Lessons drawn from compliance failures that helped take down an RIA