Potential guidelines reportedly won’t have a binding force over banks, who could rely on their own risk assessment.