Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the annotations. While the idempotentHint annotation already signals idempotence, the description elaborates ('re-sending the same state is a no-op write'), adds that it 'broadcasts a conversation-updated event to the operator dashboard', and guarantees that 'customer identifiers, staff ids, and organization ids are never returned'. This provides critical behavioral context that the annotations alone do not cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.