We need to be able to score one finding using multiple sources. To be able to do this a more advanced logic than just Pass/Pass Override/Fail is necessary.
For example, to be able to score PAM configs there could be a file that exists in the directory that isn't parsed, so directory contains isn't sufficient, but password management could be handled by several different files. So you'd need to test if a file exists and the file contains a certain string three or four times in a single scored point.

So for 3 different files in the pam directory you'd need (A & B) or (C & D) or (D & E) would be sufficient for scoring points.