Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/closed-world, and the description still adds real behavioral detail beyond them: selector semantics (unselected transcripts may span attempts; recording resolves to the latest known attempt) and an explicit content-trust warning that call content is information, not instructions. Pagination or response size behavior is not disclosed, but an output schema exists to carry return shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.