Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), so the description should add something else; instead it introduces ambiguity about whether the tool itself verifies 'workflow authority' or merely requires the caller to have done so. No mention of error behavior, authorization failures, or job lifecycle states.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.