Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the safety profile (readOnly=false, destructive=true, idempotent=true, openWorld=true). The description adds substantial context beyond that: the iPhone Live Activity updates, the user loses the ability to approve/reject, any wait_for_approval call returns the cancelled state, and non-pending requests are returned unchanged. This is rich side-effect disclosure that annotations alone could not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.