Permissions travel with every fact. A 1:1 stays a 1:1, always. Heidi answers each person from what that person is allowed to know, not from one flat pool.
Every fact carries the permissions of its source. Something said in a private conversation does not surface in a public channel answer. Something in a restricted folder stays restricted.
This is what makes one shared brain workable in a real company: shared does not mean flat.