Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes beyond the annotations with three real facts: queued runs are deduplicated against identical inputs (elaborating idempotentHint), a verified session is required, and solver-supplied test outcomes are rejected – an integrity guarantee an agent could not derive from structured fields. It does not describe what happens to the queued run afterward or its lifecycle, so it falls short of full disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.