Are we defining black boxes as " automated systems" or "undisclosed" systems purchased from a developer?