Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With annotations already flagging non-read-only, open-world and non-idempotent behavior, the description still adds real traits beyond them: a replay guard, verification of delivered prerequisites, exactly one bounded expand retry, id/dependency preservation, resolution of matching cards in a single transaction, and a bounded live GitHub check that can reach out even when nothing changes. It stops short of permissions, auth, or failure-mode disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.