Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered — but the description goes well beyond that. It discloses that sermon and full-recording fallbacks are excluded, that text_type signals AI-edited or summarized rather than verbatim speech, that recording/summary-update dates are not expiry dates, the 8000 UTF-16 truncation limit with truncated/total_chars completeness flags, that no AI generation or network retrieval occurs, and that shared rate limits apply. This is unusually rich behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.