CoSimRec: Measuring Coordinated-Content Penetration in Recommender Feedback Loops

Recommender systems shape which content reaches users, making it important to measure whether coordinated activity gains visibility beyond the accounts that initiate it. Existing robustness evaluations largely focus on static target-rank changes and do not capture how coordinated interactions, recommendation, and user response evolve within a feedback loop. We propose CoSimRec, an offline agent-based evaluation framework that models coordinated accounts, dynamic ranking, controlled non-bot responses, and ranking interventions in a shared closed-loop process. CoSimRec introduces the Algorithmic Penetration Rate (APR) metric family: exposure APR is the primary endpoint, while behavior APR is a response-model-conditional sensitivity measure; both can be compared with matched no-attack baselines. We evaluate CoSimRec on MIND, MovieLens, and LastFM with random, popularity-based, feedback-sensitive, MF, BPR-MF, and BPR-LightGCN recommenders. In a risk-blind primary protocol, random controls show no statistically supported positive penetration, whereas popularity-based and feedback-sensitive ranking produce positive APR-Lift in all six master-worker settings, reaching 0.4702 on LastFM. A nine-target MovieLens 1M LightGCN stress test shows positive mean APR-Lift around 25\% injection in all three target-popularity strata, while no-filler profiles remain near zero. Under these controlled conditions, coordinated inputs reach non-bot recommendation slots, providing evidence of a computational pathway from organized activity to audience-level visibility.