Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Although annotations already declare this as read-only, idempotent, non-destructive, and closed-world, the description adds substantial behavioral context beyond them. It describes polling cadence, state transitions, what `data.result.operations` contains, how to surface completed work, and how to handle `failed` runs including saved items and credit usage. There is no contradiction with the read-only annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.