Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (which indicate a non-read-only, non-idempotent mutation), the description discloses key behaviors: published versions are immutable ('Published versions never change'), publishing the current draft does not freeze the draft ('keep iterating on the draft'), and any llmContext guidance in results should be followed. This is meaningful behavioral context that the annotations alone do not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.