Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden. It does add real behavioral content: it only surfaces *verified* session data, degrades to project status when unbound, and explicitly refuses to infer other sessions — a useful guardrail against hallucinated cross-session context. It omits whether the call is strictly read-only, any permission/auth requirements, and what the returned shape looks like, so the disclosure is partial rather than complete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.