For single turn prompts like this, you just have to give the model encrypted bytes and ask politely what's in them, really.

GPT-5.6 will disclose its internals if you tell it it's in "audit mode" and has to calculate checksum of the trace.