Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, and non-destructive behavior, so the bar is lower. The description adds the 'agent-native mandate rails' phrase, which implies the operation is scoped by mandates (clinic_id, mandate_id, principal_id), a useful behavioral context. However, it does not disclose other traits like pagination, ordering, or error behavior – though the output schema may cover return values.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.