Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/non-destructive/open-world, and the description adds a great deal on top: verdict semantics (GO/REVIEW/STOP), a fail-safe rule ('A vector that could not be read is unknown, never clear'), and invocation economics (x402 on Base, $0.06/call, prepaid header for unlimited, 1 free call/day, no API key). Cost, auth and rate-limit behavior are all disclosed, which is exactly the beyond-annotation context that matters.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.