2. Have a warm wallet on a computer with a firewall that only connects to 3, with 1% of your funds
3. Have a web-facing server that sends back commands to 2 when it needs to send money.
2 alerts someone when it needs more money, who then goes to the cold wallet and transfers some, creating the transaction offline and using a new USB key to transfer it to a computer with internet.
The last step can also require multiple people if desired.