What methods does bidlight use to quantify and incorporate potential risks into its cost estimates