Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are absent, so the description carries the full behavioral burden and delivers only "append", which establishes write semantics but nothing else. It does not say whether the note persists, who or what reads it back (agents? the router?), whether notes are ordered or mutable, whether repeat calls duplicate, or whether any permission is needed. For a mutation into shared "routing memory", these omissions matter.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.