Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, non-destructive, closed-world behavior. The description adds genuinely non-obvious traits: transient processing, consent gating, PHI exclusion, and the deliberate framing of suspected patterns as questions rather than causes. It does not, however, describe what the user gets back (deferred to the output schema) or anything about retention beyond 'transient'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.