Decentralized contact tracing protocols and a risk analysis approach to pandemic control