Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses the lease model and default duration, the renewal rule (renewing never shortens an existing hold), the exact failure mode with error code and payload field, and the shape of the return (task with holder, content via task_get). That is real behavioral context an agent cannot get from readOnly/destructive/idempotent hints alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.