Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite annotations providing idempotent and destructive hints, the description adds substantial context: 'not closed and no money moves,' 'already frozen is returned unchanged and successfully,' and the error semantics. This goes beyond the structured hints and clarifies the reversible, non-destructive nature of the freeze.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.