Compliance + risk + product compliance — entire team. Pick any flagship plus external auditor read access.
The moment a second person opens the file, the question of what is and is not permitted becomes real — usually after the fact.
A licence written for that situation, with the covered flagships listed and the boundary stated in advance.
The licence applies to a flagship you select from the listed set.
Written out plainly, so the boundary is clear before anyone shares a file.
What is included, stated.