Think of GrapheneOS as being a set of patches on top of the Android Open Source Project that Google releases:

https://source.android.com/

They've ported the patches to work on top of the latest release.