The tester raised a critical defect because my API returned a 404 for a customer who did not exist.

I explained that this was the correct response.

He reopened it and wrote:

“Customer still does not exist.”