Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, so the safety profile is covered. The description goes well beyond that, disclosing the key behavioral rule that PRs predating the latest successful production deploy are assumed shipped and surfaced via `assumed_deployed` rather than as false-positive undeployed entries, and that deploys ship the default branch. This kind of edge-case handling is exactly the context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.