@steve In ActivityPub, it can't:
If an Activity is submitted with a value in the id property, servers MUST ignore this and generate a new id for the Activity.
-- https://www.w3.org/TR/activitypub/#client-to-server-interactions
But if the server is not strictly compliant, then yes, it can treat the object as an inbox delivery and retrieve it from origin.