Quantifying CBRN Risk in Frontier Models