Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity — a bipartite user↔item communication mesh, synced to a per-agent memory/decision scrubber, across the 5 canonical settings (candidate count k × catalog density). Nodes and edges are color-coded: benign, benign-but-compromised, attacker.
A poisoned-item payload spreads through the mesh; benign users/items get "infected" and start repeating it. Watch contagion velocity vs. k and density.
Attacker items/users chat up victims to harvest PII (name, email, location, birthday…). Select an attacker to see its harvested dossier; select a victim to see what it handed over.