Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), but the description adds substantive behavioral context: the proposals 'have not been applied', the returned evidence fields, and the 'cite only sources supporting the proposed outcome' constraint. It stops short of documenting pagination or limits on the returned set.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.