Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly=false, destructive=true, openWorld=true), the description discloses specific side effects: creating escrow, funding it on-chain in USDC, and executing the task. This gives an agent concrete knowledge of the financial and state-changing behaviors involved, which is exactly the kind of context annotations alone cannot convey. No contradiction with annotations is present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.