Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the safety profile (read-only, idempotent, closed-world), and the description layers on real domain behavior the agent cannot infer: the same-day cut-off shifting the earliest arrival date, the same-rooms-free-on-every-night constraint, and the multi-room splitting rule. This is exactly the beyond-annotation context that prevents wrong conclusions from a 'no' verdict.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.