Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, open-world, and non-destructive behavior, so the description's added value is high: it discloses exactly what is returned (textual trace, capsule_id, prior machine traces) and exactly what is never returned (private image bytes, visual claims). This gives an agent the behavioral profile needed without relying on inference.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.