How should message retries and dead-letter queues be designed for production?

For production, define the requirements and failure modes for message retries and dead-letter queues, automate repeatable configuration, apply least privilege, validate inputs and contracts, set sensible limits and timeouts, add structured logs and metrics, monitor important outcomes, test recovery paths, and document operational ownership. Review the design regularly as scale and dependencies change.