Researchers propose a new strategy for containing backdoors in large language models (LLMs) called Quarantined Expert Shutdown (QES). QES allows backdoor formation during training but routes it into a quarantined component that can be disabled at deployment, reducing the attack success rate from 100% to 0-10% on most settings.