Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate a non-read-only, non-destructive, non-idempotent operation. The description adds the 'via email' detail, which aligns with openWorldHint. However, it does not disclose side effects like marking the invoice as sent or whether repeated calls send duplicate emails.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.