Not quite.

• Every commit is just a local commit
• Every push runs pre-hooks which execute bunch of checks, for example linters, style checkers, etc. and prevent a push if something is not perfect
• After every push the CI/CD pipeline runs on origin
• Every run of the pipeline executes again checks with linters but also securoty checks for CVEs on dependencies and runtime
• Every pipeline run also executes all tests such as unit tests, scenario tests, integration tests
• If any of the above fails, the pipeline fails and stops
• Only if everything is okay, one can deploy on dev, the first stage
• Only if this is okay, the artifact gets pushed to the central artifact store
• Only if this suceesa a prod deployment can run, which pulls the artifact from the store
• Runners for dev and prod are distinct and don’t have rights the other has, the only common contact point is the artifact store

That’s an extremely very basic overview with many steps and concepts omitted but you get the idea.