A matcher exception fell through to the default profile, so a transient failure while resolving a sender route silently served the message from the default profile's runtime. Raise the existing rejection instead, which the ingress gate already drops on. Only the failure path changes: a source that simply matches no route keeps falling through to the default/active profile as before.