So far it seems like you need to have a 501c3 nonprofit corp., possibly lots of patients who signed a statement that you are their caregiver (renewed yearly), a District Atty. on your side or at least the local sheriff. There is a bit of grey area whether or not you can have recommendations out of the county you grow in. Ample security and of course the rest of the 501c3 regulations. Oh yeah, a very precise paper trail concerning the money.
But...people obviously sell their extra medicine to clubs, so you can go to one, show them a pound or an ounce of hash and see what they think. If they like, you can be registered as a vendor, and be reported to the IRS in the form of a 1099. Both quasi legal so far?