17.6Error strategy

bad request
→ 400

Salesforce business validation
→ 4xx/domain response

Salesforce transient connectivity
→ bounded retry

retry exhausted
→ 503

unexpected Mule error
→ 500

And importantly:

“I'd only retry an idempotent operation because a timeout doesn't prove Salesforce didn't commit.”