Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (idempotentHint=true, destructiveHint=false), but the description adds substantive behavior the annotations do not: the four-failure dead-letter threshold, the re-offer-on-next-poll timing, and the immediate dead-letter path. It does not state auth requirements or what the caller receives back, which is partly offset by the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.