Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, but it does disclose the core behavior: it recomputes a root and reports a byte-level integrity verdict, implying a non-destructive read. It omits auth requirements, what happens on mismatch, and whether a failure is returned as an error or a boolean, leaving meaningful gaps for a security-sensitive tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.