Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world, so the safety profile is covered. The description adds genuinely useful semantics beyond that: elective_ptet_2026 counts only 2026 files with an elective PTET, and no_elective_ptet_2026 / not_effective_2026 are explicitly not PTET states, preventing a likely misinterpretation of returned categories.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.