Commentary: Shadow-banking risk surprised regulators