Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=false and readOnlyHint=false, so safety is covered structurally. The description adds genuine behavioral detail beyond that: the refusal conditions and which run states are eligible. It does not explain the side effects or cost of a re-run, so it is not fully complete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.