Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, open-world, non-destructive, so the bar is lower, yet the description adds substantial behavioral detail: it fetches the record from the ledger and the key from a /.well-known endpoint (explaining the openWorldHint), then recomputes five explicit checks — hash match, closed shape, key listing for heights, Ed25519 verification, and anchor status. It also states the negative guarantee that no content, scope, or answer text is present, which matters for a verifiability tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.