Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover safety/idempotency (readOnly, idempotent, openWorld, non-destructive). The description adds substantial behavioral context beyond that: exactly what it scores (uncited rules, failed results, unaccepted labs, pre-acceptance tests, stale ASTM F963 edition, bad dates), what it returns (readiness score, fixes, draft eFiling certificate values), and an explicit limitation, 'It never says a filing is correct.' That limitation is a meaningful guardrail not present in any structured field.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.