Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses two behavioral traits: the operation is one-time ('once') and it refuses to run when unseeded inventory exists. However, it does not clarify side effects (e.g., whether it wipes existing data), idempotency, or exactly what happens when the refusal is triggered. Some transparency is present, but significant behavioral gaps remain.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.