Six companies, one project, one set of files that shouldn't all see each other's work — here's the full playbook for structuring access without oversharing, without guest-board gymnastics, and without rebuilding your permission setup every time scope changes.