Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnlyHint, idempotentHint, destructiveHint=false, closed-world), so the bar is low. The description nevertheless adds meaningful data-integrity context: the returned receipt is 'unsigned' and 'filtered' (i.e., redacted/public), which tells the agent the content is non-authoritative. It stops short of saying what gets filtered out or what auth is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.