Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations that already mark this as destructive, non-idempotent, and open-world, the description adds critical operational caveats: starting respects approvals, failed or uncertain writes are never retried, and resume requires explicit user intent. It also warns that provider record text is untrusted data, which is important behavioral context for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.