How should HTTP status codes and ProblemDetails be designed for production in Web API?

Map domain outcomes to suitable status codes, use ProblemDetails, include correlation IDs, and avoid leaking internals.