Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, open-world, so the safety profile needs no restating. The description does add genuinely useful behavioral context beyond them: records may be pending or anchored, and version 0.4 carries the content check as salted-commitment fields with no text — a notable data-availability caveat. It stops short of describing lookup-failure behavior (unknown hash, unanchored record) or output shape details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.