So, we have two approaches to Hot Fixes. One being that they only work in Dev boxes, however this creates a longer path for production changes to then be back deployed.
The other option is to have a hot fix environment off of production. It would essentially be its own short pipeline that only has two steps, Hot Fix and production. If you are using our pipelines feature, you could add the hot fix environment to the very last step of your pipelines.
In this way, your path for fixing an issue becomes:
Release to Prod
Detection of bug or issue
Promote work item to Hot Fix
Perform necessary bug fixes
Build a Hot Fix work item or deployment to move the fixed components (the only ones where you would see a difference because now Hot Fix is up to date with production via work item except for those fixed components)
Deploy back to Production
Sit back and Relax