Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose the underlying mechanism (ChangeHistoryService), implying the operation is session-scoped and only affects editor-tracked changes. However, it says nothing about failure modes, whether the undo is reversible via redo, or whether it interleaves with other agents' changes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.