> ## Documentation Index
> Fetch the complete documentation index at: https://docs.parmanasystems.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Reference: every error code

> Every error code the server can return, with its HTTP status, where it occurs and a real message, generated from the source and the OpenAPI file.

Every error code the server declares, 38 in all: each error class in `packages/*/src` (its code and HTTP status), and each `code` in a real captured response in `openapi/openapi.bundled.yaml`. An error body is `{ "error": "<message>", "code": "<CODE>" }`; a few refusals carry more fields, shown on the operation's page. "Returned by" lists the operations whose documented responses name the code; an empty cell means the code can be returned by any operation that reaches that part of the server. What to do for each class of error: [Errors and troubleshooting](/build-book/09-errors-and-troubleshooting).

| Code | HTTP | Returned by | Example message | Declared in |
| - | - | - | - | - |
| `APPROVAL_ISSUER_CHANGE_NOT_FOUND` | 404 | `approveApprovalIssuerChange`, `rejectApprovalIssuerChange` | Approver change '00000000-0000-0000-0000-000000000000' not found. | `packages/shared/src/errors/approval-issuer-change-not-found-error.ts` |
| `AUDIT_UNAVAILABLE` | 503 | | | `packages/api/src/auth/AuditUnavailableError.ts` |
| `AUTHORITY_REQUIRED` | 400 | | | `packages/shared/src/errors/authority-required-error.ts` |
| `AUTHORIZATION_REQUIRED` | 400 | | | `packages/shared/src/errors/authorization-required-error.ts` |
| `BUSINESS_TRANSACTION_NOT_FOUND` | 404 | | | `packages/shared/src/errors/business-transaction-not-found-error.ts` |
| `CAPABILITY_NOT_ALLOWED` | 403 | `createTransaction`, `executeTransaction`, `getPolicyInEffect` | Caller is not permitted to invoke this capability. | `packages/api/src/routes/execute.ts` |
| `CAPABILITY_NOT_BOUND` | 404 | `getPolicyInEffect` | | `packages/api/src/routes/policy-in-effect.ts` |
| `CHALLENGE_RECORD_NOT_FOUND` | 404 | | | `packages/shared/src/errors/challenge-record-not-found-error.ts` |
| `CONFLICT` | 409 | `approveExternalConnectorChange`, `proposeApprovalIssuerChange`, `proposeExternalConnectorChange` | Approver 'manager-priya' key 'manager-priya-key-1' already exists. Use a new key id to add a new key. | |
| `CONNECTOR_NOT_REGISTERED` | 500, 503 | `createTransaction` | | `packages/shared/src/errors/connector-not-registered-error.ts` |
| `DECISION_NOT_APPROVED` | 400 | | | `packages/shared/src/errors/decision-not-approved-error.ts` |
| `DUPLICATE_BUSINESS_TRANSACTION` | 409 | | | `packages/shared/src/errors/duplicate-business-transaction-error.ts` |
| `EXECUTION_INTENT_NOT_FOUND` | 404 | `finalizeExecutionIntent`, `resolveExecutionIntent` | No Execution Intent exists for business transaction 'unknown-transaction'. Transactions created before Execution Intents were introduced have none. | `packages/runtime/src/errors/ExecutionIntentNotFoundError.ts` |
| `EXECUTION_INTENT_NOT_RESOLVABLE` | 409 | `resolveExecutionIntent` | The Execution Intent for business transaction 'b1237ce3-305a-4004-8179-749352fc1ade' is in state RELEASED and cannot be resolved by hand. Its execution result was saved, so rebuild the signed Trust Record with finalize instead. Nothing was changed. | `packages/runtime/src/errors/ExecutionIntentNotResolvableError.ts` |
| `EXECUTION_INTENT_RESOLUTION_INVALID` | 400 | `resolveExecutionIntent` | The resolution is invalid: note is required. Record what you found at the connector. | `packages/runtime/src/errors/ExecutionIntentResolutionInvalidError.ts` |
| `EXECUTION_INTENT_RESULT_NOT_RECORDED` | 409 | `finalizeExecutionIntent` | The Execution Intent for business transaction 'b1237ce3-305a-4004-8179-749352fc1ade' is in state PREPARED and has no saved execution result, so its signed Execution Trust Record cannot be rebuilt. The action may or may not have been released. Establish the outcome from the connector and reconcile it by hand. Nothing was called. | `packages/runtime/src/errors/ExecutionIntentNotFinalizableError.ts` |
| `EXECUTION_INTENT_UNAVAILABLE` | 503 | | | `packages/runtime/src/errors/ExecutionIntentUnavailableError.ts` |
| `EXECUTION_INTENTS_NOT_ENABLED` | 501 | `finalizeExecutionIntent`, `resolveExecutionIntent` | Execution Intents are not enabled on this deployment. | |
| `EXECUTION_OUTCOME_UNKNOWN` | 500, 502 | `createTransaction`, `executeTransaction` | The action for business transaction '38dcf000-99ed-43af-8666-46c63c8ada74' was released to the execution system, but the call failed, so whether it was performed is unknown. Do not retry as a new transaction: check the target system, then close the Execution Intent with POST /execution-intents/38dcf000-99ed-43af-8666-46c63c8ada74/resolve. authorizationId: 4d291c90-9e93-4a8a-b214-8cc6526fe2e3. | `packages/runtime/src/errors/ExecutionOutcomeUnknownError.ts` |
| `EXECUTION_RECORD_INCOMPLETE` | 500 | `createTransaction`, `executeTransaction` | The action for business transaction 'e54187e6-431f-4e1c-9c0e-ff2cb5d6d40a' was released to the execution system, but its signed Execution Trust Record could not be produced. Do not retry as a new transaction: reconcile against the connector and the execution audit events for this businessTransactionId. authorizationId: 381ef27a-0955-4085-9e5d-e4223fef2986. | `packages/runtime/src/errors/ExecutionRecordIncompleteError.ts` |
| `EXTERNAL_CONNECTOR_CHANGE_NOT_FOUND` | 404 | `approveExternalConnectorChange`, `rejectExternalConnectorChange` | External connector change '00000000-0000-0000-0000-000000000000' not found. | `packages/shared/src/errors/external-connector-change-not-found-error.ts` |
| `EXTERNAL_ENDPOINT_ADDRESS_REFUSED` | 400 | `approveExternalConnectorChange`, `proposeExternalConnectorChange` | The endpoint host 'erp-internal.example.com' resolves to an address that is not public (10.0.0.7). | `packages/api/src/routes/external-connectors.ts` |
| `INTENT_REQUIRED` | 400 | | | `packages/shared/src/errors/intent-required-error.ts` |
| `INVALID_EXTERNAL_CONNECTOR` | 400 | `proposeExternalConnectorChange` | The namespace 'paytm' belongs to a built in connector. Use another namespace. | `packages/api/src/routes/external-connectors.ts` |
| `NO_APPROVED_POLICY_VERSION` | 409 | `getPolicyInEffect` | | `packages/api/src/routes/policy-in-effect.ts` |
| `NON_HUMAN_CALLER_DENIED` | 403 | `approveApprovalIssuerChange`, `approveExternalConnectorChange`, `approvePolicyChange`, `finalizeExecutionIntent`, `listApprovalIssuerChanges`, `listApprovalIssuers`, `listExternalConnectorChanges`, `listExternalConnectors`, `listPendingPolicyChanges`, `listUnfinalizedExecutionIntents`, `proposeApprovalIssuerChange`, `proposeExternalConnectorChange`, `proposePolicyChange`, `rejectApprovalIssuerChange`, `rejectExternalConnectorChange`, `rejectPolicyChange`, `resolveExecutionIntent` | This action requires a caller credential provisioned as a verified human (credentialHolderType: USER). | `packages/shared/src/errors/non-human-caller-denied-error.ts` |
| `NONCE_ALREADY_CONSUMED` | 409 | | | `packages/shared/src/errors/nonce-already-consumed-error.ts` |
| `OVERRIDE_NOT_ALLOWED` | 409 | | | `packages/shared/src/errors/override-not-allowed-error.ts` |
| `PENDING_POLICY_CHANGE_NOT_FOUND` | 404 | `approvePolicyChange` | Pending Policy Change '00000000-0000-0000-0000-000000000000' not found. | `packages/shared/src/errors/pending-policy-change-not-found-error.ts` |
| `POLICY_DENIED` | 403, 500 | `createTransaction`, `executeTransaction` | Execution rejected: Vendor payment rejected because the assessed payment risk exceeds the maximum permitted threshold. | |
| `POLICY_NOT_FOUND` | 404 | | | `packages/shared/src/errors/policy-not-found-error.ts` |
| `POLICY_VERSION_UNAVAILABLE` | 503 | `getPolicyInEffect` | | `packages/api/src/routes/policy-in-effect.ts` |
| `RATE_LIMITED` | 429 | | | `packages/api/src/middleware/rate-limit.ts` |
| `RECEIPT_GENERATION_FAILED` | 409 | `generateReceipt` | Execution Trust Record must be successfully verified before a Receipt can be generated. | `packages/runtime/src/errors/ReceiptGenerationError.ts` |
| `SAME_ACTOR_CANNOT_APPROVE_OWN_CHANGE` | 403 | `approveApprovalIssuerChange`, `approveExternalConnectorChange`, `approvePolicyChange`, `rejectApprovalIssuerChange`, `rejectExternalConnectorChange`, `rejectPolicyChange` | Pending Policy Change '307d8265-1171-49a4-b13f-fc3d3ae323e3' was proposed by this same caller — the proposer (maker) may not also approve or reject it (checker). | `packages/shared/src/errors/same-actor-cannot-approve-own-change-error.ts` |
| `SIGNING_UNAVAILABLE` | 503 | | | `packages/runtime/src/errors/SigningUnavailableError.ts` |
| `STEP_UP_AUTHORIZATION_INVALID` | 403 | `approveApprovalIssuerChange`, `approveExternalConnectorChange`, `approvePolicyChange`, `rejectApprovalIssuerChange`, `rejectExternalConnectorChange`, `rejectPolicyChange` | The step-up authorization envelope is missing, invalid, expired, replayed, or does not match this request. | `packages/shared/src/errors/step-up-authorization-invalid-error.ts` |
| `VERIFICATION_FAILED` | 404 | `generateReceipt`, `replayTransaction`, `verifyTransaction` | Execution Trust Record not found. | `packages/runtime/src/errors/VerificationFailedError.ts` |