Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It usefully discloses that steps have three states, that a next-step recommendation is included, and that steps are advisory rather than blocking. It does not state that the call is read-only/no side effects, nor anything about permissions or ordering, which leaves the mutation-vs-read question implicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.