Add bounded GRB map acquisition

docs/CODEX_EXECUTION_LOG.md

@@ -10222,3 +10222,35 @@ Validation:
   (49 tests).
 - Frontend TypeScript typecheck and production build passed before the full
   release gate.
+
+## Sprint 239 - Governed bounded GRB map acquisition (2026-07-17)
+
+Implemented:
+- Added a server-allowlisted GRB OGC API Features registry for `GBG`,
+  `Wegsegment`, `WTZ`/`WLAS`/`WGR` and `ADP`, exposed as buildings, roads,
+  water and parcels.
+- Added canonical product and acquisition endpoints. Acquisition validates
+  EPSG:4326 and metric side lengths, intersects the request with the persisted
+  Area, follows only trusted pagination, fails instead of truncating and
+  retains response/artifact checksums.
+- Routed all output through the existing synchronous Job and
+  `DatasetService.import_vector_bytes` flow. The resulting reference Datasets,
+  DatasetVersions and PostGIS VectorFeatures use the same persistence boundary
+  as uploaded data.
+- Added explicit semantic selection metadata for hectares and kilometres.
+  Water volume, legal parcel certainty and traffic semantics remain
+  unsupported.
+- Extended the Flanders map product catalog with the four GRB products and
+  kept all provider traffic behind the backend.
+
+Validation:
+- Focused provider, acquisition, route-envelope and frontend contract tests
+  cover complete pagination, exact clipping, official identity, hostile next
+  links, feature limits, persistent metadata and the canonical Job response.
+- A read-only live provider probe over one small Mol rectangle returned 8
+  `GBG` buildings, 23 `Wegsegment` roads, 20 water features across
+  `WTZ`/`WLAS`/`WGR` and 96 `ADP` parcels. Every collection completed without
+  truncation using explicit OGC CRS84 bbox and output negotiation.
+- The complete readiness gate passed 943 backend tests, backend compilation,
+  the 118-route API contract audit, Alembic head `202607160001`, frontend
+  TypeScript typecheck and the production Vite build.