Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (not read-only, not destructive), and the description adds real behavior beyond them: dedupe semantics ('if an active fact with the same text already exists it is returned instead of duplicated (created: false)'), the default category, and an explicit non-effect ('does not regenerate the creator memory'). The only tension is that this dedupe behavior reads as idempotent while the annotations set idempotentHint=false, which is a minor inconsistency rather than a misleading claim.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.