Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations, yet the description discloses everything material: secrets are never included, disabled reason follows 10 consecutive failures, skipped deliveries for empty balance don't count, and an aanet.system message is emitted on auto-disable. That is rich behavioral context that annotations would normally carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.