Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructive and idempotent behavior, but the description adds concrete effects the agent cannot infer: status becomes `delisted`, visibility becomes `private`, the row and R2 artifact are preserved, and a 90-day audit window applies. It also confirms idempotency with a specific example. This is substantial behavioral context beyond structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.