Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations give a baseline (non-read-only, non-destructive, open-world), and the description adds real context beyond them: local files are never uploaded, CANLI_LOCAL=1 gates record_file/journal_file behavior, and unsigned/unjournalled inputs leave facts and signatures unchecked. It also pre-empts a misread of the verdict ('about the series exactly as submitted'). This is meaningful behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.