Best practices
Best practices
Production-readiness guidance for running Bastion in your stack — key handling, retries, streaming, and a launch checklist.
These pages cover what to get right before you point production traffic at the Bastion API. Each one is short and opinionated; treat them as defaults, not gospel.
API key management
Rotation, scoping per environment, secret storage, exposure response.
Errors and retries
Which status codes are transient, how to back off, what never to retry.
Streaming
SSE parsing, proxy buffering pitfalls, reconnect strategy.
Production checklist
A short list to run through before flipping the traffic switch.