Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly/idempotent/non-destructive/openWorld), the description adds substantial behavior: login is required, the corpus excludes model-generated or third-party content, it does not constitute proof of accomplishments, recent corrections outrank older statements, and results are bounded. This is exactly the kind of context annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.