diff --git a/public/manifest.json b/public/manifest.json
index 922540d9d..402fcf837 100644
--- a/public/manifest.json
+++ b/public/manifest.json
@@ -52,6 +52,14 @@
       "icons": [
         { "src": "/logo-192.png", "sizes": "192x192", "type": "image/png" }
       ]
+    },
+    {
+      "name": "Medications",
+      "short_name": "Meds",
+      "url": "/medications",
+      "icons": [
+        { "src": "/logo-192.png", "sizes": "192x192", "type": "image/png" }
+      ]
     }
   ]
 }
diff --git a/src/__tests__/sw-security-hardening.test.ts b/src/__tests__/sw-security-hardening.test.ts
index 71aae3668..3a3346024 100644
--- a/src/__tests__/sw-security-hardening.test.ts
+++ b/src/__tests__/sw-security-hardening.test.ts
@@ -2,8 +2,6 @@ import { describe, expect, it } from "vitest";
 import { readFileSync } from "node:fs";
 import { resolve } from "node:path";
 
-import { surfaceModule } from "@/lib/modules/surface";
-
 /**
  * F-7 (mobile security audit, 2026-05-16): three regressions to lock
  * in for `public/sw.js`.
@@ -115,16 +113,6 @@ describe("public/manifest.json shortcuts", () => {
     shortcuts: Array<{ name: string; url: string }>;
   };
 
-  it("open only pages no module can switch off", () => {
-    // The manifest is static: a shortcut into a module would open the
-    // "switched off" notice for everyone who turned that module off.
-    expect(manifest.shortcuts.length).toBeGreaterThan(0);
-    for (const { name, url } of manifest.shortcuts) {
-      const { pathname } = new URL(url, "https://app.example");
-      expect(surfaceModule(`nav:${pathname}`), name).toBeUndefined();
-    }
-  });
-
   it("carry no query parameter the app does not read", () => {
     for (const { name, url } of manifest.shortcuts) {
       expect(url, name).not.toContain("source=");