Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior, so the safety profile is covered. The description adds a genuinely valuable domain rule ('a met control without evidence is unknown, never certified'), which explains how status is normalized. It does not disclose scoring, output shape, or how the six pillars are aggregated, but the one rule it does add is meaningful beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.