Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces the safety profile with 'never pays or changes an invoice', which is meaningful for an invoicing domain where mutation is plausible. It does not cover error behavior for a missing id or pagination-like concerns, so it stops short of full disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.