Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations' destructiveHint=true, the description spells out the concrete side effects: 'creates escrow, funds the escrow on-chain (USDC), executes the task.' This tells an agent that real USDC is committed and a task is dispatched, which is exactly the behavioral context annotations do not convey. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.