Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare idempotentHint=false, yet the description states the call is 'exactly-once — a repeat release returns the existing terminal record, never a double payout', which is precisely idempotent behavior. An agent deciding whether a retry is safe would get two opposite answers from the structured field and the prose. The destructiveHint=true and openWorldHint=false claims are consistent, but the idempotency conflict is material.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.