# What does the VARTA error `not_found` mean?

The generic resource-not-found code, used whenever a more specific `*_not_found` code doesn't apply.


**HTTP status:** `404`  ·  **Type:** `invalid_request_error`

## What it means

The generic resource-not-found code, used whenever a more specific `*_not_found` code doesn't apply.

## What causes it

Raised for a missing or cross-tenant resource through the ownership check (`backend/app/security/ownership.py`, `backend/app/api/v1/errors.py`), and directly for an unregistered phone number (`backend/app/api/v1/telephony.py`). It is also the fallback code for any unrecognised 404.

The **cross-tenant** half of that only happens in enforce mode. `require_tenant` compares tenants only when `settings.auth_mode == "enforce"`; on a default instance that setting is `"audit"` (`backend/app/core/config.py:26`) and the check returns the resource unexamined (`backend/app/security/ownership.py:51-52`). So on a default instance, an id belonging to another tenant does **not** produce this error — it resolves normally. Object-level isolation there is observed but not enforced. See [Authentication](/docs/authentication).

## What to do

Confirm the id belongs to your tenant and was returned by a prior call — this code does not distinguish "never existed" from "not yours."