How should eventual consistency be designed for production?

For production, define acceptable inconsistency windows, design idempotent handlers, expose pending states where needed, reconcile failures, and make user-facing workflows clear about asynchronous completion. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.