If you cannot let the system take the loss without intervening, the size is wrong.

The correct size is the one at which the worst case is genuinely acceptable to you.

Set it above that and the override is not a possibility, it is a scheduled event — and once you have overridden, you are no longer running the system you tested.