Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate the tool is not read-only, is open-world, is idempotent, and is non-destructive. The description adds the context of 'pinned local', which is a specific behavioral constraint, but does not disclose additional traits such as failure behavior when no endpoint is pinned. It does not contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.