One-way multi-tenant Ticket visibility - company-based ticket visibility for Partners

I want to be able to set up a one-way visibility flow where a Partner (associated with multiple companies) can see all tickets created by a Customer (associated with one of those companies), but the Customer cannot see tickets created by the Partner.

This would likely involve the ability to select a specific company context when creating a ticket and having visibility rules that respect hierarchical or multi-company relationships.