Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare a non-read-only, non-idempotent, non-destructive local operation, so the bar is lowered; the description still adds real behavior: the ROUTE_REQUIRED outcome and its required recovery call, the fact that separate instruction blocks are returned, and the protocol version contract. It does not say what state is mutated or whether repeated routing re-activates a persona, which would round this out.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.