Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/destructive, but the description adds substantially more: 'Cannot spend money,' the shape of returned data (source, URL, what it may be cited FOR), and the critical epistemic caveat that a vector search 'always returns its nearest neighbour, so it always looks confident; nearness is not correctness.' That is real behavioral context beyond structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.