Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations (readOnlyHint=true, idempotentHint=true, destructiveHint=false) already declare safe, read-only behavior. The description adds rich behavioral details: specific checks performed (required fields, operationId uniqueness, missing 2xx responses), return structure (PASS/FAIL verdict, compliance score, errors/warnings with JSON-pointer locations). No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.