Make a multisig cold wallet. Sign a transaction to your staging wallet with an nsequence time lock so that the staging wallet can't spend the keys for lets say, a week after receiving them. With miniscript such that in that time you can live it away from your staging wallet if a wrench attack is why...