Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world, so the safety profile is fully covered. The description adds that results carry RBAC context (identity, role, required permission, eligibility), but this is largely restating what the output schema already conveys and says nothing about ordering, volume, or staleness of pending items.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.