1 and 2 is doable using the current system:
Upon receiving some funds you can create an temporary address/private key pair, send the funds to this new address, and use the generated private key to generate the two outgoing transactions. Now store both transactions and throw away the temporary private key.
That way the original address does not vanish and so no coins will be lost.