Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish that this is a non-read-only, non-destructive, non-idempotent, closed-world mutation, so the safety profile is covered. The description adds genuinely new behavior: 'Top protects booked tickets' and 'lowering a tier never removes protection' explain side effects the annotations cannot express. It stops short of disclosing whether a change notifies the user, whether notes overwrite existing notes, or why the operation is not idempotent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.