Which party to a contract absorbs the preponderance of cost risk when a firm-fixed-price (ffp) contract is used?