Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive and closed-world, but the description adds genuinely new limits (200k input, 150k output characters) and clarifies no network fetch occurs. Return format is carried by the output schema, so this is close to complete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.