Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behaviors: 'the run resumes in the background' and the schema notes 'the run stays paused until every one is answered.' These go beyond the annotations, which only indicate readOnly=false and destructive=false, adding value about side effects. However, it could have mentioned idempotency or permissions, though not required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.