Hey, Google! It's time to redeem your promise.
Almost four years ago the Google blog post on Pixel 3's Titan M [1] stated:
In the coming months, the security community will be able to audit Titan through its open-source firmware.
However, as of today, the source code still is not available to the (security) community.
[1] https://blog.google/products/pixel/titan-m-makes-pixel-3-our-most-secure-phone-yet/