risk: calculating success probability