Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral transparency. It informs that the map is from 'status name -> encrypted id', which adds some value, but does not disclose whether the operation is read-only, requires authentication, or any side effects. The output schema exists but the description does not explain the return format beyond the mapping.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.