Connection rule: disconnected for more than 15 seconds

It isn’t a case if either or. Design Pattern: Expire Binding Based Timers

But your thinking is on the right track. You need to create a timer of some sort when the state changes to CLOSED. If the Item changes to OPEN cancel the timer. When the timer expires send your notification.

Whether you use Expire to implement the Timer or use one internal to the Rule is in this case a matter of personal preference.