Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, it discloses the one-time private workflow_manage_token and that retries neither rotate nor reissue it, the exclusion of the close summary receipt from the step count, the non-canonical status of the session_workflow_id/workflow_id metadata, and the trust boundary ('Records Zambo's claims, not issuer authentication'). The idempotent/non-destructive/read-only claims in the annotations are actively reinforced by the immutable-snapshot and repeat-call semantics, adding real context rather than repeating structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.