Why not both? Have a soft cap with alerts, and a higher hard cap as a failsafe.