badges rules : AND OR exploits