How should API idempotency be designed for production?

For production, use idempotency keys for suitable commands, persist the original outcome, define key scope and lifetime, and make downstream effects consistent with the same logical request. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.