I thought this was interesting: I asked ChatGPT to decode this message:

Except the message is actually one that I’d created:

ChatGPT read and followed hidden instructions with no evidence in the thinking or the output.

I did try to push it further, but it was difficult to write it in a way that it stayed true. I did get this though:

I tried long instructions and tried different languages, but it was hard to trick it.