Design permission-aware enterprise search

Design search across every app a company uses (Drive, Confluence, Slack, Jira, GitHub, email and more) from one search box, plus an assistant that answers from the results. Nobody may ever see a result, title, snippet or answer derived from something they cannot open in the source app. Cover connectors, indexing, how permissions are modeled and enforced (groups, nested groups, folder inheritance, identities across apps), how quickly a revoked share disappears, ranking with enterprise signals, and how the assistant stays permission-safe.