Play should stop at the first break in play after “official” time is up.
This will be the final window for substitutions.
The amount of additional time will be announced before play resumes. Referee can extend additional time in case of time-wasting. No further subs allowed...not even in case of injury.
Tough, but fair.