he centerline of Rondout Creek, and thus somewhere near the middle of the dam, the dam is itself indivisible ( see e.g. Transcript at 1569:3-5 [Dominitz testimony that hazard classification is assigned to the entire dam because the entire dam works as a system]), and the harm likely resulting from dam failure, which could include death and destruction of homes and other property, is precisely th