It could theoretically be done by implementing a covenant system in contracts, but it never got built despite all the talk about it (probably because of the extra complexity it requires in validating new transactions). Otherwise, like you said, multisig is needed so one side can simply demand the new transaction to be signed use the same contract before agreeing on transferring. Which requires this second signer to anyways be available online…