Solution (source code)

= Solution

The definition of $\varphi$-closure forms
$$
s_V=\{z\in x:V\models\varphi(z)\},
$$
whereas the <axiom schema of specification> inside $(M,\in)$ requires
$$
s_M=\{z\in x:M\models\varphi(z)\}.
$$
An arbitrary formula need not be absolute between a transitive class and the ambient universe, so $s_V$ and $s_M$ can differ. Closure under $s_V$ therefore supplies no reason for the required set $s_M$ to belong to $M$.