How should multi-factor authentication be designed for production?

For production, prefer phishing-resistant factors where feasible, protect enrollment and recovery flows, support step-up authentication for sensitive actions, monitor suspicious changes, and avoid weak fallback paths. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.