It seems reasoning summaries are required:
{"error":{"message":"Missing required parameter: 'input[1].summary'.","code":"invalid_request_body"}}
But why? Testing shows that encrypted_content is the only field that matters, and a summary of[] doesn’t cause problems.