Turn internal errors (elevation == -1) into failed query to prevent bogus elevation from reaching upper layers.