Appears that this site is where US cannabis manufactures, distributers, and dispensaries can apply for a permit in regards to the US controlled substance act.

http://www.deadiversion.usdoj.gov/online_forms_apps.html

RiverRock should get a US permit if they want to be 100% legal.

River Rock's blog.

http://riverrockcompliancecorner.wordpress.com/2013/05/13/regulatory-and-criminal-options-in-medical-cannabis-control/

Federal Response

A review of the criminal law relating to marijuana leaves no room for doubt that state medical marijuana laws are of minimal consequence to federal courts and federal prosecutors. Notwithstanding, U.S. Attorneys are not without guidance and certain critical prosecutorial interests have been identified.(11) In practice, choice of forum remains a strategic and policy exercise predicated by enforcement priorities and political shifts.

Most recently in reaction to legitimate concerns expressed by many as to the direct or indirect effect of medical cannabis laws on youth, the Colorado U.S.Attorney has begun enforcement of 21USC § 860 (12) as it relates to the medical marijuana businesses exempted from the 1000 foot setback requirement of the CMMC.(13)

Despite federal supremacy, Coloradoʼs police powers to regulate the health, economic and social welfare of its people (14) are an important consequences of federal system. Though its powers are broad, the federal government cannot eliminate the independent lawmaking authority of states. No kind of conduct is categorically beyond the boundaries of state or federal jurisdiction. The overlapping power of state and federal government promotes plurality, dialogue and offers a myriad of criminal and regulatory options for medical marijuana control.