[mrswag]

It's theoretically possible, provided you have a small trusted circuit. It's an active research area. The basic idea is to use multiple separate, untrusted chips and have them do multiparty computation, coordinated by the small trusted circuit.

With testing amplification, you can then set an upper bound on the probability that the chip will run a backdoor.