How should IEnumerable versus IQueryable be designed for production in LINQ?

Keep database filtering and projection in IQueryable until materialization, then switch to in-memory processing only when needed. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.