Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the safety profile is covered. The description adds genuinely new behavior: the response shape changes over the run's lifetime (progress while running, final score and fix list when done) and access is restricted to the caller who started the run, including the guest-address case. Polling cadence and whether a failed run returns a distinct status are not covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.