Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive, and the description adds genuinely new behavior: an exceptional safety limit fails loudly instead of returning partial text, source_sermons draws from at most 200 linked candidates, sources_truncated refers to the candidate cap and not text truncation, and the response flags AI-generated origin with provenance fields. That is material context an agent could not get from the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.