Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the operation is read-only, idempotent and non-destructive, so the safety profile is covered. The description adds genuine domain behaviour beyond that: the accrual rate, the annual cap and the explicit capped_at_max / days_to_max semantics, which tell the agent what the computation does rather than merely that it is safe.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.