modules/AzStack.Insights/analyzers/AzStackHci.DiagnosticSettings.OsConfig.ConfigurationConsistency.ps1

<#
.SYNOPSIS
    Surfaces the cross-node OS configuration "Consistency Checks" produced by the
    AzStackHci.DiagnosticSettings module as Insights rules.
.DESCRIPTION
    Runs Get-AzStackHciOsConfigSettings -Scope Cluster once and parses the returned health summary
    (Strategy A: run-and-parse, identical to how the NetworkConnectivity analyzer consumes
    Test-AzureLocalConnectivity). The module fans out across every cluster node itself via inline
    Invoke-Command - it is NOT required to be installed on remote nodes - so this analyzer only needs
    to invoke it from the local node.
 
    Each entry in the returned ConsistencyChecks collection is delegated to the data-driven
    AzStackHci.DiagnosticSettings.OsConfig.ConsistencyCheck rule, which maps the upstream Result
    (PASS/WARNING/FAILURE/INFO/SKIPPED) onto an InsightStatus and carries check-specific remediation.
 
    No OS configuration is collected or compared here; the DiagnosticSettings module is the single
    source of truth for every cross-node comparison.
#>


[CmdletBinding()]
param(
    # Collection scope forwarded to Get-AzStackHciOsConfigSettings. 'Cluster' (default) fans out to all
    # nodes; 'Node' evaluates only the local node (the module then omits the cross-node consistency checks).
    [Parameter(Mandatory = $false)]
    [ValidateSet('Cluster', 'Node')]
    [string]$Scope = 'Cluster',

    # Requests the module's per-node software inventory (-IncludeInventoryData, 0.6.8+) and adds an
    # 'Installed Programs' per-node property report. On by default because the per-node inventory is useful
    # information; pass -IncludeInventoryData:$false to skip it and avoid the extra cross-node collection cost.
    [Parameter(Mandatory = $false)]
    [bool]$IncludeInventoryData = $true,

    [Parameter(Mandatory = $false)]
    [System.Collections.IDictionary]$ReportEvidence
)

# Load the parent module when invoked directly (e.g. Pester). No-op when called via Invoke-SupportInsight
# because the module is already loaded.
if (-not (Get-Command -Name 'Initialize-InsightAnalyzer' -ErrorAction SilentlyContinue)) {
    Import-Module $PSScriptRoot\..\AzStack.Insights.psm1 -Force -DisableNameChecking
}

Import-LocalizedData -BindingVariable 'localizedData' -BaseDirectory "$PSScriptRoot\locale" -UICulture $PSUICulture
$insightAnalyzer = Initialize-InsightAnalyzer -Id $localizedData.Id -Properties $localizedData.Insight

<# START ANALYZER LOGIC #>

try {
    
    # 'Get-AzStackHciOsConfigSettings -Scope Cluster' fans out to all nodes via a nested Invoke-Command, which
    # is needed for the cross-node comparison. When THIS analyzer is already running inside a remote session
    # (PSSenderInfo set), that nested call becomes a SECOND hop and cross-node collection fails (the PowerShell
    # double-hop authentication problem) - producing partial "(not collected)" data on the remote node.
    #
    # Instead of throwing NotSupportedException (which leaves remote nodes as NOT_APPLICABLE), downgrade to
    # -Scope Node so the module evaluates ONLY the local node (no second hop). This still surfaces that node's
    # own collected properties so each per-node report carries local data - useful when "a node has a different
    # view of the world" (e.g. disks/storage). NOTE: Node scope does NOT emit cross-node ConsistencyChecks, so
    # the rules table will be empty on remote-session invocations; the full comparison still comes from the
    # single local (orchestrator) -Scope Cluster run.
    if ($PSSenderInfo -and $Scope -eq 'Cluster') {
        Write-AzsSupportLog -Level 'Informational' -Message $localizedData.DowngradeToNodeScope
        $Scope = 'Node'
    }

    Add-Member -InputObject $insightAnalyzer -NotePropertyName 'CollectionScope' -NotePropertyValue $Scope

    # Fail fast with a clear message if the module/cmdlet is not present.
    $osConfigCommand = Get-Command -Name 'Get-AzStackHciOsConfigSettings' -ErrorAction Stop

    # Build invocation parameters. Always quiet (NoOutput), never self-update (NoAutoUpdate), never prompt to
    # upload (UploadResults = $false), and return the parsed summary object (PassThru).
    # Write the module's report/transcript files INTO this node's own report folder - the SAME per-node folder the
    # Insights framework builds and copies back to the orchestrator: <OutputDirectory>\<COMPUTERNAME>\. We anchor to
    # the framework's resolved OutputDirectory (exposed on the Insights cache) rather than reconstructing it from
    # Get-AzsSupportWorkingDirectory: on a REMOTE node the framework uses the orchestrator-supplied OutputDirectory,
    # which differs from the remote node's own (per-session, timestamped) working directory - so reconstructing it
    # would write the report to a divergent folder that is never collected. Falling back to the working directory
    # keeps direct/Pester invocations working. We replicate Export-AzsSupportInsightArtifacts' folder-name
    # transform (ToUpperInvariant() with whitespace -> '_') so the report lands inside the collected node folder and its
    # relative ReportLinks anchor resolves in the bundle.
    $insightOutputDir = if ($Global:AzStack_Insights.Cache.OutputDirectory) { $Global:AzStack_Insights.Cache.OutputDirectory }
                        else { Join-Path (Get-AzsSupportWorkingDirectory) 'InsightReport' }
    $nodeName = $env:COMPUTERNAME.ToUpperInvariant() -replace '\s', '_'
    $nodeReportFolder = Join-Path -Path $insightOutputDir -ChildPath $nodeName
    $ExportPath = Join-Path $nodeReportFolder 'AzLocalOsConfig'
    # Params for splatting to Get-AzStackHciOsConfigSettings. -ExportPath is required for the module to write its
    # report/transcript files, even when -NoOutput is specified.
    $osConfigParams = @{
        Scope         = $Scope
        PassThru      = $true
        NoOutput      = $true
        NoAutoUpdate  = $true
        UploadResults = $false
        ExportPath    = $ExportPath
        ErrorAction   = 'Stop'
    }

    # HealthSummaryOnly = $false keeps the module writing its full on-disk output (incl. the HTML report) while
    # PassThru gives us the parsed summary. Only add it when the installed cmdlet exposes the parameter, so an
    # older module version that lacks it does not fail binding (which would end the analyzer as UNKNOWN).
    if ($osConfigCommand.Parameters.ContainsKey('HealthSummaryOnly')) {
        $osConfigParams['HealthSummaryOnly'] = $false
    }

    # Optionally request the per-node software inventory. Guarded on BOTH the caller opt-in and the cmdlet
    # actually exposing the parameter (0.6.8+), so older module versions are simply left unaffected.
    if ($IncludeInventoryData -and $osConfigCommand.Parameters.ContainsKey('IncludeInventoryData')) {
        $osConfigParams['IncludeInventoryData'] = $true
    }

    Write-AzsSupportLog -Message ($localizedData.InvokingModule -f $Scope)

    $summary = $null
    try {
        # IMPORTANT: do NOT cast the result or wrap the call in @(...). The module returns a single
        # PSCustomObject health summary; bind it directly to a variable per its documented contract.
        $summary = Get-AzStackHciOsConfigSettings @osConfigParams
    }
    catch {
        Write-AzsSupportLog -Level 'Error' -Message ($localizedData.InvokeFailed -f $_.Exception.Message)
        throw
    }

    if ($summary -is [System.Collections.IDictionary]) { $summary = [pscustomobject]$summary }
    if (-not $summary) {
        throw [System.IO.InvalidDataException]::new($localizedData.NoSummary)
    }
    else {
        # Log the schema version and warn (non-fatal) if it is below the minimum contract this consumer was
        # written against. A missing or older/unparseable schema means the producer/consumer contract may not
        # line up and some sections could be absent - surface it so a version mismatch is visible in the report.
        $schemaRaw = if ($summary.PSObject.Properties['SchemaVersion']) { [string]$summary.SchemaVersion } else { '' }
        $parsedSchema = $null
        if ($schemaRaw) {
            Write-AzsSupportLog -Message ($localizedData.SchemaVersion -f $schemaRaw)
            $parsedSchema = $null
            if (-not [version]::TryParse($schemaRaw, [ref]$parsedSchema) -or $parsedSchema -lt [version]$localizedData.MinimumSchemaVersion) {
                Write-AzsSupportLog -Level 'Warning' -Message ($localizedData.SchemaVersionBelowMinimum -f $schemaRaw, $localizedData.MinimumSchemaVersion)
            }
        }
        else {
            Write-AzsSupportLog -Level 'Warning' -Message $localizedData.SchemaVersionMissing
        }
        if ($parsedSchema -and $parsedSchema.Major -ne 1) {
            throw [System.IO.InvalidDataException]::new($localizedData.SchemaVersionUnsupported)
        }

        $incompleteNodes = @()
        if ($summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {
            $incompleteNodes = @($summary.Nodes | Where-Object {
                    $collectionNode = $_
                    if ($collectionNode -is [System.Collections.IDictionary]) { $collectionNode = [pscustomobject]$collectionNode }
                    ($collectionNode.PSObject.Properties['Collected'] -and -not [bool]$collectionNode.Collected) -or
                    ($collectionNode.PSObject.Properties['CollectionError'] -and -not [string]::IsNullOrWhiteSpace([string]$collectionNode.CollectionError))
                })
        }
        if ($incompleteNodes.Count -gt 0) {
            $insightAnalyzer.Rules += @(
                & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.CollectionCompleteness.ps1 -Nodes $incompleteNodes
            )
        }

        # Extract the cross-node consistency checks. Absent on single-node / -Scope Node runs.
        $consistencyChecks = @()
        if ($summary.PSObject.Properties['ConsistencyChecks'] -and $summary.ConsistencyChecks) {
            $consistencyChecks = @($summary.ConsistencyChecks)
        }

        if ($consistencyChecks.Count -eq 0) {
            Write-AzsSupportLog -Message $localizedData.NoConsistencyChecks
        }
        else {
            Write-AzsSupportLog -Message ($localizedData.EvaluatingChecks -f $consistencyChecks.Count)
            foreach ($check in $consistencyChecks) {
                $insightAnalyzer.Rules += @(
                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.ConsistencyCheck.ps1 -Check $check
                )
            }
        }

        # Evaluate the top-level OS configuration health sections. Unlike ConsistencyChecks (a cross-node
        # collection), each of these is a single named object on the health summary carrying its own
        # Result / Severity / Message. Iterate a fixed, ordered list of the section property names and invoke
        # the HealthCheck rule for each one that is present, so a section that is absent on a given run (or
        # module version) is simply skipped rather than producing a spurious rule.
        $healthSectionNames = @(
            'ClusterDriftControl'
            'ArcAgentHealth'
            'NonMicrosoftServices'
            'StorageHealth'
            'KeyServicesHealth'
            'StabilityEvents'
            'GPOHealthCheck'
            'NetworkATCHealth'
            # Per-node ABSOLUTE health signals (0.6.9+): each has a single correct value per node and now
            # evaluates in BOTH -Scope Node and -Scope Cluster (previously power plan was consistency-only, and
            # time sync / pending reboot were collected but not evaluated). Absent on older module versions, so
            # simply skipped by the PRESENT-section filter below.
            'PowerPlanHealth'
            'TimeSyncHealth'
            'PendingRebootHealth'
        )
        $presentHealthSections = @($healthSectionNames | Where-Object { $summary.PSObject.Properties[$_] -and $summary.$_ })
        if ($presentHealthSections.Count -eq 0) {
            Write-AzsSupportLog -Message $localizedData.NoHealthSections
        }
        else {
            Write-AzsSupportLog -Message ($localizedData.EvaluatingHealthSections -f $presentHealthSections.Count)
            foreach ($sectionName in $presentHealthSections) {
                $insightAnalyzer.Rules += @(
                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.HealthCheck.ps1 -Section $summary.$sectionName -SectionName $sectionName
                )
            }
        }

        # Surface the per-node software inventory (Installed Programs) as its own INFO rule when requested, so it
        # renders as a compact drill-down row rather than a large inline table (see the Properties note below).
        # This keeps the analyzer view readable on large clusters where the full inventory is many rows per node.
        # Only emit the rule when at least one node actually carries InstalledPrograms, so we never add a noise
        # "no inventory" rule (e.g. an older module version that does not populate the inventory).
        if ($IncludeInventoryData -and $summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {
            $hasInventory = @($summary.Nodes | Where-Object {
                    $inventoryNode = $_
                    if ($inventoryNode -is [System.Collections.IDictionary]) { $inventoryNode = [pscustomobject]$inventoryNode }
                    $inventoryNode.PSObject.Properties['InstalledPrograms'] -and $inventoryNode.InstalledPrograms
                }).Count -gt 0
            if ($hasInventory) {
                $insightAnalyzer.Rules += @(
                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.InstalledProgramsInventory.ps1 -Nodes $summary.Nodes
                )
            }

            # Same treatment for the per-node device driver inventory (typically hundreds of rows per node) - its
            # own INFO drill-down rule, only when at least one node actually carries DriverVersions. Cross-node NIC
            # driver drift is evaluated separately by the NetworkAdapterDriverConsistency check.
            $hasDriverInventory = @($summary.Nodes | Where-Object {
                    $driverNode = $_
                    if ($driverNode -is [System.Collections.IDictionary]) { $driverNode = [pscustomobject]$driverNode }
                    $driverNode.PSObject.Properties['DriverVersions'] -and $driverNode.DriverVersions
                }).Count -gt 0
            if ($hasDriverInventory) {
                $insightAnalyzer.Rules += @(
                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.DriverVersionsInventory.ps1 -Nodes $summary.Nodes
                )
            }
        }

        $securitySchema = if ($parsedSchema) { $parsedSchema } else { [version]'0.0' }
        $expectedSecurityNodes = @($summary.Nodes | ForEach-Object {
            if ($_ -is [System.Collections.IDictionary]) { $summaryNode = [pscustomobject]$_ } else { $summaryNode = $_ }
            if ($summaryNode.PSObject.Properties['Name']) { [string]$summaryNode.Name }
        })
        foreach ($sectionName in @('SecurityBaselineHealth', 'DefenderHealth')) {
            $securitySection = [pscustomobject]@{}
            if ($summary.PSObject.Properties[$sectionName] -and $null -ne $summary.$sectionName) {
                $securitySection = $summary.$sectionName
            }
            $insightAnalyzer.Rules += @(
                & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.HealthCheck.ps1 -Section $securitySection -SectionName $sectionName -SchemaVersion $securitySchema -ExpectedNodes $expectedSecurityNodes -HtmlEvidence $ReportEvidence
            )
        }

        # Build a per-node property report from the summary's structured Nodes collection.
        $reportObject = Initialize-InsightAnalyzerPropertyReport -Name 'Cluster Nodes'
        if ($summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {
            foreach ($node in @($summary.Nodes)) {
                # The module returns each structured node as an [ordered] dictionary, whose ENTRIES are not
                # exposed via PSObject.Properties. Normalise to a PSCustomObject so the member-existence guards
                # below read the real values instead of always falling back to ''.
                if ($node -is [System.Collections.IDictionary]) { $node = [pscustomobject]$node }
                $pendingReboot = $null
                if ($node.PSObject.Properties['PendingReboot'] -and $node.PendingReboot) {
                    $pendingReboot = $node.PendingReboot
                    if ($pendingReboot -is [System.Collections.IDictionary]) { $pendingReboot = [pscustomobject]$pendingReboot }
                }
                $reportObject.Data += [PSCustomObject]@{
                    Node           = if ($node.PSObject.Properties['Name'])      { [string]$node.Name }      else { '' }
                    OsBuild        = if ($node.PSObject.Properties['OsBuild'])   { [string]$node.OsBuild }   else { '' }
                    Ubr            = if ($node.PSObject.Properties['Ubr'])       { [string]$node.Ubr }       else { '' }
                    FullBuild      = if ($node.PSObject.Properties['FullBuild']) { [string]$node.FullBuild } else { '' }
                    Collected      = if ($node.PSObject.Properties['Collected']) { [bool]$node.Collected }   else { $false }
                    CollectionError = if ($node.PSObject.Properties['CollectionError']) { [string]$node.CollectionError } else { '' }
                    Pending        = if ($pendingReboot -and $pendingReboot.PSObject.Properties['IsPending']) { [bool]$pendingReboot.IsPending } else { '' }
                    Reasons        = if ($pendingReboot -and $pendingReboot.PSObject.Properties['Reasons']) { @($pendingReboot.Reasons) -join ', ' } else { '' }
                    FileOperations = if ($pendingReboot -and $pendingReboot.PSObject.Properties['PendingFileRenameOperationsCount']) { [int]$pendingReboot.PendingFileRenameOperationsCount } else { '' }
                }
            }
        }

        # The per-node OS build summary is a small table (one row per node), so it stays as an inline analyzer
        # property report. The larger Installed Programs software inventory is surfaced as its own INFO rule
        # (invoked above when -IncludeInventoryData is set) so it renders as a compact drill-down rather than a
        # large inline table - which keeps large clusters readable.
        $insightAnalyzer.Properties = $reportObject

        if ($summary.PSObject.Properties['ClusterDetails'] -or ($parsedSchema -and $parsedSchema -ge [version]'1.4')) {
            $metadataReport = Initialize-InsightAnalyzerPropertyReport -Name $localizedData.ClusterMetadataTitle
            $metadataFields = @('AzureResourceUri', 'SolutionVersion', 'SbeVersion', 'LastUpdated', 'State', 'HealthState')
            $projectMetadata = {
                param([object]$Value, [bool]$Root)
                if ($Value -is [System.Collections.IDictionary]) { $Value = [pscustomobject]$Value }
                foreach ($fieldName in $metadataFields) {
                    if ($null -eq $Value -or -not $Value.PSObject.Properties[$fieldName]) {
                        throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid)
                    }
                    $fieldValue = $Value.$fieldName
                    if ($fieldName -eq 'LastUpdated' -and ($fieldValue -is [datetime] -or $fieldValue -is [datetimeoffset])) { continue }
                    if ($null -ne $fieldValue -and $fieldValue -isnot [string]) {
                        throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid)
                    }
                }
                $lastUpdated = $Value.LastUpdated
                if ($lastUpdated -is [datetime] -or $lastUpdated -is [datetimeoffset]) {
                    $lastUpdated = $lastUpdated.ToString('o', [System.Globalization.CultureInfo]::InvariantCulture)
                }
                if ($null -ne $lastUpdated) {
                    $parsedDate = [datetime]::MinValue
                    if ($lastUpdated -notmatch '^\d{4}-\d{2}-\d{2}T' -or -not [datetime]::TryParse(
                        $lastUpdated, [System.Globalization.CultureInfo]::InvariantCulture, [System.Globalization.DateTimeStyles]::RoundtripKind, [ref]$parsedDate)) {
                        throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid)
                    }
                }
                $projection = [ordered]@{
                    Node = $localizedData.ClusterMetadataSummary
                    ContractStatus = 'Valid'
                    AzureResourceUriAvailable = -not [string]::IsNullOrWhiteSpace($Value.AzureResourceUri)
                    SolutionVersion = $Value.SolutionVersion
                    SbeVersion = $Value.SbeVersion
                    LastUpdated = $lastUpdated
                    State = $Value.State
                    HealthState = $Value.HealthState
                    EvidenceComplete = $null
                    ConflictingFields = @()
                    CollectionErrorCount = $null
                }
                if ($Root) {
                    foreach ($fieldName in @('EvidenceComplete', 'ConflictingFields', 'Details')) {
                        if (-not $Value.PSObject.Properties[$fieldName]) { throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid) }
                    }
                    if ($Value.EvidenceComplete -isnot [bool] -or $Value.ConflictingFields -isnot [System.Collections.IList] -or
                        $Value.Details -isnot [System.Collections.IList] -or ($Value.EvidenceComplete -and $Value.Details.Count -eq 0)) {
                        throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid)
                    }
                    foreach ($fieldName in $Value.ConflictingFields) {
                        if ($fieldName -isnot [string] -or ($fieldName -in $metadataFields -and $null -ne $Value.$fieldName) -or $Value.EvidenceComplete) {
                            throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid)
                        }
                    }
                    $projection.EvidenceComplete = $Value.EvidenceComplete
                    $projection.ConflictingFields = @($Value.ConflictingFields | Where-Object { $_ -in $metadataFields })
                } else {
                    if (-not $Value.PSObject.Properties['Node'] -or $Value.Node -isnot [string] -or [string]::IsNullOrWhiteSpace($Value.Node) -or
                        -not $Value.PSObject.Properties['CollectionErrors'] -or $Value.CollectionErrors -isnot [System.Collections.IList]) {
                        throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid)
                    }
                    $projection.Node = $Value.Node
                    $projection.CollectionErrorCount = $Value.CollectionErrors.Count
                }
                $queryNodes = @(if ($Root) { $Value.Details } else { $Value })
                $queryEvidence = @(foreach ($queryNode in $queryNodes) {
                    if ($queryNode -is [System.Collections.IDictionary]) { $queryNode = [pscustomobject]$queryNode }
                    $queryStates = [ordered]@{ 'Get-AzureStackHCI' = $null; 'Get-SolutionUpdateEnvironment' = $null }
                    if ($null -ne $queryNode) {
                        if ($queryNode.PSObject.Properties['QueryStatus']) {
                            $queryStatus = $queryNode.QueryStatus
                            if ($queryStatus -is [System.Collections.IDictionary]) { $queryStatus = [pscustomobject]$queryStatus }
                            foreach ($commandName in @('Get-AzureStackHCI', 'Get-SolutionUpdateEnvironment')) {
                                if ($null -eq $queryStatus -or -not $queryStatus.PSObject.Properties[$commandName] -or
                                    $queryStatus.$commandName -isnot [string] -or $queryStatus.$commandName -cnotin @('NotFound', 'Succeeded', 'Failed')) {
                                    if (-not $Root) { throw [System.IO.InvalidDataException]::new($localizedData.ClusterMetadataInvalid) }
                                    $queryStates[$commandName] = 'Invalid'
                                } else {
                                    $queryStates[$commandName] = $queryStatus.$commandName
                                }
                            }
                        }
                    }
                    [pscustomobject]$queryStates
                })
                foreach ($fieldName in $metadataFields) {
                    $commandName = if ($fieldName -eq 'AzureResourceUri') { 'Get-AzureStackHCI' } else { 'Get-SolutionUpdateEnvironment' }
                    $statuses = @($queryEvidence | ForEach-Object { $_.$commandName })
                    $availability = if (-not [string]::IsNullOrWhiteSpace([string]$Value.$fieldName)) { $localizedData.ClusterMetadataAvailable }
                    elseif ($Root -and $fieldName -in $Value.ConflictingFields) { $localizedData.ClusterMetadataConflicting }
                    elseif ($statuses.Count -gt 0 -and @($statuses | Where-Object { $_ -cne 'NotFound' }).Count -eq 0) { $localizedData.ClusterMetadataNotFound }
                    elseif (@($statuses | Where-Object { $null -ne $_ }).Count -eq 0) { $localizedData.ClusterMetadataNotCollected }
                    else { $localizedData.ClusterMetadataUnavailable }
                    $projection[$fieldName + 'Availability'] = $availability
                }
                [pscustomobject]$projection
            }
            try {
                $clusterDetails = $summary.ClusterDetails
                if ($clusterDetails -is [System.Collections.IDictionary]) { $clusterDetails = [pscustomobject]$clusterDetails }
                $metadataReport.Data += & $projectMetadata -Value $clusterDetails -Root $true
                foreach ($nodeDetails in $clusterDetails.Details) {
                    try {
                        $metadataReport.Data += & $projectMetadata -Value $nodeDetails -Root $false
                    } catch {
                        $metadataReport.Data += [pscustomobject]@{ ContractStatus = 'Invalid'; Message = $localizedData.ClusterMetadataInvalid }
                    }
                }
            } catch {
                $metadataReport.Data += [pscustomobject]@{ ContractStatus = 'Invalid'; Message = $localizedData.ClusterMetadataInvalid }
            }
            $insightAnalyzer.Properties = @($reportObject, $metadataReport)
        }

        # Surface a link to the module's own detailed HTML report (which renders the full hardware / GPO / per-node
        # breakdown that is not part of the structured -PassThru contract). The report engine renders this as a
        # RELATIVE anchor when the file lives inside the InsightReport tree and safely skips it otherwise, so this
        # never produces a broken link. The module writes this report under our -ExportPath (inside the tree).
        if ($summary.PSObject.Properties['HTMLReportPath'] -and $summary.HTMLReportPath) {
            Add-Member -InputObject $insightAnalyzer -NotePropertyName 'ReportLinks' -NotePropertyValue @(
                [pscustomobject]@{
                    Title = 'View Detailed AzLocal OS Configuration Report'
                    Path  = [string]$summary.HTMLReportPath
                }
            ) -Force
        }
    }
}
catch {
     # gracefully handle not supported scenarios such as when the environment does not meet the requirements
    if ($_.Exception -is [System.NotSupportedException]) {
        Write-AzsSupportLog -Level 'Informational' -Message $_.Exception.Message
        $insightAnalyzer.Status = [InsightStatus]::NOT_APPLICABLE
    }
    else {
        $_ | Write-AzsSupportLog -Level 'Exception'
        $insightAnalyzer.ScriptStackTrace = Get-FormattedException -Exception $_
        $insightAnalyzer.Status = [InsightStatus]::UNKNOWN
    }
}

<# END ANALYZER LOGIC #>

# enumerate the rules and set the analyzer status based on the rules status
# if any rule is in failure, the analyzer is in failure; if any rule is in warning, the analyzer is in warning
if ($insightAnalyzer.Rules.Status -icontains [InsightStatus]::FAILURE) {
    $insightAnalyzer.Status = [InsightStatus]::FAILURE
}
elseif ($insightAnalyzer.Rules.Status -icontains [InsightStatus]::WARNING) {
    $insightAnalyzer.Status = [InsightStatus]::WARNING
}

$insightAnalyzer.Duration = New-TimeSpan -Start $insightAnalyzer.OccurrenceTimeUTC -End $([System.DateTime]::UtcNow)

# Cache the analyzer results, write event and return result
Set-InsightCache -Type 'Analyzer' -Data $insightAnalyzer
Write-InsightEvent -Insight $insightAnalyzer
return $insightAnalyzer

# SIG # Begin signature block
# MIInNwYJKoZIhvcNAQcCoIInKDCCJyQCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDy/jSoGBoYsOOJ
# KS3H3+1ittRlneiE6NuQFEdU/SoBMqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIJmj/B8GlJPTyffGW/q/bIDMdoXF
# 6fu/ctDiCCihcWJCMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAwPZxosjMFcXhn/w9g9UergBWZ+zSQDEm0z9JWW4NsCgBsFApjL/c3yjRgExn
# CXpKyBuSf5nZIkgneSwhcZa9NYq5eVaTSL+75BoLOGw+haAMc4bKOiZFgS+yWgWV
# XB2AZDm4sHRRi3euAtBPQplNM43aKh6QJii8FdDzHxIUjWBg56kiUB0/hQC8dWGP
# vXSzXzp9ixnTOd4Zs45/a9uwBw5QsSleuhpEz855UHpPw7iwekK+PBQa/gIFXJ+W
# Pb7z2R20skMklVWGIzQbtj5IJlMXwXoszrKeBQYvl7gzgZ7x9yFTiKGm53cwMtPX
# OZ3UZ5V0xH+MmxoqVhLi3cN0yqGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wG
# CSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG
# 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCBQjVC5hAgT4uOWbivGGQAeY1phucO5aPGUEP/n3IHwcgIGaqmAkECKGBMy
# MDI2MTAwNTIwMjkxOS4yODRaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj
# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTAwMC0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHq
# MIIHIDCCBQigAwIBAgITMwAAAiu7AFD/TTuaoQABAAACKzANBgkqhkiG9w0BAQsF
# ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMTFa
# Fw0yNzA1MTcxOTQwMTFaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTAwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQCX3mi6OD3syUqQm4QqgkrKPbcsK/Qx3fYctL8+VM1uOY3b
# ooi5GxwauTgQf6JFHITToxS7gjqKlK8OFLzL6UTl0jxEK5t6DuOcgJXdvutimoTl
# OS0C3kyITXBAXoj/gp6hRR9z6WRip1Ktkilb3dJXCjQqT9P2Cuujr+Vz8r+Z+jDl
# 09ji/ic/4G34r3mVwjs//Gnx9Pu31V8rXFicNiAzxpubawpbd8pqfzlWT2vnG3kF
# 9l6MiREbvJ3XHLUwHQsh0t/TrSFx/s/yCqpJWYJ6oClG70tvsFH0aRP8wB4cP/CF
# a2ILvk26i3OcJBl+pqKjHTSBy9mvwTPEDlnzco0Nt8R6pSPTXZgBsscHhoKfC0WQ
# mOzY2keXbAmRTcZMyXz5v/AJbmoI0y07Bazvt5NkXddG9TErQWwtsFyIKrElDgWf
# HeCoTu1wu2ciD3dK72z3ca2gzoEDxT2j9BXIUKaiTzTdQPRsAMaO3dU0zaGwMMlw
# tSJyDh14YEgZoUu5vS8MugMqdrNjphyL65yKhjpAWbhYkIHO/0uZju95tP8zZNqX
# IRh4tdfWHJPATn9r+cxkyuh2x0VLdfx1lmK9X3NjH0NtgAs5JB/wOlkyuudxmFTf
# WVyRrL37ispOZ8aPAFgvyR6cNTkGpkFo35JRjciNmZiU4qT9Uty+V5gudFk1jwID
# AQABo4IBSTCCAUUwHQYDVR0OBBYEFD4WjuQTUJbtbd3jmvZku0FZ2eU2MB8GA1Ud
# IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp
# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI
# KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv
# TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud
# EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA
# MA0GCSqGSIb3DQEBCwUAA4ICAQDO/CKsciEM8kr1fqH4TlfT66ENoTjxXw810pyE
# q0PdrgLwfgT3x+1gz7CQHtUdevqMQ5qHyDLhm6pT911CYkGN+6g+MU7fMYTr6d3S
# xieJwBIoWkfR4g7SitGzMKU465KEYejfddoUgovC/xcRpaALO5p3/A248ByhJiMt
# tBQNDtsT/HaCFwRFCURby/f8c1kky8F8xkCXFz+/MtZ5d1lWFjwOI2geZHWq9Xih
# DOgee5nS2koo5V6n8XG220UTevVf+pgmpIH71XKDVIYTGGZJs6yPlfJ2aXqw1ME4
# NR6okNsY3P1M31H6DMYRfJGNBNep595kXGh3YzA3cCiyg+jmJ58h/fTvjngIpuUF
# fODpDjFx0ic1YoLANxhCF3RhS9qYM7K40NEhKshYuaAkIG2XBKYig3r/0/b0sjvj
# Bws55AYonMm3A8qcX/6k9Vfc0mv9dtonHuWGfA2b+qE2qpCnhzGbdDHq7iOSZEw0
# 1nNupAMf1c41k9IoTQ2z3iw6w4ZZoLOyg4TKMbp1krpT4trip/y30Cv5khyqCDNq
# aXQpBkOYON8LgtoQ3amVOX7ix5jdrnx/vUxTUSigXvrWdL7Uk8kpmS0zto2Toy7a
# T5oBzCTvfj9iJ/BN/E1vhFBkhJCvZ7PVvsMSnTTmkx2Fal2lVkztuAI44fD/uyLJ
# daMQSzCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN
# AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD
# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw
# BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw
# MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx
# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT
# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt
# U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk
# 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c
# T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG
# UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz
# rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2
# LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV
# wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd
# EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0
# gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph
# AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ
# YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb
# GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ
# KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP
# EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw
# UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr
# BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw
# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY
# xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp
# L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB
# BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
# cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B
# AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5
# 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD
# sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo
# 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ
# iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK
# PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI
# LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk
# ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9
# af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba
# ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/
# OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIIC
# NQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0
# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
# dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG
# A1UECxMeblNoaWVsZCBUU1MgRVNOOkEwMDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN
# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQAJrD90
# ykHpo/0AGb7lmwvsCtqROaCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD
# QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7m5Z8jAiGA8yMDI2MTAwNTE3MTYzNFoY
# DzIwMjYxMDA2MTcxNjM0WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDublnyAgEA
# MAcCAQACAgJgMAcCAQACAhLHMAoCBQDub6tyAgEAMDYGCisGAQQBhFkKBAIxKDAm
# MAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcN
# AQELBQADggEBAAuV730nafY8mz1cDtPp005efBe2Ysc1IjIyNeLVdoFXtqlQcbnM
# nU37IyB75GB0lp/YSqP9NZnWLnvkS/Vwl5/R92FgxNQEVOsRx/wsb2oAJWVOW7zx
# B0qHp2wGwoK19MgwaHuLPOs3pdK6DNgIN+dFw7hwOOXd96MNCFdel8sNPA9GHDPw
# 20iooNQepd/8MetzzesiDsSuf2kEqBYH3RUr6+p4ziW99J77OZ2qP+HQUVTZGpsT
# xi8qpl4uu/C6ToG/4WfYv2cDaNrYu10R4MivIuLHSEvTgoNB3zyZBMcwV/Hy6twR
# BADuicJVgfk5j/2hoQ/9ZOKtb7hZcx7G7oExggQNMIIECQIBATCBkzB8MQswCQYD
# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe
# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv
# ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiu7AFD/TTuaoQABAAACKzANBglg
# hkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqG
# SIb3DQEJBDEiBCB5AvzKy8royx81r59xxr0Cq/HHXb2TNk5NTyqHbdrqhzCB+gYL
# KoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIHIOI/Q/kFftYA+M2OY+1Bx3ajBD6/WD
# AtPT2vFkv25SMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC
# EzMAAAIruwBQ/007mqEAAQAAAiswIgQg8ypGEZrVtDdrEK/ZW7IHMUBMkFhAcBsV
# W5qeTRcDnGAwDQYJKoZIhvcNAQELBQAEggIAL+9Y0KlSfGhk35pUbjUs2Ggsa6m+
# XavC+8D/iOlw7UizffE/iI2s7BXOPMtrse6ySyIdCevCwKCcKNGJedIotbQ8ZFrS
# x/cn7vLCrBgU6G+2NO2F18cBNN0OsLHsvG2lBwkfI7zMRr/MygJZga7Awpx3AA+y
# rOZkOYCUd/LpEDErDPy9VtjoMN8ejlAgbdc20lUXG/Fa0FKBPp406svNBdDX6CR/
# 10VkbdmAhtJVFgR32whSj+1Mz5wjoY6LsXNal9wPSkSIV24QByobLAWFBWj0t7wp
# 8AIB5AuWv5wau5WoST8GPpGuHLhWFD4zFda2Hr/DeaCYmKIiWRaEGmXsZgyXIiir
# bjP/j2PMy4PMFtOCePL78aN1ad+onAac0xITKlgtQkkTgVJQHXqokm1u4klMwura
# 1gLepFN9biqqhrNSG+y2IVbQkNMYpbG+srNEvy+fP41rQEXSM7OEtfSDjBOWLDH5
# f42ykapb8RwfRELXzeZb5wq65VRAKzzRczBU3DYvT+qBvMAXQqq6WTlMn9ldd7nE
# Xm9gaGOLP563ijarTCqnI1DQG3DHlzbYHpPCYVJdqhl42X+P15JAMtILGJQSiejZ
# i4SrNIGFeQWQo/55RZ3o047Yeg33hIKVAqc8UPRNKWYGvN9U9oQ9+FU2D2aAWTpK
# 1EhClZw4wZ95A+A=
# SIG # End signature block