Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, open-world), and the description adds substantial behavior beyond them: the static shard keyed by sha256 of the normalised URL, the NOT_MEASURED-with-empty-list contract ('never an error and never a clean bill'), the explicit absence of verdicts/scores/rankings, and the inclusion of Merkle root and inclusion pointer for independent verification.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.