Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It does disclose real side effects by naming the sequence (seeds state, deliberately breaks a rule, then restores it), which tells the agent this mutates data rather than merely observes. However, it says nothing about reversibility, whether it touches shared/production state, auth requirements, or idempotency — all material for a demo that writes data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.