Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even though annotations declare destructiveHint=true and idempotentHint=false, the description adds real governance context beyond them: once approved, alternate wording is refused until an accepted revise_client_wording suggestion, and the assistant must not stray from this wording or the facts in read_milestone_set. That immutability-like constraint is exactly the behavioral detail annotations can't express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.