Exceptions during converge should be handled cleanly with fatal logging / callback