I’ve found many ways to trick it into giving the raw chain-of-thought, so it fails at its intended purpose of hiding this information. Because this thread already has 105 comments, I’m going to make this a new topic, but it’s directly related to this one: Raw chain-of-thought information disclosure vulnerability