How should Terraform state management be designed for production?

For production, use a secured remote backend, enable locking where supported, encrypt and restrict access, separate state by environment or ownership boundary, back it up, and avoid editing state manually unless recovery requires it. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.