Things like the SR-71 and B-2 development programs are off the higher level books.
Due to the compartmentalized nature of some of the programs (with good reason), it’s infeasible the DoD would ever pass a traditional audit.
Much like the CIA intentionally obfuscates funding for 3rd parties.