Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey idempotency, non-destructiveness, and closed-world scope. The description adds genuine unannotated behavior: the specific error codes returned ('not_found' for missing/foreign resumes, 'invalid_payload' for empty names), which is real operational value beyond the safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.