The de Larosière report: two down, two to go