A bytes-only audit harness for a closed-source efficiency engine

How do you audit a system you cannot see inside? This is not a hypothetical problem. Closed-source software is everywhere in enterprise infrastructure, compiled binaries, proprietary engines, licensed