Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does contribute two genuine behavioral facts: chronological ordering and a prompt-injection warning that customer-authored content must be treated as data, which is valuable beyond any structured field. It does not disclose pagination/limits, whether the call is read-only, permission requirements, or behavior on an empty or unknown conversation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.