Samourai Wallet + "Sentinel" watch-only wallet combo

Samourai can hold your private keys on a completely offline device (disable internet connection with GrapheneOS or rip out the wifi chip), yet you can still sign transactions created on another device that has Sentinel (similar to how you do with SeedSigner)