Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry behavioral disclosure on its own. It states the core behavior and result, but it does not disclose failure behavior (e.g., invalid hash), whether verification is read-only, or any token lifecycle/expiry. These are gaps, but the main operation is still transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.