chromium/webxr-test.js
+++ b/test/wpt/tests/resources/chromium/webxr-test.js
@@ -985,8 +985,6 @@ class MockRuntime {
         environmentProviderRequest.handle);
   }
 
-  setInputSourceButtonListener(listener) { listener.$.close(); }
-
   // XREnvironmentIntegrationProvider implementation:
   subscribeToHitTest(nativeOriginInformation, entityTypes, ray) {
     if (!this.supportedModes_.includes(xrSessionMojom.XRSessionMode.kImmersiveAr)) {
@@ -1212,7 +1210,6 @@ class MockRuntime {
             clientReceiver: clientReceiver,
             enabledFeatures: enabled_features,
             deviceConfig: {
-              usesInputEventing: false,
               defaultFramebufferScale: this.defaultFramebufferScale_,
               supportsViewportScaling: true,
               depthConfiguration:
diff --git a/test/wpt/tests/resources/idlharness.js b/test/wpt/tests/resources/idlharness.js
index 46aa11e5ca1..8f741b09b26 100644
--- a/test/wpt/tests/resources/idlharness.js
+++ b/test/wpt/tests/resources/idlharness.js
@@ -2357,12 +2357,13 @@ IdlInterface.prototype.do_member_operation_asserts = function(memberHolderObject
     assert_equals(typeof memberHolderObject[member.name], "function",
                   "property must be a function");
 
-    const ctors = this.members.filter(function(m) {
-        return m.type == "operation" && m.name == member.name;
+    const operationOverloads = this.members.filter(function(m) {
+        return m.type == "operation" && m.name == member.name &&
+            (m.special === "static") === (member.special === "static");
     });
     assert_equals(
         memberHolderObject[member.name].length,
-        minOverloadLength(ctors),
+        minOverloadLength(operationOverloads),
         "property has wrong .length");
     assert_equals(
         memberHolderObject[member.name].name,
diff --git a/test/wpt/tests/resources/test/tests/functional/assert-throws-dom.html b/test/wpt/tests/resources/test/tests/functional/assert-throws-dom.html
new file mode 100644
index 00000000000..4dd66b2372a
--- /dev/null
+++ b/test/wpt/tests/resources/test/tests/functional/assert-throws-dom.html
@@ -0,0 +1,55 @@
+<!DOCTYPE HTML>
+<title>assert_throws_dom</title>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<script>
+test(() => {
+  function f() {
+      assert_true(false, "Trivial assertion.");
+
+      // Would lead to throwing a SyntaxError.
+      document.createElement("div").contentEditable = "invalid";
+    }
+
+  assert_throws_dom("SyntaxError", () => { f(); });
+}, "Violated assertion nested in `assert_throws_dom`.");
+</script>
+<script type="text/json" id="expected">
+{
+  "type": "complete",
+  "summarized_status": {
+    "message": null,
+    "status_string": "OK"
+  },
+  "summarized_tests": [
+    {
+      "message": "assert_true: Trivial assertion. expected true got false",
+      "name": "Violated assertion nested in `assert_throws_dom`.",
+      "properties": {},
+      "status_string": "FAIL"
+    }
+  ],
+  "summarized_asserts": [
+    {
+      "assert_name": "assert_throws_dom",
+      "test": "Violated assertion nested in `assert_throws_dom`.",
+      "args": [
+        "\"SyntaxError\"",
+        "function \"() => { f(); }\""
+      ],
+      "status": 1
+    },
+    {
+      "assert_name": "assert_true",
+      "test": "Violated assertion nested in `assert_throws_dom`.",
+      "args": [
+        "false",
+        "\"Trivial assertion.\""
+      ],
+      "status": 1
+    }
+  ]
+}
+</script>
+
diff --git a/test/wpt/tests/resources/test/tests/functional/idlharness/IdlDictionary/test_partial_interface_of.html b/test/wpt/tests/resources/test/tests/functional/idlharness/IdlDictionary/test_partial_interface_of.html
index 05e6e0b1e06..f635768c69f 100644
--- a/test/wpt/tests/resources/test/tests/functional/idlharness/IdlDictionary/test_partial_interface_of.html
+++ b/test/wpt/tests/resources/test/tests/functional/idlharness/IdlDictionary/test_partial_interface_of.html
@@ -3,7 +3,6 @@
 
 <head>
   <meta charset="utf-8">
-  <meta name="variant" content="">
   <title>idlharness: Partial dictionary</title>
   <script src="/resources/test/variants.js"></script>
   <script src="/resources/testharness.js"></script>
diff --git a/test/wpt/tests/resources/test/tests/functional/idlharness/IdlInterface/test_partial_interface_of.html b/test/wpt/tests/resources/test/tests/functional/idlharness/IdlInterface/test_partial_interface_of.html
index 671196cc5df..7dd9e676af4 100644
--- a/test/wpt/tests/resources/test/tests/functional/idlharness/IdlInterface/test_partial_interface_of.html
+++ b/test/wpt/tests/resources/test/tests/functional/idlharness/IdlInterface/test_partial_interface_of.html
@@ -3,7 +3,6 @@
 
 <head>
   <meta charset="utf-8">
-  <meta name="variant" content="">
   <title>idlharness: Partial interface</title>
   <script src="/resources/test/variants.js"></script>
   <script src="/resources/testharness.js"></script>
diff --git a/test/wpt/tests/resources/test/tox.ini b/test/wpt/tests/resources/test/tox.ini
index 4fbeb67fb52..12013a1a705 100644
--- a/test/wpt/tests/resources/test/tox.ini
+++ b/test/wpt/tests/resources/test/tox.ini
@@ -1,5 +1,5 @@
 [tox]
-envlist = py37,py38,py39,py310
+envlist = py37,py38,py39,py310,py311
 skipsdist=True
 
 [testenv]
diff --git a/test/wpt/tests/resources/testdriver.js b/test/wpt/tests/resources/testdriver.js
index 446b033b0a4..a23d6eaf4cf 100644
--- a/test/wpt/tests/resources/testdriver.js
+++ b/test/wpt/tests/resources/testdriver.js
@@ -296,12 +296,6 @@
                                         inline: "nearest"});
             }
 
-            var pointerInteractablePaintTree = getPointerInteractablePaintTree(element);
-            if (pointerInteractablePaintTree.length === 0 ||
-                !element.contains(pointerInteractablePaintTree[0])) {
-                return Promise.reject(new Error("element send_keys intercepted error"));
-            }
-
             return window.test_driver_internal.send_keys(element, keys);
         },
 
@@ -334,9 +328,9 @@
          *                                to run the call, or null for the current
          *                                browsing context.
          *
-         * @returns {Promise} fulfilled with the previous {@link
-         *                    https://www.w3.org/TR/webdriver/#dfn-windowrect-object|WindowRect}
-         *                      value, after the window is minimized.
+         * @returns {Promise} fulfilled with the previous `WindowRect
+         *                    <https://www.w3.org/TR/webdriver/#dfn-windowrect-object>`_
+         *                    value, after the window is minimized.
          */
         minimize_window: function(context=null) {
             return window.test_driver_internal.minimize_window(context);
@@ -349,8 +343,8 @@
          * <https://www.w3.org/TR/webdriver/#set-window-rect>`_
          * WebDriver command
          *
-         * @param {Object} rect - A {@link
-         *                           https://www.w3.org/TR/webdriver/#dfn-windowrect-object|WindowRect}
+         * @param {Object} rect - A `WindowRect
+         *                        <https://www.w3.org/TR/webdriver/#dfn-windowrect-object>`_
          * @param {WindowProxy} context - Browsing context in which
          *                                to run the call, or null for the current
          *                                browsing context.
@@ -680,6 +674,134 @@
         set_spc_transaction_mode: function(mode, context=null) {
           return window.test_driver_internal.set_spc_transaction_mode(mode, context);
         },
+
+        /**
+         * Cancels the Federated Credential Management dialog
+         *
+         * Matches the `Cancel dialog
+         * <https://fedidcg.github.io/FedCM/#webdriver-canceldialog>`_
+         * WebDriver command.
+         *
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} Fulfilled after the dialog is canceled, or rejected
+         *                    in case the WebDriver command errors
+         */
+        cancel_fedcm_dialog: function(context=null) {
+            return window.test_driver_internal.cancel_fedcm_dialog(context);
+        },
+
+        /**
+         * Selects an account from the Federated Credential Management dialog
+         *
+         * Matches the `Select account
+         * <https://fedidcg.github.io/FedCM/#webdriver-selectaccount>`_
+         * WebDriver command.
+         *
+         * @param {number} account_index - Index of the account to select.
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} Fulfilled after the account is selected,
+         *                    or rejected in case the WebDriver command errors
+         */
+        select_fedcm_account: function(account_index, context=null) {
+          return window.test_driver_internal.select_fedcm_account(account_index, context);
+        },
+
+        /**
+         * Gets the account list from the Federated Credential Management dialog
+         *
+         * Matches the `Account list
+         * <https://fedidcg.github.io/FedCM/#webdriver-accountlist>`_
+         * WebDriver command.
+         *
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} fulfilled after the account list is returned, or
+         *                    rejected in case the WebDriver command errors
+         */
+        get_fedcm_account_list: function(context=null) {
+          return window.test_driver_internal.get_fedcm_account_list(context);
+        },
+
+        /**
+         * Gets the title of the Federated Credential Management dialog
+         *
+         * Matches the `Get title
+         * <https://fedidcg.github.io/FedCM/#webdriver-gettitle>`_
+         * WebDriver command.
+         *
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} Fulfilled after the title is returned, or rejected
+         *                    in case the WebDriver command errors
+         */
+        get_fedcm_dialog_title: function(context=null) {
+          return window.test_driver_internal.get_fedcm_dialog_title(context);
+        },
+
+        /**
+         * Gets the type of the Federated Credential Management dialog
+         *
+         * Matches the `Get dialog type
+         * <https://fedidcg.github.io/FedCM/#webdriver-getdialogtype>`_
+         * WebDriver command.
+         *
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} Fulfilled after the dialog type is returned, or
+         *                    rejected in case the WebDriver command errors
+         */
+        get_fedcm_dialog_type: function(context=null) {
+          return window.test_driver_internal.get_fedcm_dialog_type(context);
+        },
+
+        /**
+         * Sets whether promise rejection delay is enabled for the Federated Credential Management dialog
+         *
+         * Matches the `Set delay enabled
+         * <https://fedidcg.github.io/FedCM/#webdriver-setdelayenabled>`_
+         * WebDriver command.
+         *
+         * @param {boolean} enabled - Whether to delay FedCM promise rejection.
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} Fulfilled after the delay has been enabled or disabled,
+         *                    or rejected in case the WebDriver command errors
+         */
+        set_fedcm_delay_enabled: function(enabled, context=null) {
+          return window.test_driver_internal.set_fedcm_delay_enabled(enabled, context);
+        },
+
+        /**
+         * Resets the Federated Credential Management dialog's cooldown
+         *
+         * Matches the `Reset cooldown
+         * <https://fedidcg.github.io/FedCM/#webdriver-resetcooldown>`_
+         * WebDriver command.
+         *
+         * @param {WindowProxy} context - Browsing context in which
+         *                                to run the call, or null for the current
+         *                                browsing context.
+         *
+         * @returns {Promise} Fulfilled after the cooldown has been reset,
+         *                    or rejected in case the WebDriver command errors
+         */
+        reset_fedcm_cooldown: function(context=null) {
+          return window.test_driver_internal.reset_fedcm_cooldown(context);
+        }
     };
 
     window.test_driver_internal = {
@@ -805,5 +927,32 @@
             throw new Error("set_spc_transaction_mode() is not implemented by testdriver-vendor.js");
         },
 
+        async cancel_fedcm_dialog(context=null) {
+            throw new Error("cancel_fedcm_dialog() is not implemented by testdriver-vendor.js");
+        },
+
+        async select_fedcm_account(account_index, context=null) {
+            throw new Error("select_fedcm_account() is not implemented by testdriver-vendor.js");
+        },
+
+        async get_fedcm_account_list(context=null) {
+            throw new Error("get_fedcm_account_list() is not implemented by testdriver-vendor.js");
+        },
+
+        async get_fedcm_dialog_title(context=null) {
+            throw new Error("get_fedcm_dialog_title() is not implemented by testdriver-vendor.js");
+        },
+
+        async get_fedcm_dialog_type(context=null) {
+            throw new Error("get_fedcm_dialog_type() is not implemented by testdriver-vendor.js");
+        },
+
+        async set_fedcm_delay_enabled(enabled, context=null) {
+            throw new Error("set_fedcm_delay_enabled() is not implemented by testdriver-vendor.js");
+        },
+
+        async reset_fedcm_cooldown(context=null) {
+            throw new Error("reset_fedcm_cooldown() is not implemented by testdriver-vendor.js");
+        }
     };
 })();
diff --git a/test/wpt/tests/resources/testharness.js b/test/wpt/tests/resources/testharness.js
index 112790bb1ee..413993089be 100644
--- a/test/wpt/tests/resources/testharness.js
+++ b/test/wpt/tests/resources/testharness.js
@@ -1426,12 +1426,16 @@
         function assert_wrapper(...args) {
             let status = Test.statuses.TIMEOUT;
             let stack = null;
+            let new_assert_index = null;
             try {
                 if (settings.debug) {
                     console.debug("ASSERT", name, tests.current_test && tests.current_test.name, args);
                 }
                 if (tests.output) {
                     tests.set_assert(name, args);
+                    // Remember the newly pushed assert's index, because `apply`
+                    // below might push new asserts.
+                    new_assert_index = tests.asserts_run.length - 1;
                 }
                 const rv = f.apply(undefined, args);
                 status = Test.statuses.PASS;
@@ -1445,7 +1449,7 @@
                     stack = get_stack();
                 }
                 if (tests.output) {
-                    tests.set_assert_status(status, stack);
+                    tests.set_assert_status(new_assert_index, status, stack);
                 }
             }
         }
@@ -3673,8 +3677,8 @@
         this.asserts_run.push(new AssertRecord(this.current_test, assert_name, args))
     }
 
-    Tests.prototype.set_assert_status = function(status, stack) {
-        let assert_record = this.asserts_run[this.asserts_run.length - 1];
+    Tests.prototype.set_assert_status = function(index, status, stack) {
+        let assert_record = this.asserts_run[index];
         assert_record.status = status;
         assert_record.stack = stack;
     }
diff --git a/test/wpt/tests/service-workers/service-worker/controlled-dedicatedworker-postMessage.https.html b/test/wpt/tests/service-workers/service-worker/controlled-dedicatedworker-postMessage.https.html
new file mode 100644
index 00000000000..7e2a604621d
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/controlled-dedicatedworker-postMessage.https.html
@@ -0,0 +1,44 @@
+<html>
+<head>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="resources/test-helpers.sub.js"></script>
+</head>
+<body>
+<script>
+promise_test(async (test) => {
+    const registration = await navigator.serviceWorker.register("postMessage-client-worker.js", { scope : 'resources' });
+    activeWorker = registration.active;
+    if (activeWorker)
+        return;
+
+    activeWorker = registration.installing;
+    await new Promise(resolve => {
+        activeWorker.addEventListener('statechange', () => {
+            if (activeWorker.state === "activated")
+                resolve();
+        });
+    });
+}, "Register service worker");
+
+promise_test(async (test) => {
+    const worker = new Worker('resources/controlled-worker-postMessage.js');
+    const event = await new Promise((resolve, reject) => {
+       test.step_timeout(() => reject("test timed out"), 3000);
+       worker.onmessage = resolve;
+    });
+    assert_equals(event.data, 0);
+}, "Verify dedicated worker gets messages if setting event listener early");
+
+promise_test(async (test) => {
+    const worker = new Worker('resources/controlled-worker-late-postMessage.js?repeatMessages');
+    const event = await new Promise((resolve, reject) => {
+       test.step_timeout(() => reject("test timed out"), 3000);
+       worker.onmessage = resolve;
+    });
+    assert_not_equals(event.data, "No message received");
+    assert_true(event.data > 0);
+}, "Verify dedicated worker does not get all messages if not setting event listener early");
+</script>
+</body>
+</html>
diff --git a/test/wpt/tests/service-workers/service-worker/controlled-iframe-postMessage.https.html b/test/wpt/tests/service-workers/service-worker/controlled-iframe-postMessage.https.html
new file mode 100644
index 00000000000..8f39b7fdbf8
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/controlled-iframe-postMessage.https.html
@@ -0,0 +1,67 @@
+<html>
+<head>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="resources/test-helpers.sub.js"></script>
+</head>
+<body>
+<script>
+promise_test(async (test) => {
+    const registration = await navigator.serviceWorker.register("postMessage-client-worker.js", { scope : 'resources' });
+    activeWorker = registration.active;
+    if (activeWorker)
+        return;
+
+    activeWorker = registration.installing;
+    await new Promise(resolve => {
+        activeWorker.addEventListener('statechange', () => {
+            if (activeWorker.state === "activated")
+                resolve();
+        });
+    });
+}, "Register service worker");
+
+function with_iframe(test, url) {
+    return new Promise(function(resolve, reject) {
+        test.step_timeout(() => reject("with_iframe timed out"), 2000);
+        var frame = document.createElement('iframe');
+        frame.className = 'test-iframe';
+        frame.src = url;
+        frame.onload = function() { resolve(frame); };
+        document.body.appendChild(frame);
+    });
+}
+
+promise_test(async (test) => {
+    const frame = await with_iframe(test, 'resources/controlled-frame-postMessage.html');
+    let counter = 0;
+    while (counter++ < 100 && frame.contentWindow.messageData == undefined)
+       await new Promise(resolve => test.step_timeout(resolve, 50));
+    assert_equals(frame.contentWindow.messageData, 0);
+    frame.remove();
+}, "Verify frame gets early messages if setting synchronously message event listener");
+
+promise_test(async (test) => {
+    const frame = await with_iframe(test, 'resources/controlled-frame-postMessage.html?repeatMessages');
+    let counter = 0;
+    while (counter++ < 100 && frame.contentWindow.messageData == undefined)
+       await new Promise(resolve => test.step_timeout(resolve, 50));
+    assert_not_equals(frame.contentWindow.messageData, 0);
+    frame.remove();
+}, "Verify frame does not get all messages if not setting event listener early");
+
+promise_test(async (test) => {
+    const frame = await with_iframe(test, 'resources/controlled-frame-postMessage.html?repeatMessages&listener');
+    let counter = 0;
+    while (counter++ < 100 && frame.contentWindow.messageData.length < 5)
+       await new Promise(resolve => test.step_timeout(resolve, 50));
+
+    assert_less_than(counter, 100);
+    data = frame.contentWindow.messageData;
+    for (let cptr = 1; cptr < data.length; cptr++)
+        assert_true(data[cptr - 1] < data[cptr]);
+    frame.remove();
+}, "Verify frame does get messages in order");
+</script>
+</body>
+</html>
diff --git a/test/wpt/tests/service-workers/service-worker/detached-context.https.html b/test/wpt/tests/service-workers/service-worker/detached-context.https.html
index 747a953f620..ce8e4cc8400 100644
--- a/test/wpt/tests/service-workers/service-worker/detached-context.https.html
+++ b/test/wpt/tests/service-workers/service-worker/detached-context.https.html
@@ -119,23 +119,6 @@
     }
     assert_not_equals(get_navigator().serviceWorker, null);
     iframe.remove();
-    assert_throws_js(TypeError, () => get_navigator());
-  }, 'accessing navigator on a removed frame');
-
-// It seems weird that about:blank and blank.html (the test above) have
-// different behavior. These expectations are based on Chromium behavior, which
-// might not be right.
-test(t => {
-    const iframe = document.createElement('iframe');
-    iframe.src = 'about:blank';
-    document.body.appendChild(iframe);
-    const f = iframe.contentWindow.Function;
-    function get_navigator() {
-      return f('return navigator')();
-    }
     assert_not_equals(get_navigator().serviceWorker, null);
-    iframe.remove();
-    assert_equals(get_navigator().serviceWorker, null);
-  }, 'accessing navigator.serviceWorker on a removed about:blank frame');
-
+  }, 'accessing navigator on a removed frame');
 </script>
diff --git a/test/wpt/tests/service-workers/service-worker/fetch-error.https.html b/test/wpt/tests/service-workers/service-worker/fetch-error.https.html
index ca2f884a9b3..e9fdf574312 100644
--- a/test/wpt/tests/service-workers/service-worker/fetch-error.https.html
+++ b/test/wpt/tests/service-workers/service-worker/fetch-error.https.html
@@ -21,12 +21,8 @@
     const iframe = await with_iframe(scope);
     test.add_cleanup(() => iframe.remove());
     const response = await iframe.contentWindow.fetch("fetch-error-test");
-    try {
-      await response.text();
-      assert_unreached();
-    } catch (error) {
-      assert_true(error.message.includes("Sorry"));
-    }
+    return promise_rejects_js(test, iframe.contentWindow.TypeError,
+                              response.text(), 'text() should reject');
 }, "Make sure a load that makes progress does not time out");
 </script>
 </body>
diff --git a/test/wpt/tests/service-workers/service-worker/navigation-redirect.https.html b/test/wpt/tests/service-workers/service-worker/navigation-redirect.https.html
index d7d3d5259a4..a87de569316 100644
--- a/test/wpt/tests/service-workers/service-worker/navigation-redirect.https.html
+++ b/test/wpt/tests/service-workers/service-worker/navigation-redirect.https.html
@@ -1,8 +1,8 @@
 <!DOCTYPE html>
 <title>Service Worker: Navigation redirection</title>
 <meta name="timeout" content="long">
-<!-- empty variant tests document.location and intercepted URLs -->
-<meta name="variant" content="">
+<!-- default variant tests document.location and intercepted URLs -->
+<meta name="variant" content="?default">
 <!-- client variant tests the Clients API (resultingClientId and Client.url) -->
 <meta name="variant" content="?client">
 
diff --git a/test/wpt/tests/service-workers/service-worker/navigation-timing.https.html b/test/wpt/tests/service-workers/service-worker/navigation-timing.https.html
index 6b51a5c2da2..75cab40458c 100644
--- a/test/wpt/tests/service-workers/service-worker/navigation-timing.https.html
+++ b/test/wpt/tests/service-workers/service-worker/navigation-timing.https.html
@@ -54,6 +54,7 @@
     t.add_cleanup(() => frame.remove());
 
     const timing = await navigate_in_frame(frame, scope);
+    assert_greater_than(timing.workerStart, 0);
     verify(timing);
 }, 'Service worker controlled navigation timing network fallback');
 
diff --git a/test/wpt/tests/service-workers/service-worker/partitioned-cookies.tentative.https.html b/test/wpt/tests/service-workers/service-worker/partitioned-cookies.tentative.https.html
index 6744edc0eac..5f6371cb428 100644
--- a/test/wpt/tests/service-workers/service-worker/partitioned-cookies.tentative.https.html
+++ b/test/wpt/tests/service-workers/service-worker/partitioned-cookies.tentative.https.html
@@ -23,6 +23,14 @@
   const scope = './resources/partitioned-cookies-'
   const absolute_scope = new URL(scope, window.location).href;
 
+  // Set a Partitioned cookie.
+  document.cookie = '__Host-partitioned=123; Secure; Path=/; SameSite=None; Partitioned;';
+  assert_true(document.cookie.includes('__Host-partitioned=123'));
+
+  // Set an unpartitioned cookie.
+  document.cookie = 'unpartitioned=456; Secure; Path=/; SameSite=None;';
+  assert_true(document.cookie.includes('unpartitioned=456'));
+
   const reg = await service_worker_unregister_and_register(t, script, scope);
   await wait_for_state(t, reg.installing, 'activated');
   t.add_cleanup(() => reg.unregister());
@@ -55,11 +63,36 @@
   await wait_promise;
   assert_true(got.ok, 'Message passing');
 
-  // Set a Partitioned cookie.
-  document.cookie = '__Host-partitioned=123; Secure; Path=/; SameSite=None; Partitioned;';
-  assert_true(document.cookie.includes('__Host-partitioned=123'));
+  // Test that the partitioned cookie is available to this worker via HTTP.
+  wait_promise = new Promise(resolve => {
+    resolve_wait_promise = resolve;
+  });
+  on_message = ev => {
+    got = ev.data;
+    resolve_wait_promise();
+  };
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_http'});
+  await wait_promise;
+  assert_true(got.ok, 'Get cookies');
+  assert_true(got.cookies.includes('__Host-partitioned'), 'Can access partitioned cookie via HTTP');
+  assert_true(got.cookies.includes('unpartitioned'), 'Can access unpartitioned cookie via HTTP');
+
+  // Test that the partitioned cookie is available to this worker via CookieStore API.
+  wait_promise = new Promise(resolve => {
+    resolve_wait_promise = resolve;
+  });
+  on_message = ev => {
+    got = ev.data;
+    resolve_wait_promise();
+  };
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_js'});
+  await wait_promise;
+  assert_true(got.ok, 'Get cookies');
+  assert_true(got.cookies.includes('__Host-partitioned'), 'Can access partitioned cookie via JS');
+  assert_true(got.cookies.includes('unpartitioned'), 'Can access unpartitioned cookie via JS');
 
-  // Test that the partitioned cookie is available to this worker.
+  // Test that the partitioned cookie is not available to this worker in HTTP
+  // requests from importScripts.
   wait_promise = new Promise(resolve => {
     resolve_wait_promise = resolve;
   });
@@ -67,10 +100,11 @@
     got = ev.data;
     resolve_wait_promise();
   };
-  filtered_registrations[0].active.postMessage({type: 'echo_cookies'});
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_import'});
   await wait_promise;
   assert_true(got.ok, 'Get cookies');
-  assert_true(got.cookies.includes('__Host-partitioned'), 'Can access partitioned cookie');
+  assert_true(got.cookies.includes('__Host-partitioned'), 'Can access partitioned cookie via importScripts');
+  assert_true(got.cookies.includes('unpartitioned'), 'Can access unpartitioned cookie via importScripts');
 
   const popup = window.open(
       new URL(
@@ -82,4 +116,4 @@
 
 </script>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/test/wpt/tests/service-workers/service-worker/postMessage-client-worker.js b/test/wpt/tests/service-workers/service-worker/postMessage-client-worker.js
new file mode 100644
index 00000000000..64d944d2b54
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/postMessage-client-worker.js
@@ -0,0 +1,23 @@
+async function doTest(e)
+{
+    if (e.resultingClientId) {
+        const promise = new Promise(async resolve => {
+            let counter = 0;
+            const client = await self.clients.get(e.resultingClientId);
+            if (client)
+                client.postMessage(counter++);
+            if (e.request.url.includes("repeatMessage")) {
+                setInterval(() => {
+                    if (client)
+                        client.postMessage(counter++);
+                }, 100);
+            }
+            setTimeout(() => {
+                resolve(fetch(e.request));
+            }, 1000);
+        });
+        e.respondWith(promise);
+    }
+}
+
+self.addEventListener("fetch", e => e.waitUntil(doTest(e)));
diff --git a/test/wpt/tests/service-workers/service-worker/resource-timing.sub.https.html b/test/wpt/tests/service-workers/service-worker/resource-timing.sub.https.html
index 9808ae5ae1b..e8328f3597b 100644
--- a/test/wpt/tests/service-workers/service-worker/resource-timing.sub.https.html
+++ b/test/wpt/tests/service-workers/service-worker/resource-timing.sub.https.html
@@ -114,9 +114,9 @@
   });
   verify({
     performance: performance,
-    resource: 'resources/missing.jpg',
+    resource: 'resources/missing.asis',  // ORB-compatible 404 response.
     mode: 'cross-origin',
-    description: 'Network fallback cross-origin load failure',
+    description: 'Network fallback cross-origin load failure (404 response)',
   });
   // Tests for respondWith(fetch()).
   verify({
diff --git a/test/wpt/tests/service-workers/service-worker/resources/controlled-frame-postMessage.html b/test/wpt/tests/service-workers/service-worker/resources/controlled-frame-postMessage.html
new file mode 100644
index 00000000000..c4428e88a3d
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/resources/controlled-frame-postMessage.html
@@ -0,0 +1,39 @@
+<html>
+<body>
+<script>
+var messageData;
+function registerMessage()
+{
+    navigator.serviceWorker.onmessage = (e) => {
+        if (window.messageData === undefined)
+            window.messageData = e.data;
+    }
+}
+
+function listenToMessages()
+{
+    messageData = [];
+    setTimeout(() => {
+        navigator.serviceWorker.addEventListener("message", (e) => {
+            messageData.push(e.data);
+        }, { once:true });
+    }, 500);
+    setTimeout(() => {
+        navigator.serviceWorker.onmessage = (e) => {
+            messageData.push(e.data);
+        };
+    }, 1000);
+}
+
+if (window.location.search === "?repeatMessages") {
+    setTimeout(() => {
+        registerMessage();
+    }, 500);
+} else if (window.location.search.includes("listener")) {
+    listenToMessages();
+} else {
+    registerMessage();
+}
+</script>
+</body>
+</html>
diff --git a/test/wpt/tests/service-workers/service-worker/resources/controlled-worker-late-postMessage.js b/test/wpt/tests/service-workers/service-worker/resources/controlled-worker-late-postMessage.js
new file mode 100644
index 00000000000..41d2db43b1f
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/resources/controlled-worker-late-postMessage.js
@@ -0,0 +1,6 @@
+setTimeout(() => {
+    navigator.serviceWorker.onmessage = e => self.postMessage(e.data);
+}, 500);
+setTimeout(() => {
+    self.postMessage("No message received");
+}, 5000);
diff --git a/test/wpt/tests/service-workers/service-worker/resources/controlled-worker-postMessage.js b/test/wpt/tests/service-workers/service-worker/resources/controlled-worker-postMessage.js
new file mode 100644
index 00000000000..628dc65db11
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/resources/controlled-worker-postMessage.js
@@ -0,0 +1,4 @@
+navigator.serviceWorker.onmessage = e => self.postMessage(e.data);
+setTimeout(() => {
+    self.postMessage("No message received");
+}, 5000);
diff --git a/test/wpt/tests/service-workers/service-worker/resources/fetch-access-control.py b/test/wpt/tests/service-workers/service-worker/resources/fetch-access-control.py
index 446af87b249..380a7d62225 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/fetch-access-control.py
+++ b/test/wpt/tests/service-workers/service-worker/resources/fetch-access-control.py
@@ -35,8 +35,13 @@ def main(request, response):
         return headers, body
 
     if b"VIDEO" in request.GET:
-        headers.append((b"Content-Type", b"video/ogg"))
-        body = open(os.path.join(request.doc_root, u"media", u"movie_5.ogv"), "rb").read()
+        if b"mp4" in request.GET:
+          headers.append((b"Content-Type", b"video/mp4"))
+          body = open(os.path.join(request.doc_root, u"media", u"movie_5.mp4"), "rb").read()
+        else:
+          headers.append((b"Content-Type", b"video/ogg"))
+          body = open(os.path.join(request.doc_root, u"media", u"movie_5.ogv"), "rb").read()
+
         length = len(body)
         # If "PartialContent" is specified, the requestor wants to test range
         # requests. For the initial request, respond with "206 Partial Content"
diff --git a/test/wpt/tests/service-workers/service-worker/resources/missing.asis b/test/wpt/tests/service-workers/service-worker/resources/missing.asis
new file mode 100644
index 00000000000..4846fe01d61
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/resources/missing.asis
@@ -0,0 +1,4 @@
+HTTP/1.1 404 Not Found
+Content-Type: text/javascript
+
+alert("hello");
diff --git a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-credentialless-frame.html b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-credentialless-frame.html
index ff24bf3670c..25ddf601457 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-credentialless-frame.html
+++ b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-credentialless-frame.html
@@ -21,6 +21,9 @@
   document.cookie = '__Host-partitioned=123; Secure; Path=/; SameSite=None; Partitioned;';
   assert_true(document.cookie.includes('__Host-partitioned=123'));
 
+  // Make sure DOM cannot access the unpartitioned cookie.
+  assert_false(document.cookie.includes('unpartitioned=456'));
+
   const reg = await service_worker_unregister_and_register(t, script, scope);
   await wait_for_state(t, reg.installing, 'activated');
 
@@ -50,7 +53,44 @@
   await wait_promise;
   assert_true(got.ok, 'Message passing');
 
-  // Test that the partitioned cookie is available to this worker.
+  // Test that the partitioned cookie is available to this worker via CookieStore API.
+  wait_promise = new Promise(resolve => {
+    resolve_wait_promise = resolve;
+  });
+  on_message = ev => {
+    got = ev.data;
+    resolve_wait_promise();
+  };
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_js'});
+  await wait_promise;
+  assert_true(got.ok, 'Get cookies');
+  assert_true(
+      got.cookies.includes('__Host-partitioned'),
+      'Credentialless frame worker can access partitioned cookie via JS');
+  assert_false(
+      got.cookies.includes('unpartitioned'),
+      'Credentialless frame worker cannot access unpartitioned cookie via JS');
+
+  // Test that the partitioned cookie is available to this worker via HTTP.
+  wait_promise = new Promise(resolve => {
+    resolve_wait_promise = resolve;
+  });
+  on_message = ev => {
+    got = ev.data;
+    resolve_wait_promise();
+  };
+  filtered_registrations[0].active.postMessage({ type: 'echo_cookies_http' });
+  await wait_promise;
+  assert_true(got.ok, 'Get cookies');
+  assert_true(
+      got.cookies.includes('__Host-partitioned'),
+      'Credentialless frame worker can access partitioned cookie via HTTP');
+  assert_false(
+      got.cookies.includes('unpartitioned'),
+      'Credentialless frame worker cannot access unpartitioned cookie via HTTP');
+
+  // Test that the partitioned cookie is not available to this worker in HTTP
+  // requests from importScripts.
   wait_promise = new Promise(resolve => {
     resolve_wait_promise = resolve;
   });
@@ -58,12 +98,17 @@
     got = ev.data;
     resolve_wait_promise();
   };
-  filtered_registrations[0].active.postMessage({type: 'echo_cookies'});
+  filtered_registrations[0].active.postMessage({ type: 'echo_cookies_import' });
   await wait_promise;
   assert_true(got.ok, 'Get cookies');
-  assert_true(got.cookies.includes('__Host-partitioned'), 'Can access partitioned cookie');;
+  assert_true(
+      got.cookies.includes('__Host-partitioned'),
+      'Credentialless frame worker can access partitioned cookie via importScripts');
+  assert_false(
+      got.cookies.includes('unpartitioned'),
+      'Credentialless frame worker cannot access unpartitioned cookie via importScripts');
 });
 
 </script>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-frame.html b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-frame.html
index d3962d2e600..00b3412c41f 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-frame.html
+++ b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-frame.html
@@ -16,6 +16,7 @@
   const absolute_scope = new URL(scope, window.location).href;
 
   assert_false(document.cookie.includes('__Host-partitioned=123'), 'DOM cannot access partitioned cookie');
+  assert_true(document.cookie.includes('unpartitioned=456'), 'DOM can access unpartitioned cookie');
 
   const reg = await service_worker_unregister_and_register(t, script, scope);
   await wait_for_state(t, reg.installing, 'activated');
@@ -46,7 +47,7 @@
   await wait_promise;
   assert_true(got.ok, 'Message passing');
 
-  // Test that the partitioned cookie is not available to this worker.
+  // Test that the partitioned cookie is not available to this worker via HTTP.
   wait_promise = new Promise(resolve => {
     resolve_wait_promise = resolve;
   });
@@ -54,14 +55,54 @@
     got = ev.data;
     resolve_wait_promise();
   };
-  filtered_registrations[0].active.postMessage({type: 'echo_cookies'});
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_http'});
   await wait_promise;
   assert_true(got.ok, 'Get cookies');
   assert_false(
       got.cookies.includes('__Host-partitioned'),
-      'Worker cannot access partitioned cookie');
+      'Worker cannot access partitioned cookie via HTTP');
+  assert_true(
+      got.cookies.includes('unpartitioned'),
+      'Worker can access unpartitioned cookie via HTTP');
+
+  // Test that the partitioned cookie is not available to this worker via CookieStore API.
+  wait_promise = new Promise(resolve => {
+    resolve_wait_promise = resolve;
+  });
+  on_message = ev => {
+    got = ev.data;
+    resolve_wait_promise();
+  };
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_js'});
+  await wait_promise;
+  assert_true(got.ok, 'Get cookies');
+  assert_false(
+      got.cookies.includes('__Host-partitioned'),
+      'Worker cannot access partitioned cookie via JS');
+  assert_true(
+      got.cookies.includes('unpartitioned'),
+      'Worker can access unpartitioned cookie via JS');
+
+  // Test that the partitioned cookie is not available to this worker in HTTP
+  // requests from importScripts.
+  wait_promise = new Promise(resolve => {
+    resolve_wait_promise = resolve;
+  });
+  on_message = ev => {
+    got = ev.data;
+    resolve_wait_promise();
+  };
+  filtered_registrations[0].active.postMessage({type: 'echo_cookies_import'});
+  await wait_promise;
+  assert_true(got.ok, 'Get cookies');
+  assert_false(
+      got.cookies.includes('__Host-partitioned'),
+      'Worker cannot access partitioned cookie via importScripts');
+  assert_true(
+      got.cookies.includes('unpartitioned'),
+      'Worker can access unpartitioned cookie via importScripts');
 });
 
 </script>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-sw.js b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-sw.js
index 2f54a984b19..767dbf44327 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-sw.js
+++ b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-sw.js
@@ -6,8 +6,12 @@ async function onMessage(event) {
   switch (event.data.type) {
     case 'test_message':
       return onTestMessage(event);
-    case 'echo_cookies':
-      return onEchoCookies(event);
+    case 'echo_cookies_http':
+      return onEchoCookiesHttp(event);
+    case 'echo_cookies_js':
+      return onEchoCookiesJs(event);
+    case 'echo_cookies_import':
+      return onEchoCookiesImport(event);
     default:
       return;
   }
@@ -18,8 +22,19 @@ async function onTestMessage(event) {
   event.source.postMessage({ok: true});
 }
 
+async function onEchoCookiesHttp(event) {
+  try {
+    const resp = await fetch(
+        `${self.origin}/cookies/resources/list.py`, {credentials: 'include'});
+    const cookies = await resp.json();
+    event.source.postMessage({ok: true, cookies: Object.keys(cookies)});
+  } catch (err) {
+    event.source.postMessage({ok: false});
+  }
+}
+
 // echo_cookies returns the names of all of the cookies available to the worker.
-async function onEchoCookies(event) {
+async function onEchoCookiesJs(event) {
   try {
     const cookie_objects = await self.cookieStore.getAll();
     const cookies = cookie_objects.map(c => c.name);
@@ -28,3 +43,11 @@ async function onEchoCookies(event) {
     event.source.postMessage({ok: false});
   }
 }
+
+// Sets `self._cookies` variable, array of the names of cookies available to
+// the request.
+importScripts(`${self.origin}/cookies/resources/list-cookies-for-script.py`);
+
+function onEchoCookiesImport(event) {
+  event.source.postMessage({ok: true, cookies: self._cookies});
+}
diff --git a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-window.html b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-window.html
index 8e90609da22..40d38b3f79f 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-window.html
+++ b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-3p-window.html
@@ -19,7 +19,7 @@
       './partitioned-cookies-3p-frame.html',
       first_party_origin + location.pathname).href;
   document.body.appendChild(iframe);
-  fetch_tests_from_window(iframe.contentWindow);
+  await fetch_tests_from_window(iframe.contentWindow);
 
   const credentialless_frame = document.createElement('iframe');
   credentialless_frame.credentialless = true;
@@ -27,7 +27,7 @@
       './partitioned-cookies-3p-credentialless-frame.html',
       first_party_origin + location.pathname).href;
   document.body.appendChild(credentialless_frame);
-  fetch_tests_from_window(credentialless_frame.contentWindow);
+  await fetch_tests_from_window(credentialless_frame.contentWindow);
 });
 
 </script>
diff --git a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-sw.js b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-sw.js
index 2f54a984b19..767dbf44327 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-sw.js
+++ b/test/wpt/tests/service-workers/service-worker/resources/partitioned-cookies-sw.js
@@ -6,8 +6,12 @@ async function onMessage(event) {
   switch (event.data.type) {
     case 'test_message':
       return onTestMessage(event);
-    case 'echo_cookies':
-      return onEchoCookies(event);
+    case 'echo_cookies_http':
+      return onEchoCookiesHttp(event);
+    case 'echo_cookies_js':
+      return onEchoCookiesJs(event);
+    case 'echo_cookies_import':
+      return onEchoCookiesImport(event);
     default:
       return;
   }
@@ -18,8 +22,19 @@ async function onTestMessage(event) {
   event.source.postMessage({ok: true});
 }
 
+async function onEchoCookiesHttp(event) {
+  try {
+    const resp = await fetch(
+        `${self.origin}/cookies/resources/list.py`, {credentials: 'include'});
+    const cookies = await resp.json();
+    event.source.postMessage({ok: true, cookies: Object.keys(cookies)});
+  } catch (err) {
+    event.source.postMessage({ok: false});
+  }
+}
+
 // echo_cookies returns the names of all of the cookies available to the worker.
-async function onEchoCookies(event) {
+async function onEchoCookiesJs(event) {
   try {
     const cookie_objects = await self.cookieStore.getAll();
     const cookies = cookie_objects.map(c => c.name);
@@ -28,3 +43,11 @@ async function onEchoCookies(event) {
     event.source.postMessage({ok: false});
   }
 }
+
+// Sets `self._cookies` variable, array of the names of cookies available to
+// the request.
+importScripts(`${self.origin}/cookies/resources/list-cookies-for-script.py`);
+
+function onEchoCookiesImport(event) {
+  event.source.postMessage({ok: true, cookies: self._cookies});
+}
diff --git a/test/wpt/tests/service-workers/service-worker/resources/resource-timing-iframe.sub.html b/test/wpt/tests/service-workers/service-worker/resources/resource-timing-iframe.sub.html
index 384c29b536b..ec4c726331d 100644
--- a/test/wpt/tests/service-workers/service-worker/resources/resource-timing-iframe.sub.html
+++ b/test/wpt/tests/service-workers/service-worker/resources/resource-timing-iframe.sub.html
@@ -5,6 +5,6 @@
 <img src="square.png">
 <img src="https://{{hosts[alt][]}}:{{ports[https][0]}}/service-workers/service-worker/resources/square.png">
 <img src="missing.jpg">
-<img src="https://{{hosts[alt][]}}:{{ports[https][0]}}/service-workers/service-worker/resources/missing.jpg">
+<img src="https://{{hosts[alt][]}}:{{ports[https][0]}}/service-workers/service-worker/resources/missing.asis">
 <img src='missing.jpg?SWRespondsWithFetch'>
 <script src='empty-worker.js'></script>
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/README.md b/test/wpt/tests/service-workers/service-worker/tentative/static-router/README.md
new file mode 100644
index 00000000000..8826b3c7827
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/README.md
@@ -0,0 +1,4 @@
+A test stuite for the ServiceWorker Static Routing API.
+
+WICG proposal: https://github.com/WICG/proposals/issues/102
+Specification PR: https://github.com/w3c/ServiceWorker/pull/1686
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/direct.txt b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/direct.txt
new file mode 100644
index 00000000000..f3d9861c137
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/direct.txt
@@ -0,0 +1 @@
+Network
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple-test-for-condition-main-resource.html b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple-test-for-condition-main-resource.html
new file mode 100644
index 00000000000..0c3e3e78707
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple-test-for-condition-main-resource.html
@@ -0,0 +1,3 @@
+<!DOCTYPE html>
+<title>Simple</title>
+Here's a simple html file.
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple.html b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple.html
new file mode 100644
index 00000000000..0c3e3e78707
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/simple.html
@@ -0,0 +1,3 @@
+<!DOCTYPE html>
+<title>Simple</title>
+Here's a simple html file.
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/static-router-sw.js b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/static-router-sw.js
new file mode 100644
index 00000000000..4655ab5321c
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/static-router-sw.js
@@ -0,0 +1,35 @@
+'use strict';
+
+var requests = [];
+
+self.addEventListener('install', e => {
+  e.registerRouter([
+    {
+      condition: {urlPattern: '/**/*.txt??*'},
+      // Note: "??*" is for allowing arbitrary query strings.
+      // Upon my experiment, the URLPattern needs two '?'s for specifying
+      // a coming string as a query.
+      source: 'network'
+    }, {
+      condition: {
+        urlPattern: '/**/simple-test-for-condition-main-resource.html'},
+      source: 'network'
+    }]);
+  self.skipWaiting();
+});
+
+self.addEventListener('activate', e => {
+  e.waitUntil(clients.claim());
+});
+
+self.addEventListener('fetch', function(event) {
+  requests.push({url: event.request.url, mode: event.request.mode});
+  const url = new URL(event.request.url);
+  const nonce = url.searchParams.get('nonce');
+  event.respondWith(new Response(nonce));
+});
+
+self.addEventListener('message', function(event) {
+  event.data.port.postMessage({requests: requests});
+  requests = [];
+});
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/test-helpers.sub.js b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/test-helpers.sub.js
new file mode 100644
index 00000000000..64a7f7d24fd
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/resources/test-helpers.sub.js
@@ -0,0 +1,303 @@
+// Copied from
+// service-workers/service-worker/resources/testharness-helpers.js to be used under tentative.
+
+// Adapter for testharness.js-style tests with Service Workers
+
+/**
+ * @param options an object that represents RegistrationOptions except for scope.
+ * @param options.type a WorkerType.
+ * @param options.updateViaCache a ServiceWorkerUpdateViaCache.
+ * @see https://w3c.github.io/ServiceWorker/#dictdef-registrationoptions
+ */
+function service_worker_unregister_and_register(test, url, scope, options) {
+  if (!scope || scope.length == 0)
+    return Promise.reject(new Error('tests must define a scope'));
+
+  if (options && options.scope)
+    return Promise.reject(new Error('scope must not be passed in options'));
+
+  options = Object.assign({ scope: scope }, options);
+  return service_worker_unregister(test, scope)
+    .then(function() {
+        return navigator.serviceWorker.register(url, options);
+      })
+    .catch(unreached_rejection(test,
+                               'unregister and register should not fail'));
+}
+
+// This unregisters the registration that precisely matches scope. Use this
+// when unregistering by scope. If no registration is found, it just resolves.
+function service_worker_unregister(test, scope) {
+  var absoluteScope = (new URL(scope, window.location).href);
+  return navigator.serviceWorker.getRegistration(scope)
+    .then(function(registration) {
+        if (registration && registration.scope === absoluteScope)
+          return registration.unregister();
+      })
+    .catch(unreached_rejection(test, 'unregister should not fail'));
+}
+
+function service_worker_unregister_and_done(test, scope) {
+  return service_worker_unregister(test, scope)
+    .then(test.done.bind(test));
+}
+
+function unreached_fulfillment(test, prefix) {
+  return test.step_func(function(result) {
+      var error_prefix = prefix || 'unexpected fulfillment';
+      assert_unreached(error_prefix + ': ' + result);
+    });
+}
+
+// Rejection-specific helper that provides more details
+function unreached_rejection(test, prefix) {
+  return test.step_func(function(error) {
+      var reason = error.message || error.name || error;
+      var error_prefix = prefix || 'unexpected rejection';
+      assert_unreached(error_prefix + ': ' + reason);
+    });
+}
+
+/**
+ * Adds an iframe to the document and returns a promise that resolves to the
+ * iframe when it finishes loading. The caller is responsible for removing the
+ * iframe later if needed.
+ *
+ * @param {string} url
+ * @returns {HTMLIFrameElement}
+ */
+function with_iframe(url) {
+  return new Promise(function(resolve) {
+      var frame = document.createElement('iframe');
+      frame.className = 'test-iframe';
+      frame.src = url;
+      frame.onload = function() { resolve(frame); };
+      document.body.appendChild(frame);
+    });
+}
+
+function normalizeURL(url) {
+  return new URL(url, self.location).toString().replace(/#.*$/, '');
+}
+
+function wait_for_update(test, registration) {
+  if (!registration || registration.unregister == undefined) {
+    return Promise.reject(new Error(
+      'wait_for_update must be passed a ServiceWorkerRegistration'));
+  }
+
+  return new Promise(test.step_func(function(resolve) {
+      var handler = test.step_func(function() {
+        registration.removeEventListener('updatefound', handler);
+        resolve(registration.installing);
+      });
+      registration.addEventListener('updatefound', handler);
+    }));
+}
+
+// Return true if |state_a| is more advanced than |state_b|.
+function is_state_advanced(state_a, state_b) {
+  if (state_b === 'installing') {
+    switch (state_a) {
+      case 'installed':
+      case 'activating':
+      case 'activated':
+      case 'redundant':
+        return true;
+    }
+  }
+
+  if (state_b === 'installed') {
+    switch (state_a) {
+      case 'activating':
+      case 'activated':
+      case 'redundant':
+        return true;
+    }
+  }
+
+  if (state_b === 'activating') {
+    switch (state_a) {
+      case 'activated':
+      case 'redundant':
+        return true;
+    }
+  }
+
+  if (state_b === 'activated') {
+    switch (state_a) {
+      case 'redundant':
+        return true;
+    }
+  }
+  return false;
+}
+
+function wait_for_state(test, worker, state) {
+  if (!worker || worker.state == undefined) {
+    return Promise.reject(new Error(
+      'wait_for_state needs a ServiceWorker object to be passed.'));
+  }
+  if (worker.state === state)
+    return Promise.resolve(state);
+
+  if (is_state_advanced(worker.state, state)) {
+    return Promise.reject(new Error(
+      `Waiting for ${state} but the worker is already ${worker.state}.`));
+  }
+  return new Promise(test.step_func(function(resolve, reject) {
+      worker.addEventListener('statechange', test.step_func(function() {
+          if (worker.state === state)
+            resolve(state);
+
+          if (is_state_advanced(worker.state, state)) {
+            reject(new Error(
+              `The state of the worker becomes ${worker.state} while waiting` +
+                `for ${state}.`));
+          }
+        }));
+    }));
+}
+
+// Declare a test that runs entirely in the ServiceWorkerGlobalScope. The |url|
+// is the service worker script URL. This function:
+// - Instantiates a new test with the description specified in |description|.
+//   The test will succeed if the specified service worker can be successfully
+//   registered and installed.
+// - Creates a new ServiceWorker registration with a scope unique to the current
+//   document URL. Note that this doesn't allow more than one
+//   service_worker_test() to be run from the same document.
+// - Waits for the new worker to begin installing.
+// - Imports tests results from tests running inside the ServiceWorker.
+function service_worker_test(url, description) {
+  // If the document URL is https://example.com/document and the script URL is
+  // https://example.com/script/worker.js, then the scope would be
+  // https://example.com/script/scope/document.
+  var scope = new URL('scope' + window.location.pathname,
+                      new URL(url, window.location)).toString();
+  promise_test(function(test) {
+      return service_worker_unregister_and_register(test, url, scope)
+        .then(function(registration) {
+            add_completion_callback(function() {
+                registration.unregister();
+              });
+            return wait_for_update(test, registration)
+              .then(function(worker) {
+                  return fetch_tests_from_worker(worker);
+                });
+          });
+    }, description);
+}
+
+function base_path() {
+  return location.pathname.replace(/\/[^\/]*$/, '/');
+}
+
+function test_login(test, origin, username, password, cookie) {
+  return new Promise(function(resolve, reject) {
+      with_iframe(
+        origin + base_path() +
+        'resources/fetch-access-control-login.html')
+        .then(test.step_func(function(frame) {
+            var channel = new MessageChannel();
+            channel.port1.onmessage = test.step_func(function() {
+                frame.remove();
+                resolve();
+              });
+            frame.contentWindow.postMessage(
+              {username: username, password: password, cookie: cookie},
+              origin, [channel.port2]);
+          }));
+    });
+}
+
+function test_websocket(test, frame, url) {
+  return new Promise(function(resolve, reject) {
+      var ws = new frame.contentWindow.WebSocket(url, ['echo', 'chat']);
+      var openCalled = false;
+      ws.addEventListener('open', test.step_func(function(e) {
+          assert_equals(ws.readyState, 1, "The WebSocket should be open");
+          openCalled = true;
+          ws.close();
+        }), true);
+
+      ws.addEventListener('close', test.step_func(function(e) {
+          assert_true(openCalled, "The WebSocket should be closed after being opened");
+          resolve();
+        }), true);
+
+      ws.addEventListener('error', reject);
+    });
+}
+
+function login_https(test) {
+  var host_info = get_host_info();
+  return test_login(test, host_info.HTTPS_REMOTE_ORIGIN,
+                    'username1s', 'password1s', 'cookie1')
+    .then(function() {
+        return test_login(test, host_info.HTTPS_ORIGIN,
+                          'username2s', 'password2s', 'cookie2');
+      });
+}
+
+function websocket(test, frame) {
+  return test_websocket(test, frame, get_websocket_url());
+}
+
+function get_websocket_url() {
+  return 'wss://{{host}}:{{ports[wss][0]}}/echo';
+}
+
+// The navigator.serviceWorker.register() method guarantees that the newly
+// installing worker is available as registration.installing when its promise
+// resolves. However some tests test installation using a <link> element where
+// it is possible for the installing worker to have already become the waiting
+// or active worker. So this method is used to get the newest worker when these
+// tests need access to the ServiceWorker itself.
+function get_newest_worker(registration) {
+  if (registration.installing)
+    return registration.installing;
+  if (registration.waiting)
+    return registration.waiting;
+  if (registration.active)
+    return registration.active;
+}
+
+function register_using_link(script, options) {
+  var scope = options.scope;
+  var link = document.createElement('link');
+  link.setAttribute('rel', 'serviceworker');
+  link.setAttribute('href', script);
+  link.setAttribute('scope', scope);
+  document.getElementsByTagName('head')[0].appendChild(link);
+  return new Promise(function(resolve, reject) {
+        link.onload = resolve;
+        link.onerror = reject;
+      })
+    .then(() => navigator.serviceWorker.getRegistration(scope));
+}
+
+function with_sandboxed_iframe(url, sandbox) {
+  return new Promise(function(resolve) {
+      var frame = document.createElement('iframe');
+      frame.sandbox = sandbox;
+      frame.src = url;
+      frame.onload = function() { resolve(frame); };
+      document.body.appendChild(frame);
+    });
+}
+
+// Registers, waits for activation, then unregisters on a sample scope.
+//
+// This can be used to wait for a period of time needed to register,
+// activate, and then unregister a service worker.  When checking that
+// certain behavior does *NOT* happen, this is preferable to using an
+// arbitrary delay.
+async function wait_for_activation_on_sample_scope(t, window_or_workerglobalscope) {
+  const script = '/service-workers/service-worker/resources/empty-worker.js';
+  const scope = 'resources/there/is/no/there/there?' + Date.now();
+  let registration = await window_or_workerglobalscope.navigator.serviceWorker.register(script, { scope });
+  await wait_for_state(t, registration.installing, 'activated');
+  await registration.unregister();
+}
+
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-main-resource.https.html b/test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-main-resource.https.html
new file mode 100644
index 00000000000..5a55783af57
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-main-resource.https.html
@@ -0,0 +1,58 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<title>Static Router: simply skip fetch handler for main resource if pattern matches</title>
+<script src="/common/get-host-info.sub.js"></script>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="resources/test-helpers.sub.js"></script>
+<body>
+<script>
+const SCRIPT = 'resources/static-router-sw.js';
+const SCOPE = 'resources/';
+const REGISTERED_ROUTE_HTML =
+  'resources/simple-test-for-condition-main-resource.html';
+const NON_REGISTERED_ROUTE_HTML = 'resources/simple.html';
+const host_info = get_host_info();
+const path = new URL(".", window.location).pathname;
+
+// Register a service worker, then create an iframe at url.
+function iframeTest(url, callback, name) {
+  return promise_test(async t => {
+    const reg = await service_worker_unregister_and_register(t, SCRIPT, SCOPE);
+    add_completion_callback(() => reg.unregister());
+    const worker = reg.installing;
+    await wait_for_state(t, worker, 'activated');
+    const iframe = await with_iframe(url);
+    const iwin = iframe.contentWindow;
+    t.add_cleanup(() => iframe.remove());
+    await callback(t, iwin, worker);
+  }, name);
+}
+
+function get_fetched_urls(worker) {
+  return new Promise(function(resolve) {
+      var channel = new MessageChannel();
+      channel.port1.onmessage = function(msg) { resolve(msg); };
+      worker.postMessage({port: channel.port2}, [channel.port2]);
+    });
+}
+
+iframeTest(REGISTERED_ROUTE_HTML, async (t, iwin, worker) => {
+  const fetched_urls = await get_fetched_urls(worker);
+  const {requests} = fetched_urls.data;
+  assert_equals(requests.length, 0);
+  assert_equals(iwin.document.body.innerText, "Here's a simple html file.");
+}, 'Main resource load matched with the condition');
+
+iframeTest(NON_REGISTERED_ROUTE_HTML, async (t, iwin, worker) => {
+  const fetched_urls = await get_fetched_urls(worker);
+  const {requests} = fetched_urls.data;
+  assert_equals(requests.length, 1);
+  assert_equals(
+    requests[0].url,
+    `${host_info['HTTPS_ORIGIN']}${path}${NON_REGISTERED_ROUTE_HTML}`);
+  assert_equals(requests[0].mode, 'navigate');
+}, 'Main resource load not matched with the condition');
+
+</script>
+</body>
diff --git a/test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-subresource.https.html b/test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-subresource.https.html
new file mode 100644
index 00000000000..721c2797603
--- /dev/null
+++ b/test/wpt/tests/service-workers/service-worker/tentative/static-router/static-router-subresource.https.html
@@ -0,0 +1,48 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<title>Static Router: simply skip fetch handler if pattern matches</title>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="resources/test-helpers.sub.js"></script>
+<body>
+<script>
+const SCRIPT = 'resources/static-router-sw.js';
+const SCOPE = 'resources/';
+const HTML_FILE = 'resources/simple.html';
+const TXT_FILE = 'resources/direct.txt';
+
+// Register a service worker, then create an iframe at url.
+function iframeTest(url, callback, name) {
+  return promise_test(async t => {
+    const reg = await service_worker_unregister_and_register(t, SCRIPT, SCOPE);
+    add_completion_callback(() => reg.unregister());
+    await wait_for_state(t, reg.installing, 'activated');
+    const iframe = await with_iframe(url);
+    const iwin = iframe.contentWindow;
+    t.add_cleanup(() => iframe.remove());
+    await callback(t, iwin);
+  }, name);
+}
+
+function randomString() {
+  let result = "";
+  for (let i = 0; i < 5; i++) {
+    result += String.fromCharCode(97 + Math.floor(Math.random() * 26));
+  }
+  return result;
+}
+
+iframeTest(HTML_FILE, async (t, iwin) => {
+  const rnd = randomString();
+  const response = await iwin.fetch('?nonce=' + rnd);
+  assert_equals(await response.text(), rnd);
+}, 'Subresource load not matched with the condition');
+
+iframeTest(TXT_FILE, async (t, iwin) => {
+  const rnd = randomString();
+  const response = await iwin.fetch('?nonce=' + rnd);
+  assert_equals(await response.text(), "Network\n");
+}, 'Subresource load matched with the condition');
+
+</script>
+</body>
diff --git a/test/wpt/tests/storage/buckets/bucket-quota-indexeddb.tentative.https.any.js b/test/wpt/tests/storage/buckets/bucket-quota-indexeddb.tentative.https.any.js
new file mode 100644
index 00000000000..ba82edb72ec
--- /dev/null
+++ b/test/wpt/tests/storage/buckets/bucket-quota-indexeddb.tentative.https.any.js
@@ -0,0 +1,35 @@
+// META: title=Bucket quota enforcement for indexeddb
+// META: script=/storage/buckets/resources/util.js
+
+promise_test(async t => {
+  const arraySize = 1e6;
+  const objectStoreName = "storageManager";
+  const dbname =
+      this.window ? window.location.pathname : 'estimate-worker.https.html';
+
+  let quota = arraySize / 2;
+  const bucket = await navigator.storageBuckets.open('idb', {quota});
+
+  await indexedDbDeleteRequest(bucket.indexedDB, dbname);
+
+  const db =
+      await indexedDbOpenRequest(t, bucket.indexedDB, dbname, (db_to_upgrade) => {
+        db_to_upgrade.createObjectStore(objectStoreName);
+      });
+
+  const txn = db.transaction(objectStoreName, 'readwrite');
+  const buffer = new ArrayBuffer(arraySize);
+  const view = new Uint8Array(buffer);
+
+  for (let i = 0; i < arraySize; i++) {
+    view[i] = Math.floor(Math.random() * 255);
+  }
+
+  const testBlob = new Blob([buffer], {type: 'binary/random'});
+  txn.objectStore(objectStoreName).add(testBlob, 1);
+
+  await promise_rejects_dom(
+      t, 'QuotaExceededError', transactionPromise(txn));
+
+  db.close();
+}, 'IDB respects bucket quota');
diff --git a/test/wpt/tests/storage/buckets/bucket-storage-policy.tentative.https.any.js b/test/wpt/tests/storage/buckets/bucket-storage-policy.tentative.https.any.js
new file mode 100644
index 00000000000..d6dce3675d0
--- /dev/null
+++ b/test/wpt/tests/storage/buckets/bucket-storage-policy.tentative.https.any.js
@@ -0,0 +1,21 @@
+// META: title=Buckets API: Tests for bucket storage policies.
+// META: script=/storage/buckets/resources/util.js
+// META: global=window,worker
+
+'use strict';
+
+promise_test(async testCase => {
+  await prepareForBucketTest(testCase);
+
+  await promise_rejects_js(
+      testCase, TypeError,
+      navigator.storageBuckets.open('negative', {quota: -1}));
+
+  await promise_rejects_js(
+      testCase, TypeError, navigator.storageBuckets.open('zero', {quota: 0}));
+
+  await promise_rejects_js(
+      testCase, TypeError,
+      navigator.storageBuckets.open(
+          'above_max', {quota: Number.MAX_SAFE_INTEGER + 1}));
+}, 'The open promise should reject with a TypeError when quota is requested outside the range of 1 to Number.MAX_SAFE_INTEGER.');
diff --git a/test/wpt/tests/storage/buckets/buckets_storage_policy.tentative.https.any.js b/test/wpt/tests/storage/buckets/buckets_storage_policy.tentative.https.any.js
deleted file mode 100644
index a66fd81cd43..00000000000
--- a/test/wpt/tests/storage/buckets/buckets_storage_policy.tentative.https.any.js
+++ /dev/null
@@ -1,46 +0,0 @@
-// META: title=Buckets API: Tests for bucket storage policies.
-// META: script=/storage/buckets/resources/util.js
-// META: global=window,worker
-
-'use strict';
-
-promise_test(async testCase => {
-  await prepareForBucketTest(testCase);
-
-  await promise_rejects_js(
-      testCase, TypeError,
-      navigator.storageBuckets.open('negative', {quota: -1}));
-
-  await promise_rejects_js(
-      testCase, TypeError, navigator.storageBuckets.open('zero', {quota: 0}));
-
-  await promise_rejects_js(
-      testCase, TypeError,
-      navigator.storageBuckets.open(
-          'above_max', {quota: Number.MAX_SAFE_INTEGER + 1}));
-}, 'The open promise should reject with a TypeError when quota is requested outside the range of 1 to Number.MAX_SAFE_INTEGER.');
-
-
-promise_test(async testCase => {
-  await prepareForBucketTest(testCase);
-
-  // IndexedDB
-  {
-    const quota = 1;
-    const bucket = await navigator.storageBuckets.open('idb', {quota});
-
-    const objectStoreName = 'store';
-    const db = await indexedDbOpenRequest(
-        testCase, bucket.indexedDB, 'db', (db_to_upgrade) => {
-          db_to_upgrade.createObjectStore(objectStoreName);
-        });
-
-    const overflowBuffer = new Uint8Array(quota + 1);
-
-    const txn = db.transaction(objectStoreName, 'readwrite');
-    txn.objectStore(objectStoreName).add('', overflowBuffer);
-
-    await promise_rejects_dom(
-        testCase, 'QuotaExceededError', transactionPromise(txn));
-  }
-}, 'A QuotaExceededError is thrown when a storage API exceeds the quota of the bucket its in.');
diff --git a/test/wpt/tests/storage/storagemanager-persist-persisted-match.https.any.js b/test/wpt/tests/storage/storagemanager-persist-persisted-match.https.any.js
new file mode 100644
index 00000000000..edbe67fae2c
--- /dev/null
+++ b/test/wpt/tests/storage/storagemanager-persist-persisted-match.https.any.js
@@ -0,0 +1,9 @@
+// META: title=StorageManager: result of persist() matches result of persisted()
+
+promise_test(async t => {
+    var persistResult = await navigator.storage.persist();
+    assert_equals(typeof persistResult, 'boolean', persistResult + ' should be boolean');
+    var persistedResult = await navigator.storage.persisted();
+    assert_equals(typeof persistedResult, 'boolean', persistedResult + ' should be boolean');
+    assert_equals(persistResult, persistedResult);
+}, 'navigator.storage.persist() resolves to a value that matches navigator.storage.persisted()');
diff --git a/test/wpt/tests/websockets/back-forward-cache-with-closed-websocket-connection-ccns.tentative.window.js b/test/wpt/tests/websockets/back-forward-cache-with-closed-websocket-connection-ccns.tentative.window.js
index ccc45f2877d..f6ee5edeaa9 100644
--- a/test/wpt/tests/websockets/back-forward-cache-with-closed-websocket-connection-ccns.tentative.window.js
+++ b/test/wpt/tests/websockets/back-forward-cache-with-closed-websocket-connection-ccns.tentative.window.js
@@ -24,11 +24,8 @@ promise_test(async t => {
   // The page should not be eligible for BFCache because of the usage
   // of WebSocket.
   await assertBFCacheEligibility(rc1, /*shouldRestoreFromBFCache=*/ false);
-  // The `BrowsingInstanceNotSwapped` reason will be added because of the
-  // sticky feature, and it will be reported as "Internal error".
   await assertNotRestoredFromBFCache(rc1, [
     'WebSocketSticky',
-    'MainResourceHasCacheControlNoStore',
-    'Internal error'
+    'MainResourceHasCacheControlNoStore'
   ]);
 });
diff --git a/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection-ccns.tentative.window.js b/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection-ccns.tentative.window.js
index 563fd4792ef..f37a04af91a 100644
--- a/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection-ccns.tentative.window.js
+++ b/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection-ccns.tentative.window.js
@@ -24,12 +24,9 @@ promise_test(async t => {
   // The page should not be eligible for BFCache because of the usage
   // of WebSocket.
   await assertBFCacheEligibility(rc1, /*shouldRestoreFromBFCache=*/ false);
-  // The `BrowsingInstanceNotSwapped` reason will be added because of the
-  // sticky feature, and it will be reported as "Internal error".
   await assertNotRestoredFromBFCache(rc1, [
     'WebSocket',
     'WebSocketSticky',
-    'MainResourceHasCacheControlNoStore',
-    'Internal error'
+    'MainResourceHasCacheControlNoStore'
   ]);
 });
diff --git a/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection.window.js b/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection.window.js
index 2baf38f303c..6c48a570101 100644
--- a/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection.window.js
+++ b/test/wpt/tests/websockets/back-forward-cache-with-open-websocket-connection.window.js
@@ -17,5 +17,5 @@ promise_test(async t => {
   await openWebSocket(rc1);
   // The page should not be eligible for BFCache because of open WebSocket connection.
   await assertBFCacheEligibility(rc1, /*shouldRestoreFromBFCache=*/ false);
-  await assertNotRestoredFromBFCache(rc1, ['WebSocket']);
+  await assertNotRestoredFromBFCache(rc1, ['websocket']);
 });
diff --git a/test/wpt/tests/xhr/blob-range.any.js b/test/wpt/tests/xhr/blob-range.any.js
new file mode 100644
index 00000000000..2a5c54fc34f
--- /dev/null
+++ b/test/wpt/tests/xhr/blob-range.any.js
@@ -0,0 +1,246 @@
+// See also /fetch/range/blob.any.js
+
+const supportedBlobRange = [
+  {
+    name: "A simple blob range request.",
+    data: ["A simple Hello, World! example"],
+    type: "text/plain",
+    range: "bytes=9-21",
+    content_length: 13,
+    content_range: "bytes 9-21/30",
+    result: "Hello, World!",
+  },
+  {
+    name: "A blob range request with no type.",
+    data: ["A simple Hello, World! example"],
+    type: undefined,
+    range: "bytes=9-21",
+    content_length: 13,
+    content_range: "bytes 9-21/30",
+    result: "Hello, World!",
+  },
+  {
+    name: "A blob range request with no end.",
+    data: ["Range with no end"],
+    type: "text/plain",
+    range: "bytes=11-",
+    content_length: 6,
+    content_range: "bytes 11-16/17",
+    result: "no end",
+  },
+  {
+    name: "A blob range request with no start.",
+    data: ["Range with no start"],
+    type: "text/plain",
+    range: "bytes=-8",
+    content_length: 8,
+    content_range: "bytes 11-18/19",
+    result: "no start",
+  },
+  {
+    name: "A simple blob range request with whitespace.",
+    data: ["A simple Hello, World! example"],
+    type: "text/plain",
+    range: "bytes= \t9-21",
+    content_length: 13,
+    content_range: "bytes 9-21/30",
+    result: "Hello, World!",
+  },
+  {
+    name: "Blob content with short content and a large range end",
+    data: ["Not much here"],
+    type: "text/plain",
+    range: "bytes=4-100000000000",
+    content_length: 9,
+    content_range: "bytes 4-12/13",
+    result: "much here",
+  },
+  {
+    name: "Blob content with short content and a range end matching content length",
+    data: ["Not much here"],
+    type: "text/plain",
+    range: "bytes=4-13",
+    content_length: 9,
+    content_range: "bytes 4-12/13",
+    result: "much here",
+  },
+  {
+    name: "Blob range with whitespace before and after hyphen",
+    data: ["Valid whitespace #1"],
+    type: "text/plain",
+    range: "bytes=5 - 10",
+    content_length: 6,
+    content_range: "bytes 5-10/19",
+    result: " white",
+  },
+  {
+    name: "Blob range with whitespace after hyphen",
+    data: ["Valid whitespace #2"],
+    type: "text/plain",
+    range: "bytes=-\t 5",
+    content_length: 5,
+    content_range: "bytes 14-18/19",
+    result: "ce #2",
+  },
+  {
+    name: "Blob range with whitespace around equals sign",
+    data: ["Valid whitespace #3"],
+    type: "text/plain",
+    range: "bytes \t =\t 6-",
+    content_length: 13,
+    content_range: "bytes 6-18/19",
+    result: "whitespace #3",
+  },
+];
+
+const unsupportedBlobRange = [
+  {
+    name: "Blob range with no value",
+    data: ["Blob range should have a value"],
+    type: "text/plain",
+    range: "",
+  },
+  {
+    name: "Blob range with incorrect range header",
+    data: ["A"],
+    type: "text/plain",
+    range: "byte=0-"
+  },
+  {
+    name: "Blob range with incorrect range header #2",
+    data: ["A"],
+    type: "text/plain",
+    range: "bytes"
+  },
+  {
+    name: "Blob range with incorrect range header #3",
+    data: ["A"],
+    type: "text/plain",
+    range: "bytes\t \t"
+  },
+  {
+    name: "Blob range request with multiple range values",
+    data: ["Multiple ranges are not currently supported"],
+    type: "text/plain",
+    range: "bytes=0-5,15-",
+  },
+  {
+    name: "Blob range request with multiple range values and whitespace",
+    data: ["Multiple ranges are not currently supported"],
+    type: "text/plain",
+    range: "bytes=0-5, 15-",
+  },
+  {
+    name: "Blob range request with trailing comma",
+    data: ["Range with invalid trailing comma"],
+    type: "text/plain",
+    range: "bytes=0-5,",
+  },
+  {
+    name: "Blob range with no start or end",
+    data: ["Range with no start or end"],
+    type: "text/plain",
+    range: "bytes=-",
+  },
+  {
+    name: "Blob range request with short range end",
+    data: ["Range end should be greater than range start"],
+    type: "text/plain",
+    range: "bytes=10-5",
+  },
+  {
+    name: "Blob range start should be an ASCII digit",
+    data: ["Range start must be an ASCII digit"],
+    type: "text/plain",
+    range: "bytes=x-5",
+  },
+  {
+    name: "Blob range should have a dash",
+    data: ["Blob range should have a dash"],
+    type: "text/plain",
+    range: "bytes=5",
+  },
+  {
+    name: "Blob range end should be an ASCII digit",
+    data: ["Range end must be an ASCII digit"],
+    type: "text/plain",
+    range: "bytes=5-x",
+  },
+  {
+    name: "Blob range should include '-'",
+    data: ["Range end must include '-'"],
+    type: "text/plain",
+    range: "bytes=x",
+  },
+  {
+    name: "Blob range should include '='",
+    data: ["Range end must include '='"],
+    type: "text/plain",
+    range: "bytes 5-",
+  },
+  {
+    name: "Blob range should include 'bytes='",
+    data: ["Range end must include 'bytes='"],
+    type: "text/plain",
+    range: "5-",
+  },
+  {
+    name: "Blob content with short content and a large range start",
+    data: ["Not much here"],
+    type: "text/plain",
+    range: "bytes=100000-",
+  },
+  {
+    name: "Blob content with short content and a range start matching the content length",
+    data: ["Not much here"],
+    type: "text/plain",
+    range: "bytes=13-",
+  },
+];
+
+supportedBlobRange.forEach(({ name, data, type, range, content_length, content_range, result }) => {
+  promise_test(async t => {
+    const blob = new Blob(data, { "type" : type });
+    const blobURL = URL.createObjectURL(blob);
+    t.add_cleanup(() => URL.revokeObjectURL(blobURL));
+    const xhr = new XMLHttpRequest();
+    xhr.open("GET", blobURL);
+    xhr.responseType = "text";
+    xhr.setRequestHeader("Range", range);
+    await new Promise(resolve => {
+      xhr.onloadend = resolve;
+      xhr.send();
+    });
+    assert_equals(xhr.status, 206, "HTTP status is 206");
+    assert_equals(xhr.getResponseHeader("Content-Type"), type || "", "Content-Type is " + xhr.getResponseHeader("Content-Type"));
+    assert_equals(xhr.getResponseHeader("Content-Length"), content_length.toString(), "Content-Length is " + xhr.getResponseHeader("Content-Length"));
+    assert_equals(xhr.getResponseHeader("Content-Range"), content_range, "Content-Range is " + xhr.getResponseHeader("Content-Range"));
+    assert_equals(xhr.responseText, result, "Response's body is correct");
+    const all = xhr.getAllResponseHeaders().toLowerCase();
+    assert_true(all.includes(`content-type: ${type || ""}`), "Expected Content-Type in getAllResponseHeaders()");
+    assert_true(all.includes(`content-length: ${content_length}`), "Expected Content-Length in getAllResponseHeaders()");
+    assert_true(all.includes(`content-range: ${content_range}`), "Expected Content-Range in getAllResponseHeaders()")
+  }, name);
+});
+
+unsupportedBlobRange.forEach(({ name, data, type, range }) => {
+  promise_test(t => {
+    const blob = new Blob(data, { "type" : type });
+    const blobURL = URL.createObjectURL(blob);
+    t.add_cleanup(() => URL.revokeObjectURL(blobURL));
+
+    const xhr = new XMLHttpRequest();
+    xhr.open("GET", blobURL, false);
+    xhr.setRequestHeader("Range", range);
+    assert_throws_dom("NetworkError", () => xhr.send());
+
+    xhr.open("GET", blobURL);
+    xhr.setRequestHeader("Range", range);
+    xhr.responseType = "text";
+    return new Promise((resolve, reject) => {
+      xhr.onload = reject;
+      xhr.onerror = resolve;
+      xhr.send();
+    });
+  }, name);
+});
diff --git a/test/wpt/tests/xhr/responsexml-invalid-type.html b/test/wpt/tests/xhr/responsexml-invalid-type.html
new file mode 100644
index 00000000000..57ba462551f
--- /dev/null
+++ b/test/wpt/tests/xhr/responsexml-invalid-type.html
@@ -0,0 +1,21 @@
+<!doctype html>
+<html>
+<head>
+<title>XMLHttpRequest: response with an invalid responseXML document</title>
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+</head>
+<body>
+<script>
+promise_test(async () => {
+  var xhr = new XMLHttpRequest();
+  xhr.responseType = "document";
+  xhr.open("GET", "resources/top.txt");
+  xhr.send();
+  await new Promise(r => xhr.onreadystatechange = () => { if (xhr.readyState == xhr.DONE) r(); });
+  assert_equals(xhr.responseXML, null);
+  assert_equals(xhr.response, null);
+});
+</script>
+</body>
+</html>
diff --git a/test/wpt/tests/xhr/send-authentication-basic-cors-not-enabled.htm b/test/wpt/tests/xhr/send-authentication-basic-cors-not-enabled.htm
index 2e7cbaf0340..41201960cc3 100644
--- a/test/wpt/tests/xhr/send-authentication-basic-cors-not-enabled.htm
+++ b/test/wpt/tests/xhr/send-authentication-basic-cors-not-enabled.htm
@@ -5,6 +5,7 @@
     <script src="/resources/testharness.js"></script>
     <script src="/resources/testharnessreport.js"></script>
     <script src="/common/utils.js"></script>
+    <script src="/common/get-host-info.sub.js"></script>
     <link rel="help" href="https://xhr.spec.whatwg.org/#the-open()-method" data-tested-assertations="following::ol[1]/li[9]/ol[1]/li[1] following::ol[1]/li[9]/ol[1]/li[2]" />
     <link rel="help" href="https://xhr.spec.whatwg.org/#the-send()-method" data-tested-assertations="following::code[contains(@title,'http-authorization')]/.." />
   </head>
@@ -13,10 +14,10 @@
     <script>
       test(function() {
         var client = new XMLHttpRequest(),
-          urlstart = 'www1.'+location.host + location.pathname.replace(/\/[^\/]*$/, '/')
+          urlstart = get_host_info().REMOTE_ORIGIN + location.pathname.replace(/\/[^\/]*$/, '/')
         client.withCredentials = true
         user = token()
-        client.open("GET", location.protocol+'//'+urlstart + "resources/auth10/auth.py", false, user, 'pass')
+        client.open("GET", urlstart + "resources/auth10/auth.py", false, user, 'pass')
         client.setRequestHeader("x-user", user)
         assert_throws_dom("NetworkError", function(){ client.send(null) })
         assert_equals(client.responseText, '')
diff --git a/test/wpt/tests/xhr/send-authentication-cors-basic-setrequestheader.htm b/test/wpt/tests/xhr/send-authentication-cors-basic-setrequestheader.htm
index de9c5e54303..3c488dcad42 100644
--- a/test/wpt/tests/xhr/send-authentication-cors-basic-setrequestheader.htm
+++ b/test/wpt/tests/xhr/send-authentication-cors-basic-setrequestheader.htm
@@ -5,15 +5,16 @@
     <script src="/resources/testharness.js"></script>
     <script src="/resources/testharnessreport.js"></script>
     <script src="/common/utils.js"></script>
+    <script src="/common/get-host-info.sub.js"></script>
   </head>
   <body>
     <div id="log"></div>
     <script>
       async_test(test => {
         var client = new XMLHttpRequest(),
-            urlstart = location.host + location.pathname.replace(/\/[^\/]*$/, '/'),
+            urlstart = get_host_info().REMOTE_ORIGIN + location.pathname.replace(/\/[^\/]*$/, '/'),
             user = token()
-        client.open("GET", location.protocol+'//www1.'+urlstart + "resources/auth2/corsenabled.py", false)
+        client.open("GET", urlstart + "resources/auth2/corsenabled.py", false)
         client.withCredentials = true
         client.setRequestHeader("x-user", user)
         client.setRequestHeader("x-pass", 'pass')
diff --git a/test/wpt/tests/xhr/send-authentication-cors-setrequestheader-no-cred.htm b/test/wpt/tests/xhr/send-authentication-cors-setrequestheader-no-cred.htm
index 14edf5bd778..eed619c1efb 100644
--- a/test/wpt/tests/xhr/send-authentication-cors-setrequestheader-no-cred.htm
+++ b/test/wpt/tests/xhr/send-authentication-cors-setrequestheader-no-cred.htm
@@ -5,6 +5,7 @@
     <script src="/resources/testharness.js"></script>
     <script src="/resources/testharnessreport.js"></script>
     <script src="/common/utils.js"></script>
+    <script src="/common/get-host-info.sub.js"></script>
     <!-- These spec references do not make much sense simply because the spec doesn't say very much about this.. -->
     <link rel="help" href="https://xhr.spec.whatwg.org/#the-setrequestheader()-method" data-tested-assertations="following::ol[1]/li[6]" />
     <link rel="help" href="https://xhr.spec.whatwg.org/#the-send()-method" data-tested-assertations="following::code[contains(@title,'http-authorization')]/.." />
@@ -16,9 +17,9 @@
       var test = async_test(desc)
       test.step(function() {
         var client = new XMLHttpRequest(),
-            urlstart = location.host + location.pathname.replace(/\/[^\/]*$/, '/'),
+            urlstart = get_host_info().REMOTE_ORIGIN + location.pathname.replace(/\/[^\/]*$/, '/'),
             user = token()
-        client.open("GET", location.protocol + "//www1." + urlstart + "resources/" + pathsuffix, false)
+        client.open("GET", urlstart + "resources/" + pathsuffix, false)
         client.setRequestHeader("x-user", user)
         client.setRequestHeader("x-pass", 'pass')
         client.setRequestHeader("Authorization", "Basic " + btoa(user + ":pass"))
diff --git a/test/wpt/tests/xhr/send-network-error-sync-events.sub.htm b/test/wpt/tests/xhr/send-network-error-sync-events.sub.htm
index 2266eb36e1e..8011c58bdd1 100644
--- a/test/wpt/tests/xhr/send-network-error-sync-events.sub.htm
+++ b/test/wpt/tests/xhr/send-network-error-sync-events.sub.htm
@@ -17,7 +17,7 @@
         {
             var xhr = new XMLHttpRequest();
 
-            xhr.open("POST", "http://nonexistent.{{host}}:{{ports[http][0]}}", false);
+            xhr.open("POST", "http://{{host}}:1", false); // Bad port.
 
             assert_throws_dom("NetworkError", function()
             {

From eaf84c231e2f8274c30fa33cf9b3635b7ed57fd3 Mon Sep 17 00:00:00 2001
From: Khafra <maitken033380023@gmail.com>
Date: Fri, 25 Aug 2023 18:43:43 -0400
Subject: [PATCH 3/3] fix failing integrity tests

---
 lib/fetch/util.js                 | 25 +++++++++++++++++++++++--
 test/wpt/status/fetch.status.json |  6 +-----
 2 files changed, 24 insertions(+), 7 deletions(-)

diff --git a/lib/fetch/util.js b/lib/fetch/util.js
index 98a049dc79d..fcbba84bc9a 100644
--- a/lib/fetch/util.js
+++ b/lib/fetch/util.js
@@ -556,16 +556,37 @@ function bytesMatch (bytes, metadataList) {
     const algorithm = item.algo
 
     // 2. Let expectedValue be the val component of item.
-    const expectedValue = item.hash
+    let expectedValue = item.hash
+
+    // See https://github.com/web-platform-tests/wpt/commit/e4c5cc7a5e48093220528dfdd1c4012dc3837a0e
+    // "be liberal with padding". This is annoying, and it's not even in the spec.
+
+    if (expectedValue.endsWith('==')) {
+      expectedValue = expectedValue.slice(0, -2)
+    }
 
     // 3. Let actualValue be the result of applying algorithm to bytes.
-    const actualValue = crypto.createHash(algorithm).update(bytes).digest('base64')
+    let actualValue = crypto.createHash(algorithm).update(bytes).digest('base64')
+
+    if (actualValue.endsWith('==')) {
+      actualValue = actualValue.slice(0, -2)
+    }
 
     // 4. If actualValue is a case-sensitive match for expectedValue,
     //    return true.
     if (actualValue === expectedValue) {
       return true
     }
+
+    let actualBase64URL = crypto.createHash(algorithm).update(bytes).digest('base64url')
+
+    if (actualBase64URL.endsWith('==')) {
+      actualBase64URL = actualBase64URL.slice(0, -2)
+    }
+
+    if (actualBase64URL === expectedValue) {
+      return true
+    }
   }
 
   // 6. Return false.
diff --git a/test/wpt/status/fetch.status.json b/test/wpt/status/fetch.status.json
index b9311abeb68..5910bf37f6f 100644
--- a/test/wpt/status/fetch.status.json
+++ b/test/wpt/status/fetch.status.json
@@ -35,12 +35,8 @@
         ]
       },
       "integrity.sub.any.js": {
-        "note": "TODO(@KhafraDev): sha-512 tests can probably be fixed",
         "fail": [
-          "Empty string integrity for opaque response",
-          "SHA-512 integrity with missing padding",
-          "SHA-512 integrity base64url encoded",
-          "SHA-512 integrity base64url encoded with missing padding"
+          "Empty string integrity for opaque response"
         ]
       },
       "keepalive.any.js": {