Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry behavioral disclosure. It adds two meaningful traits beyond the schema: 'Manager-only' signals an authorization requirement, and 'guarded' implies precondition or transition validation. However, it does not specify allowed transitions, side effects, reversibility, or what the guard actually enforces, leaving significant gaps for a lifecycle mutation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.