Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld, so the safety profile is covered; the description adds genuine context by previewing the domain content of the response (rights, consumption rules, EOL date, lifecycle stage), which matters since there is no output schema. It does not say what happens when sys_id is unknown or the record is absent, which is the main remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.