Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, and closed-world behavior, so the description correctly spends its space elsewhere: it discloses what the full view returns (passages, sources, trust fields, relationships, cite_as) and gives the content_hash recomputation rule, which is real verification context not derivable from annotations or schema. It omits failure behavior (unknown ID, version out of range) and whether trust/applicability are entitlements-gated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.