Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, readOnlyHint=false, openWorldHint=false and idempotentHint=false; the description goes further by explaining the refusal-on-conflict rule, the shared undo stack with the user's own ⌘Z, and that only the latest step is reversed. Its claim that "a retry of the same call does not undo twice" sits at the edge of idempotentHint=false (call identity vs. re-invoking with the same arguments), so the disclosure is valuable but slightly ambiguous rather than a clean contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.