Sentinel is a runtime enforcement layer for agent payments that blocks fraudulent transactions by enforcing signed mandates, tracing provenance, and detecting prompt injections. It acts as a guard between the agent and payment rails to prevent unauthorized payments.