CAN - bus off error recovery
I believe you are correct in understanding that the bus is looking for nonconsecutive occurrences; I read through the Bus Off Error Recovery portion of this CAN example. The bus is looking for a total of 128 occurrences in total to pass before recovering, not necessarily in a consecutive sequence.