- Regulators expand enforcement **after** scandals (Sarbanes–Oxley after Enron; Dodd–Frank after 2008).
- Enforcement **atrophies** in quiet periods (regulatory capture, budget cuts, "the crisis is over" complacency).