Best you can do is some kind of HSM that only signs stuff fitting under some predefined rules. Similarly what you can do with collaborative onchain transactions, like JoinMarket coinjoins.