The good-faith exam is the gate. It's the medical evaluation that establishes a treatment is appropriate for a specific patient before that patient is treated, and it's one of the foundational things that separates injectables-as-medicine-done-properly from injectables-as-unlicensed-practice. Almost every practice has a policy describing a good-faith exam. Far fewer have a workflow that would actually survive a regulator asking to see exactly how a specific patient was cleared before a specific treatment — and the gap between the policy and the workflow is where the exposure lives.
This is general education for owners, not legal or medical advice. Good-faith-exam requirements are state-specific; build your workflow with your medical director and counsel.