Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes beyond the annotations by disclosing asynchronous processing, source-support detection during refinement, and the side-effect boundary ('adds to the shared index, not to Following'). It does not say what happens when the URL is unsupported or the submission fails, which is the main remaining behavioral gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.