Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/closed-world, and the description adds real behavior beyond them: the widget reuses the captured source numbers and selection rather than recomputing, expired evidence forces a fresh read, and retired regimes and pattern events are deliberately not exposed. This tells the agent both what the widget does and what it will refuse to show.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.