Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/destructive/openWorld, but the description adds substantial behavioral context beyond them: the walk-back is explicitly bounded ('never a bulk crawl'), the matching heuristic is disclosed, and it honestly reports `prior_filing_found: false` when no prior filing or a pre-structured-XML chain is found. This is exactly the kind of edge-case and failure-mode disclosure that structured annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.