Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructive/openWorld/non-readOnly, but the description adds real behavioral detail: the call consumes a stored plan keyed by approval_ref and expected_plan_digest, rejects other operation kinds before reserving or applying anything, and can affect ad spend. That is meaningful context beyond the structured fields, though reversibility is still unstated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.