You've omitted the third requirement, which is the nasty one: your outside project must not relate to the actual or reasonably anticipated R&D of the company.