Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish this as a read-only, idempotent, non-destructive local operation, so the bar is lower. The description still adds real behavioral context beyond them: verification works offline, it is fail-closed, and an absent anchor yields a PROVISIONAL verdict rather than an error.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.