Escalation without enforcement: hidden grace periods in tiered bank supervision