Water intrusion after roof replacement

We had our roof replaced three years ago. Simple ranch home roof for the most part, 30 degree slope, a four season porch on the back has a flat roof. Architectural shingles, 30 year warranty. Flat roof has rolled roofing.

It leaks in two spots in heavy rain and snow. Water seeping on one ceiling near front of house, dripping where 4 season porch attaches to house. Roofing guy came out, patched a nail hole and said he can't find anything else.

Husband suggests we add insulation batts under the roof eaves to stop this. Attic is already insulated in ceiling rafters with batts.

Does this make sense? Or should I call a different roofer?

Edit to add : I think my husband believes this to be condensation as opposed to a roof leak. If this were the case, would the water leak to ceiling behave this way?