An alert expression becomes true for 30 seconds during routine deployments. The team wants notification only after five continuous minutes of breach. Which rule setting fits?

1. group_interval: 5m
2. for: 5m
3. scrape_interval: 5m
4. repeat_interval: 5m