Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint=true, and the description adds substantial behavior: cross-event 404, ID documents never decrypted, admin reveal requires audit, phone numbers masked to the last 4 digits unless self-entered on this form, and an instruction not to proactively repeat contact data. These are genuine additions beyond the annotation, though the description does not describe response shape or field-level masking output.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.