more work on consistent external error policy, not done yet