7 cases: zero postId or requesterId -> BadRequest; unknown post is idempotent no-op; author can delete own post; admin can delete anyone's post; non-author non-admin -> ForbiddenException; forbidden attempts leave post intact.
