Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover only the safety profile (readOnly false, destructive false, idempotent false); the description adds substantial behavioral context they cannot carry — the included revision cycle, the 402 refusal beyond the brief quote, in-job re-presentation with no new charge, lock_violation surfacing, and abandon as the only terminal refusal. This is well beyond annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.