How should webhooks be designed for production?

For production, sign requests, verify timestamps or replay protection, retry transient failures with backoff, use idempotent event handling, record delivery attempts, and provide observability or replay tools. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.