Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world behavior. The description adds genuinely new context beyond that: synchronous execution, task support forbidden, and that the payload is internal orchestration state with presentation rules. It stops short of describing pagination or volume characteristics, but adds real value over the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.