blended identity
In short: Blended identity is Aembit's term for an identity that combines the agent and the human it acts for. Policy can then consider both at once: which agent is calling and whose authority it carries. It is one way to express on-behalf-of access in a single credential.
Where does it show up in practice?
Ask any vendor how its tokens represent both parties.