Right, the check is simply hardcoded to check for a: entry in the SPF. To check all the possibilities would be quite complicated, since we will have to implement the full SPF spec just for diagnostics.
(What you see on the dashboard is just a diagnostic. The mail server Haraka has a fuller SPF implementation).
