Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond the annotations: removal from the expand queue, resolution of open expand-lane escalations, a 409 refusal while expansion is in flight with retry guidance, and a business-level replay guard. There is a mild tension between the stated 'changes no state' replay guard and idempotentHint=false, but the mid-expansion refusal and restore path keep the safety profile consistent with destructiveHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.