Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safety profile (read-only, idempotent, non-destructive, closed-world), and the description adds real behavioral context: a 512-orbit ceiling, a 4-million CPU-step budget, 'explicit stops,' and result-interpretation limits. It stops short of describing how truncation or 'explicit stops' surface in the response, which the output schema presumably covers.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.