A wallet creates and signs a transaction, then broadcasts it to peers. Nodes check whether it follows the rules before relaying it.
Valid unconfirmed transactions can wait in mempools. Miners select transactions for blocks, often considering fee rate in satoshis per virtual byte.
A confirmation means the transaction has been included in a block. Additional blocks make reversal increasingly difficult, but no universal confirmation count fits every value and risk level.