Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Well beyond the readOnly/idempotent/non-destructive annotations, it discloses partial results (omittedForSize), missing-data semantics (absent vatRegistration, ANALYSED not implying complete pipeline), ordering guarantees, duplicate-UID collapsing, and malformed check-digit rejection. These tell the agent exactly how to interpret a short or partial answer.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.