Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden. It usefully discloses the signature scheme (Ed25519), the key source (published T3 public key, key_id derived at runtime), the offline mode, and the upstream actor it mirrors — genuine value. But it says nothing about outcome semantics: what is returned on a valid vs. invalid signature, whether failure raises an error, or whether the call has any side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.