Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, idempotent and non-destructive, so the safety profile is covered. The description adds real behavior beyond that: the call validates the cart and reports which lines open, which would be left out and why, and the totals. It also discloses the downstream flow (guest pays by card, booking confirmed at payment), which tells the agent the link itself is not the booking.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.