Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds real behavioral context beyond the annotations: finished steps and outputs are preserved and only unfinished work is re-attempted, plus quote=true is a no-op dry run. Does not address the idempotency risk hinted at by idempotentHint=false, but the preservation semantics are valuable and non-obvious.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.