Site Record: Internal-Only

"**Requirement**: BCAP must have a mechanism to keep an entire site record (or spatial component only - or tabular component only) internal-only and not publishable externally (e.g., a "Hold from RAAD" option)."

**Scenario 1: User Marks an Entire Site Record as Internal-Only**

Given the user has appropriate permissions to manage site visibility,
When the user selects the "Hold from RAAD" option for a site record,
Then the system must prevent the entire site record (both spatial and tabular components) from being published externally.

**Scenario 2: User Marks Only the Spatial Component as Internal-Only**

Given the user has appropriate permissions to manage site visibility,
When the user selects the "Hold from RAAD" option for the spatial component,
Then the system must prevent the site's spatial data from being published externally while still allowing the tabular data to be accessible.

**Scenario 3: User Marks Only the Tabular Component as Internal-Only**

Given the user has appropriate permissions to manage site visibility,
When the user selects the "Hold from RAAD" option for the tabular component,
Then the system must prevent the site's tabular data from being published externally while still allowing the spatial data to be accessible.

AC:

- [ ] Users must have a "Hold from RAAD" option available when managing site records.
- [ ] The system must allow users to apply the "Hold from RAAD" option to:
- The entire site record (both spatial and tabular components).
- Only the spatial component.
- Only the tabular component.
- [ ] The system must visually indicate which sites or components are marked as internal-only.
- [ ] If a site or component is marked as internal-only, it must be excluded from external data exports and publications (e.g., RAAD).
- [ ] Users must be able to modify or remove the "Hold from RAAD" status when necessary.
- [ ] The system must maintain a record of when the "Hold from RAAD" status is applied or removed, including timestamps and user details.
- [ ] The system must notify users if they attempt to publish a record that is marked as internal-only.

Start by locating the site-record visibility controls and the RAAD export and publication paths, then trace how spatial and tabular components are represented. Done means users can apply, view, change, and remove whole-record or component-level internal-only status, with audit details, export exclusion, and a publication warning matching the acceptance criteria.

Written by the indexing model from the issue text.