Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this as a read-only, closed-world operation. The description adds useful domain context by naming RFC 6962 and describing the proof as an audit path, but it does not disclose error conditions, output shape, or edge cases such as `index` exceeding `tree_size`.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.