Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, it discloses the key operational behavior: the referral is queued for human review rather than processed through automatic sending. This prevents the agent from implying that a referral, notification, or prospect contact has already been transmitted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.