Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, and closed-world safety, so the bar is lower. The description adds a real behavioral trait beyond them: unconfirmed terms are returned in 'gaps' rather than resolved, which tells the agent how to interpret an incomplete response. It does not mention auth or rate limits, but the key response behavior is disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.