Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full behavioral burden. It discloses the default for require_pq via OAO_REQUIRE_PQ, the failure condition when PQ legs are missing, and the security rationale (anti-downgrade). It does not explicitly mention non-mutation, but 'verify' implies it; the extra details are valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.