You are tasked with designing a shared VPC architecture where strict controls are enforced by the network and security teams regarding routes exposed between departments. Specifically, the Production and Staging departments should be able to communicate with each other but only via specific networks, following Google-recommended practices. How should you structure this topology?