Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover openWorldHint/destructiveHint, yet the description discloses the crucial non-obvious behavior: the rule is saved as DRAFT, books nothing and categorizes nothing until human approval, and the agent must tell the user it's pending rather than live. It also flags the response field (rule_status) that confirms this and the conflict failure mode — exactly the context an agent cannot infer.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.