Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and delivers real value: required merchant:work scope, at-rest encryption of the payload, and a returned SHA-256 for buyer retrieval — a genuinely non-obvious side effect. Gaps remain on idempotency/resubmission behavior and what 'bounded' actually limits (size or shape), which matter for a write tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.