Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, and it does disclose one important trait: this read does not retry the build and returns the *original submitted* spec rather than current state. However, it says nothing about permission requirements, error behavior for missing/invalid build IDs, or whether the spec is a snapshot versus a live view, so disclosure is partial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.