Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true and readOnlyHint=false; the description adds real context on top by spelling out the DRAFT→SUBMITTED transition, the caller-identity restriction, and the feature-tier requirement. It doesn't explain downstream effects (approval routing, notifications, or why the operation is flagged destructive), which would be needed for a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.