The best solution is likely a multisig solution, something Hive supports but is rarely ever used due to complexity and lack of tooling.

It's not complex at all. Multisig just requires a transaction with an appropriately long expiration, followed by two or more signatures, an off-chain process to transmit the partially signed transaction to all of the parties who need to sign it, a condition for the last party to transmit the fully signed transaction to the blockchain, followed by a process to repeat the whole process if the final transmission fails.

It literally couldn't be more simple.