Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description provides extensive behavioral details beyond annotations: mints invoice, returns specific fields, owner-only, idempotent within pending window, non-refundable, not idempotent across windows, requires authentication, rate limit 10/hour. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.