Looks like you've got this rule sorted out above. Hooray for the community!
You may be interested to know that there is an example exactly like what you want in the Rule 4.0 docs, which I'd recommend reading. Too late to save you some time here, but maybe for the rest of this rule or the next one, you'll discover something helpful. 
