Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare the safe/mutating profile, and the description adds non-obvious behavior: optimistic concurrency via revision with 409 conflict semantics, the evidence policy (public signals can't establish payment intent, milestones need attributable evidence), and explicit negative scope ('does not contact businesses or execute delivery'). It does not mention that the operation is non-idempotent, which matters for retry safety.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.