Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses what is checked (hash consistency) and that a verification status is returned, but says nothing about authentication needs, what happens when the optional data is omitted, or failure/error behavior for an invalid or missing proof.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.