There are a number of locations in the spec where the implementation should return 500s. In some of those locations, the controller is configuring lattice to return a 404 instead (for example when there are no valid backendRefs). Once the Lattice API supports 500 as a fixed response, the controller should be updated to improve conformance with the spec.