Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds real behavior beyond the annotations (readOnlyHint=false, destructiveHint=false, openWorldHint=false): validation happens before any write, failures return field-specific errors with no record created, and successful calls surface an identifier, reference number, web link, and non-blocking warnings. It stops short of stating permission requirements, duplicate-detection behavior, or idempotency, so it is strong but not exhaustive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.