Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, and open-world behavior, so the safety profile is known. The description adds meaningful semantics beyond that: the output is planning evidence, and entries flagged implemented=false are not callable tools — a critical interpretation rule the annotations cannot express. It doesn't describe the shape of the evidence/gap records, but the core behavioral caveat is disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.