The MIPS and RISC-V CHERI implementations are open, you can audit the BlueSpec. The entire software stack is open too.

Note however that CHERI is not just an implementation; it’s a design, an idea. You can’t backdoor that.