Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations carry only bare hints (readOnlyHint=false, idempotentHint=false, destructiveHint=false), so the description bears the full disclosure burden — and meets it. It reveals the revision-append model, LAST-WRITE-WINS concurrency with no If-Match/conflict detection, concurrent-edits-replace semantics, the recovery path, and the permission-relevant lock behavior. This is exactly the behavioral nuance that prevents an agent from clobbering concurrent edits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.