Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must fully disclose behavior, but it only says 'Read', which implies safety, and mentions 'bounded' and 'final evidence receipt'. It doesn't state whether polling is safe to repeat, rate limits, what happens to the job state, or the return format. The lack of output schema makes this a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.