Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, readOnlyHint=false, openWorldHint=false, and the description goes beyond them by describing state-dependent behavior: claimed plans return original recovery references, and submitted tasks are unaffected. That scoping of blast radius is genuinely useful, though the 'recovery references' return semantics remain vague.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.