Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only flag destructiveHint/idempotentHint; the description goes far beyond them, disclosing the preview-first safety model, that the preview returns accessChanged warnings, the five-minute token lifetime, and the invalidation conditions (assignments or project access changing). It also reassures that recording content and transcription settings are untouched, which correctly scopes the 'destructive' annotation to organizational metadata.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.