The sandbox is not optional
A “small” change in production can break:
- A workflow that fires on another record.
- A script that depends on that field.
- An integration that expects the old format.
The rule
- Sandbox first: every change is tested there.
- Real data: copied from production.
- Deploy after hours: with a way to roll back.
It costs one more day. A production error costs several.