Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it enumerates what is suspended (radar scans, digests, follow-ups, agent messages), what waits (user reminders), what is untouched (resume, vacancies, history), what happens at expiry (one search, one message), and that it is instant, reversible, and quota-free. This is exactly the behavioral context the readOnly/destructive/idempotent hints cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.