How should message retries and dead-letter queues be designed for production?

For production, use bounded retries with backoff, distinguish transient from permanent failures, preserve diagnostic context, monitor dead-letter volume, and provide a controlled replay process. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.