Specifications need to explicitly address the changes to EHR control objects property values, such as EHR_STATUS.is_modifiable.
In ehr_im.pdf file, page 28, last paragraph, it says "...In a normal implementation, the EHR Status and EHR Access objects would normally be created and committed in a Contribution, just as any Composition would be."
EHR_STATUS.is_modifiable: "True if the EHR is allowed to be written to". In another word, if EHR_STATUS.is_modifiable is false, this EHR doesn't allow contributions committed. It also implicitly implies that once EHR_STATUS.is_modifable is set to false, this value cannot be reset back to true through contribution. This is a problem since EHR_STATUS.is_modifiable should be set to either true or false when it is required.
(Associated email messages can be found in comments.)