Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations are thin (openWorldHint and destructiveHint only), so the description carries most of the behavioral disclosure. It adds a valuable business rule about refusing a second undecided application and explains the data source behavior for warm versus cold paths. However, it does not disclose what is persisted, whether side effects occur immediately, or any permission requirements. There is no contradiction with the destructiveHint=false annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.