The whole spreading fortress was surrounded not just by a moat, but by a deep artificial lake. Dams were built linked by causeways to a series of smaller outpost forts. The flood waters were controlled by a succession of carefully engineered sluice-gates and locks.

