Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive. The description adds real context beyond them: the rules are human-controlled and cannot be modified via the API, and circumventing them via another inbox is forbidden. It doesn't describe what the policy response contains, but with an output schema present that is acceptable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.