Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and closed-world, so safety is covered. The description adds value beyond them: sort order (oldest first), the derived fields returned (days overdue, total open), and an explicit negative capability — 'the system never sends anything' — which prevents the agent from assuming it triggers dunning.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.