Structure by party, then by document
Client materials, opposing-party productions, expert workpapers, and internal notes live in separate permission groups. The folder tree mirrors who may see what, so privilege errors become structurally impossible.