Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare non-read-only, non-idempotent, non-destructive, so the safety profile is covered; the description adds real behavioral context with 'Fire-and-forget: there is no delivery confirmation,' telling the agent not to expect a verifiable result. It does not mention rate limits or whether state resets automatically.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.