How should API versioning and backward compatibility be designed for production in Web API?

Prefer additive compatible changes, version only when necessary, publish deprecation policy, and test old clients.