Who shares risk with whom under different enforcement mechanisms?