Development, testing and production environments should be separated and secured.
Development, staging, and production environments are logically and operationally separated. Developers have full access to dev/test; read-only access to staging and no direct access to production. Role-based access controls enforce least privilege across all environments.
All deployments follow a controlled promotion workflow through Git. Production changes require approval and are tracked in version control.