Stability advice
If you want the service to feel reliable, the key is not writing “99.9%” somewhere. The key is that customers can actually use it without things falling apart. These practices are useful:
- Retries with backoff: useful for network fluctuations or 5xx errors, such as 1s -> 2s -> 4s.
- Timeouts: do not let requests hang forever. After timeout, retry or show a clear message to the user.
- Concurrency control: start with low concurrency until it is stable, then increase gradually.
- Record request IDs when available: when something goes wrong, this makes it easier to locate the issue instead of guessing.
Security advice
The most important rule: your API key belongs only to you.
- Do not write API keys into code repositories, especially public repositories.
- Use environment variables to inject keys in production.
- Do not print keys into logs. Many people accidentally expose keys while debugging.
